oh-my-super-agent 0.1.0

package/dist/src/queue/model.d.ts

@@ -0,0 +1,37 @@
+export declare const MAX_QUEUE_ATTEMPTS = 3;
+export type TicketState = "pending" | "leased" | "running" | "verifying" | "retryable" | "parked" | "blocked" | "completed";
+export type TicketResumeState = "pending" | "retryable";
+export type TicketResumeGate = {
+    kind: "time";
+    role_id: null;
+    engine: null;
+    session_id: null;
+    limited_session_version: null;
+    limited_observation_id: null;
+    limited_observed_at: null;
+} | {
+    kind: "quota";
+    role_id: string;
+    engine: "claude" | "codex";
+    session_id: string;
+    limited_session_version: number;
+    limited_observation_id: string;
+    limited_observed_at: string;
+};
+export interface QueueLifecycleFields {
+    lifecycle_updated_at: string;
+    lease_expires_at: string | null;
+    resume_at: string | null;
+    resume_state: TicketResumeState | null;
+    park_reason: string | null;
+    resume_gate: TicketResumeGate | null;
+    session_id: string | null;
+    last_error: string | null;
+}
+export declare function initialQueueLifecycle(at: string): QueueLifecycleFields;
+export declare function canonicalTimestamp(value: string, label: string): string;
+export declare function assertTimestamp(value: string, label: string): number;
+export declare function isTicketState(value: string): value is TicketState;
+export declare function isActiveTicketState(value: TicketState): boolean;
+export declare function isIdleTicketState(value: TicketState): boolean;
+export declare function isTerminalTicketState(value: TicketState): boolean;

package/dist/src/queue/model.js

@@ -0,0 +1,51 @@
+export const MAX_QUEUE_ATTEMPTS = 3;
+const ACTIVE_STATES = new Set(["leased", "running", "verifying"]);
+const IDLE_STATES = new Set(["pending", "retryable"]);
+const TERMINAL_STATES = new Set(["blocked", "completed"]);
+export function initialQueueLifecycle(at) {
+    return {
+        lifecycle_updated_at: canonicalTimestamp(at, "initial lifecycle timestamp"),
+        lease_expires_at: null,
+        resume_at: null,
+        resume_state: null,
+        park_reason: null,
+        resume_gate: null,
+        session_id: null,
+        last_error: null,
+    };
+}
+export function canonicalTimestamp(value, label) {
+    if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/.test(value)) {
+        throw new Error(`invalid ${label}`);
+    }
+    const epoch = Date.parse(value);
+    const canonical = Number.isFinite(epoch) ? new Date(epoch).toISOString() : "";
+    if (canonical !== normalizeTimestamp(value))
+        throw new Error(`invalid ${label}`);
+    return canonical;
+}
+export function assertTimestamp(value, label) {
+    const canonical = canonicalTimestamp(value, label);
+    if (canonical !== value)
+        throw new Error(`${label} must use canonical ISO milliseconds`);
+    return Date.parse(canonical);
+}
+export function isTicketState(value) {
+    return value === "parked"
+        || ACTIVE_STATES.has(value)
+        || IDLE_STATES.has(value)
+        || TERMINAL_STATES.has(value);
+}
+export function isActiveTicketState(value) {
+    return ACTIVE_STATES.has(value);
+}
+export function isIdleTicketState(value) {
+    return IDLE_STATES.has(value);
+}
+export function isTerminalTicketState(value) {
+    return TERMINAL_STATES.has(value);
+}
+function normalizeTimestamp(value) {
+    return value.includes(".") ? value : value.replace("Z", ".000Z");
+}
+//# sourceMappingURL=model.js.map

package/dist/src/queue/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/queue/model.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AA6CpC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AACnE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvE,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,OAAO;QACL,oBAAoB,EAAE,kBAAkB,CAAC,EAAE,EAAE,6BAA6B,CAAC;QAC3E,gBAAgB,EAAE,IAAI;QACtB,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAa;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,oDAAoD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,IAAI,SAAS,KAAK,kBAAkB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IACjF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,KAAa;IAC1D,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,SAAS,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,KAAK,QAAQ;WACpB,aAAa,CAAC,GAAG,CAAC,KAAoB,CAAC;WACvC,WAAW,CAAC,GAAG,CAAC,KAAoB,CAAC;WACrC,eAAe,CAAC,GAAG,CAAC,KAAoB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACpD,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAkB;IACtD,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC"}

package/dist/src/queue/service.d.ts

@@ -0,0 +1 @@
+export { createTicketLifecycleService, type BeginVerificationInput, type CompleteTicketInput, type ExpectedTicketMutation, type FailAttemptInput, type LeaseTicketInput, type ParkTicketInput, type PrepareTicketInput, type QueueMutationResult, type ResumeTicketInput, type TicketQueueRecord, } from "../tickets/store.js";

package/dist/src/queue/service.js

@@ -0,0 +1,2 @@
+export { createTicketLifecycleService, } from "../tickets/store.js";
+//# sourceMappingURL=service.js.map

package/dist/src/queue/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/queue/service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,GAW7B,MAAM,qBAAqB,CAAC"}

package/dist/src/reflections/store.d.ts

@@ -0,0 +1,21 @@
+import { type EvidenceReference, type EvidenceStore, type EvidenceWriteResult } from "../evidence/store.js";
+import { type TicketMaterializer } from "../tickets/materializer.js";
+export interface ReflectionAdvice {
+    readonly failure: string;
+    readonly lesson: string;
+    readonly next_attempt: string;
+}
+export interface RecordReflectionOptions {
+    evidenceStore: EvidenceStore;
+    deterministicEvidence: EvidenceReference;
+    ticketMaterializer: TicketMaterializer;
+    advice: ReflectionAdvice;
+}
+export interface RecordFailureReflectionOptions {
+    evidenceStore: EvidenceStore;
+    failureEvidence: EvidenceReference;
+    ticketMaterializer: TicketMaterializer;
+    advice: ReflectionAdvice;
+}
+export declare function recordReflection(options: RecordReflectionOptions): EvidenceWriteResult;
+export declare function recordFailureReflection(options: RecordFailureReflectionOptions): EvidenceWriteResult;

package/dist/src/reflections/store.js

@@ -0,0 +1,60 @@
+import { assertEvidenceStore, writeTicketBoundEvidence, } from "../evidence/store.js";
+import { readDeterministicVerdict } from "../evidence/verdict.js";
+import { createStableId } from "../runtime/stable-id.js";
+import { assertTicketMaterializer, } from "../tickets/materializer.js";
+export function recordReflection(options) {
+    return recordFailureReflection({
+        evidenceStore: options.evidenceStore,
+        failureEvidence: options.deterministicEvidence,
+        ticketMaterializer: options.ticketMaterializer,
+        advice: options.advice,
+    });
+}
+export function recordFailureReflection(options) {
+    assertEvidenceStore(options.evidenceStore);
+    assertTicketMaterializer(options.ticketMaterializer);
+    const failure = options.evidenceStore.read(options.failureEvidence);
+    const deterministicEvidence = failure.evidence_kind === "grader-output"
+        ? failure.payload.deterministic_evidence
+        : options.failureEvidence;
+    const verdict = readDeterministicVerdict({
+        evidenceStore: options.evidenceStore,
+        deterministicEvidence,
+    });
+    if (failure.evidence_kind === "deterministic-check") {
+        if (verdict.passed)
+            throw new Error("deterministic reflection requires a failed check");
+    }
+    else if (failure.evidence_kind !== "grader-output"
+        || failure.payload.verdict !== "fail"
+        || failure.ticket_id !== verdict.ticket_id) {
+        throw new Error("reflection requires a failed deterministic check or failed grade");
+    }
+    const evidenceId = createStableId("reflection", options.failureEvidence.evidence_id, options.failureEvidence.sha256);
+    return writeTicketBoundEvidence({
+        evidenceStore: options.evidenceStore,
+        ticketMaterializer: options.ticketMaterializer,
+        record: {
+            schema_version: 1,
+            evidence_id: evidenceId,
+            evidence_kind: "reflection",
+            ticket_id: verdict.ticket_id,
+            producer_role: "oms.bounded-dreamer",
+            created_at: failure.created_at,
+            payload: {
+                schema_version: 1,
+                ticket_id: verdict.ticket_id,
+                deterministic_evidence: verdict.deterministic_evidence,
+                failure_evidence: options.failureEvidence,
+                attempt: verdict.attempt,
+                advisory_only: true,
+                advice: {
+                    failure: options.advice.failure,
+                    lesson: options.advice.lesson,
+                    next_attempt: options.advice.next_attempt,
+                },
+            },
+        },
+    });
+}
+//# sourceMappingURL=store.js.map

package/dist/src/reflections/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/reflections/store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EAInB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EACL,wBAAwB,GAEzB,MAAM,4BAA4B,CAAC;AAsBpC,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,OAAO,uBAAuB,CAAC;QAC7B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,eAAe,EAAE,OAAO,CAAC,qBAAqB;QAC9C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAuC;IAC7E,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,wBAAwB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACpE,MAAM,qBAAqB,GAAG,OAAO,CAAC,aAAa,KAAK,eAAe;QACrE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAA2C;QAC7D,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAC5B,MAAM,OAAO,GAAG,wBAAwB,CAAC;QACvC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,qBAAqB;KACtB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,aAAa,KAAK,qBAAqB,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC1F,CAAC;SAAM,IACL,OAAO,CAAC,aAAa,KAAK,eAAe;WACtC,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,MAAM;WAClC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAC/B,YAAY,EACZ,OAAO,CAAC,eAAe,CAAC,WAAW,EACnC,OAAO,CAAC,eAAe,CAAC,MAAM,CAC/B,CAAC;IAEF,OAAO,wBAAwB,CAAC;QAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,MAAM,EAAE;YACN,cAAc,EAAE,CAAC;YACjB,WAAW,EAAE,UAAU;YACvB,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,qBAAqB;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE;gBACP,cAAc,EAAE,CAAC;gBACjB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;gBACtD,gBAAgB,EAAE,OAAO,CAAC,eAAe;gBACzC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,IAAI;gBACnB,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;oBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;oBAC7B,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY;iBAC1C;aACF;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/src/reports/daily-trust.d.ts

@@ -0,0 +1,11 @@
+import type { EvidenceStore, EvidenceWriteResult } from "../evidence/store.js";
+export interface WriteDailyTrustReportOptions {
+    evidenceStore: EvidenceStore;
+    utcDate: string;
+    packageRoot?: string;
+}
+export interface DailyTrustReportResult extends EvidenceWriteResult {
+    absolute_path: string;
+}
+export declare function writeDailyTrustReport(options: WriteDailyTrustReportOptions): DailyTrustReportResult;
+export declare function trustReportEvidenceId(utcDate: string, policyDigest: string, gateDigest: string): string;

package/dist/src/reports/daily-trust.js

@@ -0,0 +1,98 @@
+import { assertEvidenceStore } from "../evidence/store.js";
+import { findPackageRoot } from "../package-root.js";
+import { createStableId } from "../runtime/stable-id.js";
+import { assessTrust } from "../trust/assessment.js";
+import { loadTrackedTrustPolicyIdentity } from "../trust/runs.js";
+import { freezeTrackedVerificationPlan } from "../verification/plan.js";
+const UTC_DATE_PATTERN = /^([0-9]{4})-([0-9]{2})-([0-9]{2})$/;
+export function writeDailyTrustReport(options) {
+    assertEvidenceStore(options.evidenceStore);
+    const closedAt = closedAtForUtcDate(options.utcDate);
+    if (Date.now() < Date.parse(closedAt))
+        throw new Error("daily trust report requires a closed UTC date");
+    const packageRoot = options.packageRoot ?? findPackageRoot();
+    const policy = loadTrackedTrustPolicyIdentity(packageRoot);
+    const gateDigest = freezeTrackedVerificationPlan(packageRoot).digest;
+    const openedAt = `${options.utcDate}T00:00:00.000Z`;
+    const openedEpoch = Date.parse(openedAt);
+    const closedEpoch = Date.parse(closedAt);
+    const references = options.evidenceStore.references("trust-run")
+        .filter((reference) => {
+        const createdAt = Date.parse(options.evidenceStore.read(reference).created_at);
+        return createdAt >= openedEpoch && createdAt < closedEpoch;
+    })
+        .sort(compareEvidenceReferences);
+    const runs = references.map((reference) => trustRunSummary(options.evidenceStore, reference));
+    const assessment = assessTrust({
+        policy_version: policy.policy_version,
+        policy_digest: policy.policy_digest,
+        gate_digest: gateDigest,
+        runs,
+    });
+    const evidenceId = trustReportEvidenceId(options.utcDate, policy.policy_digest, gateDigest);
+    const written = options.evidenceStore.write({
+        schema_version: 1,
+        evidence_id: evidenceId,
+        evidence_kind: "trust-report",
+        ticket_id: null,
+        producer_role: "oms.system",
+        created_at: closedAt,
+        payload: {
+            schema_version: 1,
+            utc_date: options.utcDate,
+            closed_at: closedAt,
+            policy_version: policy.policy_version,
+            policy_digest: policy.policy_digest,
+            gate_digest: gateDigest,
+            trust_run_evidence: references,
+            assessment,
+            review_only: true,
+        },
+    });
+    return {
+        ...written,
+        absolute_path: options.evidenceStore.absolutePath(written.ref),
+    };
+}
+export function trustReportEvidenceId(utcDate, policyDigest, gateDigest) {
+    closedAtForUtcDate(utcDate);
+    if (!/^[a-f0-9]{64}$/.test(policyDigest))
+        throw new Error("invalid trust report policy digest");
+    if (!/^[a-f0-9]{64}$/.test(gateDigest))
+        throw new Error("invalid trust report gate digest");
+    return createStableId("trust-report", utcDate, policyDigest, gateDigest);
+}
+function trustRunSummary(evidenceStore, reference) {
+    const record = evidenceStore.read(reference);
+    if (record.evidence_kind !== "trust-run")
+        throw new Error("daily trust report requires trust-run evidence");
+    return {
+        run_id: record.payload.run_id,
+        policy_version: record.payload.policy_version,
+        policy_digest: record.payload.policy_digest,
+        gate_digest: record.payload.gate_digest,
+        deterministic_passed: record.payload.deterministic_passed,
+    };
+}
+function compareEvidenceReferences(left, right) {
+    return compareText(left.evidence_id, right.evidence_id)
+        || compareText(left.sha256, right.sha256)
+        || compareText(left.file_name, right.file_name);
+}
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function closedAtForUtcDate(value) {
+    const match = UTC_DATE_PATTERN.exec(value);
+    if (!match)
+        throw new Error("invalid daily trust report UTC date");
+    const year = Number(match[1]);
+    const month = Number(match[2]);
+    const day = Number(match[3]);
+    const start = new Date(Date.UTC(year, month - 1, day));
+    if (start.getUTCFullYear() !== year || start.getUTCMonth() !== month - 1 || start.getUTCDate() !== day) {
+        throw new Error("invalid daily trust report UTC date");
+    }
+    return new Date(start.getTime() + 24 * 60 * 60 * 1_000).toISOString();
+}
+//# sourceMappingURL=daily-trust.js.map

package/dist/src/reports/daily-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daily-trust.js","sourceRoot":"","sources":["../../../src/reports/daily-trust.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAwB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAExE,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAY9D,MAAM,UAAU,qBAAqB,CAAC,OAAqC;IACzE,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAExG,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,eAAe,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,OAAO,gBAAgB,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC;SAC7D,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/E,OAAO,SAAS,IAAI,WAAW,IAAI,SAAS,GAAG,WAAW,CAAC;IAC7D,CAAC,CAAC;SACD,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG,WAAW,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,UAAU;QACvB,IAAI;KACL,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;QAC1C,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,UAAU;QACvB,aAAa,EAAE,cAAc;QAC7B,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,YAAY;QAC3B,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE;YACP,cAAc,EAAE,CAAC;YACjB,QAAQ,EAAE,OAAO,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ;YACnB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,WAAW,EAAE,UAAU;YACvB,kBAAkB,EAAE,UAAU;YAC9B,UAAU;YACV,WAAW,EAAE,IAAI;SAClB;KACF,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,OAAO;QACV,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,YAAoB,EAAE,UAAkB;IAC7F,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC5F,OAAO,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,aAA4B,EAAE,SAA4B;IACjF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,aAAa,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC5G,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAgB;QACvC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAwB;QACvD,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAuB;QACrD,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAqB;QACjD,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,oBAA+B;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAuB,EAAE,KAAwB;IAClF,OAAO,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC;WAClD,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;WACtC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,cAAc,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK,GAAG,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACxE,CAAC"}

package/dist/src/runs/controller.d.ts

@@ -0,0 +1,187 @@
+import { type AppendRunEntryInput, type RunKind, type RunLedgerMetrics, type RunLedgerStore, type RunLedgerWriteResult } from "../audit/run-ledger.js";
+import { type ServiceManager } from "../schedule/service-plan.js";
+import type { TicketQueueRecord } from "../tickets/store.js";
+declare const RUN_TICKET_ADMISSION: unique symbol;
+export interface TicketAdmissionSnapshot {
+    readonly ticket_id: string;
+    readonly initial_version: number;
+    readonly initial_attempt: number;
+    readonly initial_state: Exclude<TicketQueueRecord["state"], "completed">;
+    readonly source_ref_sha256: string;
+    readonly content_sha256: string;
+    readonly policy_version: number;
+    readonly policy_digest: string;
+    readonly gate_digest: string | null;
+}
+export interface RunStartIntent {
+    readonly schema_version: 1;
+    readonly intent_id: string;
+    readonly operation_id: string;
+    readonly start_nonce: string;
+    readonly expected_run_id: string;
+    readonly run_kind: RunKind;
+    readonly manager: ServiceManager;
+    readonly executable_path: string;
+    readonly created_at: string;
+    readonly policy_digest: string;
+    readonly verification_gate_digest: string;
+    readonly ticket_set_digest: string;
+    readonly service_plan_digest: string;
+    readonly service_plan_directory: string;
+    readonly state_root: string;
+    readonly workspace_root: string;
+    readonly ticket_snapshot: readonly TicketAdmissionSnapshot[];
+}
+export interface RunManifest {
+    readonly schema_version: 1;
+    readonly manifest_id: string;
+    readonly run_id: string;
+    readonly run_kind: RunKind;
+    readonly start_intent_id: string;
+    readonly created_at: string;
+    readonly policy_digest: string;
+    readonly verification_gate_digest: string;
+    readonly ticket_set_digest: string;
+    readonly service_plan_digest: string;
+    readonly service_plan_directory: string;
+    readonly state_root: string;
+    readonly workspace_root: string;
+    readonly selected_ticket_ids: readonly string[];
+    readonly ticket_snapshot: readonly TicketAdmissionSnapshot[];
+    readonly provider_started: false;
+    readonly manual_conductor_start_required: true;
+    readonly certifying: false;
+    readonly release: "not_stable";
+    readonly merge_disposition: "human_hold";
+}
+export type ConductorRouteAction = "human-start-required" | "await-native-hook" | "wait-resume" | "human-hold" | "queue-empty";
+export interface ConductorRoute {
+    readonly schema_version: 1;
+    readonly decision_id: string;
+    readonly operation_nonce: string;
+    readonly run_id: string;
+    readonly ticket_id: string | null;
+    readonly ticket_version: number | null;
+    readonly ticket_attempt: number | null;
+    readonly ticket_state: Exclude<TicketQueueRecord["state"], "completed"> | null;
+    readonly policy_digest: string;
+    readonly gate_digest: string | null;
+    readonly action: ConductorRouteAction;
+    readonly eligible_role_ids: readonly ("oms.ticket-executor" | "oms.goal-long-executor")[];
+    readonly evidence_paths: readonly string[];
+    readonly manual_start_required: boolean;
+    readonly provider_started: false;
+    readonly reason: string;
+}
+export interface RunControllerStatus {
+    readonly manifest: RunManifest;
+    readonly audit: RunLedgerMetrics;
+    readonly ticket_counts: Readonly<Record<string, number>>;
+    readonly provider_started: false;
+    readonly certifying: false;
+    readonly release: "not_stable";
+    readonly human_hold: true;
+    readonly next_action: "none" | "run-tick" | "manual-conductor" | "await-native-hook" | "wait-resume" | "human-hold" | "observe";
+}
+export interface RunTicketAdmissionGate {
+    readonly [RUN_TICKET_ADMISSION]: true;
+    readonly run_id: string;
+    readonly ticket_id: string;
+    readonly manifest_id: string;
+}
+export interface RunControllerRecoveryResult {
+    readonly recovered: true;
+    readonly lock_id: "run-controller";
+    readonly generation_id: string;
+    readonly recovered_by: string;
+    readonly previous_process_id: number;
+    readonly recovery_evidence_path: string;
+}
+export declare function startAuditRun(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+    workspaceRoot: string;
+    executablePath: string;
+    manager: ServiceManager;
+    runKind: RunKind;
+}): Readonly<{
+    status: "created" | "replayed";
+    manifest: RunManifest;
+}>;
+export declare function conductorNext(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+    runId: string;
+}): Readonly<{
+    status: "created" | "replayed";
+    decision: ConductorRoute;
+    absolute_path: string;
+}>;
+export declare function tickAuditRun(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+    runId: string;
+}): Readonly<{
+    status: RunControllerStatus;
+    route: ConductorRoute | null;
+}>;
+export declare function closeTimedAuditRun(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+    runId: string;
+}): RunControllerStatus;
+export declare function abortAuditRun(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+    runId: string;
+    reason: string;
+}): RunControllerStatus;
+export declare function recoverRunControllerAuthority(options: {
+    packageRoot: string;
+    stateRoot: string;
+    expectedGenerationId: string;
+    reason: string;
+}): RunControllerRecoveryResult;
+export declare function readRunStatus(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+    runId: string;
+}): RunControllerStatus;
+export declare function listRunStatuses(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+}): readonly RunControllerStatus[];
+export declare function assertRunTicketAdmission(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+    runId: string;
+    ticket: TicketQueueRecord;
+}): RunTicketAdmissionGate;
+export declare function findActiveRunTicketAdmission(options: {
+    packageRoot: string;
+    configRoot: string;
+    stateRoot: string;
+    ticket: TicketQueueRecord;
+}): RunTicketAdmissionGate | null;
+export declare function assertRunCurrentAuthority(manifest: RunManifest, configRoot: string): void;
+export declare function assertRunTicketAdmissionGate(value: unknown): asserts value is RunTicketAdmissionGate;
+/**
+ * Appends one audit-only event while preserving process continuity across
+ * short-lived CLI invocations. The head compare-and-swap keeps a restart
+ * marker adjacent to the first event from its process.
+ */
+export declare function appendRunAuditEvent(ledger: RunLedgerStore, input: Omit<AppendRunEntryInput, "entryKind"> & {
+    readonly entryKind: Exclude<AppendRunEntryInput["entryKind"], "process-restarted" | "run-completed" | "run-aborted">;
+}): RunLedgerWriteResult;
+export declare function readRunManifest(packageRoot: string, stateRoot: string, runId: string): RunManifest;
+export declare function assertRunManifestLedgerBinding(ledger: RunLedgerStore, manifest: RunManifest): void;
+export declare function withRunControllerAuthority<T>(stateRoot: string, operation: () => T): T;
+export {};