omk-agent-core 0.98.0 → 0.98.2

package/dist/harness/operation-lifecycle-reducer.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Pure transition function for the harness operation lifecycle.
+ *
+ * Given the current state and one command, returns the next state or a
+ * classified violation. It performs no side effects: it does not read a
+ * clock, allocate identifiers, emit events, flush sessions, or touch abort
+ * signals. The controller supplies all of those around it.
+ *
+ * The transition table encodes the plan's legal moves plus one documented
+ * conservative addition: `structural_running -> committing` marks the single
+ * declared commit point of a structural operation. Every other transition not
+ * listed here is rejected, and rejection never mutates the input state.
+ */
+import { type HarnessLifecycleCommand, type HarnessLifecycleResult, type HarnessLifecycleState } from "./operation-lifecycle-types.ts";
+type Result = HarnessLifecycleResult<HarnessLifecycleState>;
+export declare function initialHarnessLifecycleState(): HarnessLifecycleState;
+export declare function reduceHarnessLifecycle(state: HarnessLifecycleState, command: HarnessLifecycleCommand): Result;
+export {};
+//# sourceMappingURL=operation-lifecycle-reducer.d.ts.map

package/dist/harness/operation-lifecycle-reducer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-lifecycle-reducer.d.ts","sourceRoot":"","sources":["../../src/harness/operation-lifecycle-reducer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAK1B,MAAM,gCAAgC,CAAC;AAIxC,KAAK,MAAM,GAAG,sBAAsB,CAAC,qBAAqB,CAAC,CAAC;AAE5D,wBAAgB,4BAA4B,IAAI,qBAAqB,CAEpE;AAkOD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,uBAAuB,GAAG,MAAM,CAqB7G","sourcesContent":["/**\n * Pure transition function for the harness operation lifecycle.\n *\n * Given the current state and one command, returns the next state or a\n * classified violation. It performs no side effects: it does not read a\n * clock, allocate identifiers, emit events, flush sessions, or touch abort\n * signals. The controller supplies all of those around it.\n *\n * The transition table encodes the plan's legal moves plus one documented\n * conservative addition: `structural_running -> committing` marks the single\n * declared commit point of a structural operation. Every other transition not\n * listed here is rejected, and rejection never mutates the input state.\n */\n\nimport {\n\ttype HarnessLifecycleCommand,\n\ttype HarnessLifecycleResult,\n\ttype HarnessLifecycleState,\n\tHarnessLifecycleViolation,\n\ttype HarnessLifecycleViolationCode,\n\ttype HarnessOperationKind,\n\tPROMPT_FAMILY_KINDS,\n} from \"./operation-lifecycle-types.ts\";\n\ntype ActiveState = Extract<HarnessLifecycleState, { tag: \"active\" }>;\ntype OwnedState = Extract<HarnessLifecycleState, { tag: \"active\" | \"settling\" }>;\ntype Result = HarnessLifecycleResult<HarnessLifecycleState>;\n\nexport function initialHarnessLifecycleState(): HarnessLifecycleState {\n\treturn { tag: \"idle\", lastSequence: 0 };\n}\n\nfunction reject(\n\tcode: HarnessLifecycleViolationCode,\n\tmessage: string,\n\tstate: HarnessLifecycleState,\n\tcommand: HarnessLifecycleCommand,\n): HarnessLifecycleResult<never> {\n\treturn { ok: false, error: new HarnessLifecycleViolation(code, message, state, command) };\n}\n\nfunction isPromptFamily(kind: HarnessOperationKind): boolean {\n\treturn PROMPT_FAMILY_KINDS.includes(kind);\n}\n\nfunction notIdle(state: HarnessLifecycleState, command: HarnessLifecycleCommand, action: string): Result {\n\treturn reject(\"invalid_transition\", `Cannot ${action} without an active operation`, state, command);\n}\n\n/** Commands carrying an operationId must name the current operation. */\nfunction expectCurrentOperation(\n\tstate: OwnedState,\n\toperationId: string,\n\tcommand: HarnessLifecycleCommand,\n): HarnessLifecycleResult<OwnedState> {\n\tif (state.operation.operationId !== operationId) {\n\t\treturn reject(\n\t\t\t\"stale_operation\",\n\t\t\t`Command targets operation ${operationId} but current operation is ${state.operation.operationId}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn { ok: true, value: state };\n}\n\nfunction reduceBegin(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"begin\" }>,\n): Result {\n\tif (state.tag !== \"idle\") {\n\t\treturn reject(\"busy\", \"Cannot begin a new operation while another is active or settling\", state, command);\n\t}\n\tif (command.operation.sequence !== state.lastSequence + 1) {\n\t\treturn reject(\n\t\t\t\"sequence_violation\",\n\t\t\t`Operation sequence ${command.operation.sequence} is not lastSequence + 1 (${state.lastSequence + 1})`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn {\n\t\tok: true,\n\t\tvalue: { tag: \"active\", operation: command.operation, stage: \"preparing\", attempts: [], abortRequested: false },\n\t};\n}\n\n/**\n * Overflow recovery answers an observed overflow. It is legal only when the\n * most recently closed attempt ended with `overflow`; otherwise the operation\n * would sit in a stage from which no attempt can begin (index 0 must start\n * from `preparing`, index > 0 needs a prior overflow) and could only settle.\n */\nfunction lastAttemptOverflowed(state: ActiveState): boolean {\n\treturn state.attempts.at(-1)?.outcome === \"overflow\";\n}\n\nfunction isLegalStageMove(state: ActiveState, to: ActiveState[\"stage\"]): boolean {\n\tconst from = state.stage;\n\tconst kind = state.operation.kind;\n\tif (from === \"attempt_running\" && to === \"save_point\") return state.attempt !== undefined;\n\tif (from === \"save_point\" && to === \"attempt_running\") return state.attempt !== undefined;\n\tif (from === \"preparing\" && to === \"recovering_overflow\") {\n\t\treturn isPromptFamily(kind) && state.attempt === undefined && lastAttemptOverflowed(state);\n\t}\n\tif (from === \"preparing\" && to === \"structural_running\") return !isPromptFamily(kind);\n\treturn from === \"structural_running\" && to === \"committing\";\n}\n\nfunction reduceStage(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"stage\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"change stage\");\n\tif (state.tag === \"settling\")\n\t\treturn reject(\"invalid_transition\", \"Cannot change stage while settling\", state, command);\n\tconst current = expectCurrentOperation(state, command.operationId, command);\n\tif (!current.ok) return current;\n\tif (!isLegalStageMove(state, command.stage)) {\n\t\treturn reject(\n\t\t\t\"invalid_transition\",\n\t\t\t`Illegal stage transition ${state.stage} -> ${command.stage} for ${state.operation.kind}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn { ok: true, value: { ...state, stage: command.stage } };\n}\n\nfunction reduceAttemptBegin(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"attempt_begin\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"begin an attempt\");\n\tif (state.tag === \"settling\")\n\t\treturn reject(\"invalid_transition\", \"Cannot begin an attempt while settling\", state, command);\n\tconst current = expectCurrentOperation(state, command.attempt.operationId, command);\n\tif (!current.ok) return current;\n\tif (state.attempt !== undefined) {\n\t\treturn reject(\"attempt_mismatch\", `Attempt ${state.attempt.attemptId} is still active`, state, command);\n\t}\n\tif (!isPromptFamily(state.operation.kind)) {\n\t\treturn reject(\"invalid_transition\", `${state.operation.kind} operations do not run attempts`, state, command);\n\t}\n\tif (command.attempt.index !== state.attempts.length) {\n\t\treturn reject(\n\t\t\t\"sequence_violation\",\n\t\t\t`Attempt index ${command.attempt.index} is not the next index ${state.attempts.length}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\tconst fromPreparing =\n\t\tstate.stage === \"preparing\" && command.attempt.index === 0 && command.attempt.reason === \"initial\";\n\tconst fromRecovery =\n\t\tstate.stage === \"recovering_overflow\" &&\n\t\tcommand.attempt.index > 0 &&\n\t\tcommand.attempt.reason === \"context_overflow_recovery\";\n\tif (!fromPreparing && !fromRecovery) {\n\t\treturn reject(\n\t\t\t\"invalid_transition\",\n\t\t\t`Cannot begin attempt ${command.attempt.attemptId} (${command.attempt.reason}) from stage ${state.stage}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn { ok: true, value: { ...state, stage: \"attempt_running\", attempt: command.attempt } };\n}\n\nfunction reduceAttemptEnd(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"attempt_end\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"end an attempt\");\n\tif (state.tag === \"settling\")\n\t\treturn reject(\"invalid_transition\", \"Cannot end an attempt while settling\", state, command);\n\tif (state.attempt === undefined) return reject(\"attempt_mismatch\", \"No active attempt to end\", state, command);\n\tif (state.attempt.attemptId !== command.attemptId) {\n\t\treturn reject(\n\t\t\t\"attempt_mismatch\",\n\t\t\t`Attempt end names ${command.attemptId} but active attempt is ${state.attempt.attemptId}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\t// save_point is an intra-attempt stage between provider turns; the attempt\n\t// remains logically running there, so it may end from either stage.\n\tif (state.stage !== \"attempt_running\" && state.stage !== \"save_point\") {\n\t\treturn reject(\"invalid_transition\", `Cannot end an attempt from stage ${state.stage}`, state, command);\n\t}\n\tconst { attempt } = state;\n\treturn {\n\t\tok: true,\n\t\tvalue: {\n\t\t\t...state,\n\t\t\tstage: \"preparing\",\n\t\t\tattempt: undefined,\n\t\t\tattempts: [...state.attempts, { attempt, outcome: command.outcome }],\n\t\t},\n\t};\n}\n\nfunction reduceAbortRequest(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"abort_request\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"abort\");\n\tif (state.tag === \"settling\") return reject(\"invalid_transition\", \"Cannot abort while settling\", state, command);\n\tconst current = expectCurrentOperation(state, command.operationId, command);\n\tif (!current.ok) return current;\n\treturn { ok: true, value: { ...state, abortRequested: true } };\n}\n\nfunction reduceSettleBegin(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"settle_begin\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"settle\");\n\tif (state.tag === \"settling\") return reject(\"invalid_transition\", \"Operation is already settling\", state, command);\n\tconst current = expectCurrentOperation(state, command.operationId, command);\n\tif (!current.ok) return current;\n\t// Last line of defence against a silently orphaned attempt: an integration\n\t// bug that drops `attempt_end` must fail loudly here, not settle an\n\t// operation whose summary is missing a started attempt.\n\tif (state.attempt !== undefined) {\n\t\treturn reject(\n\t\t\t\"attempt_mismatch\",\n\t\t\t`Cannot settle operation ${state.operation.operationId} while attempt ${state.attempt.attemptId} is active`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn {\n\t\tok: true,\n\t\tvalue: {\n\t\t\ttag: \"settling\",\n\t\t\toperation: state.operation,\n\t\t\toutcome: command.outcome,\n\t\t\tattempts: state.attempts,\n\t\t\tabortRequested: state.abortRequested,\n\t\t},\n\t};\n}\n\nfunction reduceSettleFinish(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"settle_finish\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"finish settling\");\n\tif (state.tag === \"active\")\n\t\treturn reject(\"invalid_transition\", \"Operation must pass through settling before finishing\", state, command);\n\tconst current = expectCurrentOperation(state, command.operationId, command);\n\tif (!current.ok) return current;\n\treturn { ok: true, value: { tag: \"idle\", lastSequence: state.operation.sequence } };\n}\n\nexport function reduceHarnessLifecycle(state: HarnessLifecycleState, command: HarnessLifecycleCommand): Result {\n\tswitch (command.type) {\n\t\tcase \"begin\":\n\t\t\treturn reduceBegin(state, command);\n\t\tcase \"stage\":\n\t\t\treturn reduceStage(state, command);\n\t\tcase \"attempt_begin\":\n\t\t\treturn reduceAttemptBegin(state, command);\n\t\tcase \"attempt_end\":\n\t\t\treturn reduceAttemptEnd(state, command);\n\t\tcase \"abort_request\":\n\t\t\treturn reduceAbortRequest(state, command);\n\t\tcase \"settle_begin\":\n\t\t\treturn reduceSettleBegin(state, command);\n\t\tcase \"settle_finish\":\n\t\t\treturn reduceSettleFinish(state, command);\n\t\tdefault: {\n\t\t\tconst unknownCommand: never = command;\n\t\t\tthrow new HarnessLifecycleViolation(\"invalid_transition\", \"Unknown lifecycle command\", state, unknownCommand);\n\t\t}\n\t}\n}\n"]}

package/dist/harness/operation-lifecycle-reducer.js

@@ -0,0 +1,201 @@
+/**
+ * Pure transition function for the harness operation lifecycle.
+ *
+ * Given the current state and one command, returns the next state or a
+ * classified violation. It performs no side effects: it does not read a
+ * clock, allocate identifiers, emit events, flush sessions, or touch abort
+ * signals. The controller supplies all of those around it.
+ *
+ * The transition table encodes the plan's legal moves plus one documented
+ * conservative addition: `structural_running -> committing` marks the single
+ * declared commit point of a structural operation. Every other transition not
+ * listed here is rejected, and rejection never mutates the input state.
+ */
+import { HarnessLifecycleViolation, PROMPT_FAMILY_KINDS, } from "./operation-lifecycle-types.js";
+export function initialHarnessLifecycleState() {
+    return { tag: "idle", lastSequence: 0 };
+}
+function reject(code, message, state, command) {
+    return { ok: false, error: new HarnessLifecycleViolation(code, message, state, command) };
+}
+function isPromptFamily(kind) {
+    return PROMPT_FAMILY_KINDS.includes(kind);
+}
+function notIdle(state, command, action) {
+    return reject("invalid_transition", `Cannot ${action} without an active operation`, state, command);
+}
+/** Commands carrying an operationId must name the current operation. */
+function expectCurrentOperation(state, operationId, command) {
+    if (state.operation.operationId !== operationId) {
+        return reject("stale_operation", `Command targets operation ${operationId} but current operation is ${state.operation.operationId}`, state, command);
+    }
+    return { ok: true, value: state };
+}
+function reduceBegin(state, command) {
+    if (state.tag !== "idle") {
+        return reject("busy", "Cannot begin a new operation while another is active or settling", state, command);
+    }
+    if (command.operation.sequence !== state.lastSequence + 1) {
+        return reject("sequence_violation", `Operation sequence ${command.operation.sequence} is not lastSequence + 1 (${state.lastSequence + 1})`, state, command);
+    }
+    return {
+        ok: true,
+        value: { tag: "active", operation: command.operation, stage: "preparing", attempts: [], abortRequested: false },
+    };
+}
+/**
+ * Overflow recovery answers an observed overflow. It is legal only when the
+ * most recently closed attempt ended with `overflow`; otherwise the operation
+ * would sit in a stage from which no attempt can begin (index 0 must start
+ * from `preparing`, index > 0 needs a prior overflow) and could only settle.
+ */
+function lastAttemptOverflowed(state) {
+    return state.attempts.at(-1)?.outcome === "overflow";
+}
+function isLegalStageMove(state, to) {
+    const from = state.stage;
+    const kind = state.operation.kind;
+    if (from === "attempt_running" && to === "save_point")
+        return state.attempt !== undefined;
+    if (from === "save_point" && to === "attempt_running")
+        return state.attempt !== undefined;
+    if (from === "preparing" && to === "recovering_overflow") {
+        return isPromptFamily(kind) && state.attempt === undefined && lastAttemptOverflowed(state);
+    }
+    if (from === "preparing" && to === "structural_running")
+        return !isPromptFamily(kind);
+    return from === "structural_running" && to === "committing";
+}
+function reduceStage(state, command) {
+    if (state.tag === "idle")
+        return notIdle(state, command, "change stage");
+    if (state.tag === "settling")
+        return reject("invalid_transition", "Cannot change stage while settling", state, command);
+    const current = expectCurrentOperation(state, command.operationId, command);
+    if (!current.ok)
+        return current;
+    if (!isLegalStageMove(state, command.stage)) {
+        return reject("invalid_transition", `Illegal stage transition ${state.stage} -> ${command.stage} for ${state.operation.kind}`, state, command);
+    }
+    return { ok: true, value: { ...state, stage: command.stage } };
+}
+function reduceAttemptBegin(state, command) {
+    if (state.tag === "idle")
+        return notIdle(state, command, "begin an attempt");
+    if (state.tag === "settling")
+        return reject("invalid_transition", "Cannot begin an attempt while settling", state, command);
+    const current = expectCurrentOperation(state, command.attempt.operationId, command);
+    if (!current.ok)
+        return current;
+    if (state.attempt !== undefined) {
+        return reject("attempt_mismatch", `Attempt ${state.attempt.attemptId} is still active`, state, command);
+    }
+    if (!isPromptFamily(state.operation.kind)) {
+        return reject("invalid_transition", `${state.operation.kind} operations do not run attempts`, state, command);
+    }
+    if (command.attempt.index !== state.attempts.length) {
+        return reject("sequence_violation", `Attempt index ${command.attempt.index} is not the next index ${state.attempts.length}`, state, command);
+    }
+    const fromPreparing = state.stage === "preparing" && command.attempt.index === 0 && command.attempt.reason === "initial";
+    const fromRecovery = state.stage === "recovering_overflow" &&
+        command.attempt.index > 0 &&
+        command.attempt.reason === "context_overflow_recovery";
+    if (!fromPreparing && !fromRecovery) {
+        return reject("invalid_transition", `Cannot begin attempt ${command.attempt.attemptId} (${command.attempt.reason}) from stage ${state.stage}`, state, command);
+    }
+    return { ok: true, value: { ...state, stage: "attempt_running", attempt: command.attempt } };
+}
+function reduceAttemptEnd(state, command) {
+    if (state.tag === "idle")
+        return notIdle(state, command, "end an attempt");
+    if (state.tag === "settling")
+        return reject("invalid_transition", "Cannot end an attempt while settling", state, command);
+    if (state.attempt === undefined)
+        return reject("attempt_mismatch", "No active attempt to end", state, command);
+    if (state.attempt.attemptId !== command.attemptId) {
+        return reject("attempt_mismatch", `Attempt end names ${command.attemptId} but active attempt is ${state.attempt.attemptId}`, state, command);
+    }
+    // save_point is an intra-attempt stage between provider turns; the attempt
+    // remains logically running there, so it may end from either stage.
+    if (state.stage !== "attempt_running" && state.stage !== "save_point") {
+        return reject("invalid_transition", `Cannot end an attempt from stage ${state.stage}`, state, command);
+    }
+    const { attempt } = state;
+    return {
+        ok: true,
+        value: {
+            ...state,
+            stage: "preparing",
+            attempt: undefined,
+            attempts: [...state.attempts, { attempt, outcome: command.outcome }],
+        },
+    };
+}
+function reduceAbortRequest(state, command) {
+    if (state.tag === "idle")
+        return notIdle(state, command, "abort");
+    if (state.tag === "settling")
+        return reject("invalid_transition", "Cannot abort while settling", state, command);
+    const current = expectCurrentOperation(state, command.operationId, command);
+    if (!current.ok)
+        return current;
+    return { ok: true, value: { ...state, abortRequested: true } };
+}
+function reduceSettleBegin(state, command) {
+    if (state.tag === "idle")
+        return notIdle(state, command, "settle");
+    if (state.tag === "settling")
+        return reject("invalid_transition", "Operation is already settling", state, command);
+    const current = expectCurrentOperation(state, command.operationId, command);
+    if (!current.ok)
+        return current;
+    // Last line of defence against a silently orphaned attempt: an integration
+    // bug that drops `attempt_end` must fail loudly here, not settle an
+    // operation whose summary is missing a started attempt.
+    if (state.attempt !== undefined) {
+        return reject("attempt_mismatch", `Cannot settle operation ${state.operation.operationId} while attempt ${state.attempt.attemptId} is active`, state, command);
+    }
+    return {
+        ok: true,
+        value: {
+            tag: "settling",
+            operation: state.operation,
+            outcome: command.outcome,
+            attempts: state.attempts,
+            abortRequested: state.abortRequested,
+        },
+    };
+}
+function reduceSettleFinish(state, command) {
+    if (state.tag === "idle")
+        return notIdle(state, command, "finish settling");
+    if (state.tag === "active")
+        return reject("invalid_transition", "Operation must pass through settling before finishing", state, command);
+    const current = expectCurrentOperation(state, command.operationId, command);
+    if (!current.ok)
+        return current;
+    return { ok: true, value: { tag: "idle", lastSequence: state.operation.sequence } };
+}
+export function reduceHarnessLifecycle(state, command) {
+    switch (command.type) {
+        case "begin":
+            return reduceBegin(state, command);
+        case "stage":
+            return reduceStage(state, command);
+        case "attempt_begin":
+            return reduceAttemptBegin(state, command);
+        case "attempt_end":
+            return reduceAttemptEnd(state, command);
+        case "abort_request":
+            return reduceAbortRequest(state, command);
+        case "settle_begin":
+            return reduceSettleBegin(state, command);
+        case "settle_finish":
+            return reduceSettleFinish(state, command);
+        default: {
+            const unknownCommand = command;
+            throw new HarnessLifecycleViolation("invalid_transition", "Unknown lifecycle command", state, unknownCommand);
+        }
+    }
+}
+//# sourceMappingURL=operation-lifecycle-reducer.js.map

package/dist/harness/operation-lifecycle-reducer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-lifecycle-reducer.js","sourceRoot":"","sources":["../../src/harness/operation-lifecycle-reducer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAIN,yBAAyB,EAGzB,mBAAmB,GACnB,MAAM,gCAAgC,CAAC;AAMxC,MAAM,UAAU,4BAA4B,GAA0B;IACrE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;AAAA,CACxC;AAED,SAAS,MAAM,CACd,IAAmC,EACnC,OAAe,EACf,KAA4B,EAC5B,OAAgC,EACA;IAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,yBAAyB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;AAAA,CAC1F;AAED,SAAS,cAAc,CAAC,IAA0B,EAAW;IAC5D,OAAO,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAA,CAC1C;AAED,SAAS,OAAO,CAAC,KAA4B,EAAE,OAAgC,EAAE,MAAc,EAAU;IACxG,OAAO,MAAM,CAAC,oBAAoB,EAAE,UAAU,MAAM,8BAA8B,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAAA,CACpG;AAED,wEAAwE;AACxE,SAAS,sBAAsB,CAC9B,KAAiB,EACjB,WAAmB,EACnB,OAAgC,EACK;IACrC,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACjD,OAAO,MAAM,CACZ,iBAAiB,EACjB,6BAA6B,WAAW,6BAA6B,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAClG,KAAK,EACL,OAAO,CACP,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAAA,CAClC;AAED,SAAS,WAAW,CACnB,KAA4B,EAC5B,OAA4D,EACnD;IACT,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,MAAM,EAAE,kEAAkE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,MAAM,CACZ,oBAAoB,EACpB,sBAAsB,OAAO,CAAC,SAAS,CAAC,QAAQ,6BAA6B,KAAK,CAAC,YAAY,GAAG,CAAC,GAAG,EACtG,KAAK,EACL,OAAO,CACP,CAAC;IACH,CAAC;IACD,OAAO;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;KAC/G,CAAC;AAAA,CACF;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAAkB,EAAW;IAC3D,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,UAAU,CAAC;AAAA,CACrD;AAED,SAAS,gBAAgB,CAAC,KAAkB,EAAE,EAAwB,EAAW;IAChF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;IAClC,IAAI,IAAI,KAAK,iBAAiB,IAAI,EAAE,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;IAC1F,IAAI,IAAI,KAAK,YAAY,IAAI,EAAE,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;IAC1F,IAAI,IAAI,KAAK,WAAW,IAAI,EAAE,KAAK,qBAAqB,EAAE,CAAC;QAC1D,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,EAAE,KAAK,oBAAoB;QAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACtF,OAAO,IAAI,KAAK,oBAAoB,IAAI,EAAE,KAAK,YAAY,CAAC;AAAA,CAC5D;AAED,SAAS,WAAW,CACnB,KAA4B,EAC5B,OAA4D,EACnD;IACT,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU;QAC3B,OAAO,MAAM,CAAC,oBAAoB,EAAE,oCAAoC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,MAAM,CACZ,oBAAoB,EACpB,4BAA4B,KAAK,CAAC,KAAK,OAAO,OAAO,CAAC,KAAK,QAAQ,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EACzF,KAAK,EACL,OAAO,CACP,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAAA,CAC/D;AAED,SAAS,kBAAkB,CAC1B,KAA4B,EAC5B,OAAoE,EAC3D;IACT,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU;QAC3B,OAAO,MAAM,CAAC,oBAAoB,EAAE,wCAAwC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,kBAAkB,EAAE,WAAW,KAAK,CAAC,OAAO,CAAC,SAAS,kBAAkB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,oBAAoB,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,iCAAiC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrD,OAAO,MAAM,CACZ,oBAAoB,EACpB,iBAAiB,OAAO,CAAC,OAAO,CAAC,KAAK,0BAA0B,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EACvF,KAAK,EACL,OAAO,CACP,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAClB,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;IACpG,MAAM,YAAY,GACjB,KAAK,CAAC,KAAK,KAAK,qBAAqB;QACrC,OAAO,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC;QACzB,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,2BAA2B,CAAC;IACxD,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,OAAO,MAAM,CACZ,oBAAoB,EACpB,wBAAwB,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,gBAAgB,KAAK,CAAC,KAAK,EAAE,EACzG,KAAK,EACL,OAAO,CACP,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;AAAA,CAC7F;AAED,SAAS,gBAAgB,CACxB,KAA4B,EAC5B,OAAkE,EACzD;IACT,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU;QAC3B,OAAO,MAAM,CAAC,oBAAoB,EAAE,sCAAsC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7F,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/G,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACnD,OAAO,MAAM,CACZ,kBAAkB,EAClB,qBAAqB,OAAO,CAAC,SAAS,0BAA0B,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EACzF,KAAK,EACL,OAAO,CACP,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,oEAAoE;IACpE,IAAI,KAAK,CAAC,KAAK,KAAK,iBAAiB,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,oBAAoB,EAAE,oCAAoC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,OAAO;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACN,GAAG,KAAK;YACR,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACpE;KACD,CAAC;AAAA,CACF;AAED,SAAS,kBAAkB,CAC1B,KAA4B,EAC5B,OAAoE,EAC3D;IACT,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,oBAAoB,EAAE,6BAA6B,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;AAAA,CAC/D;AAED,SAAS,iBAAiB,CACzB,KAA4B,EAC5B,OAAmE,EAC1D;IACT,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,oBAAoB,EAAE,+BAA+B,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,2EAA2E;IAC3E,oEAAoE;IACpE,wDAAwD;IACxD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,CACZ,kBAAkB,EAClB,2BAA2B,KAAK,CAAC,SAAS,CAAC,WAAW,kBAAkB,KAAK,CAAC,OAAO,CAAC,SAAS,YAAY,EAC3G,KAAK,EACL,OAAO,CACP,CAAC;IACH,CAAC;IACD,OAAO;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACN,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;SACpC;KACD,CAAC;AAAA,CACF;AAED,SAAS,kBAAkB,CAC1B,KAA4B,EAC5B,OAAoE,EAC3D;IACT,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ;QACzB,OAAO,MAAM,CAAC,oBAAoB,EAAE,uDAAuD,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;AAAA,CACpF;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA4B,EAAE,OAAgC,EAAU;IAC9G,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,OAAO;YACX,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpC,KAAK,OAAO;YACX,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpC,KAAK,eAAe;YACnB,OAAO,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,KAAK,aAAa;YACjB,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzC,KAAK,eAAe;YACnB,OAAO,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,KAAK,cAAc;YAClB,OAAO,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,KAAK,eAAe;YACnB,OAAO,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,SAAS,CAAC;YACT,MAAM,cAAc,GAAU,OAAO,CAAC;YACtC,MAAM,IAAI,yBAAyB,CAAC,oBAAoB,EAAE,2BAA2B,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAC/G,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["/**\n * Pure transition function for the harness operation lifecycle.\n *\n * Given the current state and one command, returns the next state or a\n * classified violation. It performs no side effects: it does not read a\n * clock, allocate identifiers, emit events, flush sessions, or touch abort\n * signals. The controller supplies all of those around it.\n *\n * The transition table encodes the plan's legal moves plus one documented\n * conservative addition: `structural_running -> committing` marks the single\n * declared commit point of a structural operation. Every other transition not\n * listed here is rejected, and rejection never mutates the input state.\n */\n\nimport {\n\ttype HarnessLifecycleCommand,\n\ttype HarnessLifecycleResult,\n\ttype HarnessLifecycleState,\n\tHarnessLifecycleViolation,\n\ttype HarnessLifecycleViolationCode,\n\ttype HarnessOperationKind,\n\tPROMPT_FAMILY_KINDS,\n} from \"./operation-lifecycle-types.ts\";\n\ntype ActiveState = Extract<HarnessLifecycleState, { tag: \"active\" }>;\ntype OwnedState = Extract<HarnessLifecycleState, { tag: \"active\" | \"settling\" }>;\ntype Result = HarnessLifecycleResult<HarnessLifecycleState>;\n\nexport function initialHarnessLifecycleState(): HarnessLifecycleState {\n\treturn { tag: \"idle\", lastSequence: 0 };\n}\n\nfunction reject(\n\tcode: HarnessLifecycleViolationCode,\n\tmessage: string,\n\tstate: HarnessLifecycleState,\n\tcommand: HarnessLifecycleCommand,\n): HarnessLifecycleResult<never> {\n\treturn { ok: false, error: new HarnessLifecycleViolation(code, message, state, command) };\n}\n\nfunction isPromptFamily(kind: HarnessOperationKind): boolean {\n\treturn PROMPT_FAMILY_KINDS.includes(kind);\n}\n\nfunction notIdle(state: HarnessLifecycleState, command: HarnessLifecycleCommand, action: string): Result {\n\treturn reject(\"invalid_transition\", `Cannot ${action} without an active operation`, state, command);\n}\n\n/** Commands carrying an operationId must name the current operation. */\nfunction expectCurrentOperation(\n\tstate: OwnedState,\n\toperationId: string,\n\tcommand: HarnessLifecycleCommand,\n): HarnessLifecycleResult<OwnedState> {\n\tif (state.operation.operationId !== operationId) {\n\t\treturn reject(\n\t\t\t\"stale_operation\",\n\t\t\t`Command targets operation ${operationId} but current operation is ${state.operation.operationId}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn { ok: true, value: state };\n}\n\nfunction reduceBegin(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"begin\" }>,\n): Result {\n\tif (state.tag !== \"idle\") {\n\t\treturn reject(\"busy\", \"Cannot begin a new operation while another is active or settling\", state, command);\n\t}\n\tif (command.operation.sequence !== state.lastSequence + 1) {\n\t\treturn reject(\n\t\t\t\"sequence_violation\",\n\t\t\t`Operation sequence ${command.operation.sequence} is not lastSequence + 1 (${state.lastSequence + 1})`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn {\n\t\tok: true,\n\t\tvalue: { tag: \"active\", operation: command.operation, stage: \"preparing\", attempts: [], abortRequested: false },\n\t};\n}\n\n/**\n * Overflow recovery answers an observed overflow. It is legal only when the\n * most recently closed attempt ended with `overflow`; otherwise the operation\n * would sit in a stage from which no attempt can begin (index 0 must start\n * from `preparing`, index > 0 needs a prior overflow) and could only settle.\n */\nfunction lastAttemptOverflowed(state: ActiveState): boolean {\n\treturn state.attempts.at(-1)?.outcome === \"overflow\";\n}\n\nfunction isLegalStageMove(state: ActiveState, to: ActiveState[\"stage\"]): boolean {\n\tconst from = state.stage;\n\tconst kind = state.operation.kind;\n\tif (from === \"attempt_running\" && to === \"save_point\") return state.attempt !== undefined;\n\tif (from === \"save_point\" && to === \"attempt_running\") return state.attempt !== undefined;\n\tif (from === \"preparing\" && to === \"recovering_overflow\") {\n\t\treturn isPromptFamily(kind) && state.attempt === undefined && lastAttemptOverflowed(state);\n\t}\n\tif (from === \"preparing\" && to === \"structural_running\") return !isPromptFamily(kind);\n\treturn from === \"structural_running\" && to === \"committing\";\n}\n\nfunction reduceStage(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"stage\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"change stage\");\n\tif (state.tag === \"settling\")\n\t\treturn reject(\"invalid_transition\", \"Cannot change stage while settling\", state, command);\n\tconst current = expectCurrentOperation(state, command.operationId, command);\n\tif (!current.ok) return current;\n\tif (!isLegalStageMove(state, command.stage)) {\n\t\treturn reject(\n\t\t\t\"invalid_transition\",\n\t\t\t`Illegal stage transition ${state.stage} -> ${command.stage} for ${state.operation.kind}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn { ok: true, value: { ...state, stage: command.stage } };\n}\n\nfunction reduceAttemptBegin(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"attempt_begin\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"begin an attempt\");\n\tif (state.tag === \"settling\")\n\t\treturn reject(\"invalid_transition\", \"Cannot begin an attempt while settling\", state, command);\n\tconst current = expectCurrentOperation(state, command.attempt.operationId, command);\n\tif (!current.ok) return current;\n\tif (state.attempt !== undefined) {\n\t\treturn reject(\"attempt_mismatch\", `Attempt ${state.attempt.attemptId} is still active`, state, command);\n\t}\n\tif (!isPromptFamily(state.operation.kind)) {\n\t\treturn reject(\"invalid_transition\", `${state.operation.kind} operations do not run attempts`, state, command);\n\t}\n\tif (command.attempt.index !== state.attempts.length) {\n\t\treturn reject(\n\t\t\t\"sequence_violation\",\n\t\t\t`Attempt index ${command.attempt.index} is not the next index ${state.attempts.length}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\tconst fromPreparing =\n\t\tstate.stage === \"preparing\" && command.attempt.index === 0 && command.attempt.reason === \"initial\";\n\tconst fromRecovery =\n\t\tstate.stage === \"recovering_overflow\" &&\n\t\tcommand.attempt.index > 0 &&\n\t\tcommand.attempt.reason === \"context_overflow_recovery\";\n\tif (!fromPreparing && !fromRecovery) {\n\t\treturn reject(\n\t\t\t\"invalid_transition\",\n\t\t\t`Cannot begin attempt ${command.attempt.attemptId} (${command.attempt.reason}) from stage ${state.stage}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn { ok: true, value: { ...state, stage: \"attempt_running\", attempt: command.attempt } };\n}\n\nfunction reduceAttemptEnd(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"attempt_end\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"end an attempt\");\n\tif (state.tag === \"settling\")\n\t\treturn reject(\"invalid_transition\", \"Cannot end an attempt while settling\", state, command);\n\tif (state.attempt === undefined) return reject(\"attempt_mismatch\", \"No active attempt to end\", state, command);\n\tif (state.attempt.attemptId !== command.attemptId) {\n\t\treturn reject(\n\t\t\t\"attempt_mismatch\",\n\t\t\t`Attempt end names ${command.attemptId} but active attempt is ${state.attempt.attemptId}`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\t// save_point is an intra-attempt stage between provider turns; the attempt\n\t// remains logically running there, so it may end from either stage.\n\tif (state.stage !== \"attempt_running\" && state.stage !== \"save_point\") {\n\t\treturn reject(\"invalid_transition\", `Cannot end an attempt from stage ${state.stage}`, state, command);\n\t}\n\tconst { attempt } = state;\n\treturn {\n\t\tok: true,\n\t\tvalue: {\n\t\t\t...state,\n\t\t\tstage: \"preparing\",\n\t\t\tattempt: undefined,\n\t\t\tattempts: [...state.attempts, { attempt, outcome: command.outcome }],\n\t\t},\n\t};\n}\n\nfunction reduceAbortRequest(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"abort_request\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"abort\");\n\tif (state.tag === \"settling\") return reject(\"invalid_transition\", \"Cannot abort while settling\", state, command);\n\tconst current = expectCurrentOperation(state, command.operationId, command);\n\tif (!current.ok) return current;\n\treturn { ok: true, value: { ...state, abortRequested: true } };\n}\n\nfunction reduceSettleBegin(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"settle_begin\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"settle\");\n\tif (state.tag === \"settling\") return reject(\"invalid_transition\", \"Operation is already settling\", state, command);\n\tconst current = expectCurrentOperation(state, command.operationId, command);\n\tif (!current.ok) return current;\n\t// Last line of defence against a silently orphaned attempt: an integration\n\t// bug that drops `attempt_end` must fail loudly here, not settle an\n\t// operation whose summary is missing a started attempt.\n\tif (state.attempt !== undefined) {\n\t\treturn reject(\n\t\t\t\"attempt_mismatch\",\n\t\t\t`Cannot settle operation ${state.operation.operationId} while attempt ${state.attempt.attemptId} is active`,\n\t\t\tstate,\n\t\t\tcommand,\n\t\t);\n\t}\n\treturn {\n\t\tok: true,\n\t\tvalue: {\n\t\t\ttag: \"settling\",\n\t\t\toperation: state.operation,\n\t\t\toutcome: command.outcome,\n\t\t\tattempts: state.attempts,\n\t\t\tabortRequested: state.abortRequested,\n\t\t},\n\t};\n}\n\nfunction reduceSettleFinish(\n\tstate: HarnessLifecycleState,\n\tcommand: Extract<HarnessLifecycleCommand, { type: \"settle_finish\" }>,\n): Result {\n\tif (state.tag === \"idle\") return notIdle(state, command, \"finish settling\");\n\tif (state.tag === \"active\")\n\t\treturn reject(\"invalid_transition\", \"Operation must pass through settling before finishing\", state, command);\n\tconst current = expectCurrentOperation(state, command.operationId, command);\n\tif (!current.ok) return current;\n\treturn { ok: true, value: { tag: \"idle\", lastSequence: state.operation.sequence } };\n}\n\nexport function reduceHarnessLifecycle(state: HarnessLifecycleState, command: HarnessLifecycleCommand): Result {\n\tswitch (command.type) {\n\t\tcase \"begin\":\n\t\t\treturn reduceBegin(state, command);\n\t\tcase \"stage\":\n\t\t\treturn reduceStage(state, command);\n\t\tcase \"attempt_begin\":\n\t\t\treturn reduceAttemptBegin(state, command);\n\t\tcase \"attempt_end\":\n\t\t\treturn reduceAttemptEnd(state, command);\n\t\tcase \"abort_request\":\n\t\t\treturn reduceAbortRequest(state, command);\n\t\tcase \"settle_begin\":\n\t\t\treturn reduceSettleBegin(state, command);\n\t\tcase \"settle_finish\":\n\t\t\treturn reduceSettleFinish(state, command);\n\t\tdefault: {\n\t\t\tconst unknownCommand: never = command;\n\t\t\tthrow new HarnessLifecycleViolation(\"invalid_transition\", \"Unknown lifecycle command\", state, unknownCommand);\n\t\t}\n\t}\n}\n"]}

package/dist/harness/operation-lifecycle-types.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Pure operation-lifecycle model for AgentHarness public operations.
+ *
+ * One public operation (`prompt`, `skill`, `promptFromTemplate`, `compact`,
+ * `navigateTree`) may span several low-level agent attempts. This module
+ * declares the identity, state, command, and violation vocabulary used to
+ * keep that distinction provable. It imports nothing: no harness, session,
+ * provider, or Node types, so it stays a leaf for the import-cycle ratchet
+ * and is safe to export from a browser entry point.
+ *
+ * Reducer-purity note: the reducer never reads a clock, so its `settling`
+ * state carries `HarnessSettledAttempt` records (attempt + outcome) rather
+ * than wall-clock summaries. The controller, which owns the clock, renders
+ * public `HarnessAttemptSummary` values from those records.
+ */
+/** Public operation kinds that own the harness at most one at a time. */
+export type HarnessOperationKind = "prompt" | "skill" | "prompt_template" | "manual_compaction" | "tree_navigation";
+/** Prompt-family kinds run agent attempts; structural kinds do not. */
+export declare const PROMPT_FAMILY_KINDS: readonly HarnessOperationKind[];
+export type HarnessOperationStage = "preparing" | "attempt_running" | "save_point" | "recovering_overflow" | "structural_running" | "committing" | "settling";
+/** Correlation identity of one public operation. `sequence` is monotonic per harness instance. */
+export interface HarnessOperationRef {
+    readonly operationId: string;
+    readonly sequence: number;
+    readonly kind: HarnessOperationKind;
+    readonly startedAtMs: number;
+}
+/** Overflow recovery is a substage of the originating prompt operation, never its own operation. */
+export type HarnessAttemptReason = "initial" | "context_overflow_recovery";
+export interface HarnessAttemptRef {
+    readonly operationId: string;
+    readonly attemptId: string;
+    readonly index: number;
+    readonly reason: HarnessAttemptReason;
+    readonly startedAtMs: number;
+}
+export type HarnessAttemptOutcome = "completed" | "failed" | "aborted" | "overflow";
+/** Reducer-side record of a finished attempt; carries no wall-clock data beyond what the attempt ref captured. */
+export interface HarnessSettledAttempt {
+    readonly attempt: HarnessAttemptRef;
+    readonly outcome: HarnessAttemptOutcome;
+}
+/** Public attempt summary rendered by the controller from settled records plus its own clock readings. */
+export interface HarnessAttemptSummary {
+    readonly attemptId: string;
+    readonly index: number;
+    readonly reason: HarnessAttemptReason;
+    readonly outcome: HarnessAttemptOutcome;
+    readonly startedAtMs: number;
+    readonly finishedAtMs: number;
+}
+export type HarnessOperationOutcome = {
+    readonly status: "completed";
+} | {
+    readonly status: "failed";
+    readonly code: string;
+    readonly message: string;
+} | {
+    readonly status: "aborted";
+    readonly reason?: string;
+} | {
+    readonly status: "cancelled";
+    readonly reason: string;
+};
+export type HarnessLifecycleState = {
+    readonly tag: "idle";
+    readonly lastSequence: number;
+} | {
+    readonly tag: "active";
+    readonly operation: HarnessOperationRef;
+    readonly stage: HarnessOperationStage;
+    readonly attempt?: HarnessAttemptRef;
+    readonly attempts: readonly HarnessSettledAttempt[];
+    readonly abortRequested: boolean;
+} | {
+    readonly tag: "settling";
+    readonly operation: HarnessOperationRef;
+    readonly outcome: HarnessOperationOutcome;
+    readonly attempts: readonly HarnessSettledAttempt[];
+    readonly abortRequested: boolean;
+};
+export type HarnessLifecycleCommand = {
+    readonly type: "begin";
+    readonly operation: HarnessOperationRef;
+} | {
+    readonly type: "stage";
+    readonly operationId: string;
+    readonly stage: HarnessOperationStage;
+} | {
+    readonly type: "attempt_begin";
+    readonly attempt: HarnessAttemptRef;
+} | {
+    readonly type: "attempt_end";
+    readonly attemptId: string;
+    readonly outcome: HarnessAttemptOutcome;
+} | {
+    readonly type: "abort_request";
+    readonly operationId: string;
+} | {
+    readonly type: "settle_begin";
+    readonly operationId: string;
+    readonly outcome: HarnessOperationOutcome;
+} | {
+    readonly type: "settle_finish";
+    readonly operationId: string;
+};
+export type HarnessLifecycleViolationCode = "busy" | "stale_operation" | "invalid_transition" | "attempt_mismatch" | "sequence_violation";
+/**
+ * Illegal lifecycle transition rejected by the reducer. Extends `Error` so the
+ * controller can attach it as a preserved `cause` on public boundary errors.
+ */
+export declare class HarnessLifecycleViolation extends Error {
+    readonly code: HarnessLifecycleViolationCode;
+    readonly state: HarnessLifecycleState;
+    readonly command: HarnessLifecycleCommand;
+    constructor(code: HarnessLifecycleViolationCode, message: string, state: HarnessLifecycleState, command: HarnessLifecycleCommand);
+}
+export type HarnessLifecycleResult<T> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly error: HarnessLifecycleViolation;
+};
+/** Clock and identity factories injected so lifecycle behavior is deterministic under test. */
+export interface HarnessLifecycleDependencies {
+    readonly createOperationId: () => string;
+    readonly now: () => number;
+}
+//# sourceMappingURL=operation-lifecycle-types.d.ts.map

package/dist/harness/operation-lifecycle-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-lifecycle-types.d.ts","sourceRoot":"","sources":["../../src/harness/operation-lifecycle-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,yEAAyE;AACzE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,OAAO,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAEpH,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,EAAE,SAAS,oBAAoB,EAA2C,CAAC;AAE3G,MAAM,MAAM,qBAAqB,GAC9B,WAAW,GACX,iBAAiB,GACjB,YAAY,GACZ,qBAAqB,GACrB,oBAAoB,GACpB,YAAY,GACZ,UAAU,CAAC;AAEd,kGAAkG;AAClG,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,oGAAoG;AACpG,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,2BAA2B,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAEpF,kHAAkH;AAClH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACxC;AAED,0GAA0G;AAC1G,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,uBAAuB,GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,qBAAqB,GAC9B;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACvD;IACA,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAChC,GACD;IACA,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAChC,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,GAC/F;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GACrG;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GAC1G;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,MAAM,MAAM,6BAA6B,GACtC,MAAM,GACN,iBAAiB,GACjB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,CAAC;AAExB;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IACnD,SAAgB,IAAI,EAAE,6BAA6B,CAAC;IACpD,SAAgB,KAAK,EAAE,qBAAqB,CAAC;IAC7C,SAAgB,OAAO,EAAE,uBAAuB,CAAC;IAEjD,YACC,IAAI,EAAE,6BAA6B,EACnC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,qBAAqB,EAC5B,OAAO,EAAE,uBAAuB,EAOhC;CACD;AAED,MAAM,MAAM,sBAAsB,CAAC,CAAC,IACjC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAA;CAAE,CAAC;AAErE,+FAA+F;AAC/F,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,MAAM,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC3B","sourcesContent":["/**\n * Pure operation-lifecycle model for AgentHarness public operations.\n *\n * One public operation (`prompt`, `skill`, `promptFromTemplate`, `compact`,\n * `navigateTree`) may span several low-level agent attempts. This module\n * declares the identity, state, command, and violation vocabulary used to\n * keep that distinction provable. It imports nothing: no harness, session,\n * provider, or Node types, so it stays a leaf for the import-cycle ratchet\n * and is safe to export from a browser entry point.\n *\n * Reducer-purity note: the reducer never reads a clock, so its `settling`\n * state carries `HarnessSettledAttempt` records (attempt + outcome) rather\n * than wall-clock summaries. The controller, which owns the clock, renders\n * public `HarnessAttemptSummary` values from those records.\n */\n\n/** Public operation kinds that own the harness at most one at a time. */\nexport type HarnessOperationKind = \"prompt\" | \"skill\" | \"prompt_template\" | \"manual_compaction\" | \"tree_navigation\";\n\n/** Prompt-family kinds run agent attempts; structural kinds do not. */\nexport const PROMPT_FAMILY_KINDS: readonly HarnessOperationKind[] = [\"prompt\", \"skill\", \"prompt_template\"];\n\nexport type HarnessOperationStage =\n\t| \"preparing\"\n\t| \"attempt_running\"\n\t| \"save_point\"\n\t| \"recovering_overflow\"\n\t| \"structural_running\"\n\t| \"committing\"\n\t| \"settling\";\n\n/** Correlation identity of one public operation. `sequence` is monotonic per harness instance. */\nexport interface HarnessOperationRef {\n\treadonly operationId: string;\n\treadonly sequence: number;\n\treadonly kind: HarnessOperationKind;\n\treadonly startedAtMs: number;\n}\n\n/** Overflow recovery is a substage of the originating prompt operation, never its own operation. */\nexport type HarnessAttemptReason = \"initial\" | \"context_overflow_recovery\";\n\nexport interface HarnessAttemptRef {\n\treadonly operationId: string;\n\treadonly attemptId: string;\n\treadonly index: number;\n\treadonly reason: HarnessAttemptReason;\n\treadonly startedAtMs: number;\n}\n\nexport type HarnessAttemptOutcome = \"completed\" | \"failed\" | \"aborted\" | \"overflow\";\n\n/** Reducer-side record of a finished attempt; carries no wall-clock data beyond what the attempt ref captured. */\nexport interface HarnessSettledAttempt {\n\treadonly attempt: HarnessAttemptRef;\n\treadonly outcome: HarnessAttemptOutcome;\n}\n\n/** Public attempt summary rendered by the controller from settled records plus its own clock readings. */\nexport interface HarnessAttemptSummary {\n\treadonly attemptId: string;\n\treadonly index: number;\n\treadonly reason: HarnessAttemptReason;\n\treadonly outcome: HarnessAttemptOutcome;\n\treadonly startedAtMs: number;\n\treadonly finishedAtMs: number;\n}\n\nexport type HarnessOperationOutcome =\n\t| { readonly status: \"completed\" }\n\t| { readonly status: \"failed\"; readonly code: string; readonly message: string }\n\t| { readonly status: \"aborted\"; readonly reason?: string }\n\t| { readonly status: \"cancelled\"; readonly reason: string };\n\nexport type HarnessLifecycleState =\n\t| { readonly tag: \"idle\"; readonly lastSequence: number }\n\t| {\n\t\t\treadonly tag: \"active\";\n\t\t\treadonly operation: HarnessOperationRef;\n\t\t\treadonly stage: HarnessOperationStage;\n\t\t\treadonly attempt?: HarnessAttemptRef;\n\t\t\treadonly attempts: readonly HarnessSettledAttempt[];\n\t\t\treadonly abortRequested: boolean;\n\t  }\n\t| {\n\t\t\treadonly tag: \"settling\";\n\t\t\treadonly operation: HarnessOperationRef;\n\t\t\treadonly outcome: HarnessOperationOutcome;\n\t\t\treadonly attempts: readonly HarnessSettledAttempt[];\n\t\t\treadonly abortRequested: boolean;\n\t  };\n\nexport type HarnessLifecycleCommand =\n\t| { readonly type: \"begin\"; readonly operation: HarnessOperationRef }\n\t| { readonly type: \"stage\"; readonly operationId: string; readonly stage: HarnessOperationStage }\n\t| { readonly type: \"attempt_begin\"; readonly attempt: HarnessAttemptRef }\n\t| { readonly type: \"attempt_end\"; readonly attemptId: string; readonly outcome: HarnessAttemptOutcome }\n\t| { readonly type: \"abort_request\"; readonly operationId: string }\n\t| { readonly type: \"settle_begin\"; readonly operationId: string; readonly outcome: HarnessOperationOutcome }\n\t| { readonly type: \"settle_finish\"; readonly operationId: string };\n\nexport type HarnessLifecycleViolationCode =\n\t| \"busy\"\n\t| \"stale_operation\"\n\t| \"invalid_transition\"\n\t| \"attempt_mismatch\"\n\t| \"sequence_violation\";\n\n/**\n * Illegal lifecycle transition rejected by the reducer. Extends `Error` so the\n * controller can attach it as a preserved `cause` on public boundary errors.\n */\nexport class HarnessLifecycleViolation extends Error {\n\tpublic readonly code: HarnessLifecycleViolationCode;\n\tpublic readonly state: HarnessLifecycleState;\n\tpublic readonly command: HarnessLifecycleCommand;\n\n\tconstructor(\n\t\tcode: HarnessLifecycleViolationCode,\n\t\tmessage: string,\n\t\tstate: HarnessLifecycleState,\n\t\tcommand: HarnessLifecycleCommand,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"HarnessLifecycleViolation\";\n\t\tthis.code = code;\n\t\tthis.state = state;\n\t\tthis.command = command;\n\t}\n}\n\nexport type HarnessLifecycleResult<T> =\n\t| { readonly ok: true; readonly value: T }\n\t| { readonly ok: false; readonly error: HarnessLifecycleViolation };\n\n/** Clock and identity factories injected so lifecycle behavior is deterministic under test. */\nexport interface HarnessLifecycleDependencies {\n\treadonly createOperationId: () => string;\n\treadonly now: () => number;\n}\n"]}

package/dist/harness/operation-lifecycle-types.js

@@ -0,0 +1,34 @@
+/**
+ * Pure operation-lifecycle model for AgentHarness public operations.
+ *
+ * One public operation (`prompt`, `skill`, `promptFromTemplate`, `compact`,
+ * `navigateTree`) may span several low-level agent attempts. This module
+ * declares the identity, state, command, and violation vocabulary used to
+ * keep that distinction provable. It imports nothing: no harness, session,
+ * provider, or Node types, so it stays a leaf for the import-cycle ratchet
+ * and is safe to export from a browser entry point.
+ *
+ * Reducer-purity note: the reducer never reads a clock, so its `settling`
+ * state carries `HarnessSettledAttempt` records (attempt + outcome) rather
+ * than wall-clock summaries. The controller, which owns the clock, renders
+ * public `HarnessAttemptSummary` values from those records.
+ */
+/** Prompt-family kinds run agent attempts; structural kinds do not. */
+export const PROMPT_FAMILY_KINDS = ["prompt", "skill", "prompt_template"];
+/**
+ * Illegal lifecycle transition rejected by the reducer. Extends `Error` so the
+ * controller can attach it as a preserved `cause` on public boundary errors.
+ */
+export class HarnessLifecycleViolation extends Error {
+    code;
+    state;
+    command;
+    constructor(code, message, state, command) {
+        super(message);
+        this.name = "HarnessLifecycleViolation";
+        this.code = code;
+        this.state = state;
+        this.command = command;
+    }
+}
+//# sourceMappingURL=operation-lifecycle-types.js.map

package/dist/harness/operation-lifecycle-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-lifecycle-types.js","sourceRoot":"","sources":["../../src/harness/operation-lifecycle-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAoC,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAwF3G;;;GAGG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACnC,IAAI,CAAgC;IACpC,KAAK,CAAwB;IAC7B,OAAO,CAA0B;IAEjD,YACC,IAAmC,EACnC,OAAe,EACf,KAA4B,EAC5B,OAAgC,EAC/B;QACD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAAA,CACvB;CACD","sourcesContent":["/**\n * Pure operation-lifecycle model for AgentHarness public operations.\n *\n * One public operation (`prompt`, `skill`, `promptFromTemplate`, `compact`,\n * `navigateTree`) may span several low-level agent attempts. This module\n * declares the identity, state, command, and violation vocabulary used to\n * keep that distinction provable. It imports nothing: no harness, session,\n * provider, or Node types, so it stays a leaf for the import-cycle ratchet\n * and is safe to export from a browser entry point.\n *\n * Reducer-purity note: the reducer never reads a clock, so its `settling`\n * state carries `HarnessSettledAttempt` records (attempt + outcome) rather\n * than wall-clock summaries. The controller, which owns the clock, renders\n * public `HarnessAttemptSummary` values from those records.\n */\n\n/** Public operation kinds that own the harness at most one at a time. */\nexport type HarnessOperationKind = \"prompt\" | \"skill\" | \"prompt_template\" | \"manual_compaction\" | \"tree_navigation\";\n\n/** Prompt-family kinds run agent attempts; structural kinds do not. */\nexport const PROMPT_FAMILY_KINDS: readonly HarnessOperationKind[] = [\"prompt\", \"skill\", \"prompt_template\"];\n\nexport type HarnessOperationStage =\n\t| \"preparing\"\n\t| \"attempt_running\"\n\t| \"save_point\"\n\t| \"recovering_overflow\"\n\t| \"structural_running\"\n\t| \"committing\"\n\t| \"settling\";\n\n/** Correlation identity of one public operation. `sequence` is monotonic per harness instance. */\nexport interface HarnessOperationRef {\n\treadonly operationId: string;\n\treadonly sequence: number;\n\treadonly kind: HarnessOperationKind;\n\treadonly startedAtMs: number;\n}\n\n/** Overflow recovery is a substage of the originating prompt operation, never its own operation. */\nexport type HarnessAttemptReason = \"initial\" | \"context_overflow_recovery\";\n\nexport interface HarnessAttemptRef {\n\treadonly operationId: string;\n\treadonly attemptId: string;\n\treadonly index: number;\n\treadonly reason: HarnessAttemptReason;\n\treadonly startedAtMs: number;\n}\n\nexport type HarnessAttemptOutcome = \"completed\" | \"failed\" | \"aborted\" | \"overflow\";\n\n/** Reducer-side record of a finished attempt; carries no wall-clock data beyond what the attempt ref captured. */\nexport interface HarnessSettledAttempt {\n\treadonly attempt: HarnessAttemptRef;\n\treadonly outcome: HarnessAttemptOutcome;\n}\n\n/** Public attempt summary rendered by the controller from settled records plus its own clock readings. */\nexport interface HarnessAttemptSummary {\n\treadonly attemptId: string;\n\treadonly index: number;\n\treadonly reason: HarnessAttemptReason;\n\treadonly outcome: HarnessAttemptOutcome;\n\treadonly startedAtMs: number;\n\treadonly finishedAtMs: number;\n}\n\nexport type HarnessOperationOutcome =\n\t| { readonly status: \"completed\" }\n\t| { readonly status: \"failed\"; readonly code: string; readonly message: string }\n\t| { readonly status: \"aborted\"; readonly reason?: string }\n\t| { readonly status: \"cancelled\"; readonly reason: string };\n\nexport type HarnessLifecycleState =\n\t| { readonly tag: \"idle\"; readonly lastSequence: number }\n\t| {\n\t\t\treadonly tag: \"active\";\n\t\t\treadonly operation: HarnessOperationRef;\n\t\t\treadonly stage: HarnessOperationStage;\n\t\t\treadonly attempt?: HarnessAttemptRef;\n\t\t\treadonly attempts: readonly HarnessSettledAttempt[];\n\t\t\treadonly abortRequested: boolean;\n\t  }\n\t| {\n\t\t\treadonly tag: \"settling\";\n\t\t\treadonly operation: HarnessOperationRef;\n\t\t\treadonly outcome: HarnessOperationOutcome;\n\t\t\treadonly attempts: readonly HarnessSettledAttempt[];\n\t\t\treadonly abortRequested: boolean;\n\t  };\n\nexport type HarnessLifecycleCommand =\n\t| { readonly type: \"begin\"; readonly operation: HarnessOperationRef }\n\t| { readonly type: \"stage\"; readonly operationId: string; readonly stage: HarnessOperationStage }\n\t| { readonly type: \"attempt_begin\"; readonly attempt: HarnessAttemptRef }\n\t| { readonly type: \"attempt_end\"; readonly attemptId: string; readonly outcome: HarnessAttemptOutcome }\n\t| { readonly type: \"abort_request\"; readonly operationId: string }\n\t| { readonly type: \"settle_begin\"; readonly operationId: string; readonly outcome: HarnessOperationOutcome }\n\t| { readonly type: \"settle_finish\"; readonly operationId: string };\n\nexport type HarnessLifecycleViolationCode =\n\t| \"busy\"\n\t| \"stale_operation\"\n\t| \"invalid_transition\"\n\t| \"attempt_mismatch\"\n\t| \"sequence_violation\";\n\n/**\n * Illegal lifecycle transition rejected by the reducer. Extends `Error` so the\n * controller can attach it as a preserved `cause` on public boundary errors.\n */\nexport class HarnessLifecycleViolation extends Error {\n\tpublic readonly code: HarnessLifecycleViolationCode;\n\tpublic readonly state: HarnessLifecycleState;\n\tpublic readonly command: HarnessLifecycleCommand;\n\n\tconstructor(\n\t\tcode: HarnessLifecycleViolationCode,\n\t\tmessage: string,\n\t\tstate: HarnessLifecycleState,\n\t\tcommand: HarnessLifecycleCommand,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"HarnessLifecycleViolation\";\n\t\tthis.code = code;\n\t\tthis.state = state;\n\t\tthis.command = command;\n\t}\n}\n\nexport type HarnessLifecycleResult<T> =\n\t| { readonly ok: true; readonly value: T }\n\t| { readonly ok: false; readonly error: HarnessLifecycleViolation };\n\n/** Clock and identity factories injected so lifecycle behavior is deterministic under test. */\nexport interface HarnessLifecycleDependencies {\n\treadonly createOperationId: () => string;\n\treadonly now: () => number;\n}\n"]}

package/dist/harness/operation-outcome.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Pure outcome classification and error aggregation for harness operations.
+ *
+ * Everything here is a total function over already-observed results: it never
+ * touches lifecycle state, sessions, providers, or clocks. Keeping the rules in
+ * one leaf module makes the precedence auditable in isolation and keeps
+ * `agent-harness.ts` free of the branch-heavy classification tables.
+ */
+import { type AssistantMessage } from "omk-ai";
+import type { HarnessAttemptOutcome, HarnessOperationOutcome } from "./operation-lifecycle-types.ts";
+import type { NavigateTreeResult } from "./types.ts";
+import { AgentHarnessError } from "./types.ts";
+/**
+ * True only for an error that *is* an abort, not merely an error raised while
+ * an abort signal happened to be up. `AgentHarnessError` has no "aborted" code,
+ * so an explicit abort reaches us as a subsystem error carrying code "aborted"
+ * or as a DOM-style `AbortError`.
+ */
+export declare function isExplicitAbortError(error: unknown): boolean;
+/** Map a subsystem failure onto the harness' stable top-level classification. */
+export declare function normalizeHarnessError(error: unknown, fallbackCode: AgentHarnessError["code"]): AgentHarnessError;
+/** Result-based outcome for prompt-family operations that resolve with a failure/abort assistant message. */
+export declare function classifyAssistantOutcome(message: AssistantMessage): HarnessOperationOutcome | undefined;
+/** Structural cancellation is a distinct, non-failure terminal outcome. */
+export declare function classifyNavigateTreeOutcome(result: NavigateTreeResult): HarnessOperationOutcome;
+/** A thrown attempt body is an aborted attempt only when the error itself is an abort. */
+export declare function classifyAttemptFailure(error: unknown): HarnessAttemptOutcome;
+/** Context overflow is a recoverable attempt outcome, not an attempt failure. */
+export declare function classifyAttemptOutcome(message: AssistantMessage, contextWindow: number | undefined): HarnessAttemptOutcome;
+/**
+ * Single outcome-precedence rule for every public operation:
+ *
+ *   session persistence failure > non-abort body/hook failure >
+ *   explicit abort > result-classified outcome > completed
+ *
+ * A raised abort signal alone never downgrades another failure to "aborted":
+ * only an error that *is* an abort does. Otherwise a flush failure during an
+ * aborted turn would settle as "aborted" while the public promise rejected
+ * with "session".
+ */
+export declare function resolveOperationOutcome<T>(input: {
+    readonly signalAborted: boolean;
+    readonly result: T | undefined;
+    readonly bodyError: unknown;
+    readonly flushError: unknown;
+    readonly classifyResult: ((result: T) => HarnessOperationOutcome | undefined) | undefined;
+    readonly fallbackCode: AgentHarnessError["code"];
+}): HarnessOperationOutcome;
+/**
+ * The error a boundary should throw after several steps may have failed, or
+ * `undefined` when none did. A single failure is returned untouched so its
+ * own classification survives; several are kept reachable through one
+ * `AggregateError`, classified by the first (primary) failure. This is what
+ * lets a failing boundary flush report *alongside* the body or listener error
+ * it followed instead of erasing it.
+ */
+export declare function combineBoundaryErrors(errors: readonly unknown[], message: string, fallbackCode: AgentHarnessError["code"]): unknown;
+/**
+ * Which error a public operation rejects with, or `undefined` on success.
+ *
+ * Mirrors the outcome precedence, but every concurrent cause is preserved in an
+ * `AggregateError` so an audit can still see that, say, the body and the final
+ * flush failed together.
+ */
+export declare function resolveOperationFailure(input: {
+    readonly bodyError: unknown;
+    readonly flushError: unknown;
+    readonly settleError: unknown;
+    readonly fallbackCode: AgentHarnessError["code"];
+}): AgentHarnessError | undefined;
+//# sourceMappingURL=operation-outcome.d.ts.map

package/dist/harness/operation-outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-outcome.d.ts","sourceRoot":"","sources":["../../src/harness/operation-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,gBAAgB,EAAqB,MAAM,QAAQ,CAAC;AAClE,OAAO,KAAK,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACrG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAA8D,MAAM,YAAY,CAAC;AAE3G;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAI5D;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAOhH;AAED,6GAA6G;AAC7G,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,GAAG,uBAAuB,GAAG,SAAS,CAMvG;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,kBAAkB,GAAG,uBAAuB,CAE/F;AAED,0FAA0F;AAC1F,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAE5E;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,MAAM,GAAG,SAAS,GAC/B,qBAAqB,CAKvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,KAAK,EAAE;IACjD,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,uBAAuB,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;CACjD,GAAG,uBAAuB,CAiB1B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,SAAS,OAAO,EAAE,EAC1B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,GACrC,OAAO,CAKT;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;CACjD,GAAG,iBAAiB,GAAG,SAAS,CAoBhC","sourcesContent":["/**\n * Pure outcome classification and error aggregation for harness operations.\n *\n * Everything here is a total function over already-observed results: it never\n * touches lifecycle state, sessions, providers, or clocks. Keeping the rules in\n * one leaf module makes the precedence auditable in isolation and keeps\n * `agent-harness.ts` free of the branch-heavy classification tables.\n */\n\nimport { type AssistantMessage, isContextOverflow } from \"omk-ai\";\nimport type { HarnessAttemptOutcome, HarnessOperationOutcome } from \"./operation-lifecycle-types.ts\";\nimport type { NavigateTreeResult } from \"./types.ts\";\nimport { AgentHarnessError, BranchSummaryError, CompactionError, SessionError, toError } from \"./types.ts\";\n\n/**\n * True only for an error that *is* an abort, not merely an error raised while\n * an abort signal happened to be up. `AgentHarnessError` has no \"aborted\" code,\n * so an explicit abort reaches us as a subsystem error carrying code \"aborted\"\n * or as a DOM-style `AbortError`.\n */\nexport function isExplicitAbortError(error: unknown): boolean {\n\tconst cause = toError(error);\n\tif (cause.name === \"AbortError\") return true;\n\treturn (cause instanceof CompactionError || cause instanceof BranchSummaryError) && cause.code === \"aborted\";\n}\n\n/** Map a subsystem failure onto the harness' stable top-level classification. */\nexport function normalizeHarnessError(error: unknown, fallbackCode: AgentHarnessError[\"code\"]): AgentHarnessError {\n\tif (error instanceof AgentHarnessError) return error;\n\tconst cause = toError(error);\n\tif (cause instanceof SessionError) return new AgentHarnessError(\"session\", cause.message, cause);\n\tif (cause instanceof CompactionError) return new AgentHarnessError(\"compaction\", cause.message, cause);\n\tif (cause instanceof BranchSummaryError) return new AgentHarnessError(\"branch_summary\", cause.message, cause);\n\treturn new AgentHarnessError(fallbackCode, cause.message, cause);\n}\n\n/** Result-based outcome for prompt-family operations that resolve with a failure/abort assistant message. */\nexport function classifyAssistantOutcome(message: AssistantMessage): HarnessOperationOutcome | undefined {\n\tif (message.stopReason === \"aborted\") return { status: \"aborted\" };\n\tif (message.stopReason === \"error\") {\n\t\treturn { status: \"failed\", code: \"provider\", message: message.errorMessage ?? \"Provider error\" };\n\t}\n\treturn undefined;\n}\n\n/** Structural cancellation is a distinct, non-failure terminal outcome. */\nexport function classifyNavigateTreeOutcome(result: NavigateTreeResult): HarnessOperationOutcome {\n\treturn result.cancelled ? { status: \"cancelled\", reason: \"tree_navigation_cancelled\" } : { status: \"completed\" };\n}\n\n/** A thrown attempt body is an aborted attempt only when the error itself is an abort. */\nexport function classifyAttemptFailure(error: unknown): HarnessAttemptOutcome {\n\treturn isExplicitAbortError(error) ? \"aborted\" : \"failed\";\n}\n\n/** Context overflow is a recoverable attempt outcome, not an attempt failure. */\nexport function classifyAttemptOutcome(\n\tmessage: AssistantMessage,\n\tcontextWindow: number | undefined,\n): HarnessAttemptOutcome {\n\tif (message.stopReason === \"aborted\") return \"aborted\";\n\tif (isContextOverflow(message, contextWindow)) return \"overflow\";\n\tif (message.stopReason === \"error\") return \"failed\";\n\treturn \"completed\";\n}\n\n/**\n * Single outcome-precedence rule for every public operation:\n *\n *   session persistence failure > non-abort body/hook failure >\n *   explicit abort > result-classified outcome > completed\n *\n * A raised abort signal alone never downgrades another failure to \"aborted\":\n * only an error that *is* an abort does. Otherwise a flush failure during an\n * aborted turn would settle as \"aborted\" while the public promise rejected\n * with \"session\".\n */\nexport function resolveOperationOutcome<T>(input: {\n\treadonly signalAborted: boolean;\n\treadonly result: T | undefined;\n\treadonly bodyError: unknown;\n\treadonly flushError: unknown;\n\treadonly classifyResult: ((result: T) => HarnessOperationOutcome | undefined) | undefined;\n\treadonly fallbackCode: AgentHarnessError[\"code\"];\n}): HarnessOperationOutcome {\n\tif (input.flushError !== undefined) {\n\t\t// Mirror `resolveOperationFailure`: a flush error that already carries a\n\t\t// harness classification (e.g. an `invalid_state` coordinator reentry)\n\t\t// keeps it, so the recorded outcome and the rejection never disagree.\n\t\tconst error = normalizeHarnessError(input.flushError, \"session\");\n\t\treturn { status: \"failed\", code: error.code, message: error.message };\n\t}\n\tif (input.bodyError !== undefined) {\n\t\tif (isExplicitAbortError(input.bodyError)) return { status: \"aborted\" };\n\t\tconst error = normalizeHarnessError(input.bodyError, input.fallbackCode);\n\t\treturn { status: \"failed\", code: error.code, message: error.message };\n\t}\n\treturn (\n\t\tinput.classifyResult?.(input.result as T) ??\n\t\t(input.signalAborted ? { status: \"aborted\" } : { status: \"completed\" })\n\t);\n}\n\n/**\n * The error a boundary should throw after several steps may have failed, or\n * `undefined` when none did. A single failure is returned untouched so its\n * own classification survives; several are kept reachable through one\n * `AggregateError`, classified by the first (primary) failure. This is what\n * lets a failing boundary flush report *alongside* the body or listener error\n * it followed instead of erasing it.\n */\nexport function combineBoundaryErrors(\n\terrors: readonly unknown[],\n\tmessage: string,\n\tfallbackCode: AgentHarnessError[\"code\"],\n): unknown {\n\tconst present = errors.filter((error) => error !== undefined);\n\tif (present.length <= 1) return present[0];\n\tconst cause = new AggregateError(present.map(toError), message);\n\treturn new AgentHarnessError(normalizeHarnessError(present[0], fallbackCode).code, cause.message, cause);\n}\n\n/**\n * Which error a public operation rejects with, or `undefined` on success.\n *\n * Mirrors the outcome precedence, but every concurrent cause is preserved in an\n * `AggregateError` so an audit can still see that, say, the body and the final\n * flush failed together.\n */\nexport function resolveOperationFailure(input: {\n\treadonly bodyError: unknown;\n\treadonly flushError: unknown;\n\treadonly settleError: unknown;\n\treadonly fallbackCode: AgentHarnessError[\"code\"];\n}): AgentHarnessError | undefined {\n\tconst primaryError = input.bodyError ?? input.flushError;\n\tif (primaryError !== undefined && input.settleError !== undefined) {\n\t\tconst cause = new AggregateError(\n\t\t\t[toError(primaryError), toError(input.settleError)],\n\t\t\t\"Operation failed and settlement failed\",\n\t\t);\n\t\treturn new AgentHarnessError(normalizeHarnessError(primaryError, input.fallbackCode).code, cause.message, cause);\n\t}\n\tif (input.settleError !== undefined) return normalizeHarnessError(input.settleError, \"hook\");\n\tif (input.flushError !== undefined) {\n\t\tif (input.bodyError === undefined) return normalizeHarnessError(input.flushError, \"session\");\n\t\tconst cause = new AggregateError(\n\t\t\t[toError(input.bodyError), toError(input.flushError)],\n\t\t\t\"Operation failed and the final flush failed\",\n\t\t);\n\t\treturn new AgentHarnessError(\"session\", cause.message, cause);\n\t}\n\tif (input.bodyError !== undefined) return normalizeHarnessError(input.bodyError, input.fallbackCode);\n\treturn undefined;\n}\n"]}