omk-protocol 0.98.4 → 0.98.5

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [0.98.5] - 2026-09-12
+
+### Added
+
+- Added immutable verified-run contracts and validated start, candidate-resume, writer-restart and task-retry commands, plus bounded static DAG types and ordering helpers. Protocol data does not execute or approve work by itself.
+
 ## [0.98.4] - 2026-09-10
 
 ### Added

package/README.md

@@ -12,6 +12,21 @@ TaskSpec -> ExecutionAttempt -> Observation -> EvaluationResult -> RuntimeDecisi
 - `TaskSpec`, `ExecutionAttempt`, `Observation`, `ClaimPredicate`
 - `ClaimEvaluation`, `EvaluationResult`, `RuntimeDecision`, `WaiverRecord`
 - Runtime parsers for every top-level record
+- Opt-in command/scripted-agent profiles: immutable `RunContract`, `RunScriptedWriter`,
+  `RunStartCommand`, `parseRunContract()` and `parseRunStartCommand()`
+  (`omk.verified-run.v1` and `omk.verified-command.v1`). The scripted profile bounds
+  approved steps and offline logical requests. Parsing never grants approval or executes work.
+- `RunResumeCommand`, `parseRunResumeCommand()` and `MAX_VERIFIED_RUN_GENERATIONS`:
+  candidate/contract/revision/generation-bound intent for host-governed recovery.
+  The runtime must still verify owner, clock, budget, process termination and evidence.
+- `RunWriterRestartCommand` / `parseRunWriterRestartCommand()` separately bind a local
+  writer restart to an immutable input checkpoint. They grant no remote replay authority.
+- Bounded `linux-command-dag-v1`: `RunDagWriter`, `RunDagTask`, `orderRunDag()`,
+  `runDagAncestors()`, `MAX_RUN_DAG_TASKS` and `MAX_RUN_TASK_ATTEMPTS`. Pure graph
+  ordering/closure does not schedule or authorize a process.
+- `RunTaskRetryCommand` / `parseRunTaskRetryCommand()` bind a failed/interrupted task
+  selection to the original input and exact revision/generation. Empty selections
+  request pending-only continuation, not permission to omit a failed dependency.
 - `evaluateTask()` and `reduceRuntimeDecision()`
 - Claim Closure Graph v1: `evaluateProofClosure()`, `validateClaimGraph()`,
   `minimalBlockingCut()` and the readonly claim/observation/waiver vocabulary

package/dist/index.d.ts

@@ -4,6 +4,11 @@ export { ClaimGraphError, canonicalClaimGraph, rootClaimIds, topologicalClaimOrd
 export { type BlockingCutExplanation, CLAIM_GRAPH_SCHEMA_VERSION, CLAIM_VERDICT_PRECEDENCE, type ClaimClosureEvaluation, type ClaimGraph, type ClaimNode, type ClaimNodeKind, type ClaimRule, type ClaimSeverity, type ClaimVerdict, OBSERVATION_TRUST_RANK, type ObservationNode, type ObservationPolarity, type ObservationSource, type ProofClosureInput, type ProofClosureResult, type VerificationVerdict, type WaiverNode, type WitnessIndependencePolicy, type WorkspaceCompleteness, } from "./claims/claim-types.ts";
 export { reduceRuntimeDecision } from "./decision.ts";
 export { evaluateTask, ProtocolInvariantError } from "./evaluation.ts";
+export { parseRunContract, parseRunStartCommand, type RunCheck, type RunContract, RunContractError, type RunPhaseBudget, type RunScriptedWriter, type RunStartCommand, VERIFIED_COMMAND_VERSION, VERIFIED_RUN_VERSION, } from "./run-contract.ts";
+export { MAX_RUN_DAG_TASKS, MAX_RUN_TASK_ATTEMPTS, orderRunDag, type RunDagTask, type RunDagWriter, runDagAncestors, } from "./run-dag.ts";
+export { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand, type RunResumeCommand } from "./run-resume.ts";
+export { parseRunTaskRetryCommand, type RunTaskRetryCommand } from "./run-task-retry.ts";
+export { parseRunWriterRestartCommand, type RunWriterRestartCommand } from "./run-writer-restart.ts";
 export type { AllCondition, AnyCondition, AttemptExecutor, AttemptOutcome, AttemptTrigger, ClaimCondition, ClaimEvaluation, ClaimPredicate, ClaimReasonCode, ClaimResult, EvaluationInput, EvaluationResult, ExecutionAttempt, JsonObject, JsonPrimitive, JsonValue, NotCondition, Observation, ObservationCondition, ProtocolVersion, RequirementLevel, RuntimeAction, RuntimeDecision, RuntimeDecisionInput, RuntimeDecisionPolicy, RuntimeDecisionReason, SemanticVerdict, TaskSpec, WaiverRecord, } from "./types.ts";
 export { PROTOCOL_VERSION } from "./types.ts";
 export { ProtocolValidationError, parseEvaluationResult, parseExecutionAttempt, parseObservation, parseRuntimeDecision, parseTaskSpec, parseWaiverRecord, } from "./validation.ts";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,KAAK,sBAAsB,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACvE,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,QAAQ,EACR,YAAY,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC","sourcesContent":["export {\n\texplainBlockingCut,\n\tisBlockingVerdict,\n\tMAX_BLOCKING_CUT_CANDIDATES,\n\tminimalBlockingCut,\n} from \"./claims/claim-blocking-cut.ts\";\nexport { evaluateProofClosure } from \"./claims/claim-closure.ts\";\nexport {\n\tClaimGraphError,\n\tcanonicalClaimGraph,\n\trootClaimIds,\n\ttopologicalClaimOrder,\n\tvalidateClaimGraph,\n} from \"./claims/claim-graph.ts\";\nexport {\n\ttype BlockingCutExplanation,\n\tCLAIM_GRAPH_SCHEMA_VERSION,\n\tCLAIM_VERDICT_PRECEDENCE,\n\ttype ClaimClosureEvaluation,\n\ttype ClaimGraph,\n\ttype ClaimNode,\n\ttype ClaimNodeKind,\n\ttype ClaimRule,\n\ttype ClaimSeverity,\n\ttype ClaimVerdict,\n\tOBSERVATION_TRUST_RANK,\n\ttype ObservationNode,\n\ttype ObservationPolarity,\n\ttype ObservationSource,\n\ttype ProofClosureInput,\n\ttype ProofClosureResult,\n\ttype VerificationVerdict,\n\ttype WaiverNode,\n\ttype WitnessIndependencePolicy,\n\ttype WorkspaceCompleteness,\n} from \"./claims/claim-types.ts\";\nexport { reduceRuntimeDecision } from \"./decision.ts\";\nexport { evaluateTask, ProtocolInvariantError } from \"./evaluation.ts\";\nexport type {\n\tAllCondition,\n\tAnyCondition,\n\tAttemptExecutor,\n\tAttemptOutcome,\n\tAttemptTrigger,\n\tClaimCondition,\n\tClaimEvaluation,\n\tClaimPredicate,\n\tClaimReasonCode,\n\tClaimResult,\n\tEvaluationInput,\n\tEvaluationResult,\n\tExecutionAttempt,\n\tJsonObject,\n\tJsonPrimitive,\n\tJsonValue,\n\tNotCondition,\n\tObservation,\n\tObservationCondition,\n\tProtocolVersion,\n\tRequirementLevel,\n\tRuntimeAction,\n\tRuntimeDecision,\n\tRuntimeDecisionInput,\n\tRuntimeDecisionPolicy,\n\tRuntimeDecisionReason,\n\tSemanticVerdict,\n\tTaskSpec,\n\tWaiverRecord,\n} from \"./types.ts\";\nexport { PROTOCOL_VERSION } from \"./types.ts\";\nexport {\n\tProtocolValidationError,\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseRuntimeDecision,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,KAAK,sBAAsB,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,wBAAwB,EACxB,oBAAoB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,eAAe,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACrG,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,eAAe,EACf,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,QAAQ,EACR,YAAY,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC","sourcesContent":["export {\n\texplainBlockingCut,\n\tisBlockingVerdict,\n\tMAX_BLOCKING_CUT_CANDIDATES,\n\tminimalBlockingCut,\n} from \"./claims/claim-blocking-cut.ts\";\nexport { evaluateProofClosure } from \"./claims/claim-closure.ts\";\nexport {\n\tClaimGraphError,\n\tcanonicalClaimGraph,\n\trootClaimIds,\n\ttopologicalClaimOrder,\n\tvalidateClaimGraph,\n} from \"./claims/claim-graph.ts\";\nexport {\n\ttype BlockingCutExplanation,\n\tCLAIM_GRAPH_SCHEMA_VERSION,\n\tCLAIM_VERDICT_PRECEDENCE,\n\ttype ClaimClosureEvaluation,\n\ttype ClaimGraph,\n\ttype ClaimNode,\n\ttype ClaimNodeKind,\n\ttype ClaimRule,\n\ttype ClaimSeverity,\n\ttype ClaimVerdict,\n\tOBSERVATION_TRUST_RANK,\n\ttype ObservationNode,\n\ttype ObservationPolarity,\n\ttype ObservationSource,\n\ttype ProofClosureInput,\n\ttype ProofClosureResult,\n\ttype VerificationVerdict,\n\ttype WaiverNode,\n\ttype WitnessIndependencePolicy,\n\ttype WorkspaceCompleteness,\n} from \"./claims/claim-types.ts\";\nexport { reduceRuntimeDecision } from \"./decision.ts\";\nexport { evaluateTask, ProtocolInvariantError } from \"./evaluation.ts\";\nexport {\n\tparseRunContract,\n\tparseRunStartCommand,\n\ttype RunCheck,\n\ttype RunContract,\n\tRunContractError,\n\ttype RunPhaseBudget,\n\ttype RunScriptedWriter,\n\ttype RunStartCommand,\n\tVERIFIED_COMMAND_VERSION,\n\tVERIFIED_RUN_VERSION,\n} from \"./run-contract.ts\";\nexport {\n\tMAX_RUN_DAG_TASKS,\n\tMAX_RUN_TASK_ATTEMPTS,\n\torderRunDag,\n\ttype RunDagTask,\n\ttype RunDagWriter,\n\trunDagAncestors,\n} from \"./run-dag.ts\";\nexport { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand, type RunResumeCommand } from \"./run-resume.ts\";\nexport { parseRunTaskRetryCommand, type RunTaskRetryCommand } from \"./run-task-retry.ts\";\nexport { parseRunWriterRestartCommand, type RunWriterRestartCommand } from \"./run-writer-restart.ts\";\nexport type {\n\tAllCondition,\n\tAnyCondition,\n\tAttemptExecutor,\n\tAttemptOutcome,\n\tAttemptTrigger,\n\tClaimCondition,\n\tClaimEvaluation,\n\tClaimPredicate,\n\tClaimReasonCode,\n\tClaimResult,\n\tEvaluationInput,\n\tEvaluationResult,\n\tExecutionAttempt,\n\tJsonObject,\n\tJsonPrimitive,\n\tJsonValue,\n\tNotCondition,\n\tObservation,\n\tObservationCondition,\n\tProtocolVersion,\n\tRequirementLevel,\n\tRuntimeAction,\n\tRuntimeDecision,\n\tRuntimeDecisionInput,\n\tRuntimeDecisionPolicy,\n\tRuntimeDecisionReason,\n\tSemanticVerdict,\n\tTaskSpec,\n\tWaiverRecord,\n} from \"./types.ts\";\nexport { PROTOCOL_VERSION } from \"./types.ts\";\nexport {\n\tProtocolValidationError,\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseRuntimeDecision,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n"]}

package/dist/index.js

@@ -4,6 +4,11 @@ export { ClaimGraphError, canonicalClaimGraph, rootClaimIds, topologicalClaimOrd
 export { CLAIM_GRAPH_SCHEMA_VERSION, CLAIM_VERDICT_PRECEDENCE, OBSERVATION_TRUST_RANK, } from "./claims/claim-types.js";
 export { reduceRuntimeDecision } from "./decision.js";
 export { evaluateTask, ProtocolInvariantError } from "./evaluation.js";
+export { parseRunContract, parseRunStartCommand, RunContractError, VERIFIED_COMMAND_VERSION, VERIFIED_RUN_VERSION, } from "./run-contract.js";
+export { MAX_RUN_DAG_TASKS, MAX_RUN_TASK_ATTEMPTS, orderRunDag, runDagAncestors, } from "./run-dag.js";
+export { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand } from "./run-resume.js";
+export { parseRunTaskRetryCommand } from "./run-task-retry.js";
+export { parseRunWriterRestartCommand } from "./run-writer-restart.js";
 export { PROTOCOL_VERSION } from "./types.js";
 export { ProtocolValidationError, parseEvaluationResult, parseExecutionAttempt, parseObservation, parseRuntimeDecision, parseTaskSpec, parseWaiverRecord, } from "./validation.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEN,0BAA0B,EAC1B,wBAAwB,EAQxB,sBAAsB,GAUtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAgCvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC","sourcesContent":["export {\n\texplainBlockingCut,\n\tisBlockingVerdict,\n\tMAX_BLOCKING_CUT_CANDIDATES,\n\tminimalBlockingCut,\n} from \"./claims/claim-blocking-cut.ts\";\nexport { evaluateProofClosure } from \"./claims/claim-closure.ts\";\nexport {\n\tClaimGraphError,\n\tcanonicalClaimGraph,\n\trootClaimIds,\n\ttopologicalClaimOrder,\n\tvalidateClaimGraph,\n} from \"./claims/claim-graph.ts\";\nexport {\n\ttype BlockingCutExplanation,\n\tCLAIM_GRAPH_SCHEMA_VERSION,\n\tCLAIM_VERDICT_PRECEDENCE,\n\ttype ClaimClosureEvaluation,\n\ttype ClaimGraph,\n\ttype ClaimNode,\n\ttype ClaimNodeKind,\n\ttype ClaimRule,\n\ttype ClaimSeverity,\n\ttype ClaimVerdict,\n\tOBSERVATION_TRUST_RANK,\n\ttype ObservationNode,\n\ttype ObservationPolarity,\n\ttype ObservationSource,\n\ttype ProofClosureInput,\n\ttype ProofClosureResult,\n\ttype VerificationVerdict,\n\ttype WaiverNode,\n\ttype WitnessIndependencePolicy,\n\ttype WorkspaceCompleteness,\n} from \"./claims/claim-types.ts\";\nexport { reduceRuntimeDecision } from \"./decision.ts\";\nexport { evaluateTask, ProtocolInvariantError } from \"./evaluation.ts\";\nexport type {\n\tAllCondition,\n\tAnyCondition,\n\tAttemptExecutor,\n\tAttemptOutcome,\n\tAttemptTrigger,\n\tClaimCondition,\n\tClaimEvaluation,\n\tClaimPredicate,\n\tClaimReasonCode,\n\tClaimResult,\n\tEvaluationInput,\n\tEvaluationResult,\n\tExecutionAttempt,\n\tJsonObject,\n\tJsonPrimitive,\n\tJsonValue,\n\tNotCondition,\n\tObservation,\n\tObservationCondition,\n\tProtocolVersion,\n\tRequirementLevel,\n\tRuntimeAction,\n\tRuntimeDecision,\n\tRuntimeDecisionInput,\n\tRuntimeDecisionPolicy,\n\tRuntimeDecisionReason,\n\tSemanticVerdict,\n\tTaskSpec,\n\tWaiverRecord,\n} from \"./types.ts\";\nexport { PROTOCOL_VERSION } from \"./types.ts\";\nexport {\n\tProtocolValidationError,\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseRuntimeDecision,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEN,0BAA0B,EAC1B,wBAAwB,EAQxB,sBAAsB,GAUtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EAGpB,gBAAgB,EAIhB,wBAAwB,EACxB,oBAAoB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EAGX,eAAe,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAA4B,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAgC,MAAM,yBAAyB,CAAC;AAgCrG,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC","sourcesContent":["export {\n\texplainBlockingCut,\n\tisBlockingVerdict,\n\tMAX_BLOCKING_CUT_CANDIDATES,\n\tminimalBlockingCut,\n} from \"./claims/claim-blocking-cut.ts\";\nexport { evaluateProofClosure } from \"./claims/claim-closure.ts\";\nexport {\n\tClaimGraphError,\n\tcanonicalClaimGraph,\n\trootClaimIds,\n\ttopologicalClaimOrder,\n\tvalidateClaimGraph,\n} from \"./claims/claim-graph.ts\";\nexport {\n\ttype BlockingCutExplanation,\n\tCLAIM_GRAPH_SCHEMA_VERSION,\n\tCLAIM_VERDICT_PRECEDENCE,\n\ttype ClaimClosureEvaluation,\n\ttype ClaimGraph,\n\ttype ClaimNode,\n\ttype ClaimNodeKind,\n\ttype ClaimRule,\n\ttype ClaimSeverity,\n\ttype ClaimVerdict,\n\tOBSERVATION_TRUST_RANK,\n\ttype ObservationNode,\n\ttype ObservationPolarity,\n\ttype ObservationSource,\n\ttype ProofClosureInput,\n\ttype ProofClosureResult,\n\ttype VerificationVerdict,\n\ttype WaiverNode,\n\ttype WitnessIndependencePolicy,\n\ttype WorkspaceCompleteness,\n} from \"./claims/claim-types.ts\";\nexport { reduceRuntimeDecision } from \"./decision.ts\";\nexport { evaluateTask, ProtocolInvariantError } from \"./evaluation.ts\";\nexport {\n\tparseRunContract,\n\tparseRunStartCommand,\n\ttype RunCheck,\n\ttype RunContract,\n\tRunContractError,\n\ttype RunPhaseBudget,\n\ttype RunScriptedWriter,\n\ttype RunStartCommand,\n\tVERIFIED_COMMAND_VERSION,\n\tVERIFIED_RUN_VERSION,\n} from \"./run-contract.ts\";\nexport {\n\tMAX_RUN_DAG_TASKS,\n\tMAX_RUN_TASK_ATTEMPTS,\n\torderRunDag,\n\ttype RunDagTask,\n\ttype RunDagWriter,\n\trunDagAncestors,\n} from \"./run-dag.ts\";\nexport { MAX_VERIFIED_RUN_GENERATIONS, parseRunResumeCommand, type RunResumeCommand } from \"./run-resume.ts\";\nexport { parseRunTaskRetryCommand, type RunTaskRetryCommand } from \"./run-task-retry.ts\";\nexport { parseRunWriterRestartCommand, type RunWriterRestartCommand } from \"./run-writer-restart.ts\";\nexport type {\n\tAllCondition,\n\tAnyCondition,\n\tAttemptExecutor,\n\tAttemptOutcome,\n\tAttemptTrigger,\n\tClaimCondition,\n\tClaimEvaluation,\n\tClaimPredicate,\n\tClaimReasonCode,\n\tClaimResult,\n\tEvaluationInput,\n\tEvaluationResult,\n\tExecutionAttempt,\n\tJsonObject,\n\tJsonPrimitive,\n\tJsonValue,\n\tNotCondition,\n\tObservation,\n\tObservationCondition,\n\tProtocolVersion,\n\tRequirementLevel,\n\tRuntimeAction,\n\tRuntimeDecision,\n\tRuntimeDecisionInput,\n\tRuntimeDecisionPolicy,\n\tRuntimeDecisionReason,\n\tSemanticVerdict,\n\tTaskSpec,\n\tWaiverRecord,\n} from \"./types.ts\";\nexport { PROTOCOL_VERSION } from \"./types.ts\";\nexport {\n\tProtocolValidationError,\n\tparseEvaluationResult,\n\tparseExecutionAttempt,\n\tparseObservation,\n\tparseRuntimeDecision,\n\tparseTaskSpec,\n\tparseWaiverRecord,\n} from \"./validation.ts\";\n"]}

package/dist/run-contract.d.ts

@@ -0,0 +1,58 @@
+import { type RunDagWriter } from "./run-dag.ts";
+export { RunContractError } from "./run-parsing.ts";
+export declare const VERIFIED_RUN_VERSION: "omk.verified-run.v1";
+export declare const VERIFIED_COMMAND_VERSION: "omk.verified-command.v1";
+interface RunContractFields {
+    readonly schemaVersion: typeof VERIFIED_RUN_VERSION;
+    readonly runId: string;
+    readonly goal: string;
+    readonly workspace: {
+        readonly root: string;
+        readonly baseDigest: string;
+    };
+    readonly writablePaths: readonly string[];
+    readonly checks: readonly RunCheck[];
+    readonly budget: RunPhaseBudget;
+    readonly apply: "artifact-only";
+}
+export interface RunScriptedWriter {
+    readonly kind: "scripted-agent";
+    readonly steps: readonly (readonly string[])[];
+    readonly maxRequests: number;
+}
+export type RunContract = RunContractFields & ({
+    readonly profile: "linux-command-v1";
+    readonly writer: readonly string[];
+} | {
+    readonly profile: "linux-scripted-agent-v1";
+    readonly writer: RunScriptedWriter;
+} | {
+    readonly profile: "linux-command-dag-v1";
+    readonly writer: RunDagWriter;
+});
+export interface RunCheck {
+    readonly claimId: string;
+    readonly argv: readonly string[];
+    readonly stdout: string;
+}
+export interface RunPhaseBudget {
+    readonly workMs: number;
+    readonly verifyMs: number;
+    readonly cleanupMs: number;
+    readonly maxOutputBytes: number;
+    readonly maxFiles: number;
+    readonly maxBytes: number;
+}
+export interface RunStartCommand {
+    readonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;
+    readonly kind: "start";
+    readonly runId: string;
+    readonly commandId: string;
+    readonly expectedRevision: 0;
+    readonly expectedGeneration: 0;
+    readonly contractDigest: string;
+}
+export declare function parseRunContract(value: unknown): RunContract;
+/** Parsing is not approval. The coordinator requires approval via its trusted host call. */
+export declare function parseRunStartCommand(value: unknown): RunStartCommand;
+//# sourceMappingURL=run-contract.d.ts.map

package/dist/run-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-contract.d.ts","sourceRoot":"","sources":["../src/run-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAcpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,eAAO,MAAM,oBAAoB,uBAAiC,CAAC;AACnE,eAAO,MAAM,wBAAwB,2BAAqC,CAAC;AAE3E,UAAU,iBAAiB;IAC1B,QAAQ,CAAC,aAAa,EAAE,OAAO,oBAAoB,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CAChC;AACD,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,MAAM,WAAW,GAAG,iBAAiB,GAC1C,CACG;IAAE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAC7E,CAAC;AACH,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AACD,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,aAAa,EAAE,OAAO,wBAAwB,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CAChC;AAQD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAuE5D;AAED,4FAA4F;AAC5F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CA0BpE","sourcesContent":["import { parseRunDagWriter, type RunDagWriter } from \"./run-dag.ts\";\nimport {\n\tRunContractError,\n\trunAbsolutePath,\n\trunArgv,\n\trunArray,\n\trunDigest,\n\trunId,\n\trunLimit,\n\trunObject,\n\trunRelativePath,\n\trunText,\n} from \"./run-parsing.ts\";\n\nexport { RunContractError } from \"./run-parsing.ts\";\nexport const VERIFIED_RUN_VERSION = \"omk.verified-run.v1\" as const;\nexport const VERIFIED_COMMAND_VERSION = \"omk.verified-command.v1\" as const;\n\ninterface RunContractFields {\n\treadonly schemaVersion: typeof VERIFIED_RUN_VERSION;\n\treadonly runId: string;\n\treadonly goal: string;\n\treadonly workspace: { readonly root: string; readonly baseDigest: string };\n\treadonly writablePaths: readonly string[];\n\treadonly checks: readonly RunCheck[];\n\treadonly budget: RunPhaseBudget;\n\treadonly apply: \"artifact-only\";\n}\nexport interface RunScriptedWriter {\n\treadonly kind: \"scripted-agent\";\n\treadonly steps: readonly (readonly string[])[];\n\treadonly maxRequests: number;\n}\nexport type RunContract = RunContractFields &\n\t(\n\t\t| { readonly profile: \"linux-command-v1\"; readonly writer: readonly string[] }\n\t\t| { readonly profile: \"linux-scripted-agent-v1\"; readonly writer: RunScriptedWriter }\n\t\t| { readonly profile: \"linux-command-dag-v1\"; readonly writer: RunDagWriter }\n\t);\nexport interface RunCheck {\n\treadonly claimId: string;\n\treadonly argv: readonly string[];\n\treadonly stdout: string;\n}\nexport interface RunPhaseBudget {\n\treadonly workMs: number;\n\treadonly verifyMs: number;\n\treadonly cleanupMs: number;\n\treadonly maxOutputBytes: number;\n\treadonly maxFiles: number;\n\treadonly maxBytes: number;\n}\nexport interface RunStartCommand {\n\treadonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;\n\treadonly kind: \"start\";\n\treadonly runId: string;\n\treadonly commandId: string;\n\treadonly expectedRevision: 0;\n\treadonly expectedGeneration: 0;\n\treadonly contractDigest: string;\n}\n\nfunction check(value: unknown): RunCheck {\n\tconst input = runObject(value, [\"claimId\", \"argv\", \"stdout\"]);\n\tif (typeof input.stdout !== \"string\" || input.stdout.length > 65536) throw new RunContractError(\"stdout\");\n\treturn Object.freeze({ claimId: runId(input.claimId), argv: runArgv(input.argv), stdout: input.stdout });\n}\n\nexport function parseRunContract(value: unknown): RunContract {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"profile\",\n\t\t\"runId\",\n\t\t\"goal\",\n\t\t\"workspace\",\n\t\t\"writablePaths\",\n\t\t\"writer\",\n\t\t\"checks\",\n\t\t\"budget\",\n\t\t\"apply\",\n\t]);\n\tif (input.schemaVersion !== VERIFIED_RUN_VERSION || input.apply !== \"artifact-only\")\n\t\tthrow new RunContractError(\"version/profile/apply\");\n\tconst workspace = runObject(input.workspace, [\"root\", \"baseDigest\"]);\n\tconst budget = runObject(input.budget, [\n\t\t\"workMs\",\n\t\t\"verifyMs\",\n\t\t\"cleanupMs\",\n\t\t\"maxOutputBytes\",\n\t\t\"maxFiles\",\n\t\t\"maxBytes\",\n\t]);\n\tconst checks = runArray(input.checks, check, 32);\n\tif (new Set(checks.map((item) => item.claimId)).size !== checks.length)\n\t\tthrow new RunContractError(\"duplicate claim\");\n\tconst writablePaths = runArray(input.writablePaths, runRelativePath, 128);\n\tif (new Set(writablePaths).size !== writablePaths.length) throw new RunContractError(\"duplicate path\");\n\tconst fields: RunContractFields = {\n\t\tschemaVersion: VERIFIED_RUN_VERSION,\n\t\trunId: runId(input.runId),\n\t\tgoal: runText(input.goal, \"goal\", 16384),\n\t\tworkspace: Object.freeze({ root: runAbsolutePath(workspace.root), baseDigest: runDigest(workspace.baseDigest) }),\n\t\twritablePaths,\n\t\tchecks,\n\t\tapply: \"artifact-only\",\n\t\tbudget: Object.freeze({\n\t\t\tworkMs: runLimit(budget.workMs, \"workMs\"),\n\t\t\tverifyMs: runLimit(budget.verifyMs, \"verifyMs\"),\n\t\t\tcleanupMs: runLimit(budget.cleanupMs, \"cleanupMs\"),\n\t\t\tmaxOutputBytes: runLimit(budget.maxOutputBytes, \"maxOutputBytes\", 1048576),\n\t\t\tmaxFiles: runLimit(budget.maxFiles, \"maxFiles\", 10000),\n\t\t\tmaxBytes: runLimit(budget.maxBytes, \"maxBytes\", 104857600),\n\t\t}),\n\t};\n\tswitch (input.profile) {\n\t\tcase \"linux-command-v1\":\n\t\t\treturn Object.freeze({ ...fields, profile: input.profile, writer: runArgv(input.writer) });\n\t\tcase \"linux-command-dag-v1\":\n\t\t\treturn Object.freeze({\n\t\t\t\t...fields,\n\t\t\t\tprofile: input.profile,\n\t\t\t\twriter: parseRunDagWriter(input.writer, writablePaths),\n\t\t\t});\n\t\tcase \"linux-scripted-agent-v1\": {\n\t\t\tconst writer = runObject(input.writer, [\"kind\", \"steps\", \"maxRequests\"]);\n\t\t\tif (writer.kind !== \"scripted-agent\") throw new RunContractError(\"writer.kind\");\n\t\t\treturn Object.freeze({\n\t\t\t\t...fields,\n\t\t\t\tprofile: input.profile,\n\t\t\t\twriter: Object.freeze({\n\t\t\t\t\tkind: writer.kind,\n\t\t\t\t\tsteps: runArray(writer.steps, runArgv, 16),\n\t\t\t\t\tmaxRequests: runLimit(writer.maxRequests, \"maxRequests\", 32),\n\t\t\t\t}),\n\t\t\t});\n\t\t}\n\t\tdefault:\n\t\t\tthrow new RunContractError(\"version/profile/apply\");\n\t}\n}\n\n/** Parsing is not approval. The coordinator requires approval via its trusted host call. */\nexport function parseRunStartCommand(value: unknown): RunStartCommand {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"kind\",\n\t\t\"runId\",\n\t\t\"commandId\",\n\t\t\"expectedRevision\",\n\t\t\"expectedGeneration\",\n\t\t\"contractDigest\",\n\t]);\n\tif (\n\t\tinput.schemaVersion !== VERIFIED_COMMAND_VERSION ||\n\t\tinput.kind !== \"start\" ||\n\t\tinput.expectedRevision !== 0 ||\n\t\tinput.expectedGeneration !== 0\n\t)\n\t\tthrow new RunContractError(\"command version/kind/precondition\");\n\treturn Object.freeze({\n\t\tschemaVersion: VERIFIED_COMMAND_VERSION,\n\t\tkind: \"start\",\n\t\trunId: runId(input.runId),\n\t\tcommandId: runId(input.commandId),\n\t\texpectedRevision: 0,\n\t\texpectedGeneration: 0,\n\t\tcontractDigest: runDigest(input.contractDigest),\n\t});\n}\n"]}

package/dist/run-contract.js

@@ -0,0 +1,112 @@
+import { parseRunDagWriter } from "./run-dag.js";
+import { RunContractError, runAbsolutePath, runArgv, runArray, runDigest, runId, runLimit, runObject, runRelativePath, runText, } from "./run-parsing.js";
+export { RunContractError } from "./run-parsing.js";
+export const VERIFIED_RUN_VERSION = "omk.verified-run.v1";
+export const VERIFIED_COMMAND_VERSION = "omk.verified-command.v1";
+function check(value) {
+    const input = runObject(value, ["claimId", "argv", "stdout"]);
+    if (typeof input.stdout !== "string" || input.stdout.length > 65536)
+        throw new RunContractError("stdout");
+    return Object.freeze({ claimId: runId(input.claimId), argv: runArgv(input.argv), stdout: input.stdout });
+}
+export function parseRunContract(value) {
+    const input = runObject(value, [
+        "schemaVersion",
+        "profile",
+        "runId",
+        "goal",
+        "workspace",
+        "writablePaths",
+        "writer",
+        "checks",
+        "budget",
+        "apply",
+    ]);
+    if (input.schemaVersion !== VERIFIED_RUN_VERSION || input.apply !== "artifact-only")
+        throw new RunContractError("version/profile/apply");
+    const workspace = runObject(input.workspace, ["root", "baseDigest"]);
+    const budget = runObject(input.budget, [
+        "workMs",
+        "verifyMs",
+        "cleanupMs",
+        "maxOutputBytes",
+        "maxFiles",
+        "maxBytes",
+    ]);
+    const checks = runArray(input.checks, check, 32);
+    if (new Set(checks.map((item) => item.claimId)).size !== checks.length)
+        throw new RunContractError("duplicate claim");
+    const writablePaths = runArray(input.writablePaths, runRelativePath, 128);
+    if (new Set(writablePaths).size !== writablePaths.length)
+        throw new RunContractError("duplicate path");
+    const fields = {
+        schemaVersion: VERIFIED_RUN_VERSION,
+        runId: runId(input.runId),
+        goal: runText(input.goal, "goal", 16384),
+        workspace: Object.freeze({ root: runAbsolutePath(workspace.root), baseDigest: runDigest(workspace.baseDigest) }),
+        writablePaths,
+        checks,
+        apply: "artifact-only",
+        budget: Object.freeze({
+            workMs: runLimit(budget.workMs, "workMs"),
+            verifyMs: runLimit(budget.verifyMs, "verifyMs"),
+            cleanupMs: runLimit(budget.cleanupMs, "cleanupMs"),
+            maxOutputBytes: runLimit(budget.maxOutputBytes, "maxOutputBytes", 1048576),
+            maxFiles: runLimit(budget.maxFiles, "maxFiles", 10000),
+            maxBytes: runLimit(budget.maxBytes, "maxBytes", 104857600),
+        }),
+    };
+    switch (input.profile) {
+        case "linux-command-v1":
+            return Object.freeze({ ...fields, profile: input.profile, writer: runArgv(input.writer) });
+        case "linux-command-dag-v1":
+            return Object.freeze({
+                ...fields,
+                profile: input.profile,
+                writer: parseRunDagWriter(input.writer, writablePaths),
+            });
+        case "linux-scripted-agent-v1": {
+            const writer = runObject(input.writer, ["kind", "steps", "maxRequests"]);
+            if (writer.kind !== "scripted-agent")
+                throw new RunContractError("writer.kind");
+            return Object.freeze({
+                ...fields,
+                profile: input.profile,
+                writer: Object.freeze({
+                    kind: writer.kind,
+                    steps: runArray(writer.steps, runArgv, 16),
+                    maxRequests: runLimit(writer.maxRequests, "maxRequests", 32),
+                }),
+            });
+        }
+        default:
+            throw new RunContractError("version/profile/apply");
+    }
+}
+/** Parsing is not approval. The coordinator requires approval via its trusted host call. */
+export function parseRunStartCommand(value) {
+    const input = runObject(value, [
+        "schemaVersion",
+        "kind",
+        "runId",
+        "commandId",
+        "expectedRevision",
+        "expectedGeneration",
+        "contractDigest",
+    ]);
+    if (input.schemaVersion !== VERIFIED_COMMAND_VERSION ||
+        input.kind !== "start" ||
+        input.expectedRevision !== 0 ||
+        input.expectedGeneration !== 0)
+        throw new RunContractError("command version/kind/precondition");
+    return Object.freeze({
+        schemaVersion: VERIFIED_COMMAND_VERSION,
+        kind: "start",
+        runId: runId(input.runId),
+        commandId: runId(input.commandId),
+        expectedRevision: 0,
+        expectedGeneration: 0,
+        contractDigest: runDigest(input.contractDigest),
+    });
+}
+//# sourceMappingURL=run-contract.js.map

package/dist/run-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-contract.js","sourceRoot":"","sources":["../src/run-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAqB,MAAM,cAAc,CAAC;AACpE,OAAO,EACN,gBAAgB,EAChB,eAAe,EACf,OAAO,EACP,QAAQ,EACR,SAAS,EACT,KAAK,EACL,QAAQ,EACR,SAAS,EACT,eAAe,EACf,OAAO,GACP,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAA8B,CAAC;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAAG,yBAAkC,CAAC;AA8C3E,SAAS,KAAK,CAAC,KAAc,EAAY;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAAA,CACzG;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAe;IAC7D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE;QAC9B,eAAe;QACf,SAAS;QACT,OAAO;QACP,MAAM;QACN,WAAW;QACX,eAAe;QACf,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,OAAO;KACP,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,KAAK,oBAAoB,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe;QAClF,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;QACtC,QAAQ;QACR,UAAU;QACV,WAAW;QACX,gBAAgB;QAChB,UAAU;QACV,UAAU;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACrE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACvG,MAAM,MAAM,GAAsB;QACjC,aAAa,EAAE,oBAAoB;QACnC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAChH,aAAa;QACb,MAAM;QACN,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;YACzC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC/C,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;YAClD,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC;YAC1E,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC;YACtD,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;SAC1D,CAAC;KACF,CAAC;IACF,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,kBAAkB;YACtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5F,KAAK,sBAAsB;YAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,GAAG,MAAM;gBACT,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC;aACtD,CAAC,CAAC;QACJ,KAAK,yBAAyB,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;YACzE,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;gBAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,GAAG,MAAM;gBACT,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;oBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;oBAC1C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,EAAE,EAAE,CAAC;iBAC5D,CAAC;aACF,CAAC,CAAC;QACJ,CAAC;QACD;YACC,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;IACtD,CAAC;AAAA,CACD;AAED,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAmB;IACrE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE;QAC9B,eAAe;QACf,MAAM;QACN,OAAO;QACP,WAAW;QACX,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;KAChB,CAAC,CAAC;IACH,IACC,KAAK,CAAC,aAAa,KAAK,wBAAwB;QAChD,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,KAAK,CAAC,gBAAgB,KAAK,CAAC;QAC5B,KAAK,CAAC,kBAAkB,KAAK,CAAC;QAE9B,MAAM,IAAI,gBAAgB,CAAC,mCAAmC,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,wBAAwB;QACvC,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACzB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;KAC/C,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { parseRunDagWriter, type RunDagWriter } from \"./run-dag.ts\";\nimport {\n\tRunContractError,\n\trunAbsolutePath,\n\trunArgv,\n\trunArray,\n\trunDigest,\n\trunId,\n\trunLimit,\n\trunObject,\n\trunRelativePath,\n\trunText,\n} from \"./run-parsing.ts\";\n\nexport { RunContractError } from \"./run-parsing.ts\";\nexport const VERIFIED_RUN_VERSION = \"omk.verified-run.v1\" as const;\nexport const VERIFIED_COMMAND_VERSION = \"omk.verified-command.v1\" as const;\n\ninterface RunContractFields {\n\treadonly schemaVersion: typeof VERIFIED_RUN_VERSION;\n\treadonly runId: string;\n\treadonly goal: string;\n\treadonly workspace: { readonly root: string; readonly baseDigest: string };\n\treadonly writablePaths: readonly string[];\n\treadonly checks: readonly RunCheck[];\n\treadonly budget: RunPhaseBudget;\n\treadonly apply: \"artifact-only\";\n}\nexport interface RunScriptedWriter {\n\treadonly kind: \"scripted-agent\";\n\treadonly steps: readonly (readonly string[])[];\n\treadonly maxRequests: number;\n}\nexport type RunContract = RunContractFields &\n\t(\n\t\t| { readonly profile: \"linux-command-v1\"; readonly writer: readonly string[] }\n\t\t| { readonly profile: \"linux-scripted-agent-v1\"; readonly writer: RunScriptedWriter }\n\t\t| { readonly profile: \"linux-command-dag-v1\"; readonly writer: RunDagWriter }\n\t);\nexport interface RunCheck {\n\treadonly claimId: string;\n\treadonly argv: readonly string[];\n\treadonly stdout: string;\n}\nexport interface RunPhaseBudget {\n\treadonly workMs: number;\n\treadonly verifyMs: number;\n\treadonly cleanupMs: number;\n\treadonly maxOutputBytes: number;\n\treadonly maxFiles: number;\n\treadonly maxBytes: number;\n}\nexport interface RunStartCommand {\n\treadonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;\n\treadonly kind: \"start\";\n\treadonly runId: string;\n\treadonly commandId: string;\n\treadonly expectedRevision: 0;\n\treadonly expectedGeneration: 0;\n\treadonly contractDigest: string;\n}\n\nfunction check(value: unknown): RunCheck {\n\tconst input = runObject(value, [\"claimId\", \"argv\", \"stdout\"]);\n\tif (typeof input.stdout !== \"string\" || input.stdout.length > 65536) throw new RunContractError(\"stdout\");\n\treturn Object.freeze({ claimId: runId(input.claimId), argv: runArgv(input.argv), stdout: input.stdout });\n}\n\nexport function parseRunContract(value: unknown): RunContract {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"profile\",\n\t\t\"runId\",\n\t\t\"goal\",\n\t\t\"workspace\",\n\t\t\"writablePaths\",\n\t\t\"writer\",\n\t\t\"checks\",\n\t\t\"budget\",\n\t\t\"apply\",\n\t]);\n\tif (input.schemaVersion !== VERIFIED_RUN_VERSION || input.apply !== \"artifact-only\")\n\t\tthrow new RunContractError(\"version/profile/apply\");\n\tconst workspace = runObject(input.workspace, [\"root\", \"baseDigest\"]);\n\tconst budget = runObject(input.budget, [\n\t\t\"workMs\",\n\t\t\"verifyMs\",\n\t\t\"cleanupMs\",\n\t\t\"maxOutputBytes\",\n\t\t\"maxFiles\",\n\t\t\"maxBytes\",\n\t]);\n\tconst checks = runArray(input.checks, check, 32);\n\tif (new Set(checks.map((item) => item.claimId)).size !== checks.length)\n\t\tthrow new RunContractError(\"duplicate claim\");\n\tconst writablePaths = runArray(input.writablePaths, runRelativePath, 128);\n\tif (new Set(writablePaths).size !== writablePaths.length) throw new RunContractError(\"duplicate path\");\n\tconst fields: RunContractFields = {\n\t\tschemaVersion: VERIFIED_RUN_VERSION,\n\t\trunId: runId(input.runId),\n\t\tgoal: runText(input.goal, \"goal\", 16384),\n\t\tworkspace: Object.freeze({ root: runAbsolutePath(workspace.root), baseDigest: runDigest(workspace.baseDigest) }),\n\t\twritablePaths,\n\t\tchecks,\n\t\tapply: \"artifact-only\",\n\t\tbudget: Object.freeze({\n\t\t\tworkMs: runLimit(budget.workMs, \"workMs\"),\n\t\t\tverifyMs: runLimit(budget.verifyMs, \"verifyMs\"),\n\t\t\tcleanupMs: runLimit(budget.cleanupMs, \"cleanupMs\"),\n\t\t\tmaxOutputBytes: runLimit(budget.maxOutputBytes, \"maxOutputBytes\", 1048576),\n\t\t\tmaxFiles: runLimit(budget.maxFiles, \"maxFiles\", 10000),\n\t\t\tmaxBytes: runLimit(budget.maxBytes, \"maxBytes\", 104857600),\n\t\t}),\n\t};\n\tswitch (input.profile) {\n\t\tcase \"linux-command-v1\":\n\t\t\treturn Object.freeze({ ...fields, profile: input.profile, writer: runArgv(input.writer) });\n\t\tcase \"linux-command-dag-v1\":\n\t\t\treturn Object.freeze({\n\t\t\t\t...fields,\n\t\t\t\tprofile: input.profile,\n\t\t\t\twriter: parseRunDagWriter(input.writer, writablePaths),\n\t\t\t});\n\t\tcase \"linux-scripted-agent-v1\": {\n\t\t\tconst writer = runObject(input.writer, [\"kind\", \"steps\", \"maxRequests\"]);\n\t\t\tif (writer.kind !== \"scripted-agent\") throw new RunContractError(\"writer.kind\");\n\t\t\treturn Object.freeze({\n\t\t\t\t...fields,\n\t\t\t\tprofile: input.profile,\n\t\t\t\twriter: Object.freeze({\n\t\t\t\t\tkind: writer.kind,\n\t\t\t\t\tsteps: runArray(writer.steps, runArgv, 16),\n\t\t\t\t\tmaxRequests: runLimit(writer.maxRequests, \"maxRequests\", 32),\n\t\t\t\t}),\n\t\t\t});\n\t\t}\n\t\tdefault:\n\t\t\tthrow new RunContractError(\"version/profile/apply\");\n\t}\n}\n\n/** Parsing is not approval. The coordinator requires approval via its trusted host call. */\nexport function parseRunStartCommand(value: unknown): RunStartCommand {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"kind\",\n\t\t\"runId\",\n\t\t\"commandId\",\n\t\t\"expectedRevision\",\n\t\t\"expectedGeneration\",\n\t\t\"contractDigest\",\n\t]);\n\tif (\n\t\tinput.schemaVersion !== VERIFIED_COMMAND_VERSION ||\n\t\tinput.kind !== \"start\" ||\n\t\tinput.expectedRevision !== 0 ||\n\t\tinput.expectedGeneration !== 0\n\t)\n\t\tthrow new RunContractError(\"command version/kind/precondition\");\n\treturn Object.freeze({\n\t\tschemaVersion: VERIFIED_COMMAND_VERSION,\n\t\tkind: \"start\",\n\t\trunId: runId(input.runId),\n\t\tcommandId: runId(input.commandId),\n\t\texpectedRevision: 0,\n\t\texpectedGeneration: 0,\n\t\tcontractDigest: runDigest(input.contractDigest),\n\t});\n}\n"]}

package/dist/run-dag.d.ts

@@ -0,0 +1,18 @@
+export declare const MAX_RUN_DAG_TASKS = 16;
+export declare const MAX_RUN_TASK_ATTEMPTS = 2;
+export interface RunDagTask {
+    readonly id: string;
+    readonly dependsOn: readonly string[];
+    readonly writablePaths: readonly string[];
+    readonly attempts: readonly (readonly string[])[];
+}
+export interface RunDagWriter {
+    readonly kind: "command-dag";
+    readonly tasks: readonly RunDagTask[];
+}
+/** Deterministic FIFO Kahn ordering. This orders artifacts, not tool resource-conflict claims. */
+export declare function orderRunDag(tasks: readonly RunDagTask[]): readonly RunDagTask[];
+/** Every ancestor material is an input; unrelated successful branches are deliberately excluded. */
+export declare function runDagAncestors(tasks: readonly RunDagTask[], taskId: string): readonly RunDagTask[];
+export declare function parseRunDagWriter(value: unknown, writable: readonly string[]): RunDagWriter;
+//# sourceMappingURL=run-dag.d.ts.map

package/dist/run-dag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-dag.d.ts","sourceRoot":"","sources":["../src/run-dag.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;CAClD;AACD,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;CACtC;AAED,kGAAkG;AAClG,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,UAAU,EAAE,CAiB/E;AAED,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,UAAU,EAAE,CAQnG;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,CAoC3F","sourcesContent":["import { RunContractError, runArgv, runArray, runId, runObject, runRelativePath } from \"./run-parsing.ts\";\n\nexport const MAX_RUN_DAG_TASKS = 16;\nexport const MAX_RUN_TASK_ATTEMPTS = 2;\n\nexport interface RunDagTask {\n\treadonly id: string;\n\treadonly dependsOn: readonly string[];\n\treadonly writablePaths: readonly string[];\n\treadonly attempts: readonly (readonly string[])[];\n}\nexport interface RunDagWriter {\n\treadonly kind: \"command-dag\";\n\treadonly tasks: readonly RunDagTask[];\n}\n\n/** Deterministic FIFO Kahn ordering. This orders artifacts, not tool resource-conflict claims. */\nexport function orderRunDag(tasks: readonly RunDagTask[]): readonly RunDagTask[] {\n\tconst pending = new Map(tasks.map((task) => [task.id, task.dependsOn.length]));\n\tconst ready = tasks.filter((task) => task.dependsOn.length === 0);\n\tconst ordered: RunDagTask[] = [];\n\tfor (let index = 0; index < ready.length; index++) {\n\t\tconst next = ready[index];\n\t\tordered.push(next);\n\t\tfor (const task of tasks) {\n\t\t\tif (!task.dependsOn.includes(next.id)) continue;\n\t\t\tconst count = pending.get(task.id);\n\t\t\tif (count === undefined) throw new RunContractError(\"dependency\");\n\t\t\tpending.set(task.id, count - 1);\n\t\t\tif (count === 1) ready.push(task);\n\t\t}\n\t}\n\tif (ordered.length !== tasks.length) throw new RunContractError(\"cyclic dependency\");\n\treturn Object.freeze(ordered);\n}\n\n/** Every ancestor material is an input; unrelated successful branches are deliberately excluded. */\nexport function runDagAncestors(tasks: readonly RunDagTask[], taskId: string): readonly RunDagTask[] {\n\tif (!tasks.some((task) => task.id === taskId)) throw new RunContractError(\"taskId\");\n\tconst order = orderRunDag(tasks);\n\tconst included = new Set([taskId]);\n\tfor (const task of [...order].reverse()) {\n\t\tif (included.has(task.id)) for (const id of task.dependsOn) included.add(id);\n\t}\n\treturn Object.freeze(order.filter((task) => task.id !== taskId && included.has(task.id)));\n}\n\nexport function parseRunDagWriter(value: unknown, writable: readonly string[]): RunDagWriter {\n\tconst raw = runObject(value, [\"kind\", \"tasks\"]);\n\tif (raw.kind !== \"command-dag\") throw new RunContractError(\"writer.kind\");\n\tconst tasks = runArray(\n\t\traw.tasks,\n\t\t(value): RunDagTask => {\n\t\t\tconst task = runObject(value, [\"id\", \"dependsOn\", \"writablePaths\", \"attempts\"]);\n\t\t\tconst dependsOn =\n\t\t\t\tArray.isArray(task.dependsOn) && task.dependsOn.length === 0\n\t\t\t\t\t? Object.freeze([])\n\t\t\t\t\t: runArray(task.dependsOn, runId, MAX_RUN_DAG_TASKS);\n\t\t\tif (new Set(dependsOn).size !== dependsOn.length) throw new RunContractError(\"duplicate dependency\");\n\t\t\treturn Object.freeze({\n\t\t\t\tid: runId(task.id),\n\t\t\t\tdependsOn,\n\t\t\t\twritablePaths: runArray(task.writablePaths, runRelativePath, 128),\n\t\t\t\tattempts: runArray(task.attempts, runArgv, MAX_RUN_TASK_ATTEMPTS),\n\t\t\t});\n\t\t},\n\t\tMAX_RUN_DAG_TASKS,\n\t);\n\tconst ids = new Set(tasks.map((task) => task.id));\n\tif (ids.size !== tasks.length) throw new RunContractError(\"duplicate task\");\n\tconst scopes: string[] = [];\n\tfor (const task of tasks) {\n\t\tif (task.dependsOn.some((id) => id === task.id || !ids.has(id))) throw new RunContractError(\"dependency\");\n\t\tfor (const path of task.writablePaths) {\n\t\t\tif (!writable.some((scope) => path === scope || path.startsWith(`${scope}/`)))\n\t\t\t\tthrow new RunContractError(\"task scope\");\n\t\t\tif (scopes.some((scope) => path === scope || path.startsWith(`${scope}/`) || scope.startsWith(`${path}/`)))\n\t\t\t\tthrow new RunContractError(\"overlapping task scope\");\n\t\t\tscopes.push(path);\n\t\t}\n\t}\n\torderRunDag(tasks);\n\treturn Object.freeze({ kind: \"command-dag\", tasks });\n}\n"]}

package/dist/run-dag.js

@@ -0,0 +1,76 @@
+import { RunContractError, runArgv, runArray, runId, runObject, runRelativePath } from "./run-parsing.js";
+export const MAX_RUN_DAG_TASKS = 16;
+export const MAX_RUN_TASK_ATTEMPTS = 2;
+/** Deterministic FIFO Kahn ordering. This orders artifacts, not tool resource-conflict claims. */
+export function orderRunDag(tasks) {
+    const pending = new Map(tasks.map((task) => [task.id, task.dependsOn.length]));
+    const ready = tasks.filter((task) => task.dependsOn.length === 0);
+    const ordered = [];
+    for (let index = 0; index < ready.length; index++) {
+        const next = ready[index];
+        ordered.push(next);
+        for (const task of tasks) {
+            if (!task.dependsOn.includes(next.id))
+                continue;
+            const count = pending.get(task.id);
+            if (count === undefined)
+                throw new RunContractError("dependency");
+            pending.set(task.id, count - 1);
+            if (count === 1)
+                ready.push(task);
+        }
+    }
+    if (ordered.length !== tasks.length)
+        throw new RunContractError("cyclic dependency");
+    return Object.freeze(ordered);
+}
+/** Every ancestor material is an input; unrelated successful branches are deliberately excluded. */
+export function runDagAncestors(tasks, taskId) {
+    if (!tasks.some((task) => task.id === taskId))
+        throw new RunContractError("taskId");
+    const order = orderRunDag(tasks);
+    const included = new Set([taskId]);
+    for (const task of [...order].reverse()) {
+        if (included.has(task.id))
+            for (const id of task.dependsOn)
+                included.add(id);
+    }
+    return Object.freeze(order.filter((task) => task.id !== taskId && included.has(task.id)));
+}
+export function parseRunDagWriter(value, writable) {
+    const raw = runObject(value, ["kind", "tasks"]);
+    if (raw.kind !== "command-dag")
+        throw new RunContractError("writer.kind");
+    const tasks = runArray(raw.tasks, (value) => {
+        const task = runObject(value, ["id", "dependsOn", "writablePaths", "attempts"]);
+        const dependsOn = Array.isArray(task.dependsOn) && task.dependsOn.length === 0
+            ? Object.freeze([])
+            : runArray(task.dependsOn, runId, MAX_RUN_DAG_TASKS);
+        if (new Set(dependsOn).size !== dependsOn.length)
+            throw new RunContractError("duplicate dependency");
+        return Object.freeze({
+            id: runId(task.id),
+            dependsOn,
+            writablePaths: runArray(task.writablePaths, runRelativePath, 128),
+            attempts: runArray(task.attempts, runArgv, MAX_RUN_TASK_ATTEMPTS),
+        });
+    }, MAX_RUN_DAG_TASKS);
+    const ids = new Set(tasks.map((task) => task.id));
+    if (ids.size !== tasks.length)
+        throw new RunContractError("duplicate task");
+    const scopes = [];
+    for (const task of tasks) {
+        if (task.dependsOn.some((id) => id === task.id || !ids.has(id)))
+            throw new RunContractError("dependency");
+        for (const path of task.writablePaths) {
+            if (!writable.some((scope) => path === scope || path.startsWith(`${scope}/`)))
+                throw new RunContractError("task scope");
+            if (scopes.some((scope) => path === scope || path.startsWith(`${scope}/`) || scope.startsWith(`${path}/`)))
+                throw new RunContractError("overlapping task scope");
+            scopes.push(path);
+        }
+    }
+    orderRunDag(tasks);
+    return Object.freeze({ kind: "command-dag", tasks });
+}
+//# sourceMappingURL=run-dag.js.map

package/dist/run-dag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-dag.js","sourceRoot":"","sources":["../src/run-dag.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE1G,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAavC,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,KAA4B,EAAyB;IAChF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,SAAS;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAAA,CAC9B;AAED,oGAAoG;AACpG,MAAM,UAAU,eAAe,CAAC,KAA4B,EAAE,MAAc,EAAyB;IACpG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS;gBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAAA,CAC1F;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,QAA2B,EAAgB;IAC5F,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,QAAQ,CACrB,GAAG,CAAC,KAAK,EACT,CAAC,KAAK,EAAc,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;QAChF,MAAM,SAAS,GACd,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC3D,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACnB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;QACvD,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,SAAS;YACT,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,EAAE,GAAG,CAAC;YACjE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC;SACjE,CAAC,CAAC;IAAA,CACH,EACD,iBAAiB,CACjB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC1G,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;gBAC5E,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;gBACzG,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAAA,CACrD","sourcesContent":["import { RunContractError, runArgv, runArray, runId, runObject, runRelativePath } from \"./run-parsing.ts\";\n\nexport const MAX_RUN_DAG_TASKS = 16;\nexport const MAX_RUN_TASK_ATTEMPTS = 2;\n\nexport interface RunDagTask {\n\treadonly id: string;\n\treadonly dependsOn: readonly string[];\n\treadonly writablePaths: readonly string[];\n\treadonly attempts: readonly (readonly string[])[];\n}\nexport interface RunDagWriter {\n\treadonly kind: \"command-dag\";\n\treadonly tasks: readonly RunDagTask[];\n}\n\n/** Deterministic FIFO Kahn ordering. This orders artifacts, not tool resource-conflict claims. */\nexport function orderRunDag(tasks: readonly RunDagTask[]): readonly RunDagTask[] {\n\tconst pending = new Map(tasks.map((task) => [task.id, task.dependsOn.length]));\n\tconst ready = tasks.filter((task) => task.dependsOn.length === 0);\n\tconst ordered: RunDagTask[] = [];\n\tfor (let index = 0; index < ready.length; index++) {\n\t\tconst next = ready[index];\n\t\tordered.push(next);\n\t\tfor (const task of tasks) {\n\t\t\tif (!task.dependsOn.includes(next.id)) continue;\n\t\t\tconst count = pending.get(task.id);\n\t\t\tif (count === undefined) throw new RunContractError(\"dependency\");\n\t\t\tpending.set(task.id, count - 1);\n\t\t\tif (count === 1) ready.push(task);\n\t\t}\n\t}\n\tif (ordered.length !== tasks.length) throw new RunContractError(\"cyclic dependency\");\n\treturn Object.freeze(ordered);\n}\n\n/** Every ancestor material is an input; unrelated successful branches are deliberately excluded. */\nexport function runDagAncestors(tasks: readonly RunDagTask[], taskId: string): readonly RunDagTask[] {\n\tif (!tasks.some((task) => task.id === taskId)) throw new RunContractError(\"taskId\");\n\tconst order = orderRunDag(tasks);\n\tconst included = new Set([taskId]);\n\tfor (const task of [...order].reverse()) {\n\t\tif (included.has(task.id)) for (const id of task.dependsOn) included.add(id);\n\t}\n\treturn Object.freeze(order.filter((task) => task.id !== taskId && included.has(task.id)));\n}\n\nexport function parseRunDagWriter(value: unknown, writable: readonly string[]): RunDagWriter {\n\tconst raw = runObject(value, [\"kind\", \"tasks\"]);\n\tif (raw.kind !== \"command-dag\") throw new RunContractError(\"writer.kind\");\n\tconst tasks = runArray(\n\t\traw.tasks,\n\t\t(value): RunDagTask => {\n\t\t\tconst task = runObject(value, [\"id\", \"dependsOn\", \"writablePaths\", \"attempts\"]);\n\t\t\tconst dependsOn =\n\t\t\t\tArray.isArray(task.dependsOn) && task.dependsOn.length === 0\n\t\t\t\t\t? Object.freeze([])\n\t\t\t\t\t: runArray(task.dependsOn, runId, MAX_RUN_DAG_TASKS);\n\t\t\tif (new Set(dependsOn).size !== dependsOn.length) throw new RunContractError(\"duplicate dependency\");\n\t\t\treturn Object.freeze({\n\t\t\t\tid: runId(task.id),\n\t\t\t\tdependsOn,\n\t\t\t\twritablePaths: runArray(task.writablePaths, runRelativePath, 128),\n\t\t\t\tattempts: runArray(task.attempts, runArgv, MAX_RUN_TASK_ATTEMPTS),\n\t\t\t});\n\t\t},\n\t\tMAX_RUN_DAG_TASKS,\n\t);\n\tconst ids = new Set(tasks.map((task) => task.id));\n\tif (ids.size !== tasks.length) throw new RunContractError(\"duplicate task\");\n\tconst scopes: string[] = [];\n\tfor (const task of tasks) {\n\t\tif (task.dependsOn.some((id) => id === task.id || !ids.has(id))) throw new RunContractError(\"dependency\");\n\t\tfor (const path of task.writablePaths) {\n\t\t\tif (!writable.some((scope) => path === scope || path.startsWith(`${scope}/`)))\n\t\t\t\tthrow new RunContractError(\"task scope\");\n\t\t\tif (scopes.some((scope) => path === scope || path.startsWith(`${scope}/`) || scope.startsWith(`${path}/`)))\n\t\t\t\tthrow new RunContractError(\"overlapping task scope\");\n\t\t\tscopes.push(path);\n\t\t}\n\t}\n\torderRunDag(tasks);\n\treturn Object.freeze({ kind: \"command-dag\", tasks });\n}\n"]}

package/dist/run-parsing.d.ts

@@ -0,0 +1,13 @@
+export declare class RunContractError extends Error {
+    constructor(field: string);
+}
+export declare function runObject(value: unknown, keys: readonly string[]): Record<string, unknown>;
+export declare function runText(value: unknown, field: string, max?: number): string;
+export declare function runId(value: unknown): string;
+export declare function runDigest(value: unknown): string;
+export declare function runLimit(value: unknown, field: string, max?: number): number;
+export declare function runArray<T>(value: unknown, parse: (item: unknown) => T, max: number): readonly T[];
+export declare function runRelativePath(value: unknown): string;
+export declare function runAbsolutePath(value: unknown): string;
+export declare function runArgv(value: unknown): readonly string[];
+//# sourceMappingURL=run-parsing.d.ts.map

package/dist/run-parsing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-parsing.d.ts","sourceRoot":"","sources":["../src/run-parsing.ts"],"names":[],"mappings":"AAAA,qBAAa,gBAAiB,SAAQ,KAAK;IAC1C,YAAY,KAAK,EAAE,MAAM,EAGxB;CACD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa1F;AACD,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAO,GAAG,MAAM,CAIzE;AACD,wBAAgB,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI5C;AACD,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGhD;AACD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,MAAM,CAIhF;AACD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,CASlG;AACD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQtD;AACD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAatD;AACD,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CAQzD","sourcesContent":["export class RunContractError extends Error {\n\tconstructor(field: string) {\n\t\tsuper(`Invalid verified-run field: ${field}`);\n\t\tthis.name = \"RunContractError\";\n\t}\n}\n\nexport function runObject(value: unknown, keys: readonly string[]): Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) throw new RunContractError(\"object\");\n\tif (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)\n\t\tthrow new RunContractError(\"prototype\");\n\tconst descriptors = Object.getOwnPropertyDescriptors(value);\n\tif (Reflect.ownKeys(value).length !== keys.length) throw new RunContractError(\"fields\");\n\tconst result: Record<string, unknown> = {};\n\tfor (const key of keys) {\n\t\tconst descriptor = descriptors[key];\n\t\tif (!descriptor || !(\"value\" in descriptor) || !descriptor.enumerable) throw new RunContractError(key);\n\t\tresult[key] = descriptor.value;\n\t}\n\treturn result;\n}\nexport function runText(value: unknown, field: string, max = 4096): string {\n\tif (typeof value !== \"string\" || value.length === 0 || value.length > max || /[\\u0000\\ud800-\\udfff]/u.test(value))\n\t\tthrow new RunContractError(field);\n\treturn value;\n}\nexport function runId(value: unknown): string {\n\tconst id = runText(value, \"id\", 128);\n\tif (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(id)) throw new RunContractError(\"id\");\n\treturn id;\n}\nexport function runDigest(value: unknown): string {\n\tif (typeof value !== \"string\" || !/^[a-f0-9]{64}$/.test(value)) throw new RunContractError(\"digest\");\n\treturn value;\n}\nexport function runLimit(value: unknown, field: string, max = 2147483647): number {\n\tif (typeof value !== \"number\" || !Number.isSafeInteger(value) || value <= 0 || value > max)\n\t\tthrow new RunContractError(field);\n\treturn value;\n}\nexport function runArray<T>(value: unknown, parse: (item: unknown) => T, max: number): readonly T[] {\n\tif (!Array.isArray(value) || value.length === 0 || value.length > max) throw new RunContractError(\"array\");\n\tconst items: T[] = [];\n\tfor (let index = 0; index < value.length; index++) {\n\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, String(index));\n\t\tif (!descriptor || !(\"value\" in descriptor)) throw new RunContractError(\"array item\");\n\t\titems.push(parse(descriptor.value));\n\t}\n\treturn Object.freeze(items);\n}\nexport function runRelativePath(value: unknown): string {\n\tconst path = runText(value, \"path\", 1024);\n\tif (\n\t\t/[\\\\\\u0000-\\u001f\\u007f]/.test(path) ||\n\t\tpath.split(\"/\").some((part) => [\"\", \".\", \"..\", \".git\", \".omk\"].includes(part))\n\t)\n\t\tthrow new RunContractError(\"path\");\n\treturn path;\n}\nexport function runAbsolutePath(value: unknown): string {\n\tconst path = runText(value, \"absolute path\", 4096);\n\tif (\n\t\t!path.startsWith(\"/\") ||\n\t\tpath === \"/\" ||\n\t\tpath\n\t\t\t.slice(1)\n\t\t\t.split(\"/\")\n\t\t\t.some((part) => [\"\", \".\", \"..\"].includes(part)) ||\n\t\t/[\\\\\\u0000-\\u001f\\u007f]/.test(path)\n\t)\n\t\tthrow new RunContractError(\"absolute path\");\n\treturn path;\n}\nexport function runArgv(value: unknown): readonly string[] {\n\tconst args = runArray(\n\t\tvalue,\n\t\t(item) => (typeof item === \"string\" && item.length === 0 ? \"\" : runText(item, \"argv\", 16384)),\n\t\t128,\n\t);\n\trunAbsolutePath(args[0]);\n\treturn args;\n}\n"]}

package/dist/run-parsing.js

@@ -0,0 +1,81 @@
+export class RunContractError extends Error {
+    constructor(field) {
+        super(`Invalid verified-run field: ${field}`);
+        this.name = "RunContractError";
+    }
+}
+export function runObject(value, keys) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        throw new RunContractError("object");
+    if (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)
+        throw new RunContractError("prototype");
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    if (Reflect.ownKeys(value).length !== keys.length)
+        throw new RunContractError("fields");
+    const result = {};
+    for (const key of keys) {
+        const descriptor = descriptors[key];
+        if (!descriptor || !("value" in descriptor) || !descriptor.enumerable)
+            throw new RunContractError(key);
+        result[key] = descriptor.value;
+    }
+    return result;
+}
+export function runText(value, field, max = 4096) {
+    if (typeof value !== "string" || value.length === 0 || value.length > max || /[\u0000\ud800-\udfff]/u.test(value))
+        throw new RunContractError(field);
+    return value;
+}
+export function runId(value) {
+    const id = runText(value, "id", 128);
+    if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(id))
+        throw new RunContractError("id");
+    return id;
+}
+export function runDigest(value) {
+    if (typeof value !== "string" || !/^[a-f0-9]{64}$/.test(value))
+        throw new RunContractError("digest");
+    return value;
+}
+export function runLimit(value, field, max = 2147483647) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0 || value > max)
+        throw new RunContractError(field);
+    return value;
+}
+export function runArray(value, parse, max) {
+    if (!Array.isArray(value) || value.length === 0 || value.length > max)
+        throw new RunContractError("array");
+    const items = [];
+    for (let index = 0; index < value.length; index++) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+        if (!descriptor || !("value" in descriptor))
+            throw new RunContractError("array item");
+        items.push(parse(descriptor.value));
+    }
+    return Object.freeze(items);
+}
+export function runRelativePath(value) {
+    const path = runText(value, "path", 1024);
+    if (/[\\\u0000-\u001f\u007f]/.test(path) ||
+        path.split("/").some((part) => ["", ".", "..", ".git", ".omk"].includes(part)))
+        throw new RunContractError("path");
+    return path;
+}
+export function runAbsolutePath(value) {
+    const path = runText(value, "absolute path", 4096);
+    if (!path.startsWith("/") ||
+        path === "/" ||
+        path
+            .slice(1)
+            .split("/")
+            .some((part) => ["", ".", ".."].includes(part)) ||
+        /[\\\u0000-\u001f\u007f]/.test(path))
+        throw new RunContractError("absolute path");
+    return path;
+}
+export function runArgv(value) {
+    const args = runArray(value, (item) => (typeof item === "string" && item.length === 0 ? "" : runText(item, "argv", 16384)), 128);
+    runAbsolutePath(args[0]);
+    return args;
+}
+//# sourceMappingURL=run-parsing.js.map

package/dist/run-parsing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-parsing.js","sourceRoot":"","sources":["../src/run-parsing.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAC1C,YAAY,KAAa,EAAE;QAC1B,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IAAA,CAC/B;CACD;AAED,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,IAAuB,EAA2B;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI;QAC7F,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxF,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;YAAE,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACvG,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AACD,MAAM,UAAU,OAAO,CAAC,KAAc,EAAE,KAAa,EAAE,GAAG,GAAG,IAAI,EAAU;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChH,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AAAA,CACb;AACD,MAAM,UAAU,KAAK,CAAC,KAAc,EAAU;IAC7C,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO,EAAE,CAAC;AAAA,CACV;AACD,MAAM,UAAU,SAAS,CAAC,KAAc,EAAU;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC;AAAA,CACb;AACD,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,KAAa,EAAE,GAAG,GAAG,UAAU,EAAU;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,GAAG;QACzF,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AAAA,CACb;AACD,MAAM,UAAU,QAAQ,CAAI,KAAc,EAAE,KAA2B,EAAE,GAAW,EAAgB;IACnG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAQ,EAAE,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5B;AACD,MAAM,UAAU,eAAe,CAAC,KAAc,EAAU;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,IACC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE9E,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AAAA,CACZ;AACD,MAAM,UAAU,eAAe,CAAC,KAAc,EAAU;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IACnD,IACC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,IAAI,KAAK,GAAG;QACZ,IAAI;aACF,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC;aACV,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAEpC,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AAAA,CACZ;AACD,MAAM,UAAU,OAAO,CAAC,KAAc,EAAqB;IAC1D,MAAM,IAAI,GAAG,QAAQ,CACpB,KAAK,EACL,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAC7F,GAAG,CACH,CAAC;IACF,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AAAA,CACZ","sourcesContent":["export class RunContractError extends Error {\n\tconstructor(field: string) {\n\t\tsuper(`Invalid verified-run field: ${field}`);\n\t\tthis.name = \"RunContractError\";\n\t}\n}\n\nexport function runObject(value: unknown, keys: readonly string[]): Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) throw new RunContractError(\"object\");\n\tif (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)\n\t\tthrow new RunContractError(\"prototype\");\n\tconst descriptors = Object.getOwnPropertyDescriptors(value);\n\tif (Reflect.ownKeys(value).length !== keys.length) throw new RunContractError(\"fields\");\n\tconst result: Record<string, unknown> = {};\n\tfor (const key of keys) {\n\t\tconst descriptor = descriptors[key];\n\t\tif (!descriptor || !(\"value\" in descriptor) || !descriptor.enumerable) throw new RunContractError(key);\n\t\tresult[key] = descriptor.value;\n\t}\n\treturn result;\n}\nexport function runText(value: unknown, field: string, max = 4096): string {\n\tif (typeof value !== \"string\" || value.length === 0 || value.length > max || /[\\u0000\\ud800-\\udfff]/u.test(value))\n\t\tthrow new RunContractError(field);\n\treturn value;\n}\nexport function runId(value: unknown): string {\n\tconst id = runText(value, \"id\", 128);\n\tif (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(id)) throw new RunContractError(\"id\");\n\treturn id;\n}\nexport function runDigest(value: unknown): string {\n\tif (typeof value !== \"string\" || !/^[a-f0-9]{64}$/.test(value)) throw new RunContractError(\"digest\");\n\treturn value;\n}\nexport function runLimit(value: unknown, field: string, max = 2147483647): number {\n\tif (typeof value !== \"number\" || !Number.isSafeInteger(value) || value <= 0 || value > max)\n\t\tthrow new RunContractError(field);\n\treturn value;\n}\nexport function runArray<T>(value: unknown, parse: (item: unknown) => T, max: number): readonly T[] {\n\tif (!Array.isArray(value) || value.length === 0 || value.length > max) throw new RunContractError(\"array\");\n\tconst items: T[] = [];\n\tfor (let index = 0; index < value.length; index++) {\n\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, String(index));\n\t\tif (!descriptor || !(\"value\" in descriptor)) throw new RunContractError(\"array item\");\n\t\titems.push(parse(descriptor.value));\n\t}\n\treturn Object.freeze(items);\n}\nexport function runRelativePath(value: unknown): string {\n\tconst path = runText(value, \"path\", 1024);\n\tif (\n\t\t/[\\\\\\u0000-\\u001f\\u007f]/.test(path) ||\n\t\tpath.split(\"/\").some((part) => [\"\", \".\", \"..\", \".git\", \".omk\"].includes(part))\n\t)\n\t\tthrow new RunContractError(\"path\");\n\treturn path;\n}\nexport function runAbsolutePath(value: unknown): string {\n\tconst path = runText(value, \"absolute path\", 4096);\n\tif (\n\t\t!path.startsWith(\"/\") ||\n\t\tpath === \"/\" ||\n\t\tpath\n\t\t\t.slice(1)\n\t\t\t.split(\"/\")\n\t\t\t.some((part) => [\"\", \".\", \"..\"].includes(part)) ||\n\t\t/[\\\\\\u0000-\\u001f\\u007f]/.test(path)\n\t)\n\t\tthrow new RunContractError(\"absolute path\");\n\treturn path;\n}\nexport function runArgv(value: unknown): readonly string[] {\n\tconst args = runArray(\n\t\tvalue,\n\t\t(item) => (typeof item === \"string\" && item.length === 0 ? \"\" : runText(item, \"argv\", 16384)),\n\t\t128,\n\t);\n\trunAbsolutePath(args[0]);\n\treturn args;\n}\n"]}

package/dist/run-resume.d.ts

@@ -0,0 +1,15 @@
+import { VERIFIED_COMMAND_VERSION } from "./run-contract.ts";
+export declare const MAX_VERIFIED_RUN_GENERATIONS = 3;
+/** Explicit execution intent; the host authenticates approval separately from this JSON. */
+export interface RunResumeCommand {
+    readonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;
+    readonly kind: "resume";
+    readonly runId: string;
+    readonly commandId: string;
+    readonly expectedRevision: number;
+    readonly expectedGeneration: number;
+    readonly contractDigest: string;
+    readonly candidateDigest: string;
+}
+export declare function parseRunResumeCommand(value: unknown): RunResumeCommand;
+//# sourceMappingURL=run-resume.d.ts.map

package/dist/run-resume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-resume.d.ts","sourceRoot":"","sources":["../src/run-resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,aAAa,EAAE,OAAO,wBAAwB,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CACjC;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAuBtE","sourcesContent":["import { VERIFIED_COMMAND_VERSION } from \"./run-contract.ts\";\nimport { RunContractError, runDigest, runId, runLimit, runObject } from \"./run-parsing.ts\";\n\nexport const MAX_VERIFIED_RUN_GENERATIONS = 3;\n\n/** Explicit execution intent; the host authenticates approval separately from this JSON. */\nexport interface RunResumeCommand {\n\treadonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;\n\treadonly kind: \"resume\";\n\treadonly runId: string;\n\treadonly commandId: string;\n\treadonly expectedRevision: number;\n\treadonly expectedGeneration: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n}\n\nexport function parseRunResumeCommand(value: unknown): RunResumeCommand {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"kind\",\n\t\t\"runId\",\n\t\t\"commandId\",\n\t\t\"expectedRevision\",\n\t\t\"expectedGeneration\",\n\t\t\"contractDigest\",\n\t\t\"candidateDigest\",\n\t]);\n\tif (input.schemaVersion !== VERIFIED_COMMAND_VERSION || input.kind !== \"resume\")\n\t\tthrow new RunContractError(\"resume version/kind\");\n\treturn Object.freeze({\n\t\tschemaVersion: VERIFIED_COMMAND_VERSION,\n\t\tkind: \"resume\",\n\t\trunId: runId(input.runId),\n\t\tcommandId: runId(input.commandId),\n\t\texpectedRevision: runLimit(input.expectedRevision, \"expectedRevision\", Number.MAX_SAFE_INTEGER),\n\t\texpectedGeneration: runLimit(input.expectedGeneration, \"expectedGeneration\", Number.MAX_SAFE_INTEGER),\n\t\tcontractDigest: runDigest(input.contractDigest),\n\t\tcandidateDigest: runDigest(input.candidateDigest),\n\t});\n}\n"]}

package/dist/run-resume.js

@@ -0,0 +1,28 @@
+import { VERIFIED_COMMAND_VERSION } from "./run-contract.js";
+import { RunContractError, runDigest, runId, runLimit, runObject } from "./run-parsing.js";
+export const MAX_VERIFIED_RUN_GENERATIONS = 3;
+export function parseRunResumeCommand(value) {
+    const input = runObject(value, [
+        "schemaVersion",
+        "kind",
+        "runId",
+        "commandId",
+        "expectedRevision",
+        "expectedGeneration",
+        "contractDigest",
+        "candidateDigest",
+    ]);
+    if (input.schemaVersion !== VERIFIED_COMMAND_VERSION || input.kind !== "resume")
+        throw new RunContractError("resume version/kind");
+    return Object.freeze({
+        schemaVersion: VERIFIED_COMMAND_VERSION,
+        kind: "resume",
+        runId: runId(input.runId),
+        commandId: runId(input.commandId),
+        expectedRevision: runLimit(input.expectedRevision, "expectedRevision", Number.MAX_SAFE_INTEGER),
+        expectedGeneration: runLimit(input.expectedGeneration, "expectedGeneration", Number.MAX_SAFE_INTEGER),
+        contractDigest: runDigest(input.contractDigest),
+        candidateDigest: runDigest(input.candidateDigest),
+    });
+}
+//# sourceMappingURL=run-resume.js.map

package/dist/run-resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-resume.js","sourceRoot":"","sources":["../src/run-resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAc9C,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAoB;IACvE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE;QAC9B,eAAe;QACf,MAAM;QACN,OAAO;QACP,WAAW;QACX,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,iBAAiB;KACjB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,KAAK,wBAAwB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9E,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,wBAAwB;QACvC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACzB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAC/F,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACrG,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;QAC/C,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC;KACjD,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { VERIFIED_COMMAND_VERSION } from \"./run-contract.ts\";\nimport { RunContractError, runDigest, runId, runLimit, runObject } from \"./run-parsing.ts\";\n\nexport const MAX_VERIFIED_RUN_GENERATIONS = 3;\n\n/** Explicit execution intent; the host authenticates approval separately from this JSON. */\nexport interface RunResumeCommand {\n\treadonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;\n\treadonly kind: \"resume\";\n\treadonly runId: string;\n\treadonly commandId: string;\n\treadonly expectedRevision: number;\n\treadonly expectedGeneration: number;\n\treadonly contractDigest: string;\n\treadonly candidateDigest: string;\n}\n\nexport function parseRunResumeCommand(value: unknown): RunResumeCommand {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"kind\",\n\t\t\"runId\",\n\t\t\"commandId\",\n\t\t\"expectedRevision\",\n\t\t\"expectedGeneration\",\n\t\t\"contractDigest\",\n\t\t\"candidateDigest\",\n\t]);\n\tif (input.schemaVersion !== VERIFIED_COMMAND_VERSION || input.kind !== \"resume\")\n\t\tthrow new RunContractError(\"resume version/kind\");\n\treturn Object.freeze({\n\t\tschemaVersion: VERIFIED_COMMAND_VERSION,\n\t\tkind: \"resume\",\n\t\trunId: runId(input.runId),\n\t\tcommandId: runId(input.commandId),\n\t\texpectedRevision: runLimit(input.expectedRevision, \"expectedRevision\", Number.MAX_SAFE_INTEGER),\n\t\texpectedGeneration: runLimit(input.expectedGeneration, \"expectedGeneration\", Number.MAX_SAFE_INTEGER),\n\t\tcontractDigest: runDigest(input.contractDigest),\n\t\tcandidateDigest: runDigest(input.candidateDigest),\n\t});\n}\n"]}

package/dist/run-task-retry.d.ts

@@ -0,0 +1,8 @@
+import { type RunWriterRestartCommand } from "./run-writer-restart.ts";
+/** Select failed/interrupted task attempts; an empty selection only continues pending work. */
+export interface RunTaskRetryCommand extends Omit<RunWriterRestartCommand, "kind"> {
+    readonly kind: "retry_tasks";
+    readonly taskIds: readonly string[];
+}
+export declare function parseRunTaskRetryCommand(value: unknown): RunTaskRetryCommand;
+//# sourceMappingURL=run-task-retry.d.ts.map

package/dist/run-task-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-task-retry.d.ts","sourceRoot":"","sources":["../src/run-task-retry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgC,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAErG,+FAA+F;AAC/F,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACjF,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AACD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAmB5E","sourcesContent":["import { MAX_RUN_DAG_TASKS } from \"./run-dag.ts\";\nimport { RunContractError, runArray, runId, runObject } from \"./run-parsing.ts\";\nimport { parseRunWriterRestartCommand, type RunWriterRestartCommand } from \"./run-writer-restart.ts\";\n\n/** Select failed/interrupted task attempts; an empty selection only continues pending work. */\nexport interface RunTaskRetryCommand extends Omit<RunWriterRestartCommand, \"kind\"> {\n\treadonly kind: \"retry_tasks\";\n\treadonly taskIds: readonly string[];\n}\nexport function parseRunTaskRetryCommand(value: unknown): RunTaskRetryCommand {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"kind\",\n\t\t\"runId\",\n\t\t\"commandId\",\n\t\t\"expectedRevision\",\n\t\t\"expectedGeneration\",\n\t\t\"contractDigest\",\n\t\t\"baseDigest\",\n\t\t\"taskIds\",\n\t]);\n\tif (input.kind !== \"retry_tasks\") throw new RunContractError(\"task retry kind\");\n\tconst { taskIds: rawIds, ...fields } = input;\n\tconst taskIds =\n\t\tArray.isArray(rawIds) && rawIds.length === 0 ? Object.freeze([]) : runArray(rawIds, runId, MAX_RUN_DAG_TASKS);\n\tif (new Set(taskIds).size !== taskIds.length) throw new RunContractError(\"duplicate task\");\n\tconst base = parseRunWriterRestartCommand({ ...fields, kind: \"restart_writer\" });\n\treturn Object.freeze({ ...base, kind: \"retry_tasks\", taskIds });\n}\n"]}

package/dist/run-task-retry.js

@@ -0,0 +1,25 @@
+import { MAX_RUN_DAG_TASKS } from "./run-dag.js";
+import { RunContractError, runArray, runId, runObject } from "./run-parsing.js";
+import { parseRunWriterRestartCommand } from "./run-writer-restart.js";
+export function parseRunTaskRetryCommand(value) {
+    const input = runObject(value, [
+        "schemaVersion",
+        "kind",
+        "runId",
+        "commandId",
+        "expectedRevision",
+        "expectedGeneration",
+        "contractDigest",
+        "baseDigest",
+        "taskIds",
+    ]);
+    if (input.kind !== "retry_tasks")
+        throw new RunContractError("task retry kind");
+    const { taskIds: rawIds, ...fields } = input;
+    const taskIds = Array.isArray(rawIds) && rawIds.length === 0 ? Object.freeze([]) : runArray(rawIds, runId, MAX_RUN_DAG_TASKS);
+    if (new Set(taskIds).size !== taskIds.length)
+        throw new RunContractError("duplicate task");
+    const base = parseRunWriterRestartCommand({ ...fields, kind: "restart_writer" });
+    return Object.freeze({ ...base, kind: "retry_tasks", taskIds });
+}
+//# sourceMappingURL=run-task-retry.js.map

package/dist/run-task-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-task-retry.js","sourceRoot":"","sources":["../src/run-task-retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAgC,MAAM,yBAAyB,CAAC;AAOrG,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAuB;IAC7E,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE;QAC9B,eAAe;QACf,MAAM;QACN,OAAO;QACP,WAAW;QACX,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,YAAY;QACZ,SAAS;KACT,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;QAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IAChF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC;IAC7C,MAAM,OAAO,GACZ,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC/G,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,4BAA4B,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;AAAA,CAChE","sourcesContent":["import { MAX_RUN_DAG_TASKS } from \"./run-dag.ts\";\nimport { RunContractError, runArray, runId, runObject } from \"./run-parsing.ts\";\nimport { parseRunWriterRestartCommand, type RunWriterRestartCommand } from \"./run-writer-restart.ts\";\n\n/** Select failed/interrupted task attempts; an empty selection only continues pending work. */\nexport interface RunTaskRetryCommand extends Omit<RunWriterRestartCommand, \"kind\"> {\n\treadonly kind: \"retry_tasks\";\n\treadonly taskIds: readonly string[];\n}\nexport function parseRunTaskRetryCommand(value: unknown): RunTaskRetryCommand {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"kind\",\n\t\t\"runId\",\n\t\t\"commandId\",\n\t\t\"expectedRevision\",\n\t\t\"expectedGeneration\",\n\t\t\"contractDigest\",\n\t\t\"baseDigest\",\n\t\t\"taskIds\",\n\t]);\n\tif (input.kind !== \"retry_tasks\") throw new RunContractError(\"task retry kind\");\n\tconst { taskIds: rawIds, ...fields } = input;\n\tconst taskIds =\n\t\tArray.isArray(rawIds) && rawIds.length === 0 ? Object.freeze([]) : runArray(rawIds, runId, MAX_RUN_DAG_TASKS);\n\tif (new Set(taskIds).size !== taskIds.length) throw new RunContractError(\"duplicate task\");\n\tconst base = parseRunWriterRestartCommand({ ...fields, kind: \"restart_writer\" });\n\treturn Object.freeze({ ...base, kind: \"retry_tasks\", taskIds });\n}\n"]}

package/dist/run-writer-restart.d.ts

@@ -0,0 +1,14 @@
+import { VERIFIED_COMMAND_VERSION } from "./run-contract.ts";
+/** Restart intent for an isolated writer, bound to its durable input checkpoint, not partial output. */
+export interface RunWriterRestartCommand {
+    readonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;
+    readonly kind: "restart_writer";
+    readonly runId: string;
+    readonly commandId: string;
+    readonly expectedRevision: number;
+    readonly expectedGeneration: number;
+    readonly contractDigest: string;
+    readonly baseDigest: string;
+}
+export declare function parseRunWriterRestartCommand(value: unknown): RunWriterRestartCommand;
+//# sourceMappingURL=run-writer-restart.d.ts.map

package/dist/run-writer-restart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-writer-restart.d.ts","sourceRoot":"","sources":["../src/run-writer-restart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAG7D,wGAAwG;AACxG,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,aAAa,EAAE,OAAO,wBAAwB,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAuBpF","sourcesContent":["import { VERIFIED_COMMAND_VERSION } from \"./run-contract.ts\";\nimport { RunContractError, runDigest, runId, runLimit, runObject } from \"./run-parsing.ts\";\n\n/** Restart intent for an isolated writer, bound to its durable input checkpoint, not partial output. */\nexport interface RunWriterRestartCommand {\n\treadonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;\n\treadonly kind: \"restart_writer\";\n\treadonly runId: string;\n\treadonly commandId: string;\n\treadonly expectedRevision: number;\n\treadonly expectedGeneration: number;\n\treadonly contractDigest: string;\n\treadonly baseDigest: string;\n}\n\nexport function parseRunWriterRestartCommand(value: unknown): RunWriterRestartCommand {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"kind\",\n\t\t\"runId\",\n\t\t\"commandId\",\n\t\t\"expectedRevision\",\n\t\t\"expectedGeneration\",\n\t\t\"contractDigest\",\n\t\t\"baseDigest\",\n\t]);\n\tif (input.schemaVersion !== VERIFIED_COMMAND_VERSION || input.kind !== \"restart_writer\")\n\t\tthrow new RunContractError(\"writer restart version/kind\");\n\treturn Object.freeze({\n\t\tschemaVersion: VERIFIED_COMMAND_VERSION,\n\t\tkind: \"restart_writer\",\n\t\trunId: runId(input.runId),\n\t\tcommandId: runId(input.commandId),\n\t\texpectedRevision: runLimit(input.expectedRevision, \"expectedRevision\", Number.MAX_SAFE_INTEGER),\n\t\texpectedGeneration: runLimit(input.expectedGeneration, \"expectedGeneration\", Number.MAX_SAFE_INTEGER),\n\t\tcontractDigest: runDigest(input.contractDigest),\n\t\tbaseDigest: runDigest(input.baseDigest),\n\t});\n}\n"]}

package/dist/run-writer-restart.js

@@ -0,0 +1,27 @@
+import { VERIFIED_COMMAND_VERSION } from "./run-contract.js";
+import { RunContractError, runDigest, runId, runLimit, runObject } from "./run-parsing.js";
+export function parseRunWriterRestartCommand(value) {
+    const input = runObject(value, [
+        "schemaVersion",
+        "kind",
+        "runId",
+        "commandId",
+        "expectedRevision",
+        "expectedGeneration",
+        "contractDigest",
+        "baseDigest",
+    ]);
+    if (input.schemaVersion !== VERIFIED_COMMAND_VERSION || input.kind !== "restart_writer")
+        throw new RunContractError("writer restart version/kind");
+    return Object.freeze({
+        schemaVersion: VERIFIED_COMMAND_VERSION,
+        kind: "restart_writer",
+        runId: runId(input.runId),
+        commandId: runId(input.commandId),
+        expectedRevision: runLimit(input.expectedRevision, "expectedRevision", Number.MAX_SAFE_INTEGER),
+        expectedGeneration: runLimit(input.expectedGeneration, "expectedGeneration", Number.MAX_SAFE_INTEGER),
+        contractDigest: runDigest(input.contractDigest),
+        baseDigest: runDigest(input.baseDigest),
+    });
+}
+//# sourceMappingURL=run-writer-restart.js.map

package/dist/run-writer-restart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-writer-restart.js","sourceRoot":"","sources":["../src/run-writer-restart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAc3F,MAAM,UAAU,4BAA4B,CAAC,KAAc,EAA2B;IACrF,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE;QAC9B,eAAe;QACf,MAAM;QACN,OAAO;QACP,WAAW;QACX,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,YAAY;KACZ,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,KAAK,wBAAwB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;QACtF,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,aAAa,EAAE,wBAAwB;QACvC,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QACzB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAC/F,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACrG,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;QAC/C,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;KACvC,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { VERIFIED_COMMAND_VERSION } from \"./run-contract.ts\";\nimport { RunContractError, runDigest, runId, runLimit, runObject } from \"./run-parsing.ts\";\n\n/** Restart intent for an isolated writer, bound to its durable input checkpoint, not partial output. */\nexport interface RunWriterRestartCommand {\n\treadonly schemaVersion: typeof VERIFIED_COMMAND_VERSION;\n\treadonly kind: \"restart_writer\";\n\treadonly runId: string;\n\treadonly commandId: string;\n\treadonly expectedRevision: number;\n\treadonly expectedGeneration: number;\n\treadonly contractDigest: string;\n\treadonly baseDigest: string;\n}\n\nexport function parseRunWriterRestartCommand(value: unknown): RunWriterRestartCommand {\n\tconst input = runObject(value, [\n\t\t\"schemaVersion\",\n\t\t\"kind\",\n\t\t\"runId\",\n\t\t\"commandId\",\n\t\t\"expectedRevision\",\n\t\t\"expectedGeneration\",\n\t\t\"contractDigest\",\n\t\t\"baseDigest\",\n\t]);\n\tif (input.schemaVersion !== VERIFIED_COMMAND_VERSION || input.kind !== \"restart_writer\")\n\t\tthrow new RunContractError(\"writer restart version/kind\");\n\treturn Object.freeze({\n\t\tschemaVersion: VERIFIED_COMMAND_VERSION,\n\t\tkind: \"restart_writer\",\n\t\trunId: runId(input.runId),\n\t\tcommandId: runId(input.commandId),\n\t\texpectedRevision: runLimit(input.expectedRevision, \"expectedRevision\", Number.MAX_SAFE_INTEGER),\n\t\texpectedGeneration: runLimit(input.expectedGeneration, \"expectedGeneration\", Number.MAX_SAFE_INTEGER),\n\t\tcontractDigest: runDigest(input.contractDigest),\n\t\tbaseDigest: runDigest(input.baseDigest),\n\t});\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "omk-protocol",
-	"version": "0.98.4",
+	"version": "0.98.5",
 	"description": "Canonical OMK Run Protocol contracts and pure semantic reducers",
 	"type": "module",
 	"main": "./dist/index.js",