open-multi-agent-kit 0.98.3 → 0.98.5

package/dist/core/verified-run/recovery.d.ts

@@ -0,0 +1,12 @@
+import { type RunResumeCommand } from "omk-protocol";
+import type { RunProjection } from "./run-types.ts";
+export interface RecoveryInspection {
+    readonly state: RunProjection;
+    readonly readiness: "ready" | "terminal" | "legacy" | "candidate_missing" | "unsettled" | "expired" | "clock_changed" | "clock_rollback" | "clock_unavailable" | "recovery_limit" | "integrity";
+    readonly remainingVerifyMs: number | null;
+    /** A ready inspection is advisory; exclusive ownership is acquired only by resume. */
+    readonly ownership: "lease_required";
+}
+export declare function inspectRunRecovery(runPath: string): RecoveryInspection;
+export declare function resumeFrozenCandidate(runPath: string, command: RunResumeCommand, signal?: AbortSignal): Promise<RunProjection>;
+//# sourceMappingURL=recovery.d.ts.map

package/dist/core/verified-run/recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/recovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAgC,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAQnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIpD,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,SAAS,EACf,OAAO,GACP,UAAU,GACV,QAAQ,GACR,mBAAmB,GACnB,WAAW,GACX,SAAS,GACT,eAAe,GACf,gBAAgB,GAChB,mBAAmB,GACnB,gBAAgB,GAChB,WAAW,CAAC;IACf,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,sFAAsF;IACtF,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;CACrC;AAsCD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CA0CtE;AAED,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC,CAkBxB","sourcesContent":["import { join } from \"node:path\";\nimport { MAX_VERIFIED_RUN_GENERATIONS, type RunResumeCommand } from \"omk-protocol\";\nimport { commandEnvironmentDigest, probeVerifiedSandbox } from \"./broker.ts\";\nimport { loadCandidate } from \"./candidate.ts\";\nimport { preflightCheckReceipts } from \"./check-receipt.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { probeNamespace } from \"./namespace-identity.ts\";\nimport { readRunClock, remainingVerification } from \"./recovery-clock.ts\";\nimport { requireRunJournal, withRecoveryLease } from \"./recovery-command.ts\";\nimport type { RunProjection } from \"./run-types.ts\";\nimport { readRegularFile, VerifiedRunError } from \"./storage.ts\";\nimport { verifyCandidate } from \"./verification-phase.ts\";\n\nexport interface RecoveryInspection {\n\treadonly state: RunProjection;\n\treadonly readiness:\n\t\t| \"ready\"\n\t\t| \"terminal\"\n\t\t| \"legacy\"\n\t\t| \"candidate_missing\"\n\t\t| \"unsettled\"\n\t\t| \"expired\"\n\t\t| \"clock_changed\"\n\t\t| \"clock_rollback\"\n\t\t| \"clock_unavailable\"\n\t\t| \"recovery_limit\"\n\t\t| \"integrity\";\n\treadonly remainingVerifyMs: number | null;\n\t/** A ready inspection is advisory; exclusive ownership is acquired only by resume. */\n\treadonly ownership: \"lease_required\";\n}\n\nfunction assertCandidateRecoverable(runPath: string, journal: JournalSnapshot): number {\n\tconst state = journal.state;\n\tif (state.receiptDigest || state.execution === \"failed\") throw new VerifiedRunError(\"resume_terminal\");\n\tif (!state.budget || !state.environmentDigest) throw new VerifiedRunError(\"recovery_legacy\");\n\tif (!state.candidateDigest || state.writerOpen || state.verificationDeadlineMs === null)\n\t\tthrow new VerifiedRunError(\"candidate_missing\");\n\tif (state.generation >= MAX_VERIFIED_RUN_GENERATIONS) throw new VerifiedRunError(\"recovery_limit\");\n\tconst clock = readRunClock();\n\tconst remaining = remainingVerification(state.budget, state.verificationDeadlineMs, clock);\n\tif (clock.nowMs < (state.lastClockMs ?? state.budget.startedMs)) throw new VerifiedRunError(\"clock_rollback\");\n\tif (remaining <= 0) throw new VerifiedRunError(\"deadline\");\n\tfor (const id of state.activeExecutionIds) {\n\t\tconst dispatch = journal.records.find(\n\t\t\t(record) =>\n\t\t\t\trecord.generation === state.generation &&\n\t\t\t\trecord.event.kind === \"dispatch\" &&\n\t\t\t\trecord.event.executionId === id,\n\t\t)?.event;\n\t\tconst identity = state.processes.find((process) => process.executionId === id)?.identity;\n\t\tif (\n\t\t\tdispatch?.kind !== \"dispatch\" ||\n\t\t\tdispatch.role !== \"verifier\" ||\n\t\t\t!identity ||\n\t\t\tprobeNamespace(identity) !== \"gone\"\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"unsettled\");\n\t}\n\tconst first = journal.records[0]?.event;\n\tif (first?.kind !== \"created\") throw new VerifiedRunError(\"integrity\");\n\tif (readRegularFile(join(runPath, \"issuer.key\"), 32).length !== 32) throw new VerifiedRunError(\"integrity\");\n\tloadCandidate(runPath, state.candidateDigest, first.contract.budget);\n\tif (commandEnvironmentDigest(first.contract, \"gated-v1\") !== state.environmentDigest)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\treturn remaining;\n}\n\nexport function inspectRunRecovery(runPath: string): RecoveryInspection {\n\tconst journal = requireRunJournal(runPath);\n\tlet readiness: RecoveryInspection[\"readiness\"] = \"ready\";\n\tlet remainingVerifyMs: number | null = null;\n\ttry {\n\t\tremainingVerifyMs = assertCandidateRecoverable(runPath, journal);\n\t} catch (error) {\n\t\tif (!(error instanceof Error)) throw error;\n\t\tswitch (error instanceof VerifiedRunError ? error.code : \"integrity\") {\n\t\t\tcase \"resume_terminal\":\n\t\t\t\treadiness = \"terminal\";\n\t\t\t\tbreak;\n\t\t\tcase \"recovery_legacy\":\n\t\t\t\treadiness = \"legacy\";\n\t\t\t\tbreak;\n\t\t\tcase \"deadline\":\n\t\t\t\treadiness = \"expired\";\n\t\t\t\tremainingVerifyMs = 0;\n\t\t\t\tbreak;\n\t\t\tcase \"candidate_missing\":\n\t\t\t\treadiness = \"candidate_missing\";\n\t\t\t\tbreak;\n\t\t\tcase \"unsettled\":\n\t\t\t\treadiness = \"unsettled\";\n\t\t\t\tbreak;\n\t\t\tcase \"clock_changed\":\n\t\t\t\treadiness = \"clock_changed\";\n\t\t\t\tbreak;\n\t\t\tcase \"clock_rollback\":\n\t\t\t\treadiness = \"clock_rollback\";\n\t\t\t\tbreak;\n\t\t\tcase \"clock_unavailable\":\n\t\t\t\treadiness = \"clock_unavailable\";\n\t\t\t\tbreak;\n\t\t\tcase \"recovery_limit\":\n\t\t\t\treadiness = \"recovery_limit\";\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\treadiness = \"integrity\";\n\t\t}\n\t}\n\treturn Object.freeze({ state: journal.state, readiness, remainingVerifyMs, ownership: \"lease_required\" });\n}\n\nexport async function resumeFrozenCandidate(\n\trunPath: string,\n\tcommand: RunResumeCommand,\n\tsignal?: AbortSignal,\n): Promise<RunProjection> {\n\tif (signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\treturn withRecoveryLease(runPath, command, async ({ snapshot, journal }) => {\n\t\tassertCandidateRecoverable(runPath, snapshot);\n\t\tconst first = snapshot.records[0]?.event;\n\t\tif (first?.kind !== \"created\") throw new VerifiedRunError(\"integrity\");\n\t\tpreflightCheckReceipts(first.contract);\n\t\tprobeVerifiedSandbox();\n\t\tassertCandidateRecoverable(runPath, snapshot);\n\t\tif (signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\tjournal.append({\n\t\t\tkind: \"resumed\",\n\t\t\tcommand,\n\t\t\tobservedMs: readRunClock().nowMs,\n\t\t\treconciledExecutionIds: snapshot.state.activeExecutionIds,\n\t\t});\n\t\treturn verifyCandidate({ runPath, journal, contract: first.contract, ...(signal ? { signal } : {}) });\n\t});\n}\n"]}

package/dist/core/verified-run/recovery.js

@@ -0,0 +1,115 @@
+import { join } from "node:path";
+import { MAX_VERIFIED_RUN_GENERATIONS } from "omk-protocol";
+import { commandEnvironmentDigest, probeVerifiedSandbox } from "./broker.js";
+import { loadCandidate } from "./candidate.js";
+import { preflightCheckReceipts } from "./check-receipt.js";
+import { probeNamespace } from "./namespace-identity.js";
+import { readRunClock, remainingVerification } from "./recovery-clock.js";
+import { requireRunJournal, withRecoveryLease } from "./recovery-command.js";
+import { readRegularFile, VerifiedRunError } from "./storage.js";
+import { verifyCandidate } from "./verification-phase.js";
+function assertCandidateRecoverable(runPath, journal) {
+    const state = journal.state;
+    if (state.receiptDigest || state.execution === "failed")
+        throw new VerifiedRunError("resume_terminal");
+    if (!state.budget || !state.environmentDigest)
+        throw new VerifiedRunError("recovery_legacy");
+    if (!state.candidateDigest || state.writerOpen || state.verificationDeadlineMs === null)
+        throw new VerifiedRunError("candidate_missing");
+    if (state.generation >= MAX_VERIFIED_RUN_GENERATIONS)
+        throw new VerifiedRunError("recovery_limit");
+    const clock = readRunClock();
+    const remaining = remainingVerification(state.budget, state.verificationDeadlineMs, clock);
+    if (clock.nowMs < (state.lastClockMs ?? state.budget.startedMs))
+        throw new VerifiedRunError("clock_rollback");
+    if (remaining <= 0)
+        throw new VerifiedRunError("deadline");
+    for (const id of state.activeExecutionIds) {
+        const dispatch = journal.records.find((record) => record.generation === state.generation &&
+            record.event.kind === "dispatch" &&
+            record.event.executionId === id)?.event;
+        const identity = state.processes.find((process) => process.executionId === id)?.identity;
+        if (dispatch?.kind !== "dispatch" ||
+            dispatch.role !== "verifier" ||
+            !identity ||
+            probeNamespace(identity) !== "gone")
+            throw new VerifiedRunError("unsettled");
+    }
+    const first = journal.records[0]?.event;
+    if (first?.kind !== "created")
+        throw new VerifiedRunError("integrity");
+    if (readRegularFile(join(runPath, "issuer.key"), 32).length !== 32)
+        throw new VerifiedRunError("integrity");
+    loadCandidate(runPath, state.candidateDigest, first.contract.budget);
+    if (commandEnvironmentDigest(first.contract, "gated-v1") !== state.environmentDigest)
+        throw new VerifiedRunError("integrity");
+    return remaining;
+}
+export function inspectRunRecovery(runPath) {
+    const journal = requireRunJournal(runPath);
+    let readiness = "ready";
+    let remainingVerifyMs = null;
+    try {
+        remainingVerifyMs = assertCandidateRecoverable(runPath, journal);
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        switch (error instanceof VerifiedRunError ? error.code : "integrity") {
+            case "resume_terminal":
+                readiness = "terminal";
+                break;
+            case "recovery_legacy":
+                readiness = "legacy";
+                break;
+            case "deadline":
+                readiness = "expired";
+                remainingVerifyMs = 0;
+                break;
+            case "candidate_missing":
+                readiness = "candidate_missing";
+                break;
+            case "unsettled":
+                readiness = "unsettled";
+                break;
+            case "clock_changed":
+                readiness = "clock_changed";
+                break;
+            case "clock_rollback":
+                readiness = "clock_rollback";
+                break;
+            case "clock_unavailable":
+                readiness = "clock_unavailable";
+                break;
+            case "recovery_limit":
+                readiness = "recovery_limit";
+                break;
+            default:
+                readiness = "integrity";
+        }
+    }
+    return Object.freeze({ state: journal.state, readiness, remainingVerifyMs, ownership: "lease_required" });
+}
+export async function resumeFrozenCandidate(runPath, command, signal) {
+    if (signal?.aborted)
+        throw new VerifiedRunError("cancelled");
+    return withRecoveryLease(runPath, command, async ({ snapshot, journal }) => {
+        assertCandidateRecoverable(runPath, snapshot);
+        const first = snapshot.records[0]?.event;
+        if (first?.kind !== "created")
+            throw new VerifiedRunError("integrity");
+        preflightCheckReceipts(first.contract);
+        probeVerifiedSandbox();
+        assertCandidateRecoverable(runPath, snapshot);
+        if (signal?.aborted)
+            throw new VerifiedRunError("cancelled");
+        journal.append({
+            kind: "resumed",
+            command,
+            observedMs: readRunClock().nowMs,
+            reconciledExecutionIds: snapshot.state.activeExecutionIds,
+        });
+        return verifyCandidate({ runPath, journal, contract: first.contract, ...(signal ? { signal } : {}) });
+    });
+}
+//# sourceMappingURL=recovery.js.map

package/dist/core/verified-run/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../../src/core/verified-run/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,4BAA4B,EAAyB,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAqB1D,SAAS,0BAA0B,CAAC,OAAe,EAAE,OAAwB,EAAU;IACtF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IACvG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI;QACtF,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,UAAU,IAAI,4BAA4B;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAC9G,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC3D,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CACpC,CAAC,MAAM,EAAE,EAAE,CACV,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YACtC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;YAChC,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,EAAE,CAChC,EAAE,KAAK,CAAC;QACT,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC;QACzF,IACC,QAAQ,EAAE,IAAI,KAAK,UAAU;YAC7B,QAAQ,CAAC,IAAI,KAAK,UAAU;YAC5B,CAAC,QAAQ;YACT,cAAc,CAAC,QAAQ,CAAC,KAAK,MAAM;YAEnC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACxC,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5G,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,KAAK,CAAC,iBAAiB;QACnF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAsB;IACvE,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAoC,OAAO,CAAC;IACzD,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,IAAI,CAAC;QACJ,iBAAiB,GAAG,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,QAAQ,KAAK,YAAY,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACtE,KAAK,iBAAiB;gBACrB,SAAS,GAAG,UAAU,CAAC;gBACvB,MAAM;YACP,KAAK,iBAAiB;gBACrB,SAAS,GAAG,QAAQ,CAAC;gBACrB,MAAM;YACP,KAAK,UAAU;gBACd,SAAS,GAAG,SAAS,CAAC;gBACtB,iBAAiB,GAAG,CAAC,CAAC;gBACtB,MAAM;YACP,KAAK,mBAAmB;gBACvB,SAAS,GAAG,mBAAmB,CAAC;gBAChC,MAAM;YACP,KAAK,WAAW;gBACf,SAAS,GAAG,WAAW,CAAC;gBACxB,MAAM;YACP,KAAK,eAAe;gBACnB,SAAS,GAAG,eAAe,CAAC;gBAC5B,MAAM;YACP,KAAK,gBAAgB;gBACpB,SAAS,GAAG,gBAAgB,CAAC;gBAC7B,MAAM;YACP,KAAK,mBAAmB;gBACvB,SAAS,GAAG,mBAAmB,CAAC;gBAChC,MAAM;YACP,KAAK,gBAAgB;gBACpB,SAAS,GAAG,gBAAgB,CAAC;gBAC7B,MAAM;YACP;gBACC,SAAS,GAAG,WAAW,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAAA,CAC1G;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAAe,EACf,OAAyB,EACzB,MAAoB,EACK;IACzB,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC7D,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3E,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACzC,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvC,oBAAoB,EAAE,CAAC;QACvB,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,SAAS;YACf,OAAO;YACP,UAAU,EAAE,YAAY,EAAE,CAAC,KAAK;YAChC,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB;SACzD,CAAC,CAAC;QACH,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAAA,CACtG,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { join } from \"node:path\";\nimport { MAX_VERIFIED_RUN_GENERATIONS, type RunResumeCommand } from \"omk-protocol\";\nimport { commandEnvironmentDigest, probeVerifiedSandbox } from \"./broker.ts\";\nimport { loadCandidate } from \"./candidate.ts\";\nimport { preflightCheckReceipts } from \"./check-receipt.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { probeNamespace } from \"./namespace-identity.ts\";\nimport { readRunClock, remainingVerification } from \"./recovery-clock.ts\";\nimport { requireRunJournal, withRecoveryLease } from \"./recovery-command.ts\";\nimport type { RunProjection } from \"./run-types.ts\";\nimport { readRegularFile, VerifiedRunError } from \"./storage.ts\";\nimport { verifyCandidate } from \"./verification-phase.ts\";\n\nexport interface RecoveryInspection {\n\treadonly state: RunProjection;\n\treadonly readiness:\n\t\t| \"ready\"\n\t\t| \"terminal\"\n\t\t| \"legacy\"\n\t\t| \"candidate_missing\"\n\t\t| \"unsettled\"\n\t\t| \"expired\"\n\t\t| \"clock_changed\"\n\t\t| \"clock_rollback\"\n\t\t| \"clock_unavailable\"\n\t\t| \"recovery_limit\"\n\t\t| \"integrity\";\n\treadonly remainingVerifyMs: number | null;\n\t/** A ready inspection is advisory; exclusive ownership is acquired only by resume. */\n\treadonly ownership: \"lease_required\";\n}\n\nfunction assertCandidateRecoverable(runPath: string, journal: JournalSnapshot): number {\n\tconst state = journal.state;\n\tif (state.receiptDigest || state.execution === \"failed\") throw new VerifiedRunError(\"resume_terminal\");\n\tif (!state.budget || !state.environmentDigest) throw new VerifiedRunError(\"recovery_legacy\");\n\tif (!state.candidateDigest || state.writerOpen || state.verificationDeadlineMs === null)\n\t\tthrow new VerifiedRunError(\"candidate_missing\");\n\tif (state.generation >= MAX_VERIFIED_RUN_GENERATIONS) throw new VerifiedRunError(\"recovery_limit\");\n\tconst clock = readRunClock();\n\tconst remaining = remainingVerification(state.budget, state.verificationDeadlineMs, clock);\n\tif (clock.nowMs < (state.lastClockMs ?? state.budget.startedMs)) throw new VerifiedRunError(\"clock_rollback\");\n\tif (remaining <= 0) throw new VerifiedRunError(\"deadline\");\n\tfor (const id of state.activeExecutionIds) {\n\t\tconst dispatch = journal.records.find(\n\t\t\t(record) =>\n\t\t\t\trecord.generation === state.generation &&\n\t\t\t\trecord.event.kind === \"dispatch\" &&\n\t\t\t\trecord.event.executionId === id,\n\t\t)?.event;\n\t\tconst identity = state.processes.find((process) => process.executionId === id)?.identity;\n\t\tif (\n\t\t\tdispatch?.kind !== \"dispatch\" ||\n\t\t\tdispatch.role !== \"verifier\" ||\n\t\t\t!identity ||\n\t\t\tprobeNamespace(identity) !== \"gone\"\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"unsettled\");\n\t}\n\tconst first = journal.records[0]?.event;\n\tif (first?.kind !== \"created\") throw new VerifiedRunError(\"integrity\");\n\tif (readRegularFile(join(runPath, \"issuer.key\"), 32).length !== 32) throw new VerifiedRunError(\"integrity\");\n\tloadCandidate(runPath, state.candidateDigest, first.contract.budget);\n\tif (commandEnvironmentDigest(first.contract, \"gated-v1\") !== state.environmentDigest)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\treturn remaining;\n}\n\nexport function inspectRunRecovery(runPath: string): RecoveryInspection {\n\tconst journal = requireRunJournal(runPath);\n\tlet readiness: RecoveryInspection[\"readiness\"] = \"ready\";\n\tlet remainingVerifyMs: number | null = null;\n\ttry {\n\t\tremainingVerifyMs = assertCandidateRecoverable(runPath, journal);\n\t} catch (error) {\n\t\tif (!(error instanceof Error)) throw error;\n\t\tswitch (error instanceof VerifiedRunError ? error.code : \"integrity\") {\n\t\t\tcase \"resume_terminal\":\n\t\t\t\treadiness = \"terminal\";\n\t\t\t\tbreak;\n\t\t\tcase \"recovery_legacy\":\n\t\t\t\treadiness = \"legacy\";\n\t\t\t\tbreak;\n\t\t\tcase \"deadline\":\n\t\t\t\treadiness = \"expired\";\n\t\t\t\tremainingVerifyMs = 0;\n\t\t\t\tbreak;\n\t\t\tcase \"candidate_missing\":\n\t\t\t\treadiness = \"candidate_missing\";\n\t\t\t\tbreak;\n\t\t\tcase \"unsettled\":\n\t\t\t\treadiness = \"unsettled\";\n\t\t\t\tbreak;\n\t\t\tcase \"clock_changed\":\n\t\t\t\treadiness = \"clock_changed\";\n\t\t\t\tbreak;\n\t\t\tcase \"clock_rollback\":\n\t\t\t\treadiness = \"clock_rollback\";\n\t\t\t\tbreak;\n\t\t\tcase \"clock_unavailable\":\n\t\t\t\treadiness = \"clock_unavailable\";\n\t\t\t\tbreak;\n\t\t\tcase \"recovery_limit\":\n\t\t\t\treadiness = \"recovery_limit\";\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\treadiness = \"integrity\";\n\t\t}\n\t}\n\treturn Object.freeze({ state: journal.state, readiness, remainingVerifyMs, ownership: \"lease_required\" });\n}\n\nexport async function resumeFrozenCandidate(\n\trunPath: string,\n\tcommand: RunResumeCommand,\n\tsignal?: AbortSignal,\n): Promise<RunProjection> {\n\tif (signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\treturn withRecoveryLease(runPath, command, async ({ snapshot, journal }) => {\n\t\tassertCandidateRecoverable(runPath, snapshot);\n\t\tconst first = snapshot.records[0]?.event;\n\t\tif (first?.kind !== \"created\") throw new VerifiedRunError(\"integrity\");\n\t\tpreflightCheckReceipts(first.contract);\n\t\tprobeVerifiedSandbox();\n\t\tassertCandidateRecoverable(runPath, snapshot);\n\t\tif (signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\tjournal.append({\n\t\t\tkind: \"resumed\",\n\t\t\tcommand,\n\t\t\tobservedMs: readRunClock().nowMs,\n\t\t\treconciledExecutionIds: snapshot.state.activeExecutionIds,\n\t\t});\n\t\treturn verifyCandidate({ runPath, journal, contract: first.contract, ...(signal ? { signal } : {}) });\n\t});\n}\n"]}

package/dist/core/verified-run/run-types.d.ts

@@ -0,0 +1,103 @@
+import type { RunContract, RunResumeCommand, RunStartCommand, RunTaskRetryCommand, RunWriterRestartCommand } from "omk-protocol";
+import type { DagEvent, RunTaskCheckpoint, RunTaskProjection } from "./dag-types.ts";
+import type { NamespaceIdentity } from "./namespace-identity.ts";
+import type { RecoveryBudget } from "./recovery-clock.ts";
+export type RunEvent = DagEvent | {
+    readonly kind: "created";
+    readonly contract: RunContract;
+    readonly command: RunStartCommand;
+} | {
+    readonly kind: "budget_anchored";
+    readonly budget: RecoveryBudget;
+    readonly environmentDigest: string;
+    readonly driver: "linux-pidns-gate-v1";
+} | {
+    readonly kind: "dispatch";
+    readonly executionId: string;
+    readonly role: "writer" | "verifier";
+    readonly claimId: string | null;
+} | {
+    readonly kind: "input_checkpoint";
+    readonly digest: string;
+} | {
+    readonly kind: "process_ready";
+    readonly executionId: string;
+    readonly identity: NamespaceIdentity;
+} | {
+    readonly kind: "writer_opened";
+} | {
+    readonly kind: "model_request";
+    readonly requestId: string;
+} | {
+    readonly kind: "writer_closed";
+    readonly completed: boolean;
+} | {
+    readonly kind: "exited";
+    readonly executionId: string;
+    readonly failure: string | null;
+} | {
+    readonly kind: "candidate";
+    readonly digest: string;
+    readonly observedMs?: number;
+    readonly verificationDeadlineMs?: number;
+} | {
+    readonly kind: "resumed";
+    readonly command: RunResumeCommand;
+    readonly observedMs: number;
+    readonly reconciledExecutionIds: readonly string[];
+} | {
+    readonly kind: "writer_restarted";
+    readonly command: RunWriterRestartCommand;
+    readonly observedMs: number;
+    readonly reconciledExecutionIds: readonly string[];
+} | {
+    readonly kind: "tasks_retried";
+    readonly command: RunTaskRetryCommand;
+    readonly observedMs: number;
+    readonly reconciledExecutionIds: readonly string[];
+    readonly adopted: readonly RunTaskCheckpoint[];
+} | {
+    readonly kind: "evaluated";
+    readonly receiptDigest: string;
+    readonly verified: boolean;
+} | {
+    readonly kind: "failed";
+    readonly code: string;
+};
+export interface RunProjection {
+    readonly runId: string;
+    readonly revision: number;
+    readonly generation: number;
+    readonly execution: "ready" | "running" | "paused" | "succeeded" | "failed";
+    readonly settlement: "open" | "draining" | "settled" | "quarantined";
+    readonly verification: "not_requested" | "verified" | "violated" | "inconclusive";
+    readonly application: "not_requested" | "candidate_ready";
+    readonly candidateDigest: string | null;
+    readonly inputDigest: string | null;
+    readonly receiptDigest: string | null;
+    readonly failure: string | null;
+    readonly activeExecutionIds: readonly string[];
+    readonly writerOpen: boolean;
+    readonly modelRequests: number;
+    readonly tasks: readonly RunTaskProjection[];
+    readonly budget: RecoveryBudget | null;
+    readonly environmentDigest: string | null;
+    readonly verificationDeadlineMs: number | null;
+    readonly lastClockMs: number | null;
+    readonly processes: readonly {
+        readonly executionId: string;
+        readonly identity: NamespaceIdentity;
+    }[];
+}
+/** Mutable reduction bookkeeping, confined to one replay call. */
+export interface WriterReduction {
+    readonly contract: RunContract;
+    state: RunProjection;
+    writerFinished: boolean;
+    writerStarted: boolean;
+    producerStarted: boolean;
+    writerCommands: number;
+    requestBaseline: number;
+    readonly requests: Set<string>;
+}
+//# sourceMappingURL=run-types.d.ts.map

package/dist/core/verified-run/run-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-types.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/run-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,MAAM,QAAQ,GACjB,QAAQ,GACR;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GAC/F;IACA,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACtC,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,GACtG;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC1F;IACA,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACxC,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC9C,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAC1F;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;IACrE,QAAQ,CAAC,YAAY,EAAE,eAAe,GAAG,UAAU,GAAG,UAAU,GAAG,cAAc,CAAC;IAClF,QAAQ,CAAC,WAAW,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC1D,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;KAAE,EAAE,CAAC;CACtG;AAED,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B","sourcesContent":["import type {\n\tRunContract,\n\tRunResumeCommand,\n\tRunStartCommand,\n\tRunTaskRetryCommand,\n\tRunWriterRestartCommand,\n} from \"omk-protocol\";\nimport type { DagEvent, RunTaskCheckpoint, RunTaskProjection } from \"./dag-types.ts\";\nimport type { NamespaceIdentity } from \"./namespace-identity.ts\";\nimport type { RecoveryBudget } from \"./recovery-clock.ts\";\n\nexport type RunEvent =\n\t| DagEvent\n\t| { readonly kind: \"created\"; readonly contract: RunContract; readonly command: RunStartCommand }\n\t| {\n\t\t\treadonly kind: \"budget_anchored\";\n\t\t\treadonly budget: RecoveryBudget;\n\t\t\treadonly environmentDigest: string;\n\t\t\treadonly driver: \"linux-pidns-gate-v1\";\n\t  }\n\t| {\n\t\t\treadonly kind: \"dispatch\";\n\t\t\treadonly executionId: string;\n\t\t\treadonly role: \"writer\" | \"verifier\";\n\t\t\treadonly claimId: string | null;\n\t  }\n\t| { readonly kind: \"input_checkpoint\"; readonly digest: string }\n\t| { readonly kind: \"process_ready\"; readonly executionId: string; readonly identity: NamespaceIdentity }\n\t| { readonly kind: \"writer_opened\" }\n\t| { readonly kind: \"model_request\"; readonly requestId: string }\n\t| { readonly kind: \"writer_closed\"; readonly completed: boolean }\n\t| { readonly kind: \"exited\"; readonly executionId: string; readonly failure: string | null }\n\t| {\n\t\t\treadonly kind: \"candidate\";\n\t\t\treadonly digest: string;\n\t\t\treadonly observedMs?: number;\n\t\t\treadonly verificationDeadlineMs?: number;\n\t  }\n\t| {\n\t\t\treadonly kind: \"resumed\";\n\t\t\treadonly command: RunResumeCommand;\n\t\t\treadonly observedMs: number;\n\t\t\treadonly reconciledExecutionIds: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly kind: \"writer_restarted\";\n\t\t\treadonly command: RunWriterRestartCommand;\n\t\t\treadonly observedMs: number;\n\t\t\treadonly reconciledExecutionIds: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly kind: \"tasks_retried\";\n\t\t\treadonly command: RunTaskRetryCommand;\n\t\t\treadonly observedMs: number;\n\t\t\treadonly reconciledExecutionIds: readonly string[];\n\t\t\treadonly adopted: readonly RunTaskCheckpoint[];\n\t  }\n\t| { readonly kind: \"evaluated\"; readonly receiptDigest: string; readonly verified: boolean }\n\t| { readonly kind: \"failed\"; readonly code: string };\n\nexport interface RunProjection {\n\treadonly runId: string;\n\treadonly revision: number;\n\treadonly generation: number;\n\treadonly execution: \"ready\" | \"running\" | \"paused\" | \"succeeded\" | \"failed\";\n\treadonly settlement: \"open\" | \"draining\" | \"settled\" | \"quarantined\";\n\treadonly verification: \"not_requested\" | \"verified\" | \"violated\" | \"inconclusive\";\n\treadonly application: \"not_requested\" | \"candidate_ready\";\n\treadonly candidateDigest: string | null;\n\treadonly inputDigest: string | null;\n\treadonly receiptDigest: string | null;\n\treadonly failure: string | null;\n\treadonly activeExecutionIds: readonly string[];\n\treadonly writerOpen: boolean;\n\treadonly modelRequests: number;\n\treadonly tasks: readonly RunTaskProjection[];\n\treadonly budget: RecoveryBudget | null;\n\treadonly environmentDigest: string | null;\n\treadonly verificationDeadlineMs: number | null;\n\treadonly lastClockMs: number | null;\n\treadonly processes: readonly { readonly executionId: string; readonly identity: NamespaceIdentity }[];\n}\n\n/** Mutable reduction bookkeeping, confined to one replay call. */\nexport interface WriterReduction {\n\treadonly contract: RunContract;\n\tstate: RunProjection;\n\twriterFinished: boolean;\n\twriterStarted: boolean;\n\tproducerStarted: boolean;\n\twriterCommands: number;\n\trequestBaseline: number;\n\treadonly requests: Set<string>;\n}\n"]}

package/dist/core/verified-run/run-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=run-types.js.map

package/dist/core/verified-run/run-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-types.js","sourceRoot":"","sources":["../../../src/core/verified-run/run-types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n\tRunContract,\n\tRunResumeCommand,\n\tRunStartCommand,\n\tRunTaskRetryCommand,\n\tRunWriterRestartCommand,\n} from \"omk-protocol\";\nimport type { DagEvent, RunTaskCheckpoint, RunTaskProjection } from \"./dag-types.ts\";\nimport type { NamespaceIdentity } from \"./namespace-identity.ts\";\nimport type { RecoveryBudget } from \"./recovery-clock.ts\";\n\nexport type RunEvent =\n\t| DagEvent\n\t| { readonly kind: \"created\"; readonly contract: RunContract; readonly command: RunStartCommand }\n\t| {\n\t\t\treadonly kind: \"budget_anchored\";\n\t\t\treadonly budget: RecoveryBudget;\n\t\t\treadonly environmentDigest: string;\n\t\t\treadonly driver: \"linux-pidns-gate-v1\";\n\t  }\n\t| {\n\t\t\treadonly kind: \"dispatch\";\n\t\t\treadonly executionId: string;\n\t\t\treadonly role: \"writer\" | \"verifier\";\n\t\t\treadonly claimId: string | null;\n\t  }\n\t| { readonly kind: \"input_checkpoint\"; readonly digest: string }\n\t| { readonly kind: \"process_ready\"; readonly executionId: string; readonly identity: NamespaceIdentity }\n\t| { readonly kind: \"writer_opened\" }\n\t| { readonly kind: \"model_request\"; readonly requestId: string }\n\t| { readonly kind: \"writer_closed\"; readonly completed: boolean }\n\t| { readonly kind: \"exited\"; readonly executionId: string; readonly failure: string | null }\n\t| {\n\t\t\treadonly kind: \"candidate\";\n\t\t\treadonly digest: string;\n\t\t\treadonly observedMs?: number;\n\t\t\treadonly verificationDeadlineMs?: number;\n\t  }\n\t| {\n\t\t\treadonly kind: \"resumed\";\n\t\t\treadonly command: RunResumeCommand;\n\t\t\treadonly observedMs: number;\n\t\t\treadonly reconciledExecutionIds: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly kind: \"writer_restarted\";\n\t\t\treadonly command: RunWriterRestartCommand;\n\t\t\treadonly observedMs: number;\n\t\t\treadonly reconciledExecutionIds: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly kind: \"tasks_retried\";\n\t\t\treadonly command: RunTaskRetryCommand;\n\t\t\treadonly observedMs: number;\n\t\t\treadonly reconciledExecutionIds: readonly string[];\n\t\t\treadonly adopted: readonly RunTaskCheckpoint[];\n\t  }\n\t| { readonly kind: \"evaluated\"; readonly receiptDigest: string; readonly verified: boolean }\n\t| { readonly kind: \"failed\"; readonly code: string };\n\nexport interface RunProjection {\n\treadonly runId: string;\n\treadonly revision: number;\n\treadonly generation: number;\n\treadonly execution: \"ready\" | \"running\" | \"paused\" | \"succeeded\" | \"failed\";\n\treadonly settlement: \"open\" | \"draining\" | \"settled\" | \"quarantined\";\n\treadonly verification: \"not_requested\" | \"verified\" | \"violated\" | \"inconclusive\";\n\treadonly application: \"not_requested\" | \"candidate_ready\";\n\treadonly candidateDigest: string | null;\n\treadonly inputDigest: string | null;\n\treadonly receiptDigest: string | null;\n\treadonly failure: string | null;\n\treadonly activeExecutionIds: readonly string[];\n\treadonly writerOpen: boolean;\n\treadonly modelRequests: number;\n\treadonly tasks: readonly RunTaskProjection[];\n\treadonly budget: RecoveryBudget | null;\n\treadonly environmentDigest: string | null;\n\treadonly verificationDeadlineMs: number | null;\n\treadonly lastClockMs: number | null;\n\treadonly processes: readonly { readonly executionId: string; readonly identity: NamespaceIdentity }[];\n}\n\n/** Mutable reduction bookkeeping, confined to one replay call. */\nexport interface WriterReduction {\n\treadonly contract: RunContract;\n\tstate: RunProjection;\n\twriterFinished: boolean;\n\twriterStarted: boolean;\n\tproducerStarted: boolean;\n\twriterCommands: number;\n\trequestBaseline: number;\n\treadonly requests: Set<string>;\n}\n"]}

package/dist/core/verified-run/scripted-writer.d.ts

@@ -0,0 +1,15 @@
+import type { RunScriptedWriter } from "omk-protocol";
+import type { OwnedRunResult } from "./owned-execution.ts";
+import type { VerifiedRunRuntime } from "./session-port.ts";
+export interface ScriptedWriterContext {
+    readonly runtime: VerifiedRunRuntime;
+    readonly workspace: string;
+    readonly deadline: number;
+    readonly requestLimit: number;
+    readonly signal?: AbortSignal;
+    readonly beforeRequest: () => void;
+    readonly executeStep: (index: number, signal?: AbortSignal) => Promise<OwnedRunResult>;
+}
+/** Offline reference adapter. The real AgentSession is trusted host code; every command stays in bwrap. */
+export declare function executeScriptedWriter(writer: RunScriptedWriter, goal: string, context: ScriptedWriterContext): Promise<void>;
+//# sourceMappingURL=scripted-writer.d.ts.map

package/dist/core/verified-run/scripted-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scripted-writer.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/scripted-writer.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAItD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAsB,MAAM,mBAAmB,CAAC;AAGhF,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CACvF;AAED,2GAA2G;AAC3G,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA8Ef","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { performance } from \"node:perf_hooks\";\nimport { Agent, type AgentTool } from \"omk-agent-core\";\nimport { fauxAssistantMessage, fauxToolCall, registerFauxProvider, streamSimple } from \"omk-ai\";\nimport type { RunScriptedWriter } from \"omk-protocol\";\nimport { Type } from \"typebox\";\nimport { convertToLlm } from \"../messages.ts\";\nimport { RunBudgetExceededError } from \"../run-budget-policy.ts\";\nimport type { OwnedRunResult } from \"./owned-execution.ts\";\nimport type { VerifiedRunRuntime, VerifiedRunSession } from \"./session-port.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nexport interface ScriptedWriterContext {\n\treadonly runtime: VerifiedRunRuntime;\n\treadonly workspace: string;\n\treadonly deadline: number;\n\treadonly requestLimit: number;\n\treadonly signal?: AbortSignal;\n\treadonly beforeRequest: () => void;\n\treadonly executeStep: (index: number, signal?: AbortSignal) => Promise<OwnedRunResult>;\n}\n\n/** Offline reference adapter. The real AgentSession is trusted host code; every command stays in bwrap. */\nexport async function executeScriptedWriter(\n\twriter: RunScriptedWriter,\n\tgoal: string,\n\tcontext: ScriptedWriterContext,\n): Promise<void> {\n\tif (context.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\tconst faux = registerFauxProvider({ provider: `verified-scripted-${randomUUID()}` });\n\tlet session: VerifiedRunSession | undefined;\n\tlet failure: unknown;\n\tlet completedSteps = 0;\n\tconst cancel = (): void => session?.agent.abort();\n\ttry {\n\t\tconst model = faux.getModel();\n\t\tconst schema = Type.Object(\n\t\t\t{ index: Type.Integer({ minimum: 0, maximum: writer.steps.length - 1 }) },\n\t\t\t{ additionalProperties: false },\n\t\t);\n\t\tconst tool: AgentTool<typeof schema> = {\n\t\t\tname: \"verified_step\",\n\t\t\tlabel: \"Execute approved step\",\n\t\t\tdescription: \"Execute one contract-approved step in order.\",\n\t\t\tparameters: schema,\n\t\t\texecute: async (_id, args, signal) => {\n\t\t\t\ttry {\n\t\t\t\t\tif (failure || args.index !== completedSteps || !writer.steps[args.index])\n\t\t\t\t\t\tthrow new VerifiedRunError(\"writer_step\");\n\t\t\t\t\tconst { result } = await context.executeStep(args.index, signal);\n\t\t\t\t\tif (result.failure) throw new VerifiedRunError(result.failure);\n\t\t\t\t\tcompletedSteps += 1;\n\t\t\t\t\treturn { content: [{ type: \"text\", text: result.stdout.toString(\"utf8\") }], details: {} };\n\t\t\t\t} catch (error) {\n\t\t\t\t\tfailure = error;\n\t\t\t\t\tcancel();\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t},\n\t\t};\n\t\tfaux.setResponses([\n\t\t\t...writer.steps.map((_step, index) => fauxAssistantMessage(fauxToolCall(tool.name, { index }))),\n\t\t\tfauxAssistantMessage(\"Contracted steps finished; only the supervisor may verify the candidate.\"),\n\t\t]);\n\t\tconst agent = new Agent({\n\t\t\tinitialState: { model, tools: [] },\n\t\t\tconvertToLlm,\n\t\t\tgetApiKey: () => \"synthetic-local-only\",\n\t\t\tstreamFn: (selected, input, options) => {\n\t\t\t\tcontext.beforeRequest();\n\t\t\t\treturn streamSimple(selected, input, options);\n\t\t\t},\n\t\t});\n\t\tsession = context.runtime.createSession({ agent, tool, workspace: context.workspace });\n\t\tcontext.signal?.addEventListener(\"abort\", cancel, { once: true });\n\t\tif (context.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\tconst remaining = Math.floor(context.deadline - performance.now());\n\t\tif (remaining <= 0) throw new VerifiedRunError(\"deadline\");\n\t\tawait session.prompt(goal, {\n\t\t\texpandPromptTemplates: false,\n\t\t\trunBudget: { timeoutMs: remaining, maxRequests: context.requestLimit, maxConcurrentRequests: 1 },\n\t\t});\n\t\tif (failure) throw failure;\n\t\tif (\n\t\t\tcompletedSteps !== writer.steps.length ||\n\t\t\tsession.lastTermination?.kind !== \"completed\" ||\n\t\t\tsession.getRunBudgetSnapshot()?.activeRequests !== 0\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"writer_incomplete\");\n\t} catch (error) {\n\t\tif (failure instanceof VerifiedRunError) throw failure;\n\t\tif (error instanceof RunBudgetExceededError)\n\t\t\tthrow new VerifiedRunError(error.code === \"requests\" ? \"model_request_limit\" : \"deadline\");\n\t\tthrow error;\n\t} finally {\n\t\tcontext.signal?.removeEventListener(\"abort\", cancel);\n\t\ttry {\n\t\t\tif (session) {\n\t\t\t\tawait session.abort();\n\t\t\t\tsession.dispose();\n\t\t\t}\n\t\t} finally {\n\t\t\tfaux.unregister();\n\t\t}\n\t}\n}\n"]}

package/dist/core/verified-run/scripted-writer.js

@@ -0,0 +1,94 @@
+import { randomUUID } from "node:crypto";
+import { performance } from "node:perf_hooks";
+import { Agent } from "omk-agent-core";
+import { fauxAssistantMessage, fauxToolCall, registerFauxProvider, streamSimple } from "omk-ai";
+import { Type } from "typebox";
+import { convertToLlm } from "../messages.js";
+import { RunBudgetExceededError } from "../run-budget-policy.js";
+import { VerifiedRunError } from "./storage.js";
+/** Offline reference adapter. The real AgentSession is trusted host code; every command stays in bwrap. */
+export async function executeScriptedWriter(writer, goal, context) {
+    if (context.signal?.aborted)
+        throw new VerifiedRunError("cancelled");
+    const faux = registerFauxProvider({ provider: `verified-scripted-${randomUUID()}` });
+    let session;
+    let failure;
+    let completedSteps = 0;
+    const cancel = () => session?.agent.abort();
+    try {
+        const model = faux.getModel();
+        const schema = Type.Object({ index: Type.Integer({ minimum: 0, maximum: writer.steps.length - 1 }) }, { additionalProperties: false });
+        const tool = {
+            name: "verified_step",
+            label: "Execute approved step",
+            description: "Execute one contract-approved step in order.",
+            parameters: schema,
+            execute: async (_id, args, signal) => {
+                try {
+                    if (failure || args.index !== completedSteps || !writer.steps[args.index])
+                        throw new VerifiedRunError("writer_step");
+                    const { result } = await context.executeStep(args.index, signal);
+                    if (result.failure)
+                        throw new VerifiedRunError(result.failure);
+                    completedSteps += 1;
+                    return { content: [{ type: "text", text: result.stdout.toString("utf8") }], details: {} };
+                }
+                catch (error) {
+                    failure = error;
+                    cancel();
+                    throw error;
+                }
+            },
+        };
+        faux.setResponses([
+            ...writer.steps.map((_step, index) => fauxAssistantMessage(fauxToolCall(tool.name, { index }))),
+            fauxAssistantMessage("Contracted steps finished; only the supervisor may verify the candidate."),
+        ]);
+        const agent = new Agent({
+            initialState: { model, tools: [] },
+            convertToLlm,
+            getApiKey: () => "synthetic-local-only",
+            streamFn: (selected, input, options) => {
+                context.beforeRequest();
+                return streamSimple(selected, input, options);
+            },
+        });
+        session = context.runtime.createSession({ agent, tool, workspace: context.workspace });
+        context.signal?.addEventListener("abort", cancel, { once: true });
+        if (context.signal?.aborted)
+            throw new VerifiedRunError("cancelled");
+        const remaining = Math.floor(context.deadline - performance.now());
+        if (remaining <= 0)
+            throw new VerifiedRunError("deadline");
+        await session.prompt(goal, {
+            expandPromptTemplates: false,
+            runBudget: { timeoutMs: remaining, maxRequests: context.requestLimit, maxConcurrentRequests: 1 },
+        });
+        if (failure)
+            throw failure;
+        if (completedSteps !== writer.steps.length ||
+            session.lastTermination?.kind !== "completed" ||
+            session.getRunBudgetSnapshot()?.activeRequests !== 0)
+            throw new VerifiedRunError("writer_incomplete");
+    }
+    catch (error) {
+        if (failure instanceof VerifiedRunError)
+            throw failure;
+        if (error instanceof RunBudgetExceededError)
+            throw new VerifiedRunError(error.code === "requests" ? "model_request_limit" : "deadline");
+        throw error;
+    }
+    finally {
+        context.signal?.removeEventListener("abort", cancel);
+        try {
+            if (session) {
+                await session.abort();
+                session.dispose();
+            }
+        }
+        finally {
+            faux.unregister();
+        }
+    }
+}
+//# sourceMappingURL=scripted-writer.js.map

package/dist/core/verified-run/scripted-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scripted-writer.js","sourceRoot":"","sources":["../../../src/core/verified-run/scripted-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAkB,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEhG,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAYhD,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,MAAyB,EACzB,IAAY,EACZ,OAA8B,EACd;IAChB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,qBAAqB,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,OAAuC,CAAC;IAC5C,IAAI,OAAgB,CAAC;IACrB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,GAAS,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAClD,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACzB,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EACzE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAC/B,CAAC;QACF,MAAM,IAAI,GAA6B;YACtC,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,8CAA8C;YAC3D,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACJ,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;wBACxE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;oBAC3C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBACjE,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAC/D,cAAc,IAAI,CAAC,CAAC;oBACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;gBAC3F,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,OAAO,GAAG,KAAK,CAAC;oBAChB,MAAM,EAAE,CAAC;oBACT,MAAM,KAAK,CAAC;gBACb,CAAC;YAAA,CACD;SACD,CAAC;QACF,IAAI,CAAC,YAAY,CAAC;YACjB,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC/F,oBAAoB,CAAC,0EAA0E,CAAC;SAChG,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;YACvB,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;YAClC,YAAY;YACZ,SAAS,EAAE,GAAG,EAAE,CAAC,sBAAsB;YACvC,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;gBACvC,OAAO,CAAC,aAAa,EAAE,CAAC;gBACxB,OAAO,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAAA,CAC9C;SACD,CAAC,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1B,qBAAqB,EAAE,KAAK;YAC5B,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,qBAAqB,EAAE,CAAC,EAAE;SAChG,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;QAC3B,IACC,cAAc,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM;YACtC,OAAO,CAAC,eAAe,EAAE,IAAI,KAAK,WAAW;YAC7C,OAAO,CAAC,oBAAoB,EAAE,EAAE,cAAc,KAAK,CAAC;YAEpD,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,YAAY,gBAAgB;YAAE,MAAM,OAAO,CAAC;QACvD,IAAI,KAAK,YAAY,sBAAsB;YAC1C,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC5F,MAAM,KAAK,CAAC;IACb,CAAC;YAAS,CAAC;QACV,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC;YACJ,IAAI,OAAO,EAAE,CAAC;gBACb,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { performance } from \"node:perf_hooks\";\nimport { Agent, type AgentTool } from \"omk-agent-core\";\nimport { fauxAssistantMessage, fauxToolCall, registerFauxProvider, streamSimple } from \"omk-ai\";\nimport type { RunScriptedWriter } from \"omk-protocol\";\nimport { Type } from \"typebox\";\nimport { convertToLlm } from \"../messages.ts\";\nimport { RunBudgetExceededError } from \"../run-budget-policy.ts\";\nimport type { OwnedRunResult } from \"./owned-execution.ts\";\nimport type { VerifiedRunRuntime, VerifiedRunSession } from \"./session-port.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nexport interface ScriptedWriterContext {\n\treadonly runtime: VerifiedRunRuntime;\n\treadonly workspace: string;\n\treadonly deadline: number;\n\treadonly requestLimit: number;\n\treadonly signal?: AbortSignal;\n\treadonly beforeRequest: () => void;\n\treadonly executeStep: (index: number, signal?: AbortSignal) => Promise<OwnedRunResult>;\n}\n\n/** Offline reference adapter. The real AgentSession is trusted host code; every command stays in bwrap. */\nexport async function executeScriptedWriter(\n\twriter: RunScriptedWriter,\n\tgoal: string,\n\tcontext: ScriptedWriterContext,\n): Promise<void> {\n\tif (context.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\tconst faux = registerFauxProvider({ provider: `verified-scripted-${randomUUID()}` });\n\tlet session: VerifiedRunSession | undefined;\n\tlet failure: unknown;\n\tlet completedSteps = 0;\n\tconst cancel = (): void => session?.agent.abort();\n\ttry {\n\t\tconst model = faux.getModel();\n\t\tconst schema = Type.Object(\n\t\t\t{ index: Type.Integer({ minimum: 0, maximum: writer.steps.length - 1 }) },\n\t\t\t{ additionalProperties: false },\n\t\t);\n\t\tconst tool: AgentTool<typeof schema> = {\n\t\t\tname: \"verified_step\",\n\t\t\tlabel: \"Execute approved step\",\n\t\t\tdescription: \"Execute one contract-approved step in order.\",\n\t\t\tparameters: schema,\n\t\t\texecute: async (_id, args, signal) => {\n\t\t\t\ttry {\n\t\t\t\t\tif (failure || args.index !== completedSteps || !writer.steps[args.index])\n\t\t\t\t\t\tthrow new VerifiedRunError(\"writer_step\");\n\t\t\t\t\tconst { result } = await context.executeStep(args.index, signal);\n\t\t\t\t\tif (result.failure) throw new VerifiedRunError(result.failure);\n\t\t\t\t\tcompletedSteps += 1;\n\t\t\t\t\treturn { content: [{ type: \"text\", text: result.stdout.toString(\"utf8\") }], details: {} };\n\t\t\t\t} catch (error) {\n\t\t\t\t\tfailure = error;\n\t\t\t\t\tcancel();\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t},\n\t\t};\n\t\tfaux.setResponses([\n\t\t\t...writer.steps.map((_step, index) => fauxAssistantMessage(fauxToolCall(tool.name, { index }))),\n\t\t\tfauxAssistantMessage(\"Contracted steps finished; only the supervisor may verify the candidate.\"),\n\t\t]);\n\t\tconst agent = new Agent({\n\t\t\tinitialState: { model, tools: [] },\n\t\t\tconvertToLlm,\n\t\t\tgetApiKey: () => \"synthetic-local-only\",\n\t\t\tstreamFn: (selected, input, options) => {\n\t\t\t\tcontext.beforeRequest();\n\t\t\t\treturn streamSimple(selected, input, options);\n\t\t\t},\n\t\t});\n\t\tsession = context.runtime.createSession({ agent, tool, workspace: context.workspace });\n\t\tcontext.signal?.addEventListener(\"abort\", cancel, { once: true });\n\t\tif (context.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\tconst remaining = Math.floor(context.deadline - performance.now());\n\t\tif (remaining <= 0) throw new VerifiedRunError(\"deadline\");\n\t\tawait session.prompt(goal, {\n\t\t\texpandPromptTemplates: false,\n\t\t\trunBudget: { timeoutMs: remaining, maxRequests: context.requestLimit, maxConcurrentRequests: 1 },\n\t\t});\n\t\tif (failure) throw failure;\n\t\tif (\n\t\t\tcompletedSteps !== writer.steps.length ||\n\t\t\tsession.lastTermination?.kind !== \"completed\" ||\n\t\t\tsession.getRunBudgetSnapshot()?.activeRequests !== 0\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"writer_incomplete\");\n\t} catch (error) {\n\t\tif (failure instanceof VerifiedRunError) throw failure;\n\t\tif (error instanceof RunBudgetExceededError)\n\t\t\tthrow new VerifiedRunError(error.code === \"requests\" ? \"model_request_limit\" : \"deadline\");\n\t\tthrow error;\n\t} finally {\n\t\tcontext.signal?.removeEventListener(\"abort\", cancel);\n\t\ttry {\n\t\t\tif (session) {\n\t\t\t\tawait session.abort();\n\t\t\t\tsession.dispose();\n\t\t\t}\n\t\t} finally {\n\t\t\tfaux.unregister();\n\t\t}\n\t}\n}\n"]}

package/dist/core/verified-run/session-port.d.ts

@@ -0,0 +1,27 @@
+import type { Agent, AgentTool } from "omk-agent-core";
+import type { RunBudgetLimits } from "../run-budget-policy.ts";
+/** Host composition port: not accepted from a contract, worker message or RPC payload. */
+export interface VerifiedRunSession {
+    readonly agent: Pick<Agent, "abort">;
+    readonly lastTermination?: {
+        readonly kind: string;
+    };
+    prompt(goal: string, options: {
+        readonly expandPromptTemplates: false;
+        readonly runBudget: RunBudgetLimits;
+    }): Promise<void>;
+    getRunBudgetSnapshot(): {
+        readonly activeRequests: number;
+    } | undefined;
+    abort(): Promise<void>;
+    dispose(): void;
+}
+export interface VerifiedRunSessionInput {
+    readonly agent: Agent;
+    readonly tool: AgentTool;
+    readonly workspace: string;
+}
+export interface VerifiedRunRuntime {
+    readonly createSession: (input: VerifiedRunSessionInput) => VerifiedRunSession;
+}
+//# sourceMappingURL=session-port.d.ts.map

package/dist/core/verified-run/session-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-port.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/session-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,0FAA0F;AAC1F,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,MAAM,CACL,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;KAAE,GACrF,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,oBAAoB,IAAI;QAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACxE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,IAAI,CAAC;CAChB;AACD,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,kBAAkB,CAAC;CAC/E","sourcesContent":["import type { Agent, AgentTool } from \"omk-agent-core\";\nimport type { RunBudgetLimits } from \"../run-budget-policy.ts\";\n\n/** Host composition port: not accepted from a contract, worker message or RPC payload. */\nexport interface VerifiedRunSession {\n\treadonly agent: Pick<Agent, \"abort\">;\n\treadonly lastTermination?: { readonly kind: string };\n\tprompt(\n\t\tgoal: string,\n\t\toptions: { readonly expandPromptTemplates: false; readonly runBudget: RunBudgetLimits },\n\t): Promise<void>;\n\tgetRunBudgetSnapshot(): { readonly activeRequests: number } | undefined;\n\tabort(): Promise<void>;\n\tdispose(): void;\n}\nexport interface VerifiedRunSessionInput {\n\treadonly agent: Agent;\n\treadonly tool: AgentTool;\n\treadonly workspace: string;\n}\nexport interface VerifiedRunRuntime {\n\treadonly createSession: (input: VerifiedRunSessionInput) => VerifiedRunSession;\n}\n"]}

package/dist/core/verified-run/session-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session-port.js.map

package/dist/core/verified-run/session-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-port.js","sourceRoot":"","sources":["../../../src/core/verified-run/session-port.ts"],"names":[],"mappings":"","sourcesContent":["import type { Agent, AgentTool } from \"omk-agent-core\";\nimport type { RunBudgetLimits } from \"../run-budget-policy.ts\";\n\n/** Host composition port: not accepted from a contract, worker message or RPC payload. */\nexport interface VerifiedRunSession {\n\treadonly agent: Pick<Agent, \"abort\">;\n\treadonly lastTermination?: { readonly kind: string };\n\tprompt(\n\t\tgoal: string,\n\t\toptions: { readonly expandPromptTemplates: false; readonly runBudget: RunBudgetLimits },\n\t): Promise<void>;\n\tgetRunBudgetSnapshot(): { readonly activeRequests: number } | undefined;\n\tabort(): Promise<void>;\n\tdispose(): void;\n}\nexport interface VerifiedRunSessionInput {\n\treadonly agent: Agent;\n\treadonly tool: AgentTool;\n\treadonly workspace: string;\n}\nexport interface VerifiedRunRuntime {\n\treadonly createSession: (input: VerifiedRunSessionInput) => VerifiedRunSession;\n}\n"]}

package/dist/core/verified-run/storage.d.ts

@@ -0,0 +1,15 @@
+export declare class VerifiedRunError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare const digestBytes: (bytes: string | Uint8Array<ArrayBufferLike>) => string;
+export declare const digestObject: (value: unknown) => string;
+export declare function readRegularFile(path: string, maxBytes: number): Buffer;
+export declare function readJson(path: string, maxBytes?: number): unknown;
+export declare function publishBytes(path: string, bytes: Uint8Array): void;
+export declare function publishObject(path: string, value: unknown): string;
+/** Resolve existing parents without creating state. State must never be part of a mounted workspace. */
+export declare function stateRunPath(root: string, id: string): string;
+export declare function assertStateOutsideWorkspace(stateRoot: string, workspace: string): void;
+export declare function assertDirectory(path: string): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/core/verified-run/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/storage.ts"],"names":[],"mappings":"AAMA,qBAAa,gBAAiB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,YAAY,IAAI,EAAE,MAAM,EAIvB;CACD;AAED,eAAO,MAAM,WAAW,yDAA2F,CAAC;AACpH,eAAO,MAAM,YAAY,4BAAgE,CAAC;AAE1F,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAetE;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAOlE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAOlE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAIlE;AAED,wGAAwG;AACxG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAwBtF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAElD","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, realpathSync } from \"node:fs\";\nimport { basename, dirname, join, relative, resolve } from \"node:path\";\nimport { writeExclusiveFileDurablySync } from \"../durable-file-io.ts\";\nimport { canonicalJson } from \"../run-journal.ts\";\n\nexport class VerifiedRunError extends Error {\n\treadonly code: string;\n\tconstructor(code: string) {\n\t\tsuper(`verified-run: ${code}`);\n\t\tthis.name = \"VerifiedRunError\";\n\t\tthis.code = code;\n\t}\n}\n\nexport const digestBytes = (bytes: Uint8Array | string): string => createHash(\"sha256\").update(bytes).digest(\"hex\");\nexport const digestObject = (value: unknown): string => digestBytes(canonicalJson(value));\n\nexport function readRegularFile(path: string, maxBytes: number): Buffer {\n\tconst fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);\n\ttry {\n\t\tconst before = fstatSync(fd, { bigint: true });\n\t\tif (!before.isFile() || before.nlink !== 1n) throw new VerifiedRunError(\"file_type\");\n\t\tif (before.size > BigInt(maxBytes)) throw new VerifiedRunError(\"storage_limit\");\n\t\tconst bytes = readFileSync(fd);\n\t\tconst after = fstatSync(fd, { bigint: true });\n\t\tif (before.size !== after.size || before.ctimeNs !== after.ctimeNs || BigInt(bytes.length) !== before.size) {\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t}\n\t\treturn bytes;\n\t} finally {\n\t\tcloseSync(fd);\n\t}\n}\n\nexport function readJson(path: string, maxBytes = 1048576): unknown {\n\ttry {\n\t\treturn JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(readRegularFile(path, maxBytes)));\n\t} catch (error) {\n\t\tif (error instanceof SyntaxError || error instanceof TypeError) throw new VerifiedRunError(\"integrity\");\n\t\tthrow error;\n\t}\n}\n\nexport function publishBytes(path: string, bytes: Uint8Array): void {\n\ttry {\n\t\twriteExclusiveFileDurablySync(path, bytes);\n\t} catch (error) {\n\t\tif (!(error instanceof Error && \"code\" in error && error.code === \"EEXIST\")) throw error;\n\t\tif (!readRegularFile(path, bytes.length).equals(Buffer.from(bytes))) throw new VerifiedRunError(\"integrity\");\n\t}\n}\n\nexport function publishObject(path: string, value: unknown): string {\n\tconst bytes = Buffer.from(canonicalJson(value));\n\tpublishBytes(path, bytes);\n\treturn digestBytes(bytes);\n}\n\n/** Resolve existing parents without creating state. State must never be part of a mounted workspace. */\nexport function stateRunPath(root: string, id: string): string {\n\tif (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(id)) throw new VerifiedRunError(\"run_id\");\n\treturn join(resolve(root), id);\n}\n\nexport function assertStateOutsideWorkspace(stateRoot: string, workspace: string): void {\n\tlet cursor = resolve(stateRoot);\n\tconst tail: string[] = [];\n\twhile (true) {\n\t\ttry {\n\t\t\tcursor = join(realpathSync(cursor), ...tail);\n\t\t\tbreak;\n\t\t} catch (error) {\n\t\t\tif (!(error instanceof Error && \"code\" in error && error.code === \"ENOENT\")) throw error;\n\t\t\ttail.unshift(basename(cursor));\n\t\t\tcursor = dirname(cursor);\n\t\t}\n\t}\n\tconst base = realpathSync(workspace);\n\tconst under = relative(base, cursor);\n\tconst contains = relative(cursor, base);\n\tif (\n\t\tunder === \"\" ||\n\t\t(!under.startsWith(\"../\") && under !== \"..\") ||\n\t\tcontains === \"\" ||\n\t\t(!contains.startsWith(\"../\") && contains !== \"..\")\n\t) {\n\t\tthrow new VerifiedRunError(\"state_scope\");\n\t}\n}\n\nexport function assertDirectory(path: string): void {\n\tif (!lstatSync(path).isDirectory() || realpathSync(path) !== resolve(path)) throw new VerifiedRunError(\"file_type\");\n}\n"]}

package/dist/core/verified-run/storage.js

@@ -0,0 +1,96 @@
+import { createHash } from "node:crypto";
+import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, realpathSync } from "node:fs";
+import { basename, dirname, join, relative, resolve } from "node:path";
+import { writeExclusiveFileDurablySync } from "../durable-file-io.js";
+import { canonicalJson } from "../run-journal.js";
+export class VerifiedRunError extends Error {
+    code;
+    constructor(code) {
+        super(`verified-run: ${code}`);
+        this.name = "VerifiedRunError";
+        this.code = code;
+    }
+}
+export const digestBytes = (bytes) => createHash("sha256").update(bytes).digest("hex");
+export const digestObject = (value) => digestBytes(canonicalJson(value));
+export function readRegularFile(path, maxBytes) {
+    const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    try {
+        const before = fstatSync(fd, { bigint: true });
+        if (!before.isFile() || before.nlink !== 1n)
+            throw new VerifiedRunError("file_type");
+        if (before.size > BigInt(maxBytes))
+            throw new VerifiedRunError("storage_limit");
+        const bytes = readFileSync(fd);
+        const after = fstatSync(fd, { bigint: true });
+        if (before.size !== after.size || before.ctimeNs !== after.ctimeNs || BigInt(bytes.length) !== before.size) {
+            throw new VerifiedRunError("integrity");
+        }
+        return bytes;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function readJson(path, maxBytes = 1048576) {
+    try {
+        return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(readRegularFile(path, maxBytes)));
+    }
+    catch (error) {
+        if (error instanceof SyntaxError || error instanceof TypeError)
+            throw new VerifiedRunError("integrity");
+        throw error;
+    }
+}
+export function publishBytes(path, bytes) {
+    try {
+        writeExclusiveFileDurablySync(path, bytes);
+    }
+    catch (error) {
+        if (!(error instanceof Error && "code" in error && error.code === "EEXIST"))
+            throw error;
+        if (!readRegularFile(path, bytes.length).equals(Buffer.from(bytes)))
+            throw new VerifiedRunError("integrity");
+    }
+}
+export function publishObject(path, value) {
+    const bytes = Buffer.from(canonicalJson(value));
+    publishBytes(path, bytes);
+    return digestBytes(bytes);
+}
+/** Resolve existing parents without creating state. State must never be part of a mounted workspace. */
+export function stateRunPath(root, id) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(id))
+        throw new VerifiedRunError("run_id");
+    return join(resolve(root), id);
+}
+export function assertStateOutsideWorkspace(stateRoot, workspace) {
+    let cursor = resolve(stateRoot);
+    const tail = [];
+    while (true) {
+        try {
+            cursor = join(realpathSync(cursor), ...tail);
+            break;
+        }
+        catch (error) {
+            if (!(error instanceof Error && "code" in error && error.code === "ENOENT"))
+                throw error;
+            tail.unshift(basename(cursor));
+            cursor = dirname(cursor);
+        }
+    }
+    const base = realpathSync(workspace);
+    const under = relative(base, cursor);
+    const contains = relative(cursor, base);
+    if (under === "" ||
+        (!under.startsWith("../") && under !== "..") ||
+        contains === "" ||
+        (!contains.startsWith("../") && contains !== "..")) {
+        throw new VerifiedRunError("state_scope");
+    }
+}
+export function assertDirectory(path) {
+    if (!lstatSync(path).isDirectory() || realpathSync(path) !== resolve(path))
+        throw new VerifiedRunError("file_type");
+}
+//# sourceMappingURL=storage.js.map