open-multi-agent-kit 0.98.4 → 0.99.0

package/dist/core/verified-run/coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../../src/core/verified-run/coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EACN,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,4BAA4B,GAE5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAA+B,MAAM,mBAAmB,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,eAAe,EAA4B,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE/E,OAAO,EAAE,kBAAkB,EAA2B,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,EACN,2BAA2B,EAC3B,WAAW,EACX,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,gBAAgB,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAiC,MAAM,sBAAsB,CAAC;AAiBnH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAmB;IAChE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC;QACtC,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,WAAW,EAAE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,CAAC,UAAU;QAC9D,iBAAiB,EAAE,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC;QACjE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,kBAAkB,EAAE,KAAK;KACzB,CAAC,CAAC;AAAA,CACH;AAED,qGAAqG;AACrG,MAAM,OAAO,cAAc;IACT,SAAS,CAAS;IAClB,OAAO,CAAiC;IACzD,YAAY,SAAiB,EAAE,OAA4B,EAAE;QAC5D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAAA,CACvB;IAED,OAAO,CAAC,KAAa,EAAiB;QACrC,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,KAAK,CAAC,aAAa;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,KAAK,CAAC;IAAA,CACrB;IAED,eAAe,CAAC,KAAa,EAAsB;QAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IAAA,CACd;IAED,qBAAqB,CAAC,KAAa,EAA4B;QAC9D,MAAM,MAAM,GAAG,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IAAA,CACd;IAED,mBAAmB,CAAC,KAAa,EAA0B;QAC1D,MAAM,MAAM,GAAG,mBAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,CAAC,aAAa;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IAAA,CACd;IAED,KAAK,CAAC,UAAU,CAAC,KAAc,EAAE,QAA6B,EAA0B;QACvF,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,QAAQ,CAAC,sBAAsB,KAAK,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACvG,MAAM,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAAA,CACnC;IAED,QAAQ,CAAC,KAAa,EAAuB;QAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK;YAC1E,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC3C,OAAO,eAAe,CACrB,OAAO,EACP,OAAO,EACP,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CACtF,CAAC;IAAA,CACF;IAED,QAAQ,CAAC,KAAa,EAAE,eAAuB,EAAE,IAAY,EAAU;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,eAAe,KAAK,QAAQ,CAAC,eAAe;YACrE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1G,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9G,OAAO,KAAK,CAAC;IAAA,CACb;IAED,KAAK,CAAC,MAAM,CAAC,KAAc,EAAE,QAA6B,EAA0B;QACnF,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,sBAAsB,KAAK,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACvG,MAAM,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAAA,CACnC;IAED,KAAK,CAAC,aAAa,CAAC,KAAc,EAAE,QAA6B,EAA0B;QAC1F,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,sBAAsB,KAAK,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACvG,MAAM,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE;YACjF,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAAA,CACnC;IAED,KAAK,CAAC,KAAK,CAAC,KAAc,EAAE,OAAgB,EAAE,QAA6B,EAA0B;QACpG,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,sBAAsB,KAAK,cAAc;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC/F,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;YAChF,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAChD,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACtE,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YACzC,IACC,KAAK,EAAE,IAAI,KAAK,SAAS;gBACzB,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC;gBACrD,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,cAAc;gBAE/C,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,CAAC,UAAU;YAAE,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAC/F,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjC,oBAAoB,EAAE,CAAC;QACvB,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,4BAA4B,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACJ,IAAI,cAAc,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACtG,MAAM,OAAO,GAAoB;gBAChC,OAAO;gBACP,QAAQ;gBACR,OAAO;gBACP,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC;YACF,IAAI,CAAC;gBACJ,eAAe,CAAC,OAAO,CAAC,CAAC;gBACzB,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACrC,IAAI,QAAQ,CAAC,OAAO,KAAK,sBAAsB;oBAAE,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAClF,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpD,MAAM,aAAa,CAAC,OAAO,EAAE;oBAC5B,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,YAAY;oBACtB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClD,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC9E,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;gBACpD,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,gBAAgB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa;oBACpE,OAAO,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IAAA,CACD;CACD","sourcesContent":["import { join, resolve } from \"node:path\";\nimport { performance } from \"node:perf_hooks\";\nimport {\n\tparseRunContract,\n\tparseRunResumeCommand,\n\tparseRunStartCommand,\n\tparseRunTaskRetryCommand,\n\tparseRunWriterRestartCommand,\n\ttype RunContract,\n} from \"omk-protocol\";\nimport { ensureDurableDirectorySync } from \"../durable-file-io.ts\";\nimport { acquireSessionOwnerLeaseSync } from \"../session-owner-lease.ts\";\nimport { commandEnvironmentDigest, probeVerifiedSandbox } from \"./broker.ts\";\nimport { captureCandidate, materializeCandidate, storeCandidate } from \"./candidate.ts\";\nimport { preflightCheckReceipts } from \"./check-receipt.ts\";\nimport { inspectTaskRecovery, retryDagTasks, type TaskRecoveryInspection } from \"./dag-recovery.ts\";\nimport { createRunIssuer, readRunEvidence, type VerifiedRunEvidence } from \"./evidence.ts\";\nimport { journalPath, readRunJournal, VerifiedRunJournal } from \"./journal.ts\";\nimport type { RunPhaseContext } from \"./phase-context.ts\";\nimport { inspectRunRecovery, type RecoveryInspection, resumeFrozenCandidate } from \"./recovery.ts\";\nimport { anchorRunBudget, readRunClock } from \"./recovery-clock.ts\";\nimport type { RunProjection } from \"./run-types.ts\";\nimport type { VerifiedRunRuntime } from \"./session-port.ts\";\nimport {\n\tassertStateOutsideWorkspace,\n\tdigestBytes,\n\tdigestObject,\n\treadRegularFile,\n\tstateRunPath,\n\tVerifiedRunError,\n} from \"./storage.ts\";\nimport { verifyCandidate } from \"./verification-phase.ts\";\nimport { publishWriterCandidate } from \"./writer-completion.ts\";\nimport { executeWriter } from \"./writer-phase.ts\";\nimport { inspectWriterRecovery, restartIsolatedWriter, type WriterRecoveryInspection } from \"./writer-recovery.ts\";\n\nexport interface VerifiedRunApproval {\n\t/** Trusted host grant, not a JSON field in the model-authored contract or command. */\n\treadonly approvedContractDigest: string;\n\treadonly signal?: AbortSignal;\n}\nexport interface VerifiedRunPlan {\n\treadonly profile: RunContract[\"profile\"];\n\treadonly contractDigest: string;\n\treadonly baseDigest: string;\n\treadonly baseMatches: boolean;\n\treadonly environmentDigest: string;\n\treadonly checks: readonly string[];\n\treadonly executionRequested: false;\n}\n\nexport function planVerifiedRun(input: unknown): VerifiedRunPlan {\n\tconst contract = parseRunContract(input);\n\tconst snapshot = captureCandidate(contract.workspace.root, contract.budget);\n\treturn Object.freeze({\n\t\tprofile: contract.profile,\n\t\tcontractDigest: digestObject(contract),\n\t\tbaseDigest: snapshot.digest,\n\t\tbaseMatches: snapshot.digest === contract.workspace.baseDigest,\n\t\tenvironmentDigest: commandEnvironmentDigest(contract, \"gated-v1\"),\n\t\tchecks: Object.freeze(contract.checks.map((check) => check.claimId)),\n\t\texecutionRequested: false,\n\t});\n}\n\n/** Owns the opt-in single-host run; session capabilities come only from trusted host composition. */\nexport class RunCoordinator {\n\tprivate readonly stateRoot: string;\n\tprivate readonly runtime: VerifiedRunRuntime | undefined;\n\tconstructor(stateRoot: string, runtime?: VerifiedRunRuntime) {\n\t\tthis.stateRoot = resolve(stateRoot);\n\t\tthis.runtime = runtime;\n\t}\n\n\tinspect(runId: string): RunProjection {\n\t\tconst journal = readRunJournal(stateRunPath(this.stateRoot, runId));\n\t\tif (!journal || journal.state.runId !== runId) throw new VerifiedRunError(\"missing_run\");\n\t\tif (journal.state.receiptDigest) this.evidence(runId);\n\t\treturn journal.state;\n\t}\n\n\tinspectRecovery(runId: string): RecoveryInspection {\n\t\tconst report = inspectRunRecovery(stateRunPath(this.stateRoot, runId));\n\t\tif (report.state.runId !== runId) throw new VerifiedRunError(\"missing_run\");\n\t\tif (report.state.receiptDigest) this.evidence(runId);\n\t\treturn report;\n\t}\n\n\tinspectWriterRecovery(runId: string): WriterRecoveryInspection {\n\t\tconst report = inspectWriterRecovery(stateRunPath(this.stateRoot, runId));\n\t\tif (report.state.runId !== runId) throw new VerifiedRunError(\"missing_run\");\n\t\tif (report.state.receiptDigest) this.evidence(runId);\n\t\treturn report;\n\t}\n\n\tinspectTaskRecovery(runId: string): TaskRecoveryInspection {\n\t\tconst report = inspectTaskRecovery(stateRunPath(this.stateRoot, runId));\n\t\tif (report.state.runId !== runId) throw new VerifiedRunError(\"missing_run\");\n\t\tif (report.state.receiptDigest) this.evidence(runId);\n\t\treturn report;\n\t}\n\n\tasync retryTasks(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection> {\n\t\tconst command = parseRunTaskRetryCommand(input);\n\t\tif (approval.approvedContractDigest !== command.contractDigest) throw new VerifiedRunError(\"approval\");\n\t\tawait retryDagTasks(stateRunPath(this.stateRoot, command.runId), command, approval.signal);\n\t\treturn this.inspect(command.runId);\n\t}\n\n\tevidence(runId: string): VerifiedRunEvidence {\n\t\tconst runPath = stateRunPath(this.stateRoot, runId);\n\t\tconst journal = readRunJournal(runPath);\n\t\tconst first = journal?.records[0]?.event;\n\t\tif (!journal || first?.kind !== \"created\" || first.contract.runId !== runId)\n\t\t\tthrow new VerifiedRunError(\"missing_run\");\n\t\treturn readRunEvidence(\n\t\t\trunPath,\n\t\t\tjournal,\n\t\t\tcommandEnvironmentDigest(first.contract, journal.state.budget ? \"gated-v1\" : \"legacy\"),\n\t\t);\n\t}\n\n\tartifact(runId: string, candidateDigest: string, path: string): Buffer {\n\t\tconst evidence = this.evidence(runId);\n\t\tif (!evidence.verified || candidateDigest !== evidence.candidateDigest)\n\t\t\tthrow new VerifiedRunError(\"candidate_mismatch\");\n\t\tconst file = evidence.manifest.files.find((entry) => entry.path === path);\n\t\tif (!file) throw new VerifiedRunError(\"artifact_scope\");\n\t\tconst bytes = readRegularFile(join(stateRunPath(this.stateRoot, runId), \"blobs\", file.digest), file.size);\n\t\tif (digestBytes(bytes) !== file.digest || bytes.length !== file.size) throw new VerifiedRunError(\"integrity\");\n\t\treturn bytes;\n\t}\n\n\tasync resume(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection> {\n\t\tconst command = parseRunResumeCommand(input);\n\t\tif (approval.approvedContractDigest !== command.contractDigest) throw new VerifiedRunError(\"approval\");\n\t\tawait resumeFrozenCandidate(stateRunPath(this.stateRoot, command.runId), command, approval.signal);\n\t\treturn this.inspect(command.runId);\n\t}\n\n\tasync restartWriter(input: unknown, approval: VerifiedRunApproval): Promise<RunProjection> {\n\t\tconst command = parseRunWriterRestartCommand(input);\n\t\tif (approval.approvedContractDigest !== command.contractDigest) throw new VerifiedRunError(\"approval\");\n\t\tawait restartIsolatedWriter(stateRunPath(this.stateRoot, command.runId), command, {\n\t\t\t...(approval.signal ? { signal: approval.signal } : {}),\n\t\t\t...(this.runtime ? { runtime: this.runtime } : {}),\n\t\t});\n\t\treturn this.inspect(command.runId);\n\t}\n\n\tasync start(input: unknown, request: unknown, approval: VerifiedRunApproval): Promise<RunProjection> {\n\t\tconst began = performance.now();\n\t\tconst clock = readRunClock();\n\t\tconst contract = parseRunContract(input);\n\t\tconst command = parseRunStartCommand(request);\n\t\tconst contractDigest = digestObject(contract);\n\t\tif (approval.approvedContractDigest !== contractDigest) throw new VerifiedRunError(\"approval\");\n\t\tif (command.contractDigest !== contractDigest || command.runId !== contract.runId)\n\t\t\tthrow new VerifiedRunError(\"command_conflict\");\n\t\tif (approval.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\tassertStateOutsideWorkspace(this.stateRoot, contract.workspace.root);\n\t\tconst runPath = stateRunPath(this.stateRoot, contract.runId);\n\t\tconst existing = readRunJournal(runPath);\n\t\tif (existing) {\n\t\t\tconst first = existing.records[0]?.event;\n\t\t\tif (\n\t\t\t\tfirst?.kind !== \"created\" ||\n\t\t\t\tdigestObject(first.command) !== digestObject(command) ||\n\t\t\t\tdigestObject(first.contract) !== contractDigest\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"command_conflict\");\n\t\t\treturn this.inspect(contract.runId);\n\t\t}\n\t\tconst base = captureCandidate(contract.workspace.root, contract.budget);\n\t\tif (base.digest !== contract.workspace.baseDigest) throw new VerifiedRunError(\"base_conflict\");\n\t\tconst environmentDigest = commandEnvironmentDigest(contract, \"gated-v1\");\n\t\tpreflightCheckReceipts(contract);\n\t\tprobeVerifiedSandbox();\n\t\tensureDurableDirectorySync(runPath);\n\t\tconst owner = acquireSessionOwnerLeaseSync(journalPath(runPath));\n\t\ttry {\n\t\t\tif (readRunJournal(runPath)) throw new VerifiedRunError(\"command_conflict\");\n\t\t\tconst journal = new VerifiedRunJournal(runPath, owner);\n\t\t\tjournal.append({ kind: \"created\", contract, command });\n\t\t\tconst budget = anchorRunBudget(contract.budget, clock);\n\t\t\tjournal.append({ kind: \"budget_anchored\", budget, environmentDigest, driver: \"linux-pidns-gate-v1\" });\n\t\t\tconst context: RunPhaseContext = {\n\t\t\t\trunPath,\n\t\t\t\tcontract,\n\t\t\t\tjournal,\n\t\t\t\t...(approval.signal ? { signal: approval.signal } : {}),\n\t\t\t};\n\t\t\ttry {\n\t\t\t\tcreateRunIssuer(runPath);\n\t\t\t\tstoreCandidate(base, runPath);\n\t\t\t\tjournal.append({ kind: \"input_checkpoint\", digest: base.digest });\n\t\t\t\tconst work = join(runPath, \"writer\");\n\t\t\t\tif (contract.profile !== \"linux-command-dag-v1\") materializeCandidate(base, work);\n\t\t\t\tconst workDeadline = began + contract.budget.workMs;\n\t\t\t\tawait executeWriter(context, {\n\t\t\t\t\tworkspace: work,\n\t\t\t\t\tdeadline: workDeadline,\n\t\t\t\t\t...(this.runtime ? { runtime: this.runtime } : {}),\n\t\t\t\t});\n\t\t\t\tif (journal.state.execution === \"paused\") return this.inspect(contract.runId);\n\t\t\t\tpublishWriterCandidate(context, work, workDeadline);\n\t\t\t\tawait verifyCandidate(context);\n\t\t\t\treturn this.inspect(contract.runId);\n\t\t\t} catch (error) {\n\t\t\t\tif (error instanceof VerifiedRunError && !journal.state.receiptDigest)\n\t\t\t\t\treturn journal.append({ kind: \"failed\", code: error.code });\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t} finally {\n\t\t\towner.release();\n\t\t}\n\t}\n}\n"]}

package/dist/core/verified-run/dag-candidates.d.ts

@@ -0,0 +1,8 @@
+import type { RunDagTask } from "omk-protocol";
+import { type CandidateSnapshot } from "./candidate.ts";
+import type { RunPhaseContext } from "./phase-context.ts";
+/** Compose only the declared ancestors' disjoint output scopes, over the pinned original input. */
+export declare function composeDagCandidate(context: Pick<RunPhaseContext, "runPath" | "contract"> & {
+    readonly journal: Pick<RunPhaseContext["journal"], "state">;
+}, selected: readonly RunDagTask[]): CandidateSnapshot;
+//# sourceMappingURL=dag-candidates.d.ts.map

package/dist/core/verified-run/dag-candidates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-candidates.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/dag-candidates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAsB,KAAK,iBAAiB,EAAiB,MAAM,gBAAgB,CAAC;AAC3F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAa1D,mGAAmG;AACnG,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,GAAG,UAAU,CAAC,GAAG;IACxD,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;CAC5D,EACD,QAAQ,EAAE,SAAS,UAAU,EAAE,GAC7B,iBAAiB,CA0CnB","sourcesContent":["import type { RunDagTask } from \"omk-protocol\";\nimport { type CandidateFile, type CandidateSnapshot, loadCandidate } from \"./candidate.ts\";\nimport type { RunPhaseContext } from \"./phase-context.ts\";\nimport { digestObject, VerifiedRunError } from \"./storage.ts\";\n\n// Match captureCandidate's depth-first, per-directory code-unit ordering (not locale ordering).\nfunction treeOrder(left: string, right: string): number {\n\tconst a = left.split(\"/\");\n\tconst b = right.split(\"/\");\n\tfor (let index = 0; index < Math.min(a.length, b.length); index++) {\n\t\tif (a[index] !== b[index]) return a[index] < b[index] ? -1 : 1;\n\t}\n\treturn a.length - b.length;\n}\n\n/** Compose only the declared ancestors' disjoint output scopes, over the pinned original input. */\nexport function composeDagCandidate(\n\tcontext: Pick<RunPhaseContext, \"runPath\" | \"contract\"> & {\n\t\treadonly journal: Pick<RunPhaseContext[\"journal\"], \"state\">;\n\t},\n\tselected: readonly RunDagTask[],\n): CandidateSnapshot {\n\tconst { contract, journal, runPath } = context;\n\tif (!journal.state.inputDigest) throw new VerifiedRunError(\"input_checkpoint_missing\");\n\tconst base = loadCandidate(runPath, journal.state.inputDigest, contract.budget);\n\tconst files = new Map<string, CandidateFile>(base.manifest.files.map((file) => [file.path, file]));\n\tconst directories = new Set(base.manifest.directories);\n\tconst blobs = new Map(base.contents);\n\tfor (const definition of selected) {\n\t\tconst task = journal.state.tasks.find((task) => task.taskId === definition.id);\n\t\tif (task?.status !== \"succeeded\") throw new VerifiedRunError(\"task_not_ready\");\n\t\tconst output = loadCandidate(runPath, task.outputDigest, contract.budget);\n\t\tconst owned = (path: string): boolean =>\n\t\t\tdefinition.writablePaths.some((scope) => path === scope || path.startsWith(`${scope}/`));\n\t\tfor (const path of files.keys()) if (owned(path)) files.delete(path);\n\t\tfor (const path of directories) if (owned(path)) directories.delete(path);\n\t\tfor (const path of output.manifest.directories) if (owned(path)) directories.add(path);\n\t\tfor (const file of output.manifest.files) {\n\t\t\tif (!owned(file.path)) continue;\n\t\t\tconst bytes = output.contents.get(file.digest);\n\t\t\tif (!bytes) throw new VerifiedRunError(\"integrity\");\n\t\t\tfiles.set(file.path, file);\n\t\t\tblobs.set(file.digest, bytes);\n\t\t}\n\t}\n\tconst entries = [...files.values()].sort((a, b) => treeOrder(a.path, b.path));\n\tif (\n\t\tentries.length + directories.size > contract.budget.maxFiles ||\n\t\tentries.reduce((sum, file) => sum + file.size, 0) > contract.budget.maxBytes\n\t)\n\t\tthrow new VerifiedRunError(\"storage_limit\");\n\tconst manifest = Object.freeze({\n\t\tversion: 1 as const,\n\t\tdirectories: Object.freeze([...directories].sort(treeOrder)),\n\t\tfiles: Object.freeze(entries),\n\t});\n\tconst contents = new Map<string, Buffer>();\n\tfor (const file of entries) {\n\t\tconst bytes = blobs.get(file.digest);\n\t\tif (!bytes) throw new VerifiedRunError(\"integrity\");\n\t\tcontents.set(file.digest, bytes);\n\t}\n\treturn { manifest, digest: digestObject(manifest), contents };\n}\n"]}

package/dist/core/verified-run/dag-candidates.js

@@ -0,0 +1,65 @@
+import { loadCandidate } from "./candidate.js";
+import { digestObject, VerifiedRunError } from "./storage.js";
+// Match captureCandidate's depth-first, per-directory code-unit ordering (not locale ordering).
+function treeOrder(left, right) {
+    const a = left.split("/");
+    const b = right.split("/");
+    for (let index = 0; index < Math.min(a.length, b.length); index++) {
+        if (a[index] !== b[index])
+            return a[index] < b[index] ? -1 : 1;
+    }
+    return a.length - b.length;
+}
+/** Compose only the declared ancestors' disjoint output scopes, over the pinned original input. */
+export function composeDagCandidate(context, selected) {
+    const { contract, journal, runPath } = context;
+    if (!journal.state.inputDigest)
+        throw new VerifiedRunError("input_checkpoint_missing");
+    const base = loadCandidate(runPath, journal.state.inputDigest, contract.budget);
+    const files = new Map(base.manifest.files.map((file) => [file.path, file]));
+    const directories = new Set(base.manifest.directories);
+    const blobs = new Map(base.contents);
+    for (const definition of selected) {
+        const task = journal.state.tasks.find((task) => task.taskId === definition.id);
+        if (task?.status !== "succeeded")
+            throw new VerifiedRunError("task_not_ready");
+        const output = loadCandidate(runPath, task.outputDigest, contract.budget);
+        const owned = (path) => definition.writablePaths.some((scope) => path === scope || path.startsWith(`${scope}/`));
+        for (const path of files.keys())
+            if (owned(path))
+                files.delete(path);
+        for (const path of directories)
+            if (owned(path))
+                directories.delete(path);
+        for (const path of output.manifest.directories)
+            if (owned(path))
+                directories.add(path);
+        for (const file of output.manifest.files) {
+            if (!owned(file.path))
+                continue;
+            const bytes = output.contents.get(file.digest);
+            if (!bytes)
+                throw new VerifiedRunError("integrity");
+            files.set(file.path, file);
+            blobs.set(file.digest, bytes);
+        }
+    }
+    const entries = [...files.values()].sort((a, b) => treeOrder(a.path, b.path));
+    if (entries.length + directories.size > contract.budget.maxFiles ||
+        entries.reduce((sum, file) => sum + file.size, 0) > contract.budget.maxBytes)
+        throw new VerifiedRunError("storage_limit");
+    const manifest = Object.freeze({
+        version: 1,
+        directories: Object.freeze([...directories].sort(treeOrder)),
+        files: Object.freeze(entries),
+    });
+    const contents = new Map();
+    for (const file of entries) {
+        const bytes = blobs.get(file.digest);
+        if (!bytes)
+            throw new VerifiedRunError("integrity");
+        contents.set(file.digest, bytes);
+    }
+    return { manifest, digest: digestObject(manifest), contents };
+}
+//# sourceMappingURL=dag-candidates.js.map

package/dist/core/verified-run/dag-candidates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-candidates.js","sourceRoot":"","sources":["../../../src/core/verified-run/dag-candidates.ts"],"names":[],"mappings":"AACA,OAAO,EAA8C,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE3F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE9D,gGAAgG;AAChG,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa,EAAU;IACvD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACnE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAAA,CAC3B;AAED,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAClC,OAEC,EACD,QAA+B,EACX;IACpB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAwB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,IAAI,EAAE,MAAM,KAAK,WAAW;YAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,CAAC,IAAY,EAAW,EAAE,CACvC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;QAC1F,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,IAAI,KAAK,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,WAAW;YAAE,IAAI,KAAK,CAAC,IAAI,CAAC;gBAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1E,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW;YAAE,IAAI,KAAK,CAAC,IAAI,CAAC;gBAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACpD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IACC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ;QAC5D,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ;QAE5E,MAAM,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,OAAO,EAAE,CAAU;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACpD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;AAAA,CAC9D","sourcesContent":["import type { RunDagTask } from \"omk-protocol\";\nimport { type CandidateFile, type CandidateSnapshot, loadCandidate } from \"./candidate.ts\";\nimport type { RunPhaseContext } from \"./phase-context.ts\";\nimport { digestObject, VerifiedRunError } from \"./storage.ts\";\n\n// Match captureCandidate's depth-first, per-directory code-unit ordering (not locale ordering).\nfunction treeOrder(left: string, right: string): number {\n\tconst a = left.split(\"/\");\n\tconst b = right.split(\"/\");\n\tfor (let index = 0; index < Math.min(a.length, b.length); index++) {\n\t\tif (a[index] !== b[index]) return a[index] < b[index] ? -1 : 1;\n\t}\n\treturn a.length - b.length;\n}\n\n/** Compose only the declared ancestors' disjoint output scopes, over the pinned original input. */\nexport function composeDagCandidate(\n\tcontext: Pick<RunPhaseContext, \"runPath\" | \"contract\"> & {\n\t\treadonly journal: Pick<RunPhaseContext[\"journal\"], \"state\">;\n\t},\n\tselected: readonly RunDagTask[],\n): CandidateSnapshot {\n\tconst { contract, journal, runPath } = context;\n\tif (!journal.state.inputDigest) throw new VerifiedRunError(\"input_checkpoint_missing\");\n\tconst base = loadCandidate(runPath, journal.state.inputDigest, contract.budget);\n\tconst files = new Map<string, CandidateFile>(base.manifest.files.map((file) => [file.path, file]));\n\tconst directories = new Set(base.manifest.directories);\n\tconst blobs = new Map(base.contents);\n\tfor (const definition of selected) {\n\t\tconst task = journal.state.tasks.find((task) => task.taskId === definition.id);\n\t\tif (task?.status !== \"succeeded\") throw new VerifiedRunError(\"task_not_ready\");\n\t\tconst output = loadCandidate(runPath, task.outputDigest, contract.budget);\n\t\tconst owned = (path: string): boolean =>\n\t\t\tdefinition.writablePaths.some((scope) => path === scope || path.startsWith(`${scope}/`));\n\t\tfor (const path of files.keys()) if (owned(path)) files.delete(path);\n\t\tfor (const path of directories) if (owned(path)) directories.delete(path);\n\t\tfor (const path of output.manifest.directories) if (owned(path)) directories.add(path);\n\t\tfor (const file of output.manifest.files) {\n\t\t\tif (!owned(file.path)) continue;\n\t\t\tconst bytes = output.contents.get(file.digest);\n\t\t\tif (!bytes) throw new VerifiedRunError(\"integrity\");\n\t\t\tfiles.set(file.path, file);\n\t\t\tblobs.set(file.digest, bytes);\n\t\t}\n\t}\n\tconst entries = [...files.values()].sort((a, b) => treeOrder(a.path, b.path));\n\tif (\n\t\tentries.length + directories.size > contract.budget.maxFiles ||\n\t\tentries.reduce((sum, file) => sum + file.size, 0) > contract.budget.maxBytes\n\t)\n\t\tthrow new VerifiedRunError(\"storage_limit\");\n\tconst manifest = Object.freeze({\n\t\tversion: 1 as const,\n\t\tdirectories: Object.freeze([...directories].sort(treeOrder)),\n\t\tfiles: Object.freeze(entries),\n\t});\n\tconst contents = new Map<string, Buffer>();\n\tfor (const file of entries) {\n\t\tconst bytes = blobs.get(file.digest);\n\t\tif (!bytes) throw new VerifiedRunError(\"integrity\");\n\t\tcontents.set(file.digest, bytes);\n\t}\n\treturn { manifest, digest: digestObject(manifest), contents };\n}\n"]}

package/dist/core/verified-run/dag-phase.d.ts

@@ -0,0 +1,7 @@
+import type { RunPhaseContext } from "./phase-context.ts";
+/** Bounded ready frontier; every started task is drained before this phase returns or throws. */
+export declare function executeDag(context: RunPhaseContext, options: {
+    readonly workspace: string;
+    readonly deadline: number;
+}): Promise<void>;
+//# sourceMappingURL=dag-phase.d.ts.map

package/dist/core/verified-run/dag-phase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-phase.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/dag-phase.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAqE1D,iGAAiG;AACjG,wBAAsB,UAAU,CAC/B,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC,IAAI,CAAC,CAuDf","sourcesContent":["import { join } from \"node:path\";\nimport { orderRunDag, type RunDagTask, runDagAncestors } from \"omk-protocol\";\nimport { ensureDurableDirectorySync } from \"../durable-file-io.ts\";\nimport { assertCandidateScope, captureCandidate, materializeCandidate, storeCandidate } from \"./candidate.ts\";\nimport { composeDagCandidate } from \"./dag-candidates.ts\";\nimport { readyDagTasks } from \"./dag-projection.ts\";\nimport { executeRunCommand } from \"./owned-execution.ts\";\nimport type { RunPhaseContext } from \"./phase-context.ts\";\nimport { readRunClock, remainingRunTime } from \"./recovery-clock.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nfunction observeWork(context: RunPhaseContext): number {\n\tconst budget = context.journal.state.budget;\n\tif (!budget) throw new VerifiedRunError(\"input_checkpoint_missing\");\n\tconst clock = readRunClock();\n\tif (remainingRunTime(budget, budget.workDeadlineMs, clock) <= 0) throw new VerifiedRunError(\"deadline\");\n\treturn clock.nowMs;\n}\n\nasync function executeTask(context: RunPhaseContext, task: RunDagTask, deadline: number): Promise<void> {\n\tconst { contract, journal, runPath } = context;\n\tif (contract.profile !== \"linux-command-dag-v1\") throw new VerifiedRunError(\"unsupported\");\n\tif (context.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\tconst previous = journal.state.tasks.find((item) => item.taskId === task.id);\n\tif (previous?.status !== \"pending\") throw new VerifiedRunError(\"task_not_ready\");\n\tconst attempt = previous.attempt + 1;\n\tconst argv = task.attempts[previous.attempt];\n\tif (!argv) throw new VerifiedRunError(\"task_attempt_limit\");\n\tconst input = composeDagCandidate(context, runDagAncestors(contract.writer.tasks, task.id));\n\tstoreCandidate(input, runPath);\n\tconst workspace = join(runPath, \"tasks\", `${task.id}-${attempt}-g${journal.state.generation}`);\n\tmaterializeCandidate(input, workspace);\n\tjournal.append({\n\t\tkind: \"task_started\",\n\t\ttaskId: task.id,\n\t\tattempt,\n\t\tinputDigest: input.digest,\n\t\tobservedMs: observeWork(context),\n\t});\n\tconst { result } = await executeRunCommand(\n\t\tjournal,\n\t\t{ role: \"writer\", argv, workspace, deadline, claimId: null, taskId: task.id },\n\t\t{ ...contract.budget, ...(context.signal ? { signal: context.signal } : {}) },\n\t);\n\tif (result.failure === \"deadline\" || result.failure === \"cancelled\") throw new VerifiedRunError(result.failure);\n\tlet outputDigest: string | null = null;\n\tlet failure = result.failure;\n\tif (!failure) {\n\t\ttry {\n\t\t\tconst output = captureCandidate(workspace, contract.budget);\n\t\t\tassertCandidateScope(input.manifest, output.manifest, task.writablePaths);\n\t\t\tstoreCandidate(output, runPath);\n\t\t\toutputDigest = output.digest;\n\t\t} catch (error) {\n\t\t\tif (\n\t\t\t\t!(error instanceof VerifiedRunError) ||\n\t\t\t\t![\"scope_changed\", \"file_type\", \"storage_limit\"].includes(error.code)\n\t\t\t)\n\t\t\t\tthrow error;\n\t\t\tfailure = error.code;\n\t\t}\n\t}\n\tjournal.append({\n\t\tkind: \"task_finished\",\n\t\ttaskId: task.id,\n\t\tattempt,\n\t\toutputDigest,\n\t\tfailure,\n\t\tobservedMs: observeWork(context),\n\t});\n}\n\ntype TaskCompletion =\n\t| { readonly kind: \"done\"; readonly taskId: string }\n\t| { readonly kind: \"failed\"; readonly taskId: string; readonly error: unknown };\n\n/** Bounded ready frontier; every started task is drained before this phase returns or throws. */\nexport async function executeDag(\n\tcontext: RunPhaseContext,\n\toptions: { readonly workspace: string; readonly deadline: number },\n): Promise<void> {\n\tconst { contract, journal, runPath } = context;\n\tif (contract.profile !== \"linux-command-dag-v1\") throw new VerifiedRunError(\"unsupported\");\n\tensureDurableDirectorySync(join(runPath, \"tasks\"));\n\tconst order = orderRunDag(contract.writer.tasks);\n\tconst limit = contract.writer.maxConcurrentTasks ?? 1;\n\tconst stop = new AbortController();\n\tconst signal = context.signal ? AbortSignal.any([context.signal, stop.signal]) : stop.signal;\n\tconst work = { ...context, signal };\n\tconst inFlight = new Map<string, Promise<TaskCompletion>>();\n\tlet firstFailure: { readonly error: unknown } | undefined;\n\ttry {\n\t\tfor (;;) {\n\t\t\tif (firstFailure) throw firstFailure.error;\n\t\t\tif (signal.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\t\tconst ready = new Set(readyDagTasks(contract.writer, journal.state).map((task) => task.id));\n\t\t\tfor (const task of order) {\n\t\t\t\tif (inFlight.size >= limit) break;\n\t\t\t\tif (!ready.has(task.id) || inFlight.has(task.id)) continue;\n\t\t\t\tconst completion = executeTask(work, task, options.deadline).then<TaskCompletion, TaskCompletion>(\n\t\t\t\t\t() => ({ kind: \"done\", taskId: task.id }),\n\t\t\t\t\t(error: unknown) => {\n\t\t\t\t\t\tfirstFailure ??= { error };\n\t\t\t\t\t\tstop.abort();\n\t\t\t\t\t\treturn { kind: \"failed\", taskId: task.id, error };\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t\tinFlight.set(task.id, completion);\n\t\t\t}\n\t\t\tif (!inFlight.size) break;\n\t\t\tconst completed = await Promise.race(inFlight.values());\n\t\t\tinFlight.delete(completed.taskId);\n\t\t\tswitch (completed.kind) {\n\t\t\t\tcase \"failed\":\n\t\t\t\t\tthrow completed.error;\n\t\t\t\tcase \"done\":\n\t\t\t\t\tbreak;\n\t\t\t\tdefault: {\n\t\t\t\t\tconst exhaustive: never = completed;\n\t\t\t\t\tthrow new VerifiedRunError(String(exhaustive));\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t} finally {\n\t\tstop.abort();\n\t\tawait Promise.all(inFlight.values());\n\t}\n\tif (\n\t\tjournal.state.tasks.some((task) => task.status !== \"succeeded\" || task.generation !== journal.state.generation)\n\t) {\n\t\tjournal.append({ kind: \"tasks_paused\" });\n\t\treturn;\n\t}\n\tobserveWork(context);\n\tmaterializeCandidate(composeDagCandidate(context, order), options.workspace);\n}\n"]}

package/dist/core/verified-run/dag-phase.js

@@ -0,0 +1,130 @@
+import { join } from "node:path";
+import { orderRunDag, runDagAncestors } from "omk-protocol";
+import { ensureDurableDirectorySync } from "../durable-file-io.js";
+import { assertCandidateScope, captureCandidate, materializeCandidate, storeCandidate } from "./candidate.js";
+import { composeDagCandidate } from "./dag-candidates.js";
+import { readyDagTasks } from "./dag-projection.js";
+import { executeRunCommand } from "./owned-execution.js";
+import { readRunClock, remainingRunTime } from "./recovery-clock.js";
+import { VerifiedRunError } from "./storage.js";
+function observeWork(context) {
+    const budget = context.journal.state.budget;
+    if (!budget)
+        throw new VerifiedRunError("input_checkpoint_missing");
+    const clock = readRunClock();
+    if (remainingRunTime(budget, budget.workDeadlineMs, clock) <= 0)
+        throw new VerifiedRunError("deadline");
+    return clock.nowMs;
+}
+async function executeTask(context, task, deadline) {
+    const { contract, journal, runPath } = context;
+    if (contract.profile !== "linux-command-dag-v1")
+        throw new VerifiedRunError("unsupported");
+    if (context.signal?.aborted)
+        throw new VerifiedRunError("cancelled");
+    const previous = journal.state.tasks.find((item) => item.taskId === task.id);
+    if (previous?.status !== "pending")
+        throw new VerifiedRunError("task_not_ready");
+    const attempt = previous.attempt + 1;
+    const argv = task.attempts[previous.attempt];
+    if (!argv)
+        throw new VerifiedRunError("task_attempt_limit");
+    const input = composeDagCandidate(context, runDagAncestors(contract.writer.tasks, task.id));
+    storeCandidate(input, runPath);
+    const workspace = join(runPath, "tasks", `${task.id}-${attempt}-g${journal.state.generation}`);
+    materializeCandidate(input, workspace);
+    journal.append({
+        kind: "task_started",
+        taskId: task.id,
+        attempt,
+        inputDigest: input.digest,
+        observedMs: observeWork(context),
+    });
+    const { result } = await executeRunCommand(journal, { role: "writer", argv, workspace, deadline, claimId: null, taskId: task.id }, { ...contract.budget, ...(context.signal ? { signal: context.signal } : {}) });
+    if (result.failure === "deadline" || result.failure === "cancelled")
+        throw new VerifiedRunError(result.failure);
+    let outputDigest = null;
+    let failure = result.failure;
+    if (!failure) {
+        try {
+            const output = captureCandidate(workspace, contract.budget);
+            assertCandidateScope(input.manifest, output.manifest, task.writablePaths);
+            storeCandidate(output, runPath);
+            outputDigest = output.digest;
+        }
+        catch (error) {
+            if (!(error instanceof VerifiedRunError) ||
+                !["scope_changed", "file_type", "storage_limit"].includes(error.code))
+                throw error;
+            failure = error.code;
+        }
+    }
+    journal.append({
+        kind: "task_finished",
+        taskId: task.id,
+        attempt,
+        outputDigest,
+        failure,
+        observedMs: observeWork(context),
+    });
+}
+/** Bounded ready frontier; every started task is drained before this phase returns or throws. */
+export async function executeDag(context, options) {
+    const { contract, journal, runPath } = context;
+    if (contract.profile !== "linux-command-dag-v1")
+        throw new VerifiedRunError("unsupported");
+    ensureDurableDirectorySync(join(runPath, "tasks"));
+    const order = orderRunDag(contract.writer.tasks);
+    const limit = contract.writer.maxConcurrentTasks ?? 1;
+    const stop = new AbortController();
+    const signal = context.signal ? AbortSignal.any([context.signal, stop.signal]) : stop.signal;
+    const work = { ...context, signal };
+    const inFlight = new Map();
+    let firstFailure;
+    try {
+        for (;;) {
+            if (firstFailure)
+                throw firstFailure.error;
+            if (signal.aborted)
+                throw new VerifiedRunError("cancelled");
+            const ready = new Set(readyDagTasks(contract.writer, journal.state).map((task) => task.id));
+            for (const task of order) {
+                if (inFlight.size >= limit)
+                    break;
+                if (!ready.has(task.id) || inFlight.has(task.id))
+                    continue;
+                const completion = executeTask(work, task, options.deadline).then(() => ({ kind: "done", taskId: task.id }), (error) => {
+                    firstFailure ??= { error };
+                    stop.abort();
+                    return { kind: "failed", taskId: task.id, error };
+                });
+                inFlight.set(task.id, completion);
+            }
+            if (!inFlight.size)
+                break;
+            const completed = await Promise.race(inFlight.values());
+            inFlight.delete(completed.taskId);
+            switch (completed.kind) {
+                case "failed":
+                    throw completed.error;
+                case "done":
+                    break;
+                default: {
+                    const exhaustive = completed;
+                    throw new VerifiedRunError(String(exhaustive));
+                }
+            }
+        }
+    }
+    finally {
+        stop.abort();
+        await Promise.all(inFlight.values());
+    }
+    if (journal.state.tasks.some((task) => task.status !== "succeeded" || task.generation !== journal.state.generation)) {
+        journal.append({ kind: "tasks_paused" });
+        return;
+    }
+    observeWork(context);
+    materializeCandidate(composeDagCandidate(context, order), options.workspace);
+}
+//# sourceMappingURL=dag-phase.js.map

package/dist/core/verified-run/dag-phase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-phase.js","sourceRoot":"","sources":["../../../src/core/verified-run/dag-phase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAmB,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,SAAS,WAAW,CAAC,OAAwB,EAAU;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACxG,OAAO,KAAK,CAAC,KAAK,CAAC;AAAA,CACnB;AAED,KAAK,UAAU,WAAW,CAAC,OAAwB,EAAE,IAAgB,EAAE,QAAgB,EAAiB;IACvG,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC/C,IAAI,QAAQ,CAAC,OAAO,KAAK,sBAAsB;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/F,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CACzC,OAAO,EACP,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAC7E,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC7E,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChH,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5D,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1E,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAChC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IACC,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC;gBACpC,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAErE,MAAM,KAAK,CAAC;YACb,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO;QACP,YAAY;QACZ,OAAO;QACP,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC;KAChC,CAAC,CAAC;AAAA,CACH;AAMD,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,OAAwB,EACxB,OAAkE,EAClD;IAChB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC/C,IAAI,QAAQ,CAAC,OAAO,KAAK,sBAAsB;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC3F,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC7F,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC5D,IAAI,YAAqD,CAAC;IAC1D,IAAI,CAAC;QACJ,SAAS,CAAC;YACT,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC,KAAK,CAAC;YAC3C,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,QAAQ,CAAC,IAAI,IAAI,KAAK;oBAAE,MAAM;gBAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC3D,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAChE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EACzC,CAAC,KAAc,EAAE,EAAE,CAAC;oBACnB,YAAY,KAAK,EAAE,KAAK,EAAE,CAAC;oBAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;gBAAA,CAClD,CACD,CAAC;gBACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACnC,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM;YAC1B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACxD,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAClC,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;gBACxB,KAAK,QAAQ;oBACZ,MAAM,SAAS,CAAC,KAAK,CAAC;gBACvB,KAAK,MAAM;oBACV,MAAM;gBACP,SAAS,CAAC;oBACT,MAAM,UAAU,GAAU,SAAS,CAAC;oBACpC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBAChD,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;YAAS,CAAC;QACV,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,IACC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAC9G,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzC,OAAO;IACR,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,CAAC;IACrB,oBAAoB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AAAA,CAC7E","sourcesContent":["import { join } from \"node:path\";\nimport { orderRunDag, type RunDagTask, runDagAncestors } from \"omk-protocol\";\nimport { ensureDurableDirectorySync } from \"../durable-file-io.ts\";\nimport { assertCandidateScope, captureCandidate, materializeCandidate, storeCandidate } from \"./candidate.ts\";\nimport { composeDagCandidate } from \"./dag-candidates.ts\";\nimport { readyDagTasks } from \"./dag-projection.ts\";\nimport { executeRunCommand } from \"./owned-execution.ts\";\nimport type { RunPhaseContext } from \"./phase-context.ts\";\nimport { readRunClock, remainingRunTime } from \"./recovery-clock.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nfunction observeWork(context: RunPhaseContext): number {\n\tconst budget = context.journal.state.budget;\n\tif (!budget) throw new VerifiedRunError(\"input_checkpoint_missing\");\n\tconst clock = readRunClock();\n\tif (remainingRunTime(budget, budget.workDeadlineMs, clock) <= 0) throw new VerifiedRunError(\"deadline\");\n\treturn clock.nowMs;\n}\n\nasync function executeTask(context: RunPhaseContext, task: RunDagTask, deadline: number): Promise<void> {\n\tconst { contract, journal, runPath } = context;\n\tif (contract.profile !== \"linux-command-dag-v1\") throw new VerifiedRunError(\"unsupported\");\n\tif (context.signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\tconst previous = journal.state.tasks.find((item) => item.taskId === task.id);\n\tif (previous?.status !== \"pending\") throw new VerifiedRunError(\"task_not_ready\");\n\tconst attempt = previous.attempt + 1;\n\tconst argv = task.attempts[previous.attempt];\n\tif (!argv) throw new VerifiedRunError(\"task_attempt_limit\");\n\tconst input = composeDagCandidate(context, runDagAncestors(contract.writer.tasks, task.id));\n\tstoreCandidate(input, runPath);\n\tconst workspace = join(runPath, \"tasks\", `${task.id}-${attempt}-g${journal.state.generation}`);\n\tmaterializeCandidate(input, workspace);\n\tjournal.append({\n\t\tkind: \"task_started\",\n\t\ttaskId: task.id,\n\t\tattempt,\n\t\tinputDigest: input.digest,\n\t\tobservedMs: observeWork(context),\n\t});\n\tconst { result } = await executeRunCommand(\n\t\tjournal,\n\t\t{ role: \"writer\", argv, workspace, deadline, claimId: null, taskId: task.id },\n\t\t{ ...contract.budget, ...(context.signal ? { signal: context.signal } : {}) },\n\t);\n\tif (result.failure === \"deadline\" || result.failure === \"cancelled\") throw new VerifiedRunError(result.failure);\n\tlet outputDigest: string | null = null;\n\tlet failure = result.failure;\n\tif (!failure) {\n\t\ttry {\n\t\t\tconst output = captureCandidate(workspace, contract.budget);\n\t\t\tassertCandidateScope(input.manifest, output.manifest, task.writablePaths);\n\t\t\tstoreCandidate(output, runPath);\n\t\t\toutputDigest = output.digest;\n\t\t} catch (error) {\n\t\t\tif (\n\t\t\t\t!(error instanceof VerifiedRunError) ||\n\t\t\t\t![\"scope_changed\", \"file_type\", \"storage_limit\"].includes(error.code)\n\t\t\t)\n\t\t\t\tthrow error;\n\t\t\tfailure = error.code;\n\t\t}\n\t}\n\tjournal.append({\n\t\tkind: \"task_finished\",\n\t\ttaskId: task.id,\n\t\tattempt,\n\t\toutputDigest,\n\t\tfailure,\n\t\tobservedMs: observeWork(context),\n\t});\n}\n\ntype TaskCompletion =\n\t| { readonly kind: \"done\"; readonly taskId: string }\n\t| { readonly kind: \"failed\"; readonly taskId: string; readonly error: unknown };\n\n/** Bounded ready frontier; every started task is drained before this phase returns or throws. */\nexport async function executeDag(\n\tcontext: RunPhaseContext,\n\toptions: { readonly workspace: string; readonly deadline: number },\n): Promise<void> {\n\tconst { contract, journal, runPath } = context;\n\tif (contract.profile !== \"linux-command-dag-v1\") throw new VerifiedRunError(\"unsupported\");\n\tensureDurableDirectorySync(join(runPath, \"tasks\"));\n\tconst order = orderRunDag(contract.writer.tasks);\n\tconst limit = contract.writer.maxConcurrentTasks ?? 1;\n\tconst stop = new AbortController();\n\tconst signal = context.signal ? AbortSignal.any([context.signal, stop.signal]) : stop.signal;\n\tconst work = { ...context, signal };\n\tconst inFlight = new Map<string, Promise<TaskCompletion>>();\n\tlet firstFailure: { readonly error: unknown } | undefined;\n\ttry {\n\t\tfor (;;) {\n\t\t\tif (firstFailure) throw firstFailure.error;\n\t\t\tif (signal.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\t\tconst ready = new Set(readyDagTasks(contract.writer, journal.state).map((task) => task.id));\n\t\t\tfor (const task of order) {\n\t\t\t\tif (inFlight.size >= limit) break;\n\t\t\t\tif (!ready.has(task.id) || inFlight.has(task.id)) continue;\n\t\t\t\tconst completion = executeTask(work, task, options.deadline).then<TaskCompletion, TaskCompletion>(\n\t\t\t\t\t() => ({ kind: \"done\", taskId: task.id }),\n\t\t\t\t\t(error: unknown) => {\n\t\t\t\t\t\tfirstFailure ??= { error };\n\t\t\t\t\t\tstop.abort();\n\t\t\t\t\t\treturn { kind: \"failed\", taskId: task.id, error };\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t\tinFlight.set(task.id, completion);\n\t\t\t}\n\t\t\tif (!inFlight.size) break;\n\t\t\tconst completed = await Promise.race(inFlight.values());\n\t\t\tinFlight.delete(completed.taskId);\n\t\t\tswitch (completed.kind) {\n\t\t\t\tcase \"failed\":\n\t\t\t\t\tthrow completed.error;\n\t\t\t\tcase \"done\":\n\t\t\t\t\tbreak;\n\t\t\t\tdefault: {\n\t\t\t\t\tconst exhaustive: never = completed;\n\t\t\t\t\tthrow new VerifiedRunError(String(exhaustive));\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t} finally {\n\t\tstop.abort();\n\t\tawait Promise.all(inFlight.values());\n\t}\n\tif (\n\t\tjournal.state.tasks.some((task) => task.status !== \"succeeded\" || task.generation !== journal.state.generation)\n\t) {\n\t\tjournal.append({ kind: \"tasks_paused\" });\n\t\treturn;\n\t}\n\tobserveWork(context);\n\tmaterializeCandidate(composeDagCandidate(context, order), options.workspace);\n}\n"]}

package/dist/core/verified-run/dag-projection.d.ts

@@ -0,0 +1,7 @@
+import type { RunDagTask, RunDagWriter } from "omk-protocol";
+import type { DagEvent } from "./dag-types.ts";
+import type { RunProjection, WriterReduction } from "./run-types.ts";
+export declare function readyDagTasks(writer: RunDagWriter, state: RunProjection): readonly RunDagTask[];
+/** Task outputs are execution checkpoints, never verifier receipts or completion authority. */
+export declare function reduceDagEvent(context: WriterReduction, event: DagEvent): void;
+//# sourceMappingURL=dag-projection.d.ts.map

package/dist/core/verified-run/dag-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-projection.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/dag-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAqB,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGrE,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,GAAG,SAAS,UAAU,EAAE,CAU/F;AAED,+FAA+F;AAC/F,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,CAgG9E","sourcesContent":["import type { RunDagTask, RunDagWriter } from \"omk-protocol\";\nimport type { DagEvent, RunTaskProjection } from \"./dag-types.ts\";\nimport type { RunProjection, WriterReduction } from \"./run-types.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nexport function readyDagTasks(writer: RunDagWriter, state: RunProjection): readonly RunDagTask[] {\n\tconst states = new Map(state.tasks.map((task) => [task.taskId, task]));\n\treturn writer.tasks.filter(\n\t\t(task) =>\n\t\t\tstates.get(task.id)?.status === \"pending\" &&\n\t\t\ttask.dependsOn.every((id) => {\n\t\t\t\tconst dependency = states.get(id);\n\t\t\t\treturn dependency?.status === \"succeeded\" && dependency.generation === state.generation;\n\t\t\t}),\n\t);\n}\n\n/** Task outputs are execution checkpoints, never verifier receipts or completion authority. */\nexport function reduceDagEvent(context: WriterReduction, event: DagEvent): void {\n\tconst { state, contract } = context;\n\tif (\n\t\tcontract.profile !== \"linux-command-dag-v1\" ||\n\t\t!state.inputDigest ||\n\t\t!state.budget ||\n\t\tstate.candidateDigest ||\n\t\tstate.writerOpen ||\n\t\tstate.execution === \"paused\"\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tif (event.kind === \"tasks_paused\") {\n\t\tif (\n\t\t\tstate.activeExecutionIds.length ||\n\t\t\tstate.tasks.some((task) => task.status === \"running\") ||\n\t\t\t!state.tasks.some((task) => task.status === \"failed\") ||\n\t\t\treadyDagTasks(contract.writer, state).length\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\tcontext.state = { ...state, execution: \"paused\", settlement: \"settled\" };\n\t\treturn;\n\t}\n\tif (\n\t\tevent.observedMs < (state.lastClockMs ?? state.budget.startedMs) ||\n\t\tevent.observedMs >= state.budget.workDeadlineMs\n\t)\n\t\tthrow new VerifiedRunError(\"deadline\");\n\tconst task = state.tasks.find((task) => task.taskId === event.taskId);\n\tconst definition = contract.writer.tasks.find((task) => task.id === event.taskId);\n\tif (!task || !definition) throw new VerifiedRunError(\"integrity\");\n\tlet next: RunTaskProjection;\n\tswitch (event.kind) {\n\t\tcase \"task_started\":\n\t\t\tif (\n\t\t\t\ttask.status !== \"pending\" ||\n\t\t\t\tstate.tasks.filter((task) => task.status === \"running\").length >=\n\t\t\t\t\t(contract.writer.maxConcurrentTasks ?? 1) ||\n\t\t\t\tevent.attempt !== task.attempt + 1 ||\n\t\t\t\tevent.attempt > definition.attempts.length ||\n\t\t\t\t!readyDagTasks(contract.writer, state).some((task) => task.id === event.taskId)\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"task_not_ready\");\n\t\t\tnext = {\n\t\t\t\ttaskId: task.taskId,\n\t\t\t\tgeneration: state.generation,\n\t\t\t\tattempt: event.attempt,\n\t\t\t\tstatus: \"running\",\n\t\t\t\texecution: Object.freeze({ kind: \"ready\" }),\n\t\t\t\tinputDigest: event.inputDigest,\n\t\t\t\toutputDigest: null,\n\t\t\t\tfailure: null,\n\t\t\t};\n\t\t\tbreak;\n\t\tcase \"task_finished\": {\n\t\t\tif (\n\t\t\t\ttask.status !== \"running\" ||\n\t\t\t\ttask.generation !== state.generation ||\n\t\t\t\ttask.attempt !== event.attempt ||\n\t\t\t\ttask.execution.kind !== \"exited\"\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\t// Keep checkpoint shape stable: process state belongs only to an in-flight task.\n\t\t\tconst checkpoint = {\n\t\t\t\ttaskId: task.taskId,\n\t\t\t\tgeneration: task.generation,\n\t\t\t\tattempt: task.attempt,\n\t\t\t\tinputDigest: task.inputDigest,\n\t\t\t};\n\t\t\tif (event.outputDigest !== null) {\n\t\t\t\tif (event.failure !== null || task.execution.failure) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tnext = { ...checkpoint, status: \"succeeded\", outputDigest: event.outputDigest, failure: null };\n\t\t\t} else {\n\t\t\t\tif (!event.failure || (task.execution.failure && event.failure !== task.execution.failure))\n\t\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\t\tnext = { ...checkpoint, status: \"failed\", outputDigest: null, failure: event.failure };\n\t\t\t}\n\t\t\tbreak;\n\t\t}\n\t\tdefault: {\n\t\t\tconst exhaustive: never = event;\n\t\t\tthrow new VerifiedRunError(String(exhaustive));\n\t\t}\n\t}\n\tconst tasks = state.tasks.map((task) => (task.taskId === next.taskId ? next : task));\n\tcontext.writerFinished = tasks.every((task) => task.status === \"succeeded\" && task.generation === state.generation);\n\tlet settlement: RunProjection[\"settlement\"] = \"settled\";\n\tif (tasks.some((task) => task.status === \"running\")) settlement = \"open\";\n\tif (state.activeExecutionIds.length) settlement = \"draining\";\n\tcontext.state = {\n\t\t...state,\n\t\ttasks,\n\t\texecution: \"running\",\n\t\tsettlement,\n\t\tfailure: null,\n\t\tlastClockMs: event.observedMs,\n\t};\n}\n"]}

package/dist/core/verified-run/dag-projection.js

@@ -0,0 +1,103 @@
+import { VerifiedRunError } from "./storage.js";
+export function readyDagTasks(writer, state) {
+    const states = new Map(state.tasks.map((task) => [task.taskId, task]));
+    return writer.tasks.filter((task) => states.get(task.id)?.status === "pending" &&
+        task.dependsOn.every((id) => {
+            const dependency = states.get(id);
+            return dependency?.status === "succeeded" && dependency.generation === state.generation;
+        }));
+}
+/** Task outputs are execution checkpoints, never verifier receipts or completion authority. */
+export function reduceDagEvent(context, event) {
+    const { state, contract } = context;
+    if (contract.profile !== "linux-command-dag-v1" ||
+        !state.inputDigest ||
+        !state.budget ||
+        state.candidateDigest ||
+        state.writerOpen ||
+        state.execution === "paused")
+        throw new VerifiedRunError("integrity");
+    if (event.kind === "tasks_paused") {
+        if (state.activeExecutionIds.length ||
+            state.tasks.some((task) => task.status === "running") ||
+            !state.tasks.some((task) => task.status === "failed") ||
+            readyDagTasks(contract.writer, state).length)
+            throw new VerifiedRunError("integrity");
+        context.state = { ...state, execution: "paused", settlement: "settled" };
+        return;
+    }
+    if (event.observedMs < (state.lastClockMs ?? state.budget.startedMs) ||
+        event.observedMs >= state.budget.workDeadlineMs)
+        throw new VerifiedRunError("deadline");
+    const task = state.tasks.find((task) => task.taskId === event.taskId);
+    const definition = contract.writer.tasks.find((task) => task.id === event.taskId);
+    if (!task || !definition)
+        throw new VerifiedRunError("integrity");
+    let next;
+    switch (event.kind) {
+        case "task_started":
+            if (task.status !== "pending" ||
+                state.tasks.filter((task) => task.status === "running").length >=
+                    (contract.writer.maxConcurrentTasks ?? 1) ||
+                event.attempt !== task.attempt + 1 ||
+                event.attempt > definition.attempts.length ||
+                !readyDagTasks(contract.writer, state).some((task) => task.id === event.taskId))
+                throw new VerifiedRunError("task_not_ready");
+            next = {
+                taskId: task.taskId,
+                generation: state.generation,
+                attempt: event.attempt,
+                status: "running",
+                execution: Object.freeze({ kind: "ready" }),
+                inputDigest: event.inputDigest,
+                outputDigest: null,
+                failure: null,
+            };
+            break;
+        case "task_finished": {
+            if (task.status !== "running" ||
+                task.generation !== state.generation ||
+                task.attempt !== event.attempt ||
+                task.execution.kind !== "exited")
+                throw new VerifiedRunError("integrity");
+            // Keep checkpoint shape stable: process state belongs only to an in-flight task.
+            const checkpoint = {
+                taskId: task.taskId,
+                generation: task.generation,
+                attempt: task.attempt,
+                inputDigest: task.inputDigest,
+            };
+            if (event.outputDigest !== null) {
+                if (event.failure !== null || task.execution.failure)
+                    throw new VerifiedRunError("integrity");
+                next = { ...checkpoint, status: "succeeded", outputDigest: event.outputDigest, failure: null };
+            }
+            else {
+                if (!event.failure || (task.execution.failure && event.failure !== task.execution.failure))
+                    throw new VerifiedRunError("integrity");
+                next = { ...checkpoint, status: "failed", outputDigest: null, failure: event.failure };
+            }
+            break;
+        }
+        default: {
+            const exhaustive = event;
+            throw new VerifiedRunError(String(exhaustive));
+        }
+    }
+    const tasks = state.tasks.map((task) => (task.taskId === next.taskId ? next : task));
+    context.writerFinished = tasks.every((task) => task.status === "succeeded" && task.generation === state.generation);
+    let settlement = "settled";
+    if (tasks.some((task) => task.status === "running"))
+        settlement = "open";
+    if (state.activeExecutionIds.length)
+        settlement = "draining";
+    context.state = {
+        ...state,
+        tasks,
+        execution: "running",
+        settlement,
+        failure: null,
+        lastClockMs: event.observedMs,
+    };
+}
+//# sourceMappingURL=dag-projection.js.map

package/dist/core/verified-run/dag-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-projection.js","sourceRoot":"","sources":["../../../src/core/verified-run/dag-projection.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,UAAU,aAAa,CAAC,MAAoB,EAAE,KAAoB,EAAyB;IAChG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CACzB,CAAC,IAAI,EAAE,EAAE,CACR,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,SAAS;QACzC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,OAAO,UAAU,EAAE,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;QAAA,CACxF,CAAC,CACH,CAAC;AAAA,CACF;AAED,+FAA+F;AAC/F,MAAM,UAAU,cAAc,CAAC,OAAwB,EAAE,KAAe,EAAQ;IAC/E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACpC,IACC,QAAQ,CAAC,OAAO,KAAK,sBAAsB;QAC3C,CAAC,KAAK,CAAC,WAAW;QAClB,CAAC,KAAK,CAAC,MAAM;QACb,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,SAAS,KAAK,QAAQ;QAE5B,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,IACC,KAAK,CAAC,kBAAkB,CAAC,MAAM;YAC/B,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;YACrD,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;YACrD,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM;YAE5C,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzC,OAAO,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QACzE,OAAO;IACR,CAAC;IACD,IACC,KAAK,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;QAChE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc;QAE/C,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IAClF,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,IAAuB,CAAC;IAC5B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,cAAc;YAClB,IACC,IAAI,CAAC,MAAM,KAAK,SAAS;gBACzB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;oBAC7D,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC;gBAC1C,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC;gBAClC,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM;gBAC1C,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC;gBAE/E,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;YAC9C,IAAI,GAAG;gBACN,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE,IAAI;aACb,CAAC;YACF,MAAM;QACP,KAAK,eAAe,EAAE,CAAC;YACtB,IACC,IAAI,CAAC,MAAM,KAAK,SAAS;gBACzB,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBACpC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;gBAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;gBAEhC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzC,iFAAiF;YACjF,MAAM,UAAU,GAAG;gBAClB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC7B,CAAC;YACF,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO;oBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAC9F,IAAI,GAAG,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAChG,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBACzF,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBACzC,IAAI,GAAG,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACxF,CAAC;YACD,MAAM;QACP,CAAC;QACD,SAAS,CAAC;YACT,MAAM,UAAU,GAAU,KAAK,CAAC;YAChC,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IACpH,IAAI,UAAU,GAAgC,SAAS,CAAC;IACxD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;QAAE,UAAU,GAAG,MAAM,CAAC;IACzE,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM;QAAE,UAAU,GAAG,UAAU,CAAC;IAC7D,OAAO,CAAC,KAAK,GAAG;QACf,GAAG,KAAK;QACR,KAAK;QACL,SAAS,EAAE,SAAS;QACpB,UAAU;QACV,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AAAA,CACF","sourcesContent":["import type { RunDagTask, RunDagWriter } from \"omk-protocol\";\nimport type { DagEvent, RunTaskProjection } from \"./dag-types.ts\";\nimport type { RunProjection, WriterReduction } from \"./run-types.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\n\nexport function readyDagTasks(writer: RunDagWriter, state: RunProjection): readonly RunDagTask[] {\n\tconst states = new Map(state.tasks.map((task) => [task.taskId, task]));\n\treturn writer.tasks.filter(\n\t\t(task) =>\n\t\t\tstates.get(task.id)?.status === \"pending\" &&\n\t\t\ttask.dependsOn.every((id) => {\n\t\t\t\tconst dependency = states.get(id);\n\t\t\t\treturn dependency?.status === \"succeeded\" && dependency.generation === state.generation;\n\t\t\t}),\n\t);\n}\n\n/** Task outputs are execution checkpoints, never verifier receipts or completion authority. */\nexport function reduceDagEvent(context: WriterReduction, event: DagEvent): void {\n\tconst { state, contract } = context;\n\tif (\n\t\tcontract.profile !== \"linux-command-dag-v1\" ||\n\t\t!state.inputDigest ||\n\t\t!state.budget ||\n\t\tstate.candidateDigest ||\n\t\tstate.writerOpen ||\n\t\tstate.execution === \"paused\"\n\t)\n\t\tthrow new VerifiedRunError(\"integrity\");\n\tif (event.kind === \"tasks_paused\") {\n\t\tif (\n\t\t\tstate.activeExecutionIds.length ||\n\t\t\tstate.tasks.some((task) => task.status === \"running\") ||\n\t\t\t!state.tasks.some((task) => task.status === \"failed\") ||\n\t\t\treadyDagTasks(contract.writer, state).length\n\t\t)\n\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\tcontext.state = { ...state, execution: \"paused\", settlement: \"settled\" };\n\t\treturn;\n\t}\n\tif (\n\t\tevent.observedMs < (state.lastClockMs ?? state.budget.startedMs) ||\n\t\tevent.observedMs >= state.budget.workDeadlineMs\n\t)\n\t\tthrow new VerifiedRunError(\"deadline\");\n\tconst task = state.tasks.find((task) => task.taskId === event.taskId);\n\tconst definition = contract.writer.tasks.find((task) => task.id === event.taskId);\n\tif (!task || !definition) throw new VerifiedRunError(\"integrity\");\n\tlet next: RunTaskProjection;\n\tswitch (event.kind) {\n\t\tcase \"task_started\":\n\t\t\tif (\n\t\t\t\ttask.status !== \"pending\" ||\n\t\t\t\tstate.tasks.filter((task) => task.status === \"running\").length >=\n\t\t\t\t\t(contract.writer.maxConcurrentTasks ?? 1) ||\n\t\t\t\tevent.attempt !== task.attempt + 1 ||\n\t\t\t\tevent.attempt > definition.attempts.length ||\n\t\t\t\t!readyDagTasks(contract.writer, state).some((task) => task.id === event.taskId)\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"task_not_ready\");\n\t\t\tnext = {\n\t\t\t\ttaskId: task.taskId,\n\t\t\t\tgeneration: state.generation,\n\t\t\t\tattempt: event.attempt,\n\t\t\t\tstatus: \"running\",\n\t\t\t\texecution: Object.freeze({ kind: \"ready\" }),\n\t\t\t\tinputDigest: event.inputDigest,\n\t\t\t\toutputDigest: null,\n\t\t\t\tfailure: null,\n\t\t\t};\n\t\t\tbreak;\n\t\tcase \"task_finished\": {\n\t\t\tif (\n\t\t\t\ttask.status !== \"running\" ||\n\t\t\t\ttask.generation !== state.generation ||\n\t\t\t\ttask.attempt !== event.attempt ||\n\t\t\t\ttask.execution.kind !== \"exited\"\n\t\t\t)\n\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\t// Keep checkpoint shape stable: process state belongs only to an in-flight task.\n\t\t\tconst checkpoint = {\n\t\t\t\ttaskId: task.taskId,\n\t\t\t\tgeneration: task.generation,\n\t\t\t\tattempt: task.attempt,\n\t\t\t\tinputDigest: task.inputDigest,\n\t\t\t};\n\t\t\tif (event.outputDigest !== null) {\n\t\t\t\tif (event.failure !== null || task.execution.failure) throw new VerifiedRunError(\"integrity\");\n\t\t\t\tnext = { ...checkpoint, status: \"succeeded\", outputDigest: event.outputDigest, failure: null };\n\t\t\t} else {\n\t\t\t\tif (!event.failure || (task.execution.failure && event.failure !== task.execution.failure))\n\t\t\t\t\tthrow new VerifiedRunError(\"integrity\");\n\t\t\t\tnext = { ...checkpoint, status: \"failed\", outputDigest: null, failure: event.failure };\n\t\t\t}\n\t\t\tbreak;\n\t\t}\n\t\tdefault: {\n\t\t\tconst exhaustive: never = event;\n\t\t\tthrow new VerifiedRunError(String(exhaustive));\n\t\t}\n\t}\n\tconst tasks = state.tasks.map((task) => (task.taskId === next.taskId ? next : task));\n\tcontext.writerFinished = tasks.every((task) => task.status === \"succeeded\" && task.generation === state.generation);\n\tlet settlement: RunProjection[\"settlement\"] = \"settled\";\n\tif (tasks.some((task) => task.status === \"running\")) settlement = \"open\";\n\tif (state.activeExecutionIds.length) settlement = \"draining\";\n\tcontext.state = {\n\t\t...state,\n\t\ttasks,\n\t\texecution: \"running\",\n\t\tsettlement,\n\t\tfailure: null,\n\t\tlastClockMs: event.observedMs,\n\t};\n}\n"]}

package/dist/core/verified-run/dag-recovery.d.ts

@@ -0,0 +1,13 @@
+import { type RunTaskRetryCommand } from "omk-protocol";
+import type { RunProjection } from "./run-types.ts";
+export interface TaskRecoveryInspection {
+    readonly state: RunProjection;
+    readonly readiness: "ready" | "blocked";
+    readonly reason: string | null;
+    readonly retryableTaskIds: readonly string[];
+    readonly remainingWorkMs: number | null;
+    readonly ownership: "lease_required";
+}
+export declare function inspectTaskRecovery(runPath: string): TaskRecoveryInspection;
+export declare function retryDagTasks(runPath: string, command: RunTaskRetryCommand, signal?: AbortSignal): Promise<RunProjection>;
+//# sourceMappingURL=dag-recovery.d.ts.map

package/dist/core/verified-run/dag-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dag-recovery.d.ts","sourceRoot":"","sources":["../../../src/core/verified-run/dag-recovery.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,mBAAmB,EAAmB,MAAM,cAAc,CAAC;AAUzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAMpD,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;CACrC;AA0BD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,CA+B3E;AAED,wBAAsB,aAAa,CAClC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,mBAAmB,EAC5B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC,CA0BxB","sourcesContent":["import { join } from \"node:path\";\nimport { performance } from \"node:perf_hooks\";\nimport { type RunTaskRetryCommand, runDagAncestors } from \"omk-protocol\";\nimport { probeVerifiedSandbox } from \"./broker.ts\";\nimport { assertCandidateScope, loadCandidate } from \"./candidate.ts\";\nimport { preflightCheckReceipts } from \"./check-receipt.ts\";\nimport { composeDagCandidate } from \"./dag-candidates.ts\";\nimport { executeDag } from \"./dag-phase.ts\";\nimport { assertTaskSelection, taskCheckpoints } from \"./dag-retry-projection.ts\";\nimport type { JournalSnapshot } from \"./journal.ts\";\nimport { readRunClock, remainingRunTime } from \"./recovery-clock.ts\";\nimport { requireRunJournal, withRecoveryLease } from \"./recovery-command.ts\";\nimport type { RunProjection } from \"./run-types.ts\";\nimport { VerifiedRunError } from \"./storage.ts\";\nimport { verifyCandidate } from \"./verification-phase.ts\";\nimport { assertWorkRecoverable } from \"./work-recovery.ts\";\nimport { publishWriterCandidate } from \"./writer-completion.ts\";\n\nexport interface TaskRecoveryInspection {\n\treadonly state: RunProjection;\n\treadonly readiness: \"ready\" | \"blocked\";\n\treadonly reason: string | null;\n\treadonly retryableTaskIds: readonly string[];\n\treadonly remainingWorkMs: number | null;\n\treadonly ownership: \"lease_required\";\n}\n\nfunction assertDagRecoverable(runPath: string, snapshot: JournalSnapshot) {\n\tconst recovery = assertWorkRecoverable(runPath, snapshot);\n\tconst { contract } = recovery;\n\tif (contract.profile !== \"linux-command-dag-v1\") throw new VerifiedRunError(\"task_recovery_unavailable\");\n\tfor (const task of snapshot.state.tasks) {\n\t\tif (task.status === \"pending\") continue;\n\t\tconst definition = contract.writer.tasks.find((item) => item.id === task.taskId);\n\t\tif (!definition) throw new VerifiedRunError(\"integrity\");\n\t\tconst expected = composeDagCandidate(\n\t\t\t{ runPath, contract, journal: snapshot },\n\t\t\trunDagAncestors(contract.writer.tasks, task.taskId),\n\t\t);\n\t\tconst input = loadCandidate(runPath, task.inputDigest, contract.budget);\n\t\tif (input.digest !== expected.digest) throw new VerifiedRunError(\"task_checkpoint_mismatch\");\n\t\tif (task.status === \"succeeded\")\n\t\t\tassertCandidateScope(\n\t\t\t\tinput.manifest,\n\t\t\t\tloadCandidate(runPath, task.outputDigest, contract.budget).manifest,\n\t\t\t\tdefinition.writablePaths,\n\t\t\t);\n\t}\n\treturn { contract, remainingMs: recovery.remainingMs };\n}\n\nexport function inspectTaskRecovery(runPath: string): TaskRecoveryInspection {\n\tconst snapshot = requireRunJournal(runPath);\n\ttry {\n\t\tconst { contract, remainingMs } = assertDagRecoverable(runPath, snapshot);\n\t\tconst taskIds = snapshot.state.tasks\n\t\t\t.filter(\n\t\t\t\t(task) =>\n\t\t\t\t\t(task.status === \"failed\" || task.status === \"running\") &&\n\t\t\t\t\ttask.attempt < (contract.writer.tasks.find((item) => item.id === task.taskId)?.attempts.length ?? 0),\n\t\t\t)\n\t\t\t.map((task) => task.taskId);\n\t\tassertTaskSelection(contract, snapshot.state, taskIds);\n\t\treturn Object.freeze({\n\t\t\tstate: snapshot.state,\n\t\t\treadiness: \"ready\",\n\t\t\treason: null,\n\t\t\tretryableTaskIds: Object.freeze(taskIds),\n\t\t\tremainingWorkMs: remainingMs,\n\t\t\townership: \"lease_required\",\n\t\t});\n\t} catch (error) {\n\t\tif (!(error instanceof Error)) throw error;\n\t\treturn Object.freeze({\n\t\t\tstate: snapshot.state,\n\t\t\treadiness: \"blocked\",\n\t\t\treason: error instanceof VerifiedRunError ? error.code : \"integrity\",\n\t\t\tretryableTaskIds: Object.freeze([]),\n\t\t\tremainingWorkMs: null,\n\t\t\townership: \"lease_required\",\n\t\t});\n\t}\n}\n\nexport async function retryDagTasks(\n\trunPath: string,\n\tcommand: RunTaskRetryCommand,\n\tsignal?: AbortSignal,\n): Promise<RunProjection> {\n\tif (signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\treturn withRecoveryLease(runPath, command, async ({ snapshot, journal }) => {\n\t\tconst { contract } = assertDagRecoverable(runPath, snapshot);\n\t\tassertTaskSelection(contract, snapshot.state, command.taskIds);\n\t\tpreflightCheckReceipts(contract);\n\t\tprobeVerifiedSandbox();\n\t\tassertDagRecoverable(runPath, snapshot);\n\t\tif (signal?.aborted) throw new VerifiedRunError(\"cancelled\");\n\t\tjournal.append({\n\t\t\tkind: \"tasks_retried\",\n\t\t\tcommand,\n\t\t\tobservedMs: readRunClock().nowMs,\n\t\t\treconciledExecutionIds: snapshot.state.activeExecutionIds,\n\t\t\tadopted: taskCheckpoints(snapshot.state),\n\t\t});\n\t\tconst budget = journal.state.budget;\n\t\tif (!budget) throw new VerifiedRunError(\"integrity\");\n\t\tconst deadline = performance.now() + remainingRunTime(budget, budget.workDeadlineMs);\n\t\tconst workspace = join(runPath, `writer-${journal.state.generation}`);\n\t\tconst context = { runPath, contract, journal, ...(signal ? { signal } : {}) };\n\t\tawait executeDag(context, { workspace, deadline });\n\t\tif (journal.state.execution === \"paused\") return journal.state;\n\t\tpublishWriterCandidate(context, workspace, deadline);\n\t\treturn verifyCandidate(context);\n\t});\n}\n"]}

package/dist/core/verified-run/dag-recovery.js

@@ -0,0 +1,98 @@
+import { join } from "node:path";
+import { performance } from "node:perf_hooks";
+import { runDagAncestors } from "omk-protocol";
+import { probeVerifiedSandbox } from "./broker.js";
+import { assertCandidateScope, loadCandidate } from "./candidate.js";
+import { preflightCheckReceipts } from "./check-receipt.js";
+import { composeDagCandidate } from "./dag-candidates.js";
+import { executeDag } from "./dag-phase.js";
+import { assertTaskSelection, taskCheckpoints } from "./dag-retry-projection.js";
+import { readRunClock, remainingRunTime } from "./recovery-clock.js";
+import { requireRunJournal, withRecoveryLease } from "./recovery-command.js";
+import { VerifiedRunError } from "./storage.js";
+import { verifyCandidate } from "./verification-phase.js";
+import { assertWorkRecoverable } from "./work-recovery.js";
+import { publishWriterCandidate } from "./writer-completion.js";
+function assertDagRecoverable(runPath, snapshot) {
+    const recovery = assertWorkRecoverable(runPath, snapshot);
+    const { contract } = recovery;
+    if (contract.profile !== "linux-command-dag-v1")
+        throw new VerifiedRunError("task_recovery_unavailable");
+    for (const task of snapshot.state.tasks) {
+        if (task.status === "pending")
+            continue;
+        const definition = contract.writer.tasks.find((item) => item.id === task.taskId);
+        if (!definition)
+            throw new VerifiedRunError("integrity");
+        const expected = composeDagCandidate({ runPath, contract, journal: snapshot }, runDagAncestors(contract.writer.tasks, task.taskId));
+        const input = loadCandidate(runPath, task.inputDigest, contract.budget);
+        if (input.digest !== expected.digest)
+            throw new VerifiedRunError("task_checkpoint_mismatch");
+        if (task.status === "succeeded")
+            assertCandidateScope(input.manifest, loadCandidate(runPath, task.outputDigest, contract.budget).manifest, definition.writablePaths);
+    }
+    return { contract, remainingMs: recovery.remainingMs };
+}
+export function inspectTaskRecovery(runPath) {
+    const snapshot = requireRunJournal(runPath);
+    try {
+        const { contract, remainingMs } = assertDagRecoverable(runPath, snapshot);
+        const taskIds = snapshot.state.tasks
+            .filter((task) => (task.status === "failed" || task.status === "running") &&
+            task.attempt < (contract.writer.tasks.find((item) => item.id === task.taskId)?.attempts.length ?? 0))
+            .map((task) => task.taskId);
+        assertTaskSelection(contract, snapshot.state, taskIds);
+        return Object.freeze({
+            state: snapshot.state,
+            readiness: "ready",
+            reason: null,
+            retryableTaskIds: Object.freeze(taskIds),
+            remainingWorkMs: remainingMs,
+            ownership: "lease_required",
+        });
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        return Object.freeze({
+            state: snapshot.state,
+            readiness: "blocked",
+            reason: error instanceof VerifiedRunError ? error.code : "integrity",
+            retryableTaskIds: Object.freeze([]),
+            remainingWorkMs: null,
+            ownership: "lease_required",
+        });
+    }
+}
+export async function retryDagTasks(runPath, command, signal) {
+    if (signal?.aborted)
+        throw new VerifiedRunError("cancelled");
+    return withRecoveryLease(runPath, command, async ({ snapshot, journal }) => {
+        const { contract } = assertDagRecoverable(runPath, snapshot);
+        assertTaskSelection(contract, snapshot.state, command.taskIds);
+        preflightCheckReceipts(contract);
+        probeVerifiedSandbox();
+        assertDagRecoverable(runPath, snapshot);
+        if (signal?.aborted)
+            throw new VerifiedRunError("cancelled");
+        journal.append({
+            kind: "tasks_retried",
+            command,
+            observedMs: readRunClock().nowMs,
+            reconciledExecutionIds: snapshot.state.activeExecutionIds,
+            adopted: taskCheckpoints(snapshot.state),
+        });
+        const budget = journal.state.budget;
+        if (!budget)
+            throw new VerifiedRunError("integrity");
+        const deadline = performance.now() + remainingRunTime(budget, budget.workDeadlineMs);
+        const workspace = join(runPath, `writer-${journal.state.generation}`);
+        const context = { runPath, contract, journal, ...(signal ? { signal } : {}) };
+        await executeDag(context, { workspace, deadline });
+        if (journal.state.execution === "paused")
+            return journal.state;
+        publishWriterCandidate(context, workspace, deadline);
+        return verifyCandidate(context);
+    });
+}
+//# sourceMappingURL=dag-recovery.js.map