sealbridge 0.4.1 → 0.5.0

package/dist/packages/core/dist/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,OAAO,MAAM,aAAa,CAAC;AAElC,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,OAA2C,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,YAAY;IAC3E,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,aAAa;CAC5G,CAAC;AACX,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAW,CAAC;AACnG,CAAC;AACD,IAAI,cAAwD,CAAC;AAC7D,0FAA0F;AAC1F,MAAM,UAAU,cAAc;IAC5B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAClF,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,cAAc,GAAG,GAAG,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAc;IACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAChG,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,OAAO,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAuC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,cAAc,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AAC3G,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,MAAe;IACrD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO;IAClD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC/E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAc;IAC3D,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,SAAS,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AACrD,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,OAAO,MAAM,aAAa,CAAC;AAElC,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,OAA2C,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,YAAY;IAC3E,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,aAAa;IACpH,eAAe,EAAE,6BAA6B,EAAE,iBAAiB,EAAE,uBAAuB;IAC1F,oBAAoB,EAAE,gBAAgB,EAAE,mBAAmB;CACnD,CAAC;AACX,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAW,CAAC;AACnG,CAAC;AACD,IAAI,cAAwD,CAAC;AAC7D,0FAA0F;AAC1F,MAAM,UAAU,cAAc;IAC5B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAClF,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,cAAc,GAAG,GAAG,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAc;IACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAChG,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,OAAO,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAuC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,cAAc,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACzG,4BAA4B,CAAC,KAAqB,CAAC,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,MAAe;IACrD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO;IAClD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC/E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAc;IAC3D,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,SAAS,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/dist/packages/core/dist/types.d.ts

@@ -97,6 +97,7 @@ export interface BudgetSpec {
     onOverrun: 'hard_stop' | 'request_hitl_amendment';
 }
 export interface TaskManifest {
+    contextGrant?: ContextGrant;
     protocolVersion: string;
     taskId: string;
     createdAt: string;
@@ -170,3 +171,54 @@ export interface TaskManifest {
     };
     signatures?: Record<string, Signature>;
 }
+export type DeliveryMode = 'view_only' | 'approval_redelegation' | 'hand_over';
+export interface ContextGrant {
+    deliveryMode: DeliveryMode;
+    /** Opaque selection declarations; CP1 does not extract data from a source. */
+    selectors: string[];
+    fieldsAllowed?: string[];
+    fieldsDenied?: string[];
+    angle: string;
+    expiresAt: string;
+    maxBytes: number;
+    retention: 'ephemeral_view' | 'keep_deliverable';
+    inputRetentionAllowed?: boolean;
+    outputSchema?: Schema;
+}
+export type ContextGrantOptions = Pick<ContextGrant, 'selectors' | 'angle'> & Partial<Omit<ContextGrant, 'selectors' | 'angle'>>;
+export type ContextGrantAuditEventType = 'CONTEXT_GRANT' | 'CONTEXT_OPENED' | 'CONTEXT_DISCARDED' | 'CONTEXT_DELETION_ATTEMPTED' | 'CONTEXT_MODE';
+export interface ContextGrantAuditPayload {
+    grantDigest: string;
+    deliveryMode: DeliveryMode;
+}
+/** Cross-task provenance, distinct from the same-task capability chain. */
+export interface DelegationLimits {
+    deadline: string;
+    expiresAt: string;
+    budget: TaskManifest['budget'];
+    sandboxPolicy: TaskManifest['sandboxPolicy'];
+    verification: TaskManifest['verification'];
+    depthRemaining: number;
+}
+export interface DelegationLinkPayload {
+    type: 'DelegationLink';
+    parentTaskId: string;
+    parentContractDigest: string;
+    childTaskId: string;
+    childContractDigest: string;
+    delegatorOwnerDid: string;
+    delegateeOwnerDid: string;
+    depthRemaining: number;
+    limits: DelegationLimits;
+    issuedAt: string;
+    prevLinkDigest: string | null;
+}
+export type DelegationLink = Signed<DelegationLinkPayload>;
+export interface DelegationProof {
+    link: DelegationLink;
+    childContract: import('./contract.js').TaskContract;
+}
+export interface DelegationAttachment {
+    parentContract: import('./contract.js').TaskContract;
+    children: DelegationProof[];
+}

package/dist/packages/ledger/dist/index.d.ts

@@ -28,23 +28,64 @@ export interface AuditBundle {
         receiver: Signed<Signed<Checkpoint>>;
     };
 }
+/** Local storage format 1; never a wire event or bilateral checkpoint. */
+export interface AuditInterruption {
+    type: 'AuditInterruption';
+    formatVersion: 1;
+    taskId: string;
+    actors: [string, string];
+    seq: number;
+    prevEntryHash: string;
+    acknowledgedPrefix: {
+        count: number;
+        lastSeq: number;
+        head: string;
+        entriesDigest: string;
+    };
+    phase: 'OWNER_APPROVAL' | 'ACCEPT_ACK_WAIT';
+    reason: 'SESSION_TIMEOUT' | 'WORKER_STOPPED' | 'WORKER_RESTART_OBSERVED';
+    observedAt: string;
+}
+export interface InterruptedAuditBundle {
+    entries: AuditEntry[];
+    interruption: Signed<AuditInterruption>;
+}
+export type AuditEvidence = AuditBundle | InterruptedAuditBundle;
+export type AuditFileRecord = {
+    entry: AuditEntry;
+} | {
+    checkpoint: AuditBundle['checkpoint'];
+} | {
+    interruption: Signed<AuditInterruption>;
+};
+export interface InterruptionStore {
+    /** Idempotent only for exactly the same signed terminal record and prefix.
+     * beforeWrite must synchronously persist the signed intent; promises are rejected. */
+    closeInterrupted(bundle: InterruptedAuditBundle, beforeWrite?: () => void): void;
+}
 export interface AuditStore {
     read(): AuditEntry[];
     append(entry: AuditEntry, checkpoint: AuditBundle['checkpoint']): void;
     seal?(checkpoint: AuditBundle['checkpoint']): void;
 }
-export declare class MemoryStore implements AuditStore {
+export declare class MemoryStore implements AuditStore, InterruptionStore {
     #private;
     read(): AuditEntry[];
     append(entry: AuditEntry): void;
+    seal(checkpoint: AuditBundle['checkpoint']): void;
+    closeInterrupted(bundle: InterruptedAuditBundle, beforeWrite?: () => void): void;
 }
-export declare class JsonlStore implements AuditStore {
+export declare class JsonlStore implements AuditStore, InterruptionStore {
     readonly path: string;
     constructor(path: string);
+    /** All cooperating writers use this exclusive file lock. Never share with an older writer.
+     * A lock left by process death is an explicit local recovery operation, never stolen. */
+    private exclusive;
     private records;
     read(): AuditEntry[];
     append(entry: AuditEntry): void;
     seal(checkpoint: AuditBundle['checkpoint']): void;
+    closeInterrupted(bundle: InterruptedAuditBundle, beforeWrite?: () => void): void;
 }
 export declare function parseJsonl(text: string): AuditBundle;
 export declare class BilateralLedger {
@@ -82,3 +123,30 @@ export interface AuditVerificationResult {
  */
 export declare const AUDIT_VALID_WITHOUT_TRUST_ANCHOR = "VALID (no trust anchor: truncation not checked)";
 export declare function verifyAudit(bundle: AuditBundle, expected?: AuditVerificationOptions): AuditVerificationResult;
+export interface AuditEvidenceTrustAnchor extends AuditTrustAnchor {
+    expectedClosureKind?: 'bilateral' | 'interruption';
+    expectedInterruptionHash?: string;
+}
+export interface AuditEvidenceVerificationOptions extends AuditEvidenceTrustAnchor {
+    trustAnchor?: AuditEvidenceTrustAnchor;
+}
+export interface InterruptedAuditVerificationResult {
+    valid: false;
+    status: 'UNILATERALLY_CLOSED' | 'INVALID';
+    statusLabel: string;
+    reason: string;
+    prefixVerified: boolean;
+    terminalSignatureVerified: boolean;
+    bilateralCheckpointVerified: false;
+    trustAnchorVerified: boolean;
+    /** For interruption only: an actual tail condition was compared, not identity alone. */
+    truncationChecked: boolean;
+    closureKind: 'interruption';
+}
+export type AuditEvidenceVerificationResult = AuditVerificationResult | InterruptedAuditVerificationResult;
+/** Read either terminal form, retaining physical JSONL locations out of band. */
+export declare function parseAuditJsonl(text: string): AuditEvidence;
+/** Both formats are verified locally. A worker-only observation never becomes VALID. */
+export declare function verifyAuditEvidence(bundle: unknown, expected?: AuditEvidenceVerificationOptions): AuditEvidenceVerificationResult;
+/** Creates a worker observation; callers must preserve the original prefix and journal the intent before writing. */
+export declare function createAuditInterruption(entries: AuditEntry[], worker: KeyPair, phase: AuditInterruption['phase'], reason: AuditInterruption['reason'], observedAt?: string): Signed<AuditInterruption>;

package/dist/packages/ledger/dist/index.js

@@ -1,27 +1,151 @@
 // SPDX-License-Identifier: Apache-2.0
-import { appendFileSync, readFileSync } from 'node:fs';
-import { digest, signPayload, signAck, verifySigned, verifySignature, validateSchema, } from '../../core/dist/index.js';
+import { appendFileSync, readFileSync, openSync, closeSync, fsyncSync, unlinkSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { digest, signPayload, signAck, verifySigned, verifySignature, validateSchema, validateManifest, } from '../../core/dist/index.js';
+function persistInterruptionIntent(beforeWrite) {
+    const result = beforeWrite?.();
+    if (result && typeof result.then === 'function') {
+        void Promise.resolve(result).catch(() => { });
+        throw new Error('ASYNC_AUDIT_INTENT_FORBIDDEN');
+    }
+}
+// Source locations are diagnostic metadata only: never serialize them into a bundle.
+const jsonlLocations = new WeakMap();
+function object(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value : undefined;
+}
+function diagnosticText(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    if (/acp-invite:/i.test(value))
+        return '[redacted]';
+    return value.length > 160 ? value.slice(0, 160) + '...' : value;
+}
+function diagnosticJson(value) {
+    // JSON escaping covers C0 controls; also escape DEL, C1 and Unicode display controls.
+    return JSON.stringify(value).replace(/[\u007f-\uffff]/g, char => '\\u' + char.charCodeAt(0).toString(16).padStart(4, '0'));
+}
+function entryLocation(entry, locationKind, index, line) {
+    const e = object(entry), body = object(e?.body);
+    return {
+        locationKind,
+        taskId: diagnosticText(body?.taskId),
+        seq: typeof body?.seq === 'number' && Number.isSafeInteger(body.seq) && body.seq >= 0
+            ? body.seq : undefined,
+        entryHash: diagnosticText(e?.entryHash),
+        line,
+        index,
+        verified: false,
+    };
+}
+function checkpointLocation(bundle) {
+    const checkpoint = object(bundle?.checkpoint), payload = object(object(checkpoint?.actor)?.payload);
+    const entries = Array.isArray(bundle?.entries) ? bundle.entries : [];
+    const source = jsonlLocations.get(bundle);
+    return {
+        locationKind: 'checkpoint',
+        taskId: diagnosticText(payload?.taskId),
+        head: diagnosticText(payload?.head),
+        line: source?.checkpointLine,
+        lastEntry: entries.length
+            ? entryLocation(entries.at(-1), 'last-entry', entries.length - 1, source?.entryLines.at(-1)) : undefined,
+        verified: false,
+    };
+}
+function parseRecords(text) {
+    // Keep the existing trim/filter rules while counting physical lines before filtering.
+    const start = text.length - text.trimStart().length;
+    const firstLine = text.slice(0, start).split('\n').length;
+    return text.trim().split('\n').flatMap((line, index) => {
+        if (!line)
+            return [];
+        const physicalLine = firstLine + index;
+        let record;
+        try {
+            record = JSON.parse(line);
+        }
+        catch {
+            // Engine JSON errors can quote the input, including task payloads or invitations.
+            throw new SyntaxError('Invalid JSON; auditLocation=' + diagnosticJson({ line: physicalLine, verified: false }));
+        }
+        return [{ record, line: physicalLine }];
+    });
+}
 export class MemoryStore {
     #entries = [];
+    #interruption;
+    #checkpoint;
+    #closing = false;
     read() {
         return structuredClone(this.#entries);
     }
     append(entry) {
+        if (this.#closing)
+            throw new Error('LEDGER_BUSY');
+        if (this.#interruption || this.#checkpoint)
+            throw new Error('LEDGER_SEALED');
         this.#entries.push(structuredClone(entry));
     }
+    seal(checkpoint) {
+        if (this.#closing)
+            throw new Error('LEDGER_BUSY');
+        if (this.#interruption)
+            throw new Error('LEDGER_SEALED');
+        if (this.#checkpoint && digest(this.#checkpoint.actor.payload) !== digest(checkpoint.actor.payload))
+            throw new Error('LEDGER_SEALED');
+        this.#checkpoint = structuredClone(checkpoint);
+    }
+    closeInterrupted(bundle, beforeWrite) {
+        if (this.#closing)
+            throw new Error('LEDGER_BUSY');
+        bundle = structuredClone(bundle);
+        if (this.#checkpoint)
+            throw new Error('LEDGER_SEALED');
+        if (digest(this.#entries) !== digest(bundle.entries) ||
+            verifyAuditEvidence(bundle).status !== 'UNILATERALLY_CLOSED')
+            throw new Error('INVALID_AUDIT_INTERRUPTION');
+        if (this.#interruption && digest(this.#interruption) !== digest(bundle.interruption))
+            throw new Error('LEDGER_SEALED');
+        this.#closing = true;
+        try {
+            persistInterruptionIntent(beforeWrite);
+            this.#interruption = bundle.interruption;
+        }
+        finally {
+            this.#closing = false;
+        }
+    }
 }
 export class JsonlStore {
     path;
     constructor(path) {
         this.path = path;
     }
+    /** All cooperating writers use this exclusive file lock. Never share with an older writer.
+     * A lock left by process death is an explicit local recovery operation, never stolen. */
+    exclusive(operation) {
+        const path = resolve(this.path) + '.lock';
+        let fd;
+        try {
+            fd = openSync(path, 'wx', 0o600);
+        }
+        catch (error) {
+            if (error.code === 'EEXIST')
+                throw new Error('LEDGER_BUSY');
+            throw error;
+        }
+        try {
+            return operation();
+        }
+        finally {
+            closeSync(fd);
+            unlinkSync(path);
+        }
+    }
     records() {
         try {
-            return readFileSync(this.path, 'utf8')
-                .trim()
-                .split('\n')
-                .filter(Boolean)
-                .map((l) => JSON.parse(l));
+            return parseRecords(readFileSync(this.path, 'utf8')).map(({ record }) => record);
         }
         catch (e) {
             if (e.code === 'ENOENT')
@@ -35,30 +159,93 @@ export class JsonlStore {
             .map((r) => r.entry);
     }
     append(entry) {
-        if (this.records().some((r) => r.checkpoint))
-            throw new Error('LEDGER_SEALED');
-        appendFileSync(this.path, JSON.stringify({ entry }) + '\n', { mode: 0o600 });
+        this.exclusive(() => {
+            if (this.records().some((r) => r.checkpoint || Object.hasOwn(r, 'interruption')))
+                throw new Error('LEDGER_SEALED');
+            appendFileSync(this.path, JSON.stringify({ entry }) + '\n', { mode: 0o600 });
+        });
     }
     seal(checkpoint) {
-        const old = this.records().at(-1)?.checkpoint;
-        if (old) {
-            if (digest(old.actor.payload) !== digest(checkpoint.actor.payload))
+        this.exclusive(() => {
+            const records = this.records();
+            if (records.some(r => Object.hasOwn(r, 'interruption')))
                 throw new Error('LEDGER_SEALED');
-            return;
-        }
-        appendFileSync(this.path, JSON.stringify({ checkpoint }) + '\n', { mode: 0o600 });
+            const old = records.at(-1)?.checkpoint;
+            if (old) {
+                if (digest(old.actor.payload) !== digest(checkpoint.actor.payload))
+                    throw new Error('LEDGER_SEALED');
+                return;
+            }
+            appendFileSync(this.path, JSON.stringify({ checkpoint }) + '\n', { mode: 0o600 });
+        });
+    }
+    closeInterrupted(bundle, beforeWrite) {
+        bundle = structuredClone(bundle);
+        this.exclusive(() => {
+            if (verifyAuditEvidence(bundle).status !== 'UNILATERALLY_CLOSED')
+                throw new Error('INVALID_AUDIT_INTERRUPTION');
+            const text = readFileSync(this.path, 'utf8'), records = parseRecords(text);
+            const terminal = records.at(-1)?.record.interruption;
+            if (terminal) {
+                const existing = parseAuditJsonl(text);
+                if (digest(existing) !== digest(bundle))
+                    throw new Error('LEDGER_SEALED');
+            }
+            else {
+                if (records.some(({ record }) => !object(record) || Object.keys(record).length !== 1 || !record.entry) ||
+                    digest(records.map(({ record }) => record.entry)) !== digest(bundle.entries))
+                    throw new Error('AUDIT_PREFIX_MISMATCH');
+            }
+            persistInterruptionIntent(beforeWrite);
+            // Journal callbacks must not change the audit. Cooperating processes remain excluded.
+            if (readFileSync(this.path, 'utf8') !== text)
+                throw new Error('AUDIT_PREFIX_MISMATCH');
+            const fd = openSync(this.path, 'a');
+            try {
+                if (!terminal)
+                    appendFileSync(fd, (text.endsWith('\n') ? '' : '\n') + JSON.stringify({ interruption: bundle.interruption }) + '\n');
+                // Includes the original acknowledged prefix, and also retries a failed sync after append.
+                fsyncSync(fd);
+            }
+            finally {
+                closeSync(fd);
+            }
+            if (process.platform !== 'win32') {
+                const dir = openSync(dirname(this.path), 'r');
+                try {
+                    fsyncSync(dir);
+                }
+                finally {
+                    closeSync(dir);
+                }
+            }
+        });
     }
 }
 export function parseJsonl(text) {
-    const records = text
-        .trim()
-        .split('\n')
-        .filter(Boolean)
-        .map((l) => JSON.parse(l));
-    const last = records.pop();
-    if (!last?.checkpoint || last.entry || records.some((r) => !r.entry || r.checkpoint))
-        throw new Error('MISSING_OR_MISPLACED_CHECKPOINT');
-    return { entries: records.map((r) => r.entry), checkpoint: last.checkpoint };
+    const records = parseRecords(text);
+    const last = records.at(-1);
+    const misplaced = records.slice(0, -1).find(({ record }) => !object(record)?.entry || object(record)?.checkpoint || Object.hasOwn(record, 'interruption'));
+    if (!object(last?.record)?.checkpoint || object(last?.record)?.entry || Object.hasOwn(last.record, 'interruption') || misplaced) {
+        const offending = misplaced ?? last;
+        const entry = object(offending?.record)?.entry;
+        const checkpoint = object(offending?.record)?.checkpoint;
+        const payload = object(object(object(checkpoint)?.actor)?.payload);
+        const lastEntry = !entry && !checkpoint
+            ? records.findLast(({ record }) => object(record)?.entry) : undefined;
+        const location = entry
+            ? entryLocation(entry, !misplaced && !object(last?.record)?.checkpoint ? 'last-entry' : 'entry')
+            : { locationKind: checkpoint ? 'checkpoint' : 'record', taskId: diagnosticText(payload?.taskId),
+                head: diagnosticText(payload?.head), verified: false };
+        throw new Error('MISSING_OR_MISPLACED_CHECKPOINT; auditLocation=' + diagnosticJson({
+            ...location, line: offending?.line,
+            lastEntry: lastEntry ? { ...entryLocation(lastEntry.record.entry, 'last-entry'), line: lastEntry.line } : undefined,
+        }));
+    }
+    const entryRecords = records.slice(0, -1);
+    const bundle = { entries: entryRecords.map(({ record }) => record.entry), checkpoint: last.record.checkpoint };
+    jsonlLocations.set(bundle, { entryLines: entryRecords.map(({ line }) => line), checkpointLine: last.line });
+    return bundle;
 }
 export class BilateralLedger {
     taskId;
@@ -224,9 +411,22 @@ function auditResult(supplied, error) {
         truncationChecked: true,
     };
 }
+function verificationError(error) {
+    // Retain existing verifier codes and schema explanations, without forwarding arbitrary exceptions.
+    if (error instanceof Error && (/^(checkpoint|trust anchor|entry \d+|[A-Z][A-Z0-9_]{0,79})$/.test(error.message)
+        || error.message.startsWith('SCHEMA_VIOLATION: '))) {
+        const message = error.message;
+        const bounded = message.length > 1024 ? message.slice(0, 1024) + '...' : message;
+        return 'Error: ' + diagnosticJson(bounded).slice(1, -1);
+    }
+    return error instanceof TypeError ? 'TypeError' : 'Error';
+}
 export function verifyAudit(bundle, expected) {
     const supplied = anchorSupplied(expected);
+    let location = checkpointLocation(bundle);
     try {
+        if (object(bundle) && Object.hasOwn(bundle, 'interruption'))
+            throw new Error('checkpoint');
         const { entries, checkpoint } = bundle, c = checkpoint.actor.payload;
         const selfDelegated = Array.isArray(c?.actors) && c.actors.length === 2 && c.actors[0] === c.actors[1];
         if (c.type !== 'AuditCheckpoint' ||
@@ -243,6 +443,7 @@ export function verifyAudit(bundle, expected) {
             throw new Error('checkpoint');
         assertTrustAnchor(resolveAnchor(expected), c, entries);
         for (let i = 0; i < entries.length; i++) {
+            location = entryLocation(entries[i], 'entry', i, jsonlLocations.get(bundle)?.entryLines[i]);
             const e = entries[i], b = e.body, a = e.counterSignature;
             validateSchema('audit-entry', e);
             if (b.taskId !== c.taskId ||
@@ -263,7 +464,184 @@ export function verifyAudit(bundle, expected) {
         return auditResult(supplied);
     }
     catch (e) {
-        return auditResult(supplied, e);
+        return auditResult(supplied, verificationError(e) + '; auditLocation=' + diagnosticJson(location));
     }
 }
+const interruptionLocations = new WeakMap();
+function interruptionLocation(bundle) {
+    const signed = object(bundle?.interruption), p = object(signed?.payload);
+    const source = interruptionLocations.get(bundle);
+    const entries = Array.isArray(bundle?.entries) ? bundle.entries : [];
+    let interruptionHash;
+    try {
+        if (p)
+            interruptionHash = digest(p);
+    }
+    catch { /* Only expose a computed digest. */ }
+    return {
+        locationKind: 'interruption', taskId: diagnosticText(p?.taskId),
+        seq: typeof p?.seq === 'number' && Number.isSafeInteger(p.seq) && p.seq >= 0 ? p.seq : undefined,
+        interruptionHash, line: source?.terminalLine, verified: false,
+        lastEntry: entries.length ? entryLocation(entries.at(-1), 'last-entry', entries.length - 1, source?.entryLines.at(-1)) : undefined,
+    };
+}
+/** Read either terminal form, retaining physical JSONL locations out of band. */
+export function parseAuditJsonl(text) {
+    const records = parseRecords(text);
+    // Keep the bilateral parser's diagnostics for old files, including missing checkpoints.
+    if (!records.some(({ record }) => object(record) && Object.hasOwn(record, 'interruption'))) {
+        const bilateral = parseJsonl(text);
+        const malformed = records.find(({ record }) => !object(record) || Object.keys(record).length !== 1 ||
+            !['entry', 'checkpoint'].includes(Object.keys(record)[0]));
+        if (!malformed)
+            return bilateral;
+        throw new Error('INVALID_AUDIT_RECORD; auditLocation=' + diagnosticJson({ line: malformed.line, verified: false }));
+    }
+    const bad = records.find(({ record }, index) => {
+        const r = object(record);
+        return !r || Object.keys(r).length !== 1 ||
+            (index === records.length - 1 ? !Object.hasOwn(r, 'interruption') : !Object.hasOwn(r, 'entry'));
+    });
+    if (bad)
+        throw new Error('MISPLACED_AUDIT_TERMINAL; auditLocation=' + diagnosticJson({ line: bad.line, verified: false }));
+    const bundle = { entries: records.slice(0, -1).map(({ record }) => record.entry), interruption: records.at(-1).record.interruption };
+    interruptionLocations.set(bundle, { entryLines: records.slice(0, -1).map(({ line }) => line), terminalLine: records.at(-1).line });
+    return bundle;
+}
+/** Verify a PROPOSE-only acknowledged prefix, including offline manifest roles/signature. */
+function assertInterruptionPrefix(entries, taskId, actors) {
+    if (!Array.isArray(entries) || entries.length !== 1 || actors.length !== 2 || actors[0] === actors[1])
+        throw new Error('INTERRUPTION_SCOPE');
+    const e = entries[0];
+    validateSchema('audit-entry', e);
+    const b = e.body, a = e.counterSignature;
+    if (b.eventType !== 'PROPOSE' || b.taskId !== taskId || b.seq !== 0 || b.prevEntryHash !== null ||
+        b.actorDid !== actors[0] || b.receiverDid !== actors[1] || e.entryHash !== digest(b) ||
+        !verifySignature(b, e.actorSignature, actors[0]) || !verifySigned(a, actors[1]) ||
+        a.payload.type !== 'AckReceipt' || a.payload.taskId !== taskId || a.payload.entryHash !== e.entryHash ||
+        a.payload.actorDid !== actors[0] || a.payload.receiverDid !== actors[1])
+        throw new Error('entry 0');
+    const proposal = object(b.payload)?.proposal;
+    if (!proposal)
+        throw new Error('INTERRUPTION_MANIFEST');
+    validateManifest(proposal.payload);
+    if (!verifySigned(proposal, actors[0]) || proposal.payload.taskId !== taskId ||
+        proposal.payload.requester.ownerDid !== actors[0] || proposal.payload.worker?.ownerDid !== actors[1])
+        throw new Error('INTERRUPTION_MANIFEST');
+    // Deliberately no live expiry, retirement clock, or peer-floor policy in offline verification.
+}
+function evidencePins(options) {
+    const base = resolveAnchor(options);
+    for (const key of ['expectedClosureKind', 'expectedInterruptionHash']) {
+        if (!sameAnchorField(options?.[key], options?.trustAnchor?.[key]))
+            throw new Error('trust anchor');
+    }
+    return { ...base,
+        expectedClosureKind: options?.expectedClosureKind ?? options?.trustAnchor?.expectedClosureKind,
+        expectedInterruptionHash: options?.expectedInterruptionHash ?? options?.trustAnchor?.expectedInterruptionHash };
+}
+function assertInterruptionPins(options) {
+    if (options !== undefined && !object(options))
+        throw new Error('trust anchor');
+    if (options?.trustAnchor !== undefined && !object(options.trustAnchor))
+        throw new Error('trust anchor');
+    for (const part of [options, options?.trustAnchor]) {
+        if (!part)
+            continue;
+        for (const key of ['taskId', 'head', 'expectedLastEntryHash', 'expectedFinalState', 'expectedInterruptionHash'])
+            if (part[key] !== undefined && !hasText(part[key]))
+                throw new Error('trust anchor');
+        if (part.expectedClosureKind !== undefined && !['bilateral', 'interruption'].includes(part.expectedClosureKind))
+            throw new Error('trust anchor');
+        if (part.actors !== undefined && (!Array.isArray(part.actors) || part.actors.length !== 2 || !part.actors.every(hasText)))
+            throw new Error('trust anchor');
+        if (part.expectedEntryCount !== undefined && (!Number.isSafeInteger(part.expectedEntryCount) || part.expectedEntryCount < 0))
+            throw new Error('trust anchor');
+    }
+}
+/** Both formats are verified locally. A worker-only observation never becomes VALID. */
+export function verifyAuditEvidence(bundle, expected) {
+    const value = object(bundle);
+    if (!value || !Object.hasOwn(value, 'interruption')) {
+        const bilateral = bundle;
+        const result = verifyAudit(bilateral, expected);
+        if (!result.valid)
+            return result;
+        try {
+            validateSchema('audit-evidence', bundle);
+            const pins = evidencePins(expected);
+            if (pins.expectedClosureKind !== undefined && pins.expectedClosureKind !== 'bilateral' ||
+                pins.expectedInterruptionHash !== undefined)
+                throw new Error('trust anchor');
+            return pins.expectedClosureKind === 'bilateral' ? { ...result, trustAnchorVerified: true } : result;
+        }
+        catch (error) {
+            return auditResult(anchorSupplied(expected), verificationError(error) + '; auditLocation=' + diagnosticJson(checkpointLocation(bilateral)));
+        }
+    }
+    const interrupted = bundle;
+    let prefixVerified = false, terminalSignatureVerified = false, truncationChecked = false;
+    let location = interruptionLocation(interrupted);
+    try {
+        // Exclusive object shape and terminal schema before interpreting its fields.
+        if (Object.keys(value).length !== 2 || !Object.hasOwn(value, 'entries'))
+            throw new Error('INVALID_AUDIT_EVIDENCE');
+        validateSchema('audit-interruption', interrupted.interruption);
+        const { entries, interruption } = interrupted, p = interruption.payload;
+        location = entryLocation(entries?.[0], 'entry', 0, interruptionLocations.get(interrupted)?.entryLines[0]);
+        assertInterruptionPrefix(entries, p.taskId, p.actors);
+        prefixVerified = true;
+        location = interruptionLocation(interrupted);
+        const prefix = p.acknowledgedPrefix, head = entries[0].entryHash;
+        if (p.formatVersion !== 1 || p.seq !== 1 || prefix.count !== 1 || prefix.lastSeq !== 0 ||
+            p.prevEntryHash !== head || prefix.head !== head || prefix.entriesDigest !== digest(entries) ||
+            !Number.isSafeInteger(p.seq) || !Number.isSafeInteger(prefix.count) || !Number.isSafeInteger(prefix.lastSeq) ||
+            p.observedAt !== interruption.signature.signedAt || !Number.isFinite(Date.parse(p.observedAt)) ||
+            !verifySigned(interruption, p.actors[1]))
+            throw new Error('INVALID_AUDIT_INTERRUPTION');
+        terminalSignatureVerified = true;
+        assertInterruptionPins(expected);
+        const pins = evidencePins(expected);
+        const prefixCheckpoint = { type: 'AuditCheckpoint', taskId: p.taskId, actors: p.actors, count: 1, head };
+        assertTrustAnchor({ taskId: pins.taskId, actors: pins.actors }, prefixCheckpoint, entries);
+        if (pins.expectedClosureKind !== undefined && pins.expectedClosureKind !== 'interruption')
+            throw new Error('trust anchor');
+        if ([pins.head, pins.expectedLastEntryHash, pins.expectedFinalState, pins.expectedEntryCount].some(v => v !== undefined)) {
+            truncationChecked = true;
+            assertTrustAnchor(pins, prefixCheckpoint, entries);
+        }
+        if (pins.expectedInterruptionHash !== undefined) {
+            truncationChecked = true;
+            if (pins.expectedInterruptionHash !== digest(p))
+                throw new Error('trust anchor');
+        }
+        const supplied = anchorSupplied(expected) || pins.expectedClosureKind !== undefined || pins.expectedInterruptionHash !== undefined;
+        return { valid: false, status: 'UNILATERALLY_CLOSED',
+            statusLabel: 'UNILATERALLY_CLOSED (worker-only terminal; no peer terminal signature)', reason: 'WORKER_ONLY_INTERRUPTION',
+            prefixVerified, terminalSignatureVerified, bilateralCheckpointVerified: false,
+            trustAnchorVerified: supplied, truncationChecked, closureKind: 'interruption' };
+    }
+    catch (error) {
+        return { valid: false, status: 'INVALID', statusLabel: 'INVALID',
+            reason: verificationError(error) + '; auditLocation=' + diagnosticJson(location),
+            prefixVerified, terminalSignatureVerified, bilateralCheckpointVerified: false,
+            trustAnchorVerified: false, truncationChecked, closureKind: 'interruption' };
+    }
+}
+/** Creates a worker observation; callers must preserve the original prefix and journal the intent before writing. */
+export function createAuditInterruption(entries, worker, phase, reason, observedAt = new Date().toISOString()) {
+    const first = entries[0];
+    if (!first)
+        throw new Error('INTERRUPTION_SCOPE');
+    const actors = [first.body.actorDid, worker.did];
+    assertInterruptionPrefix(entries, first.body.taskId, actors);
+    const payload = { type: 'AuditInterruption', formatVersion: 1,
+        taskId: first.body.taskId, actors, seq: 1, prevEntryHash: first.entryHash,
+        acknowledgedPrefix: { count: 1, lastSeq: 0, head: first.entryHash, entriesDigest: digest(entries) },
+        phase, reason, observedAt };
+    const interruption = signPayload(payload, worker, observedAt);
+    if (verifyAuditEvidence({ entries, interruption }).status !== 'UNILATERALLY_CLOSED')
+        throw new Error('INVALID_AUDIT_INTERRUPTION');
+    return interruption;
+}
 //# sourceMappingURL=index.js.map