synorch 0.2.0 → 0.4.0-beta.0

package/dist/harness/contracts/runtime.d.ts

@@ -0,0 +1,283 @@
+import type { ResolvedCredential, ResolveOptions } from "./auth.ts";
+import type { AgentRole, BlobRef } from "./common.ts";
+import type { Digest } from "./digest.ts";
+import type { ExitCode } from "./errors.ts";
+import type { EventStore, BlobStore } from "./store.ts";
+import type { AttemptId, RequestId, RunId, SessionId, TaskId, TurnId } from "./ids.ts";
+import type { RecalledMemory } from "./memory.ts";
+import type { ContextBlockSource, ModelRequest, ModelRoute, ModelRouter, ReasoningEffort, RouteDecision } from "./model.ts";
+import type { CompletionPacket, ReviewPacket, TaskContextPacket } from "./packets.ts";
+import type { EffectivePolicy, PolicyMode } from "./policy.ts";
+import type { RenderEvent, TerminalRenderer } from "./renderer.ts";
+import type { ToolGateway, ToolRegistry } from "./tools.ts";
+/**
+ * Seams between workstreams. Each interface has exactly one owning module (see
+ * docs/harness/implementation-plan.md); every other module depends on it only through this file.
+ */
+export interface ContextBuildInput {
+    readonly sessionId: SessionId;
+    /** Undefined for a conversation turn (`session` role), which belongs to no run (ADR-21 D1). */
+    readonly runId: RunId | undefined;
+    readonly taskId: TaskId | undefined;
+    /** Separates two attempts of the same role that share a session; history keeps only this attempt's turns. */
+    readonly attemptId: AttemptId | undefined;
+    readonly role: AgentRole;
+    readonly route: ModelRoute;
+    readonly policy: EffectivePolicy;
+    readonly packet: TaskContextPacket | undefined;
+    readonly requestId: RequestId;
+    /**
+     * Reads the current digests of the packet's sources in the workspace the packet was computed
+     * against (the attempt workspace for `context.digest_scheme: workspace-raw-v1`, ADR-19). When
+     * absent the builder falls back to its own configured reader (pre-ADR-19 behaviour).
+     */
+    readonly sources?: WorkspaceDigestReader;
+    /**
+     * A report-only request (the forced last turn of an attempt that hit its step limit without a
+     * report): only this report tool is offered, and the budget gate may grace the one request when
+     * only the step budget is exhausted (`RequestBudgetGate.admit(..., { grace: true })`).
+     */
+    readonly reportOnly?: string;
+    /** K6: the step's reasoning effort, already clamped to the route model's levels (`ModelRequest.reasoning_effort`). */
+    readonly reasoningEffort?: ReasoningEffort;
+}
+export interface ContextBlockReport {
+    readonly blockId: string;
+    readonly source: ContextBlockSource;
+    readonly trust: "harness" | "project" | "untrusted";
+    readonly tokensEstimate: number;
+    readonly truncated: boolean;
+}
+/**
+ * A refused build. `budget-exceeded` means the run/task budget admits no further model request:
+ * the driver ends the step without a request and the turn as `budget_exceeded` (not `failed`).
+ */
+export type ContextBuildRefusal = "stale-sources" | "context-overflow" | "compaction-thrash" | "budget-exceeded";
+export type ContextBuildResult = {
+    readonly ok: true;
+    readonly request: ModelRequest;
+    readonly envelopeDigest: Digest;
+    readonly blocks: readonly ContextBlockReport[];
+    readonly memories: readonly RecalledMemory[];
+} | {
+    readonly ok: false;
+    readonly reason: ContextBuildRefusal;
+    readonly stale: readonly {
+        readonly path: string;
+        readonly expected: Digest;
+        readonly actual: Digest | undefined;
+    }[];
+    /** Human-readable cause (budget metric and usage, overflow size); never model-facing. */
+    readonly detail?: string;
+};
+/** Rebuilds the model input for one step from the event log, blobs, packet and memory. Owned by context. */
+export interface ContextBuilder {
+    build(input: ContextBuildInput, signal: AbortSignal): Promise<ContextBuildResult>;
+}
+export interface TurnInput {
+    readonly sessionId: SessionId;
+    /** Undefined for a conversation turn (`session` role); correlation is by `turn_id` (ADR-21 D1). */
+    readonly runId: RunId | undefined;
+    readonly taskId: TaskId | undefined;
+    readonly attemptId: AttemptId | undefined;
+    readonly role: AgentRole;
+    readonly route: ModelRoute;
+    readonly policy: EffectivePolicy;
+    readonly packet: TaskContextPacket | undefined;
+    readonly userMessage: string | undefined;
+    /** Images attached to `userMessage`, already in the blob store (recorded as `image` parts after the text). */
+    readonly userImages?: readonly BlobRef[];
+    readonly trigger: "user" | "orchestrator" | "steer" | "follow-up" | "dispatch";
+    readonly maxSteps: number;
+    /** Passed through to `ContextBuildInput.sources` (ADR-19); set by the worker manager per attempt. */
+    readonly sources?: WorkspaceDigestReader;
+    /**
+     * Report-only turn: passed to `ContextBuildInput.reportOnly`; the driver refuses (without running)
+     * any call to another tool. Set by the worker manager for the forced report turn only.
+     */
+    readonly reportOnly?: string;
+}
+export interface TurnOutcome {
+    readonly turnId: TurnId;
+    readonly outcome: "completed" | "max_steps" | "cancelled" | "failed" | "awaiting_approval" | "budget_exceeded";
+    readonly steps: number;
+}
+/**
+ * Resolves the credential for a Synorch-owned (`adapter_kind: model`) route; the composition root
+ * maps the route's `(provider_id, auth_method, profile)` to its `AuthProvider.resolve`. It throws
+ * `ProviderFailure` (`auth_expired` / `unauthenticated`) and never falls back to another identity.
+ */
+export type CredentialResolver = (route: ModelRoute, signal: AbortSignal, options?: ResolveOptions) => Promise<ResolvedCredential>;
+export interface AgentDriverDependencies {
+    readonly events: EventStore;
+    readonly blobs: BlobStore;
+    readonly router: ModelRouter;
+    readonly context: ContextBuilder;
+    readonly tools: ToolRegistry;
+    readonly gateway: ToolGateway;
+    readonly credentials: CredentialResolver;
+}
+/** The fixed, small loop: context -> request -> stream -> tool calls via gateway -> next step. Owned by core. */
+export interface AgentDriver {
+    runTurn(input: TurnInput, signal: AbortSignal): Promise<TurnOutcome>;
+    /** Queues a user message for the next safe boundary (after the current tool batch). */
+    steer(text: string): void;
+    /**
+     * Removes and returns the steering messages still queued: typed while the last step finished,
+     * so the turn ended before a boundary could deliver them. The caller starts a follow-up turn
+     * with them instead of losing them (ADR-21 D8 mid-turn steering).
+     */
+    drainSteers?(): readonly string[];
+}
+/**
+ * Why a writing attempt that wanted a worktree runs in `scoped-dir` instead (ADR-19). A fallback
+ * is recorded in `attempt/started.isolation.fallback` and never leaves an orphan worktree or owner
+ * file behind. `high-risk` writing tasks never fall back; they fail with `sandbox_insufficient`.
+ */
+export declare const ISOLATION_FALLBACK_REASONS: readonly ["worktree-create-failed", "path-too-long", "git-unavailable"];
+export type IsolationFallbackReason = (typeof ISOLATION_FALLBACK_REASONS)[number];
+/**
+ * Ignored dependency directories linked (junction/symlink) from the main tree into a worktree so
+ * verification commands find installed dependencies (ADR-19). Linked only when git ignores them,
+ * they exist in the main tree and no owned path overlaps them; they are read-only by policy.
+ */
+export declare const DEPENDENCY_LINK_DIRECTORIES: readonly ["node_modules", ".venv", "venv", ".tox"];
+/**
+ * Digest of one file in one workspace root with the single workspace scheme (`workspaceDigest`,
+ * ADR-19); undefined when the file does not exist. Paths are workspace-relative.
+ */
+export type WorkspaceDigestReader = (relativePath: string, signal?: AbortSignal) => Promise<Digest | undefined>;
+export interface IsolatedWorkspace {
+    readonly mode: "worktree" | "scoped-dir" | "shared-read-only";
+    readonly root: string;
+    readonly baseCommit: string | undefined;
+    /** Diff of the isolated workspace against its base, pinned as an artifact digest. */
+    snapshot(signal: AbortSignal): Promise<{
+        readonly artifactDigest: Digest;
+        readonly changedPaths: readonly string[];
+    }>;
+    dispose(): Promise<void>;
+    /**
+     * The workspace digest of a file in *this* root (ADR-19). Packet sources and known facts are
+     * computed with it after isolation, so they match what the worker's tools see.
+     */
+    readonly digest?: WorkspaceDigestReader;
+    /** True when this is an earlier attempt's workspace of the same task, reset and reused. */
+    readonly reused?: boolean;
+    /** Set when a worktree was wanted but the provider fell back to `scoped-dir`. */
+    readonly fallback?: {
+        readonly from: "worktree";
+        readonly reason: IsolationFallbackReason;
+        readonly detail: string;
+    };
+    /** Dirty or untracked read inputs copied from the main tree (recorded in the baseline, never integrated back). */
+    readonly overlaid?: readonly string[];
+    /** Dependency directories linked from the main tree (`DEPENDENCY_LINK_DIRECTORIES`). */
+    readonly dependencyLinks?: readonly string[];
+    /** Submodule (gitlink) paths of the base commit; an owned path inside one is refused at create. */
+    readonly submodules?: readonly string[];
+}
+export interface IsolationCreateOptions {
+    /**
+     * Root a `shared-read-only` workspace reads from instead of the main workspace: a reviewer reads
+     * the isolated workspace holding the pinned artifact under review.
+     */
+    readonly readRoot?: string;
+    /**
+     * An earlier attempt's workspace of the same task (retry, repair, revision). The provider resets
+     * it to its base (then applies the caller's seed artifact, if any) instead of creating a new
+     * worktree; the caller keeps ownership and disposes it when the task settles (ADR-19).
+     */
+    readonly reuse?: IsolatedWorkspace;
+    /**
+     * Main-tree read inputs (packet read paths and cited sources) to overlay into a worktree when
+     * they are dirty or untracked in the main tree. Owned paths are never overlaid.
+     */
+    readonly overlay?: readonly string[];
+}
+/** Creates per-attempt isolation (ADR-07, ADR-19). Owned by orchestration. */
+export interface IsolationProvider {
+    create(packet: TaskContextPacket, attemptId: AttemptId, signal: AbortSignal, options?: IsolationCreateOptions): Promise<IsolatedWorkspace>;
+    /**
+     * Applies a reviewed artifact onto the main workspace; the caller records it as `task/integrated`.
+     * Conflicts are detected by `ContentIdentity` (git blob id through the tree's own filters, ADR-19)
+     * and written content is converted to the main tree's representation (EOL, filters).
+     */
+    integrate(workspace: IsolatedWorkspace, expectedArtifact: Digest, signal: AbortSignal): Promise<void>;
+}
+export interface AttemptHandle {
+    readonly attemptId: AttemptId;
+    readonly taskId: TaskId;
+    readonly completion: Promise<CompletionPacket>;
+    cancel(reason: string): void;
+}
+export interface DispatchOptions {
+    /** A route already decided (and recorded) by the caller, e.g. an independent reviewer model. */
+    readonly route?: RouteDecision;
+    /** Artifact bytes of an earlier attempt that a revise attempt continues from. */
+    readonly seedArtifact?: Uint8Array;
+}
+export interface ReviewOutcome {
+    readonly attemptId: AttemptId;
+    /** The recorded review packet; absent when the reviewer produced no valid report. */
+    readonly review: ReviewPacket | undefined;
+    /** Orchestrator-side check of the review; `invalid` means the review itself cannot be trusted. */
+    readonly verification: {
+        readonly decision: "accept" | "revise" | "block" | "invalid";
+        readonly problems: readonly string[];
+    };
+}
+export interface ReviewHandle {
+    readonly attemptId: AttemptId;
+    readonly result: Promise<ReviewOutcome>;
+    cancel(reason: string): void;
+}
+/** Runs worker attempts from packets with role policy, limits and isolation. Owned by orchestration. */
+export interface WorkerManager {
+    dispatch(packet: TaskContextPacket, signal: AbortSignal, options?: DispatchOptions): Promise<AttemptHandle>;
+    /**
+     * Starts an independent review of `target` (ADR-09): a fresh session, a read-only workspace on the
+     * target's pinned artifact, the completion packet and changed files but never the target's transcript.
+     */
+    dispatchReview(packet: TaskContextPacket, target: AttemptId, signal: AbortSignal, options?: DispatchOptions): Promise<ReviewHandle>;
+    running(): readonly AttemptHandle[];
+}
+export interface RunRequest {
+    readonly goal: string;
+    readonly workspaceRoot: string;
+    readonly policyMode: PolicyMode;
+    readonly headless: boolean;
+    readonly resumeSessionId: SessionId | undefined;
+    readonly budget: {
+        readonly maxWallTimeSeconds: number | undefined;
+        readonly maxCostUsd: number | undefined;
+    };
+}
+export interface RunOutcome {
+    readonly runId: RunId;
+    readonly sessionId: SessionId;
+    readonly status: "succeeded" | "failed" | "cancelled" | "rejected";
+    readonly exitCode: ExitCode;
+    readonly summary: string;
+}
+/**
+ * Drives one run end to end: plan -> approval -> DAG -> workers -> verification -> review -> report.
+ * Owned by orchestration; the CLI composition root is its only caller.
+ */
+export interface Coordinator {
+    run(request: RunRequest, signal: AbortSignal): Promise<RunOutcome>;
+    steer(text: string): void;
+    /** Non-blocking fan-out to renderers; returns an unsubscribe function. */
+    onEvent(listener: (event: RenderEvent) => void): () => void;
+}
+export interface CommandIO {
+    readonly cwd: string;
+    readonly env: Readonly<Record<string, string | undefined>>;
+    readonly renderer: TerminalRenderer;
+    readonly signal: AbortSignal;
+    stdout(text: string): void;
+    stderr(text: string): void;
+}
+/** A runtime sub-command (`syn login`, `syn memory ...`) exported by its owning module and wired by the CLI. */
+export type CommandHandler = (args: readonly string[], io: CommandIO) => Promise<ExitCode>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/harness/contracts/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/harness/contracts/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5H,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5D;;;GAGG;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,6GAA6G;IAC7G,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,sHAAsH;IACtH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAEjH,MAAM,MAAM,kBAAkB,GAC1B;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;CAC9C,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAAE,CAAC;IACrH,yFAAyF;IACzF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,4GAA4G;AAC5G,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACnF;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,mGAAmG;IACnG,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,8GAA8G;IAC9G,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qGAAqG;IACrG,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;IAC/G,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEnI,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;CAC1C;AAED,iHAAiH;AACjH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,uFAAuF;IACvF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;OAIG;IACH,WAAW,CAAC,IAAI,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,yEAA0E,CAAC;AAClH,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,oDAAqD,CAAC;AAE9F;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEhH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,GAAG,kBAAkB,CAAC;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,qFAAqF;IACrF,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACtH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrH,kHAAkH;IAClH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,wFAAwF;IACxF,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,mGAAmG;IACnG,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3I;;;;OAIG;IACH,SAAS,CAAC,SAAS,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvG;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,gGAAgG;IAChG,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IAC1C,kGAAkG;IAClG,QAAQ,CAAC,YAAY,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAC/H;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,wGAAwG;AACxG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5G;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACpI,OAAO,IAAI,SAAS,aAAa,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,SAAS,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;CAC/G;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;IACnE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,gHAAgH;AAChH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC"}

package/dist/harness/contracts/runtime.js

@@ -0,0 +1,13 @@
+/**
+ * Why a writing attempt that wanted a worktree runs in `scoped-dir` instead (ADR-19). A fallback
+ * is recorded in `attempt/started.isolation.fallback` and never leaves an orphan worktree or owner
+ * file behind. `high-risk` writing tasks never fall back; they fail with `sandbox_insufficient`.
+ */
+export const ISOLATION_FALLBACK_REASONS = ["worktree-create-failed", "path-too-long", "git-unavailable"];
+/**
+ * Ignored dependency directories linked (junction/symlink) from the main tree into a worktree so
+ * verification commands find installed dependencies (ADR-19). Linked only when git ignores them,
+ * they exist in the main tree and no owned path overlaps them; they are read-only by policy.
+ */
+export const DEPENDENCY_LINK_DIRECTORIES = ["node_modules", ".venv", "venv", ".tox"];
+//# sourceMappingURL=runtime.js.map

package/dist/harness/contracts/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/harness/contracts/runtime.ts"],"names":[],"mappings":"AA6IA;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,wBAAwB,EAAE,eAAe,EAAE,iBAAiB,CAAU,CAAC;AAGlH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC"}

package/dist/harness/contracts/state.d.ts

@@ -0,0 +1,124 @@
+import { z } from "zod";
+/**
+ * Lifecycle state machines. The tables below are the only legal transitions; a projection that
+ * observes any other pair in the event log reports corruption instead of guessing. Every
+ * transition is recorded as a `*_state_changed` event with actor, reason and previous state.
+ */
+export declare const RUN_STATES: readonly ["created", "running", "waiting_for_approval", "interrupted", "completed", "failed", "cancelled"];
+export declare const PLAN_STATES: readonly ["draft", "proposed", "approved", "rejected", "superseded", "invalidated"];
+export declare const TASK_STATES: readonly ["draft", "awaiting_approval", "ready", "running", "needs_context", "blocked", "interrupted", "failed", "retry_pending", "verifying", "reviewing", "changes_requested", "completed", "cancelled"];
+export declare const ATTEMPT_STATES: readonly ["queued", "running", "waiting_for_approval", "succeeded", "failed", "cancelled", "interrupted"];
+export declare const TOOL_CALL_STATES: readonly ["proposed", "awaiting_approval", "executing", "denied", "succeeded", "failed", "cancelled", "interrupted"];
+export declare const APPROVAL_STATES: readonly ["pending", "allowed", "rejected", "cancelled", "unavailable", "expired", "invalidated"];
+export declare const STEP_STATES: readonly ["open", "settled", "aborted", "errored"];
+export declare const runStateSchema: z.ZodEnum<{
+    completed: "completed";
+    failed: "failed";
+    created: "created";
+    cancelled: "cancelled";
+    running: "running";
+    waiting_for_approval: "waiting_for_approval";
+    interrupted: "interrupted";
+}>;
+export declare const planStateSchema: z.ZodEnum<{
+    proposed: "proposed";
+    rejected: "rejected";
+    superseded: "superseded";
+    invalidated: "invalidated";
+    draft: "draft";
+    approved: "approved";
+}>;
+export declare const taskStateSchema: z.ZodEnum<{
+    completed: "completed";
+    failed: "failed";
+    needs_context: "needs_context";
+    blocked: "blocked";
+    cancelled: "cancelled";
+    running: "running";
+    interrupted: "interrupted";
+    draft: "draft";
+    awaiting_approval: "awaiting_approval";
+    ready: "ready";
+    retry_pending: "retry_pending";
+    verifying: "verifying";
+    reviewing: "reviewing";
+    changes_requested: "changes_requested";
+}>;
+export declare const attemptStateSchema: z.ZodEnum<{
+    failed: "failed";
+    cancelled: "cancelled";
+    running: "running";
+    waiting_for_approval: "waiting_for_approval";
+    interrupted: "interrupted";
+    queued: "queued";
+    succeeded: "succeeded";
+}>;
+export declare const toolCallStateSchema: z.ZodEnum<{
+    proposed: "proposed";
+    failed: "failed";
+    cancelled: "cancelled";
+    interrupted: "interrupted";
+    awaiting_approval: "awaiting_approval";
+    succeeded: "succeeded";
+    denied: "denied";
+    executing: "executing";
+}>;
+export declare const approvalStateSchema: z.ZodEnum<{
+    expired: "expired";
+    cancelled: "cancelled";
+    unavailable: "unavailable";
+    rejected: "rejected";
+    invalidated: "invalidated";
+    pending: "pending";
+    allowed: "allowed";
+}>;
+export declare const stepStateSchema: z.ZodEnum<{
+    open: "open";
+    settled: "settled";
+    aborted: "aborted";
+    errored: "errored";
+}>;
+export type RunState = (typeof RUN_STATES)[number];
+export type PlanState = (typeof PLAN_STATES)[number];
+export type TaskState = (typeof TASK_STATES)[number];
+export type AttemptState = (typeof ATTEMPT_STATES)[number];
+export type ToolCallState = (typeof TOOL_CALL_STATES)[number];
+export type ApprovalState = (typeof APPROVAL_STATES)[number];
+export type StepState = (typeof STEP_STATES)[number];
+interface StateMachines {
+    run: RunState;
+    plan: PlanState;
+    task: TaskState;
+    attempt: AttemptState;
+    toolCall: ToolCallState;
+    approval: ApprovalState;
+    step: StepState;
+}
+export type MachineName = keyof StateMachines;
+export type StateOf<M extends MachineName> = StateMachines[M];
+type TransitionTable<S extends string> = {
+    readonly [From in S]: readonly S[];
+};
+export declare const TRANSITIONS: {
+    readonly [M in MachineName]: TransitionTable<StateMachines[M]>;
+};
+/** States a crash-recovery projection maps an open (non-terminal) entity to on replay. */
+export declare const RECOVERY_STATE: {
+    readonly run: RunState;
+    readonly task: TaskState;
+    readonly attempt: AttemptState;
+    readonly toolCall: ToolCallState;
+    readonly approval: ApprovalState;
+    readonly step: StepState;
+};
+export type TransitionResult = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly reason: "unknown-state" | "terminal-state" | "illegal-transition";
+    readonly message: string;
+};
+export declare function validateTransition<M extends MachineName>(machine: M, from: string, to: string): TransitionResult;
+export declare function isTerminalState<M extends MachineName>(machine: M, state: StateOf<M>): boolean;
+export {};
+//# sourceMappingURL=state.d.ts.map

package/dist/harness/contracts/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/harness/contracts/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,eAAO,MAAM,UAAU,4GAQb,CAAC;AAEX,eAAO,MAAM,WAAW,qFAOd,CAAC;AAEX,eAAO,MAAM,WAAW,4MAed,CAAC;AAEX,eAAO,MAAM,cAAc,2GAQjB,CAAC;AAEX,eAAO,MAAM,gBAAgB,sHASnB,CAAC;AAEX,eAAO,MAAM,eAAe,mGAQlB,CAAC;AAEX,eAAO,MAAM,WAAW,oDAAqD,CAAC;AAE9E,eAAO,MAAM,cAAc;;;;;;;;EAAqB,CAAC;AACjD,eAAO,MAAM,eAAe;;;;;;;EAAsB,CAAC;AACnD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;EAAsB,CAAC;AACnD,eAAO,MAAM,kBAAkB;;;;;;;;EAAyB,CAAC;AACzD,eAAO,MAAM,mBAAmB;;;;;;;;;EAA2B,CAAC;AAC5D,eAAO,MAAM,mBAAmB;;;;;;;;EAA0B,CAAC;AAC3D,eAAO,MAAM,eAAe;;;;;EAAsB,CAAC;AAEnD,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AACrD,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,UAAU,aAAa;IACrB,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,aAAa,CAAC;IACxB,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC;AAC9C,MAAM,MAAM,OAAO,CAAC,CAAC,SAAS,WAAW,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;AAE9D,KAAK,eAAe,CAAC,CAAC,SAAS,MAAM,IAAI;IAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE;CAAE,CAAC;AAEhF,eAAO,MAAM,WAAW,EAAE;IAAE,QAAQ,EAAE,CAAC,IAAI,WAAW,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;CAoEzF,CAAC;AAEF,0FAA0F;AAC1F,eAAO,MAAM,cAAc,EAAE;IAC3B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CAQ1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjI,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,WAAW,EACtD,OAAO,EAAE,CAAC,EACV,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,gBAAgB,CAalB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAG7F"}

package/dist/harness/contracts/state.js

@@ -0,0 +1,172 @@
+import { z } from "zod";
+/**
+ * Lifecycle state machines. The tables below are the only legal transitions; a projection that
+ * observes any other pair in the event log reports corruption instead of guessing. Every
+ * transition is recorded as a `*_state_changed` event with actor, reason and previous state.
+ */
+export const RUN_STATES = [
+    "created",
+    "running",
+    "waiting_for_approval",
+    "interrupted",
+    "completed",
+    "failed",
+    "cancelled",
+];
+export const PLAN_STATES = [
+    "draft",
+    "proposed",
+    "approved",
+    "rejected",
+    "superseded",
+    "invalidated",
+];
+export const TASK_STATES = [
+    "draft",
+    "awaiting_approval",
+    "ready",
+    "running",
+    "needs_context",
+    "blocked",
+    "interrupted",
+    "failed",
+    "retry_pending",
+    "verifying",
+    "reviewing",
+    "changes_requested",
+    "completed",
+    "cancelled",
+];
+export const ATTEMPT_STATES = [
+    "queued",
+    "running",
+    "waiting_for_approval",
+    "succeeded",
+    "failed",
+    "cancelled",
+    "interrupted",
+];
+export const TOOL_CALL_STATES = [
+    "proposed",
+    "awaiting_approval",
+    "executing",
+    "denied",
+    "succeeded",
+    "failed",
+    "cancelled",
+    "interrupted",
+];
+export const APPROVAL_STATES = [
+    "pending",
+    "allowed",
+    "rejected",
+    "cancelled",
+    "unavailable",
+    "expired",
+    "invalidated",
+];
+export const STEP_STATES = ["open", "settled", "aborted", "errored"];
+export const runStateSchema = z.enum(RUN_STATES);
+export const planStateSchema = z.enum(PLAN_STATES);
+export const taskStateSchema = z.enum(TASK_STATES);
+export const attemptStateSchema = z.enum(ATTEMPT_STATES);
+export const toolCallStateSchema = z.enum(TOOL_CALL_STATES);
+export const approvalStateSchema = z.enum(APPROVAL_STATES);
+export const stepStateSchema = z.enum(STEP_STATES);
+export const TRANSITIONS = {
+    run: {
+        created: ["running", "cancelled", "failed"],
+        running: ["waiting_for_approval", "interrupted", "completed", "failed", "cancelled"],
+        waiting_for_approval: ["running", "interrupted", "failed", "cancelled"],
+        interrupted: ["running", "failed", "cancelled"],
+        completed: [],
+        failed: [],
+        cancelled: [],
+    },
+    plan: {
+        draft: ["proposed", "superseded"],
+        proposed: ["approved", "rejected", "superseded"],
+        approved: ["superseded", "invalidated"],
+        rejected: [],
+        superseded: [],
+        invalidated: [],
+    },
+    task: {
+        draft: ["awaiting_approval", "ready", "cancelled"],
+        awaiting_approval: ["ready", "cancelled"],
+        ready: ["running", "blocked", "cancelled"],
+        running: ["needs_context", "blocked", "interrupted", "failed", "verifying", "cancelled"],
+        needs_context: ["running", "ready", "cancelled"],
+        blocked: ["ready", "cancelled"],
+        interrupted: ["ready", "failed", "cancelled"],
+        failed: ["retry_pending", "cancelled"],
+        retry_pending: ["ready", "cancelled"],
+        verifying: ["reviewing", "completed", "failed", "cancelled"],
+        reviewing: ["changes_requested", "completed", "failed", "cancelled"],
+        changes_requested: ["ready", "cancelled"],
+        completed: [],
+        cancelled: [],
+    },
+    attempt: {
+        queued: ["running", "cancelled"],
+        running: ["waiting_for_approval", "succeeded", "failed", "cancelled", "interrupted"],
+        waiting_for_approval: ["running", "failed", "cancelled", "interrupted"],
+        succeeded: [],
+        failed: [],
+        cancelled: [],
+        interrupted: [],
+    },
+    toolCall: {
+        proposed: ["awaiting_approval", "executing", "denied", "cancelled"],
+        awaiting_approval: ["executing", "denied", "cancelled", "interrupted"],
+        executing: ["succeeded", "failed", "cancelled", "interrupted"],
+        denied: [],
+        succeeded: [],
+        failed: [],
+        cancelled: [],
+        interrupted: [],
+    },
+    approval: {
+        pending: ["allowed", "rejected", "cancelled", "unavailable", "expired"],
+        allowed: ["invalidated", "expired"],
+        rejected: [],
+        cancelled: [],
+        unavailable: [],
+        expired: [],
+        invalidated: [],
+    },
+    step: {
+        open: ["settled", "aborted", "errored"],
+        settled: [],
+        aborted: [],
+        errored: [],
+    },
+};
+/** States a crash-recovery projection maps an open (non-terminal) entity to on replay. */
+export const RECOVERY_STATE = {
+    run: "interrupted",
+    task: "interrupted",
+    attempt: "interrupted",
+    toolCall: "interrupted",
+    approval: "cancelled",
+    step: "aborted",
+};
+export function validateTransition(machine, from, to) {
+    const table = TRANSITIONS[machine];
+    const allowed = table[from];
+    if (allowed === undefined || table[to] === undefined) {
+        return { ok: false, reason: "unknown-state", message: `${machine}: unknown state in ${from} -> ${to}` };
+    }
+    if (allowed.length === 0) {
+        return { ok: false, reason: "terminal-state", message: `${machine}: ${from} is terminal` };
+    }
+    if (!allowed.includes(to)) {
+        return { ok: false, reason: "illegal-transition", message: `${machine}: ${from} -> ${to} is not allowed` };
+    }
+    return { ok: true };
+}
+export function isTerminalState(machine, state) {
+    const table = TRANSITIONS[machine];
+    return table[state]?.length === 0;
+}
+//# sourceMappingURL=state.js.map

package/dist/harness/contracts/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/harness/contracts/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,SAAS;IACT,SAAS;IACT,sBAAsB;IACtB,aAAa;IACb,WAAW;IACX,QAAQ;IACR,WAAW;CACH,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,OAAO;IACP,UAAU;IACV,UAAU;IACV,UAAU;IACV,YAAY;IACZ,aAAa;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,OAAO;IACP,mBAAmB;IACnB,OAAO;IACP,SAAS;IACT,eAAe;IACf,SAAS;IACT,aAAa;IACb,QAAQ;IACR,eAAe;IACf,WAAW;IACX,WAAW;IACX,mBAAmB;IACnB,WAAW;IACX,WAAW;CACH,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ;IACR,SAAS;IACT,sBAAsB;IACtB,WAAW;IACX,QAAQ;IACR,WAAW;IACX,aAAa;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU;IACV,mBAAmB;IACnB,WAAW;IACX,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,WAAW;IACX,aAAa;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS;IACT,SAAS;IACT,UAAU;IACV,WAAW;IACX,aAAa;IACb,SAAS;IACT,aAAa;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAE9E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAyBnD,MAAM,CAAC,MAAM,WAAW,GAAuE;IAC7F,GAAG,EAAE;QACH,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;QAC3C,OAAO,EAAE,CAAC,sBAAsB,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC;QACpF,oBAAoB,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC;QACvE,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC;QAC/C,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,EAAE;KACd;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;QACjC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC;QAChD,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACvC,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,EAAE;KAChB;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,CAAC,mBAAmB,EAAE,OAAO,EAAE,WAAW,CAAC;QAClD,iBAAiB,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;QACzC,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;QAC1C,OAAO,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;QACxF,aAAa,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC;QAChD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;QAC/B,WAAW,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;QAC7C,MAAM,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;QACtC,aAAa,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;QACrC,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC;QAC5D,SAAS,EAAE,CAAC,mBAAmB,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC;QACpE,iBAAiB,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;QACzC,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;KACd;IACD,OAAO,EAAE;QACP,MAAM,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;QAChC,OAAO,EAAE,CAAC,sBAAsB,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC;QACpF,oBAAoB,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC;QACvE,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,EAAE;KAChB;IACD,QAAQ,EAAE;QACR,QAAQ,EAAE,CAAC,mBAAmB,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC;QACnE,iBAAiB,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC;QACtE,SAAS,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC;QAC9D,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,EAAE;KAChB;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC;QACvE,OAAO,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC;QACnC,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,EAAE;KAChB;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;QACvC,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;KACZ;CACF,CAAC;AAEF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,cAAc,GAOvB;IACF,GAAG,EAAE,aAAa;IAClB,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,WAAW;IACrB,IAAI,EAAE,SAAS;CAChB,CAAC;AAMF,MAAM,UAAU,kBAAkB,CAChC,OAAU,EACV,IAAY,EACZ,EAAU;IAEV,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAgD,CAAC;IAClF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,sBAAsB,IAAI,OAAO,EAAE,EAAE,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,OAAO,KAAK,IAAI,cAAc,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,OAAO,KAAK,IAAI,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAwB,OAAU,EAAE,KAAiB;IAClF,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAgD,CAAC;IAClF,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC;AACpC,CAAC"}