witnora 0.13.6 → 0.13.8

package/dist/cli.js

@@ -39,7 +39,7 @@ import { runOnboard } from "./onboard.js";
 import { inspectRepository } from "./onboard.js";
 import { renderReleaseEvaluation, runReleaseEvaluation } from "./release-evaluation.js";
 import { runPrivateCapabilityDiscovery } from "./private-discovery.js";
-import { doctorCustomerGateway, initializeCustomerGateway, isGatewayDoctorReady, readManagedCustomerGatewayLogs, renderGatewayDoctor, renderManagedGatewayStatus, restartManagedCustomerGateway, runCustomerGateway, startManagedCustomerGateway, statusManagedCustomerGateway, stopManagedCustomerGateway, } from "./gateway.js";
+import { configureManagedWorkflowHarness, doctorCustomerGateway, initializeCustomerGateway, isGatewayDoctorReady, readManagedCustomerGatewayLogs, renderGatewayDoctor, renderManagedGatewayStatus, restartManagedCustomerGateway, runCustomerGateway, startManagedCustomerGateway, statusManagedCustomerGateway, stopManagedCustomerGateway, } from "./gateway.js";
 import { verifyEvidencePacketV02 } from "./evidence-v02.js";
 process.on("uncaughtException", reportFatalError);
 process.on("unhandledRejection", reportFatalError);
@@ -231,8 +231,25 @@ else if (command === "gateway") {
     else if (action === "run") {
         await runCustomerGateway({ repository: readFlag("--repo") ?? process.cwd(), dir: readFlag("--dir") });
     }
+    else if (action === "workflow-harness") {
+        const workflowIds = process.argv.flatMap((argument, index) => argument === "--workflow" && process.argv[index + 1] ? [process.argv[index + 1]] : []);
+        const evaluatorOrigin = readFlag("--evaluator-origin");
+        const evaluatorCredentialHandle = readFlag("--evaluator-credential-handle");
+        const evaluatorContractSha256 = readFlag("--evaluator-contract-sha256");
+        if (!workflowIds.length || !evaluatorOrigin || !evaluatorCredentialHandle || !evaluatorContractSha256) {
+            throw new Error("Use witnora gateway workflow-harness --workflow <id> --evaluator-origin http://127.0.0.1:<port>/ --evaluator-credential-handle file://... --evaluator-contract-sha256 <sha256>.");
+        }
+        const result = await configureManagedWorkflowHarness({
+            repository: readFlag("--repo") ?? process.cwd(), dir: readFlag("--dir"), workflowIds,
+            evaluatorOrigin, evaluatorCredentialHandle, evaluatorContractSha256,
+            pollIntervalMs: readFlag("--poll-ms") ? Number(readFlag("--poll-ms")) : undefined,
+            maxConcurrency: readFlag("--max-concurrency") ? Number(readFlag("--max-concurrency")) : undefined,
+            force: readBoolFlag("--force"),
+        });
+        process.stdout.write(`Configured the Managed Workflow Harness for ${result.config.workflowIds.length} exact Workflow Contract(s).\nConfig: ${result.path}\nRestart the managed Gateway to activate it.\n`);
+    }
     else {
-        throw new Error("Use witnora gateway init|doctor|start|status|logs|restart|stop|run.");
+        throw new Error("Use witnora gateway init|doctor|start|status|logs|restart|stop|run|workflow-harness.");
     }
 }
 else if (command === "discover") {

package/dist/command-help.js

@@ -65,6 +65,8 @@ Options:
   witnora gateway restart
   witnora gateway stop
   witnora gateway run
+  witnora gateway workflow-harness --workflow <id> --evaluator-origin http://127.0.0.1:<port>/ \\
+    --evaluator-credential-handle file://... --evaluator-contract-sha256 <sha256>
 
 Initializes and manages a customer-owned, metadata-only collector beside the Agent.
 The browser approval issues a collector-scoped credential; no API key is copied into
@@ -86,6 +88,12 @@ Options:
   --force                 Replace an existing reviewed local setup
   --json                  JSON status output
   --lines <count>         Number of recent log lines (default: 100)
+  --workflow <id>         Exact active Workflow Contract (repeatable)
+  --evaluator-origin      Literal-loopback customer evaluator origin
+  --evaluator-credential-handle  Opaque file:// bearer credential reference
+  --evaluator-contract-sha256    Pinned evaluator contract digest
+  --poll-ms <milliseconds>       Workflow plan interval (1000-60000)
+  --max-concurrency <count>      Bounded ready evaluations (1-16)
 `;
     if (command === "design-partner")
         return `Usage:

package/dist/gateway.js

@@ -13,6 +13,7 @@ import { generateRuntimeSandboxKit, LOCAL_SANDBOX_ADAPTER_ID, LOCAL_SANDBOX_ADAP
 const CONFIG_SCHEMA = "witnora.customer_gateway_setup.v0.1";
 const SECRETS_SCHEMA = "witnora.customer_gateway_local_secrets.v0.1";
 const RUNTIME_SCHEMA = "witnora.managed_gateway_runtime.v0.1";
+const WORKFLOW_HARNESS_SCHEMA = "witnora.managed_workflow_harness.v0.1";
 export async function initializeCustomerGateway(options) {
     const repository = resolve(options.repository ?? process.cwd());
     const outDir = resolve(repository, options.outDir ?? ".witnora/gateway");
@@ -468,6 +469,10 @@ export async function runCustomerGateway(options) {
         throw new Error("The saved Gateway credential does not match gateway.json. Run gateway init again.");
     }
     const dataDirectory = resolve(directory, config.storageDirectory);
+    const workflowHarnessConfigPath = join(directory, "workflow-harness.json");
+    const workflowHarnessConfig = await exists(workflowHarnessConfigPath)
+        ? parseManagedWorkflowHarnessConfig(await readFile(workflowHarnessConfigPath, "utf8"))
+        : undefined;
     const keyRingPath = join(dataDirectory, "source-keys.json");
     const keyRing = await (await exists(keyRingPath)
         ? CustomerSourceKeyRing.open(keyRingPath)
@@ -489,6 +494,16 @@ export async function runCustomerGateway(options) {
                 FileActionCheckpointStore: (await durableWorker).FileActionCheckpointStore,
             })
             : undefined;
+        const workflowHarness = workflowHarnessConfig
+            ? await createConfiguredWorkflowHarness({
+                directory,
+                projectId: config.projectId,
+                server: config.server,
+                apiKey: connection.apiKey,
+                config: workflowHarnessConfig,
+                managed: await configManagedWorkflowHarnessImport(),
+            })
+            : undefined;
         actionWorker?.start();
         const gateway = await startCustomerOwnedCollectorGateway({
             client: new RemoteCollectorClient({ baseUrl: connection.server, projectId: connection.projectId, apiKey: connection.apiKey }),
@@ -533,12 +548,15 @@ export async function runCustomerGateway(options) {
                         } } : {}),
                 } } : {}),
         });
+        workflowHarness?.start();
         process.stdout.write(`Witnora customer-owned Gateway listening on ${gateway.baseUrl}\n`);
         process.stdout.write(config.runtimeWorker
             ? "Runtime worker: READY. Approved exact configured actions execute automatically, then use the separate read-only probe and Hosted signed receipt.\n"
             : "Evidence ceiling: RECORDED. No exact target adapter and separate outcome probe are configured, so runtime writes remain fail-closed.\n");
+        if (workflowHarness)
+            process.stdout.write("Managed Workflow Harness: CONFIGURED. Only authority-ready Replay and no-write Shadow evaluations will be sent to the pinned customer evaluator.\n");
         for (const signal of ["SIGINT", "SIGTERM"]) {
-            process.once(signal, () => void Promise.allSettled([gateway.close(), ...(sandboxFixture ? [sandboxFixture.close()] : [])]).finally(() => process.exit(0)));
+            process.once(signal, () => void Promise.allSettled([gateway.close(), ...(workflowHarness ? [workflowHarness.close()] : []), ...(sandboxFixture ? [sandboxFixture.close()] : [])]).finally(() => process.exit(0)));
         }
     }
     catch (error) {
@@ -546,6 +564,75 @@ export async function runCustomerGateway(options) {
         throw error;
     }
 }
+function configManagedWorkflowHarnessImport() {
+    return import(new URL("./vendor/onegent-runtime/managed-workflow-harness.js", import.meta.url).href);
+}
+export async function createConfiguredWorkflowHarness(input) {
+    const requestFetch = input.fetch ?? fetch;
+    const credential = await readSecretProviderHandle(input.config.evaluatorCredentialHandle);
+    const health = await requestFetch(`${input.config.evaluatorOrigin}/healthz`, {
+        headers: { authorization: `Bearer ${credential}` },
+        redirect: "error",
+        signal: AbortSignal.timeout(2_000),
+    });
+    const healthBody = await health.json().catch(() => ({}));
+    if (!health.ok
+        || healthBody.schemaVersion !== "witnora.business_task_evaluator.v0.1"
+        || healthBody.contractSha256 !== input.config.evaluatorContractSha256) {
+        throw new Error("Managed Workflow evaluator health did not match its pinned local contract.");
+    }
+    const hosted = input.managed.createManagedWorkflowHostedClient({
+        baseUrl: input.server,
+        projectId: input.projectId,
+        apiKey: input.apiKey,
+        workflowIds: input.config.workflowIds,
+        fetch: requestFetch,
+    });
+    const worker = new input.managed.ManagedBusinessWorkflowHarness({
+        client: hosted,
+        checkpoints: new input.managed.FileWorkflowEvaluationCheckpointStore(join(input.directory, "data", "workflow-evaluations")),
+        maxConcurrency: input.config.maxConcurrency,
+        evaluate: async ({ task, evaluation }) => {
+            const response = await requestFetch(`${input.config.evaluatorOrigin}/v1/evaluate`, {
+                method: "POST",
+                headers: { authorization: `Bearer ${credential}`, "content-type": "application/json" },
+                body: JSON.stringify({ schemaVersion: "witnora.business_task_evaluation_request.v0.1", task, evaluation }),
+                redirect: "error",
+                signal: AbortSignal.timeout(120_000),
+            });
+            const body = await response.json().catch(() => ({}));
+            if (!response.ok || !body.report || typeof body.report !== "object" || Array.isArray(body.report)) {
+                throw new Error(`Managed Workflow evaluator failed (${response.status}).`);
+            }
+            return body.report;
+        },
+    });
+    let timer;
+    let closing = false;
+    const tick = async () => {
+        const result = await worker.tick();
+        if ((result.evaluationsFailed ?? 0) > 0) {
+            process.stderr.write(`Managed Workflow Harness stopped ${result.evaluationsFailed} evaluation(s) fail-closed. ${result.limitations?.[0] ?? "Inspect the customer evaluator and retry."}\n`);
+        }
+        return result;
+    };
+    return {
+        start() {
+            if (timer || closing)
+                return;
+            void tick().catch((error) => process.stderr.write(`Managed Workflow Harness tick failed: ${error instanceof Error ? error.message : "unknown error"}\n`));
+            timer = setInterval(() => void tick().catch((error) => process.stderr.write(`Managed Workflow Harness tick failed: ${error instanceof Error ? error.message : "unknown error"}\n`)), input.config.pollIntervalMs ?? 5_000);
+            timer.unref?.();
+        },
+        async close() {
+            closing = true;
+            if (timer)
+                clearInterval(timer);
+            timer = undefined;
+        },
+        tick,
+    };
+}
 async function runtimeSandboxFixtureReady(config) {
     try {
         if (config.adapterId !== LOCAL_SANDBOX_ADAPTER_ID || !config.sandboxOrigin || !config.probeTargetCredentialHandle || !config.fixtureContractSha256)
@@ -634,7 +721,7 @@ export async function createConfiguredRuntimeActionWorker(input) {
     const runtime = await adapterModule.createWitnoraRuntimeAdapter(adapterContext);
     await inspectIsolatedOutcomeProbe(isolatedProbeConfig);
     if (runtime.id !== workerConfig.adapterId || runtime.version !== workerConfig.adapterVersion || runtime.reconcileReadOnly !== true
-        || typeof runtime.prepareClaim !== "function" || typeof runtime.execute !== "function" || typeof runtime.reconcile !== "function") {
+        || typeof runtime.prepareClaim !== "function" || typeof runtime.execute !== "function" || typeof runtime.reconcile !== "function" || typeof runtime.submitEvidence !== "function") {
         throw new Error("Runtime adapter does not match the exact configured id/version or read-only reconciliation contract.");
     }
     if (workerConfig.adapterId === LOCAL_SANDBOX_ADAPTER_ID && JSON.stringify(runtime.capabilities) !== JSON.stringify({
@@ -658,7 +745,7 @@ export async function createConfiguredRuntimeActionWorker(input) {
             listActionReceipts: async (actionId) => (await primary(`actions/${encodeURIComponent(actionId)}/receipts`)).receipts ?? [],
             claimExecutionGrant: (executionGrantId, claim, idempotencyKey) => claimHostedExecutionGrant(input.connection, requestFetch, executionGrantId, claim, idempotencyKey),
         },
-        runtime: { reconcileReadOnly: true, prepareClaim: runtime.prepareClaim, execute: runtime.execute, reconcile: runtime.reconcile },
+        runtime: { reconcileReadOnly: true, prepareClaim: runtime.prepareClaim, execute: runtime.execute, reconcile: runtime.reconcile, submitEvidence: runtime.submitEvidence },
         probe: {
             id: workerConfig.probeId,
             credentialHandle: workerConfig.probeTargetCredentialHandle,
@@ -936,6 +1023,63 @@ function parseConfig(raw) {
     }
     return config;
 }
+export function parseManagedWorkflowHarnessConfig(raw) {
+    const value = JSON.parse(raw);
+    if (value.schemaVersion !== WORKFLOW_HARNESS_SCHEMA
+        || value.enabled !== true
+        || !literalLoopbackOrigin(value.evaluatorOrigin)
+        || !credentialHandle(value.evaluatorCredentialHandle ?? "")
+        || !validDigest(value.evaluatorContractSha256 ?? "")
+        || !Array.isArray(value.workflowIds)
+        || !value.workflowIds.length
+        || value.workflowIds.length > 100
+        || new Set(value.workflowIds).size !== value.workflowIds.length
+        || value.workflowIds.some((id) => typeof id !== "string" || !/^[A-Za-z0-9._:-]{1,200}$/.test(id))) {
+        throw new Error("workflow-harness.json requires an enabled, digest-pinned literal-loopback evaluator and a local credential handle.");
+    }
+    if (value.pollIntervalMs !== undefined && (!Number.isInteger(value.pollIntervalMs) || value.pollIntervalMs < 1_000 || value.pollIntervalMs > 60_000)) {
+        throw new Error("workflow-harness.json pollIntervalMs must be between 1000 and 60000.");
+    }
+    if (value.maxConcurrency !== undefined && (!Number.isInteger(value.maxConcurrency) || value.maxConcurrency < 1 || value.maxConcurrency > 16)) {
+        throw new Error("workflow-harness.json maxConcurrency must be between 1 and 16.");
+    }
+    return value;
+}
+export async function configureManagedWorkflowHarness(options) {
+    const directory = resolve(options.repository ?? process.cwd(), options.dir ?? ".witnora/gateway");
+    if (!await exists(join(directory, "gateway.json")))
+        throw new Error("Initialize the customer-owned Gateway before configuring its Workflow Harness.");
+    const config = parseManagedWorkflowHarnessConfig(JSON.stringify({
+        schemaVersion: WORKFLOW_HARNESS_SCHEMA,
+        enabled: true,
+        evaluatorOrigin: options.evaluatorOrigin,
+        evaluatorCredentialHandle: options.evaluatorCredentialHandle,
+        evaluatorContractSha256: options.evaluatorContractSha256,
+        workflowIds: options.workflowIds,
+        ...(options.pollIntervalMs === undefined ? {} : { pollIntervalMs: options.pollIntervalMs }),
+        ...(options.maxConcurrency === undefined ? {} : { maxConcurrency: options.maxConcurrency }),
+    }));
+    const path = join(directory, "workflow-harness.json");
+    await writeExclusive(path, `${JSON.stringify(config, null, 2)}\n`, options.force ?? false, 0o600);
+    return { path, config };
+}
+function literalLoopbackOrigin(value) {
+    if (typeof value !== "string")
+        return false;
+    try {
+        const url = new URL(value);
+        return url.protocol === "http:"
+            && (url.hostname === "127.0.0.1" || url.hostname === "[::1]")
+            && url.username === ""
+            && url.password === ""
+            && url.pathname === "/"
+            && url.search === ""
+            && url.hash === "";
+    }
+    catch {
+        return false;
+    }
+}
 function validateRuntimeWorkerConfig(value) {
     if (value.enabled !== true || !value.adapterModulePath || !/^[a-f0-9]{64}$/.test(value.adapterModuleSha256)
         || !value.probeModulePath || !/^[a-f0-9]{64}$/.test(value.probeModuleSha256)

package/dist/internal/control-client/durable-action-worker.d.ts

@@ -1,4 +1,4 @@
-export type DurableActionPhase = "TRACKED" | "WAITING_APPROVAL" | "DENIED" | "EXPIRED" | "BLOCKED" | "GRANT_ISSUED" | "EXECUTION_STARTED" | "UNKNOWN_RESULT" | "EXECUTED" | "PROBED" | "COMPLETED";
+export type DurableActionPhase = "TRACKED" | "WAITING_APPROVAL" | "DENIED" | "EXPIRED" | "BLOCKED" | "GRANT_ISSUED" | "EXECUTION_STARTED" | "UNKNOWN_RESULT" | "EXECUTED" | "PROBED" | "EVIDENCE_SUBMITTED" | "COMPLETED";
 export interface DurableWorkerProposal {
     externalId: string;
     actionType: string;
@@ -25,6 +25,9 @@ export interface DurableWorkerAction {
     targetSystem: string;
     expectedState?: Record<string, unknown>;
     approvalExpiresAt?: string;
+    verificationSuccess?: boolean;
+    receiptId?: string;
+    receiptSignatureCount?: number;
     assuranceContext?: {
         executionIntent?: {
             adapterId: string;
@@ -118,6 +121,8 @@ export interface DurableApprovedActionWorkerOptions {
         verifyAction(actionId: string, input: Record<string, unknown>, idempotencyKey: string): Promise<{
             status: string;
             verificationSuccess?: boolean;
+            receiptId?: string;
+            receiptSignatureCount?: number;
         }>;
         listActionReceipts(actionId: string): Promise<Array<{
             id: string;
@@ -147,6 +152,14 @@ export interface DurableApprovedActionWorkerOptions {
             proposal: DurableWorkerProposal;
             grant: DurableWorkerGrant;
         }): Promise<DurableWorkerExecutionResult | undefined>;
+        submitEvidence(input: {
+            action: DurableWorkerAction;
+            proposal: DurableWorkerProposal;
+            grant: DurableWorkerGrant;
+            hostedReservation: DurableWorkerHostedReservation;
+            execution: DurableWorkerExecutionResult;
+            observation: DurableWorkerObservation;
+        }): Promise<void>;
     };
     probe: {
         id: string;

package/dist/internal/control-client/durable-action-worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"durable-action-worker.d.ts","sourceRoot":"","sources":["../../../../agentcert-sdk/src/durable-action-worker.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,kBAAkB,GAClB,QAAQ,GACR,SAAS,GACT,SAAS,GACT,cAAc,GACd,mBAAmB,GACnB,gBAAgB,GAChB,UAAU,GACV,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,eAAe,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,MAAM,CAAC;QACjC,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,kBAAkB,GAAG,eAAe,GAAG,UAAU,GAAG,MAAM,CAAC;IACzI,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE;YACrC,SAAS,EAAE,MAAM,CAAC;YAClB,wBAAwB,EAAE,MAAM,CAAC;YACjC,cAAc,EAAE,MAAM,EAAE,CAAC;YACzB,gBAAgB,EAAE,MAAM,CAAC;YACzB,eAAe,EAAE,MAAM,CAAC;YACxB,wBAAwB,EAAE,MAAM,CAAC;YACjC,sBAAsB,EAAE,MAAM,CAAC;YAC/B,YAAY,EAAE,MAAM,CAAC;YACrB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAA;KAAE,CAAC;IACJ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACrE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC7C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,iBAAiB,EAAE,YAAY,GAAG,WAAW,GAAG,kBAAkB,GAAG,SAAS,GAAG,gBAAgB,GAAG,0BAA0B,CAAC;IAC/H,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,wCAAwC,CAAC;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,SAAS,CAAC,EAAE,4BAA4B,CAAC;IACzC,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,8BAA8B,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC3C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvH;AAED,qBAAa,yBAA0B,YAAW,qBAAqB;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,SAAS,EAAE,MAAM;IAEvB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;IAQpE,IAAI,CAAC,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYxD,IAAI,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAQ1C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAmB3H,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,SAAS;CAIlB;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,KAAK,EAAE,qBAAqB,CAAC;IAC7B,MAAM,EAAE;QACN,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC1D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC3H,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACnJ,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,YAAY,CAAC,EAAE,OAAO,EAAE,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC,CAAC;QAC7G,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,QAAQ,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACvI,CAAC;IACF,OAAO,EAAE;QACP,iBAAiB,EAAE,IAAI,CAAC;QACxB,YAAY,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAA;SAAE,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC1J,OAAO,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAC;YAAC,iBAAiB,EAAE,8BAA8B,CAAA;SAAE,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACtM,SAAS,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAA;SAAE,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;KAClK,CAAC;IACF,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,IAAI,CAAC;QACf,OAAO,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAC;YAAC,SAAS,EAAE,4BAA4B,CAAA;SAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;KACzL,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,2CAA2C,CAAC;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,2BAA2B;IAQ1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAPpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuD;IAC9E,OAAO,CAAC,KAAK,CAAC,CAAiC;IAC/C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;gBAEZ,OAAO,EAAE,kCAAkC;IAUlE,KAAK,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,qBAAqB,CAAA;KAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAgB3G,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAOxD,KAAK,IAAI,IAAI;IAcb,IAAI,IAAI,IAAI;IAEN,MAAM,IAAI,OAAO,CAAC,yBAAyB,CAAC;YAapC,QAAQ;YA8GR,OAAO;CAMtB;AA2DD,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAY3F"}
+{"version":3,"file":"durable-action-worker.d.ts","sourceRoot":"","sources":["../../../../agentcert-sdk/src/durable-action-worker.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,kBAAkB,GAClB,QAAQ,GACR,SAAS,GACT,SAAS,GACT,cAAc,GACd,mBAAmB,GACnB,gBAAgB,GAChB,UAAU,GACV,QAAQ,GACR,oBAAoB,GACpB,WAAW,CAAC;AAEhB,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,eAAe,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,MAAM,CAAC;QACjC,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,kBAAkB,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,kBAAkB,GAAG,eAAe,GAAG,UAAU,GAAG,MAAM,CAAC;IACzI,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE;YACrC,SAAS,EAAE,MAAM,CAAC;YAClB,wBAAwB,EAAE,MAAM,CAAC;YACjC,cAAc,EAAE,MAAM,EAAE,CAAC;YACzB,gBAAgB,EAAE,MAAM,CAAC;YACzB,eAAe,EAAE,MAAM,CAAC;YACxB,wBAAwB,EAAE,MAAM,CAAC;YACjC,sBAAsB,EAAE,MAAM,CAAC;YAC/B,YAAY,EAAE,MAAM,CAAC;YACrB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAA;KAAE,CAAC;IACJ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACrE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC7C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,iBAAiB,EAAE,YAAY,GAAG,WAAW,GAAG,kBAAkB,GAAG,SAAS,GAAG,gBAAgB,GAAG,0BAA0B,CAAC;IAC/H,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,wCAAwC,CAAC;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,SAAS,CAAC,EAAE,4BAA4B,CAAC;IACzC,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,8BAA8B,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC3C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvH;AAED,qBAAa,yBAA0B,YAAW,qBAAqB;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,SAAS,EAAE,MAAM;IAEvB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;IAQpE,IAAI,CAAC,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYxD,IAAI,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAQ1C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAmB3H,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,SAAS;CAIlB;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,KAAK,EAAE,qBAAqB,CAAC;IAC7B,MAAM,EAAE;QACN,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC1D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC3H,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACvM,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,YAAY,CAAC,EAAE,OAAO,EAAE,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC,CAAC;QAC7G,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,QAAQ,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACvI,CAAC;IACF,OAAO,EAAE;QACP,iBAAiB,EAAE,IAAI,CAAC;QACxB,YAAY,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAA;SAAE,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC1J,OAAO,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAC;YAAC,iBAAiB,EAAE,8BAA8B,CAAA;SAAE,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACtM,SAAS,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAA;SAAE,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;QACjK,cAAc,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAC;YAAC,iBAAiB,EAAE,8BAA8B,CAAC;YAAC,SAAS,EAAE,4BAA4B,CAAC;YAAC,WAAW,EAAE,wBAAwB,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACtQ,CAAC;IACF,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,IAAI,CAAC;QACf,OAAO,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,mBAAmB,CAAC;YAAC,QAAQ,EAAE,qBAAqB,CAAC;YAAC,KAAK,EAAE,kBAAkB,CAAC;YAAC,SAAS,EAAE,4BAA4B,CAAA;SAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;KACzL,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,2CAA2C,CAAC;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,2BAA2B;IAQ1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAPpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuD;IAC9E,OAAO,CAAC,KAAK,CAAC,CAAiC;IAC/C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;gBAEZ,OAAO,EAAE,kCAAkC;IAUlE,KAAK,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,qBAAqB,CAAA;KAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAgB3G,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAOxD,KAAK,IAAI,IAAI;IAcb,IAAI,IAAI,IAAI;IAEN,MAAM,IAAI,OAAO,CAAC,yBAAyB,CAAC;YAapC,QAAQ;YAgIR,OAAO;CAMtB;AA2DD,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAY3F"}

package/dist/internal/control-client/durable-action-worker.js

@@ -160,6 +160,9 @@ export class DurableApprovedActionWorker {
         if (!exactActionMatches(action, actionId, checkpoint.proposal, this.options.config.adapterId, this.options.config.adapterVersion)) {
             return this.persist(checkpoint, "BLOCKED", { limitation: "Hosted action no longer matches the exact locally configured action, adapter, or build binding." });
         }
+        if (action.status === "VERIFIED" && action.verificationSuccess === true && action.receiptId && (action.receiptSignatureCount ?? 0) > 0) {
+            return this.persist(checkpoint, "COMPLETED", { receiptId: action.receiptId, limitation: undefined });
+        }
         if ((checkpoint.phase === "EXECUTION_STARTED" || checkpoint.phase === "UNKNOWN_RESULT") && checkpoint.grant) {
             if (!exactGrantMatches(checkpoint.grant, actionId, checkpoint.proposal, this.options.config.runtimeIdentityId)) {
                 return this.persist(checkpoint, "BLOCKED", { limitation: "Hosted grant does not match the exact approved local action binding." });
@@ -261,6 +264,19 @@ export class DurableApprovedActionWorker {
                 throw new Error("Outcome observation did not come from the exact configured probe.");
             checkpoint = await this.persist(checkpoint, "PROBED", { observation });
         }
+        if (checkpoint.phase !== "EVIDENCE_SUBMITTED") {
+            if (!checkpoint.hostedReservation)
+                throw new Error("Durable execution evidence requires the bound Hosted reservation.");
+            await this.options.runtime.submitEvidence({
+                action,
+                proposal: checkpoint.proposal,
+                grant,
+                hostedReservation: checkpoint.hostedReservation,
+                execution: checkpoint.execution,
+                observation: checkpoint.observation,
+            });
+            checkpoint = await this.persist(checkpoint, "EVIDENCE_SUBMITTED");
+        }
         const verified = await this.options.hosted.verifyAction(actionId, {
             ...checkpoint.observation,
             executionGrantId: grant.id,
@@ -268,6 +284,9 @@ export class DurableApprovedActionWorker {
         }, `durable-worker:verify:${actionId}:${checkpoint.execution.executionSessionId}`);
         if (verified.status !== "VERIFIED" || verified.verificationSuccess !== true)
             throw new Error("Hosted outcome verification did not establish the expected result.");
+        if (verified.receiptId && (verified.receiptSignatureCount ?? 0) > 0) {
+            return this.persist(checkpoint, "COMPLETED", { receiptId: verified.receiptId });
+        }
         const receipts = await this.options.hosted.listActionReceipts(actionId);
         const signed = receipts.find((item) => Array.isArray(item.receipt?.signatureSet) && item.receipt.signatureSet.length > 0);
         if (!signed)

package/dist/runtime-sandbox-kit.js

@@ -221,9 +221,230 @@ export function createWitnoraRuntimeAdapter(context) {
       await persistExecution(context.storageDirectory, action.id, execution);
       return execution;
     },
+    async submitEvidence({ action, proposal, grant, hostedReservation, execution, observation }) {
+      const audit = await readCommittedAudit(reconcileCredential.handle, action.id, execution.executionSessionId);
+      const bundle = await loadOrCreateEvidenceBundle({
+        storageDirectory: context.storageDirectory,
+        action,
+        proposal,
+        grant,
+        hostedReservation,
+        execution,
+        observation,
+        audit,
+        runtime,
+        adapterId: context.adapterId,
+        adapterVersion: context.adapterVersion,
+        signingKeyHandle: signingKey.handle,
+        writeCredentialHandle: writeCredential.handle,
+      });
+      await context.hosted.request("execution-attempts/" + encodeURIComponent(execution.executionSessionId) + "/phase", {
+        method: "POST",
+        body: { executionSessionId: execution.executionSessionId, runtimeClaim: hostedReservation.claim, phase: "RECONCILED_SUCCESS", targetOperationId: execution.targetOperationId },
+      });
+      await context.hosted.request("execution-sessions/" + encodeURIComponent(execution.executionSessionId) + "/evidence", { method: "POST", body: bundle });
+    },
+  };
+}
+
+async function readCommittedAudit(handle, actionId, executionSessionId) {
+  const credential = await readSecretHandle(handle);
+  const response = await fetch("${sandboxOrigin}/audit/actions/" + encodeURIComponent(actionId) + "/sessions/" + encodeURIComponent(executionSessionId), { redirect: "error", headers: { "x-sandbox-audit-credential": credential } });
+  const audit = await response.json().catch(() => ({}));
+  if (!response.ok || audit.phase !== "COMMITTED" || audit.actionId !== actionId || audit.executionSessionId !== executionSessionId || typeof audit.transactionId !== "string") throw new Error("sandbox_evidence_audit_invalid");
+  return audit;
+}
+
+async function loadOrCreateEvidenceBundle(input) {
+  const path = join(input.storageDirectory, "evidence-bundles", safeId(input.action.id) + ".json");
+  try { return JSON.parse(await readFile(path, "utf8")); }
+  catch (error) { if (error?.code !== "ENOENT") throw error; }
+  const bundle = await createEvidenceBundle(input);
+  await mkdir(dirname(path), { recursive: true });
+  const temporary = path + "." + randomUUID() + ".tmp";
+  await writeFile(temporary, JSON.stringify(bundle) + "\\n", { mode: 0o600 });
+  await rename(temporary, path);
+  return bundle;
+}
+
+async function createEvidenceBundle(input) {
+  const grant = exactObject(input.grant?.grant, "grant");
+  const grantPayload = exactObject(grant.payload, "grant.payload");
+  const runtimeClaim = exactObject(input.hostedReservation.claim, "runtimeClaim");
+  const claimedAt = String(exactObject(runtimeClaim.payload, "runtimeClaim.payload").claimedAt);
+  const completedAt = new Date().toISOString();
+  const privateKeyPem = await readSecretHandle(input.signingKeyHandle);
+  const signRuntime = (payload) => {
+    const payloadSha256 = sha256(canonicalJson(payload));
+    return { payload, payloadSha256, signature: { algorithm: "Ed25519", keyId: input.runtime.keyId, signature: sign(null, Buffer.from(payloadSha256, "hex"), createPrivateKey(privateKeyPem)).toString("base64url") } };
+  };
+  const credentialLeaseId = randomUUID();
+  const eventChainGenesisHash = sha256(canonicalJson({ executionSessionId: input.execution.executionSessionId, executionGrantDigest: grant.payloadSha256, runtimeIdentityId: input.runtime.id }));
+  const executionSession = signRuntime({
+    protocolVersion: "agentcert.browser_enforcement.v0.2",
+    objectType: "ExecutionSessionAttestation",
+    signatureContext: "onegent.execution-session.v0.2",
+    executionSessionId: input.execution.executionSessionId,
+    executionGrantId: input.grant.id,
+    executionGrantDigest: grant.payloadSha256,
+    actionId: input.action.id,
+    actionIntentDigest: grantPayload.actionIntentDigest,
+    runtimeIdentityId: input.runtime.id,
+    runtimeKeyId: input.runtime.keyId,
+    adapterId: input.adapterId,
+    adapterVersion: input.adapterVersion,
+    browserContextIdDigest: sha256("durable-action:" + input.execution.executionSessionId),
+    credentialLeaseId,
+    credentialIsolationMode: "RUNTIME_INJECTED_CREDENTIAL",
+    targetAudience: grantPayload.targetAudience,
+    allowedOrigins: grantPayload.allowedOrigins,
+    startedAt: claimedAt,
+    sessionExpiresAt: grantPayload.expiresAt,
+    eventChainGenesisHash,
+  });
+  const events = [];
+  let previousEventHash = eventChainGenesisHash;
+  const append = (eventType, redactedPayload = {}) => {
+    const payload = {
+      protocolVersion: "agentcert.browser_enforcement.v0.2",
+      objectType: "ExecutionEvent",
+      signatureContext: "onegent.execution-event.v0.2",
+      eventId: randomUUID(),
+      actionId: input.action.id,
+      executionSessionId: input.execution.executionSessionId,
+      sequence: events.length + 1,
+      previousEventHash,
+      eventType,
+      sourceIdentityId: input.runtime.id,
+      sourceTimestamp: completedAt,
+      receivedTimestamp: completedAt,
+      payloadDigest: sha256(canonicalJson(redactedPayload)),
+      redactedPayload,
+    };
+    const signed = signRuntime(payload);
+    previousEventHash = signed.payloadSha256;
+    events.push(signed);
+  };
+  append("EXECUTION_GRANT_VERIFIED", { executionGrantDigest: grant.payloadSha256 });
+  append("EXECUTION_GRANT_CLAIMED", { executionGrantId: input.grant.id, claimDigest: runtimeClaim.payloadSha256 });
+  append("EXECUTION_SESSION_STARTED", { executionSessionDigest: executionSession.payloadSha256 });
+  append("CREDENTIAL_LEASE_ACTIVATED", { credentialLeaseId, isolationMode: "RUNTIME_INJECTED_CREDENTIAL" });
+  append("BROWSER_CONTEXT_CREATED", { browserContextIdDigest: executionSession.payload.browserContextIdDigest });
+  append("TARGET_NAVIGATION", { targetAudience: grantPayload.targetAudience, origin: grantPayload.allowedOrigins[0] });
+  append("AUTHORIZED_ACTION_PREPARED", { operation: grantPayload.allowedOperation, resource: grantPayload.allowedResource });
+  append("FINAL_PARAMETERS_VERIFIED", { parametersDigest: grantPayload.parametersDigest });
+  append("HIGH_RISK_SUBMISSION_STARTED", { actionId: input.action.id });
+  append("HIGH_RISK_SUBMISSION_COMPLETED", { targetSystem: input.action.targetSystem });
+  append("TARGET_RESPONSE_OBSERVED", { observedStateDigest: sha256(canonicalJson(input.execution.observedState ?? {})) });
+  append("OUTCOME_PROBE_STARTED", { probe: input.observation.observationSource });
+  append("OUTCOME_OBSERVED", { source: input.observation.observationSource, observedStateDigest: sha256(canonicalJson(input.observation.observedState)) });
+  append("CREDENTIAL_LEASE_REVOKED", { credentialLeaseId, revokedAt: completedAt, status: "REVOKED" });
+  const expectedState = input.action.expectedState ?? input.proposal.expectedState ?? {};
+  const outcomeResult = subsetMatches(expectedState, input.observation.observedState) ? "SATISFIED" : "NOT_SATISFIED";
+  const outcomeAttestation = signRuntime({
+    protocolVersion: "agentcert.browser_enforcement.v0.2",
+    objectType: "OutcomeAttestation",
+    signatureContext: "onegent.outcome-attestation.v0.2",
+    outcomeAttestationId: randomUUID(),
+    actionId: input.action.id,
+    executionSessionId: input.execution.executionSessionId,
+    executionGrantId: input.grant.id,
+    predicateId: "expected_state_subset",
+    predicateVersion: "1",
+    predicateDigest: grantPayload.outcomePredicateDigest,
+    expectedStateDigest: sha256(canonicalJson(expectedState)),
+    observedStateDigest: sha256(canonicalJson(input.observation.observedState)),
+    result: outcomeResult,
+    observationMethod: input.observation.observationMethod,
+    observationIndependence: "SEPARATE_READ_ONLY_PROBE",
+    observationSource: input.observation.observationSource,
+    sourceEvidenceDigest: sha256(canonicalJson(input.observation)),
+    evidenceReferences: ["target-audit:" + input.audit.transactionId],
+    collectorIdentityId: input.runtime.id,
+    collectorKeyId: input.runtime.keyId,
+    collectedAt: completedAt,
+    confidence: input.observation.confidence ?? 1,
+    limitations: ["The generated probe reads a separate localhost read credential; it is not an Independent Review."],
+  });
+  append("EXECUTION_SESSION_COMPLETED", { outcomeAttestationDigest: outcomeAttestation.payloadSha256 });
+  const credentialReferenceDigest = sha256(input.writeCredentialHandle);
+  const targetEvent = {
+    targetEventId: input.audit.transactionId,
+    actionId: input.action.id,
+    executionSessionId: input.execution.executionSessionId,
+    occurredAt: input.audit.at ?? completedAt,
+    operation: grantPayload.allowedOperation,
+    resource: grantPayload.allowedResource,
+    parametersDigest: grantPayload.parametersDigest,
+    credentialReferenceDigest,
+  };
+  const reconciliationReport = signRuntime({
+    protocolVersion: "agentcert.browser_enforcement.v0.2",
+    objectType: "ReconciliationReport",
+    signatureContext: "onegent.reconciliation-report.v0.2",
+    reconciliationReportId: randomUUID(),
+    tenantId: grantPayload.tenantId,
+    actionId: input.action.id,
+    executionSessionId: input.execution.executionSessionId,
+    targetSystem: grantPayload.targetAudience,
+    accountOrCredentialReferenceDigest: credentialReferenceDigest,
+    reconciliationWindowStart: claimedAt,
+    reconciliationWindowEnd: completedAt,
+    expectedActionIds: [input.action.id],
+    observedTargetEvents: [targetEvent],
+    matchedEvents: [input.audit.transactionId],
+    unmatchedTargetEvents: [],
+    unmatchedReceipts: [],
+    duplicateMatches: [],
+    result: "PASSED",
+    limitations: ["Reconciliation covers the dedicated localhost sandbox credential and this action only."],
+    collectorIdentityId: input.runtime.id,
+    collectedAt: completedAt,
+  });
+  const eventCheckpoint = signRuntime({
+    protocolVersion: "agentcert.browser_enforcement.v0.2",
+    objectType: "EventChainCheckpoint",
+    signatureContext: "onegent.event-checkpoint.v0.2",
+    actionId: input.action.id,
+    executionSessionId: input.execution.executionSessionId,
+    eventCount: events.length,
+    firstEventHash: events[0].payloadSha256,
+    finalEventHash: events.at(-1).payloadSha256,
+    completedAt,
+  });
+  return {
+    protocolVersion: "agentcert.browser_enforcement.v0.2",
+    executionGrant: grant,
+    grantStatus: "CONSUMED",
+    runtimeClaim,
+    executionSession,
+    credentialLease: {
+      credentialLeaseId,
+      tenantId: grantPayload.tenantId,
+      actionId: input.action.id,
+      executionSessionId: input.execution.executionSessionId,
+      providerType: "CUSTOMER_SECRET_PROVIDER",
+      providerReference: "opaque:" + credentialReferenceDigest,
+      targetAudience: grantPayload.targetAudience,
+      scopeDigest: sha256(canonicalJson({ allowedOrigins: grantPayload.allowedOrigins, operation: grantPayload.allowedOperation, resource: grantPayload.allowedResource })),
+      isolationMode: "RUNTIME_INJECTED_CREDENTIAL",
+      issuedAt: claimedAt,
+      expiresAt: grantPayload.expiresAt,
+      status: "REVOKED",
+      revokedAt: completedAt,
+    },
+    events,
+    eventCheckpoint,
+    outcomeAttestation,
+    reconciliationReport,
+    finalParametersDigest: grantPayload.parametersDigest,
+    detectedBypass: false,
+    execution: { method: "LOCAL_ADAPTER", status: "COMPLETED", targetSystem: input.action.targetSystem, observedState: input.execution.observedState },
   };
 }
 
+function subsetMatches(expected, observed) { return Object.entries(expected).every(([key, value]) => canonicalJson(observed[key]) === canonicalJson(value)); }
+
 function localhostTarget(proposal) {
   if (proposal?.targetSystem !== "WitnoraLocalSandbox") throw new Error("sandbox_target_system_invalid");
   const origins = proposal?.executionIntent?.allowedOrigins;