agent-lifecycle-kit 2.24.0__tar.gz → 2.25.0__tar.gz

{agent_lifecycle_kit-2.24.0/src/agent_lifecycle_kit.egg-info → agent_lifecycle_kit-2.25.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-lifecycle-kit
-Version: 2.24.0
+Version: 2.25.0
 Summary: Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion.
 Author: Agent Lifecycle Kit contributors
 License: Apache-2.0
@@ -30,20 +30,18 @@ Dynamic: license-file
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
 ![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable
-finish. It keeps the requested outcome, reviewed plan, execution boundaries,
-evidence and acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
+acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose,
-OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice
-and secret handling stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
+stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.24.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.25.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 
@@ -57,8 +55,7 @@ agent-lifecycle version
 agent-lifecycle diagnose --no-install-plans
 ```
 
-Choose `<adapter-id>` from the [adapter support matrix](docs/adapters/support-matrix.md)
-and pass a task from a file:
+Choose `<adapter-id>` from the [adapter support matrix](docs/adapters/support-matrix.md) and pass a task from a file:
 
 ```bash
 agent-lifecycle start --adapter <adapter-id> --file task.md
@@ -152,16 +149,12 @@ agent-lifecycle start --adapter <adapter-id> --file task.md
 
 ## Adapter support level
 
-The adapter support level describes how much of the ALK integration is verified
-for a specific host. It covers the declared CLI/version, command projection,
-environment boundary, live conformance, resource calibration and accepted ALK
-lifecycle evidence. It describes the checked integration range; it is not a
-rating of the host model or of the external product.
+The adapter support level describes how much of the ALK integration is verified for a specific host. It covers the declared CLI/version, command projection, environment boundary,
+live conformance, resource calibration and accepted ALK lifecycle evidence. It describes the checked integration range; it is not a rating of the host model or of the external
+product.
 
-Accepted lifecycle artifacts include the reviewed plan and lock, state and task
-receipts, validation and evidence summaries, independent plan and implementation
-audits, and final proof. Host launch routes add usage, resource and containment
-receipts for the exact adapter/version binding.
+Accepted lifecycle artifacts include the reviewed plan and lock, state and task receipts, validation and evidence summaries, independent plan and implementation audits, and final
+proof. Host launch routes add usage, resource and containment receipts for the exact adapter/version binding.
 
 `EXPERIMENTAL` marks an adapter with offline checks and deterministic contract
 tests. `VERIFIED` adds bounded live host conformance, usage/resource calibration,
@@ -200,3 +193,10 @@ Adapter installation and support-level details live in [Adapter install](docs/ad
 - Profiles and operations: [Project workflow presets](docs/reference/workflow-presets.md), [Project workflow profile](docs/reference/project-workflow-profile.md), [Read-only status views](docs/reference/read-only-status-view.md), [Adapter progress bridge](docs/reference/automatic-progress-bridge.md), [Sandbox boundaries](docs/reference/sandbox-boundaries.md), [Import mappers](docs/reference/import-mappers.md), [Episode retrieval](docs/reference/episode-retrieval.md), [Runner migration](docs/guides/runner-migration-2.md), [Runner recovery records](docs/reference/runner-recovery.md), [Cross-check profile](docs/reference/cross-check-profile.md), [Review Mesh](docs/reference/review-mesh.md), [Risk-bound independent verification](docs/reference/risk-bound-independent-verification.md), [Bug Forensics profile](docs/reference/bug-forensics.md), and [Bug Forensics context budget](docs/reference/bug-forensics-context-budget.md).
 - Release assets: [Task templates](templates/tasks/README.md), [Neutrality scanning](docs/reference/neutrality.md), and [Release security](docs/security/release-security.md).
 Apache-2.0. See [LICENSE](LICENSE).
+
+## Release 2.25: focused security and maintainability
+
+Release 2.25 hardens sensitive imports and launcher checks, repairs named ownership seams, and checks untyped Python function bodies with mypy. See the [current security
+controls](docs/security/release-security.md) and [architecture map](docs/architecture/system-architecture.md). The [staged reading
+pilot](docs/guides/controlled-technical-english.md) preserves full references and approval gates; byte/word measurements do not prove token savings. Existing OpenCode 1.x/2.x
+qualification and unsupported host routes remain unchanged. Local preparation, exact-candidate CI, native final proof and public publication are separate gates.

{agent_lifecycle_kit-2.24.0 → agent_lifecycle_kit-2.25.0}/README.md

@@ -8,20 +8,18 @@
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
 ![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable
-finish. It keeps the requested outcome, reviewed plan, execution boundaries,
-evidence and acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
+acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose,
-OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice
-and secret handling stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
+stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.24.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.25.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 
@@ -35,8 +33,7 @@ agent-lifecycle version
 agent-lifecycle diagnose --no-install-plans
 ```
 
-Choose `<adapter-id>` from the [adapter support matrix](docs/adapters/support-matrix.md)
-and pass a task from a file:
+Choose `<adapter-id>` from the [adapter support matrix](docs/adapters/support-matrix.md) and pass a task from a file:
 
 ```bash
 agent-lifecycle start --adapter <adapter-id> --file task.md
@@ -130,16 +127,12 @@ agent-lifecycle start --adapter <adapter-id> --file task.md
 
 ## Adapter support level
 
-The adapter support level describes how much of the ALK integration is verified
-for a specific host. It covers the declared CLI/version, command projection,
-environment boundary, live conformance, resource calibration and accepted ALK
-lifecycle evidence. It describes the checked integration range; it is not a
-rating of the host model or of the external product.
+The adapter support level describes how much of the ALK integration is verified for a specific host. It covers the declared CLI/version, command projection, environment boundary,
+live conformance, resource calibration and accepted ALK lifecycle evidence. It describes the checked integration range; it is not a rating of the host model or of the external
+product.
 
-Accepted lifecycle artifacts include the reviewed plan and lock, state and task
-receipts, validation and evidence summaries, independent plan and implementation
-audits, and final proof. Host launch routes add usage, resource and containment
-receipts for the exact adapter/version binding.
+Accepted lifecycle artifacts include the reviewed plan and lock, state and task receipts, validation and evidence summaries, independent plan and implementation audits, and final
+proof. Host launch routes add usage, resource and containment receipts for the exact adapter/version binding.
 
 `EXPERIMENTAL` marks an adapter with offline checks and deterministic contract
 tests. `VERIFIED` adds bounded live host conformance, usage/resource calibration,
@@ -178,3 +171,10 @@ Adapter installation and support-level details live in [Adapter install](docs/ad
 - Profiles and operations: [Project workflow presets](docs/reference/workflow-presets.md), [Project workflow profile](docs/reference/project-workflow-profile.md), [Read-only status views](docs/reference/read-only-status-view.md), [Adapter progress bridge](docs/reference/automatic-progress-bridge.md), [Sandbox boundaries](docs/reference/sandbox-boundaries.md), [Import mappers](docs/reference/import-mappers.md), [Episode retrieval](docs/reference/episode-retrieval.md), [Runner migration](docs/guides/runner-migration-2.md), [Runner recovery records](docs/reference/runner-recovery.md), [Cross-check profile](docs/reference/cross-check-profile.md), [Review Mesh](docs/reference/review-mesh.md), [Risk-bound independent verification](docs/reference/risk-bound-independent-verification.md), [Bug Forensics profile](docs/reference/bug-forensics.md), and [Bug Forensics context budget](docs/reference/bug-forensics-context-budget.md).
 - Release assets: [Task templates](templates/tasks/README.md), [Neutrality scanning](docs/reference/neutrality.md), and [Release security](docs/security/release-security.md).
 Apache-2.0. See [LICENSE](LICENSE).
+
+## Release 2.25: focused security and maintainability
+
+Release 2.25 hardens sensitive imports and launcher checks, repairs named ownership seams, and checks untyped Python function bodies with mypy. See the [current security
+controls](docs/security/release-security.md) and [architecture map](docs/architecture/system-architecture.md). The [staged reading
+pilot](docs/guides/controlled-technical-english.md) preserves full references and approval gates; byte/word measurements do not prove token savings. Existing OpenCode 1.x/2.x
+qualification and unsupported host routes remain unchanged. Local preparation, exact-candidate CI, native final proof and public publication are separate gates.

{agent_lifecycle_kit-2.24.0 → agent_lifecycle_kit-2.25.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-lifecycle-kit"
-version = "2.24.0"
+version = "2.25.0"
 description = "Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion."
 readme = "README.md"
 requires-python = ">=3.11,<3.15"
@@ -76,6 +76,7 @@ python_version = "3.11"
 files = ["src/agent_lifecycle"]
 ignore_missing_imports = true
 show_error_codes = true
+check_untyped_defs = true
 
 [tool.setuptools.data-files]
 "benchmarks/reference-tasks" = [

{agent_lifecycle_kit-2.24.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/_version.py

@@ -1,3 +1,3 @@
 """Package version."""
 
-__version__ = "2.24.0"
+__version__ = "2.25.0"

{agent_lifecycle_kit-2.24.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/closing_resource_recovery.py

@@ -1,4 +1,4 @@
-"""Closing resource reconstruction and private financial transaction primitives.
+"""Closing resource reconstruction and retained financial compatibility exports.
 
 The reconstruction is diagnostic. The private primitives only mutate an already
 admitted Journal transaction; neither authenticates a host nor authorizes a call.
@@ -22,9 +22,9 @@ from agent_lifecycle.contracts.closing_resource_schemas import (
     validate_closing_operation_binding,
     validate_limit_proposal,
 )
+from agent_lifecycle.contracts.closing_time import closing_instant as _closing_instant
 from agent_lifecycle.contracts.errors import LifecycleError
 from agent_lifecycle.contracts.paths import is_under_repo_path, normalize_repo_path
-from agent_lifecycle.contracts.workflow_state_schemas import _closing_instant
 
 from .closing_resource_policy import classify_current_claim_data
 from .contracts import (
@@ -32,121 +32,24 @@ from .contracts import (
     ROLES,
     JournalUnavailable,
     Operation,
-    RevisionConflict,
-    _BindingConflict,
     _operation,
     _projection,
     canonical,
     digest,
-    identity,
     uint,
 )
-from .workflow_authority_store import _load_run_output_anchor_data
-
-
-def _require_financial_transaction(journal) -> None:
-    journal._check_owner()
-    if not journal._db.in_transaction or journal._admission_depth != 1:
-        raise JournalUnavailable("Financial operation requires admitted transaction", write_outcome="NOT_STARTED")
 
-
-def _reserve_in_transaction(journal, operation: Operation, *, expected_revision: int | None = None) -> str:
-    """Apply ordinary reservation arithmetic inside the caller's admitted transaction."""
-    _require_financial_transaction(journal)
-    operation.__post_init__()
-    op = asdict(operation)
-    scope = operation.budget_scope_id
-    if journal._closed_scope(scope):
-        return "CLOSED"
-    state, revision = journal._load(scope)
-    if state is None:
-        return "UNAVAILABLE"
-    old = state["operations"].get(operation.operation_id)
-    if old:
-        return (
-            "ALREADY_RESERVED"
-            if old["digest"] == operation.binding_digest
-            else journal._conflict((scope,), "Operation binding changed", op)
-        )
-    if expected_revision is not None:
-        uint(expected_revision)
-        if expected_revision != revision:
-            raise RevisionConflict("Stale journal revision")
-    if state["gate"] != "READY":
-        return "UNAVAILABLE"
-    policy, binding = state["policy"], state["scope"]
-    if (
-        operation.run_id != binding["run_id"]
-        or operation.unit_definition_id != binding["unit_definition_id"]
-        or operation.policy_id != policy["policy_id"]
-        or operation.policy_revision != policy["revision"]
-        or operation.task_id not in (None, *policy["task_caps"])
-    ):
-        return journal._conflict((scope,), "Scope/policy/task binding mismatch", op)
-    projected = asdict(_projection(state, revision))
-    owner = operation.task_id if operation.task_id is not None else ""
-    upper = operation.upper_bound_tokens
-    transfer = upper if operation.operation_class == "CLOSEOUT" else 0
-    if transfer and state["protected"].get(owner, 0) < transfer:
-        return "DENY"
-    checks = [
-        (
-            projected["spent"],
-            projected["active_reservations"],
-            projected["protected_closeout"],
-            policy["run_cap"],
-        )
-    ]
-    if operation.task_id is not None:
-        task = projected["tasks"][operation.task_id]
-        checks.append(
-            (
-                task["spent"],
-                task["active_reservations"],
-                task["protected_closeout"],
-                policy["task_caps"][operation.task_id],
-            )
-        )
-    for spent, active, protected, cap in checks:
-        total = uint(spent + active + upper + protected - transfer)
-        if total > cap:
-            return "DENY"
-    journal._db.execute("SAVEPOINT identity_batch")
-    try:
-        for kind, key in (
-            ("operation", [scope, operation.operation_id]),
-            ("dispatch", [scope, operation.dispatch_key]),
-            ("permit", operation.permit_id),
-        ):
-            journal._key(kind, key, scope, operation.operation_id, operation.binding_digest)
-        journal._db.execute("RELEASE identity_batch")
-    except _BindingConflict as exc:
-        journal._db.execute("ROLLBACK TO identity_batch")
-        journal._db.execute("RELEASE identity_batch")
-        return journal._conflict(exc.scopes, str(exc), op)
-    journal._record(scope, state, revision, "RESERVE", {"operation": op})
-    return "RESERVED"
-
-
-def _claim_in_transaction(journal, scope: str, operation_id: str, binding_digest: str, claim_id: str) -> str:
-    """Claim once inside the caller's admitted transaction; no dispatch authority is conferred."""
-    _require_financial_transaction(journal)
-    identity(claim_id)
-    if journal._closed_scope(scope):
-        return "CLOSED"
-    state, revision = journal._load(scope)
-    if state is None or operation_id not in state["operations"]:
-        return "UNAVAILABLE"
-    op = state["operations"][operation_id]
-    if binding_digest != op["digest"]:
-        return journal._conflict((scope,), "Claim binding mismatch", {"operation_id": operation_id})
-    if op["claim_id"] is not None:
-        return "ALREADY_CLAIMED"
-    if state["gate"] != "READY" or op["state"] != "RESERVED":
-        return "DENY"
-    journal._key("claim", op["binding"]["permit_id"], scope, operation_id, digest(claim_id))
-    journal._record(scope, state, revision, "CLAIM", {"operation_id": operation_id, "claim_id": claim_id})
-    return "CLAIM_GRANTED"
+# Compatibility exports for existing accounting callers; mutation lives in its owner.
+from .financial_transactions import (
+    _claim_in_transaction as _claim_in_transaction,
+)
+from .financial_transactions import (
+    _require_financial_transaction,
+)
+from .financial_transactions import (
+    _reserve_in_transaction as _reserve_in_transaction,
+)
+from .workflow_authority_store import _load_run_output_anchor_data
 
 
 def _unavailable(detail: str) -> NoReturn:

{agent_lifecycle_kit-2.24.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/contracts.py

@@ -631,6 +631,7 @@ if TYPE_CHECKING:
         """Static view of the existing live Journal composition; no runtime base."""
 
         _admission_depth: int
+        _utc_clock: Callable[[], datetime]
 
         def _archive_state(self, scope: str, *, restore: bool = False) -> tuple[dict, int]: ...
 

{agent_lifecycle_kit-2.24.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/declared_ledger.py

@@ -19,11 +19,11 @@ from agent_lifecycle.accounting.declared_ledger_records import (
     _R11_COORDINATOR_BASE,
     _r11_role_funding_record,
     _r11_role_prefix_record,
-    _require,
 )
 from agent_lifecycle.contracts import LifecycleError, canonical_bytes, canonical_digest
 from agent_lifecycle.contracts.authority_io import normalize_authority_path, read_authority_bytes
 from agent_lifecycle.contracts.bounded_json import load_bounded_json as _r11_json
+from agent_lifecycle.contracts.errors import require_condition as _require
 
 _R11_COORDINATOR_HEAD = _R11_COORDINATOR_BASE + "/COORDINATOR-COST-HEAD.json"
 

{agent_lifecycle_kit-2.24.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/declared_ledger_records.py

@@ -15,6 +15,7 @@ from agent_lifecycle.contracts.bounded_json import (
 from agent_lifecycle.contracts.bounded_json import (
     matches_closed_schema as _r11_role_schema_matches,
 )
+from agent_lifecycle.contracts.errors import require_condition as _require
 
 _R11_ROLE_CONTRACT_SHA256 = "03d77c4fd3fcfcd3fd316d48ff119e20549ad42d8d9a325e7983bb46ab9e1247"
 
@@ -401,8 +402,3 @@ def _r11_role_prefix_record(value: dict[str, Any], relative: str) -> tuple[str,
         "role-prefix archive changes holds, usage, identity or canonical path",
     )
     return value["recordPath"], record_raw
-
-
-def _require(condition: bool, code: str, message: str) -> None:
-    if not condition:
-        raise LifecycleError(code, message)

agent_lifecycle_kit-2.25.0/src/agent_lifecycle/accounting/financial_transactions.py

@@ -0,0 +1,134 @@
+"""Reservation and claim mutations within an already admitted journal transaction.
+
+These primitives confer no host, provider or dispatch authority.
+"""
+
+from dataclasses import asdict
+
+from .contracts import (
+    JournalUnavailable,
+    Operation,
+    RevisionConflict,
+    _BindingConflict,
+    _JournalStoragePort,
+    _projection,
+    digest,
+    identity,
+    uint,
+)
+
+
+def _require_financial_transaction(journal: _JournalStoragePort) -> None:
+    journal._check_owner()
+    if not journal._db.in_transaction or journal._admission_depth != 1:
+        raise JournalUnavailable("Financial operation requires admitted transaction", write_outcome="NOT_STARTED")
+
+
+def _reserve_in_transaction(
+    journal: _JournalStoragePort, operation: Operation, *, expected_revision: int | None = None
+) -> str:
+    """Apply ordinary reservation arithmetic inside the caller's admitted transaction."""
+    _require_financial_transaction(journal)
+    operation.__post_init__()
+    op = asdict(operation)
+    scope = operation.budget_scope_id
+    if journal._closed_scope(scope):
+        return "CLOSED"
+    state, revision = journal._load(scope)
+    if state is None:
+        return "UNAVAILABLE"
+    old = state["operations"].get(operation.operation_id)
+    if old:
+        return (
+            "ALREADY_RESERVED"
+            if old["digest"] == operation.binding_digest
+            else journal._conflict((scope,), "Operation binding changed", op)
+        )
+    if expected_revision is not None:
+        uint(expected_revision)
+        if expected_revision != revision:
+            raise RevisionConflict("Stale journal revision")
+    if state["gate"] != "READY":
+        return "UNAVAILABLE"
+    policy, binding = state["policy"], state["scope"]
+    if (
+        operation.run_id != binding["run_id"]
+        or operation.unit_definition_id != binding["unit_definition_id"]
+        or operation.policy_id != policy["policy_id"]
+        or operation.policy_revision != policy["revision"]
+        or operation.task_id not in (None, *policy["task_caps"])
+    ):
+        return journal._conflict((scope,), "Scope/policy/task binding mismatch", op)
+    if not _reservation_fits(state, revision, operation):
+        return "DENY"
+    journal._db.execute("SAVEPOINT identity_batch")
+    try:
+        for kind, key in (
+            ("operation", [scope, operation.operation_id]),
+            ("dispatch", [scope, operation.dispatch_key]),
+            ("permit", operation.permit_id),
+        ):
+            journal._key(kind, key, scope, operation.operation_id, operation.binding_digest)
+        journal._db.execute("RELEASE identity_batch")
+    except _BindingConflict as exc:
+        journal._db.execute("ROLLBACK TO identity_batch")
+        journal._db.execute("RELEASE identity_batch")
+        return journal._conflict(exc.scopes, str(exc), op)
+    journal._record(scope, state, revision, "RESERVE", {"operation": op})
+    return "RESERVED"
+
+
+def _claim_in_transaction(
+    journal: _JournalStoragePort, scope: str, operation_id: str, binding_digest: str, claim_id: str
+) -> str:
+    """Claim once inside the caller's admitted transaction; no dispatch authority is conferred."""
+    _require_financial_transaction(journal)
+    identity(claim_id)
+    if journal._closed_scope(scope):
+        return "CLOSED"
+    state, revision = journal._load(scope)
+    if state is None or operation_id not in state["operations"]:
+        return "UNAVAILABLE"
+    op = state["operations"][operation_id]
+    if binding_digest != op["digest"]:
+        return journal._conflict((scope,), "Claim binding mismatch", {"operation_id": operation_id})
+    if op["claim_id"] is not None:
+        return "ALREADY_CLAIMED"
+    if state["gate"] != "READY" or op["state"] != "RESERVED":
+        return "DENY"
+    journal._key("claim", op["binding"]["permit_id"], scope, operation_id, digest(claim_id))
+    journal._record(scope, state, revision, "CLAIM", {"operation_id": operation_id, "claim_id": claim_id})
+    return "CLAIM_GRANTED"
+
+
+def _reservation_fits(state: dict, revision: int, operation: Operation) -> bool:
+    policy = state["policy"]
+    projected = asdict(_projection(state, revision))
+    owner = operation.task_id if operation.task_id is not None else ""
+    upper = operation.upper_bound_tokens
+    transfer = upper if operation.operation_class == "CLOSEOUT" else 0
+    if transfer and state["protected"].get(owner, 0) < transfer:
+        return False
+    checks = [
+        (
+            projected["spent"],
+            projected["active_reservations"],
+            projected["protected_closeout"],
+            policy["run_cap"],
+        )
+    ]
+    if operation.task_id is not None:
+        task = projected["tasks"][operation.task_id]
+        checks.append(
+            (
+                task["spent"],
+                task["active_reservations"],
+                task["protected_closeout"],
+                policy["task_caps"][operation.task_id],
+            )
+        )
+    for spent, active, protected, cap in checks:
+        total = uint(spent + active + upper + protected - transfer)
+        if total > cap:
+            return False
+    return True

{agent_lifecycle_kit-2.24.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/legacy_source_usage.py

@@ -197,11 +197,8 @@ def _finish_invalid_annotation_projection(tracker, ordered, result):
             "selected original pair is incomplete or out of order",
         )
         pool = next((pool for pool in ordered if pool["windowId"] == window_id), None)
-        _require(
-            pool is not None and pool["binding"] is None and pool["closeRef"] is not None,
-            "scoped-usage-recovery-invalid",
-            "selected historical pool is incomplete or eligible",
-        )
+        if pool is None or pool["binding"] is not None or pool["closeRef"] is None:
+            raise LifecycleError("scoped-usage-recovery-invalid", "selected historical pool is incomplete or eligible")
         pool["eligibility"] = "HISTORICAL_INELIGIBLE"
     result["schemaVersion"] = SOURCE_INVALID_ANNOTATION_REGISTRY
     result["invalidAnnotationDispositionRef"] = tracker["recovery"]["dispositionRef"]