refactor(reborn): make host_api::Resolution non-lossy for the CapabilityOutcome collapse (§5.3 Stage 1)

crates/ironclaw_capabilities/src/host.rs

@@ -7,9 +7,9 @@ use ironclaw_host_api::{
     ActivityId, AuthorizeResult, Authorized, Blocked, CapabilityAuthorizer, CapabilityDescriptor,
     CapabilityDispatchRequest, CapabilityDispatchResult, CapabilityDispatcher, CapabilityGrantId,
     CapabilityId, Decision, DenyReason, DenyRef, DispatchError, ExecutionContext, GateRef,
-    Invocation, InvocationFingerprint, InvocationId, InvocationOrigin, Obligation, ProcessId,
-    ProductKind, ResourceEstimate, ResourceReservation, ResourceReservationId, ResourceScope,
-    RuntimeLane,
+    GateWaypoint, Invocation, InvocationFingerprint, InvocationId, InvocationOrigin, Obligation,
+    ProcessId, ProductKind, ResourceEstimate, ResourceReservation, ResourceReservationId,
+    ResourceScope, RuntimeLane,
 };
 use ironclaw_processes::{ProcessManager, ProcessStart};
 use ironclaw_run_state::{
@@ -729,8 +729,8 @@ where
                     }
                 }
                 Ok(AuthorizeFold::Blocked {
-                    result: AuthorizeResult::Blocked(Blocked::Approval(GateRef::from_uuid(
-                        approval_request_id.as_uuid(),
+                    result: AuthorizeResult::Blocked(Blocked::Approval(GateWaypoint::new(
+                        GateRef::from_uuid(approval_request_id.as_uuid()),
                     ))),
                 })
             }
@@ -2035,8 +2035,8 @@ where
                     }
                 }
                 Ok(AuthorizeFold::Blocked {
-                    result: AuthorizeResult::Blocked(Blocked::Approval(GateRef::from_uuid(
-                        approval_request_id.as_uuid(),
+                    result: AuthorizeResult::Blocked(Blocked::Approval(GateWaypoint::new(
+                        GateRef::from_uuid(approval_request_id.as_uuid()),
                     ))),
                 })
             }
@@ -2154,7 +2154,9 @@ where
                 // `AuthorizationRequiresApproval` with no persisted gate, so the
                 // forward-looking Blocked witness carries a fresh correlation id.
                 Ok(AuthorizeFold::Blocked {
-                    result: AuthorizeResult::Blocked(Blocked::Approval(GateRef::new())),
+                    result: AuthorizeResult::Blocked(Blocked::Approval(GateWaypoint::new(
+                        GateRef::new(),
+                    ))),
                 })
             }
         }

crates/ironclaw_host_api/src/gate_record.rs

@@ -84,6 +84,14 @@ pub enum GateRecord {
         summary: SafeSummary,
         result: ResultRef,
         byte_len: u64,
+        /// The preserved originating loop result ref the staged result was
+        /// keyed under (§5.3 Stage 1 non-lossy carry): `result` is a freshly
+        /// minted uuid handle, so without this the child output the loop staged
+        /// under its own ref would become unreachable from the durable record a
+        /// later resume turn renders from. `None` on records persisted before
+        /// this field existed (serde default keeps old rows rehydratable).
+        #[serde(default, skip_serializing_if = "Option::is_none")]
+        result_origin: Option<crate::LoopRef>,
     },
     /// Awaiting a client-executed external tool the host does not run.
     ExternalTool { summary: SafeSummary },
@@ -149,6 +157,7 @@ mod tests {
                     summary: summary(),
                     result,
                     byte_len: 2048,
+                    result_origin: Some(crate::LoopRef::new("result:child-1").unwrap()),
                 },
                 "dependent_run",
             ),

crates/ironclaw_host_api/src/lib.rs

@@ -53,6 +53,7 @@ pub mod mount;
 pub mod path;
 pub mod resolution;
 pub mod resource;
+pub mod result_meta;
 pub mod runtime;
 pub mod runtime_policy;
 pub mod safe_summary;
@@ -83,6 +84,7 @@ pub use mount::*;
 pub use path::*;
 pub use resolution::*;
 pub use resource::*;
+pub use result_meta::*;
 pub use runtime::*;
 pub use runtime_policy::*;
 pub use safe_summary::*;