@agentguard-run/spend 0.4.4 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.0
+
+- Added the workflow primitive: one budget envelope, one duration cap, resumable checkpoints, and signed receipt chains across multi-step agent runs.
+- Added receipt schema v2 fields for workflow_id, parent_receipt_id, chain_validation_hash, checkpoints, and reviewer cascade evidence.
+- Added SDK chain validation helpers and workflow-specific error types.
+
 ## 0.4.4
 
 - Added the functional-use disclaimer to README, package metadata, LICENSE addendum, CLI first-run notice, and /llms.txt surfaces.

package/README.md

@@ -87,6 +87,29 @@ const response = await guardedClient.chat.completions.create({
 Then run your agent. AgentGuard decides locally before any provider call starts, signs the receipt, and applies allow, downgrade, shadow, or block.
 
 
+
+## Workflow-level caps
+
+Use `agentguard.workflow()` when one agent run spans many outcomes and needs one shared budget envelope. The SDK signs each step as receipt schema v2, writes checkpoints, and validates the prior chain before resume.
+
+```ts
+import { agentguard } from '@agentguard-run/spend';
+
+await agentguard.workflow({
+  name: 'migrate_legacy_payments',
+  budget_cap_usd: 500,
+  duration_cap_hours: 72,
+  checkpoint_every_outcomes: 50,
+  resume_if_exists: true,
+}, async (workflow) => {
+  for (const record of records) {
+    await workflow.outcome('migrate_payment', () => migratePayment(record));
+  }
+});
+```
+
+Share the public replay URL at `https://agentguard.run/verify/workflow/<workflow_id>`.
+
 ## Need help configuring? Run `agentguard advisor`
 
 `agentguard advisor` uses your OpenRouter key, or any OpenAI-compatible endpoint you pass with `--base-url`, to run a local setup dialogue in your terminal. AgentGuard infrastructure never sees the prompts, completions, keys, policy details, or session log.

package/dist/index.d.ts

@@ -5,6 +5,7 @@
  * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
  * 64/071,781; 64/071,789).
  */
+import { workflow as runWorkflow } from './workflow/context';
 export type { SpendAction, SpendWindow, Provider, EnforcementMode, CapabilityTier, SpendCap, SpendScope, SpendPolicy, CallContext, SpendDecision, SignedDecisionLogEntry, SpendStore, DecisionLogStore, } from './types';
 export { getModelCost, setCostOverride, clearCostOverrides, computeCallCents, inferProvider, listCostOverrides, loadPersistedCostOverrides, persistCostOverrides, knownModelCosts, type ModelCost, } from './cost-table';
 export { evaluatePolicy, buildScopeKey, adjustPolicyWindowSpend, enforcePolicyLicenseGates, findCustomKeywordWatchlists, BUILT_IN_KEYWORD_WATCHLISTS } from './policy';
@@ -13,6 +14,10 @@ export { InMemorySpendStore } from './store-memory';
 export { AgentGuardLicenseRequiredError, validateLicenseKey, validateAndRegisterLicense, readConfiguredLicenseKey, writeConfiguredLicenseKey, clearConfiguredLicenseKey, licenseKeyFingerprint, type AgentGuardLicenseStatus, type AgentGuardLicenseFeatures, type AgentGuardTier, } from './license';
 export { telemetryStatus, enableTelemetry, disableTelemetry, resetTelemetryInstallId, recordTelemetryEvent, type TelemetryStatus, } from './telemetry';
 export { fetchCatalog, getCachedCatalog, syncPricingIntoCostTable, persistOverrides, modelCostFromOpenRouter, type OpenRouterCatalog, type OpenRouterModel, type SyncPricingResult, } from './openrouter-catalog';
+export { workflow, WorkflowContext } from './workflow/context';
+export { computeChainHash, validateReceiptChain } from './workflow/chain-validator';
+export { AgentGuardBudgetCapError, AgentGuardChainCorruptError, AgentGuardDurationCapError, AgentGuardWorkflowStateError, } from './workflow/errors';
+export type { ChainValidationResult, CheckpointReceipt, ReceiptV2, ReviewerCascadeEvidence, WorkflowConfig, WorkflowState, WorkflowStatus, } from './workflow/types';
 export { AdvisorConversation, buildBusinessProfile, buildPolicyFromProfile, projectedSavings, type AdvisorBusinessProfile, type ProjectedSavings, } from './advisor/conversation';
 export { createAdvisorClient, resolveAdvisorApiKey, type AdvisorClient, type AdvisorProvider } from './advisor/llm-client';
 export { createAdvisorSessionLogger, writeAdvisorOutputs, type AdvisorOutputs } from './advisor/output';
@@ -20,7 +25,10 @@ export { SpendGuard, withSpendGuard, AgentGuardBlockedError, type SpendGuardConf
 export { withSpendGuardAnthropic, type AnthropicBindingOptions } from './bindings/anthropic';
 export { withSpendGuardBedrock, type BedrockBindingOptions } from './bindings/bedrock';
 export { DEFAULT_LOCALE, SUPPORTED_LOCALES, TRANSLATIONS, type SupportedLocale, resolveLocale, t, formatBlockedTrace, type BlockedTraceArgs, } from './i18n';
-export declare const AGENTGUARD_SPEND_VERSION = "0.4.4";
+export declare const AGENTGUARD_SPEND_VERSION = "0.5.0";
+export declare const agentguard: {
+    workflow: typeof runWorkflow;
+};
 /** Patent marking. 35 U.S.C. § 287 constructive notice. */
 export declare const PATENT_NOTICE: string;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAGvK,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGvF,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,KAAK,eAAe,EACpB,aAAa,EACb,CAAC,EACD,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAEhB,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAEhD,2DAA2D;AAC3D,eAAO,MAAM,aAAa,QAG8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG7D,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAGvK,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGvF,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,KAAK,eAAe,EACpB,aAAa,EACb,CAAC,EACD,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAEhB,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAGhD,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,aAAa,QAG8B,CAAC"}

package/dist/index.js

@@ -7,9 +7,10 @@
  * 64/071,781; 64/071,789).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.writeAdvisorOutputs = exports.createAdvisorSessionLogger = exports.resolveAdvisorApiKey = exports.createAdvisorClient = exports.projectedSavings = exports.buildPolicyFromProfile = exports.buildBusinessProfile = exports.AdvisorConversation = exports.modelCostFromOpenRouter = exports.persistOverrides = exports.syncPricingIntoCostTable = exports.getCachedCatalog = exports.fetchCatalog = exports.recordTelemetryEvent = exports.resetTelemetryInstallId = exports.disableTelemetry = exports.enableTelemetry = exports.telemetryStatus = exports.licenseKeyFingerprint = exports.clearConfiguredLicenseKey = exports.writeConfiguredLicenseKey = exports.readConfiguredLicenseKey = exports.validateAndRegisterLicense = exports.validateLicenseKey = exports.AgentGuardLicenseRequiredError = exports.InMemorySpendStore = exports.InMemoryDecisionLogStore = exports.GENESIS_PREVIOUS_HASH = exports.verifyChain = exports.verifyEntry = exports.signDecision = exports.computeSignerFingerprint = exports.computeEntryHash = exports.sha256Hex = exports.canonicalJson = exports.BUILT_IN_KEYWORD_WATCHLISTS = exports.findCustomKeywordWatchlists = exports.enforcePolicyLicenseGates = exports.adjustPolicyWindowSpend = exports.buildScopeKey = exports.evaluatePolicy = exports.knownModelCosts = exports.persistCostOverrides = exports.loadPersistedCostOverrides = exports.listCostOverrides = exports.inferProvider = exports.computeCallCents = exports.clearCostOverrides = exports.setCostOverride = exports.getModelCost = void 0;
-exports.PATENT_NOTICE = exports.AGENTGUARD_SPEND_VERSION = exports.formatBlockedTrace = exports.t = exports.resolveLocale = exports.TRANSLATIONS = exports.SUPPORTED_LOCALES = exports.DEFAULT_LOCALE = exports.withSpendGuardBedrock = exports.withSpendGuardAnthropic = exports.AgentGuardBlockedError = exports.withSpendGuard = exports.SpendGuard = void 0;
+exports.AgentGuardWorkflowStateError = exports.AgentGuardDurationCapError = exports.AgentGuardChainCorruptError = exports.AgentGuardBudgetCapError = exports.validateReceiptChain = exports.computeChainHash = exports.WorkflowContext = exports.workflow = exports.modelCostFromOpenRouter = exports.persistOverrides = exports.syncPricingIntoCostTable = exports.getCachedCatalog = exports.fetchCatalog = exports.recordTelemetryEvent = exports.resetTelemetryInstallId = exports.disableTelemetry = exports.enableTelemetry = exports.telemetryStatus = exports.licenseKeyFingerprint = exports.clearConfiguredLicenseKey = exports.writeConfiguredLicenseKey = exports.readConfiguredLicenseKey = exports.validateAndRegisterLicense = exports.validateLicenseKey = exports.AgentGuardLicenseRequiredError = exports.InMemorySpendStore = exports.InMemoryDecisionLogStore = exports.GENESIS_PREVIOUS_HASH = exports.verifyChain = exports.verifyEntry = exports.signDecision = exports.computeSignerFingerprint = exports.computeEntryHash = exports.sha256Hex = exports.canonicalJson = exports.BUILT_IN_KEYWORD_WATCHLISTS = exports.findCustomKeywordWatchlists = exports.enforcePolicyLicenseGates = exports.adjustPolicyWindowSpend = exports.buildScopeKey = exports.evaluatePolicy = exports.knownModelCosts = exports.persistCostOverrides = exports.loadPersistedCostOverrides = exports.listCostOverrides = exports.inferProvider = exports.computeCallCents = exports.clearCostOverrides = exports.setCostOverride = exports.getModelCost = void 0;
+exports.PATENT_NOTICE = exports.agentguard = exports.AGENTGUARD_SPEND_VERSION = exports.formatBlockedTrace = exports.t = exports.resolveLocale = exports.TRANSLATIONS = exports.SUPPORTED_LOCALES = exports.DEFAULT_LOCALE = exports.withSpendGuardBedrock = exports.withSpendGuardAnthropic = exports.AgentGuardBlockedError = exports.withSpendGuard = exports.SpendGuard = exports.writeAdvisorOutputs = exports.createAdvisorSessionLogger = exports.resolveAdvisorApiKey = exports.createAdvisorClient = exports.projectedSavings = exports.buildPolicyFromProfile = exports.buildBusinessProfile = exports.AdvisorConversation = void 0;
 const telemetry_1 = require("./telemetry");
+const context_1 = require("./workflow/context");
 // Cost table
 var cost_table_1 = require("./cost-table");
 Object.defineProperty(exports, "getModelCost", { enumerable: true, get: function () { return cost_table_1.getModelCost; } });
@@ -66,6 +67,18 @@ Object.defineProperty(exports, "getCachedCatalog", { enumerable: true, get: func
 Object.defineProperty(exports, "syncPricingIntoCostTable", { enumerable: true, get: function () { return openrouter_catalog_1.syncPricingIntoCostTable; } });
 Object.defineProperty(exports, "persistOverrides", { enumerable: true, get: function () { return openrouter_catalog_1.persistOverrides; } });
 Object.defineProperty(exports, "modelCostFromOpenRouter", { enumerable: true, get: function () { return openrouter_catalog_1.modelCostFromOpenRouter; } });
+// Workflow primitive
+var context_2 = require("./workflow/context");
+Object.defineProperty(exports, "workflow", { enumerable: true, get: function () { return context_2.workflow; } });
+Object.defineProperty(exports, "WorkflowContext", { enumerable: true, get: function () { return context_2.WorkflowContext; } });
+var chain_validator_1 = require("./workflow/chain-validator");
+Object.defineProperty(exports, "computeChainHash", { enumerable: true, get: function () { return chain_validator_1.computeChainHash; } });
+Object.defineProperty(exports, "validateReceiptChain", { enumerable: true, get: function () { return chain_validator_1.validateReceiptChain; } });
+var errors_1 = require("./workflow/errors");
+Object.defineProperty(exports, "AgentGuardBudgetCapError", { enumerable: true, get: function () { return errors_1.AgentGuardBudgetCapError; } });
+Object.defineProperty(exports, "AgentGuardChainCorruptError", { enumerable: true, get: function () { return errors_1.AgentGuardChainCorruptError; } });
+Object.defineProperty(exports, "AgentGuardDurationCapError", { enumerable: true, get: function () { return errors_1.AgentGuardDurationCapError; } });
+Object.defineProperty(exports, "AgentGuardWorkflowStateError", { enumerable: true, get: function () { return errors_1.AgentGuardWorkflowStateError; } });
 // Advisor local setup
 var conversation_1 = require("./advisor/conversation");
 Object.defineProperty(exports, "AdvisorConversation", { enumerable: true, get: function () { return conversation_1.AdvisorConversation; } });
@@ -95,7 +108,10 @@ Object.defineProperty(exports, "TRANSLATIONS", { enumerable: true, get: function
 Object.defineProperty(exports, "resolveLocale", { enumerable: true, get: function () { return i18n_1.resolveLocale; } });
 Object.defineProperty(exports, "t", { enumerable: true, get: function () { return i18n_1.t; } });
 Object.defineProperty(exports, "formatBlockedTrace", { enumerable: true, get: function () { return i18n_1.formatBlockedTrace; } });
-exports.AGENTGUARD_SPEND_VERSION = '0.4.4';
+exports.AGENTGUARD_SPEND_VERSION = '0.5.0';
+exports.agentguard = {
+    workflow: context_1.workflow,
+};
 /** Patent marking. 35 U.S.C. § 287 constructive notice. */
 exports.PATENT_NOTICE = 'Protected by U.S. patent-pending technology ' +
     '(App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626; ' +

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;AAEH,2CAA8E;AAmB9E,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAOzB,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,OAAO,CAAC;AAEhD,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,IAAA,gCAAuB,EAAC,UAAU,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;AAEH,2CAA8E;AAC9E,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAQzB,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,OAAO,CAAC;AAGnC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,IAAA,gCAAuB,EAAC,UAAU,CAAC,CAAC"}

package/dist/workflow/chain-validator.d.ts

@@ -0,0 +1,4 @@
+import type { ChainValidationResult, ReceiptV2 } from './types';
+export declare function validateReceiptChain(receipts: ReceiptV2[]): Promise<ChainValidationResult>;
+export declare function computeChainHash(receipt: ReceiptV2): Promise<string>;
+//# sourceMappingURL=chain-validator.d.ts.map

package/dist/workflow/chain-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-validator.d.ts","sourceRoot":"","sources":["../../src/workflow/chain-validator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEhE,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAoBhG;AAED,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAS1E"}

package/dist/workflow/chain-validator.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateReceiptChain = validateReceiptChain;
+exports.computeChainHash = computeChainHash;
+const receipt_1 = require("./receipt");
+async function validateReceiptChain(receipts) {
+    if (receipts.length === 0)
+        return { ok: true };
+    for (let i = 0; i < receipts.length; i++) {
+        if (!(0, receipt_1.verifyReceipt)(receipts[i])) {
+            return { ok: false, broken_at: i, reason: 'signature_invalid' };
+        }
+        if (i === 0)
+            continue;
+        const prev = receipts[i - 1];
+        const curr = receipts[i];
+        const expectedHash = await computeChainHash(prev);
+        if (curr.chain_validation_hash !== expectedHash) {
+            return { ok: false, broken_at: i, reason: 'chain_hash_mismatch' };
+        }
+        if (curr.parent_receipt_id !== prev.receipt_id) {
+            return { ok: false, broken_at: i, reason: 'parent_reference_mismatch' };
+        }
+    }
+    return { ok: true };
+}
+async function computeChainHash(receipt) {
+    const canonical = (0, receipt_1.canonicalJSONStringify)({
+        receipt_id: receipt.receipt_id,
+        workflow_id: receipt.workflow_id,
+        cost_usd: receipt.cost_usd,
+        signed_at: receipt.signed_at,
+        signature: receipt.signature,
+    });
+    return (0, receipt_1.sha256)(canonical);
+}
+//# sourceMappingURL=chain-validator.js.map

package/dist/workflow/chain-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-validator.js","sourceRoot":"","sources":["../../src/workflow/chain-validator.ts"],"names":[],"mappings":";;AAGA,oDAoBC;AAED,4CASC;AAlCD,uCAA0E;AAGnE,KAAK,UAAU,oBAAoB,CAAC,QAAqB;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAE/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,IAAA,uBAAa,EAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,qBAAqB,KAAK,YAAY,EAAE,CAAC;YAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,OAAkB;IACvD,MAAM,SAAS,GAAG,IAAA,gCAAsB,EAAC;QACvC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,OAAO,IAAA,gBAAM,EAAC,SAAS,CAAC,CAAC;AAC3B,CAAC"}

package/dist/workflow/context.d.ts

@@ -0,0 +1,46 @@
+import type { CheckpointReceipt, ReceiptV2, WorkflowConfig, WorkflowState, WorkflowStatus } from './types';
+interface WorkflowCreateResponse {
+    workflow_id: string;
+    created_at: string;
+    state?: WorkflowState;
+    total_spend_usd?: number;
+    outcome_count?: number;
+    last_receipt_id?: string | null;
+    last_checkpoint_id?: string | null;
+    last_chain_hash?: string | null;
+    receipts?: ReceiptV2[];
+}
+export declare class WorkflowContext {
+    readonly workflow_id: string;
+    readonly user_id: string;
+    readonly config: WorkflowConfig;
+    readonly created_at: Date;
+    private _total_spend_usd;
+    private _outcome_count;
+    private _last_receipt_id;
+    private _last_checkpoint_id;
+    private _last_chain_hash;
+    private _state;
+    private readonly _receipts;
+    private constructor();
+    static create(config: WorkflowConfig): Promise<WorkflowContext>;
+    static fromCheckpoint(config: WorkflowConfig, existing: WorkflowCreateResponse, userId?: string): WorkflowContext;
+    outcome<T>(name: string, fn: () => Promise<T>): Promise<T>;
+    checkpoint(label?: string): Promise<CheckpointReceipt>;
+    cancel(reason: string): Promise<void>;
+    finalize(): Promise<void>;
+    status(): WorkflowStatus;
+    receipts(): ReceiptV2[];
+    private writeCheckpoint;
+    private writeFinalReceipt;
+    private assertActive;
+    private assertOutcomeAllowed;
+    private assertBudgetRemaining;
+    private assertDurationRemaining;
+    private checkPostCallCaps;
+    private extractOutcomeCost;
+    private postReceipt;
+}
+export declare function workflow<T>(config: WorkflowConfig, fn: (ctx: WorkflowContext) => Promise<T>): Promise<T>;
+export {};
+//# sourceMappingURL=context.d.ts.map

package/dist/workflow/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/workflow/context.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE3G,UAAU,sBAAsB;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;CACxB;AAED,qBAAa,eAAe;IAC1B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,MAAM,EAAE,cAAc,CAAC;IACvC,SAAgB,UAAU,EAAE,IAAI,CAAC;IAEjC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAE7C,OAAO;WA0BM,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IA2CrE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,SAAe,GAAG,eAAe;IAgBjH,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAqC1D,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAItD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,MAAM,IAAI,cAAc;IAoBxB,QAAQ,IAAI,SAAS,EAAE;YAIT,eAAe;YAuBf,iBAAiB;IAoB/B,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,uBAAuB;YAYjB,iBAAiB;IAY/B,OAAO,CAAC,kBAAkB;YAUZ,WAAW;CAK1B;AAED,wBAAsB,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAO9G"}

package/dist/workflow/context.js

@@ -0,0 +1,360 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowContext = void 0;
+exports.workflow = workflow;
+const crypto_1 = require("crypto");
+const chain_validator_1 = require("./chain-validator");
+const errors_1 = require("./errors");
+const receipt_1 = require("./receipt");
+class WorkflowContext {
+    workflow_id;
+    user_id;
+    config;
+    created_at;
+    _total_spend_usd = 0;
+    _outcome_count = 0;
+    _last_receipt_id = null;
+    _last_checkpoint_id = null;
+    _last_chain_hash = null;
+    _state = 'active';
+    _receipts = [];
+    constructor(args) {
+        this.workflow_id = args.workflow_id;
+        this.user_id = args.user_id;
+        this.config = args.config;
+        this.created_at = args.created_at;
+        this._state = args.state ?? 'active';
+        this._total_spend_usd = args.total_spend_usd ?? 0;
+        this._outcome_count = args.outcome_count ?? 0;
+        this._last_receipt_id = args.last_receipt_id ?? null;
+        this._last_checkpoint_id = args.last_checkpoint_id ?? null;
+        this._last_chain_hash = args.last_chain_hash ?? null;
+        this._receipts.push(...(args.receipts ?? []));
+    }
+    static async create(config) {
+        validateConfig(config);
+        const userId = String(config.metadata?.user_id || config.user_id || 'local-user');
+        if (config.resume_if_exists) {
+            const existing = await tryResume(config, userId);
+            if (existing)
+                return existing;
+        }
+        const apiBase = resolveApiBase(config);
+        if (apiBase) {
+            const body = {
+                name: config.name,
+                budget_cap_usd: config.budget_cap_usd,
+                duration_cap_hours: config.duration_cap_hours,
+                checkpoint_every_outcomes: config.checkpoint_every_outcomes ?? 25,
+                parent_outcomes: config.parent_outcomes,
+                metadata: config.metadata,
+            };
+            const created = await postJson(config, `${apiBase}/api/workflows/create`, body);
+            return new WorkflowContext({
+                workflow_id: created.workflow_id,
+                user_id: userId,
+                config,
+                created_at: new Date(created.created_at),
+                state: created.state,
+                total_spend_usd: created.total_spend_usd,
+                outcome_count: created.outcome_count,
+                last_receipt_id: created.last_receipt_id,
+                last_checkpoint_id: created.last_checkpoint_id,
+                last_chain_hash: created.last_chain_hash,
+                receipts: created.receipts,
+            });
+        }
+        return new WorkflowContext({
+            workflow_id: `ag_w_${(0, crypto_1.randomUUID)().replace(/-/g, '').slice(0, 16)}`,
+            user_id: userId,
+            config,
+            created_at: new Date(),
+        });
+    }
+    static fromCheckpoint(config, existing, userId = 'local-user') {
+        return new WorkflowContext({
+            workflow_id: existing.workflow_id,
+            user_id: userId,
+            config,
+            created_at: new Date(existing.created_at),
+            state: existing.state ?? 'active',
+            total_spend_usd: existing.total_spend_usd,
+            outcome_count: existing.outcome_count,
+            last_receipt_id: existing.last_receipt_id,
+            last_checkpoint_id: existing.last_checkpoint_id,
+            last_chain_hash: existing.last_chain_hash,
+            receipts: existing.receipts,
+        });
+    }
+    async outcome(name, fn) {
+        this.assertActive();
+        this.assertOutcomeAllowed(name);
+        this.assertBudgetRemaining();
+        this.assertDurationRemaining();
+        const result = await fn();
+        const cost = this.extractOutcomeCost(result);
+        const parentReceiptId = this._last_receipt_id;
+        const chainHash = this._receipts.length ? await (0, chain_validator_1.computeChainHash)(this._receipts[this._receipts.length - 1]) : null;
+        const receipt = (0, receipt_1.buildReceipt)({
+            workflow_id: this.workflow_id,
+            outcome_name: name,
+            user_id: this.user_id,
+            cost_usd: cost,
+            parent_receipt_id: parentReceiptId,
+            chain_validation_hash: chainHash,
+            workflow_checkpoint_idx: null,
+            workflow_total_spend_usd_to_date: this._total_spend_usd + cost,
+            reviewer_cascade: extractReviewerCascade(result),
+        });
+        this._receipts.push(receipt);
+        this._total_spend_usd = (0, receipt_1.roundUsd)(this._total_spend_usd + cost);
+        this._outcome_count += 1;
+        this._last_receipt_id = receipt.receipt_id;
+        this._last_chain_hash = await (0, chain_validator_1.computeChainHash)(receipt);
+        await this.postReceipt(receipt);
+        if (this._outcome_count % (this.config.checkpoint_every_outcomes ?? 25) === 0) {
+            await this.writeCheckpoint();
+        }
+        await this.checkPostCallCaps();
+        return result;
+    }
+    async checkpoint(label) {
+        return this.writeCheckpoint(label);
+    }
+    async cancel(reason) {
+        this._state = 'cancelled';
+        await this.writeFinalReceipt('cancelled', reason);
+    }
+    async finalize() {
+        if (this._state === 'active') {
+            this._state = 'completed';
+            await this.writeFinalReceipt('completed', 'workflow completed');
+        }
+    }
+    status() {
+        const elapsed = Date.now() - this.created_at.getTime();
+        const capMs = this.config.duration_cap_hours * 3_600_000;
+        return {
+            workflow_id: this.workflow_id,
+            state: this._state,
+            total_spend_usd: this._total_spend_usd,
+            budget_cap_usd: this.config.budget_cap_usd,
+            budget_remaining_usd: (0, receipt_1.roundUsd)(Math.max(0, this.config.budget_cap_usd - this._total_spend_usd)),
+            budget_pct_used: this.config.budget_cap_usd === 0 ? 1 : this._total_spend_usd / this.config.budget_cap_usd,
+            outcome_count: this._outcome_count,
+            last_receipt_id: this._last_receipt_id,
+            last_checkpoint_id: this._last_checkpoint_id,
+            last_chain_hash: this._last_chain_hash,
+            duration_elapsed_ms: elapsed,
+            duration_cap_ms: capMs,
+            duration_remaining_ms: Math.max(0, capMs - elapsed),
+        };
+    }
+    receipts() {
+        return [...this._receipts];
+    }
+    async writeCheckpoint(label) {
+        const chainHash = this._receipts.length ? await (0, chain_validator_1.computeChainHash)(this._receipts[this._receipts.length - 1]) : null;
+        const checkpoint = (0, receipt_1.buildReceipt)({
+            workflow_id: this.workflow_id,
+            outcome_name: 'CHECKPOINT',
+            user_id: this.user_id,
+            cost_usd: 0,
+            parent_receipt_id: this._last_receipt_id,
+            chain_validation_hash: chainHash,
+            workflow_checkpoint_idx: this._outcome_count,
+            workflow_total_spend_usd_to_date: this._total_spend_usd,
+            is_checkpoint: true,
+            checkpoint_label: label ?? null,
+            receipt_type: 'checkpoint',
+        });
+        this._receipts.push(checkpoint);
+        this._last_checkpoint_id = checkpoint.receipt_id;
+        this._last_receipt_id = checkpoint.receipt_id;
+        this._last_chain_hash = await (0, chain_validator_1.computeChainHash)(checkpoint);
+        await this.postReceipt(checkpoint);
+        return checkpoint;
+    }
+    async writeFinalReceipt(type, reason) {
+        const chainHash = this._receipts.length ? await (0, chain_validator_1.computeChainHash)(this._receipts[this._receipts.length - 1]) : null;
+        const receipt = (0, receipt_1.buildReceipt)({
+            workflow_id: this.workflow_id,
+            outcome_name: type === 'completed' ? 'WORKFLOW_COMPLETED' : 'WORKFLOW_STOPPED',
+            user_id: this.user_id,
+            cost_usd: 0,
+            parent_receipt_id: this._last_receipt_id,
+            chain_validation_hash: chainHash,
+            workflow_checkpoint_idx: this._outcome_count,
+            workflow_total_spend_usd_to_date: this._total_spend_usd,
+            receipt_type: type === 'cancelled' ? 'cancel' : type,
+            cancelled_reason: reason,
+        });
+        this._receipts.push(receipt);
+        this._last_receipt_id = receipt.receipt_id;
+        this._last_chain_hash = await (0, chain_validator_1.computeChainHash)(receipt);
+        await this.postReceipt(receipt);
+    }
+    assertActive() {
+        if (this._state === 'budget_capped') {
+            throw new errors_1.AgentGuardBudgetCapError(`Workflow ${this.workflow_id} exceeded budget cap of $${this.config.budget_cap_usd}. Total spend to date: $${this._total_spend_usd}.`, { workflow_id: this.workflow_id, total_spend_usd: this._total_spend_usd });
+        }
+        if (this._state === 'duration_capped') {
+            throw new errors_1.AgentGuardDurationCapError(`Workflow ${this.workflow_id} exceeded duration cap.`, {
+                workflow_id: this.workflow_id,
+                elapsed_ms: Date.now() - this.created_at.getTime(),
+            });
+        }
+        if (this._state !== 'active') {
+            throw new errors_1.AgentGuardWorkflowStateError(`Workflow ${this.workflow_id} is ${this._state}.`, {
+                workflow_id: this.workflow_id,
+                state: this._state,
+            });
+        }
+    }
+    assertOutcomeAllowed(name) {
+        if (this.config.parent_outcomes && !this.config.parent_outcomes.includes(name)) {
+            throw new errors_1.AgentGuardWorkflowStateError(`Outcome ${name} is not allowed in workflow ${this.workflow_id}.`, {
+                workflow_id: this.workflow_id,
+                state: this._state,
+            });
+        }
+    }
+    assertBudgetRemaining() {
+        if (this._total_spend_usd >= this.config.budget_cap_usd) {
+            this._state = 'budget_capped';
+            throw new errors_1.AgentGuardBudgetCapError(`Workflow ${this.workflow_id} exceeded budget cap of $${this.config.budget_cap_usd}. Total spend to date: $${this._total_spend_usd}.`, { workflow_id: this.workflow_id, total_spend_usd: this._total_spend_usd });
+        }
+    }
+    assertDurationRemaining() {
+        const elapsed = Date.now() - this.created_at.getTime();
+        const cap = this.config.duration_cap_hours * 3_600_000;
+        if (elapsed >= cap) {
+            this._state = 'duration_capped';
+            throw new errors_1.AgentGuardDurationCapError(`Workflow ${this.workflow_id} exceeded duration cap.`, {
+                workflow_id: this.workflow_id,
+                elapsed_ms: elapsed,
+            });
+        }
+    }
+    async checkPostCallCaps() {
+        if (this._total_spend_usd >= this.config.budget_cap_usd) {
+            this._state = 'budget_capped';
+            await this.writeFinalReceipt('cap_hit', 'budget cap reached');
+        }
+        const elapsed = Date.now() - this.created_at.getTime();
+        if (elapsed >= this.config.duration_cap_hours * 3_600_000) {
+            this._state = 'duration_capped';
+            await this.writeFinalReceipt('cap_hit', 'duration cap reached');
+        }
+    }
+    extractOutcomeCost(result) {
+        if (isRecord(result)) {
+            if (typeof result.cost_usd === 'number')
+                return result.cost_usd;
+            const receipt = result.receipt;
+            if (isRecord(receipt) && typeof receipt.cost_usd === 'number')
+                return receipt.cost_usd;
+        }
+        const configured = this.config.metadata?.default_outcome_cost_usd;
+        return typeof configured === 'number' ? configured : 0;
+    }
+    async postReceipt(receipt) {
+        const apiBase = resolveApiBase(this.config);
+        if (!apiBase)
+            return;
+        await postJson(this.config, `${apiBase}/api/workflows/${this.workflow_id}/receipt`, { receipt });
+    }
+}
+exports.WorkflowContext = WorkflowContext;
+async function workflow(config, fn) {
+    const ctx = await WorkflowContext.create(config);
+    try {
+        return await fn(ctx);
+    }
+    finally {
+        await ctx.finalize();
+    }
+}
+async function tryResume(config, userId) {
+    const apiBase = resolveApiBase(config);
+    if (!apiBase)
+        return null;
+    const headers = authHeaders(config);
+    const existing = await getJson(config, `${apiBase}/api/workflows/lookup?name=${encodeURIComponent(config.name)}`, headers);
+    if (!existing || ['cancelled', 'completed', 'budget_capped', 'duration_capped'].includes(existing.state ?? '')) {
+        return null;
+    }
+    const chain = await getJson(config, `${apiBase}/api/workflows/${existing.workflow_id}/chain`, headers);
+    const validation = await (0, chain_validator_1.validateReceiptChain)(chain.receipts);
+    if (!validation.ok) {
+        throw new errors_1.AgentGuardChainCorruptError(`Cannot resume workflow ${existing.workflow_id}: chain validation failed.`, {
+            workflow_id: existing.workflow_id,
+            broken_at: validation.broken_at,
+            reason: validation.reason,
+        });
+    }
+    return WorkflowContext.fromCheckpoint(config, { ...existing, receipts: chain.receipts }, userId);
+}
+function resolveApiBase(config) {
+    const value = config.api_base_url || process.env.AGENTGUARD_WORKFLOW_API_BASE || '';
+    return value ? value.replace(/\/$/, '') : null;
+}
+function authHeaders(config) {
+    const license = config.license_key || process.env.AGENTGUARD_LICENSE_KEY || '';
+    return {
+        'content-type': 'application/json',
+        ...(license ? { authorization: `Bearer ${license}` } : {}),
+    };
+}
+async function postJson(config, url, body) {
+    const headers = authHeaders(config);
+    if (config.post_json)
+        return config.post_json(url, body, headers);
+    const response = await fetch(url, { method: 'POST', headers, body: JSON.stringify(body) });
+    if (!response.ok)
+        throw new Error(`Workflow API request failed: ${response.status}`);
+    return response.json();
+}
+async function getJson(config, url, headers) {
+    if (config.get_json)
+        return config.get_json(url, headers);
+    const response = await fetch(url, { headers });
+    if (response.status === 404)
+        return null;
+    if (!response.ok)
+        throw new Error(`Workflow API request failed: ${response.status}`);
+    return response.json();
+}
+function extractReviewerCascade(result) {
+    if (!isRecord(result))
+        return null;
+    const value = result.reviewer_cascade;
+    if (!isRecord(value))
+        return null;
+    return {
+        triggered: value.triggered === true,
+        drafter_model: typeof value.drafter_model === 'string' ? value.drafter_model : null,
+        reviewer_model: typeof value.reviewer_model === 'string' ? value.reviewer_model : null,
+        drafter_output_hash: typeof value.drafter_output_hash === 'string' ? value.drafter_output_hash : null,
+        reviewer_verdict: value.reviewer_verdict === 'approve' || value.reviewer_verdict === 'block' || value.reviewer_verdict === 'revise'
+            ? value.reviewer_verdict
+            : null,
+        reviewer_reasoning_hash: typeof value.reviewer_reasoning_hash === 'string' ? value.reviewer_reasoning_hash : null,
+        review_started_at: typeof value.review_started_at === 'string' ? value.review_started_at : null,
+        review_completed_at: typeof value.review_completed_at === 'string' ? value.review_completed_at : null,
+    };
+}
+function validateConfig(config) {
+    if (!config.name || !config.name.trim())
+        throw new Error('Workflow name is required');
+    if (!Number.isFinite(config.budget_cap_usd) || config.budget_cap_usd <= 0) {
+        throw new Error('Workflow budget_cap_usd must be greater than zero');
+    }
+    if (!Number.isFinite(config.duration_cap_hours) || config.duration_cap_hours <= 0) {
+        throw new Error('Workflow duration_cap_hours must be greater than zero');
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+//# sourceMappingURL=context.js.map