@agimon-ai/po-core 0.0.0-alpha.119 → 0.0.0-alpha.120

package/dist/apiContracts.d.mts

@@ -555,6 +555,8 @@ interface PoWorkflowLaunchOverrides {
   readonly env?: Readonly<Record<string, string>>;
   readonly prompt?: string;
   readonly name?: string;
+  /** Team whose members role-bound jobs resolve to, instead of the workflow's default team. */
+  readonly team?: string;
 }
 /** Session-owned. Rejection means no observable registration was accepted. */
 interface PoWorkflowLaunchService {
@@ -814,6 +816,33 @@ interface PoWorkflowContextService {
   readonly state: PoWorkflowRunsService;
   readonly children?: PoWorkflowChildrenSession;
 }
+interface PoWorkflowIdentityRequest {
+  readonly team: string;
+  /** Every role the job declares; all of them must belong to one member. */
+  readonly roles: readonly string[];
+}
+/** One member a job was admitted as. Kept in run state, so it carries names and digests, never secrets. */
+interface PoWorkflowIdentityBinding {
+  readonly team: string;
+  readonly teamRevision: string;
+  readonly product?: string;
+  readonly roles: readonly string[];
+  /** Stable across machines; the local profile name may differ between them. */
+  readonly ref: string;
+  readonly profile: string;
+  readonly contentDigest: string;
+  readonly policyDigest: string;
+}
+/**
+ * Resolves role-bound workflow jobs to team members. Bound per workspace by the package that owns
+ * profiles and teams; the workspace comes from that scope, never from workflow input. Both calls
+ * throw, without naming secrets, when no single authorized member qualifies.
+ */
+interface PoWorkflowIdentityService {
+  resolve(request: PoWorkflowIdentityRequest): Promise<PoWorkflowIdentityBinding>;
+  /** Rechecks a saved binding against the current team and authorization, returning it as it stands now. */
+  revalidate(binding: PoWorkflowIdentityBinding): Promise<PoWorkflowIdentityBinding>;
+}
 declare module '@deepseek-ai/cordis' {
   interface Context {
     'po/workflow-launch': PoWorkflowLaunchService;
@@ -821,6 +850,7 @@ declare module '@deepseek-ai/cordis' {
     'po/workflow-runs': PoWorkflowRunsService;
     'po/workflow-context': PoWorkflowContextService;
     'po/workflow-admissions': PoWorkflowAdmissionsService;
+    'po/workflow-identity': PoWorkflowIdentityService;
   }
 }
 //#endregion

package/dist/apiContracts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverBundle.ts","../src/schemas/brain.ts","../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/notification.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;;;UAKiB;WACN;WACA;;UAGM;WACN;;WAEA;;WAEA,cAAc;;WAEd,iBAAiB;;WAEjB,cAAc;;WAEd;;WAEA;WACA,iBAAiB;WACjB,iBAAiB;WACjB;;;;;UCtBM;EACf;EACA,OAAO;;UAGQ;EACf;EACA;EACA,QAAQ,YAAY;;UAGL;EACf;EACA;EACA,OAAO;EACP,aAAa;EACb,OAAO;EACP;EACA;;UAGe;EACf;EACA;EACA,OAAO;EACP,OAAO;;;UAIQ;EACf;EACA;EACA;EACA;;UAGe;EACf,OAAO;EACP,OAAO;EACP,KAAK;;EAEL,SAAS;;UAGM;EACf,OAAO;EACP,QAAQ;EACR,UAAU;;EAEV,iBAAiB;EACjB,UAAU;EACV,WAAW;EACX,OAAO;EACP;;;UA+Be;EACf;EACA;IACE;IACA,OAAO;IACP;IACA;IACA;;EAEF;IACE;IACA;IACA,OAAO;IACP;;EAEF;;;;;UCrFe,kBAAkB;WACxB;WACA,OAAO;;WAEP;;WAEA,QAAQ;;;KAeP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UA0BnB;WACN,OAAO;;EAEhB,YAAY;;;;;;EAMZ,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UC1GN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCSM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAS/C;IACR,eAAe;;;;;cCjEN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;cCtE3B,6BAA2B,KAAA;;;;;;;KAU5B,wBAAwB,cAAc;;UA2BjC;WACN;EACT,QAAQ,SAAS,+BAA+B;;;YAItC;IACR,mBAAmB;;;;;;UCjDN;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;;UAIjE;WACN;;WAEA;WACA;;UAGM;WACN;;WAEA;;;;;;;UAQM;WACN;;EAET,UAAU,aAAa,SAAS,cAAc,QAAQ;IAAsB;IAAc;;;EAE1F,SACE,aACA,SAAS,cACR,QAAQ;IAAsB;IAAc;MAAS;MAAc;;IAAkB;;;EAExF,WACE,SAAS,4BACT,SAAS,cACR,QAAQ;IAAsB;IAAc;;;UAGhC;WACN;;EAET,KAAK,cAAc,SAASI,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;UAIzB;WACN;WACA;;WAEA;WACA;WACA;aACE;aACA;aACA;aACA;aACA;aACA;;;;UAKI;;WAEN;;WAEA;aACE;aACA;aACA;aACA;;;WAGF;aAA+B;aAA2B;aAAqB,MAAM;;;WAErF,QAAQ,SAAS,eAAe;WAChC,0BAA0B;;;;;;UAOpB;WACN;;;;;EAKT,YAAY,mBAAmB;aAAmB;aAA0B,OAAO;;;EAEnF,SAAS,wBAAwB,QAAQ;aAAoC;;EAC7E,QAAQ;aACG;MACP;aAAmB;aAA0B,QAAQ,SAAS;;;;YA0BxD;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB;eAA+B;;;;;;;cC/PtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;;;;;;KAQtB,8BAA8B;UAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;UAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;UAG7C,qCAAqC;WAC3C,SAAS;;;;;WAKT;;UAGM;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;WAErF;;KAGC;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;;;;UC1Cb;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCxQC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;qBChTX;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCPzD;WACN,OAAO;WACP,SAAS;;;;;;KAoBR,YAAY,UAAU,oBAAoB,UAAU,sBAAsB,KACpF,kBAAkB,OAAO,QAAQ;WAEpB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,OAAO,OAAO,iBACxE,EAAE;WAAsB,cAAc,UAAU;IAAY,OAAO,OAAO;;;KCnClE,+CAA+C;GAAiB,cAAc;;;;qBC4E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCrQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}
+{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverBundle.ts","../src/schemas/brain.ts","../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/notification.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;;;UAKiB;WACN;WACA;;UAGM;WACN;;WAEA;;WAEA,cAAc;;WAEd,iBAAiB;;WAEjB,cAAc;;WAEd;;WAEA;WACA,iBAAiB;WACjB,iBAAiB;WACjB;;;;;UCtBM;EACf;EACA,OAAO;;UAGQ;EACf;EACA;EACA,QAAQ,YAAY;;UAGL;EACf;EACA;EACA,OAAO;EACP,aAAa;EACb,OAAO;EACP;EACA;;UAGe;EACf;EACA;EACA,OAAO;EACP,OAAO;;;UAIQ;EACf;EACA;EACA;EACA;;UAGe;EACf,OAAO;EACP,OAAO;EACP,KAAK;;EAEL,SAAS;;UAGM;EACf,OAAO;EACP,QAAQ;EACR,UAAU;;EAEV,iBAAiB;EACjB,UAAU;EACV,WAAW;EACX,OAAO;EACP;;;UA+Be;EACf;EACA;IACE;IACA,OAAO;IACP;IACA;IACA;;EAEF;IACE;IACA;IACA,OAAO;IACP;;EAEF;;;;;UCrFe,kBAAkB;WACxB;WACA,OAAO;;WAEP;;WAEA,QAAQ;;;KAeP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UA0BnB;WACN,OAAO;;EAEhB,YAAY;;;;;;EAMZ,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UC1GN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCSM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAS/C;IACR,eAAe;;;;;cCjEN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;cCtE3B,6BAA2B,KAAA;;;;;;;KAU5B,wBAAwB,cAAc;;UA2BjC;WACN;EACT,QAAQ,SAAS,+BAA+B;;;YAItC;IACR,mBAAmB;;;;;;UCjDN;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;;UAIjE;WACN;;WAEA;WACA;;UAGM;WACN;;WAEA;;;;;;;UAQM;WACN;;EAET,UAAU,aAAa,SAAS,cAAc,QAAQ;IAAsB;IAAc;;;EAE1F,SACE,aACA,SAAS,cACR,QAAQ;IAAsB;IAAc;MAAS;MAAc;;IAAkB;;;EAExF,WACE,SAAS,4BACT,SAAS,cACR,QAAQ;IAAsB;IAAc;;;UAGhC;WACN;;EAET,KAAK,cAAc,SAASI,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;UAIzB;WACN;WACA;;WAEA;WACA;WACA;aACE;aACA;aACA;aACA;aACA;aACA;;;;UAKI;;WAEN;;WAEA;aACE;aACA;aACA;aACA;;;WAGF;aAA+B;aAA2B;aAAqB,MAAM;;;WAErF,QAAQ,SAAS,eAAe;WAChC,0BAA0B;;;;;;UAOpB;WACN;;;;;EAKT,YAAY,mBAAmB;aAAmB;aAA0B,OAAO;;;EAEnF,SAAS,wBAAwB,QAAQ;aAAoC;;EAC7E,QAAQ;aACG;MACP;aAAmB;aAA0B,QAAQ,SAAS;;;;YA0BxD;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB;eAA+B;;;;;;;cC9PtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;WAEA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;;;;;;KAQtB,8BAA8B;UAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;UAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;UAG7C,qCAAqC;WAC3C,SAAS;;;;;WAKT;;UAGM;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;WAErF;;KAGC;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;UAGL;WACN;;WAEA;;;UAIM;WACN;WACA;WACA;WACA;;WAEA;WACA;WACA;WACA;;;;;;;UAQM;EACf,QAAQ,SAAS,4BAA4B,QAAQ;;EAErD,WAAW,SAAS,4BAA4B,QAAQ;;;YAK9C;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;IAC1B,wBAAwB;;;;;;UC5EX;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCxQC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;qBChTX;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCPzD;WACN,OAAO;WACP,SAAS;;;;;;KAoBR,YAAY,UAAU,oBAAoB,UAAU,sBAAsB,KACpF,kBAAkB,OAAO,QAAQ;WAEpB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,OAAO,OAAO,iBACxE,EAAE;WAAsB,cAAc,UAAU;IAAY,OAAO,OAAO;;;KCnClE,+CAA+C;GAAiB,cAAc;;;;qBC4E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCrQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}

package/dist/src/schemas/workflow.cjs

@@ -5,6 +5,7 @@ const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = "po/workflow-definition-sources";
 const PO_WORKFLOW_RUNS_SERVICE = "po/workflow-runs";
 const PO_WORKFLOW_CONTEXT_SERVICE = "po/workflow-context";
 const PO_WORKFLOW_ADMISSIONS_SERVICE = "po/workflow-admissions";
+const PO_WORKFLOW_IDENTITY_SERVICE = "po/workflow-identity";
 /** A source-relative definition, never an arbitrary host path. */
 const PoWorkflowDefinitionRefSchema = typebox.Type.Object({
 	source: typebox.Type.String({ minLength: 1 }),
@@ -35,10 +36,14 @@ function readPoWorkflowContextService(context) {
 function readPoWorkflowAdmissionsService(context) {
 	return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE);
 }
+function readPoWorkflowIdentityService(context) {
+	return context.get(PO_WORKFLOW_IDENTITY_SERVICE);
+}
 //#endregion
 exports.PO_WORKFLOW_ADMISSIONS_SERVICE = PO_WORKFLOW_ADMISSIONS_SERVICE;
 exports.PO_WORKFLOW_CONTEXT_SERVICE = PO_WORKFLOW_CONTEXT_SERVICE;
 exports.PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = PO_WORKFLOW_DEFINITION_SOURCES_SERVICE;
+exports.PO_WORKFLOW_IDENTITY_SERVICE = PO_WORKFLOW_IDENTITY_SERVICE;
 exports.PO_WORKFLOW_LAUNCH_SERVICE = PO_WORKFLOW_LAUNCH_SERVICE;
 exports.PO_WORKFLOW_RUNS_SERVICE = PO_WORKFLOW_RUNS_SERVICE;
 exports.PoWorkflowDefinitionRefSchema = PoWorkflowDefinitionRefSchema;
@@ -46,6 +51,7 @@ exports.PoWorkflowRunRefSchema = PoWorkflowRunRefSchema;
 exports.readPoWorkflowAdmissionsService = readPoWorkflowAdmissionsService;
 exports.readPoWorkflowContextService = readPoWorkflowContextService;
 exports.readPoWorkflowDefinitionSourcesService = readPoWorkflowDefinitionSourcesService;
+exports.readPoWorkflowIdentityService = readPoWorkflowIdentityService;
 exports.readPoWorkflowLaunchService = readPoWorkflowLaunchService;
 exports.readPoWorkflowRunsService = readPoWorkflowRunsService;
 

package/dist/src/schemas/workflow.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.cjs","names":["Type"],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n  /**\n   * Run the workflow as this same-workspace session instead of the caller, for example a session in an\n   * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.\n   */\n  readonly targetSessionId?: string;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n  /** Declared by the definition and reported only: the engine never provisions a checkout itself. */\n  readonly isolation?: 'checkout';\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgCA,QAAAA,KAAK,OAChD;CACE,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAKA,QAAAA,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyBA,QAAAA,KAAK,OACzC;CACE,OAAOA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AA+SA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}
+{"version":3,"file":"workflow.cjs","names":["Type"],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\nexport const PO_WORKFLOW_IDENTITY_SERVICE = 'po/workflow-identity';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n  /** Team whose members role-bound jobs resolve to, instead of the workflow's default team. */\n  readonly team?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n  /**\n   * Run the workflow as this same-workspace session instead of the caller, for example a session in an\n   * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.\n   */\n  readonly targetSessionId?: string;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n  /** Declared by the definition and reported only: the engine never provisions a checkout itself. */\n  readonly isolation?: 'checkout';\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\nexport interface PoWorkflowIdentityRequest {\n  readonly team: string;\n  /** Every role the job declares; all of them must belong to one member. */\n  readonly roles: readonly string[];\n}\n\n/** One member a job was admitted as. Kept in run state, so it carries names and digests, never secrets. */\nexport interface PoWorkflowIdentityBinding {\n  readonly team: string;\n  readonly teamRevision: string;\n  readonly product?: string;\n  readonly roles: readonly string[];\n  /** Stable across machines; the local profile name may differ between them. */\n  readonly ref: string;\n  readonly profile: string;\n  readonly contentDigest: string;\n  readonly policyDigest: string;\n}\n\n/**\n * Resolves role-bound workflow jobs to team members. Bound per workspace by the package that owns\n * profiles and teams; the workspace comes from that scope, never from workflow input. Both calls\n * throw, without naming secrets, when no single authorized member qualifies.\n */\nexport interface PoWorkflowIdentityService {\n  resolve(request: PoWorkflowIdentityRequest): Promise<PoWorkflowIdentityBinding>;\n  /** Rechecks a saved binding against the current team and authorization, returning it as it stands now. */\n  revalidate(binding: PoWorkflowIdentityBinding): Promise<PoWorkflowIdentityBinding>;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n    'po/workflow-identity': PoWorkflowIdentityService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n\nexport function readPoWorkflowIdentityService(context: Context): PoWorkflowIdentityService | undefined {\n  return context.get(PO_WORKFLOW_IDENTITY_SERVICE) as PoWorkflowIdentityService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;AAC9C,MAAa,+BAA+B;;AAG5C,MAAa,gCAAgCA,QAAAA,KAAK,OAChD;CACE,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAKA,QAAAA,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyBA,QAAAA,KAAK,OACzC;CACE,OAAOA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAgVA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD;AAEA,SAAgB,8BAA8B,SAAyD;CACrG,OAAO,QAAQ,IAAI,4BAA4B;AACjD"}

package/dist/src/schemas/workflow.d.mts

@@ -7,6 +7,7 @@ export declare const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = "po/workflow-defin
 export declare const PO_WORKFLOW_RUNS_SERVICE = "po/workflow-runs";
 export declare const PO_WORKFLOW_CONTEXT_SERVICE = "po/workflow-context";
 export declare const PO_WORKFLOW_ADMISSIONS_SERVICE = "po/workflow-admissions";
+export declare const PO_WORKFLOW_IDENTITY_SERVICE = "po/workflow-identity";
 /** A source-relative definition, never an arbitrary host path. */
 export declare const PoWorkflowDefinitionRefSchema: Type.TObject<{
   source: Type.TString;
@@ -30,6 +31,8 @@ export interface PoWorkflowLaunchOverrides {
   readonly env?: Readonly<Record<string, string>>;
   readonly prompt?: string;
   readonly name?: string;
+  /** Team whose members role-bound jobs resolve to, instead of the workflow's default team. */
+  readonly team?: string;
 }
 /** Session-owned. Rejection means no observable registration was accepted. */
 export interface PoWorkflowLaunchService {
@@ -289,6 +292,33 @@ export interface PoWorkflowContextService {
   readonly state: PoWorkflowRunsService;
   readonly children?: PoWorkflowChildrenSession;
 }
+export interface PoWorkflowIdentityRequest {
+  readonly team: string;
+  /** Every role the job declares; all of them must belong to one member. */
+  readonly roles: readonly string[];
+}
+/** One member a job was admitted as. Kept in run state, so it carries names and digests, never secrets. */
+export interface PoWorkflowIdentityBinding {
+  readonly team: string;
+  readonly teamRevision: string;
+  readonly product?: string;
+  readonly roles: readonly string[];
+  /** Stable across machines; the local profile name may differ between them. */
+  readonly ref: string;
+  readonly profile: string;
+  readonly contentDigest: string;
+  readonly policyDigest: string;
+}
+/**
+ * Resolves role-bound workflow jobs to team members. Bound per workspace by the package that owns
+ * profiles and teams; the workspace comes from that scope, never from workflow input. Both calls
+ * throw, without naming secrets, when no single authorized member qualifies.
+ */
+export interface PoWorkflowIdentityService {
+  resolve(request: PoWorkflowIdentityRequest): Promise<PoWorkflowIdentityBinding>;
+  /** Rechecks a saved binding against the current team and authorization, returning it as it stands now. */
+  revalidate(binding: PoWorkflowIdentityBinding): Promise<PoWorkflowIdentityBinding>;
+}
 declare module '@deepseek-ai/cordis' {
   interface Context {
     'po/workflow-launch': PoWorkflowLaunchService;
@@ -296,6 +326,7 @@ declare module '@deepseek-ai/cordis' {
     'po/workflow-runs': PoWorkflowRunsService;
     'po/workflow-context': PoWorkflowContextService;
     'po/workflow-admissions': PoWorkflowAdmissionsService;
+    'po/workflow-identity': PoWorkflowIdentityService;
   }
 }
 export declare function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined;
@@ -303,5 +334,6 @@ export declare function readPoWorkflowDefinitionSourcesService(context: Context)
 export declare function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined;
 export declare function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined;
 export declare function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined;
+export declare function readPoWorkflowIdentityService(context: Context): PoWorkflowIdentityService | undefined;
 //#endregion
 //# sourceMappingURL=workflow.d.mts.map

package/dist/src/schemas/workflow.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.mts","names":["_$__hubChannel0.PoHubSessionUsage"],"sources":["../../../src/schemas/workflow.ts"],"mappings":";;;;qBAGa;qBACA;qBACA;qBACA;qBACA;;qBAGA,+BAA6B,KAAA;;;;YAU9B,0BAA0B,cAAc;;qBAGvC,wBAAsB,KAAA;;;;;;YASvB,mBAAmB,cAAc;iBAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;iBAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;iBAI7E;WACN;WACA;;;iBAIM;WACN;WACA;;iBAGM;WACN,aAAa;WACb,OAAO;;iBAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;iBAGF;;WAEN,cAAc,SAAS;;;;;;;YAQtB,8BAA8B;iBAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;iBAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;iBAG7C,qCAAqC;WAC3C,SAAS;;;;;WAKT;;iBAGM;WACN;;YAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;iBAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;WAErF;;YAGC;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;iBAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;iBAEU;WACN;;WAEA;;iBAGM;WACN;WACA;EACT;;;iBAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;YAG7B;YACA;YACA;iBAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;iBAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;iBAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;iBAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;iBAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;iBAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARMA;;iBAWA;WACN;WACA;WACA;WACA;WACA;WACA;;iBAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;iBAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;iBAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;wBAId,4BAA4B,SAAS,UAAU;wBAI/C,uCACd,SAAS,UACR;wBAIa,0BAA0B,SAAS,UAAU;wBAI7C,6BAA6B,SAAS,UAAU;wBAIhD,gCAAgC,SAAS,UAAU"}
+{"version":3,"file":"workflow.d.mts","names":["_$__hubChannel0.PoHubSessionUsage"],"sources":["../../../src/schemas/workflow.ts"],"mappings":";;;;qBAGa;qBACA;qBACA;qBACA;qBACA;qBACA;;qBAGA,+BAA6B,KAAA;;;;YAU9B,0BAA0B,cAAc;;qBAGvC,wBAAsB,KAAA;;;;;;YASvB,mBAAmB,cAAc;iBAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;WAEA;;;iBAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;iBAI7E;WACN;WACA;;;iBAIM;WACN;WACA;;iBAGM;WACN,aAAa;WACb,OAAO;;iBAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;iBAGF;;WAEN,cAAc,SAAS;;;;;;;YAQtB,8BAA8B;iBAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;iBAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;iBAG7C,qCAAqC;WAC3C,SAAS;;;;;WAKT;;iBAGM;WACN;;YAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;iBAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;WAErF;;YAGC;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;iBAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;iBAEU;WACN;;WAEA;;iBAGM;WACN;WACA;EACT;;;iBAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;YAG7B;YACA;YACA;iBAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;iBAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;iBAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;iBAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;iBAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;iBAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARMA;;iBAWA;WACN;WACA;WACA;WACA;WACA;WACA;;iBAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;iBAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;iBAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;iBAGL;WACN;;WAEA;;;iBAIM;WACN;WACA;WACA;WACA;;WAEA;WACA;WACA;WACA;;;;;;;iBAQM;EACf,QAAQ,SAAS,4BAA4B,QAAQ;;EAErD,WAAW,SAAS,4BAA4B,QAAQ;;;YAK9C;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;IAC1B,wBAAwB;;;wBAIZ,4BAA4B,SAAS,UAAU;wBAI/C,uCACd,SAAS,UACR;wBAIa,0BAA0B,SAAS,UAAU;wBAI7C,6BAA6B,SAAS,UAAU;wBAIhD,gCAAgC,SAAS,UAAU;wBAInD,8BAA8B,SAAS,UAAU"}

package/dist/src/schemas/workflow.mjs

@@ -5,6 +5,7 @@ const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = "po/workflow-definition-sources";
 const PO_WORKFLOW_RUNS_SERVICE = "po/workflow-runs";
 const PO_WORKFLOW_CONTEXT_SERVICE = "po/workflow-context";
 const PO_WORKFLOW_ADMISSIONS_SERVICE = "po/workflow-admissions";
+const PO_WORKFLOW_IDENTITY_SERVICE = "po/workflow-identity";
 /** A source-relative definition, never an arbitrary host path. */
 const PoWorkflowDefinitionRefSchema = Type.Object({
 	source: Type.String({ minLength: 1 }),
@@ -35,7 +36,10 @@ function readPoWorkflowContextService(context) {
 function readPoWorkflowAdmissionsService(context) {
 	return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE);
 }
+function readPoWorkflowIdentityService(context) {
+	return context.get(PO_WORKFLOW_IDENTITY_SERVICE);
+}
 //#endregion
-export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowDefinitionRefSchema, PoWorkflowRunRefSchema, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService };
+export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_IDENTITY_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowDefinitionRefSchema, PoWorkflowRunRefSchema, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowIdentityService, readPoWorkflowLaunchService, readPoWorkflowRunsService };
 
 //# sourceMappingURL=workflow.mjs.map

package/dist/src/schemas/workflow.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.mjs","names":[],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n  /**\n   * Run the workflow as this same-workspace session instead of the caller, for example a session in an\n   * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.\n   */\n  readonly targetSessionId?: string;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n  /** Declared by the definition and reported only: the engine never provisions a checkout itself. */\n  readonly isolation?: 'checkout';\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgC,KAAK,OAChD;CACE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAK,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyB,KAAK,OACzC;CACE,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AA+SA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}
+{"version":3,"file":"workflow.mjs","names":[],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\nexport const PO_WORKFLOW_IDENTITY_SERVICE = 'po/workflow-identity';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n  /** Team whose members role-bound jobs resolve to, instead of the workflow's default team. */\n  readonly team?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n  /**\n   * Run the workflow as this same-workspace session instead of the caller, for example a session in an\n   * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.\n   */\n  readonly targetSessionId?: string;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n  /** Declared by the definition and reported only: the engine never provisions a checkout itself. */\n  readonly isolation?: 'checkout';\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\nexport interface PoWorkflowIdentityRequest {\n  readonly team: string;\n  /** Every role the job declares; all of them must belong to one member. */\n  readonly roles: readonly string[];\n}\n\n/** One member a job was admitted as. Kept in run state, so it carries names and digests, never secrets. */\nexport interface PoWorkflowIdentityBinding {\n  readonly team: string;\n  readonly teamRevision: string;\n  readonly product?: string;\n  readonly roles: readonly string[];\n  /** Stable across machines; the local profile name may differ between them. */\n  readonly ref: string;\n  readonly profile: string;\n  readonly contentDigest: string;\n  readonly policyDigest: string;\n}\n\n/**\n * Resolves role-bound workflow jobs to team members. Bound per workspace by the package that owns\n * profiles and teams; the workspace comes from that scope, never from workflow input. Both calls\n * throw, without naming secrets, when no single authorized member qualifies.\n */\nexport interface PoWorkflowIdentityService {\n  resolve(request: PoWorkflowIdentityRequest): Promise<PoWorkflowIdentityBinding>;\n  /** Rechecks a saved binding against the current team and authorization, returning it as it stands now. */\n  revalidate(binding: PoWorkflowIdentityBinding): Promise<PoWorkflowIdentityBinding>;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n    'po/workflow-identity': PoWorkflowIdentityService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n\nexport function readPoWorkflowIdentityService(context: Context): PoWorkflowIdentityService | undefined {\n  return context.get(PO_WORKFLOW_IDENTITY_SERVICE) as PoWorkflowIdentityService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;AAC9C,MAAa,+BAA+B;;AAG5C,MAAa,gCAAgC,KAAK,OAChD;CACE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAK,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyB,KAAK,OACzC;CACE,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAgVA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD;AAEA,SAAgB,8BAA8B,SAAyD;CACrG,OAAO,QAAQ,IAAI,4BAA4B;AACjD"}

package/dist/workflow.cjs

@@ -3,6 +3,7 @@ const require_workflow = require("./src/schemas/workflow.cjs");
 exports.PO_WORKFLOW_ADMISSIONS_SERVICE = require_workflow.PO_WORKFLOW_ADMISSIONS_SERVICE;
 exports.PO_WORKFLOW_CONTEXT_SERVICE = require_workflow.PO_WORKFLOW_CONTEXT_SERVICE;
 exports.PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = require_workflow.PO_WORKFLOW_DEFINITION_SOURCES_SERVICE;
+exports.PO_WORKFLOW_IDENTITY_SERVICE = require_workflow.PO_WORKFLOW_IDENTITY_SERVICE;
 exports.PO_WORKFLOW_LAUNCH_SERVICE = require_workflow.PO_WORKFLOW_LAUNCH_SERVICE;
 exports.PO_WORKFLOW_RUNS_SERVICE = require_workflow.PO_WORKFLOW_RUNS_SERVICE;
 exports.PoWorkflowDefinitionRefSchema = require_workflow.PoWorkflowDefinitionRefSchema;
@@ -10,5 +11,6 @@ exports.PoWorkflowRunRefSchema = require_workflow.PoWorkflowRunRefSchema;
 exports.readPoWorkflowAdmissionsService = require_workflow.readPoWorkflowAdmissionsService;
 exports.readPoWorkflowContextService = require_workflow.readPoWorkflowContextService;
 exports.readPoWorkflowDefinitionSourcesService = require_workflow.readPoWorkflowDefinitionSourcesService;
+exports.readPoWorkflowIdentityService = require_workflow.readPoWorkflowIdentityService;
 exports.readPoWorkflowLaunchService = require_workflow.readPoWorkflowLaunchService;
 exports.readPoWorkflowRunsService = require_workflow.readPoWorkflowRunsService;

package/dist/workflow.d.mts

@@ -1,2 +1,2 @@
-import { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowAdmission, PoWorkflowAdmissionOverrides, PoWorkflowAdmissionRequest, PoWorkflowAdmissionsService, PoWorkflowChildInvocation, PoWorkflowChildrenSession, PoWorkflowChildrenStatus, PoWorkflowConfig, PoWorkflowContextService, PoWorkflowCriterionState, PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, PoWorkflowDefinitionSource, PoWorkflowDefinitionSourceHandle, PoWorkflowDefinitionSourcesService, PoWorkflowExecutionPolicyRequest, PoWorkflowExecutionPolicyResult, PoWorkflowJobState, PoWorkflowLaunchOverrides, PoWorkflowLaunchService, PoWorkflowOperationEpoch, PoWorkflowOutcome, PoWorkflowPolicyAssociation, PoWorkflowPolicyBinding, PoWorkflowPolicyOptions, PoWorkflowProgressState, PoWorkflowRecoveryOptions, PoWorkflowRunRef, PoWorkflowRunRefSchema, PoWorkflowRunState, PoWorkflowRunsService, PoWorkflowSettlementOutcome, PoWorkflowSettlementRequest, PoWorkflowStage, PoWorkflowStepState, PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";
-export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, type PoWorkflowAdmission, type PoWorkflowAdmissionOverrides, type PoWorkflowAdmissionRequest, type PoWorkflowAdmissionsService, type PoWorkflowChildInvocation, type PoWorkflowChildrenSession, type PoWorkflowChildrenStatus, type PoWorkflowConfig, type PoWorkflowContextService, type PoWorkflowCriterionState, type PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, type PoWorkflowDefinitionSource, type PoWorkflowDefinitionSourceHandle, type PoWorkflowDefinitionSourcesService, type PoWorkflowExecutionPolicyRequest, type PoWorkflowExecutionPolicyResult, type PoWorkflowJobState, type PoWorkflowLaunchOverrides, type PoWorkflowLaunchService, type PoWorkflowOperationEpoch, type PoWorkflowOutcome, type PoWorkflowPolicyAssociation, type PoWorkflowPolicyBinding, type PoWorkflowPolicyOptions, type PoWorkflowProgressState, type PoWorkflowRecoveryOptions, type PoWorkflowRunRef, PoWorkflowRunRefSchema, type PoWorkflowRunState, type PoWorkflowRunsService, type PoWorkflowSettlementOutcome, type PoWorkflowSettlementRequest, type PoWorkflowStage, type PoWorkflowStepState, type PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService };
+import { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_IDENTITY_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowAdmission, PoWorkflowAdmissionOverrides, PoWorkflowAdmissionRequest, PoWorkflowAdmissionsService, PoWorkflowChildInvocation, PoWorkflowChildrenSession, PoWorkflowChildrenStatus, PoWorkflowConfig, PoWorkflowContextService, PoWorkflowCriterionState, PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, PoWorkflowDefinitionSource, PoWorkflowDefinitionSourceHandle, PoWorkflowDefinitionSourcesService, PoWorkflowExecutionPolicyRequest, PoWorkflowExecutionPolicyResult, PoWorkflowIdentityBinding, PoWorkflowIdentityRequest, PoWorkflowIdentityService, PoWorkflowJobState, PoWorkflowLaunchOverrides, PoWorkflowLaunchService, PoWorkflowOperationEpoch, PoWorkflowOutcome, PoWorkflowPolicyAssociation, PoWorkflowPolicyBinding, PoWorkflowPolicyOptions, PoWorkflowProgressState, PoWorkflowRecoveryOptions, PoWorkflowRunRef, PoWorkflowRunRefSchema, PoWorkflowRunState, PoWorkflowRunsService, PoWorkflowSettlementOutcome, PoWorkflowSettlementRequest, PoWorkflowStage, PoWorkflowStepState, PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowIdentityService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";
+export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_IDENTITY_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, type PoWorkflowAdmission, type PoWorkflowAdmissionOverrides, type PoWorkflowAdmissionRequest, type PoWorkflowAdmissionsService, type PoWorkflowChildInvocation, type PoWorkflowChildrenSession, type PoWorkflowChildrenStatus, type PoWorkflowConfig, type PoWorkflowContextService, type PoWorkflowCriterionState, type PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, type PoWorkflowDefinitionSource, type PoWorkflowDefinitionSourceHandle, type PoWorkflowDefinitionSourcesService, type PoWorkflowExecutionPolicyRequest, type PoWorkflowExecutionPolicyResult, type PoWorkflowIdentityBinding, type PoWorkflowIdentityRequest, type PoWorkflowIdentityService, type PoWorkflowJobState, type PoWorkflowLaunchOverrides, type PoWorkflowLaunchService, type PoWorkflowOperationEpoch, type PoWorkflowOutcome, type PoWorkflowPolicyAssociation, type PoWorkflowPolicyBinding, type PoWorkflowPolicyOptions, type PoWorkflowProgressState, type PoWorkflowRecoveryOptions, type PoWorkflowRunRef, PoWorkflowRunRefSchema, type PoWorkflowRunState, type PoWorkflowRunsService, type PoWorkflowSettlementOutcome, type PoWorkflowSettlementRequest, type PoWorkflowStage, type PoWorkflowStepState, type PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowIdentityService, readPoWorkflowLaunchService, readPoWorkflowRunsService };

package/dist/workflow.mjs

@@ -1 +1 @@
-export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowDefinitionRefSchema, PoWorkflowRunRefSchema, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";
+export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_IDENTITY_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowDefinitionRefSchema, PoWorkflowRunRefSchema, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowIdentityService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agimon-ai/po-core",
-  "version": "0.0.0-alpha.119",
+  "version": "0.0.0-alpha.120",
   "description": "Po runtime systems and reusable core services.",
   "keywords": [
     "ai",
@@ -609,8 +609,8 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@agimon-ai/po-logsink": "0.0.1-alpha.101",
-    "@agimon-ai/po-web-security": "0.0.0-alpha.119",
+    "@agimon-ai/po-logsink": "0.0.1-alpha.102",
+    "@agimon-ai/po-web-security": "0.0.0-alpha.120",
     "@deepseek-ai/cordis": "4.0.5",
     "@earendil-works/chord": "1.5.0",
     "@earendil-works/pi-agent-core": "1.5.0",
@@ -636,7 +636,7 @@
     "yaml": "2.9.1"
   },
   "devDependencies": {
-    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.119",
+    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.120",
     "@apidevtools/swagger-parser": "^13.1.0",
     "@asyncapi/parser": "^3.6.4",
     "@earendil-works/pi-ai": "1.5.0",