@agimon-ai/po-core 0.0.0-alpha.79 → 0.0.0-alpha.80

package/dist/apiContracts.d.mts

@@ -336,6 +336,101 @@ interface PoWorkflowLaunchOverrides {
 interface PoWorkflowLaunchService {
   launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;
 }
+/** Non-secret host association. Environment variables never establish this binding. */
+interface PoWorkflowPolicyAssociation {
+  readonly coordinator: string;
+  readonly key: string;
+}
+/** Independent of runId and executionGeneration, including continue-next resumes. */
+interface PoWorkflowOperationEpoch {
+  readonly admissionId: string;
+  readonly operationId: string;
+}
+interface PoWorkflowPolicyBinding {
+  readonly association: PoWorkflowPolicyAssociation;
+  readonly epoch: PoWorkflowOperationEpoch;
+}
+interface PoWorkflowExecutionPolicyRequest {
+  readonly binding: PoWorkflowPolicyBinding;
+  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';
+  readonly ownerSessionId: string;
+  readonly launcherSessionId: string;
+  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */
+  readonly run?: PoWorkflowRunRef;
+  readonly previousRun?: PoWorkflowRunRef;
+  /** Ephemeral host lifetime, never persisted. */
+  readonly signal: AbortSignal;
+}
+interface PoWorkflowExecutionPolicyResult {
+  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */
+  readonly environment?: Readonly<Record<string, string>>;
+}
+interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {
+  readonly policy?: PoWorkflowPolicyAssociation;
+}
+interface PoWorkflowRecoveryOptions {
+  readonly runner?: string;
+}
+type PoWorkflowAdmissionRequest = {
+  readonly kind: 'launch';
+  readonly definition: PoWorkflowDefinitionRef;
+  readonly overrides?: PoWorkflowAdmissionOverrides;
+} | {
+  readonly kind: 'recover';
+  readonly previousRun: PoWorkflowRunRef;
+  readonly options?: PoWorkflowRecoveryOptions;
+};
+interface PoWorkflowValidationReport {
+  readonly errors: readonly {
+    readonly code: string;
+    readonly message: string;
+    readonly location?: string;
+  }[];
+  readonly warnings: readonly {
+    readonly code: string;
+    readonly message: string;
+    readonly location?: string;
+  }[];
+  readonly deferred: readonly {
+    readonly location: string;
+    readonly reference: string;
+    readonly reason: string;
+  }[];
+}
+type PoWorkflowAdmission = {
+  readonly attemptId: string;
+  readonly admissionId: string;
+  readonly state: 'pending';
+  readonly binding?: PoWorkflowPolicyBinding;
+} | {
+  readonly attemptId: string;
+  readonly admissionId: string;
+  readonly state: 'rejected';
+  readonly errors: readonly string[];
+} | {
+  readonly attemptId: string;
+  readonly admissionId: string;
+  readonly state: 'registered';
+  readonly run: PoWorkflowRunRef;
+  readonly binding?: PoWorkflowPolicyBinding;
+};
+/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */
+interface PoWorkflowAdmissionsService {
+  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;
+  launch(attemptId: string, definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowAdmissionOverrides): Promise<PoWorkflowAdmission>;
+  recover(attemptId: string, previousRun: PoWorkflowRunRef, options?: PoWorkflowRecoveryOptions): Promise<PoWorkflowAdmission>;
+  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */
+  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;
+  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.
+   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.
+   * The engine persists the source launcher identity and never falls back to another session's policy.
+   */
+  registerPolicy(coordinator: string, beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>, options: {
+    readonly environmentKeys: readonly string[];
+  }): {
+    dispose(): void;
+  };
+}
 interface PoWorkflowDefinitionSource {
   readonly source: string;
   /** An admitted, materialized absolute directory. Registration does not fetch it. */
@@ -375,6 +470,8 @@ interface PoWorkflowRunState {
   readonly run: PoWorkflowRunRef;
   readonly stage: PoWorkflowStage;
   readonly outcome?: PoWorkflowOutcome;
+  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */
+  readonly binding?: PoWorkflowPolicyBinding;
   readonly jobs: readonly PoWorkflowJobState[];
   readonly children?: readonly PoWorkflowChildrenStatus[];
 }
@@ -469,6 +566,7 @@ declare module '@deepseek-ai/cordis' {
     'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;
     'po/workflow-runs': PoWorkflowRunsService;
     'po/workflow-context': PoWorkflowContextService;
+    'po/workflow-admissions': PoWorkflowAdmissionsService;
   }
 }
 //#endregion

package/dist/apiContracts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/serverBundle.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;UAiBiB,kBAAkB;WACxB;WACA,OAAO;;WAEP,QAAQ;;;KAQP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UAInB;WACN,OAAO;;;;;;EAMhB,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UCxEN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCIM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAQ/C;IACR,eAAe;;;;;cC3DN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;;UC9EvB;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;UAGjE;WACN;;EAET,KAAK,cAAc,SAASG,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;YAsB9B;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf;eAA+B;;;;;;;cC/JtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;UAG7E;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;;;;;;UCkCV;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCzMC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;;UChTP;WACN;WACA;;;;qBCAE;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCRzD;WACN,OAAO;WACP,SAAS;;;;;;KAOR,YAAY,UAAU,qBAAqB,UAAU,uBAAuB,KACtF,kBAAkB,OAAO,SAAS;WAErB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,eAC1D,EAAE;WAAsB,cAAc,UAAU;IAAY;;;KCrBpD,+CAA+C;GAAiB,cAAc;;;;qBC2E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCpQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}
+{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/serverBundle.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;UAiBiB,kBAAkB;WACxB;WACA,OAAO;;WAEP,QAAQ;;;KAQP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UAInB;WACN,OAAO;;;;;;EAMhB,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UCxEN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCIM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAQ/C;IACR,eAAe;;;;;cC3DN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;;UC9EvB;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;UAGjE;WACN;;EAET,KAAK,cAAc,SAASG,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;YAsB9B;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf;eAA+B;;;;;;;cC9JtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;UAGjB,qCAAqC;WAC3C,SAAS;;UAGH;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;KAGpF;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE;aAAoB;;IACjB;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;;;;UCxEb;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCzMC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;;UChTP;WACN;WACA;;;;qBCAE;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCRzD;WACN,OAAO;WACP,SAAS;;;;;;KAOR,YAAY,UAAU,qBAAqB,UAAU,uBAAuB,KACtF,kBAAkB,OAAO,SAAS;WAErB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,eAC1D,EAAE;WAAsB,cAAc,UAAU;IAAY;;;KCrBpD,+CAA+C;GAAiB,cAAc;;;;qBC2E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCpQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}

package/dist/src/schemas/workflow.cjs

@@ -4,6 +4,7 @@ const PO_WORKFLOW_LAUNCH_SERVICE = "po/workflow-launch";
 const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = "po/workflow-definition-sources";
 const PO_WORKFLOW_RUNS_SERVICE = "po/workflow-runs";
 const PO_WORKFLOW_CONTEXT_SERVICE = "po/workflow-context";
+const PO_WORKFLOW_ADMISSIONS_SERVICE = "po/workflow-admissions";
 /** A source-relative definition, never an arbitrary host path. */
 const PoWorkflowDefinitionRefSchema = typebox.Type.Object({
 	source: typebox.Type.String({ minLength: 1 }),
@@ -31,13 +32,18 @@ function readPoWorkflowRunsService(context) {
 function readPoWorkflowContextService(context) {
 	return context.get(PO_WORKFLOW_CONTEXT_SERVICE);
 }
+function readPoWorkflowAdmissionsService(context) {
+	return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE);
+}
 //#endregion
+exports.PO_WORKFLOW_ADMISSIONS_SERVICE = PO_WORKFLOW_ADMISSIONS_SERVICE;
 exports.PO_WORKFLOW_CONTEXT_SERVICE = PO_WORKFLOW_CONTEXT_SERVICE;
 exports.PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = PO_WORKFLOW_DEFINITION_SOURCES_SERVICE;
 exports.PO_WORKFLOW_LAUNCH_SERVICE = PO_WORKFLOW_LAUNCH_SERVICE;
 exports.PO_WORKFLOW_RUNS_SERVICE = PO_WORKFLOW_RUNS_SERVICE;
 exports.PoWorkflowDefinitionRefSchema = PoWorkflowDefinitionRefSchema;
 exports.PoWorkflowRunRefSchema = PoWorkflowRunRefSchema;
+exports.readPoWorkflowAdmissionsService = readPoWorkflowAdmissionsService;
 exports.readPoWorkflowContextService = readPoWorkflowContextService;
 exports.readPoWorkflowDefinitionSourcesService = readPoWorkflowDefinitionSourcesService;
 exports.readPoWorkflowLaunchService = readPoWorkflowLaunchService;

package/dist/src/schemas/workflow.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.cjs","names":["Type"],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;;AAG3C,MAAa,gCAAgCA,QAAAA,KAAK,OAChD;CACE,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAKA,QAAAA,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyBA,QAAAA,KAAK,OACzC;CACE,OAAOA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAmKA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD"}
+{"version":3,"file":"workflow.cjs","names":["Type"],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: { readonly environmentKeys: readonly string[] },\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgCA,QAAAA,KAAK,OAChD;CACE,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAKA,QAAAA,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyBA,QAAAA,KAAK,OACzC;CACE,OAAOA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AA4QA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}

package/dist/src/schemas/workflow.d.mts

@@ -6,6 +6,7 @@ export declare const PO_WORKFLOW_LAUNCH_SERVICE = "po/workflow-launch";
 export declare const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = "po/workflow-definition-sources";
 export declare const PO_WORKFLOW_RUNS_SERVICE = "po/workflow-runs";
 export declare const PO_WORKFLOW_CONTEXT_SERVICE = "po/workflow-context";
+export declare const PO_WORKFLOW_ADMISSIONS_SERVICE = "po/workflow-admissions";
 /** A source-relative definition, never an arbitrary host path. */
 export declare const PoWorkflowDefinitionRefSchema: Type.TObject<{
   source: Type.TString;
@@ -34,6 +35,101 @@ export interface PoWorkflowLaunchOverrides {
 export interface PoWorkflowLaunchService {
   launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;
 }
+/** Non-secret host association. Environment variables never establish this binding. */
+export interface PoWorkflowPolicyAssociation {
+  readonly coordinator: string;
+  readonly key: string;
+}
+/** Independent of runId and executionGeneration, including continue-next resumes. */
+export interface PoWorkflowOperationEpoch {
+  readonly admissionId: string;
+  readonly operationId: string;
+}
+export interface PoWorkflowPolicyBinding {
+  readonly association: PoWorkflowPolicyAssociation;
+  readonly epoch: PoWorkflowOperationEpoch;
+}
+export interface PoWorkflowExecutionPolicyRequest {
+  readonly binding: PoWorkflowPolicyBinding;
+  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';
+  readonly ownerSessionId: string;
+  readonly launcherSessionId: string;
+  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */
+  readonly run?: PoWorkflowRunRef;
+  readonly previousRun?: PoWorkflowRunRef;
+  /** Ephemeral host lifetime, never persisted. */
+  readonly signal: AbortSignal;
+}
+export interface PoWorkflowExecutionPolicyResult {
+  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */
+  readonly environment?: Readonly<Record<string, string>>;
+}
+export interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {
+  readonly policy?: PoWorkflowPolicyAssociation;
+}
+export interface PoWorkflowRecoveryOptions {
+  readonly runner?: string;
+}
+export type PoWorkflowAdmissionRequest = {
+  readonly kind: 'launch';
+  readonly definition: PoWorkflowDefinitionRef;
+  readonly overrides?: PoWorkflowAdmissionOverrides;
+} | {
+  readonly kind: 'recover';
+  readonly previousRun: PoWorkflowRunRef;
+  readonly options?: PoWorkflowRecoveryOptions;
+};
+export interface PoWorkflowValidationReport {
+  readonly errors: readonly {
+    readonly code: string;
+    readonly message: string;
+    readonly location?: string;
+  }[];
+  readonly warnings: readonly {
+    readonly code: string;
+    readonly message: string;
+    readonly location?: string;
+  }[];
+  readonly deferred: readonly {
+    readonly location: string;
+    readonly reference: string;
+    readonly reason: string;
+  }[];
+}
+export type PoWorkflowAdmission = {
+  readonly attemptId: string;
+  readonly admissionId: string;
+  readonly state: 'pending';
+  readonly binding?: PoWorkflowPolicyBinding;
+} | {
+  readonly attemptId: string;
+  readonly admissionId: string;
+  readonly state: 'rejected';
+  readonly errors: readonly string[];
+} | {
+  readonly attemptId: string;
+  readonly admissionId: string;
+  readonly state: 'registered';
+  readonly run: PoWorkflowRunRef;
+  readonly binding?: PoWorkflowPolicyBinding;
+};
+/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */
+export interface PoWorkflowAdmissionsService {
+  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;
+  launch(attemptId: string, definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowAdmissionOverrides): Promise<PoWorkflowAdmission>;
+  recover(attemptId: string, previousRun: PoWorkflowRunRef, options?: PoWorkflowRecoveryOptions): Promise<PoWorkflowAdmission>;
+  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */
+  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;
+  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.
+   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.
+   * The engine persists the source launcher identity and never falls back to another session's policy.
+   */
+  registerPolicy(coordinator: string, beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>, options: {
+    readonly environmentKeys: readonly string[];
+  }): {
+    dispose(): void;
+  };
+}
 export interface PoWorkflowDefinitionSource {
   readonly source: string;
   /** An admitted, materialized absolute directory. Registration does not fetch it. */
@@ -73,6 +169,8 @@ export interface PoWorkflowRunState {
   readonly run: PoWorkflowRunRef;
   readonly stage: PoWorkflowStage;
   readonly outcome?: PoWorkflowOutcome;
+  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */
+  readonly binding?: PoWorkflowPolicyBinding;
   readonly jobs: readonly PoWorkflowJobState[];
   readonly children?: readonly PoWorkflowChildrenStatus[];
 }
@@ -167,11 +265,13 @@ declare module '@deepseek-ai/cordis' {
     'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;
     'po/workflow-runs': PoWorkflowRunsService;
     'po/workflow-context': PoWorkflowContextService;
+    'po/workflow-admissions': PoWorkflowAdmissionsService;
   }
 }
 export declare function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined;
 export declare function readPoWorkflowDefinitionSourcesService(context: Context): PoWorkflowDefinitionSourcesService | undefined;
 export declare function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined;
 export declare function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined;
+export declare function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined;
 //#endregion
 //# sourceMappingURL=workflow.d.mts.map

package/dist/src/schemas/workflow.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.mts","names":["_$__hubChannel0.PoHubSessionUsage"],"sources":["../../../src/schemas/workflow.ts"],"mappings":";;;;qBAGa;qBACA;qBACA;qBACA;;qBAGA,+BAA6B,KAAA;;;;YAU9B,0BAA0B,cAAc;;qBAGvC,wBAAsB,KAAA;;;;;;YASvB,mBAAmB,cAAc;iBAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;iBAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;iBAG7E;WACN;;WAEA;;iBAGM;WACN;WACA;EACT;;;iBAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;YAG7B;YACA;YACA;iBAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;iBAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;iBAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;WACV,eAAe;WACf,oBAAoB;;;iBAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;iBAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;iBAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARMA;;iBAWA;WACN;WACA;WACA;WACA;WACA;WACA;;iBAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;iBAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;iBAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;;;wBAIX,4BAA4B,SAAS,UAAU;wBAI/C,uCACd,SAAS,UACR;wBAIa,0BAA0B,SAAS,UAAU;wBAI7C,6BAA6B,SAAS,UAAU"}
+{"version":3,"file":"workflow.d.mts","names":["_$__hubChannel0.PoHubSessionUsage"],"sources":["../../../src/schemas/workflow.ts"],"mappings":";;;;qBAGa;qBACA;qBACA;qBACA;qBACA;;qBAGA,+BAA6B,KAAA;;;;YAU9B,0BAA0B,cAAc;;qBAGvC,wBAAsB,KAAA;;;;;;YASvB,mBAAmB,cAAc;iBAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;iBAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;iBAI7E;WACN;WACA;;;iBAIM;WACN;WACA;;iBAGM;WACN,aAAa;WACb,OAAO;;iBAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;iBAGF;;WAEN,cAAc,SAAS;;iBAGjB,qCAAqC;WAC3C,SAAS;;iBAGH;WACN;;YAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;iBAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;YAGpF;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;iBAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE;aAAoB;;IACjB;;;iBAEU;WACN;;WAEA;;iBAGM;WACN;WACA;EACT;;;iBAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;YAG7B;YACA;YACA;iBAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;iBAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;iBAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;iBAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;iBAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;iBAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARMA;;iBAWA;WACN;WACA;WACA;WACA;WACA;WACA;;iBAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;iBAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;iBAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;wBAId,4BAA4B,SAAS,UAAU;wBAI/C,uCACd,SAAS,UACR;wBAIa,0BAA0B,SAAS,UAAU;wBAI7C,6BAA6B,SAAS,UAAU;wBAIhD,gCAAgC,SAAS,UAAU"}

package/dist/src/schemas/workflow.mjs

@@ -4,6 +4,7 @@ const PO_WORKFLOW_LAUNCH_SERVICE = "po/workflow-launch";
 const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = "po/workflow-definition-sources";
 const PO_WORKFLOW_RUNS_SERVICE = "po/workflow-runs";
 const PO_WORKFLOW_CONTEXT_SERVICE = "po/workflow-context";
+const PO_WORKFLOW_ADMISSIONS_SERVICE = "po/workflow-admissions";
 /** A source-relative definition, never an arbitrary host path. */
 const PoWorkflowDefinitionRefSchema = Type.Object({
 	source: Type.String({ minLength: 1 }),
@@ -31,7 +32,10 @@ function readPoWorkflowRunsService(context) {
 function readPoWorkflowContextService(context) {
 	return context.get(PO_WORKFLOW_CONTEXT_SERVICE);
 }
+function readPoWorkflowAdmissionsService(context) {
+	return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE);
+}
 //#endregion
-export { PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowDefinitionRefSchema, PoWorkflowRunRefSchema, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService };
+export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowDefinitionRefSchema, PoWorkflowRunRefSchema, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService };
 
 //# sourceMappingURL=workflow.mjs.map

package/dist/src/schemas/workflow.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.mjs","names":[],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;;AAG3C,MAAa,gCAAgC,KAAK,OAChD;CACE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAK,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyB,KAAK,OACzC;CACE,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAmKA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD"}
+{"version":3,"file":"workflow.mjs","names":[],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: { readonly environmentKeys: readonly string[] },\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgC,KAAK,OAChD;CACE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAK,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyB,KAAK,OACzC;CACE,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AA4QA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}

package/dist/workflow.cjs

@@ -1,11 +1,13 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_workflow = require("./src/schemas/workflow.cjs");
+exports.PO_WORKFLOW_ADMISSIONS_SERVICE = require_workflow.PO_WORKFLOW_ADMISSIONS_SERVICE;
 exports.PO_WORKFLOW_CONTEXT_SERVICE = require_workflow.PO_WORKFLOW_CONTEXT_SERVICE;
 exports.PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = require_workflow.PO_WORKFLOW_DEFINITION_SOURCES_SERVICE;
 exports.PO_WORKFLOW_LAUNCH_SERVICE = require_workflow.PO_WORKFLOW_LAUNCH_SERVICE;
 exports.PO_WORKFLOW_RUNS_SERVICE = require_workflow.PO_WORKFLOW_RUNS_SERVICE;
 exports.PoWorkflowDefinitionRefSchema = require_workflow.PoWorkflowDefinitionRefSchema;
 exports.PoWorkflowRunRefSchema = require_workflow.PoWorkflowRunRefSchema;
+exports.readPoWorkflowAdmissionsService = require_workflow.readPoWorkflowAdmissionsService;
 exports.readPoWorkflowContextService = require_workflow.readPoWorkflowContextService;
 exports.readPoWorkflowDefinitionSourcesService = require_workflow.readPoWorkflowDefinitionSourcesService;
 exports.readPoWorkflowLaunchService = require_workflow.readPoWorkflowLaunchService;

package/dist/workflow.d.mts

@@ -1,2 +1,2 @@
-import { PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowChildInvocation, PoWorkflowChildrenSession, PoWorkflowChildrenStatus, PoWorkflowConfig, PoWorkflowContextService, PoWorkflowCriterionState, PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, PoWorkflowDefinitionSource, PoWorkflowDefinitionSourceHandle, PoWorkflowDefinitionSourcesService, PoWorkflowJobState, PoWorkflowLaunchOverrides, PoWorkflowLaunchService, PoWorkflowOutcome, PoWorkflowProgressState, PoWorkflowRunRef, PoWorkflowRunRefSchema, PoWorkflowRunState, PoWorkflowRunsService, PoWorkflowStage, PoWorkflowStepState, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";
-export { PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, type PoWorkflowChildInvocation, type PoWorkflowChildrenSession, type PoWorkflowChildrenStatus, type PoWorkflowConfig, type PoWorkflowContextService, type PoWorkflowCriterionState, type PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, type PoWorkflowDefinitionSource, type PoWorkflowDefinitionSourceHandle, type PoWorkflowDefinitionSourcesService, type PoWorkflowJobState, type PoWorkflowLaunchOverrides, type PoWorkflowLaunchService, type PoWorkflowOutcome, type PoWorkflowProgressState, type PoWorkflowRunRef, PoWorkflowRunRefSchema, type PoWorkflowRunState, type PoWorkflowRunsService, type PoWorkflowStage, type PoWorkflowStepState, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService };
+import { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowAdmission, PoWorkflowAdmissionOverrides, PoWorkflowAdmissionRequest, PoWorkflowAdmissionsService, PoWorkflowChildInvocation, PoWorkflowChildrenSession, PoWorkflowChildrenStatus, PoWorkflowConfig, PoWorkflowContextService, PoWorkflowCriterionState, PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, PoWorkflowDefinitionSource, PoWorkflowDefinitionSourceHandle, PoWorkflowDefinitionSourcesService, PoWorkflowExecutionPolicyRequest, PoWorkflowExecutionPolicyResult, PoWorkflowJobState, PoWorkflowLaunchOverrides, PoWorkflowLaunchService, PoWorkflowOperationEpoch, PoWorkflowOutcome, PoWorkflowPolicyAssociation, PoWorkflowPolicyBinding, PoWorkflowProgressState, PoWorkflowRecoveryOptions, PoWorkflowRunRef, PoWorkflowRunRefSchema, PoWorkflowRunState, PoWorkflowRunsService, PoWorkflowStage, PoWorkflowStepState, PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";
+export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, type PoWorkflowAdmission, type PoWorkflowAdmissionOverrides, type PoWorkflowAdmissionRequest, type PoWorkflowAdmissionsService, type PoWorkflowChildInvocation, type PoWorkflowChildrenSession, type PoWorkflowChildrenStatus, type PoWorkflowConfig, type PoWorkflowContextService, type PoWorkflowCriterionState, type PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, type PoWorkflowDefinitionSource, type PoWorkflowDefinitionSourceHandle, type PoWorkflowDefinitionSourcesService, type PoWorkflowExecutionPolicyRequest, type PoWorkflowExecutionPolicyResult, type PoWorkflowJobState, type PoWorkflowLaunchOverrides, type PoWorkflowLaunchService, type PoWorkflowOperationEpoch, type PoWorkflowOutcome, type PoWorkflowPolicyAssociation, type PoWorkflowPolicyBinding, type PoWorkflowProgressState, type PoWorkflowRecoveryOptions, type PoWorkflowRunRef, PoWorkflowRunRefSchema, type PoWorkflowRunState, type PoWorkflowRunsService, type PoWorkflowStage, type PoWorkflowStepState, type PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService };

package/dist/workflow.mjs

@@ -1 +1 @@
-export { PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowDefinitionRefSchema, PoWorkflowRunRefSchema, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";
+export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowDefinitionRefSchema, PoWorkflowRunRefSchema, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agimon-ai/po-core",
-  "version": "0.0.0-alpha.79",
+  "version": "0.0.0-alpha.80",
   "description": "Po runtime systems and reusable core services.",
   "keywords": [
     "ai",
@@ -564,8 +564,8 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@agimon-ai/po-logsink": "0.0.1-alpha.61",
-    "@agimon-ai/po-web-security": "0.0.0-alpha.79",
+    "@agimon-ai/po-logsink": "0.0.1-alpha.62",
+    "@agimon-ai/po-web-security": "0.0.0-alpha.80",
     "@deepseek-ai/cordis": "4.0.5",
     "@earendil-works/chord": "1.4.0",
     "@earendil-works/pi-agent-core": "1.4.0",
@@ -589,7 +589,7 @@
     "yaml": "2.9.1"
   },
   "devDependencies": {
-    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.79",
+    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.80",
     "@apidevtools/swagger-parser": "^13.1.0",
     "@asyncapi/parser": "^3.6.4",
     "@earendil-works/pi-ai": "1.4.0",