@agimon-ai/po-core 0.0.0-alpha.82 → 0.0.0-alpha.83

package/dist/apiContracts.d.mts

@@ -365,6 +365,31 @@ interface PoWorkflowExecutionPolicyResult {
   /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */
   readonly environment?: Readonly<Record<string, string>>;
 }
+/**
+ * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.
+ * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and
+ * interrupted so a recovery of the run reuses it.
+ */
+type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';
+interface PoWorkflowSettlementRequest {
+  readonly binding: PoWorkflowPolicyBinding;
+  readonly run: PoWorkflowRunRef;
+  readonly outcome: PoWorkflowSettlementOutcome;
+  readonly failedJob?: string;
+  readonly ownerSessionId: string;
+  readonly launcherSessionId: string;
+  /** Ephemeral host lifetime, never persisted. */
+  readonly signal: AbortSignal;
+}
+interface PoWorkflowPolicyOptions {
+  readonly environmentKeys: readonly string[];
+  /**
+   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.
+   * Delivery is durable: the engine retries until this resolves, including after a restart or a
+   * remount, so it must be idempotent. Throwing leaves the settlement pending.
+   */
+  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;
+}
 interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {
   readonly policy?: PoWorkflowPolicyAssociation;
 }
@@ -425,9 +450,7 @@ interface PoWorkflowAdmissionsService {
    * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.
    * The engine persists the source launcher identity and never falls back to another session's policy.
    */
-  registerPolicy(coordinator: string, beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>, options: {
-    readonly environmentKeys: readonly string[];
-  }): {
+  registerPolicy(coordinator: string, beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>, options: PoWorkflowPolicyOptions): {
     dispose(): void;
   };
 }

package/dist/apiContracts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/serverBundle.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;UAiBiB,kBAAkB;WACxB;WACA,OAAO;;WAEP,QAAQ;;;KAQP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UAInB;WACN,OAAO;;;;;;EAMhB,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UCxEN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCIM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAQ/C;IACR,eAAe;;;;;cC3DN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;;UC9EvB;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;UAGjE;WACN;;EAET,KAAK,cAAc,SAASG,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;YAsB9B;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf;eAA+B;;;;;;;cC9JtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;UAGjB,qCAAqC;WAC3C,SAAS;;UAGH;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;KAGpF;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE;aAAoB;;IACjB;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;;;;UCxEb;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCzMC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;;UChTP;WACN;WACA;;;;qBCAE;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCRzD;WACN,OAAO;WACP,SAAS;;;;;;KAOR,YAAY,UAAU,qBAAqB,UAAU,uBAAuB,KACtF,kBAAkB,OAAO,SAAS;WAErB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,eAC1D,EAAE;WAAsB,cAAc,UAAU;IAAY;;;KCrBpD,+CAA+C;GAAiB,cAAc;;;;qBC2E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCpQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}
+{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/serverBundle.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;UAiBiB,kBAAkB;WACxB;WACA,OAAO;;WAEP,QAAQ;;;KAQP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UAInB;WACN,OAAO;;;;;;EAMhB,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UCxEN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCIM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAQ/C;IACR,eAAe;;;;;cC3DN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;;UC9EvB;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;UAGjE;WACN;;EAET,KAAK,cAAc,SAASG,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;YAsB9B;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf;eAA+B;;;;;;;cC9JtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;;;;;;KAQtB,8BAA8B;UAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;UAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;UAG7C,qCAAqC;WAC3C,SAAS;;UAGH;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;KAGpF;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;;;;UCpGb;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCzMC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;;UChTP;WACN;WACA;;;;qBCAE;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCRzD;WACN,OAAO;WACP,SAAS;;;;;;KAOR,YAAY,UAAU,qBAAqB,UAAU,uBAAuB,KACtF,kBAAkB,OAAO,SAAS;WAErB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,eAC1D,EAAE;WAAsB,cAAc,UAAU;IAAY;;;KCrBpD,+CAA+C;GAAiB,cAAc;;;;qBC2E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCpQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}

package/dist/src/schemas/workflow.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.cjs","names":["Type"],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: { readonly environmentKeys: readonly string[] },\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgCA,QAAAA,KAAK,OAChD;CACE,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAKA,QAAAA,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyBA,QAAAA,KAAK,OACzC;CACE,OAAOA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AA4QA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}
+{"version":3,"file":"workflow.cjs","names":["Type"],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgCA,QAAAA,KAAK,OAChD;CACE,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAKA,QAAAA,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyBA,QAAAA,KAAK,OACzC;CACE,OAAOA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAwSA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}

package/dist/src/schemas/workflow.d.mts

@@ -64,6 +64,31 @@ export interface PoWorkflowExecutionPolicyResult {
   /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */
   readonly environment?: Readonly<Record<string, string>>;
 }
+/**
+ * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.
+ * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and
+ * interrupted so a recovery of the run reuses it.
+ */
+export type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';
+export interface PoWorkflowSettlementRequest {
+  readonly binding: PoWorkflowPolicyBinding;
+  readonly run: PoWorkflowRunRef;
+  readonly outcome: PoWorkflowSettlementOutcome;
+  readonly failedJob?: string;
+  readonly ownerSessionId: string;
+  readonly launcherSessionId: string;
+  /** Ephemeral host lifetime, never persisted. */
+  readonly signal: AbortSignal;
+}
+export interface PoWorkflowPolicyOptions {
+  readonly environmentKeys: readonly string[];
+  /**
+   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.
+   * Delivery is durable: the engine retries until this resolves, including after a restart or a
+   * remount, so it must be idempotent. Throwing leaves the settlement pending.
+   */
+  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;
+}
 export interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {
   readonly policy?: PoWorkflowPolicyAssociation;
 }
@@ -124,9 +149,7 @@ export interface PoWorkflowAdmissionsService {
    * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.
    * The engine persists the source launcher identity and never falls back to another session's policy.
    */
-  registerPolicy(coordinator: string, beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>, options: {
-    readonly environmentKeys: readonly string[];
-  }): {
+  registerPolicy(coordinator: string, beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>, options: PoWorkflowPolicyOptions): {
     dispose(): void;
   };
 }

package/dist/src/schemas/workflow.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.mts","names":["_$__hubChannel0.PoHubSessionUsage"],"sources":["../../../src/schemas/workflow.ts"],"mappings":";;;;qBAGa;qBACA;qBACA;qBACA;qBACA;;qBAGA,+BAA6B,KAAA;;;;YAU9B,0BAA0B,cAAc;;qBAGvC,wBAAsB,KAAA;;;;;;YASvB,mBAAmB,cAAc;iBAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;iBAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;iBAI7E;WACN;WACA;;;iBAIM;WACN;WACA;;iBAGM;WACN,aAAa;WACb,OAAO;;iBAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;iBAGF;;WAEN,cAAc,SAAS;;iBAGjB,qCAAqC;WAC3C,SAAS;;iBAGH;WACN;;YAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;iBAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;YAGpF;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;iBAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE;aAAoB;;IACjB;;;iBAEU;WACN;;WAEA;;iBAGM;WACN;WACA;EACT;;;iBAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;YAG7B;YACA;YACA;iBAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;iBAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;iBAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;iBAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;iBAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;iBAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARMA;;iBAWA;WACN;WACA;WACA;WACA;WACA;WACA;;iBAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;iBAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;iBAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;wBAId,4BAA4B,SAAS,UAAU;wBAI/C,uCACd,SAAS,UACR;wBAIa,0BAA0B,SAAS,UAAU;wBAI7C,6BAA6B,SAAS,UAAU;wBAIhD,gCAAgC,SAAS,UAAU"}
+{"version":3,"file":"workflow.d.mts","names":["_$__hubChannel0.PoHubSessionUsage"],"sources":["../../../src/schemas/workflow.ts"],"mappings":";;;;qBAGa;qBACA;qBACA;qBACA;qBACA;;qBAGA,+BAA6B,KAAA;;;;YAU9B,0BAA0B,cAAc;;qBAGvC,wBAAsB,KAAA;;;;;;YASvB,mBAAmB,cAAc;iBAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;iBAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;iBAI7E;WACN;WACA;;;iBAIM;WACN;WACA;;iBAGM;WACN,aAAa;WACb,OAAO;;iBAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;iBAGF;;WAEN,cAAc,SAAS;;;;;;;YAQtB,8BAA8B;iBAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;iBAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;iBAG7C,qCAAqC;WAC3C,SAAS;;iBAGH;WACN;;YAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;iBAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;YAGpF;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;iBAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;iBAEU;WACN;;WAEA;;iBAGM;WACN;WACA;EACT;;;iBAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;YAG7B;YACA;YACA;iBAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;iBAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;iBAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;iBAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;iBAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;iBAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARMA;;iBAWA;WACN;WACA;WACA;WACA;WACA;WACA;;iBAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;iBAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;iBAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;wBAId,4BAA4B,SAAS,UAAU;wBAI/C,uCACd,SAAS,UACR;wBAIa,0BAA0B,SAAS,UAAU;wBAI7C,6BAA6B,SAAS,UAAU;wBAIhD,gCAAgC,SAAS,UAAU"}

package/dist/src/schemas/workflow.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.mjs","names":[],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: { readonly environmentKeys: readonly string[] },\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgC,KAAK,OAChD;CACE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAK,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyB,KAAK,OACzC;CACE,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AA4QA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}
+{"version":3,"file":"workflow.mjs","names":[],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgC,KAAK,OAChD;CACE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAK,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyB,KAAK,OACzC;CACE,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAwSA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}

package/dist/workflow.d.mts

@@ -1,2 +1,2 @@
-import { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowAdmission, PoWorkflowAdmissionOverrides, PoWorkflowAdmissionRequest, PoWorkflowAdmissionsService, PoWorkflowChildInvocation, PoWorkflowChildrenSession, PoWorkflowChildrenStatus, PoWorkflowConfig, PoWorkflowContextService, PoWorkflowCriterionState, PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, PoWorkflowDefinitionSource, PoWorkflowDefinitionSourceHandle, PoWorkflowDefinitionSourcesService, PoWorkflowExecutionPolicyRequest, PoWorkflowExecutionPolicyResult, PoWorkflowJobState, PoWorkflowLaunchOverrides, PoWorkflowLaunchService, PoWorkflowOperationEpoch, PoWorkflowOutcome, PoWorkflowPolicyAssociation, PoWorkflowPolicyBinding, PoWorkflowProgressState, PoWorkflowRecoveryOptions, PoWorkflowRunRef, PoWorkflowRunRefSchema, PoWorkflowRunState, PoWorkflowRunsService, PoWorkflowStage, PoWorkflowStepState, PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";
-export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, type PoWorkflowAdmission, type PoWorkflowAdmissionOverrides, type PoWorkflowAdmissionRequest, type PoWorkflowAdmissionsService, type PoWorkflowChildInvocation, type PoWorkflowChildrenSession, type PoWorkflowChildrenStatus, type PoWorkflowConfig, type PoWorkflowContextService, type PoWorkflowCriterionState, type PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, type PoWorkflowDefinitionSource, type PoWorkflowDefinitionSourceHandle, type PoWorkflowDefinitionSourcesService, type PoWorkflowExecutionPolicyRequest, type PoWorkflowExecutionPolicyResult, type PoWorkflowJobState, type PoWorkflowLaunchOverrides, type PoWorkflowLaunchService, type PoWorkflowOperationEpoch, type PoWorkflowOutcome, type PoWorkflowPolicyAssociation, type PoWorkflowPolicyBinding, type PoWorkflowProgressState, type PoWorkflowRecoveryOptions, type PoWorkflowRunRef, PoWorkflowRunRefSchema, type PoWorkflowRunState, type PoWorkflowRunsService, type PoWorkflowStage, type PoWorkflowStepState, type PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService };
+import { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, PoWorkflowAdmission, PoWorkflowAdmissionOverrides, PoWorkflowAdmissionRequest, PoWorkflowAdmissionsService, PoWorkflowChildInvocation, PoWorkflowChildrenSession, PoWorkflowChildrenStatus, PoWorkflowConfig, PoWorkflowContextService, PoWorkflowCriterionState, PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, PoWorkflowDefinitionSource, PoWorkflowDefinitionSourceHandle, PoWorkflowDefinitionSourcesService, PoWorkflowExecutionPolicyRequest, PoWorkflowExecutionPolicyResult, PoWorkflowJobState, PoWorkflowLaunchOverrides, PoWorkflowLaunchService, PoWorkflowOperationEpoch, PoWorkflowOutcome, PoWorkflowPolicyAssociation, PoWorkflowPolicyBinding, PoWorkflowPolicyOptions, PoWorkflowProgressState, PoWorkflowRecoveryOptions, PoWorkflowRunRef, PoWorkflowRunRefSchema, PoWorkflowRunState, PoWorkflowRunsService, PoWorkflowSettlementOutcome, PoWorkflowSettlementRequest, PoWorkflowStage, PoWorkflowStepState, PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService } from "./src/schemas/workflow.mjs";
+export { PO_WORKFLOW_ADMISSIONS_SERVICE, PO_WORKFLOW_CONTEXT_SERVICE, PO_WORKFLOW_DEFINITION_SOURCES_SERVICE, PO_WORKFLOW_LAUNCH_SERVICE, PO_WORKFLOW_RUNS_SERVICE, type PoWorkflowAdmission, type PoWorkflowAdmissionOverrides, type PoWorkflowAdmissionRequest, type PoWorkflowAdmissionsService, type PoWorkflowChildInvocation, type PoWorkflowChildrenSession, type PoWorkflowChildrenStatus, type PoWorkflowConfig, type PoWorkflowContextService, type PoWorkflowCriterionState, type PoWorkflowDefinitionRef, PoWorkflowDefinitionRefSchema, type PoWorkflowDefinitionSource, type PoWorkflowDefinitionSourceHandle, type PoWorkflowDefinitionSourcesService, type PoWorkflowExecutionPolicyRequest, type PoWorkflowExecutionPolicyResult, type PoWorkflowJobState, type PoWorkflowLaunchOverrides, type PoWorkflowLaunchService, type PoWorkflowOperationEpoch, type PoWorkflowOutcome, type PoWorkflowPolicyAssociation, type PoWorkflowPolicyBinding, type PoWorkflowPolicyOptions, type PoWorkflowProgressState, type PoWorkflowRecoveryOptions, type PoWorkflowRunRef, PoWorkflowRunRefSchema, type PoWorkflowRunState, type PoWorkflowRunsService, type PoWorkflowSettlementOutcome, type PoWorkflowSettlementRequest, type PoWorkflowStage, type PoWorkflowStepState, type PoWorkflowValidationReport, readPoWorkflowAdmissionsService, readPoWorkflowContextService, readPoWorkflowDefinitionSourcesService, readPoWorkflowLaunchService, readPoWorkflowRunsService };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agimon-ai/po-core",
-  "version": "0.0.0-alpha.82",
+  "version": "0.0.0-alpha.83",
   "description": "Po runtime systems and reusable core services.",
   "keywords": [
     "ai",
@@ -569,8 +569,8 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@agimon-ai/po-logsink": "0.0.1-alpha.64",
-    "@agimon-ai/po-web-security": "0.0.0-alpha.82",
+    "@agimon-ai/po-logsink": "0.0.1-alpha.65",
+    "@agimon-ai/po-web-security": "0.0.0-alpha.83",
     "@deepseek-ai/cordis": "4.0.5",
     "@earendil-works/chord": "1.4.0",
     "@earendil-works/pi-agent-core": "1.4.0",
@@ -594,7 +594,7 @@
     "yaml": "2.9.1"
   },
   "devDependencies": {
-    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.82",
+    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.83",
     "@apidevtools/swagger-parser": "^13.1.0",
     "@asyncapi/parser": "^3.6.4",
     "@earendil-works/pi-ai": "1.4.0",