@agimon-ai/po-core 0.0.0-alpha.90 → 0.0.0-alpha.91

package/dist/apiContracts.d.mts

@@ -392,6 +392,11 @@ interface PoWorkflowPolicyOptions {
 }
 interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {
   readonly policy?: PoWorkflowPolicyAssociation;
+  /**
+   * Run the workflow as this same-workspace session instead of the caller, for example a session in an
+   * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.
+   */
+  readonly targetSessionId?: string;
 }
 interface PoWorkflowRecoveryOptions {
   readonly runner?: string;
@@ -421,6 +426,8 @@ interface PoWorkflowValidationReport {
     readonly reference: string;
     readonly reason: string;
   }[];
+  /** Declared by the definition and reported only: the engine never provisions a checkout itself. */
+  readonly isolation?: 'checkout';
 }
 type PoWorkflowAdmission = {
   readonly attemptId: string;

package/dist/apiContracts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/serverBundle.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;UAiBiB,kBAAkB;WACxB;WACA,OAAO;;WAEP,QAAQ;;;KAQP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UAInB;WACN,OAAO;;;;;;EAMhB,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UCxEN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCIM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAQ/C;IACR,eAAe;;;;;cC3DN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;;UC9EvB;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;UAGjE;WACN;;EAET,KAAK,cAAc,SAASG,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;YAsB9B;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf;eAA+B;;;;;;;cC9JtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;;;;;;KAQtB,8BAA8B;UAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;UAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;UAG7C,qCAAqC;WAC3C,SAAS;;UAGH;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;KAGpF;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;;;;UCpGb;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCzMC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;;UChTP;WACN;WACA;;;;qBCAE;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCRzD;WACN,OAAO;WACP,SAAS;;;;;;KAOR,YAAY,UAAU,qBAAqB,UAAU,uBAAuB,KACtF,kBAAkB,OAAO,SAAS;WAErB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,eAC1D,EAAE;WAAsB,cAAc,UAAU;IAAY;;;KCrBpD,+CAA+C;GAAiB,cAAc;;;;qBC2E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCpQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}
+{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/serverBundle.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;UAiBiB,kBAAkB;WACxB;WACA,OAAO;;WAEP,QAAQ;;;KAQP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UAInB;WACN,OAAO;;;;;;EAMhB,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UCxEN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCIM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAQ/C;IACR,eAAe;;;;;cC3DN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;;UC9EvB;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;UAGjE;WACN;;EAET,KAAK,cAAc,SAASG,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;YAsB9B;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf;eAA+B;;;;;;;cC9JtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;;;;;;KAQtB,8BAA8B;UAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;UAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;UAG7C,qCAAqC;WAC3C,SAAS;;;;;WAKT;;UAGM;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;WAErF;;KAGC;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;;;;UC3Gb;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCzMC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;;UChTP;WACN;WACA;;;;qBCAE;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCRzD;WACN,OAAO;WACP,SAAS;;;;;;KAOR,YAAY,UAAU,qBAAqB,UAAU,uBAAuB,KACtF,kBAAkB,OAAO,SAAS;WAErB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,eAC1D,EAAE;WAAsB,cAAc,UAAU;IAAY;;;KCrBpD,+CAA+C;GAAiB,cAAc;;;;qBC2E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCpQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}

package/dist/src/schemas/workflow.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.cjs","names":["Type"],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgCA,QAAAA,KAAK,OAChD;CACE,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAKA,QAAAA,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyBA,QAAAA,KAAK,OACzC;CACE,OAAOA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAwSA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}
+{"version":3,"file":"workflow.cjs","names":["Type"],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n  /**\n   * Run the workflow as this same-workspace session instead of the caller, for example a session in an\n   * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.\n   */\n  readonly targetSessionId?: string;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n  /** Declared by the definition and reported only: the engine never provisions a checkout itself. */\n  readonly isolation?: 'checkout';\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgCA,QAAAA,KAAK,OAChD;CACE,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAKA,QAAAA,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyBA,QAAAA,KAAK,OACzC;CACE,OAAOA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmBA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AA+SA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}

package/dist/src/schemas/workflow.d.mts

@@ -91,6 +91,11 @@ export interface PoWorkflowPolicyOptions {
 }
 export interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {
   readonly policy?: PoWorkflowPolicyAssociation;
+  /**
+   * Run the workflow as this same-workspace session instead of the caller, for example a session in an
+   * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.
+   */
+  readonly targetSessionId?: string;
 }
 export interface PoWorkflowRecoveryOptions {
   readonly runner?: string;
@@ -120,6 +125,8 @@ export interface PoWorkflowValidationReport {
     readonly reference: string;
     readonly reason: string;
   }[];
+  /** Declared by the definition and reported only: the engine never provisions a checkout itself. */
+  readonly isolation?: 'checkout';
 }
 export type PoWorkflowAdmission = {
   readonly attemptId: string;

package/dist/src/schemas/workflow.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.mts","names":["_$__hubChannel0.PoHubSessionUsage"],"sources":["../../../src/schemas/workflow.ts"],"mappings":";;;;qBAGa;qBACA;qBACA;qBACA;qBACA;;qBAGA,+BAA6B,KAAA;;;;YAU9B,0BAA0B,cAAc;;qBAGvC,wBAAsB,KAAA;;;;;;YASvB,mBAAmB,cAAc;iBAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;iBAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;iBAI7E;WACN;WACA;;;iBAIM;WACN;WACA;;iBAGM;WACN,aAAa;WACb,OAAO;;iBAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;iBAGF;;WAEN,cAAc,SAAS;;;;;;;YAQtB,8BAA8B;iBAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;iBAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;iBAG7C,qCAAqC;WAC3C,SAAS;;iBAGH;WACN;;YAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;iBAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;YAGpF;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;iBAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;iBAEU;WACN;;WAEA;;iBAGM;WACN;WACA;EACT;;;iBAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;YAG7B;YACA;YACA;iBAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;iBAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;iBAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;iBAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;iBAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;iBAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARMA;;iBAWA;WACN;WACA;WACA;WACA;WACA;WACA;;iBAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;iBAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;iBAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;wBAId,4BAA4B,SAAS,UAAU;wBAI/C,uCACd,SAAS,UACR;wBAIa,0BAA0B,SAAS,UAAU;wBAI7C,6BAA6B,SAAS,UAAU;wBAIhD,gCAAgC,SAAS,UAAU"}
+{"version":3,"file":"workflow.d.mts","names":["_$__hubChannel0.PoHubSessionUsage"],"sources":["../../../src/schemas/workflow.ts"],"mappings":";;;;qBAGa;qBACA;qBACA;qBACA;qBACA;;qBAGA,+BAA6B,KAAA;;;;YAU9B,0BAA0B,cAAc;;qBAGvC,wBAAsB,KAAA;;;;;;YASvB,mBAAmB,cAAc;iBAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;;iBAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;iBAI7E;WACN;WACA;;;iBAIM;WACN;WACA;;iBAGM;WACN,aAAa;WACb,OAAO;;iBAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;iBAGF;;WAEN,cAAc,SAAS;;;;;;;YAQtB,8BAA8B;iBAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;iBAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;iBAG7C,qCAAqC;WAC3C,SAAS;;;;;WAKT;;iBAGM;WACN;;YAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;iBAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;WAErF;;YAGC;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;iBAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;iBAEU;WACN;;WAEA;;iBAGM;WACN;WACA;EACT;;;iBAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;YAG7B;YACA;YACA;iBAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;iBAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;iBAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;iBAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;iBAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;iBAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARMA;;iBAWA;WACN;WACA;WACA;WACA;WACA;WACA;;iBAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;iBAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;iBAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;;YAKV;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;;;wBAId,4BAA4B,SAAS,UAAU;wBAI/C,uCACd,SAAS,UACR;wBAIa,0BAA0B,SAAS,UAAU;wBAI7C,6BAA6B,SAAS,UAAU;wBAIhD,gCAAgC,SAAS,UAAU"}

package/dist/src/schemas/workflow.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.mjs","names":[],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgC,KAAK,OAChD;CACE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAK,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyB,KAAK,OACzC;CACE,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAwSA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}
+{"version":3,"file":"workflow.mjs","names":[],"sources":["../../../src/schemas/workflow.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport { type Static, Type } from 'typebox';\n\nexport const PO_WORKFLOW_LAUNCH_SERVICE = 'po/workflow-launch';\nexport const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = 'po/workflow-definition-sources';\nexport const PO_WORKFLOW_RUNS_SERVICE = 'po/workflow-runs';\nexport const PO_WORKFLOW_CONTEXT_SERVICE = 'po/workflow-context';\nexport const PO_WORKFLOW_ADMISSIONS_SERVICE = 'po/workflow-admissions';\n\n/** A source-relative definition, never an arbitrary host path. */\nexport const PoWorkflowDefinitionRefSchema = Type.Object(\n  {\n    source: Type.String({ minLength: 1 }),\n    key: Type.String({\n      minLength: 1,\n      pattern: '^(?!/)(?!.*\\\\\\\\)(?!.*:)(?!.*[\\\\u0000-\\\\u001f\\\\u007f])(?!.*(?:^|/)\\\\.{1,2}(?:/|$))[^/]+(?:/[^/]+)*$',\n    }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowDefinitionRef = Static<typeof PoWorkflowDefinitionRefSchema>;\n\n/** Registration receipt. runId fences a runKey that can be reused later. */\nexport const PoWorkflowRunRefSchema = Type.Object(\n  {\n    runId: Type.String({ minLength: 1 }),\n    ownerSessionId: Type.String({ minLength: 1 }),\n    runKey: Type.String({ minLength: 1 }),\n    registryWorkspace: Type.String({ minLength: 1 }),\n  },\n  { additionalProperties: false },\n);\nexport type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;\n\nexport interface PoWorkflowLaunchOverrides {\n  readonly runner?: string;\n  readonly command?: string;\n  readonly choice?: string;\n  readonly job?: string;\n  readonly inputs?: Readonly<Record<string, string>>;\n  readonly env?: Readonly<Record<string, string>>;\n  readonly prompt?: string;\n  readonly name?: string;\n}\n\n/** Session-owned. Rejection means no observable registration was accepted. */\nexport interface PoWorkflowLaunchService {\n  launch(definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowLaunchOverrides): Promise<PoWorkflowRunRef>;\n}\n\n/** Non-secret host association. Environment variables never establish this binding. */\nexport interface PoWorkflowPolicyAssociation {\n  readonly coordinator: string;\n  readonly key: string;\n}\n\n/** Independent of runId and executionGeneration, including continue-next resumes. */\nexport interface PoWorkflowOperationEpoch {\n  readonly admissionId: string;\n  readonly operationId: string;\n}\n\nexport interface PoWorkflowPolicyBinding {\n  readonly association: PoWorkflowPolicyAssociation;\n  readonly epoch: PoWorkflowOperationEpoch;\n}\n\nexport interface PoWorkflowExecutionPolicyRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly reason: 'launch' | 'recover' | 'startup' | 'resume';\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** The engine supplies the actual persisted run after createRun, including startup and recovery. */\n  readonly run?: PoWorkflowRunRef;\n  readonly previousRun?: PoWorkflowRunRef;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowExecutionPolicyResult {\n  /** Trusted non-secret context only. PO_* and WORKFLOW_* engine identity keys are forbidden. */\n  readonly environment?: Readonly<Record<string, string>>;\n}\n\n/**\n * How a bound generation ended. `abandoned` is a person giving up a failed run: it is never recovered.\n * A coordinator releases what it holds for success, skipped and abandoned, and keeps it for failed and\n * interrupted so a recovery of the run reuses it.\n */\nexport type PoWorkflowSettlementOutcome = PoWorkflowOutcome | 'abandoned';\n\nexport interface PoWorkflowSettlementRequest {\n  readonly binding: PoWorkflowPolicyBinding;\n  readonly run: PoWorkflowRunRef;\n  readonly outcome: PoWorkflowSettlementOutcome;\n  readonly failedJob?: string;\n  readonly ownerSessionId: string;\n  readonly launcherSessionId: string;\n  /** Ephemeral host lifetime, never persisted. */\n  readonly signal: AbortSignal;\n}\n\nexport interface PoWorkflowPolicyOptions {\n  readonly environmentKeys: readonly string[];\n  /**\n   * Called once a bound generation is terminal, and again with `abandoned` if a person abandons it.\n   * Delivery is durable: the engine retries until this resolves, including after a restart or a\n   * remount, so it must be idempotent. Throwing leaves the settlement pending.\n   */\n  readonly settle?: (request: PoWorkflowSettlementRequest) => Promise<void>;\n}\n\nexport interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {\n  readonly policy?: PoWorkflowPolicyAssociation;\n  /**\n   * Run the workflow as this same-workspace session instead of the caller, for example a session in an\n   * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.\n   */\n  readonly targetSessionId?: string;\n}\n\nexport interface PoWorkflowRecoveryOptions {\n  readonly runner?: string;\n}\n\nexport type PoWorkflowAdmissionRequest =\n  | {\n      readonly kind: 'launch';\n      readonly definition: PoWorkflowDefinitionRef;\n      readonly overrides?: PoWorkflowAdmissionOverrides;\n    }\n  | { readonly kind: 'recover'; readonly previousRun: PoWorkflowRunRef; readonly options?: PoWorkflowRecoveryOptions };\n\nexport interface PoWorkflowValidationReport {\n  readonly errors: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly warnings: readonly { readonly code: string; readonly message: string; readonly location?: string }[];\n  readonly deferred: readonly { readonly location: string; readonly reference: string; readonly reason: string }[];\n  /** Declared by the definition and reported only: the engine never provisions a checkout itself. */\n  readonly isolation?: 'checkout';\n}\n\nexport type PoWorkflowAdmission =\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'pending';\n      readonly binding?: PoWorkflowPolicyBinding;\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'rejected';\n      readonly errors: readonly string[];\n    }\n  | {\n      readonly attemptId: string;\n      readonly admissionId: string;\n      readonly state: 'registered';\n      readonly run: PoWorkflowRunRef;\n      readonly binding?: PoWorkflowPolicyBinding;\n    };\n\n/** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */\nexport interface PoWorkflowAdmissionsService {\n  validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;\n  launch(\n    attemptId: string,\n    definition: PoWorkflowDefinitionRef,\n    overrides?: PoWorkflowAdmissionOverrides,\n  ): Promise<PoWorkflowAdmission>;\n  recover(\n    attemptId: string,\n    previousRun: PoWorkflowRunRef,\n    options?: PoWorkflowRecoveryOptions,\n  ): Promise<PoWorkflowAdmission>;\n  /** Undefined is unknown or unauthorized, never proof that an executor did not start. */\n  read(attemptId: string): Promise<PoWorkflowAdmission | undefined>;\n  /** Session-owned registration. Duplicate (source session, coordinator) is rejected.\n   * Disposal is generation-fenced. Remounting only reattaches; other sessions never supply this callback.\n   * The engine persists the source launcher identity and never falls back to another session's policy.\n   */\n  registerPolicy(\n    coordinator: string,\n    beforeExecution: (request: PoWorkflowExecutionPolicyRequest) => Promise<PoWorkflowExecutionPolicyResult | void>,\n    options: PoWorkflowPolicyOptions,\n  ): { dispose(): void };\n}\nexport interface PoWorkflowDefinitionSource {\n  readonly source: string;\n  /** An admitted, materialized absolute directory. Registration does not fetch it. */\n  readonly directory: string;\n}\n\nexport interface PoWorkflowDefinitionSourceHandle {\n  readonly source: string;\n  readonly generation: string;\n  dispose(): void;\n}\n\n/** Workspace-owned registry. Disposal withdraws only the handle's registration. */\nexport interface PoWorkflowDefinitionSourcesService {\n  register(contribution: PoWorkflowDefinitionSource): PoWorkflowDefinitionSourceHandle;\n  list(): readonly PoWorkflowDefinitionSource[];\n  subscribe(listener: (sources: readonly PoWorkflowDefinitionSource[]) => void): () => void;\n}\n\nexport type PoWorkflowStage = 'running' | 'completed' | 'error';\nexport type PoWorkflowOutcome = 'success' | 'skipped' | 'failed' | 'interrupted';\nexport type PoWorkflowProgressState =\n  | 'pending'\n  | 'running'\n  | 'completed'\n  | 'skipped'\n  | 'failed'\n  | 'pause_requested'\n  | 'paused'\n  | 'resumed';\n\nexport interface PoWorkflowStepState {\n  readonly name: string;\n  readonly status: PoWorkflowProgressState;\n  readonly ref?: { readonly kind: string; readonly id: string; readonly label?: string };\n  readonly reason?: string;\n}\n\nexport interface PoWorkflowJobState {\n  readonly name: string;\n  readonly phase: 'pre' | 'job' | 'post';\n  readonly status: PoWorkflowProgressState;\n  readonly steps: readonly PoWorkflowStepState[];\n}\n\nexport interface PoWorkflowRunState {\n  readonly run: PoWorkflowRunRef;\n  readonly stage: PoWorkflowStage;\n  readonly outcome?: PoWorkflowOutcome;\n  /** From the same persisted snapshot as stage/outcome, never a newer cached operation. */\n  readonly binding?: PoWorkflowPolicyBinding;\n  readonly jobs: readonly PoWorkflowJobState[];\n  readonly children?: readonly PoWorkflowChildrenStatus[];\n}\n\n/** The parsed definition actually used, not a re-read of mutable YAML on disk. */\nexport interface PoWorkflowConfig {\n  readonly definition: PoWorkflowDefinitionRef;\n  readonly revision: string;\n  /** Engine-owned YAML vocabulary. Core does not import or implement the parser. */\n  readonly workflow: Readonly<Record<string, unknown>>;\n}\n\n/** Owner-authoritative views, or an authorized projection for a launcher. */\nexport interface PoWorkflowRunsService {\n  readConfig(runId: string): Promise<PoWorkflowConfig | undefined>;\n  readState(runId: string): Promise<PoWorkflowRunState | undefined>;\n  /** Replays the latest state, including terminal state, before subsequent updates. */\n  subscribe(runId: string, listener: (state: PoWorkflowRunState) => void): () => void;\n}\n\nexport interface PoWorkflowChildInvocation {\n  readonly invocationId: string;\n  readonly job: string;\n  readonly state: 'running' | 'completed' | 'failed' | 'interrupted';\n  readonly sessionIds: readonly string[];\n  readonly startedAt: string;\n  readonly endedAt?: string;\n  readonly error?: string;\n  readonly usage?: import('./hubChannel').PoHubSessionUsage;\n}\n\nexport interface PoWorkflowCriterionState {\n  readonly key: string;\n  readonly description: string;\n  readonly verifiedBy: string;\n  readonly status: 'unchecked' | 'checked' | 'not-met';\n  readonly feedback?: string;\n  readonly invocationId?: string;\n}\n\nexport interface PoWorkflowChildrenStatus {\n  readonly lead: string;\n  readonly continuations: number;\n  readonly maxContinuations: number;\n  readonly criteria: readonly PoWorkflowCriterionState[];\n  readonly invocations: readonly PoWorkflowChildInvocation[];\n}\n\n/** In-process, caller-bound capability. Never accepted from a tool or serialized. */\nexport interface PoWorkflowChildrenSession {\n  readonly role: 'lead' | 'child' | 'consumer';\n  spawnChild?(input: {\n    job: string;\n    prompt: string;\n    inputs?: Record<string, string | number | boolean>;\n  }): Promise<PoWorkflowChildInvocation>;\n  childStatus?(input: { invocationId: string }): Promise<PoWorkflowChildInvocation>;\n  children?(): Promise<PoWorkflowChildrenStatus>;\n  reportCriteria?(input: {\n    results: Record<string, { status: 'checked' | 'not-met'; feedback?: string }>;\n  }): Promise<void>;\n  /** Immutable pre-review snapshot selected by the runtime, not mutable paths. */\n  reviewArtifacts?(): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n  /** Returns exactly the accepted bytes, after a fresh authoritative ledger/revision check. */\n  acceptedArtifacts?(input: {\n    job: string;\n  }): Promise<{ revision: string; artifacts: Readonly<Record<string, string>> }>;\n}\n\n/** Bound only in the trusted step-session bootstrap, before packages mount. */\nexport interface PoWorkflowContextService {\n  readonly run: PoWorkflowRunRef;\n  readonly job: string;\n  readonly step: string;\n  readonly attempt: number;\n  readonly config: PoWorkflowConfig;\n  readonly jobEnvironment: Readonly<Record<string, string>>;\n  readonly stepEnvironment: Readonly<Record<string, string>>;\n  readonly traceparent?: string;\n  /** Absolute path of the workflow's instructions file, read in place of the discovered AGENTS.md files. */\n  readonly instructions?: string;\n  readonly state: PoWorkflowRunsService;\n  readonly children?: PoWorkflowChildrenSession;\n}\n\n// These are in-process capabilities, not remote session-create fields or durable records.\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/workflow-launch': PoWorkflowLaunchService;\n    'po/workflow-definition-sources': PoWorkflowDefinitionSourcesService;\n    'po/workflow-runs': PoWorkflowRunsService;\n    'po/workflow-context': PoWorkflowContextService;\n    'po/workflow-admissions': PoWorkflowAdmissionsService;\n  }\n}\n\nexport function readPoWorkflowLaunchService(context: Context): PoWorkflowLaunchService | undefined {\n  return context.get(PO_WORKFLOW_LAUNCH_SERVICE) as PoWorkflowLaunchService | undefined;\n}\n\nexport function readPoWorkflowDefinitionSourcesService(\n  context: Context,\n): PoWorkflowDefinitionSourcesService | undefined {\n  return context.get(PO_WORKFLOW_DEFINITION_SOURCES_SERVICE) as PoWorkflowDefinitionSourcesService | undefined;\n}\n\nexport function readPoWorkflowRunsService(context: Context): PoWorkflowRunsService | undefined {\n  return context.get(PO_WORKFLOW_RUNS_SERVICE) as PoWorkflowRunsService | undefined;\n}\n\nexport function readPoWorkflowContextService(context: Context): PoWorkflowContextService | undefined {\n  return context.get(PO_WORKFLOW_CONTEXT_SERVICE) as PoWorkflowContextService | undefined;\n}\n\nexport function readPoWorkflowAdmissionsService(context: Context): PoWorkflowAdmissionsService | undefined {\n  return context.get(PO_WORKFLOW_ADMISSIONS_SERVICE) as PoWorkflowAdmissionsService | undefined;\n}\n"],"mappings":";;AAGA,MAAa,6BAA6B;AAC1C,MAAa,yCAAyC;AACtD,MAAa,2BAA2B;AACxC,MAAa,8BAA8B;AAC3C,MAAa,iCAAiC;;AAG9C,MAAa,gCAAgC,KAAK,OAChD;CACE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,KAAK,KAAK,OAAO;EACf,WAAW;EACX,SAAS;CACX,CAAC;AACH,GACA,EAAE,sBAAsB,MAAM,CAChC;;AAIA,MAAa,yBAAyB,KAAK,OACzC;CACE,OAAO,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACnC,gBAAgB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CAC5C,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;CACpC,mBAAmB,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AACjD,GACA,EAAE,sBAAsB,MAAM,CAChC;AA+SA,SAAgB,4BAA4B,SAAuD;CACjG,OAAO,QAAQ,IAAI,0BAA0B;AAC/C;AAEA,SAAgB,uCACd,SACgD;CAChD,OAAO,QAAQ,IAAI,sCAAsC;AAC3D;AAEA,SAAgB,0BAA0B,SAAqD;CAC7F,OAAO,QAAQ,IAAI,wBAAwB;AAC7C;AAEA,SAAgB,6BAA6B,SAAwD;CACnG,OAAO,QAAQ,IAAI,2BAA2B;AAChD;AAEA,SAAgB,gCAAgC,SAA2D;CACzG,OAAO,QAAQ,IAAI,8BAA8B;AACnD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agimon-ai/po-core",
-  "version": "0.0.0-alpha.90",
+  "version": "0.0.0-alpha.91",
   "description": "Po runtime systems and reusable core services.",
   "keywords": [
     "ai",
@@ -569,8 +569,8 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@agimon-ai/po-logsink": "0.0.1-alpha.72",
-    "@agimon-ai/po-web-security": "0.0.0-alpha.90",
+    "@agimon-ai/po-logsink": "0.0.1-alpha.73",
+    "@agimon-ai/po-web-security": "0.0.0-alpha.91",
     "@deepseek-ai/cordis": "4.0.5",
     "@earendil-works/chord": "1.4.0",
     "@earendil-works/pi-agent-core": "1.4.0",
@@ -594,7 +594,7 @@
     "yaml": "2.9.1"
   },
   "devDependencies": {
-    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.90",
+    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.91",
     "@apidevtools/swagger-parser": "^13.1.0",
     "@asyncapi/parser": "^3.6.4",
     "@earendil-works/pi-ai": "1.4.0",