@agwab/pi-workflow 0.1.2 → 0.2.0

package/dist/workflow-web-source.js

@@ -1,5 +1,5 @@
 import { createHash } from "node:crypto";
-import { appendFile, mkdir, readFile, readdir, rename, writeFile } from "node:fs/promises";
+import { appendFile, mkdir, readFile, readdir, rename, writeFile, } from "node:fs/promises";
 import { isIP } from "node:net";
 import { dirname, resolve } from "node:path";
 export const WORKFLOW_WEB_SOURCE_CACHE_SCHEMA = "workflow-web-source-cache-v1";
@@ -238,7 +238,9 @@ export async function findWorkflowWebSourceByUrl(config, url) {
 function sourceIndexEntryMatchesUrl(entry, url, redactedUrl, targetKey, targetDisplayKey) {
     if (entry.urlKey)
         return entry.urlKey === targetKey;
-    if (redactedUrlIdentityUnsafe(redactedUrl) || redactedUrlIdentityUnsafe(entry.redactedUrl) || redactedUrlIdentityUnsafe(entry.url)) {
+    if (redactedUrlIdentityUnsafe(redactedUrl) ||
+        redactedUrlIdentityUnsafe(entry.redactedUrl) ||
+        redactedUrlIdentityUnsafe(entry.url)) {
         return false;
     }
     return (entry.redactedUrl === redactedUrl ||
@@ -247,7 +249,8 @@ function sourceIndexEntryMatchesUrl(entry, url, redactedUrl, targetKey, targetDi
         sourceUrlDisplayCacheKey(entry.url) === targetDisplayKey);
 }
 function redactedUrlIdentityUnsafe(url) {
-    return /REDACTED/.test(url) || /[?&#][^=]*(?:token|secret|password|signature|sig|key|auth|session|credential)[^=]*=/i.test(url);
+    return (/REDACTED/.test(url) ||
+        /[?&#][^=]*(?:token|secret|password|signature|sig|key|auth|session|credential)[^=]*=/i.test(url));
 }
 async function findWorkflowWebSourceByUrlFromSources(config, url, redactedUrl, targetKey, targetDisplayKey) {
     let entries;
@@ -269,7 +272,9 @@ async function findWorkflowWebSourceByUrlFromSources(config, url, redactedUrl, t
                 return source;
             continue;
         }
-        if (redactedUrlIdentityUnsafe(redactedUrl) || redactedUrlIdentityUnsafe(source.redactedUrl) || redactedUrlIdentityUnsafe(source.url)) {
+        if (redactedUrlIdentityUnsafe(redactedUrl) ||
+            redactedUrlIdentityUnsafe(source.redactedUrl) ||
+            redactedUrlIdentityUnsafe(source.url)) {
             continue;
         }
         if (source.redactedUrl === redactedUrl ||
@@ -316,7 +321,7 @@ export function buildWorkflowWebSourceCard(options) {
     };
 }
 export function readWorkflowWebSourceSnippet(options) {
-    return readWorkflowWebSourceSnippets({
+    return (readWorkflowWebSourceSnippets({
         source: options.source,
         requests: [
             {
@@ -328,7 +333,7 @@ export function readWorkflowWebSourceSnippet(options) {
         ],
         maxChars: options.maxChars,
         budget: options.budget,
-    })[0] ?? { status: "not_found", visibleChars: 0 };
+    })[0] ?? { status: "not_found", visibleChars: 0 });
 }
 export function readWorkflowWebSourceSnippets(options) {
     let normalizedSource;
@@ -491,7 +496,10 @@ function readWorkflowWebSourceSnippetWithCache(options) {
 }
 function snippetForTerms(options) {
     const needles = options.terms
-        .map((term) => ({ raw: term, normalized: normalizeForSearch(term).normalized }))
+        .map((term) => ({
+        raw: term,
+        normalized: normalizeForSearch(term).normalized,
+    }))
         .filter((term) => term.normalized.length > 0);
     if (needles.length === 0)
         return { status: "not_found", visibleChars: 0 };
@@ -545,7 +553,8 @@ function scoreTermWindow(text, matchStart, matchEnd, maxChars, terms) {
         .filter((term) => !windowNorm.includes(term.normalized))
         .map((term) => term.raw);
     const occurrenceScore = terms.reduce((score, term) => {
-        return score + (windowNorm.includes(term.normalized) ? term.normalized.length : 0);
+        return (score +
+            (windowNorm.includes(term.normalized) ? term.normalized.length : 0));
     }, 0);
     return {
         start,
@@ -675,7 +684,8 @@ function nearbySnippet(text, needle, maxChars) {
 async function readWorkflowWebSourceIndexFile(config) {
     try {
         const parsed = JSON.parse(await readFile(indexPath(config), "utf8"));
-        if (!isRecord(parsed) || parsed.schema !== WORKFLOW_WEB_SOURCE_INDEX_SCHEMA) {
+        if (!isRecord(parsed) ||
+            parsed.schema !== WORKFLOW_WEB_SOURCE_INDEX_SCHEMA) {
             throw new Error("invalid index");
         }
         const sources = Array.isArray(parsed.sources)
@@ -686,7 +696,9 @@ async function readWorkflowWebSourceIndexFile(config) {
             : [];
         return {
             schema: WORKFLOW_WEB_SOURCE_INDEX_SCHEMA,
-            updatedAt: typeof parsed.updatedAt === "string" ? parsed.updatedAt : new Date().toISOString(),
+            updatedAt: typeof parsed.updatedAt === "string"
+                ? parsed.updatedAt
+                : new Date().toISOString(),
             runId: typeof parsed.runId === "string" ? parsed.runId : config.runId,
             sources: mergeSourceIndexEntries(sources),
         };
@@ -719,7 +731,8 @@ async function readWorkflowWebSourceIndexLedger(config) {
             continue;
         try {
             const parsed = JSON.parse(line);
-            if (!isRecord(parsed) || parsed.schema !== WORKFLOW_WEB_SOURCE_INDEX_EVENT_SCHEMA)
+            if (!isRecord(parsed) ||
+                parsed.schema !== WORKFLOW_WEB_SOURCE_INDEX_EVENT_SCHEMA)
                 continue;
             const entry = sourceIndexEntryFromUnknown(parsed.entry);
             if (entry)
@@ -734,7 +747,8 @@ async function readWorkflowWebSourceIndexLedger(config) {
 function sourceIndexEntryFromUnknown(value) {
     if (!isRecord(value))
         return undefined;
-    if (typeof value.sourceRef !== "string" || !isWorkflowWebSourceRef(value.sourceRef))
+    if (typeof value.sourceRef !== "string" ||
+        !isWorkflowWebSourceRef(value.sourceRef))
         return undefined;
     if (typeof value.createdAt !== "string")
         return undefined;
@@ -822,7 +836,8 @@ function nonPublicIpReason(address) {
     }
     if (isIP(lower) === 4) {
         const parts = lower.split(".").map((part) => Number(part));
-        if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255))
+        if (parts.length !== 4 ||
+            parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255))
             return "non_public_ip_blocked";
         const [a, b, c, d] = parts;
         if (a === 0 || a === 10 || a === 127 || a >= 224)
@@ -859,7 +874,10 @@ function nonPublicIpReason(address) {
     return undefined;
 }
 function redactRecordForModel(value) {
-    return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, redactValueForModel(item)]));
+    return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+        key,
+        redactValueForModel(item),
+    ]));
 }
 function redactValueForModel(value) {
     if (typeof value === "string")

package/docs/usage.md

@@ -211,7 +211,7 @@ Benchmark note: cache-enabled runs are a distinct cohort from older uncached run
 
 | Workflow | Required agents | Mode | Use when |
 |---|---|---|---|
-| `deep-research` | `researcher` | plan + foreach questions + normalize-input packet support + normalize + foreach verifier + audit support + final-audit packet support + full audit reduce + deterministic executive render | Use when you need a grounded answer or summary based on source material. |
+| `deep-research` | `researcher` | plan + foreach questions + normalize-input packet support + normalize + foreach verifier + audit support + final-audit packet support + compact final synthesis reduce + deterministic ledger-backed executive render | Use when you need a grounded answer or summary based on source material. |
 | `deep-review` | `scout` | triage + foreach review lenses + dedup support + foreach devil's advocate + verdict-partition support + reduce | Use when you want code or design reviewed carefully from multiple angles. |
 | `spec-review` | `scout` | extract spec + map implementation + inspect tests -> reduce candidates -> foreach verifier -> reduce report | Use when you want to check whether requirements, an API spec, or a contract are reflected in the implementation and tests. |
 | `impact-review` | `scout` | scope/implementation/validation maps -> impact lenses -> consistency/regression/ship-readiness joins -> final synthesis | Use before merging or releasing a change to check affected areas, risks, missing tests, and missing docs. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agwab/pi-workflow",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Workflow orchestration for Pi subagents.",
   "private": false,
   "type": "module",
@@ -43,7 +43,7 @@
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.json --outDir dist --noEmit false",
     "typecheck": "tsc --noEmit",
-    "check:scripts": "node scripts/check-scripts.mjs",
+    "check:scripts": "node tools/release/check-scripts.mjs",
     "validate": "npm run check:scripts && npm run typecheck && npm run test:unit",
     "test": "npm run test:unit",
     "test:build": "rm -rf .tmp/unit && tsc -p tsconfig.json --outDir .tmp/unit --noEmit false",
@@ -51,8 +51,8 @@
     "e2e": "node test/e2e/run.mjs",
     "pack:dry": "npm pack --dry-run --json",
     "prepack": "npm run build",
-    "release:check": "node scripts/release-check.mjs",
-    "release:dispatch": "node scripts/dispatch-release.mjs"
+    "release:check": "node tools/release/release-check.mjs",
+    "release:dispatch": "node tools/release/dispatch-release.mjs"
   },
   "pi": {
     "extensions": [
@@ -70,7 +70,6 @@
     "@earendil-works/pi-ai": "^0.78.0",
     "@earendil-works/pi-coding-agent": "*",
     "@types/node": "^24.0.0",
-    "typebox": "^1.1.39",
     "typescript": "^5.0.0"
   },
   "engines": {
@@ -78,7 +77,8 @@
   },
   "dependencies": {
     "@agwab/pi-subagent": "^0.3.6",
-    "pi-web-access": "^0.10.7"
+    "pi-web-access": "^0.10.7",
+    "typebox": "^1.1.39"
   },
   "publishConfig": {
     "access": "public"

package/src/compiler.ts

@@ -31,6 +31,10 @@ import {
 	type WorkflowToolSpec,
 	type WorktreePolicy,
 } from "./types.js";
+import {
+	resolveWorkflowRuntime,
+	type WorkflowModelInfo,
+} from "./workflow-runtime.js";
 
 const DELEGATION_TOOLS = new Set([
 	"skill_test_subagent",
@@ -57,6 +61,7 @@ const DEFAULT_DYNAMIC_DECISION_LOOP_MAX_STALLS = 3;
 interface CompileOptions {
 	cwd: string;
 	specPath?: string;
+	availableModels?: WorkflowModelInfo[];
 }
 
 interface ArtifactGraphCompilePlanBuildResult {
@@ -728,6 +733,20 @@ async function compileArtifactGraphPlan(
 				defaultThinking,
 				overrides,
 			);
+			const resolvedDynamicRuntime = await resolveWorkflowRuntime(
+				{ model: defaultModel, thinking: defaultThinking },
+				{
+					taskKey: key,
+					stageId: stage.id,
+					taskId,
+					agent: "dynamic",
+				},
+				{ availableModels: options.availableModels },
+			);
+			dynamicTask.runtime = {
+				...dynamicTask.runtime,
+				...resolvedDynamicRuntime,
+			};
 			if (dynamicToolSelection.tools || dynamicToolSelection.toolProviders) {
 				dynamicTask.runtime = {
 					...dynamicTask.runtime,
@@ -804,11 +823,31 @@ async function compileArtifactGraphPlan(
 		validateToolSubset(toolSelection.tools, stageAgent, issues, toolPath);
 		validateDelegationBoundary(toolSelection.tools, issues, toolPath);
 		const filteredToolSelection = filterToolSelection(toolSelection);
+		// Explicit runtime overrides outrank stage pins; spec defaults fill last.
+		const requestedRuntime = {
+			model:
+				options.runtimeDefaults?.model ?? stage.model ?? spec.defaults?.model,
+			thinking:
+				options.runtimeDefaults?.thinking ??
+				stage.thinking ??
+				spec.defaults?.thinking,
+		};
+		const resolvedRuntime = await resolveWorkflowRuntime(
+			requestedRuntime,
+			{
+				taskKey: key,
+				stageId: stage.id,
+				taskId,
+				agent: stageAgentName,
+			},
+			{
+				availableModels: options.availableModels,
+			},
+		);
 		const runtime = {
 			approvalMode:
 				stage.approvalMode ?? spec.defaults?.approvalMode ?? "non-interactive",
-			model: stage.model ?? defaultModel,
-			thinking: stage.thinking ?? defaultThinking,
+			...resolvedRuntime,
 			tools: filteredToolSelection.tools,
 			...(filteredToolSelection.toolProviders
 				? { toolProviders: filteredToolSelection.toolProviders }

package/src/engine.ts

@@ -1,11 +1,5 @@
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
-import {
-	dirname,
-	extname,
-	join,
-	relative,
-	resolve,
-} from "node:path";
+import { dirname, extname, join, relative, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { Worker } from "node:worker_threads";
 
@@ -43,7 +37,10 @@ import {
 	workflowBundleFingerprint,
 	workflowBundleSpecPath,
 } from "./workflow-source-context-runtime.js";
-import { readSimpleJsonPath } from "./workflow-runtime.js";
+import {
+	readSimpleJsonPath,
+	type WorkflowModelInfo,
+} from "./workflow-runtime.js";
 import {
 	dynamicRunDir,
 	hashDynamicRequest,
@@ -158,6 +155,7 @@ const supervisorTimers = new Map<string, ReturnType<typeof setInterval>>();
 export interface WorkflowRunOptions {
 	task?: string;
 	runtimeDefaults?: { model?: string; thinking?: ThinkingLevel };
+	availableModels?: WorkflowModelInfo[];
 	dynamicUi?: DynamicWorkflowUi;
 	runId?: string;
 	parentRunId?: string;
@@ -210,6 +208,7 @@ async function runLoadedWorkflowSpec(
 		specPath,
 		task: options.task,
 		runtimeDefaults: options.runtimeDefaults,
+		availableModels: options.availableModels,
 	});
 
 	const { run } = await createRunRecord(cwd, compiled, specPath, {
@@ -861,7 +860,6 @@ async function extractArtifactGraphForeachItems(
 	return { items };
 }
 
-
 async function launchPendingTaskAt(
 	cwd: string,
 	run: WorkflowRunRecord,
@@ -1801,7 +1799,6 @@ function isDynamicReplayInvariantError(error: unknown): boolean {
 	);
 }
 
-
 function requiredDynamicString(
 	value: unknown,
 	field: string,
@@ -2534,9 +2531,6 @@ async function runDynamicAgentRequest(input: {
 	);
 }
 
-
-
-
 interface DynamicControllerOutcome {
 	taskStatus: "completed" | "blocked" | "failed";
 	statusDetail: string;
@@ -2676,7 +2670,6 @@ function dynamicControllerIssueMessage(
 	return `${prefix}: ${first}${suffix}`;
 }
 
-
 function applyExistingLoopWorktree(
 	run: WorkflowRunRecord,
 	task: WorkflowTaskRunRecord,
@@ -2724,12 +2717,10 @@ function recordCreatedLoopWorktree(
 	else run.loopWorktrees[index] = record;
 }
 
-
 function uniqueStrings(values: readonly string[]): string[] {
 	return [...new Set(values.filter((value) => value.trim().length > 0))];
 }
 
-
 async function readCompiledWorkflow(
 	cwd: string,
 	runId: string,