@archmax-ai/harness 0.0.0

package/dist/assembly/compose.d.ts

@@ -0,0 +1,170 @@
+/**
+ * The governed composition: one Deep Agent whose compiled graph carries the
+ * machine's position, variables, trail and park records as channels, with the
+ * governance middleware enforcing the machine at every turn boundary, model
+ * call and tool call.
+ *
+ * Factored out of `createAgent` so a sub-workflow is composed the same way for
+ * a different machine: the {@link AssemblyContext} is everything a composition
+ * shares with the root; the machine, its system prompt, its trigger and any
+ * inherited denials are what varies.
+ */
+import type { BaseChatModel } from "@langchain/core/language_models/chat_models";
+import type { BaseCheckpointSaver } from "@langchain/langgraph";
+import { type AgentMiddleware } from "langchain";
+import { type BackendProtocolV2, type CreateDeepAgentParams } from "deepagents";
+import { type CompiledAgentGraph, type IntrospectableStateGraph } from "../core/deepagents.js";
+import { type WorkflowEventEmitter } from "../core/events.js";
+import { type SessionStore } from "../core/session-store.js";
+import type { SessionZoneRouter } from "../core/session-zone.js";
+import type { SkillPrefixes, SkillRegistry } from "../core/skills.js";
+import type { PricingTable, UsageTracker } from "../core/usage.js";
+import type { Workspace } from "../core/workspace.js";
+import type { MountPrefixes } from "../core/zones.js";
+import { type GovernanceRule } from "../kernel/kernel.js";
+import { type WorkflowMachine } from "../machine/machine.js";
+import { type TriggerInput } from "../machine/triggers.js";
+import type { ResolvedRuntimeContract } from "../runtime/contract.js";
+import type { LoadedRubric, Rubric } from "../rubrics/rubrics.js";
+import { type SubWorkflowRegistry } from "../workflow/sub-workflow.js";
+import { type TurnRunner } from "../workflow/turn-runner.js";
+import type { CreateAgentParams } from "./index.js";
+/**
+ * Everything one assembly resolved once and every composition it makes shares.
+ * Built by `createAgent`, consumed by {@link composeGoverned}, the plain
+ * composition and the delegation registry.
+ */
+export interface AssemblyContext {
+    params: CreateAgentParams;
+    /** The root workflow's slug — what a diagnostic names, and what a child inherits denials from. */
+    workflowName: string;
+    workspace: Workspace;
+    authoring: Workspace;
+    backend: BackendProtocolV2;
+    sessionZone: SessionZoneRouter;
+    sessionStore: SessionStore;
+    mountPrefixes: MountPrefixes;
+    checkpointer: BaseCheckpointSaver;
+    emit: WorkflowEventEmitter;
+    usage: UsageTracker;
+    model: BaseChatModel;
+    /**
+     * The model a **state** runs on: the id it declares (or its workflow's
+     * `settings.model`) resolved through the assembly's factory seam and memoized
+     * per distinct id; no id resolves to {@link AssemblyContext.model}. Held on the
+     * context so a delegated child — governed by its own machine, declaring its own
+     * ids — resolves them exactly as the root does.
+     */
+    agentModel: (id?: string) => BaseChatModel;
+    /**
+     * Whether a declared id reaches a model at all. `false` when the host handed
+     * `createAgent` an explicit `model` instance, which outranks every declaration;
+     * each composition then reports its own inert ids once.
+     */
+    honoursDeclaredModels: boolean;
+    rubrics: Map<string, Rubric>;
+    /**
+     * The model a rubric grades on: its declared `model` resolved through the
+     * assembly's factory seam, else the `rubric`-role model. Held on the context so
+     * a delegated child — which builds its own registry from its own spec — resolves
+     * graders the same way the root does.
+     */
+    rubricModel: (rubric: Rubric) => BaseChatModel | undefined;
+    /** Every subagent the assembly dispatches to, file-loaded and inline, in the Deep Agents shape. */
+    subagents: LoadedRubric[];
+    skillSources: string[];
+    skillRegistry: SkillRegistry;
+    skillTable: SkillPrefixes;
+    runtimeContract: ResolvedRuntimeContract;
+    /** Token prices, from the host option or the environment; absent means cost is never reported. */
+    pricing?: PricingTable;
+}
+/** What one governed composition is made for. */
+export interface ComposeInput {
+    /** The machine this composition is governed by — the root's, or a delegated one's. */
+    machine: WorkflowMachine;
+    /** That machine's slug, so a diagnostic about it can name it. */
+    workflow: string;
+    /** The fully resolved system prompt for that machine. */
+    systemPrompt: string;
+    /** The assembly-time default trigger. */
+    trigger?: TriggerInput;
+    /** Host seeds for sessions of this machine (a child seeds per dispatch instead). */
+    variables?: Record<string, unknown>;
+    /**
+     * Denials compiled from every ancestor's `policy`, evaluated ahead of this
+     * machine's per-state grants so a delegated machine can narrow what is
+     * permitted but never re-grant what an ancestor forbade.
+     */
+    inheritedPolicyRules?: GovernanceRule[];
+    /** Child compositions, resolved lazily by slug. */
+    registry: SubWorkflowRegistry;
+}
+/** One composed governed agent. */
+export interface Composed {
+    graph: CompiledAgentGraph;
+    /** The session-bound turn runner every entry into a session goes through. */
+    driver: TurnRunner;
+    /** Release every per-session resource this composition holds. */
+    dispose: (sessionId: string) => void;
+    /** Whether the tool-mock middleware is wired (see `Agent.toolMocks`). */
+    toolMocks: boolean;
+    /**
+     * The graph as a resume reads and drives it: `getState` off the compiled
+     * graph, `invoke` through the turn runner under the agent's default config.
+     */
+    resumable: IntrospectableStateGraph;
+}
+/**
+ * The Deep Agents options the assembly accepts and forwards untouched, in one
+ * place so the governed and plain compositions cannot drift about which reach
+ * the framework.
+ */
+export declare function frameworkPassthrough(params: CreateAgentParams): Pick<CreateDeepAgentParams, "store" | "interruptOn" | "name">;
+/**
+ * The planning scratchpad: `write_todos` is always-on and deepagents 1.11.1 does
+ * not register it, so the assembly installs langchain's `todoListMiddleware`.
+ * Must sit outermost among the runtime's own middleware so its guidance lands on
+ * the system prompt **before** the workflow instrumentation splits it into
+ * `[static, volatile]` blocks.
+ */
+export declare function todoMiddleware(): AgentMiddleware;
+/**
+ * The subagent parameters both compositions hand the framework: the workflow's
+ * grading rubrics, registered so the framework provides the `task` tool the
+ * runtime dispatches them through.
+ *
+ * They are never *disclosed* — `task` is withheld in every state and grantable by
+ * nothing — so registering a grader here gives the graded agent no reach; it only
+ * gives the runtime a runnable. `generalPurposeAgent: false` holds
+ * unconditionally: there is no agent-facing subagent in this SDK, so the
+ * framework's default general-purpose one would be a tool nothing may call.
+ */
+export declare function rubricParams(ctx: AssemblyContext): {
+    subagents: LoadedRubric[];
+    generalPurposeAgent: boolean;
+};
+/**
+ * Bind `fn` to a session: the session zone's view (agent-visible paths resolve
+ * against that session without its id embedded) plus the event envelope's
+ * session context. The single ingress where a session id becomes a store
+ * address, so it refuses an id that would escape the session zone or shadow a
+ * reserved root name.
+ */
+export declare function sessionBinder(ctx: AssemblyContext): <T>(sessionId: string, fn: () => Promise<T>) => Promise<T>;
+/**
+ * The system prompt for one machine: the spec-rendered workflow header followed
+ * by the `WORKFLOW.md` prose (HTML comments stripped — notes for whoever opens
+ * the file, not for the model), layered with the persona, the platform prompt and
+ * the workspace zones by `resolveSystemPrompt`. The graph itself is not here: it
+ * is disclosed per model call, for the active state only, by the middleware. A
+ * plain agent (no machine) gets no platform prompt: it explains a graph there is
+ * none of.
+ */
+export declare function renderSystemPrompt(ctx: AssemblyContext, machine: WorkflowMachine | null, body: string, options: {
+    workflow: string;
+}): Promise<string>;
+/** Compose one governed agent for `input.machine`. */
+export declare function composeGoverned(ctx: AssemblyContext, input: ComposeInput): Promise<Composed>;
+/** The denials a direct child inherits from the root machine — the chain's first link. */
+export declare function inheritedDenials(ctx: AssemblyContext, root: WorkflowMachine): GovernanceRule[];

package/dist/assembly/compose.js

@@ -0,0 +1,391 @@
+import { mergeConfigs } from "@langchain/core/runnables";
+import { todoListMiddleware } from "langchain";
+import { createDeepAgent } from "deepagents";
+import { AGENT_DEFAULT_CONFIG } from "../agent.js";
+import { asCompiledAgentGraph, asDecisionGraph, } from "../core/deepagents.js";
+import { withEventContext } from "../core/events.js";
+import { resolveSystemPrompt } from "../core/prompt.js";
+import { SessionStoreIdError, sessionIdRejection } from "../core/session-store.js";
+import { TOOL_MOCK_MIDDLEWARE_NAME } from "../core/tool-mocks.js";
+import { loadPromptCacheEnv } from "../env.js";
+import { BUILTIN_HOOK_KINDS } from "../lifecycle/runner.js";
+import { compileForbiddenSkillRules, compileForbiddenMountRules, compileForbidRules, } from "../kernel/kernel.js";
+import { UNGRANTABLE_TOOLS } from "../machine/machine.js";
+import { WorkflowLoadError } from "../machine/load-spec.js";
+import { workflowToolName } from "../machine/tool-names.js";
+import { resolveTrigger } from "../machine/triggers.js";
+import { buildSeededVariables, unguaranteedReferenceWarnings } from "../machine/variables.js";
+import { createScriptExecutor } from "../sandbox/executor.js";
+import { createPtcToolGateway } from "../sandbox/ptc-gateway.js";
+import { createQuickJsSandboxRuntime } from "../sandbox/runtime.js";
+import { createInterpreter } from "../sandbox/tools.js";
+import { createWorkflowInstrumentation } from "../workflow/middleware.js";
+import { resolveHookScript, workflowPaths } from "../workflow/paths.js";
+import { createProviderCacheMiddleware, modelIdOf, NATIVE_CACHE_STRATEGIES, resolveCacheStrategy, resolvePromptCacheConfig, unsupportedCacheMessage, } from "../workflow/prompt-cache.js";
+import { renderWorkflowPrompt, stripHtmlComments } from "../workflow/render-prompt.js";
+import { describeMachineTopology } from "../workflow/session-artifacts.js";
+import { workflowStateSchema } from "../workflow/state.js";
+import { createSubWorkflowDispatcher, SubWorkflowError, } from "../workflow/sub-workflow.js";
+import { createTurnRunner } from "../workflow/turn-runner.js";
+import { createDelegationTool } from "../workflow/workflow-tools.js";
+/**
+ * The Deep Agents options the assembly accepts and forwards untouched, in one
+ * place so the governed and plain compositions cannot drift about which reach
+ * the framework.
+ */
+export function frameworkPassthrough(params) {
+    return {
+        ...(params.store ? { store: params.store } : {}),
+        ...(params.interruptOn ? { interruptOn: params.interruptOn } : {}),
+        ...(params.name ? { name: params.name } : {}),
+    };
+}
+/**
+ * The planning scratchpad: `write_todos` is always-on and deepagents 1.11.1 does
+ * not register it, so the assembly installs langchain's `todoListMiddleware`.
+ * Must sit outermost among the runtime's own middleware so its guidance lands on
+ * the system prompt **before** the workflow instrumentation splits it into
+ * `[static, volatile]` blocks.
+ */
+export function todoMiddleware() {
+    return todoListMiddleware();
+}
+/**
+ * The subagent parameters both compositions hand the framework: the workflow's
+ * grading rubrics, registered so the framework provides the `task` tool the
+ * runtime dispatches them through.
+ *
+ * They are never *disclosed* — `task` is withheld in every state and grantable by
+ * nothing — so registering a grader here gives the graded agent no reach; it only
+ * gives the runtime a runnable. `generalPurposeAgent: false` holds
+ * unconditionally: there is no agent-facing subagent in this SDK, so the
+ * framework's default general-purpose one would be a tool nothing may call.
+ */
+export function rubricParams(ctx) {
+    return { subagents: ctx.subagents, generalPurposeAgent: false };
+}
+/**
+ * Bind `fn` to a session: the session zone's view (agent-visible paths resolve
+ * against that session without its id embedded) plus the event envelope's
+ * session context. The single ingress where a session id becomes a store
+ * address, so it refuses an id that would escape the session zone or shadow a
+ * reserved root name.
+ */
+export function sessionBinder(ctx) {
+    return (sessionId, fn) => {
+        const rejection = sessionIdRejection(sessionId, ctx.mountPrefixes);
+        if (rejection)
+            throw new SessionStoreIdError(sessionId, rejection);
+        return withEventContext({ sessionId }, () => ctx.sessionZone.sessionScoped(sessionId, fn));
+    };
+}
+/**
+ * The system prompt for one machine: the spec-rendered workflow header followed
+ * by the `WORKFLOW.md` prose (HTML comments stripped — notes for whoever opens
+ * the file, not for the model), layered with the persona, the platform prompt and
+ * the workspace zones by `resolveSystemPrompt`. The graph itself is not here: it
+ * is disclosed per model call, for the active state only, by the middleware. A
+ * plain agent (no machine) gets no platform prompt: it explains a graph there is
+ * none of.
+ */
+export function renderSystemPrompt(ctx, machine, body, options) {
+    const prose = stripHtmlComments(body).trim();
+    const workflowPrompt = machine
+        ? [renderWorkflowPrompt(machine), prose].filter(Boolean).join("\n\n")
+        : prose || null;
+    return resolveSystemPrompt(ctx.workspace, {
+        platformBackendPath: machine ? workflowPaths(options.workflow).platformPrompt : null,
+        workflowPrompt,
+        mountPrefixes: ctx.mountPrefixes,
+        extra: ctx.params.systemPrompt,
+    });
+}
+/**
+ * The models one governed composition runs on: the workflow's own (its
+ * `settings.model`, else the assembly default) and, per state, whatever that
+ * state declares. Resolved here, once per composition, so a configuration
+ * problem surfaces at assembly rather than mid-session and the per-call path is
+ * a map lookup.
+ *
+ * The cache strategy travels with the model, because that is what it is a
+ * property of: a state running on Claude behind an OpenAI-compatible endpoint
+ * needs the explicit breakpoint whatever the workflow's own model is.
+ */
+function resolveStateModels(ctx, machine, workflow, cacheEnabled) {
+    const { emit } = ctx;
+    const declared = machine.declaredModels();
+    const warn = (message) => emit({ type: "warning", scope: "workflow", message });
+    // An explicit `model` instance outranks every declared id (see `createAgent`).
+    // Reported once per composition, naming every position it makes inert, so a
+    // host learns that `modelFactory` is what honours a declaration.
+    if (!ctx.honoursDeclaredModels && declared.length > 0) {
+        warn(`Workflow '${workflow}' declares ${describeDeclaredModels(machine)}, but an explicit ` +
+            `'model' was passed to createAgent, which outranks a declared id: every state runs on ` +
+            `the supplied model. Pass 'modelFactory' instead — it is called for the 'agent' role ` +
+            `with the declared id as 'requested'.`);
+    }
+    // The id of a model, read from the instance so every route to one answers the
+    // same way — a declared id, `ARCHMAX_MODEL`, an explicit `model`, a
+    // `modelFactory`. Memoized per instance beside the cache strategy, which is
+    // the other thing resolved once here rather than per call. A model exposing no
+    // id resolves to `undefined`: cost then falls back to the response's own id or
+    // is omitted, exactly as before.
+    const ids = new Map();
+    const idOf = (model) => {
+        if (!ids.has(model))
+            ids.set(model, modelIdOf(model) || undefined);
+        return ids.get(model);
+    };
+    const strategies = new Map();
+    const strategyOf = (model) => {
+        let strategy = strategies.get(model);
+        if (strategy === undefined) {
+            strategy = resolveCacheStrategy(model, cacheEnabled);
+            // Reported per distinct model: a workflow mixing ids can have one model
+            // with no mechanism and another with one.
+            if (strategy === "unsupported")
+                warn(unsupportedCacheMessage(model));
+            strategies.set(model, strategy);
+        }
+        return strategy;
+    };
+    const workflowModel = ctx.agentModel(machine.spec.settings?.model);
+    const workflowCacheStrategy = strategyOf(workflowModel);
+    // Built here, not per call: one model per distinct id, and an id the endpoint
+    // cannot serve fails while assembling rather than in the middle of a session.
+    const byState = new Map();
+    for (const state of Object.keys(machine.spec.states)) {
+        const id = machine.modelFor(state);
+        if (id === undefined || id === machine.spec.settings?.model)
+            continue;
+        byState.set(state, ctx.agentModel(id));
+    }
+    // LangChain's native caching middlewares are graph-level and cannot vary per
+    // call, so they stay wired from the workflow's model; a state whose model
+    // wants a different native mechanism is named rather than silently mis-cached.
+    for (const [state, model] of byState) {
+        const strategy = strategyOf(model);
+        if (!NATIVE_CACHE_STRATEGIES.has(strategy) && !NATIVE_CACHE_STRATEGIES.has(workflowCacheStrategy)) {
+            continue;
+        }
+        if (strategy === workflowCacheStrategy)
+            continue;
+        warn(`State '${state}' of workflow '${workflow}' runs on a model whose prompt-cache mechanism ` +
+            `('${strategy}') differs from the workflow model's ('${workflowCacheStrategy}'). ` +
+            `Provider-native caching is graph-level and stays wired from the workflow model, so ` +
+            `this state's calls are cached as '${workflowCacheStrategy}' allows.`);
+    }
+    return {
+        workflowModel,
+        workflowCacheStrategy,
+        stateModels: {
+            modelFor: (state) => byState.get(state),
+            cacheStrategyFor: (state) => {
+                const model = byState.get(state);
+                return model ? strategyOf(model) : workflowCacheStrategy;
+            },
+            idFor: (state) => idOf(byState.get(state) ?? workflowModel),
+        },
+    };
+}
+/** The declared model positions, as a diagnostic names them. */
+function describeDeclaredModels(machine) {
+    const positions = [];
+    if (machine.spec.settings?.model)
+        positions.push(`settings.model '${machine.spec.settings.model}'`);
+    for (const [state, declaration] of Object.entries(machine.spec.states)) {
+        if (declaration?.model)
+            positions.push(`states.${state}.model '${declaration.model}'`);
+    }
+    return positions.join(", ");
+}
+/** Compose one governed agent for `input.machine`. */
+export async function composeGoverned(ctx, input) {
+    const { params, emit, workspace, authoring } = ctx;
+    const target = input.machine;
+    const governanceRules = [...(input.inheritedPolicyRules ?? []), ...(params.policyRules ?? [])];
+    const settings = target.harnessSettings;
+    // Two executors, one sandbox runtime: agent scripts read sources from the
+    // agent workspace, hook scripts from the authoring plane the agent cannot
+    // address. Sharing the runtime keeps a session's REPL a single session.
+    const sandboxRuntime = params.sandboxRuntime ?? createQuickJsSandboxRuntime();
+    const sandboxLimits = {
+        timeoutMs: settings.timeoutMs,
+        memoryLimitBytes: settings.memoryLimitBytes,
+        maxPtcCalls: settings.maxPtcCalls,
+        maxResultChars: settings.maxResultChars,
+        sandboxRuntime,
+    };
+    const sandboxVersion = ctx.runtimeContract.sandbox;
+    const executor = createScriptExecutor({ workspace, sandboxVersion, ...sandboxLimits });
+    const hookExecutor = createScriptExecutor({ workspace: authoring, sandboxVersion, ...sandboxLimits });
+    // One gateway for both programmatic-tool-call consumers — the model's own
+    // sandbox code and lifecycle hook scripts — so a script's `tools.*` call is
+    // governed and instrumented by the same kernel and event stream.
+    const ptcGateway = createPtcToolGateway({
+        machine: target,
+        policyRules: governanceRules,
+        mountPrefixes: ctx.mountPrefixes,
+        skills: ctx.skillTable,
+        emit,
+    });
+    const interpreter = createInterpreter({ executor, ptcNames: [], ptcGateway });
+    emit({ type: "interpreter-enabled" });
+    // Consumer hook executors may not shadow the built-in kinds.
+    const shadowed = Object.keys(params.hookExecutors ?? {}).filter((kind) => BUILTIN_HOOK_KINDS.includes(kind));
+    if (shadowed.length > 0) {
+        throw new Error(`hookExecutors may not override built-in hook kind(s): ${shadowed.join(", ")}. ` +
+            `Register a custom kind under a different name.`);
+    }
+    // Prompt caching: resolved from the models once, here, so an unsupported model
+    // is reported at assembly rather than discovered per call.
+    const cacheConfig = resolvePromptCacheConfig({
+        option: params.promptCache,
+        spec: settings.promptCache,
+        env: loadPromptCacheEnv(),
+    });
+    // Which model each state runs on, and therefore which cache mechanism its
+    // calls use. `workflowModel` is this machine's own — `settings.model` when it
+    // declares one — so the graph default and the native caching middleware follow
+    // the workflow rather than the process environment.
+    const { workflowModel, workflowCacheStrategy: cacheStrategy, stateModels } = resolveStateModels(ctx, target, input.workflow, cacheConfig.enabled);
+    // Conditional built-ins no state of this workflow discloses: reported so the
+    // saving is visible, and used to prune the matching upstream prompt guidance.
+    const disclosedAnywhere = new Set(Object.keys(target.spec.states).flatMap((slug) => [...target.disclosedTools(slug)]));
+    // `task` is withheld in every state of every assembly, so its upstream
+    // guidance is pruned unconditionally rather than per-assembly.
+    const withheldBuiltins = [...UNGRANTABLE_TOOLS].filter((tool) => !disclosedAnywhere.has(tool));
+    emit({ type: "prompt-shaping", cache: cacheStrategy, withheld: withheldBuiltins });
+    // One dispatcher per composition, so the depth, cycle and concurrency bounds
+    // are enforced in one place and every dispatch is reported the same way. A
+    // child of this composition inherits what it inherited plus its own policy:
+    // denials accumulate down the chain, never resetting to the root's.
+    const dispatcher = createSubWorkflowDispatcher({
+        registry: input.registry,
+        machine: target,
+        childPolicyRules: [
+            ...(input.inheritedPolicyRules ?? []),
+            ...workflowDenials(target, input.workflow),
+        ],
+        onEvent: emit,
+    });
+    // Validate the assembly-time default trigger (fails closed on an unknown id).
+    const defaultTrigger = resolveTrigger(target, input.trigger);
+    const seededVariables = buildSeededVariables(input.variables);
+    for (const message of unguaranteedReferenceWarnings(target, seededVariables)) {
+        emit({ type: "warning", scope: "workflow", message });
+    }
+    const instrumentation = createWorkflowInstrumentation({
+        machine: target,
+        executor,
+        hookExecutor,
+        // Hook paths are workflow-relative and confined to this workflow's `hooks/`.
+        resolveHookScript: (declared) => resolveHookScript(input.workflow, declared),
+        rubrics: ctx.rubrics,
+        ptcNames: [],
+        policyRules: governanceRules,
+        mountPrefixes: ctx.mountPrefixes,
+        skills: ctx.skillRegistry,
+        ptcGateway,
+        subWorkflows: dispatcher,
+        ...(params.hookExecutors ? { hookExecutors: params.hookExecutors } : {}),
+        onEvent: emit,
+        promptShaping: { cacheStrategy, cacheTtl: cacheConfig.ttl, withheldBuiltins },
+        stateModels,
+        workspace,
+        workflowName: input.workflow,
+        trigger: { id: defaultTrigger.id },
+        seededVariables,
+        ...(ctx.pricing ? { pricing: ctx.pricing } : {}),
+    });
+    // Native Anthropic/Bedrock caching is LangChain's own middleware; the
+    // OpenAI-compatible Claude path is marked by the workflow instrumentation.
+    const providerCacheMiddleware = createProviderCacheMiddleware(cacheStrategy, cacheConfig.ttl);
+    // The suspension site leads: it has to be the first middleware with an
+    // `afterModel` hook, so its hook runs last after the model and the final
+    // router honours its jumps (see `WorkflowInstrumentation`).
+    const agentMiddleware = [
+        instrumentation.parkMiddleware,
+        todoMiddleware(),
+        interpreter.middleware,
+        instrumentation.middleware,
+        ...(providerCacheMiddleware ? [providerCacheMiddleware] : []),
+        ...(params.middleware ?? []),
+    ];
+    // One tool per sibling this machine's allow lists name. A delegation tool's
+    // schema feeds the system prompt, so an unusable target fails assembly.
+    const delegationTools = [];
+    for (const slug of target.delegationTargets()) {
+        let signature;
+        try {
+            signature = await input.registry.signature(slug);
+        }
+        catch (err) {
+            const raw = err instanceof SubWorkflowError ? err.message : String(err);
+            const detail = raw.replace(/^Cannot run sub-workflow '[^']*':\s*/, "");
+            throw new WorkflowLoadError(input.workflow, workflowPaths(input.workflow).workflowYaml, `it allows '${workflowToolName(slug)}', but ${detail}`);
+        }
+        // `disabled` is dropped: a description is built once at assembly, so
+        // "currently disabled" would be stale and destabilize the cacheable prefix.
+        const { disabled: _disabled, ...described } = signature;
+        delegationTools.push(createDelegationTool({ workflow: slug, ...described }, dispatcher, target.entry));
+    }
+    const deepAgent = createDeepAgent({
+        // The workflow's own model is the graph default; a state that declares its
+        // own is switched onto it per call by the governance middleware.
+        model: workflowModel,
+        backend: ctx.backend,
+        // Deliberately no `skills`: upstream's section cannot vary per state; the
+        // workflow middleware renders the active state's set instead.
+        tools: [...interpreter.tools, ...instrumentation.tools, ...delegationTools, ...(params.tools ?? [])],
+        ...rubricParams(ctx),
+        middleware: agentMiddleware,
+        // the harness's prompt is the whole prefix; the upstream base prompt contradicts
+        // the platform prompt and is dropped (layer order in `core/prompt.ts`).
+        systemPrompt: { prefix: input.systemPrompt, base: null },
+        stateSchema: workflowStateSchema,
+        checkpointer: ctx.checkpointer,
+        ...frameworkPassthrough(params),
+    });
+    const graph = asCompiledAgentGraph(deepAgent.graph);
+    // Assembly-time topology summary; the CLI's structured renderer ignores it.
+    emit({ type: "graph-topology", topology: describeMachineTopology(target) });
+    const driver = createTurnRunner({ graph, emit, bindSession: sessionBinder(ctx), entryState: target.entry });
+    return {
+        graph,
+        driver,
+        // Single disposal path for every per-session resource: hook and agent REPL
+        // sessions, PTC contexts and tool cache, and the dispatch ledger.
+        dispose: (sessionId) => {
+            instrumentation.dispose(sessionId);
+            interpreter.dispose(sessionId);
+            dispatcher.release(sessionId);
+        },
+        toolMocks: agentMiddleware.some((m) => m.name === TOOL_MOCK_MIDDLEWARE_NAME),
+        // Every resume — a decision, a reply, a delivery — is a turn on the session,
+        // driven through the same runner an invoke is.
+        resumable: {
+            getState: (config) => asDecisionGraph(graph).getState(config),
+            invoke: (resumeInput, config) => driver.invoke(resumeInput, mergeConfigs(AGENT_DEFAULT_CONFIG, config)),
+        },
+    };
+}
+/**
+ * One workflow's **workflow-wide** denials, as rules a descendant inherits:
+ * `tools.forbid_always`, `skills.forbid_always` and `mounts.forbid_always`,
+ * named with the workflow that declared them. A per-state `forbid` is not
+ * inherited — it governs that state's turns, not a child session — and neither
+ * is any grant.
+ */
+function workflowDenials(machine, source) {
+    return [
+        ...compileForbidRules(machine.spec.tools?.forbid_always, { scope: "workflow", source }),
+        ...compileForbiddenSkillRules(machine.spec.skills?.forbid_always ?? [], source),
+        ...compileForbiddenMountRules(machine.spec.mounts?.forbid_always ?? [], source),
+    ];
+}
+/** The denials a direct child inherits from the root machine — the chain's first link. */
+export function inheritedDenials(ctx, root) {
+    return workflowDenials(root, ctx.workflowName);
+}
+//# sourceMappingURL=compose.js.map

package/dist/assembly/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../src/assembly/compose.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAwB,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,eAAe,EAAsD,MAAM,YAAY,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,eAAe,GAGhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAA6B,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAqB,MAAM,0BAA0B,CAAC;AAGtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAIlE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,kBAAkB,GAEnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAwB,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAqB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAE9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,6BAA6B,EAAoB,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EACL,6BAA6B,EAC7B,SAAS,EACT,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,GAExB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,2BAA2B,EAC3B,gBAAgB,GAEjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAmB,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AA4FrE;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAyB;IAEzB,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,kBAAkB,EAAgC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,GAAoB;IAI/C,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB;IAChD,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QACnE,IAAI,SAAS;YAAE,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACnE,OAAO,gBAAgB,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAoB,EACpB,OAA+B,EAC/B,IAAY,EACZ,OAA6B;IAE7B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACrE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;IAClB,OAAO,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE;QACxC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QACpF,cAAc;QACd,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;KAC/B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CACzB,GAAoB,EACpB,OAAwB,EACxB,QAAgB,EAChB,YAAqB;IAErB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAExF,+EAA+E;IAC/E,4EAA4E;IAC5E,iEAAiE;IACjE,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,IAAI,CACF,aAAa,QAAQ,cAAc,sBAAsB,CAAC,OAAO,CAAC,oBAAoB;YACpF,uFAAuF;YACvF,sFAAsF;YACtF,sCAAsC,CACzC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,oEAAoE;IACpE,4EAA4E;IAC5E,+EAA+E;IAC/E,+EAA+E;IAC/E,iCAAiC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,KAAoB,EAAsB,EAAE;QACxD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC;QACnE,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsC,CAAC;IACjE,MAAM,UAAU,GAAG,CAAC,KAAoB,EAAuB,EAAE;QAC/D,IAAI,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACrD,wEAAwE;YACxE,0CAA0C;YAC1C,IAAI,QAAQ,KAAK,aAAa;gBAAE,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;YACrE,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,qBAAqB,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;IAExD,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK;YAAE,SAAS;QACtE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,+EAA+E;IAC/E,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAClG,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,qBAAqB;YAAE,SAAS;QACjD,IAAI,CACF,UAAU,KAAK,kBAAkB,QAAQ,iDAAiD;YACxF,KAAK,QAAQ,0CAA0C,qBAAqB,MAAM;YAClF,qFAAqF;YACrF,qCAAqC,qBAAqB,WAAW,CACxE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,aAAa;QACb,qBAAqB;QACrB,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACjC,OAAO,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;YAC3D,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,SAAS,sBAAsB,CAAC,OAAwB;IACtD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK;QAAE,SAAS,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;IACpG,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvE,IAAI,WAAW,EAAE,KAAK;YAAE,SAAS,CAAC,IAAI,CAAC,UAAU,KAAK,WAAW,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAoB,EAAE,KAAmB;IAC7E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;IAC7B,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC;IAExC,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,2BAA2B,EAAE,CAAC;IAC9E,MAAM,aAAa,GAAG;QACpB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,cAAc;KACf,CAAC;IACF,MAAM,cAAc,GAAG,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC;IACnD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,oBAAoB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;IACtG,0EAA0E;IAC1E,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,UAAU,GAAG,oBAAoB,CAAC;QACtC,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,eAAe;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,GAAG,CAAC,UAAU;QACtB,IAAI;KACL,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAEtC,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACtE,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACzD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,yDAAyD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC9E,gDAAgD,CACnD,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,2DAA2D;IAC3D,MAAM,WAAW,GAAG,wBAAwB,CAAC;QAC3C,MAAM,EAAE,MAAM,CAAC,WAAW;QAC1B,IAAI,EAAE,QAAQ,CAAC,WAAW;QAC1B,GAAG,EAAE,kBAAkB,EAAE;KAC1B,CAAC,CAAC;IACH,0EAA0E;IAC1E,8EAA8E;IAC9E,+EAA+E;IAC/E,oDAAoD;IACpD,MAAM,EAAE,aAAa,EAAE,qBAAqB,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAC7F,GAAG,EACH,MAAM,EACN,KAAK,CAAC,QAAQ,EACd,WAAW,CAAC,OAAO,CACpB,CAAC;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CACpF,CAAC;IACF,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,gBAAgB,GAAG,CAAC,GAAG,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAEnF,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,UAAU,GAAG,2BAA2B,CAAC;QAC7C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,MAAM;QACf,gBAAgB,EAAE;YAChB,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC;YACrC,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;SAC3C;QACD,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9D,KAAK,MAAM,OAAO,IAAI,6BAA6B,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,eAAe,GAAG,6BAA6B,CAAC;QACpD,OAAO,EAAE,MAAM;QACf,QAAQ;QACR,YAAY;QACZ,6EAA6E;QAC7E,iBAAiB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5E,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,eAAe;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,GAAG,CAAC,aAAa;QACzB,UAAU;QACV,YAAY,EAAE,UAAU;QACxB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE;QAC7E,WAAW;QACX,SAAS;QACT,YAAY,EAAE,KAAK,CAAC,QAAQ;QAC5B,OAAO,EAAE,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE;QAClC,eAAe;QACf,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC,CAAC;IAEH,sEAAsE;IACtE,2EAA2E;IAC3E,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IAE9F,uEAAuE;IACvE,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,eAAe,GAAG;QACtB,eAAe,CAAC,cAAc;QAC9B,cAAc,EAAE;QAChB,WAAW,CAAC,UAAU;QACtB,eAAe,CAAC,UAAU;QAC1B,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;KAC7B,CAAC;IAEF,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,eAAe,GAAqB,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC9C,IAAI,SAAgE,CAAC;QACrE,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;YACvE,MAAM,IAAI,iBAAiB,CACzB,KAAK,CAAC,QAAQ,EACd,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,YAAY,EAC1C,cAAc,gBAAgB,CAAC,IAAI,CAAC,UAAU,MAAM,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,4EAA4E;QAC5E,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC;QACxD,eAAe,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,2EAA2E;QAC3E,iEAAiE;QACjE,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,0EAA0E;QAC1E,8DAA8D;QAC9D,KAAK,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACpG,GAAG,YAAY,CAAC,GAAG,CAAC;QACpB,UAAU,EAAE,eAAe;QAC3B,iFAAiF;QACjF,wEAAwE;QACxE,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE;QACxD,WAAW,EAAE,mBAAmB;QAChC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,GAAG,oBAAoB,CAAC,MAAM,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEpD,4EAA4E;IAC5E,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5G,OAAO;QACL,KAAK;QACL,MAAM;QACN,2EAA2E;QAC3E,kEAAkE;QAClE,OAAO,EAAE,CAAC,SAAiB,EAAE,EAAE;YAC7B,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/B,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QACD,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC;QAC5E,6EAA6E;QAC7E,+CAA+C;QAC/C,SAAS,EAAE;YACT,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC7D,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,oBAAoB,EAAE,MAAe,CAAC,CAAC;SAClF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,OAAwB,EAAE,MAAc;IAC/D,OAAO;QACL,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACvF,GAAG,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,EAAE,MAAM,CAAC;QAC/E,GAAG,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,EAAE,MAAM,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,GAAoB,EAAE,IAAqB;IAC1E,OAAO,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;AACjD,CAAC"}

package/dist/assembly/delegation-registry.d.ts

@@ -0,0 +1,5 @@
+import { WorkflowMachine } from "../machine/machine.js";
+import { type SubWorkflowRegistry } from "../workflow/sub-workflow.js";
+import { type AssemblyContext } from "./compose.js";
+/** Build the registry the root composition and every child dispatch through. */
+export declare function createDelegationRegistry(ctx: AssemblyContext, root: WorkflowMachine): SubWorkflowRegistry;