@archmax-ai/harness 0.8.0 → 1.0.0

package/dist/core/platform-prompt.generated.js

@@ -1,4 +1,4 @@
 // Generated from platform-prompt.md by scripts/generate-platform-prompt.mjs. Do not edit.
 /** The bundled platform prompt: how to move through the graph and which tools are the runtime's. */
-export const PLATFORM_PROMPT = "# Graph state execution\n\nYou run inside a **declarative workflow graph**: you occupy one **state** at a\ntime, and its spec governs which tools you may call and which files you may read\nor write.\n\n## How you move\n\n<!-- top-level-only -->\n1. **Name the run first.** Before anything else in your first turn, call\n   **`archmax_set_variables({ \"variables\": { \"title\": \"<a few words>\" } })`** — see\n   \"Naming the run\" below.\n<!-- /top-level-only -->\n2. Do the current state's work. Write files where its instructions or listed\n   mounts say; `scratchpad/` is only the default.\n3. Call **`archmax_advance({ \"to\": \"<next>\", \"reason\": \"<one sentence>\" })`**,\n   choosing `to` from the transitions under \"Current state\" by their descriptions.\n   `to` takes the target's **slug** — the backticked token on the transition line.\n   A parenthesized note gives the edge's type (`approve`, `reject`, `refine`) and\n   marks a **human decision node** or a **terminal** target. A state with no\n   transitions says so: the run ends there, so finish its work and stop.\n4. The runtime validates the edge and runs this state's `after` hook and then the\n   target's `before` hook — either may send you back to correct or veto the move —\n   before the next state's tools unlock.\n\n**One transition per message.** A second `archmax_advance` in the same message is\nrefused; chain states over successive turns.\n\n**Text alone ends your turn.** A message with no tool call is the last thing you\ndo until someone writes again: the run stays where it is, and whatever you meant\nto do next never happens. So when the work is to tell the person something *and\nthen* advance, wait or raise, write that text and make the call in the **same\nmessage**.\n\n**A conversation keeps its position.** A new message finds you in the state your\nlast turn ended in. When that state can serve it, stay and answer there: a new\nmessage is not a reason to reset. If it cannot — no transition reaches what was\nasked, or an earlier turn took a wrong path — call\n**`archmax_reset({ \"reason\": \"<one sentence>\" })`** to return to the state the\nconversation began in. The conversation and every file written so far are kept.\nA reset only ever goes back there, so never call it while you are still in that\nstate — nothing has moved you out of it since the conversation began or since\nyour last reset.\n\n**A terminal state you moved into never serves a follow-up.** When a message lands\non a run that was *already sitting* in a terminal state it moved into, reset\n**before** answering, or you skip every state the answer depends on. Three cases\ntake no reset: a run you parked with `archmax_wait`, which resumes where it was on\npurpose; a terminal state you were routed into *this turn*, by your own advance or\na person's decision — do its work, then stop; and a terminal state the\nconversation began in, where a reset would leave you exactly where you are —\nanswer there. Never reset out of a state you just arrived in, and never\n`archmax_wait` for the runtime to move you.\n\n### Waiting and deciding\n\n- Something has to **arrive** from outside the run — an event, a callback, a reply\n  someone sends in their own time → call\n  **`archmax_wait({ \"reason\": \"<what you are waiting for>\" })`** and stop. You\n  resume in **this same state**, with what arrived in your transcript and any\n  values it carried in the variables. Waiting for a *time*? Add `\"until\": \"1d\"` (a\n  duration or an ISO-8601 instant); an earlier event still resumes you.\n- Someone has to **decide**, approve, review or choose → `archmax_advance` into the\n  **human decision node** the author declared for it. The runtime parks the run\n  there and presents the options itself: do the work its transitions require,\n  advance in, and stop. Never advance out of one yourself, and never `archmax_wait`\n  to ask for a decision.\n\n### When the work fails\n\nIf the task **cannot be completed** — a system it depends on keeps failing, what it\nneeds does not exist, the request is one this workflow cannot serve — try to\nrecover once or twice (a retry, another tool, another approach). If that fails\ntoo, call **`archmax_raise({ \"code\": \"<short-token>\", \"reason\": \"<what failed>\" })`**:\nit ends the session as a failure from any state, and whoever started the run\nreads your `code` (e.g. `orders-unavailable`) and `reason`. **When you are about to\ntell the person the task cannot be done, make that call in the same message**: the\nmessage's text is what they read, and no other tool call goes with it. A reply\nthat only explains the failure ends the run as a success. Never raise to finish\nwork that worked, or in place of `archmax_wait`, `archmax_reset` or a human node.\n\n### The state you are in\n\nThe active state's **`instructions`** arrive under a \"Current state\" heading:\nfollow them. You are shown the edges out of this state and nothing else of the\ngraph — there is no map of the workflow to consult. Do not guess at slugs, and do\nnot treat a state named anywhere else (a message, a file, your own earlier turns)\nas somewhere you can move to. Skills the state may use are listed under \"Skills\navailable in this state\", each naming the `SKILL.md` to read first.\n\n**`before`/`after` hooks** run on their own and may approve, ask for a\ncorrection, or block the run: fix the work rather than arguing with it.\n\n## Tools\n\nTool access is **closed by default**: you see only the active state's tools, and\na state may narrow a tool's arguments (e.g. `write_file` to one path). Tools named\n`archmax_*` are the runtime's controls. A blocked call names the tool, the state\nand the policy: fix the call, or advance if you are done.\n\n**Write code instead of many calls.** **`archmax_eval({ \"code\": \"…\" })`**, when\nyour tools include it, runs JavaScript in a sandbox where `tools.*` calls your tools,\ngoverned exactly as your own calls are. Reach for it by default for loops,\nfilters, arithmetic, or more than about two calls whose results feed each other:\n**only your last expression and whatever you `console.log` come back to you**, so\nthe rest of what those tools returned never enters the conversation. The REPL\nkeeps its state between calls. Your code cannot read the run's variables:\ninterpolate a scalar one into it with `${{name}}` (below), or use\n**`archmax_run({ \"file_path\": \"…\" })`**, the same sandbox subject to the state's\npath constraints, whose script receives whole structured values as\n`args.variables`.\n\n<!-- top-level-only -->\n**Naming the run.** `title` is a reserved run variable: a one-line label of a few\nwords (`Refund for order A-1042`) that tells this run apart in a list of runs.\nThis is step 1 above, and it is not optional. Write it from what the request\nalready says, **before** the state's own work and before any other tool call — it\nis a label, not a plan, so never read anything to produce one — and it still goes\nfirst when the state's instructions tell you to do something else first. After\nthat, leave it alone unless the conversation **as a whole** has moved to a\nsubject the old title no longer describes. Judge that against the whole\nconversation, not its latest message: a follow-up, a detail, a correction or a\nside question on the same subject keeps the title. When you do rename, name what\nthe whole conversation is about. Never pass `lock` with it: that call is refused.\n\n<!-- /top-level-only -->\n**Reference a run variable instead of retyping it.** In any text argument,\n`${{name}}` (or `${{name.path.to.value}}`) is replaced with that variable's value\nbefore the call runs, also **inside** a longer string and as often as you like:\n\n```\n\"Thanks — your refund is on its way.\n\n--- Original message ---\n\n${{inbound.text}}\"\n```\n\nPrefer the reference to writing the value out: the value is what you spend tokens\non, and a reference cannot paraphrase, truncate or mistype it.\n`archmax_get_variables` shows what is set; a reference that does not resolve\nrefuses the call and says why. To write `${{…}}` literally, double the dollar:\n`$${{name}}`.\n";
+export const PLATFORM_PROMPT = "# Graph state execution\n\nYou run inside a **declarative workflow graph**: you occupy one **state** at a\ntime, and its spec governs which tools you may call and which files you may read\nor write.\n\n## How you move\n\n<!-- top-level-only -->\n1. **Name the run first.** Before anything else in your first turn, call\n   **`archmax_set_variables({ \"variables\": { \"title\": \"<a few words>\" } })`** — see\n   \"Naming the run\" below.\n<!-- /top-level-only -->\n2. Do the current state's work. Write files where its instructions or listed\n   mounts say; `scratchpad/` is only the default.\n3. Call **`archmax_advance({ \"to\": \"<next>\", \"reason\": \"<one sentence>\" })`**,\n   choosing `to` from the transitions under \"Current state\" by their descriptions.\n   `to` takes the target's **slug** — the backticked token on the transition line.\n   A parenthesized note gives the edge's type (`approve`, `reject`, `refine`) and\n   marks a **human decision node**, a **grader**, a **code** state or a\n   **terminal** target. A state with no transitions says so: the run ends there,\n   so finish its work and stop.\n4. The runtime validates the edge, and the state's required variables, before the\n   next state's tools unlock.\n\n**One transition per message.** A second `archmax_advance` in the same message is\nrefused; chain states over successive turns.\n\n**Text alone ends your turn.** A message with no tool call is the last thing you\ndo until someone writes again: the run stays where it is, and whatever you meant\nto do next never happens. So when the work is to tell the person something *and\nthen* advance, wait or raise, write that text and make the call in the **same\nmessage**.\n\n**A conversation keeps its position.** A new message finds you in the state your\nlast turn ended in. When that state can serve it, stay and answer there: a new\nmessage is not a reason to reset. If it cannot — no transition reaches what was\nasked, or an earlier turn took a wrong path — call\n**`archmax_reset({ \"reason\": \"<one sentence>\" })`** to return to the state the\nconversation began in. The conversation and every file written so far are kept.\nA reset only ever goes back there, so never call it while you are still in that\nstate — nothing has moved you out of it since the conversation began or since\nyour last reset.\n\n**A terminal state you moved into never serves a follow-up.** When a message lands\non a run that was *already sitting* in a terminal state it moved into, reset\n**before** answering, or you skip every state the answer depends on. Three cases\ntake no reset: a run you parked with `archmax_wait`, which resumes where it was on\npurpose; a terminal state you were routed into *this turn*, by your own advance or\na person's decision — do its work, then stop; and a terminal state the\nconversation began in, where a reset would leave you exactly where you are —\nanswer there. Never reset out of a state you just arrived in, and never\n`archmax_wait` for the runtime to move you.\n\n### Waiting and deciding\n\n- Something has to **arrive** from outside the run — an event, a callback, a reply\n  someone sends in their own time → call\n  **`archmax_wait({ \"reason\": \"<what you are waiting for>\" })`** and stop. You\n  resume in **this same state**, with what arrived in your transcript and any\n  values it carried in the variables. Waiting for a *time*? Add `\"until\": \"1d\"` (a\n  duration or an ISO-8601 instant); an earlier event still resumes you.\n- Someone has to **decide**, approve, review or choose → `archmax_advance` into the\n  **human decision node** the author declared for it. The runtime parks the run\n  there and presents the options itself: do the work its transitions require,\n  advance in, and stop. Never advance out of one yourself, and never `archmax_wait`\n  to ask for a decision.\n\n### When the work fails\n\nIf the task **cannot be completed** — a system it depends on keeps failing, what it\nneeds does not exist, the request is one this workflow cannot serve — try to\nrecover once or twice (a retry, another tool, another approach). If that fails\ntoo, call **`archmax_raise({ \"code\": \"<short-token>\", \"reason\": \"<what failed>\" })`**:\nit ends the session as a failure from any state, and whoever started the run\nreads your `code` (e.g. `orders-unavailable`) and `reason`. **When you are about to\ntell the person the task cannot be done, make that call in the same message**: the\nmessage's text is what they read, and no other tool call goes with it. A reply\nthat only explains the failure ends the run as a success. Never raise to finish\nwork that worked, or in place of `archmax_wait`, `archmax_reset` or a human node.\n\n### The state you are in\n\nThe active state's **`instructions`** arrive under a \"Current state\" heading:\nfollow them. You are shown the edges out of this state and nothing else of the\ngraph — there is no map of the workflow to consult. Do not guess at slugs, and do\nnot treat a state named anywhere else (a message, a file, your own earlier turns)\nas somewhere you can move to. Skills the state may use are listed under \"Skills\navailable in this state\", each naming the `SKILL.md` to read first.\n\n**Grader and code states** run on their own, without you: a grader judges the\nwork so far, a code state runs the workflow's own checks. Either may move the run\non, end it, or send it back to you with a note saying what has to change — then\nfix the work rather than arguing with it, and advance again.\n\n## Tools\n\nTool access is **closed by default**: you see only the active state's tools, and\na state may narrow a tool's arguments (e.g. `write_file` to one path). Tools named\n`archmax_*` are the runtime's controls. A blocked call names the tool, the state\nand the policy: fix the call, or advance if you are done.\n\n**Write code instead of many calls.** **`archmax_eval({ \"code\": \"…\" })`**, when\nyour tools include it, runs JavaScript in a sandbox where `tools.*` calls your tools,\ngoverned exactly as your own calls are. Reach for it by default for loops,\nfilters, arithmetic, or more than about two calls whose results feed each other:\n**only your last expression and whatever you `console.log` come back to you**, so\nthe rest of what those tools returned never enters the conversation. The REPL\nkeeps its state between calls. Your code cannot read the run's variables:\ninterpolate a scalar one into it with `${{name}}` (below), or use\n**`archmax_run({ \"file_path\": \"…\" })`**, the same sandbox subject to the state's\npath constraints, whose script receives whole structured values as\n`args.variables`.\n\n<!-- top-level-only -->\n**Naming the run.** `title` is a reserved run variable: a one-line label of a few\nwords (`Refund for order A-1042`) that tells this run apart in a list of runs.\nThis is step 1 above, and it is not optional. Write it from what the request\nalready says, **before** the state's own work and before any other tool call — it\nis a label, not a plan, so never read anything to produce one — and it still goes\nfirst when the state's instructions tell you to do something else first. After\nthat, leave it alone unless the conversation **as a whole** has moved to a\nsubject the old title no longer describes. Judge that against the whole\nconversation, not its latest message: a follow-up, a detail, a correction or a\nside question on the same subject keeps the title. When you do rename, name what\nthe whole conversation is about. Never pass `lock` with it: that call is refused.\n\n<!-- /top-level-only -->\n**Reference a run variable instead of retyping it.** In any text argument,\n`${{name}}` (or `${{name.path.to.value}}`) is replaced with that variable's value\nbefore the call runs, also **inside** a longer string and as often as you like:\n\n```\n\"Thanks — your refund is on its way.\n\n--- Original message ---\n\n${{inbound.text}}\"\n```\n\nPrefer the reference to writing the value out: the value is what you spend tokens\non, and a reference cannot paraphrase, truncate or mistype it.\n`archmax_get_variables` shows what is set; a reference that does not resolve\nrefuses the call and says why. To write `${{…}}` literally, double the dollar:\n`$${{name}}`.\n";
 //# sourceMappingURL=platform-prompt.generated.js.map

package/dist/core/platform-prompt.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-prompt.generated.js","sourceRoot":"","sources":["../../src/core/platform-prompt.generated.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F,oGAAoG;AACpG,MAAM,CAAC,MAAM,eAAe,GAAW,4+PAA4+P,CAAC"}
+{"version":3,"file":"platform-prompt.generated.js","sourceRoot":"","sources":["../../src/core/platform-prompt.generated.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F,oGAAoG;AACpG,MAAM,CAAC,MAAM,eAAe,GAAW,ilQAAilQ,CAAC"}

package/dist/core/session-zone.d.ts

@@ -43,7 +43,7 @@ export declare class SessionZoneRouter implements BackendProtocolV2 {
     /**
      * Bind id-free run-root addressing to `sessionId` for everything `fn` does
      * (the binding propagates through async continuations, so a whole agent
-     * turn — including lifecycle hooks, sandboxed scripts, and the inner
+     * turn — including automated states, sandboxed scripts, and the inner
      * agent's own checkpoint writes — is covered by wrapping its `invoke`).
      * Concurrent sessions each carry their own binding.
      */

package/dist/core/session-zone.js

@@ -55,7 +55,7 @@ export class SessionZoneRouter {
     /**
      * Bind id-free run-root addressing to `sessionId` for everything `fn` does
      * (the binding propagates through async continuations, so a whole agent
-     * turn — including lifecycle hooks, sandboxed scripts, and the inner
+     * turn — including automated states, sandboxed scripts, and the inner
      * agent's own checkpoint writes — is covered by wrapping its `invoke`).
      * Concurrent sessions each carry their own binding.
      */

package/dist/core/workspace-context.d.ts

@@ -50,7 +50,7 @@ export interface WorkspaceContextOptions {
     mounts?: Record<string, MountSpec>;
     /**
      * Backend serving the **authored governance plane** — `workflows/<slug>/`:
-     * machine specs, prose addenda, lifecycle hook scripts, and offline test
+     * machine specs, prose addenda, code-state scripts, and offline test
      * cases. Read by the runtime, never routed into the agent's workspace
      * composite, so no agent tool and no PTC call can address it.
      *

package/dist/core/workspace.d.ts

@@ -3,7 +3,7 @@ import type { BackendProtocolV2, FileData, FileInfo } from "deepagents";
  * Single file-access layer for the runtime.
  *
  * Every read of a file in the agent workspace — machine config, system prompt,
- * hook scripts, `archmax_run` sources, lifecycle artifacts — flows
+ * code-state scripts, `archmax_run` sources, session artifacts — flows
  * through here so it is served by the configured LangChain Deep Agents
  * {@link BackendProtocolV2}. Swap the backend (filesystem, store, sandbox,
  * remote) and the whole runtime follows, with no direct `fs` coupling.

package/dist/core/workspace.js

@@ -2,7 +2,7 @@
  * Single file-access layer for the runtime.
  *
  * Every read of a file in the agent workspace — machine config, system prompt,
- * hook scripts, `archmax_run` sources, lifecycle artifacts — flows
+ * code-state scripts, `archmax_run` sources, session artifacts — flows
  * through here so it is served by the configured LangChain Deep Agents
  * {@link BackendProtocolV2}. Swap the backend (filesystem, store, sandbox,
  * remote) and the whole runtime follows, with no direct `fs` coupling.

package/dist/core/zones.d.ts

@@ -104,14 +104,14 @@ export type WorkspaceZone = "authored" | "run-internal" | "run-offload" | "run-o
 export declare function sessionAreaNames(): string[];
 /**
  * The authoring prefixes: the workspace-root names holding what the **runtime**
- * reads. `workflows/` carries the machine specs — grading rubrics included — the
- * prose addenda, the lifecycle hook scripts, and the offline test cases a session
- * is enforced with. It is served by the *authoring* backend and is not routed into
+ * reads. `workflows/` carries the machine specs — grader states' criteria
+ * included — the prose addenda, the code-state scripts, and the offline test
+ * cases a session is enforced with. It is served by the *authoring* backend and is not routed into
  * the agent's workspace composite.
  *
  * It is reserved rather than merely omitted: a workspace that mounted it would hand
  * a session its own spec, its sibling workflows' specs, the tests grading it, and
- * the criteria (with the iteration budget) of the rubric that vetoes it. Refusing
+ * the criteria a grader state judges it by, and the code its code states run. Refusing
  * the key makes the isolation a property of composition instead of a rule
  * something downstream could relax.
  *

package/dist/core/zones.js

@@ -64,14 +64,14 @@ const SESSION_AREA_SET = new Set(sessionAreaNames());
 // --- The authoring prefixes ------------------------------------------------------
 /**
  * The authoring prefixes: the workspace-root names holding what the **runtime**
- * reads. `workflows/` carries the machine specs — grading rubrics included — the
- * prose addenda, the lifecycle hook scripts, and the offline test cases a session
- * is enforced with. It is served by the *authoring* backend and is not routed into
+ * reads. `workflows/` carries the machine specs — grader states' criteria
+ * included — the prose addenda, the code-state scripts, and the offline test
+ * cases a session is enforced with. It is served by the *authoring* backend and is not routed into
  * the agent's workspace composite.
  *
  * It is reserved rather than merely omitted: a workspace that mounted it would hand
  * a session its own spec, its sibling workflows' specs, the tests grading it, and
- * the criteria (with the iteration budget) of the rubric that vetoes it. Refusing
+ * the criteria a grader state judges it by, and the code its code states run. Refusing
  * the key makes the isolation a property of composition instead of a rule
  * something downstream could relax.
  *
@@ -89,7 +89,7 @@ export const AUTHORING_PREFIXES = ["workflows"];
  * diagnostic describes the prefix the consumer actually named.
  */
 const AUTHORING_CONTENT = {
-    workflows: "machine specs, grading rubrics, hook scripts, and test cases",
+    workflows: "machine specs, code-state scripts, and test cases",
 };
 /** Whether a bare root name is an authoring prefix. */
 export function isAuthoringPrefix(name) {

package/dist/core/zones.js.map

@@ -1 +1 @@
-{"version":3,"file":"zones.js","sourceRoot":"","sources":["../../src/core/zones.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAkDrD,sDAAsD;AACtD,MAAM,CAAC,MAAM,SAAS,GAAkB;IACtC,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,oBAAoB,EAAE,sBAAsB,CAAU,CAAC;AAE5F;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsB,CAAC,uBAAuB,CAAC,CAAC;AAEtF,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,yBAAyB,CAAC,IAAI,CACnC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAC3D,CAAC;AACJ,CAAC;AAuBD,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAC7E,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAE3E;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,GAAG,qBAAqB;QACxB,GAAG,oBAAoB;QACvB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAE1E,oFAAoF;AAEpF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAW,CAAU,CAAC;AAKzD;;;;GAIG;AACH,MAAM,iBAAiB,GAAoC;IACzD,SAAS,EAAE,8DAA8D;CAC1E,CAAC;AAEF,uDAAuD;AACvD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACxC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,SAAwB,SAAS;IACxE,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,kEAAkE;QAClE,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,SAAwB,SAAS;IAEjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,WAAW,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,SAAwB,SAAS;IAEjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,2EAA2E;IAC3E,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACzE,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC;IACrD,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACnD,IAAI,GAAG,KAAK,gBAAgB;QAAE,OAAO,UAAU,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,SAAwB,SAAS;IAEjC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,aAAa,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"zones.js","sourceRoot":"","sources":["../../src/core/zones.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAkDrD,sDAAsD;AACtD,MAAM,CAAC,MAAM,SAAS,GAAkB;IACtC,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,oBAAoB,EAAE,sBAAsB,CAAU,CAAC;AAE5F;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsB,CAAC,uBAAuB,CAAC,CAAC;AAEtF,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,yBAAyB,CAAC,IAAI,CACnC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAC3D,CAAC;AACJ,CAAC;AAuBD,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAC7E,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAE3E;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,GAAG,qBAAqB;QACxB,GAAG,oBAAoB;QACvB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAE1E,oFAAoF;AAEpF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAW,CAAU,CAAC;AAKzD;;;;GAIG;AACH,MAAM,iBAAiB,GAAoC;IACzD,SAAS,EAAE,mDAAmD;CAC/D,CAAC;AAEF,uDAAuD;AACvD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACxC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,SAAwB,SAAS;IACxE,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,kEAAkE;QAClE,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,SAAwB,SAAS;IAEjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,WAAW,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,SAAwB,SAAS;IAEjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,2EAA2E;IAC3E,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACzE,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC;IACrD,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACnD,IAAI,GAAG,KAAK,gBAAgB;QAAE,OAAO,UAAU,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,SAAwB,SAAS;IAEjC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,aAAa,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/dist/env.d.ts

@@ -66,11 +66,11 @@ export declare function loadPromptCacheEnv(): {
  */
 export declare function loadPricingEnv(): PricingTable | undefined;
 /**
- * The role a model plays in the runtime: the workflow `agent` (turns), a `judge`
- * (the offline case grader), or a `rubric` (a grading rubric dispatched by a
- * lifecycle hook). A {@link ModelFactory} may return a different model per role.
+ * The role a model plays in the runtime: the workflow `agent` (the session's
+ * turns), a `judge` (the offline case grader), or a `grader` (a grader state's
+ * subagent). A {@link ModelFactory} may return a different model per role.
  */
-export type ModelRole = "agent" | "judge" | "rubric";
+export type ModelRole = "agent" | "judge" | "grader";
 /**
  * Supplies the chat model for a given role, so library users can run the runtime
  * against any LangChain `BaseChatModel` (e.g. Amazon Bedrock via
@@ -86,11 +86,11 @@ export type ModelRole = "agent" | "judge" | "rubric";
  */
 export type ModelFactory = (role: ModelRole, env: () => AgentEnv, 
 /**
- * The model id the caller asked for — today, the `model` a grading rubric
- * declares. Additive: a factory that ignores it behaves exactly as one written
- * before rubrics could name a model, and no error is raised for an unhonoured
- * request. The default factory applies it over `ARCHMAX_MODEL`, keeping the
- * configured endpoint and credentials.
+ * The model id the caller asked for — the `model` a state declares (or its
+ * workflow's `settings.model`), for the `agent` and `grader` roles. Additive: a
+ * factory that ignores it returns its own model, and no error is raised for an
+ * unhonoured request. The default factory applies it over `ARCHMAX_MODEL`,
+ * keeping the configured endpoint and credentials.
  */
 requested?: string) => BaseChatModel;
 /** The default, role-independent model factory: the env-configured `ChatOpenAI`. */

package/dist/index.d.ts

@@ -13,7 +13,7 @@
  * is here because a real consumer needs it, not because a module happened to
  * expose it. Adjacent surfaces live on their own subpaths — `@archmax-ai/harness/testing`
  * (the case engine), `@archmax-ai/harness/cli` (the state-flow renderer), and
- * `@archmax-ai/harness/sandbox` (hook and script authoring) — so a production import never
+ * `@archmax-ai/harness/sandbox` (code-state script authoring) — so a production import never
  * pulls in test machinery.
  *
  * Two **light** subpaths mirror part of this surface without the runtime behind
@@ -200,7 +200,7 @@ export { isAiMessage } from "./core/messages.js";
 export { lastAgentText } from "./core/messages.js";
 /**
  * Whether the runtime wrote a transcript message rather than a person — a
- * decision, an arrival, an error route, a completion check, a child's result.
+ * decision, an arrival, an error route, an automated state's move, a child's result.
  * A host slicing a turn out of a session's messages, or rendering a transcript,
  * asks this instead of inferring authorship from role.
  */
@@ -208,16 +208,12 @@ export { isRuntimeNote } from "./core/messages.js";
 /** Which kind of runtime note a message is, or `null` if a person wrote it. */
 export { runtimeNoteKind } from "./core/messages.js";
 export type { RuntimeNoteKind } from "./core/messages.js";
-/** One grading rubric, as declared inline on the hook that applies it. */
-export type { RubricDeclaration } from "./machine/types.js";
-/** Host data the runtime never reads, at the spec root, on a state, or on a rubric. */
+/** Host data the runtime never reads, at the spec root or on a state. */
 export type { SpecMetadata } from "./machine/types.js";
 /** Parse a sandbox script's leading description block. */
 export { parseCodeDescription } from "./core/code-description.js";
 /** Load and shape-check a `workflow.yaml` without assembling an agent. */
 export { loadMachineSpec } from "./machine/load-spec.js";
-/** A `before:`/`after:` declaration as a flat list of hooks. */
-export { normalizeHooks } from "./lifecycle/hook-shape.js";
 export type { MachineSpec, MachineState } from "./machine/types.js";
 /** The compiled machine, as `agent.workflow.machine` exposes it. */
 export { WorkflowMachine } from "./machine/machine.js";

package/dist/index.js

@@ -13,7 +13,7 @@
  * is here because a real consumer needs it, not because a module happened to
  * expose it. Adjacent surfaces live on their own subpaths — `@archmax-ai/harness/testing`
  * (the case engine), `@archmax-ai/harness/cli` (the state-flow renderer), and
- * `@archmax-ai/harness/sandbox` (hook and script authoring) — so a production import never
+ * `@archmax-ai/harness/sandbox` (code-state script authoring) — so a production import never
  * pulls in test machinery.
  *
  * Two **light** subpaths mirror part of this surface without the runtime behind
@@ -134,7 +134,7 @@ export { isAiMessage } from "./core/messages.js";
 export { lastAgentText } from "./core/messages.js";
 /**
  * Whether the runtime wrote a transcript message rather than a person — a
- * decision, an arrival, an error route, a completion check, a child's result.
+ * decision, an arrival, an error route, an automated state's move, a child's result.
  * A host slicing a turn out of a session's messages, or rendering a transcript,
  * asks this instead of inferring authorship from role.
  */
@@ -146,8 +146,6 @@ export { parseCodeDescription } from "./core/code-description.js";
 // --- The machine --------------------------------------------------------------
 /** Load and shape-check a `workflow.yaml` without assembling an agent. */
 export { loadMachineSpec } from "./machine/load-spec.js";
-/** A `before:`/`after:` declaration as a flat list of hooks. */
-export { normalizeHooks } from "./lifecycle/hook-shape.js";
 /** The compiled machine, as `agent.workflow.machine` exposes it. */
 export { WorkflowMachine } from "./machine/machine.js";
 /** Statically validate a workflow scaffold — no model calls. */

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,iFAAiF;AAEjF;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,qDAAqD;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA+C1C;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO;AACL,0FAA0F;AAC1F,aAAa;AACb,iEAAiE;AACjE,aAAa,GACd,MAAM,qBAAqB,CAAC;AAqB7B,iFAAiF;AACjF,EAAE;AACF,gFAAgF;AAChF,yDAAyD;AAEzD,OAAO;AACL,6EAA6E;AAC7E,iBAAiB;AACjB,iFAAiF;AACjF,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,iDAAiD;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,0FAA0F;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,8FAA8F;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,6DAA6D;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,0CAA0C;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO;AACL,gEAAgE;AAChE,yBAAyB;AACzB,yEAAyE;AACzE,mBAAmB;AACnB,8EAA8E;AAC9E,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO;AACL,iEAAiE;AACjE,4BAA4B;AAC5B,0FAA0F;AAC1F,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AACrC,8EAA8E;AAC9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO;AACL,qEAAqE;AACrE,qBAAqB;AACrB,oEAAoE;AACpE,0BAA0B;AAC1B,sCAAsC;AACtC,iBAAiB;AACjB,mEAAmE;AACnE,oBAAoB;AACpB,8DAA8D;AAC9D,4BAA4B;AAC5B,uCAAuC;AACvC,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,8DAA8D;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,iFAAiF;AAEjF,+DAA+D;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,yDAAyD;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAItD,OAAO;AACL,0DAA0D;AAC1D,4BAA4B;AAC5B,4DAA4D;AAC5D,yBAAyB;AACzB,gEAAgE;AAChE,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAIjC,oFAAoF;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,4GAA4G;AAC5G,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,oFAAoF;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,iHAAiH;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAKxD;;;GAGG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,sGAAsG;AACtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,gFAAgF;AAChF,EAAE;AACF,iFAAiF;AACjF,2DAA2D;AAE3D,mFAAmF;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,sEAAsE;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AASzD,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,iDAAiD;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,+FAA+F;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAMrD,0DAA0D;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,iFAAiF;AAEjF,0EAA0E;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,gEAAgE;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,gEAAgE;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAM1D;;;;GAIG;AACH,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AAEjC,gFAAgF;AAEhF,OAAO;AACL,uCAAuC;AACvC,cAAc;AACd,kFAAkF;AAClF,kBAAkB;AAClB,gHAAgH;AAChH,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,mFAAmF;AACnF,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AAExE,OAAO;AACL,+CAA+C;AAC/C,eAAe;AACf,8EAA8E;AAC9E,kBAAkB;AAClB,0DAA0D;AAC1D,mBAAmB;AACnB,iDAAiD;AACjD,mBAAmB;AACnB,4EAA4E;AAC5E,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAOhC,gDAAgD;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO;AACL,4CAA4C;AAC5C,oBAAoB;AACpB,oDAAoD;AACpD,gBAAgB;AAChB,0DAA0D;AAC1D,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAWjC,iFAAiF;AAEjF,kEAAkE;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,yDAAyD;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,iFAAiF;AACjF,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+CAA+C;AAE/C,8DAA8D;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO;AACL;;;GAGG;AACH,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AAClB,8DAA8D;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,iFAAiF;AAEjF;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,qDAAqD;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA+C1C;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO;AACL,0FAA0F;AAC1F,aAAa;AACb,iEAAiE;AACjE,aAAa,GACd,MAAM,qBAAqB,CAAC;AAqB7B,iFAAiF;AACjF,EAAE;AACF,gFAAgF;AAChF,yDAAyD;AAEzD,OAAO;AACL,6EAA6E;AAC7E,iBAAiB;AACjB,iFAAiF;AACjF,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,iDAAiD;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,0FAA0F;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,8FAA8F;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,6DAA6D;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,0CAA0C;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO;AACL,gEAAgE;AAChE,yBAAyB;AACzB,yEAAyE;AACzE,mBAAmB;AACnB,8EAA8E;AAC9E,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO;AACL,iEAAiE;AACjE,4BAA4B;AAC5B,0FAA0F;AAC1F,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AACrC,8EAA8E;AAC9E,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO;AACL,qEAAqE;AACrE,qBAAqB;AACrB,oEAAoE;AACpE,0BAA0B;AAC1B,sCAAsC;AACtC,iBAAiB;AACjB,mEAAmE;AACnE,oBAAoB;AACpB,8DAA8D;AAC9D,4BAA4B;AAC5B,uCAAuC;AACvC,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,8DAA8D;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,iFAAiF;AAEjF,+DAA+D;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,yDAAyD;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAItD,OAAO;AACL,0DAA0D;AAC1D,4BAA4B;AAC5B,4DAA4D;AAC5D,yBAAyB;AACzB,gEAAgE;AAChE,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAIjC,oFAAoF;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,4GAA4G;AAC5G,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,oFAAoF;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,iHAAiH;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAKxD;;;GAGG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,sGAAsG;AACtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,gFAAgF;AAChF,EAAE;AACF,iFAAiF;AACjF,2DAA2D;AAE3D,mFAAmF;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,sEAAsE;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AASzD,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,iDAAiD;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,+FAA+F;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAIrD,0DAA0D;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,iFAAiF;AAEjF,0EAA0E;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,gEAAgE;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAM1D;;;;GAIG;AACH,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AAEjC,gFAAgF;AAEhF,OAAO;AACL,uCAAuC;AACvC,cAAc;AACd,kFAAkF;AAClF,kBAAkB;AAClB,gHAAgH;AAChH,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,mFAAmF;AACnF,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AAExE,OAAO;AACL,+CAA+C;AAC/C,eAAe;AACf,8EAA8E;AAC9E,kBAAkB;AAClB,0DAA0D;AAC1D,mBAAmB;AACnB,iDAAiD;AACjD,mBAAmB;AACnB,4EAA4E;AAC5E,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAOhC,gDAAgD;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO;AACL,4CAA4C;AAC5C,oBAAoB;AACpB,oDAAoD;AACpD,gBAAgB;AAChB,0DAA0D;AAC1D,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAWjC,iFAAiF;AAEjF,kEAAkE;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,yDAAyD;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,iFAAiF;AACjF,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+CAA+C;AAE/C,8DAA8D;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO;AACL;;;GAGG;AACH,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AAClB,8DAA8D;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC"}

package/dist/kernel/kernel.d.ts

@@ -3,14 +3,13 @@ import type { ForbidEntry } from "../machine/types.js";
 import type { VariableStore } from "../machine/variables.js";
 import { type MountPrefixes } from "../core/mounts.js";
 import { type SkillPrefixes } from "../core/skills.js";
-import type { LifecycleDecision } from "../lifecycle/runner.js";
 /**
  * The decision kernel: a single pure, synchronous function that produces every
  * governance verdict from the machine spec, a snapshot of checkpointed workflow
- * state, and a proposed action. Effectful work (running hooks/judges) happens in
- * `LifecycleRunner`; its outputs are reduced here as {@link HookFact}s so the
- * kernel stays pure and both runtime enforcement and static validation share one
- * code path.
+ * state, and a proposed action — a tool call or a transition. Effectful work
+ * (running a code state's script, a grader) happens elsewhere and asks the
+ * kernel about each call and move it makes, so runtime enforcement and static
+ * validation share one code path.
  */
 export type VerdictDecision = "allow" | "block";
 export interface Verdict {
@@ -28,38 +27,22 @@ export interface Verdict {
     reason?: string;
     /** Tool-call blocks: whether the block should surface as a warn-level event. */
     warn?: boolean;
-    /** Transition reductions: whether the deciding hook consumed one of its iterations. */
-    correctionConsumed?: boolean;
-    /**
-     * Transition reductions: whether the block is a `correct` refused because the
-     * hook's `max_iterations` are already spent. Retrying in place cannot clear
-     * it, so the runner reports it as a terminal rejection.
-     */
-    budgetExhausted?: boolean;
-}
-/**
- * A reduced lifecycle-hook outcome. `LifecycleRunner` executes a hook, parses
- * its return value into a {@link LifecycleDecision}, and hands it here (with an
- * optional `error` when the hook could not execute) for reduction.
- */
-export interface HookFact extends LifecycleDecision {
-    /** Present when the hook could not execute; reduces to a fail-closed veto. */
-    error?: string;
-    /** Bounded grade-and-retry budget for an `after` hook of any kind (0 = none). */
-    maxIterations?: number;
-    /** Iterations already consumed for this state. */
-    iterationsUsed?: number;
 }
 /**
- * Who initiated a tool call. `agent` (the default) is a call the model made
- * directly; `script` is a programmatic call from a sandbox script, governed
- * identically to an agent call in the same state; `lifecycle` is a programmatic
- * call from a lifecycle hook (and the runtime's own `file` value check), which
- * runs on runtime authority: outside the active state's surface — its allow and
- * forbid lists, its skill and mount grants — but held to its workflow's mount
- * grants, its workflow-wide denials and every safety rule.
+ * Who initiated a tool call, which decides the authority it runs on:
+ *
+ *  - `agent` (the default): a model's call — the session's agent in an agent
+ *    state, the grader in a grader state;
+ *  - `script`: a programmatic call from a sandbox script — the agent's
+ *    `archmax_eval`/`archmax_run`, or a code state's script — governed exactly as
+ *    a model's call in the same state;
+ *  - `runtime`: the runtime's own read of a `file` value, on runtime authority:
+ *    outside the active state's surface — its allow and forbid lists, its skill
+ *    and mount grants — but held to its workflow's mount grants, its
+ *    workflow-wide denials and every safety rule. No script or model ever runs
+ *    on it.
  */
-export type ToolCallOrigin = "agent" | "script" | "lifecycle";
+export type ToolCallOrigin = "agent" | "script" | "runtime";
 export type ProposedAction = {
     kind: "tool-call";
     state: string;
@@ -78,12 +61,9 @@ export type ProposedAction = {
     from: string;
     to: string;
     reason?: string;
-    hookFacts: HookFact[];
-} | {
-    kind: "enter-state";
-    state: string;
-    hookFacts: HookFact[];
 };
+/** The variables a state still owes before it may be left — its `requires` minus what is set. */
+export declare function unmetRequirements(required: string[], store: VariableStore): string[];
 /** Read-only context a governance rule may consult. */
 export interface RuleApi {
     machine: WorkflowMachine;
@@ -113,10 +93,13 @@ export interface RuleApi {
  */
 export type GovernanceRule = (action: ProposedAction, api: RuleApi) => Verdict | null;
 /**
- * Agent tools that scripts may never invoke through programmatic tool calling
- * (PTC): every harness control tool (including both sandbox entry points, so
- * sandboxed code cannot re-enter the sandbox) plus a bare `eval`. Owned by
- * governance so the interpreter and the lifecycle runner cannot drift.
+ * Tools an **agent state's** scripts (`archmax_eval`, `archmax_run`) may never
+ * invoke through programmatic tool calling (PTC): every harness control tool
+ * (including both sandbox entry points, so sandboxed code cannot re-enter the
+ * sandbox) plus a bare `eval`. Moving the machine and writing its variables is
+ * the model's own governed decision there; the script reads the variables via
+ * `args.variables`. A code state is the exception by construction: its script
+ * *is* the state, so it is handed its state's controls as its own tools.
  */
 export declare const PTC_EXCLUDED_TOOLS: ReadonlySet<string>;
 /**
@@ -125,19 +108,6 @@ export declare const PTC_EXCLUDED_TOOLS: ReadonlySet<string>;
  * `core/zones.ts` so runtime, mount routing, and validation agree.
  */
 export declare function isReadOnlyZonePath(path: string, mounts?: MountPrefixes): boolean;
-/**
- * Reduce a single lifecycle-hook fact to a verdict. Fail-closed: an execution
- * error is a veto. `before` hooks gate entry with `ok`/`veto` only — a `correct`
- * at entry has nothing to retry, so it reduces to a veto and never consumes the
- * correction budget. Within an `after` veto window any hook's `correct` (script
- * or subagent judge alike) enters the same bounded correction flow, budgeted by
- * the hook's `max_corrections`.
- */
-export declare function reduceHookFact(fact: HookFact, opts: {
-    phase: "before" | "after" | "tool";
-    veto: boolean;
-    to?: string;
-}): Verdict;
 /**
  * An **ancestor's** `mounts.forbid_always`, as rules the descendant inherits.
  * The mount twin of {@link compileForbiddenSkillRules}: a child machine resolves
@@ -145,8 +115,8 @@ export declare function reduceHookFact(fact: HookFact, opts: {
  * a rule — any path under one of those mounts is refused, whatever the child
  * granted itself, and the refusal names the workflow that denied it.
  *
- * A workflow-wide denial binds a hook and a rubric grader too, so this rule
- * binds the `lifecycle` origin as well.
+ * A workflow-wide denial binds the runtime's own reads too, so this rule binds
+ * the `runtime` origin as well.
  */
 export declare function compileForbiddenMountRules(names: readonly string[], source: string): GovernanceRule[];
 /**
@@ -154,9 +124,9 @@ export declare function compileForbiddenMountRules(names: readonly string[], sou
  * `tools.forbid_always`, `skills.forbid_always` and `mounts.forbid_always`,
  * named with the workflow that declared them. A per-state `forbid` is not
  * inherited — it governs that state's turns, not a child session — and neither
- * is any grant. Compiled as rules, they bind the `lifecycle` origin too, so a
- * descendant's hooks and the runtime's reads on a child's behalf are held to
- * them. A workflow's own lists bind its own hooks through the kernel's rules.
+ * is any grant. Compiled as rules, they bind every origin, so a descendant's
+ * automated states and the runtime's reads on a child's behalf are held to
+ * them.
  */
 export declare function workflowDenials(machine: WorkflowMachine, source: string): GovernanceRule[];
 /**