@automatalabs/workflows 0.30.1 → 0.32.0

package/README.md

@@ -15,10 +15,10 @@ If you want to expose a `workflow` tool to an MCP host (Claude Code, Zed, …),
 you want to embed the runner in your own program, use this one.
 
 It is a **programmatic library**, not an MCP stdio server. It is a thin facade over the engine +
-ACP packages and adds one convenience helper, `runDynamicWorkflow`, which defaults the agent
-backend to ACP. The ACP layer does use `@modelcontextprotocol/sdk` internally when it hosts the
-optional StructuredOutput tool for eligible agents; consumers still interact through this SDK's
-workflow/runner APIs rather than MCP server schemas.
+ACP packages and adds ACP-defaulted helpers for ordinary runs (`runDynamicWorkflow`) and
+substitution tests (`runIsolation`). The ACP layer does use `@modelcontextprotocol/sdk` internally
+when it hosts the optional StructuredOutput tool for eligible agents; consumers still interact
+through this SDK's workflow/runner APIs rather than MCP server schemas.
 
 ---
 
@@ -116,6 +116,27 @@ Every script **must** begin with `export const meta = { name, description, phase
 statement, and must be **deterministic** — `Date.now()`, `Math.random()`, and `new Date()` are
 unavailable inside the realm (they would break journal replay on resume).
 
+### Substitution testing (isolation mode)
+
+Record a normal managed run, then re-run its recorded script with one selected step live while all
+other calls are served from the recording:
+
+```ts
+import { runIsolation } from "@automatalabs/workflows";
+
+const isolated = await runIsolation({
+  baselineRunId: recorded.runId,
+  live: [{ label: "step-2", model: "codex/gpt-5.3-codex" }],
+});
+
+const target = isolated.report.calls.find((call) => call.mode === "live-target");
+console.log(isolated.status, target?.recordedUsage, target?.liveUsage);
+```
+
+The SDK defaults the live runner to ACP and disposes it; pass `runner` to inject and retain your own.
+See the [Isolation mode API](../../docs/api.md#isolation-mode) for baseline admissibility, target
+selection, typed refusals, report semantics, and the lower-level `createReplayRunner` composition.
+
 ### b) `createAcpRunner().run(...)` — drive a single agent
 
 Skip the script realm entirely and call one agent directly. The runner is the default ACP
@@ -143,7 +164,7 @@ try {
 }
 ```
 
-`run(prompt, options?)` accepts the seam's `RunOptions`: `schema`, `maxSchemaRetries`, `model`, `mode`, `tier`, `cwd`,
+`run(prompt, options?)` accepts the seam's `RunOptions`: `schema`, `maxSchemaRetries`, `model`, `mode`, `configOptions`, `tier`, `cwd`,
 `instructions`, `label`, `toolNames` / `disallowedToolNames`, `signal`, `mcpServers`, `images`,
 `backends`, `meta` / `promptMeta` (generic ACP `_meta` passthroughs merged into `session/new` /
 `session/prompt`), `baseInstructions` / `developerInstructions` (Codex-only), `keepSession`, and
@@ -467,23 +488,30 @@ promises — `parallel([() => agent("a"), () => agent("b")])`, not `parallel([ag
 
 ## Validating scripts — `agentprism-workflows validate`
 
-The package ships a bin that validates a workflow script **without spending tokens or spawning
-any agent process** — no backend auth needed:
+The package ships a bin that validates a workflow script **without spending tokens**:
 
 ```bash
 npx @automatalabs/workflows validate my-workflow.js --args '{"target":"src/"}'
 ```
 
-Two passes: a **static parse** (the `meta` literal, syntax, the determinism blocklist), then a
+Three passes: a **static parse** (the `meta` literal, syntax, the determinism blocklist), then a
 **dry run** — the script executes in the real engine realm while every `agent()` call is served
 by an in-process mock `AgentRunner` that fabricates schema-conforming results. The dry run
 catches what a parse can't: thunk-vs-promise mistakes, reference errors, broken plumbing between
-calls. A mock live confirm answers checkpoints with `default ?? true`, so `headless: "pause"`
+calls. Finally, validation opens one no-prompt session on every distinct routed ACP harness,
+surfaces the complete advertised config-option catalog, and checks every authored `configOptions`
+bag against it. This probe uses zero tokens. A harness that cannot spawn, authenticate, or open a
+session contributes one warning and `probed:false`; only that harness's option checks are skipped,
+so probe failure alone never invalidates the script. There is no cached catalog or opt-out flag.
+A mock live confirm answers checkpoints with `default ?? true`, so `headless: "pause"`
 dry-runs cleanly; `headless: "abort"` warns because a truly unattended run would abort.
 Script-declared `meta.backends` are treated as approved (with a warning that real runs require
-approval). The report lists every agent call with
-its backend attribution, every checkpoint, and warnings; exit codes are `0` valid, `1` parse
-failure, `2` dry-run failure, `3` usage error.
+approval). The report lists every agent call with its backend attribution and `configOptions`
+echo, every checkpoint, the full option table for every routed harness (even when no call authors
+options), and warnings. Unknown ids, invalid select values, non-boolean boolean values, and the
+reserved `"model"` id make the report invalid with exit code `2`; each diagnostic names the call,
+authored value, and advertised alternatives. Exit codes are `0` valid, `1` parse failure, `2`
+dry-run or config-option failure, `3` usage error.
 
 Flags: `--args <json>` / `--args-file <path>`, `--workflows-dir <dir>` (repeatable — validate by
 NAME and resolve nested `workflow("<name>")` calls from your folder), `--parse-only`,
@@ -537,6 +565,8 @@ const mockAnswers: MockAnswers = {
 const report = await validateWorkflowScript(script, { args: { target: "src/" }, mockAnswers });
 report.ok;                 // parse ok AND dry run completed
 report.dryRun?.agentCalls; // calls include mockAnswer: { glob, sequenceIndex?, sequenceLength? }
+report.dryRun?.harnessOptions;
+// [{ backendId, probed, options?: SessionConfigOption[], error?: string }]
 report.dryRun?.mockAnswers;// normalized rule counters + item-level unused records
 report.warnings;           // approval reminders, phase mismatches, headless-abort checkpoints, …
 ```
@@ -605,6 +635,14 @@ retry, echo verification, or fallback. Brackets, dots, slashes, and provider-sty
 ordinary id characters. A harness error follows the existing agent-error path. Per-backend pool
 size is `AGENTPRISM_ACP_POOL_SIZE` (or `AcpPoolOptions.size`).
 
+`agent({ configOptions })` applies the rest of that selected harness's ACP option surface with the
+same verbatim philosophy. Exact ids and string/boolean values are sent in ascending option-id
+order, after model selection and before the prompt; there are no aliases, coercion, defaults,
+catalog matching, or client-side option vocabulary. The `"model"` key is rejected before a session
+opens because the dedicated `model` field is its only channel. Run `validate` and read the routed
+harness's advertised-options table before choosing ids or select values. A live harness rejection
+otherwise follows the existing agent-error path.
+
 ---
 
 ## Exports
@@ -612,9 +650,11 @@ size is `AGENTPRISM_ACP_POOL_SIZE` (or `AcpPoolOptions.size`).
 ```ts
 // ── Run entry & helper ──
 runDynamicWorkflow,           // (script, { args?, runner?, exec? }) => Promise<WorkflowRunResult>
+runIsolation,                 // ACP-defaulted single-target substitution over a recorded run
+createReplayRunner,           // backend-neutral in-memory replay composition primitive
 runWorkflow,                  // the bare engine run (no status trio)
 parseWorkflowScript,          // parse a script's meta + body
-validateWorkflowScript,       // token-free parse + mock-runner dry run (the `validate` CLI's core)
+validateWorkflowScript,       // token-free parse + mock dry run + no-prompt harness option probes
 fabricateFromSchema,          // the dry run's JSON-Schema value fabricator
 formatValidateReport,         // render a ValidateWorkflowReport as CLI text
 openWorkflowDir,              // read-only view over folders of workflow scripts (name = filename stem)
@@ -639,16 +679,21 @@ WorkflowError, WorkflowErrorCode, isWorkflowError, isProviderUsageLimit, isAuthR
 AGENTPRISM_PERSISTENCE_ROOT_ENV,
 
 // ── Types ──
-RunDynamicWorkflowOptions, WorkflowRunOptions, AgentOptions, ExecOptions,
+RunDynamicWorkflowOptions, RunIsolationSdkOptions, RunIsolationOptions, IsolationRunResult,
+IsolationTarget, ReplayRunnerOptions, ReplayRunner, ReplayObservation, ReplayReport,
+ReplayCallReport, ReplayDivergenceEvent, ResolvedIsolationTarget,
+WorkflowRunOptions, AgentOptions, ExecOptions, CheckpointCallContext,
 MockAnswerJson, MockAnswerSequence, MockAnswerRule, MockAnswers,
 ValidatedMockAnswerUse, ValidatedMockAnswerRule, UnusedMockAnswer, ValidatedMockAnswers,
-ValidateWorkflowOptions, ValidateWorkflowReport, ValidatedAgentCall, ValidatedCheckpoint,
+ValidateWorkflowOptions, ValidateWorkflowReport, ValidateHarnessOptions,
+ValidatedAgentCall, ValidatedCheckpoint,
 WorkflowManagerOptions, CheckpointOptions, WorkflowRunResult, WorkflowRunFallback,
 WorkflowCheckpointTaken, WorkflowCheckpointSource, WorkflowSnapshot,
 WorkflowPathOptions, RunPersistence, RunPersistenceOptions,
 AcpPoolOptions, AcpRunnerOptions, AgentRunner, RunOptions, AgentResult, AgentUsage, JournalEntry,
-AgentSessionRef, AgentSessionRecord, WorkflowBackendConfig,
-InteractiveSessionOptions, InteractiveTurn, PermissionResolver,
+AgentSessionRef, AgentSessionRecord, WorkflowBackendConfig, WorkflowCallRecord, WorkflowRecordedError,
+InteractiveSessionOptions, InteractiveTurn, ProbedConfigOptions, SessionConfigOption,
+PermissionResolver,
 AuthResolver, AuthContext, AuthResolution, AuthMethodDescriptor, AuthCapableRunner,
 ProviderCapableRunner,        // duck-type gate for the MCP provider tools (providers/list|set|disable)
 ClientHandlers, FsHandlers, TerminalHandlers, McpHandlers, AcpSessionContext, NegotiatedCapabilities,

package/dist/cli.js

@@ -5,7 +5,8 @@
 //
 // Validates a workflow script without spending tokens: static parse (meta literal,
 // syntax, determinism blocklist), then a dry run over an in-process mock AgentRunner
-// that fabricates schema-conforming results — no ACP process is spawned. See
+// that fabricates schema-conforming results, then one no-prompt option probe per routed
+// ACP harness. See
 // ./validate.ts for the programmatic API (`validateWorkflowScript`).
 import { existsSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { resolve } from "node:path";
@@ -16,8 +17,11 @@ const USAGE = `Usage: agentprism-workflows validate <workflow-file-or-name> [opt
 Validates an AgentPrism workflow script without spending tokens:
   1. static parse — the meta literal, syntax, and the determinism blocklist
   2. dry run — the script executes against a mock agent backend that fabricates
-     schema-conforming results; no ACP process is spawned, no tokens are spent,
-     and a mock live confirm resolves checkpoints to their declared defaults
+     schema-conforming results; no tokens are spent, and a mock live confirm
+     resolves checkpoints to their declared defaults
+  3. config probe — each routed ACP harness opens once with no prompt; advertised
+     options are reported and authored configOptions are checked. Probe failures warn
+     and skip that harness's checks without making validation fail
 
 Options:
   --args <json>          the script's \`args\` global for the dry run (a JSON value)

package/dist/index.d.ts

@@ -1,15 +1,18 @@
 import { WorkflowManager as EngineWorkflowManager } from "@automatalabs/workflow-engine";
 import type { AcpEventName, AcpRunnerEventMap } from "@automatalabs/acp-agents";
 import type { ExecOptions, WorkflowDir, WorkflowManagerOptions } from "@automatalabs/workflow-engine";
-import type { AgentRunner, WorkflowBackendConfig, WorkflowRunResult } from "@automatalabs/shared-types";
+import type { AgentRunner, WorkflowRunResult } from "@automatalabs/shared-types";
+import { type ScriptBackendApproval } from "./script-backends.js";
 export { runWorkflow, parseWorkflowScript, redactText, truncateUtf8 } from "@automatalabs/workflow-engine";
+export { runIsolation, createReplayRunner, type RunIsolationSdkOptions } from "./isolation.js";
+export type { RunIsolationOptions, IsolationRunResult, ReplayRunnerOptions, ResolvedIsolationTarget, IsolationTarget, ReplayRunner, ReplayObservation, ReplayReport, ReplayCallReport, ReplayDivergenceEvent, CheckpointCallContext, WorkflowCallRecord, WorkflowRecordedError, } from "./isolation.js";
 export { openWorkflowDir, type WorkflowDir, type WorkflowDirEntry, type OpenWorkflowDirOptions, } from "@automatalabs/workflow-engine";
 export { validateWorkflowScript, fabricateFromSchema, formatValidateReport, MOCK_TOKENS_PER_AGENT } from "./validate.js";
-export type { MockAnswerJson, MockAnswerRule, MockAnswers, MockAnswerSequence, UnusedMockAnswer, ValidateWorkflowOptions, ValidateWorkflowReport, ValidatedAgentCall, ValidatedCheckpoint, ValidatedMockAnswerRule, ValidatedMockAnswers, ValidatedMockAnswerUse, } from "./validate.js";
+export type { MockAnswerJson, MockAnswerRule, MockAnswers, MockAnswerSequence, UnusedMockAnswer, ValidateWorkflowOptions, ValidateWorkflowReport, ValidateHarnessOptions, ValidatedAgentCall, ValidatedCheckpoint, ValidatedMockAnswerRule, ValidatedMockAnswers, ValidatedMockAnswerUse, } from "./validate.js";
 export type { WorkflowRunOptions, AgentOptions, ExecOptions, WorkflowManagerOptions, CheckpointOptions, WorkflowRunResult, WorkflowSnapshot, WorkflowPathOptions, RunPersistence, RunPersistenceOptions, PersistedRunState, PersistedAgentState, WorkflowLogTail, WorkflowRunCallStatus, WorkflowRunInspectionOptions, WorkflowRunStatus, WorkflowRunStatusTruncation, WorkflowRunFallback, WorkflowCheckpointSource, WorkflowCheckpointTaken, } from "@automatalabs/workflow-engine";
 export { AGENTPRISM_PERSISTENCE_ROOT_ENV, WorkflowError, WorkflowErrorCode, isWorkflowError, isProviderUsageLimit, isAuthRequired, } from "@automatalabs/workflow-engine";
 export { createAcpRunner, AcpAgentRunner, InteractiveSession, selectBackend, ClaudeBackend, CodexBackend, CustomAcpBackend, AGENT_METHODS, CLIENT_METHODS, AGENT_METHOD_COVERAGE, CLIENT_METHOD_COVERAGE, ACP_AUTH_REQUIRED_ERROR_CODE, clientCapabilitiesFor, adaptPromptContent, resolveBackendRegistry, BACKENDS_ENV, toJsonSchema, toStrictJsonSchema, } from "@automatalabs/acp-agents";
-export type { AcpPoolOptions, AcpRunnerOptions, AuthenticateOptions, AuthMethodsOptions, DisableProviderOptions, DeleteSessionOptions, InteractiveSessionOptions, InteractiveTurn, ListProvidersOptions, ListSessionsOptions, LogoutOptions, ReattachSessionOptions, SetProviderOptions, BackendRegistry, CustomBackendConfig, RegisteredBackend, ClientCapabilityOptions, ClientHandlers, FsHandlers, McpHandlers, TerminalHandlers, AcpSessionContext, NegotiatedCapabilities, PermissionResolver, AgentAuthCapabilities, AgentRequestMethod, AgentRequestParamsByMethod, AgentRequestResponsesByMethod, AuthCapabilities, AuthEnvVar, AuthenticateRequest, AuthenticateResponse, AuthMethod, AuthMethodAgent, AuthMethodEnvVar, AuthMethodId, AuthMethodTerminal, ConnectMcpRequest, ConnectMcpResponse, DeleteSessionRequest, DeleteSessionResponse, DisableProviderRequest, DisableProviderResponse, DisconnectMcpRequest, DisconnectMcpResponse, ListProvidersRequest, ListProvidersResponse, ListSessionsRequest, ListSessionsResponse, LlmProtocol, LoadSessionRequest, LoadSessionResponse, LogoutCapabilities, LogoutRequest, LogoutResponse, McpConnectionId, McpServerAcp, McpServerAcpId, MessageMcpNotification, MessageMcpRequest, MessageMcpResponse, ProviderCurrentConfig, ProviderId, ProviderInfo, ProvidersCapabilities, ResumeSessionRequest, ResumeSessionResponse, SetProviderRequest, SetProviderResponse, AgentNotificationMethod, AgentNotificationParamsByMethod, CompleteElicitationNotification, CreateElicitationRequest, CreateElicitationResponse, ElicitationAcceptAction, ElicitationCapabilities, ElicitationContentValue, ElicitationFormCapabilities, ElicitationFormMode, ElicitationId, ElicitationPropertySchema, ElicitationRequestScope, ElicitationResolver, ElicitationSchema, ElicitationSchemaType, ElicitationSessionScope, ElicitationUrlCapabilities, ElicitationUrlMode, SessionMode, SessionModeState, SessionInfo, SendRequestOptions, AgentMethodCoverage, ClientMethodCoverage, } from "@automatalabs/acp-agents";
+export type { AcpPoolOptions, AcpRunnerOptions, AuthenticateOptions, AuthMethodsOptions, DisableProviderOptions, DeleteSessionOptions, InteractiveSessionOptions, InteractiveTurn, ListProvidersOptions, ListSessionsOptions, LogoutOptions, ProbedConfigOptions, ReattachSessionOptions, SetProviderOptions, BackendRegistry, CustomBackendConfig, RegisteredBackend, ClientCapabilityOptions, ClientHandlers, FsHandlers, McpHandlers, TerminalHandlers, AcpSessionContext, NegotiatedCapabilities, PermissionResolver, AgentAuthCapabilities, AgentRequestMethod, AgentRequestParamsByMethod, AgentRequestResponsesByMethod, AuthCapabilities, AuthEnvVar, AuthenticateRequest, AuthenticateResponse, AuthMethod, AuthMethodAgent, AuthMethodEnvVar, AuthMethodId, AuthMethodTerminal, ConnectMcpRequest, ConnectMcpResponse, DeleteSessionRequest, DeleteSessionResponse, DisableProviderRequest, DisableProviderResponse, DisconnectMcpRequest, DisconnectMcpResponse, ListProvidersRequest, ListProvidersResponse, ListSessionsRequest, ListSessionsResponse, LlmProtocol, LoadSessionRequest, LoadSessionResponse, LogoutCapabilities, LogoutRequest, LogoutResponse, McpConnectionId, McpServerAcp, McpServerAcpId, MessageMcpNotification, MessageMcpRequest, MessageMcpResponse, ProviderCurrentConfig, ProviderId, ProviderInfo, ProvidersCapabilities, ResumeSessionRequest, ResumeSessionResponse, SetProviderRequest, SetProviderResponse, AgentNotificationMethod, AgentNotificationParamsByMethod, CompleteElicitationNotification, CreateElicitationRequest, CreateElicitationResponse, ElicitationAcceptAction, ElicitationCapabilities, ElicitationContentValue, ElicitationFormCapabilities, ElicitationFormMode, ElicitationId, ElicitationPropertySchema, ElicitationRequestScope, ElicitationResolver, ElicitationSchema, ElicitationSchemaType, ElicitationSessionScope, ElicitationUrlCapabilities, ElicitationUrlMode, SessionMode, SessionModeState, SessionConfigOption, SessionInfo, SendRequestOptions, AgentMethodCoverage, ClientMethodCoverage, } from "@automatalabs/acp-agents";
 export type { AuthResolver, AuthContext, AuthResolution, AuthMethodDescriptor, CompleteAuthOptions, AuthOutcome, AuthController, AuthStatusSnapshot, AuthCapableRunner, ProviderCapableRunner, } from "@automatalabs/acp-agents";
 export type { AuthErrorContext, CheckpointContext } from "@automatalabs/shared-types";
 export { TypedEventEmitter } from "@automatalabs/acp-agents";
@@ -78,9 +81,7 @@ export declare class WorkflowManager extends EngineWorkflowManager {
  * runDynamicWorkflow THROWS with guidance rather than running a script whose declared
  * dependencies were dropped.
  */
-export type ScriptBackendApproval = boolean | ((backend: {
-    name: string;
-} & WorkflowBackendConfig) => boolean | Promise<boolean>);
+export type { ScriptBackendApproval } from "./script-backends.js";
 /** Options for {@link runDynamicWorkflow}. */
 export interface RunDynamicWorkflowOptions {
     /**

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAKL,eAAe,IAAI,qBAAqB,EACzC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAoB,YAAY,EAAE,iBAAiB,EAAiB,MAAM,0BAA0B,CAAC;AACjH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAMxG,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAO3G,OAAO,EACL,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACzH,YAAY,EACV,cAAc,EACd,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,4BAA4B,EAC5B,iBAAiB,EACjB,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,cAAc,GACf,MAAM,+BAA+B,CAAC;AAQvC,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,4BAA4B,EAC5B,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,gBAAgB,EAChB,UAAU,EACV,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,eAAe,EACf,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,EACV,YAAY,EACZ,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,aAAa,EACb,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAOlC,YAAY,EACV,YAAY,EACZ,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAMtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EACV,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,2BAA2B,EAC3B,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAIlC,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAwBpC,KAAK,eAAe,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAClF,KAAK,uBAAuB,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;AAE9F;;6FAE6F;AAC7F,KAAK,oBAAoB,GAAG;KACzB,CAAC,IAAI,YAAY,GAAG;QACnB,IAAI,EAAE,CAAC,CAAC;QACR,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC5B,SAAS,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;KAC/D,GAAG,CAAC,WAAW,SAAS,MAAM,iBAAiB,CAAC,CAAC,CAAC,GAC/C;QAAE,SAAS,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;KAAE,GACjE;QAAE,SAAS,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC,GAAG;QAC7B,KAAK,CAAC,EAAE,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,KAAK,CAAC,EAAE,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;KAChE;CACJ,CAAC;AACF,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,YAAY,GAAG,YAAY,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;AAE/F;;;;;;;;;GASG;AACH,qBAAa,eAAgB,SAAQ,qBAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgD;gBAE/D,OAAO,GAAE,sBAA2B;IAKvC,iBAAiB,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,EACd,IAAI,GAAE,WAAgB,GACrB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;KAAE;IAY1C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAS3F,kBAAkB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,WAAgB,GACrB,OAAO,CACN;QAAE,QAAQ,EAAE,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,CAAA;KAAE,GACxC;QAAE,QAAQ,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;KAAE,CAC1D;IAgBc,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAK9E;8FAC0F;IAC1F,OAAO,IAAI,IAAI;IAOf,8EAA8E;IAC9E,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,sBAAsB;CAiC/B;AAoCD;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAC7B,OAAO,GACP,CAAC,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,qBAAqB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAExF,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kGAAkG;IAClG,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,+FAA+F;IAC/F,mBAAmB,CAAC,EAAE,qBAAqB,CAAC;IAC5C;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC;CAC7C;AAED;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAmC5B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAKL,eAAe,IAAI,qBAAqB,EACzC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAoB,YAAY,EAAE,iBAAiB,EAAiB,MAAM,0BAA0B,CAAC;AACjH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,KAAK,EAAE,WAAW,EAAyB,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACxG,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAMzF,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAI3G,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,KAAK,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC/F,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACzH,YAAY,EACV,cAAc,EACd,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,4BAA4B,EAC5B,iBAAiB,EACjB,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,cAAc,GACf,MAAM,+BAA+B,CAAC;AAQvC,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,4BAA4B,EAC5B,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,gBAAgB,EAChB,UAAU,EACV,mBAAmB,EACnB,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,eAAe,EACf,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,EACV,YAAY,EACZ,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,aAAa,EACb,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAOlC,YAAY,EACV,YAAY,EACZ,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAMtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EACV,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,2BAA2B,EAC3B,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAIlC,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAwBpC,KAAK,eAAe,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAClF,KAAK,uBAAuB,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;AAE9F;;6FAE6F;AAC7F,KAAK,oBAAoB,GAAG;KACzB,CAAC,IAAI,YAAY,GAAG;QACnB,IAAI,EAAE,CAAC,CAAC;QACR,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC5B,SAAS,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;KAC/D,GAAG,CAAC,WAAW,SAAS,MAAM,iBAAiB,CAAC,CAAC,CAAC,GAC/C;QAAE,SAAS,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;KAAE,GACjE;QAAE,SAAS,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC,GAAG;QAC7B,KAAK,CAAC,EAAE,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,KAAK,CAAC,EAAE,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;KAChE;CACJ,CAAC;AACF,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,YAAY,GAAG,YAAY,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;AAE/F;;;;;;;;;GASG;AACH,qBAAa,eAAgB,SAAQ,qBAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgD;gBAE/D,OAAO,GAAE,sBAA2B;IAKvC,iBAAiB,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,EACd,IAAI,GAAE,WAAgB,GACrB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;KAAE;IAY1C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAS3F,kBAAkB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,WAAgB,GACrB,OAAO,CACN;QAAE,QAAQ,EAAE,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,CAAA;KAAE,GACxC;QAAE,QAAQ,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;KAAE,CAC1D;IAgBc,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAK9E;8FAC0F;IAC1F,OAAO,IAAI,IAAI;IAOf,8EAA8E;IAC9E,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,sBAAsB;CAiC/B;AAoCD;;;;;;;;GAQG;AACH,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElE,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kGAAkG;IAClG,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,+FAA+F;IAC/F,mBAAmB,CAAC,EAAE,qBAAqB,CAAC;IAC5C;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC;CAC7C;AAED;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAsC5B"}

package/dist/index.js

@@ -2,18 +2,22 @@
 // @automatalabs/workflows — the importable SDK for the AgentPrism dynamic-workflow
 // orchestrator. A FACADE re-export barrel: it re-exports the clean public surface of
 // the three engine packages, adds the SDK-level WorkflowManager ACP-event bridge, and
-// adds ONE convenience helper (`runDynamicWorkflow`) that defaults the AgentRunner seam
-// to the ACP backend. It is SEPARATE from @automatalabs/mcp-server (the stdio MCP server)
+// adds ACP-defaulted convenience helpers for ordinary and isolation runs. It is
+// SEPARATE from @automatalabs/mcp-server (the stdio MCP server)
 // and stays a PURE library — it pulls in neither @modelcontextprotocol/sdk nor zod.
 //
 // The DSL globals available INSIDE a workflow script (agent, parallel, pipeline, …) are
 // vm-realm globals, NOT importable symbols; they are documented for author IntelliSense
 // in ./dsl.d.ts (referenced above), not exported here.
 import { ACP_CROSS_CUTTING_EVENT_NAMES, createAcpRunner } from "@automatalabs/acp-agents";
-import { openWorkflowDir, parseWorkflowScript, WorkflowError, WorkflowErrorCode, WorkflowManager as EngineWorkflowManager, } from "@automatalabs/workflow-engine";
+import { openWorkflowDir, parseWorkflowScript, WorkflowManager as EngineWorkflowManager, } from "@automatalabs/workflow-engine";
+import { approveScriptBackends } from "./script-backends.js";
 // ── Engine: run entry, script parsing, the managed-run lifecycle, and the
 //    option/result + error types the host composes against. ──
 export { runWorkflow, parseWorkflowScript, redactText, truncateUtf8 } from "@automatalabs/workflow-engine";
+// ── Isolation mode: deterministic substitution testing over a recorded run. The SDK
+//    wrapper defaults the live target runner to ACP and owns that runner's disposal. ──
+export { runIsolation, createReplayRunner } from "./isolation.js";
 // ── Workflow directory view: openWorkflowDir("./workflows") binds a read-only,
 //    per-call-fresh view over folders of versioned workflow scripts (name = filename
 //    stem). `view.resolve` IS a loadSavedWorkflow resolver; runDynamicWorkflow accepts
@@ -200,7 +204,10 @@ export async function runDynamicWorkflow(script, opts = {}) {
     }
     let exec = opts.exec;
     if (declared && Object.keys(declared).length > 0) {
-        exec = { ...(exec ?? {}), scriptBackends: await approveScriptBackends(declared, opts.allowScriptBackends) };
+        exec = {
+            ...(exec ?? {}),
+            scriptBackends: await approveScriptBackends(declared, opts.allowScriptBackends, "runDynamicWorkflow"),
+        };
     }
     const owned = opts.runner === undefined;
     const runner = opts.runner ?? createAcpRunner();
@@ -214,22 +221,3 @@ export async function runDynamicWorkflow(script, opts = {}) {
             await runner.dispose();
     }
 }
-/** Resolve the embedder's approval policy over the declared backends; throw with guidance when
- *  approval is missing or any backend is declined (an unapproved dependency must abort, never
- *  silently reroute). */
-async function approveScriptBackends(declared, approval) {
-    const names = Object.keys(declared).join(", ");
-    if (approval === undefined || approval === false) {
-        throw new WorkflowError(`script declares custom ACP backends (meta.backends: ${names}) — these spawn commands on this machine and require explicit approval. ` +
-            `Pass allowScriptBackends: true (or a per-backend approval callback) to runDynamicWorkflow, ` +
-            `or thread an approved registry yourself via exec.scriptBackends.`, WorkflowErrorCode.SCRIPT_VALIDATION_ERROR, { recoverable: false });
-    }
-    if (approval === true)
-        return declared;
-    for (const [name, config] of Object.entries(declared)) {
-        if (!(await approval({ name, ...config }))) {
-            throw new WorkflowError(`script backend "${name}" (command: ${config.command}) was declined by the allowScriptBackends callback — aborting the run`, WorkflowErrorCode.SCRIPT_VALIDATION_ERROR, { recoverable: false });
-        }
-    }
-    return declared;
-}

package/dist/isolation.d.ts

@@ -0,0 +1,24 @@
+import { createReplayRunner } from "@automatalabs/workflow-engine";
+import type { CheckpointCallContext, IsolationRunResult, IsolationTarget, ReplayCallReport, ReplayDivergenceEvent, ReplayObservation, ReplayReport, ReplayRunner, ReplayRunnerOptions, ResolvedIsolationTarget, RunIsolationOptions } from "@automatalabs/workflow-engine";
+import type { AgentRunner, WorkflowCallRecord, WorkflowRecordedError } from "@automatalabs/shared-types";
+import { type ScriptBackendApproval } from "./script-backends.js";
+type OwnedRunner = AgentRunner & {
+    dispose: () => Promise<void>;
+};
+type DefaultRunnerFactory = () => OwnedRunner;
+/** Test-only injection point for the owned default runner. Deliberately absent from the package barrel. */
+export declare function __setDefaultRunnerFactoryForTests(factory: DefaultRunnerFactory | undefined): void;
+export interface RunIsolationSdkOptions extends Omit<RunIsolationOptions, "runner" | "scriptBackends"> {
+    /** Omitted => createAcpRunner(), disposed after the run. */
+    runner?: AgentRunner;
+    /** Approval policy for the recording script's declared meta.backends. */
+    allowScriptBackends?: ScriptBackendApproval;
+}
+/**
+ * Execute an isolation run with the SDK's ACP-defaulted runner and script-backend
+ * approval policy. Caller-supplied runners remain caller-owned.
+ */
+export declare function runIsolation<T = unknown>(opts: RunIsolationSdkOptions): Promise<IsolationRunResult<T>>;
+export { createReplayRunner };
+export type { CheckpointCallContext, IsolationRunResult, IsolationTarget, ReplayCallReport, ReplayDivergenceEvent, ReplayObservation, ReplayReport, ReplayRunner, ReplayRunnerOptions, ResolvedIsolationTarget, RunIsolationOptions, WorkflowCallRecord, WorkflowRecordedError, };
+//# sourceMappingURL=isolation.d.ts.map

package/dist/isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolation.d.ts","sourceRoot":"","sources":["../src/isolation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAMnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEzF,KAAK,WAAW,GAAG,WAAW,GAAG;IAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAClE,KAAK,oBAAoB,GAAG,MAAM,WAAW,CAAC;AAI9C,2GAA2G;AAC3G,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,GAAG,IAAI,CAEjG;AAED,MAAM,WAAW,sBACf,SAAQ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,gBAAgB,CAAC;IAC9D,4DAA4D;IAC5D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,qBAAqB,CAAC;CAC7C;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CA0ChC;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAC9B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,GACtB,CAAC"}

package/dist/isolation.js

@@ -0,0 +1,54 @@
+import { createAcpRunner } from "@automatalabs/acp-agents";
+import { createReplayRunner, createRunPersistence, parseWorkflowScript, runIsolation as runEngineIsolation, WorkflowError, WorkflowErrorCode, } from "@automatalabs/workflow-engine";
+import { approveScriptBackends } from "./script-backends.js";
+let defaultRunnerFactory = createAcpRunner;
+/** Test-only injection point for the owned default runner. Deliberately absent from the package barrel. */
+export function __setDefaultRunnerFactoryForTests(factory) {
+    defaultRunnerFactory = factory ?? createAcpRunner;
+}
+/**
+ * Execute an isolation run with the SDK's ACP-defaulted runner and script-backend
+ * approval policy. Caller-supplied runners remain caller-owned.
+ */
+export async function runIsolation(opts) {
+    let recording;
+    try {
+        const persistence = createRunPersistence(opts.cwd ?? process.cwd(), undefined, {
+            persistenceRoot: opts.persistenceRoot,
+        });
+        recording = persistence.load(opts.baselineRunId);
+    }
+    catch (error) {
+        if (error instanceof WorkflowError)
+            throw error;
+        throw new WorkflowError(error instanceof Error ? error.message : String(error), WorkflowErrorCode.PERSISTENCE_ERROR, { recoverable: false });
+    }
+    let declared;
+    if (recording && typeof recording.script === "string") {
+        try {
+            declared = parseWorkflowScript(recording.script).meta.backends;
+        }
+        catch {
+            // The engine owns malformed-recording diagnosis and will reject it with its
+            // typed preflight error after reloading the same persisted bytes.
+        }
+    }
+    const scriptBackends = declared && Object.keys(declared).length > 0
+        ? await approveScriptBackends(declared, opts.allowScriptBackends, "runIsolation")
+        : undefined;
+    const owned = opts.runner === undefined;
+    const runner = opts.runner ?? defaultRunnerFactory();
+    try {
+        const { allowScriptBackends: _approval, ...engineOptions } = opts;
+        return await runEngineIsolation({
+            ...engineOptions,
+            runner,
+            ...(scriptBackends === undefined ? {} : { scriptBackends }),
+        });
+    }
+    finally {
+        if (owned)
+            await runner.dispose();
+    }
+}
+export { createReplayRunner };

package/dist/script-backends.d.ts

@@ -0,0 +1,7 @@
+import type { WorkflowBackendConfig } from "@automatalabs/shared-types";
+export type ScriptBackendApproval = boolean | ((backend: {
+    name: string;
+} & WorkflowBackendConfig) => boolean | Promise<boolean>);
+/** Resolve explicit host approval for script-declared command-spawning backends. */
+export declare function approveScriptBackends(declared: Record<string, WorkflowBackendConfig>, approval: ScriptBackendApproval | undefined, helperName: "runDynamicWorkflow" | "runIsolation"): Promise<Record<string, WorkflowBackendConfig>>;
+//# sourceMappingURL=script-backends.d.ts.map

package/dist/script-backends.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-backends.d.ts","sourceRoot":"","sources":["../src/script-backends.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE,MAAM,MAAM,qBAAqB,GAC7B,OAAO,GACP,CAAC,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,qBAAqB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAExF,oFAAoF;AACpF,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC/C,QAAQ,EAAE,qBAAqB,GAAG,SAAS,EAC3C,UAAU,EAAE,oBAAoB,GAAG,cAAc,GAChD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAyBhD"}

package/dist/script-backends.js

@@ -0,0 +1,20 @@
+import { WorkflowError, WorkflowErrorCode } from "@automatalabs/workflow-engine";
+/** Resolve explicit host approval for script-declared command-spawning backends. */
+export async function approveScriptBackends(declared, approval, helperName) {
+    const names = Object.keys(declared).join(", ");
+    if (approval === undefined || approval === false) {
+        const guidance = helperName === "runDynamicWorkflow"
+            ? "Pass allowScriptBackends: true (or a per-backend approval callback) to runDynamicWorkflow, or thread an approved registry yourself via exec.scriptBackends."
+            : "Pass allowScriptBackends: true (or a per-backend approval callback) to runIsolation.";
+        throw new WorkflowError(`script declares custom ACP backends (meta.backends: ${names}) — these spawn commands on this machine and require explicit approval. ` +
+            guidance, WorkflowErrorCode.SCRIPT_VALIDATION_ERROR, { recoverable: false });
+    }
+    if (approval === true)
+        return declared;
+    for (const [name, config] of Object.entries(declared)) {
+        if (!(await approval({ name, ...config }))) {
+            throw new WorkflowError(`script backend "${name}" (command: ${config.command}) was declined by the allowScriptBackends callback — aborting the run`, WorkflowErrorCode.SCRIPT_VALIDATION_ERROR, { recoverable: false });
+        }
+    }
+    return declared;
+}

package/dist/validate-internal.d.ts

@@ -0,0 +1,12 @@
+import { type CustomBackendConfig, type ProbedConfigOptions } from "@automatalabs/acp-agents";
+export interface ValidateProbeRunner {
+    probeConfigOptions(spec?: string, opts?: {
+        cwd?: string;
+    }): Promise<ProbedConfigOptions>;
+    dispose(): Promise<void>;
+}
+export type ValidateProbeFactory = (backends: Record<string, CustomBackendConfig> | undefined) => ValidateProbeRunner;
+export declare function createValidateProbeRunner(backends: Record<string, CustomBackendConfig> | undefined): ValidateProbeRunner;
+/** Package-internal hermetic test seam. Deliberately absent from the public index export. */
+export declare function setValidateProbeFactoryForTests(factory: ValidateProbeFactory): () => void;
+//# sourceMappingURL=validate-internal.d.ts.map

package/dist/validate-internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-internal.d.ts","sourceRoot":"","sources":["../src/validate-internal.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,MAAM,oBAAoB,GAAG,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAAG,SAAS,KACtD,mBAAmB,CAAC;AAIzB,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAAG,SAAS,GACxD,mBAAmB,CAErB;AAED,6FAA6F;AAC7F,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,IAAI,CAMzF"}

package/dist/validate-internal.js

@@ -0,0 +1,13 @@
+import { AcpAgentRunner, } from "@automatalabs/acp-agents";
+let probeFactory = (backends) => new AcpAgentRunner({ backends });
+export function createValidateProbeRunner(backends) {
+    return probeFactory(backends);
+}
+/** Package-internal hermetic test seam. Deliberately absent from the public index export. */
+export function setValidateProbeFactoryForTests(factory) {
+    const previous = probeFactory;
+    probeFactory = factory;
+    return () => {
+        probeFactory = previous;
+    };
+}

package/dist/validate.d.ts

@@ -1,3 +1,4 @@
+import type { SessionConfigOption } from "@automatalabs/acp-agents";
 import type { WorkflowDir } from "@automatalabs/workflow-engine";
 import type { WorkflowMeta } from "@automatalabs/shared-types";
 export type MockAnswerJson = null | boolean | number | string | MockAnswerJson[] | {
@@ -64,13 +65,22 @@ export interface ValidatedAgentCall {
     model?: string;
     tier?: string;
     mode?: string;
-    /** Which backend the spec routes to: "claude" | "codex" | "opencode" | a custom backend
-     *  name (suffixed " (script-declared)" when it comes from meta.backends) | "default". */
+    /** The verbatim session config options authored for this call. */
+    configOptions?: Record<string, string | boolean>;
+    /** Which concrete backend the spec routes to: "claude" | "codex" | "opencode" | a custom
+     *  backend name (suffixed " (script-declared)" when it comes from meta.backends). */
     backend: string;
     /** True when the call requested structured output. */
     schema: boolean;
     mockAnswer?: ValidatedMockAnswerUse;
 }
+export interface ValidateHarnessOptions {
+    backendId: string;
+    probed: boolean;
+    /** Present when probed=false: the harness's spawn/auth/session error. */
+    error?: string;
+    options?: SessionConfigOption[];
+}
 export interface ValidatedCheckpoint {
     prompt: string;
     kind: string;
@@ -78,9 +88,9 @@ export interface ValidatedCheckpoint {
     reply: unknown;
 }
 export interface ValidateWorkflowReport {
-    /** True when the parse succeeded AND the dry run (if performed) completed. */
+    /** True when parse, dry run, and all checks against successfully probed catalogs pass. */
     ok: boolean;
-    /** 0 = valid; 1 = parse/static failure; 2 = dry-run failure. */
+    /** 0 = valid; 1 = parse/static failure; 2 = dry-run or config-option failure. */
     exitCode: 0 | 1 | 2;
     parse: {
         ok: boolean;
@@ -98,6 +108,8 @@ export interface ValidateWorkflowReport {
         phasesVisited: string[];
         logs: string[];
         durationMs: number;
+        /** Fresh, per-run advertised config-option catalogs for every routed harness. */
+        harnessOptions?: ValidateHarnessOptions[];
         /** The script's return value, composed from fabricated agent results. */
         result?: unknown;
         mockAnswers?: ValidatedMockAnswers;
@@ -114,8 +126,9 @@ export declare function fabricateFromSchema(schema: unknown, hint?: string, dept
  *  budget-guarded script paths deterministically. */
 export declare const MOCK_TOKENS_PER_AGENT = 1000;
 /**
- * Validate a workflow script: parse it, then (by default) dry-run it against a mock
- * AgentRunner. Never throws for an invalid script — read `report.ok` / `report.exitCode`.
+ * Validate a workflow script: parse it, dry-run against a mock AgentRunner, then probe
+ * each routed harness's advertised config options. Never throws for an invalid script —
+ * read `report.ok` / `report.exitCode`.
  */
 export declare function validateWorkflowScript(script: string, options?: ValidateWorkflowOptions): Promise<ValidateWorkflowReport>;
 /** Render a ValidateWorkflowReport as the human-readable CLI output. */

package/dist/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAA2B,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAGxF,MAAM,MAAM,cAAc,GACtB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,cAAc,EAAE,GAChB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAEjE,uEAAuE;AACvE,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,iEAAiE;IACjE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;2FACuF;IACvF,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC;IAC5C;6EACyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;8CAC0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,yFAAyF;IACzF,aAAa,EAAE,MAAM,CAAC;IACtB,mGAAmG;IACnG,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;CACjD;AAED,MAAM,WAAW,oBAAoB;IACnC,kFAAkF;IAClF,KAAK,EAAE,uBAAuB,EAAE,CAAC;IACjC,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;6FACyF;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,8EAA8E;IAC9E,EAAE,EAAE,OAAO,CAAC;IACZ,gEAAgE;IAChE,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,KAAK,EAAE;QACL,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,YAAY,CAAC;KACrB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,EAAE,EAAE,OAAO,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,0EAA0E;QAC1E,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACjC,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACnC,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,yEAAyE;QACzE,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,oBAAoB,CAAC;KACpC,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAwfD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,SAAU,EAAE,KAAK,SAAI,GAAG,OAAO,CA6DvF;AAcD;qDACqD;AACrD,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAqB1C;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAkNjC;AAMD,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAsC3E"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAGV,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAA2B,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAIxF,MAAM,MAAM,cAAc,GACtB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,cAAc,EAAE,GAChB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAEjE,uEAAuE;AACvE,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,iEAAiE;IACjE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;2FACuF;IACvF,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC;IAC5C;6EACyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;8CAC0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,yFAAyF;IACzF,aAAa,EAAE,MAAM,CAAC;IACtB,mGAAmG;IACnG,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;CACjD;AAED,MAAM,WAAW,oBAAoB;IACnC,kFAAkF;IAClF,KAAK,EAAE,uBAAuB,EAAE,CAAC;IACjC,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IACjD;yFACqF;IACrF,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACrC;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,0FAA0F;IAC1F,EAAE,EAAE,OAAO,CAAC;IACZ,iFAAiF;IACjF,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,KAAK,EAAE;QACL,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,YAAY,CAAC;KACrB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,EAAE,EAAE,OAAO,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,0EAA0E;QAC1E,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACjC,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACnC,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,iFAAiF;QACjF,cAAc,CAAC,EAAE,sBAAsB,EAAE,CAAC;QAC1C,yEAAyE;QACzE,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,oBAAoB,CAAC;KACpC,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAwfD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,SAAU,EAAE,KAAK,SAAI,GAAG,OAAO,CA6DvF;AAeD;qDACqD;AACrD,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAwK1C;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CA4QjC;AAMD,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CA0D3E"}

package/dist/validate.js

@@ -1,17 +1,19 @@
 // Token-free validation for workflow scripts: a static parse (meta literal, syntax,
 // determinism blocklist) followed by an optional DRY RUN — the script executes for real
 // in the engine's deterministic realm, but every agent() call is served by an in-process
-// mock AgentRunner that fabricates schema-conforming results. No ACP process is spawned,
-// no tokens are spent, a mock live confirm resolves checkpoints to their declared defaults, and run state is
-// journaled nowhere (journaling off + a throwaway persistence root for the run lease).
+// mock AgentRunner that fabricates schema-conforming results. Afterward, each routed ACP harness
+// is opened once without a prompt to read its advertised config options. No tokens are spent, a
+// mock live confirm resolves checkpoints to their declared defaults, and run state is journaled
+// nowhere (journaling off + a throwaway persistence root for the run lease).
 //
 // This is the programmatic core behind `agentprism-workflows validate` (see ./cli.ts).
 import { mkdtempSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { openWorkflowDir, WorkflowError, WorkflowErrorCode, WorkflowManager, parseWorkflowScript, redactText, } from "@automatalabs/workflow-engine";
-import { resolveBackendRegistry, selectBackend } from "@automatalabs/acp-agents";
+import { registryWithRunBackends, resolveBackendRegistry, selectBackend, } from "@automatalabs/acp-agents";
 import { Check, Errors } from "typebox/value";
+import { createValidateProbeRunner } from "./validate-internal.js";
 const MAX_MOCK_ANSWERS_BYTES = 256 * 1024;
 const MAX_MOCK_ANSWER_RULES = 256;
 const MAX_MOCK_ANSWER_GLOB_LENGTH = 256;
@@ -550,25 +552,126 @@ export function fabricateFromSchema(schema, hint = "value", depth = 0) {
 /** Tokens the mock runner reports per agent call, so `--token-budget` exercises
  *  budget-guarded script paths deterministically. */
 export const MOCK_TOKENS_PER_AGENT = 1000;
-function attributeBackend(model, tier, declared) {
-    const spec = model ?? tier;
-    if (!spec)
-        return "default";
-    const head = spec.split("/")[0].replace(/\[[^\]]*\]\s*$/, "").trim().toLowerCase();
-    if (declared && Object.keys(declared).some((name) => name.toLowerCase() === head)) {
-        return `${head} (script-declared)`;
+function routeBackend(model, tier, registry, hostRegistry, declared) {
+    const backendId = selectBackend({ model, tier }, registry).id;
+    const scriptDeclared = !hostRegistry.has(backendId) &&
+        Object.keys(declared ?? {}).some((name) => name.toLowerCase() === backendId.toLowerCase());
+    return {
+        backendId,
+        display: scriptDeclared ? `${backendId} (script-declared)` : backendId,
+    };
+}
+function registryOptions(registry) {
+    if (registry.size === 0)
+        return undefined;
+    return Object.fromEntries([...registry].map(([name, entry]) => {
+        const { name: _name, ...config } = entry;
+        return [name, config];
+    }));
+}
+async function probeHarnessConfigOptions(calls, cwd, registry, hostRegistry, declared, warnings) {
+    const backendIds = [
+        ...new Set(calls.map((call) => routeBackend(call.model, call.tier, registry, hostRegistry, declared).backendId)),
+    ].sort();
+    const harnessOptions = [];
+    const catalogs = new Map();
+    if (backendIds.length === 0)
+        return { harnessOptions, catalogs };
+    let runner;
+    try {
+        runner = createValidateProbeRunner(registryOptions(registry));
+    }
+    catch (error) {
+        const reason = errorMessage(error);
+        for (const backendId of backendIds) {
+            warnings.push(`could not probe ${backendId} — configOptions on its calls are unverified: ${reason}`);
+            harnessOptions.push({ backendId, probed: false, error: reason });
+        }
+        return { harnessOptions, catalogs };
     }
     try {
-        const registry = resolveBackendRegistry(declared);
-        return selectBackend({ model, tier }, registry).id;
+        for (const backendId of backendIds) {
+            try {
+                const result = await runner.probeConfigOptions(backendId, { cwd });
+                catalogs.set(backendId, result.options);
+                harnessOptions.push({
+                    backendId: result.backendId,
+                    probed: true,
+                    options: result.options,
+                });
+            }
+            catch (error) {
+                const reason = errorMessage(error);
+                warnings.push(`could not probe ${backendId} — configOptions on its calls are unverified: ${reason}`);
+                harnessOptions.push({ backendId, probed: false, error: reason });
+            }
+        }
     }
-    catch {
-        return "default";
+    finally {
+        try {
+            await runner.dispose();
+        }
+        catch {
+            // Probe results are complete; process cleanup must not change validation semantics.
+        }
+    }
+    return { harnessOptions, catalogs };
+}
+function errorMessage(error) {
+    return redactText(error instanceof Error ? error.message : String(error)).value;
+}
+function configOptionErrors(calls, catalogs, registry, hostRegistry, declared) {
+    const errors = [];
+    for (const call of calls) {
+        if (!call.configOptions || Object.keys(call.configOptions).length === 0)
+            continue;
+        const backendId = routeBackend(call.model, call.tier, registry, hostRegistry, declared).backendId;
+        const advertised = catalogs.get(backendId);
+        if (!advertised)
+            continue;
+        const optionIds = advertised.map((option) => option.id);
+        for (const [id, value] of Object.entries(call.configOptions)) {
+            const authored = displayValue(value);
+            if (id === "model") {
+                errors.push(`agent "${call.label}" configOptions option "model" authored value ${authored} is reserved; ` +
+                    `advertised alternatives: use the call's model field; option ids ${displayAlternatives(optionIds)}`);
+                continue;
+            }
+            const option = advertised.find((candidate) => candidate.id === id);
+            if (!option) {
+                errors.push(`agent "${call.label}" configOptions option ${JSON.stringify(id)} authored value ${authored} is unknown; ` +
+                    `advertised alternatives: option ids ${displayAlternatives(optionIds)}`);
+                continue;
+            }
+            if (option.type === "select") {
+                const choices = selectChoiceValues(option);
+                if (typeof value !== "string" || !choices.includes(value)) {
+                    errors.push(`agent "${call.label}" configOptions option ${JSON.stringify(id)} authored value ${authored} is not an advertised select value; ` +
+                        `advertised alternatives: ${displayAlternatives(choices)}`);
+                }
+                continue;
+            }
+            if (typeof value !== "boolean") {
+                errors.push(`agent "${call.label}" configOptions option ${JSON.stringify(id)} authored value ${authored} must be boolean; ` +
+                    "advertised alternatives: true, false");
+            }
+        }
     }
+    return errors;
+}
+function selectChoiceValues(option) {
+    return option.options.flatMap((entry) => ("options" in entry ? entry.options : [entry])).map((entry) => entry.value);
+}
+function displayValue(value) {
+    return JSON.stringify(value) ?? String(value);
+}
+function displayAlternatives(values) {
+    return values.length > 0 ? values.map((value) => JSON.stringify(value)).join(", ") : "(none advertised)";
 }
 /**
- * Validate a workflow script: parse it, then (by default) dry-run it against a mock
- * AgentRunner. Never throws for an invalid script — read `report.ok` / `report.exitCode`.
+ * Validate a workflow script: parse it, dry-run against a mock AgentRunner, then probe
+ * each routed harness's advertised config options. Never throws for an invalid script —
+ * read `report.ok` / `report.exitCode`.
  */
 export async function validateWorkflowScript(script, options = {}) {
     const mockAnswerState = options.mockAnswers === undefined ? undefined : normalizeMockAnswers(options.mockAnswers);
@@ -585,7 +688,11 @@ export async function validateWorkflowScript(script, options = {}) {
             warnings,
         };
     }
-    const declaredBackends = meta.backends && Object.keys(meta.backends).length > 0 ? meta.backends : undefined;
+    const declaredBackends = meta.backends && Object.keys(meta.backends).length > 0
+        ? meta.backends
+        : undefined;
+    const hostRegistry = resolveBackendRegistry();
+    const backendRegistry = registryWithRunBackends(hostRegistry, declaredBackends);
     if (declaredBackends) {
         warnings.push(`script declares custom backends (${Object.keys(declaredBackends).join(", ")}) — real runs must approve them ` +
             `(allowScriptBackends / exec.scriptBackends / AGENTPRISM_ALLOW_SCRIPT_BACKENDS=1); the dry run treats them as approved`);
@@ -608,6 +715,7 @@ export async function validateWorkflowScript(script, options = {}) {
             const metadata = {
                 tier: runOptions.tier,
                 mode: runOptions.mode,
+                configOptions: runOptions.configOptions,
                 schema: runOptions.schema !== undefined,
             };
             mockMeta.set(label, metadata);
@@ -615,8 +723,9 @@ export async function validateWorkflowScript(script, options = {}) {
             if (pendingCall) {
                 pendingCall.tier = metadata.tier;
                 pendingCall.mode = metadata.mode;
+                pendingCall.configOptions = metadata.configOptions;
                 pendingCall.schema = metadata.schema;
-                pendingCall.backend = attributeBackend(pendingCall.model, metadata.tier, declaredBackends);
+                pendingCall.backend = routeBackend(pendingCall.model, metadata.tier, backendRegistry, hostRegistry, declaredBackends).display;
             }
             const base = runOptions.schema === undefined ? undefined : fabricateFromSchema(runOptions.schema);
             const reservation = mockAnswerState ? reserveMockAnswer(mockAnswerState, label) : undefined;
@@ -669,7 +778,8 @@ export async function validateWorkflowScript(script, options = {}) {
             model: event.model,
             tier: extra.tier,
             mode: extra.mode,
-            backend: attributeBackend(event.model, extra.tier, declaredBackends),
+            configOptions: event.configOptions ?? extra.configOptions,
+            backend: routeBackend(event.model, extra.tier, backendRegistry, hostRegistry, declaredBackends).display,
             schema: extra.schema,
         };
         agentCalls.push(call);
@@ -702,17 +812,18 @@ export async function validateWorkflowScript(script, options = {}) {
                 if (extra) {
                     call.tier = extra.tier;
                     call.mode = extra.mode;
+                    call.configOptions = extra.configOptions;
                     call.schema = extra.schema;
-                    call.backend = attributeBackend(call.model, extra.tier, declaredBackends);
+                    call.backend = routeBackend(call.model, extra.tier, backendRegistry, hostRegistry, declaredBackends).display;
                 }
             }
         }
-        const ok = run.status === "completed";
-        if (!ok && flows === undefined && run.reason?.includes("must be the first statement") && /\bworkflow\s*\(/.test(script)) {
+        const runOk = run.status === "completed";
+        if (!runOk && flows === undefined && run.reason?.includes("must be the first statement") && /\bworkflow\s*\(/.test(script)) {
             warnings.push('the failure looks like a nested workflow("<name>") call on a bare name — provide workflow dirs ' +
                 "(ValidateWorkflowOptions.workflows / --workflows-dir) so names resolve during the dry run");
         }
-        if (ok) {
+        if (runOk) {
             if (agentCalls.length === 0 && checkpoints.length === 0) {
                 warnings.push("the script completed without a single agent() or checkpoint() call");
             }
@@ -733,6 +844,15 @@ export async function validateWorkflowScript(script, options = {}) {
         const mockAnswers = mockAnswerState ? buildMockAnswersReport(mockAnswerState) : undefined;
         if (mockAnswerState && mockAnswers)
             appendMockAnswerWarnings(mockAnswerState, mockAnswers, warnings);
+        const probed = await probeHarnessConfigOptions(agentCalls, baseCwd, backendRegistry, hostRegistry, declaredBackends, warnings);
+        const optionErrors = configOptionErrors(agentCalls, probed.catalogs, backendRegistry, hostRegistry, declaredBackends);
+        const ok = runOk && optionErrors.length === 0;
+        const runReason = timedOut ? `dry run exceeded ${timeoutMs}ms and was aborted` : run.reason;
+        const reason = optionErrors.length === 0
+            ? runReason
+            : [runReason, "configOptions validation failed:", ...optionErrors.map((error) => `- ${error}`)]
+                .filter(Boolean)
+                .join("\n");
         return {
             ok,
             exitCode: ok ? 0 : 2,
@@ -740,13 +860,14 @@ export async function validateWorkflowScript(script, options = {}) {
             dryRun: {
                 ok,
                 status: run.status,
-                reason: timedOut ? `dry run exceeded ${timeoutMs}ms and was aborted` : run.reason,
+                reason,
                 timedOut,
                 agentCalls,
                 checkpoints,
                 phasesVisited: run.phases ?? [],
                 logs: run.logs ?? [],
                 durationMs: run.durationMs,
+                harnessOptions: probed.harnessOptions,
                 result: run.result,
                 ...(mockAnswers ? { mockAnswers } : {}),
             },
@@ -803,6 +924,25 @@ export function formatValidateReport(report) {
                 .join("  ");
             lines.push(`    • ${call.label}  ${bits}`);
         }
+        lines.push("    advertised config options:");
+        for (const harness of dry.harnessOptions ?? []) {
+            if (!harness.probed) {
+                lines.push(`      ${harness.backendId}: probe failed — ${harness.error ?? "unknown error"}`);
+                continue;
+            }
+            lines.push(`      ${harness.backendId}:`);
+            lines.push("        id | type | current | choices");
+            if ((harness.options ?? []).length === 0) {
+                lines.push("        (none advertised)");
+                continue;
+            }
+            for (const option of harness.options ?? []) {
+                const choices = option.type === "select" ? displayAlternatives(selectChoiceValues(option)) : "true, false";
+                lines.push(`        ${option.id} | ${option.type} | ${displayValue(option.currentValue)} | ${choices}`);
+            }
+        }
+        if ((dry.harnessOptions ?? []).length === 0)
+            lines.push("      (no routed harnesses)");
         for (const cp of dry.checkpoints) {
             lines.push(`    ◆ checkpoint [${cp.kind}] "${truncate(cp.prompt, 60)}" → ${JSON.stringify(cp.reply)}`);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automatalabs/workflows",
-  "version": "0.30.1",
+  "version": "0.32.0",
   "license": "Apache-2.0",
   "engines": {
     "node": ">=22"
@@ -31,9 +31,9 @@
   },
   "dependencies": {
     "typebox": "1.3.2",
-    "@automatalabs/shared-types": "0.18.0",
-    "@automatalabs/workflow-engine": "0.19.1",
-    "@automatalabs/acp-agents": "0.25.0"
+    "@automatalabs/shared-types": "0.20.0",
+    "@automatalabs/workflow-engine": "0.21.0",
+    "@automatalabs/acp-agents": "0.26.0"
   },
   "scripts": {
     "build": "tsc -b",