@deepstrike/wasm 0.2.40 → 0.2.42

package/dist/index.d.ts

@@ -1,7 +1,8 @@
 export { RuntimeRunner, collectText, runAgent, runFanout, InMemorySessionLog, LocalExecutionPlane, DEFAULT_NATIVE_SIGNAL_POLICY, DEFAULT_NATIVE_GOVERNANCE_POLICY, DEFAULT_SANDBOX_POLICY, assertNativeProfile, osProfile, validateDeclarativePolicy, ReplayProvider, extractRecordedMessages, judge, buildEvalMessages, parseVerdict, verdictOutputSchema, } from "./runtime/index.js";
 export * from "./runtime/kernel-transaction-log.js";
 export type { ReplayProviderOpts, Criterion, Verdict, VerdictDetail, JudgeArgs, } from "./runtime/index.js";
-export type { NativeOsProfile, OsProfileId, MemoryPolicy, MemoryWriteRateLimit, ResourceQuota, RuntimeOptions, PromptBudget, SchedulerPolicy, SignalPolicy, SessionEvent, SessionLog, KernelTransactionEntry, RunContext, ExecutionPlane, } from "./runtime/index.js";
+export type { NativeOsProfile, OsProfileId, MemoryPolicy, MemoryWriteRateLimit, ResourceQuota, RuntimeOptions, PromptBudget, SchedulerPolicy, SignalPolicy, SessionEvent, SessionLog, KernelTransactionEntry, RunContext, ExecutionPlane, KernelEventCategory, KernelPrimitive, } from "./runtime/index.js";
+export { primitiveForCategory, primitiveForKind } from "./runtime/index.js";
 export { FilteredExecutionPlane } from "./runtime/filtered-plane.js";
 export { SubAgentOrchestrator, defaultSubAgentOrchestrator, spawnStandalone } from "./runtime/sub-agent-orchestrator.js";
 export type { SubAgentRunContext } from "./runtime/sub-agent-orchestrator.js";
@@ -20,6 +21,9 @@ export { WorkingMemory } from "./memory/index.js";
 export { InMemoryDreamStore } from "./memory/in-memory-store.js";
 export type { InMemoryDreamStoreOptions } from "./memory/in-memory-store.js";
 export { memoryRetentionScore } from "./memory/retention.js";
+export { rankMemories } from "./memory/ranking.js";
+export type { RankableMemory, RankedMemory, RankOptions } from "./memory/ranking.js";
+export { extractSessionMemories, parseExtractedMemories } from "./memory/extraction.js";
 export type { DreamStore, SessionStore, SessionData, SessionMessage, MemoryRecord, MemoryRecall, MemoryRecallLifecycle, MemoryQuery, MemoryScope, MemoryProvenance, MemoryKind, MemoryAuthor, MemoryTrustLevel, } from "./memory/index.js";
 export type { KnowledgeSource } from "./knowledge/index.js";
 export { AttemptLoop, RuntimeAttemptBody, VerdictFnJudge, LlmEvalJudge, HybridJudge, continueSession, freshWithFeedback, freshWithDigest, } from "./harness/index.js";

package/dist/index.js

@@ -1,5 +1,6 @@
 export { RuntimeRunner, collectText, runAgent, runFanout, InMemorySessionLog, LocalExecutionPlane, DEFAULT_NATIVE_SIGNAL_POLICY, DEFAULT_NATIVE_GOVERNANCE_POLICY, DEFAULT_SANDBOX_POLICY, assertNativeProfile, osProfile, validateDeclarativePolicy, ReplayProvider, extractRecordedMessages, judge, buildEvalMessages, parseVerdict, verdictOutputSchema, } from "./runtime/index.js";
 export * from "./runtime/kernel-transaction-log.js";
+export { primitiveForCategory, primitiveForKind } from "./runtime/index.js";
 export { FilteredExecutionPlane } from "./runtime/filtered-plane.js";
 export { SubAgentOrchestrator, defaultSubAgentOrchestrator, spawnStandalone } from "./runtime/sub-agent-orchestrator.js";
 export { workflowSpecToKernel, workflowNodeSpecToKernel, submitWorkflowNodesToKernel, submitWorkflowToKernel, submitWorkflowNodesTool, startWorkflowTool, fanoutSynthesize, generateAndFilter, genEval, verifyRules } from "./runtime/types/agent.js";
@@ -12,6 +13,8 @@ export { safeTool, ok, fail, ToolError, formatToolError } from "./tools/errors.j
 export { WorkingMemory } from "./memory/index.js";
 export { InMemoryDreamStore } from "./memory/in-memory-store.js";
 export { memoryRetentionScore } from "./memory/retention.js";
+export { rankMemories } from "./memory/ranking.js";
+export { extractSessionMemories, parseExtractedMemories } from "./memory/extraction.js";
 export { AttemptLoop, RuntimeAttemptBody, VerdictFnJudge, LlmEvalJudge, HybridJudge, continueSession, freshWithFeedback, freshWithDigest, } from "./harness/index.js";
 export { ScheduledPrompt } from "./signals/index.js";
 export { PermissionManager, PermissionMode } from "./safety/index.js";

package/dist/memory/ranking.d.ts

@@ -1,4 +1,4 @@
-interface RankableMemory<T> {
+export interface RankableMemory<T> {
     value: T;
     searchableText: string;
     updatedAt: number;
@@ -30,4 +30,3 @@ export interface RankOptions {
  * The score is relevance, deliberately distinct from the record's stored confidence.
  */
 export declare function rankMemories<T>(query: string, candidates: Array<RankableMemory<T>>, topK: number, opts?: RankOptions): Array<RankedMemory<T>>;
-export {};

package/dist/runtime/index.d.ts

@@ -23,3 +23,5 @@ export { judge, buildEvalMessages, parseVerdict, verdictOutputSchema } from "./e
 export type { Criterion, Verdict, VerdictDetail, JudgeArgs } from "./eval.js";
 export { DEFAULT_NATIVE_SIGNAL_POLICY, DEFAULT_NATIVE_GOVERNANCE_POLICY, DEFAULT_SANDBOX_POLICY, assertNativeProfile, osProfile, validateDeclarativePolicy, } from "./os-profile.js";
 export type { NativeOsProfile, OsProfileId, SignalPolicy } from "./os-profile.js";
+export type { KernelEventCategory, KernelPrimitive } from "./kernel-event-log.js";
+export { primitiveForCategory, primitiveForKind } from "./kernel-event-log.js";

package/dist/runtime/index.js

@@ -12,3 +12,4 @@ export { ReplayProvider } from "./replay-provider.js";
 export { extractRecordedMessages } from "./replay-fixture.js";
 export { judge, buildEvalMessages, parseVerdict, verdictOutputSchema } from "./eval.js";
 export { DEFAULT_NATIVE_SIGNAL_POLICY, DEFAULT_NATIVE_GOVERNANCE_POLICY, DEFAULT_SANDBOX_POLICY, assertNativeProfile, osProfile, validateDeclarativePolicy, } from "./os-profile.js";
+export { primitiveForCategory, primitiveForKind } from "./kernel-event-log.js";

package/dist/runtime/kernel-step.d.ts

@@ -160,6 +160,8 @@ export type KernelRunnerAction = {
 };
 export interface KernelObservation {
     kind: string;
+    operation?: string;
+    subject?: string;
     action?: string;
     rho_after?: number;
     sprint?: number;

package/dist/runtime/runner.d.ts

@@ -22,6 +22,8 @@ export interface ResourceQuota {
     maxConcurrentSubagents?: number;
     /** Max sub-agent nesting depth (direct children of the root loop are depth 1). */
     maxSpawnDepth?: number;
+    /** Max nodes in one in-kernel workflow DAG, including dynamically submitted nodes. */
+    maxWorkflowNodes?: number;
     /** Rolling-window memory-write rate limit: at most `maxWrites` per any `windowMs` span. */
     memoryWritesPerWindow?: MemoryWriteRateLimit;
 }

package/dist/runtime/runner.js

@@ -41,6 +41,17 @@ function pendingCallIds(action) {
         default: return "effectId" in action ? [action.effectId] : [];
     }
 }
+function controlRequestRejection(observations, operation) {
+    const rejected = observations.find(observation => observation.kind === "control_request_rejected"
+        && (!operation || observation.operation === operation));
+    if (!rejected)
+        return undefined;
+    return {
+        operation: rejected.operation ?? operation ?? "control_request",
+        ...(rejected.subject ? { subject: rejected.subject } : {}),
+        reason: typeof rejected.reason === "string" ? rejected.reason : "request denied",
+    };
+}
 export class RuntimeRunner {
     opts;
     interrupted = false;
@@ -869,7 +880,7 @@ export class RuntimeRunner {
                             const spec = parseStartWorkflowSpec(call.arguments);
                             if (spec) {
                                 this.pendingAuthoredWorkflows.push(spec);
-                                const out = "workflow authored; executing now";
+                                const out = "workflow submitted for governance adjudication";
                                 toolResults.push({ callId: call.id, output: out, isError: false });
                                 yield { type: "tool_result", callId: call.id, content: out, isError: false };
                                 continue;
@@ -879,8 +890,9 @@ export class RuntimeRunner {
                             ? parseStartWorkflowArgs(call.arguments)
                             : parseSubmitWorkflowNodesArgs(call.arguments);
                         yield { type: "workflow_nodes_submitted", nodes };
-                        toolResults.push({ callId: call.id, output: "submitted", isError: false });
-                        yield { type: "tool_result", callId: call.id, content: "submitted", isError: false };
+                        const out = "workflow nodes submitted for parent governance adjudication";
+                        toolResults.push({ callId: call.id, output: out, isError: false });
+                        yield { type: "tool_result", callId: call.id, content: out, isError: false };
                     }
                     // O5 (PreToolUse-hook analog): stateful host veto over each kernel-approved call.
                     // A blocked call never executes; its reason reaches the model as a denied result.
@@ -1189,8 +1201,25 @@ export class RuntimeRunner {
         });
         this.nextArchiveStart = await this.appendObservations(parentSessionId, runtime, this.nextArchiveStart);
         const spawned = findSpawnProcessObservation(observations);
-        if (!spawned)
+        if (!spawned) {
+            const rejected = controlRequestRejection(observations, "spawn_sub_agent");
+            if (rejected) {
+                return {
+                    agentId: rejected.subject ?? spec.identity.agentId,
+                    result: {
+                        termination: "error",
+                        finalMessage: {
+                            role: "assistant",
+                            content: `spawn_sub_agent denied: ${rejected.reason}`,
+                            toolCalls: [],
+                        },
+                        turnsUsed: 0,
+                        totalTokensUsed: 0,
+                    },
+                };
+            }
             throw new Error("spawn_sub_agent did not emit agent_process_changed");
+        }
         const manifest = spawnObservationToManifest(spawned, spec, parentSessionId);
         const orchestrator = this.opts.subAgentOrchestrator ?? defaultSubAgentOrchestrator;
         const result = await orchestrator.run({
@@ -1392,6 +1421,7 @@ export class RuntimeRunner {
             config.resource_quota = {
                 ...(q.maxConcurrentSubagents !== undefined ? { max_concurrent_subagents: q.maxConcurrentSubagents } : {}),
                 ...(q.maxSpawnDepth !== undefined ? { max_spawn_depth: q.maxSpawnDepth } : {}),
+                ...(q.maxWorkflowNodes !== undefined ? { max_workflow_nodes: q.maxWorkflowNodes } : {}),
                 ...(q.memoryWritesPerWindow !== undefined
                     ? { memory_writes_per_window: [q.memoryWritesPerWindow.maxWrites, q.memoryWritesPerWindow.windowMs] }
                     : {}),
@@ -1641,6 +1671,11 @@ export class RuntimeRunner {
         }
         if (!initialAction)
             return { nodeOutcomes: [], outputs: {} };
+        const workflowRejection = controlRequestRejection(observations);
+        if (initialAction.kind === "call_provider" && workflowRejection) {
+            this.workflowContinuation = initialAction;
+            return { nodeOutcomes: [], outputs: {}, rejection: workflowRejection };
+        }
         if (initialAction.kind !== "spawn_workflow") {
             throw new Error(`workflow load returned unexpected kernel effect: ${initialAction.kind}`);
         }
@@ -1687,6 +1722,22 @@ export class RuntimeRunner {
                     const observationStart = this.pendingObservations.length;
                     const submitAction = kernelMaybeAction(runtime, this.pendingObservations, submitEvent);
                     const subObs = this.pendingObservations.slice(observationStart);
+                    const nodesRejected = subObs.find(observation => observation.kind === "nodes_rejected");
+                    const rejected = controlRequestRejection(subObs, "submit_workflow_nodes")
+                        ?? (nodesRejected
+                            ? { operation: "submit_workflow_nodes", reason: String(nodesRejected.reason ?? "request denied") }
+                            : undefined);
+                    if (rejected) {
+                        const denial = `workflow node submission denied: ${rejected.reason}`;
+                        result.result = {
+                            ...result.result,
+                            termination: "error",
+                            finalMessage: { role: "assistant", content: denial, toolCalls: [] },
+                        };
+                        outputs.set(result.agentId, denial);
+                        if (stableId !== result.agentId)
+                            outputs.set(stableId, denial);
+                    }
                     if (submitAction?.kind === "spawn_workflow") {
                         nextNodes.push(...submitAction.nodes);
                         budget = submitAction.budget ?? budget;

package/dist/runtime/types/agent.d.ts

@@ -196,9 +196,15 @@ export interface WorkflowNodeOutcome {
     termination?: TerminationReason;
     output?: Message;
 }
+export interface ControlRequestRejection {
+    operation: string;
+    subject?: string;
+    reason: string;
+}
 export interface WorkflowOutcome {
     nodeOutcomes: WorkflowNodeOutcome[];
     outputs: Record<string, string>;
+    rejection?: ControlRequestRejection;
 }
 export declare function workflowNodeOutcomeFromKernel(raw: KernelWorkflowNodeOutcome): WorkflowNodeOutcome;
 /** Per-node spawn descriptor carried in the `workflow_batch_spawned` observation. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepstrike/wasm",
-  "version": "0.2.40",
+  "version": "0.2.42",
   "description": "DeepStrike WASM SDK — browser, Cloudflare Workers, Deno Deploy",
   "type": "module",
   "main": "dist/index.js",
@@ -15,7 +15,7 @@
     "test": "node --experimental-vm-modules node_modules/.bin/jest"
   },
   "dependencies": {
-    "@deepstrike/wasm-kernel": "0.2.40"
+    "@deepstrike/wasm-kernel": "0.2.42"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",