@enderfga/claw-orchestrator 5.1.0 → 6.0.0

package/dist/src/verify/evidence.js

@@ -0,0 +1,133 @@
+/**
+ * Evidence bundles — the machine-readable record of what was checked.
+ *
+ * A run's claim to be finished is only as good as what can be re-read after the
+ * process that made it is gone. So every verifier attempt writes a directory:
+ * the verdict and per-check results as JSON, the failure tails as plain text,
+ * whatever files the checks produced (screenshots), and the patch the run
+ * actually made, against the base commit recorded when it started.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { exec } from '../kernel/exec.js';
+import { capturePatch, changedFilesSince, treeFingerprint } from './baseline.js';
+import { contractPassed } from './contract.js';
+export function evidenceRoot(runDir) {
+    return path.join(runDir, 'evidence');
+}
+export function evidenceDir(runDir, evidenceId) {
+    return path.join(evidenceRoot(runDir), evidenceId);
+}
+/** `<node>-<attempt>` — stable, sortable, and readable in a ledger row. */
+export function makeEvidenceId(node, attempt) {
+    return `${node.replace(/[^\w.-]/g, '_')}-${String(attempt).padStart(2, '0')}`;
+}
+/**
+ * Write the bundle. Best-effort like the run ledger: a bundle that fails to land
+ * must not change the verdict it is describing — the verdict is already decided
+ * by `results`.
+ */
+export async function writeEvidence(args) {
+    const dir = evidenceDir(args.runDir, args.evidenceId);
+    const head = await exec('git', ['-C', args.cwd, 'rev-parse', 'HEAD'], { timeoutMs: 60_000 });
+    const headSha = head.code === 0 ? head.out.trim() : undefined;
+    let changedFiles = [];
+    try {
+        changedFiles = await changedFilesSince(args.cwd, args.baseSha);
+    }
+    catch (e) {
+        args.logger?.warn?.(`[evidence] change listing failed: ${e.message}`);
+    }
+    const bundle = {
+        evidenceId: args.evidenceId,
+        runId: args.runId,
+        node: args.node,
+        contractId: args.contractId,
+        createdAt: new Date().toISOString(),
+        cwd: args.cwd,
+        baseSha: args.baseSha,
+        headSha,
+        passed: contractPassed(args.results),
+        rounds: args.rounds,
+        results: args.results,
+        changedFiles,
+        treeFingerprint: await treeFingerprint(args.cwd),
+    };
+    try {
+        fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(path.join(dir, 'bundle.json'), JSON.stringify(bundle, null, 2));
+        const logDir = path.join(dir, 'checks');
+        let wroteLog = false;
+        for (const r of args.results) {
+            if (!r.tail)
+                continue;
+            if (!wroteLog) {
+                fs.mkdirSync(logDir, { recursive: true });
+                wroteLog = true;
+            }
+            fs.writeFileSync(path.join(logDir, `${r.id.replace(/[^\w.-]/g, '_')}.log`), r.tail);
+        }
+        try {
+            const patch = await capturePatch(args.cwd, args.baseSha);
+            if (patch.trim())
+                fs.writeFileSync(path.join(dir, 'diff.patch'), patch);
+        }
+        catch (e) {
+            args.logger?.warn?.(`[evidence] patch capture failed: ${e.message}`);
+        }
+    }
+    catch (e) {
+        args.logger?.warn?.(`[evidence] write failed: ${e.message}`);
+    }
+    return bundle;
+}
+export function readEvidence(runDir, evidenceId) {
+    try {
+        const raw = fs.readFileSync(path.join(evidenceDir(runDir, evidenceId), 'bundle.json'), 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function listEvidence(runDir) {
+    try {
+        return fs
+            .readdirSync(evidenceRoot(runDir), { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            .map((d) => d.name)
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+/** Render a bundle for the CLI. Pure — no I/O. */
+export function formatEvidence(bundle) {
+    const lines = [];
+    lines.push(`evidence ${bundle.evidenceId}  (${bundle.passed ? 'PASSED' : 'FAILED'})`);
+    lines.push(`run ${bundle.runId} · node ${bundle.node} · ${bundle.createdAt}`);
+    if (bundle.baseSha) {
+        lines.push(`base ${bundle.baseSha.slice(0, 12)}${bundle.headSha ? ` → head ${bundle.headSha.slice(0, 12)}` : ''}`);
+    }
+    if (bundle.rounds > 0)
+        lines.push(`${bundle.rounds} fix round(s) consumed`);
+    lines.push('');
+    for (const r of bundle.results) {
+        const mark = r.passed ? 'PASS' : r.required ? 'FAIL' : 'warn';
+        lines.push(`  [${mark}] ${r.id} (${r.type})  ${r.detail}`);
+        if (r.artifacts?.length)
+            lines.push(`         artifacts: ${r.artifacts.join(', ')}`);
+    }
+    if (bundle.changedFiles.length > 0) {
+        lines.push('');
+        lines.push(`changed files (${bundle.changedFiles.length}):`);
+        for (const f of bundle.changedFiles.slice(0, 40)) {
+            lines.push(`  ${f.status.padEnd(9)} +${f.insertions} -${f.deletions}  ${f.path}`);
+        }
+        if (bundle.changedFiles.length > 40)
+            lines.push(`  … ${bundle.changedFiles.length - 40} more`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=evidence.js.map

package/dist/src/verify/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/verify/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAoB,MAAM,eAAe,CAAC;AACnG,OAAO,EAAE,cAAc,EAAoB,MAAM,eAAe,CAAC;AA0BjE,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,UAAkB;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAC1D,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAChF,CAAC;AAeD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9D,IAAI,YAAY,GAAkB,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,qCAAsC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO;QACP,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY;QACZ,eAAe,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;KACjD,CAAC;IAEF,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,SAAS;YACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,IAAI,EAAE;gBAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,oCAAqC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,4BAA6B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,UAAkB;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,CAAC;QACH,OAAO,EAAE;aACN,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC1D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,wBAAwB,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/verify/runner.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The check runner — the part of the runtime that actually looks.
+ *
+ * Extracted and generalised from `ultraapp/fix-on-failure.ts`, which was the one
+ * piece of real verification in the codebase but was private to ultraapp,
+ * hardcoded to an npm/docker step list, and had two defects this module fixes:
+ *
+ *  1. No timeout. A wedged `npm test` hung the pipeline forever.
+ *  2. `steps[].required` was declared in the type and never read — every step
+ *     was fatal. Here a non-required failure is recorded and carries on.
+ *
+ * What is kept: the injectable runner seam (so tests drive it without spawning),
+ * the byte-capped tail, and the fix-on-red retry loop.
+ */
+import type { Logger } from '../logger.js';
+import { type ExecResult } from '../kernel/exec.js';
+import { type AcceptanceContract, type CheckResult } from './contract.js';
+export type ExecFn = (cmd: string, args: string[], opts: {
+    cwd?: string;
+    timeoutMs?: number;
+}) => Promise<ExecResult>;
+export interface FixerArgs {
+    cwd: string;
+    failingCheck: string;
+    tail: string;
+    round: number;
+}
+export type FixerSpawner = (args: FixerArgs) => Promise<void>;
+export interface VerifyContext {
+    cwd: string;
+    /** Directory for check-produced files (screenshots). Created on demand. */
+    artifactDir: string;
+    baseSha?: string;
+    exec?: ExecFn;
+    fetchFn?: typeof fetch;
+    logger?: Logger;
+    /** Aborts the run between checks. */
+    signal?: {
+        aborted: boolean;
+    };
+}
+export interface ContractRunResult {
+    results: CheckResult[];
+    passed: boolean;
+    /** Fix rounds consumed. 0 means it went green first try (or there was no fixer). */
+    rounds: number;
+}
+/**
+ * Run every check once, in order. Unlike the predecessor pipeline this does not
+ * stop at the first red: a full result set is far more useful in an evidence
+ * bundle than "the first thing that broke", and non-required checks must run
+ * regardless. Required failures short-circuit only the *remaining required*
+ * command checks when `stopOnRequiredFailure` is set.
+ */
+export declare function runChecks(contract: AcceptanceContract, ctx: VerifyContext, opts?: {
+    stopOnRequiredFailure?: boolean;
+}): Promise<CheckResult[]>;
+/**
+ * Run the contract, and on red optionally hand the failure to a fixer agent and
+ * run the whole list again. The fixer's own claim of success is ignored — only
+ * the re-run decides, which is what made the ultraapp version trustworthy.
+ */
+export declare function runContract(contract: AcceptanceContract, ctx: VerifyContext, spawnFixer?: FixerSpawner): Promise<ContractRunResult>;

package/dist/src/verify/runner.js

@@ -0,0 +1,317 @@
+/**
+ * The check runner — the part of the runtime that actually looks.
+ *
+ * Extracted and generalised from `ultraapp/fix-on-failure.ts`, which was the one
+ * piece of real verification in the codebase but was private to ultraapp,
+ * hardcoded to an npm/docker step list, and had two defects this module fixes:
+ *
+ *  1. No timeout. A wedged `npm test` hung the pipeline forever.
+ *  2. `steps[].required` was declared in the type and never read — every step
+ *     was fatal. Here a non-required failure is recorded and carries on.
+ *
+ * What is kept: the injectable runner seam (so tests drive it without spawning),
+ * the byte-capped tail, and the fix-on-red retry loop.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { exec as realExec, lastLines } from '../kernel/exec.js';
+import { changedFilesSince, isUnder, resolveIn } from './baseline.js';
+import { contractPassed, DEFAULT_CHECK_TIMEOUT_MS, DEFAULT_HTTP_TIMEOUT_MS, DEFAULT_SCREENSHOT_TIMEOUT_MS, } from './contract.js';
+const TAIL_LINES = 200;
+// ─── Individual check kinds ─────────────────────────────────────────────────
+async function runCommandCheck(spec, ctx) {
+    const run = ctx.exec ?? realExec;
+    const cwd = spec.cwd ? resolveIn(ctx.cwd, spec.cwd) : ctx.cwd;
+    const r = await run(spec.cmd, spec.args ?? [], { cwd, timeoutMs: spec.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS });
+    const cmdline = [spec.cmd, ...(spec.args ?? [])].join(' ');
+    const expect = spec.expectExit ?? 0;
+    const passed = r.code === expect;
+    return {
+        passed,
+        durationMs: r.durationMs,
+        timedOut: r.timedOut,
+        detail: r.timedOut
+            ? `\`${cmdline}\` timed out after ${spec.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS}ms`
+            : passed
+                ? `\`${cmdline}\` exited ${r.code}`
+                : `\`${cmdline}\` exited ${r.code}, expected ${expect}`,
+        tail: passed ? undefined : lastLines(r.err || r.out, TAIL_LINES),
+    };
+}
+async function runHttpCheck(spec, ctx) {
+    // Same shape as ultraapp's waitForHealth: poll until the deadline rather than
+    // failing on the first refused connection, because the thing under test is
+    // usually still coming up.
+    const doFetch = ctx.fetchFn ?? fetch;
+    const expect = spec.expectStatus ?? 200;
+    const timeoutMs = spec.timeoutMs ?? DEFAULT_HTTP_TIMEOUT_MS;
+    const intervalMs = spec.intervalMs ?? 1000;
+    const startedAt = Date.now();
+    let lastDetail = 'never reached';
+    while (Date.now() - startedAt < timeoutMs) {
+        if (ctx.signal?.aborted)
+            break;
+        try {
+            const res = await doFetch(spec.url);
+            if (res.status === expect) {
+                return { passed: true, durationMs: Date.now() - startedAt, detail: `GET ${spec.url} → ${res.status}` };
+            }
+            lastDetail = `GET ${spec.url} → ${res.status}, expected ${expect}`;
+        }
+        catch (e) {
+            lastDetail = `GET ${spec.url} → ${e.message}`;
+        }
+        await new Promise((r) => setTimeout(r, intervalMs));
+    }
+    return {
+        passed: false,
+        durationMs: Date.now() - startedAt,
+        detail: `${lastDetail} (gave up after ${timeoutMs}ms)`,
+        timedOut: true,
+    };
+}
+const CHROME_CANDIDATES = [
+    process.env.CLAWO_CHROME_BIN,
+    '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+    '/Applications/Chromium.app/Contents/MacOS/Chromium',
+    'google-chrome',
+    'chromium',
+    'chromium-browser',
+].filter((x) => Boolean(x));
+function onPath(name) {
+    for (const dir of (process.env.PATH || '').split(path.delimiter)) {
+        if (!dir)
+            continue;
+        const candidate = path.join(dir, name);
+        try {
+            if (fs.existsSync(candidate))
+                return candidate;
+        }
+        catch {
+            // Unreadable PATH entry — keep looking.
+        }
+    }
+    return undefined;
+}
+/**
+ * Resolve a browser, checking PATH for bare names rather than handing them to
+ * spawn and hoping. A host with no Chrome should be told so immediately; letting
+ * the spawn fail means paying the check's full timeout to learn it.
+ */
+function resolveChrome(explicit) {
+    if (explicit)
+        return explicit;
+    for (const c of CHROME_CANDIDATES) {
+        if (c.includes('/')) {
+            if (fs.existsSync(c))
+                return c;
+        }
+        else {
+            const resolved = onPath(c);
+            if (resolved)
+                return resolved;
+        }
+    }
+    return undefined;
+}
+async function runScreenshotCheck(spec, ctx) {
+    const run = ctx.exec ?? realExec;
+    const bin = resolveChrome(spec.browserBin);
+    const startedAt = Date.now();
+    if (!bin) {
+        return { passed: false, durationMs: 0, detail: 'no Chrome/Chromium binary found (set CLAWO_CHROME_BIN)' };
+    }
+    fs.mkdirSync(ctx.artifactDir, { recursive: true });
+    const artifacts = [];
+    const failures = [];
+    for (const vp of spec.viewports) {
+        const label = vp.label || `${vp.width}x${vp.height}`;
+        const file = path.join(ctx.artifactDir, `shot-${label.replace(/[^\w.-]/g, '_')}.png`);
+        const r = await run(bin, [
+            '--headless=new',
+            '--disable-gpu',
+            '--hide-scrollbars',
+            `--window-size=${vp.width},${vp.height}`,
+            '--virtual-time-budget=4000',
+            `--screenshot=${file}`,
+            spec.url,
+        ], { cwd: ctx.cwd, timeoutMs: spec.timeoutMs ?? DEFAULT_SCREENSHOT_TIMEOUT_MS });
+        // Chrome's exit code is unreliable in headless screenshot mode; the file
+        // landing on disk with content is the signal that matters.
+        let bytes = 0;
+        try {
+            bytes = fs.statSync(file).size;
+        }
+        catch {
+            bytes = 0;
+        }
+        if (bytes > 0) {
+            artifacts.push(path.basename(file));
+        }
+        else {
+            failures.push(`${label}: no image produced (${r.timedOut ? 'timed out' : `exit ${r.code}`})`);
+        }
+    }
+    return {
+        passed: failures.length === 0,
+        durationMs: Date.now() - startedAt,
+        detail: failures.length === 0
+            ? `captured ${artifacts.length} screenshot(s) of ${spec.url}`
+            : `screenshot capture failed — ${failures.join('; ')}`,
+        artifacts,
+    };
+}
+async function runDiffPolicyCheck(spec, ctx) {
+    const startedAt = Date.now();
+    const changed = await changedFilesSince(ctx.cwd, ctx.baseSha);
+    const problems = [];
+    if (spec.maxFiles !== undefined && changed.length > spec.maxFiles) {
+        problems.push(`${changed.length} files changed, limit ${spec.maxFiles}`);
+    }
+    for (const prefix of spec.forbidPaths ?? []) {
+        const hits = changed.filter((f) => isUnder(f.path, prefix)).map((f) => f.path);
+        if (hits.length > 0)
+            problems.push(`forbidden path ${prefix} touched: ${hits.slice(0, 5).join(', ')}`);
+    }
+    if (spec.requirePaths && spec.requirePaths.length > 0) {
+        const any = changed.some((f) => spec.requirePaths.some((p) => isUnder(f.path, p)));
+        if (!any)
+            problems.push(`no change under any of: ${spec.requirePaths.join(', ')}`);
+    }
+    return {
+        passed: problems.length === 0,
+        durationMs: Date.now() - startedAt,
+        detail: problems.length === 0 ? `${changed.length} file(s) changed, policy satisfied` : problems.join('; '),
+        tail: problems.length === 0 ? undefined : changed.map((f) => `${f.status} ${f.path}`).join('\n'),
+    };
+}
+function runFileCheck(spec, ctx) {
+    const startedAt = Date.now();
+    const target = resolveIn(ctx.cwd, spec.path);
+    const shouldExist = spec.exists !== false;
+    let exists = false;
+    try {
+        exists = fs.existsSync(target);
+    }
+    catch {
+        exists = false;
+    }
+    if (exists !== shouldExist) {
+        return {
+            passed: false,
+            durationMs: Date.now() - startedAt,
+            detail: shouldExist ? `${spec.path} is missing` : `${spec.path} exists but must not`,
+        };
+    }
+    if (exists && spec.matches) {
+        let body = '';
+        try {
+            body = fs.readFileSync(target, 'utf8');
+        }
+        catch (e) {
+            return {
+                passed: false,
+                durationMs: Date.now() - startedAt,
+                detail: `${spec.path} unreadable: ${e.message}`,
+            };
+        }
+        let re;
+        try {
+            re = new RegExp(spec.matches);
+        }
+        catch (e) {
+            return { passed: false, durationMs: Date.now() - startedAt, detail: `invalid matcher: ${e.message}` };
+        }
+        if (!re.test(body)) {
+            return {
+                passed: false,
+                durationMs: Date.now() - startedAt,
+                detail: `${spec.path} does not match /${spec.matches}/`,
+            };
+        }
+    }
+    return { passed: true, durationMs: Date.now() - startedAt, detail: `${spec.path} ok` };
+}
+// ─── Orchestration ──────────────────────────────────────────────────────────
+async function runOne(check, index, ctx) {
+    const id = check.id || `${check.spec.type}-${index + 1}`;
+    const required = check.required !== false;
+    const base = { id, type: check.spec.type, required };
+    switch (check.spec.type) {
+        case 'command':
+            return { ...base, ...(await runCommandCheck(check.spec, ctx)) };
+        case 'http':
+            return { ...base, ...(await runHttpCheck(check.spec, ctx)) };
+        case 'screenshot':
+            return { ...base, ...(await runScreenshotCheck(check.spec, ctx)) };
+        case 'diff_policy':
+            return { ...base, ...(await runDiffPolicyCheck(check.spec, ctx)) };
+        case 'file':
+            return { ...base, ...runFileCheck(check.spec, ctx) };
+    }
+}
+/**
+ * Run every check once, in order. Unlike the predecessor pipeline this does not
+ * stop at the first red: a full result set is far more useful in an evidence
+ * bundle than "the first thing that broke", and non-required checks must run
+ * regardless. Required failures short-circuit only the *remaining required*
+ * command checks when `stopOnRequiredFailure` is set.
+ */
+export async function runChecks(contract, ctx, opts = {}) {
+    const results = [];
+    for (let i = 0; i < contract.checks.length; i++) {
+        if (ctx.signal?.aborted)
+            break;
+        const check = contract.checks[i];
+        if (opts.stopOnRequiredFailure && results.some((r) => r.required && !r.passed) && check.required !== false) {
+            results.push({
+                id: check.id || `${check.spec.type}-${i + 1}`,
+                type: check.spec.type,
+                required: true,
+                passed: false,
+                durationMs: 0,
+                detail: 'skipped — an earlier required check failed',
+            });
+            continue;
+        }
+        try {
+            results.push(await runOne(check, i, ctx));
+        }
+        catch (e) {
+            results.push({
+                id: check.id || `${check.spec.type}-${i + 1}`,
+                type: check.spec.type,
+                required: check.required !== false,
+                passed: false,
+                durationMs: 0,
+                detail: `check threw: ${e.message}`,
+            });
+        }
+    }
+    return results;
+}
+/**
+ * Run the contract, and on red optionally hand the failure to a fixer agent and
+ * run the whole list again. The fixer's own claim of success is ignored — only
+ * the re-run decides, which is what made the ultraapp version trustworthy.
+ */
+export async function runContract(contract, ctx, spawnFixer) {
+    const maxRounds = spawnFixer ? (contract.fixOnFailureRounds ?? 0) : 0;
+    let rounds = 0;
+    for (;;) {
+        const results = await runChecks(contract, ctx);
+        if (contractPassed(results) || rounds >= maxRounds || ctx.signal?.aborted) {
+            return { results, passed: contractPassed(results), rounds };
+        }
+        const failed = results.find((r) => r.required && !r.passed);
+        rounds++;
+        ctx.logger?.info?.(`[verify] round ${rounds}/${maxRounds} — fixing: ${failed?.detail ?? 'unknown'}`);
+        await spawnFixer({
+            cwd: ctx.cwd,
+            failingCheck: failed?.detail ?? 'unknown',
+            tail: failed?.tail ?? '',
+            round: rounds,
+        });
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/src/verify/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/verify/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,uBAAuB,EACvB,6BAA6B,GAK9B,MAAM,eAAe,CAAC;AAgCvB,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,+EAA+E;AAE/E,KAAK,UAAU,eAAe,CAC5B,IAA6C,EAC7C,GAAkB;IAElB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,wBAAwB,EAAE,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;IACjC,OAAO;QACL,MAAM;QACN,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,QAAQ;YAChB,CAAC,CAAC,KAAK,OAAO,sBAAsB,IAAI,CAAC,SAAS,IAAI,wBAAwB,IAAI;YAClF,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,KAAK,OAAO,aAAa,CAAC,CAAC,IAAI,EAAE;gBACnC,CAAC,CAAC,KAAK,OAAO,aAAa,CAAC,CAAC,IAAI,cAAc,MAAM,EAAE;QAC3D,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAA0C,EAC1C,GAAkB;IAElB,8EAA8E;IAC9E,2EAA2E;IAC3E,2BAA2B;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,UAAU,GAAG,eAAe,CAAC;IAEjC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACzG,CAAC;YACD,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,cAAc,MAAM,EAAE,CAAC;QACrE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAClC,MAAM,EAAE,GAAG,UAAU,mBAAmB,SAAS,KAAK;QACtD,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG;IACxB,OAAO,CAAC,GAAG,CAAC,gBAAgB;IAC5B,8DAA8D;IAC9D,oDAAoD;IACpD,eAAe;IACf,UAAU;IACV,kBAAkB;CACnB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzC,SAAS,MAAM,CAAC,IAAY;IAC1B,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,QAAiB;IACtC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAgD,EAChD,GAAkB;IAElB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC;IACjC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IAC5G,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,MAAM,GAAG,CACjB,GAAG,EACH;YACE,gBAAgB;YAChB,eAAe;YACf,mBAAmB;YACnB,iBAAiB,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE;YACxC,4BAA4B;YAC5B,gBAAgB,IAAI,EAAE;YACtB,IAAI,CAAC,GAAG;SACT,EACD,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,6BAA6B,EAAE,CAC7E,CAAC;QACF,yEAAyE;QACzE,2DAA2D;QAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAClC,MAAM,EACJ,QAAQ,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,CAAC,YAAY,SAAS,CAAC,MAAM,qBAAqB,IAAI,CAAC,GAAG,EAAE;YAC7D,CAAC,CAAC,+BAA+B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1D,SAAS;KACV,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAiD,EACjD,GAAkB;IAElB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,yBAAyB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,MAAM,aAAa,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAClC,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,oCAAoC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3G,IAAI,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,IAA0C,EAC1C,GAAkB;IAElB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;IAC1C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,sBAAsB;SACrF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,gBAAiB,CAAW,CAAC,OAAO,EAAE;aAC3D,CAAC;QACJ,CAAC;QACD,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,oBAAqB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACnH,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,OAAO,GAAG;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;AACzF,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,MAAM,CAAC,KAAoB,EAAE,KAAa,EAAE,GAAkB;IAC3E,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC;IAC1C,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;IACrD,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,SAAS;YACZ,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM;YACT,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/D,KAAK,YAAY;YACf,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACrE,KAAK,aAAa;YAChB,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM;YACT,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAA4B,EAC5B,GAAkB,EAClB,OAA4C,EAAE;IAE9C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM;QAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC3G,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBACrB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,CAAC;gBACb,MAAM,EAAE,4CAA4C;aACrD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,KAAK;gBAClC,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,CAAC;gBACb,MAAM,EAAE,gBAAiB,CAAW,CAAC,OAAO,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAA4B,EAC5B,GAAkB,EAClB,UAAyB;IAEzB,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,SAAS,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC;QACT,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,kBAAkB,MAAM,IAAI,SAAS,cAAc,MAAM,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACrG,MAAM,UAAW,CAAC;YAChB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,SAAS;YACzC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE;YACxB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/openclaw.plugin.json

@@ -115,6 +115,14 @@
       "fanout_start",
       "fanout_status",
       "fanout_abort",
+      "workflow_start",
+      "workflow_status",
+      "workflow_list",
+      "workflow_resume",
+      "workflow_cancel",
+      "workflow_steer",
+      "workflow_approve",
+      "verify_run",
       "council_start",
       "council_status",
       "council_abort",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@enderfga/claw-orchestrator",
-  "version": "5.1.0",
-  "description": "Claw Orchestrator — run Claude Code, Codex, Gemini, Cursor Agent, OpenCode and custom coding CLIs as one unified runtime. Drop into Hermes Agent, Claude Desktop, Cursor, Cline, Continue, Zed, Windsurf, Goose or any Model Context Protocol (MCP) host, install as an OpenClaw plugin, or run standalone. Persistent sessions, multi-agent council, ultraplan, ultrareview, autoloop, tool orchestration.",
+  "version": "6.0.0",
+  "description": "Claw Orchestrator \u2014 run Claude Code, Codex, Gemini, Cursor Agent, OpenCode and custom coding CLIs as one unified runtime. Drop into Hermes Agent, Claude Desktop, Cursor, Cline, Continue, Zed, Windsurf, Goose or any Model Context Protocol (MCP) host, install as an OpenClaw plugin, or run standalone. Persistent sessions, multi-agent council, ultraplan, ultrareview, autoloop, tool orchestration.",
   "type": "module",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",