@exaudeus/workrail 1.7.3 → 1.7.5

package/dist/manifest.json

@@ -562,12 +562,12 @@
       "bytes": 5774
     },
     "mcp/handlers/v2-advance-core/index.d.ts": {
-      "sha256": "a927c7e13912cfcad6340922a24f5b9331d513ce25191049aabdce96a7a86a68",
-      "bytes": 3500
+      "sha256": "7a641c5419b4f273feff454d465bb5c5f3b2c349cc5e0032ab41ab3c3ebd033f",
+      "bytes": 3448
     },
     "mcp/handlers/v2-advance-core/index.js": {
-      "sha256": "f144bbf46678ff03dcdf3e76d6fe0375942469a9e45d40de748c80d4c49bb2c6",
-      "bytes": 7134
+      "sha256": "bcdaa5e283da9def40695b6c4b529b7dcc0861d748133377bb9ed62bdd28a2d2",
+      "bytes": 7107
     },
     "mcp/handlers/v2-advance-core/input-validation.d.ts": {
       "sha256": "d736f163f6673b30f653c63336a287cdfe99c9f58b601c7220ce441590f802ba",
@@ -582,16 +582,16 @@
       "bytes": 1014
     },
     "mcp/handlers/v2-advance-core/outcome-blocked.js": {
-      "sha256": "12ac27a78a1d42ea145b93f76baab595a6b22e491b29021af1ac0b408f39ee8e",
-      "bytes": 3399
+      "sha256": "78e3c2c6dd5352dfb90ec9a89aeab1692cdb3aea02f89522f34f748aa68a3487",
+      "bytes": 3400
     },
     "mcp/handlers/v2-advance-core/outcome-success.d.ts": {
       "sha256": "da1bcf2d275ba9f1c0f073446f3c87b67394161b0b69c669f70c758bc597c8be",
       "bytes": 936
     },
     "mcp/handlers/v2-advance-core/outcome-success.js": {
-      "sha256": "fad3e883e4688f344374bab6f58a753f8cce8fa3f1e931daf081db18155d04dd",
-      "bytes": 5988
+      "sha256": "e08268f3b8fd11213e67052721e231a6e055daa1dd4f729784f6ed3b20ddddb4",
+      "bytes": 5961
     },
     "mcp/handlers/v2-advance-events.d.ts": {
       "sha256": "02cdb52a2c16dd619645b5496caf0880e57937bf21ea9efe44e6cd195cd43b94",
@@ -694,8 +694,8 @@
       "bytes": 471
     },
     "mcp/handlers/v2-resume.js": {
-      "sha256": "74d66519764615780c556828c23ada5fa7df887c8263793de4323322aef14408",
-      "bytes": 2826
+      "sha256": "851690a586328cb61a1aa0f9c2b8cac87b1a158430bab6e9601f63244a4dd69d",
+      "bytes": 3385
     },
     "mcp/handlers/v2-state-conversion.d.ts": {
       "sha256": "94bd06904ef58dd210ff17ffb75c2492beea8937eb06d99749e5d860c0e0d96b",
@@ -1822,8 +1822,8 @@
       "bytes": 1004
     },
     "v2/infra/local/session-summary-provider/index.js": {
-      "sha256": "f6c0df4a3355241ee3eb83c0013f9a252479f27f4c9172e0607464339fba6920",
-      "bytes": 5655
+      "sha256": "a38c877faddb8e14bf1c30e173e4299af5edb4a1f8fb4b036732c6ba6f11ca6f",
+      "bytes": 5933
     },
     "v2/infra/local/sha256/index.d.ts": {
       "sha256": "8a727b7e54a38275ca6f9f1b8730f97cfc0a212df035df1bdc58e716e6824230",
@@ -2074,12 +2074,12 @@
       "bytes": 732
     },
     "v2/projections/resume-ranking.d.ts": {
-      "sha256": "50ef48d0b195f89f01c0051be453666e6a680e356ca9c328a754aced90ee8d7a",
-      "bytes": 2337
+      "sha256": "ca5cb0701edded54f08395deebfe50161528d36edb74294c26481501391e64bc",
+      "bytes": 2558
     },
     "v2/projections/resume-ranking.js": {
-      "sha256": "2cc54d484865507e65cc6202dfb7c42df4535e4cfd6faca6b0d9ce059852a8bc",
-      "bytes": 4281
+      "sha256": "aa6ba4b5480caebba3107f86058b9a834cbd89962d0340c89342417f77956e47",
+      "bytes": 4251
     },
     "v2/projections/run-context.d.ts": {
       "sha256": "a4d57470a435ac9860f60b3244d1b828853995027cd510d8da42762d21b2a687",

package/dist/mcp/handlers/v2-advance-core/index.d.ts

@@ -47,7 +47,6 @@ export interface AdvanceContext {
 }
 export interface ComputedAdvanceResults {
     readonly reasons: readonly ReasonV1[];
-    readonly effectiveReasons: readonly ReasonV1[];
     readonly outputRequirement: ReturnType<typeof getOutputRequirementStatusWithArtifactsV1>;
     readonly validation: ValidationResult | undefined;
 }

package/dist/mcp/handlers/v2-advance-core/index.js

@@ -69,7 +69,7 @@ function executeAdvanceCore(args) {
                 suggestions: [(0, v2_execution_helpers_js_1.internalSuggestion)('Retry your submission with the same output.', 'The validation criteria for this step may be misconfigured.')],
             };
             const ctx = { truth, sessionId, runId, currentNodeId, attemptId, workflowHash, inputOutput, pinnedWorkflow, engineState, pendingStep };
-            const computed = { reasons, effectiveReasons, outputRequirement, validation: evalValidation };
+            const computed = { reasons: effectiveReasons, outputRequirement, validation: evalValidation };
             const portsLocal = { snapshotStore, sessionStore, sha256, idFactory };
             return (0, outcome_blocked_js_1.buildBlockedOutcome)({ mode, snap, ctx, computed, lock, ports: portsLocal });
         }
@@ -84,15 +84,15 @@ function executeAdvanceCore(args) {
         const missingNotes = !v.notesOptional && !v.notesMarkdown?.trim()
             ? { stepId: v.pendingStep.stepId }
             : undefined;
-        const reasonsRes = (0, blocking_decision_js_1.detectBlockingReasonsV1)({ outputRequirement, missingNotes });
-        if (reasonsRes.isErr()) {
-            return errAsync({ kind: 'invariant_violation', message: reasonsRes.error.message });
+        const rawReasonsRes = (0, blocking_decision_js_1.detectBlockingReasonsV1)({ outputRequirement, missingNotes });
+        if (rawReasonsRes.isErr()) {
+            return errAsync({ kind: 'invariant_violation', message: rawReasonsRes.error.message });
         }
-        const reasons = reasonsRes.value;
-        const { blocking: effectiveReasons } = (0, risk_policy_guardrails_js_1.applyGuardrails)(v.riskPolicy, reasons);
-        const shouldBlockNow = effectiveReasons.length > 0 && (0, reason_model_js_1.shouldBlock)(v.autonomy, effectiveReasons);
+        const rawReasons = rawReasonsRes.value;
+        const { blocking: reasons } = (0, risk_policy_guardrails_js_1.applyGuardrails)(v.riskPolicy, rawReasons);
+        const shouldBlockNow = reasons.length > 0 && (0, reason_model_js_1.shouldBlock)(v.autonomy, reasons);
         const ctx = { truth, sessionId, runId, currentNodeId, attemptId, workflowHash, inputOutput, pinnedWorkflow, engineState, pendingStep };
-        const computed = { reasons, effectiveReasons, outputRequirement, validation };
+        const computed = { reasons, outputRequirement, validation };
         const ports = { snapshotStore, sessionStore, sha256, idFactory };
         if (shouldBlockNow) {
             return (0, outcome_blocked_js_1.buildBlockedOutcome)({ mode, snap, ctx, computed, lock, ports });

package/dist/mcp/handlers/v2-advance-core/outcome-blocked.js

@@ -9,9 +9,9 @@ const event_builders_js_1 = require("./event-builders.js");
 function buildBlockedOutcome(args) {
     const { mode, snap, lock, ports } = args;
     const { truth, sessionId, runId, currentNodeId, attemptId, workflowHash } = args.ctx;
-    const { reasons, effectiveReasons, outputRequirement, validation } = args.computed;
+    const { reasons, outputRequirement, validation } = args.computed;
     const { snapshotStore, sessionStore, sha256, idFactory } = ports;
-    const blockersRes = (0, reason_model_js_1.buildBlockerReport)(effectiveReasons);
+    const blockersRes = (0, reason_model_js_1.buildBlockerReport)(reasons);
     if (blockersRes.isErr()) {
         return errAsync({ kind: 'invariant_violation', message: blockersRes.error.message });
     }
@@ -37,7 +37,7 @@ function buildBlockedOutcome(args) {
     const extraEventsToAppend = [validationEventRes.value];
     const primaryReason = reasons[0];
     if (!primaryReason) {
-        return errAsync({ kind: 'invariant_violation', message: 'shouldBlockNow=true requires at least one reason' });
+        return errAsync({ kind: 'invariant_violation', message: 'shouldBlockNow=true requires at least one effective reason (post-guardrails)' });
     }
     const blockedSnapshotRes = (0, blocked_node_builder_js_1.buildBlockedNodeSnapshot)({
         priorSnapshot: snap,

package/dist/mcp/handlers/v2-advance-core/outcome-success.js

@@ -18,7 +18,7 @@ function successNodeKind(mode) {
 function buildSuccessOutcome(args) {
     const { mode, v, lock, ports } = args;
     const { truth, sessionId, runId, currentNodeId, attemptId, workflowHash, inputOutput, pinnedWorkflow, engineState, pendingStep } = args.ctx;
-    const { effectiveReasons, outputRequirement, validation } = args.computed;
+    const { reasons, outputRequirement, validation } = args.computed;
     const { snapshotStore, sessionStore, sha256, idFactory } = ports;
     const compiler = new workflow_compiler_js_1.WorkflowCompiler();
     const interpreter = new workflow_interpreter_js_1.WorkflowInterpreter();
@@ -48,9 +48,9 @@ function buildSuccessOutcome(args) {
     }
     const out = nextRes.value;
     const extraEventsToAppend = [];
-    if (v.autonomy === 'full_auto_never_stop' && effectiveReasons.length > 0) {
+    if (v.autonomy === 'full_auto_never_stop' && reasons.length > 0) {
         extraEventsToAppend.push(...(0, v2_advance_events_js_1.buildGapEvents)({
-            gaps: effectiveReasons,
+            gaps: reasons,
             sessionId: String(sessionId),
             runId,
             nodeId: currentNodeId,

package/dist/mcp/handlers/v2-resume.js

@@ -31,8 +31,28 @@ async function handleV2ResumeSession(input, ctx) {
         return (0, types_js_1.errNotRetryable)('INTERNAL_ERROR', `Resume failed: ${resumeResult.error.message}`);
     }
     const candidates = resumeResult.value;
+    const { outputCandidates, skipped } = mintCandidateTokens(candidates, v2.tokenCodecPorts);
+    if (skipped > 0) {
+        console.error(`[workrail:resume] ${skipped}/${candidates.length} candidate(s) skipped: token minting failed (workflowHashRef derivation or signing error)`);
+    }
+    const output = output_schemas_js_1.V2ResumeSessionOutputSchema.parse({
+        candidates: outputCandidates,
+        totalEligible: candidates.length,
+    });
+    return {
+        type: 'success',
+        data: output,
+    };
+}
+function mintCandidateTokens(candidates, ports) {
     const outputCandidates = [];
+    let skipped = 0;
     for (const candidate of candidates) {
+        const wfRefRes = (0, index_js_1.deriveWorkflowHashRef)(candidate.workflowHash);
+        if (wfRefRes.isErr()) {
+            skipped++;
+            continue;
+        }
         const stateTokenRes = (0, v2_token_ops_js_1.signTokenOrErr)({
             payload: {
                 tokenVersion: 1,
@@ -40,11 +60,12 @@ async function handleV2ResumeSession(input, ctx) {
                 sessionId: candidate.sessionId,
                 runId: (0, index_js_1.asRunId)(candidate.runId),
                 nodeId: (0, index_js_1.asNodeId)(candidate.preferredTipNodeId),
-                workflowHashRef: (0, index_js_1.asWorkflowHashRef)(''),
+                workflowHashRef: wfRefRes.value,
             },
-            ports: v2.tokenCodecPorts,
+            ports,
         });
         if (stateTokenRes.isErr()) {
+            skipped++;
             continue;
         }
         outputCandidates.push({
@@ -55,12 +76,5 @@ async function handleV2ResumeSession(input, ctx) {
             whyMatched: [...candidate.whyMatched],
         });
     }
-    const output = output_schemas_js_1.V2ResumeSessionOutputSchema.parse({
-        candidates: outputCandidates,
-        totalEligible: candidates.length,
-    });
-    return {
-        type: 'success',
-        data: output,
-    };
+    return { outputCandidates, skipped };
 }

package/dist/v2/infra/local/session-summary-provider/index.js

@@ -7,6 +7,7 @@ const enumerate_sessions_js_1 = require("../../../usecases/enumerate-sessions.js
 const session_health_js_1 = require("../../../projections/session-health.js");
 const run_dag_js_1 = require("../../../projections/run-dag.js");
 const node_outputs_js_1 = require("../../../projections/node-outputs.js");
+const index_js_1 = require("../../../durable-core/ids/index.js");
 const constants_js_1 = require("../../../durable-core/constants.js");
 const MAX_SESSIONS_TO_SCAN = 50;
 const MAX_RECAP_ANCESTOR_DEPTH = 100;
@@ -15,10 +16,6 @@ const EMPTY_OBSERVATIONS = {
     gitBranch: null,
     repoRootHash: null,
 };
-const UNKNOWN_WORKFLOW = {
-    workflowId: null,
-    workflowName: null,
-};
 class LocalSessionSummaryProviderV2 {
     constructor(ports) {
         this.ports = ports;
@@ -55,6 +52,9 @@ function projectSessionSummary(sessionId, truth) {
     const bestRun = selectBestRun(Object.values(dag.value.runsById));
     if (!bestRun)
         return null;
+    const workflow = extractWorkflowIdentity(truth.events, bestRun.run.runId);
+    if (!workflow)
+        return null;
     const outputsRes = (0, node_outputs_js_1.projectNodeOutputsV2)(truth.events);
     const recapSnippet = outputsRes.isOk()
         ? extractAggregateRecap(outputsRes.value, bestRun.run, bestRun.tipNodeId)
@@ -68,7 +68,7 @@ function projectSessionSummary(sessionId, truth) {
         },
         recapSnippet,
         observations: extractObservations(truth.events),
-        workflow: extractWorkflowIdentity(truth.events, bestRun.run.runId),
+        workflow,
     };
 }
 function selectBestRun(runs) {
@@ -99,10 +99,13 @@ function extractWorkflowIdentity(events, runId) {
         .filter((e) => e.kind === constants_js_1.EVENT_KIND.RUN_STARTED)
         .find((e) => e.scope.runId === runId);
     if (!event)
-        return UNKNOWN_WORKFLOW;
+        return null;
+    if (!constants_js_1.SHA256_DIGEST_PATTERN.test(event.data.workflowHash))
+        return null;
     return {
-        workflowId: event.data.workflowId,
-        workflowName: null,
+        kind: 'identified',
+        workflowId: (0, index_js_1.asWorkflowId)(event.data.workflowId),
+        workflowHash: (0, index_js_1.asWorkflowHash)((0, index_js_1.asSha256Digest)(event.data.workflowHash)),
     };
 }
 function collectAncestorNodeIds(nodesById, nodeId, remainingDepth) {

package/dist/v2/projections/resume-ranking.d.ts

@@ -1,4 +1,4 @@
-import type { SessionId } from '../durable-core/ids/index.js';
+import type { SessionId, WorkflowHash, WorkflowId } from '../durable-core/ids/index.js';
 export type RecapSnippet = string & {
     readonly __brand: 'RecapSnippet';
 };
@@ -8,10 +8,16 @@ export interface SessionObservations {
     readonly gitBranch: string | null;
     readonly repoRootHash: string | null;
 }
-export interface WorkflowIdentity {
-    readonly workflowId: string | null;
-    readonly workflowName: string | null;
-}
+export type WorkflowIdentity = {
+    readonly kind: 'unknown';
+} | {
+    readonly kind: 'identified';
+    readonly workflowId: WorkflowId;
+    readonly workflowHash: WorkflowHash;
+};
+export type IdentifiedWorkflow = Extract<WorkflowIdentity, {
+    kind: 'identified';
+}>;
 export interface HealthySessionSummary {
     readonly sessionId: SessionId;
     readonly runId: string;
@@ -21,7 +27,7 @@ export interface HealthySessionSummary {
     };
     readonly recapSnippet: RecapSnippet | null;
     readonly observations: SessionObservations;
-    readonly workflow: WorkflowIdentity;
+    readonly workflow: IdentifiedWorkflow;
 }
 export type WhyMatched = 'matched_head_sha' | 'matched_branch' | 'matched_notes' | 'matched_workflow_id' | 'recency_fallback';
 export type TierAssignment = {
@@ -57,6 +63,7 @@ export interface RankedResumeCandidate {
     readonly whyMatched: readonly WhyMatched[];
     readonly tierAssignment: TierAssignment;
     readonly lastActivityEventIndex: number;
+    readonly workflowHash: WorkflowHash;
 }
 export declare const MAX_RESUME_CANDIDATES = 5;
 export declare function rankResumeCandidates(summaries: readonly HealthySessionSummary[], query: ResumeQuery): readonly RankedResumeCandidate[];

package/dist/v2/projections/resume-ranking.js

@@ -56,13 +56,9 @@ function assignTier(summary, query) {
             return { tier: 3, kind: 'matched_notes' };
         }
     }
-    if (query.freeTextQuery) {
+    if (query.freeTextQuery && summary.workflow.kind === 'identified') {
         const queryTokens = normalizeToTokens(query.freeTextQuery);
-        const workflowText = [
-            summary.workflow.workflowId ?? '',
-            summary.workflow.workflowName ?? '',
-        ].join(' ');
-        const workflowTokens = normalizeToTokens(workflowText);
+        const workflowTokens = normalizeToTokens(String(summary.workflow.workflowId));
         if (allQueryTokensMatch(queryTokens, workflowTokens)) {
             return { tier: 4, kind: 'matched_workflow_id' };
         }
@@ -101,5 +97,6 @@ function rankResumeCandidates(summaries, query) {
         whyMatched: [tierToWhyMatched(tier)],
         tierAssignment: tier,
         lastActivityEventIndex: summary.preferredTip.lastActivityEventIndex,
+        workflowHash: summary.workflow.workflowHash,
     }));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exaudeus/workrail",
-  "version": "1.7.3",
+  "version": "1.7.5",
   "description": "Step-by-step workflow enforcement for AI agents via MCP",
   "license": "MIT",
   "repository": {