@exaudeus/workrail 3.19.0 → 3.19.1

package/dist/manifest.json

@@ -734,12 +734,12 @@
       "bytes": 2785
     },
     "mcp/handlers/shared/request-workflow-reader.d.ts": {
-      "sha256": "342f82d59945aa043e7edf5ae0566d7790cdeec223932c59e86c38fc6322155e",
-      "bytes": 1919
+      "sha256": "94eae7516f1ca0aef0c9995d0fd41fc206abb001970cebcac35b912624341d0a",
+      "bytes": 2103
     },
     "mcp/handlers/shared/request-workflow-reader.js": {
-      "sha256": "a32e240ffc984018b56c6e074c894e079d8511dd2fb7a4f36898e32e2b0e62e6",
-      "bytes": 10418
+      "sha256": "cfd2946ec9deb52c21611b21fc07859f35edaaf2c85d15743833380352dedf6f",
+      "bytes": 11702
     },
     "mcp/handlers/shared/with-timeout.d.ts": {
       "sha256": "31ca3db008cb5cd439e0d1132bc4b29be0900c403c452931e3a24a50e45beb54",
@@ -754,8 +754,16 @@
       "bytes": 1772
     },
     "mcp/handlers/shared/workflow-source-visibility.js": {
-      "sha256": "46a1df4b1effa2c16da9d4beaff8081765a04700a4defc23a8a45373f0f7091a",
-      "bytes": 4600
+      "sha256": "59f5b6f50a46a708c19649ab6dc0c90f21d9d4f151b52f454dc38a2dad344717",
+      "bytes": 4526
+    },
+    "mcp/handlers/shared/workspace-path-utils.d.ts": {
+      "sha256": "c660cf0605f3d23c2826d69c5ba47aea4866ab929a94cb5cdde882cedde047ab",
+      "bytes": 169
+    },
+    "mcp/handlers/shared/workspace-path-utils.js": {
+      "sha256": "c375c508fb830dc87b930eaeb99a1443b075c2d3f4f323875c3fb56107f82a05",
+      "bytes": 1261
     },
     "mcp/handlers/v2-advance-core.d.ts": {
       "sha256": "0a07ea15caf7b0a3123d3b0b44c2b85392d090dd140bf82370fd0e84d1aa5b0e",

package/dist/mcp/handlers/shared/request-workflow-reader.d.ts

@@ -31,6 +31,8 @@ export interface WorkflowReaderForRequestResult {
     readonly stalePaths: readonly string[];
     readonly managedSourceRecords: readonly ManagedSourceRecordV2[];
     readonly staleManagedRecords: readonly ManagedSourceRecordV2[];
+    readonly excludedByScope: readonly string[];
     readonly managedStoreError?: string;
 }
+export declare function filterRememberedRootsForWorkspace(allRoots: readonly string[], workspace: string): Promise<readonly string[]>;
 export declare function createWorkflowReaderForRequest(options: RequestWorkflowReaderOptions): Promise<WorkflowReaderForRequestResult>;

package/dist/mcp/handlers/shared/request-workflow-reader.js

@@ -8,6 +8,7 @@ exports.hasRequestWorkspaceSignal = hasRequestWorkspaceSignal;
 exports.resolveRequestWorkspaceDirectory = resolveRequestWorkspaceDirectory;
 exports.toProjectWorkflowDirectory = toProjectWorkflowDirectory;
 exports.discoverRootedWorkflowDirectories = discoverRootedWorkflowDirectories;
+exports.filterRememberedRootsForWorkspace = filterRememberedRootsForWorkspace;
 exports.createWorkflowReaderForRequest = createWorkflowReaderForRequest;
 const promises_1 = __importDefault(require("fs/promises"));
 const path_1 = __importDefault(require("path"));
@@ -15,6 +16,7 @@ const url_1 = require("url");
 const enhanced_multi_source_workflow_storage_js_1 = require("../../../infrastructure/storage/enhanced-multi-source-workflow-storage.js");
 const schema_validating_workflow_storage_js_1 = require("../../../infrastructure/storage/schema-validating-workflow-storage.js");
 const with_timeout_js_1 = require("./with-timeout.js");
+const workspace_path_utils_js_1 = require("./workspace-path-utils.js");
 const SKIP_DIRS = new Set([
     '.git', 'node_modules',
     'build', 'dist', 'out', 'target',
@@ -99,10 +101,26 @@ async function _doWalk(cacheKey, roots, now) {
     walkCache.set(cacheKey, { result, expiresAt: now + WALK_CACHE_TTL_MS });
     return result;
 }
+async function filterRememberedRootsForWorkspace(allRoots, workspace) {
+    const ancestorRoots = allRoots.filter((r) => (0, workspace_path_utils_js_1.isWorkspaceAncestor)(r, workspace));
+    const nonAncestorRoots = allRoots.filter((r) => !(0, workspace_path_utils_js_1.isWorkspaceAncestor)(r, workspace));
+    let siblingRoots = [];
+    if (nonAncestorRoots.length > 0) {
+        const workspaceCommonDir = await (0, workspace_path_utils_js_1.getGitCommonDir)(workspace);
+        if (workspaceCommonDir !== null) {
+            const commonDirResults = await Promise.all(nonAncestorRoots.map((r) => (0, workspace_path_utils_js_1.getGitCommonDir)(r)));
+            siblingRoots = nonAncestorRoots.filter((_, i) => commonDirResults[i] === workspaceCommonDir);
+        }
+    }
+    return [...ancestorRoots, ...siblingRoots];
+}
 async function createWorkflowReaderForRequest(options) {
     const workspaceDirectory = resolveRequestWorkspaceDirectory(options);
     const projectWorkflowDirectory = toProjectWorkflowDirectory(workspaceDirectory);
-    const rememberedRoots = await listRememberedRoots(options.rememberedRootsStore);
+    const allRememberedRoots = await listRememberedRoots(options.rememberedRootsStore);
+    const resolvedWorkspace = path_1.default.resolve(workspaceDirectory);
+    const rememberedRoots = await filterRememberedRootsForWorkspace(allRememberedRoots, resolvedWorkspace);
+    const excludedByScope = allRememberedRoots.filter((root) => !rememberedRoots.includes(root));
     let discoveryResult;
     try {
         discoveryResult = await (0, with_timeout_js_1.withTimeout)(discoverRootedWorkflowDirectories(rememberedRoots), DISCOVERY_TIMEOUT_MS, 'workflow_root_discovery');
@@ -159,6 +177,7 @@ async function createWorkflowReaderForRequest(options) {
         stalePaths: allStalePaths,
         managedSourceRecords: activeManagedRecords,
         staleManagedRecords,
+        excludedByScope,
         ...(managedStoreError !== undefined ? { managedStoreError } : {}),
     };
 }

package/dist/mcp/handlers/shared/workflow-source-visibility.js

@@ -8,6 +8,7 @@ exports.detectWorkflowMigrationGuidance = detectWorkflowMigrationGuidance;
 exports.isCompositeWorkflowReader = isCompositeWorkflowReader;
 exports.deriveGroupLabel = deriveGroupLabel;
 const path_1 = __importDefault(require("path"));
+const workspace_path_utils_js_1 = require("./workspace-path-utils.js");
 function toWorkflowVisibility(workflow, rememberedRoots, options = {}) {
     const source = {
         kind: workflow.source.kind,
@@ -70,10 +71,7 @@ function deriveRootedSharingContext(workflow, rememberedRoots) {
     const sourcePath = path_1.default.resolve(workflow.source.directoryPath);
     for (const record of rememberedRoots) {
         const rootPath = path_1.default.resolve(record.path);
-        const relative = path_1.default.relative(rootPath, sourcePath);
-        const isUnderRoot = relative.length === 0 ||
-            (!relative.startsWith('..') && !path_1.default.isAbsolute(relative));
-        if (!isUnderRoot)
+        if (!(0, workspace_path_utils_js_1.isWorkspaceAncestor)(rootPath, sourcePath))
             continue;
         return {
             kind: 'remembered_root',

package/dist/mcp/handlers/shared/workspace-path-utils.d.ts

@@ -0,0 +1,2 @@
+export declare function isWorkspaceAncestor(root: string, workspace: string): boolean;
+export declare function getGitCommonDir(dirPath: string): Promise<string | null>;

package/dist/mcp/handlers/shared/workspace-path-utils.js

@@ -0,0 +1,29 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isWorkspaceAncestor = isWorkspaceAncestor;
+exports.getGitCommonDir = getGitCommonDir;
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
+function isWorkspaceAncestor(root, workspace) {
+    const rel = path_1.default.relative(path_1.default.resolve(root), path_1.default.resolve(workspace));
+    return rel.length === 0 || (!rel.startsWith('..') && !path_1.default.isAbsolute(rel));
+}
+async function getGitCommonDir(dirPath) {
+    try {
+        const { stdout } = await execFileAsync('git', ['-C', dirPath, 'rev-parse', '--git-common-dir'], { encoding: 'utf-8', timeout: 500 });
+        const raw = stdout.trim();
+        if (!raw)
+            return null;
+        const resolved = path_1.default.resolve(dirPath, raw);
+        return await promises_1.default.realpath(resolved);
+    }
+    catch {
+        return null;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exaudeus/workrail",
-  "version": "3.19.0",
+  "version": "3.19.1",
   "description": "Step-by-step workflow enforcement for AI agents via MCP",
   "license": "MIT",
   "repository": {

package/workflows/workflow-for-workflows.json

@@ -170,12 +170,11 @@
           "State what result the authored workflow should reliably produce for its user.",
           "List the criteria that would make the workflow feel genuinely satisfying in practice.",
           "Name the biggest likely failure mode and the most dangerous false-confidence mode.",
-          "State what would make the workflow technically correct but still disappointing.",
-          "Build a success-criteria-to-mechanism map: for each item in userSatisfactionCriteria, name the specific step(s) that enforce it and the enforcement mechanism (gate, self-audit, second pass, example contrast, rubric). Any criterion with no named mechanism is a gap -- either add a mechanism to the planned architecture or flag it as a known weakness to address in Phase 3."
+          "State what would make the workflow technically correct but still disappointing."
         ],
         "outputRequired": {
-          "notesMarkdown": "Effectiveness target, satisfaction criteria, failure modes, false-confidence risks, and the success-criteria-to-mechanism map with any gaps identified.",
-          "context": "Capture effectivenessTarget, userSatisfactionCriteria, primaryFailureMode, dangerousFalseConfidenceModes, likelyWeakOutcomeModes, trustRisk, and successCriteriaToMechanismMap."
+          "notesMarkdown": "Effectiveness target, satisfaction criteria, failure modes, and false-confidence risks.",
+          "context": "Capture effectivenessTarget, userSatisfactionCriteria, primaryFailureMode, dangerousFalseConfidenceModes, likelyWeakOutcomeModes, and trustRisk."
         },
         "verify": [
           "The authored workflow now has a clear outcome bar, not just an authoring bar."
@@ -493,12 +492,11 @@
               "Reviewer-family or validator output is evidence, not authority."
             ],
             "procedure": [
-              "Score these dimensions 0-2 with one sentence of evidence each: `voiceClarity`, `ceremonyLevel`, `loopSoundness`, `delegationBoundedness`, `artifactClarity`, `taskEffectiveness`, `falseConfidenceResistance`, `stateMinimality`, `coverageSharpness`, `domainFit`, `handoffUtility`, `rigorAdaptability` (0 = adapts to complexity/rigor levels, 2 = single-weight), `enforcementStrength` (0 = behavioral rules have structural teeth; 2 = important rules are prose-only with no enforcement mechanism), `outputQualityMechanisms` (0 = each key generative step has a concrete enforcement mechanism for output quality such as a self-audit, second pass, example contrast, or rubric; 1 = some generative steps rely only on metaGuidance or prose rules; 2 = generative steps have no quality enforcement beyond prompt wording), and `modernizationDiscipline` (0 = every valueInventory item preserved, equivalently replaced with justification, or dropped with justification; 2 = items missing or replaced with weaker versions without justification  -- score 0 for create mode).",
-              "For each generative step (any step whose output is judged on content quality rather than structural correctness), run an adversarial trace: what does a lazy or average agent do here, and does the prompt prevent it? A step where the lazy path produces a plausible-looking but shallow result scores poorly on `outputQualityMechanisms`. Check each such step against the successCriteriaToMechanismMap from Phase 1 -- any criterion whose mechanism lives in this step must actually be enforced here.",
+              "Score these dimensions 0-2 with one sentence of evidence each: `voiceClarity`, `ceremonyLevel`, `loopSoundness`, `delegationBoundedness`, `artifactClarity`, `taskEffectiveness`, `falseConfidenceResistance`, `stateMinimality`, `coverageSharpness`, `domainFit`, `handoffUtility`, `rigorAdaptability` (0 = adapts to complexity/rigor levels, 2 = single-weight), `enforcementStrength` (0 = behavioral rules have structural teeth; 2 = important rules are prose-only with no enforcement mechanism), and `modernizationDiscipline` (0 = every valueInventory item preserved, equivalently replaced with justification, or dropped with justification; 2 = items missing or replaced with weaker versions without justification  -- score 0 for create mode).",
               "If delegation is available and rigor is THOROUGH, run an adversarial review bundle with these lenses: `engine_native_reviewer`, `task_effectiveness_reviewer`, `state_economy_reviewer`, `false_confidence_reviewer`, `domain_fit_reviewer`, and `maintainer_reviewer`.",
               "Synthesize what the review confirmed, what it challenged, and what changed your mind.",
               "When scoring `falseConfidenceResistance`, explicitly check: do the workflow's quality gates protect edge cases and degraded paths, or only the happy path? A workflow that passes its own checks on ideal input but fails silently on minimal or unexpected input scores 2.",
-              "Set hard-gate failures whenever any of these are materially weak: `taskEffectiveness`, `falseConfidenceResistance`, `stateMinimality`, `coverageSharpness`, `domainFit`, `handoffUtility`, or `outputQualityMechanisms`.",
+              "Set hard-gate failures whenever any of these are materially weak: `taskEffectiveness`, `falseConfidenceResistance`, `stateMinimality`, `coverageSharpness`, `domainFit`, or `handoffUtility`.",
               "Set `authoringIntegrityPassed = true` only if structural and authoring-quality dimensions are all acceptable. Set `outcomeEffectivenessPassed = true` only if the workflow is likely to achieve satisfying results for the user."
             ],
             "outputRequired": {
@@ -550,7 +548,6 @@
             { "type": "contains", "value": "handoffUtility", "message": "Review must score handoffUtility" },
             { "type": "contains", "value": "rigorAdaptability", "message": "Review must score rigorAdaptability" },
             { "type": "contains", "value": "enforcementStrength", "message": "Review must score enforcementStrength" },
-            { "type": "contains", "value": "outputQualityMechanisms", "message": "Review must score outputQualityMechanisms" },
             {
               "type": "contains",
               "value": "modernizationDiscipline",
@@ -668,31 +665,6 @@
       },
       "notesOptional": true,
       "requireConfirmation": false
-    },
-    {
-      "id": "phase-8-process-retrospective",
-      "title": "Phase 8: Process Retrospective",
-      "promptBlocks": {
-        "goal": "While this run is still fresh, identify gaps in the workflow-for-workflows process itself -- not in the authored workflow.",
-        "constraints": [
-          "This step is about the authoring process, not the authored workflow. Do not summarize the workflow again.",
-          "Be honest. If the process caught everything, say so. If it missed something, say specifically where and why."
-        ],
-        "procedure": [
-          "Look back at the full run. Were any weaknesses in the authored workflow only identified post-hoc -- after the quality gate loop, by the user, or by a later reviewer?",
-          "For each weakness identified late: name the Phase where it should have been caught, explain why the current step failed to surface it, and propose a specific change to that step's procedure or scoring rubric that would catch it on the next run.",
-          "Check the successCriteriaToMechanismMap from Phase 1 against the final workflow: did every criterion end up with a concrete enforcement mechanism? Any criterion that is still prose-only in the final file is a gap in the Phase 1 or Phase 3 process.",
-          "If nothing was missed and the process caught all meaningful issues in-band, say so explicitly and explain what worked."
-        ],
-        "outputRequired": {
-          "notesMarkdown": "Process gaps found (or confirmed absent), where they should have been caught, and concrete proposed changes to workflow-for-workflows. This output is raw material for improving this workflow.",
-          "context": "Capture processGaps and suggestedProcessImprovements."
-        },
-        "verify": [
-          "The retrospective identifies specific step-level changes, not vague general improvements."
-        ]
-      },
-      "requireConfirmation": false
     }
   ],
   "validatedAgainstSpecVersion": 3