@fungi.computer/braid 0.0.1 → 0.2.0

package/dist/runtime/run-owner.d.ts

@@ -1,11 +1,12 @@
 import * as S from "effect/Schema";
 import { type NodeEvent, type NodeAdmissionResult } from "../execution.js";
+import { z } from "zod";
 import type { WatchdogSqliteOwner } from "@fungi.computer/watchdog";
 import { type WorkflowRunAuthority } from "./run-authority.js";
 import type { ArmedWorkflowTrigger } from "./trigger-owner.js";
 import { type WorkflowRunContext, type GraphRun, type WorkflowRunDelivery } from "./graph-contract.js";
 import { type StoredWorkflowNode } from "./graph-dispatch.js";
-import type { WorkflowAppCall, WorkflowAppCallResult, WorkflowCatalogEntry } from "./ports.js";
+import type { WorkflowAppCall, WorkflowAppCallResult, WorkflowCatalogEntry, WorkflowTriggerAdmission } from "./ports.js";
 import { type GraphStartRequest } from "./graph-start.js";
 /** The member can supply a plan, never stored authority or a captured ceiling. */
 export declare const memberCompiledGraphStartSchema: S.Struct<{
@@ -66,6 +67,7 @@ export declare const memberCompiledGraphStartSchema: S.Struct<{
                     readonly id: S.String;
                     readonly kind: S.Literal<"review">;
                     readonly title: S.String;
+                    readonly detail: S.optionalKey<S.String>;
                     readonly show: S.$Array<S.Struct<{
                         readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
                         readonly port: S.String;
@@ -75,6 +77,7 @@ export declare const memberCompiledGraphStartSchema: S.Struct<{
                     readonly choices: S.optionalKey<S.$Array<S.Struct<{
                         readonly id: S.String;
                         readonly label: S.String;
+                        readonly description: S.optionalKey<S.String>;
                     }>>>;
                 }>, S.Struct<{
                     readonly id: S.String;
@@ -185,6 +188,7 @@ export declare const memberCompiledGraphStartSchema: S.Struct<{
                 readonly id: S.String;
                 readonly kind: S.Literal<"review">;
                 readonly title: S.String;
+                readonly detail: S.optionalKey<S.String>;
                 readonly show: S.$Array<S.Struct<{
                     readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
                     readonly port: S.String;
@@ -194,6 +198,7 @@ export declare const memberCompiledGraphStartSchema: S.Struct<{
                 readonly choices: S.optionalKey<S.$Array<S.Struct<{
                     readonly id: S.String;
                     readonly label: S.String;
+                    readonly description: S.optionalKey<S.String>;
                 }>>>;
             }>, S.Struct<{
                 readonly id: S.String;
@@ -297,6 +302,8 @@ export declare function createTeamWorkflowRuns(options: {
     sql: WatchdogSqliteOwner["sql"];
     transactionSync: <T>(body: () => T) => T;
     teamId: () => string;
+    /** Host-owned wall clock; deterministic native journeys may supply their clock. */
+    now?: () => number;
     admission: () => "active" | "suspended";
     errors: Readonly<{
         app(code: "denied" | "invalid" | "unavailable"): Error;
@@ -336,6 +343,7 @@ export declare function createTeamWorkflowRuns(options: {
         readonly source: "key" | "manual" | "event" | "schedule" | "agent";
         readonly runId: string;
         readonly computerId: string | null;
+        readonly teamId: string;
         readonly plan: {
             readonly planDigest: string;
             readonly definition: {
@@ -394,9 +402,11 @@ export declare function createTeamWorkflowRuns(options: {
                     readonly timeout: number;
                     readonly kind: "review";
                     readonly reviewers: "runner" | "owners";
+                    readonly detail?: string;
                     readonly choices?: readonly {
                         readonly id: string;
                         readonly label: string;
+                        readonly description?: string;
                     }[];
                 } | {
                     readonly id: string;
@@ -495,9 +505,11 @@ export declare function createTeamWorkflowRuns(options: {
                             readonly timeout: number;
                             readonly kind: "review";
                             readonly reviewers: "runner" | "owners";
+                            readonly detail?: string;
                             readonly choices?: readonly {
                                 readonly id: string;
                                 readonly label: string;
+                                readonly description?: string;
                             }[];
                         } | {
                             readonly id: string;
@@ -636,7 +648,6 @@ export declare function createTeamWorkflowRuns(options: {
                 readonly pending?: true;
             }[];
         };
-        readonly teamId: string;
         readonly requestId: string;
         readonly actorId: string;
         readonly ceiling: {
@@ -647,7 +658,7 @@ export declare function createTeamWorkflowRuns(options: {
                     readonly operations: readonly string[];
                 }[];
                 readonly nodeId: string;
-                readonly capabilities: readonly ("agent.list" | "agent.manage" | "agent.rename" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage")[];
+                readonly capabilities: readonly ("approvals" | "agent.list" | "agent.manage" | "agent.rename" | "agent.avatar" | "agent.toolPolicy" | "agent.read" | "agent.send" | "computer.list" | "computer.readFile" | "computer.writeFile" | "computer.execute" | "llm.generation" | "media.generation" | "games:servers" | "git.repository" | "apps.open" | "apps.call" | "app.storage" | "app.events.emit" | "team.workbenchHost" | "marketplace.browse" | "marketplace.purchase" | "workflow.run" | "workflow.publish" | "workflow.arm" | "world" | "channels.read" | "channels.personal.manage")[];
                 readonly graphId?: string;
             }[];
             readonly nodeGitAccess: readonly {
@@ -896,9 +907,11 @@ export declare function createTeamWorkflowRuns(options: {
                         readonly timeout: number;
                         readonly kind: "review";
                         readonly reviewers: "runner" | "owners";
+                        readonly detail?: string;
                         readonly choices?: readonly {
                             readonly id: string;
                             readonly label: string;
+                            readonly description?: string;
                         }[];
                     } | {
                         readonly id: string;
@@ -997,9 +1010,11 @@ export declare function createTeamWorkflowRuns(options: {
                                 readonly timeout: number;
                                 readonly kind: "review";
                                 readonly reviewers: "runner" | "owners";
+                                readonly detail?: string;
                                 readonly choices?: readonly {
                                     readonly id: string;
                                     readonly label: string;
+                                    readonly description?: string;
                                 }[];
                             } | {
                                 readonly id: string;
@@ -1274,9 +1289,11 @@ export declare function createTeamWorkflowRuns(options: {
                         readonly timeout: number;
                         readonly kind: "review";
                         readonly reviewers: "runner" | "owners";
+                        readonly detail?: string;
                         readonly choices?: readonly {
                             readonly id: string;
                             readonly label: string;
+                            readonly description?: string;
                         }[];
                     } | {
                         readonly id: string;
@@ -1375,9 +1392,11 @@ export declare function createTeamWorkflowRuns(options: {
                                 readonly timeout: number;
                                 readonly kind: "review";
                                 readonly reviewers: "runner" | "owners";
+                                readonly detail?: string;
                                 readonly choices?: readonly {
                                     readonly id: string;
                                     readonly label: string;
+                                    readonly description?: string;
                                 }[];
                             } | {
                                 readonly id: string;
@@ -1539,7 +1558,7 @@ export declare function createTeamWorkflowRuns(options: {
     }>;
     startCachedGraph(binding: ArmedWorkflowTrigger, started: Pick<GraphStartRequest, "requestId" | "input"> & {
         triggerRepository?: string;
-    }): Promise<{
+    }, admission?: WorkflowTriggerAdmission): Promise<{
         kind: "conflict" | "started" | "replay";
         runId: string;
         planDigest: string;
@@ -1565,6 +1584,66 @@ export declare function createTeamWorkflowRuns(options: {
     revokeReleaseInMutation(appIds: readonly string[]): void;
     /** The kernel's lifecycle caller owns the transaction. Suspension ends every run. */
     onLifecycle(status: "active" | "suspended"): void;
+    reserveWebhookDelivery(raw: z.input<z.ZodObject<{
+        scope: z.ZodLazy<z.ZodObject<{
+            installationId: z.ZodString;
+            workflowId: z.ZodString;
+            commit: z.ZodString;
+            triggerId: z.ZodString;
+        }, z.core.$strict>>;
+        delivery: z.ZodObject<{
+            host: z.ZodString;
+            tenant: z.ZodString;
+            bindingId: z.ZodString;
+            eventId: z.ZodString;
+        }, z.core.$strict>;
+        cargo: z.ZodJSONSchema;
+        limits: z.ZodObject<{
+            hostConcurrency: z.ZodNumber;
+            bindingConcurrency: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>>): {
+        kind: "reserved" | "replay";
+        reservationId: string;
+        runId: string | null;
+    } | {
+        kind: "refused";
+        reason: "limit";
+    };
+    pendingWebhookDeliveries(rawOwner: z.input<z.ZodObject<{
+        host: z.ZodString;
+        tenant: z.ZodString;
+    }, z.core.$strict>>): ({
+        kind: "launch";
+        reservationId: string;
+        runId: string;
+    } | {
+        scope: {
+            installationId: string;
+            workflowId: string;
+            commit: string;
+            triggerId: string;
+        };
+        delivery: {
+            host: string;
+            tenant: string;
+            bindingId: string;
+            eventId: string;
+        };
+        cargo: z.core.util.JSONType;
+        limits: {
+            hostConcurrency: number;
+            bindingConcurrency: number;
+        };
+        kind: "start";
+        reservationId: string;
+        runId?: never;
+    })[];
+    nextWebhookWake(rawOwner: z.input<z.ZodObject<{
+        host: z.ZodString;
+        tenant: z.ZodString;
+    }, z.core.$strict>>): number | null;
+    completeWebhookDelivery(rawReservationId: string): void;
     reserveTriggerRun(raw: {
         scope: import("./trigger-run-reservations.js").TriggerRunScope;
         requestId: string;
@@ -1606,6 +1685,12 @@ export declare function createTeamWorkflowRuns(options: {
                 readonly iteration: string;
                 readonly instanceId: string;
                 readonly eventType: string;
+                readonly position?: readonly {
+                    readonly node: string;
+                    readonly loop: "repeat" | "map";
+                    readonly index: number;
+                    readonly count: number;
+                }[];
                 readonly choices?: readonly string[];
             };
             status: "closed" | "pending" | "answered" | "delivered" | "timed_out";

package/dist/runtime/run-owner.js

@@ -25,10 +25,10 @@ export const memberCompiledGraphStartSchema = graphRunSchema.mapFields(Struct.om
 const publisherGranted = (entries, installationId) => entries.some((entry) => entry.installationId === installationId &&
     entry.workflowPublishGranted === true &&
     entry.capabilities?.includes("workflow.publish") === true);
-const workflowNodeTargetSchema = z.strictObject({
+const workflowNodeTargetSchema = z.lazy(() => z.strictObject({
     installationId: z.string().min(1).max(256),
     method: z.string().min(1).max(256),
-});
+}));
 /**
  * The one Workflow run owner: graph runs, their captured authority, trigger
  * reservations and revocation. Every run, Storyboard included, is a graph run.
@@ -384,7 +384,7 @@ export function createTeamWorkflowRuns(options) {
                 throw options.errors.app("denied");
             return startCompiled(preparation, request, identity, ceiling, undefined, publication, libraryInstallationId);
         },
-        async startCachedGraph(binding, started) {
+        async startCachedGraph(binding, started, admission) {
             const { triggerRepository, ...request } = started;
             await admitGraphMember(binding.armedBy, binding.computerId);
             const stored = triggerPlans.read(binding);
@@ -467,15 +467,30 @@ export function createTeamWorkflowRuns(options) {
                 trigger = { ...trigger, nodeGitAccess: binding.nodeGitAccess };
             if (triggerRepository !== undefined)
                 trigger = { ...trigger, repository: triggerRepository };
-            return startCompiled(preparation, binding.delivery === undefined
-                ? request
-                : { ...request, delivery: binding.delivery }, identity, ceiling, trigger, {
-                installationId: binding.installationId,
-                workflowId: binding.workflowId,
-                commit: binding.commit,
-                digest: binding.digest,
-                armedBy: { kind: "member", memberId: binding.armedBy },
-            }, binding.installationId);
+            return options.transactionSync(() => {
+                // Different external bindings may share the compiled publication.
+                // Check the binding's owning store after all capture I/O, in the same
+                // transaction as the durable start, rather than invalidating its peers.
+                if (admission !== undefined && !admission.admitBinding())
+                    return {
+                        kind: "refused",
+                        reason: "Trigger binding is no longer armed",
+                    };
+                const result = startCompiled(preparation, binding.delivery === undefined
+                    ? request
+                    : { ...request, delivery: binding.delivery }, identity, ceiling, trigger, {
+                    installationId: binding.installationId,
+                    workflowId: binding.workflowId,
+                    commit: binding.commit,
+                    digest: binding.digest,
+                    armedBy: { kind: "member", memberId: binding.armedBy },
+                }, binding.installationId);
+                if (admission?.reservationId !== undefined &&
+                    (result.kind === "started" || result.kind === "replay") &&
+                    triggerReservations.bindTriggerRun(admission.reservationId, result.runId) === "conflict")
+                    throw new Error("Trigger reservation binding conflict");
+                return result;
+            });
         },
         callWorkflowApp: options.callWorkflowApp,
         admitDelivery: options.admitDelivery,

package/dist/runtime/schedules.d.ts

@@ -24,6 +24,7 @@ export declare function createWorkflowSchedules(options: {
     }>;
     list(principal: WorkflowTriggerPrincipal, installationId: string): Promise<{
         scheduleId: string;
+        installationId: string;
         workflowId: string;
         triggerId: string;
         nextDueAt: number;

package/dist/runtime/schedules.js

@@ -95,6 +95,7 @@ export function createWorkflowSchedules(options) {
                 .filter((record) => record.installationId === installationId)
                 .map((record) => ({
                 scheduleId: record.id,
+                installationId: record.installationId,
                 workflowId: record.workflowId,
                 triggerId: record.triggerId,
                 nextDueAt: record.nextDueAt,

package/dist/runtime/trigger-owner.d.ts

@@ -3,7 +3,7 @@ import * as S from "effect/Schema";
 import { type GitBinding, type RepositoryRef } from "@fungi.computer/agar/git";
 import { type TriggerEvent } from "../index.js";
 import { type WorkflowArmingAuthorityPorts, type WorkflowArmingReceipt } from "./arming-authority.js";
-import type { PublishedDefinitionPort, WorkflowPublicationContext, WorkflowTriggerRunPorts, WorkflowErrorPort } from "./ports.js";
+import type { PublishedDefinitionPort, WorkflowPublicationContext, WorkflowTriggerRunPorts, WorkflowErrorPort, WorkflowTriggerAdmission } from "./ports.js";
 export declare const workflowTriggerTargetSchema: z.ZodObject<{
     installationId: z.ZodString;
     workflowId: z.ZodString;
@@ -14,9 +14,9 @@ export declare const workflowTriggerTargetSchema: z.ZodObject<{
         readonly appReleaseKind: "Sha256Digest";
     }, string>>;
     triggerId: z.ZodString;
-    bindings: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    bindings: z.ZodRecord<z.ZodLazy<z.ZodString>, z.ZodUnion<readonly [z.ZodString, z.ZodLazy<z.ZodObject<{
         kind: z.ZodLiteral<"team-source">;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>>]>>;
     delivery: z.ZodOptional<z.ZodCustom<{
         readonly agentId: string;
         readonly sessionId: string;
@@ -65,9 +65,9 @@ export declare const armedWorkflowTriggerSchema: z.ZodObject<{
         readonly appReleaseKind: "Sha256Digest";
     }, string>>;
     triggerId: z.ZodString;
-    bindings: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    bindings: z.ZodRecord<z.ZodLazy<z.ZodString>, z.ZodUnion<readonly [z.ZodString, z.ZodLazy<z.ZodObject<{
         kind: z.ZodLiteral<"team-source">;
-    }, z.core.$strict>]>>;
+    }, z.core.$strict>>]>>;
     delivery: z.ZodOptional<z.ZodCustom<{
         readonly agentId: string;
         readonly sessionId: string;
@@ -382,9 +382,11 @@ export declare function createTeamWorkflowTriggers(options: {
                 readonly timeout: number;
                 readonly kind: "review";
                 readonly reviewers: "runner" | "owners";
+                readonly detail?: string;
                 readonly choices?: readonly {
                     readonly id: string;
                     readonly label: string;
+                    readonly description?: string;
                 }[];
             } | {
                 readonly id: string;
@@ -483,9 +485,11 @@ export declare function createTeamWorkflowTriggers(options: {
                         readonly timeout: number;
                         readonly kind: "review";
                         readonly reviewers: "runner" | "owners";
+                        readonly detail?: string;
                         readonly choices?: readonly {
                             readonly id: string;
                             readonly label: string;
+                            readonly description?: string;
                         }[];
                     } | {
                         readonly id: string;
@@ -577,7 +581,7 @@ export declare function createTeamWorkflowTriggers(options: {
     invalidateInstallation: (installationId: string) => void;
     /** The single native push owner supplies host-issued Git, never a fire caller. */
     revalidatePublished(installationId: string, git: GitBinding): Promise<void>;
-    fire(raw: ArmedWorkflowTrigger, scope: string, event: TriggerEvent): Promise<Readonly<{
+    fire(raw: ArmedWorkflowTrigger, scope: string, event: TriggerEvent, admission?: WorkflowTriggerAdmission): Promise<Readonly<{
         kind: "ignored";
     }> | Readonly<{
         kind: "started" | "replay" | "conflict";

package/dist/runtime/trigger-owner.js

@@ -213,7 +213,7 @@ export function createTeamWorkflowTriggers(options) {
                     options.runs.triggerPlans.refuse(binding, "commit no longer published");
             }
         },
-        async fire(raw, scope, event) {
+        async fire(raw, scope, event, admission) {
             const binding = armedWorkflowTriggerSchema.parse(raw);
             try {
                 const current = await options.admit(binding.armedBy, binding.installationId, binding.computerId);
@@ -256,7 +256,7 @@ export function createTeamWorkflowTriggers(options) {
                 };
                 const result = await options.runs.startCachedGraph(binding, mapped.repository === undefined
                     ? request
-                    : { ...request, triggerRepository: mapped.repository });
+                    : { ...request, triggerRepository: mapped.repository }, admission);
                 if (result.kind === "refused")
                     return result;
                 if (result.kind === "conflict")

package/dist/runtime/trigger-plans.d.ts

@@ -138,9 +138,11 @@ export declare function createTriggerPlans(sql: WatchdogSqliteOwner["sql"]): {
                     readonly timeout: number;
                     readonly kind: "review";
                     readonly reviewers: "runner" | "owners";
+                    readonly detail?: string;
                     readonly choices?: readonly {
                         readonly id: string;
                         readonly label: string;
+                        readonly description?: string;
                     }[];
                 } | {
                     readonly id: string;
@@ -239,9 +241,11 @@ export declare function createTriggerPlans(sql: WatchdogSqliteOwner["sql"]): {
                             readonly timeout: number;
                             readonly kind: "review";
                             readonly reviewers: "runner" | "owners";
+                            readonly detail?: string;
                             readonly choices?: readonly {
                                 readonly id: string;
                                 readonly label: string;
+                                readonly description?: string;
                             }[];
                         } | {
                             readonly id: string;
@@ -516,9 +520,11 @@ export declare function createTriggerPlans(sql: WatchdogSqliteOwner["sql"]): {
                     readonly timeout: number;
                     readonly kind: "review";
                     readonly reviewers: "runner" | "owners";
+                    readonly detail?: string;
                     readonly choices?: readonly {
                         readonly id: string;
                         readonly label: string;
+                        readonly description?: string;
                     }[];
                 } | {
                     readonly id: string;
@@ -617,9 +623,11 @@ export declare function createTriggerPlans(sql: WatchdogSqliteOwner["sql"]): {
                             readonly timeout: number;
                             readonly kind: "review";
                             readonly reviewers: "runner" | "owners";
+                            readonly detail?: string;
                             readonly choices?: readonly {
                                 readonly id: string;
                                 readonly label: string;
+                                readonly description?: string;
                             }[];
                         } | {
                             readonly id: string;

package/dist/runtime/trigger-run-reservations.d.ts

@@ -1,14 +1,78 @@
 import { z } from "zod";
 import type { WatchdogSqliteOwner } from "@fungi.computer/watchdog";
-declare const triggerRunScopeSchema: z.ZodObject<{
+declare const triggerRunScopeSchema: z.ZodLazy<z.ZodObject<{
     installationId: z.ZodString;
     workflowId: z.ZodString;
     commit: z.ZodString;
     triggerId: z.ZodString;
-}, z.core.$strict>;
+}, z.core.$strict>>;
 export type TriggerRunScope = z.output<typeof triggerRunScopeSchema>;
+declare const deliveryInputSchema: z.ZodObject<{
+    scope: z.ZodLazy<z.ZodObject<{
+        installationId: z.ZodString;
+        workflowId: z.ZodString;
+        commit: z.ZodString;
+        triggerId: z.ZodString;
+    }, z.core.$strict>>;
+    delivery: z.ZodObject<{
+        host: z.ZodString;
+        tenant: z.ZodString;
+        bindingId: z.ZodString;
+        eventId: z.ZodString;
+    }, z.core.$strict>;
+    cargo: z.ZodJSONSchema;
+    limits: z.ZodObject<{
+        hostConcurrency: z.ZodNumber;
+        bindingConcurrency: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+declare const deliveryOwnerSchema: z.ZodObject<{
+    host: z.ZodString;
+    tenant: z.ZodString;
+}, z.core.$strict>;
 /** The enclosing Team owner supplies SQLite; callers never select the Team. */
-export declare function createTriggerRunReservations(options: Pick<WatchdogSqliteOwner, "sql" | "transactionSync">): {
+export declare function createTriggerRunReservations(options: Pick<WatchdogSqliteOwner, "sql" | "transactionSync"> & {
+    now?: () => number;
+}): {
+    /** Opaque verified cargo and delivery identity live with the run reservation. */
+    reserveWebhookDelivery(raw: z.input<typeof deliveryInputSchema>): {
+        kind: "reserved" | "replay";
+        reservationId: string;
+        runId: string | null;
+    } | {
+        kind: "refused";
+        reason: "limit";
+    };
+    /** Bounded restart/lost-launch-reply recovery over the SAME reservations. */
+    pendingWebhookDeliveries(rawOwner: z.input<typeof deliveryOwnerSchema>): ({
+        kind: "launch";
+        reservationId: string;
+        runId: string;
+    } | {
+        scope: {
+            installationId: string;
+            workflowId: string;
+            commit: string;
+            triggerId: string;
+        };
+        delivery: {
+            host: string;
+            tenant: string;
+            bindingId: string;
+            eventId: string;
+        };
+        cargo: z.core.util.JSONType;
+        limits: {
+            hostConcurrency: number;
+            bindingConcurrency: number;
+        };
+        kind: "start";
+        reservationId: string;
+        runId?: never;
+    })[];
+    /** Native alarms share this deadline with schedules, including idle TTL cleanup. */
+    nextWebhookWake(rawOwner: z.input<typeof deliveryOwnerSchema>): number | null;
+    completeWebhookDelivery(rawReservationId: string): void;
     reserveTriggerRun(raw: {
         scope: TriggerRunScope;
         requestId: string;