@hasna/workflows 0.2.0 → 0.2.2

package/hasna.contract.json

@@ -3,7 +3,7 @@
   "name": "workflows",
   "class": "service",
   "contractVersion": "v1",
-  "kitVersion": "1.3.3",
+  "kitVersion": "1.3.5",
   "description": "Hosted workflow CLI, MCP and HTTP SDK, with a PostgreSQL execution server and a preserved session journal.",
   "bins": [
     "workflows",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/workflows",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Universal graph workflow app — graph language (start/step/decision/while/end), three-table store, session WAL, daemon with claims/leases, four lane adapters (claude/codex/cursor/grok), and a full CLI on four surfaces",
   "type": "module",
   "main": "./dist/index.js",
@@ -76,9 +76,9 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.234",
     "@cursor/sdk": "^1.0.28",
-    "@openai/codex-sdk": "0.147.0",
+    "@hasna/contracts": "1.3.5",
+    "@openai/codex-sdk": "0.160.0",
     "commander": "^13.1.0",
-    "@hasna/contracts": "1.3.3",
     "pg": "^8.16.3"
   },
   "devDependencies": {

package/types/graph.d.ts

@@ -2,6 +2,8 @@ export declare const GRAPH_NODE_TYPES: readonly ["start", "step", "decision", "w
 export type GraphNodeType = (typeof GRAPH_NODE_TYPES)[number];
 export declare const LANE_KINDS: readonly ["claude", "codex", "cursor", "grok"];
 export type LaneKind = (typeof LANE_KINDS)[number];
+export declare const CODEX_EXECUTION_MODES: readonly ["repository", "read-only"];
+export type CodexExecutionMode = (typeof CODEX_EXECUTION_MODES)[number];
 export interface StartNode {
     id: string;
     type: "start";
@@ -16,6 +18,10 @@ export interface StepNode {
     prompt?: string;
     /** Shell command alternative to a lane prompt. */
     command?: string;
+    /** Working directory on the executor, shared by shell and model lanes. */
+    cwd?: string;
+    /** Codex prompts only. Read-only permits nonrepository work without writes or approvals. */
+    codexMode?: CodexExecutionMode;
     next?: string;
     /** Retries on lane failure. Default 0. */
     maxRetries?: number;

package/types/journal-directory.d.ts

@@ -0,0 +1,4 @@
+/** An optional deployment identity prevents an empty fallback directory from
+ * being mistaken for the restored journal. Provision the marker separately,
+ * after preservation and restore verification; the runtime never creates it. */
+export declare function assertJournalDirectory(dataDir: string, identity: string): void;

package/types/lanes/codex.d.ts

@@ -1,9 +1,3 @@
-/**
- * codex lane adapter — @openai/codex-sdk.
- *
- * `new Codex({ config, env })` -> `thread.run(prompt)` -> `Turn` whose
- * `finalResponse` is the completed agent output. CLI fallback: `codex exec`.
- */
 import { type LaneAdapter } from "./types.js";
 export interface CodexAdapterDeps {
     sdkLoader?: () => Promise<unknown>;

package/types/lanes/types.d.ts

@@ -1,3 +1,4 @@
+import type { CodexExecutionMode } from "../graph.js";
 export declare const LANE_KINDS: readonly ["claude", "codex", "cursor", "grok"];
 export type LaneKind = (typeof LANE_KINDS)[number];
 export interface LaneJob {
@@ -7,6 +8,8 @@ export interface LaneJob {
     /** Shell command alternative (handled by the daemon's built-in executor). */
     command?: string;
     cwd?: string;
+    /** Repository checks remain native defaults unless read-only is explicitly selected. */
+    codexMode?: CodexExecutionMode;
     /** Environment for the lane process — never credentials from the vault. */
     env?: Record<string, string>;
     /** Per-invocation budget in ms. Default 120000. */
@@ -70,4 +73,5 @@ export declare function spawnCli(cmd: string[], opts: {
     timeoutMs?: number;
     binaryName: string;
     packageHint: string;
+    stdoutOnly?: boolean;
 }): Promise<LaneResult>;

package/types/sdk/generated-api.d.ts

@@ -36,6 +36,8 @@ export interface StepNode {
     "lane"?: "claude" | "codex" | "cursor" | "grok";
     "prompt"?: string;
     "command"?: string;
+    "cwd"?: string;
+    "codexMode"?: "repository" | "read-only";
     "maxRetries"?: number;
     "memo"?: boolean;
     "timeoutMs"?: number;

package/types/serve/journal-lease.d.ts

@@ -0,0 +1,7 @@
+/** A process-lifetime filesystem mutex, separate from the short journal mutex.
+ * There are no tables or application records in this file. Closing the process
+ * releases its OS lock; the file is never deleted to steal another process's
+ * lease. All server processes must bind the same verified local filesystem. */
+export declare function acquireJournalServerLease(dataDir: string, identity: string): {
+    close(): void;
+};

package/types/service.d.ts

@@ -1,20 +1,28 @@
 import { type RunToCompletionOptions } from "./daemon.js";
 import { openStore } from "./store.js";
-import type { WorkflowGraph } from "./graph.js";
+import { type LaneKind, type WorkflowGraph } from "./graph.js";
+import { type LaneProbe } from "./lanes/index.js";
 import type { HealthReport, ReadinessReport, WorkflowsConfig } from "./types.js";
 export { packageVersion } from "./version.js";
+type ResolvedWorkflowsConfig = WorkflowsConfig & {
+    enabledLanes: readonly LaneKind[];
+};
 /** Resolve the service configuration from env + explicit overrides. */
-export declare function resolveWorkflowsConfig(overrides?: Partial<WorkflowsConfig>): WorkflowsConfig;
+export declare function resolveWorkflowsConfig(overrides?: Partial<WorkflowsConfig>): ResolvedWorkflowsConfig;
 export declare class WorkflowsService {
     private readonly execution;
     readonly name = "workflows";
     readonly version: string;
-    readonly config: WorkflowsConfig;
+    readonly config: ResolvedWorkflowsConfig;
     private readonly startedAt;
     private readonly databaseEnv;
     constructor(config?: Partial<WorkflowsConfig>, execution?: RunToCompletionOptions);
     health(): HealthReport;
     ready(): Promise<ReadinessReport>;
+    private verifyJournalDirectory;
+    private assertEnabledGraphLanes;
+    probeLane(kind: LaneKind): Promise<LaneProbe>;
+    laneInventory(): Promise<LaneProbe[]>;
     private openEngineStore;
     private withStore;
     /** Explicit operator bootstrap; ordinary reads and server startup never create tables. */
@@ -26,7 +34,7 @@ export declare class WorkflowsService {
     cancelRun(id: string): Promise<import("./store.js").RunRow | undefined>;
     resumeRun(id: string): Promise<{
         runId: string;
-        status: "cancelled" | "pending" | "running" | "completed" | "failed" | "interrupted";
+        status: "pending" | "running" | "completed" | "failed" | "cancelled" | "interrupted";
         error: string | null;
         result: any;
         reused: boolean;

package/types/types.d.ts

@@ -20,12 +20,16 @@ export interface WorkflowsConfig {
     apiUrl?: string;
     /** Optional client API key (WORKFLOWS_API_KEY) — resolved, never printed. */
     apiKey?: string;
+    /** Optional restored-data marker checked before any server storage access. */
+    dataIdentity?: string;
     /** Gateway origin identity. When configured, every /v1 route requires it. */
     originAuth?: string;
     /** Hosted server authority. SQLite requires an explicit embedded selection. */
     storageBackend: "postgresql" | "sqlite";
     databaseUrl?: string;
     databaseSchema?: string;
+    /** Model lanes admitted by this server. An empty list permits command steps only. */
+    enabledLanes?: readonly import("./graph.js").LaneKind[];
 }
 export interface HealthReport {
     ok: boolean;