@hasna/workflows 0.2.1 → 0.2.2

package/hasna.contract.json

@@ -3,7 +3,7 @@
   "name": "workflows",
   "class": "service",
   "contractVersion": "v1",
-  "kitVersion": "1.3.3",
+  "kitVersion": "1.3.5",
   "description": "Hosted workflow CLI, MCP and HTTP SDK, with a PostgreSQL execution server and a preserved session journal.",
   "bins": [
     "workflows",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/workflows",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Universal graph workflow app — graph language (start/step/decision/while/end), three-table store, session WAL, daemon with claims/leases, four lane adapters (claude/codex/cursor/grok), and a full CLI on four surfaces",
   "type": "module",
   "main": "./dist/index.js",
@@ -76,7 +76,7 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.234",
     "@cursor/sdk": "^1.0.28",
-    "@hasna/contracts": "1.3.3",
+    "@hasna/contracts": "1.3.5",
     "@openai/codex-sdk": "0.160.0",
     "commander": "^13.1.0",
     "pg": "^8.16.3"

package/types/journal-directory.d.ts

@@ -0,0 +1,4 @@
+/** An optional deployment identity prevents an empty fallback directory from
+ * being mistaken for the restored journal. Provision the marker separately,
+ * after preservation and restore verification; the runtime never creates it. */
+export declare function assertJournalDirectory(dataDir: string, identity: string): void;

package/types/serve/journal-lease.d.ts

@@ -0,0 +1,7 @@
+/** A process-lifetime filesystem mutex, separate from the short journal mutex.
+ * There are no tables or application records in this file. Closing the process
+ * releases its OS lock; the file is never deleted to steal another process's
+ * lease. All server processes must bind the same verified local filesystem. */
+export declare function acquireJournalServerLease(dataDir: string, identity: string): {
+    close(): void;
+};

package/types/service.d.ts

@@ -1,20 +1,28 @@
 import { type RunToCompletionOptions } from "./daemon.js";
 import { openStore } from "./store.js";
-import type { WorkflowGraph } from "./graph.js";
+import { type LaneKind, type WorkflowGraph } from "./graph.js";
+import { type LaneProbe } from "./lanes/index.js";
 import type { HealthReport, ReadinessReport, WorkflowsConfig } from "./types.js";
 export { packageVersion } from "./version.js";
+type ResolvedWorkflowsConfig = WorkflowsConfig & {
+    enabledLanes: readonly LaneKind[];
+};
 /** Resolve the service configuration from env + explicit overrides. */
-export declare function resolveWorkflowsConfig(overrides?: Partial<WorkflowsConfig>): WorkflowsConfig;
+export declare function resolveWorkflowsConfig(overrides?: Partial<WorkflowsConfig>): ResolvedWorkflowsConfig;
 export declare class WorkflowsService {
     private readonly execution;
     readonly name = "workflows";
     readonly version: string;
-    readonly config: WorkflowsConfig;
+    readonly config: ResolvedWorkflowsConfig;
     private readonly startedAt;
     private readonly databaseEnv;
     constructor(config?: Partial<WorkflowsConfig>, execution?: RunToCompletionOptions);
     health(): HealthReport;
     ready(): Promise<ReadinessReport>;
+    private verifyJournalDirectory;
+    private assertEnabledGraphLanes;
+    probeLane(kind: LaneKind): Promise<LaneProbe>;
+    laneInventory(): Promise<LaneProbe[]>;
     private openEngineStore;
     private withStore;
     /** Explicit operator bootstrap; ordinary reads and server startup never create tables. */
@@ -26,7 +34,7 @@ export declare class WorkflowsService {
     cancelRun(id: string): Promise<import("./store.js").RunRow | undefined>;
     resumeRun(id: string): Promise<{
         runId: string;
-        status: "cancelled" | "pending" | "running" | "completed" | "failed" | "interrupted";
+        status: "pending" | "running" | "completed" | "failed" | "cancelled" | "interrupted";
         error: string | null;
         result: any;
         reused: boolean;

package/types/types.d.ts

@@ -20,12 +20,16 @@ export interface WorkflowsConfig {
     apiUrl?: string;
     /** Optional client API key (WORKFLOWS_API_KEY) — resolved, never printed. */
     apiKey?: string;
+    /** Optional restored-data marker checked before any server storage access. */
+    dataIdentity?: string;
     /** Gateway origin identity. When configured, every /v1 route requires it. */
     originAuth?: string;
     /** Hosted server authority. SQLite requires an explicit embedded selection. */
     storageBackend: "postgresql" | "sqlite";
     databaseUrl?: string;
     databaseSchema?: string;
+    /** Model lanes admitted by this server. An empty list permits command steps only. */
+    enabledLanes?: readonly import("./graph.js").LaneKind[];
 }
 export interface HealthReport {
     ok: boolean;