@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5682

package/dist/workflows/run/prompts.d.ts

@@ -0,0 +1,74 @@
+import type { ContentBlock } from '../../core/agent-runner.ts';
+import type { RunRecord } from '../../runs/store.ts';
+import type { Skill } from '../../skills.ts';
+/**
+ * The effective "extra" system prompt for a run (spec §protocol v2, R2 2.3):
+ * the per-run override (`POST /api/runs` `systemPrompt`) REPLACES the
+ * `config.json` default — they are the same knob at two scopes, so the more
+ * specific one wins outright; they never concatenate. Whichever wins is
+ * ADDITIVE to the skill body and the handoff contract, which always ride
+ * along (see `composeSystemPrompt`). Blank strings count as unset.
+ */
+export declare function resolveExtraSystemPrompt(override: string | undefined, configDefault: string | undefined): string | undefined;
+/**
+ * Joins the parts of one agent step's system prompt in fixed order — skill
+ * body (most task-specific), then the run's extra prompt (user guidance, can
+ * amend the skill), then the handoff contract (always last, never optional in
+ * practice). Blank parts drop out; survivors join with the same `\n\n---\n\n`
+ * divider the skill+handoff composition has always used.
+ */
+export declare function composeSystemPrompt(...parts: Array<string | undefined>): string;
+/**
+ * The directories a spawned agent may reach outside its worktree: the run-state
+ * folder that holds its handoff file, plus its own temp directory when this run
+ * got one (#785). Handing an agent a `TMPDIR` its file tools are not allowed to
+ * write would trade one silent failure for another, so the two travel together;
+ * under `CEZ_AGENT_TMPDIR=0` there is no per-run directory and the list is
+ * exactly what it always was.
+ */
+export declare function agentDirectories(runsDir: string, env: Record<string, string>): string[];
+/** Compose only at delivery. The durable continuation retains its original text/attachments. */
+export declare function withResumeContext(prompt: string, message: RunRecord['continuationMessage']): string;
+export declare function applyTemplate(template: string, task: string): string;
+/**
+ * Skill identity is context, while the Markdown body remains instructions.
+ *
+ * For an on-disk skill we also hand the agent the ABSOLUTE directory of the
+ * installed copy. A run executes in an isolated worktree that has no local
+ * `.agents/skills` (gitignored, absent in a fresh checkout), so without this
+ * the agent cannot read the skill's companion files (`references/*.md`) — or,
+ * worse, reads a stale copy materialized from the team-repo cache. The path
+ * resolves against the MAIN project root (`discoverSkills(repoRoot)`), i.e. the
+ * current `npx skills`-installed copy, so a worktree agent and the main
+ * checkout read the exact same, up-to-date files. A team skill's `path` is not
+ * on disk: its files are materialized per run (`RunSkills.provisionRunSkills`).
+ * Inside the run's task worktree they need no pointer; a run without one, or
+ * whose worktree took no copy, gets a per-commit cache copy, passed here as
+ * `teamFilesDir` (#1024). A worktree that took only some of its copies passes
+ * the first one it did take.
+ */
+export declare function skillSystemPrompt(skill: Pick<Skill, 'name' | 'description' | 'body'> & Partial<Pick<Skill, 'path' | 'source'>>, teamFilesDir?: string): string;
+/**
+ * Expand a registry-backed slash skill in one prompt string before it reaches a
+ * backend. Claude otherwise intercepts an unknown leading slash command, and
+ * Codex/OpenCode have no native slash-skill lookup at all (#676).
+ *
+ * Only a match at character zero counts, and unknown commands pass through
+ * byte-for-byte — a backend's OWN slash commands must keep working. The caller
+ * persists the original user text before applying this delivery-only rewrite.
+ *
+ * All delivery seams route through here: live-session messages via
+ * `expandRegistrySlashSkill`, and fresh or continuation opening prompts, which
+ * become the session's `userPrompt` without passing through `deliverMessage`.
+ */
+export declare function expandRegistrySlashSkillText(text: string, skills: readonly Skill[], 
+/** Per team skill, the cache or partial copy its prompt names (#1118). */
+teamFilesDir?: ReadonlyMap<string, string>): string;
+/** The `name` of a prompt's leading `/name` slash command, else undefined. */
+export declare function leadingSlashSkillName(text: string): string | undefined;
+/**
+ * `expandRegistrySlashSkillText` over a live chat message: only the first text
+ * block is eligible, and an unchanged block returns the caller's array
+ * identity untouched.
+ */
+export declare function expandRegistrySlashSkill(content: ContentBlock[], skills: readonly Skill[]): ContentBlock[];

package/dist/workflows/run/prompts.js

@@ -0,0 +1,140 @@
+import { dirname } from 'node:path';
+/**
+ * The effective "extra" system prompt for a run (spec §protocol v2, R2 2.3):
+ * the per-run override (`POST /api/runs` `systemPrompt`) REPLACES the
+ * `config.json` default — they are the same knob at two scopes, so the more
+ * specific one wins outright; they never concatenate. Whichever wins is
+ * ADDITIVE to the skill body and the handoff contract, which always ride
+ * along (see `composeSystemPrompt`). Blank strings count as unset.
+ */
+export function resolveExtraSystemPrompt(override, configDefault) {
+    return override?.trim() || configDefault?.trim() || undefined;
+}
+/**
+ * Joins the parts of one agent step's system prompt in fixed order — skill
+ * body (most task-specific), then the run's extra prompt (user guidance, can
+ * amend the skill), then the handoff contract (always last, never optional in
+ * practice). Blank parts drop out; survivors join with the same `\n\n---\n\n`
+ * divider the skill+handoff composition has always used.
+ */
+export function composeSystemPrompt(...parts) {
+    return parts
+        .map((p) => p?.trim())
+        .filter((p) => Boolean(p))
+        .join('\n\n---\n\n');
+}
+/**
+ * The directories a spawned agent may reach outside its worktree: the run-state
+ * folder that holds its handoff file, plus its own temp directory when this run
+ * got one (#785). Handing an agent a `TMPDIR` its file tools are not allowed to
+ * write would trade one silent failure for another, so the two travel together;
+ * under `CEZ_AGENT_TMPDIR=0` there is no per-run directory and the list is
+ * exactly what it always was.
+ */
+export function agentDirectories(runsDir, env) {
+    return env.TMPDIR ? [runsDir, env.TMPDIR] : [runsDir];
+}
+/** Compose only at delivery. The durable continuation retains its original text/attachments. */
+export function withResumeContext(prompt, message) {
+    const context = message?.resumeContext;
+    if (!context?.failure && !context?.restarted)
+        return prompt;
+    const parts = [];
+    if (context.restarted)
+        parts.push('The cezar process restarted while you were working on this task. Read the handoff file (HSQ_HANDOFF_FILE (CEZ_HANDOFF_FILE fallback)) to recover context.');
+    if (context.failure) {
+        const { stepId, error } = context.failure;
+        // Error messages can contain newlines; keep the diagnostic on one line without changing
+        // the saved error, or the human text that follows it.
+        parts.push(`The previous ${stepId ? `step ${JSON.stringify(stepId)}` : 'turn'} failed: ${error.replace(/[\r\n\u2028\u2029]+/g, ' ')}`);
+    }
+    parts.push('Background commands from that session may have stopped; verify their state before restarting them.');
+    return `${parts.join(' ')}\n${prompt}`;
+}
+export function applyTemplate(template, task) {
+    return template.replaceAll('{{task}}', task);
+}
+/**
+ * Skill identity is context, while the Markdown body remains instructions.
+ *
+ * For an on-disk skill we also hand the agent the ABSOLUTE directory of the
+ * installed copy. A run executes in an isolated worktree that has no local
+ * `.agents/skills` (gitignored, absent in a fresh checkout), so without this
+ * the agent cannot read the skill's companion files (`references/*.md`) — or,
+ * worse, reads a stale copy materialized from the team-repo cache. The path
+ * resolves against the MAIN project root (`discoverSkills(repoRoot)`), i.e. the
+ * current `npx skills`-installed copy, so a worktree agent and the main
+ * checkout read the exact same, up-to-date files. A team skill's `path` is not
+ * on disk: its files are materialized per run (`RunSkills.provisionRunSkills`).
+ * Inside the run's task worktree they need no pointer; a run without one, or
+ * whose worktree took no copy, gets a per-commit cache copy, passed here as
+ * `teamFilesDir` (#1024). A worktree that took only some of its copies passes
+ * the first one it did take.
+ */
+export function skillSystemPrompt(skill, teamFilesDir) {
+    const lines = [
+        `Selected skill: /${skill.name}`,
+        ...(skill.description ? [`Description: ${skill.description}`] : []),
+    ];
+    if (skill.source && skill.source !== 'team' && skill.source !== 'builtin' && skill.path) {
+        const dir = dirname(skill.path);
+        lines.push('', `Skill files are installed on disk at: ${dir}`, `Read any file this skill references (for example references/*.md) from that absolute directory. ` +
+            `It is the current installed copy — use it even though your working directory is a separate worktree that does not contain the skill.`);
+    }
+    else if (skill.source === 'team' && teamFilesDir) {
+        lines.push('', `Skill files are installed on disk at: ${teamFilesDir}`, `Read any file this skill references (for example references/*.md) from that absolute directory. ` +
+            `It is a copy of the skill at the commit this run uses.`);
+    }
+    lines.push('', 'Skill instructions:', skill.body.trim());
+    return lines.join('\n');
+}
+/**
+ * Expand a registry-backed slash skill in one prompt string before it reaches a
+ * backend. Claude otherwise intercepts an unknown leading slash command, and
+ * Codex/OpenCode have no native slash-skill lookup at all (#676).
+ *
+ * Only a match at character zero counts, and unknown commands pass through
+ * byte-for-byte — a backend's OWN slash commands must keep working. The caller
+ * persists the original user text before applying this delivery-only rewrite.
+ *
+ * All delivery seams route through here: live-session messages via
+ * `expandRegistrySlashSkill`, and fresh or continuation opening prompts, which
+ * become the session's `userPrompt` without passing through `deliverMessage`.
+ */
+export function expandRegistrySlashSkillText(text, skills, 
+/** Per team skill, the cache or partial copy its prompt names (#1118). */
+teamFilesDir) {
+    const name = leadingSlashSkillName(text);
+    if (!name)
+        return text;
+    const skill = skills.find((candidate) => candidate.name === name);
+    if (!skill)
+        return text;
+    const playbook = skillSystemPrompt(skill, teamFilesDir?.get(skill.name));
+    const request = text.slice(name.length + 1).trim();
+    return request ? `${playbook}\n\nUser request:\n${request}` : playbook;
+}
+/** The `name` of a prompt's leading `/name` slash command, else undefined. */
+export function leadingSlashSkillName(text) {
+    return /^\/([A-Za-z0-9][A-Za-z0-9._-]*)(?=\s|$)/.exec(text)?.[1];
+}
+/**
+ * `expandRegistrySlashSkillText` over a live chat message: only the first text
+ * block is eligible, and an unchanged block returns the caller's array
+ * identity untouched.
+ */
+export function expandRegistrySlashSkill(content, skills) {
+    const textIndex = content.findIndex((block) => block.type === 'text');
+    if (textIndex < 0)
+        return content;
+    const block = content[textIndex];
+    if (!block || block.type !== 'text')
+        return content;
+    const text = expandRegistrySlashSkillText(block.text, skills);
+    if (text === block.text)
+        return content;
+    const expanded = [...content];
+    expanded[textIndex] = { type: 'text', text };
+    return expanded;
+}
+//# sourceMappingURL=prompts.js.map

package/dist/workflows/run/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../../src/workflows/run/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA4B,EAC5B,aAAiC;IAEjC,OAAO,QAAQ,EAAE,IAAI,EAAE,IAAI,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAG,KAAgC;IACrE,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SACrB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SACtC,IAAI,CAAC,aAAa,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,GAA2B;IAC3E,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAyC;IACzF,MAAM,OAAO,GAAG,OAAO,EAAE,aAAa,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS;QAAE,OAAO,MAAM,CAAC;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,2JAA2J,CAAC,CAAC;IAC/L,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAC1C,wFAAwF;QACxF,sDAAsD;QACtD,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,YAAY,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;IACjH,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;AACzC,CAAC;AAGD,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAY;IAC1D,OAAO,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA6F,EAC7F,YAAqB;IAErB,MAAM,KAAK,GAAG;QACZ,oBAAoB,KAAK,CAAC,IAAI,EAAE;QAChC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACxF,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,yCAAyC,GAAG,EAAE,EAC9C,kGAAkG;YAChG,sIAAsI,CACzI,CAAC;IACJ,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,YAAY,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,yCAAyC,YAAY,EAAE,EACvD,kGAAkG;YAChG,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,MAAwB;AACxB,0EAA0E;AAC1E,YAA0C;IAE1C,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,sBAAsB,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAuB,EACvB,MAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACtE,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACpD,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAExC,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7C,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/workflows/run/queued-input.d.ts

@@ -0,0 +1,108 @@
+import type { ContentBlock } from '../../core/agent-runner.ts';
+import type { QueuedMessage, RunRecord } from '../../runs/store.ts';
+import { type PastedContent, type PersistedAttachment } from '../pasted-content.ts';
+import type { WorkflowDef } from '../types.ts';
+import type { PendingContinuation, RunModuleContext, StartRunInput } from './types.ts';
+interface PersistedAttachments {
+    blocks: ContentBlock[];
+    attachments: PersistedAttachment[];
+}
+interface QueuedInputHost {
+    hasJob(runId: string): boolean;
+    hasContinuation(runId: string): boolean;
+    job(runId: string): {
+        workflow: WorkflowDef;
+    } | undefined;
+    canProceedWithRun(runId: string, run: RunRecord | undefined): run is RunRecord;
+    activeGet(runId: string): import('../active-run.ts').ActiveRun | undefined;
+    startingHas(runId: string): boolean;
+    persistPastedAttachments(runId: string, content: readonly PastedContent[]): PersistedAttachment[];
+    toQueuedMessage(runId: string, content: PastedContent[]): QueuedMessage;
+    sendMessage(runId: string, content: PastedContent[], messageId?: string): boolean;
+}
+export declare class QueuedInput {
+    private readonly context;
+    private readonly host;
+    /** Messages after hydration in the dequeue → session-open gap (#472).
+     * Wait-withdrawing entries also retain a durable queue ID until delivered. */
+    readonly deferredMessages: Map<string, {
+        content: PastedContent[];
+        messageId?: string;
+    }[]>;
+    constructor(context: RunModuleContext, host: QueuedInputHost);
+    /**
+     * Fold the persisted task and queued message stack immediately before execution. Keep durable
+     * record state authoritative over pendingJobs. Read-only: never write the composite back to
+     * RunRecord.task; task and stack stay separate.
+     */
+    hydrateQueuedInput(runId: string, input: StartRunInput): StartRunInput;
+    /** Apply edits and messages made while a restart continuation waits for
+     * capacity. The durable record remains the source of truth, just as it is for
+     * an ordinary queued workflow (#472), so a second restart reconstructs and
+     * hydrates the same amendments instead of dropping them. */
+    hydrateQueuedContinuation(runId: string, continuation: PendingContinuation): PendingContinuation & {
+        persistedImages: ContentBlock[];
+        persistedAttachments: PersistedAttachment[];
+    };
+    /**
+     * Re-read persisted attachments at dequeue/restart (#472): an image comes back as a viewable
+     * block AND a path, a file (#950) as a path only. The branch is on the NAME's extension, never
+     * on which list the URL came from — images and files share one list, and re-encoding a `.pdf`
+     * into a base64 image block is a message no backend can accept.
+     *
+     * A file is still `stat`-checked here rather than trusted: an attachment the user deleted must
+     * drop out of the paths handed to the agent, exactly as a missing image does.
+     */
+    readPersistedAttachments(runId: string, urls: string[], kind: 'task' | 'queued' | 'continuation'): PersistedAttachments;
+    /**
+     * Still waiting for a slot? Checked against the engine's own queue rather than
+     * the record's `status` (#472): the record is written by `execute()` a tick
+     * after `pump()` dequeues, so a status read can see `queued` for a run that has
+     * already started. The pending maps are deleted synchronously at dequeue, so
+     * they are the authoritative answer for "can this prompt still be amended".
+     */
+    private isQueued;
+    /** Split a pasted message into the persisted shape a stacked message holds. */
+    toQueuedMessage(runId: string, content: PastedContent[]): QueuedMessage;
+    /**
+     * Append a prompt message onto a still-queued run (#472). Returns the stored
+     * entry, or null when the run has already started — the caller then falls
+     * through to `deferMessage`.
+     */
+    enqueueMessage(runId: string, content: PastedContent[]): QueuedMessage | null;
+    /** Edit a stacked message in place. Omitted fields retain their current value. */
+    editQueuedMessage(runId: string, msgId: string, edit: {
+        text?: string;
+        images?: PastedContent[];
+    }): QueuedMessage | null;
+    /** Remove a stacked message and its now-orphaned attachments. */
+    removeQueuedMessage(runId: string, msgId: string): boolean;
+    /**
+     * Delete image files no longer referenced by anything (#472). Best effort — a
+     * leftover file is harmless and goes with the run. Never touches a URL still
+     * referenced by another stacked entry or by the initial prompt's `taskImages`.
+     */
+    private dropOrphanImages;
+    /**
+     * Edit the initial prompt of a still-queued run (#472). Re-derives the
+     * heuristic title and the PR/issue chips, but never re-runs the LLM namer —
+     * it already fired at creation and a second model call per edit is unjustified.
+     */
+    editTask(runId: string, task: string): boolean;
+    /**
+     * Buffer a message that arrived in the gap between dequeue and session-open
+     * (#472). `pump()` has already folded the stack and `execute()` is spawning the
+     * backend, so there is nothing left to amend and no session to deliver into —
+     * without this rung the message would 409, a genuinely dropped message in the
+     * feature built to stop dropping them. Flushed as an ordinary follow-up turn
+     * the instant the session opens; dropped if the run never starts, which the
+     * existing error path already surfaces.
+     *
+     * The buffer lives on the manager rather than the `ActiveRun` because the
+     * `ActiveRun` does not exist yet for part of this window.
+     */
+    deferMessage(runId: string, content: PastedContent[]): boolean;
+    /** Deliver anything `deferMessage` buffered, once the session is live. */
+    flushDeferred(runId: string): void;
+}
+export {};

package/dist/workflows/run/queued-input.js

@@ -0,0 +1,249 @@
+import { atTaskHead, atContinue, atLiveInput } from './launch-read-resolver.js';
+import { randomUUID } from 'node:crypto';
+import { rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { extractTaskRefs, refineTaskRefs } from '../../runs/task-refs.js';
+import { makeRunTitle } from '../../runs/run-title.js';
+function buildQueuedMessage(content, images, id, createdAt) {
+    const text = content.filter((b) => b.type === 'text')
+        .map(b => b.text).join('\n');
+    return {
+        id,
+        text: text.trim() || images.length || !content.some(block => block.type !== 'text')
+            ? text : 'The user attached a file, but it could not be saved. Ask them to attach it again before discussing its contents.',
+        ...(images.length ? { images } : {}), createdAt,
+    };
+}
+function buildEditedQueuedMessage(current, msgId, text, uploaded) {
+    const replacementImages = uploaded ? uploaded.images : current.images;
+    const replacementText = text ?? current.text;
+    return {
+        id: msgId,
+        text: replacementText.trim() ? replacementText : uploaded?.text || replacementText,
+        ...(replacementImages?.length ? { images: replacementImages } : {}),
+        createdAt: current.createdAt,
+    };
+}
+export class QueuedInput {
+    context;
+    host;
+    /** Messages after hydration in the dequeue → session-open gap (#472).
+     * Wait-withdrawing entries also retain a durable queue ID until delivered. */
+    deferredMessages = new Map();
+    constructor(context, host) {
+        this.context = context;
+        this.host = host;
+    }
+    /**
+     * Fold the persisted task and queued message stack immediately before execution. Keep durable
+     * record state authoritative over pendingJobs. Read-only: never write the composite back to
+     * RunRecord.task; task and stack stay separate.
+     */
+    hydrateQueuedInput(runId, input) {
+        return atTaskHead.hydrateQueuedInput(this.context, (...args) => this.readPersistedAttachments(...args), runId, input);
+    }
+    /** Apply edits and messages made while a restart continuation waits for
+     * capacity. The durable record remains the source of truth, just as it is for
+     * an ordinary queued workflow (#472), so a second restart reconstructs and
+     * hydrates the same amendments instead of dropping them. */
+    hydrateQueuedContinuation(runId, continuation) {
+        return atContinue.hydrateQueuedContinuation(this.context, (...args) => this.readPersistedAttachments(...args), runId, continuation);
+    }
+    /**
+     * Re-read persisted attachments at dequeue/restart (#472): an image comes back as a viewable
+     * block AND a path, a file (#950) as a path only. The branch is on the NAME's extension, never
+     * on which list the URL came from — images and files share one list, and re-encoding a `.pdf`
+     * into a base64 image block is a message no backend can accept.
+     *
+     * A file is still `stat`-checked here rather than trusted: an attachment the user deleted must
+     * drop out of the paths handed to the agent, exactly as a missing image does.
+     */
+    readPersistedAttachments(runId, urls, kind) {
+        return atTaskHead.attachments(this.context, runId, urls, kind);
+    }
+    /**
+     * Still waiting for a slot? Checked against the engine's own queue rather than
+     * the record's `status` (#472): the record is written by `execute()` a tick
+     * after `pump()` dequeues, so a status read can see `queued` for a run that has
+     * already started. The pending maps are deleted synchronously at dequeue, so
+     * they are the authoritative answer for "can this prompt still be amended".
+     */
+    isQueued(runId) {
+        return this.host.hasJob(runId) || this.host.hasContinuation(runId);
+    }
+    /** Split a pasted message into the persisted shape a stacked message holds. */
+    toQueuedMessage(runId, content) {
+        const images = this.host.persistPastedAttachments(runId, content).map((saved) => saved.url);
+        return buildQueuedMessage(content, images, randomUUID(), new Date().toISOString());
+    }
+    /**
+     * Append a prompt message onto a still-queued run (#472). Returns the stored
+     * entry, or null when the run has already started — the caller then falls
+     * through to `deferMessage`.
+     */
+    enqueueMessage(runId, content) {
+        if (!this.isQueued(runId))
+            return null;
+        const run = this.context.store.getRun(runId);
+        if (!this.host.canProceedWithRun(runId, run))
+            return null;
+        const message = this.host.toQueuedMessage(runId, content);
+        // Human input cancels no wait in the list (hearsay-tools/cezarion#1233, #1235): beside a wait
+        // the message is accepted durably and opens the wake's continuation.
+        if (run.waits?.length)
+            this.context.store.commitHumanMessageBesideWaits(runId, message);
+        else
+            this.context.store.updateRun(runId, { queuedMessages: [...(atLiveInput.queuedMessages(run) ?? []), message] });
+        return message;
+    }
+    /** Edit a stacked message in place. Omitted fields retain their current value. */
+    editQueuedMessage(runId, msgId, edit) {
+        if (!this.isQueued(runId))
+            return null;
+        const run = this.context.store.getRun(runId);
+        const stack = atLiveInput.queuedMessages(run);
+        if (!stack)
+            return null;
+        const at = stack.findIndex((m) => m.id === msgId);
+        if (at < 0)
+            return null;
+        const current = stack[at];
+        const uploaded = edit.images === undefined ? undefined : this.host.toQueuedMessage(runId, edit.images);
+        const replacement = buildEditedQueuedMessage(current, msgId, edit.text, uploaded);
+        const next = [...stack];
+        next[at] = replacement;
+        this.context.store.updateRun(runId, { queuedMessages: next });
+        // Images the edit dropped are now orphans.
+        this.dropOrphanImages(runId, stack[at].images ?? [], next);
+        return replacement;
+    }
+    /** Remove a stacked message and its now-orphaned attachments. */
+    removeQueuedMessage(runId, msgId) {
+        if (!this.isQueued(runId))
+            return false;
+        const run = this.context.store.getRun(runId);
+        const stack = atLiveInput.queuedMessages(run);
+        if (!stack)
+            return false;
+        const target = stack.find((m) => m.id === msgId);
+        if (!target)
+            return false;
+        const next = stack.filter((m) => m.id !== msgId);
+        this.context.store.updateRun(runId, { queuedMessages: next });
+        this.dropOrphanImages(runId, target.images ?? [], next);
+        return true;
+    }
+    /**
+     * Delete image files no longer referenced by anything (#472). Best effort — a
+     * leftover file is harmless and goes with the run. Never touches a URL still
+     * referenced by another stacked entry or by the initial prompt's `taskImages`.
+     */
+    dropOrphanImages(runId, candidates, stack) {
+        if (!candidates.length)
+            return;
+        const run = this.context.store.getRun(runId);
+        const referenced = new Set([
+            ...(atLiveInput.taskAttachmentUrls(run) ?? []),
+            ...stack.flatMap((m) => m.images ?? []),
+        ]);
+        for (const url of candidates) {
+            if (referenced.has(url))
+                continue;
+            const name = url.split('/').pop();
+            // Defend the join against a crafted URL: only a bare file name may be deleted.
+            if (!name || name.includes('..') || name.includes('/') || name.includes('\\'))
+                continue;
+            try {
+                rmSync(join(this.context.dataDir, 'runs', `${runId}-images`, name), { force: true });
+            }
+            catch {
+                /* best effort */
+            }
+        }
+    }
+    /**
+     * Edit the initial prompt of a still-queued run (#472). Re-derives the
+     * heuristic title and the PR/issue chips, but never re-runs the LLM namer —
+     * it already fired at creation and a second model call per edit is unjustified.
+     */
+    editTask(runId, task) {
+        if (!this.isQueued(runId))
+            return false;
+        const run = this.context.store.getRun(runId);
+        if (!run)
+            return false;
+        const workflow = this.host.job(runId)?.workflow;
+        const skillHint = workflow ? atTaskHead.skillHint(workflow) : undefined;
+        const refs = refineTaskRefs(extractTaskRefs(task), skillHint);
+        // Hand-edited titles always win (#389): `user` beats the heuristic, and a
+        // `marker` title the agent declared beats it too.
+        const keepTitle = run.titleOrigin === 'user' || run.titleOrigin === 'marker';
+        this.context.store.updateRun(runId, {
+            task,
+            ...(keepTitle || !workflow ? {} : { title: makeRunTitle(task, workflow) }),
+            ...(refs.prNumber !== undefined ? { prNumber: refs.prNumber } : {}),
+            ...(refs.issueNumber !== undefined ? { issueNumber: refs.issueNumber } : {}),
+        });
+        return true;
+    }
+    /**
+     * Buffer a message that arrived in the gap between dequeue and session-open
+     * (#472). `pump()` has already folded the stack and `execute()` is spawning the
+     * backend, so there is nothing left to amend and no session to deliver into —
+     * without this rung the message would 409, a genuinely dropped message in the
+     * feature built to stop dropping them. Flushed as an ordinary follow-up turn
+     * the instant the session opens; dropped if the run never starts, which the
+     * existing error path already surfaces.
+     *
+     * The buffer lives on the manager rather than the `ActiveRun` because the
+     * `ActiveRun` does not exist yet for part of this window.
+     */
+    deferMessage(runId, content) {
+        const run = this.context.store.getRun(runId);
+        if (!this.host.canProceedWithRun(runId, run))
+            return false;
+        // The window spans two sub-states: `starting` (no `ActiveRun` yet) and the
+        // longer stretch where the `ActiveRun` exists but the backend is still being
+        // spawned. `execute()` deletes the run from `starting` as soon as it builds
+        // the state — seconds before the session opens — so checking `starting`
+        // alone would reopen exactly the drop this rung exists to close.
+        const state = this.host.activeGet(runId);
+        const startingUp = this.host.startingHas(runId) || (state !== undefined && !state.liveSession.sessionEverOpened && !state.liveSession.cancelled);
+        if (!startingUp)
+            return false;
+        // The pending maps were removed only AFTER hydration. This entry therefore
+        // needs live delivery, never a second fold into the already-created opening.
+        // Beside a wait in the list it is accepted durably, and every wait stays
+        // (hearsay-tools/cezarion#1235), so a crash before delivery replays it.
+        const message = run.waits?.length ? this.host.toQueuedMessage(runId, content) : undefined;
+        if (message)
+            this.context.store.commitHumanMessageBesideWaits(runId, message);
+        const pending = this.deferredMessages.get(runId) ?? [];
+        pending.push({ content, ...(message ? { messageId: message.id } : {}) });
+        this.deferredMessages.set(runId, pending);
+        return true;
+    }
+    /** Deliver anything `deferMessage` buffered, once the session is live. */
+    flushDeferred(runId) {
+        const pending = this.deferredMessages.get(runId);
+        if (!pending?.length)
+            return;
+        // Re-buffer whatever the session refused rather than dropping it. `sendMessage`
+        // answers false when the session is not open yet — and silently losing a message
+        // here would be precisely the failure `deferMessage` exists to prevent. Anything
+        // left over is retried by the next session that opens on this run.
+        const unsent = [];
+        for (const entry of pending) {
+            const state = this.host.activeGet(runId);
+            // A queue entry the delivery's checkpoint left in place stays buffered (`deliverMessage`).
+            if (state?.inputState.agentInputError || !this.host.sendMessage(runId, entry.content, entry.messageId) ||
+                (entry.messageId && atLiveInput.queuedMessages(this.context.store.getRun(runId))?.some(message => message.id === entry.messageId)))
+                unsent.push(entry);
+        }
+        if (unsent.length)
+            this.deferredMessages.set(runId, unsent);
+        else
+            this.deferredMessages.delete(runId);
+    }
+}
+//# sourceMappingURL=queued-input.js.map

package/dist/workflows/run/queued-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queued-input.js","sourceRoot":"","sources":["../../../src/workflows/run/queued-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAiBvD,SAAS,kBAAkB,CAAC,OAAwB,EAAE,MAAgB,EAAE,EAAU,EAAE,SAAiB;IACnG,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgD,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SAChG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO;QACL,EAAE;QACF,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;YACjF,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kHAAkH;QAC7H,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAsB,EAAE,KAAa,EAAE,IAAwB,EAAE,QAAmC;IACpI,MAAM,iBAAiB,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACtE,MAAM,eAAe,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAC7C,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,eAAe;QAClF,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,WAAW;IAIO,OAAO;IAAqC,IAAI;IAH7E;kFAC8E;IACrE,gBAAgB,GAAG,IAAI,GAAG,EAAmE,CAAC;IACvG,YAA6B,OAAyB,EAAmB,IAAqB;uBAAjE,OAAO;oBAAqC,IAAI;IAAoB,CAAC;IAElG;;;;OAIG;IACH,kBAAkB,CAAC,KAAa,EAAE,KAAoB;QACpD,OAAO,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACxH,CAAC;IAED;;;gEAG4D;IAC5D,yBAAyB,CACvB,KAAa,EACb,YAAiC;QAKjC,OAAO,UAAU,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IACtI,CAAC;IAED;;;;;;;;OAQG;IACH,wBAAwB,CACtB,KAAa,EACb,IAAc,EACd,IAAwC;QAExC,OAAO,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACK,QAAQ,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IAED,+EAA+E;IAC/E,eAAe,CAAC,KAAa,EAAE,OAAwB;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5F,OAAO,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrF,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,KAAa,EAAE,OAAwB;QACpD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1D,8FAA8F;QAC9F,qEAAqE;QACrE,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;;YACnF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACpH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kFAAkF;IAClF,iBAAiB,CACf,KAAa,EACb,KAAa,EACb,IAAiD;QAEjD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;QAClD,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,CAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvG,MAAM,WAAW,GAAG,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,2CAA2C;QAC3C,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAE,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5D,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,iEAAiE;IACjE,mBAAmB,CAAC,KAAa,EAAE,KAAa;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,KAAa,EAAE,UAAoB,EAAE,KAAsB;QAClF,IAAI,CAAC,UAAU,CAAC,MAAM;YAAE,OAAO;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;YACzB,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9C,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAClC,+EAA+E;YAC/E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxF,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,KAAa,EAAE,IAAY;QAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;QAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,MAAM,IAAI,GAAG,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9D,0EAA0E;QAC1E,kDAAkD;QAClD,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,KAAK,MAAM,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC;QAC7E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE;YAClC,IAAI;YACJ,GAAG,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,KAAa,EAAE,OAAwB;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3D,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjJ,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9B,2EAA2E;QAC3E,6EAA6E;QAC7E,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,aAAa,CAAC,KAAa;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,MAAM;YAAE,OAAO;QAC7B,gFAAgF;QAChF,iFAAiF;QACjF,iFAAiF;QACjF,mEAAmE;QACnE,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,2FAA2F;YAC3F,IAAI,KAAK,EAAE,UAAU,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;gBACpG,CAAC,KAAK,CAAC,SAAS,IAAI,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3J,CAAC;QACD,IAAI,MAAM,CAAC,MAAM;YAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;;YACvD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;CAEF"}

package/dist/workflows/run/queued-revival.d.ts

@@ -0,0 +1,44 @@
+import type { WorkerStepIdentity } from '../../delegation/execution-identity.ts';
+import type { RunRecord, RunStore, QueuedMessage } from '../../runs/store.ts';
+import type { RunExitId } from '../../runs/run-exits.ts';
+import { type WorkflowDef } from '../types.ts';
+import type { PastedContent } from '../pasted-content.ts';
+import type { PendingJob } from './run-line.ts';
+import type { RunModuleContext, PendingContinuation, StartRunInput } from './types.ts';
+export interface QueuedRevivalHost {
+    move(runId: string, exit: RunExitId, patch?: Omit<Parameters<RunStore['updateRun']>[1], 'status'>): RunRecord | undefined;
+    isActive(runId: string): boolean;
+    workerExecutionStopped(runId: string): boolean;
+    ownedJob(run: RunRecord): PendingJob;
+    resumableSessionId(runId: string, step: RunRecord['steps'][number] | undefined): string | undefined;
+    workerStep(runId: string, stepId: string | undefined): WorkerStepIdentity | undefined;
+    toQueuedMessage(runId: string, content: PastedContent[]): QueuedMessage;
+    hydrateQueuedInput(runId: string, input: StartRunInput): StartRunInput;
+    enqueueJob(runId: string, job: PendingJob): void;
+    enqueueContinuation(runId: string, continuation: PendingContinuation): void;
+    isSyntheticContinuation(run: RunRecord, step: RunRecord['steps'][number]): boolean;
+    restartContinuationPrompt: string;
+    reviveQueuedRun(run: RunRecord, reason: string): Promise<void>;
+    reviveWorkflow(run: RunRecord): Promise<WorkflowDef | null>;
+    checkpointRestartContext(run: RunRecord, queuedStepId?: string): RunRecord;
+}
+/** Save restart evidence before queue admission or the next startup await. */
+export declare function checkpointRestartContext(context: RunModuleContext, host: QueuedRevivalHost, run: RunRecord, queuedStepId?: string): RunRecord;
+/**
+ * Rebuild executable state for a durable queued record. Shared by recovery and the watchdog;
+ * reconstruct jobs or continuations before pumping.
+ */
+export declare function reviveQueuedRun(context: RunModuleContext, host: QueuedRevivalHost, run: RunRecord, reason: string): Promise<void>;
+export declare function reviveQueuedContinuation(context: RunModuleContext, host: QueuedRevivalHost, run: RunRecord, reason: string, queuedStepId: string, sessionStep: RunRecord['steps'][number]): void;
+/** Match the pinned execution account before considering a persisted session resumable. */
+export declare function queuedResumeSession(context: RunModuleContext, host: QueuedRevivalHost, run: RunRecord, sessionStep: RunRecord['steps'][number]): {
+    backend: "claude" | "codex" | "cursor" | "omp" | "opencode" | "pi";
+    sessionBackend: "claude" | "codex" | "cursor" | "omp" | "opencode" | "pi";
+    sameAccount: boolean;
+    recoveredSessionId: string | undefined;
+};
+export declare function reviveQueuedWorker(context: RunModuleContext, host: QueuedRevivalHost, run: RunRecord, reason: string): void;
+/** True when the interrupted run has no session to continue and goes back to the queue. */
+export declare function requeueInterruptedRun(context: RunModuleContext, host: QueuedRevivalHost, run: RunRecord, interruptedStepId: RunRecord['currentStepId']): boolean;
+/** The persisted definition when it looks sane, else the catalog by name. */
+export declare const reviveWorkflow: (context: RunModuleContext, host: QueuedRevivalHost, run: RunRecord) => Promise<WorkflowDef | null>;