@hearsay-tools/squawk 0.0.0-stage → 0.17.0-pr3058.5683

package/dist/delegation/execution-identity.d.ts

@@ -0,0 +1,257 @@
+import type { Home } from '../home/home.ts';
+import { type WorkerInputRecipe } from '../contract/index.js';
+import { z } from 'zod';
+import { type ResolvedAgentProfile } from '../workspace/agent-profiles.ts';
+import { type WorkflowDef, type WorkflowStepDef } from '../workflows/types.ts';
+import type { RunRecord, RunStore } from '../runs/store.ts';
+/** Internal durable evidence, never a public environment override or credential snapshot. */
+export declare const workerAccountBindingSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        claude: "claude";
+        codex: "codex";
+        cursor: "cursor";
+        omp: "omp";
+        opencode: "opencode";
+        pi: "pi";
+    }>;
+    profileId: z.ZodString;
+    homePath: z.ZodOptional<z.ZodString>;
+    claudeLayout: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"native">;
+        statePath: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"relocated">;
+    }, z.core.$strict>], "kind">>;
+}, z.core.$strict>;
+export type WorkerAccountBinding = z.infer<typeof workerAccountBindingSchema>;
+/** What one agent step of an owned worker may run under: pinned at acceptance, read at every launch. */
+declare const workerStepIdentityFieldsSchema: z.ZodObject<{
+    account: z.ZodObject<{
+        provider: z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            cursor: "cursor";
+            omp: "omp";
+            opencode: "opencode";
+            pi: "pi";
+        }>;
+        profileId: z.ZodString;
+        homePath: z.ZodOptional<z.ZodString>;
+        claudeLayout: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"native">;
+            statePath: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"relocated">;
+        }, z.core.$strict>], "kind">>;
+    }, z.core.$strict>;
+    grants: z.ZodObject<{
+        allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    model: z.ZodOptional<z.ZodString>;
+    effort: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type WorkerStepIdentity = z.infer<typeof workerStepIdentityFieldsSchema>;
+export declare const acceptedWorkerIdentitySchema: z.ZodObject<{
+    account: z.ZodObject<{
+        provider: z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            cursor: "cursor";
+            omp: "omp";
+            opencode: "opencode";
+            pi: "pi";
+        }>;
+        profileId: z.ZodString;
+        homePath: z.ZodOptional<z.ZodString>;
+        claudeLayout: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"native">;
+            statePath: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"relocated">;
+        }, z.core.$strict>], "kind">>;
+    }, z.core.$strict>;
+    grants: z.ZodObject<{
+        allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    model: z.ZodOptional<z.ZodString>;
+    effort: z.ZodOptional<z.ZodString>;
+    kind: z.ZodLiteral<"accepted">;
+    contextHash: z.ZodOptional<z.ZodString>;
+    workflowHash: z.ZodOptional<z.ZodString>;
+    steps: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        account: z.ZodObject<{
+            provider: z.ZodEnum<{
+                claude: "claude";
+                codex: "codex";
+                cursor: "cursor";
+                omp: "omp";
+                opencode: "opencode";
+                pi: "pi";
+            }>;
+            profileId: z.ZodString;
+            homePath: z.ZodOptional<z.ZodString>;
+            claudeLayout: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"native">;
+                statePath: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"relocated">;
+            }, z.core.$strict>], "kind">>;
+        }, z.core.$strict>;
+        grants: z.ZodObject<{
+            allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>;
+        model: z.ZodOptional<z.ZodString>;
+        effort: z.ZodOptional<z.ZodString>;
+        stepId: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type AcceptedWorkerIdentity = z.infer<typeof acceptedWorkerIdentitySchema>;
+/** The identity one agent step runs under. Explicit entries are authority; a legacy identity answers with its run-level view. */
+export declare function workerStepIdentity(identity: AcceptedWorkerIdentity, stepId: string): WorkerStepIdentity;
+export declare const workerExecutionIdentitySchema: z.ZodUnion<readonly [z.ZodObject<{
+    account: z.ZodObject<{
+        provider: z.ZodEnum<{
+            claude: "claude";
+            codex: "codex";
+            cursor: "cursor";
+            omp: "omp";
+            opencode: "opencode";
+            pi: "pi";
+        }>;
+        profileId: z.ZodString;
+        homePath: z.ZodOptional<z.ZodString>;
+        claudeLayout: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"native">;
+            statePath: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"relocated">;
+        }, z.core.$strict>], "kind">>;
+    }, z.core.$strict>;
+    grants: z.ZodObject<{
+        allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    model: z.ZodOptional<z.ZodString>;
+    effort: z.ZodOptional<z.ZodString>;
+    kind: z.ZodLiteral<"accepted">;
+    contextHash: z.ZodOptional<z.ZodString>;
+    workflowHash: z.ZodOptional<z.ZodString>;
+    steps: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        account: z.ZodObject<{
+            provider: z.ZodEnum<{
+                claude: "claude";
+                codex: "codex";
+                cursor: "cursor";
+                omp: "omp";
+                opencode: "opencode";
+                pi: "pi";
+            }>;
+            profileId: z.ZodString;
+            homePath: z.ZodOptional<z.ZodString>;
+            claudeLayout: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"native">;
+                statePath: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"relocated">;
+            }, z.core.$strict>], "kind">>;
+        }, z.core.$strict>;
+        grants: z.ZodObject<{
+            allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            bashAllowlist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>;
+        model: z.ZodOptional<z.ZodString>;
+        effort: z.ZodOptional<z.ZodString>;
+        stepId: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"internal">;
+    workflowHash: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>]>;
+export type WorkerExecutionIdentity = z.infer<typeof workerExecutionIdentitySchema>;
+export declare class WorkerIdentityError extends Error {
+}
+export declare function captureWorkerAccount(profile: ResolvedAgentProfile, env?: NodeJS.ProcessEnv): WorkerAccountBinding | undefined;
+export declare function boundWorkerAccountEnv(binding: WorkerAccountBinding, env?: NodeJS.ProcessEnv): Record<string, string>;
+/** Canonical schema order makes equivalent persisted object ordering immaterial. */
+export declare function workerContextHash(context: WorkerInputRecipe): string;
+/** Canonical schema order, as for the context recipe: key order in the persisted record is immaterial. */
+export declare function workerWorkflowHash(workflow: WorkflowDef): string;
+/**
+ * Resolve this step’s account environment from agent-accounts.json and record its id. Ordinary
+ * steps prefer the recorded account, then a matching run override, then project selection and
+ * default. Keep account and session ids paired; owned workers use pinned identity.
+ */
+/**
+ * Ordinary runs retain mutable discovery; owned runs require explicit durable evidence. With a
+ * `stepId`, the step's own pinned entry is checked too (#452): its account must still be
+ * available and its model/effort must clear the lock, exactly as the run-level fields must.
+ */
+export declare function workerIdentity(store: RunStore, repoRoot: string, runId: string, stepId: string | undefined, home: Home): {
+    account: {
+        provider: "claude" | "codex" | "cursor" | "omp" | "opencode" | "pi";
+        profileId: string;
+        homePath?: string | undefined;
+        claudeLayout?: {
+            kind: "native";
+            statePath: string;
+        } | {
+            kind: "relocated";
+        } | undefined;
+    };
+    grants: {
+        allowedTools?: string[] | undefined;
+        bashAllowlist?: string[] | undefined;
+    };
+    model?: string | undefined;
+    effort?: string | undefined;
+    kind: "accepted";
+    contextHash?: string | undefined;
+    workflowHash?: string | undefined;
+    steps?: {
+        account: {
+            provider: "claude" | "codex" | "cursor" | "omp" | "opencode" | "pi";
+            profileId: string;
+            homePath?: string | undefined;
+            claudeLayout?: {
+                kind: "native";
+                statePath: string;
+            } | {
+                kind: "relocated";
+            } | undefined;
+        };
+        grants: {
+            allowedTools?: string[] | undefined;
+            bashAllowlist?: string[] | undefined;
+        };
+        model?: string | undefined;
+        effort?: string | undefined;
+        stepId: string;
+    }[] | undefined;
+} | undefined;
+/**
+ * The steps a continuation may extend. An accepted worker's public `workflowDef` is authority
+ * only while its identity binds it: a catalog chain through `ownedWorkflow`, and the default
+ * quick-task from the built-in constant, exactly the definition `ownedJob` launches — a salvaged
+ * or edited public record never picks which pinned identity a turn runs under.
+ */
+export declare function continuationDefSteps(store: RunStore, record: RunRecord | undefined): WorkflowStepDef[] | undefined;
+/**
+ * The definition step a continuation extends: the one owning the continued session, else the
+ * chain's last agent step — a synthetic `continue-N` owner and a run with no recorded session
+ * extend the run's tail. Callers pass the continued session, never only the resumable one, so a
+ * Continue that opens a fresh session keeps its step (hearsay-tools/cezarion#2991). Shared by
+ * `continueRun` (which identity to hold the override against) and `runContinuation` (which
+ * tools, model, effort and account the turn gets).
+ */
+export declare function continuationDefStep(store: RunStore, record: RunRecord | undefined, sessionId: string | undefined): WorkflowStepDef | undefined;
+/**
+ * The catalog chain an owned worker runs (#451), or undefined for the built-in quick-task.
+ * The public `workflowDef` is mutable state, so it is authority only while the private
+ * identity's hash binds it — the same shape as the context recipe. A tampered or lost
+ * definition refuses execution instead of quietly running quick-task or the edit.
+ */
+export declare function ownedWorkflow(run: RunRecord, identity: WorkerExecutionIdentity | undefined): WorkflowDef | undefined;
+export {};

package/dist/delegation/execution-identity.js

@@ -0,0 +1,253 @@
+import { createHash } from 'node:crypto';
+import { workerInputRecipeSchema } from '../contract/index.js';
+import { basename, dirname, isAbsolute, join } from 'node:path';
+import { realpathSync, statSync } from 'node:fs';
+import { z } from 'zod';
+import { profileEnv, supportsProfiles } from '../core/agent-profiles.js';
+import { RUNNER_IDS } from '../core/agent-runner.js';
+import { namedAccountUnavailable } from '../workspace/agent-profiles.js';
+import { agentHomePaths, claudeStateFilePath } from '../paths.js';
+import { workflowDefSchema, QUICK_TASK_WORKFLOW, stepKind } from '../workflows/types.js';
+import { AGENT_MODELS_LOCKED_ERROR, agentModelsLocked } from '../core/agent-model-policy.js';
+import { buildChildEnv } from '../core/agent-env.js';
+/**
+ * Providers whose DEFAULT account binds no home: it spawns bare and follows the host env, as it did
+ * before pi and omp carried accounts (hearsay-tools/cezarion#1283). Pinning a home requires the
+ * folder to exist at launch, and a machine where the agent has never run has none, so pinning would
+ * turn a working zero-config worker into "identity is unavailable". Evidence accepted before #1283
+ * has this same shape. Named accounts always pin their folder.
+ */
+const HOMELESS_DEFAULT_PROVIDERS = new Set(['pi', 'omp']);
+const absolutePathSchema = z.string().min(1).max(4096).refine(isAbsolute).refine(path => !/[\u0000-\u001f\u007f]/.test(path));
+/** Internal durable evidence, never a public environment override or credential snapshot. */
+export const workerAccountBindingSchema = z.object({
+    provider: z.enum(RUNNER_IDS),
+    profileId: z.string().min(1).max(64),
+    homePath: absolutePathSchema.optional(),
+    // Identical config directories can have different state/login files depending on invocation.
+    claudeLayout: z.discriminatedUnion('kind', [
+        z.object({ kind: z.literal('native'), statePath: absolutePathSchema }).strict(),
+        z.object({ kind: z.literal('relocated') }).strict(),
+    ]).optional(),
+}).strict().refine(binding => binding.homePath !== undefined
+    ? supportsProfiles(binding.provider)
+    : binding.profileId === 'default' && (!supportsProfiles(binding.provider) || HOMELESS_DEFAULT_PROVIDERS.has(binding.provider)))
+    .refine(binding => binding.provider === 'claude'
+    ? binding.claudeLayout !== undefined && (binding.claudeLayout.kind !== 'native' || binding.profileId === 'default')
+    : binding.claudeLayout === undefined);
+// Required private evidence; absent properties and explicit empty grants differ.
+const workerGrantsSchema = z.object({
+    allowedTools: z.array(z.string()).optional(),
+    bashAllowlist: z.array(z.string()).optional(),
+}).strict();
+/** What one agent step of an owned worker may run under: pinned at acceptance, read at every launch. */
+const workerStepIdentityFieldsSchema = z.object({
+    account: workerAccountBindingSchema,
+    grants: workerGrantsSchema,
+    model: z.string().min(1).max(512).optional(),
+    effort: z.string().min(1).max(128).optional(),
+});
+export const acceptedWorkerIdentitySchema = workerStepIdentityFieldsSchema.extend({
+    kind: z.literal('accepted'),
+    /** Binds new input recipes; absence retains compatibility with pre-context identities. */
+    contextHash: z.string().regex(/^[0-9a-f]{64}$/).optional(),
+    /** Binds the public `workflowDef` a catalog worker runs (#451); absent means the built-in quick-task. */
+    workflowHash: z.string().regex(/^[0-9a-f]{64}$/).optional(),
+    /**
+     * One entry per agent step of the accepted chain (#452), so a codex step and a claude step
+     * each run under their own account, model, effort and grants. The run-level fields above
+     * hold the FIRST agent step's values: evidence written before this list existed has only
+     * those, and `workerStepIdentity` answers every step from them.
+     */
+    steps: z.array(workerStepIdentityFieldsSchema.extend({ stepId: z.string().min(1) }).strict()).min(1).optional(),
+}).strict();
+/** The identity one agent step runs under. Explicit entries are authority; a legacy identity answers with its run-level view. */
+export function workerStepIdentity(identity, stepId) {
+    if (identity.steps === undefined) {
+        return { account: identity.account, grants: identity.grants,
+            ...(identity.model === undefined ? {} : { model: identity.model }), ...(identity.effort === undefined ? {} : { effort: identity.effort }) };
+    }
+    const entry = identity.steps.find(step => step.stepId === stepId);
+    if (!entry)
+        throw new WorkerIdentityError(`Accepted worker step identity is unavailable for "${stepId}"`);
+    const { stepId: _stepId, ...fields } = entry;
+    return fields;
+}
+export const workerExecutionIdentitySchema = z.union([
+    acceptedWorkerIdentitySchema,
+    // Only explicitly written by the internal owned-creation primitive. Absence never means legacy.
+    z.object({ kind: z.literal('internal'), workflowHash: z.string().regex(/^[0-9a-f]{64}$/).optional() }).strict(),
+]);
+export class WorkerIdentityError extends Error {
+}
+export function captureWorkerAccount(profile, env = process.env) {
+    if (!supportsProfiles(profile.provider) || (profile.isDefault && HOMELESS_DEFAULT_PROVIDERS.has(profile.provider))) {
+        return { provider: profile.provider, profileId: 'default' };
+    }
+    // Bind an existing symlink to its actual home. A native first-run home may not exist yet.
+    const claudeHome = agentHomePaths(env).claude;
+    let homePath = profile.provider === 'claude' ? claudeHome : profile.path;
+    try {
+        // A named omp account is selected by its profile entry's NAME, and the entry may be a symlink
+        // omp follows itself: resolving it would leave a path that names no profile. Pin the parent.
+        homePath = isOmpProfileBinding(profile.provider, profile.id)
+            ? join(realpathSync(dirname(homePath)), basename(homePath))
+            : realpathSync(homePath);
+    }
+    catch { /* The owned consumer still requires it to exist. */ }
+    const claudeLayout = profile.provider !== 'claude' ? undefined
+        : env.CLAUDE_CONFIG_DIR?.trim() ? { kind: 'relocated' }
+            : { kind: 'native', statePath: claudeStateFilePath(claudeHome, env) };
+    const parsed = workerAccountBindingSchema.safeParse({ provider: profile.provider, profileId: profile.id, homePath,
+        ...(claudeLayout === undefined ? {} : { claudeLayout }) });
+    return parsed.success ? parsed.data : undefined;
+}
+export function boundWorkerAccountEnv(binding, env = process.env) {
+    if (binding.homePath === undefined)
+        return {};
+    const ompProfile = isOmpProfileBinding(binding.provider, binding.profileId);
+    const pinned = ompProfile ? dirname(binding.homePath) : binding.homePath;
+    try {
+        if (!statSync(binding.homePath).isDirectory() || realpathSync(pinned) !== pinned)
+            throw new Error();
+    }
+    catch {
+        throw new WorkerIdentityError('Accepted worker account identity is unavailable');
+    }
+    if (binding.provider === 'omp') {
+        // The discovered omp account is spawned bare, so it keeps whatever profile the host selects.
+        if (!ompProfile)
+            return {};
+        const selected = profileEnv('omp', binding.homePath);
+        if (Object.keys(selected).length === 0)
+            throw new WorkerIdentityError('Accepted omp account names no omp profile');
+        // omp resolves the name under the root it computes from the CHILD's HOME and PI_CONFIG_DIR,
+        // which may have changed since acceptance; a moved root would select another profile.
+        const unavailable = namedAccountUnavailable('omp', binding.homePath, env);
+        if (unavailable !== null)
+            throw new WorkerIdentityError(unavailable);
+        return selected;
+    }
+    if (binding.claudeLayout?.kind === 'native') {
+        const nativeHome = agentHomePaths(env).claude;
+        try {
+            if (env.CLAUDE_CONFIG_DIR?.trim() || claudeStateFilePath(nativeHome, env) !== binding.claudeLayout.statePath ||
+                realpathSync(nativeHome) !== binding.homePath)
+                throw new Error();
+        }
+        catch {
+            throw new WorkerIdentityError('Accepted native Claude account layout is unavailable');
+        }
+        return {};
+    }
+    return profileEnv(binding.provider, binding.homePath);
+}
+/** A named omp account: an omp profile, selected by name rather than by folder. */
+function isOmpProfileBinding(provider, profileId) {
+    return provider === 'omp' && profileId !== 'default';
+}
+/** Canonical schema order makes equivalent persisted object ordering immaterial. */
+export function workerContextHash(context) {
+    return createHash('sha256').update(JSON.stringify(workerInputRecipeSchema.parse(context))).digest('hex');
+}
+/** Canonical schema order, as for the context recipe: key order in the persisted record is immaterial. */
+export function workerWorkflowHash(workflow) {
+    return createHash('sha256').update(JSON.stringify(workflowDefSchema.parse(workflow))).digest('hex');
+}
+/**
+ * Resolve this step’s account environment from agent-accounts.json and record its id. Ordinary
+ * steps prefer the recorded account, then a matching run override, then project selection and
+ * default. Keep account and session ids paired; owned workers use pinned identity.
+ */
+/**
+ * Ordinary runs retain mutable discovery; owned runs require explicit durable evidence. With a
+ * `stepId`, the step's own pinned entry is checked too (#452): its account must still be
+ * available and its model/effort must clear the lock, exactly as the run-level fields must.
+ */
+export function workerIdentity(store, repoRoot, runId, stepId, home) {
+    const run = store.getRun(runId);
+    if (run?.delegation?.role !== 'worker')
+        return undefined;
+    const identity = store.readWorkerIdentity(runId);
+    if (!identity)
+        throw new WorkerIdentityError('Worker execution identity evidence is unavailable');
+    if (identity.kind === 'internal')
+        return undefined;
+    validateWorkerIdentity(repoRoot, run, identity, run.delegation.context, home);
+    // Availability is checked for the account about to be USED: the selected step's entry when
+    // there is one, and the single run-level account only for a legacy identity that has no
+    // per-step list. A per-step identity checked without a step (the evidence-only calls in
+    // `execute`, `runContinuation` and `ownedJob`) binds nothing here — the launch resolves its
+    // step and binds that account — so a first-step login removed after its step finished never
+    // stops a later step, a Continue or a recovery whose own account is intact (#465).
+    const step = stepId === undefined ? undefined : workerStepIdentity(identity, stepId);
+    if (step && agentModelsLocked(repoRoot, process.env, home) && (step.model !== undefined || step.effort !== undefined)) {
+        throw new WorkerIdentityError(`Accepted worker settings cannot run: ${AGENT_MODELS_LOCKED_ERROR}`);
+    }
+    const account = step?.account ?? (identity.steps === undefined ? identity.account : undefined);
+    if (account)
+        boundWorkerAccountEnv(account, buildChildEnv({ backend: account.provider }));
+    return identity;
+}
+function validateWorkerIdentity(repoRoot, run, identity, context, home) {
+    if (identity.contextHash !== undefined && (!context || workerContextHash(context) !== identity.contextHash)) {
+        throw new WorkerIdentityError('Accepted worker context recipe is unavailable or changed');
+    }
+    ownedWorkflow(run, identity);
+    if (agentModelsLocked(repoRoot, process.env, home) && (identity.model !== undefined || identity.effort !== undefined)) {
+        throw new WorkerIdentityError(`Accepted worker settings cannot run: ${AGENT_MODELS_LOCKED_ERROR}`);
+    }
+    if (run.runner !== identity.account.provider || run.agentProfile !== identity.account.profileId ||
+        run.model !== identity.model || run.effort !== identity.effort) {
+        throw new WorkerIdentityError('Accepted worker execution identity does not match its run');
+    }
+}
+/**
+ * The steps a continuation may extend. An accepted worker's public `workflowDef` is authority
+ * only while its identity binds it: a catalog chain through `ownedWorkflow`, and the default
+ * quick-task from the built-in constant, exactly the definition `ownedJob` launches — a salvaged
+ * or edited public record never picks which pinned identity a turn runs under.
+ */
+export function continuationDefSteps(store, record) {
+    if (record?.delegation?.role === 'worker') {
+        const identity = store.readWorkerIdentity(record.id);
+        if (identity?.kind === 'accepted')
+            return (ownedWorkflow(record, identity) ?? QUICK_TASK_WORKFLOW).steps;
+    }
+    return record?.workflowDef?.steps;
+}
+/**
+ * The definition step a continuation extends: the one owning the continued session, else the
+ * chain's last agent step — a synthetic `continue-N` owner and a run with no recorded session
+ * extend the run's tail. Callers pass the continued session, never only the resumable one, so a
+ * Continue that opens a fresh session keeps its step (hearsay-tools/cezarion#2991). Shared by
+ * `continueRun` (which identity to hold the override against) and `runContinuation` (which
+ * tools, model, effort and account the turn gets).
+ */
+export function continuationDefStep(store, record, sessionId) {
+    const defSteps = continuationDefSteps(store, record);
+    if (defSteps === undefined)
+        return undefined;
+    const owningStep = sessionId === undefined ? undefined : record?.steps.find((s) => s.sessionId === sessionId);
+    if (sessionId !== undefined && owningStep === undefined)
+        return undefined;
+    const ciSource = defSteps.find(step => step.id === record?.workflowResumeStepId && stepKind(step) === 'agent');
+    if (ciSource && record?.steps.find(step => step.id === ciSource.id)?.status === 'failed')
+        return ciSource;
+    return defSteps.find((s) => s.id === owningStep?.id) ?? [...defSteps].reverse().find((s) => stepKind(s) === 'agent');
+}
+/**
+ * The catalog chain an owned worker runs (#451), or undefined for the built-in quick-task.
+ * The public `workflowDef` is mutable state, so it is authority only while the private
+ * identity's hash binds it — the same shape as the context recipe. A tampered or lost
+ * definition refuses execution instead of quietly running quick-task or the edit.
+ */
+export function ownedWorkflow(run, identity) {
+    if (identity?.workflowHash === undefined)
+        return undefined;
+    if (!run.workflowDef || workerWorkflowHash(run.workflowDef) !== identity.workflowHash) {
+        throw new WorkerIdentityError('Accepted worker workflow definition is unavailable or changed');
+    }
+    return run.workflowDef;
+}
+//# sourceMappingURL=execution-identity.js.map

package/dist/delegation/execution-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-identity.js","sourceRoot":"","sources":["../../src/delegation/execution-identity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAA0B,MAAM,yCAAyC,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAA6B,MAAM,gCAAgC,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,QAAQ,EAA0C,MAAM,uBAAuB,CAAC;AAEjI,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAE/E,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAE9H,6FAA6F;AAC7F,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACpC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACvC,6FAA6F;IAC7F,YAAY,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACzC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC/E,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACpD,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;IAC1D,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;IACpC,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC9H,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;IAC9C,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;IACnH,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;AAG1C,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,wGAAwG;AACxG,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,kBAAkB;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC,MAAM,CAAC;IAChF,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,0FAA0F;IAC1F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC1D,yGAAyG;IACzG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC3D;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAChH,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,iIAAiI;AACjI,MAAM,UAAU,kBAAkB,CAAC,QAAgC,EAAE,MAAc;IACjF,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACzD,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAChJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,mBAAmB,CAAC,qDAAqD,MAAM,GAAG,CAAC,CAAC;IAC1G,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,4BAA4B;IAC5B,gGAAgG;IAChG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CAChH,CAAC,CAAC;AAEH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,MAAM,UAAU,oBAAoB,CAAC,OAA6B,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IACtG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnH,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAC9D,CAAC;IACD,0FAA0F;IAC1F,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACzE,IAAI,CAAC;QACH,8FAA8F;QAC9F,6FAA6F;QAC7F,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3D,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC5D,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE;YAChE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,SAAS,EAAE,mBAAmB,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ;QAC/G,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA6B,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IACvG,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzE,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,iDAAiD,CAAC,CAAC;IAAC,CAAC;IAC7F,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,6FAA6F;QAC7F,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,2CAA2C,CAAC,CAAC;QACnH,4FAA4F;QAC5F,sFAAsF;QACtF,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,WAAW,KAAK,IAAI;YAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAC9C,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,SAAS;gBACxG,YAAY,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,sDAAsD,CAAC,CAAC;QAAC,CAAC;QAClG,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,SAAS,mBAAmB,CAAC,QAAgB,EAAE,SAAiB;IAC9D,OAAO,QAAQ,KAAK,KAAK,IAAI,SAAS,KAAK,SAAS,CAAC;AACvD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,OAA0B;IAC1D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3G,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,kBAAkB,CAAC,QAAqB;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAe,EAAE,QAAgB,EAAE,KAAa,EAAE,MAA0B,EAAE,IAAU;IACrH,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,mBAAmB,CAAC,mDAAmD,CAAC,CAAC;IAClG,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACnD,sBAAsB,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9E,2FAA2F;IAC3F,wFAAwF;IACxF,wFAAwF;IACxF,4FAA4F;IAC5F,4FAA4F;IAC5F,mFAAmF;IACnF,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrF,IAAI,IAAI,IAAI,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACtH,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,yBAAyB,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/F,IAAI,OAAO;QAAE,qBAAqB,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,GAAc,EAAE,QAAgC,EAAE,OAAsC,EAAE,IAAU;IACpJ,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,mBAAmB,CAAC,0DAA0D,CAAC,CAAC;IAC5F,CAAC;IACD,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7B,IAAI,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACtH,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,yBAAyB,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;QAC3F,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,IAAI,mBAAmB,CAAC,2DAA2D,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAe,EAAE,MAA6B;IACjF,IAAI,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,QAAQ,EAAE,IAAI,KAAK,UAAU;YAAE,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,mBAAmB,CAAC,CAAC,KAAK,CAAC;IAC3G,CAAC;IACD,OAAO,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAe,EAAE,MAA6B,EAAE,SAA6B;IAC/G,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,UAAU,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC9G,IAAI,SAAS,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1E,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,oBAAoB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;IAC/G,IAAI,QAAQ,IAAI,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC1G,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;AACvH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,QAA6C;IACzF,IAAI,QAAQ,EAAE,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;QACtF,MAAM,IAAI,mBAAmB,CAAC,+DAA+D,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,GAAG,CAAC,WAAW,CAAC;AACzB,CAAC"}

package/dist/delegation/execution-settings.d.ts

@@ -0,0 +1,11 @@
+import type { Home } from '../home/home.ts';
+import type { RunnerId } from '../core/agent-runner.ts';
+import type { ActiveRun } from '../workflows/active-run.ts';
+import type { DelegationExecutionSettings } from '../workflows/run/types.ts';
+export declare function delegationExecutionSettings(state: Pick<ActiveRun, 'liveSession'> | undefined): DelegationExecutionSettings;
+export declare function selectDelegationExecutionSettings(repoRoot: string, parent: DelegationExecutionSettings, selection: {
+    backend?: RunnerId | undefined;
+    model?: string | undefined;
+    effort?: string | undefined;
+    agentProfile?: string;
+}, validateModel: ((settings: DelegationExecutionSettings) => Promise<void>) | undefined, home: Home): Promise<DelegationExecutionSettings>;

package/dist/delegation/execution-settings.js

@@ -0,0 +1,65 @@
+import { AGENT_MODELS_LOCKED_ERROR, agentModelsLocked } from '../core/agent-model-policy.js';
+import { buildChildEnv } from '../core/agent-env.js';
+import { readAgentModelSettings } from '../agent-config/models.js';
+import { formatModelIdentity, normalizeModelForBackend } from '../core/model-identity.js';
+import { modelConflictsWithRunner } from '../core/model-presets.js';
+import { resolveProfileEnvForRoot } from '../workspace/agent-profiles.js';
+import { boundWorkerAccountEnv, captureWorkerAccount } from './execution-identity.js';
+import { parseDelegationEffort } from './effort.js';
+import { DelegationPolicyError } from './policy.js';
+export function delegationExecutionSettings(state) {
+    if (!state?.liveSession.session?.open || !state.liveSession.delegationSettings)
+        throw new DelegationPolicyError('incompatible_state', 'Parent session settings unavailable');
+    return structuredClone(state.liveSession.delegationSettings);
+}
+export async function selectDelegationExecutionSettings(repoRoot, parent, selection, validateModel, home) {
+    const runner = selection.backend ?? parent.runner;
+    const sameBackend = runner === parent.runner;
+    try {
+        const { effortPin, locked } = refuseModelLock(repoRoot, parent, selection, sameBackend, home);
+        const { accountBinding, env } = await bindAccount(repoRoot, parent, selection, runner, sameBackend, home);
+        return await chooseModel(repoRoot, parent, selection, runner, sameBackend, effortPin, locked, accountBinding, env, validateModel);
+    }
+    catch (error) {
+        if (error instanceof DelegationPolicyError)
+            throw error;
+        throw new DelegationPolicyError('invalid_input', error instanceof Error ? error.message : 'Worker execution selection is unavailable');
+    }
+}
+function refuseModelLock(repoRoot, parent, selection, sameBackend, home) {
+    const effortPin = parseDelegationEffort(selection.effort);
+    const locked = agentModelsLocked(repoRoot, process.env, home);
+    if (locked && (selection.model !== undefined || effortPin !== undefined || (sameBackend && (parent.model !== undefined || parent.effort !== undefined)))) {
+        throw new Error(AGENT_MODELS_LOCKED_ERROR);
+    }
+    return { effortPin, locked };
+}
+async function bindAccount(repoRoot, parent, selection, runner, sameBackend, home) {
+    let accountBinding = parent.accountBinding;
+    let env = buildChildEnv({ backend: runner });
+    if (!sameBackend || selection.agentProfile !== undefined) {
+        const resolved = await resolveProfileEnvForRoot(repoRoot, runner, selection.agentProfile, process.env, home);
+        if (selection.agentProfile !== undefined && resolved.profile.id !== selection.agentProfile) {
+            throw new Error(`Unknown ${runner} account "${selection.agentProfile}"`);
+        }
+        env = buildChildEnv({ backend: runner, extraEnv: resolved.env });
+        accountBinding = captureWorkerAccount(resolved.profile, env);
+    }
+    if (!accountBinding || accountBinding.provider !== runner)
+        throw new Error('Accepted worker account identity is unavailable');
+    env = { ...env, ...boundWorkerAccountEnv(accountBinding, env) };
+    return { accountBinding, env };
+}
+async function chooseModel(repoRoot, parent, selection, runner, sameBackend, effortPin, locked, accountBinding, env, validateModel) {
+    const native = await readAgentModelSettings(runner, repoRoot, env);
+    const chosen = selection.model ?? (sameBackend ? parent.model : locked ? undefined : native.model);
+    const normalized = normalizeModelForBackend(runner, chosen, { configuredProvider: native.provider });
+    const settings = { ...parent, runner, model: normalized?.backendModel, modelIdentity: normalized ? formatModelIdentity(normalized.identity) : undefined, effort: effortPin ?? (sameBackend ? parent.effort : undefined),
+        agentProfile: accountBinding.profileId, accountBinding };
+    // A populated catalog gives a useful choice list before the legacy preset fallback rejects.
+    await validateModel?.(settings);
+    if (chosen && modelConflictsWithRunner(chosen, runner))
+        throw new Error('Model is incompatible with the selected backend');
+    return settings;
+}
+//# sourceMappingURL=execution-settings.js.map

package/dist/delegation/execution-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-settings.js","sourceRoot":"","sources":["../../src/delegation/execution-settings.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAA6B,MAAM,yBAAyB,CAAC;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAIpD,MAAM,UAAU,2BAA2B,CAAC,KAAiD;IAC3F,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB;QAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAC;IAC7K,OAAO,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,QAAgB,EAAE,MAAmC,EAAE,SAA6H,EAAE,aAAqF,EAAE,IAAU;IAC7U,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9F,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC1G,OAAO,MAAM,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACpI,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;IACzI,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,MAAmC,EAAE,SAA6B,EAAE,WAAoB,EAAE,IAAU;IAC7I,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACzJ,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAmC,EAAE,SAA6B,EAAE,MAAgB,EAAE,WAAoB,EAAE,IAAU;IACjK,IAAI,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IAC3C,IAAI,GAAG,GAAG,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,WAAW,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7G,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,aAAa,SAAS,CAAC,YAAY,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,GAAG,GAAG,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,QAAQ,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC9H,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,qBAAqB,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;IAChE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,MAAmC,EAAE,SAA6B,EAAE,MAAgB,EAAE,WAAoB,EAAE,SAA6B,EAAE,MAAe,EAAE,cAAoC,EAAE,GAAsB,EAAE,aAAwE;IAC7U,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnG,MAAM,UAAU,GAAG,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACrN,YAAY,EAAE,cAAc,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC3D,4FAA4F;IAC5F,MAAM,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,MAAM,IAAI,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC3H,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/delegation/idle-test-app.d.ts

@@ -0,0 +1,4 @@
+/** Claim the checkout's test environment while removing it. Any uncertain state fails closed. */
+export declare function withIdleTestApp<T>(root: string, remove: (stopped: boolean, busy: boolean, reason?: string) => Promise<T>): Promise<T>;
+/** A timeout or unreadable process table keeps the checkout intact for a later retry. */
+export declare function waitForTestAppWatcher(root: string): Promise<boolean>;