@inflexa-ai/harness 0.45.1 → 0.46.0

package/dist/contracts/schemas/chat-parts.js

@@ -39,7 +39,7 @@ export const PlanStepSchema = z.object({
 export const PresentationContentSchema = z.discriminatedUnion("kind", [
     z.object({
         kind: z.literal("echart"),
-        spec: z.record(z.string(), z.unknown()),
+        spec: z.record(z.string(), z.json()),
         // Analysis-rooted CSV path the host resolves to `dataset.source` at render time; optional
         // because a self-contained spec may embed its own data.
         dataPath: z.string().optional(),
@@ -79,14 +79,13 @@ export const PresentationPartSchema = z.object({
     content: PresentationContentSchema,
 });
 // ── Plan reference ──────────────────────────────────────────────────
+// oxlint-disable-next-line eslint-js/no-restricted-syntax -- the issued plan-id shape: the pln- prefix plus 8 hex digits.
+export const PLAN_ID_RE = /^pln-[a-f0-9]{8}$/;
 export const PlanPartSchema = z.object({
     type: z.literal("data-plan"),
     id: z.string(),
-    planId: z.string().regex(/^pln-[a-f0-9]{8}$/),
-    parentPlanId: z
-        .string()
-        .regex(/^pln-[a-f0-9]{8}$/)
-        .optional(),
+    planId: z.string().regex(PLAN_ID_RE),
+    parentPlanId: z.string().regex(PLAN_ID_RE).optional(),
     title: z.string().optional(),
     steps: z.array(PlanStepSchema).optional(),
     analytical_narrative: z.string().optional(),
@@ -105,7 +104,7 @@ export const RunCardPartSchema = z.object({
 // ── Plan approval ───────────────────────────────────────────────────
 export const PlanApprovalPartSchema = z.object({
     type: z.literal("data-plan-approval"),
-    planId: z.string().regex(/^pln-[a-f0-9]{8}$/),
+    planId: z.string().regex(PLAN_ID_RE),
     runId: z.string(),
     approvedAt: z.iso.datetime(),
 });
@@ -362,6 +361,31 @@ export const CompactionPartSchema = z.object({
     durationMs: z.number().int().nonnegative().optional(),
     trigger: z.enum(["turn-start", "mid-turn"]).optional(),
 });
+// ── Pause ───────────────────────────────────────────────────────────
+export const PauseCauseSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("outage") }),
+    z.object({ kind: z.literal("credential") }),
+    z.object({ kind: z.literal("host"), reason: z.string() }),
+]);
+export const PausePartSchema = z.object({
+    type: z.literal("data-pause"),
+    id: z.string(),
+    workId: z.string(),
+    workKind: z.enum(["turn", "run", "profile"]),
+    state: z.enum(["retrying", "paused", "running"]),
+    cause: PauseCauseSchema.optional(),
+    attempt: z.number().int().nonnegative().optional(),
+    retryAt: z.string().optional(),
+});
+// ── Model retry ─────────────────────────────────────────────────────
+export const ModelRetryPartSchema = z.object({
+    type: z.literal("data-model-retry"),
+    id: z.string(),
+    attempt: z.number().int().positive(),
+    maxRetries: z.number().int().positive(),
+    retryAt: z.string(),
+    status: z.number().int().optional(),
+});
 // ── Sub-agent activity ──────────────────────────────────────────────
 export const SubAgentActivityEntrySchema = z.object({
     agentId: z.string(),
@@ -404,4 +428,6 @@ export const ChatPartSchema = z.discriminatedUnion("type", [
     ChildSessionStartedPartSchema,
     ReportRenderedPartSchema,
     CompactionPartSchema,
+    PausePartSchema,
+    ModelRetryPartSchema,
 ]);

package/dist/contracts/severity.d.ts

@@ -8,8 +8,8 @@
 import { z } from "zod";
 export declare const SEVERITIES: readonly ["high", "medium", "low"];
 export declare const SeveritySchema: z.ZodEnum<{
+    high: "high";
     low: "low";
     medium: "medium";
-    high: "high";
 }>;
 export type Severity = (typeof SEVERITIES)[number];

package/dist/contracts/structure-source.d.ts

@@ -11,10 +11,10 @@
  * parse over a persisted `url` before it fetches, so a card the harness would
  * refuse today is refused at render time too.
  *
- * This module is browser-safe: it imports nothing.
+ * This module is browser-safe: it imports no platform API, and each import from outside `contracts/` is a type import.
  */
 export type StructureFormat = "pdb" | "mmcif";
-export interface StructureSource {
+export type StructureSource = {
     readonly provider: "alphafold";
     /** The UniProt accession the model is keyed by, isoform suffix included (`P38398-2`). */
     readonly accession: string;
@@ -23,7 +23,7 @@ export interface StructureSource {
     readonly format: StructureFormat;
     /** The normalized file URL — what a host fetches and what the transcript attests to. */
     readonly url: string;
-}
+};
 /**
  * Parse a structure URL into its source, or `null` when the grammar refuses it.
  *

package/dist/contracts/structure-source.js

@@ -11,10 +11,11 @@
  * parse over a persisted `url` before it fetches, so a card the harness would
  * refuse today is refused at render time too.
  *
- * This module is browser-safe: it imports nothing.
+ * This module is browser-safe: it imports no platform API, and each import from outside `contracts/` is a type import.
  */
 const ALPHAFOLD_ORIGIN = "https://alphafold.ebi.ac.uk";
 /** `/files/AF-{accession}-F{fragment}-model_v{version}.{pdb|cif}` — the AlphaFold DB file path shape. */
+// oxlint-disable-next-line eslint-js/no-restricted-syntax -- the AlphaFold file-path grammar with its accession, fragment, and version captures; the captures name the fields the source record carries.
 const ALPHAFOLD_FILE_PATH = /^\/files\/AF-([A-Z0-9]+(?:-\d+)?)-F\d+-model_v(\d+)\.(pdb|cif)$/;
 /**
  * Parse a structure URL into its source, or `null` when the grammar refuses it.
@@ -40,12 +41,15 @@ export function parseStructureUrl(url) {
     const match = ALPHAFOLD_FILE_PATH.exec(parsed.pathname);
     if (match === null)
         return null;
+    const accession = match[1];
+    if (accession === undefined)
+        return null;
     const version = Number(match[2]);
     if (!Number.isInteger(version) || version < 1)
         return null;
     return {
         provider: "alphafold",
-        accession: match[1],
+        accession,
         version,
         format: match[3] === "pdb" ? "pdb" : "mmcif",
         url: parsed.href,

package/dist/contracts/subagent-activity.d.ts

@@ -1,12 +1,12 @@
 import type { ChatFrame, ChatPartFrame } from "./chat-events.js";
 /** The most entries that one root tool call holds. Each later call of its sub-agents only adds to `dropped`. */
 export declare const SUBAGENT_ACTIVITY_MAX_ENTRIES = 200;
-export interface SubAgentActivityTracker {
+export type SubAgentActivityTracker = {
     /**
      * Read one frame of the turn, from the root agent or from a sub-agent, with the time of its receipt in
      * milliseconds. Gives the new `data-subagent-activity` part frame (no source) when the frame changes the activity
      * of a root tool call, else `null`.
      */
     track(frame: ChatFrame, nowMs: number): ChatPartFrame | null;
-}
+};
 export declare function createSubAgentActivityTracker(): SubAgentActivityTracker;

package/dist/contracts/subagent-activity.js

@@ -42,13 +42,15 @@ export function createSubAgentActivityTracker() {
                     calls.set(callKey(source.callPath, frame.toolUseId), { rootId: parent.rootId, startedMs: nowMs });
                 }
                 else {
-                    record.entries.push({
+                    const entry = {
                         agentId: source.agentId,
                         callPath: [...source.callPath],
                         tool: frame.name,
-                        ...(frame.detail === undefined ? {} : { label: frame.detail }),
                         startedAt: new Date(nowMs).toISOString(),
-                    });
+                    };
+                    if (frame.detail !== undefined)
+                        entry.label = frame.detail;
+                    record.entries.push(entry);
                     calls.set(callKey(source.callPath, frame.toolUseId), {
                         rootId: parent.rootId,
                         entryIndex: record.entries.length - 1,

package/dist/contracts/usage.d.ts

@@ -12,7 +12,7 @@
  * of calls that reported nothing carries no rollup at all rather than an
  * all-zero one, so a consumer can tell "spent nothing" from "was told nothing".
  */
-export interface TokenUsageRollup {
+export type TokenUsageRollup = {
     /** Total billed prefix, cache reads included. */
     readonly inputTokens?: number;
     readonly outputTokens?: number;
@@ -26,7 +26,7 @@ export interface TokenUsageRollup {
      * total varies by provider, so arithmetic between the two is a guess.
      */
     readonly reasoningTokens?: number;
-}
+};
 /**
  * The rollup's fields as values — the single enumeration a fold can iterate.
  *

package/dist/data/safety-panel-schema.d.ts

@@ -8,30 +8,30 @@ export declare const SafetyTargetSchema: z.ZodObject<{
     ensembl_gene_id: z.ZodOptional<z.ZodString>;
     name: z.ZodString;
     organ_system: z.ZodEnum<{
+        cardiac: "cardiac";
+        cns: "cns";
+        dermatologic: "dermatologic";
+        endocrine_thyroid: "endocrine_thyroid";
+        gi: "gi";
         hematologic: "hematologic";
-        metabolic: "metabolic";
-        immune: "immune";
         hepatic: "hepatic";
+        immune: "immune";
+        metabolic: "metabolic";
         musculoskeletal: "musculoskeletal";
-        cns: "cns";
+        ocular: "ocular";
+        oncology: "oncology";
+        pancreas: "pancreas";
+        pns: "pns";
         renal: "renal";
         reproductive: "reproductive";
         respiratory: "respiratory";
-        cardiac: "cardiac";
         vascular: "vascular";
-        pns: "pns";
-        gi: "gi";
-        pancreas: "pancreas";
-        endocrine_thyroid: "endocrine_thyroid";
-        dermatologic: "dermatologic";
-        ocular: "ocular";
-        oncology: "oncology";
     }>;
     clinical_consequence: z.ZodString;
     severity: z.ZodEnum<{
+        high: "high";
         low: "low";
         medium: "medium";
-        high: "high";
     }>;
     references: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
@@ -39,7 +39,7 @@ export type SafetyTarget = z.infer<typeof SafetyTargetSchema>;
 export declare const SafetyPanelFileSchema: z.ZodObject<{
     schema_version: z.ZodLiteral<1>;
     panel_version: z.ZodString;
-    curated_at: z.ZodString;
+    curated_at: z.ZodISODate;
     targets: z.ZodArray<z.ZodObject<{
         chembl_id: z.ZodString;
         gene_symbol: z.ZodString;
@@ -47,30 +47,30 @@ export declare const SafetyPanelFileSchema: z.ZodObject<{
         ensembl_gene_id: z.ZodOptional<z.ZodString>;
         name: z.ZodString;
         organ_system: z.ZodEnum<{
+            cardiac: "cardiac";
+            cns: "cns";
+            dermatologic: "dermatologic";
+            endocrine_thyroid: "endocrine_thyroid";
+            gi: "gi";
             hematologic: "hematologic";
-            metabolic: "metabolic";
-            immune: "immune";
             hepatic: "hepatic";
+            immune: "immune";
+            metabolic: "metabolic";
             musculoskeletal: "musculoskeletal";
-            cns: "cns";
+            ocular: "ocular";
+            oncology: "oncology";
+            pancreas: "pancreas";
+            pns: "pns";
             renal: "renal";
             reproductive: "reproductive";
             respiratory: "respiratory";
-            cardiac: "cardiac";
             vascular: "vascular";
-            pns: "pns";
-            gi: "gi";
-            pancreas: "pancreas";
-            endocrine_thyroid: "endocrine_thyroid";
-            dermatologic: "dermatologic";
-            ocular: "ocular";
-            oncology: "oncology";
         }>;
         clinical_consequence: z.ZodString;
         severity: z.ZodEnum<{
+            high: "high";
             low: "low";
             medium: "medium";
-            high: "high";
         }>;
         references: z.ZodArray<z.ZodString>;
     }, z.core.$strip>>;

package/dist/data/safety-panel-schema.js

@@ -1,20 +1,28 @@
 import { z } from "zod";
 import { OrganSystemSchema } from "../contracts/organ-system.js";
 import { SeveritySchema } from "../contracts/severity.js";
+// oxlint-disable-next-line eslint-js/no-restricted-syntax -- the fixed CHEMBL<n> shape is the identifier that the ChEMBL registry issues.
 export const CHEMBL_RE = /^CHEMBL\d+$/;
 // UniProt 6-char accession: letter (any A-Z, covering A-N, O, P, Q, R-Z sub-families),
 // followed by a digit, three alphanumerics, and a final digit.
+// oxlint-disable-next-line eslint-js/no-restricted-syntax -- the fixed six-character accession shape is what UniProt issues.
 export const UNIPROT_RE = /^[A-Z][0-9][A-Z0-9]{3}[0-9]$/;
+// oxlint-disable-next-line eslint-js/no-restricted-syntax -- an HGNC symbol is uppercase alphanumeric segments joined by hyphens; the shape is the naming rule.
+const HGNC_SYMBOL_RE = /^[A-Z][A-Z0-9]*(-[A-Z0-9]+)*$/;
 const ChemblIdSchema = z.string().regex(CHEMBL_RE, "must match CHEMBL\\d+");
 const GeneSymbolSchema = z
     .string()
     .min(1)
     .max(20)
-    .regex(/^[A-Z][A-Z0-9]*(-[A-Z0-9]+)*$/, "must be HGNC-style uppercase");
+    .regex(HGNC_SYMBOL_RE, "must be HGNC-style uppercase");
 const UniprotSchema = z.string().regex(UNIPROT_RE, "must be a 6-char UniProt accession");
-const EnsemblGeneSchema = z.string().regex(/^ENSG\d{11}$/, "must match ENSG\\d{11}");
-const ReferenceSchema = z.string().regex(/^(PMID:\d+|DOI:.+)$/, "must be PMID:<digits> or DOI:<doi>");
-const IsoDateSchema = z.string().date();
+// oxlint-disable-next-line eslint-js/no-restricted-syntax -- an Ensembl gene id is ENSG plus 11 digits, the fixed Ensembl shape.
+const ENSEMBL_GENE_RE = /^ENSG\d{11}$/;
+const EnsemblGeneSchema = z.string().regex(ENSEMBL_GENE_RE, "must match ENSG\\d{11}");
+// oxlint-disable-next-line eslint-js/no-restricted-syntax -- a reference is one of the two prefixed provenance forms; the alternation is the rule.
+const REFERENCE_RE = /^(PMID:\d+|DOI:.+)$/;
+const ReferenceSchema = z.string().regex(REFERENCE_RE, "must be PMID:<digits> or DOI:<doi>");
+const IsoDateSchema = z.iso.date();
 export const SafetyTargetSchema = z.object({
     chembl_id: ChemblIdSchema,
     gene_symbol: GeneSymbolSchema,
@@ -28,6 +36,7 @@ export const SafetyTargetSchema = z.object({
 });
 export const SafetyPanelFileSchema = z.object({
     schema_version: z.literal(1),
+    // oxlint-disable-next-line eslint-js/no-restricted-syntax -- a dotted three-part version is the file format's own version rule.
     panel_version: z.string().regex(/^\d+\.\d+\.\d+$/, "semver"),
     curated_at: IsoDateSchema,
     targets: z.array(SafetyTargetSchema),

package/dist/execution/artifact-metadata.d.ts

@@ -1,7 +1,8 @@
 /**
  * Per-step artifact metadata generation — describes a step's output files
- * through a continuation of the step agent's conversation (`continueAgent`)
- * on the harness `ChatProvider`.
+ * through a follow-up request of the step agent's conversation (`continueLoop`)
+ * on the harness `ChatProvider`. The description of each file comes from the
+ * recorded calls of `submit_file_metadata`: the last description of a path wins.
  *
  * The continuation extends the prefix that the task cached, so each signed
  * thinking block of the task must stay valid across the extension.
@@ -17,21 +18,23 @@
  * obligation on every provider call.
  */
 import type { AgentSession } from "../auth/types.js";
+import { type LoopStep } from "../loop/run-loop.js";
 import { type ToolOutputStore } from "../loop/tool-output.js";
 import type { AgentDefinition, LoopMessage } from "../loop/types.js";
-import type { AgentChat } from "../providers/types.js";
+import type { ChatProvider } from "../providers/types.js";
+import { type SubmittedFileDescription } from "../schemas/file-metadata.js";
 import { type FileMetadataCell } from "../tools/sandbox/submit-file-metadata.js";
 import type { Logger } from "../lib/logger.js";
 import type { UsageRecorder } from "../billing/usage-recorder.js";
-export interface ArtifactForMetadata {
+export type ArtifactForMetadata = {
     /** Path used to update `cortex_artifacts` after metadata generation. */
     readonly dbPath: string;
     /** Path shown to the model and used as the per-file key. */
     readonly displayPath: string;
     /** File size in bytes — surfaced in the deterministic fallback description. */
     readonly sizeBytes?: number;
-}
-export interface GenerateFileMetadataOptions {
+};
+export type GenerateFileMetadataOptions = {
     /** Operational logging seam; omitted falls back to no-op. */
     readonly logger?: Logger;
     /** LLM usage-accounting seam for the continuation; omitted falls back to the no-op recorder. */
@@ -39,7 +42,7 @@ export interface GenerateFileMetadataOptions {
     /** The store of the task, thus the loop of the continuation keeps its texts where the read tool of the agent reads them. */
     readonly toolOutputStore?: ToolOutputStore;
     /** The provider of the task, thus each request extends the prefix that the task cached. */
-    readonly provider: AgentChat;
+    readonly provider: ChatProvider;
     readonly session: AgentSession;
     readonly artifacts: readonly ArtifactForMetadata[];
     readonly resourceId: string;
@@ -47,27 +50,32 @@ export interface GenerateFileMetadataOptions {
     readonly extraMetadata?: Record<string, unknown>;
     /** The step agent: the continuation sends its system prompt and its declared tools. */
     readonly agent: AgentDefinition;
-    /** The cell that the `submit_file_metadata` tool of `agent` records into. */
+    /** The cell of the `submit_file_metadata` tool of `agent`: it holds the known paths of the request. */
     readonly cell: FileMetadataCell;
     /**
-     * The transcript from `runAgent` that the continuation extends, to
+     * The transcript of the task that the follow-up request extends, to
      * ground each file's description in why the step produced it.
      */
     readonly transcript: readonly LoopMessage[];
     readonly signal?: AbortSignal;
-}
-export interface FileMetadataEntry {
+};
+export type FileMetadataEntry = {
     readonly dbPath: string;
     readonly description: string;
     readonly metadata: Record<string, unknown>;
-}
-export interface FileMetadataResult {
+};
+export type FileMetadataResult = {
     /** Number of files the model described — excludes deterministic fallbacks. */
     readonly indexed: number;
     /** One entry per input artifact (described or fallback), input order. */
     readonly entries: readonly FileMetadataEntry[];
     /** The continuation's new messages: the request, then its replies. Empty when no continuation ran. */
     readonly messages: readonly LoopMessage[];
-}
-/** Describes a step's known artifacts; a continuation failure degrades to per-file fallbacks rather than throwing. */
+};
+/**
+ * The description of each known path, from the calls of `submit_file_metadata` that ran, in order. A later
+ * description of a path replaces an earlier one, and a path outside the list is no file of the step.
+ */
+export declare function submittedDescriptions(steps: readonly LoopStep[], knownPaths: ReadonlySet<string>): Map<string, SubmittedFileDescription>;
+/** Describes a step's known artifacts; a follow-up failure degrades to per-file fallbacks rather than throwing. */
 export declare function generateFileMetadata(opts: GenerateFileMetadataOptions): Promise<FileMetadataResult>;

package/dist/execution/artifact-metadata.js

@@ -1,7 +1,8 @@
 /**
  * Per-step artifact metadata generation — describes a step's output files
- * through a continuation of the step agent's conversation (`continueAgent`)
- * on the harness `ChatProvider`.
+ * through a follow-up request of the step agent's conversation (`continueLoop`)
+ * on the harness `ChatProvider`. The description of each file comes from the
+ * recorded calls of `submit_file_metadata`: the last description of a path wins.
  *
  * The continuation extends the prefix that the task cached, so each signed
  * thinking block of the task must stay valid across the extension.
@@ -16,10 +17,11 @@
  * `Session` is taken explicitly (see the harness-durable-runtime spec) — billing is a compile-time
  * obligation on every provider call.
  */
-import { continueAgent } from "../loop/continue-agent.js";
-import { passthroughStep } from "../loop/run-step.js";
+import { continueLoop } from "../loop/run-loop.js";
+import { recordedInputOf } from "../loop/tool-adapter.js";
 import { READ_TOOL_OUTPUT_TOOL_ID } from "../loop/tool-output.js";
 import { inferArtifactType } from "../schemas/artifact-manifest.js";
+import { SubmitFileMetadataInputSchema } from "../schemas/file-metadata.js";
 import { SUBMIT_FILE_METADATA_TOOL_ID } from "../tools/sandbox/submit-file-metadata.js";
 import { createNoopLogger } from "../lib/console-logger.js";
 const DESCRIBER_AGENT_ID = "file-metadata-describer";
@@ -88,7 +90,28 @@ function fallbackEntry(artifact, extra) {
         metadata: { ...extra, dataType: fileType, format },
     };
 }
-/** Describes a step's known artifacts; a continuation failure degrades to per-file fallbacks rather than throwing. */
+/**
+ * The description of each known path, from the calls of `submit_file_metadata` that ran, in order. A later
+ * description of a path replaces an earlier one, and a path outside the list is no file of the step.
+ */
+export function submittedDescriptions(steps, knownPaths) {
+    const descriptions = new Map();
+    for (const step of steps) {
+        for (const call of step.calls) {
+            if (call.toolName !== SUBMIT_FILE_METADATA_TOOL_ID || call.output?.outcome !== "ok")
+                continue;
+            const input = recordedInputOf(SubmitFileMetadataInputSchema, call.input);
+            if (input === undefined)
+                continue;
+            for (const entry of input.files) {
+                if (knownPaths.has(entry.path))
+                    descriptions.set(entry.path, entry);
+            }
+        }
+    }
+    return descriptions;
+}
+/** Describes a step's known artifacts; a follow-up failure degrades to per-file fallbacks rather than throwing. */
 export async function generateFileMetadata(opts) {
     const logger = (opts.logger ?? createNoopLogger()).named("artifact-metadata").with({ resourceId: opts.resourceId });
     if (opts.artifacts.length === 0) {
@@ -105,30 +128,30 @@ export async function generateFileMetadata(opts) {
     }
     opts.cell.expect(opts.artifacts.map((a) => a.displayPath));
     let messages = [];
+    let descriptions = new Map();
     try {
-        const continued = await continueAgent(opts.agent, opts.transcript, {
+        const continued = await continueLoop(opts.agent, opts.transcript, {
             text: describerRequest(opts.artifacts),
             mask: { allow: DESCRIBER_TOOLS },
             maxRequests: DESCRIBER_MAX_REQUESTS,
-            stepNamespace: "file-metadata",
             accountingAgentId: DESCRIBER_AGENT_ID,
         }, opts.session, {
             provider: opts.provider,
             signal: opts.signal ?? new AbortController().signal,
             emit: () => { },
-            runStep: passthroughStep,
             usageRecorder: opts.usageRecorder,
             toolOutputStore: opts.toolOutputStore,
         });
         messages = continued.messages;
+        descriptions = submittedDescriptions(continued.steps, new Set(opts.artifacts.map((a) => a.displayPath)));
     }
     catch (err) {
-        logger.warn("describer continuation failed; using fallbacks", logger.errorFields(err));
+        logger.warn("describer follow-up request failed; using fallbacks", logger.errorFields(err));
     }
     const entries = [];
     const fallbackPaths = [];
     for (const artifact of opts.artifacts) {
-        const desc = opts.cell.descriptions.get(artifact.displayPath);
+        const desc = descriptions.get(artifact.displayPath);
         if (desc) {
             entries.push(buildEntry(artifact, desc, opts.extraMetadata));
         }

package/dist/execution/artifact-record.d.ts

@@ -4,7 +4,7 @@
  * Pure data type; lives in its own file because it is shared across
  * `execution/` and `provenance/`.
  */
-export interface ArtifactRecord {
+export type ArtifactRecord = {
     path: string;
     hash: string;
     size: number;
@@ -20,4 +20,4 @@ export interface ArtifactRecord {
      * deterministic call-activity identifier on it.
      */
     invocationId: string;
-}
+};

package/dist/execution/artifact-registration.d.ts

@@ -10,14 +10,14 @@
  * decision — this module never names one.
  */
 import { type Result } from "neverthrow";
-import type { Pool, PoolClient } from "pg";
+import type { Querier } from "../state/db.js";
 import type { AgentSession } from "../auth/types.js";
 import type { DbError } from "../lib/db-result.js";
 import { type GateRefusal } from "../lib/hooks.js";
 import type { Logger } from "../lib/logger.js";
 import type { ArtifactRegistry, ArtifactRegistrationInput } from "./artifact-registry.js";
-export type { ArtifactRegistrationInput };
-export interface ArtifactRegistrationResult {
+export type { ArtifactRegistrationInput } from "./artifact-registry.js";
+export type ArtifactRegistrationResult = {
     /** Number of artifacts written to the local ledger. */
     localCount: number;
     /** Number of artifacts registered externally and given external IDs. */
@@ -29,7 +29,7 @@ export interface ArtifactRegistrationResult {
         path: string;
         error: string;
     }>;
-}
+};
 /** Why a registration stopped: the `register` gate refused it, or a write of the local ledger failed. */
 export type ArtifactRegistrationFailure = {
     readonly kind: "refused";
@@ -49,4 +49,4 @@ export type ArtifactRegistrationFailure = {
  * `artifact_id = NULL`. A failed ledger write stops the registration at that
  * write.
  */
-export declare function registerStepArtifacts(db: Pool | PoolClient, registry: ArtifactRegistry, input: ArtifactRegistrationInput, session: AgentSession, logger?: Logger): Promise<Result<ArtifactRegistrationResult, ArtifactRegistrationFailure>>;
+export declare function registerStepArtifacts(db: Querier, registry: ArtifactRegistry, input: ArtifactRegistrationInput, session: AgentSession, logger?: Logger): Promise<Result<ArtifactRegistrationResult, ArtifactRegistrationFailure>>;

package/dist/execution/artifact-registry.d.ts

@@ -20,7 +20,7 @@ import type { ProvenanceCollector } from "../provenance/collector.js";
 import type { AgentSession } from "../auth/types.js";
 import type { GateFailure, NoticeFailure } from "../lib/hooks.js";
 /** High-level input for registering one step's artifacts. */
-export interface ArtifactRegistrationInput {
+export type ArtifactRegistrationInput = {
     /** Analysis resource ID. */
     resourceId: string;
     /** Workflow run ID. */
@@ -31,21 +31,21 @@ export interface ArtifactRegistrationInput {
     artifacts: ArtifactManifestEntry[];
     /** Provenance collector with tracked inputs/outputs. */
     collector: ProvenanceCollector;
-}
+};
 /** Step coordinates for a per-step artifact sync. */
-export interface ArtifactSyncInput {
+export type ArtifactSyncInput = {
     /** Analysis resource ID. */
     resourceId: string;
     /** Workflow run ID. */
     runId: string;
     /** Step ID whose registered artifacts are synced. */
     stepId: string;
-}
+};
 /**
  * Outcome of external registration. Flat per-path results — no provenance-model
  * vocabulary leaks across the seam.
  */
-export interface ExternalRegistrationResult {
+export type ExternalRegistrationResult = {
     /**
      * Artifacts the external registry accepted, with the external identity to
      * write back onto the local ledger row. `path` is the analysis-scoped path
@@ -80,8 +80,8 @@ export interface ExternalRegistrationResult {
         path: string;
         error: string;
     }>;
-}
-export interface ArtifactRegistry {
+};
+export type ArtifactRegistry = {
     /**
      * Register one step's artifacts with the external provenance system.
      * Implementations MUST NOT touch the local `cortex_artifacts` ledger — that
@@ -100,4 +100,4 @@ export interface ArtifactRegistry {
      * again.
      */
     sync(input: ArtifactSyncInput, session: AgentSession): ResultAsync<void, NoticeFailure>;
-}
+};

package/dist/execution/dbos-run-launcher.d.ts

@@ -3,16 +3,36 @@
  * shared by every embedder. Host-neutral: it references only DBOS and the OTel
  * API, which the harness already depends on, so it ships in the harness.
  *
+ * Outside a workflow the launch starts the run with `DBOS.startWorkflow`. A
+ * tool call of a chat turn runs inside a step, and DBOS refuses a start or an
+ * enqueue from a step. Thus inside a workflow the launch enqueues the run
+ * through a `DBOSClient` on the run queue, which no step check covers, and
+ * which keeps the run out of the children of the caller. Both paths take the
+ * run id as the workflow id, and DBOS gives back the existing workflow for an
+ * id that it holds. Thus a second launch of one run id starts nothing. A launch
+ * that fails while a workflow of its run id exists resolves, because the run is
+ * durably started.
+ *
  * A launch detaches the run from the caller's trace. The DBOS workflow span
  * takes the active context as its parent, and the caller is a chat request
  * (or another short-lived operation) whose span ends in milliseconds while the
  * run lasts hours. So the launch opens a root span of its own, runs
  * `startWorkflow` under it, and joins the two traces by a span link back to
- * the originating span plus `inflexa.run_id` on both sides. With no
- * TracerProvider registered every call here is a no-op on the API's
- * non-recording span.
+ * the originating span plus `inflexa.run_id` on both sides. An enqueued run
+ * starts on the dispatch loop of the queue, in no trace of the launch, and
+ * `inflexa.run_id` joins it. With no TracerProvider registered every call here
+ * is a no-op on the API's non-recording span.
  */
+import type { Pool } from "pg";
+import type { Logger } from "../lib/logger.js";
 import type { RunLauncher } from "./run-launcher.js";
 /** Attribute carrying the run id on the originating span and on the run's root span. */
 export declare const ATTR_INFLEXA_RUN_ID = "inflexa.run_id";
-export declare function createDbosRunLauncher(): RunLauncher;
+/** The queue of a run that a launch inside a workflow enqueues. It has no limit, thus a run waits only for the poll of the queue. */
+export declare const RUN_QUEUE = "analysis-runs";
+export type DbosRunLauncherDeps = {
+    /** A pool onto the system database of the engine: the same database that the application pool holds. */
+    readonly pool: Pool;
+    readonly logger?: Logger;
+};
+export declare function createDbosRunLauncher(deps: DbosRunLauncherDeps): RunLauncher;