@namzu/sdk 58.1.1 → 60.0.0

package/dist/compaction/context-window.js

@@ -29,6 +29,94 @@
  * accumulates every release. Until a driver does that, an entry here is
  * only ever as fresh as the day someone checked it.
  */
+/** The window an id declares with the `[1m]` suffix, and the ceiling `NAMZU_AUTO_COMPACT_WINDOW` accepts. */
+export const ONE_MILLION_WINDOW_TOKENS = 1_000_000;
+/** The window a model is held to when `NAMZU_DISABLE_1M_CONTEXT` is on. */
+export const DISABLED_ONE_MILLION_WINDOW_CAP_TOKENS = 200_000;
+const WINDOW_SUFFIX = /\[1m\]$/i;
+/**
+ * A model id may end in `[1m]` (any case) to declare a one-million-token
+ * window, whether or not the id is recognised. The suffix is a marker for
+ * Namzu, never part of the vendor's name: strip it with this before an id
+ * reaches a driver or a wire.
+ */
+export function splitModelWindowSuffix(model) {
+    const match = WINDOW_SUFFIX.exec(model);
+    if (!match)
+        return { model, declaresOneMillion: false };
+    return { model: model.slice(0, match.index), declaresOneMillion: true };
+}
+/** The id with any `[1m]` suffix removed. */
+export function stripModelWindowSuffix(model) {
+    return splitModelWindowSuffix(model).model;
+}
+/**
+ * `NAMZU_DISABLE_1M_CONTEXT` (1, true, yes or on): the suffix is still
+ * stripped but declares nothing, and no window above 200,000 tokens is
+ * assumed for a model whose window comes from a driver or the table.
+ */
+export function oneMillionWindowDisabled(env = process.env) {
+    const value = env.NAMZU_DISABLE_1M_CONTEXT?.trim().toLowerCase();
+    return value === '1' || value === 'true' || value === 'yes' || value === 'on';
+}
+/** Smallest and largest window `NAMZU_AUTO_COMPACT_WINDOW` can name. */
+export const AUTO_COMPACT_WINDOW_MIN_TOKENS = 100_000;
+export const AUTO_COMPACT_WINDOW_MAX_TOKENS = ONE_MILLION_WINDOW_TOKENS;
+/**
+ * Read an automatic-summary window the way people write one: a plain number
+ * (`200000`) or one with a `k` or `m` suffix (`786k`, `1m`, `1.5m`). Anything
+ * under 100,000 is `below_minimum`, over 1,000,000 `above_maximum`, and
+ * something that is not a size at all `unusable`.
+ */
+export function parseAutoCompactWindow(raw) {
+    const text = raw.trim();
+    const last = text.slice(-1).toLowerCase();
+    const scale = last === 'm' ? 1_000_000 : last === 'k' ? 1_000 : undefined;
+    const digits = scale === undefined ? text : text.slice(0, -1);
+    const valid = scale === undefined ? /^\+?\d+$/ : /^\+?\d+(\.\d+)?$/;
+    const value = valid.test(digits) ? Number(digits) * (scale ?? 1) : Number.NaN;
+    if (Number.isNaN(value) || value < 1)
+        return { kind: 'unusable' };
+    if (value < AUTO_COMPACT_WINDOW_MIN_TOKENS)
+        return {
+            kind: 'below_minimum',
+            tokens: Math.min(AUTO_COMPACT_WINDOW_MIN_TOKENS - 1, Math.round(value)),
+        };
+    if (value > AUTO_COMPACT_WINDOW_MAX_TOKENS)
+        return { kind: 'above_maximum' };
+    return { kind: 'in_range', tokens: Math.round(value) };
+}
+/**
+ * The window to use for a written size, and a one-line warning when what was
+ * written had to be changed: below 100,000 reads as 100,000, above 1,000,000
+ * as 1,000,000, and a non-size is ignored (`tokens` undefined). `source`
+ * names where it was written, e.g. `NAMZU_AUTO_COMPACT_WINDOW`.
+ */
+export function resolveAutoCompactWindowSetting(raw, source) {
+    const text = String(raw);
+    const parsed = parseAutoCompactWindow(text);
+    const shown = `${source}="${text.slice(0, 32).replace(/[^\w.,+ $%{}=;-]+/g, '?')}${text.length > 32 ? '\u2026' : ''}"`;
+    const advice = 'Set it to a size from 100k to 1M, such as 200k or 200000, or unset it.';
+    switch (parsed.kind) {
+        case 'in_range':
+            return { tokens: parsed.tokens };
+        case 'below_minimum':
+            return {
+                tokens: AUTO_COMPACT_WINDOW_MIN_TOKENS,
+                warning: `${shown} reads as ${parsed.tokens.toLocaleString('en-US')} tokens, so Namzu treats it as the 100k minimum. ${advice}`,
+            };
+        case 'above_maximum':
+            return {
+                tokens: AUTO_COMPACT_WINDOW_MAX_TOKENS,
+                warning: `${shown} is too large, so Namzu treats it as the 1M maximum. ${advice}`,
+            };
+        case 'unusable':
+            return {
+                tokens: undefined,
+                warning: `${shown} isn't a usable size, so Namzu ignores it. ${advice}`,
+            };
+    }
+}
 /**
  * Conservative default for a model we do not recognise.
  *
@@ -83,8 +171,29 @@ const WINDOWS = [
     ['qwen', 32_768],
     ['mistral-large', 128_000],
     ['mixtral', 32_768],
+    // The current DeepSeek models document a 1M window
+    // (https://api-docs.deepseek.com/quick_start/pricing), listed per id: a
+    // gateway can serve a derivative under a name that merely starts like one
+    // (a fine-tune, a distill), and nothing says it keeps the parent's window.
+    // Over-estimating ends a turn on a provider rejection; under-estimating
+    // costs a summary. So an id not named here falls to the bare `deepseek`
+    // row below, the 64k the older ids (chat, reasoner, R1 distills) had. The
+    // three ids are matched whole (see `DEEPSEEK_ONE_MILLION_IDS`), never by
+    // substring.
     ['deepseek', 64_000],
 ];
+/** DeepSeek ids documented at a 1M window; matched exactly, not by substring. */
+const DEEPSEEK_ONE_MILLION_IDS = new Set([
+    'deepseek-v4-flash',
+    'deepseek-v4-pro',
+    'deepseek-flash',
+]);
+/** The id with a gateway prefix (`deepseek/`) and a `:tag` (`:free`) removed. */
+function bareModelName(id) {
+    const afterSlash = id.slice(id.lastIndexOf('/') + 1);
+    const colon = afterSlash.indexOf(':');
+    return colon === -1 ? afterSlash : afterSlash.slice(0, colon);
+}
 const SORTED = [...WINDOWS].sort((a, b) => b[0].length - a[0].length);
 /**
  * Best-effort context window for a model id, or `undefined` when the id is
@@ -95,7 +204,20 @@ const SORTED = [...WINDOWS].sort((a, b) => b[0].length - a[0].length);
 export function lookupContextWindow(model) {
     if (!model)
         return undefined;
-    const id = model.toLowerCase();
+    const { declaresOneMillion } = splitModelWindowSuffix(model);
+    const known = lookupBareContextWindow(model);
+    if (declaresOneMillion && !oneMillionWindowDisabled()) {
+        return Math.max(known ?? 0, ONE_MILLION_WINDOW_TOKENS);
+    }
+    return known;
+}
+/** The table's answer for an id with any `[1m]` suffix ignored. */
+function lookupBareContextWindow(model) {
+    if (!model)
+        return undefined;
+    const id = stripModelWindowSuffix(model).toLowerCase();
+    if (DEEPSEEK_ONE_MILLION_IDS.has(bareModelName(id)))
+        return ONE_MILLION_WINDOW_TOKENS;
     for (const [prefix, tokens] of SORTED) {
         if (id.includes(prefix))
             return tokens;
@@ -162,13 +284,30 @@ providerReported) {
     if (configured !== undefined && configured > 0) {
         return { tokens: configured, source: 'config' };
     }
+    const { declaresOneMillion } = splitModelWindowSuffix(model ?? '');
+    const disabled = oneMillionWindowDisabled();
+    const base = resolveUndeclaredWindow(model, providerReported);
+    // `[1m]` raises the window to at least a million (reported as 'model-table':
+    // the id itself is the fact), never lowers one a
+    // driver or the table already puts higher.
+    if (declaresOneMillion && !disabled && base.tokens < ONE_MILLION_WINDOW_TOKENS) {
+        return { tokens: ONE_MILLION_WINDOW_TOKENS, source: 'model-table' };
+    }
+    // With the million-token window switched off, nothing assumed or reported
+    // for a model counts for more than 200,000.
+    if (disabled && base.tokens > DISABLED_ONE_MILLION_WINDOW_CAP_TOKENS) {
+        return { tokens: DISABLED_ONE_MILLION_WINDOW_CAP_TOKENS, source: base.source };
+    }
+    return base;
+}
+function resolveUndeclaredWindow(model, providerReported) {
     if (providerReported !== undefined && providerReported > 0) {
         return { tokens: providerReported, source: 'provider' };
     }
     // A driver that resolved `undefined` falls through to HERE, not to the
     // default. "I asked and it does not know" leaves the table exactly as
     // authoritative as it was before anyone asked.
-    const known = lookupContextWindow(model);
+    const known = lookupBareContextWindow(model);
     if (known !== undefined) {
         return { tokens: known, source: 'model-table' };
     }

package/dist/compaction/context-window.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-window.js","sourceRoot":"","sources":["../../src/compaction/context-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAA;AAErD;;;;;GAKG;AACH,MAAM,OAAO,GAA6D;IACzE,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAC7B,CAAC,eAAe,EAAE,SAAS,CAAC;IAC5B,CAAC,eAAe,EAAE,SAAS,CAAC;IAC5B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,mBAAmB,EAAE,SAAS,CAAC;IAChC,uEAAuE;IACvE,kEAAkE;IAClE,qEAAqE;IACrE,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC9B,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAC5B,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1B,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAC5B,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC9B,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC9B,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1B,CAAC,SAAS,EAAE,OAAO,CAAC;IACpB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,QAAQ,EAAE,OAAO,CAAC;IACnB,CAAC,aAAa,EAAE,OAAO,CAAC;IACxB,CAAC,OAAO,EAAE,KAAK,CAAC;IAChB,CAAC,eAAe,EAAE,MAAM,CAAC;IACzB,CAAC,IAAI,EAAE,OAAO,CAAC;IACf,CAAC,SAAS,EAAE,OAAO,CAAC;IACpB,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAC7B,CAAC,kBAAkB,EAAE,SAAS,CAAC;IAC/B,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAC7B,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,mCAAmC;IACnC,CAAC,WAAW,EAAE,OAAO,CAAC;IACtB,CAAC,WAAW,EAAE,OAAO,CAAC;IACtB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1B,CAAC,SAAS,EAAE,MAAM,CAAC;IACnB,CAAC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAErE;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IACvC,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAA;AACvD,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAC3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAA;AAE/C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACtC,UAA8B,EAC9B,YAAoB,EACpB,eAAwB,EACxB,uBAAgC;IAEhC,IACC,uBAAuB,KAAK,SAAS;QACrC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,IAAI,uBAAuB,IAAI,CAAC,CAAC;QAEhF,MAAM,IAAI,UAAU,CAAC,0DAA0D,CAAC,CAAA;IACjF,IAAI,uBAAuB,KAAK,SAAS,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAA;QAC9D,OAAO,CAAC,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC,GAAG,YAAY,CAAA;IAC9F,CAAC;IACD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAA;IAC/C,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;QAAE,OAAO,4BAA4B,CAAA;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACvB,eAAe,KAAK,SAAS,IAAI,eAAe,GAAG,CAAC;QACnD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,iCAAiC,EACpC,iCAAiC,CACjC,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,YAAY,GAAG,OAAO,GAAG,qBAAqB,CAAC,GAAG,YAAY,CAAA;IAChF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC,CAAA;AACrE,CAAC;AAeD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CACnC,UAA8B,EAC9B,KAAyB;AACzB;;;;;;GAMG;AACH,gBAAyB;IAEzB,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAChD,CAAC;IACD,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IACxD,CAAC;IACD,uEAAuE;IACvE,sEAAsE;IACtE,+CAA+C;IAC/C,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IAChD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,8BAA8B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AACrE,CAAC"}
+{"version":3,"file":"context-window.js","sourceRoot":"","sources":["../../src/compaction/context-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,6GAA6G;AAC7G,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAA;AAClD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sCAAsC,GAAG,OAAO,CAAA;AAE7D,MAAM,aAAa,GAAG,UAAU,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAInD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAA;IACvD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;AACxE,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,sBAAsB,CAAC,KAAa;IACnD,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAChE,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,CAAA;AAC9E,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAA;AACrD,MAAM,CAAC,MAAM,8BAA8B,GAAG,yBAAyB,CAAA;AAQvE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IACjD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACzC,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACzE,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAA;IACnE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;IAC7E,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IACjE,IAAI,KAAK,GAAG,8BAA8B;QACzC,OAAO;YACN,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,8BAA8B,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACvE,CAAA;IACF,IAAI,KAAK,GAAG,8BAA8B;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAA;IAC5E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAA;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC9C,GAAoB,EACpB,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACxB,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,GAAG,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAA;IACtH,MAAM,MAAM,GAAG,wEAAwE,CAAA;IACvF,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,UAAU;YACd,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;QACjC,KAAK,eAAe;YACnB,OAAO;gBACN,MAAM,EAAE,8BAA8B;gBACtC,OAAO,EAAE,GAAG,KAAK,aAAa,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,oDAAoD,MAAM,EAAE;aAC/H,CAAA;QACF,KAAK,eAAe;YACnB,OAAO;gBACN,MAAM,EAAE,8BAA8B;gBACtC,OAAO,EAAE,GAAG,KAAK,wDAAwD,MAAM,EAAE;aACjF,CAAA;QACF,KAAK,UAAU;YACd,OAAO;gBACN,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,GAAG,KAAK,8CAA8C,MAAM,EAAE;aACvE,CAAA;IACH,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CAAA;AAErD;;;;;GAKG;AACH,MAAM,OAAO,GAA6D;IACzE,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAC7B,CAAC,eAAe,EAAE,SAAS,CAAC;IAC5B,CAAC,eAAe,EAAE,SAAS,CAAC;IAC5B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,iBAAiB,EAAE,SAAS,CAAC;IAC9B,CAAC,mBAAmB,EAAE,SAAS,CAAC;IAChC,uEAAuE;IACvE,kEAAkE;IAClE,qEAAqE;IACrE,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC9B,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAC5B,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1B,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAC5B,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC9B,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC9B,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1B,CAAC,SAAS,EAAE,OAAO,CAAC;IACpB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,QAAQ,EAAE,OAAO,CAAC;IACnB,CAAC,aAAa,EAAE,OAAO,CAAC;IACxB,CAAC,OAAO,EAAE,KAAK,CAAC;IAChB,CAAC,eAAe,EAAE,MAAM,CAAC;IACzB,CAAC,IAAI,EAAE,OAAO,CAAC;IACf,CAAC,SAAS,EAAE,OAAO,CAAC;IACpB,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAC7B,CAAC,kBAAkB,EAAE,SAAS,CAAC;IAC/B,CAAC,gBAAgB,EAAE,SAAS,CAAC;IAC7B,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,mCAAmC;IACnC,CAAC,WAAW,EAAE,OAAO,CAAC;IACtB,CAAC,WAAW,EAAE,OAAO,CAAC;IACtB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1B,CAAC,SAAS,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,aAAa;IACb,CAAC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAA;AAED,iFAAiF;AACjF,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC7D,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;CAChB,CAAC,CAAA;AAEF,iFAAiF;AACjF,SAAS,aAAa,CAAC,EAAU;IAChC,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACrC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AAC9D,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAErE;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,EAAE,kBAAkB,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;IAC5C,IAAI,kBAAkB,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,yBAAyB,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,mEAAmE;AACnE,SAAS,uBAAuB,CAAC,KAAyB;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACtD,IAAI,wBAAwB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,yBAAyB,CAAA;IACrF,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IACvC,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAA;AACvD,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAC3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAA;AAE/C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACtC,UAA8B,EAC9B,YAAoB,EACpB,eAAwB,EACxB,uBAAgC;IAEhC,IACC,uBAAuB,KAAK,SAAS;QACrC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,IAAI,uBAAuB,IAAI,CAAC,CAAC;QAEhF,MAAM,IAAI,UAAU,CAAC,0DAA0D,CAAC,CAAA;IACjF,IAAI,uBAAuB,KAAK,SAAS,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAA;QAC9D,OAAO,CAAC,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC,GAAG,YAAY,CAAA;IAC9F,CAAC;IACD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAA;IAC/C,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;QAAE,OAAO,4BAA4B,CAAA;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACvB,eAAe,KAAK,SAAS,IAAI,eAAe,GAAG,CAAC;QACnD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,iCAAiC,EACpC,iCAAiC,CACjC,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,YAAY,GAAG,OAAO,GAAG,qBAAqB,CAAC,GAAG,YAAY,CAAA;IAChF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC,CAAA;AACrE,CAAC;AAeD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CACnC,UAA8B,EAC9B,KAAyB;AACzB;;;;;;GAMG;AACH,gBAAyB;IAEzB,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAChD,CAAC;IACD,MAAM,EAAE,kBAAkB,EAAE,GAAG,sBAAsB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAA;IAC3C,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAA;IAC7D,6EAA6E;IAC7E,iDAAiD;IACjD,2CAA2C;IAC3C,IAAI,kBAAkB,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IACpE,CAAC;IACD,0EAA0E;IAC1E,4CAA4C;IAC5C,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,sCAAsC,EAAE,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,sCAAsC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;IAC/E,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAAyB,EACzB,gBAAoC;IAEpC,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IACxD,CAAC;IACD,uEAAuE;IACvE,sEAAsE;IACtE,+CAA+C;IAC/C,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;IAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IAChD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,8BAA8B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AACrE,CAAC"}

package/dist/execution/workflow/index.d.ts

@@ -1,9 +1,11 @@
 export { WorkflowScriptError } from './errors.js';
 export { FileWorkflowJournal } from './journal.js';
 export { parseWorkflowMeta } from './meta.js';
+export { formatWorkflowJournalLine, loadWorkflowResume, readWorkflowJournalChecked, workflowCallKey, workflowJournalLineHash, workflowJournalSeed, } from './resume.js';
+export type { WorkflowCallIdentity } from './resume.js';
 export { summarizeWorkflowPhases } from './phases.js';
 export type { PhaseAgentView, PhaseRecord } from './phases.js';
-export { resolveWorkflowLimits, WORKFLOW_HOST_CALL, WorkflowRuntime } from './runtime.js';
+export { resolveWorkflowLimits, WORKFLOW_HOST_CALL, WorkflowRuntime, } from './runtime.js';
 export type { WorkflowRuntimeOptions } from './runtime.js';
 export type * from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/execution/workflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACzF,YAAY,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAC1D,mBAAmB,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EACN,yBAAyB,EACzB,kBAAkB,EAClB,0BAA0B,EAC1B,eAAe,EACf,uBAAuB,EACvB,mBAAmB,GACnB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EACN,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,GACf,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAC1D,mBAAmB,YAAY,CAAA"}

package/dist/execution/workflow/index.js

@@ -1,6 +1,7 @@
 export { WorkflowScriptError } from './errors.js';
 export { FileWorkflowJournal } from './journal.js';
 export { parseWorkflowMeta } from './meta.js';
+export { formatWorkflowJournalLine, loadWorkflowResume, readWorkflowJournalChecked, workflowCallKey, workflowJournalLineHash, workflowJournalSeed, } from './resume.js';
 export { summarizeWorkflowPhases } from './phases.js';
-export { resolveWorkflowLimits, WORKFLOW_HOST_CALL, WorkflowRuntime } from './runtime.js';
+export { resolveWorkflowLimits, WORKFLOW_HOST_CALL, WorkflowRuntime, } from './runtime.js';
 //# sourceMappingURL=index.js.map

package/dist/execution/workflow/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/execution/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAErD,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/execution/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EACN,yBAAyB,EACzB,kBAAkB,EAClB,0BAA0B,EAC1B,eAAe,EACf,uBAAuB,EACvB,mBAAmB,GACnB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAErD,OAAO,EACN,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,GACf,MAAM,cAAc,CAAA"}

package/dist/execution/workflow/journal.d.ts

@@ -1,4 +1,4 @@
-import type { WorkflowJournal, WorkflowJournalRecord } from './types.js';
+import type { CheckedWorkflowJournal, WorkflowJournal, WorkflowJournalReader, WorkflowJournalRecord } from './types.js';
 export declare function sha256(text: string): string;
 /** The first `max` UTF-16 units of `text`, never ending inside a surrogate pair. */
 export declare function preview(text: string, max?: number): string;
@@ -6,13 +6,33 @@ export declare function preview(text: string, max?: number): string;
  * A journal in a directory: `script.js` (the exact script text, mode 0600)
  * and `journal.jsonl` (one JSON record per line, append-only). The caller
  * chooses the directory, normally `<session>/runs/<runId>/workflow/`.
+ *
+ * Every line carries `seq` and `prev` (the hash of the line before it, the
+ * first chaining from a seed bound to the run id), so a line that was edited,
+ * removed or cut short is found when the journal is read back. One writer per
+ * file serves the whole process: a resumed pass and a late agent of the pass
+ * before it append through the same queue and the same chain, and nothing is
+ * appended after a pass's `run_finished` until the next pass starts. This
+ * assumes one process writes the file at a time, which the session lease
+ * already guarantees. A chain proves the file was not damaged or edited by
+ * accident; someone who can rewrite the whole file can rewrite the chain too.
  */
-export declare class FileWorkflowJournal implements WorkflowJournal {
+export declare class FileWorkflowJournal implements WorkflowJournal, WorkflowJournalReader {
     private readonly dir;
+    private readonly options;
     private ready;
-    constructor(dir: string);
+    private readonly file;
+    constructor(dir: string, options?: {
+        readonly runId?: string;
+        /** A secret that signs every line; see `readWorkflowJournalChecked`. */
+        readonly key?: string | Uint8Array;
+    });
     private ensure;
-    writeScript(source: string): Promise<void>;
+    /** The run id of the file's first line, learned from the file or from the first `run_started` written. */
+    private learned;
+    private runId;
+    writeScript(source: string, _sha256?: string, pass?: number): Promise<void>;
+    read(): Promise<CheckedWorkflowJournal>;
     append(record: WorkflowJournalRecord): Promise<void>;
 }
 //# sourceMappingURL=journal.d.ts.map

package/dist/execution/workflow/journal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/journal.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAExE,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED,oFAAoF;AACpF,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAM,GAAG,MAAM,CAMvD;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,YAAW,eAAe;IAG9C,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFhC,OAAO,CAAC,KAAK,CAA2B;gBAEX,GAAG,EAAE,MAAM;IAExC,OAAO,CAAC,MAAM;IAKR,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1C,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CAM1D"}
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/journal.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACX,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,MAAM,YAAY,CAAA;AAEnB,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED,oFAAoF;AACpF,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAM,GAAG,MAAM,CAMvD;AA2BD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,mBAAoB,YAAW,eAAe,EAAE,qBAAqB;IAKhF,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IALzB,OAAO,CAAC,KAAK,CAA2B;IACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;gBAGX,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;QACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;QACvB,wEAAwE;QACxE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;KAC7B;IAKP,OAAO,CAAC,MAAM;IAKd,0GAA0G;IAC1G,OAAO,CAAC,OAAO,CAAoB;IAEnC,OAAO,CAAC,KAAK;IAmBP,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtE,IAAI,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAa7C,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CAgEpD"}

package/dist/execution/workflow/journal.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
-import { appendFile, mkdir, writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
+import { mkdir, open, readFile, stat, writeFile } from 'node:fs/promises';
+import { basename, dirname, join, resolve } from 'node:path';
+import { formatWorkflowJournalLine, readWorkflowJournalChecked, workflowJournalLineHash, workflowJournalSeed, } from './resume.js';
 export function sha256(text) {
     return createHash('sha256').update(text).digest('hex');
 }
@@ -14,30 +15,151 @@ export function preview(text, max = 500) {
         end--;
     return `${text.slice(0, end)}…`;
 }
+const chains = new Map();
+/** Records after which a crash must not lose the line: a saved result, the end of a pass, the start of one. */
+function mustSurviveCrash(record) {
+    return (record.type === 'run_finished' ||
+        record.type === 'run_started' ||
+        (record.type === 'agent_outcome' && Object.hasOwn(record, 'result')));
+}
 /**
  * A journal in a directory: `script.js` (the exact script text, mode 0600)
  * and `journal.jsonl` (one JSON record per line, append-only). The caller
  * chooses the directory, normally `<session>/runs/<runId>/workflow/`.
+ *
+ * Every line carries `seq` and `prev` (the hash of the line before it, the
+ * first chaining from a seed bound to the run id), so a line that was edited,
+ * removed or cut short is found when the journal is read back. One writer per
+ * file serves the whole process: a resumed pass and a late agent of the pass
+ * before it append through the same queue and the same chain, and nothing is
+ * appended after a pass's `run_finished` until the next pass starts. This
+ * assumes one process writes the file at a time, which the session lease
+ * already guarantees. A chain proves the file was not damaged or edited by
+ * accident; someone who can rewrite the whole file can rewrite the chain too.
  */
 export class FileWorkflowJournal {
     dir;
+    options;
     ready;
-    constructor(dir) {
+    file;
+    constructor(dir, options = {}) {
         this.dir = dir;
+        this.options = options;
+        this.file = resolve(dir, 'journal.jsonl');
     }
     ensure() {
         this.ready ??= mkdir(this.dir, { recursive: true, mode: 0o700 }).then(() => undefined);
         return this.ready;
     }
-    async writeScript(source) {
-        await this.ensure();
-        await writeFile(join(this.dir, 'script.js'), source, { mode: 0o600 });
+    /** The run id of the file's first line, learned from the file or from the first `run_started` written. */
+    learned;
+    runId(record, text) {
+        if (this.options.runId !== undefined)
+            return this.options.runId;
+        if (record?.type === 'run_started')
+            this.learned = record.runId;
+        if (this.learned !== undefined)
+            return this.learned;
+        const first = text?.slice(0, text.indexOf('\n') < 0 ? undefined : text.indexOf('\n'));
+        if (first) {
+            try {
+                const parsed = JSON.parse(first);
+                if (parsed.type === 'run_started' && typeof parsed.runId === 'string') {
+                    this.learned = parsed.runId;
+                    return parsed.runId;
+                }
+            }
+            catch {
+                // Not a record: fall back to the folder name below.
+            }
+        }
+        return basename(dirname(resolve(this.dir)));
     }
-    async append(record) {
+    async writeScript(source, _sha256, pass = 1) {
         await this.ensure();
-        await appendFile(join(this.dir, 'journal.jsonl'), `${JSON.stringify(record)}\n`, {
-            mode: 0o600,
+        const name = pass <= 1 ? 'script.js' : `script.${pass}.js`;
+        await writeFile(join(this.dir, name), source, { mode: 0o600 });
+    }
+    async read() {
+        let text;
+        try {
+            text = await readFile(this.file, 'utf8');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            text = '';
+        }
+        return readWorkflowJournalChecked(text, this.runId(undefined, text), {
+            ...(this.options.key !== undefined ? { key: this.options.key } : {}),
+        });
+    }
+    append(record) {
+        let state = chains.get(this.file);
+        if (state === undefined) {
+            state = {
+                queue: Promise.resolve(),
+                loaded: false,
+                seq: 0,
+                prev: '',
+                needsNewline: false,
+                finished: false,
+                size: 0,
+                pending: 0,
+            };
+            chains.set(this.file, state);
+        }
+        const chain = state;
+        chain.pending++;
+        const run = chain.queue.then(async () => {
+            await this.ensure();
+            const onDisk = await stat(this.file).then((info) => info.size, () => 0);
+            if (!chain.loaded || onDisk !== chain.size) {
+                const checked = await this.read();
+                chain.seq = checked.lastSeq;
+                chain.prev = checked.lastHash;
+                chain.needsNewline = !checked.endsWithNewline;
+                chain.finished = checked.records.at(-1)?.type === 'run_finished';
+                chain.loaded = true;
+                chain.size = onDisk;
+            }
+            if (record.type === 'run_started')
+                chain.finished = false;
+            // Nothing belongs after the pass's end; a late agent of that pass is dropped here.
+            else if (chain.finished)
+                return;
+            if (chain.seq === 0)
+                chain.prev = workflowJournalSeed(this.runId(record));
+            const seq = chain.seq + 1;
+            const line = formatWorkflowJournalLine(record, seq, chain.prev, this.options.key);
+            const handle = await open(this.file, 'a', 0o600);
+            try {
+                const text = `${chain.needsNewline ? '\n' : ''}${line}\n`;
+                await handle.appendFile(text);
+                chain.size += Buffer.byteLength(text);
+                if (mustSurviveCrash(record))
+                    await handle.datasync();
+            }
+            finally {
+                await handle.close();
+            }
+            chain.needsNewline = false;
+            chain.seq = seq;
+            chain.prev = workflowJournalLineHash(line);
+            if (record.type === 'run_finished')
+                chain.finished = true;
+        });
+        chain.queue = run
+            .catch(() => undefined)
+            .then(() => {
+            chain.pending--;
+            // A finished run keeps no state: the next append reads the file again, and
+            // what it finds (a last `run_finished`) is the same thing the state held.
+            if (chain.pending === 0 && chain.finished && chains.get(this.file) === chain) {
+                chains.delete(this.file);
+            }
         });
+        return run;
     }
 }
 //# sourceMappingURL=journal.js.map

package/dist/execution/workflow/journal.js.map

@@ -1 +1 @@
-{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/execution/workflow/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,MAAM,UAAU,MAAM,CAAC,IAAY;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,GAAG;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,GAAG,GAAG,GAAG,CAAA;IACb,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;IACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;QAAE,GAAG,EAAE,CAAA;IAC3C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAGF;IAFrB,KAAK,CAA2B;IAExC,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAEpC,MAAM;QACb,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACtF,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC/B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA6B;QACzC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YAChF,IAAI,EAAE,KAAK;SACX,CAAC,CAAA;IACH,CAAC;CACD"}
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/execution/workflow/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAE5D,OAAO,EACN,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,GACnB,MAAM,aAAa,CAAA;AAQpB,MAAM,UAAU,MAAM,CAAC,IAAY;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,GAAG;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,GAAG,GAAG,GAAG,CAAA;IACb,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;IACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;QAAE,GAAG,EAAE,CAAA;IAC3C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA;AAChC,CAAC;AAgBD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAA;AAE5C,+GAA+G;AAC/G,SAAS,gBAAgB,CAAC,MAA6B;IACtD,OAAO,CACN,MAAM,CAAC,IAAI,KAAK,cAAc;QAC9B,MAAM,CAAC,IAAI,KAAK,aAAa;QAC7B,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CACpE,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,mBAAmB;IAKb;IACA;IALV,KAAK,CAA2B;IACvB,IAAI,CAAQ;IAE7B,YACkB,GAAW,EACX,UAIb,EAAE;QALW,QAAG,GAAH,GAAG,CAAQ;QACX,YAAO,GAAP,OAAO,CAIlB;QAEN,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC1C,CAAC;IAEO,MAAM;QACb,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACtF,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;IAED,0GAA0G;IAClG,OAAO,CAAoB;IAE3B,KAAK,CAAC,MAA8B,EAAE,IAAa;QAC1D,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAA;QAC/D,IAAI,MAAM,EAAE,IAAI,KAAK,aAAa;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAA;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAA;QACnD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACrF,IAAI,KAAK,EAAE,CAAC;YACX,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAwC,CAAA;gBACvE,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAA;oBAC3B,OAAO,MAAM,CAAC,KAAK,CAAA;gBACpB,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,oDAAoD;YACrD,CAAC;QACF,CAAC;QACD,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,OAAgB,EAAE,IAAI,GAAG,CAAC;QAC3D,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAA;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,IAAI,GAAG,EAAE,CAAA;QACV,CAAC;QACD,OAAO,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE;YACpE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAA;IACH,CAAC;IAED,MAAM,CAAC,MAA6B;QACnC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,KAAK,GAAG;gBACP,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE;gBACxB,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE,EAAE;gBACR,YAAY,EAAE,KAAK;gBACnB,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,CAAC;aACV,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC7B,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAA;QACnB,KAAK,CAAC,OAAO,EAAE,CAAA;QACf,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CACxC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EACnB,GAAG,EAAE,CAAC,CAAC,CACP,CAAA;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;gBACjC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAA;gBAC3B,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAA;gBAC7B,KAAK,CAAC,YAAY,GAAG,CAAC,OAAO,CAAC,eAAe,CAAA;gBAC7C,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,cAAc,CAAA;gBAChE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAA;gBACnB,KAAK,CAAC,IAAI,GAAG,MAAM,CAAA;YACpB,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;gBAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAA;YACzD,mFAAmF;iBAC9E,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAM;YAC/B,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;YACzE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAA;YACzB,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACjF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YAChD,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAA;gBACzD,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;gBAC7B,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;gBACrC,IAAI,gBAAgB,CAAC,MAAM,CAAC;oBAAE,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACtD,CAAC;oBAAS,CAAC;gBACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACrB,CAAC;YACD,KAAK,CAAC,YAAY,GAAG,KAAK,CAAA;YAC1B,KAAK,CAAC,GAAG,GAAG,GAAG,CAAA;YACf,KAAK,CAAC,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;YAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;gBAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;QAC1D,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,KAAK,GAAG,GAAG;aACf,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACtB,IAAI,CAAC,GAAG,EAAE;YACV,KAAK,CAAC,OAAO,EAAE,CAAA;YACf,2EAA2E;YAC3E,0EAA0E;YAC1E,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC9E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;QACF,CAAC,CAAC,CAAA;QACH,OAAO,GAAG,CAAA;IACX,CAAC;CACD"}

package/dist/execution/workflow/prelude.d.ts

@@ -6,10 +6,12 @@
 export declare function preludeLineCount(config: {
     args: unknown;
     tokenLimit: number | null;
+    deterministic?: boolean;
 }): number;
 /** Source that installs the workflow globals, ready to prepend to a script body. */
 export declare function buildPrelude(config: {
     args: unknown;
     tokenLimit: number | null;
+    deterministic?: boolean;
 }): string;
 //# sourceMappingURL=prelude.d.ts.map

package/dist/execution/workflow/prelude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prelude.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/prelude.ts"],"names":[],"mappings":"AAiJA;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACxC,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,GAAG,MAAM,CAET;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACpC,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,GAAG,MAAM,CAOT"}
+{"version":3,"file":"prelude.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/prelude.ts"],"names":[],"mappings":"AA0LA;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACxC,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,aAAa,CAAC,EAAE,OAAO,CAAA;CACvB,GAAG,MAAM,CAET;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACpC,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,aAAa,CAAC,EAAE,OAAO,CAAA;CACvB,GAAG,MAAM,CAOT"}

package/dist/execution/workflow/prelude.js

@@ -28,7 +28,7 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 	}
 	function phase(title) {
 		var t = clean(title, 120);
-		if (!t) throw new TypeError('phase() needs a non-empty title.');
+		if (!t) throw misuse('phase() needs a non-empty title.');
 		cursor = t;
 		emit({ k: 'phase', title: t });
 	}
@@ -53,13 +53,26 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 		return e;
 	}
 	function isBudgetError(e) { return !!e && e.name === 'WorkflowBudgetExceededError'; }
+	function misuse(message) {
+		var e = new TypeError(message);
+		e.workflowMisuse = true;
+		return e;
+	}
+	function isMisuse(e) { return !!e && e.workflowMisuse === true; }
+	var optionNames = ['label', 'phase', 'schema', 'agentType', 'model', 'effort'];
 	async function agent(prompt, opts) {
 		if (typeof prompt !== 'string' || prompt.length === 0) {
-			throw new TypeError('agent(prompt, options?): the prompt must be a non-empty string, got ' + kind(prompt));
+			throw misuse('agent(prompt, options?): the prompt must be a non-empty string, got ' + kind(prompt));
 		}
 		var o = opts == null ? {} : opts;
 		if (typeof o !== 'object' || Array.isArray(o)) {
-			throw new TypeError('agent(prompt, options?): options must be an object, got ' + kind(o));
+			throw misuse('agent(prompt, options?): options must be an object, got ' + kind(o));
+		}
+		var unknown = Object.keys(o).filter(function (k) { return optionNames.indexOf(k) < 0; });
+		if (unknown.length > 0) {
+			// Ignored, as it always was, but no longer silently: a saved script that
+			// misspells an option keeps running and the line says why it had no effect.
+			log('agent(prompt, options?): ignoring unknown option "' + unknown[0] + '"; the options are ' + optionNames.join(', ') + '.');
 		}
 		if (overBudget()) throw budgetError();
 		var request = { prompt: prompt, cursor: cursor };
@@ -69,23 +82,32 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 		if (o.agentType != null) request.agentType = clean(o.agentType, 120);
 		if (o.model != null) request.model = clean(o.model, 120);
 		if (o.effort != null) request.effort = clean(o.effort, 32);
-		var reply = await rawCall('agent', request);
+		var reply;
+		try {
+			reply = await rawCall('agent', request);
+		} catch (e) {
+			// The host rejects a malformed request with an "agent(): ..." message;
+			// that is the script's mistake, not a failed child.
+			if (e && typeof e.message === 'string' && e.message.indexOf('agent(): ') === 0) throw misuse(e.message);
+			throw e;
+		}
 		spent.tokensUsed = reply.t;
 		return reply.v;
 	}
 	async function parallel(thunks) {
 		if (!Array.isArray(thunks)) {
-			throw new TypeError('parallel(thunks): the argument must be an array of functions, got ' + kind(thunks));
+			throw misuse('parallel(thunks): the argument must be an array of functions, got ' + kind(thunks));
 		}
 		for (var p = 0; p < thunks.length; p++) {
 			if (typeof thunks[p] !== 'function') {
-				throw new TypeError('parallel(thunks): item ' + (p + 1) + ' must be a function (wrap the work as () => agent(...)), got ' + kind(thunks[p]));
+				throw misuse('parallel(thunks): item ' + (p + 1) + ' must be a function (wrap the work as () => agent(...)), got ' + kind(thunks[p]));
 			}
 		}
 		var dropped = 0;
 		var results = await Promise.all(thunks.map(function (t, n) {
 			return Promise.resolve().then(t).catch(function (e) {
 				if (isBudgetError(e)) { dropped++; return null; }
+				if (isMisuse(e)) throw e;
 				log('Step ' + (n + 1) + ' stopped: ' + clean(e && e.message ? e.message : e, 300));
 				return null;
 			});
@@ -95,12 +117,12 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 	}
 	async function pipeline(items) {
 		if (!Array.isArray(items)) {
-			throw new TypeError('pipeline(items, ...stages): the first argument must be an array, got ' + kind(items));
+			throw misuse('pipeline(items, ...stages): the first argument must be an array, got ' + kind(items));
 		}
 		var stages = Array.prototype.slice.call(arguments, 1);
 		for (var s = 0; s < stages.length; s++) {
 			if (typeof stages[s] !== 'function') {
-				throw new TypeError('pipeline(items, ...stages): stage ' + (s + 1) + ' must be a function, got ' + kind(stages[s]));
+				throw misuse('pipeline(items, ...stages): stage ' + (s + 1) + ' must be a function, got ' + kind(stages[s]));
 			}
 		}
 		if (items.length > 0 && overBudget()) throw budgetError();
@@ -112,6 +134,7 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 					value = await stages[i](value, item, index);
 				} catch (e) {
 					if (isBudgetError(e)) { dropped++; return null; }
+					if (isMisuse(e)) throw e;
 					log('Item ' + (index + 1) + ' stopped at step ' + (i + 1) + ': ' + clean(e && e.message ? e.message : e, 300));
 					return null;
 				}
@@ -141,6 +164,24 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 	install('log', log);
 	install('budget', budget);
 	install('args', config.args);
+	if (config.deterministic) {
+		var RealDate = Date;
+		var clockMessage = 'Date.now() / new Date() are unavailable in workflow scripts (breaks resume). Stamp results after the workflow returns, or pass timestamps through args.';
+		var randomMessage = 'Math.random() is unavailable in workflow scripts (breaks resume). For N independent samples, include the index in the agent label or prompt.';
+		var ShimDate = function Date(a, b, c, d, e, f, g) {
+			if (!new.target || arguments.length === 0) throw new Error(clockMessage);
+			return Reflect.construct(RealDate, Array.prototype.slice.call(arguments), new.target === ShimDate ? RealDate : new.target);
+		};
+		Object.defineProperty(ShimDate, 'prototype', { value: RealDate.prototype, writable: false, configurable: false });
+		Object.defineProperty(ShimDate, 'now', { value: function now() { throw new Error(clockMessage); }, writable: false, configurable: false });
+		Object.defineProperty(ShimDate, 'parse', { value: RealDate.parse, writable: false, configurable: false });
+		Object.defineProperty(ShimDate, 'UTC', { value: RealDate.UTC, writable: false, configurable: false });
+		Object.defineProperty(RealDate.prototype, 'constructor', { value: ShimDate, writable: false, configurable: false });
+		Object.defineProperty(globalThis, 'Date', { value: ShimDate, writable: false, configurable: false, enumerable: false });
+		Object.defineProperty(Math, 'random', { value: function random() { throw new Error(randomMessage); }, writable: false, configurable: false });
+		try { delete globalThis.eval; } catch (ignored) {}
+		Object.freeze(RealDate);
+	}
 })`;
 /**
  * Lines the prelude occupies in the interpreter source, plus the newline that

package/dist/execution/workflow/prelude.js.map

@@ -1 +1 @@
-{"version":3,"file":"prelude.js","sourceRoot":"","sources":["../../../src/execution/workflow/prelude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgI9B,CAAA;AAEH;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAGhC;IACA,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;AAC/C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,MAG5B;IACA,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SACpC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC,CAAA;IACjB,OAAO,GAAG,cAAc,IAAI,OAAO,IAAI,CAAA;AACxC,CAAC"}
+{"version":3,"file":"prelude.js","sourceRoot":"","sources":["../../../src/execution/workflow/prelude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyK9B,CAAA;AAEH;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAIhC;IACA,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;AAC/C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,MAI5B;IACA,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SACpC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC,CAAA;IACjB,OAAO,GAAG,cAAc,IAAI,OAAO,IAAI,CAAA;AACxC,CAAC"}