@namzu/sdk 59.0.0 → 60.0.0

package/dist/execution/workflow/journal.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
-import { appendFile, mkdir, writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
+import { mkdir, open, readFile, stat, writeFile } from 'node:fs/promises';
+import { basename, dirname, join, resolve } from 'node:path';
+import { formatWorkflowJournalLine, readWorkflowJournalChecked, workflowJournalLineHash, workflowJournalSeed, } from './resume.js';
 export function sha256(text) {
     return createHash('sha256').update(text).digest('hex');
 }
@@ -14,30 +15,151 @@ export function preview(text, max = 500) {
         end--;
     return `${text.slice(0, end)}…`;
 }
+const chains = new Map();
+/** Records after which a crash must not lose the line: a saved result, the end of a pass, the start of one. */
+function mustSurviveCrash(record) {
+    return (record.type === 'run_finished' ||
+        record.type === 'run_started' ||
+        (record.type === 'agent_outcome' && Object.hasOwn(record, 'result')));
+}
 /**
  * A journal in a directory: `script.js` (the exact script text, mode 0600)
  * and `journal.jsonl` (one JSON record per line, append-only). The caller
  * chooses the directory, normally `<session>/runs/<runId>/workflow/`.
+ *
+ * Every line carries `seq` and `prev` (the hash of the line before it, the
+ * first chaining from a seed bound to the run id), so a line that was edited,
+ * removed or cut short is found when the journal is read back. One writer per
+ * file serves the whole process: a resumed pass and a late agent of the pass
+ * before it append through the same queue and the same chain, and nothing is
+ * appended after a pass's `run_finished` until the next pass starts. This
+ * assumes one process writes the file at a time, which the session lease
+ * already guarantees. A chain proves the file was not damaged or edited by
+ * accident; someone who can rewrite the whole file can rewrite the chain too.
  */
 export class FileWorkflowJournal {
     dir;
+    options;
     ready;
-    constructor(dir) {
+    file;
+    constructor(dir, options = {}) {
         this.dir = dir;
+        this.options = options;
+        this.file = resolve(dir, 'journal.jsonl');
     }
     ensure() {
         this.ready ??= mkdir(this.dir, { recursive: true, mode: 0o700 }).then(() => undefined);
         return this.ready;
     }
-    async writeScript(source) {
-        await this.ensure();
-        await writeFile(join(this.dir, 'script.js'), source, { mode: 0o600 });
+    /** The run id of the file's first line, learned from the file or from the first `run_started` written. */
+    learned;
+    runId(record, text) {
+        if (this.options.runId !== undefined)
+            return this.options.runId;
+        if (record?.type === 'run_started')
+            this.learned = record.runId;
+        if (this.learned !== undefined)
+            return this.learned;
+        const first = text?.slice(0, text.indexOf('\n') < 0 ? undefined : text.indexOf('\n'));
+        if (first) {
+            try {
+                const parsed = JSON.parse(first);
+                if (parsed.type === 'run_started' && typeof parsed.runId === 'string') {
+                    this.learned = parsed.runId;
+                    return parsed.runId;
+                }
+            }
+            catch {
+                // Not a record: fall back to the folder name below.
+            }
+        }
+        return basename(dirname(resolve(this.dir)));
     }
-    async append(record) {
+    async writeScript(source, _sha256, pass = 1) {
         await this.ensure();
-        await appendFile(join(this.dir, 'journal.jsonl'), `${JSON.stringify(record)}\n`, {
-            mode: 0o600,
+        const name = pass <= 1 ? 'script.js' : `script.${pass}.js`;
+        await writeFile(join(this.dir, name), source, { mode: 0o600 });
+    }
+    async read() {
+        let text;
+        try {
+            text = await readFile(this.file, 'utf8');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            text = '';
+        }
+        return readWorkflowJournalChecked(text, this.runId(undefined, text), {
+            ...(this.options.key !== undefined ? { key: this.options.key } : {}),
+        });
+    }
+    append(record) {
+        let state = chains.get(this.file);
+        if (state === undefined) {
+            state = {
+                queue: Promise.resolve(),
+                loaded: false,
+                seq: 0,
+                prev: '',
+                needsNewline: false,
+                finished: false,
+                size: 0,
+                pending: 0,
+            };
+            chains.set(this.file, state);
+        }
+        const chain = state;
+        chain.pending++;
+        const run = chain.queue.then(async () => {
+            await this.ensure();
+            const onDisk = await stat(this.file).then((info) => info.size, () => 0);
+            if (!chain.loaded || onDisk !== chain.size) {
+                const checked = await this.read();
+                chain.seq = checked.lastSeq;
+                chain.prev = checked.lastHash;
+                chain.needsNewline = !checked.endsWithNewline;
+                chain.finished = checked.records.at(-1)?.type === 'run_finished';
+                chain.loaded = true;
+                chain.size = onDisk;
+            }
+            if (record.type === 'run_started')
+                chain.finished = false;
+            // Nothing belongs after the pass's end; a late agent of that pass is dropped here.
+            else if (chain.finished)
+                return;
+            if (chain.seq === 0)
+                chain.prev = workflowJournalSeed(this.runId(record));
+            const seq = chain.seq + 1;
+            const line = formatWorkflowJournalLine(record, seq, chain.prev, this.options.key);
+            const handle = await open(this.file, 'a', 0o600);
+            try {
+                const text = `${chain.needsNewline ? '\n' : ''}${line}\n`;
+                await handle.appendFile(text);
+                chain.size += Buffer.byteLength(text);
+                if (mustSurviveCrash(record))
+                    await handle.datasync();
+            }
+            finally {
+                await handle.close();
+            }
+            chain.needsNewline = false;
+            chain.seq = seq;
+            chain.prev = workflowJournalLineHash(line);
+            if (record.type === 'run_finished')
+                chain.finished = true;
+        });
+        chain.queue = run
+            .catch(() => undefined)
+            .then(() => {
+            chain.pending--;
+            // A finished run keeps no state: the next append reads the file again, and
+            // what it finds (a last `run_finished`) is the same thing the state held.
+            if (chain.pending === 0 && chain.finished && chains.get(this.file) === chain) {
+                chains.delete(this.file);
+            }
         });
+        return run;
     }
 }
 //# sourceMappingURL=journal.js.map

package/dist/execution/workflow/journal.js.map

@@ -1 +1 @@
-{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/execution/workflow/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,MAAM,UAAU,MAAM,CAAC,IAAY;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,GAAG;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,GAAG,GAAG,GAAG,CAAA;IACb,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;IACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;QAAE,GAAG,EAAE,CAAA;IAC3C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAGF;IAFrB,KAAK,CAA2B;IAExC,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAEpC,MAAM;QACb,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACtF,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC/B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA6B;QACzC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YAChF,IAAI,EAAE,KAAK;SACX,CAAC,CAAA;IACH,CAAC;CACD"}
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../../src/execution/workflow/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAE5D,OAAO,EACN,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,GACnB,MAAM,aAAa,CAAA;AAQpB,MAAM,UAAU,MAAM,CAAC,IAAY;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,GAAG;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,GAAG,GAAG,GAAG,CAAA;IACb,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;IACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;QAAE,GAAG,EAAE,CAAA;IAC3C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA;AAChC,CAAC;AAgBD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAA;AAE5C,+GAA+G;AAC/G,SAAS,gBAAgB,CAAC,MAA6B;IACtD,OAAO,CACN,MAAM,CAAC,IAAI,KAAK,cAAc;QAC9B,MAAM,CAAC,IAAI,KAAK,aAAa;QAC7B,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CACpE,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,mBAAmB;IAKb;IACA;IALV,KAAK,CAA2B;IACvB,IAAI,CAAQ;IAE7B,YACkB,GAAW,EACX,UAIb,EAAE;QALW,QAAG,GAAH,GAAG,CAAQ;QACX,YAAO,GAAP,OAAO,CAIlB;QAEN,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC1C,CAAC;IAEO,MAAM;QACb,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACtF,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;IAED,0GAA0G;IAClG,OAAO,CAAoB;IAE3B,KAAK,CAAC,MAA8B,EAAE,IAAa;QAC1D,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAA;QAC/D,IAAI,MAAM,EAAE,IAAI,KAAK,aAAa;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAA;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAA;QACnD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACrF,IAAI,KAAK,EAAE,CAAC;YACX,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAwC,CAAA;gBACvE,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAA;oBAC3B,OAAO,MAAM,CAAC,KAAK,CAAA;gBACpB,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,oDAAoD;YACrD,CAAC;QACF,CAAC;QACD,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,OAAgB,EAAE,IAAI,GAAG,CAAC;QAC3D,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAA;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACnE,IAAI,GAAG,EAAE,CAAA;QACV,CAAC;QACD,OAAO,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE;YACpE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAA;IACH,CAAC;IAED,MAAM,CAAC,MAA6B;QACnC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,KAAK,GAAG;gBACP,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE;gBACxB,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,CAAC;gBACN,IAAI,EAAE,EAAE;gBACR,YAAY,EAAE,KAAK;gBACnB,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,CAAC;aACV,CAAA;YACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC7B,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAA;QACnB,KAAK,CAAC,OAAO,EAAE,CAAA;QACf,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACvC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CACxC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EACnB,GAAG,EAAE,CAAC,CAAC,CACP,CAAA;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;gBACjC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAA;gBAC3B,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAA;gBAC7B,KAAK,CAAC,YAAY,GAAG,CAAC,OAAO,CAAC,eAAe,CAAA;gBAC7C,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,cAAc,CAAA;gBAChE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAA;gBACnB,KAAK,CAAC,IAAI,GAAG,MAAM,CAAA;YACpB,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;gBAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAA;YACzD,mFAAmF;iBAC9E,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAM;YAC/B,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;YACzE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAA;YACzB,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACjF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YAChD,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAA;gBACzD,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;gBAC7B,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;gBACrC,IAAI,gBAAgB,CAAC,MAAM,CAAC;oBAAE,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACtD,CAAC;oBAAS,CAAC;gBACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACrB,CAAC;YACD,KAAK,CAAC,YAAY,GAAG,KAAK,CAAA;YAC1B,KAAK,CAAC,GAAG,GAAG,GAAG,CAAA;YACf,KAAK,CAAC,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;YAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;gBAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;QAC1D,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,KAAK,GAAG,GAAG;aACf,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACtB,IAAI,CAAC,GAAG,EAAE;YACV,KAAK,CAAC,OAAO,EAAE,CAAA;YACf,2EAA2E;YAC3E,0EAA0E;YAC1E,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC9E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;QACF,CAAC,CAAC,CAAA;QACH,OAAO,GAAG,CAAA;IACX,CAAC;CACD"}

package/dist/execution/workflow/prelude.d.ts

@@ -6,10 +6,12 @@
 export declare function preludeLineCount(config: {
     args: unknown;
     tokenLimit: number | null;
+    deterministic?: boolean;
 }): number;
 /** Source that installs the workflow globals, ready to prepend to a script body. */
 export declare function buildPrelude(config: {
     args: unknown;
     tokenLimit: number | null;
+    deterministic?: boolean;
 }): string;
 //# sourceMappingURL=prelude.d.ts.map

package/dist/execution/workflow/prelude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prelude.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/prelude.ts"],"names":[],"mappings":"AAiJA;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACxC,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,GAAG,MAAM,CAET;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACpC,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,GAAG,MAAM,CAOT"}
+{"version":3,"file":"prelude.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/prelude.ts"],"names":[],"mappings":"AA0LA;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACxC,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,aAAa,CAAC,EAAE,OAAO,CAAA;CACvB,GAAG,MAAM,CAET;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACpC,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,aAAa,CAAC,EAAE,OAAO,CAAA;CACvB,GAAG,MAAM,CAOT"}

package/dist/execution/workflow/prelude.js

@@ -28,7 +28,7 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 	}
 	function phase(title) {
 		var t = clean(title, 120);
-		if (!t) throw new TypeError('phase() needs a non-empty title.');
+		if (!t) throw misuse('phase() needs a non-empty title.');
 		cursor = t;
 		emit({ k: 'phase', title: t });
 	}
@@ -53,13 +53,26 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 		return e;
 	}
 	function isBudgetError(e) { return !!e && e.name === 'WorkflowBudgetExceededError'; }
+	function misuse(message) {
+		var e = new TypeError(message);
+		e.workflowMisuse = true;
+		return e;
+	}
+	function isMisuse(e) { return !!e && e.workflowMisuse === true; }
+	var optionNames = ['label', 'phase', 'schema', 'agentType', 'model', 'effort'];
 	async function agent(prompt, opts) {
 		if (typeof prompt !== 'string' || prompt.length === 0) {
-			throw new TypeError('agent(prompt, options?): the prompt must be a non-empty string, got ' + kind(prompt));
+			throw misuse('agent(prompt, options?): the prompt must be a non-empty string, got ' + kind(prompt));
 		}
 		var o = opts == null ? {} : opts;
 		if (typeof o !== 'object' || Array.isArray(o)) {
-			throw new TypeError('agent(prompt, options?): options must be an object, got ' + kind(o));
+			throw misuse('agent(prompt, options?): options must be an object, got ' + kind(o));
+		}
+		var unknown = Object.keys(o).filter(function (k) { return optionNames.indexOf(k) < 0; });
+		if (unknown.length > 0) {
+			// Ignored, as it always was, but no longer silently: a saved script that
+			// misspells an option keeps running and the line says why it had no effect.
+			log('agent(prompt, options?): ignoring unknown option "' + unknown[0] + '"; the options are ' + optionNames.join(', ') + '.');
 		}
 		if (overBudget()) throw budgetError();
 		var request = { prompt: prompt, cursor: cursor };
@@ -69,23 +82,32 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 		if (o.agentType != null) request.agentType = clean(o.agentType, 120);
 		if (o.model != null) request.model = clean(o.model, 120);
 		if (o.effort != null) request.effort = clean(o.effort, 32);
-		var reply = await rawCall('agent', request);
+		var reply;
+		try {
+			reply = await rawCall('agent', request);
+		} catch (e) {
+			// The host rejects a malformed request with an "agent(): ..." message;
+			// that is the script's mistake, not a failed child.
+			if (e && typeof e.message === 'string' && e.message.indexOf('agent(): ') === 0) throw misuse(e.message);
+			throw e;
+		}
 		spent.tokensUsed = reply.t;
 		return reply.v;
 	}
 	async function parallel(thunks) {
 		if (!Array.isArray(thunks)) {
-			throw new TypeError('parallel(thunks): the argument must be an array of functions, got ' + kind(thunks));
+			throw misuse('parallel(thunks): the argument must be an array of functions, got ' + kind(thunks));
 		}
 		for (var p = 0; p < thunks.length; p++) {
 			if (typeof thunks[p] !== 'function') {
-				throw new TypeError('parallel(thunks): item ' + (p + 1) + ' must be a function (wrap the work as () => agent(...)), got ' + kind(thunks[p]));
+				throw misuse('parallel(thunks): item ' + (p + 1) + ' must be a function (wrap the work as () => agent(...)), got ' + kind(thunks[p]));
 			}
 		}
 		var dropped = 0;
 		var results = await Promise.all(thunks.map(function (t, n) {
 			return Promise.resolve().then(t).catch(function (e) {
 				if (isBudgetError(e)) { dropped++; return null; }
+				if (isMisuse(e)) throw e;
 				log('Step ' + (n + 1) + ' stopped: ' + clean(e && e.message ? e.message : e, 300));
 				return null;
 			});
@@ -95,12 +117,12 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 	}
 	async function pipeline(items) {
 		if (!Array.isArray(items)) {
-			throw new TypeError('pipeline(items, ...stages): the first argument must be an array, got ' + kind(items));
+			throw misuse('pipeline(items, ...stages): the first argument must be an array, got ' + kind(items));
 		}
 		var stages = Array.prototype.slice.call(arguments, 1);
 		for (var s = 0; s < stages.length; s++) {
 			if (typeof stages[s] !== 'function') {
-				throw new TypeError('pipeline(items, ...stages): stage ' + (s + 1) + ' must be a function, got ' + kind(stages[s]));
+				throw misuse('pipeline(items, ...stages): stage ' + (s + 1) + ' must be a function, got ' + kind(stages[s]));
 			}
 		}
 		if (items.length > 0 && overBudget()) throw budgetError();
@@ -112,6 +134,7 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 					value = await stages[i](value, item, index);
 				} catch (e) {
 					if (isBudgetError(e)) { dropped++; return null; }
+					if (isMisuse(e)) throw e;
 					log('Item ' + (index + 1) + ' stopped at step ' + (i + 1) + ': ' + clean(e && e.message ? e.message : e, 300));
 					return null;
 				}
@@ -141,6 +164,24 @@ const PRELUDE_SOURCE = String.raw `(function (config) {
 	install('log', log);
 	install('budget', budget);
 	install('args', config.args);
+	if (config.deterministic) {
+		var RealDate = Date;
+		var clockMessage = 'Date.now() / new Date() are unavailable in workflow scripts (breaks resume). Stamp results after the workflow returns, or pass timestamps through args.';
+		var randomMessage = 'Math.random() is unavailable in workflow scripts (breaks resume). For N independent samples, include the index in the agent label or prompt.';
+		var ShimDate = function Date(a, b, c, d, e, f, g) {
+			if (!new.target || arguments.length === 0) throw new Error(clockMessage);
+			return Reflect.construct(RealDate, Array.prototype.slice.call(arguments), new.target === ShimDate ? RealDate : new.target);
+		};
+		Object.defineProperty(ShimDate, 'prototype', { value: RealDate.prototype, writable: false, configurable: false });
+		Object.defineProperty(ShimDate, 'now', { value: function now() { throw new Error(clockMessage); }, writable: false, configurable: false });
+		Object.defineProperty(ShimDate, 'parse', { value: RealDate.parse, writable: false, configurable: false });
+		Object.defineProperty(ShimDate, 'UTC', { value: RealDate.UTC, writable: false, configurable: false });
+		Object.defineProperty(RealDate.prototype, 'constructor', { value: ShimDate, writable: false, configurable: false });
+		Object.defineProperty(globalThis, 'Date', { value: ShimDate, writable: false, configurable: false, enumerable: false });
+		Object.defineProperty(Math, 'random', { value: function random() { throw new Error(randomMessage); }, writable: false, configurable: false });
+		try { delete globalThis.eval; } catch (ignored) {}
+		Object.freeze(RealDate);
+	}
 })`;
 /**
  * Lines the prelude occupies in the interpreter source, plus the newline that

package/dist/execution/workflow/prelude.js.map

@@ -1 +1 @@
-{"version":3,"file":"prelude.js","sourceRoot":"","sources":["../../../src/execution/workflow/prelude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgI9B,CAAA;AAEH;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAGhC;IACA,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;AAC/C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,MAG5B;IACA,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SACpC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC,CAAA;IACjB,OAAO,GAAG,cAAc,IAAI,OAAO,IAAI,CAAA;AACxC,CAAC"}
+{"version":3,"file":"prelude.js","sourceRoot":"","sources":["../../../src/execution/workflow/prelude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyK9B,CAAA;AAEH;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAIhC;IACA,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;AAC/C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,MAI5B;IACA,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SACpC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC,CAAA;IACjB,OAAO,GAAG,cAAc,IAAI,OAAO,IAAI,CAAA;AACxC,CAAC"}

package/dist/execution/workflow/resume.d.ts

@@ -0,0 +1,59 @@
+import type { CheckedWorkflowJournal, WorkflowJournalRecord, WorkflowResumeState } from './types.js';
+/** What of an `agent()` call decides its result. `label`, `phase` and progress callbacks do not. */
+export interface WorkflowCallIdentity {
+    readonly schema?: unknown;
+    readonly model?: string;
+    readonly effort?: string;
+    readonly agentType?: string;
+}
+/**
+ * The key a call is saved and looked up under: the prompt, the options that
+ * change what the agent does (schema, model, effort, agent type) and how many
+ * identical calls came before it in the same pass. Each part is length-prefixed
+ * so one cannot be read as part of another.
+ */
+export declare function workflowCallKey(prompt: string, call: WorkflowCallIdentity, ordinal: number): string;
+/**
+ * What makes two calls the same call: the prompt and the options that change
+ * the agent, in a form where key order and `undefined` do not matter. The
+ * runtime counts repeats of this text to give identical calls distinct slots,
+ * and the key hashes the same text, so the two can never disagree.
+ */
+export declare function workflowCallContent(prompt: string, call: WorkflowCallIdentity): string;
+/** The hash the first line of a run's journal chains from. It binds the file to its run id. */
+export declare function workflowJournalSeed(runId: string): string;
+/** The hash a line contributes to the next one: its exact bytes, newline included. */
+export declare function workflowJournalLineHash(line: string): string;
+/** The line `record` is written as. With a key, a `mac` over the rest of the line is added last. */
+export declare function formatWorkflowJournalLine(record: WorkflowJournalRecord, seq: number, prev: string, key?: string | Uint8Array): string;
+/**
+ * Reads a journal's text and keeps only the records that can be trusted.
+ *
+ * Every line carries `seq` (counting trusted lines from 1) and `prev` (the hash
+ * of the line before; the first chains from a seed bound to the run id). A
+ * line that does not chain, a line that does not parse, and anything after
+ * one is dropped until a `run_started` of a resumed pass picks the chain up
+ * again at the last trusted line. A last line without its newline that is not
+ * whole JSON is a torn write and is ignored; one that is whole JSON is read
+ * like any other line. The file is never rewritten.
+ *
+ * The chain alone cannot notice an edit to the final line (nothing chains from
+ * it yet). With `key`, every line must also carry a `mac` made with that
+ * secret, which closes that gap against anyone who does not hold the key.
+ */
+export declare function readWorkflowJournalChecked(text: string, runId: string, options?: {
+    readonly key?: string | Uint8Array;
+}): CheckedWorkflowJournal;
+/**
+ * Folds a checked journal into what a resumed pass needs.
+ *
+ * The last saved result for a key wins. An agent that was asked for again
+ * after a result was saved gives that result up until it finishes again. A
+ * failed or skipped outcome removes the result and marks the key failed; an
+ * outcome the run recorded as interrupted (stopped, not failed) leaves the key
+ * as seen but unfinished. Lines marked `cached` repeat an earlier result and
+ * are skipped, and so is any agent record from a pass older than the latest
+ * `run_started`, which a slow agent of an earlier pass can still write.
+ */
+export declare function loadWorkflowResume(checked: CheckedWorkflowJournal): WorkflowResumeState;
+//# sourceMappingURL=resume.d.ts.map

package/dist/execution/workflow/resume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/execution/workflow/resume.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEX,sBAAsB,EAEtB,qBAAqB,EACrB,mBAAmB,EACnB,MAAM,YAAY,CAAA;AAsBnB,oGAAoG;AACpG,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,oBAAoB,EAC1B,OAAO,EAAE,MAAM,GACb,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAQtF;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,oGAAoG;AACpG,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,MAAM,GAAG,UAAU,GACvB,MAAM,CAKR;AAqBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CACzC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;CAAO,GAClD,sBAAsB,CAgFxB;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,sBAAsB,GAAG,mBAAmB,CAsFvF"}