@parcha/agentrun-pi 0.1.0-beta.11 → 0.1.0-beta.13

package/dist/extension.js

@@ -8,10 +8,15 @@ import { formatWorkflowTree, inspectWorkflow, AUTHOR_SKILL_NAME, loadAuthorRefer
 import { createJevRunner } from '@parcha/agentrun-jev';
 import { createPiHostRunner, PI_MODEL_SETUP_MESSAGE } from './host-session.js';
 import { PI_HOST_ADDENDUM } from './host-addendum.js';
+import { workflowToolContext } from './tool-context.js';
 import { WorkflowExtensionService, ExtensionServiceError, extensionStructuralLimits } from './extension-service.js';
 import { demoInput, demoSearchTool, demoWorkflow, scriptedDemoDeps } from './demo.js';
 import { cleanText as safe, formatRunReport, modelJson } from './presentation.js';
 import { ToolInputValidationError, toolInputProblems } from './tool-input-error.js';
+import { mkdir, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { RecoveryError, fileStore, openRecovery, withRecovery } from '@parcha/agentrun-dsl/recovery';
+import { readSopFile, missingSopSections, sopDigest } from './sop.js';
 import { WorkflowStore, WorkflowStoreError } from './workflow-store.js';
 import { WorkflowObservation, workflowView, formatWorkflowView, progressLines, readable } from './workflow-view.js';
 import { showWorkflowInspector } from './workflow-inspector.js';
@@ -22,7 +27,8 @@ const constructors = {
     write: createWriteToolDefinition, grep: createGrepToolDefinition, find: createFindToolDefinition, ls: createLsToolDefinition,
 };
 const mutatingTools = new Set(['bash', 'edit', 'write']);
-const help = 'Describe a task: /agentrun <what you want done>\nTry support triage: /agentrun triage (fictional, no model calls)\nInspect: /agentrun · Change input: /agentrun input\nSave: /agentrun save <name> · Load: /agentrun load <name>\nLibrary: /agentrun list · History: /agentrun history\nRun: /agentrun run · Setup: /agentrun status\nStop: /agentrun stop (closing the inspector does not stop a run)\nOther examples: /agentrun demo | demo empty | demo live';
+const TESTED_PI_VERSION = '1.1.0';
+const help = 'Describe a task: /agentrun <what you want done>\nTry support triage: /agentrun triage (fictional, no model calls)\nInspect: /agentrun · Change input: /agentrun input\nSave: /agentrun save <name> · Load: /agentrun load <name>\nLibrary: /agentrun list · History: /agentrun history\nRun: /agentrun run · SOP text: /agentrun sop <file> · Setup: /agentrun status\nStop: /agentrun stop (closing the inspector does not stop a run)\nOther examples: /agentrun demo | demo empty | demo live';
 const textResult = (text, details = {}) => ({ content: [{ type: 'text', text: safe(text) }], details });
 function singleTextInput(workflow) {
     const source = workflow;
@@ -45,13 +51,15 @@ export function createAgentRunExtension(options = {}) {
         throw new Error('onToolAttempt must be a host callback');
     if (options.onWorkflowEvent !== undefined && typeof options.onWorkflowEvent !== 'function')
         throw new Error('onWorkflowEvent must be a host callback');
+    if (options.sop !== undefined && (typeof options.sop !== 'string' || !options.sop.trim()))
+        throw new Error('sop must be nonempty text');
     const limits = { ...nativeLimits, ...options.runtimeLimits };
     for (const [key, value] of Object.entries(limits)) {
         if (!(key in nativeLimits) || value !== null && (!Number.isSafeInteger(value) || value < 1 || value > nativeLimits[key])) {
             throw new Error('runtimeLimits must use known fields with positive bounded integers or explicit null');
         }
     }
-    const configured = { hostTools: options.hostTools, createJudge: options.createJudge, onToolAttempt: options.onToolAttempt, onWorkflowEvent: options.onWorkflowEvent,
+    const configured = { hostTools: options.hostTools, createJudge: options.createJudge, onToolAttempt: options.onToolAttempt, onWorkflowEvent: options.onWorkflowEvent, sop: options.sop,
         runtimeLimits: Object.freeze(limits) };
     return pi => registerExtension(pi, configured);
 }
@@ -116,6 +124,7 @@ function registerExtension(pi, configuration) {
             current.report = restored.report;
             current.observation = restored.observation;
             current.runId = restored.runId;
+            current.sop = restored.sop;
         }
         return current;
     };
@@ -126,7 +135,7 @@ function registerExtension(pi, configuration) {
             input: s.input, running, createdAt: new Date().toISOString(),
             ...(s.savedName ? { savedName: s.savedName } : {}), ...(s.demo ? { demo: s.demo } : {}),
             ...(s.runId ? { runId: s.runId } : {}), ...(s.report ? { report: s.report } : {}),
-            ...(s.observation ? { observation: s.observation } : {}), };
+            ...(s.observation ? { observation: s.observation } : {}), ...(s.sop ? { sop: s.sop } : {}), };
         try {
             const data = structuredClone(record);
             // Never advertise history that this release cannot restore (including
@@ -144,7 +153,7 @@ function registerExtension(pi, configuration) {
     const readiness = (ctx, s) => ({
         skill: pi.getCommands().some(item => item.name === `skill:${AUTHOR_SKILL_NAME}` && item.source === 'skill'),
         pi: !!ctx.model && ctx.modelRegistry.getAll().some(model => model.id === ctx.model?.id && model.provider === ctx.model?.provider && model.api === ctx.model?.api),
-        jev: !!configuration.createJudge || !!process.env.TYPESAFE_API_KEY?.trim(), sop: false, running: s.busy, workflow: !!s.draft,
+        jev: !!configuration.createJudge || !!process.env.TYPESAFE_API_KEY?.trim(), sop: !!configuration.sop || !!s.sop, running: s.busy, workflow: !!s.draft,
         mode: s.draft ? s.demo ? 'scripted' : 'live' : undefined,
     });
     const show = (s, content, details = {}) => {
@@ -153,7 +162,7 @@ function registerExtension(pi, configuration) {
         pi.sendMessage({ customType: 'agentrun', content: safe(content), display: true, details });
     };
     const commandError = (s, error) => {
-        const message = error instanceof Error && (error instanceof WorkflowStoreError || error.name === 'ExtensionServiceError' || /^(No workflow|Inspect a workflow|A workflow|Cannot inspect|Workflow|Code|Executable|Unsupported|Invalid workflow|AgentRun requires|AgentRun authoring|The active Pi|Saved workflow)/.test(error.message))
+        const message = error instanceof Error && (error instanceof WorkflowStoreError || error.name === 'ExtensionServiceError' || /^(No workflow|Inspect a workflow|A workflow|Cannot inspect|Workflow|Code|Executable|Unsupported|Invalid workflow|AgentRun requires|AgentRun authoring|The active Pi|Saved workflow|SOP|The SOP|Use \/agentrun sop)/.test(error.message))
             ? error.message.slice(0, 2000) : 'AgentRun could not complete this operation. Use /agentrun status to check setup and /agentrun to inspect the workflow. No fallback was selected.';
         show(s, message);
     };
@@ -177,8 +186,6 @@ function registerExtension(pi, configuration) {
         let inspection;
         try {
             inspection = checker.preflight(candidate, input);
-            if (inspection.requires.sopSections.length)
-                throw new Error('Native Pi does not supply SOP text in V1; use a configured SDK host. Keep the required sections intact.');
         }
         catch (error) {
             throw new Error(`Cannot inspect workflow: ${error instanceof Error ? error.message : 'Invalid workflow'}`);
@@ -285,7 +292,7 @@ function registerExtension(pi, configuration) {
                     throw new Error('Workflow requested an unavailable tool');
                 let result;
                 try {
-                    result = await tool.execute('agentrun-effect', input, effectSignal, undefined, ctx);
+                    result = await tool.execute('agentrun-effect', input, effectSignal, undefined, workflowToolContext(ctx));
                 }
                 catch (error) {
                     if (error instanceof ToolInputValidationError)
@@ -296,6 +303,26 @@ function registerExtension(pi, configuration) {
             },
         };
     };
+    /** The SOP text a run of a workflow naming `needed` sections uses: the host's, else the file the operator named. */
+    const sopFor = async (ctx, s, needed) => {
+        if (!needed.length)
+            return undefined;
+        let sop;
+        if (configuration.sop)
+            sop = { text: configuration.sop, sha256: sopDigest(configuration.sop) };
+        else if (s.sop) {
+            const read = await readSopFile(ctx.cwd, s.sop.file);
+            if (read.sha256 !== s.sop.sha256)
+                throw new Error(`SOP file ${s.sop.file} changed since it was supplied. Run /agentrun sop ${s.sop.file} again to use the new text.`);
+            sop = read;
+        }
+        else
+            throw new Error(`Workflow requires SOP text for ${needed.map(name => `"${name}"`).join(', ')}. Supply it with /agentrun sop <file>.`);
+        const missing = missingSopSections(sop.text, needed);
+        if (missing.length)
+            throw new Error(`SOP text has no "## <section>" heading for ${missing.map(name => `"${name}"`).join(', ')}.`);
+        return sop;
+    };
     const execute = async (ctx, s, input, options = {}) => {
         if (s.busy)
             throw new Error('A workflow is already running. Use /agentrun stop first.');
@@ -306,9 +333,9 @@ function registerExtension(pi, configuration) {
         s.controller = new AbortController();
         const signals = [s.controller.signal, options.signal, ctx.signal].filter((v) => !!v);
         const signal = AbortSignal.any(signals);
+        let driver;
         try {
-            if (inspectWorkflow(s.draft).requires.sopSections.length)
-                throw new Error('Workflow requires SOP text. Native Pi does not supply SOP text in V1; use a configured SDK host. Keep the required sections intact.');
+            const sop = await sopFor(ctx, s, inspectWorkflow(s.draft).requires.sopSections);
             signal.throwIfAborted();
             const available = toolSet(ctx, options.trusted);
             if (available.map(t => t.name).join(',') !== s.toolNames.join(',')) {
@@ -333,14 +360,41 @@ function registerExtension(pi, configuration) {
             options.update?.(textResult(`${label}\n\n${tree}`));
             stage(ctx, s, 'agent.run() · starting');
             const observation = new WorkflowObservation();
+            // A run this session left interrupted or failed, over the same draft and input, continues from its journal;
+            // anything else starts a new run.
+            const runRoot = join(ctx.cwd, '.pi', 'agentrun', 'runs');
+            const resumable = !scripted && s.runId !== undefined && ['interrupted', 'failed'].includes(s.report?.status ?? '') && existsSync(join(runRoot, s.runId));
+            let runId = resumable ? s.runId : randomUUID();
+            if (!scripted) {
+                await mkdir(runRoot, { recursive: true });
+                const bind = { input: s.input, tools: [...s.toolNames].sort(), ...(sop ? { sop: sop.sha256 } : {}) };
+                const open = (id) => openRecovery(fileStore(join(runRoot, id)), s.draft, { key: id, view: prepared.workflow, bind });
+                try {
+                    try {
+                        driver = await open(runId);
+                    }
+                    catch (error) {
+                        // A run bound to other input, SOP text or tools is a different run: it starts anew, and the old journal stays.
+                        if (!resumable || !(error instanceof RecoveryError) || error.code !== 'RUN_STORE_BINDING_MISMATCH')
+                            throw error;
+                        runId = randomUUID();
+                        driver = await open(runId);
+                    }
+                }
+                catch (error) {
+                    throw new Error(`Cannot ${resumable ? 'resume' : 'start'} run ${runId}: ${error instanceof Error ? error.message : 'recovery store refused'}`);
+                }
+                s.pause = () => driver.stop({ action: 'pause', source: 'operator' });
+            }
             s.observation = observation.data;
             s.report = undefined;
-            s.runId = randomUUID();
+            s.runId = runId;
             persist(s, true);
             const ordinal = ++runOrdinal;
             let sequence = 0;
             const report = await s.service.run(s.input, {
-                deps: observation.observe(deps), signal,
+                deps: observation.observe(driver ? withRecovery(driver, sop ? { ...deps, sop: sop.text } : deps) : sop ? { ...deps, sop: sop.text } : deps),
+                signal: driver ? AbortSignal.any([signal, driver.signal]) : signal,
                 ...(configuration.onWorkflowEvent ? { onTraceEvent: (event) => configuration.onWorkflowEvent({ workflowDigest: prepared.digest, runOrdinal: ordinal, sequence: ++sequence, event }) } : {}),
                 onEvent: event => {
                     observation.record(event);
@@ -353,6 +407,14 @@ function registerExtension(pi, configuration) {
                         options.update?.(textResult(`${label}\n\n${progress.join('\n')}`));
                 },
             });
+            if (driver && report.error?.code === 'FROZEN_EFFECT_UNKNOWN') {
+                // The journal names what the driver refused to repeat. Read it once the driver has let go of it.
+                await driver.close().catch(() => { });
+                const journal = await readFile(join(runRoot, runId, 'journal.json'), 'utf8').then(text => JSON.parse(text), () => undefined);
+                const unknown = (journal?.effects ?? []).filter(effect => effect.status === 'unknown').slice(0, 100);
+                if (unknown.length)
+                    report.uncertainEffects = unknown.map(effect => ({ idempotencyKey: effect.id, outcome: 'unknown' }));
+            }
             s.report = report;
             persist(s);
             const summary = formatRunReport(report, scripted);
@@ -372,6 +434,8 @@ function registerExtension(pi, configuration) {
         finally {
             s.busy = false;
             s.controller = undefined;
+            s.pause = undefined;
+            await driver?.close().catch(() => { });
             stage(ctx, s);
             if (current === s && !s.closed && ctx.hasUI)
                 ctx.ui.setWidget('agentrun', undefined);
@@ -563,6 +627,25 @@ function registerExtension(pi, configuration) {
                     else
                         show(s, formatWorkflowView(receipt), { run });
                 }
+                else if (/^sop(?:\s|$)/.test(command)) {
+                    const file = raw.trim().slice(3).trim();
+                    if (!file) {
+                        show(s, configuration.sop ? 'SOP text comes from the host.' : s.sop ? `SOP: ${s.sop.file} (${s.sop.sha256.slice(0, 12)}). Supply another with /agentrun sop <file>.` : 'No SOP supplied. Use /agentrun sop <file> for a workflow that names sopSection.');
+                        return;
+                    }
+                    if (s.busy)
+                        throw new Error('A workflow is running. Stop it before changing its SOP.');
+                    if (configuration.sop)
+                        throw new Error('SOP text comes from the host; /agentrun sop is not used.');
+                    const read = await readSopFile(ctx.cwd, file);
+                    const needed = s.draft ? inspectWorkflow(s.draft).requires.sopSections : [];
+                    const missing = missingSopSections(read.text, needed);
+                    if (missing.length)
+                        throw new Error(`SOP text has no "## <section>" heading for ${missing.map(name => `"${name}"`).join(', ')}. Nothing was changed.`);
+                    s.sop = { file: read.file, sha256: read.sha256 };
+                    persist(s);
+                    show(s, `SOP set: ${read.file} (${read.text.length} characters). ${needed.length ? `Covers ${needed.map(name => `"${name}"`).join(', ')}.` : 'The current workflow names no section.'}`);
+                }
                 else if (/^input(?:\s|$)/.test(command)) {
                     if (!s.draft)
                         throw new Error('No workflow yet. Load or describe a procedure first.');
@@ -616,9 +699,10 @@ function registerExtension(pi, configuration) {
                 }
                 else if (command === 'status') {
                     const ready = readiness(ctx, s);
-                    show(s, `agent.run() · ${s.busy ? 'running' : 'idle'}\nDemo: ready — /agentrun demo (no keys or model calls)\nWorkflow: ${s.draft ? `${modelJson(inspectWorkflow(s.draft).name)} · ${s.demo ? 'scripted' : 'live adapters'}` : 'none — load a saved procedure, run the demo, or describe a task'}\n\nFor your own workflows:\nPi host: ${PI_VERSION}${PI_VERSION === '0.87.0' ? '' : ' (tested on 0.87.0; use the bundled ./node_modules/.bin/pi)'}\nSkill: ${ready.skill ? 'loaded — /agentrun <task>' : 'missing — enable package skills, then /reload'}\nPi: ${ready.pi ? 'selected model available (connection not tested)' : 'no usable active model — /login to connect a provider, then /model to select it'}\nJev: ${ready.jev ? 'configuration present (connection not tested)' : 'not configured — only needed for system one decisions; set TYPESAFE_API_KEY before starting Pi'}`, ready);
+                    show(s, `agent.run() · ${s.busy ? 'running' : 'idle'}\nDemo: ready — /agentrun demo (no keys or model calls)\nWorkflow: ${s.draft ? `${modelJson(inspectWorkflow(s.draft).name)} · ${s.demo ? 'scripted' : 'live adapters'}` : 'none — load a saved procedure, run the demo, or describe a task'}\n\nFor your own workflows:\nPi host: ${PI_VERSION}${PI_VERSION === TESTED_PI_VERSION ? '' : ` (tested on ${TESTED_PI_VERSION}; install that host: npm install -g @earendil-works/pi-coding-agent@${TESTED_PI_VERSION})`}\nSkill: ${ready.skill ? 'loaded — /agentrun <task>' : 'missing — enable package skills, then /reload'}\nPi: ${ready.pi ? 'selected model available (connection not tested)' : 'no usable active model — /login to connect a provider, then /model to select it'}\nJev: ${ready.jev ? 'configuration present (connection not tested)' : 'not configured — only needed for system one decisions; set TYPESAFE_API_KEY before starting Pi'}`, ready);
                 }
                 else if (command === 'stop') {
+                    s.pause?.();
                     s.controller?.abort();
                     s.service.stop();
                     show(s, s.busy ? 'Stop requested. Already-started tool effects may still finish.' : 'Nothing is running.');
@@ -657,6 +741,7 @@ function registerExtension(pi, configuration) {
         const old = current, wasRunning = old.busy;
         old.clearStatus();
         old.closed = true;
+        old.pause?.();
         old.controller?.abort();
         await old.service.dispose();
         await old.inFlight;

package/dist/host-session.js

@@ -1,5 +1,6 @@
 import { Agent } from '@earendil-works/pi-agent-core';
 import { createPiRunner } from './runner.js';
+import { workflowToolContext } from './tool-context.js';
 export const PI_MODEL_SETUP_MESSAGE = 'AgentRun requires an active Pi model. Use /login to connect a provider, then /model to select it. Try /agentrun demo without model access.';
 function selectedModel(context) {
     const model = context.model;
@@ -16,6 +17,7 @@ function selectedModel(context) {
 export function createPiHostSessionFactory(context) {
     const model = selectedModel(context);
     const stream = context.modelRegistry.streamSimple.bind(context.modelRegistry);
+    const toolContext = workflowToolContext(context);
     return async (options) => {
         if (options.model !== model)
             throw new Error('The child session must use the captured active Pi model');
@@ -25,7 +27,7 @@ export function createPiHostSessionFactory(context) {
             name: tool.name, label: tool.label, description: tool.description,
             parameters: tool.parameters,
             async execute(id, args, signal, onUpdate) {
-                const result = await tool.execute(id, args, signal, onUpdate, context);
+                const result = await tool.execute(id, args, signal, onUpdate, toolContext);
                 if (tool.name === 'submit' && result.details?.accepted === true)
                     delivered = true;
                 return result;

package/dist/run-error.d.ts

@@ -0,0 +1,6 @@
+export declare class PiRunError extends Error {
+    readonly reason: "aborted" | "timeout" | "turn_limit" | "submission_limit" | "no_submission" | "model_error";
+    readonly turns: number;
+    readonly submissions: number;
+    constructor(reason: "aborted" | "timeout" | "turn_limit" | "submission_limit" | "no_submission" | "model_error", turns: number, submissions: number);
+}

package/dist/run-error.js

@@ -0,0 +1,13 @@
+// Kept apart from runner.ts so the workflow service loads without a pi package installed.
+export class PiRunError extends Error {
+    reason;
+    turns;
+    submissions;
+    constructor(reason, turns, submissions) {
+        super(`Pi node did not deliver an accepted submission: ${reason} (${turns} turns, ${submissions} submissions)`);
+        this.reason = reason;
+        this.turns = turns;
+        this.submissions = submissions;
+        this.name = "PiRunError";
+    }
+}

package/dist/runner.d.ts

@@ -3,10 +3,5 @@ import type { PiRunnerOptions } from "./types.js";
 export type { PiRunnerOptions, PiSession, PiSessionFactory } from "./types.js";
 export type PiRunner = NonNullable<WorkflowDeps["runNode"]>;
 export type PiNodeRequest = Parameters<PiRunner>[0];
-export declare class PiRunError extends Error {
-    readonly reason: "aborted" | "timeout" | "turn_limit" | "submission_limit" | "no_submission" | "model_error";
-    readonly turns: number;
-    readonly submissions: number;
-    constructor(reason: "aborted" | "timeout" | "turn_limit" | "submission_limit" | "no_submission" | "model_error", turns: number, submissions: number);
-}
+export { PiRunError } from "./run-error.js";
 export declare function createPiRunner(options: PiRunnerOptions): PiRunner;

package/dist/runner.js

@@ -1,17 +1,7 @@
 import { Compile } from "typebox/compile";
 import { createAgentSession, DefaultResourceLoader, SessionManager, SettingsManager, ModelRuntime, } from "@earendil-works/pi-coding-agent";
-export class PiRunError extends Error {
-    reason;
-    turns;
-    submissions;
-    constructor(reason, turns, submissions) {
-        super(`Pi node did not deliver an accepted submission: ${reason} (${turns} turns, ${submissions} submissions)`);
-        this.reason = reason;
-        this.turns = turns;
-        this.submissions = submissions;
-        this.name = "PiRunError";
-    }
-}
+import { PiRunError } from "./run-error.js";
+export { PiRunError } from "./run-error.js";
 function positive(value, name) {
     if (!Number.isSafeInteger(value) || value < 1)
         throw new Error(`${name} must be a positive integer`);

package/dist/sop.d.ts

@@ -0,0 +1,12 @@
+export declare const MAX_SOP_BYTES: number;
+export interface SopText {
+    text: string;
+    sha256: string;
+}
+export declare const sopDigest: (text: string) => string;
+/** The SOP text of a regular file inside `cwd`; a path that resolves outside it, or a file over the bound, is refused. */
+export declare function readSopFile(cwd: string, file: string): Promise<SopText & {
+    file: string;
+}>;
+/** The sections a workflow names that the SOP has no `## <section>` heading line for. */
+export declare function missingSopSections(text: string, sections: readonly string[]): string[];

package/dist/sop.js

@@ -0,0 +1,29 @@
+import { createHash } from 'node:crypto';
+import { lstat, readFile, realpath } from 'node:fs/promises';
+import { isAbsolute, relative, resolve, sep } from 'node:path';
+export const MAX_SOP_BYTES = 512 * 1024;
+export const sopDigest = (text) => createHash('sha256').update(text).digest('hex');
+/** The SOP text of a regular file inside `cwd`; a path that resolves outside it, or a file over the bound, is refused. */
+export async function readSopFile(cwd, file) {
+    if (!file.trim() || file.includes('\0'))
+        throw new Error('Use /agentrun sop <file>, a path inside this project.');
+    const root = await realpath(cwd);
+    const target = await realpath(resolve(cwd, file)).catch(() => { throw new Error(`SOP file not found: ${file}`); });
+    const inside = relative(root, target);
+    if (!inside || inside === '..' || inside.startsWith(`..${sep}`) || isAbsolute(inside))
+        throw new Error('The SOP file must be inside this project.');
+    const info = await lstat(target);
+    if (!info.isFile())
+        throw new Error('The SOP must be a regular file.');
+    if (info.size > MAX_SOP_BYTES)
+        throw new Error(`The SOP file is larger than ${MAX_SOP_BYTES / 1024} KiB.`);
+    const text = (await readFile(target, 'utf8')).replace(/^/, '');
+    if (!text.trim())
+        throw new Error('The SOP file is empty.');
+    return { file: inside.split(sep).join('/'), text, sha256: sopDigest(text) };
+}
+/** The sections a workflow names that the SOP has no `## <section>` heading line for. */
+export function missingSopSections(text, sections) {
+    const headings = new Set(text.split(/\r?\n/).filter(line => line.startsWith('## ')).map(line => line.trimEnd().slice(3)));
+    return sections.filter(section => !headings.has(section));
+}

package/dist/tool-context.d.ts

@@ -0,0 +1,21 @@
+export interface NestedToolOutcome {
+    toolCall: {
+        type: 'toolCall';
+        id: string;
+        name: string;
+        arguments: Record<string, unknown>;
+    };
+    result: {
+        content: Array<{
+            type: 'text';
+            text: string;
+        }>;
+        details: undefined;
+    };
+    isError: true;
+}
+export type WorkflowToolContext<C extends object> = C & {
+    readonly tools: readonly never[];
+    executeTool(name: string, args: unknown): Promise<NestedToolOutcome>;
+};
+export declare function workflowToolContext<C extends object>(context: C): WorkflowToolContext<C>;

package/dist/tool-context.js

@@ -0,0 +1,13 @@
+export function workflowToolContext(context) {
+    return Object.create(context, {
+        tools: { value: Object.freeze([]), enumerable: true },
+        executeTool: {
+            enumerable: true,
+            async value(name, args) {
+                const text = `A workflow node cannot call the tool ${name}: nested tool calls are not available here`;
+                const toolCall = { type: 'toolCall', id: 'agentrun-nested', name, arguments: (args && typeof args === 'object' ? args : {}) };
+                return { toolCall, result: { content: [{ type: 'text', text }], details: undefined }, isError: true };
+            },
+        },
+    });
+}

package/dist/workflow-session.d.ts

@@ -11,6 +11,10 @@ export interface WorkflowSessionSnapshot {
     observation?: RunObservation;
     running?: boolean;
     runId?: string;
+    sop?: {
+        file: string;
+        sha256: string;
+    };
     createdAt: string;
 }
 /** Caller supplies Pi's active branch, not the complete session tree. */

package/dist/workflow-session.js

@@ -96,12 +96,13 @@ function snapshotEntry(entry) {
         if (descriptors.type?.value !== 'custom' || descriptors.customType?.value !== 'agentrun:snapshot' || !('value' in (descriptors.data ?? {})))
             return;
         const s = jsonSnapshot(descriptors.data.value);
-        if (!object(s) || !only(s, ['version', 'workflow', 'input', 'savedName', 'demo', 'report', 'observation', 'running', 'runId', 'createdAt'])
+        if (!object(s) || !only(s, ['version', 'workflow', 'input', 'savedName', 'demo', 'report', 'observation', 'running', 'runId', 'sop', 'createdAt'])
             || s.version !== 1 || !object(s.input) || typeof s.createdAt !== 'string' || !/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/.test(s.createdAt)
             || !Number.isFinite(Date.parse(s.createdAt)) || new Date(s.createdAt).toISOString() !== s.createdAt
             || s.savedName !== undefined && (typeof s.savedName !== 'string' || !/^[a-z0-9][a-z0-9_-]{0,63}$/.test(s.savedName))
             || s.runId !== undefined && (typeof s.runId !== 'string' || !s.runId.length || s.runId.length > 200)
-            || s.running !== undefined && typeof s.running !== 'boolean')
+            || s.running !== undefined && typeof s.running !== 'boolean'
+            || s.sop !== undefined && (!object(s.sop) || !only(s.sop, ['file', 'sha256']) || !textFields(s.sop, ['file', 'sha256']) || !/^[0-9a-f]{64}$/.test(s.sop.sha256) || s.sop.file.length > 1024))
             return;
         const inspection = inspectWorkflow(s.workflow);
         // Input remains an exact draft, including incomplete form values; run preflight owns it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parcha/agentrun-pi",
-  "version": "0.1.0-beta.11",
+  "version": "0.1.0-beta.13",
   "description": "Pi extension for building, running and evaluating AgentRun workflows",
   "type": "module",
   "license": "Apache-2.0",
@@ -15,6 +15,10 @@
     "./extension": {
       "types": "./dist/extension.d.ts",
       "import": "./dist/extension.js"
+    },
+    "./durable": {
+      "types": "./dist/durable/index.d.ts",
+      "import": "./dist/durable/index.js"
     }
   },
   "bin": {
@@ -32,15 +36,46 @@
     "test": "node --test test/*.test.mjs"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "0.87.0"
+    "@earendil-works/chord": "1.1.0",
+    "@earendil-works/pi-agent-core": "1.1.0",
+    "@earendil-works/pi-ai": "1.1.0",
+    "@earendil-works/pi-coding-agent": "1.1.0",
+    "@earendil-works/pi-durable": "1.1.0",
+    "@earendil-works/pi-tui": "1.1.0",
+    "@parcha/pi-durable-disk": "0.1.0-beta.13",
+    "typebox": "1.3.7"
   },
   "dependencies": {
-    "@parcha/agentrun-dsl": "0.1.0-beta.11",
-    "@parcha/agentrun-jev": "0.1.0-beta.11",
-    "@earendil-works/pi-agent-core": "0.87.0",
-    "@earendil-works/pi-coding-agent": "0.87.0",
-    "@earendil-works/pi-tui": "0.87.0",
-    "typebox": "1.3.7"
+    "@parcha/agentrun-dsl": "0.1.0-beta.13",
+    "@parcha/agentrun-jev": "0.1.0-beta.13"
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-agent-core": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*",
+    "typebox": "*",
+    "@earendil-works/pi-durable": ">=1.0.4 <1.3.0",
+    "@earendil-works/chord": ">=1.0.4 <1.3.0"
+  },
+  "peerDependenciesMeta": {
+    "@earendil-works/pi-agent-core": {
+      "optional": true
+    },
+    "@earendil-works/pi-coding-agent": {
+      "optional": true
+    },
+    "@earendil-works/pi-tui": {
+      "optional": true
+    },
+    "typebox": {
+      "optional": true
+    },
+    "@earendil-works/pi-durable": {
+      "optional": true
+    },
+    "@earendil-works/chord": {
+      "optional": true
+    }
   },
   "repository": {
     "type": "git",