@relayflows/sdk 2.0.42 → 2.0.43

package/dist/daemon-spec-validation.js

@@ -0,0 +1,115 @@
+import { spawnSync } from 'node:child_process';
+import { canonicalize } from './canonical.js';
+import { CompileError, toKernelSpec } from './compile.js';
+import { PROTOCOL_VERSION } from './protocol.js';
+import { RelayflowdNotFoundError, resolveRelayflowdBinary } from './relayflowd-path.js';
+// Cache discovery, never verdicts. Changed resolution inputs get a fresh lookup.
+const binaries = new Map();
+const defaults = {
+    resolveBinary() {
+        const key = JSON.stringify([process.env['RELAYFLOWD_BIN'], process.env['PATH'], process.cwd(), process.argv[1]]);
+        let found = binaries.get(key);
+        if (found === undefined) {
+            try {
+                found = resolveRelayflowdBinary();
+            }
+            catch (error) {
+                found = error instanceof Error ? error : new Error(String(error));
+            }
+            binaries.set(key, found);
+        }
+        if (found instanceof Error)
+            throw found;
+        return found;
+    },
+    run: (binary, input) => spawnSync(binary, ['validate-spec'], {
+        input, encoding: 'utf8', timeout: 5000, killSignal: 'SIGKILL', maxBuffer: 1024 * 1024,
+        stdio: ['pipe', 'pipe', 'pipe'],
+    }),
+};
+export function unavailableValidation(mode, reason, detail = '', binary) {
+    const message = `${binary === undefined ? 'relayflowd' : `relayflowd at ${binary}`}: ${detail || reason.replaceAll('_', ' ')}. `
+        + 'Daemon acceptance is unproven; an already attached daemon from another build is not checked.';
+    return {
+        validation: { mode: 'local', reason, ...(binary === undefined ? {} : { binary }) },
+        diagnostics: mode === 'required'
+            ? [{ severity: 'refusal', kind: 'daemon_validation_unavailable', message }]
+            : reason === 'disabled' || reason === 'not_reached' || reason === 'relayflowd_not_found'
+                ? [] : [{ severity: 'warning', kind: 'daemon_unvalidated', message }],
+    };
+}
+/** Same spec value run.start submits, in canonical form; no socket or run. */
+export function validateSpecWithDaemon(flow, mode, deps = defaults) {
+    if (mode === 'off')
+        return unavailableValidation(mode, 'disabled');
+    let submitted;
+    let input;
+    try {
+        submitted = toKernelSpec(flow);
+        input = canonicalize(submitted);
+    }
+    catch (error) {
+        // run refuses this lowering too: degrading to local would fail open.
+        const errors = error instanceof CompileError ? error.errors : [String(error)];
+        return { validation: { mode: 'local', reason: 'not_reached' },
+            diagnostics: [{ severity: 'refusal', kind: 'invalid_spec', message: errors.join('; '), errors }] };
+    }
+    let binary;
+    try {
+        binary = deps.resolveBinary();
+    }
+    catch (error) {
+        const reason = error instanceof RelayflowdNotFoundError
+            ? error.attempts[0]?.startsWith('RELAYFLOWD_BIN=') ? 'relayflowd_bin_invalid' : 'relayflowd_not_found'
+            : 'spawn_failed';
+        return unavailableValidation(mode, reason, String(error));
+    }
+    try {
+        const result = deps.run(binary, input);
+        if (result.error)
+            return unavailableValidation(mode, result.error.code === 'ETIMEDOUT' ? 'timed_out' : 'spawn_failed', result.error.message, binary);
+        let verdict;
+        try {
+            verdict = JSON.parse(result.stdout);
+        }
+        catch { /* Old binaries have no envelope. */ }
+        if (!isVerdict(verdict))
+            return unavailableValidation(mode, 'no_verdict', 'no validation verdict (the binary may predate validate-spec)', binary);
+        if (verdict.protocol !== PROTOCOL_VERSION)
+            return unavailableValidation(mode, 'protocol_mismatch', `validator protocol ${verdict.protocol}, SDK protocol ${PROTOCOL_VERSION}`, binary);
+        const validation = { mode: 'daemon', binary,
+            protocol: verdict.protocol, specVersion: verdict.spec_version };
+        if (verdict.ok) {
+            // Acceptance is the envelope AND exit 0; a validator that fails or is
+            // killed after printing it has not completed validation.
+            if (result.status !== 0)
+                return unavailableValidation(mode, 'abnormal_exit', `validator ${result.status === null ? `was terminated by ${result.signal ?? 'a signal'}` : `exited ${result.status}`} after an accepting verdict`, binary);
+            return { validation, diagnostics: [] };
+        }
+        // A refusal fails closed whatever the exit status, so it is reported as-is.
+        const message = verdict.error.message;
+        const index = /steps\[(\d+)\]/.exec(message)?.[1];
+        const stepId = index === undefined ? undefined : submitted.steps[Number(index)]?.id;
+        const generated = stepId !== undefined && !flow.steps.some(step => step.id === stepId);
+        return { validation, diagnostics: [{ severity: 'refusal', kind: 'invalid_spec',
+                    message: message + (generated ? `\nStep "${stepId}" is generated by this compiler's gate lowering, not declared in the flow; `
+                        + 'the installed relayflowd and this @relayflows/sdk disagree (SDK lowering bug). Report this rather than editing the flow.' : ''),
+                    errors: [message], ...(stepId === undefined ? {} : { stepId }) }] };
+    }
+    catch (error) {
+        return unavailableValidation(mode, 'spawn_failed', String(error), binary);
+    }
+}
+function isVerdict(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const v = value;
+    return Number.isInteger(v.protocol) && typeof v.spec_version === 'string'
+        && (v.ok === true || (v.ok === false && v.error?.code === 'invalid_spec' && typeof v.error.message === 'string'));
+}
+export function validationAnnotation(validation) {
+    return validation?.mode === 'daemon'
+        ? ` [validated by relayflowd at ${validation.binary}, protocol ${validation.protocol}]`
+        : ` [local only: ${(validation?.reason ?? 'not_reached').replaceAll('_', ' ')}, so daemon acceptance is unproven]`;
+}
+//# sourceMappingURL=daemon-spec-validation.js.map

package/dist/daemon-spec-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-spec-validation.js","sourceRoot":"","sources":["../src/daemon-spec-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAqBxF,iFAAiF;AACjF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AACnD,MAAM,QAAQ,GAAyB;IACrC,aAAa;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC;gBAAC,KAAK,GAAG,uBAAuB,EAAE,CAAC;YAAC,CAAC;YAC1C,OAAO,KAAK,EAAE,CAAC;gBAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,CAAC;YACpF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,YAAY,KAAK;YAAE,MAAM,KAAK,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE;QAC3D,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI;QACrF,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC;CACH,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,IAA0B,EAAE,MAAmB,EAAE,MAAM,GAAG,EAAE,EAAE,MAAe;IAE7E,MAAM,OAAO,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,MAAM,EAAE,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI;UAC5H,8FAA8F,CAAC;IACnG,OAAO;QACL,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QAClF,WAAW,EAAE,IAAI,KAAK,UAAU;YAC9B,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,CAAC;YAC3E,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,sBAAsB;gBACtF,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CACpC,IAAc,EAAE,IAA0B,EAAE,OAA6B,QAAQ;IAEjF,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,SAA0C,CAAC;IAC/C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAC,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAAC,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IACxE,OAAO,KAAK,EAAE,CAAC;QACb,qEAAqE;QACrE,MAAM,MAAM,GAAG,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9E,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE;YAC3D,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IAAC,CAAC;IACtC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,KAAK,YAAY,uBAAuB;YACrD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,sBAAsB;YACtG,CAAC,CAAC,cAAc,CAAC;QACnB,OAAO,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,qBAAqB,CAAC,IAAI,EAChD,MAAM,CAAC,KAA+B,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7H,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAC3F,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO,qBAAqB,CAAC,IAAI,EAAE,YAAY,EACtE,8DAA8D,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB;YAAE,OAAO,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,EAC/F,sBAAsB,OAAO,CAAC,QAAQ,kBAAkB,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,MAAM,UAAU,GAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM;YAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,sEAAsE;YACtE,yDAAyD;YACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,qBAAqB,CAAC,IAAI,EAAE,eAAe,EACzE,aAAa,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,qBAAqB,MAAM,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;YAC7J,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACzC,CAAC;QACD,4EAA4E;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACpF,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACvF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc;oBAC5E,OAAO,EAAE,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,MAAM,6EAA6E;0BAC1H,0HAA0H,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpI,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,qBAAqB,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;AAChG,CAAC;AAID,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAyB,CAAC;IACpC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;WACpE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAA6B;IAChE,OAAO,UAAU,EAAE,IAAI,KAAK,QAAQ;QAClC,CAAC,CAAC,gCAAgC,UAAU,CAAC,MAAM,cAAc,UAAU,CAAC,QAAQ,GAAG;QACvF,CAAC,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,IAAI,aAAa,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,qCAAqC,CAAC;AACvH,CAAC"}

package/dist/failure-kinds.d.ts

@@ -2,7 +2,7 @@
 export declare const PREFLIGHT_FAILURE_KINDS: readonly ["invalid_spec", "unknown_gate_kind", "gate_pattern_invalid", "gate_command_missing", "gate_bound_invalid", "gate_path_invalid", "gate_host_unsupported", "gate_ids_invalid", "gate_source_unsupported", "plugin_unknown", "plugin_unlisted", "plugin_install_failed", "plugin_manifest_missing", "plugin_manifest_invalid", "plugin_preflight_missing", "plugin_verb_unknown_primitive", "plugin_unsupported", "plugin_credential_missing", "plugin_server_unreachable", "plugin_kind_invalid", "plugin_incompatible", "plugin_event_unroutable", "plugin_source_invalid", "plugin_event_ambiguous", "plugin_source_unresolved", "plugin_fetch_failed", "plugin_path_invalid", "plugin_too_large", "plugin_source_drift", "plugin_lock_invalid", "helper_provider.mount_required", "helper_provider.unsupported", "helper_slack.credential_missing", "helper_slack.mount_required", "helper_mount_required", "mcp_undeclared_server", "mcp_unreachable", "budget_syntax_invalid", "cli_missing", "cli_outdated", "cli_unauthenticated", "cli_unresolved", "cli_unsupported", "command_missing", "model_unavailable", "model_unknown", "memory_unreachable", "no_executor", "probe_failed", "provider_usage_limited", "scope_syntax_invalid", "mount_unknown", "scope_ungrantable"];
 /** Input/command refusals emitted before the pure preflight predicates run. */
 export declare const CHECK_INPUT_FAILURE_KINDS: readonly ["config_invalid", "input_invalid", "input_missing", "input_too_large", "input_unreadable", "invalid_invocation", "invalid_spec"];
-export declare const CHECK_FAILURE_KINDS: readonly ["config_invalid", "input_invalid", "input_missing", "input_too_large", "input_unreadable", "invalid_invocation", "invalid_spec", "unknown_gate_kind", "gate_pattern_invalid", "gate_command_missing", "gate_bound_invalid", "gate_path_invalid", "gate_host_unsupported", "gate_ids_invalid", "gate_source_unsupported", "plugin_unknown", "plugin_unlisted", "plugin_install_failed", "plugin_manifest_missing", "plugin_manifest_invalid", "plugin_preflight_missing", "plugin_verb_unknown_primitive", "plugin_unsupported", "plugin_credential_missing", "plugin_server_unreachable", "plugin_kind_invalid", "plugin_incompatible", "plugin_event_unroutable", "plugin_source_invalid", "plugin_event_ambiguous", "plugin_source_unresolved", "plugin_fetch_failed", "plugin_path_invalid", "plugin_too_large", "plugin_source_drift", "plugin_lock_invalid", "helper_provider.mount_required", "helper_provider.unsupported", "helper_slack.credential_missing", "helper_slack.mount_required", "helper_mount_required", "mcp_undeclared_server", "mcp_unreachable", "budget_syntax_invalid", "cli_missing", "cli_outdated", "cli_unauthenticated", "cli_unresolved", "cli_unsupported", "command_missing", "model_unavailable", "model_unknown", "memory_unreachable", "no_executor", "probe_failed", "provider_usage_limited", "scope_syntax_invalid", "mount_unknown", "scope_ungrantable"];
+export declare const CHECK_FAILURE_KINDS: readonly ["daemon_validation_unavailable", "config_invalid", "input_invalid", "input_missing", "input_too_large", "input_unreadable", "invalid_invocation", "invalid_spec", "unknown_gate_kind", "gate_pattern_invalid", "gate_command_missing", "gate_bound_invalid", "gate_path_invalid", "gate_host_unsupported", "gate_ids_invalid", "gate_source_unsupported", "plugin_unknown", "plugin_unlisted", "plugin_install_failed", "plugin_manifest_missing", "plugin_manifest_invalid", "plugin_preflight_missing", "plugin_verb_unknown_primitive", "plugin_unsupported", "plugin_credential_missing", "plugin_server_unreachable", "plugin_kind_invalid", "plugin_incompatible", "plugin_event_unroutable", "plugin_source_invalid", "plugin_event_ambiguous", "plugin_source_unresolved", "plugin_fetch_failed", "plugin_path_invalid", "plugin_too_large", "plugin_source_drift", "plugin_lock_invalid", "helper_provider.mount_required", "helper_provider.unsupported", "helper_slack.credential_missing", "helper_slack.mount_required", "helper_mount_required", "mcp_undeclared_server", "mcp_unreachable", "budget_syntax_invalid", "cli_missing", "cli_outdated", "cli_unauthenticated", "cli_unresolved", "cli_unsupported", "command_missing", "model_unavailable", "model_unknown", "memory_unreachable", "no_executor", "probe_failed", "provider_usage_limited", "scope_syntax_invalid", "mount_unknown", "scope_ungrantable"];
 /**
  * Warnings never refuse. Covenant 2 asks preflight to refuse *or warn* on
  * anything it cannot prove, so a deterministic step always leaves exactly one
@@ -54,14 +54,14 @@ export declare const PREFLIGHT_WARNING_KINDS: readonly ["unprovable_effects", "m
  * members is pre-existing — renaming it is a separate change, and neither this
  * list nor `RunDiagnostic` is exported from the package index.
  */
-export declare const RUN_FAILURE_KINDS: readonly ["bucket_unconfigured", "bucket_unreachable", "bundle_signature_invalid", "bundle_unsupported", "human_influenced_run", "reuse_spec_mismatch", "reuse_run_not_found", "reuse_journal_read_failed", "daemon_unreachable", "daemon_protocol_mismatch", "daemon_start_failed", "daemon_start_timeout", "relayflowd_not_found", "protocol_error", "run_parked", "run_declined", "run_unavailable", "gate_failed", "human_wait_unknown", "local_agent_unavailable", "root_lease_lost"];
+export declare const RUN_FAILURE_KINDS: readonly ["bucket_unconfigured", "bucket_unreachable", "bundle_signature_invalid", "bundle_unsupported", "human_influenced_run", "reuse_spec_mismatch", "reuse_run_not_found", "reuse_journal_read_failed", "daemon_unreachable", "daemon_protocol_mismatch", "daemon_start_failed", "daemon_start_timeout", "relayflowd_not_found", "protocol_error", "run_parked", "run_declined", "run_unavailable", "gate_failed", "human_wait_unknown", "memory_finding_invalid", "memory_unwritable", "memory_unjournaled", "memory_unreachable", "local_agent_unavailable", "daemon_unresponsive", "root_lease_lost"];
 /**
  * Non-refusing outcomes of the attach step. `connection_file_stale` is
  * DAEMON-LIFECYCLE.md §2 row 2: the socket answered while `connection.json`
  * described a process that is gone. The socket is the authority, so this
  * attaches — but it says so rather than passing in silence.
  */
-export declare const RUN_WARNING_KINDS: readonly ["connection_file_stale"];
+export declare const RUN_WARNING_KINDS: readonly ["connection_file_stale", "reuse_summary_unavailable", "result_unreadable", "inspection_interrupted"];
 /**
  * Warnings emitted by flows check, outside pure preflight.
  *
@@ -72,7 +72,9 @@ export declare const RUN_WARNING_KINDS: readonly ["connection_file_stale"];
  * daemon-free, can see none either — so it opts in, while `flows run`, `flows
  * build` and SDK submissions do not (cli/check-worker-surface.ts).
  */
-export declare const CHECK_WARNING_KINDS: readonly ["editor_schema_missing", "agent_worker_unresolved"];
+/** helper_credential_unresolved describes a local mount gap during inspection;
+ * Cloud validates workspace integrations at submit, and local execution refuses. */
+export declare const CHECK_WARNING_KINDS: readonly ["editor_schema_missing", "daemon_unvalidated", "agent_worker_unresolved", "helper_credential_unresolved"];
 export type CheckWarningKind = (typeof CHECK_WARNING_KINDS)[number];
 export type PreflightFailureKind = (typeof PREFLIGHT_FAILURE_KINDS)[number];
 export type CheckFailureKind = (typeof CHECK_FAILURE_KINDS)[number];

package/dist/failure-kinds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"failure-kinds.d.ts","sourceRoot":"","sources":["../src/failure-kinds.ts"],"names":[],"mappings":"AAiCA,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,8tCAG1B,CAAC;AAEX,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,4IAQ5B,CAAC;AAEX,eAAO,MAAM,mBAAmB,+0CAGtB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,uBAAuB,4LAS1B,CAAC;AAEX;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,iBAAiB,4dAoCpB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,oCAEpB,CAAC;AAEX;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,+DAAgE,CAAC;AACjG,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,SAAS,GAAG,oBAAoB,GAAG,aAAa,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAChC,oEAAoE;IACpE,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAKD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,gBAAgB,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE"}
+{"version":3,"file":"failure-kinds.d.ts","sourceRoot":"","sources":["../src/failure-kinds.ts"],"names":[],"mappings":"AAiCA,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,8tCAG1B,CAAC;AAEX,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,4IAQ5B,CAAC;AAGX,eAAO,MAAM,mBAAmB,g3CAItB,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,uBAAuB,4LAS1B,CAAC;AAEX;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,iBAAiB,8kBA6CpB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,gHAKpB,CAAC;AAEX;;;;;;;;;GASG;AACH;oFACoF;AACpF,eAAO,MAAM,mBAAmB,qHAAsH,CAAC;AACvJ,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,SAAS,GAAG,oBAAoB,GAAG,aAAa,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAChC,oEAAoE;IACpE,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAC5C,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAKD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,gBAAgB,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE"}

package/dist/failure-kinds.js

@@ -44,7 +44,9 @@ export const CHECK_INPUT_FAILURE_KINDS = [
     'invalid_invocation',
     ...SHARED_SPEC_FAILURE_KINDS,
 ];
+// run never enables daemon validation; fromCheckReport needs a mapping if that changes.
 export const CHECK_FAILURE_KINDS = [
+    'daemon_validation_unavailable',
     ...CHECK_INPUT_FAILURE_KINDS,
     ...PREFLIGHT_ENVIRONMENT_FAILURE_KINDS,
 ];
@@ -130,6 +132,14 @@ export const RUN_FAILURE_KINDS = [
     'gate_failed',
     /** `flows answer` named a wait the run is not asking: unknown, or already answered. */
     'human_wait_unknown',
+    /** `f.memory.learn` was given a finding without non-empty string fields. */
+    'memory_finding_invalid',
+    /** `f.memory.learn` could not persist the finding to script memory. */
+    'memory_unwritable',
+    /** `f.memory.learn` ran without a durable root run to journal the finding in. */
+    'memory_unjournaled',
+    /** `f.memory` lost its database, or found a damaged learned finding, after the run started. */
+    'memory_unreachable',
     /**
      * `--local-agent` cannot be honoured for this invocation, so it is refused
      * rather than accepted and ignored. A local agent worker is admitted at run
@@ -143,6 +153,7 @@ export const RUN_FAILURE_KINDS = [
      * reach this process. The run is NOT failed (`status: running`): its
      * completed steps are journaled and `flows resume <rootRunId>` continues it.
      */
+    'daemon_unresponsive',
     'root_lease_lost',
 ];
 /**
@@ -153,6 +164,9 @@ export const RUN_FAILURE_KINDS = [
  */
 export const RUN_WARNING_KINDS = [
     'connection_file_stale',
+    'reuse_summary_unavailable',
+    'result_unreadable',
+    'inspection_interrupted',
 ];
 /**
  * Warnings emitted by flows check, outside pure preflight.
@@ -164,7 +178,9 @@ export const RUN_WARNING_KINDS = [
  * daemon-free, can see none either — so it opts in, while `flows run`, `flows
  * build` and SDK submissions do not (cli/check-worker-surface.ts).
  */
-export const CHECK_WARNING_KINDS = ['editor_schema_missing', 'agent_worker_unresolved'];
+/** helper_credential_unresolved describes a local mount gap during inspection;
+ * Cloud validates workspace integrations at submit, and local execution refuses. */
+export const CHECK_WARNING_KINDS = ['editor_schema_missing', 'daemon_unvalidated', 'agent_worker_unresolved', 'helper_credential_unresolved'];
 const CHECK_FAILURE_KIND_SET = new Set(CHECK_FAILURE_KINDS);
 const RUN_FAILURE_KIND_SET = new Set(RUN_FAILURE_KINDS);
 export function isCheckFailureKind(value) {

package/dist/failure-kinds.js.map

@@ -1 +1 @@
-{"version":3,"file":"failure-kinds.js","sourceRoot":"","sources":["../src/failure-kinds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,MAAM,yBAAyB,GAAG,CAAC,cAAc,CAAU,CAAC;AAE5D,yEAAyE;AACzE,MAAM,mCAAmC,GAAG;IAC1C,GAAG,wBAAwB;IAC3B,GAAG,oBAAoB;IACvB,gCAAgC;IAChC,6BAA6B;IAC7B,iCAAiC;IACjC,6BAA6B;IAC7B,uBAAuB;IACvB,uBAAuB;IACvB,iBAAiB;IACjB,uBAAuB;IACvB,aAAa;IACb,cAAc;IACd,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,aAAa;IACb,cAAc;IACd,wBAAwB;IACxB,sBAAsB;IACtB,eAAe;IACf,mBAAmB;CACX,CAAC;AAEX,qEAAqE;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,GAAG,yBAAyB;IAC5B,GAAG,mCAAmC;CAC9B,CAAC;AAEX,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,GAAG,yBAAyB;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,yBAAyB;IAC5B,GAAG,mCAAmC;CAC9B,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,oBAAoB;IACpB,wBAAwB;IACxB,oBAAoB;IACpB,oBAAoB;IACpB,cAAc;IACd,kBAAkB;IAClB,wBAAwB;IACxB,qBAAqB;CACb,CAAC;AAEX;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,2BAA2B;IAC3B,oBAAoB;IACpB,0BAA0B;IAC1B,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,gBAAgB;IAChB,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,uFAAuF;IACvF,aAAa;IACb,uFAAuF;IACvF,oBAAoB;IACpB;;;;;;OAMG;IACH,yBAAyB;IACzB;;;;OAIG;IACH,iBAAiB;CACT,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,uBAAuB;CACf,CAAC;AAEX;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,uBAAuB,EAAE,yBAAyB,CAAU,CAAC;AAkKjG,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACjF,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAE7E,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"failure-kinds.js","sourceRoot":"","sources":["../src/failure-kinds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,MAAM,yBAAyB,GAAG,CAAC,cAAc,CAAU,CAAC;AAE5D,yEAAyE;AACzE,MAAM,mCAAmC,GAAG;IAC1C,GAAG,wBAAwB;IAC3B,GAAG,oBAAoB;IACvB,gCAAgC;IAChC,6BAA6B;IAC7B,iCAAiC;IACjC,6BAA6B;IAC7B,uBAAuB;IACvB,uBAAuB;IACvB,iBAAiB;IACjB,uBAAuB;IACvB,aAAa;IACb,cAAc;IACd,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,aAAa;IACb,cAAc;IACd,wBAAwB;IACxB,sBAAsB;IACtB,eAAe;IACf,mBAAmB;CACX,CAAC;AAEX,qEAAqE;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,GAAG,yBAAyB;IAC5B,GAAG,mCAAmC;CAC9B,CAAC;AAEX,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,GAAG,yBAAyB;CACpB,CAAC;AAEX,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,+BAA+B;IAC/B,GAAG,yBAAyB;IAC5B,GAAG,mCAAmC;CAC9B,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,oBAAoB;IACpB,wBAAwB;IACxB,oBAAoB;IACpB,oBAAoB;IACpB,cAAc;IACd,kBAAkB;IAClB,wBAAwB;IACxB,qBAAqB;CACb,CAAC;AAEX;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,2BAA2B;IAC3B,oBAAoB;IACpB,0BAA0B;IAC1B,qBAAqB;IACrB,sBAAsB;IACtB,sBAAsB;IACtB,gBAAgB;IAChB,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,uFAAuF;IACvF,aAAa;IACb,uFAAuF;IACvF,oBAAoB;IACpB,4EAA4E;IAC5E,wBAAwB;IACxB,uEAAuE;IACvE,mBAAmB;IACnB,iFAAiF;IACjF,oBAAoB;IACpB,+FAA+F;IAC/F,oBAAoB;IACpB;;;;;;OAMG;IACH,yBAAyB;IACzB;;;;OAIG;IACH,qBAAqB;IACrB,iBAAiB;CACT,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,uBAAuB;IACvB,2BAA2B;IAC3B,mBAAmB;IACnB,wBAAwB;CAChB,CAAC;AAEX;;;;;;;;;GASG;AACH;oFACoF;AACpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,uBAAuB,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,8BAA8B,CAAU,CAAC;AAkKvJ,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACjF,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAE7E,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/dist/flow-eval-cloud.d.ts

@@ -0,0 +1,25 @@
+import { type CloudStep } from './cloud-read.js';
+import { type RunInCloudOptions } from './cloud-run.js';
+import { type CloudConnectionOptions } from './cloud-http.js';
+import type { FlowEvalExecutor, FlowEvalRun } from './flow-eval-report.js';
+export interface CloudFlowEvalExecutorOptions extends CloudConnectionOptions {
+    workspaceId?: string;
+    syncCode?: RunInCloudOptions['syncCode'];
+    pollIntervalMs?: number;
+}
+/**
+ * Execute each case as a fresh hosted run and wait for it. Needs a token with
+ * `workflow:invoke:write` and `runs:read`; inside a Cloud step that means an
+ * injected workspace token, since a run-scoped sandbox token reads only its own run.
+ */
+export declare function cloudFlowEvalExecutor(options?: CloudFlowEvalExecutorOptions): FlowEvalExecutor;
+/**
+ * Map a terminal hosted run record onto the eval vocabulary: the validated run
+ * state decides parked/failed/canceled, and the stored report (the same
+ * RunReport a local run prints) supplies `declined` and the completion detail.
+ * Exported for tests.
+ */
+export declare function cloudRunOutcome(record: unknown, runId: string): Pick<FlowEvalRun, 'completionReason' | 'completionDetail'>;
+/** Sum hosted step spend; any step with unknown cost makes the total unknown. Exported for tests. */
+export declare function cloudSpend(steps: readonly CloudStep[] | undefined): Pick<FlowEvalRun, 'costUsd' | 'tokensIn' | 'tokensOut' | 'steps'>;
+//# sourceMappingURL=flow-eval-cloud.d.ts.map

package/dist/flow-eval-cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-eval-cloud.d.ts","sourceRoot":"","sources":["../src/flow-eval-cloud.ts"],"names":[],"mappings":"AAIA,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAmC,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEzF,OAAO,EAA+B,KAAK,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAE3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AA6B3E,MAAM,WAAW,4BAA6B,SAAQ,sBAAsB;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,4BAAiC,GAAG,gBAAgB,CAgClG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,GAAG,kBAAkB,CAAC,CAU1H;AAED,qGAAqG;AACrG,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC,CAWrI"}

package/dist/flow-eval-cloud.js

@@ -0,0 +1,108 @@
+// The Cloud executor for `evaluateFlow`: one fresh hosted run per case,
+// waited on, with its verdict read from the hosted run report and its spend
+// from the run's steps.
+import { getCloudRunSteps } from './cloud-read.js';
+import { runInCloud, waitForCloudFlowRun } from './cloud-run.js';
+import { cloudRunState } from './cloud-run-record.js';
+import { cloudRequest, isCloudRecord } from './cloud-http.js';
+import { isAuthoredFlowPath } from './direct-input.js';
+import { runReportOutcome } from './flow-eval-outcome.js';
+import { flowEvalSources, isPathTarget } from './flow-eval-version.js';
+const MODULE = /\.(?:[mc]?[jt]s)$/u;
+const EXTENSION_STORE = /(?:^|\/)\.flows\/plugins\//u;
+/** Manifests and locks the version pins but Cloud does not need as imports. */
+const PROJECT_METADATA = /(?:^|\/)(?:package(?:-lock)?|flows(?:\.lock)?)\.json$/u;
+/**
+ * Cloud receives the entry file's source alone (cloud-run.ts): a relative
+ * import is not resolved by the hosted runner, even with `syncCode`. A flow
+ * whose version spans local modules would therefore fail only on Cloud, or run
+ * something other than what was judged. Refuse it before submitting anything.
+ */
+async function refuseLocalImports(flow) {
+    if (!isPathTarget(flow) || !MODULE.test(flow.path))
+        return;
+    const { files } = await flowEvalSources(flow);
+    const entry = files.find(file => !file.includes('/') && flow.path.endsWith(file));
+    // Locked extension payloads are not imports: Cloud receives them separately
+    // (`extensions` in the submission), so they never make a flow non-self-contained.
+    const modules = files.filter(file => (MODULE.test(file) || /\.json$/u.test(file)) && file !== entry
+        && !EXTENSION_STORE.test(file) && !PROJECT_METADATA.test(file));
+    if (modules.length > 0) {
+        throw new Error(`Cloud evaluation runs the entry file alone, and this flow imports local modules (${modules.join(', ')}). `
+            + 'Evaluate it locally, or inline those modules.');
+    }
+}
+/**
+ * Execute each case as a fresh hosted run and wait for it. Needs a token with
+ * `workflow:invoke:write` and `runs:read`; inside a Cloud step that means an
+ * injected workspace token, since a run-scoped sandbox token reads only its own run.
+ */
+export function cloudFlowEvalExecutor(options = {}) {
+    return async ({ flow, input, signal }) => {
+        await refuseLocalImports(flow);
+        const connection = {
+            ...(options.apiUrl === undefined ? {} : { apiUrl: options.apiUrl }),
+            ...(options.token === undefined ? {} : { token: options.token }),
+            ...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),
+            ...(signal === undefined ? {} : { signal }),
+        };
+        const receipt = await runInCloud(flow, {
+            ...connection,
+            ...(options.workspaceId === undefined ? {} : { workspaceId: options.workspaceId }),
+            ...(options.syncCode === undefined ? {} : { syncCode: options.syncCode }),
+            // Cloud requires an explicit input for authored source; `{}` is the
+            // documented "no fields", matching the local executor's default.
+            ...(input !== undefined ? { input } : 'path' in flow && isAuthoredFlowPath(flow.path) ? { input: {} } : {}),
+        });
+        await waitForCloudFlowRun(receipt.runId, {
+            ...connection, ...(options.pollIntervalMs === undefined ? {} : { pollIntervalMs: options.pollIntervalMs }),
+        });
+        // Re-read the terminal record for its stored report: the run state alone
+        // carries the kernel's reason, which says `success` for a declined body
+        // and has no completion detail.
+        const record = await cloudRequest(`/api/v1/workflows/runs/${receipt.runId}`, connection);
+        let steps;
+        try {
+            steps = await getCloudRunSteps(receipt.runId, connection);
+        }
+        catch {
+            // As locally: spend is evidence, not the verdict.
+        }
+        return { runId: receipt.runId, ...cloudRunOutcome(record, receipt.runId), ...cloudSpend(steps) };
+    };
+}
+/**
+ * Map a terminal hosted run record onto the eval vocabulary: the validated run
+ * state decides parked/failed/canceled, and the stored report (the same
+ * RunReport a local run prints) supplies `declined` and the completion detail.
+ * Exported for tests.
+ */
+export function cloudRunOutcome(record, runId) {
+    const state = cloudRunState(record, runId);
+    const report = isCloudRecord(record) && isCloudRecord(record.result) ? record.result : {};
+    const mapped = runReportOutcome(report);
+    // A park with nothing attached to run it is the same fact on both sides.
+    if (mapped.completionReason === 'worker_unavailable')
+        return mapped;
+    if (state.status === 'needs_human')
+        return { ...mapped, completionReason: 'needs_human' };
+    if (!('completionReason' in state))
+        return { ...mapped, completionReason: state.status };
+    if (state.completionReason === 'success')
+        return mapped.completionReason === 'declined' ? mapped : { ...mapped, completionReason: 'success' };
+    return { ...mapped, completionReason: state.completionReason };
+}
+/** Sum hosted step spend; any step with unknown cost makes the total unknown. Exported for tests. */
+export function cloudSpend(steps) {
+    if (steps === undefined)
+        return { costUsd: null, tokensIn: null, tokensOut: null };
+    const known = (values) => values.some(v => v === null || !Number.isFinite(v) || v < 0) ? null : values.reduce((sum, v) => sum + v, 0);
+    const costed = steps.filter(step => step.step_type === 'agent' || step.step_type === 'llm' || step.cost_usd !== null);
+    return {
+        costUsd: known(costed.map(step => step.cost_usd)),
+        tokensIn: known(costed.map(step => step.tokens_in)),
+        tokensOut: known(costed.map(step => step.tokens_out)),
+        steps: steps.map(step => ({ id: step.step_name, status: step.status, durationMs: step.duration_ms, costUsd: step.cost_usd })),
+    };
+}
+//# sourceMappingURL=flow-eval-cloud.js.map

package/dist/flow-eval-cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-eval-cloud.js","sourceRoot":"","sources":["../src/flow-eval-cloud.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4EAA4E;AAC5E,wBAAwB;AAExB,OAAO,EAAE,gBAAgB,EAAkB,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAA0B,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAA+B,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAuB,MAAM,wBAAwB,CAAC;AAE5F,MAAM,MAAM,GAAG,oBAAoB,CAAC;AACpC,MAAM,eAAe,GAAG,6BAA6B,CAAC;AACtD,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,wDAAwD,CAAC;AAElF;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAoB;IACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IAC3D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,4EAA4E;IAC5E,kFAAkF;IAClF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,KAAK;WAC9F,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oFAAoF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;cACvH,+CAA+C,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAwC,EAAE;IAC9E,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACvC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,UAAU,GAA2B;YACzC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACjG,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE;YACrC,GAAG,UAAU;YACb,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzE,oEAAoE;YACpE,iEAAiE;YACjE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5G,CAAC,CAAC;QACH,MAAM,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE;YACvC,GAAG,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;SAC3G,CAAC,CAAC;QACH,yEAAyE;QACzE,wEAAwE;QACxE,gCAAgC;QAChC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,0BAA0B,OAAO,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QACzF,IAAI,KAA8B,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;IACnG,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,KAAa;IAC5D,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,yEAAyE;IACzE,IAAI,MAAM,CAAC,gBAAgB,KAAK,oBAAoB;QAAE,OAAO,MAAM,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;IAC1F,IAAI,CAAC,CAAC,kBAAkB,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACzF,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;IAC9I,OAAO,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;AACjE,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,UAAU,CAAC,KAAuC;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACnF,MAAM,KAAK,GAAG,CAAC,MAA4B,EAAiB,EAAE,CAC5D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAS,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAE,EAAE,CAAC,CAAC,CAAC;IACvH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IACtH,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;KAC9H,CAAC;AACJ,CAAC"}

package/dist/flow-eval-error.d.ts

@@ -0,0 +1,7 @@
+export type FlowEvalErrorCode = 'invalid_suite' | 'invalid_baseline' | 'version_mismatch' | 'suite_mismatch' | 'invalid_options' | 'unreadable_flow';
+/** The evaluation itself is invalid. Case failures are verdicts in the report, never this. */
+export declare class FlowEvalError extends Error {
+    readonly code: FlowEvalErrorCode;
+    constructor(code: FlowEvalErrorCode, message: string);
+}
+//# sourceMappingURL=flow-eval-error.d.ts.map

package/dist/flow-eval-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-eval-error.d.ts","sourceRoot":"","sources":["../src/flow-eval-error.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB,eAAe,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;AAEzH,8FAA8F;AAC9F,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB;gBAAvB,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM;CAI9D"}

package/dist/flow-eval-error.js

@@ -0,0 +1,10 @@
+/** The evaluation itself is invalid. Case failures are verdicts in the report, never this. */
+export class FlowEvalError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'FlowEvalError';
+    }
+}
+//# sourceMappingURL=flow-eval-error.js.map

package/dist/flow-eval-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-eval-error.js","sourceRoot":"","sources":["../src/flow-eval-error.ts"],"names":[],"mappings":"AAGA,8FAA8F;AAC9F,MAAM,OAAO,aAAc,SAAQ,KAAK;IACjB;IAArB,YAAqB,IAAuB,EAAE,OAAe;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAmB;QAE1C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF"}

package/dist/flow-eval-gate.d.ts

@@ -0,0 +1,15 @@
+import type { FlowEvalCaseResult, FlowEvalOutcome, FlowEvalReport } from './flow-eval-report.js';
+import { type FlowEvalSuite } from './flow-eval-suite.js';
+/** The part of a prior report a regression check reads, validated. */
+export interface FlowEvalBaseline {
+    suiteSha256: string;
+    outcomes: ReadonlyMap<string, FlowEvalOutcome>;
+}
+/**
+ * Validate an untrusted prior report (parsed JSON) before any case runs, so a
+ * malformed baseline is refused before an evaluation spends anything.
+ */
+export declare function parseFlowEvalBaseline(value: unknown): FlowEvalBaseline;
+export declare function summarizeFlowEval(results: readonly FlowEvalCaseResult[]): FlowEvalReport['summary'];
+export declare function decideFlowEvalGate(suite: FlowEvalSuite, results: readonly FlowEvalCaseResult[], summary: FlowEvalReport['summary'], baseline: FlowEvalBaseline | undefined): FlowEvalReport['gate'];
+//# sourceMappingURL=flow-eval-gate.d.ts.map

package/dist/flow-eval-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-eval-gate.d.ts","sourceRoot":"","sources":["../src/flow-eval-gate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEpE,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAChD;AAID;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAiBtE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAYnG;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,EAClC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GACrC,cAAc,CAAC,MAAM,CAAC,CAkCxB"}

package/dist/flow-eval-gate.js

@@ -0,0 +1,102 @@
+// The verdict of a flow evaluation: case results aggregated into a summary,
+// and the summary judged against the suite's thresholds and a baseline.
+import { FlowEvalError } from './flow-eval-error.js';
+import { isRecord } from './flow-eval-suite.js';
+const OUTCOMES = ['pass', 'fail', 'error'];
+/**
+ * Validate an untrusted prior report (parsed JSON) before any case runs, so a
+ * malformed baseline is refused before an evaluation spends anything.
+ */
+export function parseFlowEvalBaseline(value) {
+    const fail = (message) => { throw new FlowEvalError('invalid_baseline', message); };
+    if (!isRecord(value) || value['kind'] !== 'flows.eval.report')
+        fail('Baseline is not a flows eval report.');
+    const report = value;
+    const suite = report['suite'];
+    if (!isRecord(suite) || typeof suite['sha256'] !== 'string')
+        fail('Baseline report names no suite sha256.');
+    if (!Array.isArray(report['cases']))
+        fail('Baseline report has no `cases` array.');
+    const outcomes = new Map();
+    for (const [index, entry] of report['cases'].entries()) {
+        if (!isRecord(entry) || typeof entry['id'] !== 'string' || !OUTCOMES.includes(entry['outcome'])) {
+            fail(`Baseline cases[${index}] needs a string \`id\` and an \`outcome\` of pass, fail or error.`);
+        }
+        const item = entry;
+        if (outcomes.has(item['id']))
+            fail(`Baseline case id "${item['id']}" is not unique.`);
+        outcomes.set(item['id'], item['outcome']);
+    }
+    return { suiteSha256: suite['sha256'], outcomes };
+}
+export function summarizeFlowEval(results) {
+    const passed = results.filter(r => r.outcome === 'pass').length;
+    const failed = results.filter(r => r.outcome === 'fail').length;
+    const errored = results.filter(r => r.outcome === 'error').length;
+    const costs = results.map(r => r.costUsd);
+    const latencies = results.map(r => r.latencyMs).sort((a, b) => a - b);
+    return {
+        total: results.length, passed, failed, errored,
+        passRate: results.length === 0 ? 0 : passed / results.length,
+        totalCostUsd: costs.some(c => c === null) ? null : fromNanos(sumNanos(costs)),
+        latencyMs: { p50: percentile(latencies, 0.5), p95: percentile(latencies, 0.95), max: latencies.at(-1) ?? 0 },
+    };
+}
+export function decideFlowEvalGate(suite, results, summary, baseline) {
+    const reasons = [];
+    const thresholds = suite.thresholds ?? {};
+    const minPassRate = thresholds.minPassRate ?? 1;
+    if (summary.passRate < minPassRate) {
+        reasons.push(`pass rate ${formatRate(summary.passRate)} is below ${formatRate(minPassRate)} (${summary.passed}/${summary.total})`);
+    }
+    // Fails closed regardless of minPassRate: an errored case was never judged,
+    // so a tolerance for quality misses must not absorb it.
+    if (summary.errored > 0)
+        reasons.push(`${summary.errored} case(s) errored before a verdict`);
+    if (thresholds.maxTotalCostUsd !== undefined) {
+        // Decimal, not binary: costs and the ceiling are compared in whole
+        // nanodollars, so 0.1 + 0.2 meets a 0.3 ceiling exactly and a total a
+        // fraction of a cent over it still fails. No display rounding is involved.
+        const costs = results.map(r => r.costUsd);
+        if (costs.some(c => c === null))
+            reasons.push(`total cost is unknown; the suite caps it at $${thresholds.maxTotalCostUsd}`);
+        else {
+            const total = sumNanos(costs);
+            if (total > toNanos(thresholds.maxTotalCostUsd)) {
+                reasons.push(`total cost $${fromNanos(total)} exceeds $${thresholds.maxTotalCostUsd}`);
+            }
+        }
+    }
+    if (thresholds.maxP95LatencyMs !== undefined && summary.latencyMs.p95 > thresholds.maxP95LatencyMs) {
+        reasons.push(`p95 latency ${summary.latencyMs.p95}ms exceeds ${thresholds.maxP95LatencyMs}ms`);
+    }
+    const regressions = [];
+    if (baseline !== undefined) {
+        for (const result of results) {
+            if (baseline.outcomes.get(result.id) === 'pass' && result.outcome !== 'pass')
+                regressions.push(result.id);
+        }
+        if (regressions.length > 0)
+            reasons.push(`${regressions.length} case(s) regressed against the baseline: ${regressions.join(', ')}`);
+    }
+    return { pass: reasons.length === 0, reasons, regressions };
+}
+function percentile(sorted, p) {
+    if (sorted.length === 0)
+        return 0;
+    return sorted[Math.min(sorted.length - 1, Math.max(0, Math.ceil(p * sorted.length) - 1))];
+}
+/** Dollars as whole nanodollars: exact for any cost a run reports, far below a cent. */
+function toNanos(usd) {
+    return BigInt(Math.round(usd * 1e9));
+}
+function sumNanos(costs) {
+    return costs.reduce((sum, cost) => sum + toNanos(cost), 0n);
+}
+function fromNanos(nanos) {
+    return Number(nanos) / 1e9;
+}
+function formatRate(rate) {
+    return `${Math.round(rate * 1000) / 10}%`;
+}
+//# sourceMappingURL=flow-eval-gate.js.map

package/dist/flow-eval-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-eval-gate.js","sourceRoot":"","sources":["../src/flow-eval-gate.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wEAAwE;AAExE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,QAAQ,EAAsB,MAAM,sBAAsB,CAAC;AAQpE,MAAM,QAAQ,GAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE9D;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,mBAAmB;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC5G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAK,MAAM,CAAC,OAAO,CAAe,CAAC,OAAO,EAAE,EAAE,CAAC;QACtE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAW,CAAC,EAAE,CAAC;YAC1G,IAAI,CAAC,kBAAkB,KAAK,oEAAoE,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,IAAI,GAAG,KAAgC,CAAC;QAC9C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAW,CAAC;YAAE,IAAI,CAAC,qBAAqB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAChG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAW,EAAE,IAAI,CAAC,SAAS,CAAoB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,WAAW,EAAG,KAAiC,CAAC,QAAQ,CAAW,EAAE,QAAQ,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAsC;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;QAC9C,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;QAC5D,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAiB,CAAC,CAAC;QACzF,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;KAC7G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAoB,EACpB,OAAsC,EACtC,OAAkC,EAClC,QAAsC;IAEtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,IAAI,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,UAAU,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IACrI,CAAC;IACD,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,mCAAmC,CAAC,CAAC;IAC7F,IAAI,UAAU,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC7C,mEAAmE;QACnE,sEAAsE;QACtE,2EAA2E;QAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,gDAAgD,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;aACvH,CAAC;YACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAiB,CAAC,CAAC;YAC1C,IAAI,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,eAAe,SAAS,CAAC,KAAK,CAAC,aAAa,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,GAAG,UAAU,CAAC,eAAe,EAAE,CAAC;QACnG,OAAO,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,SAAS,CAAC,GAAG,cAAc,UAAU,CAAC,eAAe,IAAI,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;gBAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,4CAA4C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtI,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,MAAyB,EAAE,CAAS;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;AAC7F,CAAC;AAED,wFAAwF;AACxF,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB;IACxC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;AAC5C,CAAC"}