@rulvar/cli 1.46.0 → 1.47.0

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { r as runCli, t as processIo } from "./io-BXU6hEnw.js";
+import { r as runCli, t as processIo } from "./io-BK1hP3Od.js";
 import { sanitizeTerminalText } from "@rulvar/core";
 import { inspect } from "node:util";
 //#region src/cli.ts

package/dist/index.js

@@ -1,4 +1,4 @@
-import { _ as looksLikeFile, a as resumeCommand, c as driveRun, d as attachProgress, f as renderEventLine, g as loadWorkflowModule, h as loadCliConfig, i as inspectCommand, l as reportOutcome, m as assembleEngine, n as HELP, o as runCommand, p as DEFAULT_STORE_DIR, r as runCli, s as runsLsCommand, t as processIo, u as strictExitCode } from "./io-BXU6hEnw.js";
+import { _ as looksLikeFile, a as resumeCommand, c as driveRun, d as attachProgress, f as renderEventLine, g as loadWorkflowModule, h as loadCliConfig, i as inspectCommand, l as reportOutcome, m as assembleEngine, n as HELP, o as runCommand, p as DEFAULT_STORE_DIR, r as runCli, s as runsLsCommand, t as processIo, u as strictExitCode } from "./io-BK1hP3Od.js";
 import { ConfigError, InvalidResolutionError, JournalCompatibilityError, LeaseHeldError, Replayer, RulvarError, buildDeriverRegistry, costReportFromJournal, maskSecrets, normalizeEntry, readRunMeta, scanJournalCompatibility, validateSchemaSpec } from "@rulvar/core";
 //#region src/server.ts
 /**
@@ -381,14 +381,16 @@ function createServer(options) {
 			}
 			const outcome = await run.handle.resolveExternal(key, value);
 			let resumed = false;
-			if (outcome.applied && settledSuspended) {
-				const workflow = workflows[run.workflowName];
-				if (workflow === void 0) return json(409, { error: {
-					code: "config",
-					message: `resolution applied, but workflow '${run.workflowName}' is no longer registered; resume it from a worker or a process with the registration`
-				} });
-				attach(run, engine.resume(run.runId, workflow, { args: run.args }));
-				resumed = true;
+			if (outcome.applied && outcome.woke !== true) {
+				if ((settledSuspended ? run.outcome : await run.handle.result).status === "suspended") {
+					const workflow = workflows[run.workflowName];
+					if (workflow === void 0) return json(409, { error: {
+						code: "config",
+						message: `resolution applied, but workflow '${run.workflowName}' is no longer registered; resume it from a worker or a process with the registration`
+					} });
+					attach(run, engine.resume(run.runId, workflow, { args: run.args }));
+					resumed = true;
+				}
 			}
 			return json(200, {
 				...outcome,

package/dist/{io-BXU6hEnw.js → io-BK1hP3Od.js}

@@ -1,4 +1,4 @@
-import { ConfigError, FileModelKnowledgeStore, INBOX_PROPOSAL_TTL_DAYS, JsonlFileStore, claimExpired, claimExpiry, compilePermissionPreset, costReportFromJournal, createEngine, hashRunArgs, parseModelRef, priceUsdOf, proposalStatement, readRunMeta, remeasureQueue, resolvePricing, runProfile, sanitizeTerminalText } from "@rulvar/core";
+import { ConfigError, FileModelKnowledgeStore, INBOX_PROPOSAL_TTL_DAYS, JsonlFileStore, LeaseHeldError, auditRuns, claimExpired, claimExpiry, compilePermissionPreset, costReportFromJournal, createEngine, hashRunArgs, parseModelRef, priceUsdOf, proposalStatement, readRunMeta, reconcileRunMeta, remeasureQueue, resolvePricing, runProfile, sanitizeTerminalText } from "@rulvar/core";
 import { join, resolve } from "node:path";
 import { existsSync, statSync } from "node:fs";
 import { pathToFileURL } from "node:url";
@@ -443,6 +443,11 @@ const GRAMMAR = {
 		flags: [STORE],
 		note: "(no aliases in v1)"
 	},
+	"runs audit": {
+		command: "runs audit",
+		positionals: [],
+		flags: [STORE, { name: "repair" }]
+	},
 	inspect: {
 		command: "inspect",
 		positionals: ["<runId>"],
@@ -514,6 +519,8 @@ const GRAMMAR = {
 };
 /** The kb dispatch line: subcommands carry their own grammar entries. */
 const KB_FAMILY_USAGE = "usage: rulvar kb <list | inbox | gate | sweep> (no aliases in v1)";
+/** The runs dispatch line: subcommands carry their own grammar entries. */
+const RUNS_FAMILY_USAGE = "usage: rulvar runs <ls | audit> (no aliases in v1)";
 function renderFlags(flags) {
 	const tokens = [];
 	const renderedGroups = /* @__PURE__ */ new Set();
@@ -554,6 +561,7 @@ function helpCommandLines() {
 		GRAMMAR.run,
 		GRAMMAR.resume,
 		GRAMMAR["runs ls"],
+		GRAMMAR["runs audit"],
 		GRAMMAR.inspect,
 		GRAMMAR.plan
 	];
@@ -854,6 +862,60 @@ async function resumeCommand(argv, context) {
 	const base = reportOutcome(outcome, context.io);
 	return parsed.values.strict === true ? strictExitCode(outcome, base, context.io) : base;
 }
+/**
+* The stranded run probe and reconciler (fenced run state RFC, phase
+* 3): audits every run the catalog lists against its journal, prints
+* the divergences worker sweeps can never see, and with --repair
+* rewrites the sound ones from the journal (under a brief lease when
+* the store is leasable, so a live owner is never raced). Exit 0 when
+* the catalog ends clean; exit 1 while any divergence remains.
+*/
+async function runsAuditCommand(argv, context) {
+	const parsed = parseCommand(GRAMMAR["runs audit"], argv);
+	const store = parsed.values.store;
+	const repair = parsed.values.repair === true;
+	const assembled = assembleEngine({
+		config: await loadCliConfig(context.cwd),
+		...store === void 0 ? {} : { storePath: store },
+		cwd: context.cwd
+	});
+	const audits = await auditRuns(assembled.store);
+	if (audits.length === 0) {
+		context.io.err("every run is consistent with its journal");
+		return 0;
+	}
+	let remaining = 0;
+	for (const audit of audits) {
+		const line = `${audit.runId} ${audit.verdict}: ${audit.reason}`;
+		if (!repair || audit.repairTo === void 0) {
+			context.io.out(sanitizeTerminalText(line));
+			remaining += 1;
+			continue;
+		}
+		const leasable = assembled.store;
+		let lease;
+		if (typeof leasable.acquire === "function") try {
+			lease = await leasable.acquire(audit.runId, `runs-audit-${String(process.pid)}`);
+		} catch (thrown) {
+			if (thrown instanceof LeaseHeldError) {
+				context.io.out(sanitizeTerminalText(`${line} (leased by a live owner, skipped)`));
+				remaining += 1;
+				continue;
+			}
+			throw thrown;
+		}
+		try {
+			const result = await reconcileRunMeta(assembled.store, audit.runId, { ...lease === void 0 ? {} : { lease } });
+			const wrote = result.audit.repairTo;
+			context.io.out(sanitizeTerminalText(result.repaired ? `${line} (repaired to '${String(wrote)}')` : `${line} (not repaired)`));
+			if (!result.repaired) remaining += 1;
+		} finally {
+			if (lease !== void 0 && typeof leasable.release === "function") await leasable.release(lease);
+		}
+	}
+	context.io.err(remaining === 0 ? "every divergence repaired" : `${String(remaining)} divergence(s) remain; suspect verdicts need an operator (https://docs.rulvar.com/contributing/rfc-fenced-run-state)`);
+	return remaining === 0 ? 0 : 1;
+}
 async function runsLsCommand(argv, context) {
 	const store = parseCommand(GRAMMAR["runs ls"], argv).values.store;
 	const metas = await assembleEngine({
@@ -1364,6 +1426,10 @@ Engine assembly: adapters, defaults, and the workflow registry come from
 rulvar.config.mjs in the working directory (default export
 { engineOptions?, workflows? }) or from the workflow module's named
 exports. --store selects the JsonlFileStore directory (default .rulvar).
+runs audit compares every run's meta row against its journal and names
+the divergences worker sweeps cannot see (a stranded run's terminal
+meta over live journal work); --repair rewrites the sound ones from
+the journal under a brief lease, exit 1 while any divergence remains.
 plan asks the planner model (role plan) to write a workflow script,
 lints and self-repairs it, then runs it in the worker sandbox; --dry-run
 prints the accepted script without running. Both stages are paid runs
@@ -1394,8 +1460,9 @@ async function runCli(argv, options) {
 			case "resume": return await resumeCommand(rest, context);
 			case "runs": {
 				const [sub, ...subRest] = rest;
-				if (sub !== "ls") throw new ConfigError(usageOf(GRAMMAR["runs ls"]));
-				return await runsLsCommand(subRest, context);
+				if (sub === "ls") return await runsLsCommand(subRest, context);
+				if (sub === "audit") return await runsAuditCommand(subRest, context);
+				throw new ConfigError(RUNS_FAMILY_USAGE);
 			}
 			case "inspect": return await inspectCommand(rest, context);
 			case "plan": return await planCommand(rest, context);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/cli",
-  "version": "1.46.0",
+  "version": "1.47.0",
   "description": "Rulvar shell: run/resume/runs/inspect/plan/kb commands, TUI progress, createServer, createWorker, OTel exporter.",
   "type": "module",
   "license": "Apache-2.0",
@@ -22,17 +22,17 @@
     "access": "public"
   },
   "dependencies": {
-    "@rulvar/core": "1.46.0"
+    "@rulvar/core": "1.47.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.0",
     "tsdown": "^0.22.3",
     "typescript": "~6.0.3",
-    "@rulvar/testing": "1.46.0",
-    "@rulvar/store-sqlite": "1.46.0",
-    "@rulvar/planner": "1.46.0",
-    "@rulvar/evals": "1.46.0",
-    "@rulvar/plan": "1.46.0"
+    "@rulvar/testing": "1.47.0",
+    "@rulvar/plan": "1.47.0",
+    "@rulvar/store-sqlite": "1.47.0",
+    "@rulvar/evals": "1.47.0",
+    "@rulvar/planner": "1.47.0"
   },
   "bin": {
     "rulvar": "./dist/cli.js"