@sema-agent/core 7.16.0 → 7.17.1

package/dist/orchestration/workflow-types.js

@@ -1,3 +1,5 @@
+export const PARK_TRUTH_UNREADABLE_REASONS = ["store_threw", "record_missing", "record_not_terminal", "parks_unreadable", "checkpoint_store_threw", "capability_not_armed"];
+export const PARK_NOT_PENDING_STATUSES = ["resolved", "expired", "absent"];
 export class WorkflowBudgetExceededError extends Error {
     spent;
     total;

package/dist/orchestration/workflow.d.ts

@@ -1,7 +1,8 @@
 import type { TSchema } from "typebox";
 import type { InheritedGate, RunnerSelfSeat } from "../core/runner/contracts.js";
-import type { CheckpointToken, ResumeOutcome } from "../core/checkpoint-store.js";
+import type { CheckpointStore, CheckpointToken, ResumeOutcome } from "../core/checkpoint-store.js";
 import type { AgentDefinition, TaskEvent, TaskResult, TaskSpec, ThinkingLevel } from "../core/types.js";
+import { type ParentSpecSeat } from "../core/parent-spec-seat.js";
 import type { WorkflowRunStore } from "../core/workflow-run-store.js";
 import type { WorkflowJournalStore, ResumeClaimArgs } from "../core/workflow-journal-store.js";
 import type { WorkflowRun, WorkflowEvent } from "./workflow-types.js";
@@ -123,9 +124,7 @@ export declare class WorkflowJournalIncompatibleError extends Error {
     readonly fromRunId: string;
     readonly ordinal: number;
     readonly code = "workflow.journal_incompatible";
-    constructor(fromRunId: string, ordinal: number, 
-    /** #642: an alternative reason clause (the parked-row cross-check); absent ⇒ the no-terminal-cause wording. */
-    reason?: string);
+    constructor(fromRunId: string, ordinal: number);
 }
 /**
  * A TRUSTED, run-scoped internal channel carrying the workflow **nesting depth** across a process boundary
@@ -292,11 +291,16 @@ export interface WorkflowRunContext {
  * the checkpoint token the wa* row is parked on (the row's `parkedCheckpointToken`, the redemption key), the
  * caller's decision for it (the same {@link ResumeOutcome} a top-level `runner.resume` takes), and the optional
  * cross-process re-supply of the checkpoint's opaque parent constraints. The token is matched by string equality
- * against the journaled parked entry — an entry whose token no decision names re-parks.
+ * against the parked ordinal's token — an ordinal whose token no entry names re-parks.
+ *
+ * `outcome` is OPTIONAL. `{ token, outcome }` is a DECISION: a pending checkpoint is driven with it; one the store no
+ * longer calls pending is settled (the acknowledgement is implied). `{ token }` alone is an ACKNOWLEDGEMENT: it settles an
+ * ordinal whose checkpoint is resolved / expired / absent as a failed row (`workflow.park_not_pending`) so the script
+ * continues; if the re-read finds the checkpoint pending again it RE-PARKS — an acknowledgement never authorizes a drive.
  */
 export interface WorkflowParkedResume {
     token: CheckpointToken;
-    outcome: ResumeOutcome;
+    outcome?: ResumeOutcome;
     inheritedGate?: InheritedGate;
 }
 export interface RunWorkflowOptions {
@@ -468,9 +472,37 @@ export interface RunWorkflowOptions {
      * parked child on with the caller's decision ({@link parkedResume}). Tighten-only: a park capability,
      * never a widening — the decision stays with a person. REQUIRES {@link store} (the wa* row's durable home;
      * refused loudly at entry without it). Threaded by the Workflow tool from the host's trusted seat; a
-     * directly-started workflow passes its own. NOT call identity.
+     * directly-started workflow passes its own. NOT call identity. REQUIRES {@link checkpointStore} as well: a
+     * durable approval whose checkpoint this workflow cannot read back is a park no resume can prove.
      */
     defaultDurableApproval?: TaskSpec["durableApproval"];
+    /**
+     * The HOST run's parent SPEC seat ({@link import("../core/parent-spec-seat.js").ParentSpecSeat}: principal / oneShot /
+     * clientContext / the frozen question face / the fs-fence widening / envFacts / the declared persistence statement),
+     * applied onto every spawned agent at the launch site AFTER the agentType fold by {@link applyParentSpecSeat} — the
+     * Task delegation lane's one law: a value the child spec carries (script, definition, baseline) WINS, the seat FILLS
+     * an unset one, the two removals (`oneShot: true`, `memoryPersistenceCapable: false`) land unconditionally. Threaded
+     * by the Workflow tool from the host's seat; a directly-started workflow passes its own. NOT call identity (host
+     * wiring, like the checkpoint seat). Absent ⇒ nothing is applied. The seat the Workflow tool threads carries NO
+     * `onQuestion`: the tool strips the host's per-request face (every agent it spawns outlives the launching request)
+     * and says so through {@link questionFaceStripped}; a directly-started workflow passes what its own lifetime allows.
+     */
+    parentSpecSeat?: ParentSpecSeat;
+    /** The engine stripped the spawn turn's per-request question face from the seat above (pair-produced with the strip,
+     *  `stripSpawnTurnQuestionFace`); rides every spawned agent's internals as `RunInternals.questionFaceStripped` — the
+     *  wiring manifest's `question.wired: "stripped_bg_lane"` and the posture door's exemption read it. */
+    questionFaceStripped?: true;
+    /**
+     * The checkpoint store this run's children park in — the RESOLVED seat object itself (the same value the Workflow
+     * tool injects onto every child spec; a directly-started workflow passes the store its children park in). Its
+     * presence ARMS the park lane: a resume then proves every parked ordinal against `get(token)` before anything is
+     * dispatched (`WorkflowRun.parks` supplies the keys), and a child whose effective `checkpointStore` is a DIFFERENT
+     * object is refused at spawn (`config.invalid_checkpoint_store` — identity, not duck-typing: a caller-built `{get}`
+     * wrapper is not the seat). REQUIRES {@link store} (the park's durable row). Absent ⇒ the lane is not armed: a
+     * resume of a run that recorded parks is refused (`workflow.park_truth_unreadable` / `capability_not_armed`), a run
+     * without parks resumes as before. NOT call identity (deployment wiring, like the store seats).
+     */
+    checkpointStore?: CheckpointStore;
     /**
      * #642 — the decisions a resume ({@link resumeFromRunId}) carries for PARKED ordinals of the prior run: at
      * an ordinal whose journal entry is `parked` (a matching call key), the run drives the parked child's own