@skastr0/prism-darwin-x64 0.3.5 → 0.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skastr0/prism-darwin-x64",
-  "version": "0.3.5",
+  "version": "0.4.2",
   "type": "module",
   "description": "Prism standalone CLI binary for macOS x64.",
   "license": "MIT",
@@ -17,10 +17,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.29.0",
     "@opencode-ai/plugin": "^1.15.13",
     "@opentui/core-darwin-x64": "0.4.1",
-    "@skastr0/prism-sdk": "0.3.5",
+    "@skastr0/prism-sdk": "0.4.2",
     "effect": "^3.21.1",
     "typescript": "^5.8.3",
     "zod": "4.4.3"

package/types/content-hash.d.ts

@@ -1,15 +1 @@
 export declare const computeContentHash: (content: string | Uint8Array) => string;
-/**
- * Normalizes the dynamic `mcpServers[*].url` authority (host:port) out of a
- * generated MCP HTTP config before hashing, so an owner daemon rebinding to a
- * different ephemeral port is never mistaken for content drift. Detection is
- * purely structural (`{ mcpServers: { url: "http(s)://..." } }`); content that
- * does not match this shape is returned unchanged.
- */
-export declare const normalizeMcpHttpConfigForHash: (content: string) => string;
-/**
- * Content hash for a generated MCP HTTP config owned file. Equal for two
- * renders that differ only in the dynamic port/url authority; still differs
- * for a genuine content change (e.g. an added/removed server entry).
- */
-export declare const computeMcpHttpConfigContentHash: (content: string) => string;

package/types/index.d.ts

@@ -562,20 +562,4 @@ export declare const hookMatcher: {
         readonly canonical: (ref: string) => HookCanonicalToolMatcherDefinition;
     };
 };
-/** Transitional identity wrapper. The canonical public source type is `AgentSource`. */
-export declare const defineAgent: <T extends AgentSource>(agent: T) => T;
-/** Transitional identity wrapper. The canonical public source type is `TraitSource`. */
-export declare const defineTrait: <T extends TraitSource>(trait: T) => T;
-/** Transitional identity wrapper. The canonical public source type is `OrbitSource`. */
-export declare const defineOrbit: <T extends OrbitSource>(orbit: T) => T;
-/** Transitional identity wrapper. The canonical public source type is `ToolSource`. */
-export declare const defineTool: <T extends ToolSource>(tool: T) => T;
-/** Transitional identity wrapper. The canonical public source type is `ToolspaceSource`. */
-export declare const defineToolspace: <T extends ToolspaceSource>(toolspace: T) => T;
-/** Transitional identity wrapper. The canonical public source type is `ModelspaceSource`. */
-export declare const defineModelspace: <T extends ModelspaceSource>(modelspace: T) => T;
-/** Transitional identity wrapper. The canonical public source type is `SkillspaceSource`. */
-export declare const defineSkillspace: <T extends SkillspaceSource>(skillspace: T) => T;
-/** Transitional identity wrapper. The canonical public source type is `HookSource`. */
-export declare const defineHook: <E extends HookEvent, T extends HookSource<E>>(hook: T) => T;
 export type { ToolRuntimeContext, ToolRuntimeCost } from "./compile/runtime/schema-bridge";

package/types/lowerer-capabilities.d.ts

@@ -10,9 +10,9 @@ export interface CompileTargetCapabilities {
     readonly hooks: CompileSurfaceSupport;
     readonly skillPermissions: SkillPermissionSupport;
 }
-export declare const LOWERER_SURFACE_IDS: readonly ["pluginBundle", "rules", "commands", "agents", "skills", "generatedTools", "hooks", "mcpConfig", "agentConfig"];
+export declare const LOWERER_SURFACE_IDS: readonly ["pluginBundle", "rules", "commands", "agents", "skills", "generatedTools", "hooks", "agentConfig"];
 export type LowererSurfaceId = (typeof LOWERER_SURFACE_IDS)[number];
-export declare const LOWERER_SURFACE_KINDS: readonly ["native-plugin-api", "native-plugin-bundle", "generated-mcp", "markdown-file", "direct-file", "config-patch", "unsupported"];
+export declare const LOWERER_SURFACE_KINDS: readonly ["native-plugin-api", "native-plugin-bundle", "markdown-file", "direct-file", "config-patch", "unsupported"];
 export type LowererSurfaceKind = (typeof LOWERER_SURFACE_KINDS)[number];
 export type HarnessFamily = "coding-harness" | "claw-harness";
 export interface LowererSurfaceCapability {
@@ -68,20 +68,15 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly summary: "Compile bundles targeted skills and orbit skills as Agent Skills.";
             };
             readonly generatedTools: {
-                readonly kind: "generated-mcp";
-                readonly path: "<prism-home>/runtime/mcp/<plugin>/server.mjs";
-                readonly summary: "Canonical tools lower to the canonical PRISM_HOME union MCP server referenced from the plugin .mcp.json.";
+                readonly kind: "direct-file";
+                readonly path: "<prism-home>/runtime/tools/<plugin>/runtime.mjs";
+                readonly summary: "Canonical tools lower to the CLI runtime; agents invoke via `prism tools invoke`.";
             };
             readonly hooks: {
                 readonly kind: "native-plugin-bundle";
                 readonly path: "<generated-plugin>/hooks/hooks.json";
                 readonly summary: "Hooks are bundled in Claude Code's plugin hook layout.";
             };
-            readonly mcpConfig: {
-                readonly kind: "native-plugin-bundle";
-                readonly path: "<generated-plugin>/.mcp.json";
-                readonly summary: "MCP config is plugin-local, not a global settings patch.";
-            };
             readonly agentConfig: LowererSurfaceCapability;
         };
     };
@@ -126,7 +121,6 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly path: "<generated-plugin>/dist/server.mjs";
                 readonly summary: "Hooks lower through the OpenCode plugin API.";
             };
-            readonly mcpConfig: LowererSurfaceCapability;
             readonly agentConfig: {
                 readonly kind: "config-patch";
                 readonly path: "<opencode-root>/opencode.json#agent.<name>";
@@ -151,7 +145,6 @@ export declare const LOWERER_CAPABILITIES: {
             };
             readonly generatedTools: LowererSurfaceCapability;
             readonly hooks: LowererSurfaceCapability;
-            readonly mcpConfig: LowererSurfaceCapability;
             readonly agentConfig: LowererSurfaceCapability;
         };
         readonly notes: readonly ["OpenClaw remains Prism skills-only for now."];
@@ -172,20 +165,15 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly summary: "Install and compile write Hermes skill folders.";
             };
             readonly generatedTools: {
-                readonly kind: "generated-mcp";
-                readonly path: "<prism-home>/runtime/mcp/<plugin>/server.mjs";
-                readonly summary: "Canonical tools lower to the canonical PRISM_HOME union MCP server referenced from config.yaml.";
+                readonly kind: "direct-file";
+                readonly path: "<prism-home>/runtime/tools/<plugin>/runtime.mjs";
+                readonly summary: "Canonical tools lower to the CLI runtime; agents invoke via `prism tools invoke`.";
             };
             readonly hooks: {
                 readonly kind: "config-patch";
                 readonly path: "<hermes-root>/config.yaml#hooks";
                 readonly summary: "Compile patches managed Hermes hook entries and wrapper files.";
             };
-            readonly mcpConfig: {
-                readonly kind: "config-patch";
-                readonly path: "<hermes-root>/config.yaml#mcp_servers";
-                readonly summary: "Compile patches the Hermes MCP server map.";
-            };
             readonly agentConfig: LowererSurfaceCapability;
         };
     };
@@ -217,20 +205,15 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly summary: "Install and compile write Agent Skill folders.";
             };
             readonly generatedTools: {
-                readonly kind: "generated-mcp";
-                readonly path: "<prism-home>/runtime/mcp/<plugin>/server.mjs";
-                readonly summary: "Canonical tools lower to the canonical PRISM_HOME union MCP server referenced from config.toml.";
+                readonly kind: "direct-file";
+                readonly path: "<prism-home>/runtime/tools/<plugin>/runtime.mjs";
+                readonly summary: "Canonical tools lower to the CLI runtime; agents invoke via `prism tools invoke`.";
             };
             readonly hooks: {
                 readonly kind: "config-patch";
                 readonly path: "<codex-root>/config.toml#hooks";
                 readonly summary: "Compile patches managed Codex hook entries and wrapper files.";
             };
-            readonly mcpConfig: {
-                readonly kind: "config-patch";
-                readonly path: "<codex-root>/config.toml#mcp_servers";
-                readonly summary: "Compile patches generated MCP server tables.";
-            };
             readonly agentConfig: {
                 readonly kind: "direct-file";
                 readonly path: "<codex-root>/agents/<name>.toml";
@@ -266,20 +249,15 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly summary: "Compile bundles targeted skills and orbit skills.";
             };
             readonly generatedTools: {
-                readonly kind: "generated-mcp";
-                readonly path: "<prism-home>/runtime/mcp/<plugin>/server.mjs";
-                readonly summary: "Canonical tools lower to the canonical PRISM_HOME union MCP server referenced by plugin config.";
+                readonly kind: "direct-file";
+                readonly path: "<prism-home>/runtime/tools/<plugin>/runtime.mjs";
+                readonly summary: "Canonical tools lower to the CLI runtime; agents invoke via `prism tools invoke`.";
             };
             readonly hooks: {
                 readonly kind: "native-plugin-bundle";
                 readonly path: "<generated-plugin>/hooks.json";
                 readonly summary: "Hooks are bundled in Antigravity plugin format.";
             };
-            readonly mcpConfig: {
-                readonly kind: "native-plugin-bundle";
-                readonly path: "<generated-plugin>/mcp_config.json";
-                readonly summary: "MCP config is plugin-local for generated plugin bundles.";
-            };
             readonly agentConfig: {
                 readonly kind: "native-plugin-bundle";
                 readonly path: "<generated-plugin>/agents/";
@@ -319,20 +297,15 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly summary: "Compile bundles targeted plugin skills and orbit skills into the generated Kimi plugin.";
             };
             readonly generatedTools: {
-                readonly kind: "generated-mcp";
-                readonly path: "<prism-home>/runtime/mcp/<plugin>/server.mjs";
-                readonly summary: "Canonical tools lower to the canonical PRISM_HOME union MCP server declared by the Kimi plugin manifest.";
+                readonly kind: "direct-file";
+                readonly path: "<prism-home>/runtime/tools/<plugin>/runtime.mjs";
+                readonly summary: "Canonical tools lower to the CLI runtime; agents invoke via `prism tools invoke`.";
             };
             readonly hooks: {
                 readonly kind: "config-patch";
                 readonly path: "<kimi-root>/config.toml#hooks";
                 readonly summary: "Hooks lower to managed [[hooks]] config entries plus generated wrapper scripts.";
             };
-            readonly mcpConfig: {
-                readonly kind: "native-plugin-bundle";
-                readonly path: "<generated-plugin>/kimi.plugin.json#mcpServers + <kimi-root>/plugins/installed.json";
-                readonly summary: "MCP config is plugin-local and enabled through Kimi's installed plugin record; Prism patches config.toml only for hooks.";
-            };
             readonly agentConfig: {
                 readonly kind: "native-plugin-bundle";
                 readonly path: "<generated-plugin>/skills/prism-agent-<name>/SKILL.md";
@@ -382,7 +355,6 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly path: "<generated-plugin>.ts";
                 readonly summary: "Supported Prism hooks lower to Amp amp.on(...) plugin event handlers; session.end fails closed because Amp has no native session-end event.";
             };
-            readonly mcpConfig: LowererSurfaceCapability;
             readonly agentConfig: LowererSurfaceCapability;
         };
         readonly notes: readonly ["Amp generated commands, tools, and supported hooks use the native plugin API; compiled agents currently lower as role-skill guidance.", "Amp exposes session.start, tool.call, tool.result, agent.start, and agent.end plugin events; Prism does not map portable session.end to agent.end."];
@@ -415,19 +387,14 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly summary: "Install writes Agent Skill folders.";
             };
             readonly generatedTools: {
-                readonly kind: "generated-mcp";
-                readonly path: "<prism-home>/runtime/mcp/<plugin>/server.mjs";
-                readonly summary: "Canonical tools lower to the canonical PRISM_HOME union MCP server referenced by Cursor mcp.json.";
+                readonly kind: "direct-file";
+                readonly path: "<prism-home>/runtime/tools/<plugin>/runtime.mjs";
+                readonly summary: "Canonical tools lower to the CLI runtime; agents invoke via `prism tools invoke`.";
             };
             readonly hooks: LowererSurfaceCapability;
-            readonly mcpConfig: {
-                readonly kind: "config-patch";
-                readonly path: "<cursor-root>/mcp.json#mcpServers";
-                readonly summary: "Compile patches a compiler-owned Cursor MCP server entry.";
-            };
             readonly agentConfig: LowererSurfaceCapability;
         };
-        readonly notes: readonly ["Cursor compile support is tools-only for now; compiled agents, orbits, hooks, and skill permission visibility remain unsupported.", "Cursor command artifacts install through a local plugin bundle under ~/.cursor/plugins/local so Prism uses Cursor's native command discovery instead of direct command files.", "Cursor Agent Skills are docs-backed under .cursor/skills and ~/.cursor/skills, so Prism keeps install-phase skills direct.", "Cursor IDE and CLI share the same mcp.json contract."];
+        readonly notes: readonly ["Cursor compile support is tools-only for now; compiled agents, orbits, hooks, and skill permission visibility remain unsupported.", "Cursor command artifacts install through a local plugin bundle under ~/.cursor/plugins/local so Prism uses Cursor's native command discovery instead of direct command files.", "Cursor Agent Skills are docs-backed under .cursor/skills and ~/.cursor/skills, so Prism keeps install-phase skills direct.", "Cursor canonical tools are CLI-only (`prism tools invoke`); no mcp.json patch is emitted."];
     };
     readonly "factory-droid": {
         readonly harness: "factory-droid";
@@ -461,20 +428,15 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly summary: "Compiled bundles own targeted skills; skills-only plugins still install direct skills.";
             };
             readonly generatedTools: {
-                readonly kind: "generated-mcp";
-                readonly path: "<prism-home>/runtime/mcp/<plugin>/server.mjs";
-                readonly summary: "Canonical tools lower to the canonical PRISM_HOME union MCP server referenced by the plugin mcp.json.";
+                readonly kind: "direct-file";
+                readonly path: "<prism-home>/runtime/tools/<plugin>/runtime.mjs";
+                readonly summary: "Canonical tools lower to the CLI runtime; agents invoke via `prism tools invoke`.";
             };
             readonly hooks: {
                 readonly kind: "native-plugin-bundle";
                 readonly path: "<generated-plugin>/hooks/hooks.json";
                 readonly summary: "Hooks are bundled in Factory plugin format.";
             };
-            readonly mcpConfig: {
-                readonly kind: "native-plugin-bundle";
-                readonly path: "<generated-plugin>/mcp.json";
-                readonly summary: "MCP config is plugin-local; Prism does not patch settings.json.";
-            };
             readonly agentConfig: {
                 readonly kind: "native-plugin-bundle";
                 readonly path: "<generated-plugin>/droids/";
@@ -523,7 +485,6 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly path: "<generated-package>/extensions/prism-extension.js and <generated-package>/hooks/";
                 readonly summary: "Hooks lower through Pi extension events and generated wrapper files.";
             };
-            readonly mcpConfig: LowererSurfaceCapability;
             readonly agentConfig: {
                 readonly kind: "markdown-file";
                 readonly path: "~/.pi/agents/<name>.md or .pi/agents/<name>.md";
@@ -532,6 +493,55 @@ export declare const LOWERER_CAPABILITIES: {
         };
         readonly notes: readonly ["Pi packages are referenced from settings.json#packages; project scope uses .pi/settings.json.", "Compiled Pi agents use pi-agents markdown discovery: ~/.pi/agents globally and nearest .pi/agents in project scope."];
     };
+    readonly omp: {
+        readonly harness: "omp";
+        readonly family: "coding-harness";
+        readonly workflowWorker: true;
+        readonly compile: CompileTargetCapabilities;
+        readonly surfaces: {
+            readonly pluginBundle: {
+                readonly kind: "native-plugin-bundle";
+                readonly path: "<omp-root>/extensions/prism-generated-<plugin>/";
+                readonly summary: "Compile emits OMP native extensions under the extensions surface.";
+            };
+            readonly rules: {
+                readonly kind: "direct-file";
+                readonly path: "<omp-root>/rules/";
+                readonly summary: "Compile writes OMP native rule files.";
+            };
+            readonly commands: {
+                readonly kind: "direct-file";
+                readonly path: "<omp-root>/commands/";
+                readonly summary: "Compile writes OMP native command files.";
+            };
+            readonly agents: {
+                readonly kind: "direct-file";
+                readonly path: "<omp-root>/agents/";
+                readonly summary: "Compile writes OMP native agent files.";
+            };
+            readonly skills: {
+                readonly kind: "direct-file";
+                readonly path: "<omp-root>/skills/";
+                readonly summary: "Compile writes OMP native skill folders.";
+            };
+            readonly generatedTools: {
+                readonly kind: "native-plugin-api";
+                readonly path: "<omp-root>/extensions/prism-generated-<plugin>/";
+                readonly summary: "Canonical tools lower through OMP's native extension API.";
+            };
+            readonly hooks: {
+                readonly kind: "native-plugin-api";
+                readonly path: "<omp-root>/extensions/prism-generated-<plugin>/";
+                readonly summary: "Hooks lower through OMP's native extension API.";
+            };
+            readonly agentConfig: {
+                readonly kind: "direct-file";
+                readonly path: "<omp-root>/agents/";
+                readonly summary: "OMP agent model bindings and settings live in generated agent files.";
+            };
+        };
+        readonly notes: readonly ["OMP is a distinct harness from Pi and uses ~/.omp/agent globally or .omp project-local.", "OMP does not expose a verified per-agent skill permission surface; permission-only skill access fails closed."];
+    };
     readonly grok: {
         readonly harness: "grok";
         readonly family: "coding-harness";
@@ -560,20 +570,15 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly summary: "Compile bundles targeted skills and orbit skills.";
             };
             readonly generatedTools: {
-                readonly kind: "generated-mcp";
-                readonly path: "<prism-home>/runtime/mcp/<plugin>/server.mjs";
-                readonly summary: "Canonical tools lower to the PRISM_HOME union MCP daemon fronted by the stdio shim.";
+                readonly kind: "direct-file";
+                readonly path: "<prism-home>/runtime/tools/<plugin>/runtime.mjs";
+                readonly summary: "Canonical tools lower to the CLI runtime; agents invoke via `prism tools invoke`.";
             };
             readonly hooks: {
                 readonly kind: "native-plugin-bundle";
                 readonly path: "<generated-plugin>/hooks/hooks.json";
                 readonly summary: "Hooks are bundled in Grok plugin format.";
             };
-            readonly mcpConfig: {
-                readonly kind: "config-patch";
-                readonly path: "<grok-root>/config.toml#mcp_servers";
-                readonly summary: "Compile patches a managed [mcp_servers] stdio-shim region; grok does not resolve plugin-bundle .mcp.json files.";
-            };
             readonly agentConfig: {
                 readonly kind: "native-plugin-bundle";
                 readonly path: "<generated-plugin>/agents/";
@@ -612,7 +617,6 @@ export declare const LOWERER_CAPABILITIES: {
                 readonly path: "project: hooks.v1.json; global: config.json#hooks json-array-member + hooks/*.mjs";
                 readonly summary: "Project scope writes hooks.v1.json; global scope upserts Prism entries into config.json hooks without whole-file adopt. Wrappers under hooks/.";
             };
-            readonly mcpConfig: LowererSurfaceCapability;
             readonly agentConfig: {
                 readonly kind: "direct-file";
                 readonly path: "ephemeral --agent-config for workflow runs";

package/types/types.d.ts

@@ -1,7 +1,7 @@
 /**
  * Core types for prism - the unified plugin distribution system
  */
-export type HarnessId = "claude-code" | "opencode" | "openclaw" | "hermes" | "codex-cli" | "antigravity-cli" | "kimi-code" | "amp-code" | "cursor" | "factory-droid" | "pi" | "grok" | "devin";
+export type HarnessId = "claude-code" | "opencode" | "openclaw" | "hermes" | "codex-cli" | "antigravity-cli" | "kimi-code" | "amp-code" | "cursor" | "factory-droid" | "pi" | "omp" | "grok" | "devin";
 export declare const HARNESS_SCOPES: readonly ["global", "project"];
 export type HarnessScope = (typeof HARNESS_SCOPES)[number];
 export interface HarnessConfig {
@@ -15,13 +15,13 @@ export interface HarnessConfig {
     agentsDir: string | null;
     toolsDir: string | null;
     skillsDir: string | null;
+    extensionsDir?: string | null;
     configFile: string | null;
     configFormat: "json" | "yaml" | "toml" | "markdown" | "mdc";
     supportsTools: boolean;
     supportsCommands: boolean;
     supportsAgents: boolean;
     supportsSkills: boolean;
-    supportsMCP: boolean;
     alternativeRulesFiles?: string[];
 }
 export declare const PLUGIN_ARTIFACT_TYPES: readonly ["rules", "commands", "agents", "skills"];
@@ -33,16 +33,8 @@ export type TargetPresetId = (typeof TARGET_PRESET_IDS)[number];
 export type PluginTargetId = HarnessId | TargetPresetId;
 export type AnyArtifactType = PluginArtifactType | CompileArtifactType;
 export type PluginManifestTargets = Partial<Record<AnyArtifactType, PluginTargetId[]>>;
-export type PrismMcpTransport = "streamable-http";
-export interface PluginRuntimeMcpHarnessConfig {
-    transport?: PrismMcpTransport;
-    host?: string;
-    port?: number;
-    connectTimeoutMs?: number;
-    toolTimeoutMs?: number;
-}
+/** Reserved plugin runtime knobs. MCP harness config is retired. */
 export interface PluginRuntimeConfig {
-    mcp?: Partial<Record<HarnessId, PluginRuntimeMcpHarnessConfig>>;
 }
 export interface PluginManifest {
     name: string;
@@ -157,6 +149,7 @@ export interface UnifiedFrontmatter {
     cursor?: CursorFrontmatter;
     "factory-droid"?: FactoryDroidFrontmatter;
     pi?: Record<string, unknown>;
+    omp?: Record<string, unknown>;
     grok?: Record<string, unknown>;
     devin?: Record<string, unknown>;
 }

package/types/workflow-bun-runtime.d.ts

@@ -1,10 +1,22 @@
-export interface WorkflowBunSpawnOptions {
+interface WorkflowBunSpawnBaseOptions {
     readonly cmd: ReadonlyArray<string>;
     readonly cwd?: string;
     readonly env?: Record<string, string | undefined>;
+    readonly detached?: boolean;
+    /** A `number` redirects to that open file descriptor (e.g. a log file opened before spawn). */
+    readonly stdout: "ignore" | "pipe" | number;
+    readonly stderr: "ignore" | "pipe" | number;
+}
+export interface WorkflowBunSpawnOptions extends WorkflowBunSpawnBaseOptions {
     readonly stdin: "ignore";
-    readonly stdout: "ignore" | "pipe";
-    readonly stderr: "ignore" | "pipe";
+}
+export interface WorkflowBunPipedSpawnOptions extends WorkflowBunSpawnBaseOptions {
+    readonly stdin: "pipe";
+    readonly stdout: "pipe";
+    readonly stderr: "pipe";
+}
+export interface WorkflowBunWritableStdin {
+    end(error?: Error): number | Promise<number>;
 }
 export interface WorkflowBunSpawnedProcess {
     readonly pid?: number;
@@ -14,8 +26,14 @@ export interface WorkflowBunSpawnedProcess {
     kill(signal?: NodeJS.Signals | number): void;
     unref?(): void;
 }
+export interface WorkflowBunPipedSpawnedProcess extends WorkflowBunSpawnedProcess {
+    readonly stdin: WorkflowBunWritableStdin;
+    readonly stdout: ReadableStream<Uint8Array>;
+}
 export interface WorkflowBunRuntime {
     which(name: string): string | null;
     spawn(options: WorkflowBunSpawnOptions): WorkflowBunSpawnedProcess;
+    spawn(options: WorkflowBunPipedSpawnOptions): WorkflowBunPipedSpawnedProcess;
 }
 export declare const workflowBunRuntime: (capability: string) => WorkflowBunRuntime;
+export {};

package/types/workflow-data-governance.d.ts

@@ -0,0 +1,43 @@
+import type { WorkflowRunnerLogRemoval } from "./workflow-runner-log.js";
+export declare const DEFAULT_WORKFLOW_RETENTION_DAYS = 30;
+export declare const DEFAULT_WORKFLOW_RETENTION_MS: number;
+export declare const DEFAULT_WORKFLOW_RETENTION_AGE = "30d";
+export declare const parseWorkflowRetentionAge: (input: string) => number;
+export interface WorkflowRunArtifactCounts {
+    readonly runs: number;
+    readonly tasks: number;
+    readonly attempts: number;
+    readonly events: number;
+    readonly spans: number;
+    readonly runSnapshots: number;
+    readonly taskSnapshots: number;
+}
+export interface WorkflowCacheArtifactCounts {
+    readonly taskCache: number;
+    readonly judgeCache: number;
+}
+export interface WorkflowRunDeletionReport {
+    readonly runId: string;
+    readonly status: "deleted" | "missing";
+    readonly rows: WorkflowRunArtifactCounts;
+    readonly runnerLog: WorkflowRunnerLogRemoval;
+}
+export interface WorkflowRetentionCleanupReport {
+    readonly policy: "workflow-ledger-retention-v1";
+    readonly olderThanMs: number;
+    readonly cutoff: string;
+    readonly runs: {
+        readonly matched: number;
+        readonly deleted: number;
+        readonly rows: WorkflowRunArtifactCounts;
+    };
+    readonly caches: WorkflowCacheArtifactCounts;
+    readonly runnerLogs: {
+        readonly deleted: number;
+        readonly missing: number;
+        readonly skippedUnsafeRunId: number;
+    };
+}
+export declare const emptyWorkflowRunArtifactCounts: () => WorkflowRunArtifactCounts;
+export declare const addWorkflowRunArtifactCounts: (left: WorkflowRunArtifactCounts, right: WorkflowRunArtifactCounts) => WorkflowRunArtifactCounts;
+export declare const workflowRetentionCutoff: (olderThanMs: number, now?: Date) => Date;

package/types/workflow-data-policy.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Central workflow-ledger data policy.
+ *
+ * All durable workflow evidence and telemetry exports pass through this module.
+ * Exact-continuation identifiers and execution provenance are deliberately
+ * preserved: they are operational routing data, not authentication secrets.
+ * Cache payloads are never mutated. Callers must skip a cache write when
+ * `workflowCachePersistenceDecision` rejects it.
+ */
+export declare const WORKFLOW_DATA_POLICY_VERSION = 1;
+export declare const WORKFLOW_REDACTION_MARKER = "[REDACTED]";
+export declare const WORKFLOW_SECRET_DIGEST_PREFIX = "sha256:";
+export type WorkflowSensitiveDataReason = "sensitive-key" | "bearer-credential" | "provider-token" | "credential-assignment" | "private-key" | "url-password";
+export interface WorkflowSensitiveDataFinding {
+    readonly path: string;
+    readonly reason: WorkflowSensitiveDataReason;
+}
+export interface WorkflowDataPolicyResult<Value> {
+    readonly value: Value;
+    readonly findings: ReadonlyArray<WorkflowSensitiveDataFinding>;
+}
+export type WorkflowCachePersistenceDecision = {
+    readonly safe: true;
+} | {
+    readonly safe: false;
+    readonly reason: "sensitive-data";
+    readonly findings: ReadonlyArray<WorkflowSensitiveDataFinding>;
+};
+export declare const applyWorkflowDataPolicy: <Value>(input: Value) => WorkflowDataPolicyResult<Value>;
+export declare const inspectWorkflowSensitiveData: (input: unknown) => ReadonlyArray<WorkflowSensitiveDataFinding>;
+export declare const redactWorkflowData: <Value>(input: Value) => Value;
+export declare const redactWorkflowText: (input: string) => string;
+export declare const digestWorkflowSecret: (input: string) => string;
+export declare const workflowCachePersistenceDecision: (input: {
+    readonly output: unknown;
+    readonly metadata?: Record<string, unknown>;
+    readonly identity?: unknown;
+    readonly agent?: unknown;
+}) => WorkflowCachePersistenceDecision;

package/types/workflow-errors.d.ts

@@ -1,3 +1,38 @@
+export declare class WorkflowRunTimeoutError extends Error {
+    readonly limitMs: number;
+    readonly name = "WorkflowRunTimeoutError";
+    constructor(limitMs: number);
+}
+export declare class WorkflowTaskNoProgressError extends Error {
+    readonly taskId: string;
+    readonly limitMs: number;
+    readonly name = "WorkflowTaskNoProgressError";
+    constructor(taskId: string, limitMs: number);
+}
+export declare class WorkflowFanoutExceededError extends Error {
+    readonly limit: number;
+    readonly observed: number;
+    readonly name = "WorkflowFanoutExceededError";
+    constructor(limit: number, observed: number);
+}
+export declare class WorkflowCostExceededError extends Error {
+    readonly limitUsd: number;
+    readonly observedUsd: number;
+    readonly name = "WorkflowCostExceededError";
+    constructor(limitUsd: number, observedUsd: number);
+}
+export declare class WorkflowCostUnavailableError extends Error {
+    readonly limitUsd: number;
+    readonly name = "WorkflowCostUnavailableError";
+    constructor(limitUsd: number);
+}
+export declare class WorkflowPromptLimitError extends Error {
+    readonly taskId: string;
+    readonly limitBytes: number;
+    readonly observedBytes: number;
+    readonly name = "WorkflowPromptLimitError";
+    constructor(taskId: string, limitBytes: number, observedBytes: number);
+}
 /** Errors surfaced by {@link WorkflowRuntime.runTask} and dynamic workflow runs. */
 export declare class WorkflowTaskDecodeError extends Error {
     readonly taskId: string;
@@ -25,4 +60,4 @@ export declare class WorkflowUnsupportedHarnessError extends Error {
     readonly name = "WorkflowUnsupportedHarnessError";
     constructor(harness: string, validHarnesses: ReadonlyArray<string>);
 }
-export type WorkflowRuntimeError = WorkflowBunRuntimeUnavailableError | WorkflowUnsupportedHarnessError | WorkflowTaskDecodeError | WorkflowTaskEscalatedError | WorkflowRunStoppedError | Error;
+export type WorkflowRuntimeError = WorkflowBunRuntimeUnavailableError | WorkflowUnsupportedHarnessError | WorkflowTaskDecodeError | WorkflowTaskEscalatedError | WorkflowRunStoppedError | WorkflowRunTimeoutError | WorkflowTaskNoProgressError | WorkflowFanoutExceededError | WorkflowCostExceededError | WorkflowCostUnavailableError | WorkflowPromptLimitError | Error;

package/types/workflow-harness-detection.d.ts

@@ -10,6 +10,8 @@ import type { HarnessId } from "./types.js";
  */
 export declare const WORKFLOW_HARNESS_IDS: ReadonlyArray<WorkflowWorkerHarnessId>;
 export type WorkflowHarnessId = WorkflowWorkerHarnessId;
+/** Shared env/CLI integer parser kept off the worker-process module so the public SDK graph stays free of spawn runtime. */
+export declare const parsePositiveInteger: (value: string | undefined) => number | undefined;
 export type WorkflowHarnessDetectionStatus = "available" | "missing" | "broken";
 export type WorkflowHarnessDetectionReasonCode = "executable-found" | "executable-missing" | "probe-succeeded" | "probe-exited-nonzero" | "probe-timed-out" | "probe-failed";
 export interface WorkflowHarnessDetectionReason {

package/types/workflow-identity.d.ts

@@ -1,4 +1,16 @@
 import { type AnyWorkflowTask, type WorkflowRuntimeOptions } from "./workflows.js";
+/**
+ * `cacheKey` and `promptHash` AND together in the cache primary key
+ * (workflow-store.ts) — `cacheKey` never substitutes for `promptHash`, and
+ * there is no override/terminal-marker mechanism to make a stale prompt hash
+ * replay anyway. `promptHash` hashes the literal rendered `task.prompt`
+ * string, so interpolating volatile upstream text (judge prose, logs, whole
+ * objects) into a downstream prompt guarantees resume misses by construction.
+ * Authoring discipline: interpolate only narrow, stable upstream fields —
+ * ids, hashes, short enums (e.g. `build.commitSha`) — never freeform upstream
+ * text. There is no `--no-cache` bypass (removed; cache is mandatory) — the
+ * sanctioned no-reuse path is a fresh `--store`.
+ */
 export interface WorkflowTaskIdentity {
     readonly workflow: string;
     readonly taskId: string;

package/types/workflow-runner-log.d.ts

@@ -0,0 +1,34 @@
+export declare const WORKFLOW_RUNNER_LOG_FILE_MODE = 384;
+export declare const WORKFLOW_RUNNER_LOG_DIRECTORY_MODE = 448;
+export type WorkflowRunnerLogRemoval = {
+    readonly status: "deleted";
+    readonly path: string;
+} | {
+    readonly status: "missing";
+    readonly path: string;
+} | {
+    readonly status: "skipped-unsafe-run-id";
+};
+export type WorkflowRunnerLogRedaction = {
+    readonly status: "redacted" | "unchanged";
+    readonly path: string;
+} | {
+    readonly status: "missing";
+    readonly path: string;
+} | {
+    readonly status: "skipped-unsafe-run-id" | "skipped-non-file";
+};
+export declare const workflowRunnerLogDir: (storePath: string) => string;
+export declare const workflowRunnerLogPath: (storePath: string, runId: string) => string;
+export declare const workflowRunnerLogPathIfPresent: (storePath: string, run: {
+    readonly runId: string;
+    readonly runnerPid?: number;
+}) => string | undefined;
+export declare const secureWorkflowRunnerLog: (path: string) => Promise<void>;
+export declare const readRedactedWorkflowRunnerLog: (storePath: string, runId: string) => Promise<{
+    readonly path: string;
+    readonly bytes: number;
+    readonly content: string;
+} | null>;
+export declare const redactWorkflowRunnerLogInPlace: (storePath: string, runId: string) => Promise<WorkflowRunnerLogRedaction>;
+export declare const removeWorkflowRunnerLog: (storePath: string, runId: string) => Promise<WorkflowRunnerLogRemoval>;

package/types/workflow-runner.d.ts

@@ -24,8 +24,10 @@ export interface WorkflowRunResult {
     readonly tasks: ReadonlyArray<WorkflowRunTaskResult>;
     readonly output?: unknown;
 }
-export { WorkflowRunStoppedError, WorkflowTaskDecodeError, WorkflowTaskEscalatedError, type WorkflowRuntimeError, } from "./workflow-errors.js";
+export { WorkflowRunStoppedError, WorkflowTaskDecodeError, WorkflowTaskEscalatedError, WorkflowRunTimeoutError, WorkflowTaskNoProgressError, WorkflowFanoutExceededError, WorkflowCostExceededError, WorkflowCostUnavailableError, WorkflowPromptLimitError, type WorkflowRuntimeError, } from "./workflow-errors.js";
 export type WorkflowTaskRepairMode = "native-continuation" | "fresh-executor-invocation" | "none";
+export type WorkflowTaskProgressSource = "executor" | "worker-stdout" | "worker-stderr";
+export type WorkflowTaskProgressReporter = (source?: WorkflowTaskProgressSource) => void;
 export type WorkflowTaskRepairFallbackReason = "adapter-does-not-support-continuation" | "executor-does-not-advertise-continuation" | "missing-session-id";
 interface WorkflowTaskRepairContextBase {
     readonly attempt: number;
@@ -44,10 +46,12 @@ export type WorkflowTaskRepairContext = WorkflowTaskRepairContextBase & ({
 });
 export interface WorkflowTaskExecutionContext {
     readonly abortSignal?: AbortSignal;
+    readonly reportProgress?: WorkflowTaskProgressReporter;
     readonly repair?: WorkflowTaskRepairContext;
 }
 export interface WorkflowTaskExecutionContextWithoutRepair {
     readonly abortSignal?: AbortSignal;
+    readonly reportProgress?: WorkflowTaskProgressReporter;
 }
 export type WorkflowTaskRepairLoopOption<Worker extends string> = Worker extends WorkflowRepairLoopContinuationWorkerId ? {
     readonly repair?: WorkflowTaskRepairContext;
@@ -56,12 +60,17 @@ export type WorkflowTaskRepairLoopOption<Worker extends string> = Worker extends
 };
 export type WorkflowTaskExecutor = (task: AnyWorkflowTask, context?: WorkflowTaskExecutionContext) => Promise<unknown | WorkflowTaskExecution>;
 export declare const DEFAULT_WORKFLOW_TASK_CONCURRENCY = 8;
+export declare const DEFAULT_WORKFLOW_MAX_PROMPT_BYTES: number;
 export declare const runWorkflow: (workflow: AnyWorkflowDefinition, options: {
     readonly executeTask: WorkflowTaskExecutor;
     readonly store?: WorkflowStore;
-    readonly cache?: boolean;
     readonly mockOutput?: boolean;
     readonly maxConcurrentTasks?: number;
+    readonly maxWallMs?: number;
+    readonly taskNoProgressMs?: number;
+    readonly maxTasks?: number;
+    readonly maxCostUsd?: number;
+    readonly maxPromptBytes?: number;
     readonly runId?: string;
     readonly runtimeOptions?: WorkflowRuntimeOptions;
     readonly abortSignal?: AbortSignal;

package/types/workflow-runtime.d.ts

@@ -1,4 +1,4 @@
-import { type WorkflowBunSpawnedProcess, type WorkflowBunSpawnOptions } from "./workflow-bun-runtime.js";
+import { type WorkflowBunPipedSpawnOptions, type WorkflowBunPipedSpawnedProcess, type WorkflowBunSpawnedProcess, type WorkflowBunSpawnOptions } from "./workflow-bun-runtime.js";
 export interface WorkflowDatabaseQuery<Row, Params extends ReadonlyArray<unknown>> {
     get(...params: Params): Row | null;
     all(...params: Params): Row[];
@@ -13,12 +13,21 @@ export interface WorkflowDatabase {
 export interface WorkflowSpawnOptions extends WorkflowBunSpawnOptions {
     readonly cwd: string;
 }
+export interface WorkflowPipedSpawnOptions extends WorkflowBunPipedSpawnOptions {
+    readonly cwd: string;
+}
 export interface WorkflowSpawnedProcess extends WorkflowBunSpawnedProcess {
     readonly pid: number;
     readonly stdout: ReadableStream<Uint8Array>;
     readonly stderr: ReadableStream<Uint8Array>;
     unref(): void;
 }
+export interface WorkflowPipedSpawnedProcess extends WorkflowBunPipedSpawnedProcess {
+    readonly pid: number;
+    readonly stderr: ReadableStream<Uint8Array>;
+    unref(): void;
+}
 export declare const openWorkflowDatabase: (path: string) => WorkflowDatabase;
-export declare const spawnWorkflowProcess: (options: WorkflowSpawnOptions) => WorkflowSpawnedProcess;
+export declare function spawnWorkflowProcess(options: WorkflowPipedSpawnOptions): WorkflowPipedSpawnedProcess;
+export declare function spawnWorkflowProcess(options: WorkflowSpawnOptions): WorkflowSpawnedProcess;
 export declare const findWorkflowExecutable: (name: string) => string | undefined;

package/types/workflow-session.d.ts

@@ -1,17 +1,17 @@
 import { Schema } from "effect";
-export declare const WorkflowContinuationAdapterIdSchema: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok-cli", "hermes", "kimi-code", "opencode-cli"]>;
+export declare const WorkflowContinuationAdapterIdSchema: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok-cli", "hermes", "kimi-code", "opencode-cli", "omp-cli"]>;
 export type WorkflowContinuationAdapterId = typeof WorkflowContinuationAdapterIdSchema.Type;
-export declare const WorkflowContinuationWorkerIdSchema: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok", "hermes", "kimi-code", "opencode"]>;
+export declare const WorkflowContinuationWorkerIdSchema: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok", "hermes", "kimi-code", "opencode", "omp"]>;
 export type WorkflowContinuationWorkerId = typeof WorkflowContinuationWorkerIdSchema.Type;
 export declare const StableSessionIdSchema: Schema.brand<typeof Schema.NonEmptyTrimmedString, "StableSessionId">;
 export type StableSessionId = typeof StableSessionIdSchema.Type;
 export declare const WorkflowStableSessionSchema: Schema.Struct<{
-    adapter: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok-cli", "hermes", "kimi-code", "opencode-cli"]>;
+    adapter: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok-cli", "hermes", "kimi-code", "opencode-cli", "omp-cli"]>;
     sessionId: Schema.brand<typeof Schema.NonEmptyTrimmedString, "StableSessionId">;
 }>;
 export type WorkflowStableSession = typeof WorkflowStableSessionSchema.Type;
 export declare const WorkflowHarnessContinuationSupportSchema: Schema.Union<[Schema.Struct<{
-    adapter: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok-cli", "hermes", "kimi-code", "opencode-cli"]>;
+    adapter: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok-cli", "hermes", "kimi-code", "opencode-cli", "omp-cli"]>;
     workflowWorker: typeof Schema.Boolean;
     stableSessionIds: Schema.Literal<[true]>;
     exactSameSessionContinuation: Schema.Literal<[true]>;
@@ -19,7 +19,7 @@ export declare const WorkflowHarnessContinuationSupportSchema: Schema.Union<[Sch
     continueCommand: typeof Schema.NonEmptyTrimmedString;
     capture: typeof Schema.NonEmptyTrimmedString;
 }>, Schema.Struct<{
-    adapter: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok-cli", "hermes", "kimi-code", "opencode-cli"]>;
+    adapter: Schema.Literal<["amp-code", "antigravity-cli", "claude-code", "codex-cli", "devin", "grok-cli", "hermes", "kimi-code", "opencode-cli", "omp-cli"]>;
     workflowWorker: typeof Schema.Boolean;
     stableSessionIds: Schema.Literal<[false]>;
     exactSameSessionContinuation: Schema.Literal<[false]>;
@@ -37,6 +37,7 @@ export declare const workflowContinuationAdapterByWorker: {
     readonly hermes: "hermes";
     readonly "kimi-code": "kimi-code";
     readonly opencode: "opencode-cli";
+    readonly omp: "omp-cli";
 };
 export type WorkflowRepairLoopContinuationWorkerId = keyof typeof workflowContinuationAdapterByWorker;
 export type WorkflowRepairLoopContinuationCapability = "stable-session-repair-loop" | "no-repair-loop-continuation";
@@ -123,6 +124,15 @@ export declare const workflowHarnessContinuationSupport: {
         readonly continueCommand: "opencode run -s <sessionId> <prompt>";
         readonly capture: "json step_start sessionID, session list, export, database, or log recovery";
     };
+    readonly "omp-cli": {
+        readonly adapter: "omp-cli";
+        readonly workflowWorker: true;
+        readonly stableSessionIds: true;
+        readonly exactSameSessionContinuation: true;
+        readonly sessionIdField: "sessionId";
+        readonly continueCommand: "omp --mode json --resume <sessionId> -- <prompt>";
+        readonly capture: "json session event id";
+    };
 };
 export declare const stableSessionIdFromUnknown: (value: unknown) => StableSessionId | undefined;
 export declare const workflowContinuationAdapterForWorker: (worker: string) => WorkflowContinuationAdapterId | undefined;

package/types/workflow-store.d.ts

@@ -1,8 +1,10 @@
+import { type WorkflowRetentionCleanupReport, type WorkflowRunArtifactCounts, type WorkflowRunDeletionReport } from "./workflow-data-governance.js";
 import type { WorkflowJudgeVerdict } from "./workflows.js";
 import type { WorkflowJudgeIdentity, WorkflowRunTaskSnapshot, WorkflowTaskIdentity } from "./workflow-identity.js";
 export { workflowRunTaskSnapshotForTask, workflowTaskIdentity, type WorkflowJudgeIdentity, type WorkflowRunTaskSnapshot, type WorkflowTaskIdentity } from "./workflow-identity.js";
 import { type WorkflowDatabase } from "./workflow-runtime.js";
 import type { WorkflowSpanRecord } from "./workflow-tracing.js";
+import { type WorkflowUsage, type WorkflowUsageTotals } from "./workflow-usage.js";
 export type WorkflowTaskOutputSource = "mock-output";
 export interface CompletedWorkflowTaskRecord {
     readonly identity: WorkflowTaskIdentity;
@@ -31,6 +33,14 @@ export interface WorkflowJudgeRecord {
     readonly createdAt: string;
     readonly updatedAt: string;
 }
+export type WorkflowCacheWriteResult = {
+    readonly stored: true;
+} | {
+    readonly stored: false;
+    readonly reason: "sensitive-data";
+    readonly findingCount: number;
+    readonly findingPaths: ReadonlyArray<string>;
+};
 export type WorkflowRunTaskStatus = "completed" | "failed" | "escalated";
 export interface WorkflowRunTaskRecord {
     readonly runId: string;
@@ -46,7 +56,7 @@ export interface WorkflowRunTaskRecord {
     readonly output: unknown;
     readonly metadata?: Record<string, unknown>;
 }
-export type WorkflowRunTaskProgressStatus = "running" | "completed" | "failed" | "escalated";
+export type WorkflowRunTaskProgressStatus = "running" | "completed" | "failed" | "escalated" | "stopped" | "crashed";
 export type WorkflowRunTaskCacheLookup = "hit" | "miss" | "skipped";
 export interface WorkflowRunTaskProgress {
     readonly ordinal?: number;
@@ -86,6 +96,7 @@ export interface WorkflowRunTaskCompactSummary {
     readonly externalSessionPointer: string | null;
     readonly lastEventType?: string;
     readonly lastEventAt?: string;
+    readonly attempts: ReadonlyArray<WorkflowTaskAttemptRecord>;
 }
 export interface WorkflowRunSnapshot {
     readonly runId: string;
@@ -131,19 +142,77 @@ export interface WorkflowRunCompactSummary {
         readonly repairs: number;
         readonly status: WorkflowRunStatus;
         readonly durationMs: number | null;
+        readonly usage: WorkflowUsageTotals;
     };
     readonly tasks: WorkflowRunTaskCompactSummary[];
 }
+export type WorkflowRunCompletedCause = {
+    readonly kind: "completed";
+};
+export type WorkflowRunTaskFailureCause = {
+    readonly kind: "task-failed" | "task-escalated";
+    readonly taskId: string;
+    readonly ordinal: number;
+    readonly attempt: number;
+    readonly errorName: string;
+    readonly message: string;
+};
+export type WorkflowRunFailureCause = {
+    readonly kind: "workflow-failed";
+    readonly errorName: string;
+    readonly message: string;
+};
+export type WorkflowRunStoppedCause = {
+    readonly kind: "stopped";
+    readonly reason: string;
+    readonly signal?: string;
+};
+export type WorkflowRunCrashedCause = {
+    readonly kind: "crashed";
+    readonly reason: string;
+    readonly runnerPid?: number;
+    readonly heartbeatAt?: string;
+};
+export type WorkflowRunTimeoutCause = {
+    readonly kind: "workflow-timeout";
+    readonly limitMs: number;
+};
+export type WorkflowRunFanoutExceededCause = {
+    readonly kind: "workflow-fanout-exceeded";
+    readonly limit: number;
+    readonly observed: number;
+};
+export type WorkflowRunCostExceededCause = {
+    readonly kind: "workflow-cost-exceeded";
+    readonly limitUsd: number;
+    readonly observedUsd: number;
+};
+export type WorkflowRunCostUnavailableCause = {
+    readonly kind: "workflow-cost-unavailable";
+    readonly limitUsd: number;
+};
+export type WorkflowRunPromptLimitCause = {
+    readonly kind: "workflow-prompt-limit-exceeded";
+    readonly taskId: string;
+    readonly limitBytes: number;
+    readonly observedBytes: number;
+};
+export type WorkflowRunTerminalCause = WorkflowRunCompletedCause | WorkflowRunTaskFailureCause | WorkflowRunFailureCause | WorkflowRunStoppedCause | WorkflowRunCrashedCause | WorkflowRunTimeoutCause | WorkflowRunFanoutExceededCause | WorkflowRunCostExceededCause | WorkflowRunCostUnavailableCause | WorkflowRunPromptLimitCause;
 export interface WorkflowRunRecord {
     readonly runId: string;
     readonly workflow: string;
     readonly status: WorkflowRunStatus;
+    readonly terminalCause: WorkflowRunTerminalCause | null;
     readonly finishedAt: string | null;
     readonly runnerPid?: number;
     readonly heartbeatAt?: string;
+    readonly liveness: WorkflowRunLiveness;
     readonly createdAt?: string;
+    readonly usage: WorkflowUsageTotals;
 }
-export type WorkflowRunStatus = "running" | "completed" | "failed" | "escalated" | "unknown";
+export type WorkflowRunLiveness = "alive" | "stale" | "unknown";
+export declare const WORKFLOW_RUN_LIVENESS_STALE_AFTER_MS = 10000;
+export type WorkflowRunStatus = "running" | "completed" | "failed" | "escalated" | "stopped" | "crashed" | "unknown";
 /**
  * A run's persisted status can read "completed" while carrying isolated task failures: the
  * dynamic runtime's fault-isolation contract (PQ-166) lets an author's `run` program finish
@@ -161,13 +230,124 @@ export interface WorkflowEventRecord {
     readonly payload: unknown;
     readonly createdAt: string;
 }
+export interface WorkflowRunInspection {
+    readonly schema: "prism.workflow-run-inspection.v1";
+    readonly dataPolicyVersion: number;
+    readonly store: {
+        readonly path: string;
+        readonly schemaVersion: number;
+        readonly files: ReadonlyArray<{
+            readonly path: string;
+            readonly present: boolean;
+            readonly mode: number | null;
+            readonly bytes: number | null;
+        }>;
+    };
+    readonly run: WorkflowRunRecord;
+    readonly rows: WorkflowRunArtifactCounts;
+    readonly runnerLog: {
+        readonly path: string | null;
+        readonly present: boolean;
+        readonly bytes: number | null;
+    };
+}
+export interface WorkflowRunExport {
+    readonly schema: "prism.workflow-run-export.v1";
+    readonly dataPolicyVersion: number;
+    readonly exportedAt: string;
+    readonly run: WorkflowRunRecord;
+    readonly snapshot: WorkflowRunSnapshot | null;
+    readonly tasks: ReadonlyArray<WorkflowRunTaskRecord>;
+    readonly taskSnapshots: ReadonlyArray<WorkflowRunTaskSnapshot>;
+    readonly attempts: ReadonlyArray<WorkflowTaskAttemptRecord>;
+    readonly events: ReadonlyArray<WorkflowEventRecord>;
+    readonly spans: ReadonlyArray<Omit<WorkflowSpanRecord, "startNs" | "endNs"> & {
+        readonly startNs: string;
+        readonly endNs: string | null;
+    }>;
+    readonly runnerLog: {
+        readonly path: string;
+        readonly bytes: number;
+        readonly content: string;
+    } | null;
+}
+export type WorkflowTaskAttemptStatus = "running" | "completed" | "failed" | "stopped" | "crashed";
+export type WorkflowTaskAttemptFailureKind = "executor" | "decode" | "finish" | "stopped" | "crashed";
+export interface WorkflowTaskAttemptFailure {
+    readonly kind: WorkflowTaskAttemptFailureKind;
+    readonly message: string;
+}
+export interface WorkflowTaskAttemptStartedInput {
+    readonly runId: string;
+    readonly ordinal: number;
+    readonly attempt: number;
+    readonly taskId: string;
+    readonly metadata?: Record<string, unknown>;
+}
+export interface WorkflowTaskAttemptFinishedInput {
+    readonly runId: string;
+    readonly ordinal: number;
+    readonly attempt: number;
+    readonly status: Exclude<WorkflowTaskAttemptStatus, "running">;
+    readonly metadata?: Record<string, unknown>;
+    readonly failure?: WorkflowTaskAttemptFailure;
+}
+export interface WorkflowTaskAttemptRecord {
+    readonly runId: string;
+    readonly ordinal: number;
+    readonly attempt: number;
+    readonly taskId: string;
+    readonly status: WorkflowTaskAttemptStatus;
+    readonly startedAt: string;
+    readonly finishedAt: string | null;
+    readonly adapter?: string;
+    readonly model?: string;
+    readonly nativeAgent?: string;
+    readonly sessionId?: string;
+    readonly failure?: WorkflowTaskAttemptFailure;
+    readonly usage?: WorkflowUsage;
+    readonly metadata?: Record<string, unknown>;
+}
 export declare const projectWorkflowStoreDir: (prismHome: string, cwd?: string) => string;
 export declare const defaultWorkflowStorePath: (prismHome: string, cwd?: string) => string;
+export declare const WORKFLOW_STORE_SCHEMA_VERSION = 5;
+/**
+ * Surfaces the one-time soft-divergence direction (WFE-007): a pre-existing store opened at a
+ * schema version older than the binary's `WORKFLOW_STORE_SCHEMA_VERSION` migrates in place inside
+ * `WorkflowStore.open`, silently by design, but callers reporting on the store (`runs list`,
+ * `runs show`) surface that a migration just ran. The other direction — a store newer than this
+ * binary supports — is not migratable and is already a hard error in `open`. Never populated for
+ * a brand-new store (nothing to diverge from).
+ */
+export interface WorkflowStoreSchemaNotice {
+    readonly severity: "info";
+    readonly openedVersion: number;
+    readonly currentVersion: number;
+    readonly message: string;
+}
+export declare const workflowRunLiveness: (run: Pick<WorkflowRunRecord, "status" | "runnerPid" | "heartbeatAt">, nowMs?: number) => WorkflowRunLiveness;
 export declare class WorkflowStore {
     private readonly db;
-    constructor(db: WorkflowDatabase);
-    static open(path: string): Promise<WorkflowStore>;
+    readonly path: string;
+    readonly schemaNotice: WorkflowStoreSchemaNotice | null;
+    initialRetentionCleanup: WorkflowRetentionCleanupReport | null;
+    constructor(db: WorkflowDatabase, path: string, schemaNotice?: WorkflowStoreSchemaNotice | null);
+    private updateRunUsageInCurrentTransaction;
+    static open(path: string, options?: {
+        readonly applyDefaultRetention?: boolean;
+    }): Promise<WorkflowStore>;
     close(): void;
+    private countRunArtifacts;
+    private deleteRunRowsInCurrentTransaction;
+    private removeQueuedRunnerLog;
+    private flushQueuedRunnerLogCleanup;
+    inspectRun(runId: string): Promise<WorkflowRunInspection>;
+    exportRun(runId: string): Promise<WorkflowRunExport>;
+    deleteRun(runId: string): Promise<WorkflowRunDeletionReport>;
+    pruneByAge(options?: {
+        readonly olderThanMs?: number;
+        readonly now?: Date;
+    }): Promise<WorkflowRetentionCleanupReport>;
     getCompleted(identity: WorkflowTaskIdentity, options?: {
         readonly allowMockSourced?: boolean;
     }): CompletedWorkflowTaskRecord | null;
@@ -178,7 +358,7 @@ export declare class WorkflowStore {
         readonly evidence: unknown;
         readonly output: unknown;
         readonly taskMetadata: unknown;
-    }): void;
+    }): WorkflowCacheWriteResult;
     listJudgeRecords(options?: {
         readonly workflow?: string;
         readonly taskId?: string;
@@ -204,7 +384,11 @@ export declare class WorkflowStore {
     consumeRunHandoffToken(runId: string, token: string): boolean;
     markRunRunnerStarted(runId: string, runnerPid: number): void;
     heartbeatRun(runId: string): void;
-    finishRun(runId: string, status: Exclude<WorkflowRunStatus, "running" | "unknown">): void;
+    recordTaskAttemptStarted(input: WorkflowTaskAttemptStartedInput): void;
+    recordTaskAttemptFinished(input: WorkflowTaskAttemptFinishedInput): void;
+    listRunTaskAttempts(runId: string): WorkflowTaskAttemptRecord[];
+    private finishRunInCurrentTransaction;
+    finishRun(runId: string, status: Exclude<WorkflowRunStatus, "running" | "unknown">, terminalCause?: WorkflowRunTerminalCause): void;
     stopRun(runId: string, reason?: string): WorkflowRunRecord | null;
     stopRunningRun(runId: string, reason?: string): WorkflowRunRecord | null;
     restartRunningRun(input: {
@@ -263,5 +447,5 @@ export declare class WorkflowStore {
         readonly output: unknown;
         readonly metadata?: Record<string, unknown>;
         readonly outputSource?: WorkflowTaskOutputSource;
-    }): void;
+    }): WorkflowCacheWriteResult;
 }

package/types/workflow-usage.d.ts

@@ -0,0 +1,21 @@
+export type WorkflowCostReporting = "full" | "tokens" | "none";
+export interface WorkflowUsage {
+    readonly tokensIn?: number;
+    readonly tokensOut?: number;
+    readonly costUsd?: number;
+    readonly durationMs?: number;
+    readonly costReporting: WorkflowCostReporting;
+}
+export interface WorkflowUsageTotals {
+    readonly agentRuns: number;
+    readonly reused: number;
+    readonly tokensIn: number;
+    readonly tokensOut: number;
+    readonly costUsd: number;
+    readonly durationMs: number;
+}
+export declare const emptyWorkflowUsageTotals: () => WorkflowUsageTotals;
+/** Normalize provider-specific task metadata into Prism's durable usage contract. */
+export declare const workflowUsageFromMetadata: (metadata: Record<string, unknown> | undefined) => WorkflowUsage;
+export declare const addWorkflowUsage: (totals: WorkflowUsageTotals, usage: WorkflowUsage) => WorkflowUsageTotals;
+export declare const addWorkflowReuse: (totals: WorkflowUsageTotals) => WorkflowUsageTotals;

package/types/workflow-worker-metadata.d.ts

@@ -6,3 +6,19 @@ export interface WorkflowWorkerStderrMetadata {
     readonly stderrTruncated?: boolean;
 }
 export declare const summarizeWorkflowWorkerStderr: (stderr: string, maxExcerptBytes?: number) => WorkflowWorkerStderrMetadata;
+/**
+ * Forensics attached to a worker adapter's thrown error on the failure path (OBS-006).
+ * On success, every adapter already returns `{ adapter, ..., sessionId, ...stderr summary }`
+ * as its `WorkflowTaskExecution.metadata`. On failure, that same shape was previously
+ * discarded entirely — the runner persisted only `{contractVersion, instructionSource}` —
+ * so a failed task could not be joined to its harness session or its stderr tail. Adapters
+ * attach this to their custom Error's `metadata` property at each failure throw site; the
+ * runner merges `error.metadata` into both the `task.executor.failed` event and the
+ * persisted task record.
+ */
+export declare const workflowWorkerFailureMetadata: (input: {
+    readonly adapter: string;
+    readonly stderr: string;
+    readonly sessionId?: string;
+    readonly maxExcerptBytes?: number;
+}) => Record<string, unknown>;

package/types/workflows.d.ts

@@ -58,15 +58,27 @@ export interface WorkflowValidationSummary {
 }
 export type WorkflowOutputSchema = Schema.Schema.AnyNoContext;
 export type WorkflowFinishCriterionError = Error;
-export type WorkflowWorkerId = "amp-code" | "antigravity-cli" | "claude-code" | "codex-cli" | "devin" | "grok" | "hermes" | "kimi-code" | "opencode";
+export type WorkflowWorkerId = "amp-code" | "antigravity-cli" | "claude-code" | "codex-cli" | "devin" | "grok" | "hermes" | "kimi-code" | "opencode" | "omp";
 export type WorkflowPermissionMode = "legacy" | "permissive" | "restricted" | "interactive" | "sandbox-read-only" | "sandbox-workspace-write" | "full-access";
 export type AntigravityWorkflowPermissionMode = Extract<WorkflowPermissionMode, "legacy" | "permissive" | "full-access">;
+/**
+ * Per-task override for the executor-level transient-failure retry (WFE-009). Only
+ * classified-transient executor failures (process/idle timeout, unclassified non-zero
+ * exit) are retried; config/load errors and cancellation-barrier outcomes never are.
+ * `maxAttempts` counts total attempts (default 2, i.e. one retry) — the same convention
+ * as the shipped `agy` adapter's own `maxAttempts` option.
+ */
+export interface WorkflowTaskWorkerRetryOptions {
+    readonly maxAttempts?: number;
+    readonly backoffMs?: number;
+}
 type WorkflowTaskWorkerOptionsBase = {
     readonly model?: string | WorkflowModelProfileRef;
     readonly modelResolver?: (models: WorkflowResolvedModelTarget) => string;
     readonly profile?: string;
     readonly restrictedTools?: ReadonlyArray<string>;
     readonly processTimeoutMs?: number;
+    readonly retry?: WorkflowTaskWorkerRetryOptions;
 };
 export type WorkflowTaskWorkerOptions = (WorkflowTaskWorkerOptionsBase & {
     readonly worker?: Exclude<WorkflowWorkerId, "antigravity-cli">;
@@ -87,6 +99,8 @@ export interface WorkflowTaskModelResolution {
     readonly model: string;
     /** Harness-side inference provider (e.g. hermes `--provider xai-oauth`), from the modelspace target or harness default. */
     readonly provider?: string;
+    /** Harness-bound model variant, such as Codex reasoning effort. */
+    readonly variant?: string;
     readonly source: WorkflowTaskModelResolutionSource;
 }
 export declare const resolveWorkflowTaskModelResolution: (task: AnyWorkflowTask, options?: {
@@ -151,8 +165,15 @@ export interface WorkflowJudgeFinishCriterion<Output, Evidence = unknown> {
     readonly evaluate: (context: WorkflowJudgeCriterionContext<Output, Evidence>) => Effect.Effect<WorkflowJudgeVerdict, WorkflowFinishCriterionError>;
 }
 export type WorkflowFinishCriterion<Output> = WorkflowDeterministicFinishCriterion<Output> | WorkflowJudgeFinishCriterion<Output>;
+export declare const DEFAULT_WORKFLOW_DECODE_REPAIRS = 2;
 export interface WorkflowFinishOptions<Output> {
+    /** Maximum repairs requested by deterministic or judge finish criteria. Defaults to zero. */
     readonly maxRepairs?: number;
+    /**
+     * Maximum repairs after JSON parse or output schema decode failures.
+     * Defaults to DEFAULT_WORKFLOW_DECODE_REPAIRS.
+     */
+    readonly maxDecodeRepairs?: number;
     readonly criteria?: ReadonlyArray<WorkflowFinishCriterion<Output>>;
 }
 export interface WorkflowTaskDefinition<Id extends string, Agent extends WorkflowAgentRef, Output extends WorkflowOutputSchema> {