@tacuchi/agent-workflow-cli 21.7.0 → 21.8.0

package/dist/domain/flow/authorization.js

@@ -18,10 +18,34 @@
  * transition of the run authorized to overwrite anything. A grant is now scoped
  * to the exact thing that was shown — a sealed proposal, or a named transition's
  * exact effects — and covers nothing else.
+ *
+ * Custody is the one cover that comes from the registry instead of a person, and
+ * it is not a second policy over classes — it is the axis the taxonomy does not
+ * carry: WHOSE books the effect writes. A row declared `custody: "run"` only
+ * touches the run's own ledger (its session, its state, the progress marks of
+ * the flow's own document, the checks the run itself declared), so a preflight
+ * would ask a person to authorize the chassis keeping its books — a question
+ * with nothing to decide. The cover is bounded twice: never over a sealed
+ * proposal (bytes are material, not bookkeeping) and never over the two classes
+ * outside {@link CUSTODY_COVERABLE_CLASSES}, whatever the row claims.
  */
 import { semanticDigest } from "../../application/semantic-operation/protocol.js";
 import { authorizeEffects, } from "../capability/effects.js";
-import { effectsOf } from "./authority.js";
+import { custodyOf, effectsOf } from "./authority.js";
+/**
+ * What run custody may cover, and the two classes it never will.
+ *
+ * Rewriting its own artifacts and running its own declared checks are the run
+ * keeping its books. Destroying something no later run can reconstruct, or
+ * leaving the machine, are not bookkeeping under any description — a row
+ * claiming custody over them stays uncovered, whatever it declares.
+ */
+export const CUSTODY_COVERABLE_CLASSES = [
+    "read_only",
+    "local_additive",
+    "mutate_overwrite",
+    "execute",
+];
 /**
  * Decide whether the run may apply this transition right now.
  *
@@ -49,13 +73,17 @@ export function authorizeTransition(decision, grants, subject = null) {
     });
     const seal = subject?.digest ?? effectApprovalDigest(decision.id, planned);
     const held = heldFor(grants, seal);
+    // Run custody covers only the row's OWN effects: a standing proposal is
+    // somebody's sealed bytes, so it keeps its preflight whoever publishes it.
+    const custody = subject === null && custodyOf(decision) === "run";
+    const coveredByCustody = (effect) => custody && CUSTODY_COVERABLE_CLASSES.includes(effect);
     return {
         planned,
         covered: [
             ...verdict.selfAuthorized,
-            ...verdict.needsPreflight.filter((effect) => held.has(effect)),
+            ...verdict.needsPreflight.filter((effect) => held.has(effect) || coveredByCustody(effect)),
         ],
-        missing: verdict.needsPreflight.filter((effect) => !held.has(effect)),
+        missing: verdict.needsPreflight.filter((effect) => !held.has(effect) && !coveredByCustody(effect)),
         seal,
     };
 }

package/dist/domain/flow/authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../src/domain/flow/authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAGL,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAqB,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAiD9D;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAsB,EACtB,MAA8B,EAC9B,UAAgC,IAAI;IAEpC,MAAM,OAAO,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,MAAM,YAAY,GAAwB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjE,KAAK,EAAE,MAAM;QACb,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,YAAY;QAC3B,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC,CAAC;IACJ,+EAA+E;IAC/E,gFAAgF;IAChF,6EAA6E;IAC7E,+EAA+E;IAC/E,oEAAoE;IACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,EAAE;QAC7C,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,KAAK,IAAI;QAC3D,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,KAAK,IAAI;KACtD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,EAAE,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,OAAO;QACP,OAAO,EAAE;YACP,GAAG,OAAO,CAAC,cAAc;YACzB,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;SAC/D;QACD,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI;KACL,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CAAC,MAA8B,EAAE,IAAY;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;YAAE,SAAS;QACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,OAA+B;IACtF,OAAO,cAAc,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../src/domain/flow/authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAClF,OAAO,EAGL,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAqB,SAAS,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA2B;IAC/D,WAAW;IACX,gBAAgB;IAChB,kBAAkB;IAClB,SAAS;CACV,CAAC;AAiDF;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAsB,EACtB,MAA8B,EAC9B,UAAgC,IAAI;IAEpC,MAAM,OAAO,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,MAAM,YAAY,GAAwB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjE,KAAK,EAAE,MAAM;QACb,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,YAAY;QAC3B,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC,CAAC;IACJ,+EAA+E;IAC/E,gFAAgF;IAChF,6EAA6E;IAC7E,+EAA+E;IAC/E,oEAAoE;IACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,EAAE;QAC7C,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,KAAK,IAAI;QAC3D,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,KAAK,IAAI;KACtD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,EAAE,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,OAAO,GAAG,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;IAClE,MAAM,gBAAgB,GAAG,CAAC,MAAmB,EAAW,EAAE,CACxD,OAAO,IAAI,yBAAyB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO;QACL,OAAO;QACP,OAAO,EAAE;YACP,GAAG,OAAO,CAAC,cAAc;YACzB,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;SAC3F;QACD,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM,CACpC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAC3D;QACD,IAAI;KACL,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CAAC,MAA8B,EAAE,IAAY;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;YAAE,SAAS;QACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,OAA+B;IACtF,OAAO,cAAc,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tacuchi/agent-workflow-cli",
-  "version": "21.7.0",
+  "version": "21.8.0",
   "description": "Runtime CLI for Workline — the stages + loops + artifacts system for agent work. Bundles the universal `w` skill set under `skills/w/` (slash commands `/w:*`: spec-new/spec-refine, plan-new/plan-exec, quick, persist, workspace-init, export-*); `self install --target <host>` copies SKILL + commands + hooks into the host. Pluggable capability skills via `.workflow/skills.toml`. Multi-empresa parametrization via `profile.json` cascade. Namespace auto-detected from any `.<ns>/sessions/` dir in CWD; default `workflow`.",
   "type": "module",
   "bin": {