agentic-workflow-manager 9.13.2 → 9.14.0

package/dist/src/core/admission/index.js

@@ -233,8 +233,14 @@ async function admitPlan(input) {
             return blocked(input, [diagnostic('ADMISSION_SENSORS_BLOCKED', `Sensor verdict is ${sensors}.`)], { planDigest: plan.planDigest, provider, executionMode: mode, currentness: input.requireCurrent ? 'current' : 'not-checked', cliCurrentness, sensors });
     }
     if (mode === 'desatendido') {
-        const journal = journalStatus(input, plan);
-        if (journal !== 'current')
+        // The durable controller (journal + awm watch + jobs) is opt-in, as it
+        // was before 9.8.0: native v1 dispatch with no journal on its branch
+        // runs as one provider session. Creating a journal is the opt-in, and
+        // from then on it must be current. v2 routing custody lives in the
+        // journal, so awm-routed work still requires it.
+        const observed = journalStatus(input, plan);
+        const journal = observed === 'missing' && plan.schema === 'compact-slices/v1' ? 'not-required' : observed;
+        if (journal !== 'current' && journal !== 'not-required')
             return blocked(input, [diagnostic('ADMISSION_JOURNAL_BINDING_REQUIRED', 'Unattended execution requires a healthy schema-2 journal binding for this exact plan; run watch --init --plan.')], { planDigest: plan.planDigest, provider, executionMode: mode, journal, currentness: input.requireCurrent ? 'current' : 'not-checked', cliCurrentness, sensors: input.verifySensors ? 'pass' : 'not-required' });
         const capabilities = unattendedCapabilities(provider, input.controllerAutonomy);
         const resolution = { outcome: capabilities.unattendedController === 'supported' ? 'native' : 'blocked', provider, capabilities, evidenceVersion: 'r1-v1', diagnostics: [] };

package/dist/tests/commands/plan/index.test.js

@@ -309,7 +309,7 @@ describe('plan admit Commander wiring', () => {
             process.exitCode = undefined;
         }
     });
-    it('derives desatendido from the canonical plan header and requires a journal without a flag', async () => {
+    it('derives desatendido from the canonical plan header; a native v1 plan needs no journal (opt-in durable custody)', async () => {
         const root = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'awm-admit-header-'));
         const output = jest.spyOn(process.stdout, 'write').mockImplementation(() => true);
         try {
@@ -327,7 +327,11 @@ describe('plan admit Commander wiring', () => {
                 readPreferences: () => ({ defaultAgent: 'codex', enabledAgents: ['codex'], installMethod: 'symlink', defaultScope: 'local' }),
             });
             await program.parseAsync(['node', 'awm', 'plan', 'admit', 'plan.md', '--provider', 'codex', '--cwd', root, '--json']);
-            expect(JSON.parse(String(output.mock.calls[0][0]))).toMatchObject({ state: 'blocked', executionMode: 'desatendido', journal: expect.stringMatching(/missing|corrupt/) });
+            const withoutPosture = JSON.parse(String(output.mock.calls[0][0]));
+            expect(withoutPosture).toMatchObject({ state: 'blocked', executionMode: 'desatendido', journal: 'not-required' });
+            expect(withoutPosture.diagnostics[0]).toMatchObject({ code: 'ADMISSION_CONTROLLER_AUTONOMY_REQUIRED' });
+            await program.parseAsync(['node', 'awm', 'plan', 'admit', 'plan.md', '--provider', 'codex', '--cwd', root, '--controller-autonomy', 'approval-free', '--json']);
+            expect(JSON.parse(String(output.mock.calls[1][0]))).toMatchObject({ state: 'admitted', executionMode: 'desatendido', journal: 'not-required' });
         }
         finally {
             output.mockRestore();

package/dist/tests/core/admission/index.test.js

@@ -143,12 +143,40 @@ describe('admitPlan', () => {
         expect(report).toMatchObject({ state: 'blocked', executionMode: 'interactivo', provider: 'cursor', journal: 'not-required' });
         expect(report.diagnostics[0].code).toBe('ADMISSION_CAPABILITY_UNVERIFIED');
     });
-    it('reports the schema-2 journal prerequisite for otherwise admissible unattended work', async () => {
-        const unattended = { ...valid, manifest: { ...valid.manifest, executionMode: 'desatendido' } };
-        const report = await (0, admission_1.admitPlan)({ plan: unattended, provider: 'codex', cwd: process.cwd(), enabledAgents: ['codex'] });
-        expect(report).toMatchObject({ state: 'blocked', executionMode: 'desatendido', journal: 'missing' });
-        expect(report.diagnostics[0]).toMatchObject({ code: 'ADMISSION_JOURNAL_BINDING_REQUIRED' });
-        expect(report.forecast).toBeUndefined();
+    // The durable controller (journal + awm watch + jobs) is opt-in again for
+    // native v1 dispatch, as it was before 9.8.0: a v1 unattended plan with no
+    // journal on its branch runs as one native provider session. Creating a
+    // journal (awm watch --init) is the opt-in, after which it must be current.
+    // v2 routing custody lives in the journal, so awm-routed still requires it.
+    describe('the durable journal is opt-in for native v1 unattended work', () => {
+        const unattended = () => ({ ...valid, manifest: { ...valid.manifest, executionMode: 'desatendido' } });
+        const base = () => ({ plan: unattended(), provider: 'codex', cwd: process.cwd(), enabledAgents: ['codex'], planPath: 'docs/plan.md', controllerAutonomy: 'approval-free' });
+        it('admits a v1 unattended plan with no journal as journal not-required', async () => {
+            const report = await (0, admission_1.admitPlan)(base());
+            expect(report).toMatchObject({ state: 'admitted', executionMode: 'desatendido', journal: 'not-required' });
+            expect(report.diagnostics.map(d => d.code)).not.toContain('ADMISSION_JOURNAL_BINDING_REQUIRED');
+        });
+        it('keeps a journal that exists (the opt-in) fail-closed when it is corrupt or stale', async () => {
+            const corrupt = await (0, admission_1.admitPlan)({ ...base(), journalCorrupt: true });
+            expect(corrupt).toMatchObject({ state: 'blocked', journal: 'corrupt' });
+            expect(corrupt.diagnostics[0]).toMatchObject({ code: 'ADMISSION_JOURNAL_BINDING_REQUIRED' });
+            const stale = await (0, admission_1.admitPlan)({ ...base(), journalState: { ...(0, types_1.emptyState)('main'), schema: 2, planBinding: { path: 'docs/plan.md', digest: 'b'.repeat(64), schema: 'compact-slices/v1', executionMode: 'desatendido', boundAt: '2026-09-15T00:00:00.000Z' } } });
+            expect(stale).toMatchObject({ state: 'blocked', journal: 'stale' });
+            const legacy = await (0, admission_1.admitPlan)({ ...base(), journalState: (0, types_1.emptyState)('main') });
+            expect(legacy).toMatchObject({ state: 'blocked', journal: 'stale' });
+        });
+        it('still requires the journal for awm-routed v2 unattended work', async () => {
+            const v2Unattended = { ...valid, schema: 'compact-slices/v2', manifest: { ...valid.manifest, executionMode: 'desatendido', schema: 'compact-slices/v2', slices: valid.manifest.slices.map(slice => ({ ...slice, implementerProfile: 'mechanical' })) } };
+            const report = await (0, admission_1.admitPlan)({ ...base(), plan: v2Unattended });
+            expect(report).toMatchObject({ state: 'blocked', executionMode: 'desatendido', journal: 'missing' });
+            expect(report.diagnostics[0]).toMatchObject({ code: 'ADMISSION_JOURNAL_BINDING_REQUIRED' });
+            expect(report.forecast).toBeUndefined();
+        });
+        it('keeps the controller posture gate for journal-less unattended work', async () => {
+            const report = await (0, admission_1.admitPlan)({ ...base(), controllerAutonomy: undefined });
+            expect(report.state).toBe('blocked');
+            expect(report.diagnostics[0]).toMatchObject({ code: 'ADMISSION_CONTROLLER_AUTONOMY_REQUIRED' });
+        });
     });
     it('admits unattended work only with an exact schema-2 plan binding', async () => {
         const unattended = { ...valid, manifest: { ...valid.manifest, executionMode: 'desatendido' } };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-workflow-manager",
-  "version": "9.13.2",
+  "version": "9.14.0",
   "main": "dist/src/index.js",
   "bin": {
     "awm": "./dist/src/index.js"