agents-relay 2.0.143 → 2.0.145

package/dist/cli-workflow.js

@@ -17,6 +17,15 @@ export function workflowCliResult(args) {
     const index = buildWorkflowUsageIndex(graphs);
     if (verb === 'discover')
         return { graphs: [...graphs.keys()], symbols: [...new Set(index.map(x => x.id))].sort() };
+    if (verb === 'actions') {
+        const actionIds = [...new Set(index.filter(item => item.kind === 'action').map(item => item.id))].sort();
+        return {
+            count: actionIds.length,
+            actions: actionIds.map(id => ({ id, graphReferences: whereWorkflowSymbol(index, id, 'action'), cli: 'inspect-only; execution requires owning Graph runtime' })),
+            taskControls: ['task.retry', 'task.recover', 'task.cancel', 'task.unblock', 'task.escalate', 'task.resume-troubleshooter'],
+            warning: 'Task controls are not equivalent to arbitrary internal Graph Action execution. No direct CLI bypass of guards or SQLite fencing.',
+        };
+    }
     if (verb === 'where')
         return whereWorkflowSymbol(index, value('--id'));
     if (verb === 'inspect') {
@@ -84,5 +93,5 @@ export function workflowCliResult(args) {
     }
     if (verb === 'action')
         throw new Error('durable graph authorization required; unsafe action request refused');
-    throw new Error('workflow supports discover, inspect, where, evaluate; action/trace require durable authorization');
+    throw new Error('workflow supports discover, actions, inspect, where, evaluate, verify, trace; mutations require durable authorization');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-relay",
-  "version": "2.0.143",
+  "version": "2.0.145",
   "description": "Durable async agent jobs coordinated through GitHub pull requests",
   "repository": {
     "type": "git",
@@ -20,7 +20,7 @@
     "test:fast": "npm run build && node --import ./test/test-store-env.mjs --test --test-concurrency=2 test/workflow-lifecycle.test.js test/workflow-v2-lifecycle-parity.test.js test/workflow-effects.test.js test/relay-store.test.js test/local-authority.test.js test/local-jobid-routing.test.js test/local-sqlite-jobid.test.js test/no-github.test.js test/scheduled-jobs.test.js test/reconcile-coordinator.test.js test/service-publication.test.js test/github-webhook.test.js",
     "test:full": "npm run build && node --import ./test/test-store-env.mjs --test --test-concurrency=1 test/*.test.js && npm run test:verification:l3",
     "test:verification:l1": "npm run build && node --test test/verification/harness.test.mjs test/verification/contract.test.mjs test/verification/graph-inventory.test.mjs test/verification/dashboard-drilldown.test.mjs test/verification/evidence-matrix.test.mjs",
-    "test:verification:l3": "npm run build && node --test test/verification/harness.test.mjs test/verification/l3-sqlite.test.mjs test/verification/l3-ingress.test.mjs test/verification/l3-replay.test.mjs test/verification/objective-authority.test.mjs test/verification/l3-convergence.test.mjs test/verification/l3-review-convergence.test.mjs test/verification/l3-human-escalation.test.mjs test/verification/l3-escalation-notifier.test.mjs test/verification/l3-unknown-effect.test.mjs test/verification/l3-planner-round.test.mjs test/verification/full-recovery-gates.test.mjs test/verification/production-wiring.test.mjs",
+    "test:verification:l3": "npm run build && node --test test/verification/harness.test.mjs test/verification/l3-sqlite.test.mjs test/verification/l3-ingress.test.mjs test/verification/l3-replay.test.mjs test/verification/objective-authority.test.mjs test/verification/l3-convergence.test.mjs test/verification/l3-review-convergence.test.mjs test/verification/l3-human-escalation.test.mjs test/verification/l3-escalation-notifier.test.mjs test/verification/l3-unknown-effect.test.mjs test/verification/l3-cli-actions.test.mjs test/verification/l3-planner-round.test.mjs test/verification/full-recovery-gates.test.mjs test/verification/production-wiring.test.mjs",
     "test:verification": "npm run test:verification:l1 && npm run test:verification:l2 && npm run test:verification:l3 && npm run test:verification:cross-a && node --test test/workflow-production-outbox.test.js && npm run test:verification:matrix",
     "e2e": "node e2e/runner/run.mjs",
     "test:verification:cross-a": "npm run build && RELAY_A_DIST=$PWD/dist node --test test/verification/action-ledger-cross-branch.test.mjs test/verification/outbox-cross-a.test.mjs",

package/workflow/main.mmd

@@ -1,17 +1,24 @@
 %% dashboard: presentation-only — not registered with GraphRuntime or the executable Graph DSL.
-%% Nodes link to the canonical executable workflow graphs. SQLite remains authoritative.
+%% PRINCIPLES (this graph is a readable overview, not an executable policy):
+%% CONTRACT defines typed events, permissions and invariants; GRAPH defines legal transitions,
+%% guards and ordering; CODE supplies verified facts and implements authorized effects.
+%% GUARD checks SQLite-backed facts without mutation; ACTION requests a Graph-authorized
+%% mutation; EFFECT performs/verifies an external side effect, never decides policy.
+%% Unknown effects must reconcile before retry. CLI can inspect/trace graph symbols;
+%% only explicitly authorized task controls are callable as CLI workflow actions.
+%% Nodes link to canonical executable workflow graphs. SQLite remains authoritative.
 flowchart LR
-    objective["START: Job Objective"]
-    planner["Planner"]
-    worker["Worker"]
-    reviewer["Reviewer"]
-    delivery["Merge / Delivery"]
-    verify["Objective Verification"]
-    completed["Completed"]
-    trouble["Troubleshooter"]
-    recover{"Recovery conditions verified?"}
-    escalation["Escalation: human action only"]
-    fix["Changes Required: fix and review again"]
+    objective["state: Job Objective"]
+    planner["graph: Planner"]
+    worker["graph: Worker"]
+    reviewer["graph: Reviewer"]
+    delivery["graph: Merge / Delivery"]
+    verify["guard: Objective verified?"]
+    completed["state: Completed"]
+    trouble["graph: Troubleshooter"]
+    recover{"guard: Recovery verified?"}
+    escalation["graph: Human escalation"]
+    fix["graph: Review changes loop"]
 
     objective --> planner
     planner --> worker
@@ -36,6 +43,14 @@ flowchart LR
     recover -->|human action required| escalation
     escalation -->|resolved: reconcile and resume| trouble
 
+    subgraph principles["Contract / Graph / Code — principal rules"]
+      contractNote["contract: Event schema + authority + permissions"]
+      graphNote["graph: Transitions + Guards + Action ordering"]
+      codeNote["code: Facts + SQLite + guarded effects"]
+      contractNote ~~~ graphNote ~~~ codeNote
+    end
+
+
     click objective href "job-lifecycle.mmd" "Job lifecycle"
     click planner href "planner-orchestration.mmd" "Planner orchestration"
     click worker href "task-lifecycle.mmd" "Task lifecycle"
@@ -51,6 +66,7 @@ flowchart LR
     classDef normal fill:#eff6ff,stroke:#2563eb,color:#1e40af
     class trouble,recover,escalation exception
     class objective,planner,worker,reviewer,delivery,verify,completed,fix normal
+    class contractNote,graphNote,codeNote normal
 
     %% Failed/unknown transitions are red; verified retries remain blue.
     linkStyle 8,9,10,11,12,18 stroke:#be3030,stroke-width:2px