botmux 2.111.0 → 2.112.0

package/dist/workflows/v3/architect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"architect.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/architect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAElF,OAAO,EAGL,KAAK,WAAW,EAEhB,KAAK,OAAO,EAEZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAKvB,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oBAAoB,CAAC,EAAE,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;IACjE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAmEjF;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA4GxF"}
+{"version":3,"file":"architect.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/architect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAElF,OAAO,EAGL,KAAK,WAAW,EAEhB,KAAK,OAAO,EAEZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAKvB,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oBAAoB,CAAC,EAAE,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;IACjE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CA+EjF;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA4GxF"}

package/dist/workflows/v3/architect.js

@@ -41,8 +41,8 @@ export function buildArchitectGoal(specPath, specJsonPath) {
         '- The host will validate dag.json with botmux v3 DAG validation and ask the human to review it.',
         '',
         'dag.json requirements:',
-        '- Use the v3 DAG schema: { runId, nodes: [{ id, type:"goal", goal, bot?, depends, inputs, timeoutSec?, humanGate?, resultSchema?, triggerRule? }] }.',
-        '- Convert each spec node sketch into one goal node unless the spec explicitly says to merge or drop it.',
+        '- Use the v3 DAG schema: { runId, nodes: [ goal | host | loop ] }.',
+        '- Convert each spec node sketch into one goal node unless it is one of the narrow deterministic host effects below, or the spec explicitly says to merge/drop it.',
         '- Treat input_needs as free-text requirements, NOT as pre-authored edges. Infer depends/inputs only when the dependency is justified by the spec.',
         '- An inputs entry may select ONE named product instead of the whole manifest: { "from": "<nodeId>", "select": { "name": "<manifest file name>" } } (or { "path": ... }). Prefer a selector when the downstream goal only needs a specific file — it keeps the worker\'s context small.',
         '- Preserve risk_gate=true as a humanGate prompt on the corresponding node.',
@@ -50,6 +50,18 @@ export function buildArchitectGoal(specPath, specJsonPath) {
         '- Keep node ids path-safe: [A-Za-z0-9._-].',
         '- Ensure the graph is acyclic and every inputs.from also appears in depends.',
         '',
+        'Deterministic external effects (type:"host"):',
+        '- Use a host node ONLY for one of: feishu-send, feishu-reply, botmux-schedule. Shape: { id, type:"host", executor, depends, inputs:[], input:<JSON>, humanGate:{prompt} }. It has no goal/bot/override/resultSchema/revisitTo.',
+        '- Every host node MUST have a runtime humanGate. The prompt is static; the runtime automatically appends a trusted preview + hash of the exact frozen provider input. Never interpolate dynamic data into humanGate.prompt.',
+        '- Keep host humanGate approval semantics fixed: use the default options, or explicitly set options containing "approve" with approveOptions exactly ["approve"]. Never authorize a custom-labelled/reject choice.',
+        '- Host input supports exact typed refs {"$ref":"context.chatId"}, {"$ref":"context.larkAppId"}, {"$ref":"context.rootMessageId"}, {"$ref":"<dependency>.result.<field>"}. A result source MUST also be in depends and MUST emit result.json.',
+        '- `${...}` inside host input strings is scalar-only. Prefer exact $ref for whole values/objects/arrays.',
+        '- feishu-send identity must come from context.larkAppId + context.chatId; feishu-reply from context.larkAppId + context.rootMessageId. Do not hard-code or parameterize chat identity.',
+        '- feishu-send input: `{ larkAppId:{"$ref":"context.larkAppId"}, chatId:{"$ref":"context.chatId"}, content:<string>, msgType?:<string> }`.',
+        '- feishu-reply input: `{ larkAppId:{"$ref":"context.larkAppId"}, rootMessageId:{"$ref":"context.rootMessageId"}, content:<string>, msgType?:<string>, replyInThread?:<boolean> }`.',
+        '- botmux-schedule input: `{ name:<string>, schedule:<string>, prompt:<string>, workingDir:<string>, larkAppId:{"$ref":"context.larkAppId"}, chatId:{"$ref":"context.chatId"}, chatType:{"$ref":"context.chatType"}, rootMessageId?:{"$ref":"context.rootMessageId"}, scope?:"thread"|"chat", repeat?:{times:number|null}, deliver?:"origin"|"new-topic" }`. OMIT `parsed`: runtime derives and freezes it once per run, so a relative time is never reused from an older run. P0 does not support deliver:"local".',
+        '- Never place host nodes inside a structured loop or in a revisit cone: a fresh replay could duplicate an external effect.',
+        '',
         'Structured rework loops (type:"loop"):',
         '- When the spec means "rework until verification passes" (fix→test, implement→review, generate→critique→revise), model it as ONE composite loop node — NEVER as a back-edge (the outer graph must stay acyclic; the validator rejects cycles).',
         '- Loop shape: { id, type:"loop", depends, inputs, maxIterations, body:{ nodes:[ <goal nodes> ] }, exit:{ node:"<verifier>", when:{ path:"result.<key>", equals:true } }, feedback:[ "<verifier>.result", "<verifier>.files" ], output:{ from:"<worker>" } }.',
@@ -69,9 +81,9 @@ export function buildArchitectGoal(specPath, specJsonPath) {
         '- Conditional edges are not allowed inside a loop body (first cut).',
         '',
         'Per-node capability override (optional):',
-        '- A goal node (incl. loop body nodes) may set `override: { model?, permissionMode?, systemPromptAppend? }` — restrict or redirect only, never escalate.',
+        '- A goal node (incl. loop body nodes) may set `override: { model?, systemPromptAppend? }`.',
         '- `model`: pick a cheaper/faster model for light nodes (research, summarize, verify) and reserve the strong default for code/synthesis nodes — state the cost reasoning in architect-notes.md.',
-        '- `permissionMode: "restricted"`: use for read-only analysis/review nodes that must not modify files or run privileged commands. There is NO "bypass" value — a node can never gain more permission than its bot.',
+        '- Permission is NOT configurable per node: every workflow worker requires CLI bypass permissions; never emit `permissionMode`.',
         '- `systemPromptAppend`: short node-specific guardrails (≤8000 bytes), e.g. "只读分析，不要修改文件". Do not duplicate the goal text here.',
         '',
         'architect-notes.md requirements:',

package/dist/workflows/v3/architect.js.map

@@ -1 +1 @@
-{"version":3,"file":"architect.js","sourceRoot":"","sources":["../../../src/workflows/v3/architect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAA0B,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,QAAQ,EACR,mBAAmB,GAOpB,MAAM,eAAe,CAAC;AAEvB,MAAM,iBAAiB,GAAG,WAAW,CAAC;AACtC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AA4BtD,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,YAAoB;IACvE,MAAM,YAAY,GAAG;QACnB,UAAU;QACV,MAAM;QACN,aAAa;QACb,kBAAkB;QAClB,YAAY;QACZ,WAAW;QACX,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,2CAA2C;QAC3C,EAAE;QACF,SAAS;QACT,sCAAsC,YAAY,EAAE;QACpD,2BAA2B,QAAQ,EAAE;QACrC,EAAE;QACF,OAAO;QACP,8DAA8D,mBAAmB,4CAA4C;QAC7H,wCAAwC,YAAY,GAAG;QACvD,qDAAqD;QACrD,+DAA+D;QAC/D,eAAe;QACf,yBAAyB;QACzB,gEAAgE;QAChE,iGAAiG;QACjG,EAAE;QACF,wBAAwB;QACxB,sJAAsJ;QACtJ,yGAAyG;QACzG,mJAAmJ;QACnJ,wRAAwR;QACxR,4EAA4E;QAC5E,0WAA0W;QAC1W,4CAA4C;QAC5C,8EAA8E;QAC9E,EAAE;QACF,wCAAwC;QACxC,gPAAgP;QAChP,8PAA8P;QAC9P,oQAAoQ;QACpQ,gIAAgI;QAChI,8OAA8O;QAC9O,iJAAiJ;QACjJ,EAAE;QACF,0CAA0C;QAC1C,wQAAwQ;QACxQ,sRAAsR;QACtR,6RAA6R;QAC7R,mOAAmO;QACnO,kIAAkI;QAClI,2UAA2U;QAC3U,0XAA0X;QAC1X,qEAAqE;QACrE,EAAE;QACF,0CAA0C;QAC1C,yJAAyJ;QACzJ,gMAAgM;QAChM,mNAAmN;QACnN,gIAAgI;QAChI,EAAE;QACF,kCAAkC;QAClC,yEAAyE;QACzE,iHAAiH;QACjH,2KAA2K;QAC3K,8DAA8D;KAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAwB;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,+EAA+E;IAC/E,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG;QACb,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE;YAC5E,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE;SAC3E;KACF,CAAC;IAEF,MAAM,GAAG,GAAmB;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,oBAAoB;QAC/B,IAAI,EAAE;YACJ,EAAE,EAAE,iBAAiB;YACrB,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC;YAC9D,SAAS,EAAE,IAAI;SAChB;QACD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU;QACV,UAAU;QACV,SAAS;QACT,GAAG,EAAE;YACH,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ;YAC9B,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU;YAClC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;YAChC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY;YACtC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU;YAClC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG;SAC1B;QACD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM;QACzC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;QAC1C,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;KAC3C,CAAC;IAEF,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACzE,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAC3E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAE1E,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,CAAC,8DAA8D,CAAC;YAC1E,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,+BAA+B,CAAC;YAC/D,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjD,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC;QAChE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC;KAC7E,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ;YACR,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,OAAO;QACP,SAAS;QACT,WAAW,EAAE,SAAS,CAAC,WAAW;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,oBAA+D;IAClF,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,mBAAmB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,YAAoB,EAAE,SAAiB;IAC5E,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;IACjG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAc;YAClB,QAAQ,EAAE,CAAC,YAAY,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,KAAc;IACvD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,eAAe,CAAC,QAAkB,EAAE,SAAiB,EAAE,YAAoB;IAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAC5F,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAkB;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO,kDAAkD,CAAC;IAC/E,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"architect.js","sourceRoot":"","sources":["../../../src/workflows/v3/architect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAA0B,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,QAAQ,EACR,mBAAmB,GAOpB,MAAM,eAAe,CAAC;AAEvB,MAAM,iBAAiB,GAAG,WAAW,CAAC;AACtC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AA4BtD,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,YAAoB;IACvE,MAAM,YAAY,GAAG;QACnB,UAAU;QACV,MAAM;QACN,aAAa;QACb,kBAAkB;QAClB,YAAY;QACZ,WAAW;QACX,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,2CAA2C;QAC3C,EAAE;QACF,SAAS;QACT,sCAAsC,YAAY,EAAE;QACpD,2BAA2B,QAAQ,EAAE;QACrC,EAAE;QACF,OAAO;QACP,8DAA8D,mBAAmB,4CAA4C;QAC7H,wCAAwC,YAAY,GAAG;QACvD,qDAAqD;QACrD,+DAA+D;QAC/D,eAAe;QACf,yBAAyB;QACzB,gEAAgE;QAChE,iGAAiG;QACjG,EAAE;QACF,wBAAwB;QACxB,oEAAoE;QACpE,mKAAmK;QACnK,mJAAmJ;QACnJ,wRAAwR;QACxR,4EAA4E;QAC5E,0WAA0W;QAC1W,4CAA4C;QAC5C,8EAA8E;QAC9E,EAAE;QACF,+CAA+C;QAC/C,gOAAgO;QAChO,6NAA6N;QAC7N,mNAAmN;QACnN,8OAA8O;QAC9O,yGAAyG;QACzG,wLAAwL;QACxL,2IAA2I;QAC3I,oLAAoL;QACpL,ofAAof;QACpf,4HAA4H;QAC5H,EAAE;QACF,wCAAwC;QACxC,gPAAgP;QAChP,8PAA8P;QAC9P,oQAAoQ;QACpQ,gIAAgI;QAChI,8OAA8O;QAC9O,iJAAiJ;QACjJ,EAAE;QACF,0CAA0C;QAC1C,wQAAwQ;QACxQ,sRAAsR;QACtR,6RAA6R;QAC7R,mOAAmO;QACnO,kIAAkI;QAClI,2UAA2U;QAC3U,0XAA0X;QAC1X,qEAAqE;QACrE,EAAE;QACF,0CAA0C;QAC1C,4FAA4F;QAC5F,gMAAgM;QAChM,gIAAgI;QAChI,gIAAgI;QAChI,EAAE;QACF,kCAAkC;QAClC,yEAAyE;QACzE,iHAAiH;QACjH,2KAA2K;QAC3K,8DAA8D;KAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAwB;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,+EAA+E;IAC/E,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG;QACb,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE;YAC5E,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE;SAC3E;KACF,CAAC;IAEF,MAAM,GAAG,GAAmB;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,oBAAoB;QAC/B,IAAI,EAAE;YACJ,EAAE,EAAE,iBAAiB;YACrB,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC;YAC9D,SAAS,EAAE,IAAI;SAChB;QACD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU;QACV,UAAU;QACV,SAAS;QACT,GAAG,EAAE;YACH,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ;YAC9B,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU;YAClC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;YAChC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY;YACtC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU;YAClC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG;SAC1B;QACD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM;QACzC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;QAC1C,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;KAC3C,CAAC;IAEF,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACzE,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAC3E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAE1E,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,CAAC,8DAA8D,CAAC;YAC1E,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,+BAA+B,CAAC;YAC/D,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjD,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC;QAChE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC;KAC7E,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ;YACR,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,OAAO;QACP,SAAS;QACT,WAAW,EAAE,SAAS,CAAC,WAAW;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,oBAA+D;IAClF,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,mBAAmB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,YAAoB,EAAE,SAAiB;IAC5E,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;IACjG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAc;YAClB,QAAQ,EAAE,CAAC,YAAY,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,KAAc;IACvD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,eAAe,CAAC,QAAkB,EAAE,SAAiB,EAAE,YAAoB;IAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAC5F,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAkB;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO,kDAAkD,CAAC;IAC/E,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;AAC7D,CAAC"}

package/dist/workflows/v3/attempt-ledger.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Pure resource ledger for v3 goal attempts.
+ *
+ * Node state is not process state: early-release cancellation and revisit
+ * supersession are intentionally journalled before the old worker has closed.
+ * This fold tracks the stricter resource truth needed at run boundaries.
+ */
+import type { StoredEvent } from './journal.js';
+export interface V3OpenWorkerAttempt {
+    nodeId: string;
+    instanceId?: string;
+    attemptId: string;
+}
+/**
+ * Return every dispatched worker attempt that has no durable post-close proof.
+ *
+ * `nodeCancelled(earlyReleaseLoser)` and `nodeInstanceSuperseded` deliberately
+ * do not close an attempt: both are scheduling decisions that can precede the
+ * outer ChildProcess `close` event by an arbitrary amount of time.
+ */
+export declare function openV3WorkerAttempts(events: readonly StoredEvent[]): V3OpenWorkerAttempt[];
+export declare function hasOpenV3WorkerAttempts(events: readonly StoredEvent[]): boolean;
+//# sourceMappingURL=attempt-ledger.d.ts.map

package/dist/workflows/v3/attempt-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt-ledger.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/attempt-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAkCD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAsC1F;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAE/E"}

package/dist/workflows/v3/attempt-ledger.js

@@ -0,0 +1,74 @@
+const isAttemptOpened = (event) => event.type === 'nodeDispatched' || event.type === 'nodeWorkerFenceArmed';
+function postCloseAttempt(event) {
+    if (event.type === 'nodeSucceeded' ||
+        event.type === 'nodeFailed' ||
+        event.type === 'nodeBlocked' ||
+        event.type === 'nodeAttemptDrained') {
+        return {
+            nodeId: event.nodeId,
+            ...(event.instanceId ? { instanceId: event.instanceId } : {}),
+            attemptId: event.attemptId,
+        };
+    }
+    // Historical run-cancellation handling guarantees that an attempt-scoped verdict is written
+    // only after the local Promise or external fence proved outer close. Keep it
+    // as a close proof for one-release histories that predate AttemptDrained.
+    if (event.type === 'nodeCancelled' && event.reason === 'runCancelled') {
+        if (!event.attemptId)
+            return undefined;
+        return {
+            nodeId: event.nodeId,
+            ...(event.instanceId ? { instanceId: event.instanceId } : {}),
+            attemptId: event.attemptId,
+        };
+    }
+    return undefined;
+}
+/**
+ * Return every dispatched worker attempt that has no durable post-close proof.
+ *
+ * `nodeCancelled(earlyReleaseLoser)` and `nodeInstanceSuperseded` deliberately
+ * do not close an attempt: both are scheduling decisions that can precede the
+ * outer ChildProcess `close` event by an arbitrary amount of time.
+ */
+export function openV3WorkerAttempts(events) {
+    const opened = new Map();
+    const closed = new Set();
+    for (const event of events) {
+        if (isAttemptOpened(event)) {
+            const prior = opened.get(event.attemptId);
+            if (prior &&
+                (prior.nodeId !== event.nodeId || prior.instanceId !== event.instanceId)) {
+                throw new Error(`v3 attempt ledger: identity changed for ${event.attemptId}`);
+            }
+            opened.set(event.attemptId, {
+                nodeId: event.nodeId,
+                ...(event.instanceId ? { instanceId: event.instanceId } : {}),
+                attemptId: event.attemptId,
+            });
+            // A malformed/reused attempt id that appears after a prior close proof
+            // must become open again. Never let an out-of-order verdict prove closure
+            // for a later dispatch.
+            closed.delete(event.attemptId);
+            continue;
+        }
+        const close = postCloseAttempt(event);
+        if (!close)
+            continue;
+        const identity = opened.get(close.attemptId);
+        // A close-before-open record cannot bless a later dispatch that reuses the
+        // id. Likewise, only the first post-open close is authoritative; later
+        // duplicate projection events do not get to reinterpret the identity.
+        if (!identity || closed.has(close.attemptId))
+            continue;
+        if (identity.nodeId !== close.nodeId || identity.instanceId !== close.instanceId) {
+            throw new Error(`v3 attempt ledger: close identity changed for ${close.attemptId}`);
+        }
+        closed.add(close.attemptId);
+    }
+    return [...opened.values()].filter((attempt) => !closed.has(attempt.attemptId));
+}
+export function hasOpenV3WorkerAttempts(events) {
+    return openV3WorkerAttempts(events).length > 0;
+}
+//# sourceMappingURL=attempt-ledger.js.map

package/dist/workflows/v3/attempt-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt-ledger.js","sourceRoot":"","sources":["../../../src/workflows/v3/attempt-ledger.ts"],"names":[],"mappings":"AAeA,MAAM,eAAe,GAAG,CACtB,KAAkB,EACgF,EAAE,CACpG,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,CAAC;AAE3E,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,IACE,KAAK,CAAC,IAAI,KAAK,eAAe;QAC9B,KAAK,CAAC,IAAI,KAAK,YAAY;QAC3B,KAAK,CAAC,IAAI,KAAK,aAAa;QAC5B,KAAK,CAAC,IAAI,KAAK,oBAAoB,EACnC,CAAC;QACD,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IACD,4FAA4F;IAC5F,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACvC,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA8B;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC1C,IACE,KAAK;gBACL,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,EACxE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;YACH,uEAAuE;YACvE,0EAA0E;YAC1E,wBAAwB;YACxB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,2EAA2E;QAC3E,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,SAAS;QACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,iDAAiD,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA8B;IACpE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACjD,CAAC"}

package/dist/workflows/v3/bot-resolve.d.ts

@@ -11,11 +11,29 @@
  * file is edited.)
  */
 import { type BotConfig } from '../../bot-registry.js';
-import type { BotSnapshot } from './contract.js';
+import { type V3Dag } from './dag.js';
+import { type BotSnapshot } from './contract.js';
 export declare function resolveBotConfig(selector: string | undefined, bots: BotConfig[]): BotConfig;
 /** The configured working dir for a bot, before `~` expansion (the pool
  *  expands).  An explicit override wins over the bot's configured value. */
 export declare function botWorkingDir(bot: BotConfig, override?: string): string;
 /** BotConfig → BotSnapshot (the runtime-frozen, secret-free per-node identity). */
 export declare function botToSnapshot(bot: BotConfig, workingDirOverride?: string): BotSnapshot;
+/**
+ * Resolve every selector used by a DAG exactly once. Keys intentionally mirror
+ * the runtime contract (`''` means the DAG's default bot); loop-body nodes use
+ * their own selector or inherit the loop selector.
+ */
+export declare function freezeDagBotSnapshots(dag: V3Dag, bots: BotConfig[], opts?: {
+    defaultSelector?: string;
+    workingDirOverride?: string;
+}): Map<string, BotSnapshot>;
+/** JSON-safe persisted shape used by `bots.snapshot.json`. */
+export declare function serializeFrozenBotSnapshots(snapshots: ReadonlyMap<string, BotSnapshot>): Record<string, BotSnapshot>;
+/**
+ * Validate the secret-free pinned bot snapshot artifact before a retry/resume
+ * can hand it to the runtime. Unknown keys fail closed so credentials or
+ * mutable permission flags cannot quietly creep into this run contract.
+ */
+export declare function parseFrozenBotSnapshots(raw: unknown, dag?: V3Dag): Map<string, BotSnapshot>;
 //# sourceMappingURL=bot-resolve.d.ts.map

package/dist/workflows/v3/bot-resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bot-resolve.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/bot-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAA8B,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,SAAS,CAW3F;AAED;4EAC4E;AAC5E,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAMvE;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,WAAW,CActF"}
+{"version":3,"file":"bot-resolve.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/bot-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAA8B,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAA0B,KAAK,KAAK,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,eAAe,CAAC;AAEvB,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,SAAS,CAe3F;AAED;4EAC4E;AAC5E,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAMvE;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,WAAW,CAkBtF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,KAAK,EACV,IAAI,EAAE,SAAS,EAAE,EACjB,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAO,GACnE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAuB1B;AAED,8DAA8D;AAC9D,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,GAC1C,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAE7B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAkF3F"}

package/dist/workflows/v3/bot-resolve.js

@@ -11,13 +11,19 @@
  * file is edited.)
  */
 import { effectiveDefaultWorkingDir } from '../../bot-registry.js';
+import { isGoalNode, isLoopNode } from './dag.js';
+import { V3_SUPPORTED_CLIS, isV3SupportedCli, } from './contract.js';
 export function resolveBotConfig(selector, bots) {
     if (!selector) {
         if (bots.length === 0)
             throw new Error('v3: bots.json has no bots — run `botmux setup` first');
         return bots[0];
     }
-    const match = bots.find((b) => b.larkAppId === selector || b.name === selector);
+    // Stable identity always wins over a display-name collision. Saved Workflow
+    // templates persist larkAppId; a bot named like another bot's app id must
+    // never hijack that selector.
+    const match = bots.find((b) => b.larkAppId === selector)
+        ?? bots.find((b) => b.name === selector);
     if (!match) {
         const known = bots.map((b) => b.name ?? b.larkAppId).join(', ') || '(none)';
         throw new Error(`v3: no bot matches "${selector}" (known: ${known})`);
@@ -35,13 +41,15 @@ export function botWorkingDir(bot, override) {
 }
 /** BotConfig → BotSnapshot (the runtime-frozen, secret-free per-node identity). */
 export function botToSnapshot(bot, workingDirOverride) {
+    if (bot.disableCliBypass === true) {
+        throw new Error(`v3 workflow requires CLI bypass permissions, but bot "${bot.name ?? bot.larkAppId}" ` +
+            'has disableCliBypass=true. Use a workflow bot with bypass enabled, or remove/set this bot option to false');
+    }
     return {
         larkAppId: bot.larkAppId,
         cliId: bot.cliId,
         ...(bot.cliPathOverride ? { cliPathOverride: bot.cliPathOverride } : {}),
         ...(bot.model ? { model: bot.model } : {}),
-        // 受限 bot 的全部节点保持受限（P2 不可提权红线的 bot 侧入口）。
-        ...(bot.disableCliBypass === true ? { disableCliBypass: true } : {}),
         ...(bot.sandbox === true ? { sandbox: true } : {}),
         ...(bot.sandboxHidePaths?.length ? { sandboxHidePaths: [...bot.sandboxHidePaths] } : {}),
         ...(bot.sandboxReadonlyPaths?.length ? { sandboxReadonlyPaths: [...bot.sandboxReadonlyPaths] } : {}),
@@ -49,4 +57,122 @@ export function botToSnapshot(bot, workingDirOverride) {
         workingDir: botWorkingDir(bot, workingDirOverride),
     };
 }
+/**
+ * Resolve every selector used by a DAG exactly once. Keys intentionally mirror
+ * the runtime contract (`''` means the DAG's default bot); loop-body nodes use
+ * their own selector or inherit the loop selector.
+ */
+export function freezeDagBotSnapshots(dag, bots, opts = {}) {
+    const snapshots = new Map();
+    const freeze = (selector) => {
+        const key = selector ?? '';
+        if (snapshots.has(key))
+            return;
+        const bot = resolveBotConfig(selector ?? opts.defaultSelector, bots);
+        const snapshot = botToSnapshot(bot, opts.workingDirOverride);
+        if (!isV3SupportedCli(snapshot.cliId)) {
+            throw new Error(`v3 workflow bot "${bot.name ?? bot.larkAppId}" uses unsupported CLI "${snapshot.cliId}" ` +
+                `(supported: ${V3_SUPPORTED_CLIS.join(', ')})`);
+        }
+        snapshots.set(key, snapshot);
+    };
+    for (const node of dag.nodes) {
+        if (isGoalNode(node))
+            freeze(node.bot);
+        if (isLoopNode(node)) {
+            for (const bodyNode of node.body.nodes)
+                freeze(bodyNode.bot ?? node.bot);
+        }
+    }
+    return snapshots;
+}
+/** JSON-safe persisted shape used by `bots.snapshot.json`. */
+export function serializeFrozenBotSnapshots(snapshots) {
+    return Object.fromEntries(snapshots);
+}
+/**
+ * Validate the secret-free pinned bot snapshot artifact before a retry/resume
+ * can hand it to the runtime. Unknown keys fail closed so credentials or
+ * mutable permission flags cannot quietly creep into this run contract.
+ */
+export function parseFrozenBotSnapshots(raw, dag) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new Error('bots.snapshot.json must be an object keyed by DAG bot selector');
+    }
+    const allowed = new Set([
+        'larkAppId',
+        'cliId',
+        'cliPathOverride',
+        'model',
+        'sandbox',
+        'sandboxHidePaths',
+        'sandboxReadonlyPaths',
+        'sandboxNetwork',
+        'workingDir',
+    ]);
+    const snapshots = new Map();
+    for (const [key, value] of Object.entries(raw)) {
+        if (!value || typeof value !== 'object' || Array.isArray(value)) {
+            throw new Error(`bots.snapshot.json[${JSON.stringify(key)}] must be an object`);
+        }
+        const obj = value;
+        const extra = Object.keys(obj).filter((field) => !allowed.has(field));
+        if (extra.length > 0) {
+            throw new Error(`bots.snapshot.json[${JSON.stringify(key)}] has unsupported key(s): ${extra.join(', ')}`);
+        }
+        if (typeof obj.larkAppId !== 'string' || obj.larkAppId.length === 0) {
+            throw new Error(`bots.snapshot.json[${JSON.stringify(key)}].larkAppId must be a non-empty string`);
+        }
+        if (typeof obj.cliId !== 'string' || !isV3SupportedCli(obj.cliId)) {
+            throw new Error(`bots.snapshot.json[${JSON.stringify(key)}].cliId must be one of ${V3_SUPPORTED_CLIS.join(', ')}`);
+        }
+        if (typeof obj.workingDir !== 'string' || obj.workingDir.length === 0) {
+            throw new Error(`bots.snapshot.json[${JSON.stringify(key)}].workingDir must be a non-empty string`);
+        }
+        for (const field of ['cliPathOverride', 'model']) {
+            if (obj[field] !== undefined && typeof obj[field] !== 'string') {
+                throw new Error(`bots.snapshot.json[${JSON.stringify(key)}].${field} must be a string`);
+            }
+        }
+        for (const field of ['sandbox', 'sandboxNetwork']) {
+            if (obj[field] !== undefined && typeof obj[field] !== 'boolean') {
+                throw new Error(`bots.snapshot.json[${JSON.stringify(key)}].${field} must be a boolean`);
+            }
+        }
+        for (const field of ['sandboxHidePaths', 'sandboxReadonlyPaths']) {
+            if (obj[field] !== undefined &&
+                (!Array.isArray(obj[field]) || !obj[field].every((item) => typeof item === 'string'))) {
+                throw new Error(`bots.snapshot.json[${JSON.stringify(key)}].${field} must be a string array`);
+            }
+        }
+        snapshots.set(key, {
+            larkAppId: obj.larkAppId,
+            cliId: obj.cliId,
+            ...(obj.cliPathOverride !== undefined ? { cliPathOverride: obj.cliPathOverride } : {}),
+            ...(obj.model !== undefined ? { model: obj.model } : {}),
+            ...(obj.sandbox !== undefined ? { sandbox: obj.sandbox } : {}),
+            ...(obj.sandboxHidePaths !== undefined ? { sandboxHidePaths: [...obj.sandboxHidePaths] } : {}),
+            ...(obj.sandboxReadonlyPaths !== undefined ? { sandboxReadonlyPaths: [...obj.sandboxReadonlyPaths] } : {}),
+            ...(obj.sandboxNetwork !== undefined ? { sandboxNetwork: obj.sandboxNetwork } : {}),
+            workingDir: obj.workingDir,
+        });
+    }
+    if (dag) {
+        const required = new Set();
+        for (const node of dag.nodes) {
+            if (isGoalNode(node))
+                required.add(node.bot ?? '');
+            if (isLoopNode(node)) {
+                for (const bodyNode of node.body.nodes)
+                    required.add(bodyNode.bot ?? node.bot ?? '');
+            }
+        }
+        for (const key of required) {
+            if (!snapshots.has(key)) {
+                throw new Error(`bots.snapshot.json is missing selector ${JSON.stringify(key || '<default>')}`);
+            }
+        }
+    }
+    return snapshots;
+}
 //# sourceMappingURL=bot-resolve.js.map

package/dist/workflows/v3/bot-resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"bot-resolve.js","sourceRoot":"","sources":["../../../src/workflows/v3/bot-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,0BAA0B,EAAkB,MAAM,uBAAuB,CAAC;AAGnF,MAAM,UAAU,gBAAgB,CAAC,QAA4B,EAAE,IAAiB;IAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,aAAa,KAAK,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,QAAiB;IAC7D,OAAO,QAAQ;WACV,0BAA0B,CAAC,GAAG,CAAC;WAC/B,GAAG,CAAC,UAAU;WACd,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;WACpB,GAAG,CAAC;AACX,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,kBAA2B;IACvE,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,wCAAwC;QACxC,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,UAAU,EAAE,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC;KACnD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bot-resolve.js","sourceRoot":"","sources":["../../../src/workflows/v3/bot-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,0BAA0B,EAAkB,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAc,MAAM,UAAU,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AAEvB,MAAM,UAAU,gBAAgB,CAAC,QAA4B,EAAE,IAAiB;IAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC;IAClB,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,8BAA8B;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;WACnD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,aAAa,KAAK,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,QAAiB;IAC7D,OAAO,QAAQ;WACV,0BAA0B,CAAC,GAAG,CAAC;WAC/B,GAAG,CAAC,UAAU;WACd,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;WACpB,GAAG,CAAC;AACX,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,kBAA2B;IACvE,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,yDAAyD,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,IAAI;YACtF,2GAA2G,CAC5G,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,UAAU,EAAE,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC;KACnD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAU,EACV,IAAiB,EACjB,OAAkE,EAAE;IAEpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,QAA4B,EAAQ,EAAE;QACpD,MAAM,GAAG,GAAG,QAAQ,IAAI,EAAE,CAAC;QAC3B,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC/B,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC7D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,oBAAoB,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,2BAA2B,QAAQ,CAAC,KAAK,IAAI;gBAC1F,eAAe,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/C,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,2BAA2B,CACzC,SAA2C;IAE3C,OAAO,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAW;IAC/D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,WAAW;QACX,OAAO;QACP,iBAAiB;QACjB,OAAO;QACP,SAAS;QACT,kBAAkB;QAClB,sBAAsB;QACtB,gBAAgB;QAChB,YAAY;KACb,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAA6B,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,0BAA0B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClG,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACtG,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAU,EAAE,CAAC;YAC1D,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,mBAAmB,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAU,EAAE,CAAC;YAC3D,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,oBAAoB,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,kBAAkB,EAAE,sBAAsB,CAAU,EAAE,CAAC;YAC1E,IACE,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS;gBACxB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAE,GAAG,CAAC,KAAK,CAAe,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,EACpG,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,yBAAyB,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;YACjB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,GAAG,CAAC,KAA6B;YACxC,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,GAAG,CAAC,gBAA4B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,GAAG,CAAC,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,GAAG,GAAG,CAAC,oBAAgC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtH,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;oBAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/workflows/v3/cli-daemon-command-authority.d.ts

@@ -0,0 +1,59 @@
+import { type CurrentTurnProvenance } from '../../core/current-turn-provenance.js';
+export type V3DaemonCommandBindingSource = 'run-envelope' | 'legacy-grill' | 'legacy-unbound';
+export interface V3DaemonCommandAuthority {
+    runDir: string;
+    /** Exact daemon owner selected from the authenticated target/current turn. */
+    larkAppId: string;
+    mode: 'chat' | 'standalone';
+    bindingSource: V3DaemonCommandBindingSource;
+}
+export interface AuthorizeV3DaemonCommandOptions {
+    runId: string;
+    dataDir: string;
+    baseDir?: string;
+    envSessionId?: string;
+    startPid?: number;
+    /** Explicit `--bot`; inherited BOTMUX_LARK_APP_ID is intentionally ignored. */
+    requestedLarkAppId?: string;
+    /** Cancel-only escape hatch: an unbound manual run is mutated on local disk
+     * and therefore does not need a daemon selector. Other daemon commands keep
+     * requiring --bot for standalone routing. */
+    allowStandaloneLocal?: boolean;
+    /** Test seam. Production always uses the fresh marker/session resolver. */
+    resolveProvenance?: (options: {
+        dataDir: string;
+        envSessionId?: string;
+        startPid?: number;
+    }) => CurrentTurnProvenance | null;
+}
+export declare class V3DaemonCommandAuthorityError extends Error {
+    constructor(message: string);
+}
+/** The exact identity tuple a chat mutation must prove against the binding. */
+export interface V3RunMutationCurrentTuple {
+    callerOpenId: string;
+    chatId: string;
+    larkAppId: string;
+}
+/**
+ * Chat-tuple authorization core shared by the CLI host path (marker-derived
+ * provenance) and the daemon session relay (capability-derived live session).
+ * The tuple must have been AUTHENTICATED by the caller: process-tree marker +
+ * durable session join on the host, or rotating per-turn capability + the
+ * daemon's own live session record on the relay path — never env/argv claims.
+ */
+export declare function authorizeV3RunMutationForCurrentTuple(options: {
+    runId: string;
+    baseDir?: string;
+    current: V3RunMutationCurrentTuple;
+}): V3DaemonCommandAuthority;
+/**
+ * Authorize a CLI daemon mutation and return the only app id it may contact.
+ *
+ * Chat callers may mutate only a run bound to the exact current
+ * (caller, chat, app) tuple. Genuine standalone callers may mutate only an
+ * unbound run and must name the daemon explicitly with --bot. This preserves
+ * the dev path without letting a detached/stale agent fall back to it.
+ */
+export declare function authorizeV3DaemonCommand(options: AuthorizeV3DaemonCommandOptions): V3DaemonCommandAuthority;
+//# sourceMappingURL=cli-daemon-command-authority.d.ts.map

package/dist/workflows/v3/cli-daemon-command-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-daemon-command-authority.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/cli-daemon-command-authority.ts"],"names":[],"mappings":"AAaA,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,uCAAuC,CAAC;AAU/C,MAAM,MAAM,4BAA4B,GAAG,cAAc,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAE9F,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;IAC5B,aAAa,EAAE,4BAA4B,CAAC;CAC7C;AAED,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;iDAE6C;IAC7C,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC5B,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,qBAAqB,GAAG,IAAI,CAAC;CACpC;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAqFD,+EAA+E;AAC/E,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAUD;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CAAC,OAAO,EAAE;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,yBAAyB,CAAC;CACpC,GAAG,wBAAwB,CA4B3B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,wBAAwB,CAiD1B"}