botmux 2.111.0 → 2.112.0

package/dist/workflows/v3/template-bindings.js

@@ -0,0 +1,204 @@
+import { collectV3HostBindingRefs, parseV3HostBindingRef, V3HostBindingError, } from './host-bindings.js';
+const MARKER_RE = /\$\{(params|context)\.([A-Za-z_][A-Za-z0-9_]{0,63})\}/g;
+function collectFromText(text) {
+    const params = new Set();
+    const context = new Set();
+    if (text) {
+        MARKER_RE.lastIndex = 0;
+        for (let match = MARKER_RE.exec(text); match; match = MARKER_RE.exec(text)) {
+            if (match[1] === 'params')
+                params.add(match[2]);
+            else
+                context.add(match[2]);
+        }
+    }
+    return { params: [...params], context: [...context] };
+}
+/** Bindings a single goal worker is authorized to receive. */
+export function savedWorkflowBindingsForNode(node) {
+    const goal = collectFromText(node.goal);
+    const instructions = collectFromText(node.override?.systemPromptAppend);
+    const host = node.type === 'host'
+        ? collectV3HostBindingRefs(node.input)
+        : [];
+    return {
+        params: [...new Set([
+                ...goal.params,
+                ...instructions.params,
+                ...host.filter((ref) => ref.kind === 'params').map((ref) => ref.path[0]),
+            ])],
+        context: [...new Set([
+                ...goal.context,
+                ...instructions.context,
+                ...host
+                    .filter((ref) => ref.kind === 'context')
+                    .map((ref) => ref.path[0]),
+            ])],
+    };
+}
+/** All bindings in a DAG, including goal nodes nested inside loop bodies. */
+export function collectSavedWorkflowTemplateBindings(dagTemplate) {
+    const params = new Set();
+    const context = new Set();
+    const visit = (nodes) => {
+        for (const node of nodes) {
+            const own = savedWorkflowBindingsForNode(node);
+            own.params.forEach((name) => params.add(name));
+            own.context.forEach((name) => context.add(name));
+            if (node.type === 'loop' && node.body)
+                visit(node.body.nodes);
+        }
+    };
+    visit(dagTemplate.nodes);
+    return { params: [...params], context: [...context] };
+}
+/**
+ * Spec markers are documentation mirrors only. They may occur in narrative
+ * fields, never in sketch ids, booleans, schema fields, or other structure.
+ */
+export function assertSavedWorkflowSpecTemplateBindings(specTemplate, inputs, contextRefs) {
+    const allowed = (path) => path === 'specTemplate.title' ||
+        path === 'specTemplate.requirement' ||
+        path === 'specTemplate.acceptance' ||
+        /^specTemplate\.nonGoals\[\d+\]$/.test(path) ||
+        /^specTemplate\.nodes\[\d+\]\.(?:goal|acceptance)$/.test(path) ||
+        /^specTemplate\.nodes\[\d+\]\.(?:input_needs|expected_outputs|unknowns)\[\d+\]$/.test(path);
+    const walk = (value, path) => {
+        if (typeof value === 'string') {
+            if (!value.includes('${'))
+                return;
+            if (!allowed(path)) {
+                throw new Error(`Saved Workflow spec marker is not allowed in structural field ${path}`);
+            }
+            const covered = new Array(value.length).fill(false);
+            MARKER_RE.lastIndex = 0;
+            for (let match = MARKER_RE.exec(value); match; match = MARKER_RE.exec(value)) {
+                const [whole, namespace, name] = match;
+                for (let i = match.index; i < match.index + whole.length; i++)
+                    covered[i] = true;
+                if (namespace === 'params' && !Object.prototype.hasOwnProperty.call(inputs, name)) {
+                    throw new Error(`Saved Workflow spec references undeclared parameter ${name} at ${path}`);
+                }
+                if (namespace === 'context' && !contextRefs.includes(name)) {
+                    throw new Error(`Saved Workflow spec references undeclared context ${name} at ${path}`);
+                }
+            }
+            for (let i = value.indexOf('${'); i >= 0; i = value.indexOf('${', i + 2)) {
+                if (!covered[i]) {
+                    throw new Error(`Saved Workflow has malformed/unsupported spec marker at ${path}`);
+                }
+            }
+            return;
+        }
+        if (Array.isArray(value)) {
+            value.forEach((item, index) => walk(item, `${path}[${index}]`));
+            return;
+        }
+        if (value && typeof value === 'object') {
+            for (const [key, child] of Object.entries(value)) {
+                walk(child, `${path}.${key}`);
+            }
+        }
+    };
+    walk(specTemplate, 'specTemplate');
+}
+/**
+ * Validate all markers and keep topology/bot/gate fields non-parameterized.
+ * Human gate prompts are deliberately structural/safety text in P0: the host
+ * cannot ask a person to approve an unresolved `${params.x}` target.
+ */
+export function assertSavedWorkflowTemplateBindings(dagTemplate, inputs, contextRefs) {
+    const allowedTextPath = (path) => path.endsWith('.goal') ||
+        path.endsWith('.override.systemPromptAppend') ||
+        /\.input(?:\.|\[|$)/.test(path);
+    const walk = (value, path) => {
+        if (typeof value === 'string') {
+            if (!value.includes('${'))
+                return;
+            if (!allowedTextPath(path)) {
+                throw new Error(`Saved Workflow template marker is not allowed in structural/safety field ${path}; ` +
+                    'rewrite the literal before saving');
+            }
+            const covered = new Array(value.length).fill(false);
+            MARKER_RE.lastIndex = 0;
+            for (let match = MARKER_RE.exec(value); match; match = MARKER_RE.exec(value)) {
+                const [whole, namespace, name] = match;
+                for (let i = match.index; i < match.index + whole.length; i++)
+                    covered[i] = true;
+                if (namespace === 'params' && !Object.prototype.hasOwnProperty.call(inputs, name)) {
+                    throw new Error(`Saved Workflow template references undeclared parameter ${name} at ${path}`);
+                }
+                if (namespace === 'context' && !contextRefs.includes(name)) {
+                    throw new Error(`Saved Workflow template references undeclared context ${name} at ${path}`);
+                }
+            }
+            for (let i = value.indexOf('${'); i >= 0; i = value.indexOf('${', i + 2)) {
+                if (!covered[i]) {
+                    throw new Error(`Saved Workflow has malformed/unsupported template marker at ${path}; ` +
+                        'rewrite literal `${...}` text before saving');
+                }
+            }
+            return;
+        }
+        if (Array.isArray(value)) {
+            value.forEach((item, index) => walk(item, `${path}[${index}]`));
+            return;
+        }
+        if (value && typeof value === 'object') {
+            const record = value;
+            if (Object.keys(record).length === 1 && typeof record.$ref === 'string') {
+                let ref;
+                try {
+                    ref = parseV3HostBindingRef(record.$ref);
+                }
+                catch (err) {
+                    throw new Error(err instanceof V3HostBindingError ? err.message : String(err));
+                }
+                if (ref.kind === 'params' && !Object.prototype.hasOwnProperty.call(inputs, ref.path[0])) {
+                    throw new Error(`Saved Workflow host input references undeclared parameter ${ref.path[0]} at ${path}`);
+                }
+                if (ref.kind === 'context' && !contextRefs.includes(ref.path[0])) {
+                    throw new Error(`Saved Workflow host input references undeclared context ${ref.path[0]} at ${path}`);
+                }
+                return;
+            }
+            for (const [key, child] of Object.entries(value)) {
+                walk(child, `${path}.${key}`);
+            }
+        }
+    };
+    walk(dagTemplate, 'dagTemplate');
+    for (const node of dagTemplate.nodes) {
+        if (node.type !== 'host')
+            continue;
+        const root = node.input;
+        if (!root || typeof root !== 'object' || Array.isArray(root)) {
+            throw new Error(`Saved Workflow host node ${node.id}.input must be an object`);
+        }
+        if (node.executor === 'botmux-schedule' &&
+            Object.prototype.hasOwnProperty.call(root, 'parsed')) {
+            throw new Error(`Saved Workflow host node ${node.id}.input.parsed must be omitted; ` +
+                'the runtime derives and freezes relative schedule time for each run');
+        }
+        const requiredIdentity = node.executor === 'feishu-send' ? { larkAppId: 'larkAppId', chatId: 'chatId' }
+            : node.executor === 'feishu-reply' ? { larkAppId: 'larkAppId', rootMessageId: 'rootMessageId' }
+                : { larkAppId: 'larkAppId', chatId: 'chatId', chatType: 'chatType' };
+        if (node.executor === 'botmux-schedule' &&
+            Object.prototype.hasOwnProperty.call(root, 'rootMessageId')) {
+            requiredIdentity.rootMessageId = 'rootMessageId';
+        }
+        for (const [field, contextName] of Object.entries(requiredIdentity)) {
+            const value = root[field];
+            const expected = `context.${contextName}`;
+            if (!value ||
+                typeof value !== 'object' ||
+                Array.isArray(value) ||
+                Object.keys(value).length !== 1 ||
+                value.$ref !== expected) {
+                throw new Error(`Saved Workflow host node ${node.id}.input.${field} must be exact { "$ref": "${expected}" }; ` +
+                    'chat identity cannot come from a mutable parameter or frozen literal');
+            }
+        }
+    }
+}
+//# sourceMappingURL=template-bindings.js.map

package/dist/workflows/v3/template-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-bindings.js","sourceRoot":"","sources":["../../../src/workflows/v3/template-bindings.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,SAAS,GAAG,wDAAwD,CAAC;AAO3E,SAAS,eAAe,CAAC,IAAwB;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC1D,IAAI,IAAI,EAAE,CAAC;QACT,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;QACxB,KAAK,IAAI,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;;gBAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAmC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM;QAC/B,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC;gBAClB,GAAG,IAAI,CAAC,MAAM;gBACd,GAAG,YAAY,CAAC,MAAM;gBACtB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;aAC1E,CAAC,CAAC;QACH,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC;gBACnB,GAAG,IAAI,CAAC,OAAO;gBACf,GAAG,YAAY,CAAC,OAAO;gBACvB,GAAG,IAAI;qBACJ,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;qBACvC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAmC,CAAC;aAC/D,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oCAAoC,CAClD,WAA0B;IAE1B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,KAAwB,EAAQ,EAAE;QAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uCAAuC,CACrD,YAA4B,EAC5B,MAA6C,EAC7C,WAAsD;IAEtD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CACxC,IAAI,KAAK,oBAAoB;QAC7B,IAAI,KAAK,0BAA0B;QACnC,IAAI,KAAK,yBAAyB;QAClC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9D,gFAAgF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9F,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,IAAY,EAAQ,EAAE;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO;YAClC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,iEAAiE,IAAI,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,KAAK,CAAU,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7D,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;YACxB,KAAK,IAAI,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7E,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;gBACvC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;gBACjF,IAAI,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;oBAClF,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC5F,CAAC;gBACD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAsC,CAAC,EAAE,CAAC;oBAC7F,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,WAA0B,EAC1B,MAA6C,EAC7C,WAAsD;IAEtD,MAAM,eAAe,GAAG,CAAC,IAAY,EAAW,EAAE,CAChD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC7C,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,IAAY,EAAQ,EAAE;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO;YAClC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,4EAA4E,IAAI,IAAI;oBACpF,mCAAmC,CACpC,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,KAAK,CAAU,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7D,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;YACxB,KAAK,IAAI,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7E,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;gBACvC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;gBACjF,IAAI,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;oBAClF,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;gBAChG,CAAC;gBACD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAsC,CAAC,EAAE,CAAC;oBAC7F,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CACb,+DAA+D,IAAI,IAAI;wBACvE,6CAA6C,CAC9C,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxE,IAAI,GAAG,CAAC;gBACR,IAAI,CAAC;oBACH,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBACjF,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;oBACzF,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACzG,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAmC,CAAC,EAAE,CAAC;oBACnG,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACvG,CAAC;gBACD,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;QACjF,CAAC;QACD,IACE,IAAI,CAAC,QAAQ,KAAK,iBAAiB;YACnC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EACpD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,EAAE,iCAAiC;gBACpE,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,GACpB,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC9E,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE;gBAC/F,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACvE,IACE,IAAI,CAAC,QAAQ,KAAK,iBAAiB;YACnC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAC3D,CAAC;YACD,gBAAgB,CAAC,aAAa,GAAG,eAAe,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpE,MAAM,KAAK,GAAI,IAAgC,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,WAAW,WAAW,EAAE,CAAC;YAC1C,IACE,CAAC,KAAK;gBACN,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;gBAC9B,KAAiC,CAAC,IAAI,KAAK,QAAQ,EACpD,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,EAAE,UAAU,KAAK,6BAA6B,QAAQ,OAAO;oBAC9F,sEAAsE,CACvE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/workflows/v3/worker-fence.d.ts

@@ -0,0 +1,158 @@
+export declare const V3_ATTEMPT_WORKER_FENCE_FILE = ".worker-fence.json";
+export declare const V3_ATTEMPT_WORKER_FENCE_SCHEMA_VERSION: 1;
+interface V3AttemptWorkerFenceBase {
+    schemaVersion: typeof V3_ATTEMPT_WORKER_FENCE_SCHEMA_VERSION;
+    runId: string;
+    attemptId: string;
+    ownerPid: number;
+    ownerProcStart: string;
+}
+export interface V3ArmedAttemptWorkerFence extends V3AttemptWorkerFenceBase {
+    phase: 'armed';
+}
+export type V3NoWorkerSpawnReason = 'pre_aborted' | 'secret_missing' | 'setup_failed' | 'spawn_threw';
+export interface V3ClosedNoSpawnAttemptWorkerFence extends V3AttemptWorkerFenceBase {
+    phase: 'closed_no_spawn';
+    reason: V3NoWorkerSpawnReason;
+}
+export interface V3ActiveAttemptWorkerFence extends V3AttemptWorkerFenceBase {
+    phase: 'active';
+    workerPid: number;
+    workerProcStart: string;
+}
+export interface V3ClosedAttemptWorkerFence extends V3AttemptWorkerFenceBase {
+    phase: 'closed';
+    workerPid: number;
+    workerProcStart: string;
+}
+export type V3AttemptWorkerFence = V3ArmedAttemptWorkerFence | V3ClosedNoSpawnAttemptWorkerFence | V3ActiveAttemptWorkerFence | V3ClosedAttemptWorkerFence;
+export interface V3AttemptWorkerFenceBinding {
+    runId: string;
+    attemptId: string;
+}
+export type V3AttemptWorkerFenceProbe = {
+    status: 'missing';
+} | {
+    status: 'unknown';
+    fence: V3AttemptWorkerFence;
+    reason: 'armed_without_worker_identity' | 'process_identity_unavailable' | 'process_probe_denied';
+} | {
+    status: 'alive';
+    fence: V3ActiveAttemptWorkerFence;
+} | {
+    status: 'dead';
+    fence: V3ClosedNoSpawnAttemptWorkerFence | V3ActiveAttemptWorkerFence | V3ClosedAttemptWorkerFence;
+    reason: 'no_worker_spawned' | 'outer_process_closed' | 'process_missing' | 'process_identity_mismatch';
+};
+export type V3AttemptWorkerSignal = 'SIGINT' | 'SIGKILL';
+export type V3AttemptWorkerSignalResult = {
+    status: 'signalled';
+    fence: V3ActiveAttemptWorkerFence;
+    signal: V3AttemptWorkerSignal;
+} | Exclude<V3AttemptWorkerFenceProbe, {
+    status: 'alive';
+}>;
+export type V3AttemptWorkerFenceRemoval = 'missing' | 'mismatch' | 'removed';
+export interface V3DiscoveredAttemptWorker {
+    pid: number;
+    procStart: string;
+}
+export type V3AttemptWorkerDiscovery = {
+    status: 'unsupported';
+} | {
+    status: 'none';
+} | {
+    status: 'one';
+    worker: V3DiscoveredAttemptWorker;
+} | {
+    status: 'ambiguous';
+    workers: V3DiscoveredAttemptWorker[];
+    unverifiablePids: number[];
+    reason: 'multiple_or_unverifiable' | 'candidate_changed';
+};
+export type V3ArmedFenceRecoveryResult = {
+    status: 'recovered';
+    fence: V3ActiveAttemptWorkerFence;
+} | {
+    status: 'already_active';
+    fence: V3ActiveAttemptWorkerFence;
+} | {
+    status: 'already_closed';
+    fence: V3ClosedAttemptWorkerFence;
+} | {
+    status: 'already_closed_no_spawn';
+    fence: V3ClosedNoSpawnAttemptWorkerFence;
+} | {
+    status: 'owner_alive' | 'owner_unknown' | 'missing';
+} | Exclude<V3AttemptWorkerDiscovery, {
+    status: 'one';
+}>;
+export interface V3AttemptWorkerProcessLike {
+    readonly pid?: number;
+    on(event: 'close', listener: (code: number | null) => void): unknown;
+}
+export declare class V3AttemptWorkerFenceIntegrityError extends Error {
+    constructor(message: string);
+}
+export declare function v3AttemptWorkerFencePath(attemptDir: string): string;
+/** Missing is distinct from invalid; every malformed/unexpected shape fails closed. */
+export declare function readV3AttemptWorkerFence(attemptDir: string, expected: V3AttemptWorkerFenceBinding): V3AttemptWorkerFence | null;
+/** Publish the daemon-owned pre-fork fence. Call this before factory.spawn(). */
+export declare function armV3AttemptWorkerFence(input: {
+    attemptDir: string;
+    runId: string;
+    attemptId: string;
+}): V3ArmedAttemptWorkerFence;
+/** Atomically bind an exact armed fence to the newly-forked worker identity. */
+export declare function activateV3AttemptWorkerFence(input: {
+    attemptDir: string;
+    armed: V3ArmedAttemptWorkerFence;
+    workerPid: number;
+}): V3ActiveAttemptWorkerFence;
+/**
+ * Durable proof that the armed pre-fork path ended without creating a child.
+ * Only the still-live daemon that armed the fence may make this assertion.
+ */
+export declare function closeV3ArmedFenceWithoutSpawn(attemptDir: string, armed: V3ArmedAttemptWorkerFence, reason: V3NoWorkerSpawnReason): V3ClosedNoSpawnAttemptWorkerFence;
+/**
+ * Linux-only conservative orphan discovery for the armed fork gap and legacy
+ * runs without a fence. Both the exact attempt-dir environment binding and a
+ * worker.js/worker.ts command-line argument are required. Same-uid unreadable matches
+ * make the result ambiguous rather than being silently treated as absent.
+ */
+export declare function discoverV3AttemptWorker(attemptDir: string): V3AttemptWorkerDiscovery;
+/**
+ * Recover armed → active only after the recorded owner is provably gone and a
+ * single exact attempt-bound worker is discoverable. The owner proof and scan
+ * are repeated under the fence lock before publication.
+ */
+export declare function recoverV3ArmedFenceWorker(input: {
+    attemptDir: string;
+    armed: V3ArmedAttemptWorkerFence;
+}): V3ArmedFenceRecoveryResult;
+/**
+ * Armed is always unknown (including after owner death); missing remains
+ * distinct so runtime can apply its explicit legacy/drain fail-safe policy.
+ */
+export declare function probeV3AttemptWorkerFence(attemptDir: string, expected: V3AttemptWorkerFenceBinding): V3AttemptWorkerFenceProbe;
+/** Signal only the exact active fence after rechecking its live start identity. */
+export declare function signalV3AttemptWorker(attemptDir: string, expected: V3ActiveAttemptWorkerFence, signal: V3AttemptWorkerSignal): V3AttemptWorkerSignalResult;
+/** Durable active → closed tombstone transition performed on ChildProcess close. */
+export declare function closeV3AttemptWorkerFence(attemptDir: string, expected: V3ActiveAttemptWorkerFence): V3ClosedAttemptWorkerFence;
+/** Exact-identity removal after the journal has durably settled the attempt. */
+export declare function removeV3AttemptWorkerFence(attemptDir: string, expected: V3AttemptWorkerFence): V3AttemptWorkerFenceRemoval;
+/**
+ * Activate and bind a durable tombstone transition to ChildProcess `close`
+ * only. `exit` is not a
+ * resource fence: stdio/IPC (and descendants holding them) may still be open.
+ * The listener is installed before activation and replays cleanup if close
+ * races the durable active transition.
+ */
+export declare function bindV3AttemptWorkerFence(input: {
+    worker: V3AttemptWorkerProcessLike;
+    attemptDir: string;
+    armed: V3ArmedAttemptWorkerFence;
+    onCleanupError?: (error: unknown) => void;
+}): V3ActiveAttemptWorkerFence;
+export {};
+//# sourceMappingURL=worker-fence.d.ts.map

package/dist/workflows/v3/worker-fence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-fence.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/worker-fence.ts"],"names":[],"mappings":"AAkCA,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AACjE,eAAO,MAAM,sCAAsC,EAAG,CAAU,CAAC;AAgBjE,UAAU,wBAAwB;IAChC,aAAa,EAAE,OAAO,sCAAsC,CAAC;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAA0B,SAAQ,wBAAwB;IACzE,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG,gBAAgB,GAAG,cAAc,GAAG,aAAa,CAAC;AAEtG,MAAM,WAAW,iCAAkC,SAAQ,wBAAwB;IACjF,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,qBAAqB,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;IAC1E,KAAK,EAAE,QAAQ,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;IAC1E,KAAK,EAAE,QAAQ,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,oBAAoB,GAC5B,yBAAyB,GACzB,iCAAiC,GACjC,0BAA0B,GAC1B,0BAA0B,CAAC;AAE/B,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,MAAM,EAAE,+BAA+B,GAAG,8BAA8B,GAAG,sBAAsB,CAAC;CACnG,GACD;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,0BAA0B,CAAA;CAAE,GACtD;IACE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,iCAAiC,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;IACnG,MAAM,EAAE,mBAAmB,GAAG,sBAAsB,GAAG,iBAAiB,GAAG,2BAA2B,CAAC;CACxG,CAAC;AAEN,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEzD,MAAM,MAAM,2BAA2B,GACnC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,0BAA0B,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,GACzF,OAAO,CAAC,yBAAyB,EAAE;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAE5D,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7E,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,GACzB;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAA;CAAE,GACpD;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,0BAA0B,GAAG,mBAAmB,CAAC;CAC1D,CAAC;AAEN,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,0BAA0B,CAAA;CAAE,GAC1D;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,0BAA0B,CAAA;CAAE,GAC/D;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,0BAA0B,CAAA;CAAE,GAC/D;IAAE,MAAM,EAAE,yBAAyB,CAAC;IAAC,KAAK,EAAE,iCAAiC,CAAA;CAAE,GAC/E;IAAE,MAAM,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAAA;CAAE,GACvD,OAAO,CAAC,wBAAwB,EAAE;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAEzD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC;CACtE;AAED,qBAAa,kCAAmC,SAAQ,KAAK;gBAC/C,OAAO,EAAE,MAAM;CAI5B;AAmHD,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,uFAAuF;AACvF,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,2BAA2B,GACpC,oBAAoB,GAAG,IAAI,CAyC7B;AAwED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,yBAAyB,CAc5B;AAED,gFAAgF;AAChF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,yBAAyB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,0BAA0B,CA2C7B;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,yBAAyB,EAChC,MAAM,EAAE,qBAAqB,GAC5B,iCAAiC,CA8BnC;AAqCD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,CA4DpF;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,yBAAyB,CAAC;CAClC,GAAG,0BAA0B,CAuC7B;AAeD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,2BAA2B,GACpC,yBAAyB,CAa3B;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,0BAA0B,EACpC,MAAM,EAAE,qBAAqB,GAC5B,2BAA2B,CA0C7B;AAGD,oFAAoF;AACpF,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,0BAA0B,GACnC,0BAA0B,CAe5B;AAED,gFAAgF;AAChF,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,oBAAoB,GAC7B,2BAA2B,CAe7B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,0BAA0B,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,yBAAyB,CAAC;IACjC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC3C,GAAG,0BAA0B,CA4B7B"}