botmux 2.33.0 → 2.34.0

package/dist/workflows/cancel-run.js

@@ -0,0 +1,99 @@
+import { runLoop } from './loop.js';
+import { replay } from './events/replay.js';
+import { completeNodeCancel, completeRunCancel, requestCancel, } from './cancel.js';
+import { isValidRunId, readRunSnapshot } from './ops-projection.js';
+/**
+ * IM cancel is scoped to the chat that created the run.  This is a pure
+ * guard: callers must run it before writing cancelRequested.
+ */
+export async function guardWorkflowRunCancelChatScope(runsDir, runId, expectedChatId) {
+    if (!isValidRunId(runId))
+        return { ok: false, error: 'bad_run_id' };
+    const snapshot = await readRunSnapshot(runsDir, runId);
+    if (!snapshot)
+        return { ok: false, error: 'unknown_run' };
+    if (snapshot.chatBinding?.chatId !== expectedChatId) {
+        return { ok: false, error: 'wrong_chat', status: snapshot.run.status };
+    }
+    return { ok: true };
+}
+/**
+ * Shared run-level cancel operation used by CLI and dashboard/daemon IPC.
+ *
+ * The operation is idempotent:
+ * - terminal runs write zero events;
+ * - repeated cancels reuse the existing run-level cancel intent;
+ * - parent node/run cancel terminal events are written only once by replay
+ *   intent markers.
+ */
+export async function cancelWorkflowRun(input) {
+    const { ctx, reason, by, actor = 'human', maxTicks = 200 } = input;
+    let snapshot = replay(await ctx.log.readAll());
+    if (isTerminalRunStatus(snapshot.run.status)) {
+        return { snapshot, cancelAlreadyRequested: false, alreadyTerminal: true };
+    }
+    let cancelEventId = snapshot.cancelledRunIntent?.cancelOriginEventId;
+    const cancelAlreadyRequested = !!snapshot.cancelledRunIntent;
+    if (!snapshot.cancelledRunIntent) {
+        const cancel = await requestCancel(ctx.log, {
+            target: { kind: 'run', runId: ctx.log.runId },
+            reason,
+            by,
+        }, actor);
+        cancelEventId = cancel.eventId;
+    }
+    snapshot = replay(await ctx.log.readAll());
+    await finalizeRunCancelIfPossible(ctx.log, ctx.def, snapshot);
+    const loopResult = await runLoop(ctx, { maxTicks });
+    snapshot = replay(await ctx.log.readAll());
+    await finalizeRunCancelIfPossible(ctx.log, ctx.def, snapshot);
+    snapshot = replay(await ctx.log.readAll());
+    return {
+        snapshot,
+        loopResult,
+        cancelEventId,
+        cancelAlreadyRequested,
+        alreadyTerminal: false,
+    };
+}
+export async function finalizeRunCancelIfPossible(log, def, snapshot) {
+    const intent = snapshot.cancelledRunIntent;
+    if (!intent)
+        return;
+    for (const nodeId of Object.keys(def.nodes)) {
+        const nodeStatus = snapshot.nodes.get(nodeId)?.status ?? 'idle';
+        if (isTerminalNodeStatus(nodeStatus))
+            continue;
+        const ownedActivities = [...snapshot.activities.values()].filter((activity) => activity.ownerNodeId === nodeId);
+        const hasNonTerminalActivity = ownedActivities.some((activity) => !isTerminalActivityStatus(activity.status));
+        if (hasNonTerminalActivity)
+            continue;
+        await completeNodeCancel(log, {
+            nodeId,
+            cancelOriginEventId: intent.cancelOriginEventId,
+        }, 'scheduler');
+    }
+    const afterNodes = replay(await log.readAll());
+    if (!afterNodes.cancelledRunIntent)
+        return;
+    const allNodesTerminal = Object.keys(def.nodes).every((nodeId) => isTerminalNodeStatus(afterNodes.nodes.get(nodeId)?.status ?? 'idle'));
+    if (!allNodesTerminal)
+        return;
+    await completeRunCancel(log, { cancelOriginEventId: afterNodes.cancelledRunIntent.cancelOriginEventId }, 'scheduler');
+}
+export function isTerminalRunStatus(status) {
+    return status === 'succeeded' || status === 'failed' || status === 'cancelled';
+}
+function isTerminalNodeStatus(status) {
+    return (status === 'succeeded' ||
+        status === 'failed' ||
+        status === 'skipped' ||
+        status === 'cancelled');
+}
+function isTerminalActivityStatus(status) {
+    return (status === 'succeeded' ||
+        status === 'failed' ||
+        status === 'timedOut' ||
+        status === 'cancelled');
+}
+//# sourceMappingURL=cancel-run.js.map

package/dist/workflows/cancel-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel-run.js","sourceRoot":"","sources":["../../src/workflows/cancel-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAsB,MAAM,WAAW,CAAC;AAIxD,OAAO,EAAE,MAAM,EAAiB,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,GAEd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAsBpE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAe,EACf,KAAa,EACb,cAAsB;IAEtB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAC1D,IAAI,QAAQ,CAAC,WAAW,EAAE,MAAM,KAAK,cAAc,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B;IAE7B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,GAAG,OAAO,EAAE,QAAQ,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;IACnE,IAAI,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAE/C,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IAED,IAAI,aAAa,GAAG,QAAQ,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;IACrE,MAAM,sBAAsB,GAAG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC7D,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,GAAG,CAAC,GAAG,EACP;YACE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE;YAC7C,MAAM;YACN,EAAE;SACH,EACD,KAAK,CACN,CAAC;QACF,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IACjC,CAAC;IAED,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,MAAM,2BAA2B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE9D,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEpD,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,MAAM,2BAA2B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9D,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAE3C,OAAO;QACL,QAAQ;QACR,UAAU;QACV,aAAa;QACb,sBAAsB;QACtB,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAa,EACb,GAAuB,EACvB,QAAkB;IAElB,MAAM,MAAM,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,MAAM,CAAC;QAChE,IAAI,oBAAoB,CAAC,UAAU,CAAC;YAAE,SAAS;QAC/C,MAAM,eAAe,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9D,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,MAAM,CAC9C,CAAC;QACF,MAAM,sBAAsB,GAAG,eAAe,CAAC,IAAI,CACjD,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,CACzD,CAAC;QACF,IAAI,sBAAsB;YAAE,SAAS;QACrC,MAAM,kBAAkB,CACtB,GAAG,EACH;YACE,MAAM;YACN,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD,EACD,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,kBAAkB;QAAE,OAAO;IAC3C,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/D,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,MAAM,CAAC,CACrE,CAAC;IACF,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAE9B,MAAM,iBAAiB,CACrB,GAAG,EACH,EAAE,mBAAmB,EAAE,UAAU,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,EAC1E,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,WAAW,CAAC;AACjF,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC1C,OAAO,CACL,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,WAAW,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc;IAC9C,OAAO,CACL,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,WAAW,CACvB,CAAC;AACJ,CAAC"}

package/dist/workflows/cancel.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Cancel propagation (events doc v0.1.2 §2.5, Step 9 of 10).
+ *
+ * Cancel is a TERMINAL REASON, not an error — Run/Node/Activity each
+ * have an independent `cancelled` terminal state.  The chain (§2.5):
+ *
+ *   cancelRequested(target)
+ *     → scheduler broadcasts to non-terminal nodes
+ *     → for each running activity: send cancel signal
+ *     → cancelDelivered (worker acknowledges)
+ *     → worker cleans up
+ *     → activityCanceled (Activity terminal)
+ *     → nodeCanceled    (Node terminal, only after ALL its activities
+ *                        reach a terminal state; spec §2.5 "partial
+ *                        cancel": cancelRequested(activityId) does NOT
+ *                        auto-cancel parent node)
+ *     → runCanceled     (Run terminal, only when all nodes terminal;
+ *                        spec §2.5: cancelRequested(nodeId) does NOT
+ *                        auto-cancel parent run)
+ *
+ * Step 9 deliverables:
+ *   - `requestCancel`, `deliverCancel`, `completeActivityCancel` —
+ *     host functions that write the corresponding events.
+ *   - replay projection of in-flight cancel state so resume can
+ *     detect dangling cancels (cancelRequested written, terminal
+ *     missing) and complete them.
+ *   - resume integration: a third recovery branch alongside
+ *     reconcile + wait recovery.
+ *
+ * Step 9 does NOT:
+ *   - implement the scheduler broadcast (run/node → activity fan-out
+ *     is Step 10+ scheduler concern; this layer assumes the caller
+ *     supplies activity-level cancels);
+ *   - decide retry policy (cancel preempts retry — once canceled,
+ *     terminal stays canceled, not failed/retryable).
+ */
+import type { EventLog } from './events/append.js';
+import type { ActivityCanceledEvent, CancelDeliveredEvent, CancelRequestedEvent, NodeCanceledEvent, RunCanceledEvent } from './events/types.js';
+export type CancelTarget = {
+    kind: 'run';
+    runId: string;
+} | {
+    kind: 'node';
+    nodeId: string;
+} | {
+    kind: 'activity';
+    activityId: string;
+};
+export type RequestCancelInput = {
+    target: CancelTarget;
+    /** Free-form human-readable reason; recorded for audit + dashboard. */
+    reason: string;
+    /** Identifier of the requester — open_id, system actor name, etc. */
+    by: string;
+};
+export type DeliverCancelInput = {
+    target: CancelTarget;
+    /** Activity that the worker actually acknowledged the cancel on.
+     *  For node/run-level cancels broadcast to multiple activities, the
+     *  worker writes one cancelDelivered per activity it acknowledges. */
+    activityId: string;
+};
+export type CompleteActivityCancelInput = {
+    activityId: string;
+    attemptId: string;
+    /** eventId of the originating cancelRequested — surfaced on the
+     *  terminal so post-hoc forensics can follow the cancel chain. */
+    cancelOriginEventId: string;
+};
+export type CompleteNodeCancelInput = {
+    nodeId: string;
+    cancelOriginEventId: string;
+};
+export type CompleteRunCancelInput = {
+    cancelOriginEventId: string;
+};
+export type RequestCancelActor = 'human' | 'supervisor' | 'system';
+export type DeliverCancelActor = 'worker' | 'system';
+export type CompleteCancelActor = 'scheduler' | 'worker' | 'system';
+/**
+ * Originating cancel event.  Records the intent without changing any
+ * entity state — the actual transitions happen via cancelDelivered →
+ * activityCanceled.
+ */
+export declare function requestCancel(log: EventLog, input: RequestCancelInput, actor?: RequestCancelActor): Promise<CancelRequestedEvent>;
+/**
+ * Worker acknowledges the cancel signal for a specific activity.
+ * Multiple cancelDelivered events may fan out from a single
+ * cancelRequested(run|node).
+ */
+export declare function deliverCancel(log: EventLog, input: DeliverCancelInput, actor?: DeliverCancelActor): Promise<CancelDeliveredEvent>;
+/**
+ * Activity terminal in the cancel branch.  Spec §2.5: cancel produces
+ * a distinct terminal state (not activityFailed/canceled error code).
+ */
+export declare function completeActivityCancel(log: EventLog, input: CompleteActivityCancelInput, actor?: CompleteCancelActor): Promise<ActivityCanceledEvent>;
+/**
+ * Node terminal in the cancel branch.  Spec §2.5: nodeCanceled fires
+ * only after ALL of the node's activities have reached terminal — the
+ * caller (scheduler / supervisor) is responsible for verifying that
+ * precondition before invoking.  This helper merely writes the event.
+ */
+export declare function completeNodeCancel(log: EventLog, input: CompleteNodeCancelInput, actor?: CompleteCancelActor): Promise<NodeCanceledEvent>;
+/**
+ * Run terminal in the cancel branch.  Spec §2.5: runCanceled fires
+ * only after ALL of the run's nodes have reached terminal.  Same
+ * precondition responsibility as `completeNodeCancel` — this helper
+ * writes the event but doesn't enforce dependencies.
+ */
+export declare function completeRunCancel(log: EventLog, input: CompleteRunCancelInput, actor?: CompleteCancelActor): Promise<RunCanceledEvent>;
+//# sourceMappingURL=cancel.d.ts.map

package/dist/workflows/cancel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel.d.ts","sourceRoot":"","sources":["../../src/workflows/cancel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,mBAAmB,CAAC;AAI3B,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB;;0EAEsE;IACtE,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB;sEACkE;IAClE,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACrD,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAIpE;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,kBAAkB,EACzB,KAAK,GAAE,kBAA4B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAW/B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,kBAAkB,EACzB,KAAK,GAAE,kBAA6B,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAU/B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,2BAA2B,EAClC,KAAK,GAAE,mBAAiC,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAWhC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,uBAAuB,EAC9B,KAAK,GAAE,mBAAiC,GACvC,OAAO,CAAC,iBAAiB,CAAC,CAU5B;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,sBAAsB,EAC7B,KAAK,GAAE,mBAAiC,GACvC,OAAO,CAAC,gBAAgB,CAAC,CAS3B"}

package/dist/workflows/cancel.js

@@ -0,0 +1,120 @@
+/**
+ * Cancel propagation (events doc v0.1.2 §2.5, Step 9 of 10).
+ *
+ * Cancel is a TERMINAL REASON, not an error — Run/Node/Activity each
+ * have an independent `cancelled` terminal state.  The chain (§2.5):
+ *
+ *   cancelRequested(target)
+ *     → scheduler broadcasts to non-terminal nodes
+ *     → for each running activity: send cancel signal
+ *     → cancelDelivered (worker acknowledges)
+ *     → worker cleans up
+ *     → activityCanceled (Activity terminal)
+ *     → nodeCanceled    (Node terminal, only after ALL its activities
+ *                        reach a terminal state; spec §2.5 "partial
+ *                        cancel": cancelRequested(activityId) does NOT
+ *                        auto-cancel parent node)
+ *     → runCanceled     (Run terminal, only when all nodes terminal;
+ *                        spec §2.5: cancelRequested(nodeId) does NOT
+ *                        auto-cancel parent run)
+ *
+ * Step 9 deliverables:
+ *   - `requestCancel`, `deliverCancel`, `completeActivityCancel` —
+ *     host functions that write the corresponding events.
+ *   - replay projection of in-flight cancel state so resume can
+ *     detect dangling cancels (cancelRequested written, terminal
+ *     missing) and complete them.
+ *   - resume integration: a third recovery branch alongside
+ *     reconcile + wait recovery.
+ *
+ * Step 9 does NOT:
+ *   - implement the scheduler broadcast (run/node → activity fan-out
+ *     is Step 10+ scheduler concern; this layer assumes the caller
+ *     supplies activity-level cancels);
+ *   - decide retry policy (cancel preempts retry — once canceled,
+ *     terminal stays canceled, not failed/retryable).
+ */
+// ─── Host API ─────────────────────────────────────────────────────────────
+/**
+ * Originating cancel event.  Records the intent without changing any
+ * entity state — the actual transitions happen via cancelDelivered →
+ * activityCanceled.
+ */
+export async function requestCancel(log, input, actor = 'human') {
+    return (await log.append({
+        runId: log.runId,
+        type: 'cancelRequested',
+        actor,
+        payload: {
+            target: input.target,
+            reason: input.reason,
+            by: input.by,
+        },
+    }));
+}
+/**
+ * Worker acknowledges the cancel signal for a specific activity.
+ * Multiple cancelDelivered events may fan out from a single
+ * cancelRequested(run|node).
+ */
+export async function deliverCancel(log, input, actor = 'worker') {
+    return (await log.append({
+        runId: log.runId,
+        type: 'cancelDelivered',
+        actor,
+        payload: {
+            target: input.target,
+            activityId: input.activityId,
+        },
+    }));
+}
+/**
+ * Activity terminal in the cancel branch.  Spec §2.5: cancel produces
+ * a distinct terminal state (not activityFailed/canceled error code).
+ */
+export async function completeActivityCancel(log, input, actor = 'scheduler') {
+    return (await log.append({
+        runId: log.runId,
+        type: 'activityCanceled',
+        actor,
+        payload: {
+            activityId: input.activityId,
+            attemptId: input.attemptId,
+            cancelOriginEventId: input.cancelOriginEventId,
+        },
+    }));
+}
+/**
+ * Node terminal in the cancel branch.  Spec §2.5: nodeCanceled fires
+ * only after ALL of the node's activities have reached terminal — the
+ * caller (scheduler / supervisor) is responsible for verifying that
+ * precondition before invoking.  This helper merely writes the event.
+ */
+export async function completeNodeCancel(log, input, actor = 'scheduler') {
+    return (await log.append({
+        runId: log.runId,
+        type: 'nodeCanceled',
+        actor,
+        payload: {
+            nodeId: input.nodeId,
+            cancelOriginEventId: input.cancelOriginEventId,
+        },
+    }));
+}
+/**
+ * Run terminal in the cancel branch.  Spec §2.5: runCanceled fires
+ * only after ALL of the run's nodes have reached terminal.  Same
+ * precondition responsibility as `completeNodeCancel` — this helper
+ * writes the event but doesn't enforce dependencies.
+ */
+export async function completeRunCancel(log, input, actor = 'scheduler') {
+    return (await log.append({
+        runId: log.runId,
+        type: 'runCanceled',
+        actor,
+        payload: {
+            cancelOriginEventId: input.cancelOriginEventId,
+        },
+    }));
+}
+//# sourceMappingURL=cancel.js.map

package/dist/workflows/cancel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel.js","sourceRoot":"","sources":["../../src/workflows/cancel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAuDH,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAa,EACb,KAAyB,EACzB,QAA4B,OAAO;IAEnC,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,iBAAiB;QACvB,KAAK;QACL,OAAO,EAAE;YACP,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK,CAAC,EAAE;SACb;KACF,CAAC,CAAyB,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAa,EACb,KAAyB,EACzB,QAA4B,QAAQ;IAEpC,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,iBAAiB;QACvB,KAAK;QACL,OAAO,EAAE;YACP,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B;KACF,CAAC,CAAyB,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAa,EACb,KAAkC,EAClC,QAA6B,WAAW;IAExC,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,kBAAkB;QACxB,KAAK;QACL,OAAO,EAAE;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C;KACF,CAAC,CAA0B,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAa,EACb,KAA8B,EAC9B,QAA6B,WAAW;IAExC,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,cAAc;QACpB,KAAK;QACL,OAAO,EAAE;YACP,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C;KACF,CAAC,CAAsB,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAa,EACb,KAA6B,EAC7B,QAA6B,WAAW;IAExC,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,aAAa;QACnB,KAAK;QACL,OAAO,EAAE;YACP,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C;KACF,CAAC,CAAqB,CAAC;AAC1B,CAAC"}

package/dist/workflows/catalog.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Workflow catalog — discovery + summary load for the dashboard catalog page.
+ *
+ * Reuses `workflowDefinitionSearchPaths()` so the catalog list and CLI/IM
+ * `loadWorkflowDefinition()` see the same files.  Two search paths today:
+ *   - `<cwd>/workflows/*.workflow.json`           (per-project)
+ *   - `$HOME/.botmux/workflows/*.workflow.json`   (global, daemon default)
+ *
+ * Dedupe rule when the same `workflowId` appears in both: cwd wins, then
+ * HOME.  Matches `loadWorkflowDefinition()` which short-circuits on the first
+ * search path that resolves.
+ *
+ * Read-only and pure: never writes or normalizes the source files — the
+ * dashboard catalog list should reflect exactly what the daemon would resolve.
+ */
+import { type WorkflowDefinition } from './definition.js';
+export type CatalogEntry = {
+    workflowId: string;
+    version: number;
+    path: string;
+    revisionId: string;
+    paramCount: number;
+    requiredParamCount: number;
+    nodeCount: number;
+};
+export type CatalogDefinition = {
+    definition: WorkflowDefinition;
+    revisionId: string;
+    path: string;
+};
+export declare function isValidWorkflowId(id: string): boolean;
+/**
+ * List every parseable workflow visible to the daemon.
+ *
+ * Files that fail to parse (zod errors, cycles, etc.) are skipped silently so
+ * one bad authoring attempt doesn't poison the whole catalog.  The CLI's
+ * `botmux workflow validate` is the right surface for line-level errors.
+ *
+ * Search-path priority matches `loadWorkflowDefinition`: cwd-local before
+ * HOME global so per-project drafts override globals with the same id.
+ *
+ * `opts.dirs` is a test seam — production callers use the default search
+ * paths.  Tests pass scoped tmp directories so they don't read whatever
+ * happens to live under `$HOME/.botmux/workflows`.
+ */
+export declare function listWorkflowDefinitions(opts?: {
+    dirs?: string[];
+}): Promise<CatalogEntry[]>;
+/**
+ * Load a single workflow definition by id and surface its source path +
+ * revisionId in the response envelope.  Returns `undefined` when no file in
+ * any search path resolves the id, so the caller can return 404.
+ *
+ * `opts.searchPaths` is a test seam; production callers use the default
+ * search paths derived from cwd + `$HOME/.botmux/workflows`.
+ */
+export declare function loadCatalogDefinition(workflowId: string, opts?: {
+    searchPaths?: string[];
+}): Promise<CatalogDefinition | undefined>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/workflows/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/workflows/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,iBAAiB,CAAC;AAKzB,MAAM,MAAM,YAAY,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAsCD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,GAAE;IAClD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACZ,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAoB/B;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GACpC,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAaxC"}

package/dist/workflows/catalog.js

@@ -0,0 +1,119 @@
+/**
+ * Workflow catalog — discovery + summary load for the dashboard catalog page.
+ *
+ * Reuses `workflowDefinitionSearchPaths()` so the catalog list and CLI/IM
+ * `loadWorkflowDefinition()` see the same files.  Two search paths today:
+ *   - `<cwd>/workflows/*.workflow.json`           (per-project)
+ *   - `$HOME/.botmux/workflows/*.workflow.json`   (global, daemon default)
+ *
+ * Dedupe rule when the same `workflowId` appears in both: cwd wins, then
+ * HOME.  Matches `loadWorkflowDefinition()` which short-circuits on the first
+ * search path that resolves.
+ *
+ * Read-only and pure: never writes or normalizes the source files — the
+ * dashboard catalog list should reflect exactly what the daemon would resolve.
+ */
+import { promises as fs } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { computeRevisionId, parseWorkflowDefinition, } from './definition.js';
+import { workflowDefinitionSearchPaths } from './loader.js';
+const WORKFLOW_ID_PATTERN = /^[A-Za-z0-9_.-]+$/;
+export function isValidWorkflowId(id) {
+    return WORKFLOW_ID_PATTERN.test(id);
+}
+function searchDirectories() {
+    // workflowDefinitionSearchPaths returns full file paths for a given id; we
+    // strip the filename so we can scan the parent directories instead.  Filter
+    // duplicates so home-only setups don't double-walk.
+    const dirs = new Set();
+    for (const path of workflowDefinitionSearchPaths('__sentinel__')) {
+        dirs.add(dirname(path));
+    }
+    return [...dirs];
+}
+async function readEntriesFromDir(dir) {
+    try {
+        const names = await fs.readdir(dir);
+        return names.filter((n) => n.endsWith('.workflow.json'));
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return [];
+        throw err;
+    }
+}
+function summarize(def, path) {
+    const params = def.params ?? {};
+    const paramCount = Object.keys(params).length;
+    const requiredParamCount = Object.values(params).filter((p) => p.required).length;
+    return {
+        workflowId: def.workflowId,
+        version: def.version,
+        path,
+        revisionId: computeRevisionId(def),
+        paramCount,
+        requiredParamCount,
+        nodeCount: Object.keys(def.nodes).length,
+    };
+}
+/**
+ * List every parseable workflow visible to the daemon.
+ *
+ * Files that fail to parse (zod errors, cycles, etc.) are skipped silently so
+ * one bad authoring attempt doesn't poison the whole catalog.  The CLI's
+ * `botmux workflow validate` is the right surface for line-level errors.
+ *
+ * Search-path priority matches `loadWorkflowDefinition`: cwd-local before
+ * HOME global so per-project drafts override globals with the same id.
+ *
+ * `opts.dirs` is a test seam — production callers use the default search
+ * paths.  Tests pass scoped tmp directories so they don't read whatever
+ * happens to live under `$HOME/.botmux/workflows`.
+ */
+export async function listWorkflowDefinitions(opts = {}) {
+    const dirs = opts.dirs ?? searchDirectories();
+    const seen = new Map();
+    for (const dir of dirs) {
+        const files = await readEntriesFromDir(dir);
+        for (const name of files) {
+            const path = join(dir, name);
+            try {
+                const raw = await fs.readFile(path, 'utf-8');
+                const def = parseWorkflowDefinition(JSON.parse(raw));
+                // First occurrence wins (cwd before HOME by search-path order).
+                if (!seen.has(def.workflowId)) {
+                    seen.set(def.workflowId, summarize(def, path));
+                }
+            }
+            catch {
+                // Skip unreadable / unparseable file — see comment block above.
+            }
+        }
+    }
+    return [...seen.values()].sort((a, b) => a.workflowId.localeCompare(b.workflowId));
+}
+/**
+ * Load a single workflow definition by id and surface its source path +
+ * revisionId in the response envelope.  Returns `undefined` when no file in
+ * any search path resolves the id, so the caller can return 404.
+ *
+ * `opts.searchPaths` is a test seam; production callers use the default
+ * search paths derived from cwd + `$HOME/.botmux/workflows`.
+ */
+export async function loadCatalogDefinition(workflowId, opts = {}) {
+    const paths = opts.searchPaths ?? workflowDefinitionSearchPaths(workflowId);
+    for (const path of paths) {
+        try {
+            const raw = await fs.readFile(path, 'utf-8');
+            const def = parseWorkflowDefinition(JSON.parse(raw));
+            return { definition: def, revisionId: computeRevisionId(def), path };
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                continue;
+            throw err;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=catalog.js.map

package/dist/workflows/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/workflows/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GAExB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAkBhD,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB;IACxB,2EAA2E;IAC3E,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,6BAA6B,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB,EAAE,IAAY;IACtD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAClF,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI;QACJ,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAClC,UAAU;QACV,kBAAkB;QAClB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM;KACzC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAE1C,EAAE;IACJ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7C,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,gEAAgE;gBAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,EAClB,OAAmC,EAAE;IAErC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/workflows/cold-attach.d.ts

@@ -0,0 +1,30 @@
+import { EventLog } from './events/append.js';
+import type { RunLoopResult } from './loop.js';
+import type { WorkflowRuntimeContext } from './runtime.js';
+import { type ColdWorkflowRun } from './cold-scan.js';
+export type ColdWorkflowWatcherHandle = {
+    ready?: Promise<unknown>;
+};
+export type AttachColdWorkflowRunsOptions = {
+    runsDir: string;
+    ownerLarkAppId: string;
+    isAttached?: (runId: string) => boolean;
+    makeContext: (run: ColdWorkflowRun, log: EventLog) => WorkflowRuntimeContext;
+    attachWatcher: (runId: string, ctx: WorkflowRuntimeContext) => ColdWorkflowWatcherHandle;
+    driveRun: (runId: string, ctx: WorkflowRuntimeContext) => Promise<RunLoopResult>;
+    awaitDrive?: boolean;
+    onSkip?: (runId: string, reason: string) => void;
+    onAttached?: (run: ColdWorkflowRun) => void;
+    onDriveError?: (runId: string, err: unknown) => void;
+};
+export type AttachColdWorkflowRunsResult = {
+    discovered: number;
+    attached: string[];
+};
+/**
+ * Daemon cold-start attach path: scan persisted runs owned by this Lark app,
+ * attach fan-out watchers, then kick the runtime loop so recovery can settle
+ * dangling effects / crashed workers.
+ */
+export declare function attachColdWorkflowRunsForDaemon(opts: AttachColdWorkflowRunsOptions): Promise<AttachColdWorkflowRunsResult>;
+//# sourceMappingURL=cold-attach.d.ts.map

package/dist/workflows/cold-attach.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cold-attach.d.ts","sourceRoot":"","sources":["../../src/workflows/cold-attach.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,yBAAyB,GAAG;IACtC,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACxC,WAAW,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,QAAQ,KAAK,sBAAsB,CAAC;IAC7E,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,KAAK,yBAAyB,CAAC;IACzF,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IACjF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;IAC5C,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,4BAA4B,CAAC,CAmCvC"}

package/dist/workflows/cold-attach.js

@@ -0,0 +1,40 @@
+import { EventLog } from './events/append.js';
+import { scanColdWorkflowRuns, } from './cold-scan.js';
+/**
+ * Daemon cold-start attach path: scan persisted runs owned by this Lark app,
+ * attach fan-out watchers, then kick the runtime loop so recovery can settle
+ * dangling effects / crashed workers.
+ */
+export async function attachColdWorkflowRunsForDaemon(opts) {
+    const runs = await scanColdWorkflowRuns({
+        runsDir: opts.runsDir,
+        ownerLarkAppId: opts.ownerLarkAppId,
+        onSkip: opts.onSkip,
+    });
+    const attached = [];
+    for (const run of runs) {
+        if (opts.isAttached?.(run.runId))
+            continue;
+        const log = new EventLog(run.runId, opts.runsDir);
+        const ctx = opts.makeContext(run, log);
+        const watcher = opts.attachWatcher(run.runId, ctx);
+        try {
+            await watcher.ready;
+        }
+        catch (err) {
+            opts.onSkip?.(run.runId, `watcher-start-failed: ${err instanceof Error ? err.message : String(err)}`);
+            continue;
+        }
+        attached.push(run.runId);
+        opts.onAttached?.(run);
+        const driven = opts.driveRun(run.runId, ctx);
+        if (opts.awaitDrive) {
+            await driven;
+        }
+        else {
+            driven.catch((err) => opts.onDriveError?.(run.runId, err));
+        }
+    }
+    return { discovered: runs.length, attached };
+}
+//# sourceMappingURL=cold-attach.js.map

package/dist/workflows/cold-attach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cold-attach.js","sourceRoot":"","sources":["../../src/workflows/cold-attach.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,OAAO,EACL,oBAAoB,GAErB,MAAM,gBAAgB,CAAC;AAwBxB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,IAAmC;IAEnC,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;QACtC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC3C,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,CACX,GAAG,CAAC,KAAK,EACT,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5E,CAAC;YACF,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;QAEvB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC;QACf,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC"}

package/dist/workflows/cold-scan.d.ts

@@ -0,0 +1,21 @@
+import { type WorkflowDefinition } from './definition.js';
+import { type Snapshot } from './events/replay.js';
+import { type RunChatBinding } from './loader.js';
+export type ColdWorkflowRun = {
+    runId: string;
+    def: WorkflowDefinition;
+    snapshot: Snapshot;
+    binding: RunChatBinding;
+};
+export type ScanColdWorkflowRunsOptions = {
+    runsDir?: string;
+    /**
+     * Only this daemon should attach runs whose approval cards / IM entrypoint
+     * were bound to its Lark app.  CLI-only runs have no chat-binding and are
+     * skipped; users can recover those via `botmux workflow resume`.
+     */
+    ownerLarkAppId: string;
+    onSkip?: (runId: string, reason: string) => void;
+};
+export declare function scanColdWorkflowRuns(opts: ScanColdWorkflowRunsOptions): Promise<ColdWorkflowRun[]>;
+//# sourceMappingURL=cold-scan.d.ts.map

package/dist/workflows/cold-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cold-scan.d.ts","sourceRoot":"","sources":["../../src/workflows/cold-scan.ts"],"names":[],"mappings":"AAGA,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEnF,OAAO,EAAU,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,kBAAkB,CAAC;IACxB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD,CAAC;AAEF,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,eAAe,EAAE,CAAC,CAqE5B"}