botmux 3.9.2 → 3.10.0

package/dist/workflows/v3/runtime.d.ts

@@ -1,230 +1,16 @@
 /**
- * v3 runtime — the scheduling main loop.
+ * Botmux-compatible facade for the shared Node runtime.
  *
- * Ties the pure pieces together against the SHARED contract:
- *   load dag → freeze bot snapshots → init runDir →
- *   { materialize journal → decideNext → dispatch ready work under caps →
- *     await a settle → repeat } until terminal.
- *
- * Every side effect lives here (journal append, STATE checkpoint, dir layout,
- * goal/inputs/env materialization).  The actual worker spawn (`runNode`) and
- * manifest validation (`validateManifest`) are INJECTED — codex's
- * `ephemeral-pool.ts` / `manifest.ts` provide them, but the runtime compiles
- * against the contract types alone so the two halves build independently.
- *
- * MVP scope: static DAG, fail-fast, no retry (always `attempts/001`).  Retry
- * (`attempts/NNN`) and richer cancel semantics are deferred — see
- * `docs/design/2026-06-01-v3-mvp-engine-split.md`.
- */
-import { type V3Dag, type V3LoopExitWhen, type V3Node, type V3ResultSchema } from './dag.js';
-import { type StoredEvent, type V3ErrorClass, type V3UncertainHostEffect } from './journal.js';
-import type { RunChatBinding } from './grill-state.js';
-import { type BotSnapshot, type GoalAsk, type Manifest, type RunNode, type ValidateManifest } from './contract.js';
-import type { HostExecutorRegistry } from '../hostExecutors/registry.js';
-import type { ProviderReconciler } from '../shared/provider-reconciler.js';
-/**
- * Render the self-contained instruction file the goal-mode agent reads via
- * `$BOTMUX_GOAL_PATH`.  The execution contract (read inputs / write products /
- * write the manifest) lives HERE — in a file — rather than inside the `/goal`
- * command text, because a long multi-line `/goal` argument trips Claude Code's
- * paste-detection (the TUI folds it into a "[Pasted text]" blob and the
- * slash-command parser never fires).  The pool's `buildGoalCommand` therefore
- * sends only a short single-line `/goal` that points the agent at this file.
- *
- * Rendered from `contract.ts` constants so the manifest shape stays a single
- * source of truth shared with codex's validator.
- */
-export declare function renderGoalFile(goal: string, resultSchema?: V3ResultSchema, loopCtx?: {
-    loopId: string;
-    iteration: number;
-    maxIterations: number;
-}, nodeInstructions?: string, hasWorkflowParams?: boolean): string;
-/**
- * Map a node's failure to its terminal kind (the blocked/failed split):
- *   - `blocked`  = semantic/contract failure — retryable via a new attempt
- *   - `failed`   = infrastructure / human-veto / budget — needs intervention
- *
- * `selfReportedFail` marks the special case where the manifest is structurally
- * VALID but declares `status:'fail'` — then the node's own `error.retryable`
- * decides (`false` → failed; `true`/absent → blocked, the agent presumably
- * knows a human can unblock it).
- */
-export declare function classifyTerminal(errorClass: V3ErrorClass, opts?: {
-    selfReportedFail?: boolean;
-    retryable?: boolean;
-}): 'blocked' | 'failed';
-/**
- * Read + validate a goal worker's `ask.json` (the runtime human-ask payload).
- * Defensive: a missing / malformed / out-of-bounds file yields `undefined`, so a
- * broken ask degrades to a plain blocked card rather than crashing the drive —
- * the manifest's `error.message` still carries the question text for the human.
- * Accepts either 2–6 concrete options or `freeText:true`.  Exported for tests.
- */
-export declare function readGoalAsk(askPath: string): GoalAsk | undefined;
-/**
- * Merge a node's capability override onto the bot's frozen snapshot (P2).
- * Workflow execution always uses CLI bypass permissions; per-node overrides
- * may redirect the model but cannot alter the permission posture.
- */
-export declare function mergeNodeCapability(snap: BotSnapshot, override: V3Node['override']): BotSnapshot;
-/** Validation outcome for an opt-in `result.json` against its node schema. */
-export interface ResultValidation {
-    ok: boolean;
-    problems?: string[];
-}
-/** Read a worker's cross-node revisit request from `result.json` (if any).  A
- *  revisit is `{ "status": "revisit", "revisitTo": "<ancestor>", "reason"? }`.
- *  Absent result.json / non-revisit status → `{ ok:true }` (no request).  A
- *  malformed revisit (missing/blank revisitTo, non-string reason) → `ok:false`
- *  so the runtime blocks it as resultInvalid.  The ancestor membership check
- *  (toNodeId ∈ node.revisitTo) is the caller's (it has the node). */
-/** Two-tier revisit budget check (anti-infinite-loop): a source→target pair may
- *  revisit `DEFAULT_REVISIT_BUDGET_PER_PAIR` times, and the whole run
- *  `DEFAULT_REVISIT_BUDGET_PER_RUN` times, each extendable by a
- *  `revisitBudgetGranted` event.  Counts revisits ALREADY made; returns
- *  `{ok:false, tier, detail}` when this next revisit would exceed a tier —
- *  `tier` tells the grant card which scope to extend (菲菲 review). */
-export declare function revisitBudgetStatus(events: StoredEvent[], sourceNodeId: string, toNodeId: string): {
-    ok: true;
-} | {
-    ok: false;
-    tier: 'pair' | 'run';
-    detail: string;
-};
-export declare function readRevisitRequest(manifest: Manifest, outputDir: string): {
-    ok: true;
-    request?: {
-        toNodeId: string;
-        reason?: string;
-    };
-} | {
-    ok: false;
-    problems: string[];
-};
-/**
- * Validate a `result.json` against the node's (already dag-validated) result
- * schema subset.  Top-level types only — see `V3ResultSchema`.  Undeclared
- * extra properties are allowed (JSON-Schema default).
- */
-export declare function validateResult(filePath: string, schema: V3ResultSchema): ResultValidation;
-/**
- * Evaluate a (dag-validated) loop exit predicate against the observed result
- * field.  Pure + exported for tests.  Type mismatches simply don't match —
- * validateDag already guarantees the field is declared/required with a
- * compatible type, so a mismatch here means the result was tampered with
- * post-validation; not-matching (→ continue/exhausted) is the safe answer.
- */
-export declare function matchLoopExitWhen(when: V3LoopExitWhen, value: unknown): boolean;
-/**
- * Compute the attemptId the NEXT dispatch of `nodeId` must use, from the
- * journal: an unconsumed `nodeRetryRequested` reservation wins (retry intent
- * is authoritative for the redrive); otherwise max(seen)+1 — which is 001 for
- * a first dispatch.  Dispatch events are the authority for "seen"; a
- * reservation is consumed by a later `nodeDispatched` with the same number.
- */
-export declare function nextAttemptIdFor(events: StoredEvent[], key: string): string;
-/** Latest dispatched attemptId for a dispatch `key` (the `previousAttemptId` a
- *  retry entrypoint must reference).  `key` is an instance (`A#001`), a loop
- *  body expansion, or a legacy nodeId — matched by `(instanceId ?? nodeId)` so
- *  a retry stays inside the same instance.  Undefined when never dispatched. */
-export declare function latestAttemptIdFor(events: StoredEvent[], key: string): string | undefined;
-export interface V3RuntimeDeps {
-    /** Spawn an ephemeral worker for one goal node (codex's pool). */
-    runNode: RunNode;
-    /** Validate a node's manifest after the worker exits (codex's manifest.ts). */
-    validateManifest: ValidateManifest;
-    /** Freeze a node's bot spawn config at run start.  Given `node.bot` (may be
-     *  undefined → the run's default bot), returns the snapshot persisted in the
-     *  runDir and threaded through `runNode` (never re-resolved mid-run). */
-    resolveBotSnapshot: (botId: string | undefined) => BotSnapshot;
-    /** Trusted deterministic host executors. Required when the DAG has host nodes. */
-    hostExecutors?: HostExecutorRegistry;
-    /** Provider recovery capabilities keyed by executor.provider. */
-    hostReconcilers?: Map<string, ProviderReconciler>;
-    /** Injectable wall clock for deterministic host idempotency-TTL recovery. */
-    now?: () => number;
-    /** Resolve a humanGate.  Required only if the DAG declares any gate; the
-     *  runtime throws if a gate is hit without a handler.  (Wired by
-     *  `human-gate.ts` post-milestone.) */
-    resolveGate?: (req: {
-        nodeId: string;
-        prompt: string;
-        waitId: string;
-        runDir: string;
-        hostApproval?: {
-            attemptId: string;
-            approvalDigest: string;
-            inputHash: string;
-        };
-    }) => Promise<{
-        resolution: 'approved' | 'rejected';
-        by: string;
-        selected?: string;
-    }>;
-}
-export interface V3RuntimeOptions {
-    /** The run lives in `${baseDir}/${dag.runId}`. */
-    baseDir: string;
-    /** Gate handling model. `blocking` keeps the CLI/dev y/N path; `suspend`
-     *  writes the pending wait and returns `awaitingGate` for a daemon/card layer
-     *  to resolve and re-drive from disk. */
-    gateMode?: 'blocking' | 'suspend';
-    /** Concurrency caps (codex's three-layer cap; conservative defaults). */
-    globalConcurrency?: number;
-    perBotConcurrency?: number;
-    perCliConcurrency?: number;
-    cancelSignal?: AbortSignal;
-    /** Bot identities already pinned by an immutable run envelope. When set,
-     *  the runtime must use these exact snapshots instead of live bots.json. */
-    frozenBotSnapshots?: ReadonlyMap<string, BotSnapshot>;
-    /** `dag.json` / `bots.snapshot.json` are authorized exact-byte artifacts.
-     *  Runtime may read them but must never rewrite them on start/retry/resume. */
-    authorizedArtifacts?: boolean;
-    /** Parsed from the exact verified params artifact. Each node receives only
-     *  the keys it explicitly references, via an attempt-local 0600 JSON file. */
-    resolvedWorkflowData?: {
-        params: Record<string, unknown>;
-        context: Record<string, string>;
-    };
-    /** How long the scheduler waits for the original host SDK promise before
-     *  detaching and reconciling the still-open durable intent with the same key. */
-    hostResponseWaitMs?: number;
-    /** The run's authenticated chat binding — threaded verbatim into every
-     *  RunNodeRequest so worker CLI children get real BOTMUX_* identity env.
-     *  See RunNodeRequest.chatBinding. */
-    chatBinding?: RunChatBinding;
+ * Existing daemon/CLI callers keep the historical dependency shape while the
+ * shared runtime receives an explicit attempt lease provider.
+ */
+import type { V3Dag } from './dag.js';
+import { type V3RuntimeDeps as SharedRuntimeDeps, type V3RuntimeOptions, type V3RunOutcome } from './shared-node-runtime.js';
+import type { AttemptLeaseProvider } from './runtime-host-contract.js';
+export { classifyTerminal, latestAttemptIdFor, matchLoopExitWhen, mergeNodeCapability, nextAttemptIdFor, readGoalAsk, readRevisitRequest, renderGoalFile, revisitBudgetStatus, validateResult, } from './shared-node-runtime.js';
+export type { ResultValidation, V3PendingGate, V3RunOutcome, V3RuntimeOptions, } from './shared-node-runtime.js';
+export interface V3RuntimeDeps extends Omit<SharedRuntimeDeps, 'attemptLeaseProvider'> {
+    attemptLeaseProvider?: AttemptLeaseProvider;
 }
-export interface V3PendingGate {
-    nodeId: string;
-    waitId: string;
-    prompt: string;
-    options: string[];
-    approveOptions: string[];
-    approvers: string[];
-    hostApproval?: {
-        attemptId: string;
-        approvalDigest: string;
-        inputHash: string;
-    };
-}
-export type V3RunOutcome = {
-    reason: 'terminal';
-    runStatus: 'succeeded' | 'failed' | 'blocked' | 'cancelled';
-    failedNodeId?: string;
-    blockedNodeId?: string;
-    failureReason?: 'allSinksSkipped';
-    failureDetail?: string;
-    uncertainHostEffects?: V3UncertainHostEffect[];
-    runDir: string;
-} | {
-    reason: 'awaitingGate';
-    pendingWaits: V3PendingGate[];
-    runDir: string;
-};
-/**
- * Run a validated DAG to terminal.  Resumable: if `journal.ndjson` already has
- * events (daemon restart), the loop picks up from the materialized state
- * instead of re-running completed nodes.
- */
-export declare function runWorkflow(dag: V3Dag, deps: V3RuntimeDeps, opts: V3RuntimeOptions): Promise<V3RunOutcome>;
+export declare function runWorkflow(dag: V3Dag, deps: V3RuntimeDeps, options: V3RuntimeOptions): Promise<V3RunOutcome>;
 //# sourceMappingURL=runtime.d.ts.map

package/dist/workflows/v3/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,OAAO,EAQL,KAAK,KAAK,EAEV,KAAK,cAAc,EAGnB,KAAK,MAAM,EACX,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAElB,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,YAAY,EAGjB,KAAK,qBAAqB,EAC3B,MAAM,cAAc,CAAC;AAgBtB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EASL,KAAK,WAAW,EAChB,KAAK,OAAO,EAEZ,KAAK,QAAQ,EACb,KAAK,OAAO,EAEZ,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAoBvB,OAAO,KAAK,EAAE,oBAAoB,EAA0B,MAAM,8BAA8B,CAAC;AACjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAI3E;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,cAAc,EAC7B,OAAO,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,EACtE,gBAAgB,CAAC,EAAE,MAAM,EACzB,iBAAiB,UAAQ,GACxB,MAAM,CAyFR;AAID;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,YAAY,EACxB,IAAI,CAAC,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACzD,SAAS,GAAG,QAAQ,CAYtB;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAsBhE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,GAC3B,WAAW,CAMb;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;;qEAKqE;AACrE;;;;;qEAKqE;AACrE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,EAAE,EACrB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAuBpE;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,MAAM,GAChB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CA4BnG;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAqCzF;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAS/E;AAWD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CA+C3E;AAED;;;gFAGgF;AAChF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA4BzF;AAID,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,gBAAgB,EAAE,gBAAgB,CAAC;IACnC;;6EAEyE;IACzE,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,WAAW,CAAC;IAC/D,kFAAkF;IAClF,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,iEAAiE;IACjE,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAClD,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;2CAEuC;IACvC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KACjF,KAAK,OAAO,CAAC;QAAE,UAAU,EAAE,UAAU,GAAG,UAAU,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB;;6CAEyC;IACzC,QAAQ,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAClC,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B;gFAC4E;IAC5E,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACtD;mFAC+E;IAC/E,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;kFAC8E;IAC9E,oBAAoB,CAAC,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACjC,CAAC;IACF;qFACiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;0CAEsC;IACtC,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACjF;AAED,MAAM,MAAM,YAAY,GACpB;IACE,MAAM,EAAE,UAAU,CAAC;IAGnB,SAAS,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,aAAa,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAI9E;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,KAAK,EACV,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,YAAY,CAAC,CAm5FvB"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/runtime.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAGtC,OAAO,EAEL,KAAK,aAAa,IAAI,iBAAiB,EACvC,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,aACf,SAAQ,IAAI,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;IACvD,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,KAAK,EACV,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,YAAY,CAAC,CAQvB"}