chainlesschain 0.164.0 → 0.165.2

package/src/lib/llm-providers.js

@@ -84,6 +84,7 @@ export const BUILT_IN_PROVIDERS = {
     baseUrl: "https://ark.cn-beijing.volces.com/api/v3",
     apiKeyEnv: "VOLCENGINE_API_KEY",
     models: [
+      "deepseek-v4-flash-260425",
       "doubao-seed-2-1-pro-260628",
       "doubao-seed-2-0-lite-260215",
       "doubao-seed-1-6-251015",

package/src/lib/mcp-call-ledger-store.js

@@ -51,6 +51,8 @@ const TERMINAL = new Set([
   McpCallStatus.CANCELLED,
 ]);
 const PAYLOAD_DIGEST = /^sha256:[0-9a-f]{64}$/;
+const WORKFLOW_EFFECT_ID = /^sha256:[0-9a-f]{64}$/;
+const WORKFLOW_CHILD_EFFECT_PROTOCOL = "cc-workflow-child-effect/v1";
 const RAW_AUTHORITY_HASH = /^[0-9a-f]{64}$/;
 const OUTPUT_KINDS = new Set(MCP_CALL_LEDGER_OUTPUT_KINDS);
 const RECORD_FIELDS = new Set([
@@ -58,6 +60,10 @@ const RECORD_FIELDS = new Set([
   "ledgerId",
   "sessionId",
   "turnId",
+  "workflowEffectId",
+  "workflowChildEffectId",
+  "workflowChildSequence",
+  "workflowEffectProtocol",
   "toolName",
   "serverName",
   "inputDigest",
@@ -266,12 +272,35 @@ function canonicalRecord(record) {
       record.effectContract.source,
       MCP_CALL_LEDGER_PROTOCOL_LIMITS.identifier,
     );
+  const workflowFields = [
+    record.workflowEffectId,
+    record.workflowChildEffectId,
+    record.workflowChildSequence,
+    record.workflowEffectProtocol,
+  ];
+  const hasWorkflowBinding = workflowFields.some((value) => value != null);
+  const workflowBindingValid =
+    !hasWorkflowBinding ||
+    (WORKFLOW_EFFECT_ID.test(record.workflowEffectId || "") &&
+      WORKFLOW_EFFECT_ID.test(record.workflowChildEffectId || "") &&
+      Number.isSafeInteger(record.workflowChildSequence) &&
+      record.workflowChildSequence >= 1 &&
+      record.workflowEffectProtocol === WORKFLOW_CHILD_EFFECT_PROTOCOL);
+  const workflowBinding = hasWorkflowBinding
+    ? {
+        workflowEffectId: record.workflowEffectId,
+        workflowChildEffectId: record.workflowChildEffectId,
+        workflowChildSequence: record.workflowChildSequence,
+        workflowEffectProtocol: record.workflowEffectProtocol,
+      }
+    : {};
   const baseValid =
     record.schemaVersion === MCP_CALL_LEDGER_SCHEMA_VERSION &&
     isCanonicalProtocolText(
       record.ledgerId,
       MCP_CALL_LEDGER_PROTOCOL_LIMITS.ledgerId,
     ) &&
+    workflowBindingValid &&
     isCanonicalProtocolText(
       record.sessionId,
       MCP_CALL_LEDGER_PROTOCOL_LIMITS.identifier,
@@ -330,6 +359,7 @@ function canonicalRecord(record) {
         ledgerId: record.ledgerId,
         sessionId: record.sessionId,
         turnId: record.turnId,
+        ...workflowBinding,
         toolName: record.toolName,
         serverName: record.serverName,
         inputDigest: record.inputDigest,
@@ -361,6 +391,7 @@ function canonicalRecord(record) {
     ledgerId: record.ledgerId,
     sessionId: record.sessionId,
     turnId: record.turnId,
+    ...workflowBinding,
     toolName: record.toolName,
     serverName: record.serverName,
     inputDigest: record.inputDigest,
@@ -392,6 +423,10 @@ const IMMUTABLE_RECORD_FIELDS = Object.freeze([
   "ledgerId",
   "sessionId",
   "turnId",
+  "workflowEffectId",
+  "workflowChildEffectId",
+  "workflowChildSequence",
+  "workflowEffectProtocol",
   "toolName",
   "serverName",
   "inputDigest",

package/src/lib/mcp-call-ledger.js

@@ -18,6 +18,9 @@ export const MCP_CALL_LEDGER_PROTOCOL_LIMITS = Object.freeze({
   networkScope: 512,
 });
 
+const WORKFLOW_EFFECT_ID_RE = /^sha256:[a-f0-9]{64}$/;
+const WORKFLOW_CHILD_EFFECT_PROTOCOL = "cc-workflow-child-effect/v1";
+
 export const MCP_CALL_LEDGER_OUTPUT_KINDS = Object.freeze([
   "array",
   "bigint",
@@ -296,6 +299,31 @@ function safeIdentifier(
   return normalizeMcpLedgerProtocolText(value, fallback, maxLength);
 }
 
+function workflowEffectBinding(call) {
+  const fields = [
+    call.workflowEffectId,
+    call.workflowChildEffectId,
+    call.workflowChildSequence,
+    call.workflowEffectProtocol,
+  ];
+  if (fields.every((value) => value == null)) return null;
+  if (
+    !WORKFLOW_EFFECT_ID_RE.test(call.workflowEffectId || "") ||
+    !WORKFLOW_EFFECT_ID_RE.test(call.workflowChildEffectId || "") ||
+    !Number.isSafeInteger(call.workflowChildSequence) ||
+    call.workflowChildSequence < 1 ||
+    call.workflowEffectProtocol !== WORKFLOW_CHILD_EFFECT_PROTOCOL
+  ) {
+    throw new TypeError("MCP ledger workflow effect binding is malformed");
+  }
+  return Object.freeze({
+    workflowEffectId: call.workflowEffectId,
+    workflowChildEffectId: call.workflowChildEffectId,
+    workflowChildSequence: call.workflowChildSequence,
+    workflowEffectProtocol: call.workflowEffectProtocol,
+  });
+}
+
 function nullableBoolean(value) {
   return typeof value === "boolean" ? value : null;
 }
@@ -589,6 +617,7 @@ export class McpCallLedger {
     const effectContract = normalizeMcpEffectContract(
       call.effectContract || call.effect || {},
     );
+    const effectBinding = workflowEffectBinding(call);
     const inputSnapshot = snapshotMcpJsonRpcInput(
       Object.prototype.hasOwnProperty.call(call, "input") ? call.input : {},
     );
@@ -609,6 +638,7 @@ export class McpCallLedger {
         null,
         MCP_CALL_LEDGER_PROTOCOL_LIMITS.identifier,
       ),
+      ...(effectBinding || {}),
       toolName,
       serverName,
       inputDigest: input.sha256,

package/src/lib/mcp-stdio-package-materialization.js

@@ -74,7 +74,7 @@ const CAPSULE_EXECUTION_CONTEXT_ISOLATION =
 // manifest and is admissible only through the product's mandatory
 // filesystem/network/process-tree/code-snapshot OS sandbox contract.
 const CAPSULE_EXECUTION_CONTEXT_BUILTINS = new Set([
-  "child_process",
+  "child_process", // spawn-inventory-audit: static-execution-context-builtin
   "cluster",
   "inspector",
   "inspector/promises",

package/src/lib/plugin-runtime/__tests__/remote-source.test.js

@@ -5,6 +5,9 @@
  */
 
 import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
 import {
   isRemoteSource,
   validateRegistry,
@@ -54,7 +57,7 @@ function okThenOffline(body) {
     if (calls === 1) {
       return { ok: true, status: 200, text: async () => JSON.stringify(body) };
     }
-    throw new Error("ECONNREFUSED");
+    throw new TypeError("ECONNREFUSED");
   });
 }
 
@@ -164,15 +167,23 @@ describe("fetchRegistry", () => {
 
   it("falls back to the offline cache when the network fails", async () => {
     const fetch = okThenOffline(REGISTRY);
-    install({ fetch });
-    // 1st call populates the cache
-    await fetchRegistry("https://h/r.json", { cacheDir: "/cache" });
-    // 2nd call: network throws → served from cache
-    const { registry, fromCache } = await fetchRegistry("https://h/r.json", {
-      cacheDir: "/cache",
-    });
-    expect(fromCache).toBe(true);
-    expect(registry.plugins).toHaveLength(2);
+    _deps.fetch = fetch;
+    const cacheDir = fs.mkdtempSync(
+      path.join(os.tmpdir(), "cc-plugin-registry-cache-"),
+    );
+    try {
+      // 1st call populates the immutable cache.
+      await fetchRegistry("https://h/r.json", { cacheDir });
+      // 2nd call: a transport error is served from the verified cache.
+      const { registry, fromCache } = await fetchRegistry(
+        "https://h/r.json",
+        { cacheDir },
+      );
+      expect(fromCache).toBe(true);
+      expect(registry.plugins).toHaveLength(2);
+    } finally {
+      fs.rmSync(cacheDir, { recursive: true, force: true });
+    }
   });
 
   it("throws on HTTP error with no cache", async () => {
@@ -190,12 +201,12 @@ describe("fetchRegistry", () => {
 
   it("throws when offline and nothing is cached", async () => {
     const fetch = vi.fn(async () => {
-      throw new Error("ENOTFOUND");
+      throw new TypeError("ENOTFOUND");
     });
     install({ fetch });
     await expect(
       fetchRegistry("https://h/r.json", { cacheDir: "/cache" }),
-    ).rejects.toThrow(/no offline cache/);
+    ).rejects.toThrow(/no verified immutable cache/);
   });
 });
 
@@ -245,12 +256,19 @@ describe("listRegistryPlugins", () => {
 });
 
 describe("registryCachePath", () => {
-  it("is stable and content-addressed by URL", () => {
-    const a = registryCachePath("https://h/r.json", "/cache");
-    const b = registryCachePath("https://h/r.json", "/cache");
-    const c = registryCachePath("https://h/OTHER.json", "/cache");
+  it("is stable and content-addressed by URL and document digest", () => {
+    const digest = "a".repeat(64);
+    const a = registryCachePath("https://h/r.json", "/cache", digest);
+    const b = registryCachePath("https://h/r.json", "/cache", digest);
+    const c = registryCachePath("https://h/OTHER.json", "/cache", digest);
+    const d = registryCachePath(
+      "https://h/r.json",
+      "/cache",
+      "b".repeat(64),
+    );
     expect(a).toBe(b);
     expect(a).not.toBe(c);
+    expect(a).not.toBe(d);
     expect(a.endsWith(".json")).toBe(true);
   });
 });