codex-workflow-v2 2.0.0-beta.12.8 → 2.0.0-beta.13

package/dist/src/operational-contract.js

@@ -0,0 +1,94 @@
+import { createHash } from 'node:crypto';
+import { changedFiles, runGit } from './repository.js';
+const HEX_64 = /^[a-f0-9]{64}$/;
+export function watchdogPreflight(input) {
+    const valid = HEX_64.test(input.currentRouteFingerprint)
+        && (input.previousRouteFingerprint === null || HEX_64.test(input.previousRouteFingerprint));
+    return {
+        ...appOwnedBase(),
+        eligible: valid,
+        routeChanged: input.previousRouteFingerprint !== input.currentRouteFingerprint,
+        schedulingPerformed: false,
+        checkpoint: {
+            lastSuccessfulPollAt: input.lastSuccessfulPollAt,
+            lastSignificantObservationAt: input.lastSignificantObservationAt,
+        },
+        blockers: valid ? [] : ['Route fingerprints must be exact SHA-256 values.'],
+    };
+}
+export function coordinatorReplacementPreflight(input) {
+    const supervisors = [...new Set(input.activeSupervisorIds)];
+    const eligible = input.previousCoordinatorTerminal
+        && input.replacementCoordinatorId.trim().length > 0
+        && supervisors.length === 1
+        && supervisors[0] === input.replacementCoordinatorId
+        && HEX_64.test(input.coreReadbackFingerprint);
+    return {
+        ...appOwnedBase(),
+        eligibleToRequestReplacement: eligible,
+        replacementPerformed: false,
+        activeSupervisorIds: supervisors,
+        blockers: eligible
+            ? []
+            : ['Terminal predecessor, one replacement supervisor, and exact Core readback are required.'],
+    };
+}
+export function appConsentPreflight(input) {
+    const receiptStructurallyValid = input.presentedTaskId === input.requestedTaskId
+        && Number.isInteger(input.presentedTaskRevision)
+        && (input.presentedTaskRevision ?? -1) >= 0
+        && typeof input.consentReceiptHash === 'string'
+        && HEX_64.test(input.consentReceiptHash);
+    return {
+        ...appOwnedBase(),
+        receiptStructurallyValid,
+        consentGrantedByPackage: false,
+        semanticAuthorityEstablished: false,
+        requiredAppReadback: receiptStructurallyValid ? 'verify-consent-with-host' : 'obtain-current-consent-receipt',
+    };
+}
+export function worktreeObservationPreflight(repositoryRoot, limit = 32) {
+    const boundedLimit = Number.isInteger(limit) && limit > 0 ? Math.min(limit, 32) : 32;
+    const blocks = runGit(repositoryRoot, ['worktree', 'list', '--porcelain'])
+        .split(/\n\n+/)
+        .filter(Boolean);
+    const records = blocks.slice(0, boundedLimit).map((block) => {
+        const fields = new Map();
+        for (const line of block.split('\n')) {
+            const separator = line.indexOf(' ');
+            if (separator > 0)
+                fields.set(line.slice(0, separator), line.slice(separator + 1));
+        }
+        const worktree = fields.get('worktree') ?? '';
+        const dirty = changedFiles(worktree).sort();
+        return {
+            worktree,
+            head: fields.get('HEAD') ?? null,
+            branch: fields.get('branch')?.replace(/^refs\/heads\//, '') ?? null,
+            dirtyCount: dirty.length,
+            dirtyFingerprint: sha256(dirty.join('\n')),
+        };
+    });
+    return {
+        ...appOwnedBase(),
+        bounded: true,
+        limit: boundedLimit,
+        truncated: blocks.length > boundedLimit,
+        records,
+        observationFingerprint: sha256(JSON.stringify(records)),
+        worktreeSelectionPerformed: false,
+    };
+}
+function appOwnedBase() {
+    return {
+        contract: 'codex-workflow-app-owned-preflight-v1',
+        authority: 'diagnostic-only',
+        owner: 'codex-app',
+        packageMutatesAppState: false,
+        atomicAppEffectClaimed: false,
+    };
+}
+function sha256(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+//# sourceMappingURL=operational-contract.js.map

package/dist/src/operational-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operational-contract.js","sourceRoot":"","sources":["../../src/operational-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAUhC,MAAM,UAAU,iBAAiB,CAAC,KAKjC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC;WACnD,CAAC,KAAK,CAAC,wBAAwB,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC9F,OAAO;QACL,GAAG,YAAY,EAAE;QACjB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK,CAAC,wBAAwB,KAAK,KAAK,CAAC,uBAAuB;QAC9E,mBAAmB,EAAE,KAAK;QAC1B,UAAU,EAAE;YACV,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;SACjE;QACD,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kDAAkD,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAK/C;IACC,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,KAAK,CAAC,2BAA2B;WAC7C,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;WAChD,WAAW,CAAC,MAAM,KAAK,CAAC;WACxB,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,wBAAwB;WACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAChD,OAAO;QACL,GAAG,YAAY,EAAE;QACjB,4BAA4B,EAAE,QAAQ;QACtC,oBAAoB,EAAE,KAAK;QAC3B,mBAAmB,EAAE,WAAW;QAChC,QAAQ,EAAE,QAAQ;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,yFAAyF,CAAC;KAChG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACC,MAAM,wBAAwB,GAAG,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;WAC3E,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC;WAC7C,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;WACxC,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ;WAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,YAAY,EAAE;QACjB,wBAAwB;QACxB,uBAAuB,EAAE,KAAK;QAC9B,4BAA4B,EAAE,KAAK;QACnC,mBAAmB,EAAE,wBAAwB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,gCAAgC;KAC9G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,cAAsB,EACtB,KAAK,GAAG,EAAE;IAEV,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;SACvE,KAAK,CAAC,OAAO,CAAC;SACd,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,SAAS,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,OAAO;YACL,QAAQ;YACR,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;YAChC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,IAAI,IAAI;YACnE,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,GAAG,YAAY,EAAE;QACjB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,YAAY;QACnB,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,YAAY;QACvC,OAAO;QACP,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvD,0BAA0B,EAAE,KAAK;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,QAAQ,EAAE,uCAAuC;QACjD,SAAS,EAAE,iBAAiB;QAC5B,KAAK,EAAE,WAAW;QAClB,sBAAsB,EAAE,KAAK;QAC7B,sBAAsB,EAAE,KAAK;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/reviewer.d.ts

@@ -1,4 +1,107 @@
-import type { ContextEnvelope, ReviewInput, StepEvidence, TaskState } from './contracts.js';
+import { type ContextEnvelope, type ReviewInput, type StepEvidence, type TaskState } from './contracts.js';
+export type ReviewMode = 'ordinary' | 'security';
+export interface ReviewerRuntimePreflight {
+    protocol: 'codex-workflow-reviewer-runtime-preflight-v1';
+    prepared: boolean;
+    node: {
+        executable: string;
+        version: string;
+        requiredMajor: number;
+        supported: boolean;
+    };
+    workflowPackage: {
+        name: string;
+        version: string;
+        runtimeModulePath: string;
+        runtimeModuleSha256: string;
+        installedPackageRoot: string;
+        installedPackageManifestPath: string;
+        installedPackageManifestSha256: string | null;
+        declaredVersion: string | null;
+        lockedVersion: string | null;
+        installedVersion: string | null;
+        exactRepositoryLocal: boolean;
+    };
+    buildReadiness: {
+        state: 'ready' | 'missing' | 'stale';
+        manifestPath: string;
+        manifestSha256: string | null;
+        manifestFingerprint: string | null;
+        verifiedFileCount: number;
+        expectedFileCount: number;
+        cliEntrypointPath: string;
+        cliEntrypointSha256: string | null;
+        runningCliMatchesInstalledBuild: boolean;
+        reviewerModulePath: string;
+        reviewerModuleSha256: string | null;
+        runningModuleMatchesInstalledBuild: boolean;
+        gatewayModulePath: string;
+        gatewayModuleSha256: string | null;
+        runningGatewayMatchesInstalledBuild: boolean;
+        workflowModulePath: string;
+        workflowModuleSha256: string | null;
+        runningWorkflowMatchesInstalledBuild: boolean;
+        evidenceSha256: string;
+    };
+    runtimeDependencyReadiness: {
+        state: 'ready' | 'missing' | 'stale' | 'not-run';
+        expectedPackageCount: number;
+        verifiedPackageCount: number;
+        expectedFileCount: number;
+        verifiedFileCount: number;
+        packages: Array<{
+            name: string;
+            version: string;
+            packageRoot: string;
+            packageManifestPath: string;
+            packageManifestSha256: string | null;
+            expectedFileCount: number;
+            verifiedFileCount: number;
+            state: 'ready' | 'missing' | 'stale';
+        }>;
+        evidenceSha256: string;
+    };
+    runtimeCheck: {
+        kind: 'repository-local-gateway-load';
+        state: 'passed' | 'failed' | 'not-run';
+        loader: 'node:createRequire';
+        executable: string;
+        gatewayEntrypointPath: string;
+        gatewayEntrypointSha256: string | null;
+        reviewerEntrypointPath: string;
+        reviewerEntrypointSha256: string | null;
+        workflowEntrypointPath: string;
+        workflowEntrypointSha256: string | null;
+        dependencyClosureEvidenceSha256: string;
+        observedPackageName: string | null;
+        observedPackageVersion: string | null;
+        observedProtocolVersion: number | null;
+        observedStateSchemaVersion: number | null;
+        resultSha256: string | null;
+        failureKind: 'module-load-failed' | 'contract-mismatch' | null;
+        evidenceSha256: string;
+        sealedCheckoutMutationAllowed: false;
+    };
+    repositoryDependencyReadiness: {
+        packageManifestPath: string | null;
+        packageManifestSha256: string | null;
+        packageLockPath: string | null;
+        packageLockSha256: string | null;
+        nodeModulesPath: string;
+        nodeModulesPresent: boolean;
+        state: 'ready' | 'not-installed' | 'not-applicable' | 'version-mismatch' | 'build-missing' | 'build-stale' | 'runtime-dependency-missing' | 'runtime-dependency-stale' | 'runtime-check-failed';
+        installAttempted: false;
+        installCommand: null;
+    };
+    ephemeralCache: {
+        path: string;
+        writable: boolean;
+        outsideSealedCheckout: boolean;
+        lifecycle: 'os-temporary';
+    };
+    sealedCheckoutMutationAllowed: false;
+    blockers: string[];
+}
 export interface ReviewerProcessResult {
     status: number | null;
     stdout: string;
@@ -41,12 +144,15 @@ export interface ExternalStrictStepReviewPacket {
     packetHash: string;
     repositorySeal: RepositorySeal;
     repositorySealHash: string;
+    reviewMode: ReviewMode;
+    reviewerRuntime: ReviewerRuntimePreflight;
 }
 export interface ExternalStrictStepReviewInput {
     protocol: 'codex-workflow-external-strict-step-review-v1';
     packetHash: string;
     repositorySealHash: string;
     reviewerThreadId: string;
+    reviewMode: ReviewMode;
     review: ReviewInput;
 }
 export interface ExternalStrictTaskReviewPacket {
@@ -57,16 +163,24 @@ export interface ExternalStrictTaskReviewPacket {
     packetHash: string;
     repositorySeal: RepositorySeal;
     repositorySealHash: string;
+    reviewMode: ReviewMode;
+    reviewerRuntime: ReviewerRuntimePreflight;
 }
 export interface ExternalStrictTaskReviewInput {
     protocol: 'codex-workflow-external-strict-task-review-v1';
     packetHash: string;
     repositorySealHash: string;
     reviewerThreadId: string;
+    reviewMode: ReviewMode;
     review: ReviewInput;
 }
+export interface ReviewScopeAugmentation {
+    stepId: string;
+    paths: string[];
+    authority: 'machine-derived-check-support';
+}
 export declare const STRICT_REVIEWER_TIMEOUT_MS = 180000;
-declare const REVIEW_SCHEMA: {
+export declare const STRICT_REVIEW_OUTPUT_SCHEMA: {
     readonly type: "object";
     readonly additionalProperties: false;
     readonly required: readonly ["status", "reviewer", "summary", "findings", "isolationProbe"];
@@ -90,7 +204,7 @@ declare const REVIEW_SCHEMA: {
             readonly items: {
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["id", "severity", "requirement", "summary", "evidence", "requiredAction"];
+                readonly required: readonly ["id", "severity", "requirement", "summary", "evidence", "requiredAction", "causeId", "route", "planConflict"];
                 readonly properties: {
                     readonly id: {
                         readonly type: "string";
@@ -114,6 +228,102 @@ declare const REVIEW_SCHEMA: {
                         readonly type: "string";
                         readonly minLength: 1;
                     };
+                    readonly causeId: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly pattern: "^[A-Za-z0-9][A-Za-z0-9._:-]{2,127}$";
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
+                    readonly route: {
+                        readonly enum: readonly ["fix", "replan"];
+                    };
+                    readonly planConflict: {
+                        readonly anyOf: readonly [{
+                            readonly type: "null";
+                        }, {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["planClause", "whyFixCannotFit", "minimalPlanChange"];
+                            readonly properties: {
+                                readonly planClause: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                };
+                                readonly whyFixCannotFit: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                };
+                                readonly minimalPlanChange: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                };
+                            };
+                        }];
+                    };
+                };
+            };
+        };
+    };
+};
+/** @deprecated Use STRICT_REVIEW_OUTPUT_SCHEMA. Retained for direct-module compatibility. */
+export declare const REVIEW_SCHEMA: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["status", "reviewer", "summary", "findings", "isolationProbe"];
+    readonly properties: {
+        readonly status: {
+            readonly enum: readonly ["passed", "failed", "unverified"];
+        };
+        readonly reviewer: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly summary: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly isolationProbe: {
+            readonly enum: readonly ["denied", "written", "not-attempted"];
+        };
+        readonly findings: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["id", "severity", "requirement", "summary", "evidence", "requiredAction", "causeId", "route", "planConflict"];
+                readonly properties: {
+                    readonly id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly severity: {
+                        readonly enum: readonly ["critical", "major", "minor"];
+                    };
+                    readonly requirement: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly summary: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly evidence: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly requiredAction: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly causeId: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly pattern: "^[A-Za-z0-9][A-Za-z0-9._:-]{2,127}$";
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
                     readonly route: {
                         readonly enum: readonly ["fix", "replan"];
                     };
@@ -145,11 +355,11 @@ declare const REVIEW_SCHEMA: {
         };
     };
 };
-export declare function launchStrictReviewer(repositoryRoot: string, task: TaskState, taskRoot: string, envelope: ContextEnvelope, runner?: ReviewerCommandRunner): StrictReviewerLaunchResult;
-export declare function launchStrictStepReviewer(repositoryRoot: string, task: TaskState, taskRoot: string, envelope: ContextEnvelope, stepId: string, currentEvidence: StepEvidence, runner?: ReviewerCommandRunner): StrictStepReviewerLaunchResult;
-export declare function prepareExternalStrictStepReviewPacket(repositoryRoot: string, task: TaskState, taskRoot: string, envelope: ContextEnvelope, stepId: string, currentEvidence: StepEvidence): ExternalStrictStepReviewPacket;
-export declare function prepareExternalStrictTaskReviewPacket(repositoryRoot: string, task: TaskState, taskRoot: string, envelope: ContextEnvelope): ExternalStrictTaskReviewPacket;
+export declare function launchStrictReviewer(repositoryRoot: string, task: TaskState, taskRoot: string, envelope: ContextEnvelope, runner?: ReviewerCommandRunner, scopeAugmentations?: readonly ReviewScopeAugmentation[]): StrictReviewerLaunchResult;
+export declare function launchStrictStepReviewer(repositoryRoot: string, task: TaskState, taskRoot: string, envelope: ContextEnvelope, stepId: string, currentEvidence: StepEvidence, runner?: ReviewerCommandRunner, scopeAugmentations?: readonly ReviewScopeAugmentation[]): StrictStepReviewerLaunchResult;
+export declare function prepareExternalStrictStepReviewPacket(repositoryRoot: string, task: TaskState, taskRoot: string, envelope: ContextEnvelope, stepId: string, currentEvidence: StepEvidence, scopeAugmentations?: readonly ReviewScopeAugmentation[], reviewMode?: ReviewMode): ExternalStrictStepReviewPacket;
+export declare function prepareExternalStrictTaskReviewPacket(repositoryRoot: string, task: TaskState, taskRoot: string, envelope: ContextEnvelope, scopeAugmentations?: readonly ReviewScopeAugmentation[], reviewMode?: ReviewMode): ExternalStrictTaskReviewPacket;
 export declare function validateExternalStrictStepReviewInput(value: unknown, expected: ExternalStrictStepReviewPacket): ReviewInput;
 export declare function validateExternalStrictTaskReviewInput(value: unknown, expected: ExternalStrictTaskReviewPacket): ReviewInput;
 export declare function strictReviewInputHash(review: ReviewInput): string;
-export { REVIEW_SCHEMA };
+export declare function prepareReviewerRuntimePreflight(repositoryRoot: string, binding: string): ReviewerRuntimePreflight;