cool-workflow 0.1.80 → 0.1.82

package/dist/operator-ux.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatMultiAgentTrustAudit = exports.formatTopologySummary = exports.formatMultiAgentSummary = exports.formatCommitSummary = exports.formatFeedbackSummary = exports.formatCandidateSummary = exports.formatWorkerSummary = exports.formatOperatorGraph = exports.formatOperatorReport = exports.formatOperatorStatus = void 0;
 exports.summarizeOperatorRun = summarizeOperatorRun;
 exports.adviseNoRun = adviseNoRun;
 exports.summarizeOperatorWorkers = summarizeOperatorWorkers;
@@ -10,17 +11,6 @@ exports.summarizeOperatorCandidates = summarizeOperatorCandidates;
 exports.summarizeOperatorFeedback = summarizeOperatorFeedback;
 exports.summarizeOperatorCommits = summarizeOperatorCommits;
 exports.buildOperatorGraph = buildOperatorGraph;
-exports.formatOperatorStatus = formatOperatorStatus;
-exports.formatOperatorReport = formatOperatorReport;
-exports.formatOperatorGraph = formatOperatorGraph;
-exports.formatWorkerSummary = formatWorkerSummary;
-exports.formatCandidateSummary = formatCandidateSummary;
-exports.formatFeedbackSummary = formatFeedbackSummary;
-exports.formatCommitSummary = formatCommitSummary;
-exports.formatMultiAgentSummary = formatMultiAgentSummary;
-exports.formatTopologySummary = formatTopologySummary;
-exports.formatMultiAgentTrustAudit = formatMultiAgentTrustAudit;
-const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const trust_audit_1 = require("./trust-audit");
 const multi_agent_trust_1 = require("./multi-agent-trust");
@@ -132,7 +122,7 @@ function summarizeOperatorCandidates(run) {
         total: candidates.length,
         byStatus: countBy(candidates, (candidate) => candidate.status),
         byKind: countBy(candidates, (candidate) => candidate.kind),
-        latestRankingPath: latestRankingPath && node_fs_1.default.existsSync(latestRankingPath) ? latestRankingPath : latestRankingPath,
+        latestRankingPath,
         selected: selections.map((selection) => ({
             selectionId: selection.id,
             candidateId: selection.candidateId,
@@ -281,267 +271,11 @@ function buildOperatorGraph(run) {
         edges: uniqueEdges(edges).sort(compareEdges)
     };
 }
-function formatOperatorStatus(summary) {
-    const operator = summary.multiAgentOperator;
-    return [
-        `Run: ${summary.runId}`,
-        `Workflow: ${summary.workflowId}${summary.appId ? ` (${summary.appId}@${summary.appVersion || "unknown"})` : ""}`,
-        `Loop Stage: ${summary.loopStage}`,
-        `Active Phase: ${summary.activePhase || "none"}`,
-        `Blocked: ${summary.blocked ? summary.blockedReasons.join("; ") : "no"}`,
-        `Tasks: ${formatCounts(summary.tasks.byStatus)}; total=${summary.tasks.total}`,
-        "",
-        "Phases",
-        ...summary.phases.map((phase) => `  ${phase.name}: ${phase.status} (${phase.tasks.completed}/${phase.tasks.total} completed)`),
-        "",
-        formatWorkerPanel(summary.workers),
-        "",
-        formatCandidatePanel(summary.candidates),
-        "",
-        formatFeedbackPanel(summary.feedback),
-        "",
-        formatCommitPanel(summary.commits),
-        "",
-        formatTopologyPanel(summary.topologies),
-        "",
-        formatMultiAgentPanel(summary.multiAgent),
-        "",
-        "Multi-Agent Operator UX",
-        `  active=${operator.activeMultiAgentRunIds.join(", ") || "none"}; topologies=${operator.topologyRunIds.join(", ") || "none"}; blocked=${operator.blocked ? "yes" : "no"}`,
-        `  dependencies=${operator.dependencies.length}; failures=${operator.failures.length}; adoptedEvidence=${operator.adoptedEvidence.length}; missingEvidence=${operator.missingEvidence.length}${operator.inspectableEvidence.length ? ` (inspectable=${operator.inspectableEvidence.length})` : ""}`,
-        `  next=${operator.nextAction}`,
-        "",
-        formatBlackboardPanel(summary.blackboard),
-        "",
-        formatTrustPanel(summary.trust),
-        "",
-        formatMultiAgentTrustAudit(summary.multiAgentTrust),
-        "",
-        `Report: ${summary.reportPath}`,
-        "",
-        "Next Action",
-        ...formatRecommendations(summary.nextActions)
-    ].join("\n");
-}
-function formatOperatorReport(summary) {
-    return [
-        formatOperatorStatus(summary),
-        "",
-        "Active and Pending Tasks",
-        ...formatTaskList(summary.tasks),
-        "",
-        "Evidence",
-        ...(summary.evidencePaths.length ? summary.evidencePaths.map((entry) => `  ${entry}`) : ["  none recorded"]),
-        "",
-        (0, multi_agent_operator_ux_1.formatMultiAgentDependencies)(summary.multiAgentOperator.dependencies),
-        "",
-        (0, multi_agent_operator_ux_1.formatMultiAgentFailures)(summary.multiAgentOperator.failures),
-        "",
-        (0, multi_agent_operator_ux_1.formatMultiAgentEvidence)(summary.multiAgentOperator.evidence),
-        "",
-        "Resource Commands",
-        `  node scripts/cw.js graph ${summary.runId}`,
-        `  node scripts/cw.js worker summary ${summary.runId}`,
-        `  node scripts/cw.js topology summary ${summary.runId}`,
-        `  node scripts/cw.js topology graph ${summary.runId}`,
-        `  node scripts/cw.js multi-agent summary ${summary.runId}`,
-        `  node scripts/cw.js multi-agent graph ${summary.runId}`,
-        `  node scripts/cw.js multi-agent dependencies ${summary.runId}`,
-        `  node scripts/cw.js multi-agent failures ${summary.runId}`,
-        `  node scripts/cw.js multi-agent evidence ${summary.runId}`,
-        `  node scripts/cw.js blackboard summary ${summary.runId}`,
-        `  node scripts/cw.js blackboard graph ${summary.runId}`,
-        `  node scripts/cw.js coordinator summary ${summary.runId}`,
-        `  node scripts/cw.js candidate summary ${summary.runId}`,
-        `  node scripts/cw.js feedback summary ${summary.runId}`,
-        `  node scripts/cw.js commit summary ${summary.runId}`,
-        `  node scripts/cw.js audit summary ${summary.runId}`,
-        `  node scripts/cw.js audit provenance ${summary.runId}`,
-        `  node scripts/cw.js audit multi-agent ${summary.runId}`,
-        `  node scripts/cw.js audit policy ${summary.runId}`,
-        `  node scripts/cw.js audit blackboard ${summary.runId}`,
-        `  node scripts/cw.js audit judge ${summary.runId}`
-    ].join("\n");
-}
-function formatOperatorGraph(graph) {
-    const lines = [`Run Graph: ${graph.runId}`, "", "Nodes"];
-    const groups = groupBy(graph.nodes, (node) => node.kind);
-    for (const kind of Object.keys(groups).sort()) {
-        lines.push(`  ${kind}`);
-        for (const node of groups[kind]) {
-            const suffix = node.path ? ` -> ${node.path}` : "";
-            lines.push(`    [${node.status}] ${node.id} (${node.label})${suffix}`);
-        }
-    }
-    lines.push("", "Edges");
-    if (!graph.edges.length)
-        lines.push("  none");
-    for (const edge of graph.edges) {
-        lines.push(`  ${edge.from} -> ${edge.to}${edge.label ? ` (${edge.label})` : ""}`);
-    }
-    return lines.join("\n");
-}
-function formatWorkerSummary(summary) {
-    return formatWorkerPanel(summary);
-}
-function formatCandidateSummary(summary) {
-    return formatCandidatePanel(summary);
-}
-function formatFeedbackSummary(summary) {
-    return formatFeedbackPanel(summary);
-}
-function formatCommitSummary(summary) {
-    return formatCommitPanel(summary);
-}
-function formatTrustPanel(summary) {
-    const lines = [
-        "Trust Audit",
-        `  total=${summary.eventCount}; decision=${formatCounts(summary.byDecision)}; source=${formatCounts(summary.bySource)}`,
-        `  sandbox=${formatCounts(summary.bySandboxProfile)}`,
-        `  multi-agent trust=${summary.multiAgentTrust ? formatCounts(summary.multiAgentTrust) : "none"}`,
-        `  events=${summary.eventLogPath}`,
-        `  summary=${summary.summaryPath}`
-    ];
-    for (const worker of summary.workers.slice(0, 6)) {
-        lines.push(`  worker ${worker.workerId}: sandbox=${worker.sandboxProfileId || "none"}, decisions=${formatCounts(worker.decisions)}, denied=${worker.denied}`);
-    }
-    return lines.join("\n");
-}
-function formatMultiAgentSummary(summary) {
-    return formatMultiAgentPanel(summary);
-}
-function formatTopologySummary(summary) {
-    return formatTopologyPanel(summary);
-}
-function formatMultiAgentTrustAudit(view) {
-    const rolePolicies = arrayView(view.rolePolicies);
-    const permissionDecisions = arrayView(view.permissionDecisions);
-    const blackboardWrites = arrayView(view.blackboardWrites);
-    const messageProvenance = arrayView(view.messageProvenance);
-    const judgeRationales = arrayView(view.judgeRationales);
-    const panelDecisions = arrayView(view.panelDecisions);
-    const policyViolations = arrayView(view.policyViolations);
-    return [
-        `Multi-Agent Trust: ${String(view.runId || "unknown")}`,
-        "",
-        "Role Policies",
-        ...formatRolePolicyRows(rolePolicies),
-        "",
-        "Permission Decisions",
-        ...formatAuditRows(permissionDecisions),
-        "",
-        "Blackboard Write Audit",
-        ...formatAuditRows(blackboardWrites),
-        "",
-        "Message Provenance",
-        ...formatAuditRows(messageProvenance),
-        "",
-        "Judge Rationales",
-        ...formatAuditRows([...judgeRationales, ...panelDecisions]),
-        "",
-        "Policy Violations",
-        ...formatAuditRows(policyViolations),
-        "",
-        "Next Action",
-        `  ${String(view.nextAction || `node scripts/cw.js audit multi-agent ${String(view.runId || "<run-id>")} --json`)}`
-    ].join("\n");
-}
-function formatTopologyPanel(summary) {
-    const lines = [
-        "Topologies",
-        `  runs=${summary.totalRuns}; status=${formatCounts(summary.runsByStatus)}; official=${summary.officialTopologies.join(", ")}`
-    ];
-    for (const record of summary.active.slice(0, 6)) {
-        lines.push(`  ${record.id}: ${record.topologyId}, status=${record.status}, readiness=${record.readiness}`);
-        lines.push(`    run=${record.multiAgentRunId} board=${record.blackboardId}`);
-        lines.push(`    roles=${record.roles.join(", ") || "none"} topics=${record.topics.join(", ") || "none"}`);
-        lines.push(`    fanout=${record.fanouts.join(", ") || "none"} fanin=${record.fanins.join(", ") || "none"}`);
-        for (const missing of record.missingEvidence.slice(0, 4))
-            lines.push(`    missing=${missing}`);
-        for (const conflict of record.conflicts.slice(0, 4))
-            lines.push(`    conflict=${conflict}`);
-        if (record.nextActions[0])
-            lines.push(`    next=${record.nextActions[0]}`);
-    }
-    if (summary.nextAction)
-        lines.push(`  next=${summary.nextAction}`);
-    return lines.join("\n");
-}
-function formatMultiAgentPanel(summary) {
-    const lines = [
-        "Multi-Agent",
-        `  runs=${summary.totalRuns}; status=${formatCounts(summary.runsByStatus)}`,
-        `  roles=${summary.roles}; groups=${summary.groups} (${formatCounts(summary.groupsByStatus)})`,
-        `  memberships=${summary.memberships} (${formatCounts(summary.membershipsByStatus)})`,
-        `  fanouts=${summary.fanouts}; fanins=${summary.fanins} (${formatCounts(summary.faninsByStatus)})`
-    ];
-    for (const group of summary.groupsDetail.slice(0, 6)) {
-        lines.push(`  group ${group.id}: ${group.status}, phase=${group.phase || "none"}, run=${group.multiAgentRunId}`);
-        for (const role of group.roles.slice(0, 6)) {
-            lines.push(`    role ${role.roleId}: memberships=${role.memberships}, reported=${role.reported}, missing=${role.missing}`);
-        }
-        lines.push(`    fanout=${group.fanouts.join(", ") || "none"} fanin=${group.fanins.join(", ") || "none"}`);
-    }
-    for (const reason of summary.blockedReasons.slice(0, 6))
-        lines.push(`  blocked: ${reason}`);
-    if (summary.nextAction)
-        lines.push(`  next=${summary.nextAction}`);
-    return lines.join("\n");
-}
-function formatBlackboardPanel(summary) {
-    const lines = [
-        "Blackboard / Coordinator",
-        `  board=${summary.blackboardId || "none"}; topics=${summary.topics}; messages=${summary.messages}; contexts=${summary.contexts}; artifacts=${summary.artifacts}`,
-        `  open questions=${summary.openQuestions.length}; conflicts=${summary.conflicts.length}; missing evidence=${summary.missingEvidence.length}`,
-        `  ready for fanin=${summary.readyForFanin ? "yes" : "no"}`,
-        `  index=${summary.indexPath || "none"}`,
-        `  latest snapshot=${summary.latestSnapshotPath || "none"}`
-    ];
-    for (const question of summary.openQuestions.slice(0, 5))
-        lines.push(`  question ${question.id}: ${question.value}`);
-    for (const conflict of summary.conflicts.slice(0, 5))
-        lines.push(`  conflict ${conflict.id}: ${conflict.key} -> ${conflict.conflictingContextIds.join(", ") || "unindexed"}`);
-    for (const missing of summary.missingEvidence.slice(0, 5))
-        lines.push(`  missing: ${missing}`);
-    if (summary.nextAction)
-        lines.push(`  next=${summary.nextAction}`);
-    return lines.join("\n");
-}
-function arrayView(value) {
-    return Array.isArray(value) ? value : [];
-}
-function formatRolePolicyRows(rows) {
-    if (!rows.length)
-        return ["  none"];
-    return rows.slice(0, 40).map((row) => {
-        const writes = Array.isArray(row.allowedWriteOperations) ? row.allowedWriteOperations.join(",") : "none";
-        const candidates = Array.isArray(row.allowedCandidateOperations) ? row.allowedCandidateOperations.join(",") : "none";
-        const judges = Array.isArray(row.allowedJudgeOperations) ? row.allowedJudgeOperations.join(",") : "none";
-        const topics = Array.isArray(row.allowedBlackboardTopicIds) ? row.allowedBlackboardTopicIds.join(",") : "none";
-        return `  ${String(row.policyRef || row.id || row.subjectId)} subject=${String(row.subjectKind || "unknown")}:${String(row.subjectId || "unknown")} topics=${topics} writes=${writes} candidates=${candidates} judges=${judges}`;
-    });
-}
-function formatAuditRows(rows) {
-    if (!rows.length)
-        return ["  none"];
-    return rows.slice(0, 60).map((row) => {
-        const metadata = row.metadata && typeof row.metadata === "object" ? row.metadata : {};
-        const ids = [
-            row.agentRoleId ? `role=${row.agentRoleId}` : "",
-            row.agentMembershipId ? `membership=${row.agentMembershipId}` : "",
-            row.blackboardMessageId ? `message=${row.blackboardMessageId}` : "",
-            row.blackboardContextId ? `context=${row.blackboardContextId}` : "",
-            row.blackboardArtifactRefId ? `artifact=${row.blackboardArtifactRefId}` : "",
-            row.coordinatorDecisionId ? `decision=${row.coordinatorDecisionId}` : "",
-            row.candidateId ? `candidate=${row.candidateId}` : "",
-            row.scoreId ? `score=${row.scoreId}` : "",
-            row.selectionId ? `selection=${row.selectionId}` : ""
-        ].filter(Boolean).join(" ");
-        const reason = metadata.reason ? ` reason=${String(metadata.reason)}` : "";
-        const operation = metadata.operation ? ` operation=${String(metadata.operation)}` : "";
-        return `  [${String(row.decision || "recorded")}] ${String(row.kind || "event")} ${String(row.id || "")}${operation}${ids ? ` ${ids}` : ""}${row.policyRef ? ` policy=${String(row.policyRef)}` : ""}${reason}`;
-    });
-}
+// Human formatting (CLI-only) for the operator status / report / graph surfaces
+// plus the worker/candidate/feedback/commit/trust/topology/multi-agent panels now
+// lives in ./operator-ux/format.ts (FreeBSD-audit R-series, run-registry/format.ts
+// template). Re-exported below so importers of "./operator-ux" see an unchanged
+// surface. The pure data summarizers and the run-graph builder stay here.
 function adviseNextSteps(run, summary) {
     const actions = [];
     if (summary.feedback.open.length) {
@@ -797,81 +531,6 @@ function evidencePathsFor(run) {
         values.add(run.paths.report);
     return [...values].sort();
 }
-function formatWorkerPanel(summary) {
-    const lines = [
-        "Workers",
-        `  total=${summary.total}; status=${formatCounts(summary.byStatus)}; sandbox=${formatCounts(summary.bySandboxProfile)}; backend=${formatCounts(summary.byBackend)}`
-    ];
-    for (const worker of summary.workers.slice(0, 8)) {
-        const attestation = worker.backendAttestationStatus ? `/${worker.backendAttestationStatus}` : "";
-        lines.push(`  ${worker.id}: ${worker.status}, task=${worker.taskId}, sandbox=${worker.sandboxProfileId || "none"}, backend=${worker.backendId || "none"}${attestation}`);
-        lines.push(`    manifest=${worker.manifestPath}`);
-        lines.push(`    result=${worker.resultPath}`);
-        if (worker.feedbackIds.length)
-            lines.push(`    feedback=${worker.feedbackIds.join(", ")}`);
-    }
-    if (summary.workers.length > 8)
-        lines.push(`  ... ${summary.workers.length - 8} more worker(s)`);
-    return lines.join("\n");
-}
-function formatCandidatePanel(summary) {
-    const lines = [
-        "Candidates",
-        `  total=${summary.total}; status=${formatCounts(summary.byStatus)}; kind=${formatCounts(summary.byKind)}`,
-        `  latest ranking=${summary.latestRankingPath || "none"}`,
-        `  selected=${summary.selected.map((selection) => `${selection.candidateId}/${selection.selectionId}`).join(", ") || "none"}`,
-        `  ready for commit=${summary.readyForCommit.map((item) => `${item.candidateId}/${item.selectionId}`).join(", ") || "none"}`
-    ];
-    for (const problem of summary.problems.slice(0, 5))
-        lines.push(`  problem: ${problem}`);
-    for (const candidate of summary.candidates.slice(0, 8)) {
-        lines.push(`  ${candidate.id}: ${candidate.status}, scores=${candidate.scoreCount}, selected=${candidate.selected ? "yes" : "no"}`);
-    }
-    if (summary.candidates.length > 8)
-        lines.push(`  ... ${summary.candidates.length - 8} more candidate(s)`);
-    return lines.join("\n");
-}
-function formatFeedbackPanel(summary) {
-    const lines = [
-        "Feedback",
-        `  total=${summary.total}; status=${formatCounts(summary.byStatus)}`,
-        `  severity=${formatCounts(summary.bySeverity)}`,
-        `  classification=${formatCounts(summary.byClassification)}`,
-        `  retryable=${summary.retryable}; nonRetryable=${summary.nonRetryable}`
-    ];
-    for (const record of summary.open.slice(0, 6)) {
-        lines.push(`  ${record.id}: ${record.severity}/${record.classification}, retryable=${record.retryable ? "yes" : "no"}`);
-        lines.push(`    ${record.message}`);
-    }
-    return lines.join("\n");
-}
-function formatCommitPanel(summary) {
-    const lines = [
-        "Commits",
-        `  total=${summary.total}; verifier-gated=${summary.verifierGated}; checkpoints=${summary.checkpoints}`,
-        `  latest=${summary.latest ? `${summary.latest.id} (${summary.latest.kind}) ${summary.latest.snapshotPath}` : "none"}`
-    ];
-    for (const commit of summary.commits.slice(-8)) {
-        lines.push(`  ${commit.id}: ${commit.kind}, reason=${commit.reason}`);
-        lines.push(`    verifier=${commit.verifierNodeId || "none"} candidate=${commit.candidateId || "none"} selection=${commit.selectionId || "none"} evidence=${commit.evidenceCount}`);
-        lines.push(`    snapshot=${commit.snapshotPath}`);
-    }
-    return lines.join("\n");
-}
-function formatTaskList(summary) {
-    const lines = [];
-    for (const [label, values] of [
-        ["pending", summary.pending],
-        ["running", summary.running],
-        ["failed", summary.failed]
-    ]) {
-        lines.push(`  ${label}: ${values.length ? values.join(", ") : "none"}`);
-    }
-    return lines;
-}
-function formatRecommendations(actions) {
-    return actions.length ? actions.map((action) => `  ${action.command}\n    reason: ${action.reason}`) : ["  none"];
-}
 function formatCommitRow(commit) {
     return {
         id: commit.id,
@@ -948,24 +607,24 @@ function countByKnown(items, getKey, keys) {
         counts[getKey(item)] += 1;
     return counts;
 }
-function formatCounts(counts) {
-    const entries = Object.entries(counts).filter(([, value]) => value > 0).sort(([left], [right]) => left.localeCompare(right));
-    if (!entries.length)
-        return "none";
-    return entries.map(([key, value]) => `${key}=${value}`).join(", ");
-}
-function groupBy(items, getKey) {
-    const groups = {};
-    for (const item of items) {
-        const key = getKey(item);
-        groups[key] = groups[key] || [];
-        groups[key].push(item);
-    }
-    return groups;
-}
 function sortRecord(record) {
     return Object.fromEntries(Object.entries(record).sort(([left], [right]) => left.localeCompare(right)));
 }
 function safeId(value) {
     return String(value).replace(/[^a-zA-Z0-9_.:-]+/g, "_");
 }
+// Human formatting (CLI-only) now lives in ./operator-ux/format.ts (FreeBSD-audit
+// R-series: rendering carved out of the operator module, run-registry/format.ts
+// template). Re-exported so that importers of "./operator-ux" see an unchanged
+// surface.
+var format_1 = require("./operator-ux/format");
+Object.defineProperty(exports, "formatOperatorStatus", { enumerable: true, get: function () { return format_1.formatOperatorStatus; } });
+Object.defineProperty(exports, "formatOperatorReport", { enumerable: true, get: function () { return format_1.formatOperatorReport; } });
+Object.defineProperty(exports, "formatOperatorGraph", { enumerable: true, get: function () { return format_1.formatOperatorGraph; } });
+Object.defineProperty(exports, "formatWorkerSummary", { enumerable: true, get: function () { return format_1.formatWorkerSummary; } });
+Object.defineProperty(exports, "formatCandidateSummary", { enumerable: true, get: function () { return format_1.formatCandidateSummary; } });
+Object.defineProperty(exports, "formatFeedbackSummary", { enumerable: true, get: function () { return format_1.formatFeedbackSummary; } });
+Object.defineProperty(exports, "formatCommitSummary", { enumerable: true, get: function () { return format_1.formatCommitSummary; } });
+Object.defineProperty(exports, "formatMultiAgentSummary", { enumerable: true, get: function () { return format_1.formatMultiAgentSummary; } });
+Object.defineProperty(exports, "formatTopologySummary", { enumerable: true, get: function () { return format_1.formatTopologySummary; } });
+Object.defineProperty(exports, "formatMultiAgentTrustAudit", { enumerable: true, get: function () { return format_1.formatMultiAgentTrustAudit; } });

package/dist/orchestrator/lifecycle-operations.js

@@ -17,6 +17,7 @@ exports.commit = commit;
 // plan() receives an already-resolved workflow app record (the runner still owns
 // app loading, which is instance-stateful). Behavior is identical to the inline
 // implementations; only the location changed.
+const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const state_1 = require("../state");
@@ -456,8 +457,28 @@ function renderPrompt(prompt, inputs) {
     }
     return rendered;
 }
+// Deterministic run id (replay-determinism self-audit): the wall-clock stamp is an
+// edge timestamp (recorded once and stripped on replay), but the former
+// Math.random() suffix made the run id itself non-reproducible — re-deriving the id
+// for the SAME recorded run would never match. The suffix is now a content hash of
+// the run's deterministic identity (workflowId + the recorded stamp), so the id is a
+// pure function of inputs that already live in state. Distinct plan() invocations
+// still get distinct ids because the per-millisecond stamp differs; replaying a
+// recorded run reproduces the byte-identical id. Mirrors the de-clock done for
+// worker ids in src/worker-isolation/paths.ts.
+let runIdSequence = 0;
 function createRunId(workflowId) {
     const stamp = new Date().toISOString().replace(/[-:]/g, "").replace(/\..+/, "Z");
-    const suffix = Math.random().toString(36).slice(2, 8);
+    // The stamp is second-resolution, so several runs of the same workflowId minted
+    // within one second would otherwise hash to the SAME id. process.pid + a monotonic
+    // counter break the tie across BOTH same-process (counter) and concurrent-process
+    // (pid) minting — deterministic-by-environment, not a PRNG, so it keeps the
+    // replay-determinism intent; the id is an edge stamp stripped on replay anyway.
+    runIdSequence += 1;
+    const suffix = node_crypto_1.default
+        .createHash("sha256")
+        .update(`${workflowId}:${stamp}:${process.pid}:${runIdSequence}`)
+        .digest("hex")
+        .slice(0, 6);
     return `${workflowId}-${stamp}-${suffix}`;
 }

package/dist/orchestrator/report.js

@@ -289,8 +289,16 @@ function renderCandidates(summary) {
 }
 function renderTrustAudit(run) {
     const summary = (0, trust_audit_1.summarizeTrustAudit)(run);
+    const integrity = summary.integrity;
     return [
         `- Events: ${summary.eventCount}`,
+        `- Chain integrity: ${integrity ? (integrity.verified ? "verified" : "FAILED") : "n/a"}` +
+            `${integrity ? ` (${integrity.chained} chained, ${integrity.unchained} legacy${integrity.corruptLines ? `, ${integrity.corruptLines} corrupt` : ""})` : ""}`,
+        // An auditable control-plane never lets a broken decision-log chain pass
+        // silently — name the failing checks loudly, same as the telemetry chain.
+        ...(integrity && !integrity.verified
+            ? [`  !! TRUST-AUDIT CHAIN TAMPER DETECTED: ${integrity.checks.filter((c) => !c.pass).map((c) => c.code).join(", ")}`]
+            : []),
         `- Decisions: ${formatCounts(summary.byDecision)}`,
         `- Sources: ${formatCounts(summary.bySource)}`,
         `- Sandbox profiles: ${formatCounts(summary.bySandboxProfile)}`,

package/dist/orchestrator.js

@@ -48,7 +48,6 @@ const state_1 = require("./state");
 const observability_1 = require("./observability");
 const pipeline_runner_1 = require("./pipeline-runner");
 const worker_isolation_1 = require("./worker-isolation");
-const candidate_scoring_1 = require("./candidate-scoring");
 const sandbox_profile_1 = require("./sandbox-profile");
 const execution_backend_1 = require("./execution-backend");
 const operator_ux_1 = require("./operator-ux");
@@ -69,14 +68,46 @@ const feedbackOps = __importStar(require("./orchestrator/feedback-operations"));
 const topologyOps = __importStar(require("./orchestrator/topology-operations"));
 const lifecycleOps = __importStar(require("./orchestrator/lifecycle-operations"));
 const migrationOps = __importStar(require("./orchestrator/migration-operations"));
+// CoolWorkflowRunner — the single FACADE both surfaces (cli.ts and the MCP server)
+// call through. It is deliberately WIDE but THIN: each method either
+//   (a) loads the run's durable state and delegates to a domain function in
+//       ./orchestrator/*-operations.ts — the v0.1.40 self-audit "router pattern":
+//       one thin delegator per capability, NOT a god-object to dismantle; or
+//   (b) holds a small amount of surface-shared logic (app/worker loaders, report
+//       composition, read-snapshot-then-op).
+// The high method count is INTENTIONAL — it is the union of every both-surface
+// capability — and the fail-closed CLI<->MCP parity gate keeps each one honest (a
+// method present on one surface but not the other is exactly the drift it forbids).
+//
+// FreeBSD-audit R3 ("142-method god-facade with no-op passthroughs") was assessed
+// and CLOSED as won't-fix: of 141 public methods exactly ONE is a true
+// runner->runner forward (collaborationReject -> collaborationApprove(...,"reject")),
+// and it is kept on purpose — it is a registered capability `entry` bound to the
+// parity gate AND an intent-revealing veto verb, so collapsing it would be a
+// behavior-neutral readability LOSS touching both surfaces. Dismantling the facade
+// is an explicit anti-goal (small kernel, explicit delegation — see DIRECTION.md).
 class CoolWorkflowRunner {
     pluginRoot;
     workflowsDir;
     appsDir;
-    constructor({ pluginRoot }) {
+    // F7: the directory a run is resolved against (replaces the former process.chdir
+    // bracket in capability-core). undefined => fall back to process.cwd(). The runner
+    // reads runs from disk per call (no in-memory run state), so withBaseDir hands back
+    // a cheap scoped clone instead of mutating the global process cwd.
+    baseDir;
+    constructor({ pluginRoot, baseDir }) {
         this.pluginRoot = resolvePluginRoot(pluginRoot);
         this.workflowsDir = node_path_1.default.join(this.pluginRoot, "workflows");
         this.appsDir = node_path_1.default.join(this.pluginRoot, "apps");
+        this.baseDir = baseDir ? node_path_1.default.resolve(baseDir) : undefined;
+    }
+    /** Return a runner that resolves runs against `dir` instead of process.cwd(),
+     *  WITHOUT chdir-ing the process (F7). Same instance when the dir is unchanged. */
+    withBaseDir(dir) {
+        const resolved = dir ? node_path_1.default.resolve(dir) : undefined;
+        if (resolved === this.baseDir)
+            return this;
+        return new CoolWorkflowRunner({ pluginRoot: this.pluginRoot, baseDir: resolved });
     }
     listWorkflows() {
         return this.loadWorkflowApps().map((record) => {
@@ -355,9 +386,6 @@ class CoolWorkflowRunner {
     formatCommentList(comments) {
         return collaborationOps.formatCommentList(comments);
     }
-    summarizeCandidateRecords(runId) {
-        return (0, candidate_scoring_1.summarizeCandidates)(this.loadRun(runId));
-    }
     summarizeWorkerRecords(runId) {
         return (0, operator_ux_1.summarizeOperatorWorkers)(this.loadRun(runId));
     }
@@ -686,10 +714,7 @@ class CoolWorkflowRunner {
         return feedbackOps.resolveFeedback(this.loadRun(runId), feedbackId, options);
     }
     loadRun(runId) {
-        return (0, state_1.loadRunFromCwd)(runId);
-    }
-    loadWorkflowById(workflowId) {
-        return this.loadWorkflowAppById(workflowId).app.workflow;
+        return (0, state_1.loadRunFromCwd)(runId, this.baseDir);
     }
     loadWorkflowAppById(appId) {
         const record = this.loadWorkflowApps().find((candidate) => candidate.app.id === appId);
@@ -759,6 +784,13 @@ function parseArgv(argv) {
     const positionals = [];
     for (let index = 0; index < rest.length; index += 1) {
         const token = rest[index];
+        if (token === "--") {
+            // POSIX end-of-options: everything after `--` is a positional, even if it
+            // begins with `--`. Lets a legitimate value that starts with `--` through.
+            for (let restIndex = index + 1; restIndex < rest.length; restIndex += 1)
+                positionals.push(rest[restIndex]);
+            break;
+        }
         if (!token.startsWith("--")) {
             positionals.push(token);
             continue;
@@ -845,7 +877,6 @@ function formatHelp() {
         "  workbench serve [--port N] [--scope repo|home] [--once|--json]",
         ""
     ].join("\n");
-    return `Cool Workflow\n\nCommands:\n  list\n  init <workflow-id> [--title TEXT] [--output PATH]\n  plan <workflow-id> [--repo PATH] [--question TEXT] [--invariant TEXT]\n  status <run-id> [--json|--format json]\n  next <run-id> [--limit N]\n  graph <run-id> [--json]\n  dispatch <run-id> [--limit N] [--sandbox PROFILE]\n  result <run-id> <task-id> <result-file>\n  state check <run-id> [--state PATH] [--write]\n  commit <run-id> --verifier <node-id> [--reason TEXT]\n  commit <run-id> --candidate <candidate-id> [--reason TEXT]\n  commit <run-id> --selection <selection-id> [--reason TEXT]\n  commit <run-id> --allow-unverified-checkpoint [--reason TEXT]\n  commit summary <run-id> [--json]\n  report <run-id> [--show|--summary]\n  app list\n  app show <app-id>\n  app validate <path-or-app-id>\n  app init <app-id> --title TEXT\n  app package <app-id> [--output PATH]\n  sandbox list\n  sandbox show <profile-id>\n  sandbox validate <profile-file>\n  contract show <run-id> [contract-id]\n  node list <run-id>\n  node show <run-id> <node-id>\n  node graph <run-id> [--json]\n  feedback list <run-id> [--status open]\n  feedback summary <run-id> [--json]\n  feedback show <run-id> <feedback-id>\n  feedback collect <run-id>\n  feedback task <run-id> <feedback-id> [--verify CMD]\n  feedback resolve <run-id> <feedback-id> --node <node-id>\n  worker list <run-id> [--status running]\n  worker summary <run-id> [--json]\n  worker show <run-id> <worker-id>\n  worker manifest <run-id> <worker-id>\n  worker output <run-id> <worker-id> <result-file>\n  worker fail <run-id> <worker-id> --message TEXT\n  worker validate <run-id> <worker-id> [path]\n  audit summary <run-id>\n  audit worker <run-id> <worker-id>\n  audit provenance <run-id> [--worker ID|--candidate ID|--commit ID]\n  audit attest <run-id> [--worker ID] [--hostEnforced true] [--env NAME]\n  audit decision <run-id> <worker-id> [--path PATH|--command CMD|--network TARGET|--env NAME]\n  candidate list <run-id> [--status scored]\n  candidate summary <run-id> [--json]\n  candidate register <run-id> --worker <worker-id>\n  candidate score <run-id> <candidate-id> --criterion name=value --evidence PATH\n  candidate rank <run-id>\n  candidate select <run-id> <candidate-id> [--reason TEXT]\n  candidate reject <run-id> <candidate-id> --reason TEXT\n  blackboard summary <run-id>\n  blackboard graph <run-id>\n  blackboard topic create <run-id> --id <topic-id> --title TEXT\n  blackboard message post <run-id> --topic <topic-id> --body TEXT\n  blackboard message list <run-id> [--topic <topic-id>]\n  blackboard context put <run-id> --topic <topic-id> --kind fact|constraint|assumption|question|decision --value TEXT\n  blackboard artifact add <run-id> --path PATH --kind KIND\n  blackboard artifact list <run-id>\n  blackboard snapshot <run-id>\n  coordinator summary <run-id>\n  coordinator decision <run-id> --kind KIND --outcome OUTCOME --reason TEXT\n  loop --intervalMinutes 30 --prompt TEXT\n  schedule create --kind loop --intervalMinutes 30 --prompt TEXT\n  schedule list [--status active]\n  schedule due\n  schedule complete <schedule-id>\n  schedule pause <schedule-id>\n  schedule resume <schedule-id>\n  schedule run-now <schedule-id>\n  schedule history [schedule-id]\n  schedule daemon [--once] [--intervalSeconds 60]\n  schedule delete <schedule-id>\n  routine create --kind api|github --prompt TEXT [--match JSON]\n  routine fire api|github [payload.json]\n  routine list\n  routine events [trigger-id]\n  routine delete <trigger-id>\n\n`;
 }
 function appendOption(options, key, value) {
     if (Object.prototype.hasOwnProperty.call(options, key)) {