cool-workflow 0.1.97 → 0.2.0

package/dist/types/execution-backend.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/multi-agent.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/observability.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/pipeline.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/reclamation.js

@@ -1,8 +0,0 @@
-"use strict";
-// Run Retention & Provable Reclamation (v0.1.39) — type contracts.
-//
-// Reclamation frees disk WITHOUT violating the audit/replay moat. It is a
-// VERIFIABLE, append-only state transition: freeing bytes leaves behind a
-// hash-chained tombstone proving what was freed is reconstructable-or-worthless
-// and that the audit-essential subset is sealed. See docs/run-retention-reclamation.7.md.
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/report-bundle.js

@@ -1,6 +0,0 @@
-"use strict";
-// Verifiable report bundle — result shapes shared across the run-export verifier,
-// the capability-core producer (reportBundle), and the quickstart auto-bundle field
-// on QuickstartResult. Kept in types/ (a leaf) so types/drive.ts can reference
-// ReportBundleResult without a types->core import cycle.
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/result.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/run-registry.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/run.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/sandbox.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/schedule.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/state-node.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/topology.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/trust.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/workbench.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/worker.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/workflow-app.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types.js

@@ -1,44 +0,0 @@
-"use strict";
-// Barrel for the workflow type system. The declarations were split out of a
-// single 3k-line types.ts into domain files under ./types/; importers keep
-// importing from "./types" unchanged. Pure types — no runtime cost.
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./types/core"), exports);
-__exportStar(require("./types/workflow-app"), exports);
-__exportStar(require("./types/result"), exports);
-__exportStar(require("./types/trust"), exports);
-__exportStar(require("./types/state-node"), exports);
-__exportStar(require("./types/pipeline"), exports);
-__exportStar(require("./types/error-feedback"), exports);
-__exportStar(require("./types/sandbox"), exports);
-__exportStar(require("./types/execution-backend"), exports);
-__exportStar(require("./types/boundary"), exports);
-__exportStar(require("./types/drive"), exports);
-__exportStar(require("./types/report-bundle"), exports);
-__exportStar(require("./types/multi-agent"), exports);
-__exportStar(require("./types/topology"), exports);
-__exportStar(require("./types/blackboard"), exports);
-__exportStar(require("./types/worker"), exports);
-__exportStar(require("./types/candidate"), exports);
-__exportStar(require("./types/evidence-reasoning"), exports);
-__exportStar(require("./types/run"), exports);
-__exportStar(require("./types/schedule"), exports);
-__exportStar(require("./types/run-registry"), exports);
-__exportStar(require("./types/reclamation"), exports);
-__exportStar(require("./types/workbench"), exports);
-__exportStar(require("./types/observability"), exports);
-__exportStar(require("./types/collaboration"), exports);

package/dist/util/fingerprint.js

@@ -1,19 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fingerprintStrings = fingerprintStrings;
-exports.fingerprintRecords = fingerprintRecords;
-// Deterministic content fingerprint — the single canonical implementation.
-// Replaces duplicated copies in observability.ts and run-registry.ts (v0.1.95).
-// Pure function of its arguments; never imports run state or high-level modules.
-const node_crypto_1 = __importDefault(require("node:crypto"));
-function fingerprintStrings(values) {
-    const hash = node_crypto_1.default.createHash("sha256");
-    hash.update(JSON.stringify([...values].sort()));
-    return `sha256:${hash.digest("hex").slice(0, 32)}`;
-}
-function fingerprintRecords(records) {
-    return fingerprintStrings(records.map((r) => `${r.id}:${r.status || ""}`).sort());
-}

package/dist/util/fingerprint.test.js

@@ -1,27 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-// Unit test for the canonical fingerprint utility (v0.1.95).
-// Pure function — no run state or tmpdir needed.
-const strict_1 = require("node:assert/strict");
-const node_test_1 = require("node:test");
-const fingerprint_1 = require("../util/fingerprint");
-(0, node_test_1.test)("fingerprintStrings returns a sha256: prefix", () => {
-    const fp = (0, fingerprint_1.fingerprintStrings)(["a", "b"]);
-    (0, strict_1.ok)(fp.startsWith("sha256:"), "must have sha256: prefix");
-    (0, strict_1.equal)(fp.length, 32 + "sha256:".length, "must be 32 hex chars");
-});
-(0, node_test_1.test)("fingerprintStrings is deterministic and order-independent", () => {
-    const a = (0, fingerprint_1.fingerprintStrings)(["b", "a", "c"]);
-    const b = (0, fingerprint_1.fingerprintStrings)(["c", "b", "a"]);
-    (0, strict_1.equal)(a, b, "same values in different order must produce same fingerprint");
-});
-(0, node_test_1.test)("fingerprintStrings produces distinct values for different inputs", () => {
-    const a = (0, fingerprint_1.fingerprintStrings)(["x"]);
-    const b = (0, fingerprint_1.fingerprintStrings)(["y"]);
-    (0, strict_1.ok)(a !== b, "different inputs must produce different fingerprints");
-});
-(0, node_test_1.test)("fingerprintRecords uses id:status sorted", () => {
-    const a = (0, fingerprint_1.fingerprintRecords)([{ id: "b", status: "ok" }, { id: "a", status: "fail" }]);
-    const b = (0, fingerprint_1.fingerprintRecords)([{ id: "a", status: "fail" }, { id: "b", status: "ok" }]);
-    (0, strict_1.equal)(a, b, "records in different order must produce same fingerprint");
-});

package/dist/verifier.js

@@ -1,78 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertTaskCanComplete = assertTaskCanComplete;
-exports.parseResultEnvelope = parseResultEnvelope;
-exports.taskRequiresEvidence = taskRequiresEvidence;
-exports.validateResultEnvelope = validateResultEnvelope;
-exports.validateRunGates = validateRunGates;
-const dispatch_1 = require("./dispatch");
-const evidence_grounding_1 = require("./evidence-grounding");
-const result_normalize_1 = require("./result-normalize");
-const schema_validate_1 = require("./schema-validate");
-function assertTaskCanComplete(run, task) {
-    const runnablePhase = (0, dispatch_1.firstRunnablePhase)(run);
-    if (!runnablePhase || runnablePhase.name !== task.phase) {
-        throw new Error(`Phase gate blocked task ${task.id}; current runnable phase is ${runnablePhase?.name || "none"}`);
-    }
-    if (!["pending", "running"].includes(task.status)) {
-        throw new Error(`Task ${task.id} cannot be completed from status ${task.status}`);
-    }
-}
-// Ingest is delegated to the robust normalizer (v0.1.42): canonical
-// `{summary, findings, evidence}` passes through unchanged, but when the agent
-// uses its own shape (or prose) CW extracts findings from alternative keys and
-// DERIVES grounded evidence itself rather than capturing nothing.
-function parseResultEnvelope(markdown) {
-    return (0, result_normalize_1.normalizeResultEnvelope)(markdown);
-}
-/** Whether a task's result MUST carry evidence (verify/verdict/synthesis tasks
- *  and any task that opted in via requiresEvidence). The commit gate reuses this
- *  so its evidence-grounding check matches the acceptance-time policy exactly. */
-function taskRequiresEvidence(task) {
-    return Boolean(task.requiresEvidence ||
-        /^verify[:/]/i.test(task.id) ||
-        /^verdict[:/]/i.test(task.id) ||
-        /^synthesis[:/]/i.test(task.id));
-}
-function validateResultEnvelope(task, result) {
-    const mustHaveEvidence = taskRequiresEvidence(task);
-    if (mustHaveEvidence && !(0, evidence_grounding_1.hasGroundedEvidence)(result.evidence)) {
-        throw new Error(`Task ${task.id} requires grounded cw:result evidence (a path-like locator, URL, or namespace:value token — not free text)`);
-    }
-    for (const finding of result.findings || []) {
-        validateFinding(task, finding);
-    }
-    // Track 3: if the task declared an output schema, the accepted result envelope
-    // must conform. Fail-closed (throw ⇒ the drive parks the hop), consistent with
-    // the checks above. No schema declared ⇒ no check (opt-in by declaration).
-    if (task.schema) {
-        const violations = (0, schema_validate_1.validateAgainstSchema)(result, task.schema);
-        if (violations.length) {
-            throw new Error(`Task ${task.id} result violates declared schema: ${violations.slice(0, 5).join("; ")}${violations.length > 5 ? ` (+${violations.length - 5} more)` : ""}`);
-        }
-    }
-}
-function validateRunGates(run) {
-    const verdictTasks = run.tasks.filter((task) => /^verdict[:/]|^synthesis[:/]/i.test(task.id));
-    for (const verdictTask of verdictTasks) {
-        if (verdictTask.status !== "completed")
-            continue;
-        const verdictPhaseIndex = run.phases.findIndex((phase) => phase.name === verdictTask.phase);
-        const earlierPhases = run.phases.slice(0, verdictPhaseIndex);
-        const incompleteEarlier = earlierPhases.find((phase) => phase.status !== "completed");
-        if (incompleteEarlier) {
-            throw new Error(`Verdict gate blocked ${verdictTask.id}; phase ${incompleteEarlier.name} is not complete`);
-        }
-    }
-}
-function validateFinding(task, finding) {
-    if (!finding.id)
-        throw new Error(`Task ${task.id} has a finding without id`);
-    if (finding.classification &&
-        !["real", "conditional", "non-issue", "unknown"].includes(finding.classification)) {
-        throw new Error(`Task ${task.id} finding ${finding.id} has invalid classification`);
-    }
-    if (["P0", "P1", "P2"].includes(finding.severity || "") && !(0, evidence_grounding_1.hasGroundedEvidence)(finding.evidence)) {
-        throw new Error(`Task ${task.id} finding ${finding.id} severity ${finding.severity} requires grounded evidence (a path-like locator, URL, or namespace:value token)`);
-    }
-}

package/dist/version.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MIN_SUPPORTED_RUN_STATE_SCHEMA_VERSION = exports.LEGACY_RUN_STATE_SCHEMA_VERSION = exports.CURRENT_RUN_STATE_SCHEMA_VERSION = exports.WORKFLOW_APP_SCHEMA_VERSION = exports.CURRENT_COOL_WORKFLOW_VERSION = void 0;
-exports.CURRENT_COOL_WORKFLOW_VERSION = "0.1.97";
-exports.WORKFLOW_APP_SCHEMA_VERSION = 1;
-exports.CURRENT_RUN_STATE_SCHEMA_VERSION = 1;
-exports.LEGACY_RUN_STATE_SCHEMA_VERSION = 0;
-exports.MIN_SUPPORTED_RUN_STATE_SCHEMA_VERSION = 0;

package/dist/workbench-host.js

@@ -1,182 +0,0 @@
-"use strict";
-// Web / Desktop Workbench host (v0.1.30) — a thin, OPTIONAL localhost renderer.
-//
-// BSD discipline:
-//  - LEAST PRIVILEGE, LOCAL BY DEFAULT. Binds 127.0.0.1 ONLY, serves read-only
-//    derived views, exposes nothing beyond the current user's `.cw/` scope and
-//    the v0.1.28 registry's registered repos. It also rejects non-localhost Host
-//    headers (DNS-rebinding defense) and fails closed on anything it cannot read.
-//  - READ-ONLY BY DEFAULT. Every route is GET; any write verb is refused 405.
-//    The host offers no actions — it is pure inspection. (A future action would
-//    have to route through a declared capability core entry, never a parallel
-//    path, so it stays parity-gated.)
-//  - NO HIDDEN DASHBOARD / OPTIONAL SURFACE. The host imports the kernel, never
-//    the reverse. It holds zero authoritative state: every response is re-derived
-//    on demand from disk via the SAME core entries the CLI/MCP use. The committed
-//    `dist/` + plain `node` runtime keep working with this file deleted.
-//
-// See src/workbench.ts and docs/web-desktop-workbench.7.md.
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkbenchHost = void 0;
-const node_http_1 = __importDefault(require("node:http"));
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const node_crypto_1 = __importDefault(require("node:crypto"));
-const workbench_1 = require("./workbench");
-const ALLOWED_HOSTNAMES = new Set(["127.0.0.1", "localhost", "::1", "[::1]"]);
-const CONTENT_TYPES = {
-    ".html": "text/html; charset=utf-8",
-    ".js": "text/javascript; charset=utf-8",
-    ".css": "text/css; charset=utf-8",
-    ".json": "application/json; charset=utf-8",
-    ".svg": "image/svg+xml"
-};
-class WorkbenchHost {
-    runner;
-    cwd;
-    port;
-    scope;
-    host = "127.0.0.1";
-    server;
-    constructor(options) {
-        this.runner = options.runner;
-        this.cwd = node_path_1.default.resolve(String(options.cwd || process.cwd()));
-        this.port = options.port && options.port > 0 ? Math.floor(options.port) : workbench_1.WORKBENCH_DEFAULT_PORT;
-        this.scope = options.scope === "repo" ? "repo" : "home";
-    }
-    /** The canonical serve descriptor — identical to `cw workbench serve --json`. */
-    descriptor(once) {
-        return (0, workbench_1.buildWorkbenchServeDescriptor)(this.runner, { cwd: this.cwd, port: this.port, scope: this.scope, once });
-    }
-    /** Start listening on loopback only. Resolves with the actually-bound port
-     *  (an ephemeral 0 becomes a real port — useful for tests). */
-    listen() {
-        const server = node_http_1.default.createServer((req, res) => this.handle(req, res));
-        this.server = server;
-        return new Promise((resolve, reject) => {
-            server.once("error", reject);
-            // Bind the loopback interface ONLY — never a public address.
-            server.listen(this.port, this.host, () => {
-                const address = server.address();
-                const port = address && typeof address === "object" ? address.port : this.port;
-                resolve({ host: this.host, port });
-            });
-        });
-    }
-    close() {
-        return new Promise((resolve) => {
-            if (!this.server)
-                return resolve();
-            this.server.close(() => resolve());
-        });
-    }
-    /** Run until interrupted (the CLI default `workbench serve`). */
-    async run() {
-        const bound = await this.listen();
-        process.stdout.write(`${JSON.stringify({ ...this.descriptor(false), boundPort: bound.port })}\n`);
-    }
-    handle(req, res) {
-        try {
-            // Fail closed on anything but a localhost GET.
-            if (!isLocalHost(req.headers.host))
-                return this.send(res, 403, { error: "forbidden: non-localhost Host header" });
-            if ((req.method || "GET").toUpperCase() !== "GET") {
-                return this.send(res, 405, { error: "read-only: only GET is permitted" }, { Allow: "GET" });
-            }
-            // Optional token auth (CW_WORKBENCH_TOKEN). When set, every request must
-            // carry the token as an Authorization: Bearer header or ?token= query param.
-            // Off by default — single-user loopback is already gated by the OS boundary.
-            const url = new URL(req.url || "/", `http://${this.host}`);
-            const requiredToken = (process.env.CW_WORKBENCH_TOKEN || "").trim();
-            if (requiredToken) {
-                const bearer = (req.headers.authorization || "").replace(/^Bearer\s+/i, "").trim();
-                const queryToken = url.searchParams.get("token") || "";
-                const tokenBuf = Buffer.from(requiredToken);
-                const bearerBuf = Buffer.from(bearer);
-                const queryBuf = Buffer.from(queryToken);
-                const tokenOk = bearerBuf.length === tokenBuf.length && node_crypto_1.default.timingSafeEqual(bearerBuf, tokenBuf);
-                const queryOk = queryBuf.length === tokenBuf.length && node_crypto_1.default.timingSafeEqual(queryBuf, tokenBuf);
-                if (!tokenOk && !queryOk) {
-                    return this.send(res, 401, { error: "unauthorized: token mismatch" });
-                }
-            }
-            const route = decodeURIComponent(url.pathname);
-            if (route === "/" || route === "/index.html")
-                return this.sendAsset(res, "index.html");
-            if (route.startsWith("/ui/"))
-                return this.sendAsset(res, route.slice("/ui/".length));
-            if (route === "/api/serve")
-                return this.send(res, 200, this.descriptor(true));
-            if (route === "/api/index") {
-                const args = Object.fromEntries(url.searchParams.entries());
-                return this.send(res, 200, (0, workbench_1.buildWorkbenchIndex)(this.runner, { cwd: this.cwd, scope: this.scope, ...args }));
-            }
-            const runMatch = /^\/api\/run\/([^/]+)$/.exec(route);
-            if (runMatch) {
-                return this.send(res, 200, (0, workbench_1.buildWorkbenchRunView)(this.runner.withBaseDir(this.cwd), runMatch[1]));
-            }
-            this.send(res, 404, { error: `no such read-only view: ${route}` });
-        }
-        catch (error) {
-            this.send(res, 500, { error: error instanceof Error ? error.message : String(error) });
-        }
-    }
-    /** Serve a static UI asset from disk, re-read on every request (no caching of
-     *  authoritative state). Path-traversal is refused; a missing asset is an
-     *  honest 404 — the framework ships fine without the UI installed. */
-    sendAsset(res, relative) {
-        const uiRoot = (0, workbench_1.workbenchUiRoot)(this.runner);
-        const resolved = node_path_1.default.resolve(uiRoot, relative);
-        if (resolved !== uiRoot && !resolved.startsWith(uiRoot + node_path_1.default.sep)) {
-            return this.send(res, 403, { error: "forbidden: path traversal" });
-        }
-        let body;
-        try {
-            body = node_fs_1.default.readFileSync(resolved);
-        }
-        catch {
-            if (relative === "index.html") {
-                return this.sendRaw(res, 200, CONTENT_TYPES[".html"], Buffer.from(FALLBACK_HTML(uiRoot)));
-            }
-            return this.send(res, 404, { error: `UI asset not installed: ${relative}` });
-        }
-        this.sendRaw(res, 200, CONTENT_TYPES[node_path_1.default.extname(resolved)] || "application/octet-stream", body);
-    }
-    send(res, status, body, headers = {}) {
-        this.sendRaw(res, status, CONTENT_TYPES[".json"], Buffer.from(JSON.stringify(body, null, 2)), headers);
-    }
-    sendRaw(res, status, contentType, body, headers = {}) {
-        res.writeHead(status, {
-            "Content-Type": contentType,
-            "Cache-Control": "no-store",
-            "X-Content-Type-Options": "nosniff",
-            ...headers
-        });
-        res.end(body);
-    }
-}
-exports.WorkbenchHost = WorkbenchHost;
-function isLocalHost(hostHeader) {
-    if (!hostHeader)
-        return true; // HTTP/1.0 / no Host — loopback bind already constrains us.
-    const hostname = hostHeader.replace(/:\d+$/, "");
-    return ALLOWED_HOSTNAMES.has(hostname);
-}
-function FALLBACK_HTML(uiRoot) {
-    return [
-        "<!doctype html><meta charset=utf-8><title>Cool Workflow Workbench</title>",
-        "<body style=\"font-family:system-ui;margin:2rem;color:#222\">",
-        "<h1>Cool Workflow Workbench</h1>",
-        "<p>The static UI assets are not installed at:</p>",
-        `<pre>${escapeHtml(uiRoot)}</pre>`,
-        "<p>The read-only JSON views are still served:</p>",
-        "<ul><li><a href=\"/api/index\">/api/index</a></li><li><code>/api/run/&lt;runId&gt;</code></li><li><a href=\"/api/serve\">/api/serve</a></li></ul>",
-        "</body>"
-    ].join("");
-}
-function escapeHtml(value) {
-    return value.replace(/[&<>]/g, (ch) => (ch === "&" ? "&amp;" : ch === "<" ? "&lt;" : "&gt;"));
-}

package/dist/workbench.js

@@ -1,192 +0,0 @@
-"use strict";
-// Web / Desktop Workbench core (v0.1.30) — the SINGLE source of the human
-// console's view models, and a THIRD FRONT DOOR over ONE mechanism.
-//
-// BSD discipline:
-//  - MECHANISM VS POLICY. The kernel + durable `.cw/` state are the mechanism.
-//    The CLI renders for human speed, MCP for machine context, and the Workbench
-//    for human inspection at a glance. All three are presentation POLICY over the
-//    same data. This module computes, decides, and stores NOTHING the CLI/MCP
-//    cannot already produce — every panel embeds, verbatim, the canonical
-//    `--json` payload of ONE already-declared capability, assembled by calling
-//    the SAME runner core entries the CLI and MCP route through.
-//  - NO HIDDEN DASHBOARD. These are DERIVED, read-only projections. They hold no
-//    authoritative state; refresh re-derives everything from disk. Delete the
-//    host process and nothing is lost — the data is the files.
-//  - EXPLICIT, INSPECTABLE, FAIL CLOSED. When a source capability is unreadable
-//    (e.g. a run with no blackboard yet, or unresolvable state), the panel is
-//    rendered `absent` with the honest error; we never fabricate a view.
-//
-// See docs/web-desktop-workbench.7.md, src/capability-registry.ts, and the
-// v0.1.27 parity contract (docs/cli-mcp-parity.7.md).
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WORKBENCH_UI_RELATIVE = exports.WORKBENCH_DEFAULT_PORT = void 0;
-exports.buildWorkbenchRunView = buildWorkbenchRunView;
-exports.buildWorkbenchIndex = buildWorkbenchIndex;
-exports.workbenchUiRoot = workbenchUiRoot;
-exports.buildWorkbenchServeDescriptor = buildWorkbenchServeDescriptor;
-const capability_core_1 = require("./capability-core");
-const node_path_1 = __importDefault(require("node:path"));
-const node_fs_1 = __importDefault(require("node:fs"));
-/** Default loopback port. Local by default, least privilege — never a public
- *  interface. Overridable with `--port`. */
-exports.WORKBENCH_DEFAULT_PORT = 7717;
-/** Relative location of the optional, dependency-light static UI assets. Kept
- *  OUT of the kernel: the host reads them lazily at request time, so the framework
- *  builds and runs with the Workbench (and these files) absent. */
-exports.WORKBENCH_UI_RELATIVE = node_path_1.default.join("ui", "workbench");
-// ---------------------------------------------------------------------------
-// Panel assembly — each panel IS one capability payload, embedded verbatim.
-// ---------------------------------------------------------------------------
-/** Render one panel by invoking its single source capability. On success `data`
- *  equals `cw <cmd> --json` byte-for-byte; on failure the panel is `absent` with
- *  the honest reason (fail closed) — exactly what the CLI would report. */
-function panel(capability, cli, mcp, produce) {
-    try {
-        return { capability, cli, mcp, status: "present", data: produce() };
-    }
-    catch (error) {
-        return { capability, cli, mcp, status: "absent", error: error instanceof Error ? error.message : String(error) };
-    }
-}
-function buildPanels(runner, runId) {
-    return {
-        // Run graph — operator + multi-agent, including the v0.1.25 compact and
-        // critical-path views. Backend ids/attestations (v0.1.29) ride on the nodes.
-        graph: {
-            operator: panel("graph", `cw graph ${runId} --json`, "cw_operator_graph", () => runner.operatorGraph(runId)),
-            multiAgent: panel("multi-agent.graph", `cw multi-agent graph ${runId} --json`, "cw_multi_agent_graph", () => runner.multiAgentOperatorGraph(runId)),
-            compact: panel("multi-agent.graph.compact", `cw multi-agent graph ${runId} --view compact --json`, "cw_multi_agent_graph_compact", () => runner.multiAgentGraphView(runId, { view: "compact" })),
-            criticalPath: panel("multi-agent.graph.compact", `cw multi-agent graph ${runId} --view critical-path --json`, "cw_multi_agent_graph_compact", () => runner.multiAgentGraphView(runId, { view: "critical-path" }))
-        },
-        // Blackboard — coordinator topics/messages/contexts/artifacts/snapshots/
-        // decisions/conflicts/adopted+missing evidence.
-        blackboard: {
-            coordinator: panel("coordinator.summary", `cw coordinator summary ${runId}`, "cw_coordinator_summary", () => runner.coordinatorSummary(runId)),
-            digest: panel("blackboard.summarize", `cw blackboard summarize ${runId} --json`, "cw_blackboard_summarize", () => runner.blackboardSummarize(runId)),
-            graph: panel("blackboard.graph", `cw blackboard graph ${runId}`, "cw_blackboard_graph", () => runner.blackboardGraph(runId))
-        },
-        // Worker logs — manifests, outputs, scoped results, failures, and the
-        // recorded execution backend + sandbox attestation.
-        worker: {
-            summary: panel("worker.summary", `cw worker summary ${runId} --json`, "cw_worker_summary", () => runner.summarizeWorkerRecords(runId))
-        },
-        // Candidate compare — scores/selection/rejection, plus the v0.1.26
-        // evidence-adoption reasoning chain (why adopted).
-        candidate: {
-            summary: panel("candidate.summary", `cw candidate summary ${runId} --json`, "cw_candidate_summary", () => runner.summarizeCandidateOperatorRecords(runId)),
-            reasoning: panel("multi-agent.reasoning", `cw multi-agent reasoning ${runId} --json`, "cw_evidence_reasoning", () => runner.multiAgentReasoning(runId))
-        },
-        // Observability + cost (v0.1.31) — durations, failure/verifier/acceptance
-        // rates with sample counts, attested usage + cost, coverage, `unreported`/
-        // `n/a` shown honestly. Equals `cw metrics show <run> --json` byte-for-byte.
-        metrics: {
-            report: panel("metrics.show", `cw metrics show ${runId} --json`, "cw_metrics_show", () => runner.metricsShow(runId))
-        },
-        // Audit timeline — trust-audit events, role policy decisions, provenance,
-        // judge/chair rationale, and policy violations.
-        audit: {
-            summary: panel("audit.summary", `cw audit summary ${runId}`, "cw_audit_summary", () => runner.auditSummary(runId)),
-            multiAgent: panel("audit.multi-agent", `cw audit multi-agent ${runId} --json`, "cw_audit_multi_agent", () => runner.auditMultiAgent(runId)),
-            policy: panel("audit.policy", `cw audit policy ${runId} --json`, "cw_audit_policy", () => runner.auditPolicy(runId)),
-            judge: panel("audit.judge", `cw audit judge ${runId} --json`, "cw_audit_judge", () => runner.auditJudge(runId))
-        },
-        // Collaboration (v0.1.32) — derived per-target review state (pending/approved/
-        // rejected/blocked/unattributed, required vs recorded), the append-only
-        // approval/comment/handoff timeline, and the run owner. Read-only; equals
-        // `cw review status <run> --json` and `cw comment list <run> --json`.
-        collaboration: {
-            review: panel("review.status", `cw review status ${runId} --json`, "cw_review_status", () => runner.reviewStatus(runId)),
-            comments: panel("comment.list", `cw comment list ${runId} --json`, "cw_comment_list", () => runner.collaborationCommentList(runId))
-        }
-    };
-}
-/** Assemble the read-only five-panel view of ONE run. The run is first resolved
- *  from its durable `.cw/runs/<id>/state.json`; when that source is unreadable
- *  the view is `resolved: false` and every panel is `absent` — fail closed,
- *  never fabricated. */
-function buildWorkbenchRunView(runner, runId) {
-    const id = String(runId || "");
-    return runner.loadWithCache((r) => {
-        let resolved = true;
-        let error;
-        try {
-            r.loadRun(id);
-        }
-        catch (caught) {
-            resolved = false;
-            error = caught instanceof Error ? caught.message : String(caught);
-        }
-        return {
-            schemaVersion: 1,
-            surface: "workbench",
-            runId: id,
-            resolved,
-            ...(error ? { error } : {}),
-            panels: buildPanels(r, id)
-        };
-    });
-}
-// ---------------------------------------------------------------------------
-// Cross-run entry (v0.1.28 Run Registry) — composed from already-declared
-// capabilities; adds NO new source of truth.
-// ---------------------------------------------------------------------------
-/** Build the cross-run index: the registry index plus the run list (or a
- *  filtered search). Each field equals the corresponding `cw <cmd> --json`
- *  payload; the Workbench can show nothing the CLI/MCP cannot. */
-function buildWorkbenchIndex(runner, args = {}) {
-    const scope = args.scope === "repo" ? "repo" : "home";
-    const scoped = { ...args, scope };
-    const registry = (0, capability_core_1.runRegistryShow)((0, capability_core_1.runRegistryFor)(scoped, runner), scoped);
-    const filtered = Boolean(args.text || args.q || args.query || args.app || args.appId || args.status || args.repo || args.since || args.until);
-    const runs = filtered ? (0, capability_core_1.runSearch)((0, capability_core_1.runRegistryFor)(scoped, runner), scoped) : (0, capability_core_1.runList)((0, capability_core_1.runRegistryFor)(scoped, runner), scoped);
-    return { schemaVersion: 1, surface: "workbench", command: "index", scope, registry, runs };
-}
-// ---------------------------------------------------------------------------
-// Serve descriptor — describes the OPTIONAL localhost host (no state).
-// ---------------------------------------------------------------------------
-/** Absolute path to the optional static UI assets for this plugin install. */
-function workbenchUiRoot(runner) {
-    return node_path_1.default.join(runner.pluginRoot, exports.WORKBENCH_UI_RELATIVE);
-}
-/** The canonical `cw workbench serve` payload: a description of the localhost
- *  bind and its read-only routes. Holds zero authoritative state. The CLI emits
- *  this under `--json`/`--once`; `cw_workbench_serve` returns it directly. */
-function buildWorkbenchServeDescriptor(runner, args = {}) {
-    const scope = args.scope === "repo" ? "repo" : "home";
-    const root = node_path_1.default.resolve(String(args.cwd || process.cwd()));
-    const portRaw = Number(args.port);
-    const port = Number.isFinite(portRaw) && portRaw > 0 ? Math.floor(portRaw) : exports.WORKBENCH_DEFAULT_PORT;
-    const uiRoot = workbenchUiRoot(runner);
-    return {
-        schemaVersion: 1,
-        surface: "workbench",
-        command: "serve",
-        host: "127.0.0.1",
-        port,
-        once: Boolean(args.once),
-        readOnly: true,
-        scope,
-        root,
-        uiAvailable: dirExists(uiRoot),
-        uiRoot,
-        routes: [
-            { method: "GET", path: "/", description: "Workbench UI shell (static, dependency-light)." },
-            { method: "GET", path: "/ui/*", description: "Static UI assets (read from disk; absent if not installed)." },
-            { method: "GET", path: "/api/index", description: "Cross-run index: registry show + run list/search (v0.1.28)." },
-            { method: "GET", path: "/api/serve", description: "This serve descriptor." },
-            { method: "GET", path: "/api/run/:runId", description: "Five-panel WorkbenchRunView for one run (read-only)." }
-        ]
-    };
-}
-function dirExists(target) {
-    try {
-        return node_fs_1.default.statSync(target).isDirectory();
-    }
-    catch {
-        return false;
-    }
-}