cool-workflow 0.1.97 → 0.2.0

package/dist/execution-backend/agent.js

@@ -1,294 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveAgentInvocation = resolveAgentInvocation;
-exports.stripSecretArgs = stripSecretArgs;
-exports.parseAgentReport = parseAgentReport;
-exports.agentSubstitutions = agentSubstitutions;
-exports.substituteAgentArg = substituteAgentArg;
-exports.recordedAgentHandle = recordedAgentHandle;
-exports.extractEndpointResult = extractEndpointResult;
-exports.agentHandle = agentHandle;
-exports.prepareAgentSpawn = prepareAgentSpawn;
-exports.runAgentBatchOutcomes = runAgentBatchOutcomes;
-// Agent-delegation pure helpers + concurrent batch fulfillment for the
-// execution-backend driver layer. Carved out of execution-backend.ts
-// (FreeBSD-audit god-module carve) so the driver layer no longer bundles the
-// agent sub-domain's data-transform helpers; the stateful runners
-// (runAgentProcess / runAgentEndpoint) that build refusal/delegated envelopes
-// stay in the parent and import these. The parent re-exports the public surface
-// (stripSecretArgs, AgentSpawnJob, prepareAgentSpawn, runAgentBatchOutcomes) so
-// every importer is byte-unchanged.
-//
-// BEHAVIOR-PRESERVING — pure code movement, zero logic change. Every function
-// here is a pure function of its inputs (request/env/argv → resolved data); none
-// reaches back into the parent's envelope builders, so there is no runtime cycle.
-// Matches the existing router pattern (orchestrator/*-operations.ts,
-// run-registry/derive.ts).
-//
-// agent — the v0.1.38 delegating driver. Spawns an EXTERNAL agent process per
-// worker (claude -p / codex exec / …) argv-style (shell:false), or POSTs the
-// manifest to a configured HTTP agent endpoint. The agent reads the worker
-// input/manifest and writes the worker's result.md out-of-process; CW captures
-// the agent CHILD's command + exit + stdout digest as the canonical evidence
-// triple (NEVER the result.md — that is the separate recordWorkerOutput layer)
-// and records the kind:process handle + agent-reported model in provenance.
-//
-// THE RED LINE: CW spawns the agent and records its attested output. It NEVER
-// imports a model SDK, holds an API key, or constructs a model API request. Any
-// API key flows from the agent's OWN inherited env; CW never reads or records it.
-// The operator-chosen CW_AGENT_MODEL is interpolated into `{{model}}` as policy
-// and recorded ONLY in secret-stripped args — it is NEVER the attested model id.
-const node_path_1 = __importDefault(require("node:path"));
-const node_child_process_1 = require("node:child_process");
-const util_1 = require("./util");
-/** Resolve the agent invocation from the request delegation > env. Vendor-neutral;
- *  the durable file config is folded in by the drive layer before this point. */
-function resolveAgentInvocation(request) {
-    const delegation = request.delegation || {};
-    const envCommand = (process.env.CW_AGENT_COMMAND || "").trim();
-    const endpoint = delegation.endpoint || (process.env.CW_AGENT_ENDPOINT || "").trim() || undefined;
-    const model = delegation.model || (process.env.CW_AGENT_MODEL || "").trim() || undefined;
-    // Accept the invocation via delegation (preferred) OR the top-level command/args.
-    let binary = delegation.command || request.command || undefined;
-    let rawArgs = delegation.args ? [...delegation.args] : request.args ? [...request.args] : [];
-    // An env-string command ("claude -p --output-format json {{manifest}}") is split
-    // into a binary + discrete argv template — NEVER shell-interpreted.
-    if (!binary && envCommand) {
-        const parts = envCommand.split(/\s+/).filter(Boolean);
-        binary = parts[0];
-        if (!delegation.args)
-            rawArgs = parts.slice(1);
-    }
-    else if (binary && !delegation.args && /\s/.test(binary)) {
-        const parts = binary.split(/\s+/).filter(Boolean);
-        binary = parts[0];
-        rawArgs = parts.slice(1);
-    }
-    return { binary, rawArgs, endpoint, model, timeoutMs: request.timeoutMs };
-}
-const AGENT_SECRET_FLAGS = new Set(["--api-key", "--apikey", "--token", "--key", "--secret", "--password", "--auth", "--bearer"]);
-/** Redact secrets from recorded agent args: a value FOLLOWING a known secret flag,
- *  an `--x-key=...` inline value, or a token that LOOKS like a credential. Never
- *  record a raw secret in provenance/evidence. Exported so the durable config
- *  surface strips the SAME way before persisting/showing a command template. */
-function stripSecretArgs(args) {
-    const out = [];
-    for (let i = 0; i < args.length; i++) {
-        const arg = String(args[i]);
-        if (AGENT_SECRET_FLAGS.has(arg.toLowerCase())) {
-            out.push(arg);
-            if (i + 1 < args.length) {
-                out.push("<redacted>");
-                i++;
-            }
-            continue;
-        }
-        const inline = arg.match(/^(--?[A-Za-z][\w-]*(?:key|token|secret|password|auth|bearer)[\w-]*)=.*/i);
-        if (inline) {
-            out.push(`${inline[1]}=<redacted>`);
-            continue;
-        }
-        // Bare credential-looking token: a known provider prefix, or a long high-entropy
-        // run with NO path separators (so file paths / {{...}} substitutions survive as
-        // useful provenance). Over-redaction is safe; leaking a key is not.
-        if (/^(sk-|ghp_|gho_|github_pat_|xox[abpr]-|Bearer\s)/.test(arg) || (arg.length >= 32 && /^[A-Za-z0-9_\-]{32,}$/.test(arg))) {
-            out.push("<redacted>");
-            continue;
-        }
-        out.push(arg);
-    }
-    return out;
-}
-/** Best-effort parse of the AGENT-reported model id from its stdout. SOLELY the
- *  agent's own report — `unreported` when absent. Never CW_AGENT_MODEL. */
-function parseAgentReport(stdout) {
-    const text = String(stdout || "").trim();
-    if (!text)
-        return {};
-    const tryObj = (value) => {
-        try {
-            const parsed = JSON.parse(value);
-            return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : undefined;
-        }
-        catch {
-            return undefined;
-        }
-    };
-    let obj = tryObj(text);
-    if (!obj) {
-        const line = text
-            .split(/\r?\n/)
-            .reverse()
-            .find((entry) => entry.trim().startsWith("{") && entry.trim().endsWith("}"));
-        if (line)
-            obj = tryObj(line.trim());
-    }
-    if (!obj)
-        return {};
-    const usage = obj.usage && typeof obj.usage === "object" ? obj.usage : undefined;
-    let model = typeof obj.model === "string"
-        ? obj.model
-        : usage && typeof usage.model === "string"
-            ? usage.model
-            : typeof obj.modelId === "string"
-                ? obj.modelId
-                : undefined;
-    // Some agents (e.g. `claude -p --output-format json`) report no top-level model;
-    // the model id(s) appear as KEYS of a `modelUsage` object. Pick the primary model
-    // (the one with the most input tokens). Still SOLELY the agent's own report.
-    if (!model && obj.modelUsage && typeof obj.modelUsage === "object" && !Array.isArray(obj.modelUsage)) {
-        const entries = Object.entries(obj.modelUsage);
-        if (entries.length) {
-            const tokensOf = (value) => {
-                const record = value && typeof value === "object" ? value : {};
-                const input = Number(record.inputTokens ?? record.input_tokens ?? 0);
-                return Number.isFinite(input) ? input : 0;
-            };
-            entries.sort((left, right) => tokensOf(right[1]) - tokensOf(left[1]));
-            model = entries[0][0];
-        }
-    }
-    // Track 1: the executor's detached signature over its usage report, if it signs.
-    // SOLELY the agent's own field — CW verifies it later against the trust key.
-    const usageSignature = typeof obj.usageSignature === "string"
-        ? obj.usageSignature
-        : typeof obj.usage_signature === "string"
-            ? obj.usage_signature
-            : undefined;
-    return { model, usage, usageSignature };
-}
-function agentSubstitutions(request, model) {
-    const manifest = request.manifest;
-    const workerDir = manifest?.workerDir || request.cwd || "";
-    return {
-        manifest: manifest?.manifestPath || (workerDir ? node_path_1.default.join(workerDir, "manifest.json") : ""),
-        input: manifest?.inputPath || "",
-        result: manifest?.resultPath || "",
-        workerDir,
-        model: model || "",
-        prompt: manifest?.prompt || ""
-    };
-}
-function substituteAgentArg(arg, subst) {
-    return arg.replace(/\{\{(\w+)\}\}/g, (_, key) => (key in subst ? subst[key] : `{{${key}}}`));
-}
-/** Build the recorded process handle for the envelope — secret-stripped + the
- *  agent-reported model. Same SHAPE that lands in provenance, never in evidence. */
-function recordedAgentHandle(binary, endpoint, recordedArgs, model, reportedModel, reportedUsage, usageSignature) {
-    const ref = binary ? [binary, ...recordedArgs].join(" ") : endpoint || "";
-    return {
-        kind: "process",
-        ref,
-        endpoint,
-        metadata: {
-            mode: binary ? "command" : "endpoint",
-            command: binary,
-            args: recordedArgs,
-            model,
-            reportedModel,
-            // Telemetry thread-back: the agent's OWN self-reported token usage (parsed
-            // from its stdout by parseAgentReport). ATTESTED, never measured by CW —
-            // same red-line posture as reportedModel. Lands in provenance, never in the
-            // byte-stable evidence triple. Absent when the agent reported no usage.
-            ...(reportedUsage ? { reportedUsage } : {}),
-            // Track 1: the executor's detached signature over its usage report. CW
-            // verifies it against the operator trust key at output intake.
-            ...(usageSignature ? { usageSignature } : {})
-        }
-    };
-}
-function extractEndpointResult(stdout) {
-    const text = String(stdout || "").trim();
-    if (!text)
-        return undefined;
-    try {
-        const parsed = JSON.parse(text);
-        if (parsed && typeof parsed === "object") {
-            if (typeof parsed.result === "string")
-                return parsed.result;
-            if (typeof parsed.resultMarkdown === "string")
-                return parsed.resultMarkdown;
-        }
-    }
-    catch {
-        /* not JSON — treat the raw text as the result body */
-        return text;
-    }
-    return undefined;
-}
-function agentHandle(request) {
-    // The agent invocation is POLICY-as-DATA, resolved flags(delegation) > env. The
-    // handle records ONLY secret-stripped provenance; the raw template is re-resolved
-    // inside runAgentProcess for substitution + spawning so no secret ever lands in
-    // a recorded handle/evidence entry.
-    const resolved = resolveAgentInvocation(request);
-    if (!resolved.binary && !resolved.endpoint)
-        return undefined;
-    const strippedArgs = stripSecretArgs(resolved.rawArgs);
-    const ref = resolved.binary ? [resolved.binary, ...strippedArgs].join(" ") : resolved.endpoint || "";
-    return {
-        kind: "process",
-        ref,
-        endpoint: resolved.endpoint,
-        metadata: {
-            mode: resolved.binary ? "command" : "endpoint",
-            command: resolved.binary,
-            args: strippedArgs,
-            model: resolved.model
-        }
-    };
-}
-/** Resolve a request to a spawn-style batch job, or undefined when the agent is
- *  endpoint-configured/unconfigured (those settle through the serial path). */
-function prepareAgentSpawn(request) {
-    const resolved = resolveAgentInvocation(request);
-    if (!resolved.binary)
-        return undefined;
-    const subst = agentSubstitutions(request, resolved.model);
-    return {
-        binary: resolved.binary,
-        args: resolved.rawArgs.map((arg) => substituteAgentArg(arg, subst)),
-        cwd: request.cwd,
-        timeoutMs: resolved.timeoutMs || 600000
-    };
-}
-// The batch delegate child is a real, packaged Node script (not an embedded
-// `node -e` string — F11). It reads jobs JSON on stdin, spawns ALL concurrently
-// (shell:false, inherited env — the agent's own credentials resolve; CW never
-// reads them), per-job SIGTERM at timeoutMs + SIGKILL at +5s, caps each captured
-// stdout at 32MB, and prints the outcome array when every job has settled. stderr
-// is drained (a full pipe must never wedge a child). A kill yields exitCode null —
-// the no-exit-code refusal. We spawn it BY PATH (shell:false); the path is
-// resolved from this compiled module (dist/execution-backend/agent.js) up to the
-// package's `scripts/children/` dir, which package.json ships in "files".
-const BATCH_DELEGATE_CHILD_SCRIPT = node_path_1.default.resolve(__dirname, "..", "..", "scripts", "children", "batch-delegate-child.js");
-/** Run a batch of agent spawns concurrently; outcomes index-align with jobs. The
- *  parent backstop timeout (max job timeout + 30s) means even a wedged delegate
- *  child cannot deadlock the drive: on any batch-level failure EVERY job settles
- *  as a fail-closed spawn refusal — never a fabricated completion, never a hang. */
-function runAgentBatchOutcomes(jobs) {
-    if (!jobs.length)
-        return [];
-    const maxTimeout = Math.max(...jobs.map((job) => job.timeoutMs));
-    const child = (0, node_child_process_1.spawnSync)(process.execPath, [BATCH_DELEGATE_CHILD_SCRIPT], {
-        input: JSON.stringify(jobs),
-        encoding: "utf8",
-        maxBuffer: Math.min(33 * 1024 * 1024 * jobs.length, 512 * 1024 * 1024),
-        timeout: maxTimeout + 30000
-    });
-    if (!child.error && typeof child.status === "number" && child.status === 0) {
-        try {
-            const parsed = JSON.parse(String(child.stdout || ""));
-            if (Array.isArray(parsed) && parsed.length === jobs.length)
-                return parsed;
-        }
-        catch {
-            // fall through to the fail-closed mapping below
-        }
-    }
-    const reason = child.error ? (0, util_1.messageOf)(child.error) : `batch delegate exited ${child.status === null ? "without an exit code (timed out or killed)" : `with ${child.status}`}`;
-    return jobs.map(() => ({ spawnError: `batch delegate failed: ${reason}`, exitCode: null, stdout: "" }));
-}

package/dist/execution-backend/probes.js

@@ -1,112 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.probeNodeBackend = probeNodeBackend;
-exports.probeShellBackend = probeShellBackend;
-exports.probeBunBackend = probeBunBackend;
-exports.probeContainerBackend = probeContainerBackend;
-exports.probeRemoteBackend = probeRemoteBackend;
-exports.probeCiBackend = probeCiBackend;
-exports.probeAgentBackend = probeAgentBackend;
-// Per-backend readiness probe bodies for the execution-backend driver layer.
-// Carved out of execution-backend.ts (FreeBSD-audit god-module carve) so the
-// driver layer no longer bundles every driver's readiness check; the parent's
-// `probeBackend` still wraps these with the descriptor-derived envelope, and each
-// built-in driver references its probe through BUILTIN_DRIVER_BEHAVIORS.
-//
-// BEHAVIOR-PRESERVING — pure code movement, zero logic change. Each probe is a
-// pure free function of the host (PATH + configured env), matching the existing
-// router pattern (run-registry/derive.ts, orchestrator/*-operations.ts).
-//
-// Readiness probe. Deterministic given the host (PATH + configured env).
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const util_1 = require("./util");
-function probeNodeBackend() {
-    const ok = (0, util_1.hasExecutable)("node");
-    return {
-        checks: [{ name: "node-runtime", ok, detail: ok ? "node on PATH" : "node not found on PATH" }],
-        readiness: ok ? "ready" : "unavailable",
-        reason: ok ? undefined : "node runtime not found on PATH"
-    };
-}
-function probeShellBackend() {
-    const ok = (0, util_1.hasExecutable)("sh") || node_fs_1.default.existsSync("/bin/sh");
-    return {
-        checks: [{ name: "posix-shell", ok, detail: ok ? "sh available" : "no POSIX shell found" }],
-        readiness: ok ? "ready" : "unavailable",
-        reason: ok ? undefined : "POSIX shell not found"
-    };
-}
-function probeBunBackend() {
-    const bun = (0, util_1.hasExecutable)("bun");
-    const node = (0, util_1.hasExecutable)("node");
-    return {
-        checks: [
-            { name: "bun-runtime", ok: bun, detail: bun ? "bun on PATH" : "bun not found; node-compatible fallback" },
-            { name: "node-compatible-fallback", ok: node, detail: node ? "node on PATH" : "node not found on PATH" }
-        ],
-        readiness: bun || node ? "ready" : "unavailable",
-        reason: !bun && node ? "bun not installed; executing via node-compatible runtime" : !bun && !node ? "neither bun nor node found on PATH" : undefined
-    };
-}
-function probeContainerBackend() {
-    const docker = (0, util_1.hasExecutable)("docker");
-    const podman = (0, util_1.hasExecutable)("podman");
-    return {
-        checks: [
-            { name: "docker", ok: docker, detail: docker ? "docker on PATH" : "docker not found" },
-            { name: "podman", ok: podman, detail: podman ? "podman on PATH" : "podman not found" }
-        ],
-        readiness: docker || podman ? "ready" : "unavailable",
-        reason: docker || podman ? undefined : "no container runtime (docker/podman) found; supply --image to delegate explicitly"
-    };
-}
-function delegateChildExists() {
-    return node_fs_1.default.existsSync(node_path_1.default.resolve(__dirname, "..", "..", "scripts", "children", "http-delegate-child.js"));
-}
-function probeRemoteBackend() {
-    const endpoint = (process.env.CW_REMOTE_ENDPOINT || "").trim();
-    const scriptOk = delegateChildExists();
-    const checks = [
-        { name: "endpoint", ok: Boolean(endpoint), detail: endpoint ? "CW_REMOTE_ENDPOINT configured" : "CW_REMOTE_ENDPOINT not set" },
-        { name: "delegate-child-script", ok: scriptOk, detail: scriptOk ? "http-delegate-child.js found" : "http-delegate-child.js missing — reinstall cool-workflow" }
-    ];
-    const readiness = !endpoint ? "unverified" : !scriptOk ? "unavailable" : "ready";
-    return {
-        checks,
-        readiness,
-        reason: readiness === "ready" ? undefined : !endpoint ? "no remote endpoint configured (set CW_REMOTE_ENDPOINT or pass --endpoint)" : "delegate child script is missing"
-    };
-}
-function probeCiBackend() {
-    const endpoint = (process.env.CW_CI_ENDPOINT || "").trim();
-    const scriptOk = delegateChildExists();
-    const checks = [
-        { name: "ci-endpoint", ok: Boolean(endpoint), detail: endpoint ? "CW_CI_ENDPOINT configured" : "CW_CI_ENDPOINT not set" },
-        { name: "delegate-child-script", ok: scriptOk, detail: scriptOk ? "http-delegate-child.js found" : "http-delegate-child.js missing — reinstall cool-workflow" }
-    ];
-    const readiness = !endpoint ? "unverified" : !scriptOk ? "unavailable" : "ready";
-    return {
-        checks,
-        readiness,
-        reason: readiness === "ready" ? undefined : !endpoint ? "no CI job target configured (set CW_CI_ENDPOINT or pass --job)" : "delegate child script is missing"
-    };
-}
-function probeAgentBackend() {
-    // Mirrors remote/ci EXACTLY: unconfigured ⇒ `unverified` (NOT a hard refusal),
-    // configured ⇒ `ready`. "Configured" = a command-template or endpoint is set.
-    const command = (process.env.CW_AGENT_COMMAND || "").trim();
-    const endpoint = (process.env.CW_AGENT_ENDPOINT || "").trim();
-    const configured = Boolean(command || endpoint);
-    return {
-        checks: [
-            { name: "agent-command", ok: Boolean(command), detail: command ? "CW_AGENT_COMMAND configured" : "CW_AGENT_COMMAND not set" },
-            { name: "agent-endpoint", ok: Boolean(endpoint), detail: endpoint ? "CW_AGENT_ENDPOINT configured" : "CW_AGENT_ENDPOINT not set" }
-        ],
-        readiness: configured ? "ready" : "unverified",
-        reason: configured ? undefined : "no agent configured (set CW_AGENT_COMMAND or CW_AGENT_ENDPOINT, or pass --agent-command/--agent-endpoint)"
-    };
-}

package/dist/execution-backend/util.js

@@ -1,47 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.sha256 = sha256;
-exports.hasExecutable = hasExecutable;
-exports.firstString = firstString;
-exports.messageOf = messageOf;
-// Leaf helpers for the execution-backend driver layer. Carved out of
-// execution-backend.ts (FreeBSD-audit god-module carve) so the driver layer no
-// longer bundles its pure utilities; the parent re-exports `sha256` to keep the
-// public surface byte-identical, and imports the rest internally.
-//
-// BEHAVIOR-PRESERVING — pure code movement, zero logic change. Each function is a
-// pure leaf (no dependency on the rest of the module), matching the existing
-// router pattern (run-registry/derive.ts + format.ts, orchestrator/*-operations.ts).
-const node_crypto_1 = __importDefault(require("node:crypto"));
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-function sha256(value) {
-    return `sha256:${node_crypto_1.default.createHash("sha256").update(value, "utf8").digest("hex")}`;
-}
-function hasExecutable(name) {
-    const dirs = (process.env.PATH || "").split(node_path_1.default.delimiter).filter(Boolean);
-    for (const dir of dirs) {
-        const candidate = node_path_1.default.join(dir, name);
-        try {
-            if (node_fs_1.default.existsSync(candidate) && node_fs_1.default.statSync(candidate).isFile())
-                return true;
-        }
-        catch {
-            // ignore unreadable PATH entries
-        }
-    }
-    return false;
-}
-function firstString(...values) {
-    for (const value of values) {
-        if (typeof value === "string" && value.trim())
-            return value.trim();
-    }
-    return undefined;
-}
-function messageOf(error) {
-    return error instanceof Error ? error.message : String(error);
-}