cool-workflow 0.1.97 → 0.2.0

package/dist/orchestrator/lifecycle-operations.js

@@ -1,626 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.plan = plan;
-exports.dispatch = dispatch;
-exports.recordResult = recordResult;
-exports.recordWorkerOutput = recordWorkerOutput;
-exports.recordWorkerFailure = recordWorkerFailure;
-exports.checkState = checkState;
-exports.commit = commit;
-// Core run-lifecycle operations (v0.1.40 self-audit P3 router pattern).
-//
-// The engine core — plan / dispatch / recordResult / worker-output / commit /
-// checkState — carved out of CoolWorkflowRunner so the runner is a pure router.
-// plan() receives an already-resolved workflow app record (the runner still owns
-// app loading, which is instance-stateful). Behavior is identical to the inline
-// implementations; only the location changed.
-const node_crypto_1 = __importDefault(require("node:crypto"));
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const state_1 = require("../state");
-const report_1 = require("./report");
-const cli_options_1 = require("./cli-options");
-const harness_1 = require("../harness");
-const workflow_app_framework_1 = require("../workflow-app-framework");
-const workflow_api_1 = require("../workflow-api");
-const observability_1 = require("../observability");
-const compare_1 = require("../compare");
-const loop_expansion_1 = require("../loop-expansion");
-const dispatch_1 = require("../dispatch");
-const verifier_1 = require("../verifier");
-const trust_audit_1 = require("../trust-audit");
-const multi_agent_1 = require("../multi-agent");
-const topology_1 = require("../topology");
-const state_node_1 = require("../state-node");
-const pipeline_contract_1 = require("../pipeline-contract");
-const pipeline_runner_1 = require("../pipeline-runner");
-const commit_1 = require("../commit");
-const error_feedback_1 = require("../error-feedback");
-const trust_audit_2 = require("../trust-audit");
-const result_normalize_1 = require("../result-normalize");
-const state_explosion_1 = require("../state-explosion");
-const worker_isolation_1 = require("../worker-isolation");
-function plan(appRecord, options) {
-    const workflow = appRecord.app.workflow;
-    const inputs = normalizeInputs(options);
-    validateInputs(workflow, inputs);
-    // Fold declared defaults: a missing OPTIONAL input renders as its declared
-    // default (or empty), so a task prompt referencing it never leaks a literal
-    // "{{name}}" placeholder into the agent's worker input.
-    for (const declared of workflow.inputs || []) {
-        if ((0, cli_options_1.isMissing)(inputs[declared.name]))
-            inputs[declared.name] = declared.default ?? "";
-    }
-    const cwd = node_path_1.default.resolve(String(inputs.cwd || inputs.repo || process.cwd()));
-    // A caller (e.g. an inline sub-workflow task) may inject a DETERMINISTIC run id so
-    // the child run id is reproducible across re-runs; otherwise mint one. `runId` is
-    // never a declared workflow input, so strip it from inputs to keep run.inputs (and
-    // the digests derived from it) clean — POLA for every normal plan.
-    const injectedRunId = typeof options.runId === "string" && options.runId.trim() ? options.runId.trim() : undefined;
-    delete inputs.runId;
-    const runId = injectedRunId || createRunId(workflow.id);
-    const runDir = node_path_1.default.join(cwd, ".cw", "runs", runId);
-    const paths = (0, state_1.createRunPaths)(runDir);
-    (0, state_1.ensureRunDirs)(paths);
-    const tasks = flattenTasks(workflow, inputs);
-    const run = {
-        schemaVersion: 1,
-        id: runId,
-        createdAt: new Date().toISOString(),
-        updatedAt: new Date().toISOString(),
-        cwd,
-        workflow: {
-            id: workflow.id,
-            title: workflow.title,
-            summary: workflow.summary || "",
-            limits: workflow.limits,
-            app: (0, workflow_app_framework_1.workflowAppRunMetadata)(appRecord)
-        },
-        inputs,
-        loopStage: "interpret",
-        phases: workflow.phases.map((phase) => ({
-            id: phase.id || (0, workflow_api_1.slugify)(phase.name),
-            name: phase.name,
-            status: "pending",
-            taskIds: phase.tasks.map((task) => task.id),
-            // parallel() DSL: the drive loop reads this to size its concurrent round.
-            ...(phase.mode ? { mode: phase.mode } : {}),
-            // loop() DSL: the ORIGIN phase carries the loop spec + round 1; the expander
-            // appends round-2+ phases after each round (loop-expansion / maybeExpandLoop).
-            ...(phase.loop ? { loop: phase.loop, loopRound: 1 } : {})
-        })),
-        tasks,
-        dispatches: [],
-        commits: [],
-        paths,
-        nodes: [],
-        contracts: [],
-        feedback: [],
-        audit: {
-            schemaVersion: 1,
-            eventLogPath: paths.auditDir ? node_path_1.default.join(paths.auditDir, "events.jsonl") : undefined,
-            summaryPath: paths.auditDir ? node_path_1.default.join(paths.auditDir, "summary.json") : undefined,
-            indexPath: paths.auditDir ? node_path_1.default.join(paths.auditDir, "index.json") : undefined
-        },
-        workers: [],
-        sandboxProfiles: [],
-        candidates: [],
-        candidateSelections: [],
-        multiAgent: {
-            schemaVersion: 1,
-            runs: [],
-            roles: [],
-            groups: [],
-            memberships: [],
-            fanouts: [],
-            fanins: []
-        },
-        blackboard: {
-            schemaVersion: 1,
-            boards: [],
-            topics: [],
-            messages: [],
-            contexts: [],
-            artifacts: [],
-            snapshots: [],
-            decisions: []
-        },
-        topologies: {
-            schemaVersion: 1,
-            runs: []
-        }
-    };
-    (0, trust_audit_1.ensureTrustAudit)(run);
-    (0, multi_agent_1.ensureMultiAgentState)(run);
-    (0, topology_1.ensureTopologyState)(run);
-    (0, harness_1.writeTaskFiles)(run);
-    // Use app's custom pipeline if defined; fall back to default (v0.1.56).
-    const defaultContract = (0, pipeline_contract_1.createDefaultPipelineContract)();
-    const appPipeline = appRecord.app.pipeline;
-    const contract = appPipeline
-        ? (0, state_node_1.upsertRunContract)(run, { ...defaultContract, ...appPipeline, id: defaultContract.id })
-        : (0, state_node_1.upsertRunContract)(run, defaultContract);
-    const inputNode = (0, state_node_1.appendRunNode)(run, (0, state_node_1.createStateNode)({
-        id: `${run.id}:input`,
-        kind: "input",
-        status: "completed",
-        loopStage: "interpret",
-        outputs: run.inputs,
-        artifacts: [{ id: "state", kind: "json", path: run.paths.state }],
-        contractId: contract.id,
-        metadata: { workflowId: workflow.id, app: (0, workflow_app_framework_1.workflowAppRunMetadata)(appRecord) }
-    }));
-    (0, state_1.saveCheckpoint)(run);
-    const pipeline = (0, pipeline_runner_1.createPipelineRunner)({ contractId: contract.id, persist: false });
-    for (const task of run.tasks) {
-        const taskResult = pipeline.runPipelineStage(run, "plan", inputNode.id, {
-            outputNodeId: `${run.id}:task:${task.id}`,
-            outputStatus: "pending",
-            loopStage: "interpret",
-            artifacts: [{ id: "task", kind: "markdown", path: task.taskPath }],
-            metadata: {
-                workflowId: workflow.id,
-                appId: appRecord.app.id,
-                appVersion: appRecord.app.version,
-                taskId: task.id,
-                phase: task.phase,
-                taskKind: task.kind,
-                requiresEvidence: task.requiresEvidence,
-                sandboxProfileId: task.sandboxProfileId
-            }
-        });
-        task.stateNodeId = taskResult.outputNodeId;
-    }
-    (0, report_1.writeReport)(run);
-    (0, commit_1.commitState)(run, "initial-plan");
-    (0, state_1.saveCheckpoint)(run);
-    return run;
-}
-function dispatch(run, options) {
-    try {
-        const manifest = (0, dispatch_1.createDispatchManifest)(run, (0, cli_options_1.numberOption)(options.limit), {
-            sandboxProfileId: (0, cli_options_1.stringOption)(options.sandbox) || (0, cli_options_1.stringOption)(options.sandboxProfile) || (0, cli_options_1.stringOption)(options.sandboxProfileId),
-            backendId: (0, cli_options_1.stringOption)(options.backend) || (0, cli_options_1.stringOption)(options.backendId) || (0, cli_options_1.stringOption)(options.executionBackend),
-            multiAgentRunId: (0, cli_options_1.stringOption)(options.multiAgentRun || options.multiAgentRunId || options["multi-agent-run"]),
-            multiAgentGroupId: (0, cli_options_1.stringOption)(options.multiAgentGroup || options.multiAgentGroupId || options.group || options["multi-agent-group"]),
-            multiAgentRoleId: (0, cli_options_1.stringOption)(options.multiAgentRole || options.multiAgentRoleId || options.role || options["multi-agent-role"]),
-            multiAgentFanoutId: (0, cli_options_1.stringOption)(options.multiAgentFanout || options.multiAgentFanoutId || options.fanout || options["multi-agent-fanout"])
-        });
-        run.loopStage = "act";
-        if (manifest.dispatchId)
-            (0, commit_1.commitState)(run, `dispatch:${manifest.dispatchId}`);
-        (0, state_1.saveCheckpoint)(run);
-        (0, report_1.writeReport)(run);
-        return manifest;
-    }
-    catch (error) {
-        if ((0, cli_options_1.isSandboxProfileError)(error)) {
-            run.loopStage = "adjust";
-            (0, error_feedback_1.recordFeedback)(run, {
-                source: "cli",
-                error: {
-                    code: error.code,
-                    message: error.message,
-                    at: new Date().toISOString(),
-                    path: error.path,
-                    retryable: false,
-                    details: error.details
-                },
-                retryable: false,
-                metadata: { sandboxProfileId: (0, cli_options_1.stringOption)(options.sandbox) || (0, cli_options_1.stringOption)(options.sandboxProfile) || (0, cli_options_1.stringOption)(options.sandboxProfileId) }
-            }, { persist: false });
-            (0, report_1.writeReport)(run);
-            (0, state_1.saveCheckpoint)(run);
-        }
-        throw error;
-    }
-}
-function recordResult(run, taskId, resultPath, options = {}) {
-    const task = run.tasks.find((candidate) => candidate.id === taskId);
-    if (!task)
-        throw new Error(`Unknown task id for run ${run.id}: ${taskId}`);
-    // Host-attested token usage (v0.1.31), if the caller supplied it. CW records
-    // it verbatim as provenance and NEVER synthesizes it; absent ⇒ `unreported`.
-    const usage = (0, observability_1.parseUsageFromArgs)(options, new Date().toISOString());
-    try {
-        (0, verifier_1.assertTaskCanComplete)(run, task);
-        const absoluteResultPath = node_path_1.default.resolve(resultPath);
-        if (/^\/(etc|bin|sbin|usr|Library|System|Applications|boot|dev|proc|sys|root|var\/log|var\/run)\//.test(absoluteResultPath)) {
-            throw new Error(`Result path must not be a system directory: ${resultPath}`);
-        }
-        if (!node_fs_1.default.existsSync(absoluteResultPath)) {
-            throw new Error(`Result file does not exist: ${absoluteResultPath}`);
-        }
-        const rawResult = node_fs_1.default.readFileSync(absoluteResultPath, "utf8");
-        run.loopStage = "observe";
-        const parsedResult = (0, verifier_1.parseResultEnvelope)(rawResult);
-        run.loopStage = "adjust";
-        (0, verifier_1.validateResultEnvelope)(task, parsedResult);
-        const destination = node_path_1.default.join(run.paths.resultsDir, `${(0, state_1.safeFileName)(taskId)}.md`);
-        node_fs_1.default.copyFileSync(absoluteResultPath, destination);
-        task.status = "completed";
-        task.completedAt = new Date().toISOString();
-        task.resultPath = destination;
-        task.loopStage = "observe";
-        task.result = parsedResult;
-        if (usage)
-            task.usage = usage;
-        const resultNode = (0, state_node_1.appendRunNode)(run, (0, state_node_1.createStateNode)({
-            id: `${run.id}:result:${task.id}`,
-            kind: "result",
-            status: "completed",
-            loopStage: "observe",
-            inputs: { taskId: task.id, dispatchId: task.dispatchId },
-            outputs: parsedResult,
-            artifacts: [{ id: "result", kind: "markdown", path: destination }],
-            evidence: parsedResult.evidence.map((entry, index) => ({
-                id: `result:${index + 1}`,
-                source: "cw:result",
-                locator: entry,
-                summary: entry
-            })),
-            parents: task.dispatchId ? [`${run.id}:dispatch:${task.dispatchId}`] : [task.stateNodeId || `${run.id}:task:${task.id}`],
-            contractId: pipeline_contract_1.DEFAULT_PIPELINE_CONTRACT_ID,
-            metadata: {
-                taskId: task.id,
-                // Empty-capture warning (v0.1.42): surfaced, never silently passed.
-                ...((0, result_normalize_1.isEmptyCapture)(parsedResult) ? { captureWarning: "no findings or evidence captured from result.md" } : {})
-            }
-        }));
-        task.resultNodeId = resultNode.id;
-        if ((0, result_normalize_1.isEmptyCapture)(parsedResult)) {
-            (0, trust_audit_2.recordTrustAuditEvent)(run, {
-                kind: "worker.capture-warning",
-                decision: "recorded",
-                source: "cw-validated",
-                taskId: task.id,
-                nodeId: resultNode.id,
-                metadata: { reason: "no findings or evidence captured from result.md", resultPath: destination }
-            });
-        }
-        (0, dispatch_1.updatePhaseStatuses)(run);
-        (0, verifier_1.validateRunGates)(run);
-        const verifierResult = (0, pipeline_runner_1.createPipelineRunner)({ persist: false }).runPipelineStage(run, "verify", resultNode.id, {
-            outputNodeId: `${run.id}:verifier:${task.id}`,
-            outputStatus: "verified",
-            loopStage: "adjust",
-            outputs: { accepted: true },
-            artifacts: [{ id: "result", kind: "markdown", path: destination }],
-            evidence: resultNode.evidence.length
-                ? resultNode.evidence
-                : [{ id: "result:summary", source: "summary", summary: parsedResult.summary }],
-            metadata: { taskId: task.id, resultNodeId: resultNode.id }
-        });
-        task.verifierNodeId = verifierResult.outputNodeId;
-        (0, commit_1.commitState)(run, `result:${taskId}`);
-        (0, report_1.writeReport)(run);
-        (0, state_1.saveCheckpoint)(run);
-        return (0, report_1.summarizeRun)(run);
-    }
-    catch (error) {
-        (0, error_feedback_1.recordFeedback)(run, {
-            source: "verifier",
-            error: error instanceof Error ? error : String(error),
-            taskId: task.id,
-            path: resultPath ? node_path_1.default.resolve(resultPath) : undefined,
-            retryable: false,
-            metadata: {
-                taskStatus: task.status,
-                dispatchId: task.dispatchId,
-                stateNodeId: task.stateNodeId,
-                resultNodeId: task.resultNodeId
-            }
-        });
-        (0, report_1.writeReport)(run);
-        throw error;
-    }
-}
-function recordWorkerOutput(run, workerId, resultPath, options = {}) {
-    const usage = (0, observability_1.parseUsageFromArgs)(options, new Date().toISOString());
-    // Agent Delegation Drive (v0.1.38): the drive loop passes the agent-hop
-    // attestation through verbatim so recordWorkerOutput can fold the digests +
-    // model into provenance/trust-audit. Absent for a hand-fulfilled worker.
-    const agentDelegation = options.agentDelegation || undefined;
-    // Track 1 fail-closed (opt-in): forward the policy so recordWorkerOutput can
-    // park a hop whose telemetry isn't attested. Default (absent) ⇒ flag-and-surface.
-    const requireAttestedTelemetry = options.requireAttestedTelemetry === true;
-    try {
-        (0, worker_isolation_1.recordWorkerOutput)(run, workerId, resultPath, { persist: false, agentDelegation, requireAttestedTelemetry });
-        if (usage) {
-            const worker = (0, worker_isolation_1.getWorkerScope)(run, workerId);
-            // Host-attested token usage rides on the worker record as provenance.
-            if (worker)
-                worker.usage = usage;
-        }
-        run.loopStage = "observe";
-        (0, dispatch_1.updatePhaseStatuses)(run);
-        // Bounded dynamic loops: after a round's tasks complete, evaluate the predicate
-        // and either append the next round or mark the loop done (no-op for non-loop runs).
-        maybeExpandLoop(run);
-        (0, verifier_1.validateRunGates)(run);
-        (0, commit_1.commitState)(run, `worker:${workerId}:result`);
-        (0, report_1.writeReport)(run);
-        (0, state_1.saveCheckpoint)(run);
-        return (0, report_1.summarizeRun)(run);
-    }
-    catch (error) {
-        run.loopStage = "adjust";
-        (0, dispatch_1.updatePhaseStatuses)(run);
-        (0, report_1.writeReport)(run);
-        (0, state_1.saveCheckpoint)(run);
-        throw error;
-    }
-}
-function recordWorkerFailure(run, workerId, message, options = {}) {
-    const failure = (0, worker_isolation_1.recordWorkerFailure)(run, workerId, {
-        code: String(options.code || "worker-runtime-error"),
-        message,
-        at: new Date().toISOString(),
-        path: options.path ? node_path_1.default.resolve(String(options.path)) : undefined,
-        retryable: Boolean(options.retryable)
-    }, { persist: false, retryCount: typeof options.retryCount === "number" ? Number(options.retryCount) : undefined });
-    run.loopStage = "adjust";
-    (0, dispatch_1.updatePhaseStatuses)(run);
-    (0, report_1.writeReport)(run);
-    (0, state_1.saveCheckpoint)(run);
-    return failure;
-}
-function checkState(runId, options = {}) {
-    const cwd = node_path_1.default.resolve(String(options.cwd || process.cwd()));
-    const statePath = options.state
-        ? node_path_1.default.resolve(String(options.state))
-        : node_path_1.default.join(cwd, ".cw", "runs", runId, "state.json");
-    const result = (0, state_1.migrateRunStateFile)(statePath, { write: Boolean(options.write) });
-    return result.report;
-}
-function commit(run, input = {}) {
-    run.loopStage = "checkpoint";
-    const options = typeof input === "string" ? { reason: input } : input;
-    const allowCheckpoint = Boolean(options.allowUnverifiedCheckpoint || options["allow-unverified-checkpoint"]);
-    const hasGateOption = Boolean(options.verifier || options.verifierNode || options["verifier-node"] || options.candidate || options.selection);
-    try {
-        const commitRecord = (0, commit_1.commitState)(run, {
-            reason: (0, cli_options_1.stringOption)(options.reason) || "manual",
-            verifierNodeId: (0, cli_options_1.stringOption)(options.verifier) || (0, cli_options_1.stringOption)(options.verifierNode) || (0, cli_options_1.stringOption)(options["verifier-node"]),
-            candidateId: (0, cli_options_1.stringOption)(options.candidate),
-            selectionId: (0, cli_options_1.stringOption)(options.selection),
-            verifierGated: hasGateOption || !allowCheckpoint,
-            allowUnverifiedCheckpoint: allowCheckpoint,
-            source: "cli"
-        });
-        (0, report_1.writeReport)(run);
-        (0, state_1.saveCheckpoint)(run);
-        (0, state_explosion_1.maybeCompactRun)(run);
-        return { runId: run.id, commit: commitRecord };
-    }
-    catch (error) {
-        (0, report_1.writeReport)(run);
-        (0, state_1.saveCheckpoint)(run);
-        throw error;
-    }
-}
-// ---- plan() private helpers (moved verbatim from the runner) ----------------
-function normalizeInputs(options) {
-    const inputs = {};
-    for (const [key, value] of Object.entries(options)) {
-        if (key === "arg") {
-            const pairs = Array.isArray(value) ? value : [value];
-            for (const pair of pairs) {
-                const [argKey, ...rest] = String(pair).split("=");
-                inputs[argKey] = rest.join("=");
-            }
-            continue;
-        }
-        inputs[key] = value;
-    }
-    if (inputs.repo && !inputs.cwd)
-        inputs.cwd = inputs.repo;
-    return inputs;
-}
-function validateInputs(workflow, inputs) {
-    for (const input of workflow.inputs || []) {
-        if (input.required && (0, cli_options_1.isMissing)(inputs[input.name])) {
-            throw new Error(`Missing required input --${input.name}`);
-        }
-    }
-}
-/** Bounded dynamic loop expansion. After a worker result is recorded: if the just-
- *  completed phase is the LATEST round of a loop whose origin is not yet done, evaluate
- *  the registered predicate over the round's recorded results and either append the
- *  next round (clone the round-1 template tasks into a fresh phase, materialized like
- *  plan() does) or mark the loop done. One deterministic `loop-control` node is recorded
- *  per round boundary — the replay source of truth. No-op when the run has no loop
- *  phases (POLA). Expands at most ONE loop boundary per call; the next accept handles
- *  the next. Bounded: a loop never exceeds `maxRounds` (fail-closed); an unregistered
- *  predicate stops the loop rather than spinning. */
-function maybeExpandLoop(run) {
-    for (const phase of [...run.phases]) {
-        const originId = phase.loop ? phase.id : phase.loopOrigin;
-        if (!originId)
-            continue;
-        const origin = run.phases.find((p) => p.id === originId);
-        if (!origin || !origin.loop || origin.loopDone)
-            continue;
-        // Act only from the LATEST round phase of this loop.
-        const loopPhases = run.phases.filter((p) => p.id === originId || p.loopOrigin === originId);
-        const latest = loopPhases.reduce((a, b) => ((b.loopRound || 1) >= (a.loopRound || 1) ? b : a));
-        if (phase.id !== latest.id)
-            continue;
-        const roundTasks = run.tasks.filter((t) => latest.taskIds.includes(t.id));
-        if (roundTasks.length === 0 || !roundTasks.every((t) => t.status === "completed"))
-            continue;
-        const round = latest.loopRound || 1;
-        const ordered = (tasks) => tasks.slice().sort((a, b) => (0, compare_1.compareBytes)(a.id, b.id)).map((t) => t.result);
-        const roundResults = ordered(roundTasks);
-        const allLoopTasks = run.tasks.filter((t) => t.status === "completed" && loopPhases.some((p) => p.taskIds.includes(t.id)));
-        const allResults = ordered(allLoopTasks);
-        const ctx = { round, roundResults, allResults, usageTotals: (0, observability_1.deriveUsageTotals)(run).totals, inputs: run.inputs };
-        const until = origin.loop.until;
-        let decision;
-        if (until.kind === "budget-target") {
-            // Budget-aware scaling: keep spawning rounds while RECORDED (attested-only) usage
-            // stays under the target. Composes with the fail-closed cap (limits.tokenBudget),
-            // which the drive enforces before each spawn and which remains the absolute
-            // backstop — whichever fires first wins, and the cap can never be overshot.
-            const spent = ctx.usageTotals.totalTokens;
-            decision = { done: spent >= until.target, reason: `budget-target: ${spent}/${until.target} recorded tokens` };
-        }
-        else {
-            const predicate = (0, loop_expansion_1.getLoopPredicate)(until.ref);
-            decision = predicate
-                ? predicate(ctx)
-                : { done: true, reason: `loop predicate "${until.ref}" not registered — stopping fail-closed` };
-        }
-        const atCap = round >= origin.loop.maxRounds;
-        const done = decision.done || atCap;
-        // Record the decision under a deterministic id (the replay source of truth).
-        (0, state_node_1.appendRunNode)(run, (0, state_node_1.createStateNode)({
-            id: `${run.id}:loop-control:${originId}:r${round}`,
-            kind: "loop-control",
-            status: "completed",
-            loopStage: "adjust",
-            outputs: { round, done, atCap, reason: decision.reason },
-            metadata: { originPhaseId: originId, until: until.kind === "predicate" ? until.ref : `budget-target:${until.target}`, round, done, atCap, reason: decision.reason }
-        }));
-        if (done) {
-            origin.loopDone = true;
-            return;
-        }
-        // Expand: clone the ROUND-1 template tasks into a fresh phase appended right after.
-        const nextRound = round + 1;
-        const nextPhaseName = `${origin.name} (round ${nextRound})`;
-        const templateTasks = run.tasks.filter((t) => origin.taskIds.includes(t.id));
-        const newTasks = templateTasks.map((t) => ({
-            id: `${t.id.replace(/@r\d+$/, "")}@r${nextRound}`,
-            kind: t.kind,
-            phase: nextPhaseName,
-            status: "pending",
-            requiresEvidence: t.requiresEvidence,
-            prompt: t.prompt,
-            taskPath: "",
-            resultPath: "",
-            loopStage: "interpret",
-            loopRound: nextRound,
-            ...(t.sandboxProfileId ? { sandboxProfileId: t.sandboxProfileId } : {}),
-            ...(t.label ? { label: t.label } : {}),
-            ...(t.model ? { model: t.model } : {}),
-            ...(t.agentType ? { agentType: t.agentType } : {}),
-            ...(t.schema ? { schema: t.schema } : {})
-        }));
-        const nextPhase = {
-            id: `${originId}@r${nextRound}`,
-            name: nextPhaseName,
-            status: "pending",
-            taskIds: newTasks.map((t) => t.id),
-            loopOrigin: originId,
-            loopRound: nextRound,
-            ...(origin.mode ? { mode: origin.mode } : {})
-        };
-        const insertAt = run.phases.findIndex((p) => p.id === latest.id);
-        run.phases.splice(insertAt + 1, 0, nextPhase);
-        run.tasks.push(...newTasks);
-        // Materialize: task files + a plan-stage contract node per new task (mirrors plan()).
-        (0, harness_1.writeTaskFiles)(run);
-        const contractId = run.contracts && run.contracts[0] ? run.contracts[0].id : undefined;
-        const inputNodeId = `${run.id}:input`;
-        const pipeline = (0, pipeline_runner_1.createPipelineRunner)({ contractId, persist: false });
-        for (const t of newTasks) {
-            const result = pipeline.runPipelineStage(run, "plan", inputNodeId, {
-                outputNodeId: `${run.id}:task:${t.id}`,
-                outputStatus: "pending",
-                loopStage: "interpret",
-                artifacts: [{ id: "task", kind: "markdown", path: t.taskPath }],
-                metadata: { workflowId: run.workflow.id, taskId: t.id, phase: t.phase, taskKind: t.kind, requiresEvidence: t.requiresEvidence, sandboxProfileId: t.sandboxProfileId }
-            });
-            t.stateNodeId = result.outputNodeId;
-        }
-        (0, dispatch_1.updatePhaseStatuses)(run);
-        return;
-    }
-}
-function flattenTasks(workflow, inputs) {
-    const seen = new Set();
-    const tasks = [];
-    for (const phase of workflow.phases) {
-        for (const task of phase.tasks) {
-            if (seen.has(task.id))
-                throw new Error(`Duplicate task id: ${task.id}`);
-            seen.add(task.id);
-            tasks.push({
-                id: task.id,
-                kind: task.kind,
-                phase: phase.name,
-                status: "pending",
-                loopStage: "interpret",
-                requiresEvidence: Boolean(task.requiresEvidence),
-                sandboxProfileId: task.sandboxProfileId,
-                prompt: renderPrompt(task.prompt, inputs),
-                taskPath: "",
-                resultPath: "",
-                // Track 3: carry the declared output schema onto the run task so
-                // validateResultEnvelope can enforce it at intake. Absent ⇒ no schema check.
-                ...(task.schema ? { schema: task.schema } : {}),
-                // Authoring metadata the drive READS: label (progress/operator views),
-                // model (per-task delegation override), agentType (dispatch backend).
-                ...(task.label ? { label: task.label } : {}),
-                ...(task.model ? { model: task.model } : {}),
-                ...(task.agentType ? { agentType: task.agentType } : {}),
-                ...(task.resultCache ? { resultCache: task.resultCache } : {}),
-                ...(task.subWorkflow ? { subWorkflow: task.subWorkflow } : {}),
-                // A loop phase's tasks are round 1 of the loop; the expander clones them.
-                ...(phase.loop ? { loopRound: 1 } : {})
-            });
-        }
-    }
-    return tasks;
-}
-function renderPrompt(prompt, inputs) {
-    const invariant = Array.isArray(inputs.invariant)
-        ? inputs.invariant.join("; ")
-        : String(inputs.invariant || "");
-    let rendered = String(prompt)
-        .replaceAll("{{repo}}", String(inputs.repo || ""))
-        .replaceAll("{{question}}", String(inputs.question || ""))
-        .replaceAll("{{invariant}}", invariant);
-    for (const [key, value] of Object.entries(inputs)) {
-        const replacement = Array.isArray(value) ? value.join("; ") : String(value ?? "");
-        rendered = rendered.replaceAll(`{{${key}}}`, replacement);
-    }
-    return rendered;
-}
-// Deterministic run id (replay-determinism self-audit): the wall-clock stamp is an
-// edge timestamp (recorded once and stripped on replay), but the former
-// Math.random() suffix made the run id itself non-reproducible — re-deriving the id
-// for the SAME recorded run would never match. The suffix is now a content hash of
-// the run's deterministic identity (workflowId + the recorded stamp), so the id is a
-// pure function of inputs that already live in state. Distinct plan() invocations
-// still get distinct ids because the per-millisecond stamp differs; replaying a
-// recorded run reproduces the byte-identical id. Mirrors the de-clock done for
-// worker ids in src/worker-isolation/paths.ts.
-let runIdSequence = 0;
-function createRunId(workflowId) {
-    // Use process.pid + monotonic counter for uniqueness (no wall-clock),
-    // but keep a second-resolution stamp for human readability in the id.
-    const stamp = new Date().toISOString().replace(/[-:]/g, "").replace(/\..+/, "Z");
-    // Set CW_DETERMINISTIC_RUN_IDS=1 to use a content hash instead of wall-clock,
-    // so two plan() calls with the same inputs produce the same id (replay-safe).
-    if (/^(1|true|yes|on)$/i.test(process.env.CW_DETERMINISTIC_RUN_IDS || "")) {
-        runIdSequence += 1;
-        const suffix = node_crypto_1.default
-            .createHash("sha256")
-            .update(`${workflowId}:${process.pid}:${runIdSequence}`)
-            .digest("hex")
-            .slice(0, 6);
-        return `${workflowId}-${suffix}`;
-    }
-    runIdSequence += 1;
-    const suffix = node_crypto_1.default
-        .createHash("sha256")
-        .update(`${workflowId}:${stamp}:${process.pid}:${runIdSequence}`)
-        .digest("hex")
-        .slice(0, 6);
-    return `${workflowId}-${stamp}-${suffix}`;
-}

package/dist/orchestrator/migration-operations.js

@@ -1,44 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.migrationList = migrationList;
-exports.migrationCheck = migrationCheck;
-exports.migrationProve = migrationProve;
-exports.loadMigrationSnapshot = loadMigrationSnapshot;
-// Contract-migration domain operations (v0.1.40 self-audit P3 router pattern).
-// Carved out of CoolWorkflowRunner; pure functions (no instance state). Behavior
-// is identical to the inline versions.
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const state_1 = require("../state");
-const contract_migration_1 = require("../contract-migration");
-function migrationList() {
-    return { contracts: (0, contract_migration_1.listMigrationContracts)() };
-}
-function migrationCheck(target, options = {}) {
-    const { snapshot, contract } = loadMigrationSnapshot(target, options);
-    return (0, contract_migration_1.checkMigration)(contract, snapshot);
-}
-function migrationProve(target, options = {}) {
-    const { snapshot, contract, dir } = loadMigrationSnapshot(target, options);
-    const proof = (0, contract_migration_1.proveMigration)(contract, snapshot);
-    // Append-only: persist the proof beside the target, NEVER overwriting source.
-    try {
-        (0, state_1.writeJson)(node_path_1.default.join(dir, "migration", `${proof.fingerprint.replace("sha256:", "").slice(0, 16)}.json`), proof);
-    }
-    catch {
-        /* read-only target — the proof is still returned */
-    }
-    return proof;
-}
-function loadMigrationSnapshot(target, options) {
-    const contract = options.contract === "workflow-app" ? "workflow-app" : "run-state";
-    const file = node_fs_1.default.existsSync(target) && node_fs_1.default.statSync(target).isFile()
-        ? node_path_1.default.resolve(target)
-        : node_path_1.default.join(process.cwd(), ".cw", "runs", target, "state.json");
-    if (!node_fs_1.default.existsSync(file))
-        throw new Error(`Migration target not found: ${target}`);
-    return { snapshot: (0, state_1.readJson)(file), contract, dir: node_path_1.default.dirname(file) };
-}