cool-workflow 0.1.98 → 0.2.0

package/dist/types/execution-backend.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/multi-agent.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/observability.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/pipeline.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/reclamation.js

@@ -1,8 +0,0 @@
-"use strict";
-// Run Retention & Provable Reclamation (v0.1.39) — type contracts.
-//
-// Reclamation frees disk WITHOUT violating the audit/replay moat. It is a
-// VERIFIABLE, append-only state transition: freeing bytes leaves behind a
-// hash-chained tombstone proving what was freed is reconstructable-or-worthless
-// and that the audit-essential subset is sealed. See docs/run-retention-reclamation.7.md.
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/report-bundle.js

@@ -1,6 +0,0 @@
-"use strict";
-// Verifiable report bundle — result shapes shared across the run-export verifier,
-// the capability-core producer (reportBundle), and the quickstart auto-bundle field
-// on QuickstartResult. Kept in types/ (a leaf) so types/drive.ts can reference
-// ReportBundleResult without a types->core import cycle.
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/result.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/run-registry.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/run.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/sandbox.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/schedule.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/state-node.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/topology.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/trust.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/workbench.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/worker.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/workflow-app.js

@@ -1,2 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types.js

@@ -1,44 +0,0 @@
-"use strict";
-// Barrel for the workflow type system. The declarations were split out of a
-// single 3k-line types.ts into domain files under ./types/; importers keep
-// importing from "./types" unchanged. Pure types — no runtime cost.
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./types/core"), exports);
-__exportStar(require("./types/workflow-app"), exports);
-__exportStar(require("./types/result"), exports);
-__exportStar(require("./types/trust"), exports);
-__exportStar(require("./types/state-node"), exports);
-__exportStar(require("./types/pipeline"), exports);
-__exportStar(require("./types/error-feedback"), exports);
-__exportStar(require("./types/sandbox"), exports);
-__exportStar(require("./types/execution-backend"), exports);
-__exportStar(require("./types/boundary"), exports);
-__exportStar(require("./types/drive"), exports);
-__exportStar(require("./types/report-bundle"), exports);
-__exportStar(require("./types/multi-agent"), exports);
-__exportStar(require("./types/topology"), exports);
-__exportStar(require("./types/blackboard"), exports);
-__exportStar(require("./types/worker"), exports);
-__exportStar(require("./types/candidate"), exports);
-__exportStar(require("./types/evidence-reasoning"), exports);
-__exportStar(require("./types/run"), exports);
-__exportStar(require("./types/schedule"), exports);
-__exportStar(require("./types/run-registry"), exports);
-__exportStar(require("./types/reclamation"), exports);
-__exportStar(require("./types/workbench"), exports);
-__exportStar(require("./types/observability"), exports);
-__exportStar(require("./types/collaboration"), exports);

package/dist/util/fingerprint.js

@@ -1,19 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fingerprintStrings = fingerprintStrings;
-exports.fingerprintRecords = fingerprintRecords;
-// Deterministic content fingerprint — the single canonical implementation.
-// Replaces duplicated copies in observability.ts and run-registry.ts (v0.1.95).
-// Pure function of its arguments; never imports run state or high-level modules.
-const node_crypto_1 = __importDefault(require("node:crypto"));
-function fingerprintStrings(values) {
-    const hash = node_crypto_1.default.createHash("sha256");
-    hash.update(JSON.stringify([...values].sort()));
-    return `sha256:${hash.digest("hex").slice(0, 32)}`;
-}
-function fingerprintRecords(records) {
-    return fingerprintStrings(records.map((r) => `${r.id}:${r.status || ""}`).sort());
-}

package/dist/util/fingerprint.test.js

@@ -1,27 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-// Unit test for the canonical fingerprint utility (v0.1.95).
-// Pure function — no run state or tmpdir needed.
-const strict_1 = require("node:assert/strict");
-const node_test_1 = require("node:test");
-const fingerprint_1 = require("../util/fingerprint");
-(0, node_test_1.test)("fingerprintStrings returns a sha256: prefix", () => {
-    const fp = (0, fingerprint_1.fingerprintStrings)(["a", "b"]);
-    (0, strict_1.ok)(fp.startsWith("sha256:"), "must have sha256: prefix");
-    (0, strict_1.equal)(fp.length, 32 + "sha256:".length, "must be 32 hex chars");
-});
-(0, node_test_1.test)("fingerprintStrings is deterministic and order-independent", () => {
-    const a = (0, fingerprint_1.fingerprintStrings)(["b", "a", "c"]);
-    const b = (0, fingerprint_1.fingerprintStrings)(["c", "b", "a"]);
-    (0, strict_1.equal)(a, b, "same values in different order must produce same fingerprint");
-});
-(0, node_test_1.test)("fingerprintStrings produces distinct values for different inputs", () => {
-    const a = (0, fingerprint_1.fingerprintStrings)(["x"]);
-    const b = (0, fingerprint_1.fingerprintStrings)(["y"]);
-    (0, strict_1.ok)(a !== b, "different inputs must produce different fingerprints");
-});
-(0, node_test_1.test)("fingerprintRecords uses id:status sorted", () => {
-    const a = (0, fingerprint_1.fingerprintRecords)([{ id: "b", status: "ok" }, { id: "a", status: "fail" }]);
-    const b = (0, fingerprint_1.fingerprintRecords)([{ id: "a", status: "fail" }, { id: "b", status: "ok" }]);
-    (0, strict_1.equal)(a, b, "records in different order must produce same fingerprint");
-});

package/dist/verifier.js

@@ -1,78 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertTaskCanComplete = assertTaskCanComplete;
-exports.parseResultEnvelope = parseResultEnvelope;
-exports.taskRequiresEvidence = taskRequiresEvidence;
-exports.validateResultEnvelope = validateResultEnvelope;
-exports.validateRunGates = validateRunGates;
-const dispatch_1 = require("./dispatch");
-const evidence_grounding_1 = require("./evidence-grounding");
-const result_normalize_1 = require("./result-normalize");
-const schema_validate_1 = require("./schema-validate");
-function assertTaskCanComplete(run, task) {
-    const runnablePhase = (0, dispatch_1.firstRunnablePhase)(run);
-    if (!runnablePhase || runnablePhase.name !== task.phase) {
-        throw new Error(`Phase gate blocked task ${task.id}; current runnable phase is ${runnablePhase?.name || "none"}`);
-    }
-    if (!["pending", "running"].includes(task.status)) {
-        throw new Error(`Task ${task.id} cannot be completed from status ${task.status}`);
-    }
-}
-// Ingest is delegated to the robust normalizer (v0.1.42): canonical
-// `{summary, findings, evidence}` passes through unchanged, but when the agent
-// uses its own shape (or prose) CW extracts findings from alternative keys and
-// DERIVES grounded evidence itself rather than capturing nothing.
-function parseResultEnvelope(markdown) {
-    return (0, result_normalize_1.normalizeResultEnvelope)(markdown);
-}
-/** Whether a task's result MUST carry evidence (verify/verdict/synthesis tasks
- *  and any task that opted in via requiresEvidence). The commit gate reuses this
- *  so its evidence-grounding check matches the acceptance-time policy exactly. */
-function taskRequiresEvidence(task) {
-    return Boolean(task.requiresEvidence ||
-        /^verify[:/]/i.test(task.id) ||
-        /^verdict[:/]/i.test(task.id) ||
-        /^synthesis[:/]/i.test(task.id));
-}
-function validateResultEnvelope(task, result) {
-    const mustHaveEvidence = taskRequiresEvidence(task);
-    if (mustHaveEvidence && !(0, evidence_grounding_1.hasGroundedEvidence)(result.evidence)) {
-        throw new Error(`Task ${task.id} requires grounded cw:result evidence (a path-like locator, URL, or namespace:value token — not free text)`);
-    }
-    for (const finding of result.findings || []) {
-        validateFinding(task, finding);
-    }
-    // Track 3: if the task declared an output schema, the accepted result envelope
-    // must conform. Fail-closed (throw ⇒ the drive parks the hop), consistent with
-    // the checks above. No schema declared ⇒ no check (opt-in by declaration).
-    if (task.schema) {
-        const violations = (0, schema_validate_1.validateAgainstSchema)(result, task.schema);
-        if (violations.length) {
-            throw new Error(`Task ${task.id} result violates declared schema: ${violations.slice(0, 5).join("; ")}${violations.length > 5 ? ` (+${violations.length - 5} more)` : ""}`);
-        }
-    }
-}
-function validateRunGates(run) {
-    const verdictTasks = run.tasks.filter((task) => /^verdict[:/]|^synthesis[:/]/i.test(task.id));
-    for (const verdictTask of verdictTasks) {
-        if (verdictTask.status !== "completed")
-            continue;
-        const verdictPhaseIndex = run.phases.findIndex((phase) => phase.name === verdictTask.phase);
-        const earlierPhases = run.phases.slice(0, verdictPhaseIndex);
-        const incompleteEarlier = earlierPhases.find((phase) => phase.status !== "completed");
-        if (incompleteEarlier) {
-            throw new Error(`Verdict gate blocked ${verdictTask.id}; phase ${incompleteEarlier.name} is not complete`);
-        }
-    }
-}
-function validateFinding(task, finding) {
-    if (!finding.id)
-        throw new Error(`Task ${task.id} has a finding without id`);
-    if (finding.classification &&
-        !["real", "conditional", "non-issue", "unknown"].includes(finding.classification)) {
-        throw new Error(`Task ${task.id} finding ${finding.id} has invalid classification`);
-    }
-    if (["P0", "P1", "P2"].includes(finding.severity || "") && !(0, evidence_grounding_1.hasGroundedEvidence)(finding.evidence)) {
-        throw new Error(`Task ${task.id} finding ${finding.id} severity ${finding.severity} requires grounded evidence (a path-like locator, URL, or namespace:value token)`);
-    }
-}

package/dist/version.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MIN_SUPPORTED_RUN_STATE_SCHEMA_VERSION = exports.LEGACY_RUN_STATE_SCHEMA_VERSION = exports.CURRENT_RUN_STATE_SCHEMA_VERSION = exports.WORKFLOW_APP_SCHEMA_VERSION = exports.CURRENT_COOL_WORKFLOW_VERSION = void 0;
-exports.CURRENT_COOL_WORKFLOW_VERSION = "0.1.98";
-exports.WORKFLOW_APP_SCHEMA_VERSION = 1;
-exports.CURRENT_RUN_STATE_SCHEMA_VERSION = 1;
-exports.LEGACY_RUN_STATE_SCHEMA_VERSION = 0;
-exports.MIN_SUPPORTED_RUN_STATE_SCHEMA_VERSION = 0;

package/dist/workbench-host.js

@@ -1,192 +0,0 @@
-"use strict";
-// Web / Desktop Workbench host (v0.1.30) — a thin, OPTIONAL localhost renderer.
-//
-// BSD discipline:
-//  - LEAST PRIVILEGE, LOCAL BY DEFAULT. Binds 127.0.0.1 ONLY, serves read-only
-//    derived views, exposes nothing beyond the current user's `.cw/` scope and
-//    the v0.1.28 registry's registered repos. It also rejects non-localhost Host
-//    headers (DNS-rebinding defense) and fails closed on anything it cannot read.
-//  - READ-ONLY BY DEFAULT. Every route is GET; any write verb is refused 405.
-//    The host offers no actions — it is pure inspection. (A future action would
-//    have to route through a declared capability core entry, never a parallel
-//    path, so it stays parity-gated.)
-//  - NO HIDDEN DASHBOARD / OPTIONAL SURFACE. The host imports the kernel, never
-//    the reverse. It holds zero authoritative state: every response is re-derived
-//    on demand from disk via the SAME core entries the CLI/MCP use. The committed
-//    `dist/` + plain `node` runtime keep working with this file deleted.
-//
-// See src/workbench.ts and docs/web-desktop-workbench.7.md.
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkbenchHost = void 0;
-const node_http_1 = __importDefault(require("node:http"));
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
-const node_crypto_1 = __importDefault(require("node:crypto"));
-const workbench_1 = require("./workbench");
-const ALLOWED_HOSTNAMES = new Set(["127.0.0.1", "localhost", "::1", "[::1]"]);
-const CONTENT_TYPES = {
-    ".html": "text/html; charset=utf-8",
-    ".js": "text/javascript; charset=utf-8",
-    ".css": "text/css; charset=utf-8",
-    ".json": "application/json; charset=utf-8",
-    ".svg": "image/svg+xml"
-};
-class WorkbenchHost {
-    runner;
-    cwd;
-    port;
-    scope;
-    host = "127.0.0.1";
-    server;
-    constructor(options) {
-        this.runner = options.runner;
-        this.cwd = node_path_1.default.resolve(String(options.cwd || process.cwd()));
-        this.port = options.port && options.port > 0 ? Math.floor(options.port) : workbench_1.WORKBENCH_DEFAULT_PORT;
-        this.scope = options.scope === "repo" ? "repo" : "home";
-    }
-    /** The canonical serve descriptor — identical to `cw workbench serve --json`. */
-    descriptor(once) {
-        return (0, workbench_1.buildWorkbenchServeDescriptor)(this.runner, { cwd: this.cwd, port: this.port, scope: this.scope, once });
-    }
-    /** Start listening on loopback only. Resolves with the actually-bound port
-     *  (an ephemeral 0 becomes a real port — useful for tests). */
-    listen() {
-        const server = node_http_1.default.createServer((req, res) => this.handle(req, res));
-        this.server = server;
-        return new Promise((resolve, reject) => {
-            server.once("error", reject);
-            // Bind the loopback interface ONLY — never a public address.
-            server.listen(this.port, this.host, () => {
-                const address = server.address();
-                const port = address && typeof address === "object" ? address.port : this.port;
-                resolve({ host: this.host, port });
-            });
-        });
-    }
-    close() {
-        return new Promise((resolve) => {
-            if (!this.server)
-                return resolve();
-            this.server.close(() => resolve());
-        });
-    }
-    /** Run until interrupted (the CLI default `workbench serve`). */
-    async run() {
-        const bound = await this.listen();
-        process.stdout.write(`${JSON.stringify({ ...this.descriptor(false), boundPort: bound.port })}\n`);
-    }
-    handle(req, res) {
-        try {
-            // Fail closed on anything but a localhost GET.
-            if (!isLocalHost(req.headers.host))
-                return this.send(res, 403, { error: "forbidden: non-localhost Host header" });
-            if ((req.method || "GET").toUpperCase() !== "GET") {
-                return this.send(res, 405, { error: "read-only: only GET is permitted" }, { Allow: "GET" });
-            }
-            // Optional token auth (CW_WORKBENCH_TOKEN). When set, every request must
-            // carry the token as an Authorization: Bearer header or ?token= query param.
-            // Off by default — single-user loopback is already gated by the OS boundary.
-            const url = new URL(req.url || "/", `http://${this.host}`);
-            const requiredToken = (process.env.CW_WORKBENCH_TOKEN || "").trim();
-            if (requiredToken) {
-                const bearer = (req.headers.authorization || "").replace(/^Bearer\s+/i, "").trim();
-                const queryToken = url.searchParams.get("token") || "";
-                const tokenBuf = Buffer.from(requiredToken);
-                const bearerBuf = Buffer.from(bearer);
-                const queryBuf = Buffer.from(queryToken);
-                const tokenOk = bearerBuf.length === tokenBuf.length && node_crypto_1.default.timingSafeEqual(bearerBuf, tokenBuf);
-                const queryOk = queryBuf.length === tokenBuf.length && node_crypto_1.default.timingSafeEqual(queryBuf, tokenBuf);
-                if (!tokenOk && !queryOk) {
-                    return this.send(res, 401, { error: "unauthorized: token mismatch" });
-                }
-            }
-            const route = decodeRoutePath(url.pathname);
-            if (!route)
-                return this.send(res, 400, { error: "bad request: malformed URL path" });
-            if (route === "/" || route === "/index.html")
-                return this.sendAsset(res, "index.html");
-            if (route.startsWith("/ui/"))
-                return this.sendAsset(res, route.slice("/ui/".length));
-            if (route === "/api/serve")
-                return this.send(res, 200, this.descriptor(true));
-            if (route === "/api/index") {
-                const args = Object.fromEntries(url.searchParams.entries());
-                return this.send(res, 200, (0, workbench_1.buildWorkbenchIndex)(this.runner, { cwd: this.cwd, scope: this.scope, ...args }));
-            }
-            const runMatch = /^\/api\/run\/([^/]+)$/.exec(route);
-            if (runMatch) {
-                return this.send(res, 200, (0, workbench_1.buildWorkbenchRunView)(this.runner.withBaseDir(this.cwd), runMatch[1]));
-            }
-            this.send(res, 404, { error: `no such read-only view: ${route}` });
-        }
-        catch (error) {
-            this.send(res, 500, { error: error instanceof Error ? error.message : String(error) });
-        }
-    }
-    /** Serve a static UI asset from disk, re-read on every request (no caching of
-     *  authoritative state). Path-traversal is refused; a missing asset is an
-     *  honest 404 — the framework ships fine without the UI installed. */
-    sendAsset(res, relative) {
-        const uiRoot = (0, workbench_1.workbenchUiRoot)(this.runner);
-        const resolved = node_path_1.default.resolve(uiRoot, relative);
-        if (resolved !== uiRoot && !resolved.startsWith(uiRoot + node_path_1.default.sep)) {
-            return this.send(res, 403, { error: "forbidden: path traversal" });
-        }
-        let body;
-        try {
-            body = node_fs_1.default.readFileSync(resolved);
-        }
-        catch {
-            if (relative === "index.html") {
-                return this.sendRaw(res, 200, CONTENT_TYPES[".html"], Buffer.from(FALLBACK_HTML(uiRoot)));
-            }
-            return this.send(res, 404, { error: `UI asset not installed: ${relative}` });
-        }
-        this.sendRaw(res, 200, CONTENT_TYPES[node_path_1.default.extname(resolved)] || "application/octet-stream", body);
-    }
-    send(res, status, body, headers = {}) {
-        this.sendRaw(res, status, CONTENT_TYPES[".json"], Buffer.from(JSON.stringify(body, null, 2)), headers);
-    }
-    sendRaw(res, status, contentType, body, headers = {}) {
-        res.writeHead(status, {
-            "Content-Type": contentType,
-            "Cache-Control": "no-store",
-            "X-Content-Type-Options": "nosniff",
-            ...headers
-        });
-        res.end(body);
-    }
-}
-exports.WorkbenchHost = WorkbenchHost;
-function isLocalHost(hostHeader) {
-    if (!hostHeader)
-        return true; // HTTP/1.0 / no Host — loopback bind already constrains us.
-    const hostname = hostHeader.replace(/:\d+$/, "");
-    return ALLOWED_HOSTNAMES.has(hostname);
-}
-function decodeRoutePath(pathname) {
-    try {
-        return decodeURIComponent(pathname);
-    }
-    catch {
-        return undefined;
-    }
-}
-function FALLBACK_HTML(uiRoot) {
-    return [
-        "<!doctype html><meta charset=utf-8><title>Cool Workflow Workbench</title>",
-        "<body style=\"font-family:system-ui;margin:2rem;color:#222\">",
-        "<h1>Cool Workflow Workbench</h1>",
-        "<p>The static UI assets are not installed at:</p>",
-        `<pre>${escapeHtml(uiRoot)}</pre>`,
-        "<p>The read-only JSON views are still served:</p>",
-        "<ul><li><a href=\"/api/index\">/api/index</a></li><li><code>/api/run/&lt;runId&gt;</code></li><li><a href=\"/api/serve\">/api/serve</a></li></ul>",
-        "</body>"
-    ].join("");
-}
-function escapeHtml(value) {
-    return value.replace(/[&<>]/g, (ch) => (ch === "&" ? "&amp;" : ch === "<" ? "&lt;" : "&gt;"));
-}