cool-workflow 0.1.98 → 0.2.0

package/dist/core/pipeline/commit-gate.js

@@ -0,0 +1,320 @@
+"use strict";
+// core/pipeline/commit-gate.ts — commitState's gate resolution + the
+// ~25 error codes.
+//
+// MILESTONE 6+7 (combined). Byte-exact port of the DECISION half of the
+// old build's src/commit.ts (calls into core/state/state-node.ts's
+// transition matrix + commit-without-verifier gate from milestone 3). The
+// actual snapshot/audit writes are shell/drive.ts + shell/report.ts.
+//
+// Evidence: SPEC/pipeline-run.md "Commit gate — src/commit.ts",
+// "Commit-gate error codes (fixed strings)".
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sandboxProfileForCandidate = sandboxProfileForCandidate;
+exports.buildAcceptanceRationale = buildAcceptanceRationale;
+exports.validateAcceptanceRationale = validateAcceptanceRationale;
+exports.emptyCaptureWarning = emptyCaptureWarning;
+exports.verifierNodeRequiresEvidence = verifierNodeRequiresEvidence;
+exports.resolveCommitGate = resolveCommitGate;
+exports.formatCommitId = formatCommitId;
+exports.gateFailureSeq = gateFailureSeq;
+const evidence_grounding_1 = require("../trust/evidence-grounding");
+const result_normalize_1 = require("./result-normalize");
+/** The sandbox profile that accepted a candidate's worker output — the
+ *  worker's own profile when present, else the backing task's. Pure port of
+ *  the old build's src/gates.ts sandboxProfileForCandidate. */
+function sandboxProfileForCandidate(run, candidate) {
+    const worker = candidate?.workerId
+        ? (run.workers || []).find((entry) => entry.id === candidate.workerId)
+        : undefined;
+    if (worker?.sandboxProfileId)
+        return worker.sandboxProfileId;
+    const task = candidate?.taskId ? run.tasks.find((entry) => entry.id === candidate.taskId) : undefined;
+    return task?.sandboxProfileId;
+}
+/** Build a normalized acceptance rationale record. Pure port of the old
+ *  build's src/trust-audit.ts buildAcceptanceRationale. */
+function buildAcceptanceRationale(input) {
+    const ids = (input.auditEventIds || []).filter((v, i, a) => v && a.indexOf(v) === i).sort();
+    return {
+        schemaVersion: 1,
+        selectedCandidateId: input.selectedCandidateId,
+        scoreId: input.scoreId,
+        scoreCriteria: input.scoreCriteria,
+        verifierNodeId: input.verifierNodeId,
+        evidenceCount: input.evidenceCount || 0,
+        sandboxProfileId: input.sandboxProfileId,
+        workerId: input.workerId,
+        commitGateResult: input.commitGateResult,
+        auditEventIds: ids,
+    };
+}
+/** Return the list of reasons an acceptance rationale is incomplete (empty =
+ *  complete). Pure port of the old build's validateAcceptanceRationale. */
+function validateAcceptanceRationale(rationale) {
+    if (!rationale)
+        return ["acceptance rationale is missing"];
+    const failures = [];
+    if (!rationale.selectedCandidateId)
+        failures.push("selected candidate id is missing");
+    if (!rationale.scoreId)
+        failures.push("score id is missing");
+    if (!rationale.verifierNodeId)
+        failures.push("verifier node id is missing");
+    if (!rationale.evidenceCount)
+        failures.push("evidence count is zero");
+    if (!rationale.workerId)
+        failures.push("worker id is missing");
+    if (!rationale.sandboxProfileId)
+        failures.push("sandbox profile id is missing");
+    if (rationale.commitGateResult !== "passed")
+        failures.push("commit gate result is not passed");
+    return failures;
+}
+function error(code, message, options = {}, now) {
+    return { code, message, at: now, retryable: false, ...options };
+}
+/** Whether the reason has the form `result:<task-id>` and that task has a
+ *  verifierNodeId (auto-gate). */
+function taskVerifierFromReason(run, reason) {
+    const taskId = reason.startsWith("result:") ? reason.slice("result:".length) : "";
+    if (!taskId)
+        return undefined;
+    return run.tasks.find((t) => t.id === taskId)?.verifierNodeId || undefined;
+}
+function findNode(run, nodeId) {
+    return (run.nodes || []).find((n) => n.id === nodeId);
+}
+function findCandidate(run, candidateId) {
+    return (run.candidates || []).find((c) => c.id === candidateId);
+}
+function findSelection(run, selectionId) {
+    return (run.candidateSelections || []).find((s) => s.id === selectionId);
+}
+function findSelectionNode(run, selectionId) {
+    return (run.nodes || []).find((n) => n.kind === "candidate" && n.metadata?.selectionId === selectionId);
+}
+function latestSelectionForCandidate(run, candidateId) {
+    return [...(run.candidateSelections || [])]
+        .filter((s) => s.candidateId === candidateId)
+        .sort((a, b) => (b.selectedAt || "").localeCompare(a.selectedAt || ""))[0];
+}
+function evidenceLocatorString(entry) {
+    const ref = entry.locator || entry.path || entry.summary || entry.id;
+    return ref ? String(ref) : undefined;
+}
+/** The node must be kind verifier and status verified and have evidence.
+ *  The HARD no-false-green gate: a verifier whose backing result was an
+ *  empty capture fails with commit-rationale-empty-capture. `backingResult`
+ *  is the parsed cw:result envelope of the task the verifier node backs
+ *  (undefined for an explicit candidate/selection commit with no 1:1
+ *  task). */
+function emptyCaptureWarning(backingResult) {
+    if (!backingResult)
+        return undefined;
+    return (0, result_normalize_1.isEmptyCapture)(backingResult) ? "no findings or evidence captured from result.md" : undefined;
+}
+/** Whether a verifier node is held to the grounded-evidence bar: its
+ *  backing task requires evidence, or there is no 1:1 task (explicit
+ *  candidate/selection commit — always enforced). */
+function verifierNodeRequiresEvidence(taskRequiresEvidence) {
+    return taskRequiresEvidence === undefined ? true : taskRequiresEvidence;
+}
+/** commitState's gate resolution. Pure decision function; the caller
+ *  (shell/) performs the actual snapshot/audit writes on success and the
+ *  error-node/feedback write on failure. Error order matches the old
+ *  build byte-for-byte. */
+function resolveCommitGate(run, options, deps) {
+    const metadata = { verifierGated: false, checkpoint: true };
+    const errors = [];
+    const now = deps.now;
+    const taskVerifierNodeId = taskVerifierFromReason(run, options.reason);
+    const explicitGate = Boolean(options.verifierNodeId || options.candidateId || options.selectionId || options.verifierGated);
+    const verifierGated = explicitGate || Boolean(taskVerifierNodeId);
+    if (!verifierGated) {
+        return { verifierGated: false, evidence: [], errors, metadata };
+    }
+    metadata.verifierGated = true;
+    metadata.checkpoint = false;
+    let verifierNodeId = options.verifierNodeId || taskVerifierNodeId;
+    let candidateId = options.candidateId;
+    let selectionId = options.selectionId;
+    let selectionNodeId;
+    // Selection pass.
+    if (selectionId) {
+        const selection = findSelection(run, selectionId);
+        if (!selection) {
+            errors.push(error("commit-selection-not-found", `Commit selection not found: ${selectionId}`, { details: { selectionId } }, now));
+        }
+        else {
+            candidateId = candidateId || selection.candidateId;
+            if (verifierNodeId && selection.verifierNodeId && verifierNodeId !== selection.verifierNodeId) {
+                errors.push(error("commit-verifier-linkage-mismatch", `Requested verifier ${verifierNodeId} is not linked to selection ${selection.id}`, {
+                    details: { requestedVerifierNodeId: verifierNodeId, linkedVerifierNodeId: selection.verifierNodeId },
+                }, now));
+            }
+            else {
+                verifierNodeId = verifierNodeId || selection.verifierNodeId;
+            }
+            const selectionNode = findSelectionNode(run, selection.id);
+            selectionNodeId = selectionNode?.id;
+            if (!selectionNode) {
+                errors.push(error("commit-selection-node-missing", `Selection ${selection.id} has no state node`, { details: { selectionId: selection.id, candidateId: selection.candidateId } }, now));
+            }
+            else if (selectionNode.kind !== "candidate" || selectionNode.status !== "verified") {
+                errors.push(error("commit-selection-not-verified", `Selection ${selection.id} is not a verified candidate selection`, {
+                    nodeId: selectionNode.id,
+                    details: { selectionId: selection.id, status: selectionNode.status, kind: selectionNode.kind },
+                }, now));
+            }
+            if (!selection.scoreId) {
+                errors.push(error("commit-candidate-unscored", `Selection ${selection.id} has no score evidence`, { details: { selectionId: selection.id, candidateId: selection.candidateId } }, now));
+            }
+        }
+    }
+    // Candidate pass.
+    if (candidateId) {
+        const candidate = findCandidate(run, candidateId);
+        if (!candidate) {
+            errors.push(error("commit-candidate-not-found", `Commit candidate not found: ${candidateId}`, { details: { candidateId } }, now));
+        }
+        else {
+            if (candidate.status === "rejected" || candidate.status === "failed") {
+                errors.push(error("commit-candidate-not-selectable", `Candidate ${candidateId} is ${candidate.status}`, { details: { candidateId, status: candidate.status } }, now));
+            }
+            if (!candidate.scores.length) {
+                errors.push(error("commit-candidate-unscored", `Candidate ${candidateId} has no score evidence`, { details: { candidateId } }, now));
+            }
+            if (candidate.status !== "verified") {
+                errors.push(error("commit-candidate-not-verified", `Candidate ${candidateId} is not verifier-gated`, { details: { candidateId, status: candidate.status } }, now));
+            }
+            const selection = selectionId ? findSelection(run, selectionId) : latestSelectionForCandidate(run, candidateId);
+            if (!selection) {
+                errors.push(error("commit-candidate-selection-missing", `Candidate ${candidateId} has no verified selection`, { details: { candidateId } }, now));
+            }
+            else {
+                selectionId = selection.id;
+                const linked = selection.verifierNodeId || candidate.verifierNodeId;
+                if (verifierNodeId && linked && verifierNodeId !== linked) {
+                    errors.push(error("commit-verifier-linkage-mismatch", `Requested verifier ${verifierNodeId} is not linked to candidate ${candidateId}`, {
+                        details: { requestedVerifierNodeId: verifierNodeId, linkedVerifierNodeId: linked },
+                    }, now));
+                }
+                else {
+                    verifierNodeId = verifierNodeId || linked;
+                }
+                const selectionNode = findSelectionNode(run, selection.id);
+                selectionNodeId = selectionNode?.id;
+                if (!selectionNode || selectionNode.status !== "verified") {
+                    errors.push(error("commit-selection-not-verified", `Candidate ${candidateId} selection ${selection.id} is not verified`, {
+                        nodeId: selectionNode?.id,
+                        details: { candidateId, selectionId: selection.id, status: selectionNode?.status || "missing" },
+                    }, now));
+                }
+                if (!selection.scoreId) {
+                    errors.push(error("commit-candidate-unscored", `Candidate ${candidateId} selection ${selection.id} has no score evidence`, { details: { candidateId, selectionId: selection.id } }, now));
+                }
+            }
+        }
+    }
+    if (!verifierNodeId) {
+        errors.push(error("commit-verifier-required", "Verifier-gated commit requires --verifier, --candidate, or --selection", {
+            details: { hint: "Use --allow-unverified-checkpoint to write a non-gated checkpoint." },
+        }, now));
+    }
+    const verifierNode = verifierNodeId ? findNode(run, verifierNodeId) : undefined;
+    if (verifierNodeId && !verifierNode) {
+        errors.push(error("commit-verifier-not-found", `Verifier node not found: ${verifierNodeId}`, { details: { verifierNodeId } }, now));
+    }
+    if (verifierNode) {
+        groundVerifierEvidence(run, verifierNode, errors, deps, now);
+    }
+    // Acceptance rationale: explains WHY this commit was accepted. Only for a
+    // commit that resolved to BOTH a candidate and a selection (the higher-stakes
+    // gate). Prefer the selection's own rationale (built at selection time), else
+    // reconstruct from the resolved parts. A verifier-gated commit that cannot
+    // explain its acceptance fails closed with commit-rationale-incomplete —
+    // byte-behavior port of the old build's buildCommitRationale.
+    const acceptanceRationale = buildCommitRationale(run, { candidateId, selectionId, verifierNodeId, errors }, verifierNode, now);
+    return {
+        verifierGated: true,
+        verifierNodeId,
+        candidateId,
+        selectionId,
+        selectionNodeId,
+        evidence: verifierNode?.evidence || [],
+        errors,
+        acceptanceRationale,
+        metadata: { ...metadata, verifierNodeId, candidateId, selectionId, selectionNodeId },
+    };
+}
+function buildCommitRationale(run, resolution, verifierNode, now) {
+    const { candidateId, selectionId, verifierNodeId, errors } = resolution;
+    if (!candidateId || !selectionId)
+        return undefined;
+    const candidate = findCandidate(run, candidateId);
+    const selection = findSelection(run, selectionId);
+    const rationale = selection?.acceptanceRationale || buildAcceptanceRationale({
+        selectedCandidateId: candidateId,
+        scoreId: selection?.scoreId,
+        verifierNodeId,
+        evidenceCount: verifierNode?.evidence.length || 0,
+        sandboxProfileId: sandboxProfileForCandidate(run, candidate),
+        workerId: candidate?.workerId,
+        commitGateResult: "passed",
+    });
+    for (const failure of validateAcceptanceRationale(rationale)) {
+        errors.push(error("commit-rationale-incomplete", `Verifier-gated commit cannot explain acceptance: ${failure}`, {
+            details: { candidateId, selectionId, verifierNodeId },
+        }, now));
+    }
+    return rationale;
+}
+function groundVerifierEvidence(run, verifierNode, errors, deps, now) {
+    if (verifierNode.kind !== "verifier") {
+        errors.push(error("commit-verifier-wrong-kind", `Node ${verifierNode.id} is not a verifier node`, { nodeId: verifierNode.id, details: { verifierNodeId: verifierNode.id, kind: verifierNode.kind } }, now));
+    }
+    if (verifierNode.status !== "verified") {
+        errors.push(error("commit-verifier-not-verified", `Verifier node ${verifierNode.id} is ${verifierNode.status}`, { nodeId: verifierNode.id, details: { verifierNodeId: verifierNode.id, status: verifierNode.status } }, now));
+    }
+    const captureWarning = emptyCaptureWarning(deps.backingResult);
+    if (captureWarning) {
+        errors.push(error("commit-rationale-empty-capture", `Verifier node ${verifierNode.id} cannot back a commit: ${captureWarning}`, {
+            nodeId: verifierNode.id,
+            details: { verifierNodeId: verifierNode.id, reason: captureWarning },
+        }, now));
+    }
+    if (!verifierNode.evidence.length) {
+        errors.push(error("commit-verifier-missing-evidence", `Verifier node ${verifierNode.id} has no evidence`, { nodeId: verifierNode.id, details: { verifierNodeId: verifierNode.id } }, now));
+    }
+    else if (verifierNodeRequiresEvidence(deps.taskRequiresEvidence)) {
+        const locators = verifierNode.evidence.map(evidenceLocatorString).filter(Boolean);
+        if (!(0, evidence_grounding_1.hasGroundedEvidence)(locators)) {
+            errors.push(error("commit-verifier-evidence-ungrounded", `Verifier node ${verifierNode.id} evidence is not grounded (needs a path-like locator, URL, or namespace:value token)`, {
+                nodeId: verifierNode.id,
+                details: { verifierNodeId: verifierNode.id, evidence: locators },
+            }, now));
+        }
+        if (deps.unresolvedFileEvidence) {
+            const unresolved = deps.unresolvedFileEvidence(locators);
+            if (unresolved.length) {
+                errors.push(error("commit-verifier-evidence-unresolvable", `Verifier node ${verifierNode.id} cites file evidence that does not resolve on disk: ${unresolved.join(", ")}`, {
+                    nodeId: verifierNode.id,
+                    details: { verifierNodeId: verifierNode.id, unresolved },
+                }, now));
+            }
+        }
+    }
+}
+/** Deterministic commit id: position in the run's append-only commit log
+ *  (1-based), 4 digits. */
+function formatCommitId(seq) {
+    return `state-${String(seq).padStart(4, "0")}`;
+}
+/** Deterministic blocked-commit node id sequence: counts the
+ *  commit-gate-failed nodes already recorded on the run. */
+function gateFailureSeq(run) {
+    const marker = ":commit-gate-failed:";
+    const seq = (run.nodes || []).filter((n) => n.id.includes(marker)).length + 1;
+    return String(seq).padStart(4, "0");
+}

package/dist/{pipeline-contract.js → core/pipeline/contract.js}

@@ -1,8 +1,20 @@
 "use strict";
+// core/pipeline/contract.ts — DEFAULT_PIPELINE_CONTRACT_ID,
+// createDefaultPipelineContract.
+//
+// MILESTONE 6+7 (combined; see v2/PLAN.md Open risk 10). Byte-exact port
+// of the old build's src/pipeline-contract.ts. Pure data.
+//
+// Evidence: SPEC/pipeline-run.md "Default contract — src/pipeline-
+// contract.ts", "Default contract stage table (byte facts a rebuild must
+// keep)".
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_PIPELINE_CONTRACT_ID = void 0;
 exports.createDefaultPipelineContract = createDefaultPipelineContract;
 exports.DEFAULT_PIPELINE_CONTRACT_ID = "cw.pipeline.default";
+/** The default `plan -> dispatch -> result -> verify -> commit -> report`
+ *  contract. Stage accept rules are byte-exact to SPEC/pipeline-run.md's
+ *  "Default contract stage table". */
 function createDefaultPipelineContract() {
     return {
         schemaVersion: 1,
@@ -15,7 +27,7 @@ function createDefaultPipelineContract() {
                 acceptedInputKinds: ["input"],
                 acceptedInputStatuses: ["pending", "completed"],
                 producedOutputKind: "task",
-                requiredArtifacts: ["state"]
+                requiredArtifacts: ["state"],
             },
             {
                 id: "dispatch",
@@ -23,7 +35,7 @@ function createDefaultPipelineContract() {
                 acceptedInputKinds: ["task"],
                 acceptedInputStatuses: ["pending"],
                 producedOutputKind: "dispatch",
-                requiredArtifacts: ["task"]
+                requiredArtifacts: ["task"],
             },
             {
                 id: "result",
@@ -31,7 +43,7 @@ function createDefaultPipelineContract() {
                 acceptedInputKinds: ["dispatch"],
                 acceptedInputStatuses: ["running", "completed"],
                 producedOutputKind: "result",
-                requiredArtifacts: ["result"]
+                requiredArtifacts: ["result"],
             },
             {
                 id: "verify",
@@ -39,7 +51,7 @@ function createDefaultPipelineContract() {
                 acceptedInputKinds: ["result", "verifier"],
                 acceptedInputStatuses: ["completed", "verified"],
                 producedOutputKind: "verifier",
-                requiredEvidence: ["cw:result"]
+                requiredEvidence: ["cw:result"],
             },
             {
                 id: "commit",
@@ -47,11 +59,7 @@ function createDefaultPipelineContract() {
                 acceptedInputKinds: ["verifier", "commit"],
                 acceptedInputStatuses: ["verified"],
                 producedOutputKind: "commit",
-                verifierGate: {
-                    required: true,
-                    acceptedStatuses: ["verified"],
-                    requiredEvidence: true
-                }
+                verifierGate: { required: true, acceptedStatuses: ["verified"], requiredEvidence: true },
             },
             {
                 id: "report",
@@ -59,34 +67,13 @@ function createDefaultPipelineContract() {
                 acceptedInputKinds: ["commit", "result", "verifier"],
                 acceptedInputStatuses: ["committed", "completed", "verified"],
                 producedOutputKind: "report",
-                requiredArtifacts: ["report"]
-            }
+                requiredArtifacts: ["report"],
+            },
         ],
-        inputSchema: {
-            type: "object"
-        },
-        outputSchema: {
-            type: "object"
-        },
-        artifactPolicy: {
-            root: ".cw/runs/<run-id>",
-            requireReadablePaths: true
-        },
-        evidencePolicy: {
-            highPriorityRequiresEvidence: true
-        },
-        failurePolicy: {
-            preserveFailureNodes: true,
-            retryableByDefault: false
-        },
-        commitPolicy: {
-            requiresVerifierGate: true,
-            acceptedVerifierStatuses: ["verified"]
-        },
-        compatibility: {
-            minSchemaVersion: 1,
-            maxSchemaVersion: 1,
-            notes: "New optional fields may be added without breaking existing run state."
-        }
+        artifactPolicy: { root: ".cw/runs/<run-id>", requireReadablePaths: true },
+        evidencePolicy: { highPriorityRequiresEvidence: true },
+        failurePolicy: { preserveFailureNodes: true, retryableByDefault: false },
+        commitPolicy: { requiresVerifierGate: true, acceptedVerifierStatuses: ["verified"] },
+        compatibility: { minSchemaVersion: 1, maxSchemaVersion: 1 },
     };
 }

package/dist/core/pipeline/dispatch.js

@@ -0,0 +1,103 @@
+"use strict";
+// core/pipeline/dispatch.ts — nextDispatchTasks, firstRunnablePhase,
+// updatePhaseStatuses, formatDispatchTask, dispatch-id formatting.
+//
+// MILESTONE 6+7 (combined). Byte-exact port of the PURE parts of the old
+// build's src/dispatch.ts (the decision half — worker-scope allocation,
+// manifest file writes, and multi-agent attachment are shell-side, see
+// shell/worker-isolation.ts and shell/drive.ts).
+//
+// Evidence: SPEC/pipeline-run.md "Dispatch — src/dispatch.ts".
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.firstRunnablePhase = firstRunnablePhase;
+exports.updatePhaseStatuses = updatePhaseStatuses;
+exports.formatDispatchTask = formatDispatchTask;
+exports.nextDispatchTasks = nextDispatchTasks;
+exports.formatDispatchId = formatDispatchId;
+/** `firstRunnablePhase(run)` — walks phases in order; a phase with a
+ *  running task, or one with a pending task, is the runnable phase; a
+ *  phase not fully completed and with nothing pending/running blocks
+ *  everything after it (`null`). */
+function firstRunnablePhase(run) {
+    for (const phase of run.phases) {
+        const phaseTasks = run.tasks.filter((task) => phase.taskIds.includes(task.id));
+        if (phaseTasks.some((task) => task.status === "running"))
+            return phase;
+        if (phaseTasks.some((task) => task.status === "pending"))
+            return phase;
+        if (!phaseTasks.every((task) => task.status === "completed"))
+            return null;
+    }
+    return null;
+}
+/** `updatePhaseStatuses(run)` — completed when every task is completed,
+ *  running when some task is running or completed, else pending. */
+function updatePhaseStatuses(run) {
+    for (const phase of run.phases) {
+        const phaseTasks = run.tasks.filter((task) => phase.taskIds.includes(task.id));
+        if (phaseTasks.length > 0 && phaseTasks.every((task) => task.status === "completed")) {
+            phase.status = "completed";
+        }
+        else if (phaseTasks.some((task) => task.status === "running" || task.status === "completed")) {
+            phase.status = "running";
+        }
+        else {
+            phase.status = "pending";
+        }
+    }
+}
+/** `formatDispatchTask(task)` — projection with workerDir/workerResultPath
+ *  derived from workerManifestPath. */
+function formatDispatchTask(task) {
+    const workerManifestPath = task.workerManifestPath;
+    return {
+        id: task.id,
+        kind: task.kind,
+        phase: task.phase,
+        status: task.status,
+        taskPath: task.taskPath,
+        prompt: task.prompt,
+        workerId: task.workerId,
+        workerManifestPath,
+        workerDir: workerManifestPath ? dirnamePosix(workerManifestPath) : undefined,
+        workerResultPath: task.workerId && workerManifestPath ? joinPosix(dirnamePosix(workerManifestPath), "result.md") : undefined,
+        sandboxProfileId: task.sandboxProfileId,
+        sandboxPolicy: task.sandboxPolicy,
+        backendId: task.backendId,
+        backendAttestation: task.backendAttestation,
+        multiAgent: task.multiAgent,
+    };
+}
+/** `nextDispatchTasks(run, limit?)` — pending tasks of the first runnable
+ *  phase, capped, mapped through formatDispatchTask. */
+function nextDispatchTasks(run, limit) {
+    const runnablePhase = firstRunnablePhase(run);
+    if (!runnablePhase)
+        return [];
+    const max = Number(limit || run.workflow.limits.maxConcurrentAgents || 4);
+    const runnableTaskIds = new Set(runnablePhase.taskIds);
+    return run.tasks
+        .filter((task) => task.status === "pending" && runnableTaskIds.has(task.id))
+        .slice(0, max)
+        .map(formatDispatchTask);
+}
+/** Dispatch id: `dispatch-<STAMP>-<seq>` (STAMP = ISO with `-`/`:`
+ *  stripped, sub-second cut); `CW_DETERMINISTIC_RUN_IDS` ⇒
+ *  `dispatch-<seq>`. `seq` is the 4-digit per-run position. */
+function formatDispatchId(seq, now, deterministic) {
+    const padded = String(seq).padStart(4, "0");
+    if (deterministic)
+        return `dispatch-${padded}`;
+    const stamp = now.replace(/[-:]/g, "").replace(/\..+/, "Z");
+    return `dispatch-${stamp}-${padded}`;
+}
+// Node path helpers kept dependency-free (no "node:path" import — this
+// module stays pure per the core/shell split) since workerManifestPath
+// values are always POSIX-style disk paths produced by shell/.
+function dirnamePosix(p) {
+    const idx = p.lastIndexOf("/");
+    return idx >= 0 ? p.slice(0, idx) : p;
+}
+function joinPosix(a, b) {
+    return a.endsWith("/") ? `${a}${b}` : `${a}/${b}`;
+}