cool-workflow 0.1.98 → 0.2.0

package/dist/worker-accept/verifier-completion.js

@@ -1,73 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.runWorkerVerify = runWorkerVerify;
-exports.recordWorkerCompletion = recordWorkerCompletion;
-const pipeline_runner_1 = require("../pipeline-runner");
-const telemetry_attestation_1 = require("../telemetry-attestation");
-const execution_backend_1 = require("../execution-backend");
-/** Step 5 — runVerify: drive the verify pipeline stage off the accepted result node
- *  and record the verifier node id on the task + accept context. */
-function runWorkerVerify(accept) {
-    const { run, workerId, scope, task, parsedResult, destination, resultNode } = accept;
-    const verifierResult = (0, pipeline_runner_1.createPipelineRunner)({ persist: false }).runPipelineStage(run, "verify", resultNode.id, {
-        outputNodeId: `${run.id}:verifier:${task.id}`,
-        outputStatus: "verified",
-        loopStage: "adjust",
-        outputs: { accepted: true, workerId },
-        artifacts: [{ id: "result", kind: "markdown", path: destination }],
-        evidence: resultNode.evidence.length
-            ? resultNode.evidence
-            : [{ id: "result:summary", source: "summary", summary: parsedResult.summary }],
-        metadata: { taskId: task.id, workerId, resultNodeId: resultNode.id, sandboxProfileId: scope.sandboxProfileId }
-    });
-    task.verifierNodeId = verifierResult.outputNodeId;
-    accept.verifierNodeId = verifierResult.outputNodeId;
-    // Carry the verify verdict for the scope-status transition in recordWorkerCompletion.
-    accept.verifierStatus = verifierResult.status;
-}
-/** Step 6 — recordStateNode (worker record): assemble the worker output record +
- *  host-attested usage record, then persist the worker scope with the verify-derived
- *  status, output digest/size, and (when present) usage. */
-function recordWorkerCompletion(accept, delegation, deps) {
-    const { run, workerId, scope, task, absoluteResultPath, rawResult, resultNode, verifierNodeId, verifierStatus, pathAuditId, acceptedAuditId } = accept;
-    const { agentDelegation, telemetry } = delegation;
-    const output = {
-        workerId,
-        taskId: task.id,
-        resultPath: absoluteResultPath,
-        recordedAt: new Date().toISOString(),
-        stateNodeId: resultNode.id,
-        verifierNodeId,
-        auditEventIds: [pathAuditId, acceptedAuditId]
-    };
-    // Host-attested usage rides on the worker record. Recorded when the agent
-    // REPORTED a model OR token usage — `unreported`/absent stays ABSENT (never
-    // backfilled from the operator-chosen CW_AGENT_MODEL, never synthesized).
-    // Track 1: the attestation verdict (`attested`/`unattested`/`absent`) and its
-    // reason ride along, and the token buckets come from the (verified-or-not)
-    // reported usage — CW still never measures them, it records + labels them.
-    const reportedModel = agentDelegation && agentDelegation.model && agentDelegation.model !== "unreported" ? agentDelegation.model : undefined;
-    const usageRecord = agentDelegation && (reportedModel || agentDelegation.reportedUsage)
-        ? {
-            schemaVersion: 1,
-            source: "host-attested",
-            ...(reportedModel ? { model: reportedModel } : {}),
-            ...(0, telemetry_attestation_1.normalizeReportedUsage)(agentDelegation.reportedUsage),
-            attestedAt: new Date().toISOString(),
-            ...(telemetry ? { attestation: telemetry.status, ...(telemetry.reason ? { attestationReason: telemetry.reason } : {}) } : {}),
-            note: "agent-delegation host-attested usage"
-        }
-        : undefined;
-    deps.updateWorkerScope(run, {
-        ...scope,
-        updatedAt: new Date().toISOString(),
-        status: verifierStatus === "advanced" ? "verified" : "completed",
-        resultNodeId: resultNode.id,
-        output,
-        // Output integrity (v0.1.63): SHA256 digest + file size
-        outputDigest: (0, execution_backend_1.sha256)(rawResult),
-        outputSizeBytes: Buffer.byteLength(rawResult, "utf8"),
-        ...(usageRecord ? { usage: usageRecord } : {})
-    });
-    accept.output = output;
-}

package/dist/worker-isolation/helpers.js

@@ -1,51 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.structuredError = structuredError;
-exports.isBoundaryViolation = isBoundaryViolation;
-exports.isStateNodeError = isStateNodeError;
-exports.mergeScopes = mergeScopes;
-exports.unique = unique;
-exports.compactMetadata = compactMetadata;
-exports.countBy = countBy;
-function structuredError(code, message, options = {}) {
-    return {
-        code,
-        message,
-        at: new Date().toISOString(),
-        path: options.path,
-        retryable: options.retryable,
-        details: options.details
-    };
-}
-function isBoundaryViolation(value) {
-    return Boolean(value && typeof value === "object" && "allowedPaths" in value && "message" in value);
-}
-function isStateNodeError(value) {
-    return Boolean(value && typeof value === "object" && "code" in value && "message" in value);
-}
-function mergeScopes(left, right) {
-    const merged = [...left];
-    for (const scope of right) {
-        const index = merged.findIndex((candidate) => candidate.id === scope.id);
-        if (index >= 0)
-            merged[index] = scope;
-        else
-            merged.push(scope);
-    }
-    return merged;
-}
-function unique(values) {
-    return Array.from(new Set(values.filter(Boolean)));
-}
-function compactMetadata(value) {
-    const entries = Object.entries(value).filter(([, entry]) => entry !== undefined);
-    return entries.length ? Object.fromEntries(entries) : undefined;
-}
-function countBy(items, key) {
-    const counts = {};
-    for (const item of items) {
-        const value = key(item);
-        counts[value] = (counts[value] || 0) + 1;
-    }
-    return counts;
-}

package/dist/worker-isolation/paths.js

@@ -1,46 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WORKER_MANIFEST_FILE = exports.WORKER_SCOPE_FILE = void 0;
-exports.manifestPath = manifestPath;
-exports.workerScopePath = workerScopePath;
-exports.workerArtifacts = workerArtifacts;
-exports.createWorkerId = createWorkerId;
-// Path, artifact, and id derivation for worker isolation. Pure functions of a
-// WorkerScope (or run + taskId) — no run-state mutation, no disk I/O. Carved out
-// of worker-isolation.ts following the established router pattern
-// (run-registry/{format,policy}.ts, orchestrator/*-operations.ts).
-//
-// BEHAVIOR-PRESERVING — pure code movement, zero logic change. Re-exported from
-// worker-isolation.ts so the public surface is byte-unchanged.
-const node_path_1 = __importDefault(require("node:path"));
-const state_1 = require("../state");
-exports.WORKER_SCOPE_FILE = "worker.json";
-exports.WORKER_MANIFEST_FILE = "manifest.json";
-function manifestPath(scope) {
-    return node_path_1.default.join(scope.workerDir, exports.WORKER_MANIFEST_FILE);
-}
-function workerScopePath(scope) {
-    return node_path_1.default.join(scope.workerDir, exports.WORKER_SCOPE_FILE);
-}
-function workerArtifacts(scope) {
-    return [
-        { id: "worker", kind: "json", path: workerScopePath(scope) },
-        { id: "worker-manifest", kind: "json", path: manifestPath(scope) },
-        { id: "worker-input", kind: "markdown", path: scope.inputPath }
-    ];
-}
-// Deterministic worker id (v0.1.40 self-audit P2): a wall-clock stamp + Math.random()
-// made every dispatch mint a different id, so audit references were not reproducible
-// across re-runs of the same inputs. The id is now derived from the task plus a
-// per-task sequence (count of worker scopes already allocated for that task + 1),
-// so re-running the same workflow yields byte-identical worker ids while retries of
-// the SAME task still get a fresh, unique id. (workerId is excluded from the
-// snapshot source fingerprint, so this does not change replay digests.)
-function createWorkerId(run, taskId) {
-    const prefix = `worker-${(0, state_1.safeFileName)(taskId)}-`;
-    const seq = (run.workers || []).filter((scope) => scope.id.startsWith(prefix)).length + 1;
-    return `${prefix}${String(seq).padStart(4, "0")}`;
-}