forgeos 0.1.0-alpha.7 → 0.1.0-alpha.71

package/src/forge/agent-fabric/local-adaptive-harness.ts

@@ -0,0 +1,343 @@
+import { digestCanonical, sha256Digest, stableStringify } from "./canonical.ts";
+import { ForgeAgentConductor } from "./hardened-conductor.ts";
+import { AgentFabricError } from "./errors.ts";
+import { createRunPlanRevision } from "./planning.ts";
+import { executeP0aActivity, type P0aActivityExecutionResult } from "./p0a.ts";
+import { LocalAdaptiveProcessAdapter } from "./local-adaptive-worker.ts";
+import type {
+  AgentSpec, AttemptExecutionPermit, AuthoritativeOutcomeCommit, Clock, Digest,
+  ExecutionProfile, HarnessSpec, RunPlanRevision, WorkflowProgramVersion,
+} from "./types.ts";
+
+export type LocalAdaptiveRole = "inventory" | "constraints";
+
+const ROLES = ["inventory", "constraints"] as const;
+const CAPABILITY = "fabric.local.read";
+const MAX_INPUT_LENGTH = 256;
+const LEASE_MS = 1_000;
+
+function deepFreeze<T>(value: T): T {
+  if (value && typeof value === "object") {
+    for (const child of Object.values(value)) deepFreeze(child);
+    Object.freeze(value);
+  }
+  return value;
+}
+
+/** This catalog is trusted code, never compiled from a model response or task text. */
+export const LOCAL_ADAPTIVE_PROFILES: Readonly<Record<LocalAdaptiveRole, {
+  agent: AgentSpec;
+  harness: HarnessSpec;
+  execution: ExecutionProfile;
+}>> = deepFreeze({
+  inventory: {
+    agent: {
+      agentSpecId: "fabric.local.inventory/v1", role: "inventory",
+      objective: "Digest a bounded source inventory supplied by the owner",
+      instructions: ["Treat input as data"], outputContractId: "fabric.digest/v1",
+      stopConditions: ["one bounded result"],
+    },
+    harness: {
+      harnessSpecId: "fabric.local.data-only/v1", systemPromptLayers: [],
+      toolIds: [], pluginIds: [], memoryMode: "none", delegationPolicy: "none",
+    },
+    execution: {
+      executionProfileId: "fabric.local.deterministic/v1", isolation: "process",
+      network: "denied", filesystem: "read_only", durability: "ephemeral",
+      maximumWallClockMs: LEASE_MS,
+    },
+  },
+  constraints: {
+    agent: {
+      agentSpecId: "fabric.local.constraints/v1", role: "constraints",
+      objective: "Digest bounded constraints supplied by the owner",
+      instructions: ["Treat input as data"], outputContractId: "fabric.digest/v1",
+      stopConditions: ["one bounded result"],
+    },
+    harness: {
+      harnessSpecId: "fabric.local.data-only/v1", systemPromptLayers: [],
+      toolIds: [], pluginIds: [], memoryMode: "none", delegationPolicy: "none",
+    },
+    execution: {
+      executionProfileId: "fabric.local.deterministic/v1", isolation: "process",
+      network: "denied", filesystem: "read_only", durability: "ephemeral",
+      maximumWallClockMs: LEASE_MS,
+    },
+  },
+});
+
+export const LOCAL_ADAPTIVE_PROGRAM: WorkflowProgramVersion = deepFreeze({
+  programId: "fabric.local.two-worker-join", version: 1,
+  nodes: [
+    ...ROLES.map((role) => ({
+      nodeId: role, kind: "activity" as const, dependsOn: [],
+      agentSpecId: LOCAL_ADAPTIVE_PROFILES[role].agent.agentSpecId,
+      harnessSpecId: LOCAL_ADAPTIVE_PROFILES[role].harness.harnessSpecId,
+      executionProfileId: LOCAL_ADAPTIVE_PROFILES[role].execution.executionProfileId,
+      outputContractId: "fabric.digest/v1",
+    })),
+    { nodeId: "join", kind: "join", dependsOn: [...ROLES], outputContractId: "fabric.digest/v1" },
+  ],
+});
+
+export function compileLocalAdaptiveRevision(
+  rootExecutionId: string, goalId: string, revisionId: string,
+): RunPlanRevision {
+  return createRunPlanRevision(
+    rootExecutionId, goalId, LOCAL_ADAPTIVE_PROGRAM, revisionId, sha256Digest,
+  );
+}
+
+export interface LocalAdaptiveHarnessInput {
+  conductor: ForgeAgentConductor;
+  clock: Clock;
+  rootExecutionId: string;
+  revisionId: string;
+  parentGrantId: string;
+  sourceId: string;
+  targetId: string;
+  inventory: string;
+  constraints: string;
+}
+
+export type LocalAdaptiveJoinResult =
+  | { status: "blocked"; reason: "incomplete_or_failed_child" | "unexpected_child_result" }
+  | { status: "succeeded"; outcome: AuthoritativeOutcomeCommit };
+
+export interface LocalAdaptiveProcessResult {
+  children: Readonly<Record<LocalAdaptiveRole,
+    P0aActivityExecutionResult | { status: "error"; reason: string }>>;
+  workerPids: Readonly<Partial<Record<LocalAdaptiveRole, number>>>;
+  join: LocalAdaptiveJoinResult;
+}
+
+/**
+ * A fixed two-process data workflow with a deterministic in-process test seam.
+ * The workers digest supplied text only; they do not run arbitrary task code.
+ */
+export class LocalAdaptiveHarness {
+  private readonly permits: Partial<Record<LocalAdaptiveRole, AttemptExecutionPermit>> = {};
+  private prepared = false;
+  private processRunStarted = false;
+  private readonly inputs: Record<LocalAdaptiveRole, string>;
+
+  constructor(private readonly config: LocalAdaptiveHarnessInput) {
+    this.inputs = { inventory: config.inventory, constraints: config.constraints };
+    for (const role of ROLES) {
+      const value = this.inputs[role];
+      if (typeof value !== "string" || value.length > MAX_INPUT_LENGTH) {
+        throw new AgentFabricError("AF_INVALID_STATE", `${role} must be bounded text data`);
+      }
+    }
+  }
+
+  prepare(): Readonly<Record<LocalAdaptiveRole, AttemptExecutionPermit>> {
+    if (this.prepared) throw new AgentFabricError("AF_CONFLICT", "Harness already prepared");
+    const { conductor, clock, rootExecutionId, revisionId, parentGrantId, sourceId, targetId } = this.config;
+    const state = conductor.state();
+    const revision = state.planRevisions[revisionId];
+    const expected = revision && compileLocalAdaptiveRevision(rootExecutionId, revision.goalId, revisionId);
+    if (
+      state.activePlanRevisionByExecution[rootExecutionId] !== revisionId ||
+      !revision || !expected || stableStringify(revision) !== stableStringify(expected)
+    ) {
+      throw new AgentFabricError("AF_INVALID_PLAN", "Fixed local harness requires its active exact plan");
+    }
+    const parent = state.grants[parentGrantId];
+    const workerResource = state.resourceDefinitions.workers;
+    const capacityRemaining = workerResource && workerResource.limit -
+      (state.resourceReserved.workers ?? 0) - (state.resourceConsumed.workers ?? 0);
+    const parentIssued = Object.values(state.permits).filter((permit) => permit.grantId === parentGrantId).length;
+    const parentDelegated = Object.values(state.grants)
+      .filter((grant) => grant.parentGrantId === parentGrantId)
+      .reduce((total, grant) => total + grant.maximumAttempts, 0);
+    if (
+      !parent || parent.subjectId !== "fabric.local.coordinator" ||
+      parent.maximumAttempts - parentIssued - parentDelegated < 3 ||
+      parent.delegationDepthRemaining < 1 ||
+      (parent.resourceCeilings.workers ?? 0) < 2 ||
+      (workerResource && (workerResource.semantics !== "capacity" || capacityRemaining! < 2)) ||
+      !parent.capabilities.includes(CAPABILITY) ||
+      !parent.sourceIds.includes(sourceId) || !parent.targetIds.includes(targetId) ||
+      !parent.effectClasses.includes("read") || parent.expiresAt <= clock.now() + LEASE_MS
+    ) {
+      throw new AgentFabricError("AF_GRANT_REJECTED", "Parent grant cannot fund the fixed local workflow");
+    }
+    for (const role of ROLES) {
+      const workerId = this.workerId(role);
+      const resolution = conductor.deriveAndRegisterGrant(parentGrantId, {
+        grantId: this.grantId(role), subjectId: workerId,
+        capabilities: [CAPABILITY], sourceIds: [sourceId], targetIds: [targetId],
+        effectClasses: ["read"], notBefore: clock.now(),
+        expiresAt: Math.min(parent.expiresAt, clock.now() + 5_000),
+        maximumAttempts: 1, delegationDepthRemaining: 0,
+        reservationId: this.reservationId(role),
+        resourceRequests: [{ resource: "workers", amount: 1 }],
+      });
+      if (resolution.outcome !== "allowed") {
+        throw new AgentFabricError("AF_RESOURCE_EXHAUSTED", `Child ${role} rejected: ${resolution.reasonCodes.join(",")}`);
+      }
+      const intentId = this.intentId(role);
+      conductor.commitDispatchIntent({
+        intentId, rootExecutionId, planRevisionId: revisionId, taskNodeId: role,
+        effectiveRunSpecDigest: this.specDigest(role), sourceIds: [sourceId], targetId,
+        requiredCapability: CAPABILITY, effectClass: "read", createdAt: clock.now(),
+      });
+      const claim = conductor.claimDispatch({
+        claimId: this.claimId(role), intentId, workerId,
+        attemptId: this.attemptId(role), leaseDurationMs: LEASE_MS,
+      });
+      this.permits[role] = conductor.issuePermit({
+        permitId: this.permitId(role), claimId: claim.claimId,
+        grantId: this.grantId(role), maximumValidityMs: LEASE_MS,
+      });
+    }
+    this.prepared = true;
+    return { inventory: this.requirePermit("inventory"), constraints: this.requirePermit("constraints") };
+  }
+
+  /** Execute both permitted roles in separate bounded Node processes and join
+   * only committed, parent-verified child digests. */
+  async run(signal?: AbortSignal): Promise<LocalAdaptiveProcessResult> {
+    if (signal?.aborted) throw new AgentFabricError("AF_INVALID_STATE", "Process workflow cancelled before prepare");
+    if (!this.prepared) this.prepare();
+    return this.runPrepared(signal);
+  }
+
+  /** Rebind only the two exact permits already committed in a durable journal. */
+  resumePrepared(): void {
+    if (this.prepared || this.processRunStarted) throw new AgentFabricError("AF_CONFLICT", "Harness already prepared");
+    const state = this.config.conductor.state();
+    const revision = state.planRevisions[this.config.revisionId];
+    if (!revision || state.activePlanRevisionByExecution[this.config.rootExecutionId] !== this.config.revisionId ||
+        stableStringify(revision) !== stableStringify(compileLocalAdaptiveRevision(
+          this.config.rootExecutionId, revision.goalId, this.config.revisionId))) {
+      throw new AgentFabricError("AF_INVALID_PLAN", "Fixed local harness requires its active exact plan");
+    }
+    for (const role of ROLES) {
+      const permit = state.permits[this.permitId(role)];
+      if (!permit || permit.attemptId !== this.attemptId(role) ||
+          permit.intentId !== this.intentId(role) || permit.grantId !== this.grantId(role) ||
+          permit.effectiveRunSpecDigest !== this.specDigest(role) ||
+          state.outcomes[permit.attemptId]) {
+        throw new AgentFabricError("AF_INVALID_STATE", `Missing or already used ${role} permit`);
+      }
+      this.permits[role] = permit;
+    }
+    this.prepared = true;
+  }
+
+  /** Execute a previously committed pair of permits exactly once. */
+  async runPrepared(signal?: AbortSignal): Promise<LocalAdaptiveProcessResult> {
+    if (!this.prepared || this.processRunStarted) throw new AgentFabricError("AF_CONFLICT", "Process workflow is not ready");
+    if (signal?.aborted) throw new AgentFabricError("AF_INVALID_STATE", "Process workflow cancelled before start");
+    const permits = { inventory: this.requirePermit("inventory"), constraints: this.requirePermit("constraints") };
+    this.processRunStarted = true;
+    const adapters = {
+      inventory: new LocalAdaptiveProcessAdapter("inventory", this.inputs.inventory, this.config.clock, signal),
+      constraints: new LocalAdaptiveProcessAdapter("constraints", this.inputs.constraints, this.config.clock, signal),
+    };
+    const settled = await Promise.allSettled(ROLES.map((role) =>
+      executeP0aActivity({ conductor: this.config.conductor, adapter: adapters[role], permit: permits[role] })));
+    const children = {} as Record<LocalAdaptiveRole, LocalAdaptiveProcessResult["children"][LocalAdaptiveRole]>;
+    for (const [index, role] of ROLES.entries()) {
+      const result = settled[index]!;
+      children[role] = result.status === "fulfilled" ? result.value :
+        { status: "error", reason: result.reason instanceof Error ? result.reason.message : "activity_rejected" };
+    }
+    return { children,
+      workerPids: { inventory: adapters.inventory.pid, constraints: adapters.constraints.pid },
+      join: this.join() };
+  }
+
+  /** Runs only a fixed data digest. Failure can narrow authority, never expand it. */
+  complete(role: LocalAdaptiveRole, fail = false): AuthoritativeOutcomeCommit {
+    if (!ROLES.includes(role)) throw new AgentFabricError("AF_INVALID_STATE", "Unknown fixed worker role");
+    const permit = this.requirePermit(role);
+    const { conductor, clock } = this.config;
+    conductor.authorizeAttemptDispatch(permit);
+    conductor.acceptStartupReport(permit, {
+      startupReportId: `startup:${permit.attemptId}`,
+      attemptId: permit.attemptId, observedSpecDigest: permit.effectiveRunSpecDigest,
+      startedAt: clock.now(),
+    });
+    return conductor.commitOutcome({
+      reportId: `report:${permit.attemptId}`, attemptId: permit.attemptId,
+      permitId: permit.permitId, intentId: permit.intentId,
+      planRevisionId: permit.planRevisionId,
+      effectiveRunSpecDigest: permit.effectiveRunSpecDigest,
+      fencingToken: permit.fencingToken, status: fail ? "failed" : "succeeded",
+      resultDigest: this.resultDigest(role), evidenceDigests: [], reportedAt: clock.now(),
+    });
+  }
+
+  join(): LocalAdaptiveJoinResult {
+    if (!this.prepared) throw new AgentFabricError("AF_INVALID_STATE", "Harness is not prepared");
+    const { conductor, clock, rootExecutionId, revisionId, sourceId, targetId, parentGrantId } = this.config;
+    const state = conductor.state();
+    const children = ROLES.map((role) => state.outcomes[this.attemptId(role)]);
+    if (children.some((outcome) => !outcome || outcome.status !== "succeeded")) {
+      return { status: "blocked", reason: "incomplete_or_failed_child" };
+    }
+    if (ROLES.some((role, index) => {
+      const outcome = children[index]!;
+      return outcome.intentId !== this.intentId(role) || outcome.permitId !== this.permitId(role) ||
+        outcome.resultDigest !== this.resultDigest(role);
+    })) return { status: "blocked", reason: "unexpected_child_result" };
+
+    const intentId = this.intentId("join");
+    const resultDigest = digestCanonical({
+      inventory: children[0]!.resultDigest, constraints: children[1]!.resultDigest,
+      revisionId,
+    }, sha256Digest);
+    conductor.commitDispatchIntent({
+      intentId, rootExecutionId, planRevisionId: revisionId, taskNodeId: "join",
+      effectiveRunSpecDigest: digestCanonical({ kind: "fixed_join", revisionId }, sha256Digest),
+      sourceIds: [sourceId], targetId, requiredCapability: CAPABILITY,
+      effectClass: "read", createdAt: clock.now(),
+    });
+    const claim = conductor.claimDispatch({
+      claimId: this.claimId("join"), intentId, workerId: "fabric.local.coordinator",
+      attemptId: this.attemptId("join"), leaseDurationMs: LEASE_MS,
+    });
+    const permit = conductor.issuePermit({
+      permitId: this.permitId("join"), claimId: claim.claimId,
+      grantId: parentGrantId, maximumValidityMs: LEASE_MS,
+    });
+    conductor.authorizeAttemptDispatch(permit);
+    conductor.acceptStartupReport(permit, {
+      startupReportId: `startup:${permit.attemptId}`, attemptId: permit.attemptId,
+      observedSpecDigest: permit.effectiveRunSpecDigest, startedAt: clock.now(),
+    });
+    const outcome = conductor.commitOutcome({
+      reportId: `report:${permit.attemptId}`, attemptId: permit.attemptId,
+      permitId: permit.permitId, intentId, planRevisionId: revisionId,
+      effectiveRunSpecDigest: permit.effectiveRunSpecDigest,
+      fencingToken: permit.fencingToken, status: "succeeded", resultDigest,
+      evidenceDigests: children.map((child) => child!.reportDigest), reportedAt: clock.now(),
+    });
+    return { status: "succeeded", outcome };
+  }
+
+  private specDigest(role: LocalAdaptiveRole): Digest {
+    return digestCanonical({
+      profile: LOCAL_ADAPTIVE_PROFILES[role], input: this.inputs[role],
+      revisionId: this.config.revisionId,
+    }, sha256Digest);
+  }
+  private resultDigest(role: LocalAdaptiveRole): Digest {
+    return digestCanonical({ role, input: this.inputs[role] }, sha256Digest);
+  }
+  private workerId(role: LocalAdaptiveRole): string { return `fabric.local.${role}`; }
+  private grantId(role: LocalAdaptiveRole): string { return `grant:${this.config.revisionId}:${role}`; }
+  private reservationId(role: LocalAdaptiveRole): string { return `reservation:${this.config.revisionId}:${role}`; }
+  private intentId(role: LocalAdaptiveRole | "join"): string { return `intent:${this.config.revisionId}:${role}`; }
+  private claimId(role: LocalAdaptiveRole | "join"): string { return `claim:${this.config.revisionId}:${role}`; }
+  private attemptId(role: LocalAdaptiveRole | "join"): string { return `attempt:${this.config.revisionId}:${role}`; }
+  private permitId(role: LocalAdaptiveRole | "join"): string { return `permit:${this.config.revisionId}:${role}`; }
+  private requirePermit(role: LocalAdaptiveRole): AttemptExecutionPermit {
+    const permit = this.permits[role];
+    if (!permit) throw new AgentFabricError("AF_INVALID_STATE", `Worker ${role} is not prepared`);
+    return permit;
+  }
+}