harnery 0.14.0 → 0.15.0

package/dist/core/supervisor/state.js

@@ -0,0 +1,413 @@
+import { randomBytes, randomUUID } from "node:crypto";
+import { chmodSync, closeSync, existsSync, mkdirSync, openSync, readdirSync, readFileSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { hostname } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { assertWorkId, readWorkItem } from "../work/read.js";
+import { normalizeWorkflowSpecialists } from "../workflow/specialists.js";
+export const SUPERVISOR_INTENT_SCHEMA_VERSION = 1;
+const GOAL_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;
+const MAX_TITLE = 200;
+const MAX_INTENT_BYTES = 256 * 1024;
+const FOREIGN_LEASE_STALE_MS = 24 * 60 * 60 * 1_000;
+export function createSupervisor(input) {
+    const coordRoot = resolve(input.coordRoot);
+    assertWorkId(input.rootWorkId);
+    const root = readWorkItem(coordRoot, input.rootWorkId);
+    const id = input.id ?? newSupervisorId();
+    assertSupervisorId(id);
+    const intent = {
+        schema_version: SUPERVISOR_INTENT_SCHEMA_VERSION,
+        id,
+        title: bounded(input.title ?? root.intent.title, "supervisor title", MAX_TITLE),
+        root_work_id: input.rootWorkId,
+        specialists: normalizeWorkflowSpecialists(input.specialists),
+        limits: normalizeLimits(input.limits),
+        automation: normalizeAutomation(input.automation),
+        created_at: new Date().toISOString(),
+    };
+    const path = supervisorIntentPath(coordRoot, id);
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    chmodSync(dirname(path), 0o700);
+    writePrivateJson(path, intent);
+    return readSupervisor(coordRoot, id);
+}
+export function readSupervisor(coordRoot, goalId) {
+    return readSupervisorInternal(coordRoot, goalId, false);
+}
+/** @internal Runner seam; ignores the lease held by this supervisor process. */
+export function readSupervisorIgnoringLease(coordRoot, goalId) {
+    return readSupervisorInternal(coordRoot, goalId, true);
+}
+export function listSupervisors(coordRoot) {
+    const base = join(resolve(coordRoot), ".harnery", "supervisors");
+    if (!existsSync(base))
+        return [];
+    const records = [];
+    for (const name of readdirSync(base)) {
+        if (!GOAL_ID.test(name) || !existsSync(supervisorIntentPath(coordRoot, name)))
+            continue;
+        records.push(readSupervisor(coordRoot, name));
+    }
+    return records.sort((left, right) => right.intent.created_at.localeCompare(left.intent.created_at));
+}
+export function collectSupervisorWork(coordRoot, rootWorkId) {
+    const records = new Map();
+    const visiting = new Set();
+    const visit = (workId) => {
+        if (records.has(workId))
+            return;
+        if (visiting.has(workId))
+            throw new Error(`supervisor work graph contains a cycle at ${workId}`);
+        visiting.add(workId);
+        const record = readWorkItem(coordRoot, workId);
+        for (const dependency of record.intent.dependencies)
+            visit(dependency);
+        visiting.delete(workId);
+        records.set(workId, record);
+    };
+    visit(rootWorkId);
+    return Array.from(records.values());
+}
+export function assertSupervisorId(goalId) {
+    if (!GOAL_ID.test(goalId))
+        throw new Error(`invalid supervisor id ${JSON.stringify(goalId)}`);
+}
+export function newSupervisorId() {
+    return `goal-${new Date().toISOString().replace(/[:.]/g, "-")}-${randomBytes(3).toString("hex")}`;
+}
+/** @internal Runner seam; one exclusive crash-recoverable supervisor lease. */
+export function acquireSupervisorLease(coordRoot, goalId) {
+    readSupervisorIntent(coordRoot, goalId);
+    const path = join(supervisorDir(coordRoot, goalId), "lease.json");
+    const owner = {
+        pid: process.pid,
+        host: hostname(),
+        created_at: new Date().toISOString(),
+        nonce: randomUUID(),
+    };
+    const acquire = () => {
+        try {
+            const fd = openSync(path, "wx", 0o600);
+            try {
+                writeFileSync(fd, `${JSON.stringify(owner)}\n`, "utf8");
+            }
+            finally {
+                closeSync(fd);
+            }
+            chmodSync(path, 0o600);
+            return true;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+            return false;
+        }
+    };
+    if (!acquire()) {
+        const existing = readLease(path);
+        if (existing && leaseIsLive(existing)) {
+            throw new Error(`supervisor ${goalId} is already running under pid ${existing.pid} on ${existing.host}`);
+        }
+        unlinkSync(path);
+        if (!acquire())
+            throw new Error(`supervisor ${goalId} lease raced with another process`);
+    }
+    return () => {
+        try {
+            const existing = readLease(path);
+            if (existing?.nonce === owner.nonce)
+                unlinkSync(path);
+        }
+        catch {
+            // A stale private lease is recoverable by the next explicit run.
+        }
+    };
+}
+function readSupervisorInternal(coordRootRaw, goalId, ignoreLease) {
+    const coordRoot = resolve(coordRootRaw);
+    const intent = readSupervisorIntent(coordRoot, goalId);
+    const work = collectSupervisorWork(coordRoot, intent.root_work_id);
+    return {
+        intent,
+        work,
+        projection: deriveProjection(coordRoot, intent, work, ignoreLease),
+    };
+}
+function deriveProjection(coordRoot, intent, work, ignoreLease) {
+    const root = work.find((record) => record.intent.id === intent.root_work_id);
+    if (!root)
+        throw new Error(`supervisor ${intent.id} root work is missing`);
+    const attemptsUsed = work.reduce((sum, record) => sum + record.projection.attempts_used, 0);
+    const readyWork = work
+        .filter((record) => record.projection.state === "ready")
+        .map((record) => record.intent.id);
+    const resumableWork = work
+        .filter((record) => record.projection.state === "awaiting_approval" &&
+        record.projection.next_action === "resume")
+        .map((record) => record.intent.id);
+    const retryableWork = work
+        .filter((record) => record.projection.state === "blocked" && record.projection.next_action === "retry")
+        .map((record) => record.intent.id);
+    const pendingApproval = work
+        .filter((record) => record.projection.state === "awaiting_approval" &&
+        record.projection.next_action === "resolve_approval")
+        .map((record) => record.intent.id);
+    const reviews = work
+        .filter((record) => record.projection.state === "in_review")
+        .map((record) => record.intent.id);
+    const cancelled = work
+        .filter((record) => record.projection.state === "cancelled")
+        .map((record) => record.intent.id);
+    const terminalBlocked = work
+        .filter((record) => record.projection.state === "blocked" && record.projection.next_action === "none")
+        .map((record) => record.intent.id);
+    const attentionWork = unique([
+        ...pendingApproval,
+        ...(intent.automation.accept_passing_proof ? [] : reviews),
+        ...(intent.automation.resume_approved ? [] : resumableWork),
+        ...(intent.automation.retry_blocked ? [] : retryableWork),
+        ...cancelled,
+        ...terminalBlocked,
+    ]);
+    const base = {
+        id: intent.id,
+        title: intent.title,
+        root_work_id: intent.root_work_id,
+        work_ids: work.map((record) => record.intent.id),
+        ready_work: readyWork,
+        resumable_work: resumableWork,
+        retryable_work: retryableWork,
+        attention_work: attentionWork,
+        attempts_used: attemptsUsed,
+        attempts_remaining: Math.max(0, intent.limits.max_total_attempts - attemptsUsed),
+        specialists: Object.keys(intent.specialists),
+    };
+    if (!ignoreLease && supervisorLeaseIsLive(coordRoot, intent.id)) {
+        return {
+            ...base,
+            state: "running",
+            reason: "the foreground supervisor holds the goal lease",
+            next_action: "wait_for_run",
+        };
+    }
+    if (root.projection.state === "succeeded") {
+        return {
+            ...base,
+            state: "succeeded",
+            reason: "root work was explicitly accepted",
+            next_action: "none",
+        };
+    }
+    const resumableDispatchable = intent.automation.resume_approved ? resumableWork : [];
+    const attemptDispatchable = [
+        ...readyWork,
+        ...(intent.automation.retry_blocked ? retryableWork : []),
+    ];
+    const dispatchable = [...resumableDispatchable, ...attemptDispatchable];
+    if (intent.automation.accept_passing_proof && reviews.length > 0) {
+        return {
+            ...base,
+            state: "ready",
+            reason: `${reviews.length} passing work item${reviews.length === 1 ? "" : "s"} may be accepted by frozen policy`,
+            next_action: "run",
+        };
+    }
+    if (resumableDispatchable.length > 0) {
+        return {
+            ...base,
+            state: "ready",
+            reason: `${resumableDispatchable.length} parked run${resumableDispatchable.length === 1 ? " is" : "s are"} resumable`,
+            next_action: "run",
+        };
+    }
+    if (attemptsUsed >= intent.limits.max_total_attempts && attemptDispatchable.length > 0) {
+        return {
+            ...base,
+            state: "budget_exhausted",
+            reason: `goal exhausted its ${intent.limits.max_total_attempts} total attempts`,
+            next_action: "none",
+        };
+    }
+    if (dispatchable.length > 0) {
+        return {
+            ...base,
+            state: "ready",
+            reason: `${dispatchable.length} work item${dispatchable.length === 1 ? " is" : "s are"} dispatchable`,
+            next_action: "run",
+        };
+    }
+    if (pendingApproval.length > 0) {
+        return {
+            ...base,
+            state: "awaiting_attention",
+            reason: `${pendingApproval.length} work item${pendingApproval.length === 1 ? " needs" : "s need"} approval`,
+            next_action: "resolve_approval",
+        };
+    }
+    if (reviews.length > 0) {
+        return {
+            ...base,
+            state: "awaiting_attention",
+            reason: `${reviews.length} work item${reviews.length === 1 ? " awaits" : "s await"} explicit review`,
+            next_action: "review",
+        };
+    }
+    if (resumableWork.length > 0) {
+        return {
+            ...base,
+            state: "awaiting_attention",
+            reason: `${resumableWork.length} resolved approval${resumableWork.length === 1 ? " requires" : "s require"} explicit resume`,
+            next_action: "run",
+        };
+    }
+    if (retryableWork.length > 0) {
+        return {
+            ...base,
+            state: "blocked",
+            reason: `${retryableWork.length} blocked work item${retryableWork.length === 1 ? " requires" : "s require"} explicit retry`,
+            next_action: "retry",
+        };
+    }
+    return {
+        ...base,
+        state: "blocked",
+        reason: attentionWork.length > 0
+            ? `${attentionWork.length} work item${attentionWork.length === 1 ? " needs" : "s need"} intervention`
+            : "goal graph has no legal progress action",
+        next_action: "none",
+    };
+}
+function readSupervisorIntent(coordRoot, goalId) {
+    assertSupervisorId(goalId);
+    const path = supervisorIntentPath(coordRoot, goalId);
+    if (!existsSync(path))
+        throw new Error(`supervisor ${goalId} does not exist`);
+    const size = statSync(path).size;
+    if (size <= 0 || size > MAX_INTENT_BYTES) {
+        throw new Error(`supervisor intent has invalid size ${size}`);
+    }
+    let intent;
+    try {
+        intent = JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch (error) {
+        throw new Error(`cannot parse supervisor intent ${goalId}: ${error.message}`);
+    }
+    validateIntent(intent, goalId);
+    return intent;
+}
+function validateIntent(intent, goalId) {
+    if (intent.schema_version !== SUPERVISOR_INTENT_SCHEMA_VERSION ||
+        intent.id !== goalId ||
+        !validTimestamp(intent.created_at)) {
+        throw new Error(`supervisor intent ${goalId} has an unsupported or mismatched schema`);
+    }
+    bounded(intent.title, "supervisor title", MAX_TITLE);
+    assertWorkId(intent.root_work_id);
+    const specialists = normalizeWorkflowSpecialists(intent.specialists);
+    if (JSON.stringify(specialists) !== JSON.stringify(intent.specialists)) {
+        throw new Error(`supervisor intent ${goalId} specialists are not canonical`);
+    }
+    if (JSON.stringify(normalizeLimits(intent.limits)) !== JSON.stringify(intent.limits)) {
+        throw new Error(`supervisor intent ${goalId} limits are not canonical`);
+    }
+    if (JSON.stringify(normalizeAutomation(intent.automation)) !== JSON.stringify(intent.automation)) {
+        throw new Error(`supervisor intent ${goalId} automation policy is not canonical`);
+    }
+}
+function normalizeLimits(input) {
+    return {
+        max_cycles: positive(input?.max_cycles ?? 50, "supervisor max_cycles", 1_000),
+        max_runtime_ms: positive(input?.max_runtime_ms ?? 4 * 60 * 60 * 1_000, "supervisor max_runtime_ms", 7 * 24 * 60 * 60 * 1_000),
+        max_parallel_work: positive(input?.max_parallel_work ?? 1, "supervisor max_parallel_work", 20),
+        max_total_attempts: positive(input?.max_total_attempts ?? 100, "supervisor max_total_attempts", 10_000),
+        max_agents_per_work: positive(input?.max_agents_per_work ?? 20, "supervisor max_agents_per_work", 1_000),
+        agent_concurrency: positive(input?.agent_concurrency ?? 4, "supervisor agent_concurrency", 100),
+    };
+}
+function normalizeAutomation(input) {
+    return {
+        accept_passing_proof: boolean(input?.accept_passing_proof ?? false, "accept_passing_proof"),
+        resume_approved: boolean(input?.resume_approved ?? true, "resume_approved"),
+        retry_blocked: boolean(input?.retry_blocked ?? false, "retry_blocked"),
+    };
+}
+function supervisorDir(coordRoot, goalId) {
+    assertSupervisorId(goalId);
+    return join(resolve(coordRoot), ".harnery", "supervisors", goalId);
+}
+function supervisorIntentPath(coordRoot, goalId) {
+    return join(supervisorDir(coordRoot, goalId), "intent.json");
+}
+function supervisorLeaseIsLive(coordRoot, goalId) {
+    const lease = readLease(join(supervisorDir(coordRoot, goalId), "lease.json"));
+    return lease ? leaseIsLive(lease) : false;
+}
+function readLease(path) {
+    try {
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        return typeof value.pid === "number" &&
+            Number.isSafeInteger(value.pid) &&
+            value.pid > 0 &&
+            typeof value.host === "string" &&
+            typeof value.created_at === "string"
+            ? {
+                pid: value.pid,
+                host: value.host,
+                created_at: value.created_at,
+                nonce: typeof value.nonce === "string" ? value.nonce : undefined,
+            }
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function leaseIsLive(lease) {
+    if (lease.host !== hostname()) {
+        const age = Date.now() - Date.parse(lease.created_at);
+        return Number.isFinite(age) && age < FOREIGN_LEASE_STALE_MS;
+    }
+    try {
+        process.kill(lease.pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+function writePrivateJson(path, value) {
+    const body = `${JSON.stringify(value, null, 2)}\n`;
+    if (Buffer.byteLength(body) > MAX_INTENT_BYTES) {
+        throw new Error(`supervisor intent exceeds ${MAX_INTENT_BYTES} bytes`);
+    }
+    writeFileSync(path, body, { encoding: "utf8", flag: "wx", mode: 0o600 });
+    chmodSync(path, 0o600);
+}
+function bounded(value, field, max) {
+    if (typeof value !== "string")
+        throw new Error(`${field} must be a string`);
+    const normalized = value.trim();
+    if (!normalized)
+        throw new Error(`${field} must not be empty`);
+    if (normalized.length > max)
+        throw new Error(`${field} exceeds ${max} characters`);
+    return normalized;
+}
+function positive(value, field, max) {
+    if (!Number.isSafeInteger(value) || value < 1 || value > max) {
+        throw new Error(`${field} must be an integer from 1 to ${max}`);
+    }
+    return value;
+}
+function boolean(value, field) {
+    if (typeof value !== "boolean")
+        throw new Error(`supervisor ${field} must be boolean`);
+    return value;
+}
+function validTimestamp(value) {
+    return typeof value === "string" && value.length <= 40 && Number.isFinite(Date.parse(value));
+}
+function unique(values) {
+    return [...new Set(values)];
+}

package/dist/core/workflow/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAoCH,OAAO,KAAK,EAEV,UAAU,EAEV,SAAS,EAOV,MAAM,YAAY,CAAC;AAYpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAOpF;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAyC1F"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAqCH,OAAO,KAAK,EAEV,UAAU,EAEV,SAAS,EAOV,MAAM,YAAY,CAAC;AAYpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAOpF;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAyC1F"}

package/dist/core/workflow/engine.js

@@ -34,6 +34,7 @@ import { assertWorkflowRunId, createWorkflowApproval } from "./approvals.js";
 import { probeBilling } from "./billing.js";
 import { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, writeWorkflowProof, } from "./proof.js";
 import { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
+import { normalizeWorkflowSpecialists, resolveSpecialistAssignment } from "./specialists.js";
 import { WORKFLOW_PROOF_SCHEMA_VERSION } from "./types.js";
 import { parseStageOutput, validateAgainstSchema } from "./validate.js";
 const DEFAULT_MAX_AGENTS = 50;
@@ -130,6 +131,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
     const cwd = frozen?.cwd ?? opts.cwd ?? opts.coordRoot;
     const log = opts.onLog ?? ((line) => process.stderr.write(`${line}\n`));
     const defaultHarness = frozen?.default_harness ?? opts.defaultHarness ?? "claude-code";
+    const specialists = frozen?.specialists ?? (resumeState ? {} : normalizeWorkflowSpecialists(opts.specialists));
     const isolation = frozen?.isolation ?? opts.isolation ?? "shared";
     const networkAccess = frozen?.network_access ?? opts.networkAccess ?? "unknown";
     const policy = frozen?.policy ?? (opts.policy ? normalizePolicy(opts.policy, { baseDir: cwd }) : undefined);
@@ -163,6 +165,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
                     isolation,
                     network_access: networkAccess,
                     policy: policy ? policy : undefined,
+                    specialists,
                 },
             },
         });
@@ -343,7 +346,10 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
         }
         return decision;
     };
-    const agent = async (prompt, agentOpts = {}) => {
+    const agent = async (prompt, requestedOpts = {}) => {
+        const assignment = resolveSpecialistAssignment(specialists, prompt, requestedOpts);
+        const agentOpts = assignment.opts;
+        const assignmentPrompt = assignment.prompt;
         let reservedForDispatch = 0;
         let spawnCountClaimed = false;
         const harness = agentOpts.harness ?? defaultHarness;
@@ -359,6 +365,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
             id,
             label: proofLabel,
             stage: currentStage || undefined,
+            specialist: agentOpts.specialist,
             harness,
             model: agentOpts.model,
             status: "failed",
@@ -368,7 +375,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
         agentProofs.set(id, agentProof);
         // Call identity for resume: same stage + harness + model + effort + turns + schema
         // + ORIGINAL prompt → same key. Retry-mutated prompts never enter the key.
-        const key = agentCallKey(currentStage, harness, agentOpts, prompt);
+        const key = agentCallKey(currentStage, harness, agentOpts, assignmentPrompt);
         const cached = resumeCache.get(key);
         if (cached) {
             // Exact-run replay skips dispatch authorization because no dispatch
@@ -384,6 +391,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
                 label,
                 key,
                 harness,
+                specialist: agentOpts.specialist ?? null,
                 model: agentOpts.model ?? null,
                 kind: cached.kind,
             });
@@ -401,7 +409,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
                 max_attempts: maxAttempts,
                 max_turns: agentOpts.maxTurns ?? DEFAULT_MAX_TURNS,
                 timeout_ms: agentOpts.timeoutMs ?? DEFAULT_TIMEOUT_MS,
-                prompt_bytes: Buffer.byteLength(prompt),
+                prompt_bytes: Buffer.byteLength(assignmentPrompt),
                 isolation,
                 network_access: networkAccess,
                 current_cost_usd: round4(costUsd + reservedCostUsd),
@@ -516,11 +524,12 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
                 label,
                 key,
                 harness,
+                specialist: agentOpts.specialist ?? null,
                 model: agentOpts.model ?? null,
                 effort: agentOpts.effort ?? null,
             });
             log(`[${name}] ${currentStage || "(no stage)"} → ${id} [${harness}] ${label}`);
-            let attemptPrompt = prompt;
+            let attemptPrompt = assignmentPrompt;
             let last = null;
             let agentCostUsd = 0;
             for (let attempt = 1; attempt <= maxAttempts; attempt++) {
@@ -588,7 +597,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
                 // Feed the validation failure back verbatim — the retry prompt carries
                 // exactly what was wrong, which is what makes bounded retry converge.
                 attemptPrompt =
-                    `${prompt}\n\nYour previous reply failed validation:\n` +
+                    `${assignmentPrompt}\n\nYour previous reply failed validation:\n` +
                         `${problems.map((p) => `  - ${p}`).join("\n")}\n` +
                         `Reply with ONLY the corrected JSON object. No prose, no code fences.`;
             }
@@ -670,6 +679,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
                 acceptance: meta.acceptance,
                 max_agents: maxAgents,
                 concurrency,
+                specialists: Object.keys(specialists),
                 policy: policy ? { name: policy.name, sha256: policyDigest(policy) } : null,
                 isolation,
                 network_access: networkAccess,
@@ -786,15 +796,18 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
 /** Stable identity for one agent() call, for the resume cache. The ORIGINAL
  * prompt (never a retry-mutated one) plus everything that changes behavior. */
 function agentCallKey(stage, harness, agentOpts, prompt) {
-    const basis = JSON.stringify([
+    const parts = [
         stage,
         harness,
         agentOpts.model ?? null,
         agentOpts.effort ?? null,
         agentOpts.maxTurns ?? DEFAULT_MAX_TURNS,
         agentOpts.schema ?? null,
-        prompt,
-    ]);
+    ];
+    if (agentOpts.specialist)
+        parts.push(agentOpts.specialist);
+    parts.push(prompt);
+    const basis = JSON.stringify(parts);
     return createHash("sha256").update(basis).digest("hex").slice(0, 16);
 }
 /** Per-child fixed context overhead: the repo-instructions file at the child

package/dist/core/workflow/index.d.ts

@@ -4,6 +4,6 @@ export { runWorkflow, WorkflowParkedError, WorkflowRunError } from "./engine.js"
 export { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
 export type { WorkflowRunManifest } from "./run-state.js";
 export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
-export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, HarnessEvidenceCapability, HarnessEvidenceCoverage, HarnessName, ResultDigest, RunReport, Spawner, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, } from "./types.js";
+export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, HarnessEvidenceCapability, HarnessEvidenceCoverage, HarnessName, ResultDigest, RunReport, Spawner, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, } from "./types.js";
 export { WORKFLOW_PROOF_SCHEMA_VERSION } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/core/workflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,OAAO,EACP,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,OAAO,EACP,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC"}

package/dist/core/workflow/proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EAEzB,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAId,MAAM,YAAY,CAAC;AAepB,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA6BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA0ChF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAe3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAkBjF;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EAEzB,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAId,MAAM,YAAY,CAAC;AAepB,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA6BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA2ChF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAe3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAkBjF;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}

package/dist/core/workflow/proof.js

@@ -109,6 +109,7 @@ export function buildWorkflowProof(input) {
     const agents = input.agents.map((agent) => ({
         ...agent,
         label: clipped(agent.label, MAX_LABEL_CHARS),
+        specialist: clippedOptional(agent.specialist, MAX_LABEL_CHARS),
         model: clippedOptional(agent.model, MAX_LABEL_CHARS),
         session_id: clippedOptional(agent.session_id, MAX_REF_CHARS),
         error: clippedOptional(agent.error, MAX_SUMMARY_CHARS),

package/dist/core/workflow/run-state.d.ts

@@ -1,5 +1,6 @@
 import type { RepoSnapshot } from "../context/index.js";
 import { type NormalizedPolicy, type PolicyIsolation, type PolicyNetworkAccess } from "../policy/index.js";
+import type { WorkflowSpecialistProfile } from "./types.js";
 export declare const WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION: 1;
 export interface WorkflowRunManifest {
     schema_version: typeof WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION;
@@ -24,6 +25,7 @@ export interface WorkflowRunManifest {
         isolation: PolicyIsolation;
         network_access: PolicyNetworkAccess;
         policy?: NormalizedPolicy;
+        specialists?: Record<string, WorkflowSpecialistProfile>;
     };
 }
 export interface WriteWorkflowRunManifestInput {

package/dist/core/workflow/run-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-state.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/run-state.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAG5B,eAAO,MAAM,oCAAoC,EAAG,CAAU,CAAC;AAK/D,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,oCAAoC,CAAC;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,iBAAiB,EAAE,YAAY,CAAC;IAChC,SAAS,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,eAAe,CAAC;QAC3B,cAAc,EAAE,mBAAmB,CAAC;QACpC,MAAM,CAAC,EAAE,gBAAgB,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAmBrF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAgC7F;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA4BvD;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CASjF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhF;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,CA0CvF"}
+{"version":3,"file":"run-state.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/run-state.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,eAAO,MAAM,oCAAoC,EAAG,CAAU,CAAC;AAK/D,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,oCAAoC,CAAC;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,iBAAiB,EAAE,YAAY,CAAC;IAChC,SAAS,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,eAAe,CAAC;QAC3B,cAAc,EAAE,mBAAmB,CAAC;QACpC,MAAM,CAAC,EAAE,gBAAgB,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;KACzD,CAAC;CACH;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAmBrF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAgC7F;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA4BvD;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CASjF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhF;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,CA0CvF"}

package/dist/core/workflow/run-state.js

@@ -4,6 +4,7 @@ import { hostname } from "node:os";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { normalizePolicy, policyDigest, } from "../policy/index.js";
 import { assertWorkflowRunId, readWorkflowApproval } from "./approvals.js";
+import { normalizeWorkflowSpecialists } from "./specialists.js";
 export const WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION = 1;
 const MANIFEST_LIMIT_BYTES = 256 * 1024;
 const FOREIGN_LEASE_STALE_MS = 24 * 60 * 60 * 1_000;
@@ -201,8 +202,19 @@ function validExecution(value) {
         value.approval_addressee.length <= 200 &&
         ["shared", "worktree", "sandbox", "remote"].includes(value.isolation) &&
         ["enabled", "disabled", "unknown"].includes(value.network_access) &&
+        validSpecialists(value.specialists) &&
         validFrozenPolicy(value.policy, value.cwd));
 }
+function validSpecialists(specialists) {
+    if (specialists === undefined)
+        return true;
+    try {
+        return (JSON.stringify(normalizeWorkflowSpecialists(specialists)) === JSON.stringify(specialists));
+    }
+    catch {
+        return false;
+    }
+}
 function validFrozenPolicy(policy, cwd) {
     if (policy === undefined)
         return true;

package/dist/core/workflow/specialists.d.ts

@@ -0,0 +1,7 @@
+import type { AgentOpts, WorkflowSpecialistProfile } from "./types.js";
+export declare function normalizeWorkflowSpecialists(input: Readonly<Record<string, WorkflowSpecialistProfile>> | undefined): Record<string, WorkflowSpecialistProfile>;
+export declare function resolveSpecialistAssignment(profiles: Readonly<Record<string, WorkflowSpecialistProfile>>, prompt: string, opts: AgentOpts): {
+    prompt: string;
+    opts: AgentOpts;
+};
+//# sourceMappingURL=specialists.d.ts.map

package/dist/core/workflow/specialists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"specialists.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/specialists.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAOvE,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,GAAG,SAAS,GACrE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAuC3C;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,EAC7D,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,GACd;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAsBrC"}