harnery 0.20.0 → 0.22.0

package/README.md

@@ -22,7 +22,7 @@
 - **Multi-agent coordination:** per-agent heartbeats in `.harnery/active/`, claim-time and commit-time guards, the canonical event stream, councils, a decision docket, per-agent scratchpads, and harness adapters for Claude Code / Cursor / Codex.
 - **Cross-machine presence:** sessions on every machine that shares a repo see each other, labeled by machine. Zero-config over the repo's own git remote (presence refs), with an optional live-socket upgrade via an end-to-end-encrypted relay — the public `relay.harnery.com`, or self-host with `harn relay serve` / the bundled Cloudflare Worker (`relay/worker/`). The relay sees only ciphertext in opaquely-named rooms.
 - **Coordination-aware workflows:** `harn workflow run <script>` executes bounded, schema-gated multi-subagent workflow scripts — plain JS stages fanning out to headless harness-CLI subagents that are born coordination-registered (heartbeats, events, claim guards), with deterministic code deciding the routing between stages. An optional host-owned policy gates dispatch and declared external mutations with `ALLOW`, `ASK`, and `DENY`; CLI `ASK` requests park durably for an explicit approve/deny and same-run resume, while library callers remain fail-closed by default.
-- **Durable work above attempts:** `harn work` preserves an objective across bounded workflow attempts, dependencies, approval parks, failures, and review. Its one-shot reconciler derives state from append-only local evidence and reports the next explicit action without silently spawning, retrying, or accepting work.
+- **Durable work above attempts:** `harn work` preserves an objective across bounded workflow attempts, dependencies, approval parks, failures, and review. Reusable workflow code receives the exact work ID, title, objective, acceptance criteria, and attempt identity as frozen typed context. A retry also receives the prior run's bounded error and unresolved proof criteria, while retry authority and attempt ceilings remain unchanged. The manifest, proof, and append-only ledger bind the same context, and the one-shot reconciler reports the next explicit action without silently spawning, retrying, or accepting work.
 - **Bounded goal supervision:** `harn supervisor` freezes a mission or existing root graph, specialist team, and safety limits, then runs scheduling cycles until reviewed mission success, human attention, no progress, or budget exhaustion. Its optional planner can create the first milestone, reassess accepted milestone proof, or recover a terminal graph using only a frozen workflow-template catalog. Plans can require independent bounded specialist review before ordinary approval or auto-apply authority, old generations remain immutable evidence, and all attempts still consume the goal budget. Use explicit foreground ticks or enroll goals in the optional heartbeat-backed background service.
 - **Standalone web UI:** `harn web up` boots a local Next.js dashboard for the coord layer, councils, per-project state, and a local coding-agent status view (Claude Code / Codex / Cursor usage, backed by `harn devtools`). Ships with the git clone, not the npm package (see [Install](#install)).
 - **Backup + sync:** `harn backup` snapshots `.harnery/` via [restic](https://restic.net/); `harn sync` keeps a curated subset live across machines via [rclone](https://rclone.org/) (Google Drive or any rclone remote).

package/dist/core/work/index.d.ts

@@ -1,3 +1,3 @@
 export { type RunWorkItemInput, runWorkItem } from "./runner.js";
-export { acceptWorkItem, assertWorkId, type CreateWorkItemInput, cancelWorkItem, createWorkItem, listWorkItems, newWorkId, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, WORK_EVENT_SCHEMA_VERSION, WORK_INTENT_SCHEMA_VERSION, type WorkAttempt, type WorkEvent, type WorkEventType, type WorkIntent, type WorkNextAction, type WorkProjection, type WorkRecord, type WorkState, } from "./state.js";
+export { acceptWorkItem, assertWorkId, type CreateWorkItemInput, cancelWorkItem, createWorkItem, listWorkItems, newWorkId, readWorkItem, reconcileAllWorkItems, reconcileWorkItem, reopenWorkItem, WORK_EVENT_SCHEMA_VERSION, WORK_INTENT_SCHEMA_VERSION, type WorkAttempt, type WorkAttemptTrigger, type WorkEvent, type WorkEventType, type WorkIntent, type WorkNextAction, type WorkProjection, type WorkRecord, type WorkState, } from "./state.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/core/work/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/work/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,KAAK,mBAAmB,EACxB,cAAc,EACd,cAAc,EACd,aAAa,EACb,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/work/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,KAAK,mBAAmB,EACxB,cAAc,EACd,cAAc,EACd,aAAa,EACb,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,YAAY,CAAC"}

package/dist/core/work/read.d.ts

@@ -1,2 +1,2 @@
-export { assertWorkId, listWorkItems, readWorkItem, WORK_EVENT_SCHEMA_VERSION, WORK_INTENT_SCHEMA_VERSION, type WorkAttempt, type WorkEvent, type WorkEventType, type WorkIntent, type WorkNextAction, type WorkProjection, type WorkRecord, type WorkState, } from "./state.js";
+export { assertWorkId, listWorkItems, readWorkItem, WORK_EVENT_SCHEMA_VERSION, WORK_INTENT_SCHEMA_VERSION, type WorkAttempt, type WorkAttemptTrigger, type WorkEvent, type WorkEventType, type WorkIntent, type WorkNextAction, type WorkProjection, type WorkRecord, type WorkState, } from "./state.js";
 //# sourceMappingURL=read.d.ts.map

package/dist/core/work/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/core/work/read.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,YAAY,CAAC"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/core/work/read.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,YAAY,CAAC"}

package/dist/core/work/runner.d.ts

@@ -2,7 +2,7 @@ import type { EngineOpts, RunReport } from "../workflow/types.js";
 export interface RunWorkItemInput {
     coordRoot: string;
     workId: string;
-    engine: Omit<EngineOpts, "coordRoot" | "runId" | "resumeRunId" | "workItemId">;
+    engine: Omit<EngineOpts, "coordRoot" | "runId" | "resumeRunId" | "workItemId" | "workContext" | "attemptContext">;
     retry?: boolean;
     actor?: string;
 }

package/dist/core/work/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/core/work/runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAWlE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CA2D7E"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/core/work/runner.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,UAAU,EACV,SAAS,EAGV,MAAM,sBAAsB,CAAC;AAgB9B,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,CACV,UAAU,EACV,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,GAAG,aAAa,GAAG,gBAAgB,CACxF,CAAC;IACF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAqF7E"}

package/dist/core/work/runner.js

@@ -1,5 +1,7 @@
 import { resolve } from "node:path";
 import { runWorkflow } from "../workflow/engine.js";
+import { readWorkflowProof } from "../workflow/proof.js";
+import { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "../workflow/types.js";
 import { acquireWorkLease, appendReconcileIfChanged, appendWorkEvent, assertWorkflowUnchanged, boundedActor, newWorkflowRunId, readWorkItemIgnoringLease, } from "./state.js";
 export async function runWorkItem(input) {
     const coordRoot = resolve(input.coordRoot);
@@ -29,6 +31,9 @@ export async function runWorkItem(input) {
         if (record.projection.state === "blocked" && !input.retry) {
             throw new Error(`work item ${input.workId} is blocked; use an explicit retry`);
         }
+        if (record.projection.state === "ready" && input.retry) {
+            throw new Error(`work item ${input.workId} is ready; retry requires a blocked prior attempt`);
+        }
         if (!(record.projection.state === "ready" || record.projection.state === "blocked")) {
             throw new Error(`work item ${input.workId} cannot run from state ${record.projection.state}`);
         }
@@ -36,6 +41,20 @@ export async function runWorkItem(input) {
             throw new Error(`work item ${input.workId} exhausted its ${record.intent.max_attempts} attempts`);
         }
         const attempt = record.projection.attempts_used + 1;
+        const trigger = input.retry ? "retry" : "initial";
+        let prior;
+        if (trigger === "retry") {
+            if (!latest) {
+                throw new Error(`work item ${input.workId} has no prior attempt to retry`);
+            }
+            prior = priorContext(coordRoot, latest);
+        }
+        const attemptContext = {
+            schema_version: WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION,
+            number: attempt,
+            trigger,
+            ...(prior ? { prior } : {}),
+        };
         const runId = newWorkflowRunId();
         appendWorkEvent(coordRoot, input.workId, {
             event: "attempt.started",
@@ -43,12 +62,21 @@ export async function runWorkItem(input) {
             reason: input.retry ? "explicit retry started" : "workflow attempt started",
             run_id: runId,
             attempt,
+            trigger,
         });
         return await runWorkflow(record.intent.workflow.path, {
             ...input.engine,
             coordRoot,
             runId,
             workItemId: input.workId,
+            workContext: {
+                schema_version: WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION,
+                id: record.intent.id,
+                title: record.intent.title,
+                objective: record.intent.objective,
+                acceptance: [...record.intent.acceptance],
+            },
+            attemptContext,
         });
     }
     finally {
@@ -61,3 +89,36 @@ export async function runWorkItem(input) {
         }
     }
 }
+function priorContext(coordRoot, prior) {
+    if (!prior.proof_path) {
+        return {
+            run_id: prior.run_id,
+            causes: ["lost"],
+            unresolved: [],
+        };
+    }
+    const proof = readWorkflowProof(coordRoot, prior.run_id);
+    const causes = [];
+    if (proof.run.status === "failed")
+        causes.push("workflow_error");
+    if (proof.acceptance.summary.unsatisfied > 0)
+        causes.push("acceptance_unsatisfied");
+    if (proof.acceptance.summary.unknown > 0)
+        causes.push("acceptance_unknown");
+    if (causes.length === 0) {
+        throw new Error(`workflow proof ${prior.run_id} does not describe a retryable failure`);
+    }
+    return {
+        run_id: prior.run_id,
+        causes,
+        error: proof.run.error,
+        acceptance: { ...proof.acceptance.summary },
+        unresolved: proof.acceptance.criteria
+            .filter((criterion) => criterion.status !== "satisfied")
+            .map((criterion) => ({
+            id: criterion.id,
+            statement: criterion.statement,
+            status: criterion.status,
+        })),
+    };
+}

package/dist/core/work/state.d.ts

@@ -2,6 +2,7 @@ export declare const WORK_INTENT_SCHEMA_VERSION: 1;
 export declare const WORK_EVENT_SCHEMA_VERSION: 1;
 export type WorkState = "waiting" | "ready" | "running" | "awaiting_approval" | "in_review" | "blocked" | "succeeded" | "cancelled";
 export type WorkNextAction = "wait_for_dependencies" | "run" | "wait_for_run" | "resolve_approval" | "resume" | "retry" | "review" | "none";
+export type WorkAttemptTrigger = "initial" | "retry";
 export interface WorkIntent {
     schema_version: typeof WORK_INTENT_SCHEMA_VERSION;
     id: string;
@@ -31,6 +32,7 @@ export interface WorkEvent {
     reason?: string;
     run_id?: string;
     attempt?: number;
+    trigger?: WorkAttemptTrigger;
     state?: WorkState;
     next_action?: WorkNextAction;
 }
@@ -38,6 +40,7 @@ export interface WorkAttempt {
     number: number;
     run_id: string;
     started_at: string;
+    trigger?: WorkAttemptTrigger;
     status: "running" | "parked" | "succeeded" | "failed" | "lost";
     approval_id?: string;
     proof_path?: string;

package/dist/core/work/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/work/state.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAkBpD,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,OAAO,GACP,SAAS,GACT,mBAAmB,GACnB,WAAW,GACX,SAAS,GACT,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,MAAM,cAAc,GACtB,uBAAuB,GACvB,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,OAAO,0BAA0B,CAAC;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,eAAe,CAAC;AAEpB,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,OAAO,yBAAyB,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,cAAc,CAAC;IAC5B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,UAAU,CA0DrE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAI1E;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAS7D;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAmC/F;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE,CAIrF;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAEZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAQZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAQZ;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAkMD,kEAAkE;AAClE,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,GACZ,IAAI,CAgBN;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,GAClE,SAAS,CAgCX;AAkCD,kEAAkE;AAClE,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAIvF;AAqHD,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAMhE;AAkBD,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CA0C9E;AAiGD,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAa,GAAG,MAAM,CAE1E"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/work/state.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAkBpD,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,OAAO,GACP,SAAS,GACT,mBAAmB,GACnB,WAAW,GACX,SAAS,GACT,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,MAAM,cAAc,GACtB,uBAAuB,GACvB,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,OAAO,0BAA0B,CAAC;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,eAAe,CAAC;AAEpB,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,OAAO,yBAAyB,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,cAAc,CAAC;IAC5B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,UAAU,CA0DrE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAI1E;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAS7D;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAmC/F;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE,CAIrF;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAEZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAQZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAQZ;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAqPD,kEAAkE;AAClE,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,GACZ,IAAI,CAgBN;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,GAClE,SAAS,CAgCX;AAkCD,kEAAkE;AAClE,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAIvF;AA4HD,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAMhE;AAkBD,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CA0C9E;AAiGD,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAa,GAAG,MAAM,CAE1E"}

package/dist/core/work/state.js

@@ -156,7 +156,7 @@ function deriveWorkProjection(coordRoot, intent, events, ignoreLease = false) {
         .find((event) => ["work.accepted", "work.cancelled", "work.reopened"].includes(event.event));
     const terminal = latestGovernance?.event === "work.accepted" || latestGovernance?.event === "work.cancelled";
     const attemptEvents = events.filter((event) => event.event === "attempt.started");
-    const attempts = attemptEvents.map((event) => inspectAttempt(coordRoot, event));
+    const attempts = attemptEvents.map((event, index) => inspectAttempt(coordRoot, event, intent, attemptEvents[index - 1]?.run_id));
     const base = {
         id: intent.id,
         title: intent.title,
@@ -179,9 +179,7 @@ function deriveWorkProjection(coordRoot, intent, events, ignoreLease = false) {
         };
     }
     const reopenSeq = latestGovernance?.event === "work.reopened" ? latestGovernance.seq : 0;
-    const currentAttempts = attemptEvents
-        .filter((event) => event.seq > reopenSeq)
-        .map((event) => inspectAttempt(coordRoot, event));
+    const currentAttempts = attempts.filter((_, index) => attemptEvents[index].seq > reopenSeq);
     const unresolved = intent.dependencies.filter((dependency) => {
         try {
             return readWorkItem(coordRoot, dependency).projection.state !== "succeeded";
@@ -257,27 +255,49 @@ function deriveWorkProjection(coordRoot, intent, events, ignoreLease = false) {
         next_action: attemptsRemaining > 0 ? "retry" : "none",
     };
 }
-function inspectAttempt(coordRoot, event) {
+function inspectAttempt(coordRoot, event, intent, priorRunId) {
     const runId = event.run_id;
     const attempt = {
         number: event.attempt,
         run_id: runId,
         started_at: event.ts,
+        trigger: event.trigger,
         status: "lost",
     };
     const proofPath = join(coordRoot, ".harnery", "workflows", runId, "proof.json");
     const manifestPath = join(coordRoot, ".harnery", "workflows", runId, "run.json");
+    let manifest;
     if (existsSync(manifestPath)) {
-        const manifest = readWorkflowRunManifest(coordRoot, runId);
+        manifest = readWorkflowRunManifest(coordRoot, runId);
         if (manifest.work_item_id !== event.work_id) {
             throw new Error(`workflow run ${runId} does not belong to work item ${event.work_id}`);
         }
+        if (manifest.work_context !== undefined &&
+            JSON.stringify(manifest.work_context) !== JSON.stringify(workContextForIntent(intent))) {
+            throw new Error(`workflow run ${runId} work context does not match work item ${event.work_id}`);
+        }
+        if (manifest.attempt_context !== undefined &&
+            (manifest.attempt_context.number !== event.attempt ||
+                manifest.attempt_context.trigger !== event.trigger ||
+                (manifest.attempt_context.trigger === "retry" &&
+                    manifest.attempt_context.prior?.run_id !== priorRunId))) {
+            throw new Error(`workflow run ${runId} attempt context does not match work item ${event.work_id}`);
+        }
     }
     if (existsSync(proofPath)) {
         if (!existsSync(manifestPath)) {
             throw new Error(`workflow run ${runId} has proof without a work-linked manifest`);
         }
         const proof = readWorkflowProof(coordRoot, runId);
+        if (proof.run.work_item_id !== event.work_id) {
+            throw new Error(`workflow proof ${runId} does not belong to work item ${event.work_id}`);
+        }
+        if (JSON.stringify(proof.run.work_context) !== JSON.stringify(manifest?.work_context)) {
+            throw new Error(`workflow proof ${runId} work context does not match its run manifest`);
+        }
+        if (JSON.stringify(proof.run.attempt_context) !== JSON.stringify(manifest?.attempt_context)) {
+            throw new Error(`workflow proof ${runId} attempt context does not match its run manifest`);
+        }
         attempt.proof_path = proofPath;
         attempt.status =
             proof.run.status === "succeeded" &&
@@ -310,6 +330,15 @@ function inspectAttempt(coordRoot, event) {
         attempt.status = "running";
     return attempt;
 }
+function workContextForIntent(intent) {
+    return {
+        schema_version: 1,
+        id: intent.id,
+        title: intent.title,
+        objective: intent.objective,
+        acceptance: [...intent.acceptance],
+    };
+}
 function appendGovernanceEvent(coordRoot, workId, event, allowed, input) {
     const release = acquireWorkLease(coordRoot, workId);
     try {
@@ -458,6 +487,11 @@ function validateWorkEvent(event, workId, seq) {
             throw new Error(`work item ${workId} event ${seq} has invalid attempt data`);
         }
     }
+    if (event.trigger !== undefined &&
+        (event.event !== "attempt.started" ||
+            (event.trigger !== "initial" && event.trigger !== "retry"))) {
+        throw new Error(`work item ${workId} event ${seq} has invalid attempt trigger`);
+    }
     if (event.event === "work.reconciled") {
         const states = [
             "waiting",

package/dist/core/workflow/attempt-context.d.ts

@@ -0,0 +1,5 @@
+import type { WorkflowAttemptContext } from "./types.js";
+export declare function normalizeWorkflowAttemptContext(value: unknown): WorkflowAttemptContext;
+export declare function freezeWorkflowAttemptContext(value: unknown): Readonly<WorkflowAttemptContext>;
+export declare function isCanonicalWorkflowAttemptContext(value: unknown): value is WorkflowAttemptContext;
+//# sourceMappingURL=attempt-context.d.ts.map

package/dist/core/workflow/attempt-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt-context.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/attempt-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,sBAAsB,EAIvB,MAAM,YAAY,CAAC;AAoBpB,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CA8BtF;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAU7F;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAOjG"}

package/dist/core/workflow/attempt-context.js

@@ -0,0 +1,189 @@
+import { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION } from "./types.js";
+const RUN_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/;
+const ACCEPTANCE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+const MAX_ATTEMPTS = 100;
+const MAX_ERROR = 2_000;
+const MAX_CRITERIA = 50;
+const MAX_STATEMENT = 500;
+const CONTEXT_FIELDS = new Set(["schema_version", "number", "trigger", "prior"]);
+const PRIOR_FIELDS = new Set(["run_id", "causes", "error", "acceptance", "unresolved"]);
+const SUMMARY_FIELDS = new Set(["satisfied", "unsatisfied", "unknown", "total"]);
+const CRITERION_FIELDS = new Set(["id", "statement", "status"]);
+const CAUSE_ORDER = [
+    "workflow_error",
+    "acceptance_unsatisfied",
+    "acceptance_unknown",
+    "lost",
+];
+export function normalizeWorkflowAttemptContext(value) {
+    const input = objectValue(value, "workflow attempt context");
+    rejectExtraFields(input, CONTEXT_FIELDS, "workflow attempt context");
+    if (input.schema_version !== WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION) {
+        throw new Error("workflow attempt context has an unsupported schema");
+    }
+    const number = safeInteger(input.number, "workflow attempt context number", 1, MAX_ATTEMPTS);
+    if (input.trigger !== "initial" && input.trigger !== "retry") {
+        throw new Error('workflow attempt context trigger must be "initial" or "retry"');
+    }
+    if (input.trigger === "initial") {
+        if (input.prior !== undefined) {
+            throw new Error("initial workflow attempt context cannot contain prior evidence");
+        }
+        return {
+            schema_version: WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION,
+            number,
+            trigger: "initial",
+        };
+    }
+    if (number < 2)
+        throw new Error("retry workflow attempt context number must be at least 2");
+    if (input.prior === undefined) {
+        throw new Error("retry workflow attempt context requires prior evidence");
+    }
+    return {
+        schema_version: WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION,
+        number,
+        trigger: "retry",
+        prior: normalizePrior(input.prior),
+    };
+}
+export function freezeWorkflowAttemptContext(value) {
+    const normalized = normalizeWorkflowAttemptContext(value);
+    if (normalized.prior) {
+        for (const criterion of normalized.prior.unresolved)
+            Object.freeze(criterion);
+        Object.freeze(normalized.prior.causes);
+        Object.freeze(normalized.prior.acceptance);
+        Object.freeze(normalized.prior.unresolved);
+        Object.freeze(normalized.prior);
+    }
+    return Object.freeze(normalized);
+}
+export function isCanonicalWorkflowAttemptContext(value) {
+    try {
+        const normalized = normalizeWorkflowAttemptContext(value);
+        return JSON.stringify(normalized) === JSON.stringify(value);
+    }
+    catch {
+        return false;
+    }
+}
+function normalizePrior(value) {
+    const input = objectValue(value, "workflow attempt prior context");
+    rejectExtraFields(input, PRIOR_FIELDS, "workflow attempt prior context");
+    const runId = requiredString(input.run_id, "workflow attempt prior run id", 200);
+    if (!RUN_ID.test(runId)) {
+        throw new Error(`invalid workflow attempt prior run id ${JSON.stringify(runId)}`);
+    }
+    if (!Array.isArray(input.causes) || input.causes.length === 0) {
+        throw new Error("workflow attempt prior causes must be a non-empty array");
+    }
+    const seen = new Set();
+    for (const cause of input.causes) {
+        if (!CAUSE_ORDER.includes(cause)) {
+            throw new Error(`unsupported workflow attempt failure cause ${JSON.stringify(cause)}`);
+        }
+        if (seen.has(cause)) {
+            throw new Error(`duplicate workflow attempt failure cause ${JSON.stringify(cause)}`);
+        }
+        seen.add(cause);
+    }
+    const causes = CAUSE_ORDER.filter((cause) => seen.has(cause));
+    if (causes.includes("lost")) {
+        if (causes.length !== 1)
+            throw new Error("lost must be the only workflow attempt failure cause");
+        if (input.error !== undefined || input.acceptance !== undefined) {
+            throw new Error("lost workflow attempt evidence cannot contain proof-derived fields");
+        }
+        const unresolved = normalizeUnresolved(input.unresolved);
+        if (unresolved.length > 0) {
+            throw new Error("lost workflow attempt evidence cannot contain unresolved criteria");
+        }
+        return { run_id: runId, causes, unresolved };
+    }
+    const acceptance = normalizeAcceptanceSummary(input.acceptance);
+    const unresolved = normalizeUnresolved(input.unresolved);
+    const unsatisfied = unresolved.filter((criterion) => criterion.status === "unsatisfied").length;
+    const unknown = unresolved.filter((criterion) => criterion.status === "unknown").length;
+    if (unsatisfied !== acceptance.unsatisfied ||
+        unknown !== acceptance.unknown ||
+        causes.includes("acceptance_unsatisfied") !== acceptance.unsatisfied > 0 ||
+        causes.includes("acceptance_unknown") !== acceptance.unknown > 0) {
+        throw new Error("workflow attempt failure evidence does not match acceptance");
+    }
+    if (!causes.includes("workflow_error") && acceptance.unsatisfied + acceptance.unknown === 0) {
+        throw new Error("workflow attempt prior context does not describe a failure");
+    }
+    const error = input.error === undefined
+        ? undefined
+        : requiredString(input.error, "workflow attempt prior error", MAX_ERROR);
+    return {
+        run_id: runId,
+        causes,
+        ...(error === undefined ? {} : { error }),
+        acceptance,
+        unresolved,
+    };
+}
+function normalizeAcceptanceSummary(value) {
+    const input = objectValue(value, "workflow attempt acceptance summary");
+    rejectExtraFields(input, SUMMARY_FIELDS, "workflow attempt acceptance summary");
+    const satisfied = safeInteger(input.satisfied, "acceptance satisfied", 0, MAX_CRITERIA);
+    const unsatisfied = safeInteger(input.unsatisfied, "acceptance unsatisfied", 0, MAX_CRITERIA);
+    const unknown = safeInteger(input.unknown, "acceptance unknown", 0, MAX_CRITERIA);
+    const total = safeInteger(input.total, "acceptance total", 0, MAX_CRITERIA);
+    if (satisfied + unsatisfied + unknown !== total) {
+        throw new Error("workflow attempt acceptance summary total does not match its counts");
+    }
+    return { satisfied, unsatisfied, unknown, total };
+}
+function normalizeUnresolved(value) {
+    if (!Array.isArray(value) || value.length > MAX_CRITERIA) {
+        throw new Error(`workflow attempt unresolved criteria must contain at most ${MAX_CRITERIA} entries`);
+    }
+    const ids = new Set();
+    return value.map((candidate, index) => {
+        const input = objectValue(candidate, `workflow attempt unresolved[${index}]`);
+        rejectExtraFields(input, CRITERION_FIELDS, `workflow attempt unresolved[${index}]`);
+        const id = requiredString(input.id, `workflow attempt unresolved[${index}].id`, 64);
+        if (!ACCEPTANCE_ID.test(id)) {
+            throw new Error(`invalid workflow attempt acceptance id ${JSON.stringify(id)}`);
+        }
+        if (ids.has(id))
+            throw new Error(`duplicate workflow attempt acceptance id ${JSON.stringify(id)}`);
+        ids.add(id);
+        if (input.status !== "unsatisfied" && input.status !== "unknown") {
+            throw new Error(`workflow attempt unresolved[${index}].status is invalid`);
+        }
+        return {
+            id,
+            statement: requiredString(input.statement, `workflow attempt unresolved[${index}].statement`, MAX_STATEMENT),
+            status: input.status,
+        };
+    });
+}
+function objectValue(value, field) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(`${field} must be an object`);
+    }
+    return value;
+}
+function rejectExtraFields(value, allowed, field) {
+    const extra = Object.keys(value).find((key) => !allowed.has(key));
+    if (extra)
+        throw new Error(`${field} has unknown field ${JSON.stringify(extra)}`);
+}
+function requiredString(value, field, max) {
+    if (typeof value !== "string" || value.trim() === "")
+        throw new Error(`${field} is required`);
+    const normalized = value.trim();
+    if (normalized.length > max)
+        throw new Error(`${field} exceeds ${max} characters`);
+    return normalized;
+}
+function safeInteger(value, field, min, max) {
+    if (!Number.isSafeInteger(value) || value < min || value > max) {
+        throw new Error(`${field} must be an integer from ${min} to ${max}`);
+    }
+    return value;
+}

package/dist/core/workflow/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAqCH,OAAO,KAAK,EAEV,UAAU,EAEV,SAAS,EAQV,MAAM,YAAY,CAAC;AAYpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAOpF;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAyC1F"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAsCH,OAAO,KAAK,EAEV,UAAU,EAEV,SAAS,EAUV,MAAM,YAAY,CAAC;AAapB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAOpF;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA6E1F"}

package/dist/core/workflow/engine.js

@@ -31,12 +31,14 @@ import { pathToFileURL } from "node:url";
 import { snapshotRepo } from "../context/index.js";
 import { evaluatePolicy, normalizePolicy, PolicyDeniedError, policyDigest, summarizePolicyRequest, } from "../policy/index.js";
 import { assertWorkflowRunId, createWorkflowApproval } from "./approvals.js";
+import { freezeWorkflowAttemptContext } from "./attempt-context.js";
 import { probeBilling } from "./billing.js";
 import { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, writeWorkflowProof, } from "./proof.js";
 import { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 import { normalizeWorkflowSpecialists, resolveSpecialistAssignment } from "./specialists.js";
 import { WORKFLOW_PROOF_SCHEMA_VERSION } from "./types.js";
 import { parseStageOutput, validateAgainstSchema } from "./validate.js";
+import { freezeWorkflowWorkContext } from "./work-context.js";
 const DEFAULT_MAX_AGENTS = 50;
 const DEFAULT_CONCURRENCY = 4;
 const DEFAULT_MAX_ATTEMPTS = 2;
@@ -75,6 +77,25 @@ export async function runWorkflow(scriptPath, opts) {
     if (opts.workItemId && !/^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/.test(opts.workItemId)) {
         throw new Error(`invalid work item id ${JSON.stringify(opts.workItemId)}`);
     }
+    if (opts.resumeRunId && opts.workContext !== undefined) {
+        throw new Error("parked workflow resume uses the frozen manifest work context");
+    }
+    if (opts.resumeRunId && opts.attemptContext !== undefined) {
+        throw new Error("parked workflow resume uses the frozen manifest attempt context");
+    }
+    const requestedWorkContext = opts.workContext === undefined ? undefined : freezeWorkflowWorkContext(opts.workContext);
+    const requestedAttemptContext = opts.attemptContext === undefined
+        ? undefined
+        : freezeWorkflowAttemptContext(opts.attemptContext);
+    if (requestedWorkContext && !opts.workItemId) {
+        throw new Error("workflow work context requires a work item id");
+    }
+    if (requestedWorkContext && requestedWorkContext.id !== opts.workItemId) {
+        throw new Error(`workflow work context ${requestedWorkContext.id} does not match work item ${opts.workItemId}`);
+    }
+    if (requestedAttemptContext && !requestedWorkContext) {
+        throw new Error("workflow attempt context requires work context");
+    }
     if (opts.resumeRunId && opts.resumeFrom) {
         throw new Error("resumeRunId and resumeFrom are mutually exclusive");
     }
@@ -86,6 +107,12 @@ export async function runWorkflow(scriptPath, opts) {
         resumeState.manifest.work_item_id !== opts.workItemId) {
         throw new Error(`workflow run ${opts.resumeRunId} belongs to a different work item`);
     }
+    const workContext = resumeState?.manifest.work_context
+        ? freezeWorkflowWorkContext(resumeState.manifest.work_context)
+        : requestedWorkContext;
+    const attemptContext = resumeState?.manifest.attempt_context
+        ? freezeWorkflowAttemptContext(resumeState.manifest.attempt_context)
+        : requestedAttemptContext;
     const absScript = isAbsolute(scriptPath) ? scriptPath : resolve(process.cwd(), scriptPath);
     if (resumeState) {
         if (resolve(resumeState.manifest.script.path) !== resolve(absScript)) {
@@ -102,13 +129,13 @@ export async function runWorkflow(scriptPath, opts) {
             // the run between the optimistic read and lease acquisition.
             assertWorkflowRunResumable(opts.coordRoot, resumeState.manifest.run_id);
         }
-        return await executeWorkflow(scriptPath, absScript, opts, resumeState);
+        return await executeWorkflow(scriptPath, absScript, opts, resumeState, workContext, attemptContext);
     }
     finally {
         releaseResumeLease?.();
     }
 }
-async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
+async function executeWorkflow(scriptPath, absScript, opts, resumeState, workContext, attemptContext) {
     const mod = (await import(__rewriteRelativeImportExtension(pathToFileURL(absScript).href)));
     if (typeof mod.default !== "function") {
         throw new Error(`${scriptPath}: workflow script must \`export default async (ctx) => …\``);
@@ -149,6 +176,8 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
                 schema_version: 1,
                 run_id: runId,
                 work_item_id: opts.workItemId,
+                work_context: workContext,
+                attempt_context: attemptContext,
                 name,
                 started_at: startedAt,
                 script: { path: absScript, sha256: workflowScriptDigest(absScript) },
@@ -668,7 +697,16 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
             current_cost_usd: round4(costUsd),
         });
     };
-    const ctx = { agent, parallel, stage, log, evidence, authorize };
+    const ctx = {
+        work: workContext,
+        attempt: attemptContext,
+        agent,
+        parallel,
+        stage,
+        log,
+        evidence,
+        authorize,
+    };
     try {
         if (resumeState) {
             journal("run.resume", {
@@ -681,6 +719,8 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
             journal("run.start", {
                 name,
                 work_item_id: opts.workItemId ?? null,
+                work_context: workContext ?? null,
+                attempt_context: attemptContext ?? null,
                 script: absScript,
                 objective: meta.objective ?? null,
                 acceptance: meta.acceptance,
@@ -707,6 +747,8 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
             proof = buildWorkflowProof({
                 runId,
                 workItemId: opts.workItemId ?? resumeState?.manifest.work_item_id,
+                workContext,
+                attemptContext,
                 meta,
                 status: "succeeded",
                 startedAt,
@@ -771,6 +813,8 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState) {
             const proof = buildWorkflowProof({
                 runId,
                 workItemId: opts.workItemId ?? resumeState?.manifest.work_item_id,
+                workContext,
+                attemptContext,
                 meta,
                 status: "failed",
                 startedAt,

package/dist/core/workflow/index.d.ts

@@ -1,9 +1,10 @@
 export type { CreateWorkflowApprovalInput, ResolveWorkflowApprovalInput, WorkflowApproval, WorkflowApprovalDecision, WorkflowApprovalRequest, WorkflowApprovalStatus, } from "./approvals.js";
 export { assertWorkflowRunId, createWorkflowApproval, listWorkflowApprovals, readWorkflowApproval, renderWorkflowApproval, resolveWorkflowApproval, WORKFLOW_APPROVAL_SCHEMA_VERSION, workflowApprovalId, } from "./approvals.js";
+export { freezeWorkflowAttemptContext, isCanonicalWorkflowAttemptContext, normalizeWorkflowAttemptContext, } from "./attempt-context.js";
 export { runWorkflow, WorkflowParkedError, WorkflowRunError } from "./engine.js";
 export { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
 export type { WorkflowRunManifest } from "./run-state.js";
 export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
-export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, HarnessEvidenceCapability, HarnessEvidenceCoverage, HarnessName, ResultDigest, RunReport, Spawner, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, } from "./types.js";
-export { WORKFLOW_PROOF_SCHEMA_VERSION } from "./types.js";
+export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, HarnessEvidenceCapability, HarnessEvidenceCoverage, HarnessName, ResultDigest, RunReport, Spawner, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowAttemptContext, WorkflowAttemptFailureCause, WorkflowAttemptPriorContext, WorkflowAttemptUnresolvedCriterion, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, WorkflowWorkContext, } from "./types.js";
+export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map