harnery 0.22.1 → 0.23.0

package/dist/core/workflow/run-state.js

@@ -1,12 +1,14 @@
-import { createHash, randomUUID } from "node:crypto";
-import { chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { createHash } from "node:crypto";
+import { chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
 import { hostname } from "node:os";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { normalizePolicy, policyDigest, } from "../policy/index.js";
 import { assertWorkflowRunId, readWorkflowApproval } from "./approvals.js";
 import { isCanonicalWorkflowAttemptContext } from "./attempt-context.js";
+import { readJsonRecord, writeImmutableJson } from "./durable-record.js";
 import { normalizeWorkflowSpecialists } from "./specialists.js";
 import { isCanonicalWorkflowWorkContext } from "./work-context.js";
+import { assertWorkspaceManifestAuthority, isWorkspaceBinding, isWorkspaceUnsupportedExecutionEvidence, } from "./workspaces/validate.js";
 export const WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION = 1;
 const MANIFEST_LIMIT_BYTES = 256 * 1024;
 const FOREIGN_LEASE_STALE_MS = 24 * 60 * 60 * 1_000;
@@ -15,6 +17,7 @@ export function workflowScriptDigest(scriptPath) {
 }
 export function writeWorkflowRunManifest(input) {
     assertWorkflowRunId(input.manifest.run_id);
+    assertWorkspaceManifestAuthority(input.manifest, readManifestWorkspaceRequest(input.coordRoot, input.manifest.run_id));
     const path = workflowRunManifestPath(input.coordRoot, input.manifest.run_id);
     if (existsSync(path))
         throw new Error(`workflow run ${input.manifest.run_id} already has a manifest`);
@@ -23,16 +26,7 @@ export function writeWorkflowRunManifest(input) {
         throw new Error(`workflow run manifest exceeds ${MANIFEST_LIMIT_BYTES} bytes`);
     }
     mkdirSync(dirname(path), { recursive: true });
-    const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
-    try {
-        writeFileSync(temporary, body, { encoding: "utf8", flag: "wx", mode: 0o600 });
-        renameSync(temporary, path);
-        chmodSync(path, 0o600);
-    }
-    finally {
-        if (existsSync(temporary))
-            unlinkSync(temporary);
-    }
+    writeImmutableJson(path, input.manifest);
     return path;
 }
 export function readWorkflowRunManifest(coordRoot, runId) {
@@ -74,6 +68,7 @@ export function readWorkflowRunManifest(coordRoot, runId) {
         !validExecution(manifest.execution)) {
         throw new Error(`workflow run manifest at ${path} has an unsupported or mismatched schema`);
     }
+    assertWorkspaceManifestAuthority(manifest, readManifestWorkspaceRequest(coordRoot, runId));
     return manifest;
 }
 export function assertWorkflowRunResumable(coordRoot, runId) {
@@ -213,7 +208,24 @@ function validExecution(value) {
         ["shared", "worktree", "sandbox", "remote"].includes(value.isolation) &&
         ["enabled", "disabled", "unknown"].includes(value.network_access) &&
         validSpecialists(value.specialists) &&
-        validFrozenPolicy(value.policy, value.cwd));
+        validFrozenPolicy(value.policy, value.workspace_binding?.integration_root ?? value.cwd) &&
+        validWorkspaceBinding(value.workspace_binding) &&
+        validWorkspaceFallback(value.workspace_fallback) &&
+        !(value.workspace_binding && value.workspace_fallback) &&
+        (value.workspace_fallback === undefined ||
+            value.workspace_fallback.requested_isolation === value.isolation));
+}
+function readManifestWorkspaceRequest(coordRoot, runId) {
+    const path = join(coordRoot, ".harnery", "workflows", runId, "workspace-request.json");
+    return existsSync(path)
+        ? readJsonRecord(path, "workspace request")
+        : undefined;
+}
+function validWorkspaceBinding(binding) {
+    return binding === undefined || isWorkspaceBinding(binding);
+}
+function validWorkspaceFallback(fallback) {
+    return fallback === undefined || isWorkspaceUnsupportedExecutionEvidence(fallback);
 }
 function validSpecialists(specialists) {
     if (specialists === undefined)

package/dist/core/workflow/types.d.ts

@@ -8,6 +8,7 @@
  */
 import type { DispatchCostEstimator, ExternalMutationRequest, NormalizedPolicy, PolicyAskResolver, PolicyDecision, PolicyIsolation, PolicyNetworkAccess, PolicySpec } from "../policy/index.js";
 import type { BillingMode, BillingProber } from "./billing.js";
+import type { WorkspaceBinding, WorkspaceExecutionEvidence, WorkspaceProvider } from "./workspaces/index.js";
 export declare const WORKFLOW_PROOF_SCHEMA_VERSION: 1;
 export declare const WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION: 1;
 export declare const WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION: 1;
@@ -141,6 +142,8 @@ export interface WorkflowProof {
     agents: WorkflowAgentProof[];
     evidence: WorkflowEvidenceRecord[];
     policy?: WorkflowPolicyProof;
+    /** Immutable terminal provider evidence for isolated execution. */
+    execution?: WorkspaceExecutionEvidence;
     repository: WorkflowRepoEvidence;
     harnesses: HarnessEvidenceCoverage[];
     unknowns: WorkflowProofUnknown[];
@@ -387,6 +390,11 @@ export interface EngineOpts {
     isolation?: PolicyIsolation;
     /** Network state of spawned harness subprocesses (default unknown). */
     networkAccess?: PolicyNetworkAccess;
+    /** Explicit provider and host-owned roots. Omit for shared or declaration-only execution. */
+    workspace?: {
+        provider: WorkspaceProvider;
+        writableRoots: readonly string[];
+    };
 }
 export interface RunReport {
     runId: string;
@@ -413,5 +421,7 @@ export interface RunReport {
     }>;
     /** Policy verdict totals when the host supplied a policy. */
     policy?: WorkflowPolicyProof["summary"];
+    /** Isolated workspace binding when this run requested a provider capability. */
+    workspaceBinding?: WorkspaceBinding;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/core/workflow/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE/D,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AACxD,eAAO,MAAM,oCAAoC,EAAG,CAAU,CAAC;AAC/D,eAAO,MAAM,uCAAuC,EAAG,CAAU,CAAC;AAElE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,aAAa,CAAC;AACjG,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAC1E,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;AACnD,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,QAAQ,CAAC;AACvD,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,0EAA0E;IAC1E,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,KAAK,EAAE;QACL,cAAc,EAAE,OAAO,CAAC;QACxB,YAAY,EAAE,OAAO,CAAC;QACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5B,mBAAmB,EAAE,MAAM,EAAE,CAAC;QAC9B,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,kFAAkF;QAClF,UAAU,EAAE,OAAO,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,EAAE;QACb,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;QAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,QAAQ,EAAE;QACR,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EACA,2BAA2B,GAC3B,iCAAiC,GACjC,uBAAuB,GACvB,0BAA0B,GAC1B,6BAA6B,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,OAAO,6BAA6B,CAAC;IACrD,GAAG,EAAE;QACH,EAAE,EAAE,MAAM,CAAC;QACX,wEAAwE;QACxE,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,iBAAiB,CAAC;QAC1B,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,mBAAmB,CAAC;QACnC,eAAe,CAAC,EAAE,sBAAsB,CAAC;QACzC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,YAAY,CAAC;KACvB,CAAC;IACF,UAAU,EAAE;QACV,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QAC7B,OAAO,EAAE,iBAAiB,CAAC;KAC5B,CAAC;IACF,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,uBAAuB,EAAE,CAAC;IACrC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,SAAS,EAAE;QACT,OAAO,EAAE;YACP,IAAI,EAAE,eAAe,CAAC;YACtB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,CAAC,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,eAAe,CAAC;IAC3B,cAAc,EAAE,mBAAmB,CAAC;IACpC,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,uBAAuB,CAAC,eAAe,CAAC,CAAC;CACxD;AAED,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3D,oEAAoE;IACpE,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,SAAS;IACxB;gFAC4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;8EAE0E;IAC1E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;uDACmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;sDACkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;kBAEc;IACd,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED;;kCAEkC;AAClC,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC;8EAC8E;AAC9E,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;2EACuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;8DAC0D;IAC1D,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;8EAC8E;AAC9E,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAElE;+EAC+E;AAC/E,MAAM,WAAW,eAAe;IAC9B;wDACoD;IACpD,IAAI,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACrC;gFAC4E;IAC5E,OAAO,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC3C,6EAA6E;IAC7E,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,8EAA8E;IAC9E,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3E,+DAA+D;IAC/D,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,2CAA2C;IAC3C,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,qFAAqF;IACrF,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,MAAM,CAAC;IACnD,0EAA0E;IAC1E,SAAS,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACpC;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,EAAE,OAAO,oCAAoC,CAAC;IACrE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,MAAM,2BAA2B,GACnC,gBAAgB,GAChB,wBAAwB,GACxB,oBAAoB,GACpB,MAAM,CAAC;AAEX,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACpE;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,EAAE,OAAO,uCAAuC,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB;iDAC6C;IAC7C,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC;IAC7D,kFAAkF;IAClF,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B,sEAAsE;IACtE,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAClE;;6EAEyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;8DAE0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;6EACyE;IACzE,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC;4EACwE;IACxE,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B;;+BAE2B;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;iCAG6B;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,yEAAyE;IACzE,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B;mDAC+C;IAC/C,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,mFAAmF;IACnF,MAAM,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAAC;IACvC,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC,4FAA4F;IAC5F,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;IAC7C,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,uEAAuE;IACvE,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B;;gFAE4E;IAC5E,6BAA6B,EAAE,MAAM,CAAC;IACtC,6EAA6E;IAC7E,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAC5D,6DAA6D;IAC7D,MAAM,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;CACzC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,KAAK,EACV,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AACxD,eAAO,MAAM,oCAAoC,EAAG,CAAU,CAAC;AAC/D,eAAO,MAAM,uCAAuC,EAAG,CAAU,CAAC;AAElE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,aAAa,CAAC;AACjG,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAC1E,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;AACnD,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,QAAQ,CAAC;AACvD,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,0EAA0E;IAC1E,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,KAAK,EAAE;QACL,cAAc,EAAE,OAAO,CAAC;QACxB,YAAY,EAAE,OAAO,CAAC;QACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5B,mBAAmB,EAAE,MAAM,EAAE,CAAC;QAC9B,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,kFAAkF;QAClF,UAAU,EAAE,OAAO,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,EAAE;QACb,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;QAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,QAAQ,EAAE;QACR,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EACA,2BAA2B,GAC3B,iCAAiC,GACjC,uBAAuB,GACvB,0BAA0B,GAC1B,6BAA6B,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,OAAO,6BAA6B,CAAC;IACrD,GAAG,EAAE;QACH,EAAE,EAAE,MAAM,CAAC;QACX,wEAAwE;QACxE,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,iBAAiB,CAAC;QAC1B,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,mBAAmB,CAAC;QACnC,eAAe,CAAC,EAAE,sBAAsB,CAAC;QACzC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,YAAY,CAAC;KACvB,CAAC;IACF,UAAU,EAAE;QACV,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QAC7B,OAAO,EAAE,iBAAiB,CAAC;KAC5B,CAAC;IACF,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,mEAAmE;IACnE,SAAS,CAAC,EAAE,0BAA0B,CAAC;IACvC,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,uBAAuB,EAAE,CAAC;IACrC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,SAAS,EAAE;QACT,OAAO,EAAE;YACP,IAAI,EAAE,eAAe,CAAC;YACtB,MAAM,EAAE,MAAM,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,CAAC,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,eAAe,CAAC;IAC3B,cAAc,EAAE,mBAAmB,CAAC;IACpC,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,uBAAuB,CAAC,eAAe,CAAC,CAAC;CACxD;AAED,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3D,oEAAoE;IACpE,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,SAAS;IACxB;gFAC4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;8EAE0E;IAC1E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;uDACmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;sDACkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;kBAEc;IACd,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED;;kCAEkC;AAClC,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC;8EAC8E;AAC9E,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;2EACuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;8DAC0D;IAC1D,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;8EAC8E;AAC9E,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAElE;+EAC+E;AAC/E,MAAM,WAAW,eAAe;IAC9B;wDACoD;IACpD,IAAI,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACrC;gFAC4E;IAC5E,OAAO,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC3C,6EAA6E;IAC7E,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,8EAA8E;IAC9E,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3E,+DAA+D;IAC/D,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,2CAA2C;IAC3C,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,qFAAqF;IACrF,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,MAAM,CAAC;IACnD,0EAA0E;IAC1E,SAAS,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACpC;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,EAAE,OAAO,oCAAoC,CAAC;IACrE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,MAAM,2BAA2B,GACnC,gBAAgB,GAChB,wBAAwB,GACxB,oBAAoB,GACpB,MAAM,CAAC;AAEX,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACpE;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,EAAE,OAAO,uCAAuC,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB;iDAC6C;IAC7C,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC;IAC7D,kFAAkF;IAClF,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B,sEAAsE;IACtE,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAClE;;6EAEyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;8DAE0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;6EACyE;IACzE,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC;4EACwE;IACxE,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B;;+BAE2B;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;iCAG6B;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,yEAAyE;IACzE,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B;mDAC+C;IAC/C,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,mFAAmF;IACnF,MAAM,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAAC;IACvC,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC,4FAA4F;IAC5F,oBAAoB,CAAC,EAAE,qBAAqB,CAAC;IAC7C,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,uEAAuE;IACvE,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,6FAA6F;IAC7F,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,iBAAiB,CAAC;QAC5B,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;KAClC,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,iBAAiB,CAAC;IAC9B;;gFAE4E;IAC5E,6BAA6B,EAAE,MAAM,CAAC;IACtC,6EAA6E;IAC7E,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAC5D,6DAA6D;IAC7D,MAAM,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxC,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC"}

package/dist/core/workflow/workspaces/attestation-error.d.ts

@@ -0,0 +1,7 @@
+import type { WorkspaceAttestation, WorkspaceBinding } from "./types.js";
+export declare class WorkspaceAttestationError extends Error {
+    readonly attestation: WorkspaceAttestation;
+    constructor(message: string, attestation: WorkspaceAttestation);
+}
+export declare function workspaceAttestationFromError(error: unknown, binding: WorkspaceBinding): WorkspaceAttestation | undefined;
+//# sourceMappingURL=attestation-error.d.ts.map

package/dist/core/workflow/workspaces/attestation-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation-error.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/attestation-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGzE,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;gBAE/B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB;CAK/D;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,gBAAgB,GACxB,oBAAoB,GAAG,SAAS,CAalC"}

package/dist/core/workflow/workspaces/attestation-error.js

@@ -0,0 +1,25 @@
+import { isWorkspaceAttestation } from "./validate.js";
+export class WorkspaceAttestationError extends Error {
+    attestation;
+    constructor(message, attestation) {
+        super(message);
+        this.name = "WorkspaceAttestationError";
+        this.attestation = attestation;
+    }
+}
+export function workspaceAttestationFromError(error, binding) {
+    const seen = new Set();
+    let current = error;
+    while (current !== undefined && current !== null && !seen.has(current)) {
+        seen.add(current);
+        if (isWorkspaceAttestation(current, binding))
+            return current;
+        if (typeof current !== "object")
+            return undefined;
+        if ("attestation" in current && isWorkspaceAttestation(current.attestation, binding)) {
+            return current.attestation;
+        }
+        current = "cause" in current ? current.cause : undefined;
+    }
+    return undefined;
+}

package/dist/core/workflow/workspaces/cancellation.d.ts

@@ -0,0 +1,8 @@
+import type { WorkspaceCancellationReceipt, WorkspaceProvider } from "./types.js";
+export interface CancelWorkspaceInput {
+    coordRoot: string;
+    runId: string;
+    provider: WorkspaceProvider;
+}
+export declare function cancelWorkspace(input: CancelWorkspaceInput): Promise<WorkspaceCancellationReceipt>;
+//# sourceMappingURL=cancellation.d.ts.map

package/dist/core/workflow/workspaces/cancellation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancellation.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/cancellation.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAEV,4BAA4B,EAE5B,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,iBAAiB,CAAC;CAC7B;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,4BAA4B,CAAC,CA0DvC"}

package/dist/core/workflow/workspaces/cancellation.js

@@ -0,0 +1,95 @@
+import { acquireWorkEventLease, readWorkItemIgnoringLease, } from "../../work/state.js";
+import { readWorkflowRunManifest } from "../run-state.js";
+import { appendWorkflowJournalEvent, readWorkflowSupplement, stableDigest, writeWorkflowSupplement, } from "./state.js";
+import { isWorkspaceAttestation } from "./validate.js";
+export async function cancelWorkspace(input) {
+    const manifest = readWorkflowRunManifest(input.coordRoot, input.runId);
+    const binding = manifest.execution.workspace_binding;
+    if (binding?.owner.kind !== "work_attempt") {
+        throw new Error("workspace cancellation requires a work-linked isolated binding");
+    }
+    const release = acquireWorkEventLease(input.coordRoot, binding.owner.work_item_id);
+    try {
+        const cancellation = currentWorkCancellation(input.coordRoot, binding);
+        const bindingSha256 = stableDigest(binding);
+        const eventSha256 = stableDigest(cancellation);
+        const prior = readWorkflowSupplement(input.coordRoot, input.runId, "cancellation/outcome.json");
+        if (prior) {
+            validateCancellationReceipt(prior, binding, cancellation);
+            return prior;
+        }
+        const providerBinding = await input.provider.readBinding(binding);
+        if (stableDigest(providerBinding) !== bindingSha256) {
+            throw new Error("workspace cancellation provider binding differs from the frozen manifest");
+        }
+        const result = await input.provider.cancel(binding);
+        validateCancellationResult(result, binding);
+        const receipt = {
+            schema_version: 1,
+            receipt_id: `cancellation-${stableDigest({
+                binding: bindingSha256,
+                event: eventSha256,
+                result,
+            }).slice(0, 24)}`,
+            run_id: input.runId,
+            binding_id: binding.binding_id,
+            binding_sha256: bindingSha256,
+            work_item_id: binding.owner.work_item_id,
+            work_event_seq: cancellation.seq,
+            work_event_sha256: eventSha256,
+            status: result.status,
+            recorded_at: result.recorded_at,
+            attestation: result.attestation,
+            reason: result.reason,
+        };
+        writeWorkflowSupplement(input.coordRoot, input.runId, "cancellation/outcome.json", receipt);
+        appendWorkflowJournalEvent(input.coordRoot, input.runId, "workspace.cancel", {
+            binding_id: binding.binding_id,
+            provider_id: binding.provider.id,
+            receipt_id: receipt.receipt_id,
+            work_event_seq: cancellation.seq,
+            work_event_sha256: eventSha256,
+            status: receipt.status,
+        });
+        return receipt;
+    }
+    finally {
+        release();
+    }
+}
+function currentWorkCancellation(coordRoot, binding) {
+    if (binding.owner.kind !== "work_attempt") {
+        throw new Error("workspace cancellation requires a work attempt owner");
+    }
+    const work = readWorkItemIgnoringLease(coordRoot, binding.owner.work_item_id);
+    const governance = [...work.events]
+        .reverse()
+        .find((event) => ["work.accepted", "work.cancelled", "work.reopened"].includes(event.event));
+    if (work.projection.state !== "cancelled" || governance?.event !== "work.cancelled") {
+        throw new Error("workspace cancellation requires the current host work cancellation");
+    }
+    return governance;
+}
+function validateCancellationResult(result, binding) {
+    if (result.schema_version !== 1 ||
+        result.binding_id !== binding.binding_id ||
+        !["cancelled", "unsupported", "preserved_dirty", "blocked"].includes(result.status) ||
+        !Number.isFinite(Date.parse(result.recorded_at)) ||
+        !isWorkspaceAttestation(result.attestation, binding)) {
+        throw new Error("workspace cancellation provider returned an invalid result");
+    }
+}
+function validateCancellationReceipt(receipt, binding, cancellation) {
+    if (receipt.schema_version !== 1 ||
+        receipt.run_id !== binding.run_id ||
+        receipt.binding_id !== binding.binding_id ||
+        receipt.binding_sha256 !== stableDigest(binding) ||
+        receipt.work_item_id !== binding.owner.work_item_id ||
+        receipt.work_event_seq !== cancellation.seq ||
+        receipt.work_event_sha256 !== stableDigest(cancellation) ||
+        !["cancelled", "unsupported", "preserved_dirty", "blocked"].includes(receipt.status) ||
+        !Number.isFinite(Date.parse(receipt.recorded_at)) ||
+        !isWorkspaceAttestation(receipt.attestation, binding)) {
+        throw new Error("workspace cancellation outcome does not match current host authority");
+    }
+}

package/dist/core/workflow/workspaces/cleanup.d.ts

@@ -0,0 +1,9 @@
+import type { WorkspaceCleanupAttempt, WorkspaceCleanupMode, WorkspaceCleanupReceipt, WorkspaceProvider } from "./types.js";
+export interface CleanupWorkspaceInput {
+    coordRoot: string;
+    runId: string;
+    provider: WorkspaceProvider;
+    mode?: WorkspaceCleanupMode;
+}
+export declare function cleanupWorkspace(input: CleanupWorkspaceInput): Promise<WorkspaceCleanupAttempt | WorkspaceCleanupReceipt>;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/core/workflow/workspaces/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/cleanup.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAEV,uBAAuB,EAEvB,oBAAoB,EACpB,uBAAuB,EAEvB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,IAAI,CAAC,EAAE,oBAAoB,CAAC;CAC7B;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,uBAAuB,GAAG,uBAAuB,CAAC,CAO5D"}

package/dist/core/workflow/workspaces/cleanup.js

@@ -0,0 +1,223 @@
+import { join } from "node:path";
+import { readWorkflowProof } from "../proof.js";
+import { readWorkflowRunManifest } from "../run-state.js";
+import { acquireNoClobberLease } from "./leases.js";
+import { containsPath } from "./paths.js";
+import { appendCleanupAttempt, appendWorkflowJournalEvent, readCleanupAttempts, readWorkflowSupplement, stableDigest, workflowRunDir, writeWorkflowSupplement, } from "./state.js";
+import { isWorkspaceAttestation, isWorkspaceBoundExecutionEvidence } from "./validate.js";
+const CLEANUP_LEASE_STALE_MS = 5 * 60 * 1_000;
+export async function cleanupWorkspace(input) {
+    const release = acquireCleanupLease(input.coordRoot, input.runId);
+    try {
+        return await cleanupWorkspaceUnderLease(input);
+    }
+    finally {
+        release();
+    }
+}
+async function cleanupWorkspaceUnderLease(input) {
+    const manifest = readWorkflowRunManifest(input.coordRoot, input.runId);
+    const proof = readWorkflowProof(input.coordRoot, input.runId);
+    const binding = manifest.execution.workspace_binding;
+    if (!binding ||
+        !isWorkspaceBoundExecutionEvidence(proof.execution, input.runId) ||
+        stableDigest(binding) !== stableDigest(proof.execution.binding)) {
+        throw new Error("workspace cleanup requires matching terminal execution evidence");
+    }
+    assertCleanupPathAuthority(binding, manifest.execution.policy?.allowed_paths ?? []);
+    const mode = input.mode ?? "normal";
+    const current = await input.provider.attest(binding);
+    if (!isWorkspaceAttestation(current, binding)) {
+        throw new Error("workspace cleanup provider returned an invalid current attestation");
+    }
+    const intent = resolveCleanupIntent(input, binding, current, mode);
+    for (const attempt of readCleanupAttempts(input.coordRoot, input.runId)) {
+        if (attempt.operation_id !== intent.operation_id ||
+            attempt.binding_id !== binding.binding_id ||
+            attempt.binding_sha256 !== intent.binding_sha256 ||
+            attempt.mode !== intent.mode ||
+            (attempt.attestation !== undefined && !isWorkspaceAttestation(attempt.attestation, binding))) {
+            throw new Error("workspace cleanup attempt does not match the immutable intent");
+        }
+    }
+    const receipt = readWorkflowSupplement(input.coordRoot, input.runId, "cleanup/receipt.json");
+    if (receipt) {
+        validateCleanupReceipt(receipt, binding, intent);
+        if (!isReleasedAttestation(current)) {
+            throw new Error("existing cleanup receipt no longer reattests exact resource absence");
+        }
+        return receipt;
+    }
+    appendCleanupAttempt(input.coordRoot, input.runId, {
+        schema_version: 1,
+        operation_id: intent.operation_id,
+        binding_id: binding.binding_id,
+        binding_sha256: intent.binding_sha256,
+        mode,
+        status: "started",
+        recorded_at: new Date().toISOString(),
+    });
+    const result = await input.provider.cleanup(binding, intent);
+    validateCleanupResult(result, binding);
+    const attempt = appendCleanupAttempt(input.coordRoot, input.runId, {
+        schema_version: 1,
+        operation_id: intent.operation_id,
+        binding_id: binding.binding_id,
+        binding_sha256: intent.binding_sha256,
+        mode,
+        status: result.status,
+        branch_deleted: result.branch_deleted,
+        attestation: result.attestation,
+        reason: result.reason,
+        recorded_at: result.recorded_at,
+    });
+    appendWorkflowJournalEvent(input.coordRoot, input.runId, "workspace.cleanup", {
+        binding_id: binding.binding_id,
+        provider_id: binding.provider.id,
+        operation_id: intent.operation_id,
+        attempt: attempt.seq,
+        status: attempt.status,
+    });
+    if (result.status !== "released" && result.status !== "already_released") {
+        return attempt;
+    }
+    if (!result.branch_deleted || !isReleasedAttestation(result.attestation)) {
+        throw new Error("workspace cleanup cannot receipt an incomplete resource release");
+    }
+    const terminal = {
+        schema_version: 1,
+        receipt_id: `cleanup-${stableDigest({
+            operation: intent.operation_id,
+            binding: intent.binding_sha256,
+        }).slice(0, 24)}`,
+        operation_id: intent.operation_id,
+        binding_id: binding.binding_id,
+        binding_sha256: intent.binding_sha256,
+        mode,
+        status: result.status,
+        branch_deleted: true,
+        attestation: result.attestation,
+        recorded_at: result.recorded_at,
+    };
+    writeWorkflowSupplement(input.coordRoot, input.runId, "cleanup/receipt.json", terminal);
+    return terminal;
+}
+function assertCleanupPathAuthority(binding, allowedPaths) {
+    if (allowedPaths.length > 0 &&
+        (!allowedPaths.some((root) => containsPath(root, binding.workspace_root)) ||
+            !allowedPaths.some((root) => containsPath(root, binding.active_root)) ||
+            (binding.repository !== undefined &&
+                (!allowedPaths.some((root) => containsPath(root, binding.repository.source_root.realpath)) ||
+                    !allowedPaths.some((root) => containsPath(root, binding.repository.common_dir.realpath)))))) {
+        throw new Error("workspace cleanup path is outside frozen policy path authority");
+    }
+    if (!containsPath(binding.writable_root.realpath, binding.workspace_root) ||
+        !containsPath(binding.writable_root.realpath, binding.active_root)) {
+        throw new Error("workspace cleanup path is outside frozen writable-root authority");
+    }
+}
+function acquireCleanupLease(coordRoot, runId) {
+    const authoritySha256 = stableDigest({ run_id: runId, operation: "cleanup" });
+    const lease = acquireNoClobberLease({
+        path: join(workflowRunDir(coordRoot, runId), "cleanup", "operation.lease"),
+        scope: "cleanup",
+        authoritySha256,
+        staleAfterMs: CLEANUP_LEASE_STALE_MS,
+        metadata: { run_id: runId },
+        validateStaleOwner: (owner) => owner.authority_sha256 === authoritySha256 && owner.metadata?.run_id === runId,
+    });
+    return () => lease.release();
+}
+function resolveCleanupIntent(input, binding, attestation, mode) {
+    if (!binding.repository)
+        throw new Error("workspace cleanup requires repository identity");
+    const bindingSha256 = stableDigest(binding);
+    const operationId = `cleanup-${stableDigest({ binding: bindingSha256, mode }).slice(0, 24)}`;
+    const prior = readWorkflowSupplement(input.coordRoot, input.runId, "cleanup/intent.json");
+    if (prior) {
+        if (prior.schema_version !== 1 ||
+            prior.run_id !== input.runId ||
+            prior.binding_id !== binding.binding_id ||
+            prior.binding_sha256 !== bindingSha256 ||
+            prior.mode !== mode ||
+            prior.operation_id !== operationId) {
+            throw new Error("existing cleanup intent does not match current workspace authority");
+        }
+        validateCleanupIntentExpected(prior, binding);
+        return prior;
+    }
+    const workspaceRefOid = attestation.repository?.workspace_ref_oid;
+    const targetRefOid = attestation.repository?.target_ref_oid;
+    if (!workspaceRefOid || !targetRefOid) {
+        throw new Error("workspace cleanup cannot freeze exact source and target ref identities");
+    }
+    const proposed = {
+        schema_version: 1,
+        run_id: input.runId,
+        operation_id: operationId,
+        binding_id: binding.binding_id,
+        binding_sha256: bindingSha256,
+        mode,
+        expected: {
+            worktree_path: binding.workspace_root,
+            gitdir: binding.repository.gitdir,
+            workspace_ref: binding.repository.workspace_ref,
+            workspace_ref_oid: workspaceRefOid,
+            target_ref: binding.repository.target_ref,
+            target_ref_oid: targetRefOid,
+        },
+        created_at: new Date().toISOString(),
+    };
+    writeWorkflowSupplement(input.coordRoot, input.runId, "cleanup/intent.json", proposed);
+    return proposed;
+}
+function validateCleanupIntentExpected(intent, binding) {
+    const repository = binding.repository;
+    if (!repository ||
+        intent.expected.worktree_path !== binding.workspace_root ||
+        stableDigest(intent.expected.gitdir) !== stableDigest(repository.gitdir) ||
+        intent.expected.workspace_ref !== repository.workspace_ref ||
+        intent.expected.target_ref !== repository.target_ref ||
+        !/^[0-9a-f]{40,64}$/.test(intent.expected.workspace_ref_oid) ||
+        !/^[0-9a-f]{40,64}$/.test(intent.expected.target_ref_oid)) {
+        throw new Error("cleanup intent expected identities do not match the workspace binding");
+    }
+}
+function validateCleanupResult(result, binding) {
+    if (result.schema_version !== 1 ||
+        result.binding_id !== binding.binding_id ||
+        ![
+            "released",
+            "already_released",
+            "preserved_dirty",
+            "blocked",
+            "unsupported",
+            "partial",
+        ].includes(result.status) ||
+        !Number.isFinite(Date.parse(result.recorded_at)) ||
+        typeof result.branch_deleted !== "boolean" ||
+        !isWorkspaceAttestation(result.attestation, binding) ||
+        ((result.status === "released" || result.status === "already_released") &&
+            !isReleasedAttestation(result.attestation))) {
+        throw new Error("workspace cleanup provider returned an invalid result");
+    }
+}
+function validateCleanupReceipt(receipt, binding, intent) {
+    if (receipt.schema_version !== 1 ||
+        receipt.operation_id !== intent.operation_id ||
+        receipt.binding_id !== binding.binding_id ||
+        receipt.binding_sha256 !== intent.binding_sha256 ||
+        receipt.mode !== intent.mode ||
+        (receipt.status !== "released" && receipt.status !== "already_released") ||
+        receipt.branch_deleted !== true ||
+        !isWorkspaceAttestation(receipt.attestation, binding) ||
+        !isReleasedAttestation(receipt.attestation)) {
+        throw new Error("workspace cleanup receipt is invalid or mismatched");
+    }
+}
+function isReleasedAttestation(attestation) {
+    return (attestation.status === "ok" &&
+        attestation.provider_drift.length === 0 &&
+        attestation.resource_state === "released" &&
+        !attestation.workspace_exists);
+}

package/dist/core/workflow/workspaces/execution.d.ts

@@ -0,0 +1,25 @@
+import { type NormalizedPolicy } from "../../policy/index.js";
+import type { WorkflowRunManifest } from "../run-state.js";
+import type { EngineOpts, WorkflowAttemptContext, WorkflowWorkContext } from "../types.js";
+import type { WorkspaceAttestation, WorkspaceBinding, WorkspaceProvider, WorkspaceUnsupportedExecutionEvidence } from "./types.js";
+interface WorkspaceResumeState {
+    manifest: WorkflowRunManifest;
+}
+export declare function resolveWorkspaceBinding(input: {
+    opts: EngineOpts;
+    resumeState: WorkspaceResumeState | undefined;
+    runId: string;
+    cwd: string;
+    isolation: string;
+    absScript: string;
+    scriptSha256: string;
+    provider: WorkspaceProvider | undefined;
+    workContext: Readonly<WorkflowWorkContext> | undefined;
+    attemptContext: Readonly<WorkflowAttemptContext> | undefined;
+    policy: NormalizedPolicy | undefined;
+    onUnsupportedFallback?: (evidence: WorkspaceUnsupportedExecutionEvidence) => void;
+}): Promise<WorkspaceBinding | undefined>;
+export declare function attestTerminal(provider: WorkspaceProvider | undefined, binding: WorkspaceBinding): Promise<WorkspaceAttestation>;
+export declare function attestWorkspaceFailure(provider: WorkspaceProvider | undefined, binding: WorkspaceBinding, error: unknown): Promise<WorkspaceAttestation>;
+export {};
+//# sourceMappingURL=execution.d.ts.map

package/dist/core/workflow/workspaces/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/execution.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,gBAAgB,EAAgB,MAAM,uBAAuB,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAU3F,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,iBAAiB,EACjB,qCAAqC,EACtC,MAAM,YAAY,CAAC;AAGpB,UAAU,oBAAoB;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACxC,WAAW,EAAE,QAAQ,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;IACvD,cAAc,EAAE,QAAQ,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC;IAC7D,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACrC,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,qCAAqC,KAAK,IAAI,CAAC;CACnF,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAuOxC;AAgDD,wBAAsB,cAAc,CAClC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,oBAAoB,CAAC,CAa/B;AAED,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,oBAAoB,CAAC,CAW/B"}