harnery 0.29.0 → 0.31.0

package/dist/core/workflow/evidence-preflight.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Reject an unusable evidence kind before the first agent is spawned.
+ *
+ * `evidence()` is by construction near the end of a workflow, so an invalid
+ * kind throws after every agent has finished. Measured: a fifty-minute run with
+ * three completed agents died at its final line on `kind: "design"`, reported
+ * `work_failed`, and burned an attempt. The work survived only because it had
+ * already been written to the tree; nothing in the proof could recover it.
+ *
+ * A workflow's evidence kinds are usually written literally, and a literal is
+ * checkable by reading the file. Where a kind is computed the scan says nothing
+ * and the existing runtime validation still applies — a partial check that
+ * costs one file read is worth more than a complete one nobody can implement.
+ */
+export interface EvidencePreflightProblem {
+    kind: string;
+    line: number;
+}
+/** Every literal `evidence({ kind: … })` in this source whose kind is not in the
+ * vocabulary. Computed kinds are invisible here, by design. */
+export declare function findInvalidEvidenceKinds(source: string): EvidencePreflightProblem[];
+/** The thrown message, or undefined when the script is clean or unreadable. */
+export declare function evidencePreflightError(source: string, scriptPath: string): string | undefined;
+//# sourceMappingURL=evidence-preflight.d.ts.map

package/dist/core/workflow/evidence-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-preflight.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/evidence-preflight.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;+DAC+D;AAC/D,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,EAAE,CAsBnF;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW7F"}

package/dist/core/workflow/evidence-preflight.js

@@ -0,0 +1,134 @@
+import { EVIDENCE_KINDS } from "./types.js";
+/** Every literal `evidence({ kind: … })` in this source whose kind is not in the
+ * vocabulary. Computed kinds are invisible here, by design. */
+export function findInvalidEvidenceKinds(source) {
+    const { masked, literals } = maskSource(source);
+    const problems = [];
+    const valid = new Set(EVIDENCE_KINDS);
+    for (const call of evidenceCallRanges(masked)) {
+        // `kind` as an object key, then the value's first character. A quote there
+        // means a literal we can read; anything else is computed, so skip it.
+        const property = /\bkind\s*:\s*/g;
+        property.lastIndex = 0;
+        const slice = masked.slice(call.start, call.end);
+        let match = property.exec(slice);
+        while (match !== null) {
+            const valueAt = call.start + match.index + match[0].length;
+            const literal = literals.get(valueAt);
+            if (literal !== undefined && !valid.has(literal)) {
+                problems.push({ kind: literal, line: lineOf(source, valueAt) });
+            }
+            match = property.exec(slice);
+        }
+    }
+    return problems;
+}
+/** The thrown message, or undefined when the script is clean or unreadable. */
+export function evidencePreflightError(source, scriptPath) {
+    const problems = findInvalidEvidenceKinds(source);
+    if (problems.length === 0)
+        return undefined;
+    const listed = problems
+        .map((problem) => `line ${problem.line}: ${JSON.stringify(problem.kind)}`)
+        .join(", ");
+    return (`${scriptPath}: evidence kind must be one of: ${EVIDENCE_KINDS.join(", ")} ` +
+        `(${listed}). Rejected before running, because an invalid kind would otherwise ` +
+        `throw at the end of the workflow and discard the work every agent had already done.`);
+}
+function maskSource(source) {
+    const out = source.split("");
+    const literals = new Map();
+    let index = 0;
+    const blank = (from, to) => {
+        for (let i = from; i < to && i < out.length; i++) {
+            if (out[i] !== "\n")
+                out[i] = " ";
+        }
+    };
+    while (index < source.length) {
+        const char = source[index];
+        const next = source[index + 1];
+        if (char === "/" && next === "/") {
+            const end = source.indexOf("\n", index);
+            blank(index, end === -1 ? source.length : end);
+            index = end === -1 ? source.length : end;
+            continue;
+        }
+        if (char === "/" && next === "*") {
+            const end = source.indexOf("*/", index + 2);
+            const stop = end === -1 ? source.length : end + 2;
+            blank(index, stop);
+            index = stop;
+            continue;
+        }
+        if (char === '"' || char === "'" || char === "`") {
+            const start = index;
+            let cursor = index + 1;
+            let value = "";
+            while (cursor < source.length) {
+                const inner = source[cursor];
+                if (inner === "\\") {
+                    value += source[cursor + 1] ?? "";
+                    cursor += 2;
+                    continue;
+                }
+                if (inner === char)
+                    break;
+                // An unterminated single- or double-quoted string cannot span lines, so
+                // stop rather than swallowing the rest of the file on a syntax error.
+                if (inner === "\n" && char !== "`")
+                    break;
+                value += inner;
+                cursor++;
+            }
+            const closed = source[cursor] === char;
+            blank(start + 1, cursor);
+            if (closed && char !== "`")
+                literals.set(start, value);
+            index = closed ? cursor + 1 : cursor;
+            continue;
+        }
+        index++;
+    }
+    return { masked: out.join(""), literals };
+}
+/** The argument list of every `evidence(` call, as index ranges into the masked
+ * source. A dotted receiver (`ctx.evidence(`) counts; a longer identifier that
+ * merely ends in "evidence" does not. */
+function evidenceCallRanges(masked) {
+    const ranges = [];
+    const call = /evidence\s*\(/g;
+    let match = call.exec(masked);
+    while (match !== null) {
+        const before = match.index > 0 ? masked[match.index - 1] : "";
+        if (!/[A-Za-z0-9_$]/.test(before)) {
+            const open = match.index + match[0].length - 1;
+            const close = matchingParen(masked, open);
+            if (close > open)
+                ranges.push({ start: open + 1, end: close });
+        }
+        match = call.exec(masked);
+    }
+    return ranges;
+}
+function matchingParen(masked, open) {
+    let depth = 0;
+    for (let i = open; i < masked.length; i++) {
+        if (masked[i] === "(")
+            depth++;
+        else if (masked[i] === ")") {
+            depth--;
+            if (depth === 0)
+                return i;
+        }
+    }
+    return -1;
+}
+function lineOf(source, index) {
+    let line = 1;
+    for (let i = 0; i < index && i < source.length; i++) {
+        if (source[i] === "\n")
+            line++;
+    }
+    return line;
+}

package/dist/core/workflow/index.d.ts

@@ -2,10 +2,11 @@ export type { CreateWorkflowApprovalInput, ResolveWorkflowApprovalInput, Workflo
 export { assertWorkflowRunId, createWorkflowApproval, listWorkflowApprovals, readWorkflowApproval, renderWorkflowApproval, resolveWorkflowApproval, WORKFLOW_APPROVAL_SCHEMA_VERSION, workflowApprovalId, } from "./approvals.js";
 export { freezeWorkflowAttemptContext, isCanonicalWorkflowAttemptContext, normalizeWorkflowAttemptContext, } from "./attempt-context.js";
 export { runWorkflow, WorkflowParkedError, WorkflowRunError } from "./engine.js";
-export { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
+export { buildWorkflowProof, createEvidenceRecord, deriveRunFailureClass, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
 export type { WorkflowRunManifest } from "./run-state.js";
 export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
-export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, HarnessEvidenceCapability, HarnessEvidenceCoverage, HarnessName, ResultDigest, RunReport, Spawner, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowAttemptContext, WorkflowAttemptFailureCause, WorkflowAttemptPriorContext, WorkflowAttemptUnresolvedCriterion, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, WorkflowWorkContext, } from "./types.js";
+export { isUpstreamFailureText, vendorFailureText } from "./spawn-failure.js";
+export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AdapterEvidenceCapability, AdapterEvidenceCoverage, AdapterName, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, ResultDigest, RunReport, Spawner, SpawnFailureClass, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowAttemptContext, WorkflowAttemptFailureCause, WorkflowAttemptPriorContext, WorkflowAttemptUnresolvedCriterion, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, WorkflowWorkContext, } from "./types.js";
 export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
 export type { ApplyIntegrationInput, AuthorizedIntegrationPlan, AuthorizedProviderIntegrationInput, CancelWorkspaceInput, CleanupWorkspaceInput, FilesystemIdentity, IntegrationApplyAttempt, IntegrationApplyReceipt, IntegrationAuthorization, IntegrationPlan, IntegrationReviewRecord, IntegrationTarget, LocalGitWorktreeProviderOptions, PrepareIntegrationInput, ProviderIntegrationInput, ProviderIntegrationPreview, ProviderIntegrationResult, ProviderUnknown, ProviderUnsupportedReason, RepositoryBinding, ValidatedFilesystemPath, WorkflowWorkspaceInspection, WorkflowWorkspaceSelection, WorkflowWorkspaceStatus, WorkflowWorkspaceVerification, WorkspaceAllocationRequest, WorkspaceAttestation, WorkspaceBinding, WorkspaceBoundExecutionEvidence, WorkspaceCancellationReceipt, WorkspaceCancellationResult, WorkspaceCleanupAttempt, WorkspaceCleanupIntent, WorkspaceCleanupMode, WorkspaceCleanupReceipt, WorkspaceCleanupResult, WorkspaceCompatibilityExecutionEvidence, WorkspaceExecutionEvidence, WorkspaceIntegrationState, WorkspaceIsolation, WorkspaceLifecycleProjection, WorkspaceLifecycleProjectionInput, WorkspaceLifecycleState, WorkspaceObservation, WorkspaceOwner, WorkspaceProbeInput, WorkspaceProbeResult, WorkspaceProofOutcome, WorkspaceProvider, WorkspaceProviderCapabilities, WorkspaceProviderRef, WorkspaceResourceState, WorkspaceUnsupportedExecutionEvidence, } from "./workspaces/index.js";
 export { applyIntegration, assertWorkspaceLifecycleTransition, cancelWorkspace, cleanupWorkspace, createLocalGitWorktreeProvider, deriveWorkspaceLifecycle, IntegrationPrepareParkedError, inspectWorkflowWorkspace, isWorkspaceLifecycleState, listWorkflowWorkspaceInspections, prepareIntegration, prepareReclaim, probeLocalGitWorktreeProvider, readWorkflowWorkspaceStatus, renderWorkflowWorkspaceStatus, validateProviderEventChain, WORKSPACE_BINDING_SCHEMA_VERSION, WORKSPACE_RECEIPT_SCHEMA_VERSION, } from "./workspaces/index.js";

package/dist/core/workflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,OAAO,EACP,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uCAAuC,EACvC,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,qCAAqC,GACtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kCAAkC,EAClC,eAAe,EACf,gBAAgB,EAChB,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,kBAAkB,EAClB,cAAc,EACd,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uCAAuC,EACvC,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,qCAAqC,GACtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kCAAkC,EAClC,eAAe,EACf,gBAAgB,EAChB,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,kBAAkB,EAClB,cAAc,EACd,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}

package/dist/core/workflow/index.js

@@ -1,7 +1,8 @@
 export { assertWorkflowRunId, createWorkflowApproval, listWorkflowApprovals, readWorkflowApproval, renderWorkflowApproval, resolveWorkflowApproval, WORKFLOW_APPROVAL_SCHEMA_VERSION, workflowApprovalId, } from "./approvals.js";
 export { freezeWorkflowAttemptContext, isCanonicalWorkflowAttemptContext, normalizeWorkflowAttemptContext, } from "./attempt-context.js";
 export { runWorkflow, WorkflowParkedError, WorkflowRunError } from "./engine.js";
-export { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
+export { buildWorkflowProof, createEvidenceRecord, deriveRunFailureClass, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
 export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
+export { isUpstreamFailureText, vendorFailureText } from "./spawn-failure.js";
 export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
 export { applyIntegration, assertWorkspaceLifecycleTransition, cancelWorkspace, cleanupWorkspace, createLocalGitWorktreeProvider, deriveWorkspaceLifecycle, IntegrationPrepareParkedError, inspectWorkflowWorkspace, isWorkspaceLifecycleState, listWorkflowWorkspaceInspections, prepareIntegration, prepareReclaim, probeLocalGitWorktreeProvider, readWorkflowWorkspaceStatus, renderWorkflowWorkspaceStatus, validateProviderEventChain, WORKSPACE_BINDING_SCHEMA_VERSION, WORKSPACE_RECEIPT_SCHEMA_VERSION, } from "./workspaces/index.js";

package/dist/core/workflow/proof.d.ts

@@ -1,6 +1,6 @@
 import type { RepoSnapshot } from "../context/index.js";
 import type { NormalizedPolicy, PolicyDecision, PolicyIsolation, PolicyNetworkAccess } from "../policy/index.js";
-import type { AcceptanceCriterion, AcceptanceResult, AcceptanceSummary, HarnessAttestationCitation, HarnessEvidenceCapability, ResultDigest, WorkflowAgentProof, WorkflowAttemptContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowProof, WorkflowSandboxProjectionEvidence, WorkflowWorkContext } from "./types.js";
+import type { AcceptanceCriterion, AcceptanceResult, AcceptanceSummary, AdapterAttestationCitation, AdapterEvidenceCapability, ResultDigest, SpawnFailureClass, WorkflowAgentProof, WorkflowAttemptContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowProof, WorkflowSandboxProjectionEvidence, WorkflowWorkContext } from "./types.js";
 import type { WorkspaceAttestation, WorkspaceBinding, WorkspaceUnsupportedExecutionEvidence } from "./workspaces/index.js";
 export interface NormalizedWorkflowMeta {
     name: string;
@@ -18,23 +18,29 @@ export interface BuildWorkflowProofInput {
     startedAt: string;
     endedAt: string;
     durationMs: number;
-    journalPath: string;
+    transcriptPath: string;
     before: RepoSnapshot;
     after: RepoSnapshot;
     agents: WorkflowAgentProof[];
     evidence: WorkflowEvidenceRecord[];
-    harnessEvidence?: Readonly<Record<string, HarnessEvidenceCapability | undefined>>;
+    adapterEvidence?: Readonly<Record<string, AdapterEvidenceCapability | undefined>>;
     /** Filesystem policy actually projected into children (ADR 0039). */
     sandboxProjection?: WorkflowSandboxProjectionEvidence;
-    /** Live attestations backing each harness's claims (ADR 0038). Injected by
+    /** Live attestations backing each adapter's claims (ADR 0038). Injected by
      * the caller so proof stays free of filesystem lookups. */
-    harnessAttestations?: Readonly<Record<string, HarnessAttestationCitation | undefined>>;
+    adapterAttestations?: Readonly<Record<string, AdapterAttestationCitation | undefined>>;
     policy?: {
         config: Readonly<NormalizedPolicy>;
         decisions: readonly PolicyDecision[];
         isolation: PolicyIsolation;
         networkAccess: PolicyNetworkAccess;
     };
+    /** Set when the script called ctx.blocked(): the run stopped because a human
+     * must rule. Forces run class "decision" regardless of the agents' classes. */
+    blocked?: {
+        reason: string;
+        decisionId?: string;
+    };
     workspaceBinding?: WorkspaceBinding;
     workspaceAttestation?: WorkspaceAttestation;
     workspaceFallback?: WorkspaceUnsupportedExecutionEvidence;
@@ -54,6 +60,23 @@ export declare function rollupAcceptance(criteria: AcceptanceCriterion[], eviden
     summary: AcceptanceSummary;
 };
 export declare function digestResult(value: unknown, kind?: "text" | "json"): ResultDigest;
+/**
+ * The run-level failure class (ADR 0046), derived from the agents rather than a
+ * single terminal throw so it survives a script's `parallel()` swallowing the
+ * rejection — a swallowed agent's proof is still recorded with its class.
+ *
+ * Rules, in order, all in service of "default to charging":
+ * 1. A succeeded run is never classed (there is nothing uncharged about it).
+ * 2. If ANY agent produced a result (succeeded or replayed from cache) the
+ *    attempt was informative about the work — charge it. This also keeps a
+ *    resumed run whose earlier segment did real work from being written off by
+ *    a later environment failure.
+ * 3. Otherwise, among the failed agents, environment wins over upstream: a
+ *    missing binary means nothing ran at all, and it is the operator-chosen
+ *    hard stop.
+ * 4. Anything else is undefined ⇒ a charged work failure, exactly as today.
+ */
+export declare function deriveRunFailureClass(status: "succeeded" | "failed", agents: readonly Pick<WorkflowAgentProof, "status" | "class">[]): SpawnFailureClass | undefined;
 export declare function buildWorkflowProof(input: BuildWorkflowProofInput): WorkflowProof;
 export declare function writeWorkflowProof(path: string, proof: WorkflowProof): void;
 export declare function readWorkflowProof(coordRoot: string, runId: string): WorkflowProof;

package/dist/core/workflow/proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EACZ,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,qCAAqC,EACtC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,qCAAqC,CAAC;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA6BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CAkDhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAgDjF;AA2BD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EAEZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAEhB,qCAAqC,EACtC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF;mFAC+E;IAC/E,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,qCAAqC,CAAC;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CAyBzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA6DhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAoDjF;AA2BD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}

package/dist/core/workflow/proof.js

@@ -5,7 +5,7 @@ import { policyDigest } from "../policy/index.js";
 import { isCanonicalWorkflowAttemptContext } from "./attempt-context.js";
 import { stableDigest, writeImmutableJson } from "./durable-record.js";
 import { readWorkflowRunManifest } from "./run-state.js";
-import { WORKFLOW_PROOF_SCHEMA_VERSION } from "./types.js";
+import { EVIDENCE_KINDS, WORKFLOW_PROOF_SCHEMA_VERSION } from "./types.js";
 import { isCanonicalWorkflowWorkContext } from "./work-context.js";
 import { isWorkspaceBoundExecutionEvidence, isWorkspaceExecutionEvidence, isWorkspaceUnsupportedExecutionEvidence, workspaceProofLifecycle, } from "./workspaces/validate.js";
 const MAX_ACCEPTANCE_CRITERIA = 50;
@@ -66,7 +66,7 @@ export function createEvidenceRecord(input) {
         id: `e${input.sequence}`,
         source: "workflow",
         recorded_at: input.recordedAt ?? new Date().toISOString(),
-        kind: enumValue(value.kind, ["test", "command", "artifact", "change", "review", "observation"], "evidence kind"),
+        kind: enumValue(value.kind, EVIDENCE_KINDS, "evidence kind"),
         status: enumValue(value.status, ["passed", "failed", "observed", "unknown"], "evidence status"),
         label: boundedRequired(value.label, "evidence label", MAX_LABEL_CHARS),
         summary: boundedOptional(value.summary, "evidence summary", MAX_SUMMARY_CHARS),
@@ -108,6 +108,35 @@ export function digestResult(value, kind) {
         bytes: Buffer.byteLength(serialized),
     };
 }
+/**
+ * The run-level failure class (ADR 0046), derived from the agents rather than a
+ * single terminal throw so it survives a script's `parallel()` swallowing the
+ * rejection — a swallowed agent's proof is still recorded with its class.
+ *
+ * Rules, in order, all in service of "default to charging":
+ * 1. A succeeded run is never classed (there is nothing uncharged about it).
+ * 2. If ANY agent produced a result (succeeded or replayed from cache) the
+ *    attempt was informative about the work — charge it. This also keeps a
+ *    resumed run whose earlier segment did real work from being written off by
+ *    a later environment failure.
+ * 3. Otherwise, among the failed agents, environment wins over upstream: a
+ *    missing binary means nothing ran at all, and it is the operator-chosen
+ *    hard stop.
+ * 4. Anything else is undefined ⇒ a charged work failure, exactly as today.
+ */
+export function deriveRunFailureClass(status, agents) {
+    if (status !== "failed")
+        return undefined;
+    if (agents.some((agent) => agent.status === "succeeded" || agent.status === "cached")) {
+        return undefined;
+    }
+    const failed = agents.filter((agent) => agent.status === "failed");
+    if (failed.some((agent) => agent.class === "environment"))
+        return "environment";
+    if (failed.some((agent) => agent.class === "upstream"))
+        return "upstream";
+    return undefined;
+}
 export function buildWorkflowProof(input) {
     const acceptance = rollupAcceptance(input.meta.acceptance, input.evidence);
     const repository = buildRepoEvidence(input.before, input.after);
@@ -119,9 +148,15 @@ export function buildWorkflowProof(input) {
         session_id: clippedOptional(agent.session_id, MAX_REF_CHARS),
         error: clippedOptional(agent.error, MAX_SUMMARY_CHARS),
     }));
-    const harnesses = buildHarnessCoverage(agents, input.harnessEvidence, input.harnessAttestations);
-    const unknowns = buildUnknowns(agents, harnesses, repository);
-    const journal = readFileSync(input.journalPath);
+    const adapters = buildAdapterCoverage(agents, input.adapterEvidence, input.adapterAttestations);
+    const unknowns = buildUnknowns(agents, adapters, repository);
+    // A declared stop-on-human beats a derived spawn class. If the script said a
+    // human must rule, that is the true reason the run ended, even when some agent
+    // also happened to hit a flaky vendor on the way there.
+    const runClass = input.status === "failed" && input.blocked
+        ? "decision"
+        : deriveRunFailureClass(input.status, agents);
+    const transcript = readFileSync(input.transcriptPath);
     return {
         schema_version: WORKFLOW_PROOF_SCHEMA_VERSION,
         run: {
@@ -137,6 +172,10 @@ export function buildWorkflowProof(input) {
             objective: input.meta.objective,
             error: clippedOptional(input.error, MAX_SUMMARY_CHARS),
             result: input.result === undefined ? undefined : digestResult(input.result),
+            ...(runClass ? { class: runClass } : {}),
+            ...(runClass === "decision" && input.blocked?.decisionId
+                ? { decision_id: clipped(input.blocked.decisionId, MAX_REF_CHARS) }
+                : {}),
         },
         acceptance,
         agents,
@@ -147,13 +186,13 @@ export function buildWorkflowProof(input) {
             : input.workspaceFallback,
         repository,
         ...(input.sandboxProjection ? { sandbox_projection: input.sandboxProjection } : {}),
-        harnesses,
+        adapters,
         unknowns,
         integrity: {
-            journal: {
-                path: "journal.jsonl",
-                sha256: createHash("sha256").update(journal).digest("hex"),
-                bytes: journal.byteLength,
+            transcript: {
+                path: "transcript.jsonl",
+                sha256: createHash("sha256").update(transcript).digest("hex"),
+                bytes: transcript.byteLength,
             },
         },
     };
@@ -212,6 +251,10 @@ export function readWorkflowProof(coordRoot, runId) {
     }
     if (proof.schema_version !== WORKFLOW_PROOF_SCHEMA_VERSION ||
         proof.run?.id !== runId ||
+        (proof.run.class !== undefined &&
+            proof.run.class !== "environment" &&
+            proof.run.class !== "upstream" &&
+            proof.run.class !== "decision") ||
         (proof.run.work_context !== undefined &&
             (!proof.run.work_item_id ||
                 proof.run.work_context.id !== proof.run.work_item_id ||
@@ -292,7 +335,7 @@ export function renderWorkflowProof(proof) {
         for (const unknown of proof.unknowns)
             lines.push(`  - ${unknown.message}`);
     }
-    lines.push(`journal sha256: ${proof.integrity.journal.sha256}`);
+    lines.push(`transcript sha256: ${proof.integrity.transcript.sha256}`);
     return `${lines.join("\n")}\n`;
 }
 function buildRepoEvidence(beforeRaw, afterRaw) {
@@ -329,39 +372,39 @@ function normalizeRepoSnapshot(snapshot) {
         dirty_paths_truncated: snapshot.dirty_paths_truncated,
     };
 }
-function buildHarnessCoverage(agents, claims, attestations) {
-    return [...new Set(agents.map((agent) => agent.harness))].map((harness) => {
-        const harnessAgents = agents.filter((agent) => agent.harness === harness);
+function buildAdapterCoverage(agents, claims, attestations) {
+    return [...new Set(agents.map((agent) => agent.adapter))].map((adapter) => {
+        const adapterAgents = agents.filter((agent) => agent.adapter === adapter);
         return {
-            harness,
-            tool_evidence: claims?.[harness]?.toolEvidence ?? {
+            adapter,
+            tool_evidence: claims?.[adapter]?.toolEvidence ?? {
                 support: "unknown",
-                note: "No harness capability claim was supplied to this workflow run.",
+                note: "No adapter capability claim was supplied to this workflow run.",
             },
             observed: {
-                final_results: harnessAgents.filter((agent) => agent.result).length,
-                session_ids: harnessAgents.filter((agent) => agent.session_id).length,
-                costs: harnessAgents.filter((agent) => agent.cost_usd !== undefined).length,
+                final_results: adapterAgents.filter((agent) => agent.result).length,
+                session_ids: adapterAgents.filter((agent) => agent.session_id).length,
+                costs: adapterAgents.filter((agent) => agent.cost_usd !== undefined).length,
             },
-            ...(attestations?.[harness] ? { attestation: attestations[harness] } : {}),
+            ...(attestations?.[adapter] ? { attestation: attestations[adapter] } : {}),
         };
     });
 }
-function buildUnknowns(agents, harnesses, repository) {
+function buildUnknowns(agents, adapters, repository) {
     const unknowns = [];
-    for (const harness of harnesses) {
-        if (harness.tool_evidence.support === "unknown") {
+    for (const adapter of adapters) {
+        if (adapter.tool_evidence.support === "unknown") {
             unknowns.push({
-                code: "harness_capability_unregistered",
-                harness: harness.harness,
-                message: `${harness.harness}: tool-evidence capability was not registered for this run.`,
+                code: "adapter_capability_unregistered",
+                adapter: adapter.adapter,
+                message: `${adapter.adapter}: tool-evidence capability was not registered for this run.`,
             });
         }
-        else if (harness.tool_evidence.support !== "supported") {
+        else if (adapter.tool_evidence.support !== "supported") {
             unknowns.push({
                 code: "tool_evidence_unavailable",
-                harness: harness.harness,
-                message: `${harness.harness}: adapter-native tool evidence is ${harness.tool_evidence.support}.`,
+                adapter: adapter.adapter,
+                message: `${adapter.adapter}: adapter-native tool evidence is ${adapter.tool_evidence.support}.`,
             });
         }
     }
@@ -369,17 +412,17 @@ function buildUnknowns(agents, harnesses, repository) {
         if (agent.cost_usd === undefined) {
             unknowns.push({
                 code: "agent_cost_unreported",
-                harness: agent.harness,
+                adapter: agent.adapter,
                 agent_id: agent.id,
-                message: `${agent.id}: ${agent.harness} did not report per-run cost.`,
+                message: `${agent.id}: ${agent.adapter} did not report per-run cost.`,
             });
         }
         if (!agent.session_id) {
             unknowns.push({
                 code: "agent_session_unreported",
-                harness: agent.harness,
+                adapter: agent.adapter,
                 agent_id: agent.id,
-                message: `${agent.id}: ${agent.harness} did not report a child session id.`,
+                message: `${agent.id}: ${agent.adapter} did not report a child session id.`,
             });
         }
     }

package/dist/core/workflow/run-state.d.ts

@@ -18,7 +18,7 @@ export interface WorkflowRunManifest {
     repository_before: RepoSnapshot;
     execution: {
         cwd: string;
-        default_harness: string;
+        default_adapter: string;
         max_agents: number;
         concurrency: number;
         subscription_only: boolean;

package/dist/core/workflow/run-state.js

@@ -73,12 +73,12 @@ export function readWorkflowRunManifest(coordRoot, runId) {
 }
 export function assertWorkflowRunResumable(coordRoot, runId) {
     const manifest = readWorkflowRunManifest(coordRoot, runId);
-    const journalPath = join(coordRoot, ".harnery", "workflows", runId, "journal.jsonl");
-    if (!existsSync(journalPath))
-        throw new Error(`workflow run ${runId} has no journal`);
+    const transcriptPath = join(coordRoot, ".harnery", "workflows", runId, "transcript.jsonl");
+    if (!existsSync(transcriptPath))
+        throw new Error(`workflow run ${runId} has no transcript`);
     let approvalId;
     let terminal = false;
-    for (const line of readFileSync(journalPath, "utf8").split("\n")) {
+    for (const line of readFileSync(transcriptPath, "utf8").split("\n")) {
         if (!line.trim())
             continue;
         try {
@@ -90,7 +90,7 @@ export function assertWorkflowRunResumable(coordRoot, runId) {
                 terminal = true;
         }
         catch {
-            throw new Error(`workflow run ${runId} has a malformed journal line`);
+            throw new Error(`workflow run ${runId} has a malformed transcript line`);
         }
     }
     if (terminal)
@@ -195,8 +195,8 @@ function validExecution(value) {
     if (!value || typeof value !== "object")
         return false;
     return (isAbsolute(value.cwd) &&
-        typeof value.default_harness === "string" &&
-        value.default_harness.length > 0 &&
+        typeof value.default_adapter === "string" &&
+        value.default_adapter.length > 0 &&
         positiveSafeInteger(value.max_agents) &&
         positiveSafeInteger(value.concurrency) &&
         typeof value.subscription_only === "boolean" &&

package/dist/core/workflow/sandbox-projection.d.ts

@@ -1,5 +1,5 @@
 /**
- * Project the host's filesystem policy into a harness's own vendor sandbox
+ * Project the host's filesystem policy into a adapter's own vendor sandbox
  * (ADR 0039).
  *
  * Harnery decides where a workflow child may write. Until this existed it never
@@ -13,13 +13,13 @@
  * dropped would leave an operator believing a child was constrained when it was
  * not, which is worse than refusing and worse than never offering the feature.
  */
-import type { HarnessSandboxProjection } from "../harnesses/types.js";
+import type { AdapterSandboxProjection } from "../adapters/types.js";
 import type { GitAdministrativeGrant, SpawnFilesystemPolicy } from "./types.js";
 import type { WorkspaceBinding } from "./workspaces/types.js";
 export declare class SandboxProjectionError extends Error {
-    readonly harness: string;
+    readonly adapter: string;
     readonly reason: "mode_unrepresentable" | "writable_roots_unrepresentable" | "no_projection" | "writable_root_escapes_workspace" | "git_grant_unavailable";
-    constructor(harness: string, reason: SandboxProjectionError["reason"], message: string);
+    constructor(adapter: string, reason: SandboxProjectionError["reason"], message: string);
 }
 export interface ResolvedSandboxProjection {
     /** Vendor-native name for the requested mode. */
@@ -30,7 +30,7 @@ export interface ResolvedSandboxProjection {
  * Resolve a requested policy against what the adapter declares it can carry.
  * Throws rather than degrading; see the module note.
  */
-export declare function resolveSandboxProjection(harness: string, declaration: HarnessSandboxProjection | undefined, policy: SpawnFilesystemPolicy): ResolvedSandboxProjection;
+export declare function resolveSandboxProjection(adapter: string, declaration: AdapterSandboxProjection | undefined, policy: SpawnFilesystemPolicy): ResolvedSandboxProjection;
 /**
  * Refuse a projection that would grant write access outside the root the
  * workspace provider already validated (ADR 0039).
@@ -39,7 +39,7 @@ export declare function resolveSandboxProjection(harness: string, declaration: H
  * the provider never sanctioned would let a projection quietly widen the blast
  * radius of a run that the workspace lifecycle believes it has contained.
  */
-export declare function assertProjectionWithinWorkspace(harness: string, allowedRootRealpath: string, writableRoots: readonly string[]): void;
+export declare function assertProjectionWithinWorkspace(adapter: string, allowedRootRealpath: string, writableRoots: readonly string[]): void;
 /**
  * Resolve a named Git administrative grant into concrete writable roots
  * (ADR 0040).

package/dist/core/workflow/sandbox-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-projection.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/sandbox-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EACX,sBAAsB,GACtB,gCAAgC,GAChC,eAAe,GACf,iCAAiC,GACjC,uBAAuB,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM;CAMvF;AAED,MAAM,WAAW,yBAAyB;IACxC,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,wBAAwB,GAAG,SAAS,EACjD,MAAM,EAAE,qBAAqB,GAC5B,yBAAyB,CAoC3B;AASD;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,MAAM,EAC3B,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,IAAI,CAUN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,SAAS,MAAM,EAAE,CAanB"}
+{"version":3,"file":"sandbox-projection.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/sandbox-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EACX,sBAAsB,GACtB,gCAAgC,GAChC,eAAe,GACf,iCAAiC,GACjC,uBAAuB,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM;CAMvF;AAED,MAAM,WAAW,yBAAyB;IACxC,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,wBAAwB,GAAG,SAAS,EACjD,MAAM,EAAE,qBAAqB,GAC5B,yBAAyB,CAoC3B;AASD;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,MAAM,EAC3B,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,IAAI,CAUN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,SAAS,MAAM,EAAE,CAanB"}