harnery 0.36.0 → 0.37.0

package/dist/core/supervisor/storage.d.ts

@@ -0,0 +1,30 @@
+import type { CoordinationHealthSnapshot } from "../agents/health.js";
+import type { SupervisorActivitySnapshot, SupervisorConsumerRecord, SupervisorFindingExplanation, SupervisorFindings, SupervisorHistory, SupervisorLogFeed, SupervisorServiceStatusRecord, SupervisorSnapshot, SupervisorTimeline } from "./contract.js";
+export interface SupervisorPaths {
+    root: string;
+    service: string;
+    lease: string;
+    stop: string;
+    snapshot: string;
+    history: string;
+    activity: string;
+    findings: string;
+    timelines: string;
+    explanations: string;
+    coordination_health: string;
+    log_feed: string;
+    consumers: string;
+}
+export declare function supervisorPaths(coordRootRaw: string): SupervisorPaths;
+export declare function supervisorConsumerPath(coordRoot: string, id: string): string;
+export declare function readSupervisorServiceRecord(coordRoot: string): SupervisorServiceStatusRecord | undefined;
+export declare function readSupervisorSnapshot(coordRoot: string): SupervisorSnapshot | undefined;
+export declare function readSupervisorHistory(coordRoot: string): SupervisorHistory | undefined;
+export declare function readSupervisorActivity(coordRoot: string): SupervisorActivitySnapshot | undefined;
+export declare function readSupervisorFindings(coordRoot: string): SupervisorFindings | undefined;
+export declare function readSupervisorTimeline(coordRoot: string, findingId: string): SupervisorTimeline | undefined;
+export declare function readSupervisorExplanation(coordRoot: string, findingId: string): SupervisorFindingExplanation | undefined;
+export declare function readCoordinationHealthSnapshot(coordRoot: string): CoordinationHealthSnapshot | undefined;
+export declare function readSupervisorLogFeed(coordRoot: string): SupervisorLogFeed | undefined;
+export declare function readSupervisorConsumer(path: string): SupervisorConsumerRecord | undefined;
+//# sourceMappingURL=storage.d.ts.map

package/dist/core/supervisor/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/storage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,KAAK,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,EAC7B,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,CAiBrE;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,GAChB,6BAA6B,GAAG,SAAS,CAE3C;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAExF;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEtF;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS,CAEhG;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAExF;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,kBAAkB,GAAG,SAAS,CAIhC;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,4BAA4B,GAAG,SAAS,CAI1C;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,GAChB,0BAA0B,GAAG,SAAS,CAExC;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEtF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEzF"}

package/dist/core/supervisor/storage.js

@@ -0,0 +1,73 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+export function supervisorPaths(coordRootRaw) {
+    const root = join(resolve(coordRootRaw), ".harnery", "supervisor");
+    return {
+        root,
+        service: join(root, "service.json"),
+        lease: join(root, "service.lease.json"),
+        stop: join(root, "stop.json"),
+        snapshot: join(root, "snapshot.json"),
+        history: join(root, "history.json"),
+        activity: join(root, "activity.json"),
+        findings: join(root, "findings.json"),
+        timelines: join(root, "timelines"),
+        explanations: join(root, "explanations"),
+        coordination_health: join(root, "coordination-health.json"),
+        log_feed: join(root, "log-feed.json"),
+        consumers: join(root, "consumers"),
+    };
+}
+export function supervisorConsumerPath(coordRoot, id) {
+    return join(supervisorPaths(coordRoot).consumers, `${safeId(id)}.json`);
+}
+export function readSupervisorServiceRecord(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).service);
+}
+export function readSupervisorSnapshot(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).snapshot);
+}
+export function readSupervisorHistory(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).history);
+}
+export function readSupervisorActivity(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).activity);
+}
+export function readSupervisorFindings(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).findings);
+}
+export function readSupervisorTimeline(coordRoot, findingId) {
+    return readJson(join(supervisorPaths(coordRoot).timelines, `${safeId(findingId)}.json`));
+}
+export function readSupervisorExplanation(coordRoot, findingId) {
+    return readJson(join(supervisorPaths(coordRoot).explanations, `${safeId(findingId)}.json`));
+}
+export function readCoordinationHealthSnapshot(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).coordination_health);
+}
+export function readSupervisorLogFeed(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).log_feed);
+}
+export function readSupervisorConsumer(path) {
+    return readJson(path);
+}
+function readJson(path) {
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        return value && typeof value === "object" && !Array.isArray(value) ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function safeId(value) {
+    const normalized = value
+        .toLowerCase()
+        .replace(/[^a-z0-9_-]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    if (!normalized)
+        throw new Error("supervisor consumer id must contain a letter or number");
+    return normalized.slice(0, 80);
+}

package/dist/core/supervisor/timeline.d.ts

@@ -0,0 +1,3 @@
+import { type SupervisorFinding, type SupervisorSourceReference, type SupervisorTimeline } from "./contract.js";
+export declare function buildSupervisorTimeline(finding: SupervisorFinding, relatedSources?: readonly SupervisorSourceReference[]): SupervisorTimeline;
+//# sourceMappingURL=timeline.d.ts.map

package/dist/core/supervisor/timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/timeline.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EAExB,MAAM,eAAe,CAAC;AAEvB,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,cAAc,GAAE,SAAS,yBAAyB,EAAO,GACxD,kBAAkB,CAoDpB"}

package/dist/core/supervisor/timeline.js

@@ -0,0 +1,87 @@
+import { createHash } from "node:crypto";
+import { SUPERVISOR_DIAGNOSTIC_LIMITS, SUPERVISOR_TIMELINE_SCHEMA_VERSION, } from "./contract.js";
+export function buildSupervisorTimeline(finding, relatedSources = []) {
+    const relatedEntries = clusterRelatedSources(relatedSources);
+    const entries = [
+        entry("opened", finding.opened_at, finding.summary, finding.primary_source),
+        ...finding.evidence.map((evidence) => ({
+            ...entry("observed", evidence.source.observed_at, evidence.summary, evidence.source),
+            evidence_id: evidence.id,
+        })),
+        ...relatedEntries,
+        ...finding.capabilities
+            .filter((capability) => capability.state !== "supported")
+            .map((capability) => entry("capability", finding.observed_at, `${capability.source_kind} capability is ${capability.state}${capability.reason_code ? ` (${capability.reason_code})` : ""}.`, {
+            id: stableId("src", `${finding.id}:${capability.source_kind}:${capability.state}`),
+            source_kind: capability.source_kind,
+            source_id: capability.reason_code ?? capability.state,
+            observed_at: finding.observed_at,
+            capability: capability.state,
+        })),
+        ...(finding.state === "resolved" && finding.resolved_at
+            ? [
+                entry("resolved", finding.resolved_at, "The observed condition returned below its threshold.", finding.primary_source),
+            ]
+            : []),
+    ].sort((left, right) => left.occurred_at.localeCompare(right.occurred_at) || left.id.localeCompare(right.id));
+    const maxEntries = SUPERVISOR_DIAGNOSTIC_LIMITS.max_timeline_entries;
+    const bounded = entries.slice(-maxEntries);
+    return {
+        schema_version: SUPERVISOR_TIMELINE_SCHEMA_VERSION,
+        finding_id: finding.id,
+        start_at: bounded[0]?.occurred_at ?? finding.opened_at,
+        end_at: bounded[bounded.length - 1]?.occurred_at ?? finding.observed_at,
+        max_entries: maxEntries,
+        omitted_entries: Math.max(0, entries.length - bounded.length),
+        compacted_entries: Math.max(0, relatedSources.length - relatedEntries.length),
+        entries: bounded,
+        capabilities: finding.capabilities.slice(0, SUPERVISOR_DIAGNOSTIC_LIMITS.max_capabilities),
+    };
+}
+function entry(relation, occurredAt, summary, source) {
+    return {
+        id: stableId("tl", `${relation}\u0000${occurredAt}\u0000${source.id}\u0000${summary}`),
+        occurred_at: occurredAt,
+        first_occurred_at: occurredAt,
+        last_occurred_at: occurredAt,
+        occurrence_count: 1,
+        relation,
+        summary: summary.slice(0, SUPERVISOR_DIAGNOSTIC_LIMITS.max_summary_chars),
+        source,
+    };
+}
+function clusterRelatedSources(sources) {
+    const groups = new Map();
+    const ordered = [...sources].sort((left, right) => left.observed_at.localeCompare(right.observed_at) || left.id.localeCompare(right.id));
+    for (const source of ordered) {
+        const key = `${source.source_kind}\u0000${source.source_id}\u0000${source.capability}`;
+        const group = groups.get(key);
+        if (group) {
+            group.last = source;
+            group.count += 1;
+        }
+        else {
+            groups.set(key, { first: source, last: source, count: 1 });
+        }
+    }
+    return [...groups.entries()].map(([key, group]) => {
+        const firstAt = group.first.observed_at;
+        const lastAt = group.last.observed_at;
+        const summary = group.count === 1
+            ? `Related ${group.last.source_kind} activity was observed in the same time range.`
+            : `${group.count} related ${group.last.source_kind} ${group.last.source_id} observations were recorded in the same time range.`;
+        return {
+            id: stableId("tl", `related\u0000${key}\u0000${firstAt}\u0000${lastAt}\u0000${group.count}`),
+            occurred_at: lastAt,
+            first_occurred_at: firstAt,
+            last_occurred_at: lastAt,
+            occurrence_count: group.count,
+            relation: "related",
+            summary: summary.slice(0, SUPERVISOR_DIAGNOSTIC_LIMITS.max_summary_chars),
+            source: group.last,
+        };
+    });
+}
+function stableId(prefix, value) {
+    return `${prefix}_${createHash("sha256").update(value).digest("hex").slice(0, 24)}`;
+}

package/dist/core/workflow/admission.d.ts

@@ -0,0 +1,23 @@
+import { type EnsureSupervisorResult, type SupervisorFindings, type SupervisorStatus } from "../supervisor/index.js";
+import type { WorkflowDiagnosticAdmissionObservation } from "./types.js";
+export interface WorkflowDiagnosticAdmissionRuntime {
+    now: () => Date;
+    wait: (milliseconds: number) => Promise<void>;
+    registerConsumer: (coordRoot: string, input: {
+        id: string;
+        pid?: number;
+    }) => unknown;
+    unregisterConsumer: (coordRoot: string, id: string) => void;
+    ensureSupervisor: (coordRoot: string) => Promise<EnsureSupervisorResult>;
+    readStatus: (coordRoot: string, nowMs?: number) => SupervisorStatus;
+    readFindings: (coordRoot: string) => SupervisorFindings | undefined;
+}
+export interface ObserveWorkflowDiagnosticAdmissionInput {
+    coordRoot: string;
+    runId: string;
+    freshCycleWaitMs?: number;
+    runtime?: Partial<WorkflowDiagnosticAdmissionRuntime>;
+}
+export declare function observeWorkflowDiagnosticAdmission(input: ObserveWorkflowDiagnosticAdmissionInput): Promise<WorkflowDiagnosticAdmissionObservation>;
+export declare function failedWorkflowDiagnosticAdmissionObservation(error: unknown, requestedAt: Date, observedAt?: Date): WorkflowDiagnosticAdmissionObservation;
+//# sourceMappingURL=admission.d.ts.map

package/dist/core/workflow/admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/admission.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,sBAAsB,EAO3B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EAEtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,YAAY,CAAC;AAKzE,MAAM,WAAW,kCAAkC;IACjD,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;IACtF,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzE,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,gBAAgB,CAAC;IACpE,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,CAAC;CACrE;AAED,MAAM,WAAW,uCAAuC;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC,kCAAkC,CAAC,CAAC;CACvD;AAED,wBAAsB,kCAAkC,CACtD,KAAK,EAAE,uCAAuC,GAC7C,OAAO,CAAC,sCAAsC,CAAC,CAoFjD;AAED,wBAAgB,4CAA4C,CAC1D,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,IAAI,EACjB,UAAU,OAAa,GACtB,sCAAsC,CAmBxC"}

package/dist/core/workflow/admission.js

@@ -0,0 +1,136 @@
+import { buildDiagnosticAdvice } from "../diagnostics/advice.js";
+import { ensureSupervisorRunning, readSupervisorFindings, readSupervisorStatus, registerSupervisorConsumer, unregisterSupervisorConsumer, } from "../supervisor/index.js";
+const DEFAULT_FRESH_CYCLE_WAIT_MS = 4_000;
+const POLL_INTERVAL_MS = 50;
+export async function observeWorkflowDiagnosticAdmission(input) {
+    const runtime = admissionRuntime(input.runtime);
+    const requested = runtime.now();
+    const requestedAt = requested.toISOString();
+    const startedMs = requested.getTime();
+    const consumerId = `workflow-${input.runId}`;
+    let serviceState = "unavailable";
+    try {
+        runtime.registerConsumer(input.coordRoot, { id: consumerId });
+        const ensured = await runtime.ensureSupervisor(input.coordRoot);
+        serviceState = ensured.state;
+        if (ensured.state === "unavailable") {
+            return unavailableObservation(runtime, requestedAt, startedMs, serviceState, "error", "supervisor_unavailable", ensured.error);
+        }
+        const deadlineMs = runtime.now().getTime() + normalizeWait(input.freshCycleWaitMs);
+        while (runtime.now().getTime() <= deadlineMs) {
+            const status = runtime.readStatus(input.coordRoot, runtime.now().getTime());
+            const sampledAt = status.record?.last_cycle_at;
+            if (status.running && sampledAt && Date.parse(sampledAt) >= requested.getTime()) {
+                const report = runtime.readFindings(input.coordRoot);
+                if (!report) {
+                    return unavailableObservation(runtime, requestedAt, startedMs, serviceState, "unsupported", "source_missing");
+                }
+                const observedAt = runtime.now().toISOString();
+                return {
+                    requested_at: requestedAt,
+                    observed_at: observedAt,
+                    wait_ms: elapsedMs(runtime, startedMs),
+                    service_state: serviceState,
+                    freshness: "fresh",
+                    sampled_at: sampledAt,
+                    advice: buildDiagnosticAdvice({
+                        findings: mergeFindings(report),
+                        sourceCapability: supportedCapability(),
+                        evaluatedAt: observedAt,
+                    }),
+                };
+            }
+            const remainingMs = deadlineMs - runtime.now().getTime();
+            if (remainingMs <= 0)
+                break;
+            await runtime.wait(Math.min(POLL_INTERVAL_MS, remainingMs));
+        }
+        return unavailableObservation(runtime, requestedAt, startedMs, serviceState, "expired", "fresh_cycle_timeout");
+    }
+    catch (error) {
+        return unavailableObservation(runtime, requestedAt, startedMs, serviceState, "error", "observation_failed", error instanceof Error ? error.message : String(error));
+    }
+    finally {
+        try {
+            runtime.unregisterConsumer(input.coordRoot, consumerId);
+        }
+        catch {
+            // Admission is observer-only. Cleanup failure cannot affect dispatch.
+        }
+    }
+}
+export function failedWorkflowDiagnosticAdmissionObservation(error, requestedAt, observedAt = new Date()) {
+    const capability = {
+        source_kind: "supervisor.findings",
+        state: "error",
+        reason_code: "observation_failed",
+        detail: (error instanceof Error ? error.message : String(error)).slice(0, 500),
+    };
+    return {
+        requested_at: requestedAt.toISOString(),
+        observed_at: observedAt.toISOString(),
+        wait_ms: Math.max(0, observedAt.getTime() - requestedAt.getTime()),
+        service_state: "unavailable",
+        freshness: "unavailable",
+        advice: buildDiagnosticAdvice({
+            findings: [],
+            sourceCapability: capability,
+            evaluatedAt: observedAt.toISOString(),
+        }),
+    };
+}
+function unavailableObservation(runtime, requestedAt, startedMs, serviceState, state, reasonCode, detail) {
+    const observedAt = runtime.now().toISOString();
+    const capability = {
+        source_kind: "supervisor.findings",
+        state,
+        reason_code: reasonCode,
+        ...(detail ? { detail: detail.slice(0, 500) } : {}),
+    };
+    const advice = buildDiagnosticAdvice({
+        findings: [],
+        sourceCapability: capability,
+        evaluatedAt: observedAt,
+    });
+    return {
+        requested_at: requestedAt,
+        observed_at: observedAt,
+        wait_ms: elapsedMs(runtime, startedMs),
+        service_state: serviceState,
+        freshness: "unavailable",
+        advice,
+    };
+}
+function mergeFindings(report) {
+    const byId = new Map();
+    for (const finding of report.transitions)
+        byId.set(finding.id, finding);
+    for (const finding of report.active)
+        byId.set(finding.id, finding);
+    return [...byId.values()];
+}
+function supportedCapability() {
+    return { source_kind: "supervisor.findings", state: "supported" };
+}
+function normalizeWait(value) {
+    if (value === undefined)
+        return DEFAULT_FRESH_CYCLE_WAIT_MS;
+    if (!Number.isFinite(value) || value < 0)
+        return DEFAULT_FRESH_CYCLE_WAIT_MS;
+    return Math.min(Math.floor(value), 30_000);
+}
+function elapsedMs(runtime, startedMs) {
+    return Math.max(0, runtime.now().getTime() - startedMs);
+}
+function admissionRuntime(overrides) {
+    return {
+        now: () => new Date(),
+        wait: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
+        registerConsumer: registerSupervisorConsumer,
+        unregisterConsumer: unregisterSupervisorConsumer,
+        ensureSupervisor: ensureSupervisorRunning,
+        readStatus: readSupervisorStatus,
+        readFindings: readSupervisorFindings,
+        ...overrides,
+    };
+}

package/dist/core/workflow/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA2CH,OAAO,KAAK,EAIV,UAAU,EAEV,SAAS,EAYV,MAAM,YAAY,CAAC;AAiDpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAOvF;AAED;;;;6EAI6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAUhD;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA6E1F"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAgDH,OAAO,KAAK,EAIV,UAAU,EAEV,SAAS,EAeV,MAAM,YAAY,CAAC;AAkDpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAOvF;AAED;;;;6EAI6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAUhD;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA6E1F"}

package/dist/core/workflow/engine.js

@@ -30,6 +30,7 @@ import { isAbsolute, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { snapshotRepo } from "../context/index.js";
 import { evaluatePolicy, normalizePolicy, PolicyDeniedError, policyDigest, summarizePolicyRequest, } from "../policy/index.js";
+import { failedWorkflowDiagnosticAdmissionObservation, observeWorkflowDiagnosticAdmission, } from "./admission.js";
 import { assertWorkflowRunId, createWorkflowApproval } from "./approvals.js";
 import { freezeWorkflowAttemptContext } from "./attempt-context.js";
 import { probeBilling } from "./billing.js";
@@ -37,10 +38,11 @@ import { stableDigest } from "./durable-record.js";
 import { evidencePreflightError } from "./evidence-preflight.js";
 import { endWorkflowChildSessionV3, startWorkflowChildSessionV3 } from "./live-session-v3.js";
 import { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, writeWorkflowProof, } from "./proof.js";
-import { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
+import { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 import { assertProjectionWithinWorkspace, resolveGitGrantRoots } from "./sandbox-projection.js";
 import { normalizeWorkflowSpecialists, resolveSpecialistAssignment } from "./specialists.js";
 import { appendWorkflowTranscriptEvent } from "./transcript.js";
+import { WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION } from "./types.js";
 import { parseStageOutput, validateAgainstSchema } from "./validate.js";
 import { freezeWorkflowWorkContext } from "./work-context.js";
 import { attestTerminal, attestWorkspaceFailure, resolveWorkspaceBinding, } from "./workspaces/execution.js";
@@ -234,6 +236,11 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
     const approvalAddressee = frozen?.approval_addressee ?? opts.approvalAddressee ?? "operator";
     const subscriptionOnly = frozen?.subscription_only ?? Boolean(opts.subscriptionOnly);
     const allowApiBilling = frozen?.allow_api_billing ?? Boolean(opts.allowApiBilling);
+    const diagnosticAdmissionConfig = frozen?.diagnostic_admission
+        ? normalizeDiagnosticAdmissionConfig(frozen.diagnostic_admission)
+        : resumeState
+            ? undefined
+            : normalizeDiagnosticAdmissionConfig(opts.diagnosticAdmission);
     const startedAt = resumeState?.manifest.started_at ?? new Date().toISOString();
     const t0 = resumeState ? Date.parse(startedAt) : Date.now();
     const scriptSha256 = resumeState?.manifest.script.sha256 ?? workflowScriptDigest(absScript);
@@ -304,6 +311,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 after: resumeState.manifest.repository_before,
                 agents: [],
                 evidence: [],
+                diagnosticAdmission: initialDiagnosticAdmissionProof(diagnosticAdmissionConfig),
                 adapterEvidence: opts.adapterEvidence,
                 adapterAttestations: opts.adapterAttestations,
                 sandboxProjection: sandboxProjectionEvidence(opts.filesystemPolicy, opts.gitWrite ?? "none"),
@@ -357,7 +365,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
         writeWorkflowRunManifest({
             coordRoot: opts.coordRoot,
             manifest: {
-                schema_version: 1,
+                schema_version: WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION,
                 run_id: runId,
                 work_item_id: opts.workItemId,
                 work_context: workContext,
@@ -371,6 +379,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                     default_adapter: defaultAdapter,
                     max_agents: maxAgents,
                     concurrency,
+                    diagnostic_admission: diagnosticAdmissionConfig,
                     subscription_only: subscriptionOnly,
                     allow_api_billing: allowApiBilling,
                     approval_mode: approvalMode,
@@ -463,6 +472,8 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
     const evidenceRecords = [];
     const policyDecisions = new Map(history?.policyDecisions.map((decision) => [decision.id, decision]));
     const acceptanceIds = new Set(meta.acceptance.map((criterion) => criterion.id));
+    let diagnosticAdmission = initialDiagnosticAdmissionProof(diagnosticAdmissionConfig);
+    let diagnosticAdmissionPromise;
     const transcript = (event, data) => {
         appendWorkflowTranscriptEvent(opts.coordRoot, runId, event, { stage: currentStage, ...data });
     };
@@ -477,6 +488,42 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
             result,
         });
     };
+    const ensureDiagnosticAdmissionObserved = async () => {
+        if (!diagnosticAdmissionConfig)
+            return;
+        diagnosticAdmissionPromise ??= (async () => {
+            const requestedAt = new Date();
+            let observation;
+            try {
+                observation = await (opts.observeDiagnosticAdmission ??
+                    ((coordRoot, observationRunId) => observeWorkflowDiagnosticAdmission({
+                        coordRoot,
+                        runId: observationRunId,
+                    })))(opts.coordRoot, runId);
+            }
+            catch (error) {
+                observation = failedWorkflowDiagnosticAdmissionObservation(error, requestedAt);
+            }
+            diagnosticAdmission = {
+                schema_version: WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION,
+                mode: "shadow",
+                trigger: "before-first-dispatch",
+                state: "observed",
+                action: "none",
+                observation,
+            };
+            transcript("diagnostic.admission", {
+                schema_version: diagnosticAdmission.schema_version,
+                mode: diagnosticAdmission.mode,
+                trigger: diagnosticAdmission.trigger,
+                action: diagnosticAdmission.action,
+                observation,
+            });
+            log(`[admission] shadow pressure=${observation.advice.pressure} ` +
+                `recommendation=${observation.advice.fan_out_recommendation}; dispatch unchanged`);
+        })();
+        await diagnosticAdmissionPromise;
+    };
     // Bounded concurrency gate shared by every spawn in the run — direct
     // `agent()` calls and `parallel()` thunks draw from the same slot pool, so
     // the cap holds even when a script nests parallel() inside loops.
@@ -791,6 +838,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
             agentsSpawned++;
         await acquire();
         try {
+            await ensureDiagnosticAdmissionObserved();
             transcript("agent.start", {
                 id,
                 label,
@@ -1061,6 +1109,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 after: snapshotRepo(executionCwd),
                 agents: Array.from(agentProofs.values()),
                 evidence: evidenceRecords,
+                diagnosticAdmission,
                 adapterEvidence: opts.adapterEvidence,
                 adapterAttestations: opts.adapterAttestations,
                 sandboxProjection: sandboxProjectionEvidence(filesystemPolicy, gitWrite),
@@ -1100,6 +1149,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 mode: subscriptionOnly ? "subscription" : p.mode,
             })),
             policy: proof.policy?.summary,
+            diagnosticAdmission,
             workspaceBinding,
         };
         return report;
@@ -1140,6 +1190,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 after: snapshotRepo(executionCwd),
                 agents: Array.from(agentProofs.values()),
                 evidence: evidenceRecords,
+                diagnosticAdmission,
                 adapterEvidence: opts.adapterEvidence,
                 adapterAttestations: opts.adapterAttestations,
                 sandboxProjection: sandboxProjectionEvidence(filesystemPolicy, gitWrite),
@@ -1278,6 +1329,30 @@ function loadRunHistory(path) {
 function round4(n) {
     return Math.round(n * 10_000) / 10_000;
 }
+function normalizeDiagnosticAdmissionConfig(value) {
+    if (value === undefined)
+        return undefined;
+    if (value.schema_version !== WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION ||
+        value.mode !== "shadow") {
+        throw new Error("diagnosticAdmission must use schema_version 1 and mode shadow");
+    }
+    return {
+        schema_version: WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION,
+        mode: "shadow",
+    };
+}
+function initialDiagnosticAdmissionProof(config) {
+    if (!config)
+        return undefined;
+    return {
+        schema_version: WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION,
+        mode: "shadow",
+        trigger: "before-first-dispatch",
+        state: "not-needed",
+        action: "none",
+        reason_code: "no-dispatch",
+    };
+}
 function assertAgentCapacity(agentsSpawned, maxAgents) {
     if (agentsSpawned >= maxAgents) {
         throw new Error(`workflow agent cap reached (${maxAgents}); raise --max-agents deliberately if the fan-out is intended`);

package/dist/core/workflow/index.d.ts

@@ -1,3 +1,4 @@
+export { failedWorkflowDiagnosticAdmissionObservation, type ObserveWorkflowDiagnosticAdmissionInput, observeWorkflowDiagnosticAdmission, type WorkflowDiagnosticAdmissionRuntime, } from "./admission.js";
 export type { CreateWorkflowApprovalInput, ResolveWorkflowApprovalInput, WorkflowApproval, WorkflowApprovalDecision, WorkflowApprovalRequest, WorkflowApprovalStatus, } from "./approvals.js";
 export { assertWorkflowRunId, createWorkflowApproval, listWorkflowApprovals, readWorkflowApproval, renderWorkflowApproval, resolveWorkflowApproval, WORKFLOW_APPROVAL_SCHEMA_VERSION, workflowApprovalId, } from "./approvals.js";
 export { freezeWorkflowAttemptContext, isCanonicalWorkflowAttemptContext, normalizeWorkflowAttemptContext, } from "./attempt-context.js";
@@ -6,8 +7,8 @@ export { buildWorkflowProof, createEvidenceRecord, deriveRunFailureClass, digest
 export type { WorkflowRunManifest } from "./run-state.js";
 export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 export { isUpstreamFailureText, vendorFailureText } from "./spawn-failure.js";
-export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AdapterEvidenceCapability, AdapterEvidenceCoverage, AdapterName, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, ResultDigest, RunReport, Spawner, SpawnFailureClass, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowAttemptContext, WorkflowAttemptFailureCause, WorkflowAttemptPriorContext, WorkflowAttemptUnresolvedCriterion, WorkflowContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, WorkflowWorkContext, } from "./types.js";
-export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
+export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AdapterEvidenceCapability, AdapterEvidenceCoverage, AdapterName, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, ResultDigest, RunReport, Spawner, SpawnFailureClass, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowAttemptContext, WorkflowAttemptFailureCause, WorkflowAttemptPriorContext, WorkflowAttemptUnresolvedCriterion, WorkflowContext, WorkflowDiagnosticAdmissionConfig, WorkflowDiagnosticAdmissionObservation, WorkflowDiagnosticAdmissionProof, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, WorkflowWorkContext, } from "./types.js";
+export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
 export type { ApplyIntegrationInput, AuthorizedIntegrationPlan, AuthorizedProviderIntegrationInput, CancelWorkspaceInput, CleanupWorkspaceInput, FilesystemIdentity, IntegrationApplyAttempt, IntegrationApplyReceipt, IntegrationAuthorization, IntegrationPlan, IntegrationReviewRecord, IntegrationTarget, LocalGitWorktreeProviderOptions, PrepareIntegrationInput, ProviderIntegrationInput, ProviderIntegrationPreview, ProviderIntegrationResult, ProviderUnknown, ProviderUnsupportedReason, RepositoryBinding, ValidatedFilesystemPath, WorkflowWorkspaceInspection, WorkflowWorkspaceSelection, WorkflowWorkspaceStatus, WorkflowWorkspaceVerification, WorkspaceAllocationRequest, WorkspaceAttestation, WorkspaceBinding, WorkspaceBoundExecutionEvidence, WorkspaceCancellationReceipt, WorkspaceCancellationResult, WorkspaceCleanupAttempt, WorkspaceCleanupIntent, WorkspaceCleanupMode, WorkspaceCleanupReceipt, WorkspaceCleanupResult, WorkspaceCompatibilityExecutionEvidence, WorkspaceExecutionEvidence, WorkspaceIntegrationState, WorkspaceIsolation, WorkspaceLifecycleProjection, WorkspaceLifecycleProjectionInput, WorkspaceLifecycleState, WorkspaceObservation, WorkspaceOwner, WorkspaceProbeInput, WorkspaceProbeResult, WorkspaceProofOutcome, WorkspaceProvider, WorkspaceProviderCapabilities, WorkspaceProviderRef, WorkspaceResourceState, } from "./workspaces/index.js";
 export { applyIntegration, assertWorkspaceLifecycleTransition, cancelWorkspace, cleanupWorkspace, createLocalGitWorktreeProvider, deriveWorkspaceLifecycle, IntegrationPrepareParkedError, inspectWorkflowWorkspace, isWorkspaceLifecycleState, listWorkflowWorkspaceInspections, prepareIntegration, prepareReclaim, probeLocalGitWorktreeProvider, readWorkflowWorkspaceStatus, renderWorkflowWorkspaceStatus, validateProviderEventChain, WORKSPACE_BINDING_SCHEMA_VERSION, WORKSPACE_RECEIPT_SCHEMA_VERSION, } from "./workspaces/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/core/workflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uCAAuC,EACvC,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kCAAkC,EAClC,eAAe,EACf,gBAAgB,EAChB,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,kBAAkB,EAClB,cAAc,EACd,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4CAA4C,EAC5C,KAAK,uCAAuC,EAC5C,kCAAkC,EAClC,KAAK,kCAAkC,GACxC,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,eAAe,EACf,iCAAiC,EACjC,sCAAsC,EACtC,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uCAAuC,EACvC,4CAA4C,EAC5C,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kCAAkC,EAClC,eAAe,EACf,gBAAgB,EAChB,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,kBAAkB,EAClB,cAAc,EACd,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}

package/dist/core/workflow/index.js

@@ -1,8 +1,9 @@
+export { failedWorkflowDiagnosticAdmissionObservation, observeWorkflowDiagnosticAdmission, } from "./admission.js";
 export { assertWorkflowRunId, createWorkflowApproval, listWorkflowApprovals, readWorkflowApproval, renderWorkflowApproval, resolveWorkflowApproval, WORKFLOW_APPROVAL_SCHEMA_VERSION, workflowApprovalId, } from "./approvals.js";
 export { freezeWorkflowAttemptContext, isCanonicalWorkflowAttemptContext, normalizeWorkflowAttemptContext, } from "./attempt-context.js";
 export { runWorkflow, WorkflowParkedError, WorkflowRunError } from "./engine.js";
 export { buildWorkflowProof, createEvidenceRecord, deriveRunFailureClass, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
 export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 export { isUpstreamFailureText, vendorFailureText } from "./spawn-failure.js";
-export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
+export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
 export { applyIntegration, assertWorkspaceLifecycleTransition, cancelWorkspace, cleanupWorkspace, createLocalGitWorktreeProvider, deriveWorkspaceLifecycle, IntegrationPrepareParkedError, inspectWorkflowWorkspace, isWorkspaceLifecycleState, listWorkflowWorkspaceInspections, prepareIntegration, prepareReclaim, probeLocalGitWorktreeProvider, readWorkflowWorkspaceStatus, renderWorkflowWorkspaceStatus, validateProviderEventChain, WORKSPACE_BINDING_SCHEMA_VERSION, WORKSPACE_RECEIPT_SCHEMA_VERSION, } from "./workspaces/index.js";

package/dist/core/workflow/proof.d.ts

@@ -1,6 +1,6 @@
 import type { RepoSnapshot } from "../context/index.js";
 import type { NormalizedPolicy, PolicyDecision, PolicyIsolation, PolicyNetworkAccess } from "../policy/index.js";
-import type { AcceptanceCriterion, AcceptanceResult, AcceptanceSummary, AdapterAttestationCitation, AdapterEvidenceCapability, ResultDigest, SpawnFailureClass, WorkflowAgentProof, WorkflowAttemptContext, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowProof, WorkflowSandboxProjectionEvidence, WorkflowWorkContext } from "./types.js";
+import type { AcceptanceCriterion, AcceptanceResult, AcceptanceSummary, AdapterAttestationCitation, AdapterEvidenceCapability, ResultDigest, SpawnFailureClass, WorkflowAgentProof, WorkflowAttemptContext, WorkflowDiagnosticAdmissionProof, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowProof, WorkflowSandboxProjectionEvidence, WorkflowWorkContext } from "./types.js";
 import type { WorkspaceAttestation, WorkspaceBinding, WorkspaceCompatibilityExecutionEvidence } from "./workspaces/index.js";
 export interface NormalizedWorkflowMeta {
     name: string;
@@ -23,6 +23,7 @@ export interface BuildWorkflowProofInput {
     after: RepoSnapshot;
     agents: WorkflowAgentProof[];
     evidence: WorkflowEvidenceRecord[];
+    diagnosticAdmission?: WorkflowDiagnosticAdmissionProof;
     adapterEvidence?: Readonly<Record<string, AdapterEvidenceCapability | undefined>>;
     /** Filesystem policy actually projected into children (ADR 0039). */
     sandboxProjection?: WorkflowSandboxProjectionEvidence;

package/dist/core/workflow/proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EAEZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,uCAAuC,EAExC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF;mFAC+E;IAC/E,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,uCAAuC,CAAC;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA8BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA6DhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAoDjF;AA2BD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAoChE"}
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EAEZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAOpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,uCAAuC,EAExC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;IACvD,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF;mFAC+E;IAC/E,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,uCAAuC,CAAC;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA8BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA8DhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAqDjF;AA+DD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CA6ChE"}