patchwork-os 1.2.0-beta.2.canary.819 → 1.2.0-beta.2.canary.821

package/dist/recipes/replayRun.js

@@ -3,24 +3,53 @@
  *
  * Given an original `RecipeRun` (looked up from `RecipeRunLog`), build a
  * `mockedOutputs` map from each step's captured `output` (VD-2) and
- * re-run the recipe through `runChainedRecipe` with all tool/agent
+ * re-run the recipe through the matching runner with every tool/agent
  * execution short-circuited to those captured values.
  *
- * Pure mocked-only: no external network calls, no write side effects.
- * The new run is logged with `triggerSource: "replay:<originalSeq>"`
- * so the audit trail is clear.
+ * Evidence-only, by construction rather than by documentation. Until
+ * 2026-09-24 the header here promised "no external network calls, no
+ * write side effects" while any step WITHOUT a usable capture (missing
+ * `output`, a >8 KB truncation envelope, or a flat step with no `into:`)
+ * silently fell through to REAL execution — a real `http.post` went out
+ * and a deleted `file.write` target was recreated, with the list of
+ * unmocked steps reported only after the run. The invariant now enforced
+ * (see `replayBoundary.ts`):
  *
- * Real-mode replay (write tools really fire) is deliberately NOT in
- * this module. It needs a confirmation UX, a kill-switch interaction,
- * and possibly a connector-level read/write split. Ship separately
- * after explicit user approval.
+ *   Missing replay evidence REDUCES what can be replayed; it never
+ *   increases permission to execute.
+ *
+ *   1. Preflight: if any step lacks a usable capture the replay is REFUSED
+ *      before a run starts, with `replay_refused_unmocked_step` naming
+ *      every such step.
+ *   2. The run itself is started with `replayOnly: true`, so a step the
+ *      preflight somehow missed is refused inside the runner instead of
+ *      dispatched, and the dispatch seam (`executeStep` /
+ *      `buildAgentExecutorDeps`) throws before any tool or agent is
+ *      invoked. A replay's deps are structurally incapable of live
+ *      dispatch.
+ *   3. After the run, any step carrying a boundary refusal forces
+ *      `ok: false` — earlier mocked progress never reads as an unqualified
+ *      success.
+ *
+ * The new run is logged with `triggerSource: "replay:<originalSeq>"` /
+ * `manualRunId: "replay-<originalSeq>"` so the audit trail is clear.
+ *
+ * Real-mode replay (write tools really fire) is deliberately NOT in this
+ * module, and there is no "continue live" fallback here either. It needs
+ * a confirmation UX, a kill-switch interaction, and possibly a
+ * connector-level read/write split. Ship separately after explicit user
+ * approval.
  */
 import { runChainedRecipe } from "./chainedRunner.js";
+import { isReplayRefusal, replayRefusalMessage } from "./replayBoundary.js";
 import { buildChainedDeps, declaredRecipeEnv, runYamlRecipe, } from "./yamlRunner.js";
 /**
  * Build the `mockedOutputs` map. Truncated captures (>8 KB envelope from
  * VD-2's `captureForRunlog`) are excluded — replaying with a `[truncated]`
  * preview would be misleading. Steps without captures are excluded too.
+ *
+ * `null`, `""`, `0` and `false` are VALID captures (the tool really
+ * returned that) and are kept; only `undefined` means "nothing captured".
  */
 export function buildMockedOutputs(originalRun) {
     const outputs = new Map();
@@ -35,9 +64,7 @@ export function buildMockedOutputs(originalRun) {
         }
         // Skip the truncation envelope — replaying with a preview slice
         // would be misleading.
-        if (out !== null &&
-            typeof out === "object" &&
-            out["[truncated]"] === true) {
+        if (isTruncatedCapture(out)) {
             unmocked.push(step.id);
             continue;
         }
@@ -45,16 +72,50 @@ export function buildMockedOutputs(originalRun) {
     }
     return { outputs, unmocked };
 }
+function isTruncatedCapture(out) {
+    return (out !== null &&
+        typeof out === "object" &&
+        out["[truncated]"] === true);
+}
+/**
+ * Step ids in a finished run's `stepResults` whose error came from the
+ * replay boundary — a refusal the preflight did not pre-empt. Any such
+ * step disqualifies the run from reporting as a successful replay, even
+ * when the recipe's fail-open settings let the run complete.
+ */
+function refusedStepIds(stepResults) {
+    const ids = [];
+    for (const s of stepResults ?? []) {
+        if (s.error !== undefined && isReplayRefusal(s.error)) {
+            ids.push(s.id ?? "?");
+        }
+    }
+    return ids;
+}
 /**
  * Fire a mocked replay of `originalRun` against `recipe`. The recipe
  * argument is supplied by the caller (typically loaded fresh from disk
  * by name) so an EDITED recipe can be replayed against captured
  * outputs — that's the debugging value of replay.
+ *
+ * Refuses (no run started) when any step lacks a usable capture.
  */
 export async function replayMockedRun(opts) {
     const { originalRun, recipe, sourcePath, deps } = opts;
     const { outputs, unmocked } = buildMockedOutputs(originalRun);
-    const chainedDeps = buildChainedDeps(deps.runnerDeps, deps.runnerDeps.claudeCodeFn ??
+    // Layer 1 — preflight. Explanatory: names every unmockable step at once.
+    if (unmocked.length > 0) {
+        return {
+            ok: false,
+            error: replayRefusalMessage(unmocked),
+            unmockedSteps: unmocked,
+        };
+    }
+    const chainedDeps = buildChainedDeps(
+    // Layer 3 — the deps a replay hands the runner cannot reach a live tool
+    // or agent: `replayOnly` rides on StepDeps into `executeStep` and
+    // `buildAgentExecutorDeps`, which throw `ReplayIncompleteError`.
+    { ...deps.runnerDeps, replayOnly: true }, deps.runnerDeps.claudeCodeFn ??
         (async () => {
             return "";
         }), recipe.name);
@@ -70,6 +131,9 @@ export async function replayMockedRun(opts) {
         runLog: deps.runLog,
         ...(deps.activityLog !== undefined && { activityLog: deps.activityLog }),
         mockedOutputs: outputs,
+        // Layer 2 — a step the preflight missed (e.g. one the edited recipe
+        // added) is refused in the runner's step loop, never dispatched.
+        replayOnly: true,
         // BUG-4 fix: tag the new run's taskId so it's distinguishable from a
         // fresh run. Searchable as `taskId LIKE 'replay:<seq>:%'`.
         taskIdPrefix: `replay:${originalRun.seq}`,
@@ -81,19 +145,21 @@ export async function replayMockedRun(opts) {
         // started after originalRun.doneAt.
         const recent = deps.runLog.query({ recipe: recipe.name, limit: 5 });
         const newRun = recent.find((r) => r.createdAt > originalRun.doneAt);
+        const refused = refusedStepIds([...result.stepResults].map(([id, r]) => ({ id, error: r.error })));
+        const ok = result.success && refused.length === 0;
+        const error = refused.length > 0 ? replayRefusalMessage(refused) : result.errorMessage;
         return {
-            ok: result.success,
+            ok,
             ...(newRun?.seq !== undefined && { newSeq: newRun.seq }),
             result,
-            ...(result.errorMessage !== undefined && { error: result.errorMessage }),
-            ...(unmocked.length > 0 && { unmockedSteps: unmocked }),
+            ...(error !== undefined && { error }),
+            ...(refused.length > 0 && { unmockedSteps: refused }),
         };
     }
     catch (err) {
         return {
             ok: false,
             error: err instanceof Error ? err.message : String(err),
-            ...(unmocked.length > 0 && { unmockedSteps: unmocked }),
         };
     }
 }
@@ -106,7 +172,10 @@ export async function replayMockedRun(opts) {
  * positional id risks silently matching it to a DIFFERENT step after an
  * edit; an explicit `into:` name is a stable, user-chosen identifier
  * (the flat-recipe analogue of a chained recipe's mandatory `id:`) and is
- * safe to replay against.
+ * safe to replay against. A positional step is therefore NOT mockable —
+ * and, since 2026-09-24, not executable under replay either: the replay
+ * is refused, naming the step. (The dashboard's `previewMockedReplay`
+ * in `registryDiff.ts` applies the same rule, reason `positional-id`.)
  */
 const POSITIONAL_STEP_ID = /^step_\d+$/;
 /**
@@ -116,6 +185,10 @@ const POSITIONAL_STEP_ID = /^step_\d+$/;
  * JSON-stringified — matching what the original tool call's raw string
  * result would have looked like before any downstream `{{template}}`
  * substitution treated it as text.
+ *
+ * A captured `""` is a valid (empty) result and is kept; a captured
+ * `null` becomes the runner's `null` result via `?? null` at the mocked
+ * short-circuit. Only `undefined` means "nothing captured".
  */
 export function buildFlatMockedOutputs(originalRun) {
     const outputs = new Map();
@@ -125,7 +198,7 @@ export function buildFlatMockedOutputs(originalRun) {
             continue;
         // See POSITIONAL_STEP_ID's doc comment — a step with no explicit
         // `into:` isn't safely replayable against a (possibly edited) recipe
-        // file, so it always falls through to real execution.
+        // file, so the replay is refused rather than the step run live.
         if (POSITIONAL_STEP_ID.test(step.id)) {
             unmocked.push(step.id);
             continue;
@@ -135,9 +208,7 @@ export function buildFlatMockedOutputs(originalRun) {
             unmocked.push(step.id);
             continue;
         }
-        if (out !== null &&
-            typeof out === "object" &&
-            out["[truncated]"] === true) {
+        if (isTruncatedCapture(out)) {
             unmocked.push(step.id);
             continue;
         }
@@ -159,34 +230,51 @@ export function buildFlatMockedOutputs(originalRun) {
  * (`yaml:<recipe>:<startedAt>`) has no override seam, and manualRunId is
  * already surfaced in the dashboard / `runs.jsonl`, so this is enough to
  * distinguish a replay run from a real one without new plumbing.
+ *
+ * Refuses (no run started) when any step lacks a usable capture. Note
+ * that flat AGENT steps capture no `output`, so a flat recipe with an
+ * agent step is not replayable today — refused, never run live.
  */
 export async function replayFlatMockedRun(opts) {
     const { originalRun, recipe, deps } = opts;
     const { outputs, unmocked } = buildFlatMockedOutputs(originalRun);
+    // Layer 1 — preflight.
+    if (unmocked.length > 0) {
+        return {
+            ok: false,
+            error: replayRefusalMessage(unmocked),
+            unmockedSteps: unmocked,
+        };
+    }
     try {
         const result = await runYamlRecipe(recipe, {
             ...deps.runnerDeps,
             runLog: deps.runLog,
             ...(deps.activityLog !== undefined && { activityLog: deps.activityLog }),
             mockedOutputs: outputs,
+            // Layers 2 + 3 — refused in the step loop, and the StepDeps built from
+            // these RunnerDeps throw at the dispatch seam.
+            replayOnly: true,
             manualRunId: `replay-${originalRun.seq}`,
             testMode: false,
         });
         const recent = deps.runLog.query({ recipe: recipe.name, limit: 5 });
         const newRun = recent.find((r) => r.createdAt >= originalRun.doneAt);
+        const refused = refusedStepIds(result.stepResults);
+        const ok = !result.errorMessage && refused.length === 0;
+        const error = refused.length > 0 ? replayRefusalMessage(refused) : result.errorMessage;
         return {
-            ok: !result.errorMessage,
+            ok,
             ...(newRun?.seq !== undefined && { newSeq: newRun.seq }),
             result,
-            ...(result.errorMessage !== undefined && { error: result.errorMessage }),
-            ...(unmocked.length > 0 && { unmockedSteps: unmocked }),
+            ...(error !== undefined && { error }),
+            ...(refused.length > 0 && { unmockedSteps: refused }),
         };
     }
     catch (err) {
         return {
             ok: false,
             error: err instanceof Error ? err.message : String(err),
-            ...(unmocked.length > 0 && { unmockedSteps: unmocked }),
         };
     }
 }

package/dist/recipes/replayRun.js.map

@@ -1 +1 @@
-{"version":3,"file":"replayRun.js","sourceRoot":"","sources":["../../src/recipes/replayRun.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAUH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAwBzB;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAsB;IAIvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,gEAAgE;QAChE,uBAAuB;QACvB,IACE,GAAG,KAAK,IAAI;YACZ,OAAO,GAAG,KAAK,QAAQ;YACtB,GAA+B,CAAC,aAAa,CAAC,KAAK,IAAI,EACxD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAKrC;IACC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAE9D,MAAM,WAAW,GAAkB,gBAAgB,CACjD,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,UAAU,CAAC,YAAY;QAC1B,CAAC,KAAK,IAAI,EAAE;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,EACJ,MAAM,CAAC,IAAI,CACZ,CAAC;IAEF,MAAM,UAAU,GAAe;QAC7B,oEAAoE;QACpE,4EAA4E;QAC5E,kDAAkD;QAClD,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAwC;QAC3E,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;QAC9B,MAAM,EAAE,KAAK;QACb,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,CAAC;QAC/C,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACxE,aAAa,EAAE,OAAO;QACtB,qEAAqE;QACrE,2DAA2D;QAC3D,YAAY,EAAE,UAAU,WAAW,CAAC,GAAG,EAAE;KAC1C,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACvE,kEAAkE;QAClE,kEAAkE;QAClE,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,OAAO;YAClB,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACxD,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;YACxE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACvD,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAsB;IAI3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACxC,iEAAiE;QACjE,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IACE,GAAG,KAAK,IAAI;YACZ,OAAO,GAAG,KAAK,QAAQ;YACtB,GAA+B,CAAC,aAAa,CAAC,KAAK,IAAI,EACxD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAaD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAIzC;IACC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAElE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE;YACzC,GAAG,IAAI,CAAC,UAAU;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YACxE,aAAa,EAAE,OAAO;YACtB,WAAW,EAAE,UAAU,WAAW,CAAC,GAAG,EAAE;YACxC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QACrE,OAAO;YACL,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY;YACxB,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACxD,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;YACxE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACvD,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"replayRun.js","sourceRoot":"","sources":["../../src/recipes/replayRun.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAUH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GACd,MAAM,iBAAiB,CAAC;AA2BzB;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAsB;IAIvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,gEAAgE;QAChE,uBAAuB;QACvB,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACtC,OAAO,CACL,GAAG,KAAK,IAAI;QACZ,OAAO,GAAG,KAAK,QAAQ;QACtB,GAA+B,CAAC,aAAa,CAAC,KAAK,IAAI,CACzD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,WAA0E;IAE1E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAKrC;IACC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAE9D,yEAAyE;IACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC;YACrC,aAAa,EAAE,QAAQ;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAkB,gBAAgB;IACjD,wEAAwE;IACxE,kEAAkE;IAClE,iEAAiE;IACjE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,EACxC,IAAI,CAAC,UAAU,CAAC,YAAY;QAC1B,CAAC,KAAK,IAAI,EAAE;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,EACJ,MAAM,CAAC,IAAI,CACZ,CAAC;IAEF,MAAM,UAAU,GAAe;QAC7B,oEAAoE;QACpE,4EAA4E;QAC5E,kDAAkD;QAClD,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAwC;QAC3E,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;QAC9B,MAAM,EAAE,KAAK;QACb,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,CAAC;QAC/C,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACxE,aAAa,EAAE,OAAO;QACtB,oEAAoE;QACpE,iEAAiE;QACjE,UAAU,EAAE,IAAI;QAChB,qEAAqE;QACrE,2DAA2D;QAC3D,YAAY,EAAE,UAAU,WAAW,CAAC,GAAG,EAAE;KAC1C,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACvE,kEAAkE;QAClE,kEAAkE;QAClE,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,cAAc,CAC5B,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CACnE,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QAC3E,OAAO;YACL,EAAE;YACF,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACxD,MAAM;YACN,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAsB;IAI3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACxC,iEAAiE;QACjE,qEAAqE;QACrE,gEAAgE;QAChE,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAaD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAIzC;IACC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAElE,uBAAuB;IACvB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC;YACrC,aAAa,EAAE,QAAQ;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE;YACzC,GAAG,IAAI,CAAC,UAAU;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YACxE,aAAa,EAAE,OAAO;YACtB,uEAAuE;YACvE,+CAA+C;YAC/C,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,UAAU,WAAW,CAAC,GAAG,EAAE;YACxC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QACxD,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QAC3E,OAAO;YACL,EAAE;YACF,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACxD,MAAM;YACN,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/recipes/yamlRunner.d.ts

@@ -474,6 +474,17 @@ export interface RunnerDeps {
      * sites below). Unset for a normal (non-replay) run.
      */
     mockedOutputs?: Map<string, string>;
+    /**
+     * Mocked-replay boundary (see `replayBoundary.ts`). When true, the run is
+     * EVIDENCE-ONLY: a step whose id is absent from `mockedOutputs` is refused
+     * with `replay_refused_unmocked_step` instead of dispatched, and the
+     * dispatch seam itself (`executeStep`, `buildAgentExecutorDeps`) throws
+     * `ReplayIncompleteError` before any tool or agent is invoked. Set by
+     * `replayFlatMockedRun` / `replayMockedRun`; never for a live run. Absent
+     * ⇒ the historical fallthrough (a step not in the map runs for real),
+     * which the simulator (`simulateMockedRun.ts`) relies on with stub deps.
+     */
+    replayOnly?: boolean;
 }
 export interface RunResult {
     recipe: string;
@@ -576,8 +587,10 @@ export type StepResult = {
      */
     output?: unknown;
 };
-export type StepDeps = Required<Omit<RunnerDeps, "now" | "logDir" | "recordFixturesDir" | "runLog" | "ledgerDir" | "manualRunId" | "activityLog" | "requireApprovalFn" | "governance" | "gateAutomatedRuns" | "agentDisallowedTools" | "signal" | "workerId" | "mockedOutputs">> & {
+export type StepDeps = Required<Omit<RunnerDeps, "now" | "logDir" | "recordFixturesDir" | "runLog" | "ledgerDir" | "manualRunId" | "activityLog" | "requireApprovalFn" | "governance" | "gateAutomatedRuns" | "agentDisallowedTools" | "signal" | "workerId" | "mockedOutputs" | "replayOnly">> & {
     workdir: string;
+    /** See `RunnerDeps.replayOnly`. Copied by `resolveStepDeps`. */
+    replayOnly?: boolean;
     logDir?: string;
     recordFixturesDir?: string;
     runLog?: RecipeRunLog;

package/dist/recipes/yamlRunner.js

@@ -67,6 +67,7 @@ import { resolveLocalEndpoint, resolveLocalModel } from "./localSettings.js";
 import { defaultDeprecationWarn, normalizeRecipeForRuntime, } from "./migrations/index.js";
 import { costRouter } from "./pricing/costRouter.js";
 import { loadPriceTable, costUsd as priceCostUsd, } from "./pricing/priceTable.js";
+import { ReplayIncompleteError } from "./replayBoundary.js";
 import { resolveRecipePath } from "./resolveRecipePath.js";
 import { RunBudget } from "./runBudget.js";
 import { recordAttemptRun } from "./runLedgers.js";
@@ -1698,6 +1699,13 @@ export async function runYamlRecipe(recipe, deps = {}, seedContext = {}) {
                 // `RunBudget.reconcile` records a fail-open warning per driver per
                 // run and continues.
                 try {
+                    // Replay boundary (replayBoundary.ts, layer 2). Flat agent steps
+                    // capture no `output`, so under replay there is never a mock for
+                    // one — refuse here rather than let the catch below be the first
+                    // to hear about it from the seam.
+                    if (deps.replayOnly === true) {
+                        throw new ReplayIncompleteError([stepId], "agent step");
+                    }
                     // Phase 4: opt-in cost-aware routing. No-op (returns preferred) when
                     // the step has no `downshift` list or no USD cap is set.
                     const routed = resolveRouting({ driver: agentCfg.driver, model: agentCfg.model }, agentCfg.downshift, renderedPrompt, runBudget);
@@ -1991,6 +1999,16 @@ export async function runYamlRecipe(recipe, deps = {}, seedContext = {}) {
             if (deps.mockedOutputs?.has(stepId)) {
                 result = deps.mockedOutputs.get(stepId) ?? null;
             }
+            else if (deps.replayOnly === true) {
+                // Replay boundary (replayBoundary.ts, layer 2): no capture for this
+                // step ⇒ refuse, never dispatch. Recorded as a thrown step error so
+                // the existing halt/fail-open bookkeeping below applies unchanged;
+                // no retry, because there is nothing to retry against.
+                const refusal = new ReplayIncompleteError([stepId], `tool ${step.tool ?? "?"}`);
+                thrownError = refusal.message;
+                thrownErrorCode = refusal.code;
+                result = null;
+            }
             else {
                 for (let attempt = 0; attempt <= retryCount; attempt++) {
                     if (attempt > 0) {
@@ -2488,6 +2506,15 @@ rollbackAtDecision) {
     if (!toolId) {
         return null;
     }
+    // Replay boundary (replayBoundary.ts, layer 3). A mocked replay's StepDeps
+    // carry `replayOnly`; reaching this seam under replay means no capture
+    // short-circuited the step upstream, so the ONLY correct outcome is to
+    // refuse. Checked before the registry lookup, the approval gate and the
+    // policy check on purpose: none of those may convert "no evidence" into
+    // "permitted to run".
+    if (deps.replayOnly === true) {
+        throw new ReplayIncompleteError([step.into ?? toolId], `tool ${toolId}`);
+    }
     // Check if tool is registered in the new registry
     if (hasTool(toolId)) {
         const tool = getTool(toolId);
@@ -2996,6 +3023,10 @@ function resolveStepDeps(deps, scope) {
             : new WriteEffectLedger(),
         workerId: deps.workerId,
         recipeName: scope?.recipeName,
+        // Replay boundary marker rides on StepDeps so the dispatch seam
+        // (`executeStep`, `buildAgentExecutorDeps`) can refuse without the run
+        // loop's help. Only ever set by the replay entrypoints.
+        ...(deps.replayOnly === true && { replayOnly: true }),
         // Ephemeral rollback — same disk-availability gating as writeEffectLedger
         // above (deliberately: both share the operator's --ledger-dir/--attempt
         // inputs). No in-memory fallback: rollback only makes sense as a
@@ -3083,6 +3114,12 @@ function buildAgentExecutorDeps(stepDeps, runnerDeps, claudeCodeFnOverride,
  * the run has started; the flat caller passes its local const directly.
  */
 runTaskId) {
+    // Replay boundary (replayBoundary.ts, layer 3) — the single place agent
+    // executor deps are built for every dispatch site in this runner, so a
+    // replay's StepDeps can never hand a driver to an agent step.
+    if (stepDeps.replayOnly === true) {
+        throw new ReplayIncompleteError(["agent"], "agent step");
+    }
     const claudeCliFn = claudeCodeFnOverride ?? stepDeps.claudeCodeFn;
     return {
         // ── ADR-0021 information boundary ───────────────────────────────────────
@@ -3954,6 +3991,8 @@ export async function dispatchRecipe(recipe, deps, seedContext = {}) {
             runLog: deps.chainedOptions?.runLog,
             activityLog: deps.chainedOptions?.activityLog,
             mockedOutputs: deps.chainedOptions?.mockedOutputs,
+            ...((deps.replayOnly === true ||
+                deps.chainedOptions?.replayOnly === true) && { replayOnly: true }),
             taskIdPrefix: deps.chainedOptions?.taskIdPrefix,
             // Parity (#850): forward the run-level budget, price table, and
             // cancellation signal that the chained runner honours. Without these the