specrails-core 6.5.0 → 6.6.0

package/dist/agent-runtime/capabilities.d.ts

@@ -13,9 +13,9 @@ export declare function configuredCapabilities(config: RuntimeConfig, registry:
     schemaVersion: 1;
     roles: {
         transport: string;
-        continuation: "supported" | "unsupported" | "unknown";
+        continuation: 'supported' | 'unsupported' | 'unknown';
         resumeRequiresFullContext?: boolean;
-        effortSupport: "supported" | "unsupported" | "unknown";
+        effortSupport: 'supported' | 'unsupported' | 'unknown';
         supportedEfforts: string[] | null;
         observedModel: boolean;
         observedEffort: boolean;

package/dist/agent-runtime/cli.d.ts

@@ -4,13 +4,13 @@ export declare function runtimeFailure(error: unknown): {
     type: string;
     status: string;
     error: string | {
-        details?: import("./workflow-types.js").JsonValue | undefined;
         code: string;
         message: string;
+        details?: import("./workflow-types.js").JsonValue | undefined;
     };
 };
 /** Machine operations are mirrored in integration-contract.json; help is presentation-only. */
-export declare const RUNTIME_CLI_OPERATIONS: readonly ["api", "validate", "run", "status", "resume", "prompts", "capabilities", "evidence", "recovery", "evaluate", "workflows", "fork", "signal", "cancel", "host", "help"];
+export declare const RUNTIME_CLI_OPERATIONS: readonly ['api', 'validate', 'run', 'status', 'resume', 'prompts', 'capabilities', 'evidence', 'recovery', 'evaluate', 'workflows', 'fork', 'signal', 'cancel', 'host', 'help'];
 /** The host-facing summary: phase status, pending interrupts and usage without accumulated outputs. */
 export declare function compactState(state: WorkflowState | null): {
     runId: string;
@@ -42,13 +42,13 @@ export declare function compactState(state: WorkflowState | null): {
     };
     steps: {
         [k: string]: {
-            status: "pending" | "running" | "interrupted" | import("./workflow-types.js").StepStatus;
+            status: "interrupted" | "pending" | "running" | import("./workflow-types.js").StepStatus;
             visits: number;
         };
     };
     recentFailures: {
         stepId: string;
-        status: "running" | "interrupted" | import("./workflow-types.js").StepStatus;
+        status: "interrupted" | "running" | import("./workflow-types.js").StepStatus;
         attempt: number;
         visit: number;
         at: string;

package/dist/agent-runtime/compact/environment.d.ts

@@ -1,5 +1,5 @@
 import type { spawnSync } from 'node:child_process';
-/** `timeoutMs` overrides the default bound for one plan (a browser download is far larger than a dependency install). */
+/** `timeoutMs` overrides the default bound for one plan (a browser download is far larger than a dependency install). `drift`: installed direct dependencies the install must bring back inside their declared ranges. */
 export interface EnvironmentInstall {
     ecosystem: 'node' | 'python' | 'go' | 'rust';
     root: string;
@@ -7,12 +7,20 @@ export interface EnvironmentInstall {
     args: string[];
     timeoutMs?: number;
     installs?: string;
+    drift?: DriftedDependency[];
 }
-/** `precondition`: the install failed for a reason only the host can repair (see hostPreconditionFailure). */
+/** `precondition`: the install failed for a reason only the host can repair (see hostPreconditionFailure). `driftPersists`: drifted packages a successful install left drifted (the lockfile pins them). */
 export interface InstallOutcome extends EnvironmentInstall {
     ok: boolean;
     detail: string;
     precondition?: string;
+    driftPersists?: DriftedDependency[];
+}
+/** An installed direct dependency whose version does not satisfy the range package.json declares. */
+export interface DriftedDependency {
+    name: string;
+    declared: string;
+    installed: string;
 }
 export type HostPreconditionKind = 'network' | 'credential' | 'environment-variable' | 'toolchain' | 'setup' | 'environment';
 export interface HostPrecondition {
@@ -44,6 +52,16 @@ export declare function hostPrecondition(output: string): HostPrecondition | und
 export declare function suggestedPackages(output: string): string[];
 /** Dependencies package.json declares that node_modules does not hold (bounded). */
 export declare function missingNodeDependencies(root: string): string[];
+/**
+ * Installed direct dependencies whose version fails the range package.json
+ * declares (bounded, never throws): a tree installed for other inputs, such as
+ * a warm link from a base checkout or a manifest edited after the install,
+ * passes `missingNodeDependencies` and then fails lint on an untouched file.
+ * Absent packages are `missingNodeDependencies`' to report.
+ */
+export declare function driftedNodeDependencies(root: string): DriftedDependency[];
+/** `@busuu/experiments 5.23.0 does not satisfy ^5.24.0, …` for up to five packages. */
+export declare function describeDrift(drift: readonly DriftedDependency[]): string;
 /** The installs a repository root needs, judged from its manifests and the absence of their install output. */
 export declare function plannedInstalls(root: string, failureOutput?: string): EnvironmentInstall[];
 /** Runs each planned install once, bounded; never throws. */

package/dist/agent-runtime/compact/environment.js

@@ -2,6 +2,7 @@ import crossSpawn from 'cross-spawn';
 import { existsSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
+import semver from 'semver';
 // npm/pnpm/yarn are `.cmd` shims on Windows: a bare `spawnSync('npm')` is
 // ENOENT there, which read as an environment failure of its own and sent the
 // install/check round in circles. cross-spawn resolves the shim on every OS.
@@ -133,6 +134,56 @@ export function missingNodeDependencies(root) {
     }
     return [...declared].filter(name => !existsSync(path.join(root, 'node_modules', name))).slice(0, 20);
 }
+// Specifiers with no installed-version contract to check locally; reporting
+// them would plan an install on every run.
+const NON_SEMVER_SPECIFIER = /^(?:workspace:|file:|link:|portal:|patch:|npm:|catalog:|git[+:]|github:|gitlab:|bitbucket:|https?:|ssh:)|\//;
+/**
+ * Installed direct dependencies whose version fails the range package.json
+ * declares (bounded, never throws): a tree installed for other inputs, such as
+ * a warm link from a base checkout or a manifest edited after the install,
+ * passes `missingNodeDependencies` and then fails lint on an untouched file.
+ * Absent packages are `missingNodeDependencies`' to report.
+ */
+export function driftedNodeDependencies(root) {
+    let manifest;
+    try {
+        manifest = JSON.parse(readFileSync(path.join(root, 'package.json'), 'utf8'));
+    }
+    catch {
+        return [];
+    }
+    const drifted = new Map();
+    for (const field of ['dependencies', 'devDependencies', 'optionalDependencies']) {
+        const block = manifest[field];
+        if (!block || typeof block !== 'object' || Array.isArray(block))
+            continue;
+        for (const [name, declared] of Object.entries(block)) {
+            if (drifted.has(name) || typeof declared !== 'string' || NON_SEMVER_SPECIFIER.test(declared.trim()))
+                continue;
+            const range = semver.validRange(declared);
+            if (!range)
+                continue;
+            let installed;
+            try {
+                installed = JSON.parse(readFileSync(path.join(root, 'node_modules', name, 'package.json'), 'utf8')).version;
+            }
+            catch {
+                continue;
+            }
+            if (typeof installed !== 'string' || !semver.valid(installed))
+                continue;
+            if (!semver.satisfies(installed, range, { includePrerelease: false }))
+                drifted.set(name, { name, declared, installed });
+            if (drifted.size >= 20)
+                return [...drifted.values()];
+        }
+    }
+    return [...drifted.values()];
+}
+/** `@busuu/experiments 5.23.0 does not satisfy ^5.24.0, …` for up to five packages. */
+export function describeDrift(drift) {
+    return drift.slice(0, 5).map(item => `${item.name} ${item.installed} does not satisfy ${item.declared}`).join(', ') + (drift.length > 5 ? ` and ${drift.length - 5} more` : '');
+}
 /** Browser builds are ~150 MB each; the default 5-minute install bound is too short on a slow link. */
 const PLAYWRIGHT_INSTALL_TIMEOUT_MS = 10 * 60_000;
 /** True when package.json declares `@playwright/test` or `playwright`; only those repositories get a browser install plan. */
@@ -161,9 +212,12 @@ export function plannedInstalls(root, failureOutput = '') {
     // A manifest edited after the first install (a later task group adds
     // jest-extended) leaves node_modules present but incomplete; verify then
     // fails on the environment, not the code. Declared-but-absent ⇒ reinstall.
-    if (has('package.json') && (!has('node_modules') || missingNodeDependencies(root).length)) {
+    // A version outside its declared range (a stale warm-linked tree) is the
+    // same kind of gap: the same install brings it back in range.
+    const drift = has('package.json') && has('node_modules') ? driftedNodeDependencies(root) : [];
+    if (has('package.json') && (!has('node_modules') || missingNodeDependencies(root).length || drift.length)) {
         const runner = has('pnpm-lock.yaml') ? 'pnpm' : has('yarn.lock') ? 'yarn' : 'npm';
-        plans.push({ ecosystem: 'node', root, command: runner, args: runner === 'npm' ? ['install', '--no-audit', '--no-fund', '--loglevel=error'] : ['install'] });
+        plans.push({ ecosystem: 'node', root, command: runner, args: runner === 'npm' ? ['install', '--no-audit', '--no-fund', '--loglevel=error'] : ['install'], ...(drift.length ? { drift } : {}) });
     }
     // After the dependency plan: a fresh worktree needs node_modules before
     // `playwright install` can run at all.
@@ -262,10 +316,15 @@ export function installEnvironment(roots, io = {}) {
             }
             io.onEvent?.({ kind: 'tool-end', tool: plan.command });
             const ok = result.status === 0;
-            const detail = ok ? `installed ${plan.installs ?? `${plan.ecosystem} dependencies`} in ${path.basename(root)}` : `${plan.command} ${plan.args.join(' ')} failed in ${path.basename(root)}: ${String(result.stderr || result.error?.message || `exit ${result.status}`).trim().slice(0, 400)}`;
+            const detail = ok ? `installed ${plan.installs ?? `${plan.ecosystem} dependencies`} in ${path.basename(root)}${plan.drift?.length ? ` (${describeDrift(plan.drift)})` : ''}` : `${plan.command} ${plan.args.join(' ')} failed in ${path.basename(root)}: ${String(result.stderr || result.error?.message || `exit ${result.status}`).trim().slice(0, 400)}`;
             io.onEvent?.({ kind: 'text', text: `Environment: ${detail}` });
+            // An install that leaves the drift in place means the lockfile itself
+            // resolves the old version: a code change, never a second install.
+            const persisting = ok && plan.drift?.length ? driftedNodeDependencies(root).filter(item => plan.drift.some(before => before.name === item.name)) : [];
+            if (persisting.length)
+                io.onEvent?.({ kind: 'text', text: `Environment: ${describeDrift(persisting)} after installing in ${path.basename(root)}; the lockfile still resolves the drifted version, so update the lockfile or the declared range.` });
             const precondition = ok ? undefined : hostPreconditionFailure(`${result.stdout ?? ''}\n${result.stderr ?? ''}`);
-            outcomes.push({ ...plan, ok, detail, ...(precondition ? { precondition } : {}) });
+            outcomes.push({ ...plan, ok, detail, ...(precondition ? { precondition } : {}), ...(persisting.length ? { driftPersists: persisting } : {}) });
         }
     }
     return outcomes;

package/dist/agent-runtime/compact/step.d.ts

@@ -40,7 +40,7 @@ export declare function openspecCall(env: CompactEnv, input: Parameters<OpenSpec
 export declare const PLANNING_CONTROLS: {
     readonly temperature: 0.2;
     readonly maxOutputTokens: 16384;
-    readonly reasoningEffort: "high";
+    readonly reasoningEffort: 'high';
 };
 export declare function structuredStep(env: CompactEnv, name: string, system: string, user: string, schema: Record<string, unknown>, validate?: (value: Record<string, unknown>) => string | undefined, controls?: {
     temperature?: number;

package/dist/agent-runtime/efficiency-summary.d.ts

@@ -25,7 +25,7 @@ export declare function efficiencySummary(state: WorkflowState, context: Pipelin
     workflowVersion: string;
     technicalAcceptance: string;
     archive: import("../pipeline/pipeline-state.js").PhaseStatus;
-    delivery: "pending" | "complete" | "pending-host";
+    delivery: "complete" | "pending" | "pending-host";
     roles: {
         role: string;
         provider: string | null;

package/dist/agent-runtime/efficiency-types.d.ts

@@ -28,7 +28,7 @@ export interface ProviderInvocation {
         costUsd: number | null;
     };
 }
-export declare const CACHE_TOKEN_KEYS: readonly ["uncachedInputTokens", "cacheReadInputTokens", "cacheWriteInputTokens"];
+export declare const CACHE_TOKEN_KEYS: readonly ['uncachedInputTokens', 'cacheReadInputTokens', 'cacheWriteInputTokens'];
 export declare function sumCacheUsage(values: CacheTokenUsage[]): CacheTokenUsage;
 export interface EfficiencyTotals {
     attempts: number;

package/dist/agent-runtime/engine/checkpoint/database.d.ts

@@ -5,21 +5,21 @@ export type DatabaseRow = Record<string, SQLOutputValue>;
 export type WriteRow = Record<string, SQLInputValue>;
 /** Every identifier interpolated into SQL comes from this closed adapter-owned map. */
 declare const keys: {
-    readonly runs: readonly ["run_id"];
-    readonly visits: readonly ["visit_id"];
-    readonly steps: readonly ["run_id", "node_path", "scope_id"];
-    readonly attempts: readonly ["attempt_id"];
-    readonly invocations: readonly ["invocation_id"];
-    readonly receipts: readonly ["receipt_id"];
-    readonly budget: readonly ["run_id"];
-    readonly interrupts: readonly ["interrupt_id"];
-    readonly control_inbox: readonly ["request_id"];
-    readonly role_sessions: readonly ["session_key"];
-    readonly piece_state: readonly ["run_id", "scope_id", "node_path", "key"];
-    readonly reservations: readonly ["reservation_id"];
-    readonly events: readonly ["run_id", "sequence"];
-    readonly checkpoints: readonly ["thread_id", "checkpoint_ns", "checkpoint_id"];
-    readonly writes: readonly ["thread_id", "checkpoint_ns", "checkpoint_id", "task_id", "idx"];
+    readonly runs: readonly ['run_id'];
+    readonly visits: readonly ['visit_id'];
+    readonly steps: readonly ['run_id', 'node_path', 'scope_id'];
+    readonly attempts: readonly ['attempt_id'];
+    readonly invocations: readonly ['invocation_id'];
+    readonly receipts: readonly ['receipt_id'];
+    readonly budget: readonly ['run_id'];
+    readonly interrupts: readonly ['interrupt_id'];
+    readonly control_inbox: readonly ['request_id'];
+    readonly role_sessions: readonly ['session_key'];
+    readonly piece_state: readonly ['run_id', 'scope_id', 'node_path', 'key'];
+    readonly reservations: readonly ['reservation_id'];
+    readonly events: readonly ['run_id', 'sequence'];
+    readonly checkpoints: readonly ['thread_id', 'checkpoint_ns', 'checkpoint_id'];
+    readonly writes: readonly ['thread_id', 'checkpoint_ns', 'checkpoint_id', 'task_id', 'idx'];
 };
 export type RevisionTable = keyof typeof keys;
 /** Short synchronous transactions own graph writes and ledger evidence together. */

package/dist/agent-runtime/engine/contracts.d.ts

@@ -103,7 +103,8 @@ export interface ReceiptEvidence {
  * is reserved for a correction role that diagnoses the cause outside the change.
  */
 export interface HostBlocker {
-    kind: 'network' | 'credential' | 'environment-variable' | 'toolchain' | 'setup' | 'environment' | 'scope';
+    /** `nondeterministic-output`: verification rewrites candidate files differently on every run (error code `verification_nondeterministic_output`). */
+    kind: 'network' | 'credential' | 'environment-variable' | 'toolchain' | 'setup' | 'environment' | 'scope' | 'nondeterministic-output';
     reason: string;
     command: string;
     args: string[];

package/dist/agent-runtime/engine/definition-types.d.ts

@@ -1,5 +1,5 @@
 import type { EngineEffect, JsonObject, WorkflowBudget } from './contracts.js';
-export declare const PIECE_KINDS: readonly ["prompt", "role-turn", "decider", "condition", "assign", "verify", "shell", "artifact-contract", "openspec-validate", "openspec-archive", "approval", "question", "gate", "map", "join", "component", "implementation", "implementation-step", "end"];
+export declare const PIECE_KINDS: readonly ['prompt', 'role-turn', 'decider', 'condition', 'assign', 'verify', 'shell', 'artifact-contract', 'openspec-validate', 'openspec-archive', 'approval', 'question', 'gate', 'map', 'join', 'component', 'implementation', 'implementation-step', 'end'];
 export type PieceKind = typeof PIECE_KINDS[number];
 export interface DefinitionNode {
     kind: PieceKind;

package/dist/agent-runtime/engine/efficiency-summary.d.ts

@@ -2,13 +2,6 @@ import type { WorkflowState } from '../workflow-types.js';
 import type { RunLedger } from './checkpoint/ledger.js';
 /** Derive diagnostics from committed records; status never inspects or mutates a journal. */
 export declare function definitionEfficiencySummary(ledger: RunLedger, state: WorkflowState): {
-    reservations: {
-        pendingInvocations: number;
-        knownTokens: number;
-        knownCostUsd: number;
-        tokensUnknown: boolean;
-        costUnknown: boolean;
-    };
     schemaVersion: 1;
     currentEvidenceIds: string[];
     planHash: string | null;
@@ -17,7 +10,7 @@ export declare function definitionEfficiencySummary(ledger: RunLedger, state: Wo
     workflowVersion: string;
     technicalAcceptance: string;
     archive: import("../../pipeline/pipeline-state.js").PhaseStatus;
-    delivery: "pending" | "complete" | "pending-host";
+    delivery: "complete" | "pending" | "pending-host";
     roles: {
         role: string;
         provider: string | null;
@@ -59,4 +52,11 @@ export declare function definitionEfficiencySummary(ledger: RunLedger, state: Wo
         durationMs: number | null;
     };
     metrics: import("../efficiency-types.js").RuntimeEfficiency;
+    reservations: {
+        pendingInvocations: number;
+        knownTokens: number;
+        knownCostUsd: number;
+        tokensUnknown: boolean;
+        costUnknown: boolean;
+    };
 };

package/dist/agent-runtime/engine/fork.d.ts

@@ -16,7 +16,7 @@ export interface ForkRunOptions {
 }
 /** A fork publishes an independently leased historical cut; the source is opened read-only. */
 export declare function forkRun(directory: string, options: ForkRunOptions): Promise<{
-    type: "runtime-forked";
+    type: 'runtime-forked';
     runId: string;
     forkOf: string;
     fromNodePath: string;

package/dist/agent-runtime/engine/graph-description.d.ts

@@ -1,14 +1,14 @@
 import type { WorkflowDefinition } from './definition-types.js';
 /** Public topology contains no prompts, command arguments, credentials or state. */
 export declare function describeDefinition(runId: string, definition: WorkflowDefinition): {
-    type: "runtime-graph";
+    type: 'runtime-graph';
     engineVersion: number;
     runId: string;
     definitionHash: string;
     workflowId: string;
     nodes: {
         path: string;
-        kind: "join" | "map" | "verify" | "shell" | "end" | "approval" | "question" | "prompt" | "gate" | "implementation" | "role-turn" | "decider" | "condition" | "assign" | "openspec-validate" | "openspec-archive" | "component" | "implementation-step" | "artifact-contract";
+        kind: "approval" | "artifact-contract" | "assign" | "component" | "condition" | "decider" | "end" | "gate" | "implementation" | "implementation-step" | "join" | "map" | "openspec-archive" | "openspec-validate" | "prompt" | "question" | "role-turn" | "shell" | "verify";
         label: string;
     }[];
     edges: {
@@ -18,31 +18,31 @@ export declare function describeDefinition(runId: string, definition: WorkflowDe
     }[];
     mermaid: string;
     graph: {
+        entry: string;
+        nodes: {
+            id: string;
+            kind: "approval" | "artifact-contract" | "assign" | "component" | "condition" | "decider" | "end" | "gate" | "implementation" | "implementation-step" | "join" | "map" | "openspec-archive" | "openspec-validate" | "prompt" | "question" | "role-turn" | "shell" | "verify";
+            label: string;
+            ends: {
+                [x: string]: string | null;
+            };
+            component?: string | undefined;
+        }[];
+        id: string;
+        version: string;
         components?: {
             [k: string]: {
                 entry: string;
                 nodes: {
-                    component?: string | undefined;
                     id: string;
-                    kind: "join" | "map" | "verify" | "shell" | "end" | "approval" | "question" | "prompt" | "gate" | "implementation" | "role-turn" | "decider" | "condition" | "assign" | "openspec-validate" | "openspec-archive" | "component" | "implementation-step" | "artifact-contract";
+                    kind: "approval" | "artifact-contract" | "assign" | "component" | "condition" | "decider" | "end" | "gate" | "implementation" | "implementation-step" | "join" | "map" | "openspec-archive" | "openspec-validate" | "prompt" | "question" | "role-turn" | "shell" | "verify";
                     label: string;
                     ends: {
                         [x: string]: string | null;
                     };
+                    component?: string | undefined;
                 }[];
             };
         } | undefined;
-        entry: string;
-        nodes: {
-            component?: string | undefined;
-            id: string;
-            kind: "join" | "map" | "verify" | "shell" | "end" | "approval" | "question" | "prompt" | "gate" | "implementation" | "role-turn" | "decider" | "condition" | "assign" | "openspec-validate" | "openspec-archive" | "component" | "implementation-step" | "artifact-contract";
-            label: string;
-            ends: {
-                [x: string]: string | null;
-            };
-        }[];
-        id: string;
-        version: string;
     };
 };