taskflow-core 0.2.0 → 0.2.1

package/dist/resources/errors.js

@@ -0,0 +1,89 @@
+/** Stable, redaction-safe failures emitted by the workspace capability plane. */
+export const WORKSPACE_ERROR_CODES = [
+    "TFWS_UNAUTHORIZED_GRANT",
+    "TFWS_UNKNOWN_WORKSPACE",
+    "TFWS_INVALID_PATH",
+    "TFWS_PATH_ESCAPE",
+    "TFWS_ACCESS_ESCALATION",
+    "TFWS_CREDENTIAL_DENIED",
+    "TFWS_PROVIDER_DENIED",
+    "TFWS_PROVIDER_ACQUIRE_FAILED",
+    "TFWS_PROVIDER_RELEASE_FAILED",
+    "TFWS_UNSUPPORTED_SANDBOX_POLICY",
+    "TFWS_LEASE_TIMEOUT",
+    "TFWS_WRITE_INTENT_FAILED",
+    "TFWS_RESOURCE_DIRTY",
+    "TFWS_VERSION_COMMIT_UNAVAILABLE",
+    "TFWS_CACHE_RESTORE_RACE",
+    "TFWS_STATE_RESTORE_FAILED",
+    "TFWS_IDENTITY_MISMATCH",
+    "TFWS_HANDLE_INVALID",
+    "TFWS_SELECTOR_INVALID",
+];
+const DEFAULTS = {
+    TFWS_UNAUTHORIZED_GRANT: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_UNKNOWN_WORKSPACE: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_INVALID_PATH: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_PATH_ESCAPE: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_ACCESS_ESCALATION: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_CREDENTIAL_DENIED: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_PROVIDER_DENIED: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_PROVIDER_ACQUIRE_FAILED: { scope: "phase", retryable: true, terminal: false, retryScope: "new-attempt" },
+    TFWS_PROVIDER_RELEASE_FAILED: {
+        scope: "run",
+        retryable: true,
+        terminal: false,
+        retryScope: "after-reconcile",
+        recoveryRequired: "cleanup",
+    },
+    TFWS_UNSUPPORTED_SANDBOX_POLICY: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_LEASE_TIMEOUT: { scope: "phase", retryable: true, terminal: false, retryScope: "new-attempt" },
+    TFWS_WRITE_INTENT_FAILED: { scope: "phase", retryable: true, terminal: true, retryScope: "new-attempt" },
+    TFWS_RESOURCE_DIRTY: {
+        scope: "run",
+        retryable: true,
+        terminal: false,
+        retryScope: "after-reconcile",
+        recoveryRequired: "reconcile",
+    },
+    TFWS_VERSION_COMMIT_UNAVAILABLE: {
+        scope: "run",
+        retryable: true,
+        terminal: false,
+        retryScope: "after-reconcile",
+        recoveryRequired: "reconcile",
+    },
+    TFWS_CACHE_RESTORE_RACE: { scope: "phase", retryable: true, terminal: false, retryScope: "same-attempt" },
+    TFWS_STATE_RESTORE_FAILED: {
+        scope: "run",
+        retryable: true,
+        terminal: true,
+        retryScope: "after-reconcile",
+        recoveryRequired: "reconcile",
+    },
+    TFWS_IDENTITY_MISMATCH: {
+        scope: "run",
+        retryable: false,
+        terminal: true,
+        retryScope: "none",
+        recoveryRequired: "rebind",
+    },
+    TFWS_HANDLE_INVALID: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+    TFWS_SELECTOR_INVALID: { scope: "phase", retryable: false, terminal: true, retryScope: "none" },
+};
+export function workspacePolicyError(code, redactedMessage, overrides = {}) {
+    return { code, ...DEFAULTS[code], redactedMessage, ...overrides };
+}
+export function isWorkspacePolicyError(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    return (typeof candidate.code === "string" &&
+        WORKSPACE_ERROR_CODES.includes(candidate.code) &&
+        (candidate.scope === "phase" || candidate.scope === "run") &&
+        typeof candidate.retryable === "boolean" &&
+        typeof candidate.terminal === "boolean" &&
+        ["none", "same-attempt", "new-attempt", "after-reconcile", "new-run"].includes(String(candidate.retryScope)) &&
+        typeof candidate.redactedMessage === "string");
+}
+//# sourceMappingURL=errors.js.map

package/dist/resources/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/resources/errors.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,yBAAyB;IACzB,wBAAwB;IACxB,mBAAmB;IACnB,kBAAkB;IAClB,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,8BAA8B;IAC9B,8BAA8B;IAC9B,iCAAiC;IACjC,oBAAoB;IACpB,0BAA0B;IAC1B,qBAAqB;IACrB,iCAAiC;IACjC,yBAAyB;IACzB,2BAA2B;IAC3B,wBAAwB;IACxB,qBAAqB;IACrB,uBAAuB;CACd,CAAC;AA6BX,MAAM,QAAQ,GAA8C;IAC3D,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IACjG,sBAAsB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IAChG,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IAC3F,gBAAgB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IAC1F,sBAAsB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IAChG,sBAAsB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IAChG,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IAC9F,4BAA4B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE;IAC7G,4BAA4B,EAAE;QAC7B,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,iBAAiB;QAC7B,gBAAgB,EAAE,SAAS;KAC3B;IACD,+BAA+B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IACzG,kBAAkB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE;IACnG,wBAAwB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE;IACxG,mBAAmB,EAAE;QACpB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,iBAAiB;QAC7B,gBAAgB,EAAE,WAAW;KAC7B;IACD,+BAA+B,EAAE;QAChC,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,iBAAiB;QAC7B,gBAAgB,EAAE,WAAW;KAC7B;IACD,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE;IACzG,yBAAyB,EAAE;QAC1B,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,iBAAiB;QAC7B,gBAAgB,EAAE,WAAW;KAC7B;IACD,sBAAsB,EAAE;QACvB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,MAAM;QAClB,gBAAgB,EAAE,QAAQ;KAC1B;IACD,mBAAmB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;IAC7F,qBAAqB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;CAC/F,CAAC;AAIF,MAAM,UAAU,oBAAoB,CACnC,IAAwB,EACxB,eAAuB,EACvB,SAAS,GAAkC,EAAE;IAE7C,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,SAAS,GAAG,KAAsC,CAAC;IACzD,OAAO,CACN,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QACjC,qBAA2C,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;QACrE,CAAC,SAAS,CAAC,KAAK,KAAK,OAAO,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC;QAC1D,OAAO,SAAS,CAAC,SAAS,KAAK,SAAS;QACxC,OAAO,SAAS,CAAC,QAAQ,KAAK,SAAS;QACvC,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC5G,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ,CAC7C,CAAC;AACH,CAAC"}

package/dist/resources/execution.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Resolve-only execution coordinator and partial W1a control-plane scaffold
+ * for the 0.2.1 cwd bridge.
+ *
+ * This is deliberately named for its guarantee: it provides principal/root
+ * authorization, canonical resolution, cross-process leases, durable write
+ * intents, one-shot mutation permits, and authenticated plans, but it does not
+ * claim an OS filesystem sandbox, a race-free FileBroker, or atomic protection
+ * against external path replacement. A future native backend can implement the
+ * same runtime seam only after an exact host-support baseline cell passes.
+ */
+import type { AgentConfig } from "../agents.ts";
+import type { RunOptions, RunResult } from "../host/runner-types.ts";
+import { type InvocationAuthority } from "./authority.ts";
+import { type ReconciliationResult } from "./journal.ts";
+import { type RootRegistry } from "./registry.ts";
+export interface CoordinatedScriptResult {
+    stdout: string;
+    stderr: string;
+    code: number | null;
+    stdoutOversize: boolean;
+    timedOut: boolean;
+}
+export interface ResolveOnlyWorkspaceSessionOptions {
+    invocationRoot: string;
+    /** Trusted control-plane storage, never exposed as a flow workspace. */
+    controlDirectory?: string;
+    principalId?: string;
+    grantId?: string;
+    registryId?: string;
+    leaseTimeoutMs?: number;
+    permitTtlMs?: number;
+    signal?: AbortSignal;
+    /** Trusted host decision. Flow/tool arguments cannot enable reconciliation. */
+    allowReconcile?: boolean;
+}
+export interface BindResolveOnlyPhaseInput {
+    invocationRoot: string;
+    runId: string;
+    phaseId: string;
+    argName?: string;
+    argDefinitions: Readonly<Record<string, unknown>>;
+    argValues: Readonly<Record<string, unknown>>;
+}
+export interface ResolveOnlyAgentCall {
+    agents: AgentConfig[];
+    agentName: string;
+    task: string;
+    opts: RunOptions;
+    globalThinking?: string;
+    unitId?: string;
+    invoke: () => Promise<RunResult>;
+}
+export interface ResolveOnlyScriptCall {
+    unitId?: string;
+    signal?: AbortSignal;
+    invoke: () => Promise<CoordinatedScriptResult>;
+}
+export interface ResolveOnlyPhaseBinding {
+    readonly assurance: "resolve-only-no-sandbox";
+    readonly absolutePath: string;
+    readonly logicalPath: string;
+    readonly resourceDomainId: string;
+    readonly runId: string;
+    readonly phaseId: string;
+    runAgent(call: ResolveOnlyAgentCall): Promise<RunResult>;
+    runScript(call: ResolveOnlyScriptCall): Promise<CoordinatedScriptResult>;
+}
+export declare const WORKSPACE_RECONCILE_ACKNOWLEDGEMENT = "I acknowledge the current workspace state";
+export declare const WORKSPACE_RECONCILE_MODE_ENV = "TASKFLOW_WORKSPACE_RECONCILE_MODE";
+export declare function workspaceReconcileAllowedFromEnv(value?: string | undefined): boolean;
+export interface ReconcileResolveOnlyWorkspaceInput {
+    /** Exact deliberate acknowledgement. Reconciliation accepts the current
+     * external filesystem state; it does not restore or inspect lost writes. */
+    acknowledgement: string;
+    reason?: string;
+    signal?: AbortSignal;
+}
+export interface ResolveOnlyWorkspaceSession {
+    readonly assurance: "resolve-only-no-sandbox";
+    readonly invocationRoot: string;
+    readonly registry: RootRegistry;
+    readonly authority: InvocationAuthority;
+    bindPhase(input: BindResolveOnlyPhaseInput): Promise<ResolveOnlyPhaseBinding>;
+    reconcile(input: ReconcileResolveOnlyWorkspaceInput): Promise<ReconciliationResult>;
+}
+export declare function defaultWorkspaceControlDirectory(invocationRoot: string): string;
+export declare function createResolveOnlyWorkspaceSession(options: ResolveOnlyWorkspaceSessionOptions): Promise<ResolveOnlyWorkspaceSession>;
+export declare function reconcileResolveOnlyWorkspace(options: ResolveOnlyWorkspaceSessionOptions, input: ReconcileResolveOnlyWorkspaceInput): Promise<ReconciliationResult>;
+//# sourceMappingURL=execution.d.ts.map

package/dist/resources/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/resources/execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAErE,OAAO,EAAiC,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAEzF,OAAO,EAGN,KAAK,oBAAoB,EACzB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAA2D,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAM3G,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kCAAkC;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACzD,SAAS,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACzE;AAED,eAAO,MAAM,mCAAmC,8CAA8C,CAAC;AAC/F,eAAO,MAAM,4BAA4B,sCAAsC,CAAC;AAEhF,wBAAgB,gCAAgC,CAC/C,KAAK,GAAE,MAAM,GAAG,SAAqD,GACnE,OAAO,CAET;AAED,MAAM,WAAW,kCAAkC;IAClD;gFAC4E;IAC5E,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,SAAS,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC9E,SAAS,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACpF;AAmFD,wBAAgB,gCAAgC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAG/E;AA8gBD,wBAAsB,iCAAiC,CACtD,OAAO,EAAE,kCAAkC,GACzC,OAAO,CAAC,2BAA2B,CAAC,CAItC;AAED,wBAAsB,6BAA6B,CAClD,OAAO,EAAE,kCAAkC,EAC3C,KAAK,EAAE,kCAAkC,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAG/B"}