taskflow-mcp-core 0.3.0-beta.1.1 → 1.0.0

package/CONTROL_GUIDE.md

@@ -0,0 +1,113 @@
+# Taskflow control plane
+
+The implementation lives in a private workspace, but its compiled control and
+project-administration binaries ship inside the existing `taskflow-mcp-core`
+public package. No `taskflow-control` registry package is needed. The current
+1.0.0 candidate is unreleased; publication and new-head CI remain separate gates.
+
+A local candidate can be installed from its `taskflow-core` and
+`taskflow-mcp-core` tarballs plus TypeBox, with npm lifecycle scripts disabled.
+The control entry is `node_modules/taskflow-mcp-core/dist/control/control-cli.js`,
+also linked as `node_modules/.bin/taskflow-control`. This guide is shipped as
+`taskflow-mcp-core/CONTROL_GUIDE.md`. After authorized publication, install with
+`npm install --save-exact taskflow-mcp-core@1.0.0 typebox@1.3.30`.
+
+The control service mounts explicitly configured projects and routes requests by
+their durable project identity. It authenticates local clients, rereads policy,
+persists command results, coordinates capacity, and executes through the existing TE
+runtime. Durable approval waits can survive an owner crash without repeating completed
+phases. Receipts and explanations come from the project journal and runtime evidence.
+
+## Local use
+
+Use Node 22.19 or later. Keep the control home outside every execution project.
+
+```sh
+taskflow-control run --root /path/project --flow /path/flow.json --control-home /path/control-home
+taskflow-control serve --root /path/project --root /path/another --control-home /path/control-home --console
+taskflow-control status --root /path/project --control-home /path/control-home
+taskflow-control mcp --root /path/project --control-home /path/control-home
+```
+
+`auto` starts an owner or attaches to the existing owner. `coordinated` requires an
+existing owner; it does not silently start a standalone service. The console prints
+a private handoff-file path. Its one-use browser token is not placed in a URL or
+printed to stdout. Local policy files under the control home are checked on each
+operation. The CLI runs scripts; embedded callers must configure an agent runner
+for agent phases. MCP exposes the same authenticated Host operations.
+
+Approval output edits use validated text artifacts. Plan edits are restricted to
+unstarted downstream phase bodies in the same dependency graph; completed phases,
+top-level settings, and resource declarations cannot be rewritten. Plan edits are
+compiled again before readmission. The existing runtime executes the continuation.
+
+## Explicit coordinator operators
+
+Normal bootstrap credentials cannot change capacity or force-release reservations.
+An OS owner must explicitly provision the separate operator credential and a
+project-scoped operator policy. The key is never printed; the output identifies
+its principal and policy file. Provisioning does not overwrite an existing policy.
+
+```sh
+taskflow-control operator-provision --root /path/project --control-home /path/control-home
+taskflow-control coordinator-status --root /path/project --control-home /path/control-home --mode auto --operator
+taskflow-control set-max-active-runs --root /path/project --control-home /path/control-home --mode auto --operator --command-id UUID --max-active-runs 4
+taskflow-control force-release --root /path/project --control-home /path/control-home --mode auto --operator --command-id UUID --reservation UUID --acknowledge-risk --reason "operator reviewed retained effects"
+taskflow-control mcp --root /path/project --control-home /path/control-home --operator
+```
+
+Replace each `UUID` with an actual identifier. Reuse the same command ID and
+identical payload for a retry; a changed payload conflicts, and revocation is
+checked again before replay. Mutations default to `coordinated`; the examples
+explicitly permit `auto` to start the shared owner if absent. Capacity is a
+user-global admitted-run limit, while reservation identifiers and force release
+remain bound to the authenticated project. Reducing capacity below active use is
+rejected. Status shows global aggregate counts and only authorized project rows.
+
+Operator credentials grant project read plus the two coordinator mutations;
+they do not inherit run submission or approval authority. Only an explicit
+`mcp --operator` exposes the two operator mutation tools. A caller-supplied role
+or credential label cannot replace the separate HMAC proof. The protected
+`operator-policies` file is reread on each operation; removing a grant or revoking
+the principal also rejects existing sessions and retries. Deleting/replacing
+`operator.key` invalidates sessions; restart clients after deliberate key rotation.
+Possession of that OS-user-protected key is the trust boundary, not isolation
+from arbitrary processes running as the same OS user.
+
+Force release frees accounting capacity without proving side effects have stopped.
+It requires both explicit acknowledgement and a nonempty reason, persists the
+request and `CoordinatorCommandRecord`, and records `operator-overridden`.
+It does not fabricate a terminal Run or Receipt. Investigate unknown effects
+before making this explicit decision.
+
+## Offline project administration
+
+```sh
+taskflow-project-admin move-rebind --store /moved/project/.taskflow/control
+taskflow-project-admin clone --store /source/.taskflow/control --destination /new/project/.taskflow/control
+taskflow-project-admin export --store /project/.taskflow/control --output /private/export.json --kind readonly
+```
+
+Stop project writers before an offline filesystem move. `move-rebind` verifies the
+same directory device/inode, absence of the old path, writer exclusion, and settled
+history before preserving identity. `clone` creates a fresh, empty project/domain;
+it does not copy authoritative run history. Export preserves source bytes, including
+damaged journal evidence, and always states `executePromise: false`.
+
+## Recovery boundaries
+
+Missing or damaged headers, incomplete journals, ambiguous effects, unknown owners,
+and changed directory identities fail closed. An interrupted script can leave a
+dirty TE mutation even after its process exits: status remains `unknown`, capacity
+is retained, and no terminal Receipt is fabricated. SIGINT first records a versioned
+cancellation; a bounded process shutdown fallback still reaps owned children.
+
+Legacy conflict detection covers observable core run records and locks. It stops
+new attempts and never kills external writers. The trusted local
+`LegacyConflictGuard.acknowledgeStopped()` API requires captured writers to be dead.
+Invisible unmanaged writers require external service-manager exclusion. The managed
+legacy mutex migration helper applies only to its directly supervised child writers.
+
+The provider reports resolve-only containment and admission-time revocation. This
+does not claim an OS sandbox, arbitrary in-flight recovery, cross-domain transfer,
+or general DAG editing. Logical compaction retains the physical evidence journal.

package/README.md

@@ -11,23 +11,23 @@
 
 **English** · [简体中文](https://github.com/heggria/taskflow/blob/main/README.zh-CN.md)
 
-[0.3 overview](#taskflow-03-trusted-effects) · [Quickstart](#quickstart) · [Docs](https://heggria.github.io/taskflow/en/docs) · [Examples](https://github.com/heggria/taskflow/blob/main/examples) · [Changelog](https://github.com/heggria/taskflow/blob/main/CHANGELOG.md)
+[1.0 overview](#taskflow-10-declarative-coding-agent-workflows) · [Quickstart](#quickstart) · [Docs](https://heggria.github.io/taskflow/en/docs) · [Examples](https://github.com/heggria/taskflow/blob/main/examples) · [Changelog](https://github.com/heggria/taskflow/blob/main/CHANGELOG.md)
 
 </div>
 
 ---
 
-# taskflow 0.3: make agent side effects inspectable
+# taskflow 1.0: declarative coding-agent workflows
 
-**taskflow is a declarative runtime for coding-agent workflows.** It turns a graph into a verifiable execution contract, runs phases in isolation, and keeps intermediate work out of the host conversation. In the 0.3 candidate, the contract also describes the effects a phase is allowed to propose.
+**taskflow is a declarative runtime for coding-agent workflows.** It turns a graph into a verifiable execution contract, runs phases in isolation, and keeps intermediate work out of the host conversation. In Taskflow 1.0, the contract also describes the effects a phase is allowed to propose.
 
-> **Status: 0.3.0-beta.1.1 Trusted Effects beta — beta channel, not GA.** This release candidate is prepared for npm's `beta` channel; the beta ships the Trusted Effects MVP described below. The 0.3-C Control Plane remains a follow-on candidate track; it is not a shipped beta surface.
+> **Taskflow 1.0.0** includes the DAG runtime, trusted filesystem effects and complete Control Plane (CLI/MCP/WebUI). [GitHub Releases](https://github.com/heggria/taskflow/releases) and npm establish publication; see the [acceptance scoreboard](https://github.com/heggria/taskflow/blob/main/docs/internal/1.0.0-ga-scoreboard.md) for verified scope and limits.
 
-## The 0.3 idea
+## The declared-effect contract
 
 An agent can propose content. It should not become the mutation authority merely because it can run a command.
 
-For admitted, declared filesystem-write targets, taskflow 0.3 makes the path explicit and routes the final mutation through the resources transaction:
+For admitted, declared filesystem-write targets, taskflow 1.0 makes the path explicit and routes the final mutation through the resources transaction:
 
 ```text
 flow / .tf.ts
@@ -47,39 +47,40 @@ flow / .tf.ts
 
 This is **not** an OS sandbox. Resolve-only hosts cannot prevent every write to an undeclared path. Secret and service references are typed and fail closed in this cut; they do not imply a vault or network backend.
 
-## What is in the candidate
+## The 1.0 target and current implementation
 
-| Layer | What it does | Candidate status |
+| Layer | What it does | Support boundary |
 |---|---|---|
-| **Taskflow runtime** | Declarative DAGs, 12 phase types, budgets, retries, approvals, isolation, resume, replay, trace, and recompute | Existing 0.2 foundation |
-| **Trusted Effects** | Closed `EffectIR`, `PathRef` / `SecretRef` / `ServiceRef`, confidentiality/integrity labels, effect validation, overlap checks, and ledger-backed `why-*` explainers | 0.3 MVP implementation |
-| **Resource transaction** | Snapshot → lease → durable intent/permit → stage → commit, or restore and reject | 0.3 MVP implementation |
+| **Taskflow runtime** | Declarative DAGs, 12 phase types, budgets, retries, approvals, isolation, resume, replay, trace, and recompute | Stable runtime contract |
+| **Trusted Effects** | Closed `EffectIR`, `PathRef` / `SecretRef` / `ServiceRef`, confidentiality/integrity labels, effect validation, overlap checks, and ledger-backed `why-*` explainers | Declared-target contract |
+| **Resource transaction** | Snapshot → lease → durable intent/permit → stage → commit, or restore and reject | Declared-target contract |
 | **Host adapters** | Pi, Codex, Claude Code, OpenCode, Grok Build, and Hermes Agent use the same flow contract | Existing host surface; support remains host-specific |
-| **Control Plane** | ControlHost scaffold, proposed wire contracts, singleton/fencing, and hello negotiation; future stores, approvals, receipts, and coordination | Active 0.3-C track; not shipped and not the 0.3 MVP GA claim |
-| **WebUI** | Runs, approvals, receipts, and evidence browsing | Planned in the 0.3-C sequence; not shipped in this candidate |
+| **Control Plane** | Authenticated multi-project admission, global concurrency, durable replay, approvals/CAS, Receipts and operator CLI/MCP | Bundled in public `taskflow-mcp-core`; Unix UDS, Windows pipes non-GA |
+| **WebUI** | Runs, approval edits, Receipts and evidence browsing | Local token login, live authorization and project isolation |
 
-The normative MVP definition is [`docs/internal/0.3.0-trusted-effects-mvp.md`](https://github.com/heggria/taskflow/blob/main/docs/internal/0.3.0-trusted-effects-mvp.md). The 0.3-C Control Plane plan is [`docs/internal/0.3-c-control-plane-plan.md`](https://github.com/heggria/taskflow/blob/main/docs/internal/0.3-c-control-plane-plan.md).
+The [1.0 release plan](https://github.com/heggria/taskflow/blob/main/docs/internal/1.0.0-release-plan.md) defines the stable scope and acceptance gates. The filesystem-transaction details are in [`docs/internal/0.3.0-trusted-effects-mvp.md`](https://github.com/heggria/taskflow/blob/main/docs/internal/0.3.0-trusted-effects-mvp.md). The 0.3-C Control Plane plan is [`docs/internal/0.3-c-control-plane-plan.md`](https://github.com/heggria/taskflow/blob/main/docs/internal/0.3-c-control-plane-plan.md).
 
 ## Quickstart
 
-The 0.3 beta can be installed from npm, or exercised from a clean source checkout. Use Node.js **≥ 22.19.0**:
+Use Node.js **≥ 22.19.0**. To run from the 1.0 source checkout:
 
 ```bash
 git clone https://github.com/heggria/taskflow.git
 cd taskflow
-git checkout rc/0.3.0-trusted-effects
+git checkout v1.0.0
 pnpm install
 pnpm run typecheck
 pnpm test
 ```
 
-The beta commands below become usable after the tag workflow completes; until then they are release-target examples, not proof of registry availability.
+Install the matching 1.0.0 package set after confirming the release is available:
+
 ```bash
-npm install --global pi-taskflow@beta
-npm install --global codex-taskflow@beta
+npm install --global pi-taskflow@1.0.0
+npm install --global codex-taskflow@1.0.0
 ```
 
-The host-specific plugin and MCP commands remain in the [host guides](https://heggria.github.io/taskflow/en/docs/guides/). Stable 0.2.x installs remain available through exact stable pins.
+The host-specific plugin and MCP commands remain in the [host guides](https://heggria.github.io/taskflow/en/docs/guides/).
 
 Run the no-LLM Trusted Effects vertical-slice fixture:
 
@@ -88,7 +89,15 @@ pnpm exec node --conditions=development --experimental-strip-types --test \
   packages/taskflow-core/test/effects-e2e-fixture.test.ts
 ```
 
-This exercises the checked-in `examples/trusted-effects-write.json` path without a live LLM. For an interactive run, use the host guide for the adapter you already run. The stable 0.2 installation path remains documented separately in the [host guides](https://heggria.github.io/taskflow/en/docs/guides/).
+This exercises the checked-in `examples/trusted-effects-write.json` path without a live LLM. For an interactive run, use the host guide for the adapter you already run. The [release guide](https://github.com/heggria/taskflow/blob/main/RELEASE.md) covers packed-consumer validation and release gates.
+
+### Local Control Console
+
+In Pi, run `/tf web` to start the bundled local Control Console and open the default browser. If browser opening fails, the command shows a manual loopback URL. Use the one-use token in the reported private (0600) handoff file to log in; tokens are never included in the URL or command notifications.
+
+The console shows Control Plane runs, approvals, Receipts and existing evidence. Legacy Pi run transcripts are outside this view. Repeating the command in the same project reuses its service; changing projects or leaving the Pi session stops only the console process started by that session. Unix local transport is required. If another host already owns the Control home, stop that owner explicitly before launching this console.
+
+See [Pi compatibility](https://github.com/heggria/taskflow/blob/main/docs/pi-compatibility.md) for the tested SDK matrix and the distinction between real-process fixtures and live-provider acceptance.
 
 ## Declare an effect
 
@@ -191,7 +200,7 @@ Host support is not a blanket security guarantee. Read the [host support baselin
 - Writes to undeclared paths remain host-policy dependent under resolve-only execution.
 - `SecretRef` and `ServiceRef` are typed handles only; no vault or live service adapter ships in this cut.
 - There is no FileBroker or full OS sandbox claim in 0.3 MVP.
-- Control Plane stores, approvals, receipts, and WebUI are future 0.3-C stages, not proof that 0.3 is released or GA.
+- Control Plane admission, authorized replay, durable approvals, Receipts, global coordination and WebUI are implemented. Public `taskflow-mcp-core` provides the control binaries; operator actions require an explicitly provisioned separate credential. Request audit fields never grant authority.
 
 ## Development
 
@@ -210,13 +219,13 @@ The monorepo contains the host-neutral `taskflow-core`, Trusted Effects and reso
 
 | Start here | Use it for |
 |---|---|
-| [0.3 overview](https://heggria.github.io/taskflow/en/docs) | Candidate scope, status, and the honest security boundary |
+| [1.0 overview](https://heggria.github.io/taskflow/en/docs) | 1.0 scope, support, and the security boundary |
 | [Getting Started](https://heggria.github.io/taskflow/en/docs/getting-started) | First flow and host setup |
 | [Core Concepts](https://heggria.github.io/taskflow/en/docs/concepts/) | DAGs, isolation, verification, resume, and evidence |
 | [Compiler & Runtime](https://heggria.github.io/taskflow/en/docs/compiler-runtime/) | JSON, TypeScript DSL, FlowIR, replay, and recompute |
 | [Host Guides](https://heggria.github.io/taskflow/en/docs/guides/) | Pi, Codex, Claude Code, OpenCode, Grok, and Hermes |
 | [Examples](https://github.com/heggria/taskflow/blob/main/examples) | Runnable flow definitions, including Trusted Effects |
-| [Changelog](https://github.com/heggria/taskflow/blob/main/CHANGELOG.md) | Release history and candidate notes |
+| [Changelog](https://github.com/heggria/taskflow/blob/main/CHANGELOG.md) | Release history and version notes |
 
 ## License
 
@@ -226,6 +235,6 @@ The monorepo contains the host-neutral `taskflow-core`, Trusted Effects and reso
 
 **Declare the effect. Verify the path. Commit through one authority.**
 
-[Read the docs](https://heggria.github.io/taskflow/en/docs) · [Try the candidate](#quickstart) · [View releases](https://github.com/heggria/taskflow/releases)
+[Read the docs](https://heggria.github.io/taskflow/en/docs) · [Install Taskflow 1.0](#quickstart) · [View releases](https://github.com/heggria/taskflow/releases)
 
 </div>

package/dist/control/admission-service.d.ts

@@ -0,0 +1,15 @@
+import type { ConcurrencyReservation } from "./schema/coordinator.ts";
+import type { ControlStore } from "./store/store.ts";
+import type { CoordinatorAdmissionDecision, CoordinatorAdmissionObservation, CoordinatorAdmissionProof } from "./store/coordinator-store.ts";
+export declare class ProjectAdmissionService {
+    #private;
+    constructor(store: ControlStore);
+    readAdmission(reservation: ConcurrencyReservation): CoordinatorAdmissionObservation;
+    abandonAdmissionIfAbsent(reservation: ConcurrencyReservation): CoordinatorAdmissionDecision;
+    admit(reservation: ConcurrencyReservation, expectedRunVersion: number): CoordinatorAdmissionProof;
+    /** Called by the host at its dispatch boundary after live authorization and
+     * a current coordinator read. This is a binding check, not a replacement for
+     * the host's epoch/provider dispatch fence. No await occurs in this check. */
+    assertDispatch(reservation: ConcurrencyReservation): CoordinatorAdmissionProof;
+}
+//# sourceMappingURL=admission-service.d.ts.map

package/dist/control/admission-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission-service.d.ts","sourceRoot":"","sources":["../../../taskflow-control/src/admission-service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAuC,MAAM,kBAAkB,CAAC;AAC1F,OAAO,KAAK,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAE7I,qBAAa,uBAAuB;;IAEnC,YAAY,KAAK,EAAE,YAAY,EAA0B;IAEzD,aAAa,CAAC,WAAW,EAAE,sBAAsB,GAAG,+BAA+B,CAIlF;IAED,wBAAwB,CAAC,WAAW,EAAE,sBAAsB,GAAG,4BAA4B,CAG1F;IAED,KAAK,CAAC,WAAW,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,GAAG,yBAAyB,CAMhG;IAED;;kFAE8E;IAC9E,cAAc,CAAC,WAAW,EAAE,sBAAsB,GAAG,yBAAyB,CAY7E;CAQD"}

package/dist/control/admission-service.js

@@ -0,0 +1,64 @@
+/** Project-side admission arbitration. ADMIT and ABANDON are decisions in the
+ * actual ControlStore journal, serialized by its writer fence. No side files or
+ * observer callbacks carry admission authority. */
+import { ControlError } from "./errors.js";
+export class ProjectAdmissionService {
+    #store;
+    constructor(store) { this.#store = store; }
+    readAdmission(reservation) {
+        this.#binding(reservation);
+        const decision = this.#store.readAdmission(binding(reservation));
+        return decision ? proof(decision) : null;
+    }
+    abandonAdmissionIfAbsent(reservation) {
+        this.#binding(reservation);
+        return proof(this.#store.abandonAdmissionIfAbsent(binding(reservation)));
+    }
+    admit(reservation, expectedRunVersion) {
+        this.#binding(reservation);
+        if (reservation.state !== "reserved")
+            conflict("admission requires a reserved coordinator binding");
+        const decision = this.#store.admitRun(binding(reservation), expectedRunVersion);
+        if (decision.status !== "admitted")
+            conflict("reservation was durably abandoned; a fresh reservation is required");
+        return proof(decision);
+    }
+    /** Called by the host at its dispatch boundary after live authorization and
+     * a current coordinator read. This is a binding check, not a replacement for
+     * the host's epoch/provider dispatch fence. No await occurs in this check. */
+    assertDispatch(reservation) {
+        this.#binding(reservation);
+        if (reservation.state !== "committed")
+            conflict("dispatch requires a committed coordinator reservation");
+        const decision = this.#store.readAdmission(binding(reservation));
+        if (!decision || decision.status !== "admitted" || decision.decisionCommitSeq !== reservation.projectAdmitCommitSeq) {
+            conflict("dispatch requires the exact durable project admission");
+        }
+        const run = this.#store.readRun(reservation.runId);
+        if (!run || run.status !== "running" || !["admitted", "executing"].includes(run.stage)
+            || run.requiresReadmission || run.reservationId !== reservation.reservationId
+            || run.projectAdmitCommitSeq !== decision.decisionCommitSeq)
+            conflict("run no longer authorizes this dispatch");
+        return proof(decision);
+    }
+    #binding(reservation) {
+        const header = this.#store.header;
+        if (reservation.projectId !== header.projectId || reservation.projectControlDomainId !== header.controlDomainId) {
+            conflict("admission reservation belongs to another project or control domain");
+        }
+    }
+}
+function proof(decision) {
+    const binding = { reservationId: decision.reservationId, projectId: decision.projectId,
+        projectControlDomainId: decision.projectControlDomainId, runId: decision.runId, runVersion: decision.runVersion };
+    return decision.status === "admitted" ? { ...binding, projectAdmitCommitSeq: decision.decisionCommitSeq }
+        : { ...binding, status: "abandoned", abandonmentCommitSeq: decision.decisionCommitSeq };
+}
+function conflict(message) {
+    throw new ControlError("TF_ADMISSION_BINDING_CONFLICT", message, { recoveryAction: "operator", sideEffects: "none" });
+}
+function binding(reservation) {
+    return { reservationId: reservation.reservationId, projectId: reservation.projectId,
+        projectControlDomainId: reservation.projectControlDomainId, runId: reservation.runId };
+}
+//# sourceMappingURL=admission-service.js.map

package/dist/control/admission-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission-service.js","sourceRoot":"","sources":["../../../taskflow-control/src/admission-service.ts"],"names":[],"mappings":"AAAA;;mDAEmD;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3C,MAAM,OAAO,uBAAuB;IAC1B,MAAM,CAAe;IAC9B,YAAY,KAAmB,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;IAEzD,aAAa,CAAC,WAAmC;QAChD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACjE,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,wBAAwB,CAAC,WAAmC;QAC3D,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,WAAmC,EAAE,kBAA0B;QACpE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU;YAAE,QAAQ,CAAC,mDAAmD,CAAC,CAAC;QACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAChF,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;YAAE,QAAQ,CAAC,oEAAoE,CAAC,CAAC;QACnH,OAAO,KAAK,CAAC,QAAQ,CAA8B,CAAC;IACrD,CAAC;IAED;;kFAE8E;IAC9E,cAAc,CAAC,WAAmC;QACjD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,WAAW,CAAC,KAAK,KAAK,WAAW;YAAE,QAAQ,CAAC,uDAAuD,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,iBAAiB,KAAK,WAAW,CAAC,qBAAqB,EAAE,CAAC;YACrH,QAAQ,CAAC,uDAAuD,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;eAClF,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,CAAC,aAAa;eAC1E,GAAG,CAAC,qBAAqB,KAAK,QAAQ,CAAC,iBAAiB;YAAE,QAAQ,CAAC,wCAAwC,CAAC,CAAC;QACjH,OAAO,KAAK,CAAC,QAAQ,CAA8B,CAAC;IACrD,CAAC;IAED,QAAQ,CAAC,WAAmC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,IAAI,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC,sBAAsB,KAAK,MAAM,CAAC,eAAe,EAAE,CAAC;YACjH,QAAQ,CAAC,oEAAoE,CAAC,CAAC;QAChF,CAAC;IACF,CAAC;CACD;AACD,SAAS,KAAK,CAAC,QAA2B;IACzC,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;QACrF,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;IACnH,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,qBAAqB,EAAE,QAAQ,CAAC,iBAAiB,EAAE;QACxG,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,CAAC;AAC1F,CAAC;AACD,SAAS,QAAQ,CAAC,OAAe;IAChC,MAAM,IAAI,YAAY,CAAC,+BAA+B,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;AACvH,CAAC;AAED,SAAS,OAAO,CAAC,WAAmC;IACnD,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS;QAClF,sBAAsB,EAAE,WAAW,CAAC,sBAAsB,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;AACzF,CAAC"}

package/dist/control/approval-edits.d.ts

@@ -0,0 +1,12 @@
+/** Bounded approval edits: typed UTF-8 output, or replacement of unstarted
+ * downstream phase bodies in the already admitted graph. */
+import { type RunState, type Taskflow } from "taskflow-core";
+import type { ArtifactRef } from "./schema/evidence.ts";
+export declare const MAX_APPROVAL_EDIT_BYTES: number;
+export declare function decodeApprovalEdit(bytes: Uint8Array, artifact: ArtifactRef, kind: "output" | "plan"): string;
+export declare function validateApprovalOutputEdit(state: RunState, phaseId: string, text: string): string;
+export declare function validateApprovalPlanEdit(state: RunState, phaseId: string, candidate: unknown): Promise<{
+    flow: Taskflow;
+    irHash: string;
+}>;
+//# sourceMappingURL=approval-edits.d.ts.map

package/dist/control/approval-edits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-edits.d.ts","sourceRoot":"","sources":["../../../taskflow-control/src/approval-edits.ts"],"names":[],"mappings":"AAAA;4DAC4D;AAC5D,OAAO,EAA8F,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAIzJ,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,eAAO,MAAM,uBAAuB,QAAc,CAAC;AAGnD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAO5G;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAUjG;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBhJ"}

package/dist/control/approval-edits.js

@@ -0,0 +1,66 @@
+/** Bounded approval edits: typed UTF-8 output, or replacement of unstarted
+ * downstream phase bodies in the already admitted graph. */
+import { compileTaskflowToIR, isQuiescentApprovalCheckpoint, transitiveDownstream, validateTaskflow } from "taskflow-core";
+import { contractViolations } from "taskflow-core/contract";
+import { ControlError } from "./errors.js";
+import { commandRequestHash } from "./schema/commands.js";
+export const MAX_APPROVAL_EDIT_BYTES = 1024 * 1024;
+function invalid(message) { throw new ControlError("TF_COMMAND_FAILED", message); }
+export function decodeApprovalEdit(bytes, artifact, kind) {
+    if (bytes.byteLength > MAX_APPROVAL_EDIT_BYTES || artifact.storageClass !== "project" || artifact.redactionClass !== "internal")
+        invalid("approval edit requires a project/internal artifact of at most 1 MiB");
+    if (kind === "output" ? !/^text\/plain(?:;\s*charset=utf-8)?$/i.test(artifact.mediaType) : !/^application\/json(?:;\s*charset=utf-8)?$/i.test(artifact.mediaType))
+        invalid("approval edit artifact media type does not match its edit kind");
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch {
+        return invalid("approval edit must be valid UTF-8");
+    }
+    if (text.includes("\0"))
+        invalid("approval edit must not contain NUL");
+    return text;
+}
+export function validateApprovalOutputEdit(state, phaseId, text) {
+    const phase = state.def.phases.find(item => item.id === phaseId);
+    if (phase?.type !== "approval")
+        invalid("output edit target is not an approval phase");
+    const output = text.trim();
+    if (!output)
+        invalid("approval output edit must not be empty");
+    // Core approval outputs are text (edit.note), so validate that exact value
+    // against its OutputContract before admitting any downstream work.
+    const violations = contractViolations(output, phase.expect ?? { type: "string" });
+    if (violations.length)
+        invalid(`approval output contract failed: ${violations.join("; ")}`);
+    return output;
+}
+export async function validateApprovalPlanEdit(state, phaseId, candidate) {
+    const check = validateTaskflow(candidate);
+    if (!check.ok)
+        invalid(`approval plan is invalid: ${check.errors.join("; ")}`);
+    if (!state.foregroundOwner?.approvalWait?.includes(phaseId) || !isQuiescentApprovalCheckpoint(state, state.foregroundOwner.approvalWait))
+        throw new ControlError("TF_RECONCILE_REQUIRED", "plan edit requires its quiescent approval checkpoint");
+    const flow = structuredClone(candidate);
+    const { phases: originalPhases, ...originalTop } = state.def, { phases: nextPhases, ...nextTop } = flow;
+    if (commandRequestHash(originalTop) !== commandRequestHash(nextTop))
+        invalid("plan edit cannot change top-level settings or resource declarations");
+    if (commandRequestHash(originalPhases.map(phase => phase.id)) !== commandRequestHash(nextPhases.map(phase => phase.id)))
+        invalid("plan edit cannot add, remove, or reorder phases");
+    const downstream = new Set(transitiveDownstream(originalPhases, phaseId));
+    for (let i = 0; i < originalPhases.length; i++) {
+        const previous = originalPhases[i], next = nextPhases[i];
+        if (commandRequestHash(previous) === commandRequestHash(next))
+            continue;
+        if (!downstream.has(previous.id) || state.phases[previous.id] !== undefined)
+            invalid("plan edit cannot rewrite completed, active, or non-downstream phases");
+        if (commandRequestHash([previous.dependsOn, previous.from, previous.join]) !== commandRequestHash([next.dependsOn, next.from, next.join]))
+            invalid("plan edit cannot change phase dependencies or joins");
+    }
+    const compiled = await compileTaskflowToIR(flow);
+    if (!compiled.hash || compiled.usedFallbackHash || compiled.errors.length)
+        invalid("edited plan cannot be linked to a content-addressed IR");
+    return { flow, irHash: compiled.hash };
+}
+//# sourceMappingURL=approval-edits.js.map

package/dist/control/approval-edits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-edits.js","sourceRoot":"","sources":["../../../taskflow-control/src/approval-edits.ts"],"names":[],"mappings":"AAAA;4DAC4D;AAC5D,OAAO,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,gBAAgB,EAAgC,MAAM,eAAe,CAAC;AACzJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,SAAS,OAAO,CAAC,OAAe,IAAW,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAElG,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,QAAqB,EAAE,IAAuB;IACnG,IAAI,KAAK,CAAC,UAAU,GAAG,uBAAuB,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,UAAU;QAAE,OAAO,CAAC,qEAAqE,CAAC,CAAC;IAChN,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,4CAA4C,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,gEAAgE,CAAC,CAAC;IAC7O,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAAC,CAAC;IACtI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAe,EAAE,OAAe,EAAE,IAAY;IACxF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACjE,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAC/D,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClF,IAAI,UAAU,CAAC,MAAM;QAAE,OAAO,CAAC,oCAAoC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAe,EAAE,OAAe,EAAE,SAAkB;IAClG,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,6BAA6B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,sDAAsD,CAAC,CAAC;IAClP,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAa,CAAC;IACpD,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;IACxG,IAAI,kBAAkB,CAAC,WAAW,CAAC,KAAK,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,qEAAqE,CAAC,CAAC;IACpJ,IAAI,kBAAkB,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,kBAAkB,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACpL,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAE,EAAE,IAAI,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC3D,IAAI,kBAAkB,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC;YAAE,SAAS;QACxE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,sEAAsE,CAAC,CAAC;QAC7J,IAAI,kBAAkB,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,qDAAqD,CAAC,CAAC;IAC3M,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,wDAAwD,CAAC,CAAC;IAC7I,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC"}

package/dist/control/approval-service.d.ts

@@ -0,0 +1,173 @@
+import { type CommandRecord, type ControlEventPayload } from "./schema/commands.ts";
+import { type ApprovalRequest, type ApprovalMode, type ApprovalDecision } from "./schema/approval.ts";
+import { type ArtifactRef } from "./schema/evidence.ts";
+import { type BoundFragment } from "./schema/plan.ts";
+import type { RunSnapshot } from "./schema/run.ts";
+import type { ExecutionOwner } from "./schema/te-mirrors.ts";
+import type { ConcurrencyReservation } from "./schema/coordinator.ts";
+export type ApprovalRun = RunSnapshot & {
+    runVersion: number;
+    boundPlanHash: string;
+    boundFragmentHash?: string;
+    policyHash: string;
+    authorityEpoch: number;
+    reservationId?: string;
+    owner?: ExecutionOwner;
+};
+export type DurableApprovalRequest = ApprovalRequest;
+export interface ApprovalQuiescence {
+    proofId: string;
+    projectId: string;
+    projectControlDomainId: string;
+    runId: string;
+    projectAdmitCommitSeq: number;
+    providerNoLiveProcessTree: boolean;
+    noAmbiguousJobs: boolean;
+    noPendingResourceIntents: boolean;
+    reconcileTimeoutOnly: boolean;
+}
+export type ApprovalReleaseIntent = {
+    kind: "approval.release";
+    intentId: string;
+    approvalRequestId: string;
+    runId: string;
+    reservationId: string;
+    evidence: ApprovalQuiescence;
+    complete: boolean;
+};
+export type ApprovalReadmissionIntent = {
+    kind: "approval.readmission";
+    intentId: string;
+    approvalRequestId: string;
+    runId: string;
+    reservation: ConcurrencyReservation;
+    owner: ExecutionOwner;
+    fragment: BoundFragment;
+    policyHash: string;
+    authorizationContextHash: string;
+    projectAdmitCommitSeq: number;
+    complete: boolean;
+};
+export type ApprovalOutbox = ApprovalReleaseIntent | ApprovalReadmissionIntent;
+export type ApprovalJournalEvent = {
+    eventId: string;
+    recordedAt: number;
+    payload: ControlEventPayload;
+};
+export interface ApprovalJournalState {
+    run: ApprovalRun;
+    approvals: DurableApprovalRequest[];
+    outbox: ApprovalOutbox[];
+}
+export interface ApprovalMutation extends ApprovalJournalState {
+    command?: CommandRecord;
+    responseJson?: string;
+    events: ApprovalJournalEvent[];
+}
+export interface ApprovalCommit extends ApprovalJournalState {
+    commitSeq: number;
+    responseJson?: string;
+}
+export type CommandBinding = Pick<CommandRecord, "commandId" | "kind" | "requestHash" | "callerPrincipal" | "projectId" | "controlDomainId">;
+export interface ApprovalStorage {
+    readCommittedCommand?(binding: CommandBinding): {
+        record: CommandRecord;
+        responseJson: string;
+    } | undefined;
+    readRun(runId: string): ApprovalRun | undefined;
+    readApproval(approvalRequestId: string): DurableApprovalRequest | undefined;
+    listApprovals(): DurableApprovalRequest[];
+    readOutbox(runId: string): ApprovalOutbox[];
+    /** Synchronous, writer-locked CAS; journal fsync precedes observable state.
+     * The adapter checks runVersion and commits the complete batch atomically. */
+    mutateRun(runId: string, expectedRunVersion: number, build: (state: ApprovalJournalState, meta: {
+        commitSeq: number;
+    }) => ApprovalMutation, binding?: CommandBinding): ApprovalCommit;
+}
+export type ApprovalOperation = "request" | "read" | "decide" | "cancel" | "expire" | "park" | "readmit";
+export type ApprovalAuthorization = {
+    callerPrincipal: string;
+    authorizationContextHash: string;
+};
+export interface ApprovalAuthority<C> {
+    /** Context is issued by the host's trusted identity authority; wire identity
+     * labels are never an input to authorization. Must evaluate current policy. */
+    authorize(context: C, scope: {
+        operation: ApprovalOperation;
+        run: ApprovalRun;
+        request?: DurableApprovalRequest;
+    }): Promise<ApprovalAuthorization>;
+    validateRequest(context: C, run: ApprovalRun, nodeInstanceId: string): Promise<void>;
+    /** Evaluate actual host offers and this authenticated caller's handshake. */
+    negotiateDurability(context: C, run: ApprovalRun, mode: ApprovalMode): Promise<boolean>;
+    quiescence(context: C, run: ApprovalRun): Promise<ApprovalQuiescence>;
+    validateEdit(context: C, run: ApprovalRun, request: DurableApprovalRequest, edit: {
+        kind: "output" | "plan";
+        artifact: ArtifactRef;
+    }): Promise<void>;
+    /** Output edits are contract-checked; plan edits must re-Link. Both obtain
+     * current policy/capabilities and a new attenuated BoundFragment. */
+    prepareReadmission(context: C, run: ApprovalRun, request: DurableApprovalRequest): Promise<{
+        fragment: BoundFragment;
+        owner: ExecutionOwner;
+        policyHash: string;
+        authorizationContextHash: string;
+    }>;
+    validateReadmission(context: C, run: ApprovalRun, intent: ApprovalReadmissionIntent): Promise<void>;
+    reserve(context: C, run: ApprovalRun, owner: ExecutionOwner): Promise<ConcurrencyReservation>;
+    commitReservation(context: C, intent: ApprovalReadmissionIntent): Promise<void>;
+    normalRelease(context: C, intent: ApprovalReleaseIntent): Promise<void>;
+}
+export interface ApprovalRequestInput {
+    runId: string;
+    expectedRunVersion: number;
+    nodeInstanceId: string;
+    mode: ApprovalMode;
+    allowedDecisions: ApprovalDecision[];
+    owner: string;
+    audience?: string[];
+    requiredPrincipals?: string[];
+    deadline: number;
+    timeoutPolicy: ApprovalRequest["timeoutPolicy"];
+}
+export interface ApprovalDecisionInput {
+    commandId: string;
+    runId: string;
+    approvalRequestId: string;
+    expectedRunVersion: number;
+    decision: ApprovalDecision;
+    editArtifactRef?: ArtifactRef;
+    editKind?: "output" | "plan";
+}
+export declare class ApprovalService<C = unknown> {
+    #private;
+    readonly storage: ApprovalStorage;
+    readonly authority: ApprovalAuthority<C>;
+    constructor(storage: ApprovalStorage, authority: ApprovalAuthority<C>);
+    read(context: C, approvalRequestId: string): Promise<DurableApprovalRequest>;
+    request(context: C, input: ApprovalRequestInput): Promise<DurableApprovalRequest>;
+    decide(context: C, input: ApprovalDecisionInput): Promise<DurableApprovalRequest>;
+    expireDue(context: C): Promise<number>;
+    cancel(context: C, input: {
+        commandId: string;
+        runId: string;
+        expectedRunVersion: number;
+    }): Promise<ApprovalRun>;
+    /** Re-prove quiescence after a non-quiescent pause; never infer it from status. */
+    park(context: C, input: {
+        runId: string;
+        expectedRunVersion: number;
+    }): Promise<ApprovalRun>;
+    /** Terminal status may precede process/TE settlement. Once settlement is
+     * proven, discharge capacity without reopening or changing terminal history. */
+    releaseTerminal(context: C, input: {
+        runId: string;
+        expectedRunVersion: number;
+    }): Promise<ApprovalRun>;
+    drainReleases(context: C, runId?: string): Promise<void>;
+    readmit(context: C, input: {
+        approvalRequestId: string;
+        expectedRunVersion: number;
+    }): Promise<ApprovalRun>;
+}
+//# sourceMappingURL=approval-service.d.ts.map

package/dist/control/approval-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-service.d.ts","sourceRoot":"","sources":["../../../taskflow-control/src/approval-service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAyB,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAKtE,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG;IACvC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACtE,UAAU,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,cAAc,CAAC;CAC3F,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,eAAe,CAAC;AACrD,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAClF,qBAAqB,EAAE,MAAM,CAAC;IAAC,yBAAyB,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,OAAO,CAAC;IAC5F,wBAAwB,EAAE,OAAO,CAAC;IAAC,oBAAoB,EAAE,OAAO,CAAC;CACjE;AACD,MAAM,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IACrF,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;CACvE,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IACzF,WAAW,EAAE,sBAAsB,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC;IACpF,UAAU,EAAE,MAAM,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;CACvG,CAAC;AACF,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAAG,yBAAyB,CAAC;AAC/E,MAAM,MAAM,oBAAoB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAC;AACzG,MAAM,WAAW,oBAAoB;IAAG,GAAG,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,sBAAsB,EAAE,CAAC;IAAC,MAAM,EAAE,cAAc,EAAE,CAAA;CAAE;AACzH,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAAG,OAAO,CAAC,EAAE,aAAa,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,EAAE,CAAA;CAAE;AACjJ,MAAM,WAAW,cAAe,SAAQ,oBAAoB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;AACzG,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,GAAG,MAAM,GAAG,aAAa,GAAG,iBAAiB,GAAG,WAAW,GAAG,iBAAiB,CAAC,CAAC;AAC7I,MAAM,WAAW,eAAe;IAC/B,oBAAoB,CAAC,CAAC,OAAO,EAAE,cAAc,GAAG;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC;IAC1G,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IAChD,YAAY,CAAC,iBAAiB,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAAC;IAC5E,aAAa,IAAI,sBAAsB,EAAE,CAAC;IAC1C,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;IAC5C;kFAC8E;IAC9E,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAClD,KAAK,EAAE,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,gBAAgB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC;CAClI;AACD,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AACzG,MAAM,MAAM,qBAAqB,GAAG;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,CAAC;AAClG,MAAM,WAAW,iBAAiB,CAAC,CAAC;IACnC;mFAC+E;IAC/E,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE;QAAE,SAAS,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,WAAW,CAAC;QAAC,OAAO,CAAC,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnJ,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,6EAA6E;IAC7E,mBAAmB,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxF,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtE,YAAY,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;QAAC,QAAQ,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrJ;yEACqE;IACrE,kBAAkB,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAC1F,QAAQ,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,wBAAwB,EAAE,MAAM,CAAC;KACrG,CAAC,CAAC;IACH,mBAAmB,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpG,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9F,iBAAiB,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,aAAa,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AACD,MAAM,WAAW,oBAAoB;IACpC,KAAK,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IACtF,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IACxG,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;CAClE;AACD,MAAM,WAAW,qBAAqB;IACrC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IACxF,QAAQ,EAAE,gBAAgB,CAAC;IAAC,eAAe,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CACxF;AAsBD,qBAAa,eAAe,CAAC,CAAC,GAAG,OAAO;;IACvC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACzC,YAAY,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAKpE;IA6BK,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAIjF;IACK,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkCtF;IACK,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAwCtF;IAIK,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAe3C;IACK,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAyBtH;IACD,mFAAmF;IAC7E,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAcjG;IACD;oFACgF;IAC1E,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAa5G;IACK,aAAa,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB7D;IACK,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CA4BhH;CAuBD"}