@agentproto/workflow 0.1.0-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 agentproto contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,23 @@
+# @agentproto/workflow
+
+AIP-15 `WORKFLOW.md` reference implementation. A markdown + frontmatter format for declaring a multi-step agent workflow's abstract orchestration shape — its steps, branching, parallelism, approval gates, suspend/resume, and compensation. Pairs with the standard `defineWorkflow` / `defineStep` signatures. Implementation lives entirely in the per-step TOOL.md contracts and their AIP-30 DRIVER bindings; workflows themselves are pure orchestration data.
+
+> **Status: 0.1.0-alpha.** Generated by `scripts/scaffold-aip.mjs` — `build()` and `validate()` bodies are TODOs.
+
+Spec: <https://agentproto.sh/docs/aip-15>
+
+## Usage
+
+```ts
+import { defineWorkflow } from "@agentproto/workflow"
+
+const x = defineWorkflow({
+  id: "my-workflow",
+  description: "Short purpose.",
+  // ...
+})
+```
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/chunk-LS5EPMQB.mjs

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+import { createDoctype } from '@agentproto/define-doctype';
+
+/**
+ * @agentproto/workflow v0.1.0-alpha
+ * AIP-15 WORKFLOW.md `defineWorkflow` reference implementation.
+ */
+
+var workflowFrontmatterSchema = z.object({ "name": z.string().min(1).max(80), "id": z.string().regex(new RegExp("^[a-z][a-z0-9-]*[a-z0-9]$")).min(2).max(64), "description": z.string().min(1).max(2e3), "version": z.string().regex(new RegExp("^\\d+\\.\\d+\\.\\d+(?:[-+][a-zA-Z0-9.-]+)?$")), "entry": z.string().optional(), "inputs": z.any().describe("Defined by AIP-16 \u2014 the IO `inputs` block."), "outputs": z.any().describe("Defined by AIP-16 \u2014 the IO `outputs` block."), "result": z.union([z.record(z.string(), z.any()).describe("Optional value expression mapping step results to the workflow output, using the same reference grammar as a step's `inputs` ($input.*, $steps.<id>.*, literals). Omitted \u21D2 the output is the final step's result. Its shape SHOULD satisfy `outputs`."), z.string().describe("Optional value expression mapping step results to the workflow output, using the same reference grammar as a step's `inputs` ($input.*, $steps.<id>.*, literals). Omitted \u21D2 the output is the final step's result. Its shape SHOULD satisfy `outputs`.")]).describe("Optional value expression mapping step results to the workflow output, using the same reference grammar as a step's `inputs` ($input.*, $steps.<id>.*, literals). Omitted \u21D2 the output is the final step's result. Its shape SHOULD satisfy `outputs`.").optional(), "steps": z.array(z.any()).min(1), "start": z.string().optional(), "suspendable": z.boolean().optional(), "triggers": z.array(z.any()).default([]), "requires": z.object({ "network": z.array(z.string()).optional(), "fs.read": z.array(z.string()).optional(), "fs.write": z.array(z.string()).optional(), "env": z.array(z.string()).optional(), "secrets": z.array(z.string()).optional(), "tools": z.array(z.string()).optional() }).strict().optional(), "approval": z.any().default("per-step"), "risk_level": z.number().int().gte(0).lte(3).optional(), "timeout_ms": z.number().int().gte(1).default(6e5), "max_steps": z.number().int().gte(1).default(100), "retry": z.any().optional(), "cost_class": z.enum(["trivial", "metered", "expensive"]).default("metered"), "tags": z.array(z.string().regex(new RegExp("^[a-z][a-z0-9-]*$"))).default([]), "metadata": z.record(z.string(), z.any()).default({}), "inputsFiles": z.any().describe("Defined by AIP-16 \u2014 the IO `inputsFiles` block.").optional(), "outputsFiles": z.any().describe("Defined by AIP-16 \u2014 the IO `outputsFiles` block.").optional(), "runtime": z.any().describe("Defined by AIP-17 \u2014 the runner block.").optional() }).strict().describe("Validates the YAML frontmatter portion of an AIP-15 WORKFLOW.md manifest.");
+var defineWorkflow = createDoctype({
+  aip: 15,
+  name: "workflow",
+  validate(def) {
+    const result = workflowFrontmatterSchema.safeParse(def);
+    if (!result.success) {
+      throw new Error(
+        `defineWorkflow (AIP-15): ${result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")}`
+      );
+    }
+  },
+  build(def) {
+    return { ...def };
+  }
+});
+
+export { defineWorkflow, workflowFrontmatterSchema };
+//# sourceMappingURL=chunk-LS5EPMQB.mjs.map
+//# sourceMappingURL=chunk-LS5EPMQB.mjs.map

package/dist/chunk-LS5EPMQB.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schema.ts","../src/define-workflow.ts"],"names":[],"mappings":";;;;;;;;AAeO,IAAM,4BAA4B,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAQ,EAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,EAAE,GAAA,CAAI,EAAE,CAAA,EAAG,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,KAAA,CAAM,IAAI,OAAO,2BAA2B,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,EAAG,eAAe,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAI,CAAA,EAAG,WAAW,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,CAAM,IAAI,MAAA,CAAO,6CAA6C,CAAC,CAAA,EAAG,SAAS,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,IAAY,QAAA,EAAU,CAAA,CAAE,GAAA,EAAI,CAAE,SAAS,iDAA4C,CAAA,EAAG,SAAA,EAAW,CAAA,CAAE,KAAI,CAAE,QAAA,CAAS,kDAA6C,CAAA,EAAG,UAAU,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAO,EAAG,CAAA,CAAE,GAAA,EAAK,CAAA,CAAE,QAAA,CAAS,6PAAwP,CAAA,EAAG,EAAE,MAAA,EAAO,CAAE,QAAA,CAAS,6PAAwP,CAAC,CAAC,CAAA,CAAE,QAAA,CAAS,6PAAwP,EAAE,QAAA,EAAS,EAAG,OAAA,EAAS,CAAA,CAAE,MAAM,CAAA,CAAE,GAAA,EAAK,CAAA,CAAE,IAAI,CAAC,CAAA,EAAG,OAAA,EAAS,CAAA,CAAE,QAAO,CAAE,QAAA,IAAY,aAAA,EAAe,CAAA,CAAE,SAAQ,CAAE,QAAA,EAAS,EAAG,UAAA,EAAY,EAAE,KAAA,CAAM,CAAA,CAAE,GAAA,EAAK,EAAE,OAAA,CAAQ,EAAW,CAAA,EAAG,YAAY,CAAA,CAAE,MAAA,CAAO,EAAE,SAAA,EAAW,EAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,EAAE,QAAA,EAAS,EAAG,SAAA,EAAW,CAAA,CAAE,MAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,UAAS,EAAG,UAAA,EAAY,EAAE,KAAA,CAAM,CAAA,CAAE,QAAQ,CAAA,CAAE,QAAA,EAAS,EAAG,OAAO,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS,EAAG,SAAA,EAAW,EAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,EAAE,QAAA,EAAS,EAAG,OAAA,EAAS,CAAA,CAAE,MAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,UAAS,EAAG,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,EAAG,UAAA,EAAY,CAAA,CAAE,KAAI,CAAE,OAAA,CAAQ,UAAU,CAAA,EAAG,cAAc,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS,EAAG,YAAA,EAAc,EAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,IAAI,CAAC,CAAA,CAAE,OAAA,CAAQ,GAAM,GAAG,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,KAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA,EAAG,OAAA,EAAS,CAAA,CAAE,GAAA,GAAM,QAAA,EAAS,EAAG,YAAA,EAAc,CAAA,CAAE,KAAK,CAAC,SAAA,EAAU,SAAA,EAAU,WAAW,CAAC,CAAA,CAAE,OAAA,CAAQ,SAAS,CAAA,EAAG,QAAQ,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,IAAI,MAAA,CAAO,mBAAmB,CAAC,CAAC,CAAA,CAAE,OAAA,CAAQ,EAAW,CAAA,EAAG,UAAA,EAAY,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,CAAA,CAAE,GAAA,EAAK,EAAE,OAAA,CAAQ,EAAW,CAAA,EAAG,eAAe,CAAA,CAAE,GAAA,EAAI,CAAE,QAAA,CAAS,sDAAiD,CAAA,CAAE,QAAA,EAAS,EAAG,cAAA,EAAgB,EAAE,GAAA,EAAI,CAAE,QAAA,CAAS,uDAAkD,EAAE,QAAA,EAAS,EAAG,SAAA,EAAW,CAAA,CAAE,KAAI,CAAE,QAAA,CAAS,4CAAuC,CAAA,CAAE,UAAS,EAAG,EAAE,MAAA,EAAO,CAAE,SAAS,2EAA2E;ACEnjF,IAAM,iBAAiB,aAAA,CAAkD;AAAA,EAC9E,GAAA,EAAK,EAAA;AAAA,EACL,IAAA,EAAM,UAAA;AAAA,EACN,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAA,GAAS,yBAAA,CAA0B,SAAA,CAAU,GAAG,CAAA;AACtD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,yBAAA,EAA4B,OAAO,KAAA,CAAM,MAAA,CACtC,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA,CAC9C,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACf;AAAA,IACF;AAAA,EAIF,CAAA;AAAA,EACA,MAAM,GAAA,EAAK;AAKT,IAAA,OAAO,EAAE,GAAG,GAAA,EAAI;AAAA,EAClB;AACF,CAAC","file":"chunk-LS5EPMQB.mjs","sourcesContent":["/**\n * AIP-15 WORKFLOW.md frontmatter zod schema.\n *\n * Generated from `resources/aip-15/draft/WORKFLOW.schema.json` via\n * json-schema-to-zod. Imported by both `define-workflow.ts` (TS path\n * validation) and `manifest/index.ts` (.md path validation) so every\n * field-level constraint runs in both authoring paths from a single\n * source of truth — re-run scaffold-aip to refresh after spec changes.\n *\n * Cross-field rules (if/then/allOf in JSON Schema) don't translate\n * cleanly and live in `define-workflow.ts`'s `validate(def)` instead.\n */\n\nimport { z } from \"zod\"\n\nexport const workflowFrontmatterSchema = z.object({ \"name\": z.string().min(1).max(80), \"id\": z.string().regex(new RegExp(\"^[a-z][a-z0-9-]*[a-z0-9]$\")).min(2).max(64), \"description\": z.string().min(1).max(2000), \"version\": z.string().regex(new RegExp(\"^\\\\d+\\\\.\\\\d+\\\\.\\\\d+(?:[-+][a-zA-Z0-9.-]+)?$\")), \"entry\": z.string().optional(), \"inputs\": z.any().describe(\"Defined by AIP-16 — the IO `inputs` block.\"), \"outputs\": z.any().describe(\"Defined by AIP-16 — the IO `outputs` block.\"), \"result\": z.union([z.record(z.string(), z.any()).describe(\"Optional value expression mapping step results to the workflow output, using the same reference grammar as a step's `inputs` ($input.*, $steps.<id>.*, literals). Omitted ⇒ the output is the final step's result. Its shape SHOULD satisfy `outputs`.\"), z.string().describe(\"Optional value expression mapping step results to the workflow output, using the same reference grammar as a step's `inputs` ($input.*, $steps.<id>.*, literals). Omitted ⇒ the output is the final step's result. Its shape SHOULD satisfy `outputs`.\")]).describe(\"Optional value expression mapping step results to the workflow output, using the same reference grammar as a step's `inputs` ($input.*, $steps.<id>.*, literals). Omitted ⇒ the output is the final step's result. Its shape SHOULD satisfy `outputs`.\").optional(), \"steps\": z.array(z.any()).min(1), \"start\": z.string().optional(), \"suspendable\": z.boolean().optional(), \"triggers\": z.array(z.any()).default([] as never), \"requires\": z.object({ \"network\": z.array(z.string()).optional(), \"fs.read\": z.array(z.string()).optional(), \"fs.write\": z.array(z.string()).optional(), \"env\": z.array(z.string()).optional(), \"secrets\": z.array(z.string()).optional(), \"tools\": z.array(z.string()).optional() }).strict().optional(), \"approval\": z.any().default(\"per-step\"), \"risk_level\": z.number().int().gte(0).lte(3).optional(), \"timeout_ms\": z.number().int().gte(1).default(600000), \"max_steps\": z.number().int().gte(1).default(100), \"retry\": z.any().optional(), \"cost_class\": z.enum([\"trivial\",\"metered\",\"expensive\"]).default(\"metered\"), \"tags\": z.array(z.string().regex(new RegExp(\"^[a-z][a-z0-9-]*$\"))).default([] as never), \"metadata\": z.record(z.string(), z.any()).default({} as never), \"inputsFiles\": z.any().describe(\"Defined by AIP-16 — the IO `inputsFiles` block.\").optional(), \"outputsFiles\": z.any().describe(\"Defined by AIP-16 — the IO `outputsFiles` block.\").optional(), \"runtime\": z.any().describe(\"Defined by AIP-17 — the runner block.\").optional() }).strict().describe(\"Validates the YAML frontmatter portion of an AIP-15 WORKFLOW.md manifest.\")\n\nexport type WorkflowFrontmatter = z.infer<typeof workflowFrontmatterSchema>\n","import { createDoctype } from \"@agentproto/define-doctype\"\nimport { workflowFrontmatterSchema } from \"./schema.js\"\nimport type { WorkflowDefinition, WorkflowHandle } from \"./types.js\"\n\n/**\n * AIP-15 reference implementation of `defineWorkflow`.\n *\n * Built on `createDoctype` so the cross-AIP invariants (id pattern,\n * description length, top-level freeze, \"defineWorkflow (AIP-15): …\"\n * error prefix) run uniformly with every other AIP defineX.\n *\n * Field-level validation runs the schema-derived zod from\n * `./schema.ts` against the input. Same source of truth as the .md\n * path uses (`parseWorkflowManifest`), so a malformed TS-authored\n * definition fails with the same diagnostic as a malformed manifest.\n * Cross-field rules go in `validate(def)` after the zod check.\n */\nexport const defineWorkflow = createDoctype<WorkflowDefinition, WorkflowHandle>({\n  aip: 15,\n  name: \"workflow\",\n  validate(def) {\n    const result = workflowFrontmatterSchema.safeParse(def)\n    if (!result.success) {\n      throw new Error(\n        `defineWorkflow (AIP-15): ${result.error.issues\n          .map((i) => `${i.path.join(\".\")}: ${i.message}`)\n          .join(\"; \")}`,\n      )\n    }\n    // TODO: spec-15-specific cross-field rules (if/then/allOf in\n    // the JSON Schema) — those don't translate to zod cleanly and\n    // belong here. See @agentproto/operator's autonomy=gated rule.\n  },\n  build(def) {\n    // Default build: spread the validated definition into a fresh object.\n    // Hand-tune for nested freezing (Object.freeze on arrays/objects) and\n    // for fields that need defaults applied — see @agentproto/operator\n    // for a reference shape.\n    return { ...def } as WorkflowHandle\n  },\n})\n"]}

package/dist/index.d.ts

@@ -0,0 +1,33 @@
+import { W as WorkflowDefinition } from './types-DO_05pfH.js';
+export { a as WorkflowHandle } from './types-DO_05pfH.js';
+
+/**
+ * AIP-15 reference implementation of `defineWorkflow`.
+ *
+ * Built on `createDoctype` so the cross-AIP invariants (id pattern,
+ * description length, top-level freeze, "defineWorkflow (AIP-15): …"
+ * error prefix) run uniformly with every other AIP defineX.
+ *
+ * Field-level validation runs the schema-derived zod from
+ * `./schema.ts` against the input. Same source of truth as the .md
+ * path uses (`parseWorkflowManifest`), so a malformed TS-authored
+ * definition fails with the same diagnostic as a malformed manifest.
+ * Cross-field rules go in `validate(def)` after the zod check.
+ */
+declare const defineWorkflow: (def: WorkflowDefinition) => Readonly<WorkflowDefinition>;
+
+/**
+ * @agentproto/workflow — AIP-15 WORKFLOW.md `defineWorkflow` reference impl.
+ *
+ * A markdown + frontmatter format for declaring a multi-step agent workflow's abstract orchestration shape — its steps, branching, parallelism, approval gates, suspend/resume, and compensation. Pairs with the standard `defineWorkflow` / `defineStep` signatures. Implementation lives entirely in the per-step TOOL.md contracts and their AIP-30 DRIVER bindings; workflows themselves are pure orchestration data.
+ *
+ * Spec: https://agentproto.sh/docs/aip-15
+ *
+ * Authoring paths:
+ *   - TS:  `defineWorkflow({...})` → `WorkflowHandle`
+ *   - MD:  `parseWorkflowManifest(src) → workflowFromManifest({...})` → `WorkflowHandle`
+ */
+declare const SPEC_NAME: "agentworkflow/v1";
+declare const SPEC_VERSION: "1.0.0-alpha";
+
+export { SPEC_NAME, SPEC_VERSION, WorkflowDefinition, defineWorkflow };

package/dist/index.mjs

@@ -0,0 +1,14 @@
+export { defineWorkflow } from './chunk-LS5EPMQB.mjs';
+
+/**
+ * @agentproto/workflow v0.1.0-alpha
+ * AIP-15 WORKFLOW.md `defineWorkflow` reference implementation.
+ */
+
+// src/index.ts
+var SPEC_NAME = "agentworkflow/v1";
+var SPEC_VERSION = "1.0.0-alpha";
+
+export { SPEC_NAME, SPEC_VERSION };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;AAYO,IAAM,SAAA,GAAY;AAClB,IAAM,YAAA,GAAe","file":"index.mjs","sourcesContent":["/**\n * @agentproto/workflow — AIP-15 WORKFLOW.md `defineWorkflow` reference impl.\n *\n * A markdown + frontmatter format for declaring a multi-step agent workflow's abstract orchestration shape — its steps, branching, parallelism, approval gates, suspend/resume, and compensation. Pairs with the standard `defineWorkflow` / `defineStep` signatures. Implementation lives entirely in the per-step TOOL.md contracts and their AIP-30 DRIVER bindings; workflows themselves are pure orchestration data.\n *\n * Spec: https://agentproto.sh/docs/aip-15\n *\n * Authoring paths:\n *   - TS:  `defineWorkflow({...})` → `WorkflowHandle`\n *   - MD:  `parseWorkflowManifest(src) → workflowFromManifest({...})` → `WorkflowHandle`\n */\n\nexport const SPEC_NAME = \"agentworkflow/v1\" as const\nexport const SPEC_VERSION = \"1.0.0-alpha\" as const\n\nexport { defineWorkflow } from \"./define-workflow.js\"\nexport type { WorkflowDefinition, WorkflowHandle } from \"./types.js\"\n"]}

package/dist/manifest/index.d.ts

@@ -0,0 +1,79 @@
+import { z } from 'zod';
+import { a as WorkflowHandle } from '../types-DO_05pfH.js';
+
+/**
+ * AIP-15 WORKFLOW.md frontmatter zod schema.
+ *
+ * Generated from `resources/aip-15/draft/WORKFLOW.schema.json` via
+ * json-schema-to-zod. Imported by both `define-workflow.ts` (TS path
+ * validation) and `manifest/index.ts` (.md path validation) so every
+ * field-level constraint runs in both authoring paths from a single
+ * source of truth — re-run scaffold-aip to refresh after spec changes.
+ *
+ * Cross-field rules (if/then/allOf in JSON Schema) don't translate
+ * cleanly and live in `define-workflow.ts`'s `validate(def)` instead.
+ */
+
+declare const workflowFrontmatterSchema: z.ZodObject<{
+    name: z.ZodString;
+    id: z.ZodString;
+    description: z.ZodString;
+    version: z.ZodString;
+    entry: z.ZodOptional<z.ZodString>;
+    inputs: z.ZodAny;
+    outputs: z.ZodAny;
+    result: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodString]>>;
+    steps: z.ZodArray<z.ZodAny>;
+    start: z.ZodOptional<z.ZodString>;
+    suspendable: z.ZodOptional<z.ZodBoolean>;
+    triggers: z.ZodDefault<z.ZodArray<z.ZodAny>>;
+    requires: z.ZodOptional<z.ZodObject<{
+        network: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        "fs.read": z.ZodOptional<z.ZodArray<z.ZodString>>;
+        "fs.write": z.ZodOptional<z.ZodArray<z.ZodString>>;
+        env: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        secrets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    approval: z.ZodDefault<z.ZodAny>;
+    risk_level: z.ZodOptional<z.ZodNumber>;
+    timeout_ms: z.ZodDefault<z.ZodNumber>;
+    max_steps: z.ZodDefault<z.ZodNumber>;
+    retry: z.ZodOptional<z.ZodAny>;
+    cost_class: z.ZodDefault<z.ZodEnum<{
+        trivial: "trivial";
+        metered: "metered";
+        expensive: "expensive";
+    }>>;
+    tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    inputsFiles: z.ZodOptional<z.ZodAny>;
+    outputsFiles: z.ZodOptional<z.ZodAny>;
+    runtime: z.ZodOptional<z.ZodAny>;
+}, z.core.$strict>;
+type WorkflowFrontmatter = z.infer<typeof workflowFrontmatterSchema>;
+
+/**
+ * AIP-15 WORKFLOW.md sidecar parser + manifest-to-handle constructor.
+ *
+ * Mirror of `@agentproto/tool/manifest` and `@agentproto/driver/manifest`:
+ * the .md provides metadata; the TS module supplies any spec-specific
+ * runtime bits (schemas, execute bodies, …) that can't live in
+ * frontmatter. Both inputs end up in `defineWorkflow` so the cross-AIP
+ * invariants run uniformly.
+ *
+ *
+ * The frontmatter zod schema below was generated from
+ * `resources/aip-15/draft/WORKFLOW.schema.json` via json-schema-to-zod.
+ * Re-run scaffold-aip to refresh after spec changes (or hand-tune
+ * any constraint the converter doesn't capture cleanly).
+ */
+
+interface WorkflowManifest {
+    frontmatter: WorkflowFrontmatter;
+    body: string;
+}
+declare function parseWorkflowManifest(source: string): WorkflowManifest;
+declare function workflowFromManifest(manifest: WorkflowManifest): WorkflowHandle;
+
+export { type WorkflowFrontmatter, type WorkflowManifest, parseWorkflowManifest, workflowFromManifest, workflowFrontmatterSchema };

package/dist/manifest/index.mjs

@@ -0,0 +1,28 @@
+import { workflowFrontmatterSchema, defineWorkflow } from '../chunk-LS5EPMQB.mjs';
+export { workflowFrontmatterSchema } from '../chunk-LS5EPMQB.mjs';
+import matter from 'gray-matter';
+
+/**
+ * @agentproto/workflow v0.1.0-alpha
+ * AIP-15 WORKFLOW.md `defineWorkflow` reference implementation.
+ */
+function parseWorkflowManifest(source) {
+  const parsed = matter(source);
+  if (Object.keys(parsed.data).length === 0) {
+    throw new Error("parseWorkflowManifest: missing or empty frontmatter");
+  }
+  const result = workflowFrontmatterSchema.safeParse(parsed.data);
+  if (!result.success) {
+    throw new Error(
+      `parseWorkflowManifest: invalid frontmatter \u2014 ${result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")}`
+    );
+  }
+  return { frontmatter: result.data, body: parsed.content };
+}
+function workflowFromManifest(manifest) {
+  return defineWorkflow(manifest.frontmatter);
+}
+
+export { parseWorkflowManifest, workflowFromManifest };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/manifest/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/manifest/index.ts"],"names":[],"mappings":";;;;;;;;AA8BO,SAAS,sBAAsB,MAAA,EAAkC;AACtE,EAAA,MAAM,MAAA,GAAS,OAAO,MAAM,CAAA;AAC5B,EAAA,IAAI,OAAO,IAAA,CAAK,MAAA,CAAO,IAAI,CAAA,CAAE,WAAW,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,MAAA,GAAS,yBAAA,CAA0B,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA;AAC9D,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,kDAAA,EAAgD,OAAO,KAAA,CAAM,MAAA,CAC1D,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA,CAC9C,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACf;AAAA,EACF;AACA,EAAA,OAAO,EAAE,WAAA,EAAa,MAAA,CAAO,IAAA,EAAM,IAAA,EAAM,OAAO,OAAA,EAAQ;AAC1D;AAEO,SAAS,qBAAqB,QAAA,EAA4C;AAK/E,EAAA,OAAO,cAAA,CAAe,SAAS,WAA4C,CAAA;AAC7E","file":"index.mjs","sourcesContent":["/**\n * AIP-15 WORKFLOW.md sidecar parser + manifest-to-handle constructor.\n *\n * Mirror of `@agentproto/tool/manifest` and `@agentproto/driver/manifest`:\n * the .md provides metadata; the TS module supplies any spec-specific\n * runtime bits (schemas, execute bodies, …) that can't live in\n * frontmatter. Both inputs end up in `defineWorkflow` so the cross-AIP\n * invariants run uniformly.\n *\n *\n * The frontmatter zod schema below was generated from\n * `resources/aip-15/draft/WORKFLOW.schema.json` via json-schema-to-zod.\n * Re-run scaffold-aip to refresh after spec changes (or hand-tune\n * any constraint the converter doesn't capture cleanly).\n */\n\nimport matter from \"gray-matter\"\nimport { workflowFrontmatterSchema, type WorkflowFrontmatter } from \"../schema.js\"\nimport { defineWorkflow } from \"../define-workflow.js\"\nimport type { WorkflowDefinition, WorkflowHandle } from \"../types.js\"\n\n// Re-export so consumers can import the schema + inferred type either\n// from \"@@agentproto/workflow/manifest\" or directly from \"@@agentproto/workflow/schema\".\nexport { workflowFrontmatterSchema, type WorkflowFrontmatter }\n\nexport interface WorkflowManifest {\n  frontmatter: WorkflowFrontmatter\n  body: string\n}\n\nexport function parseWorkflowManifest(source: string): WorkflowManifest {\n  const parsed = matter(source)\n  if (Object.keys(parsed.data).length === 0) {\n    throw new Error(\"parseWorkflowManifest: missing or empty frontmatter\")\n  }\n  const result = workflowFrontmatterSchema.safeParse(parsed.data)\n  if (!result.success) {\n    throw new Error(\n      `parseWorkflowManifest: invalid frontmatter — ${result.error.issues\n        .map((i) => `${i.path.join(\".\")}: ${i.message}`)\n        .join(\"; \")}`,\n    )\n  }\n  return { frontmatter: result.data, body: parsed.content }\n}\n\nexport function workflowFromManifest(manifest: WorkflowManifest): WorkflowHandle {\n  // The zod-validated frontmatter is structurally compatible with\n  // WorkflowDefinition; the cast pins the typing once the manifest\n  // schema and the TS interface diverge (e.g. handle has frozen fields\n  // a literal config doesn't carry yet).\n  return defineWorkflow(manifest.frontmatter as unknown as WorkflowDefinition)\n}\n"]}

package/dist/types-DO_05pfH.d.ts

@@ -0,0 +1,289 @@
+/**
+ * AIP-15 WorkflowDefinition + WorkflowHandle.
+ *
+ * `WorkflowDefinition` was generated from
+ * `resources/aip-15/draft/WORKFLOW.schema.json` via json-schema-to-typescript.
+ * `WorkflowHandle` is the readonly view of the same shape; tighten it
+ * by hand for fields that get defaults applied in build().
+ */
+type Step = StepCommon & (StepTool | StepBranch | StepParallel | StepSuspend | StepApproval | StepMap | StepLoop | StepSubworkflow);
+type Approval = ("auto" | "always" | "on-mutate" | "per-step") | string;
+type Trigger = {
+    kind: "schedule";
+    cron: string;
+    timezone?: string;
+} | {
+    kind: "webhook";
+    path: string;
+} | {
+    kind: "event";
+    name: string;
+} | {
+    kind: "manual";
+    label?: string;
+};
+/**
+ * Validates the YAML frontmatter portion of an AIP-15 WORKFLOW.md manifest.
+ */
+interface WorkflowDefinition {
+    name: string;
+    id: string;
+    description: string;
+    version: string;
+    entry?: string;
+    inputs: Inputs;
+    outputs: Outputs;
+    /**
+     * Optional value expression mapping step results to the workflow output,
+     * using the same reference grammar as a step's `inputs` ($input.*,
+     * $steps.<id>.*, literals). Omitted ⇒ the output is the final step's result.
+     * Its shape SHOULD satisfy `outputs`.
+     */
+    result?: Record<string, unknown> | string;
+    /**
+     * @minItems 1
+     */
+    steps: [Step, ...Step[]];
+    start?: string;
+    suspendable?: boolean;
+    triggers?: Trigger[];
+    requires?: {
+        network?: string[];
+        "fs.read"?: string[];
+        "fs.write"?: string[];
+        env?: string[];
+        secrets?: string[];
+        tools?: string[];
+    };
+    approval?: ("auto" | "always" | "on-mutate" | "per-step") | string;
+    risk_level?: number;
+    timeout_ms?: number;
+    max_steps?: number;
+    retry?: Retry;
+    cost_class?: "trivial" | "metered" | "expensive";
+    tags?: string[];
+    metadata?: {
+        [k: string]: unknown;
+    };
+    inputsFiles?: InputsFiles;
+    outputsFiles?: OutputsFiles;
+    runtime?: Runner;
+}
+/**
+ * Defined by AIP-16 — the IO `inputs` block.
+ */
+interface Inputs {
+}
+/**
+ * Defined by AIP-16 — the IO `outputs` block.
+ */
+interface Outputs {
+}
+interface StepCommon {
+    id: string;
+    name?: string;
+    description?: string;
+    kind: "tool" | "branch" | "parallel" | "suspend" | "approval" | "map" | "loop" | "subworkflow";
+    inputs?: {};
+    outputs?: JsonSchema;
+    next?: string;
+    approval?: Approval;
+    risk_level?: number;
+    timeout_ms?: number;
+    retry?: Retry;
+    compensation?: string;
+}
+/**
+ * Any JSON Schema draft 2020-12 document. Validation deferred to a meta-validator.
+ */
+interface JsonSchema {
+}
+interface Retry {
+    max_attempts: number;
+    backoff: "fixed" | "exponential";
+    initial_ms?: number;
+}
+interface StepTool {
+    kind: "tool";
+    tool: string | {
+        entry: string;
+    };
+}
+interface StepBranch {
+    kind: "branch";
+    /**
+     * @minItems 1
+     */
+    branches: [
+        {
+            when: string;
+            next: string;
+        },
+        ...{
+            when: string;
+            next: string;
+        }[]
+    ];
+    default?: string;
+}
+interface StepParallel {
+    kind: "parallel";
+    /**
+     * @minItems 2
+     */
+    branches: [
+        {
+            id: string;
+            steps: Step[];
+            next?: string;
+        },
+        {
+            id: string;
+            steps: Step[];
+            next?: string;
+        },
+        ...{
+            id: string;
+            steps: Step[];
+            next?: string;
+        }[]
+    ];
+}
+interface StepSuspend {
+    kind: "suspend";
+    resume: {
+        /**
+         * @minItems 1
+         */
+        on: [string, ...string[]];
+        timeout_ms?: number;
+        on_timeout?: string;
+    };
+}
+interface StepApproval {
+    kind: "approval";
+    prompt: string;
+    artifacts?: string[];
+    /**
+     * @minItems 1
+     */
+    approvers: [
+        ({
+            role: string;
+        } | {
+            userId: string;
+        }),
+        ...({
+            role: string;
+        } | {
+            userId: string;
+        })[]
+    ];
+    timeout_ms?: number;
+    on_approve?: {
+        next?: string;
+    };
+    on_reject?: {
+        next?: string;
+    };
+    on_timeout?: string;
+}
+interface StepMap {
+    kind: "map";
+    over: string;
+    parallelism?: number;
+    steps: Step[];
+}
+interface StepLoop {
+    kind: "loop";
+    while: string;
+    max_iterations: number;
+    steps: Step[];
+}
+interface StepSubworkflow {
+    kind: "subworkflow";
+    workflow: string;
+}
+/**
+ * Defined by AIP-16 — the IO `inputsFiles` block.
+ */
+interface InputsFiles {
+    [k: string]: FileContractEntry;
+}
+/**
+ * A single declared file in inputsFiles/outputsFiles.
+ */
+interface FileContractEntry {
+    /**
+     * Workspace-relative path. outputsFiles entries MAY use the tokens <runId>, <workflowId>, <toolId>, <isoDate> for per-run path interpolation.
+     */
+    path: string;
+    /**
+     * Convention only — not enforced by the contract. `ro` for inputs is the typical default; `rw` for outputs.
+     */
+    mode?: "ro" | "rw";
+    /**
+     * Informational MIME type. Hosts MAY surface in audit logs / UIs.
+     */
+    contentType?: string;
+}
+/**
+ * Defined by AIP-16 — the IO `outputsFiles` block.
+ */
+interface OutputsFiles {
+    [k: string]: FileContractEntry;
+}
+/**
+ * Defined by AIP-17 — the runner block.
+ */
+interface Runner {
+    /**
+     * Where the process runs. `subprocess` (default): host-local Node `--permission` child. `sandbox`: real container via the host's SandboxProviderAdapter. `in-process`: dynamic import inside the host process; reserved for trusted/vendor code, silently downgraded to `subprocess` for untrusted origins.
+     */
+    engine?: "subprocess" | "sandbox" | "in-process";
+    /**
+     * Sandbox template id from the host registry. Only meaningful for `engine: sandbox`. When omitted, the host auto-picks via `needs`.
+     */
+    image?: string;
+    /**
+     * Declarative dependency requirements. Hosts use these to auto-pick an image, install missing deps at cold-start, and surface them in trust UIs.
+     */
+    needs?: {
+        /**
+         * Primary language runtime.
+         */
+        language?: "node" | "python" | "multi";
+        /**
+         * OS-level package names. Default convention: Debian/Ubuntu apt names.
+         */
+        native?: string[];
+        /**
+         * Additional npm packages installed via `npm install` after lockfile-driven `npm ci`.
+         */
+        npm?: string[];
+        /**
+         * Additional pip packages installed via `pip install --user`.
+         */
+        pip?: string[];
+    };
+    /**
+     * Resource caps. Advisory but enforceable when the isolation primitive supports it.
+     */
+    limits?: {
+        /**
+         * Hard memory cap in MiB.
+         */
+        memory_mb?: number;
+        /**
+         * Hard wall-clock cap in ms.
+         */
+        timeout_ms?: number;
+        /**
+         * CPU-time cap in ms. Hosts that can't enforce it ignore this field.
+         */
+        cpu_ms?: number;
+    };
+}
+type WorkflowHandle = Readonly<WorkflowDefinition>;
+
+export type { WorkflowDefinition as W, WorkflowHandle as a };

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@agentproto/workflow",
+  "version": "0.1.0-alpha.1",
+  "description": "@agentproto/workflow — AIP-15 WORKFLOW.md reference implementation. A markdown + frontmatter format for declaring a multi-step agent workflow's abstract orchestration shape — its steps, branching, parallelism, approval gates, suspend/resume, and compensation. Pairs with the standard `defineWorkflow` / `defineStep` signatures. Implementation lives entirely in the per-step TOOL.md contracts and their AIP-30 DRIVER bindings; workflows themselves are pure orchestration data.",
+  "keywords": [
+    "agentproto",
+    "aip-15",
+    "workflow",
+    "defineWorkflow",
+    "open-standard",
+    "agentic"
+  ],
+  "homepage": "https://agentproto.sh/docs/aip-15",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "packages/workflow"
+  },
+  "bugs": {
+    "url": "https://github.com/agentproto/ts/issues"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./manifest": {
+      "types": "./dist/manifest/index.d.ts",
+      "import": "./dist/manifest/index.mjs",
+      "default": "./dist/manifest/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "gray-matter": "^4.0.3",
+    "zod": "^4.4.3",
+    "@agentproto/define-doctype": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@agentproto/tooling": "0.1.0-alpha.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest"
+  }
+}