@agentstorm/server 0.2.5 → 0.2.6

package/dist/pipeline-service.d.ts

@@ -4,6 +4,8 @@ export interface PipelineServiceOptions {
     cwd: string;
     /** Resident daemon lifecycle adapter. */
     agentRuntime: AgentRuntime;
+    /** Override the daemon-owned global template root in isolated deployments/tests. */
+    templateHome?: string;
 }
 export interface PipelineServiceRequestOptions {
     method?: "GET" | "POST" | "PUT" | "DELETE";

package/dist/pipeline-service.js

@@ -9,7 +9,7 @@ import { ensurePipelineSessionPaths, pipelineSessionPaths, writeSessionJsonAtomi
 import { safeParseWorkflowSpec, parseTaskList, ApprovalCommentSchema, HumanInterventionActionSchema, PipelineStartInputSchema, ResourceRefSchema, WorkflowBundleSchema, } from "@agentstorm/protocol";
 import { buildPipelineStatusSummary } from "./pipeline-status.js";
 import { GlobalTemplateLibrary, } from "./template-library.js";
-import { assertInsidePackage, assertWorkflowDisplayName, latestWorkflowPackageVersion, listWorkflowPackageNames, readJsonFile, recordWorkflowPackageVersion, safePackageRelativePath, workflowPackageExists, workflowPackagePaths, workflowPromptRelativePath, writeJsonAtomic as writePackageJsonAtomic, } from "./workflow-package.js";
+import { assertInsidePackage, assertWorkflowDisplayName, collectWorkflowPackageAssets, latestWorkflowPackageVersion, listWorkflowPackageNames, readJsonFile, recordWorkflowPackageVersion, safePackageRelativePath, workflowPackageExists, workflowPackagePaths, workflowPromptRelativePath, writeWorkflowPackageSnapshot, writeJsonAtomic as writePackageJsonAtomic, } from "./workflow-package.js";
 export function statusWithRunKind(status, events) {
     const created = events.find((event) => event.t === "run_created");
     if (!created)
@@ -35,7 +35,7 @@ export async function createPipelineService(opts) {
     // and existing Workflow routes usable in restricted test containers where
     // the optional global template directory is not writable yet.
     let templateLibrary = null;
-    const getTemplateLibrary = () => (templateLibrary ??= new GlobalTemplateLibrary());
+    const getTemplateLibrary = () => (templateLibrary ??= new GlobalTemplateLibrary(opts.templateHome ? { home: opts.templateHome } : undefined));
     function getOrCreateKernel(workspaceId, rootPath) {
         const existing = kernels.get(workspaceId);
         if (existing)
@@ -181,9 +181,7 @@ export async function createPipelineService(opts) {
     router.post("/workspaces/:wid/register", (req, res) => {
         const rootPath = typeof req.body?.rootPath === "string" ? req.body.rootPath.trim() : "";
         if (!rootPath || !path.isAbsolute(rootPath) || !fs.existsSync(rootPath)) {
-            res
-                .status(400)
-                .json({ error: "rootPath must be an existing absolute directory" });
+            res.status(400).json({ error: "rootPath must be an existing absolute directory" });
             return;
         }
         if (!fs.statSync(rootPath).isDirectory()) {
@@ -245,9 +243,7 @@ export async function createPipelineService(opts) {
     });
     router.post("/templates", (req, res) => {
         try {
-            res
-                .status(201)
-                .json(getTemplateLibrary().create(req.body));
+            res.status(201).json(getTemplateLibrary().create(req.body));
         }
         catch (error) {
             res.status(400).json({
@@ -261,9 +257,7 @@ export async function createPipelineService(opts) {
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            res
-                .status(message.includes("ETag mismatch") ? 409 : 400)
-                .json({ error: message });
+            res.status(message.includes("ETag mismatch") ? 409 : 400).json({ error: message });
         }
     });
     router.delete("/templates/:id", (req, res) => {
@@ -326,6 +320,7 @@ export async function createPipelineService(opts) {
                     ? readJsonFile(files.manifest)
                     : {};
                 const source = manifest.source;
+                const publication = manifest.publication;
                 return [
                     {
                         id,
@@ -341,8 +336,7 @@ export async function createPipelineService(opts) {
                             !Array.isArray(source) &&
                             typeof source.templateId === "string"
                             ? {
-                                templateId: source
-                                    .templateId,
+                                templateId: source.templateId,
                                 ...(Number.isSafeInteger(source.templateVersion)
                                     ? {
                                         templateVersion: Number(source.templateVersion),
@@ -350,6 +344,20 @@ export async function createPipelineService(opts) {
                                     : {}),
                             }
                             : {}),
+                        ...(publication &&
+                            typeof publication === "object" &&
+                            !Array.isArray(publication) &&
+                            typeof publication.templateId === "string"
+                            ? {
+                                publishedTemplateId: publication
+                                    .templateId,
+                                ...(Number.isSafeInteger(publication.templateVersion)
+                                    ? {
+                                        publishedTemplateVersion: Number(publication.templateVersion),
+                                    }
+                                    : {}),
+                            }
+                            : {}),
                     },
                 ];
             }
@@ -422,9 +430,7 @@ export async function createPipelineService(opts) {
             res.status(404).json({ error: "workspace not found" });
             return;
         }
-        const templateId = typeof req.body?.templateId === "string"
-            ? req.body.templateId.trim()
-            : "";
+        const templateId = typeof req.body?.templateId === "string" ? req.body.templateId.trim() : "";
         if (!templateId) {
             res.status(400).json({ error: "templateId is required" });
             return;
@@ -444,6 +450,121 @@ export async function createPipelineService(opts) {
             });
         }
     });
+    router.post("/workspaces/:wid/workflows/:id/copies", (req, res) => {
+        const wk = kernels.get(req.params.wid);
+        if (!wk) {
+            res.status(404).json({ error: "workspace not found" });
+            return;
+        }
+        if (!isSafeWorkflowId(req.params.id)) {
+            res.status(400).json({ error: "invalid workflow id" });
+            return;
+        }
+        try {
+            const source = readProjectWorkflowSnapshot(wk.rootPath, req.params.id);
+            const expectedEtag = req.header("if-match");
+            if (expectedEtag && expectedEtag !== etagOf(source.raw)) {
+                res.status(409).json({ error: "ETag mismatch" });
+                return;
+            }
+            const name = assertWorkflowDisplayName(String(req.body?.name ?? ""));
+            const now = nowBeijing();
+            const spec = { ...source.spec, name };
+            writeWorkflowPackageSnapshot({
+                workspaceRoot: wk.rootPath,
+                name,
+                spec,
+                layout: source.layout,
+                assets: source.assets,
+                manifest: {
+                    schemaVersion: 1,
+                    name,
+                    description: source.manifest.description,
+                    version: 1,
+                    source: {
+                        kind: "copy",
+                        workflowName: req.params.id,
+                        workflowVersion: latestWorkflowPackageVersion(source.files),
+                    },
+                    createdAt: now,
+                    updatedAt: now,
+                },
+            });
+            const raw = JSON.stringify(spec, null, 2);
+            res.status(201).json({
+                id: name,
+                spec,
+                etag: etagOf(raw),
+                updatedAt: now,
+                version: 1,
+                description: source.manifest.description,
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            res.status(message.includes("已存在") ? 409 : 400).json({ error: message });
+        }
+    });
+    router.post("/workspaces/:wid/workflows/:id/global-template", (req, res) => {
+        const wk = kernels.get(req.params.wid);
+        if (!wk) {
+            res.status(404).json({ error: "workspace not found" });
+            return;
+        }
+        if (!isSafeWorkflowId(req.params.id)) {
+            res.status(400).json({ error: "invalid workflow id" });
+            return;
+        }
+        try {
+            const source = readProjectWorkflowSnapshot(wk.rootPath, req.params.id);
+            const expectedEtag = req.header("if-match");
+            if (expectedEtag && expectedEtag !== etagOf(source.raw)) {
+                res.status(409).json({ error: "ETag mismatch" });
+                return;
+            }
+            const mode = req.body?.mode === "replace" ? "replace" : "create";
+            const name = String(req.body?.name ?? "").trim();
+            if (!name)
+                throw new Error("模板名称不能为空");
+            const input = {
+                ...(typeof req.body?.templateId === "string" && req.body.templateId.trim()
+                    ? { id: req.body.templateId.trim() }
+                    : {}),
+                name,
+                description: typeof req.body?.description === "string"
+                    ? req.body.description
+                    : source.manifest.description,
+                spec: { ...source.spec, name },
+                layout: source.layout,
+                assets: source.assets,
+            };
+            if (mode === "replace" &&
+                (typeof req.body?.expectedTemplateEtag !== "string" ||
+                    !req.body.expectedTemplateEtag.trim())) {
+                throw new Error("更新全局模板必须提供当前模板 ETag");
+            }
+            const template = mode === "replace"
+                ? getTemplateLibrary().update(String(req.body?.templateId ?? ""), input, typeof req.body?.expectedTemplateEtag === "string"
+                    ? req.body.expectedTemplateEtag
+                    : undefined)
+                : getTemplateLibrary().create(input);
+            writePackageJsonAtomic(source.files.manifest, {
+                ...source.manifest,
+                publication: { templateId: template.id, templateVersion: template.version },
+                updatedAt: nowBeijing(),
+            });
+            res.status(mode === "create" ? 201 : 200).json({
+                template,
+                publication: { templateId: template.id, templateVersion: template.version },
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            res
+                .status(message.includes("ETag mismatch") || message.includes("已存在") ? 409 : 400)
+                .json({ error: message });
+        }
+    });
     // Portable P4 bundle: graph + Prompt assets. Everything is kept inside one
     // display-name Workflow package; the runtime later uses that package root
     // as specDir, so @prompts/... is stable after export/import.
@@ -692,22 +813,20 @@ export async function createPipelineService(opts) {
             ? readJsonFile(files.manifest)
             : {};
         const source = manifest.source;
+        const publication = manifest.publication;
         res.json({
             id: req.params.id,
             spec: JSON.parse(raw),
             etag: etagOf(raw),
             updatedAt: toBeijingIso(fs.statSync(fp).mtime),
             version: latestWorkflowPackageVersion(workflowPackagePaths(wk.rootPath, req.params.id)),
-            ...(typeof manifest.description === "string"
-                ? { description: manifest.description }
-                : {}),
+            ...(typeof manifest.description === "string" ? { description: manifest.description } : {}),
             ...(source &&
                 typeof source === "object" &&
                 !Array.isArray(source) &&
                 typeof source.templateId === "string"
                 ? {
-                    templateId: source
-                        .templateId,
+                    templateId: source.templateId,
                     ...(Number.isSafeInteger(source.templateVersion)
                         ? {
                             templateVersion: Number(source.templateVersion),
@@ -715,6 +834,19 @@ export async function createPipelineService(opts) {
                         : {}),
                 }
                 : {}),
+            ...(publication &&
+                typeof publication === "object" &&
+                !Array.isArray(publication) &&
+                typeof publication.templateId === "string"
+                ? {
+                    publishedTemplateId: publication.templateId,
+                    ...(Number.isSafeInteger(publication.templateVersion)
+                        ? {
+                            publishedTemplateVersion: Number(publication.templateVersion),
+                        }
+                        : {}),
+                }
+                : {}),
         });
     });
     router.delete("/workspaces/:wid/workflows/:id", (req, res) => {
@@ -808,15 +940,14 @@ export async function createPipelineService(opts) {
             schemaVersion: 1,
             name: newId,
             description: typeof manifest.description === "string" ? manifest.description : "",
-            version: Number.isSafeInteger(manifest.version)
-                ? Number(manifest.version) + 1
-                : 1,
+            version: Number.isSafeInteger(manifest.version) ? Number(manifest.version) + 1 : 1,
             ...(manifest.source && typeof manifest.source === "object"
                 ? { source: manifest.source }
                 : {}),
-            createdAt: typeof manifest.createdAt === "string"
-                ? manifest.createdAt
-                : nowBeijing(),
+            ...(manifest.publication && typeof manifest.publication === "object"
+                ? { publication: manifest.publication }
+                : {}),
+            createdAt: typeof manifest.createdAt === "string" ? manifest.createdAt : nowBeijing(),
             updatedAt: nowBeijing(),
         });
         ensureWorkflowPromptFiles(targetFiles.root, result.data);
@@ -894,19 +1025,17 @@ export async function createPipelineService(opts) {
         writePackageJsonAtomic(files.manifest, {
             schemaVersion: 1,
             name: req.params.id,
-            description: typeof previousManifest.description === "string"
-                ? previousManifest.description
-                : "",
+            description: typeof previousManifest.description === "string" ? previousManifest.description : "",
             version: Number.isSafeInteger(previousManifest.version)
                 ? Number(previousManifest.version) + 1
                 : 1,
-            ...(previousManifest.source &&
-                typeof previousManifest.source === "object"
+            ...(previousManifest.source && typeof previousManifest.source === "object"
                 ? { source: previousManifest.source }
                 : {}),
-            createdAt: typeof previousManifest.createdAt === "string"
-                ? previousManifest.createdAt
-                : nowBeijing(),
+            ...(previousManifest.publication && typeof previousManifest.publication === "object"
+                ? { publication: previousManifest.publication }
+                : {}),
+            createdAt: typeof previousManifest.createdAt === "string" ? previousManifest.createdAt : nowBeijing(),
             updatedAt: nowBeijing(),
         });
         const version = recordWorkflowPackageVersion(files, raw);
@@ -1023,9 +1152,7 @@ export async function createPipelineService(opts) {
         if (typeof body.nodeId !== "string" ||
             typeof body.kind !== "string" ||
             typeof body.content !== "string") {
-            res
-                .status(400)
-                .json({ error: "nodeId, kind and UTF-8 content are required" });
+            res.status(400).json({ error: "nodeId, kind and UTF-8 content are required" });
             return;
         }
         try {
@@ -1039,9 +1166,7 @@ export async function createPipelineService(opts) {
                 kind: body.kind,
                 content: body.content,
                 ...(typeof body.name === "string" ? { name: body.name } : {}),
-                ...(typeof body.mimeType === "string"
-                    ? { mimeType: body.mimeType }
-                    : {}),
+                ...(typeof body.mimeType === "string" ? { mimeType: body.mimeType } : {}),
                 ...(typeof body.runId === "string" ? { runId: body.runId } : {}),
                 ...(typeof body.taskId === "string" ? { taskId: body.taskId } : {}),
             });
@@ -1178,8 +1303,7 @@ export async function createPipelineService(opts) {
         let resources = parsedInput.data.resources ?? [];
         for (const resource of resources) {
             const relativePath = resource.workspaceRelativePath;
-            if (relativePath !== undefined &&
-                !isSafeWorkspaceRelativePath(relativePath)) {
+            if (relativePath !== undefined && !isSafeWorkspaceRelativePath(relativePath)) {
                 res.status(400).json({
                     error: "resource workspaceRelativePath must stay inside the workspace",
                 });
@@ -1190,9 +1314,7 @@ export async function createPipelineService(opts) {
         if (resourceIds !== undefined) {
             if (!Array.isArray(resourceIds) ||
                 resourceIds.some((id) => typeof id !== "string" || id.trim().length === 0)) {
-                res
-                    .status(400)
-                    .json({ error: "resourceIds must be a non-empty string array" });
+                res.status(400).json({ error: "resourceIds must be a non-empty string array" });
                 return;
             }
             // IDs are opaque to AgentStorm. Paseo or a Workflow-specific tool owns
@@ -1242,9 +1364,7 @@ export async function createPipelineService(opts) {
                     ? { idempotencyKey: parsedInput.data.idempotencyKey }
                     : {}),
                 ...(resources.length > 0 ? { resources } : {}),
-                ...(Array.isArray(requestedTaskIds)
-                    ? { taskIds: requestedTaskIds }
-                    : {}),
+                ...(Array.isArray(requestedTaskIds) ? { taskIds: requestedTaskIds } : {}),
             });
             res.status(202).json({
                 run: started.run,
@@ -1357,9 +1477,7 @@ export async function createPipelineService(opts) {
             return;
         }
         const requestedOffset = Number.parseInt(String(req.query.from ?? "0"), 10);
-        const fromOffset = Number.isFinite(requestedOffset) && requestedOffset > 0
-            ? requestedOffset
-            : 0;
+        const fromOffset = Number.isFinite(requestedOffset) && requestedOffset > 0 ? requestedOffset : 0;
         res.json(workspace.kernel.store.readPipelineEventsFromOffset(req.params.pipelineRunId, fromOffset));
     });
     router.get("/workspaces/:wid/agents/:agentId/pipelines/:pipelineRunId/approvals", (req, res) => {
@@ -1392,9 +1510,7 @@ export async function createPipelineService(opts) {
                 ? Number(req.body.planRevision)
                 : undefined;
             const comments = ApprovalCommentSchema.array().parse(req.body?.comments ?? []);
-            res.json(found.coordinator.approve(approvalId, typeof req.body?.decidedBy === "string"
-                ? req.body.decidedBy
-                : "user", planRevision, comments));
+            res.json(found.coordinator.approve(approvalId, typeof req.body?.decidedBy === "string" ? req.body.decidedBy : "user", planRevision, comments));
         }
         catch (error) {
             res.status(409).json({
@@ -1420,9 +1536,7 @@ export async function createPipelineService(opts) {
                 ? Number(req.body.planRevision)
                 : undefined;
             const comments = ApprovalCommentSchema.array().parse(req.body?.comments ?? []);
-            res.json(found.coordinator.reject(approvalId, feedback, typeof req.body?.decidedBy === "string"
-                ? req.body.decidedBy
-                : "user", planRevision, comments));
+            res.json(found.coordinator.reject(approvalId, feedback, typeof req.body?.decidedBy === "string" ? req.body.decidedBy : "user", planRevision, comments));
         }
         catch (error) {
             res.status(409).json({
@@ -1494,8 +1608,8 @@ export async function createPipelineService(opts) {
         const taskId = typeof req.body?.taskId === "string" ? req.body.taskId.trim() : "";
         const nodeId = typeof req.body?.nodeId === "string" ? req.body.nodeId.trim() : "";
         const text = typeof req.body?.text === "string" ? req.body.text.trim() : "";
-        if (!taskId || !text) {
-            res.status(400).json({ error: "taskId and text are required" });
+        if (!taskId) {
+            res.status(400).json({ error: "taskId is required" });
             return;
         }
         // Older Paseo clients used the generic Pipeline resume endpoint for the
@@ -1503,7 +1617,7 @@ export async function createPipelineService(opts) {
         // keep that request on the original Plan Run instead of asking the
         // Execute task scope to resolve it.
         if (taskId.startsWith("planner:") || taskId === found.value.planRunId) {
-            if (!nodeId) {
+            if (!nodeId || !text) {
                 res.status(400).json({ error: "nodeId and text are required" });
                 return;
             }
@@ -1524,7 +1638,7 @@ export async function createPipelineService(opts) {
             res.json(found.coordinator.resumeBlocked(req.params.pipelineRunId, {
                 taskId,
                 ...(nodeId ? { nodeId } : {}),
-                text,
+                ...(text ? { text } : {}),
             }));
         }
         catch (error) {
@@ -1601,9 +1715,7 @@ export async function createPipelineService(opts) {
         const runId = typeof req.body?.runId === "string" ? req.body.runId : "";
         const nodeId = typeof req.body?.nodeId === "string" ? req.body.nodeId : "";
         if (!runId || !nodeId || found.value.planRunId !== runId) {
-            res
-                .status(400)
-                .json({ error: "runId/nodeId do not match the Pipeline plan" });
+            res.status(400).json({ error: "runId/nodeId do not match the Pipeline plan" });
             return;
         }
         try {
@@ -1638,9 +1750,7 @@ export async function createPipelineService(opts) {
         const nodeId = typeof req.body?.nodeId === "string" ? req.body.nodeId : "";
         const outcome = typeof req.body?.outcome === "string" ? req.body.outcome.trim() : "";
         if (!runId || !nodeId || !outcome) {
-            res
-                .status(400)
-                .json({ error: "runId, nodeId and outcome are required" });
+            res.status(400).json({ error: "runId, nodeId and outcome are required" });
             return;
         }
         try {
@@ -1672,9 +1782,7 @@ export async function createPipelineService(opts) {
         const runId = typeof req.body?.runId === "string" ? req.body.runId : "";
         const nodeId = typeof req.body?.nodeId === "string" ? req.body.nodeId : "";
         const title = typeof req.body?.title === "string" ? req.body.title.trim() : "";
-        const instructions = typeof req.body?.instructions === "string"
-            ? req.body.instructions.trim()
-            : "";
+        const instructions = typeof req.body?.instructions === "string" ? req.body.instructions.trim() : "";
         if (!runId || !nodeId || !title || !instructions) {
             res.status(400).json({
                 error: "runId, nodeId, title and instructions are required",
@@ -1754,7 +1862,7 @@ export async function createPipelineService(opts) {
         }
     });
     function findPipelineRun(workspace, agentId, pipelineRunId) {
-        for (const [coordinatorKey, coordinator,] of workspace.coordinators.entries()) {
+        for (const [coordinatorKey, coordinator] of workspace.coordinators.entries()) {
             // PipelineRunStore is shared by a Workspace, so a Coordinator can see
             // persisted runs belonging to another Main Agent.  The map key is the
             // authoritative in-memory owner; do not return an old Agent's
@@ -1857,8 +1965,7 @@ export async function createPipelineService(opts) {
                         // UI uses a synthetic `planner:<PipelineRunId>` id, which must not
                         // be passed to Execute task-scope recovery. Re-open the original
                         // Plan Run directly and keep its identity.
-                        if (created.runKind === "plan" ||
-                            (!created.runKind && !created.taskId)) {
+                        if (created.runKind === "plan" || (!created.runKind && !created.taskId)) {
                             if (!nodeId || typeof text !== "string" || !text.trim()) {
                                 res.status(400).json({ error: "nodeId and text are required" });
                                 return;
@@ -2149,9 +2256,7 @@ export async function createPipelineService(opts) {
                 res.json({ ok: true });
             }
             catch (e) {
-                res
-                    .status(500)
-                    .json({ error: e instanceof Error ? e.message : String(e) });
+                res.status(500).json({ error: e instanceof Error ? e.message : String(e) });
             }
         });
     }
@@ -2221,9 +2326,7 @@ export async function createPipelineService(opts) {
         const runner = wk.taskRunners.get(req.params.agentId);
         if (runner)
             runner.pause();
-        const tasks = wk.kernel.tasks
-            .list()
-            .filter((t) => t.agentId === req.params.agentId);
+        const tasks = wk.kernel.tasks.list().filter((t) => t.agentId === req.params.agentId);
         const runIds = [];
         for (const t of tasks) {
             if (t.runId) {
@@ -2240,9 +2343,7 @@ export async function createPipelineService(opts) {
         let wk = findKernelByAgentId(req.params.agentId);
         if (!wk)
             wk = kernels.get("default");
-        const tasks = wk.kernel.tasks
-            .list()
-            .filter((t) => t.agentId === req.params.agentId);
+        const tasks = wk.kernel.tasks.list().filter((t) => t.agentId === req.params.agentId);
         const runIds = [];
         for (const t of tasks) {
             if (t.runId) {
@@ -2377,19 +2478,43 @@ function etagOf(raw) {
     // same JSON may not. Treat that formatting difference as the same document
     // so a freshly-created Workflow can be updated with the returned ETag.
     const canonical = raw.replace(/\r?\n$/, "");
-    return `"${createHash("sha256")
-        .update(canonical)
-        .digest("hex")
-        .slice(0, 16)}"`;
+    return `"${createHash("sha256").update(canonical).digest("hex").slice(0, 16)}"`;
+}
+function readProjectWorkflowSnapshot(workspaceRoot, workflowId) {
+    const files = workflowPackagePaths(workspaceRoot, workflowId);
+    if (!fs.existsSync(files.workflow))
+        throw new Error("workflow not found");
+    const raw = fs.readFileSync(files.workflow, "utf8");
+    const parsed = safeParseWorkflowSpec(JSON.parse(raw));
+    if (!parsed.success)
+        throw new Error("stored workflow is invalid");
+    validateWorkflowPromptReferences(parsed.data);
+    const now = nowBeijing();
+    const storedManifest = fs.existsSync(files.manifest)
+        ? readJsonFile(files.manifest)
+        : undefined;
+    const manifest = storedManifest ?? {
+        schemaVersion: 1,
+        name: workflowId,
+        description: "",
+        version: Math.max(1, latestWorkflowPackageVersion(files)),
+        createdAt: now,
+        updatedAt: now,
+    };
+    return {
+        files,
+        raw,
+        spec: parsed.data,
+        manifest,
+        layout: fs.existsSync(files.layout) ? readJsonFile(files.layout) : {},
+        assets: collectWorkflowPackageAssets(files.root),
+    };
 }
 function isSafeWorkflowId(value) {
     // Workflow names are user-facing, so Unicode and spaces are deliberately
     // allowed. Only reject strings that could make the JSON file escape its
     // workspace-local .agentstorm/workflows directory.
-    return (value.length > 0 &&
-        value !== "." &&
-        value !== ".." &&
-        !/[\\/\0]/.test(value));
+    return value.length > 0 && value !== "." && value !== ".." && !/[\\/\0]/.test(value);
 }
 /** Read-only compatibility for Workflow files written before Prompt and
  * Skills moved from graph nodes to the Agent registry. New saves never emit
@@ -2496,9 +2621,7 @@ export function workflowReadiness(rootPath, spec) {
             const reference = prompt.slice(1).replaceAll("\\", "/");
             const safe = safePackageRelativePath(reference);
             const expected = workflowPromptRelativePath(agentId).replaceAll("\\", "/");
-            if (!safe ||
-                !reference.startsWith("prompts/") ||
-                reference !== expected) {
+            if (!safe || !reference.startsWith("prompts/") || reference !== expected) {
                 missingPromptAssets.push({
                     agentId,
                     reference,
@@ -2526,8 +2649,7 @@ export function workflowReadiness(rootPath, spec) {
                         }
                         const realRoot = fs.realpathSync(root);
                         const realTarget = fs.realpathSync(target);
-                        if (realTarget !== realRoot &&
-                            !realTarget.startsWith(`${realRoot}${path.sep}`)) {
+                        if (realTarget !== realRoot && !realTarget.startsWith(`${realRoot}${path.sep}`)) {
                             missingPromptAssets.push({
                                 agentId,
                                 reference,
@@ -2617,9 +2739,7 @@ export async function workflowReadinessWithBackend(rootPath, spec, backend, skil
 }
 function isSafeWorkspaceRelativePath(value) {
     const normalized = value.replaceAll("\\", "/");
-    if (!normalized ||
-        normalized.startsWith("/") ||
-        /^[A-Za-z]:\//.test(normalized))
+    if (!normalized || normalized.startsWith("/") || /^[A-Za-z]:\//.test(normalized))
         return false;
     return normalized
         .split("/")
@@ -2646,7 +2766,7 @@ function readLegacyAgentWorkflowBindings(rootPath) {
     }
 }
 function sessionPathSegment(agentId) {
-    return encodeURIComponent(agentId).replace(/[.']/g, (char) => char === "." ? "%2E" : "%27");
+    return encodeURIComponent(agentId).replace(/[.']/g, (char) => (char === "." ? "%2E" : "%27"));
 }
 function sessionWorkflowFiles(rootPath) {
     const sessionsRoot = path.join(rootPath, ".agentstorm", "sessions");

package/dist/template-library.js

@@ -1,10 +1,10 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { createHash } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { fileURLToPath } from "node:url";
 import { safeParseWorkflowSpec } from "@agentstorm/protocol";
 import { nowBeijing } from "@agentstorm/kernel";
-import { assertInsidePackage, assertWorkflowDisplayName, recordWorkflowPackageVersion, safePackageRelativePath, workflowPackageExists, workflowPackagePaths, workflowPromptRelativePath, writeJsonAtomic as writePackageJsonAtomic, } from "./workflow-package.js";
+import { assertInsidePackage, assertWorkflowDisplayName, collectWorkflowPackageAssets, recordWorkflowPackageVersion, safePackageRelativePath, workflowPackageExists, workflowPackagePaths, workflowPromptRelativePath, writeJsonAtomic as writePackageJsonAtomic, } from "./workflow-package.js";
 const TEMPLATE_ROOT_NAME = "templates";
 const LEGACY_TEMPLATE_ROOT_NAME = "agentstorm/templates";
 const TEMPLATE_ROOT_MIGRATION_ID = "nested-template-root-v1";
@@ -48,17 +48,7 @@ function loadSeedTemplate(id) {
     const parsed = safeParseWorkflowSpec(spec);
     if (!parsed.success)
         throw new Error(`内置模板 ${id} 的 WorkflowSpec 无效`);
-    const assets = {};
-    for (const config of Object.values(parsed.data.agents)) {
-        if (!config.prompt?.startsWith("@"))
-            continue;
-        const relative = safeRelativePath(config.prompt.slice(1));
-        if (!relative)
-            throw new Error(`内置模板 ${id} 的 Prompt 路径无效`);
-        const target = path.resolve(dir, relative);
-        assertInside(dir, target);
-        assets[relative] = fs.readFileSync(target, "utf8");
-    }
+    const assets = readTemplateAssets(dir, parsed.data);
     return {
         id,
         name: manifest.name,
@@ -170,8 +160,9 @@ export class GlobalTemplateLibrary {
     }
     materialize(id, workspaceRoot, options) {
         const template = this.get(id);
-        const spec = applyAgentConfig(template.spec, options?.agentConfig);
-        const workflowId = assertWorkflowDisplayName(options?.name?.trim() || spec.name || id);
+        const configuredSpec = applyAgentConfig(template.spec, options?.agentConfig);
+        const workflowId = assertWorkflowDisplayName(options?.name?.trim() || configuredSpec.name || id);
+        const spec = { ...configuredSpec, name: workflowId };
         if (workflowPackageExists(workspaceRoot, workflowId)) {
             throw new Error(`Workflow “${workflowId}” 已存在，请更换显示名称`);
         }
@@ -313,25 +304,42 @@ export class GlobalTemplateLibrary {
     }
     writeDocument(manifest, spec, layout, assets) {
         const dir = this.templateDir(manifest.id);
-        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-        writeJsonAtomic(path.join(dir, "workflow.json"), spec);
-        writeJsonAtomic(path.join(dir, "layout.json"), layout);
-        // Prompt files are one-to-one with the current Workflow nodes. Remove
-        // stale Prompt files left by a node rename/delete before writing the new
-        // asset set; otherwise an edited global template would silently retain
-        // orphan files that are no longer part of its package.
-        fs.rmSync(path.join(dir, "prompts"), { recursive: true, force: true });
-        for (const [relative, content] of Object.entries(assets)) {
-            const safe = safeRelativePath(relative);
-            if (!safe || Buffer.byteLength(content, "utf8") > MAX_ASSET_BYTES) {
-                throw new Error(`模板 Prompt 资源无效：${relative}`);
+        fs.mkdirSync(this.rootPath, { recursive: true, mode: 0o700 });
+        const stage = path.join(this.rootPath, `.template-${randomUUID()}.tmp`);
+        const backup = path.join(this.rootPath, `.template-${randomUUID()}.bak`);
+        let movedCurrent = false;
+        try {
+            fs.mkdirSync(stage, { recursive: true, mode: 0o700 });
+            writeJsonAtomic(path.join(stage, "workflow.json"), spec);
+            writeJsonAtomic(path.join(stage, "layout.json"), layout);
+            for (const [relative, content] of Object.entries(assets)) {
+                const safe = safeRelativePath(relative);
+                if (!safe ||
+                    (!safe.startsWith(`prompts${path.sep}`) && !safe.startsWith(`assets${path.sep}`)) ||
+                    Buffer.byteLength(content, "utf8") > MAX_ASSET_BYTES) {
+                    throw new Error(`模板资源无效：${relative}`);
+                }
+                const target = path.resolve(stage, safe);
+                assertInside(stage, target);
+                fs.mkdirSync(path.dirname(target), { recursive: true });
+                fs.writeFileSync(target, content, "utf8");
+            }
+            writeJsonAtomic(path.join(stage, "manifest.json"), manifest);
+            if (fs.existsSync(dir)) {
+                fs.renameSync(dir, backup);
+                movedCurrent = true;
+            }
+            fs.renameSync(stage, dir);
+            if (movedCurrent)
+                fs.rmSync(backup, { recursive: true, force: true });
+        }
+        catch (error) {
+            fs.rmSync(stage, { recursive: true, force: true });
+            if (movedCurrent && !fs.existsSync(dir) && fs.existsSync(backup)) {
+                fs.renameSync(backup, dir);
             }
-            const target = path.resolve(dir, safe);
-            assertInside(dir, target);
-            fs.mkdirSync(path.dirname(target), { recursive: true });
-            fs.writeFileSync(target, content, "utf8");
+            throw error;
         }
-        writeJsonAtomic(path.join(dir, "manifest.json"), manifest);
     }
 }
 function parseInput(input) {
@@ -347,6 +355,9 @@ function parseInput(input) {
         const relative = safeRelativePath(key);
         if (!relative)
             throw new Error(`模板资源路径无效：${key}`);
+        if (!relative.startsWith(`prompts${path.sep}`) && !relative.startsWith(`assets${path.sep}`)) {
+            throw new Error(`模板资源必须位于 prompts/ 或 assets/：${key}`);
+        }
         if (typeof value !== "string")
             throw new Error(`模板资源必须是 UTF-8 文本：${key}`);
         if (relative in assets)
@@ -423,7 +434,8 @@ function parseLayout(value) {
     return result;
 }
 function readTemplateAssets(dir, spec) {
-    const assets = {};
+    const packageAssets = collectWorkflowPackageAssets(dir);
+    const assets = Object.fromEntries(Object.entries(packageAssets).filter(([relative]) => relative.startsWith("assets/")));
     for (const [agentId, config] of Object.entries(spec.agents)) {
         if (!config.prompt?.startsWith("@"))
             continue;
@@ -432,14 +444,10 @@ function readTemplateAssets(dir, spec) {
         if (!relative || !relative.startsWith(`prompts${path.sep}`) || relative !== expected) {
             throw new Error(`模板 Prompt 路径无效：${config.prompt}`);
         }
-        if (relative in assets)
-            continue;
-        const target = path.resolve(dir, relative);
-        assertInside(dir, target);
-        if (!fs.existsSync(target) || !fs.statSync(target).isFile()) {
+        if (!(relative in packageAssets)) {
             throw new Error(`模板 Prompt 不存在：${relative}`);
         }
-        assets[relative] = fs.readFileSync(target, "utf8");
+        assets[relative.split(path.sep).join("/")] = packageAssets[relative];
     }
     return assets;
 }

package/dist/templates/general-workflow/prompts/planner.md

@@ -24,6 +24,6 @@ role: planner
 
 ## 计划结果
 
-生成完整的 `PlanResult`：`revision`、`summary`、`tasks` 和 `resources`。每个 task 至少包含 `displayId`、`title`、`description`、`acceptanceCriteria` 与 `dependencyDisplayIds`。
+生成完整的 `PlanResult`：`revision`、`summary`、`tasks`、`removedTaskDisplayIds` 和 `resources`。每个 task 至少包含 `displayId`、`title`、`description`、`acceptanceCriteria` 与 `dependencyDisplayIds`。仅在重新规划时，才把明确需要删除且尚未启动的 pending 任务写入 `removedTaskDisplayIds`；正常规划使用空数组。
 
 计划正文应说明目标、范围、关键决策、风险、验收方式和执行顺序；结构化结果必须与正文一致。需要审批者查看的计划文件和补充材料通过 `resources` 明确列出。

package/dist/templates/sonic-pipeline/prompts/planner.md

@@ -30,7 +30,7 @@ role: planner
 ## 计划产物
 
 - 在当前节点的 `resourceRoot` 下生成 `sonic-plan.md`，包含需求覆盖关系、任务与依赖、验收标准、风险、验证策略和人工介入点。
-- 提交完整 PlanResult：`revision`、`summary`、`tasks`、`resources`。每个任务使用稳定且唯一的 `displayId`，并填写 `title`、`description`、`acceptanceCriteria`、`dependencyDisplayIds`；任务相关输入或交付文件放入任务级 `resources`。
+- 提交完整 PlanResult：`revision`、`summary`、`tasks`、`removedTaskDisplayIds`、`resources`。每个任务使用稳定且唯一的 `displayId`，并填写 `title`、`description`、`acceptanceCriteria`、`dependencyDisplayIds`；任务相关输入或交付文件放入任务级 `resources`。仅在重新规划时，才把明确需要删除且尚未启动的 pending 任务写入 `removedTaskDisplayIds`；正常规划使用空数组。
 - 计划级 `resources` 必须包含节点 Summary、`sonic-plan.md`、已批准的 `requirements-analysis.md` 与 `prd.md`，以及审批者需要查看的关键证据。正文和结构化 PlanResult 必须一致。
 - 不创建旧版任务清单，不写死 Summary 路径，也不手工推进节点；AgentStorm 负责保存计划、创建任务、发起第二次人工审批和后续调度。
 

package/dist/workflow-package.d.ts

@@ -18,13 +18,33 @@ export interface WorkflowPackageManifest {
     description: string;
     version: number;
     source?: {
-        kind: "blank" | "template" | "bundle";
-        templateId?: string;
-        templateVersion?: number;
+        kind: "blank";
+    } | {
+        kind: "template";
+        templateId: string;
+        templateVersion: number;
+    } | {
+        kind: "bundle";
+    } | {
+        kind: "copy";
+        workflowName: string;
+        workflowVersion: number;
+    };
+    publication?: {
+        templateId: string;
+        templateVersion: number;
     };
     createdAt: string;
     updatedAt: string;
 }
+export interface WorkflowPackageSnapshotInput {
+    workspaceRoot: string;
+    name: string;
+    spec: unknown;
+    layout: unknown;
+    assets: Record<string, string>;
+    manifest: WorkflowPackageManifest;
+}
 export interface WorkflowPackagePaths {
     root: string;
     manifest: string;
@@ -41,6 +61,13 @@ export declare function listWorkflowPackageNames(workspaceRoot: string): string[
 export declare function readJsonFile<T>(filePath: string): T;
 export declare function writeJsonAtomic(filePath: string, value: unknown): void;
 export declare function writeTextAtomic(filePath: string, value: string): void;
+/**
+ * Write a complete project Workflow package and expose it with one directory
+ * rename. Runtime/session state is intentionally outside this input, and the
+ * new package always starts with one local Workflow version.
+ */
+export declare function writeWorkflowPackageSnapshot(input: WorkflowPackageSnapshotInput): WorkflowPackagePaths;
+export declare function collectWorkflowPackageAssets(packageRoot: string): Record<string, string>;
 export declare function safePackageRelativePath(value: string): string | null;
 export declare function assertInsidePackage(packageRoot: string, candidate: string): void;
 export declare function recordWorkflowPackageVersion(paths: WorkflowPackagePaths, raw: string): number;

package/dist/workflow-package.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { randomUUID } from "node:crypto";
 /**
  * The on-disk contract for a project Workflow.  A Workflow is one directory
  * named by its display name; executable graph, canvas metadata and Prompt
@@ -34,6 +35,17 @@ export function workflowPackagePaths(workspaceRoot, displayName) {
         versions: path.join(root, ".versions"),
     };
 }
+function packagePathsFromRoot(root) {
+    return {
+        root,
+        manifest: path.join(root, "manifest.json"),
+        workflow: path.join(root, "workflow.json"),
+        layout: path.join(root, "layout.json"),
+        prompts: path.join(root, "prompts"),
+        assets: path.join(root, "assets"),
+        versions: path.join(root, ".versions"),
+    };
+}
 export function workflowPackageExists(workspaceRoot, displayName) {
     const paths = workflowPackagePaths(workspaceRoot, displayName);
     return fs.existsSync(paths.root) && fs.statSync(paths.root).isDirectory();
@@ -42,8 +54,12 @@ export function listWorkflowPackageNames(workspaceRoot) {
     const root = path.join(workspaceRoot, WORKFLOW_PACKAGE_ROOT);
     if (!fs.existsSync(root))
         return [];
-    return fs.readdirSync(root, { withFileTypes: true })
-        .filter((entry) => entry.isDirectory() && entry.name !== "." && entry.name !== ".." && !entry.name.startsWith("."))
+    return fs
+        .readdirSync(root, { withFileTypes: true })
+        .filter((entry) => entry.isDirectory() &&
+        entry.name !== "." &&
+        entry.name !== ".." &&
+        !entry.name.startsWith("."))
         .map((entry) => entry.name)
         .filter((name) => {
         try {
@@ -69,6 +85,76 @@ export function writeTextAtomic(filePath, value) {
     fs.writeFileSync(tmp, value, "utf8");
     fs.renameSync(tmp, filePath);
 }
+/**
+ * Write a complete project Workflow package and expose it with one directory
+ * rename. Runtime/session state is intentionally outside this input, and the
+ * new package always starts with one local Workflow version.
+ */
+export function writeWorkflowPackageSnapshot(input) {
+    const name = assertWorkflowDisplayName(input.name);
+    const target = workflowPackagePaths(input.workspaceRoot, name);
+    if (fs.existsSync(target.root))
+        throw new Error(`Workflow “${name}” 已存在`);
+    const parent = path.dirname(target.root);
+    fs.mkdirSync(parent, { recursive: true });
+    const stageRoot = path.join(parent, `.workflow-${randomUUID()}.tmp`);
+    const stage = packagePathsFromRoot(stageRoot);
+    try {
+        fs.mkdirSync(stage.root, { recursive: true, mode: 0o700 });
+        for (const [relativePath, content] of Object.entries(input.assets)) {
+            const safe = safePackageRelativePath(relativePath);
+            if (!safe ||
+                (!safe.startsWith(`prompts${path.sep}`) && !safe.startsWith(`assets${path.sep}`))) {
+                throw new Error(`Workflow 资源路径无效：${relativePath}`);
+            }
+            const destination = path.resolve(stage.root, safe);
+            assertInsidePackage(stage.root, destination);
+            fs.mkdirSync(path.dirname(destination), { recursive: true });
+            fs.writeFileSync(destination, content, "utf8");
+        }
+        writeJsonAtomic(stage.workflow, input.spec);
+        writeJsonAtomic(stage.layout, input.layout);
+        writeJsonAtomic(stage.manifest, input.manifest);
+        recordWorkflowPackageVersion(stage, JSON.stringify(input.spec, null, 2));
+        fs.renameSync(stage.root, target.root);
+        return target;
+    }
+    catch (error) {
+        fs.rmSync(stage.root, { recursive: true, force: true });
+        throw error;
+    }
+}
+export function collectWorkflowPackageAssets(packageRoot) {
+    const result = {};
+    for (const directory of ["prompts", "assets"]) {
+        const root = path.join(packageRoot, directory);
+        if (!fs.existsSync(root))
+            continue;
+        collectTextAssets(packageRoot, root, result);
+    }
+    return result;
+}
+function collectTextAssets(packageRoot, directory, result) {
+    for (const entry of fs.readdirSync(directory, { withFileTypes: true })) {
+        const target = path.join(directory, entry.name);
+        const stat = fs.lstatSync(target);
+        if (stat.isSymbolicLink())
+            throw new Error(`Workflow 资源不能是符号链接：${entry.name}`);
+        if (stat.isDirectory()) {
+            collectTextAssets(packageRoot, target, result);
+            continue;
+        }
+        if (!stat.isFile())
+            throw new Error(`Workflow 资源类型无效：${entry.name}`);
+        if (stat.size > 8 * 1024 * 1024)
+            throw new Error(`Workflow 资源超过 8 MiB：${entry.name}`);
+        const relative = path.relative(packageRoot, target);
+        const safe = safePackageRelativePath(relative);
+        if (!safe)
+            throw new Error(`Workflow 资源路径无效：${relative}`);
+        result[safe.split(path.sep).join("/")] = fs.readFileSync(target, "utf8");
+    }
+}
 export function safePackageRelativePath(value) {
     const normalized = value.replaceAll("\\", "/");
     if (!normalized || normalized.startsWith("/") || /^[A-Za-z]:\//.test(normalized))
@@ -87,7 +173,8 @@ export function assertInsidePackage(packageRoot, candidate) {
 }
 export function recordWorkflowPackageVersion(paths, raw) {
     fs.mkdirSync(paths.versions, { recursive: true });
-    const versions = fs.readdirSync(paths.versions)
+    const versions = fs
+        .readdirSync(paths.versions)
         .map((file) => /^(\d+)\.json$/.exec(file)?.[1])
         .filter(Boolean)
         .map(Number);
@@ -98,16 +185,21 @@ export function recordWorkflowPackageVersion(paths, raw) {
 export function latestWorkflowPackageVersion(paths) {
     if (!fs.existsSync(paths.versions))
         return 0;
-    return fs.readdirSync(paths.versions)
+    return (fs
+        .readdirSync(paths.versions)
         .map((file) => /^(\d+)\.json$/.exec(file)?.[1])
         .filter(Boolean)
         .map(Number)
         .filter((version) => Number.isSafeInteger(version) && version > 0)
         .sort((a, b) => a - b)
-        .at(-1) ?? 0;
+        .at(-1) ?? 0);
 }
 export function workflowPromptRelativePath(nodeId) {
-    const safe = nodeId.trim().replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "").toLowerCase();
+    const safe = nodeId
+        .trim()
+        .replace(/[^a-zA-Z0-9._-]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .toLowerCase();
     return path.join("prompts", `${safe || "agent"}.md`);
 }
 //# sourceMappingURL=workflow-package.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentstorm/server",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "AgentStorm resident Pipeline service",
   "files": [
     "dist"
@@ -19,9 +19,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@agentstorm/agent-runtime": "0.2.5",
-    "@agentstorm/kernel": "0.2.5",
-    "@agentstorm/protocol": "0.2.5",
+    "@agentstorm/agent-runtime": "0.2.6",
+    "@agentstorm/kernel": "0.2.6",
+    "@agentstorm/protocol": "0.2.6",
     "express": "^4.21.0"
   },
   "license": "AGPL-3.0-or-later",