@aglyn/aglyn 1.0.0-beta.143

package/src/lib/app-utils/wistia-embed.d.ts

@@ -0,0 +1,86 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * A Wistia video, as the Video element plays it (AGL-2826).
+ *
+ * ## Only the media id survives
+ *
+ * An author pastes whatever link Wistia showed them. That string never reaches
+ * a frame: every builder below reads the media's hashed id out of it and
+ * rebuilds the address, so the only frame this module can produce is on
+ * {@link WISTIA_PLAYER_ORIGIN}. That closed set is what lets the tenant's
+ * `frame-src` name the origin for every site, and it is the rule
+ * `parseVideoEmbedSrc` already holds YouTube and Vimeo to.
+ *
+ * ## The iframe embed, not the player script
+ *
+ * Wistia offers two embeds. The script embed runs Wistia's JavaScript in the
+ * page itself, so every site would need `connect-src`, `img-src` and
+ * `media-src` grants for Wistia's hosts, and the player's storage and beacons
+ * would run as the site. The iframe embed runs all of that inside a document on
+ * Wistia's origin, under Wistia's own policy: the page needs one `frame-src`
+ * entry, and whatever the player stores is keyed to Wistia inside the site's
+ * partition rather than written as the site.
+ *
+ * Measured on 2026-09-10: `fast.wistia.net/embed/iframe/{id}` answers 200 with
+ * no redirect, so no second origin is involved in loading the frame.
+ */
+/** The only origin a Wistia player frame is ever loaded from. */
+export declare const WISTIA_PLAYER_ORIGIN = "https://fast.wistia.net";
+/**
+ * The hashed id a Wistia link names, or `undefined` for anything else.
+ *
+ * A share link (`/s/{slug}`) names no id and is refused rather than guessed
+ * at, as is a value that is not an http(s) URL.
+ */
+export declare function wistiaMediaId(value: unknown): string | undefined;
+/**
+ * The player page for a Wistia link, with no per-visit options: what
+ * `VideoObject.embedUrl` names.
+ */
+export declare function wistiaEmbedUrl(value: unknown): string | undefined;
+export interface WistiaPlayerOptions {
+    /**
+     * Start playing as soon as the player is ready. On unless this is exactly
+     * `false`; see {@link wistiaPlayerSrc} for which frame turns it off.
+     */
+    autoPlay?: boolean;
+    /**
+     * Ask Wistia not to record the viewing session (its `doNotTrack` embed
+     * option). The element sets it for every visitor whose analytics consent is
+     * not on record.
+     */
+    doNotTrack?: boolean;
+    /** Start without sound. */
+    muted?: boolean;
+    /** Restart at the end (`endVideoBehavior=loop`). */
+    loop?: boolean;
+}
+/**
+ * The address of a Wistia player frame.
+ *
+ * `autoPlay` is on by default, because the usual frame is the one a visitor's
+ * press loads: it exists only because somebody pressed play, and a second play
+ * button inside the player would ask them twice.
+ *
+ * The frame a page loads before anyone has pressed anything ("Load the player
+ * with the page", AGL-2962) passes `autoPlay: false`. The address then says
+ * `autoPlay=false` rather than leaving the option out: an option in the embed
+ * overrides the media's own settings in the Wistia account, and those may be
+ * set to autoplay.
+ */
+export declare function wistiaPlayerSrc(value: unknown, options?: WistiaPlayerOptions): string | undefined;

package/src/lib/app-utils/wistia-embed.js

@@ -0,0 +1,119 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * A Wistia video, as the Video element plays it (AGL-2826).
+ *
+ * ## Only the media id survives
+ *
+ * An author pastes whatever link Wistia showed them. That string never reaches
+ * a frame: every builder below reads the media's hashed id out of it and
+ * rebuilds the address, so the only frame this module can produce is on
+ * {@link WISTIA_PLAYER_ORIGIN}. That closed set is what lets the tenant's
+ * `frame-src` name the origin for every site, and it is the rule
+ * `parseVideoEmbedSrc` already holds YouTube and Vimeo to.
+ *
+ * ## The iframe embed, not the player script
+ *
+ * Wistia offers two embeds. The script embed runs Wistia's JavaScript in the
+ * page itself, so every site would need `connect-src`, `img-src` and
+ * `media-src` grants for Wistia's hosts, and the player's storage and beacons
+ * would run as the site. The iframe embed runs all of that inside a document on
+ * Wistia's origin, under Wistia's own policy: the page needs one `frame-src`
+ * entry, and whatever the player stores is keyed to Wistia inside the site's
+ * partition rather than written as the site.
+ *
+ * Measured on 2026-09-10: `fast.wistia.net/embed/iframe/{id}` answers 200 with
+ * no redirect, so no second origin is involved in loading the frame.
+ */ /** The only origin a Wistia player frame is ever loaded from. */ export const WISTIA_PLAYER_ORIGIN = 'https://fast.wistia.net';
+/** A hashed id: ten lowercase letters and digits, e.g. `e4a27b971d`. */ const HASHED_ID = /^[a-z0-9]{10}$/;
+/**
+ * The paths a Wistia link carries a media id in. Wistia's oEmbed endpoint
+ * matches on the path rather than the host, and so does this; the host is
+ * checked separately by {@link isWistiaHostname}.
+ */ const MEDIA_ID_PATHS = [
+    // A media page: `https://acme.wistia.com/medias/{id}`, and its `/manage`.
+    /^\/medias\/([^/]+)(?:\/manage)?\/?$/,
+    // The short form of the same page.
+    /^\/m\/([^/]+)\/?$/,
+    // An iframe embed's own address.
+    /^\/embed\/iframe\/([^/]+)\/?$/,
+    // A script embed's media address, with or without its `.jsonp` suffix.
+    /^\/embed\/medias\/([^/.]+)(?:\.jsonp?)?\/?$/
+];
+/**
+ * Whether a hostname is Wistia's. Exact or dot-anchored matches only, so
+ * `wistia.com.example.net` and `notwistia.com` are refused.
+ */ function isWistiaHostname(hostname) {
+    return [
+        'wistia.com',
+        'wistia.net',
+        'wi.st'
+    ].some((domain)=>hostname === domain || hostname.endsWith(`.${domain}`));
+}
+/**
+ * The hashed id a Wistia link names, or `undefined` for anything else.
+ *
+ * A share link (`/s/{slug}`) names no id and is refused rather than guessed
+ * at, as is a value that is not an http(s) URL.
+ */ export function wistiaMediaId(value) {
+    if (typeof value !== 'string') return undefined;
+    let url;
+    try {
+        url = new URL(value.trim());
+    } catch (unused) {
+        return undefined;
+    }
+    if (url.protocol !== 'https:' && url.protocol !== 'http:') return undefined;
+    if (!isWistiaHostname(url.hostname)) return undefined;
+    for (const pattern of MEDIA_ID_PATHS){
+        var _pattern_exec;
+        const id = (_pattern_exec = pattern.exec(url.pathname)) == null ? void 0 : _pattern_exec[1];
+        if (id && HASHED_ID.test(id)) return id;
+    }
+    return undefined;
+}
+/**
+ * The player page for a Wistia link, with no per-visit options: what
+ * `VideoObject.embedUrl` names.
+ */ export function wistiaEmbedUrl(value) {
+    const id = wistiaMediaId(value);
+    return id ? `${WISTIA_PLAYER_ORIGIN}/embed/iframe/${id}` : undefined;
+}
+/**
+ * The address of a Wistia player frame.
+ *
+ * `autoPlay` is on by default, because the usual frame is the one a visitor's
+ * press loads: it exists only because somebody pressed play, and a second play
+ * button inside the player would ask them twice.
+ *
+ * The frame a page loads before anyone has pressed anything ("Load the player
+ * with the page", AGL-2962) passes `autoPlay: false`. The address then says
+ * `autoPlay=false` rather than leaving the option out: an option in the embed
+ * overrides the media's own settings in the Wistia account, and those may be
+ * set to autoplay.
+ */ export function wistiaPlayerSrc(value, options = {}) {
+    const embedUrl = wistiaEmbedUrl(value);
+    if (!embedUrl) return undefined;
+    const params = new URLSearchParams({
+        autoPlay: options.autoPlay === false ? 'false' : 'true'
+    });
+    if (options.doNotTrack) params.set('doNotTrack', 'true');
+    if (options.muted) params.set('muted', 'true');
+    if (options.loop) params.set('endVideoBehavior', 'loop');
+    return `${embedUrl}?${params.toString()}`;
+}
+
+//# sourceMappingURL=wistia-embed.js.map

package/src/lib/app-utils/wistia-embed.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/wistia-embed.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * A Wistia video, as the Video element plays it (AGL-2826).\n *\n * ## Only the media id survives\n *\n * An author pastes whatever link Wistia showed them. That string never reaches\n * a frame: every builder below reads the media's hashed id out of it and\n * rebuilds the address, so the only frame this module can produce is on\n * {@link WISTIA_PLAYER_ORIGIN}. That closed set is what lets the tenant's\n * `frame-src` name the origin for every site, and it is the rule\n * `parseVideoEmbedSrc` already holds YouTube and Vimeo to.\n *\n * ## The iframe embed, not the player script\n *\n * Wistia offers two embeds. The script embed runs Wistia's JavaScript in the\n * page itself, so every site would need `connect-src`, `img-src` and\n * `media-src` grants for Wistia's hosts, and the player's storage and beacons\n * would run as the site. The iframe embed runs all of that inside a document on\n * Wistia's origin, under Wistia's own policy: the page needs one `frame-src`\n * entry, and whatever the player stores is keyed to Wistia inside the site's\n * partition rather than written as the site.\n *\n * Measured on 2026-09-10: `fast.wistia.net/embed/iframe/{id}` answers 200 with\n * no redirect, so no second origin is involved in loading the frame.\n */\n\n/** The only origin a Wistia player frame is ever loaded from. */\nexport const WISTIA_PLAYER_ORIGIN = 'https://fast.wistia.net'\n\n/** A hashed id: ten lowercase letters and digits, e.g. `e4a27b971d`. */\nconst HASHED_ID = /^[a-z0-9]{10}$/\n\n/**\n * The paths a Wistia link carries a media id in. Wistia's oEmbed endpoint\n * matches on the path rather than the host, and so does this; the host is\n * checked separately by {@link isWistiaHostname}.\n */\nconst MEDIA_ID_PATHS: readonly RegExp[] = [\n  // A media page: `https://acme.wistia.com/medias/{id}`, and its `/manage`.\n  /^\\/medias\\/([^/]+)(?:\\/manage)?\\/?$/,\n  // The short form of the same page.\n  /^\\/m\\/([^/]+)\\/?$/,\n  // An iframe embed's own address.\n  /^\\/embed\\/iframe\\/([^/]+)\\/?$/,\n  // A script embed's media address, with or without its `.jsonp` suffix.\n  /^\\/embed\\/medias\\/([^/.]+)(?:\\.jsonp?)?\\/?$/,\n]\n\n/**\n * Whether a hostname is Wistia's. Exact or dot-anchored matches only, so\n * `wistia.com.example.net` and `notwistia.com` are refused.\n */\nfunction isWistiaHostname(hostname: string): boolean {\n  return ['wistia.com', 'wistia.net', 'wi.st'].some(\n    (domain) => hostname === domain || hostname.endsWith(`.${domain}`),\n  )\n}\n\n/**\n * The hashed id a Wistia link names, or `undefined` for anything else.\n *\n * A share link (`/s/{slug}`) names no id and is refused rather than guessed\n * at, as is a value that is not an http(s) URL.\n */\nexport function wistiaMediaId(value: unknown): string | undefined {\n  if (typeof value !== 'string') return undefined\n  let url: URL\n  try {\n    url = new URL(value.trim())\n  } catch {\n    return undefined\n  }\n  if (url.protocol !== 'https:' && url.protocol !== 'http:') return undefined\n  if (!isWistiaHostname(url.hostname)) return undefined\n  for (const pattern of MEDIA_ID_PATHS) {\n    const id = pattern.exec(url.pathname)?.[1]\n    if (id && HASHED_ID.test(id)) return id\n  }\n  return undefined\n}\n\n/**\n * The player page for a Wistia link, with no per-visit options: what\n * `VideoObject.embedUrl` names.\n */\nexport function wistiaEmbedUrl(value: unknown): string | undefined {\n  const id = wistiaMediaId(value)\n  return id ? `${WISTIA_PLAYER_ORIGIN}/embed/iframe/${id}` : undefined\n}\n\nexport interface WistiaPlayerOptions {\n  /**\n   * Start playing as soon as the player is ready. On unless this is exactly\n   * `false`; see {@link wistiaPlayerSrc} for which frame turns it off.\n   */\n  autoPlay?: boolean\n  /**\n   * Ask Wistia not to record the viewing session (its `doNotTrack` embed\n   * option). The element sets it for every visitor whose analytics consent is\n   * not on record.\n   */\n  doNotTrack?: boolean\n  /** Start without sound. */\n  muted?: boolean\n  /** Restart at the end (`endVideoBehavior=loop`). */\n  loop?: boolean\n}\n\n/**\n * The address of a Wistia player frame.\n *\n * `autoPlay` is on by default, because the usual frame is the one a visitor's\n * press loads: it exists only because somebody pressed play, and a second play\n * button inside the player would ask them twice.\n *\n * The frame a page loads before anyone has pressed anything (\"Load the player\n * with the page\", AGL-2962) passes `autoPlay: false`. The address then says\n * `autoPlay=false` rather than leaving the option out: an option in the embed\n * overrides the media's own settings in the Wistia account, and those may be\n * set to autoplay.\n */\nexport function wistiaPlayerSrc(\n  value: unknown,\n  options: WistiaPlayerOptions = {},\n): string | undefined {\n  const embedUrl = wistiaEmbedUrl(value)\n  if (!embedUrl) return undefined\n  const params = new URLSearchParams({\n    autoPlay: options.autoPlay === false ? 'false' : 'true',\n  })\n  if (options.doNotTrack) params.set('doNotTrack', 'true')\n  if (options.muted) params.set('muted', 'true')\n  if (options.loop) params.set('endVideoBehavior', 'loop')\n  return `${embedUrl}?${params.toString()}`\n}\n"],"names":["WISTIA_PLAYER_ORIGIN","HASHED_ID","MEDIA_ID_PATHS","isWistiaHostname","hostname","some","domain","endsWith","wistiaMediaId","value","undefined","url","URL","trim","protocol","pattern","id","exec","pathname","test","wistiaEmbedUrl","wistiaPlayerSrc","options","embedUrl","params","URLSearchParams","autoPlay","doNotTrack","set","muted","loop","toString"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GAED,+DAA+D,GAC/D,OAAO,MAAMA,uBAAuB,0BAAyB;AAE7D,sEAAsE,GACtE,MAAMC,YAAY;AAElB;;;;CAIC,GACD,MAAMC,iBAAoC;IACxC,0EAA0E;IAC1E;IACA,mCAAmC;IACnC;IACA,iCAAiC;IACjC;IACA,uEAAuE;IACvE;CACD;AAED;;;CAGC,GACD,SAASC,iBAAiBC,QAAgB;IACxC,OAAO;QAAC;QAAc;QAAc;KAAQ,CAACC,IAAI,CAC/C,CAACC,SAAWF,aAAaE,UAAUF,SAASG,QAAQ,CAAC,CAAC,CAAC,EAAED,QAAQ;AAErE;AAEA;;;;;CAKC,GACD,OAAO,SAASE,cAAcC,KAAc;IAC1C,IAAI,OAAOA,UAAU,UAAU,OAAOC;IACtC,IAAIC;IACJ,IAAI;QACFA,MAAM,IAAIC,IAAIH,MAAMI,IAAI;IAC1B,EAAE,eAAM;QACN,OAAOH;IACT;IACA,IAAIC,IAAIG,QAAQ,KAAK,YAAYH,IAAIG,QAAQ,KAAK,SAAS,OAAOJ;IAClE,IAAI,CAACP,iBAAiBQ,IAAIP,QAAQ,GAAG,OAAOM;IAC5C,KAAK,MAAMK,WAAWb,eAAgB;YACzBa;QAAX,MAAMC,MAAKD,gBAAAA,QAAQE,IAAI,CAACN,IAAIO,QAAQ,sBAAzBH,aAA4B,CAAC,EAAE;QAC1C,IAAIC,MAAMf,UAAUkB,IAAI,CAACH,KAAK,OAAOA;IACvC;IACA,OAAON;AACT;AAEA;;;CAGC,GACD,OAAO,SAASU,eAAeX,KAAc;IAC3C,MAAMO,KAAKR,cAAcC;IACzB,OAAOO,KAAK,GAAGhB,qBAAqB,cAAc,EAAEgB,IAAI,GAAGN;AAC7D;AAoBA;;;;;;;;;;;;CAYC,GACD,OAAO,SAASW,gBACdZ,KAAc,EACda,UAA+B,CAAC,CAAC;IAEjC,MAAMC,WAAWH,eAAeX;IAChC,IAAI,CAACc,UAAU,OAAOb;IACtB,MAAMc,SAAS,IAAIC,gBAAgB;QACjCC,UAAUJ,QAAQI,QAAQ,KAAK,QAAQ,UAAU;IACnD;IACA,IAAIJ,QAAQK,UAAU,EAAEH,OAAOI,GAAG,CAAC,cAAc;IACjD,IAAIN,QAAQO,KAAK,EAAEL,OAAOI,GAAG,CAAC,SAAS;IACvC,IAAIN,QAAQQ,IAAI,EAAEN,OAAOI,GAAG,CAAC,oBAAoB;IACjD,OAAO,GAAGL,SAAS,CAAC,EAAEC,OAAOO,QAAQ,IAAI;AAC3C"}

package/src/lib/app-utils/workflows.d.ts

@@ -0,0 +1,136 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type HostFunction } from './functions';
+import type { HostVariable } from './variables';
+/**
+ * Workflows (Workflow Builder, AGL-101): named pipelines of host-function
+ * calls. Each step evaluates its argument expressions over host variables
+ * and previous step results, runs the function through the safe evaluator,
+ * and stores the result under its name for later steps. Pure and bounded —
+ * no I/O, no loops. Site-event triggers arrive in v2.
+ */
+/**
+ * Host events a workflow can trigger on (AGL-128). The tenant emits these
+ * server-side: form submit API, analytics collector, membership APIs.
+ *
+ * SERVER DOORS ONLY. An event exists because a request handler that already
+ * performed the write called `emitHostEvent` beside it; nothing watches the
+ * database. So a contact created by a console user's client-direct Firestore
+ * write fires nothing, and a CRM event (AGL-2605) is only as complete as the
+ * set of server paths that emit it — the capture doors for `contactCreated`,
+ * the `crm/contact-stage` route for `contactStageChanged`.
+ */
+export declare const HOST_EVENT_TYPES: readonly ["formSubmission", "pageView", "memberSignUp", "memberSignIn", "memberSignOut", "lead", "booking", "taskCompleted", "contactCreated", "contactStageChanged", "dealStageChanged", "dealWon", "dealLost"];
+export type HostEventType = (typeof HOST_EVENT_TYPES)[number];
+/**
+ * How a built-in event reads in a trigger picker and a run history row.
+ *
+ * `Partial`, deliberately. The event list grows a line at a time from
+ * several hands, and an exhaustive record would make every addition a
+ * compile error until its label landed in the same change — which is the
+ * right pressure on a stage picker and the wrong one here, where two
+ * branches adding events beside each other must merge cleanly. An unlabeled
+ * event falls back to its identifier through {@link hostEventLabel}, which
+ * is what every picker rendered for every event until AGL-2605.
+ */
+export declare const HOST_EVENT_LABELS: Partial<Record<HostEventType, string>>;
+/**
+ * `formSubmission` → `Form submitted`; a custom event keeps its own name,
+ * because the author chose it and it is already the word they think in.
+ */
+export declare function hostEventLabel(event: string | undefined | null): string;
+/**
+ * The payload keys each built-in event puts in scope, for the filter
+ * expression and the step conditions — the thing an author has to know to
+ * write `lifecycleStage == "customer"` and had nowhere to read.
+ *
+ * Documented from the emitters, not from a schema, because the payload is
+ * whatever the emitting door passed: `formSubmission` carries every
+ * submitted field under its own name on top of the two fixed keys, which
+ * no fixed list can enumerate. `Partial` for the same reason as the labels.
+ */
+export declare const HOST_EVENT_PAYLOAD_KEYS: Partial<Record<HostEventType, readonly string[]>>;
+/**
+ * One sentence naming what a trigger's filter and conditions can read, or
+ * `null` for an event whose payload is not documented — a custom event, or
+ * a built-in one nobody has written down yet.
+ */
+export declare function hostEventPayloadHint(event: string | undefined | null): string | null;
+export interface HostWorkflowTrigger {
+    event: HostEventType;
+    /**
+     * Optional expression over the event payload (plus variables); the
+     * workflow only runs when it evaluates truthy (e.g. `path == "/pricing"`).
+     */
+    filter?: string;
+}
+export interface HostWorkflowStep {
+    /**
+     * Host function to run — by doc id (AGL-261), rename-safe. Steps saved
+     * before AGL-261 carry only `functionName`; executors resolve id first.
+     */
+    functionId?: string;
+    /** Legacy name reference, kept as the display hint; `functionId` wins. */
+    functionName: string;
+    /**
+     * One expression per function parameter, evaluated over variables and
+     * previous step results (e.g. `price * qty`, `step1 + 10`).
+     */
+    args: string[];
+    /** Scope name the step's result binds to; defaults to `step<N>`. */
+    resultName?: string;
+}
+/** `hosts/{hostId}/workflows/{id}` doc. */
+export interface HostWorkflow {
+    name: string;
+    steps: HostWorkflowStep[];
+    /** Scope name whose final value the workflow returns. */
+    returnValue?: string;
+    /** Event trigger (AGL-128); absent means manual/embedded use only. */
+    trigger?: HostWorkflowTrigger | null;
+}
+export declare const WORKFLOW_MAX_STEPS = 25;
+/** Max nesting across workflow→function→workflow cross-calls (AGL-129). */
+export declare const CROSS_MAX_DEPTH = 3;
+export type WorkflowRunResult = {
+    ok: true;
+    value: number | string | boolean;
+    results: Record<string, number | string | boolean>;
+} | {
+    ok: false;
+    error: string;
+    step?: number;
+};
+export interface WorkflowRunContext {
+    /** All host workflows by name, enabling function→workflow calls. */
+    workflows?: Record<string, HostWorkflow>;
+    /** Cross-call nesting depth; internal — callers omit it. */
+    depth?: number;
+}
+export declare function runWorkflow(workflow: HostWorkflow, functions: Record<string, HostFunction>, variables?: Record<string, HostVariable>, 
+/**
+ * Extra scope entries seeded ahead of the steps — event payloads (path,
+ * formName, field values) land here (AGL-128). Wins over variables.
+ */
+extraScope?: Record<string, number | string | boolean>, context?: WorkflowRunContext): WorkflowRunResult;
+/**
+ * Computed variables (AGL-129): a variable with `workflowName` takes the
+ * named workflow's result as its value at compose time; failures keep the
+ * stored fallback value. Each computed variable evaluates once, bounded
+ * by the shared depth guard.
+ */
+export declare function resolveComputedVariables(variables: Record<string, HostVariable>, functions: Record<string, HostFunction>, workflows: Record<string, HostWorkflow>): Record<string, HostVariable>;