@artemiskit/core 0.6.0 → 0.6.1

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @artemiskit/core
 
+## 0.6.1
+
+### Patch Changes
+
+- Add native controlled workflow execution for milestone 0.6.1. CLI workflow run/preflight and SDK
+  sessions share strict tool and permission enforcement, cumulative budgets, explicit tool-protocol
+  preflight, measured-usage states, bounded events, cancellation, and truthful cleanup evidence.
+  Run against detached simulated state or a disposable Docker filesystem with a fixed local image,
+  no host mounts or network, and no arbitrary command tool. Save bounded execution metadata separately
+  from explicitly requested sensitive state exports. Task verification remains unavailable until 0.6.2.
+
+  OpenAI and Ling workflow transports forward abort signals, disable automatic retries, and distinguish
+  missing or malformed token usage from explicitly measured zero. Preserve existing scenario APIs and
+  offline workflow validation. Package versions remain independent of the milestone label.
+
 ## 0.6.0
 
 ### Minor Changes

package/README.md

@@ -22,6 +22,18 @@ This package provides the foundational components for ArtemisKit:
 
 ## Usage
 
+Controlled agent workflows use `createAgentWorkflowSession({ workflow, target })` or
+`runAgentWorkflow({ workflow, target })`, with `createModelClientTarget(client)` for existing adapters.
+The native session enforces declared tools, original argument schemas, permissions, cumulative
+budgets, and bounded cancellation/cleanup. Environments are fresh simulated state or a disposable
+Docker filesystem; unsupported authority fails closed.
+
+The returned `record` contains bounded metadata. `state` and `transcript` are sensitive working data
+and are not persisted automatically. `taskVerification` remains `unavailable` in 0.6.1; outcome
+assertions are retained for 0.6.2. See the
+[execution guide](https://github.com/code-sensei/artemiskit/blob/main/docs/workflow-execution.md)
+for session events, transport limits, Docker prerequisites, and CLI/SDK use.
+
 Most users should use the [`@artemiskit/cli`](https://www.npmjs.com/package/@artemiskit/cli) package for running evaluations. This package is primarily for programmatic usage or building custom integrations.
 
 ```typescript

package/dist/adapters/types.d.ts

@@ -28,6 +28,10 @@ export interface ToolCall {
  * Options for generating a completion
  */
 export interface GenerateOptions {
+    /** Optional transport cancellation; consult capabilities before relying on it. */
+    signal?: AbortSignal;
+    /** Override retries per request when a host owns cumulative admission budgets. */
+    maxRetries?: number;
     prompt: string | ChatMessage[];
     model?: string;
     maxTokens?: number;
@@ -76,6 +80,8 @@ export interface TokenUsage {
  * Result from a generation request
  */
 export interface GenerateResult {
+    /** False when zero counts are placeholders rather than provider-reported usage. */
+    usageAvailable?: boolean;
     id: string;
     model: string;
     text: string;
@@ -93,6 +99,7 @@ export interface GenerateResult {
  * Model capabilities
  */
 export interface ModelCapabilities {
+    transportCancellation?: boolean;
     streaming: boolean;
     functionCalling: boolean;
     toolUse: boolean;

package/dist/adapters/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QACd,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACjC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,kBAAkB,CAAA;KAAE,CAAC;CACjD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,UAAU,CAAA;KAAE,CAAC;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,eAAe,GAAG,YAAY,GAAG,gBAAgB,CAAC;IACrF,YAAY,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAE5D,MAAM,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAE3F,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAExD,YAAY,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE3C,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,QAAQ,GACR,cAAc,GACd,WAAW,GACX,WAAW,GACX,WAAW,GACX,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,aAAa,GACb,QAAQ,GACR,WAAW,GACX,YAAY,GACZ,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,QAAQ,EAAE,cAAc,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,QAAQ,EAAE,WAAW,CAAC;IACtB,kBAAkB,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,QAAQ,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC1C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,QAAQ,EAAE,WAAW,CAAC;IACtB,iCAAiC;IACjC,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,UAAU,CAAC;IACtD,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,QAAQ,EAAE,YAAY,CAAC;IACvB,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mCAAmC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,qBAAqB,GACrB,sBAAsB,GACtB,iBAAiB,GACjB,sBAAsB,GACtB,uBAAuB,GACvB,iBAAiB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QACd,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACjC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAAA;KAAE,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,kBAAkB,CAAA;KAAE,CAAC;CACjD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,UAAU,CAAA;KAAE,CAAC;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,mFAAmF;IACnF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,eAAe,GAAG,YAAY,GAAG,gBAAgB,CAAC;IACrF,YAAY,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAE5D,MAAM,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAE3F,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAExD,YAAY,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE3C,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,QAAQ,GACR,cAAc,GACd,WAAW,GACX,WAAW,GACX,WAAW,GACX,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,aAAa,GACb,QAAQ,GACR,WAAW,GACX,YAAY,GACZ,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,QAAQ,EAAE,cAAc,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,QAAQ,EAAE,WAAW,CAAC;IACtB,kBAAkB,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,QAAQ,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC1C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,QAAQ,EAAE,WAAW,CAAC;IACtB,iCAAiC;IACjC,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,UAAU,CAAC;IACtD,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,QAAQ,EAAE,YAAY,CAAC;IACvB,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mCAAmC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,qBAAqB,GACrB,sBAAsB,GACtB,iBAAiB,GACjB,sBAAsB,GACtB,uBAAuB,GACvB,iBAAiB,CAAC"}

package/dist/agent-workflow/catalog.d.ts

@@ -1,4 +1,4 @@
-/** Versioned built-in capabilities. All implementations in this release are simulated. */
+/** Versioned run-local capabilities shared by simulated and disposable sandbox environments. */
 export declare const WORKFLOW_TOOL_IDS: readonly ["search", "read_document", "query_records", "read_file", "write_file", "calculator", "get_workflow_state", "request_approval", "record_decision", "draft_message", "delegate_task", "get_task_status"];
 export type WorkflowToolId = (typeof WORKFLOW_TOOL_IDS)[number];
 export type WorkflowResource = 'documents' | 'records' | 'files' | 'computation' | 'workflow_state' | 'communication' | 'coordination';
@@ -13,6 +13,7 @@ export interface WorkflowToolDescriptor {
         resource: WorkflowResource;
         access: 'read' | 'write' | 'none';
         network: 'denied';
+        /** V1's simulated label means run-local effects; file storage follows the selected environment. */
         sideEffects: 'none' | 'simulated';
     };
     evidence: {

package/dist/agent-workflow/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/catalog.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,eAAO,MAAM,iBAAiB,kNAapB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,SAAS,GACT,OAAO,GACP,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,cAAc,CAAC;AAEnB,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,cAAc,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE;QACT,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;QAClC,OAAO,EAAE,QAAQ,CAAC;QAClB,WAAW,EAAE,MAAM,GAAG,WAAW,CAAC;KACnC,CAAC;IACF,QAAQ,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC;IACpD,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAyKD,2FAA2F;AAC3F,wBAAgB,iBAAiB,IAAI,sBAAsB,EAAE,CAE5D;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAG9E"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/catalog.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,eAAO,MAAM,iBAAiB,kNAapB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,SAAS,GACT,OAAO,GACP,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,cAAc,CAAC;AAEnB,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,cAAc,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE;QACT,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;QAClC,OAAO,EAAE,QAAQ,CAAC;QAClB,mGAAmG;QACnG,WAAW,EAAE,MAAM,GAAG,WAAW,CAAC;KACnC,CAAC;IACF,QAAQ,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC;IACpD,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAyKD,2FAA2F;AAC3F,wBAAgB,iBAAiB,IAAI,sBAAsB,EAAE,CAE5D;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAG9E"}

package/dist/agent-workflow/environment.d.ts

@@ -0,0 +1,47 @@
+import { type AgentWorkflow, type WorkflowJson } from './schema.js';
+import { type SimulatedToolResult } from './simulated-tools.js';
+export type WorkflowState = {
+    [key: string]: WorkflowJson;
+};
+export interface WorkflowEnvironmentCleanup {
+    status: 'completed' | 'unresolved';
+    artifacts: 'discarded' | 'retained' | 'unknown';
+}
+/** Factories report unresolved partially-created resources without disclosing engine errors. */
+export declare class WorkflowEnvironmentInitializationError extends Error {
+    readonly cleanup: WorkflowEnvironmentCleanup & {
+        pendingOperations: number;
+    };
+    constructor(cleanup: WorkflowEnvironmentCleanup & {
+        pendingOperations: number;
+    });
+}
+/** Trusted host extension, never constructed from model output. Implementations must honor abort. */
+export interface WorkflowEnvironment {
+    readonly type: 'simulated' | 'sandbox';
+    readonly capabilities: {
+        network: 'denied';
+        commands: 'denied';
+        externalSideEffects: 'denied';
+        isolation: 'memory' | 'container';
+    };
+    execute(request: {
+        tool: string;
+        input: WorkflowJson;
+    }, signal: AbortSignal): Promise<SimulatedToolResult>;
+    snapshot(signal: AbortSignal): Promise<WorkflowState>;
+    close(signal: AbortSignal): Promise<WorkflowEnvironmentCleanup>;
+}
+export type WorkflowEnvironmentFactory = (options: {
+    workflow: AgentWorkflow;
+    initialState: WorkflowState;
+    signal: AbortSignal;
+}) => Promise<WorkflowEnvironment>;
+export declare function isWorkflowState(value: unknown): value is WorkflowState;
+/** Exact relative path grants, no globs or path normalization that could hide traversal. */
+export declare function workflowPathAllowed(workflow: AgentWorkflow, tool: string, input: WorkflowJson): boolean;
+export declare function workflowToolPermitted(workflow: AgentWorkflow, tool: string): boolean;
+/** Fixture files are explicit, bounded JSON/YAML data. Hidden/credential paths never load. */
+export declare function resolveWorkflowInitialState(workflow: AgentWorkflow, fixtureRoot?: string): Promise<WorkflowState>;
+export declare const createSimulatedWorkflowEnvironment: WorkflowEnvironmentFactory;
+//# sourceMappingURL=environment.d.ts.map

package/dist/agent-workflow/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/environment.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,YAAY,EAGlB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,KAAK,mBAAmB,EAAwB,MAAM,mBAAmB,CAAC;AAEnF,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAA;CAAE,CAAC;AAC5D,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,WAAW,GAAG,YAAY,CAAC;IACnC,SAAS,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;CACjD;AACD,gGAAgG;AAChG,qBAAa,sCAAuC,SAAQ,KAAK;IACnD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,GAAG;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE;gBAAnE,OAAO,EAAE,0BAA0B,GAAG;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE;CAGzF;AACD,qGAAqG;AACrG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE;QACrB,OAAO,EAAE,QAAQ,CAAC;QAClB,QAAQ,EAAE,QAAQ,CAAC;QACnB,mBAAmB,EAAE,QAAQ,CAAC;QAC9B,SAAS,EAAE,QAAQ,GAAG,WAAW,CAAC;KACnC,CAAC;IACF,OAAO,CACL,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,EAC9C,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACjE;AACD,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,EAAE;IACjD,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,aAAa,CAAC;IAC5B,MAAM,EAAE,WAAW,CAAC;CACrB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAEnC,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAItE;AAED,4FAA4F;AAC5F,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,YAAY,GAClB,OAAO,CAUT;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CASpF;AAED,8FAA8F;AAC9F,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,aAAa,EACvB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC,CAsExB;AAED,eAAO,MAAM,kCAAkC,EAAE,0BAkDhD,CAAC"}

package/dist/agent-workflow/index.d.ts

@@ -1,7 +1,10 @@
-/** Versioned agent workflow authoring and single-step primitives. */
+/** Versioned workflow contracts, primitives, and native controlled execution. */
 export * from './schema.js';
 export * from './parser.js';
 export * from './catalog.js';
 export * from './simulated-tools.js';
 export * from './target.js';
+export * from './environment.js';
+export * from './sandbox.js';
+export * from './session.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/agent-workflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,UAAU,CAAC;AAEzB,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC"}

package/dist/agent-workflow/parser.d.ts

@@ -2,6 +2,6 @@ import { type AgentWorkflow } from './schema.js';
 export declare function validateAgentWorkflow(value: unknown): AgentWorkflow;
 /** Parse without environment substitution or fixture dereferencing. */
 export declare function parseAgentWorkflow(yamlText: string): AgentWorkflow;
-/** Reads only the explicitly supplied scenario; fixture resolution belongs to a future runner. */
+/** Reads only the explicitly supplied scenario; the session resolves fixtures when execution begins. */
 export declare function loadAgentWorkflow(filePath: string): Promise<AgentWorkflow>;
 //# sourceMappingURL=parser.d.ts.map

package/dist/agent-workflow/parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/parser.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,aAAa,EAAuB,MAAM,UAAU,CAAC;AAEnE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAWnE;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAYlE;AAED,kGAAkG;AAClG,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAQhF"}
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/parser.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,aAAa,EAAuB,MAAM,UAAU,CAAC;AAEnE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAWnE;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAYlE;AAED,wGAAwG;AACxG,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAQhF"}

package/dist/agent-workflow/sandbox-fixtures/qualify.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=qualify.d.ts.map

package/dist/agent-workflow/sandbox-fixtures/qualify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qualify.d.ts","sourceRoot":"","sources":["../../../src/agent-workflow/sandbox-fixtures/qualify.ts"],"names":[],"mappings":""}

package/dist/agent-workflow/sandbox.d.ts

@@ -0,0 +1,12 @@
+import { type WorkflowEnvironmentFactory } from './environment.js';
+export declare const WORKFLOW_SANDBOX_IMAGE = "oven/bun:1.3.10-alpine";
+export interface DockerWorkflowEnvironmentOptions {
+    /** Per Docker operation. Run/session deadlines can abort sooner. Defaults to 5000. */
+    operationTimeoutMs?: number;
+    /** Exact owned-container cleanup deadline. Defaults to 3000; failures remain unresolved. */
+    cleanupTimeoutMs?: number;
+}
+/** Fixed local Docker image and host-owned tools. No command, environment, mount, or image override. */
+export declare function createDockerWorkflowEnvironmentFactory(options?: DockerWorkflowEnvironmentOptions): WorkflowEnvironmentFactory;
+export declare const createDockerWorkflowEnvironment: WorkflowEnvironmentFactory;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/agent-workflow/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/sandbox.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,0BAA0B,EAIhC,MAAM,eAAe,CAAC;AAIvB,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,MAAM,WAAW,gCAAgC;IAC/C,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAwED,wGAAwG;AACxG,wBAAgB,sCAAsC,CACpD,OAAO,GAAE,gCAAqC,GAC7C,0BAA0B,CAsV5B;AACD,eAAO,MAAM,+BAA+B,EAAE,0BACJ,CAAC"}

package/dist/agent-workflow/schema.d.ts

@@ -30,8 +30,19 @@ export declare const WorkflowPolicySchema: z.ZodObject<{
         communication?: "read" | "write" | undefined;
         coordination?: "read" | "write" | undefined;
     }>;
+    paths: z.ZodOptional<z.ZodObject<{
+        read: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+        write: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        read: string[];
+        write: string[];
+    }, {
+        read: string[];
+        write: string[];
+    }>>;
     budgets: z.ZodObject<{
         max_actions: z.ZodNumber;
+        max_model_requests: z.ZodOptional<z.ZodNumber>;
         max_tool_calls: z.ZodOptional<z.ZodNumber>;
         timeout_ms: z.ZodNumber;
         max_tokens: z.ZodOptional<z.ZodNumber>;
@@ -39,11 +50,13 @@ export declare const WorkflowPolicySchema: z.ZodObject<{
         max_actions: number;
         timeout_ms: number;
         max_tokens?: number | undefined;
+        max_model_requests?: number | undefined;
         max_tool_calls?: number | undefined;
     }, {
         max_actions: number;
         timeout_ms: number;
         max_tokens?: number | undefined;
+        max_model_requests?: number | undefined;
         max_tool_calls?: number | undefined;
     }>;
 }, "strict", z.ZodTypeAny, {
@@ -61,8 +74,13 @@ export declare const WorkflowPolicySchema: z.ZodObject<{
         max_actions: number;
         timeout_ms: number;
         max_tokens?: number | undefined;
+        max_model_requests?: number | undefined;
         max_tool_calls?: number | undefined;
     };
+    paths?: {
+        read: string[];
+        write: string[];
+    } | undefined;
 }, {
     network: "denied";
     side_effects: "denied" | "approval_required";
@@ -78,8 +96,13 @@ export declare const WorkflowPolicySchema: z.ZodObject<{
         max_actions: number;
         timeout_ms: number;
         max_tokens?: number | undefined;
+        max_model_requests?: number | undefined;
         max_tool_calls?: number | undefined;
     };
+    paths?: {
+        read: string[];
+        write: string[];
+    } | undefined;
 }>;
 export type WorkflowPolicy = z.infer<typeof WorkflowPolicySchema>;
 /** V1 rejects unavailable authority/environment features rather than silently accepting them. */
@@ -91,15 +114,33 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     target: z.ZodObject<{
         provider: z.ZodString;
         model: z.ZodString;
+        generation: z.ZodOptional<z.ZodObject<{
+            max_tokens: z.ZodOptional<z.ZodNumber>;
+            temperature: z.ZodOptional<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            temperature?: number | undefined;
+            max_tokens?: number | undefined;
+        }, {
+            temperature?: number | undefined;
+            max_tokens?: number | undefined;
+        }>>;
     }, "strict", z.ZodTypeAny, {
         provider: string;
         model: string;
+        generation?: {
+            temperature?: number | undefined;
+            max_tokens?: number | undefined;
+        } | undefined;
     }, {
         provider: string;
         model: string;
+        generation?: {
+            temperature?: number | undefined;
+            max_tokens?: number | undefined;
+        } | undefined;
     }>;
     environment: z.ZodObject<{
-        type: z.ZodLiteral<"simulated">;
+        type: z.ZodEnum<["simulated", "sandbox"]>;
         policy: z.ZodObject<{
             network: z.ZodLiteral<"denied">;
             side_effects: z.ZodEnum<["denied", "approval_required"]>;
@@ -125,8 +166,19 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 communication?: "read" | "write" | undefined;
                 coordination?: "read" | "write" | undefined;
             }>;
+            paths: z.ZodOptional<z.ZodObject<{
+                read: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+                write: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+            }, "strict", z.ZodTypeAny, {
+                read: string[];
+                write: string[];
+            }, {
+                read: string[];
+                write: string[];
+            }>>;
             budgets: z.ZodObject<{
                 max_actions: z.ZodNumber;
+                max_model_requests: z.ZodOptional<z.ZodNumber>;
                 max_tool_calls: z.ZodOptional<z.ZodNumber>;
                 timeout_ms: z.ZodNumber;
                 max_tokens: z.ZodOptional<z.ZodNumber>;
@@ -134,11 +186,13 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             }, {
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             }>;
         }, "strict", z.ZodTypeAny, {
@@ -156,8 +210,13 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             };
+            paths?: {
+                read: string[];
+                write: string[];
+            } | undefined;
         }, {
             network: "denied";
             side_effects: "denied" | "approval_required";
@@ -173,11 +232,16 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             };
+            paths?: {
+                read: string[];
+                write: string[];
+            } | undefined;
         }>;
     }, "strict", z.ZodTypeAny, {
-        type: "simulated";
+        type: "simulated" | "sandbox";
         policy: {
             network: "denied";
             side_effects: "denied" | "approval_required";
@@ -193,11 +257,16 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             };
+            paths?: {
+                read: string[];
+                write: string[];
+            } | undefined;
         };
     }, {
-        type: "simulated";
+        type: "simulated" | "sandbox";
         policy: {
             network: "denied";
             side_effects: "denied" | "approval_required";
@@ -213,8 +282,13 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             };
+            paths?: {
+                read: string[];
+                write: string[];
+            } | undefined;
         };
     }>;
     tools: z.ZodArray<z.ZodEnum<["search", "read_document", "query_records", "read_file", "write_file", "calculator", "get_workflow_state", "request_approval", "record_decision", "draft_message", "delegate_task", "get_task_status"]>, "many">;
@@ -384,7 +458,7 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     version: "1";
     tools: ("search" | "read_document" | "query_records" | "read_file" | "write_file" | "calculator" | "get_workflow_state" | "request_approval" | "record_decision" | "draft_message" | "delegate_task" | "get_task_status")[];
     environment: {
-        type: "simulated";
+        type: "simulated" | "sandbox";
         policy: {
             network: "denied";
             side_effects: "denied" | "approval_required";
@@ -400,8 +474,13 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             };
+            paths?: {
+                read: string[];
+                write: string[];
+            } | undefined;
         };
     };
     evidence: {
@@ -412,6 +491,10 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     target: {
         provider: string;
         model: string;
+        generation?: {
+            temperature?: number | undefined;
+            max_tokens?: number | undefined;
+        } | undefined;
     };
     workflow: {
         system_instructions: string;
@@ -454,7 +537,7 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     version: "1";
     tools: ("search" | "read_document" | "query_records" | "read_file" | "write_file" | "calculator" | "get_workflow_state" | "request_approval" | "record_decision" | "draft_message" | "delegate_task" | "get_task_status")[];
     environment: {
-        type: "simulated";
+        type: "simulated" | "sandbox";
         policy: {
             network: "denied";
             side_effects: "denied" | "approval_required";
@@ -470,8 +553,13 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             };
+            paths?: {
+                read: string[];
+                write: string[];
+            } | undefined;
         };
     };
     evidence: {
@@ -482,6 +570,10 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     target: {
         provider: string;
         model: string;
+        generation?: {
+            temperature?: number | undefined;
+            max_tokens?: number | undefined;
+        } | undefined;
     };
     workflow: {
         system_instructions: string;
@@ -524,7 +616,7 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     version: "1";
     tools: ("search" | "read_document" | "query_records" | "read_file" | "write_file" | "calculator" | "get_workflow_state" | "request_approval" | "record_decision" | "draft_message" | "delegate_task" | "get_task_status")[];
     environment: {
-        type: "simulated";
+        type: "simulated" | "sandbox";
         policy: {
             network: "denied";
             side_effects: "denied" | "approval_required";
@@ -540,8 +632,13 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             };
+            paths?: {
+                read: string[];
+                write: string[];
+            } | undefined;
         };
     };
     evidence: {
@@ -552,6 +649,10 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     target: {
         provider: string;
         model: string;
+        generation?: {
+            temperature?: number | undefined;
+            max_tokens?: number | undefined;
+        } | undefined;
     };
     workflow: {
         system_instructions: string;
@@ -594,7 +695,7 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     version: "1";
     tools: ("search" | "read_document" | "query_records" | "read_file" | "write_file" | "calculator" | "get_workflow_state" | "request_approval" | "record_decision" | "draft_message" | "delegate_task" | "get_task_status")[];
     environment: {
-        type: "simulated";
+        type: "simulated" | "sandbox";
         policy: {
             network: "denied";
             side_effects: "denied" | "approval_required";
@@ -610,8 +711,13 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
                 max_actions: number;
                 timeout_ms: number;
                 max_tokens?: number | undefined;
+                max_model_requests?: number | undefined;
                 max_tool_calls?: number | undefined;
             };
+            paths?: {
+                read: string[];
+                write: string[];
+            } | undefined;
         };
     };
     evidence: {
@@ -622,6 +728,10 @@ export declare const AgentWorkflowSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnknow
     target: {
         provider: string;
         model: string;
+        generation?: {
+            temperature?: number | undefined;
+            max_tokens?: number | undefined;
+        } | undefined;
     };
     workflow: {
         system_instructions: string;

package/dist/agent-workflow/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,MAAM,YAAY,GACpB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,YAAY,EAAE,GACd;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAA;CAAE,CAAC;AAGpC,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CA4CpE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQ7D;AAqBD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAkIlE,iGAAiG;AACjG,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GASb,CAAC;AACpB,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/agent-workflow/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,MAAM,YAAY,GACpB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,YAAY,EAAE,GACd;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAA;CAAE,CAAC;AAGpC,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CA8CpE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQ7D;AAqBD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AA2IlE,iGAAiG;AACjG,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GASb,CAAC;AACpB,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}