@automatalabs/workflows 0.58.0 → 0.58.1

package/dist/mcp-server.js

@@ -30667,6 +30667,9 @@ var permissionResponseSchema = external_exports.object({
     external_exports.object({ outcome: external_exports.literal("selected"), optionId: external_exports.string().min(1).max(512) }).strict()
   ])
 }).strict();
+var WORKFLOW_RESULT_CHUNK_BYTES_DEFAULT = 16384;
+var WORKFLOW_RESULT_CHUNK_BYTES_MAX = 16384;
+var WORKFLOW_RESULT_CHUNK_BYTES_MIN = 4;
 var checkpointRepliesSchema = external_exports.record(
   external_exports.string().refine(
     (key) => {
@@ -30678,17 +30681,17 @@ var checkpointRepliesSchema = external_exports.record(
   external_exports.unknown()
 );
 var workflowToolInputShape = {
-  action: external_exports.enum(["run", "config", "inspect", "await", "stop", "permissions-response"]).optional().describe(
-    "Operation. Omit or use run to validate then execute; config discovers live backend/model/mode/config options; inspect/await expose live action requirements; permissions-response resolves one pending ACP permission; stop aborts a run or one in-flight agent."
+  action: external_exports.enum(["run", "config", "inspect", "await", "result", "stop", "permissions-response"]).optional().describe(
+    "Operation. Omit or use run to validate then execute; config discovers live backend/model/mode/config options; inspect/await expose lifecycle and action requirements; result pages the exact completed JSON result; permissions-response resolves one pending ACP permission; stop aborts a run or one in-flight agent."
   ),
   script: external_exports.string().min(1).optional().describe(
-    "Raw JavaScript workflow script (no Markdown fences). Exactly one of script or scriptPath is required for run; both are forbidden for config/inspect/await/stop/permissions-response. First statement MUST be `export const meta = { name, description, phases? }`. When present, phases MUST be an array of objects shaped `{ title: string, detail?: string, model?: string }`, never an array of strings."
+    "Raw JavaScript workflow script (no Markdown fences). Exactly one of script or scriptPath is required for run; both are forbidden for config/inspect/await/result/stop/permissions-response. First statement MUST be `export const meta = { name, description, phases? }`. When present, phases MUST be an array of objects shaped `{ title: string, detail?: string, model?: string }`, never an array of strings."
   ),
   scriptPath: external_exports.string().min(1).refine((value) => isAbsolute(value), "scriptPath must be an absolute path").optional().describe(
-    "Absolute path, on the server's filesystem, to a workflow script file read once at admission. Exactly one of script or scriptPath is required for run; both are forbidden for config/inspect/await/stop/permissions-response. Relative paths are rejected."
+    "Absolute path, on the server's filesystem, to a workflow script file read once at admission. Exactly one of script or scriptPath is required for run; both are forbidden for config/inspect/await/result/stop/permissions-response. Relative paths are rejected."
   ),
   projectDir: external_exports.string().min(1).refine((value) => isAbsolute(value), "projectDir must be an absolute path").optional().describe(
-    "Absolute project directory used as the cwd for config discovery and, for run, the project-scoped store (where the runId, journal, and resume state live) plus default execution cwd. Required for run and config on the shared workflow daemon; on a single-project (in-process) server it defaults to that server's own project. Forbidden for inspect/await/stop/permissions-response \u2014 a runId locates its project."
+    "Absolute project directory used as the cwd for config discovery and, for run, the project-scoped store (where the runId, journal, and resume state live) plus default execution cwd. Required for run and config on the shared workflow daemon; on a single-project (in-process) server it defaults to that server's own project. Forbidden for inspect/await/result/stop/permissions-response \u2014 a runId locates its project."
   ),
   harnesses: external_exports.array(external_exports.string().regex(/^[a-z][a-z0-9._-]*$/i, "invalid backend name")).min(1).max(16).optional().describe('With action="config", backend names to probe. Omit to probe every backend registered on this server.'),
   modelSpecs: external_exports.array(external_exports.string().min(1).max(256)).min(1).max(16).optional().describe(
@@ -30710,7 +30713,7 @@ var workflowToolInputShape = {
   resumePolicy: external_exports.enum(["auto", "positional"]).optional().describe('Resume matching policy. Default "auto"; requires resumeFromRunId.'),
   checkpointReplies: checkpointRepliesSchema.optional().describe("With resumeFromRunId, durable-checkpoint decisions keyed by checkpointContext.callIndex."),
   background: external_exports.boolean().optional().describe("Default false. True acknowledges after admission and executes in this server process."),
-  runId: external_exports.string().max(128).regex(/^[a-z0-9]+-[a-z0-9]+$/, "runId must be an engine-generated run ID").optional().describe("Project-scoped workflow run ID. Required for inspect/await/stop/permissions-response; forbidden for config/run."),
+  runId: external_exports.string().max(128).regex(/^[a-z0-9]+-[a-z0-9]+$/, "runId must be an engine-generated run ID").optional().describe("Project-scoped workflow run ID. Required for inspect/await/result/stop/permissions-response; forbidden for config/run."),
   permissionId: external_exports.string().uuid().optional().describe('With action="permissions-response", the opaque pending permission id returned by inspect/await.'),
   response: permissionResponseSchema.optional().describe('With action="permissions-response", an exact ACP selected optionId or cancelled outcome.'),
   callIndex: external_exports.number().int().nonnegative().safe().optional().describe(
@@ -30724,7 +30727,9 @@ var workflowToolInputShape = {
     message: "labelGlob must contain from 1 through 128 Unicode code points"
   }).optional().describe("Case-sensitive whole-label glob using *, ?, and backslash escaping."),
   logLines: external_exports.number().int().min(0).max(50).optional().describe("Latest run-log lines. Default 20; range 0..50."),
-  waitMs: external_exports.number().int().min(0).max(25e3).optional().describe("Await duration in milliseconds. Default 20000; range 0..25000. Zero reads without blocking.")
+  waitMs: external_exports.number().int().min(0).max(25e3).optional().describe("Await duration in milliseconds. Default 20000; range 0..25000. Zero reads without blocking."),
+  offset: external_exports.number().int().nonnegative().safe().optional().describe('With action="result", UTF-8 byte offset into the exact serialized JSON. Default 0; use the previous endOffset.'),
+  maxBytes: external_exports.number().int().min(WORKFLOW_RESULT_CHUNK_BYTES_MIN).max(WORKFLOW_RESULT_CHUNK_BYTES_MAX).optional().describe(`With action="result", maximum UTF-8 bytes returned. Default and maximum ${WORKFLOW_RESULT_CHUNK_BYTES_DEFAULT}.`)
 };
 function hasConfigFields(raw) {
   return raw.harnesses !== void 0 || raw.modelSpecs !== void 0 || raw.modelFilter !== void 0 || raw.probeTimeoutMs !== void 0;
@@ -30732,6 +30737,9 @@ function hasConfigFields(raw) {
 function hasPermissionFields(raw) {
   return raw.permissionId !== void 0 || raw.response !== void 0;
 }
+function hasResultFields(raw) {
+  return raw.offset !== void 0 || raw.maxBytes !== void 0;
+}
 function hasExecutionFields(raw) {
   return raw.script !== void 0 || raw.scriptPath !== void 0 || raw.projectDir !== void 0 || raw.args !== void 0 || raw.maxAgents !== void 0 || raw.concurrency !== void 0 || raw.agentRetries !== void 0 || raw.agentTimeoutMs !== void 0 || raw.agentIdleTimeoutMs !== void 0 || raw.resumeFromRunId !== void 0 || raw.resumePolicy !== void 0 || raw.checkpointReplies !== void 0 || raw.background !== void 0;
 }
@@ -30740,7 +30748,7 @@ function invalid(message) {
 }
 function parseWorkflowToolInput(raw, options = {}) {
   if (raw.action === "config") {
-    if (raw.script !== void 0 || raw.scriptPath !== void 0 || raw.args !== void 0 || raw.maxAgents !== void 0 || raw.concurrency !== void 0 || raw.agentRetries !== void 0 || raw.agentTimeoutMs !== void 0 || raw.agentIdleTimeoutMs !== void 0 || raw.resumeFromRunId !== void 0 || raw.resumePolicy !== void 0 || raw.checkpointReplies !== void 0 || raw.background !== void 0 || raw.runId !== void 0 || hasPermissionFields(raw) || raw.callIndex !== void 0 || raw.forceOwner !== void 0 || raw.waitMs !== void 0 || raw.lastN !== void 0 || raw.labelGlob !== void 0 || raw.logLines !== void 0) {
+    if (raw.script !== void 0 || raw.scriptPath !== void 0 || raw.args !== void 0 || raw.maxAgents !== void 0 || raw.concurrency !== void 0 || raw.agentRetries !== void 0 || raw.agentTimeoutMs !== void 0 || raw.agentIdleTimeoutMs !== void 0 || raw.resumeFromRunId !== void 0 || raw.resumePolicy !== void 0 || raw.checkpointReplies !== void 0 || raw.background !== void 0 || raw.runId !== void 0 || hasPermissionFields(raw) || raw.callIndex !== void 0 || raw.forceOwner !== void 0 || raw.waitMs !== void 0 || raw.lastN !== void 0 || raw.labelGlob !== void 0 || raw.logLines !== void 0 || hasResultFields(raw)) {
       invalid('action="config" accepts only projectDir, harnesses, modelSpecs, modelFilter, and probeTimeoutMs');
     }
     if (options.requireProjectDir === true && raw.projectDir === void 0) {
@@ -30757,12 +30765,24 @@ function parseWorkflowToolInput(raw, options = {}) {
       probeTimeoutMs: raw.probeTimeoutMs
     };
   }
+  if (raw.action === "result") {
+    if (!raw.runId) invalid('action="result" requires runId');
+    if (hasExecutionFields(raw) || hasConfigFields(raw) || hasPermissionFields(raw) || raw.waitMs !== void 0 || raw.callIndex !== void 0 || raw.forceOwner !== void 0 || raw.lastN !== void 0 || raw.labelGlob !== void 0 || raw.logLines !== void 0) {
+      invalid('action="result" accepts only runId, offset, and maxBytes');
+    }
+    return {
+      action: "result",
+      runId: raw.runId,
+      offset: raw.offset ?? 0,
+      maxBytes: raw.maxBytes ?? WORKFLOW_RESULT_CHUNK_BYTES_DEFAULT
+    };
+  }
   if (raw.action === "permissions-response") {
     if (!raw.runId) invalid('action="permissions-response" requires runId');
     if (!raw.permissionId || raw.response === void 0) {
       invalid('action="permissions-response" requires permissionId and response');
     }
-    if (hasExecutionFields(raw) || hasConfigFields(raw) || raw.waitMs !== void 0 || raw.callIndex !== void 0 || raw.forceOwner !== void 0 || raw.lastN !== void 0 || raw.labelGlob !== void 0 || raw.logLines !== void 0) {
+    if (hasExecutionFields(raw) || hasConfigFields(raw) || raw.waitMs !== void 0 || raw.callIndex !== void 0 || raw.forceOwner !== void 0 || raw.lastN !== void 0 || raw.labelGlob !== void 0 || raw.logLines !== void 0 || hasResultFields(raw)) {
       invalid('action="permissions-response" accepts only runId, permissionId, and response');
     }
     return {
@@ -30774,7 +30794,7 @@ function parseWorkflowToolInput(raw, options = {}) {
   }
   if (raw.action === "inspect") {
     if (!raw.runId) invalid('action="inspect" requires runId');
-    if (hasExecutionFields(raw) || hasConfigFields(raw) || hasPermissionFields(raw) || raw.waitMs !== void 0 || raw.callIndex !== void 0 || raw.forceOwner !== void 0) {
+    if (hasExecutionFields(raw) || hasConfigFields(raw) || hasPermissionFields(raw) || hasResultFields(raw) || raw.waitMs !== void 0 || raw.callIndex !== void 0 || raw.forceOwner !== void 0) {
       invalid('action="inspect" cannot include execution fields');
     }
     return {
@@ -30787,7 +30807,7 @@ function parseWorkflowToolInput(raw, options = {}) {
   }
   if (raw.action === "await") {
     if (!raw.runId) invalid('action="await" requires runId');
-    if (hasExecutionFields(raw) || hasConfigFields(raw) || hasPermissionFields(raw) || raw.callIndex !== void 0 || raw.forceOwner !== void 0) {
+    if (hasExecutionFields(raw) || hasConfigFields(raw) || hasPermissionFields(raw) || hasResultFields(raw) || raw.callIndex !== void 0 || raw.forceOwner !== void 0) {
       invalid('action="await" cannot include execution fields');
     }
     return {
@@ -30801,7 +30821,7 @@ function parseWorkflowToolInput(raw, options = {}) {
   }
   if (raw.action === "stop") {
     if (!raw.runId) invalid('action="stop" requires runId');
-    if (hasExecutionFields(raw) || hasConfigFields(raw) || hasPermissionFields(raw) || raw.waitMs !== void 0) {
+    if (hasExecutionFields(raw) || hasConfigFields(raw) || hasPermissionFields(raw) || hasResultFields(raw) || raw.waitMs !== void 0) {
       invalid('action="stop" cannot include execution fields or waitMs');
     }
     if (raw.callIndex !== void 0 && raw.forceOwner !== void 0) {
@@ -30817,7 +30837,7 @@ function parseWorkflowToolInput(raw, options = {}) {
       logLines: raw.logLines
     };
   }
-  if (raw.runId !== void 0 || hasPermissionFields(raw) || raw.callIndex !== void 0 || raw.forceOwner !== void 0 || raw.waitMs !== void 0 || raw.lastN !== void 0 || raw.labelGlob !== void 0 || raw.logLines !== void 0 || hasConfigFields(raw)) {
+  if (raw.runId !== void 0 || hasPermissionFields(raw) || raw.callIndex !== void 0 || raw.forceOwner !== void 0 || raw.waitMs !== void 0 || raw.lastN !== void 0 || raw.labelGlob !== void 0 || raw.logLines !== void 0 || hasConfigFields(raw) || hasResultFields(raw)) {
     invalid("run inputs cannot include inspection fields");
   }
   const hasScript = raw.script !== void 0;
@@ -31916,6 +31936,7 @@ var scriptLineageEntrySchema = external_exports.object({
 });
 var inspectionScriptResourceShape = {
   scriptUri: external_exports.string(),
+  resultUri: external_exports.string().optional(),
   lineage: external_exports.array(scriptLineageEntrySchema)
 };
 var runStatusShape = {
@@ -31983,8 +32004,24 @@ var executionResultSchema = external_exports.object({
   runId: external_exports.string(),
   status: external_exports.enum(["paused", "completed", "failed", "aborted"]),
   ...executionDetailsShape,
-  scriptUri: external_exports.string()
-}).strict();
+  scriptUri: external_exports.string(),
+  resultUri: external_exports.string().optional()
+}).strict().superRefine((value, context) => {
+  if (value.resultUri !== void 0 && value.status !== "completed") {
+    context.addIssue({
+      code: "custom",
+      path: ["resultUri"],
+      message: "resultUri is available only for completed workflow outcomes"
+    });
+  }
+}).meta({
+  allOf: [
+    {
+      if: { required: ["resultUri"] },
+      then: { required: ["status"], properties: { status: { const: "completed" } } }
+    }
+  ]
+});
 var waitSchema = external_exports.object({
   requestedMs: external_exports.number().int().nonnegative(),
   elapsedMs: external_exports.number().int().nonnegative(),
@@ -32067,7 +32104,7 @@ var inspectionRequired = [
 ];
 var terminalStatuses = ["paused", "completed", "failed", "aborted"];
 var nonterminalStatuses = ["pending", "running"];
-var commonOutputFields = ["runId", "status", "scriptUri", "limits", "replayEligibility"];
+var commonOutputFields = ["runId", "status", "scriptUri", "resultUri", "limits", "replayEligibility"];
 var runOutputRequired = ["runId", "status", "scriptUri"];
 var executionDetailFields = [
   "result",
@@ -32094,6 +32131,15 @@ var discoveryOutputFields = [
   "omittedHarnesses",
   "models"
 ];
+var resultRetrievalFields = [
+  "mimeType",
+  "encoding",
+  "totalBytes",
+  "offset",
+  "endOffset",
+  "hasMore",
+  "chunk"
+];
 var stopControlSchema = external_exports.object({
   state: external_exports.literal("pending"),
   operationId: external_exports.string(),
@@ -32119,6 +32165,7 @@ var variantOutputFields = [
   "pendingPermissions",
   "interaction",
   "permissionResponse",
+  ...resultRetrievalFields,
   ...discoveryOutputFields
 ];
 var forbidsRequired = (...fields) => ({
@@ -32137,7 +32184,7 @@ function hasOnlyFields(value, allowed) {
   return Object.entries(value).every(([field, fieldValue]) => fieldValue === void 0 || allowedFields.has(field));
 }
 var workflowToolOutputShape = external_exports.object({
-  action: external_exports.enum(["run", "config"]).optional(),
+  action: external_exports.enum(["run", "config", "result"]).optional(),
   ok: external_exports.boolean().optional(),
   validation: validationSummarySchema.optional(),
   harnessOptions: external_exports.array(harnessDiagnosticSchema).optional(),
@@ -32148,6 +32195,7 @@ var workflowToolOutputShape = external_exports.object({
   ...executionDetailsShape,
   scriptSource: scriptSourceSchema.optional(),
   scriptUri: external_exports.string().optional(),
+  resultUri: external_exports.string().optional(),
   lineage: inspectionScriptResourceShape.lineage.optional(),
   workflowName: runStatusShape.workflowName.optional(),
   phases: runStatusShape.phases.optional(),
@@ -32164,14 +32212,23 @@ var workflowToolOutputShape = external_exports.object({
   control: stopControlSchema.optional(),
   pendingPermissions: external_exports.array(pendingPermissionSchema).optional(),
   interaction: permissionInteractionSchema.optional(),
-  permissionResponse: permissionAcknowledgementSchema.optional()
+  permissionResponse: permissionAcknowledgementSchema.optional(),
+  mimeType: external_exports.literal("application/json").optional(),
+  encoding: external_exports.literal("utf-8").optional(),
+  totalBytes: external_exports.number().int().nonnegative().optional(),
+  offset: external_exports.number().int().nonnegative().optional(),
+  endOffset: external_exports.number().int().nonnegative().optional(),
+  hasMore: external_exports.boolean().optional(),
+  chunk: external_exports.string().optional()
 }).superRefine((value, context) => {
   const has = (field) => value[field] !== void 0;
   const inspectionComplete = inspectionRequired.every((field) => has(field));
   const runCommonComplete = has("runId") && has("status") && has("scriptUri");
   const terminal2 = terminalStatuses.includes(value.status);
   let valid;
-  if (value.action === "config") {
+  if (value.action === "result") {
+    valid = value.status === "completed" && has("runId") && has("resultUri") && resultRetrievalFields.every((field) => has(field)) && hasOnlyExactFields(value, ["action", "runId", "status", "resultUri", ...resultRetrievalFields]);
+  } else if (value.action === "config") {
     valid = has("ok") && has("harnessOptions") && has("omittedHarnesses") && has("models") && hasOnlyExactFields(value, ["action", "ok", "harnessOptions", "omittedHarnesses", "models"]);
   } else if (value.action === "run") {
     valid = value.status === "rejected" && has("validation") && hasOnlyExactFields(value, ["action", "status", "validation"]);
@@ -32188,11 +32245,45 @@ var workflowToolOutputShape = external_exports.object({
   } else {
     valid = runCommonComplete && inspectionComplete && hasOnlyFields(value, [...inspectionFields, "pendingPermissions", "interaction"]);
   }
+  if (has("resultUri") && value.status !== "completed") valid = false;
   if (!valid) {
     context.addIssue({ code: "custom", message: "output does not match a workflow result variant" });
   }
 }).meta({
+  allOf: [
+    {
+      if: { required: ["resultUri"] },
+      then: { required: ["status"], properties: { status: { const: "completed" } } }
+    }
+  ],
   oneOf: [
+    {
+      title: "Workflow result retrieval",
+      required: ["action", "runId", "status", "resultUri", ...resultRetrievalFields],
+      properties: { action: { const: "result" }, status: { const: "completed" } },
+      ...forbidsRequired(
+        "ok",
+        "validation",
+        "harnessOptions",
+        "omittedHarnesses",
+        "models",
+        "scriptUri",
+        "scriptSource",
+        "limits",
+        "replayEligibility",
+        ...executionDetailFields,
+        ...inspectionFields,
+        "lineage",
+        "wait",
+        "outcome",
+        "stopped",
+        "alreadyTerminal",
+        "control",
+        "pendingPermissions",
+        "interaction",
+        "permissionResponse"
+      )
+    },
     {
       title: "Workflow config discovery",
       required: ["action", "ok", "harnessOptions", "omittedHarnesses", "models"],
@@ -32319,7 +32410,8 @@ function toWorkflowExecutionOutcome(run, resources) {
     ...run.fallbacks === void 0 ? {} : { fallbacks: run.fallbacks },
     ...run.checkpointsTaken === void 0 ? {} : { checkpointsTaken: run.checkpointsTaken },
     ...run.resumeReport === void 0 ? {} : { resumeReport: run.resumeReport },
-    ...resources
+    scriptUri: resources.scriptUri,
+    ...run.status === "completed" && resources.resultUri !== void 0 ? { resultUri: resources.resultUri } : {}
   };
 }
 function toWorkflowToolResult(run, resources) {
@@ -32565,9 +32657,9 @@ var AUTHORING_DOC_TOPICS = [
       "workflow/determinism-and-resume",
       "workflow/models-and-config"
     ],
-    "bytes": 8883,
-    "sha256": "1f317847a48fa7ace2087677c818c57bb9dc7549cfc449e17703fe7636dd37f6",
-    "text": '## Running workflows \u2014 the MCP `workflow` tool\n\n**Context:** JavaScript passed to the MCP `workflow` tool. Workflow scripts use `agent(prompt, options?)`; REPL evals use a different API.\n\nUse the connected `workflow` tool for deterministic batch orchestration. The shared server daemon owns execution, so admitted runs survive MCP client session churn and tool-request timeouts. During a version upgrade, the successor becomes the front door while a predecessor may remain the execution owner; signed run-control forwarding keeps later-session stop/cancel operations location-independent. Owner-process exit can still interrupt in-flight work. Any later session can await, inspect, or stop a run. Runs, journals, logs, and outstanding whole-stop intents persist per project namespace.\n\nEvery `config` and `run` call on the shared daemon names its project with the required `projectDir` argument \u2014 an absolute path, normally the workspace root. `inspect`/`await`/`stop` take only a `runId`; the run ID locates its project store automatically. In a single-project server, `projectDir` defaults to that server\'s project.\n\n### The `workflow` tool, by action\n\n- **Config** (`{ action: "config", projectDir, harnesses?, modelSpecs?, modelFilter? }`): discover live model, mode, effort, and `configOptions` values from no-prompt backend sessions. Use `harnesses` plus `modelFilter` to find ids, then `modelSpecs` to select exact models and read their model-specific option domains. Each successful entry preserves every harness-advertised mode id, name, description, and `_meta`, and reports `defaultModeId`. When a call omits mode, AgentPrism applies Claude `auto`, Codex `agent`, OpenCode `build`, or no mode for Pi; authored and default ids must appear in `modes.availableModes`. It starts no workflow and spends zero tokens. Use it only when pinning those values; an omitted model or backend-only model uses configured defaults without discovery.\n- **Run** (default, no `action`): supply exactly one of `script` (the raw source string, no Markdown fences) or `scriptPath` (an absolute path on the server\'s filesystem), plus `projectDir`. The tool automatically performs static validation, a mocked dry run, and routed config checks before admission. Invalid scripts return bounded `status:"rejected"` diagnostics with no run ID, background slot, or token spend. A path is read once at admission and its content snapshotted; later edits affect only a new run. `args` arrives in the script as the `args` global; the run\'s base directory is the `cwd` global. Some hosts hand `args` through as a JSON **string** \u2014 tolerate both shapes (`typeof args === "string" ? JSON.parse(args) : args`). Foreground streams progress but is bound to the request and its timeout. Pass `background: true` for anything that may outlive one request; it acknowledges after durable admission with a `runId`.\n- **Await** (`{ action: "await", runId, waitMs }`): bounded collection for background runs. A timeout is progress, not failure. Await returns early with `wait.returnedBecause:"action-required"` when an ACP permission is pending. At terminal status the response adds `outcome`: the authored result or pause context, plus replay diagnostics.\n- **Inspect** (`{ action: "inspect", runId, lastN, labelGlob, logLines }`): a bounded snapshot \u2014 the latest matching calls, newest log lines, and any live `pendingPermissions`. Elicitation-capable clients present one request\'s exact backend options during inspect/await. Permission diagnostics omit the private ACP session id, are credential-redacted and bounded, and retain the complete ordered exact option-id list or fail closed.\n- **Permission response** (`{ action:"permissions-response", runId, permissionId, response }`): for clients without elicitation, resolve one pending request with `{ outcome:{ outcome:"selected", optionId } }` using an exact advertised id, or `{ outcome:{ outcome:"cancelled" } }`. Caller-supplied response `_meta` is forbidden; provider effects come only from the selected advertised option. The request belongs to the live execution owner and cannot be answered after owner loss.\n- **Stop**: `{ action: "stop", runId }` durably aborts the whole run and normally returns its final snapshot; stopping a terminal run is a successful no-op. Across a daemon upgrade, the successor persists an idempotent stop intent and forwards to the predecessor that owns execution. If that owner does not settle within the bounded control wait, the successful response remains nonterminal with `control:{ state:"pending", operationId, requestedAt, owner? }`; retry stop, inspect, or await to observe settlement. `{ action: "stop", runId, callIndex }` synchronously routes to the live owner and cancels exactly that in-flight agent: its slot settles to `null` with `AGENT_CANCELLED` and the run stays live; call cancellation is never reconstructed after owner loss. Whole-run `{ action:"stop", runId, forceOwner:true }` explicitly authorizes terminating a superseded owner daemon when graceful control cannot settle and may interrupt sibling runs in that process; it is forbidden with `callIndex`. `labelGlob` only filters the returned snapshot; it never selects what to cancel.\n- **Resume**: a NEW run with `resumeFromRunId` plus the script content re-sent (the same `script` or `scriptPath`) and the desired `args` (+ `checkpointReplies` when answering a durable checkpoint). Read the returned `replayEligibility` for the predicted and observed replay prefix; never assume a prefix hit. Full semantics: **Determinism and resume**.\n\n### Operating rules\n\n- **Always retain the returned `runId`.** A paused, failed, or aborted response carries a redacted final-20 `logTail`. Read it before you change anything. Every admitted script is also an immutable resource at `workflow://runs/{runId}/script`, so a later session can recover a lost inline script.\n- **Two fingerprints control replay.** The identity hash covers the prompt, the resolved model, `mode` when set, non-empty sorted `configOptions`, `tier`, `phase`, `agentType`, the resolved agent definition, and the schema. The input fingerprint covers the resolved label, per-call `cwd` and isolation, `keepSession`, images, MCP servers, session/prompt metadata, and the approved script-backend digest.\n- **Operational bounds are not replay inputs.** Host `concurrency`, `agentRetries`, `agentTimeoutMs`, and `agentIdleTimeoutMs`, plus per-call `timeoutMs`, `idleTimeoutMs`, and `retries`, enter neither fingerprint. A resume does not inherit them from its source run; pass the values you want on every run. `agentTimeoutMs` caps total wall time and is not an idle timer. The separate opt-in `agentIdleTimeoutMs` fires after that long without real backend activity; ACP `session/update` re-arms it and synthetic progress heartbeats do not. Per-call values can tighten but cannot escape finite host ceilings. Every retry gets fresh clocks.\n- **Old journals stay usable.** Input formats below 2 replay positionally with `fallbackReason: "inputs-format-legacy"`. A current-format crash snapshot uses identity matching even without terminal-environment capture. Ancestor-scoped rows carried from \u22640.23 resume chains replay only while that ancestor run is still persisted. Journals resume across filesystem, environment, engine, Node, and V8 changes; `replayEligibility` reports those differences as diagnostics, never as gates.\n- **A background start returns immediately.** It sends no progress after it returns; collect progress with later bounded awaits. Its `interaction` block explains that ACP permissions may block an agent and names await/inspect plus `permissions-response` as the control path. Background runs have no live checkpoint channel, so authored `headless` checkpoint modes apply. When a run\'s owner process dies, a pending whole-stop intent is applied under the reclaimed lease; otherwise cold preflights reconcile stale `pending`/`running` state to `paused` with `pauseReason:"interrupted"`. A live owner lease is never stolen because of a timeout.\n- A run paused with `reason: "auth_required"` resumes as a new run after that backend\'s credentials are configured.\n\n### Execution logs \u2014 the events resource\n\nEvery journaling run publishes an MCP resource at `workflow://runs/{runId}/events`. Subscribe to the canonical URI for advisory `resources/updated` hints, then read and paginate with `after`, `limit`, and `streamId`. Progress is coarse and redacted: `agentTranscript` rows are assistant/tool upserts partitioned by `(scope, callIndex, executionStartSeq)` and reduced by greatest revision per entry index. The durable cursor is authoritative when hints coalesce or a subscriber falls behind.\n\nEmbedding hosts can drive the same contract with `runDynamicWorkflow` / `WorkflowManager` from `@automatalabs/workflows`; the script contract is identical either way.\n'
+    "bytes": 9965,
+    "sha256": "1143d846d50a7c2833ab58d0d88131dde8557770a6f818f2b8747c79f791ace7",
+    "text": '## Running workflows \u2014 the MCP `workflow` tool\n\n**Context:** JavaScript passed to the MCP `workflow` tool. Workflow scripts use `agent(prompt, options?)`; REPL evals use a different API.\n\nUse the connected `workflow` tool for deterministic batch orchestration. The shared server daemon owns execution, so admitted runs survive MCP client session churn and tool-request timeouts. During a version upgrade, the successor becomes the front door while a predecessor may remain the execution owner; signed run-control forwarding keeps later-session stop/cancel operations location-independent. Owner-process exit can still interrupt in-flight work. Any later session can await, inspect, or stop a run. Runs, journals, logs, and outstanding whole-stop intents persist per project namespace.\n\nEvery `config` and `run` call on the shared daemon names its project with the required `projectDir` argument \u2014 an absolute path, normally the workspace root. `inspect`/`await`/`result`/`stop` take only a `runId`; the run ID locates its project store automatically. In a single-project server, `projectDir` defaults to that server\'s project.\n\n### The `workflow` tool, by action\n\n- **Config** (`{ action: "config", projectDir, harnesses?, modelSpecs?, modelFilter? }`): discover live model, mode, effort, and `configOptions` values from no-prompt backend sessions. Use `harnesses` plus `modelFilter` to find ids, then `modelSpecs` to select exact models and read their model-specific option domains. Each successful entry preserves every harness-advertised mode id, name, description, and `_meta`, and reports `defaultModeId`. When a call omits mode, AgentPrism applies Claude `auto`, Codex `agent`, OpenCode `build`, or no mode for Pi; authored and default ids must appear in `modes.availableModes`. It starts no workflow and spends zero tokens. Use it only when pinning those values; an omitted model or backend-only model uses configured defaults without discovery.\n- **Run** (default, no `action`): supply exactly one of `script` (the raw source string, no Markdown fences) or `scriptPath` (an absolute path on the server\'s filesystem), plus `projectDir`. The tool automatically performs static validation, a mocked dry run, and routed config checks before admission. Invalid scripts return bounded `status:"rejected"` diagnostics with no run ID, background slot, or token spend. A path is read once at admission and its content snapshotted; later edits affect only a new run. `args` arrives in the script as the `args` global; the run\'s base directory is the `cwd` global. Some hosts hand `args` through as a JSON **string** \u2014 tolerate both shapes (`typeof args === "string" ? JSON.parse(args) : args`). Foreground streams progress but is bound to the request and its timeout. Pass `background: true` for anything that may outlive one request; it acknowledges after durable admission with a `runId`.\n- **Await** (`{ action: "await", runId, waitMs }`): bounded collection for background runs. A timeout is progress, not failure. Await returns early with `wait.returnedBecause:"action-required"` when an ACP permission is pending. At terminal status the response adds `outcome`: the authored result or pause context, plus replay diagnostics.\n- **Inspect** (`{ action: "inspect", runId, lastN, labelGlob, logLines }`): a bounded snapshot \u2014 the latest matching calls, newest log lines, and any live `pendingPermissions`. A completed run also exposes `resultUri` and an exact-result resource link, without putting a large result into the bounded status projection. Elicitation-capable clients present one request\'s exact backend options during inspect/await. Permission diagnostics omit the private ACP session id, are credential-redacted and bounded, and retain the complete ordered exact option-id list or fail closed.\n- **Result** (`{ action: "result", runId, offset?, maxBytes? }`): bounded exact retrieval for a completed authored result. It returns at most 16,384 UTF-8 bytes plus `totalBytes`, `endOffset`, and `hasMore`; continue at the prior `endOffset`. The default offset is zero. UTF-8 code points are never split, and arbitrary offsets inside one fail closed. Running, paused, failed, aborted, unknown, deleted, and completed-without-value runs have no result page.\n- **Permission response** (`{ action:"permissions-response", runId, permissionId, response }`): for clients without elicitation, resolve one pending request with `{ outcome:{ outcome:"selected", optionId } }` using an exact advertised id, or `{ outcome:{ outcome:"cancelled" } }`. Caller-supplied response `_meta` is forbidden; provider effects come only from the selected advertised option. The request belongs to the live execution owner and cannot be answered after owner loss.\n- **Stop**: `{ action: "stop", runId }` durably aborts the whole run and normally returns its final snapshot; stopping a terminal run is a successful no-op. Across a daemon upgrade, the successor persists an idempotent stop intent and forwards to the predecessor that owns execution. If that owner does not settle within the bounded control wait, the successful response remains nonterminal with `control:{ state:"pending", operationId, requestedAt, owner? }`; retry stop, inspect, or await to observe settlement. `{ action: "stop", runId, callIndex }` synchronously routes to the live owner and cancels exactly that in-flight agent: its slot settles to `null` with `AGENT_CANCELLED` and the run stays live; call cancellation is never reconstructed after owner loss. Whole-run `{ action:"stop", runId, forceOwner:true }` explicitly authorizes terminating a superseded owner daemon when graceful control cannot settle and may interrupt sibling runs in that process; it is forbidden with `callIndex`. `labelGlob` only filters the returned snapshot; it never selects what to cancel.\n- **Resume**: a NEW run with `resumeFromRunId` plus the script content re-sent (the same `script` or `scriptPath`) and the desired `args` (+ `checkpointReplies` when answering a durable checkpoint). Read the returned `replayEligibility` for the predicted and observed replay prefix; never assume a prefix hit. Full semantics: **Determinism and resume**.\n\n### Operating rules\n\n- **Always retain the returned `runId`.** A paused, failed, or aborted response carries a redacted final-20 `logTail`. Read it before you change anything. Every admitted script is an immutable resource at `workflow://runs/{runId}/script`, so a later session can recover a lost inline script. A completed JSON result is independently durable at `workflow://runs/{runId}/result`. Completed foreground/await responses copy exact JSON up to 4,096 UTF-8 bytes into model-visible text; larger results stay out of summary text and point to the resource plus `action:"result"` paging. Script and result links are labelled separately.\n- **Two fingerprints control replay.** The identity hash covers the prompt, the resolved model, `mode` when set, non-empty sorted `configOptions`, `tier`, `phase`, `agentType`, the resolved agent definition, and the schema. The input fingerprint covers the resolved label, per-call `cwd` and isolation, `keepSession`, images, MCP servers, session/prompt metadata, and the approved script-backend digest.\n- **Operational bounds are not replay inputs.** Host `concurrency`, `agentRetries`, `agentTimeoutMs`, and `agentIdleTimeoutMs`, plus per-call `timeoutMs`, `idleTimeoutMs`, and `retries`, enter neither fingerprint. A resume does not inherit them from its source run; pass the values you want on every run. `agentTimeoutMs` caps total wall time and is not an idle timer. The separate opt-in `agentIdleTimeoutMs` fires after that long without real backend activity; ACP `session/update` re-arms it and synthetic progress heartbeats do not. Per-call values can tighten but cannot escape finite host ceilings. Every retry gets fresh clocks.\n- **Old journals stay usable.** Input formats below 2 replay positionally with `fallbackReason: "inputs-format-legacy"`. A current-format crash snapshot uses identity matching even without terminal-environment capture. Ancestor-scoped rows carried from \u22640.23 resume chains replay only while that ancestor run is still persisted. Journals resume across filesystem, environment, engine, Node, and V8 changes; `replayEligibility` reports those differences as diagnostics, never as gates.\n- **A background start returns immediately.** It sends no progress after it returns; collect progress with later bounded awaits. Its `interaction` block explains that ACP permissions may block an agent and names await/inspect plus `permissions-response` as the control path. Background runs have no live checkpoint channel, so authored `headless` checkpoint modes apply. When a run\'s owner process dies, a pending whole-stop intent is applied under the reclaimed lease; otherwise cold preflights reconcile stale `pending`/`running` state to `paused` with `pauseReason:"interrupted"`. A live owner lease is never stolen because of a timeout.\n- A run paused with `reason: "auth_required"` resumes as a new run after that backend\'s credentials are configured.\n\n### Execution logs \u2014 the events resource\n\nEvery journaling run publishes an MCP resource at `workflow://runs/{runId}/events`. Subscribe to the canonical URI for advisory `resources/updated` hints, then read and paginate with `after`, `limit`, and `streamId`. This bounded/redacted stream is observability, not an exact result-reconstruction API; use `/result` or `action:"result"` for authored output. Progress is coarse and redacted: `agentTranscript` rows are assistant/tool upserts partitioned by `(scope, callIndex, executionStartSeq)` and reduced by greatest revision per entry index. The durable cursor is authoritative when hints coalesce or a subscriber falls behind.\n\nEmbedding hosts can drive the same contract with `runDynamicWorkflow` / `WorkflowManager` from `@automatalabs/workflows`; the script contract is identical either way.\n'
   },
   {
     "id": "workflow/models-and-config",
@@ -33755,14 +33847,16 @@ import {
   WorkflowManager as WorkflowManager2
 } from "@automatalabs/workflows";
 var SCRIPT_RESOURCE_MIME_TYPE = "text/javascript";
+var RESULT_RESOURCE_MIME_TYPE = "application/json";
 var SCRIPT_RESOURCE_LIST_LIMIT = 50;
 var EVENTS_RESOURCE_MIME_TYPE = "application/json";
 var WORKFLOW_RUN_EVENTS_SCHEMA_VERSION = 1;
 var SCRIPT_URI_PATTERN = /^workflow:\/\/runs\/([a-z0-9]+-[a-z0-9]+)\/script$/;
+var RESULT_URI_PATTERN = /^workflow:\/\/runs\/([a-z0-9]+-[a-z0-9]+)\/result$/;
 var EVENTS_URI_PATTERN = /^workflow:\/\/runs\/([a-z0-9]+-[a-z0-9]+)\/events(?:\?([^#]*))?$/;
 var STREAM_ID_PATTERN = /^[0-9a-f]{32}$/;
 function resourceNotFound(uri) {
-  throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Workflow script resource not found: ${uri}`);
+  throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Workflow resource not found: ${uri}`);
 }
 function workflowScriptUri(runId) {
   return `workflow://runs/${runId}/script`;
@@ -33770,9 +33864,18 @@ function workflowScriptUri(runId) {
 function workflowRunIdFromScriptUri(uri) {
   return SCRIPT_URI_PATTERN.exec(uri)?.[1];
 }
+function workflowResultUri(runId) {
+  return `workflow://runs/${runId}/result`;
+}
+function workflowRunIdFromResultUri(uri) {
+  return RESULT_URI_PATTERN.exec(uri)?.[1];
+}
 function workflowRunEventsUri(runId) {
   return `workflow://runs/${runId}/events`;
 }
+function hasExactResult(state) {
+  return state.status === "completed" && state.result !== void 0;
+}
 function parseDecimal(value, max = Number.MAX_SAFE_INTEGER) {
   if (!/^(?:0|[1-9][0-9]*)$/.test(value)) return void 0;
   const parsed = Number(value);
@@ -33839,6 +33942,15 @@ var WorkflowScriptResources = class {
     this.modernNotifier = modernNotifier;
     this.router = source instanceof WorkflowManager2 ? singleStoreRouter(source) : source.router;
     this.detachRunDeleted = this.router.onRunDeleted(this.onRunDeleted);
+    this.detachRunEventPersisted = this.modernNotifier ? () => void 0 : this.router.onRunEventPersisted((record2) => {
+      if (record2.event.type !== "complete") return;
+      queueMicrotask(() => {
+        try {
+          if (this.availableResultUri(record2.runId)) void this.mcp.sendResourceListChanged();
+        } catch {
+        }
+      });
+    });
     this.detachRunStopped = this.router.onRunStopped(({ runId }) => this.cancelPendingElicitation(runId));
     const previousOnClose = this.mcp.server.onclose;
     this.mcp.server.onclose = () => {
@@ -33846,6 +33958,7 @@ var WorkflowScriptResources = class {
       this.elicitationControllers.clear();
       for (const uri of [...this.eventSubscriptions.keys()]) this.closeEventSubscription(uri);
       this.detachRunStopped();
+      this.detachRunEventPersisted();
       this.detachRunDeleted();
       previousOnClose?.();
     };
@@ -33855,6 +33968,7 @@ var WorkflowScriptResources = class {
   modernNotifier;
   router;
   detachRunDeleted;
+  detachRunEventPersisted;
   detachRunStopped;
   subscriptions = /* @__PURE__ */ new Set();
   externalReaders = /* @__PURE__ */ new Map();
@@ -33863,16 +33977,13 @@ var WorkflowScriptResources = class {
   silentDeletionRunIds = /* @__PURE__ */ new Set();
   elicitationControllers = /* @__PURE__ */ new Map();
   onRunDeleted = ({ runId }) => {
-    const uri = workflowScriptUri(runId);
-    this.subscriptions.delete(uri);
+    this.subscriptions.delete(workflowScriptUri(runId));
+    this.subscriptions.delete(workflowResultUri(runId));
     this.closeEventSubscription(workflowRunEventsUri(runId));
     this.cancelPendingElicitation(runId);
     this.deletedRunIds.add(runId);
     const notify = !this.silentDeletionRunIds.delete(runId);
-    if (notify) {
-      if (this.modernNotifier) this.modernNotifier.resourcesChanged();
-      else void this.mcp.sendResourceListChanged();
-    }
+    if (notify && !this.modernNotifier) void this.mcp.sendResourceListChanged();
   };
   /** The persistence store containing runId, if any known project store holds it. */
   persistenceFor(runId) {
@@ -33959,6 +34070,57 @@ var WorkflowScriptResources = class {
     }
     return newestToOldest.reverse();
   }
+  /** Exact persisted result metadata, available only for completed runs with a JSON value. */
+  serializedResult(runId) {
+    const state = this.loadState(runId);
+    if (!state) {
+      throw new ProtocolError(
+        ProtocolErrorCode.InvalidParams,
+        `No workflow run found for runId "${runId}" in this server's project-scoped run store.`
+      );
+    }
+    if (!hasExactResult(state)) {
+      throw new ProtocolError(
+        ProtocolErrorCode.InvalidParams,
+        state.status === "completed" ? `Workflow run "${runId}" completed without a JSON result.` : `Workflow result for runId "${runId}" is unavailable while the run is ${state.status}.`
+      );
+    }
+    let text;
+    try {
+      text = JSON.stringify(state.result);
+    } catch {
+      throw new ProtocolError(
+        ProtocolErrorCode.InternalError,
+        `Workflow result for runId "${runId}" could not be serialized.`
+      );
+    }
+    if (text === void 0) {
+      throw new ProtocolError(
+        ProtocolErrorCode.InternalError,
+        `Workflow result for runId "${runId}" could not be serialized.`
+      );
+    }
+    return {
+      uri: workflowResultUri(runId),
+      text,
+      bytes: Buffer.byteLength(text, "utf8")
+    };
+  }
+  availableResultUri(runId) {
+    const state = this.loadState(runId);
+    return state && hasExactResult(state) ? workflowResultUri(runId) : void 0;
+  }
+  resultLink(runId) {
+    const state = this.loadState(runId);
+    if (!state || !hasExactResult(state)) return void 0;
+    return {
+      type: "resource_link",
+      uri: workflowResultUri(runId),
+      name: `${state.workflowName} result (${state.runId})`,
+      description: `exact workflow result \xB7 completed ${state.completedAt ?? state.updatedAt}`,
+      mimeType: RESULT_RESOURCE_MIME_TYPE
+    };
+  }
   links(lineage) {
     const links = [];
     for (const entry of lineage) {
@@ -33968,8 +34130,8 @@ var WorkflowScriptResources = class {
       links.push({
         type: "resource_link",
         uri: entry.uri,
-        name: `${state.workflowName} (${state.runId})`,
-        description: `${state.status} \xB7 started ${state.startedAt}`,
+        name: `${state.workflowName} script (${state.runId})`,
+        description: `workflow script \xB7 ${state.status} \xB7 started ${state.startedAt}`,
         mimeType: SCRIPT_RESOURCE_MIME_TYPE
       });
     }
@@ -33985,8 +34147,8 @@ var WorkflowScriptResources = class {
         list: () => ({
           resources: this.recentRuns().map((state) => ({
             uri: workflowScriptUri(state.runId),
-            name: `${state.workflowName} (${state.runId})`,
-            description: `${state.status} \xB7 started ${state.startedAt}`,
+            name: `${state.workflowName} script (${state.runId})`,
+            description: `workflow script \xB7 ${state.status} \xB7 started ${state.startedAt}`,
             mimeType: SCRIPT_RESOURCE_MIME_TYPE
           }))
         }),
@@ -34001,6 +34163,28 @@ var WorkflowScriptResources = class {
       },
       (uri) => this.readResource(uri.toString())
     );
+    this.mcp.registerResource(
+      "workflow-run-result",
+      new ResourceTemplate("workflow://runs/{runId}/result", {
+        list: () => ({
+          resources: this.recentRuns().filter(hasExactResult).map((state) => ({
+            uri: workflowResultUri(state.runId),
+            name: `${state.workflowName} result (${state.runId})`,
+            description: `exact workflow result \xB7 completed ${state.completedAt ?? state.updatedAt}`,
+            mimeType: RESULT_RESOURCE_MIME_TYPE
+          }))
+        }),
+        complete: {
+          runId: (partial2) => this.recentRuns().filter(hasExactResult).map((state) => state.runId).filter((runId) => runId.startsWith(partial2))
+        }
+      }),
+      {
+        title: "Workflow run results",
+        description: "Exact JSON results for completed workflow runs. Listing is discovery-only and contains at most the 50 newest runs; direct workflow://runs/{runId}/result reads remain available until run deletion.",
+        mimeType: RESULT_RESOURCE_MIME_TYPE
+      },
+      (uri) => this.readResultResource(uri.toString())
+    );
     this.mcp.registerResource(
       "workflow-run-events",
       new ResourceTemplate("workflow://runs/{runId}/events", {
@@ -34030,7 +34214,9 @@ var WorkflowScriptResources = class {
         if (external.available !== void 0 && !external.available(ctx)) resourceNotFound(uri);
         return external.read();
       }
-      return uri.includes("/events") ? this.readEventsResource(uri) : this.readResource(uri);
+      if (uri.includes("/events")) return this.readEventsResource(uri);
+      if (workflowRunIdFromResultUri(uri)) return this.readResultResource(uri);
+      return this.readResource(uri);
     });
     this.mcp.server.setRequestHandler("resources/subscribe", (request, ctx) => {
       const uri = request.params.uri;
@@ -34045,6 +34231,12 @@ var WorkflowScriptResources = class {
         this.subscriptions.add(uri);
         return {};
       }
+      const resultRunId = workflowRunIdFromResultUri(uri);
+      if (resultRunId) {
+        if (!this.availableResultUri(resultRunId)) resourceNotFound(uri);
+        this.subscriptions.add(uri);
+        return {};
+      }
       if (!uri.includes("/events")) resourceNotFound(uri);
       const parsed = parseWorkflowRunEventsUri(uri);
       if (!parsed) malformedEventsUri();
@@ -34058,7 +34250,7 @@ var WorkflowScriptResources = class {
         if (external.available !== void 0 && !external.available(ctx)) resourceNotFound(uri);
         return {};
       }
-      const runId = workflowRunIdFromScriptUri(uri);
+      const runId = workflowRunIdFromScriptUri(uri) ?? workflowRunIdFromResultUri(uri);
       if (runId) {
         if (!this.loadState(runId) && !this.loadTombstone(runId) && !this.deletedRunIds.has(runId) && !this.subscriptions.has(uri)) resourceNotFound(uri);
         this.subscriptions.delete(uri);
@@ -34227,6 +34419,20 @@ var WorkflowScriptResources = class {
       mapEventError(error51, parsed);
     }
   }
+  readResultResource(uri) {
+    const runId = workflowRunIdFromResultUri(uri);
+    if (!runId) resourceNotFound(uri);
+    const result = this.serializedResult(runId);
+    return {
+      contents: [
+        {
+          uri: result.uri,
+          mimeType: RESULT_RESOURCE_MIME_TYPE,
+          text: result.text
+        }
+      ]
+    };
+  }
   readResource(uri) {
     const runId = workflowRunIdFromScriptUri(uri);
     if (!runId) resourceNotFound(uri);
@@ -34557,7 +34763,7 @@ var DEFAULT_REQUEST_STATE_CODEC = createRequestStateCodec({
   bind: (ctx) => ctx.mcpReq.method
 });
 var require2 = createRequire(import.meta.url);
-var SERVER_VERSION = true ? "0.38.0" : require2("../package.json").version;
+var SERVER_VERSION = true ? "0.38.2" : require2("../package.json").version;
 var SERVER_INSTRUCTIONS = [
   "This server exposes three model-facing tools for authoring and orchestrating multi-agent work. workflow and repl spawn subagents over the same ACP backends \u2014 the registry built-ins Claude, Codex, OpenCode, and pi, plus any registered custom agents \u2014 and key their durable state by an absolute projectDir (required on the shared daemon; defaults to the server's own project in single-project mode). Backend credentials come from each agent's own login (claude, codex, opencode, pi), so there is nothing auth-shaped to configure here.",
   '\u2022 docs \u2014 SELECTIVE VERSION-MATCHED REFERENCE. Omit topic or use topic:"index" for the bounded catalog, then read exactly one workflow/* or repl/* topic. It embeds the selected text/markdown resource, runs no code, opens no backend, and needs no projectDir. Use it when the compact tool descriptions do not contain enough syntax or lifecycle detail.',
@@ -35338,17 +35544,98 @@ function persistedOutcome(persisted, status) {
     ...persisted.checkpointsTaken === void 0 ? {} : { checkpointsTaken: persisted.checkpointsTaken },
     ...persisted.resumeReport === void 0 ? {} : { resumeReport: persisted.resumeReport },
     ...persisted.replayEligibility === void 0 ? {} : { replayEligibility: persisted.replayEligibility },
-    scriptUri: workflowScriptUri(persisted.runId)
+    scriptUri: workflowScriptUri(persisted.runId),
+    ...status.status === "completed" && persisted.result !== void 0 ? { resultUri: workflowResultUri(persisted.runId) } : {}
   };
 }
 function terminalOutcome(manager, runId, status) {
+  const persisted = manager.getPersistence().load(runId);
+  const resultUri = persisted?.status === "completed" && persisted.result !== void 0 ? workflowResultUri(runId) : void 0;
   const live = manager.getRun(runId)?.result;
   if (live) {
-    return toWorkflowExecutionOutcome(live, { scriptUri: workflowScriptUri(runId) });
+    return toWorkflowExecutionOutcome(live, {
+      scriptUri: workflowScriptUri(runId),
+      ...resultUri === void 0 ? {} : { resultUri }
+    });
   }
-  const persisted = manager.getPersistence().load(runId);
   return persisted ? persistedOutcome(persisted, status) : void 0;
 }
+var INLINE_WORKFLOW_RESULT_MAX_BYTES = 4096;
+function resultResourceFields(resources, runId) {
+  const resultUri = resources.availableResultUri(runId);
+  return resultUri === void 0 ? {} : { resultUri };
+}
+function resultContentBlocks(resources, runId, inline) {
+  const link = resources.resultLink(runId);
+  if (!link) return [];
+  const resultUri = link.uri;
+  if (inline) {
+    const result = resources.serializedResult(runId);
+    if (result.bytes <= INLINE_WORKFLOW_RESULT_MAX_BYTES) {
+      return [
+        {
+          type: "text",
+          text: `Workflow result (exact JSON):
+${result.text}`,
+          annotations: { audience: ["assistant"] }
+        },
+        link
+      ];
+    }
+    return [
+      {
+        type: "text",
+        text: `Exact workflow result: ${result.bytes} UTF-8 bytes at ${resultUri}. Read that resource directly, or call workflow with action="result", runId="${runId}", offset=0 and follow endOffset while hasMore is true for bounded exact chunks.`,
+        annotations: { audience: ["assistant"] }
+      },
+      link
+    ];
+  }
+  return [
+    {
+      type: "text",
+      text: `Exact workflow result: ${resultUri}. Read that resource directly, or call workflow with action="result", runId="${runId}", offset=0 and follow endOffset while hasMore is true for bounded exact chunks.`,
+      annotations: { audience: ["assistant"] }
+    },
+    link
+  ];
+}
+function isUtf8ContinuationByte(byte) {
+  return byte !== void 0 && (byte & 192) === 128;
+}
+function resultRetrievalPage(resources, runId, offset, maxBytes) {
+  const result = resources.serializedResult(runId);
+  const buffer = Buffer.from(result.text, "utf8");
+  if (offset > buffer.length) {
+    throw new ProtocolError(
+      ProtocolErrorCode.InvalidParams,
+      `Workflow result offset ${offset} exceeds totalBytes ${buffer.length} for runId "${runId}".`
+    );
+  }
+  if (offset < buffer.length && isUtf8ContinuationByte(buffer[offset])) {
+    throw new ProtocolError(
+      ProtocolErrorCode.InvalidParams,
+      `Workflow result offset ${offset} is not a UTF-8 boundary for runId "${runId}"; use the previous endOffset.`
+    );
+  }
+  let endOffset = Math.min(buffer.length, offset + maxBytes);
+  while (endOffset > offset && endOffset < buffer.length && isUtf8ContinuationByte(buffer[endOffset])) {
+    endOffset--;
+  }
+  return {
+    action: "result",
+    runId,
+    status: "completed",
+    resultUri: result.uri,
+    mimeType: RESULT_RESOURCE_MIME_TYPE,
+    encoding: "utf-8",
+    totalBytes: buffer.length,
+    offset,
+    endOffset,
+    hasMore: endOffset < buffer.length,
+    chunk: buffer.subarray(offset, endOffset).toString("utf8")
+  };
+}
 var AWAIT_CANCELLED = /* @__PURE__ */ Symbol("await-cancelled");
 var AWAIT_UNKNOWN_RUN = /* @__PURE__ */ Symbol("await-unknown-run");
 var EVENT_LOG_POLL_FALLBACK_CODES = /* @__PURE__ */ new Set([
@@ -35605,7 +35892,7 @@ function createWorkflowServer(runner, options = {}) {
   const workflowToolOutputSchema = workflowToolOutputShape;
   const workflowToolConfig = {
     title: "Discover, validate, run, inspect, await, answer permissions, stop, or narrow-cancel a workflow",
-    description: 'Author and operate JavaScript agent workflows through one project-scoped tool. A script\'s first statement must be `export const meta = { name, description, phases? }`. When present, phases must be an array of objects shaped `{ title: string, detail?: string, model?: string }`, never an array of strings. Inside the deterministic script realm use agent(prompt, options?) for one subagent; parallel([thunks]) for a barrier; pipeline(items, ...stages) for streaming stages; checkpoint(prompt, options?) for a human gate; phase(title) and log(message) for progress; and return the final JSON-serializable value. Top-level await is supported. Imports, require, network APIs, Date.now(), and Math.random() are unavailable. Always label agent calls; schema is a plain JSON Schema object for structured results. The only agent option keys are label, phase, model, tier, mode, configOptions, schema, cwd, timeoutMs, idleTimeoutMs, retries, isolation:"worktree", resume, agentType, mcpServers, images, meta, promptMeta, and keepSession; unknown keys reject before admission. Every parallel entry must be a thunk: parallel([() => agent(...), () => agent(...)]). For deeper syntax, read docs topic workflow/quickstart and then one related workflow/* topic. Minimal script: `export const meta = { name: "review", description: "Review a target", phases: [{ title: "Review" }] }; phase("Review"); const report = await agent("Review " + args.target, { label: "review" }); return { report };`. Omit model for the server default (explicit AGENTPRISM_DEFAULT_BACKEND, else a zero-token auto-selected project pin), or use a backend name alone to preserve that backend\'s configured default. Before choosing a pinned model, mode, or configOptions, call action:"config" with projectDir and optional harnesses/modelFilter; after choosing a model, pass modelSpecs to read its model-specific options. Config returns every harness-advertised mode name, description, and metadata plus AgentPrism\'s omitted-mode default: Claude auto, Codex agent, OpenCode build, and no Pi mode. Pin only exact advertised ids. Config opens no-prompt sessions, spends zero tokens, and starts no workflow. action:"run" automatically performs static validation, a mocked dry run, and routed config checks before admission. Invalid scripts return bounded diagnostics with status:"rejected" and create no run ID, reserve no background slot, and spend no tokens. Run, resume, inspect, await, answer a live ACP permission, or stop an admitted workflow through the same tool. The script orchestrates agent() subagents (and optional checkpoint() gates) over registry built-ins\u2014currently Claude, Codex, OpenCode, and pi\u2014ACP backends, plus registered custom agents. Supply exactly one of inline script or absolute scriptPath; path content is read once and snapshotted at admission. ' + (requireProjectDir ? "config and run REQUIRE projectDir (absolute): it is the discovery cwd and selects the project-scoped run store/default execution cwd. " : "run optionally takes projectDir (absolute) to select the project-scoped run store; default is this server's own project. ") + `inspect/await/stop/permissions-response locate the project store from runId and never accept projectDir. Foreground is the default and streams progress; background:true returns a durable runId for bounded action:"await" calls. run and await honor _meta.progressToken with notifications/progress while they block. Pass resumeFromRunId to execute a new run from a prior journal prefix. In hosts that render MCP Apps, every call of this tool shows a live self-updating run-monitor panel and the panel reports phase starts, pauses, and terminal outcomes on its own \u2014 do NOT poll action:"inspect" to check on a run there; prefer a single bounded action:"await". Use action:"inspect" with a runId when you need machine-readable status data: a safe bounded status, log tail, attributed call previews, and pending ACP permissions. Await returns early with action-required when one appears. Elicitation-capable hosts can present the exact backend options; otherwise use action:"permissions-response" with the returned permissionId and an exact advertised optionId or cancelled outcome. Use action:"stop" to durably abort through the run's execution owner; cross-generation control may return a durable pending operationId before final settlement. Add callIndex to cancel only that live agent and keep the run live. forceOwner explicitly authorizes terminating a superseded owner and is forbidden with callIndex. labelGlob remains an output filter. A final whole-run stop makes resume safe immediately; pending control must be retried or observed with inspect/await. Every admitted script is readable at workflow://runs/{runId}/script and results include resource links. Background runs are tracked per project, capped at four active/starting runs, and use headless checkpoint semantics; checkpointReplies continue a checkpoint pause in a new run.`,
+    description: 'Author and operate JavaScript agent workflows through one project-scoped tool. A script\'s first statement must be `export const meta = { name, description, phases? }`. When present, phases must be an array of objects shaped `{ title: string, detail?: string, model?: string }`, never an array of strings. Inside the deterministic script realm use agent(prompt, options?) for one subagent; parallel([thunks]) for a barrier; pipeline(items, ...stages) for streaming stages; checkpoint(prompt, options?) for a human gate; phase(title) and log(message) for progress; and return the final JSON-serializable value. Top-level await is supported. Imports, require, network APIs, Date.now(), and Math.random() are unavailable. Always label agent calls; schema is a plain JSON Schema object for structured results. The only agent option keys are label, phase, model, tier, mode, configOptions, schema, cwd, timeoutMs, idleTimeoutMs, retries, isolation:"worktree", resume, agentType, mcpServers, images, meta, promptMeta, and keepSession; unknown keys reject before admission. Every parallel entry must be a thunk: parallel([() => agent(...), () => agent(...)]). For deeper syntax, read docs topic workflow/quickstart and then one related workflow/* topic. Minimal script: `export const meta = { name: "review", description: "Review a target", phases: [{ title: "Review" }] }; phase("Review"); const report = await agent("Review " + args.target, { label: "review" }); return { report };`. Omit model for the server default (explicit AGENTPRISM_DEFAULT_BACKEND, else a zero-token auto-selected project pin), or use a backend name alone to preserve that backend\'s configured default. Before choosing a pinned model, mode, or configOptions, call action:"config" with projectDir and optional harnesses/modelFilter; after choosing a model, pass modelSpecs to read its model-specific options. Config returns every harness-advertised mode name, description, and metadata plus AgentPrism\'s omitted-mode default: Claude auto, Codex agent, OpenCode build, and no Pi mode. Pin only exact advertised ids. Config opens no-prompt sessions, spends zero tokens, and starts no workflow. action:"run" automatically performs static validation, a mocked dry run, and routed config checks before admission. Invalid scripts return bounded diagnostics with status:"rejected" and create no run ID, reserve no background slot, and spend no tokens. Run, resume, inspect, await, retrieve an exact completed result, answer a live ACP permission, or stop an admitted workflow through the same tool. The script orchestrates agent() subagents (and optional checkpoint() gates) over registry built-ins\u2014currently Claude, Codex, OpenCode, and pi\u2014ACP backends, plus registered custom agents. Supply exactly one of inline script or absolute scriptPath; path content is read once and snapshotted at admission. ' + (requireProjectDir ? "config and run REQUIRE projectDir (absolute): it is the discovery cwd and selects the project-scoped run store/default execution cwd. " : "run optionally takes projectDir (absolute) to select the project-scoped run store; default is this server's own project. ") + `inspect/await/result/stop/permissions-response locate the project store from runId and never accept projectDir. Foreground is the default and streams progress; background:true returns a durable runId for bounded action:"await" calls. run and await honor _meta.progressToken with notifications/progress while they block. Pass resumeFromRunId to execute a new run from a prior journal prefix. In hosts that render MCP Apps, every call of this tool shows a live self-updating run-monitor panel and the panel reports phase starts, pauses, and terminal outcomes on its own \u2014 do NOT poll action:"inspect" to check on a run there; prefer a single bounded action:"await". Use action:"inspect" with a runId when you need machine-readable status data: a safe bounded status, log tail, attributed call previews, and pending ACP permissions. Await returns early with action-required when one appears. Elicitation-capable hosts can present the exact backend options; otherwise use action:"permissions-response" with the returned permissionId and an exact advertised optionId or cancelled outcome. Use action:"stop" to durably abort through the run's execution owner; cross-generation control may return a durable pending operationId before final settlement. Add callIndex to cancel only that live agent and keep the run live. forceOwner explicitly authorizes terminating a superseded owner and is forbidden with callIndex. labelGlob remains an output filter. A final whole-run stop makes resume safe immediately; pending control must be retried or observed with inspect/await. Every admitted script is readable at workflow://runs/{runId}/script. Completed JSON results are readable at workflow://runs/{runId}/result; small results are also copied into text for content-first hosts, while large results can be paged exactly with action:"result", offset, and maxBytes. Result and script resource links are labelled separately. Background runs are tracked per project, capped at four active/starting runs, and use headless checkpoint semantics; checkpointReplies continue a checkpoint pause in a new run.`,
     inputSchema: workflowToolInputSchema,
     outputSchema: workflowToolOutputSchema,
     annotations: void 0
@@ -35749,7 +36036,12 @@ function createWorkflowServer(runner, options = {}) {
       );
       const projected = addInspectionResourceFields(
         status,
-        { scriptUri: workflowScriptUri(requestState.runId), lineage, pendingPermissions: remaining },
+        {
+          scriptUri: workflowScriptUri(requestState.runId),
+          ...resultResourceFields(scriptResources, requestState.runId),
+          lineage,
+          pendingPermissions: remaining
+        },
         inspectionRetentionMetadata(manager, requestState.runId, status)
       );
       return {
@@ -35764,6 +36056,7 @@ function createWorkflowServer(runner, options = {}) {
 ${formatInspectionSummary(projected)}`,
             annotations: { audience: ["assistant"] }
           },
+          ...resultContentBlocks(scriptResources, requestState.runId, false),
           ...scriptResources.links(lineage)
         ],
         isError: false
@@ -35839,6 +36132,35 @@ ${formatInspectionSummary(projected)}`,
         }
       }
     }
+    if (parsedInput.action === "result") {
+      try {
+        const page = resultRetrievalPage(
+          scriptResources,
+          parsedInput.runId,
+          parsedInput.offset ?? 0,
+          parsedInput.maxBytes ?? WORKFLOW_RESULT_CHUNK_BYTES_DEFAULT
+        );
+        const resultLink = scriptResources.resultLink(parsedInput.runId);
+        return {
+          structuredContent: { ...page },
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(page),
+              annotations: { audience: ["assistant"] }
+            },
+            ...resultLink === void 0 ? [] : [resultLink]
+          ],
+          isError: false
+        };
+      } catch (error51) {
+        if (!(error51 instanceof ProtocolError)) throw error51;
+        return {
+          content: [{ type: "text", text: error51.message }],
+          isError: true
+        };
+      }
+    }
     if (parsedInput.action === "permissions-response") {
       const acknowledgement = await respondToPermission(
         manager,
@@ -35866,7 +36188,12 @@ ${formatInspectionSummary(projected)}`,
       );
       const projected = addInspectionResourceFields(
         status,
-        { scriptUri: workflowScriptUri(parsedInput.runId), lineage, pendingPermissions },
+        {
+          scriptUri: workflowScriptUri(parsedInput.runId),
+          ...resultResourceFields(scriptResources, parsedInput.runId),
+          lineage,
+          pendingPermissions
+        },
         inspectionRetentionMetadata(manager, parsedInput.runId, status)
       );
       return {
@@ -35881,6 +36208,7 @@ ${formatInspectionSummary(projected)}`,
 ` + formatInspectionSummary(projected) + formatPendingPermissions(pendingPermissions),
             annotations: { audience: ["assistant"] }
           },
+          ...resultContentBlocks(scriptResources, parsedInput.runId, false),
           ...scriptResources.links(lineage)
         ],
         isError: false
@@ -35956,6 +36284,7 @@ ${formatInspectionSummary(projected)}`,
         status,
         {
           scriptUri: workflowScriptUri(parsedInput.runId),
+          ...resultResourceFields(scriptResources, parsedInput.runId),
           lineage,
           pendingPermissions,
           interaction: permissionInteraction(canElicitPermission)
@@ -35976,6 +36305,7 @@ ${formatInspectionSummary(projected)}`,
 Permission ${acknowledgement.permissionId} resolved.` : "") + formatPendingPermissions(pendingPermissions),
             annotations: { audience: ["assistant"] }
           },
+          ...resultContentBlocks(scriptResources, parsedInput.runId, false),
           ...scriptResources.links(lineage)
         ],
         isError: false
@@ -36177,6 +36507,7 @@ Permission ${acknowledgement.permissionId} resolved.` : "") + formatPendingPermi
         status,
         {
           scriptUri: workflowScriptUri(parsedInput.runId),
+          ...resultResourceFields(scriptResources, parsedInput.runId),
           lineage,
           stopped,
           alreadyTerminal
@@ -36187,7 +36518,11 @@ Permission ${acknowledgement.permissionId} resolved.` : "") + formatPendingPermi
       const currentLink = scriptResources.links(lineage).filter((link) => link.uri === workflowScriptUri(parsedInput.runId));
       return {
         structuredContent: { ...result },
-        content: [{ type: "text", text: formatStopSummary(result) }, ...currentLink],
+        content: [
+          { type: "text", text: formatStopSummary(result) },
+          ...resultContentBlocks(scriptResources, parsedInput.runId, false),
+          ...currentLink
+        ],
         isError: false
       };
     }
@@ -36350,6 +36685,7 @@ Permission ${acknowledgement.permissionId} resolved.` : "") + formatPendingPermi
           pendingPermissions,
           interaction: permissionInteraction(canElicitPermission),
           scriptUri: workflowScriptUri(parsedInput.runId),
+          ...resultResourceFields(scriptResources, parsedInput.runId),
           lineage
         },
         inspectionRetentionMetadata(manager, parsedInput.runId, status)
@@ -36367,6 +36703,7 @@ Permission ${acknowledgement.permissionId} resolved.` : "") + formatPendingPermi
             text: formatAwaitSummary(result) + formatPendingPermissions(pendingPermissions),
             annotations: { audience: ["assistant"] }
           },
+          ...resultContentBlocks(scriptResources, parsedInput.runId, true),
           ...scriptResources.links(lineage)
         ],
         isError: false
@@ -36686,14 +37023,16 @@ Call workflow with action="await" or action="inspect"; elicitation-capable clien
         });
       }
       const scriptUri = workflowScriptUri(run.runId);
+      const resultFields = resultResourceFields(scriptResources, run.runId);
       const structuredContent = {
-        ...toWorkflowToolResult(run, { scriptSource, scriptUri })
+        ...toWorkflowToolResult(run, { scriptSource, scriptUri, ...resultFields })
       };
       const isError = run.status === "failed" || run.status === "aborted";
       return {
         structuredContent: { ...structuredContent },
         content: [
           { type: "text", text: `${formatRunSummary(run)}${preflightWarningText}` },
+          ...resultContentBlocks(scriptResources, run.runId, true),
           ...scriptResources.links([{ runId: run.runId, uri: scriptUri, available: true }])
         ],
         isError
@@ -38881,6 +39220,16 @@ async function createDaemon(options) {
   const detachModernRunDeleted = projects.onRunDeleted(() => modernNotifier.resourcesChanged());
   const detachModernRunEvent = projects.onRunEventPersisted((record2) => {
     modernNotifier.resourceUpdated(workflowRunEventsUri(record2.runId));
+    if (record2.event.type !== "complete") return;
+    queueMicrotask(() => {
+      try {
+        const state = projects.storeFor(record2.runId)?.manager.getPersistence().load(record2.runId);
+        if (state?.status === "completed" && state.result !== void 0) {
+          modernNotifier.resourcesChanged();
+        }
+      } catch {
+      }
+    });
   });
   const handleMcpRequest = async (req, res) => {
     const sessionHeader = req.headers["mcp-session-id"];
@@ -53262,12 +53611,16 @@ export {
   MCP_ENDPOINT_PATH,
   RESOURCE_MIME_TYPE,
   RESOURCE_URI_META_KEY,
+  RESULT_RESOURCE_MIME_TYPE,
   RUN_MONITOR_RESOURCE_URI,
   ReplPresenceLedger,
   SCRIPT_RESOURCE_LIST_LIMIT,
   SCRIPT_RESOURCE_MIME_TYPE,
   SHUTDOWN_DEADLINE_MS,
   WORKFLOW_EVENTS_TOOL_NAME,
+  WORKFLOW_RESULT_CHUNK_BYTES_DEFAULT,
+  WORKFLOW_RESULT_CHUNK_BYTES_MAX,
+  WORKFLOW_RESULT_CHUNK_BYTES_MIN,
   WORKFLOW_RUN_EVENTS_SCHEMA_VERSION,
   WorkflowPermissionBroker,
   WorkflowProjectRegistry,
@@ -53310,7 +53663,9 @@ export {
   toWorkflowExecutionOutcome,
   toWorkflowToolResult,
   validateRequest,
+  workflowResultUri,
   workflowRunEventsUri,
+  workflowRunIdFromResultUri,
   workflowRunIdFromScriptUri,
   workflowScriptUri,
   workflowToolInputShape,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automatalabs/workflows",
-  "version": "0.58.0",
+  "version": "0.58.1",
   "license": "Apache-2.0",
   "engines": {
     "node": ">=22"
@@ -31,10 +31,10 @@
   },
   "dependencies": {
     "typebox": "1.3.2",
-    "@automatalabs/repl-engine": "0.4.12",
+    "@automatalabs/repl-engine": "0.4.13",
     "@automatalabs/shared-types": "0.34.0",
     "@automatalabs/workflow-engine": "0.42.0",
-    "@automatalabs/acp-agents": "0.43.0"
+    "@automatalabs/acp-agents": "0.43.1"
   },
   "devDependencies": {
     "esbuild": "^0.28.1"