@codemation/host 0.6.0 → 0.7.0

package/dist/{server-CJFfY67o.js.map → server-Y7kxwtCK.js.map}

@@ -1 +1 @@
-{"version":3,"file":"server-CJFfY67o.js","names":["config: CodemationConfig","consumerRoot: string","configSource?: string","workflowSources: ReadonlyArray<string>","env?: Readonly<NodeJS.ProcessEnv>","consumerConfigLoader: CodemationConsumerConfigLoader","appConfigFactory: AppConfigFactory","discoveredPackages: CodemationDiscoveredPluginPackage[]","resolvedPackages: CodemationResolvedPluginPackage[]","packageRoots: string[]"],"sources":["../src/presentation/http/CodemationServerGatewayFactory.ts","../src/presentation/server/AppConfigLoader.ts","../src/presentation/server/CodemationPluginDiscovery.ts"],"sourcesContent":["import { accessSync } from \"node:fs\";\nimport path from \"node:path\";\nimport type { QueryBus } from \"../../application/bus/QueryBus\";\nimport type { WorkflowDto, WorkflowSummary } from \"../../application/contracts/WorkflowViewContracts\";\nimport { WorkflowDefinitionMapper } from \"../../application/mapping/WorkflowDefinitionMapper\";\nimport { GetWorkflowDetailQuery } from \"../../application/queries/GetWorkflowDetailQuery\";\nimport { GetWorkflowSummariesQuery } from \"../../application/queries/GetWorkflowSummariesQuery\";\nimport { ApplicationTokens } from \"../../applicationTokens\";\nimport { AppContainerFactory } from \"../../bootstrap/AppContainerFactory\";\nimport { AppContainerLifecycle } from \"../../bootstrap/AppContainerLifecycle\";\nimport { FrontendRuntime } from \"../../bootstrap/runtime/FrontendRuntime\";\nimport { AppConfigFactory } from \"../../bootstrap/runtime/AppConfigFactory\";\nimport type { CodemationConfig } from \"../config/CodemationConfig\";\nimport { CodemationConfigNormalizer } from \"../config/CodemationConfigNormalizer\";\nimport { CodemationHonoApiApp } from \"./hono/CodemationHonoApiAppFactory\";\n\ntype ServerGatewayContext = Readonly<{\n  container: import(\"@codemation/core\").Container;\n  httpApi: CodemationHonoApiApp;\n  queryBus: QueryBus;\n  workflowDefinitionMapper: WorkflowDefinitionMapper;\n}>;\n\nexport class CodemationServerGateway {\n  private static readonly contextsByConfig = new WeakMap<object, Promise<ServerGatewayContext>>();\n\n  constructor(\n    private readonly config: CodemationConfig,\n    private readonly consumerRoot: string,\n    private readonly configSource?: string,\n    private readonly workflowSources: ReadonlyArray<string> = [],\n    private readonly env?: Readonly<NodeJS.ProcessEnv>,\n  ) {}\n\n  async dispatch(request: Request): Promise<Response> {\n    return await (await this.getContext()).httpApi.fetch(request);\n  }\n\n  async prepare(): Promise<void> {\n    await this.getContext();\n  }\n\n  async close(): Promise<void> {\n    const cachedContext = CodemationServerGateway.contextsByConfig.get(this.config as object);\n    if (!cachedContext) {\n      return;\n    }\n    CodemationServerGateway.contextsByConfig.delete(this.config as object);\n    await (await cachedContext).container.resolve(AppContainerLifecycle).stop();\n  }\n\n  async loadWorkflowSummaries(): Promise<ReadonlyArray<WorkflowSummary>> {\n    const context = await this.getContext();\n    const workflows = await context.queryBus.execute(new GetWorkflowSummariesQuery());\n    return workflows.map((workflow) => context.workflowDefinitionMapper.toSummary(workflow));\n  }\n\n  async loadWorkflowDetail(workflowId: string): Promise<WorkflowDto> {\n    const context = await this.getContext();\n    const workflow = await context.queryBus.execute(new GetWorkflowDetailQuery(workflowId));\n    if (!workflow) {\n      throw new Error(`Unknown workflowId: ${workflowId}`);\n    }\n    return await context.workflowDefinitionMapper.map(workflow);\n  }\n\n  private getContext(): Promise<ServerGatewayContext> {\n    const cachedContext = CodemationServerGateway.contextsByConfig.get(this.config as object);\n    if (cachedContext) {\n      return cachedContext;\n    }\n    const nextContext = this.createContext();\n    CodemationServerGateway.contextsByConfig.set(this.config as object, nextContext);\n    return nextContext;\n  }\n\n  private async createContext(): Promise<ServerGatewayContext> {\n    const repoRoot = this.detectWorkspaceRoot(this.consumerRoot);\n    // This gateway is the config/env boundary that materializes AppConfig from raw inputs.\n    // eslint-disable-next-line no-restricted-properties\n    const env = this.env ?? process.env;\n    const appConfig = new AppConfigFactory().create({\n      repoRoot,\n      consumerRoot: this.consumerRoot,\n      env,\n      config: new CodemationConfigNormalizer().normalize(this.config),\n      workflowSources: this.resolveWorkflowSources(),\n    });\n    const container = await new AppContainerFactory().create({\n      appConfig,\n      sharedWorkflowWebsocketServer: null,\n    });\n    await container.resolve(FrontendRuntime).start();\n    return {\n      container,\n      httpApi: container.resolve(CodemationHonoApiApp),\n      queryBus: container.resolve(ApplicationTokens.QueryBus),\n      workflowDefinitionMapper: container.resolve(WorkflowDefinitionMapper),\n    };\n  }\n\n  private resolveWorkflowSources(): ReadonlyArray<string> {\n    if (this.workflowSources.length > 0) {\n      return [...this.workflowSources];\n    }\n    if (!this.configSource || !this.config.workflows || this.config.workflows.length === 0) {\n      return [];\n    }\n    return [this.configSource];\n  }\n  private detectWorkspaceRoot(startDirectory: string): string {\n    let currentDirectory = path.resolve(startDirectory);\n    while (true) {\n      try {\n        accessSync(path.resolve(currentDirectory, \"pnpm-workspace.yaml\"));\n        return currentDirectory;\n      } catch {\n        const parentDirectory = path.dirname(currentDirectory);\n        if (parentDirectory === currentDirectory) {\n          return startDirectory;\n        }\n        currentDirectory = parentDirectory;\n      }\n    }\n  }\n}\n","import type { AppConfig } from \"../config/AppConfig\";\nimport { CodemationConsumerConfigLoader } from \"./CodemationConsumerConfigLoader\";\nimport { AppConfigFactory } from \"../../bootstrap/runtime/AppConfigFactory\";\n\nexport type AppConfigLoadResult = Readonly<{\n  appConfig: AppConfig;\n  bootstrapSource: string | null;\n}>;\n\nexport class AppConfigLoader {\n  constructor(\n    private readonly consumerConfigLoader: CodemationConsumerConfigLoader = new CodemationConsumerConfigLoader(),\n    private readonly appConfigFactory: AppConfigFactory = new AppConfigFactory(),\n  ) {}\n\n  async load(\n    args: Readonly<{\n      consumerRoot: string;\n      repoRoot: string;\n      env: NodeJS.ProcessEnv;\n      configPathOverride?: string;\n    }>,\n  ): Promise<AppConfigLoadResult> {\n    const resolution = await this.consumerConfigLoader.load({\n      consumerRoot: args.consumerRoot,\n      configPathOverride: args.configPathOverride,\n    });\n    return {\n      appConfig: this.appConfigFactory.create({\n        repoRoot: args.repoRoot,\n        consumerRoot: args.consumerRoot,\n        env: args.env,\n        config: resolution.config,\n        workflowSources: resolution.workflowSources,\n      }),\n      bootstrapSource: resolution.bootstrapSource,\n    };\n  }\n}\n","import type { CodemationPackageManifest } from \"../config/CodemationPackageManifest\";\nimport { CodemationPluginPackageMetadata, type CodemationPlugin } from \"../config/CodemationPlugin\";\nimport { readFile, readdir } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\n\nexport type CodemationDiscoveredPluginPackage = Readonly<{\n  packageName: string;\n  packageRoot: string;\n  pluginEntry: string;\n  developmentEntry?: string;\n}>;\n\nexport type CodemationResolvedPluginPackage = Readonly<\n  CodemationDiscoveredPluginPackage & {\n    plugin: CodemationPlugin;\n  }\n>;\n\ntype PackageJsonShape = Readonly<{\n  codemation?: CodemationPackageManifest;\n  name?: string;\n  exports?: Readonly<Record<string, unknown>>;\n}>;\n\nexport class CodemationPluginDiscovery {\n  private readonly pluginPackageMetadata = new CodemationPluginPackageMetadata();\n\n  async discover(consumerRoot: string): Promise<ReadonlyArray<CodemationDiscoveredPluginPackage>> {\n    const nodeModulesRoot = path.resolve(consumerRoot, \"node_modules\");\n    const packageRoots = await this.collectPackageRoots(nodeModulesRoot);\n    const discoveredPackages: CodemationDiscoveredPluginPackage[] = [];\n    for (const packageRoot of packageRoots) {\n      const packageJson = await this.readPackageJson(path.resolve(packageRoot, \"package.json\"));\n      const pluginManifest = packageJson.codemation?.plugin;\n      if (!packageJson.name || typeof pluginManifest !== \"string\" || pluginManifest.trim().length === 0) {\n        continue;\n      }\n      discoveredPackages.push({\n        packageName: packageJson.name,\n        packageRoot,\n        pluginEntry: pluginManifest,\n        developmentEntry: await this.resolveDevelopmentPluginEntry(packageRoot),\n      });\n    }\n    return discoveredPackages.sort((left, right) => left.packageName.localeCompare(right.packageName));\n  }\n\n  async resolvePlugins(consumerRoot: string): Promise<ReadonlyArray<CodemationResolvedPluginPackage>> {\n    const discoveredPackages = await this.discover(consumerRoot);\n    return await this.resolveDiscoveredPackages(discoveredPackages);\n  }\n\n  async resolveDiscoveredPackages(\n    discoveredPackages: ReadonlyArray<CodemationDiscoveredPluginPackage>,\n  ): Promise<ReadonlyArray<CodemationResolvedPluginPackage>> {\n    const resolvedPackages: CodemationResolvedPluginPackage[] = [];\n    for (const discoveredPackage of discoveredPackages) {\n      resolvedPackages.push({\n        ...discoveredPackage,\n        plugin: await this.loadPlugin(discoveredPackage),\n      });\n    }\n    return resolvedPackages;\n  }\n\n  private async collectPackageRoots(nodeModulesRoot: string): Promise<ReadonlyArray<string>> {\n    try {\n      const entries = await readdir(nodeModulesRoot, { withFileTypes: true });\n      const packageRoots: string[] = [];\n      for (const entry of entries) {\n        if (!entry.isDirectory() && !entry.isSymbolicLink()) {\n          continue;\n        }\n        if (entry.name.startsWith(\"@\")) {\n          const scopedEntries = await readdir(path.resolve(nodeModulesRoot, entry.name), { withFileTypes: true });\n          for (const scopedEntry of scopedEntries) {\n            if (scopedEntry.isDirectory() || scopedEntry.isSymbolicLink()) {\n              packageRoots.push(path.resolve(nodeModulesRoot, entry.name, scopedEntry.name));\n            }\n          }\n          continue;\n        }\n        packageRoots.push(path.resolve(nodeModulesRoot, entry.name));\n      }\n      return packageRoots;\n    } catch {\n      return [];\n    }\n  }\n\n  private async readPackageJson(packageJsonPath: string): Promise<PackageJsonShape> {\n    try {\n      const rawPackageJson = await readFile(packageJsonPath, \"utf8\");\n      return JSON.parse(rawPackageJson) as PackageJsonShape;\n    } catch {\n      return {};\n    }\n  }\n\n  private async loadPlugin(discoveredPackage: CodemationDiscoveredPluginPackage): Promise<CodemationPlugin> {\n    const pluginModulePath = path.resolve(discoveredPackage.packageRoot, this.resolvePluginEntry(discoveredPackage));\n    const importedModule = (await import(\n      /* webpackIgnore: true */ this.resolvePluginModuleSpecifier(pluginModulePath)\n    )) as Record<string, unknown>;\n    const exportedValue = importedModule.default;\n    const plugin = this.resolvePluginValue(exportedValue);\n    if (!plugin) {\n      throw new Error(`Plugin package \"${discoveredPackage.packageName}\" did not default-export a Codemation plugin.`);\n    }\n    return this.pluginPackageMetadata.attachPackageName(plugin, discoveredPackage.packageName);\n  }\n\n  private resolvePluginValue(value: unknown): CodemationPlugin | null {\n    if (this.isPluginConfig(value)) {\n      return value;\n    }\n    return null;\n  }\n\n  private isPluginConfig(value: unknown): value is CodemationPlugin {\n    if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n      return false;\n    }\n    const pluginValue = value as {\n      credentialTypes?: unknown;\n      register?: unknown;\n      sandbox?: unknown;\n    };\n    if (pluginValue.register !== undefined && typeof pluginValue.register !== \"function\") {\n      return false;\n    }\n    if (pluginValue.credentialTypes !== undefined && !Array.isArray(pluginValue.credentialTypes)) {\n      return false;\n    }\n    return (\n      pluginValue.register !== undefined ||\n      pluginValue.credentialTypes !== undefined ||\n      pluginValue.sandbox !== undefined ||\n      Object.keys(pluginValue).length === 0\n    );\n  }\n\n  private resolvePluginEntry(discoveredPackage: CodemationDiscoveredPluginPackage): string {\n    const preferSource =\n      process.env.CODEMATION_PREFER_PLUGIN_SOURCE_ENTRY === \"true\" &&\n      typeof discoveredPackage.developmentEntry === \"string\" &&\n      discoveredPackage.developmentEntry.trim().length > 0;\n    const selectedEntry = preferSource ? discoveredPackage.developmentEntry : discoveredPackage.pluginEntry;\n    return selectedEntry;\n  }\n\n  private async resolveDevelopmentPluginEntry(packageRoot: string): Promise<string | undefined> {\n    const candidates = [\n      path.resolve(packageRoot, \"codemation.plugin.ts\"),\n      path.resolve(packageRoot, \"codemation.plugin.js\"),\n      path.resolve(packageRoot, \"src\", \"codemation.plugin.ts\"),\n      path.resolve(packageRoot, \"src\", \"codemation.plugin.js\"),\n    ];\n    for (const candidate of candidates) {\n      if (await this.exists(candidate)) {\n        return path.relative(packageRoot, candidate);\n      }\n    }\n    return undefined;\n  }\n\n  private async exists(filePath: string): Promise<boolean> {\n    try {\n      await readFile(filePath, \"utf8\");\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  private resolvePluginModuleSpecifier(pluginModulePath: string): string {\n    return pathToFileURL(pluginModulePath).href;\n  }\n}\n"],"mappings":";;;;;;;;;;AAuBA,IAAa,0BAAb,MAAa,wBAAwB;CACnC,OAAwB,mCAAmB,IAAI,SAAgD;CAE/F,YACE,AAAiBA,QACjB,AAAiBC,cACjB,AAAiBC,cACjB,AAAiBC,kBAAyC,EAAE,EAC5D,AAAiBC,KACjB;EALiB;EACA;EACA;EACA;EACA;;CAGnB,MAAM,SAAS,SAAqC;AAClD,SAAO,OAAO,MAAM,KAAK,YAAY,EAAE,QAAQ,MAAM,QAAQ;;CAG/D,MAAM,UAAyB;AAC7B,QAAM,KAAK,YAAY;;CAGzB,MAAM,QAAuB;EAC3B,MAAM,gBAAgB,wBAAwB,iBAAiB,IAAI,KAAK,OAAiB;AACzF,MAAI,CAAC,cACH;AAEF,0BAAwB,iBAAiB,OAAO,KAAK,OAAiB;AACtE,SAAO,MAAM,eAAe,UAAU,QAAQ,sBAAsB,CAAC,MAAM;;CAG7E,MAAM,wBAAiE;EACrE,MAAM,UAAU,MAAM,KAAK,YAAY;AAEvC,UADkB,MAAM,QAAQ,SAAS,QAAQ,IAAI,2BAA2B,CAAC,EAChE,KAAK,aAAa,QAAQ,yBAAyB,UAAU,SAAS,CAAC;;CAG1F,MAAM,mBAAmB,YAA0C;EACjE,MAAM,UAAU,MAAM,KAAK,YAAY;EACvC,MAAM,WAAW,MAAM,QAAQ,SAAS,QAAQ,IAAI,uBAAuB,WAAW,CAAC;AACvF,MAAI,CAAC,SACH,OAAM,IAAI,MAAM,uBAAuB,aAAa;AAEtD,SAAO,MAAM,QAAQ,yBAAyB,IAAI,SAAS;;CAG7D,AAAQ,aAA4C;EAClD,MAAM,gBAAgB,wBAAwB,iBAAiB,IAAI,KAAK,OAAiB;AACzF,MAAI,cACF,QAAO;EAET,MAAM,cAAc,KAAK,eAAe;AACxC,0BAAwB,iBAAiB,IAAI,KAAK,QAAkB,YAAY;AAChF,SAAO;;CAGT,MAAc,gBAA+C;EAC3D,MAAM,WAAW,KAAK,oBAAoB,KAAK,aAAa;EAG5D,MAAM,MAAM,KAAK,OAAO,QAAQ;EAChC,MAAM,YAAY,IAAI,kBAAkB,CAAC,OAAO;GAC9C;GACA,cAAc,KAAK;GACnB;GACA,QAAQ,IAAI,4BAA4B,CAAC,UAAU,KAAK,OAAO;GAC/D,iBAAiB,KAAK,wBAAwB;GAC/C,CAAC;EACF,MAAM,YAAY,MAAM,IAAI,qBAAqB,CAAC,OAAO;GACvD;GACA,+BAA+B;GAChC,CAAC;AACF,QAAM,UAAU,QAAQ,gBAAgB,CAAC,OAAO;AAChD,SAAO;GACL;GACA,SAAS,UAAU,QAAQ,qBAAqB;GAChD,UAAU,UAAU,QAAQ,kBAAkB,SAAS;GACvD,0BAA0B,UAAU,QAAQ,yBAAyB;GACtE;;CAGH,AAAQ,yBAAgD;AACtD,MAAI,KAAK,gBAAgB,SAAS,EAChC,QAAO,CAAC,GAAG,KAAK,gBAAgB;AAElC,MAAI,CAAC,KAAK,gBAAgB,CAAC,KAAK,OAAO,aAAa,KAAK,OAAO,UAAU,WAAW,EACnF,QAAO,EAAE;AAEX,SAAO,CAAC,KAAK,aAAa;;CAE5B,AAAQ,oBAAoB,gBAAgC;EAC1D,IAAI,mBAAmB,KAAK,QAAQ,eAAe;AACnD,SAAO,KACL,KAAI;AACF,cAAW,KAAK,QAAQ,kBAAkB,sBAAsB,CAAC;AACjE,UAAO;UACD;GACN,MAAM,kBAAkB,KAAK,QAAQ,iBAAiB;AACtD,OAAI,oBAAoB,iBACtB,QAAO;AAET,sBAAmB;;;;;;;AChH3B,IAAa,kBAAb,MAA6B;CAC3B,YACE,AAAiBC,uBAAuD,IAAI,gCAAgC,EAC5G,AAAiBC,mBAAqC,IAAI,kBAAkB,EAC5E;EAFiB;EACA;;CAGnB,MAAM,KACJ,MAM8B;EAC9B,MAAM,aAAa,MAAM,KAAK,qBAAqB,KAAK;GACtD,cAAc,KAAK;GACnB,oBAAoB,KAAK;GAC1B,CAAC;AACF,SAAO;GACL,WAAW,KAAK,iBAAiB,OAAO;IACtC,UAAU,KAAK;IACf,cAAc,KAAK;IACnB,KAAK,KAAK;IACV,QAAQ,WAAW;IACnB,iBAAiB,WAAW;IAC7B,CAAC;GACF,iBAAiB,WAAW;GAC7B;;;;;;ACXL,IAAa,4BAAb,MAAuC;CACrC,AAAiB,wBAAwB,IAAI,iCAAiC;CAE9E,MAAM,SAAS,cAAiF;EAC9F,MAAM,kBAAkB,KAAK,QAAQ,cAAc,eAAe;EAClE,MAAM,eAAe,MAAM,KAAK,oBAAoB,gBAAgB;EACpE,MAAMC,qBAA0D,EAAE;AAClE,OAAK,MAAM,eAAe,cAAc;GACtC,MAAM,cAAc,MAAM,KAAK,gBAAgB,KAAK,QAAQ,aAAa,eAAe,CAAC;GACzF,MAAM,iBAAiB,YAAY,YAAY;AAC/C,OAAI,CAAC,YAAY,QAAQ,OAAO,mBAAmB,YAAY,eAAe,MAAM,CAAC,WAAW,EAC9F;AAEF,sBAAmB,KAAK;IACtB,aAAa,YAAY;IACzB;IACA,aAAa;IACb,kBAAkB,MAAM,KAAK,8BAA8B,YAAY;IACxE,CAAC;;AAEJ,SAAO,mBAAmB,MAAM,MAAM,UAAU,KAAK,YAAY,cAAc,MAAM,YAAY,CAAC;;CAGpG,MAAM,eAAe,cAA+E;EAClG,MAAM,qBAAqB,MAAM,KAAK,SAAS,aAAa;AAC5D,SAAO,MAAM,KAAK,0BAA0B,mBAAmB;;CAGjE,MAAM,0BACJ,oBACyD;EACzD,MAAMC,mBAAsD,EAAE;AAC9D,OAAK,MAAM,qBAAqB,mBAC9B,kBAAiB,KAAK;GACpB,GAAG;GACH,QAAQ,MAAM,KAAK,WAAW,kBAAkB;GACjD,CAAC;AAEJ,SAAO;;CAGT,MAAc,oBAAoB,iBAAyD;AACzF,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,iBAAiB,EAAE,eAAe,MAAM,CAAC;GACvE,MAAMC,eAAyB,EAAE;AACjC,QAAK,MAAM,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,aAAa,IAAI,CAAC,MAAM,gBAAgB,CACjD;AAEF,QAAI,MAAM,KAAK,WAAW,IAAI,EAAE;KAC9B,MAAM,gBAAgB,MAAM,QAAQ,KAAK,QAAQ,iBAAiB,MAAM,KAAK,EAAE,EAAE,eAAe,MAAM,CAAC;AACvG,UAAK,MAAM,eAAe,cACxB,KAAI,YAAY,aAAa,IAAI,YAAY,gBAAgB,CAC3D,cAAa,KAAK,KAAK,QAAQ,iBAAiB,MAAM,MAAM,YAAY,KAAK,CAAC;AAGlF;;AAEF,iBAAa,KAAK,KAAK,QAAQ,iBAAiB,MAAM,KAAK,CAAC;;AAE9D,UAAO;UACD;AACN,UAAO,EAAE;;;CAIb,MAAc,gBAAgB,iBAAoD;AAChF,MAAI;GACF,MAAM,iBAAiB,MAAM,SAAS,iBAAiB,OAAO;AAC9D,UAAO,KAAK,MAAM,eAAe;UAC3B;AACN,UAAO,EAAE;;;CAIb,MAAc,WAAW,mBAAiF;EACxG,MAAM,mBAAmB,KAAK,QAAQ,kBAAkB,aAAa,KAAK,mBAAmB,kBAAkB,CAAC;EAIhH,MAAM,iBAHkB,MAAM;;GACF,KAAK,6BAA6B,iBAAiB;GAE1C;EACrC,MAAM,SAAS,KAAK,mBAAmB,cAAc;AACrD,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,mBAAmB,kBAAkB,YAAY,+CAA+C;AAElH,SAAO,KAAK,sBAAsB,kBAAkB,QAAQ,kBAAkB,YAAY;;CAG5F,AAAQ,mBAAmB,OAAyC;AAClE,MAAI,KAAK,eAAe,MAAM,CAC5B,QAAO;AAET,SAAO;;CAGT,AAAQ,eAAe,OAA2C;AAChE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;EAET,MAAM,cAAc;AAKpB,MAAI,YAAY,aAAa,UAAa,OAAO,YAAY,aAAa,WACxE,QAAO;AAET,MAAI,YAAY,oBAAoB,UAAa,CAAC,MAAM,QAAQ,YAAY,gBAAgB,CAC1F,QAAO;AAET,SACE,YAAY,aAAa,UACzB,YAAY,oBAAoB,UAChC,YAAY,YAAY,UACxB,OAAO,KAAK,YAAY,CAAC,WAAW;;CAIxC,AAAQ,mBAAmB,mBAA8D;AAMvF,SAJE,QAAQ,IAAI,0CAA0C,UACtD,OAAO,kBAAkB,qBAAqB,YAC9C,kBAAkB,iBAAiB,MAAM,CAAC,SAAS,IAChB,kBAAkB,mBAAmB,kBAAkB;;CAI9F,MAAc,8BAA8B,aAAkD;EAC5F,MAAM,aAAa;GACjB,KAAK,QAAQ,aAAa,uBAAuB;GACjD,KAAK,QAAQ,aAAa,uBAAuB;GACjD,KAAK,QAAQ,aAAa,OAAO,uBAAuB;GACxD,KAAK,QAAQ,aAAa,OAAO,uBAAuB;GACzD;AACD,OAAK,MAAM,aAAa,WACtB,KAAI,MAAM,KAAK,OAAO,UAAU,CAC9B,QAAO,KAAK,SAAS,aAAa,UAAU;;CAMlD,MAAc,OAAO,UAAoC;AACvD,MAAI;AACF,SAAM,SAAS,UAAU,OAAO;AAChC,UAAO;UACD;AACN,UAAO;;;CAIX,AAAQ,6BAA6B,kBAAkC;AACrE,SAAO,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"server-Y7kxwtCK.js","names":["config: CodemationConfig","consumerRoot: string","configSource?: string","workflowSources: ReadonlyArray<string>","env?: Readonly<NodeJS.ProcessEnv>","consumerConfigLoader: CodemationConsumerConfigLoader","appConfigFactory: AppConfigFactory","discoveredPackages: CodemationDiscoveredPluginPackage[]","resolvedPackages: CodemationResolvedPluginPackage[]","packageRoots: string[]"],"sources":["../src/presentation/http/CodemationServerGatewayFactory.ts","../src/presentation/server/AppConfigLoader.ts","../src/presentation/server/CodemationPluginDiscovery.ts"],"sourcesContent":["import { accessSync } from \"node:fs\";\nimport path from \"node:path\";\nimport type { QueryBus } from \"../../application/bus/QueryBus\";\nimport type { WorkflowDto, WorkflowSummary } from \"../../application/contracts/WorkflowViewContracts\";\nimport { WorkflowDefinitionMapper } from \"../../application/mapping/WorkflowDefinitionMapper\";\nimport { GetWorkflowDetailQuery } from \"../../application/queries/GetWorkflowDetailQuery\";\nimport { GetWorkflowSummariesQuery } from \"../../application/queries/GetWorkflowSummariesQuery\";\nimport { ApplicationTokens } from \"../../applicationTokens\";\nimport { AppContainerFactory } from \"../../bootstrap/AppContainerFactory\";\nimport { AppContainerLifecycle } from \"../../bootstrap/AppContainerLifecycle\";\nimport { FrontendRuntime } from \"../../bootstrap/runtime/FrontendRuntime\";\nimport { AppConfigFactory } from \"../../bootstrap/runtime/AppConfigFactory\";\nimport type { CodemationConfig } from \"../config/CodemationConfig\";\nimport { CodemationConfigNormalizer } from \"../config/CodemationConfigNormalizer\";\nimport { CodemationHonoApiApp } from \"./hono/CodemationHonoApiAppFactory\";\n\ntype ServerGatewayContext = Readonly<{\n  container: import(\"@codemation/core\").Container;\n  httpApi: CodemationHonoApiApp;\n  queryBus: QueryBus;\n  workflowDefinitionMapper: WorkflowDefinitionMapper;\n}>;\n\nexport class CodemationServerGateway {\n  private static readonly contextsByConfig = new WeakMap<object, Promise<ServerGatewayContext>>();\n\n  constructor(\n    private readonly config: CodemationConfig,\n    private readonly consumerRoot: string,\n    private readonly configSource?: string,\n    private readonly workflowSources: ReadonlyArray<string> = [],\n    private readonly env?: Readonly<NodeJS.ProcessEnv>,\n  ) {}\n\n  async dispatch(request: Request): Promise<Response> {\n    return await (await this.getContext()).httpApi.fetch(request);\n  }\n\n  async prepare(): Promise<void> {\n    await this.getContext();\n  }\n\n  async close(): Promise<void> {\n    const cachedContext = CodemationServerGateway.contextsByConfig.get(this.config as object);\n    if (!cachedContext) {\n      return;\n    }\n    CodemationServerGateway.contextsByConfig.delete(this.config as object);\n    await (await cachedContext).container.resolve(AppContainerLifecycle).stop();\n  }\n\n  async loadWorkflowSummaries(): Promise<ReadonlyArray<WorkflowSummary>> {\n    const context = await this.getContext();\n    const workflows = await context.queryBus.execute(new GetWorkflowSummariesQuery());\n    return workflows.map((workflow) => context.workflowDefinitionMapper.toSummary(workflow));\n  }\n\n  async loadWorkflowDetail(workflowId: string): Promise<WorkflowDto> {\n    const context = await this.getContext();\n    const workflow = await context.queryBus.execute(new GetWorkflowDetailQuery(workflowId));\n    if (!workflow) {\n      throw new Error(`Unknown workflowId: ${workflowId}`);\n    }\n    return await context.workflowDefinitionMapper.map(workflow);\n  }\n\n  private getContext(): Promise<ServerGatewayContext> {\n    const cachedContext = CodemationServerGateway.contextsByConfig.get(this.config as object);\n    if (cachedContext) {\n      return cachedContext;\n    }\n    const nextContext = this.createContext();\n    CodemationServerGateway.contextsByConfig.set(this.config as object, nextContext);\n    return nextContext;\n  }\n\n  private async createContext(): Promise<ServerGatewayContext> {\n    const repoRoot = this.detectWorkspaceRoot(this.consumerRoot);\n    // This gateway is the config/env boundary that materializes AppConfig from raw inputs.\n    // eslint-disable-next-line no-restricted-properties\n    const env = this.env ?? process.env;\n    const appConfig = new AppConfigFactory().create({\n      repoRoot,\n      consumerRoot: this.consumerRoot,\n      env,\n      config: new CodemationConfigNormalizer().normalize(this.config),\n      workflowSources: this.resolveWorkflowSources(),\n    });\n    const container = await new AppContainerFactory().create({\n      appConfig,\n      sharedWorkflowWebsocketServer: null,\n    });\n    await container.resolve(FrontendRuntime).start();\n    return {\n      container,\n      httpApi: container.resolve(CodemationHonoApiApp),\n      queryBus: container.resolve(ApplicationTokens.QueryBus),\n      workflowDefinitionMapper: container.resolve(WorkflowDefinitionMapper),\n    };\n  }\n\n  private resolveWorkflowSources(): ReadonlyArray<string> {\n    if (this.workflowSources.length > 0) {\n      return [...this.workflowSources];\n    }\n    if (!this.configSource || !this.config.workflows || this.config.workflows.length === 0) {\n      return [];\n    }\n    return [this.configSource];\n  }\n  private detectWorkspaceRoot(startDirectory: string): string {\n    let currentDirectory = path.resolve(startDirectory);\n    while (true) {\n      try {\n        accessSync(path.resolve(currentDirectory, \"pnpm-workspace.yaml\"));\n        return currentDirectory;\n      } catch {\n        const parentDirectory = path.dirname(currentDirectory);\n        if (parentDirectory === currentDirectory) {\n          return startDirectory;\n        }\n        currentDirectory = parentDirectory;\n      }\n    }\n  }\n}\n","import type { AppConfig } from \"../config/AppConfig\";\nimport { CodemationConsumerConfigLoader } from \"./CodemationConsumerConfigLoader\";\nimport { AppConfigFactory } from \"../../bootstrap/runtime/AppConfigFactory\";\n\nexport type AppConfigLoadResult = Readonly<{\n  appConfig: AppConfig;\n  bootstrapSource: string | null;\n}>;\n\nexport class AppConfigLoader {\n  constructor(\n    private readonly consumerConfigLoader: CodemationConsumerConfigLoader = new CodemationConsumerConfigLoader(),\n    private readonly appConfigFactory: AppConfigFactory = new AppConfigFactory(),\n  ) {}\n\n  async load(\n    args: Readonly<{\n      consumerRoot: string;\n      repoRoot: string;\n      env: NodeJS.ProcessEnv;\n      configPathOverride?: string;\n    }>,\n  ): Promise<AppConfigLoadResult> {\n    const resolution = await this.consumerConfigLoader.load({\n      consumerRoot: args.consumerRoot,\n      configPathOverride: args.configPathOverride,\n    });\n    return {\n      appConfig: this.appConfigFactory.create({\n        repoRoot: args.repoRoot,\n        consumerRoot: args.consumerRoot,\n        env: args.env,\n        config: resolution.config,\n        workflowSources: resolution.workflowSources,\n      }),\n      bootstrapSource: resolution.bootstrapSource,\n    };\n  }\n}\n","import type { CodemationPackageManifest } from \"../config/CodemationPackageManifest\";\nimport { CodemationPluginPackageMetadata, type CodemationPlugin } from \"../config/CodemationPlugin\";\nimport { readFile, readdir } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\n\nexport type CodemationDiscoveredPluginPackage = Readonly<{\n  packageName: string;\n  packageRoot: string;\n  pluginEntry: string;\n  developmentEntry?: string;\n}>;\n\nexport type CodemationResolvedPluginPackage = Readonly<\n  CodemationDiscoveredPluginPackage & {\n    plugin: CodemationPlugin;\n  }\n>;\n\ntype PackageJsonShape = Readonly<{\n  codemation?: CodemationPackageManifest;\n  name?: string;\n  exports?: Readonly<Record<string, unknown>>;\n}>;\n\nexport class CodemationPluginDiscovery {\n  private readonly pluginPackageMetadata = new CodemationPluginPackageMetadata();\n\n  async discover(consumerRoot: string): Promise<ReadonlyArray<CodemationDiscoveredPluginPackage>> {\n    const nodeModulesRoot = path.resolve(consumerRoot, \"node_modules\");\n    const packageRoots = await this.collectPackageRoots(nodeModulesRoot);\n    const discoveredPackages: CodemationDiscoveredPluginPackage[] = [];\n    for (const packageRoot of packageRoots) {\n      const packageJson = await this.readPackageJson(path.resolve(packageRoot, \"package.json\"));\n      const pluginManifest = packageJson.codemation?.plugin;\n      if (!packageJson.name || typeof pluginManifest !== \"string\" || pluginManifest.trim().length === 0) {\n        continue;\n      }\n      discoveredPackages.push({\n        packageName: packageJson.name,\n        packageRoot,\n        pluginEntry: pluginManifest,\n        developmentEntry: await this.resolveDevelopmentPluginEntry(packageRoot),\n      });\n    }\n    return discoveredPackages.sort((left, right) => left.packageName.localeCompare(right.packageName));\n  }\n\n  async resolvePlugins(consumerRoot: string): Promise<ReadonlyArray<CodemationResolvedPluginPackage>> {\n    const discoveredPackages = await this.discover(consumerRoot);\n    return await this.resolveDiscoveredPackages(discoveredPackages);\n  }\n\n  async resolveDiscoveredPackages(\n    discoveredPackages: ReadonlyArray<CodemationDiscoveredPluginPackage>,\n  ): Promise<ReadonlyArray<CodemationResolvedPluginPackage>> {\n    const resolvedPackages: CodemationResolvedPluginPackage[] = [];\n    for (const discoveredPackage of discoveredPackages) {\n      resolvedPackages.push({\n        ...discoveredPackage,\n        plugin: await this.loadPlugin(discoveredPackage),\n      });\n    }\n    return resolvedPackages;\n  }\n\n  private async collectPackageRoots(nodeModulesRoot: string): Promise<ReadonlyArray<string>> {\n    try {\n      const entries = await readdir(nodeModulesRoot, { withFileTypes: true });\n      const packageRoots: string[] = [];\n      for (const entry of entries) {\n        if (!entry.isDirectory() && !entry.isSymbolicLink()) {\n          continue;\n        }\n        if (entry.name.startsWith(\"@\")) {\n          const scopedEntries = await readdir(path.resolve(nodeModulesRoot, entry.name), { withFileTypes: true });\n          for (const scopedEntry of scopedEntries) {\n            if (scopedEntry.isDirectory() || scopedEntry.isSymbolicLink()) {\n              packageRoots.push(path.resolve(nodeModulesRoot, entry.name, scopedEntry.name));\n            }\n          }\n          continue;\n        }\n        packageRoots.push(path.resolve(nodeModulesRoot, entry.name));\n      }\n      return packageRoots;\n    } catch {\n      return [];\n    }\n  }\n\n  private async readPackageJson(packageJsonPath: string): Promise<PackageJsonShape> {\n    try {\n      const rawPackageJson = await readFile(packageJsonPath, \"utf8\");\n      return JSON.parse(rawPackageJson) as PackageJsonShape;\n    } catch {\n      return {};\n    }\n  }\n\n  private async loadPlugin(discoveredPackage: CodemationDiscoveredPluginPackage): Promise<CodemationPlugin> {\n    const pluginModulePath = path.resolve(discoveredPackage.packageRoot, this.resolvePluginEntry(discoveredPackage));\n    const importedModule = (await import(\n      /* webpackIgnore: true */ this.resolvePluginModuleSpecifier(pluginModulePath)\n    )) as Record<string, unknown>;\n    const exportedValue = importedModule.default;\n    const plugin = this.resolvePluginValue(exportedValue);\n    if (!plugin) {\n      throw new Error(`Plugin package \"${discoveredPackage.packageName}\" did not default-export a Codemation plugin.`);\n    }\n    return this.pluginPackageMetadata.attachPackageName(plugin, discoveredPackage.packageName);\n  }\n\n  private resolvePluginValue(value: unknown): CodemationPlugin | null {\n    if (this.isPluginConfig(value)) {\n      return value;\n    }\n    return null;\n  }\n\n  private isPluginConfig(value: unknown): value is CodemationPlugin {\n    if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n      return false;\n    }\n    const pluginValue = value as {\n      credentialTypes?: unknown;\n      mcpServers?: unknown;\n      register?: unknown;\n      sandbox?: unknown;\n    };\n    if (pluginValue.register !== undefined && typeof pluginValue.register !== \"function\") {\n      return false;\n    }\n    if (pluginValue.credentialTypes !== undefined && !Array.isArray(pluginValue.credentialTypes)) {\n      return false;\n    }\n    if (pluginValue.mcpServers !== undefined && !Array.isArray(pluginValue.mcpServers)) {\n      return false;\n    }\n    return (\n      pluginValue.register !== undefined ||\n      pluginValue.credentialTypes !== undefined ||\n      pluginValue.mcpServers !== undefined ||\n      pluginValue.sandbox !== undefined ||\n      Object.keys(pluginValue).length === 0\n    );\n  }\n\n  private resolvePluginEntry(discoveredPackage: CodemationDiscoveredPluginPackage): string {\n    const preferSource =\n      process.env.CODEMATION_PREFER_PLUGIN_SOURCE_ENTRY === \"true\" &&\n      typeof discoveredPackage.developmentEntry === \"string\" &&\n      discoveredPackage.developmentEntry.trim().length > 0;\n    const selectedEntry = preferSource ? discoveredPackage.developmentEntry : discoveredPackage.pluginEntry;\n    return selectedEntry;\n  }\n\n  private async resolveDevelopmentPluginEntry(packageRoot: string): Promise<string | undefined> {\n    const candidates = [\n      path.resolve(packageRoot, \"codemation.plugin.ts\"),\n      path.resolve(packageRoot, \"codemation.plugin.js\"),\n      path.resolve(packageRoot, \"src\", \"codemation.plugin.ts\"),\n      path.resolve(packageRoot, \"src\", \"codemation.plugin.js\"),\n    ];\n    for (const candidate of candidates) {\n      if (await this.exists(candidate)) {\n        return path.relative(packageRoot, candidate);\n      }\n    }\n    return undefined;\n  }\n\n  private async exists(filePath: string): Promise<boolean> {\n    try {\n      await readFile(filePath, \"utf8\");\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  private resolvePluginModuleSpecifier(pluginModulePath: string): string {\n    return pathToFileURL(pluginModulePath).href;\n  }\n}\n"],"mappings":";;;;;;;;;;AAuBA,IAAa,0BAAb,MAAa,wBAAwB;CACnC,OAAwB,mCAAmB,IAAI,SAAgD;CAE/F,YACE,AAAiBA,QACjB,AAAiBC,cACjB,AAAiBC,cACjB,AAAiBC,kBAAyC,EAAE,EAC5D,AAAiBC,KACjB;EALiB;EACA;EACA;EACA;EACA;;CAGnB,MAAM,SAAS,SAAqC;AAClD,SAAO,OAAO,MAAM,KAAK,YAAY,EAAE,QAAQ,MAAM,QAAQ;;CAG/D,MAAM,UAAyB;AAC7B,QAAM,KAAK,YAAY;;CAGzB,MAAM,QAAuB;EAC3B,MAAM,gBAAgB,wBAAwB,iBAAiB,IAAI,KAAK,OAAiB;AACzF,MAAI,CAAC,cACH;AAEF,0BAAwB,iBAAiB,OAAO,KAAK,OAAiB;AACtE,SAAO,MAAM,eAAe,UAAU,QAAQ,sBAAsB,CAAC,MAAM;;CAG7E,MAAM,wBAAiE;EACrE,MAAM,UAAU,MAAM,KAAK,YAAY;AAEvC,UADkB,MAAM,QAAQ,SAAS,QAAQ,IAAI,2BAA2B,CAAC,EAChE,KAAK,aAAa,QAAQ,yBAAyB,UAAU,SAAS,CAAC;;CAG1F,MAAM,mBAAmB,YAA0C;EACjE,MAAM,UAAU,MAAM,KAAK,YAAY;EACvC,MAAM,WAAW,MAAM,QAAQ,SAAS,QAAQ,IAAI,uBAAuB,WAAW,CAAC;AACvF,MAAI,CAAC,SACH,OAAM,IAAI,MAAM,uBAAuB,aAAa;AAEtD,SAAO,MAAM,QAAQ,yBAAyB,IAAI,SAAS;;CAG7D,AAAQ,aAA4C;EAClD,MAAM,gBAAgB,wBAAwB,iBAAiB,IAAI,KAAK,OAAiB;AACzF,MAAI,cACF,QAAO;EAET,MAAM,cAAc,KAAK,eAAe;AACxC,0BAAwB,iBAAiB,IAAI,KAAK,QAAkB,YAAY;AAChF,SAAO;;CAGT,MAAc,gBAA+C;EAC3D,MAAM,WAAW,KAAK,oBAAoB,KAAK,aAAa;EAG5D,MAAM,MAAM,KAAK,OAAO,QAAQ;EAChC,MAAM,YAAY,IAAI,kBAAkB,CAAC,OAAO;GAC9C;GACA,cAAc,KAAK;GACnB;GACA,QAAQ,IAAI,4BAA4B,CAAC,UAAU,KAAK,OAAO;GAC/D,iBAAiB,KAAK,wBAAwB;GAC/C,CAAC;EACF,MAAM,YAAY,MAAM,IAAI,qBAAqB,CAAC,OAAO;GACvD;GACA,+BAA+B;GAChC,CAAC;AACF,QAAM,UAAU,QAAQ,gBAAgB,CAAC,OAAO;AAChD,SAAO;GACL;GACA,SAAS,UAAU,QAAQ,qBAAqB;GAChD,UAAU,UAAU,QAAQ,kBAAkB,SAAS;GACvD,0BAA0B,UAAU,QAAQ,yBAAyB;GACtE;;CAGH,AAAQ,yBAAgD;AACtD,MAAI,KAAK,gBAAgB,SAAS,EAChC,QAAO,CAAC,GAAG,KAAK,gBAAgB;AAElC,MAAI,CAAC,KAAK,gBAAgB,CAAC,KAAK,OAAO,aAAa,KAAK,OAAO,UAAU,WAAW,EACnF,QAAO,EAAE;AAEX,SAAO,CAAC,KAAK,aAAa;;CAE5B,AAAQ,oBAAoB,gBAAgC;EAC1D,IAAI,mBAAmB,KAAK,QAAQ,eAAe;AACnD,SAAO,KACL,KAAI;AACF,cAAW,KAAK,QAAQ,kBAAkB,sBAAsB,CAAC;AACjE,UAAO;UACD;GACN,MAAM,kBAAkB,KAAK,QAAQ,iBAAiB;AACtD,OAAI,oBAAoB,iBACtB,QAAO;AAET,sBAAmB;;;;;;;AChH3B,IAAa,kBAAb,MAA6B;CAC3B,YACE,AAAiBC,uBAAuD,IAAI,gCAAgC,EAC5G,AAAiBC,mBAAqC,IAAI,kBAAkB,EAC5E;EAFiB;EACA;;CAGnB,MAAM,KACJ,MAM8B;EAC9B,MAAM,aAAa,MAAM,KAAK,qBAAqB,KAAK;GACtD,cAAc,KAAK;GACnB,oBAAoB,KAAK;GAC1B,CAAC;AACF,SAAO;GACL,WAAW,KAAK,iBAAiB,OAAO;IACtC,UAAU,KAAK;IACf,cAAc,KAAK;IACnB,KAAK,KAAK;IACV,QAAQ,WAAW;IACnB,iBAAiB,WAAW;IAC7B,CAAC;GACF,iBAAiB,WAAW;GAC7B;;;;;;ACXL,IAAa,4BAAb,MAAuC;CACrC,AAAiB,wBAAwB,IAAI,iCAAiC;CAE9E,MAAM,SAAS,cAAiF;EAC9F,MAAM,kBAAkB,KAAK,QAAQ,cAAc,eAAe;EAClE,MAAM,eAAe,MAAM,KAAK,oBAAoB,gBAAgB;EACpE,MAAMC,qBAA0D,EAAE;AAClE,OAAK,MAAM,eAAe,cAAc;GACtC,MAAM,cAAc,MAAM,KAAK,gBAAgB,KAAK,QAAQ,aAAa,eAAe,CAAC;GACzF,MAAM,iBAAiB,YAAY,YAAY;AAC/C,OAAI,CAAC,YAAY,QAAQ,OAAO,mBAAmB,YAAY,eAAe,MAAM,CAAC,WAAW,EAC9F;AAEF,sBAAmB,KAAK;IACtB,aAAa,YAAY;IACzB;IACA,aAAa;IACb,kBAAkB,MAAM,KAAK,8BAA8B,YAAY;IACxE,CAAC;;AAEJ,SAAO,mBAAmB,MAAM,MAAM,UAAU,KAAK,YAAY,cAAc,MAAM,YAAY,CAAC;;CAGpG,MAAM,eAAe,cAA+E;EAClG,MAAM,qBAAqB,MAAM,KAAK,SAAS,aAAa;AAC5D,SAAO,MAAM,KAAK,0BAA0B,mBAAmB;;CAGjE,MAAM,0BACJ,oBACyD;EACzD,MAAMC,mBAAsD,EAAE;AAC9D,OAAK,MAAM,qBAAqB,mBAC9B,kBAAiB,KAAK;GACpB,GAAG;GACH,QAAQ,MAAM,KAAK,WAAW,kBAAkB;GACjD,CAAC;AAEJ,SAAO;;CAGT,MAAc,oBAAoB,iBAAyD;AACzF,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,iBAAiB,EAAE,eAAe,MAAM,CAAC;GACvE,MAAMC,eAAyB,EAAE;AACjC,QAAK,MAAM,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,aAAa,IAAI,CAAC,MAAM,gBAAgB,CACjD;AAEF,QAAI,MAAM,KAAK,WAAW,IAAI,EAAE;KAC9B,MAAM,gBAAgB,MAAM,QAAQ,KAAK,QAAQ,iBAAiB,MAAM,KAAK,EAAE,EAAE,eAAe,MAAM,CAAC;AACvG,UAAK,MAAM,eAAe,cACxB,KAAI,YAAY,aAAa,IAAI,YAAY,gBAAgB,CAC3D,cAAa,KAAK,KAAK,QAAQ,iBAAiB,MAAM,MAAM,YAAY,KAAK,CAAC;AAGlF;;AAEF,iBAAa,KAAK,KAAK,QAAQ,iBAAiB,MAAM,KAAK,CAAC;;AAE9D,UAAO;UACD;AACN,UAAO,EAAE;;;CAIb,MAAc,gBAAgB,iBAAoD;AAChF,MAAI;GACF,MAAM,iBAAiB,MAAM,SAAS,iBAAiB,OAAO;AAC9D,UAAO,KAAK,MAAM,eAAe;UAC3B;AACN,UAAO,EAAE;;;CAIb,MAAc,WAAW,mBAAiF;EACxG,MAAM,mBAAmB,KAAK,QAAQ,kBAAkB,aAAa,KAAK,mBAAmB,kBAAkB,CAAC;EAIhH,MAAM,iBAHkB,MAAM;;GACF,KAAK,6BAA6B,iBAAiB;GAE1C;EACrC,MAAM,SAAS,KAAK,mBAAmB,cAAc;AACrD,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,mBAAmB,kBAAkB,YAAY,+CAA+C;AAElH,SAAO,KAAK,sBAAsB,kBAAkB,QAAQ,kBAAkB,YAAY;;CAG5F,AAAQ,mBAAmB,OAAyC;AAClE,MAAI,KAAK,eAAe,MAAM,CAC5B,QAAO;AAET,SAAO;;CAGT,AAAQ,eAAe,OAA2C;AAChE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;EAET,MAAM,cAAc;AAMpB,MAAI,YAAY,aAAa,UAAa,OAAO,YAAY,aAAa,WACxE,QAAO;AAET,MAAI,YAAY,oBAAoB,UAAa,CAAC,MAAM,QAAQ,YAAY,gBAAgB,CAC1F,QAAO;AAET,MAAI,YAAY,eAAe,UAAa,CAAC,MAAM,QAAQ,YAAY,WAAW,CAChF,QAAO;AAET,SACE,YAAY,aAAa,UACzB,YAAY,oBAAoB,UAChC,YAAY,eAAe,UAC3B,YAAY,YAAY,UACxB,OAAO,KAAK,YAAY,CAAC,WAAW;;CAIxC,AAAQ,mBAAmB,mBAA8D;AAMvF,SAJE,QAAQ,IAAI,0CAA0C,UACtD,OAAO,kBAAkB,qBAAqB,YAC9C,kBAAkB,iBAAiB,MAAM,CAAC,SAAS,IAChB,kBAAkB,mBAAmB,kBAAkB;;CAI9F,MAAc,8BAA8B,aAAkD;EAC5F,MAAM,aAAa;GACjB,KAAK,QAAQ,aAAa,uBAAuB;GACjD,KAAK,QAAQ,aAAa,uBAAuB;GACjD,KAAK,QAAQ,aAAa,OAAO,uBAAuB;GACxD,KAAK,QAAQ,aAAa,OAAO,uBAAuB;GACzD;AACD,OAAK,MAAM,aAAa,WACtB,KAAI,MAAM,KAAK,OAAO,UAAU,CAC9B,QAAO,KAAK,SAAS,aAAa,UAAU;;CAMlD,MAAc,OAAO,UAAoC;AACvD,MAAI;AACF,SAAM,SAAS,UAAU,OAAO;AAChC,UAAO;UACD;AACN,UAAO;;;CAIX,AAAQ,6BAA6B,kBAAkC;AACrE,SAAO,cAAc,iBAAiB,CAAC"}

package/dist/server.d.ts

@@ -1,14 +1,14 @@
-import "./index-BbBk26m0.js";
-import "./ItemsInputNormalizer-C-KHg9Mo.js";
-import "./CodemationAppContext-DRu1Dpri.js";
-import "./CodemationWhitelabelConfig-CWbcyQqn.js";
-import { a as ApiPaths, i as CodemationFrontendAuthSnapshotJsonCodec, n as InternalAuthBootstrapJsonCodec, r as FrontendAppConfigJsonCodec, t as PublicFrontendBootstrapJsonCodec } from "./PublicFrontendBootstrapJsonCodec-Cl_DLRh0.js";
-import { n as InternalAuthBootstrap, r as FrontendAppConfig, t as PublicFrontendBootstrap } from "./PublicFrontendBootstrap-DzBgwOnG.js";
-import "./CodemationConfigNormalizer-DVko3cVN.js";
-import { i as CodemationConsumerAppResolver, n as CodemationConsumerConfigResolution, r as CodemationConsumerApp, t as CodemationConsumerConfigLoader } from "./CodemationConsumerConfigLoader-DJWr86f-.js";
-import "./WorkflowViewContracts-CzK2KFuz.js";
-import { r as PrismaDatabaseClient } from "./AppConfigFactory-YnveXE9k.js";
-import { t as CodemationPostgresPrismaClientFactory } from "./persistenceServer-vtJAGDat.js";
-import { a as CodemationResolvedPluginPackage, c as CodemationServerGateway, i as CodemationPluginDiscovery, n as WorkflowModulePathFinder, o as AppConfigLoadResult, r as CodemationDiscoveredPluginPackage, s as AppConfigLoader, t as WorkflowDiscoveryPathSegmentsComputer } from "./server-MUNGsBYK.js";
-import { i as CodemationFrontendAuthSnapshotFactory, n as InternalAuthBootstrapFactory, r as FrontendAppConfigFactory, t as PublicFrontendBootstrapFactory } from "./PublicFrontendBootstrapFactory-Cb2pLmDd.js";
-export { ApiPaths, AppConfigLoadResult, AppConfigLoader, CodemationConsumerApp, CodemationConsumerAppResolver, CodemationConsumerConfigLoader, CodemationConsumerConfigResolution, CodemationDiscoveredPluginPackage, CodemationFrontendAuthSnapshotFactory, CodemationFrontendAuthSnapshotJsonCodec, CodemationPluginDiscovery, CodemationPostgresPrismaClientFactory, CodemationResolvedPluginPackage, CodemationServerGateway, FrontendAppConfig, FrontendAppConfigFactory, FrontendAppConfigJsonCodec, InternalAuthBootstrap, InternalAuthBootstrapFactory, InternalAuthBootstrapJsonCodec, PrismaDatabaseClient as PrismaClient, PublicFrontendBootstrap, PublicFrontendBootstrapFactory, PublicFrontendBootstrapJsonCodec, WorkflowDiscoveryPathSegmentsComputer, WorkflowModulePathFinder };
+import "./index-DilAYwnH.js";
+import "./ItemsInputNormalizer-_RwIfRIQ.js";
+import "./CodemationAppContext-CKVv9W9q.js";
+import "./CodemationWhitelabelConfig-Ca2mCUeC.js";
+import { a as ApiPaths, i as CodemationFrontendAuthSnapshotJsonCodec, n as InternalAuthBootstrapJsonCodec, r as FrontendAppConfigJsonCodec, t as PublicFrontendBootstrapJsonCodec } from "./PublicFrontendBootstrapJsonCodec-CXG9Dxft.js";
+import { n as InternalAuthBootstrap, r as FrontendAppConfig, t as PublicFrontendBootstrap } from "./PublicFrontendBootstrap-Cev3qK46.js";
+import "./CodemationConfigNormalizer-BAKjetJ6.js";
+import { i as CodemationConsumerAppResolver, n as CodemationConsumerConfigResolution, r as CodemationConsumerApp, t as CodemationConsumerConfigLoader } from "./CodemationConsumerConfigLoader-nxOqvv46.js";
+import "./WorkflowViewContracts-B7aFQcIw.js";
+import { r as PrismaDatabaseClient } from "./AppConfigFactory-DnLoQ9Li.js";
+import { a as ProcessRunOptions, i as CodemationFrontendAuthSnapshotFactory, n as InternalAuthBootstrapFactory, o as ProcessRunResult, r as FrontendAppConfigFactory, s as ProcessRunner, t as PublicFrontendBootstrapFactory } from "./PublicFrontendBootstrapFactory-CY2FS-5g.js";
+import { n as CodemationPostgresPrismaClientFactory } from "./persistenceServer-CeTHtC6E.js";
+import { a as CodemationResolvedPluginPackage, c as CodemationServerGateway, i as CodemationPluginDiscovery, l as ExecaProcessRunner, n as WorkflowModulePathFinder, o as AppConfigLoadResult, r as CodemationDiscoveredPluginPackage, s as AppConfigLoader, t as WorkflowDiscoveryPathSegmentsComputer } from "./server-C4bS62rg.js";
+export { ApiPaths, AppConfigLoadResult, AppConfigLoader, CodemationConsumerApp, CodemationConsumerAppResolver, CodemationConsumerConfigLoader, CodemationConsumerConfigResolution, CodemationDiscoveredPluginPackage, CodemationFrontendAuthSnapshotFactory, CodemationFrontendAuthSnapshotJsonCodec, CodemationPluginDiscovery, CodemationPostgresPrismaClientFactory, CodemationResolvedPluginPackage, CodemationServerGateway, ExecaProcessRunner, FrontendAppConfig, FrontendAppConfigFactory, FrontendAppConfigJsonCodec, InternalAuthBootstrap, InternalAuthBootstrapFactory, InternalAuthBootstrapJsonCodec, PrismaDatabaseClient as PrismaClient, ProcessRunOptions, ProcessRunResult, ProcessRunner, PublicFrontendBootstrap, PublicFrontendBootstrapFactory, PublicFrontendBootstrapJsonCodec, WorkflowDiscoveryPathSegmentsComputer, WorkflowModulePathFinder };

package/dist/server.js

@@ -1,15 +1,17 @@
 import "./LogLevelPolicyFactory-DCUzIN6G.js";
-import { t as ApiPaths } from "./ApiPaths-CLTHphYZ.js";
-import { i as CodemationFrontendAuthSnapshotJsonCodec, n as InternalAuthBootstrapJsonCodec, r as FrontendAppConfigJsonCodec, t as PublicFrontendBootstrapJsonCodec } from "./PublicFrontendBootstrapJsonCodec-DzqvA0uo.js";
-import { i as CodemationConsumerAppResolver, n as WorkflowDiscoveryPathSegmentsComputer, r as WorkflowModulePathFinder, t as CodemationConsumerConfigLoader } from "./CodemationConsumerConfigLoader-BeAUS144.js";
-import "./ServerLoggerFactory-BKSIh9Xv.js";
+import { t as ApiPaths } from "./ApiPaths-Dv1dcHu_.js";
+import { i as CodemationFrontendAuthSnapshotJsonCodec, n as InternalAuthBootstrapJsonCodec, r as FrontendAppConfigJsonCodec, t as PublicFrontendBootstrapJsonCodec } from "./PublicFrontendBootstrapJsonCodec-CegIF_ne.js";
+import { i as CodemationConsumerAppResolver, n as WorkflowDiscoveryPathSegmentsComputer, r as WorkflowModulePathFinder, t as CodemationConsumerConfigLoader } from "./CodemationConsumerConfigLoader-GYpBBvqE.js";
+import "./ServerLoggerFactory-Ckk52S3w.js";
 import "./decorateParam-BWxkAUSj.js";
 import "./decorate-CXWmflG_.js";
-import "./CredentialServices-CgxwguAv.js";
-import { D as CodemationFrontendAuthSnapshotFactory, E as FrontendAppConfigFactory, T as InternalAuthBootstrapFactory, w as PublicFrontendBootstrapFactory } from "./AppContainerFactory-qaqc-R1D.js";
-import "./WorkflowPolicyUiPresentationFactory-DhPqQ9aB.js";
-import "./AppConfigFactory-C6q-CSKb.js";
-import { t as CodemationPostgresPrismaClientFactory } from "./persistenceServer-CmsIKnO9.js";
-import { n as AppConfigLoader, r as CodemationServerGateway, t as CodemationPluginDiscovery } from "./server-CJFfY67o.js";
+import "./CredentialServices-Dk8yypeL.js";
+import "./CodemationTsyringeTypeInfoRegistrar-Bj6FJYFz.js";
+import { D as FrontendAppConfigFactory, E as InternalAuthBootstrapFactory, O as CodemationFrontendAuthSnapshotFactory, T as PublicFrontendBootstrapFactory, g as ExecaProcessRunner } from "./AppContainerFactory-DqKYCRNP.js";
+import "./WorkflowPolicyUiPresentationFactory-Bb-ae_Zh.js";
+import "./InternalPingRegistrar-DY3kSfxP.js";
+import "./AppConfigFactory-Cx4qQvRk.js";
+import { t as CodemationPostgresPrismaClientFactory } from "./persistenceServer-C-hH4z6l.js";
+import { n as AppConfigLoader, r as CodemationServerGateway, t as CodemationPluginDiscovery } from "./server-Y7kxwtCK.js";
 
-export { ApiPaths, AppConfigLoader, CodemationConsumerAppResolver, CodemationConsumerConfigLoader, CodemationFrontendAuthSnapshotFactory, CodemationFrontendAuthSnapshotJsonCodec, CodemationPluginDiscovery, CodemationPostgresPrismaClientFactory, CodemationServerGateway, FrontendAppConfigFactory, FrontendAppConfigJsonCodec, InternalAuthBootstrapFactory, InternalAuthBootstrapJsonCodec, PublicFrontendBootstrapFactory, PublicFrontendBootstrapJsonCodec, WorkflowDiscoveryPathSegmentsComputer, WorkflowModulePathFinder };
+export { ApiPaths, AppConfigLoader, CodemationConsumerAppResolver, CodemationConsumerConfigLoader, CodemationFrontendAuthSnapshotFactory, CodemationFrontendAuthSnapshotJsonCodec, CodemationPluginDiscovery, CodemationPostgresPrismaClientFactory, CodemationServerGateway, ExecaProcessRunner, FrontendAppConfigFactory, FrontendAppConfigJsonCodec, InternalAuthBootstrapFactory, InternalAuthBootstrapJsonCodec, PublicFrontendBootstrapFactory, PublicFrontendBootstrapJsonCodec, WorkflowDiscoveryPathSegmentsComputer, WorkflowModulePathFinder };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codemation/host",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "publishConfig": {
     "access": "public"
   },
@@ -19,88 +19,73 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "development": {
-        "import": "./src/index.ts"
-      },
+      "development": "./src/index.ts",
       "import": "./dist/index.js"
     },
     "./authoring": {
       "types": "./dist/authoring.d.ts",
-      "development": {
-        "import": "./src/authoring.ts"
-      },
+      "development": "./src/authoring.ts",
       "import": "./dist/authoring.js"
     },
     "./client": {
       "types": "./dist/client.d.ts",
-      "development": {
-        "import": "./src/client.ts"
-      },
+      "development": "./src/client.ts",
       "import": "./dist/client.js"
     },
     "./dto": {
       "types": "./dist/dto.d.ts",
-      "development": {
-        "import": "./src/dto.ts"
-      },
+      "development": "./src/dto.ts",
       "import": "./dist/dto.js"
     },
     "./mapping": {
       "types": "./dist/mapping.d.ts",
-      "development": {
-        "import": "./src/mapping.ts"
-      },
+      "development": "./src/mapping.ts",
       "import": "./dist/mapping.js"
     },
     "./credentials": {
       "types": "./dist/credentials.d.ts",
-      "development": {
-        "import": "./src/credentials.ts"
-      },
+      "development": "./src/credentials.ts",
       "import": "./dist/credentials.js"
     },
     "./consumer": {
       "types": "./dist/consumer.d.ts",
-      "development": {
-        "import": "./src/consumer.ts"
-      },
+      "development": "./src/consumer.ts",
       "import": "./dist/consumer.js"
     },
     "./next/server": {
       "types": "./dist/nextServer.d.ts",
-      "development": {
-        "import": "./src/nextServer.ts"
-      },
+      "development": "./src/nextServer.ts",
       "import": "./dist/nextServer.js"
     },
     "./server": {
       "types": "./dist/server.d.ts",
-      "development": {
-        "import": "./src/server.ts"
-      },
+      "development": "./src/server.ts",
       "import": "./dist/server.js"
     },
+    "./pairing": {
+      "types": "./dist/pairing.d.ts",
+      "development": "./src/pairing.ts",
+      "import": "./dist/pairing.js"
+    },
     "./dev-server-sidecar": {
       "types": "./dist/devServerSidecar.d.ts",
-      "development": {
-        "import": "./src/devServerSidecar.ts"
-      },
+      "development": "./src/devServerSidecar.ts",
       "import": "./dist/devServerSidecar.js"
     },
     "./persistence": {
       "types": "./dist/persistenceServer.d.ts",
-      "development": {
-        "import": "./src/persistenceServer.ts"
-      },
+      "development": "./src/persistenceServer.ts",
       "import": "./dist/persistenceServer.js"
     },
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "ai": "^6.0.168",
+    "@ai-sdk/mcp": "^1.0.42",
     "@ai-sdk/provider": "^3.0.8",
     "@auth/core": "^0.34.3",
     "@auth/prisma-adapter": "^2.11.1",
+    "@aws-sdk/client-s3": "^3.1049.0",
+    "@aws-sdk/lib-storage": "^3.1049.0",
     "@better-auth/prisma-adapter": "^1.5.6",
     "@libsql/client": "^0.17.2",
     "@monaco-editor/react": "^4.7.0",
@@ -112,11 +97,13 @@
     "@types/bcryptjs": "^3.0.0",
     "@uiw/react-json-view": "2.0.0-alpha.41",
     "@xyflow/react": "^12.10.1",
+    "ai": "^6.0.168",
     "bcryptjs": "^3.0.3",
     "better-auth": "^1.5.6",
     "bullmq": "^5.58.3",
     "dagre": "^0.8.5",
     "date-fns": "^4.1.0",
+    "execa": "^9.6.1",
     "hono": "^4.12.8",
     "jose": "^6.2.2",
     "lucide-react": "^0.577.0",
@@ -135,9 +122,10 @@
     "tsx": "^4.21.0",
     "ws": "^8.19.0",
     "zxcvbn": "^4.4.2",
-    "@codemation/core": "0.10.2",
-    "@codemation/core-nodes": "0.7.1",
-    "@codemation/eventbus-redis": "0.0.37"
+    "@codemation/core": "0.11.0",
+    "@codemation/managed-auth": "0.1.0",
+    "@codemation/eventbus-redis": "0.0.38",
+    "@codemation/core-nodes": "0.8.0"
   },
   "devDependencies": {
     "@playwright/test": "^1.58.2",
@@ -162,14 +150,13 @@
     "tsdown": "^0.15.5",
     "typescript": "^5.9.3",
     "vitest": "^4.0.18",
-    "zod": "^4.3.6",
-    "@codemation/core-nodes-gmail": "0.2.4"
+    "zod": "^4.3.6"
   },
   "scripts": {
     "changeset:verify": "pnpm --workspace-root run changeset:verify",
     "prisma:generate": "node ./scripts/generate-prisma-clients.mjs && node ./scripts/ensure-prisma-runtime-sourcemaps.mjs",
-    "build": "tsdown src/index.ts src/authoring.ts src/client.ts src/credentials.ts src/consumer.ts src/dto.ts src/mapping.ts src/nextServer.ts src/server.ts src/devServerSidecar.ts src/persistenceServer.ts --out-dir dist --sourcemap",
-    "dev": "tsdown src/index.ts src/authoring.ts src/client.ts src/credentials.ts src/consumer.ts src/dto.ts src/mapping.ts src/nextServer.ts src/server.ts src/devServerSidecar.ts src/persistenceServer.ts --out-dir dist --sourcemap --watch",
+    "build": "tsdown src/index.ts src/authoring.ts src/client.ts src/credentials.ts src/consumer.ts src/dto.ts src/mapping.ts src/nextServer.ts src/server.ts src/devServerSidecar.ts src/persistenceServer.ts src/pairing.ts --out-dir dist --sourcemap",
+    "dev": "tsdown src/index.ts src/authoring.ts src/client.ts src/credentials.ts src/consumer.ts src/dto.ts src/mapping.ts src/nextServer.ts src/server.ts src/devServerSidecar.ts src/persistenceServer.ts src/pairing.ts --out-dir dist --sourcemap --watch",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "lint": "eslint .",
     "test": "pnpm -w exec concurrently -m 5 -c auto -n unit,integration,ui,browser,e2e \"pnpm run test:unit\" \"pnpm run test:integration\" \"pnpm run test:ui\" \"pnpm run test:browser\" \"pnpm run test:e2e\"",

package/prisma/migrations/20260519000000_workflow_audit_log/migration.sql

@@ -0,0 +1,23 @@
+-- Create WorkflowAuditLog table for workspace-local run-event audit trail (Sprint 13 Story B).
+-- Indexed by (actor_user_id, occurred_at) and (workflow_id, occurred_at) for SOC2 queries.
+
+CREATE TABLE "workflow_audit_log" (
+    "id"              TEXT NOT NULL,
+    "occurred_at"     TIMESTAMP(3) NOT NULL,
+    "actor_user_id"   TEXT NOT NULL,
+    "actor_session_id" TEXT,
+    "action"          TEXT NOT NULL,
+    "resource_type"   TEXT NOT NULL,
+    "resource_id"     TEXT NOT NULL,
+    "outcome"         TEXT NOT NULL,
+    "error_code"      TEXT,
+    "correlation_id"  TEXT,
+    "workflow_id"     TEXT NOT NULL,
+    "run_id"          TEXT,
+    "node_id"         TEXT,
+
+    CONSTRAINT "workflow_audit_log_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX "workflow_audit_log_actor_user_id_occurred_at_idx" ON "workflow_audit_log"("actor_user_id", "occurred_at");
+CREATE INDEX "workflow_audit_log_workflow_id_occurred_at_idx" ON "workflow_audit_log"("workflow_id", "occurred_at");

package/prisma/migrations/20260519100000_storage_growth_fixes/migration.sql

@@ -0,0 +1,61 @@
+-- Migration: Storage growth fixes (Sprint 14 Story 07)
+-- 1. Add WorkflowSnapshot table for run snapshot deduplication (keyed by content hash)
+-- 2. Add workflowSnapshotId FK to Run (nullable - existing rows remain valid)
+-- 3. Add payloadStorageKey to TelemetryArtifact for large-payload offload
+-- 4. Backfill: insert unique (workflowId, snapshotHash) snapshots from existing Run rows
+-- 5. Set workflowSnapshotId on backfilled runs
+
+-- Create WorkflowSnapshot table
+CREATE TABLE "WorkflowSnapshot" (
+    "id"            TEXT NOT NULL,
+    "workflow_id"   TEXT NOT NULL,
+    "snapshot_hash" TEXT NOT NULL,
+    "snapshot_json" TEXT NOT NULL,
+    "created_at"    TEXT NOT NULL,
+    CONSTRAINT "WorkflowSnapshot_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "WorkflowSnapshot_workflow_id_snapshot_hash_key"
+    ON "WorkflowSnapshot"("workflow_id", "snapshot_hash");
+
+CREATE INDEX "WorkflowSnapshot_workflow_id_snapshot_hash_idx"
+    ON "WorkflowSnapshot"("workflow_id", "snapshot_hash");
+
+-- Add FK column to Run (nullable)
+ALTER TABLE "Run" ADD COLUMN "workflow_snapshot_id" TEXT;
+
+CREATE INDEX "Run_workflow_snapshot_id_idx"
+    ON "Run"("workflow_snapshot_id");
+
+ALTER TABLE "Run"
+    ADD CONSTRAINT "Run_workflow_snapshot_id_fkey"
+    FOREIGN KEY ("workflow_snapshot_id")
+    REFERENCES "WorkflowSnapshot"("id")
+    ON DELETE SET NULL ON UPDATE CASCADE
+    DEFERRABLE INITIALLY DEFERRED;
+
+-- Add payloadStorageKey to TelemetryArtifact
+ALTER TABLE "TelemetryArtifact" ADD COLUMN "payload_storage_key" TEXT;
+
+-- Backfill: deduplicate workflow snapshots from existing Run rows by content hash.
+-- md5 is available in PostgreSQL without extensions; we use encode(digest(...), 'hex')
+-- from pgcrypto — fall back to md5 which is always available.
+INSERT INTO "WorkflowSnapshot" ("id", "workflow_id", "snapshot_hash", "snapshot_json", "created_at")
+SELECT DISTINCT ON (r."workflow_id", md5(r."workflow_snapshot_json"))
+    gen_random_uuid()::text,
+    r."workflow_id",
+    md5(r."workflow_snapshot_json"),
+    r."workflow_snapshot_json",
+    MIN(r."started_at") OVER (PARTITION BY r."workflow_id", md5(r."workflow_snapshot_json"))
+FROM "Run" r
+WHERE r."workflow_snapshot_json" IS NOT NULL
+ON CONFLICT ("workflow_id", "snapshot_hash") DO NOTHING;
+
+-- Set workflowSnapshotId on existing runs that have snapshots
+UPDATE "Run" r
+SET "workflow_snapshot_id" = ws."id"
+FROM "WorkflowSnapshot" ws
+WHERE r."workflow_id" = ws."workflow_id"
+  AND md5(r."workflow_snapshot_json") = ws."snapshot_hash"
+  AND r."workflow_snapshot_json" IS NOT NULL
+  AND r."workflow_snapshot_id" IS NULL;

package/prisma/migrations.sqlite/20260519000000_workflow_audit_log/migration.sql

@@ -0,0 +1,21 @@
+-- Create WorkflowAuditLog table for workspace-local run-event audit trail (Sprint 13 Story B).
+-- SQLite variant: no TIMESTAMP(3), no quoted identifiers.
+
+CREATE TABLE workflow_audit_log (
+    id               TEXT NOT NULL PRIMARY KEY,
+    occurred_at      DATETIME NOT NULL,
+    actor_user_id    TEXT NOT NULL,
+    actor_session_id TEXT,
+    action           TEXT NOT NULL,
+    resource_type    TEXT NOT NULL,
+    resource_id      TEXT NOT NULL,
+    outcome          TEXT NOT NULL,
+    error_code       TEXT,
+    correlation_id   TEXT,
+    workflow_id      TEXT NOT NULL,
+    run_id           TEXT,
+    node_id          TEXT
+);
+
+CREATE INDEX workflow_audit_log_actor_user_id_occurred_at_idx ON workflow_audit_log(actor_user_id, occurred_at);
+CREATE INDEX workflow_audit_log_workflow_id_occurred_at_idx ON workflow_audit_log(workflow_id, occurred_at);

package/prisma/migrations.sqlite/20260519100000_storage_growth_fixes/migration.sql

@@ -0,0 +1,29 @@
+-- Migration: Storage growth fixes (Sprint 14 Story 07) - SQLite variant
+-- 1. Add WorkflowSnapshot table for run snapshot deduplication
+-- 2. Add workflowSnapshotId FK to Run (nullable)
+-- 3. Add payloadStorageKey to TelemetryArtifact
+-- Note: SQLite has no md5() — runtime backfill handled by PrismaWorkflowSnapshotRepository.
+
+-- Create WorkflowSnapshot table
+CREATE TABLE "WorkflowSnapshot" (
+    "id"            TEXT NOT NULL PRIMARY KEY,
+    "workflow_id"   TEXT NOT NULL,
+    "snapshot_hash" TEXT NOT NULL,
+    "snapshot_json" TEXT NOT NULL,
+    "created_at"    TEXT NOT NULL
+);
+
+CREATE UNIQUE INDEX "WorkflowSnapshot_workflow_id_snapshot_hash_key"
+    ON "WorkflowSnapshot"("workflow_id", "snapshot_hash");
+
+CREATE INDEX "WorkflowSnapshot_workflow_id_snapshot_hash_idx"
+    ON "WorkflowSnapshot"("workflow_id", "snapshot_hash");
+
+-- Add FK column to Run (nullable; SQLite cannot add FK constraints after the fact)
+ALTER TABLE "Run" ADD COLUMN "workflow_snapshot_id" TEXT;
+
+CREATE INDEX "Run_workflow_snapshot_id_idx"
+    ON "Run"("workflow_snapshot_id");
+
+-- Add payloadStorageKey to TelemetryArtifact
+ALTER TABLE "TelemetryArtifact" ADD COLUMN "payload_storage_key" TEXT;

package/prisma/schema.postgresql.prisma

@@ -18,6 +18,7 @@ model Run {
   executionOptionsJson String? @map("execution_options_json")
   controlJson          String? @map("control_json")
   workflowSnapshotJson String? @map("workflow_snapshot_json")
+  workflowSnapshotId   String? @map("workflow_snapshot_id")
   policySnapshotJson   String? @map("policy_snapshot_json")
   engineCountersJson   String? @map("engine_counters_json")
   mutableStateJson     String? @map("mutable_state_json")
@@ -33,9 +34,11 @@ model Run {
   slotProjection     RunSlotProjection?
   testSuiteRun       TestSuiteRun? @relation(fields: [testSuiteRunId], references: [id])
   testAssertions     TestAssertion[]
+  workflowSnapshot   WorkflowSnapshot? @relation(fields: [workflowSnapshotId], references: [id])
   @@index([workflowId, startedAt])
   @@index([workflowId, status, finishedAt])
   @@index([testSuiteRunId, testCaseIndex])
+  @@index([workflowSnapshotId])
 }
 
 model RunWorkItem {
@@ -258,24 +261,39 @@ model TelemetrySpan {
   @@index([retentionExpiresAt])
 }
 
+model WorkflowSnapshot {
+  id           String @id
+  workflowId   String @map("workflow_id")
+  /// SHA-256 hex digest of snapshotJson — dedup key: same workflow content → one row.
+  snapshotHash String @map("snapshot_hash")
+  snapshotJson String @map("snapshot_json")
+  createdAt    String @map("created_at")
+
+  runs Run[]
+
+  @@unique([workflowId, snapshotHash])
+  @@index([workflowId, snapshotHash])
+}
+
 model TelemetryArtifact {
-  artifactId    String  @id @map("artifact_id")
-  traceId       String  @map("trace_id")
-  spanId        String  @map("span_id")
-  runId         String  @map("run_id")
-  workflowId    String  @map("workflow_id")
-  nodeId        String? @map("node_id")
-  activationId  String? @map("activation_id")
-  kind          String
-  contentType   String  @map("content_type")
-  previewText   String? @map("preview_text")
-  previewJson   String? @map("preview_json")
-  payloadText   String? @map("payload_text")
-  payloadJson   String? @map("payload_json")
-  bytes         Int?
-  truncated     Boolean?
-  createdAt     String  @map("created_at")
-  expiresAt     String? @map("expires_at")
+  artifactId         String  @id @map("artifact_id")
+  traceId            String  @map("trace_id")
+  spanId             String  @map("span_id")
+  runId              String  @map("run_id")
+  workflowId         String  @map("workflow_id")
+  nodeId             String? @map("node_id")
+  activationId       String? @map("activation_id")
+  kind               String
+  contentType        String  @map("content_type")
+  previewText        String? @map("preview_text")
+  previewJson        String? @map("preview_json")
+  payloadText        String? @map("payload_text")
+  payloadJson        String? @map("payload_json")
+  payloadStorageKey  String? @map("payload_storage_key")
+  bytes              Int?
+  truncated          Boolean?
+  createdAt          String  @map("created_at")
+  expiresAt          String? @map("expires_at")
   retentionExpiresAt String? @map("retention_expires_at")
 
   @@index([traceId, createdAt])
@@ -469,3 +487,23 @@ model VerificationToken {
   @@unique([identifier, token])
   @@map("codemation_auth_verification_token")
 }
+
+model WorkflowAuditLog {
+  id             String    @id @map("id")
+  occurredAt     DateTime  @map("occurred_at")
+  actorUserId    String    @map("actor_user_id")
+  actorSessionId String?   @map("actor_session_id")
+  action         String    @map("action")
+  resourceType   String    @map("resource_type")
+  resourceId     String    @map("resource_id")
+  outcome        String    @map("outcome")
+  errorCode      String?   @map("error_code")
+  correlationId  String?   @map("correlation_id")
+  workflowId     String    @map("workflow_id")
+  runId          String?   @map("run_id")
+  nodeId         String?   @map("node_id")
+
+  @@index([actorUserId, occurredAt])
+  @@index([workflowId, occurredAt])
+  @@map("workflow_audit_log")
+}