@elevasis/sdk 0.3.3 → 0.4.1

package/dist/cli.cjs

@@ -39746,9 +39746,16 @@ var ResourceRegistry = class {
   }
   /**
    * Pre-serialized organization data cache
-   * Computed once at construction, never invalidated (static registry)
+   * Computed once at construction for static orgs, updated incrementally for runtime orgs
    */
   serializedCache;
+  /**
+   * Per-resource remote configuration (external deployments)
+   * Key: "orgName/resourceId", Value: RemoteOrgConfig for that resource.
+   * Tracks which individual resources were added at runtime via deploy pipeline.
+   * Static and remote resources coexist in the same org.
+   */
+  remoteResources = /* @__PURE__ */ new Map();
   /**
    * Validates registry on construction
    * - Checks for duplicate resourceIds within organizations
@@ -39848,6 +39855,130 @@ var ResourceRegistry = class {
     return this.registry;
   }
   // ============================================================================
+  // Runtime Organization Registration (External Deployments)
+  // ============================================================================
+  /**
+   * Register external resources at runtime
+   *
+   * Called during deploy pipeline when an external developer deploys their bundle.
+   * Merges the incoming stub definitions into the org's registry and stores
+   * per-resource remote config for worker thread execution branching.
+   *
+   * Static and remote resources coexist in the same org. If the org already
+   * has static resources, the incoming remote resources are merged alongside them.
+   * If redeploying (some resources already registered as remote for this org),
+   * the previous remote resources are unregistered first.
+   *
+   * @param orgName - Organization name (used as registry key)
+   * @param org - Stub resource definitions (workflows/agents with placeholder handlers)
+   * @param remote - Remote configuration (bundle path, deployment ID, env vars)
+   * @throws Error if incoming resourceId conflicts with a static resource
+   * @throws Error if incoming deployment contains duplicate resourceIds
+   */
+  registerOrganization(orgName, org, remote) {
+    const incomingWorkflowIds = (org.workflows ?? []).map((w) => w.config.resourceId);
+    const incomingAgentIds = (org.agents ?? []).map((a) => a.config.resourceId);
+    const incomingIds = [...incomingWorkflowIds, ...incomingAgentIds];
+    const seen = /* @__PURE__ */ new Set();
+    for (const id of incomingIds) {
+      if (seen.has(id)) {
+        throw new Error(
+          `Duplicate resource ID '${id}' in deployment. Each resource must have a unique ID.`
+        );
+      }
+      seen.add(id);
+    }
+    if (this.isRemote(orgName)) {
+      this.unregisterOrganization(orgName);
+    }
+    const existingOrg = this.registry[orgName];
+    if (existingOrg) {
+      const staticWorkflowIds = new Set((existingOrg.workflows ?? []).map((w) => w.config.resourceId));
+      const staticAgentIds = new Set((existingOrg.agents ?? []).map((a) => a.config.resourceId));
+      for (const id of incomingIds) {
+        if (staticWorkflowIds.has(id) || staticAgentIds.has(id)) {
+          throw new Error(
+            `Resource '${id}' already exists in '${orgName}' as an internal resource. External deployments cannot override internal resources.`
+          );
+        }
+      }
+    }
+    if (existingOrg) {
+      existingOrg.workflows = [...existingOrg.workflows ?? [], ...org.workflows ?? []];
+      existingOrg.agents = [...existingOrg.agents ?? [], ...org.agents ?? []];
+    } else {
+      this.registry[orgName] = org;
+    }
+    for (const id of incomingIds) {
+      this.remoteResources.set(`${orgName}/${id}`, remote);
+    }
+    this.serializedCache.set(orgName, serializeOrganization(this.registry[orgName]));
+  }
+  /**
+   * Unregister runtime-registered resources for an organization
+   *
+   * Removes only resources that were registered at runtime (via registerOrganization).
+   * Static resources loaded at startup are preserved. If the org still has static
+   * resources after removal, the serialization cache is rebuilt. If no resources
+   * remain, the org is fully removed from the registry.
+   * No-op if the org has no remote resources.
+   *
+   * @param orgName - Organization name to unregister remote resources from
+   */
+  unregisterOrganization(orgName) {
+    const prefix = `${orgName}/`;
+    const remoteIds = /* @__PURE__ */ new Set();
+    for (const key of this.remoteResources.keys()) {
+      if (key.startsWith(prefix)) {
+        remoteIds.add(key.slice(prefix.length));
+        this.remoteResources.delete(key);
+      }
+    }
+    if (remoteIds.size === 0) return;
+    const orgResources = this.registry[orgName];
+    if (!orgResources) return;
+    orgResources.workflows = (orgResources.workflows ?? []).filter(
+      (w) => !remoteIds.has(w.config.resourceId)
+    );
+    orgResources.agents = (orgResources.agents ?? []).filter(
+      (a) => !remoteIds.has(a.config.resourceId)
+    );
+    const remaining = (orgResources.workflows?.length ?? 0) + (orgResources.agents?.length ?? 0) + (orgResources.triggers?.length ?? 0) + (orgResources.integrations?.length ?? 0) + (orgResources.externalResources?.length ?? 0) + (orgResources.humanCheckpoints?.length ?? 0);
+    if (remaining > 0) {
+      this.serializedCache.set(orgName, serializeOrganization(orgResources));
+    } else {
+      delete this.registry[orgName];
+      this.serializedCache.delete(orgName);
+    }
+  }
+  /**
+   * Get remote configuration for a specific resource
+   *
+   * Returns the RemoteOrgConfig if the resource was registered at runtime,
+   * or null if it's a static resource or doesn't exist.
+   * Used by the execution coordinator to branch between local and worker execution.
+   *
+   * @param orgName - Organization name
+   * @param resourceId - Resource ID
+   * @returns Remote config or null
+   */
+  getRemoteConfig(orgName, resourceId) {
+    return this.remoteResources.get(`${orgName}/${resourceId}`) ?? null;
+  }
+  /**
+   * Check if an organization has any remote (externally deployed) resources
+   *
+   * @param orgName - Organization name
+   * @returns true if the org has at least one runtime-registered resource
+   */
+  isRemote(orgName) {
+    const prefix = `${orgName}/`;
+    for (const key of this.remoteResources.keys()) {
+      if (key.startsWith(prefix)) return true;
+    }
+    return false;
+  }
+  // ============================================================================
   // Resource Manifest Accessors
   // ============================================================================
   /**
@@ -40044,20 +40175,11 @@ function wrapAction(commandName, fn) {
 // src/cli/commands/check.ts
 var import_meta = {};
 function registerCheckCommand(program3) {
-  program3.command("check").description("Validate project resources against the ResourceRegistry\n  Example: elevasis check --config ./elevasis.config.ts --entry ./src/index.ts").option("--config <path>", "Path to elevasis.config.ts (default: ./elevasis.config.ts)").option("--entry <path>", "Path to entry file (default: ./src/index.ts)").action(wrapAction("check", async (options) => {
-    const configPath = options.config ?? "./elevasis.config.ts";
+  program3.command("check").description("Validate project resources against the ResourceRegistry\n  Example: elevasis check --entry ./src/index.ts").option("--entry <path>", "Path to entry file (default: ./src/index.ts)").action(wrapAction("check", async (options) => {
     const entryPath = options.entry ?? "./src/index.ts";
     const spinner = ora("Validating resources...").start();
     try {
       const jiti = (0, import_jiti.createJiti)(import_meta.url);
-      const configModule = await jiti.import((0, import_path.resolve)(configPath));
-      const config3 = configModule.default;
-      if (!config3?.organization) {
-        spinner.fail('Invalid config: missing "organization" field');
-        console.error(source_default.gray(`  Config file: ${(0, import_path.resolve)(configPath)}`));
-        console.error(source_default.gray('  Expected: export default { organization: "your-org-name" }'));
-        throw new Error("Invalid config");
-      }
       const entryModule = await jiti.import((0, import_path.resolve)(entryPath));
       const org = entryModule.default;
       if (!org) {
@@ -40066,7 +40188,7 @@ function registerCheckCommand(program3) {
         console.error(source_default.gray("  Expected: export default { workflows: [...], agents: [...] }"));
         throw new Error("Invalid entry");
       }
-      new ResourceRegistry({ [config3.organization]: org });
+      new ResourceRegistry({ _check: org });
       const workflowCount = org.workflows?.length ?? 0;
       const agentCount = org.agents?.length ?? 0;
       const totalCount = workflowCount + agentCount;
@@ -40117,27 +40239,73 @@ function resolveEnvironment() {
   return process.env.NODE_ENV === "development" ? "development" : "production";
 }
 
+// src/cli/api-client.ts
+function getApiKey() {
+  const key = process.env.ELEVASIS_API_KEY;
+  if (!key) {
+    throw new Error(
+      "ELEVASIS_API_KEY environment variable is required.\nSet it in your .env file: ELEVASIS_API_KEY=sk_..."
+    );
+  }
+  return key;
+}
+async function apiGet(endpoint, apiUrl = resolveApiUrl()) {
+  const response = await fetch(`${apiUrl}${endpoint}`, {
+    headers: { Authorization: `Bearer ${getApiKey()}` }
+  });
+  if (!response.ok) {
+    const errorText = await response.text();
+    throw new Error(`API request failed (${response.status}): ${errorText}`);
+  }
+  if (response.status === 204) {
+    return {};
+  }
+  return response.json();
+}
+async function apiPost(endpoint, body, apiUrl = resolveApiUrl()) {
+  const response = await fetch(`${apiUrl}${endpoint}`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${getApiKey()}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify(body)
+  });
+  if (!response.ok) {
+    const errorText = await response.text();
+    throw new Error(`API request failed (${response.status}): ${errorText}`);
+  }
+  if (response.status === 204) {
+    return {};
+  }
+  return response.json();
+}
+
 // src/cli/commands/deploy.ts
 var import_meta2 = {};
 function registerDeployCommand(program3) {
-  program3.command("deploy").description("Validate, bundle, upload, and deploy project resources\n  Example: elevasis deploy --api-url http://localhost:5170").option("--api-url <url>", "API URL").option("--config <path>", "Path to elevasis.config.ts (default: ./elevasis.config.ts)").option("--entry <path>", "Path to entry file (default: ./src/index.ts)").action(wrapAction("deploy", async (options) => {
+  program3.command("deploy").description("Validate, bundle, upload, and deploy project resources\n  Example: elevasis deploy --api-url http://localhost:5170").option("--api-url <url>", "API URL").option("--entry <path>", "Path to entry file (default: ./src/index.ts)").action(wrapAction("deploy", async (options) => {
     const startTime = Date.now();
     const apiUrl = resolveApiUrl(options.apiUrl);
     const env2 = resolveEnvironment();
-    const configPath = options.config ?? "./elevasis.config.ts";
     const entryPath = options.entry ?? "./src/index.ts";
+    const authSpinner = ora("Authenticating...").start();
+    let orgName;
+    try {
+      const me = await apiGet("/api/external/me", apiUrl);
+      orgName = me.organizationName;
+      authSpinner.succeed(
+        source_default.green("Authenticating...") + source_default.white("          done") + source_default.gray(` (${orgName})`)
+      );
+    } catch (error46) {
+      authSpinner.fail(source_default.red("Authentication failed"));
+      console.error(source_default.gray("  Check your ELEVASIS_API_KEY and API URL."));
+      throw error46;
+    }
     const validateSpinner = ora("Validating...").start();
-    let config3;
     let org;
     try {
       const jiti = (0, import_jiti2.createJiti)(import_meta2.url);
-      const configModule = await jiti.import((0, import_path2.resolve)(configPath));
-      config3 = configModule.default;
-      if (!config3?.organization) {
-        validateSpinner.fail('Invalid config: missing "organization" field');
-        console.error(source_default.gray(`  Config file: ${(0, import_path2.resolve)(configPath)}`));
-        throw new Error('Invalid config: missing "organization" field');
-      }
       const entryModule = await jiti.import((0, import_path2.resolve)(entryPath));
       org = entryModule.default;
       if (!org) {
@@ -40145,7 +40313,7 @@ function registerDeployCommand(program3) {
         console.error(source_default.gray(`  Entry file: ${(0, import_path2.resolve)(entryPath)}`));
         throw new Error("Invalid entry: no default export found");
       }
-      new ResourceRegistry({ [config3.organization]: org });
+      new ResourceRegistry({ [orgName]: org });
       const workflowCount = org.workflows?.length ?? 0;
       const agentCount = org.agents?.length ?? 0;
       const totalCount = workflowCount + agentCount;
@@ -40153,7 +40321,7 @@ function registerDeployCommand(program3) {
         source_default.green("Validating...") + source_default.white("              done") + source_default.gray(` (${totalCount} resource${totalCount !== 1 ? "s" : ""}, 0 errors)`)
       );
       console.log("");
-      console.log(source_default.gray(`  Org:    ${config3.organization}`));
+      console.log(source_default.gray(`  Org:    ${orgName}`));
       console.log(source_default.gray(`  Target: ${apiUrl} (${env2})`));
       console.log("");
       for (const w of org.workflows ?? []) {
@@ -40233,13 +40401,13 @@ function registerDeployCommand(program3) {
       console.log("");
     }
     const bundleSpinner = ora("Bundling...").start();
-    const wrapperPath = (0, import_path2.resolve)("__elevasis_serve.ts");
+    const wrapperPath = (0, import_path2.resolve)("__elevasis_worker.ts");
     const bundleOutfile = (0, import_path2.resolve)("dist/bundle.js");
     try {
       const entryImport = entryPath.replace(/\.ts$/, ".js");
       const wrapperContent = `import org from ${JSON.stringify(entryImport)}
-import { startServer } from '@elevasis/sdk/server'
-startServer(org)
+import { startWorker } from '@elevasis/sdk/worker'
+startWorker(org)
 `;
       await (0, import_promises.writeFile)(wrapperPath, wrapperContent, "utf-8");
       await (0, import_promises.mkdir)((0, import_path2.resolve)("dist"), { recursive: true });
@@ -40329,48 +40497,6 @@ startServer(org)
   }));
 }
 
-// src/cli/api-client.ts
-function getApiKey() {
-  const key = process.env.ELEVASIS_API_KEY;
-  if (!key) {
-    throw new Error(
-      "ELEVASIS_API_KEY environment variable is required.\nSet it in your .env file: ELEVASIS_API_KEY=sk_..."
-    );
-  }
-  return key;
-}
-async function apiGet(endpoint, apiUrl = resolveApiUrl()) {
-  const response = await fetch(`${apiUrl}${endpoint}`, {
-    headers: { Authorization: `Bearer ${getApiKey()}` }
-  });
-  if (!response.ok) {
-    const errorText = await response.text();
-    throw new Error(`API request failed (${response.status}): ${errorText}`);
-  }
-  if (response.status === 204) {
-    return {};
-  }
-  return response.json();
-}
-async function apiPost(endpoint, body, apiUrl = resolveApiUrl()) {
-  const response = await fetch(`${apiUrl}${endpoint}`, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${getApiKey()}`,
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify(body)
-  });
-  if (!response.ok) {
-    const errorText = await response.text();
-    throw new Error(`API request failed (${response.status}): ${errorText}`);
-  }
-  if (response.status === 204) {
-    return {};
-  }
-  return response.json();
-}
-
 // src/cli/commands/exec.ts
 function registerExecCommand(program3) {
   program3.command("exec <resourceId>").description(`Execute a deployed resource
@@ -40703,7 +40829,7 @@ var import_path3 = require("path");
 var import_promises2 = require("fs/promises");
 
 // src/cli/version.ts
-var SDK_VERSION = "0.3.3";
+var SDK_VERSION = "0.4.1";
 
 // src/cli/commands/init.ts
 var SCAFFOLD_FILES = [
@@ -40740,7 +40866,7 @@ function registerInitCommand(program3) {
     }
     await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src"), { recursive: true });
     const files = {
-      "elevasis.config.ts": configTemplate(orgSlug),
+      "elevasis.config.ts": configTemplate(),
       "package.json": packageJsonTemplate(orgSlug),
       "pnpm-workspace.yaml": pnpmWorkspaceTemplate(),
       "tsconfig.json": tsconfigTemplate(),
@@ -40768,12 +40894,10 @@ function toSlug(name) {
   const slug = name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^[^a-z]+/, "").replace(/-+/g, "-").replace(/-$/, "");
   return slug.length >= 3 ? slug : "my-project";
 }
-function configTemplate(organization) {
+function configTemplate() {
   return `import type { ElevasConfig } from '@elevasis/sdk'
 
-export default {
-  organization: '${organization}',
-} satisfies ElevasConfig
+export default {} satisfies ElevasConfig
 `;
 }
 function packageJsonTemplate(organization) {
@@ -40866,7 +40990,7 @@ elevasis executions <resourceId>
 
 ## Project Structure
 
-- \`elevasis.config.ts\` -- Organization config
+- \`elevasis.config.ts\` -- Project config (optional settings)
 - \`src/index.ts\` -- Resource definitions (workflows, agents)
 - \`.env\` -- API key and environment variables
 `;

package/dist/index.d.ts

@@ -1054,6 +1054,22 @@ interface IterationContext {
  * - Command View data generation
  */
 
+/**
+ * Configuration for a remotely-deployed organization
+ *
+ * Stored alongside runtime-registered organizations to support
+ * worker thread execution branching and credential management.
+ */
+interface RemoteOrgConfig {
+    /** Path to the esbuild bundle on disk */
+    bundlePath: string;
+    /** Deployment record ID */
+    deploymentId: string;
+    /** Developer-provided environment variables injected into the worker */
+    envVars?: Record<string, string>;
+    /** Platform tool name -> credential name mapping */
+    toolCredentials?: Record<string, string>;
+}
 /**
  * Organization-specific resource collection
  *
@@ -1084,9 +1100,16 @@ declare class ResourceRegistry {
     private registry;
     /**
      * Pre-serialized organization data cache
-     * Computed once at construction, never invalidated (static registry)
+     * Computed once at construction for static orgs, updated incrementally for runtime orgs
      */
     private serializedCache;
+    /**
+     * Per-resource remote configuration (external deployments)
+     * Key: "orgName/resourceId", Value: RemoteOrgConfig for that resource.
+     * Tracks which individual resources were added at runtime via deploy pipeline.
+     * Static and remote resources coexist in the same org.
+     */
+    private remoteResources;
     constructor(registry: OrganizationRegistry);
     /**
      * Validates registry on construction
@@ -1122,6 +1145,56 @@ declare class ResourceRegistry {
      * NOTE: For debugging only - returns raw registry data
      */
     listAllResources(): OrganizationRegistry;
+    /**
+     * Register external resources at runtime
+     *
+     * Called during deploy pipeline when an external developer deploys their bundle.
+     * Merges the incoming stub definitions into the org's registry and stores
+     * per-resource remote config for worker thread execution branching.
+     *
+     * Static and remote resources coexist in the same org. If the org already
+     * has static resources, the incoming remote resources are merged alongside them.
+     * If redeploying (some resources already registered as remote for this org),
+     * the previous remote resources are unregistered first.
+     *
+     * @param orgName - Organization name (used as registry key)
+     * @param org - Stub resource definitions (workflows/agents with placeholder handlers)
+     * @param remote - Remote configuration (bundle path, deployment ID, env vars)
+     * @throws Error if incoming resourceId conflicts with a static resource
+     * @throws Error if incoming deployment contains duplicate resourceIds
+     */
+    registerOrganization(orgName: string, org: OrganizationResources, remote: RemoteOrgConfig): void;
+    /**
+     * Unregister runtime-registered resources for an organization
+     *
+     * Removes only resources that were registered at runtime (via registerOrganization).
+     * Static resources loaded at startup are preserved. If the org still has static
+     * resources after removal, the serialization cache is rebuilt. If no resources
+     * remain, the org is fully removed from the registry.
+     * No-op if the org has no remote resources.
+     *
+     * @param orgName - Organization name to unregister remote resources from
+     */
+    unregisterOrganization(orgName: string): void;
+    /**
+     * Get remote configuration for a specific resource
+     *
+     * Returns the RemoteOrgConfig if the resource was registered at runtime,
+     * or null if it's a static resource or doesn't exist.
+     * Used by the execution coordinator to branch between local and worker execution.
+     *
+     * @param orgName - Organization name
+     * @param resourceId - Resource ID
+     * @returns Remote config or null
+     */
+    getRemoteConfig(orgName: string, resourceId: string): RemoteOrgConfig | null;
+    /**
+     * Check if an organization has any remote (externally deployed) resources
+     *
+     * @param orgName - Organization name
+     * @returns true if the org has at least one runtime-registered resource
+     */
+    isRemote(orgName: string): boolean;
     /**
      * Get triggers for an organization
      * @param organizationName - Organization name
@@ -1837,10 +1910,10 @@ declare class RegistryValidationError extends Error {
 
 /**
  * Project configuration for an external developer project.
- * Defined in elevas.config.ts at the project root.
+ * Defined in elevasis.config.ts at the project root.
+ * Organization is derived from the ELEVASIS_API_KEY -- not configured here.
  */
 interface ElevasConfig {
-    organization: string;
     defaultStatus?: ResourceStatus;
     dev?: {
         port?: number;

package/dist/index.js

@@ -3162,9 +3162,16 @@ var ResourceRegistry = class {
   }
   /**
    * Pre-serialized organization data cache
-   * Computed once at construction, never invalidated (static registry)
+   * Computed once at construction for static orgs, updated incrementally for runtime orgs
    */
   serializedCache;
+  /**
+   * Per-resource remote configuration (external deployments)
+   * Key: "orgName/resourceId", Value: RemoteOrgConfig for that resource.
+   * Tracks which individual resources were added at runtime via deploy pipeline.
+   * Static and remote resources coexist in the same org.
+   */
+  remoteResources = /* @__PURE__ */ new Map();
   /**
    * Validates registry on construction
    * - Checks for duplicate resourceIds within organizations
@@ -3264,6 +3271,130 @@ var ResourceRegistry = class {
     return this.registry;
   }
   // ============================================================================
+  // Runtime Organization Registration (External Deployments)
+  // ============================================================================
+  /**
+   * Register external resources at runtime
+   *
+   * Called during deploy pipeline when an external developer deploys their bundle.
+   * Merges the incoming stub definitions into the org's registry and stores
+   * per-resource remote config for worker thread execution branching.
+   *
+   * Static and remote resources coexist in the same org. If the org already
+   * has static resources, the incoming remote resources are merged alongside them.
+   * If redeploying (some resources already registered as remote for this org),
+   * the previous remote resources are unregistered first.
+   *
+   * @param orgName - Organization name (used as registry key)
+   * @param org - Stub resource definitions (workflows/agents with placeholder handlers)
+   * @param remote - Remote configuration (bundle path, deployment ID, env vars)
+   * @throws Error if incoming resourceId conflicts with a static resource
+   * @throws Error if incoming deployment contains duplicate resourceIds
+   */
+  registerOrganization(orgName, org, remote) {
+    const incomingWorkflowIds = (org.workflows ?? []).map((w) => w.config.resourceId);
+    const incomingAgentIds = (org.agents ?? []).map((a) => a.config.resourceId);
+    const incomingIds = [...incomingWorkflowIds, ...incomingAgentIds];
+    const seen = /* @__PURE__ */ new Set();
+    for (const id of incomingIds) {
+      if (seen.has(id)) {
+        throw new Error(
+          `Duplicate resource ID '${id}' in deployment. Each resource must have a unique ID.`
+        );
+      }
+      seen.add(id);
+    }
+    if (this.isRemote(orgName)) {
+      this.unregisterOrganization(orgName);
+    }
+    const existingOrg = this.registry[orgName];
+    if (existingOrg) {
+      const staticWorkflowIds = new Set((existingOrg.workflows ?? []).map((w) => w.config.resourceId));
+      const staticAgentIds = new Set((existingOrg.agents ?? []).map((a) => a.config.resourceId));
+      for (const id of incomingIds) {
+        if (staticWorkflowIds.has(id) || staticAgentIds.has(id)) {
+          throw new Error(
+            `Resource '${id}' already exists in '${orgName}' as an internal resource. External deployments cannot override internal resources.`
+          );
+        }
+      }
+    }
+    if (existingOrg) {
+      existingOrg.workflows = [...existingOrg.workflows ?? [], ...org.workflows ?? []];
+      existingOrg.agents = [...existingOrg.agents ?? [], ...org.agents ?? []];
+    } else {
+      this.registry[orgName] = org;
+    }
+    for (const id of incomingIds) {
+      this.remoteResources.set(`${orgName}/${id}`, remote);
+    }
+    this.serializedCache.set(orgName, serializeOrganization(this.registry[orgName]));
+  }
+  /**
+   * Unregister runtime-registered resources for an organization
+   *
+   * Removes only resources that were registered at runtime (via registerOrganization).
+   * Static resources loaded at startup are preserved. If the org still has static
+   * resources after removal, the serialization cache is rebuilt. If no resources
+   * remain, the org is fully removed from the registry.
+   * No-op if the org has no remote resources.
+   *
+   * @param orgName - Organization name to unregister remote resources from
+   */
+  unregisterOrganization(orgName) {
+    const prefix = `${orgName}/`;
+    const remoteIds = /* @__PURE__ */ new Set();
+    for (const key of this.remoteResources.keys()) {
+      if (key.startsWith(prefix)) {
+        remoteIds.add(key.slice(prefix.length));
+        this.remoteResources.delete(key);
+      }
+    }
+    if (remoteIds.size === 0) return;
+    const orgResources = this.registry[orgName];
+    if (!orgResources) return;
+    orgResources.workflows = (orgResources.workflows ?? []).filter(
+      (w) => !remoteIds.has(w.config.resourceId)
+    );
+    orgResources.agents = (orgResources.agents ?? []).filter(
+      (a) => !remoteIds.has(a.config.resourceId)
+    );
+    const remaining = (orgResources.workflows?.length ?? 0) + (orgResources.agents?.length ?? 0) + (orgResources.triggers?.length ?? 0) + (orgResources.integrations?.length ?? 0) + (orgResources.externalResources?.length ?? 0) + (orgResources.humanCheckpoints?.length ?? 0);
+    if (remaining > 0) {
+      this.serializedCache.set(orgName, serializeOrganization(orgResources));
+    } else {
+      delete this.registry[orgName];
+      this.serializedCache.delete(orgName);
+    }
+  }
+  /**
+   * Get remote configuration for a specific resource
+   *
+   * Returns the RemoteOrgConfig if the resource was registered at runtime,
+   * or null if it's a static resource or doesn't exist.
+   * Used by the execution coordinator to branch between local and worker execution.
+   *
+   * @param orgName - Organization name
+   * @param resourceId - Resource ID
+   * @returns Remote config or null
+   */
+  getRemoteConfig(orgName, resourceId) {
+    return this.remoteResources.get(`${orgName}/${resourceId}`) ?? null;
+  }
+  /**
+   * Check if an organization has any remote (externally deployed) resources
+   *
+   * @param orgName - Organization name
+   * @returns true if the org has at least one runtime-registered resource
+   */
+  isRemote(orgName) {
+    const prefix = `${orgName}/`;
+    for (const key of this.remoteResources.keys()) {
+      if (key.startsWith(prefix)) return true;
+    }
+    return false;
+  }
+  // ============================================================================
   // Resource Manifest Accessors
   // ============================================================================
   /**

package/dist/worker/index.js

@@ -0,0 +1,132 @@
+import { parentPort } from 'worker_threads';
+
+// src/worker/index.ts
+function resolveNext(next, data) {
+  if (next === null) return null;
+  if (next.type === "linear") return next.target;
+  for (const route of next.routes) {
+    if (route.condition(data)) return route.target;
+  }
+  return next.default;
+}
+async function executeWorkflow(workflow, input) {
+  const logs = [];
+  const origLog = console.log;
+  const origWarn = console.warn;
+  const origError = console.error;
+  const capture = (level, orig) => (...args) => {
+    logs.push({ level, message: args.map(String).join(" ") });
+    orig(...args);
+  };
+  console.log = capture("info", origLog);
+  console.warn = capture("warn", origWarn);
+  console.error = capture("error", origError);
+  try {
+    let currentData = workflow.contract.inputSchema ? workflow.contract.inputSchema.parse(input) : input;
+    let stepId = workflow.entryPoint;
+    while (stepId !== null) {
+      const step = workflow.steps[stepId];
+      if (!step) {
+        throw new Error(`Step '${stepId}' not found in workflow '${workflow.config.resourceId}'`);
+      }
+      const stepInput = step.inputSchema.parse(currentData);
+      const rawOutput = await step.handler(stepInput, {
+        executionId: "",
+        organizationId: "",
+        organizationName: "",
+        resourceId: workflow.config.resourceId,
+        executionDepth: 0,
+        store: /* @__PURE__ */ new Map(),
+        logger: {
+          debug: (msg) => console.log(`[debug] ${msg}`),
+          info: (msg) => console.log(`[info] ${msg}`),
+          warn: (msg) => console.warn(`[warn] ${msg}`),
+          error: (msg) => console.error(`[error] ${msg}`)
+        }
+      });
+      currentData = step.outputSchema.parse(rawOutput);
+      stepId = resolveNext(step.next, currentData);
+    }
+    if (workflow.contract.outputSchema) {
+      currentData = workflow.contract.outputSchema.parse(currentData);
+    }
+    return { output: currentData, logs };
+  } finally {
+    console.log = origLog;
+    console.warn = origWarn;
+    console.error = origError;
+  }
+}
+function startWorker(org) {
+  const workflows = new Map(
+    (org.workflows ?? []).map((w) => [w.config.resourceId, w])
+  );
+  const agents = new Map(
+    (org.agents ?? []).map((a) => [a.config.resourceId, a])
+  );
+  console.log(`[SDK-WORKER] Worker started with ${workflows.size} workflow(s), ${agents.size} agent(s)`);
+  parentPort.on("message", async (msg) => {
+    if (msg.type === "manifest") {
+      const workflowList = (org.workflows ?? []).map((w) => w.config.resourceId);
+      const agentList = (org.agents ?? []).map((a) => a.config.resourceId);
+      console.log(`[SDK-WORKER] Manifest requested: workflows=[${workflowList.join(", ")}], agents=[${agentList.join(", ")}]`);
+      parentPort.postMessage({
+        type: "manifest",
+        workflows: (org.workflows ?? []).map((w) => ({
+          resourceId: w.config.resourceId,
+          name: w.config.name,
+          type: w.config.type,
+          status: w.config.status,
+          description: w.config.description,
+          version: w.config.version
+        })),
+        agents: (org.agents ?? []).map((a) => ({
+          resourceId: a.config.resourceId,
+          name: a.config.name,
+          type: a.config.type,
+          status: a.config.status,
+          description: a.config.description,
+          version: a.config.version
+        }))
+      });
+      return;
+    }
+    if (msg.type === "execute") {
+      const { resourceId, executionId, input } = msg;
+      console.log(`[SDK-WORKER] Execute request: resourceId=${resourceId}, executionId=${executionId}`);
+      const workflow = workflows.get(resourceId);
+      if (workflow) {
+        try {
+          console.log(`[SDK-WORKER] Running workflow '${resourceId}' (${Object.keys(workflow.steps).length} steps)`);
+          const startTime = Date.now();
+          const { output, logs } = await executeWorkflow(workflow, input);
+          console.log(`[SDK-WORKER] Workflow '${resourceId}' completed (${Date.now() - startTime}ms)`);
+          parentPort.postMessage({ type: "result", status: "completed", output, logs });
+        } catch (err) {
+          console.error(`[SDK-WORKER] Workflow '${resourceId}' failed: ${String(err)}`);
+          parentPort.postMessage({ type: "result", status: "failed", error: String(err), logs: [] });
+        }
+        return;
+      }
+      if (agents.has(resourceId)) {
+        console.error(`[SDK-WORKER] Agent execution not supported: ${resourceId}`);
+        parentPort.postMessage({
+          type: "result",
+          status: "failed",
+          error: "Agent execution not yet supported in worker runtime",
+          logs: []
+        });
+        return;
+      }
+      console.error(`[SDK-WORKER] Resource not found: ${resourceId}`);
+      parentPort.postMessage({
+        type: "result",
+        status: "failed",
+        error: `Resource not found: ${resourceId}`,
+        logs: []
+      });
+    }
+  });
+}
+
+export { startWorker };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/sdk",
-  "version": "0.3.3",
+  "version": "0.4.1",
   "description": "SDK for building Elevasis organization resources",
   "comment:bin": "IMPORTANT: This package shares the 'elevasis' binary name with @repo/cli. They never conflict because @elevasis/sdk must NEVER be added as a dependency of any workspace package (apps/*, packages/*, organizations/*). Workspace projects use @repo/cli for the 'elevasis' binary. External developers (outside the workspace) get this SDK's binary via npm install.",
   "type": "module",
@@ -13,14 +13,14 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
-    "./server": {
-      "import": "./dist/server/index.js"
+    "./worker": {
+      "import": "./dist/worker/index.js"
     }
   },
   "files": [
     "dist/index.js",
     "dist/index.d.ts",
-    "dist/server/index.js",
+    "dist/worker/index.js",
     "dist/cli.cjs"
   ],
   "scripts": {

package/dist/server/index.js

@@ -1,174 +0,0 @@
-import { createServer } from 'http';
-
-// src/server/index.ts
-function readBody(req) {
-  return new Promise((resolve, reject) => {
-    const chunks = [];
-    req.on("data", (chunk) => chunks.push(chunk));
-    req.on("end", () => resolve(Buffer.concat(chunks).toString()));
-    req.on("error", reject);
-  });
-}
-function json(res, status, data) {
-  res.writeHead(status, { "Content-Type": "application/json" });
-  res.end(JSON.stringify(data));
-}
-function resolveNext(next, data) {
-  if (next === null) return null;
-  if (next.type === "linear") return next.target;
-  for (const route of next.routes) {
-    if (route.condition(data)) return route.target;
-  }
-  return next.default;
-}
-async function executeWorkflow(workflow, input, context) {
-  let currentData = workflow.contract.inputSchema.parse(input);
-  let stepId = workflow.entryPoint;
-  while (stepId !== null) {
-    if (context.signal?.aborted) {
-      throw new Error("Execution cancelled");
-    }
-    const step = workflow.steps[stepId];
-    if (!step) {
-      throw new Error(`Step '${stepId}' not found in workflow '${workflow.config.resourceId}'`);
-    }
-    const stepInput = step.inputSchema.parse(currentData);
-    const rawOutput = await step.handler(stepInput, context);
-    currentData = step.outputSchema.parse(rawOutput);
-    stepId = resolveNext(step.next, currentData);
-  }
-  if (workflow.contract.outputSchema) {
-    currentData = workflow.contract.outputSchema.parse(currentData);
-  }
-  return currentData;
-}
-function withLogCapture(fn) {
-  const logs = [];
-  const orig = { log: console.log, warn: console.warn, error: console.error };
-  const capture = (level, origFn) => (...args) => {
-    logs.push({ level, message: args.map(String).join(" "), timestamp: Date.now() });
-    origFn(...args);
-  };
-  console.log = capture("info", orig.log);
-  console.warn = capture("warn", orig.warn);
-  console.error = capture("error", orig.error);
-  return fn().then((result) => ({ result, logs })).finally(() => {
-    console.log = orig.log;
-    console.warn = orig.warn;
-    console.error = orig.error;
-  });
-}
-function startServer(org) {
-  const port = parseInt(process.env.PORT || "3000");
-  const workflows = new Map(
-    (org.workflows ?? []).map((w) => [w.config.resourceId, w])
-  );
-  const agents = new Map(
-    (org.agents ?? []).map((a) => [a.config.resourceId, a])
-  );
-  const controllers = /* @__PURE__ */ new Map();
-  const server = createServer(async (req, res) => {
-    try {
-      if (req.url === "/health" && req.method === "GET") {
-        res.writeHead(200).end("ok");
-        return;
-      }
-      if (req.url === "/manifest" && req.method === "GET") {
-        json(res, 200, {
-          workflows: (org.workflows ?? []).map((w) => ({
-            resourceId: w.config.resourceId,
-            name: w.config.name,
-            type: w.config.type,
-            status: w.config.status,
-            description: w.config.description,
-            version: w.config.version
-          })),
-          agents: (org.agents ?? []).map((a) => ({
-            resourceId: a.config.resourceId,
-            name: a.config.name,
-            type: a.config.type,
-            status: a.config.status,
-            description: a.config.description,
-            version: a.config.version
-          }))
-        });
-        return;
-      }
-      if (req.url === "/execute" && req.method === "POST") {
-        const body = JSON.parse(await readBody(req));
-        const { resourceId, executionId, input } = body;
-        const workflow = workflows.get(resourceId);
-        if (workflow) {
-          const controller = new AbortController();
-          controllers.set(executionId, controller);
-          const deadline = req.headers["x-elevasis-deadline"];
-          const timer = deadline ? setTimeout(() => controller.abort(), Number(deadline) - Date.now()) : void 0;
-          const context = {
-            executionId,
-            organizationId: "",
-            organizationName: "",
-            resourceId,
-            executionDepth: 0,
-            store: /* @__PURE__ */ new Map(),
-            signal: controller.signal,
-            logger: {
-              debug: (msg) => console.log(`[debug] ${msg}`),
-              info: (msg) => console.log(`[info] ${msg}`),
-              warn: (msg) => console.warn(`[warn] ${msg}`),
-              error: (msg) => console.error(`[error] ${msg}`)
-            }
-          };
-          try {
-            const { result: output, logs } = await withLogCapture(
-              () => executeWorkflow(workflow, input, context)
-            );
-            json(res, 200, { status: "completed", output, logs });
-          } catch (err) {
-            const { logs } = await withLogCapture(async () => {
-            });
-            json(res, 500, { status: "failed", error: String(err), logs });
-          } finally {
-            controllers.delete(executionId);
-            if (timer) clearTimeout(timer);
-          }
-          return;
-        }
-        const agent = agents.get(resourceId);
-        if (agent) {
-          json(res, 501, {
-            status: "failed",
-            error: `Agent execution is not supported in SDK server v0.3.0. Resource '${resourceId}' is an agent.`,
-            logs: []
-          });
-          return;
-        }
-        json(res, 404, { error: `Resource not found: ${resourceId}` });
-        return;
-      }
-      if (req.url === "/cancel" && req.method === "POST") {
-        const body = JSON.parse(await readBody(req));
-        const { executionId } = body;
-        const controller = controllers.get(executionId);
-        if (controller) {
-          controller.abort();
-          controllers.delete(executionId);
-          json(res, 200, { cancelled: true });
-        } else {
-          json(res, 404, { error: `No running execution: ${executionId}` });
-        }
-        return;
-      }
-      res.writeHead(404).end();
-    } catch (err) {
-      console.error("Unhandled server error:", err);
-      if (!res.headersSent) {
-        json(res, 500, { error: "Internal server error" });
-      }
-    }
-  });
-  server.listen(port, () => {
-    console.log(`Elevasis SDK server listening on port ${port}`);
-  });
-}
-
-export { startServer };