@elizaos/plugin-workflow 2.0.0-beta.1 → 2.0.3-beta.5

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shaw Walters and elizaOS Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -2,8 +2,6 @@
 
 In-process workflow engine for elizaOS agents. Generate and deploy automation workflows from natural language using a RAG pipeline. The plugin embeds its own execution engine — workflows run in the agent process, no separate sidecar.
 
-Built on shared workflow type contracts from `@elizaos/workflows`. Supports the bundled node catalog used by the in-process runtime for routing decisions, with intelligent credential resolution and lifecycle management.
-
 ## Configuration
 
 No workflow-specific env vars are required. The plugin's `EmbeddedWorkflowService` runs CRUD + execution + scheduler + webhook handling locally inside the agent, persisted to the agent's Postgres schema.
@@ -14,13 +12,13 @@ No workflow-specific env vars are required. The plugin's `EmbeddedWorkflowServic
 |---|---|
 | `EmbeddedWorkflowService` | In-process workflow execution engine (CRUD + node runtime + scheduler + webhooks). |
 | `WorkflowService` | Public service surface used by the agent's `WORKFLOW` umbrella action. Routes to the embedded workflows engine. |
-| `WorkflowCredentialStore` | Stores workflow-scoped credentials (encrypted at rest). |
-| `workflowStatusProvider` | Exposes engine status to the planner. |
-| `activeWorkflowsProvider` | Lists active workflows for context. |
-| `pendingDraftProvider` | Surfaces an in-progress draft so the agent can clarify before persisting. |
-| Routes | Mounted at `/api/workflow/*` on the agent's HTTP server. |
+| `WorkflowCredentialStore` | DB-backed `(userId, credType) → credential ID` mappings (service type `workflow_credential_store`). |
+| `workflowStatusProvider` | `workflow_status` provider — per-user workflows with last execution status. |
+| `activeWorkflowsProvider` | `ACTIVE_WORKFLOWS` provider — active/inactive workflows for LLM context. |
+| `pendingDraftProvider` | `PENDING_WORKFLOW_DRAFT` provider — surfaces an in-flight draft so the agent can clarify before persisting. |
+| Routes | `/api/workflow/*` (rawPath) plus plugin-name-prefixed `/workflow/*` (see Routes below). |
 
-The `WORKFLOW` umbrella action lives in `@elizaos/agent` and dispatches op-based commands (`create`, `update`, `activate`, `run`, `delete`, …) to this plugin's services.
+The `WORKFLOW` umbrella action is defined in this plugin (`src/actions/workflow.ts`) and dispatches op-based commands (`create`, `modify`, `activate`, `deactivate`, `toggle_active`, `delete`, `executions`) to this plugin's services.
 
 ## RAG Pipeline (workflow generation from natural language)
 
@@ -33,26 +31,33 @@ The `WORKFLOW` umbrella action lives in `@elizaos/agent` and dispatches op-based
 
 ## Credential Resolution
 
-Credentials are resolved at workflow-execution time. The plugin checks:
-1. Plugin-level `workflows.credentials` config map (deterministic).
-2. Cached secrets via the agent's secret service.
-3. Stored credentials via `WorkflowCredentialStore`.
-4. LLM-driven `request_credential` resolution (prompts the user).
+Credentials are resolved per credential type at deploy/execution time. The chain (first match wins, see `src/utils/credentialResolver.ts`):
+1. Credential store DB — cached `(userId, credType) → credentialId` mappings via `WorkflowCredentialStore`.
+2. Static config — `character.settings.workflows.credentials`.
+3. External provider — a registered `CredentialProvider` service (e.g. cloud OAuth); newly resolved IDs are written back to the store.
+4. Otherwise the credType is reported as a missing connection for manual configuration.
 
 ## Routes
 
-All routes mount at `/api/workflow/`:
+Two registration paths produce two URL shapes.
+
+The `rawPath` route plugin (`src/plugin-routes.ts`, registered via `registerAppRoutePluginLoader`) mounts at `/api/workflow/*`:
 
 - `GET    /api/workflow/status` — engine + plugin status
-- `GET    /api/workflow/workflows` — list
-- `POST   /api/workflow/workflows` — create
-- `GET    /api/workflow/workflows/:id`
-- `PUT    /api/workflow/workflows/:id`
-- `DELETE /api/workflow/workflows/:id`
-- `POST   /api/workflow/workflows/:id/run` — trigger execution
-- `GET    /api/workflow/executions/:id` — execution status / result
-- `POST   /api/workflow/executions/:id/cancel`
-- Webhook endpoints for trigger nodes are exposed dynamically per workflow.
+- `GET/POST /api/workflow/workflows` — list / create
+- `POST   /api/workflow/workflows/generate` — generate a draft from a prompt
+- `POST   /api/workflow/workflows/resolve-clarification`
+- `GET/PUT/DELETE /api/workflow/workflows/:id`
+- `POST   /api/workflow/workflows/:id/activate` · `/deactivate`
+- `GET    /api/workflow/workflows/:id/executions`
+- `GET    /api/automations` — combined workflows + triggers + tasks + draft conversations
+
+The standard plugin `routes` (`src/routes/index.ts`) are mounted under the plugin-name prefix `/workflow/*` by the runtime:
+
+- `GET    /workflow/executions` · `/workflow/executions/:id` — list (workflowId/status/limit/cursor) + detail
+- `GET    /workflow/nodes` · `/workflow/nodes/available` · `/workflow/nodes/:type`
+- `POST   /workflow/workflows/validate`
+- `GET/POST/PUT/PATCH/DELETE /workflow/webhooks/:path` — trigger-node webhooks
 
 ## Development
 
@@ -66,6 +71,3 @@ bun run lint
 
 Lint/format is [Biome 2.x](https://biomejs.dev). TypeScript 6+. ESM only.
 
-## License
-
-MIT.

package/dist/actions/eval-code.d.ts

@@ -0,0 +1,12 @@
+/**
+ * EVAL_CODE — run a snippet of JavaScript in the isolated QuickJS sandbox and
+ * return its result (#8914).
+ *
+ * Reuses the same sandbox the workflow Code node uses (`evalQuickJsCode`): a
+ * throwaway QuickJS VM with a 5s deadline, a 32 MiB memory cap, and no host /
+ * network / filesystem access. Owner-gated (`minRole: OWNER`) since it executes
+ * caller-supplied code, even though that code can't escape the sandbox.
+ */
+import type { Action } from '@elizaos/core';
+export declare const evalCodeAction: Action;
+//# sourceMappingURL=eval-code.d.ts.map

package/dist/actions/eval-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-code.d.ts","sourceRoot":"","sources":["../../src/actions/eval-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,MAAM,EAOP,MAAM,eAAe,CAAC;AAwBvB,eAAO,MAAM,cAAc,EAAE,MAsC5B,CAAC"}

package/dist/actions/eval-code.js

@@ -0,0 +1,59 @@
+/**
+ * EVAL_CODE — run a snippet of JavaScript in the isolated QuickJS sandbox and
+ * return its result (#8914).
+ *
+ * Reuses the same sandbox the workflow Code node uses (`evalQuickJsCode`): a
+ * throwaway QuickJS VM with a 5s deadline, a 32 MiB memory cap, and no host /
+ * network / filesystem access. Owner-gated (`minRole: OWNER`) since it executes
+ * caller-supplied code, even though that code can't escape the sandbox.
+ */
+import { evalQuickJsCode } from '../services/embedded-workflow-service';
+const EVAL_CODE_CONTEXTS = ['automation', 'tasks', 'agent_internal'];
+function previewResult(value) {
+    try {
+        if (value === undefined)
+            return 'undefined';
+        const json = JSON.stringify(value);
+        return typeof json === 'string' ? json : String(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+export const evalCodeAction = {
+    name: 'EVAL_CODE',
+    contexts: [...EVAL_CODE_CONTEXTS],
+    contextGate: { anyOf: [...EVAL_CODE_CONTEXTS] },
+    roleGate: { minRole: 'OWNER' },
+    similes: ['RUN_CODE', 'EVALUATE_CODE', 'EXEC_JS', 'RUN_JS', 'EVAL_JS'],
+    description: 'Run a snippet of JavaScript in an isolated QuickJS sandbox (5s deadline, ' +
+        '32MiB cap, no network/fs/host access) and return its result. Provide a ' +
+        '`jsCode` parameter; the body runs inside a function, so `return <value>` ' +
+        'produces the output. Optional `inputJson` is exposed as `$json`.',
+    validate: async () => true,
+    handler: async (_runtime, _message, _state, options, callback) => {
+        const params = (options?.parameters ?? {});
+        const jsCode = (params.jsCode ?? params.code ?? '').trim();
+        if (!jsCode) {
+            const text = 'EVAL_CODE requires a `jsCode` parameter (the JavaScript to run).';
+            if (callback)
+                await callback({ text });
+            return { success: false, text };
+        }
+        try {
+            const result = await evalQuickJsCode(jsCode, params.inputJson);
+            const text = previewResult(result);
+            if (callback)
+                await callback({ text });
+            return { success: true, text };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            const text = `EVAL_CODE failed: ${message}`;
+            if (callback)
+                await callback({ text });
+            return { success: false, text };
+        }
+    },
+};
+//# sourceMappingURL=eval-code.js.map

package/dist/actions/eval-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-code.js","sourceRoot":"","sources":["../../src/actions/eval-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAExE,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAWrE,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAW;IACpC,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,CAAC,GAAG,kBAAkB,CAAC;IACjC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,kBAAkB,CAAC,EAAE;IAC/C,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;IAC9B,OAAO,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;IACtE,WAAW,EACT,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,kEAAkE;IACpE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;IAC1B,OAAO,EAAE,KAAK,EACZ,QAAuB,EACvB,QAAgB,EAChB,MAAc,EACd,OAAwB,EACxB,QAA0B,EACH,EAAE;QACzB,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAuB,CAAC;QACjE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,kEAAkE,CAAC;YAChF,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,qBAAqB,OAAO,EAAE,CAAC;YAC5C,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/actions/index.d.ts

@@ -1,2 +1,3 @@
+export { evalCodeAction } from './eval-code';
 export { workflowAction } from './workflow';
 //# sourceMappingURL=index.d.ts.map

package/dist/actions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/actions/index.js

@@ -1,2 +1,3 @@
+export { evalCodeAction } from './eval-code';
 export { workflowAction } from './workflow';
 //# sourceMappingURL=index.js.map

package/dist/actions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/actions/workflow.d.ts

@@ -2,13 +2,20 @@
  * WORKFLOW — single umbrella action for workflow lifecycle ops.
  *
  * Action-based dispatch (provide `action` parameter):
+ *   list          — list deployed workflows for the current user
+ *   get           — fetch one deployed workflow definition by id
  *   create        — generate + deploy a new workflow from a seed prompt
  *   modify        — load a deployed workflow into the draft editor by id
  *   activate      — activate a workflow by id
  *   deactivate    — deactivate a workflow by id
  *   toggle_active — explicit active=true|false (preferred when scripting)
  *   delete        — permanently delete a workflow by id
+ *   run           — run a workflow immediately
  *   executions    — fetch recent executions for a workflow id
+ *   revisions     — fetch restorable workflow versions
+ *   restore       — restore a workflow by version id
+ *   diagnose      — inspect a failed/recent workflow execution
+ *   eval_samples  — generate JSONL evaluation samples from recent executions
  *
  * All actions talk to the in-process `WorkflowService` via
  * `runtime.getService(WORKFLOW_SERVICE_TYPE)`. There is no HTTP boundary.

package/dist/actions/workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/actions/workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,KAAK,MAAM,EAQZ,MAAM,eAAe,CAAC;AAsSvB,eAAO,MAAM,cAAc,EAAE,MAyK5B,CAAC"}
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/actions/workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACL,KAAK,MAAM,EAQZ,MAAM,eAAe,CAAC;AAwqBvB,eAAO,MAAM,cAAc,EAAE,MA4R5B,CAAC"}