@exaudeus/workrail 0.0.12 → 0.0.13

package/dist/infrastructure/storage/plugin-workflow-storage.js

@@ -0,0 +1,319 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLUGIN_WORKFLOW_CONFIGS = exports.PluginWorkflowStorage = void 0;
+const tslib_1 = require("tslib");
+const path_1 = tslib_1.__importDefault(require("path"));
+const promises_1 = tslib_1.__importDefault(require("fs/promises"));
+const fs_1 = require("fs");
+const storage_security_1 = require("../../utils/storage-security");
+const error_handler_1 = require("../../core/error-handler");
+/**
+ * Plugin-based workflow storage that loads workflows from npm packages
+ * Workflows are distributed as npm packages with a specific structure
+ *
+ * Security features:
+ * - Path traversal prevention
+ * - File size limits
+ * - Plugin count limits
+ * - Safe package.json parsing
+ *
+ * Example package structure:
+ * ```
+ * my-workflow-pack/
+ *   ├── package.json
+ *   ├── index.js
+ *   └── workflows/
+ *       ├── my-workflow-1.json
+ *       └── my-workflow-2.json
+ * ```
+ */
+class PluginWorkflowStorage {
+    config;
+    pluginCache = new Map();
+    lastScan = 0;
+    constructor(config = {}) {
+        this.config = this.validateAndNormalizeConfig(config);
+    }
+    validateAndNormalizeConfig(config) {
+        const securityOptions = (0, storage_security_1.validateSecurityOptions)({
+            maxFileSizeBytes: config.maxFileSize || 1024 * 1024 // 1MB default
+        });
+        const pluginPaths = (config.pluginPaths && config.pluginPaths.length > 0)
+            ? config.pluginPaths
+            : this.getDefaultPluginPaths();
+        // Validate all plugin paths are safe
+        for (const pluginPath of pluginPaths) {
+            try {
+                // Ensure plugin paths are within reasonable bounds
+                if (path_1.default.isAbsolute(pluginPath)) {
+                    (0, storage_security_1.assertWithinBase)(pluginPath, '/'); // Basic sanity check for absolute paths
+                }
+            }
+            catch (error) {
+                throw new error_handler_1.SecurityError(`Unsafe plugin path: ${pluginPath}: ${error.message}`);
+            }
+        }
+        return {
+            pluginPaths,
+            scanInterval: Math.max(30000, config.scanInterval || 300000), // minimum 30 seconds
+            maxFileSize: securityOptions.maxFileSizeBytes,
+            maxFiles: Math.max(1, config.maxFiles || 50), // minimum 1 file
+            maxPlugins: Math.max(1, config.maxPlugins || 20) // maximum 20 plugins
+        };
+    }
+    getDefaultPluginPaths() {
+        const paths = [];
+        // Global npm modules
+        try {
+            const globalPath = require.resolve('npm').replace(/\/npm\/.*$/, '');
+            const globalNodeModules = path_1.default.join(globalPath, 'node_modules');
+            if ((0, fs_1.existsSync)(globalNodeModules)) {
+                paths.push(globalNodeModules);
+            }
+        }
+        catch {
+            // Fallback: try common global paths
+            const commonPaths = [
+                '/usr/local/lib/node_modules',
+                '/usr/lib/node_modules'
+            ];
+            for (const commonPath of commonPaths) {
+                if ((0, fs_1.existsSync)(commonPath)) {
+                    paths.push(commonPath);
+                }
+            }
+        }
+        // Local project
+        const localNodeModules = path_1.default.join(process.cwd(), 'node_modules');
+        if ((0, fs_1.existsSync)(localNodeModules)) {
+            paths.push(localNodeModules);
+        }
+        return paths;
+    }
+    async loadAllWorkflows() {
+        try {
+            await this.scanPlugins();
+            const workflows = [];
+            for (const plugin of this.pluginCache.values()) {
+                workflows.push(...plugin.workflows);
+            }
+            return workflows;
+        }
+        catch (error) {
+            if (error instanceof error_handler_1.StorageError || error instanceof error_handler_1.SecurityError || error instanceof error_handler_1.InvalidWorkflowError) {
+                throw error;
+            }
+            throw new error_handler_1.StorageError(`Failed to load plugin workflows: ${error.message}`);
+        }
+    }
+    async getWorkflowById(id) {
+        const sanitizedId = (0, storage_security_1.sanitizeId)(id);
+        const workflows = await this.loadAllWorkflows();
+        return workflows.find(w => w.id === sanitizedId) || null;
+    }
+    async listWorkflowSummaries() {
+        const workflows = await this.loadAllWorkflows();
+        return workflows.map(workflow => ({
+            id: workflow.id,
+            name: workflow.name,
+            description: workflow.description,
+            category: 'plugin',
+            version: workflow.version
+        }));
+    }
+    async save() {
+        throw new error_handler_1.StorageError('Plugin-based storage is read-only. Publish workflows as npm packages instead.');
+    }
+    async scanPlugins() {
+        const now = Date.now();
+        if (now - this.lastScan < this.config.scanInterval) {
+            return;
+        }
+        this.pluginCache.clear();
+        let pluginCount = 0;
+        for (const pluginPath of this.config.pluginPaths) {
+            if (!(0, fs_1.existsSync)(pluginPath)) {
+                continue;
+            }
+            try {
+                // Security: Ensure we're scanning within expected directory
+                (0, storage_security_1.assertWithinBase)(pluginPath, pluginPath);
+                const entries = await promises_1.default.readdir(pluginPath);
+                for (const entry of entries) {
+                    // Check plugin count limit
+                    if (pluginCount >= this.config.maxPlugins) {
+                        throw new error_handler_1.StorageError(`Too many plugins found (${pluginCount}), maximum allowed: ${this.config.maxPlugins}`);
+                    }
+                    if (this.isWorkflowPlugin(entry)) {
+                        const fullPath = path_1.default.join(pluginPath, entry);
+                        // Security: Ensure plugin path is within scan directory
+                        (0, storage_security_1.assertWithinBase)(fullPath, pluginPath);
+                        const plugin = await this.loadPlugin(fullPath);
+                        if (plugin) {
+                            this.pluginCache.set(plugin.name, plugin);
+                            pluginCount++;
+                        }
+                    }
+                }
+            }
+            catch (error) {
+                if (error instanceof error_handler_1.SecurityError || error instanceof error_handler_1.StorageError) {
+                    throw error;
+                }
+                throw new error_handler_1.StorageError(`Failed to scan plugin directory ${pluginPath}: ${error.message}`);
+            }
+        }
+        this.lastScan = now;
+    }
+    isWorkflowPlugin(entry) {
+        return entry.startsWith('workrail-workflows-') || entry.startsWith('@workrail/workflows-');
+    }
+    async loadPlugin(pluginPath) {
+        try {
+            // Security: Ensure plugin path is safe
+            (0, storage_security_1.assertWithinBase)(pluginPath, path_1.default.dirname(pluginPath));
+            const packageJsonPath = path_1.default.join(pluginPath, 'package.json');
+            if (!(0, fs_1.existsSync)(packageJsonPath)) {
+                return null;
+            }
+            // Security: Ensure package.json is within plugin directory
+            (0, storage_security_1.assertWithinBase)(packageJsonPath, pluginPath);
+            // Validate package.json size
+            const packageStats = await promises_1.default.stat(packageJsonPath);
+            (0, storage_security_1.validateFileSize)(packageStats.size, Math.min(this.config.maxFileSize, 64 * 1024), 'package.json'); // Max 64KB for package.json
+            const packageContent = await promises_1.default.readFile(packageJsonPath, 'utf-8');
+            let packageJson;
+            try {
+                packageJson = JSON.parse(packageContent);
+            }
+            catch (parseError) {
+                throw new error_handler_1.InvalidWorkflowError(pluginPath, `Invalid package.json: ${parseError.message}`);
+            }
+            // Validate it's a workflow plugin
+            if (!packageJson.workrail || !packageJson.workrail.workflows) {
+                return null;
+            }
+            // Validate package name
+            if (!packageJson.name || typeof packageJson.name !== 'string') {
+                throw new error_handler_1.InvalidWorkflowError(pluginPath, `Invalid package name`);
+            }
+            const workflowsPath = path_1.default.join(pluginPath, 'workflows');
+            if (!(0, fs_1.existsSync)(workflowsPath)) {
+                return null;
+            }
+            // Security: Ensure workflows directory is within plugin
+            (0, storage_security_1.assertWithinBase)(workflowsPath, pluginPath);
+            const workflows = await this.loadWorkflowsFromDirectory(workflowsPath);
+            return {
+                name: packageJson.name,
+                version: packageJson.version || '0.0.0',
+                workflows,
+                metadata: {
+                    author: packageJson.author,
+                    description: packageJson.description,
+                    homepage: packageJson.homepage,
+                    repository: packageJson.repository?.url || packageJson.repository
+                }
+            };
+        }
+        catch (error) {
+            if (error instanceof error_handler_1.SecurityError || error instanceof error_handler_1.InvalidWorkflowError) {
+                throw error;
+            }
+            throw new error_handler_1.StorageError(`Failed to load plugin from ${pluginPath}: ${error.message}`);
+        }
+    }
+    async loadWorkflowsFromDirectory(workflowsPath) {
+        const workflows = [];
+        try {
+            const files = await promises_1.default.readdir(workflowsPath);
+            const jsonFiles = files.filter(f => f.endsWith('.json'));
+            if (jsonFiles.length > this.config.maxFiles) {
+                throw new error_handler_1.StorageError(`Too many workflow files in ${workflowsPath} (${jsonFiles.length}), maximum allowed: ${this.config.maxFiles}`);
+            }
+            for (const file of jsonFiles) {
+                try {
+                    const filePath = path_1.default.join(workflowsPath, file);
+                    // Security: Ensure file is within workflows directory
+                    (0, storage_security_1.assertWithinBase)(filePath, workflowsPath);
+                    // Validate file size
+                    const stats = await promises_1.default.stat(filePath);
+                    (0, storage_security_1.validateFileSize)(stats.size, this.config.maxFileSize, file);
+                    const content = await promises_1.default.readFile(filePath, 'utf-8');
+                    let workflow;
+                    try {
+                        workflow = JSON.parse(content);
+                    }
+                    catch (parseError) {
+                        throw new error_handler_1.InvalidWorkflowError(file, `Invalid JSON in workflow file: ${parseError.message}`);
+                    }
+                    // Validate workflow ID
+                    const sanitizedId = (0, storage_security_1.sanitizeId)(workflow.id);
+                    if (workflow.id !== sanitizedId) {
+                        throw new error_handler_1.InvalidWorkflowError(workflow.id, `Invalid workflow ID in file ${file}`);
+                    }
+                    workflows.push(workflow);
+                }
+                catch (error) {
+                    if (error instanceof error_handler_1.SecurityError || error instanceof error_handler_1.InvalidWorkflowError) {
+                        throw error;
+                    }
+                    throw new error_handler_1.StorageError(`Failed to load workflow from ${file}: ${error.message}`);
+                }
+            }
+        }
+        catch (error) {
+            if (error instanceof error_handler_1.StorageError || error instanceof error_handler_1.SecurityError || error instanceof error_handler_1.InvalidWorkflowError) {
+                throw error;
+            }
+            throw new error_handler_1.StorageError(`Failed to read workflows directory ${workflowsPath}: ${error.message}`);
+        }
+        return workflows;
+    }
+    getLoadedPlugins() {
+        return Array.from(this.pluginCache.values());
+    }
+    getConfig() {
+        return { ...this.config };
+    }
+}
+exports.PluginWorkflowStorage = PluginWorkflowStorage;
+/**
+ * Example package.json for a workflow plugin:
+ *
+ * ```json
+ * {
+ *   "name": "workrail-workflows-ai-coding",
+ *   "version": "1.0.0",
+ *   "description": "AI-powered coding workflows for Workrail",
+ *   "main": "index.js",
+ *   "workrail": {
+ *     "workflows": true,
+ *     "category": "coding"
+ *   },
+ *   "keywords": ["workrail", "workflow", "ai", "coding"],
+ *   "author": "Your Name",
+ *   "license": "MIT"
+ * }
+ * ```
+ */
+/**
+ * Example configuration for different environments
+ */
+exports.PLUGIN_WORKFLOW_CONFIGS = {
+    // Development environment with relaxed limits
+    development: {
+        scanInterval: 60000, // 1 minute
+        maxFileSize: 2 * 1024 * 1024, // 2MB
+        maxFiles: 100,
+        maxPlugins: 50
+    },
+    // Production environment with strict limits
+    production: {
+        scanInterval: 300000, // 5 minutes
+        maxFileSize: 1024 * 1024, // 1MB
+        maxFiles: 50,
+        maxPlugins: 20
+    }
+};
+//# sourceMappingURL=plugin-workflow-storage.js.map

package/dist/infrastructure/storage/plugin-workflow-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-workflow-storage.js","sourceRoot":"","sources":["../../../src/infrastructure/storage/plugin-workflow-storage.ts"],"names":[],"mappings":";;;;AAEA,wDAAwB;AACxB,mEAA6B;AAC7B,2BAAgC;AAChC,mEAKsC;AACtC,4DAA6F;AA8B7F;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,qBAAqB;IACf,MAAM,CAAgC;IAC/C,WAAW,GAAgC,IAAI,GAAG,EAAE,CAAC;IACrD,QAAQ,GAAW,CAAC,CAAC;IAE7B,YAAY,SAA+B,EAAE;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,0BAA0B,CAAC,MAA4B;QAC7D,MAAM,eAAe,GAAG,IAAA,0CAAuB,EAAC;YAC9C,gBAAgB,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,GAAG,IAAI,CAAC,cAAc;SACnE,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,WAAW;YACpB,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEjC,qCAAqC;QACrC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,mDAAmD;gBACnD,IAAI,cAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChC,IAAA,mCAAgB,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,wCAAwC;gBAC7E,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,6BAAa,CAAC,uBAAuB,UAAU,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,OAAO;YACL,WAAW;YACX,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,EAAE,qBAAqB;YACnF,WAAW,EAAE,eAAe,CAAC,gBAAgB;YAC7C,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,iBAAiB;YAC/D,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,qBAAqB;SACvE,CAAC;IACJ,CAAC;IAEO,qBAAqB;QAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,qBAAqB;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACpE,MAAM,iBAAiB,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAChE,IAAI,IAAA,eAAU,EAAC,iBAAiB,CAAC,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;YACpC,MAAM,WAAW,GAAG;gBAClB,6BAA6B;gBAC7B,uBAAuB;aACxB,CAAC;YAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;oBAC3B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,gBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;QAClE,IAAI,IAAA,eAAU,EAAC,gBAAgB,CAAC,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAEzB,MAAM,SAAS,GAAe,EAAE,CAAC;YAEjC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/C,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,4BAAY,IAAI,KAAK,YAAY,6BAAa,IAAI,KAAK,YAAY,oCAAoB,EAAE,CAAC;gBAC7G,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,4BAAY,CAAC,oCAAqC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,EAAU;QAC9B,MAAM,WAAW,GAAG,IAAA,6BAAU,EAAC,EAAE,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChC,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,4BAAY,CAAC,+EAA+E,CAAC,CAAC;IAC1G,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,4DAA4D;gBAC5D,IAAA,mCAAgB,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAEzC,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAE7C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,2BAA2B;oBAC3B,IAAI,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;wBAC1C,MAAM,IAAI,4BAAY,CACpB,2BAA2B,WAAW,uBAAuB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CACtF,CAAC;oBACJ,CAAC;oBAED,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;wBACjC,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;wBAE9C,wDAAwD;wBACxD,IAAA,mCAAgB,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;wBAEvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;wBAE/C,IAAI,MAAM,EAAE,CAAC;4BACX,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;4BAC1C,WAAW,EAAE,CAAC;wBAChB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,6BAAa,IAAI,KAAK,YAAY,4BAAY,EAAE,CAAC;oBACpE,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,IAAI,4BAAY,CAAC,mCAAmC,UAAU,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;IACtB,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,OAAO,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC7F,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,UAAkB;QACzC,IAAI,CAAC;YACH,uCAAuC;YACvC,IAAA,mCAAgB,EAAC,UAAU,EAAE,cAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;YAEvD,MAAM,eAAe,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE9D,IAAI,CAAC,IAAA,eAAU,EAAC,eAAe,CAAC,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2DAA2D;YAC3D,IAAA,mCAAgB,EAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAE9C,6BAA6B;YAC7B,MAAM,YAAY,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpD,IAAA,mCAAgB,EAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,4BAA4B;YAE/H,MAAM,cAAc,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAEnE,IAAI,WAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,MAAM,IAAI,oCAAoB,CAAC,UAAU,EAAE,yBAA0B,UAAoB,CAAC,OAAO,EAAE,CAAC,CAAC;YACvG,CAAC;YAED,kCAAkC;YAClC,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,wBAAwB;YACxB,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9D,MAAM,IAAI,oCAAoB,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,aAAa,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,IAAA,eAAU,EAAC,aAAa,CAAC,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,wDAAwD;YACxD,IAAA,mCAAgB,EAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YAE5C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC;YAEvE,OAAO;gBACL,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,OAAO;gBACvC,SAAS;gBACT,QAAQ,EAAE;oBACR,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,WAAW,EAAE,WAAW,CAAC,WAAW;oBACpC,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,GAAG,IAAI,WAAW,CAAC,UAAU;iBAClE;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,6BAAa,IAAI,KAAK,YAAY,oCAAoB,EAAE,CAAC;gBAC5E,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,4BAAY,CAAC,8BAA8B,UAAU,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAC,aAAqB;QAC5D,MAAM,SAAS,GAAe,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAEzD,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAAY,CACpB,8BAA8B,aAAa,KAAK,SAAS,CAAC,MAAM,uBAAuB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAC9G,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;oBAEhD,sDAAsD;oBACtD,IAAA,mCAAgB,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;oBAE1C,qBAAqB;oBACrB,MAAM,KAAK,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAA,mCAAgB,EAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;oBAE5D,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAErD,IAAI,QAAkB,CAAC;oBACvB,IAAI,CAAC;wBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAa,CAAC;oBAC7C,CAAC;oBAAC,OAAO,UAAU,EAAE,CAAC;wBACpB,MAAM,IAAI,oCAAoB,CAAC,IAAI,EAAE,kCAAmC,UAAoB,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC1G,CAAC;oBAED,uBAAuB;oBACvB,MAAM,WAAW,GAAG,IAAA,6BAAU,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC5C,IAAI,QAAQ,CAAC,EAAE,KAAK,WAAW,EAAE,CAAC;wBAChC,MAAM,IAAI,oCAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE,+BAA+B,IAAI,EAAE,CAAC,CAAC;oBACrF,CAAC;oBAED,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,6BAAa,IAAI,KAAK,YAAY,oCAAoB,EAAE,CAAC;wBAC5E,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,MAAM,IAAI,4BAAY,CAAC,gCAAgC,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,4BAAY,IAAI,KAAK,YAAY,6BAAa,IAAI,KAAK,YAAY,oCAAoB,EAAE,CAAC;gBAC7G,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,4BAAY,CAAC,sCAAsC,aAAa,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7G,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEM,gBAAgB;QACrB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAEM,SAAS;QACd,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF;AA3SD,sDA2SC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;GAEG;AACU,QAAA,uBAAuB,GAAG;IACrC,8CAA8C;IAC9C,WAAW,EAAE;QACX,YAAY,EAAE,KAAK,EAAE,WAAW;QAChC,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,MAAM;QACpC,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,EAAE;KACf;IAED,4CAA4C;IAC5C,UAAU,EAAE;QACV,YAAY,EAAE,MAAM,EAAE,YAAY;QAClC,WAAW,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM;QAChC,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;KACf;CACF,CAAC"}

package/dist/infrastructure/storage/remote-workflow-storage.d.ts

@@ -0,0 +1,44 @@
+import { IWorkflowStorage } from '../../types/storage';
+import { Workflow, WorkflowSummary } from '../../types/mcp-types';
+import { StorageSecurityOptions } from '../../utils/storage-security';
+export interface RemoteWorkflowRegistryConfig extends StorageSecurityOptions {
+    baseUrl: string;
+    apiKey?: string;
+    timeout?: number;
+    retryAttempts?: number;
+    userAgent?: string;
+}
+/**
+ * Remote workflow storage that fetches workflows from a community registry.
+ * Implements security best practices and proper error handling.
+ * Similar to npm registry but for workflows.
+ */
+export declare class RemoteWorkflowStorage implements IWorkflowStorage {
+    private readonly config;
+    private readonly securityOptions;
+    constructor(config: RemoteWorkflowRegistryConfig);
+    private validateConfig;
+    loadAllWorkflows(): Promise<Workflow[]>;
+    getWorkflowById(id: string): Promise<Workflow | null>;
+    listWorkflowSummaries(): Promise<WorkflowSummary[]>;
+    save(workflow: Workflow): Promise<void>;
+    private fetchWithRetry;
+    private parseResponse;
+    private validateWorkflows;
+    private validateSummaries;
+    private validateWorkflowForSave;
+}
+/**
+ * Multi-source workflow storage that combines bundled, local, and remote workflows.
+ * Uses composition to cleanly separate concerns.
+ */
+export declare class CommunityWorkflowStorage implements IWorkflowStorage {
+    private readonly sources;
+    private readonly remoteStorage;
+    constructor(bundledStorage: IWorkflowStorage, localStorage: IWorkflowStorage, remoteConfig: RemoteWorkflowRegistryConfig);
+    loadAllWorkflows(): Promise<Workflow[]>;
+    getWorkflowById(id: string): Promise<Workflow | null>;
+    listWorkflowSummaries(): Promise<WorkflowSummary[]>;
+    save(workflow: Workflow): Promise<void>;
+}
+//# sourceMappingURL=remote-workflow-storage.d.ts.map

package/dist/infrastructure/storage/remote-workflow-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-workflow-storage.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/storage/remote-workflow-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAIL,sBAAsB,EACvB,MAAM,8BAA8B,CAAC;AAGtC,MAAM,WAAW,4BAA6B,SAAQ,sBAAsB;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAUD;;;;GAIG;AACH,qBAAa,qBAAsB,YAAW,gBAAgB;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmC;gBAEvD,MAAM,EAAE,4BAA4B;IAehD,OAAO,CAAC,cAAc;IAkBhB,gBAAgB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAqBvC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAwCrD,qBAAqB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAmBnD,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;YAkC/B,cAAc;YAwCd,aAAa;IAqB3B,OAAO,CAAC,iBAAiB;IA0BzB,OAAO,CAAC,iBAAiB;IAyBzB,OAAO,CAAC,uBAAuB;CAoBhC;AAED;;;GAGG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;gBAGpD,cAAc,EAAE,gBAAgB,EAChC,YAAY,EAAE,gBAAgB,EAC9B,YAAY,EAAE,4BAA4B;IAMtC,gBAAgB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAmCvC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAkCrD,qBAAqB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAYnD,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAI9C"}