@exaudeus/workrail 1.17.1 → 2.0.0

package/README.md

@@ -31,8 +31,8 @@ to conclusions.
 WorkRail replaces the human effort of guiding an agent step-by-step.
 
 Instead of one system prompt that fades over time, WorkRail drip-feeds instructions through
-the [Model Context Protocol](https://modelcontextprotocol.org). The agent calls `workflow_next`,
-gets ONE step, completes it, calls again. Future steps stay hidden until previous ones are done.
+the [Model Context Protocol](https://modelcontextprotocol.org). The agent calls `start_workflow`,
+gets the first step, completes it, calls `continue_workflow`. Future steps stay hidden until previous ones are done.
 
 **The agent can't skip to implementation because it doesn't know those steps exist yet.**
 
@@ -44,7 +44,7 @@ You                      Agent                     WorkRail
  │  "Fix the auth bug"     │                          │
  │────────────────────────>│                          │
  │                         │                          │
- │                         │  workflow_next()         │
+ │                         │  start_workflow()        │
  │                         │─────────────────────────>│
  │                         │                          │
  │                         │   Step 1: Understand     │
@@ -55,7 +55,7 @@ You                      Agent                     WorkRail
  │    see exactly?"        │                          │
  │<────────────────────────│                          │
  │                         │                          │
- │         ...             │  workflow_next()         │
+ │         ...             │  continue_workflow()     │
  │                         │─────────────────────────>│
  │                         │                          │
  │                         │   Step 2: Plan your      │
@@ -81,21 +81,21 @@ Agent: "I see the issue! In auth.js line 42, there's a null check that
 You:   "There's a bug in the auth flow"
 
 Agent: "I'll use the bug-investigation workflow."
-        → workflow_next()
+        → start_workflow()
        
        Step 1: Investigation Setup
        "Before I investigate, I need to understand the problem.
         What exactly happens when it fails? Can you share the error?"
        
        [Documents bug, reproduction steps, environment]
-        → workflow_next()
+        → continue_workflow()
        
        Step 2: Plan Investigation
        "I'll trace execution from login through the auth middleware.
         Key areas: token validation, session lookup, error handling."
        
        [Creates investigation plan before touching code]
-        → workflow_next()
+        → continue_workflow()
        
        Step 3: Form Hypotheses
        "Based on my analysis, three possible causes:
@@ -164,13 +164,13 @@ The agent will find the workflow, start at step 1, and proceed systematically.
 
 ## Included Workflows
 
-20+ workflows included for development, debugging, review, documentation, and more:
+30+ workflows included for development, debugging, review, documentation, and more:
 
 | Workflow | When to Use |
 |----------|-------------|
-| `coding-task-workflow-with-loops` | Feature development with analysis, planning, and review |
-| `bug-investigation` | Systematic debugging with hypothesis testing |
-| `mr-review-workflow` | Code review with architecture and security checks |
+| `coding-task-workflow-agentic` | Feature development with notes-first durability and audit loops |
+| `bug-investigation-agentic` | Systematic debugging with evidence-based analysis |
+| `mr-review-workflow-agentic` | Code review with parallel reviewer families |
 | `exploration-workflow` | Understanding an unfamiliar codebase |
 | `document-creation-workflow` | Technical documentation with structure |
 

package/dist/config/feature-flags.js

@@ -56,10 +56,10 @@ exports.FEATURE_FLAG_DEFINITIONS = [
     {
         key: 'v2Tools',
         envVar: 'WORKRAIL_ENABLE_V2_TOOLS',
-        defaultValue: false,
-        description: 'Enable WorkRail v2 MCP tools and .v2.json workflow overrides behind an explicit opt-in flag',
+        defaultValue: true,
+        description: 'WorkRail v2 MCP tools (list_workflows, start_workflow, continue_workflow, checkpoint_workflow, resume_session) and .v2.json workflow overrides',
         since: '0.9.0',
-        stable: false,
+        stable: true,
     },
 ];
 function parseBoolean(value, defaultValue) {

package/dist/manifest.json

@@ -326,8 +326,8 @@
       "bytes": 1512
     },
     "config/feature-flags.js": {
-      "sha256": "c7c5a4db2a0d5f86a9cf91c9a7e2c74f89ce7f1012b93c8237a3d70a783d2b45",
-      "bytes": 6908
+      "sha256": "d8a709e0814b4d9bd9565b795c7b932fbab1d86762b437f7ed64be8e97a99598",
+      "bytes": 6957
     },
     "core/error-handler.d.ts": {
       "sha256": "80451f12ac8e185133ec3dc4c57285491a785f27525ed21e729db1da3f61010d",
@@ -770,12 +770,12 @@
       "bytes": 12661
     },
     "mcp/handlers/v2-execution/start.d.ts": {
-      "sha256": "333f9f36756d2ce55249c6af45198a17b51aa9c6448e063f7621fcd61879f2bf",
-      "bytes": 2684
+      "sha256": "ec0a9cbe95eba29cbf4f66c7fbacd10209b451e9e0a3e15bf92cbc751ef5b0c2",
+      "bytes": 2868
     },
     "mcp/handlers/v2-execution/start.js": {
-      "sha256": "0c6800d22f93a36b45236d17993b445de131e00a72eac8dbd98e2f4d8d9f2b29",
-      "bytes": 15208
+      "sha256": "fa724a733b2f249bcd9300d79f4f5d20fa155f005a2d9837f16f50b44bfd106c",
+      "bytes": 16250
     },
     "mcp/handlers/v2-resume.d.ts": {
       "sha256": "d88f6c35bcaf946666c837b72fda3702a2ebab5e478eb90f7b4b672a0e5fa24f",
@@ -846,8 +846,8 @@
       "bytes": 882
     },
     "mcp/server.js": {
-      "sha256": "5086b482d2eb3c42caac637282a5361b4db6e5d14aaeeb7c5ffdf75d211af0d8",
-      "bytes": 13422
+      "sha256": "c07f8a6e8f89f7620a063673859dcc458212b068237949acff253f15856afd5f",
+      "bytes": 14174
     },
     "mcp/tool-description-provider.d.ts": {
       "sha256": "1d46abc3112e11b68e57197e846f5708293ec9b2281fa71a9124ee2aad71e41b",
@@ -914,8 +914,8 @@
       "bytes": 747
     },
     "mcp/types.d.ts": {
-      "sha256": "2ef7f9c1bffbe365b06469dfad43b45c4ae3b5292dd269b33423bf1c8c9c7c43",
-      "bytes": 4355
+      "sha256": "d61a7d2b9a5f389d9fbf0092f6d38c3e6bb2925f41dce0270ed0c2e54ca856c9",
+      "bytes": 4533
     },
     "mcp/types.js": {
       "sha256": "d10c4070e4c3454d80f0fa9cdc0e978c69c53c13fd09baa8710fcd802fed8926",

package/dist/mcp/handlers/v2-execution/start.d.ts

@@ -6,6 +6,7 @@ import { type SessionId, type RunId, type NodeId, type WorkflowHash } from '../.
 import type { Sha256PortV2 } from '../../../v2/ports/sha256.port.js';
 import type { TokenCodecPorts } from '../../../v2/durable-core/tokens/token-codec-ports.js';
 import { ResultAsync as RA } from 'neverthrow';
+import { type ValidationPipelineDepsPhase1a } from '../../../application/services/workflow-validation-pipeline.js';
 import { type ObservationEventData } from '../../../v2/durable-core/domain/observation-builder.js';
 import { type StartWorkflowError } from '../v2-execution-helpers.js';
 import * as z from 'zod';
@@ -14,6 +15,7 @@ export declare function loadAndPinWorkflow(args: {
     readonly workflowService: import('../../../application/services/workflow-service.js').WorkflowService;
     readonly crypto: Sha256PortV2;
     readonly pinnedStore: import('../../../v2/ports/pinned-workflow-store.port.js').PinnedWorkflowStorePortV2;
+    readonly validationPipelineDeps: ValidationPipelineDepsPhase1a;
 }): RA<{
     readonly workflow: import('../../../types/workflow.js').Workflow;
     readonly workflowHash: WorkflowHash;

package/dist/mcp/handlers/v2-execution/start.js

@@ -10,7 +10,7 @@ const workflow_js_1 = require("../../../types/workflow.js");
 const index_js_1 = require("../../../v2/durable-core/ids/index.js");
 const workflow_hash_ref_js_1 = require("../../../v2/durable-core/ids/workflow-hash-ref.js");
 const neverthrow_1 = require("neverthrow");
-const v1_to_v2_shim_js_1 = require("../../../v2/read-only/v1-to-v2-shim.js");
+const workflow_validation_pipeline_js_1 = require("../../../application/services/workflow-validation-pipeline.js");
 const hashing_js_1 = require("../../../v2/durable-core/canonical/hashing.js");
 const observation_builder_js_1 = require("../../../v2/durable-core/domain/observation-builder.js");
 const workflow_source_js_1 = require("../../../types/workflow-source.js");
@@ -24,7 +24,7 @@ const constants_js_1 = require("../../../v2/durable-core/constants.js");
 const index_js_2 = require("./index.js");
 const start_construction_js_1 = require("../../../v2/durable-core/domain/start-construction.js");
 function loadAndPinWorkflow(args) {
-    const { workflowId, workflowService, crypto, pinnedStore } = args;
+    const { workflowId, workflowService, crypto, pinnedStore, validationPipelineDeps } = args;
     return neverthrow_1.ResultAsync.fromPromise(workflowService.getWorkflowById(workflowId), (e) => ({
         kind: 'precondition_failed',
         message: e instanceof Error ? e.message : String(e),
@@ -39,14 +39,25 @@ function loadAndPinWorkflow(args) {
         return (0, neverthrow_1.okAsync)({ workflow });
     })
         .andThen(({ workflow }) => {
-        const normalizeResult = (0, v1_to_v2_shim_js_1.normalizeV1WorkflowToPinnedSnapshot)(workflow);
-        if (normalizeResult.isErr()) {
+        const pipelineOutcome = (0, workflow_validation_pipeline_js_1.validateWorkflowPhase1a)(workflow, validationPipelineDeps);
+        if (pipelineOutcome.kind !== 'phase1a_valid') {
+            const message = pipelineOutcome.kind === 'schema_failed'
+                ? `Schema validation failed: ${pipelineOutcome.errors.map(e => e.message ?? e.instancePath).join('; ')}`
+                : pipelineOutcome.kind === 'structural_failed'
+                    ? `Structural validation failed: ${pipelineOutcome.issues.join('; ')}`
+                    : pipelineOutcome.kind === 'v1_compilation_failed'
+                        ? `Compilation failed: ${pipelineOutcome.cause.message}`
+                        : pipelineOutcome.kind === 'normalization_failed'
+                            ? `Normalization failed: ${pipelineOutcome.cause.message}`
+                            : pipelineOutcome.kind === 'executable_compilation_failed'
+                                ? `Executable compilation failed: ${pipelineOutcome.cause.message}`
+                                : 'Unknown validation failure';
             return (0, neverthrow_1.errAsync)({
                 kind: 'workflow_compile_failed',
-                message: normalizeResult.error.message,
+                message,
             });
         }
-        const compiled = normalizeResult.value;
+        const compiled = pipelineOutcome.snapshot;
         const workflowHashRes = (0, hashing_js_1.workflowHashForCompiledSnapshot)(compiled, crypto);
         if (workflowHashRes.isErr()) {
             return (0, neverthrow_1.errAsync)({ kind: 'hash_computation_failed', message: workflowHashRes.error.message });
@@ -215,12 +226,13 @@ function mintStartTokens(args) {
     });
 }
 function executeStartWorkflow(input, ctx) {
-    const { gate, sessionStore, snapshotStore, pinnedStore, crypto, tokenCodecPorts, idFactory } = ctx.v2;
+    const { gate, sessionStore, snapshotStore, pinnedStore, crypto, tokenCodecPorts, idFactory, validationPipelineDeps } = ctx.v2;
     return loadAndPinWorkflow({
         workflowId: input.workflowId,
         workflowService: ctx.workflowService,
         crypto,
         pinnedStore,
+        validationPipelineDeps,
     })
         .andThen(({ workflow, firstStep, workflowHash, pinnedWorkflow }) => {
         const anchorsRA = (0, v2_workspace_resolution_js_1.resolveWorkspaceAnchors)(ctx.v2, input.workspacePath)

package/dist/mcp/server.js

@@ -41,6 +41,8 @@ const container_js_1 = require("../di/container.js");
 const tokens_js_1 = require("../di/tokens.js");
 const assert_never_js_1 = require("../runtime/assert-never.js");
 const token_codec_ports_js_1 = require("../v2/durable-core/tokens/token-codec-ports.js");
+const validation_js_1 = require("../application/validation.js");
+const v1_to_v2_shim_js_1 = require("../v2/read-only/v1-to-v2-shim.js");
 const index_js_1 = require("../v2/infra/local/workspace-anchor/index.js");
 const workspace_roots_manager_js_1 = require("./workspace-roots-manager.js");
 const index_js_2 = require("../v2/infra/local/directory-listing/index.js");
@@ -94,6 +96,14 @@ async function createToolContext() {
             const dataDir = container_js_1.container.resolve(tokens_js_1.DI.V2.DataDir);
             const fsPort = container_js_1.container.resolve(tokens_js_1.DI.V2.FileSystem);
             const directoryListing = new index_js_2.LocalDirectoryListingV2(fsPort);
+            const validationEngine = container_js_1.container.resolve(tokens_js_1.DI.Infra.ValidationEngine);
+            const compiler = container_js_1.container.resolve(tokens_js_1.DI.Services.WorkflowCompiler);
+            const validationPipelineDeps = {
+                schemaValidate: validation_js_1.validateWorkflowSchema,
+                structuralValidate: validationEngine.validateWorkflowStructureOnly.bind(validationEngine),
+                compiler,
+                normalizeToExecutable: v1_to_v2_shim_js_1.normalizeV1WorkflowToPinnedSnapshot,
+            };
             v2 = {
                 gate,
                 sessionStore,
@@ -103,6 +113,7 @@ async function createToolContext() {
                 crypto,
                 idFactory,
                 tokenCodecPorts,
+                validationPipelineDeps,
                 resolvedRootUris: [],
                 workspaceResolver: new index_js_1.LocalWorkspaceAnchorV2(process.cwd()),
                 dataDir,

package/dist/mcp/types.d.ts

@@ -16,6 +16,7 @@ import type { WorkspaceContextResolverPortV2 } from '../v2/ports/workspace-ancho
 import type { DataDirPortV2 } from '../v2/ports/data-dir.port.js';
 import type { DirectoryListingPortV2 } from '../v2/ports/directory-listing.port.js';
 import type { SessionSummaryProviderPortV2 } from '../v2/ports/session-summary-provider.port.js';
+import type { ValidationPipelineDepsPhase1a } from '../application/services/workflow-validation-pipeline.js';
 export interface SessionHealthDetails {
     readonly health: SessionHealthV2;
 }
@@ -55,6 +56,7 @@ export interface V2Dependencies {
     readonly crypto: CryptoPortV2;
     readonly idFactory: IdFactoryV2;
     readonly tokenCodecPorts: TokenCodecPorts;
+    readonly validationPipelineDeps: ValidationPipelineDepsPhase1a;
     readonly resolvedRootUris?: readonly string[];
     readonly workspaceResolver?: WorkspaceContextResolverPortV2;
     readonly dataDir?: DataDirPortV2;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exaudeus/workrail",
-  "version": "1.17.1",
+  "version": "2.0.0",
   "description": "Step-by-step workflow enforcement for AI agents via MCP",
   "license": "MIT",
   "repository": {