@exulu/backend 1.10.0 → 1.12.0

package/dist/index.cjs

@@ -44,7 +44,6 @@ __export(index_exports, {
   ExuluQueues: () => queues,
   ExuluSource: () => ExuluSource,
   ExuluTool: () => ExuluTool,
-  ExuluWorkflow: () => ExuluWorkflow,
   ExuluZodFileType: () => ExuluZodFileType,
   db: () => db2
 });
@@ -367,17 +366,6 @@ var sanitizeName = (name) => {
   return name.toLowerCase().replace(/ /g, "_");
 };
 
-// types/enums/jobs.ts
-var JOB_STATUS_ENUM = {
-  completed: "completed",
-  failed: "failed",
-  delayed: "delayed",
-  active: "active",
-  waiting: "waiting",
-  paused: "paused",
-  stuck: "stuck"
-};
-
 // src/evals/utils/index.tsx
 var ExuluEvalUtils = {
   niahTestSet: ({
@@ -752,116 +740,6 @@ var ExuluEmbedder = class {
     return await this.generateEmbeddings(output);
   }
 };
-var ExuluWorkflow = class {
-  id;
-  name;
-  description = "";
-  enable_batch = false;
-  slug = "";
-  queue;
-  steps;
-  constructor({ id, name, description, steps, queue, enable_batch }) {
-    this.id = id;
-    this.name = name;
-    this.description = description;
-    this.enable_batch = enable_batch;
-    this.slug = `/workflows/${generateSlug(this.name)}/run`;
-    this.queue = queue;
-    this.steps = steps;
-  }
-  start = async ({
-    inputs: initialInputs,
-    user,
-    logger,
-    job,
-    session,
-    agent,
-    label
-  }) => {
-    let inputs;
-    const { db: db3 } = await postgresClient();
-    if (!job?.id) {
-      logger.write(`Creating new job for workflow ${this.name} with inputs: ${JSON.stringify(initialInputs)}`, "INFO");
-      const result = await db3("jobs").insert({
-        status: JOB_STATUS_ENUM.active,
-        name: `Job running '${this.name}' for '${label}'`,
-        agent,
-        workflow: this.id,
-        type: "workflow",
-        steps: this.steps?.length || 0,
-        inputs: initialInputs,
-        session,
-        user
-      }).returning(["id", "status"]);
-      job = result[0];
-      logger.write(`Created new job for workflow ${this.name}, job id: ${job?.id}`, "INFO");
-    }
-    if (!job) {
-      throw new Error("Job not found, or failed to be created.");
-    }
-    if (job.status !== JOB_STATUS_ENUM.active) {
-      await db3("jobs").update({
-        status: JOB_STATUS_ENUM.active,
-        inputs: initialInputs
-      }).where({ id: job?.id }).returning("id");
-    }
-    const runStep = async (step, inputs2) => {
-      let result;
-      try {
-        result = await step.fn({
-          inputs: inputs2,
-          logger,
-          job,
-          user
-        });
-        return result;
-      } catch (error) {
-        logger.write(`Step ${step.name} failed with error: ${error.message}`, "ERROR");
-        if (step.retries && step.retries > 0) {
-          logger.write(`Retrying step ${step.name} with ${step.retries} retries left`, "INFO");
-          step.retries--;
-          let result2 = await runStep(step, inputs2);
-          return result2;
-        }
-        logger.write(`Step ${step.name} failed with error: ${error.message}`, "ERROR");
-        throw error;
-      }
-    };
-    let final;
-    try {
-      for (let i = 0; i < this.steps.length; i++) {
-        const step = this.steps[i];
-        if (!step) {
-          throw new Error("Step not found.");
-        }
-        if (i === 0) {
-          inputs = initialInputs;
-        }
-        logger.write(`Running step ${step.name} with inputs: ${JSON.stringify(inputs)}`, "INFO");
-        let result = await runStep(step, inputs);
-        inputs = result;
-        logger.write(`Step ${step.name} output: ${JSON.stringify(result)}`, "INFO");
-        final = result;
-      }
-      await db3("jobs").update({
-        status: JOB_STATUS_ENUM.completed,
-        result: JSON.stringify(final),
-        finished_at: db3.fn.now()
-      }).where({ id: job?.id }).returning("id");
-      return final;
-    } catch (error) {
-      logger.write(`Workflow ${this.name} failed with error: ${error.message} for job ${job?.id}`, "ERROR");
-      await db3("jobs").update({
-        status: JOB_STATUS_ENUM.failed,
-        result: JSON.stringify({
-          error: error.message || error,
-          stack: error.stack || "No stack trace available"
-        })
-      }).where({ id: job?.id }).returning("id");
-      throw error;
-    }
-  };
-};
 var ExuluLogger = class {
   logPath;
   job;
@@ -1658,7 +1536,15 @@ var authentication = async ({
       user: {
         type: "api",
         id: "XXXX-XXXX-XXXX-XXXX",
-        email: "internal@exulu.com"
+        email: "internal@exulu.com",
+        role: {
+          id: "internal",
+          name: "Internal",
+          agents: "read",
+          workflows: "read",
+          variables: "read",
+          users: "read"
+        }
       }
     };
   }
@@ -1673,6 +1559,12 @@ var authentication = async ({
         };
       }
       const user = await db3.from("users").select("*").where("email", authtoken?.email).first();
+      if (user?.role) {
+        const role = await db3.from("roles").select("*").where("id", user?.role).first();
+        if (role) {
+          user.role = role;
+        }
+      }
       if (!user) {
         return {
           error: true,
@@ -1730,6 +1622,12 @@ var authentication = async ({
         await db3.from("users").where({ id: user.id }).update({
           last_used: /* @__PURE__ */ new Date()
         }).returning("id");
+        if (user?.role) {
+          const role = await db3.from("roles").select("*").where("id", user?.role).first();
+          if (role) {
+            user.role = role;
+          }
+        }
         return {
           error: false,
           code: 200,
@@ -1921,7 +1819,7 @@ var ExuluQueues = class {
       return existing;
     }
     if (!redisServer.host?.length || !redisServer.port?.length) {
-      console.error(`[EXULU] no redis server configured, but you are trying to use a queue ( ${name}), likely in an agent or workflow (look for ExuluQueues.use() ).`);
+      console.error(`[EXULU] no redis server configured, but you are trying to use a queue ( ${name}), likely in an agent or embedder (look for ExuluQueues.use() ).`);
       throw new Error(`[EXULU] no redis server configured.`);
     }
     const newQueue = new import_bullmq4.Queue(`${name}`, { connection: redisServer });
@@ -2163,9 +2061,13 @@ function createMutations(table) {
     if (!hasRBAC) {
       return true;
     }
-    if (user.type === "api" || user.super_admin === true) {
+    if (user.super_admin === true) {
       return true;
     }
+    if (!user.role || !(table.name.plural.includes("agent") && user.role.agents === "write") && !(table.name.plural.includes("workflow") && user.role.workflows === "write") && !(table.name.plural.includes("variable") && user.role.variables === "write") && !(table.name.plural.includes("user") && user.role.users === "write")) {
+      console.error("Access control error: no role found for current user or no access to entity type.");
+      throw new Error("Access control error: no role found for current user or no access to entity type.");
+    }
     try {
       const authResult = await requestValidators.authenticate(req);
       if (authResult.error || !authResult.user) {
@@ -2360,9 +2262,13 @@ var applyAccessControl = (table, user, query) => {
   if (!hasRBAC) {
     return query;
   }
-  if (user.type === "api" || user.super_admin === true) {
+  if (user.super_admin === true) {
     return query;
   }
+  if (!user.role || !(table.name.plural.includes("agent") && (user.role.agents === "read" || user.role.agents === "write")) && !(table.name.plural.includes("workflow") && (user.role.workflows === "read" || user.role.workflows === "write")) && !(table.name.plural.includes("variable") && (user.role.variables === "read" || user.role.variables === "write")) && !(table.name.plural.includes("user") && (user.role.users === "read" || user.role.users === "write"))) {
+    console.error("Access control error: no role found or no access to entity type.");
+    return query.where("1", "=", "0");
+  }
   try {
     query = query.where(function() {
       this.where("rights_mode", "public");
@@ -2752,12 +2658,130 @@ var agentSessionsSchema = {
       // next auth stores users with id type SERIAL, so we need to use number
       type: "number"
     },
+    {
+      name: "role",
+      type: "uuid"
+    },
     {
       name: "title",
       type: "text"
     }
   ]
 };
+var variablesSchema = {
+  name: {
+    plural: "variables",
+    singular: "variable"
+  },
+  fields: [
+    {
+      name: "name",
+      type: "text",
+      index: true,
+      unique: true
+    },
+    {
+      name: "value",
+      type: "longText"
+    },
+    {
+      name: "encrypted",
+      type: "boolean",
+      default: false
+    }
+  ]
+};
+var workflowTemplatesSchema = {
+  name: {
+    plural: "workflow_templates",
+    singular: "workflow_template"
+  },
+  RBAC: true,
+  fields: [
+    {
+      name: "name",
+      type: "text",
+      required: true
+    },
+    {
+      name: "description",
+      type: "text"
+    },
+    {
+      name: "owner",
+      type: "number",
+      required: true
+    },
+    {
+      name: "visibility",
+      type: "text",
+      required: true
+    },
+    {
+      name: "shared_user_ids",
+      type: "json"
+    },
+    {
+      name: "shared_role_ids",
+      type: "json"
+    },
+    {
+      name: "variables",
+      type: "json"
+    },
+    {
+      name: "steps_json",
+      type: "json",
+      required: true
+    },
+    {
+      name: "example_metadata_json",
+      type: "json"
+    }
+  ]
+};
+var agentsSchema = {
+  name: {
+    plural: "agents",
+    singular: "agent"
+  },
+  RBAC: true,
+  fields: [
+    {
+      name: "name",
+      type: "text"
+    },
+    {
+      name: "description",
+      type: "text"
+    },
+    {
+      name: "providerApiKey",
+      type: "text"
+    },
+    {
+      name: "extensions",
+      type: "json"
+    },
+    {
+      name: "backend",
+      type: "text"
+    },
+    {
+      name: "type",
+      type: "text"
+    },
+    {
+      name: "active",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "tools",
+      type: "json"
+    }
+  ]
+};
 var usersSchema = {
   name: {
     plural: "users",
@@ -2845,13 +2869,24 @@ var rolesSchema = {
       type: "text"
     },
     {
-      name: "is_admin",
-      type: "boolean",
-      default: false
+      name: agentsSchema.name.plural,
+      type: "text"
+      // write | read access to agents
     },
     {
-      name: "agents",
-      type: "json"
+      name: "workflows",
+      type: "text"
+      // write | read access to workflows
+    },
+    {
+      name: variablesSchema.name.plural,
+      type: "text"
+      // write | read access to variables
+    },
+    {
+      name: usersSchema.name.plural,
+      type: "text"
+      // write | read access to users
     }
   ]
 };
@@ -2879,26 +2914,6 @@ var statisticsSchema = {
     }
   ]
 };
-var workflowSchema = {
-  name: {
-    plural: "workflows",
-    singular: "workflow"
-  },
-  fields: [
-    {
-      name: "workflow_name",
-      type: "text"
-    },
-    {
-      name: "run_id",
-      type: "text"
-    },
-    {
-      name: "snapshot",
-      type: "text"
-    }
-  ]
-};
 var evalResultsSchema = {
   name: {
     plural: "eval_results",
@@ -3016,71 +3031,6 @@ var jobsSchema = {
     }
   ]
 };
-var agentsSchema = {
-  name: {
-    plural: "agents",
-    singular: "agent"
-  },
-  RBAC: true,
-  fields: [
-    {
-      name: "name",
-      type: "text"
-    },
-    {
-      name: "description",
-      type: "text"
-    },
-    {
-      name: "providerApiKey",
-      type: "text"
-    },
-    {
-      name: "extensions",
-      type: "json"
-    },
-    {
-      name: "backend",
-      type: "text"
-    },
-    {
-      name: "type",
-      type: "text"
-    },
-    {
-      name: "active",
-      type: "boolean",
-      default: false
-    },
-    {
-      name: "tools",
-      type: "json"
-    }
-  ]
-};
-var variablesSchema = {
-  name: {
-    plural: "variables",
-    singular: "variable"
-  },
-  fields: [
-    {
-      name: "name",
-      type: "text",
-      index: true,
-      unique: true
-    },
-    {
-      name: "value",
-      type: "longText"
-    },
-    {
-      name: "encrypted",
-      type: "boolean",
-      default: false
-    }
-  ]
-};
 var rbacSchema = {
   name: {
     plural: "rbac",
@@ -3118,55 +3068,6 @@ var rbacSchema = {
     }
   ]
 };
-var workflowTemplatesSchema = {
-  name: {
-    plural: "workflow_templates",
-    singular: "workflow_template"
-  },
-  RBAC: true,
-  fields: [
-    {
-      name: "name",
-      type: "text",
-      required: true
-    },
-    {
-      name: "description",
-      type: "text"
-    },
-    {
-      name: "owner",
-      type: "number",
-      required: true
-    },
-    {
-      name: "visibility",
-      type: "text",
-      required: true
-    },
-    {
-      name: "shared_user_ids",
-      type: "json"
-    },
-    {
-      name: "shared_role_ids",
-      type: "json"
-    },
-    {
-      name: "variables",
-      type: "json"
-    },
-    {
-      name: "steps_json",
-      type: "json",
-      required: true
-    },
-    {
-      name: "example_metadata_json",
-      type: "json"
-    }
-  ]
-};
 var addRBACfields = (schema) => {
   if (schema.RBAC) {
     console.log(`[EXULU] Adding rights_mode field to ${schema.name.plural} table.`);
@@ -3194,7 +3095,6 @@ var coreSchemas = {
       usersSchema: () => addRBACfields(usersSchema),
       rolesSchema: () => addRBACfields(rolesSchema),
       statisticsSchema: () => addRBACfields(statisticsSchema),
-      workflowSchema: () => addRBACfields(workflowSchema),
       evalResultsSchema: () => addRBACfields(evalResultsSchema),
       jobsSchema: () => addRBACfields(jobsSchema),
       variablesSchema: () => addRBACfields(variablesSchema),
@@ -3636,7 +3536,7 @@ var REQUEST_SIZE_LIMIT = "50mb";
 var global_queues = {
   logs_cleaner: "logs-cleaner"
 };
-var { agentsSchema: agentsSchema2, evalResultsSchema: evalResultsSchema2, jobsSchema: jobsSchema2, agentSessionsSchema: agentSessionsSchema2, agentMessagesSchema: agentMessagesSchema2, rolesSchema: rolesSchema2, usersSchema: usersSchema2, workflowSchema: workflowSchema2, variablesSchema: variablesSchema2, workflowTemplatesSchema: workflowTemplatesSchema2, rbacSchema: rbacSchema2 } = coreSchemas.get();
+var { agentsSchema: agentsSchema2, evalResultsSchema: evalResultsSchema2, jobsSchema: jobsSchema2, agentSessionsSchema: agentSessionsSchema2, agentMessagesSchema: agentMessagesSchema2, rolesSchema: rolesSchema2, usersSchema: usersSchema2, variablesSchema: variablesSchema2, workflowTemplatesSchema: workflowTemplatesSchema2, rbacSchema: rbacSchema2, statisticsSchema: statisticsSchema2 } = coreSchemas.get();
 var createRecurringJobs = async () => {
   console.log("[EXULU] creating recurring jobs.");
   const recurringJobSchedulersLogs = [];
@@ -3670,7 +3570,7 @@ var createRecurringJobs = async () => {
   console.table(recurringJobSchedulersLogs);
   return queue;
 };
-var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
+var createExpressRoutes = async (app, agents, tools, contexts) => {
   const routeLogs = [];
   var corsOptions = {
     origin: "*",
@@ -3720,8 +3620,6 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
   routeLogs.push(
     { route: "/agents", method: "GET", note: "List all agents" },
     { route: "/agents/:id", method: "GET", note: "Get specific agent" },
-    { route: "/workflows", method: "GET", note: "List all workflows" },
-    { route: "/workflows/:id", method: "GET", note: "Get specific workflow" },
     { route: "/contexts", method: "GET", note: "List all contexts" },
     { route: "/contexts/:id", method: "GET", note: "Get specific context" },
     { route: "/contexts/statistics", method: "GET", note: "Get context statistics" },
@@ -3745,12 +3643,12 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
       rolesSchema2(),
       agentsSchema2(),
       jobsSchema2(),
-      workflowSchema2(),
       evalResultsSchema2(),
       agentSessionsSchema2(),
       agentMessagesSchema2(),
       variablesSchema2(),
       workflowTemplatesSchema2(),
+      statisticsSchema2(),
       rbacSchema2()
     ]
   );
@@ -4474,50 +4372,6 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
       }))
     })));
   });
-  console.log("[EXULU] workflows get list");
-  app.get(`/workflows`, async (req, res) => {
-    const authenticationResult = await requestValidators.authenticate(req);
-    if (!authenticationResult.user?.id) {
-      res.status(authenticationResult.code || 500).json({ detail: `${authenticationResult.message}` });
-      return;
-    }
-    res.status(200).json(workflows.map((workflow) => ({
-      id: workflow.id,
-      name: workflow.name,
-      slug: workflow.slug,
-      enable_batch: workflow.enable_batch,
-      queue: workflow.queue?.name,
-      inputSchema: workflow.steps[0]?.inputSchema ? (0, import_zodex.zerialize)(workflow.steps[0].inputSchema) : null
-    })));
-  });
-  console.log("[EXULU] workflow by id");
-  app.get(`/workflows/:id`, async (req, res) => {
-    const authenticationResult = await requestValidators.authenticate(req);
-    if (!authenticationResult.user?.id) {
-      res.status(authenticationResult.code || 500).json({ detail: `${authenticationResult.message}` });
-      return;
-    }
-    const id = req.params.id;
-    if (!id) {
-      res.status(400).json({
-        message: "Missing id in request."
-      });
-      return;
-    }
-    const workflow = workflows.find((workflow2) => workflow2.id === id);
-    if (!workflow) {
-      res.status(400).json({
-        message: "Workflow not found."
-      });
-      return;
-    }
-    res.status(200).json({
-      ...workflow,
-      queue: workflow.queue?.name,
-      inputSchema: workflow.steps[0]?.inputSchema ? (0, import_zodex.zerialize)(workflow.steps[0].inputSchema) : null,
-      workflow: void 0
-    });
-  });
   console.log("[EXULU] contexts");
   contexts.forEach((context) => {
     const sources = context.sources.get();
@@ -4646,66 +4500,6 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
       }
     });
   });
-  console.log("[EXULU] workflows");
-  workflows.forEach((workflow) => {
-    routeLogs.push({
-      route: workflow.slug,
-      method: "POST",
-      note: `Execute workflow ${workflow.name}`
-    });
-    app.post(`${workflow.slug}`, async (req, res) => {
-      const authenticationResult = await requestValidators.authenticate(req);
-      if (!authenticationResult.user?.id) {
-        res.status(authenticationResult.code || 500).json({ detail: `${authenticationResult.message}` });
-        return;
-      }
-      const requestValidationResult = requestValidators.workflows(req);
-      if (requestValidationResult.error) {
-        res.status(requestValidationResult.code || 500).json({ detail: `${requestValidationResult.message}` });
-        return;
-      }
-      const inputs = await preprocessInputs(req.body.inputs);
-      if (workflow.queue) {
-        const job = await bullmqDecorator({
-          label: `Job running '${workflow.name}' for '${req.body.label}'`,
-          agent: req.body.agent,
-          workflow: workflow.id,
-          steps: workflow.steps?.length || 0,
-          type: "workflow",
-          inputs,
-          session: req.body.session,
-          queue: workflow.queue,
-          user: authenticationResult.user.id
-        });
-        res.status(200).json({
-          "job": {
-            "status": "waiting",
-            "name": job.name,
-            "queue": workflow.queue.name,
-            "redisId": job.redis,
-            "jobId": job.id
-          },
-          "output": {}
-        });
-        return;
-      }
-      console.log("[EXULU] running workflow with inputs.", inputs);
-      const logger = new ExuluLogger();
-      const result = await workflow.start({
-        inputs,
-        user: authenticationResult.user.id,
-        logger,
-        session: req.body.session,
-        agent: req.body.agent,
-        label: req.body.label
-      });
-      res.status(200).json({
-        "job": {},
-        "output": result
-      });
-      return;
-    });
-  });
   if (process.env.COMPANION_S3_REGION && process.env.COMPANION_S3_KEY && process.env.COMPANION_S3_SECRET) {
     await createUppyRoutes(app);
   } else {
@@ -4728,9 +4522,11 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
         return;
       }
       const { db: db3 } = await postgresClient();
-      const agent = await db3.from("agents").where({
-        id: req.params.id
-      }).first();
+      let query = db3("agents");
+      query.select("*");
+      query = applyAccessControl(agentsSchema2(), authenticationResult.user, query);
+      query.where({ id: req.params.id });
+      const agent = await query.first();
       if (!agent) {
         const arrayBuffer = createCustomAnthropicStreamingMessage(`
 \x1B[41m -- Agent ${req.params.id} not found or you do not have access to it. --
@@ -4828,48 +4624,6 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
   });
   return app;
 };
-var preprocessInputs = async (data) => {
-  for (const key in data) {
-    if (key.includes("exulu_file_")) {
-      const url = await getPresignedFileUrl(data[key]);
-      const newKey = key.replace("exulu_file_", "");
-      data[newKey] = url;
-      delete data[key];
-    } else if (Array.isArray(data[key])) {
-      for (let i = 0; i < data[key].length; i++) {
-        if (typeof data[key][i] === "object") {
-          await preprocessInputs(data[key][i]);
-        }
-      }
-    } else if (typeof data[key] === "object") {
-      await preprocessInputs(data[key]);
-    }
-  }
-  return data;
-};
-var getPresignedFileUrl = async (key) => {
-  if (!process.env.NEXT_BACKEND) {
-    throw new Error("Missing process.env.NEXT_BACKEND");
-  }
-  if (!process.env.INTERNAL_SECRET) {
-    throw new Error("Missing process.env.NEXT_BACKEND");
-  }
-  console.log(`[EXULU] fetching presigned url for file with key: ${key}`);
-  let url = `${process.env.NEXT_BACKEND}/s3/download?key=${key}`;
-  const response = await fetch(url, {
-    method: "GET",
-    headers: {
-      "Content-Type": "application/json",
-      "Internal-Key": process.env.INTERNAL_SECRET
-    }
-  });
-  const json = await response.json();
-  if (!json.url) {
-    throw new Error(`Could not generate presigned url for file with key: ${key}`);
-  }
-  console.log(`[EXULU] presigned url for file with key: ${key}, generated: ${json.url}`);
-  return json.url;
-};
 var createCustomAnthropicStreamingMessage = (message) => {
   const responseData = {
     type: "message",
@@ -4887,10 +4641,10 @@ var createCustomAnthropicStreamingMessage = (message) => {
 
 // src/registry/workers.ts
 var import_ioredis = __toESM(require("ioredis"), 1);
-var import_bullmq7 = require("bullmq");
+var import_bullmq6 = require("bullmq");
 
 // src/registry/utils.ts
-var import_bullmq6 = require("bullmq");
+var import_bullmq5 = require("bullmq");
 var bullmq = {
   validate: (bullmqJob) => {
     if (!bullmqJob.data) {
@@ -4936,7 +4690,7 @@ var fs2 = __toESM(require("fs"), 1);
 var import_path = __toESM(require("path"), 1);
 var defaultLogsDir = import_path.default.join(process.cwd(), "logs");
 var redisConnection;
-var createWorkers = async (queues2, contexts, workflows, _logsDir) => {
+var createWorkers = async (queues2, contexts, _logsDir) => {
   if (!redisServer.host || !redisServer.port) {
     console.error("[EXULU] you are trying to start worker, but no redis server is configured in the environment.");
     throw new Error("No redis server configured in the environment, so cannot start worker.");
@@ -4950,7 +4704,7 @@ var createWorkers = async (queues2, contexts, workflows, _logsDir) => {
   const logsDir = _logsDir || defaultLogsDir;
   const workers = queues2.map((queue) => {
     console.log(`[EXULU] creating worker for queue ${queue}.`);
-    const worker = new import_bullmq7.Worker(
+    const worker = new import_bullmq6.Worker(
       `${queue}`,
       async (bullmqJob) => {
         const { db: db3 } = await postgresClient();
@@ -5062,7 +4816,7 @@ var createWorkers = async (queues2, contexts, workflows, _logsDir) => {
   return workers;
 };
 var createLogsCleanerWorker = (logsDir) => {
-  const logsCleaner = new import_bullmq7.Worker(
+  const logsCleaner = new import_bullmq6.Worker(
     global_queues.logs_cleaner,
     async (job) => {
       console.log(`[EXULU] recurring job ${job.id}.`);
@@ -5107,7 +4861,7 @@ var ExuluMCP = class {
   express;
   constructor() {
   }
-  create = async ({ express: express3, contexts, agents, workflows, config, tools }) => {
+  create = async ({ express: express3, contexts, agents, config, tools }) => {
     this.express = express3;
     if (!this.server) {
       console.log("[EXULU] Creating MCP server.");
@@ -5288,7 +5042,6 @@ var defaultAgent = new ExuluAgent({
 // src/registry/index.ts
 var ExuluApp = class {
   _agents = [];
-  _workflows = [];
   _config;
   _queues = [];
   _contexts = {};
@@ -5298,8 +5051,7 @@ var ExuluApp = class {
   }
   // Factory function so we can async 
   // initialize the MCP server if needed.
-  create = async ({ contexts, agents, workflows, config, tools }) => {
-    this._workflows = workflows ?? [];
+  create = async ({ contexts, agents, config, tools }) => {
     this._contexts = contexts ?? {};
     this._agents = [
       claudeCodeAgent,
@@ -5316,8 +5068,7 @@ var ExuluApp = class {
     ];
     const contextsArray = Object.values(contexts || {});
     const queues2 = [
-      ...contextsArray?.length ? contextsArray.map((context) => context.embedder.queue?.name || null) : [],
-      ...workflows?.length ? workflows.map((workflow) => workflow.queue?.name || null) : []
+      ...contextsArray?.length ? contextsArray.map((context) => context.embedder.queue?.name || null) : []
     ];
     this._queues = [...new Set(queues2.filter((o) => !!o))];
     if (!this._expressApp) {
@@ -5345,15 +5096,9 @@ var ExuluApp = class {
   agent(id) {
     return this._agents.find((x) => x.id === id);
   }
-  workflow(id) {
-    return this._workflows.find((x) => x.id === id);
-  }
   get contexts() {
     return Object.values(this._contexts ?? {});
   }
-  get workflows() {
-    return this._workflows;
-  }
   get agents() {
     return this._agents;
   }
@@ -5363,7 +5108,6 @@ var ExuluApp = class {
         return await createWorkers(
           this._queues,
           Object.values(this._contexts ?? {}),
-          this._workflows,
           this._config?.workers?.logsDir
         );
       }
@@ -5380,7 +5124,6 @@ var ExuluApp = class {
           app,
           this._agents,
           this._tools,
-          this._workflows,
           Object.values(this._contexts ?? {})
         );
         if (this._config?.MCP.enabled) {
@@ -5389,7 +5132,6 @@ var ExuluApp = class {
             express: app,
             contexts: this._contexts,
             agents: this._agents,
-            workflows: this._workflows,
             config: this._config,
             tools: this._tools
           });
@@ -6611,8 +6353,10 @@ var generateApiKey = async (name, email) => {
     console.log("[EXULU] Creating default admin role.");
     const role = await db3.from("roles").insert({
       name: "admin",
-      is_admin: true,
-      agents: []
+      agents: "write",
+      workflows: "write",
+      variables: "write",
+      users: "write"
     }).returning("id");
     roleId = role[0].id;
   } else {
@@ -6647,7 +6391,7 @@ var generateApiKey = async (name, email) => {
 };
 
 // src/postgres/init-db.ts
-var { agentsSchema: agentsSchema3, evalResultsSchema: evalResultsSchema3, jobsSchema: jobsSchema3, agentSessionsSchema: agentSessionsSchema3, agentMessagesSchema: agentMessagesSchema3, rolesSchema: rolesSchema3, usersSchema: usersSchema3, statisticsSchema: statisticsSchema2, variablesSchema: variablesSchema3, workflowTemplatesSchema: workflowTemplatesSchema3, rbacSchema: rbacSchema3 } = coreSchemas.get();
+var { agentsSchema: agentsSchema3, evalResultsSchema: evalResultsSchema3, jobsSchema: jobsSchema3, agentSessionsSchema: agentSessionsSchema3, agentMessagesSchema: agentMessagesSchema3, rolesSchema: rolesSchema3, usersSchema: usersSchema3, statisticsSchema: statisticsSchema3, variablesSchema: variablesSchema3, workflowTemplatesSchema: workflowTemplatesSchema3, rbacSchema: rbacSchema3 } = coreSchemas.get();
 var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
   for (const field of fields) {
     const { type, name, default: defaultValue, unique } = field;
@@ -6675,7 +6419,7 @@ var up = async function(knex) {
     agentMessagesSchema3(),
     rolesSchema3(),
     evalResultsSchema3(),
-    statisticsSchema2(),
+    statisticsSchema3(),
     jobsSchema3(),
     rbacSchema3(),
     agentsSchema3(),
@@ -6769,8 +6513,10 @@ var execute = async () => {
     console.log("[EXULU] Creating default admin role.");
     const role = await db3.from("roles").insert({
       name: "admin",
-      is_admin: true,
-      agents: JSON.stringify([])
+      agents: "write",
+      workflows: "write",
+      variables: "write",
+      users: "write"
     }).returning("id");
     roleId = role[0].id;
   } else {
@@ -6800,6 +6546,17 @@ var execute = async () => {
   return;
 };
 
+// types/enums/jobs.ts
+var JOB_STATUS_ENUM = {
+  completed: "completed",
+  failed: "failed",
+  delayed: "delayed",
+  active: "active",
+  waiting: "waiting",
+  paused: "paused",
+  stuck: "stuck"
+};
+
 // src/index.ts
 var ExuluJobs = {
   redis: redisClient,
@@ -6835,7 +6592,6 @@ var ExuluChunkers = {
   ExuluQueues,
   ExuluSource,
   ExuluTool,
-  ExuluWorkflow,
   ExuluZodFileType,
   db
 });