@hasna/workflows 0.2.0 → 0.2.1

package/dist/mcp/index.js

@@ -73,7 +73,7 @@ function workflowsTools(_service) {
 // package.json
 var package_default = {
   name: "@hasna/workflows",
-  version: "0.2.0",
+  version: "0.2.1",
   description: "Universal graph workflow app \u2014 graph language (start/step/decision/while/end), three-table store, session WAL, daemon with claims/leases, four lane adapters (claude/codex/cursor/grok), and a full CLI on four surfaces",
   type: "module",
   main: "./dist/index.js",
@@ -149,9 +149,9 @@ var package_default = {
   dependencies: {
     "@anthropic-ai/claude-agent-sdk": "0.3.234",
     "@cursor/sdk": "^1.0.28",
-    "@openai/codex-sdk": "0.147.0",
-    commander: "^13.1.0",
     "@hasna/contracts": "1.3.3",
+    "@openai/codex-sdk": "0.160.0",
+    commander: "^13.1.0",
     pg: "^8.16.3"
   },
   devDependencies: {
@@ -346,6 +346,7 @@ function parseExpr(input) {
 // src/graph.ts
 var GRAPH_NODE_TYPES = ["start", "step", "decision", "while", "end"];
 var LANE_KINDS = ["claude", "codex", "cursor", "grok"];
+var CODEX_EXECUTION_MODES = ["repository", "read-only"];
 var NODE_ID_RE = /^[A-Za-z_][A-Za-z0-9_-]*$/;
 function issue(issues, path, message) {
   issues.push({ path, message });
@@ -564,6 +565,16 @@ function validateNode(graph, node, issues) {
       if (node.lane !== undefined && !LANE_KINDS.includes(node.lane)) {
         issue(issues, `nodes.${node.id}`, `unknown lane ${JSON.stringify(node.lane)} (expected one of ${LANE_KINDS.join(", ")})`);
       }
+      if (node.cwd !== undefined && (typeof node.cwd !== "string" || !node.cwd.trim() || node.cwd.includes("\x00"))) {
+        issue(issues, `nodes.${node.id}.cwd`, "cwd must be a non-empty path string without NUL characters on the executor");
+      }
+      if (node.codexMode !== undefined) {
+        if (!CODEX_EXECUTION_MODES.includes(node.codexMode)) {
+          issue(issues, `nodes.${node.id}.codexMode`, "codexMode must be repository or read-only");
+        } else if (node.lane !== "codex" || !node.prompt || node.command !== undefined) {
+          issue(issues, `nodes.${node.id}.codexMode`, "codexMode is supported only for a codex prompt step without command");
+        }
+      }
       if (node.maxRetries !== undefined && (!Number.isInteger(node.maxRetries) || node.maxRetries < 0)) {
         issue(issues, `nodes.${node.id}`, "maxRetries must be a non-negative integer");
       }
@@ -642,7 +653,7 @@ function validateNode(graph, node, issues) {
   }
 }
 
-// ../../workflows-release-artifact-1/app/node_modules/@hasna/contracts/dist/client/transport.js
+// ../../../../workflows-codex-execution-repair-1/dependency-update-1/standalone/workflows/node_modules/@hasna/contracts/dist/client/transport.js
 import { isIP } from "net";
 import { spawnSync } from "child_process";
 import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readFileSync as readFileSync2 } from "fs";

package/dist/sdk.js

@@ -1,4 +1,4 @@
-// ../../workflows-release-artifact-1/app/node_modules/@hasna/contracts/dist/client/transport.js
+// ../../../../workflows-codex-execution-repair-1/dependency-update-1/standalone/workflows/node_modules/@hasna/contracts/dist/client/transport.js
 import { isIP } from "net";
 import { spawnSync } from "child_process";
 import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readFileSync as readFileSync2 } from "fs";
@@ -1448,7 +1448,7 @@ function workflowAgent(env = process.env, explicit) {
 // package.json
 var package_default = {
   name: "@hasna/workflows",
-  version: "0.2.0",
+  version: "0.2.1",
   description: "Universal graph workflow app — graph language (start/step/decision/while/end), three-table store, session WAL, daemon with claims/leases, four lane adapters (claude/codex/cursor/grok), and a full CLI on four surfaces",
   type: "module",
   main: "./dist/index.js",
@@ -1524,9 +1524,9 @@ var package_default = {
   dependencies: {
     "@anthropic-ai/claude-agent-sdk": "0.3.234",
     "@cursor/sdk": "^1.0.28",
-    "@openai/codex-sdk": "0.147.0",
-    commander: "^13.1.0",
     "@hasna/contracts": "1.3.3",
+    "@openai/codex-sdk": "0.160.0",
+    commander: "^13.1.0",
     pg: "^8.16.3"
   },
   devDependencies: {

package/dist/serve/admin.js

@@ -22,7 +22,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/workflows",
-    version: "0.2.0",
+    version: "0.2.1",
     description: "Universal graph workflow app \u2014 graph language (start/step/decision/while/end), three-table store, session WAL, daemon with claims/leases, four lane adapters (claude/codex/cursor/grok), and a full CLI on four surfaces",
     type: "module",
     main: "./dist/index.js",
@@ -98,9 +98,9 @@ var init_package = __esm(() => {
     dependencies: {
       "@anthropic-ai/claude-agent-sdk": "0.3.234",
       "@cursor/sdk": "^1.0.28",
-      "@openai/codex-sdk": "0.147.0",
-      commander: "^13.1.0",
       "@hasna/contracts": "1.3.3",
+      "@openai/codex-sdk": "0.160.0",
+      commander: "^13.1.0",
       pg: "^8.16.3"
     },
     devDependencies: {
@@ -606,6 +606,16 @@ function validateNode(graph, node, issues) {
       if (node.lane !== undefined && !LANE_KINDS.includes(node.lane)) {
         issue(issues, `nodes.${node.id}`, `unknown lane ${JSON.stringify(node.lane)} (expected one of ${LANE_KINDS.join(", ")})`);
       }
+      if (node.cwd !== undefined && (typeof node.cwd !== "string" || !node.cwd.trim() || node.cwd.includes("\x00"))) {
+        issue(issues, `nodes.${node.id}.cwd`, "cwd must be a non-empty path string without NUL characters on the executor");
+      }
+      if (node.codexMode !== undefined) {
+        if (!CODEX_EXECUTION_MODES.includes(node.codexMode)) {
+          issue(issues, `nodes.${node.id}.codexMode`, "codexMode must be repository or read-only");
+        } else if (node.lane !== "codex" || !node.prompt || node.command !== undefined) {
+          issue(issues, `nodes.${node.id}.codexMode`, "codexMode is supported only for a codex prompt step without command");
+        }
+      }
       if (node.maxRetries !== undefined && (!Number.isInteger(node.maxRetries) || node.maxRetries < 0)) {
         issue(issues, `nodes.${node.id}`, "maxRetries must be a non-negative integer");
       }
@@ -683,11 +693,12 @@ function validateNode(graph, node, issues) {
       break;
   }
 }
-var GRAPH_NODE_TYPES, LANE_KINDS, NODE_ID_RE;
+var GRAPH_NODE_TYPES, LANE_KINDS, CODEX_EXECUTION_MODES, NODE_ID_RE;
 var init_graph = __esm(() => {
   init_expr();
   GRAPH_NODE_TYPES = ["start", "step", "decision", "while", "end"];
   LANE_KINDS = ["claude", "codex", "cursor", "grok"];
+  CODEX_EXECUTION_MODES = ["repository", "read-only"];
   NODE_ID_RE = /^[A-Za-z_][A-Za-z0-9_-]*$/;
 });
 
@@ -1355,9 +1366,15 @@ async function spawnCli(cmd, opts) {
     new Response(proc.stderr).text(),
     proc.exited
   ]);
-  const output = stderr ? `${stdout}
+  const output = opts.stdoutOnly ? stdout.trim() : stderr ? `${stdout}
 ${stderr}`.trim() : stdout.trim();
-  return { ok: exitCode === 0, exitCode, output, durationMs: Date.now() - started };
+  return {
+    ok: exitCode === 0,
+    exitCode,
+    output,
+    durationMs: Date.now() - started,
+    ...opts.stdoutOnly && exitCode !== 0 && stderr.trim() ? { error: stderr.trim() } : {}
+  };
 }
 var LANE_KINDS2, LaneDependencyMissingError, LaneAdapterShapeError, DEFAULT_LANE_TIMEOUT_MS = 120000, LaneTimeoutError;
 var init_types = __esm(() => {
@@ -1501,6 +1518,9 @@ function createCodexAdapter(deps = {}) {
       if (!job.prompt) {
         return { ok: false, exitCode: 2, output: "", durationMs: 0, error: "codex lane requires a prompt" };
       }
+      if (job.codexMode !== undefined && (!CODEX_EXECUTION_MODES.includes(job.codexMode) || job.lane !== "codex" || job.command !== undefined)) {
+        return { ok: false, exitCode: 2, output: "", durationMs: 0, error: "codexMode must be repository or read-only on a codex prompt without command", retryable: false };
+      }
       const started = Date.now();
       const timeoutMs = job.timeoutMs ?? DEFAULT_LANE_TIMEOUT_MS;
       const loader = deps.sdkLoader ?? (async () => await import("@openai/codex-sdk"));
@@ -1520,13 +1540,20 @@ function createCodexAdapter(deps = {}) {
           config: { model: job.model },
           env: subscriptionEnvironment(job.env)
         })), timeoutMs, "codex lane");
-        const thread = client.startThread?.({ model: job.model, workingDirectory: job.cwd });
+        const thread = client.startThread?.({
+          model: job.model,
+          workingDirectory: job.cwd,
+          ...job.codexMode === "read-only" ? { sandboxMode: "read-only", skipGitRepoCheck: true, approvalPolicy: "never" } : {}
+        });
         if (!thread || typeof thread.run !== "function") {
           throw new LaneAdapterShapeError("@openai/codex-sdk Codex.startThread() returned no run()");
         }
         const turn = await withTimeout(thread.run(job.prompt, { signal: abortController.signal }), timeoutMs, "codex lane", () => abortController.abort());
-        const output = turn?.finalResponse ?? "";
         const durationMs = Date.now() - started;
+        const output = turn?.finalResponse;
+        if (typeof output !== "string" || !output.trim()) {
+          return missingResponse(durationMs);
+        }
         return { ok: true, exitCode: 0, output, durationMs };
       } catch (err) {
         const durationMs = Date.now() - started;
@@ -1537,14 +1564,17 @@ function createCodexAdapter(deps = {}) {
 }
 async function runCodexCli(job, cliPath, started, timeoutMs) {
   try {
-    const result = await spawnCli([cliPath, "exec", "--", job.prompt], {
+    const controls = job.codexMode === "read-only" ? ["--sandbox", "read-only", "--skip-git-repo-check", "--config", 'approval_policy="never"'] : [];
+    const result = await spawnCli([cliPath, "exec", ...controls, "--", job.prompt], {
       binaryName: cliPath,
       packageHint: "@openai/codex-sdk or the codex CLI",
       timeoutMs,
       env: job.env,
-      cwd: job.cwd
+      cwd: job.cwd,
+      stdoutOnly: true
     });
-    return { ...result, durationMs: Date.now() - started };
+    const durationMs = Date.now() - started;
+    return result.ok && !result.output.trim() ? missingResponse(durationMs) : { ...result, durationMs };
   } catch (err) {
     if (err instanceof LaneDependencyMissingError) {
       return { ok: false, exitCode: 127, output: "", durationMs: Date.now() - started, error: err.message };
@@ -1552,7 +1582,11 @@ async function runCodexCli(job, cliPath, started, timeoutMs) {
     throw err;
   }
 }
+function missingResponse(durationMs) {
+  return { ok: false, exitCode: 1, output: "", durationMs, error: "Codex completed without an agent response; verify the native subscription and model route", retryable: false };
+}
 var init_codex = __esm(() => {
+  init_graph();
   init_types();
 });
 
@@ -2069,7 +2103,14 @@ class WorkflowsDaemon {
     const isLoopBody = graph.nodes.some((candidate) => candidate.type === "while" && candidate.body.includes(nodeId));
     const nodeRow = latest === undefined || isLoopBody && latest.status === "completed" ? await this.store.createRunNode({ runId: run2.id, nodeId, lane: node2.lane ?? "claude" }) : latest;
     const memoWatch = node2.memo ? memoWatchFingerprint(graph, this.store.dataDir) : undefined;
-    const memoSource = { command: node2.command, prompt: node2.prompt, context: stripRunState(context) };
+    const memoSource = {
+      command: node2.command,
+      prompt: node2.prompt,
+      context: stripRunState(context),
+      lane: node2.lane ?? "claude",
+      cwd: node2.cwd,
+      codexMode: node2.lane === "codex" ? node2.codexMode ?? "repository" : undefined
+    };
     const memoInput = node2.memo ? memoWatch !== undefined ? { ...memoSource, memoWatch } : memoSource : undefined;
     if (memoInput !== undefined) {
       const hit = await tryMemoHit(this.store, run2.graphName, nodeId, memoInput);
@@ -2094,6 +2135,8 @@ class WorkflowsDaemon {
       lane: node2.lane ?? "claude",
       prompt: node2.prompt,
       command: node2.command,
+      cwd: node2.cwd,
+      codexMode: node2.codexMode,
       timeoutMs: node2.timeoutMs,
       env: this.env
     };
@@ -3283,7 +3326,7 @@ function buildOpenApi(version) {
         ReadinessReport: object({ ok: { type: "boolean" }, service: string, version: string, checks: { type: "object", additionalProperties: string } }),
         GraphValidation: object({ ok: { type: "boolean" }, issues: { type: "array", items: object({ path: string, message: string }) } }),
         StartNode: object({ id: string, type: { type: "string", enum: ["start"] }, next: string }, ["id", "type"]),
-        StepNode: object({ id: string, type: { type: "string", enum: ["step"] }, next: string, lane: { type: "string", enum: ["claude", "codex", "cursor", "grok"] }, prompt: string, command: string, maxRetries: { type: "integer", minimum: 0 }, memo: { type: "boolean" }, timeoutMs: { type: "integer", minimum: 1 } }, ["id", "type"]),
+        StepNode: object({ id: string, type: { type: "string", enum: ["step"] }, next: string, lane: { type: "string", enum: ["claude", "codex", "cursor", "grok"] }, prompt: string, command: string, cwd: { type: "string", minLength: 1 }, codexMode: { type: "string", enum: ["repository", "read-only"], default: "repository", description: "Codex prompt steps only. Read-only permits nonrepository execution with a read-only sandbox and no approvals. Repository retains native trust, sandbox and approval defaults." }, maxRetries: { type: "integer", minimum: 0 }, memo: { type: "boolean" }, timeoutMs: { type: "integer", minimum: 1 } }, ["id", "type"]),
         DecisionNode: object({ id: string, type: { type: "string", enum: ["decision"] }, condition: string, then: string, else: string }, ["id", "type", "condition"]),
         WhileNode: object({ id: string, type: { type: "string", enum: ["while"] }, condition: string, body: { type: "array", items: string }, maxIterations: { type: "integer", minimum: 1 }, next: string }, ["id", "type", "condition", "body", "maxIterations"]),
         EndNode: object({ id: string, type: { type: "string", enum: ["end"] } }),

package/dist/serve/index.js

@@ -22,7 +22,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/workflows",
-    version: "0.2.0",
+    version: "0.2.1",
     description: "Universal graph workflow app \u2014 graph language (start/step/decision/while/end), three-table store, session WAL, daemon with claims/leases, four lane adapters (claude/codex/cursor/grok), and a full CLI on four surfaces",
     type: "module",
     main: "./dist/index.js",
@@ -98,9 +98,9 @@ var init_package = __esm(() => {
     dependencies: {
       "@anthropic-ai/claude-agent-sdk": "0.3.234",
       "@cursor/sdk": "^1.0.28",
-      "@openai/codex-sdk": "0.147.0",
-      commander: "^13.1.0",
       "@hasna/contracts": "1.3.3",
+      "@openai/codex-sdk": "0.160.0",
+      commander: "^13.1.0",
       pg: "^8.16.3"
     },
     devDependencies: {
@@ -606,6 +606,16 @@ function validateNode(graph, node, issues) {
       if (node.lane !== undefined && !LANE_KINDS.includes(node.lane)) {
         issue(issues, `nodes.${node.id}`, `unknown lane ${JSON.stringify(node.lane)} (expected one of ${LANE_KINDS.join(", ")})`);
       }
+      if (node.cwd !== undefined && (typeof node.cwd !== "string" || !node.cwd.trim() || node.cwd.includes("\x00"))) {
+        issue(issues, `nodes.${node.id}.cwd`, "cwd must be a non-empty path string without NUL characters on the executor");
+      }
+      if (node.codexMode !== undefined) {
+        if (!CODEX_EXECUTION_MODES.includes(node.codexMode)) {
+          issue(issues, `nodes.${node.id}.codexMode`, "codexMode must be repository or read-only");
+        } else if (node.lane !== "codex" || !node.prompt || node.command !== undefined) {
+          issue(issues, `nodes.${node.id}.codexMode`, "codexMode is supported only for a codex prompt step without command");
+        }
+      }
       if (node.maxRetries !== undefined && (!Number.isInteger(node.maxRetries) || node.maxRetries < 0)) {
         issue(issues, `nodes.${node.id}`, "maxRetries must be a non-negative integer");
       }
@@ -683,11 +693,12 @@ function validateNode(graph, node, issues) {
       break;
   }
 }
-var GRAPH_NODE_TYPES, LANE_KINDS, NODE_ID_RE;
+var GRAPH_NODE_TYPES, LANE_KINDS, CODEX_EXECUTION_MODES, NODE_ID_RE;
 var init_graph = __esm(() => {
   init_expr();
   GRAPH_NODE_TYPES = ["start", "step", "decision", "while", "end"];
   LANE_KINDS = ["claude", "codex", "cursor", "grok"];
+  CODEX_EXECUTION_MODES = ["repository", "read-only"];
   NODE_ID_RE = /^[A-Za-z_][A-Za-z0-9_-]*$/;
 });
 
@@ -1355,9 +1366,15 @@ async function spawnCli(cmd, opts) {
     new Response(proc.stderr).text(),
     proc.exited
   ]);
-  const output = stderr ? `${stdout}
+  const output = opts.stdoutOnly ? stdout.trim() : stderr ? `${stdout}
 ${stderr}`.trim() : stdout.trim();
-  return { ok: exitCode === 0, exitCode, output, durationMs: Date.now() - started };
+  return {
+    ok: exitCode === 0,
+    exitCode,
+    output,
+    durationMs: Date.now() - started,
+    ...opts.stdoutOnly && exitCode !== 0 && stderr.trim() ? { error: stderr.trim() } : {}
+  };
 }
 var LANE_KINDS2, LaneDependencyMissingError, LaneAdapterShapeError, DEFAULT_LANE_TIMEOUT_MS = 120000, LaneTimeoutError;
 var init_types = __esm(() => {
@@ -1501,6 +1518,9 @@ function createCodexAdapter(deps = {}) {
       if (!job.prompt) {
         return { ok: false, exitCode: 2, output: "", durationMs: 0, error: "codex lane requires a prompt" };
       }
+      if (job.codexMode !== undefined && (!CODEX_EXECUTION_MODES.includes(job.codexMode) || job.lane !== "codex" || job.command !== undefined)) {
+        return { ok: false, exitCode: 2, output: "", durationMs: 0, error: "codexMode must be repository or read-only on a codex prompt without command", retryable: false };
+      }
       const started = Date.now();
       const timeoutMs = job.timeoutMs ?? DEFAULT_LANE_TIMEOUT_MS;
       const loader = deps.sdkLoader ?? (async () => await import("@openai/codex-sdk"));
@@ -1520,13 +1540,20 @@ function createCodexAdapter(deps = {}) {
           config: { model: job.model },
           env: subscriptionEnvironment(job.env)
         })), timeoutMs, "codex lane");
-        const thread = client.startThread?.({ model: job.model, workingDirectory: job.cwd });
+        const thread = client.startThread?.({
+          model: job.model,
+          workingDirectory: job.cwd,
+          ...job.codexMode === "read-only" ? { sandboxMode: "read-only", skipGitRepoCheck: true, approvalPolicy: "never" } : {}
+        });
         if (!thread || typeof thread.run !== "function") {
           throw new LaneAdapterShapeError("@openai/codex-sdk Codex.startThread() returned no run()");
         }
         const turn = await withTimeout(thread.run(job.prompt, { signal: abortController.signal }), timeoutMs, "codex lane", () => abortController.abort());
-        const output = turn?.finalResponse ?? "";
         const durationMs = Date.now() - started;
+        const output = turn?.finalResponse;
+        if (typeof output !== "string" || !output.trim()) {
+          return missingResponse(durationMs);
+        }
         return { ok: true, exitCode: 0, output, durationMs };
       } catch (err) {
         const durationMs = Date.now() - started;
@@ -1537,14 +1564,17 @@ function createCodexAdapter(deps = {}) {
 }
 async function runCodexCli(job, cliPath, started, timeoutMs) {
   try {
-    const result = await spawnCli([cliPath, "exec", "--", job.prompt], {
+    const controls = job.codexMode === "read-only" ? ["--sandbox", "read-only", "--skip-git-repo-check", "--config", 'approval_policy="never"'] : [];
+    const result = await spawnCli([cliPath, "exec", ...controls, "--", job.prompt], {
       binaryName: cliPath,
       packageHint: "@openai/codex-sdk or the codex CLI",
       timeoutMs,
       env: job.env,
-      cwd: job.cwd
+      cwd: job.cwd,
+      stdoutOnly: true
     });
-    return { ...result, durationMs: Date.now() - started };
+    const durationMs = Date.now() - started;
+    return result.ok && !result.output.trim() ? missingResponse(durationMs) : { ...result, durationMs };
   } catch (err) {
     if (err instanceof LaneDependencyMissingError) {
       return { ok: false, exitCode: 127, output: "", durationMs: Date.now() - started, error: err.message };
@@ -1552,7 +1582,11 @@ async function runCodexCli(job, cliPath, started, timeoutMs) {
     throw err;
   }
 }
+function missingResponse(durationMs) {
+  return { ok: false, exitCode: 1, output: "", durationMs, error: "Codex completed without an agent response; verify the native subscription and model route", retryable: false };
+}
 var init_codex = __esm(() => {
+  init_graph();
   init_types();
 });
 
@@ -2069,7 +2103,14 @@ class WorkflowsDaemon {
     const isLoopBody = graph.nodes.some((candidate) => candidate.type === "while" && candidate.body.includes(nodeId));
     const nodeRow = latest === undefined || isLoopBody && latest.status === "completed" ? await this.store.createRunNode({ runId: run2.id, nodeId, lane: node2.lane ?? "claude" }) : latest;
     const memoWatch = node2.memo ? memoWatchFingerprint(graph, this.store.dataDir) : undefined;
-    const memoSource = { command: node2.command, prompt: node2.prompt, context: stripRunState(context) };
+    const memoSource = {
+      command: node2.command,
+      prompt: node2.prompt,
+      context: stripRunState(context),
+      lane: node2.lane ?? "claude",
+      cwd: node2.cwd,
+      codexMode: node2.lane === "codex" ? node2.codexMode ?? "repository" : undefined
+    };
     const memoInput = node2.memo ? memoWatch !== undefined ? { ...memoSource, memoWatch } : memoSource : undefined;
     if (memoInput !== undefined) {
       const hit = await tryMemoHit(this.store, run2.graphName, nodeId, memoInput);
@@ -2094,6 +2135,8 @@ class WorkflowsDaemon {
       lane: node2.lane ?? "claude",
       prompt: node2.prompt,
       command: node2.command,
+      cwd: node2.cwd,
+      codexMode: node2.codexMode,
       timeoutMs: node2.timeoutMs,
       env: this.env
     };
@@ -3283,7 +3326,7 @@ function buildOpenApi(version) {
         ReadinessReport: object({ ok: { type: "boolean" }, service: string, version: string, checks: { type: "object", additionalProperties: string } }),
         GraphValidation: object({ ok: { type: "boolean" }, issues: { type: "array", items: object({ path: string, message: string }) } }),
         StartNode: object({ id: string, type: { type: "string", enum: ["start"] }, next: string }, ["id", "type"]),
-        StepNode: object({ id: string, type: { type: "string", enum: ["step"] }, next: string, lane: { type: "string", enum: ["claude", "codex", "cursor", "grok"] }, prompt: string, command: string, maxRetries: { type: "integer", minimum: 0 }, memo: { type: "boolean" }, timeoutMs: { type: "integer", minimum: 1 } }, ["id", "type"]),
+        StepNode: object({ id: string, type: { type: "string", enum: ["step"] }, next: string, lane: { type: "string", enum: ["claude", "codex", "cursor", "grok"] }, prompt: string, command: string, cwd: { type: "string", minLength: 1 }, codexMode: { type: "string", enum: ["repository", "read-only"], default: "repository", description: "Codex prompt steps only. Read-only permits nonrepository execution with a read-only sandbox and no approvals. Repository retains native trust, sandbox and approval defaults." }, maxRetries: { type: "integer", minimum: 0 }, memo: { type: "boolean" }, timeoutMs: { type: "integer", minimum: 1 } }, ["id", "type"]),
         DecisionNode: object({ id: string, type: { type: "string", enum: ["decision"] }, condition: string, then: string, else: string }, ["id", "type", "condition"]),
         WhileNode: object({ id: string, type: { type: "string", enum: ["while"] }, condition: string, body: { type: "array", items: string }, maxIterations: { type: "integer", minimum: 1 }, next: string }, ["id", "type", "condition", "body", "maxIterations"]),
         EndNode: object({ id: string, type: { type: "string", enum: ["end"] } }),