@hexabot-ai/types 3.0.2-alpha.8 → 3.0.2-beta.0

package/README.md

@@ -11,7 +11,7 @@ Shared zod-first runtime contracts for Hexabot API entity outputs.
 - `cms`: `ContentType*`, `Content*`, `Menu*`
 - `i18n`: `Language*`, `Translation*`
 - `setting`: `Setting*`, `Metadata*`
-- `user`: `UserProfile*`, `Model*`, `Permission*`, `Role*`, `Credential*`, `User*`
+- `user`: `UserProfile*`, `Model*`, `Permission*`, `Role*`, `Credential*`, `McpToken*`, `User*`
 - `workflow`: `Workflow*`, `WorkflowVersion*`, `WorkflowRun*`, `MemoryDefinition*`, `MemoryRecord*`, `McpServer*`
 - `utils/test/dummy`: `Dummy*`
 - `attachment`: `Attachment*`
@@ -144,6 +144,31 @@ const schema = createWorkflowFullSchema({ parseDefinition });
 const workflow = schema.parse(data);
 ```
 
+## Workflow Transfer Bundles
+
+Workflow import/export contracts are exposed as zod schemas and inferred types:
+
+```ts
+import {
+  workflowExportBundleSchema,
+  workflowImportResultSchema,
+  workflowTransferResourceKindSchema,
+  type WorkflowExportBundleV1,
+  type WorkflowImportResult,
+} from "@hexabot-ai/types";
+```
+
+`workflowExportBundleSchema` validates the portable
+`hexabot.workflow.bundle` YAML payload. Credential resources include metadata
+only; secret `value` fields are intentionally rejected by the strict schema.
+Resource arrays include workflow dependencies such as called workflows, memory
+definitions, MCP servers, credentials, content types, label groups, and labels.
+The root `workflow.exportId` and `resources.workflows` entries preserve
+`call_workflow` references across imports. Newer resource arrays default to
+empty lists so existing version 1 bundles remain importable.
+Extension resource arrays may also be included directly under `resources`; custom
+resource result `kind` values are validated with `workflowTransferResourceKindSchema`.
+
 ## Alias Compatibility
 
 Common ORM alias mappings from legacy class-transformer DTOs are preserved, including:
@@ -163,6 +188,8 @@ Unknown keys are stripped by default.
 - Legacy API enum/type paths can re-export from this package without value changes.
 - Schema parsing preserves nullable/optional normalization used by API entity outputs.
 - Mixed owner/triggeredBy contracts (`Subscriber | User`) are supported in workflow full contracts.
+- Sensitive output parity is preserved for credentials and MCP tokens (`value` and token hashes are not part of output contracts).
+- Workflow run contracts include `parentRun` for call-and-return workflow stacks.
 - Sensitive output parity is preserved for credentials (`value` is not part of output contracts).
 
 ## Breaking-Change Notes

package/dist/cjs/chat/label.js

@@ -19,7 +19,6 @@ const labelAliasMap = {
 const labelStubObjectSchema = base_1.baseStubSchema.extend({
     title: zod_1.z.string(),
     name: zod_1.z.string(),
-    label_id: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).nullable().optional(),
     description: nullableOptionalStringSchema,
     builtin: zod_1.z.coerce.boolean(),
 });

package/dist/cjs/user/index.js

@@ -5,7 +5,7 @@
  * Full terms: see LICENSE.md.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.credentialStubSchema = exports.credentialSchema = exports.credentialFullSchema = exports.permissionStubSchema = exports.permissionSchema = exports.permissionFullSchema = exports.modelStubSchema = exports.modelSchema = exports.modelFullSchema = exports.roleStubSchema = exports.roleSchema = exports.roleFullSchema = exports.userStubSchema = exports.userSchema = exports.userFullSchema = exports.userProfileAssignedStubSchema = exports.userProfileAssignedSchema = exports.userProfileAssignedFullSchema = exports.userProfileStubSchema = exports.userProfileSchema = exports.userProfileFullSchema = exports.MethodToAction = exports.Action = void 0;
+exports.mcpTokenStubSchema = exports.mcpTokenSchema = exports.mcpTokenFullSchema = exports.credentialStubSchema = exports.credentialSchema = exports.credentialFullSchema = exports.permissionStubSchema = exports.permissionSchema = exports.permissionFullSchema = exports.modelStubSchema = exports.modelSchema = exports.modelFullSchema = exports.roleStubSchema = exports.roleSchema = exports.roleFullSchema = exports.userStubSchema = exports.userSchema = exports.userFullSchema = exports.userProfileAssignedStubSchema = exports.userProfileAssignedSchema = exports.userProfileAssignedFullSchema = exports.userProfileStubSchema = exports.userProfileSchema = exports.userProfileFullSchema = exports.MethodToAction = exports.Action = void 0;
 var domain_1 = require("./domain");
 Object.defineProperty(exports, "Action", { enumerable: true, get: function () { return domain_1.Action; } });
 Object.defineProperty(exports, "MethodToAction", { enumerable: true, get: function () { return domain_1.MethodToAction; } });
@@ -37,3 +37,7 @@ var credential_1 = require("./credential");
 Object.defineProperty(exports, "credentialFullSchema", { enumerable: true, get: function () { return credential_1.credentialFullSchema; } });
 Object.defineProperty(exports, "credentialSchema", { enumerable: true, get: function () { return credential_1.credentialSchema; } });
 Object.defineProperty(exports, "credentialStubSchema", { enumerable: true, get: function () { return credential_1.credentialStubSchema; } });
+var mcp_token_1 = require("./mcp-token");
+Object.defineProperty(exports, "mcpTokenFullSchema", { enumerable: true, get: function () { return mcp_token_1.mcpTokenFullSchema; } });
+Object.defineProperty(exports, "mcpTokenSchema", { enumerable: true, get: function () { return mcp_token_1.mcpTokenSchema; } });
+Object.defineProperty(exports, "mcpTokenStubSchema", { enumerable: true, get: function () { return mcp_token_1.mcpTokenStubSchema; } });

package/dist/cjs/user/mcp-token.js

@@ -0,0 +1,31 @@
+"use strict";
+/*
+ * Hexabot — Fair Core License (FCL-1.0-ALv2)
+ * Copyright (c) 2026 Hexastack.
+ * Full terms: see LICENSE.md.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpTokenFullSchema = exports.mcpTokenSchema = exports.mcpTokenStubSchema = void 0;
+const zod_1 = require("zod");
+const aliases_1 = require("../shared/aliases");
+const base_1 = require("../shared/base");
+const preprocess_1 = require("../shared/preprocess");
+const user_1 = require("./user");
+const nullableDateSchema = (0, preprocess_1.preprocess)((value) => (value == null ? null : value), zod_1.z.coerce.date().nullable());
+const mcpTokenAliasMap = {
+    ownerId: "owner",
+};
+const mcpTokenStubObjectSchema = base_1.baseStubSchema.extend({
+    name: zod_1.z.string(),
+    tokenPrefix: zod_1.z.string(),
+    expiresAt: nullableDateSchema,
+    lastUsedAt: nullableDateSchema,
+    revokedAt: nullableDateSchema,
+});
+exports.mcpTokenStubSchema = mcpTokenStubObjectSchema;
+exports.mcpTokenSchema = (0, preprocess_1.preprocess)((value) => (0, aliases_1.withAliases)(value, mcpTokenAliasMap), mcpTokenStubObjectSchema.extend({
+    owner: (0, preprocess_1.preprocess)((value) => (value == null ? null : (0, aliases_1.asId)(value)), zod_1.z.string()),
+}));
+exports.mcpTokenFullSchema = mcpTokenStubObjectSchema.extend({
+    owner: (0, preprocess_1.preprocess)((value) => (value == null ? null : value), zod_1.z.lazy(() => user_1.userSchema).nullable()),
+});

package/dist/cjs/workflow/index.js

@@ -5,7 +5,7 @@
  * Full terms: see LICENSE.md.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.mcpServerStubSchema = exports.mcpServerSchema = exports.mcpServerFullSchema = exports.memoryRecordStubSchema = exports.memoryRecordSchema = exports.memoryRecordFullSchema = exports.memoryDefinitionStubSchema = exports.memoryDefinitionSchema = exports.memoryDefinitionFullSchema = exports.workflowRunStubSchema = exports.workflowRunSchema = exports.workflowRunFullSchema = exports.resolveRunDurationMs = exports.workflowVersionStubSchema = exports.workflowVersionSchema = exports.workflowVersionFullSchema = exports.workflowStubSchema = exports.workflowSchema = exports.workflowFullSchema = exports.createWorkflowFullSchema = exports.WorkflowVersionAction = exports.WorkflowType = exports.MemoryScope = exports.McpServerTransport = exports.DirectionType = void 0;
+exports.workflowTransferResourceKindSchema = exports.workflowImportResultSchema = exports.workflowImportResourceResultSchema = exports.workflowImportResourceActionSchema = exports.workflowExportBundleWorkflowDependencySchema = exports.workflowExportBundleV1Schema = exports.workflowExportBundleSchema = exports.workflowExportBundleMemoryDefinitionSchema = exports.workflowExportBundleMcpServerSchema = exports.workflowExportBundleLabelSchema = exports.workflowExportBundleLabelGroupSchema = exports.workflowExportBundleCredentialSchema = exports.workflowExportBundleContentTypeSchema = exports.WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN = exports.WORKFLOW_EXPORT_BUNDLE_KIND = exports.mcpServerStubSchema = exports.mcpServerSchema = exports.mcpServerFullSchema = exports.memoryRecordStubSchema = exports.memoryRecordSchema = exports.memoryRecordFullSchema = exports.memoryDefinitionStubSchema = exports.memoryDefinitionSchema = exports.memoryDefinitionFullSchema = exports.workflowRunStubSchema = exports.workflowRunSchema = exports.workflowRunFullSchema = exports.resolveRunDurationMs = exports.workflowVersionStubSchema = exports.workflowVersionSchema = exports.workflowVersionFullSchema = exports.workflowStubSchema = exports.workflowSchema = exports.workflowFullSchema = exports.createWorkflowFullSchema = exports.WorkflowVersionAction = exports.WorkflowType = exports.MemoryScope = exports.McpServerTransport = exports.DirectionType = void 0;
 var domain_1 = require("./domain");
 Object.defineProperty(exports, "DirectionType", { enumerable: true, get: function () { return domain_1.DirectionType; } });
 Object.defineProperty(exports, "McpServerTransport", { enumerable: true, get: function () { return domain_1.McpServerTransport; } });
@@ -38,3 +38,19 @@ var mcp_server_1 = require("./mcp-server");
 Object.defineProperty(exports, "mcpServerFullSchema", { enumerable: true, get: function () { return mcp_server_1.mcpServerFullSchema; } });
 Object.defineProperty(exports, "mcpServerSchema", { enumerable: true, get: function () { return mcp_server_1.mcpServerSchema; } });
 Object.defineProperty(exports, "mcpServerStubSchema", { enumerable: true, get: function () { return mcp_server_1.mcpServerStubSchema; } });
+var workflow_transfer_1 = require("./workflow-transfer");
+Object.defineProperty(exports, "WORKFLOW_EXPORT_BUNDLE_KIND", { enumerable: true, get: function () { return workflow_transfer_1.WORKFLOW_EXPORT_BUNDLE_KIND; } });
+Object.defineProperty(exports, "WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN", { enumerable: true, get: function () { return workflow_transfer_1.WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN; } });
+Object.defineProperty(exports, "workflowExportBundleContentTypeSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleContentTypeSchema; } });
+Object.defineProperty(exports, "workflowExportBundleCredentialSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleCredentialSchema; } });
+Object.defineProperty(exports, "workflowExportBundleLabelGroupSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleLabelGroupSchema; } });
+Object.defineProperty(exports, "workflowExportBundleLabelSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleLabelSchema; } });
+Object.defineProperty(exports, "workflowExportBundleMcpServerSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleMcpServerSchema; } });
+Object.defineProperty(exports, "workflowExportBundleMemoryDefinitionSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleMemoryDefinitionSchema; } });
+Object.defineProperty(exports, "workflowExportBundleSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleSchema; } });
+Object.defineProperty(exports, "workflowExportBundleV1Schema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleV1Schema; } });
+Object.defineProperty(exports, "workflowExportBundleWorkflowDependencySchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowExportBundleWorkflowDependencySchema; } });
+Object.defineProperty(exports, "workflowImportResourceActionSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowImportResourceActionSchema; } });
+Object.defineProperty(exports, "workflowImportResourceResultSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowImportResourceResultSchema; } });
+Object.defineProperty(exports, "workflowImportResultSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowImportResultSchema; } });
+Object.defineProperty(exports, "workflowTransferResourceKindSchema", { enumerable: true, get: function () { return workflow_transfer_1.workflowTransferResourceKindSchema; } });

package/dist/cjs/workflow/workflow-run.js

@@ -50,6 +50,7 @@ const workflowRunAliasMap = {
     workflowVersionId: "workflowVersion",
     triggeredById: "triggeredBy",
     threadId: "thread",
+    parentRunId: "parentRun",
 };
 const workflowRunStubObjectSchema = base_1.baseStubSchema.extend({
     status: workflowRunStatusSchema,
@@ -88,6 +89,7 @@ exports.workflowRunSchema = (0, preprocess_1.preprocess)((value) => (0, aliases_
     workflow: (0, preprocess_1.preprocess)((value) => (value == null ? null : (0, aliases_1.asId)(value)), zod_1.z.string()),
     workflowVersion: (0, preprocess_1.preprocess)((value) => (value == null ? null : (0, aliases_1.asId)(value)), zod_1.z.string().nullable()),
     triggeredBy: (0, preprocess_1.preprocess)((value) => (value == null ? null : (0, aliases_1.asId)(value)), zod_1.z.string().nullable()),
+    parentRun: (0, preprocess_1.preprocess)((value) => (value == null ? null : (0, aliases_1.asId)(value)), zod_1.z.string().nullable()),
 }));
 exports.workflowRunFullSchema = (0, preprocess_1.preprocess)((value) => withWorkflowRunDuration(value), workflowRunStubObjectSchema.extend({
     workflow: workflow_1.workflowSchema,
@@ -97,4 +99,8 @@ exports.workflowRunFullSchema = (0, preprocess_1.preprocess)((value) => withWork
         .optional(),
     triggeredBy: nullableUserOrSubscriberSchema,
     thread: thread_1.threadSchema.nullable().optional(),
+    parentRun: zod_1.z
+        .lazy(() => exports.workflowRunSchema)
+        .nullable()
+        .optional(),
 }));

package/dist/cjs/workflow/workflow-transfer.js

@@ -0,0 +1,124 @@
+"use strict";
+/*
+ * Hexabot — Fair Core License (FCL-1.0-ALv2)
+ * Copyright (c) 2026 Hexastack.
+ * Full terms: see LICENSE.md.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.workflowImportResultSchema = exports.workflowImportResourceResultSchema = exports.workflowImportResourceActionSchema = exports.workflowExportBundleSchema = exports.workflowExportBundleV1Schema = exports.workflowExportBundleWorkflowDependencySchema = exports.workflowExportBundleLabelSchema = exports.workflowExportBundleLabelGroupSchema = exports.workflowExportBundleContentTypeSchema = exports.workflowExportBundleMcpServerSchema = exports.workflowExportBundleCredentialSchema = exports.workflowExportBundleMemoryDefinitionSchema = exports.workflowTransferResourceKindSchema = exports.WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN = exports.WORKFLOW_EXPORT_BUNDLE_KIND = void 0;
+const zod_1 = require("zod");
+const domain_1 = require("./domain");
+const workflow_1 = require("./workflow");
+exports.WORKFLOW_EXPORT_BUNDLE_KIND = "hexabot.workflow.bundle";
+exports.WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN = /^[a-z][A-Za-z0-9]*(?:[._-][A-Za-z0-9]+)*$/;
+exports.workflowTransferResourceKindSchema = zod_1.z
+    .string()
+    .min(1)
+    .regex(exports.WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN);
+const workflowExportBundleLayoutSchema = zod_1.z.strictObject({
+    x: zod_1.z.coerce.number(),
+    y: zod_1.z.coerce.number(),
+    zoom: zod_1.z.coerce.number(),
+    direction: domain_1.directionTypeSchema,
+});
+const workflowExportBundleWorkflowSchema = zod_1.z.strictObject({
+    exportId: zod_1.z.string().min(1).optional(),
+    name: zod_1.z.string().min(1),
+    description: zod_1.z.string().nullable(),
+    type: domain_1.workflowTypeSchema,
+    schedule: zod_1.z.string().nullable(),
+    inputSchema: zod_1.z.any(),
+    layout: workflowExportBundleLayoutSchema,
+});
+const workflowExportBundleVersionSchema = zod_1.z.strictObject({
+    number: zod_1.z.coerce.number(),
+    checksum: zod_1.z.string(),
+    message: zod_1.z.string().nullable(),
+    exportedVersionId: zod_1.z.string().min(1),
+});
+exports.workflowExportBundleMemoryDefinitionSchema = zod_1.z.strictObject({
+    exportId: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1),
+    slug: zod_1.z.string().min(1),
+    scope: domain_1.memoryScopeSchema,
+    schema: zod_1.z.any(),
+    ttlSeconds: zod_1.z.coerce.number().nullable().optional(),
+});
+exports.workflowExportBundleCredentialSchema = zod_1.z.strictObject({
+    exportId: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1),
+    exportedOwnerId: zod_1.z.string().optional(),
+});
+exports.workflowExportBundleMcpServerSchema = zod_1.z.strictObject({
+    exportId: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1),
+    enabled: zod_1.z.coerce.boolean(),
+    transport: domain_1.mcpServerTransportSchema,
+    url: zod_1.z.string().nullable(),
+    command: zod_1.z.string().nullable(),
+    args: zod_1.z.array(zod_1.z.string()).nullable(),
+    cwd: zod_1.z.string().nullable(),
+    credentialExportId: zod_1.z.string().nullable().optional(),
+});
+exports.workflowExportBundleContentTypeSchema = zod_1.z.strictObject({
+    exportId: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1),
+    schema: zod_1.z.any(),
+});
+exports.workflowExportBundleLabelGroupSchema = zod_1.z.strictObject({
+    exportId: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1),
+});
+exports.workflowExportBundleLabelSchema = zod_1.z.strictObject({
+    exportId: zod_1.z.string().min(1),
+    title: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1),
+    description: zod_1.z.string().nullable(),
+    groupExportId: zod_1.z.string().nullable(),
+});
+exports.workflowExportBundleWorkflowDependencySchema = zod_1.z.strictObject({
+    exportId: zod_1.z.string().min(1),
+    workflow: workflowExportBundleWorkflowSchema.omit({ exportId: true }),
+    version: workflowExportBundleVersionSchema,
+    definitionYml: zod_1.z.string().min(1),
+});
+const workflowExportBundleResourcesSchema = zod_1.z
+    .object({
+    memoryDefinitions: zod_1.z.array(exports.workflowExportBundleMemoryDefinitionSchema),
+    mcpServers: zod_1.z.array(exports.workflowExportBundleMcpServerSchema),
+    credentials: zod_1.z.array(exports.workflowExportBundleCredentialSchema),
+    contentTypes: zod_1.z.array(exports.workflowExportBundleContentTypeSchema).default([]),
+    labelGroups: zod_1.z.array(exports.workflowExportBundleLabelGroupSchema).default([]),
+    labels: zod_1.z.array(exports.workflowExportBundleLabelSchema).default([]),
+    workflows: zod_1.z
+        .array(exports.workflowExportBundleWorkflowDependencySchema)
+        .default([]),
+})
+    .catchall(zod_1.z.array(zod_1.z.unknown()));
+exports.workflowExportBundleV1Schema = zod_1.z.strictObject({
+    kind: zod_1.z.literal(exports.WORKFLOW_EXPORT_BUNDLE_KIND),
+    schemaVersion: zod_1.z.literal(1),
+    exportedAt: zod_1.z.iso.datetime(),
+    workflow: workflowExportBundleWorkflowSchema,
+    version: workflowExportBundleVersionSchema,
+    definitionYml: zod_1.z.string().min(1),
+    resources: workflowExportBundleResourcesSchema,
+});
+exports.workflowExportBundleSchema = exports.workflowExportBundleV1Schema;
+exports.workflowImportResourceActionSchema = zod_1.z.enum([
+    "created",
+    "reused",
+    "placeholder_created",
+]);
+exports.workflowImportResourceResultSchema = zod_1.z.strictObject({
+    kind: exports.workflowTransferResourceKindSchema,
+    exportId: zod_1.z.string().min(1),
+    localId: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1),
+    action: exports.workflowImportResourceActionSchema,
+});
+exports.workflowImportResultSchema = zod_1.z.strictObject({
+    workflow: workflow_1.workflowSchema,
+    resources: zod_1.z.array(exports.workflowImportResourceResultSchema),
+    warnings: zod_1.z.array(zod_1.z.string()),
+});

package/dist/esm/chat/label.js

@@ -16,7 +16,6 @@ const labelAliasMap = {
 const labelStubObjectSchema = baseStubSchema.extend({
     title: z.string(),
     name: z.string(),
-    label_id: z.record(z.string(), z.unknown()).nullable().optional(),
     description: nullableOptionalStringSchema,
     builtin: z.coerce.boolean(),
 });

package/dist/esm/user/index.js

@@ -11,3 +11,4 @@ export { roleFullSchema, roleSchema, roleStubSchema, } from "./role";
 export { modelFullSchema, modelSchema, modelStubSchema, } from "./model";
 export { permissionFullSchema, permissionSchema, permissionStubSchema, } from "./permission";
 export { credentialFullSchema, credentialSchema, credentialStubSchema, } from "./credential";
+export { mcpTokenFullSchema, mcpTokenSchema, mcpTokenStubSchema, } from "./mcp-token";

package/dist/esm/user/mcp-token.js

@@ -0,0 +1,28 @@
+/*
+ * Hexabot — Fair Core License (FCL-1.0-ALv2)
+ * Copyright (c) 2026 Hexastack.
+ * Full terms: see LICENSE.md.
+ */
+import { z } from "zod";
+import { asId, withAliases } from "../shared/aliases";
+import { baseStubSchema } from "../shared/base";
+import { preprocess } from "../shared/preprocess";
+import { userSchema } from "./user";
+const nullableDateSchema = preprocess((value) => (value == null ? null : value), z.coerce.date().nullable());
+const mcpTokenAliasMap = {
+    ownerId: "owner",
+};
+const mcpTokenStubObjectSchema = baseStubSchema.extend({
+    name: z.string(),
+    tokenPrefix: z.string(),
+    expiresAt: nullableDateSchema,
+    lastUsedAt: nullableDateSchema,
+    revokedAt: nullableDateSchema,
+});
+export const mcpTokenStubSchema = mcpTokenStubObjectSchema;
+export const mcpTokenSchema = preprocess((value) => withAliases(value, mcpTokenAliasMap), mcpTokenStubObjectSchema.extend({
+    owner: preprocess((value) => (value == null ? null : asId(value)), z.string()),
+}));
+export const mcpTokenFullSchema = mcpTokenStubObjectSchema.extend({
+    owner: preprocess((value) => (value == null ? null : value), z.lazy(() => userSchema).nullable()),
+});

package/dist/esm/workflow/index.js

@@ -10,3 +10,4 @@ export { resolveRunDurationMs, workflowRunFullSchema, workflowRunSchema, workflo
 export { memoryDefinitionFullSchema, memoryDefinitionSchema, memoryDefinitionStubSchema, } from "./memory-definition";
 export { memoryRecordFullSchema, memoryRecordSchema, memoryRecordStubSchema, } from "./memory-record";
 export { mcpServerFullSchema, mcpServerSchema, mcpServerStubSchema, } from "./mcp-server";
+export { WORKFLOW_EXPORT_BUNDLE_KIND, WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN, workflowExportBundleContentTypeSchema, workflowExportBundleCredentialSchema, workflowExportBundleLabelGroupSchema, workflowExportBundleLabelSchema, workflowExportBundleMcpServerSchema, workflowExportBundleMemoryDefinitionSchema, workflowExportBundleSchema, workflowExportBundleV1Schema, workflowExportBundleWorkflowDependencySchema, workflowImportResourceActionSchema, workflowImportResourceResultSchema, workflowImportResultSchema, workflowTransferResourceKindSchema, } from "./workflow-transfer";

package/dist/esm/workflow/workflow-run.js

@@ -46,6 +46,7 @@ const workflowRunAliasMap = {
     workflowVersionId: "workflowVersion",
     triggeredById: "triggeredBy",
     threadId: "thread",
+    parentRunId: "parentRun",
 };
 const workflowRunStubObjectSchema = baseStubSchema.extend({
     status: workflowRunStatusSchema,
@@ -84,6 +85,7 @@ export const workflowRunSchema = preprocess((value) => withAliases(withWorkflowR
     workflow: preprocess((value) => (value == null ? null : asId(value)), z.string()),
     workflowVersion: preprocess((value) => (value == null ? null : asId(value)), z.string().nullable()),
     triggeredBy: preprocess((value) => (value == null ? null : asId(value)), z.string().nullable()),
+    parentRun: preprocess((value) => (value == null ? null : asId(value)), z.string().nullable()),
 }));
 export const workflowRunFullSchema = preprocess((value) => withWorkflowRunDuration(value), workflowRunStubObjectSchema.extend({
     workflow: workflowSchema,
@@ -93,4 +95,8 @@ export const workflowRunFullSchema = preprocess((value) => withWorkflowRunDurati
         .optional(),
     triggeredBy: nullableUserOrSubscriberSchema,
     thread: threadSchema.nullable().optional(),
+    parentRun: z
+        .lazy(() => workflowRunSchema)
+        .nullable()
+        .optional(),
 }));

package/dist/esm/workflow/workflow-transfer.js

@@ -0,0 +1,121 @@
+/*
+ * Hexabot — Fair Core License (FCL-1.0-ALv2)
+ * Copyright (c) 2026 Hexastack.
+ * Full terms: see LICENSE.md.
+ */
+import { z } from "zod";
+import { directionTypeSchema, mcpServerTransportSchema, memoryScopeSchema, workflowTypeSchema, } from "./domain";
+import { workflowSchema } from "./workflow";
+export const WORKFLOW_EXPORT_BUNDLE_KIND = "hexabot.workflow.bundle";
+export const WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN = /^[a-z][A-Za-z0-9]*(?:[._-][A-Za-z0-9]+)*$/;
+export const workflowTransferResourceKindSchema = z
+    .string()
+    .min(1)
+    .regex(WORKFLOW_TRANSFER_RESOURCE_KIND_PATTERN);
+const workflowExportBundleLayoutSchema = z.strictObject({
+    x: z.coerce.number(),
+    y: z.coerce.number(),
+    zoom: z.coerce.number(),
+    direction: directionTypeSchema,
+});
+const workflowExportBundleWorkflowSchema = z.strictObject({
+    exportId: z.string().min(1).optional(),
+    name: z.string().min(1),
+    description: z.string().nullable(),
+    type: workflowTypeSchema,
+    schedule: z.string().nullable(),
+    inputSchema: z.any(),
+    layout: workflowExportBundleLayoutSchema,
+});
+const workflowExportBundleVersionSchema = z.strictObject({
+    number: z.coerce.number(),
+    checksum: z.string(),
+    message: z.string().nullable(),
+    exportedVersionId: z.string().min(1),
+});
+export const workflowExportBundleMemoryDefinitionSchema = z.strictObject({
+    exportId: z.string().min(1),
+    name: z.string().min(1),
+    slug: z.string().min(1),
+    scope: memoryScopeSchema,
+    schema: z.any(),
+    ttlSeconds: z.coerce.number().nullable().optional(),
+});
+export const workflowExportBundleCredentialSchema = z.strictObject({
+    exportId: z.string().min(1),
+    name: z.string().min(1),
+    exportedOwnerId: z.string().optional(),
+});
+export const workflowExportBundleMcpServerSchema = z.strictObject({
+    exportId: z.string().min(1),
+    name: z.string().min(1),
+    enabled: z.coerce.boolean(),
+    transport: mcpServerTransportSchema,
+    url: z.string().nullable(),
+    command: z.string().nullable(),
+    args: z.array(z.string()).nullable(),
+    cwd: z.string().nullable(),
+    credentialExportId: z.string().nullable().optional(),
+});
+export const workflowExportBundleContentTypeSchema = z.strictObject({
+    exportId: z.string().min(1),
+    name: z.string().min(1),
+    schema: z.any(),
+});
+export const workflowExportBundleLabelGroupSchema = z.strictObject({
+    exportId: z.string().min(1),
+    name: z.string().min(1),
+});
+export const workflowExportBundleLabelSchema = z.strictObject({
+    exportId: z.string().min(1),
+    title: z.string().min(1),
+    name: z.string().min(1),
+    description: z.string().nullable(),
+    groupExportId: z.string().nullable(),
+});
+export const workflowExportBundleWorkflowDependencySchema = z.strictObject({
+    exportId: z.string().min(1),
+    workflow: workflowExportBundleWorkflowSchema.omit({ exportId: true }),
+    version: workflowExportBundleVersionSchema,
+    definitionYml: z.string().min(1),
+});
+const workflowExportBundleResourcesSchema = z
+    .object({
+    memoryDefinitions: z.array(workflowExportBundleMemoryDefinitionSchema),
+    mcpServers: z.array(workflowExportBundleMcpServerSchema),
+    credentials: z.array(workflowExportBundleCredentialSchema),
+    contentTypes: z.array(workflowExportBundleContentTypeSchema).default([]),
+    labelGroups: z.array(workflowExportBundleLabelGroupSchema).default([]),
+    labels: z.array(workflowExportBundleLabelSchema).default([]),
+    workflows: z
+        .array(workflowExportBundleWorkflowDependencySchema)
+        .default([]),
+})
+    .catchall(z.array(z.unknown()));
+export const workflowExportBundleV1Schema = z.strictObject({
+    kind: z.literal(WORKFLOW_EXPORT_BUNDLE_KIND),
+    schemaVersion: z.literal(1),
+    exportedAt: z.iso.datetime(),
+    workflow: workflowExportBundleWorkflowSchema,
+    version: workflowExportBundleVersionSchema,
+    definitionYml: z.string().min(1),
+    resources: workflowExportBundleResourcesSchema,
+});
+export const workflowExportBundleSchema = workflowExportBundleV1Schema;
+export const workflowImportResourceActionSchema = z.enum([
+    "created",
+    "reused",
+    "placeholder_created",
+]);
+export const workflowImportResourceResultSchema = z.strictObject({
+    kind: workflowTransferResourceKindSchema,
+    exportId: z.string().min(1),
+    localId: z.string().min(1),
+    name: z.string().min(1),
+    action: workflowImportResourceActionSchema,
+});
+export const workflowImportResultSchema = z.strictObject({
+    workflow: workflowSchema,
+    resources: z.array(workflowImportResourceResultSchema),
+    warnings: z.array(z.string()),
+});

package/dist/types/chat/label-group.d.ts

@@ -24,7 +24,6 @@ export declare const labelGroupFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;
@@ -35,7 +34,6 @@ export declare const labelGroupFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;

package/dist/types/chat/label-group.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"label-group.d.ts","sourceRoot":"","sources":["../../../src/chat/label-group.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,oBAAoB;;;;;iBAAyB,CAAC;AAE3D,eAAO,MAAM,gBAAgB;;;;;;iBAE3B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"label-group.d.ts","sourceRoot":"","sources":["../../../src/chat/label-group.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,oBAAoB;;;;;iBAAyB,CAAC;AAE3D,eAAO,MAAM,gBAAgB;;;;;;iBAE3B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/types/chat/label.d.ts

@@ -5,7 +5,6 @@ export declare const labelStubSchema: z.ZodObject<{
     updatedAt: z.ZodCoercedDate<unknown>;
     title: z.ZodString;
     name: z.ZodString;
-    label_id: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     builtin: z.ZodCoercedBoolean<unknown>;
 }, z.core.$strip>;
@@ -16,7 +15,6 @@ export declare const labelSchema: z.ZodType<{
     title: string;
     name: string;
     builtin: boolean;
-    label_id?: Record<string, unknown> | null | undefined;
     description?: string | null | undefined;
     group?: string | null | undefined;
     users?: undefined;
@@ -27,7 +25,6 @@ export declare const labelSchema: z.ZodType<{
     title: string;
     name: string;
     builtin: boolean;
-    label_id?: Record<string, unknown> | null | undefined;
     description?: string | null | undefined;
     group?: string | null | undefined;
     users?: undefined;
@@ -38,7 +35,6 @@ export declare const labelFullSchema: z.ZodObject<{
     updatedAt: z.ZodCoercedDate<unknown>;
     title: z.ZodString;
     name: z.ZodString;
-    label_id: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     builtin: z.ZodCoercedBoolean<unknown>;
     users: z.ZodOptional<z.ZodType<{

package/dist/types/chat/label.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"label.d.ts","sourceRoot":"","sources":["../../../src/chat/label.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAqBxB,eAAO,MAAM,eAAe;;;;;;;;;iBAAwB,CAAC;AAErD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;YASvB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}
+{"version":3,"file":"label.d.ts","sourceRoot":"","sources":["../../../src/chat/label.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,eAAO,MAAM,eAAe;;;;;;;;iBAAwB,CAAC;AAErD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;YASvB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/types/chat/subscriber.d.ts

@@ -98,7 +98,6 @@ export declare const subscriberFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;
@@ -109,7 +108,6 @@ export declare const subscriberFullSchema: z.ZodObject<{
         title: string;
         name: string;
         builtin: boolean;
-        label_id?: Record<string, unknown> | null | undefined;
         description?: string | null | undefined;
         group?: string | null | undefined;
         users?: undefined;

package/dist/types/chat/subscriber.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscriber.d.ts","sourceRoot":"","sources":["../../../src/chat/subscriber.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;iBAAuB,CAAC;AAEzD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAG5B,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"subscriber.d.ts","sourceRoot":"","sources":["../../../src/chat/subscriber.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;iBAAuB,CAAC;AAEzD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAG5B,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/types/user/index.d.ts

@@ -6,4 +6,5 @@ export { roleFullSchema, roleSchema, roleStubSchema, type Role, type RoleFull, t
 export { modelFullSchema, modelSchema, modelStubSchema, type Model, type ModelFull, type ModelStub, } from "./model";
 export { permissionFullSchema, permissionSchema, permissionStubSchema, type Permission, type PermissionFull, type PermissionStub, } from "./permission";
 export { credentialFullSchema, credentialSchema, credentialStubSchema, type Credential, type CredentialFull, type CredentialStub, } from "./credential";
+export { mcpTokenFullSchema, mcpTokenSchema, mcpTokenStubSchema, type McpToken, type McpTokenFull, type McpTokenStub, } from "./mcp-token";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/user/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/user/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,MAAM,EACN,cAAc,EACd,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,KAAK,SAAS,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,YAAY,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,KAAK,IAAI,EACT,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,KAAK,IAAI,EACT,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,eAAe,EACf,WAAW,EACX,eAAe,EACf,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/user/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,MAAM,EACN,cAAc,EACd,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,KAAK,SAAS,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,YAAY,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,KAAK,IAAI,EACT,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,cAAc,EACd,UAAU,EACV,cAAc,EACd,KAAK,IAAI,EACT,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,eAAe,EACf,WAAW,EACX,eAAe,EACf,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC"}