@hotmeshio/long-tail 0.1.3 → 0.1.5

package/build/services/mcp-runs/execution-builder.js

@@ -1,10 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildExecution = buildExecution;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const hotmesh_utils_1 = require("../hotmesh-utils");
 const enrichment_1 = require("./enrichment");
 const events_1 = require("./events");
+const sql_1 = require("./sql");
 /**
  * Build a complete execution export for a YAML engine workflow job.
  *
@@ -34,8 +35,7 @@ async function loadJobContext(jobId, appId, schema) {
     const jobKey = `hmsh:${appId}:j:${jobId}`;
     const pool = (0, db_1.getPool)();
     const [jobResult, symbolMap] = await Promise.all([
-        pool.query(`SELECT id, key, entity, status, created_at, updated_at, expired_at, is_live
-       FROM ${schema}.jobs WHERE key = $1 LIMIT 1`, [jobKey]),
+        pool.query((0, sql_1.GET_JOB)(schema), [jobKey]),
         (0, hotmesh_utils_1.loadSymbolMap)(schema, appId),
     ]);
     if (jobResult.rows.length === 0) {
@@ -44,10 +44,12 @@ async function loadJobContext(jobId, appId, schema) {
         throw err;
     }
     const job = jobResult.rows[0];
-    const attrRows = await pool.query(`SELECT field, value FROM ${schema}.jobs_attributes WHERE job_id = $1 ORDER BY field`, [job.id]);
+    const attrRows = await pool.query((0, sql_1.GET_JOB_ATTRIBUTES)(schema), [job.id]);
     const rawAttrs = {};
-    for (const row of attrRows.rows)
-        rawAttrs[row.field] = row.value;
+    for (const row of attrRows.rows) {
+        const field = row.dimension ? `${row.symbol}${row.dimension}` : row.symbol;
+        rawAttrs[field] = row.value;
+    }
     const hierarchy = (0, hotmesh_utils_1.restoreHierarchy)((0, hotmesh_utils_1.inflateAttributes)(rawAttrs, symbolMap));
     const meta = hierarchy['metadata'];
     return {

package/build/services/mcp-runs/queries.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.listEntities = listEntities;
 exports.listJobs = listJobs;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const hotmesh_utils_1 = require("../hotmesh-utils");
 const sql_1 = require("./sql");
 /**
@@ -57,7 +57,7 @@ async function listJobs(params) {
     const keyPrefix = `hmsh:${appId}:j:`;
     const [countResult, dataResult] = await Promise.all([
         pool.query((0, sql_1.COUNT_JOBS)(schema, where), values),
-        pool.query((0, sql_1.LIST_JOBS)(schema, where, idx++, idx++), [...values, limit, offset]),
+        pool.query((0, sql_1.LIST_JOBS)(schema, appId, where, idx++, idx++), [...values, limit, offset]),
     ]);
     const jobs = dataResult.rows.map((row) => ({
         workflow_id: row.key.startsWith(keyPrefix) ? row.key.slice(keyPrefix.length) : row.key,

package/build/services/mcp-runs/sql.d.ts

@@ -1,4 +1,7 @@
+export declare const DISTINCT_ENTITIES_DURABLE = "\n  SELECT DISTINCT entity FROM durable.jobs WHERE entity IS NOT NULL AND entity != '' ORDER BY entity";
 export declare const DISTINCT_ENTITIES: (schema: string) => string;
 export declare const ACTIVE_GRAPH_TOPICS = "SELECT DISTINCT graph_topic FROM lt_yaml_workflows WHERE app_id = $1 AND status IN ('active', 'deployed')";
 export declare const COUNT_JOBS: (schema: string, where: string) => string;
-export declare const LIST_JOBS: (schema: string, where: string, limitIdx: number, offsetIdx: number) => string;
+export declare const GET_JOB: (schema: string) => string;
+export declare const GET_JOB_ATTRIBUTES: (schema: string) => string;
+export declare const LIST_JOBS: (schema: string, appId: string, where: string, limitIdx: number, offsetIdx: number) => string;

package/build/services/mcp-runs/sql.js

@@ -3,14 +3,35 @@
 // Schema placeholders (${schema}) are interpolated at call time
 // because Postgres does not support parameterized schema names.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LIST_JOBS = exports.COUNT_JOBS = exports.ACTIVE_GRAPH_TOPICS = exports.DISTINCT_ENTITIES = void 0;
+exports.LIST_JOBS = exports.GET_JOB_ATTRIBUTES = exports.GET_JOB = exports.COUNT_JOBS = exports.ACTIVE_GRAPH_TOPICS = exports.DISTINCT_ENTITIES = exports.DISTINCT_ENTITIES_DURABLE = void 0;
+exports.DISTINCT_ENTITIES_DURABLE = `
+  SELECT DISTINCT entity FROM durable.jobs WHERE entity IS NOT NULL AND entity != '' ORDER BY entity`;
 const DISTINCT_ENTITIES = (schema) => `SELECT DISTINCT entity FROM ${schema}.jobs WHERE entity IS NOT NULL AND entity != '' ORDER BY entity`;
 exports.DISTINCT_ENTITIES = DISTINCT_ENTITIES;
 exports.ACTIVE_GRAPH_TOPICS = `SELECT DISTINCT graph_topic FROM lt_yaml_workflows WHERE app_id = $1 AND status IN ('active', 'deployed')`;
 const COUNT_JOBS = (schema, where) => `SELECT COUNT(*) FROM ${schema}.jobs j ${where}`;
 exports.COUNT_JOBS = COUNT_JOBS;
-const LIST_JOBS = (schema, where, limitIdx, offsetIdx) => `SELECT j.key, j.entity, j.status, j.is_live, j.created_at, j.updated_at
+// ─── Execution builder ──────────────────────────────────────────���───────────
+const GET_JOB = (schema) => `SELECT id, key, entity, status, created_at, updated_at, expired_at, is_live
+   FROM ${schema}.jobs WHERE key = $1 LIMIT 1`;
+exports.GET_JOB = GET_JOB;
+const GET_JOB_ATTRIBUTES = (schema) => `SELECT symbol, dimension, value FROM ${schema}.jobs_attributes WHERE job_id = $1 ORDER BY symbol, dimension`;
+exports.GET_JOB_ATTRIBUTES = GET_JOB_ATTRIBUTES;
+// ─── Queries (queries.ts) ───────────────────────────────────────────────────
+const LIST_JOBS = (schema, appId, where, limitIdx, offsetIdx) => `WITH ju_symbols AS (
+     SELECT value FROM ${schema}.symbols
+     WHERE key LIKE 'hmsh:${appId}:sym:keys:%' AND field = 'metadata/ju'
+   )
+   SELECT j.key, j.entity, j.status, j.is_live, j.created_at,
+     CASE WHEN j.updated_at != j.created_at THEN j.updated_at
+          WHEN ju.value IS NOT NULL THEN to_timestamp(ju.value, 'YYYYMMDDHH24MISS.MS')
+          ELSE j.updated_at
+     END as updated_at
    FROM ${schema}.jobs j
+   LEFT JOIN ${schema}.jobs_attributes ju
+     ON ju.job_id = j.id
+     AND ju.symbol IN (SELECT value FROM ju_symbols)
+     AND (ju.dimension IS NULL OR ju.dimension = '')
    ${where}
    ORDER BY (CASE WHEN j.status > 0 THEN 0 ELSE 1 END), j.created_at DESC
    LIMIT $${limitIdx} OFFSET $${offsetIdx}`;

package/build/services/namespace/index.js

@@ -4,7 +4,7 @@ exports.listNamespaces = listNamespaces;
 exports.getDefaultNamespace = getDefaultNamespace;
 exports.getNamespace = getNamespace;
 exports.registerNamespace = registerNamespace;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const sql_1 = require("./sql");
 /**
  * List all registered namespaces, ordered by default-first then name.

package/build/services/oauth/db.js

@@ -6,43 +6,15 @@ exports.getFreshAccessToken = getFreshAccessToken;
 exports.listOAuthConnections = listOAuthConnections;
 exports.deleteOAuthConnection = deleteOAuthConnection;
 exports.getUserByOAuthProvider = getUserByOAuthProvider;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const crypto_1 = require("./crypto");
 const providers_1 = require("./providers");
 const crud_1 = require("../user/crud");
-// ── SQL ──────────────────────────────────────────────────────────────────────
-const UPSERT_TOKEN = `
-  INSERT INTO lt_oauth_tokens
-    (user_id, provider, label, access_token_enc, refresh_token_enc, token_type, scopes,
-     expires_at, provider_user_id, provider_email, metadata)
-  VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
-  ON CONFLICT (user_id, provider, label) DO UPDATE SET
-    access_token_enc = EXCLUDED.access_token_enc,
-    refresh_token_enc = COALESCE(EXCLUDED.refresh_token_enc, lt_oauth_tokens.refresh_token_enc),
-    token_type = EXCLUDED.token_type,
-    scopes = EXCLUDED.scopes,
-    expires_at = EXCLUDED.expires_at,
-    provider_user_id = EXCLUDED.provider_user_id,
-    provider_email = COALESCE(EXCLUDED.provider_email, lt_oauth_tokens.provider_email),
-    metadata = COALESCE(EXCLUDED.metadata, lt_oauth_tokens.metadata)
-  RETURNING id`;
-const GET_TOKEN = `
-  SELECT * FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = $3`;
-const GET_TOKEN_DEFAULT = `
-  SELECT * FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = 'default'`;
-const LIST_CONNECTIONS = `
-  SELECT provider, label, provider_email, scopes, expires_at, metadata
-  FROM lt_oauth_tokens WHERE user_id = $1 ORDER BY provider, label`;
-const DELETE_TOKEN = `
-  DELETE FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = $3`;
-const DELETE_TOKEN_DEFAULT = `
-  DELETE FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = 'default'`;
-const GET_USER_BY_OAUTH = `
-  SELECT * FROM lt_users WHERE oauth_provider = $1 AND oauth_provider_id = $2`;
+const sql_1 = require("./sql");
 // ── Database operations ──────────────────────────────────────────────────────
 async function upsertOAuthToken(userId, provider, tokens, scopes, providerUserId, providerEmail, metadata, label = 'default') {
     const pool = await (0, db_1.getPool)();
-    const result = await pool.query(UPSERT_TOKEN, [
+    const result = await pool.query(sql_1.UPSERT_TOKEN, [
         userId,
         provider,
         label,
@@ -60,8 +32,8 @@ async function upsertOAuthToken(userId, provider, tokens, scopes, providerUserId
 async function getOAuthToken(userId, provider, label) {
     const pool = await (0, db_1.getPool)();
     const { rows } = label
-        ? await pool.query(GET_TOKEN, [userId, provider, label])
-        : await pool.query(GET_TOKEN_DEFAULT, [userId, provider]);
+        ? await pool.query(sql_1.GET_TOKEN, [userId, provider, label])
+        : await pool.query(sql_1.GET_TOKEN_DEFAULT, [userId, provider]);
     if (rows.length === 0)
         return null;
     const row = rows[0];
@@ -114,7 +86,7 @@ async function getFreshAccessToken(userId, provider, label) {
 }
 async function listOAuthConnections(userId) {
     const pool = await (0, db_1.getPool)();
-    const { rows } = await pool.query(LIST_CONNECTIONS, [userId]);
+    const { rows } = await pool.query(sql_1.LIST_CONNECTIONS, [userId]);
     return rows.map((r) => ({
         provider: r.provider,
         label: r.label,
@@ -127,13 +99,13 @@ async function listOAuthConnections(userId) {
 async function deleteOAuthConnection(userId, provider, label) {
     const pool = await (0, db_1.getPool)();
     const result = label
-        ? await pool.query(DELETE_TOKEN, [userId, provider, label])
-        : await pool.query(DELETE_TOKEN_DEFAULT, [userId, provider]);
+        ? await pool.query(sql_1.DELETE_TOKEN, [userId, provider, label])
+        : await pool.query(sql_1.DELETE_TOKEN_DEFAULT, [userId, provider]);
     return (result.rowCount ?? 0) > 0;
 }
 async function getUserByOAuthProvider(provider, providerUserId) {
     const pool = await (0, db_1.getPool)();
-    const { rows } = await pool.query(GET_USER_BY_OAUTH, [provider, providerUserId]);
+    const { rows } = await pool.query(sql_1.GET_USER_BY_OAUTH, [provider, providerUserId]);
     if (!rows[0])
         return null;
     return (0, crud_1.attachRoles)(rows[0]);

package/build/services/oauth/index.js

@@ -4,7 +4,7 @@ exports.getUserByOAuthProvider = exports.deleteOAuthConnection = exports.listOAu
 exports.initializeOAuth = initializeOAuth;
 const crypto_1 = require("./crypto");
 const providers_1 = require("./providers");
-const logger_1 = require("../logger");
+const logger_1 = require("../../lib/logger");
 var crypto_2 = require("./crypto");
 Object.defineProperty(exports, "encrypt", { enumerable: true, get: function () { return crypto_2.encrypt; } });
 Object.defineProperty(exports, "decrypt", { enumerable: true, get: function () { return crypto_2.decrypt; } });

package/build/services/oauth/providers/registry.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerProvider = registerProvider;
 exports.getProvider = getProvider;
 exports.listProviders = listProviders;
-const logger_1 = require("../../logger");
+const logger_1 = require("../../../lib/logger");
 const anthropic_1 = require("./anthropic");
 const github_1 = require("./github");
 const google_1 = require("./google");

package/build/services/oauth/sql.d.ts

@@ -0,0 +1,7 @@
+export declare const UPSERT_TOKEN = "\n  INSERT INTO lt_oauth_tokens\n    (user_id, provider, label, access_token_enc, refresh_token_enc, token_type, scopes,\n     expires_at, provider_user_id, provider_email, metadata)\n  VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)\n  ON CONFLICT (user_id, provider, label) DO UPDATE SET\n    access_token_enc = EXCLUDED.access_token_enc,\n    refresh_token_enc = COALESCE(EXCLUDED.refresh_token_enc, lt_oauth_tokens.refresh_token_enc),\n    token_type = EXCLUDED.token_type,\n    scopes = EXCLUDED.scopes,\n    expires_at = EXCLUDED.expires_at,\n    provider_user_id = EXCLUDED.provider_user_id,\n    provider_email = COALESCE(EXCLUDED.provider_email, lt_oauth_tokens.provider_email),\n    metadata = COALESCE(EXCLUDED.metadata, lt_oauth_tokens.metadata)\n  RETURNING id";
+export declare const GET_TOKEN = "\n  SELECT * FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = $3";
+export declare const GET_TOKEN_DEFAULT = "\n  SELECT * FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = 'default'";
+export declare const LIST_CONNECTIONS = "\n  SELECT provider, label, provider_email, scopes, expires_at, metadata\n  FROM lt_oauth_tokens WHERE user_id = $1 ORDER BY provider, label";
+export declare const DELETE_TOKEN = "\n  DELETE FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = $3";
+export declare const DELETE_TOKEN_DEFAULT = "\n  DELETE FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = 'default'";
+export declare const GET_USER_BY_OAUTH = "\n  SELECT * FROM lt_users WHERE oauth_provider = $1 AND oauth_provider_id = $2";

package/build/services/oauth/sql.js

@@ -0,0 +1,32 @@
+"use strict";
+// ─── OAuth token CRUD ───────────────────────────────────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET_USER_BY_OAUTH = exports.DELETE_TOKEN_DEFAULT = exports.DELETE_TOKEN = exports.LIST_CONNECTIONS = exports.GET_TOKEN_DEFAULT = exports.GET_TOKEN = exports.UPSERT_TOKEN = void 0;
+exports.UPSERT_TOKEN = `
+  INSERT INTO lt_oauth_tokens
+    (user_id, provider, label, access_token_enc, refresh_token_enc, token_type, scopes,
+     expires_at, provider_user_id, provider_email, metadata)
+  VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
+  ON CONFLICT (user_id, provider, label) DO UPDATE SET
+    access_token_enc = EXCLUDED.access_token_enc,
+    refresh_token_enc = COALESCE(EXCLUDED.refresh_token_enc, lt_oauth_tokens.refresh_token_enc),
+    token_type = EXCLUDED.token_type,
+    scopes = EXCLUDED.scopes,
+    expires_at = EXCLUDED.expires_at,
+    provider_user_id = EXCLUDED.provider_user_id,
+    provider_email = COALESCE(EXCLUDED.provider_email, lt_oauth_tokens.provider_email),
+    metadata = COALESCE(EXCLUDED.metadata, lt_oauth_tokens.metadata)
+  RETURNING id`;
+exports.GET_TOKEN = `
+  SELECT * FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = $3`;
+exports.GET_TOKEN_DEFAULT = `
+  SELECT * FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = 'default'`;
+exports.LIST_CONNECTIONS = `
+  SELECT provider, label, provider_email, scopes, expires_at, metadata
+  FROM lt_oauth_tokens WHERE user_id = $1 ORDER BY provider, label`;
+exports.DELETE_TOKEN = `
+  DELETE FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = $3`;
+exports.DELETE_TOKEN_DEFAULT = `
+  DELETE FROM lt_oauth_tokens WHERE user_id = $1 AND provider = $2 AND label = 'default'`;
+exports.GET_USER_BY_OAUTH = `
+  SELECT * FROM lt_users WHERE oauth_provider = $1 AND oauth_provider_id = $2`;

package/build/services/orchestrator/index.js

@@ -69,13 +69,13 @@ async function executeLT(options) {
     const { ltCreateTask, ltStartTask, ltCompleteTask, ltGetWorkflowConfig, ltGetProviderData, } = hotmesh_1.Durable.workflow.proxyActivities({
         activities: interceptorActivities,
         taskQueue: LT_ACTIVITY_QUEUE,
-        retryPolicy: { maximumAttempts: 3 },
+        retry: { maximumAttempts: 3 },
     });
     // Derive child workflow ID deterministically from the parent context.
     // Combines parent workflowId (globally unique) with the execution
     // counter (unique per step within this workflow) — zero-cost, fully
     // replay-safe, and self-documents its lineage.
-    const ctx = hotmesh_1.Durable.workflow.getContext();
+    const ctx = hotmesh_1.Durable.workflow.workflowInfo();
     const childWorkflowId = options.workflowId || `${workflowName}-${ctx.workflowId}-${ctx.counter}`;
     const signalId = `lt-result-${childWorkflowId}`;
     // Read orchestrator context (set by interceptor wrapping the container)
@@ -142,7 +142,7 @@ async function executeLT(options) {
         entity: workflowName,
     });
     // 6. Wait for the child's interceptor to signal back with the result
-    const result = await hotmesh_1.Durable.workflow.waitFor(signalId);
+    const result = await hotmesh_1.Durable.workflow.condition(signalId);
     // 7. Complete the task — persist result data
     await ltCompleteTask({
         taskId,

package/build/services/role/index.js

@@ -10,7 +10,7 @@ exports.listDistinctRoles = listDistinctRoles;
 exports.listRolesWithDetails = listRolesWithDetails;
 exports.createRole = createRole;
 exports.deleteRole = deleteRole;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const user_1 = require("../user");
 const sql_1 = require("./sql");
 /**

package/build/services/task/crud.js

@@ -7,7 +7,7 @@ exports.getTask = getTask;
 exports.getTaskBySignalId = getTaskBySignalId;
 exports.getTaskByWorkflowId = getTaskByWorkflowId;
 exports.listTasks = listTasks;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const sql_1 = require("./sql");
 async function createTask(input) {
     const pool = (0, db_1.getPool)();

package/build/services/task/process.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.listProcesses = listProcesses;
 exports.getProcessStats = getProcessStats;
 exports.getProcessTasks = getProcessTasks;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const types_1 = require("./types");
 const sql_1 = require("./sql");
 async function listProcesses(filters) {

package/build/services/task/resolve.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveWorkflowHandle = resolveWorkflowHandle;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const registry_1 = require("../workers/registry");
 const sql_1 = require("./sql");
 /**

package/build/services/user/auth.js

@@ -5,7 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.verifyPassword = verifyPassword;
 const bcryptjs_1 = __importDefault(require("bcryptjs"));
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const crud_1 = require("./crud");
 const sql_1 = require("./sql");
 // ─── Password authentication ────────────────────────────────────────────────

package/build/services/user/crud.js

@@ -12,7 +12,7 @@ exports.updateUser = updateUser;
 exports.deleteUser = deleteUser;
 exports.listUsers = listUsers;
 const bcryptjs_1 = __importDefault(require("bcryptjs"));
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const sql_1 = require("./sql");
 // ─── Private helpers (exported for internal use by auth.ts) ──────────────────
 async function attachRoles(user) {

package/build/services/user/rbac.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.isSuperAdmin = isSuperAdmin;
 exports.isGroupAdmin = isGroupAdmin;
 exports.canManageRole = canManageRole;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const roles_1 = require("./roles");
 const sql_1 = require("./sql");
 // ─── RBAC helpers ─────────────────────────────────────────────────────────────

package/build/services/user/roles.js

@@ -6,7 +6,7 @@ exports.removeUserRole = removeUserRole;
 exports.getUserRoles = getUserRoles;
 exports.hasRole = hasRole;
 exports.hasRoleType = hasRoleType;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const sql_1 = require("./sql");
 const types_1 = require("./types");
 // ─── Role management ──────────────────────────────────────────────────────────

package/build/services/user/sql.d.ts

@@ -8,6 +8,8 @@ export declare const INSERT_USER = "INSERT INTO lt_users (external_id, email, di
 export declare const GET_USER_BY_EMAIL = "SELECT * FROM lt_users WHERE email = $1 LIMIT 1";
 export declare const INSERT_USER_ROLE_IGNORE = "INSERT INTO lt_user_roles (user_id, role, type) VALUES ($1, $2, $3)\n   ON CONFLICT DO NOTHING";
 export declare const GET_USER_BY_ID = "SELECT * FROM lt_users WHERE id = $1";
+/** Check if a user exists by id. Lightweight — returns only the id column. */
+export declare const VERIFY_USER_BY_ID = "SELECT id FROM lt_users WHERE id = $1 LIMIT 1";
 /** Fetch user + roles in a single query. Returns one row per role (or one row with nulls if no roles). */
 export declare const GET_USER_WITH_ROLES = "SELECT u.id, u.external_id, u.display_name, u.status, u.metadata,\n          r.role, r.type AS role_type\n   FROM lt_users u\n   LEFT JOIN lt_user_roles r ON r.user_id = u.id\n   WHERE u.external_id = $1\n   ORDER BY r.created_at";
 export declare const DELETE_USER_BY_ID = "DELETE FROM lt_users WHERE id = $1";

package/build/services/user/sql.js

@@ -1,7 +1,7 @@
 "use strict";
 // ─── Shared queries (used by multiple modules) ──────────────────────────────
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IS_GROUP_ADMIN = exports.HAS_ROLE_TYPE = exports.HAS_ROLE = exports.DELETE_USER_ROLE = exports.UPSERT_USER_ROLE = exports.GET_ROLES_BY_USER_IDS = exports.DELETE_USER_BY_ID = exports.GET_USER_WITH_ROLES = exports.GET_USER_BY_ID = exports.INSERT_USER_ROLE_IGNORE = exports.GET_USER_BY_EMAIL = exports.INSERT_USER = exports.GET_USER_BY_EXTERNAL_ID = exports.GET_ROLES_BY_USER_ID = exports.ENSURE_ROLE_EXISTS = void 0;
+exports.IS_GROUP_ADMIN = exports.HAS_ROLE_TYPE = exports.HAS_ROLE = exports.DELETE_USER_ROLE = exports.UPSERT_USER_ROLE = exports.GET_ROLES_BY_USER_IDS = exports.DELETE_USER_BY_ID = exports.GET_USER_WITH_ROLES = exports.VERIFY_USER_BY_ID = exports.GET_USER_BY_ID = exports.INSERT_USER_ROLE_IGNORE = exports.GET_USER_BY_EMAIL = exports.INSERT_USER = exports.GET_USER_BY_EXTERNAL_ID = exports.GET_ROLES_BY_USER_ID = exports.ENSURE_ROLE_EXISTS = void 0;
 /** Ensure a role name exists in the lt_roles lookup table (FK target). */
 exports.ENSURE_ROLE_EXISTS = 'INSERT INTO lt_roles (role) VALUES ($1) ON CONFLICT DO NOTHING';
 /** Fetch roles for a single user, ordered by creation time. */
@@ -16,6 +16,8 @@ exports.GET_USER_BY_EMAIL = `SELECT * FROM lt_users WHERE email = $1 LIMIT 1`;
 exports.INSERT_USER_ROLE_IGNORE = `INSERT INTO lt_user_roles (user_id, role, type) VALUES ($1, $2, $3)
    ON CONFLICT DO NOTHING`;
 exports.GET_USER_BY_ID = 'SELECT * FROM lt_users WHERE id = $1';
+/** Check if a user exists by id. Lightweight — returns only the id column. */
+exports.VERIFY_USER_BY_ID = 'SELECT id FROM lt_users WHERE id = $1 LIMIT 1';
 /** Fetch user + roles in a single query. Returns one row per role (or one row with nulls if no roles). */
 exports.GET_USER_WITH_ROLES = `SELECT u.id, u.external_id, u.display_name, u.status, u.metadata,
           r.role, r.type AS role_type

package/build/services/yaml-workflow/db-utils.js

@@ -4,7 +4,7 @@ exports.parseVersionFromYaml = parseVersionFromYaml;
 exports.updateYamlWorkflowStatus = updateYamlWorkflowStatus;
 exports.listYamlWorkflows = listYamlWorkflows;
 exports.findYamlWorkflowsByTags = findYamlWorkflowsByTags;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const defaults_1 = require("../../modules/defaults");
 const sql_1 = require("./sql");
 /**

package/build/services/yaml-workflow/db.js

@@ -16,7 +16,7 @@ exports.getVersionHistory = getVersionHistory;
 exports.getVersionSnapshot = getVersionSnapshot;
 exports.markContentDeployed = markContentDeployed;
 exports.markAppIdContentDeployed = markAppIdContentDeployed;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const defaults_1 = require("../../modules/defaults");
 const sql_1 = require("./sql");
 const db_utils_1 = require("./db-utils");

package/build/services/yaml-workflow/deployer-helpers.js

@@ -38,7 +38,7 @@ exports.recompileWithContext = recompileWithContext;
 // eslint-disable-next-line @typescript-eslint/no-var-requires
 const yaml = require('js-yaml');
 const defaults_1 = require("../../modules/defaults");
-const logger_1 = require("../logger");
+const logger_1 = require("../../lib/logger");
 const yamlDb = __importStar(require("./db"));
 /**
  * Merge all YAML graphs for an app_id into a single YAML document.

package/build/services/yaml-workflow/deployer.js

@@ -43,10 +43,9 @@ exports.invokeYamlWorkflowSync = invokeYamlWorkflowSync;
 exports.stopEngine = stopEngine;
 exports.stopAllEngines = stopAllEngines;
 const hotmesh_1 = require("@hotmeshio/hotmesh");
-const pg_1 = require("pg");
-const config_1 = require("../../modules/config");
+const db_1 = require("../../lib/db");
 const defaults_1 = require("../../modules/defaults");
-const logger_1 = require("../logger");
+const logger_1 = require("../../lib/logger");
 const namespaceService = __importStar(require("../namespace"));
 const deployer_helpers_1 = require("./deployer-helpers");
 // Re-export helpers so existing `import * from './deployer'` consumers keep working
@@ -64,8 +63,9 @@ async function getEngine(appId) {
         return cached;
     const engine = await hotmesh_1.HotMesh.init({
         appId,
+        guid: `deployer::${appId}-${hotmesh_1.HotMesh.guid()}`,
         engine: {
-            connection: { class: pg_1.Client, options: config_1.postgres_options },
+            connection: (0, db_1.getConnection)(),
         },
     });
     engines.set(appId, engine);

package/build/services/yaml-workflow/generator.js

@@ -96,7 +96,7 @@ async function generateYamlFromExecution(options) {
     ctx = await (0, validate_1.validate)(ctx);
     // 4. Log validation warnings (informational — do not recompile)
     if (ctx.validationIssues.length > 0) {
-        const { loggerRegistry } = await Promise.resolve().then(() => __importStar(require('../logger')));
+        const { loggerRegistry } = await Promise.resolve().then(() => __importStar(require('../../lib/logger')));
         loggerRegistry.warn(`[yaml-workflow] Validation warnings (${ctx.validationIssues.length}): ${ctx.validationIssues.join('; ')}`);
     }
     // 5. Return result

package/build/services/yaml-workflow/input-analyzer-helpers.d.ts

@@ -21,6 +21,7 @@ export interface ExtractedStepLike {
     kind: 'tool' | 'llm';
     toolName: string;
     arguments: Record<string, unknown>;
+    result?: unknown;
 }
 /**
  * Classify a single argument key as dynamic, fixed, or wired.
@@ -29,6 +30,11 @@ export declare function classifyArgument(key: string, value: unknown, _context?:
     stepIndex: number;
     toolName: string;
 }): 'dynamic' | 'fixed' | 'wired';
+/**
+ * Check if an array argument was likely produced by a prior step's result.
+ * Compares the item keys of the argument array against result arrays from prior steps.
+ */
+export declare function isArrayWiredFromPriorStep(value: unknown[], priorSteps: ExtractedStepLike[]): boolean;
 /** Convert a snake_case/camelCase field name to a readable description. */
 export declare function humanize(name: string): string;
 /** Infer a JSON Schema type string from a JS value. */

package/build/services/yaml-workflow/input-analyzer-helpers.js

@@ -8,6 +8,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WIRED_KEYS = exports.FIXED_KEYS = exports.DYNAMIC_KEYS = exports.MAX_DEFAULT_STRING_LENGTH = exports.MAX_DEFAULT_OBJECT_SIZE = exports.MAX_DEFAULT_ARRAY_LENGTH = void 0;
 exports.classifyArgument = classifyArgument;
+exports.isArrayWiredFromPriorStep = isArrayWiredFromPriorStep;
 exports.humanize = humanize;
 exports.inferType = inferType;
 exports.capDefault = capDefault;
@@ -64,15 +65,11 @@ function classifyArgument(key, value, _context) {
             return 'dynamic';
         }
     }
-    // Arrays: complex instruction arrays (like browser steps) are fixed implementation details.
-    // Only flat data arrays (URLs, IDs) that are large should be dynamic.
+    // Arrays of objects are always fixed (structured implementation details)
+    // or wired (from a prior step's output). Never user-provided dynamic inputs.
     if (Array.isArray(value)) {
         if (value.length > 0 && value[0] && typeof value[0] === 'object' && !Array.isArray(value[0])) {
-            // Array of objects — check if it's an instruction array (has 'action', 'step', 'type' keys)
-            const firstItem = value[0];
-            if ('action' in firstItem || 'step' in firstItem || 'type' in firstItem) {
-                return 'fixed'; // Implementation recipe — not user input
-            }
+            return 'fixed';
         }
         if (value.length > exports.MAX_DEFAULT_ARRAY_LENGTH) {
             return 'dynamic';
@@ -99,6 +96,38 @@ function objectContainsDynamicKeys(obj) {
     }
     return false;
 }
+/**
+ * Check if an array argument was likely produced by a prior step's result.
+ * Compares the item keys of the argument array against result arrays from prior steps.
+ */
+function isArrayWiredFromPriorStep(value, priorSteps) {
+    if (value.length === 0 || !value[0] || typeof value[0] !== 'object')
+        return false;
+    const argKeys = new Set(Object.keys(value[0]));
+    if (argKeys.size === 0)
+        return false;
+    for (const step of priorSteps) {
+        if (!step.result || typeof step.result !== 'object')
+            continue;
+        const result = step.result;
+        for (const field of Object.values(result)) {
+            if (!Array.isArray(field) || field.length === 0)
+                continue;
+            const first = field[0];
+            if (!first || typeof first !== 'object')
+                continue;
+            const resultKeys = new Set(Object.keys(first));
+            // If the result array items share keys with the argument array items, it's wired
+            let overlap = 0;
+            for (const k of argKeys)
+                if (resultKeys.has(k))
+                    overlap++;
+            if (overlap >= 2 || (overlap >= 1 && argKeys.size <= 3))
+                return true;
+        }
+    }
+    return false;
+}
 /** Convert a snake_case/camelCase field name to a readable description. */
 function humanize(name) {
     return name

package/build/services/yaml-workflow/input-analyzer.js

@@ -37,6 +37,10 @@ function extractSemanticInputs(steps, originalPrompt) {
             // First occurrence wins
             if (seen.has(key))
                 continue;
+            // Arrays of objects that match a prior step's result are wired, not inputs
+            if (Array.isArray(value) && (0, input_analyzer_helpers_1.isArrayWiredFromPriorStep)(value, steps.slice(0, i))) {
+                continue;
+            }
             const classification = (0, input_analyzer_helpers_1.classifyArgument)(key, value, {
                 stepIndex: i,
                 toolName: step.toolName,
@@ -44,10 +48,19 @@ function extractSemanticInputs(steps, originalPrompt) {
             // Skip wired arguments — they come from step chaining
             if (classification === 'wired')
                 continue;
-            // Flatten nested objects that contain dynamic keys.
-            // e.g., login: { url, username, password } → login_url, username, password
+            // Flatten nested objects that contain dynamic keys — but only if the
+            // dynamic children aren't already captured as top-level args from an
+            // earlier step. If all dynamic children are already seen, treat the
+            // whole object as fixed (structured implementation detail).
             if (classification === 'dynamic' && value && typeof value === 'object' && !Array.isArray(value)) {
-                (0, input_analyzer_helpers_1.flattenDynamicObject)(key, value, i, step.toolName, originalPrompt, seen);
+                const obj = value;
+                const dynamicChildren = Object.keys(obj).filter((k) => (0, input_analyzer_helpers_1.classifyArgument)(k, obj[k], { stepIndex: i, toolName: step.toolName }) === 'dynamic');
+                const allDynamicAlreadySeen = dynamicChildren.length > 0 && dynamicChildren.every((k) => seen.has(k));
+                if (allDynamicAlreadySeen) {
+                    // All dynamic values are already captured — treat as fixed, don't flatten
+                    continue;
+                }
+                (0, input_analyzer_helpers_1.flattenDynamicObject)(key, obj, i, step.toolName, originalPrompt, seen);
                 continue;
             }
             let description = (0, input_analyzer_helpers_1.humanize)(key);

package/build/services/yaml-workflow/pipeline/analyze.js

@@ -54,7 +54,7 @@ async function analyze(ctx) {
     const consecutiveSameServer = ctx.collapsedSteps.filter((s, i) => s.kind === 'tool' && s.mcpServerId &&
         i > 0 && ctx.collapsedSteps[i - 1].mcpServerId === s.mcpServerId);
     if (consecutiveSameServer.length > 0) {
-        const { loggerRegistry } = await Promise.resolve().then(() => __importStar(require('../../logger')));
+        const { loggerRegistry } = await Promise.resolve().then(() => __importStar(require('../../../lib/logger')));
         const serverIds = [...new Set(consecutiveSameServer.map(s => s.mcpServerId))];
         loggerRegistry.info(`[yaml-workflow] hint: ${consecutiveSameServer.length + 1} consecutive same-server steps detected (${serverIds.join(', ')}) — pattern detector may collapse these`);
     }

package/build/services/yaml-workflow/pipeline/build/dag.js

@@ -222,12 +222,17 @@ function extractOutputFields(step) {
     return [];
 }
 function buildJobMaps(stepIdx, totalSteps, outputFields) {
-    if (stepIdx !== totalSteps - 1 || outputFields.length === 0)
+    if (stepIdx !== totalSteps - 1)
         return undefined;
-    return outputFields.reduce((acc, field) => {
-        acc[field] = `{$self.output.data.${field}}`;
-        return acc;
-    }, {});
+    if (outputFields.length > 0) {
+        return outputFields.reduce((acc, field) => {
+            acc[field] = `{$self.output.data.${field}}`;
+            return acc;
+        }, {});
+    }
+    // Final step with no structured output fields (e.g., string result) —
+    // persist the raw response so the workflow result isn't null
+    return { response: '{$self.output.data.response}' };
 }
 function buildManifestEntry(actId, title, step, topic, workflowName, inputMappings, outputFields) {
     const promptTemplate = step.kind === 'llm' && step.promptMessages