@hotmeshio/long-tail 0.10.2 → 0.10.4

package/build/shared/form-validation/x-lt-help.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HELP_DOMAINS = void 0;
+exports.interpolateHelp = interpolateHelp;
+exports.resolveHelpSource = resolveHelpSource;
+exports.buildHelpMarkdown = buildHelpMarkdown;
+exports.defaultHelpMarkdown = defaultHelpMarkdown;
+/**
+ * x-lt-help — the form's guidance content, rendered in the side panel beside
+ * the resolve form. A form_schema may declare schema-level `x-lt-help`: a
+ * markdown string whose `{{domain.path}}` tokens interpolate values from the
+ * escalation surface, so help text can reference the live record:
+ *
+ *   {{escalation.role}}                        — any column on the escalation row
+ *   {{metadata.schema_version}}                — the row's metadata dict
+ *   {{envelope.formDefaults.customer.name}}    — the workflow-sent input envelope
+ *   {{payload.category}}                       — the escalation context payload
+ *   {{resolver.notes}}                         — the submitted resolver payload
+ *
+ * Paths reuse the x-lt-bind syntax (`a.b[0].c`). A missing value renders as an
+ * em dash. `x-lt-context` is accepted as the plain-text fallback source when
+ * `x-lt-help` is absent.
+ */
+const x_lt_bind_1 = require("./x-lt-bind");
+/** The token domains a help template may reference. */
+exports.HELP_DOMAINS = ['escalation', 'metadata', 'envelope', 'payload', 'resolver'];
+const TOKEN_PATTERN = /\{\{\s*([^{}]+?)\s*\}\}/g;
+const MISSING_VALUE = '—';
+function formatTokenValue(value) {
+    if (value === undefined || value === null)
+        return MISSING_VALUE;
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return String(value);
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return MISSING_VALUE;
+    }
+}
+/** Replace every `{{domain.path}}` token with its value from the context. */
+function interpolateHelp(template, ctx) {
+    return template.replace(TOKEN_PATTERN, (_match, rawPath) => {
+        const dot = rawPath.indexOf('.');
+        const domain = (dot === -1 ? rawPath : rawPath.slice(0, dot));
+        if (!exports.HELP_DOMAINS.includes(domain))
+            return MISSING_VALUE;
+        const root = ctx[domain];
+        if (dot === -1)
+            return formatTokenValue(root);
+        try {
+            return formatTokenValue((0, x_lt_bind_1.getDeep)(root, rawPath.slice(dot + 1)));
+        }
+        catch {
+            return MISSING_VALUE;
+        }
+    });
+}
+/** The schema's help source: `x-lt-help` first, `x-lt-context` as fallback. */
+function resolveHelpSource(schema) {
+    const help = schema?.['x-lt-help'];
+    if (typeof help === 'string' && help.trim().length > 0)
+        return help;
+    const context = schema?.['x-lt-context'];
+    if (typeof context === 'string' && context.trim().length > 0)
+        return context;
+    return null;
+}
+/** The schema's help content, interpolated. Null when the schema declares none. */
+function buildHelpMarkdown(schema, ctx) {
+    const source = resolveHelpSource(schema);
+    return source ? interpolateHelp(source, ctx) : null;
+}
+/**
+ * State-aware guidance shown when the schema carries no help content — the
+ * panel always tells the user what this page expects of them right now.
+ */
+function defaultHelpMarkdown({ isTerminal, status, claimed, claimedByMe }) {
+    if (isTerminal) {
+        return status === 'cancelled'
+            ? 'This escalation was cancelled. The record is shown for reference.'
+            : 'This escalation has been resolved. The submitted form is shown for reference.';
+    }
+    if (claimedByMe)
+        return 'You have claimed this escalation. Fill out the form and submit to resolve it.';
+    if (claimed)
+        return 'Another user has claimed this escalation. It unlocks if their claim expires or is released.';
+    return 'Claim this escalation to enable the form.';
+}

package/build/shared/form-validation/x-lt-show-if.d.ts

@@ -0,0 +1,7 @@
+import { type HelpTokenContext } from './x-lt-help';
+export type ShowIfContext = HelpTokenContext;
+/**
+ * Evaluates an x-lt-showIf condition. Returns true when the field should be
+ * shown. Returns true when condition is absent, non-string, or context is null.
+ */
+export declare function evaluateShowIf(condition: unknown, ctx: ShowIfContext | null | undefined): boolean;

package/build/shared/form-validation/x-lt-show-if.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateShowIf = evaluateShowIf;
+/**
+ * x-lt-showIf — conditional field visibility. A form_schema property may
+ * declare `x-lt-showIf: "domain.path"` to show the field only when the value
+ * at that path is present and truthy. Prefix `!` to invert: show when absent
+ * or falsy.
+ *
+ * Equality forms compare the resolved value's string form:
+ *   "domain.path=VALUE"   — show when String(value) equals VALUE
+ *   "domain.path!=VALUE"  — show when it does not
+ * An absent value compares as the empty string, so `=X` is false and `!=X` is
+ * true when the path is missing. VALUE is the raw remainder after the operator
+ * (trimmed; no quoting). The truthy/! forms are unchanged.
+ *
+ * Domains follow the same `domain.path` convention as x-lt-help tokens:
+ *   metadata   — the escalation row's metadata dict
+ *   payload    — the escalation context payload (escalation_payload)
+ *   envelope   — the workflow-sent input envelope
+ *   escalation — top-level escalation row fields
+ *   resolver   — the submitted resolver payload
+ *
+ * A missing or non-string condition always shows the field (opt-in, safe default).
+ */
+const x_lt_bind_1 = require("./x-lt-bind");
+const x_lt_help_1 = require("./x-lt-help");
+function isTruthy(value) {
+    return value !== null && value !== undefined && value !== '' && value !== false && value !== 0;
+}
+/** The value's comparable string form; absent compares as the empty string. */
+function asComparable(value) {
+    if (value === null || value === undefined)
+        return '';
+    if (typeof value === 'object')
+        return JSON.stringify(value);
+    return String(value);
+}
+function resolvePath(expr, ctx) {
+    const dot = expr.indexOf('.');
+    const domain = (dot === -1 ? expr : expr.slice(0, dot));
+    if (!x_lt_help_1.HELP_DOMAINS.includes(domain))
+        return { known: false, value: undefined };
+    const root = ctx[domain];
+    if (dot === -1)
+        return { known: true, value: root };
+    try {
+        return { known: true, value: (0, x_lt_bind_1.getDeep)(root, expr.slice(dot + 1)) };
+    }
+    catch {
+        return { known: true, value: undefined };
+    }
+}
+/**
+ * Evaluates an x-lt-showIf condition. Returns true when the field should be
+ * shown. Returns true when condition is absent, non-string, or context is null.
+ */
+function evaluateShowIf(condition, ctx) {
+    if (typeof condition !== 'string' || condition.length === 0)
+        return true;
+    if (!ctx)
+        return true;
+    const negate = condition.startsWith('!');
+    const expr = negate ? condition.slice(1) : condition;
+    // Equality forms — `!=` first so it never parses as `=` with a `!` in the path.
+    const neqAt = expr.indexOf('!=');
+    const eqAt = expr.indexOf('=');
+    if (neqAt !== -1 || (eqAt !== -1 && eqAt !== neqAt + 1)) {
+        const isNeq = neqAt !== -1 && (eqAt === -1 || neqAt < eqAt);
+        const opAt = isNeq ? neqAt : eqAt;
+        const path = expr.slice(0, opAt).trim();
+        const expected = expr.slice(opAt + (isNeq ? 2 : 1)).trim();
+        const { known, value } = resolvePath(path, ctx);
+        if (!known)
+            return true; // unknown domain — safe default, same as truthy form
+        const matches = asComparable(value) === expected;
+        const result = isNeq ? !matches : matches;
+        return negate ? !result : result;
+    }
+    const { known, value } = resolvePath(expr, ctx);
+    if (!known)
+        return true;
+    return negate ? !isTruthy(value) : isTruthy(value);
+}

package/build/system/mcp-servers/admin/schemas.d.ts

@@ -567,6 +567,7 @@ export declare const updateRoleSchema: z.ZodObject<{
     worker_count: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     priority_threshold_minutes: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     priority_facet: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    enforce_schema: z.ZodOptional<z.ZodBoolean>;
     upstream_roles: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
     list_schema: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodAny>>>;
     default_pins: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
@@ -603,6 +604,7 @@ export declare const updateRoleSchema: z.ZodObject<{
     worker_count?: number | null | undefined;
     priority_threshold_minutes?: number | null | undefined;
     priority_facet?: string | null | undefined;
+    enforce_schema?: boolean | undefined;
     upstream_roles?: string[] | null | undefined;
     change_summary?: string | undefined;
 }, {
@@ -625,6 +627,7 @@ export declare const updateRoleSchema: z.ZodObject<{
     worker_count?: number | null | undefined;
     priority_threshold_minutes?: number | null | undefined;
     priority_facet?: string | null | undefined;
+    enforce_schema?: boolean | undefined;
     upstream_roles?: string[] | null | undefined;
     change_summary?: string | undefined;
 }>;

package/build/system/mcp-servers/admin/schemas.js

@@ -249,6 +249,7 @@ exports.updateRoleSchema = zod_1.z.object({
     worker_count: zod_1.z.number().nullable().optional().describe('Capacity at this station (staff or machine count). One of the capacity settings.'),
     priority_threshold_minutes: zod_1.z.number().min(0).nullable().optional().describe('Max age in minutes before a pending unclaimed escalation counts toward the Pace Board priority count. Falls back to sla_minutes when null.'),
     priority_facet: zod_1.z.string().regex(facet_sql_1.FACET_KEY).nullable().optional().describe('lt_escalations.metadata key holding the age origin for the priority count as an ISO 8601 UTC timestamp (e.g. authorized_at). Falls back to created_at when null. When set, items missing the key or holding an unparseable value are not counted.'),
+    enforce_schema: zod_1.z.boolean().optional().describe('When true, every resolve surface validates the submitted resolverPayload against the escalation\'s form schema (the same pass the dashboard runs) and rejects violations with a structured schema_validation error before any state changes.'),
     upstream_roles: zod_1.z.array(zod_1.z.string()).nullable().optional().describe('Replace the set of roles this station draws input from across other sequences (parent_role stays the single prior step in its own sequence). Omitted = preserve; null or [] = clear.'),
     list_schema: zod_1.z.record(zod_1.z.any()).nullable().optional().describe('JSON contract (x-lt-* markup) that richly formats this role\'s escalation LIST page. Versioned independently of form_schema; the list always renders the latest version.'),
     default_pins: zod_1.z.array(zod_1.z.object({

package/build/system/mcp-servers/admin/users.js

@@ -195,7 +195,8 @@ function registerUserTools(server) {
         title: 'Update Role',
         description: 'Update role metadata with PATCH semantics — omitted fields keep their ' +
             'values. Covers display name, description, form/metadata/list schemas, ' +
-            'the free properties bag, ops_visible flag, parent role, default_pins ' +
+            'the free properties bag, ops_visible flag, enforce_schema ' +
+            '(server-side resolver validation), parent role, default_pins ' +
             '(member pinned-view seeds), and the typed operational targets ' +
             '(sla_minutes, target_per_hour, worker_count, ' +
             'priority_threshold_minutes, priority_facet).',
@@ -214,6 +215,7 @@ function registerUserTools(server) {
             worker_count: args.worker_count,
             priority_threshold_minutes: args.priority_threshold_minutes,
             priority_facet: args.priority_facet,
+            enforce_schema: args.enforce_schema,
             upstream_roles: args.upstream_roles,
             list_schema: args.list_schema,
             default_pins: args.default_pins,

package/build/system/mcp-servers/human-queue-schemas.d.ts

@@ -46,23 +46,23 @@ export declare const claimAndResolveSchema: z.ZodObject<{
     resolver_id: z.ZodString;
     payload: z.ZodRecord<z.ZodString, z.ZodAny>;
 }, "strip", z.ZodTypeAny, {
+    payload: Record<string, any>;
     escalation_id: string;
     resolver_id: string;
-    payload: Record<string, any>;
 }, {
+    payload: Record<string, any>;
     escalation_id: string;
     resolver_id: string;
-    payload: Record<string, any>;
 }>;
 export declare const resolveEscalationSchema: z.ZodObject<{
     escalation_id: z.ZodString;
     payload: z.ZodRecord<z.ZodString, z.ZodAny>;
 }, "strip", z.ZodTypeAny, {
-    escalation_id: string;
     payload: Record<string, any>;
-}, {
     escalation_id: string;
+}, {
     payload: Record<string, any>;
+    escalation_id: string;
 }>;
 export declare const escalateAndWaitSchema: z.ZodObject<{
     role: z.ZodString;

package/build/system/mcp-servers/human-queue-schemas.js

@@ -24,7 +24,10 @@ exports.getAvailableWorkSchema = zod_1.z.object({
 // The payload is stored exactly as submitted — the resolver payload IS the
 // payload. Shape it to match the role form's x-lt-bind paths (see the form_schema
 // check_resolution returns for a pending escalation); no server-side transform.
-const RESOLVER_PAYLOAD_DESC = 'Resolution payload, stored as-is. Match the shape the workflow consumes (the form_schema\'s x-lt-bind paths).';
+const RESOLVER_PAYLOAD_DESC = 'Resolution payload, stored as-is. Match the shape the workflow consumes (the form_schema\'s x-lt-bind paths). '
+    + 'Roles with enforce_schema validate it server-side: required fields (respecting x-lt-showIf), declared types '
+    + '(number vs string), enums, bounds, patterns, and x-lt-require-all checklists. Violations return a '
+    + 'schema_validation error listing each field.';
 exports.claimAndResolveSchema = zod_1.z.object({
     escalation_id: zod_1.z.string().describe('The escalation ID to claim and resolve'),
     resolver_id: zod_1.z.string().describe('Identifier for who/what is resolving'),

package/build/system/mcp-servers/human-queue.js

@@ -40,9 +40,36 @@ const crypto = __importStar(require("crypto"));
 const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
 const logger_1 = require("../../lib/logger");
 const escalationService = __importStar(require("../../services/escalation"));
+const resolver_validation_1 = require("../../services/escalation/resolver-validation");
+const enforcement_cache_1 = require("../../services/role/enforcement-cache");
 const escalation_1 = require("../../types/escalation");
 const human_queue_schemas_1 = require("./human-queue-schemas");
 let server = null;
+/**
+ * Schema enforcement for the MCP resolve tools — the same gate the HTTP
+ * surfaces run (agents and the sim workforce submit through these tools, so
+ * they get the same contract and the same canonical violation body). Costs
+ * zero reads when no role enforces (cached set); otherwise one row read.
+ * Returns the MCP error content when the payload is rejected, null to proceed.
+ */
+async function checkResolveToolPayload(escalationId, payload) {
+    const enforcing = await (0, enforcement_cache_1.getEnforcingRoles)();
+    if (enforcing.size === 0)
+        return null;
+    const escalation = await escalationService.getEscalation(escalationId);
+    if (!escalation || !enforcing.has(escalation.role))
+        return null;
+    const report = await (0, resolver_validation_1.checkResolverPayload)(escalation, payload);
+    if (!report)
+        return null;
+    return {
+        content: [{
+                type: 'text',
+                text: JSON.stringify((0, resolver_validation_1.toValidationErrorBody)(report)),
+            }],
+        isError: true,
+    };
+}
 /**
  * Create the Long Tail Human Queue MCP server.
  *
@@ -129,6 +156,11 @@ async function createHumanQueueServer(options) {
         else if (escalation.status === 'pending' && detail.form_schema) {
             // The shape the resolver payload should take (fields + x-lt-bind paths).
             result.form_schema = detail.form_schema;
+            // Tell the agent when this role ENFORCES the form: an incomplete or
+            // mis-typed payload will be rejected with a schema_validation error.
+            if ((await (0, enforcement_cache_1.getEnforcingRoles)()).has(escalation.role)) {
+                result.schema_enforced = true;
+            }
         }
         return {
             content: [{ type: 'text', text: JSON.stringify(result) }],
@@ -163,9 +195,13 @@ async function createHumanQueueServer(options) {
     // ── claim_and_resolve ───────────────────────────────────────────────
     server.registerTool('claim_and_resolve', {
         title: 'Claim and Resolve',
-        description: 'Claim an escalation and immediately resolve it with a payload. Atomic operation.',
+        description: 'Claim an escalation and immediately resolve it with a payload. Atomic operation. Roles with enforce_schema validate the payload against the form_schema (see check_resolution) and reject violations with a schema_validation error listing each field.',
         inputSchema: human_queue_schemas_1.claimAndResolveSchema,
     }, async (args) => {
+        // Validate BEFORE claiming — a rejected payload must never strand a claim.
+        const rejected = await checkResolveToolPayload(args.escalation_id, args.payload);
+        if (rejected)
+            return rejected;
         const claimed = await escalationService.claimEscalation(args.escalation_id, args.resolver_id, 5);
         if (!claimed) {
             return {
@@ -200,9 +236,12 @@ async function createHumanQueueServer(options) {
     // ── resolve_escalation ──────────────────────────────────────────────
     server.registerTool('resolve_escalation', {
         title: 'Resolve Escalation',
-        description: 'Resolve an already-claimed escalation with a payload. Use when the claim happened externally (e.g. via API).',
+        description: 'Resolve an already-claimed escalation with a payload. Use when the claim happened externally (e.g. via API). Roles with enforce_schema validate the payload against the form_schema (see check_resolution) and reject violations with a schema_validation error listing each field.',
         inputSchema: human_queue_schemas_1.resolveEscalationSchema,
     }, async (args) => {
+        const rejected = await checkResolveToolPayload(args.escalation_id, args.payload);
+        if (rejected)
+            return rejected;
         const resolved = await escalationService.resolveEscalation(args.escalation_id, args.payload);
         if (!resolved) {
             return {

package/build/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["../index.ts","../vitest.config.ts","../vitest.integration.config.ts","../adapters/express.ts","../api/agent-subscriptions.ts","../api/agents.ts","../api/auth-sso.ts","../api/auth.ts","../api/bot-accounts.ts","../api/capabilities.ts","../api/controlplane.ts","../api/dba.ts","../api/diagnostics.ts","../api/exports.ts","../api/files.ts","../api/index.ts","../api/insight.ts","../api/knowledge.ts","../api/maintenance.ts","../api/me.ts","../api/namespaces.ts","../api/overview.ts","../api/pipelines.ts","../api/roles.ts","../api/settings.ts","../api/tasks.ts","../api/topics.ts","../api/users.ts","../api/workflow-sets.ts","../api/escalations/bulk.ts","../api/escalations/cancel.ts","../api/escalations/claim.ts","../api/escalations/create.ts","../api/escalations/facets.ts","../api/escalations/helpers.ts","../api/escalations/index.ts","../api/escalations/list.ts","../api/escalations/metadata.ts","../api/escalations/resolve.ts","../api/escalations/single.ts","../api/mcp/index.ts","../api/mcp/servers.ts","../api/mcp/tools.ts","../api/workflows/config.ts","../api/workflows/discovery.ts","../api/workflows/index.ts","../api/workflows/invocation.ts","../api/yaml-workflows/cron.ts","../api/yaml-workflows/crud.ts","../api/yaml-workflows/deploy.ts","../api/yaml-workflows/helpers.ts","../api/yaml-workflows/index.ts","../api/yaml-workflows/versions.ts","../bin/ltc.ts","../lib/cli/auth.ts","../lib/cli/client.ts","../lib/cli/compile.ts","../lib/cli/format.ts","../lib/cli/init.ts","../lib/cli/output.ts","../lib/cli/scanner.ts","../lib/cli/types.ts","../lib/cli/commands/escalations.ts","../lib/cli/commands/knowledge.ts","../lib/cli/commands/mcp.ts","../lib/cli/commands/pipelines.ts","../lib/cli/commands/roles.ts","../lib/cli/commands/status.ts","../lib/cli/commands/streams.ts","../lib/cli/commands/users.ts","../lib/cli/commands/workflows.ts","../lib/db/index.ts","../lib/db/migrate.ts","../lib/events/callback.ts","../lib/events/index.ts","../lib/events/matching.ts","../lib/events/memory.ts","../lib/events/nats-ws-proxy.ts","../lib/events/nats.ts","../lib/events/publish.ts","../lib/events/socketio.ts","../lib/events/system-events.ts","../lib/logger/index.ts","../lib/logger/pino.ts","../lib/storage/index.ts","../lib/storage/local.ts","../lib/storage/mime.ts","../lib/storage/s3.ts","../lib/storage/types.ts","../lib/telemetry/honeycomb.ts","../lib/telemetry/index.ts","../modules/auth.ts","../modules/branding.ts","../modules/config.ts","../modules/defaults.ts","../modules/features.ts","../modules/ltconfig.ts","../modules/maintenance.ts","../modules/sso.ts","../modules/utils.ts","../modules/version.ts","../routes/agents.ts","../routes/auth-sso.ts","../routes/auth.ts","../routes/bot-accounts.ts","../routes/capabilities.ts","../routes/controlplane.ts","../routes/dba.ts","../routes/delegation.ts","../routes/diagnostics.ts","../routes/docs.ts","../routes/exports.ts","../routes/file-browser.ts","../routes/files.ts","../routes/index.ts","../routes/insight.ts","../routes/knowledge.ts","../routes/maintenance.ts","../routes/mcp-endpoint.ts","../routes/mcp.ts","../routes/me.ts","../routes/namespaces.ts","../routes/nats-credentials.ts","../routes/oauth.ts","../routes/overview.ts","../routes/pipelines.ts","../routes/roles.ts","../routes/settings.ts","../routes/tasks.ts","../routes/topics.ts","../routes/users.ts","../routes/workflow-sets.ts","../routes/escalations/bulk.ts","../routes/escalations/facets.ts","../routes/escalations/index.ts","../routes/escalations/list.ts","../routes/escalations/metadata.ts","../routes/escalations/resolve.ts","../routes/escalations/single.ts","../routes/workflows/config.ts","../routes/workflows/discovery.ts","../routes/workflows/index.ts","../routes/workflows/invocation.ts","../routes/yaml-workflows/cron.ts","../routes/yaml-workflows/crud.ts","../routes/yaml-workflows/deployment.ts","../routes/yaml-workflows/index.ts","../routes/yaml-workflows/versions.ts","../scripts/ortho-populate.ts","../scripts/process-helpers.ts","../scripts/process.ts","../scripts/token.ts","../scripts/twin-farm.ts","../sdk/index.ts","../services/dba.ts","../services/hotmesh-utils.ts","../services/workflow-invocation.ts","../services/agent/index.ts","../services/agent/input-mapper.ts","../services/agent/sql.ts","../services/agent/subscription-sql.ts","../services/agent/subscriptions.ts","../services/agent/trigger-registry.ts","../services/auth/bot-api-key.ts","../services/auth/delegation.ts","../services/auth/index.ts","../services/auth/service-token.ts","../services/auth/sql.ts","../services/config/cache.ts","../services/config/index.ts","../services/config/provider.ts","../services/config/read.ts","../services/config/sql.ts","../services/config/write.ts","../services/controlplane/index.ts","../services/controlplane/quorum-bridge.ts","../services/controlplane/sql.ts","../services/controlplane/stream-messages-sql.ts","../services/controlplane/types.ts","../services/cron/index.ts","../services/diagnostics/index.ts","../services/diagnostics/patterns.ts","../services/escalation/bulk.ts","../services/escalation/client.ts","../services/escalation/crud.ts","../services/escalation/facet-sql.ts","../services/escalation/facets.ts","../services/escalation/index.ts","../services/escalation/map.ts","../services/escalation/metrics-cache.ts","../services/escalation/queries.ts","../services/escalation/sql.ts","../services/escalation/types.ts","../services/escalation-strategy/default.ts","../services/escalation-strategy/index.ts","../services/escalation-strategy/mcp.ts","../services/export/client.ts","../services/export/index.ts","../services/export/post-process.ts","../services/export/types.ts","../services/iam/activity.ts","../services/iam/bots.ts","../services/iam/context.ts","../services/iam/credentials.ts","../services/iam/envelope.ts","../services/iam/ephemeral.ts","../services/iam/index.ts","../services/iam/principal.ts","../services/iam/resolve.ts","../services/iam/sql.ts","../services/insight/index.ts","../services/insight/prompts.ts","../services/interceptor/activity-interceptor.ts","../services/interceptor/completion.ts","../services/interceptor/context.ts","../services/interceptor/escalation.ts","../services/interceptor/index.ts","../services/interceptor/lifecycle.ts","../services/interceptor/state.ts","../services/interceptor/types.ts","../services/interceptor/activities/config.ts","../services/interceptor/activities/escalation.ts","../services/interceptor/activities/index.ts","../services/interceptor/activities/task.ts","../services/interceptor/activities/workflow.ts","../services/llm/detect.ts","../services/llm/index.ts","../services/llm/translate.ts","../services/llm/types.ts","../services/llm/providers/anthropic.ts","../services/llm/providers/openai.ts","../services/maintenance/index.ts","../services/mcp/adapter.ts","../services/mcp/db.ts","../services/mcp/exposure.ts","../services/mcp/external-server.ts","../services/mcp/index.ts","../services/mcp/register-tool.ts","../services/mcp/seed-service-account.ts","../services/mcp/server-lifecycle.ts","../services/mcp/server-tools.ts","../services/mcp/server.ts","../services/mcp/sql.ts","../services/mcp/types.ts","../services/mcp/workflow-compiler-server.ts","../services/mcp/workflow-server.ts","../services/mcp/client/connection-dispatch.ts","../services/mcp/client/connection-lifecycle.ts","../services/mcp/client/connection-test.ts","../services/mcp/client/connection.ts","../services/mcp/client/index.ts","../services/mcp/client/tools.ts","../services/mcp/db-server/index.ts","../services/mcp/db-server/schemas.ts","../services/mcp/db-server/tools.ts","../services/mcp/playwright-server/index.ts","../services/mcp/playwright-server/lifecycle.ts","../services/mcp/playwright-server/schemas.ts","../services/mcp/playwright-server/tools.ts","../services/namespace/index.ts","../services/namespace/sql.ts","../services/namespace/types.ts","../services/oauth/crypto.ts","../services/oauth/db.ts","../services/oauth/index.ts","../services/oauth/sql.ts","../services/oauth/state.ts","../services/oauth/providers/anthropic.ts","../services/oauth/providers/github.ts","../services/oauth/providers/google.ts","../services/oauth/providers/index.ts","../services/oauth/providers/microsoft.ts","../services/oauth/providers/mock.ts","../services/oauth/providers/registry.ts","../services/oauth/providers/types.ts","../services/orchestrator/condition.ts","../services/orchestrator/index.ts","../services/orchestrator/types.ts","../services/overview/index.ts","../services/overview/sql.ts","../services/pipelines/enrichment.ts","../services/pipelines/events.ts","../services/pipelines/execution-builder.ts","../services/pipelines/index.ts","../services/pipelines/queries.ts","../services/pipelines/sql.ts","../services/pipelines/types.ts","../services/role/index.ts","../services/role/schema-validator.ts","../services/role/sql.ts","../services/role/types.ts","../services/task/crud.ts","../services/task/index.ts","../services/task/process.ts","../services/task/resolve.ts","../services/task/sql.ts","../services/task/types.ts","../services/topics/index.ts","../services/topics/sql.ts","../services/topics/system-topics.ts","../services/user/auth.ts","../services/user/crud.ts","../services/user/index.ts","../services/user/preferences.ts","../services/user/rbac.ts","../services/user/roles.ts","../services/user/scope.ts","../services/user/seed-admin.ts","../services/user/sql.ts","../services/user/sso-provision.ts","../services/user/types.ts","../services/workers/registry.ts","../services/workflow-sets/db.ts","../services/workflow-sets/index.ts","../services/workflow-sets/sql.ts","../services/yaml-workflow/builder-regenerate.ts","../services/yaml-workflow/db-utils.ts","../services/yaml-workflow/db-versions.ts","../services/yaml-workflow/db.ts","../services/yaml-workflow/deployer-helpers.ts","../services/yaml-workflow/deployer.ts","../services/yaml-workflow/generator.ts","../services/yaml-workflow/index.ts","../services/yaml-workflow/input-analyzer-helpers.ts","../services/yaml-workflow/input-analyzer.ts","../services/yaml-workflow/invoke.ts","../services/yaml-workflow/pipe-validator.ts","../services/yaml-workflow/sql.ts","../services/yaml-workflow/types.ts","../services/yaml-workflow/durable-compiler/index.ts","../services/yaml-workflow/durable-compiler/parser.ts","../services/yaml-workflow/durable-compiler/prompts.ts","../services/yaml-workflow/durable-compiler/types.ts","../services/yaml-workflow/pattern-detector/array-source.ts","../services/yaml-workflow/pattern-detector/collapse.ts","../services/yaml-workflow/pattern-detector/index.ts","../services/yaml-workflow/pattern-detector/run-detection.ts","../services/yaml-workflow/pattern-detector/types.ts","../services/yaml-workflow/pipeline/analyze.ts","../services/yaml-workflow/pipeline/extract-helpers.ts","../services/yaml-workflow/pipeline/extract.ts","../services/yaml-workflow/pipeline/index.ts","../services/yaml-workflow/pipeline/prompt-templates.ts","../services/yaml-workflow/pipeline/prompts.ts","../services/yaml-workflow/pipeline/validate.ts","../services/yaml-workflow/pipeline/build/dag-assembly.ts","../services/yaml-workflow/pipeline/build/dag.ts","../services/yaml-workflow/pipeline/build/index.ts","../services/yaml-workflow/pipeline/build/iteration.ts","../services/yaml-workflow/pipeline/build/metadata.ts","../services/yaml-workflow/pipeline/build/transform.ts","../services/yaml-workflow/pipeline/build/utils.ts","../services/yaml-workflow/pipeline/build/wiring.ts","../services/yaml-workflow/pipeline/compile/index.ts","../services/yaml-workflow/pipeline/compile/llm-call.ts","../services/yaml-workflow/pipeline/compile/parse-plan.ts","../services/yaml-workflow/pipeline/compile/summarize.ts","../services/yaml-workflow/workers/callbacks.ts","../services/yaml-workflow/workers/events.ts","../services/yaml-workflow/workers/index.ts","../services/yaml-workflow/workers/register.ts","../services/yaml-workflow/workers/scope.ts","../start/adapters.ts","../start/config.ts","../start/graph-workflows.ts","../start/index.ts","../start/server.ts","../start/socket-auth.ts","../start/workers.ts","../system/index.ts","../system/activities/claude-code.ts","../system/activities/file-storage.ts","../system/activities/http.ts","../system/activities/knowledge.ts","../system/activities/oauth.ts","../system/activities/schema-exchange.ts","../system/activities/sql.ts","../system/activities/triage/cache.ts","../system/activities/triage/context.ts","../system/activities/triage/discovery.ts","../system/activities/triage/index.ts","../system/activities/triage/llm.ts","../system/activities/triage/tools.ts","../system/mcp-servers/claude-code.ts","../system/mcp-servers/docs.ts","../system/mcp-servers/events.ts","../system/mcp-servers/file-storage.ts","../system/mcp-servers/http-fetch.ts","../system/mcp-servers/human-queue-schemas.ts","../system/mcp-servers/human-queue.ts","../system/mcp-servers/knowledge.ts","../system/mcp-servers/oauth.ts","../system/mcp-servers/schema-exchange.ts","../system/mcp-servers/translation.ts","../system/mcp-servers/vision-prompts.ts","../system/mcp-servers/vision.ts","../system/mcp-servers/workflow-compiler.ts","../system/mcp-servers/workflow.ts","../system/mcp-servers/admin/agent-subscriptions.ts","../system/mcp-servers/admin/agents.ts","../system/mcp-servers/admin/bot-accounts.ts","../system/mcp-servers/admin/controlplane.ts","../system/mcp-servers/admin/diagnostics.ts","../system/mcp-servers/admin/escalations.ts","../system/mcp-servers/admin/exports.ts","../system/mcp-servers/admin/index.ts","../system/mcp-servers/admin/maintenance.ts","../system/mcp-servers/admin/mcp-servers.ts","../system/mcp-servers/admin/ortho.ts","../system/mcp-servers/admin/overview.ts","../system/mcp-servers/admin/pipelines.ts","../system/mcp-servers/admin/schemas.ts","../system/mcp-servers/admin/settings.ts","../system/mcp-servers/admin/tasks.ts","../system/mcp-servers/admin/topics.ts","../system/mcp-servers/admin/users.ts","../system/mcp-servers/admin/workflow-config.ts","../system/mcp-servers/admin/workflows.ts","../system/mcp-servers/admin/yaml-workflows.ts","../system/mcp-servers/db-query/index.ts","../system/mcp-servers/db-query/schemas.ts","../system/mcp-servers/db-query/tools.ts","../system/seed/index.ts","../system/seed/tool-manifests-admin.ts","../system/seed/tool-manifests-data.ts","../system/seed/tool-manifests-escalation.ts","../system/seed/tool-manifests-events.ts","../system/seed/tool-manifests-knowledge.ts","../system/seed/tool-manifests-workflows.ts","../system/workflows/tool-result-guard.ts","../system/workflows/capability-invoke/activities.ts","../system/workflows/capability-invoke/index.ts","../system/workflows/mcp-deterministic/activities.ts","../system/workflows/mcp-deterministic/index.ts","../system/workflows/mcp-query/index.ts","../system/workflows/mcp-query/prompts.ts","../system/workflows/mcp-query/strategy-advisors.ts","../system/workflows/mcp-query/types.ts","../system/workflows/mcp-query/activities/caches.ts","../system/workflows/mcp-query/activities/discovery.ts","../system/workflows/mcp-query/activities/index.ts","../system/workflows/mcp-query/activities/llm.ts","../system/workflows/mcp-query/activities/tool-executor.ts","../system/workflows/mcp-query/activities/tool-loader.ts","../system/workflows/mcp-query-router/activities.ts","../system/workflows/mcp-query-router/index.ts","../system/workflows/mcp-query-router/prompts.ts","../system/workflows/mcp-triage/activities-proxy.ts","../system/workflows/mcp-triage/index.ts","../system/workflows/mcp-triage/prompts.ts","../system/workflows/mcp-triage/response-builders.ts","../system/workflows/mcp-triage/response.ts","../system/workflows/mcp-triage/types.ts","../system/workflows/mcp-triage-deterministic/activities.ts","../system/workflows/mcp-triage-deterministic/index.ts","../system/workflows/mcp-triage-router/activities.ts","../system/workflows/mcp-triage-router/index.ts","../system/workflows/mcp-workflow-builder/index.ts","../system/workflows/mcp-workflow-builder/prompts.ts","../system/workflows/mcp-workflow-builder/activities/caches.ts","../system/workflows/mcp-workflow-builder/activities/index.ts","../system/workflows/mcp-workflow-builder/activities/llm.ts","../system/workflows/mcp-workflow-builder/activities/tool-loader.ts","../system/workflows/mcp-workflow-planner/index.ts","../system/workflows/mcp-workflow-planner/prompts.ts","../system/workflows/mcp-workflow-planner/activities/analyze.ts","../system/workflows/mcp-workflow-planner/activities/index.ts","../system/workflows/mcp-workflow-planner/activities/persist.ts","../system/workflows/mcp-workflow-planner/activities/plan.ts","../system/workflows/shared/discovery.ts","../system/workflows/shared/index.ts","../system/workflows/shared/llm-caller.ts","../system/workflows/shared/prompts.ts","../system/workflows/shared/strategy-advisors.ts","../system/workflows/shared/tool-executor.ts","../system/workflows/shared/tool-loader.ts","../system/workflows/shared/types.ts","../types/agent.ts","../types/auth.ts","../types/config.ts","../types/delegation.ts","../types/discovery.ts","../types/envelope.ts","../types/escalation-strategy.ts","../types/escalation.ts","../types/events.ts","../types/export.ts","../types/express.d.ts","../types/facets.ts","../types/index.ts","../types/logger.ts","../types/maintenance.ts","../types/mcp.ts","../types/oauth.ts","../types/sdk.ts","../types/startup.ts","../types/task.ts","../types/telemetry.ts","../types/tool-context.ts","../types/user.ts","../types/workflow-set.ts","../types/workflow.ts","../types/yaml-workflow.ts","../workers/index.ts"],"version":"5.9.3"}
+{"root":["../index.ts","../vitest.config.ts","../vitest.integration.config.ts","../adapters/express.ts","../api/agent-subscriptions.ts","../api/agents.ts","../api/auth-sso.ts","../api/auth.ts","../api/bot-accounts.ts","../api/capabilities.ts","../api/controlplane.ts","../api/dba.ts","../api/diagnostics.ts","../api/exports.ts","../api/files.ts","../api/index.ts","../api/insight.ts","../api/knowledge.ts","../api/maintenance.ts","../api/me.ts","../api/namespaces.ts","../api/overview.ts","../api/pipelines.ts","../api/roles.ts","../api/settings.ts","../api/tasks.ts","../api/topics.ts","../api/users.ts","../api/workflow-sets.ts","../api/escalations/bulk.ts","../api/escalations/cancel.ts","../api/escalations/claim.ts","../api/escalations/create.ts","../api/escalations/facets.ts","../api/escalations/helpers.ts","../api/escalations/index.ts","../api/escalations/list.ts","../api/escalations/metadata.ts","../api/escalations/resolve.ts","../api/escalations/single.ts","../api/mcp/index.ts","../api/mcp/servers.ts","../api/mcp/tools.ts","../api/workflows/config.ts","../api/workflows/discovery.ts","../api/workflows/index.ts","../api/workflows/invocation.ts","../api/yaml-workflows/cron.ts","../api/yaml-workflows/crud.ts","../api/yaml-workflows/deploy.ts","../api/yaml-workflows/helpers.ts","../api/yaml-workflows/index.ts","../api/yaml-workflows/versions.ts","../bin/ltc.ts","../lib/typed-resolution.ts","../lib/cli/auth.ts","../lib/cli/client.ts","../lib/cli/compile.ts","../lib/cli/format.ts","../lib/cli/init.ts","../lib/cli/output.ts","../lib/cli/scanner.ts","../lib/cli/types.ts","../lib/cli/commands/escalations.ts","../lib/cli/commands/knowledge.ts","../lib/cli/commands/mcp.ts","../lib/cli/commands/pipelines.ts","../lib/cli/commands/roles.ts","../lib/cli/commands/status.ts","../lib/cli/commands/streams.ts","../lib/cli/commands/users.ts","../lib/cli/commands/workflows.ts","../lib/db/index.ts","../lib/db/migrate.ts","../lib/events/callback.ts","../lib/events/index.ts","../lib/events/matching.ts","../lib/events/memory.ts","../lib/events/nats-ws-proxy.ts","../lib/events/nats.ts","../lib/events/publish.ts","../lib/events/socketio.ts","../lib/events/system-events.ts","../lib/logger/index.ts","../lib/logger/pino.ts","../lib/storage/index.ts","../lib/storage/local.ts","../lib/storage/mime.ts","../lib/storage/s3.ts","../lib/storage/types.ts","../lib/telemetry/honeycomb.ts","../lib/telemetry/index.ts","../modules/auth.ts","../modules/branding.ts","../modules/config.ts","../modules/defaults.ts","../modules/features.ts","../modules/ltconfig.ts","../modules/maintenance.ts","../modules/sso.ts","../modules/utils.ts","../modules/version.ts","../routes/agents.ts","../routes/auth-sso.ts","../routes/auth.ts","../routes/bot-accounts.ts","../routes/capabilities.ts","../routes/controlplane.ts","../routes/dba.ts","../routes/delegation.ts","../routes/diagnostics.ts","../routes/docs.ts","../routes/exports.ts","../routes/file-browser.ts","../routes/files.ts","../routes/index.ts","../routes/insight.ts","../routes/knowledge.ts","../routes/maintenance.ts","../routes/mcp-endpoint.ts","../routes/mcp.ts","../routes/me.ts","../routes/namespaces.ts","../routes/nats-credentials.ts","../routes/oauth.ts","../routes/overview.ts","../routes/pipelines.ts","../routes/roles.ts","../routes/settings.ts","../routes/tasks.ts","../routes/topics.ts","../routes/users.ts","../routes/workflow-sets.ts","../routes/escalations/bulk.ts","../routes/escalations/facets.ts","../routes/escalations/index.ts","../routes/escalations/list.ts","../routes/escalations/metadata.ts","../routes/escalations/resolve.ts","../routes/escalations/single.ts","../routes/workflows/config.ts","../routes/workflows/discovery.ts","../routes/workflows/index.ts","../routes/workflows/invocation.ts","../routes/yaml-workflows/cron.ts","../routes/yaml-workflows/crud.ts","../routes/yaml-workflows/deployment.ts","../routes/yaml-workflows/index.ts","../routes/yaml-workflows/versions.ts","../scripts/ortho-populate.ts","../scripts/process-helpers.ts","../scripts/process.ts","../scripts/token.ts","../scripts/twin-farm.ts","../sdk/index.ts","../services/dba.ts","../services/hotmesh-utils.ts","../services/workflow-invocation.ts","../services/agent/index.ts","../services/agent/input-mapper.ts","../services/agent/sql.ts","../services/agent/subscription-sql.ts","../services/agent/subscriptions.ts","../services/agent/trigger-registry.ts","../services/auth/bot-api-key.ts","../services/auth/delegation.ts","../services/auth/index.ts","../services/auth/service-token.ts","../services/auth/sql.ts","../services/config/cache.ts","../services/config/index.ts","../services/config/provider.ts","../services/config/read.ts","../services/config/sql.ts","../services/config/write.ts","../services/controlplane/index.ts","../services/controlplane/quorum-bridge.ts","../services/controlplane/sql.ts","../services/controlplane/stream-messages-sql.ts","../services/controlplane/types.ts","../services/cron/index.ts","../services/diagnostics/index.ts","../services/diagnostics/patterns.ts","../services/escalation/bulk.ts","../services/escalation/client.ts","../services/escalation/crud.ts","../services/escalation/facet-sql.ts","../services/escalation/facets.ts","../services/escalation/index.ts","../services/escalation/map.ts","../services/escalation/metrics-cache.ts","../services/escalation/queries.ts","../services/escalation/resolver-validation.ts","../services/escalation/sql.ts","../services/escalation/types.ts","../services/escalation-strategy/default.ts","../services/escalation-strategy/index.ts","../services/escalation-strategy/mcp.ts","../services/export/client.ts","../services/export/index.ts","../services/export/post-process.ts","../services/export/types.ts","../services/iam/activity.ts","../services/iam/bots.ts","../services/iam/context.ts","../services/iam/credentials.ts","../services/iam/envelope.ts","../services/iam/ephemeral.ts","../services/iam/index.ts","../services/iam/principal.ts","../services/iam/resolve.ts","../services/iam/sql.ts","../services/insight/index.ts","../services/insight/prompts.ts","../services/interceptor/activity-interceptor.ts","../services/interceptor/completion.ts","../services/interceptor/context.ts","../services/interceptor/escalation.ts","../services/interceptor/index.ts","../services/interceptor/lifecycle.ts","../services/interceptor/state.ts","../services/interceptor/types.ts","../services/interceptor/activities/config.ts","../services/interceptor/activities/escalation.ts","../services/interceptor/activities/index.ts","../services/interceptor/activities/task.ts","../services/interceptor/activities/workflow.ts","../services/llm/detect.ts","../services/llm/index.ts","../services/llm/translate.ts","../services/llm/types.ts","../services/llm/providers/anthropic.ts","../services/llm/providers/openai.ts","../services/maintenance/index.ts","../services/mcp/adapter.ts","../services/mcp/db.ts","../services/mcp/exposure.ts","../services/mcp/external-server.ts","../services/mcp/index.ts","../services/mcp/register-tool.ts","../services/mcp/seed-service-account.ts","../services/mcp/server-lifecycle.ts","../services/mcp/server-tools.ts","../services/mcp/server.ts","../services/mcp/sql.ts","../services/mcp/types.ts","../services/mcp/workflow-compiler-server.ts","../services/mcp/workflow-server.ts","../services/mcp/client/connection-dispatch.ts","../services/mcp/client/connection-lifecycle.ts","../services/mcp/client/connection-test.ts","../services/mcp/client/connection.ts","../services/mcp/client/index.ts","../services/mcp/client/tools.ts","../services/mcp/db-server/index.ts","../services/mcp/db-server/schemas.ts","../services/mcp/db-server/tools.ts","../services/mcp/playwright-server/index.ts","../services/mcp/playwright-server/lifecycle.ts","../services/mcp/playwright-server/schemas.ts","../services/mcp/playwright-server/tools.ts","../services/namespace/index.ts","../services/namespace/sql.ts","../services/namespace/types.ts","../services/oauth/crypto.ts","../services/oauth/db.ts","../services/oauth/index.ts","../services/oauth/sql.ts","../services/oauth/state.ts","../services/oauth/providers/anthropic.ts","../services/oauth/providers/github.ts","../services/oauth/providers/google.ts","../services/oauth/providers/index.ts","../services/oauth/providers/microsoft.ts","../services/oauth/providers/mock.ts","../services/oauth/providers/registry.ts","../services/oauth/providers/types.ts","../services/orchestrator/condition.ts","../services/orchestrator/index.ts","../services/orchestrator/types.ts","../services/overview/index.ts","../services/overview/sql.ts","../services/pipelines/enrichment.ts","../services/pipelines/events.ts","../services/pipelines/execution-builder.ts","../services/pipelines/index.ts","../services/pipelines/queries.ts","../services/pipelines/sql.ts","../services/pipelines/types.ts","../services/role/enforcement-cache.ts","../services/role/index.ts","../services/role/schema-validator.ts","../services/role/sql.ts","../services/role/types.ts","../services/task/crud.ts","../services/task/index.ts","../services/task/process.ts","../services/task/resolve.ts","../services/task/sql.ts","../services/task/types.ts","../services/topics/index.ts","../services/topics/sql.ts","../services/topics/system-topics.ts","../services/user/auth.ts","../services/user/crud.ts","../services/user/index.ts","../services/user/preferences.ts","../services/user/rbac.ts","../services/user/roles.ts","../services/user/scope.ts","../services/user/seed-admin.ts","../services/user/sql.ts","../services/user/sso-provision.ts","../services/user/types.ts","../services/workers/registry.ts","../services/workflow-sets/db.ts","../services/workflow-sets/index.ts","../services/workflow-sets/sql.ts","../services/yaml-workflow/builder-regenerate.ts","../services/yaml-workflow/db-utils.ts","../services/yaml-workflow/db-versions.ts","../services/yaml-workflow/db.ts","../services/yaml-workflow/deployer-helpers.ts","../services/yaml-workflow/deployer.ts","../services/yaml-workflow/generator.ts","../services/yaml-workflow/index.ts","../services/yaml-workflow/input-analyzer-helpers.ts","../services/yaml-workflow/input-analyzer.ts","../services/yaml-workflow/invoke.ts","../services/yaml-workflow/pipe-validator.ts","../services/yaml-workflow/sql.ts","../services/yaml-workflow/types.ts","../services/yaml-workflow/durable-compiler/index.ts","../services/yaml-workflow/durable-compiler/parser.ts","../services/yaml-workflow/durable-compiler/prompts.ts","../services/yaml-workflow/durable-compiler/types.ts","../services/yaml-workflow/pattern-detector/array-source.ts","../services/yaml-workflow/pattern-detector/collapse.ts","../services/yaml-workflow/pattern-detector/index.ts","../services/yaml-workflow/pattern-detector/run-detection.ts","../services/yaml-workflow/pattern-detector/types.ts","../services/yaml-workflow/pipeline/analyze.ts","../services/yaml-workflow/pipeline/extract-helpers.ts","../services/yaml-workflow/pipeline/extract.ts","../services/yaml-workflow/pipeline/index.ts","../services/yaml-workflow/pipeline/prompt-templates.ts","../services/yaml-workflow/pipeline/prompts.ts","../services/yaml-workflow/pipeline/validate.ts","../services/yaml-workflow/pipeline/build/dag-assembly.ts","../services/yaml-workflow/pipeline/build/dag.ts","../services/yaml-workflow/pipeline/build/index.ts","../services/yaml-workflow/pipeline/build/iteration.ts","../services/yaml-workflow/pipeline/build/metadata.ts","../services/yaml-workflow/pipeline/build/transform.ts","../services/yaml-workflow/pipeline/build/utils.ts","../services/yaml-workflow/pipeline/build/wiring.ts","../services/yaml-workflow/pipeline/compile/index.ts","../services/yaml-workflow/pipeline/compile/llm-call.ts","../services/yaml-workflow/pipeline/compile/parse-plan.ts","../services/yaml-workflow/pipeline/compile/summarize.ts","../services/yaml-workflow/workers/callbacks.ts","../services/yaml-workflow/workers/events.ts","../services/yaml-workflow/workers/index.ts","../services/yaml-workflow/workers/register.ts","../services/yaml-workflow/workers/scope.ts","../shared/form-validation/derive-field-label.ts","../shared/form-validation/field-validator.ts","../shared/form-validation/index.ts","../shared/form-validation/validate-resolver-payload.ts","../shared/form-validation/x-lt-bind.ts","../shared/form-validation/x-lt-help.ts","../shared/form-validation/x-lt-show-if.ts","../start/adapters.ts","../start/config.ts","../start/graph-workflows.ts","../start/index.ts","../start/server.ts","../start/socket-auth.ts","../start/workers.ts","../system/index.ts","../system/activities/claude-code.ts","../system/activities/file-storage.ts","../system/activities/http.ts","../system/activities/knowledge.ts","../system/activities/oauth.ts","../system/activities/schema-exchange.ts","../system/activities/sql.ts","../system/activities/triage/cache.ts","../system/activities/triage/context.ts","../system/activities/triage/discovery.ts","../system/activities/triage/index.ts","../system/activities/triage/llm.ts","../system/activities/triage/tools.ts","../system/mcp-servers/claude-code.ts","../system/mcp-servers/docs.ts","../system/mcp-servers/events.ts","../system/mcp-servers/file-storage.ts","../system/mcp-servers/http-fetch.ts","../system/mcp-servers/human-queue-schemas.ts","../system/mcp-servers/human-queue.ts","../system/mcp-servers/knowledge.ts","../system/mcp-servers/oauth.ts","../system/mcp-servers/schema-exchange.ts","../system/mcp-servers/translation.ts","../system/mcp-servers/vision-prompts.ts","../system/mcp-servers/vision.ts","../system/mcp-servers/workflow-compiler.ts","../system/mcp-servers/workflow.ts","../system/mcp-servers/admin/agent-subscriptions.ts","../system/mcp-servers/admin/agents.ts","../system/mcp-servers/admin/bot-accounts.ts","../system/mcp-servers/admin/controlplane.ts","../system/mcp-servers/admin/diagnostics.ts","../system/mcp-servers/admin/escalations.ts","../system/mcp-servers/admin/exports.ts","../system/mcp-servers/admin/index.ts","../system/mcp-servers/admin/maintenance.ts","../system/mcp-servers/admin/mcp-servers.ts","../system/mcp-servers/admin/ortho.ts","../system/mcp-servers/admin/overview.ts","../system/mcp-servers/admin/pipelines.ts","../system/mcp-servers/admin/schemas.ts","../system/mcp-servers/admin/settings.ts","../system/mcp-servers/admin/tasks.ts","../system/mcp-servers/admin/topics.ts","../system/mcp-servers/admin/users.ts","../system/mcp-servers/admin/workflow-config.ts","../system/mcp-servers/admin/workflows.ts","../system/mcp-servers/admin/yaml-workflows.ts","../system/mcp-servers/db-query/index.ts","../system/mcp-servers/db-query/schemas.ts","../system/mcp-servers/db-query/tools.ts","../system/seed/index.ts","../system/seed/tool-manifests-admin.ts","../system/seed/tool-manifests-data.ts","../system/seed/tool-manifests-escalation.ts","../system/seed/tool-manifests-events.ts","../system/seed/tool-manifests-knowledge.ts","../system/seed/tool-manifests-workflows.ts","../system/workflows/tool-result-guard.ts","../system/workflows/capability-invoke/activities.ts","../system/workflows/capability-invoke/index.ts","../system/workflows/mcp-deterministic/activities.ts","../system/workflows/mcp-deterministic/index.ts","../system/workflows/mcp-query/index.ts","../system/workflows/mcp-query/prompts.ts","../system/workflows/mcp-query/strategy-advisors.ts","../system/workflows/mcp-query/types.ts","../system/workflows/mcp-query/activities/caches.ts","../system/workflows/mcp-query/activities/discovery.ts","../system/workflows/mcp-query/activities/index.ts","../system/workflows/mcp-query/activities/llm.ts","../system/workflows/mcp-query/activities/tool-executor.ts","../system/workflows/mcp-query/activities/tool-loader.ts","../system/workflows/mcp-query-router/activities.ts","../system/workflows/mcp-query-router/index.ts","../system/workflows/mcp-query-router/prompts.ts","../system/workflows/mcp-triage/activities-proxy.ts","../system/workflows/mcp-triage/index.ts","../system/workflows/mcp-triage/prompts.ts","../system/workflows/mcp-triage/response-builders.ts","../system/workflows/mcp-triage/response.ts","../system/workflows/mcp-triage/types.ts","../system/workflows/mcp-triage-deterministic/activities.ts","../system/workflows/mcp-triage-deterministic/index.ts","../system/workflows/mcp-triage-router/activities.ts","../system/workflows/mcp-triage-router/index.ts","../system/workflows/mcp-workflow-builder/index.ts","../system/workflows/mcp-workflow-builder/prompts.ts","../system/workflows/mcp-workflow-builder/activities/caches.ts","../system/workflows/mcp-workflow-builder/activities/index.ts","../system/workflows/mcp-workflow-builder/activities/llm.ts","../system/workflows/mcp-workflow-builder/activities/tool-loader.ts","../system/workflows/mcp-workflow-planner/index.ts","../system/workflows/mcp-workflow-planner/prompts.ts","../system/workflows/mcp-workflow-planner/activities/analyze.ts","../system/workflows/mcp-workflow-planner/activities/index.ts","../system/workflows/mcp-workflow-planner/activities/persist.ts","../system/workflows/mcp-workflow-planner/activities/plan.ts","../system/workflows/shared/discovery.ts","../system/workflows/shared/index.ts","../system/workflows/shared/llm-caller.ts","../system/workflows/shared/prompts.ts","../system/workflows/shared/strategy-advisors.ts","../system/workflows/shared/tool-executor.ts","../system/workflows/shared/tool-loader.ts","../system/workflows/shared/types.ts","../types/agent.ts","../types/auth.ts","../types/config.ts","../types/delegation.ts","../types/discovery.ts","../types/envelope.ts","../types/escalation-strategy.ts","../types/escalation.ts","../types/events.ts","../types/export.ts","../types/express.d.ts","../types/facets.ts","../types/index.ts","../types/logger.ts","../types/maintenance.ts","../types/mcp.ts","../types/oauth.ts","../types/sdk.ts","../types/startup.ts","../types/task.ts","../types/telemetry.ts","../types/tool-context.ts","../types/user.ts","../types/validation.ts","../types/workflow-set.ts","../types/workflow.ts","../types/yaml-workflow.ts","../workers/index.ts"],"version":"5.9.3"}

package/build/types/sdk.d.ts

@@ -11,10 +11,15 @@
 export interface LTApiResult<T = any> {
     /** HTTP-equivalent status code */
     status: number;
-    /** Success payload (present when status is 2xx) */
+    /** Success payload (present when status is 2xx). On structured errors (e.g.
+     *  422 schema validation) it carries the canonical error body so routes
+     *  serialize the full shape and SDK callers read it without re-fetching. */
     data?: T;
     /** Error message (present when status is 4xx/5xx) */
     error?: string;
+    /** Machine-readable error code (types/validation.ts LT_ERROR_CODES) for
+     *  errors callers are expected to branch on, e.g. 'schema_validation'. */
+    code?: string;
 }
 /**
  * Auth context passed to API-layer functions.

package/build/types/startup.d.ts

@@ -229,10 +229,36 @@ export interface LTStartConfig {
     /**
      * White-label branding. The `appName` replaces "LongTail" in the dashboard
      * header. Defaults to "LongTail" when omitted.
+     *
+     * `customCss` and `themes` give the deployment full control of the design
+     * system: every color, type, and spacing knob in the dashboard flows through
+     * a `--lt-*` CSS variable, so a registered stylesheet restyles the entire
+     * product — the built-in pages and the generated x-lt-* forms alike. The
+     * CSS is served at `GET /api/settings/custom.css` and loaded before first
+     * paint.
      */
     branding?: {
         /** Product name shown in the dashboard header. Default: "LongTail". */
         appName?: string;
+        /** Raw CSS appended to the dashboard stylesheet (served at /api/settings/custom.css). */
+        customCss?: string;
+        /**
+         * Registered themes — each appears in the header theme picker alongside
+         * the built-ins. Author the css under a `[data-theme='<id>']` selector
+         * overriding the `--lt-*` variables.
+         */
+        themes?: Array<{
+            /** Theme id — the `data-theme` attribute value. */
+            id: string;
+            /** Label shown in the theme picker. */
+            label: string;
+            /** Swatch color (hex) for the picker chip. */
+            swatch: string;
+            /** CSS block scoped to `[data-theme='<id>']`. */
+            css: string;
+            /** Marks a dark-surface theme. */
+            dark?: boolean;
+        }>;
     };
     /** Authentication. Defaults to the built-in JWT adapter using JWT_SECRET. */
     auth?: {

package/build/types/validation.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Canonical validation-error shapes — one vocabulary across every surface.
+ *
+ * When server-side resolver schema enforcement rejects a payload, the API
+ * layer returns status 422 with `LTValidationErrorBody` as the response body.
+ * The same body shape flows to every consumer:
+ *   - HTTP routes serialize it as the JSON response body
+ *   - SDK callers receive it as `result.data` (with `result.code` set)
+ *   - MCP resolve tools return it as the tool's JSON error content
+ *   - the CLI prints the violation list beneath the error line
+ *   - the dashboard maps `violations` into the same errors panel the
+ *     pre-submission pass feeds
+ */
+/** Machine-readable error codes carried on error envelopes and bodies. */
+export declare const LT_ERROR_CODES: {
+    /** The resolver payload failed the role's enforced form schema. */
+    readonly SCHEMA_VALIDATION: "schema_validation";
+};
+export type LTErrorCode = (typeof LT_ERROR_CODES)[keyof typeof LT_ERROR_CODES];
+/**
+ * One field-level violation — the same `{ field, message }` pair the dashboard
+ * validation panel renders. Bulk surfaces add `escalationId` so a violation is
+ * attributable to the row that produced it.
+ */
+export interface LTFieldViolation {
+    field: string;
+    message: string;
+    escalationId?: string;
+}
+/** The 422 response body for a schema-validation rejection. */
+export interface LTValidationErrorBody {
+    /** Human-readable summary, e.g. "resolverPayload failed schema validation (2 violations)". */
+    error: string;
+    code: typeof LT_ERROR_CODES.SCHEMA_VALIDATION;
+    /** Every field-level violation, in schema property order. */
+    violations: LTFieldViolation[];
+    /** The role whose enforced schema rejected the payload. */
+    role: string;
+    /** The schema version validated against; null when the role's live (unversioned) schema applied. */
+    schemaVersion: number | null;
+}
+/** Narrow an unknown response body to the canonical validation-error shape. */
+export declare function isValidationErrorBody(body: unknown): body is LTValidationErrorBody;

package/build/types/validation.js

@@ -0,0 +1,28 @@
+"use strict";
+/**
+ * Canonical validation-error shapes — one vocabulary across every surface.
+ *
+ * When server-side resolver schema enforcement rejects a payload, the API
+ * layer returns status 422 with `LTValidationErrorBody` as the response body.
+ * The same body shape flows to every consumer:
+ *   - HTTP routes serialize it as the JSON response body
+ *   - SDK callers receive it as `result.data` (with `result.code` set)
+ *   - MCP resolve tools return it as the tool's JSON error content
+ *   - the CLI prints the violation list beneath the error line
+ *   - the dashboard maps `violations` into the same errors panel the
+ *     pre-submission pass feeds
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LT_ERROR_CODES = void 0;
+exports.isValidationErrorBody = isValidationErrorBody;
+/** Machine-readable error codes carried on error envelopes and bodies. */
+exports.LT_ERROR_CODES = {
+    /** The resolver payload failed the role's enforced form schema. */
+    SCHEMA_VALIDATION: 'schema_validation',
+};
+/** Narrow an unknown response body to the canonical validation-error shape. */
+function isValidationErrorBody(body) {
+    return (typeof body === 'object' && body !== null
+        && body.code === exports.LT_ERROR_CODES.SCHEMA_VALIDATION
+        && Array.isArray(body.violations));
+}