@hotmeshio/long-tail 0.19.0 → 0.20.0

package/build/system/mcp-servers/admin/schemas.d.ts

@@ -87,7 +87,7 @@ export declare const findEscalationsSchema: z.ZodObject<{
     offset: number;
     role?: string | undefined;
     subtype?: string | undefined;
-    status?: "pending" | "cancelled" | "resolved" | "expired" | undefined;
+    status?: "pending" | "resolved" | "cancelled" | "expired" | undefined;
     available?: boolean | undefined;
     roles?: string[] | undefined;
     type?: string | undefined;
@@ -112,7 +112,7 @@ export declare const findEscalationsSchema: z.ZodObject<{
 }, {
     role?: string | undefined;
     subtype?: string | undefined;
-    status?: "pending" | "cancelled" | "resolved" | "expired" | undefined;
+    status?: "pending" | "resolved" | "cancelled" | "expired" | undefined;
     available?: boolean | undefined;
     roles?: string[] | undefined;
     type?: string | undefined;
@@ -231,6 +231,13 @@ export declare const bulkTriageSchema: z.ZodObject<{
     hint?: string | undefined;
 }>;
 export declare const listWorkflowConfigsSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+export declare const getWorkflowConfigSchema: z.ZodObject<{
+    workflow_type: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    workflow_type: string;
+}, {
+    workflow_type: string;
+}>;
 export declare const upsertWorkflowConfigSchema: z.ZodObject<{
     workflow_type: z.ZodString;
     invocable: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
@@ -246,6 +253,25 @@ export declare const upsertWorkflowConfigSchema: z.ZodObject<{
     envelope_schema: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodAny>>>>;
     resolver_schema: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodAny>>>>;
     cron_schedule: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+    input_schema: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodAny>>>>;
+    input_lookups: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
+        domain: z.ZodString;
+        key: z.ZodString;
+        version: z.ZodNumber;
+        as: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        domain: string;
+        key: string;
+        version: number;
+        as?: string | undefined;
+    }, {
+        domain: string;
+        key: string;
+        version: number;
+        as?: string | undefined;
+    }>, "many">>>>;
+    icon: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+    read_safe: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 }, "strip", z.ZodTypeAny, {
     workflow_type: string;
     invocable: boolean;
@@ -257,9 +283,18 @@ export declare const upsertWorkflowConfigSchema: z.ZodObject<{
     consumes: string[];
     tool_tags: string[];
     envelope_schema: Record<string, any> | null;
+    input_schema: Record<string, any> | null;
+    icon: string | null;
+    input_lookups: {
+        domain: string;
+        key: string;
+        version: number;
+        as?: string | undefined;
+    }[] | null;
     resolver_schema: Record<string, any> | null;
     cron_schedule: string | null;
     execute_as: string | null;
+    read_safe: boolean;
     certified?: boolean | undefined;
 }, {
     workflow_type: string;
@@ -273,9 +308,18 @@ export declare const upsertWorkflowConfigSchema: z.ZodObject<{
     consumes?: string[] | undefined;
     tool_tags?: string[] | undefined;
     envelope_schema?: Record<string, any> | null | undefined;
+    input_schema?: Record<string, any> | null | undefined;
+    icon?: string | null | undefined;
+    input_lookups?: {
+        domain: string;
+        key: string;
+        version: number;
+        as?: string | undefined;
+    }[] | null | undefined;
     resolver_schema?: Record<string, any> | null | undefined;
     cron_schedule?: string | null | undefined;
     execute_as?: string | null | undefined;
+    read_safe?: boolean | undefined;
 }>;
 export declare const deleteWorkflowConfigSchema: z.ZodObject<{
     workflow_type: z.ZodString;
@@ -1253,14 +1297,14 @@ export declare const findByMetadataSchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     offset: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "strip", z.ZodTypeAny, {
-    value: string;
     key: string;
+    value: string;
     limit: number;
     offset: number;
     status?: string | undefined;
 }, {
-    value: string;
     key: string;
+    value: string;
     status?: string | undefined;
     limit?: number | undefined;
     offset?: number | undefined;
@@ -1272,14 +1316,14 @@ export declare const claimByMetadataSchema: z.ZodObject<{
     assignee: z.ZodOptional<z.ZodString>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strip", z.ZodTypeAny, {
-    value: string;
     key: string;
+    value: string;
     metadata?: Record<string, any> | undefined;
     durationMinutes?: number | undefined;
     assignee?: string | undefined;
 }, {
-    value: string;
     key: string;
+    value: string;
     metadata?: Record<string, any> | undefined;
     durationMinutes?: number | undefined;
     assignee?: string | undefined;
@@ -1291,14 +1335,14 @@ export declare const resolveByMetadataSchema: z.ZodObject<{
     assignee: z.ZodOptional<z.ZodString>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, "strip", z.ZodTypeAny, {
-    value: string;
     key: string;
+    value: string;
     resolverPayload: Record<string, any>;
     metadata?: Record<string, any> | undefined;
     assignee?: string | undefined;
 }, {
-    value: string;
     key: string;
+    value: string;
     resolverPayload: Record<string, any>;
     metadata?: Record<string, any> | undefined;
     assignee?: string | undefined;
@@ -1996,11 +2040,11 @@ export declare const timelineByFacetSchema: z.ZodObject<{
         key: z.ZodString;
         value: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        value: string;
         key: string;
-    }, {
         value: string;
+    }, {
         key: string;
+        value: string;
     }>;
     query: z.ZodOptional<z.ZodObject<{
         role: z.ZodOptional<z.ZodString>;
@@ -2079,8 +2123,8 @@ export declare const timelineByFacetSchema: z.ZodObject<{
     limit: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     facet: {
-        value: string;
         key: string;
+        value: string;
     };
     query?: {
         entity?: string | undefined;
@@ -2111,8 +2155,8 @@ export declare const timelineByFacetSchema: z.ZodObject<{
     liveStatuses?: string[] | undefined;
 }, {
     facet: {
-        value: string;
         key: string;
+        value: string;
     };
     query?: {
         entity?: string | undefined;
@@ -2191,8 +2235,8 @@ export declare const upsertScanSchemeSchema: z.ZodObject<{
     grant_max_uses: z.ZodOptional<z.ZodNumber>;
     enabled: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     version: number;
+    name: string;
     target_facet: string;
     description?: string | undefined;
     enabled?: boolean | undefined;
@@ -2203,8 +2247,8 @@ export declare const upsertScanSchemeSchema: z.ZodObject<{
     grant_ttl_seconds?: number | undefined;
     grant_max_uses?: number | undefined;
 }, {
-    name: string;
     version: number;
+    name: string;
     target_facet: string;
     description?: string | undefined;
     enabled?: boolean | undefined;
@@ -2226,12 +2270,12 @@ export declare const upsertScanRuleSchema: z.ZodObject<{
             availability: z.ZodOptional<z.ZodEnum<["available", "claimed", "mine", "any"]>>;
             facets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
         }, "strip", z.ZodTypeAny, {
-            status?: "pending" | "cancelled" | "resolved" | undefined;
+            status?: "pending" | "resolved" | "cancelled" | undefined;
             roles?: string[] | undefined;
             facets?: Record<string, any> | undefined;
             availability?: "available" | "claimed" | "mine" | "any" | undefined;
         }, {
-            status?: "pending" | "cancelled" | "resolved" | undefined;
+            status?: "pending" | "resolved" | "cancelled" | undefined;
             roles?: string[] | undefined;
             facets?: Record<string, any> | undefined;
             availability?: "available" | "claimed" | "mine" | "any" | undefined;
@@ -2346,7 +2390,7 @@ export declare const upsertScanRuleSchema: z.ZodObject<{
         autoSelectSingle: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         query: {
-            status?: "pending" | "cancelled" | "resolved" | undefined;
+            status?: "pending" | "resolved" | "cancelled" | undefined;
             roles?: string[] | undefined;
             facets?: Record<string, any> | undefined;
             availability?: "available" | "claimed" | "mine" | "any" | undefined;
@@ -2387,7 +2431,7 @@ export declare const upsertScanRuleSchema: z.ZodObject<{
         autoSelectSingle?: boolean | undefined;
     }, {
         query: {
-            status?: "pending" | "cancelled" | "resolved" | undefined;
+            status?: "pending" | "resolved" | "cancelled" | undefined;
             roles?: string[] | undefined;
             facets?: Record<string, any> | undefined;
             availability?: "available" | "claimed" | "mine" | "any" | undefined;
@@ -2454,7 +2498,7 @@ export declare const upsertScanRuleSchema: z.ZodObject<{
     scheme_version: number;
     steps: {
         query: {
-            status?: "pending" | "cancelled" | "resolved" | undefined;
+            status?: "pending" | "resolved" | "cancelled" | undefined;
             roles?: string[] | undefined;
             facets?: Record<string, any> | undefined;
             availability?: "available" | "claimed" | "mine" | "any" | undefined;
@@ -2509,7 +2553,7 @@ export declare const upsertScanRuleSchema: z.ZodObject<{
     scheme_version: number;
     steps: {
         query: {
-            status?: "pending" | "cancelled" | "resolved" | undefined;
+            status?: "pending" | "resolved" | "cancelled" | undefined;
             roles?: string[] | undefined;
             facets?: Record<string, any> | undefined;
             availability?: "available" | "claimed" | "mine" | "any" | undefined;

package/build/system/mcp-servers/admin/schemas.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.unlinkPersonaRoleSchema = exports.linkPersonaRoleSchema = exports.deletePersonaSchema = exports.updatePersonaSchema = exports.createPersonaSchema = exports.getPersonaSchema = exports.listPersonasSchema = exports.listRoleSchemaVersionsSchema = exports.getRoleSchemaSchema = exports.updateRoleSchema = exports.addEscalationChainSchema = exports.createRoleSchema = exports.listRolesSchema = exports.patchUserPropertiesSchema = exports.removeUserRoleSchema = exports.addUserRoleSchema = exports.createUserSchema = exports.listUsersSchema = exports.invokeYamlWorkflowSchema = exports.deployYamlWorkflowSchema = exports.createYamlWorkflowSchema = exports.getYamlWorkflowSchema = exports.listYamlWorkflowsSchema = exports.disconnectMcpServerSchema = exports.connectMcpServerSchema = exports.updateMcpServerSchema = exports.listMcpServersSchema = exports.getDomainContextSchema = exports.terminateWorkflowSchema = exports.getWorkflowStatusSchema = exports.invokeWorkflowSchema = exports.listDiscoveredWorkflowsSchema = exports.deleteWorkflowConfigSchema = exports.upsertWorkflowConfigSchema = exports.listWorkflowConfigsSchema = exports.bulkTriageSchema = exports.releaseExpiredClaimsSchema = exports.bulkCancelSchema = exports.cancelEscalationSchema = exports.escalateEscalationSchema = exports.resolveBySignalKeySchema = exports.resolveEscalationSchema = exports.releaseEscalationSchema = exports.claimEscalationSchema = exports.getEscalationStatsSchema = exports.getEscalationsByWorkflowSchema = exports.getEscalationSchema = exports.findEscalationsSchema = exports.getProcessDetailSchema = exports.findTasksSchema = void 0;
-exports.findOrphanedSignalsSchema = exports.findStalledJobsSchema = exports.diagnoseJobSchema = exports.getWorkflowEnvelopesSchema = exports.getExportStatusSchema = exports.exportWorkflowExecutionSchema = exports.exportWorkflowStateSchema = exports.listExportJobsSchema = exports.getSettingsSchema = exports.updatePrioritySchema = exports.bulkEscalateSchema = exports.bulkUnassignSchema = exports.bulkAssignSchema = exports.bulkClaimSchema = exports.resolveByMetadataSchema = exports.claimByMetadataSchema = exports.findByMetadataSchema = exports.deleteTopicSchema = exports.updateTopicSchema = exports.createTopicSchema = exports.getTopicSchema = exports.listTopicsSchema = exports.interruptJobSchema = exports.getJobExecutionSchema = exports.listPipelineJobsSchema = exports.listPipelineEntitiesSchema = exports.listStreamMessagesSchema = exports.getStreamStatsSchema = exports.applyThrottleSchema = exports.rollCallSchema = exports.listAppsSchema = exports.revokeBotKeySchema = exports.createBotApiKeySchema = exports.deleteBotSchema = exports.updateBotSchema = exports.createBotSchema = exports.getBotSchema = exports.listBotsSchema = exports.deleteAgentSubscriptionSchema = exports.createAgentSubscriptionSchema = exports.listAgentSubscriptionsSchema = exports.deleteAgentSchema = exports.updateAgentSchema = exports.createAgentSchema = exports.getAgentSchema = exports.listAgentsSchema = exports.pruneSchema = exports.getUserPersonasSchema = exports.unassignPersonaSchema = exports.assignPersonaSchema = void 0;
-exports.deleteScanRuleSchema = exports.upsertScanRuleSchema = exports.upsertScanSchemeSchema = exports.listScanSchemesSchema = exports.executeScanChoiceSchema = exports.executeScanCodeSchema = exports.timelineByFacetSchema = exports.aggregateByFacetsSchema = exports.claimByFacetsSchema = exports.claimGroupsSchema = exports.searchByFacetsSchema = exports.resolveByIdsSchema = exports.facetQuerySchema = void 0;
+exports.linkPersonaRoleSchema = exports.deletePersonaSchema = exports.updatePersonaSchema = exports.createPersonaSchema = exports.getPersonaSchema = exports.listPersonasSchema = exports.listRoleSchemaVersionsSchema = exports.getRoleSchemaSchema = exports.updateRoleSchema = exports.addEscalationChainSchema = exports.createRoleSchema = exports.listRolesSchema = exports.patchUserPropertiesSchema = exports.removeUserRoleSchema = exports.addUserRoleSchema = exports.createUserSchema = exports.listUsersSchema = exports.invokeYamlWorkflowSchema = exports.deployYamlWorkflowSchema = exports.createYamlWorkflowSchema = exports.getYamlWorkflowSchema = exports.listYamlWorkflowsSchema = exports.disconnectMcpServerSchema = exports.connectMcpServerSchema = exports.updateMcpServerSchema = exports.listMcpServersSchema = exports.getDomainContextSchema = exports.terminateWorkflowSchema = exports.getWorkflowStatusSchema = exports.invokeWorkflowSchema = exports.listDiscoveredWorkflowsSchema = exports.deleteWorkflowConfigSchema = exports.upsertWorkflowConfigSchema = exports.getWorkflowConfigSchema = exports.listWorkflowConfigsSchema = exports.bulkTriageSchema = exports.releaseExpiredClaimsSchema = exports.bulkCancelSchema = exports.cancelEscalationSchema = exports.escalateEscalationSchema = exports.resolveBySignalKeySchema = exports.resolveEscalationSchema = exports.releaseEscalationSchema = exports.claimEscalationSchema = exports.getEscalationStatsSchema = exports.getEscalationsByWorkflowSchema = exports.getEscalationSchema = exports.findEscalationsSchema = exports.getProcessDetailSchema = exports.findTasksSchema = void 0;
+exports.findStalledJobsSchema = exports.diagnoseJobSchema = exports.getWorkflowEnvelopesSchema = exports.getExportStatusSchema = exports.exportWorkflowExecutionSchema = exports.exportWorkflowStateSchema = exports.listExportJobsSchema = exports.getSettingsSchema = exports.updatePrioritySchema = exports.bulkEscalateSchema = exports.bulkUnassignSchema = exports.bulkAssignSchema = exports.bulkClaimSchema = exports.resolveByMetadataSchema = exports.claimByMetadataSchema = exports.findByMetadataSchema = exports.deleteTopicSchema = exports.updateTopicSchema = exports.createTopicSchema = exports.getTopicSchema = exports.listTopicsSchema = exports.interruptJobSchema = exports.getJobExecutionSchema = exports.listPipelineJobsSchema = exports.listPipelineEntitiesSchema = exports.listStreamMessagesSchema = exports.getStreamStatsSchema = exports.applyThrottleSchema = exports.rollCallSchema = exports.listAppsSchema = exports.revokeBotKeySchema = exports.createBotApiKeySchema = exports.deleteBotSchema = exports.updateBotSchema = exports.createBotSchema = exports.getBotSchema = exports.listBotsSchema = exports.deleteAgentSubscriptionSchema = exports.createAgentSubscriptionSchema = exports.listAgentSubscriptionsSchema = exports.deleteAgentSchema = exports.updateAgentSchema = exports.createAgentSchema = exports.getAgentSchema = exports.listAgentsSchema = exports.pruneSchema = exports.getUserPersonasSchema = exports.unassignPersonaSchema = exports.assignPersonaSchema = exports.unlinkPersonaRoleSchema = void 0;
+exports.deleteScanRuleSchema = exports.upsertScanRuleSchema = exports.upsertScanSchemeSchema = exports.listScanSchemesSchema = exports.executeScanChoiceSchema = exports.executeScanCodeSchema = exports.timelineByFacetSchema = exports.aggregateByFacetsSchema = exports.claimByFacetsSchema = exports.claimGroupsSchema = exports.searchByFacetsSchema = exports.resolveByIdsSchema = exports.facetQuerySchema = exports.findOrphanedSignalsSchema = void 0;
 /**
  * Zod schemas for the admin MCP server tools.
  *
@@ -101,6 +101,9 @@ exports.bulkTriageSchema = zod_1.z.object({
 });
 // ── workflow config (routes/workflows/config.ts) ────────────────────────────
 exports.listWorkflowConfigsSchema = zod_1.z.object({});
+exports.getWorkflowConfigSchema = zod_1.z.object({
+    workflow_type: zod_1.z.string().describe('Registered workflow type name'),
+});
 exports.upsertWorkflowConfigSchema = zod_1.z.object({
     workflow_type: zod_1.z.string().describe('Workflow function name'),
     invocable: zod_1.z.boolean().optional().default(false),
@@ -120,6 +123,19 @@ exports.upsertWorkflowConfigSchema = zod_1.z.object({
         .describe('DEPRECATED: the escalation form is a versioned schema owned by the target role. Legacy fallback only.')
         .default(null),
     cron_schedule: zod_1.z.string().nullable().optional().default(null),
+    input_schema: zod_1.z.record(zod_1.z.any()).nullable().optional().default(null)
+        .describe('x-lt-* JSON Schema for the invoke form; invoke validates data against it'),
+    input_lookups: zod_1.z.array(zod_1.z.object({
+        domain: zod_1.z.string(),
+        key: zod_1.z.string(),
+        version: zod_1.z.number().int().min(1),
+        as: zod_1.z.string().optional(),
+    })).nullable().optional().default(null)
+        .describe('Versioned knowledge refs the invoke form reads as lookup.<as ?? key>'),
+    icon: zod_1.z.string().nullable().optional().default(null)
+        .describe('Curated icon name (WORKFLOW_ICONS); unknown names are refused'),
+    read_safe: zod_1.z.boolean().optional().default(false)
+        .describe('Side-effect-free; eligible for invoke_workflow_read_safe'),
 });
 exports.deleteWorkflowConfigSchema = zod_1.z.object({
     workflow_type: zod_1.z.string().describe('Workflow type to unregister (deletes the registration row)'),

package/build/system/mcp-servers/admin/workflow-config.js

@@ -35,15 +35,25 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerWorkflowConfigTools = registerWorkflowConfigTools;
 const configService = __importStar(require("../../../services/config"));
+const lookup_cache_1 = require("../../../services/knowledge/lookup-cache");
+const lookup_refs_1 = require("../../../services/knowledge/lookup-refs");
 const ltconfig_1 = require("../../../modules/ltconfig");
 const cron_1 = require("../../../services/cron");
+const invocable_1 = require("../../../api/workflows/invocable");
+const workflow_icons_1 = require("../../../types/workflow-icons");
+const escalation_1 = require("../../../types/escalation");
 const schemas_1 = require("./schemas");
+const errorResult = (error) => ({
+    content: [{ type: 'text', text: JSON.stringify({ error }) }],
+    isError: true,
+});
 function registerWorkflowConfigTools(server) {
     // mirrors GET /api/workflows/config
     server.registerTool('list_workflow_configs', {
         title: 'List Workflow Configs',
         description: 'List all certified workflow configurations. Shows workflow type, ' +
-            'task queue, roles, invocable flag, and description.',
+            'task queue, roles, invocable flag, and description. Call ' +
+            'get_workflow_config for the full row including input_schema.',
         inputSchema: schemas_1.listWorkflowConfigsSchema,
     }, async (_args) => {
         const configs = await configService.listWorkflowConfigs();
@@ -64,15 +74,49 @@ function registerWorkflowConfigTools(server) {
                 }],
         };
     });
+    // mirrors GET /api/workflows/:type/config, plus the resolved lookup data the form reads
+    server.registerTool('get_workflow_config', {
+        title: 'Get Workflow Config',
+        description: 'The full configuration row for one workflow: input_schema (the x-lt-* form ' +
+            'an invoke payload must satisfy), envelope_schema (its metadata is the base ' +
+            'of every run), input_lookups, roles, and tier. input_lookup_data carries the ' +
+            'resolved knowledge editions keyed as the form reads them (lookup.<as ?? key>).',
+        inputSchema: schemas_1.getWorkflowConfigSchema,
+    }, async (args) => {
+        const config = await configService.getWorkflowConfig(args.workflow_type);
+        if (!config)
+            return errorResult('Workflow config not found');
+        const tier = config.certified ? invocable_1.WORKFLOW_TIERS.CERTIFIED : invocable_1.WORKFLOW_TIERS.REGISTERED;
+        const input_lookup_data = await (0, lookup_cache_1.resolveLookupContext)(config.input_lookups);
+        return {
+            content: [{ type: 'text', text: JSON.stringify({ ...config, tier, input_lookup_data }) }],
+        };
+    });
     // mirrors PUT /api/workflows/:type/config
     server.registerTool('upsert_workflow_config', {
         title: 'Upsert Workflow Config',
         description: 'Create or replace a workflow configuration (certify). Activates the ' +
             'interceptor for task tracking, escalation chains, and invocation controls. ' +
+            'Full replace, matching PUT /api/workflows/:type/config: omitted fields clear ' +
+            'to their defaults, so send the whole profile (start from get_workflow_config). ' +
             'Invalidates the config cache and restarts cron if schedule changes.',
         inputSchema: schemas_1.upsertWorkflowConfigSchema,
     }, async (args) => {
-        const config = await configService.upsertWorkflowConfig({
+        if (args.icon && !(0, workflow_icons_1.isWorkflowIcon)(args.icon)) {
+            return errorResult(`Unknown workflow icon "${args.icon}"; choose one of WORKFLOW_ICONS`);
+        }
+        if (args.input_lookups != null) {
+            try {
+                (0, escalation_1.assertLookupRefs)(args.input_lookups);
+            }
+            catch (err) {
+                return errorResult(err.message);
+            }
+            const missing = await (0, lookup_refs_1.describeMissingLookupRefs)(args.input_lookups);
+            if (missing.length)
+                return errorResult(missing.join('; '));
+        }
+        const declaration = {
             workflow_type: args.workflow_type,
             invocable: args.invocable,
             certified: args.certified,
@@ -85,9 +129,14 @@ function registerWorkflowConfigTools(server) {
             consumes: args.consumes,
             tool_tags: args.tool_tags,
             envelope_schema: args.envelope_schema,
+            input_schema: args.input_schema,
+            input_lookups: args.input_lookups,
+            icon: args.icon,
+            read_safe: args.read_safe,
             resolver_schema: args.resolver_schema,
             cron_schedule: args.cron_schedule,
-        });
+        };
+        const config = await configService.upsertWorkflowConfig(declaration);
         ltconfig_1.ltConfig.invalidate();
         await cron_1.cronRegistry.restartCron(config);
         return {
@@ -102,12 +151,8 @@ function registerWorkflowConfigTools(server) {
         inputSchema: schemas_1.deleteWorkflowConfigSchema,
     }, async (args) => {
         const deleted = await configService.deleteWorkflowConfig(args.workflow_type);
-        if (!deleted) {
-            return {
-                content: [{ type: 'text', text: JSON.stringify({ error: 'Workflow config not found' }) }],
-                isError: true,
-            };
-        }
+        if (!deleted)
+            return errorResult('Workflow config not found');
         ltconfig_1.ltConfig.invalidate();
         return {
             content: [{

package/build/system/mcp-servers/admin/workflows.js

@@ -84,14 +84,25 @@ function registerWorkflowTools(server) {
                 }],
         };
     });
+    // The invoke input gate: data is validated against input_schema when declared.
+    const inputSchemaRejection = async (config, args) => {
+        const body = await workflowApi.checkInvokeInput(config, args.data ?? {}, args.metadata);
+        return body ? { content: [{ type: 'text', text: JSON.stringify(body) }], isError: true } : null;
+    };
     // mirrors POST /api/workflows/:type/invoke
     server.registerTool('invoke_workflow', {
         title: 'Invoke Workflow',
         description: 'Start a certified workflow by type. The workflow must have invocable=true ' +
-            'in its config. Returns the workflow ID immediately; the workflow runs ' +
-            'durably in the background.',
+            'in its config. Data is validated against the config input_schema when one ' +
+            'is declared (422-shaped error). Call get_workflow_config for the input_schema ' +
+            'the payload must satisfy. Returns the workflow ID immediately; the ' +
+            'workflow runs durably in the background.',
         inputSchema: schemas_1.invokeWorkflowSchema,
     }, async (args) => {
+        const config = await configService.getWorkflowConfig(args.workflow_type);
+        const rejected = await inputSchemaRejection(config, args);
+        if (rejected)
+            return rejected;
         const result = await (0, workflow_invocation_1.invokeWorkflow)({
             workflowType: args.workflow_type,
             data: args.data,
@@ -117,7 +128,8 @@ function registerWorkflowTools(server) {
         description: 'Start a workflow registered read-safe (side-effect-free). Same contract ' +
             'as invoke_workflow, gated to configs carrying read_safe=true — the ' +
             'variant exposed to read-scoped MCP callers. A workflow without the ' +
-            'flag fails with a clear error.',
+            'flag fails with a clear error. Call get_workflow_config for the ' +
+            'input_schema the payload must satisfy.',
         inputSchema: schemas_1.invokeWorkflowSchema,
     }, async (args) => {
         const config = await configService.getWorkflowConfig(args.workflow_type);
@@ -139,6 +151,9 @@ function registerWorkflowTools(server) {
                 isError: true,
             };
         }
+        const rejected = await inputSchemaRejection(config, args);
+        if (rejected)
+            return rejected;
         const result = await (0, workflow_invocation_1.invokeWorkflow)({
             workflowType: args.workflow_type,
             data: args.data,

package/build/system/mcp-servers/db-query/schemas.d.ts

@@ -7,12 +7,12 @@ export declare const findTasksSchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "strip", z.ZodTypeAny, {
     limit: number;
-    status?: "pending" | "in_progress" | "completed" | "needs_intervention" | "failed" | undefined;
+    status?: "completed" | "pending" | "in_progress" | "needs_intervention" | "failed" | undefined;
     workflow_type?: string | undefined;
     workflow_id?: string | undefined;
     origin_id?: string | undefined;
 }, {
-    status?: "pending" | "in_progress" | "completed" | "needs_intervention" | "failed" | undefined;
+    status?: "completed" | "pending" | "in_progress" | "needs_intervention" | "failed" | undefined;
     workflow_type?: string | undefined;
     workflow_id?: string | undefined;
     origin_id?: string | undefined;