@hyperdrive.bot/paseo-protocol 0.3.41 → 0.3.43

package/dist/messages.js

@@ -101,7 +101,9 @@ export const MutableDaemonConfigSchema = z
         .passthrough(),
     browserTools: MutableBrowserToolsConfigSchema.default({ enabled: false }),
     providers: z.record(z.string(), MutableDaemonProviderConfigSchema).default({}),
-    metadataGeneration: MutableMetadataGenerationConfigSchema.default({ providers: [] }),
+    metadataGeneration: MutableMetadataGenerationConfigSchema.default({
+        providers: [],
+    }),
     autoArchiveAfterMerge: z.boolean().default(false),
     enableTerminalAgentHooks: z.boolean().default(false),
     appendSystemPrompt: z.string().default(""),
@@ -154,6 +156,38 @@ export const WorkflowPhaseSchema = z.object({
     storyCount: z.number().int().nonnegative().optional(),
     completedStoryCount: z.number().int().nonnegative().optional(),
 });
+/**
+ * Per-step agent config (Epic 2, Story 2.1). A CLOSED subset of the daemon's
+ * `AgentSessionConfig`: every key optional, and `.strict()` so an unknown key is a
+ * parse ERROR rather than a silent strip. Silent-strip is the failure this schema
+ * exists to prevent: a typo'd `provider:` would otherwise spawn the default agent
+ * with no signal, which is exactly the "silent fallback to the default" the epic forbids.
+ *
+ * Deliberately excluded, each for a reason:
+ * - `cwd`: workflow-owned. A step must not relocate its child. Also forced at merge time.
+ * - `extra` / `mcpServers` / `featureValues`: arbitrary nested structure, i.e. the
+ *   "deterministic via code" escape hatch this PRD exists to close.
+ * - `title`: owned by `initialTitle`, which the manager sets from `node.title`.
+ * - `daemonAppendSystemPrompt`: runtime-only, never persisted (`agent-sdk-types.ts:565-568`).
+ * - `internal`: workflow children must stay listable (`AgentManager.listAgents` filters
+ *   on `!agent.internal`, `agent-manager.ts:810-813`).
+ *
+ * Widening this vocabulary requires a schema edit AND a new test. It must never widen
+ * by accident from a config file.
+ */
+export const WorkflowAgentPresetSchema = z
+    .object({
+    provider: z.string().optional(),
+    model: z.string().optional(),
+    modeId: z.string().optional(),
+    systemPrompt: z.string().optional(),
+    thinkingOptionId: z.string().optional(),
+    approvalPolicy: z.string().optional(),
+    sandboxMode: z.string().optional(),
+    networkAccess: z.boolean().optional(),
+    webSearch: z.boolean().optional(),
+})
+    .strict();
 // Live/wire snapshot of a workflow. New fields must be additive (.optional() with a
 // sensible default) to preserve back-compat — a 6-month-old client must still parse this.
 export const WorkflowSnapshotSchema = z.object({
@@ -162,6 +196,12 @@ export const WorkflowSnapshotSchema = z.object({
     status: WorkflowStatusSchema,
     title: z.string().nullable().optional(),
     labels: z.record(z.string(), z.string()).default({}),
+    // Epic 2, Story 2.2: named agent presets a task's `agentType` selects. `.optional()`
+    // with NO `.default({})` on purpose: a default would stamp an empty map onto every
+    // record written before this field existed, and would make "an old record has no
+    // presets" untestable. Placed on the SNAPSHOT rather than only on the stored record so
+    // `STORED_WORKFLOW_SCHEMA` stays a bare alias and `persist` needs no change.
+    agentPresets: z.record(z.string(), WorkflowAgentPresetSchema).optional(),
     phases: z.array(WorkflowPhaseSchema).default([]),
     childAgentIds: z.array(z.string()).default([]),
     totalStoryCount: z.number().int().nonnegative().optional(),
@@ -268,6 +308,10 @@ export const WorkflowEventsResponseSchema = z.object({
 // by BOTH this client-facing `workflow.start` RPC and the `workflow_start` MCP
 // tool (no second divergent copy). The CLI's `child_process` / `claude -p`
 // spawning is deliberately NOT modelled — `agentManager.createAgent` replaces it.
+// `WorkflowAgentPresetSchema` / `WorkflowAgentPreset` are declared ABOVE
+// `WorkflowSnapshotSchema` (Epic 2, Story 2.2): the snapshot references the preset
+// schema, and a `const` referenced before its initialiser runs is a runtime TDZ
+// `ReferenceError` at module load, which `tsc --noEmit` does not catch.
 /** One task node — becomes one child agent when the workflow starts. */
 export const WorkflowTaskNodeSchema = z.object({
     id: z.string(),
@@ -279,6 +323,7 @@ export const WorkflowTaskNodeSchema = z.object({
     parallelizable: z.boolean(),
     estimatedMinutes: z.number(),
     agentType: z.string().optional(),
+    agentConfig: WorkflowAgentPresetSchema.optional(),
     targetFiles: z.array(z.string()).optional(),
 });
 /** Decomposed task graph driving child-agent spawning. */
@@ -316,6 +361,7 @@ export const WorkflowStartRequestSchema = z.object({
     model: z.string().optional(),
     title: z.string().optional(),
     labels: z.record(z.string(), z.string()).optional(),
+    agentPresets: z.record(z.string(), WorkflowAgentPresetSchema).optional(),
 });
 export const WorkflowStartResponseSchema = z.object({
     type: z.literal("workflow.start.response"),
@@ -1184,8 +1230,25 @@ const WorkspaceStateBucketSchema = z.enum([
     "failed",
     "running",
     "attention",
+    // COMPAT(pendingBucket): added in 0.3.42. A settled agent that still owns
+    // armed background work (monitor / cron / background shell / live subagent).
+    "pending",
     "done",
 ]);
+/**
+ * Client-side tolerant form of {@link WorkspaceStateBucketSchema}.
+ *
+ * A newer daemon may send a bucket an older app build has never heard of. A
+ * bare `z.enum` THROWS on that, which fails the whole workspace-descriptor
+ * parse and blanks the list — a total outage from an additive change. The
+ * `.catch` degrades one field instead.
+ *
+ * The fallback is deliberately `running`, not `done`: an unknown bucket means
+ * "this daemon knows about a state we don't", and the safe direction is to keep
+ * the workspace VISIBLE rather than silently filing it under finished. Guessing
+ * "done" would reproduce the exact class of bug the pending bucket exists to fix.
+ */
+const IncomingWorkspaceStateBucketSchema = WorkspaceStateBucketSchema.catch("running");
 export const FetchWorkspacesRequestMessageSchema = z.object({
     type: z.literal("fetch_workspaces_request"),
     requestId: z.string(),
@@ -3126,7 +3189,7 @@ export const WorkspaceDescriptorPayloadSchema = z
     // is derived from the branch/directory.
     title: z.string().nullable().optional(),
     archivingAt: z.string().nullable().optional().default(null),
-    status: WorkspaceStateBucketSchema,
+    status: IncomingWorkspaceStateBucketSchema,
     // Best-effort workspace status entry timestamp. Old daemons omit the
     // field; old clients treat missing and null equivalently. The transform
     // coerces a missing field to `null` so downstream code never has to

package/dist/validation/ws-outbound-schema-metadata.d.ts

@@ -489,13 +489,14 @@ export declare const WSOutboundMessageSchema: {
                     name: import("zod").ZodString;
                     title: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     archivingAt: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>>;
-                    status: import("zod").ZodEnum<{
+                    status: import("zod").ZodCatch<import("zod").ZodEnum<{
                         running: "running";
                         attention: "attention";
                         needs_input: "needs_input";
                         failed: "failed";
+                        pending: "pending";
                         done: "done";
-                    }>;
+                    }>>;
                     statusEnteredAt: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null, string | null | undefined>>;
                     activityAt: import("zod").ZodNullable<import("zod").ZodString>;
                     diffStat: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
@@ -673,7 +674,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -776,7 +777,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -1560,13 +1561,14 @@ export declare const WSOutboundMessageSchema: {
                     name: import("zod").ZodString;
                     title: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     archivingAt: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>>;
-                    status: import("zod").ZodEnum<{
+                    status: import("zod").ZodCatch<import("zod").ZodEnum<{
                         running: "running";
                         attention: "attention";
                         needs_input: "needs_input";
                         failed: "failed";
+                        pending: "pending";
                         done: "done";
-                    }>;
+                    }>>;
                     statusEnteredAt: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null, string | null | undefined>>;
                     activityAt: import("zod").ZodNullable<import("zod").ZodString>;
                     diffStat: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
@@ -1744,7 +1746,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -1847,7 +1849,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -2005,13 +2007,14 @@ export declare const WSOutboundMessageSchema: {
                     name: import("zod").ZodString;
                     title: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     archivingAt: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>>;
-                    status: import("zod").ZodEnum<{
+                    status: import("zod").ZodCatch<import("zod").ZodEnum<{
                         running: "running";
                         attention: "attention";
                         needs_input: "needs_input";
                         failed: "failed";
+                        pending: "pending";
                         done: "done";
-                    }>;
+                    }>>;
                     statusEnteredAt: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null, string | null | undefined>>;
                     activityAt: import("zod").ZodNullable<import("zod").ZodString>;
                     diffStat: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
@@ -2189,7 +2192,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -2292,7 +2295,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -3005,13 +3008,14 @@ export declare const WSOutboundMessageSchema: {
                     name: import("zod").ZodString;
                     title: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     archivingAt: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>>;
-                    status: import("zod").ZodEnum<{
+                    status: import("zod").ZodCatch<import("zod").ZodEnum<{
                         running: "running";
                         attention: "attention";
                         needs_input: "needs_input";
                         failed: "failed";
+                        pending: "pending";
                         done: "done";
-                    }>;
+                    }>>;
                     statusEnteredAt: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null, string | null | undefined>>;
                     activityAt: import("zod").ZodNullable<import("zod").ZodString>;
                     diffStat: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
@@ -3189,7 +3193,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -3292,7 +3296,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -3475,6 +3479,17 @@ export declare const WSOutboundMessageSchema: {
                     }>;
                     title: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     labels: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>>;
+                    agentPresets: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
+                        provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        model: import("zod").ZodOptional<import("zod").ZodString>;
+                        modeId: import("zod").ZodOptional<import("zod").ZodString>;
+                        systemPrompt: import("zod").ZodOptional<import("zod").ZodString>;
+                        thinkingOptionId: import("zod").ZodOptional<import("zod").ZodString>;
+                        approvalPolicy: import("zod").ZodOptional<import("zod").ZodString>;
+                        sandboxMode: import("zod").ZodOptional<import("zod").ZodString>;
+                        networkAccess: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        webSearch: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                    }, import("zod/v4/core").$strict>>>;
                     phases: import("zod").ZodDefault<import("zod").ZodArray<import("zod").ZodObject<{
                         id: import("zod").ZodString;
                         title: import("zod").ZodString;
@@ -3514,6 +3529,17 @@ export declare const WSOutboundMessageSchema: {
                     }>;
                     title: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     labels: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>>;
+                    agentPresets: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
+                        provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        model: import("zod").ZodOptional<import("zod").ZodString>;
+                        modeId: import("zod").ZodOptional<import("zod").ZodString>;
+                        systemPrompt: import("zod").ZodOptional<import("zod").ZodString>;
+                        thinkingOptionId: import("zod").ZodOptional<import("zod").ZodString>;
+                        approvalPolicy: import("zod").ZodOptional<import("zod").ZodString>;
+                        sandboxMode: import("zod").ZodOptional<import("zod").ZodString>;
+                        networkAccess: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        webSearch: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                    }, import("zod/v4/core").$strict>>>;
                     phases: import("zod").ZodDefault<import("zod").ZodArray<import("zod").ZodObject<{
                         id: import("zod").ZodString;
                         title: import("zod").ZodString;
@@ -3553,6 +3579,17 @@ export declare const WSOutboundMessageSchema: {
                     }>;
                     title: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     labels: import("zod").ZodDefault<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>>;
+                    agentPresets: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
+                        provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        model: import("zod").ZodOptional<import("zod").ZodString>;
+                        modeId: import("zod").ZodOptional<import("zod").ZodString>;
+                        systemPrompt: import("zod").ZodOptional<import("zod").ZodString>;
+                        thinkingOptionId: import("zod").ZodOptional<import("zod").ZodString>;
+                        approvalPolicy: import("zod").ZodOptional<import("zod").ZodString>;
+                        sandboxMode: import("zod").ZodOptional<import("zod").ZodString>;
+                        networkAccess: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                        webSearch: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                    }, import("zod/v4/core").$strict>>>;
                     phases: import("zod").ZodDefault<import("zod").ZodArray<import("zod").ZodObject<{
                         id: import("zod").ZodString;
                         title: import("zod").ZodString;
@@ -5009,13 +5046,14 @@ export declare const WSOutboundMessageSchema: {
                     name: import("zod").ZodString;
                     title: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     archivingAt: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>>;
-                    status: import("zod").ZodEnum<{
+                    status: import("zod").ZodCatch<import("zod").ZodEnum<{
                         running: "running";
                         attention: "attention";
                         needs_input: "needs_input";
                         failed: "failed";
+                        pending: "pending";
                         done: "done";
-                    }>;
+                    }>>;
                     statusEnteredAt: import("zod").ZodPipe<import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>, import("zod").ZodTransform<string | null, string | null | undefined>>;
                     activityAt: import("zod").ZodNullable<import("zod").ZodString>;
                     diffStat: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
@@ -5193,7 +5231,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {
@@ -5296,7 +5334,7 @@ export declare const WSOutboundMessageSchema: {
                     workspaceKind: "worktree" | "checkout" | "directory" | "local_checkout";
                     name: string;
                     archivingAt: string | null;
-                    status: "running" | "attention" | "needs_input" | "failed" | "done";
+                    status: "running" | "attention" | "needs_input" | "failed" | "pending" | "done";
                     statusEnteredAt: string | null;
                     activityAt: string | null;
                     scripts: {

package/dist/workflow/compile.d.ts

@@ -0,0 +1,33 @@
+import { type LoopParamValues } from "../fleet/params.js";
+import type { WorkflowAgentPreset, WorkflowTaskGraph } from "../messages.js";
+import { type WorkflowDefinition } from "./definition.js";
+/** Ambient run identity. Passed IN so the compiler stays a pure function of its
+ *  arguments; the CLI stamps these. Never produced here. */
+export interface WorkflowCompileSession {
+    id: string;
+    createdAt: string;
+    outputDirectory: string;
+}
+export interface CompileWorkflowArgs {
+    definition: WorkflowDefinition;
+    values: LoopParamValues;
+    session: WorkflowCompileSession;
+}
+export interface CompiledWorkflow {
+    graph: WorkflowTaskGraph;
+    agentPresets: Record<string, WorkflowAgentPreset>;
+}
+/**
+ * Compile one definition against one set of input values.
+ *
+ * Validates BEFORE it emits, and reports EVERY issue in one throw rather than stopping
+ * at the first: a definition can carry a bad input value, an undeclared token and an
+ * unknown agent name simultaneously, and three sequential throws would hide the second
+ * and third until the first is fixed. On any issue nothing is returned and no partial
+ * graph is observable.
+ *
+ * @throws {WorkflowDefinitionError} carrying the union of the value issues, the
+ *   definition issues, and the unresolved-reference issues this module adds.
+ */
+export declare function compileWorkflowDefinition(args: CompileWorkflowArgs): CompiledWorkflow;
+//# sourceMappingURL=compile.d.ts.map

package/dist/workflow/compile.js

@@ -0,0 +1,172 @@
+import { defaultLoopParams, validateLoopParams } from "../fleet/params.js";
+import { createWorkflowTokenPattern, renderWorkflowInputValue, SUBSTITUTABLE_STEP_FIELDS, validateWorkflowDefinition, WorkflowDefinitionError, } from "./definition.js";
+/**
+ * Compile one definition against one set of input values.
+ *
+ * Validates BEFORE it emits, and reports EVERY issue in one throw rather than stopping
+ * at the first: a definition can carry a bad input value, an undeclared token and an
+ * unknown agent name simultaneously, and three sequential throws would hide the second
+ * and third until the first is fixed. On any issue nothing is returned and no partial
+ * graph is observable.
+ *
+ * @throws {WorkflowDefinitionError} carrying the union of the value issues, the
+ *   definition issues, and the unresolved-reference issues this module adds.
+ */
+export function compileWorkflowDefinition(args) {
+    const { definition, session, values } = args;
+    // Defaults on the LEFT so a supplied value always wins over a declared default.
+    // `defaultLoopParams` only emits a key when the field's `default` parses as a
+    // `LoopParamValue`, so a field with no default contributes nothing here - which is
+    // exactly the gap the declared-but-unresolved issue below closes.
+    const merged = {
+        ...defaultLoopParams({ fields: definition.inputs }),
+        ...values,
+    };
+    const declaredKeys = new Set(definition.inputs.map((field) => field.key));
+    const valueIssues = validateLoopParams({ fields: definition.inputs }, merged);
+    // Each of the three failure shapes has exactly ONE reporter. A required input that is
+    // missing is already located at `inputs[<key>]`, so the reference pass below stays
+    // silent about it rather than restating the same root cause at every step that
+    // mentions it.
+    const reportedKeys = new Set(valueIssues.map((issue) => issue.key));
+    const rendered = definition.steps.map((step) => renderStepFields({ step, values: merged, declaredKeys, reportedKeys }));
+    const issues = [
+        ...valueIssues.map((issue) => ({
+            path: `inputs[${issue.key}]`,
+            message: issue.message,
+        })),
+        // Deliberately duplicated with `parseWorkflowDefinition`, and it stays: the two
+        // guard different entry points - a CLI that parsed a file, versus any caller
+        // invoking this compiler directly with a hand-built object.
+        ...validateWorkflowDefinition(definition),
+        ...rendered.flatMap((entry) => entry.issues),
+    ];
+    if (issues.length > 0) {
+        throw new WorkflowDefinitionError(issues);
+    }
+    const graph = {
+        // What the manager's `title ?? graph.goal` default reads, so `--title` stays optional.
+        goal: definition.name,
+        // Ported ballast: the CLI's reusable master-prompt template. Zero readers on
+        // 25fe57635 (only the TS interface and the Zod schema mention it).
+        masterPrompt: "",
+        metadata: {
+            // Emitted EMPTY on purpose. `resolveExecutionLayers` honours a declared list only
+            // when non-empty, then falls through to Kahn layering over `dependencies`. A
+            // precomputed list here would be a second derivation that can disagree with `needs`.
+            executionLayers: [],
+            // Upper bound, not a cap - nothing enforces it. Zero readers.
+            maxParallelism: definition.steps.length,
+            totalTasks: definition.steps.length,
+            // Unknown. Zero readers.
+            estimatedDuration: 0,
+            // Per-file task generation is a CLI concept with no paseo reader.
+            perFileMode: false,
+            // `storyFormat` and `totalFiles` are omitted, not defaulted: both are optional and
+            // neither has a definition-side vocabulary, so `false`/`0` would be a claim where
+            // an absent key is honestly "not specified".
+        },
+        // Ambient run identity, supplied by the caller so this stays a pure function.
+        // `outputDirectory` has zero readers on 25fe57635 but is schema-required.
+        session,
+        tasks: rendered.map(buildTask),
+    };
+    // Shallow copy: a caller mutating the returned presets must not reach back into the
+    // definition. Populating them onto the wire is Story 3.3's job.
+    return { graph, agentPresets: { ...definition.agents } };
+}
+/** Substitute every token in one field's text, iterating Story 3.1's scanner. */
+function substituteTokens(args) {
+    const issues = [];
+    // A FRESH pattern per call. A module-level `/g` regex carries `lastIndex` between
+    // calls, which would make the result depend on scan order.
+    const text = args.text.replace(createWorkflowTokenPattern(), (raw, body) => {
+        const name = body.trim();
+        if (!args.declaredKeys.has(name)) {
+            // Undeclared, or malformed (a body that is not a bare identifier is never a
+            // declared key). `validateWorkflowDefinition` already reports both, located at
+            // this same path, so reporting again here would double-count one mistake. The
+            // raw token is returned unrendered; the union above is non-empty, so the caller
+            // throws and this interim string is never observable.
+            return raw;
+        }
+        const value = args.values[name];
+        if (value === undefined) {
+            if (args.reportedKeys.has(name)) {
+                // Already located at `inputs[<name>]` by the value pass (required and missing).
+                return raw;
+            }
+            // Declared, referenced, and has no value. `validateLoopParams` cannot catch this
+            // (a non-required field with no value is legal to it) and Story 3.1 cannot
+            // (the input IS declared). Only the compiler knows the token is referenced.
+            // Reporting it is what keeps the token from rendering as "" or "undefined".
+            issues.push({
+                path: args.path,
+                message: `step "${args.stepId}" references ${raw}, which is a declared input with no value: supply --input ${name}=... or give the field a default`,
+            });
+            return raw;
+        }
+        return renderWorkflowInputValue(value);
+    });
+    return { text, issues };
+}
+/**
+ * Render every substitutable field of one step.
+ *
+ * Iterates `SUBSTITUTABLE_STEP_FIELDS` rather than a second hard-coded list, so this
+ * module and Story 3.1's validator cannot disagree about which fields accept a token.
+ * `id` and `needs` are absent from that constant on purpose: a topology that depends on
+ * runtime values could not be validated at authoring time.
+ */
+function renderStepFields(args) {
+    const fields = {};
+    const issues = [];
+    for (const field of SUBSTITUTABLE_STEP_FIELDS) {
+        const text = args.step[field];
+        if (text === undefined) {
+            continue;
+        }
+        const result = substituteTokens({
+            text,
+            values: args.values,
+            declaredKeys: args.declaredKeys,
+            reportedKeys: args.reportedKeys,
+            path: `steps[${args.step.id}].${field}`,
+            stepId: args.step.id,
+        });
+        fields[field] = result.text;
+        issues.push(...result.issues);
+    }
+    return { step: args.step, fields, issues };
+}
+/** One task node per step, in definition order. */
+function buildTask(rendered) {
+    const { fields, step } = rendered;
+    // `step.id` never carries a token, so a fallback that came from it needs no rendering.
+    const title = fields.title ?? step.id;
+    return {
+        id: step.id, // never substituted
+        dependencies: step.needs, // never substituted
+        // Falls back through the SUBSTITUTED title before the id, so a token in the title
+        // reaches the description rather than the description inheriting an unrendered one.
+        description: fields.description ?? title,
+        // `prompt` is required by `WorkflowStepSchema`, so `renderStepFields` always renders
+        // it; the fallback exists only to keep the expression total.
+        prompt: fields.prompt ?? step.prompt,
+        title,
+        // `""` is the schema-satisfying empty, and `outputFile` has no reader anywhere.
+        outputFile: fields.outputFile ?? "",
+        // Ported ballast from the bmad-workflow CLI. Verified zero readers on 25fe57635:
+        // the only occurrences of `parallelizable` in the tree are its two declarations.
+        parallelizable: true,
+        // Same: no reader. The definition has no duration vocabulary and this epic does not
+        // invent one.
+        estimatedMinutes: 0,
+        // Conditional spread so the key is ABSENT rather than present-with-`undefined`: the
+        // schema says optional, and absent is the honest encoding of "this step names no agent".
+        ...(step.agent === undefined ? {} : { agentType: step.agent }),
+        // `targetFiles` is never emitted: the definition has no vocabulary for it and this
+        // epic does not invent one.
+    };
+}
+//# sourceMappingURL=compile.js.map