@ironflow/node 0.20.0 → 0.20.2

package/LICENSE

@@ -0,0 +1,181 @@
+# Ironflow License
+
+**Version 1.0 — 2026-05-08**
+
+This file contains the binding legal terms under which Ironflow is offered.
+A plain-English summary lives at `docs/explanation/licensing.md`. If the two
+disagree, this file controls.
+
+> **Lawyer review status:** v1 DIY-substitute. Pending counsel review before
+> the first paid customer ships (issue #777). All of the following MUST be
+> resolved before this license is published on the public release mirror:
+>
+>   - `[LICENSOR_ENTITY]` placeholder filled with the legal entity name
+>   - `[LICENSE_EMAIL]` placeholder filled with the commercial-licensing
+>     contact address
+>   - "Personal-Use and Evaluation Carve-Out" section reviewed by counsel —
+>     this is supplemental to the FSL Permitted Purpose and was added to
+>     match the worked examples in `docs/explanation/licensing.md` per the
+>     plan body. JetBrains Toolbox + Postman free-tier EULAs were the
+>     reference for the carve-out shape, but the wording is original prose
+>     and has not been counsel-reviewed.
+>   - "Governing Law and Venue" + "Commercial Licensing" sections reviewed
+>     by counsel — these are original prose, not part of the FSL template.
+>
+> **Versioning:** revised terms apply on next install. Each release ships
+> the LICENSE that was effective at the time the artifact was built.
+> Continuing to use a previously installed version under its prior terms
+> is permitted; upgrading to a newer release accepts the LICENSE shipped
+> with that release.
+
+---
+
+## Functional Source License, Version 1.1, ALv2 Future License
+
+## Abbreviation
+
+FSL-1.1-ALv2
+
+## Notice
+
+Copyright 2026 [LICENSOR_ENTITY]
+
+## Terms and Conditions
+
+### Licensor ("We")
+
+The party offering the Software under these Terms and Conditions.
+
+### The Software
+
+The "Software" is each version of the software that we make available under
+these Terms and Conditions, as indicated by our inclusion of these Terms and
+Conditions with the Software.
+
+### License Grant
+
+Subject to your compliance with this License Grant and the Patents,
+Redistribution and Trademark clauses below, we hereby grant you the right to
+use, copy, modify, create derivative works, publicly perform, publicly display
+and redistribute the Software for any Permitted Purpose identified below.
+
+### Permitted Purpose
+
+A Permitted Purpose is any purpose other than a Competing Use. A Competing Use
+means making the Software available to others in a commercial product or
+service that:
+
+1. substitutes for the Software;
+
+2. substitutes for any other product or service we offer using the Software
+   that exists as of the date we make the Software available; or
+
+3. offers the same or substantially similar functionality as the Software.
+
+Permitted Purposes specifically include using the Software:
+
+1. for your internal use and access;
+
+2. for non-commercial education;
+
+3. for non-commercial research; and
+
+4. in connection with professional services that you provide to a licensee
+   using the Software in accordance with these Terms and Conditions.
+
+### Patents
+
+To the extent your use for a Permitted Purpose would necessarily infringe our
+patents, the license grant above includes a license under our patents. If you
+make a claim against any party that the Software infringes or contributes to
+the infringement of any patent, then your patent license to the Software ends
+immediately.
+
+### Redistribution
+
+The Terms and Conditions apply to all copies, modifications and derivatives of
+the Software.
+
+If you redistribute any copies, modifications or derivatives of the Software,
+you must include a copy of or a link to these Terms and Conditions and not
+remove any copyright notices provided in or with the Software.
+
+### Disclaimer
+
+THE SOFTWARE IS PROVIDED "AS IS" AND WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR A PARTICULAR
+PURPOSE, MERCHANTABILITY, TITLE OR NON-INFRINGEMENT.
+
+IN NO EVENT WILL WE HAVE ANY LIABILITY TO YOU ARISING OUT OF OR RELATED TO THE
+SOFTWARE, INCLUDING INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES,
+EVEN IF WE HAVE BEEN INFORMED OF THEIR POSSIBILITY IN ADVANCE.
+
+### Trademarks
+
+Except for displaying the License Details and identifying us as the origin of
+the Software, you have no right under these Terms and Conditions to use our
+trademarks, trade names, service marks or product names.
+
+## Grant of Future License
+
+We hereby irrevocably grant you an additional license to use the Software under
+the Apache License, Version 2.0 that is effective on the second anniversary of
+the date we make the Software available. On or after that date, you may use the
+Software under the Apache License, Version 2.0, in which case the following
+will apply:
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+this file except in compliance with the License.
+
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software distributed
+under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied. See the License for the
+specific language governing permissions and limitations under the License.
+
+---
+
+## Personal-Use and Evaluation Carve-Out
+
+> _Supplemental to the FSL Permitted Purpose above. Pending counsel review._
+
+The following uses are explicitly permitted in addition to the FSL Permitted
+Purposes listed above:
+
+1. **Personal use.** Use of the Software by a natural person for that
+   person's personal, non-commercial purposes — including hobby projects,
+   self-education, and side projects that do not generate revenue or
+   commercial advantage.
+
+2. **Evaluation.** Use of the Software by any individual or organization for
+   the purpose of evaluating the Software prior to a commercial purchase
+   decision, for a period of up to ninety (90) days from first install.
+   Evaluation use does not require notification.
+
+These carve-outs are non-transferable and do not extend to redistribution,
+sublicensing, or any Competing Use as defined in the FSL Permitted Purpose
+section.
+
+---
+
+## Governing Law and Venue
+
+These Terms and Conditions are governed by the laws of the State of Delaware,
+United States of America, without regard to its conflict-of-laws provisions.
+Any dispute arising out of or relating to these Terms and Conditions shall be
+brought exclusively in the state or federal courts located in Delaware, and
+you consent to the personal jurisdiction of those courts.
+
+## Commercial Licensing
+
+For uses that fall outside the Permitted Purpose — including any Competing
+Use, or any commercial use case for which a separate paid license is required
+under our Cloud or Enterprise terms — contact `[LICENSE_EMAIL]` to discuss
+a commercial license.
+
+## SPDX Identifier
+
+`LicenseRef-Ironflow-EULA`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ironflow/node",
-  "version": "0.20.0",
+  "version": "0.20.2",
   "description": "Node.js SDK for Ironflow event-driven backend platform - workers, serve handlers, and step execution",
   "type": "module",
   "main": "./dist/index.js",
@@ -43,17 +43,17 @@
     "README.md"
   ],
   "dependencies": {
-    "zod": "^4.3.5",
-    "@ironflow/core": "^0.20.0"
+    "zod": "^4.4.3",
+    "@ironflow/core": "^0.20.2"
   },
   "optionalDependencies": {
-    "@bufbuild/protobuf": "^2.5.1",
+    "@bufbuild/protobuf": "^2.12.0",
     "@connectrpc/connect": "^2.1.1",
     "@connectrpc/connect-node": "^2.1.1"
   },
   "devDependencies": {
-    "@types/node": "^22.14.0",
-    "esbuild": "^0.27.2",
+    "@types/node": "^22.19.18",
+    "esbuild": "^0.27.7",
     "typescript": "^5.9.3",
     "vitest": "^2.1.9"
   },
@@ -76,14 +76,14 @@
     "step-functions"
   ],
   "author": "Ironflow",
-  "license": "MIT",
+  "license": "LicenseRef-Ironflow-EULA",
   "repository": {
     "type": "git",
     "url": "https://github.com/ironflowapp/ironflow.git",
     "directory": "sdk/js/node"
   },
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "scripts": {
     "prebuild": "node scripts/sync-version.mjs",

package/dist/agent/agent.d.ts

@@ -1,60 +0,0 @@
-/**
- * agent() — entrypoint for durable AI agents.
- *
- * Wraps createFunction() with an extended handler context that carries
- * agent-shaped primitives (tool, llm, approve, memory, spawn). The
- * returned value is a plain IronflowFunction so existing serve() and
- * createWorker() register agents with zero changes.
- *
- * Runtime shape:
- *   - Per-run turn counter (drives ctx.turn + maxTurns enforcement).
- *   - Per-run tool registry built from AgentConfig.tools (drives by-name
- *     dispatch in ctx.tool(name, args) for LLM-driven tool calls).
- *   - Per-run byArgs idempotency cache for ctx.tool().
- *   - Per-run in-memory cache for memory.get() reads.
- *
- * All wrappers compose over ctx.step — agents inherit Ironflow's
- * crash-resume, replay, and audit semantics from the existing runtime.
- */
-import type { z } from "zod";
-import type { AgentConfig, AgentHandler, IronflowAgent } from "./types.js";
-/**
- * Define a durable agent.
- *
- * When `config.memory` is set, the runtime constructs an IronflowClient
- * from `process.env.IRONFLOW_URL` (or `IRONFLOW_SERVER_URL`) plus
- * `IRONFLOW_API_KEY` for the memory backend. Workers that pass
- * `serverUrl` explicitly to `serve()` / `createWorker()` should also
- * export the matching env vars so memory operations resolve correctly.
- *
- * @example
- * ```ts
- * import { agent, defineTool } from "@ironflow/node/agent";
- * import { z } from "zod";
- *
- * const fetchDiff = defineTool({
- *   name: "fetch-diff",
- *   input: z.object({ pr: z.number() }),
- *   handler: async ({ pr }) => api.diff(pr),
- * });
- *
- * export const reviewAgent = agent(
- *   {
- *     id: "code-review",
- *     triggers: [{ event: "pr.opened" }],
- *     tools: [fetchDiff],
- *   },
- *   async ({ step, tool, llm, approve }) => {
- *     const diff = await tool(fetchDiff, { pr: event.data.prNumber });
- *     const findings = await llm.complete({
- *       messages: [{ role: "user", content: `Review:\n${diff}` }],
- *       call: () => myProvider.complete(...),
- *     });
- *     const decision = await approve("ship-it", { ttl: "24h", payload: findings });
- *     return { approved: decision.approved };
- *   }
- * );
- * ```
- */
-export declare function agent<TEventSchema extends z.ZodType = z.ZodType<unknown>, TResult = unknown>(config: AgentConfig<TEventSchema>, handler: AgentHandler<z.infer<TEventSchema>, TResult>): IronflowAgent<z.infer<TEventSchema>, TResult>;
-//# sourceMappingURL=agent.d.ts.map

package/dist/agent/agent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/agent/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAc7B,OAAO,KAAK,EACV,WAAW,EAEX,YAAY,EAEZ,aAAa,EACd,MAAM,YAAY,CAAC;AAKpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,KAAK,CAAC,YAAY,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,EAC1F,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,EACjC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,GACpD,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,CAoC/C"}

package/dist/agent/agent.js

@@ -1,133 +0,0 @@
-/**
- * agent() — entrypoint for durable AI agents.
- *
- * Wraps createFunction() with an extended handler context that carries
- * agent-shaped primitives (tool, llm, approve, memory, spawn). The
- * returned value is a plain IronflowFunction so existing serve() and
- * createWorker() register agents with zero changes.
- *
- * Runtime shape:
- *   - Per-run turn counter (drives ctx.turn + maxTurns enforcement).
- *   - Per-run tool registry built from AgentConfig.tools (drives by-name
- *     dispatch in ctx.tool(name, args) for LLM-driven tool calls).
- *   - Per-run byArgs idempotency cache for ctx.tool().
- *   - Per-run in-memory cache for memory.get() reads.
- *
- * All wrappers compose over ctx.step — agents inherit Ironflow's
- * crash-resume, replay, and audit semantics from the existing runtime.
- */
-import { IronflowClient } from "../client.js";
-import { createFunction } from "../function.js";
-import { makeApprove } from "./approve.js";
-import { DuplicateToolError } from "./errors.js";
-import { createTurnCounter, makeLlm } from "./llm.js";
-import { createMemoryRuntimeCache, createMemoryRuntimeCounters, makeMemory, } from "./memory.js";
-import { makeSpawn } from "./spawn.js";
-import { createToolRuntime, makeTool } from "./tool.js";
-/** Default agent turn budget. Configurable via AgentConfig.maxTurns. */
-const DEFAULT_MAX_TURNS = 20;
-/**
- * Define a durable agent.
- *
- * When `config.memory` is set, the runtime constructs an IronflowClient
- * from `process.env.IRONFLOW_URL` (or `IRONFLOW_SERVER_URL`) plus
- * `IRONFLOW_API_KEY` for the memory backend. Workers that pass
- * `serverUrl` explicitly to `serve()` / `createWorker()` should also
- * export the matching env vars so memory operations resolve correctly.
- *
- * @example
- * ```ts
- * import { agent, defineTool } from "@ironflow/node/agent";
- * import { z } from "zod";
- *
- * const fetchDiff = defineTool({
- *   name: "fetch-diff",
- *   input: z.object({ pr: z.number() }),
- *   handler: async ({ pr }) => api.diff(pr),
- * });
- *
- * export const reviewAgent = agent(
- *   {
- *     id: "code-review",
- *     triggers: [{ event: "pr.opened" }],
- *     tools: [fetchDiff],
- *   },
- *   async ({ step, tool, llm, approve }) => {
- *     const diff = await tool(fetchDiff, { pr: event.data.prNumber });
- *     const findings = await llm.complete({
- *       messages: [{ role: "user", content: `Review:\n${diff}` }],
- *       call: () => myProvider.complete(...),
- *     });
- *     const decision = await approve("ship-it", { ttl: "24h", payload: findings });
- *     return { approved: decision.approved };
- *   }
- * );
- * ```
- */
-export function agent(config, handler) {
-    const maxTurns = config.maxTurns ?? DEFAULT_MAX_TURNS;
-    const registry = buildRegistry(config.tools);
-    return createFunction(config, async (ctx) => {
-        const counter = createTurnCounter();
-        const toolRuntime = createToolRuntime();
-        const memoryCache = createMemoryRuntimeCache();
-        const memoryCounters = createMemoryRuntimeCounters();
-        const memoryBackend = config.memory ? createDefaultMemoryBackend() : undefined;
-        const agentCtx = {
-            event: ctx.event,
-            step: ctx.step,
-            run: ctx.run,
-            logger: ctx.logger,
-            secrets: ctx.secrets,
-            tool: makeTool(ctx.step, registry, toolRuntime),
-            llm: makeLlm(ctx.step, counter, maxTurns),
-            approve: makeApprove(ctx.step, ctx.run.id),
-            memory: makeMemory(ctx.step, config.memory, ctx.run.id, memoryCache, memoryBackend, memoryCounters),
-            spawn: makeSpawn(ctx.step),
-            get turn() {
-                return counter.value;
-            },
-        };
-        return handler(agentCtx);
-    });
-}
-/**
- * Construct the default MemoryBackend from environment variables.
- *
- * Reads IRONFLOW_URL / IRONFLOW_SERVER_URL for the server endpoint and
- * IRONFLOW_API_KEY for auth. Returns undefined when no URL is set so
- * makeMemory() can surface a clear "no backend" error on first use.
- */
-function createDefaultMemoryBackend() {
-    const serverUrl = process.env.IRONFLOW_URL ?? process.env.IRONFLOW_SERVER_URL;
-    if (!serverUrl)
-        return undefined;
-    const client = new IronflowClient({
-        serverUrl,
-        apiKey: process.env.IRONFLOW_API_KEY,
-    });
-    return {
-        appendEvent: (streamId, input) => client.streams.append(streamId, { name: input.name, data: input.data, entityType: input.entityType }, { idempotencyKey: input.idempotencyKey, metadata: input.metadata }),
-        getProjection: (name) => client.projections.get(name),
-        waitForCatchup: async (name, opts) => {
-            await client.projections.waitForCatchup(name, {
-                minSeq: opts.minSeq,
-                partition: opts.partition,
-                timeoutMs: opts.timeoutMs,
-            });
-        },
-    };
-}
-function buildRegistry(tools) {
-    const map = new Map();
-    if (!tools)
-        return map;
-    for (const def of tools) {
-        if (map.has(def.name)) {
-            throw new DuplicateToolError(def.name);
-        }
-        map.set(def.name, def);
-    }
-    return map;
-}
-//# sourceMappingURL=agent.js.map

package/dist/agent/agent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/agent/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAEL,wBAAwB,EACxB,2BAA2B,EAC3B,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AASxD,wEAAwE;AACxE,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,KAAK,CACnB,MAAiC,EACjC,OAAqD;IAErD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7C,OAAO,cAAc,CAAwB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,2BAA2B,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAE/E,MAAM,QAAQ,GAAwC;YACpD,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC;YAC/C,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC;YACzC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,EAAE,UAAU,CAChB,GAAG,CAAC,IAAI,EACR,MAAM,CAAC,MAAM,EACb,GAAG,CAAC,GAAG,CAAC,EAAE,EACV,WAAW,EACX,aAAa,EACb,cAAc,CACf;YACD,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1B,IAAI,IAAI;gBACN,OAAO,OAAO,CAAC,KAAK,CAAC;YACvB,CAAC;SACF,CAAC;QAEF,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,0BAA0B;IACjC,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC9D,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;QAChC,SAAS;QACT,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;KACrC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CACnB,QAAQ,EACR,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EACpE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CACnE;QACH,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QACrD,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE;gBAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAmD;IAEnD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent/approve.d.ts

@@ -1,23 +0,0 @@
-/**
- * approve() — durable human-approval gate.
- *
- * Wraps step.waitForEvent on a deterministic event name derived from the
- * agent run + approval name. The default behavior on TTL elapse is to
- * resolve with approved=false, reason="timeout" — explicit rejection vs
- * timeout is observable to the caller via the returned reason field.
- *
- * Approval events follow the convention:
- *   name:      "agent.approve.{name}"
- *   filter:    runId === ctx.run.id
- *   data shape:
- *     { approved: boolean, approver?: string, payload?, reason? }
- */
-import type { StepClient } from "@ironflow/core";
-import type { ApproveFn } from "./types.js";
-/**
- * Build an ApproveFn bound to the given step + run.
- *
- * Exported for use by agent.ts; not part of the public API surface.
- */
-export declare function makeApprove(step: StepClient, runId: string): ApproveFn;
-//# sourceMappingURL=approve.d.ts.map

package/dist/agent/approve.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"approve.d.ts","sourceRoot":"","sources":["../../src/agent/approve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAiC,MAAM,YAAY,CAAC;AAI3E;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CA4BtE"}

package/dist/agent/approve.js

@@ -1,42 +0,0 @@
-/**
- * approve() — durable human-approval gate.
- *
- * Wraps step.waitForEvent on a deterministic event name derived from the
- * agent run + approval name. The default behavior on TTL elapse is to
- * resolve with approved=false, reason="timeout" — explicit rejection vs
- * timeout is observable to the caller via the returned reason field.
- *
- * Approval events follow the convention:
- *   name:      "agent.approve.{name}"
- *   filter:    runId === ctx.run.id
- *   data shape:
- *     { approved: boolean, approver?: string, payload?, reason? }
- */
-import { escapeMatchValue, normalizeDuration } from "./internal.js";
-const APPROVE_EVENT_PREFIX = "agent.approve.";
-/**
- * Build an ApproveFn bound to the given step + run.
- *
- * Exported for use by agent.ts; not part of the public API surface.
- */
-export function makeApprove(step, runId) {
-    return async function approve(name, options) {
-        const eventName = APPROVE_EVENT_PREFIX + name;
-        const event = await step.waitForEvent(`approve.${name}`, {
-            event: eventName,
-            timeout: normalizeDuration(options.ttl),
-            match: `data.runId == "${escapeMatchValue(runId)}"`,
-        });
-        if (event === null || event === undefined) {
-            return { approved: false, reason: "timeout" };
-        }
-        const data = event.data;
-        return {
-            approved: Boolean(data?.approved),
-            approver: data?.approver,
-            payload: data?.payload,
-            reason: data?.reason,
-        };
-    };
-}
-//# sourceMappingURL=approve.js.map

package/dist/agent/approve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"approve.js","sourceRoot":"","sources":["../../src/agent/approve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGpE,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,KAAa;IACzD,OAAO,KAAK,UAAU,OAAO,CAC3B,IAAY,EACZ,OAAiC;QAEjC,MAAM,SAAS,GAAG,oBAAoB,GAAG,IAAI,CAAC;QAE9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CACnC,WAAW,IAAI,EAAE,EACjB;YACE,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;YACvC,KAAK,EAAE,kBAAkB,gBAAgB,CAAC,KAAK,CAAC,GAAG;SACpD,CACF,CAAC;QAEF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;YACjC,QAAQ,EAAE,IAAI,EAAE,QAAQ;YACxB,OAAO,EAAE,IAAI,EAAE,OAAO;YACtB,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/agent/dispatch.d.ts

@@ -1,63 +0,0 @@
-/**
- * Inbound callback handler for Ironflow → SDK agent-tool dispatch.
- *
- * The Ironflow server's `agent_tools.Dispatcher` POSTs an HMAC-signed
- * request to `${callbackUrl}` (the user's serve() mount). serve() routes
- * `/ironflow/agent-tools/dispatch` here. We:
- *
- *   1. Verify HMAC + replay window (5min past, 1min future).
- *   2. Look up the qualified tool in the local registry.
- *   3. Validate input against the McpToolDef Zod schema.
- *   4. Run the handler, mapping success → {output} and any throw →
- *      {error:{code:"HANDLER_ERROR", message}} (200 with envelope so the
- *      Go dispatcher decodes it as a tool error instead of a transport
- *      failure — see internal/agent_tools/dispatcher.go:182).
- *
- *	 server                            SDK serve()
- *	   │  POST /…/dispatch              │
- *	   │ X-Ironflow-Timestamp: <unix>   │
- *	   │ X-Ironflow-Signature: sha256=… │
- *	   │ body: {qualified_name, input}  │
- *	   │  ─────────────────────────────▶│
- *	   │                                │ verify HMAC
- *	   │                                │ lookupLocal()
- *	   │                                │ Zod parse(input)
- *	   │                                │ def.handler(input)
- *	   │                                │
- *	   │ 200 {output} | 200 {error} |   │
- *	   │ 401 sig | 400 schema           │
- *	   │ ◀───────────────────────────── │
- */
-/** Path served on the user's serve() mount. */
-export declare const DISPATCH_PATH = "/ironflow/agent-tools/dispatch";
-interface DispatchEnvelope {
-    output?: unknown;
-    error?: {
-        code: string;
-        message: string;
-    };
-}
-interface DispatchResult {
-    status: number;
-    body: DispatchEnvelope;
-}
-interface MinimalRequest {
-    text(): Promise<string>;
-    headers: {
-        get(name: string): string | null;
-    };
-}
-/**
- * Process an inbound dispatch request. Returns status + body envelope —
- * the caller (serve()) is responsible for serializing.
- */
-export declare function handleAgentToolDispatch(request: MinimalRequest): Promise<DispatchResult>;
-/**
- * verifyHmac is exported for cross-language vector parity tests
- * (testdata/hmac_vectors.json, issue #595 S8). It is NOT part of the
- * public @ironflow/node/agent surface — production callers reach it
- * via handleAgentToolDispatch().
- */
-export declare function verifyHmac(rawBody: string, ts: number, receivedHex: string, secretHex: string): boolean;
-export {};
-//# sourceMappingURL=dispatch.d.ts.map

package/dist/agent/dispatch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/agent/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAYH,+CAA+C;AAC/C,eAAO,MAAM,aAAa,mCAAmC,CAAC;AAE9D,UAAU,gBAAgB;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAOD,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,UAAU,cAAc;IACtB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC/C;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,cAAc,CAAC,CAgEzB;AAMD;;;;;GAKG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAkBT"}