@jshookmcp/jshook 0.2.9 → 0.3.0

package/dist/{Win32API-CePkipZY.mjs → Win32API-C2kjj0ze.mjs}

@@ -139,11 +139,17 @@ function getPsapi() {
 	}
 	return psapi;
 }
+function toPointerBigInt(value) {
+	if (value === null || value === void 0) return 0n;
+	if (typeof value === "bigint") return value;
+	if (typeof value === "number") return BigInt(value);
+	return koffi.address(value);
+}
 /**
 * Open a process handle
 */
 function OpenProcess(dwDesiredAccess, bInheritHandle, dwProcessId) {
-	return getKernel32().func("void * OpenProcess(uint32, int, uint32)")(dwDesiredAccess, bInheritHandle ? 1 : 0, dwProcessId);
+	return toPointerBigInt(getKernel32().func("void * OpenProcess(uint32, int, uint32)")(dwDesiredAccess, bInheritHandle ? 1 : 0, dwProcessId));
 }
 /**
 * Close a handle
@@ -155,7 +161,7 @@ function CloseHandle(hObject) {
 * Read process memory - returns buffer directly
 */
 function ReadProcessMemory(hProcess, lpBaseAddress, size) {
-	const fn = getKernel32().func("int ReadProcessMemory(void *, void *, _Out_ uint8_t[len], size_t len, _Out_ size_t *bytesRead)");
+	const fn = getKernel32().func("int ReadProcessMemory(void *, void *, _Out_ uint8_t *, size_t, _Out_ size_t *)");
 	const buffer = Buffer.alloc(size);
 	const bytesReadBuf = Buffer.alloc(8);
 	if (fn(hProcess, lpBaseAddress, buffer, BigInt(size), bytesReadBuf) === 0) {
@@ -168,7 +174,7 @@ function ReadProcessMemory(hProcess, lpBaseAddress, size) {
 * Write process memory
 */
 function WriteProcessMemory(hProcess, lpBaseAddress, data) {
-	const fn = getKernel32().func("int WriteProcessMemory(void *, void *, uint8_t[len], size_t len, _Out_ size_t *bytesWritten)");
+	const fn = getKernel32().func("int WriteProcessMemory(void *, void *, uint8_t *, size_t, _Out_ size_t *)");
 	const bytesWrittenBuf = Buffer.alloc(8);
 	if (fn(hProcess, lpBaseAddress, data, BigInt(data.length), bytesWrittenBuf) === 0) {
 		const error = GetLastError();
@@ -181,7 +187,7 @@ function WriteProcessMemory(hProcess, lpBaseAddress, data) {
 * Uses Buffer parsing to avoid koffi struct registration issues
 */
 function VirtualQueryEx(hProcess, lpAddress) {
-	const fn = getKernel32().func("size_t VirtualQueryEx(void *, void *, _Out_ uint8_t[48], size_t)");
+	const fn = getKernel32().func("size_t VirtualQueryEx(void *, void *, _Out_ uint8_t *, size_t)");
 	const structSize = 48;
 	const buffer = Buffer.alloc(structSize);
 	const result = fn(hProcess, lpAddress, buffer, BigInt(structSize));
@@ -217,7 +223,7 @@ function VirtualProtectEx(hProcess, lpAddress, dwSize, flNewProtect) {
 * Allocate memory in another process
 */
 function VirtualAllocEx(hProcess, lpAddress, dwSize, flAllocationType, flProtect) {
-	return getKernel32().func("void * VirtualAllocEx(void *, void *, size_t, uint32, uint32)")(hProcess, lpAddress, BigInt(dwSize), flAllocationType, flProtect);
+	return toPointerBigInt(getKernel32().func("void * VirtualAllocEx(void *, void *, size_t, uint32, uint32)")(hProcess, lpAddress, BigInt(dwSize), flAllocationType, flProtect));
 }
 /**
 * Free memory in another process
@@ -232,7 +238,7 @@ function CreateRemoteThread(hProcess, lpStartAddress, lpParameter) {
 	const fn = getKernel32().func("void * CreateRemoteThread(void *, void *, size_t, void *, void *, uint32, _Out_ uint32 *)");
 	const threadIdBuf = Buffer.alloc(4);
 	return {
-		handle: fn(hProcess, null, 0n, lpStartAddress, lpParameter, 0, threadIdBuf),
+		handle: toPointerBigInt(fn(hProcess, null, 0n, lpStartAddress, lpParameter, 0, threadIdBuf)),
 		threadId: threadIdBuf.readUInt32LE(0)
 	};
 }
@@ -240,13 +246,13 @@ function CreateRemoteThread(hProcess, lpStartAddress, lpParameter) {
 * Get module handle by name
 */
 function GetModuleHandle(lpModuleName) {
-	return getKernel32().func("void * GetModuleHandleA(char *)")(lpModuleName);
+	return toPointerBigInt(getKernel32().func("void * GetModuleHandleA(char *)")(lpModuleName));
 }
 /**
 * Get function address from module
 */
 function GetProcAddress(hModule, lpProcName) {
-	return getKernel32().func("void * GetProcAddress(void *, char *)")(hModule, lpProcName);
+	return toPointerBigInt(getKernel32().func("void * GetProcAddress(void *, char *)")(hModule, lpProcName));
 }
 /**
 * Get last error code
@@ -269,7 +275,7 @@ function NtQueryInformationProcess(hProcess, processInformationClass) {
 * Enumerate process modules
 */
 function EnumProcessModules(hProcess, maxModules = 1024) {
-	const fn = getPsapi().func("int EnumProcessModules(void *, _Out_ void *[], uint32, _Out_ uint32 *)");
+	const fn = getPsapi().func("int EnumProcessModules(void *, _Out_ void *, uint32, _Out_ uint32 *)");
 	const moduleBuf = Buffer.alloc(maxModules * 8);
 	const neededBuf = Buffer.alloc(4);
 	const result = fn(hProcess, moduleBuf, maxModules * 8, neededBuf);
@@ -287,7 +293,7 @@ function EnumProcessModules(hProcess, maxModules = 1024) {
 * Get module base name
 */
 function GetModuleBaseName(hProcess, hModule, maxSize = 260) {
-	const fn = getPsapi().func("uint32 GetModuleBaseNameA(void *, void *, _Out_ char[], uint32)");
+	const fn = getPsapi().func("uint32 GetModuleBaseNameA(void *, void *, _Out_ char *, uint32)");
 	const buffer = Buffer.alloc(maxSize);
 	fn(hProcess, hModule, buffer, maxSize);
 	let len = 0;
@@ -299,7 +305,7 @@ function GetModuleBaseName(hProcess, hModule, maxSize = 260) {
 * Returns null when the API is unavailable or the module path cannot be resolved.
 */
 function GetModuleFileNameEx(hProcess, hModule, maxSize = 32768) {
-	const fn = getPsapi().func("uint32 GetModuleFileNameExA(void *, void *, _Out_ char[], uint32)");
+	const fn = getPsapi().func("uint32 GetModuleFileNameExA(void *, void *, _Out_ char *, uint32)");
 	const buffer = Buffer.alloc(maxSize);
 	const result = fn(hProcess, hModule, buffer, maxSize);
 	if (typeof result !== "number" || result <= 0) return null;
@@ -312,7 +318,7 @@ function GetModuleFileNameEx(hProcess, hModule, maxSize = 32768) {
 * Uses Buffer parsing to avoid koffi struct registration issues
 */
 function GetModuleInformation(hProcess, hModule) {
-	const fn = getPsapi().func("int GetModuleInformation(void *, void *, _Out_ uint8_t[24], uint32)");
+	const fn = getPsapi().func("int GetModuleInformation(void *, void *, _Out_ uint8_t *, uint32)");
 	const buffer = Buffer.alloc(24);
 	const result = fn(hProcess, hModule, buffer, 24);
 	const info = {

package/dist/{Win32Debug-BvKs-gxc.mjs → Win32Debug-CKrGOTpo.mjs}

@@ -1,5 +1,5 @@
 import { t as logger } from "./logger-Dh_xb7_2.mjs";
-import { r as GetLastError, t as CloseHandle } from "./Win32API-CePkipZY.mjs";
+import { r as GetLastError, t as CloseHandle } from "./Win32API-C2kjj0ze.mjs";
 import koffi from "koffi";
 //#region src/native/Win32Debug.ts
 /**
@@ -156,7 +156,7 @@ function DebugSetProcessKillOnExit(killOnExit) {
 	getKernel32().func("int DebugSetProcessKillOnExit(int)")(killOnExit ? 1 : 0);
 }
 function WaitForDebugEvent(timeoutMs) {
-	const fn = getKernel32().func("int WaitForDebugEvent(_Out_ uint8_t[176], uint32)");
+	const fn = getKernel32().func("int WaitForDebugEvent(_Out_ uint8_t *, uint32)");
 	const buf = Buffer.alloc(176);
 	if (fn(buf, timeoutMs) === 0) return null;
 	const info = {

package/dist/{WorkflowEngine-CuvkZtWu.mjs → WorkflowEngine-DJ6M4opp.mjs}

@@ -1,59 +1,10 @@
 import { t as __exportAll } from "./chunk-CjcI7cDX.mjs";
 import { t as logger } from "./logger-Dh_xb7_2.mjs";
-import { a as getEffectivePrerequisites, c as getRoutingState } from "./ToolRouter.policy-BWV67ZK-.mjs";
+import { l as getRoutingState, o as getEffectivePrerequisites } from "./ToolRouter.policy-BGDAGyeH.mjs";
 import { randomUUID } from "node:crypto";
-//#region src/server/workflows/WorkflowRunStore.ts
-var WorkflowRunStore = class {
-	runs = /* @__PURE__ */ new Map();
-	lastSuccess = /* @__PURE__ */ new Map();
-	recordSuccess(result) {
-		const entry = {
-			workflowId: result.workflowId,
-			runId: result.runId,
-			startedAt: result.startedAt,
-			finishedAt: result.finishedAt,
-			durationMs: result.durationMs,
-			status: "success",
-			stepResultKeys: Object.keys(result.stepResults)
-		};
-		this.runs.set(result.runId, entry);
-		this.lastSuccess.set(result.workflowId, result);
-		logger.debug(`workflow run recorded: ${result.runId} (${result.workflowId})`);
-	}
-	recordError(workflowId, runId, startedAt, error) {
-		const entry = {
-			workflowId,
-			runId,
-			startedAt,
-			finishedAt: (/* @__PURE__ */ new Date()).toISOString(),
-			durationMs: Date.now() - new Date(startedAt).getTime(),
-			status: "error",
-			stepResultKeys: []
-		};
-		this.runs.set(runId, entry);
-		logger.debug(`workflow run error: ${runId} (${workflowId}): ${error}`);
-	}
-	getRun(runId) {
-		return this.runs.get(runId);
-	}
-	getLastSuccess(workflowId) {
-		return this.lastSuccess.get(workflowId);
-	}
-	listRuns(workflowId) {
-		const entries = [...this.runs.values()];
-		if (workflowId) return entries.filter((e) => e.workflowId === workflowId);
-		return entries;
-	}
-	clear() {
-		this.runs.clear();
-		this.lastSuccess.clear();
-	}
-};
-//#endregion
-//#region src/server/workflows/WorkflowEngine.ts
-var WorkflowEngine_exports = /* @__PURE__ */ __exportAll({ executeExtensionWorkflow: () => executeExtensionWorkflow });
+//#region src/server/workflows/WorkflowDataBus.ts
 /**
-* WorkflowDataBus — cross-node data bus for dynamic parameter passing.
+* Cross-node data bus for dynamic parameter passing.
 *
 * Supports expression templates like "${get-requests.scriptId}" to reference
 * outputs from previous steps.
@@ -66,11 +17,6 @@ var WorkflowDataBus = class {
 	get(key) {
 		return this.store.get(key);
 	}
-	/**
-	* Get a value at a specific path within a stored object.
-	* @param key - The key in the store
-	* @param path - Dot-separated path (e.g., "content.0.text")
-	*/
 	getValueAtPath(key, path) {
 		const value = this.store.get(key);
 		if (!value || typeof value !== "object") return value;
@@ -83,58 +29,19 @@ var WorkflowDataBus = class {
 			}
 		}, obj);
 	}
-	/**
-	* Resolve expression templates like "${stepId.fieldPath}".
-	* If the value is not an expression, returns it as-is.
-	*/
 	resolve(template) {
 		const match = template.match(/^\$\{(.+)\}$/);
 		if (!match || !match[1]) return template;
 		const ref = match[1];
 		const dotIndex = ref.indexOf(".");
 		if (dotIndex === -1) return this.store.get(ref);
-		const stepId = ref.slice(0, dotIndex);
-		const fieldPath = ref.slice(dotIndex + 1);
-		return this.getValueAtPath(stepId, fieldPath);
-	}
-};
-var PreflightError = class extends Error {
-	constructor(warnings) {
-		super(`Workflow preflight failed with ${warnings.length} unsatisfied prerequisite(s)`);
-		this.warnings = warnings;
-		this.name = "PreflightError";
+		return this.getValueAtPath(ref.slice(0, dotIndex), ref.slice(dotIndex + 1));
 	}
 };
-const globalRunStore = new WorkflowRunStore();
-function extractConfigValue(config, path, fallback) {
-	const segments = path.split(".").filter(Boolean);
-	let current = config;
-	for (const segment of segments) {
-		if (!current || typeof current !== "object") return fallback;
-		current = current[segment];
-	}
-	return current ?? fallback;
-}
-function sleep(ms) {
-	return new Promise((resolve) => setTimeout(resolve, ms));
-}
-async function withTimeout(promise, timeoutMs, label) {
-	if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) return promise;
-	return new Promise((resolve, reject) => {
-		const timeoutId = setTimeout(() => reject(/* @__PURE__ */ new Error(`${label} timed out after ${timeoutMs}ms`)), timeoutMs);
-		promise.then((value) => {
-			clearTimeout(timeoutId);
-			resolve(value);
-		}, (error) => {
-			clearTimeout(timeoutId);
-			reject(error);
-		});
-	});
-}
 function parseToolPayload(response) {
-	if (!response || typeof response !== "object") return void 0;
+	if (!response || typeof response !== "object") return;
 	const text = response.content?.find((item) => item.type === "text")?.text;
-	if (typeof text !== "string") return void 0;
+	if (typeof text !== "string") return;
 	try {
 		const parsed = JSON.parse(text);
 		return parsed && typeof parsed === "object" ? parsed : void 0;
@@ -143,7 +50,7 @@ function parseToolPayload(response) {
 	}
 }
 function responseIndicatesFailure(response) {
-	if (!response || typeof response !== "object") return void 0;
+	if (!response || typeof response !== "object") return;
 	if (response.isError) return "Tool returned MCP error response";
 	const payload = parseToolPayload(response);
 	if (payload?.success === false) return typeof payload.error === "string" ? payload.error : "Tool reported success=false";
@@ -182,7 +89,7 @@ function collectSuccessStats(value) {
 		success: 0,
 		failure: 1
 	};
-	if ("error" in value) return {
+	if ("error" in obj) return {
 		success: 0,
 		failure: 1
 	};
@@ -199,10 +106,6 @@ function resolveInputFrom(mapping, dataBus) {
 	}
 	return resolved;
 }
-/**
-* Recursively resolve expression templates in input values.
-* Handles nested objects and arrays.
-*/
 function resolveInputValues(input, dataBus) {
 	if (!input) return {};
 	const resolved = {};
@@ -214,11 +117,228 @@ function resolveValue(value, dataBus) {
 	if (Array.isArray(value)) return value.map((item) => resolveValue(item, dataBus));
 	if (value && typeof value === "object") {
 		const resolved = {};
-		for (const [k, v] of Object.entries(value)) resolved[k] = resolveValue(v, dataBus);
+		for (const [key, nestedValue] of Object.entries(value)) resolved[key] = resolveValue(nestedValue, dataBus);
 		return resolved;
 	}
 	return value;
 }
+//#endregion
+//#region src/server/workflows/WorkflowPredicates.ts
+function getWorkflowVariable(stepResults, keyPath) {
+	if (stepResults.has(keyPath)) return stepResults.get(keyPath);
+	const [stepId, ...fieldSegments] = keyPath.split(".");
+	if (!stepId || !stepResults.has(stepId)) return;
+	let current = stepResults.get(stepId);
+	if (current && typeof current === "object") {
+		const payload = parseToolPayload(current);
+		if (payload) current = payload;
+	}
+	for (const segment of fieldSegments) {
+		if (current && typeof current === "object") {
+			const arrayMatch = segment.match(/^(\d+)$/);
+			if (arrayMatch && Array.isArray(current)) {
+				current = current[Number(arrayMatch[1])];
+				continue;
+			}
+			current = current[segment];
+			continue;
+		}
+		return;
+	}
+	return current;
+}
+function deepEquals(left, right) {
+	if (left === right) return true;
+	if (typeof left !== typeof right) return false;
+	if (left && right && typeof left === "object" && typeof right === "object") {
+		if (Array.isArray(left) !== Array.isArray(right)) return false;
+		if (Array.isArray(left)) {
+			const leftArray = left;
+			const rightArray = right;
+			return leftArray.length === rightArray.length && leftArray.every((value, index) => deepEquals(value, rightArray[index]));
+		}
+		const leftKeys = Object.keys(left);
+		const rightKeys = Object.keys(right);
+		if (leftKeys.length !== rightKeys.length) return false;
+		return leftKeys.every((key) => deepEquals(left[key], right[key]));
+	}
+	return false;
+}
+async function evaluatePredicate(node, ctx) {
+	if (node.predicateFn) return await node.predicateFn(ctx);
+	if (node.predicateId === "always_true") return true;
+	if (node.predicateId === "always_false") return false;
+	if (node.predicateId === "any_step_failed") return [...ctx.stepResults.values()].some((value) => collectSuccessStats(value).failure > 0);
+	const successRateMatch = node.predicateId.match(/success_rate_gte_(\d+)/i);
+	if (successRateMatch?.[1]) {
+		const threshold = Number(successRateMatch[1]);
+		const aggregate = [...ctx.stepResults.values()].reduce((acc, value) => {
+			const next = collectSuccessStats(value);
+			acc.success += next.success;
+			acc.failure += next.failure;
+			return acc;
+		}, {
+			success: 0,
+			failure: 0
+		});
+		const total = aggregate.success + aggregate.failure;
+		return total > 0 && aggregate.success / total >= threshold / 100;
+	}
+	const equalsMatch = node.predicateId.match(/^variable_equals_(.+?)_(.+)$/);
+	if (equalsMatch?.[1] && equalsMatch[2]) return deepEquals(getWorkflowVariable(ctx.stepResults, equalsMatch[1]), equalsMatch[2]);
+	const containsMatch = node.predicateId.match(/^variable_contains_(.+?)_(.+)$/);
+	if (containsMatch?.[1] && containsMatch[2]) {
+		const value = getWorkflowVariable(ctx.stepResults, containsMatch[1]);
+		if (typeof value !== "string" && !Array.isArray(value)) return false;
+		return String(value).includes(containsMatch[2]);
+	}
+	const matchesMatch = node.predicateId.match(/^variable_matches_(.+?)_(.+)$/);
+	if (matchesMatch?.[1] && matchesMatch[2]) {
+		const value = getWorkflowVariable(ctx.stepResults, matchesMatch[1]);
+		if (typeof value !== "string") return false;
+		try {
+			return new RegExp(matchesMatch[2]).test(value);
+		} catch {
+			return false;
+		}
+	}
+	throw new Error(`Unknown workflow predicateId "${node.predicateId}"`);
+}
+//#endregion
+//#region src/server/workflows/WorkflowPreflight.ts
+function collectToolNodes(node) {
+	switch (node.kind) {
+		case "tool": return [node];
+		case "sequence":
+		case "parallel": return node.steps.flatMap((step) => collectToolNodes(step));
+		case "branch": return [...collectToolNodes(node.whenTrue), ...node.whenFalse ? collectToolNodes(node.whenFalse) : []];
+		case "fallback": return [...collectToolNodes(node.primary), ...collectToolNodes(node.fallback)];
+		default: return [];
+	}
+}
+function getEvidenceState(ctx) {
+	try {
+		const evidenceGraph = ctx.getDomainInstance("evidenceGraph");
+		return evidenceGraph ? {
+			hasGraph: true,
+			nodeCount: evidenceGraph.nodeCount,
+			edgeCount: evidenceGraph.edgeCount
+		} : {
+			hasGraph: false,
+			nodeCount: 0,
+			edgeCount: 0
+		};
+	} catch {
+		return {
+			hasGraph: false,
+			nodeCount: 0,
+			edgeCount: 0
+		};
+	}
+}
+function collectUnsatisfiedPrerequisites(graph, routingState) {
+	const prerequisites = getEffectivePrerequisites();
+	const warnings = [];
+	for (const toolNode of collectToolNodes(graph)) {
+		const toolPrerequisites = prerequisites[toolNode.toolName] ?? [];
+		for (const prerequisite of toolPrerequisites) {
+			if (prerequisite.check(routingState)) continue;
+			warnings.push({
+				nodeId: toolNode.id,
+				toolName: toolNode.toolName,
+				condition: prerequisite.condition,
+				fix: prerequisite.fix
+			});
+		}
+	}
+	return warnings;
+}
+//#endregion
+//#region src/server/workflows/WorkflowRunStore.ts
+var WorkflowRunStore = class {
+	runs = /* @__PURE__ */ new Map();
+	lastSuccess = /* @__PURE__ */ new Map();
+	recordSuccess(result) {
+		const entry = {
+			workflowId: result.workflowId,
+			runId: result.runId,
+			startedAt: result.startedAt,
+			finishedAt: result.finishedAt,
+			durationMs: result.durationMs,
+			status: "success",
+			stepResultKeys: Object.keys(result.stepResults)
+		};
+		this.runs.set(result.runId, entry);
+		this.lastSuccess.set(result.workflowId, result);
+		logger.debug(`workflow run recorded: ${result.runId} (${result.workflowId})`);
+	}
+	recordError(workflowId, runId, startedAt, error) {
+		const entry = {
+			workflowId,
+			runId,
+			startedAt,
+			finishedAt: (/* @__PURE__ */ new Date()).toISOString(),
+			durationMs: Date.now() - new Date(startedAt).getTime(),
+			status: "error",
+			stepResultKeys: []
+		};
+		this.runs.set(runId, entry);
+		logger.debug(`workflow run error: ${runId} (${workflowId}): ${error}`);
+	}
+	getRun(runId) {
+		return this.runs.get(runId);
+	}
+	getLastSuccess(workflowId) {
+		return this.lastSuccess.get(workflowId);
+	}
+	listRuns(workflowId) {
+		const entries = [...this.runs.values()];
+		if (workflowId) return entries.filter((e) => e.workflowId === workflowId);
+		return entries;
+	}
+	clear() {
+		this.runs.clear();
+		this.lastSuccess.clear();
+	}
+};
+//#endregion
+//#region src/server/workflows/WorkflowEngine.types.ts
+var PreflightError = class extends Error {
+	constructor(warnings) {
+		super(`Workflow preflight failed with ${warnings.length} unsatisfied prerequisite(s)`);
+		this.warnings = warnings;
+		this.name = "PreflightError";
+	}
+};
+//#endregion
+//#region src/server/workflows/WorkflowEngine.ts
+var WorkflowEngine_exports = /* @__PURE__ */ __exportAll({ executeExtensionWorkflow: () => executeExtensionWorkflow });
+const globalRunStore = new WorkflowRunStore();
+function extractConfigValue(config, path, fallback) {
+	const segments = path.split(".").filter(Boolean);
+	let current = config;
+	for (const segment of segments) {
+		if (!current || typeof current !== "object") return fallback;
+		current = current[segment];
+	}
+	return current ?? fallback;
+}
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function withTimeout(promise, timeoutMs, label) {
+	if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) return promise;
+	return new Promise((resolve, reject) => {
+		const timeoutId = setTimeout(() => reject(/* @__PURE__ */ new Error(`${label} timed out after ${timeoutMs}ms`)), timeoutMs);
+		promise.then((value) => {
+			clearTimeout(timeoutId);
+			resolve(value);
+		}, (error) => {
+			clearTimeout(timeoutId);
+			reject(error);
+		});
+	});
+}
 async function runToolNode(ctx, node, overrides, executionContext) {
 	const fromResolved = node.inputFrom ? resolveInputFrom(node.inputFrom, executionContext.dataBus) : {};
 	const mergedInput = {
@@ -281,100 +401,6 @@ async function runParallelNode(ctx, node, executionContext, options) {
 	await Promise.all(Array.from({ length: Math.min(concurrency, node.steps.length) }, () => worker()));
 	return keyedResults;
 }
-/**
-* Get a variable value from workflow context by key path.
-* Supports dot notation for nested access within step results.
-*/
-function getWorkflowVariable(stepResults, keyPath) {
-	if (stepResults.has(keyPath)) return stepResults.get(keyPath);
-	const segments = keyPath.split(".");
-	const stepId = segments[0];
-	const fieldSegments = segments.slice(1);
-	if (!stepId || !stepResults.has(stepId)) return;
-	let current = stepResults.get(stepId);
-	if (current && typeof current === "object") {
-		const payload = parseToolPayload(current);
-		if (payload) current = payload;
-	}
-	for (const segment of fieldSegments) if (current && typeof current === "object") {
-		const arrayMatch = segment.match(/^(\d+)$/);
-		if (arrayMatch && Array.isArray(current)) {
-			current = current[Number(arrayMatch[1])];
-			continue;
-		}
-		current = current[segment];
-	} else return;
-	return current;
-}
-async function evaluatePredicate(node, ctx) {
-	if (node.predicateFn) return await node.predicateFn(ctx);
-	if (node.predicateId === "always_true") return true;
-	if (node.predicateId === "always_false") return false;
-	if (node.predicateId === "any_step_failed") return [...ctx.stepResults.values()].some((value) => collectSuccessStats(value).failure > 0);
-	const successRateMatch = node.predicateId.match(/success_rate_gte_(\d+)/i);
-	if (successRateMatch) {
-		const threshold = Number(successRateMatch[1]);
-		const aggregate = [...ctx.stepResults.values()].reduce((acc, value) => {
-			const next = collectSuccessStats(value);
-			acc.success += next.success;
-			acc.failure += next.failure;
-			return acc;
-		}, {
-			success: 0,
-			failure: 0
-		});
-		const total = aggregate.success + aggregate.failure;
-		if (total === 0) return false;
-		return aggregate.success / total >= threshold / 100;
-	}
-	const equalsMatch = node.predicateId.match(/^variable_equals_(.+?)_(.+)$/);
-	if (equalsMatch && equalsMatch[1] && equalsMatch[2]) {
-		const keyPath = equalsMatch[1];
-		const expectedValue = equalsMatch[2];
-		return deepEquals(getWorkflowVariable(ctx.stepResults, keyPath), expectedValue);
-	}
-	const containsMatch = node.predicateId.match(/^variable_contains_(.+?)_(.+)$/);
-	if (containsMatch && containsMatch[1] && containsMatch[2]) {
-		const keyPath = containsMatch[1];
-		const substring = containsMatch[2];
-		const value = getWorkflowVariable(ctx.stepResults, keyPath);
-		if (typeof value !== "string" && !Array.isArray(value)) return false;
-		return String(value).includes(substring);
-	}
-	const matchesMatch = node.predicateId.match(/^variable_matches_(.+?)_(.+)$/);
-	if (matchesMatch && matchesMatch[1] && matchesMatch[2]) {
-		const keyPath = matchesMatch[1];
-		const pattern = matchesMatch[2];
-		const value = getWorkflowVariable(ctx.stepResults, keyPath);
-		if (typeof value !== "string") return false;
-		try {
-			return new RegExp(pattern).test(value);
-		} catch {
-			return false;
-		}
-	}
-	throw new Error(`Unknown workflow predicateId "${node.predicateId}"`);
-}
-/**
-* Deep equality check for two values.
-*/
-function deepEquals(a, b) {
-	if (a === b) return true;
-	if (typeof a !== typeof b) return false;
-	if (a && b && typeof a === "object" && typeof b === "object") {
-		if (Array.isArray(a) !== Array.isArray(b)) return false;
-		if (Array.isArray(a)) {
-			const arrA = a;
-			const arrB = b;
-			return arrA.length === arrB.length && arrA.every((v, i) => deepEquals(v, arrB[i]));
-		}
-		const keysA = Object.keys(a);
-		const keysB = Object.keys(b);
-		if (keysA.length !== keysB.length) return false;
-		return keysA.every((key) => deepEquals(a[key], b[key]));
-	}
-	return false;
-}
 async function executeNode(ctx, node, executionContext, options) {
 	executionContext.emitSpan("workflow.node.start", {
 		nodeId: node.id,
@@ -426,61 +452,6 @@ async function executeNode(ctx, node, executionContext, options) {
 	});
 	return result;
 }
-/** Recursively collect all ToolNode instances from a workflow graph. */
-function collectToolNodes(node) {
-	switch (node.kind) {
-		case "tool": return [node];
-		case "sequence":
-		case "parallel": return node.steps.flatMap((step) => collectToolNodes(step));
-		case "branch": return [...collectToolNodes(node.whenTrue), ...node.whenFalse ? collectToolNodes(node.whenFalse) : []];
-		case "fallback": {
-			const fallbackNode = node;
-			return [...collectToolNodes(fallbackNode.primary), ...collectToolNodes(fallbackNode.fallback)];
-		}
-		default: return [];
-	}
-}
-/**
-* Collect unsatisfied prerequisites for all tool nodes in the workflow graph.
-* Returns an array of warnings (not errors — preflight is warn-only mode).
-*/
-function getEvidenceState(ctx) {
-	try {
-		const evidenceGraph = ctx.getDomainInstance("evidenceGraph");
-		return evidenceGraph ? {
-			hasGraph: true,
-			nodeCount: evidenceGraph.nodeCount,
-			edgeCount: evidenceGraph.edgeCount
-		} : {
-			hasGraph: false,
-			nodeCount: 0,
-			edgeCount: 0
-		};
-	} catch {
-		return {
-			hasGraph: false,
-			nodeCount: 0,
-			edgeCount: 0
-		};
-	}
-}
-function collectUnsatisfiedPrerequisites(graph, routingState) {
-	const prerequisites = getEffectivePrerequisites();
-	const warnings = [];
-	for (const toolNode of collectToolNodes(graph)) {
-		const toolPrerequisites = prerequisites[toolNode.toolName] ?? [];
-		for (const prerequisite of toolPrerequisites) {
-			if (prerequisite.check(routingState)) continue;
-			warnings.push({
-				nodeId: toolNode.id,
-				toolName: toolNode.toolName,
-				condition: prerequisite.condition,
-				fix: prerequisite.fix
-			});
-		}
-	}
-	return warnings;
-}
 async function executeExtensionWorkflow(ctx, workflow, options = {}) {
 	const runId = randomUUID();
 	const profile = options.profile ?? String(ctx.baseTier ?? "workflow");