@kb-labs/rest-api-app 1.3.0

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/runs-list-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/http-client.ts","../../src/rest/runs-list-handler.ts"],"names":[],"mappings":";;;;;AAKA,IAAM,kBAAA,GAAqB,uBAAA;AASpB,SAAS,oBAAA,GAA+B;AAC7C,EAAA,OAAO,OAAA,CAAQ,IAAI,mBAAA,IAAuB,kBAAA;AAC5C;;;ACKA,IAAO,4BAAQ,aAAA,CAAc;AAAA,EAC3B,MAAM,OAAA,CACJ,GAAA,EACA,KAAA,EACkB;AAClB,IAAA,MAAM,YAAY,oBAAA,EAAqB;AACvC,IAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,QAAO,GAAI,KAAA,CAAM,SAAS,EAAC;AAElD,IAAA,MAAM,cAAA,GAAiB,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,KAAK,GAAA,CAAI,QAAA,CAAS,KAAA,EAAO,EAAE,CAAA,IAAK,EAAA,EAAI,CAAC,CAAA,EAAG,GAAI,CAAA,GAAI,EAAA;AACxF,IAAA,MAAM,eAAA,GAAkB,MAAA,GAAS,IAAA,CAAK,GAAA,CAAI,QAAA,CAAS,QAAQ,EAAE,CAAA,IAAK,CAAA,EAAG,CAAC,CAAA,GAAI,CAAA;AAC1E,IAAA,MAAM,gBAAgB,CAAC,QAAA,EAAU,SAAA,EAAW,SAAA,EAAW,UAAU,WAAW,CAAA;AAC5E,IAAA,MAAM,kBAAkB,MAAA,IAAU,aAAA,CAAc,QAAA,CAAS,MAAM,IAAI,MAAA,GAAS,MAAA;AAE5E,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,IAAA,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,cAAc,CAAC,CAAA;AAC7C,IAAA,MAAA,CAAO,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,eAAe,CAAC,CAAA;AAC/C,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,MAAA,CAAO,MAAA,CAAO,UAAU,eAAe,CAAA;AAAA,IACzC;AAEA,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,SAAS,CAAA,aAAA,EAAgB,MAAM,CAAA,CAAA;AAE9C,IAAA,GAAA,CAAI,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,CAAA,uCAAA,EAA0C,GAAG,CAAA,CAAE,CAAA;AAExE,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAG,CAAA;AAEhC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MACnE;AAEA,MAAA,MAAM,MAAA,GAAU,MAAM,QAAA,CAAS,IAAA,EAAK;AAEpC,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,CAAC,OAAO,IAAA,EAAM;AAC9B,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,sBAAsB,CAAA;AAAA,MACxD;AAEA,MAAA,OAAO,MAAA,CAAO,IAAA;AAAA,IAChB,SAAS,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA;AAAA,QAClB,yCAAA;AAAA,QACA,KAAA,YAAiB,QAAQ,KAAA,GAAQ;AAAA,OACnC;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AACF,CAAC","file":"runs-list-handler.js","sourcesContent":["/**\n * HTTP client for interacting with Workflow Daemon\n */\nimport type { WorkflowRunRequest } from '@kb-labs/workflow-contracts';\n\nconst DEFAULT_DAEMON_URL = 'http://localhost:7778';\n\nexport interface DaemonClientOptions {\n  url?: string;\n}\n\n/**\n * Get workflow daemon URL from environment or default\n */\nexport function getWorkflowDaemonUrl(): string {\n  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n}\n\nexport class WorkflowDaemonClient {\n  private readonly baseUrl: string;\n\n  constructor(options: DaemonClientOptions = {}) {\n    this.baseUrl = options.url ?? process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n  }\n\n  /**\n   * Validate response Content-Type and parse JSON safely\n   */\n  private async parseJsonResponse<T>(response: Response): Promise<T> {\n    const contentType = response.headers.get('content-type');\n    if (!contentType?.includes('application/json')) {\n      throw new Error(`Invalid Content-Type: expected application/json, got ${contentType}`);\n    }\n    return response.json() as Promise<T>;\n  }\n\n  private unwrapData<T>(payload: unknown): T {\n    if (\n      payload\n      && typeof payload === 'object'\n      && 'ok' in payload\n      && (payload as any).ok === true\n      && 'data' in payload\n    ) {\n      return (payload as { data: T }).data;\n    }\n    return payload as T;\n  }\n\n  /**\n   * Validate and encode job ID to prevent path traversal attacks\n   */\n  private validateAndEncodeJobId(jobId: string): string {\n    // Validate job ID format (alphanumeric, hyphens, underscores only)\n    if (!/^[a-zA-Z0-9_-]+$/.test(jobId)) {\n      throw new Error(`Invalid job ID format: ${jobId}`);\n    }\n    // Encode for URL safety (defense in depth)\n    return encodeURIComponent(jobId);\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ ok: boolean; service: string }> {\n    const response = await fetch(`${this.baseUrl}/health`);\n    if (!response.ok) {\n      throw new Error(`Health check failed: ${response.statusText}`);\n    }\n    return this.parseJsonResponse(response);\n  }\n\n  /**\n   * Get workflow metrics\n   */\n  async getMetrics(): Promise<any> {\n    const response = await fetch(`${this.baseUrl}/metrics`);\n    if (!response.ok) {\n      throw new Error(`Failed to get metrics: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job status with full details (jobs, steps, outputs)\n   */\n  async getJobStatus(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job status: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job steps with outputs\n   */\n  async getJobSteps(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/steps`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job steps: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job logs\n   */\n  async getJobLogs(jobId: string): Promise<any[]> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/logs`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job logs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ logs: any[] }>(data);\n    return unwrapped.logs ?? [];\n  }\n\n  /**\n   * Get active executions\n   */\n  async getExecutions(): Promise<any[]> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`);\n    if (!response.ok) {\n      throw new Error(`Failed to get executions: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ jobs?: any[] }>(data);\n    const jobs = unwrapped.jobs ?? [];\n    return jobs.filter((job: any) => job.status === 'running' || job.status === 'pending');\n  }\n\n  /**\n   * Get cron jobs\n   */\n  async getCronJobs(): Promise<{\n    crons: any[];\n  }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/cron`);\n    if (!response.ok) {\n      throw new Error(`Failed to get cron jobs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Submit a job for execution\n   */\n  async submitJob(params: {\n    handler: string;\n    input?: unknown;\n    priority?: number;\n  }): Promise<{ id: string; status: string }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        type: params.handler,\n        payload: params.input,\n        priority: params.priority,\n      }),\n    });\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to submit job: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<any>(response);\n    const data = this.unwrapData<{ jobId: string }>(payload);\n    return { id: data.jobId, status: 'pending' };\n  }\n\n  /**\n   * Run workflow by ID\n   */\n  async runWorkflow(\n    workflowId: string,\n    request: WorkflowRunRequest = {}\n  ): Promise<{ runId: string; status: string }> {\n    const response = await fetch(\n      `${this.baseUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/run`,\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(request),\n      }\n    );\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to run workflow: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<{ ok: boolean; data?: { runId: string; status: string } }>(response);\n    return this.unwrapData<{ runId: string; status: string }>(payload);\n  }\n}\n","/**\n * REST handler: GET /runs\n * Proxies to workflow daemon GET /api/v1/runs\n * Lists all workflow runs across all workflows.\n */\n\nimport { defineHandler, type RestInput, type PluginContextV3 } from '@kb-labs/sdk';\nimport { getWorkflowDaemonUrl } from '../http-client.js';\n\ninterface RunsListQuery {\n  status?: string;\n  limit?: string;\n  offset?: string;\n}\n\ninterface ApiEnvelope<T> {\n  ok: boolean;\n  data?: T;\n  error?: string;\n}\n\nexport default defineHandler({\n  async execute(\n    ctx: PluginContextV3,\n    input: RestInput<RunsListQuery>\n  ): Promise<unknown> {\n    const daemonUrl = getWorkflowDaemonUrl();\n    const { status, limit, offset } = input.query || {};\n\n    const validatedLimit = limit ? Math.min(Math.max(parseInt(limit, 10) || 50, 1), 1000) : 50;\n    const validatedOffset = offset ? Math.max(parseInt(offset, 10) || 0, 0) : 0;\n    const validStatuses = ['queued', 'running', 'success', 'failed', 'cancelled'];\n    const validatedStatus = status && validStatuses.includes(status) ? status : undefined;\n\n    const params = new URLSearchParams();\n    params.append('limit', String(validatedLimit));\n    params.append('offset', String(validatedOffset));\n    if (validatedStatus) {\n      params.append('status', validatedStatus);\n    }\n\n    const url = `${daemonUrl}/api/v1/runs?${params}`;\n\n    ctx.platform.logger.info(`[runs-list-handler] Fetching runs from ${url}`);\n\n    try {\n      const response = await fetch(url);\n\n      if (!response.ok) {\n        throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n      }\n\n      const result = (await response.json()) as ApiEnvelope<unknown>;\n\n      if (!result.ok || !result.data) {\n        throw new Error(result.error || 'Failed to fetch runs');\n      }\n\n      return result.data;\n    } catch (error) {\n      ctx.platform.logger.error(\n        '[runs-list-handler] Error fetching runs',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  },\n});\n"]}

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/stats-handler.d.ts

@@ -0,0 +1,7 @@
+import * as _kb_labs_shared_command_kit from '@kb-labs/shared-command-kit';
+import { RestInput } from '@kb-labs/sdk';
+import { DashboardStatsResponse } from '@kb-labs/workflow-contracts';
+
+declare const _default: _kb_labs_shared_command_kit.Handler<unknown, RestInput<unknown, unknown, unknown>, DashboardStatsResponse>;
+
+export { _default as default };

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/stats-handler.js

@@ -0,0 +1,39 @@
+import { defineHandler } from '@kb-labs/sdk';
+
+// src/rest/stats-handler.ts
+
+// src/http-client.ts
+var DEFAULT_DAEMON_URL = "http://localhost:7778";
+function getWorkflowDaemonUrl() {
+  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;
+}
+
+// src/rest/stats-handler.ts
+var stats_handler_default = defineHandler({
+  async execute(ctx, _input) {
+    const daemonUrl = getWorkflowDaemonUrl();
+    const url = `${daemonUrl}/api/v1/stats`;
+    ctx.platform.logger.info(`[stats-handler] Fetching stats from ${url}`);
+    try {
+      const response = await fetch(url);
+      if (!response.ok) {
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
+      const result = await response.json();
+      if (!result.ok || !result.data) {
+        throw new Error(result.error || "Failed to fetch stats");
+      }
+      return result.data;
+    } catch (error) {
+      ctx.platform.logger.error(
+        "[stats-handler] Error fetching stats",
+        error instanceof Error ? error : void 0
+      );
+      throw error;
+    }
+  }
+});
+
+export { stats_handler_default as default };
+//# sourceMappingURL=stats-handler.js.map
+//# sourceMappingURL=stats-handler.js.map

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/stats-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/http-client.ts","../../src/rest/stats-handler.ts"],"names":[],"mappings":";;;;;AAKA,IAAM,kBAAA,GAAqB,uBAAA;AASpB,SAAS,oBAAA,GAA+B;AAC7C,EAAA,OAAO,OAAA,CAAQ,IAAI,mBAAA,IAAuB,kBAAA;AAC5C;;;ACPA,IAAO,wBAAQ,aAAA,CAAc;AAAA,EAC3B,MAAM,OAAA,CAAQ,GAAA,EAAsB,MAAA,EAA6D;AAC/F,IAAA,MAAM,YAAY,oBAAA,EAAqB;AACvC,IAAA,MAAM,GAAA,GAAM,GAAG,SAAS,CAAA,aAAA,CAAA;AAExB,IAAA,GAAA,CAAI,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,CAAA,oCAAA,EAAuC,GAAG,CAAA,CAAE,CAAA;AAErE,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAG,CAAA;AAEhC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MACnE;AAEA,MAAA,MAAM,MAAA,GAAU,MAAM,QAAA,CAAS,IAAA,EAAK;AAEpC,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,CAAC,OAAO,IAAA,EAAM;AAC9B,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,uBAAuB,CAAA;AAAA,MACzD;AAEA,MAAA,OAAO,MAAA,CAAO,IAAA;AAAA,IAChB,SAAS,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA;AAAA,QAClB,sCAAA;AAAA,QACA,KAAA,YAAiB,QAAQ,KAAA,GAAQ;AAAA,OACnC;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AACF,CAAC","file":"stats-handler.js","sourcesContent":["/**\n * HTTP client for interacting with Workflow Daemon\n */\nimport type { WorkflowRunRequest } from '@kb-labs/workflow-contracts';\n\nconst DEFAULT_DAEMON_URL = 'http://localhost:7778';\n\nexport interface DaemonClientOptions {\n  url?: string;\n}\n\n/**\n * Get workflow daemon URL from environment or default\n */\nexport function getWorkflowDaemonUrl(): string {\n  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n}\n\nexport class WorkflowDaemonClient {\n  private readonly baseUrl: string;\n\n  constructor(options: DaemonClientOptions = {}) {\n    this.baseUrl = options.url ?? process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n  }\n\n  /**\n   * Validate response Content-Type and parse JSON safely\n   */\n  private async parseJsonResponse<T>(response: Response): Promise<T> {\n    const contentType = response.headers.get('content-type');\n    if (!contentType?.includes('application/json')) {\n      throw new Error(`Invalid Content-Type: expected application/json, got ${contentType}`);\n    }\n    return response.json() as Promise<T>;\n  }\n\n  private unwrapData<T>(payload: unknown): T {\n    if (\n      payload\n      && typeof payload === 'object'\n      && 'ok' in payload\n      && (payload as any).ok === true\n      && 'data' in payload\n    ) {\n      return (payload as { data: T }).data;\n    }\n    return payload as T;\n  }\n\n  /**\n   * Validate and encode job ID to prevent path traversal attacks\n   */\n  private validateAndEncodeJobId(jobId: string): string {\n    // Validate job ID format (alphanumeric, hyphens, underscores only)\n    if (!/^[a-zA-Z0-9_-]+$/.test(jobId)) {\n      throw new Error(`Invalid job ID format: ${jobId}`);\n    }\n    // Encode for URL safety (defense in depth)\n    return encodeURIComponent(jobId);\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ ok: boolean; service: string }> {\n    const response = await fetch(`${this.baseUrl}/health`);\n    if (!response.ok) {\n      throw new Error(`Health check failed: ${response.statusText}`);\n    }\n    return this.parseJsonResponse(response);\n  }\n\n  /**\n   * Get workflow metrics\n   */\n  async getMetrics(): Promise<any> {\n    const response = await fetch(`${this.baseUrl}/metrics`);\n    if (!response.ok) {\n      throw new Error(`Failed to get metrics: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job status with full details (jobs, steps, outputs)\n   */\n  async getJobStatus(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job status: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job steps with outputs\n   */\n  async getJobSteps(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/steps`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job steps: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job logs\n   */\n  async getJobLogs(jobId: string): Promise<any[]> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/logs`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job logs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ logs: any[] }>(data);\n    return unwrapped.logs ?? [];\n  }\n\n  /**\n   * Get active executions\n   */\n  async getExecutions(): Promise<any[]> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`);\n    if (!response.ok) {\n      throw new Error(`Failed to get executions: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ jobs?: any[] }>(data);\n    const jobs = unwrapped.jobs ?? [];\n    return jobs.filter((job: any) => job.status === 'running' || job.status === 'pending');\n  }\n\n  /**\n   * Get cron jobs\n   */\n  async getCronJobs(): Promise<{\n    crons: any[];\n  }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/cron`);\n    if (!response.ok) {\n      throw new Error(`Failed to get cron jobs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Submit a job for execution\n   */\n  async submitJob(params: {\n    handler: string;\n    input?: unknown;\n    priority?: number;\n  }): Promise<{ id: string; status: string }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        type: params.handler,\n        payload: params.input,\n        priority: params.priority,\n      }),\n    });\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to submit job: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<any>(response);\n    const data = this.unwrapData<{ jobId: string }>(payload);\n    return { id: data.jobId, status: 'pending' };\n  }\n\n  /**\n   * Run workflow by ID\n   */\n  async runWorkflow(\n    workflowId: string,\n    request: WorkflowRunRequest = {}\n  ): Promise<{ runId: string; status: string }> {\n    const response = await fetch(\n      `${this.baseUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/run`,\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(request),\n      }\n    );\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to run workflow: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<{ ok: boolean; data?: { runId: string; status: string } }>(response);\n    return this.unwrapData<{ runId: string; status: string }>(payload);\n  }\n}\n","/**\n * @module @kb-labs/workflow-cli/rest/stats-handler\n * REST handler for dashboard statistics (proxy to daemon)\n */\n\nimport { defineHandler, type RestInput, type PluginContextV3 } from '@kb-labs/sdk';\nimport type { DashboardStatsResponse } from '@kb-labs/workflow-contracts';\nimport { getWorkflowDaemonUrl } from '../http-client';\n\nexport default defineHandler({\n  async execute(ctx: PluginContextV3, _input: RestInput<unknown>): Promise<DashboardStatsResponse> {\n    const daemonUrl = getWorkflowDaemonUrl();\n    const url = `${daemonUrl}/api/v1/stats`;\n\n    ctx.platform.logger.info(`[stats-handler] Fetching stats from ${url}`);\n\n    try {\n      const response = await fetch(url);\n\n      if (!response.ok) {\n        throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n      }\n\n      const result = (await response.json()) as { ok: boolean; data?: DashboardStatsResponse; error?: string };\n\n      if (!result.ok || !result.data) {\n        throw new Error(result.error || 'Failed to fetch stats');\n      }\n\n      return result.data;\n    } catch (error) {\n      ctx.platform.logger.error(\n        '[stats-handler] Error fetching stats',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  },\n});\n"]}

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-detail-handler.d.ts

@@ -0,0 +1,10 @@
+import * as _kb_labs_shared_command_kit from '@kb-labs/shared-command-kit';
+import { RestInput } from '@kb-labs/sdk';
+import { WorkflowInfo } from '@kb-labs/workflow-contracts';
+
+interface WorkflowDetailParams {
+    id: string;
+}
+declare const _default: _kb_labs_shared_command_kit.Handler<unknown, RestInput<unknown, unknown, WorkflowDetailParams>, WorkflowInfo>;
+
+export { _default as default };

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-detail-handler.js

@@ -0,0 +1,46 @@
+import { defineHandler } from '@kb-labs/sdk';
+
+// src/rest/workflow-detail-handler.ts
+
+// src/http-client.ts
+var DEFAULT_DAEMON_URL = "http://localhost:7778";
+function getWorkflowDaemonUrl() {
+  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;
+}
+
+// src/rest/workflow-detail-handler.ts
+var workflow_detail_handler_default = defineHandler({
+  async execute(ctx, input) {
+    const daemonUrl = getWorkflowDaemonUrl();
+    const { id } = input.params;
+    if (!id) {
+      throw new Error("Missing id parameter");
+    }
+    const url = `${daemonUrl}/api/v1/workflows/${encodeURIComponent(id)}`;
+    ctx.platform.logger.info(`[workflow-detail-handler] Fetching workflow ${id} from ${url}`);
+    try {
+      const response = await fetch(url);
+      if (!response.ok) {
+        if (response.status === 404) {
+          throw new Error("Workflow not found");
+        }
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
+      const result = await response.json();
+      if (!result.ok || !result.data) {
+        throw new Error(result.error || "Failed to fetch workflow");
+      }
+      return result.data;
+    } catch (error) {
+      ctx.platform.logger.error(
+        "[workflow-detail-handler] Error fetching workflow detail",
+        error instanceof Error ? error : void 0
+      );
+      throw error;
+    }
+  }
+});
+
+export { workflow_detail_handler_default as default };
+//# sourceMappingURL=workflow-detail-handler.js.map
+//# sourceMappingURL=workflow-detail-handler.js.map

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-detail-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/http-client.ts","../../src/rest/workflow-detail-handler.ts"],"names":[],"mappings":";;;;;AAKA,IAAM,kBAAA,GAAqB,uBAAA;AASpB,SAAS,oBAAA,GAA+B;AAC7C,EAAA,OAAO,OAAA,CAAQ,IAAI,mBAAA,IAAuB,kBAAA;AAC5C;;;ACHA,IAAO,kCAAQ,aAAA,CAAc;AAAA,EAC3B,MAAM,OAAA,CACJ,GAAA,EACA,KAAA,EACuB;AACvB,IAAA,MAAM,YAAY,oBAAA,EAAqB;AACvC,IAAA,MAAM,EAAE,EAAA,EAAG,GAAI,KAAA,CAAM,MAAA;AAErB,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AAEA,IAAA,MAAM,MAAM,CAAA,EAAG,SAAS,CAAA,kBAAA,EAAqB,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AACnE,IAAA,GAAA,CAAI,SAAS,MAAA,CAAO,IAAA,CAAK,+CAA+C,EAAE,CAAA,MAAA,EAAS,GAAG,CAAA,CAAE,CAAA;AAExF,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAG,CAAA;AAEhC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,UAAA,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAAA,QACtC;AACA,QAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MACnE;AAEA,MAAA,MAAM,MAAA,GAAU,MAAM,QAAA,CAAS,IAAA,EAAK;AAEpC,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,CAAC,OAAO,IAAA,EAAM;AAC9B,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,0BAA0B,CAAA;AAAA,MAC5D;AAEA,MAAA,OAAO,MAAA,CAAO,IAAA;AAAA,IAChB,SAAS,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA;AAAA,QAClB,0DAAA;AAAA,QACA,KAAA,YAAiB,QAAQ,KAAA,GAAQ;AAAA,OACnC;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AACF,CAAC","file":"workflow-detail-handler.js","sourcesContent":["/**\n * HTTP client for interacting with Workflow Daemon\n */\nimport type { WorkflowRunRequest } from '@kb-labs/workflow-contracts';\n\nconst DEFAULT_DAEMON_URL = 'http://localhost:7778';\n\nexport interface DaemonClientOptions {\n  url?: string;\n}\n\n/**\n * Get workflow daemon URL from environment or default\n */\nexport function getWorkflowDaemonUrl(): string {\n  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n}\n\nexport class WorkflowDaemonClient {\n  private readonly baseUrl: string;\n\n  constructor(options: DaemonClientOptions = {}) {\n    this.baseUrl = options.url ?? process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n  }\n\n  /**\n   * Validate response Content-Type and parse JSON safely\n   */\n  private async parseJsonResponse<T>(response: Response): Promise<T> {\n    const contentType = response.headers.get('content-type');\n    if (!contentType?.includes('application/json')) {\n      throw new Error(`Invalid Content-Type: expected application/json, got ${contentType}`);\n    }\n    return response.json() as Promise<T>;\n  }\n\n  private unwrapData<T>(payload: unknown): T {\n    if (\n      payload\n      && typeof payload === 'object'\n      && 'ok' in payload\n      && (payload as any).ok === true\n      && 'data' in payload\n    ) {\n      return (payload as { data: T }).data;\n    }\n    return payload as T;\n  }\n\n  /**\n   * Validate and encode job ID to prevent path traversal attacks\n   */\n  private validateAndEncodeJobId(jobId: string): string {\n    // Validate job ID format (alphanumeric, hyphens, underscores only)\n    if (!/^[a-zA-Z0-9_-]+$/.test(jobId)) {\n      throw new Error(`Invalid job ID format: ${jobId}`);\n    }\n    // Encode for URL safety (defense in depth)\n    return encodeURIComponent(jobId);\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ ok: boolean; service: string }> {\n    const response = await fetch(`${this.baseUrl}/health`);\n    if (!response.ok) {\n      throw new Error(`Health check failed: ${response.statusText}`);\n    }\n    return this.parseJsonResponse(response);\n  }\n\n  /**\n   * Get workflow metrics\n   */\n  async getMetrics(): Promise<any> {\n    const response = await fetch(`${this.baseUrl}/metrics`);\n    if (!response.ok) {\n      throw new Error(`Failed to get metrics: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job status with full details (jobs, steps, outputs)\n   */\n  async getJobStatus(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job status: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job steps with outputs\n   */\n  async getJobSteps(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/steps`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job steps: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job logs\n   */\n  async getJobLogs(jobId: string): Promise<any[]> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/logs`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job logs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ logs: any[] }>(data);\n    return unwrapped.logs ?? [];\n  }\n\n  /**\n   * Get active executions\n   */\n  async getExecutions(): Promise<any[]> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`);\n    if (!response.ok) {\n      throw new Error(`Failed to get executions: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ jobs?: any[] }>(data);\n    const jobs = unwrapped.jobs ?? [];\n    return jobs.filter((job: any) => job.status === 'running' || job.status === 'pending');\n  }\n\n  /**\n   * Get cron jobs\n   */\n  async getCronJobs(): Promise<{\n    crons: any[];\n  }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/cron`);\n    if (!response.ok) {\n      throw new Error(`Failed to get cron jobs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Submit a job for execution\n   */\n  async submitJob(params: {\n    handler: string;\n    input?: unknown;\n    priority?: number;\n  }): Promise<{ id: string; status: string }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        type: params.handler,\n        payload: params.input,\n        priority: params.priority,\n      }),\n    });\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to submit job: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<any>(response);\n    const data = this.unwrapData<{ jobId: string }>(payload);\n    return { id: data.jobId, status: 'pending' };\n  }\n\n  /**\n   * Run workflow by ID\n   */\n  async runWorkflow(\n    workflowId: string,\n    request: WorkflowRunRequest = {}\n  ): Promise<{ runId: string; status: string }> {\n    const response = await fetch(\n      `${this.baseUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/run`,\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(request),\n      }\n    );\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to run workflow: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<{ ok: boolean; data?: { runId: string; status: string } }>(response);\n    return this.unwrapData<{ runId: string; status: string }>(payload);\n  }\n}\n","/**\n * @module @kb-labs/workflow-cli/rest/workflow-detail-handler\n * REST handler for getting workflow definition details\n */\n\nimport { defineHandler, type RestInput, type PluginContextV3 } from '@kb-labs/sdk';\nimport type { WorkflowInfo } from '@kb-labs/workflow-contracts';\nimport { getWorkflowDaemonUrl } from '../http-client';\n\ninterface WorkflowDetailParams {\n  id: string;\n}\n\nexport default defineHandler({\n  async execute(\n    ctx: PluginContextV3,\n    input: RestInput<unknown, unknown, WorkflowDetailParams>\n  ): Promise<WorkflowInfo> {\n    const daemonUrl = getWorkflowDaemonUrl();\n    const { id } = input.params!;\n\n    if (!id) {\n      throw new Error('Missing id parameter');\n    }\n\n    const url = `${daemonUrl}/api/v1/workflows/${encodeURIComponent(id)}`;\n    ctx.platform.logger.info(`[workflow-detail-handler] Fetching workflow ${id} from ${url}`);\n\n    try {\n      const response = await fetch(url);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          throw new Error('Workflow not found');\n        }\n        throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n      }\n\n      const result = (await response.json()) as { ok: boolean; data?: WorkflowInfo; error?: string };\n\n      if (!result.ok || !result.data) {\n        throw new Error(result.error || 'Failed to fetch workflow');\n      }\n\n      return result.data;\n    } catch (error) {\n      ctx.platform.logger.error(\n        '[workflow-detail-handler] Error fetching workflow detail',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  },\n});\n"]}

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-run-cancel-handler.d.ts

@@ -0,0 +1,13 @@
+import * as _kb_labs_shared_command_kit from '@kb-labs/shared-command-kit';
+import { RestInput } from '@kb-labs/sdk';
+
+interface RunCancelParams {
+    runId: string;
+}
+interface RunCancelResponse {
+    cancelled: boolean;
+    runId: string;
+}
+declare const _default: _kb_labs_shared_command_kit.Handler<unknown, RestInput<unknown, unknown, RunCancelParams>, RunCancelResponse>;
+
+export { _default as default };

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-run-cancel-handler.js

@@ -0,0 +1,47 @@
+import { defineHandler } from '@kb-labs/sdk';
+
+// src/rest/workflow-run-cancel-handler.ts
+
+// src/http-client.ts
+var DEFAULT_DAEMON_URL = "http://localhost:7778";
+function getWorkflowDaemonUrl() {
+  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;
+}
+
+// src/rest/workflow-run-cancel-handler.ts
+var workflow_run_cancel_handler_default = defineHandler({
+  async execute(ctx, input) {
+    const daemonUrl = getWorkflowDaemonUrl();
+    const { runId } = input.params;
+    if (!runId) {
+      throw new Error("Missing runId parameter");
+    }
+    const url = `${daemonUrl}/api/v1/workflows/runs/${encodeURIComponent(runId)}/cancel`;
+    ctx.platform.logger.info(`[workflow-run-cancel-handler] Cancelling run ${runId} at ${url}`);
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" }
+      });
+      if (!response.ok) {
+        const errorData = await response.json().catch(() => ({ error: "Unknown error" }));
+        throw new Error(errorData.error || `Failed to cancel run ${runId}`);
+      }
+      const payload = await response.json();
+      if (!payload.ok || !payload.data) {
+        throw new Error(payload.error || `Failed to cancel run ${runId}`);
+      }
+      return payload.data;
+    } catch (error) {
+      ctx.platform.logger.error(
+        "[workflow-run-cancel-handler] Error cancelling run",
+        error instanceof Error ? error : void 0
+      );
+      throw error;
+    }
+  }
+});
+
+export { workflow_run_cancel_handler_default as default };
+//# sourceMappingURL=workflow-run-cancel-handler.js.map
+//# sourceMappingURL=workflow-run-cancel-handler.js.map

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-run-cancel-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/http-client.ts","../../src/rest/workflow-run-cancel-handler.ts"],"names":[],"mappings":";;;;;AAKA,IAAM,kBAAA,GAAqB,uBAAA;AASpB,SAAS,oBAAA,GAA+B;AAC7C,EAAA,OAAO,OAAA,CAAQ,IAAI,mBAAA,IAAuB,kBAAA;AAC5C;;;ACOA,IAAO,sCAAQ,aAAA,CAAc;AAAA,EAC3B,MAAM,OAAA,CACJ,GAAA,EACA,KAAA,EAC4B;AAC5B,IAAA,MAAM,YAAY,oBAAA,EAAqB;AACvC,IAAA,MAAM,EAAE,KAAA,EAAM,GAAI,KAAA,CAAM,MAAA;AAExB,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,MAAM,yBAAyB,CAAA;AAAA,IAC3C;AAEA,IAAA,MAAM,MAAM,CAAA,EAAG,SAAS,CAAA,uBAAA,EAA0B,kBAAA,CAAmB,KAAK,CAAC,CAAA,OAAA,CAAA;AAC3E,IAAA,GAAA,CAAI,SAAS,MAAA,CAAO,IAAA,CAAK,gDAAgD,KAAK,CAAA,IAAA,EAAO,GAAG,CAAA,CAAE,CAAA;AAE1F,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAChC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,OAC/C,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAM,OAAO,EAAE,KAAA,EAAO,eAAA,EAAgB,CAAE,CAAA;AAChF,QAAA,MAAM,IAAI,KAAA,CAAM,SAAA,CAAU,KAAA,IAAS,CAAA,qBAAA,EAAwB,KAAK,CAAA,CAAE,CAAA;AAAA,MACpE;AAEA,MAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,MAAA,IAAI,CAAC,OAAA,CAAQ,EAAA,IAAM,CAAC,QAAQ,IAAA,EAAM;AAChC,QAAA,MAAM,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,IAAS,CAAA,qBAAA,EAAwB,KAAK,CAAA,CAAE,CAAA;AAAA,MAClE;AACA,MAAA,OAAO,OAAA,CAAQ,IAAA;AAAA,IACjB,SAAS,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA;AAAA,QAClB,oDAAA;AAAA,QACA,KAAA,YAAiB,QAAQ,KAAA,GAAQ;AAAA,OACnC;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AACF,CAAC","file":"workflow-run-cancel-handler.js","sourcesContent":["/**\n * HTTP client for interacting with Workflow Daemon\n */\nimport type { WorkflowRunRequest } from '@kb-labs/workflow-contracts';\n\nconst DEFAULT_DAEMON_URL = 'http://localhost:7778';\n\nexport interface DaemonClientOptions {\n  url?: string;\n}\n\n/**\n * Get workflow daemon URL from environment or default\n */\nexport function getWorkflowDaemonUrl(): string {\n  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n}\n\nexport class WorkflowDaemonClient {\n  private readonly baseUrl: string;\n\n  constructor(options: DaemonClientOptions = {}) {\n    this.baseUrl = options.url ?? process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n  }\n\n  /**\n   * Validate response Content-Type and parse JSON safely\n   */\n  private async parseJsonResponse<T>(response: Response): Promise<T> {\n    const contentType = response.headers.get('content-type');\n    if (!contentType?.includes('application/json')) {\n      throw new Error(`Invalid Content-Type: expected application/json, got ${contentType}`);\n    }\n    return response.json() as Promise<T>;\n  }\n\n  private unwrapData<T>(payload: unknown): T {\n    if (\n      payload\n      && typeof payload === 'object'\n      && 'ok' in payload\n      && (payload as any).ok === true\n      && 'data' in payload\n    ) {\n      return (payload as { data: T }).data;\n    }\n    return payload as T;\n  }\n\n  /**\n   * Validate and encode job ID to prevent path traversal attacks\n   */\n  private validateAndEncodeJobId(jobId: string): string {\n    // Validate job ID format (alphanumeric, hyphens, underscores only)\n    if (!/^[a-zA-Z0-9_-]+$/.test(jobId)) {\n      throw new Error(`Invalid job ID format: ${jobId}`);\n    }\n    // Encode for URL safety (defense in depth)\n    return encodeURIComponent(jobId);\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ ok: boolean; service: string }> {\n    const response = await fetch(`${this.baseUrl}/health`);\n    if (!response.ok) {\n      throw new Error(`Health check failed: ${response.statusText}`);\n    }\n    return this.parseJsonResponse(response);\n  }\n\n  /**\n   * Get workflow metrics\n   */\n  async getMetrics(): Promise<any> {\n    const response = await fetch(`${this.baseUrl}/metrics`);\n    if (!response.ok) {\n      throw new Error(`Failed to get metrics: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job status with full details (jobs, steps, outputs)\n   */\n  async getJobStatus(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job status: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job steps with outputs\n   */\n  async getJobSteps(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/steps`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job steps: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job logs\n   */\n  async getJobLogs(jobId: string): Promise<any[]> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/logs`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job logs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ logs: any[] }>(data);\n    return unwrapped.logs ?? [];\n  }\n\n  /**\n   * Get active executions\n   */\n  async getExecutions(): Promise<any[]> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`);\n    if (!response.ok) {\n      throw new Error(`Failed to get executions: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ jobs?: any[] }>(data);\n    const jobs = unwrapped.jobs ?? [];\n    return jobs.filter((job: any) => job.status === 'running' || job.status === 'pending');\n  }\n\n  /**\n   * Get cron jobs\n   */\n  async getCronJobs(): Promise<{\n    crons: any[];\n  }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/cron`);\n    if (!response.ok) {\n      throw new Error(`Failed to get cron jobs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Submit a job for execution\n   */\n  async submitJob(params: {\n    handler: string;\n    input?: unknown;\n    priority?: number;\n  }): Promise<{ id: string; status: string }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        type: params.handler,\n        payload: params.input,\n        priority: params.priority,\n      }),\n    });\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to submit job: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<any>(response);\n    const data = this.unwrapData<{ jobId: string }>(payload);\n    return { id: data.jobId, status: 'pending' };\n  }\n\n  /**\n   * Run workflow by ID\n   */\n  async runWorkflow(\n    workflowId: string,\n    request: WorkflowRunRequest = {}\n  ): Promise<{ runId: string; status: string }> {\n    const response = await fetch(\n      `${this.baseUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/run`,\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(request),\n      }\n    );\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to run workflow: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<{ ok: boolean; data?: { runId: string; status: string } }>(response);\n    return this.unwrapData<{ runId: string; status: string }>(payload);\n  }\n}\n","/**\n * REST handler: POST /workflows/runs/:runId/cancel\n * Proxies to workflow daemon POST /api/v1/workflows/runs/:runId/cancel\n */\n\nimport { defineHandler, type RestInput, type PluginContextV3 } from '@kb-labs/sdk';\nimport { getWorkflowDaemonUrl } from '../http-client';\n\ninterface RunCancelParams {\n  runId: string;\n}\n\ninterface RunCancelResponse {\n  cancelled: boolean;\n  runId: string;\n}\n\ninterface ApiEnvelope<T> {\n  ok: boolean;\n  data?: T;\n  error?: string;\n}\n\nexport default defineHandler({\n  async execute(\n    ctx: PluginContextV3,\n    input: RestInput<unknown, unknown, RunCancelParams>\n  ): Promise<RunCancelResponse> {\n    const daemonUrl = getWorkflowDaemonUrl();\n    const { runId } = input.params!;\n\n    if (!runId) {\n      throw new Error('Missing runId parameter');\n    }\n\n    const url = `${daemonUrl}/api/v1/workflows/runs/${encodeURIComponent(runId)}/cancel`;\n    ctx.platform.logger.info(`[workflow-run-cancel-handler] Cancelling run ${runId} at ${url}`);\n\n    try {\n      const response = await fetch(url, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n      });\n\n      if (!response.ok) {\n        const errorData = await response.json().catch(() => ({ error: 'Unknown error' })) as { error?: string };\n        throw new Error(errorData.error || `Failed to cancel run ${runId}`);\n      }\n\n      const payload = (await response.json()) as ApiEnvelope<RunCancelResponse>;\n      if (!payload.ok || !payload.data) {\n        throw new Error(payload.error || `Failed to cancel run ${runId}`);\n      }\n      return payload.data;\n    } catch (error) {\n      ctx.platform.logger.error(\n        '[workflow-run-cancel-handler] Error cancelling run',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  },\n});\n"]}

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-run-handler.d.ts

@@ -0,0 +1,14 @@
+import * as _kb_labs_shared_command_kit from '@kb-labs/shared-command-kit';
+import { RestInput } from '@kb-labs/sdk';
+import { WorkflowRunRequest } from '@kb-labs/workflow-contracts';
+
+interface WorkflowRunParams {
+    id: string;
+}
+interface WorkflowRunResult {
+    runId: string;
+    status: string;
+}
+declare const _default: _kb_labs_shared_command_kit.Handler<unknown, RestInput<WorkflowRunRequest, unknown, WorkflowRunParams>, WorkflowRunResult>;
+
+export { _default as default };

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-run-handler.js

@@ -0,0 +1,53 @@
+import { defineHandler } from '@kb-labs/sdk';
+
+// src/rest/workflow-run-handler.ts
+
+// src/http-client.ts
+var DEFAULT_DAEMON_URL = "http://localhost:7778";
+function getWorkflowDaemonUrl() {
+  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;
+}
+
+// src/rest/workflow-run-handler.ts
+var workflow_run_handler_default = defineHandler({
+  async execute(ctx, input) {
+    const daemonUrl = getWorkflowDaemonUrl();
+    const { id } = input.params;
+    if (!id) {
+      throw new Error("Missing id parameter");
+    }
+    const body = input.body || {};
+    const url = `${daemonUrl}/api/v1/workflows/${encodeURIComponent(id)}/run`;
+    ctx.platform.logger.info(`[workflow-run-handler] Running workflow ${id} via ${url}`);
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(body)
+      });
+      if (!response.ok) {
+        if (response.status === 404) {
+          throw new Error("Workflow not found");
+        }
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
+      const result = await response.json();
+      if (!result.ok || !result.data) {
+        throw new Error(result.error || "Failed to run workflow");
+      }
+      return result.data;
+    } catch (error) {
+      ctx.platform.logger.error(
+        "[workflow-run-handler] Error running workflow",
+        error instanceof Error ? error : void 0
+      );
+      throw error;
+    }
+  }
+});
+
+export { workflow_run_handler_default as default };
+//# sourceMappingURL=workflow-run-handler.js.map
+//# sourceMappingURL=workflow-run-handler.js.map

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-run-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/http-client.ts","../../src/rest/workflow-run-handler.ts"],"names":[],"mappings":";;;;;AAKA,IAAM,kBAAA,GAAqB,uBAAA;AASpB,SAAS,oBAAA,GAA+B;AAC7C,EAAA,OAAO,OAAA,CAAQ,IAAI,mBAAA,IAAuB,kBAAA;AAC5C;;;ACEA,IAAO,+BAAQ,aAAA,CAAc;AAAA,EAC3B,MAAM,OAAA,CACJ,GAAA,EACA,KAAA,EAC4B;AAC5B,IAAA,MAAM,YAAY,oBAAA,EAAqB;AACvC,IAAA,MAAM,EAAE,EAAA,EAAG,GAAI,KAAA,CAAM,MAAA;AAErB,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,IACxC;AAEA,IAAA,MAAM,IAAA,GAA2B,KAAA,CAAM,IAAA,IAAQ,EAAC;AAEhD,IAAA,MAAM,MAAM,CAAA,EAAG,SAAS,CAAA,kBAAA,EAAqB,kBAAA,CAAmB,EAAE,CAAC,CAAA,IAAA,CAAA;AACnE,IAAA,GAAA,CAAI,SAAS,MAAA,CAAO,IAAA,CAAK,2CAA2C,EAAE,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAE,CAAA;AAEnF,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAChC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,OAC1B,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,UAAA,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAAA,QACtC;AACA,QAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MACnE;AAEA,MAAA,MAAM,MAAA,GAAU,MAAM,QAAA,CAAS,IAAA,EAAK;AAEpC,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,CAAC,OAAO,IAAA,EAAM;AAC9B,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,wBAAwB,CAAA;AAAA,MAC1D;AAEA,MAAA,OAAO,MAAA,CAAO,IAAA;AAAA,IAChB,SAAS,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA;AAAA,QAClB,+CAAA;AAAA,QACA,KAAA,YAAiB,QAAQ,KAAA,GAAQ;AAAA,OACnC;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AACF,CAAC","file":"workflow-run-handler.js","sourcesContent":["/**\n * HTTP client for interacting with Workflow Daemon\n */\nimport type { WorkflowRunRequest } from '@kb-labs/workflow-contracts';\n\nconst DEFAULT_DAEMON_URL = 'http://localhost:7778';\n\nexport interface DaemonClientOptions {\n  url?: string;\n}\n\n/**\n * Get workflow daemon URL from environment or default\n */\nexport function getWorkflowDaemonUrl(): string {\n  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n}\n\nexport class WorkflowDaemonClient {\n  private readonly baseUrl: string;\n\n  constructor(options: DaemonClientOptions = {}) {\n    this.baseUrl = options.url ?? process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n  }\n\n  /**\n   * Validate response Content-Type and parse JSON safely\n   */\n  private async parseJsonResponse<T>(response: Response): Promise<T> {\n    const contentType = response.headers.get('content-type');\n    if (!contentType?.includes('application/json')) {\n      throw new Error(`Invalid Content-Type: expected application/json, got ${contentType}`);\n    }\n    return response.json() as Promise<T>;\n  }\n\n  private unwrapData<T>(payload: unknown): T {\n    if (\n      payload\n      && typeof payload === 'object'\n      && 'ok' in payload\n      && (payload as any).ok === true\n      && 'data' in payload\n    ) {\n      return (payload as { data: T }).data;\n    }\n    return payload as T;\n  }\n\n  /**\n   * Validate and encode job ID to prevent path traversal attacks\n   */\n  private validateAndEncodeJobId(jobId: string): string {\n    // Validate job ID format (alphanumeric, hyphens, underscores only)\n    if (!/^[a-zA-Z0-9_-]+$/.test(jobId)) {\n      throw new Error(`Invalid job ID format: ${jobId}`);\n    }\n    // Encode for URL safety (defense in depth)\n    return encodeURIComponent(jobId);\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ ok: boolean; service: string }> {\n    const response = await fetch(`${this.baseUrl}/health`);\n    if (!response.ok) {\n      throw new Error(`Health check failed: ${response.statusText}`);\n    }\n    return this.parseJsonResponse(response);\n  }\n\n  /**\n   * Get workflow metrics\n   */\n  async getMetrics(): Promise<any> {\n    const response = await fetch(`${this.baseUrl}/metrics`);\n    if (!response.ok) {\n      throw new Error(`Failed to get metrics: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job status with full details (jobs, steps, outputs)\n   */\n  async getJobStatus(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job status: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job steps with outputs\n   */\n  async getJobSteps(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/steps`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job steps: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job logs\n   */\n  async getJobLogs(jobId: string): Promise<any[]> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/logs`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job logs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ logs: any[] }>(data);\n    return unwrapped.logs ?? [];\n  }\n\n  /**\n   * Get active executions\n   */\n  async getExecutions(): Promise<any[]> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`);\n    if (!response.ok) {\n      throw new Error(`Failed to get executions: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ jobs?: any[] }>(data);\n    const jobs = unwrapped.jobs ?? [];\n    return jobs.filter((job: any) => job.status === 'running' || job.status === 'pending');\n  }\n\n  /**\n   * Get cron jobs\n   */\n  async getCronJobs(): Promise<{\n    crons: any[];\n  }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/cron`);\n    if (!response.ok) {\n      throw new Error(`Failed to get cron jobs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Submit a job for execution\n   */\n  async submitJob(params: {\n    handler: string;\n    input?: unknown;\n    priority?: number;\n  }): Promise<{ id: string; status: string }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        type: params.handler,\n        payload: params.input,\n        priority: params.priority,\n      }),\n    });\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to submit job: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<any>(response);\n    const data = this.unwrapData<{ jobId: string }>(payload);\n    return { id: data.jobId, status: 'pending' };\n  }\n\n  /**\n   * Run workflow by ID\n   */\n  async runWorkflow(\n    workflowId: string,\n    request: WorkflowRunRequest = {}\n  ): Promise<{ runId: string; status: string }> {\n    const response = await fetch(\n      `${this.baseUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/run`,\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(request),\n      }\n    );\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to run workflow: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<{ ok: boolean; data?: { runId: string; status: string } }>(response);\n    return this.unwrapData<{ runId: string; status: string }>(payload);\n  }\n}\n","/**\n * @module @kb-labs/workflow-cli/rest/workflow-run-handler\n * REST handler for running a workflow\n */\n\nimport { defineHandler, type RestInput, type PluginContextV3 } from '@kb-labs/sdk';\nimport type { WorkflowRunRequest } from '@kb-labs/workflow-contracts';\nimport { getWorkflowDaemonUrl } from '../http-client';\n\ninterface WorkflowRunParams {\n  id: string;\n}\n\ninterface WorkflowRunResult {\n  runId: string;\n  status: string;\n}\n\nexport default defineHandler({\n  async execute(\n    ctx: PluginContextV3,\n    input: RestInput<WorkflowRunRequest, unknown, WorkflowRunParams>\n  ): Promise<WorkflowRunResult> {\n    const daemonUrl = getWorkflowDaemonUrl();\n    const { id } = input.params!;\n\n    if (!id) {\n      throw new Error('Missing id parameter');\n    }\n\n    const body: WorkflowRunRequest = input.body || {};\n\n    const url = `${daemonUrl}/api/v1/workflows/${encodeURIComponent(id)}/run`;\n    ctx.platform.logger.info(`[workflow-run-handler] Running workflow ${id} via ${url}`);\n\n    try {\n      const response = await fetch(url, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(body),\n      });\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          throw new Error('Workflow not found');\n        }\n        throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n      }\n\n      const result = (await response.json()) as { ok: boolean; data?: WorkflowRunResult; error?: string };\n\n      if (!result.ok || !result.data) {\n        throw new Error(result.error || 'Failed to run workflow');\n      }\n\n      return result.data;\n    } catch (error) {\n      ctx.platform.logger.error(\n        '[workflow-run-handler] Error running workflow',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  },\n});\n"]}

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-runs-handler.d.ts

@@ -0,0 +1,13 @@
+import * as _kb_labs_shared_command_kit from '@kb-labs/shared-command-kit';
+import { RestInput } from '@kb-labs/sdk';
+import { WorkflowRunHistoryResponse } from '@kb-labs/workflow-contracts';
+
+declare const _default: _kb_labs_shared_command_kit.Handler<unknown, RestInput<{
+    limit?: string;
+    offset?: string;
+    status?: string;
+}, unknown, {
+    id: string;
+}>, WorkflowRunHistoryResponse>;
+
+export { _default as default };

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-runs-handler.js

@@ -0,0 +1,54 @@
+import { defineHandler } from '@kb-labs/sdk';
+
+// src/rest/workflow-runs-handler.ts
+
+// src/http-client.ts
+var DEFAULT_DAEMON_URL = "http://localhost:7778";
+function getWorkflowDaemonUrl() {
+  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;
+}
+
+// src/rest/workflow-runs-handler.ts
+var workflow_runs_handler_default = defineHandler({
+  async execute(ctx, input) {
+    const daemonUrl = getWorkflowDaemonUrl();
+    const { id: workflowId } = input.params;
+    const { limit, offset, status } = input.query || {};
+    const validatedLimit = limit ? Math.min(Math.max(parseInt(limit, 10) || 50, 1), 1e3) : 50;
+    const validatedOffset = offset ? Math.max(parseInt(offset, 10) || 0, 0) : 0;
+    const validStatuses = ["queued", "running", "completed", "failed", "cancelled"];
+    const validatedStatus = status && validStatuses.includes(status) ? status : void 0;
+    const params = new URLSearchParams();
+    params.append("limit", String(validatedLimit));
+    params.append("offset", String(validatedOffset));
+    if (validatedStatus) {
+      params.append("status", validatedStatus);
+    }
+    const url = `${daemonUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/runs?${params}`;
+    ctx.platform.logger.info(`[workflow-runs-handler] Fetching run history from ${url}`);
+    try {
+      const response = await fetch(url);
+      if (!response.ok) {
+        if (response.status === 404) {
+          throw new Error("Workflow not found");
+        }
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
+      const result = await response.json();
+      if (!result.ok || !result.data) {
+        throw new Error(result.error || "Failed to fetch workflow run history");
+      }
+      return result.data;
+    } catch (error) {
+      ctx.platform.logger.error(
+        "[workflow-runs-handler] Error fetching workflow run history",
+        error instanceof Error ? error : void 0
+      );
+      throw error;
+    }
+  }
+});
+
+export { workflow_runs_handler_default as default };
+//# sourceMappingURL=workflow-runs-handler.js.map
+//# sourceMappingURL=workflow-runs-handler.js.map

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflow-runs-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/http-client.ts","../../src/rest/workflow-runs-handler.ts"],"names":[],"mappings":";;;;;AAKA,IAAM,kBAAA,GAAqB,uBAAA;AASpB,SAAS,oBAAA,GAA+B;AAC7C,EAAA,OAAO,OAAA,CAAQ,IAAI,mBAAA,IAAuB,kBAAA;AAC5C;;;ACPA,IAAO,gCAAQ,aAAA,CAAc;AAAA,EAC3B,MAAM,OAAA,CACJ,GAAA,EACA,KAAA,EACqC;AACrC,IAAA,MAAM,YAAY,oBAAA,EAAqB;AACvC,IAAA,MAAM,EAAE,EAAA,EAAI,UAAA,EAAW,GAAI,KAAA,CAAM,MAAA;AACjC,IAAA,MAAM,EAAE,KAAA,EAAO,MAAA,EAAQ,QAAO,GAAI,KAAA,CAAM,SAAS,EAAC;AAGlD,IAAA,MAAM,cAAA,GAAiB,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,KAAK,GAAA,CAAI,QAAA,CAAS,KAAA,EAAO,EAAE,CAAA,IAAK,EAAA,EAAI,CAAC,CAAA,EAAG,GAAI,CAAA,GAAI,EAAA;AACxF,IAAA,MAAM,eAAA,GAAkB,MAAA,GAAS,IAAA,CAAK,GAAA,CAAI,QAAA,CAAS,QAAQ,EAAE,CAAA,IAAK,CAAA,EAAG,CAAC,CAAA,GAAI,CAAA;AAC1E,IAAA,MAAM,gBAAgB,CAAC,QAAA,EAAU,SAAA,EAAW,WAAA,EAAa,UAAU,WAAW,CAAA;AAC9E,IAAA,MAAM,kBAAkB,MAAA,IAAU,aAAA,CAAc,QAAA,CAAS,MAAM,IAAI,MAAA,GAAS,MAAA;AAE5E,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,IAAA,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,cAAc,CAAC,CAAA;AAC7C,IAAA,MAAA,CAAO,MAAA,CAAO,QAAA,EAAU,MAAA,CAAO,eAAe,CAAC,CAAA;AAC/C,IAAA,IAAI,eAAA,EAAiB;AACnB,MAAA,MAAA,CAAO,MAAA,CAAO,UAAU,eAAe,CAAA;AAAA,IACzC;AAEA,IAAA,MAAM,GAAA,GAAM,GAAG,SAAS,CAAA,kBAAA,EAAqB,mBAAmB,UAAU,CAAC,SAAS,MAAM,CAAA,CAAA;AAE1F,IAAA,GAAA,CAAI,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,CAAA,kDAAA,EAAqD,GAAG,CAAA,CAAE,CAAA;AAEnF,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAG,CAAA;AAEhC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,UAAA,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAAA,QACtC;AACA,QAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MACnE;AAEA,MAAA,MAAM,MAAA,GAAU,MAAM,QAAA,CAAS,IAAA,EAAK;AAEpC,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,CAAC,OAAO,IAAA,EAAM;AAC9B,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,sCAAsC,CAAA;AAAA,MACxE;AAEA,MAAA,OAAO,MAAA,CAAO,IAAA;AAAA,IAChB,SAAS,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA;AAAA,QAClB,6DAAA;AAAA,QACA,KAAA,YAAiB,QAAQ,KAAA,GAAQ;AAAA,OACnC;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AACF,CAAC","file":"workflow-runs-handler.js","sourcesContent":["/**\n * HTTP client for interacting with Workflow Daemon\n */\nimport type { WorkflowRunRequest } from '@kb-labs/workflow-contracts';\n\nconst DEFAULT_DAEMON_URL = 'http://localhost:7778';\n\nexport interface DaemonClientOptions {\n  url?: string;\n}\n\n/**\n * Get workflow daemon URL from environment or default\n */\nexport function getWorkflowDaemonUrl(): string {\n  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n}\n\nexport class WorkflowDaemonClient {\n  private readonly baseUrl: string;\n\n  constructor(options: DaemonClientOptions = {}) {\n    this.baseUrl = options.url ?? process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n  }\n\n  /**\n   * Validate response Content-Type and parse JSON safely\n   */\n  private async parseJsonResponse<T>(response: Response): Promise<T> {\n    const contentType = response.headers.get('content-type');\n    if (!contentType?.includes('application/json')) {\n      throw new Error(`Invalid Content-Type: expected application/json, got ${contentType}`);\n    }\n    return response.json() as Promise<T>;\n  }\n\n  private unwrapData<T>(payload: unknown): T {\n    if (\n      payload\n      && typeof payload === 'object'\n      && 'ok' in payload\n      && (payload as any).ok === true\n      && 'data' in payload\n    ) {\n      return (payload as { data: T }).data;\n    }\n    return payload as T;\n  }\n\n  /**\n   * Validate and encode job ID to prevent path traversal attacks\n   */\n  private validateAndEncodeJobId(jobId: string): string {\n    // Validate job ID format (alphanumeric, hyphens, underscores only)\n    if (!/^[a-zA-Z0-9_-]+$/.test(jobId)) {\n      throw new Error(`Invalid job ID format: ${jobId}`);\n    }\n    // Encode for URL safety (defense in depth)\n    return encodeURIComponent(jobId);\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ ok: boolean; service: string }> {\n    const response = await fetch(`${this.baseUrl}/health`);\n    if (!response.ok) {\n      throw new Error(`Health check failed: ${response.statusText}`);\n    }\n    return this.parseJsonResponse(response);\n  }\n\n  /**\n   * Get workflow metrics\n   */\n  async getMetrics(): Promise<any> {\n    const response = await fetch(`${this.baseUrl}/metrics`);\n    if (!response.ok) {\n      throw new Error(`Failed to get metrics: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job status with full details (jobs, steps, outputs)\n   */\n  async getJobStatus(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job status: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job steps with outputs\n   */\n  async getJobSteps(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/steps`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job steps: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job logs\n   */\n  async getJobLogs(jobId: string): Promise<any[]> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/logs`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job logs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ logs: any[] }>(data);\n    return unwrapped.logs ?? [];\n  }\n\n  /**\n   * Get active executions\n   */\n  async getExecutions(): Promise<any[]> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`);\n    if (!response.ok) {\n      throw new Error(`Failed to get executions: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ jobs?: any[] }>(data);\n    const jobs = unwrapped.jobs ?? [];\n    return jobs.filter((job: any) => job.status === 'running' || job.status === 'pending');\n  }\n\n  /**\n   * Get cron jobs\n   */\n  async getCronJobs(): Promise<{\n    crons: any[];\n  }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/cron`);\n    if (!response.ok) {\n      throw new Error(`Failed to get cron jobs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Submit a job for execution\n   */\n  async submitJob(params: {\n    handler: string;\n    input?: unknown;\n    priority?: number;\n  }): Promise<{ id: string; status: string }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        type: params.handler,\n        payload: params.input,\n        priority: params.priority,\n      }),\n    });\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to submit job: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<any>(response);\n    const data = this.unwrapData<{ jobId: string }>(payload);\n    return { id: data.jobId, status: 'pending' };\n  }\n\n  /**\n   * Run workflow by ID\n   */\n  async runWorkflow(\n    workflowId: string,\n    request: WorkflowRunRequest = {}\n  ): Promise<{ runId: string; status: string }> {\n    const response = await fetch(\n      `${this.baseUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/run`,\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(request),\n      }\n    );\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to run workflow: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<{ ok: boolean; data?: { runId: string; status: string } }>(response);\n    return this.unwrapData<{ runId: string; status: string }>(payload);\n  }\n}\n","/**\n * @module @kb-labs/workflow-cli/rest/workflow-runs-handler\n * REST handler for workflow run history (proxy to daemon)\n */\n\nimport { defineHandler, type RestInput, type PluginContextV3 } from '@kb-labs/sdk';\nimport type { WorkflowRunHistoryResponse } from '@kb-labs/workflow-contracts';\nimport { getWorkflowDaemonUrl } from '../http-client.js';\n\nexport default defineHandler({\n  async execute(\n    ctx: PluginContextV3,\n    input: RestInput<{ limit?: string; offset?: string; status?: string }, unknown, { id: string }>\n  ): Promise<WorkflowRunHistoryResponse> {\n    const daemonUrl = getWorkflowDaemonUrl();\n    const { id: workflowId } = input.params!;\n    const { limit, offset, status } = input.query || {};\n\n    // Validate query parameters\n    const validatedLimit = limit ? Math.min(Math.max(parseInt(limit, 10) || 50, 1), 1000) : 50;\n    const validatedOffset = offset ? Math.max(parseInt(offset, 10) || 0, 0) : 0;\n    const validStatuses = ['queued', 'running', 'completed', 'failed', 'cancelled'];\n    const validatedStatus = status && validStatuses.includes(status) ? status : undefined;\n\n    const params = new URLSearchParams();\n    params.append('limit', String(validatedLimit));\n    params.append('offset', String(validatedOffset));\n    if (validatedStatus) {\n      params.append('status', validatedStatus);\n    }\n\n    const url = `${daemonUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/runs?${params}`;\n\n    ctx.platform.logger.info(`[workflow-runs-handler] Fetching run history from ${url}`);\n\n    try {\n      const response = await fetch(url);\n\n      if (!response.ok) {\n        if (response.status === 404) {\n          throw new Error('Workflow not found');\n        }\n        throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n      }\n\n      const result = (await response.json()) as { ok: boolean; data?: WorkflowRunHistoryResponse; error?: string };\n\n      if (!result.ok || !result.data) {\n        throw new Error(result.error || 'Failed to fetch workflow run history');\n      }\n\n      return result.data;\n    } catch (error) {\n      ctx.platform.logger.error(\n        '[workflow-runs-handler] Error fetching workflow run history',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  },\n});\n"]}

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflows-list-handler.d.ts

@@ -0,0 +1,12 @@
+import * as _kb_labs_shared_command_kit from '@kb-labs/shared-command-kit';
+import { RestInput } from '@kb-labs/sdk';
+import { WorkflowListResponse } from '@kb-labs/workflow-contracts';
+
+interface WorkflowsListQuery {
+    source?: string;
+    status?: string;
+    tags?: string;
+}
+declare const _default: _kb_labs_shared_command_kit.Handler<unknown, RestInput<WorkflowsListQuery, unknown, unknown>, WorkflowListResponse>;
+
+export { _default as default };

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflows-list-handler.js

@@ -0,0 +1,51 @@
+import { defineHandler } from '@kb-labs/sdk';
+
+// src/rest/workflows-list-handler.ts
+
+// src/http-client.ts
+var DEFAULT_DAEMON_URL = "http://localhost:7778";
+function getWorkflowDaemonUrl() {
+  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;
+}
+
+// src/rest/workflows-list-handler.ts
+var workflows_list_handler_default = defineHandler({
+  async execute(ctx, input) {
+    const daemonUrl = getWorkflowDaemonUrl();
+    const { source, status, tags } = input.query || {};
+    const params = new URLSearchParams();
+    if (source) {
+      params.append("source", source);
+    }
+    if (status) {
+      params.append("status", status);
+    }
+    if (tags) {
+      params.append("tags", tags);
+    }
+    const queryString = params.toString();
+    const url = `${daemonUrl}/api/v1/workflows${queryString ? `?${queryString}` : ""}`;
+    ctx.platform.logger.info(`[workflows-list-handler] Fetching workflows from ${url}`);
+    try {
+      const response = await fetch(url);
+      if (!response.ok) {
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
+      const result = await response.json();
+      if (!result.ok || !result.data) {
+        throw new Error(result.error || "Failed to fetch workflows");
+      }
+      return result.data;
+    } catch (error) {
+      ctx.platform.logger.error(
+        "[workflows-list-handler] Error fetching workflows",
+        error instanceof Error ? error : void 0
+      );
+      throw error;
+    }
+  }
+});
+
+export { workflows_list_handler_default as default };
+//# sourceMappingURL=workflows-list-handler.js.map
+//# sourceMappingURL=workflows-list-handler.js.map

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/rest/workflows-list-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/http-client.ts","../../src/rest/workflows-list-handler.ts"],"names":[],"mappings":";;;;;AAKA,IAAM,kBAAA,GAAqB,uBAAA;AASpB,SAAS,oBAAA,GAA+B;AAC7C,EAAA,OAAO,OAAA,CAAQ,IAAI,mBAAA,IAAuB,kBAAA;AAC5C;;;ACDA,IAAO,iCAAQ,aAAA,CAAc;AAAA,EAC3B,MAAM,OAAA,CACJ,GAAA,EACA,KAAA,EAC+B;AAC/B,IAAA,MAAM,YAAY,oBAAA,EAAqB;AACvC,IAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAK,GAAI,KAAA,CAAM,SAAS,EAAC;AAEjD,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,IAAA,IAAI,MAAA,EAAQ;AAAC,MAAA,MAAA,CAAO,MAAA,CAAO,UAAU,MAAM,CAAA;AAAA,IAAE;AAC7C,IAAA,IAAI,MAAA,EAAQ;AAAC,MAAA,MAAA,CAAO,MAAA,CAAO,UAAU,MAAM,CAAA;AAAA,IAAE;AAC7C,IAAA,IAAI,IAAA,EAAM;AAAC,MAAA,MAAA,CAAO,MAAA,CAAO,QAAQ,IAAI,CAAA;AAAA,IAAE;AAEvC,IAAA,MAAM,WAAA,GAAc,OAAO,QAAA,EAAS;AACpC,IAAA,MAAM,GAAA,GAAM,GAAG,SAAS,CAAA,iBAAA,EAAoB,cAAc,CAAA,CAAA,EAAI,WAAW,KAAK,EAAE,CAAA,CAAA;AAEhF,IAAA,GAAA,CAAI,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,CAAA,iDAAA,EAAoD,GAAG,CAAA,CAAE,CAAA;AAElF,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAG,CAAA;AAEhC,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,MACnE;AAEA,MAAA,MAAM,MAAA,GAAU,MAAM,QAAA,CAAS,IAAA,EAAK;AAEpC,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,IAAM,CAAC,OAAO,IAAA,EAAM;AAC9B,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,2BAA2B,CAAA;AAAA,MAC7D;AAEA,MAAA,OAAO,MAAA,CAAO,IAAA;AAAA,IAChB,SAAS,KAAA,EAAO;AACd,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA;AAAA,QAClB,mDAAA;AAAA,QACA,KAAA,YAAiB,QAAQ,KAAA,GAAQ;AAAA,OACnC;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AACF,CAAC","file":"workflows-list-handler.js","sourcesContent":["/**\n * HTTP client for interacting with Workflow Daemon\n */\nimport type { WorkflowRunRequest } from '@kb-labs/workflow-contracts';\n\nconst DEFAULT_DAEMON_URL = 'http://localhost:7778';\n\nexport interface DaemonClientOptions {\n  url?: string;\n}\n\n/**\n * Get workflow daemon URL from environment or default\n */\nexport function getWorkflowDaemonUrl(): string {\n  return process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n}\n\nexport class WorkflowDaemonClient {\n  private readonly baseUrl: string;\n\n  constructor(options: DaemonClientOptions = {}) {\n    this.baseUrl = options.url ?? process.env.WORKFLOW_DAEMON_URL ?? DEFAULT_DAEMON_URL;\n  }\n\n  /**\n   * Validate response Content-Type and parse JSON safely\n   */\n  private async parseJsonResponse<T>(response: Response): Promise<T> {\n    const contentType = response.headers.get('content-type');\n    if (!contentType?.includes('application/json')) {\n      throw new Error(`Invalid Content-Type: expected application/json, got ${contentType}`);\n    }\n    return response.json() as Promise<T>;\n  }\n\n  private unwrapData<T>(payload: unknown): T {\n    if (\n      payload\n      && typeof payload === 'object'\n      && 'ok' in payload\n      && (payload as any).ok === true\n      && 'data' in payload\n    ) {\n      return (payload as { data: T }).data;\n    }\n    return payload as T;\n  }\n\n  /**\n   * Validate and encode job ID to prevent path traversal attacks\n   */\n  private validateAndEncodeJobId(jobId: string): string {\n    // Validate job ID format (alphanumeric, hyphens, underscores only)\n    if (!/^[a-zA-Z0-9_-]+$/.test(jobId)) {\n      throw new Error(`Invalid job ID format: ${jobId}`);\n    }\n    // Encode for URL safety (defense in depth)\n    return encodeURIComponent(jobId);\n  }\n\n  /**\n   * Health check\n   */\n  async health(): Promise<{ ok: boolean; service: string }> {\n    const response = await fetch(`${this.baseUrl}/health`);\n    if (!response.ok) {\n      throw new Error(`Health check failed: ${response.statusText}`);\n    }\n    return this.parseJsonResponse(response);\n  }\n\n  /**\n   * Get workflow metrics\n   */\n  async getMetrics(): Promise<any> {\n    const response = await fetch(`${this.baseUrl}/metrics`);\n    if (!response.ok) {\n      throw new Error(`Failed to get metrics: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job status with full details (jobs, steps, outputs)\n   */\n  async getJobStatus(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job status: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job steps with outputs\n   */\n  async getJobSteps(jobId: string): Promise<any> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/steps`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job steps: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Get job logs\n   */\n  async getJobLogs(jobId: string): Promise<any[]> {\n    const encodedJobId = this.validateAndEncodeJobId(jobId);\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs/${encodedJobId}/logs`);\n    if (response.status === 404) {\n      throw new Error(`Job ${jobId} not found`);\n    }\n    if (!response.ok) {\n      throw new Error(`Failed to get job logs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ logs: any[] }>(data);\n    return unwrapped.logs ?? [];\n  }\n\n  /**\n   * Get active executions\n   */\n  async getExecutions(): Promise<any[]> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`);\n    if (!response.ok) {\n      throw new Error(`Failed to get executions: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    const unwrapped = this.unwrapData<{ jobs?: any[] }>(data);\n    const jobs = unwrapped.jobs ?? [];\n    return jobs.filter((job: any) => job.status === 'running' || job.status === 'pending');\n  }\n\n  /**\n   * Get cron jobs\n   */\n  async getCronJobs(): Promise<{\n    crons: any[];\n  }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/cron`);\n    if (!response.ok) {\n      throw new Error(`Failed to get cron jobs: ${response.statusText}`);\n    }\n    const data = await this.parseJsonResponse<any>(response);\n    return this.unwrapData(data);\n  }\n\n  /**\n   * Submit a job for execution\n   */\n  async submitJob(params: {\n    handler: string;\n    input?: unknown;\n    priority?: number;\n  }): Promise<{ id: string; status: string }> {\n    const response = await fetch(`${this.baseUrl}/api/v1/jobs`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        type: params.handler,\n        payload: params.input,\n        priority: params.priority,\n      }),\n    });\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to submit job: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<any>(response);\n    const data = this.unwrapData<{ jobId: string }>(payload);\n    return { id: data.jobId, status: 'pending' };\n  }\n\n  /**\n   * Run workflow by ID\n   */\n  async runWorkflow(\n    workflowId: string,\n    request: WorkflowRunRequest = {}\n  ): Promise<{ runId: string; status: string }> {\n    const response = await fetch(\n      `${this.baseUrl}/api/v1/workflows/${encodeURIComponent(workflowId)}/run`,\n      {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify(request),\n      }\n    );\n\n    if (!response.ok) {\n      const error = (await response.json().catch(() => ({ error: response.statusText }))) as {\n        error?: string;\n      };\n      throw new Error(error.error || `Failed to run workflow: ${response.statusText}`);\n    }\n\n    const payload = await this.parseJsonResponse<{ ok: boolean; data?: { runId: string; status: string } }>(response);\n    return this.unwrapData<{ runId: string; status: string }>(payload);\n  }\n}\n","/**\n * @module @kb-labs/workflow-cli/rest/workflows-list-handler\n * REST handler for listing workflow definitions\n */\n\nimport { defineHandler, type RestInput, type PluginContextV3 } from '@kb-labs/sdk';\nimport type { WorkflowListResponse } from '@kb-labs/workflow-contracts';\nimport { getWorkflowDaemonUrl } from '../http-client';\n\ninterface WorkflowsListQuery {\n  source?: string;\n  status?: string;\n  tags?: string;\n}\n\nexport default defineHandler({\n  async execute(\n    ctx: PluginContextV3,\n    input: RestInput<WorkflowsListQuery>\n  ): Promise<WorkflowListResponse> {\n    const daemonUrl = getWorkflowDaemonUrl();\n    const { source, status, tags } = input.query || {};\n\n    const params = new URLSearchParams();\n    if (source) {params.append('source', source);}\n    if (status) {params.append('status', status);}\n    if (tags) {params.append('tags', tags);}\n\n    const queryString = params.toString();\n    const url = `${daemonUrl}/api/v1/workflows${queryString ? `?${queryString}` : ''}`;\n\n    ctx.platform.logger.info(`[workflows-list-handler] Fetching workflows from ${url}`);\n\n    try {\n      const response = await fetch(url);\n\n      if (!response.ok) {\n        throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n      }\n\n      const result = (await response.json()) as { ok: boolean; data?: WorkflowListResponse; error?: string };\n\n      if (!result.ok || !result.data) {\n        throw new Error(result.error || 'Failed to fetch workflows');\n      }\n\n      return result.data;\n    } catch (error) {\n      ctx.platform.logger.error(\n        '[workflows-list-handler] Error fetching workflows',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  },\n});\n"]}

package/.kb/runtime/workspaces/ws_94c2deab-4cf9-49cb-94ac-3958062754a1/ws/logs-channel.d.ts

@@ -0,0 +1,17 @@
+import * as _kb_labs_plugin_contracts from '@kb-labs/plugin-contracts';
+import { LogRecord } from '@kb-labs/core-platform';
+
+declare const subscriptions: Map<string, () => void>;
+/**
+ * Convert LogRecord level to channel level type
+ */
+declare function normalizeLevel(level: LogRecord['level']): 'info' | 'warn' | 'error' | 'debug';
+/**
+ * Check if log level matches filter
+ */
+declare function levelMatches(logLevel: LogRecord['level'], filterLevel?: string): boolean;
+declare const _default: {
+    execute(context: _kb_labs_plugin_contracts.PluginContextV3<unknown>, input: _kb_labs_plugin_contracts.WSInput): Promise<_kb_labs_plugin_contracts.CommandResult | void>;
+};
+
+export { _default as default, levelMatches, normalizeLevel, subscriptions };