@kb-labs/workflow-contracts 2.94.0 → 2.96.0

package/dist/index.d.ts

@@ -1,7 +1,8 @@
-import { E as ExpressionContext, W as WorkflowInvocationSpec } from './rest-api-BVWeRsk-.js';
-export { A as ApprovalReviewItem, a as ApprovalReviewItemSchema, b as ArtifactMergeConfig, c as ArtifactMergeConfigSchema, d as ArtifactMergeSource, e as ArtifactMergeSourceSchema, f as ArtifactMergeStrategy, g as ArtifactMergeStrategySchema, C as ConcurrencyGroup, h as ConcurrencyGroupSchema, i as CreateRunInput, j as CronInfo, k as CronInfoSchema, l as CronListResponse, m as CronListResponseSchema, n as CronRegistrationRequest, D as DashboardStatsResponse, o as DashboardStatsResponseSchema, p as ExecutionResult, q as ExecutionResultSchema, r as ExecutionTarget, s as ExecutionTargetSchema, I as IWorkflowEngine, t as IdempotencyKey, u as IdempotencyKeySchema, v as IsolationProfile, w as IsolationProfileSchema, J as JobArtifactsSchema, x as JobCancelResponse, y as JobCancelResponseSchema, z as JobConcurrencySchema, B as JobHooks, F as JobHooksSchema, G as JobListFilter, H as JobListResponse, K as JobListResponseSchema, L as JobLogsResponse, M as JobLogsResponseSchema, N as JobRun, O as JobRunSchema, P as JobSpec, Q as JobSpecSchema, R as JobStateSchema, S as JobStatusInfo, T as JobStatusInfoSchema, U as JobStatusSchema, V as JobStepInfo, X as JobStepInfoSchema, Y as JobStepsResponse, Z as JobStepsResponseSchema, _ as JobSubmissionRequest, $ as JobSubmissionResponse, a0 as ListRunsFilter, a1 as Phase, a2 as PhaseSchema, a3 as ResultError, a4 as ResultErrorSchema, a5 as ResultMetrics, a6 as ResultMetricsSchema, a7 as RetryModeSchema, a8 as RetryPolicy, a9 as RetryPolicySchema, aa as RunMetadata, ab as RunMetadataSchema, ac as RunSchema, ad as RunStateSchema, ae as RunTrigger, af as RunTriggerSchema, ag as StepArtifact, ah as StepArtifactSchema, ai as StepProgress, aj as StepProgressSchema, ak as StepRun, al as StepRunErrorSchema, am as StepRunSchema, an as StepSpec, ao as StepSpecSchema, ap as StepStateSchema, aq as TenantIdSchema, ar as TimeoutSchema, as as WorkflowInfo, at as WorkflowInfoSchema, au as WorkflowInputField, av as WorkflowInputFieldSchema, aw as WorkflowListResponse, ax as WorkflowListResponseSchema, ay as WorkflowLogEvent, az as WorkflowRun, aA as WorkflowRunHistoryResponse, aB as WorkflowRunHistoryResponseSchema, aC as WorkflowRunInfo, aD as WorkflowRunInfoSchema, aE as WorkflowRunRequest, aF as WorkflowRunRequestSchema, aG as WorkflowSpec, aH as WorkflowSpecSchema, aI as WorkflowTriggerSchema, aJ as WorkflowValidationResult } from './rest-api-BVWeRsk-.js';
+import { E as ExpressionContext, W as WorkflowInvocationSpec } from './rest-api-C7Qdk5Wo.js';
+export { A as ApprovalReviewItem, a as ApprovalReviewItemSchema, b as ArtifactMergeConfig, c as ArtifactMergeConfigSchema, d as ArtifactMergeSource, e as ArtifactMergeSourceSchema, f as ArtifactMergeStrategy, g as ArtifactMergeStrategySchema, C as ConcurrencyGroup, h as ConcurrencyGroupSchema, i as CreateRunInput, j as CronInfo, k as CronInfoSchema, l as CronListResponse, m as CronListResponseSchema, n as CronRegistrationRequest, D as DashboardStatsResponse, o as DashboardStatsResponseSchema, p as ExecutionResult, q as ExecutionResultSchema, r as ExecutionTarget, s as ExecutionTargetSchema, F as FileLintResult, I as IWorkflowEngine, t as IdempotencyKey, u as IdempotencyKeySchema, v as IsolationProfile, w as IsolationProfileSchema, J as JobArtifactsSchema, x as JobCancelResponse, y as JobCancelResponseSchema, z as JobConcurrencySchema, B as JobHooks, G as JobHooksSchema, H as JobListFilter, K as JobListResponse, L as JobListResponseSchema, M as JobLogsResponse, N as JobLogsResponseSchema, O as JobRun, P as JobRunSchema, Q as JobSpec, R as JobSpecSchema, S as JobStateSchema, T as JobStatusInfo, U as JobStatusInfoSchema, V as JobStatusSchema, X as JobStepInfo, Y as JobStepInfoSchema, Z as JobStepsResponse, _ as JobStepsResponseSchema, $ as JobSubmissionRequest, a0 as JobSubmissionResponse, a1 as ListRunsFilter, a2 as Phase, a3 as PhaseSchema, a4 as ResultError, a5 as ResultErrorSchema, a6 as ResultMetrics, a7 as ResultMetricsSchema, a8 as RetryModeSchema, a9 as RetryPolicy, aa as RetryPolicySchema, ab as RunMetadata, ac as RunMetadataSchema, ad as RunSchema, ae as RunStateSchema, af as RunTrigger, ag as RunTriggerSchema, ah as StepArtifact, ai as StepArtifactSchema, aj as StepProgress, ak as StepProgressSchema, al as StepRun, am as StepRunErrorSchema, an as StepRunSchema, ao as StepSpec, ap as StepSpecSchema, aq as StepStateSchema, ar as TenantIdSchema, as as TimeoutSchema, at as WorkflowInfo, au as WorkflowInfoSchema, av as WorkflowInputField, aw as WorkflowInputFieldSchema, ax as WorkflowListResponse, ay as WorkflowListResponseSchema, az as WorkflowLogEvent, aA as WorkflowRerunRequest, aB as WorkflowRerunRequestSchema, aC as WorkflowRestartRequest, aD as WorkflowRestartRequestSchema, aE as WorkflowRestartResponse, aF as WorkflowRun, aG as WorkflowRunHistoryResponse, aH as WorkflowRunHistoryResponseSchema, aI as WorkflowRunInfo, aJ as WorkflowRunInfoSchema, aK as WorkflowRunRequest, aL as WorkflowRunRequestSchema, aM as WorkflowSpec, aN as WorkflowSpecSchema, aO as WorkflowTriggerSchema, aP as WorkflowValidationResult } from './rest-api-C7Qdk5Wo.js';
 import * as _kb_labs_shared_command_kit from '@kb-labs/shared-command-kit';
 import { z } from 'zod';
+import '@kb-labs/workflow-constants';
 
 /**
  * Parse workflow: uses string into WorkflowInvocationSpec
@@ -24,11 +25,41 @@ declare function evaluateExpression(expr: string, context: ExpressionContext): b
  * Resolve a value from context (e.g., "env.VAR", "steps.build.outputs.version")
  */
 declare function resolveValue(path: string, context: ExpressionContext): unknown;
+/**
+ * Coerce value to string for comparison
+ */
+declare function coerceToString(value: unknown): string;
 /**
  * Interpolate string with context values
  * Example: "Version: ${{ steps.build.outputs.version }}"
  */
 declare function interpolateString(str: string, context: ExpressionContext): string;
+/**
+ * Build a shell-safe command from a `run:` block by injecting ${{ expr }} values
+ * as environment variables instead of raw string substitution.
+ *
+ * Raw substitution is unsafe because issue/PR titles may contain shell metacharacters
+ * (backticks, $(), quotes). When content arrives via an env var, shell expansion of
+ * the variable does NOT re-evaluate backticks or $() — they are literal characters.
+ *
+ * Single-quote context: when ${{ expr }} is wrapped in single quotes — the natural
+ * pattern for `jq --argjson x '${{ inputs.payload }}'` — bash single-quote semantics
+ * would prevent ${_WF_var} from expanding. The single-quoted wrapper is replaced with
+ * a double-quoted reference instead:
+ *
+ * Example:
+ *   Input:  `echo "${{ steps.issue.outputs.title }}"`
+ *   Output: command = `echo "${_WF_steps_issue_outputs_title}"`
+ *           shellEnvVars = { _WF_steps_issue_outputs_title: "Add `kb cancel` command" }
+ *
+ *   Input:  `jq --argjson payload '${{ inputs.invoice_payload }}' '{"x":1}'`
+ *   Output: command = `jq --argjson payload "${_WF_inputs_invoice_payload}" '{"x":1}'`
+ *           shellEnvVars = { _WF_inputs_invoice_payload: '{"vendor":"Acme","total":250}' }
+ */
+declare function buildShellSafeCommand(rawRun: string, context: ExpressionContext): {
+    command: string;
+    shellEnvVars: Record<string, string>;
+};
 /**
  * Resolve expression preserving types.
  * If the string is exactly one `${{ expr }}` (no surrounding text),
@@ -77,6 +108,10 @@ declare const logsFlags: _kb_labs_shared_command_kit.FlagSchemaWithInfer<{
         type: "string";
         description: string;
     };
+    'run-id': {
+        type: "string";
+        description: string;
+    };
     follow: {
         type: "boolean";
         description: string;
@@ -180,20 +215,20 @@ declare const PluginCronJobSchema: z.ZodObject<{
     id: string;
     priority: "high" | "normal" | "low";
     schedule: string;
-    enabled: boolean;
     handler: string;
+    enabled: boolean;
     timezone?: string | undefined;
-    input?: Record<string, unknown> | undefined;
     metadata?: Record<string, unknown> | undefined;
+    input?: Record<string, unknown> | undefined;
 }, {
     id: string;
     schedule: string;
     handler: string;
     priority?: "high" | "normal" | "low" | undefined;
     timezone?: string | undefined;
-    enabled?: boolean | undefined;
-    input?: Record<string, unknown> | undefined;
     metadata?: Record<string, unknown> | undefined;
+    input?: Record<string, unknown> | undefined;
+    enabled?: boolean | undefined;
 }>;
 type PluginCronJob = z.infer<typeof PluginCronJobSchema>;
 /**
@@ -211,24 +246,24 @@ declare const UserCronJobSchema: z.ZodObject<{
     jobs: z.ZodRecord<z.ZodString, z.ZodAny>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
+    name: string;
     priority: "high" | "normal" | "low";
-    jobs: Record<string, any>;
     schedule: string;
+    jobs: Record<string, any>;
     enabled: boolean;
-    name: string;
     autoStart: boolean;
-    timezone?: string | undefined;
     env?: Record<string, string> | undefined;
+    timezone?: string | undefined;
     metadata?: Record<string, unknown> | undefined;
 }, {
-    jobs: Record<string, any>;
-    schedule: string;
     name: string;
+    schedule: string;
+    jobs: Record<string, any>;
+    env?: Record<string, string> | undefined;
     priority?: "high" | "normal" | "low" | undefined;
     timezone?: string | undefined;
-    enabled?: boolean | undefined;
-    env?: Record<string, string> | undefined;
     metadata?: Record<string, unknown> | undefined;
+    enabled?: boolean | undefined;
     autoStart?: boolean | undefined;
 }>;
 type UserCronJob = z.infer<typeof UserCronJobSchema>;
@@ -273,7 +308,7 @@ declare const CronExecutionSchema: z.ZodObject<{
         stack?: string | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    status: "pending" | "running" | "failed" | "success";
+    status: "running" | "success" | "failed" | "pending";
     runId: string;
     cronJobId: string;
     scheduledAt: string;
@@ -284,7 +319,7 @@ declare const CronExecutionSchema: z.ZodObject<{
         stack?: string | undefined;
     } | undefined;
 }, {
-    status: "pending" | "running" | "failed" | "success";
+    status: "running" | "success" | "failed" | "pending";
     runId: string;
     cronJobId: string;
     scheduledAt: string;
@@ -343,4 +378,4 @@ declare const WORKFLOW_ROUTES: {
     readonly RESOLVE_APPROVAL: "/runs/:runId/approve";
 };
 
-export { type CronExecution, CronExecutionSchema, CronScheduleSchema, ExpressionContext, type HealthFlags, type ListFlags, type LogsFlags, type MetricsFlags, type PluginCronJob, PluginCronJobSchema, type RegisteredCronJob, type RunFlags, type StatusFlags, type UserCronJob, UserCronJobSchema, WORKFLOW_BASE_PATH, WORKFLOW_ROUTES, WorkflowInvocationSpec, evaluateExpression, extractExpressions, healthFlags, interpolateObject, interpolateString, listFlags, logsFlags, metricsFlags, parseWorkflowUses, resolveExpression, resolveValue, runFlags, statusFlags };
+export { type CronExecution, CronExecutionSchema, CronScheduleSchema, ExpressionContext, type HealthFlags, type ListFlags, type LogsFlags, type MetricsFlags, type PluginCronJob, PluginCronJobSchema, type RegisteredCronJob, type RunFlags, type StatusFlags, type UserCronJob, UserCronJobSchema, WORKFLOW_BASE_PATH, WORKFLOW_ROUTES, WorkflowInvocationSpec, buildShellSafeCommand, coerceToString, evaluateExpression, extractExpressions, healthFlags, interpolateObject, interpolateString, listFlags, logsFlags, metricsFlags, parseWorkflowUses, resolveExpression, resolveValue, runFlags, statusFlags };

package/dist/index.js

@@ -53,6 +53,10 @@ var StepSpecSchema = z.object({
     z.literal("builtin:shell"),
     z.literal("builtin:approval"),
     z.literal("builtin:gate"),
+    // CLI command form — the resolver matches the part after `command:`
+    // verbatim against a manifest command path (e.g. `review run`,
+    // `agent trace stats`), which contains spaces. Allow them here.
+    z.string().regex(/^command:[a-zA-Z0-9@/_:+#. -]+$/),
     z.string().regex(/^(plugin:|workflow:)?[a-zA-Z0-9@/_:+#.-]+$/)
   ]).optional(),
   /** Shell command shorthand — equivalent to uses: builtin:shell with: { command: ... } */
@@ -198,7 +202,12 @@ var StepRunSchema = z.object({
    * Stored separately from spec.with so original ${{ }} templates are preserved
    * and future re-executions (gate restartFrom) can re-interpolate correctly.
    */
-  resolvedInputs: z.record(z.string(), z.unknown()).optional()
+  resolvedInputs: z.record(z.string(), z.unknown()).optional(),
+  /**
+   * Step-level execution metadata (e.g. gate iteration counter).
+   * Cleared on step reset except metadata.iterations which persists across restarts.
+   */
+  metadata: z.record(z.string(), z.unknown()).optional()
 });
 var JobRunSchema = z.object({
   id: z.string().min(1),
@@ -226,6 +235,7 @@ var JobRunSchema = z.object({
   pendingDependencies: z.array(z.string().min(1)).optional(),
   blocked: z.boolean().optional(),
   priority: z.enum(["high", "normal", "low"]).optional(),
+  if: z.string().optional(),
   steps: z.array(StepRunSchema)
 });
 var RunTriggerSchema = z.object({
@@ -326,13 +336,13 @@ function extractExpressions(str) {
 }
 function evaluateExpression(expr, context) {
   const trimmed = expr.trim();
-  if (trimmed.includes("&&")) {
-    const parts = trimmed.split("&&").map((p) => p.trim());
-    return parts.every((part) => evaluateExpression(part, context));
+  const orParts = splitOnOperator(trimmed, "||");
+  if (orParts.length > 1) {
+    return orParts.some((part) => evaluateExpression(part.trim(), context));
   }
-  if (trimmed.includes("||")) {
-    const parts = trimmed.split("||").map((p) => p.trim());
-    return parts.some((part) => evaluateExpression(part, context));
+  const andParts = splitOnOperator(trimmed, "&&");
+  if (andParts.length > 1) {
+    return andParts.every((part) => evaluateExpression(part.trim(), context));
   }
   if (trimmed.startsWith("!")) {
     return !evaluateExpression(trimmed.slice(1).trim(), context);
@@ -464,6 +474,9 @@ function coerceToString(value) {
   if (typeof value === "boolean") {
     return value ? "true" : "false";
   }
+  if (typeof value === "object") {
+    return JSON.stringify(value);
+  }
   return String(value);
 }
 function interpolateString(str, context) {
@@ -480,6 +493,25 @@ function interpolateString(str, context) {
   }
   return result;
 }
+function buildShellSafeCommand(rawRun, context) {
+  const expressions = extractExpressions(rawRun);
+  const shellEnvVars = {};
+  let command = rawRun;
+  for (const expr of expressions) {
+    const value = resolveValueWithFallback(expr, context);
+    const strValue = coerceToString(value);
+    const safeName = "_WF_" + expr.trim().replace(/[^a-zA-Z0-9_]/g, "_");
+    shellEnvVars[safeName] = strValue;
+    const sqPattern = new RegExp(
+      `'\\$\\{\\{\\s*${escapeRegex(expr)}\\s*\\}\\}'`,
+      "g"
+    );
+    command = command.replace(sqPattern, `"\${${safeName}}"`);
+    const pattern = new RegExp(`\\$\\{\\{\\s*${escapeRegex(expr)}\\s*\\}\\}`, "g");
+    command = command.replace(pattern, `\${${safeName}}`);
+  }
+  return { command, shellEnvVars };
+}
 function escapeRegex(str) {
   return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -582,7 +614,11 @@ var logsFlags = defineFlags({
   },
   "job-id": {
     type: "string",
-    description: "Job ID to get logs for (required)"
+    description: "Job ID to get logs for"
+  },
+  "run-id": {
+    type: "string",
+    description: "Run ID to get logs for (all steps)"
   },
   follow: {
     type: "boolean",
@@ -730,7 +766,9 @@ var WorkflowInfoSchema = z.object({
   source: z.enum(["manifest", "standalone", "plugin"]),
   pluginId: z.string().optional(),
   status: z.enum(["active", "inactive"]).optional(),
-  tags: z.array(z.string()).optional()
+  tags: z.array(z.string()).optional(),
+  version: z.string().optional(),
+  updatedAt: z.string().optional()
 });
 var WorkflowListResponseSchema = z.object({
   workflows: z.array(WorkflowInfoSchema)
@@ -750,6 +788,13 @@ var WorkflowRunRequestSchema = z.object({
     user: z.string().optional()
   }).optional()
 });
+var WorkflowRerunRequestSchema = z.object({
+  failedOnly: z.boolean().optional()
+});
+var WorkflowRestartRequestSchema = z.object({
+  fromStepId: z.string().optional(),
+  env: z.record(z.string()).optional()
+});
 var DashboardStatsResponseSchema = z.object({
   workflows: z.object({
     total: z.number(),
@@ -872,6 +917,6 @@ var WORKFLOW_ROUTES = {
   RESOLVE_APPROVAL: "/runs/:runId/approve"
 };
 
-export { ApprovalReviewItemSchema, ArtifactMergeConfigSchema, ArtifactMergeSourceSchema, ArtifactMergeStrategySchema, ConcurrencyGroupSchema, CronExecutionSchema, CronInfoSchema, CronListResponseSchema, CronScheduleSchema, DashboardStatsResponseSchema, ExecutionResultSchema, ExecutionTargetSchema, IdempotencyKeySchema, IsolationProfileSchema, JobArtifactsSchema, JobCancelResponseSchema, JobConcurrencySchema, JobHooksSchema, JobListResponseSchema, JobLogsResponseSchema, JobRunSchema, JobSpecSchema, JobStateSchema, JobStatusInfoSchema, JobStatusSchema, JobStepInfoSchema, JobStepsResponseSchema, PhaseSchema, PluginCronJobSchema, ResultErrorSchema, ResultMetricsSchema, RetryModeSchema, RetryPolicySchema, RunMetadataSchema, RunSchema, RunStateSchema, RunTriggerSchema, StepArtifactSchema, StepProgressSchema, StepRunErrorSchema, StepRunSchema, StepSpecSchema, StepStateSchema, TenantIdSchema, TimeoutSchema, UserCronJobSchema, WORKFLOW_BASE_PATH, WORKFLOW_ROUTES, WorkflowInfoSchema, WorkflowInputFieldSchema, WorkflowListResponseSchema, WorkflowRunHistoryResponseSchema, WorkflowRunInfoSchema, WorkflowRunRequestSchema, WorkflowSpecSchema, WorkflowTriggerSchema, evaluateExpression, extractExpressions, healthFlags, interpolateObject, interpolateString, listFlags, logsFlags, metricsFlags, parseWorkflowUses, resolveExpression, resolveValue, runFlags, statusFlags };
+export { ApprovalReviewItemSchema, ArtifactMergeConfigSchema, ArtifactMergeSourceSchema, ArtifactMergeStrategySchema, ConcurrencyGroupSchema, CronExecutionSchema, CronInfoSchema, CronListResponseSchema, CronScheduleSchema, DashboardStatsResponseSchema, ExecutionResultSchema, ExecutionTargetSchema, IdempotencyKeySchema, IsolationProfileSchema, JobArtifactsSchema, JobCancelResponseSchema, JobConcurrencySchema, JobHooksSchema, JobListResponseSchema, JobLogsResponseSchema, JobRunSchema, JobSpecSchema, JobStateSchema, JobStatusInfoSchema, JobStatusSchema, JobStepInfoSchema, JobStepsResponseSchema, PhaseSchema, PluginCronJobSchema, ResultErrorSchema, ResultMetricsSchema, RetryModeSchema, RetryPolicySchema, RunMetadataSchema, RunSchema, RunStateSchema, RunTriggerSchema, StepArtifactSchema, StepProgressSchema, StepRunErrorSchema, StepRunSchema, StepSpecSchema, StepStateSchema, TenantIdSchema, TimeoutSchema, UserCronJobSchema, WORKFLOW_BASE_PATH, WORKFLOW_ROUTES, WorkflowInfoSchema, WorkflowInputFieldSchema, WorkflowListResponseSchema, WorkflowRerunRequestSchema, WorkflowRestartRequestSchema, WorkflowRunHistoryResponseSchema, WorkflowRunInfoSchema, WorkflowRunRequestSchema, WorkflowSpecSchema, WorkflowTriggerSchema, buildShellSafeCommand, coerceToString, evaluateExpression, extractExpressions, healthFlags, interpolateObject, interpolateString, listFlags, logsFlags, metricsFlags, parseWorkflowUses, resolveExpression, resolveValue, runFlags, statusFlags };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map