@makaio/framework 1.0.0-dev-1788511348215 → 1.0.0-dev-1788721567504

package/dist/runtime-node/workflow-execution-bus-access.mjs

@@ -1 +1 @@
-import{randomBytes as e}from"node:crypto";import{getFullSubjectForSubjectDefinition as t}from"@makaio/framework/core";import{ArtifactSubjects as n,SubagentSubjects as r,WorkerSubjects as i,WorkflowSubjects as a}from"@makaio/framework/contracts";import{registerHmacIdentitySecret as o,resolveHmacIdentityPeer as s,resolveHmacIdentitySecret as c,rotateHmacIdentitySecret as l}from"@makaio/framework/node/transports";import{AdapterSubsystemSubjects as u}from"@makaio/framework/services/adapter-subsystem";import{WorkflowStorageSubjects as d}from"@makaio/framework/workflow-engine";const f=[i.control[`attempt-ready`],i.control.outcome.submit,a.getRunContext,u.listAdapters,a.bootstrapAuthorityState,a.finalizeDelegateResult,d.getExecution,d.setFrame,d.setSpan,d.listFrames,d.getGateInstance,d.setGateInstance,a.frame.started,a.frame.completed,a.frame.failed,a.frame.sessionLinked,a.execution.progress,a.gate.suspended,a.gate.resumed,a.gate.resolved,a.gate.respond,a.state.get,a.state.patch,a.resolveAgent,a.resolveRole,n.query,n.create,n.revise,a.artifact.updated,r.spawn,r.await,r.getStatus,r.kill];function p(e){return[...f.map(t),`workflow.${e}.cancel`]}function m(e){let{executionAttemptId:t,executionId:n,secret:r}=e,i=e.allowedSubjects??p(n);return{secret:r,cleanup:o(t,r,{peerKind:`workflow-execution-attempt`,claims:{executionId:n},allowedSubjects:i})}}function h(t){let n=e(32).toString(`hex`);return m({...t,secret:n})}function g(t){let{executionAttemptId:n,executionId:r}=t,i=s(n);if(i?.kind!==`workflow-execution-attempt`||i.claims?.executionId!==r)throw Error(`Cannot rotate workflow execution bus secret: attempt "${n}" is not registered for execution "${r}"`);let a=e(32).toString(`hex`);return{secret:a,cleanup:l(n,a)}}function _(e){return c(e.executionAttemptId)===null?h(e):g(e)}function v(e){return c(e)??void 0}export{p as buildExecutionAttemptAllowedSubjects,_ as mintOrRotateWorkflowExecutionBusSecret,h as mintWorkflowExecutionBusSecret,m as registerWorkflowExecutionBusSecret,v as resolveWorkflowExecutionBusSecret,g as rotateWorkflowExecutionBusSecret};
+import{randomBytes as e}from"node:crypto";import{getFullSubjectForSubjectDefinition as t}from"@makaio/framework/core";import{ArtifactSubjects as n,ExecutionAttemptSubjects as r,SubagentSubjects as i,WorkerSubjects as a,WorkflowSubjects as o}from"@makaio/framework/contracts";import{registerHmacIdentitySecret as s,resolveHmacIdentityPeer as c,resolveHmacIdentitySecret as l,rotateHmacIdentitySecret as u}from"@makaio/framework/node/transports";import{AdapterSubsystemSubjects as d}from"@makaio/framework/services/adapter-subsystem";import{WorkflowStorageSubjects as f}from"@makaio/framework/workflow-engine";const p=[r.runtime.register,r.operation.admit,r.operation.deliver,a.control.outcome.submit,o.getRunContext,d.listAdapters,o.bootstrapAuthorityState,o.finalizeDelegateResult,f.getExecution,f.setFrame,f.setSpan,f.listFrames,f.getGateInstance,f.setGateInstance,o.frame.started,o.frame.completed,o.frame.failed,o.frame.sessionLinked,o.execution.progress,o.gate.suspended,o.gate.resumed,o.gate.resolved,o.gate.respond,o.state.get,o.state.patch,o.resolveAgent,o.resolveRole,n.query,n.create,n.revise,o.artifact.updated,i.spawn,i.await,i.getStatus,i.kill];function m(e){return[...p.map(t),`workflow.${e}.cancel`]}function h(e){let{executionAttemptId:t,executionId:n,secret:r}=e,i=e.allowedSubjects??m(n);return{secret:r,cleanup:s(t,r,{peerKind:`workflow-execution-attempt`,claims:{executionId:n},allowedSubjects:i})}}function g(t){let n=e(32).toString(`hex`);return h({...t,secret:n})}function _(t){let{executionAttemptId:n,executionId:r}=t,i=c(n);if(i?.kind!==`workflow-execution-attempt`||i.claims?.executionId!==r)throw Error(`Cannot rotate workflow execution bus secret: attempt "${n}" is not registered for execution "${r}"`);let a=e(32).toString(`hex`);return{secret:a,cleanup:u(n,a)}}function v(e){return l(e.executionAttemptId)===null?g(e):_(e)}function y(e){return l(e)??void 0}export{m as buildExecutionAttemptAllowedSubjects,v as mintOrRotateWorkflowExecutionBusSecret,g as mintWorkflowExecutionBusSecret,h as registerWorkflowExecutionBusSecret,y as resolveWorkflowExecutionBusSecret,_ as rotateWorkflowExecutionBusSecret};

package/dist/runtime-node/workflow-worker/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as WorkspaceRootResolver, A as submitOutcomeWithAck, B as ThinWorkflowPiscinaRunnerOptions, C as PiscinaThinWorkflowProvider, D as OutcomeReconnect, E as OutcomeDeliveryError, F as createNodeWorkflowRunner, I as createNodeWorkflowRunnerPackageOptions, L as ThinWorkflowPiscinaRunner, M as WorkerRunnerOptions, N as CreateNodeWorkflowRunnerPackageOptionsParams, O as OutcomeSubmitPayload, P as NodeWorkflowRunnerPackageOptions, Q as ParsedSriIntegrity, R as IWorkflowRunner, S as InProcessWorkflowRunnerOptions, T as DELIVERED_DECISIONS, V as WorkflowRunResult, X as LocalDirectoryMaterializerOptions, Z as MaterializationError, _ as IsolatedWorkflowRuntimeContext, a as HeadlessWorkerBootstrapCredentials, at as materializeLocalDirectory, b as createIsolatedWorkflowRuntime, c as HeadlessWorkerExecutor, ct as WorkflowWorkerEntryMode, d as HeadlessWorkflowWorkerDeps, et as assertContainedIn, f as HeadlessWorkflowWorkerResult, g as IsolatedWorkflowRuntime, h as CreateIsolatedWorkflowRuntimeOptions, i as HeadlessWorkerBootstrap, it as computeFileDigest, j as WorkerRunner, k as OutcomeSubmitRetryConfig, l as HeadlessWorkerMaterializer, lt as WorkflowWorkerEntryResolverOptions, m as runHeadlessWorkflowWorker, n as loadWorkflowModules, nt as computeContributionPackageDigest, o as HeadlessWorkerBusConnector, ot as parseSriIntegrity, p as MaterializedWorkspace, r as loadWorkflowFromConfig, rt as computeDirectoryDigest, s as HeadlessWorkerContributionLoader, st as verifyContribution, t as loadWorkflowModule, tt as assertNoSymlinkEscape, u as HeadlessWorkerPostCommitObserver, ut as resolveWorkflowWorkerEntry, v as WorkflowRuntimeAuthorityConnector, w as PiscinaThinWorkflowProviderOptions, x as InProcessWorkflowRunner, y as WorkflowRuntimeContributionLoader, z as RuntimeLoadedWorkflow } from "../../index-C6aSnO8m.mjs";
-export { CreateIsolatedWorkflowRuntimeOptions, CreateNodeWorkflowRunnerPackageOptionsParams, DELIVERED_DECISIONS, HeadlessWorkerBootstrap, HeadlessWorkerBootstrapCredentials, HeadlessWorkerBusConnector, HeadlessWorkerContributionLoader, HeadlessWorkerExecutor, HeadlessWorkerMaterializer, HeadlessWorkerPostCommitObserver, HeadlessWorkflowWorkerDeps, HeadlessWorkflowWorkerResult, IWorkflowRunner, InProcessWorkflowRunner, InProcessWorkflowRunnerOptions, IsolatedWorkflowRuntime, IsolatedWorkflowRuntimeContext, LocalDirectoryMaterializerOptions, MaterializationError, MaterializedWorkspace, NodeWorkflowRunnerPackageOptions, OutcomeDeliveryError, OutcomeReconnect, OutcomeSubmitPayload, OutcomeSubmitRetryConfig, ParsedSriIntegrity, PiscinaThinWorkflowProvider, PiscinaThinWorkflowProviderOptions, RuntimeLoadedWorkflow, ThinWorkflowPiscinaRunner, ThinWorkflowPiscinaRunnerOptions, WorkerRunner, WorkerRunnerOptions, WorkflowRunResult, WorkflowRuntimeAuthorityConnector, WorkflowRuntimeContributionLoader, WorkflowWorkerEntryMode, WorkflowWorkerEntryResolverOptions, WorkspaceRootResolver, assertContainedIn, assertNoSymlinkEscape, computeContributionPackageDigest, computeDirectoryDigest, computeFileDigest, createIsolatedWorkflowRuntime, createNodeWorkflowRunner, createNodeWorkflowRunnerPackageOptions, loadWorkflowFromConfig, loadWorkflowModule, loadWorkflowModules, materializeLocalDirectory, parseSriIntegrity, resolveWorkflowWorkerEntry, runHeadlessWorkflowWorker, submitOutcomeWithAck, verifyContribution };
+import { $ as ThinWorkflowPiscinaRunner, A as runHeadlessWorkflowWorker, B as PiscinaThinWorkflowProviderOptions, C as HeadlessWorkerContributionLoader, Ct as verifyContribution, D as HeadlessWorkflowWorkerDeps, E as HeadlessWorkerPostCommitObserver, Et as resolveWorkflowWorkerEntry, F as WorkflowRuntimeContributionLoader, G as OutcomeSubmitRetryConfig, H as OutcomeDeliveryError, I as createIsolatedWorkflowRuntime, J as WorkerRunnerOptions, K as submitOutcomeWithAck, L as InProcessWorkflowRunner, M as IsolatedWorkflowRuntime, N as IsolatedWorkflowRuntimeContext, O as HeadlessWorkflowWorkerResult, P as WorkflowRuntimeAuthorityConnector, Q as createNodeWorkflowRunnerPackageOptions, R as InProcessWorkflowRunnerOptions, S as HeadlessWorkerBusConnector, St as parseSriIntegrity, T as HeadlessWorkerMaterializer, Tt as WorkflowWorkerEntryResolverOptions, U as OutcomeReconnect, V as DELIVERED_DECISIONS, W as OutcomeSubmitPayload, X as NodeWorkflowRunnerPackageOptions, Y as CreateNodeWorkflowRunnerPackageOptionsParams, Z as createNodeWorkflowRunner, _ as loadWorkflowModule, _t as assertNoSymlinkEscape, a as OperationAdmissionRefusedError, b as HeadlessWorkerBootstrap, bt as computeFileDigest, c as OperationDeliveryHandler, d as RegisterWorkerRuntimeOptions, et as IWorkflowRunner, f as RuntimeRegistrationRefusedError, ft as LocalDirectoryMaterializerOptions, g as registerWorkerRuntime, gt as assertContainedIn, h as registerAndAdmitWorkflowRun, ht as WorkspaceRootResolver, i as DeliverableOperationKind, j as CreateIsolatedWorkflowRuntimeOptions, k as MaterializedWorkspace, l as OperationDeliveryHandlers, m as installOperationDeliveryEndpoint, mt as ParsedSriIntegrity, n as AdmitWorkflowRunOperationOptions, nt as ThinWorkflowPiscinaRunnerOptions, o as OperationDeliveryEndpoint, p as admitWorkflowRunOperation, pt as MaterializationError, q as WorkerRunner, r as AdmittedWorkflowRun, rt as WorkflowRunResult, s as OperationDeliveryEndpointIdentity, t as ALLOCATION_VISIBILITY_DEADLINE_MS, tt as RuntimeLoadedWorkflow, u as RegisterAndAdmitWorkflowRunOptions, v as loadWorkflowModules, vt as computeContributionPackageDigest, w as HeadlessWorkerExecutor, wt as WorkflowWorkerEntryMode, x as HeadlessWorkerBootstrapCredentials, xt as materializeLocalDirectory, y as loadWorkflowFromConfig, yt as computeDirectoryDigest, z as PiscinaThinWorkflowProvider } from "../../index-BJdkVFX9.mjs";
+export { ALLOCATION_VISIBILITY_DEADLINE_MS, AdmitWorkflowRunOperationOptions, AdmittedWorkflowRun, CreateIsolatedWorkflowRuntimeOptions, CreateNodeWorkflowRunnerPackageOptionsParams, DELIVERED_DECISIONS, DeliverableOperationKind, HeadlessWorkerBootstrap, HeadlessWorkerBootstrapCredentials, HeadlessWorkerBusConnector, HeadlessWorkerContributionLoader, HeadlessWorkerExecutor, HeadlessWorkerMaterializer, HeadlessWorkerPostCommitObserver, HeadlessWorkflowWorkerDeps, HeadlessWorkflowWorkerResult, IWorkflowRunner, InProcessWorkflowRunner, InProcessWorkflowRunnerOptions, IsolatedWorkflowRuntime, IsolatedWorkflowRuntimeContext, LocalDirectoryMaterializerOptions, MaterializationError, MaterializedWorkspace, NodeWorkflowRunnerPackageOptions, OperationAdmissionRefusedError, OperationDeliveryEndpoint, OperationDeliveryEndpointIdentity, OperationDeliveryHandler, OperationDeliveryHandlers, OutcomeDeliveryError, OutcomeReconnect, OutcomeSubmitPayload, OutcomeSubmitRetryConfig, ParsedSriIntegrity, PiscinaThinWorkflowProvider, PiscinaThinWorkflowProviderOptions, RegisterAndAdmitWorkflowRunOptions, RegisterWorkerRuntimeOptions, RuntimeLoadedWorkflow, RuntimeRegistrationRefusedError, ThinWorkflowPiscinaRunner, ThinWorkflowPiscinaRunnerOptions, WorkerRunner, WorkerRunnerOptions, WorkflowRunResult, WorkflowRuntimeAuthorityConnector, WorkflowRuntimeContributionLoader, WorkflowWorkerEntryMode, WorkflowWorkerEntryResolverOptions, WorkspaceRootResolver, admitWorkflowRunOperation, assertContainedIn, assertNoSymlinkEscape, computeContributionPackageDigest, computeDirectoryDigest, computeFileDigest, createIsolatedWorkflowRuntime, createNodeWorkflowRunner, createNodeWorkflowRunnerPackageOptions, installOperationDeliveryEndpoint, loadWorkflowFromConfig, loadWorkflowModule, loadWorkflowModules, materializeLocalDirectory, parseSriIntegrity, registerAndAdmitWorkflowRun, registerWorkerRuntime, resolveWorkflowWorkerEntry, runHeadlessWorkflowWorker, submitOutcomeWithAck, verifyContribution };

package/dist/runtime-node/workflow-worker/index.mjs

@@ -1 +1 @@
-import{_ as e,a as t,b as n,c as r,d as i,f as a,g as o,h as s,i as c,l,m as u,n as d,o as f,p,r as m,s as h,t as g,u as _,v,x as y,y as b}from"../../workflow-worker-Dul-wcOR.mjs";import{i as x,n as S,r as C}from"../../await-trigger-Bkg2BQfg.mjs";export{c as DELIVERED_DECISIONS,l as InProcessWorkflowRunner,p as MaterializationError,t as OutcomeDeliveryError,m as PiscinaThinWorkflowProvider,a as ThinWorkflowPiscinaRunner,_ as WorkerRunner,u as assertContainedIn,s as assertNoSymlinkEscape,o as computeContributionPackageDigest,e as computeDirectoryDigest,v as computeFileDigest,d as createIsolatedWorkflowRuntime,h as createNodeWorkflowRunner,r as createNodeWorkflowRunnerPackageOptions,S as loadWorkflowFromConfig,C as loadWorkflowModule,x as loadWorkflowModules,b as materializeLocalDirectory,n as parseSriIntegrity,i as resolveWorkflowWorkerEntry,g as runHeadlessWorkflowWorker,f as submitOutcomeWithAck,y as verifyContribution};
+import{_ as e,a as t,b as n,c as r,d as i,f as a,g as o,h as s,i as c,l,m as u,n as d,o as f,p,r as m,s as h,t as g,u as _,v,x as y,y as b}from"../../workflow-worker-DjUfKshi.mjs";import{a as x,d as S,i as C,l as w,n as T,o as E,r as D,s as O,t as k,u as A}from"../../runtime-registration-client-BTtFpt_k.mjs";export{k as ALLOCATION_VISIBILITY_DEADLINE_MS,c as DELIVERED_DECISIONS,l as InProcessWorkflowRunner,p as MaterializationError,T as OperationAdmissionRefusedError,t as OutcomeDeliveryError,m as PiscinaThinWorkflowProvider,D as RuntimeRegistrationRefusedError,a as ThinWorkflowPiscinaRunner,_ as WorkerRunner,C as admitWorkflowRunOperation,u as assertContainedIn,s as assertNoSymlinkEscape,o as computeContributionPackageDigest,e as computeDirectoryDigest,v as computeFileDigest,d as createIsolatedWorkflowRuntime,h as createNodeWorkflowRunner,r as createNodeWorkflowRunnerPackageOptions,x as installOperationDeliveryEndpoint,w as loadWorkflowFromConfig,A as loadWorkflowModule,S as loadWorkflowModules,b as materializeLocalDirectory,n as parseSriIntegrity,E as registerAndAdmitWorkflowRun,O as registerWorkerRuntime,i as resolveWorkflowWorkerEntry,g as runHeadlessWorkflowWorker,f as submitOutcomeWithAck,y as verifyContribution};

package/dist/runtime-node/workflow-worker/worker-entry.d.mts

@@ -2,14 +2,14 @@ import { WorkerContributionManifest, WorkflowRunResult } from "@makaio/framework
 
 //#region runtimes/node/src/workflow-worker/worker-entry.d.ts
 /**
- * Parameters accepted by the Piscina worker entrypoint.
+ * Fields every worker-entry invocation carries, whatever gate it runs behind.
  *
- * Mirrors the shape passed by {@link ThinWorkflowPiscinaRunner.run} — the `config`
+ * Mirrors the shape passed by {@link ThinWorkflowPiscinaRunner} — the `config`
  * is the raw (unserialized) `WorkflowWorkerConfig`, `manifest` declares the
  * exact contribution identity, and `contributionEntrypoints` is the matching
  * verified local realization returned by materialization.
  */
-interface WorkflowWorkerRunParams {
+interface WorkflowWorkerRunParamsBase {
   /** Raw workflow worker configuration (will be validated by Zod schema). */
   readonly config: unknown;
   /** Contribution manifest declaring which extension packages to load. */
@@ -19,24 +19,64 @@ interface WorkflowWorkerRunParams {
   /** Optional abort signal for cooperative cancellation. */
   readonly signal?: AbortSignal;
 }
+/**
+ * Run parameters for a workflow no ExecutionAttempt owns.
+ *
+ * The host drove this run through {@link ThinWorkflowPiscinaRunner.run}: there
+ * is no attempt to register a runtime with, no start gate to pass, and no
+ * readiness fact to report to the pool.
+ */
+interface UnboundWorkerParams extends WorkflowWorkerRunParamsBase {
+  /**
+   * Discriminator selecting the attempt-free lifecycle.
+   *
+   * Named for the binding, not for the work: `workflow-run` is the wire
+   * operation kind the attempt-bound arm admits, and the two vocabularies must
+   * not overlap.
+   */
+  readonly kind: 'unbound';
+}
+/**
+ * Run parameters for a workflow an ExecutionAttempt owns.
+ *
+ * The attempt identifier is required: this arm proves the runtime to the
+ * Authority and admits the run through the attempt's start gate before it
+ * composes anything.
+ */
+interface AttemptBoundWorkerParams extends WorkflowWorkerRunParamsBase {
+  /** Discriminator selecting the attempt-bound lifecycle. */
+  readonly kind: 'attempt-bound';
+  /** Authority-created attempt this runtime registers itself as the endpoint of. */
+  readonly executionAttemptId: string;
+}
+/** Parameters accepted by the Piscina worker entrypoint. */
+type WorkflowWorkerRunParams = UnboundWorkerParams | AttemptBoundWorkerParams;
 /**
  * Execute a complete workflow inside an isolated worker context.
  *
  * Implements the full worker lifecycle:
  * 1. Parse and validate `config` against `WorkflowWorkerConfigSchema`
  * 2. Boot an isolated bus instance (with optional WebSocket transport)
- * 3. Load worker-local contributions from verified materialization output
- * 4. Boot worker-local tool runtime if toolset contributions exist
- * 5. Load the workflow module from the source descriptor
- * 6. Run the workflow orchestrator
- * 7. Always close the runtime (when booted) and bus in the `finally` block
+ * 3. Subscribe cancellation routing and, on the attempt-bound arm, prove this
+ *    runtime to the Authority: install the operation delivery endpoint,
+ *    register the runtime, and admit the run through the attempt's start gate
+ * 4. Load worker-local contributions from verified materialization output
+ * 5. Boot worker-local tool runtime if toolset contributions exist
+ * 6. Load the workflow module from the source descriptor
+ * 7. Run the workflow orchestrator
+ * 8. Always close the runtime (when booted) and bus in the `finally` block
+ *
+ * Registration precedes contribution loading, which is the whole point:
+ * readiness must not depend on what the runtime later composes.
  *
  * Contributions are loaded once per workflow, not once per step — the
  * orchestrator owns step dispatch and reuses the same bus and runtime
  * throughout the execution.
  * @param params - Worker run parameters including config, verified contributions, and signal.
  * @returns The terminal workflow run result.
+ * @throws {@link RuntimeRegistrationRefusedError} When the Authority refuses this runtime.
+ * @throws {@link OperationAdmissionRefusedError} When the Authority refuses the run.
  */
 declare function runWorkflowInWorker(params: WorkflowWorkerRunParams): Promise<WorkflowRunResult>;
 //#endregion
-export { WorkflowWorkerRunParams, runWorkflowInWorker as default, runWorkflowInWorker };
+export { AttemptBoundWorkerParams, UnboundWorkerParams, WorkflowWorkerRunParams, WorkflowWorkerRunParamsBase, runWorkflowInWorker as default, runWorkflowInWorker };

package/dist/runtime-node/workflow-worker/worker-entry.mjs

@@ -1 +1 @@
-import{a as e,n as t,t as n}from"../../await-trigger-Bkg2BQfg.mjs";import{pathToFileURL as r}from"node:url";import*as i from"node:path";import{createBusInstance as a,waitForSubscriptionPropagation as o}from"@makaio/framework/bus";import{FrameworkContractNamespaces as s,FrameworkStorageNamespaces as c,WorkflowWorkerConfigSchema as l,createWorkflowCancelSubject as u}from"@makaio/framework/contracts";import{HmacAuth as d,WebSocketClientTransport as f}from"@makaio/framework/node/transports";import{runWorkflowOrchestrator as p}from"@makaio/framework/workflow-engine/workflow-orchestrator";import{parentPort as m}from"node:worker_threads";import{McpServerBridgeService as h}from"@makaio/framework/mcp-http-server";import{ToolRegistry as g}from"@makaio/framework/services/tools";async function _(e){let t=a();if(t.registerNamespaces(s),t.registerNamespaces(c),!e.busUrl)return{bus:t,close(){}};let n=e.busAuth.kind===`hmac`?new d({secret:e.busAuth.secret}):void 0,r=new f({url:e.busUrl,auth:n,autoReconnect:!1});return t.registerTransport(r),await t.connect(),{bus:t,async close(){await t.disconnect()}}}async function v(e,t){let n=new g({bus:e.bus}),r=new h(e.bus),i=async()=>{try{await r.destroy()}finally{n.dispose()}};try{await r.init();for(let e of t.toolsets)await y(n,e)}catch(e){throw await i(),e}return{close:i}}async function y(e,t){await e.register(t)}function b(e){if(typeof e!=`object`||!e)return!1;let t=e;return typeof t.name==`string`?typeof t.tools==`object`&&t.tools!==null||Array.isArray(t.adapters):!1}function x(e,t){if(b(e.default))return e.default;for(let t of Object.keys(e))if(t!==`default`&&b(e[t]))return e[t]}function S(e){return Object.freeze({bus:e?.bus,identity:Object.freeze({extensionName:`__worker__`}),dataDir:``,machineId:``,platform:process.platform,homedir:``,makaioHome:``,username:``,signal:e?.signal??new AbortController().signal,tryImport:async()=>null,getService:()=>{throw Error(`Worker-local contribution context does not expose host services.`)},hasExtension:()=>!1})}async function C(e,t){let n=await Promise.all(e.map(e=>w(e,t))),r=[];for(let e of n)r.push(...e.toolsets);return{toolsets:r}}async function w(e,t){if(!i.isAbsolute(e))throw Error(`Worker contribution entrypoint must be an absolute materialized path: ${e}`);let n=x(await import(r(e).href),e);if(!n)throw Error(`No recognizable extension export in "${e}". Expected a default export or named export with a "name" field and "tools" or "adapters" surface.`);let a=[];if(n.tools?.createToolsets){let e=n.tools.createToolsets(S(t));a.push(...e)}return{toolsets:a}}async function T(r){let i=l.parse(r.config),a=new AbortController,s=()=>a.abort(),c=r.signal??a.signal;c!==a.signal&&(c.aborted?a.abort():c.addEventListener(`abort`,s,{once:!0}));let d,f,h;try{if(d=await _(i),h=d.bus.on(u(i.cancelSubject),()=>{a.abort()}),await o(h),r.contributionEntrypoints.length!==r.manifest.contributionRefs.length)throw Error(`Worker contribution materialization does not match the declared contribution identity set.`);let s=await C(r.contributionEntrypoints,{bus:d.bus,signal:a.signal});s.toolsets.length>0&&(f=await v(d,s)),m?.postMessage(e(i.executionId,i.cancelSubject));let c=await t(i);return await p({config:await n(i,c,d.bus,a.signal),loaded:c,bus:d.bus,signal:a.signal})}finally{h?.(),c.removeEventListener(`abort`,s);try{f&&await f.close()}finally{d&&await d.close()}}}export{T as default,T as runWorkflowInWorker};
+import{a as e,c as t,f as n,l as r,o as i}from"../../runtime-registration-client-BTtFpt_k.mjs";import{pathToFileURL as a}from"node:url";import*as o from"node:path";import{randomUUID as s}from"node:crypto";import{createBusInstance as c,waitForSubscriptionPropagation as l}from"@makaio/framework/bus";import{FrameworkContractNamespaces as u,FrameworkStorageNamespaces as d,WorkflowWorkerConfigSchema as f,createWorkflowCancelSubject as p}from"@makaio/framework/contracts";import{HmacAuth as m,WebSocketClientTransport as h}from"@makaio/framework/node/transports";import{runWorkflowOrchestrator as g}from"@makaio/framework/workflow-engine/workflow-orchestrator";import{parentPort as _}from"node:worker_threads";import{McpServerBridgeService as v}from"@makaio/framework/mcp-http-server";import{ToolRegistry as y}from"@makaio/framework/services/tools";async function b(e){let t=c();if(t.registerNamespaces(u),t.registerNamespaces(d),!e.busUrl)return{bus:t,close(){}};let n=e.busAuth.kind===`hmac`?new m({secret:e.busAuth.secret,...e.identityId!==void 0&&{identityId:e.identityId}}):void 0,r=new h({url:e.busUrl,auth:n,autoReconnect:!1});return t.registerTransport(r),await t.connect(),{bus:t,async close(){await t.disconnect()}}}async function x(e,t){let n=new y({bus:e.bus}),r=new v(e.bus),i=async()=>{try{await r.destroy()}finally{n.dispose()}};try{await r.init();for(let e of t.toolsets)await S(n,e)}catch(e){throw await i(),e}return{close:i}}async function S(e,t){await e.register(t)}function C(e){if(typeof e!=`object`||!e)return!1;let t=e;return typeof t.name==`string`?typeof t.tools==`object`&&t.tools!==null||Array.isArray(t.adapters):!1}function w(e,t){if(C(e.default))return e.default;for(let t of Object.keys(e))if(t!==`default`&&C(e[t]))return e[t]}function T(e){return Object.freeze({bus:e?.bus,identity:Object.freeze({extensionName:`__worker__`}),dataDir:``,machineId:``,platform:process.platform,homedir:``,makaioHome:``,username:``,signal:e?.signal??new AbortController().signal,tryImport:async()=>null,getService:()=>{throw Error(`Worker-local contribution context does not expose host services.`)},hasExtension:()=>!1})}async function E(e,t){let n=await Promise.all(e.map(e=>D(e,t))),r=[];for(let e of n)r.push(...e.toolsets);return{toolsets:r}}async function D(e,t){if(!o.isAbsolute(e))throw Error(`Worker contribution entrypoint must be an absolute materialized path: ${e}`);let n=w(await import(a(e).href),e);if(!n)throw Error(`No recognizable extension export in "${e}". Expected a default export or named export with a "name" field and "tools" or "adapters" surface.`);let r=[];if(n.tools?.createToolsets){let e=n.tools.createToolsets(T(t));r.push(...e)}return{toolsets:r}}async function O(a){let o=f.parse(a.config),c=new AbortController,u=()=>c.abort(),d=a.signal??c.signal;d!==c.signal&&(d.aborted?c.abort():d.addEventListener(`abort`,u,{once:!0}));let m,h,v,y;try{if(m=await b({busUrl:o.busUrl,busAuth:o.busAuth,...a.kind===`attempt-bound`?{identityId:a.executionAttemptId}:{}}),v=m.bus.on(p(o.cancelSubject),()=>{c.abort()}),await l(v),a.contributionEntrypoints.length!==a.manifest.contributionRefs.length)throw Error(`Worker contribution materialization does not match the declared contribution identity set.`);if(a.kind===`attempt-bound`){let t=s();y=await e(m.bus,{executionAttemptId:a.executionAttemptId,runtimeIncarnationId:t},{}),await i(m.bus,{executionAttemptId:a.executionAttemptId,runtimeIncarnationId:t,endpoint:y,signal:c.signal}),_?.postMessage(n(o.executionId,o.cancelSubject,a.executionAttemptId))}let u=await E(a.contributionEntrypoints,{bus:m.bus,signal:c.signal});u.toolsets.length>0&&(h=await x(m,u));let d=await r(o);return await g({config:await t(o,d,m.bus,c.signal),loaded:d,bus:m.bus,signal:c.signal})}finally{v?.(),y?.cleanup(),d.removeEventListener(`abort`,u);try{h&&await h.close()}finally{m&&await m.close()}}}export{O as default,O as runWorkflowInWorker};

package/dist/runtime-registration-client-BTtFpt_k.mjs

@@ -0,0 +1 @@
+import{pathToFileURL as e}from"node:url";import{mkdir as t,rm as n,writeFile as r}from"node:fs/promises";import{basename as i,join as a}from"node:path";import{randomBytes as o}from"node:crypto";import{waitForSubscriptionPropagation as s}from"@makaio/framework/bus";import{ExecutionAttemptSchemas as c,ExecutionAttemptSubjects as l,WorkflowDefinitionSchema as u,WorkflowError as d,WorkflowErrorCode as f}from"@makaio/framework/contracts";import{tmpdir as p}from"node:os";import{AUTOMATION_TRIGGER_BUILTINS_OWNER as m,AutomationTriggerBindingRuntime as h,busBackedAutomationTriggers as g}from"@makaio/framework/services/automation-trigger";import{assertWorkflowTriggerPayload as _,compileWorkflowTriggerBindingFilter as v}from"@makaio/framework/workflow-engine/workflow-trigger-binding-consumer";function y(e,t,n){return{type:`makaio.workflow-worker.ready`,executionId:e,cancelSubject:t,executionAttemptId:n}}function b(e){if(typeof e!=`object`||!e)return!1;let t=e;return t.type===`makaio.workflow-worker.ready`&&typeof t.executionId==`string`&&typeof t.cancelSubject==`string`&&typeof t.executionAttemptId==`string`}function x(e){if(typeof e!=`object`||!e)throw new d(f.NOT_EXECUTABLE,`Invalid workflow module default export: expected an object with 'definition' and 'runtimeHandlers', got ${typeof e}.`);let t=e;if(!(t.runtimeHandlers instanceof Map))throw new d(f.NOT_EXECUTABLE,`Invalid workflow module default export: 'runtimeHandlers' must be a Map instance.`);let n=u.safeParse(t.definition);if(!n.success)throw new d(f.NOT_EXECUTABLE,`Invalid workflow module default export: 'definition' must satisfy WorkflowDefinitionSchema. `+n.error.message);let r=S(t.zodSchemas)?t.zodSchemas:void 0,i=t.runtimeLoopGates;if(i!==void 0&&!(i instanceof Map))throw new d(f.NOT_EXECUTABLE,`Invalid workflow module default export: 'runtimeLoopGates' must be a Map instance when provided.`);return{definition:n.data,runtimeHandlers:t.runtimeHandlers,...r===void 0?{}:{zodSchemas:r},...i===void 0?{}:{runtimeLoopGates:i}}}function S(e){return typeof e==`object`&&!!e&&!Array.isArray(e)&&`gates`in e}async function C(e,s){let c=i(e);if(!c||c===`.`||c===`..`)throw Error(`Invalid workflow source filename: ${e}`);let l=a(p(),`makaio-wf-${o(6).toString(`hex`)}`);await t(l,{recursive:!0});let u=a(l,c.endsWith(`.mjs`)?c:`${c}.mjs`);try{await r(u,s,`utf8`)}catch(e){throw await n(l,{recursive:!0,force:!0}).catch(()=>{}),e}return{tempDir:l,tempPath:u}}function w(e){return typeof e==`object`&&e&&Array.isArray(e.workflows)?e.workflows.map(x):[x(e)]}async function T(t){if(t.kind===`path`)return w((await import(e(t.path).href)).default);let{tempDir:r,tempPath:i}=await C(t.filename,t.source);try{return w((await import(e(i).href)).default)}finally{await n(r,{recursive:!0,force:!0})}}async function E(e){if(e.kind===`definition`)throw new d(f.NOT_EXECUTABLE,`Definition-sourced workers are handled by the workflow executor, not the file loader. Received source: ${JSON.stringify(e)}`);let t=await T(e);if(t.length!==1)throw new d(f.NOT_EXECUTABLE,`loadWorkflowModule expects a single workflow export, but the module exported ${String(t.length)} workflows. Use loadWorkflowModules for bundle exports.`);return t[0]}async function D(e){if(e.source.kind===`definition`){if(e.definition===void 0)throw Error(`Definition-sourced worker config for workflowId "${e.source.workflowId}" is missing the required 'definition' field. Ensure the executor populates WorkflowWorkerConfig.definition before dispatching.`);return{definition:e.definition,runtimeHandlers:new Map}}let t=await E(e.source);return O(e,t),e.definition===void 0?t:{...t,definition:e.definition}}function O(e,t){if(e.workflowId!==e.executionId&&t.definition.id!==e.workflowId)throw new d(f.SOURCE_MISMATCH,`Source-backed workflow for logical workflow '${e.workflowId}' loaded definition '${t.definition.id}'.`)}const k=`[WorkflowWorkerAwaitTrigger]`;function A(e){let t=g(e);return{resolveRegistration:e=>{let n=t.find(t=>t.kind===e);return n===void 0?void 0:{owner:m,type:n}}}}async function j(e,t,n){let r=new h(A(e)),i=t.flatMap(e=>{let t=r.prepareBinding(e);return t===void 0?(console.warn(`${k} skipping binding '${e.kind}': awaiting it inside a worker is unsupported. A worker carries only bus-backed trigger types; schedules and extension-contributed sources are activated by the host that owns their placement.`),[]):t.workflowCompatible?[{binding:e,prepared:t}]:(console.warn(`${k} skipping binding '${e.kind}': its event payload does not have an object root.`),[])});if(i.length===0){await r.close();return}try{if(n.aborted)throw n.reason??Error(`Await-trigger aborted`);let e=Promise.withResolvers();e.promise.catch(()=>void 0);let t=()=>{e.reject(n.reason??Error(`Await-trigger aborted`))};n.addEventListener(`abort`,t,{once:!0});try{return await Promise.all(i.map(async({binding:t,prepared:n})=>{let r=v(t);await n.subscribe(t=>{r(t.payload)&&e.resolve(_(t.payload))})})),await e.promise}finally{n.removeEventListener(`abort`,t)}}finally{await r.close()}}async function M(e,t,n,r){let i=t.definition.triggers??[];if(e.triggerMode!==`await-trigger`||i.length===0)return e;let a=await j(n,i,r);return a===void 0?e:{...e,triggerPayload:a}}async function N(e,t,n){if(e.operationKind===`runtime-probe`)return{receipt:`completed`};if(n===void 0||e.runtimeGeneration!==n)return{receipt:`refused`,refusalReason:`stale-generation`};let r=t[e.operationKind];return r===void 0?{receipt:`refused`,refusalReason:`unknown-kind`}:await r(e)}async function P(e,t,n){let{executionAttemptId:r,runtimeIncarnationId:i}=t,a=t.runtimeGeneration,o=e.withFilter({executionAttemptId:r,runtimeIncarnationId:i}).on(l.operation.deliver,async e=>{e.setResult(await N(e.payload,n,a))});return await s(o),{bindGeneration(e){a=e},cleanup(){let e=o;o=void 0,e?.()}}}var F=class extends Error{executionAttemptId;refusalReason;constructor(e,t){super(`Runtime registration refused by the Authority (executionAttemptId=${e}, refusalReason=${t??`unreported`})`),this.executionAttemptId=e,this.refusalReason=t,this.name=`RuntimeRegistrationRefusedError`}},I=class extends Error{executionAttemptId;admissionKey;refusalReason;constructor(e,t,n){super(`Operation admission refused by the Authority (executionAttemptId=${e}, admissionKey=${t}, refusalReason=${n??`unreported`})`),this.executionAttemptId=e,this.admissionKey=t,this.refusalReason=n,this.name=`OperationAdmissionRefusedError`}};function L(e,t,n,r){let i=t.safeParse(n);if(i.success)return i.data;let a=i.error.issues.map(e=>`${e.path.join(`.`)||`<root>`}: ${e.message}`);throw Error(`Malformed '${e.$meta.namespace}.${e.subject}' response from the Authority (executionAttemptId=${r}): ${a.join(`; `)}`)}const R=1e4;async function z(e,t){let{executionAttemptId:n,runtimeIncarnationId:r,signal:i}=t,a=Date.now()+(t.allocationVisibilityDeadlineMs??1e4);for(;;){i?.throwIfAborted();let t=L(l.runtime.register,c[`runtime.register`].response,await e.request(l.runtime.register,{executionAttemptId:n,runtimeIncarnationId:r},{signal:i}),n);if(t.decision!==`refused`)return t.runtimeGeneration;if(t.refusalReason!==`not-allocated`||Date.now()>=a)throw new F(n,t.refusalReason);await B(50,i)}}function B(e,t){return new Promise((n,r)=>{let i=()=>{clearTimeout(a),r(t?.reason instanceof Error?t.reason:Error(`Registration retry aborted`))},a=setTimeout(()=>{t?.removeEventListener(`abort`,i),n()},e);t?.addEventListener(`abort`,i,{once:!0})})}async function V(e,t){let{executionAttemptId:n,runtimeGeneration:r,admissionKey:i,signal:a}=t,o=L(l.operation.admit,c[`operation.admit`].response,await e.request(l.operation.admit,{executionAttemptId:n,operationKind:`workflow-run`,admissionKey:i,runtimeGeneration:r},{signal:a}),n);if(o.decision===`refused`)throw new I(n,i,o.refusalReason);if(o.operationId===void 0)throw Error(`Operation admission decision '${o.decision}' named no operation (executionAttemptId=${n}, admissionKey=${i})`);return o.operationId}async function H(e,t){let{executionAttemptId:n,runtimeIncarnationId:r,endpoint:i,signal:a}=t,o=await z(e,{executionAttemptId:n,runtimeIncarnationId:r,signal:a});return i.bindGeneration(o),{runtimeGeneration:o,operationId:await V(e,{executionAttemptId:n,runtimeGeneration:o,admissionKey:`workflow-run:${r}`,signal:a})}}export{P as a,M as c,T as d,y as f,V as i,D as l,I as n,H as o,b as p,F as r,z as s,R as t,E as u};

package/dist/{schemas-D7EeKBDJ.d.mts → schemas-CJKHYluy.d.mts}

@@ -45,17 +45,17 @@ type SubagentTemplateSummary = z.infer<typeof SubagentTemplateSummarySchema>;
 declare const SubagentTemplateCreateSchema: z.ZodObject<{
   name: z.ZodString;
   enabled: z.ZodDefault<z.ZodBoolean>;
-  providerConfigId: z.ZodOptional<z.ZodString>;
+  contextMode: z.ZodDefault<z.ZodEnum<{
+    fork: "fork";
+    fresh: "fresh";
+  }>>;
   adapterName: z.ZodString;
+  providerConfigId: z.ZodOptional<z.ZodString>;
   model: z.ZodOptional<z.ZodString>;
   systemPrompt: z.ZodOptional<z.ZodString>;
   allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
   disallowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
   allowedDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
-  contextMode: z.ZodDefault<z.ZodEnum<{
-    fork: "fork";
-    fresh: "fresh";
-  }>>;
 }, z.core.$strip>;
 type SubagentTemplateCreate = z.infer<typeof SubagentTemplateCreateSchema>;
 /**
@@ -130,17 +130,17 @@ declare const SubagentTemplateSettingsSchemas: {
     request: z.ZodObject<{
       name: z.ZodString;
       enabled: z.ZodDefault<z.ZodBoolean>;
-      providerConfigId: z.ZodOptional<z.ZodString>;
+      contextMode: z.ZodDefault<z.ZodEnum<{
+        fork: "fork";
+        fresh: "fresh";
+      }>>;
       adapterName: z.ZodString;
+      providerConfigId: z.ZodOptional<z.ZodString>;
       model: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
       disallowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
       allowedDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      contextMode: z.ZodDefault<z.ZodEnum<{
-        fork: "fork";
-        fresh: "fresh";
-      }>>;
     }, z.core.$strip>;
     response: z.ZodObject<{
       id: z.ZodString;
@@ -191,9 +191,9 @@ declare const SubagentTemplateInstanceSchema: z.ZodObject<{
   status: z.ZodEnum<{
     completed: "completed";
     cancelled: "cancelled";
-    failed: "failed";
     running: "running";
     waiting_input: "waiting_input";
+    failed: "failed";
   }>;
   createdAt: z.ZodString;
 }, z.core.$strip>;
@@ -222,9 +222,9 @@ declare const SubagentTemplateInstanceStatusSchema: z.ZodObject<{
   status: z.ZodEnum<{
     completed: "completed";
     cancelled: "cancelled";
-    failed: "failed";
     running: "running";
     waiting_input: "waiting_input";
+    failed: "failed";
   }>;
   result: z.ZodOptional<z.ZodString>;
   error: z.ZodOptional<z.ZodString>;
@@ -274,9 +274,9 @@ declare const SubagentTemplateKernelSchemas: {
       status: z.ZodEnum<{
         completed: "completed";
         cancelled: "cancelled";
-        failed: "failed";
         running: "running";
         waiting_input: "waiting_input";
+        failed: "failed";
       }>;
       result: z.ZodOptional<z.ZodString>;
       error: z.ZodOptional<z.ZodString>;

package/dist/{schemas-C1mxTfd7.d.mts → schemas-CenET9Cq.d.mts}

@@ -143,8 +143,8 @@ declare const AdapterRuntimeSchemas: {
   teardownCompleted: z.ZodObject<{
     evidence: z.ZodEnum<{
       unknown: "unknown";
-      exited: "exited";
       closed: "closed";
+      exited: "exited";
       released: "released";
       detached: "detached";
     }>;