@marktoflow/core 2.0.0-alpha.3

package/dist/security.js

@@ -0,0 +1,362 @@
+/**
+ * Security module for marktoflow.
+ *
+ * Provides RBAC (Role-Based Access Control), approval workflows, and audit logging.
+ */
+import Database from 'better-sqlite3';
+import { randomUUID } from 'node:crypto';
+import { existsSync, mkdirSync } from 'node:fs';
+// ============================================================================
+// RBAC - Role-Based Access Control
+// ============================================================================
+export var Permission;
+(function (Permission) {
+    // Workflow permissions
+    Permission["WORKFLOW_READ"] = "workflow:read";
+    Permission["WORKFLOW_EXECUTE"] = "workflow:execute";
+    Permission["WORKFLOW_CREATE"] = "workflow:create";
+    Permission["WORKFLOW_EDIT"] = "workflow:edit";
+    Permission["WORKFLOW_DELETE"] = "workflow:delete";
+    // Tool permissions
+    Permission["TOOL_USE"] = "tool:use";
+    Permission["TOOL_CONFIGURE"] = "tool:configure";
+    // Admin permissions
+    Permission["USER_MANAGE"] = "user:manage";
+    Permission["ROLE_MANAGE"] = "role:manage";
+    Permission["CONFIG_MANAGE"] = "config:manage";
+    Permission["AUDIT_READ"] = "audit:read";
+    // Approval permissions
+    Permission["APPROVAL_REQUEST"] = "approval:request";
+    Permission["APPROVAL_APPROVE"] = "approval:approve";
+    Permission["APPROVAL_REJECT"] = "approval:reject";
+})(Permission || (Permission = {}));
+export const PREDEFINED_ROLES = {
+    viewer: {
+        name: 'viewer',
+        permissions: new Set([Permission.WORKFLOW_READ, Permission.AUDIT_READ]),
+        description: 'Can view workflows and audit logs',
+    },
+    executor: {
+        name: 'executor',
+        permissions: new Set([
+            Permission.WORKFLOW_READ,
+            Permission.WORKFLOW_EXECUTE,
+            Permission.TOOL_USE,
+            Permission.APPROVAL_REQUEST,
+        ]),
+        description: 'Can execute workflows and use tools',
+        inheritsFrom: ['viewer'],
+    },
+    developer: {
+        name: 'developer',
+        permissions: new Set([
+            Permission.WORKFLOW_READ,
+            Permission.WORKFLOW_EXECUTE,
+            Permission.WORKFLOW_CREATE,
+            Permission.WORKFLOW_EDIT,
+            Permission.TOOL_USE,
+            Permission.TOOL_CONFIGURE,
+            Permission.APPROVAL_REQUEST,
+        ]),
+        description: 'Can create and edit workflows',
+        inheritsFrom: ['executor'],
+    },
+    approver: {
+        name: 'approver',
+        permissions: new Set([
+            Permission.WORKFLOW_READ,
+            Permission.APPROVAL_APPROVE,
+            Permission.APPROVAL_REJECT,
+            Permission.AUDIT_READ,
+        ]),
+        description: 'Can approve or reject workflow executions',
+        inheritsFrom: ['viewer'],
+    },
+    admin: {
+        name: 'admin',
+        permissions: new Set(Object.values(Permission)),
+        description: 'Full system access',
+    },
+};
+export class RBACManager {
+    roles = new Map();
+    users = new Map();
+    constructor(customRoles) {
+        // Load predefined roles
+        for (const role of Object.values(PREDEFINED_ROLES)) {
+            this.roles.set(role.name, role);
+        }
+        // Load custom roles
+        if (customRoles) {
+            for (const role of customRoles) {
+                this.roles.set(role.name, role);
+            }
+        }
+    }
+    addRole(role) {
+        this.roles.set(role.name, role);
+    }
+    getRole(name) {
+        return this.roles.get(name);
+    }
+    addUser(user) {
+        this.users.set(user.id, user);
+    }
+    getUser(userId) {
+        return this.users.get(userId);
+    }
+    getUserPermissions(userId) {
+        const user = this.getUser(userId);
+        if (!user || !user.isActive) {
+            return new Set();
+        }
+        const permissions = new Set();
+        const visitedRoles = new Set();
+        const collectPermissions = (roleName) => {
+            if (visitedRoles.has(roleName))
+                return;
+            visitedRoles.add(roleName);
+            const role = this.getRole(roleName);
+            if (role) {
+                for (const perm of role.permissions) {
+                    permissions.add(perm);
+                }
+                if (role.inheritsFrom) {
+                    for (const inherited of role.inheritsFrom) {
+                        collectPermissions(inherited);
+                    }
+                }
+            }
+        };
+        for (const roleName of user.roles) {
+            collectPermissions(roleName);
+        }
+        return permissions;
+    }
+    checkPermission(userId, permission) {
+        const perms = this.getUserPermissions(userId);
+        return perms.has(permission);
+    }
+}
+// ============================================================================
+// Approval Workflows
+// ============================================================================
+export var ApprovalStatus;
+(function (ApprovalStatus) {
+    ApprovalStatus["PENDING"] = "pending";
+    ApprovalStatus["APPROVED"] = "approved";
+    ApprovalStatus["REJECTED"] = "rejected";
+    ApprovalStatus["EXPIRED"] = "expired";
+    ApprovalStatus["CANCELLED"] = "cancelled";
+})(ApprovalStatus || (ApprovalStatus = {}));
+export class ApprovalManager {
+    requests = new Map();
+    handlers = [];
+    rbac;
+    constructor(rbac) {
+        this.rbac = rbac;
+    }
+    addHandler(handler) {
+        this.handlers.push(handler);
+    }
+    async createRequest(params) {
+        if (this.rbac) {
+            if (!this.rbac.checkPermission(params.requesterId, Permission.APPROVAL_REQUEST)) {
+                throw new Error(`User ${params.requesterId} does not have permission to request approval`);
+            }
+        }
+        const expiresAt = params.expiresInHours
+            ? new Date(Date.now() + params.expiresInHours * 3600000)
+            : undefined;
+        const request = {
+            id: randomUUID(),
+            workflowId: params.workflowId,
+            requesterId: params.requesterId,
+            title: params.title,
+            description: params.description,
+            status: ApprovalStatus.PENDING,
+            requiredApprovers: params.requiredApprovers || [],
+            minApprovals: params.minApprovals || 1,
+            approvals: [],
+            rejections: [],
+            metadata: params.metadata || {},
+            createdAt: new Date(),
+            expiresAt,
+        };
+        this.requests.set(request.id, request);
+        for (const handler of this.handlers) {
+            await handler.onApprovalRequested(request);
+        }
+        return request;
+    }
+    getRequest(requestId) {
+        const request = this.requests.get(requestId);
+        if (request && request.status === ApprovalStatus.PENDING && request.expiresAt && new Date() > request.expiresAt) {
+            request.status = ApprovalStatus.EXPIRED;
+        }
+        return request;
+    }
+    async approve(requestId, approverId, comment) {
+        const request = this.getRequest(requestId);
+        if (!request)
+            throw new Error('Request not found');
+        if (request.status !== ApprovalStatus.PENDING)
+            throw new Error(`Request is not pending: ${request.status}`);
+        if (this.rbac && !this.rbac.checkPermission(approverId, Permission.APPROVAL_APPROVE)) {
+            throw new Error('Permission denied');
+        }
+        if (request.requiredApprovers.length > 0 && !request.requiredApprovers.includes(approverId)) {
+            throw new Error('Not an authorized approver');
+        }
+        if (request.approvals.some(a => a.approverId === approverId)) {
+            throw new Error('Already approved by this user');
+        }
+        request.approvals.push({
+            approverId,
+            comment,
+            timestamp: new Date(),
+        });
+        if (request.approvals.length >= request.minApprovals) {
+            request.status = ApprovalStatus.APPROVED;
+            request.resolvedAt = new Date();
+        }
+        for (const handler of this.handlers) {
+            await handler.onApprovalApproved(request, approverId);
+        }
+        return request;
+    }
+    async reject(requestId, rejectorId, reason) {
+        const request = this.getRequest(requestId);
+        if (!request)
+            throw new Error('Request not found');
+        if (request.status !== ApprovalStatus.PENDING)
+            throw new Error(`Request is not pending: ${request.status}`);
+        if (this.rbac && !this.rbac.checkPermission(rejectorId, Permission.APPROVAL_REJECT)) {
+            throw new Error('Permission denied');
+        }
+        if (request.requiredApprovers.length > 0 && !request.requiredApprovers.includes(rejectorId)) {
+            throw new Error('Not an authorized approver');
+        }
+        request.rejections.push({
+            rejectorId,
+            reason,
+            timestamp: new Date(),
+        });
+        request.status = ApprovalStatus.REJECTED;
+        request.resolvedAt = new Date();
+        for (const handler of this.handlers) {
+            await handler.onApprovalRejected(request, rejectorId);
+        }
+        return request;
+    }
+}
+// ============================================================================
+// Audit Logging
+// ============================================================================
+export var AuditEventType;
+(function (AuditEventType) {
+    AuditEventType["LOGIN"] = "auth.login";
+    AuditEventType["WORKFLOW_EXECUTED"] = "workflow.executed";
+    AuditEventType["WORKFLOW_COMPLETED"] = "workflow.completed";
+    AuditEventType["WORKFLOW_FAILED"] = "workflow.failed";
+    AuditEventType["PERMISSION_DENIED"] = "security.permission_denied";
+})(AuditEventType || (AuditEventType = {}));
+export class InMemoryAuditStore {
+    events = [];
+    async save(event) {
+        this.events.push(event);
+    }
+    async query(filters) {
+        return this.events.filter(e => {
+            if (filters.eventType && e.eventType !== filters.eventType)
+                return false;
+            if (filters.userId && e.userId !== filters.userId)
+                return false;
+            return true;
+        }).slice(filters.offset || 0, (filters.offset || 0) + (filters.limit || 100));
+    }
+}
+export class SQLiteAuditStore {
+    db;
+    constructor(dbPath = '.marktoflow/state/audit.db') {
+        const dir = dbPath.substring(0, dbPath.lastIndexOf('/'));
+        if (dir && !existsSync(dir)) {
+            mkdirSync(dir, { recursive: true });
+        }
+        this.db = new Database(dbPath);
+        this.init();
+    }
+    init() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS audit_events (
+        id TEXT PRIMARY KEY,
+        event_type TEXT NOT NULL,
+        user_id TEXT,
+        resource_type TEXT,
+        resource_id TEXT,
+        action TEXT,
+        details TEXT,
+        ip_address TEXT,
+        user_agent TEXT,
+        timestamp TEXT NOT NULL,
+        success INTEGER,
+        error_message TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_audit_timestamp ON audit_events(timestamp);
+    `);
+    }
+    async save(event) {
+        const stmt = this.db.prepare(`
+      INSERT INTO audit_events (
+        id, event_type, user_id, resource_type, resource_id, action,
+        details, ip_address, user_agent, timestamp, success, error_message
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(event.id, event.eventType, event.userId, event.resourceType, event.resourceId, event.action, JSON.stringify(event.details), event.ipAddress, event.userAgent, event.timestamp.toISOString(), event.success ? 1 : 0, event.errorMessage);
+    }
+    async query(filters) {
+        let sql = 'SELECT * FROM audit_events WHERE 1=1';
+        const params = [];
+        if (filters.eventType) {
+            sql += ' AND event_type = ?';
+            params.push(filters.eventType);
+        }
+        if (filters.userId) {
+            sql += ' AND user_id = ?';
+            params.push(filters.userId);
+        }
+        sql += ' ORDER BY timestamp DESC LIMIT ? OFFSET ?';
+        params.push(filters.limit || 100, filters.offset || 0);
+        const rows = this.db.prepare(sql).all(...params);
+        return rows.map(row => ({
+            id: row.id,
+            eventType: row.event_type,
+            userId: row.user_id,
+            resourceType: row.resource_type,
+            resourceId: row.resource_id,
+            action: row.action,
+            details: JSON.parse(row.details),
+            ipAddress: row.ip_address,
+            userAgent: row.user_agent,
+            timestamp: new Date(row.timestamp),
+            success: !!row.success,
+            errorMessage: row.error_message
+        }));
+    }
+}
+export class AuditLogger {
+    store;
+    constructor(store) {
+        this.store = store || new InMemoryAuditStore();
+    }
+    async log(event) {
+        const fullEvent = {
+            id: randomUUID(),
+            timestamp: new Date(),
+            ...event
+        };
+        await this.store.save(fullEvent);
+        return fullEvent.id;
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEhD,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,MAAM,CAAN,IAAY,UAsBX;AAtBD,WAAY,UAAU;IACpB,uBAAuB;IACvB,6CAA+B,CAAA;IAC/B,mDAAqC,CAAA;IACrC,iDAAmC,CAAA;IACnC,6CAA+B,CAAA;IAC/B,iDAAmC,CAAA;IAEnC,mBAAmB;IACnB,mCAAqB,CAAA;IACrB,+CAAiC,CAAA;IAEjC,oBAAoB;IACpB,yCAA2B,CAAA;IAC3B,yCAA2B,CAAA;IAC3B,6CAA+B,CAAA;IAC/B,uCAAyB,CAAA;IAEzB,uBAAuB;IACvB,mDAAqC,CAAA;IACrC,mDAAqC,CAAA;IACrC,iDAAmC,CAAA;AACrC,CAAC,EAtBW,UAAU,KAAV,UAAU,QAsBrB;AAoBD,MAAM,CAAC,MAAM,gBAAgB,GAAyB;IACpD,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QACvE,WAAW,EAAE,mCAAmC;KACjD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,IAAI,GAAG,CAAC;YACnB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,gBAAgB;YAC3B,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,gBAAgB;SAC5B,CAAC;QACF,WAAW,EAAE,qCAAqC;QAClD,YAAY,EAAE,CAAC,QAAQ,CAAC;KACzB;IACD,SAAS,EAAE;QACT,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,IAAI,GAAG,CAAC;YACnB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,gBAAgB;YAC3B,UAAU,CAAC,eAAe;YAC1B,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,cAAc;YACzB,UAAU,CAAC,gBAAgB;SAC5B,CAAC;QACF,WAAW,EAAE,+BAA+B;QAC5C,YAAY,EAAE,CAAC,UAAU,CAAC;KAC3B;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,IAAI,GAAG,CAAC;YACnB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,gBAAgB;YAC3B,UAAU,CAAC,eAAe;YAC1B,UAAU,CAAC,UAAU;SACtB,CAAC;QACF,WAAW,EAAE,2CAA2C;QACxD,YAAY,EAAE,CAAC,QAAQ,CAAC;KACzB;IACD,KAAK,EAAE;QACL,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/C,WAAW,EAAE,oBAAoB;KAClC;CACF,CAAC;AAEF,MAAM,OAAO,WAAW;IACd,KAAK,GAAsB,IAAI,GAAG,EAAE,CAAC;IACrC,KAAK,GAAsB,IAAI,GAAG,EAAE,CAAC;IAE7C,YAAY,WAAoB;QAC9B,wBAAwB;QACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,oBAAoB;QACpB,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAU;QAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,IAAU;QAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,kBAAkB,CAAC,MAAc;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAc,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QAEvC,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAE,EAAE;YAC9C,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO;YACvC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACpC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxB,CAAC;gBACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;wBAC1C,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,eAAe,CAAC,MAAc,EAAE,UAAsB;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,qCAAmB,CAAA;IACnB,uCAAqB,CAAA;IACrB,uCAAqB,CAAA;IACrB,qCAAmB,CAAA;IACnB,yCAAuB,CAAA;AACzB,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AAyBD,MAAM,OAAO,eAAe;IAClB,QAAQ,GAAiC,IAAI,GAAG,EAAE,CAAC;IACnD,QAAQ,GAAsB,EAAE,CAAC;IACjC,IAAI,CAA2B;IAEvC,YAAY,IAA8B;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,UAAU,CAAC,OAAwB;QACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MASnB;QACC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,WAAW,+CAA+C,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;YACrC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC;YACxD,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,OAAO,GAAoB;YAC/B,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,cAAc,CAAC,OAAO;YAC9B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;YACjD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC;YACtC,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS;SACV,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAEvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YAChH,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC;QAC1C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,UAAkB,EAAE,OAAgB;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5G,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;YACrB,UAAU;YACV,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACrD,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC;YACzC,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,UAAkB,EAAE,MAAe;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5G,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YACtB,UAAU;YACV,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC;QACzC,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAEhC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,sCAAoB,CAAA;IACpB,yDAAuC,CAAA;IACvC,2DAAyC,CAAA;IACzC,qDAAmC,CAAA;IACnC,kEAAgD,CAAA;AAClD,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AA6BD,MAAM,OAAO,kBAAkB;IACrB,MAAM,GAAiB,EAAE,CAAC;IAElC,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAY;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC5B,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACzE,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC;IAChF,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IACnB,EAAE,CAAoB;IAE9B,YAAY,SAAiB,4BAA4B;QACvD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;KAgBZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAK5B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,MAAM,EACZ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAC7B,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACrB,KAAK,CAAC,YAAY,CACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAY;QACtB,IAAI,GAAG,GAAG,sCAAsC,CAAC;QACjD,MAAM,MAAM,GAAU,EAAE,CAAC;QAEzB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,GAAG,IAAI,qBAAqB,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,GAAG,IAAI,kBAAkB,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,GAAG,IAAI,2CAA2C,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAEvD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAU,CAAC;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;YAChC,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO;YACtB,YAAY,EAAE,GAAG,CAAC,aAAa;SAChC,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AAED,MAAM,OAAO,WAAW;IACd,KAAK,CAAa;IAE1B,YAAY,KAAkB;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,kBAAkB,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAA2C;QACnD,MAAM,SAAS,GAAe;YAC5B,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,GAAG,KAAK;SACT,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,SAAS,CAAC,EAAE,CAAC;IACtB,CAAC;CACF"}

package/dist/state.d.ts

@@ -0,0 +1,67 @@
+/**
+ * State persistence for marktoflow v2.0
+ *
+ * Provides SQLite-based state storage for workflow checkpoints,
+ * execution history, and recovery.
+ */
+import { WorkflowStatus, StepStatus } from './models.js';
+export interface ExecutionRecord {
+    runId: string;
+    workflowId: string;
+    workflowPath: string;
+    status: WorkflowStatus;
+    startedAt: Date;
+    completedAt: Date | null;
+    currentStep: number;
+    totalSteps: number;
+    inputs: Record<string, unknown> | null;
+    outputs: Record<string, unknown> | null;
+    error: string | null;
+    metadata: Record<string, unknown> | null;
+}
+export interface StepCheckpoint {
+    runId: string;
+    stepIndex: number;
+    stepName: string;
+    status: StepStatus;
+    startedAt: Date;
+    completedAt: Date | null;
+    inputs: Record<string, unknown> | null;
+    outputs: unknown;
+    error: string | null;
+    retryCount: number;
+}
+export interface ExecutionStats {
+    totalExecutions: number;
+    completed: number;
+    failed: number;
+    running: number;
+    successRate: number;
+    averageDuration: number | null;
+}
+export declare class StateStore {
+    private db;
+    constructor(dbPath?: string);
+    private initialize;
+    createExecution(record: ExecutionRecord): void;
+    updateExecution(runId: string, updates: Partial<Omit<ExecutionRecord, 'runId'>>): void;
+    getExecution(runId: string): ExecutionRecord | null;
+    listExecutions(options?: {
+        workflowId?: string;
+        status?: WorkflowStatus;
+        limit?: number;
+        offset?: number;
+    }): ExecutionRecord[];
+    getRunningExecutions(): ExecutionRecord[];
+    getFailedExecutions(limit?: number): ExecutionRecord[];
+    private rowToExecution;
+    saveCheckpoint(checkpoint: StepCheckpoint): void;
+    getCheckpoints(runId: string): StepCheckpoint[];
+    getLastCheckpoint(runId: string): StepCheckpoint | null;
+    getResumePoint(runId: string): number;
+    private rowToCheckpoint;
+    getStats(workflowId?: string): ExecutionStats;
+    cleanup(retentionDays?: number): number;
+    close(): void;
+}
+//# sourceMappingURL=state.d.ts.map

package/dist/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAkDD,qBAAa,UAAU;IACrB,OAAO,CAAC,EAAE,CAAoB;gBAElB,MAAM,GAAE,MAA8C;IAMlE,OAAO,CAAC,UAAU;IAiBlB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAwB9C,eAAe,CACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,GAC/C,IAAI;IAwCP,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAQnD,cAAc,CAAC,OAAO,GAAE;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACZ,GAAG,eAAe,EAAE;IA4B1B,oBAAoB,IAAI,eAAe,EAAE;IAIzC,mBAAmB,CAAC,KAAK,SAAK,GAAG,eAAe,EAAE;IAIlD,OAAO,CAAC,cAAc;IAqBtB,cAAc,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI;IAsBhD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,EAAE;IAQ/C,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAQvD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAarC,OAAO,CAAC,eAAe;IAmBvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IA+C7C,OAAO,CAAC,aAAa,GAAE,MAAW,GAAG,MAAM;IAqB3C,KAAK,IAAI,IAAI;CAGd"}