@melra/protocol 0.3.0-alpha.3

package/dist/workflow.test.js

@@ -0,0 +1,125 @@
+// Copyright 2026 XAGI Labs Private Limited
+// SPDX-License-Identifier: Apache-2.0
+import { describe, expect, it } from "vitest";
+import { BoundedLoopNodeSchema, ConditionNodeSchema, EncryptedPayloadSchema, ParallelNodeSchema, WorkflowAdvanceInputSchema, WorkflowDefinitionSchema, WorkflowEventSchema, WorkflowRunSchema, WorkflowSnapshotSchema, } from "./index.js";
+const workflowId = "11111111-1111-4111-8111-111111111111";
+const traceId = "22222222-2222-4222-8222-222222222222";
+const occurredAt = "2026-07-30T12:00:00.000Z";
+describe("durable workflow protocol", () => {
+    it("parses a bounded two-node workflow and rejects schema smuggling", () => {
+        const definition = WorkflowDefinitionSchema.parse({
+            schemaVersion: "1.0.0",
+            id: workflowId,
+            version: 1,
+            name: "restart-safe",
+            nodes: [
+                {
+                    id: "inspect",
+                    type: "operation",
+                    dependsOn: [],
+                    request: {
+                        goal: "Inspect the runtime",
+                        operation: { kind: "system", action: "info" },
+                    },
+                },
+                { id: "checkpoint", type: "checkpoint", dependsOn: ["inspect"] },
+            ],
+        });
+        expect(definition.nodes).toHaveLength(2);
+        expect(() => WorkflowDefinitionSchema.parse({ ...definition, executeAnyway: true })).toThrow();
+    });
+    it.each([
+        [
+            BoundedLoopNodeSchema,
+            {
+                id: "loop",
+                type: "bounded_loop",
+                dependsOn: [],
+                body: [
+                    {
+                        goal: "Inspect the runtime",
+                        operation: { kind: "system", action: "info" },
+                    },
+                ],
+                maxIterations: 0,
+            },
+        ],
+        [
+            ParallelNodeSchema,
+            {
+                id: "parallel",
+                type: "parallel",
+                dependsOn: [],
+                branches: [],
+            },
+        ],
+        [
+            ConditionNodeSchema,
+            {
+                id: "condition",
+                type: "condition",
+                dependsOn: [],
+                sourceNodeId: "",
+                predicate: { type: "result_equals", path: "ready", value: true },
+            },
+        ],
+    ])("rejects an invalid bounded control-flow node", (schema, value) => {
+        expect(schema.safeParse(value).success).toBe(false);
+    });
+    it("validates events, snapshots, encrypted payloads, and advance inputs", () => {
+        const run = WorkflowRunSchema.parse({
+            schemaVersion: "1.0.0",
+            id: workflowId,
+            definitionId: "33333333-3333-4333-8333-333333333333",
+            definitionVersion: 1,
+            status: "running",
+            stateVersion: 2,
+            nodes: {
+                inspect: {
+                    status: "verified_complete",
+                    taskIds: ["44444444-4444-4444-8444-444444444444"],
+                },
+                checkpoint: { status: "ready" },
+            },
+            traceId,
+            createdAt: occurredAt,
+            updatedAt: occurredAt,
+        });
+        expect(WorkflowEventSchema.parse({
+            schemaVersion: "1.0.0",
+            id: "55555555-5555-4555-8555-555555555555",
+            aggregateId: workflowId,
+            sequence: 2,
+            traceId,
+            type: "workflow.node_completed",
+            data: { nodeId: "inspect" },
+            occurredAt,
+        }).type).toBe("workflow.node_completed");
+        expect(EncryptedPayloadSchema.parse({
+            version: 1,
+            algorithm: "aes-256-gcm",
+            iv: "AQIDBA",
+            ciphertext: "BQYHCA",
+            tag: "CQoLDA",
+        }).algorithm).toBe("aes-256-gcm");
+        expect(WorkflowAdvanceInputSchema.parse({
+            workflowId,
+            approvals: [],
+        }).approvals).toEqual([]);
+        expect(WorkflowSnapshotSchema.parse({
+            schemaVersion: "1.0.0",
+            workflowId,
+            sequence: 2,
+            run,
+            createdAt: occurredAt,
+        }).sequence).toBe(2);
+        expect(() => WorkflowSnapshotSchema.parse({
+            schemaVersion: "1.0.0",
+            workflowId,
+            sequence: 1,
+            run,
+            createdAt: occurredAt,
+        })).toThrow();
+    });
+});
+//# sourceMappingURL=workflow.test.js.map

package/dist/workflow.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow.test.js","sourceRoot":"","sources":["../src/workflow.test.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,sCAAsC;AAEtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAC1D,MAAM,OAAO,GAAG,sCAAsC,CAAC;AACvD,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC;YAChD,aAAa,EAAE,OAAO;YACtB,EAAE,EAAE,UAAU;YACd,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,SAAS;oBACb,IAAI,EAAE,WAAW;oBACjB,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE;wBACP,IAAI,EAAE,qBAAqB;wBAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;qBAC9C;iBACF;gBACD,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE;aACjE;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACvE,CAAC,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN;YACE,qBAAqB;YACrB;gBACE,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,cAAc;gBACpB,SAAS,EAAE,EAAE;gBACb,IAAI,EAAE;oBACJ;wBACE,IAAI,EAAE,qBAAqB;wBAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;qBAC9C;iBACF;gBACD,aAAa,EAAE,CAAC;aACjB;SACF;QACD;YACE,kBAAkB;YAClB;gBACE,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,EAAE;aACb;SACF;QACD;YACE,mBAAmB;YACnB;gBACE,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,EAAE;gBACb,YAAY,EAAE,EAAE;gBAChB,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE;aACjE;SACF;KACF,CAAC,CAAC,8CAA8C,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACnE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC;YAClC,aAAa,EAAE,OAAO;YACtB,EAAE,EAAE,UAAU;YACd,YAAY,EAAE,sCAAsC;YACpD,iBAAiB,EAAE,CAAC;YACpB,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,CAAC;YACf,KAAK,EAAE;gBACL,OAAO,EAAE;oBACP,MAAM,EAAE,mBAAmB;oBAC3B,OAAO,EAAE,CAAC,sCAAsC,CAAC;iBAClD;gBACD,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;aAChC;YACD,OAAO;YACP,SAAS,EAAE,UAAU;YACrB,SAAS,EAAE,UAAU;SACtB,CAAC,CAAC;QAEH,MAAM,CACJ,mBAAmB,CAAC,KAAK,CAAC;YACxB,aAAa,EAAE,OAAO;YACtB,EAAE,EAAE,sCAAsC;YAC1C,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,CAAC;YACX,OAAO;YACP,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;YAC3B,UAAU;SACX,CAAC,CAAC,IAAI,CACR,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAClC,MAAM,CACJ,sBAAsB,CAAC,KAAK,CAAC;YAC3B,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa;YACxB,EAAE,EAAE,QAAQ;YACZ,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,QAAQ;SACd,CAAC,CAAC,SAAS,CACb,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACtB,MAAM,CACJ,0BAA0B,CAAC,KAAK,CAAC;YAC/B,UAAU;YACV,SAAS,EAAE,EAAE;SACd,CAAC,CAAC,SAAS,CACb,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,MAAM,CACJ,sBAAsB,CAAC,KAAK,CAAC;YAC3B,aAAa,EAAE,OAAO;YACtB,UAAU;YACV,QAAQ,EAAE,CAAC;YACX,GAAG;YACH,SAAS,EAAE,UAAU;SACtB,CAAC,CAAC,QAAQ,CACZ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,MAAM,CAAC,GAAG,EAAE,CACV,sBAAsB,CAAC,KAAK,CAAC;YAC3B,aAAa,EAAE,OAAO;YACtB,UAAU;YACV,QAAQ,EAAE,CAAC;YACX,GAAG;YACH,SAAS,EAAE,UAAU;SACtB,CAAC,CACH,CAAC,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@melra/protocol",
+  "version": "0.3.0-alpha.3",
+  "description": "Versioned task, workflow, capability, policy, and evidence contracts for MELRA.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/XAGI-Lab/melra.git",
+    "directory": "packages/protocol"
+  },
+  "homepage": "https://github.com/XAGI-Lab/melra#readme",
+  "bugs": "https://github.com/XAGI-Lab/melra/issues",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "zod": "4.4.3"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "rm -rf dist",
+    "test": "vitest run --passWithNoTests",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}