@nodetool-ai/websocket 0.7.0-rc.22 → 0.8.1

package/dist/frontend-renderer-registry.js

@@ -0,0 +1,111 @@
+import { randomUUID } from "node:crypto";
+/**
+ * User-scoped registry of browser renderers attached to the normal /ws socket.
+ *
+ * A renderer is not listed until its browser has sent a client tool manifest.
+ * Entries are removed as soon as their runner disconnects. The registry owns
+ * selection and authorization so MCP callers cannot accidentally address a
+ * renderer belonging to another user.
+ */
+export class FrontendRendererRegistry {
+    renderers = new Map();
+    activitySequence = 0;
+    register(userId, runner) {
+        const rendererId = randomUUID();
+        this.renderers.set(rendererId, {
+            runner,
+            activitySequence: ++this.activitySequence,
+            info: {
+                renderer_id: rendererId,
+                user_id: userId,
+                ready: false,
+                connected: true,
+                active: false,
+                last_active_at: Date.now(),
+                tools: {}
+            }
+        });
+        return rendererId;
+    }
+    markReady(rendererId) {
+        const record = this.renderers.get(rendererId);
+        if (!record || !record.runner.isRendererConnected())
+            return;
+        record.info.ready = record.runner.isRendererReady();
+        record.info.tools = record.runner.getRendererToolManifest();
+        this.touch(rendererId);
+    }
+    touch(rendererId) {
+        const record = this.renderers.get(rendererId);
+        if (!record || !record.runner.isRendererConnected())
+            return;
+        record.activitySequence = ++this.activitySequence;
+        record.info.last_active_at = Date.now();
+    }
+    unregister(rendererId) {
+        this.renderers.delete(rendererId);
+    }
+    list(userId) {
+        const listed = [...this.renderers.values()]
+            .filter((record) => {
+            if (record.info.user_id !== userId)
+                return false;
+            if (!record.runner.isRendererConnected()) {
+                this.renderers.delete(record.info.renderer_id);
+                return false;
+            }
+            return record.runner.isRendererReady();
+        })
+            .sort((a, b) => b.activitySequence - a.activitySequence)
+            .map(({ info }, index) => ({
+            ...info,
+            ready: true,
+            connected: true,
+            active: index === 0,
+            tools: { ...info.tools }
+        }));
+        return listed;
+    }
+    /** Resolve an explicit renderer or the most recently active renderer. */
+    resolve(userId, rendererId) {
+        if (rendererId) {
+            const record = this.renderers.get(rendererId);
+            if (!record ||
+                record.info.user_id !== userId ||
+                !record.runner.isRendererConnected() ||
+                !record.runner.isRendererReady()) {
+                if (record && !record.runner.isRendererConnected()) {
+                    this.renderers.delete(rendererId);
+                }
+                return null;
+            }
+            return record;
+        }
+        return (this.list(userId)
+            .map((info) => this.renderers.get(info.renderer_id))
+            .find((record) => record !== undefined) ??
+            null);
+    }
+    async execute(options) {
+        const { userId, rendererId, toolName, args, timeoutMs } = options;
+        const record = this.resolve(userId, rendererId);
+        if (!record) {
+            return { handled: false };
+        }
+        const call = {
+            tool_call_id: randomUUID(),
+            name: toolName,
+            args
+        };
+        const result = await record.runner.executeRendererTool(record.info.renderer_id, call, timeoutMs);
+        this.touch(record.info.renderer_id);
+        if (!result.ok) {
+            throw new Error(result.error ?? `${toolName} failed in renderer`);
+        }
+        return { handled: true, result: result.result };
+    }
+    get size() {
+        return this.renderers.size;
+    }
+}
+//# sourceMappingURL=frontend-renderer-registry.js.map

package/dist/frontend-renderer-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-renderer-registry.js","sourceRoot":"","sources":["../src/frontend-renderer-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsEzC;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IAClB,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACvD,gBAAgB,GAAG,CAAC,CAAC;IAE7B,QAAQ,CAAC,MAAc,EAAE,MAA8B;QACrD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE;YAC7B,MAAM;YACN,gBAAgB,EAAE,EAAE,IAAI,CAAC,gBAAgB;YACzC,IAAI,EAAE;gBACJ,WAAW,EAAE,UAAU;gBACvB,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,KAAK;gBACb,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;gBAC1B,KAAK,EAAE,EAAE;aACV;SACF,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE;YAAE,OAAO;QAC5D,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAkB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE;YAAE,OAAO;QAC5D,MAAM,CAAC,gBAAgB,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1C,CAAC;IAED,UAAU,CAAC,UAAkB;QAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;aACxC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YACjB,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC/C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACzC,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;aACvD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACzB,GAAG,IAAI;YACP,KAAK,EAAE,IAAa;YACpB,SAAS,EAAE,IAAa;YACxB,MAAM,EAAE,KAAK,KAAK,CAAC;YACnB,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE;SACzB,CAAC,CAAC,CAAC;QACN,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yEAAyE;IACzE,OAAO,CAAC,MAAc,EAAE,UAAmB;QACzC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9C,IACE,CAAC,MAAM;gBACP,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM;gBAC9B,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE;gBACpC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,EAChC,CAAC;gBACD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;oBACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;aACnD,IAAI,CAAC,CAAC,MAAM,EAA4B,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC;YACnE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAA2C;QAE3C,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,GAA6B;YACrC,YAAY,EAAE,UAAU,EAAE;YAC1B,IAAI,EAAE,QAAQ;YACd,IAAI;SACL,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,mBAAmB,CACpD,MAAM,CAAC,IAAI,CAAC,WAAW,EACvB,IAAI,EACJ,SAAS,CACV,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,QAAQ,qBAAqB,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC7B,CAAC;CACF"}

package/dist/generation-recovery.d.ts

@@ -0,0 +1,13 @@
+import { DurableGenerationRecoveryWorker, type DurableGenerationRecoveryOptions } from "@nodetool-ai/execution";
+/**
+ * The host half of durable fal recovery: how a saved output becomes an asset,
+ * and how a saved asset reaches its storyboard destination.
+ *
+ * Recovery is intentionally bounded and webhook-first. The queue adapter is
+ * created only after a durable attempt identifies its owning user's key, so a
+ * restart never guesses credentials or replays a paid POST.
+ *
+ * `overrides` exists for tests, which supply a scripted queue instead of fal.
+ */
+export declare function createGenerationRecoveryWorker(overrides?: Partial<DurableGenerationRecoveryOptions>): DurableGenerationRecoveryWorker;
+//# sourceMappingURL=generation-recovery.d.ts.map

package/dist/generation-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-recovery.d.ts","sourceRoot":"","sources":["../src/generation-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,KAAK,gCAAgC,EACtC,MAAM,wBAAwB,CAAC;AA4BhC;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,SAAS,GAAE,OAAO,CAAC,gCAAgC,CAAM,GACxD,+BAA+B,CA8MjC"}

package/dist/generation-recovery.js

@@ -0,0 +1,197 @@
+import { DurableGenerationRecoveryWorker } from "@nodetool-ai/execution";
+import { createFalQueueOperations, fetchExternalMedia } from "@nodetool-ai/runtime";
+import { Asset, createStableUuid, getSecret, Prediction, Storyboard } from "@nodetool-ai/models";
+import { storeAssetWithThumbnail } from "./lib/thumbnail.js";
+/** One attachment result, so the write path and the already-written path
+ * cannot disagree about what "attached" means. */
+function attachmentOutcome(intendedSelection, appliedSelection) {
+    return {
+        status: intendedSelection && !appliedSelection ? "superseded" : "attached",
+        selected: appliedSelection,
+        error: null
+    };
+}
+/**
+ * The host half of durable fal recovery: how a saved output becomes an asset,
+ * and how a saved asset reaches its storyboard destination.
+ *
+ * Recovery is intentionally bounded and webhook-first. The queue adapter is
+ * created only after a durable attempt identifies its owning user's key, so a
+ * restart never guesses credentials or replays a paid POST.
+ *
+ * `overrides` exists for tests, which supply a scripted queue instead of fal.
+ */
+export function createGenerationRecoveryWorker(overrides = {}) {
+    return new DurableGenerationRecoveryWorker({
+        provider: {
+            queueFor: async (attempt) => {
+                const generation = await Prediction.find(attempt.generation_id);
+                if (!generation)
+                    throw new Error("Generation no longer exists");
+                const expectedAccountRef = `user:${generation.user_id}:secret:FAL_API_KEY`;
+                if (attempt.provider_account_ref !== expectedAccountRef) {
+                    throw new Error("FAL attempt credential ownership does not match");
+                }
+                const apiKey = await getSecret("FAL_API_KEY", generation.user_id);
+                if (!apiKey)
+                    throw new Error("FAL_API_KEY is not configured");
+                return createFalQueueOperations({ apiKey });
+            }
+        },
+        batchSize: 25,
+        attachOutput: async ({ generation, output, attachment }) => {
+            if (!output.asset_id) {
+                return {
+                    status: "retrying",
+                    error: "Saved output has no asset to attach"
+                };
+            }
+            if (attachment.target_type !== "storyboard_keyframe" &&
+                attachment.target_type !== "storyboard_clip") {
+                return null;
+            }
+            const storyboardId = generation.document_id;
+            if (!storyboardId) {
+                return { status: "target_deleted", error: "Storyboard id is missing" };
+            }
+            for (let retry = 0; retry < 3; retry++) {
+                const storyboard = await Storyboard.findById(storyboardId);
+                if (!storyboard || storyboard.user_id !== generation.user_id) {
+                    return { status: "target_deleted", error: "Storyboard was deleted" };
+                }
+                const document = storyboard.toDocument();
+                const index = document.shots.findIndex((shot) => shot.id === attachment.target_id);
+                if (index < 0) {
+                    return {
+                        status: "target_deleted",
+                        error: "Storyboard shot was deleted"
+                    };
+                }
+                const shot = document.shots[index];
+                const isKeyframe = attachment.target_type === "storyboard_keyframe";
+                const selected = isKeyframe ? shot.keyframe : shot.clip;
+                const shouldSelect = attachment.selected && generation.cancel_requested_at === null;
+                const savedAssetIds = (isKeyframe
+                    ? (shot.keyframe_versions ?? (shot.keyframe ? [shot.keyframe] : []))
+                    : (shot.clip_versions ?? (shot.clip ? [shot.clip] : []))).map((version) => version.asset_id);
+                if (savedAssetIds.includes(output.asset_id) &&
+                    (!shouldSelect || Boolean(selected))) {
+                    // The live render already wrote this asset into the shot. Writing
+                    // the identical document again would only lose someone else's edit
+                    // to the retry loop below.
+                    return attachmentOutcome(attachment.selected, shouldSelect && (!selected || selected.asset_id === output.asset_id));
+                }
+                if (isKeyframe) {
+                    const ref = {
+                        type: "image",
+                        asset_id: output.asset_id,
+                        uri: `asset://${output.asset_id}`
+                    };
+                    const versions = shot.keyframe_versions ?? (shot.keyframe ? [shot.keyframe] : []);
+                    document.shots[index] = {
+                        ...shot,
+                        keyframe: shouldSelect ? (shot.keyframe ?? ref) : shot.keyframe,
+                        keyframe_versions: versions.some((version) => version.asset_id === output.asset_id)
+                            ? versions
+                            : [...versions, ref],
+                        status: shouldSelect && !shot.keyframe ? "keyframe_ready" : shot.status
+                    };
+                }
+                else {
+                    const ref = {
+                        type: "video",
+                        asset_id: output.asset_id,
+                        uri: `asset://${output.asset_id}`
+                    };
+                    const versions = shot.clip_versions ?? (shot.clip ? [shot.clip] : []);
+                    document.shots[index] = {
+                        ...shot,
+                        clip: shouldSelect ? (shot.clip ?? ref) : shot.clip,
+                        clip_versions: versions.some((version) => version.asset_id === output.asset_id)
+                            ? versions
+                            : [...versions, ref],
+                        status: shouldSelect && !shot.clip ? "rendered" : shot.status
+                    };
+                }
+                const updated = await Storyboard.updateFieldsIfUnchanged(storyboard.id, storyboard.updated_at, { document: JSON.stringify(document) }, {
+                    ops: [
+                        {
+                            tool: "update_shot",
+                            input: { id: attachment.target_id }
+                        }
+                    ]
+                });
+                if (updated) {
+                    return attachmentOutcome(attachment.selected, shouldSelect && (!selected || selected.asset_id === output.asset_id));
+                }
+            }
+            return {
+                status: "retrying",
+                error: "Storyboard changed while attaching recovered output"
+            };
+        },
+        finalizeOutput: async ({ generation, attempt, descriptor }) => {
+            if (descriptor.existingAssetId) {
+                return {
+                    status: "ready",
+                    asset_id: descriptor.existingAssetId,
+                    storage_key: descriptor.existingStorageKey,
+                    provider_ref: descriptor.providerRef,
+                    raw_result: descriptor.rawResult
+                };
+            }
+            if (descriptor.outputType === "structured") {
+                return {
+                    status: "ready",
+                    provider_ref: null,
+                    raw_result: descriptor.rawResult
+                };
+            }
+            const sourceUrl = descriptor.providerRef;
+            if (!sourceUrl) {
+                return {
+                    status: "unavailable",
+                    error: "Provider returned no media URL",
+                    raw_result: descriptor.rawResult
+                };
+            }
+            const response = await fetchExternalMedia(sourceUrl, {
+                signal: AbortSignal.timeout(60_000)
+            });
+            if (!response.ok) {
+                return {
+                    status: "retrying",
+                    error: `Media download returned HTTP ${response.status}`,
+                    provider_ref: sourceUrl,
+                    raw_result: descriptor.rawResult
+                };
+            }
+            const bytes = new Uint8Array(await response.arrayBuffer());
+            const contentType = response.headers.get("content-type")?.split(";", 1)[0] ??
+                "application/octet-stream";
+            const assetId = createStableUuid("fal_generation_output", `${generation.id}:${attempt.id}:${descriptor.outputKey}:${descriptor.outputIndex}`);
+            const asset = new Asset({
+                id: assetId,
+                user_id: generation.user_id,
+                workflow_id: generation.workflow_id,
+                project_id: generation.project_id ?? "default",
+                name: `fal_${descriptor.outputKey}_${descriptor.outputIndex}`,
+                content_type: contentType,
+                parent_id: generation.user_id
+            });
+            const extension = contentType.split("/", 2)[1]?.replace(/[^a-z0-9]/giu, "") || "bin";
+            await storeAssetWithThumbnail(generation.user_id, asset.id, `${assetId}.${extension}`, bytes, contentType);
+            asset.size = bytes.byteLength;
+            await asset.save();
+            return {
+                status: "ready",
+                asset_id: asset.id,
+                storage_key: `${generation.user_id}/${assetId}.${extension}`,
+                provider_ref: sourceUrl,
+                raw_result: descriptor.rawResult
+            };
+        },
+        ...overrides
+    });
+}
+//# sourceMappingURL=generation-recovery.js.map

package/dist/generation-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-recovery.js","sourceRoot":"","sources":["../src/generation-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAEhC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,EACL,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,UAAU,EACX,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D;kDACkD;AAClD,SAAS,iBAAiB,CACxB,iBAA0B,EAC1B,gBAAyB;IAEzB,OAAO;QACL,MAAM,EAAE,iBAAiB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;QAC1E,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,SAAS,GAA8C,EAAE;IAEzD,OAAO,IAAI,+BAA+B,CAAC;QACzC,QAAQ,EAAE;YACR,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC1B,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAChE,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAChE,MAAM,kBAAkB,GAAG,QAAQ,UAAU,CAAC,OAAO,qBAAqB,CAAC;gBAC3E,IAAI,OAAO,CAAC,oBAAoB,KAAK,kBAAkB,EAAE,CAAC;oBACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;gBAClE,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC9D,OAAO,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,CAAC;SACF;QACD,SAAS,EAAE,EAAE;QACb,YAAY,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;YACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO;oBACL,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE,qCAAqC;iBAC7C,CAAC;YACJ,CAAC;YACD,IACE,UAAU,CAAC,WAAW,KAAK,qBAAqB;gBAChD,UAAU,CAAC,WAAW,KAAK,iBAAiB,EAC5C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC;YAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;YACzE,CAAC;YACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACvC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC3D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;oBAC7D,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;gBACvE,CAAC;gBACD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,SAAS,CAC3C,CAAC;gBACF,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBACd,OAAO;wBACL,MAAM,EAAE,gBAAgB;wBACxB,KAAK,EAAE,6BAA6B;qBACrC,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnC,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,KAAK,qBAAqB,CAAC;gBACpE,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxD,MAAM,YAAY,GAChB,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,mBAAmB,KAAK,IAAI,CAAC;gBACjE,MAAM,aAAa,GAAG,CACpB,UAAU;oBACR,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACpE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC3D,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACrC,IACE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;oBACvC,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,EACpC,CAAC;oBACD,kEAAkE;oBAClE,mEAAmE;oBACnE,2BAA2B;oBAC3B,OAAO,iBAAiB,CACtB,UAAU,CAAC,QAAQ,EACnB,YAAY,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CACrE,CAAC;gBACJ,CAAC;gBACD,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG;wBACV,IAAI,EAAE,OAAgB;wBACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,GAAG,EAAE,WAAW,MAAM,CAAC,QAAQ,EAAE;qBAClC,CAAC;oBACF,MAAM,QAAQ,GACZ,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACnE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;wBACtB,GAAG,IAAI;wBACP,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ;wBAC/D,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAC9B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAClD;4BACC,CAAC,CAAC,QAAQ;4BACV,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC;wBACtB,MAAM,EACJ,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;qBAClE,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,GAAG;wBACV,IAAI,EAAE,OAAgB;wBACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,GAAG,EAAE,WAAW,MAAM,CAAC,QAAQ,EAAE;qBAClC,CAAC;oBACF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACtE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;wBACtB,GAAG,IAAI;wBACP,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;wBACnD,aAAa,EAAE,QAAQ,CAAC,IAAI,CAC1B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAClD;4BACC,CAAC,CAAC,QAAQ;4BACV,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC;wBACtB,MAAM,EAAE,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;qBAC9D,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,uBAAuB,CACtD,UAAU,CAAC,EAAE,EACb,UAAU,CAAC,UAAU,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EACtC;oBACE,GAAG,EAAE;wBACH;4BACE,IAAI,EAAE,aAAa;4BACnB,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,SAAS,EAAE;yBACpC;qBACF;iBACF,CACF,CAAC;gBACF,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,iBAAiB,CACtB,UAAU,CAAC,QAAQ,EACnB,YAAY,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CACrE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,qDAAqD;aAC7D,CAAC;QACJ,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE;YAC5D,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;gBAC/B,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,UAAU,CAAC,eAAe;oBACpC,WAAW,EAAE,UAAU,CAAC,kBAAkB;oBAC1C,YAAY,EAAE,UAAU,CAAC,WAAW;oBACpC,UAAU,EAAE,UAAU,CAAC,SAAS;iBACjC,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;gBAC3C,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,UAAU,CAAC,SAAS;iBACjC,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC;YACzC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,MAAM,EAAE,aAAa;oBACrB,KAAK,EAAE,gCAAgC;oBACvC,UAAU,EAAE,UAAU,CAAC,SAAS;iBACjC,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE;gBACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE,gCAAgC,QAAQ,CAAC,MAAM,EAAE;oBACxD,YAAY,EAAE,SAAS;oBACvB,UAAU,EAAE,UAAU,CAAC,SAAS;iBACjC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3D,MAAM,WAAW,GACf,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,0BAA0B,CAAC;YAC7B,MAAM,OAAO,GAAG,gBAAgB,CAC9B,uBAAuB,EACvB,GAAG,UAAU,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,WAAW,EAAE,CACnF,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;gBACtB,EAAE,EAAE,OAAO;gBACX,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,SAAS;gBAC9C,IAAI,EAAE,OAAO,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,WAAW,EAAE;gBAC7D,YAAY,EAAE,WAAW;gBACzB,SAAS,EAAE,UAAU,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,MAAM,SAAS,GACb,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;YACrE,MAAM,uBAAuB,CAC3B,UAAU,CAAC,OAAO,EAClB,KAAK,CAAC,EAAE,EACR,GAAG,OAAO,IAAI,SAAS,EAAE,EACzB,KAAK,EACL,WAAW,CACZ,CAAC;YACF,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC;YAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,WAAW,EAAE,GAAG,UAAU,CAAC,OAAO,IAAI,OAAO,IAAI,SAAS,EAAE;gBAC5D,YAAY,EAAE,SAAS;gBACvB,UAAU,EAAE,UAAU,CAAC,SAAS;aACjC,CAAC;QACJ,CAAC;QACD,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/headless-job-runner.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Headless job start — run a workflow through `@nodetool-ai/execution`'s
+ * `ExecutionSession` without a WebSocket connection.
+ *
+ * This is the minimal load-graph → `Job.create` → `ExecutionSession` →
+ * persist-terminal-status path, shared by the trigger dispatcher (which wakes
+ * a workflow up for a stored trigger event) and, later, an HTTP run route.
+ * Graph hydration, executor resolution, and the Python-bridge connection are
+ * owned by the facade, same as the CLI's headless run
+ * (`nodetool workflows run`).
+ *
+ * The `Job` row is created with status `running` *before* the run starts, so
+ * the job is visible in the jobs UI / tRPC list while it executes; the
+ * terminal status (`completed` / `failed` / `cancelled`) is
+ * persisted when the runner settles. A job cancelled externally via the
+ * DB-only cancel path (tRPC `jobs.cancel`) keeps its `cancelled` status.
+ */
+import { type NodeRegistry } from "@nodetool-ai/node-sdk";
+import type { SupervisorRunOptions } from "@nodetool-ai/protocol";
+/** Wake-up payload for a trigger-driven run (protocol `trigger_event` shape). */
+interface HeadlessTriggerEvent {
+    node_id: string;
+    payload: unknown;
+    input_id: string;
+}
+export interface StartHeadlessJobOptions {
+    workflowId: string;
+    userId: string;
+    /** Stamped onto the run request as `trigger_event`; the kernel propagates it to `ProcessingContext.triggerEvent`. */
+    triggerEvent?: HeadlessTriggerEvent | null;
+    params?: Record<string, unknown>;
+    /** Fixed job id (e.g. for idempotent dispatch); defaults to a generated one. */
+    jobId?: string;
+    jobName?: string;
+    /** Node registry to resolve executors from. Defaults to the bootstrapped server registry. */
+    registry?: NodeRegistry;
+    /**
+     * Supervise this run (docs/workflow-supervisor-design.md). Off unless the
+     * caller asks — the trigger dispatcher passes the registration's own flag,
+     * which defaults to off. Without a configured supervisor model
+     * (`NODETOOL_SUPERVISOR_PROVIDER` / `NODETOOL_SUPERVISOR_MODEL`) the run
+     * proceeds unsupervised rather than failing.
+     */
+    supervise?: boolean;
+    /** Supervisor configuration. Ignored unless `supervise` is true. */
+    supervisor?: SupervisorRunOptions | null;
+    /**
+     * Called once the run is *accepted* — the workflow resolved and the `Job` row
+     * exists — which is long before this function's promise settles on terminal
+     * status. Callers that must not block for the run's whole duration (the
+     * trigger dispatcher) use it as their handoff point. A throwing callback is
+     * swallowed: acceptance reporting must never fail the run.
+     */
+    onAccepted?: (jobId: string) => void;
+}
+export type HeadlessJobStatus = "completed" | "failed" | "cancelled";
+interface HeadlessJobResult {
+    jobId: string;
+    status: HeadlessJobStatus;
+    error: string | null;
+    outputs: Record<string, unknown[]>;
+}
+/**
+ * Start a workflow run without a WebSocket connection and resolve with its
+ * terminal status. Throws when the workflow doesn't exist for the user;
+ * run-time failures resolve with `status: "failed"` (and a failed Job row)
+ * instead of rejecting, so dispatch loops can treat every settled run alike.
+ */
+export declare function startHeadlessJob(options: StartHeadlessJobOptions): Promise<HeadlessJobResult>;
+export {};
+//# sourceMappingURL=headless-job-runner.d.ts.map

package/dist/headless-job-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless-job-runner.d.ts","sourceRoot":"","sources":["../src/headless-job-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAWH,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAclE,iFAAiF;AACjF,UAAU,oBAAoB;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,qHAAqH;IACrH,YAAY,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,oEAAoE;IACpE,UAAU,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACzC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAErE,UAAU,iBAAiB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;CACpC;AA2CD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAmI5B"}

package/dist/headless-job-runner.js

@@ -0,0 +1,198 @@
+/**
+ * Headless job start — run a workflow through `@nodetool-ai/execution`'s
+ * `ExecutionSession` without a WebSocket connection.
+ *
+ * This is the minimal load-graph → `Job.create` → `ExecutionSession` →
+ * persist-terminal-status path, shared by the trigger dispatcher (which wakes
+ * a workflow up for a stored trigger event) and, later, an HTTP run route.
+ * Graph hydration, executor resolution, and the Python-bridge connection are
+ * owned by the facade, same as the CLI's headless run
+ * (`nodetool workflows run`).
+ *
+ * The `Job` row is created with status `running` *before* the run starts, so
+ * the job is visible in the jobs UI / tRPC list while it executes; the
+ * terminal status (`completed` / `failed` / `cancelled`) is
+ * persisted when the runner settles. A job cancelled externally via the
+ * DB-only cancel path (tRPC `jobs.cancel`) keeps its `cancelled` status.
+ */
+import { createLogger, getDefaultAssetsPath } from "@nodetool-ai/config";
+import { ExecutionSession, isExecutionPreflightError, normalizeGraph, toRawGraphInput } from "@nodetool-ai/execution";
+import { Job, Workflow, getSecret } from "@nodetool-ai/models";
+import { createGraphNodeTypeResolver } from "@nodetool-ai/node-sdk";
+import { PERMISSION_GATE_CONTEXT_KEY, ProcessingContext, headlessGate } from "@nodetool-ai/runtime";
+import { FileStorageAdapter } from "@nodetool-ai/storage";
+import { createRunSupervisor } from "./run-supervisor.js";
+import { documentModelInterfaces } from "./lib/document-model-interfaces.js";
+import { resolveWorkflowWorkspace } from "./lib/workflow-workspace.js";
+import { getAssetAdapter } from "./lib/storage.js";
+const log = createLogger("nodetool.websocket.headless-job");
+// Lazily bootstrap the full registry only when no registry is injected, so
+// callers that already hold the server's registry (dispatcher, tests) never
+// pay for pack loading.
+let defaultRegistryPromise = null;
+async function getDefaultRegistry() {
+    if (!defaultRegistryPromise) {
+        defaultRegistryPromise = import("./node-registry-setup.js").then((m) => m.bootstrapNodeRegistry({ log }));
+    }
+    return defaultRegistryPromise;
+}
+/** Persist the runner's terminal status onto the Job row. */
+async function persistTerminalStatus(jobId, result) {
+    try {
+        const job = await Job.get(jobId);
+        if (!job)
+            return;
+        // A DB-only cancel (tRPC `jobs.cancel`) can finalize the row as cancelled
+        // while the run is still executing. Don't overwrite that.
+        if (job.status === "cancelled")
+            return;
+        if (result.status === "completed") {
+            job.markCompleted();
+        }
+        else if (result.status === "cancelled") {
+            job.markCancelled();
+        }
+        else {
+            job.markFailed(result.error ?? "Workflow run failed");
+        }
+        await job.save();
+    }
+    catch (err) {
+        log.error("headless job terminal-status persistence failed", {
+            jobId,
+            error: err instanceof Error ? err.message : String(err)
+        });
+    }
+}
+/**
+ * Start a workflow run without a WebSocket connection and resolve with its
+ * terminal status. Throws when the workflow doesn't exist for the user;
+ * run-time failures resolve with `status: "failed"` (and a failed Job row)
+ * instead of rejecting, so dispatch loops can treat every settled run alike.
+ */
+export async function startHeadlessJob(options) {
+    const { workflowId, userId } = options;
+    const workflow = await Workflow.find(userId, workflowId);
+    if (!workflow) {
+        throw new Error(`Workflow not found: ${workflowId}`);
+    }
+    const graph = normalizeGraph(workflow.getGraph());
+    const registry = options.registry ?? (await getDefaultRegistry());
+    const params = options.params ?? {};
+    // Create the Job row before running so the run is visible in the jobs list
+    // (UI, tRPC `jobs.list`) while it's in flight.
+    const jobFields = {
+        workflow_id: workflowId,
+        user_id: userId,
+        status: "running",
+        name: options.jobName ?? workflow.name ?? "",
+        started_at: new Date().toISOString(),
+        params,
+        graph: { ...graph },
+        project_id: workflow.project_id
+    };
+    if (options.jobId !== undefined) {
+        jobFields.id = options.jobId;
+    }
+    const job = await Job.create(jobFields);
+    // The run is accepted from here on: everything above could still reject and
+    // leave the caller free to redeliver, everything below is an executing run.
+    try {
+        options.onAccepted?.(job.id);
+    }
+    catch (err) {
+        log.warn("headless job onAccepted callback threw", {
+            jobId: job.id,
+            error: err instanceof Error ? err.message : String(err)
+        });
+    }
+    const workspace = await resolveWorkflowWorkspace(workflowId, userId);
+    const context = new ProcessingContext({
+        jobId: job.id,
+        workflowId,
+        userId,
+        secretResolver: getSecret,
+        storage: new FileStorageAdapter(getDefaultAssetsPath()),
+        // `asset://<id>` inputs resolve through the configured asset store, which
+        // is only the local assets dir on a `file` backend. Without it a triggered
+        // run on an S3/Supabase deployment reads every uploaded input as empty.
+        assetStorage: getAssetAdapter(),
+        workspace
+    });
+    context.setModelInterfaces(documentModelInterfaces());
+    // Nobody is watching a triggered run, so an agent loop inside it gates in
+    // `auto` and every escalation is denied. Set here, not left for a fallback:
+    // `gateFromContext` treats a context with no gate as a host bug.
+    context.set(PERMISSION_GATE_CONTEXT_KEY, headlessGate("headless job runner"));
+    log.info("Headless job started", {
+        jobId: job.id,
+        workflowId,
+        triggered: Boolean(options.triggerEvent)
+    });
+    // ExecutionSession owns graph hydration, the Python-bridge connection
+    // (lazily connected, exactly like the CLI's `workflows run`; pure-TS graphs
+    // get no bridge at all), and executor resolution (registry → Python bridge
+    // → throw). `session.result` never rejects — kernel failures (including an
+    // unknown node type) resolve as `status: "failed"` instead of throwing, so
+    // the job still settles instead of leaving a phantom "running" row behind.
+    const supervisor = await createRunSupervisor({
+        supervise: options.supervise,
+        supervisor: options.supervisor,
+        context
+    });
+    const sessionOptions = {
+        graph: toRawGraphInput(graph),
+        registry,
+        // `normalizeGraph` fixes shape, not types: it never fills `propertyTypes`,
+        // and correlation analysis reads list-ness only from that map. Without the
+        // resolver every `list[...]` handle reads as non-list, so a stream
+        // arriving on one collapses to empty scope and the node runs once on the
+        // last value — the same job producing less than it does under
+        // `workflows run`.
+        resolveNodeType: createGraphNodeTypeResolver(registry).resolveNodeType,
+        jobId: job.id,
+        workflowId,
+        params,
+        projectId: job.project_id,
+        triggerEvent: options.triggerEvent ?? null,
+        context
+    };
+    if (supervisor) {
+        sessionOptions.supervisor = supervisor;
+    }
+    // The job row already exists, so a refusal must finalize it — a bare throw
+    // stranded it at "running" forever. `create()` refuses a graph this runtime
+    // cannot honour (unknown model, unregistered provider, missing credential)
+    // before the kernel starts.
+    let session;
+    try {
+        session = await ExecutionSession.create(sessionOptions);
+    }
+    catch (err) {
+        if (!isExecutionPreflightError(err))
+            throw err;
+        await persistTerminalStatus(job.id, {
+            status: "failed",
+            error: err.message,
+            outputs: {},
+            messages: []
+        });
+        log.info("Headless job refused", { jobId: job.id, error: err.message });
+        return {
+            jobId: job.id,
+            status: "failed",
+            error: err.message,
+            outputs: {}
+        };
+    }
+    const result = await session.result;
+    await persistTerminalStatus(job.id, result);
+    log.info("Headless job finished", { jobId: job.id, status: result.status });
+    return {
+        jobId: job.id,
+        status: result.status,
+        error: result.error ?? null,
+        outputs: result.outputs ?? {}
+    };
+}
+//# sourceMappingURL=headless-job-runner.js.map

package/dist/headless-job-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless-job-runner.js","sourceRoot":"","sources":["../src/headless-job-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,cAAc,EACd,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EACL,2BAA2B,EAE5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,GAAG,GAAG,YAAY,CAAC,iCAAiC,CAAC,CAAC;AAiD5D,2EAA2E;AAC3E,4EAA4E;AAC5E,wBAAwB;AACxB,IAAI,sBAAsB,GAAiC,IAAI,CAAC;AAEhE,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,sBAAsB,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACrE,CAAC,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,6DAA6D;AAC7D,KAAK,UAAU,qBAAqB,CAClC,KAAa,EACb,MAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,0EAA0E;QAC1E,0DAA0D;QAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACzC,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,iDAAiD,EAAE;YAC3D,KAAK;YACL,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAEpC,2EAA2E;IAC3E,+CAA+C;IAC/C,MAAM,SAAS,GAAqC;QAClD,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,IAAI,EAAE;QAC5C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM;QACN,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;QACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAExC,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,CAAC;QACH,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACjD,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC;QACpC,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,UAAU;QACV,MAAM;QACN,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,CAAC;QACvD,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,YAAY,EAAE,eAAe,EAAE;QAC/B,SAAS;KACV,CAAC,CAAC;IACH,OAAO,CAAC,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,CAAC;IACtD,0EAA0E;IAC1E,4EAA4E;IAC5E,iEAAiE;IACjE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAE9E,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE;QAC/B,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,UAAU;QACV,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;KACzC,CAAC,CAAC;IAEH,sEAAsE;IACtE,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC;QAC3C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,cAAc,GAAkD;QACpE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;QAC7B,QAAQ;QACR,2EAA2E;QAC3E,2EAA2E;QAC3E,mEAAmE;QACnE,yEAAyE;QACzE,8DAA8D;QAC9D,mBAAmB;QACnB,eAAe,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC,eAAe;QACtE,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,UAAU;QACV,MAAM;QACN,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC1C,OAAO;KACR,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,cAAc,CAAC,UAAU,GAAG,UAAU,CAAC;IACzC,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,4BAA4B;IAC5B,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;QAC/C,MAAM,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE;YAClC,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,GAAG,CAAC,OAAO;YAClB,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,EAAE;SACA,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,GAAG,CAAC,OAAO;YAClB,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;IAEpC,MAAM,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5C,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;KAC9B,CAAC;AACJ,CAAC"}