@nodetool-ai/workflow-runner 0.8.1

package/README.md

@@ -0,0 +1,57 @@
+# @nodetool-ai/workflow-runner
+
+Portable workflow runner — turns a graph + NodeRegistry into a `(Request) => Response` handler for Vercel, Cloudflare Workers, or any Web-standard runtime, for [NodeTool](https://nodetool.ai).
+
+Wraps the kernel `WorkflowRunner` with a transport- and runtime-agnostic surface: an async-generator streaming API and a Server-Sent-Events HTTP handler built on Web-standard `Request`/`Response`/`ReadableStream`. Runs on Vercel (Node + Edge), Cloudflare Workers, Bun, and Deno. A `./browser` entry runs graphs entirely in-browser.
+
+## Install
+
+```bash
+npm install @nodetool-ai/workflow-runner
+```
+
+## Exported symbols
+
+| Symbol | Kind | Description |
+| --- | --- | --- |
+| `runWorkflow` | function | Run a graph against a `NodeRegistry`, yielding live `ProcessingMessage`s |
+| `RunWorkflowOptions` | interface | Options: graph, registry, params, context, storage, secrets, signal |
+| `GraphData` | type | `{ nodes, edges }` graph shape |
+| `createWorkflowHandler` | function | Build a `(Request) => Response` SSE handler from a registry |
+| `CreateWorkflowHandlerOptions` | interface | Handler options: registry, `createContext`, `beforeRun`, platform |
+| `WorkflowRequestBody` | interface | Parsed request body (`graph`, `params`, `workflow_id`, `job_id`) |
+| `envSecretResolver` | function | Secret resolver backed by environment variables |
+| `createBrowserRegistry` | function | Build a `NodeRegistry` of browser-runnable nodes (`./browser`) |
+| `runBrowserWorkflow` | function | Run a graph in the browser (`./browser`) |
+| `graphRunsInRegistry` | function | Check whether a graph's nodes are all present in a registry (`./browser`) |
+
+## Usage
+
+```ts
+import { createWorkflowHandler, envSecretResolver } from "@nodetool-ai/workflow-runner";
+import { NodeRegistry } from "@nodetool-ai/node-sdk";
+
+const registry = new NodeRegistry();
+// ...register the nodes available in this deployment
+
+// A Web-standard fetch handler — export it from a Vercel / Cloudflare route
+export const POST = createWorkflowHandler({
+  registry,
+  createContext: () => ({ secretResolver: envSecretResolver }) as never
+});
+```
+
+Or drive the run directly and stream messages:
+
+```ts
+import { runWorkflow } from "@nodetool-ai/workflow-runner";
+
+for await (const message of runWorkflow({ graph, registry, params })) {
+  console.log(message.type, message);
+}
+```
+
+## Links
+
+- [NodeTool](https://nodetool.ai)
+- [GitHub](https://github.com/nodetool-ai/nodetool)

package/dist/.nodetool-build-stamp

@@ -0,0 +1 @@
+2026-09-28T09:19:17.031Z

package/dist/browser.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Browser-side workflow execution.
+ *
+ * Thin, reusable helpers that let a Web client (React app, Electron renderer,
+ * React Native WebView, edge isolate, …) execute a sub-graph of **pure browser
+ * nodes** locally — no server round-trip — while emitting the *exact same*
+ * `ProcessingMessage` stream the unified WebSocket server produces.
+ *
+ * The kernel `WorkflowRunner` and `ProcessingContext` are already runtime- and
+ * transport-agnostic (no static `node:fs`/`child_process` deps; node built-ins
+ * load lazily and degrade in the browser). What was missing was a small façade
+ * that (1) builds a `NodeRegistry` scoped to the `"browser"` platform and
+ * (2) stamps every emitted message with `job_id`/`workflow_id` so a consumer
+ * can route browser-produced messages through the very same pipeline it uses
+ * for server messages.
+ *
+ * The node classes are injected by the caller (keeping this package agnostic of
+ * any concrete node set) — pass `ALL_BROWSER_NODES` from
+ * `@nodetool-ai/base-nodes/platforms/browser`, or any curated `NodeClass[]`.
+ */
+import type { RunResult } from "@nodetool-ai/kernel";
+import { NodeRegistry, type NodeClass } from "@nodetool-ai/node-sdk";
+import type { Platform, ProcessingMessage } from "@nodetool-ai/protocol";
+import { type GraphData, type RunWorkflowOptions } from "./run.js";
+export type { GraphData };
+/**
+ * Build a `NodeRegistry` containing only the classes that declare support for
+ * the `"browser"` platform. Classes that don't support the browser are dropped
+ * (defence in depth — the curated browser set should already be browser-safe).
+ */
+export declare function createBrowserRegistry(nodeClasses: readonly NodeClass[], platform?: Platform): NodeRegistry;
+export declare function graphRunsInRegistry(graph: GraphData, registry: Pick<NodeRegistry, "has">): boolean;
+export interface RunBrowserWorkflowOptions extends Omit<RunWorkflowOptions, "platform"> {
+    /**
+     * Platform to validate the graph against. Defaults to `"browser"` so a graph
+     * containing a server-only node fails fast (before any actor spawns) instead
+     * of throwing deep inside a node's `process()`.
+     */
+    platform?: Platform;
+}
+/**
+ * Execute a browser graph and yield `ProcessingMessage`s shaped like the
+ * unified WebSocket server's stream: every message carries `job_id` and
+ * `workflow_id`, so a client can route them through the same handler it uses
+ * for server-sent messages. The final `RunResult` is the generator's return
+ * value.
+ *
+ * ```ts
+ * const registry = createBrowserRegistry(ALL_BROWSER_NODES);
+ * const gen = runBrowserWorkflow({ graph, registry, workflowId, jobId });
+ * for (let r = await gen.next(); !r.done; r = await gen.next()) {
+ *   deliver(r.value); // a ProcessingMessage, already stamped
+ * }
+ * const result = (await gen.next()).value; // RunResult on `done`
+ * ```
+ */
+export declare function runBrowserWorkflow(opts: RunBrowserWorkflowOptions): AsyncGenerator<ProcessingMessage, RunResult, void>;
+//# sourceMappingURL=browser.d.ts.map

package/dist/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAe,KAAK,SAAS,EAAE,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEhF,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,SAAS,SAAS,EAAE,EACjC,QAAQ,GAAE,QAAoB,GAC7B,YAAY,CAOd;AAeD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,GAClC,OAAO,CAIT;AAED,MAAM,WAAW,yBACf,SAAQ,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAuB,kBAAkB,CACvC,IAAI,EAAE,yBAAyB,GAC9B,cAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,IAAI,CAAC,CAiBpD"}

package/dist/browser.js

@@ -0,0 +1,118 @@
+/**
+ * Browser-side workflow execution.
+ *
+ * Thin, reusable helpers that let a Web client (React app, Electron renderer,
+ * React Native WebView, edge isolate, …) execute a sub-graph of **pure browser
+ * nodes** locally — no server round-trip — while emitting the *exact same*
+ * `ProcessingMessage` stream the unified WebSocket server produces.
+ *
+ * The kernel `WorkflowRunner` and `ProcessingContext` are already runtime- and
+ * transport-agnostic (no static `node:fs`/`child_process` deps; node built-ins
+ * load lazily and degrade in the browser). What was missing was a small façade
+ * that (1) builds a `NodeRegistry` scoped to the `"browser"` platform and
+ * (2) stamps every emitted message with `job_id`/`workflow_id` so a consumer
+ * can route browser-produced messages through the very same pipeline it uses
+ * for server messages.
+ *
+ * The node classes are injected by the caller (keeping this package agnostic of
+ * any concrete node set) — pass `ALL_BROWSER_NODES` from
+ * `@nodetool-ai/base-nodes/platforms/browser`, or any curated `NodeClass[]`.
+ */
+import { NodeRegistry } from "@nodetool-ai/node-sdk";
+import { runWorkflow } from "./run.js";
+/**
+ * Build a `NodeRegistry` containing only the classes that declare support for
+ * the `"browser"` platform. Classes that don't support the browser are dropped
+ * (defence in depth — the curated browser set should already be browser-safe).
+ */
+export function createBrowserRegistry(nodeClasses, platform = "browser") {
+    const registry = new NodeRegistry();
+    for (const nodeClass of nodeClasses) {
+        if (!nodeClass?.nodeType)
+            continue;
+        registry.register(nodeClass);
+    }
+    return registry.forPlatform(platform);
+}
+/**
+ * True iff every node in `graph` resolves to a class registered in `registry`.
+ * A graph that passes can run entirely client-side; one that doesn't must be
+ * sent to the server (it references nodes the browser can't execute).
+ */
+/**
+ * Whether a node from an untrusted graph actually names a type. Generic in the
+ * caller's type so it narrows the declared `string` and a wire value alike.
+ */
+function isNodeType(value) {
+    return typeof value === "string" && value !== "";
+}
+export function graphRunsInRegistry(graph, registry) {
+    const nodes = graph?.nodes ?? [];
+    if (nodes.length === 0)
+        return false;
+    return nodes.every((node) => isNodeType(node.type) && registry.has(node.type));
+}
+/**
+ * Execute a browser graph and yield `ProcessingMessage`s shaped like the
+ * unified WebSocket server's stream: every message carries `job_id` and
+ * `workflow_id`, so a client can route them through the same handler it uses
+ * for server-sent messages. The final `RunResult` is the generator's return
+ * value.
+ *
+ * ```ts
+ * const registry = createBrowserRegistry(ALL_BROWSER_NODES);
+ * const gen = runBrowserWorkflow({ graph, registry, workflowId, jobId });
+ * for (let r = await gen.next(); !r.done; r = await gen.next()) {
+ *   deliver(r.value); // a ProcessingMessage, already stamped
+ * }
+ * const result = (await gen.next()).value; // RunResult on `done`
+ * ```
+ */
+export async function* runBrowserWorkflow(opts) {
+    const jobId = opts.jobId ?? generateJobId();
+    const workflowId = opts.workflowId ?? null;
+    const gen = runWorkflow({
+        ...opts,
+        jobId,
+        platform: opts.platform ?? "browser"
+    });
+    while (true) {
+        const next = await gen.next();
+        if (next.done) {
+            return stampResult(next.value, jobId, workflowId);
+        }
+        yield stamp(next.value, jobId, workflowId);
+    }
+}
+function stamp(message, jobId, workflowId) {
+    // SAFETY: `job_id`/`workflow_id` are routing fields the transport stamps on
+    // every message, but a few union variants (`save_update`, for one) do not
+    // declare them — so both the read and the stamped result go through the
+    // routing shape instead of re-declaring the fields on each variant.
+    const routing = message;
+    // SAFETY: the spread preserves `message`'s own discriminant and fields, so
+    // the result is the same variant it went in as, plus the two routing fields.
+    return {
+        ...message,
+        job_id: routing.job_id ?? jobId,
+        workflow_id: routing.workflow_id ?? workflowId
+    };
+}
+function stampResult(result, jobId, workflowId) {
+    return {
+        ...result,
+        messages: result.messages.map((m) => stamp(m, jobId, workflowId))
+    };
+}
+function generateJobId() {
+    // SAFETY: `crypto.randomUUID` is absent from older browsers and from
+    // non-secure contexts, and the DOM lib types it as always present — so the
+    // optional shape here is what the guard below actually checks.
+    const g = globalThis;
+    if (g.crypto?.randomUUID)
+        return g.crypto.randomUUID();
+    return `job_${Date.now().toString(36)}_${Math.random()
+        .toString(36)
+        .slice(2, 10)}`;
+}
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,YAAY,EAAkB,MAAM,uBAAuB,CAAC;AAErE,OAAO,EAAE,WAAW,EAA2C,MAAM,UAAU,CAAC;AAIhF;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAiC,EACjC,QAAQ,GAAa,SAAS;IAE9B,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,EAAE,QAAQ;YAAE,SAAS;QACnC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH;;;GAGG;AACH,SAAS,UAAU,CAAI,KAAQ;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAgB,EAChB,QAAmC;IAEnC,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjF,CAAC;AAYD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CACvC,IAA+B;IAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,aAAa,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAE3C,MAAM,GAAG,GAAG,WAAW,CAAC;QACtB,GAAG,IAAI;QACP,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;KACrC,CAAC,CAAC;IAEH,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AASD,SAAS,KAAK,CACZ,OAA0B,EAC1B,KAAa,EACb,UAAyB;IAEzB,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,OAAO,GAAG,OAAyB,CAAC;IAC1C,2EAA2E;IAC3E,6EAA6E;IAC7E,OAAO;QACL,GAAG,OAAO;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,UAAU;KAC1B,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAClB,MAAiB,EACjB,KAAa,EACb,UAAyB;IAEzB,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,qEAAqE;IACrE,2EAA2E;IAC3E,+DAA+D;IAC/D,MAAM,CAAC,GAAG,UAAwD,CAAC;IACnE,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACvD,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE;SACnD,QAAQ,CAAC,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpB,CAAC"}

package/dist/env-secret-resolver.d.ts

@@ -0,0 +1,7 @@
+/**
+ * envSecretResolver — adapt an env-vars dictionary to ProcessingContext's
+ * `secretResolver` shape. Use this when there is no OS keychain (serverless,
+ * Workers) and secrets arrive via platform-managed environment variables.
+ */
+export declare function envSecretResolver(env: Record<string, string | undefined>): (key: string) => string | null;
+//# sourceMappingURL=env-secret-resolver.d.ts.map

package/dist/env-secret-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-secret-resolver.d.ts","sourceRoot":"","sources":["../src/env-secret-resolver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAEhC"}

package/dist/env-secret-resolver.js

@@ -0,0 +1,9 @@
+/**
+ * envSecretResolver — adapt an env-vars dictionary to ProcessingContext's
+ * `secretResolver` shape. Use this when there is no OS keychain (serverless,
+ * Workers) and secrets arrive via platform-managed environment variables.
+ */
+export function envSecretResolver(env) {
+    return (key) => env[key] ?? null;
+}
+//# sourceMappingURL=env-secret-resolver.js.map

package/dist/env-secret-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-secret-resolver.js","sourceRoot":"","sources":["../src/env-secret-resolver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAuC;IAEvC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACnC,CAAC"}

package/dist/handler.d.ts

@@ -0,0 +1,61 @@
+/**
+ * createWorkflowHandler — a (Request) => Response handler that runs a workflow
+ * and streams messages as Server-Sent Events.
+ *
+ * Works on Vercel (Node + Edge), Cloudflare Workers, Bun, Deno — anywhere
+ * Web standard `Request`/`Response`/`ReadableStream` are available.
+ *
+ * Request body (JSON):
+ *   {
+ *     "graph":       { "nodes": [...], "edges": [...] },
+ *     "params":      { ... },         // optional, keyed by input-node name
+ *     "workflow_id": "...",            // optional
+ *     "job_id":      "..."             // optional
+ *   }
+ *
+ * Response: text/event-stream
+ *   data: { ...ProcessingMessage }
+ *   ...
+ *   event: result
+ *   data: { ...RunResult }
+ *
+ * Note: request parse/validation errors are returned as JSON (4xx). Once
+ * the SSE Response is created, workflow failures are reported as an SSE
+ * `error` event (HTTP 200).
+ */
+import type { Platform, ProcessingMessage } from "@nodetool-ai/protocol";
+import type { NodeRegistry } from "@nodetool-ai/node-sdk";
+import { ProcessingContext } from "@nodetool-ai/runtime/context";
+import { type GraphData, type RunWorkflowOptions } from "./run.js";
+export interface CreateWorkflowHandlerOptions {
+    /** NodeRegistry pre-populated with the nodes available in this deployment. */
+    registry: NodeRegistry;
+    /**
+     * Optional per-request context factory. Receives the incoming Request so
+     * the caller can wire env-specific bindings (R2/S3 client, secrets, etc.).
+     * Returning `void` falls back to a minimal in-memory context.
+     */
+    createContext?: (req: Request) => ProcessingContext | Promise<ProcessingContext> | void | Promise<void>;
+    /**
+     * Optional hook to transform / authorize the parsed request body before
+     * execution. Throw to abort with a 4xx; return a body to use it.
+     */
+    beforeRun?: (body: WorkflowRequestBody, req: Request) => WorkflowRequestBody | Promise<WorkflowRequestBody>;
+    /**
+     * Deployment platform this handler serves. When set, the runner rejects
+     * graphs containing nodes that do not declare support for this platform.
+     * The registry passed in should normally have been filtered with
+     * `registry.forPlatform(platform)` for matching bundle / runtime semantics.
+     */
+    platform?: Platform;
+}
+export interface WorkflowRequestBody {
+    graph: GraphData;
+    /** The run's params, exactly as `runWorkflow` takes them. */
+    params?: RunWorkflowOptions["params"];
+    workflow_id?: string;
+    job_id?: string;
+}
+export declare function createWorkflowHandler(opts: CreateWorkflowHandlerOptions): (req: Request) => Promise<Response>;
+export type { ProcessingMessage };
+//# sourceMappingURL=handler.d.ts.map

package/dist/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAe,KAAK,SAAS,EAAE,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEhF,MAAM,WAAW,4BAA4B;IAC3C,8EAA8E;IAC9E,QAAQ,EAAE,YAAY,CAAC;IAEvB;;;;OAIG;IACH,aAAa,CAAC,EAAE,CACd,GAAG,EAAE,OAAO,KAEV,iBAAiB,GACjB,OAAO,CAAC,iBAAiB,CAAC,GAC1B,IAAI,GACJ,OAAO,CAAC,IAAI,CAAC,CAAC;IAElB;;;OAGG;IACH,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,mBAAmB,EACzB,GAAG,EAAE,OAAO,KACT,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAExD;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,4BAA4B,GACjC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA+ErC;AAoCD,YAAY,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/handler.js

@@ -0,0 +1,129 @@
+/**
+ * createWorkflowHandler — a (Request) => Response handler that runs a workflow
+ * and streams messages as Server-Sent Events.
+ *
+ * Works on Vercel (Node + Edge), Cloudflare Workers, Bun, Deno — anywhere
+ * Web standard `Request`/`Response`/`ReadableStream` are available.
+ *
+ * Request body (JSON):
+ *   {
+ *     "graph":       { "nodes": [...], "edges": [...] },
+ *     "params":      { ... },         // optional, keyed by input-node name
+ *     "workflow_id": "...",            // optional
+ *     "job_id":      "..."             // optional
+ *   }
+ *
+ * Response: text/event-stream
+ *   data: { ...ProcessingMessage }
+ *   ...
+ *   event: result
+ *   data: { ...RunResult }
+ *
+ * Note: request parse/validation errors are returned as JSON (4xx). Once
+ * the SSE Response is created, workflow failures are reported as an SSE
+ * `error` event (HTTP 200).
+ */
+import { ProcessingContext } from "@nodetool-ai/runtime/context";
+import { runWorkflow } from "./run.js";
+export function createWorkflowHandler(opts) {
+    return async function handle(req) {
+        if (req.method !== "POST") {
+            return jsonError(405, "method_not_allowed");
+        }
+        let body;
+        try {
+            // SAFETY: an untrusted HTTP body. Nothing is read from it before the
+            // object/`graph` check below, and the graph itself is validated against
+            // the node registry by `runWorkflow`, which rejects an unknown node type.
+            body = (await req.json());
+        }
+        catch {
+            return jsonError(400, "invalid_json");
+        }
+        if (!isObjectBody(body) || !body.graph) {
+            return jsonError(400, "missing_graph");
+        }
+        try {
+            if (opts.beforeRun)
+                body = await opts.beforeRun(body, req);
+        }
+        catch {
+            return jsonError(400, "before_run_failed");
+        }
+        const context = (await opts.createContext?.(req)) ?? undefined;
+        const runOpts = {
+            graph: body.graph,
+            registry: opts.registry,
+            params: body.params,
+            workflowId: body.workflow_id,
+            jobId: body.job_id,
+            context: context instanceof ProcessingContext ? context : undefined,
+            signal: req.signal,
+            platform: opts.platform
+        };
+        const stream = new ReadableStream({
+            async start(controller) {
+                const enc = new TextEncoder();
+                const write = (chunk) => {
+                    controller.enqueue(enc.encode(chunk));
+                };
+                try {
+                    const gen = runWorkflow(runOpts);
+                    while (true) {
+                        const { value, done } = await gen.next();
+                        if (done) {
+                            write(formatSse("result", value));
+                            break;
+                        }
+                        write(formatSse(null, value));
+                    }
+                }
+                catch {
+                    write(formatSse("error", {
+                        message: "Workflow execution failed"
+                    }));
+                }
+                finally {
+                    controller.close();
+                }
+            },
+            cancel() {
+                // Request aborted — runWorkflow honours opts.signal.
+            }
+        });
+        return new Response(stream, {
+            status: 200,
+            headers: {
+                "content-type": "text/event-stream; charset=utf-8",
+                "cache-control": "no-cache, no-transform",
+                "x-accel-buffering": "no",
+                connection: "keep-alive"
+            }
+        });
+    };
+}
+/** Whether a decoded JSON body arrived as an object at all. */
+function isObjectBody(body) {
+    return typeof body === "object" && body !== null;
+}
+function formatSse(event, data) {
+    const payload = JSON.stringify(data);
+    const prefix = event ? `event: ${event}\n` : "";
+    return `${prefix}data: ${payload}\n\n`;
+}
+const ERROR_MESSAGES = new Map([
+    ["method_not_allowed", "POST required"],
+    ["invalid_json", "Body must be valid JSON"],
+    ["missing_graph", "Body must include a `graph`"],
+    ["before_run_failed", "beforeRun hook failed"]
+]);
+function jsonError(status, code) {
+    return new Response(JSON.stringify({
+        error: code,
+        message: ERROR_MESSAGES.get(code) ?? "Request failed"
+    }), {
+        status,
+        headers: { "content-type": "application/json" }
+    });
+}
+//# sourceMappingURL=handler.js.map

package/dist/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,WAAW,EAA2C,MAAM,UAAU,CAAC;AA6ChF,MAAM,UAAU,qBAAqB,CACnC,IAAkC;IAElC,OAAO,KAAK,UAAU,MAAM,CAAC,GAAY;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,IAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,qEAAqE;YACrE,wEAAwE;YACxE,0EAA0E;YAC1E,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,SAAS;gBAAE,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC;QAC/D,MAAM,OAAO,GAAuB;YAClC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,OAAO,EAAE,OAAO,YAAY,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACnE,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;YAC5C,KAAK,CAAC,KAAK,CAAC,UAAU;gBACpB,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,CAAC,KAAa,EAAQ,EAAE;oBACpC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxC,CAAC,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;oBACjC,OAAO,IAAI,EAAE,CAAC;wBACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;wBACzC,IAAI,IAAI,EAAE,CAAC;4BACT,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;4BAClC,MAAM;wBACR,CAAC;wBACD,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;oBAChC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,CACH,SAAS,CAAC,OAAO,EAAE;wBACjB,OAAO,EAAE,2BAA2B;qBACrC,CAAC,CACH,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,MAAM;gBACJ,qDAAqD;YACvD,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,kCAAkC;gBAClD,eAAe,EAAE,wBAAwB;gBACzC,mBAAmB,EAAE,IAAI;gBACzB,UAAU,EAAE,YAAY;aACzB;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAS,YAAY,CAAI,IAAO;IAC9B,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC;AACnD,CAAC;AAKD,SAAS,SAAS,CAAC,KAAoB,EAAE,IAAa;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,OAAO,GAAG,MAAM,SAAS,OAAO,MAAM,CAAC;AACzC,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAiB;IAC7C,CAAC,oBAAoB,EAAE,eAAe,CAAC;IACvC,CAAC,cAAc,EAAE,yBAAyB,CAAC;IAC3C,CAAC,eAAe,EAAE,6BAA6B,CAAC;IAChD,CAAC,mBAAmB,EAAE,uBAAuB,CAAC;CAC/C,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY;IAC7C,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,gBAAgB;KACtD,CAAC,EACF;QACE,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @nodetool-ai/workflow-runner – Public API
+ *
+ * Portable workflow runner for serverless / edge deployments. Wraps the
+ * kernel's WorkflowRunner with a (Request) => Response handler and an
+ * AsyncGenerator-shaped streaming API. Transport-agnostic and runtime-agnostic
+ * — works on Vercel (Node + Edge), Cloudflare Workers, Bun, and Deno.
+ */
+export { runWorkflow, type GraphData, type RunWorkflowOptions } from "./run.js";
+export { createWorkflowHandler, type CreateWorkflowHandlerOptions, type WorkflowRequestBody } from "./handler.js";
+export { envSecretResolver } from "./env-secret-resolver.js";
+export { createBrowserRegistry, graphRunsInRegistry, runBrowserWorkflow, type RunBrowserWorkflowOptions } from "./browser.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAChF,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,KAAK,yBAAyB,EAC/B,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+/**
+ * @nodetool-ai/workflow-runner – Public API
+ *
+ * Portable workflow runner for serverless / edge deployments. Wraps the
+ * kernel's WorkflowRunner with a (Request) => Response handler and an
+ * AsyncGenerator-shaped streaming API. Transport-agnostic and runtime-agnostic
+ * — works on Vercel (Node + Edge), Cloudflare Workers, Bun, and Deno.
+ */
+export { runWorkflow } from "./run.js";
+export { createWorkflowHandler } from "./handler.js";
+export { envSecretResolver } from "./env-secret-resolver.js";
+export { createBrowserRegistry, graphRunsInRegistry, runBrowserWorkflow } from "./browser.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAA2C,MAAM,UAAU,CAAC;AAChF,OAAO,EACL,qBAAqB,EAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAEnB,MAAM,cAAc,CAAC"}

package/dist/run.d.ts

@@ -0,0 +1,55 @@
+/**
+ * runWorkflow — execute a graph against a NodeRegistry and yield messages live.
+ *
+ * This is the portable core: no fs, no subprocess, no transport assumptions.
+ * The caller supplies the graph, the registry, and (optionally) a context.
+ * Everything platform-specific (storage backend, secret resolution, etc.)
+ * is injected via the context.
+ */
+import { WorkflowRunner, type RunJobRequest, type RunResult } from "@nodetool-ai/kernel";
+import { type NodeRegistry } from "@nodetool-ai/node-sdk";
+import { ProcessingContext, type CacheAdapter, type SandboxModuleCatalog, type StorageAdapter } from "@nodetool-ai/runtime/context";
+import type { Edge, NodeDescriptor, Platform, ProcessingMessage } from "@nodetool-ai/protocol";
+export type GraphData = {
+    nodes: NodeDescriptor[];
+    edges: Edge[];
+};
+export interface RunWorkflowOptions {
+    graph: GraphData;
+    registry: NodeRegistry;
+    /** The run's params, exactly as the job request carries them. */
+    params?: RunJobRequest["params"];
+    jobId?: string;
+    workflowId?: string;
+    /** Pre-built context. If omitted, a minimal one is created from the fields below. */
+    context?: ProcessingContext;
+    /** Optional context inputs (ignored when `context` is provided). */
+    storage?: StorageAdapter | null;
+    workspaceStorage?: StorageAdapter | null;
+    cache?: CacheAdapter;
+    environment?: Record<string, string>;
+    secretResolver?: (key: string, userId: string) => Promise<string | null | undefined> | string | null | undefined;
+    /**
+     * Catalog the run's Code nodes resolve their imports through. A host with no
+     * process-wide catalog — every browser — passes one here or the imports
+     * cannot be served.
+     */
+    sandboxModuleCatalog?: SandboxModuleCatalog | null;
+    /** Abort the run when this signal fires. */
+    signal?: AbortSignal;
+    /**
+     * Receives the live WorkflowRunner right after construction — lets the
+     * caller push live property updates into running nodes
+     * (`runner.updateNodeProperties`) or otherwise drive the run.
+     */
+    onRunner?: (runner: WorkflowRunner) => void;
+    /**
+     * Reject graphs whose nodes do not declare support for this deployment
+     * platform. When set, the runner runs both property validation and
+     * platform validation as a pre-flight; unsupported nodes cause the run
+     * to fail before any actor is spawned.
+     */
+    platform?: Platform;
+}
+export declare function runWorkflow(opts: RunWorkflowOptions): AsyncGenerator<ProcessingMessage, RunResult, void>;
+//# sourceMappingURL=run.d.ts.map

package/dist/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,cAAc,EAEd,KAAK,aAAa,EAClB,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACV,IAAI,EACJ,cAAc,EACd,QAAQ,EACR,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,KAAK,EAAE,IAAI,EAAE,CAAC;CACf,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,iEAAiE;IACjE,MAAM,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,qFAAqF;IACrF,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAE5B,oEAAoE;IACpE,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,gBAAgB,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACzC,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,cAAc,CAAC,EAAE,CACf,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,KACX,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAEpE;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAEnD,4CAA4C;IAC5C,MAAM,CAAC,EAAE,WAAW,CAAC;IAErB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;IAE5C;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAsCD,wBAAuB,WAAW,CAChC,IAAI,EAAE,kBAAkB,GACvB,cAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,IAAI,CAAC,CAwGpD"}

package/dist/run.js

@@ -0,0 +1,158 @@
+/**
+ * runWorkflow — execute a graph against a NodeRegistry and yield messages live.
+ *
+ * This is the portable core: no fs, no subprocess, no transport assumptions.
+ * The caller supplies the graph, the registry, and (optionally) a context.
+ * Everything platform-specific (storage backend, secret resolution, etc.)
+ * is injected via the context.
+ */
+import { WorkflowRunner } from "@nodetool-ai/kernel";
+import { hydrateGraphNodeFlags } from "@nodetool-ai/node-sdk";
+// Narrow `/context` subpath (not the package root) so the browser bundle of
+// this runner doesn't pull the provider / python-bridge barrel.
+import { ProcessingContext } from "@nodetool-ai/runtime/context";
+/**
+ * Execute a workflow and stream ProcessingMessages as they are emitted.
+ *
+ * Yields each message live; the final `RunResult` is the generator's return value.
+ *
+ * ```ts
+ * for await (const msg of runWorkflow(opts)) { ... }
+ * ```
+ */
+/**
+ * The context the run builds when the caller supplied none. The sandbox module
+ * catalog is left out entirely when there is none, rather than set to
+ * `undefined`.
+ */
+function contextInit(opts, jobId) {
+    const init = {
+        jobId,
+        workflowId: opts.workflowId ?? null,
+        storage: opts.storage ?? null,
+        workspaceStorage: opts.workspaceStorage ?? null,
+        cache: opts.cache,
+        environment: opts.environment,
+        secretResolver: opts.secretResolver,
+        // The caller streams via a message listener and never drains the pull
+        // queue — retaining it would pin every streamed chunk.
+        retainMessageQueue: false
+    };
+    if (opts.sandboxModuleCatalog !== undefined) {
+        init.sandboxModuleCatalog = opts.sandboxModuleCatalog;
+    }
+    return init;
+}
+export async function* runWorkflow(opts) {
+    const jobId = opts.jobId ?? generateJobId();
+    if (opts.signal?.aborted) {
+        const message = {
+            type: "job_update",
+            status: "cancelled",
+            job_id: jobId,
+            workflow_id: opts.workflowId ?? null
+        };
+        return { outputs: {}, messages: [message], status: "cancelled" };
+    }
+    const graph = hydrateGraphNodeFlags(opts.graph, opts.registry);
+    const context = opts.context ?? new ProcessingContext(contextInit(opts, jobId));
+    const runner = new WorkflowRunner(jobId, {
+        resolveExecutor: (node) => opts.registry.resolve(node),
+        executionContext: context,
+        validateNode: composeValidators(opts.registry.createNodeValidator(), opts.platform
+            ? opts.registry.createPlatformValidator(opts.platform)
+            : null)
+    });
+    opts.onRunner?.(runner);
+    const queue = [];
+    let wake = null;
+    const wakeQueue = () => {
+        const w = wake;
+        wake = null;
+        w?.();
+    };
+    const unsubscribe = context.addMessageListener((message) => {
+        queue.push(message);
+        wakeQueue();
+    });
+    const request = {
+        job_id: jobId,
+        workflow_id: opts.workflowId,
+        params: opts.params
+    };
+    let finished = false;
+    let runError;
+    let result = null;
+    const runPromise = runner
+        .run(request, graph)
+        .then((r) => {
+        result = r;
+    })
+        .catch((err) => {
+        runError = err;
+    })
+        .finally(() => {
+        finished = true;
+        wakeQueue();
+    });
+    let cancelRequested = false;
+    const cancelRun = () => {
+        if (cancelRequested) {
+            wakeQueue();
+            return;
+        }
+        cancelRequested = true;
+        if (!finished) {
+            runner.cancel();
+        }
+        wakeQueue();
+    };
+    opts.signal?.addEventListener("abort", cancelRun, { once: true });
+    try {
+        while (!finished || queue.length > 0) {
+            if (queue.length === 0) {
+                if (opts.signal?.aborted) {
+                    cancelRun();
+                    break;
+                }
+                await new Promise((resolve) => {
+                    wake = resolve;
+                });
+                continue;
+            }
+            const msg = queue.shift();
+            yield msg;
+        }
+        await runPromise;
+    }
+    finally {
+        opts.signal?.removeEventListener("abort", cancelRun);
+        unsubscribe();
+    }
+    if (runError)
+        throw runError;
+    if (!result) {
+        throw new Error("Workflow runner exited without a result");
+    }
+    return result;
+}
+function composeValidators(a, b) {
+    if (!b)
+        return a;
+    return (descriptor, connectedHandles) => {
+        const aIssues = a(descriptor, connectedHandles) ?? [];
+        const bIssues = b(descriptor, connectedHandles) ?? [];
+        if (aIssues.length === 0)
+            return bIssues;
+        if (bIssues.length === 0)
+            return aIssues;
+        return [...aIssues, ...bIssues];
+    };
+}
+function generateJobId() {
+    const g = globalThis;
+    if (g.crypto?.randomUUID)
+        return g.crypto.randomUUID();
+    return `job_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
+}
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,cAAc,EAIf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EAEtB,MAAM,uBAAuB,CAAC;AAC/B,4EAA4E;AAC5E,gEAAgE;AAChE,OAAO,EACL,iBAAiB,EAIlB,MAAM,8BAA8B,CAAC;AA4DtC;;;;;;;;GAQG;AACH;;;;GAIG;AACH,SAAS,WAAW,CAClB,IAAwB,EACxB,KAAa;IAEb,MAAM,IAAI,GAAuD;QAC/D,KAAK;QACL,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;QAC/C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,sEAAsE;QACtE,uDAAuD;QACvD,kBAAkB,EAAE,KAAK;KAC1B,CAAC;IACF,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,WAAW,CAChC,IAAwB;IAExB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,aAAa,EAAE,CAAC;IAC5C,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GAAsB;YACjC,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;SACrC,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE/D,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,IAAI,IAAI,iBAAiB,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,KAAK,EAAE;QACvC,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACtD,gBAAgB,EAAE,OAAO;QACzB,YAAY,EAAE,iBAAiB,CAC7B,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EACnC,IAAI,CAAC,QAAQ;YACX,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;YACtD,CAAC,CAAC,IAAI,CACT;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,IAAI,IAAI,GAAwB,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC;QACf,IAAI,GAAG,IAAI,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC;IACR,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE;QACzD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,SAAS,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAkB;QAC7B,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;IAEF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAiB,CAAC;IACtB,IAAI,MAAM,GAAqB,IAAI,CAAC;IAEpC,MAAM,UAAU,GAAG,MAAM;SACtB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;SACnB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,GAAG,CAAC,CAAC;IACb,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,QAAQ,GAAG,GAAG,CAAC;IACjB,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,QAAQ,GAAG,IAAI,CAAC;QAChB,SAAS,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,IAAI,eAAe,EAAE,CAAC;YACpB,SAAS,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,eAAe,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,SAAS,EAAE,CAAC;IACd,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBACzB,SAAS,EAAE,CAAC;oBACZ,MAAM;gBACR,CAAC;gBACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,IAAI,GAAG,OAAO,CAAC;gBACjB,CAAC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC3B,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,UAAU,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACrD,WAAW,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,QAAQ;QAAE,MAAM,QAAQ,CAAC;IAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,CAAgB,EAChB,CAAuB;IAEvB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,OAAO,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACzC,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,CAAC,GAAG,UAAU,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACvD,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC"}

package/package.json

@@ -0,0 +1,82 @@
+{
+  "name": "@nodetool-ai/workflow-runner",
+  "version": "0.8.1",
+  "description": "Portable workflow runner — turns a graph + NodeRegistry into a (Request) => Response handler for Vercel, Cloudflare Workers, or any Web-standard runtime",
+  "type": "module",
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "node ../../scripts/build-typescript-workspace.mjs",
+    "test": "node ../../scripts/run-vitest.mjs run",
+    "test:watch": "node ../../scripts/run-vitest.mjs",
+    "test:e2e": "playwright test --config e2e/playwright.config.ts",
+    "typecheck:e2e": "node ../../scripts/run-tsc.mjs --noEmit -p e2e/tsconfig.json",
+    "lint": "node ../../scripts/run-tsc.mjs --noEmit"
+  },
+  "dependencies": {
+    "@nodetool-ai/kernel": "^0.8.1",
+    "@nodetool-ai/node-sdk": "^0.8.1",
+    "@nodetool-ai/protocol": "^0.8.1",
+    "@nodetool-ai/runtime": "^0.8.1"
+  },
+  "devDependencies": {
+    "@nodetool-ai/agents": "*",
+    "@nodetool-ai/base-nodes": "*",
+    "@nodetool-ai/code-nodes": "*",
+    "@nodetool-ai/gpu": "*",
+    "@playwright/test": "^1.50.0",
+    "@types/node": "^22.0.0",
+    "@webgpu/types": "^0.1.70",
+    "typescript": "npm:@typescript/typescript6@6.0.2",
+    "vite": "^6.0.0",
+    "vite-plugin-node-polyfills": "^0.28.0",
+    "vitest": "^5.0.1"
+  },
+  "exports": {
+    ".": {
+      "nodetool-dev": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./browser": {
+      "nodetool-dev": "./src/browser.ts",
+      "types": "./dist/browser.d.ts",
+      "import": "./dist/browser.js",
+      "default": "./dist/browser.js"
+    }
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/nodetool-ai/nodetool.git",
+    "directory": "packages/workflow-runner"
+  },
+  "homepage": "https://nodetool.ai",
+  "bugs": {
+    "url": "https://github.com/nodetool-ai/nodetool/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "keywords": [
+    "nodetool",
+    "ai",
+    "workflow",
+    "workflow-automation",
+    "typescript",
+    "workflow-runner",
+    "serverless",
+    "vercel",
+    "cloudflare-workers",
+    "edge",
+    "web-standard"
+  ]
+}