@osolmaz/pi-workflows 0.13.2 → 0.13.4

package/dist/workflows/settings.js

@@ -0,0 +1,199 @@
+import { canonicalJson } from "../state/json.js";
+import { MAX_WORKFLOW_SETTINGS_BYTES, applyJsonPatchOperation, cloneJson, jsonPointerTarget, parseJsonPointer, validateJsonPatch, } from "./json-patch.js";
+export function workflowSettingsScopeId(originRunId, mountPath, invocation) {
+    if (!Number.isInteger(invocation) || invocation <= 0) {
+        throw new Error("Workflow settings invocation must be a positive integer");
+    }
+    return `${originRunId}:${mountPath || "$root"}:${invocation}`;
+}
+export function workflowSettings(options) {
+    if (typeof options.parse !== "function") {
+        throw new Error("Invalid workflow settings: parse must be a function");
+    }
+    if (!Array.isArray(options.paths)) {
+        throw new Error("Invalid workflow settings: paths must be an array");
+    }
+    validatePathRules(options.paths);
+    if (options.description !== undefined && options.description.trim().length === 0) {
+        throw new Error("Invalid workflow settings: description must not be empty");
+    }
+    if (options.validateChange !== undefined && typeof options.validateChange !== "function") {
+        throw new Error("Invalid workflow settings: validateChange must be a function");
+    }
+    return Object.freeze({
+        ...options,
+        paths: Object.freeze(options.paths.map((rule) => freezeRule(rule))),
+    });
+}
+export function allowSettingsPath(path, permissions) {
+    parseJsonPointer(path);
+    validatePathPermissions(path, permissions);
+    return { path, permissions };
+}
+export function settingsRoute(definition) {
+    if (typeof definition.run !== "function") {
+        throw new Error("Invalid settings route: run must be a function");
+    }
+    return { nodeType: "compute", settingsRoute: true, ...definition };
+}
+export async function resolveInitialWorkflowSettings(definition, input) {
+    const raw = typeof definition.initial === "function"
+        ? await definition.initial(input)
+        : definition.initial;
+    return await parseWorkflowSettingsValue(definition, raw);
+}
+export async function parseWorkflowSettingsValue(definition, raw) {
+    const parsed = await definition.parse(raw);
+    const json = cloneJson(parsed);
+    assertSettingsSize(json);
+    return { patch: [], settings: parsed, json };
+}
+export async function applyWorkflowSettingsPatch(definition, before, patchValue, actor, source) {
+    const patch = validateJsonPatch(patchValue);
+    let current = cloneJson(before);
+    for (const operation of patch) {
+        authorizeOperation(definition.paths, current, operation, actor.type);
+        current = applyJsonPatchOperation(current, operation);
+    }
+    assertSettingsSize(current);
+    const parsed = await definition.parse(cloneJson(current));
+    const normalized = cloneJson(parsed);
+    assertSettingsSize(normalized);
+    if (canonicalJson(normalized) !== canonicalJson(current)) {
+        throw new Error("Workflow settings parser must validate without changing the patched value");
+    }
+    await definition.validateChange?.({
+        before: cloneJson(before),
+        after: parsed,
+        actor,
+        source,
+        patch,
+    });
+    return { patch, settings: parsed, json: normalized };
+}
+export function settingsRuleForPath(rules, pointer) {
+    const path = parseJsonPointer(pointer);
+    let match;
+    let matchLength = -1;
+    for (const rule of rules) {
+        const prefix = parseJsonPointer(rule.path);
+        if (prefix.length >= matchLength && prefix.every((segment, index) => path[index] === segment)) {
+            if (prefix.length > matchLength) {
+                match = rule;
+                matchLength = prefix.length;
+            }
+        }
+    }
+    return match;
+}
+function authorizeOperation(rules, document, operation, actor) {
+    switch (operation.op) {
+        case "test":
+            requirePermission(rules, operation.path, "read", actor);
+            return;
+        case "add":
+            requirePermission(rules, operation.path, destinationPermission(document, operation.path), actor);
+            return;
+        case "remove":
+            requirePermission(rules, operation.path, "remove", actor);
+            return;
+        case "replace":
+            requirePermission(rules, operation.path, "replace", actor);
+            return;
+        case "copy":
+            requirePermission(rules, operation.from, "read", actor);
+            requirePermission(rules, operation.path, destinationPermission(document, operation.path), actor);
+            return;
+        case "move":
+            requirePermission(rules, operation.from, "read", actor);
+            requirePermission(rules, operation.from, "remove", actor);
+            requirePermission(rules, operation.path, destinationPermission(document, operation.path), actor);
+            return;
+    }
+}
+function destinationPermission(document, pointer) {
+    const segments = parseJsonPointer(pointer);
+    if (segments.length === 0)
+        return "replace";
+    const parentPointer = segments.length === 1 ? "" : `/${segments.slice(0, -1).map(encodeSegment).join("/")}`;
+    const parent = jsonPointerTarget(document, parentPointer);
+    if (!parent.exists)
+        return "add";
+    if (Array.isArray(parent.value))
+        return "add";
+    return jsonPointerTarget(document, pointer).exists ? "replace" : "add";
+}
+function requirePermission(rules, pointer, permission, actor) {
+    const rule = settingsRuleForPath(rules, pointer);
+    if (rule?.permissions[permission]?.includes(actor) !== true) {
+        throw new Error(`Workflow settings ${permission} is not allowed at ${JSON.stringify(pointer)} for actor ${actor}`);
+    }
+}
+function validatePathRules(rules) {
+    const byPath = new Map();
+    for (const rule of rules) {
+        if (rule === null || typeof rule !== "object" || Array.isArray(rule)) {
+            throw new Error("Invalid workflow settings: each path rule must be an object");
+        }
+        parseJsonPointer(rule.path);
+        validatePathPermissions(rule.path, rule.permissions);
+        const normalized = freezeRule(rule);
+        const prior = byPath.get(rule.path);
+        if (prior !== undefined &&
+            canonicalJson(prior.permissions) !== canonicalJson(normalized.permissions)) {
+            throw new Error(`Conflicting workflow settings rules for ${JSON.stringify(rule.path)}`);
+        }
+        byPath.set(rule.path, normalized);
+    }
+}
+function validatePathPermissions(path, permissions) {
+    if (permissions === null || typeof permissions !== "object" || Array.isArray(permissions)) {
+        throw new Error(`Workflow settings path ${JSON.stringify(path)} permissions must be an object`);
+    }
+    if (Object.keys(permissions).length === 0) {
+        throw new Error(`Workflow settings path ${JSON.stringify(path)} grants no permissions`);
+    }
+    for (const [permission, actors] of Object.entries(permissions)) {
+        if (!isSettingsPermission(permission)) {
+            throw new Error(`Unknown workflow settings permission: ${permission}`);
+        }
+        if (!Array.isArray(actors) || actors.length === 0) {
+            throw new Error(`Workflow settings permission ${permission} at ${JSON.stringify(path)} requires actors`);
+        }
+        for (const actor of actors)
+            assertActorType(actor);
+    }
+}
+function freezeRule(rule) {
+    const permissions = {};
+    for (const [permission, actors] of Object.entries(rule.permissions)) {
+        if (!isSettingsPermission(permission) || !Array.isArray(actors))
+            continue;
+        permissions[permission] = Object.freeze([...new Set(actors)]);
+    }
+    return Object.freeze({ path: rule.path, permissions: Object.freeze(permissions) });
+}
+function assertSettingsSize(value) {
+    if (Buffer.byteLength(canonicalJson(value), "utf8") > MAX_WORKFLOW_SETTINGS_BYTES) {
+        throw new Error(`Workflow settings cannot exceed ${MAX_WORKFLOW_SETTINGS_BYTES} bytes`);
+    }
+}
+function assertActorType(value) {
+    if (value !== "session" &&
+        value !== "host" &&
+        value !== "controller" &&
+        value !== "channel" &&
+        value !== "human" &&
+        value !== "policy" &&
+        value !== "control" &&
+        value !== "system") {
+        throw new Error(`Unknown workflow settings actor: ${JSON.stringify(value)}`);
+    }
+}
+function isSettingsPermission(value) {
+    return value === "read" || value === "add" || value === "remove" || value === "replace";
+}
+function encodeSegment(segment) {
+    return segment.replaceAll("~", "~0").replaceAll("/", "~1");
+}
+//# sourceMappingURL=settings.js.map

package/dist/workflows/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/workflows/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,iBAAiB,CAAC;AAsJzB,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,SAAiB,EACjB,UAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,WAAW,IAAI,SAAS,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAmD;IAEnD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,OAAO;QACV,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;KACpE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,WAA4C;IAE5C,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvB,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAqE;IAErE,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,UAAyD,EACzD,KAAa;IAEb,MAAM,GAAG,GACP,OAAO,UAAU,CAAC,OAAO,KAAK,UAAU;QACtC,CAAC,CAAC,MAAO,UAAU,CAAC,OAAsD,CAAC,KAAK,CAAC;QACjF,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;IACzB,OAAO,MAAM,0BAA0B,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAAyD,EACzD,GAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,MAAmB,CAAC,CAAC;IAC5C,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAAyD,EACzD,MAAiB,EACjB,UAAmB,EACnB,KAAoB,EACpB,MAAc;IAEd,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,GAAG,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IACD,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,SAAS,CAAC,MAAmB,CAAC,CAAC;IAClD,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/B,IAAI,aAAa,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,UAAU,CAAC,cAAc,EAAE,CAAC;QAChC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAyB;QACjD,KAAK,EAAE,MAAM;QACb,KAAK;QACL,MAAM;QACN,KAAK;KACN,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAA0C,EAC1C,OAAe;IAEf,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,KAA2C,CAAC;IAChD,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,IAAI,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC;YAC9F,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBAChC,KAAK,GAAG,IAAI,CAAC;gBACb,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA0C,EAC1C,QAAmB,EACnB,SAA6B,EAC7B,KAAgB;IAEhB,QAAQ,SAAS,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO;QACT,KAAK,KAAK;YACR,iBAAiB,CACf,KAAK,EACL,SAAS,CAAC,IAAI,EACd,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,EAC/C,KAAK,CACN,CAAC;YACF,OAAO;QACT,KAAK,QAAQ;YACX,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO;QACT,KAAK,SAAS;YACZ,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO;QACT,KAAK,MAAM;YACT,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACxD,iBAAiB,CACf,KAAK,EACL,SAAS,CAAC,IAAI,EACd,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,EAC/C,KAAK,CACN,CAAC;YACF,OAAO;QACT,KAAK,MAAM;YACT,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACxD,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1D,iBAAiB,CACf,KAAK,EACL,SAAS,CAAC,IAAI,EACd,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,EAC/C,KAAK,CACN,CAAC;YACF,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAmB,EAAE,OAAe;IACjE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,aAAa,GACjB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxF,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA0C,EAC1C,OAAe,EACf,UAAsC,EACtC,KAAgB;IAEhB,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,qBAAqB,UAAU,sBAAsB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,KAAK,EAAE,CAClG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA0C;IACnE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IACE,KAAK,KAAK,SAAS;YACnB,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,EAC1E,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,WAA4C;IACzF,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1F,CAAC;IACD,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,gCAAgC,UAAU,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CACxF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,eAAe,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAA8B;IAChD,MAAM,WAAW,GAAoC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1E,WAAW,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAgB;IAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,2BAA2B,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,mCAAmC,2BAA2B,QAAQ,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IACE,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,MAAM;QAChB,KAAK,KAAK,YAAY;QACtB,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,QAAQ;QAClB,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,QAAQ,EAClB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC;AAC1F,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC"}

package/dist/workflows/store.d.ts

@@ -1,5 +1,7 @@
 import { StateDatabase } from "../state/database.js";
-import { type MutationActor, type OwnerType } from "../state/mutation.js";
+import { type JsonValue } from "../state/json.js";
+import { type LeaseClaim, type MutationActor, type OwnerType } from "../state/mutation.js";
+import { type InitialWorkflowSettingsScope, type WorkflowFollowUpQueueRecord, type WorkflowFollowUpRecord, type WorkflowQueueFollowUpRequest, type WorkflowRemoveFollowUpRequest, type WorkflowSettingsChangeRequest, type WorkflowSettingsChangeResult, type WorkflowSettingsDefinition, type WorkflowSettingsScopeRecord } from "./settings.js";
 import type { WorkflowDefinition, WorkflowDefinitionSnapshot, WorkflowRunState, WorkflowSessionBinding, WorkflowSessionCapture, WorkflowSessionEntryRecord, WorkflowSessionEventRecord, WorkflowTraceEvent, WorkflowTraceEventDraft, WorkflowUpdateInput, WorkflowUpdateRecord } from "./types.js";
 export declare const RUN_STATE_SCHEMA: "pi-workflows.run-state.v1";
 export declare const DEFINITION_SNAPSHOT_SCHEMA: "pi-workflows.definition-snapshot.v1";
@@ -44,19 +46,58 @@ export type LoadedWorkflowRun = {
     sessionCapture: WorkflowSessionCapture | null;
     sessionIntegrity: SessionCaptureIntegrity;
     sessionSegments: SessionCaptureSegment[];
+    settingsScopes?: WorkflowSettingsScopeRecord[];
+    followUpQueue?: WorkflowFollowUpQueueRecord | null;
 };
 export type ReadWorkflowRunOptions = {
     includeTrace?: boolean;
 };
+export type InitializeWorkflowRunOptions = {
+    initialSettings?: InitialWorkflowSettingsScope[];
+};
 export declare class WorkflowRunStore {
     readonly databasePath: string;
     readonly state: StateDatabase;
     private readonly authorityProvider;
     private readonly contexts;
     private readonly ownsState;
+    private readonly mutations;
     constructor(databasePath?: string, options?: WorkflowRunStoreOptions);
     close(): void;
-    initializeRun(workflow: WorkflowDefinition, state: WorkflowRunState): Promise<string>;
+    initializeRun(workflow: WorkflowDefinition, state: WorkflowRunState, options?: InitializeWorkflowRunOptions): Promise<string>;
+    ensureSettingsScope(options: {
+        runId: string;
+        mountPath: string;
+        invocation: number;
+        settings: JsonValue;
+    }): WorkflowSettingsScopeRecord;
+    getSettingsScope(scopeId: string): WorkflowSettingsScopeRecord | undefined;
+    getSettingsScopeAtChange(scopeId: string, changeNumber: number): WorkflowSettingsScopeRecord | undefined;
+    listSettingsScopes(runId: string): WorkflowSettingsScopeRecord[];
+    private settingsScopesForRunView;
+    findSettingsScope(runId: string, mountPath: string, invocation: number): WorkflowSettingsScopeRecord | undefined;
+    changeSettings<TSettings, TInput = unknown>(definition: WorkflowSettingsDefinition<TSettings, TInput>, request: WorkflowSettingsChangeRequest): Promise<WorkflowSettingsChangeResult>;
+    queueFollowUp(request: WorkflowQueueFollowUpRequest): {
+        followUp: WorkflowFollowUpRecord;
+        adopted: boolean;
+    };
+    removeFollowUp(request: WorkflowRemoveFollowUpRequest): WorkflowFollowUpRecord;
+    originSessionId(runId: string): string | undefined;
+    readFollowUpQueue(runId: string): WorkflowFollowUpQueueRecord | undefined;
+    listPendingPresentations(targetSessionId: string): string[];
+    settleFollowUpPresentation(options: {
+        runId: string;
+        state: "settled" | "unavailable";
+        presentationEntryId?: string;
+        assistantEntryId?: string;
+        reason?: string;
+    }): WorkflowFollowUpQueueRecord;
+    claimNextFollowUp(targetSessionId: string, ownerId: string, leaseMs?: number): {
+        followUp: WorkflowFollowUpRecord;
+        claim: LeaseClaim;
+    } | undefined;
+    markFollowUpSent(followUpId: string, claim: LeaseClaim, sessionEntryId: string): WorkflowFollowUpRecord;
+    releaseFollowUpClaim(claim: LeaseClaim): void;
     prepareRunResume(runId: string): Promise<LoadedWorkflowRun>;
     markRunInterrupted(runId: string, reason?: string): Promise<LoadedWorkflowRun | null>;
     publishUpdate(runId: string, state: WorkflowRunState, nodeId: string, attemptId: string, update: WorkflowUpdateInput, options?: {
@@ -89,15 +130,47 @@ export declare class WorkflowRunStore {
     private assertWriteAuthority;
     private persistRunState;
     private enqueueRunSettlementEffect;
+    private initializeRunSettingsAndFollowUps;
+    private ensureFollowUpQueue;
+    private logicalOriginRunId;
+    private requireRunAcceptsSettings;
+    private verifySettingsProjections;
+    private settingsScopeRow;
+    private requireSettingsScopeRow;
+    private settingsScopeRecord;
+    private settingsChangeRow;
+    private settingsChangeRecord;
+    private assertSameSettingsChange;
+    private followUpQueueRow;
+    private requireFollowUpQueueRow;
+    private followUpRowByRequest;
+    private followUpRow;
+    private requireFollowUpRow;
+    private followUpRecord;
+    private assertSameFollowUp;
+    private assertFollowUpRemovalAuthority;
+    private hasLiveLease;
+    private nextFollowUpOrder;
+    private assertSettingsRouteCurrent;
+    private transitionFollowUpsForRunState;
     private syncNodeAttempts;
     private syncRunSteps;
+    private syncAttemptEntries;
+    private findAttemptPromptEntry;
+    private readAttemptOutput;
     private ensureAttempt;
     private nextAttemptNumber;
     private nextUpdateSequence;
+    private insertRunSources;
+    private syncContinuationIdentity;
     private readRunRow;
     private requireRunRow;
     private readRunState;
     private readSteps;
+    private readRunSources;
+    private carriedStepCount;
+    private readActiveAttempt;
+    private readHumanDecisionReceipt;
     private readUpdates;
     private readJsonAs;
     private readText;