@oxygen-agent/cli 1.720.7 → 1.739.1

package/node_modules/@oxygen/workflows/dist/graph/manifest-schema.js

@@ -10,7 +10,7 @@
 // full copy of those rules here would drift from the linter that actually runs.
 //
 // Pure data: this module ships to the browser with the rest of the graph barrel.
-import { MAX_WORKFLOW_NODE_RETRY_ATTEMPTS, MAX_WORKFLOW_NODE_RETRY_WAIT_SECONDS, PORTABLE_WORKFLOW_DEFINITION_COMPILER_VERSION, PORTABLE_WORKFLOW_DEFINITION_VERSION, WORKFLOW_GRAPH_COMPILER_VERSION, WORKFLOW_GRAPH_MANIFEST_VERSION, } from "./types.js";
+import { MAX_WORKFLOW_NODE_RETRY_ATTEMPTS, MAX_WORKFLOW_NODE_RETRY_WAIT_SECONDS, PORTABLE_WORKFLOW_DEFINITION_COMPILER_VERSION, PORTABLE_WORKFLOW_DEFINITION_VERSION, WORKFLOW_CODE_V1_DEFAULT_LIMITS, WORKFLOW_CODE_V1_DEFAULT_OUTPUT_SCHEMA, WORKFLOW_CODE_V1_DEFAULT_SOURCE, WORKFLOW_CODE_V1_LANGUAGE, WORKFLOW_CODE_V1_MAX_INPUT_BYTES, WORKFLOW_CODE_V1_MAX_INPUTS, WORKFLOW_CODE_V1_MAX_OUTPUT_BYTES, WORKFLOW_CODE_V1_MAX_SCHEMA_BYTES, WORKFLOW_CODE_V1_MAX_SCHEMA_DEPTH, WORKFLOW_CODE_V1_MAX_SCHEMA_PROPERTIES, WORKFLOW_CODE_V1_MAX_SOURCE_BYTES, WORKFLOW_CODE_V1_MAX_TIMEOUT_MS, WORKFLOW_CODE_V1_MIN_INPUT_BYTES, WORKFLOW_CODE_V1_MIN_OUTPUT_BYTES, WORKFLOW_CODE_V1_MIN_TIMEOUT_MS, WORKFLOW_CODE_V1_RUNTIME, WORKFLOW_CODE_V1_VERSION, WORKFLOW_GRAPH_COMPILER_VERSION, WORKFLOW_GRAPH_MANIFEST_VERSION, } from "./types.js";
 const valueRefSchema = {
     type: "object",
     description: "How a node input is bound at run time. Scope paths are 'trigger.input.x', 'steps.<node_id>.output.y', or 'loop.<loop_node_id>.item.z'.",
@@ -25,6 +25,89 @@ const valueRefSchema = {
     },
     required: ["type"],
 };
+const workflowCodeInputValueRefSchema = {
+    ...valueRefSchema,
+    description: "One explicit oxygen-js-v1 input binding. Knowledge context refs are excluded in Code v1; bind trigger, step, loop, literal, template, or formula data explicitly.",
+    properties: {
+        ...valueRefSchema.properties,
+        type: { enum: ["literal", "template", "ref", "formula"] },
+    },
+};
+const workflowCodeOutputSchemaSchema = {
+    type: "object",
+    additionalProperties: false,
+    description: `A top-level closed object JSON Schema. Supported semantic keywords are type, const, enum, anyOf, properties, required, additionalProperties:false, and items. Every nested object schema must also be closed; maximum ${WORKFLOW_CODE_V1_MAX_SCHEMA_BYTES} UTF-8 bytes, depth ${WORKFLOW_CODE_V1_MAX_SCHEMA_DEPTH}, and ${WORKFLOW_CODE_V1_MAX_SCHEMA_PROPERTIES} named properties total.`,
+    properties: {
+        type: { const: "object" },
+        const: {},
+        enum: { type: "array", minItems: 1, items: {} },
+        anyOf: { type: "array", minItems: 1, items: { type: "object", additionalProperties: true } },
+        properties: {
+            type: "object",
+            maxProperties: WORKFLOW_CODE_V1_MAX_SCHEMA_PROPERTIES,
+            additionalProperties: { type: "object", additionalProperties: true },
+        },
+        required: { type: "array", items: { type: "string" } },
+        additionalProperties: { const: false },
+        items: { type: "object", additionalProperties: true },
+        title: { type: "string" },
+        description: { type: "string" },
+        default: {},
+        examples: { type: "array", items: {} },
+    },
+    required: ["type", "additionalProperties"],
+    default: WORKFLOW_CODE_V1_DEFAULT_OUTPUT_SCHEMA,
+};
+/** Published authoring schema for the nested oxygen-js-v1 Code envelope. */
+export const workflowCodeV1Schema = {
+    type: "object",
+    additionalProperties: false,
+    description: "Typed, sandboxed, network-denied JavaScript. Source is a complete `(inputs) => output` function expression; provider access belongs in explicit Tool nodes.",
+    properties: {
+        version: { const: WORKFLOW_CODE_V1_VERSION },
+        language: { const: WORKFLOW_CODE_V1_LANGUAGE },
+        runtime: { const: WORKFLOW_CODE_V1_RUNTIME },
+        source: {
+            type: "string",
+            default: WORKFLOW_CODE_V1_DEFAULT_SOURCE,
+            description: `Complete JavaScript function expression; at most ${WORKFLOW_CODE_V1_MAX_SOURCE_BYTES} UTF-8 bytes.`,
+        },
+        inputs: {
+            type: "object",
+            maxProperties: WORKFLOW_CODE_V1_MAX_INPUTS,
+            additionalProperties: workflowCodeInputValueRefSchema,
+            default: {},
+        },
+        output_schema: workflowCodeOutputSchemaSchema,
+        limits: {
+            type: "object",
+            additionalProperties: false,
+            properties: {
+                timeout_ms: {
+                    type: "integer",
+                    minimum: WORKFLOW_CODE_V1_MIN_TIMEOUT_MS,
+                    maximum: WORKFLOW_CODE_V1_MAX_TIMEOUT_MS,
+                    default: WORKFLOW_CODE_V1_DEFAULT_LIMITS.timeout_ms,
+                },
+                max_input_bytes: {
+                    type: "integer",
+                    minimum: WORKFLOW_CODE_V1_MIN_INPUT_BYTES,
+                    maximum: WORKFLOW_CODE_V1_MAX_INPUT_BYTES,
+                    default: WORKFLOW_CODE_V1_DEFAULT_LIMITS.max_input_bytes,
+                },
+                max_output_bytes: {
+                    type: "integer",
+                    minimum: WORKFLOW_CODE_V1_MIN_OUTPUT_BYTES,
+                    maximum: WORKFLOW_CODE_V1_MAX_OUTPUT_BYTES,
+                    default: WORKFLOW_CODE_V1_DEFAULT_LIMITS.max_output_bytes,
+                },
+            },
+            required: ["timeout_ms", "max_input_bytes", "max_output_bytes"],
+            default: WORKFLOW_CODE_V1_DEFAULT_LIMITS,
+        },
+    },
+    required: ["version", "language", "runtime", "source", "inputs", "output_schema", "limits"],
+};
 const conditionSchema = {
     type: "object",
     description: "A structured predicate: { type: 'group', op: 'all' | 'any', not?: boolean, children: [...] } or { type: 'compare', left, op, right? }. 'is_empty' / 'is_not_empty' take no right operand.",
@@ -174,10 +257,30 @@ const nodeSchema = {
             description: "Imported durable-recipe code nodes: configuration field -> value ref.",
             additionalProperties: valueRefSchema,
         },
+        code: workflowCodeV1Schema,
         workflow_id: { type: "string", description: "workflow nodes: the child workflow to run." },
         input: { type: "object", description: "workflow nodes: child input name -> value ref.", additionalProperties: valueRefSchema },
     },
     required: ["id", "name", "kind", "ui"],
+    allOf: [{
+            if: { properties: { kind: { const: "code" } }, required: ["kind"] },
+            then: {
+                oneOf: [
+                    {
+                        required: ["run_source"],
+                        not: { anyOf: [{ required: ["recipe"] }, { required: ["code"] }] },
+                    },
+                    {
+                        required: ["recipe"],
+                        not: { anyOf: [{ required: ["run_source"] }, { required: ["code"] }] },
+                    },
+                    {
+                        required: ["code"],
+                        not: { anyOf: [{ required: ["run_source"] }, { required: ["recipe"] }] },
+                    },
+                ],
+            },
+        }],
 };
 const edgeSchema = {
     type: "object",

package/node_modules/@oxygen/workflows/dist/graph/params.d.ts

@@ -40,6 +40,8 @@ export type ToolParamSpec = {
  * author cannot clear.
  */
 export declare const ONE_OF_REQUIREMENTS: Record<string, readonly string[][]>;
+/** Capabilities needing at least one field from a group; selecting both is valid. */
+export declare const ANY_OF_REQUIREMENTS: Record<string, readonly string[][]>;
 /**
  * What is still missing before this node can run, in words an author can act on.
  * Empty means ready.

package/node_modules/@oxygen/workflows/dist/graph/params.js

@@ -16,6 +16,13 @@ export const ONE_OF_REQUIREMENTS = {
     // Declares no `required` array at all and needs one of the two payload forms.
     oxygen_tables_import_csv: [["csv_text", "csv_base64"]],
 };
+/** Capabilities needing at least one field from a group; selecting both is valid. */
+export const ANY_OF_REQUIREMENTS = {
+    // The schema's root anyOf is lost when flattened into workflow fields. A
+    // global provider may use external alone, while account-local providers need
+    // identity + external together, so this must not use ONE_OF_REQUIREMENTS.
+    "oxygen.crm_record_assert": [["identity", "external"]],
+};
 /**
  * What is still missing before this node can run, in words an author can act on.
  * Empty means ready.
@@ -57,6 +64,14 @@ export function missingToolParams(input) {
     const cap = fields.find((field) => field.name === "max_credits");
     if (cap && !isPositiveNumberRef(params.max_credits))
         return [label("max_credits")];
+    for (const group of ANY_OF_REQUIREMENTS[toolId] ?? []) {
+        const known = group.filter((name) => fields.some((field) => field.name === name));
+        if (known.length !== group.length)
+            continue;
+        if (!group.some((name) => isOneOfOptionSelected(params[name]))) {
+            return [group.map(label).join(" or ")];
+        }
+    }
     for (const group of ONE_OF_REQUIREMENTS[toolId] ?? []) {
         const known = group.filter((name) => fields.some((field) => field.name === name));
         if (known.length !== group.length)

package/node_modules/@oxygen/workflows/dist/graph/remap.js

@@ -205,6 +205,17 @@ export function remapNodeRefs(node, ids) {
                     }),
             };
         case "code":
+            // Typed code names every upstream dependency as a value ref, so a copied
+            // node can be rewired safely without ever editing arbitrary source text.
+            if (node.code !== undefined) {
+                return {
+                    ...node,
+                    code: {
+                        ...node.code,
+                        inputs: Object.fromEntries(Object.entries(node.code.inputs).map(([key, ref]) => [key, remapValueRef(ref, ids)])),
+                    },
+                };
+            }
             return node.configuration === undefined
                 ? node
                 : {
@@ -212,9 +223,7 @@ export function remapNodeRefs(node, ids) {
                     configuration: Object.fromEntries(Object.entries(node.configuration).map(([key, ref]) => [key, remapValueRef(ref, ids)])),
                 };
         default:
-            // trigger, merge — no bindings. A source code node's JavaScript
-            // reading `ctx.steps`, deliberately NOT rewritten: it is arbitrary code, and
-            // string-substituting inside it would be a guess.
+            // trigger, merge — no bindings.
             return node;
     }
 }

package/node_modules/@oxygen/workflows/dist/graph/topology.d.ts

@@ -1,4 +1,13 @@
 import { type WorkflowGraphEdge, type WorkflowGraphManifest } from "./types.js";
+/**
+ * Worst-case fresh microVM count for one graph run.
+ *
+ * A typed Code node runs once per enclosing loop iteration. A retry replays
+ * completed steps and only re-executes the failed sandbox, so retry settings do
+ * not multiply every node; one global headroom covers the tenant schema's five
+ * run attempts. The result saturates at cap+1 to bound hostile arithmetic.
+ */
+export declare function workflowCodeSandboxInvocationUpperBound(graph: WorkflowGraphManifest): number;
 export type GraphAdjacency = {
     /** node id -> edges leaving it, in manifest declaration order. */
     outgoing: Map<string, WorkflowGraphEdge[]>;

package/node_modules/@oxygen/workflows/dist/graph/topology.js

@@ -8,7 +8,39 @@
 //     meaningful on a half-drawn canvas.
 //   - `disabled` nodes still participate. Disabling is a run-time skip, not a
 //     structural edit, so the editor keeps showing the same shape.
-import { LOOP_BODY_HANDLE, isLoopNode, isTriggerNode, } from "./types.js";
+import { LOOP_BODY_HANDLE, MAX_WORKFLOW_LOOP_ITERATIONS, WORKFLOW_CODE_V1_MAX_SANDBOX_INVOCATIONS_PER_RUN, WORKFLOW_CODE_V1_RUN_RETRY_HEADROOM, isLoopNode, isTriggerNode, } from "./types.js";
+/**
+ * Worst-case fresh microVM count for one graph run.
+ *
+ * A typed Code node runs once per enclosing loop iteration. A retry replays
+ * completed steps and only re-executes the failed sandbox, so retry settings do
+ * not multiply every node; one global headroom covers the tenant schema's five
+ * run attempts. The result saturates at cap+1 to bound hostile arithmetic.
+ */
+export function workflowCodeSandboxInvocationUpperBound(graph) {
+    const saturation = WORKFLOW_CODE_V1_MAX_SANDBOX_INVOCATIONS_PER_RUN + 1;
+    const loops = graph.nodes
+        .filter(isLoopNode)
+        .map((node) => ({
+        body: loopBodyNodeIds(graph, node.id),
+        iterations: Number.isInteger(node.max_iterations) && (node.max_iterations ?? 0) > 0
+            ? Math.min(node.max_iterations, MAX_WORKFLOW_LOOP_ITERATIONS)
+            : MAX_WORKFLOW_LOOP_ITERATIONS,
+    }));
+    let total = graph.nodes.some((node) => node.kind === "code" && node.code !== undefined && node.disabled !== true) ? WORKFLOW_CODE_V1_RUN_RETRY_HEADROOM : 0;
+    for (const node of graph.nodes) {
+        if (node.kind !== "code" || !node.code || node.disabled === true)
+            continue;
+        let invocations = 1;
+        for (const loop of loops) {
+            if (!loop.body.has(node.id))
+                continue;
+            invocations = Math.min(saturation, invocations * loop.iterations);
+        }
+        total = Math.min(saturation, total + invocations);
+    }
+    return total;
+}
 function nodeIndex(graph) {
     const index = new Map();
     for (const node of graph.nodes) {

package/node_modules/@oxygen/workflows/dist/graph/types.d.ts

@@ -4,6 +4,15 @@ export declare const WORKFLOW_GRAPH_COMPILER_VERSION = "oxygen-workflows-v2";
 export declare const PORTABLE_WORKFLOW_DEFINITION_VERSION = 1;
 export declare const PORTABLE_WORKFLOW_DEFINITION_COMPILER_VERSION = "oxygen-workflow-definition-v1";
 export declare const RESERVED_NODE_IDS: ReadonlySet<string>;
+/**
+ * Named Code inputs and declared output fields become dotted scope paths and
+ * JavaScript property reads (`inputs.company_domain`). V1 deliberately accepts
+ * only one unescaped path segment; bracket-quoted keys can be added later as a
+ * versioned path-grammar change without making today's picker offer a path the
+ * runtime resolves differently.
+ */
+export declare const WORKFLOW_CODE_FIELD_NAME_PATTERN: RegExp;
+export declare function isWorkflowCodeFieldName(value: string): boolean;
 export declare const LOOP_BODY_HANDLE = "loop_body";
 export declare const LOOP_DONE_HANDLE = "loop_done";
 export declare const ERROR_HANDLE = "error";
@@ -79,6 +88,87 @@ export type WorkflowValueRef =
     path?: string;
 };
 export type WorkflowValueRefType = WorkflowValueRef["type"];
+/** The only JSON value kinds the oxygen-js-v1 output validator enforces. */
+export type WorkflowCodeJsonType = "array" | "boolean" | "integer" | "null" | "number" | "object" | "string";
+/**
+ * Closed JSON Schema subset enforced for typed Code v1 outputs.
+ *
+ * Deliberately no index signature: adding a keyword here is a runtime contract
+ * change, because the worker must enforce every semantic keyword authors can
+ * store. Object-shaped members still need `additionalProperties: false`; lint
+ * enforces that recursive invariant because TypeScript cannot express it
+ * conditionally for every union of `type` values.
+ */
+export type WorkflowCodeJsonSchema = {
+    type?: WorkflowCodeJsonType | WorkflowCodeJsonType[];
+    const?: unknown;
+    enum?: unknown[];
+    anyOf?: WorkflowCodeJsonSchema[];
+    properties?: Record<string, WorkflowCodeJsonSchema>;
+    required?: string[];
+    additionalProperties?: false;
+    items?: WorkflowCodeJsonSchema;
+    /** Annotation-only keywords; the runtime never treats these as constraints. */
+    title?: string;
+    description?: string;
+    default?: unknown;
+    examples?: unknown[];
+};
+/** A Code v1 node always returns a closed object at its top level. */
+export type WorkflowCodeOutputSchema = Omit<WorkflowCodeJsonSchema, "type" | "additionalProperties"> & {
+    type: "object";
+    additionalProperties: false;
+};
+export declare const WORKFLOW_CODE_V1_VERSION = 1;
+export declare const WORKFLOW_CODE_V1_LANGUAGE = "javascript";
+export declare const WORKFLOW_CODE_V1_RUNTIME = "oxygen-js-v1";
+export declare const WORKFLOW_CODE_V1_MAX_SOURCE_BYTES: number;
+export declare const WORKFLOW_CODE_V1_MAX_INPUTS = 100;
+export declare const WORKFLOW_CODE_V1_MIN_TIMEOUT_MS = 10;
+export declare const WORKFLOW_CODE_V1_MAX_TIMEOUT_MS = 10000;
+export declare const WORKFLOW_CODE_V1_DEFAULT_TIMEOUT_MS = 1000;
+export declare const WORKFLOW_CODE_V1_MIN_INPUT_BYTES = 1000;
+export declare const WORKFLOW_CODE_V1_MAX_INPUT_BYTES = 2000000;
+export declare const WORKFLOW_CODE_V1_DEFAULT_INPUT_BYTES = 250000;
+export declare const WORKFLOW_CODE_V1_MIN_OUTPUT_BYTES = 1000;
+export declare const WORKFLOW_CODE_V1_MAX_OUTPUT_BYTES = 2000000;
+export declare const WORKFLOW_CODE_V1_DEFAULT_OUTPUT_BYTES = 250000;
+export declare const WORKFLOW_CODE_V1_MAX_SCHEMA_BYTES: number;
+export declare const WORKFLOW_CODE_V1_MAX_SCHEMA_DEPTH = 8;
+export declare const WORKFLOW_CODE_V1_MAX_SCHEMA_PROPERTIES = 200;
+export declare const WORKFLOW_CODE_V1_MAX_SCHEMA_NODES = 500;
+export declare const WORKFLOW_CODE_V1_MAX_VALIDATION_VISITS = 100000;
+/** Hard per-run COGS boundary for fresh Workflow Code microVMs, including retries and loops. */
+export declare const WORKFLOW_CODE_V1_MAX_SANDBOX_INVOCATIONS_PER_RUN = 25;
+/** Four extra executions cover the tenant schema's five-attempt run ceiling. */
+export declare const WORKFLOW_CODE_V1_RUN_RETRY_HEADROOM = 4;
+export declare const WORKFLOW_CODE_V1_DEFAULT_SOURCE = "(inputs) => ({})";
+export declare const WORKFLOW_CODE_V1_DEFAULT_OUTPUT_SCHEMA: {
+    type: "object";
+    properties: {};
+    additionalProperties: false;
+};
+export declare const WORKFLOW_CODE_V1_DEFAULT_LIMITS: {
+    readonly timeout_ms: 1000;
+    readonly max_input_bytes: 250000;
+    readonly max_output_bytes: 250000;
+};
+/** Typed, deterministic, network-denied JavaScript Code node contract. */
+export type WorkflowCodeV1 = {
+    version: typeof WORKFLOW_CODE_V1_VERSION;
+    language: typeof WORKFLOW_CODE_V1_LANGUAGE;
+    runtime: typeof WORKFLOW_CODE_V1_RUNTIME;
+    /** A complete function expression, conventionally `(inputs) => ({ ... })`. */
+    source: string;
+    /** Explicit graph bindings resolved before the sandbox is entered. */
+    inputs: Record<string, WorkflowValueRef>;
+    output_schema: WorkflowCodeOutputSchema;
+    limits: {
+        timeout_ms: number;
+        max_input_bytes: number;
+        max_output_bytes: number;
+    };
+};
 export type WorkflowCompareOp = "eq" | "neq" | "gt" | "gte" | "lt" | "lte" | "contains" | "not_contains" | "starts_with" | "ends_with" | "is_empty" | "is_not_empty" | "in" | "not_in" | "matches";
 /**
  * A structured (never source-code) predicate, so the editor can render it and the
@@ -132,6 +222,37 @@ type WorkflowGraphNodeBase = {
 /** Bounds on a node's own retry budget. */
 export declare const MAX_WORKFLOW_NODE_RETRY_ATTEMPTS = 5;
 export declare const MAX_WORKFLOW_NODE_RETRY_WAIT_SECONDS = 3600;
+/**
+ * The three executable shapes a graph Code node may carry.
+ *
+ * `run_source` and `recipe` remain first-class compatibility variants so old,
+ * immutable revisions keep their exact stored contract. New authored code uses
+ * the nested typed `code` envelope. The `never` siblings make "exactly one"
+ * compile-time visible instead of leaving it solely to the manifest linter.
+ */
+export type WorkflowGraphCodeNode = (WorkflowGraphNodeBase & {
+    kind: "code";
+    run_source: string;
+    recipe?: never;
+    code?: never;
+    configuration?: never;
+    /** Imported v1 source reads raw step outputs rather than v2 output envelopes. */
+    legacy_context?: "v1";
+}) | (WorkflowGraphNodeBase & {
+    kind: "code";
+    run_source?: never;
+    recipe: RecipeManifest;
+    code?: never;
+    configuration?: Record<string, WorkflowValueRef>;
+    legacy_context?: never;
+}) | (WorkflowGraphNodeBase & {
+    kind: "code";
+    run_source?: never;
+    recipe?: never;
+    code: WorkflowCodeV1;
+    configuration?: never;
+    legacy_context?: never;
+});
 export type WorkflowGraphNode = 
 /** The run's entry point. Its output is the trigger payload. */
 (WorkflowGraphNodeBase & {
@@ -223,22 +344,8 @@ export type WorkflowGraphNode =
     reason?: WorkflowValueRef;
     request?: Record<string, WorkflowValueRef>;
 })
-/**
- * Sandboxed transform source, or an imported durable recipe bundle.
- *
- * A recipe is deliberately ONE executable node: its bundle is the runtime
- * authority, while visual_plan remains inspectable metadata. Turning those
- * descriptive checkpoints into editable graph nodes would make the canvas lie
- * about what deletion or rewiring actually changes.
- */
- | (WorkflowGraphNodeBase & {
-    kind: "code";
-    run_source?: string;
-    recipe?: RecipeManifest;
-    configuration?: Record<string, WorkflowValueRef>;
-    /** Imported v1 source reads raw step outputs rather than v2 output envelopes. */
-    legacy_context?: "v1";
-})
+/** Legacy source, imported durable recipe, or typed oxygen-js-v1 code. */
+ | WorkflowGraphCodeNode
 /** Calls another workflow as a child run. */
  | (WorkflowGraphNodeBase & {
     kind: "workflow";

package/node_modules/@oxygen/workflows/dist/graph/types.js

@@ -10,6 +10,17 @@ export const RESERVED_NODE_IDS = new Set([
     "constructor",
     "prototype",
 ]);
+/**
+ * Named Code inputs and declared output fields become dotted scope paths and
+ * JavaScript property reads (`inputs.company_domain`). V1 deliberately accepts
+ * only one unescaped path segment; bracket-quoted keys can be added later as a
+ * versioned path-grammar change without making today's picker offer a path the
+ * runtime resolves differently.
+ */
+export const WORKFLOW_CODE_FIELD_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+export function isWorkflowCodeFieldName(value) {
+    return WORKFLOW_CODE_FIELD_NAME_PATTERN.test(value) && !RESERVED_NODE_IDS.has(value);
+}
 // Reserved edge source handles. Anything else in `source_handle` must name a
 // case id on a `switch` node.
 export const LOOP_BODY_HANDLE = "loop_body";
@@ -58,6 +69,40 @@ export const BILLABLE_WORKFLOW_GRAPH_NODE_KINDS = new Set([
 export function workflowGraphNodeKindBills(kind) {
     return BILLABLE_WORKFLOW_GRAPH_NODE_KINDS.has(kind);
 }
+export const WORKFLOW_CODE_V1_VERSION = 1;
+export const WORKFLOW_CODE_V1_LANGUAGE = "javascript";
+export const WORKFLOW_CODE_V1_RUNTIME = "oxygen-js-v1";
+export const WORKFLOW_CODE_V1_MAX_SOURCE_BYTES = 64 * 1_024;
+export const WORKFLOW_CODE_V1_MAX_INPUTS = 100;
+export const WORKFLOW_CODE_V1_MIN_TIMEOUT_MS = 10;
+export const WORKFLOW_CODE_V1_MAX_TIMEOUT_MS = 10_000;
+export const WORKFLOW_CODE_V1_DEFAULT_TIMEOUT_MS = 1_000;
+export const WORKFLOW_CODE_V1_MIN_INPUT_BYTES = 1_000;
+export const WORKFLOW_CODE_V1_MAX_INPUT_BYTES = 2_000_000;
+export const WORKFLOW_CODE_V1_DEFAULT_INPUT_BYTES = 250_000;
+export const WORKFLOW_CODE_V1_MIN_OUTPUT_BYTES = 1_000;
+export const WORKFLOW_CODE_V1_MAX_OUTPUT_BYTES = 2_000_000;
+export const WORKFLOW_CODE_V1_DEFAULT_OUTPUT_BYTES = 250_000;
+export const WORKFLOW_CODE_V1_MAX_SCHEMA_BYTES = 64 * 1_024;
+export const WORKFLOW_CODE_V1_MAX_SCHEMA_DEPTH = 8;
+export const WORKFLOW_CODE_V1_MAX_SCHEMA_PROPERTIES = 200;
+export const WORKFLOW_CODE_V1_MAX_SCHEMA_NODES = 500;
+export const WORKFLOW_CODE_V1_MAX_VALIDATION_VISITS = 100_000;
+/** Hard per-run COGS boundary for fresh Workflow Code microVMs, including retries and loops. */
+export const WORKFLOW_CODE_V1_MAX_SANDBOX_INVOCATIONS_PER_RUN = 25;
+/** Four extra executions cover the tenant schema's five-attempt run ceiling. */
+export const WORKFLOW_CODE_V1_RUN_RETRY_HEADROOM = 4;
+export const WORKFLOW_CODE_V1_DEFAULT_SOURCE = "(inputs) => ({})";
+export const WORKFLOW_CODE_V1_DEFAULT_OUTPUT_SCHEMA = {
+    type: "object",
+    properties: {},
+    additionalProperties: false,
+};
+export const WORKFLOW_CODE_V1_DEFAULT_LIMITS = {
+    timeout_ms: WORKFLOW_CODE_V1_DEFAULT_TIMEOUT_MS,
+    max_input_bytes: WORKFLOW_CODE_V1_DEFAULT_INPUT_BYTES,
+    max_output_bytes: WORKFLOW_CODE_V1_DEFAULT_OUTPUT_BYTES,
+};
 /** Bounds on a node's own retry budget. */
 export const MAX_WORKFLOW_NODE_RETRY_ATTEMPTS = 5;
 export const MAX_WORKFLOW_NODE_RETRY_WAIT_SECONDS = 3_600;

package/node_modules/@oxygen/workflows/dist/index.d.ts

@@ -32,7 +32,7 @@ export type JsonSchema = {
     properties?: Record<string, JsonSchema>;
     required?: string[];
     items?: JsonSchema;
-    enum?: string[];
+    enum?: unknown[];
     const?: unknown;
     anyOf?: JsonSchema[];
     additionalProperties?: boolean | JsonSchema;
@@ -444,9 +444,11 @@ export declare function buildBlueprint(input: {
     exportedAt?: Date;
     sourceHash?: string;
 }): Blueprint;
-export declare function validateJsonSchemaValue(value: unknown, schema: JsonSchema | undefined, path?: string): JsonSchemaValidationIssue[];
+export declare function validateJsonSchemaValue(value: unknown, schema: JsonSchema | undefined, path?: string, maxIssues?: number, maxVisits?: number): JsonSchemaValidationIssue[];
 export declare function assertRecipeBundleSafe(bundle: string): void;
 export declare function lintRecipeBundleSafety(bundle: string, path?: string): WorkflowLintIssue[];
+/** Comment/string-aware author feedback for the stricter oxygen-js-v1 runtime. */
+export declare function lintWorkflowCodeSourceSafety(source: string, path?: string): WorkflowLintIssue[];
 export declare function runPureWorkflowFunction(input: {
     source: string;
     context: Record<string, unknown>;
@@ -471,6 +473,10 @@ export declare const workflowApplySchema: {
             readonly exclusiveMinimum: 0;
             readonly description: "Hard credit ceiling for each autonomous delivery.";
         };
+        readonly publish: {
+            readonly type: "boolean";
+            readonly description: "False saves an editable draft revision without publishing it. Defaults to true.";
+        };
     };
     readonly required: readonly ["manifest"];
     readonly $defs: {
@@ -486,6 +492,9 @@ export declare const workflowCallSchema: {
     readonly type: "object";
     readonly additionalProperties: false;
     readonly properties: {
+        readonly workflow: {
+            readonly type: "string";
+        };
         readonly workflow_id: {
             readonly type: "string";
         };
@@ -502,6 +511,20 @@ export declare const workflowCallSchema: {
         readonly idempotency_key: {
             readonly type: "string";
         };
+        readonly revision_version: {
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly description: "Exact saved revision to run. Historical revisions are non-live only.";
+        };
+        readonly approved: {
+            readonly type: "boolean";
+            readonly description: "Explicit approval required for live calls.";
+        };
+        readonly max_credits: {
+            readonly type: "number";
+            readonly exclusiveMinimum: 0;
+            readonly description: "Positive credit ceiling required for live calls.";
+        };
     };
     readonly required: readonly ["mode"];
 };
@@ -538,6 +561,15 @@ export declare const workflowEventEmitSchema: {
         readonly mode: {
             readonly enum: readonly ["dry_run", "live", "smoke_test"];
         };
+        readonly approved: {
+            readonly type: "boolean";
+            readonly description: "Explicit approval required when event deliveries run live.";
+        };
+        readonly max_credits: {
+            readonly type: "number";
+            readonly exclusiveMinimum: 0;
+            readonly description: "Positive per-delivery credit ceiling required for live event emission.";
+        };
     };
     readonly required: readonly ["source", "event", "payload", "mode"];
 };
@@ -622,6 +654,10 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
             readonly exclusiveMinimum: 0;
             readonly description: "Hard credit ceiling for each autonomous delivery.";
         };
+        readonly publish: {
+            readonly type: "boolean";
+            readonly description: "False saves an editable draft revision without publishing it. Defaults to true.";
+        };
     };
     readonly required: readonly ["manifest"];
     readonly $defs: {
@@ -636,6 +672,9 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
     readonly type: "object";
     readonly additionalProperties: false;
     readonly properties: {
+        readonly workflow: {
+            readonly type: "string";
+        };
         readonly workflow_id: {
             readonly type: "string";
         };
@@ -652,6 +691,20 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
         readonly idempotency_key: {
             readonly type: "string";
         };
+        readonly revision_version: {
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly description: "Exact saved revision to run. Historical revisions are non-live only.";
+        };
+        readonly approved: {
+            readonly type: "boolean";
+            readonly description: "Explicit approval required for live calls.";
+        };
+        readonly max_credits: {
+            readonly type: "number";
+            readonly exclusiveMinimum: 0;
+            readonly description: "Positive credit ceiling required for live calls.";
+        };
     };
     readonly required: readonly ["mode"];
 } | {
@@ -687,6 +740,15 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
         readonly mode: {
             readonly enum: readonly ["dry_run", "live", "smoke_test"];
         };
+        readonly approved: {
+            readonly type: "boolean";
+            readonly description: "Explicit approval required when event deliveries run live.";
+        };
+        readonly max_credits: {
+            readonly type: "number";
+            readonly exclusiveMinimum: 0;
+            readonly description: "Positive per-delivery credit ceiling required for live event emission.";
+        };
     };
     readonly required: readonly ["source", "event", "payload", "mode"];
 } | {
@@ -770,6 +832,10 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
                     readonly exclusiveMinimum: 0;
                     readonly description: "Hard credit ceiling for each autonomous delivery.";
                 };
+                readonly publish: {
+                    readonly type: "boolean";
+                    readonly description: "False saves an editable draft revision without publishing it. Defaults to true.";
+                };
             };
             readonly required: readonly ["manifest"];
             readonly $defs: {
@@ -785,6 +851,9 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
             readonly type: "object";
             readonly additionalProperties: false;
             readonly properties: {
+                readonly workflow: {
+                    readonly type: "string";
+                };
                 readonly workflow_id: {
                     readonly type: "string";
                 };
@@ -801,6 +870,20 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
                 readonly idempotency_key: {
                     readonly type: "string";
                 };
+                readonly revision_version: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly description: "Exact saved revision to run. Historical revisions are non-live only.";
+                };
+                readonly approved: {
+                    readonly type: "boolean";
+                    readonly description: "Explicit approval required for live calls.";
+                };
+                readonly max_credits: {
+                    readonly type: "number";
+                    readonly exclusiveMinimum: 0;
+                    readonly description: "Positive credit ceiling required for live calls.";
+                };
             };
             readonly required: readonly ["mode"];
         };
@@ -837,6 +920,15 @@ export declare function getWorkflowSchema(subject?: "apply" | "call" | "event" |
                 readonly mode: {
                     readonly enum: readonly ["dry_run", "live", "smoke_test"];
                 };
+                readonly approved: {
+                    readonly type: "boolean";
+                    readonly description: "Explicit approval required when event deliveries run live.";
+                };
+                readonly max_credits: {
+                    readonly type: "number";
+                    readonly exclusiveMinimum: 0;
+                    readonly description: "Positive per-delivery credit ceiling required for live event emission.";
+                };
             };
             readonly required: readonly ["source", "event", "payload", "mode"];
         };