@pasko70/pibo 3.3.0 → 3.4.0

package/dist/previews/store.js

@@ -5,7 +5,8 @@ import { DatabaseSync } from "node:sqlite";
 import { ensurePrivatePiboHomeForPath, piboHomePath } from "../core/pibo-home.js";
 import { protectPrivateFileSync } from "../core/private-path.js";
 import { loadPreviewConfig } from "./config.js";
-export const PREVIEW_SCHEMA_VERSION = 4;
+import { migratePreviewSessionOwnership } from "./migrations/session-ownership.js";
+export const PREVIEW_SCHEMA_VERSION = 6;
 export const MAX_ACTIVE_PREVIEW_EXPOSURES = 256;
 export const MAX_ACTIVE_PREVIEW_EXPOSURES_PER_SESSION = 16;
 export const MAX_OUTSTANDING_PREVIEW_TICKETS = 32;
@@ -52,8 +53,6 @@ function validateExposureInput(input) {
         throw new Error("Pibo Session id is invalid");
     if (!input.label.trim() || input.label.length > 120)
         throw new Error("Preview label must contain 1 to 120 characters");
-    if (input.projectId && input.projectId.length > 256)
-        throw new Error("Preview Project id is too long");
     if (!input.workspace || input.workspace.length > 4_096)
         throw new Error("Preview workspace is invalid");
     if (!Number.isInteger(input.targetPort) || input.targetPort < 1024 || input.targetPort > 65535) {
@@ -66,13 +65,15 @@ function validateExposureInput(input) {
     if ((input.managementMode ?? "external") === "managed" && !input.startCommand) {
         throw new Error("Managed Preview definitions require a start command");
     }
+    if (input.proxyMode !== undefined && input.proxyMode !== "standard" && input.proxyMode !== "pibo-compute-dev-auth") {
+        throw new Error("Preview proxy mode is invalid");
+    }
 }
 function exposureFromRow(row) {
     const managementMode = row.management_mode === "managed" ? "managed" : "external";
     return {
         id: row.id,
         piboSessionId: row.pibo_session_id,
-        projectId: row.project_id ?? undefined,
         label: row.label,
         targetHost: row.target_host,
         targetPort: row.target_port,
@@ -80,6 +81,7 @@ function exposureFromRow(row) {
         targetProcessStartTicks: row.target_process_start_ticks ?? undefined,
         workspace: row.workspace,
         managementMode,
+        proxyMode: row.proxy_mode === "pibo-compute-dev-auth" ? "pibo-compute-dev-auth" : "standard",
         startCommand: row.start_command ?? undefined,
         serverState: managementMode === "managed" && row.server_state !== "external" ? row.server_state : undefined,
         serverGeneration: row.server_generation ?? undefined,
@@ -107,6 +109,7 @@ function sameAuthorizationExposure(first, second) {
     return first.id === second.id &&
         first.createdAt === second.createdAt &&
         first.managementMode === second.managementMode &&
+        first.proxyMode === second.proxyMode &&
         first.serverGeneration === second.serverGeneration &&
         first.targetHost === second.targetHost &&
         first.targetPort === second.targetPort &&
@@ -165,7 +168,6 @@ export class PreviewStore {
 			CREATE TABLE IF NOT EXISTS preview_exposures (
 				id TEXT PRIMARY KEY,
 				pibo_session_id TEXT NOT NULL,
-				project_id TEXT,
 				label TEXT NOT NULL,
 				target_host TEXT NOT NULL CHECK (target_host IN ('127.0.0.1', '::1')),
 				target_port INTEGER NOT NULL CHECK (target_port BETWEEN 1024 AND 65535),
@@ -173,6 +175,7 @@ export class PreviewStore {
 				target_process_start_ticks TEXT,
 				workspace TEXT NOT NULL,
 				management_mode TEXT NOT NULL DEFAULT 'external' CHECK (management_mode IN ('external', 'managed')),
+				proxy_mode TEXT NOT NULL DEFAULT 'standard' CHECK (proxy_mode IN ('standard', 'pibo-compute-dev-auth')),
 				start_command TEXT,
 				server_state TEXT NOT NULL DEFAULT 'external' CHECK (server_state IN ('external', 'stopped', 'starting', 'running', 'stopping', 'error')),
 				server_generation TEXT,
@@ -217,6 +220,7 @@ export class PreviewStore {
                 ["target_process_id", "INTEGER"],
                 ["target_process_start_ticks", "TEXT"],
                 ["management_mode", "TEXT NOT NULL DEFAULT 'external'"],
+                ["proxy_mode", "TEXT NOT NULL DEFAULT 'standard' CHECK (proxy_mode IN ('standard', 'pibo-compute-dev-auth'))"],
                 ["start_command", "TEXT"],
                 ["server_state", "TEXT NOT NULL DEFAULT 'external'"],
                 ["server_generation", "TEXT"],
@@ -244,7 +248,6 @@ export class PreviewStore {
 					CREATE TABLE preview_exposures (
 						id TEXT PRIMARY KEY,
 						pibo_session_id TEXT NOT NULL,
-						project_id TEXT,
 						label TEXT NOT NULL,
 						target_host TEXT NOT NULL CHECK (target_host IN ('127.0.0.1', '::1')),
 						target_port INTEGER NOT NULL CHECK (target_port BETWEEN 1024 AND 65535),
@@ -252,6 +255,7 @@ export class PreviewStore {
 						target_process_start_ticks TEXT,
 						workspace TEXT NOT NULL,
 						management_mode TEXT NOT NULL DEFAULT 'external' CHECK (management_mode IN ('external', 'managed')),
+						proxy_mode TEXT NOT NULL DEFAULT 'standard' CHECK (proxy_mode IN ('standard', 'pibo-compute-dev-auth')),
 						start_command TEXT,
 						server_state TEXT NOT NULL DEFAULT 'external' CHECK (server_state IN ('external', 'stopped', 'starting', 'running', 'stopping', 'error')),
 						server_generation TEXT,
@@ -268,17 +272,17 @@ export class PreviewStore {
 						closed_at TEXT
 					);
 					INSERT INTO preview_exposures (
-						id, pibo_session_id, project_id, label, target_host, target_port,
+						id, pibo_session_id, label, target_host, target_port,
 						target_process_id, target_process_start_ticks, workspace,
-						management_mode, start_command, server_state, server_generation,
+						management_mode, proxy_mode, start_command, server_state, server_generation,
 						server_started_at, server_stop_at, server_stopped_at, server_error,
 						manager_kind, manager_id, manager_pid, manager_process_start_ticks,
 						created_at, expires_at, closed_at
 					)
 					SELECT
-						id, pibo_session_id, project_id, label, target_host, target_port,
+						id, pibo_session_id, label, target_host, target_port,
 						target_process_id, target_process_start_ticks, workspace,
-						management_mode, start_command, server_state, server_generation,
+						management_mode, proxy_mode, start_command, server_state, server_generation,
 						server_started_at, server_stop_at, server_stopped_at, server_error,
 						manager_kind, manager_id, manager_pid, manager_process_start_ticks,
 						created_at, expires_at, closed_at
@@ -292,6 +296,8 @@ export class PreviewStore {
 			CREATE INDEX IF NOT EXISTS preview_exposures_managed_state_idx
 				ON preview_exposures (management_mode, server_state, expires_at)
 		`);
+            if (currentVersion < 5)
+                migratePreviewSessionOwnership(this.db);
             this.db.exec(`PRAGMA user_version = ${PREVIEW_SCHEMA_VERSION}`);
             this.db.exec("COMMIT");
         }
@@ -314,6 +320,7 @@ export class PreviewStore {
     createExposure(input) {
         validateExposureInput(input);
         const managementMode = input.managementMode ?? "external";
+        const proxyMode = input.proxyMode ?? "standard";
         const serverState = managementMode === "managed" ? input.serverState ?? "stopped" : "external";
         this.db.exec("BEGIN IMMEDIATE");
         try {
@@ -327,12 +334,12 @@ export class PreviewStore {
             }
             this.db.prepare(`
 			INSERT INTO preview_exposures (
-				id, pibo_session_id, project_id, label, target_host, target_port,
+				id, pibo_session_id, label, target_host, target_port,
 				target_process_id, target_process_start_ticks, workspace,
-				management_mode, start_command, server_state,
+				management_mode, proxy_mode, start_command, server_state,
 				created_at, expires_at, closed_at
 			) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)
-			`).run(input.id, input.piboSessionId, input.projectId ?? null, input.label, input.targetHost, input.targetPort, input.targetProcessId ?? null, input.targetProcessStartTicks ?? null, input.workspace, managementMode, input.startCommand ?? null, serverState, input.createdAt, input.expiresAt);
+			`).run(input.id, input.piboSessionId, input.label, input.targetHost, input.targetPort, input.targetProcessId ?? null, input.targetProcessStartTicks ?? null, input.workspace, managementMode, proxyMode, input.startCommand ?? null, serverState, input.createdAt, input.expiresAt);
             const exposure = this.requireExposure(input.id);
             this.db.exec("COMMIT");
             return exposure;

package/dist/previews/web-app.js

@@ -1,6 +1,6 @@
 import { loadPiboConfig } from "../config/config.js";
 import { PiboWebHttpError, responseHtml, responseJson } from "../web/http.js";
-import { DEFAULT_PREVIEW_SESSION_TTL_MINUTES, DEFAULT_PREVIEW_TICKET_TTL_SECONDS, previewIdFromHostname, previewPublicURL, requirePreviewBaseURL, } from "./config.js";
+import { DEFAULT_PREVIEW_SESSION_TTL_MINUTES, DEFAULT_PREVIEW_TICKET_TTL_SECONDS, PREVIEW_TLS_AUTHORIZATION_PATH, previewIdFromHostname, previewPublicURL, requirePreviewBaseURL, } from "./config.js";
 import { createDefaultPreviewProcessController, reconcileManagedPreviews, startManagedPreview, stopManagedPreview, } from "./manager.js";
 import { isPreviewTargetProcessCurrent, probePreviewTarget } from "./network.js";
 import { cookieValue, DEFAULT_MAX_PREVIEW_PROXY_CONNECTIONS, DEFAULT_MAX_PREVIEW_PROXY_CONNECTIONS_PER_PREVIEW, PreviewProxyLimiter, previewSessionCookieName, proxyPreviewHttp, proxyPreviewWebSocket, } from "./proxy.js";
@@ -59,7 +59,7 @@ async function exposureHealth(exposure) {
     return online ? "online" : "offline";
 }
 async function publicExposure(exposure, baseURL) {
-    const { workspace: _workspace, startCommand: _startCommand, targetHost: _targetHost, targetPort: _targetPort, managementMode: _managementMode, targetProcessId: _targetProcessId, targetProcessStartTicks: _targetProcessStartTicks, serverError: _serverError, serverGeneration: _serverGeneration, managerKind: _managerKind, managerId: _managerId, managerPid: _managerPid, managerProcessStartTicks: _managerProcessStartTicks, ...publicFields } = exposure;
+    const { workspace: _workspace, startCommand: _startCommand, targetHost: _targetHost, targetPort: _targetPort, managementMode: _managementMode, proxyMode: _proxyMode, targetProcessId: _targetProcessId, targetProcessStartTicks: _targetProcessStartTicks, serverError: _serverError, serverGeneration: _serverGeneration, managerKind: _managerKind, managerId: _managerId, managerPid: _managerPid, managerProcessStartTicks: _managerProcessStartTicks, ...publicFields } = exposure;
     return {
         ...publicFields,
         managed: exposure.managementMode === "managed",
@@ -250,6 +250,16 @@ export function createPreviewWebApp(options = {}) {
             const url = new URL(request.url);
             if (!url.pathname.startsWith(PREVIEW_WEB_API_PREFIX))
                 return undefined;
+            if (url.pathname === PREVIEW_TLS_AUTHORIZATION_PATH) {
+                if (request.method !== "GET")
+                    return new Response(null, { status: 405, headers: { allow: "GET", "cache-control": "no-store" } });
+                const previewId = baseURL ? previewIdFromHostname(url.searchParams.get("domain") ?? "", baseURL) : undefined;
+                const allowed = previewId ? withStore(databasePath, (store) => {
+                    const exposure = store.getExposure(previewId);
+                    return Boolean(exposure && previewExposureState(exposure) === "active");
+                }) : false;
+                return new Response(null, { status: allowed ? 200 : 403, headers: { "cache-control": "no-store" } });
+            }
             await context.requireSession({ request });
             if (url.pathname === PREVIEW_WEB_API_PREFIX && request.method === "GET") {
                 const piboSessionId = url.searchParams.get("piboSessionId")?.trim();

package/dist/sessions/workflow-session-kind.js

@@ -7,9 +7,6 @@ export function workflowSessionKindFromMetadata(metadata) {
     const value = metadata?.[PIBO_WORKFLOW_SESSION_KIND_METADATA_KEY];
     if (isPiboWorkflowSessionKind(value))
         return value;
-    // Backfill the initial Project workflow metadata shape used before the stable enum.
-    if (metadata?.projectSessionKind === "main")
-        return "main_workflow";
     return undefined;
 }
 export function withWorkflowSessionKind(metadata, workflowSessionKind) {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@pasko70/pibo",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@pasko70/pibo",
-      "version": "3.3.0",
+      "version": "3.4.0",
       "workspaces": [
         "packages/workflows"
       ],
@@ -39,7 +39,8 @@
         "react-virtuoso": "^4.18.6",
         "remark-gfm": "^4.0.1",
         "tailwindcss": "^4.2.4",
-        "typebox": "1.1.38"
+        "typebox": "1.1.38",
+        "xstate": "5.31.1"
       },
       "bin": {
         "pibo": "dist/bin/pibo.js",
@@ -11501,7 +11502,7 @@
       "license": "MIT",
       "peer": true,
       "funding": {
-        "type": "GitHub Sponsors ❤",
+        "type": "GitHub Sponsors \u2764",
         "url": "https://github.com/sponsors/dmonad"
       }
     },
@@ -11780,7 +11781,7 @@
         "node": ">=16"
       },
       "funding": {
-        "type": "GitHub Sponsors ❤",
+        "type": "GitHub Sponsors \u2764",
         "url": "https://github.com/sponsors/dmonad"
       }
     },
@@ -17131,7 +17132,7 @@
         "npm": ">=8.0.0"
       },
       "funding": {
-        "type": "GitHub Sponsors ❤",
+        "type": "GitHub Sponsors \u2764",
         "url": "https://github.com/sponsors/dmonad"
       }
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pasko70/pibo",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -10,6 +10,9 @@
   "description": "Minimal TypeScript wrapper around Pi Coding Agent.",
   "files": [
     "dist",
+    "packages/workflows/dist",
+    "!packages/workflows/dist/testing/**",
+    "packages/workflows/package.json",
     "!dist/apps/vscode-artifacts/**",
     "context",
     "skills/builtin/**",
@@ -106,7 +109,8 @@
     "react-virtuoso": "^4.18.6",
     "remark-gfm": "^4.0.1",
     "tailwindcss": "^4.2.4",
-    "typebox": "1.1.38"
+    "typebox": "1.1.38",
+    "xstate": "5.31.1"
   },
   "overrides": {
     "esbuild": "$esbuild",

package/packages/workflows/README.md

@@ -0,0 +1,21 @@
+# Pibo Workflows
+
+Initial package boundary for the Pibo Workflow System V1 framework.
+
+The package is organized around the PRD-required internal submodules:
+
+- `src/api` — public authoring helpers, builder API, object definition normalization
+- `src/registry` — workflow registry and implementation lookup
+- `src/types` — workflow IR, runtime, store, diagnostics, events, and utility types
+- `src/validation` — definition, schema, graph, registry, capability, state, and loop validation
+- `src/graph` — reserved for Pibo-owned graph indices and reusable traversal primitives
+- `src/compiler` — reserved for validated definitions, execution plans, and projection metadata
+- `src/runtime` — Pibo-owned deterministic scheduling, attempts, retries, waits, commands, events, and persistence
+- `src/store` — `pibo-workflows.sqlite` schema/store and persistence API
+- `src/xstate` — XState projection, snapshots, and inspection helpers
+- `src/fixtures` — workflow fixtures for tests and manual validation
+- `src/testing` — test harnesses, fake providers, and restart helpers
+
+The workflow IR and persisted Pibo runtime facts are the execution contract and source of truth. External graph frameworks may serve as design references, but the package does not delegate scheduling or persistence to them.
+
+The V1 JSON port schema subset is documented in `../../docs/specs/changes/pibo-workflow-system-v1/structured-outputs-json-schema-subset.md` and implemented by `src/validation`.

package/packages/workflows/dist/api/index.d.ts

@@ -0,0 +1,48 @@
+import type { AdapterRef, AgentProfileSelection, EdgeAdapterDefinition, JsonSchema, JsonWorkflowPort, PromptBuilderRef, RegistryRefId, SelectionPolicy, TextWorkflowPort, WorkflowPort } from "../types/index.js";
+/**
+ * Create a text workflow port.
+ *
+ * Text ports carry plain strings across workflow, node, and adapter boundaries.
+ */
+export declare function text(description?: string): TextWorkflowPort;
+/**
+ * Create a JSON workflow port backed by a V1 JSON Schema subset contract.
+ *
+ * The schema is intentionally preserved as part of the workflow IR so validators,
+ * compilers, runtime checks, and inspection surfaces all see the same contract.
+ */
+export declare function json(schema: JsonSchema, description?: string): JsonWorkflowPort;
+export declare function isTextPort(port: WorkflowPort): port is TextWorkflowPort;
+export declare function isJsonPort(port: WorkflowPort): port is JsonWorkflowPort;
+/**
+ * Reference a registered deterministic TypeScript adapter by id.
+ *
+ * Adapter refs are stored in workflow IR for both edge adapters and visible adapter nodes;
+ * the Workflow Registry owns the executable TypeScript handler behind the id.
+ */
+export declare function adapterRef(id: RegistryRefId): AdapterRef;
+export declare function isAdapterRef(value: unknown): value is AdapterRef;
+export declare function adapterRefId(ref: AdapterRef): RegistryRefId;
+export declare function edgeAdapter(transform: AdapterRef, output: WorkflowPort): EdgeAdapterDefinition;
+/**
+ * Reference a registered TypeScript prompt builder by id.
+ *
+ * Prompt builder refs are stored in workflow IR; the Workflow Registry owns
+ * the executable handler that turns workflow input/state/edge data into the
+ * final prompt text sent to a Pibo Runtime-backed agent node.
+ */
+export declare function promptBuilderRef(id: RegistryRefId): PromptBuilderRef;
+export declare function isPromptBuilderRef(value: unknown): value is Exclude<PromptBuilderRef, string>;
+export declare function promptBuilderRefId(ref: PromptBuilderRef): RegistryRefId;
+/**
+ * Select a fixed Agent Designer profile for a Pibo Runtime-backed agent node.
+ *
+ * V1 intentionally supports only fixed profile selection so workflow runs are
+ * predictable and can record the exact profile requested by each agent node.
+ */
+export declare function fixedProfile(id: RegistryRefId): AgentProfileSelection;
+export declare function inheritSelection(): SelectionPolicy;
+export declare function onlySelection(ids: RegistryRefId[]): SelectionPolicy;
+export declare function excludeSelection(ids: RegistryRefId[]): SelectionPolicy;
+export declare function extendSelection(ids: RegistryRefId[]): SelectionPolicy;
+//# sourceMappingURL=index.d.ts.map

package/packages/workflows/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACrB,qBAAqB,EACrB,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,YAAY,EACb,MAAM,mBAAmB,CAAC;AAE3B;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAE/E;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,IAAI,gBAAgB,CAEvE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,IAAI,gBAAgB,CAEvE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,aAAa,GAAG,UAAU,CAExD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAQhE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,aAAa,CAE3D;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,GAAG,qBAAqB,CAE9F;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,aAAa,GAAG,gBAAgB,CAEpE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAQ7F;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAEvE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,aAAa,GAAG,qBAAqB,CAErE;AAED,wBAAgB,gBAAgB,IAAI,eAAe,CAElD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,eAAe,CAEnE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,eAAe,CAEtE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,eAAe,CAErE"}

package/packages/workflows/dist/api/index.js

@@ -0,0 +1,96 @@
+/**
+ * Create a text workflow port.
+ *
+ * Text ports carry plain strings across workflow, node, and adapter boundaries.
+ */
+export function text(description) {
+    return withOptionalDescription({ kind: "text" }, description);
+}
+/**
+ * Create a JSON workflow port backed by a V1 JSON Schema subset contract.
+ *
+ * The schema is intentionally preserved as part of the workflow IR so validators,
+ * compilers, runtime checks, and inspection surfaces all see the same contract.
+ */
+export function json(schema, description) {
+    return withOptionalDescription({ kind: "json", schema }, description);
+}
+export function isTextPort(port) {
+    return port.kind === "text";
+}
+export function isJsonPort(port) {
+    return port.kind === "json";
+}
+/**
+ * Reference a registered deterministic TypeScript adapter by id.
+ *
+ * Adapter refs are stored in workflow IR for both edge adapters and visible adapter nodes;
+ * the Workflow Registry owns the executable TypeScript handler behind the id.
+ */
+export function adapterRef(id) {
+    return { kind: "adapter", language: "typescript", id };
+}
+export function isAdapterRef(value) {
+    return (isRecord(value) &&
+        value.kind === "adapter" &&
+        value.language === "typescript" &&
+        typeof value.id === "string" &&
+        value.id.length > 0);
+}
+export function adapterRefId(ref) {
+    return ref.id;
+}
+export function edgeAdapter(transform, output) {
+    return { kind: "edgeAdapter", transform, output };
+}
+/**
+ * Reference a registered TypeScript prompt builder by id.
+ *
+ * Prompt builder refs are stored in workflow IR; the Workflow Registry owns
+ * the executable handler that turns workflow input/state/edge data into the
+ * final prompt text sent to a Pibo Runtime-backed agent node.
+ */
+export function promptBuilderRef(id) {
+    return { kind: "promptBuilder", language: "typescript", id };
+}
+export function isPromptBuilderRef(value) {
+    return (isRecord(value) &&
+        value.kind === "promptBuilder" &&
+        value.language === "typescript" &&
+        typeof value.id === "string" &&
+        value.id.length > 0);
+}
+export function promptBuilderRefId(ref) {
+    return typeof ref === "string" ? ref : ref.id;
+}
+/**
+ * Select a fixed Agent Designer profile for a Pibo Runtime-backed agent node.
+ *
+ * V1 intentionally supports only fixed profile selection so workflow runs are
+ * predictable and can record the exact profile requested by each agent node.
+ */
+export function fixedProfile(id) {
+    return { kind: "fixed", id };
+}
+export function inheritSelection() {
+    return { kind: "inherit" };
+}
+export function onlySelection(ids) {
+    return { kind: "only", ids: [...ids] };
+}
+export function excludeSelection(ids) {
+    return { kind: "exclude", ids: [...ids] };
+}
+export function extendSelection(ids) {
+    return { kind: "extend", ids: [...ids] };
+}
+function withOptionalDescription(port, description) {
+    if (description === undefined) {
+        return port;
+    }
+    return { ...port, description };
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=index.js.map

package/packages/workflows/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,WAAoB;IACvC,OAAO,uBAAuB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAAC,MAAkB,EAAE,WAAoB;IAC3D,OAAO,uBAAuB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAkB;IAC3C,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAkB;IAC3C,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,EAAiB;IAC1C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,KAAK,CAAC,QAAQ,KAAK,YAAY;QAC/B,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAe;IAC1C,OAAO,GAAG,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAqB,EAAE,MAAoB;IACrE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAiB;IAChD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,IAAI,KAAK,eAAe;QAC9B,KAAK,CAAC,QAAQ,KAAK,YAAY;QAC/B,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAqB;IACtD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,EAAiB;IAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAoB;IAChD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAoB;IACnD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,uBAAuB,CAA6B,IAAW,EAAE,WAA+B;IACvG,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/packages/workflows/dist/definition-hash.d.ts

@@ -0,0 +1,4 @@
+import type { WorkflowDefinition } from "./types/index.js";
+export declare function hashWorkflowDefinition(definition: WorkflowDefinition): string;
+export declare function canonicalWorkflowDefinitionJson(definition: WorkflowDefinition): string;
+//# sourceMappingURL=definition-hash.d.ts.map

package/packages/workflows/dist/definition-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition-hash.d.ts","sourceRoot":"","sources":["../src/definition-hash.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAE7E;AAED,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAEtF"}

package/packages/workflows/dist/definition-hash.js

@@ -0,0 +1,27 @@
+import { createHash } from "node:crypto";
+export function hashWorkflowDefinition(definition) {
+    return `sha256:${createHash("sha256").update(canonicalWorkflowDefinitionJson(definition)).digest("hex")}`;
+}
+export function canonicalWorkflowDefinitionJson(definition) {
+    return JSON.stringify(normalizeForCanonicalJson(definition));
+}
+function normalizeForCanonicalJson(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => (item === undefined ? null : normalizeForCanonicalJson(item)));
+    }
+    if (value && typeof value === "object") {
+        const input = value;
+        const output = {};
+        for (const key of Object.keys(input).sort()) {
+            const normalized = normalizeForCanonicalJson(input[key]);
+            if (normalized !== undefined)
+                output[key] = normalized;
+        }
+        return output;
+    }
+    if (value === undefined || typeof value === "function" || typeof value === "symbol") {
+        return undefined;
+    }
+    return value;
+}
+//# sourceMappingURL=definition-hash.js.map

package/packages/workflows/dist/definition-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition-hash.js","sourceRoot":"","sources":["../src/definition-hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,UAAU,sBAAsB,CAAC,UAA8B;IACnE,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,UAA8B;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,KAAgC,CAAC;QAC/C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,IAAI,UAAU,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/packages/workflows/dist/fixtures/index.d.ts

@@ -0,0 +1,39 @@
+import type { WorkflowDefinition, WorkflowProviders, WorkflowSetupOptions } from "../types/index.js";
+export declare const workflowFixtureRegistryRefs: {
+    readonly handlers: {
+        readonly makePlan: "fixture.handlers.makePlan";
+        readonly reviseDraft: "fixture.handlers.reviseDraft";
+        readonly summarizeDecision: "fixture.handlers.summarizeDecision";
+    };
+    readonly adapters: {
+        readonly textToTopic: "fixture.adapters.textToTopic";
+        readonly draftToSummary: "fixture.adapters.draftToSummary";
+        readonly decisionToSummary: "fixture.adapters.decisionToSummary";
+    };
+    readonly guards: {
+        readonly approved: "fixture.guards.approved";
+        readonly needsRevision: "fixture.guards.needsRevision";
+    };
+    readonly promptBuilders: {
+        readonly draftPrompt: "fixture.promptBuilders.draftPrompt";
+    };
+    readonly humanActions: {
+        readonly approve: "fixture.humanActions.approve";
+        readonly reject: "fixture.humanActions.reject";
+        readonly resume: "fixture.humanActions.resume";
+        readonly cancel: "fixture.humanActions.cancel";
+    };
+};
+export declare const minimalOneNodePiboAgentWorkflowFixture: WorkflowDefinition;
+export declare const adapterWorkflowFixture: WorkflowDefinition;
+export declare const humanWaitWorkflowFixture: WorkflowDefinition;
+export declare const nestedChildWorkflowFixture: WorkflowDefinition;
+export declare const nestedWorkflowFixture: WorkflowDefinition;
+export declare const mixedNodeWorkflowFixture: WorkflowDefinition;
+export declare const debugSerializationWorkflowFixture: WorkflowDefinition;
+export declare const boundedReviewLoopWorkflowFixture: WorkflowDefinition;
+export declare const requiredWorkflowFixtures: readonly WorkflowDefinition[];
+export declare const workflowFixtureDefinitionsById: Readonly<Record<string, WorkflowDefinition>>;
+export declare const workflowFixtureProviders: WorkflowProviders;
+export declare const workflowFixtureSetupOptions: WorkflowSetupOptions;
+//# sourceMappingURL=index.d.ts.map

package/packages/workflows/dist/fixtures/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fixtures/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAOV,kBAAkB,EAElB,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AA8F3B,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;CAwB9B,CAAC;AAEX,eAAO,MAAM,sCAAsC,EAAE,kBAwBpD,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,kBAsCpC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,kBA6BtC,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,kBAsBxC,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,kBAuBnC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,kBA0FtC,CAAC;AAEF,eAAO,MAAM,iCAAiC,EAAE,kBA0C/C,CAAC;AAEF,eAAO,MAAM,gCAAgC,EAAE,kBAqF9C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,SAAS,kBAAkB,EASjE,CAAC;AAEF,eAAO,MAAM,8BAA8B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAEvF,CAAC;AAuDF,eAAO,MAAM,wBAAwB,EAAE,iBA0BtC,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,oBAUzC,CAAC"}