@plumbus/core 0.3.3 → 0.4.1

package/dist/define/defineFlow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defineFlow.d.ts","sourceRoot":"","sources":["../../src/define/defineFlow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAY1B,UAAU,eAAe,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC,CAAC,UAAU;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,EAAE,CAAC;IAElB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,wBAAgB,UAAU,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,EAChG,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAehC"}
+{"version":3,"file":"defineFlow.d.ts","sourceRoot":"","sources":["../../src/define/defineFlow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAc1B,UAAU,eAAe,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC,CAAC,UAAU;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,EAAE,CAAC;IAElB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,wBAAgB,UAAU,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,EAChG,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBhC"}

package/dist/define/defineFlow.js

@@ -1,3 +1,5 @@
+import { deepFreeze } from '../types/deep-freeze.js';
+import { throwDefineValidationError } from './validation-error.js';
 function isZodSchema(value) {
     return (typeof value === 'object' &&
         value !== null &&
@@ -7,17 +9,21 @@ function isZodSchema(value) {
 }
 export function defineFlow(config) {
     if (!config.name) {
-        throw new Error('Flow name is required');
+        throwDefineValidationError('Flow name is required', { field: 'name' });
     }
     if (!config.domain) {
-        throw new Error('Flow domain is required');
+        throwDefineValidationError('Flow domain is required', { field: 'domain' });
     }
     if (!isZodSchema(config.input)) {
-        throw new Error(`Flow "${config.name}": input must be a Zod schema`);
+        throwDefineValidationError(`Flow "${config.name}": input must be a Zod schema`, {
+            field: 'input',
+        });
     }
     if (!Array.isArray(config.steps) || config.steps.length === 0) {
-        throw new Error(`Flow "${config.name}": at least one step is required`);
+        throwDefineValidationError(`Flow "${config.name}": at least one step is required`, {
+            field: 'steps',
+        });
     }
-    return Object.freeze({ ...config });
+    return deepFreeze({ ...config });
 }
 //# sourceMappingURL=defineFlow.js.map

package/dist/define/defineFlow.js.map

@@ -1 +1 @@
-{"version":3,"file":"defineFlow.js","sourceRoot":"","sources":["../../src/define/defineFlow.ts"],"names":[],"mappings":"AASA,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,WAAW,IAAI,KAAK;QACpB,OAAQ,KAAiC,CAAC,SAAS,KAAK,UAAU,CACnE,CAAC;AACJ,CAAC;AAiBD,MAAM,UAAU,UAAU,CACxB,MAAuC;IAEvC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,SAAS,MAAM,CAAC,IAAI,+BAA+B,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,SAAS,MAAM,CAAC,IAAI,kCAAkC,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"defineFlow.js","sourceRoot":"","sources":["../../src/define/defineFlow.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAEnE,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,WAAW,IAAI,KAAK;QACpB,OAAQ,KAAiC,CAAC,SAAS,KAAK,UAAU,CACnE,CAAC;AACJ,CAAC;AAiBD,MAAM,UAAU,UAAU,CACxB,MAAuC;IAEvC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,0BAA0B,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,0BAA0B,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,0BAA0B,CAAC,SAAS,MAAM,CAAC,IAAI,+BAA+B,EAAE;YAC9E,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,0BAA0B,CAAC,SAAS,MAAM,CAAC,IAAI,kCAAkC,EAAE;YACjF,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/define/definePrompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definePrompt.d.ts","sourceRoot":"","sources":["../../src/define/definePrompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAYxE,UAAU,iBAAiB,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,OAAO,SAAS,CAAC,CAAC,UAAU;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,2DAA2D;IAC3D,4BAA4B,CAAC,EAAE,OAAO,CAAC;IAEvC,yDAAyD;IACzD,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC,uDAAuD;IACvD,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAEnC,6DAA6D;IAC7D,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAEzC,6DAA6D;IAC7D,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAEzC,wDAAwD;IACxD,yBAAyB,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC;CACxD;AAED,wBAAgB,YAAY,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,OAAO,SAAS,CAAC,CAAC,UAAU,EACpF,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,GACzC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBnC"}
+{"version":3,"file":"definePrompt.d.ts","sourceRoot":"","sources":["../../src/define/definePrompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAcxE,UAAU,iBAAiB,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,OAAO,SAAS,CAAC,CAAC,UAAU;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,2DAA2D;IAC3D,4BAA4B,CAAC,EAAE,OAAO,CAAC;IAEvC,yDAAyD;IACzD,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC,uDAAuD;IACvD,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAEnC,6DAA6D;IAC7D,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAEzC,6DAA6D;IAC7D,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAEzC,wDAAwD;IACxD,yBAAyB,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC;CACxD;AAED,wBAAgB,YAAY,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,OAAO,SAAS,CAAC,CAAC,UAAU,EACpF,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,GACzC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBnC"}

package/dist/define/definePrompt.js

@@ -1,3 +1,5 @@
+import { deepFreeze } from '../types/deep-freeze.js';
+import { throwDefineValidationError } from './validation-error.js';
 function isZodSchema(value) {
     return (typeof value === 'object' &&
         value !== null &&
@@ -7,17 +9,21 @@ function isZodSchema(value) {
 }
 export function definePrompt(config) {
     if (!config.name) {
-        throw new Error('Prompt name is required');
+        throwDefineValidationError('Prompt name is required', { field: 'name' });
     }
     if (!isZodSchema(config.input)) {
-        throw new Error(`Prompt "${config.name}": input must be a Zod schema`);
+        throwDefineValidationError(`Prompt "${config.name}": input must be a Zod schema`, {
+            field: 'input',
+        });
     }
     if (!isZodSchema(config.output)) {
-        throw new Error(`Prompt "${config.name}": output must be a Zod schema`);
+        throwDefineValidationError(`Prompt "${config.name}": output must be a Zod schema`, {
+            field: 'output',
+        });
     }
     if (config.disableStrictStructuredOutputs && config.requireStrictStructuredOutputs) {
-        throw new Error(`Prompt "${config.name}": cannot both disable and require strict structured outputs`);
+        throwDefineValidationError(`Prompt "${config.name}": cannot both disable and require strict structured outputs`, { field: 'structuredOutputs' });
     }
-    return Object.freeze({ ...config });
+    return deepFreeze({ ...config });
 }
 //# sourceMappingURL=definePrompt.js.map

package/dist/define/definePrompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"definePrompt.js","sourceRoot":"","sources":["../../src/define/definePrompt.ts"],"names":[],"mappings":"AAGA,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,WAAW,IAAI,KAAK;QACpB,OAAQ,KAAiC,CAAC,SAAS,KAAK,UAAU,CACnE,CAAC;AACJ,CAAC;AAiCD,MAAM,UAAU,YAAY,CAC1B,MAA0C;IAE1C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,+BAA+B,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,gCAAgC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,8BAA8B,IAAI,MAAM,CAAC,8BAA8B,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,CAAC,IAAI,8DAA8D,CACrF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"definePrompt.js","sourceRoot":"","sources":["../../src/define/definePrompt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAEnE,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,WAAW,IAAI,KAAK;QACpB,OAAQ,KAAiC,CAAC,SAAS,KAAK,UAAU,CACnE,CAAC;AACJ,CAAC;AAiCD,MAAM,UAAU,YAAY,CAC1B,MAA0C;IAE1C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,0BAA0B,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,0BAA0B,CAAC,WAAW,MAAM,CAAC,IAAI,+BAA+B,EAAE;YAChF,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,0BAA0B,CAAC,WAAW,MAAM,CAAC,IAAI,gCAAgC,EAAE;YACjF,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,8BAA8B,IAAI,MAAM,CAAC,8BAA8B,EAAE,CAAC;QACnF,0BAA0B,CACxB,WAAW,MAAM,CAAC,IAAI,8DAA8D,EACpF,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAC/B,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/define/defineTranslation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defineTranslation.d.ts","sourceRoot":"","sources":["../../src/define/defineTranslation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErF,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,sBAAsB,GAAG,qBAAqB,CAoEvF"}
+{"version":3,"file":"defineTranslation.d.ts","sourceRoot":"","sources":["../../src/define/defineTranslation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAIrF,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,sBAAsB,GAAG,qBAAqB,CAsEvF"}

package/dist/define/defineTranslation.js

@@ -1,3 +1,5 @@
+import { deepFreeze } from '../types/deep-freeze.js';
+import { throwDefineValidationError } from './validation-error.js';
 /**
  * Define a translation catalog — a named set of i18n message strings.
  *
@@ -11,27 +13,27 @@
  */
 export function defineTranslation(config) {
     if (!config.name) {
-        throw new Error('Translation name is required');
+        throwDefineValidationError('Translation name is required');
     }
     if (!config.defaultLocale) {
-        throw new Error(`Translation "${config.name}": defaultLocale is required`);
+        throwDefineValidationError(`Translation "${config.name}": defaultLocale is required`);
     }
     if (!Array.isArray(config.locales) || config.locales.length === 0) {
-        throw new Error(`Translation "${config.name}": locales must be a non-empty array`);
+        throwDefineValidationError(`Translation "${config.name}": locales must be a non-empty array`);
     }
     if (!config.locales.includes(config.defaultLocale)) {
-        throw new Error(`Translation "${config.name}": defaultLocale "${config.defaultLocale}" must be included in locales [${config.locales.join(', ')}]`);
+        throwDefineValidationError(`Translation "${config.name}": defaultLocale "${config.defaultLocale}" must be included in locales [${config.locales.join(', ')}]`);
     }
     // Ensure every declared locale has a messages entry
     for (const locale of config.locales) {
         if (!config.messages[locale]) {
-            throw new Error(`Translation "${config.name}": missing messages for declared locale "${locale}"`);
+            throwDefineValidationError(`Translation "${config.name}": missing messages for declared locale "${locale}"`);
         }
     }
     // Collect the reference key set from the default locale
     const defaultMessages = config.messages[config.defaultLocale];
     if (!defaultMessages) {
-        throw new Error(`Translation "${config.name}": missing messages for default locale "${config.defaultLocale}"`);
+        throwDefineValidationError(`Translation "${config.name}": missing messages for default locale "${config.defaultLocale}"`);
     }
     const referenceKeys = Object.keys(defaultMessages).sort();
     // Validate all locales have the same key set
@@ -45,10 +47,10 @@ export function defineTranslation(config) {
         const missingKeys = referenceKeys.filter((k) => !localeKeys.includes(k));
         const extraKeys = localeKeys.filter((k) => !referenceKeys.includes(k));
         if (missingKeys.length > 0) {
-            throw new Error(`Translation "${config.name}": locale "${locale}" is missing keys: [${missingKeys.map((k) => `"${k}"`).join(', ')}]`);
+            throwDefineValidationError(`Translation "${config.name}": locale "${locale}" is missing keys: [${missingKeys.map((k) => `"${k}"`).join(', ')}]`);
         }
         if (extraKeys.length > 0) {
-            throw new Error(`Translation "${config.name}": locale "${locale}" has extra keys not in default locale: [${extraKeys.map((k) => `"${k}"`).join(', ')}]`);
+            throwDefineValidationError(`Translation "${config.name}": locale "${locale}" has extra keys not in default locale: [${extraKeys.map((k) => `"${k}"`).join(', ')}]`);
         }
     }
     // Validate no empty string values
@@ -58,10 +60,10 @@ export function defineTranslation(config) {
             continue;
         for (const [key, value] of Object.entries(localeMessages)) {
             if (typeof value !== 'string') {
-                throw new Error(`Translation "${config.name}": messages.${locale}.${key} must be a string`);
+                throwDefineValidationError(`Translation "${config.name}": messages.${locale}.${key} must be a string`);
             }
         }
     }
-    return Object.freeze({ ...config });
+    return deepFreeze({ ...config });
 }
 //# sourceMappingURL=defineTranslation.js.map

package/dist/define/defineTranslation.js.map

@@ -1 +1 @@
-{"version":3,"file":"defineTranslation.js","sourceRoot":"","sources":["../../src/define/defineTranslation.ts"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA8B;IAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,8BAA8B,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,sCAAsC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,gBAAgB,MAAM,CAAC,IAAI,qBAAqB,MAAM,CAAC,aAAa,kCAAkC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnI,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,gBAAgB,MAAM,CAAC,IAAI,4CAA4C,MAAM,GAAG,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,gBAAgB,MAAM,CAAC,IAAI,2CAA2C,MAAM,CAAC,aAAa,GAAG,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1D,6CAA6C;IAC7C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,MAAM,KAAK,MAAM,CAAC,aAAa;YAAE,SAAS;QAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc;YAAE,SAAS,CAAC,uBAAuB;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;QAEtD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,gBAAgB,MAAM,CAAC,IAAI,cAAc,MAAM,uBAAuB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrH,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,gBAAgB,MAAM,CAAC,IAAI,cAAc,MAAM,4CAA4C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc;YAAE,SAAS;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,eAAe,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"defineTranslation.js","sourceRoot":"","sources":["../../src/define/defineTranslation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AASnE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA8B;IAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,0BAA0B,CAAC,8BAA8B,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,0BAA0B,CAAC,gBAAgB,MAAM,CAAC,IAAI,8BAA8B,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,0BAA0B,CAAC,gBAAgB,MAAM,CAAC,IAAI,sCAAsC,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,0BAA0B,CACxB,gBAAgB,MAAM,CAAC,IAAI,qBAAqB,MAAM,CAAC,aAAa,kCAAkC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnI,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,0BAA0B,CACxB,gBAAgB,MAAM,CAAC,IAAI,4CAA4C,MAAM,GAAG,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,0BAA0B,CACxB,gBAAgB,MAAM,CAAC,IAAI,2CAA2C,MAAM,CAAC,aAAa,GAAG,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1D,6CAA6C;IAC7C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,MAAM,KAAK,MAAM,CAAC,aAAa;YAAE,SAAS;QAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc;YAAE,SAAS,CAAC,uBAAuB;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;QAEtD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,0BAA0B,CACxB,gBAAgB,MAAM,CAAC,IAAI,cAAc,MAAM,uBAAuB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrH,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,0BAA0B,CACxB,gBAAgB,MAAM,CAAC,IAAI,cAAc,MAAM,4CAA4C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc;YAAE,SAAS;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,0BAA0B,CACxB,gBAAgB,MAAM,CAAC,IAAI,eAAe,MAAM,IAAI,GAAG,mBAAmB,CAC3E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/define/validation-error.d.ts

@@ -0,0 +1,2 @@
+export declare function throwDefineValidationError(message: string, metadata?: Record<string, unknown>): never;
+//# sourceMappingURL=validation-error.d.ts.map

package/dist/define/validation-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-error.d.ts","sourceRoot":"","sources":["../../src/define/validation-error.ts"],"names":[],"mappings":"AAGA,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,KAAK,CAKP"}

package/dist/define/validation-error.js

@@ -0,0 +1,9 @@
+import { PlumbusError } from '../errors/index.js';
+import { ErrorCode } from '../types/enums.js';
+export function throwDefineValidationError(message, metadata) {
+    throw new PlumbusError(ErrorCode.Validation, message, {
+        reason: 'define_validation',
+        ...metadata,
+    });
+}
+//# sourceMappingURL=validation-error.js.map

package/dist/define/validation-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-error.js","sourceRoot":"","sources":["../../src/define/validation-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,QAAkC;IAElC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE;QACpD,MAAM,EAAE,mBAAmB;QAC3B,GAAG,QAAQ;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/errors/hints.d.ts

@@ -0,0 +1,13 @@
+export declare const ErrorHints: {
+    readonly flowConditionSyntax: string;
+    readonly aiProviderEnv: "Only openai and anthropic are supported. For local Ollama use AI_OPENAI_BASE_URL with the openai provider.";
+    readonly envNotLoaded: "Skipped loading .env — not in a Plumbus project directory. Run from project root or use a project marker (config/app.config.ts).";
+    readonly pathOutsideProject: "Path must be under project root";
+    readonly tenantContextRequired: "Tenant context is required for this operation.";
+};
+export declare const ErrorDocUrls: {
+    readonly flowConditions: "/docs/core-concepts/flows.md#conditional-step";
+    readonly aiIntegration: "/docs/ai/ai-integration.md";
+    readonly securityModel: "/docs/security/security-model.md";
+};
+//# sourceMappingURL=hints.d.ts.map

package/dist/errors/hints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hints.d.ts","sourceRoot":"","sources":["../../src/errors/hints.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,UAAU;;;;;;CAWb,CAAC;AAEX,eAAO,MAAM,YAAY;;;;CAIf,CAAC"}

package/dist/errors/hints.js

@@ -0,0 +1,15 @@
+export const ErrorHints = {
+    flowConditionSyntax: 'Use state.field comparisons (e.g. state.amount > 100 or state.status === "paid"). ' +
+        'Operators: === !== == != > < >= <= && || !. Legacy ctx.state.* is normalized to state.*. ' +
+        'No method calls or arbitrary JS.',
+    aiProviderEnv: 'Only openai and anthropic are supported. For local Ollama use AI_OPENAI_BASE_URL with the openai provider.',
+    envNotLoaded: 'Skipped loading .env — not in a Plumbus project directory. Run from project root or use a project marker (config/app.config.ts).',
+    pathOutsideProject: 'Path must be under project root',
+    tenantContextRequired: 'Tenant context is required for this operation.',
+};
+export const ErrorDocUrls = {
+    flowConditions: '/docs/core-concepts/flows.md#conditional-step',
+    aiIntegration: '/docs/ai/ai-integration.md',
+    securityModel: '/docs/security/security-model.md',
+};
+//# sourceMappingURL=hints.js.map

package/dist/errors/hints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hints.js","sourceRoot":"","sources":["../../src/errors/hints.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,mBAAmB,EACjB,oFAAoF;QACpF,2FAA2F;QAC3F,kCAAkC;IACpC,aAAa,EACX,4GAA4G;IAC9G,YAAY,EACV,kIAAkI;IACpI,kBAAkB,EAAE,iCAAiC;IACrD,qBAAqB,EAAE,gDAAgD;CAC/D,CAAC;AAEX,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,cAAc,EAAE,+CAA+C;IAC/D,aAAa,EAAE,4BAA4B;IAC3C,aAAa,EAAE,kCAAkC;CACzC,CAAC"}

package/dist/errors/hook-log.d.ts

@@ -0,0 +1,3 @@
+/** Log observability hook failures without throwing (H5). */
+export declare function logHookError(hook: string, err: unknown): void;
+//# sourceMappingURL=hook-log.d.ts.map

package/dist/errors/hook-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-log.d.ts","sourceRoot":"","sources":["../../src/errors/hook-log.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAG7D"}

package/dist/errors/hook-log.js

@@ -0,0 +1,6 @@
+/** Log observability hook failures without throwing (H5). */
+export function logHookError(hook, err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.warn(`[plumbus] Hook "${hook}" failed: ${message}`);
+}
+//# sourceMappingURL=hook-log.js.map

package/dist/errors/hook-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-log.js","sourceRoot":"","sources":["../../src/errors/hook-log.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAY;IACrD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,CAAC,mBAAmB,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/errors/http.d.ts

@@ -1,5 +1,6 @@
 import type { PlumbusErrorLike } from '../types/errors.js';
 export declare function errorToHttpStatus(error: PlumbusErrorLike): number;
+export declare const GENERIC_INTERNAL_MESSAGE = "An internal error occurred";
 export declare function errorToHttpResponse(error: PlumbusErrorLike): {
     statusCode: number;
     body: {
@@ -10,4 +11,22 @@ export declare function errorToHttpResponse(error: PlumbusErrorLike): {
         };
     };
 };
+/** Shape a safe SSE error payload (M5). */
+export declare function errorToSsePayload(error: PlumbusErrorLike): {
+    type: 'error';
+    error: {
+        code: string;
+        message: string;
+        metadata?: Record<string, unknown>;
+    };
+};
+/** Build a safe SSE error event from an unknown thrown value. */
+export declare function unknownErrorToSsePayload(err: unknown): {
+    type: 'error';
+    error: {
+        code: string;
+        message: string;
+        metadata?: Record<string, unknown>;
+    };
+};
 //# sourceMappingURL=http.d.ts.map

package/dist/errors/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/errors/http.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAsB3D,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAMjE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;CACxF,CAWA"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/errors/http.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAuB3D,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAMjE;AAED,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;CACxF,CAcA;AAED,2CAA2C;AAC3C,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG;IAC1D,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAC9E,CAMA;AAED,iEAAiE;AACjE,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG;IACtD,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAC9E,CAmBA"}

package/dist/errors/http.js

@@ -1,3 +1,4 @@
+import { pickSafeMetadata } from './safe-metadata.js';
 /**
  * Map PlumbusError codes to HTTP status codes.
  */
@@ -25,16 +26,45 @@ export function errorToHttpStatus(error) {
     }
     return statusMap[error.code] ?? 500;
 }
+export const GENERIC_INTERNAL_MESSAGE = 'An internal error occurred';
 export function errorToHttpResponse(error) {
+    const safeMetadata = pickSafeMetadata(error.metadata);
+    const message = error.code === 'internal' ? GENERIC_INTERNAL_MESSAGE : error.message;
     return {
         statusCode: errorToHttpStatus(error),
         body: {
             error: {
                 code: error.code,
-                message: error.message,
-                metadata: error.metadata,
+                message,
+                metadata: safeMetadata,
             },
         },
     };
 }
+/** Shape a safe SSE error payload (M5). */
+export function errorToSsePayload(error) {
+    const http = errorToHttpResponse(error);
+    return {
+        type: 'error',
+        error: http.body.error,
+    };
+}
+/** Build a safe SSE error event from an unknown thrown value. */
+export function unknownErrorToSsePayload(err) {
+    if (typeof err === 'object' &&
+        err !== null &&
+        'code' in err &&
+        'message' in err &&
+        typeof err.code === 'string' &&
+        typeof err.message === 'string') {
+        return errorToSsePayload(err);
+    }
+    return {
+        type: 'error',
+        error: {
+            code: 'internal',
+            message: GENERIC_INTERNAL_MESSAGE,
+        },
+    };
+}
 //# sourceMappingURL=http.js.map

package/dist/errors/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/errors/http.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,SAAS,GAA8B;IAC3C,UAAU,EAAE,GAAG;IACf,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG,EAAE,2EAA2E;CAC5F,CAAC;AAEF,SAAS,qBAAqB,CAAC,KAAuB;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9C,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IAC5F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;QAC/B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IAIzD,OAAO;QACL,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC;QACpC,IAAI,EAAE;YACJ,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/errors/http.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD;;GAEG;AACH,MAAM,SAAS,GAA8B;IAC3C,UAAU,EAAE,GAAG;IACf,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG,EAAE,2EAA2E;CAC5F,CAAC;AAEF,SAAS,qBAAqB,CAAC,KAAuB;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9C,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IAC5F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,kBAAkB,IAAI,IAAI,EAAE,CAAC;QAC/B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IAIzD,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAErF,OAAO;QACL,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC;QACpC,IAAI,EAAE;YACJ,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO;gBACP,QAAQ,EAAE,YAAY;aACvB;SACF;KACF,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IAIvD,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,wBAAwB,CAAC,GAAY;IAInD,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,MAAM,IAAI,GAAG;QACb,SAAS,IAAI,GAAG;QAChB,OAAQ,GAAwB,CAAC,IAAI,KAAK,QAAQ;QAClD,OAAQ,GAAwB,CAAC,OAAO,KAAK,QAAQ,EACrD,CAAC;QACD,OAAO,iBAAiB,CAAC,GAAuB,CAAC,CAAC;IACpD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,EAAE;YACL,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,wBAAwB;SAClC;KACF,CAAC;AACJ,CAAC"}

package/dist/errors/safe-metadata.d.ts

@@ -0,0 +1,5 @@
+/** Metadata keys safe to expose in HTTP/SSE error responses. */
+export declare const SAFE_ERROR_METADATA_KEYS: readonly ["field", "httpStatus", "retryAfter", "hint", "docUrl", "reason", "executionId"];
+export type SafeErrorMetadataKey = (typeof SAFE_ERROR_METADATA_KEYS)[number];
+export declare function pickSafeMetadata(metadata: Record<string, unknown> | undefined): Record<string, unknown> | undefined;
+//# sourceMappingURL=safe-metadata.d.ts.map

package/dist/errors/safe-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-metadata.d.ts","sourceRoot":"","sources":["../../src/errors/safe-metadata.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,eAAO,MAAM,wBAAwB,2FAQ3B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAcrC"}

package/dist/errors/safe-metadata.js

@@ -0,0 +1,24 @@
+/** Metadata keys safe to expose in HTTP/SSE error responses. */
+export const SAFE_ERROR_METADATA_KEYS = [
+    'field',
+    'httpStatus',
+    'retryAfter',
+    'hint',
+    'docUrl',
+    'reason',
+    'executionId',
+];
+export function pickSafeMetadata(metadata) {
+    if (!metadata) {
+        return undefined;
+    }
+    const safe = {};
+    for (const key of SAFE_ERROR_METADATA_KEYS) {
+        const value = metadata[key];
+        if (value !== undefined) {
+            safe[key] = value;
+        }
+    }
+    return Object.keys(safe).length > 0 ? safe : undefined;
+}
+//# sourceMappingURL=safe-metadata.js.map

package/dist/errors/safe-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-metadata.js","sourceRoot":"","sources":["../../src/errors/safe-metadata.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,aAAa;CACL,CAAC;AAIX,MAAM,UAAU,gBAAgB,CAC9B,QAA6C;IAE7C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC"}

package/dist/execution/auth-roles.d.ts

@@ -0,0 +1,6 @@
+import type { AuthContext } from '../types/security.js';
+/**
+ * Resolve roles used for access checks. Maps deprecated `internal` to `system` for compatibility.
+ */
+export declare function resolveAuthRoles(auth: AuthContext): string[];
+//# sourceMappingURL=auth-roles.d.ts.map

package/dist/execution/auth-roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-roles.d.ts","sourceRoot":"","sources":["../../src/execution/auth-roles.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,EAAE,CAM5D"}

package/dist/execution/auth-roles.js

@@ -0,0 +1,12 @@
+import { AuthRole } from '../types/enums.js';
+/**
+ * Resolve roles used for access checks. Maps deprecated `internal` to `system` for compatibility.
+ */
+export function resolveAuthRoles(auth) {
+    const roles = [...auth.roles];
+    if (auth.internal === true && !roles.includes(AuthRole.System)) {
+        roles.push(AuthRole.System);
+    }
+    return roles;
+}
+//# sourceMappingURL=auth-roles.js.map

package/dist/execution/auth-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-roles.js","sourceRoot":"","sources":["../../src/execution/auth-roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7C;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAiB;IAChD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/execution/authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/execution/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,IAAI,EAAE,WAAW,GAChB,mBAAmB,CAwDrB"}
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/execution/authorization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,YAAY,GAAG,SAAS,EAChC,IAAI,EAAE,WAAW,GAChB,mBAAmB,CAqDrB"}

package/dist/execution/authorization.js

@@ -1,3 +1,4 @@
+import { resolveAuthRoles } from './auth-roles.js';
 /**
  * Evaluate an AccessPolicy against an AuthContext.
  * Deny-by-default: if no policy is provided, access is denied.
@@ -25,13 +26,10 @@ export function evaluateAccess(policy, auth) {
     if (policy.tenantScoped && !auth.tenantId) {
         return { allowed: false, reason: 'Tenant context required' };
     }
-    // Internal callers (e.g. flow engine) skip role/scope checks
-    if (auth.internal) {
-        return { allowed: true };
-    }
+    const roles = resolveAuthRoles(auth);
     // Role check — caller must have at least one required role
     if (policy.roles && policy.roles.length > 0) {
-        const hasRole = policy.roles.some((r) => auth.roles.includes(r));
+        const hasRole = policy.roles.some((r) => roles.includes(r));
         if (!hasRole) {
             return {
                 allowed: false,

package/dist/execution/authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/execution/authorization.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAgC,EAChC,IAAiB;IAEjB,8BAA8B;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAChE,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IAED,+EAA+E;IAC/E,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IAED,6DAA6D;IAC7D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,2DAA2D;IAC3D,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/execution/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAQnD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAgC,EAChC,IAAiB;IAEjB,8BAA8B;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAChE,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IAED,+EAA+E;IAC/E,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAErC,2DAA2D;IAC3D,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/execution/context-factory.d.ts

@@ -1,20 +1,5 @@
-import type { AuditService } from '../types/audit.js';
-import type { AIService, ConfigService, DataService, EventService, ExecutionContext, FlowService, LoggerService, RequestMeta, TimeService } from '../types/context.js';
-import type { AuthContext } from '../types/security.js';
-import type { TranslationService } from '../types/translation.js';
-export interface ContextDependencies {
-    auth: AuthContext;
-    data: DataService;
-    events?: EventService;
-    flows?: FlowService;
-    ai?: AIService;
-    audit?: AuditService;
-    logger?: LoggerService;
-    time?: TimeService;
-    config?: ConfigService;
-    translations?: TranslationService;
-    request?: RequestMeta;
-}
+import type { ContextDependencies, ExecutionContext } from '../types/context.js';
+export type { ContextDependencies } from '../types/context.js';
 /**
  * Build an ExecutionContext from the provided dependencies.
  * Missing optional services are replaced with safe defaults/stubs.

package/dist/execution/context-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-factory.d.ts","sourceRoot":"","sources":["../../src/execution/context-factory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EACb,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,WAAW,EAEX,WAAW,EACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAmGD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CAgBlF"}
+{"version":3,"file":"context-factory.d.ts","sourceRoot":"","sources":["../../src/execution/context-factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,mBAAmB,EAEnB,gBAAgB,EAKjB,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAmG/D;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CAiBlF"}

package/dist/execution/context-factory.js

@@ -107,6 +107,7 @@ export function createExecutionContext(deps) {
         security: createSecurityService(deps.auth),
         translations: deps.translations ?? noopTranslations,
         request: deps.request,
+        progress: deps.progress,
     };
 }
 //# sourceMappingURL=context-factory.js.map

package/dist/execution/context-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-factory.js","sourceRoot":"","sources":["../../src/execution/context-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AA+BxD,MAAM,SAAS,GAAiB;IAC9B,KAAK,CAAC,MAAM,KAAI,CAAC;CAClB,CAAC;AAEF,MAAM,gBAAgB,GAAuB;IAC3C,MAAM,EAAE,IAAI;IACZ,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;CAChB,CAAC;AAEF,MAAM,UAAU,GAAiB;IAC/B,KAAK,CAAC,IAAI,KAAI,CAAC;IACf,KAAK,CAAC,QAAQ,KAAI,CAAC;CACpB,CAAC;AAEF,MAAM,SAAS,GAAgB;IAC7B,KAAK,CAAC,KAAK;QACT,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,MAAM,KAAI,CAAC;IACjB,KAAK,CAAC,MAAM,KAAI,CAAC;IACjB,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,SAAS,KAAI,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,GAAc;IACxB,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,cAAc;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAkB;IACnC,KAAK,CAAC,OAAO,EAAE,QAAQ;QACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,OAAO,EAAE,QAAQ;QACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAC;AAEF,MAAM,QAAQ,GAAgB;IAC5B,GAAG;QACD,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;CACF,CAAC;AAEF,SAAS,qBAAqB,CAAC,IAAiB;IAC9C,OAAO;QACL,OAAO,CAAC,IAAY;YAClB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,QAAQ,CAAC,KAAa;YACpB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,WAAW,CAAC,KAAe;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,YAAY,CAAC,MAAgB;YAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,WAAW,CAAC,IAAY;YACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,YAAY,CAAC,KAAa;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,KAAK,GAAG,CAAC,EAAE;oBACrE,IAAI,EAAE,WAAW;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU;QACjC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,MAAM,EAAE,kBAAkB,EAAE;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,gBAAgB;QACnD,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"context-factory.js","sourceRoot":"","sources":["../../src/execution/context-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAiBxD,MAAM,SAAS,GAAiB;IAC9B,KAAK,CAAC,MAAM,KAAI,CAAC;CAClB,CAAC;AAEF,MAAM,gBAAgB,GAAuB;IAC3C,MAAM,EAAE,IAAI;IACZ,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;CAChB,CAAC;AAEF,MAAM,UAAU,GAAiB;IAC/B,KAAK,CAAC,IAAI,KAAI,CAAC;IACf,KAAK,CAAC,QAAQ,KAAI,CAAC;CACpB,CAAC;AAEF,MAAM,SAAS,GAAgB;IAC7B,KAAK,CAAC,KAAK;QACT,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,MAAM,KAAI,CAAC;IACjB,KAAK,CAAC,MAAM,KAAI,CAAC;IACjB,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,SAAS,KAAI,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,GAAc;IACxB,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,cAAc;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAkB;IACnC,KAAK,CAAC,OAAO,EAAE,QAAQ;QACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,OAAO,EAAE,QAAQ;QACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAC;AAEF,MAAM,QAAQ,GAAgB;IAC5B,GAAG;QACD,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;CACF,CAAC;AAEF,SAAS,qBAAqB,CAAC,IAAiB;IAC9C,OAAO;QACL,OAAO,CAAC,IAAY;YAClB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,QAAQ,CAAC,KAAa;YACpB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,WAAW,CAAC,KAAe;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,YAAY,CAAC,MAAgB;YAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,WAAW,CAAC,IAAY;YACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,YAAY,CAAC,KAAa;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,KAAK,GAAG,CAAC,EAAE;oBACrE,IAAI,EAAE,WAAW;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU;QACjC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,MAAM,EAAE,kBAAkB,EAAE;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,gBAAgB;QACnD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC"}

package/dist/flows/engine.js

@@ -280,7 +280,7 @@ export function createFlowEngine(config) {
             ...ctx.auth,
             tenantId: row.tenantId ?? ctx.auth.tenantId,
             userId: row.actor ?? ctx.auth.userId,
-            internal: true,
+            roles: ctx.auth.roles.includes('system') ? ctx.auth.roles : [...ctx.auth.roles, 'system'],
         };
         const flowData = config.createDataService ? config.createDataService(flowAuth) : ctx.data;
         const flowEvents = createEventService ? createEventService(flowAuth) : ctx.events;