@plumbus/core 0.4.2 → 0.6.0

package/dist/execution/capability-invocation.d.ts

@@ -0,0 +1,34 @@
+import type { CapabilityContract } from '../types/capability.js';
+import type { CapabilityService, ExecutionContext, ExecutionRuntimeMetadata } from '../types/context.js';
+import type { CapabilityRegistry } from './capability-registry.js';
+import type { CapabilityResult } from './capability-executor.js';
+import type { InvocationEmitScope } from './invocation-emit-scope.js';
+export type DependencyViolationReason = 'undeclaredInvocation' | 'circularInvocation' | 'missingCapability' | 'invocationUnavailable' | 'unsupportedTargetKind';
+export interface DependencyViolationMetadata {
+    caller?: string;
+    target: string;
+    reason: DependencyViolationReason;
+    capabilityStack: readonly string[];
+}
+export type InternalCapabilityInvoker = (name: string, ctx: ExecutionContext, input: unknown) => Promise<CapabilityResult<unknown>>;
+export interface CapabilityInvocationRuntime {
+    invoker: InternalCapabilityInvoker;
+    resolveCapability: (name: string) => CapabilityContract | undefined;
+    emitScope?: InvocationEmitScope;
+}
+/** Strip internal invoker/registry/emit scope from handler-visible runtime metadata. */
+export declare function stripHandlerRuntime(runtime?: ExecutionRuntimeMetadata): ExecutionRuntimeMetadata | undefined;
+/** Runtime deps for nested capability invocation (wire into ContextDependencies). */
+export declare function buildCapabilityRuntimeDeps(registry: CapabilityRegistry): {
+    invokeCapability: InternalCapabilityInvoker;
+    resolveCapability: (name: string) => CapabilityContract | undefined;
+};
+export declare function buildRegistryInvoker(registry: CapabilityRegistry): InternalCapabilityInvoker;
+export declare function buildDependencyViolationMessage(metadata: DependencyViolationMetadata): string;
+/**
+ * Build the public `ctx.capabilities` service for a running capability handler.
+ */
+export declare function createCapabilityInvokeService(capability: CapabilityContract, ctx: ExecutionContext, runtime: CapabilityInvocationRuntime): CapabilityService;
+/** Invoke surface that always reports invocation unavailability. */
+export declare function createUnavailableCapabilityService(ctx: ExecutionContext): CapabilityService;
+//# sourceMappingURL=capability-invocation.d.ts.map

package/dist/execution/capability-invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-invocation.d.ts","sourceRoot":"","sources":["../../src/execution/capability-invocation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,MAAM,MAAM,yBAAyB,GACjC,sBAAsB,GACtB,oBAAoB,GACpB,mBAAmB,GACnB,uBAAuB,GACvB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,2BAA2B;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,yBAAyB,CAAC;IAClC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,yBAAyB,GAAG,CACtC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,OAAO,KACX,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;AAExC,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,yBAAyB,CAAC;IACnC,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,CAAC;IACpE,SAAS,CAAC,EAAE,mBAAmB,CAAC;CACjC;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CACjC,OAAO,CAAC,EAAE,wBAAwB,GACjC,wBAAwB,GAAG,SAAS,CAStC;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,kBAAkB,GAAG;IACxE,gBAAgB,EAAE,yBAAyB,CAAC;IAC5C,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,CAAC;CACrE,CAKA;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,yBAAyB,CAW5F;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,2BAA2B,GAAG,MAAM,CAkB7F;AAcD;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,kBAAkB,EAC9B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,2BAA2B,GACnC,iBAAiB,CA0EnB;AAED,oEAAoE;AACpE,wBAAgB,kCAAkC,CAAC,GAAG,EAAE,gBAAgB,GAAG,iBAAiB,CAU3F"}

package/dist/execution/capability-invocation.js

@@ -0,0 +1,138 @@
+import { CapabilityKind } from '../types/enums.js';
+import { getCanonicalCapabilityName } from './canonical-name.js';
+import { executeCapability } from './capability-executor.js';
+/** Strip internal invoker/registry/emit scope from handler-visible runtime metadata. */
+export function stripHandlerRuntime(runtime) {
+    if (!runtime)
+        return undefined;
+    const { invokeCapability: _invoker, resolveCapability: _resolve, invocationEmitScope: _emitScope, ...handlerVisible } = runtime;
+    return handlerVisible;
+}
+/** Runtime deps for nested capability invocation (wire into ContextDependencies). */
+export function buildCapabilityRuntimeDeps(registry) {
+    return {
+        invokeCapability: buildRegistryInvoker(registry),
+        resolveCapability: (name) => registry.get(name),
+    };
+}
+export function buildRegistryInvoker(registry) {
+    return async (name, ctx, input) => {
+        const capability = registry.get(name);
+        if (!capability) {
+            return {
+                success: false,
+                error: ctx.errors.notFound(`Capability "${name}" not found`, { capability: name }),
+            };
+        }
+        return executeCapability(capability, ctx, input);
+    };
+}
+export function buildDependencyViolationMessage(metadata) {
+    const { caller, target, reason, capabilityStack } = metadata;
+    switch (reason) {
+        case 'undeclaredInvocation':
+            return `Capability ${caller ?? '(unknown)'} attempted to invoke ${target}, but ${target} is not declared in ${caller ?? '(unknown)'} effects.capabilities.`;
+        case 'circularInvocation':
+            return `Circular capability invocation detected: ${[...capabilityStack, target].join(' -> ')}.`;
+        case 'missingCapability':
+            return `Capability ${caller ?? '(unknown)'} declared or attempted to invoke ${target}, but no registered capability with that name exists.`;
+        case 'invocationUnavailable':
+            return 'Capability invocation is unavailable in this execution context because no capability registry-backed invoker was provided.';
+        case 'unsupportedTargetKind':
+            return `Capability ${caller ?? '(unknown)'} attempted to invoke ${target}, but job capabilities cannot be invoked synchronously — use job dispatch, flows, or events instead.`;
+        default: {
+            const _exhaustive = reason;
+            return _exhaustive;
+        }
+    }
+}
+function throwDependencyViolation(ctx, metadata) {
+    const message = buildDependencyViolationMessage(metadata);
+    throw ctx.errors.dependencyViolation(message, { ...metadata });
+}
+function isDeclaredCapabilityDependency(capability, target) {
+    return (capability.effects.capabilities ?? []).includes(target);
+}
+/**
+ * Build the public `ctx.capabilities` service for a running capability handler.
+ */
+export function createCapabilityInvokeService(capability, ctx, runtime) {
+    const caller = getCanonicalCapabilityName(capability);
+    const { invoker, resolveCapability, emitScope } = runtime;
+    return {
+        async invoke(name, input) {
+            const stack = ctx.__runtime?.capabilityStack ?? [];
+            if (!isDeclaredCapabilityDependency(capability, name)) {
+                throwDependencyViolation(ctx, {
+                    caller,
+                    target: name,
+                    reason: 'undeclaredInvocation',
+                    capabilityStack: stack,
+                });
+            }
+            if (stack.includes(name)) {
+                throwDependencyViolation(ctx, {
+                    caller,
+                    target: name,
+                    reason: 'circularInvocation',
+                    capabilityStack: stack,
+                });
+            }
+            const targetCap = resolveCapability(name);
+            if (!targetCap) {
+                throwDependencyViolation(ctx, {
+                    caller,
+                    target: name,
+                    reason: 'missingCapability',
+                    capabilityStack: stack,
+                });
+            }
+            if (targetCap.kind === CapabilityKind.Job) {
+                throwDependencyViolation(ctx, {
+                    caller,
+                    target: name,
+                    reason: 'unsupportedTargetKind',
+                    capabilityStack: stack,
+                });
+            }
+            const nestedCtx = {
+                ...ctx,
+                __runtime: {
+                    ...ctx.__runtime,
+                    capabilityStack: [...stack, caller],
+                    invocationCaller: caller,
+                },
+            };
+            const prevInvocationCaller = emitScope?.invocationCaller;
+            if (emitScope) {
+                emitScope.invocationCaller = caller;
+            }
+            let result;
+            try {
+                result = await invoker(name, nestedCtx, input);
+            }
+            finally {
+                if (emitScope) {
+                    emitScope.invocationCaller = prevInvocationCaller;
+                }
+            }
+            if (!result.success) {
+                throw result.error;
+            }
+            return result.data;
+        },
+    };
+}
+/** Invoke surface that always reports invocation unavailability. */
+export function createUnavailableCapabilityService(ctx) {
+    return {
+        async invoke(name) {
+            throwDependencyViolation(ctx, {
+                target: name,
+                reason: 'invocationUnavailable',
+                capabilityStack: ctx.__runtime?.capabilityStack ?? [],
+            });
+        },
+    };
+}
+//# sourceMappingURL=capability-invocation.js.map

package/dist/execution/capability-invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-invocation.js","sourceRoot":"","sources":["../../src/execution/capability-invocation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AASnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AA6B7D,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CACjC,OAAkC;IAElC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,EACJ,gBAAgB,EAAE,QAAQ,EAC1B,iBAAiB,EAAE,QAAQ,EAC3B,mBAAmB,EAAE,UAAU,EAC/B,GAAG,cAAc,EAClB,GAAG,OAAO,CAAC;IACZ,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,0BAA0B,CAAC,QAA4B;IAIrE,OAAO;QACL,gBAAgB,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAChD,iBAAiB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA4B;IAC/D,OAAO,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,IAAI,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACnF,CAAC;QACJ,CAAC;QACD,OAAO,iBAAiB,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,QAAqC;IACnF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAC;IAC7D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,sBAAsB;YACzB,OAAO,cAAc,MAAM,IAAI,WAAW,wBAAwB,MAAM,SAAS,MAAM,uBAAuB,MAAM,IAAI,WAAW,wBAAwB,CAAC;QAC9J,KAAK,oBAAoB;YACvB,OAAO,4CAA4C,CAAC,GAAG,eAAe,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAClG,KAAK,mBAAmB;YACtB,OAAO,cAAc,MAAM,IAAI,WAAW,oCAAoC,MAAM,uDAAuD,CAAC;QAC9I,KAAK,uBAAuB;YAC1B,OAAO,4HAA4H,CAAC;QACtI,KAAK,uBAAuB;YAC1B,OAAO,cAAc,MAAM,IAAI,WAAW,wBAAwB,MAAM,sGAAsG,CAAC;QACjL,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,MAAM,CAAC;YAClC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,GAAqB,EACrB,QAAqC;IAErC,MAAM,OAAO,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,8BAA8B,CAAC,UAA8B,EAAE,MAAc;IACpF,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAA8B,EAC9B,GAAqB,EACrB,OAAoC;IAEpC,MAAM,MAAM,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE1D,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAA8B,EAAE,KAAc;YACzD,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,EAAE,eAAe,IAAI,EAAE,CAAC;YAEnD,IAAI,CAAC,8BAA8B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;gBACtD,wBAAwB,CAAC,GAAG,EAAE;oBAC5B,MAAM;oBACN,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,sBAAsB;oBAC9B,eAAe,EAAE,KAAK;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,wBAAwB,CAAC,GAAG,EAAE;oBAC5B,MAAM;oBACN,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,oBAAoB;oBAC5B,eAAe,EAAE,KAAK;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,wBAAwB,CAAC,GAAG,EAAE;oBAC5B,MAAM;oBACN,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,mBAAmB;oBAC3B,eAAe,EAAE,KAAK;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;gBAC1C,wBAAwB,CAAC,GAAG,EAAE;oBAC5B,MAAM;oBACN,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,uBAAuB;oBAC/B,eAAe,EAAE,KAAK;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAqB;gBAClC,GAAG,GAAG;gBACN,SAAS,EAAE;oBACT,GAAG,GAAG,CAAC,SAAS;oBAChB,eAAe,EAAE,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;oBACnC,gBAAgB,EAAE,MAAM;iBACzB;aACF,CAAC;YAEF,MAAM,oBAAoB,GAAG,SAAS,EAAE,gBAAgB,CAAC;YACzD,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,gBAAgB,GAAG,MAAM,CAAC;YACtC,CAAC;YACD,IAAI,MAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACjD,CAAC;oBAAS,CAAC;gBACT,IAAI,SAAS,EAAE,CAAC;oBACd,SAAS,CAAC,gBAAgB,GAAG,oBAAoB,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,MAAM,CAAC,KAAK,CAAC;YACrB,CAAC;YAED,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,kCAAkC,CAAC,GAAqB;IACtE,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAA8B;YACzC,wBAAwB,CAAC,GAAG,EAAE;gBAC5B,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,uBAAuB;gBAC/B,eAAe,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,IAAI,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/execution/capability-registry.d.ts

@@ -1,12 +1,12 @@
 import type { CapabilityContract } from '../types/capability.js';
 /**
  * Registry that holds all discovered/registered capabilities,
- * indexed by name for lookup during execution and route generation.
+ * indexed by canonical name (`<domain>.<capabilityName>`) for lookup during execution.
  */
 export declare class CapabilityRegistry {
     private capabilities;
     /**
-     * Register a capability contract. Throws on duplicate names.
+     * Register a capability contract. Throws on duplicate canonical names.
      */
     register(capability: CapabilityContract): void;
     /**
@@ -14,7 +14,7 @@ export declare class CapabilityRegistry {
      */
     registerAll(capabilities: CapabilityContract[]): void;
     /**
-     * Get a capability by name.
+     * Get a capability by canonical name.
      */
     get(name: string): CapabilityContract | undefined;
     /**
@@ -26,8 +26,10 @@ export declare class CapabilityRegistry {
      */
     getByDomain(domain: string): CapabilityContract[];
     /**
-     * Check if a capability is registered.
+     * Check if a capability is registered by canonical name.
      */
     has(name: string): boolean;
+    /** Canonical names of all registered capabilities. */
+    getCanonicalNames(): string[];
 }
 //# sourceMappingURL=capability-registry.d.ts.map

package/dist/execution/capability-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability-registry.d.ts","sourceRoot":"","sources":["../../src/execution/capability-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,YAAY,CAAyC;IAE7D;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,IAAI;IAO9C;;OAEG;IACH,WAAW,CAAC,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI;IAMrD;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIjD;;OAEG;IACH,MAAM,IAAI,kBAAkB,EAAE;IAI9B;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,EAAE;IAIjD;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAG3B"}
+{"version":3,"file":"capability-registry.d.ts","sourceRoot":"","sources":["../../src/execution/capability-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,YAAY,CAAyC;IAE7D;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,IAAI;IAQ9C;;OAEG;IACH,WAAW,CAAC,YAAY,EAAE,kBAAkB,EAAE,GAAG,IAAI;IAMrD;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIjD;;OAEG;IACH,MAAM,IAAI,kBAAkB,EAAE;IAI9B;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,EAAE;IAIjD;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,sDAAsD;IACtD,iBAAiB,IAAI,MAAM,EAAE;CAG9B"}

package/dist/execution/capability-registry.js

@@ -1,17 +1,19 @@
+import { getCanonicalCapabilityName } from './canonical-name.js';
 /**
  * Registry that holds all discovered/registered capabilities,
- * indexed by name for lookup during execution and route generation.
+ * indexed by canonical name (`<domain>.<capabilityName>`) for lookup during execution.
  */
 export class CapabilityRegistry {
     capabilities = new Map();
     /**
-     * Register a capability contract. Throws on duplicate names.
+     * Register a capability contract. Throws on duplicate canonical names.
      */
     register(capability) {
-        if (this.capabilities.has(capability.name)) {
-            throw new Error(`Capability "${capability.name}" is already registered`);
+        const canonical = getCanonicalCapabilityName(capability);
+        if (this.capabilities.has(canonical)) {
+            throw new Error(`Capability "${canonical}" is already registered`);
         }
-        this.capabilities.set(capability.name, capability);
+        this.capabilities.set(canonical, capability);
     }
     /**
      * Register multiple capabilities at once.
@@ -22,7 +24,7 @@ export class CapabilityRegistry {
         }
     }
     /**
-     * Get a capability by name.
+     * Get a capability by canonical name.
      */
     get(name) {
         return this.capabilities.get(name);
@@ -40,10 +42,14 @@ export class CapabilityRegistry {
         return this.getAll().filter((c) => c.domain === domain);
     }
     /**
-     * Check if a capability is registered.
+     * Check if a capability is registered by canonical name.
      */
     has(name) {
         return this.capabilities.has(name);
     }
+    /** Canonical names of all registered capabilities. */
+    getCanonicalNames() {
+        return Array.from(this.capabilities.keys());
+    }
 }
 //# sourceMappingURL=capability-registry.js.map

package/dist/execution/capability-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability-registry.js","sourceRoot":"","sources":["../../src/execution/capability-registry.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACrB,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE7D;;OAEG;IACH,QAAQ,CAAC,UAA8B;QACrC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,CAAC,IAAI,yBAAyB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,YAAkC;QAC5C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;CACF"}
+{"version":3,"file":"capability-registry.js","sourceRoot":"","sources":["../../src/execution/capability-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACrB,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE7D;;OAEG;IACH,QAAQ,CAAC,UAA8B;QACrC,MAAM,SAAS,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,eAAe,SAAS,yBAAyB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,YAAkC;QAC5C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,sDAAsD;IACtD,iBAAiB;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/execution/context-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-factory.d.ts","sourceRoot":"","sources":["../../src/execution/context-factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,mBAAmB,EAEnB,gBAAgB,EAKjB,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAmG/D;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CAiBlF"}
+{"version":3,"file":"context-factory.d.ts","sourceRoot":"","sources":["../../src/execution/context-factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,mBAAmB,EAEnB,gBAAgB,EAKjB,MAAM,qBAAqB,CAAC;AAK7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAyG/D;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CA8BlF"}

package/dist/execution/context-factory.js

@@ -1,4 +1,5 @@
 import { createErrorService } from '../errors/index.js';
+import { createUnavailableCapabilityService } from './capability-invocation.js';
 const noopAudit = {
     async record() { },
 };
@@ -22,6 +23,12 @@ const noopFlows = {
     async heartbeat() { },
 };
 const noopAI = {
+    async recordProviderCost() {
+        throw new Error('AI service not configured');
+    },
+    checkProviderCostBudget() {
+        throw new Error('AI service not configured');
+    },
     async generate() {
         throw new Error('AI service not configured');
     },
@@ -93,7 +100,13 @@ function createSecurityService(auth) {
  * Missing optional services are replaced with safe defaults/stubs.
  */
 export function createExecutionContext(deps) {
-    return {
+    const baseRuntime = {
+        invokeCapability: deps.invokeCapability,
+        resolveCapability: deps.resolveCapability,
+        correlationId: deps.correlationId,
+        invocationEmitScope: deps.invocationEmitScope,
+    };
+    const ctx = {
         auth: deps.auth,
         data: deps.data,
         events: deps.events ?? noopEvents,
@@ -108,6 +121,10 @@ export function createExecutionContext(deps) {
         translations: deps.translations ?? noopTranslations,
         request: deps.request,
         progress: deps.progress,
+        capabilities: createUnavailableCapabilityService({}),
+        __runtime: baseRuntime,
     };
+    ctx.capabilities = createUnavailableCapabilityService(ctx);
+    return ctx;
 }
 //# sourceMappingURL=context-factory.js.map

package/dist/execution/context-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-factory.js","sourceRoot":"","sources":["../../src/execution/context-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAiBxD,MAAM,SAAS,GAAiB;IAC9B,KAAK,CAAC,MAAM,KAAI,CAAC;CAClB,CAAC;AAEF,MAAM,gBAAgB,GAAuB;IAC3C,MAAM,EAAE,IAAI;IACZ,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;CAChB,CAAC;AAEF,MAAM,UAAU,GAAiB;IAC/B,KAAK,CAAC,IAAI,KAAI,CAAC;IACf,KAAK,CAAC,QAAQ,KAAI,CAAC;CACpB,CAAC;AAEF,MAAM,SAAS,GAAgB;IAC7B,KAAK,CAAC,KAAK;QACT,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,MAAM,KAAI,CAAC;IACjB,KAAK,CAAC,MAAM,KAAI,CAAC;IACjB,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,SAAS,KAAI,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,GAAc;IACxB,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,cAAc;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAkB;IACnC,KAAK,CAAC,OAAO,EAAE,QAAQ;QACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,OAAO,EAAE,QAAQ;QACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAC;AAEF,MAAM,QAAQ,GAAgB;IAC5B,GAAG;QACD,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;CACF,CAAC;AAEF,SAAS,qBAAqB,CAAC,IAAiB;IAC9C,OAAO;QACL,OAAO,CAAC,IAAY;YAClB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,QAAQ,CAAC,KAAa;YACpB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,WAAW,CAAC,KAAe;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,YAAY,CAAC,MAAgB;YAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,WAAW,CAAC,IAAY;YACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,YAAY,CAAC,KAAa;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,KAAK,GAAG,CAAC,EAAE;oBACrE,IAAI,EAAE,WAAW;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU;QACjC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,MAAM,EAAE,kBAAkB,EAAE;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,gBAAgB;QACnD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"context-factory.js","sourceRoot":"","sources":["../../src/execution/context-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAcxD,OAAO,EAAE,kCAAkC,EAAE,MAAM,4BAA4B,CAAC;AAIhF,MAAM,SAAS,GAAiB;IAC9B,KAAK,CAAC,MAAM,KAAI,CAAC;CAClB,CAAC;AAEF,MAAM,gBAAgB,GAAuB;IAC3C,MAAM,EAAE,IAAI;IACZ,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;CAChB,CAAC;AAEF,MAAM,UAAU,GAAiB;IAC/B,KAAK,CAAC,IAAI,KAAI,CAAC;IACf,KAAK,CAAC,QAAQ,KAAI,CAAC;CACpB,CAAC;AAEF,MAAM,SAAS,GAAgB;IAC7B,KAAK,CAAC,KAAK;QACT,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,MAAM,KAAI,CAAC;IACjB,KAAK,CAAC,MAAM,KAAI,CAAC;IACjB,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,SAAS,KAAI,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,GAAc;IACxB,KAAK,CAAC,kBAAkB;QACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,uBAAuB;QACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,cAAc;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAkB;IACnC,KAAK,CAAC,OAAO,EAAE,QAAQ;QACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,OAAO,EAAE,QAAQ;QACrB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAC;AAEF,MAAM,QAAQ,GAAgB;IAC5B,GAAG;QACD,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;CACF,CAAC;AAEF,SAAS,qBAAqB,CAAC,IAAiB;IAC9C,OAAO;QACL,OAAO,CAAC,IAAY;YAClB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,QAAQ,CAAC,KAAa;YACpB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,WAAW,CAAC,KAAe;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,YAAY,CAAC,MAAgB;YAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,WAAW,CAAC,IAAY;YACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,YAAY,CAAC,KAAa;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,KAAK,GAAG,CAAC,EAAE;oBACrE,IAAI,EAAE,WAAW;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,MAAM,WAAW,GAAG;QAClB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC;IAEF,MAAM,GAAG,GAAqB;QAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU;QACjC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;QAC9B,MAAM,EAAE,kBAAkB,EAAE;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,gBAAgB;QACnD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,kCAAkC,CAAC,EAAsB,CAAC;QACxE,SAAS,EAAE,WAAW;KACvB,CAAC;IAEF,GAAG,CAAC,YAAY,GAAG,kCAAkC,CAAC,GAAG,CAAC,CAAC;IAE3D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/execution/index.d.ts

@@ -5,4 +5,8 @@ export type { CapabilityResult, ExecutionFailure, ExecutionResult, } from './cap
 export { evaluateAccess } from './authorization.js';
 export type { AuthorizationResult } from './authorization.js';
 export { CapabilityRegistry } from './capability-registry.js';
+export { getCanonicalCapabilityName, isCanonicalCapabilityName, } from './canonical-name.js';
+export type { CanonicalCapabilityRef } from './canonical-name.js';
+export { buildCapabilityRuntimeDeps, buildDependencyViolationMessage, buildRegistryInvoker, createCapabilityInvokeService, createUnavailableCapabilityService, } from './capability-invocation.js';
+export type { DependencyViolationMetadata, DependencyViolationReason, InternalCapabilityInvoker, } from './capability-invocation.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/execution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,YAAY,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,YAAY,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC"}

package/dist/execution/index.js

@@ -7,4 +7,6 @@ export { createExecutionContext } from './context-factory.js';
 export { executeCapability } from './capability-executor.js';
 export { evaluateAccess } from './authorization.js';
 export { CapabilityRegistry } from './capability-registry.js';
+export { getCanonicalCapabilityName, isCanonicalCapabilityName, } from './canonical-name.js';
+export { buildCapabilityRuntimeDeps, buildDependencyViolationMessage, buildRegistryInvoker, createCapabilityInvokeService, createUnavailableCapabilityService, } from './capability-invocation.js';
 //# sourceMappingURL=index.js.map

package/dist/execution/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,mFAAmF;AACnF,yFAAyF;AACzF,EAAE;AACF,6FAA6F;AAE7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAO7D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,mFAAmF;AACnF,yFAAyF;AACzF,EAAE;AACF,6FAA6F;AAE7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAO7D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,4BAA4B,CAAC"}

package/dist/execution/invocation-emit-scope.d.ts

@@ -0,0 +1,11 @@
+/** Mutable scope for nested capability event causation (wired into event emitters). */
+export interface InvocationEmitScope {
+    /** Canonical name of the capability currently executing its handler. */
+    executingCapability?: string;
+    /** Canonical name of the caller when running a nested callee handler. */
+    invocationCaller?: string;
+}
+export declare function createInvocationEmitScope(): InvocationEmitScope;
+/** Causation for nested emits: caller canonical name, else the executing capability. */
+export declare function resolveInvocationCausationId(scope?: InvocationEmitScope): string | undefined;
+//# sourceMappingURL=invocation-emit-scope.d.ts.map

package/dist/execution/invocation-emit-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-emit-scope.d.ts","sourceRoot":"","sources":["../../src/execution/invocation-emit-scope.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,yBAAyB,IAAI,mBAAmB,CAE/D;AAED,wFAAwF;AACxF,wBAAgB,4BAA4B,CAAC,KAAK,CAAC,EAAE,mBAAmB,GAAG,MAAM,GAAG,SAAS,CAE5F"}

package/dist/execution/invocation-emit-scope.js

@@ -0,0 +1,8 @@
+export function createInvocationEmitScope() {
+    return {};
+}
+/** Causation for nested emits: caller canonical name, else the executing capability. */
+export function resolveInvocationCausationId(scope) {
+    return scope?.invocationCaller ?? scope?.executingCapability;
+}
+//# sourceMappingURL=invocation-emit-scope.js.map

package/dist/execution/invocation-emit-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-emit-scope.js","sourceRoot":"","sources":["../../src/execution/invocation-emit-scope.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,yBAAyB;IACvC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,4BAA4B,CAAC,KAA2B;IACtE,OAAO,KAAK,EAAE,gBAAgB,IAAI,KAAK,EAAE,mBAAmB,CAAC;AAC/D,CAAC"}

package/dist/flows/engine.d.ts

@@ -33,6 +33,10 @@ export interface FlowEngineConfig {
     flowHeartbeatIntervalMs?: number;
     /** Max executions to claim per poll cycle. Default: 50. */
     flowClaimBatchSize?: number;
+    /** When set, enqueue flow step wake messages (durable queue deployments). */
+    onFlowStepEnqueue?: (executionId: string, correlationId?: string) => Promise<void>;
+    /** When set, schedule delayed flow wake via Redis sorted set (durable deployments). */
+    onFlowDelayedSchedule?: (executionId: string, wakeAt: Date, correlationId?: string) => Promise<void>;
     /**
      * Optional logger used for diagnostic events (heartbeat ticks, unexpected
      * lease-extension failures, etc). If omitted, the engine is silent. The
@@ -56,6 +60,7 @@ interface FlowExecutionRow {
     wakeAt: Date | null;
     actor: string;
     tenantId: string | null;
+    authSnapshotJson: unknown;
     correlationId: string | null;
     triggerEventId: string | null;
     createdAt: Date;
@@ -82,9 +87,10 @@ export declare function createFlowEngine(config: FlowEngineConfig): {
     }) => Promise<FlowExecution>;
     runNext: (executionId: string, ctx: ExecutionContext) => Promise<FlowExecution>;
     resume: (executionId: string, signal?: unknown) => Promise<void>;
-    resumeWaitingByEvent: (eventType: string, signal?: unknown) => Promise<number>;
+    resumeWaitingByEvent: (eventType: string, signal?: unknown) => Promise<string[]>;
     listRunnable: (limit?: number) => Promise<string[]>;
     claimNext: (batchSize?: number) => Promise<FlowExecutionRow[]>;
+    claimExecution: (executionId: string) => Promise<FlowExecutionRow | undefined>;
     cancel: (executionId: string) => Promise<void>;
     status: (executionId: string) => Promise<FlowExecution>;
     markFailedFromRunner: (executionId: string, error: unknown) => Promise<boolean>;

package/dist/flows/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/flows/engine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAIlE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAEV,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,aAAa,EACd,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AASlD,OAAO,EAGL,KAAK,gBAAgB,EAEtB,MAAM,oBAAoB,CAAC;AA0B5B,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,kBAAkB,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,WAAW,CAAC;IACvD,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,YAAY,CAAC;IACzD,sEAAsE;IACtE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,EAAE,CAAC,EAAE,kBAAkB,CAAC;KACzB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2DAA2D;IAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,UAAU,gBAAgB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAkBD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB;sBAqB3C,MAAM,SACT,OAAO,QACR,WAAW,SACV;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,KACzD,OAAO,CAAC,aAAa,CAAC;2BAsLW,MAAM,OAAO,gBAAgB,KAAG,OAAO,CAAC,aAAa,CAAC;0BAmXvD,MAAM,WAAW,OAAO,KAAG,OAAO,CAAC,IAAI,CAAC;sCAoC5B,MAAM,WAAW,OAAO,KAAG,OAAO,CAAC,MAAM,CAAC;sCAkChD,OAAO,CAAC,MAAM,EAAE,CAAC;4BAtjBrB,MAAM,KAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;0BA6kBtC,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;0BAyCtB,MAAM,KAAG,OAAO,CAAC,aAAa,CAAC;wCAoHjB,MAAM,SAAS,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;;EA8D3F;AA4ED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,SAAO,GAAG,MAAM,CAKjG"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/flows/engine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAIlE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAEV,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,aAAa,EACd,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AASlD,OAAO,EAGL,KAAK,gBAAgB,EAEtB,MAAM,oBAAoB,CAAC;AA0B5B,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,kBAAkB,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,WAAW,CAAC;IACvD,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,YAAY,CAAC;IACzD,sEAAsE;IACtE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,EAAE,CAAC,EAAE,kBAAkB,CAAC;KACzB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2DAA2D;IAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,CACtB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,IAAI,EACZ,aAAa,CAAC,EAAE,MAAM,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,UAAU,gBAAgB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAmCD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB;sBAgC3C,MAAM,SACT,OAAO,QACR,WAAW,SACV;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,KACzD,OAAO,CAAC,aAAa,CAAC;2BA6NW,MAAM,OAAO,gBAAgB,KAAG,OAAO,CAAC,aAAa,CAAC;0BAkXvD,MAAM,WAAW,OAAO,KAAG,OAAO,CAAC,IAAI,CAAC;sCAsC5B,MAAM,WAAW,OAAO,KAAG,OAAO,CAAC,MAAM,EAAE,CAAC;sCAsClD,OAAO,CAAC,MAAM,EAAE,CAAC;4BA/lBrB,MAAM,KAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;kCAqD9B,MAAM,KAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;0BAikBtD,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;0BAyCtB,MAAM,KAAG,OAAO,CAAC,aAAa,CAAC;wCAoHjB,MAAM,SAAS,OAAO,KAAG,OAAO,CAAC,OAAO,CAAC;;EA+D3F;AA8ED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,SAAO,GAAG,MAAM,CAKjG"}

package/dist/flows/engine.js

@@ -31,6 +31,23 @@ function getRowsAffected(result) {
         return r.length;
     return 0;
 }
+/** Type-safe partial update payload for flow executions. */
+/** Step auth from stored snapshot; falls back to worker auth for legacy rows. */
+function resolveFlowStepAuth(row, workerAuth) {
+    const snapshot = row.authSnapshotJson;
+    if (snapshot) {
+        return {
+            ...snapshot,
+            userId: row.actor ?? snapshot.userId,
+            tenantId: row.tenantId ?? snapshot.tenantId,
+        };
+    }
+    return {
+        ...workerAuth,
+        tenantId: row.tenantId ?? workerAuth.tenantId,
+        userId: row.actor ?? workerAuth.userId,
+    };
+}
 /**
  * Generate a deterministic-ish worker id for the current process.
  */
@@ -51,6 +68,13 @@ export function createFlowEngine(config) {
     const heartbeatIntervalMs = config.flowHeartbeatIntervalMs ?? Math.floor(leaseDurationMs / 3);
     const claimBatchSize = config.flowClaimBatchSize ?? DEFAULT_CLAIM_BATCH_SIZE;
     const logger = config.logger;
+    const onFlowStepEnqueue = config.onFlowStepEnqueue;
+    const onFlowDelayedSchedule = config.onFlowDelayedSchedule;
+    async function maybeEnqueueFlowStep(executionId, correlationId) {
+        if (onFlowStepEnqueue) {
+            await onFlowStepEnqueue(executionId, correlationId ?? executionId);
+        }
+    }
     /**
      * AbortControllers for currently-executing steps in THIS engine instance,
      * keyed by executionId. `cancel()` uses this to abort the running step
@@ -90,6 +114,7 @@ export function createFlowEngine(config) {
             stepHistory: [],
             actor: auth.userId ?? 'system',
             tenantId: auth.tenantId ?? null,
+            authSnapshotJson: auth,
             correlationId: opts?.correlationId ?? null,
             triggerEventId: opts?.triggerEventId ?? null,
         });
@@ -102,6 +127,7 @@ export function createFlowEngine(config) {
                 outcome: 'success',
             });
         }
+        await maybeEnqueueFlowStep(executionId, opts?.correlationId);
         return {
             id: executionId,
             flowName,
@@ -158,6 +184,39 @@ export function createFlowEngine(config) {
         }
         return rows;
     }
+    /**
+     * Claim a specific execution by ID (used by flow step queue consumer).
+     * Returns the row when claimed, undefined when not runnable or already leased.
+     */
+    async function claimExecution(executionId) {
+        const leaseDurationInterval = `${leaseDurationMs} milliseconds`;
+        const result = await db.execute(sql `
+      UPDATE flow_executions
+      SET status = ${FlowStatus.Running},
+          lease_owner = ${workerId},
+          lease_expires_at = now() + ${leaseDurationInterval}::interval,
+          updated_at = now()
+      WHERE id = ${executionId}
+        AND (
+             status = ${FlowStatus.Created}
+          OR (status = ${FlowStatus.Running} AND lease_expires_at < now())
+          OR (status = ${FlowStatus.Waiting} AND waiting_for_event IS NULL AND wake_at <= now())
+        )
+      RETURNING *
+    `);
+        const rows = result;
+        const row = rows[0];
+        if (row && audit) {
+            await audit.record('flow.lease.claimed', {
+                executionId: row.id,
+                flowName: row.flowName,
+                workerId,
+                step: row.currentStep,
+                source: 'claimExecution',
+            });
+        }
+        return row;
+    }
     /**
      * Extend the lease for a flow execution.
      * Returns true if the lease was extended, false if the lease was lost.
@@ -275,13 +334,8 @@ export function createFlowEngine(config) {
             await failFlow(executionId, row.flowName, `Step "${currentStepName}" not found in flow definition`, row);
             return { id: executionId, flowName: row.flowName, status: FlowStatus.Failed };
         }
-        // Build flow-scoped context with tenant-aware auth from stored execution
-        const flowAuth = {
-            ...ctx.auth,
-            tenantId: row.tenantId ?? ctx.auth.tenantId,
-            userId: row.actor ?? ctx.auth.userId,
-            roles: ctx.auth.roles.includes('system') ? ctx.auth.roles : [...ctx.auth.roles, 'system'],
-        };
+        // Build flow-scoped context from stored auth snapshot (not worker systemAuth roles)
+        const flowAuth = resolveFlowStepAuth(row, ctx.auth);
         const flowData = config.createDataService ? config.createDataService(flowAuth) : ctx.data;
         const flowEvents = createEventService ? createEventService(flowAuth) : ctx.events;
         // Create a heartbeat function for manual use by step handlers
@@ -458,16 +512,20 @@ export function createFlowEngine(config) {
             catch (err) {
                 return handleStepFailure(executionId, row, flow, history, err instanceof Error ? err.message : String(err));
             }
+            const wakeAt = new Date(Date.now() + delayMs);
             await guardedUpdate(executionId, {
                 status: FlowStatus.Waiting,
                 state: nextState,
                 stepHistory: history,
                 currentStep: nextStep,
                 waitingForEvent: null,
-                wakeAt: new Date(Date.now() + delayMs),
+                wakeAt,
                 leaseOwner: null,
                 leaseExpiresAt: null,
             });
+            if (onFlowDelayedSchedule) {
+                await onFlowDelayedSchedule(executionId, wakeAt, row.correlationId ?? executionId);
+            }
             return { id: executionId, flowName: row.flowName, status: FlowStatus.Waiting };
         }
         // Parallel step — execute all branches concurrently, then advance
@@ -559,11 +617,12 @@ export function createFlowEngine(config) {
             leaseOwner: null,
             leaseExpiresAt: null,
         });
+        await maybeEnqueueFlowStep(executionId, row.correlationId);
     }
     /**
      * Resume all flows waiting on a specific event type.
      * Uses FOR UPDATE SKIP LOCKED to prevent duplicate resumes across workers.
-     * Returns the number of executions resumed.
+     * Returns execution IDs resumed.
      */
     async function resumeWaitingByEvent(eventType, signal) {
         const result = await db.execute(sql `
@@ -590,7 +649,10 @@ export function createFlowEngine(config) {
                 await updateExecution(row.id, { state: signal });
             }
         }
-        return rows.length;
+        for (const row of rows) {
+            await maybeEnqueueFlowStep(row.id);
+        }
+        return rows.map((row) => row.id);
     }
     /**
      * Returns execution IDs that should be processed now.
@@ -787,6 +849,7 @@ export function createFlowEngine(config) {
         resumeWaitingByEvent,
         listRunnable,
         claimNext,
+        claimExecution,
         cancel,
         status,
         markFailedFromRunner,
@@ -806,6 +869,8 @@ function wrapAiWithDefaultSignal(ai, defaultSignal) {
         signal: params.signal ?? defaultSignal,
     });
     return {
+        recordProviderCost: (entry, costContext) => ai.recordProviderCost(entry, costContext),
+        checkProviderCostBudget: (config) => ai.checkProviderCostBudget(config),
         generate: (params) => ai.generate(withSignal(params)),
         generateWithUsage: (params) => ai.generateWithUsage(withSignal(params)),
         streamGenerate: (params) => ai.streamGenerate(withSignal(params)),