@schnick371/devsteps-shared 1.1.0-next.4 → 2.0.0-next.1

package/dist/core/workflow-compiler.js

@@ -0,0 +1,130 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Authoring-time workflow compiler.
+ * Resolves exact tool bindings and validates the execution graph before a run starts.
+ */
+import { createHash } from 'node:crypto';
+import { WorkflowDefinitionV2, } from '../schemas/workflow-definition-v2.js';
+import { checkApprovalDependencies, checkBindingsAgainstProfile, checkExecutorPredicates, checkScriptSteps, checkSecretLiterals, resolveHumanTransports, } from './workflow-compiler-host-rules.js';
+import { checkStepParties } from './workflow-compiler-party-rules.js';
+import { checkWorkflowGraph, } from './workflow-compiler-rules.js';
+import { checkSections } from './workflow-compiler-section-rules.js';
+import { resolveHostProfile, } from './workflow-host-profiles.js';
+export class WorkflowCompilerError extends Error {
+    code;
+    diagnostics;
+    constructor(code, message, diagnostics = []) {
+        super(message);
+        this.name = 'WorkflowCompilerError';
+        this.code = code;
+        this.diagnostics = diagnostics;
+    }
+}
+function canonicalize(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalize);
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, nested]) => [key, canonicalize(nested)]));
+    }
+    return value;
+}
+export function workflowDigest(value) {
+    return `sha256:${createHash('sha256')
+        .update(JSON.stringify(canonicalize(value)))
+        .digest('hex')}`;
+}
+function checkBindingProfiles(definition, hostProfile, report) {
+    for (const step of definition.steps) {
+        if (step.binding?.host_profile !== undefined && step.binding.host_profile !== hostProfile) {
+            report({
+                level: 'error',
+                code: 'HOST_PROFILE_MISMATCH',
+                step_id: step.id,
+                path: 'binding.host_profile',
+                message: `Step ${step.id} targets host profile ${step.binding.host_profile}, expected ${hostProfile}`,
+            });
+        }
+    }
+}
+/** Collect every authoring diagnostic for one host profile without throwing. */
+export function diagnoseWorkflowDefinitionV2(input, options) {
+    const parsed = WorkflowDefinitionV2.safeParse(input);
+    if (!parsed.success) {
+        return {
+            diagnostics: [{ level: 'error', code: 'AUTHORING_INVALID', message: parsed.error.message }],
+        };
+    }
+    const diagnostics = [];
+    const report = (diagnostic) => diagnostics.push(diagnostic);
+    if (!options.hostProfile) {
+        report({
+            level: 'error',
+            code: 'HOST_PROFILE_MISMATCH',
+            message: 'A host profile is required',
+        });
+        return { definition: parsed.data, diagnostics };
+    }
+    checkWorkflowGraph(parsed.data, report);
+    checkSections(parsed.data, report);
+    checkStepParties(parsed.data, report);
+    checkBindingProfiles(parsed.data, options.hostProfile, report);
+    const hostProfile = resolveHostProfile(options.hostProfile, {
+        definition: parsed.data.host_profiles,
+        project: options.projectHostProfiles,
+    });
+    if (hostProfile) {
+        checkBindingsAgainstProfile(parsed.data, hostProfile, report);
+    }
+    else {
+        report({
+            level: 'warning',
+            code: 'HOST_PROFILE_UNDECLARED',
+            message: `Host profile ${options.hostProfile} is declared neither in the definition, nor in .devsteps/config.json workflow.host_profiles, nor built in (claude-code, vscode-copilot); bindings are not checked against a tool list`,
+        });
+    }
+    const humanTransports = resolveHumanTransports(parsed.data, hostProfile, report);
+    checkScriptSteps(parsed.data, report);
+    checkApprovalDependencies(parsed.data, report);
+    checkSecretLiterals(parsed.data, report);
+    checkExecutorPredicates(parsed.data, report);
+    return { definition: parsed.data, diagnostics, hostProfile, humanTransports };
+}
+export function compileWorkflowDefinitionV2(input, options) {
+    const { definition, diagnostics, hostProfile, humanTransports } = diagnoseWorkflowDefinitionV2(input, options);
+    const firstError = diagnostics.find((diagnostic) => diagnostic.level === 'error');
+    if (firstError || !definition) {
+        throw new WorkflowCompilerError(firstError?.code ?? 'AUTHORING_INVALID', firstError?.message ?? 'Workflow definition is invalid', diagnostics);
+    }
+    const definitionDigest = workflowDigest(definition);
+    const compilerVersion = options.compilerVersion ?? '1.0.0';
+    const manifestCore = {
+        schema_version: '1.0',
+        definition_schema_version: definition.schema_version,
+        process_type: definition.process_type,
+        definition_digest: definitionDigest,
+        compiler_version: compilerVersion,
+        host_profile: options.hostProfile,
+        host_profile_source: hostProfile?.source ?? 'undeclared',
+        host_profile_definition: hostProfile?.profile ?? null,
+        human_transports: humanTransports ?? {},
+        definition,
+    };
+    return {
+        ...manifestCore,
+        manifest_digest: workflowDigest(manifestCore),
+        warnings: diagnostics.filter((diagnostic) => diagnostic.level === 'warning'),
+    };
+}
+export function verifyWorkflowExecutionManifest(manifest, options) {
+    const recompiled = compileWorkflowDefinitionV2(manifest.definition, options);
+    if (manifest.host_profile !== options.hostProfile ||
+        manifest.definition_digest !== recompiled.definition_digest ||
+        manifest.manifest_digest !== recompiled.manifest_digest) {
+        throw new WorkflowCompilerError('MANIFEST_INTEGRITY', 'Workflow manifest integrity or binding profile has changed; recompile before execution');
+    }
+}
+//# sourceMappingURL=workflow-compiler.js.map

package/dist/core/workflow-compiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-compiler.js","sourceRoot":"","sources":["../../src/core/workflow-compiler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAEL,oBAAoB,GAGrB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EACL,kBAAkB,GAInB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAGL,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AASrC,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9B,IAAI,CAA4B;IAChC,WAAW,CAAuC;IAElE,YACE,IAA+B,EAC/B,OAAe,EACf,WAAW,GAAyC,EAAE;QAEtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAoBD,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAA8B,EAC9B,WAAmB,EACnB,MAAsB;IAEtB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YAC1F,MAAM,CAAC;gBACL,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,QAAQ,IAAI,CAAC,EAAE,yBAAyB,IAAI,CAAC,OAAO,CAAC,YAAY,cAAc,WAAW,EAAE;aACtG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAgBD,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,OAA+B;IAE/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;SAC5F,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAgC,EAAE,CAAC;IACpD,MAAM,MAAM,GAAmB,CAAC,UAAU,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,CAAC;YACL,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,4BAA4B;SACtC,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;IAClD,CAAC;IACD,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE;QAC1D,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;QACrC,OAAO,EAAE,OAAO,CAAC,mBAAmB;KACrC,CAAC,CAAC;IACH,IAAI,WAAW,EAAE,CAAC;QAChB,2BAA2B,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC;YACL,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,gBAAgB,OAAO,CAAC,WAAW,uLAAuL;SACpO,CAAC,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACjF,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,OAA+B;IAE/B,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,4BAA4B,CAC5F,KAAK,EACL,OAAO,CACR,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IAClF,IAAI,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EAAE,IAAI,IAAI,mBAAmB,EACvC,UAAU,EAAE,OAAO,IAAI,gCAAgC,EACvD,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC;IAC3D,MAAM,YAAY,GAAG;QACnB,cAAc,EAAE,KAAc;QAC9B,yBAAyB,EAAE,UAAU,CAAC,cAAc;QACpD,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,iBAAiB,EAAE,gBAAgB;QACnC,gBAAgB,EAAE,eAAe;QACjC,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,mBAAmB,EAAE,WAAW,EAAE,MAAM,IAAK,YAAsB;QACnE,uBAAuB,EAAE,WAAW,EAAE,OAAO,IAAI,IAAI;QACrD,gBAAgB,EAAE,eAAe,IAAI,EAAE;QACvC,UAAU;KACX,CAAC;IACF,OAAO;QACL,GAAG,YAAY;QACf,eAAe,EAAE,cAAc,CAAC,YAAY,CAAC;QAC7C,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,QAAmC,EACnC,OAA+B;IAE/B,MAAM,UAAU,GAAG,2BAA2B,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7E,IACE,QAAQ,CAAC,YAAY,KAAK,OAAO,CAAC,WAAW;QAC7C,QAAQ,CAAC,iBAAiB,KAAK,UAAU,CAAC,iBAAiB;QAC3D,QAAQ,CAAC,eAAe,KAAK,UAAU,CAAC,eAAe,EACvD,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,oBAAoB,EACpB,wFAAwF,CACzF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/workflow-definition-facts.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Definition facts for list and get: schema version, TEST profile, process type, open runs.
+ * One read of the runs index serves every item of a page.
+ */
+/**
+ * What a tool answer says about a stored definition instead of echoing it (BUG-161): its size in
+ * steps (v2) or states (v1) and its digest. A v2 digest is the one its runs record as
+ * `definition_digest`, so a caller can tell whether a run used the current definition.
+ */
+export type WorkflowDefinitionSummary = Readonly<{
+    schema_version: string;
+    steps?: number;
+    states?: number;
+    digest: string;
+}>;
+export declare function workflowDefinitionSummary(definition: unknown): WorkflowDefinitionSummary;
+export type WorkflowDefinitionFacts = Readonly<{
+    schema_version: string;
+    profile?: string;
+    process_type?: string;
+    open_runs: number;
+}>;
+type ItemWithDefinition = Readonly<{
+    id: string;
+    process_definition?: unknown;
+}>;
+export declare function workflowDefinitionFacts(devstepsDir: string, items: readonly ItemWithDefinition[]): Promise<Map<string, WorkflowDefinitionFacts>>;
+export {};
+//# sourceMappingURL=workflow-definition-facts.d.ts.map

package/dist/core/workflow-definition-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-definition-facts.d.ts","sourceRoot":"","sources":["../../src/core/workflow-definition-facts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAMH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,OAAO,GAAG,yBAAyB,CASxF;AAED,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,KAAK,kBAAkB,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAEjF,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,kBAAkB,EAAE,GACnC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAwB/C"}

package/dist/core/workflow-definition-facts.js

@@ -0,0 +1,48 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Definition facts for list and get: schema version, TEST profile, process type, open runs.
+ * One read of the runs index serves every item of a page.
+ */
+import { join } from 'node:path';
+import { readRunCatalog } from '../runtime/run-catalog.js';
+import { WorkflowDefinitionV2 } from '../schemas/workflow-definition-v2.js';
+import { workflowDigest } from './workflow-compiler.js';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function workflowDefinitionSummary(definition) {
+    const record = isRecord(definition) ? definition : {};
+    const parsed = WorkflowDefinitionV2.safeParse(definition);
+    return {
+        schema_version: typeof record.schema_version === 'string' ? record.schema_version : 'unknown',
+        ...(Array.isArray(record.steps) ? { steps: record.steps.length } : {}),
+        ...(isRecord(record.states) ? { states: Object.keys(record.states).length } : {}),
+        digest: workflowDigest(parsed.success ? parsed.data : definition),
+    };
+}
+export async function workflowDefinitionFacts(devstepsDir, items) {
+    const facts = new Map();
+    const withDefinition = items.filter((item) => item.process_definition && typeof item.process_definition === 'object');
+    if (withDefinition.length === 0)
+        return facts;
+    const openRuns = new Map();
+    for (const entry of await readRunCatalog(join(devstepsDir, 'runs')).catch(() => [])) {
+        if (!entry.terminal)
+            openRuns.set(entry.definition_id, (openRuns.get(entry.definition_id) ?? 0) + 1);
+    }
+    for (const item of withDefinition) {
+        const definition = item.process_definition;
+        facts.set(item.id, {
+            schema_version: typeof definition.schema_version === 'string' ? definition.schema_version : 'unknown',
+            ...(typeof definition.profile === 'string' ? { profile: definition.profile } : {}),
+            ...(typeof definition.process_type === 'string'
+                ? { process_type: definition.process_type }
+                : {}),
+            open_runs: openRuns.get(item.id) ?? 0,
+        });
+    }
+    return facts;
+}
+//# sourceMappingURL=workflow-definition-facts.js.map

package/dist/core/workflow-definition-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-definition-facts.js","sourceRoot":"","sources":["../../src/core/workflow-definition-facts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAcxD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAmB;IAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1D,OAAO;QACL,cAAc,EAAE,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QAC7F,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;KAClE,CAAC;AACJ,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,KAAoC;IAEpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmC,CAAC;IACzD,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,IAAI,CAAC,kBAAkB,KAAK,QAAQ,CACjF,CAAC;IACF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACpF,IAAI,CAAC,KAAK,CAAC,QAAQ;YACjB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,kBAA6C,CAAC;QACtE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;YACjB,cAAc,EACZ,OAAO,UAAU,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;YACvF,GAAG,CAAC,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,OAAO,UAAU,CAAC,YAAY,KAAK,QAAQ;gBAC7C,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC;YACP,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/workflow-exports.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Core barrel, workflow part: the workflow contract, the v1 task and test loaders, and the v2
+ * compiler, host profiles, authoring checks and loader. Re-exported unchanged through
+ * `core/index.ts`.
+ */
+export { type LoadedWorkflowDefinition, type WorkflowRunFinalizeInput, type WorkflowRunRecordInput, type WorkflowRunStartInput, workflowRunFinalize, workflowRunGet, workflowRunRecord, workflowRunStart, } from '../runtime/workflow-contract.js';
+export { type LoadedTaskWorkflow, loadTaskWorkflowDefinition, loadTaskWorkflowDefinitionFromItem, TaskWorkflowLoadError, type TaskWorkflowLoadOptions, } from './task-workflow-loader.js';
+export { type LoadedTestWorkflow, loadTestWorkflowDefinition, loadTestWorkflowDefinitionFromItem, TestWorkflowLoadError, type TestWorkflowLoadOptions, } from './test-workflow-loader.js';
+export { compileWorkflowDefinitionV2, diagnoseWorkflowDefinitionV2, verifyWorkflowExecutionManifest, type WorkflowCompileDiagnostic, type WorkflowCompileOptions, WorkflowCompilerError, type WorkflowCompilerErrorCode, type WorkflowDiagnosis, type WorkflowDiagnosticCode, type WorkflowExecutionManifest, workflowDigest, } from './workflow-compiler.js';
+export { type WorkflowDefinitionFacts, type WorkflowDefinitionSummary, workflowDefinitionFacts, workflowDefinitionSummary, } from './workflow-definition-facts.js';
+export { BUILT_IN_HOST_PROFILES, findHostTool, type HostProfileSource, HUMAN_TRANSPORT_LIMITS, HUMAN_TRANSPORT_TOOL, OPERATOR_HOST_TOOL, type ResolvedHostProfile, readProjectHostProfiles, resolveHostProfile, TERMINAL_HOST_TOOLS, } from './workflow-host-profiles.js';
+export { assertAuthoredWorkflowV2, type WorkflowAuthoringDiagnostic, WorkflowAuthoringError, } from './workflow-v2-authoring.js';
+export { authoredWorkflowDefinition, isWorkflowV2Item, type LoadedWorkflowV2Item, loadWorkflowV2Item, WorkflowV2LoadError, workflowSchemaVersionOf, } from './workflow-v2-loader.js';
+//# sourceMappingURL=workflow-exports.d.ts.map

package/dist/core/workflow-exports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-exports.d.ts","sourceRoot":"","sources":["../../src/core/workflow-exports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kCAAkC,EAClC,qBAAqB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kCAAkC,EAClC,qBAAqB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,qBAAqB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,KAAK,iBAAiB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wBAAwB,EACxB,KAAK,2BAA2B,EAChC,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC"}

package/dist/core/workflow-exports.js

@@ -0,0 +1,17 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Core barrel, workflow part: the workflow contract, the v1 task and test loaders, and the v2
+ * compiler, host profiles, authoring checks and loader. Re-exported unchanged through
+ * `core/index.ts`.
+ */
+export { workflowRunFinalize, workflowRunGet, workflowRunRecord, workflowRunStart, } from '../runtime/workflow-contract.js';
+export { loadTaskWorkflowDefinition, loadTaskWorkflowDefinitionFromItem, TaskWorkflowLoadError, } from './task-workflow-loader.js';
+export { loadTestWorkflowDefinition, loadTestWorkflowDefinitionFromItem, TestWorkflowLoadError, } from './test-workflow-loader.js';
+export { compileWorkflowDefinitionV2, diagnoseWorkflowDefinitionV2, verifyWorkflowExecutionManifest, WorkflowCompilerError, workflowDigest, } from './workflow-compiler.js';
+export { workflowDefinitionFacts, workflowDefinitionSummary, } from './workflow-definition-facts.js';
+export { BUILT_IN_HOST_PROFILES, findHostTool, HUMAN_TRANSPORT_LIMITS, HUMAN_TRANSPORT_TOOL, OPERATOR_HOST_TOOL, readProjectHostProfiles, resolveHostProfile, TERMINAL_HOST_TOOLS, } from './workflow-host-profiles.js';
+export { assertAuthoredWorkflowV2, WorkflowAuthoringError, } from './workflow-v2-authoring.js';
+export { authoredWorkflowDefinition, isWorkflowV2Item, loadWorkflowV2Item, WorkflowV2LoadError, workflowSchemaVersionOf, } from './workflow-v2-loader.js';
+//# sourceMappingURL=workflow-exports.js.map

package/dist/core/workflow-exports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-exports.js","sourceRoot":"","sources":["../../src/core/workflow-exports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAKL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,0BAA0B,EAC1B,kCAAkC,EAClC,qBAAqB,GAEtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,0BAA0B,EAC1B,kCAAkC,EAClC,qBAAqB,GAEtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAG/B,qBAAqB,EAKrB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,YAAY,EAEZ,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAElB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wBAAwB,EAExB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAEhB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC"}

package/dist/core/workflow-host-profiles.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Host profile registry for compiled workflows.
+ * A profile declares which host tools a step may bind and how a human step reaches the operator.
+ * Profiles are declared, never discovered: definition first, then project config, then built-ins.
+ */
+import { type WorkflowHostProfile, type WorkflowHostTool, type WorkflowHumanTransport } from '../schemas/workflow-definition-v2.js';
+export type HostProfileSource = 'definition' | 'project' | 'built-in';
+export type ResolvedHostProfile = Readonly<{
+    profile: WorkflowHostProfile;
+    source: HostProfileSource;
+}>;
+/**
+ * The executor-as-a-role binding name. Not a tool any host calls: it names whoever runs the step
+ * as its executor, who discharges it by reporting what they observed. Every profile declares it,
+ * so one definition is portable across hosts — a person in the walkthrough panel and an agent on
+ * Claude Code or Copilot execute the same authored steps.
+ */
+export declare const OPERATOR_HOST_TOOL = "operator";
+/**
+ * The agent tools whose command the guide view can run in a VS Code terminal for the operator
+ * (DEC-020). The compiler warns about `who: operator` on any other agent tool (STORY-503).
+ */
+export declare const TERMINAL_HOST_TOOLS: ReadonlySet<string>;
+/** Built-in profiles; `docs/reference/host-profiles/*.json` carries the same objects. */
+export declare const BUILT_IN_HOST_PROFILES: readonly WorkflowHostProfile[];
+/** Host tool that renders a human step for each transport. */
+export declare const HUMAN_TRANSPORT_TOOL: Readonly<Record<WorkflowHumanTransport, string>>;
+/** Option-count limits per transport, checked at authoring time. */
+export declare const HUMAN_TRANSPORT_LIMITS: Readonly<Record<WorkflowHumanTransport, Readonly<{
+    min: number;
+    max: number;
+    header_max?: number;
+}>>>;
+export declare function resolveHostProfile(name: string, declared: Readonly<{
+    definition?: readonly WorkflowHostProfile[];
+    project?: readonly WorkflowHostProfile[];
+}>): ResolvedHostProfile | undefined;
+export declare function findHostTool(profile: WorkflowHostProfile, hostToolName: string): WorkflowHostTool | undefined;
+/** Read `workflow.host_profiles` from `.devsteps/config.json`; a missing or invalid list is empty. */
+export declare function readProjectHostProfiles(devstepsDir: string): Promise<WorkflowHostProfile[]>;
+//# sourceMappingURL=workflow-host-profiles.d.ts.map

package/dist/core/workflow-host-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-host-profiles.d.ts","sourceRoot":"","sources":["../../src/core/workflow-host-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,sCAAsC,CAAC;AAE9C,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,SAAS,GAAG,UAAU,CAAC;AAEtE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAAC,CAAC;AAIH;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,aAAa,CAAC;AAE7C;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAIlD,CAAC;AAWH,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,EAAE,SAAS,mBAAmB,EA+DhE,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAKjF,CAAC;AAEF,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C,MAAM,CAAC,sBAAsB,EAAE,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAM5F,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,CAAC;IACjB,UAAU,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC5C,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC1C,CAAC,GACD,mBAAmB,GAAG,SAAS,CAOjC;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,mBAAmB,EAC5B,YAAY,EAAE,MAAM,GACnB,gBAAgB,GAAG,SAAS,CAO9B;AAED,sGAAsG;AACtG,wBAAsB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAajG"}

package/dist/core/workflow-host-profiles.js

@@ -0,0 +1,147 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Host profile registry for compiled workflows.
+ * A profile declares which host tools a step may bind and how a human step reaches the operator.
+ * Profiles are declared, never discovered: definition first, then project config, then built-ins.
+ */
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { WorkflowHostProfile as WorkflowHostProfileSchema, } from '../schemas/workflow-definition-v2.js';
+const SHELL_KINDS = ['script', 'cleanup', 'tool'];
+/**
+ * The executor-as-a-role binding name. Not a tool any host calls: it names whoever runs the step
+ * as its executor, who discharges it by reporting what they observed. Every profile declares it,
+ * so one definition is portable across hosts — a person in the walkthrough panel and an agent on
+ * Claude Code or Copilot execute the same authored steps.
+ */
+export const OPERATOR_HOST_TOOL = 'operator';
+/**
+ * The agent tools whose command the guide view can run in a VS Code terminal for the operator
+ * (DEC-020). The compiler warns about `who: operator` on any other agent tool (STORY-503).
+ */
+export const TERMINAL_HOST_TOOLS = new Set([
+    'Bash',
+    'PowerShell',
+    'run_in_terminal',
+]);
+const OPERATOR_TOOL = {
+    host_tool_name: OPERATOR_HOST_TOOL,
+    kinds: ['tool', 'script', 'artifact', 'cleanup'],
+    notes: 'The executor reports the step instead of the host calling a tool: a person in the ' +
+        'walkthrough panel, or an agent stating what it observed. Declared by every profile so a ' +
+        'definition never has to be forked per host.',
+};
+/** Built-in profiles; `docs/reference/host-profiles/*.json` carries the same objects. */
+export const BUILT_IN_HOST_PROFILES = [
+    {
+        name: 'claude-code',
+        description: 'Claude Code: shell tools, MCP tools, and AskUserQuestion for human steps.',
+        tools: [
+            {
+                host_tool_name: 'Bash',
+                kinds: SHELL_KINDS,
+                argument_schema: {
+                    properties: { command: {}, timeout: {}, description: {} },
+                    required: ['command'],
+                    additionalProperties: false,
+                },
+                notes: 'timeout is in milliseconds; the working directory is part of the command.',
+            },
+            {
+                host_tool_name: 'PowerShell',
+                kinds: SHELL_KINDS,
+                argument_schema: {
+                    properties: { command: {}, timeout: {}, description: {} },
+                    required: ['command'],
+                    additionalProperties: false,
+                },
+            },
+            {
+                host_tool_name: 'mcp:*',
+                kinds: ['tool', 'artifact', 'cleanup'],
+                notes: 'mcp:<server>/<tool>; arguments are the MCP tool arguments.',
+            },
+            OPERATOR_TOOL,
+        ],
+        human_transport: 'claude_code_ask_user_question',
+    },
+    {
+        name: 'vscode-copilot',
+        description: 'GitHub Copilot in VS Code: terminal, MCP tools, and vscode/askQuestions.',
+        tools: [
+            {
+                host_tool_name: 'run_in_terminal',
+                kinds: SHELL_KINDS,
+                argument_schema: {
+                    properties: { command: {}, explanation: {}, isBackground: {} },
+                    required: ['command'],
+                    additionalProperties: false,
+                },
+            },
+            {
+                host_tool_name: 'mcp:*',
+                kinds: ['tool', 'artifact', 'cleanup'],
+                notes: 'mcp:<server>/<tool>; arguments are the MCP tool arguments.',
+            },
+            OPERATOR_TOOL,
+        ],
+        human_transport: 'vscode_askQuestions',
+    },
+    {
+        name: 'vscode-operator',
+        description: 'A person in VS Code: no agent tool at all. Every step is carried out by hand and ' +
+            'reported as an observation, and human steps reach the operator through the walkthrough panel.',
+        tools: [OPERATOR_TOOL],
+        human_transport: 'vscode_walkthrough_panel',
+    },
+];
+/** Host tool that renders a human step for each transport. */
+export const HUMAN_TRANSPORT_TOOL = {
+    vscode_askQuestions: 'vscode_askQuestions',
+    vscode_walkthrough_panel: 'vscode_walkthrough_panel',
+    claude_code_ask_user_question: 'AskUserQuestion',
+    conversation: 'conversation',
+};
+/** Option-count limits per transport, checked at authoring time. */
+export const HUMAN_TRANSPORT_LIMITS = {
+    vscode_askQuestions: { min: 1, max: 20 },
+    vscode_walkthrough_panel: { min: 1, max: 20 },
+    claude_code_ask_user_question: { min: 2, max: 4, header_max: 12 },
+    conversation: { min: 1, max: 20 },
+};
+export function resolveHostProfile(name, declared) {
+    const fromDefinition = declared.definition?.find((profile) => profile.name === name);
+    if (fromDefinition)
+        return { profile: fromDefinition, source: 'definition' };
+    const fromProject = declared.project?.find((profile) => profile.name === name);
+    if (fromProject)
+        return { profile: fromProject, source: 'project' };
+    const builtIn = BUILT_IN_HOST_PROFILES.find((profile) => profile.name === name);
+    return builtIn ? { profile: builtIn, source: 'built-in' } : undefined;
+}
+export function findHostTool(profile, hostToolName) {
+    return profile.tools.find((tool) => tool.host_tool_name.endsWith('*')
+        ? hostToolName.startsWith(tool.host_tool_name.slice(0, -1)) &&
+            hostToolName.length > tool.host_tool_name.length - 1
+        : tool.host_tool_name === hostToolName);
+}
+/** Read `workflow.host_profiles` from `.devsteps/config.json`; a missing or invalid list is empty. */
+export async function readProjectHostProfiles(devstepsDir) {
+    let raw;
+    try {
+        raw = JSON.parse(await readFile(join(devstepsDir, 'config.json'), 'utf8'));
+    }
+    catch {
+        return [];
+    }
+    const workflow = raw?.workflow;
+    if (!Array.isArray(workflow?.host_profiles))
+        return [];
+    return workflow.host_profiles.flatMap((candidate) => {
+        const parsed = WorkflowHostProfileSchema.safeParse(candidate);
+        return parsed.success ? [parsed.data] : [];
+    });
+}
+//# sourceMappingURL=workflow-host-profiles.js.map

package/dist/core/workflow-host-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-host-profiles.js","sourceRoot":"","sources":["../../src/core/workflow-host-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAEL,mBAAmB,IAAI,yBAAyB,GAGjD,MAAM,sCAAsC,CAAC;AAS9C,MAAM,WAAW,GAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IAC9D,MAAM;IACN,YAAY;IACZ,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,aAAa,GAAqB;IACtC,cAAc,EAAE,kBAAkB;IAClC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;IAChD,KAAK,EACH,oFAAoF;QACpF,0FAA0F;QAC1F,6CAA6C;CAChD,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IACpE;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,2EAA2E;QACxF,KAAK,EAAE;YACL;gBACE,cAAc,EAAE,MAAM;gBACtB,KAAK,EAAE,WAAW;gBAClB,eAAe,EAAE;oBACf,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;oBACzD,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;gBACD,KAAK,EAAE,2EAA2E;aACnF;YACD;gBACE,cAAc,EAAE,YAAY;gBAC5B,KAAK,EAAE,WAAW;gBAClB,eAAe,EAAE;oBACf,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;oBACzD,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;aACF;YACD;gBACE,cAAc,EAAE,OAAO;gBACvB,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;gBACtC,KAAK,EAAE,4DAA4D;aACpE;YACD,aAAa;SACd;QACD,eAAe,EAAE,+BAA+B;KACjD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,0EAA0E;QACvF,KAAK,EAAE;YACL;gBACE,cAAc,EAAE,iBAAiB;gBACjC,KAAK,EAAE,WAAW;gBAClB,eAAe,EAAE;oBACf,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;oBAC9D,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;aACF;YACD;gBACE,cAAc,EAAE,OAAO;gBACvB,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;gBACtC,KAAK,EAAE,4DAA4D;aACpE;YACD,aAAa;SACd;QACD,eAAe,EAAE,qBAAqB;KACvC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,mFAAmF;YACnF,+FAA+F;QACjG,KAAK,EAAE,CAAC,aAAa,CAAC;QACtB,eAAe,EAAE,0BAA0B;KAC5C;CACF,CAAC;AAEF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAqD;IACpF,mBAAmB,EAAE,qBAAqB;IAC1C,wBAAwB,EAAE,0BAA0B;IACpD,6BAA6B,EAAE,iBAAiB;IAChD,YAAY,EAAE,cAAc;CAC7B,CAAC;AAEF,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAE/B;IACF,mBAAmB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;IACxC,wBAAwB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;IAC7C,6BAA6B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;IACjE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;CAClC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,QAGE;IAEF,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACrF,IAAI,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7E,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC/E,IAAI,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChF,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAA4B,EAC5B,YAAoB;IAEpB,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC/B,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzD,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QACtD,CAAC,CAAC,IAAI,CAAC,cAAc,KAAK,YAAY,CACzC,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,WAAmB;IAC/D,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAI,GAAyD,EAAE,QAAQ,CAAC;IACtF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,OAAO,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/workflow-v2-authoring.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Authoring diagnostics for compiled workflow definitions on add and update.
+ * Errors reject the write; warnings are returned with the item so an author sees them at once.
+ */
+import { type WorkflowCompileDiagnostic } from './workflow-compiler.js';
+export type WorkflowAuthoringDiagnostic = WorkflowCompileDiagnostic & Readonly<{
+    host_profile?: string;
+}>;
+export declare class WorkflowAuthoringError extends Error {
+    readonly code = "AUTHORING_INVALID";
+    readonly diagnostics: readonly WorkflowAuthoringDiagnostic[];
+    constructor(label: string, diagnostics: readonly WorkflowAuthoringDiagnostic[]);
+}
+/**
+ * Diagnose a v2 definition for every host profile it binds. Returns warnings; throws
+ * WorkflowAuthoringError when any diagnostic is an error. Other schema versions return [].
+ */
+export declare function assertAuthoredWorkflowV2(devstepsDir: string, definition: unknown, label: string): Promise<WorkflowAuthoringDiagnostic[]>;
+//# sourceMappingURL=workflow-v2-authoring.d.ts.map

package/dist/core/workflow-v2-authoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-v2-authoring.d.ts","sourceRoot":"","sources":["../../src/core/workflow-v2-authoring.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAGhC,MAAM,MAAM,2BAA2B,GAAG,yBAAyB,GACjE,QAAQ,CAAC;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEtC,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,SAAgB,IAAI,uBAAuB;IAC3C,SAAgB,WAAW,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAEpE,YAAmB,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,2BAA2B,EAAE,EAapF;CACF;AAqCD;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAwBxC"}

package/dist/core/workflow-v2-authoring.js

@@ -0,0 +1,88 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Authoring diagnostics for compiled workflow definitions on add and update.
+ * Errors reject the write; warnings are returned with the item so an author sees them at once.
+ */
+import { diagnoseWorkflowDefinitionV2, } from './workflow-compiler.js';
+import { BUILT_IN_HOST_PROFILES, readProjectHostProfiles } from './workflow-host-profiles.js';
+export class WorkflowAuthoringError extends Error {
+    code = 'AUTHORING_INVALID';
+    diagnostics;
+    constructor(label, diagnostics) {
+        const errors = diagnostics.filter((diagnostic) => diagnostic.level === 'error');
+        super(`${label}: the v2 process_definition has ${errors.length} authoring error(s); nothing was written. ${errors
+            .slice(0, 3)
+            .map((diagnostic) => `[${diagnostic.code}${diagnostic.step_id ? ` ${diagnostic.step_id}` : ''}] ${diagnostic.message}`)
+            .join(' | ')}${errors.length > 3 ? ' | …' : ''}`);
+        this.name = 'WorkflowAuthoringError';
+        this.diagnostics = diagnostics;
+    }
+}
+/**
+ * The host profiles a definition compiles for: the ones its bindings name, else the ones it
+ * declares inline, else every profile it could run under.
+ *
+ * That last case is the portable definition of STORY-448 decision 7, where no binding names a
+ * host because an absent `host_profile` means "whichever host runs this". Such a definition has to
+ * satisfy every one of them, so authoring diagnoses it against all of them. Before this, it was
+ * diagnosed against a `*` sentinel that resolved to no profile, which meant its bindings were
+ * never checked at all — a step could bind a tool that exists on no host and still be written.
+ */
+function authoredProfiles(definition, projectHostProfiles) {
+    const steps = Array.isArray(definition.steps) ? definition.steps : [];
+    const bound = steps.flatMap((step) => {
+        const profile = step?.binding
+            ?.host_profile;
+        return typeof profile === 'string' ? [profile] : [];
+    });
+    if (bound.length > 0)
+        return [...new Set(bound)];
+    const declared = Array.isArray(definition.host_profiles) ? definition.host_profiles : [];
+    const declaredNames = declared.flatMap((profile) => {
+        const name = profile?.name;
+        return typeof name === 'string' ? [name] : [];
+    });
+    if (declaredNames.length > 0)
+        return declaredNames;
+    return [
+        ...new Set([
+            ...projectHostProfiles.map((profile) => profile.name),
+            ...BUILT_IN_HOST_PROFILES.map((profile) => profile.name),
+        ]),
+    ];
+}
+/**
+ * Diagnose a v2 definition for every host profile it binds. Returns warnings; throws
+ * WorkflowAuthoringError when any diagnostic is an error. Other schema versions return [].
+ */
+export async function assertAuthoredWorkflowV2(devstepsDir, definition, label) {
+    if (!definition || typeof definition !== 'object')
+        return [];
+    const record = definition;
+    if (record.schema_version !== '2.0')
+        return [];
+    const projectHostProfiles = await readProjectHostProfiles(devstepsDir);
+    const profiles = authoredProfiles(record, projectHostProfiles);
+    const diagnostics = new Map();
+    for (const hostProfile of profiles.length > 0 ? profiles : ['*']) {
+        const result = diagnoseWorkflowDefinitionV2(definition, { hostProfile, projectHostProfiles });
+        for (const diagnostic of result.diagnostics) {
+            if (hostProfile === '*' && diagnostic.code === 'HOST_PROFILE_UNDECLARED')
+                continue;
+            const key = `${diagnostic.level}|${diagnostic.code}|${diagnostic.step_id}|${diagnostic.path}|${diagnostic.message}`;
+            if (!diagnostics.has(key)) {
+                diagnostics.set(key, {
+                    ...diagnostic,
+                    ...(hostProfile === '*' ? {} : { host_profile: hostProfile }),
+                });
+            }
+        }
+    }
+    const all = [...diagnostics.values()];
+    if (all.some((diagnostic) => diagnostic.level === 'error'))
+        throw new WorkflowAuthoringError(label, all);
+    return all;
+}
+//# sourceMappingURL=workflow-v2-authoring.js.map

package/dist/core/workflow-v2-authoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-v2-authoring.js","sourceRoot":"","sources":["../../src/core/workflow-v2-authoring.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,4BAA4B,GAE7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAK9F,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/B,IAAI,GAAG,mBAAmB,CAAC;IAC3B,WAAW,CAAyC;IAEpE,YAAmB,KAAa,EAAE,WAAmD;QACnF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;QAChF,KAAK,CACH,GAAG,KAAK,mCAAmC,MAAM,CAAC,MAAM,6CAA6C,MAAM;aACxG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CACF,CAAC,UAAU,EAAE,EAAE,CACb,IAAI,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,EAAE,CACpG;aACA,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACnD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,UAAmC,EACnC,mBAAgD;IAEhD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,MAAM,OAAO,GAAI,IAAwD,EAAE,OAAO;YAChF,EAAE,YAAY,CAAC;QACjB,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACjD,MAAM,IAAI,GAAI,OAAqC,EAAE,IAAI,CAAC;QAC1D,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACnD,OAAO;QACL,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YACrD,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACzD,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAAmB,EACnB,UAAmB,EACnB,KAAa;IAEb,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,UAAqC,CAAC;IACrD,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,mBAAmB,GAAG,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;IACnE,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,4BAA4B,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9F,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,WAAW,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,KAAK,yBAAyB;gBAAE,SAAS;YACnF,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACpH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE;oBACnB,GAAG,UAAU;oBACb,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC;QACxD,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC"}