@schnick371/devsteps-shared 1.1.0-next.4 → 2.0.0-next.1

package/dist/runtime/workflow-contract.js

@@ -0,0 +1,142 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Generic workflow execution contract
+ * Adapts validated TASK definitions to the neutral runtime state machine.
+ * This layer coordinates start, resume, record, and terminal finalization.
+ */
+import { ProcessDefinition, projectCanonicalRunReport, renderCanonicalRunReport, terminalOutcomesOf, } from './index.js';
+import { RunVersionConflictError } from './run-store.js';
+import { transitionRun } from './state-machine.js';
+import { normalizeWorkspaceFingerprint, sameWorkspaceFingerprint, } from './workspace-fingerprint.js';
+function stableJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stableJson).join(',')}]`;
+    if (value && typeof value === 'object') {
+        return `{${Object.entries(value)
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([key, nested]) => `${JSON.stringify(key)}:${stableJson(nested)}`)
+            .join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+export class WorkflowRunContractError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'WorkflowRunContractError';
+        this.code = code;
+    }
+}
+function asProcessDefinition(loaded) {
+    // BUG-110: the definition schema now requires and cross-validates `initial`, so the
+    // runtime projects it directly instead of guessing a start state from key order.
+    return ProcessDefinition.parse({
+        ...loaded.definition,
+        definition_id: loaded.item.metadata.id,
+        definition_revision: loaded.definitionRevision,
+        definition_digest: loaded.definitionDigest,
+        initial_state: loaded.definition.initial,
+    });
+}
+function createRun(loaded, workspaceFingerprint, definition, runId, occurredAt) {
+    // A new run records definition and workspace identity so later resumes can detect drift.
+    const stateDefinition = definition.states[definition.initial_state];
+    return {
+        schema_version: definition.schema_version,
+        run_id: runId,
+        process_type: definition.process_type,
+        definition_id: loaded.item.metadata.id,
+        definition_revision: loaded.definitionRevision,
+        definition_digest: loaded.definitionDigest,
+        state: definition.initial_state,
+        created_at: occurredAt,
+        updated_at: occurredAt,
+        workspace_fingerprint: normalizeWorkspaceFingerprint(workspaceFingerprint),
+        attempt: 1,
+        version: 1,
+        terminal: stateDefinition?.terminal ?? false,
+    };
+}
+export async function workflowRunStart(loaded, store, input, occurredAt = new Date().toISOString()) {
+    const definition = asProcessDefinition(loaded);
+    if (input.operation === 'new') {
+        const run = createRun(loaded, input.workspaceFingerprint, definition, input.runId ?? crypto.randomUUID(), occurredAt);
+        await store.create(run);
+        return run;
+    }
+    if (input.operation !== 'resume') {
+        throw new WorkflowRunContractError('INVALID_OPERATION', `Unsupported workflow operation: ${input.operation}`);
+    }
+    if (!input.runId) {
+        throw new WorkflowRunContractError('MISSING_RUN_ID', 'Resume requires a run ID');
+    }
+    // Resume never creates state; it only reopens an existing run after workspace verification.
+    const run = await store.withLock(input.runId, async () => {
+        await store.recoverPendingTransition(input.runId);
+        return store.load(input.runId);
+    });
+    if (!sameWorkspaceFingerprint(run.workspace_fingerprint, input.workspaceFingerprint)) {
+        throw new WorkflowRunContractError('WORKSPACE_DRIFT', `Workflow run ${run.run_id} was started with workspace fingerprint "${run.workspace_fingerprint}" but "${input.workspaceFingerprint}" was supplied`);
+    }
+    return run;
+}
+export async function workflowRunGet(store, runId) {
+    return store.withLock(runId, async () => {
+        await store.recoverPendingTransition(runId);
+        return store.load(runId);
+    });
+}
+export async function workflowRunRecord(loaded, store, runId, input) {
+    const definition = asProcessDefinition(loaded);
+    return store.withLock(runId, () => recordLocked(definition, store, runId, input));
+}
+async function recordLocked(definition, store, runId, input) {
+    await store.recoverPendingTransition(runId);
+    const run = await store.load(runId);
+    if (input.idempotencyKey) {
+        const prior = (await store.readEvents(runId)).find((candidate) => candidate.idempotency_key === input.idempotencyKey);
+        if (prior) {
+            if (prior.type !== input.event ||
+                prior.actor !== input.actor ||
+                stableJson(prior.payload) !== stableJson(input.payload ?? {})) {
+                throw new WorkflowRunContractError('IDEMPOTENCY_CONFLICT', `Idempotency key ${input.idempotencyKey} was used for a different transition`);
+            }
+            // A retried request returns the already committed state and never re-runs effects.
+            return run;
+        }
+    }
+    if (run.version !== input.expectedVersion) {
+        throw new RunVersionConflictError(input.expectedVersion, run.version);
+    }
+    const transitionInput = input;
+    const result = transitionRun(definition, run, transitionInput);
+    return store.commitTransition(result.run, result.event, input.expectedVersion);
+}
+export async function workflowRunFinalize(loaded, store, runId, input) {
+    const definition = asProcessDefinition(loaded);
+    return store.withLock(runId, async () => {
+        const current = await store.load(runId);
+        // Reject a nonterminal target before recording anything; finalize must be atomic at the API boundary.
+        const transition = definition.transitions.find((candidate) => candidate.event === input.event && candidate.from.includes(current.state));
+        if (transition && !definition.states[transition.to]?.terminal) {
+            throw new WorkflowRunContractError('NOT_TERMINAL', 'Finalize requires a terminal transition');
+        }
+        const run = await recordLocked(definition, store, runId, input);
+        if (!run.terminal) {
+            throw new WorkflowRunContractError('NOT_TERMINAL', 'Finalize requires a terminal transition');
+        }
+        const canonical = projectCanonicalRunReport(run, await store.readEvents(runId), undefined, {
+            terminal_outcomes: terminalOutcomesOf(loaded.definition),
+        });
+        await store.writeReportsAtomically(runId, {
+            json: renderCanonicalRunReport(canonical, 'json'),
+            md: renderCanonicalRunReport(canonical, 'markdown'),
+            html: renderCanonicalRunReport(canonical, 'html'),
+            csv: renderCanonicalRunReport(canonical, 'csv'),
+        });
+        return run;
+    });
+}
+//# sourceMappingURL=workflow-contract.js.map

package/dist/runtime/workflow-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-contract.js","sourceRoot":"","sources":["../../src/runtime/workflow-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,iBAAiB,EAEjB,yBAAyB,EAEzB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAiB,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAA+B,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AAEpC,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;aACtE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AA4CD,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjC,IAAI,CAMA;IAEpB,YAAmB,IAAsC,EAAE,OAAe;QACxE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,mBAAmB,CAAC,MAAgC;IAC3D,oFAAoF;IACpF,iFAAiF;IACjF,OAAO,iBAAiB,CAAC,KAAK,CAAC;QAC7B,GAAG,MAAM,CAAC,UAAU;QACpB,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;QACtC,mBAAmB,EAAE,MAAM,CAAC,kBAAkB;QAC9C,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;QAC1C,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,MAAgC,EAChC,oBAA4B,EAC5B,UAA6B,EAC7B,KAAa,EACb,UAAkB;IAElB,yFAAyF;IACzF,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACpE,OAAO;QACL,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;QACtC,mBAAmB,EAAE,MAAM,CAAC,kBAAkB;QAC9C,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;QAC1C,KAAK,EAAE,UAAU,CAAC,aAAa;QAC/B,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,UAAU;QACtB,qBAAqB,EAAE,6BAA6B,CAAC,oBAAoB,CAAC;QAC1E,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,eAAe,EAAE,QAAQ,IAAI,KAAK;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAgC,EAChC,KAAe,EACf,KAA4B,EAC5B,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAErC,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,SAAS,CACnB,MAAM,EACN,KAAK,CAAC,oBAAoB,EAC1B,UAAU,EACV,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,EAClC,UAAU,CACX,CAAC;QACF,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,wBAAwB,CAChC,mBAAmB,EACnB,mCAAmC,KAAK,CAAC,SAAS,EAAE,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IACnF,CAAC;IAED,4FAA4F;IAC5F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,CAAC,wBAAwB,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,wBAAwB,CAChC,iBAAiB,EACjB,gBAAgB,GAAG,CAAC,MAAM,4CAA4C,GAAG,CAAC,qBAAqB,UAAU,KAAK,CAAC,oBAAoB,gBAAgB,CACpJ,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAe,EAAE,KAAa;IACjE,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,KAAK,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAgC,EAChC,KAAe,EACf,KAAa,EACb,KAA6B;IAE7B,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAA6B,EAC7B,KAAe,EACf,KAAa,EACb,KAA6B;IAE7B,MAAM,KAAK,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAChD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc,CAClE,CAAC;QACF,IAAI,KAAK,EAAE,CAAC;YACV,IACE,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK;gBAC1B,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;gBAC3B,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAC7D,CAAC;gBACD,MAAM,IAAI,wBAAwB,CAChC,sBAAsB,EACtB,mBAAmB,KAAK,CAAC,cAAc,sCAAsC,CAC9E,CAAC;YACJ,CAAC;YACD,mFAAmF;YACnF,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1C,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,eAAe,GAA2B,KAAK,CAAC;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAgC,EAChC,KAAe,EACf,KAAa,EACb,KAA+B;IAE/B,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,sGAAsG;QACtG,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAC5C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CACzF,CAAC;QACF,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC9D,MAAM,IAAI,wBAAwB,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,wBAAwB,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,SAAS,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE;YACzF,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC;SACzD,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE;YACxC,IAAI,EAAE,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC;YACjD,EAAE,EAAE,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC;YACnD,IAAI,EAAE,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC;YACjD,GAAG,EAAE,wBAAwB,CAAC,SAAS,EAAE,KAAK,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/workflow-response.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Opt-in workflow response projection. Compact mode removes accumulated run state only;
+ * executable dispatches, party state and all other response evidence retain their full shape.
+ */
+import type { ProcessRun } from './index.js';
+export type WorkflowResponseMode = 'full' | 'compact';
+/** Optional full-run fields remain readable by callers that accept either response mode. */
+export type WorkflowRunSummary = Pick<ProcessRun, 'run_id' | 'definition_id' | 'definition_schema_version' | 'state' | 'version' | 'terminal' | 'manifest_digest' | 'host_profile' | 'mode' | 'pending_verdict' | 'verdict' | 'finished_at' | 'reason'> & Partial<ProcessRun>;
+export type WorkflowRunResponse<T extends {
+    run: ProcessRun;
+}> = Omit<T, 'run'> & {
+    run: WorkflowRunSummary;
+};
+/** Only omission defaults to full; malformed modes must fail before a caller reads or writes. */
+export declare function parseWorkflowResponseMode(value: unknown): WorkflowResponseMode;
+/** DEC-093's allowlist deliberately excludes even future accumulated run fields. */
+export declare function projectWorkflowRunSummary(run: ProcessRun): WorkflowRunSummary;
+export declare function projectWorkflowRunResponse<T extends {
+    run: ProcessRun;
+}>(response: T, mode?: 'full'): T;
+export declare function projectWorkflowRunResponse<T extends {
+    run: ProcessRun;
+}>(response: T, mode: WorkflowResponseMode): WorkflowRunResponse<T>;
+//# sourceMappingURL=workflow-response.d.ts.map

package/dist/runtime/workflow-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-response.d.ts","sourceRoot":"","sources":["../../src/runtime/workflow-response.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAAC;AAEtD,4FAA4F;AAC5F,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,UAAU,EACR,QAAQ,GACR,eAAe,GACf,2BAA2B,GAC3B,OAAO,GACP,SAAS,GACT,UAAU,GACV,iBAAiB,GACjB,cAAc,GACd,MAAM,GACN,iBAAiB,GACjB,SAAS,GACT,aAAa,GACb,QAAQ,CACX,GACC,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtB,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,UAAU,CAAA;CAAE,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG;IAChF,GAAG,EAAE,kBAAkB,CAAC;CACzB,CAAC;AAEF,iGAAiG;AACjG,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAI9E;AAED,oFAAoF;AACpF,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,UAAU,GAAG,kBAAkB,CAkB7E;AAED,wBAAgB,0BAA0B,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,UAAU,CAAA;CAAE,EACtE,QAAQ,EAAE,CAAC,EACX,IAAI,CAAC,EAAE,MAAM,GACZ,CAAC,CAAC;AACL,wBAAgB,0BAA0B,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,UAAU,CAAA;CAAE,EACtE,QAAQ,EAAE,CAAC,EACX,IAAI,EAAE,oBAAoB,GACzB,mBAAmB,CAAC,CAAC,CAAC,CAAC"}

package/dist/runtime/workflow-response.js

@@ -0,0 +1,41 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Opt-in workflow response projection. Compact mode removes accumulated run state only;
+ * executable dispatches, party state and all other response evidence retain their full shape.
+ */
+import { WorkflowRunV2Error } from './workflow-v2-types.js';
+/** Only omission defaults to full; malformed modes must fail before a caller reads or writes. */
+export function parseWorkflowResponseMode(value) {
+    if (value === undefined || value === 'full')
+        return 'full';
+    if (value === 'compact')
+        return 'compact';
+    throw new WorkflowRunV2Error('INPUT_INVALID', 'response must be "full" or "compact"');
+}
+/** DEC-093's allowlist deliberately excludes even future accumulated run fields. */
+export function projectWorkflowRunSummary(run) {
+    return {
+        run_id: run.run_id,
+        definition_id: run.definition_id,
+        state: run.state,
+        version: run.version,
+        terminal: run.terminal,
+        ...(run.definition_schema_version !== undefined
+            ? { definition_schema_version: run.definition_schema_version }
+            : {}),
+        ...(run.manifest_digest !== undefined ? { manifest_digest: run.manifest_digest } : {}),
+        ...(run.host_profile !== undefined ? { host_profile: run.host_profile } : {}),
+        ...(run.mode !== undefined ? { mode: run.mode } : {}),
+        ...(run.pending_verdict !== undefined ? { pending_verdict: run.pending_verdict } : {}),
+        ...(run.verdict !== undefined ? { verdict: run.verdict } : {}),
+        ...(run.finished_at !== undefined ? { finished_at: run.finished_at } : {}),
+        ...(run.reason !== undefined ? { reason: run.reason } : {}),
+    };
+}
+/** Full mode retains identity; compact mode changes only the envelope's run property. */
+export function projectWorkflowRunResponse(response, mode = 'full') {
+    return mode === 'full' ? response : { ...response, run: projectWorkflowRunSummary(response.run) };
+}
+//# sourceMappingURL=workflow-response.js.map

package/dist/runtime/workflow-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-response.js","sourceRoot":"","sources":["../../src/runtime/workflow-response.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AA2B5D,iGAAiG;AACjG,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAC;AACxF,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,yBAAyB,CAAC,GAAe;IACvD,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,yBAAyB,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE,yBAAyB,EAAE,GAAG,CAAC,yBAAyB,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAUD,yFAAyF;AACzF,MAAM,UAAU,0BAA0B,CACxC,QAAW,EACX,IAAI,GAAyB,MAAM;IAEnC,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;AACpG,CAAC"}

package/dist/runtime/workflow-template.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Workflow argument templates.
+ * Expands `${variables.x}` and `${outputs.<step>.<field>}` without resolving secret references.
+ */
+export declare class WorkflowDispatchError extends Error {
+    readonly code: 'MISSING_BINDING' | 'MISSING_TEMPLATE' | 'PARAMETER_MUTATION';
+    constructor(code: WorkflowDispatchError['code'], message: string);
+}
+/**
+ * Expand `${variables.x}` and `${outputs.<step>.<field>}` templates. A whole-value template keeps
+ * the resolved type; inside a longer string a secret reference renders as its reference text and
+ * any other object as JSON. The runtime never resolves a secret reference to its value.
+ */
+export declare function renderWorkflowTemplate(value: unknown, variables: Readonly<Record<string, unknown>>, outputs: Readonly<Record<string, unknown>>): unknown;
+//# sourceMappingURL=workflow-template.d.ts.map

package/dist/runtime/workflow-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-template.d.ts","sourceRoot":"","sources":["../../src/runtime/workflow-template.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,SAAgB,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;IAEpF,YAAmB,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAItE;CACF;AAqCD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC5C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACzC,OAAO,CAsBT"}

package/dist/runtime/workflow-template.js

@@ -0,0 +1,65 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Workflow argument templates.
+ * Expands `${variables.x}` and `${outputs.<step>.<field>}` without resolving secret references.
+ */
+import { isSecretReference } from './redaction.js';
+export class WorkflowDispatchError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'WorkflowDispatchError';
+        this.code = code;
+    }
+}
+function lookup(path, variables, outputs) {
+    const [root, ...parts] = path.split('.');
+    let value = root === 'variables' ? variables : root === 'outputs' ? outputs : undefined;
+    for (const part of parts) {
+        // Own keys only, so a name such as `constructor` never reaches the prototype (BUG-216).
+        if (typeof value !== 'object' || value === null || !Object.hasOwn(value, part))
+            return undefined;
+        value = value[part];
+    }
+    return value;
+}
+const EXACT_TEMPLATE = /^\$\{(variables|outputs)\.([A-Za-z0-9_][A-Za-z0-9_.-]*)\}$/;
+const EMBEDDED_TEMPLATE = /\$\{(variables|outputs)\.([A-Za-z0-9_][A-Za-z0-9_.-]*)\}/g;
+function resolveTemplate(root, path, variables, outputs) {
+    const resolved = lookup(`${root}.${path}`, variables, outputs);
+    if (resolved === undefined || resolved === null) {
+        throw new WorkflowDispatchError('MISSING_TEMPLATE', `Missing workflow template value: ${root}.${path}`);
+    }
+    return resolved;
+}
+/**
+ * Expand `${variables.x}` and `${outputs.<step>.<field>}` templates. A whole-value template keeps
+ * the resolved type; inside a longer string a secret reference renders as its reference text and
+ * any other object as JSON. The runtime never resolves a secret reference to its value.
+ */
+export function renderWorkflowTemplate(value, variables, outputs) {
+    if (typeof value === 'string') {
+        const exact = value.match(EXACT_TEMPLATE);
+        if (exact)
+            return resolveTemplate(exact[1], exact[2], variables, outputs);
+        return value.replace(EMBEDDED_TEMPLATE, (_, root, path) => {
+            const resolved = resolveTemplate(root, path, variables, outputs);
+            if (isSecretReference(resolved))
+                return resolved.$secret;
+            return typeof resolved === 'object' ? JSON.stringify(resolved) : String(resolved);
+        });
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => renderWorkflowTemplate(entry, variables, outputs));
+    }
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value).map(([key, nested]) => [
+            key,
+            renderWorkflowTemplate(nested, variables, outputs),
+        ]));
+    }
+    return value;
+}
+//# sourceMappingURL=workflow-template.js.map

package/dist/runtime/workflow-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-template.js","sourceRoot":"","sources":["../../src/runtime/workflow-template.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9B,IAAI,CAAgE;IAEpF,YAAmB,IAAmC,EAAE,OAAe;QACrE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,MAAM,CACb,IAAY,EACZ,SAA4C,EAC5C,OAA0C;IAE1C,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,KAAK,GAAY,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,wFAAwF;QACxF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;YAC5E,OAAO,SAAS,CAAC;QACnB,KAAK,GAAI,KAAiC,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,cAAc,GAAG,4DAA4D,CAAC;AACpF,MAAM,iBAAiB,GAAG,2DAA2D,CAAC;AAEtF,SAAS,eAAe,CACtB,IAAY,EACZ,IAAY,EACZ,SAA4C,EAC5C,OAA0C;IAE1C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,qBAAqB,CAC7B,kBAAkB,EAClB,oCAAoC,IAAI,IAAI,IAAI,EAAE,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,SAA4C,EAC5C,OAA0C;IAE1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC1C,IAAI,KAAK;YAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE;YACxE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACjE,IAAI,iBAAiB,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;YACzD,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YAC3C,GAAG;YACH,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;SACnD,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/runtime/workflow-v1-cancel.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Cancel a v1 workflow run without its definition. An abandoned run must always be closable
+ * through the tools, even when its definition no longer validates — otherwise the open run keeps
+ * the BUG-112 guard from accepting the repaired definition, and neither can move (BUG-150). The
+ * cancel never reads the definition: it records a terminal `cancel` event with the reason, marks
+ * the run CANCELLED, and writes the reports, as a v2 CANCELLED finalize does.
+ * @see BUG-150 BUG-112
+ */
+import { type ProcessRun, type RuntimeActor } from './index.js';
+import { type RunStore } from './run-store.js';
+export type WorkflowRunCancelInput = Readonly<{
+    definitionId: string;
+    /** Compared verbatim with the run's fingerprint when supplied (BUG-116). */
+    workspaceFingerprint?: string;
+    actor: RuntimeActor;
+    actorName?: string;
+    reason?: string;
+    expectedVersion: number;
+    idempotencyKey?: string;
+    occurredAt?: string;
+}>;
+/**
+ * Close a v1 run as CANCELLED with a reason, from any non-terminal state. Cancelling a run that
+ * is already cancelled with the same reason replays; any other terminal run is refused.
+ */
+export declare function workflowRunCancel(store: RunStore, runId: string, input: WorkflowRunCancelInput): Promise<ProcessRun>;
+//# sourceMappingURL=workflow-v1-cancel.d.ts.map

package/dist/runtime/workflow-v1-cancel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-v1-cancel.d.ts","sourceRoot":"","sources":["../../src/runtime/workflow-v1-cancel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAEL,KAAK,UAAU,EAEf,KAAK,YAAY,EAElB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,QAAQ,EAA2B,MAAM,gBAAgB,CAAC;AAIxE,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC,CAAC;AA8BH;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,QAAQ,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAuDrB"}

package/dist/runtime/workflow-v1-cancel.js

@@ -0,0 +1,89 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Cancel a v1 workflow run without its definition. An abandoned run must always be closable
+ * through the tools, even when its definition no longer validates — otherwise the open run keeps
+ * the BUG-112 guard from accepting the repaired definition, and neither can move (BUG-150). The
+ * cancel never reads the definition: it records a terminal `cancel` event with the reason, marks
+ * the run CANCELLED, and writes the reports, as a v2 CANCELLED finalize does.
+ * @see BUG-150 BUG-112
+ */
+import { randomUUID } from 'node:crypto';
+import { projectCanonicalRunReport, renderCanonicalRunReport, } from './index.js';
+import { RunVersionConflictError } from './run-store.js';
+import { WorkflowRunContractError } from './workflow-contract.js';
+import { sameWorkspaceFingerprint } from './workspace-fingerprint.js';
+function requiredReason(reason) {
+    const trimmed = reason?.trim() ?? '';
+    if (!trimmed) {
+        throw new WorkflowRunContractError('INPUT_INVALID', 'Cancelling a run needs a reason');
+    }
+    if (trimmed.length > 2000) {
+        throw new WorkflowRunContractError('INPUT_INVALID', 'The reason is limited to 2000 characters');
+    }
+    return trimmed;
+}
+function cancelEvent(run, input, reason, at) {
+    return {
+        schema_version: run.schema_version,
+        event_id: randomUUID(),
+        run_id: run.run_id,
+        sequence: run.version,
+        type: 'cancel',
+        occurred_at: at,
+        from_state: run.state,
+        to_state: 'CANCELLED',
+        actor: input.actor,
+        ...(input.actorName ? { actor_name: input.actorName } : {}),
+        ...(input.idempotencyKey ? { idempotency_key: input.idempotencyKey } : {}),
+        payload: { outcome: 'recorded', summary: reason, verdict: 'CANCELLED', reason },
+    };
+}
+/**
+ * Close a v1 run as CANCELLED with a reason, from any non-terminal state. Cancelling a run that
+ * is already cancelled with the same reason replays; any other terminal run is refused.
+ */
+export async function workflowRunCancel(store, runId, input) {
+    const reason = requiredReason(input.reason);
+    return store.withLock(runId, async () => {
+        await store.recoverPendingTransition(runId);
+        const run = await store.load(runId);
+        if (run.definition_id !== input.definitionId) {
+            throw new WorkflowRunContractError('INVALID_OPERATION', `Run ${runId} belongs to ${run.definition_id}, not ${input.definitionId}`);
+        }
+        if (input.workspaceFingerprint &&
+            !sameWorkspaceFingerprint(input.workspaceFingerprint, run.workspace_fingerprint)) {
+            throw new WorkflowRunContractError('WORKSPACE_DRIFT', `Workflow run ${runId} was started with workspace fingerprint "${run.workspace_fingerprint}" but "${input.workspaceFingerprint}" was supplied`);
+        }
+        if (run.terminal) {
+            if (run.verdict === 'CANCELLED' && run.reason === reason)
+                return run;
+            throw new WorkflowRunContractError('INVALID_OPERATION', `Run ${runId} is already terminal in state ${run.state}`);
+        }
+        if (run.version !== input.expectedVersion) {
+            throw new RunVersionConflictError(input.expectedVersion, run.version);
+        }
+        const at = input.occurredAt ?? new Date().toISOString();
+        const cancelled = {
+            ...run,
+            state: 'CANCELLED',
+            terminal: true,
+            verdict: 'CANCELLED',
+            reason,
+            finished_at: at,
+            updated_at: at,
+            version: run.version + 1,
+        };
+        const committed = await store.commitTransition(cancelled, cancelEvent(run, input, reason, at), run.version);
+        const canonical = projectCanonicalRunReport(committed, await store.readEvents(runId));
+        await store.writeReportsAtomically(runId, {
+            json: renderCanonicalRunReport(canonical, 'json'),
+            md: renderCanonicalRunReport(canonical, 'markdown'),
+            html: renderCanonicalRunReport(canonical, 'html'),
+            csv: renderCanonicalRunReport(canonical, 'csv'),
+        });
+        return committed;
+    });
+}
+//# sourceMappingURL=workflow-v1-cancel.js.map

package/dist/runtime/workflow-v1-cancel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-v1-cancel.js","sourceRoot":"","sources":["../../src/runtime/workflow-v1-cancel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAGL,yBAAyB,EAEzB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAiB,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AActE,SAAS,cAAc,CAAC,MAA0B;IAChD,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,wBAAwB,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,wBAAwB,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,GAAe,EAAE,KAA6B,EAAE,MAAc,EAAE,EAAU;IAC7F,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,UAAU,EAAE;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,OAAO;QACrB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,EAAE;QACf,UAAU,EAAE,GAAG,CAAC,KAAK;QACrB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;KACzD,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAe,EACf,KAAa,EACb,KAA6B;IAE7B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,KAAK,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,IAAI,wBAAwB,CAChC,mBAAmB,EACnB,OAAO,KAAK,eAAe,GAAG,CAAC,aAAa,SAAS,KAAK,CAAC,YAAY,EAAE,CAC1E,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,oBAAoB;YAC1B,CAAC,wBAAwB,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,CAAC,qBAAqB,CAAC,EAChF,CAAC;YACD,MAAM,IAAI,wBAAwB,CAChC,iBAAiB,EACjB,gBAAgB,KAAK,4CAA4C,GAAG,CAAC,qBAAqB,UAAU,KAAK,CAAC,oBAAoB,gBAAgB,CAC/I,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,IAAI,GAAG,CAAC,OAAO,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,GAAG,CAAC;YACrE,MAAM,IAAI,wBAAwB,CAChC,mBAAmB,EACnB,OAAO,KAAK,iCAAiC,GAAG,CAAC,KAAK,EAAE,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,SAAS,GAAe;YAC5B,GAAG,GAAG;YACN,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,WAAW;YACpB,MAAM;YACN,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC;SACzB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAC5C,SAAS,EACT,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,EACnC,GAAG,CAAC,OAAO,CACZ,CAAC;QACF,MAAM,SAAS,GAAG,yBAAyB,CAAC,SAAS,EAAE,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACtF,MAAM,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE;YACxC,IAAI,EAAE,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC;YACjD,EAAE,EAAE,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC;YACnD,IAAI,EAAE,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC;YACjD,GAAG,EAAE,wBAAwB,CAAC,SAAS,EAAE,KAAK,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/workflow-v2-context.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Run context of compiled workflow runs: the run store a v2 definition writes to, the compiled
+ * context a start, dispatch, record or finalize needs, and the definition's open runs. Every
+ * adapter — MCP server, CLI, walkthrough panel — builds its context here, so the store layout
+ * and the host-profile rule exist once.
+ * @see STORY-449 TASK-909
+ */
+import type { GetItemResult } from '../core/get.js';
+import { RunStore } from './run-store.js';
+import type { WorkflowV2RunContext } from './workflow-v2-run.js';
+/** Root of every run store in a project: `.devsteps/runs`. */
+export declare function workflowRunsRoot(devstepsDir: string): string;
+/** The definition's `process_type`, which names its run directory; refused unless a safe name. */
+export declare function workflowV2ProcessType(rawDefinition: unknown): string;
+/** The run store a v2 definition writes to: `.devsteps/runs/<process_type>/`. */
+export declare function workflowV2Store(devstepsDir: string, rawDefinition: unknown): RunStore;
+/**
+ * Compile the item's v2 definition for a host profile into the context of a run. The project's
+ * own host profiles from `.devsteps/config.json` take part in the compile.
+ */
+export declare function compileWorkflowV2Context(devstepsDir: string, item: GetItemResult, hostProfile: string | undefined): Promise<WorkflowV2RunContext>;
+/** IDs of the definition's runs that have not reached a terminal state, newest first. */
+export declare function openWorkflowV2RunIds(devstepsDir: string, definitionId: string): Promise<string[]>;
+//# sourceMappingURL=workflow-v2-context.d.ts.map

package/dist/runtime/workflow-v2-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-v2-context.d.ts","sourceRoot":"","sources":["../../src/runtime/workflow-v2-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAKpD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGjE,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,OAAO,GAAG,MAAM,CASpE;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,GAAG,QAAQ,CAKrF;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AAED,yFAAyF;AACzF,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB"}

package/dist/runtime/workflow-v2-context.js

@@ -0,0 +1,62 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Run context of compiled workflow runs: the run store a v2 definition writes to, the compiled
+ * context a start, dispatch, record or finalize needs, and the definition's open runs. Every
+ * adapter — MCP server, CLI, walkthrough panel — builds its context here, so the store layout
+ * and the host-profile rule exist once.
+ * @see STORY-449 TASK-909
+ */
+import { join } from 'node:path';
+import { compileWorkflowDefinitionV2 } from '../core/workflow-compiler.js';
+import { readProjectHostProfiles } from '../core/workflow-host-profiles.js';
+import { loadWorkflowV2Item } from '../core/workflow-v2-loader.js';
+import { readRunsByDefinition } from './run-catalog.js';
+import { RunStore } from './run-store.js';
+import { WorkflowRunV2Error } from './workflow-v2-types.js';
+/** Root of every run store in a project: `.devsteps/runs`. */
+export function workflowRunsRoot(devstepsDir) {
+    return join(devstepsDir, 'runs');
+}
+/** The definition's `process_type`, which names its run directory; refused unless a safe name. */
+export function workflowV2ProcessType(rawDefinition) {
+    const processType = rawDefinition?.process_type;
+    if (typeof processType !== 'string' || !/^[A-Za-z0-9_-]+$/.test(processType)) {
+        throw new WorkflowRunV2Error('AUTHORING_INVALID', 'process_type must be a non-empty name of letters, digits, "_" or "-"');
+    }
+    return processType;
+}
+/** The run store a v2 definition writes to: `.devsteps/runs/<process_type>/`. */
+export function workflowV2Store(devstepsDir, rawDefinition) {
+    return new RunStore({
+        rootPath: workflowRunsRoot(devstepsDir),
+        processType: workflowV2ProcessType(rawDefinition),
+    });
+}
+/**
+ * Compile the item's v2 definition for a host profile into the context of a run. The project's
+ * own host profiles from `.devsteps/config.json` take part in the compile.
+ */
+export async function compileWorkflowV2Context(devstepsDir, item, hostProfile) {
+    const loaded = loadWorkflowV2Item(item);
+    if (!hostProfile) {
+        throw new WorkflowRunV2Error('INPUT_INVALID', `${loaded.definitionId} is a v2 definition; pass host_profile (for example "claude-code" or "vscode-copilot")`);
+    }
+    const manifest = compileWorkflowDefinitionV2(loaded.rawDefinition, {
+        hostProfile,
+        projectHostProfiles: await readProjectHostProfiles(devstepsDir),
+    });
+    return {
+        definitionId: loaded.definitionId,
+        definitionRevision: loaded.pinnedRevision ?? manifest.definition_digest,
+        manifest,
+        store: workflowV2Store(devstepsDir, loaded.rawDefinition),
+    };
+}
+/** IDs of the definition's runs that have not reached a terminal state, newest first. */
+export async function openWorkflowV2RunIds(devstepsDir, definitionId) {
+    const evidence = await readRunsByDefinition(workflowRunsRoot(devstepsDir), new Set([definitionId]));
+    return evidence.runs.filter((record) => !record.run.terminal).map((record) => record.run.run_id);
+}
+//# sourceMappingURL=workflow-v2-context.js.map

package/dist/runtime/workflow-v2-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-v2-context.js","sourceRoot":"","sources":["../../src/runtime/workflow-v2-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,aAAsB;IAC1D,MAAM,WAAW,GAAI,aAAmD,EAAE,YAAY,CAAC;IACvF,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,kBAAkB,CAC1B,mBAAmB,EACnB,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,aAAsB;IACzE,OAAO,IAAI,QAAQ,CAAC;QAClB,QAAQ,EAAE,gBAAgB,CAAC,WAAW,CAAC;QACvC,WAAW,EAAE,qBAAqB,CAAC,aAAa,CAAC;KAClD,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAAmB,EACnB,IAAmB,EACnB,WAA+B;IAE/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,kBAAkB,CAC1B,eAAe,EACf,GAAG,MAAM,CAAC,YAAY,wFAAwF,CAC/G,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,aAAa,EAAE;QACjE,WAAW;QACX,mBAAmB,EAAE,MAAM,uBAAuB,CAAC,WAAW,CAAC;KAChE,CAAC,CAAC;IACH,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,kBAAkB,EAAE,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,iBAAiB;QACvE,QAAQ;QACR,KAAK,EAAE,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CACzC,gBAAgB,CAAC,WAAW,CAAC,EAC7B,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CACxB,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACnG,CAAC"}

package/dist/runtime/workflow-v2-continuation.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Truthful continuation of a v2 snapshot without advancing it. Runtime decisions still need
+ * workflow_dispatch_get to persist their evidence before any later step can be executed.
+ */
+import type { ProcessRun } from './index.js';
+import { type WorkflowV2DispatchResult, type WorkflowV2RunContext } from './workflow-v2-run.js';
+export type WorkflowV2Continuation = (Omit<WorkflowV2DispatchResult, 'run' | 'runtime_decisions'> & {
+    continuation: Readonly<{
+        status: 'ready';
+    }>;
+}) | Readonly<{
+    continuation: Readonly<{
+        status: 'needs-dispatch';
+        tool: 'workflow_dispatch_get';
+    }>;
+    dispatch: null;
+}>;
+/** Compilation and dispatch failures are left for the adapter to mark unavailable. */
+export declare function projectWorkflowV2Continuation(context: WorkflowV2RunContext | undefined, run: ProcessRun): WorkflowV2Continuation;
+//# sourceMappingURL=workflow-v2-continuation.d.ts.map

package/dist/runtime/workflow-v2-continuation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-v2-continuation.d.ts","sourceRoot":"","sources":["../../src/runtime/workflow-v2-continuation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAGL,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAI9B,MAAM,MAAM,sBAAsB,GAC9B,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,GAAG,mBAAmB,CAAC,GAAG;IAC7D,YAAY,EAAE,QAAQ,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7C,CAAC,GACF,QAAQ,CAAC;IACP,YAAY,EAAE,QAAQ,CAAC;QAAE,MAAM,EAAE,gBAAgB,CAAC;QAAC,IAAI,EAAE,uBAAuB,CAAA;KAAE,CAAC,CAAC;IACpF,QAAQ,EAAE,IAAI,CAAC;CAChB,CAAC,CAAC;AAEP,sFAAsF;AACtF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,oBAAoB,GAAG,SAAS,EACzC,GAAG,EAAE,UAAU,GACd,sBAAsB,CAyBxB"}

package/dist/runtime/workflow-v2-continuation.js

@@ -0,0 +1,36 @@
+/**
+ * Copyright © 2026 Thomas Hertel (the@devsteps.dev)
+ * Licensed under the Apache License, Version 2.0
+ *
+ * Truthful continuation of a v2 snapshot without advancing it. Runtime decisions still need
+ * workflow_dispatch_get to persist their evidence before any later step can be executed.
+ */
+import { computeRunDispatch } from './workflow-v2-dispatch.js';
+import { assertCurrentManifest, describeDispatchState, } from './workflow-v2-run.js';
+import { runtimeCompletionForStep } from './workflow-v2-runtime-steps.js';
+import { WorkflowRunV2Error } from './workflow-v2-types.js';
+/** Compilation and dispatch failures are left for the adapter to mark unavailable. */
+export function projectWorkflowV2Continuation(context, run) {
+    if (run.terminal) {
+        return {
+            continuation: { status: 'ready' },
+            next_action: 'none',
+            dispatch: null,
+            verdict: run.verdict ?? null,
+        };
+    }
+    if (!context) {
+        throw new WorkflowRunV2Error('INPUT_INVALID', 'An open run continuation needs compiled context');
+    }
+    assertCurrentManifest(context, run);
+    const state = computeRunDispatch(context.manifest, run);
+    if (state.status === 'dispatch' && runtimeCompletionForStep(context.manifest, run, state.step)) {
+        return {
+            continuation: { status: 'needs-dispatch', tool: 'workflow_dispatch_get' },
+            dispatch: null,
+        };
+    }
+    const { run: _run, ...next } = describeDispatchState(run, state);
+    return { continuation: { status: 'ready' }, ...next };
+}
+//# sourceMappingURL=workflow-v2-continuation.js.map