@sema-ai/core 1.275.1

package/dist/orchestration/run-workflow-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-workflow-tool.js","sourceRoot":"","sources":["../../src/orchestration/run-workflow-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAS9C,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAA2B,MAAM,0BAA0B,CAAC;AAE5F,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gCAAgC,EAAE,MAAM,oBAAoB,CAAC;AAE5G,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAqF,MAAM,4BAA4B,CAAC;AACtK,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAA8B,MAAM,8BAA8B,CAAC;AAExG;;kGAEkG;AAClG,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AA4EjD;mGACmG;AACnG,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,MAAM,CAAC,GAAG,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,QAAQ,GAAG;IACf,cAAc,EAAE,OAAO;IACvB,SAAS,EAAE,EAAE;IACb,cAAc,EAAE,OAAO;IACvB,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,OAAO;IACvB,WAAW,EAAE,MAAM;CACX,CAAC;AAEX,iGAAiG;AACjG,iFAAiF;AACjF,gGAAgG;AAChG;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAwB,EAAE,GAAwC;IAC3F,+FAA+F;IAC/F,iGAAiG;IACjG,MAAM,SAAS,GAAG,IAAI,EAAE,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;IACrH,OAAO,CACL,WAAW,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,OAAO,aAAa,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,OAAO;QAC9G,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,4BAA4B,GAAG,CAAC,EAAE,IAAI,CACjF,CAAC;AACJ,CAAC;AACD;iGACiG;AACjG,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,uBAAuB;IACvB,kBAAkB;IAClB,4BAA4B;IAC5B,uBAAuB;IACvB,qBAAqB;IACrB,2BAA2B;IAC3B,0BAA0B;CAC3B,CAAC,CAAC;AACH;;;;wBAIwB;AACxB,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,CAAC,GAAG,GAAmD,CAAC;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,IAAI,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,oBAAoB,IAAI,MAAM,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAA+C;IACnF,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA4C;IACrF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,OAAO,CACL,gIAAgI;QAChI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CAAC;AACJ,CAAC;AAED;;;;;;6CAM6C;AAC7C,KAAK,UAAU,4BAA4B,CAAC,KAAsC,EAAE,eAAwB;IAC1G,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IACvD,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,uBAAuB,EAAE,EAAE,CAAC;YAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,GAAG,KAAK,CAAC,CAAC,+EAA+E;gBACnG,CAAC;YACH,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,wEAAwE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7I,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wFAAwF;IAC1F,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAgED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,CAAsB;IAChE,IAAI,CAAC,CAAC,YAAY,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;IAC3B,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc,CAAC;IACrE,MAAM,SAAS,GAAsB;QACnC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC,kBAAkB;QACzE,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;IACF,MAAM,UAAU,GAAuB,EAAE,QAAQ,EAAE,CAAC,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7G,2GAA2G;IAC3G,wGAAwG;IACxG,MAAM,eAAe,GAAG,CAAC,CAAC,gBAAgB,KAAK,KAAK,CAAC;IACrD,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,MAAM,4BAA4B,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IAC5H,iGAAiG;IACjG,uGAAuG;IACvG,mGAAmG;IACnG,0FAA0F;IAC1F,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IAEhG,MAAM,eAAe,GAAG,CAAC,OAAe,EAAuB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAEpH,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,sBAAsB;QAC5B,sFAAsF;QACtF,OAAO,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;QACxC,WAAW,EACT,0GAA0G;YAC1G,8GAA8G;YAC9G,oGAAoG;YACpG,+CAA+C;YAC/C,iGAAiG;YACjG,gGAAgG;YAChG,2FAA2F;YAC3F,mGAAmG;YACnG,wGAAwG;YACxG,wGAAwG;YACxG,sGAAsG;YACtG,wGAAwG;YACxG,8FAA8F;YAC9F,gFAAgF;YAChF,6GAA6G;YAC7G,4FAA4F;YAC5F,wFAAwF;YACxF,6GAA6G;YAC7G,yGAAyG;YACzG,0GAA0G;YAC1G,iDAAiD;YACjD,0GAA0G;YAC1G,wFAAwF;YACxF,wGAAwG;YACxG,wGAAwG;YACxG,yGAAyG;YACzG,sFAAsF;YACtF,+GAA+G;YAC/G,2GAA2G;YAC3G,2GAA2G;YAC3G,gCAAgC;YAChC,qHAAqH;YACrH,qGAAqG;YACrG,uCAAuC;YACvC,0GAA0G;YAC1G,2GAA2G;YAC3G,kDAAkD;YAClD,iGAAiG;YACjG,6GAA6G;YAC7G,2GAA2G;YAC3G,4FAA4F;YAC5F,6FAA6F;YAC7F,qFAAqF;YACrF,IAAI;YACJ,uDAAuD;YACvD,yGAAyG;YACzG,2EAA2E;YAC3E,wGAAwG;YACxG,oGAAoG;YACpG,wGAAwG;YACxG,8FAA8F;YAC9F,uGAAuG;YACvG,mGAAmG;YACnG,oDAAoD;YACpD,iGAAiG;YACjG,kGAAkG;YAClG,yGAAyG;YACzG,0GAA0G;YAC1G,uFAAuF;YACvF,uGAAuG;YACvG,0GAA0G;YAC1G,sEAAsE;YACtE,yGAAyG;YACzG,kEAAkE;YAClE,sGAAsG;YACtG,yGAAyG;YACzG,IAAI;YACJ,8GAA8G;YAC9G,2GAA2G;YAC3G,mGAAmG;YACnG,0GAA0G;YAC1G,2BAA2B;YAC3B,uGAAuG;YACvG,wFAAwF;YACxF,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,iGAAiG;YACjG,oBAAoB;QACtB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,4FAA4F;YAC5F,4EAA4E;YAC5E,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EACT,sGAAsG;oBACtG,6GAA6G;aAChH,CAAC,CACH;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,CACjB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EACT,oGAAoG;oBACpG,oGAAoG;oBACpG,sDAAsD;aACzD,CAAC,CACH;YACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CACvB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EACT,qGAAqG;oBACrG,0GAA0G;oBAC1G,qGAAqG;aACxG,CAAC,CACH;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EACT,oGAAoG;oBACpG,uGAAuG;oBACvG,6DAA6D;aAChE,CAAC,CACH;SACF,CAAC;QACF,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,SAAS,GAAI,OAAgC,CAAC,MAAM,CAAC;YAC3D,MAAM,OAAO,GAAI,OAA8B,CAAC,IAAI,CAAC;YACrD,MAAM,aAAa,GAAI,OAAoC,CAAC,UAAU,CAAC;YACvE,MAAM,UAAU,GAAI,OAA8B,CAAC,IAAI,CAAC;YACxD,MAAM,SAAS,GAAI,OAAyC,CAAC,eAAe,CAAC;YAC7E,MAAM,eAAe,GAAG,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,YAAY,CAAC;YAClD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC;YAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC;YAC3C,qGAAqG;YACrG,mGAAmG;YACnG,2FAA2F;YAC3F,IAAI,MAAc,CAAC;YACnB,0GAA0G;YAC1G,IAAI,qBAA8B,CAAC;YACnC,qGAAqG;YACrG,yGAAyG;YACzG,oGAAoG;YACpG,wDAAwD;YACxD,IAAI,sBAA0C,CAAC;YAC/C,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,IAAI,CAAC,CAAC,CAAC,WAAW;oBAAE,OAAO,eAAe,CAAC,8FAA8F,CAAC,CAAC;gBAC3I,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACnD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,eAAe,CAAC,iDAAiD,eAAe,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7J,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjE,oFAAoF;gBACpF,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;iBAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,IAAI,CAAC,eAAe,EAAE,CAAC;oBACpD,OAAO,eAAe,CAAC,wIAAwI,CAAC,CAAC;gBACnK,CAAC;gBACD,IAAI,QAAsD,CAAC;gBAC3D,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC;oBAC/B,IAAI,CAAC;wBACH,QAAQ,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;oBACtD,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,eAAe,CAAC,oCAAoC,eAAe,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChJ,CAAC;gBACH,CAAC;gBACD,qGAAqG;gBACrG,qGAAqG;gBACrG,IAAI,QAAQ,KAAK,SAAS,IAAI,eAAe,EAAE,CAAC;oBAC9C,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,gDAAgD;gBAC9F,CAAC;gBACD,IAAI,QAAQ,KAAK,SAAS;oBAAE,OAAO,eAAe,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxG,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,aAAa,IAAI,QAAQ;oBAAE,qBAAqB,GAAG,QAAQ,CAAC,WAAW,CAAC;gBAC5G,oGAAoG;gBACpG,sGAAsG;gBACtG,+DAA+D;gBAC/D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClH,sBAAsB,GAAG,QAAQ,CAAC,YAAY,CAAC;gBACjD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,eAAe,CAAC,0CAA0C,CAAC,CAAC;YACrE,CAAC;YACD,0GAA0G;YAC1G,wGAAwG;YACxG,sGAAsG;YACtG,+FAA+F;YAC/F,6FAA6F;YAC7F,8FAA8F;YAC9F,wGAAwG;YACxG,kGAAkG;YAClG,iGAAiG;YACjG,gGAAgG;YAChG,uGAAuG;YACvG,wEAAwE;YACxE,MAAM,aAAa,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,CAAC,EAAE,qBAAqB,CAAC,CAAC;YAC9I,4CAA4C;YAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBACnC,OAAO,eAAe,CAAC,qBAAqB,MAAM,CAAC,MAAM,gBAAgB,cAAc,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,0GAA0G;YAC1G,2FAA2F;YAC3F,IAAI,IAA0C,CAAC;YAC/C,IAAI,CAAC;gBACH,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3E,CAAC;YACD,oGAAoG;YACpG,oGAAoG;YACpG,iGAAiG;YACjG,iGAAiG;YACjG,4EAA4E;YAC5E,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,QAAQ,CAAC,kFAAkF,IAAI,MAAM,CAAC,CAAC;gBAC3G,qGAAqG;gBACrG,mGAAmG;gBACnG,oGAAoG;gBACpG,6CAA6C;gBAC7C,IAAI,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,OAAO,eAAe,CACpB,+GAA+G;wBAC7G,wEAAwE,CAC3E,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnH,CAAC;YACD,+FAA+F;YAC/F,MAAM,QAAQ,GAAG,CAAC,KAAiD,EAAoB,EAAE;gBACvF,6FAA6F;gBAC7F,8FAA8F;gBAC9F,wFAAwF;gBACxF,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,4DAA4D;gBACxK,+FAA+F;gBAC/F,kGAAkG;gBAClG,qGAAqG;gBACrG,OAAO,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACzI,CAAC,CAAC;YACF,IAAI,MAAM,CAAC;YACX,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,GAAG,aAAa,CACpB,CAAC,CAAC,MAAM,EACR,QAAQ,EACR;oBACE,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,2EAA2E;oBAC3E,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5E,kGAAkG;oBAClG,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5E,iFAAiF;oBACjF,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,4FAA4F;oBAC5F,8FAA8F;oBAC9F,4CAA4C;oBAC5C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzD,iGAAiG;oBACjG,uGAAuG;oBACvG,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,GAAG,CAAC,CAAC,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,qCAAqC;oBACxI,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,mGAAmG;oBACnG,sGAAsG;oBACtG,iDAAiD;oBACjD,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC5B,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;oBAC9C,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;oBAC7D,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;oBAC7D,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;oBACpD,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE,EACD,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CACnC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iGAAiG;gBACjG,OAAO,eAAe,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,yGAAyG;YACzG,2GAA2G;YAC3G,IAAI,mBAAuC,CAAC;YAC5C,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,mBAAmB,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACnE,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,YAAY,CAAC;gBAC9D,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC;oBAC9B,KAAK;oBACL,MAAM;oBACN,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,WAAW,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;oBAC1C,SAAS,EAAE,GAAG,CAAC,UAAU;oBACzB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,8FAA8F;oBAC9F,8FAA8F;oBAC9F,2DAA2D;oBAC3D,gBAAgB,EAAE,GAAG,EAAE;wBACrB,KAAK,OAAO,CAAC,OAAO,EAAE;6BACnB,IAAI,CAAC,GAAG,EAAE,CACT,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;4BACtB,KAAK;4BACL,GAAG,CAAC,CAAC,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACjG,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACvD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAClD,CAAC,CACH;6BACA,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACrB,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,4FAA4F;YAC5F,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACf,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,YAAqC,EAAQ,EAAE;oBAC3D,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC;wBACH,CAAC,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,CAAC;oBACrC,CAAC;oBAAC,MAAM,CAAC;wBACP,iFAAiF;oBACnF,CAAC;oBACD,qGAAqG;oBACrG,+FAA+F;oBAC/F,KAAK,OAAO,CAAC,OAAO,EAAE;yBACnB,IAAI,CAAC,GAAG,EAAE,CACT,CAAC,CAAC,QAAS,CAAC,MAAM,CAAC;wBACjB,KAAK;wBACL,OAAO,EAAE,YAAY,CAAC,OAAO;wBAC7B,SAAS,EAAE,UAAU;wBACrB,GAAG,CAAC,YAAY,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACtF,YAAY;wBACZ,GAAG,CAAC,CAAC,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjG,SAAS;wBACT,MAAM,EAAE,YAAY,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;wBACpE,OAAO,EAAE,YAAY,CAAC,OAAO;wBAC7B,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7E,GAAG,CAAC,YAAY,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3E,CAAC,CACH;yBACA,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACrB,CAAC,CAAC;gBACF,MAAM,CAAC,IAAI;qBACR,IAAI,CACH,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,CAAC;oBACH,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,UAAU;oBACrB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;oBAC9C,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;oBAChD,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK;iBACrB,CAAC,EACJ,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,CAAC;oBACH,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,UAAU;oBACrB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;iBAC7B,CAAC,CACL;oBACD,uGAAuG;qBACtG,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,YAAqC,EAAQ,EAAE;oBAC3D,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC;wBACH,CAAC,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,CAAC;oBACrC,CAAC;oBAAC,MAAM,CAAC;wBACP,mCAAmC;oBACrC,CAAC;gBACH,CAAC,CAAC;gBACF,MAAM,CAAC,IAAI;qBACR,IAAI,CACH,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,CAAC;oBACH,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,UAAU;oBACrB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;oBAC9C,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;oBAChD,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK;iBACrB,CAAC,EACJ,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,CAAC;oBACH,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,UAAU;oBACrB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;iBAC7B,CAAC,CACL;qBACA,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrB,CAAC;YACD,wGAAwG;YACxG,sGAAsG;YACtG,8FAA8F;YAC9F,4CAA4C;YAC5C,wGAAwG;YACxG,6GAA6G;YAC7G,kGAAkG;YAClG,gGAAgG;YAChG,OAAO;gBACL,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE;gBAC/E,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;oBACtB,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,SAAS;oBACjB,0GAA0G;oBAC1G,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjF,yEAAyE;oBACzE,4FAA4F;oBAC5F,iGAAiG;oBACjG,4FAA4F;oBAC5F,kGAAkG;oBAClG,IAAI,EAAE,CAAC,GAAW,EAAE;wBAClB,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,0BAA0B,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;wBACpF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,QAAQ,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpF,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;4BACf,OAAO,0LAA0L,OAAO,EAAE,CAAC;wBAC7M,CAAC;wBACD,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;4BACvB,OAAO,uJAAuJ,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,6BAA6B,IAAI,OAAO,EAAE,CAAC;wBAC3O,CAAC;wBACD,OAAO,QAAQ;4BACb,CAAC,CAAC,8EAA8E,QAAQ,IAAI,OAAO,EAAE;4BACrG,CAAC,CAAC,yGAAyG,CAAC;oBAChH,CAAC,CAAC,EAAE;iBACL,CAAC;aACH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,2GAA2G;AAC3G,0GAA0G;AAC1G,8GAA8G;AAC9G,qGAAqG;AACrG,2GAA2G;AAC3G,cAAc"}

package/dist/orchestration/workflow-governance.d.ts

@@ -0,0 +1,70 @@
+/**
+ * design/98 §2.5 / §E.2 (S8b, security core) — the DEFAULT-DENY governance for a sub-agent an LLM-authored
+ * workflow script spawns. The child spec is BUILT (complete-by-construction) from the deployment's trusted
+ * {@link WorkflowGovernanceBaseline} + a strict WHITELIST of safe work-fields the script may set — NEVER by
+ * stripping a denylist off the untrusted spec (codex BLOCKER2: a missed control-plane field would leak).
+ *
+ * The script's spec is UNTRUSTED. Only {@link WHITELIST_KEYS} are ever read from it; every other field
+ * (toolPolicy / onAsk / hooks / principal / tools / mcp / skills / lspManager / checkpointStore /
+ * getApiKeyAndHeaders / promptProvider / sessionId / signal / …) is structurally never copied. The model is
+ * chosen by NAME ONLY (resolved against an allowlist to a deploy-configured `Model` — the script never sees a
+ * `Model` object, which carries `baseUrl`/`headers` = an exfil surface, codex v3 BLOCKER). Resource limits
+ * are CLAMPED to the baseline + workflow ceilings (`tightenTaskSpec` only covers the safety knobs, not
+ * cost/token caps — codex Q4).
+ */
+import type { Model } from "../internal/llm.js";
+import type { ImageInput, TaskSpec, ThinkingLevel, WorkflowGovernanceBaseline } from "../core/types.js";
+/** Thrown when an LLM-authored script picks a `modelName` not in the workflow model allowlist (or no
+ *  allowlist is configured). FAIL-CLOSED: a script can only ever name a model the deployment pre-approved. */
+export declare class WorkflowModelNotAllowedError extends Error {
+    readonly modelName: string;
+    readonly code = "workflow.model_not_allowed";
+    constructor(modelName: string, reason: string);
+}
+/**
+ * The SAFE fields an LLM-authored workflow script may set per sub-agent — the WORK, never the control plane.
+ * `model` is a NAME (string), NOT a `ModelRef`/`Model` object (codex v3 BLOCKER: a `Model` carries
+ * `baseUrl`/`headers`/`extraBody` = endpoint + auth-header injection). No `modelRole`/`roles` (a `roles.select`
+ * conditional selector is its own vector). The engine resolves `modelName` against the allowlist.
+ */
+export interface WorkflowAgentSpec {
+    objective: string;
+    modelName?: string;
+    thinking?: ThinkingLevel;
+    systemPrompt?: string;
+    images?: ImageInput[];
+    limits?: {
+        maxTurns?: number;
+        timeoutSec?: number;
+    };
+    maxCostUsd?: number;
+    maxTokens?: number;
+}
+/**
+ * The SINGLE source of truth for the whitelist (a test pins that it contains no control-plane key). `objective`
+ * + `modelName` are handled explicitly in {@link buildGovernedChildSpec}; the rest map 1:1 onto `TaskSpec`.
+ */
+export declare const WHITELIST_KEYS: readonly ["objective", "modelName", "thinking", "systemPrompt", "images", "limits", "maxCostUsd", "maxTokens"];
+/** Per-child workflow ceilings the engine forces onto every spawned agent (design/98 §D.6), independent of
+ *  what the script asks for. The child's effective limits = min(script, baseline, these). */
+export interface WorkflowChildCaps {
+    perAgentTimeoutSec?: number;
+    childMaxCostUsd?: number;
+    childMaxTokens?: number;
+    childMaxTurns?: number;
+}
+/** Resolve an LLM-supplied model NAME to a deploy-configured `Model`, FAIL-CLOSED against the allowlist.
+ *  Throws (never falls open to the whole catalog) when no allowlist is configured or the name is not on it. */
+export declare function resolveModelName(name: string, allowlist: string[] | undefined, models: Record<string, Model> | undefined): Model;
+/**
+ * Build a TRUSTED child `TaskSpec` for an LLM-authored sub-agent (design/98 §2.5). Complete-by-construction:
+ *   1. read ONLY the whitelist work-fields off the untrusted script spec (type-checked);
+ *   2. resolve `modelName` → a deploy `Model` against the allowlist (fail-closed);
+ *   3. clamp resource limits to the baseline + workflow ceilings;
+ *   4. `tightenTaskSpec(baseline.base, safe)` → the child spec (baseline governance FIRST, safe work-fields
+ *      overlay; safety fields can only equal-or-tighten — belt-and-suspenders over the whitelist).
+ * Every governance/control-plane field of the result comes from `baseline.base` (the deployment's trusted
+ * config), never from the script.
+ */
+export declare function buildGovernedChildSpec(scriptSpec: unknown, baseline: WorkflowGovernanceBaseline, models: Record<string, Model> | undefined, caps?: WorkflowChildCaps): TaskSpec;
+//# sourceMappingURL=workflow-governance.d.ts.map

package/dist/orchestration/workflow-governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-governance.d.ts","sourceRoot":"","sources":["../../src/orchestration/workflow-governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAIxG;8GAC8G;AAC9G,qBAAa,4BAA6B,SAAQ,KAAK;IAGnD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAF5B,QAAQ,CAAC,IAAI,gCAAgC;gBAElC,SAAS,EAAE,MAAM,EAC1B,MAAM,EAAE,MAAM;CAKjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CAEpB;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,gHASgC,CAAC;AAI5D;6FAC6F;AAC7F,MAAM,WAAW,iBAAiB;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;+GAC+G;AAC/G,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,EAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,GACxC,KAAK,CAeP;AA4FD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,OAAO,EACnB,QAAQ,EAAE,0BAA0B,EACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,EACzC,IAAI,CAAC,EAAE,iBAAiB,GACvB,QAAQ,CAWV"}

package/dist/orchestration/workflow-governance.js

@@ -0,0 +1,176 @@
+/**
+ * design/98 §2.5 / §E.2 (S8b, security core) — the DEFAULT-DENY governance for a sub-agent an LLM-authored
+ * workflow script spawns. The child spec is BUILT (complete-by-construction) from the deployment's trusted
+ * {@link WorkflowGovernanceBaseline} + a strict WHITELIST of safe work-fields the script may set — NEVER by
+ * stripping a denylist off the untrusted spec (codex BLOCKER2: a missed control-plane field would leak).
+ *
+ * The script's spec is UNTRUSTED. Only {@link WHITELIST_KEYS} are ever read from it; every other field
+ * (toolPolicy / onAsk / hooks / principal / tools / mcp / skills / lspManager / checkpointStore /
+ * getApiKeyAndHeaders / promptProvider / sessionId / signal / …) is structurally never copied. The model is
+ * chosen by NAME ONLY (resolved against an allowlist to a deploy-configured `Model` — the script never sees a
+ * `Model` object, which carries `baseUrl`/`headers` = an exfil surface, codex v3 BLOCKER). Resource limits
+ * are CLAMPED to the baseline + workflow ceilings (`tightenTaskSpec` only covers the safety knobs, not
+ * cost/token caps — codex Q4).
+ */
+import { tightenTaskSpec } from "../core/tighten-task-spec.js";
+import { WorkflowScriptError } from "./workflow-meta.js";
+/** Thrown when an LLM-authored script picks a `modelName` not in the workflow model allowlist (or no
+ *  allowlist is configured). FAIL-CLOSED: a script can only ever name a model the deployment pre-approved. */
+export class WorkflowModelNotAllowedError extends Error {
+    modelName;
+    code = "workflow.model_not_allowed";
+    constructor(modelName, reason) {
+        super(`workflow model "${modelName}" is not allowed: ${reason}`);
+        this.modelName = modelName;
+        this.name = "WorkflowModelNotAllowedError";
+    }
+}
+/**
+ * The SINGLE source of truth for the whitelist (a test pins that it contains no control-plane key). `objective`
+ * + `modelName` are handled explicitly in {@link buildGovernedChildSpec}; the rest map 1:1 onto `TaskSpec`.
+ */
+export const WHITELIST_KEYS = [
+    "objective",
+    "modelName",
+    "thinking",
+    "systemPrompt",
+    "images",
+    "limits",
+    "maxCostUsd",
+    "maxTokens",
+];
+const VALID_THINKING = new Set(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
+/** Resolve an LLM-supplied model NAME to a deploy-configured `Model`, FAIL-CLOSED against the allowlist.
+ *  Throws (never falls open to the whole catalog) when no allowlist is configured or the name is not on it. */
+export function resolveModelName(name, allowlist, models) {
+    if (!allowlist || allowlist.length === 0) {
+        throw new WorkflowModelNotAllowedError(name, "no workflowModelAllowlist is configured (fail-closed: an LLM-authored script cannot pick a model)");
+    }
+    if (!allowlist.includes(name)) {
+        throw new WorkflowModelNotAllowedError(name, `not in the workflow model allowlist [${allowlist.join(", ")}]`);
+    }
+    const model = models?.[name];
+    if (!model) {
+        throw new WorkflowModelNotAllowedError(name, "allowed by name but not present in RunnerDeps.models");
+    }
+    return model;
+}
+/** Smallest of the DEFINED values, or undefined when all are undefined. Used to FORCE a cap even when the
+ *  script omits the field (a baseline/workflow ceiling applies regardless), and to clamp a script value down. */
+function minDefined(...vals) {
+    const xs = vals.filter((v) => typeof v === "number" && Number.isFinite(v));
+    return xs.length ? Math.min(...xs) : undefined;
+}
+/**
+ * Read the whitelist work-fields off an UNTRUSTED script spec, type-checking each (a bad type throws a
+ * structured {@link WorkflowScriptError} the LLM can act on). Extra / control-plane keys are NEVER read —
+ * they cannot reach the child (complete-by-construction). Returns a clean `Partial<TaskSpec>` (model not yet
+ * resolved; `modelName` carried separately).
+ */
+function pickWhitelist(scriptSpec) {
+    if (typeof scriptSpec !== "object" || scriptSpec === null || Array.isArray(scriptSpec)) {
+        throw new WorkflowScriptError("agent(spec): spec must be an object with at least an `objective` string");
+    }
+    const s = scriptSpec;
+    if (typeof s.objective !== "string" || s.objective.length === 0) {
+        throw new WorkflowScriptError("agent(spec): `objective` is required and must be a non-empty string");
+    }
+    const safe = { objective: s.objective };
+    if (s.thinking !== undefined) {
+        if (typeof s.thinking !== "string" || !VALID_THINKING.has(s.thinking)) {
+            throw new WorkflowScriptError(`agent(spec): invalid \`thinking\` (must be one of ${[...VALID_THINKING].join(", ")})`);
+        }
+        safe.thinking = s.thinking;
+    }
+    if (s.systemPrompt !== undefined) {
+        if (typeof s.systemPrompt !== "string")
+            throw new WorkflowScriptError("agent(spec): `systemPrompt` must be a string");
+        safe.systemPrompt = s.systemPrompt;
+    }
+    if (s.images !== undefined) {
+        if (!Array.isArray(s.images))
+            throw new WorkflowScriptError("agent(spec): `images` must be an array");
+        // Shape is validated + SSRF-guarded downstream (the same allowImageUrl gate every task's images pass).
+        safe.images = s.images;
+    }
+    if (s.limits !== undefined) {
+        if (typeof s.limits !== "object" || s.limits === null || Array.isArray(s.limits)) {
+            throw new WorkflowScriptError("agent(spec): `limits` must be an object { maxTurns?, timeoutSec? }");
+        }
+        const l = s.limits;
+        const limits = {};
+        if (l.maxTurns !== undefined) {
+            if (typeof l.maxTurns !== "number" || !Number.isFinite(l.maxTurns))
+                throw new WorkflowScriptError("agent(spec): `limits.maxTurns` must be a number");
+            limits.maxTurns = l.maxTurns;
+        }
+        if (l.timeoutSec !== undefined) {
+            if (typeof l.timeoutSec !== "number" || !Number.isFinite(l.timeoutSec))
+                throw new WorkflowScriptError("agent(spec): `limits.timeoutSec` must be a number");
+            limits.timeoutSec = l.timeoutSec;
+        }
+        safe.limits = limits;
+    }
+    if (s.maxCostUsd !== undefined) {
+        if (typeof s.maxCostUsd !== "number" || !Number.isFinite(s.maxCostUsd))
+            throw new WorkflowScriptError("agent(spec): `maxCostUsd` must be a number");
+        safe.maxCostUsd = s.maxCostUsd;
+    }
+    if (s.maxTokens !== undefined) {
+        if (typeof s.maxTokens !== "number" || !Number.isFinite(s.maxTokens))
+            throw new WorkflowScriptError("agent(spec): `maxTokens` must be a number");
+        safe.maxTokens = s.maxTokens;
+    }
+    let modelName;
+    if (s.modelName !== undefined) {
+        if (typeof s.modelName !== "string")
+            throw new WorkflowScriptError("agent(spec): `modelName` must be a string (a model NAME, never a Model object)");
+        modelName = s.modelName;
+    }
+    return { safe, modelName };
+}
+/**
+ * CLAMP the child's resource limits to the MINIMUM of {script, baseline.base, workflow caps} — the script can
+ * only tighten, never raise (codex Q4: `tightenTaskSpec` covers the safety knobs but NOT cost/token/turn
+ * caps). A workflow cap (or baseline ceiling) is FORCED even when the script omits the field, so a child is
+ * always bounded. Mutates `safe` in place.
+ */
+function clampResourceLimits(safe, base, caps) {
+    const cost = minDefined(safe.maxCostUsd, base.maxCostUsd, caps?.childMaxCostUsd);
+    if (cost !== undefined)
+        safe.maxCostUsd = cost;
+    const tokens = minDefined(safe.maxTokens, base.maxTokens, caps?.childMaxTokens);
+    if (tokens !== undefined)
+        safe.maxTokens = tokens;
+    const timeoutSec = minDefined(safe.limits?.timeoutSec, base.limits?.timeoutSec, caps?.perAgentTimeoutSec);
+    const maxTurns = minDefined(safe.limits?.maxTurns, base.limits?.maxTurns, caps?.childMaxTurns);
+    if (timeoutSec !== undefined || maxTurns !== undefined) {
+        safe.limits = {
+            ...(maxTurns !== undefined ? { maxTurns } : {}),
+            ...(timeoutSec !== undefined ? { timeoutSec } : {}),
+        };
+    }
+}
+/**
+ * Build a TRUSTED child `TaskSpec` for an LLM-authored sub-agent (design/98 §2.5). Complete-by-construction:
+ *   1. read ONLY the whitelist work-fields off the untrusted script spec (type-checked);
+ *   2. resolve `modelName` → a deploy `Model` against the allowlist (fail-closed);
+ *   3. clamp resource limits to the baseline + workflow ceilings;
+ *   4. `tightenTaskSpec(baseline.base, safe)` → the child spec (baseline governance FIRST, safe work-fields
+ *      overlay; safety fields can only equal-or-tighten — belt-and-suspenders over the whitelist).
+ * Every governance/control-plane field of the result comes from `baseline.base` (the deployment's trusted
+ * config), never from the script.
+ */
+export function buildGovernedChildSpec(scriptSpec, baseline, models, caps) {
+    const { safe, modelName } = pickWhitelist(scriptSpec);
+    if (modelName !== undefined) {
+        safe.model = resolveModelName(modelName, baseline.workflowModelAllowlist, models);
+    }
+    clampResourceLimits(safe, baseline.base, caps);
+    // tightenTaskSpec(base, overrides) = { ...base, ...overrides } with safety re-derivation (deny-wins
+    // toolPolicy, no loosening of handsReadOnly/shellGate/onAsk/hooks). `base` is the deployment baseline; the
+    // overlay is whitelist work-fields only — so this both BUILDS the child (base provides all governance) and
+    // belts the whitelist (a future safety-bearing whitelist field could not loosen the base).
+    return tightenTaskSpec(baseline.base, safe);
+}
+//# sourceMappingURL=workflow-governance.js.map

package/dist/orchestration/workflow-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-governance.js","sourceRoot":"","sources":["../../src/orchestration/workflow-governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;8GAC8G;AAC9G,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAG1C;IAFF,IAAI,GAAG,4BAA4B,CAAC;IAC7C,YACW,SAAiB,EAC1B,MAAc;QAEd,KAAK,CAAC,mBAAmB,SAAS,qBAAqB,MAAM,EAAE,CAAC,CAAC;QAHxD,cAAS,GAAT,SAAS,CAAQ;QAI1B,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAoBD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,WAAW;IACX,WAAW;IACX,UAAU;IACV,cAAc;IACd,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,WAAW;CAC8C,CAAC;AAE5D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAW3G;+GAC+G;AAC/G,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,SAA+B,EAC/B,MAAyC;IAEzC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,4BAA4B,CACpC,IAAI,EACJ,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,4BAA4B,CAAC,IAAI,EAAE,wCAAwC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,4BAA4B,CAAC,IAAI,EAAE,sDAAsD,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;iHACiH;AACjH,SAAS,UAAU,CAAC,GAAG,IAA+B;IACpD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,UAAmB;IACxC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,mBAAmB,CAAC,yEAAyE,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,mBAAmB,CAAC,qEAAqE,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,IAAI,GAAsB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IAC3D,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAyB,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,mBAAmB,CAAC,qDAAqD,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxH,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAyB,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,8CAA8C,CAAC,CAAC;QACtH,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,wCAAwC,CAAC,CAAC;QACtG,uGAAuG;QACvG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAsB,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,mBAAmB,CAAC,oEAAoE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAiC,CAAC;QAC9C,MAAM,MAAM,GAA+C,EAAE,CAAC;QAC9D,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,mBAAmB,CAAC,iDAAiD,CAAC,CAAC;YACrJ,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,mBAAmB,CAAC,mDAAmD,CAAC,CAAC;YAC3J,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,4CAA4C,CAAC,CAAC;QACpJ,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,2CAA2C,CAAC,CAAC;QACjJ,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC/B,CAAC;IACD,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,gFAAgF,CAAC,CAAC;QACrJ,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,IAAuB,EAAE,IAAuB,EAAE,IAAwB;IACrG,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IACjF,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAChF,IAAI,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;IAClD,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC1G,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IAC/F,IAAI,UAAU,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAmB,EACnB,QAAoC,EACpC,MAAyC,EACzC,IAAwB;IAExB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IACpF,CAAC;IACD,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,oGAAoG;IACpG,2GAA2G;IAC3G,2GAA2G;IAC3G,2FAA2F;IAC3F,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAgB,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC"}

package/dist/orchestration/workflow-meta.d.ts

@@ -0,0 +1,41 @@
+/**
+ * design/98 §2.4 (S8b) — STATIC, NON-EVAL extraction of a workflow script's `export const meta = {...}`.
+ *
+ * 🔴 The meta block is parsed as PURE DATA by a small recursive-descent reader that NEVER executes the
+ * script (no `vm`, no `eval`, no `Function`) — evaluating untrusted source to read its metadata would itself
+ * be the injection surface. The reader accepts ONLY literal values (string / number / boolean / null / array
+ * / plain object) and REJECTS anything that could carry behavior or pollute a prototype:
+ *   - identifier values (a variable reference), function calls, template literals, spreads, computed keys,
+ *     method shorthand, getters/setters;
+ *   - the dangerous keys `__proto__` / `constructor` / `prototype` (prototype-pollution guard).
+ * Any violation throws {@link WorkflowScriptError} so the `run_workflow` tool can hand the LLM a structured
+ * "fix your meta" error BEFORE the (hard) sandbox ever runs the body.
+ */
+import type { WorkflowMeta } from "./workflow-script-runner.js";
+/** Thrown when an LLM-authored workflow script is malformed at the static layer (bad meta, oversized source,
+ *  a forbidden construct). Carries a `code` so the tool can return a structured error the model can act on. */
+export declare class WorkflowScriptError extends Error {
+    readonly code = "workflow.script_error";
+    constructor(message: string);
+}
+/**
+ * Statically extract + validate a workflow script's `export const meta`. Returns a typed {@link WorkflowMeta}
+ * (name + description required, both strings; `phases`/`whenToUse` optional). NEVER executes the script.
+ * @throws {WorkflowScriptError} on a missing/malformed/non-literal meta.
+ */
+export declare function parseWorkflowMeta(source: string): WorkflowMeta;
+/** Replace every string literal (incl. template text, recursing into `${…}` code) and comment with spaces. */
+export declare function stripStringsAndComments(src: string): string;
+/** CC `wxl` semantics: a `Date.now` / `Math.random` member access, or an ARGLESS `new Date()`, anywhere in the
+ *  body's CODE (strings/comments stripped) — each silently busts the resume prefix cache. */
+export declare function workflowScriptReadsClockOrRandom(body: string): boolean;
+/**
+ * Parse the meta AND return the script BODY with the `export const meta = {...}` declaration removed — for a
+ * runner that compiles the remaining body as an async function (the meta is DATA, parsed statically; only the
+ * body is ever executed). An optional trailing `;` after the declaration is trimmed.
+ */
+export declare function splitWorkflowMeta(source: string): {
+    meta: WorkflowMeta;
+    body: string;
+};
+//# sourceMappingURL=workflow-meta.d.ts.map

package/dist/orchestration/workflow-meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-meta.d.ts","sourceRoot":"","sources":["../../src/orchestration/workflow-meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE;+GAC+G;AAC/G,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,2BAA2B;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AA6QD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CA4C9D;AAQD,8GAA8G;AAC9G,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAyD3D;AAED;6FAC6F;AAC7F,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGtE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAMtF"}