@sensigo/realm-cli 0.1.0

package/dist/commands/resume.js

@@ -0,0 +1,63 @@
+// resume command — removes a step from failed_steps so it can be re-executed.
+import { Command } from 'commander';
+import { WorkflowError } from '@sensigo/realm';
+import { RESUMABLE_PHASES } from '@sensigo/realm';
+/**
+ * Removes `stepName` from `failed_steps` so the DAG engine can re-evaluate its
+ * eligibility on the next execute-step call.
+ *
+ * @param runId         The run to resume.
+ * @param stepName      The failed step to re-enable.
+ * @param runStore      Store holding run records.
+ * @param workflowStore Registrar for workflow definitions.
+ */
+export async function resumeRun(runId, stepName, runStore, workflowStore) {
+    const run = await runStore.get(runId);
+    if (!RESUMABLE_PHASES.has(run.run_phase)) {
+        throw new WorkflowError(`Run ${runId} is in phase '${run.run_phase}', which is not resumable.`, {
+            code: 'STATE_TRANSITION_DENIED',
+            category: 'STATE',
+            agentAction: 'report_to_user',
+            retryable: false,
+        });
+    }
+    const workflow = await workflowStore.get(run.workflow_id);
+    if (workflow.steps[stepName] === undefined) {
+        throw new WorkflowError(`Step '${stepName}' not found in workflow '${run.workflow_id}'.`, {
+            code: 'STEP_NOT_FOUND',
+            category: 'ENGINE',
+            agentAction: 'report_to_user',
+            retryable: false,
+        });
+    }
+    if (!run.failed_steps.includes(stepName)) {
+        throw new WorkflowError(`Step '${stepName}' is not in failed_steps for run '${runId}'.`, {
+            code: 'STATE_TRANSITION_DENIED',
+            category: 'STATE',
+            agentAction: 'report_to_user',
+            retryable: false,
+        });
+    }
+    await runStore.update({
+        ...run,
+        failed_steps: run.failed_steps.filter((s) => s !== stepName),
+    });
+}
+export const resumeCommand = new Command('resume')
+    .description('Remove a step from failed_steps so it can be re-executed')
+    .argument('<run-id>', 'ID of the run to resume')
+    .requiredOption('--from <step>', 'Name of the failed step to re-enable')
+    .action(async (runId, opts) => {
+    const { JsonFileStore, JsonWorkflowStore } = await import('@sensigo/realm');
+    const runStore = new JsonFileStore();
+    const workflowStore = new JsonWorkflowStore();
+    try {
+        await resumeRun(runId, opts.from, runStore, workflowStore);
+        console.log(`Resumed: step '${opts.from}' removed from failed_steps on run '${runId}'.`);
+    }
+    catch (err) {
+        console.error(err instanceof Error ? err.message : String(err));
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=resume.js.map

package/dist/commands/resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.js","sourceRoot":"","sources":["../../src/commands/resume.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,QAAgB,EAChB,QAAkB,EAClB,aAAgC;IAEhC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,aAAa,CACrB,OAAO,KAAK,iBAAiB,GAAG,CAAC,SAAS,4BAA4B,EACtE;YACE,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,KAAK;SACjB,CACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAE1D,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,aAAa,CAAC,SAAS,QAAQ,4BAA4B,GAAG,CAAC,WAAW,IAAI,EAAE;YACxF,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,aAAa,CAAC,SAAS,QAAQ,qCAAqC,KAAK,IAAI,EAAE;YACvF,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpB,GAAG,GAAG;QACN,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CAAC,0DAA0D,CAAC;KACvE,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;KAC/C,cAAc,CAAC,eAAe,EAAE,sCAAsC,CAAC;KACvE,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,IAAsB,EAAE,EAAE;IACtD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,IAAI,uCAAuC,KAAK,IAAI,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/run.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare const runCommand: Command;
+//# sourceMappingURL=run.d.ts.map

package/dist/commands/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,eAAO,MAAM,UAAU,SAqInB,CAAC"}

package/dist/commands/run.js

@@ -0,0 +1,127 @@
+// realm run <path> — interactive workflow runner (development driver).
+import { Command } from 'commander';
+import { createInterface } from 'node:readline/promises';
+import { join } from 'node:path';
+import { loadWorkflowFromFile, JsonFileStore, findEligibleSteps, executeChain, submitHumanResponse, } from '@sensigo/realm';
+export const runCommand = new Command('run')
+    .argument('<path>', 'Path to workflow directory or workflow.yaml file')
+    .option('--params <json>', 'Initial run parameters as JSON string', '{}')
+    .description('Run a workflow interactively (development mode)')
+    .action(async (inputPath, options) => {
+    const filePath = inputPath.endsWith('.yaml') || inputPath.endsWith('.yml')
+        ? inputPath
+        : join(inputPath, 'workflow.yaml');
+    // 1. Load workflow
+    let definition;
+    try {
+        definition = loadWorkflowFromFile(filePath);
+    }
+    catch (err) {
+        console.error(`Error loading workflow: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+    }
+    // 2. Parse params
+    let params;
+    try {
+        params = JSON.parse(options.params);
+    }
+    catch {
+        console.error('Error: --params is not valid JSON');
+        process.exit(1);
+    }
+    // 3. Create store and initial run record
+    const store = new JsonFileStore();
+    const initialRecord = await store.create({
+        workflowId: definition.id,
+        workflowVersion: definition.version,
+        params,
+    });
+    const runId = initialRecord.id;
+    console.log(`\nRealm — ${definition.name} v${definition.version}`);
+    console.log(`Run ID: ${runId}\n`);
+    // 4. Set up readline
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    // 5. Execution loop
+    let run = await store.get(runId);
+    try {
+        while (!run.terminal_state) {
+            // Handle open gate
+            if (run.pending_gate !== undefined) {
+                const g = run.pending_gate;
+                console.log(`  ⏸  Gate: ${g.step_name} | gate_id: ${g.gate_id}`);
+                console.log(`  Preview: ${JSON.stringify(g.preview, null, 2)}`);
+                const raw = await rl.question(`  Choice [${g.choices.join('/')}]: `);
+                const choice = raw.trim();
+                const respondResult = await submitHumanResponse(store, definition, {
+                    runId,
+                    gateId: g.gate_id,
+                    choice,
+                });
+                if (respondResult.status === 'ok') {
+                    run = await store.get(runId);
+                    console.log(`  ✓ → ${run.run_phase}\n`);
+                }
+                else {
+                    console.error(`  ✗ ${respondResult.errors.join(', ')}\n`);
+                    break;
+                }
+                continue;
+            }
+            const eligibleSteps = findEligibleSteps(definition, run);
+            if (eligibleSteps.length === 0) {
+                console.error(`\nNo eligible steps in phase '${run.run_phase}'. Workflow stalled.`);
+                break;
+            }
+            // Take the first eligible step (linear workflow for dev mode)
+            const stepName = eligibleSteps[0];
+            const stepDef = definition.steps[stepName];
+            console.log(`→ [${stepDef.execution}] ${stepName}: ${stepDef.description}`);
+            // Build dispatcher output based on execution type
+            let userOutput;
+            if (stepDef.execution === 'agent') {
+                const raw = await rl.question('  Agent output JSON (Enter for {}): ');
+                userOutput = raw.trim() === '' ? {} : JSON.parse(raw);
+            }
+            else {
+                // auto step
+                const hint = stepDef.handler !== undefined
+                    ? `handler: ${stepDef.handler}`
+                    : stepDef.uses_service !== undefined
+                        ? `service: ${stepDef.uses_service}`
+                        : 'auto';
+                const raw = await rl.question(`  Mock output (${hint}) — JSON (Enter for {}): `);
+                userOutput = raw.trim() === '' ? {} : JSON.parse(raw);
+            }
+            const dispatcher = async () => userOutput;
+            const result = await executeChain(store, definition, {
+                runId,
+                command: stepName,
+                input: userOutput,
+                dispatcher,
+            });
+            if (result.status === 'ok') {
+                run = await store.get(runId);
+                const ev = result.evidence[0];
+                const hash = ev !== undefined ? ev.evidence_hash.slice(0, 8) : 'n/a';
+                const dur = ev !== undefined ? `${ev.duration_ms}ms` : 'n/a';
+                console.log(`  ✓ → ${run.run_phase} | hash: ${hash}... | ${dur}\n`);
+            }
+            else if (result.status === 'confirm_required' && result.gate !== undefined) {
+                // Gate opened as part of this step — it will be handled at loop top.
+                run = await store.get(runId);
+                console.log(`  Gate opened for '${result.gate.step_name}'.\n`);
+            }
+            else {
+                console.error(`  ✗ ${result.status}: ${result.errors.join(', ')}\n`);
+                break;
+            }
+        }
+        if (run.terminal_state) {
+            console.log(`Run complete. Phase: ${run.run_phase}`);
+        }
+    }
+    finally {
+        rl.close();
+    }
+});
+//# sourceMappingURL=run.js.map

package/dist/commands/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KACzC,QAAQ,CAAC,QAAQ,EAAE,kDAAkD,CAAC;KACtE,MAAM,CAAC,iBAAiB,EAAE,uCAAuC,EAAE,IAAI,CAAC;KACxE,WAAW,CAAC,iDAAiD,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,OAA2B,EAAE,EAAE;IAC/D,MAAM,QAAQ,GACZ,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAEvC,mBAAmB;IACnB,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kBAAkB;IAClB,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAA4B,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yCAAyC;IACzC,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAElC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QACvC,UAAU,EAAE,UAAU,CAAC,EAAE;QACzB,eAAe,EAAE,UAAU,CAAC,OAAO;QACnC,MAAM;KACP,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;IAElC,qBAAqB;IACrB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7E,oBAAoB;IACpB,IAAI,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEjC,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC3B,mBAAmB;YACnB,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,SAAS,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACrE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC1B,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE;oBACjE,KAAK;oBACL,MAAM,EAAE,CAAC,CAAC,OAAO;oBACjB,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,aAAa,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBAClC,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC1D,MAAM;gBACR,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAEzD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,SAAS,sBAAsB,CAAC,CAAC;gBACpF,MAAM;YACR,CAAC;YAED,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;YACnC,MAAM,OAAO,GAAmB,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAE,CAAC;YAE5D,OAAO,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,KAAK,QAAQ,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAE5E,kDAAkD;YAClD,IAAI,UAAmC,CAAC;YAExC,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;gBACtE,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;YACrF,CAAC;iBAAM,CAAC;gBACN,YAAY;gBACZ,MAAM,IAAI,GACR,OAAO,CAAC,OAAO,KAAK,SAAS;oBAC3B,CAAC,CAAC,YAAY,OAAO,CAAC,OAAO,EAAE;oBAC/B,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;wBAClC,CAAC,CAAC,YAAY,OAAO,CAAC,YAAY,EAAE;wBACpC,CAAC,CAAC,MAAM,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,IAAI,2BAA2B,CAAC,CAAC;gBACjF,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;YACrF,CAAC;YAED,MAAM,UAAU,GAAmB,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC;YAE1D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE;gBACnD,KAAK;gBACL,OAAO,EAAE,QAAQ;gBACjB,KAAK,EAAE,UAAU;gBACjB,UAAU;aACX,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC3B,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,IAAI,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBACrE,MAAM,GAAG,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,SAAS,YAAY,IAAI,SAAS,GAAG,IAAI,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7E,qEAAqE;gBACrE,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrE,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/serve.d.ts

@@ -0,0 +1,33 @@
+import { type Server } from 'node:http';
+import { Command } from 'commander';
+import { JsonWorkflowStore } from '@sensigo/realm';
+/**
+ * Checks an Authorization header's Bearer token using timing-safe comparison.
+ * Returns true only if the header is present, has the Bearer scheme, and the
+ * token matches byte-for-byte. Prevents timing side-channel attacks.
+ */
+export declare function checkBearerToken(authHeader: string | undefined, expectedToken: string): boolean;
+export interface StartServerOptions {
+    port: number;
+    host: string;
+    devMode: boolean;
+    token: string | undefined;
+    /** Custom workflow store — useful in tests to avoid writing to ~/.realm/. */
+    workflowStore?: JsonWorkflowStore;
+}
+/**
+ * Creates and starts the HTTP MCP server. Resolves once the server is listening.
+ * The caller is responsible for calling server.close() when done.
+ *
+ * Each HTTP request gets a fresh MCP server + stateless transport. The MCP SDK's
+ * Protocol.connect() does not allow reconnecting a server to a new transport, so
+ * per-request isolation is the correct pattern for stateless HTTP mode.
+ */
+export declare function startHttpMcpServer(options: StartServerOptions): Promise<Server>;
+/**
+ * `realm serve` — starts the Realm MCP server over HTTP.
+ * Designed for hosted agent platforms (OpenClaw, Claude.ai, custom backends) that
+ * cannot spawn a local stdio subprocess.
+ */
+export declare const serveCommand: Command;
+//# sourceMappingURL=serve.d.ts.map

package/dist/commands/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAMnD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAO/F;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+ErF;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,SAsCrB,CAAC"}

package/dist/commands/serve.js

@@ -0,0 +1,144 @@
+// realm serve — starts the Realm MCP server over HTTP for hosted agent platforms.
+// Requires REALM_SERVE_TOKEN env var for Bearer token auth, or --dev for local development.
+import { createServer } from 'node:http';
+import { timingSafeEqual } from 'node:crypto';
+import { Command } from 'commander';
+import { JsonWorkflowStore } from '@sensigo/realm';
+import { createRealmMcpServer } from '@sensigo/realm-mcp';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+const MAX_BODY_BYTES = 1 * 1024 * 1024; // 1 MiB
+/**
+ * Checks an Authorization header's Bearer token using timing-safe comparison.
+ * Returns true only if the header is present, has the Bearer scheme, and the
+ * token matches byte-for-byte. Prevents timing side-channel attacks.
+ */
+export function checkBearerToken(authHeader, expectedToken) {
+    if (!authHeader?.startsWith('Bearer '))
+        return false;
+    const provided = authHeader.slice(7);
+    const a = Buffer.from(provided);
+    const b = Buffer.from(expectedToken);
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+/**
+ * Creates and starts the HTTP MCP server. Resolves once the server is listening.
+ * The caller is responsible for calling server.close() when done.
+ *
+ * Each HTTP request gets a fresh MCP server + stateless transport. The MCP SDK's
+ * Protocol.connect() does not allow reconnecting a server to a new transport, so
+ * per-request isolation is the correct pattern for stateless HTTP mode.
+ */
+export async function startHttpMcpServer(options) {
+    const { port, host, devMode, token, workflowStore } = options;
+    const httpServer = createServer(async (req, res) => {
+        // Auth gate — evaluated before any MCP logic.
+        if (!devMode) {
+            if (!checkBearerToken(req.headers['authorization'], token)) {
+                res.writeHead(401, {
+                    'WWW-Authenticate': 'Bearer',
+                    'Content-Type': 'application/json',
+                });
+                res.end(JSON.stringify({ error: 'Unauthorized' }));
+                return;
+            }
+        }
+        try {
+            // Collect the request body before handing off to the transport.
+            let totalBytes = 0;
+            const chunks = [];
+            for await (const chunk of req) {
+                totalBytes += chunk.length;
+                if (totalBytes > MAX_BODY_BYTES) {
+                    res.writeHead(413, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Request body too large' }));
+                    req.destroy();
+                    return;
+                }
+                chunks.push(chunk);
+            }
+            const rawBody = Buffer.concat(chunks).toString('utf-8');
+            let parsedBody;
+            if (rawBody.length > 0) {
+                try {
+                    parsedBody = JSON.parse(rawBody);
+                }
+                catch {
+                    res.writeHead(400, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Invalid JSON in request body' }));
+                    return;
+                }
+            }
+            const store = workflowStore ?? new JsonWorkflowStore();
+            const mcpServer = createRealmMcpServer({ workflowStore: store });
+            // Omitting sessionIdGenerator enables stateless mode (SDK default when absent).
+            const transport = new StreamableHTTPServerTransport({});
+            // @ts-expect-error — SDK type mismatch under exactOptionalPropertyTypes:
+            // StreamableHTTPServerTransport.onclose is (() => void) | undefined but
+            // Transport.onclose expects () => void. Runtime behaviour is correct.
+            await mcpServer.connect(transport);
+            await transport.handleRequest(req, res, parsedBody);
+        }
+        catch (err) {
+            if (!res.headersSent && !res.destroyed) {
+                res.writeHead(500, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Internal server error' }));
+            }
+            else {
+                res.destroy(err instanceof Error ? err : new Error(String(err)));
+            }
+        }
+    });
+    return new Promise((resolve, reject) => {
+        let isListening = false;
+        httpServer.on('error', (err) => {
+            if (!isListening) {
+                reject(err);
+            }
+            else {
+                console.error('Realm MCP server error:', err);
+                httpServer.close(() => process.exit(1));
+            }
+        });
+        httpServer.listen(port, host, () => {
+            isListening = true;
+            resolve(httpServer);
+        });
+    });
+}
+/**
+ * `realm serve` — starts the Realm MCP server over HTTP.
+ * Designed for hosted agent platforms (OpenClaw, Claude.ai, custom backends) that
+ * cannot spawn a local stdio subprocess.
+ */
+export const serveCommand = new Command('serve')
+    .description('Start the Realm MCP server over HTTP (for hosted agent platforms that cannot use stdio)')
+    .option('--port <number>', 'Port to listen on', '3001')
+    .option('--host <address>', 'Bind address', '127.0.0.1')
+    .option('--dev', 'Disable authentication (for local development only)')
+    .action(async (options) => {
+    const port = parseInt(options.port, 10);
+    const host = options.host;
+    const devMode = options.dev === true || process.env.REALM_DEV === '1';
+    const token = process.env.REALM_SERVE_TOKEN;
+    if (!devMode && !token) {
+        console.error('Error: REALM_SERVE_TOKEN is not set.\n' +
+            'Set it to a secret token, or use --dev / REALM_DEV=1 for local development only.');
+        process.exit(1);
+    }
+    if (devMode) {
+        console.warn('Warning: Running in dev mode — authentication is disabled. ' +
+            'Do not expose this to a network.');
+    }
+    const httpServer = await startHttpMcpServer({ port, host, devMode, token });
+    console.log(`Realm MCP server listening on http://${host}:${port}/`);
+    if (!devMode) {
+        console.log('Authentication: Bearer token (REALM_SERVE_TOKEN)');
+    }
+    // Graceful shutdown on SIGINT / SIGTERM.
+    const shutdown = () => httpServer.close(() => process.exit(0));
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+});
+//# sourceMappingURL=serve.js.map

package/dist/commands/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,4FAA4F;AAC5F,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAEhD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA8B,EAAE,aAAqB;IACpF,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA2B;IAClE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAE9D,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjD,8CAA8C;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,KAAM,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,kBAAkB,EAAE,QAAQ;oBAC5B,cAAc,EAAE,kBAAkB;iBACnC,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,gEAAgE;YAChE,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBAC9B,UAAU,IAAK,KAAgB,CAAC,MAAM,CAAC;gBACvC,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;oBAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;oBAC7D,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAExD,IAAI,UAAmB,CAAC;YACxB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG,aAAa,IAAI,IAAI,iBAAiB,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,oBAAoB,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,gFAAgF;YAChF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,CAAC,CAAC;YACxD,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACvC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,OAAO,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;gBAC9C,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YACjC,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CACV,yFAAyF,CAC1F;KACA,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,CAAC;KACtD,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,WAAW,CAAC;KACvD,MAAM,CAAC,OAAO,EAAE,qDAAqD,CAAC;KACtE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAc,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAE5C,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CACX,wCAAwC;YACtC,kFAAkF,CACrF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CACV,6DAA6D;YAC3D,kCAAkC,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;IAED,yCAAyC;IACzC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC"}

package/dist/commands/test.d.ts

@@ -0,0 +1,12 @@
+import { Command } from 'commander';
+import type { TestResult } from '@sensigo/realm-testing';
+/**
+ * Formats fixture test results for display.
+ * Returns an array of output lines and the appropriate process exit code.
+ */
+export declare function formatTestResults(results: TestResult[]): {
+    lines: string[];
+    exitCode: number;
+};
+export declare const testCommand: Command;
+//# sourceMappingURL=test.d.ts.map

package/dist/commands/test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../src/commands/test.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAe9F;AAED,eAAO,MAAM,WAAW,SAoCpB,CAAC"}

package/dist/commands/test.js

@@ -0,0 +1,58 @@
+// realm test <workflow-path> --fixtures <dir> — runs fixture-based workflow tests.
+import { Command } from 'commander';
+import chalk from 'chalk';
+import { existsSync } from 'node:fs';
+import { runFixtureTests } from '@sensigo/realm-testing';
+/**
+ * Formats fixture test results for display.
+ * Returns an array of output lines and the appropriate process exit code.
+ */
+export function formatTestResults(results) {
+    const lines = [];
+    let allPassed = true;
+    for (const result of results) {
+        if (result.passed) {
+            lines.push(`  ${chalk.green('PASS')} ${result.name}`);
+        }
+        else {
+            allPassed = false;
+            const errorPart = result.error !== undefined ? `: ${result.error}` : '';
+            lines.push(`  ${chalk.red('FAIL')} ${result.name}${errorPart}`);
+        }
+    }
+    return { lines, exitCode: allPassed ? 0 : 1 };
+}
+export const testCommand = new Command('test')
+    .argument('<workflow-path>', 'Path to workflow directory or workflow.yaml file')
+    .requiredOption('-f, --fixtures <dir>', 'Directory containing fixture YAML files')
+    .description('Run fixture-based workflow tests')
+    .action(async (workflowPath, opts) => {
+    if (!existsSync(opts.fixtures)) {
+        console.error(`Error: fixtures directory does not exist: ${opts.fixtures}`);
+        process.exit(1);
+        return;
+    }
+    let results;
+    try {
+        results = await runFixtureTests({ workflowPath, fixturesPath: opts.fixtures });
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        process.exit(1);
+        return;
+    }
+    if (results.length === 0) {
+        console.error('Error: no fixture files found in the specified directory');
+        process.exit(1);
+        return;
+    }
+    const { lines, exitCode } = formatTestResults(results);
+    const passed = results.filter((r) => r.passed).length;
+    console.log(`\nRealm Test — ${workflowPath}`);
+    for (const line of lines) {
+        console.log(line);
+    }
+    console.log(`\n${passed}/${results.length} passed`);
+    process.exit(exitCode);
+});
+//# sourceMappingURL=test.js.map

package/dist/commands/test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.js","sourceRoot":"","sources":["../../src/commands/test.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGzD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAqB;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,IAAI,CAAC;IAErB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAC3C,QAAQ,CAAC,iBAAiB,EAAE,kDAAkD,CAAC;KAC/E,cAAc,CAAC,sBAAsB,EAAE,yCAAyC,CAAC;KACjF,WAAW,CAAC,kCAAkC,CAAC;KAC/C,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,IAA0B,EAAE,EAAE;IACjE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,6CAA6C,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,eAAe,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAEtD,OAAO,CAAC,GAAG,CAAC,kBAAkB,YAAY,EAAE,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC;IAEpD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC"}

package/dist/commands/validate.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare const validateCommand: Command;
+//# sourceMappingURL=validate.d.ts.map

package/dist/commands/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/commands/validate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,eAAO,MAAM,eAAe,SA+BxB,CAAC"}

package/dist/commands/validate.js

@@ -0,0 +1,35 @@
+// realm validate <path> — validates a workflow YAML file without registering it.
+import { Command } from 'commander';
+import { join } from 'node:path';
+import { readFileSync } from 'node:fs';
+import { loadWorkflowFromString, WorkflowError } from '@sensigo/realm';
+export const validateCommand = new Command('validate')
+    .argument('<path>', 'Path to workflow directory or workflow.yaml file')
+    .description('Validate a workflow YAML file')
+    .action((inputPath) => {
+    const filePath = inputPath.endsWith('.yaml') || inputPath.endsWith('.yml')
+        ? inputPath
+        : join(inputPath, 'workflow.yaml');
+    let content;
+    try {
+        content = readFileSync(filePath, 'utf8');
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(`Error: ${message}`);
+        process.exit(1);
+        return;
+    }
+    try {
+        const definition = loadWorkflowFromString(content);
+        console.log(`Valid: ${definition.id} v${definition.version} (${Object.keys(definition.steps).length} steps)`);
+    }
+    catch (err) {
+        if (err instanceof WorkflowError) {
+            console.error(`Invalid: ${err.message}`);
+            process.exit(1);
+        }
+        throw err;
+    }
+});
+//# sourceMappingURL=validate.js.map

package/dist/commands/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/commands/validate.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEvE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;KACnD,QAAQ,CAAC,QAAQ,EAAE,kDAAkD,CAAC;KACtE,WAAW,CAAC,+BAA+B,CAAC;KAC5C,MAAM,CAAC,CAAC,SAAiB,EAAE,EAAE;IAC5B,MAAM,QAAQ,GACZ,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAEvC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CACT,UAAU,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,SAAS,CACjG,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/watch.d.ts

@@ -0,0 +1,18 @@
+import { Command } from 'commander';
+import type { WorkflowRegistrar } from '@sensigo/realm';
+/**
+ * Watches a workflow YAML file and re-registers it into the given store on every change.
+ * Also watches the profiles directory alongside the YAML — any file change there triggers
+ * re-registration. If the profiles directory does not exist, only the YAML is watched.
+ * Performs an initial registration before entering the watch loop.
+ * Resolves when the watcher is closed (e.g. when the AbortSignal fires).
+ *
+ * @param filePath    Path to the workflow YAML file.
+ * @param store       The workflow registrar to register into — injected, never instantiated here.
+ * @param signal      Optional AbortSignal; when aborted the watcher stops and the promise resolves.
+ * @param profilesDir Optional override for the profiles directory path. Defaults to
+ *                    `<workflow-dir>/profiles` (or `profiles_dir` declared in the YAML).
+ */
+export declare function watchWorkflow(filePath: string, store: WorkflowRegistrar, signal?: AbortSignal, profilesDir?: string): Promise<void>;
+export declare const watchCommand: Command;
+//# sourceMappingURL=watch.d.ts.map

package/dist/commands/watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../src/commands/watch.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AA0BxD;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,EACxB,MAAM,CAAC,EAAE,WAAW,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CA4Df;AAED,eAAO,MAAM,YAAY,SAoBrB,CAAC"}