@sensigo/realm-cli 0.12.0 → 0.13.0

package/dist/extensions/load-project-extensions.js

@@ -0,0 +1,358 @@
+// load-project-extensions.ts — the ONE loader for workflow-declared project extension modules.
+//
+// Every step-executing or config-validating CLI entry point (run, agent, listen, serve, mcp,
+// test, validate, register, watch) resolves extensions through this function. Core resolves and
+// stores PATHS only (source_dir / trust_root / declared relative paths on the definition) — the
+// dynamic import lives here, in the CLI composition layer.
+//
+// Trust model: extension module paths originate ONLY from operator-registered workflow
+// definitions or from the operator-typed --extensions-module flag — never from request data.
+// Declared paths resolve against the definition's source_dir and must realpath-contain within
+// its trust_root (nearest package.json/.git ancestor, derived at registration time).
+import { createRequire } from 'node:module';
+import { realpathSync } from 'node:fs';
+import { resolve, sep } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { createDefaultRegistry } from '@sensigo/realm';
+import { computeExtensionIdentity, errorExtensionIdentityEntry } from './extension-identity.js';
+/** Registration surfaces of a declarative extension module, keyed by export map name. */
+const EXTENSION_SURFACES = [
+    { mapKey: 'adapters', type: 'adapter', probeMembers: ['fetch', 'create', 'update'] },
+    { mapKey: 'handlers', type: 'handler', probeMembers: ['execute'] },
+    { mapKey: 'processors', type: 'processor', probeMembers: ['process'] },
+];
+const DEFAULT_REGISTRY_CACHE_KEY = '\u0000default-registry\u0000';
+// Process-lifetime cache keyed by the ORDERED list of resolved module paths (plus a sentinel
+// for the extension-less default registry). Restart-required semantics: module CONTENT changes
+// in long-lived processes (listen parent, serve, mcp) need a process restart — there is no
+// cache-busting re-import (ESM module cache would defeat it anyway).
+const cache = new Map();
+/** @internal Test-only: clears the process-lifetime registry cache. */
+export function clearProjectExtensionsCache() {
+    cache.clear();
+}
+function emptyManifest() {
+    return { modules: [], adapters: [], handlers: [], processors: [] };
+}
+function errMsg(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function realpathOrFail(path, what) {
+    try {
+        return realpathSync(path);
+    }
+    catch (err) {
+        throw new Error(`Cannot resolve ${what}: ${errMsg(err)}`);
+    }
+}
+/** True when `child` is `root` or lives underneath it (both must be realpaths). */
+function isContainedIn(child, root) {
+    return child === root || child.startsWith(root + sep);
+}
+function normalizeDeclared(extensions) {
+    if (extensions === undefined)
+        return undefined;
+    return typeof extensions === 'string' ? [extensions] : extensions;
+}
+/**
+ * Loads the project extension modules declared by a workflow definition (or an operator
+ * override) and returns a registry (defaults + extensions applied) plus a manifest of what
+ * was loaded. No `extensions` on the definition and no override → `createDefaultRegistry()`
+ * plus an empty manifest — the byte-identical fallback, cached process-wide.
+ *
+ * Precedence: defaults < legacy env-gated built-ins (applied by `realm agent`, see agent.ts)
+ * < declared extensions < --extensions-module override.
+ *
+ * CONTRACT: returned registries are shared process-lifetime cache entries. The only
+ * permitted mutation is `getOrCreateRateLimiter` (serve bucket persistence, by design);
+ * any tier composition on top requires `ExtensionRegistry.clone()`.
+ */
+export async function loadProjectExtensions(definition, opts) {
+    const moduleRefs = resolveModuleRefs(definition, opts?.overrideModule);
+    if (moduleRefs === undefined) {
+        // Extension-free fallback: byte-identical default registry, process-lifetime cached
+        // (the sentinel keeps rate-limiter buckets stable across requests in serve/mcp too).
+        let entry = cache.get(DEFAULT_REGISTRY_CACHE_KEY);
+        if (entry === undefined) {
+            entry = { registry: createDefaultRegistry(), manifest: emptyManifest() };
+            cache.set(DEFAULT_REGISTRY_CACHE_KEY, entry);
+        }
+        return entry;
+    }
+    const cacheKey = moduleRefs.map((m) => m.resolved).join('\n');
+    const cached = cache.get(cacheKey);
+    if (cached !== undefined)
+        return cached;
+    const registry = createDefaultRegistry();
+    const builtinNames = {
+        adapter: new Set(registry.names('adapter')),
+        handler: new Set(registry.names('handler')),
+        processor: new Set(registry.names('processor')),
+    };
+    // `${type}:${name}` → declared path of the module that first claimed it.
+    const claimedBy = new Map();
+    const manifest = {
+        modules: moduleRefs,
+        adapters: [],
+        handlers: [],
+        processors: [],
+    };
+    const moduleFormats = new Map();
+    for (const ref of moduleRefs) {
+        const { exported, format } = await importExtensionModule(ref);
+        moduleFormats.set(ref.resolved, format);
+        applyModule(exported, ref, registry, builtinNames, claimedBy, manifest);
+    }
+    // Drift evidence (issue #119): capture the identity of the loaded code ONCE per cache
+    // entry, at module-LOAD time (what is actually in memory). Capture failure NEVER fails
+    // loading — an error entry is attached and logged instead. The extension-less sentinel
+    // above gets NO identity: extension-free runs record nothing.
+    const overrideActive = opts?.overrideModule !== undefined;
+    try {
+        registry.setIdentity(computeExtensionIdentity(moduleRefs.map((ref) => ({
+            declared: ref.declared,
+            resolved: ref.resolved,
+            format: moduleFormats.get(ref.resolved) ?? 'esm',
+        })), {
+            ...(definition.trust_root !== undefined ? { trustRoot: definition.trust_root } : {}),
+            ...(overrideActive ? { overrideActive: true } : {}),
+        }));
+    }
+    catch (err) {
+        console.error(`[realm] extension identity capture failed: ${errMsg(err)} — drift evidence will carry an error entry for this load.`);
+        registry.setIdentity(errorExtensionIdentityEntry(`identity capture failed: ${errMsg(err)}`, overrideActive ? { overrideActive: true } : {}));
+    }
+    const result = { registry, manifest };
+    cache.set(cacheKey, result);
+    return result;
+}
+/**
+ * Resolves the list of modules to load. Returns undefined for the extension-free fallback.
+ * Enforces the trust model for declared modules: agent-origin refusal, re-register guidance
+ * when resolution metadata is missing, and realpath containment within trust_root.
+ */
+function resolveModuleRefs(definition, overrideModule) {
+    if (overrideModule !== undefined) {
+        const resolved = resolve(overrideModule);
+        const real = realpathOrFail(resolved, `--extensions-module '${overrideModule}'`);
+        // Loud by design: the override replaces whatever the workflow declared.
+        console.warn(`[realm] --extensions-module override active: loading '${overrideModule}' (resolved: ${real}). ` +
+            `Declared workflow extensions are IGNORED.`);
+        return [{ declared: overrideModule, resolved: real }];
+    }
+    const declared = normalizeDeclared(definition.extensions);
+    if (declared === undefined || declared.length === 0)
+        return undefined;
+    if (definition.origin === 'agent') {
+        throw new Error(`Workflow '${definition.id}' was created by an agent (origin: 'agent') but declares 'extensions' — ` +
+            `refusing to load extension code. Extensions are register-time and operator-only: ` +
+            `register the workflow from its YAML file with 'realm workflow register <path>'.`);
+    }
+    if (definition.source_dir === undefined || definition.trust_root === undefined) {
+        throw new Error(`Workflow '${definition.id}' declares 'extensions' but its stored definition carries no ` +
+            `source_dir/trust_root resolution metadata (registered by an older Realm version). ` +
+            `Re-register this workflow: realm workflow register <path-to-workflow>`);
+    }
+    const trustRootReal = realpathOrFail(definition.trust_root, `trust_root '${definition.trust_root}' of workflow '${definition.id}'`);
+    return declared.map((declaredPath) => {
+        const resolved = resolve(definition.source_dir, declaredPath);
+        const real = realpathOrFail(resolved, `extension module '${declaredPath}' of workflow '${definition.id}' (resolved: ${resolved})`);
+        if (!isContainedIn(real, trustRootReal)) {
+            throw new Error(`Extension module '${declaredPath}' resolves to '${real}', which is OUTSIDE the ` +
+                `workflow's trust root '${trustRootReal}'. Extension modules must live within the ` +
+                `project containing the workflow (nearest package.json/.git ancestor of the workflow ` +
+                `directory). Move the module inside the project, or re-register the workflow from ` +
+                `its real location.`);
+        }
+        return { declared: declaredPath, resolved: real };
+    });
+}
+/**
+ * Imports one extension module (jiti-bridged for TypeScript paths) and returns its default
+ * export plus the load format (descriptive metadata for the drift-evidence identity record:
+ * ts-jiti for TypeScript paths, cjs for .cjs / detected CJS-interop wrappers, esm otherwise).
+ */
+async function importExtensionModule(ref) {
+    const isTypescript = /\.(ts|mts|cts)$/.test(ref.resolved);
+    let mod;
+    if (isTypescript) {
+        mod = await importViaJiti(ref);
+    }
+    else {
+        try {
+            mod = (await import(pathToFileURL(ref.resolved).href));
+        }
+        catch (err) {
+            throw new Error(`Failed to import extension module '${ref.declared}' (${ref.resolved}): ${errMsg(err)}`);
+        }
+    }
+    let format = isTypescript
+        ? 'ts-jiti'
+        : ref.resolved.endsWith('.cjs')
+            ? 'cjs'
+            : 'esm';
+    let exported = mod['default'];
+    // CJS-ESM interop: `import()` of a tsc-CommonJS build ("type" not "module") yields
+    // namespace.default = module.exports = { __esModule: true, default: <manifest> }.
+    // Unwrap that wrapper so CJS consumers get the same contract as ESM ones.
+    if (typeof exported === 'object' &&
+        exported !== null &&
+        exported['__esModule'] === true &&
+        'default' in exported) {
+        exported = exported['default'];
+        if (!isTypescript)
+            format = 'cjs';
+    }
+    if (exported === undefined) {
+        throw new Error(`Extension module '${ref.declared}' has no default export — export a declarative object: ` +
+            `export default { adapters: { name: instance }, handlers: { ... }, processors: { ... } }`);
+    }
+    return { exported, format };
+}
+/**
+ * TypeScript modules load through jiti resolved from the MODULE'S OWN directory (the consumer
+ * project's node_modules) — never from the CLI install (npx/global installs carry no jiti).
+ * Compiled JS is the documented default; jiti is a consumer-side optional peer.
+ */
+async function importViaJiti(ref) {
+    const requireFromModule = createRequire(ref.resolved);
+    let jitiPath;
+    try {
+        jitiPath = requireFromModule.resolve('jiti');
+    }
+    catch {
+        throw new Error(`Extension module '${ref.declared}' (${ref.resolved}) is TypeScript, but 'jiti' is not ` +
+            `installed in your project. Install jiti in your project (npm install --save-dev jiti), ` +
+            `or compile the module to JS and declare the compiled path.`);
+    }
+    let jitiModule;
+    try {
+        jitiModule = (await import(pathToFileURL(jitiPath).href));
+    }
+    catch (err) {
+        throw new Error(`Failed to load 'jiti' from '${jitiPath}': ${errMsg(err)}`);
+    }
+    try {
+        // jiti v2: createJiti(parentPath).import(path) → module namespace.
+        const createJiti = jitiModule['createJiti'];
+        if (typeof createJiti === 'function') {
+            const jiti = createJiti(ref.resolved);
+            return (await jiti.import(ref.resolved));
+        }
+        // jiti v1: default export is a factory returning a require-like function.
+        const factory = jitiModule['default'];
+        if (typeof factory === 'function') {
+            const jitiRequire = factory(ref.resolved, { interopDefault: false });
+            const required = jitiRequire(ref.resolved);
+            if (typeof required === 'object' && required !== null && 'default' in required) {
+                return required;
+            }
+            return { default: required };
+        }
+    }
+    catch (err) {
+        throw new Error(`Failed to import TypeScript extension module '${ref.declared}' via jiti: ${errMsg(err)}`);
+    }
+    throw new Error(`Unrecognized 'jiti' package shape at '${jitiPath}' — upgrade jiti in your project, or ` +
+        `compile the extension module to JS.`);
+}
+/** Reads a property defensively — a throwing getter becomes a clean validation error. */
+function safeGet(obj, key, context) {
+    try {
+        return obj[key];
+    }
+    catch (err) {
+        throw new Error(`${context}: reading '${key}' threw: ${errMsg(err)}`);
+    }
+}
+/**
+ * Duck-validates and applies one module's declarative default export onto the registry.
+ * Collision policy: overriding a BUILT-IN name → WARN and allow; the same name claimed twice
+ * across declared modules → ERROR. Registration name = map key (a differing instance `id` WARNs).
+ */
+function applyModule(exported, ref, registry, builtinNames, claimedBy, manifest) {
+    const context = `Extension module '${ref.declared}'`;
+    if (typeof exported !== 'object' || exported === null || Array.isArray(exported)) {
+        throw new Error(`${context}: default export must be a plain object ({ adapters?, handlers?, processors? }), ` +
+            `got ${Array.isArray(exported) ? 'array' : typeof exported}.`);
+    }
+    // Reject registry-instance-like exports: the contract is declarative maps, not a registry.
+    if (typeof safeGet(exported, 'register', context) === 'function' ||
+        typeof safeGet(exported, 'getAdapter', context) === 'function') {
+        throw new Error(`${context}: default export looks like an ExtensionRegistry instance. Export a declarative ` +
+            `object instead: export default { adapters: { name: instance }, handlers: { ... }, ` +
+            `processors: { ... } }`);
+    }
+    const allowedKeys = new Set(EXTENSION_SURFACES.map((s) => s.mapKey));
+    for (const key of Object.keys(exported)) {
+        if (!allowedKeys.has(key)) {
+            throw new Error(`${context}: unknown key '${key}' in default export — allowed keys are ` +
+                `'adapters', 'handlers', 'processors'.`);
+        }
+    }
+    for (const surface of EXTENSION_SURFACES) {
+        const map = safeGet(exported, surface.mapKey, context);
+        if (map === undefined)
+            continue;
+        if (typeof map !== 'object' || map === null || Array.isArray(map)) {
+            throw new Error(`${context}: '${surface.mapKey}' must be an object map of name → instance, got ` +
+                `${Array.isArray(map) ? 'array' : typeof map}.`);
+        }
+        for (const name of Object.keys(map)) {
+            const impl = safeGet(map, name, `${context}, ${surface.type} '${name}'`);
+            probeShape(impl, surface.type, surface.probeMembers, name, ref);
+            warnOnIdMismatch(impl, surface.type, name, ref);
+            const claimKey = `${surface.type}:${name}`;
+            const previousClaim = claimedBy.get(claimKey);
+            if (previousClaim !== undefined) {
+                throw new Error(`Extension ${surface.type} '${name}' is declared by both '${previousClaim}' and ` +
+                    `'${ref.declared}' — extension names must be unique across declared modules.`);
+            }
+            claimedBy.set(claimKey, ref.declared);
+            if (builtinNames[surface.type].has(name)) {
+                console.warn(`[realm] extension ${surface.type} '${name}' from '${ref.declared}' overrides the ` +
+                    `built-in ${surface.type} '${name}'.`);
+            }
+            // Safe: probeShape validated the minimal distinguishing members of each interface.
+            registry.register(surface.type, name, impl);
+            manifest[surface.mapKey].push(name);
+        }
+    }
+}
+/** Probes the minimal distinguishing members of the extension interface — no instanceof. */
+function probeShape(impl, type, members, name, ref) {
+    const context = `Extension ${type} '${name}' in '${ref.declared}'`;
+    if (typeof impl !== 'object' || impl === null) {
+        throw new Error(`${context}: expected an object instance, got ${impl === null ? 'null' : typeof impl}.`);
+    }
+    for (const member of members) {
+        const value = safeGet(impl, member, context);
+        if (typeof value !== 'function') {
+            throw new Error(`${context}: missing callable '${member}' — ${type}s must implement ` +
+                `${members.map((m) => `'${m}'`).join('/')} per the @sensigo/realm ${type === 'adapter' ? 'ServiceAdapter' : type === 'handler' ? 'StepHandler' : 'Processor'} interface.`);
+        }
+    }
+}
+/** Registration name = map key; a differing instance `id` is evidence worth surfacing. */
+function warnOnIdMismatch(impl, type, name, ref) {
+    let id;
+    try {
+        id = impl['id'];
+    }
+    catch {
+        return; // a throwing id getter is not worth failing the load over — probe already passed
+    }
+    if (typeof id === 'string' && id !== name) {
+        console.warn(`[realm] extension ${type} registered as '${name}' (map key) but its instance id is ` +
+            `'${id}' (module '${ref.declared}'). The registration name is the map key.`);
+    }
+}
+/**
+ * Builds a `registryProvider` for the MCP server (serve / mcp stdio): resolves each
+ * definition's extensions through the process-lifetime loader cache. An operator override
+ * replaces declared modules for EVERY definition served by this process.
+ */
+export function makeRegistryProvider(overrideModule) {
+    return async (definition) => (await loadProjectExtensions(definition, overrideModule !== undefined ? { overrideModule } : {})).registry;
+}
+//# sourceMappingURL=load-project-extensions.js.map

package/dist/extensions/load-project-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-project-extensions.js","sourceRoot":"","sources":["../../src/extensions/load-project-extensions.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,EAAE;AACF,6FAA6F;AAC7F,gGAAgG;AAChG,gGAAgG;AAChG,2DAA2D;AAC3D,EAAE;AACF,uFAAuF;AACvF,6FAA6F;AAC7F,8FAA8F;AAC9F,qFAAqF;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAqB,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAehG,yFAAyF;AACzF,MAAM,kBAAkB,GAAG;IACzB,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;IACpF,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAAE;IAClE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,SAAS,CAAC,EAAE;CAC9D,CAAC;AAEX,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;AAElE,6FAA6F;AAC7F,+FAA+F;AAC/F,2FAA2F;AAC3F,qEAAqE;AACrE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmC,CAAC;AAEzD,uEAAuE;AACvE,MAAM,UAAU,2BAA2B;IACzC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,KAAa,EAAE,IAAY;IAChD,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAyC;IAClE,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAA8B,EAC9B,IAAmC;IAEnC,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAEvE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,oFAAoF;QACpF,qFAAqF;QACrF,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,GAAG,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;YACzE,KAAK,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG;QACnB,OAAO,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,SAAS,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;KAChD,CAAC;IACF,yEAAyE;IACzE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,QAAQ,GAAsB;QAClC,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;KACf,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAqC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC9D,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1E,CAAC;IAED,sFAAsF;IACtF,uFAAuF;IACvF,uFAAuF;IACvF,8DAA8D;IAC9D,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,KAAK,SAAS,CAAC;IAC1D,IAAI,CAAC;QACH,QAAQ,CAAC,WAAW,CAClB,wBAAwB,CACtB,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK;SACjD,CAAC,CAAC,EACH;YACE,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CACF,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,8CAA8C,MAAM,CAAC,GAAG,CAAC,4DAA4D,CACtH,CAAC;QACF,QAAQ,CAAC,WAAW,CAClB,2BAA2B,CACzB,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,EACzC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAC/C,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC/D,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,UAA8B,EAC9B,cAAkC;IAElC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,wBAAwB,cAAc,GAAG,CAAC,CAAC;QACjF,wEAAwE;QACxE,OAAO,CAAC,IAAI,CACV,yDAAyD,cAAc,gBAAgB,IAAI,KAAK;YAC9F,2CAA2C,CAC9C,CAAC;QACF,OAAO,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEtE,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,aAAa,UAAU,CAAC,EAAE,0EAA0E;YAClG,mFAAmF;YACnF,iFAAiF,CACpF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,aAAa,UAAU,CAAC,EAAE,+DAA+D;YACvF,oFAAoF;YACpF,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,cAAc,CAClC,UAAU,CAAC,UAAU,EACrB,eAAe,UAAU,CAAC,UAAU,kBAAkB,UAAU,CAAC,EAAE,GAAG,CACvE,CAAC;IAEF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,UAAW,EAAE,YAAY,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,cAAc,CACzB,QAAQ,EACR,qBAAqB,YAAY,kBAAkB,UAAU,CAAC,EAAE,gBAAgB,QAAQ,GAAG,CAC5F,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,qBAAqB,YAAY,kBAAkB,IAAI,0BAA0B;gBAC/E,0BAA0B,aAAa,4CAA4C;gBACnF,sFAAsF;gBACtF,mFAAmF;gBACnF,oBAAoB,CACvB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAClC,GAAuB;IAEvB,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,GAA4B,CAAC;IACjC,IAAI,YAAY,EAAE,CAAC;QACjB,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAA4B,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,QAAQ,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAA8B,YAAY;QAClD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC7B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,KAAK,CAAC;IACZ,IAAI,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,mFAAmF;IACnF,kFAAkF;IAClF,0EAA0E;IAC1E,IACE,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QAChB,QAAoC,CAAC,YAAY,CAAC,KAAK,IAAI;QAC5D,SAAS,IAAK,QAAoC,EAClD,CAAC;QACD,QAAQ,GAAI,QAAoC,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY;YAAE,MAAM,GAAG,KAAK,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,CAAC,QAAQ,yDAAyD;YACxF,yFAAyF,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,GAAuB;IAClD,MAAM,iBAAiB,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,QAAQ,qCAAqC;YACtF,yFAAyF;YACzF,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,UAAmC,CAAC;IACxC,IAAI,CAAC;QACH,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAA4B,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC;QACH,mEAAmE;QACnE,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,GAAI,UAA8E,CAC1F,GAAG,CAAC,QAAQ,CACb,CAAC;YACF,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAA4B,CAAC;QACtE,CAAC;QACD,0EAA0E;QAC1E,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,WAAW,GAAI,OAAqE,CACxF,GAAG,CAAC,QAAQ,EACZ,EAAE,cAAc,EAAE,KAAK,EAAE,CAC1B,CAAC;YACF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;gBAC/E,OAAO,QAAmC,CAAC;YAC7C,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,iDAAiD,GAAG,CAAC,QAAQ,eAAe,MAAM,CAAC,GAAG,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACb,yCAAyC,QAAQ,uCAAuC;QACtF,qCAAqC,CACxC,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,GAAW,EAAE,GAAW,EAAE,OAAe;IACxD,IAAI,CAAC;QACH,OAAQ,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,cAAc,GAAG,YAAY,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAClB,QAAiB,EACjB,GAAuB,EACvB,QAA2B,EAC3B,YAAsE,EACtE,SAA8B,EAC9B,QAA2B;IAE3B,MAAM,OAAO,GAAG,qBAAqB,GAAG,CAAC,QAAQ,GAAG,CAAC;IACrD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,mFAAmF;YAC3F,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,QAAQ,GAAG,CAChE,CAAC;IACJ,CAAC;IACD,2FAA2F;IAC3F,IACE,OAAO,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,UAAU;QAC5D,OAAO,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,UAAU,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,kFAAkF;YAC1F,oFAAoF;YACpF,uBAAuB,CAC1B,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,kBAAkB,GAAG,yCAAyC;gBACtE,uCAAuC,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,MAAM,OAAO,CAAC,MAAM,kDAAkD;gBAC9E,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAClD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,KAAK,OAAO,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC;YACzE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAChE,gBAAgB,CAAC,IAAc,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,aAAa,OAAO,CAAC,IAAI,KAAK,IAAI,0BAA0B,aAAa,QAAQ;oBAC/E,IAAI,GAAG,CAAC,QAAQ,6DAA6D,CAChF,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEtC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,IAAI,CACV,qBAAqB,OAAO,CAAC,IAAI,KAAK,IAAI,WAAW,GAAG,CAAC,QAAQ,kBAAkB;oBACjF,YAAY,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,CACxC,CAAC;YACJ,CAAC;YAED,mFAAmF;YACnF,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAiB,EAAE,IAAI,EAAE,IAAa,CAAC,CAAC;YAClE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAS,UAAU,CACjB,IAAa,EACb,IAAY,EACZ,OAA0B,EAC1B,IAAY,EACZ,GAAuB;IAEvB,MAAM,OAAO,GAAG,aAAa,IAAI,KAAK,IAAI,SAAS,GAAG,CAAC,QAAQ,GAAG,CAAC;IACnE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,sCAAsC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,CACxF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,uBAAuB,MAAM,OAAO,IAAI,mBAAmB;gBACnE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,2BACvC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAC/E,aAAa,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,EAAE,GAAuB;IACzF,IAAI,EAAW,CAAC;IAChB,IAAI,CAAC;QACH,EAAE,GAAI,IAAgC,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,iFAAiF;IAC3F,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CACV,qBAAqB,IAAI,mBAAmB,IAAI,qCAAqC;YACnF,IAAI,EAAE,cAAc,GAAG,CAAC,QAAQ,2CAA2C,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,cAAuB;IAEvB,OAAO,KAAK,EAAE,UAA8B,EAA8B,EAAE,CAC1E,CACE,MAAM,qBAAqB,CACzB,UAAU,EACV,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CACvD,CACF,CAAC,QAAQ,CAAC;AACf,CAAC"}

package/dist/index.js

@@ -4,7 +4,7 @@ import 'dotenv/config';
 import { Command } from 'commander';
 import { workflowCommands, runCommands, topLevelCommands } from './commands-registry.js';
 const program = new Command();
-program.name('realm').description('Realm workflow engine CLI').version('0.12.0');
+program.name('realm').description('Realm workflow engine CLI').version('0.13.0');
 // realm workflow — operations on workflow definitions
 const workflowCmd = new Command('workflow').description('Manage workflow definitions');
 for (const cmd of workflowCommands)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sensigo/realm-cli",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "publishConfig": {
     "access": "public"
   },
@@ -61,9 +61,9 @@
     "vitest": "^4.1.0"
   },
   "dependencies": {
-    "@sensigo/realm": "^0.12.0",
-    "@sensigo/realm-mcp": "^0.12.0",
-    "@sensigo/realm-testing": "^0.12.0",
+    "@sensigo/realm": "^0.13.0",
+    "@sensigo/realm-mcp": "^0.13.0",
+    "@sensigo/realm-testing": "^0.13.0",
     "@modelcontextprotocol/sdk": "1.29.0",
     "chalk": "^5.0.0",
     "commander": "^14.0.3",