@shipfox/api-workflows 2.0.0

package/dist/core/step-config/resolve-step-config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/step-config/resolve-step-config.ts"],"sourcesContent":["import type {AgentDefaultsResolver} from '@shipfox/api-agent/core/resolve-agent-config';\nimport type {WorkflowEnvTemplates, WorkflowModel} from '@shipfox/api-definitions';\nimport {\n  type AvailabilitySite,\n  capTraceEntries,\n  type EvaluationTraceLimitEntry,\n  type WorkflowExpressionEvaluationContext,\n} from '@shipfox/expression';\nimport type {\n  AgentToolMaterializationContext,\n  AgentToolMaterializationSnapshot,\n} from '#core/agent-tools.js';\nimport type {StepConfigDispatchPlan} from '#core/entities/step.js';\nimport {resolveAgentStepConfig} from './agent.js';\nimport {\n  freezeStepField,\n  type StepConfigField,\n  type WorkflowStepEvaluationTraceEntry,\n  type WorkflowStepTemplateDiagnostic,\n} from './fields.js';\nimport {resolveRunStepConfig, type StepConfigMode} from './run.js';\nimport type {WorkflowEvaluationContext} from './workflow-evaluation-context.js';\n\ntype WorkflowModelJob = WorkflowModel['jobs'][number];\ntype WorkflowModelStep = WorkflowModelJob['steps'][number];\ntype WorkflowModelRunStep = Extract<WorkflowModelStep, {kind: 'run'}>;\ntype WorkflowModelAgentStep = Extract<WorkflowModelStep, {kind: 'agent'}>;\n\nexport type {StepConfigField, WorkflowStepTemplateDiagnostic};\n\nexport interface ResolvedStepConfig {\n  readonly config: Record<string, unknown>;\n  readonly configPlan: StepConfigDispatchPlan | null;\n  readonly authoredConfig: Record<string, unknown> | null;\n  readonly name?: string;\n  readonly diagnostics: readonly WorkflowStepTemplateDiagnostic[];\n  readonly trace: readonly (WorkflowStepEvaluationTraceEntry | EvaluationTraceLimitEntry)[];\n}\n\nexport interface ResolveStepConfigParams {\n  readonly jobKey: string;\n  readonly step: WorkflowModelStep;\n  readonly workflowEnv: WorkflowModel['env'];\n  readonly workflowEnvTemplates: WorkflowEnvTemplates | undefined;\n  readonly jobEnv: WorkflowModelJob['env'];\n  readonly jobEnvTemplates: WorkflowEnvTemplates | undefined;\n  readonly context: WorkflowExpressionEvaluationContext;\n  readonly site: AvailabilitySite;\n  readonly resolveAgentDefaults: AgentDefaultsResolver;\n  readonly definitionId: string;\n  readonly agentToolContext?: AgentToolMaterializationContext | undefined;\n  readonly agentToolSnapshot?: AgentToolMaterializationSnapshot | null | undefined;\n}\n\ntype BuildStepConfigParams = ResolveStepConfigParams & {readonly mode: StepConfigMode};\n\ninterface BuiltStepConfig {\n  readonly config: Record<string, unknown>;\n  readonly configPlan: StepConfigDispatchPlan | null;\n  readonly diagnostics: readonly WorkflowStepTemplateDiagnostic[];\n  readonly trace: readonly WorkflowStepEvaluationTraceEntry[];\n  readonly hasTemplates: boolean;\n}\n\nexport function resolveStepConfig(params: ResolveStepConfigParams): ResolvedStepConfig {\n  const context = evaluationContext(params);\n  const effective = buildStepConfig({...params, context, mode: 'effective'});\n  const authoredConfig = effective.hasTemplates\n    ? buildStepConfig({...params, context, mode: 'authored'}).config\n    : null;\n  const name = resolveStepName(params.step, context, params.definitionId);\n\n  return {\n    config: effective.config,\n    configPlan: effective.configPlan,\n    authoredConfig,\n    ...(name.value === undefined || name.value === '' ? {} : {name: name.value}),\n    diagnostics: [...effective.diagnostics, ...name.diagnostics],\n    trace: capTraceEntries([...effective.trace, ...name.trace]),\n  };\n}\n\nfunction buildStepConfig(\n  params: Omit<BuildStepConfigParams, 'context'> & {readonly context: WorkflowEvaluationContext},\n): BuiltStepConfig {\n  const gate = gateConfigForStep(params.step);\n  const outputs = outputsConfigForStep(params.step);\n  const runStep = runStepOrNull(params.step);\n  const isRunStep = runStep !== null;\n\n  if (isRunStep) {\n    const run = resolveRunStepConfig({...params, step: runStep});\n    return {\n      config: {...run.config, ...gate, ...outputs},\n      configPlan: run.configPlan,\n      diagnostics: run.diagnostics,\n      trace: run.trace,\n      hasTemplates: run.hasTemplates,\n    };\n  }\n\n  const agentStep = agentStepOrNull(params.step);\n  if (agentStep === null) throw new Error(`Unsupported workflow step kind: ${params.step.kind}`);\n\n  const agent = resolveAgentStepConfig({...params, step: agentStep});\n  return {\n    config: {...agent.config, ...gate, ...outputs},\n    configPlan: agent.configPlan,\n    diagnostics: agent.diagnostics,\n    trace: agent.trace,\n    hasTemplates: agent.hasTemplates,\n  };\n}\n\nfunction evaluationContext(params: {\n  readonly context: WorkflowExpressionEvaluationContext;\n  readonly site: AvailabilitySite;\n}): WorkflowEvaluationContext {\n  return {site: params.site, values: params.context};\n}\n\nfunction runStepOrNull(step: WorkflowModelStep): WorkflowModelRunStep | null {\n  const isRunStep = step.kind === 'run';\n  return isRunStep ? step : null;\n}\n\nfunction agentStepOrNull(step: WorkflowModelStep): WorkflowModelAgentStep | null {\n  const isAgentStep = step.kind === 'agent';\n  return isAgentStep ? step : null;\n}\n\nfunction gateConfigForStep(step: WorkflowModelStep): Record<string, unknown> {\n  const hasGate = step.gate !== undefined;\n  return hasGate ? {gate: stepGateConfig(step.gate)} : {};\n}\n\nfunction outputsConfigForStep(step: WorkflowModelStep): Record<string, unknown> {\n  const hasOutputs = step.outputs !== undefined;\n  return hasOutputs ? {outputs: step.outputs} : {};\n}\n\nfunction resolveStepName(\n  step: WorkflowModelStep,\n  context: WorkflowEvaluationContext,\n  definitionId: string,\n): {\n  readonly value: string | undefined;\n  readonly diagnostics: readonly WorkflowStepTemplateDiagnostic[];\n  readonly trace: readonly WorkflowStepEvaluationTraceEntry[];\n} {\n  const hasName = step.name !== undefined;\n  if (!hasName) return {value: undefined, diagnostics: [], trace: []};\n\n  const hasNameTemplate = step.templates?.name !== undefined;\n  if (!hasNameTemplate) return {value: step.name, diagnostics: [], trace: []};\n\n  const resolved = freezeStepField({\n    field: 'step.name',\n    template: {segments: step.templates.name},\n    context,\n    definitionId,\n    errorField: 'step.name',\n  });\n  return {\n    value: resolved.value,\n    diagnostics: resolved.diagnostics.map((diagnostic) => ({...diagnostic, field: 'step.name'})),\n    trace: resolved.trace.map((entry) => ({...entry, field: 'step.name'})),\n  };\n}\n\nfunction stepGateConfig(gate: NonNullable<WorkflowModelStep['gate']>): Record<string, unknown> {\n  const hasSuccess = gate.success !== undefined;\n  const hasOnFailure = gate.onFailure !== undefined;\n  const hasOnFailureFeedback = gate.onFailure?.feedback !== undefined;\n  const hasOnFailureFeedbackTemplate = gate.onFailure?.feedbackTemplate !== undefined;\n\n  return {\n    ...(hasSuccess\n      ? {\n          success: {\n            language: gate.success.language,\n            check: gate.success.check,\n            source: gate.success.source,\n          },\n        }\n      : {}),\n    ...(hasOnFailure\n      ? {\n          on_failure: {\n            restart_from: gate.onFailure.restartFrom,\n            ...(hasOnFailureFeedback ? {feedback: gate.onFailure.feedback} : {}),\n            ...(hasOnFailureFeedbackTemplate\n              ? {feedback_template: {segments: gate.onFailure.feedbackTemplate}}\n              : {}),\n          },\n        }\n      : {}),\n  };\n}\n"],"names":["capTraceEntries","resolveAgentStepConfig","freezeStepField","resolveRunStepConfig","resolveStepConfig","params","context","evaluationContext","effective","buildStepConfig","mode","authoredConfig","hasTemplates","config","name","resolveStepName","step","definitionId","configPlan","value","undefined","diagnostics","trace","gate","gateConfigForStep","outputs","outputsConfigForStep","runStep","runStepOrNull","isRunStep","run","agentStep","agentStepOrNull","Error","kind","agent","site","values","isAgentStep","hasGate","stepGateConfig","hasOutputs","hasName","hasNameTemplate","templates","resolved","field","template","segments","errorField","map","diagnostic","entry","hasSuccess","success","hasOnFailure","onFailure","hasOnFailureFeedback","feedback","hasOnFailureFeedbackTemplate","feedbackTemplate","language","check","source","on_failure","restart_from","restartFrom","feedback_template"],"mappings":"AAEA,SAEEA,eAAe,QAGV,sBAAsB;AAM7B,SAAQC,sBAAsB,QAAO,aAAa;AAClD,SACEC,eAAe,QAIV,cAAc;AACrB,SAAQC,oBAAoB,QAA4B,WAAW;AA4CnE,OAAO,SAASC,kBAAkBC,MAA+B;IAC/D,MAAMC,UAAUC,kBAAkBF;IAClC,MAAMG,YAAYC,gBAAgB;QAAC,GAAGJ,MAAM;QAAEC;QAASI,MAAM;IAAW;IACxE,MAAMC,iBAAiBH,UAAUI,YAAY,GACzCH,gBAAgB;QAAC,GAAGJ,MAAM;QAAEC;QAASI,MAAM;IAAU,GAAGG,MAAM,GAC9D;IACJ,MAAMC,OAAOC,gBAAgBV,OAAOW,IAAI,EAAEV,SAASD,OAAOY,YAAY;IAEtE,OAAO;QACLJ,QAAQL,UAAUK,MAAM;QACxBK,YAAYV,UAAUU,UAAU;QAChCP;QACA,GAAIG,KAAKK,KAAK,KAAKC,aAAaN,KAAKK,KAAK,KAAK,KAAK,CAAC,IAAI;YAACL,MAAMA,KAAKK,KAAK;QAAA,CAAC;QAC3EE,aAAa;eAAIb,UAAUa,WAAW;eAAKP,KAAKO,WAAW;SAAC;QAC5DC,OAAOtB,gBAAgB;eAAIQ,UAAUc,KAAK;eAAKR,KAAKQ,KAAK;SAAC;IAC5D;AACF;AAEA,SAASb,gBACPJ,MAA8F;IAE9F,MAAMkB,OAAOC,kBAAkBnB,OAAOW,IAAI;IAC1C,MAAMS,UAAUC,qBAAqBrB,OAAOW,IAAI;IAChD,MAAMW,UAAUC,cAAcvB,OAAOW,IAAI;IACzC,MAAMa,YAAYF,YAAY;IAE9B,IAAIE,WAAW;QACb,MAAMC,MAAM3B,qBAAqB;YAAC,GAAGE,MAAM;YAAEW,MAAMW;QAAO;QAC1D,OAAO;YACLd,QAAQ;gBAAC,GAAGiB,IAAIjB,MAAM;gBAAE,GAAGU,IAAI;gBAAE,GAAGE,OAAO;YAAA;YAC3CP,YAAYY,IAAIZ,UAAU;YAC1BG,aAAaS,IAAIT,WAAW;YAC5BC,OAAOQ,IAAIR,KAAK;YAChBV,cAAckB,IAAIlB,YAAY;QAChC;IACF;IAEA,MAAMmB,YAAYC,gBAAgB3B,OAAOW,IAAI;IAC7C,IAAIe,cAAc,MAAM,MAAM,IAAIE,MAAM,CAAC,gCAAgC,EAAE5B,OAAOW,IAAI,CAACkB,IAAI,EAAE;IAE7F,MAAMC,QAAQlC,uBAAuB;QAAC,GAAGI,MAAM;QAAEW,MAAMe;IAAS;IAChE,OAAO;QACLlB,QAAQ;YAAC,GAAGsB,MAAMtB,MAAM;YAAE,GAAGU,IAAI;YAAE,GAAGE,OAAO;QAAA;QAC7CP,YAAYiB,MAAMjB,UAAU;QAC5BG,aAAac,MAAMd,WAAW;QAC9BC,OAAOa,MAAMb,KAAK;QAClBV,cAAcuB,MAAMvB,YAAY;IAClC;AACF;AAEA,SAASL,kBAAkBF,MAG1B;IACC,OAAO;QAAC+B,MAAM/B,OAAO+B,IAAI;QAAEC,QAAQhC,OAAOC,OAAO;IAAA;AACnD;AAEA,SAASsB,cAAcZ,IAAuB;IAC5C,MAAMa,YAAYb,KAAKkB,IAAI,KAAK;IAChC,OAAOL,YAAYb,OAAO;AAC5B;AAEA,SAASgB,gBAAgBhB,IAAuB;IAC9C,MAAMsB,cAActB,KAAKkB,IAAI,KAAK;IAClC,OAAOI,cAActB,OAAO;AAC9B;AAEA,SAASQ,kBAAkBR,IAAuB;IAChD,MAAMuB,UAAUvB,KAAKO,IAAI,KAAKH;IAC9B,OAAOmB,UAAU;QAAChB,MAAMiB,eAAexB,KAAKO,IAAI;IAAC,IAAI,CAAC;AACxD;AAEA,SAASG,qBAAqBV,IAAuB;IACnD,MAAMyB,aAAazB,KAAKS,OAAO,KAAKL;IACpC,OAAOqB,aAAa;QAAChB,SAAST,KAAKS,OAAO;IAAA,IAAI,CAAC;AACjD;AAEA,SAASV,gBACPC,IAAuB,EACvBV,OAAkC,EAClCW,YAAoB;IAMpB,MAAMyB,UAAU1B,KAAKF,IAAI,KAAKM;IAC9B,IAAI,CAACsB,SAAS,OAAO;QAACvB,OAAOC;QAAWC,aAAa,EAAE;QAAEC,OAAO,EAAE;IAAA;IAElE,MAAMqB,kBAAkB3B,KAAK4B,SAAS,EAAE9B,SAASM;IACjD,IAAI,CAACuB,iBAAiB,OAAO;QAACxB,OAAOH,KAAKF,IAAI;QAAEO,aAAa,EAAE;QAAEC,OAAO,EAAE;IAAA;IAE1E,MAAMuB,WAAW3C,gBAAgB;QAC/B4C,OAAO;QACPC,UAAU;YAACC,UAAUhC,KAAK4B,SAAS,CAAC9B,IAAI;QAAA;QACxCR;QACAW;QACAgC,YAAY;IACd;IACA,OAAO;QACL9B,OAAO0B,SAAS1B,KAAK;QACrBE,aAAawB,SAASxB,WAAW,CAAC6B,GAAG,CAAC,CAACC,aAAgB,CAAA;gBAAC,GAAGA,UAAU;gBAAEL,OAAO;YAAW,CAAA;QACzFxB,OAAOuB,SAASvB,KAAK,CAAC4B,GAAG,CAAC,CAACE,QAAW,CAAA;gBAAC,GAAGA,KAAK;gBAAEN,OAAO;YAAW,CAAA;IACrE;AACF;AAEA,SAASN,eAAejB,IAA4C;IAClE,MAAM8B,aAAa9B,KAAK+B,OAAO,KAAKlC;IACpC,MAAMmC,eAAehC,KAAKiC,SAAS,KAAKpC;IACxC,MAAMqC,uBAAuBlC,KAAKiC,SAAS,EAAEE,aAAatC;IAC1D,MAAMuC,+BAA+BpC,KAAKiC,SAAS,EAAEI,qBAAqBxC;IAE1E,OAAO;QACL,GAAIiC,aACA;YACEC,SAAS;gBACPO,UAAUtC,KAAK+B,OAAO,CAACO,QAAQ;gBAC/BC,OAAOvC,KAAK+B,OAAO,CAACQ,KAAK;gBACzBC,QAAQxC,KAAK+B,OAAO,CAACS,MAAM;YAC7B;QACF,IACA,CAAC,CAAC;QACN,GAAIR,eACA;YACES,YAAY;gBACVC,cAAc1C,KAAKiC,SAAS,CAACU,WAAW;gBACxC,GAAIT,uBAAuB;oBAACC,UAAUnC,KAAKiC,SAAS,CAACE,QAAQ;gBAAA,IAAI,CAAC,CAAC;gBACnE,GAAIC,+BACA;oBAACQ,mBAAmB;wBAACnB,UAAUzB,KAAKiC,SAAS,CAACI,gBAAgB;oBAAA;gBAAC,IAC/D,CAAC,CAAC;YACR;QACF,IACA,CAAC,CAAC;IACR;AACF"}

package/dist/core/step-config/run.d.ts

@@ -0,0 +1,39 @@
+import type { WorkflowModel } from '@shipfox/api-definitions';
+import { type ResolvedField } from '@shipfox/expression';
+import type { PersistedEvaluationTraceEntry, StepConfigDispatchPlan } from '#core/entities/step.js';
+import { type WorkflowStepEvaluationTraceEntry, type WorkflowStepTemplateDiagnostic } from './fields.js';
+import type { WorkflowEvaluationContext } from './workflow-evaluation-context.js';
+type WorkflowModelJob = WorkflowModel['jobs'][number];
+type WorkflowModelStep = WorkflowModelJob['steps'][number];
+type WorkflowModelRunStep = Extract<WorkflowModelStep, {
+    kind: 'run';
+}>;
+export type StepConfigMode = 'effective' | 'authored';
+export interface ResolveRunStepConfigParams {
+    readonly step: WorkflowModelRunStep;
+    readonly workflowEnv: WorkflowModel['env'];
+    readonly workflowEnvTemplates: WorkflowEnvTemplates | undefined;
+    readonly jobEnv: WorkflowModelJob['env'];
+    readonly jobEnvTemplates: WorkflowEnvTemplates | undefined;
+    readonly context: WorkflowEvaluationContext;
+    readonly mode: StepConfigMode;
+    readonly definitionId: string;
+}
+type WorkflowEnvTemplates = Readonly<Record<string, ResolvedField['segments']>>;
+export interface RunStepConfig {
+    readonly config: Record<string, unknown>;
+    readonly configPlan: StepConfigDispatchPlan | null;
+    readonly diagnostics: readonly WorkflowStepTemplateDiagnostic[];
+    readonly trace: readonly WorkflowStepEvaluationTraceEntry[];
+    readonly hasTemplates: boolean;
+}
+export declare function resolveRunStepConfig(params: ResolveRunStepConfigParams): RunStepConfig;
+export declare function completeRunDispatchConfig(params: {
+    readonly config: Record<string, unknown>;
+    readonly plan: StepConfigDispatchPlan;
+    readonly context: WorkflowEvaluationContext;
+    readonly definitionId: string;
+    readonly trace: PersistedEvaluationTraceEntry[];
+}): void;
+export {};
+//# sourceMappingURL=run.d.ts.map

package/dist/core/step-config/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/core/step-config/run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,0BAA0B,CAAC;AAO5D,OAAO,EAKL,KAAK,aAAa,EAInB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAC,6BAA6B,EAAE,sBAAsB,EAAC,MAAM,wBAAwB,CAAC;AAElG,OAAO,EAIL,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACpC,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,kCAAkC,CAAC;AAEhF,KAAK,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AACtD,KAAK,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,KAAK,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAC,IAAI,EAAE,KAAK,CAAA;CAAC,CAAC,CAAC;AAEtE,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,UAAU,CAAC;AAOtD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,KAAK,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,SAAS,gCAAgC,EAAE,CAAC;IAC5D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,0BAA0B,GAAG,aAAa,CAyBtF;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,6BAA6B,EAAE,CAAC;CACjD,GAAG,IAAI,CAoCP"}

package/dist/core/step-config/run.js

@@ -0,0 +1,360 @@
+import { materializedSecretBindingSchema, secretStoreSchema } from '@shipfox/api-secrets-dto';
+import { analyzeContextKeyAccess, evaluationTraceEntry, hoistPlannedRunCommand, runnerFillTarget, UnsafeRunInterpolationError } from '@shipfox/expression';
+import { InterpolationUnresolvableError } from '#core/errors.js';
+import { resolveStepField, stepConfigInterpolationError } from './fields.js';
+export function resolveRunStepConfig(params) {
+    const env = winningEnv(params);
+    const envResolution = resolveEnv(env, params.context, params.mode, params.definitionId);
+    const commandResolution = resolveCommand({
+        step: params.step,
+        envKeys: [
+            ...Object.keys(envResolution.env),
+            ...Object.keys(envResolution.configPlan)
+        ],
+        context: params.context,
+        mode: params.mode,
+        definitionId: params.definitionId
+    });
+    const mergedEnv = {
+        ...envResolution.env,
+        ...commandResolution.env
+    };
+    const hasEnvConfig = Object.keys(mergedEnv).length > 0;
+    const envConfig = hasEnvConfig ? {
+        env: mergedEnv
+    } : {};
+    const planEnv = {
+        ...envResolution.configPlan,
+        ...commandResolution.configPlan
+    };
+    const hasConfigPlan = Object.keys(planEnv).length > 0;
+    const configPlan = hasConfigPlan ? {
+        env: planEnv
+    } : null;
+    const hasTemplates = envResolution.hasTemplates || commandResolution.hasTemplate;
+    return {
+        config: {
+            run: commandResolution.command,
+            ...envConfig
+        },
+        configPlan,
+        diagnostics: [
+            ...envResolution.diagnostics,
+            ...commandResolution.diagnostics
+        ],
+        trace: [
+            ...envResolution.trace,
+            ...commandResolution.trace
+        ],
+        hasTemplates
+    };
+}
+export function completeRunDispatchConfig(params) {
+    const env = {
+        ...readConfigEnv(params.config)
+    };
+    const secretBindings = [];
+    if (params.plan.run !== undefined) {
+        const resolved = completeRunCommand({
+            field: params.plan.run,
+            context: params.context,
+            definitionId: params.definitionId,
+            reservedNames: Object.keys(env),
+            trace: params.trace
+        });
+        params.config.run = resolved.command;
+        Object.assign(env, resolved.env);
+        secretBindings.push(...resolved.secretBindings);
+    }
+    if (params.plan.env !== undefined) {
+        for (const [key, field] of Object.entries(params.plan.env)){
+            const completed = completeDispatchField({
+                field: 'env.value',
+                traceField: 'env',
+                errorField: 'env',
+                template: field,
+                context: params.context,
+                definitionId: params.definitionId,
+                envKey: key,
+                trace: params.trace
+            });
+            if (completed.kind === 'binding') secretBindings.push(completed.binding);
+            else env[key] = completed.value;
+        }
+    }
+    if (Object.keys(env).length > 0) params.config.env = env;
+    if (secretBindings.length > 0) params.config.secret_bindings = secretBindings;
+}
+function completeRunCommand(params) {
+    const hoisted = hoistPlannedRunCommand({
+        field: params.field,
+        reservedNames: params.reservedNames
+    });
+    const env = {};
+    const secretBindings = [];
+    for (const binding of hoisted.bindings){
+        const completed = completeDispatchField({
+            field: 'run',
+            traceField: 'run',
+            errorField: 'run',
+            template: {
+                segments: [
+                    binding.segment
+                ]
+            },
+            context: params.context,
+            definitionId: params.definitionId,
+            envKey: binding.name,
+            trace: params.trace
+        });
+        if (completed.kind === 'binding') secretBindings.push(completed.binding);
+        else env[binding.name] = completed.value;
+    }
+    return {
+        command: hoisted.command,
+        env,
+        secretBindings
+    };
+}
+function completeDispatchField(params) {
+    const resolved = resolveStepField(params);
+    params.trace.push(...tagTrace(resolved.trace, params.traceField, params.envKey));
+    if (resolved.kind === 'frozen') return {
+        kind: 'value',
+        value: resolved.value
+    };
+    if (params.envKey !== undefined && containsOnlyRunnerSecretSegments(resolved.field)) {
+        params.trace.push(...runnerSecretReferenceTrace(resolved.field, params.traceField, params.envKey));
+        return {
+            kind: 'binding',
+            binding: secretBindingFromField(params.envKey, resolved.field)
+        };
+    }
+    const source = resolved.field.segments.find((segment)=>segment.kind === 'deferred')?.expression.source;
+    throw new InterpolationUnresolvableError(params.definitionId, {
+        field: params.errorField,
+        source: source ?? params.field,
+        ...params.envKey === undefined ? {} : {
+            envKey: params.envKey
+        }
+    });
+}
+function containsOnlyRunnerSecretSegments(field) {
+    return field.segments.every((segment)=>{
+        if (segment.kind === 'literal') return true;
+        return segment.fillTarget === runnerFillTarget && segment.roots.length === 1 && segment.roots[0] === 'secrets';
+    });
+}
+function secretBindingFromField(target, field) {
+    const binding = {
+        target,
+        segments: field.segments.map(secretBindingSegment)
+    };
+    return materializedSecretBindingSchema.parse(binding);
+}
+function secretBindingSegment(segment) {
+    if (segment.kind === 'literal') return {
+        kind: 'literal',
+        value: segment.value
+    };
+    const keyAccess = analyzeContextKeyAccess(segment.expression);
+    const reference = keyAccess.references.find((candidate)=>candidate.root === 'secrets');
+    if (reference === undefined) {
+        throw new Error(`Runner secret segment did not contain a secret reference: ${segment.expression.source}`);
+    }
+    return {
+        kind: 'secret',
+        store: secretStoreSchema.parse(reference.store ?? 'local'),
+        key: reference.key
+    };
+}
+function resolveCommand(params) {
+    const template = params.step.templates?.command;
+    const hasTemplate = template !== undefined;
+    if (!hasTemplate) {
+        return {
+            command: params.step.command.value,
+            env: {},
+            configPlan: {},
+            diagnostics: [],
+            trace: [],
+            hasTemplate: false
+        };
+    }
+    const usesAuthoredMode = params.mode === 'authored';
+    if (usesAuthoredMode) {
+        return {
+            command: params.step.command.value,
+            env: {},
+            configPlan: {},
+            diagnostics: [],
+            trace: [],
+            hasTemplate: true
+        };
+    }
+    const env = {};
+    const configPlan = {};
+    const diagnostics = [];
+    const trace = [];
+    const hoisted = hoistCommand(template, params.envKeys, params.definitionId);
+    for (const binding of hoisted.bindings){
+        const resolved = resolveStepField({
+            field: 'run',
+            template: {
+                segments: [
+                    binding.segment
+                ]
+            },
+            context: params.context,
+            definitionId: params.definitionId,
+            errorField: 'run'
+        });
+        const resolvedToDispatchPlan = resolved.kind === 'residual';
+        if (resolvedToDispatchPlan) configPlan[binding.name] = resolved.field;
+        else env[binding.name] = resolved.value;
+        diagnostics.push(...resolved.diagnostics.map((diagnostic)=>({
+                ...diagnostic,
+                field: 'run'
+            })));
+        trace.push(...tagTrace(resolved.trace, 'run'));
+    }
+    return {
+        command: hoisted.command,
+        env,
+        configPlan,
+        diagnostics,
+        trace,
+        hasTemplate: true
+    };
+}
+function hoistCommand(template, reservedNames, definitionId) {
+    try {
+        return hoistPlannedRunCommand({
+            field: {
+                segments: template
+            },
+            reservedNames
+        });
+    } catch (error) {
+        if (error instanceof UnsafeRunInterpolationError) {
+            throw stepConfigInterpolationError({
+                definitionId,
+                errorField: 'run'
+            }, error);
+        }
+        throw error;
+    }
+}
+function resolveEnv(env, context, mode, definitionId) {
+    const resolvedEnv = {};
+    const configPlan = {};
+    const diagnostics = [];
+    const trace = [];
+    let hasTemplates = false;
+    for (const [key, entry] of Object.entries(env)){
+        const template = entry.template;
+        const hasTemplate = template !== undefined;
+        const usesAuthoredMode = mode === 'authored';
+        const shouldUseAuthoredValue = !hasTemplate || usesAuthoredMode;
+        if (shouldUseAuthoredValue) {
+            resolvedEnv[key] = entry.value;
+            hasTemplates ||= hasTemplate;
+            continue;
+        }
+        hasTemplates = true;
+        const resolved = resolveStepField({
+            field: 'env.value',
+            template: {
+                segments: template
+            },
+            context,
+            definitionId,
+            errorField: 'env',
+            envKey: key
+        });
+        const resolvedToDispatchPlan = resolved.kind === 'residual';
+        if (resolvedToDispatchPlan) configPlan[key] = resolved.field;
+        else resolvedEnv[key] = resolved.value;
+        diagnostics.push(...resolved.diagnostics.map((diagnostic)=>({
+                ...diagnostic,
+                field: 'env',
+                envKey: key
+            })));
+        trace.push(...tagTrace(resolved.trace, 'env', key));
+    }
+    return {
+        env: resolvedEnv,
+        configPlan,
+        diagnostics,
+        trace,
+        hasTemplates
+    };
+}
+function tagTrace(trace, field, envKey) {
+    return trace.map((entry)=>({
+            ...entry,
+            field,
+            ...envKey === undefined ? {} : {
+                envKey
+            }
+        }));
+}
+function runnerSecretReferenceTrace(field, stepField, envKey) {
+    return field.segments.flatMap((segment)=>{
+        if (segment.kind === 'literal') return [];
+        return [
+            {
+                ...evaluationTraceEntry({
+                    expression: segment.expression.source,
+                    roots: segment.roots,
+                    fillTarget: runnerFillTarget,
+                    evaluatedAt: 'step-dispatch',
+                    reference: true
+                }),
+                field: stepField,
+                envKey
+            }
+        ];
+    });
+}
+function winningEnv(params) {
+    if (params.step.kind !== 'run') return {};
+    return mergeEnvLayers({
+        env: params.workflowEnv,
+        templates: params.workflowEnvTemplates
+    }, {
+        env: params.jobEnv,
+        templates: params.jobEnvTemplates
+    }, {
+        env: params.step.env,
+        templates: params.step.templates?.env
+    });
+}
+function mergeEnvLayers(...layers) {
+    const merged = {};
+    for (const layer of layers){
+        for (const [key, value] of Object.entries(layer.env ?? {})){
+            const template = layer.templates?.[key];
+            const hasTemplate = template !== undefined;
+            merged[key] = hasTemplate ? {
+                value,
+                template
+            } : {
+                value
+            };
+        }
+    }
+    return merged;
+}
+function readConfigEnv(config) {
+    const env = config.env;
+    if (env === null || typeof env !== 'object' || Array.isArray(env)) return {};
+    return Object.fromEntries(Object.entries(env).flatMap(([key, value])=>typeof value === 'string' ? [
+            [
+                key,
+                value
+            ]
+        ] : []));
+}
+
+//# sourceMappingURL=run.js.map

package/dist/core/step-config/run.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/step-config/run.ts"],"sourcesContent":["import type {WorkflowModel} from '@shipfox/api-definitions';\nimport {\n  type MaterializedSecretBindingDto,\n  materializedSecretBindingSchema,\n  type SecretBindingSegmentDto,\n  secretStoreSchema,\n} from '@shipfox/api-secrets-dto';\nimport {\n  analyzeContextKeyAccess,\n  type EvaluationTraceEntry,\n  evaluationTraceEntry,\n  hoistPlannedRunCommand,\n  type ResolvedField,\n  type ResolvedFieldSegment,\n  runnerFillTarget,\n  UnsafeRunInterpolationError,\n} from '@shipfox/expression';\nimport type {PersistedEvaluationTraceEntry, StepConfigDispatchPlan} from '#core/entities/step.js';\nimport {InterpolationUnresolvableError} from '#core/errors.js';\nimport {\n  resolveStepField,\n  type StepConfigField,\n  stepConfigInterpolationError,\n  type WorkflowStepEvaluationTraceEntry,\n  type WorkflowStepTemplateDiagnostic,\n} from './fields.js';\nimport type {WorkflowEvaluationContext} from './workflow-evaluation-context.js';\n\ntype WorkflowModelJob = WorkflowModel['jobs'][number];\ntype WorkflowModelStep = WorkflowModelJob['steps'][number];\ntype WorkflowModelRunStep = Extract<WorkflowModelStep, {kind: 'run'}>;\n\nexport type StepConfigMode = 'effective' | 'authored';\n\ninterface WinningEnvValue {\n  readonly value: string;\n  readonly template?: ResolvedField['segments'];\n}\n\nexport interface ResolveRunStepConfigParams {\n  readonly step: WorkflowModelRunStep;\n  readonly workflowEnv: WorkflowModel['env'];\n  readonly workflowEnvTemplates: WorkflowEnvTemplates | undefined;\n  readonly jobEnv: WorkflowModelJob['env'];\n  readonly jobEnvTemplates: WorkflowEnvTemplates | undefined;\n  readonly context: WorkflowEvaluationContext;\n  readonly mode: StepConfigMode;\n  readonly definitionId: string;\n}\n\ntype WorkflowEnvTemplates = Readonly<Record<string, ResolvedField['segments']>>;\n\nexport interface RunStepConfig {\n  readonly config: Record<string, unknown>;\n  readonly configPlan: StepConfigDispatchPlan | null;\n  readonly diagnostics: readonly WorkflowStepTemplateDiagnostic[];\n  readonly trace: readonly WorkflowStepEvaluationTraceEntry[];\n  readonly hasTemplates: boolean;\n}\n\nexport function resolveRunStepConfig(params: ResolveRunStepConfigParams): RunStepConfig {\n  const env = winningEnv(params);\n  const envResolution = resolveEnv(env, params.context, params.mode, params.definitionId);\n  const commandResolution = resolveCommand({\n    step: params.step,\n    envKeys: [...Object.keys(envResolution.env), ...Object.keys(envResolution.configPlan)],\n    context: params.context,\n    mode: params.mode,\n    definitionId: params.definitionId,\n  });\n  const mergedEnv = {...envResolution.env, ...commandResolution.env};\n  const hasEnvConfig = Object.keys(mergedEnv).length > 0;\n  const envConfig = hasEnvConfig ? {env: mergedEnv} : {};\n  const planEnv = {...envResolution.configPlan, ...commandResolution.configPlan};\n  const hasConfigPlan = Object.keys(planEnv).length > 0;\n  const configPlan = hasConfigPlan ? ({env: planEnv} satisfies StepConfigDispatchPlan) : null;\n  const hasTemplates = envResolution.hasTemplates || commandResolution.hasTemplate;\n\n  return {\n    config: {run: commandResolution.command, ...envConfig},\n    configPlan,\n    diagnostics: [...envResolution.diagnostics, ...commandResolution.diagnostics],\n    trace: [...envResolution.trace, ...commandResolution.trace],\n    hasTemplates,\n  };\n}\n\nexport function completeRunDispatchConfig(params: {\n  readonly config: Record<string, unknown>;\n  readonly plan: StepConfigDispatchPlan;\n  readonly context: WorkflowEvaluationContext;\n  readonly definitionId: string;\n  readonly trace: PersistedEvaluationTraceEntry[];\n}): void {\n  const env = {...readConfigEnv(params.config)};\n  const secretBindings: MaterializedSecretBindingDto[] = [];\n\n  if (params.plan.run !== undefined) {\n    const resolved = completeRunCommand({\n      field: params.plan.run,\n      context: params.context,\n      definitionId: params.definitionId,\n      reservedNames: Object.keys(env),\n      trace: params.trace,\n    });\n    params.config.run = resolved.command;\n    Object.assign(env, resolved.env);\n    secretBindings.push(...resolved.secretBindings);\n  }\n\n  if (params.plan.env !== undefined) {\n    for (const [key, field] of Object.entries(params.plan.env)) {\n      const completed = completeDispatchField({\n        field: 'env.value',\n        traceField: 'env',\n        errorField: 'env',\n        template: field,\n        context: params.context,\n        definitionId: params.definitionId,\n        envKey: key,\n        trace: params.trace,\n      });\n      if (completed.kind === 'binding') secretBindings.push(completed.binding);\n      else env[key] = completed.value;\n    }\n  }\n\n  if (Object.keys(env).length > 0) params.config.env = env;\n  if (secretBindings.length > 0) params.config.secret_bindings = secretBindings;\n}\n\nfunction completeRunCommand(params: {\n  readonly field: ResolvedField;\n  readonly context: WorkflowEvaluationContext;\n  readonly definitionId: string;\n  readonly reservedNames: Iterable<string>;\n  readonly trace: PersistedEvaluationTraceEntry[];\n}): {\n  readonly command: string;\n  readonly env: Readonly<Record<string, string>>;\n  readonly secretBindings: readonly MaterializedSecretBindingDto[];\n} {\n  const hoisted = hoistPlannedRunCommand({\n    field: params.field,\n    reservedNames: params.reservedNames,\n  });\n  const env: Record<string, string> = {};\n  const secretBindings: MaterializedSecretBindingDto[] = [];\n\n  for (const binding of hoisted.bindings) {\n    const completed = completeDispatchField({\n      field: 'run',\n      traceField: 'run',\n      errorField: 'run',\n      template: {segments: [binding.segment]},\n      context: params.context,\n      definitionId: params.definitionId,\n      envKey: binding.name,\n      trace: params.trace,\n    });\n    if (completed.kind === 'binding') secretBindings.push(completed.binding);\n    else env[binding.name] = completed.value;\n  }\n\n  return {command: hoisted.command, env, secretBindings};\n}\n\ntype CompletedDispatchField =\n  | {readonly kind: 'value'; readonly value: string}\n  | {readonly kind: 'binding'; readonly binding: MaterializedSecretBindingDto};\n\nfunction completeDispatchField(params: {\n  readonly field: 'run' | 'env.value';\n  readonly traceField: StepConfigField;\n  readonly errorField: StepConfigField;\n  readonly template: ResolvedField;\n  readonly context: WorkflowEvaluationContext;\n  readonly definitionId: string;\n  readonly envKey?: string;\n  readonly trace: PersistedEvaluationTraceEntry[];\n}): CompletedDispatchField {\n  const resolved = resolveStepField(params);\n  params.trace.push(...tagTrace(resolved.trace, params.traceField, params.envKey));\n  if (resolved.kind === 'frozen') return {kind: 'value', value: resolved.value};\n  if (params.envKey !== undefined && containsOnlyRunnerSecretSegments(resolved.field)) {\n    params.trace.push(\n      ...runnerSecretReferenceTrace(resolved.field, params.traceField, params.envKey),\n    );\n    return {\n      kind: 'binding',\n      binding: secretBindingFromField(params.envKey, resolved.field),\n    };\n  }\n\n  const source = resolved.field.segments.find((segment) => segment.kind === 'deferred')?.expression\n    .source;\n  throw new InterpolationUnresolvableError(params.definitionId, {\n    field: params.errorField,\n    source: source ?? params.field,\n    ...(params.envKey === undefined ? {} : {envKey: params.envKey}),\n  });\n}\n\nfunction containsOnlyRunnerSecretSegments(field: ResolvedField): boolean {\n  return field.segments.every((segment) => {\n    if (segment.kind === 'literal') return true;\n    return (\n      segment.fillTarget === runnerFillTarget &&\n      segment.roots.length === 1 &&\n      segment.roots[0] === 'secrets'\n    );\n  });\n}\n\nfunction secretBindingFromField(\n  target: string,\n  field: ResolvedField,\n): MaterializedSecretBindingDto {\n  const binding = {\n    target,\n    segments: field.segments.map(secretBindingSegment),\n  };\n  return materializedSecretBindingSchema.parse(binding);\n}\n\nfunction secretBindingSegment(segment: ResolvedFieldSegment): SecretBindingSegmentDto {\n  if (segment.kind === 'literal') return {kind: 'literal', value: segment.value};\n\n  const keyAccess = analyzeContextKeyAccess(segment.expression);\n  const reference = keyAccess.references.find((candidate) => candidate.root === 'secrets');\n  if (reference === undefined) {\n    throw new Error(\n      `Runner secret segment did not contain a secret reference: ${segment.expression.source}`,\n    );\n  }\n\n  return {\n    kind: 'secret',\n    store: secretStoreSchema.parse(reference.store ?? 'local'),\n    key: reference.key,\n  };\n}\n\nfunction resolveCommand(params: {\n  readonly step: WorkflowModelRunStep;\n  readonly envKeys: readonly string[];\n  readonly context: WorkflowEvaluationContext;\n  readonly mode: StepConfigMode;\n  readonly definitionId: string;\n}): {\n  readonly command: string;\n  readonly env: Readonly<Record<string, string>>;\n  readonly configPlan: Readonly<Record<string, ResolvedField>>;\n  readonly diagnostics: readonly WorkflowStepTemplateDiagnostic[];\n  readonly trace: readonly WorkflowStepEvaluationTraceEntry[];\n  readonly hasTemplate: boolean;\n} {\n  const template = params.step.templates?.command;\n  const hasTemplate = template !== undefined;\n  if (!hasTemplate) {\n    return {\n      command: params.step.command.value,\n      env: {},\n      configPlan: {},\n      diagnostics: [],\n      trace: [],\n      hasTemplate: false,\n    };\n  }\n\n  const usesAuthoredMode = params.mode === 'authored';\n  if (usesAuthoredMode) {\n    return {\n      command: params.step.command.value,\n      env: {},\n      configPlan: {},\n      diagnostics: [],\n      trace: [],\n      hasTemplate: true,\n    };\n  }\n\n  const env: Record<string, string> = {};\n  const configPlan: Record<string, ResolvedField> = {};\n  const diagnostics: WorkflowStepTemplateDiagnostic[] = [];\n  const trace: WorkflowStepEvaluationTraceEntry[] = [];\n  const hoisted = hoistCommand(template, params.envKeys, params.definitionId);\n\n  for (const binding of hoisted.bindings) {\n    const resolved = resolveStepField({\n      field: 'run',\n      template: {segments: [binding.segment]},\n      context: params.context,\n      definitionId: params.definitionId,\n      errorField: 'run',\n    });\n    const resolvedToDispatchPlan = resolved.kind === 'residual';\n    if (resolvedToDispatchPlan) configPlan[binding.name] = resolved.field;\n    else env[binding.name] = resolved.value;\n    diagnostics.push(\n      ...resolved.diagnostics.map((diagnostic) => ({...diagnostic, field: 'run' as const})),\n    );\n    trace.push(...tagTrace(resolved.trace, 'run'));\n  }\n\n  return {\n    command: hoisted.command,\n    env,\n    configPlan,\n    diagnostics,\n    trace,\n    hasTemplate: true,\n  };\n}\n\nfunction hoistCommand(\n  template: ResolvedField['segments'],\n  reservedNames: readonly string[],\n  definitionId: string,\n): ReturnType<typeof hoistPlannedRunCommand> {\n  try {\n    return hoistPlannedRunCommand({\n      field: {segments: template},\n      reservedNames,\n    });\n  } catch (error) {\n    if (error instanceof UnsafeRunInterpolationError) {\n      throw stepConfigInterpolationError({definitionId, errorField: 'run'}, error);\n    }\n    throw error;\n  }\n}\n\nfunction resolveEnv(\n  env: Readonly<Record<string, WinningEnvValue>>,\n  context: WorkflowEvaluationContext,\n  mode: StepConfigMode,\n  definitionId: string,\n): {\n  readonly env: Readonly<Record<string, string>>;\n  readonly configPlan: Readonly<Record<string, ResolvedField>>;\n  readonly diagnostics: readonly WorkflowStepTemplateDiagnostic[];\n  readonly trace: readonly WorkflowStepEvaluationTraceEntry[];\n  readonly hasTemplates: boolean;\n} {\n  const resolvedEnv: Record<string, string> = {};\n  const configPlan: Record<string, ResolvedField> = {};\n  const diagnostics: WorkflowStepTemplateDiagnostic[] = [];\n  const trace: WorkflowStepEvaluationTraceEntry[] = [];\n  let hasTemplates = false;\n\n  for (const [key, entry] of Object.entries(env)) {\n    const template = entry.template;\n    const hasTemplate = template !== undefined;\n    const usesAuthoredMode = mode === 'authored';\n    const shouldUseAuthoredValue = !hasTemplate || usesAuthoredMode;\n\n    if (shouldUseAuthoredValue) {\n      resolvedEnv[key] = entry.value;\n      hasTemplates ||= hasTemplate;\n      continue;\n    }\n\n    hasTemplates = true;\n    const resolved = resolveStepField({\n      field: 'env.value',\n      template: {segments: template},\n      context,\n      definitionId,\n      errorField: 'env',\n      envKey: key,\n    });\n    const resolvedToDispatchPlan = resolved.kind === 'residual';\n    if (resolvedToDispatchPlan) configPlan[key] = resolved.field;\n    else resolvedEnv[key] = resolved.value;\n    diagnostics.push(\n      ...resolved.diagnostics.map((diagnostic) => ({\n        ...diagnostic,\n        field: 'env' as const,\n        envKey: key,\n      })),\n    );\n    trace.push(...tagTrace(resolved.trace, 'env', key));\n  }\n\n  return {env: resolvedEnv, configPlan, diagnostics, trace, hasTemplates};\n}\n\nfunction tagTrace(\n  trace: readonly EvaluationTraceEntry[],\n  field: StepConfigField,\n  envKey?: string,\n): WorkflowStepEvaluationTraceEntry[] {\n  return trace.map((entry) => ({\n    ...entry,\n    field,\n    ...(envKey === undefined ? {} : {envKey}),\n  }));\n}\n\nfunction runnerSecretReferenceTrace(\n  field: ResolvedField,\n  stepField: StepConfigField,\n  envKey: string,\n): WorkflowStepEvaluationTraceEntry[] {\n  return field.segments.flatMap((segment) => {\n    if (segment.kind === 'literal') return [];\n    return [\n      {\n        ...evaluationTraceEntry({\n          expression: segment.expression.source,\n          roots: segment.roots,\n          fillTarget: runnerFillTarget,\n          evaluatedAt: 'step-dispatch',\n          reference: true,\n        }),\n        field: stepField,\n        envKey,\n      },\n    ];\n  });\n}\n\nfunction winningEnv(params: {\n  readonly workflowEnv: WorkflowModel['env'];\n  readonly workflowEnvTemplates: WorkflowEnvTemplates | undefined;\n  readonly jobEnv: WorkflowModelJob['env'];\n  readonly jobEnvTemplates: WorkflowEnvTemplates | undefined;\n  readonly step: WorkflowModelStep;\n}): Readonly<Record<string, WinningEnvValue>> {\n  if (params.step.kind !== 'run') return {};\n\n  return mergeEnvLayers(\n    {env: params.workflowEnv, templates: params.workflowEnvTemplates},\n    {env: params.jobEnv, templates: params.jobEnvTemplates},\n    {env: params.step.env, templates: params.step.templates?.env},\n  );\n}\n\nfunction mergeEnvLayers(\n  ...layers: readonly {\n    readonly env: Readonly<Record<string, string>> | undefined;\n    readonly templates: WorkflowEnvTemplates | undefined;\n  }[]\n): Readonly<Record<string, WinningEnvValue>> {\n  const merged: Record<string, WinningEnvValue> = {};\n\n  for (const layer of layers) {\n    for (const [key, value] of Object.entries(layer.env ?? {})) {\n      const template = layer.templates?.[key];\n      const hasTemplate = template !== undefined;\n      merged[key] = hasTemplate ? {value, template} : {value};\n    }\n  }\n\n  return merged;\n}\n\nfunction readConfigEnv(config: Record<string, unknown>): Record<string, string> {\n  const env = config.env;\n  if (env === null || typeof env !== 'object' || Array.isArray(env)) return {};\n  return Object.fromEntries(\n    Object.entries(env).flatMap(([key, value]) =>\n      typeof value === 'string' ? [[key, value]] : [],\n    ),\n  );\n}\n"],"names":["materializedSecretBindingSchema","secretStoreSchema","analyzeContextKeyAccess","evaluationTraceEntry","hoistPlannedRunCommand","runnerFillTarget","UnsafeRunInterpolationError","InterpolationUnresolvableError","resolveStepField","stepConfigInterpolationError","resolveRunStepConfig","params","env","winningEnv","envResolution","resolveEnv","context","mode","definitionId","commandResolution","resolveCommand","step","envKeys","Object","keys","configPlan","mergedEnv","hasEnvConfig","length","envConfig","planEnv","hasConfigPlan","hasTemplates","hasTemplate","config","run","command","diagnostics","trace","completeRunDispatchConfig","readConfigEnv","secretBindings","plan","undefined","resolved","completeRunCommand","field","reservedNames","assign","push","key","entries","completed","completeDispatchField","traceField","errorField","template","envKey","kind","binding","value","secret_bindings","hoisted","bindings","segments","segment","name","tagTrace","containsOnlyRunnerSecretSegments","runnerSecretReferenceTrace","secretBindingFromField","source","find","expression","every","fillTarget","roots","target","map","secretBindingSegment","parse","keyAccess","reference","references","candidate","root","Error","store","templates","usesAuthoredMode","hoistCommand","resolvedToDispatchPlan","diagnostic","error","resolvedEnv","entry","shouldUseAuthoredValue","stepField","flatMap","evaluatedAt","mergeEnvLayers","workflowEnv","workflowEnvTemplates","jobEnv","jobEnvTemplates","layers","merged","layer","Array","isArray","fromEntries"],"mappings":"AACA,SAEEA,+BAA+B,EAE/BC,iBAAiB,QACZ,2BAA2B;AAClC,SACEC,uBAAuB,EAEvBC,oBAAoB,EACpBC,sBAAsB,EAGtBC,gBAAgB,EAChBC,2BAA2B,QACtB,sBAAsB;AAE7B,SAAQC,8BAA8B,QAAO,kBAAkB;AAC/D,SACEC,gBAAgB,EAEhBC,4BAA4B,QAGvB,cAAc;AAmCrB,OAAO,SAASC,qBAAqBC,MAAkC;IACrE,MAAMC,MAAMC,WAAWF;IACvB,MAAMG,gBAAgBC,WAAWH,KAAKD,OAAOK,OAAO,EAAEL,OAAOM,IAAI,EAAEN,OAAOO,YAAY;IACtF,MAAMC,oBAAoBC,eAAe;QACvCC,MAAMV,OAAOU,IAAI;QACjBC,SAAS;eAAIC,OAAOC,IAAI,CAACV,cAAcF,GAAG;eAAMW,OAAOC,IAAI,CAACV,cAAcW,UAAU;SAAE;QACtFT,SAASL,OAAOK,OAAO;QACvBC,MAAMN,OAAOM,IAAI;QACjBC,cAAcP,OAAOO,YAAY;IACnC;IACA,MAAMQ,YAAY;QAAC,GAAGZ,cAAcF,GAAG;QAAE,GAAGO,kBAAkBP,GAAG;IAAA;IACjE,MAAMe,eAAeJ,OAAOC,IAAI,CAACE,WAAWE,MAAM,GAAG;IACrD,MAAMC,YAAYF,eAAe;QAACf,KAAKc;IAAS,IAAI,CAAC;IACrD,MAAMI,UAAU;QAAC,GAAGhB,cAAcW,UAAU;QAAE,GAAGN,kBAAkBM,UAAU;IAAA;IAC7E,MAAMM,gBAAgBR,OAAOC,IAAI,CAACM,SAASF,MAAM,GAAG;IACpD,MAAMH,aAAaM,gBAAiB;QAACnB,KAAKkB;IAAO,IAAsC;IACvF,MAAME,eAAelB,cAAckB,YAAY,IAAIb,kBAAkBc,WAAW;IAEhF,OAAO;QACLC,QAAQ;YAACC,KAAKhB,kBAAkBiB,OAAO;YAAE,GAAGP,SAAS;QAAA;QACrDJ;QACAY,aAAa;eAAIvB,cAAcuB,WAAW;eAAKlB,kBAAkBkB,WAAW;SAAC;QAC7EC,OAAO;eAAIxB,cAAcwB,KAAK;eAAKnB,kBAAkBmB,KAAK;SAAC;QAC3DN;IACF;AACF;AAEA,OAAO,SAASO,0BAA0B5B,MAMzC;IACC,MAAMC,MAAM;QAAC,GAAG4B,cAAc7B,OAAOuB,MAAM,CAAC;IAAA;IAC5C,MAAMO,iBAAiD,EAAE;IAEzD,IAAI9B,OAAO+B,IAAI,CAACP,GAAG,KAAKQ,WAAW;QACjC,MAAMC,WAAWC,mBAAmB;YAClCC,OAAOnC,OAAO+B,IAAI,CAACP,GAAG;YACtBnB,SAASL,OAAOK,OAAO;YACvBE,cAAcP,OAAOO,YAAY;YACjC6B,eAAexB,OAAOC,IAAI,CAACZ;YAC3B0B,OAAO3B,OAAO2B,KAAK;QACrB;QACA3B,OAAOuB,MAAM,CAACC,GAAG,GAAGS,SAASR,OAAO;QACpCb,OAAOyB,MAAM,CAACpC,KAAKgC,SAAShC,GAAG;QAC/B6B,eAAeQ,IAAI,IAAIL,SAASH,cAAc;IAChD;IAEA,IAAI9B,OAAO+B,IAAI,CAAC9B,GAAG,KAAK+B,WAAW;QACjC,KAAK,MAAM,CAACO,KAAKJ,MAAM,IAAIvB,OAAO4B,OAAO,CAACxC,OAAO+B,IAAI,CAAC9B,GAAG,EAAG;YAC1D,MAAMwC,YAAYC,sBAAsB;gBACtCP,OAAO;gBACPQ,YAAY;gBACZC,YAAY;gBACZC,UAAUV;gBACV9B,SAASL,OAAOK,OAAO;gBACvBE,cAAcP,OAAOO,YAAY;gBACjCuC,QAAQP;gBACRZ,OAAO3B,OAAO2B,KAAK;YACrB;YACA,IAAIc,UAAUM,IAAI,KAAK,WAAWjB,eAAeQ,IAAI,CAACG,UAAUO,OAAO;iBAClE/C,GAAG,CAACsC,IAAI,GAAGE,UAAUQ,KAAK;QACjC;IACF;IAEA,IAAIrC,OAAOC,IAAI,CAACZ,KAAKgB,MAAM,GAAG,GAAGjB,OAAOuB,MAAM,CAACtB,GAAG,GAAGA;IACrD,IAAI6B,eAAeb,MAAM,GAAG,GAAGjB,OAAOuB,MAAM,CAAC2B,eAAe,GAAGpB;AACjE;AAEA,SAASI,mBAAmBlC,MAM3B;IAKC,MAAMmD,UAAU1D,uBAAuB;QACrC0C,OAAOnC,OAAOmC,KAAK;QACnBC,eAAepC,OAAOoC,aAAa;IACrC;IACA,MAAMnC,MAA8B,CAAC;IACrC,MAAM6B,iBAAiD,EAAE;IAEzD,KAAK,MAAMkB,WAAWG,QAAQC,QAAQ,CAAE;QACtC,MAAMX,YAAYC,sBAAsB;YACtCP,OAAO;YACPQ,YAAY;YACZC,YAAY;YACZC,UAAU;gBAACQ,UAAU;oBAACL,QAAQM,OAAO;iBAAC;YAAA;YACtCjD,SAASL,OAAOK,OAAO;YACvBE,cAAcP,OAAOO,YAAY;YACjCuC,QAAQE,QAAQO,IAAI;YACpB5B,OAAO3B,OAAO2B,KAAK;QACrB;QACA,IAAIc,UAAUM,IAAI,KAAK,WAAWjB,eAAeQ,IAAI,CAACG,UAAUO,OAAO;aAClE/C,GAAG,CAAC+C,QAAQO,IAAI,CAAC,GAAGd,UAAUQ,KAAK;IAC1C;IAEA,OAAO;QAACxB,SAAS0B,QAAQ1B,OAAO;QAAExB;QAAK6B;IAAc;AACvD;AAMA,SAASY,sBAAsB1C,MAS9B;IACC,MAAMiC,WAAWpC,iBAAiBG;IAClCA,OAAO2B,KAAK,CAACW,IAAI,IAAIkB,SAASvB,SAASN,KAAK,EAAE3B,OAAO2C,UAAU,EAAE3C,OAAO8C,MAAM;IAC9E,IAAIb,SAASc,IAAI,KAAK,UAAU,OAAO;QAACA,MAAM;QAASE,OAAOhB,SAASgB,KAAK;IAAA;IAC5E,IAAIjD,OAAO8C,MAAM,KAAKd,aAAayB,iCAAiCxB,SAASE,KAAK,GAAG;QACnFnC,OAAO2B,KAAK,CAACW,IAAI,IACZoB,2BAA2BzB,SAASE,KAAK,EAAEnC,OAAO2C,UAAU,EAAE3C,OAAO8C,MAAM;QAEhF,OAAO;YACLC,MAAM;YACNC,SAASW,uBAAuB3D,OAAO8C,MAAM,EAAEb,SAASE,KAAK;QAC/D;IACF;IAEA,MAAMyB,SAAS3B,SAASE,KAAK,CAACkB,QAAQ,CAACQ,IAAI,CAAC,CAACP,UAAYA,QAAQP,IAAI,KAAK,aAAae,WACpFF;IACH,MAAM,IAAIhE,+BAA+BI,OAAOO,YAAY,EAAE;QAC5D4B,OAAOnC,OAAO4C,UAAU;QACxBgB,QAAQA,UAAU5D,OAAOmC,KAAK;QAC9B,GAAInC,OAAO8C,MAAM,KAAKd,YAAY,CAAC,IAAI;YAACc,QAAQ9C,OAAO8C,MAAM;QAAA,CAAC;IAChE;AACF;AAEA,SAASW,iCAAiCtB,KAAoB;IAC5D,OAAOA,MAAMkB,QAAQ,CAACU,KAAK,CAAC,CAACT;QAC3B,IAAIA,QAAQP,IAAI,KAAK,WAAW,OAAO;QACvC,OACEO,QAAQU,UAAU,KAAKtE,oBACvB4D,QAAQW,KAAK,CAAChD,MAAM,KAAK,KACzBqC,QAAQW,KAAK,CAAC,EAAE,KAAK;IAEzB;AACF;AAEA,SAASN,uBACPO,MAAc,EACd/B,KAAoB;IAEpB,MAAMa,UAAU;QACdkB;QACAb,UAAUlB,MAAMkB,QAAQ,CAACc,GAAG,CAACC;IAC/B;IACA,OAAO/E,gCAAgCgF,KAAK,CAACrB;AAC/C;AAEA,SAASoB,qBAAqBd,OAA6B;IACzD,IAAIA,QAAQP,IAAI,KAAK,WAAW,OAAO;QAACA,MAAM;QAAWE,OAAOK,QAAQL,KAAK;IAAA;IAE7E,MAAMqB,YAAY/E,wBAAwB+D,QAAQQ,UAAU;IAC5D,MAAMS,YAAYD,UAAUE,UAAU,CAACX,IAAI,CAAC,CAACY,YAAcA,UAAUC,IAAI,KAAK;IAC9E,IAAIH,cAAcvC,WAAW;QAC3B,MAAM,IAAI2C,MACR,CAAC,0DAA0D,EAAErB,QAAQQ,UAAU,CAACF,MAAM,EAAE;IAE5F;IAEA,OAAO;QACLb,MAAM;QACN6B,OAAOtF,kBAAkB+E,KAAK,CAACE,UAAUK,KAAK,IAAI;QAClDrC,KAAKgC,UAAUhC,GAAG;IACpB;AACF;AAEA,SAAS9B,eAAeT,MAMvB;IAQC,MAAM6C,WAAW7C,OAAOU,IAAI,CAACmE,SAAS,EAAEpD;IACxC,MAAMH,cAAcuB,aAAab;IACjC,IAAI,CAACV,aAAa;QAChB,OAAO;YACLG,SAASzB,OAAOU,IAAI,CAACe,OAAO,CAACwB,KAAK;YAClChD,KAAK,CAAC;YACNa,YAAY,CAAC;YACbY,aAAa,EAAE;YACfC,OAAO,EAAE;YACTL,aAAa;QACf;IACF;IAEA,MAAMwD,mBAAmB9E,OAAOM,IAAI,KAAK;IACzC,IAAIwE,kBAAkB;QACpB,OAAO;YACLrD,SAASzB,OAAOU,IAAI,CAACe,OAAO,CAACwB,KAAK;YAClChD,KAAK,CAAC;YACNa,YAAY,CAAC;YACbY,aAAa,EAAE;YACfC,OAAO,EAAE;YACTL,aAAa;QACf;IACF;IAEA,MAAMrB,MAA8B,CAAC;IACrC,MAAMa,aAA4C,CAAC;IACnD,MAAMY,cAAgD,EAAE;IACxD,MAAMC,QAA4C,EAAE;IACpD,MAAMwB,UAAU4B,aAAalC,UAAU7C,OAAOW,OAAO,EAAEX,OAAOO,YAAY;IAE1E,KAAK,MAAMyC,WAAWG,QAAQC,QAAQ,CAAE;QACtC,MAAMnB,WAAWpC,iBAAiB;YAChCsC,OAAO;YACPU,UAAU;gBAACQ,UAAU;oBAACL,QAAQM,OAAO;iBAAC;YAAA;YACtCjD,SAASL,OAAOK,OAAO;YACvBE,cAAcP,OAAOO,YAAY;YACjCqC,YAAY;QACd;QACA,MAAMoC,yBAAyB/C,SAASc,IAAI,KAAK;QACjD,IAAIiC,wBAAwBlE,UAAU,CAACkC,QAAQO,IAAI,CAAC,GAAGtB,SAASE,KAAK;aAChElC,GAAG,CAAC+C,QAAQO,IAAI,CAAC,GAAGtB,SAASgB,KAAK;QACvCvB,YAAYY,IAAI,IACXL,SAASP,WAAW,CAACyC,GAAG,CAAC,CAACc,aAAgB,CAAA;gBAAC,GAAGA,UAAU;gBAAE9C,OAAO;YAAc,CAAA;QAEpFR,MAAMW,IAAI,IAAIkB,SAASvB,SAASN,KAAK,EAAE;IACzC;IAEA,OAAO;QACLF,SAAS0B,QAAQ1B,OAAO;QACxBxB;QACAa;QACAY;QACAC;QACAL,aAAa;IACf;AACF;AAEA,SAASyD,aACPlC,QAAmC,EACnCT,aAAgC,EAChC7B,YAAoB;IAEpB,IAAI;QACF,OAAOd,uBAAuB;YAC5B0C,OAAO;gBAACkB,UAAUR;YAAQ;YAC1BT;QACF;IACF,EAAE,OAAO8C,OAAO;QACd,IAAIA,iBAAiBvF,6BAA6B;YAChD,MAAMG,6BAA6B;gBAACS;gBAAcqC,YAAY;YAAK,GAAGsC;QACxE;QACA,MAAMA;IACR;AACF;AAEA,SAAS9E,WACPH,GAA8C,EAC9CI,OAAkC,EAClCC,IAAoB,EACpBC,YAAoB;IAQpB,MAAM4E,cAAsC,CAAC;IAC7C,MAAMrE,aAA4C,CAAC;IACnD,MAAMY,cAAgD,EAAE;IACxD,MAAMC,QAA4C,EAAE;IACpD,IAAIN,eAAe;IAEnB,KAAK,MAAM,CAACkB,KAAK6C,MAAM,IAAIxE,OAAO4B,OAAO,CAACvC,KAAM;QAC9C,MAAM4C,WAAWuC,MAAMvC,QAAQ;QAC/B,MAAMvB,cAAcuB,aAAab;QACjC,MAAM8C,mBAAmBxE,SAAS;QAClC,MAAM+E,yBAAyB,CAAC/D,eAAewD;QAE/C,IAAIO,wBAAwB;YAC1BF,WAAW,CAAC5C,IAAI,GAAG6C,MAAMnC,KAAK;YAC9B5B,iBAAiBC;YACjB;QACF;QAEAD,eAAe;QACf,MAAMY,WAAWpC,iBAAiB;YAChCsC,OAAO;YACPU,UAAU;gBAACQ,UAAUR;YAAQ;YAC7BxC;YACAE;YACAqC,YAAY;YACZE,QAAQP;QACV;QACA,MAAMyC,yBAAyB/C,SAASc,IAAI,KAAK;QACjD,IAAIiC,wBAAwBlE,UAAU,CAACyB,IAAI,GAAGN,SAASE,KAAK;aACvDgD,WAAW,CAAC5C,IAAI,GAAGN,SAASgB,KAAK;QACtCvB,YAAYY,IAAI,IACXL,SAASP,WAAW,CAACyC,GAAG,CAAC,CAACc,aAAgB,CAAA;gBAC3C,GAAGA,UAAU;gBACb9C,OAAO;gBACPW,QAAQP;YACV,CAAA;QAEFZ,MAAMW,IAAI,IAAIkB,SAASvB,SAASN,KAAK,EAAE,OAAOY;IAChD;IAEA,OAAO;QAACtC,KAAKkF;QAAarE;QAAYY;QAAaC;QAAON;IAAY;AACxE;AAEA,SAASmC,SACP7B,KAAsC,EACtCQ,KAAsB,EACtBW,MAAe;IAEf,OAAOnB,MAAMwC,GAAG,CAAC,CAACiB,QAAW,CAAA;YAC3B,GAAGA,KAAK;YACRjD;YACA,GAAIW,WAAWd,YAAY,CAAC,IAAI;gBAACc;YAAM,CAAC;QAC1C,CAAA;AACF;AAEA,SAASY,2BACPvB,KAAoB,EACpBmD,SAA0B,EAC1BxC,MAAc;IAEd,OAAOX,MAAMkB,QAAQ,CAACkC,OAAO,CAAC,CAACjC;QAC7B,IAAIA,QAAQP,IAAI,KAAK,WAAW,OAAO,EAAE;QACzC,OAAO;YACL;gBACE,GAAGvD,qBAAqB;oBACtBsE,YAAYR,QAAQQ,UAAU,CAACF,MAAM;oBACrCK,OAAOX,QAAQW,KAAK;oBACpBD,YAAYtE;oBACZ8F,aAAa;oBACbjB,WAAW;gBACb,EAAE;gBACFpC,OAAOmD;gBACPxC;YACF;SACD;IACH;AACF;AAEA,SAAS5C,WAAWF,MAMnB;IACC,IAAIA,OAAOU,IAAI,CAACqC,IAAI,KAAK,OAAO,OAAO,CAAC;IAExC,OAAO0C,eACL;QAACxF,KAAKD,OAAO0F,WAAW;QAAEb,WAAW7E,OAAO2F,oBAAoB;IAAA,GAChE;QAAC1F,KAAKD,OAAO4F,MAAM;QAAEf,WAAW7E,OAAO6F,eAAe;IAAA,GACtD;QAAC5F,KAAKD,OAAOU,IAAI,CAACT,GAAG;QAAE4E,WAAW7E,OAAOU,IAAI,CAACmE,SAAS,EAAE5E;IAAG;AAEhE;AAEA,SAASwF,eACP,GAAGK,MAGA;IAEH,MAAMC,SAA0C,CAAC;IAEjD,KAAK,MAAMC,SAASF,OAAQ;QAC1B,KAAK,MAAM,CAACvD,KAAKU,MAAM,IAAIrC,OAAO4B,OAAO,CAACwD,MAAM/F,GAAG,IAAI,CAAC,GAAI;YAC1D,MAAM4C,WAAWmD,MAAMnB,SAAS,EAAE,CAACtC,IAAI;YACvC,MAAMjB,cAAcuB,aAAab;YACjC+D,MAAM,CAACxD,IAAI,GAAGjB,cAAc;gBAAC2B;gBAAOJ;YAAQ,IAAI;gBAACI;YAAK;QACxD;IACF;IAEA,OAAO8C;AACT;AAEA,SAASlE,cAAcN,MAA+B;IACpD,MAAMtB,MAAMsB,OAAOtB,GAAG;IACtB,IAAIA,QAAQ,QAAQ,OAAOA,QAAQ,YAAYgG,MAAMC,OAAO,CAACjG,MAAM,OAAO,CAAC;IAC3E,OAAOW,OAAOuF,WAAW,CACvBvF,OAAO4B,OAAO,CAACvC,KAAKsF,OAAO,CAAC,CAAC,CAAChD,KAAKU,MAAM,GACvC,OAAOA,UAAU,WAAW;YAAC;gBAACV;gBAAKU;aAAM;SAAC,GAAG,EAAE;AAGrD"}

package/dist/core/step-config/workflow-evaluation-context.d.ts

@@ -0,0 +1,6 @@
+import type { AvailabilitySite, WorkflowExpressionEvaluationContext } from '@shipfox/expression';
+export interface WorkflowEvaluationContext {
+    readonly site: AvailabilitySite;
+    readonly values: WorkflowExpressionEvaluationContext;
+}
+//# sourceMappingURL=workflow-evaluation-context.d.ts.map

package/dist/core/step-config/workflow-evaluation-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-evaluation-context.d.ts","sourceRoot":"","sources":["../../../src/core/step-config/workflow-evaluation-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,gBAAgB,EAAE,mCAAmC,EAAC,MAAM,qBAAqB,CAAC;AAE/F,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC;CACtD"}

package/dist/core/step-config/workflow-evaluation-context.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=workflow-evaluation-context.js.map

package/dist/core/step-config/workflow-evaluation-context.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/step-config/workflow-evaluation-context.ts"],"sourcesContent":["import type {AvailabilitySite, WorkflowExpressionEvaluationContext} from '@shipfox/expression';\n\nexport interface WorkflowEvaluationContext {\n  readonly site: AvailabilitySite;\n  readonly values: WorkflowExpressionEvaluationContext;\n}\n"],"names":[],"mappings":"AAEA,WAGC"}

package/dist/core/step-transition/apply-step-transition.d.ts

@@ -0,0 +1,26 @@
+import type { LogOutcomeDto } from '@shipfox/api-workflows-dto';
+import type { Tx } from '#db/db.js';
+import { type StepReport, type StepTransitionDecision } from './decide-step-transition.js';
+export type StepProgressionOutcome = {
+    jobFinished: false;
+} | {
+    jobFinished: true;
+    status: 'succeeded' | 'failed';
+};
+export interface StepProgressionMetrics {
+    jobStepsSettledStatus?: 'succeeded' | 'failed';
+    stepRestartEnqueued?: boolean;
+}
+export interface StepProgressionResult {
+    outcome: StepProgressionOutcome;
+    metrics: StepProgressionMetrics;
+}
+export interface ApplyStepTransitionContext {
+    jobId: string;
+    jobExecutionId: string;
+    result: StepReport;
+    logOutcome: LogOutcomeDto;
+    gateResult?: Record<string, unknown> | null;
+}
+export declare function applyStepTransition(decision: StepTransitionDecision, ctx: ApplyStepTransitionContext, tx: Tx): Promise<StepProgressionResult>;
+//# sourceMappingURL=apply-step-transition.d.ts.map

package/dist/core/step-transition/apply-step-transition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-step-transition.d.ts","sourceRoot":"","sources":["../../../src/core/step-transition/apply-step-transition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,WAAW,CAAC;AAUlC,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC5B,MAAM,6BAA6B,CAAC;AAErC,MAAM,MAAM,sBAAsB,GAC9B;IAAC,WAAW,EAAE,KAAK,CAAA;CAAC,GACpB;IAAC,WAAW,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAA;CAAC,CAAC;AAExD,MAAM,WAAW,sBAAsB;IACrC,qBAAqB,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/C,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,sBAAsB,CAAC;IAChC,OAAO,EAAE,sBAAsB,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,aAAa,CAAC;IAE1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC7C;AAOD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,sBAAsB,EAChC,GAAG,EAAE,0BAA0B,EAC/B,EAAE,EAAE,EAAE,GACL,OAAO,CAAC,qBAAqB,CAAC,CAgHhC"}