@skaile/workspaces 2.3.0 → 2.5.0

package/dist/factory-assets/connectors/flow/CONNECTOR.md

@@ -10,17 +10,20 @@ keywords:
 ---
 
 The flow connector holds the live `FlowExecution` snapshot for one run and
-bridges three driving parties:
+bridges three ownership roles:
 
 - **Agent** — drives nodes by calling tools (`start_node`, `request_approval`,
   `request_input`, `complete_node`, `skip_node`, `fail_node`, plus the
   read-only `get_state`, `get_globals`, `get_available`, `validate_node`,
   `build_handoff`).
-- **Host (runner)** — applies out-of-turn mutations through direct adapter
+- **Runtime** — drains available `function` nodes through `NodeExecutor`, parks
+  available `gate` nodes through durable approval state, and drives available
+  `sub-flow` nodes inline before an agent turn is considered.
+- **Host** — the runner applies out-of-turn mutations through direct adapter
   methods (`applyApproval`, `applyInput`, `retryNode`, `setAutonomousMode`,
-  `cancel`, `hydrate`) in response to user actions on the platform side.
-- **Orchestrator** — subscribes via `onStateChange` and forwards
-  `state_changed` events / kicks new turns after host-driven mutations.
+  `cancel`, `hydrate`) in response to platform actions, forwards persistence
+  snapshots through `onStateChange`, and serializes permitted agent turns via
+  `SessionStimulusBus`.
 
 Every state mutation runs through a single `mutate()` pipeline that clones
 the current snapshot, applies the change, recomputes derived fields via
@@ -33,23 +36,67 @@ declared in `skaile.yaml` — it is constructed by the runner per session
 and bound to the active `FlowDefinition`.
 
 The adapter normalizes authored definitions at its connect/start boundary.
-Strict v2 `run.kind: agent` nodes are active; among legacy definitions, only
-explicit `type: skill` nodes normalize into that active shape. A selected
-available or running agent receives its instruction, supplied bindings, asset
-requirements, and completed predecessor context through `build_handoff`.
+Strict v2 `run.kind: agent`, `run.kind: function`, `run.kind: gate`, and
+`run.kind: sub-flow` nodes are active. Among legacy definitions, explicit
+`type: skill` nodes normalize into the agent shape and exact `type: sub-flow`
+nodes with `data.flow` normalize into the active inline-child shape. A selected
+available or running agent receives its instruction, resolved
+bindings with origins, asset requirements, and completed predecessor
+context through `build_handoff`. Functions receive resolved raw values as
+environment variables while provenance remains on the executor request. They
+inherit the session environment and run from the session workspace.
+Configured stdout/stderr captures map only to `fields.<name>` output keys and
+remain attached to both completed and failed node executions.
+
+A first-class gate never enters the agent mutation surface and never calls
+`NodeExecutor`. Admission parks it at `awaiting_approval` with `run.prompt` as
+the initial summary. Approval completes it directly and unblocks successors;
+rejection keeps the decided record and feedback parked, stimulates one revision
+conversation, and lets the agent replace it with a fresh `request_approval`.
+Autonomous mode does not bypass a first-class gate. The authored `run.schema`
+remains part of the strict contract; richer free-text response transport is
+tracked separately in [platform #2097](https://github.com/skaile-ai/platform/issues/2097).
+
+An inline sub-flow is runtime-owned coordination. The host resolves the child
+definition and creates a transient child `FlowAdapter` in the materialized
+session, reusing the session driver for agent nodes, the existing `NodeExecutor`
+for functions, and the same host approval/input operations for gates. Each parent
+sub-flow node keeps its own transient child across parked/no-op turns. Agent
+operations route only during that child's active turn; parent-scoped and
+unrelated parent operations stay parent-owned. Child gate/input interactions are
+projected onto the parent node and settled by its parent node ID, so the child
+snapshot is never published. Child completion completes the parent node;
+required failure fails it and optional failure skips it. `passContext: true`
+merges parent run input before explicit node bindings, while the separate origin
+map preserves agent-produced provenance. Inline sub-flows run once and own no run
+group, loop, alternate executor, or new durable-state field.
+Canonical child identities resolve inside host lookup roots; in-memory ancestry
+rejects cycles and nesting deeper than 16 flow identities. Live hydrate cancels
+transient children first. Cold hydrate returns a running or projected-waiting
+sub-flow to admission and restarts it from the durable parent boundary.
+
+The pure engine evaluates `contract.requires` before admission and reports failed
+conditions separately from hard-edge blockers. Output schemas are enforced only
+when another node reads the producer through a precondition, binding, or router.
+The first invalid agent completion persists and publishes one correction request;
+the second fails. Function output fails directly, with captured diagnostics kept.
+Valid JSON-object fields are cloned before storage. Structural field errors enter
+the correction lifecycle only for consumed producers; malformed fields on an
+unconsumed prose node are omitted. `connect` and `hydrate` clone incoming snapshots
+and atomically reject invalid complete output for a consumed producer.
 
 ## Operations
 
 | Operation | Access | Description |
 |-----------|--------|-------------|
-| `get_available` | read | Node IDs ready to run |
+| `get_available` | read | Agent node IDs ready for an agent turn |
 | `get_state` | read | Full flow execution snapshot |
 | `get_globals` | read | Run-scoped flow globals (`run_input` etc.) |
-| `validate_node` | read | Is this node currently runnable |
-| `build_handoff` | read | Selected agent instruction, bindings, assets, and upstream context |
+| `validate_node` | read | Is this node currently runnable, including failed preconditions |
+| `build_handoff` | read | Selected agent instruction, resolved bindings/origins, correction issues, assets, and upstream context |
 | `start_node` | write | Mark a node `running` |
-| `request_approval` | write | Pause for human sign-off |
+| `request_approval` | write | Pause a running agent node, or re-request a rejected first-class gate, for human sign-off |
 | `request_input` | write | Pause for typed input |
-| `complete_node` | write | Finalise a node with output |
+| `complete_node` | write | Finalise a node with optional JSON fields; consumed schemas get one agent correction |
 | `skip_node` | write | Skip an optional node |
 | `fail_node` | write | Mark a node failed (recoverable or not) |

package/dist/factory-assets/connectors/flow/adapter.d.ts

@@ -2,29 +2,35 @@
  * FlowAdapter — live flow execution state exposed as a connector resource.
  *
  * Holds the canonical `FlowExecution` snapshot for a single run and bridges
- * three driving parties:
+ * three ownership roles:
  *
  *  - The **agent** drives nodes to completion by calling tools (`start_node`,
  *    `request_approval`, `request_input`, `complete_node`, `skip_node`,
  *    `fail_node`, plus read-only `get_state` / `get_available` / `get_globals` /
  *    `build_handoff`).
- *  - The **host** (runner → serve.ts → platform) applies out-of-turn
+ *  - The **runtime** drains functions through `NodeExecutor` and parks first-class
+ *    gates without executing a node or starting a model.
+ *  - The **host** runner applies out-of-turn
  *    mutations (`applyApproval`, `applyInput`, `retryNode`,
- *    `setAutonomousMode`, `cancel`, `hydrate`) in response to user actions.
- *  - The **runner's FlowOrchestrator** subscribes to `onChange` to forward
- *    `state_changed` events and kick new turns after host-driven mutations.
+ *    `setAutonomousMode`, `cancel`, `hydrate`) in response to platform actions,
+ *    subscribes to `onChange` for persistence, and uses the session stimulus bus
+ *    to serialize permitted model turns.
  *
  * Every state mutation runs through a single `mutate()` helper that clones
  * the current snapshot, applies the change, recomputes derived fields via
  * `computeFlowStateFromSnapshots`, and fires the onChange callback with
  * the full FlowExecution shape. Consumers downstream (platform gateway,
- * frontend hook) see latest-wins snapshots — F4 in the decision log.
+ * frontend hook) see latest-wins snapshots.
  *
  * See `docs/flow-execution.md` for the universal model.
  */
 import { AbstractConnector, type ConnectContext, type ConnectorDeclaration, type ConnectorHandle, type ToolFace } from "@skaile/workspaces/connectors";
 import type { FlowExecution } from "@skaile/workspaces/types";
+import type { BindingOrigin } from "./contract/expression.js";
 import { type FlowDefinition, isBlocking } from "./engine/index.js";
+import type { NodeExecutor } from "./node-executor.js";
+import type { InlineSubFlowOperationTarget, InlineSubFlowRunner } from "./sub-flow-runner.js";
+import { type TurnStimulus } from "./prompt-fragments.js";
 /**
  * Minimal structural shape of the runner's `SessionStimulusBus`. Declared
  * locally so the adapter doesn't pull in a runtime dep on
@@ -50,14 +56,13 @@ export interface FlowAdapterState {
     flowDef: FlowDefinition;
     /** Current execution snapshot (authoritative; mutated in place by `mutate()`). */
     execution: FlowExecution;
-    /** Callback fired after every state mutation. Set by `FlowOrchestrator` via `onStateChange()`. */
+    /** Callback fired after every state mutation for host persistence and event forwarding. */
     onChange?: (state: FlowExecution) => void;
     /**
      * Optional `SessionStimulusBus` reference. When provided AND
      * `useBusForStimulus` is true, the adapter computes a `TurnStimulus`
      * after every mutation and fires `bus.signal()` to wake the agent.
-     * Phase 3 wiring (2026-05-08): the flag defaults to false everywhere so
-     * the legacy orchestrator path remains the only turn driver until Phase 4.
+     * The runner enables this for the serialized session-stimulus turn driver.
      */
     stimulusBus?: FlowAdapterStimulusBus;
     /**
@@ -66,7 +71,7 @@ export interface FlowAdapterState {
      * `flow` in CLI mode).
      */
     connectorId?: string;
-    /** Phase 3 feature flag — see {@link FlowAdapterConnectOptions.useBusForStimulus}. */
+    /** See {@link FlowAdapterConnectOptions.useBusForStimulus}. */
     useBusForStimulus?: boolean;
     /**
      * Last execution snapshot the adapter signaled to the bus. Used to compute
@@ -74,6 +79,18 @@ export interface FlowAdapterState {
      * leave the snapshot unchanged don't fire spurious turn kicks.
      */
     lastSignaledExecution?: FlowExecution;
+    /** Deterministic runtime backed by the already-materialized session workspace. */
+    nodeExecutor?: NodeExecutor;
+    /** Host-owned inline child lifecycle, backed by the existing materialized session. */
+    inlineSubFlowRunner?: InlineSubFlowRunner;
+    /** Transient child operation routes keyed by their owning parent sub-flow node. */
+    inlineOperationTargets: Map<string, InlineSubFlowOperationTarget>;
+    /** Non-durable provenance overrides for values received from a parent sub-flow binding. */
+    flowInputOrigins?: Record<string, BindingOrigin[]>;
+    /** Non-durable ancestry used to reject recursive inline delegation. */
+    inlineSubFlowAncestry: string[];
+    /** Non-durable ownership epoch for results returned by in-flight inline children. */
+    executionGeneration: number;
 }
 /**
  * Options the runner passes via `declaration.options` when connecting the `FlowAdapter`.
@@ -98,25 +115,32 @@ export interface FlowAdapterConnectOptions {
      * Optional `SessionStimulusBus` to which this adapter should fire
      * `signal()` calls on every mutation when `useBusForStimulus` is true.
      * Threaded through by the runner's session-construction code (`runFlow`
-     * / `serve.ts`). Phase 3 of the flow-connector extraction (2026-05-08)
-     * builds the path; Phase 4 flips the flag globally.
+     * / `serve.ts`).
      */
     stimulusBus?: FlowAdapterStimulusBus;
     /**
-     * Phase 3 feature flag. When `true` AND `stimulusBus` is provided, the
+     * When `true` AND `stimulusBus` is provided, the
      * adapter computes a turn-kicking stimulus after every mutation and
      * calls `bus.signal()` (fire-and-forget). When `false` (the default),
-     * only the legacy `onChange` callback fires — the runner's existing
-     * `FlowOrchestrator.onStateChange` subscription remains the only turn
-     * driver. Default: `false`.
+     * only the `onChange` callback fires. Default: `false`.
      */
     useBusForStimulus?: boolean;
+    /** Runtime for function nodes. Required before deterministic nodes are drained. */
+    nodeExecutor?: NodeExecutor;
+    /** Host lifecycle used to resolve and drive inline child flows in the current session. */
+    inlineSubFlowRunner?: InlineSubFlowRunner;
+    /** @internal Provenance for child flow inputs, retained only in the live adapter. */
+    flowInputOrigins?: Record<string, BindingOrigin[]>;
+    /** @internal Flow identities from the root through this transient child. */
+    inlineSubFlowAncestry?: string[];
 }
 /**
- * Connector adapter that holds and drives a live `FlowExecution`. Bridges three parties:
- * the agent (via `executeOp` tools), the host runner (via direct methods like `applyApproval`),
- * and the orchestrator (via `onStateChange`). Every mutation runs through a single `mutate()`
- * pipeline that recomputes derived fields and fires `onChange`.
+ * Connector adapter that holds and drives a live `FlowExecution`.
+ *
+ * The agent owns agent-node tools, the runtime drains function nodes and parks first-class
+ * gates, the host applies durable human decisions, and the runner subscribes to state changes
+ * to decide whether a model turn is needed. Every mutation runs through one recomputation
+ * pipeline and publishes the resulting snapshot.
  * @docLink packages/connectors/concepts#flow-adapter
  */
 export declare class FlowAdapter extends AbstractConnector {
@@ -126,12 +150,14 @@ export declare class FlowAdapter extends AbstractConnector {
     constructor();
     connect(declaration: ConnectorDeclaration, _ctx: ConnectContext): Promise<ConnectorHandle>;
     disconnect(handle: ConnectorHandle): Promise<void>;
+    private cancelInlineTargets;
+    private projectInlineInteraction;
     onStateChange(handle: ConnectorHandle, cb: (state: FlowExecution) => void): void;
     /**
      * Replace the current execution snapshot with a host-provided one.
      * Used on container rehydration via the extended `configure` command.
-     * Does NOT fire `onChange` — the host already has the state; we don't
-     * want to loop it back on startup.
+     * Publishes only when compatibility preparation changes the supplied snapshot,
+     * such as seeding a node kind activated after the snapshot was persisted.
      */
     hydrate(handle: ConnectorHandle, execution: FlowExecution): void;
     private read;
@@ -161,9 +187,8 @@ export declare class FlowAdapter extends AbstractConnector {
     private doFailNode;
     /**
      * Record an approval decision on a node currently `awaiting_approval`.
-     * `approved` leaves the node in `awaiting_approval` — the agent
-     * transitions it to `complete` on the next turn. `rejected` drops the
-     * node back to `available` so the agent can retry.
+     * A first-class gate completes directly when approved and remains parked when rejected.
+     * Agent-node approvals keep their existing resume behavior.
      */
     applyApproval(handle: ConnectorHandle, nodeId: string, decision: "approved" | "rejected", feedback: string | undefined, decidedBy: string): void;
     /**
@@ -183,20 +208,39 @@ export declare class FlowAdapter extends AbstractConnector {
     cancel(handle: ConnectorHandle): void;
     /** Read-only access to the current FlowExecution snapshot. */
     getExecution(handle: ConnectorHandle): FlowExecution;
-    /** Node IDs marked as mandatory approval gates in strict v2 or legacy definitions. */
+    /** @internal Whether a nested inline descendant owns the current agent turn. */
+    hasActiveInlineAgentTurn(handle: ConnectorHandle): boolean;
+    /** Snapshot currently visible through agent-facing tools, including a live inline child. */
+    getAgentExecution(handle: ConnectorHandle): FlowExecution;
+    /** Agent node IDs whose approval policy remains mandatory in autonomous mode. */
+    getMandatoryAgentApprovalNodeIds(handle: ConnectorHandle): string[];
+    /** @deprecated Use {@link getMandatoryAgentApprovalNodeIds}. */
     getMandatoryGates(handle: ConnectorHandle): string[];
+    /**
+     * Decide whether the current state and stimulus require the session agent's conversation.
+     * Runtime-owned gates stay dark while pending; a rejected gate is the exception because the
+     * rejection starts the revision conversation promised by the gate lifecycle.
+     */
+    shouldDriveAgentTurn(handle: ConnectorHandle, stimulus: TurnStimulus): boolean;
+    /**
+     * Drain runtime-owned nodes in definition order until only agent work or a human decision
+     * remains. Function nodes use NodeExecutor, gates park, and sub-flows delegate to the host.
+     */
+    drainRuntimeNodes(handle: ConnectorHandle): Promise<FlowExecution>;
+    /**
+     * Run every currently available function node through the configured
+     * NodeExecutor. Newly-unblocked function nodes are drained in definition
+     * order before returning control to the runner's agent-turn decision.
+     */
+    executeAvailableFunctionNodes(handle: ConnectorHandle): Promise<FlowExecution>;
+    private drainAvailableRuntimeNodes;
     private s;
     /**
      * Central mutation pipeline: runs the mutator, recomputes derived
      * fields, updates the flow-level `status` if the mutation completed
-     * or failed the flow, fires `onChange` once, and (Phase 3, 2026-05-08)
-     * optionally signals the {@link FlowAdapterStimulusBus} so the runner
-     * can kick a turn outside the legacy orchestrator path.
-     *
-     * The bus signal path is gated by the `useBusForStimulus` flag set at
-     * connect time — Phase 3 builds the path; Phase 4 flips the default to
-     * true globally and removes the orchestrator's onStateChange
-     * subscription.
+     * or failed the flow, fires `onChange` once, and optionally signals the
+     * {@link FlowAdapterStimulusBus}. The signal path is gated by the
+     * `useBusForStimulus` flag set at connect time.
      */
     private mutate;
     /**

package/dist/factory-assets/connectors/flow/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/flow/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,iBAAiB,EACjB,KAAK,cAAc,EAEnB,KAAK,oBAAoB,EAEzB,KAAK,eAAe,EAKpB,KAAK,QAAQ,EACd,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAGV,aAAa,EASd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAEL,KAAK,cAAc,EAEnB,UAAU,EACX,MAAM,mBAAmB,CAAC;AAgB3B;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAC9D,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAID;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,OAAO,EAAE,cAAc,CAAC;IACxB,kFAAkF;IAClF,SAAS,EAAE,aAAa,CAAC;IACzB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC1C;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,aAAa,CAAC;CACvC;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,cAAc,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,IAAI,CAAC,EAAE;QACL,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,CAAC;IACF;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAoGD;;;;;;GAMG;AACH,qBAAa,WAAY,SAAQ,iBAAiB;IAChD,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,SAAS,SAAS;IAE3B,KAAK,EAAE,QAAQ,CAAC;;IAeV,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAyB1F,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxD,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI;IAIhF;;;;;OAKG;IACH,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,GAAG,IAAI;YAQlD,IAAI;YAwBJ,IAAI;YAcJ,MAAM;IAepB,OAAO,CAAC,kBAAkB;IAmSpB,SAAS,CACb,MAAM,EAAE,eAAe,EACvB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC;IAuDlB,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,OAAO;IAkCf,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,iBAAiB;IA4BzB,OAAO,CAAC,cAAc;IAgCtB,OAAO,CAAC,cAAc;IAgCtB,OAAO,CAAC,UAAU;IAoBlB,OAAO,CAAC,UAAU;IAmClB;;;;;OAKG;IACH,aAAa,CACX,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,UAAU,GAAG,UAAU,EACjC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,EAAE,MAAM,GAChB,IAAI;IAoCP;;;OAGG;IACH,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAoChG;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAiBxD,0DAA0D;IAC1D,iBAAiB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAOlE,mFAAmF;IACnF,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAOrC,8DAA8D;IAC9D,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa;IAIpD,sFAAsF;IACtF,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE;IAQpD,OAAO,CAAC,CAAC;IAIT;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,MAAM;IAoCd;;;;OAIG;IACH,OAAO,CAAC,SAAS;IAuCjB;;OAEG;IACH,OAAO,CAAC,YAAY;CAkDrB;AA4DD,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,WAAW,CAE7C"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/flow/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,iBAAiB,EACjB,KAAK,cAAc,EAEnB,KAAK,oBAAoB,EAEzB,KAAK,eAAe,EAKpB,KAAK,QAAQ,EACd,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAGV,aAAa,EAUd,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,EAEL,KAAK,cAAc,EAInB,UAAU,EAGX,MAAM,mBAAmB,CAAC;AAc3B,OAAO,KAAK,EAAoB,YAAY,EAAsB,MAAM,oBAAoB,CAAC;AAC7F,OAAO,KAAK,EACV,4BAA4B,EAE5B,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAwB,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAKhF;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAC9D,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAID;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,OAAO,EAAE,cAAc,CAAC;IACxB,kFAAkF;IAClF,SAAS,EAAE,aAAa,CAAC;IACzB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC1C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,aAAa,CAAC;IACtC,kFAAkF;IAClF,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,sFAAsF;IACtF,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mFAAmF;IACnF,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAClE,2FAA2F;IAC3F,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACnD,uEAAuE;IACvE,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,qFAAqF;IACrF,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,cAAc,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,IAAI,CAAC,EAAE;QACL,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,CAAC;IACF;;;;;OAKG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mFAAmF;IACnF,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACnD,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AA2LD;;;;;;;;GAQG;AACH,qBAAa,WAAY,SAAQ,iBAAiB;IAChD,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,SAAS,SAAS;IAE3B,KAAK,EAAE,QAAQ,CAAC;;IAeV,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IA+B1F,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;YAO1C,mBAAmB;IAMjC,OAAO,CAAC,wBAAwB;IAyBhC,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI;IAIhF;;;;;OAKG;IACH,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,GAAG,IAAI;YAgBlD,IAAI;YAwBJ,IAAI;YAcJ,MAAM;IAepB,OAAO,CAAC,kBAAkB;IAySpB,SAAS,CACb,MAAM,EAAE,eAAe,EACvB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC;IAgFlB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,cAAc;IAmBtB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,OAAO;IAmCf,OAAO,CAAC,WAAW;IAkBnB,OAAO,CAAC,iBAAiB;IAqCzB,OAAO,CAAC,cAAc;IAoCtB,OAAO,CAAC,cAAc;IAoFtB,OAAO,CAAC,UAAU;IAwBlB,OAAO,CAAC,UAAU;IAuClB;;;;OAIG;IACH,aAAa,CACX,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,UAAU,GAAG,UAAU,EACjC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,EAAE,MAAM,GAChB,IAAI;IA0DP;;;OAGG;IACH,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAoChG;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAiBxD,0DAA0D;IAC1D,iBAAiB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAOlE,mFAAmF;IACnF,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAOrC,8DAA8D;IAC9D,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa;IAIpD,gFAAgF;IAChF,wBAAwB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO;IAM1D,4FAA4F;IAC5F,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa;IASzD,iFAAiF;IACjF,gCAAgC,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE;IASnE,gEAAgE;IAChE,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE;IAIpD;;;;OAIG;IACH,oBAAoB,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO;IA8B9E;;;OAGG;IACG,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;IAIxE;;;;OAIG;IACG,6BAA6B,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;YAItE,0BAA0B;IAuPxC,OAAO,CAAC,CAAC;IAIT;;;;;;OAMG;IACH,OAAO,CAAC,MAAM;IA2Cd;;;;OAIG;IACH,OAAO,CAAC,SAAS;IAiDjB;;OAEG;IACH,OAAO,CAAC,YAAY;CAoErB;AA6GD,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,WAAW,CAE7C"}

package/dist/factory-assets/connectors/flow/adapter.js

@@ -1,12 +1,12 @@
-export { FlowAdapter, createConnector } from '../../../chunk-PTS3QN5P.js';
+export { FlowAdapter, createConnector } from '../../../chunk-EEHOMCRU.js';
 import '../../../chunk-ZNIHTT22.js';
 import '../../../chunk-6E6PKKAD.js';
 import '../../../chunk-IFGTRL2I.js';
-export { isBlocking } from '../../../chunk-UQ3RJKDD.js';
-import '../../../chunk-ZE2KEPE2.js';
-import '../../../chunk-FB4GPWYC.js';
-import '../../../chunk-DZM33LQO.js';
-import '../../../chunk-63ZPKREA.js';
+export { isBlocking } from '../../../chunk-4O2RAXKJ.js';
+import '../../../chunk-OEGHKO5N.js';
+import '../../../chunk-FKBQRV4J.js';
+import '../../../chunk-4QROZZ5Z.js';
+import '../../../chunk-P43HBWKK.js';
 import '../../../chunk-F3HNW354.js';
 import '../../../chunk-K5GBV4SA.js';
 import '../../../chunk-ZAP2BDHG.js';

package/dist/factory-assets/connectors/flow/contract/expression.d.ts

@@ -22,6 +22,50 @@ export interface FlowExpressionContext {
         };
     }>;
 }
+/** Runtime or agent provenance retained for one value used by a node binding. */
+export type BindingOrigin = {
+    source: "literal";
+    path: string;
+    obtainedBy: "runtime";
+} | {
+    source: "flow-input";
+    path: string;
+    obtainedBy: "runtime";
+} | {
+    source: "default";
+    path: string;
+    obtainedBy: "runtime";
+} | {
+    source: "node-status";
+    nodeId: string;
+    path: string;
+    obtainedBy: "runtime";
+} | {
+    source: "node-output";
+    nodeId: string;
+    path: string;
+    obtainedBy: "agent" | "runtime";
+};
+/** A resolved JSON value together with every source that contributed to it. */
+export interface ResolvedBinding {
+    /** Runtime value passed to the node executor. */
+    value: unknown;
+    /** Stable, de-duplicated provenance in authored traversal order. */
+    origins: BindingOrigin[];
+}
+/** All named node inputs, keeping executor values separate from provenance. */
+export interface ResolvedNodeBindings {
+    /** Resolved values keyed by authored binding name. */
+    values: Record<string, unknown>;
+    /** Provenance keyed by authored binding name. */
+    origins: Record<string, BindingOrigin[]>;
+}
+/** How each producer node obtained its output fields. */
+export type NodeOutputOrigin = Record<string, "agent" | "runtime">;
+/** @internal Binding names excluded from both authored and direct typed inputs. */
+export declare const FLOW_BINDING_NAME_PATTERN: RegExp;
+/** @internal Collect bounded expressions embedded in a JSON binding value. */
+export declare function collectFlowBindingExpressions(value: unknown): string[];
 /** Deterministic syntax, budget, or path failure raised by the Flow evaluator. */
 export declare class FlowExpressionError extends Error {
     /** Stable error name for callers that classify evaluator failures. */
@@ -43,4 +87,15 @@ export declare function inspectFlowExpression(expression: string, requireBoolean
 export declare function evaluateFlowExpression(expression: string, context: FlowExpressionContext): boolean;
 /** Proposal-compatible short name for {@link evaluateFlowExpression}. */
 export declare function evaluate(expression: string, context: FlowExpressionContext): boolean;
+/** @internal Serialize a JSON-compatible value with deterministic object-key ordering. */
+export declare function stableFlowJson(value: unknown): string;
+/**
+ * Resolves authored node inputs through the bounded Flow expression grammar.
+ *
+ * Exact `${...}` placeholders retain their JSON type. Placeholders embedded in
+ * text use deterministic interpolation, while arrays and objects are traversed
+ * recursively. Runtime values and provenance remain separate so executors do not
+ * need to understand trust metadata.
+ */
+export declare function resolveFlowBindings(bindings: Record<string, unknown> | undefined, context: FlowExpressionContext, nodeOutputOrigin?: NodeOutputOrigin, flowInputOrigins?: Record<string, BindingOrigin[]>): ResolvedNodeBindings;
 //# sourceMappingURL=expression.d.ts.map

package/dist/factory-assets/connectors/flow/contract/expression.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"expression.d.ts","sourceRoot":"","sources":["../../../../../factory-assets/connectors/flow/contract/expression.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,sBAAsB;;;;;;EAMjC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;CAC3E;AAED,kFAAkF;AAClF,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,sEAAsE;IACtE,SAAkB,IAAI,yBAAyB;CAChD;AAwXD,+FAA+F;AAC/F,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,2GAA2G;AAC3G,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,cAAc,UAAO,GACpB,uBAAuB,EAAE,CAkB3B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAQT;AAED,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAEpF"}
+{"version":3,"file":"expression.d.ts","sourceRoot":"","sources":["../../../../../factory-assets/connectors/flow/contract/expression.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,sBAAsB;;;;;;EAMjC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;CAC3E;AAED,iFAAiF;AACjF,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,CAAA;CAAE,GAC1D;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,CAAA;CAAE,GAC7D;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,CAAA;CAAE,GAC1D;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,SAAS,CAAC;CACvB,GACD;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC;CACjC,CAAC;AAEN,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,KAAK,EAAE,OAAO,CAAC;IACf,oEAAoE;IACpE,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,+EAA+E;AAC/E,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;CAC1C;AAED,yDAAyD;AACzD,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;AAEnE,mFAAmF;AACnF,eAAO,MAAM,yBAAyB,QAAoB,CAAC;AAE3D,8EAA8E;AAC9E,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAOtE;AAED,kFAAkF;AAClF,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,sEAAsE;IACtE,SAAkB,IAAI,yBAAyB;CAChD;AA0XD,+FAA+F;AAC/F,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,2GAA2G;AAC3G,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,cAAc,UAAO,GACpB,uBAAuB,EAAE,CAkB3B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAQT;AAED,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAEpF;AAkDD,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CASrD;AA+HD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC7C,OAAO,EAAE,qBAAqB,EAC9B,gBAAgB,GAAE,gBAAqB,EACvC,gBAAgB,GAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAM,GACrD,oBAAoB,CAsBtB"}