@stackbone/sdk 0.1.0-alpha.6 → 0.1.0-alpha.8

package/index.js

@@ -3,7 +3,7 @@ export { z } from 'zod';
 import { drizzle } from 'drizzle-orm/postgres-js';
 import postgres from 'postgres';
 import { extractText } from 'unpdf';
-import { createHash } from 'crypto';
+import { createHash, createHmac } from 'crypto';
 import OpenAI from 'openai';
 import { PutObjectCommand, GetObjectCommand, ListObjectsV2Command, DeleteObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
@@ -2366,7 +2366,7 @@ var require_luxon = __commonJS({
         return new Formatter2(locale, opts);
       }
       static parseFormat(fmt) {
-        let current = null, currentFull = "", bracketed = false;
+        let current3 = null, currentFull = "", bracketed = false;
         const splits = [];
         for (let i2 = 0; i2 < fmt.length; i2++) {
           const c2 = fmt.charAt(i2);
@@ -2377,12 +2377,12 @@ var require_luxon = __commonJS({
                 val: currentFull === "" ? "'" : currentFull
               });
             }
-            current = null;
+            current3 = null;
             currentFull = "";
             bracketed = !bracketed;
           } else if (bracketed) {
             currentFull += c2;
-          } else if (c2 === current) {
+          } else if (c2 === current3) {
             currentFull += c2;
           } else {
             if (currentFull.length > 0) {
@@ -2392,7 +2392,7 @@ var require_luxon = __commonJS({
               });
             }
             currentFull = c2;
-            current = c2;
+            current3 = c2;
           }
         }
         if (currentFull.length > 0) {
@@ -3122,28 +3122,28 @@ var require_luxon = __commonJS({
     __name(durationToMillis, "durationToMillis");
     function normalizeValues(matrix, vals) {
       const factor = durationToMillis(matrix, vals) < 0 ? -1 : 1;
-      orderedUnits$1.reduceRight((previous, current) => {
-        if (!isUndefined(vals[current])) {
+      orderedUnits$1.reduceRight((previous, current3) => {
+        if (!isUndefined(vals[current3])) {
           if (previous) {
             const previousVal = vals[previous] * factor;
-            const conv = matrix[current][previous];
+            const conv = matrix[current3][previous];
             const rollUp = Math.floor(previousVal / conv);
-            vals[current] += rollUp * factor;
+            vals[current3] += rollUp * factor;
             vals[previous] -= rollUp * conv * factor;
           }
-          return current;
+          return current3;
         } else {
           return previous;
         }
       }, null);
-      orderedUnits$1.reduce((previous, current) => {
-        if (!isUndefined(vals[current])) {
+      orderedUnits$1.reduce((previous, current3) => {
+        if (!isUndefined(vals[current3])) {
           if (previous) {
             const fraction = vals[previous] % 1;
             vals[previous] -= fraction;
-            vals[current] += fraction * matrix[previous][current];
+            vals[current3] += fraction * matrix[previous][current3];
           }
-          return current;
+          return current3;
         } else {
           return previous;
         }
@@ -4256,21 +4256,21 @@ var require_luxon = __commonJS({
       * @return {Array}
       */
       static merge(intervals) {
-        const [found, final] = intervals.sort((a2, b2) => a2.s - b2.s).reduce(([sofar, current], item) => {
-          if (!current) {
+        const [found, final] = intervals.sort((a2, b2) => a2.s - b2.s).reduce(([sofar, current3], item) => {
+          if (!current3) {
             return [
               sofar,
               item
             ];
-          } else if (current.overlaps(item) || current.abutsStart(item)) {
+          } else if (current3.overlaps(item) || current3.abutsStart(item)) {
             return [
               sofar,
-              current.union(item)
+              current3.union(item)
             ];
           } else {
             return [
               sofar.concat([
-                current
+                current3
               ]),
               item
             ];
@@ -5202,7 +5202,7 @@ var require_luxon = __commonJS({
     }
     __name(possiblyCachedLocalWeekData, "possiblyCachedLocalWeekData");
     function clone(inst, alts) {
-      const current = {
+      const current3 = {
         ts: inst.ts,
         zone: inst.zone,
         c: inst.c,
@@ -5211,9 +5211,9 @@ var require_luxon = __commonJS({
         invalid: inst.invalid
       };
       return new DateTime({
-        ...current,
+        ...current3,
         ...alts,
-        old: current
+        old: current3
       });
     }
     __name(clone, "clone");
@@ -8218,7 +8218,7 @@ var require_expression = __commonJS({
       return schedule;
     }, "prev");
     CronExpression.prototype.hasNext = function() {
-      var current = this._currentDate;
+      var current3 = this._currentDate;
       var hasIterated = this._hasIterated;
       try {
         this._findSchedule();
@@ -8226,12 +8226,12 @@ var require_expression = __commonJS({
       } catch (err3) {
         return false;
       } finally {
-        this._currentDate = current;
+        this._currentDate = current3;
         this._hasIterated = hasIterated;
       }
     };
     CronExpression.prototype.hasPrev = function() {
-      var current = this._currentDate;
+      var current3 = this._currentDate;
       var hasIterated = this._hasIterated;
       try {
         this._findSchedule(true);
@@ -8239,7 +8239,7 @@ var require_expression = __commonJS({
       } catch (err3) {
         return false;
       } finally {
-        this._currentDate = current;
+        this._currentDate = current3;
         this._hasIterated = hasIterated;
       }
     };
@@ -8746,9 +8746,11 @@ var CAPABILITIES = [
   "prompts.basic",
   // `connections.actions`: the agent → control-plane connectors proxy
   // (feature connectors-connections-automations). Role-based naming per repo
-  // convention. `client.connections.list()` / `.invoke(connector, action, args)`
+  // convention. `client.legacyConnections.list()` / `.invoke(connector, action, args)`
   // run against the proxy; the agent container never sees a credential. The
-  // v13 bump reintroduces this capability after v12 removed it.
+  // v13 bump reintroduces this capability after v12 removed it. The capability
+  // string stays `connections.actions` (it names the wire domain, not the
+  // renamed SDK accessor).
   "connections.actions"
 ];
 var MODULE_CAPABILITIES = {
@@ -8765,10 +8767,11 @@ var MODULE_CAPABILITIES = {
   // row is still declared here because the table is shared with the cloud
   // contract / Studio capability advertisement.
   prompts: "prompts.basic",
-  // `client.connections` is a control-plane PROXY surface (like queues): the
-  // agent POSTs to `/api/v1/agent/connections/*` with its agent JWT and the
+  // `client.legacyConnections` is a control-plane PROXY surface (like queues):
+  // the agent POSTs to `/api/v1/agent/connections/*` with its agent JWT and the
   // control plane runs the connector action with credentials resolved in
-  // memory. Gated against `connections.actions`.
+  // memory. Gated against `connections.actions`. The map key stays `connections`
+  // (it is the module id shared with the cloud contract, not the SDK accessor).
   connections: "connections.actions"
 };
 var contractBuildNameSchema = z.enum([
@@ -9187,9 +9190,9 @@ function createContractStore(resolved = resolveConfig({})) {
   function peek(baseUrl) {
     if (!baseUrl || baseUrl.trim() === "") return null;
     const key = normaliseBaseUrl(baseUrl);
-    const cached = lastResolved.get(key);
-    if (!cached || cached.error) return null;
-    return cached.data;
+    const cached2 = lastResolved.get(key);
+    if (!cached2 || cached2.error) return null;
+    return cached2.data;
   }
   __name(peek, "peek");
   function gatingEnabled() {
@@ -9455,9 +9458,9 @@ var HttpClient = class {
     if (jwt && !requestHeaders.has("Authorization")) {
       requestHeaders.set("Authorization", `Bearer ${jwt}`);
     }
-    const installationId = resolveInstallationId(this.resolved);
-    if (installationId && !requestHeaders.has("X-Stackbone-Installation-Id")) {
-      requestHeaders.set("X-Stackbone-Installation-Id", installationId);
+    const installationId2 = resolveInstallationId(this.resolved);
+    if (installationId2 && !requestHeaders.has("X-Stackbone-Installation-Id")) {
+      requestHeaders.set("X-Stackbone-Installation-Id", installationId2);
     }
     const body = serializeBody(method, options.body, requestHeaders);
     let lastError = null;
@@ -9955,7 +9958,7 @@ var ApprovalFacade = class {
       const rows = await this._getDatabase().runShared((db) => db`
         INSERT INTO stackbone_platform.approvals (
               topic, payload, callback_url, idempotency_key,
-              fallback, metadata, timeout_at
+              fallback, metadata, run_id, requested_by_step_id, timeout_at
           ) VALUES (
               ${options.topic},
               ${JSON.stringify(options.payload ?? {})}::jsonb,
@@ -9963,6 +9966,8 @@ var ApprovalFacade = class {
               ${options.idempotencyKey ?? null},
               ${fallback},
               ${JSON.stringify(options.metadata ?? {})}::jsonb,
+              ${options.runId ?? null}::uuid,
+              ${options.requestedByStepId ?? null}::uuid,
               now() + (${timeoutMs}::int * interval '1 millisecond')
           )
           ON CONFLICT (workspace_id, topic, idempotency_key)
@@ -10195,7 +10200,7 @@ var ConfigFacade = class {
     void this._resolved;
   }
   async get(key) {
-    if (!key.trim()) {
+    if (!String(key).trim()) {
       return err({
         code: "config_invalid_request",
         message: "`key` is required."
@@ -10206,7 +10211,7 @@ var ConfigFacade = class {
     if (!payload.data || !(key in payload.data)) {
       return err({
         code: "config_not_found",
-        message: `Config key \`${key}\` is not set for this agent.`,
+        message: `Config key \`${String(key)}\` is not set for this agent.`,
         meta: {
           key
         }
@@ -10235,6 +10240,17 @@ var ConfigFacade = class {
     }
     return ok(out);
   }
+  /**
+  * Returns the agent's entire config payload as one typed object. An
+  * absent/null `agent_config` row resolves to `ok({})` — an empty config is
+  * "no config set", consistent with the facade reading the singleton row.
+  * Reads stay an unvalidated SELECT (no AJV on the read path).
+  */
+  async getAll() {
+    const payload = await this.loadPayload();
+    if (payload.error) return err(payload.error);
+    return ok(payload.data ?? {});
+  }
   async loadPayload() {
     const sql = this.sql();
     if (sql.error) return err(sql.error);
@@ -10420,21 +10436,21 @@ function buildProxy(steps, seed, rootCall, gate) {
 }
 __name(buildProxy, "buildProxy");
 function replayChain(seed, steps) {
-  let current = seed;
+  let current3 = seed;
   for (const step of steps) {
-    if (current === null || current === void 0) return current;
+    if (current3 === null || current3 === void 0) return current3;
     if (step.kind === "get") {
-      current = current[step.key];
+      current3 = current3[step.key];
       continue;
     }
-    const parent = current;
+    const parent = current3;
     const fn = parent[step.key];
     if (typeof fn !== "function") {
       throw new TypeError(`[stackbone/sdk] cold-start retry could not replay "${step.key}": not a function on the rebuilt handle`);
     }
-    current = fn.apply(parent, step.args);
+    current3 = fn.apply(parent, step.args);
   }
-  return current;
+  return current3;
 }
 __name(replayChain, "replayChain");
 
@@ -10794,11 +10810,11 @@ var PromptsFacade = class {
            WHERE p.key = ${key} AND p.deleted_at IS NULL
            LIMIT 1
         `;
-        const current = existing[0];
-        if (!current) return null;
-        let nextVersion = current.current_version;
+        const current3 = existing[0];
+        if (!current3) return null;
+        let nextVersion = current3.current_version;
         if (options.template !== void 0) {
-          nextVersion = current.current_version + 1;
+          nextVersion = current3.current_version + 1;
           const variables = extractVars(options.template);
           await tx`
             INSERT INTO stackbone_platform.prompt_versions
@@ -10812,8 +10828,8 @@ var PromptsFacade = class {
         await tx`
           UPDATE stackbone_platform.prompts
              SET current_version = ${nextVersion},
-                 name = ${options.name ?? current.name},
-                 description = ${options.description !== void 0 ? options.description : current.description},
+                 name = ${options.name ?? current3.name},
+                 description = ${options.description !== void 0 ? options.description : current3.description},
                  metadata = COALESCE(${options.metadata !== void 0 ? JSON.stringify(options.metadata) : null}::jsonb, metadata),
                  updated_at = now()
            WHERE key = ${key}
@@ -11235,7 +11251,7 @@ async function createDocument(sql, args) {
     `;
     const insertedDoc = await tx`
       INSERT INTO stackbone_platform.rag_documents (collection_id, source, content_hash, metadata)
-      VALUES (${collectionId}, ${args.source}, ${args.contentHash}, ${tx.json(args.metadata)})
+      VALUES (${collectionId}, ${args.source}, ${args.contentHash}, ${JSON.stringify(args.metadata)}::jsonb)
       RETURNING id
     `;
     const documentId = insertedDoc[0]?.id;
@@ -15994,6 +16010,164 @@ var SecretsFacade = class {
     }
   }
 };
+
+// src/runtime/workflow-scheduler.ts
+var current;
+function setWorkflowScheduler(scheduler) {
+  current = scheduler;
+}
+__name(setWorkflowScheduler, "setWorkflowScheduler");
+function getWorkflowScheduler() {
+  if (!current) {
+    throw new Error("No workflow scheduler is bound. `scheduleWorkflow` / `unschedule` / `listSchedules` can only be called inside a running workflow runtime \u2014 the runtime binds the scheduler on its first dispatch.");
+  }
+  return current;
+}
+__name(getWorkflowScheduler, "getWorkflowScheduler");
+
+// src/surfaces/agent-local/workflows/schedule-workflow.ts
+async function scheduleWorkflow(name, input, cron) {
+  return getWorkflowScheduler().schedule(name, input, cron);
+}
+__name(scheduleWorkflow, "scheduleWorkflow");
+async function unschedule(name) {
+  return getWorkflowScheduler().unschedule(name);
+}
+__name(unschedule, "unschedule");
+async function listSchedules() {
+  return getWorkflowScheduler().listSchedules();
+}
+__name(listSchedules, "listSchedules");
+
+// src/runtime/workflow-starter.ts
+var current2;
+function setWorkflowStarter(starter) {
+  current2 = starter;
+}
+__name(setWorkflowStarter, "setWorkflowStarter");
+function getWorkflowStarter() {
+  if (!current2) {
+    throw new Error("No workflow starter is bound. `startWorkflow` / `startWorkflowAndWait` can only be called from inside a running workflow \u2014 the runtime binds the starter on its first dispatch.");
+  }
+  return current2;
+}
+__name(getWorkflowStarter, "getWorkflowStarter");
+
+// src/surfaces/agent-local/workflows/start-workflow.ts
+async function startWorkflow(name, input, opts) {
+  "use step";
+  return getWorkflowStarter().start(name, input, opts);
+}
+__name(startWorkflow, "startWorkflow");
+
+// src/surfaces/agent-local/workflows/start-workflow-and-wait.ts
+async function startWorkflowAndWait(name, input, opts) {
+  "use step";
+  return await getWorkflowStarter().startAndWait(name, input, opts);
+}
+__name(startWorkflowAndWait, "startWorkflowAndWait");
+
+// src/surfaces/agent-local/workflows/workflows-accessor.ts
+var workflows = {
+  start: startWorkflow,
+  startAndWait: startWorkflowAndWait,
+  schedule: scheduleWorkflow,
+  unschedule,
+  listSchedules
+};
+function agentRegistry() {
+  const raw = process.env["AGENT_URLS"];
+  if (!raw) {
+    throw new Error("AGENT_URLS is not set. The emulator injects it; run this workflow through `stackbone dev`.");
+  }
+  return JSON.parse(raw);
+}
+__name(agentRegistry, "agentRegistry");
+function resolveAgentHost(name) {
+  const registry = agentRegistry();
+  const host = registry[name];
+  if (!host) {
+    throw new Error(`Unknown agent "${name}". Known agents: ${Object.keys(registry).join(", ")}`);
+  }
+  return host;
+}
+__name(resolveAgentHost, "resolveAgentHost");
+function signWorkflowHeaders() {
+  const secret = process.env["HMAC_SECRET"] ?? "";
+  const timestamp = String(Date.now());
+  const signature = createHmac("sha256", secret).update(timestamp).digest("hex");
+  return {
+    "x-stackbone-timestamp": timestamp,
+    "x-stackbone-workflow-signature": signature
+  };
+}
+__name(signWorkflowHeaders, "signWorkflowHeaders");
+
+// src/surfaces/external/agents/lazy-agent.ts
+var EVE_CLIENT_MODULE = "eve/client";
+async function buildEveClient(name) {
+  const host = resolveAgentHost(name);
+  const { Client } = await import(EVE_CLIENT_MODULE);
+  return new Client({
+    host,
+    headers: /* @__PURE__ */ __name(() => signWorkflowHeaders(), "headers")
+  });
+}
+__name(buildEveClient, "buildEveClient");
+function seedSessionState(seed) {
+  if (typeof seed === "string") return {
+    continuationToken: seed,
+    streamIndex: 0
+  };
+  return seed ?? {
+    streamIndex: 0
+  };
+}
+__name(seedSessionState, "seedSessionState");
+function lazyAgentSession(getClient, seed) {
+  const seededState = seedSessionState(seed);
+  let real;
+  let opened;
+  const session = /* @__PURE__ */ __name(() => {
+    real ??= getClient().then((client) => client.session(seed)).then((s2) => {
+      opened = s2;
+      return s2;
+    }).catch((error) => {
+      real = void 0;
+      throw error;
+    });
+    return real;
+  }, "session");
+  return {
+    get state() {
+      return opened ? opened.state : seededState;
+    },
+    async send(input) {
+      return (await session()).send(input);
+    },
+    async *stream(options) {
+      yield* (await session()).stream(options);
+    }
+  };
+}
+__name(lazyAgentSession, "lazyAgentSession");
+function lazyAgent(name) {
+  let client;
+  const getClient = /* @__PURE__ */ __name(() => {
+    client ??= buildEveClient(name).catch((error) => {
+      client = void 0;
+      throw error;
+    });
+    return client;
+  }, "getClient");
+  return {
+    session(state) {
+      return lazyAgentSession(getClient, state);
+    }
+  };
+}
+__name(lazyAgent, "lazyAgent");
+var agent = /* @__PURE__ */ __name((name) => lazyAgent(name), "agent");
 var AiModule = class {
   static {
     __name(this, "AiModule");
@@ -16324,6 +16498,95 @@ function mapApiError(raw, model) {
   };
 }
 __name(mapApiError, "mapApiError");
+var TIMESTAMP_HEADER = "x-stackbone-timestamp";
+var SIGNATURE_HEADER2 = "x-stackbone-workflow-signature";
+function signBrokerHeaders() {
+  const secret = process.env["HMAC_SECRET"] ?? "";
+  const timestamp = String(Date.now());
+  const signature = createHmac("sha256", secret).update(timestamp).digest("hex");
+  return {
+    [TIMESTAMP_HEADER]: timestamp,
+    [SIGNATURE_HEADER2]: signature
+  };
+}
+__name(signBrokerHeaders, "signBrokerHeaders");
+function brokerBaseUrl() {
+  const url = process.env["STACKBONE_API_URL"];
+  if (!url) {
+    throw new Error("STACKBONE_API_URL is not set. The Stackbone runtime injects the broker base URL; run this agent through `stackbone dev`.");
+  }
+  return url.replace(/\/+$/, "");
+}
+__name(brokerBaseUrl, "brokerBaseUrl");
+function installationId() {
+  const id = process.env["STACKBONE_INSTALLATION_ID"];
+  if (!id) {
+    throw new Error("STACKBONE_INSTALLATION_ID is not set. The Stackbone runtime injects it; run this agent through `stackbone dev`.");
+  }
+  return id;
+}
+__name(installationId, "installationId");
+
+// src/surfaces/external/connect/call-connector.ts
+var EXECUTE_PATH = "/api/connect/execute";
+function connectorCallError(code, message) {
+  const error = new Error(message);
+  error.code = code;
+  return error;
+}
+__name(connectorCallError, "connectorCallError");
+function errorFromBody(status, body) {
+  if (body && body.ok === false && body.error && typeof body.error.code === "string") {
+    return connectorCallError(body.error.code, body.error.message ?? `Stackbone Connect broker rejected the call (code "${body.error.code}").`);
+  }
+  return connectorCallError("credential_error", `Stackbone Connect broker responded ${status}.`);
+}
+__name(errorFromBody, "errorFromBody");
+async function callConnector(connector, operation, args, opts) {
+  const principal = opts?.principal ?? {
+    type: "app"
+  };
+  const url = `${brokerBaseUrl()}${EXECUTE_PATH}`;
+  const body = JSON.stringify({
+    connector,
+    operation,
+    args: args ?? {},
+    principal,
+    installationId: installationId()
+  });
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...signBrokerHeaders()
+      },
+      body
+    });
+  } catch (cause) {
+    throw connectorCallError("execute_failed", `Stackbone Connect broker is unreachable: ${cause instanceof Error ? cause.message : String(cause)}`);
+  }
+  const parsed = await response.json().catch(() => null);
+  if (!response.ok || parsed && parsed.ok === false) {
+    throw errorFromBody(response.status, parsed ?? null);
+  }
+  if (!parsed || parsed.ok !== true) {
+    throw connectorCallError("invalid_output", "Stackbone Connect broker returned a malformed execute response.");
+  }
+  return parsed.output;
+}
+__name(callConnector, "callConnector");
+var connectorHandle = /* @__PURE__ */ __name((id) => new Proxy(/* @__PURE__ */ Object.create(null), {
+  get(_target, prop) {
+    if (typeof prop !== "string" || prop === "then") return void 0;
+    if (prop === "call") {
+      return (operation, args, opts) => callConnector(id, operation, args, opts);
+    }
+    return (args, opts) => callConnector(id, prop, args, opts);
+  }
+}), "connectorHandle");
+var connection = /* @__PURE__ */ __name((id) => connectorHandle(id), "connection");
 var R2_ENDPOINT_HOST_SUFFIX = ".r2.cloudflarestorage.com";
 function createS3CompatClient(options) {
   return new S3Client({
@@ -16753,6 +17016,8 @@ var QueuesModule = class {
     this._http = _http;
     this._gate = gate ?? createModuleGate("queues", resolved);
   }
+  /** @deprecated Classic v2 only. Prefer `startWorkflow(name, input)` from
+  *  `@stackbone/sdk/workflow` (a job → a workflow run on the World). */
   async publish(request) {
     return withGate(this._gate, async () => {
       const body = {
@@ -16771,6 +17036,8 @@ var QueuesModule = class {
       });
     });
   }
+  /** @deprecated Classic v2 only. Prefer `scheduleWorkflow(name, input, cron)`
+  *  from `@stackbone/sdk/workflow` (a cron → a workflow run on the World). */
   async schedule(request) {
     return withGate(this._gate, async () => {
       const body = {
@@ -16789,6 +17056,8 @@ var QueuesModule = class {
       });
     });
   }
+  /** @deprecated Classic v2 only. Prefer `unschedule(name)` from
+  *  `@stackbone/sdk/workflow`. */
   async unschedule(request) {
     return withGate(this._gate, async () => this._http.request({
       method: "POST",
@@ -16800,6 +17069,8 @@ var QueuesModule = class {
       errorMapping: ERROR_MAPPING2
     }));
   }
+  /** @deprecated Classic v2 only. Prefer `listSchedules()` from
+  *  `@stackbone/sdk/workflow`. */
   async listSchedules() {
     return withGate(this._gate, async () => this._http.request({
       method: "GET",
@@ -16824,7 +17095,7 @@ var StackboneClient = class {
   _secrets;
   _config;
   _queues;
-  _connections;
+  _legacyConnections;
   _memory;
   _prompts;
   _httpClient;
@@ -16878,16 +17149,77 @@ var StackboneClient = class {
     return this._queues;
   }
   /**
-  * Live surface — the agent's handle on the workspace's connector connections.
-  * `list` / `invoke` make authenticated calls to the control-plane connectors
-  * proxy (`/api/v1/agent/connections/*`); the credentials never enter the agent
+  * Legacy surface — the agent's handle on the workspace's connector connections
+  * under the OLD connector model. `list` / `invoke(connector, action, args)` make
+  * authenticated calls to the control-plane connectors proxy
+  * (`/api/v1/agent/connections/*`); the credentials never enter the agent
   * container. Gated against `connections.actions` so the handshake-blocked /
   * capability-missing paths are exercised the same way as the other gated
   * surfaces.
+  *
+  * Named `legacyConnections` (not `connections`) so it no longer sits one letter
+  * from the new peer-free `connection(id)` entrypoint above — the two connector
+  * entrypoints are now unambiguous. Behaviour is unchanged from the old
+  * `connections` member.
+  */
+  get legacyConnections() {
+    this._legacyConnections ??= new ConnectionsModule(this.resolved, this.http(), createModuleGate("connections", this.resolved, this._contractStore));
+    return this._legacyConnections;
+  }
+  /**
+  * Peer-free connector entrypoint — `stackbone.connection(id)` selects a Stackbone
+  * Connect connector by its verbatim id and returns a typed handle whose generated
+  * operations (`.sendMail({ ... })`, typed via the `StackboneConnections` registry)
+  * and dynamic `.call(operation, args)` escape hatch both resolve to the same broker
+  * call (`POST /api/connect/execute`, HMAC scheme A). It is a plain HMAC fetch — it
+  * imports NO `eve` peer — so it is wired directly onto the client with no lazy
+  * loading and pulls no new peer into the main barrel.
+  *
+  * This is the namespaced form of the top-level `connection(...)` export (now
+  * `@deprecated`); both delegate to the same implementation. Distinct from the
+  * plural `connections` surface above, which is the control-plane connectors proxy
+  * (`list` / `invoke`).
+  */
+  get connection() {
+    return connection;
+  }
+  /**
+  * Namespaced sibling-agent entrypoint — `stackbone.agent(id)` selects a sibling
+  * eve agent by its verbatim name and returns a lazy eve `Client`, so a workflow
+  * step delegates with `stackbone.agent('support').session().send({ ... })`. The
+  * name is typed against the augmentable `AgentRegistry` (declared names
+  * autocomplete, a typo is a compile error).
+  *
+  * Peer isolation is load-bearing: selecting the agent and opening a session are
+  * synchronous and import NO `eve` peer — only the session's already-async leaves
+  * (`send` / `stream`) resolve `eve/client` via dynamic import on first use. So a
+  * tool-only agent that imports `@stackbone/sdk` and never calls `agent(...)` never
+  * eager-loads the optional `eve` peer and cannot crash-loop on a missing dep.
+  *
+  * This is the namespaced form of the top-level `eveAgent(...)` export (now
+  * `@deprecated`) on the `@stackbone/sdk/workflow` subpath; both produce the same
+  * signed workflow→agent call and the same eve `Client` API.
+  */
+  get agent() {
+    return agent;
+  }
+  /**
+  * Namespaced workflow trigger + schedule surface — `stackbone.workflows.start(...)`
+  * / `.startAndWait(...)` / `.schedule(...)` / `.unschedule(...)` / `.listSchedules()`.
+  * Start another workflow by name (fire-and-forget or durable sub-routine) and
+  * manage dynamic cron triggers, all from inside a running workflow.
+  *
+  * These are peer-free shims over the ambient `WorkflowStarter` / `WorkflowScheduler`
+  * the runtime injects on first dispatch — they import NO `workflow` / `eve` peer,
+  * so (like `connection` / `agent`) they are wired directly onto the client and
+  * pull nothing new into the main barrel. This is the namespaced form of the loose
+  * `startWorkflow(...)` / `scheduleWorkflow(...)` exports (now `@deprecated`) on the
+  * `@stackbone/sdk/workflow` subpath; both delegate to the same implementation, so
+  * `start` / `startAndWait` keep their `"use step"` durability. The peer-bound
+  * authoring API (`requestApproval` / `defineHook` / `sleep`) stays on that subpath.
   */
-  get connections() {
-    this._connections ??= new ConnectionsModule(this.resolved, this.http(), createModuleGate("connections", this.resolved, this._contractStore));
-    return this._connections;
+  get workflows() {
+    return workflows;
   }
   /**
   * Pending surface — runtime not built. Every method returns
@@ -17056,7 +17388,9 @@ var SDK_ERROR_CODE_PREFIXES = {
     "unavailable"
   ],
   /**
-  * `client.connections` — the agent → control plane connectors proxy. Both
+  * `client.legacyConnections` — the agent → control plane connectors proxy
+  * (legacy connector model). The `connections_*` code prefix stays stable (it
+  * names the wire domain, not the client accessor). Both
   * methods (`list`, `invoke`) hit the `/api/v1/agent/connections/*` endpoints
   * over `HttpClient`, so the full status→domain remap (`connections_unauthorized`,
   * `connections_not_found`, `connections_unavailable`, …) is in play. The agent
@@ -17237,6 +17571,9 @@ function assertCapabilityShape(name, capability) {
 }
 __name(assertCapabilityShape, "assertCapabilityShape");
 
+// src/runtime/define-workspace.ts
+var defineWorkspace = /* @__PURE__ */ __name((workspace) => workspace, "defineWorkspace");
+
 // src/runtime/logger.ts
 var writeLine = /* @__PURE__ */ __name((stream, level, msg, bindings, meta, now) => {
   const record = {
@@ -17274,6 +17611,37 @@ function getInvocationContext() {
   return storage.getStore();
 }
 __name(getInvocationContext, "getInvocationContext");
+function runWithCallerId(id, fn, options) {
+  const context = {
+    runId: id,
+    invocationId: options?.invocationId ?? id,
+    // Only attach `handler` when supplied: `exactOptionalPropertyTypes` forbids
+    // an explicit `undefined` on an optional property.
+    ...options?.handler !== void 0 ? {
+      handler: options.handler
+    } : {}
+  };
+  return runWithInvocationContext(context, fn);
+}
+__name(runWithCallerId, "runWithCallerId");
+
+// src/runtime/ambient-client.ts
+var cached;
+function resolveAmbientClient() {
+  cached ??= createClient();
+  return cached;
+}
+__name(resolveAmbientClient, "resolveAmbientClient");
+var stackbone = new Proxy({}, {
+  get(_target, prop) {
+    const client = resolveAmbientClient();
+    const value = Reflect.get(client, prop, client);
+    return typeof value === "function" ? value.bind(client) : value;
+  },
+  has(_target, prop) {
+    return Reflect.has(resolveAmbientClient(), prop);
+  }
+});
 var patched = /* @__PURE__ */ new WeakSet();
 function installInvocationConsoleCapture(options = {}) {
   const target = options.console ?? console;
@@ -17568,6 +17936,6 @@ var analyzeAgentSchemas = /* @__PURE__ */ __name((pair) => {
   };
 }, "analyzeAgentSchemas");
 
-export { INVOCATION_ID_HEADER, INVOKE_TIMEOUT_HARD_CAP_MS, RESERVED_ERROR_CODES, RESERVED_HANDLER_NAMES, RUN_ID_HEADER, STORED_TO_SDK_ENV, StackboneClient, analyzeAgentSchemas, createClient, createStructuredLogger, defineAgent, getInvocationContext, installInvocationConsoleCapture, invokeRequestSchema, isReservedErrorCode, isSdkErrorCode, loadSystemSecretsIntoEnv, rehydrateSystemSecretsRows, runWithInvocationContext };
+export { INVOCATION_ID_HEADER, INVOKE_TIMEOUT_HARD_CAP_MS, RESERVED_ERROR_CODES, RESERVED_HANDLER_NAMES, RUN_ID_HEADER, STORED_TO_SDK_ENV, StackboneClient, analyzeAgentSchemas, createClient, createStructuredLogger, defineAgent, defineWorkspace, getInvocationContext, getWorkflowScheduler, getWorkflowStarter, installInvocationConsoleCapture, invokeRequestSchema, isReservedErrorCode, isSdkErrorCode, loadSystemSecretsIntoEnv, rehydrateSystemSecretsRows, runWithCallerId, runWithInvocationContext, setWorkflowScheduler, setWorkflowStarter, stackbone };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map