@stigmer/runner-slim 3.1.9 → 3.1.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/runner-slim",
-  "version": "3.1.9",
+  "version": "3.1.11",
   "description": "Self-contained Stigmer runner build for embedding in desktop apps — the bundle-friendly @stigmer/runner",
   "license": "Apache-2.0",
   "engines": {
@@ -16,11 +16,11 @@
     "jq-wasm": "^1.1.0-jq-1.8.1"
   },
   "optionalDependencies": {
-    "@stigmer/runner-slim-darwin-arm64": "3.1.9",
-    "@stigmer/runner-slim-darwin-x64": "3.1.9",
-    "@stigmer/runner-slim-linux-x64": "3.1.9",
-    "@stigmer/runner-slim-linux-arm64": "3.1.9",
-    "@stigmer/runner-slim-win32-x64": "3.1.9"
+    "@stigmer/runner-slim-darwin-arm64": "3.1.11",
+    "@stigmer/runner-slim-darwin-x64": "3.1.11",
+    "@stigmer/runner-slim-linux-x64": "3.1.11",
+    "@stigmer/runner-slim-linux-arm64": "3.1.11",
+    "@stigmer/runner-slim-win32-x64": "3.1.11"
   },
   "keywords": [
     "stigmer",

package/workflow-bundle.js

@@ -25324,9 +25324,16 @@ function collectEmbeddedExpressions(obj, prefix, mappings, batchExprs, skipPaths
     }
 }
 function collectEmbeddedFromValue(value, path, mappings, batchExprs, skipPaths) {
+    // A Phase-1-resolved path holds data, not template text: skip its
+    // entire subtree, whatever shape it resolved to. A strict expression
+    // can resolve to an object or array whose nested strings carry literal
+    // `${ ... }` text from external sources (webhook payloads, API
+    // responses, documents under review) that must never be re-interpreted
+    // as expressions. Checking only string values at the exact path — the
+    // previous behavior — left those nested strings exposed.
+    if (skipPaths.has(path))
+        return;
     if (typeof value === "string") {
-        if (skipPaths.has(path))
-            return;
         if ((0,_expression_utils_js__WEBPACK_IMPORTED_MODULE_1__.isStrictExpr)(value))
             return;
         const expressions = (0,_expression_utils_js__WEBPACK_IMPORTED_MODULE_1__.extractEmbeddedExpressions)(value);
@@ -25856,7 +25863,7 @@ class TaskStatusAccumulator {
             error: reason,
         });
     }
-    taskWaitingApproval(name) {
+    taskWaitingApproval(name, uiHint) {
         const existing = this.entries.get(name);
         this.entries.set(name, {
             ...existing,
@@ -25865,6 +25872,7 @@ class TaskStatusAccumulator {
             taskKind: existing?.taskKind ?? "",
             status: "waiting_approval",
             startedAt: existing?.startedAt,
+            uiHint: uiHint ?? existing?.uiHint,
         });
     }
     setTaskMetadata(name, metadata) {
@@ -26711,6 +26719,8 @@ __webpack_require__.r(__webpack_exports__);
  *       call: human_input
  *       with:
  *         prompt: "Please review this deployment"
+ *         payload: ${ $context.deployment_plan }
+ *         ui_hint: deployment-plan
  *         timeout: 300
  *         on_timeout: approve
  *         outcomes:
@@ -26718,6 +26728,11 @@ __webpack_require__.r(__webpack_exports__);
  *           - name: deny
  *           - name: revise
  *             then: gatherMore
+ *
+ * The payload (the material under review) is expression-resolved at gate
+ * activation and attached to the approval_requested event — inline when
+ * small, as an artifact reference when at/above the promotion threshold —
+ * so the approval record captures exactly what the reviewer saw.
  */
 
 
@@ -26735,10 +26750,12 @@ async function executeHumanInputTask(taskDef, taskName, state, ctx) {
     const timeoutSeconds = config.timeout ?? DEFAULT_TIMEOUT_SECONDS;
     const onTimeout = config.onTimeout ?? DEFAULT_ON_TIMEOUT;
     const resolvedPrompt = await resolvePromptExpressions(config.prompt, state, ctx);
+    const review = await resolveReviewPayload(config, taskName, state, ctx);
     const approvalRequestedAt = Date.now();
-    ctx.taskStatusAccumulator?.taskWaitingApproval(taskName);
+    ctx.taskStatusAccumulator?.taskWaitingApproval(taskName, config.uiHint);
     if (ctx.emitEvents) {
-        await ctx.emitEvents([{
+        await ctx.emitEvents([
+            {
                 type: "approval_requested",
                 taskName,
                 occurredAt: new Date().toISOString(),
@@ -26750,7 +26767,12 @@ async function executeHumanInputTask(taskDef, taskName, state, ctx) {
                     label: o.label ?? "",
                 })),
                 formSchema: config.formSchema,
-            }]);
+                payload: review.payload,
+                uiHint: config.uiHint,
+                payloadArtifactId: review.payloadArtifactId,
+            },
+            ...review.artifactEvents,
+        ]);
     }
     const result = await ctx.awaitHumanInput({
         signalName,
@@ -26781,6 +26803,58 @@ function validateConfig(config, taskName) {
         throw new Error(`human_input task '${taskName}': 'prompt' is required`);
     }
 }
+const NO_REVIEW_PAYLOAD = { artifactEvents: [] };
+/**
+ * Resolves the review payload's `${ ... }` expressions and decides how it
+ * rides the approval_requested event: inline when small, or as an artifact
+ * reference when at/above the promotion threshold (256KB).
+ *
+ * Resolution goes through `resolveConfigExpressions` for its two-phase
+ * injection safety: review material resolved from `$context` (article
+ * drafts, webhook data) may contain literal `${ ... }` text that must
+ * never be re-evaluated as an expression.
+ *
+ * A resolution failure fails the task — a gate whose review material
+ * failed to materialize must not present an empty review. Promotion
+ * failure falls back to inline delivery (best-effort, matching the
+ * do-executor's task-output promotion policy).
+ */
+async function resolveReviewPayload(config, taskName, state, ctx) {
+    if (config.payload === undefined || config.payload === null) {
+        return NO_REVIEW_PAYLOAD;
+    }
+    let resolved;
+    try {
+        const result = await (0,_resolve_js__WEBPACK_IMPORTED_MODULE_0__.resolveConfigExpressions)({ payload: config.payload }, null, state, ctx.evaluateExpressions);
+        resolved = result.payload;
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`human_input task '${taskName}': failed to resolve 'payload' expressions: ${message}`);
+    }
+    // jq resolves missing paths to null rather than erroring. A configured
+    // payload that materializes as nothing is an authoring error (typically a
+    // wrong $context path) — fail loudly instead of presenting an empty review.
+    if (resolved === undefined || resolved === null) {
+        throw new Error(`human_input task '${taskName}': 'payload' resolved to null — ` +
+            `check that the expression references existing workflow data`);
+    }
+    if (ctx.promoteTaskOutput) {
+        try {
+            const promotion = await ctx.promoteTaskOutput(resolved, state.env?.__stigmer_execution_id ?? "", taskName, `${taskName} — review-payload.json`);
+            if (promotion.artifactIds.length > 0) {
+                return {
+                    payloadArtifactId: promotion.artifactIds[0],
+                    artifactEvents: promotion.artifactCreatedEvents,
+                };
+            }
+        }
+        catch {
+            // Promotion is best-effort; fall through to inline delivery.
+        }
+    }
+    return { payload: resolved, artifactEvents: [] };
+}
 /**
  * Resolves `${ ... }` expressions in the prompt string against the
  * current workflow state. Handles both strict (whole-value) and embedded
@@ -28323,7 +28397,7 @@ async function runWorkflowEngine(input, options) {
             taskName: agentMeta.taskName,
             workflowExecutionId: agentMeta.workflowExecutionId || executionId,
         }),
-        promoteTaskOutput: (taskOutput, wexId, taskName) => promoteProxy.PromoteTaskOutput(taskOutput, wexId || executionId, taskName),
+        promoteTaskOutput: (taskOutput, wexId, taskName, displayName) => promoteProxy.PromoteTaskOutput(taskOutput, wexId || executionId, taskName, displayName),
     };
     const state = (0,_workflow_engine_state_js__WEBPACK_IMPORTED_MODULE_7__.createState)();
     state.env = {