@stigmer/runner-slim 3.11.0 → 3.12.0

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@stigmer/runner-slim",
-  "version": "3.11.0",
+  "version": "3.12.0",
   "description": "Self-contained Stigmer runner build for embedding in desktop apps — the bundle-friendly @stigmer/runner",
   "license": "Apache-2.0",
   "engines": {
-    "node": ">=22.13"
+    "node": "^22.13.0 || >=23.4.0"
   },
   "bin": {
     "stigmer-runner": "./main.js"
@@ -16,11 +16,11 @@
     "jq-wasm": "^1.1.0-jq-1.8.1"
   },
   "optionalDependencies": {
-    "@stigmer/runner-slim-darwin-arm64": "3.11.0",
-    "@stigmer/runner-slim-darwin-x64": "3.11.0",
-    "@stigmer/runner-slim-linux-x64": "3.11.0",
-    "@stigmer/runner-slim-linux-arm64": "3.11.0",
-    "@stigmer/runner-slim-win32-x64": "3.11.0"
+    "@stigmer/runner-slim-darwin-arm64": "3.12.0",
+    "@stigmer/runner-slim-darwin-x64": "3.12.0",
+    "@stigmer/runner-slim-linux-x64": "3.12.0",
+    "@stigmer/runner-slim-linux-arm64": "3.12.0",
+    "@stigmer/runner-slim-win32-x64": "3.12.0"
   },
   "keywords": [
     "stigmer",

package/workflow-bundle.js

@@ -25152,12 +25152,14 @@ function buildRecoveryContext(tasks) {
 "use strict";
 __webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   RuntimePlaceholderResolutionError: () => (/* binding */ RuntimePlaceholderResolutionError),
 /* harmony export */   collectExpressions: () => (/* binding */ collectExpressions),
 /* harmony export */   isRuntimePlaceholder: () => (/* binding */ isRuntimePlaceholder),
 /* harmony export */   resolveConfigExpressions: () => (/* binding */ resolveConfigExpressions),
 /* harmony export */   resolveEmbeddedExpressions: () => (/* binding */ resolveEmbeddedExpressions),
 /* harmony export */   resolveObjectPlaceholders: () => (/* binding */ resolveObjectPlaceholders),
 /* harmony export */   resolveRuntimePlaceholders: () => (/* binding */ resolveRuntimePlaceholders),
+/* harmony export */   resolveRuntimePlaceholdersStrict: () => (/* binding */ resolveRuntimePlaceholdersStrict),
 /* harmony export */   substituteResults: () => (/* binding */ substituteResults)
 /* harmony export */ });
 /* harmony import */ var _clone_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/*! ./clone.js */ "./dist/workflow-engine/clone.js");
@@ -25288,6 +25290,8 @@ function parsePath(path) {
     return parts;
 }
 const RUNTIME_PLACEHOLDER_RE = /\$\{\.(secrets|env_vars)\.\w+\}/;
+/** Substitution form of {@link RUNTIME_PLACEHOLDER_RE} (global, capturing). */
+const RUNTIME_PLACEHOLDER_SUB_RE = /\$\{\.(secrets|env_vars)\.(\w+)\}/g;
 /**
  * Checks whether a string contains a runtime placeholder that should
  * NOT be evaluated in the workflow (deterministic) phase. These are
@@ -25301,16 +25305,49 @@ function isRuntimePlaceholder(value) {
 }
 /**
  * Resolves runtime placeholders (`${.secrets.KEY}`, `${.env_vars.KEY}`)
- * in a string using values from the runtime environment map.
+ * in a string using values from the runtime environment map. Missing
+ * keys resolve to `""` — callers that must fail loudly instead use
+ * {@link resolveRuntimePlaceholdersStrict}.
  *
  * This runs in activities only — never in the workflow sandbox.
  */
 function resolveRuntimePlaceholders(value, runtimeEnv) {
-    return value.replace(/\$\{\.(secrets|env_vars)\.(\w+)\}/g, (_match, _ns, key) => {
+    return value.replace(RUNTIME_PLACEHOLDER_SUB_RE, (_match, _ns, key) => {
         const resolved = runtimeEnv[key];
         return resolved !== undefined ? String(resolved) : "";
     });
 }
+/** Thrown by {@link resolveRuntimePlaceholdersStrict} for a missing key. */
+class RuntimePlaceholderResolutionError extends Error {
+    variableName;
+    context;
+    constructor(variableName, context) {
+        const where = context ? ` in ${context}` : "";
+        super(`Unresolved runtime placeholder for "${variableName}"${where}: ` +
+            `variable is not present in the workflow's runtime environment`);
+        this.variableName = variableName;
+        this.context = context;
+        this.name = "RuntimePlaceholderResolutionError";
+    }
+}
+/**
+ * Strict variant of {@link resolveRuntimePlaceholders}: a placeholder
+ * whose key is missing from the runtime environment throws instead of
+ * resolving to `""` — a silently-empty credential produces cryptic
+ * downstream failures, so declared-value consumers (the run task's env
+ * contract) fail fast with the variable named.
+ *
+ * This runs in activities only — never in the workflow sandbox.
+ */
+function resolveRuntimePlaceholdersStrict(value, runtimeEnv, context) {
+    return value.replace(RUNTIME_PLACEHOLDER_SUB_RE, (_match, _ns, key) => {
+        const resolved = runtimeEnv[key];
+        if (resolved === undefined) {
+            throw new RuntimePlaceholderResolutionError(key, context);
+        }
+        return String(resolved);
+    });
+}
 /**
  * Recursively resolves all runtime placeholders in a nested object.
  * Walks maps, arrays, and strings. Non-string leaves pass through.
@@ -28261,6 +28298,7 @@ async function connectMcpServer(input) {
     const discovery = await discover.DiscoverMcpServerCapabilities({
         mcpServerId: input.mcp_server_id,
         executionContextId: input.execution_context_id ?? null,
+        executionContextToken: input.execution_context_token ?? null,
         invokerIdentityAccountId: input.invoker_identity_account_id ?? null,
     });
     // Content-addressed incremental classification: reuse prior decisions for
@@ -28325,6 +28363,7 @@ async function discoverMcpServerLegacy(input) {
     const discovery = await discover.DiscoverMcpServerCapabilities({
         mcpServerId: input.mcp_server_id,
         executionContextId: input.execution_context_id ?? null,
+        executionContextToken: input.execution_context_token ?? null,
         invokerIdentityAccountId: input.invoker_identity_account_id ?? null,
     });
     return {