@stigmer/runner 3.0.1

package/dist/activities/discover-mcp-server.js

@@ -0,0 +1,269 @@
+/**
+ * DiscoverMcpServerCapabilities Temporal activity — connects to an MCP server,
+ * enumerates its tools and resource templates, and returns a serializable
+ * result for the connect workflow.
+ *
+ * Part of the `stigmer/mcp-server/connect` workflow: runs as step 1 before
+ * ClassifyToolApprovals. The activity hydrates the MCP server spec via gRPC,
+ * resolves environment variables from a pre-created ExecutionContext, and
+ * connects using MultiServerMCPClient for transport management.
+ *
+ * Security: Temporal input carries only IDs (mcp_server_id,
+ * execution_context_id) — no secret values ever appear in workflow history.
+ * The activity resolves secrets from the backend-created ExecutionContext.
+ *
+ * Activity contract:
+ *   Name:   "DiscoverMcpServerCapabilities"
+ *   Input:  DiscoverMcpServerInput
+ *   Output: DiscoverMcpServerOutput
+ */
+import { createHash } from "node:crypto";
+import { MultiServerMCPClient } from "@langchain/mcp-adapters";
+import { activityStarted, activityFinished } from "../idle-watchdog.js";
+import { StigmerClient } from "../client/stigmer-client.js";
+import { mcpServerToResolved } from "../shared/mcp-resolver.js";
+import { toMcpClientConfig } from "../shared/mcp-manager.js";
+const SESSION_INIT_TIMEOUT_MS = 270_000;
+const PLATFORM_INJECTABLE_MAP = {
+    STIGMER_SERVER_ADDRESS: "STIGMER_MCP_PUBLIC_ENDPOINT",
+};
+// ─────────────────────────────────────────────────────────────────────────────
+// Tools Fingerprint (pure, deterministic, safe in workflow code)
+// ─────────────────────────────────────────────────────────────────────────────
+export function toolsFingerprint(tools) {
+    if (tools.length === 0)
+        return "";
+    const canonical = tools
+        .map((t) => ({
+        name: t.name,
+        description: t.description,
+        input_schema: t.inputSchema ?? null,
+    }))
+        .sort((a, b) => a.name.localeCompare(b.name));
+    return createHash("sha256")
+        .update(JSON.stringify(canonical))
+        .digest("hex");
+}
+export function extractPreviousState(mcpServer) {
+    const status = mcpServer.status;
+    if (!status)
+        return { fingerprint: "", toolApprovals: [] };
+    const caps = status.discoveredCapabilities;
+    const prevTools = [];
+    if (caps) {
+        for (const tool of caps.tools) {
+            let schema = null;
+            if (tool.inputSchema) {
+                schema = structToPlainObject(tool.inputSchema);
+            }
+            prevTools.push({
+                name: tool.name,
+                description: tool.description,
+                inputSchema: schema,
+            });
+        }
+    }
+    const toolApprovals = [];
+    for (const approval of status.toolApprovals) {
+        toolApprovals.push({
+            toolName: approval.toolName,
+            requiresApproval: true,
+            message: approval.message,
+        });
+    }
+    return {
+        fingerprint: toolsFingerprint(prevTools),
+        toolApprovals,
+    };
+}
+/**
+ * Convert a protobuf Struct to a plain JS object. The @bufbuild/protobuf
+ * Struct type uses `fields` as a Record<string, Value>; we need a plain
+ * JSON-compatible object for fingerprinting and serialization.
+ */
+function structToPlainObject(struct) {
+    if (!struct || typeof struct !== "object")
+        return null;
+    try {
+        return JSON.parse(JSON.stringify(struct));
+    }
+    catch {
+        return null;
+    }
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Platform Env Injection
+// ─────────────────────────────────────────────────────────────────────────────
+export function injectPlatformEnv(declaredEnvKeys, envVars) {
+    if (declaredEnvKeys.size === 0)
+        return envVars;
+    let result;
+    for (const [targetKey, sourceKey] of Object.entries(PLATFORM_INJECTABLE_MAP)) {
+        if (!declaredEnvKeys.has(targetKey))
+            continue;
+        const value = process.env[sourceKey];
+        if (!value)
+            continue;
+        if (!result)
+            result = { ...envVars };
+        if (targetKey in result && result[targetKey] !== value) {
+            console.info(`Platform env var '${targetKey}' overrides value from ExecutionContext ` +
+                `(platform infra vars are authoritative)`);
+        }
+        result[targetKey] = value;
+    }
+    return result ?? envVars;
+}
+export async function discoverMcpServer(input, deps) {
+    const { mcpServerId, executionContextId } = input;
+    const { stigmerClient } = deps;
+    console.log(`[DiscoverMcpServer] Discovery started for mcp_server_id=${mcpServerId}`);
+    const mcpServer = await stigmerClient.getMcpServer(mcpServerId);
+    if (!mcpServer?.spec) {
+        throw new Error(`MCP server '${mcpServerId}' not found or has no spec`);
+    }
+    const slug = mcpServer.metadata?.slug || mcpServerId;
+    const previousState = extractPreviousState(mcpServer);
+    const envVars = await resolveEnvVarsForDiscovery(stigmerClient, executionContextId ?? null);
+    const declaredEnvKeys = mcpServer.spec.env
+        ? new Set(Object.keys(mcpServer.spec.env))
+        : new Set();
+    const finalEnv = injectPlatformEnv(declaredEnvKeys, envVars);
+    const resolved = mcpServerToResolved(mcpServer, slug, finalEnv);
+    if (!resolved) {
+        throw new Error(`MCP server '${slug}' has no valid server type configured ` +
+            `(must specify either 'stdio' or 'http' in the spec)`);
+    }
+    const connectionConfig = toMcpClientConfig([resolved]);
+    const { tools, resourceTemplates } = await connectAndDiscover(slug, connectionConfig);
+    const newFp = toolsFingerprint(tools);
+    console.log(`[DiscoverMcpServer] Discovery complete for '${slug}': ` +
+        `${tools.length} tool(s), ${resourceTemplates.length} resource template(s)`);
+    return {
+        tools,
+        resourceTemplates,
+        previousToolsFingerprint: previousState.fingerprint,
+        previousToolApprovals: previousState.toolApprovals,
+        newToolsFingerprint: newFp,
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Env Var Resolution
+// ─────────────────────────────────────────────────────────────────────────────
+async function resolveEnvVarsForDiscovery(client, executionContextId) {
+    if (!executionContextId)
+        return {};
+    try {
+        const execCtx = await client.getExecutionContextByExecutionId(executionContextId);
+        if (!execCtx?.spec?.data || Object.keys(execCtx.spec.data).length === 0) {
+            console.warn(`[DiscoverMcpServer] ExecutionContext '${executionContextId}' not found ` +
+                `or empty — MCP server may not require environment variables`);
+            return {};
+        }
+        const envVars = {};
+        for (const [key, execValue] of Object.entries(execCtx.spec.data)) {
+            envVars[key] = execValue.value;
+        }
+        console.log(`[DiscoverMcpServer] Resolved ${Object.keys(envVars).length} env var(s) ` +
+            `from ExecutionContext '${executionContextId}'`);
+        return envVars;
+    }
+    catch (err) {
+        console.warn(`[DiscoverMcpServer] Failed to resolve ExecutionContext '${executionContextId}': ` +
+            `${err instanceof Error ? err.message : err}`);
+        return {};
+    }
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// MCP Connection + Enumeration
+// ─────────────────────────────────────────────────────────────────────────────
+async function connectAndDiscover(slug, connectionConfig) {
+    const client = new MultiServerMCPClient(connectionConfig);
+    const tools = [];
+    const resourceTemplates = [];
+    try {
+        await withTimeout(SESSION_INIT_TIMEOUT_MS, slug, async () => {
+            await client.initializeConnections();
+            const mcpClient = await client.getClient(slug);
+            if (!mcpClient) {
+                throw new Error(`Failed to get MCP client for server '${slug}' after initialization`);
+            }
+            const toolsResult = await mcpClient.listTools();
+            for (const tool of toolsResult.tools) {
+                tools.push({
+                    name: tool.name,
+                    description: tool.description ?? "",
+                    inputSchema: tool.inputSchema
+                        ? tool.inputSchema
+                        : null,
+                });
+            }
+            try {
+                const capabilities = mcpClient.getServerCapabilities();
+                if (capabilities?.resources) {
+                    const templatesResult = await mcpClient.listResourceTemplates();
+                    for (const tpl of templatesResult.resourceTemplates) {
+                        resourceTemplates.push({
+                            uriTemplate: tpl.uriTemplate,
+                            name: tpl.name,
+                            description: tpl.description ?? "",
+                            mimeType: tpl.mimeType ?? "",
+                        });
+                    }
+                }
+            }
+            catch (err) {
+                console.warn(`[DiscoverMcpServer] Server '${slug}' does not support ` +
+                    `resource templates: ${err instanceof Error ? err.message : err}`);
+            }
+        });
+    }
+    finally {
+        await client.close().catch((err) => {
+            console.warn(`[DiscoverMcpServer] Error closing MCP client for '${slug}': ` +
+                `${err instanceof Error ? err.message : err}`);
+        });
+    }
+    return { tools, resourceTemplates };
+}
+async function withTimeout(ms, serverSlug, fn) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            reject(new Error(`MCP server '${serverSlug}' did not respond within ` +
+                `${Math.round(ms / 1000)}s. If this server requires compilation or ` +
+                `package installation on first run (e.g. go run, npx), the cold ` +
+                `start may have exceeded the discovery timeout.`));
+        }, ms);
+        fn()
+            .then((result) => {
+            clearTimeout(timer);
+            resolve(result);
+        })
+            .catch((err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Temporal Activity Factory
+// ─────────────────────────────────────────────────────────────────────────────
+export function createDiscoverMcpServerActivities(config) {
+    const stigmerClient = new StigmerClient({
+        endpoint: config.stigmerBackendEndpoint,
+        token: config.stigmerToken,
+        tokenRef: config.stigmerTokenRef,
+    });
+    return {
+        DiscoverMcpServerCapabilities: async (input) => {
+            activityStarted();
+            try {
+                return await discoverMcpServer(input, { stigmerClient });
+            }
+            finally {
+                activityFinished();
+            }
+        },
+    };
+}
+//# sourceMappingURL=discover-mcp-server.js.map

package/dist/activities/discover-mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover-mcp-server.js","sourceRoot":"","sources":["../../src/activities/discover-mcp-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAI7D,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAExC,MAAM,uBAAuB,GAA2B;IACtD,sBAAsB,EAAE,6BAA6B;CACtD,CAAC;AAuCF,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAEhF,MAAM,UAAU,gBAAgB,CAAC,KAA6B;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,SAAS,GAAG,KAAK;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,YAAY,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;KACpC,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;SACjC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAWD,MAAM,UAAU,oBAAoB,CAAC,SAAoB;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAE3D,MAAM,IAAI,GAAG,MAAM,CAAC,sBAAsB,CAAC;IAC3C,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,MAAM,GAAmC,IAAI,CAAC;YAClD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAuB,EAAE,CAAC;IAC7C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,aAAa,CAAC,IAAI,CAAC;YACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,gBAAgB,EAAE,IAAI;YACtB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC;QACxC,aAAa;KACd,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAe;IAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,MAAM,UAAU,iBAAiB,CAC/B,eAA4B,EAC5B,OAA+B;IAE/B,IAAI,eAAe,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAE/C,IAAI,MAA0C,CAAC;IAE/C,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,IAAI,CAAC,MAAM;YAAE,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACrC,IAAI,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CACV,qBAAqB,SAAS,0CAA0C;gBACxE,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAC;AAC3B,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B,EAC7B,IAAkB;IAElB,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,KAAK,CAAC;IAClD,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAE/B,OAAO,CAAC,GAAG,CACT,2DAA2D,WAAW,EAAE,CACzE,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,4BAA4B,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,IAAI,WAAW,CAAC;IACrD,MAAM,aAAa,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAEtD,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAC9C,aAAa,EACb,kBAAkB,IAAI,IAAI,CAC3B,CAAC;IAEF,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG;QACxC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;IACtB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,wCAAwC;YAC3D,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,MAAM,kBAAkB,CAC3D,IAAI,EACJ,gBAAgB,CACjB,CAAC;IAEF,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAEtC,OAAO,CAAC,GAAG,CACT,+CAA+C,IAAI,KAAK;QACxD,GAAG,KAAK,CAAC,MAAM,aAAa,iBAAiB,CAAC,MAAM,uBAAuB,CAC5E,CAAC;IAEF,OAAO;QACL,KAAK;QACL,iBAAiB;QACjB,wBAAwB,EAAE,aAAa,CAAC,WAAW;QACnD,qBAAqB,EAAE,aAAa,CAAC,aAAa;QAClD,mBAAmB,EAAE,KAAK;KAC3B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,KAAK,UAAU,0BAA0B,CACvC,MAAqB,EACrB,kBAAiC;IAEjC,IAAI,CAAC,kBAAkB;QAAE,OAAO,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAC3D,kBAAkB,CACnB,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,IAAI,CACV,yCAAyC,kBAAkB,cAAc;gBACzE,6DAA6D,CAC9D,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;QACjC,CAAC;QAED,OAAO,CAAC,GAAG,CACT,gCAAgC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,cAAc;YACzE,0BAA0B,kBAAkB,GAAG,CAChD,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,2DAA2D,kBAAkB,KAAK;YAClF,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC9C,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,gBAAsD;IAKtD,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,iBAAiB,GAAuC,EAAE,CAAC;IAEjE,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,uBAAuB,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAErC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,wCAAwC,IAAI,wBAAwB,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;YAChD,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;oBACnC,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC3B,CAAC,CAAE,IAAI,CAAC,WAAuC;wBAC/C,CAAC,CAAC,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,SAAS,CAAC,qBAAqB,EAAE,CAAC;gBACvD,IAAI,YAAY,EAAE,SAAS,EAAE,CAAC;oBAC5B,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,qBAAqB,EAAE,CAAC;oBAChE,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,iBAAiB,EAAE,CAAC;wBACpD,iBAAiB,CAAC,IAAI,CAAC;4BACrB,WAAW,EAAE,GAAG,CAAC,WAAW;4BAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;4BAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;yBAC7B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CACV,+BAA+B,IAAI,qBAAqB;oBACxD,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC1C,OAAO,CAAC,IAAI,CACV,qDAAqD,IAAI,KAAK;gBAC9D,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC9C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,EAAU,EACV,UAAkB,EAClB,EAAoB;IAEpB,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,IAAI,KAAK,CACd,eAAe,UAAU,2BAA2B;gBACpD,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,4CAA4C;gBACpE,iEAAiE;gBACjE,gDAAgD,CACjD,CAAC,CAAC;QACL,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,EAAE,EAAE;aACD,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF,MAAM,UAAU,iCAAiC,CAAC,MAAc;IAC9D,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;QACtC,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,KAAK,EAAE,MAAM,CAAC,YAAY;QAC1B,QAAQ,EAAE,MAAM,CAAC,eAAe;KACjC,CAAC,CAAC;IAEH,OAAO;QACL,6BAA6B,EAAE,KAAK,EAClC,KAA6B,EACK,EAAE;YACpC,eAAe,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3D,CAAC;oBAAS,CAAC;gBACT,gBAAgB,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/emit-event.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Emit event action — constructs a CloudEvents 1.0 envelope and
+ * optionally delivers it to external targets.
+ *
+ * Delivery targets are optional. When absent, the envelope is returned
+ * as task output only (backward compatible). When present, the envelope
+ * is delivered to each target. Delivery is non-fatal: failures are
+ * collected in the result but do not fail the task.
+ *
+ * Supported delivery targets:
+ * - webhook: HTTP POST with Content-Type: application/cloudevents+json
+ * - signal:  Temporal signal to another running workflow's listen task
+ *
+ * CloudEvents spec: https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md
+ */
+export interface WebhookDeliveryTarget {
+    readonly url: string;
+    readonly headers?: Readonly<Record<string, string>>;
+}
+export interface SignalDeliveryTarget {
+    readonly workflow_id: string;
+    readonly signal_name: string;
+}
+export type DeliveryTarget = {
+    readonly webhook: WebhookDeliveryTarget;
+} | {
+    readonly signal: SignalDeliveryTarget;
+};
+export interface EmitEventConfig {
+    readonly event: {
+        readonly type: string;
+        readonly source?: string;
+        readonly subject?: string;
+        readonly data?: Record<string, unknown>;
+    };
+    readonly delivery?: readonly DeliveryTarget[];
+}
+export interface DeliveryError {
+    readonly target: string;
+    readonly error: string;
+}
+export interface EmitEventResult {
+    readonly envelope: Record<string, unknown>;
+    readonly delivery_errors?: readonly DeliveryError[];
+}
+export declare function emitEventAction(config: EmitEventConfig, executionId: string, runtimeEnv?: Record<string, unknown>): Promise<Record<string, unknown>>;

package/dist/activities/emit-event.js

@@ -0,0 +1,125 @@
+/**
+ * Emit event action — constructs a CloudEvents 1.0 envelope and
+ * optionally delivers it to external targets.
+ *
+ * Delivery targets are optional. When absent, the envelope is returned
+ * as task output only (backward compatible). When present, the envelope
+ * is delivered to each target. Delivery is non-fatal: failures are
+ * collected in the result but do not fail the task.
+ *
+ * Supported delivery targets:
+ * - webhook: HTTP POST with Content-Type: application/cloudevents+json
+ * - signal:  Temporal signal to another running workflow's listen task
+ *
+ * CloudEvents spec: https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md
+ */
+import { randomUUID } from "node:crypto";
+import { loadConfig } from "../config.js";
+import { resolveRuntimePlaceholders } from "../workflow-engine/resolve.js";
+const WEBHOOK_TIMEOUT_MS = 30_000;
+function buildEnvelope(config, executionId) {
+    const source = config.event.source || `/workflows/executions/${executionId}`;
+    const envelope = {
+        id: randomUUID(),
+        specversion: "1.0",
+        type: config.event.type,
+        source,
+        time: new Date().toISOString(),
+        datacontenttype: "application/json",
+    };
+    if (config.event.subject) {
+        envelope.subject = config.event.subject;
+    }
+    if (config.event.data && Object.keys(config.event.data).length > 0) {
+        envelope.data = config.event.data;
+    }
+    return envelope;
+}
+async function deliverWebhook(envelope, target, runtimeEnv) {
+    const resolvedHeaders = {
+        "Content-Type": "application/cloudevents+json",
+    };
+    if (target.headers) {
+        for (const [k, v] of Object.entries(target.headers)) {
+            resolvedHeaders[k] = resolveRuntimePlaceholders(v, runtimeEnv);
+        }
+    }
+    try {
+        const response = await fetch(target.url, {
+            method: "POST",
+            headers: resolvedHeaders,
+            body: JSON.stringify(envelope),
+            signal: AbortSignal.timeout(WEBHOOK_TIMEOUT_MS),
+        });
+        if (response.status >= 400) {
+            return {
+                target: `webhook:${target.url}`,
+                error: `HTTP ${response.status}`,
+            };
+        }
+        return null;
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            target: `webhook:${target.url}`,
+            error: message,
+        };
+    }
+}
+async function deliverSignal(envelope, target) {
+    try {
+        const { Connection, Client } = await import("@temporalio/client");
+        // Resolve Temporal coordinates through the central config layer rather than
+        // reading env directly: signal delivery must dial the SAME cluster/namespace
+        // the worker connected with. config.ts is the single source of truth for the
+        // canonical TEMPORAL_SERVICE_ADDRESS / TEMPORAL_NAMESPACE resolution — reading
+        // env here would diverge (and previously dialed localhost via a stale name).
+        const config = loadConfig();
+        const temporalAddress = config.temporalAddress;
+        const temporalNamespace = config.temporalNamespace;
+        const connection = await Connection.connect({ address: temporalAddress });
+        const client = new Client({ connection, namespace: temporalNamespace });
+        const handle = client.workflow.getHandle(target.workflow_id);
+        await handle.signal(target.signal_name, envelope);
+        return null;
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            target: `signal:${target.workflow_id}/${target.signal_name}`,
+            error: message,
+        };
+    }
+}
+export async function emitEventAction(config, executionId, runtimeEnv) {
+    if (!config.event) {
+        throw new Error("emit_event: 'event' field is required");
+    }
+    if (!config.event.type) {
+        throw new Error("emit_event: 'event.type' field is required");
+    }
+    const envelope = buildEnvelope(config, executionId);
+    if (!config.delivery || config.delivery.length === 0) {
+        return envelope;
+    }
+    const errors = [];
+    const env = runtimeEnv ?? {};
+    for (const target of config.delivery) {
+        let err = null;
+        if ("webhook" in target) {
+            err = await deliverWebhook(envelope, target.webhook, env);
+        }
+        else if ("signal" in target) {
+            err = await deliverSignal(envelope, target.signal);
+        }
+        if (err) {
+            errors.push(err);
+        }
+    }
+    if (errors.length > 0) {
+        return { ...envelope, delivery_errors: errors };
+    }
+    return envelope;
+}
+//# sourceMappingURL=emit-event.js.map

package/dist/activities/emit-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit-event.js","sourceRoot":"","sources":["../../src/activities/emit-event.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAoC3E,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,SAAS,aAAa,CACpB,MAAuB,EACvB,WAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,yBAAyB,WAAW,EAAE,CAAC;IAE7E,MAAM,QAAQ,GAA4B;QACxC,EAAE,EAAE,UAAU,EAAE;QAChB,WAAW,EAAE,KAAK;QAClB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;QACvB,MAAM;QACN,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9B,eAAe,EAAE,kBAAkB;KACpC,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACzB,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC1C,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACpC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAiC,EACjC,MAA6B,EAC7B,UAAmC;IAEnC,MAAM,eAAe,GAA2B;QAC9C,cAAc,EAAE,8BAA8B;KAC/C,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,eAAe,CAAC,CAAC,CAAC,GAAG,0BAA0B,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE,WAAW,MAAM,CAAC,GAAG,EAAE;gBAC/B,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;aACjC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,CAAC,GAAG,EAAE;YAC/B,KAAK,EAAE,OAAO;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAiC,EACjC,MAA4B;IAE5B,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAElE,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,+EAA+E;QAC/E,6EAA6E;QAC7E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC/C,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAEnD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAElD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,UAAU,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE;YAC5D,KAAK,EAAE,OAAO;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAuB,EACvB,WAAmB,EACnB,UAAoC;IAEpC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEpD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,UAAU,IAAI,EAAE,CAAC;IAE7B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,GAAG,GAAyB,IAAI,CAAC;QAErC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACxB,GAAG,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC9B,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IAClD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/activities/ensure-thread.d.ts

@@ -0,0 +1,24 @@
+/**
+ * EnsureThread Temporal activity — resolves a LangGraph thread ID for an
+ * agent execution.
+ *
+ * Called by the Java/Go InvokeAgentExecutionWorkflow as Step 1 of the
+ * native (deep-agent) harness flow, before ExecuteDeepAgent. The returned
+ * thread ID keys the LangGraph checkpointer for conversation continuity.
+ *
+ * Thread ID conventions (load-bearing for proxy authorization):
+ *   - Session-based:  "thread-{sessionId}"   — deterministic, no DB call
+ *   - Ephemeral:      "ephemeral-{agentId}-{8hex}" — single-use
+ *
+ * The "thread-{sessionId}" prefix is parsed by ProxyAuthorizationService
+ * (stigmer-cloud) to extract the session ID for checkpoint access control.
+ * Changing the format requires a coordinated update.
+ *
+ * Activity contract:
+ *   Name:   "EnsureThread"
+ *   Input:  (sessionId: string, agentId: string)
+ *   Output: string (thread ID)
+ */
+export declare function createEnsureThreadActivities(): {
+    EnsureThread: (sessionId: string, agentId: string) => Promise<string>;
+};

package/dist/activities/ensure-thread.js

@@ -0,0 +1,44 @@
+/**
+ * EnsureThread Temporal activity — resolves a LangGraph thread ID for an
+ * agent execution.
+ *
+ * Called by the Java/Go InvokeAgentExecutionWorkflow as Step 1 of the
+ * native (deep-agent) harness flow, before ExecuteDeepAgent. The returned
+ * thread ID keys the LangGraph checkpointer for conversation continuity.
+ *
+ * Thread ID conventions (load-bearing for proxy authorization):
+ *   - Session-based:  "thread-{sessionId}"   — deterministic, no DB call
+ *   - Ephemeral:      "ephemeral-{agentId}-{8hex}" — single-use
+ *
+ * The "thread-{sessionId}" prefix is parsed by ProxyAuthorizationService
+ * (stigmer-cloud) to extract the session ID for checkpoint access control.
+ * Changing the format requires a coordinated update.
+ *
+ * Activity contract:
+ *   Name:   "EnsureThread"
+ *   Input:  (sessionId: string, agentId: string)
+ *   Output: string (thread ID)
+ */
+import { randomUUID } from "node:crypto";
+import { activityStarted, activityFinished } from "../idle-watchdog.js";
+export function createEnsureThreadActivities() {
+    return {
+        EnsureThread: async (sessionId, agentId) => {
+            activityStarted();
+            try {
+                if (sessionId) {
+                    const threadId = `thread-${sessionId}`;
+                    console.log(`[EnsureThread] Session-based thread: ${threadId}`);
+                    return threadId;
+                }
+                const threadId = `ephemeral-${agentId}-${randomUUID().replace(/-/g, "").slice(0, 8)}`;
+                console.log(`[EnsureThread] Ephemeral thread: ${threadId}`);
+                return threadId;
+            }
+            finally {
+                activityFinished();
+            }
+        },
+    };
+}
+//# sourceMappingURL=ensure-thread.js.map

package/dist/activities/ensure-thread.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-thread.js","sourceRoot":"","sources":["../../src/activities/ensure-thread.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAExE,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,YAAY,EAAE,KAAK,EAAE,SAAiB,EAAE,OAAe,EAAmB,EAAE;YAC1E,eAAe,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,QAAQ,GAAG,UAAU,SAAS,EAAE,CAAC;oBACvC,OAAO,CAAC,GAAG,CAAC,wCAAwC,QAAQ,EAAE,CAAC,CAAC;oBAChE,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,QAAQ,GAAG,aAAa,OAAO,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACtF,OAAO,CAAC,GAAG,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;gBAC5D,OAAO,QAAQ,CAAC;YAClB,CAAC;oBAAS,CAAC;gBACT,gBAAgB,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/evaluate-expressions.d.ts

@@ -0,0 +1,21 @@
+/**
+ * EvaluateExpressions Temporal local activity — evaluates batched jq
+ * expressions using jq-wasm.
+ *
+ * Runs OUTSIDE the Temporal workflow sandbox (local activity on the
+ * worker) because jq-wasm's Emscripten loader requires Node.js
+ * built-ins (fs, path, crypto) that are blocked in the deterministic
+ * V8 isolate.
+ *
+ * Local activity results are recorded in workflow history, providing
+ * deterministic replay for all expression evaluation — including
+ * non-deterministic operations like uuid generation.
+ *
+ * Activity contract:
+ *   Name:   "EvaluateExpressions"
+ *   Input:  (expressions: Record<string, string>, input: unknown, stateVars: Record<string, unknown>)
+ *   Output: Record<string, unknown>
+ */
+export declare function createEvaluateExpressionsActivities(): {
+    EvaluateExpressions: (expressions: Record<string, string>, input: unknown, stateVars: Record<string, unknown>) => Promise<Record<string, unknown>>;
+};

package/dist/activities/evaluate-expressions.js

@@ -0,0 +1,39 @@
+/**
+ * EvaluateExpressions Temporal local activity — evaluates batched jq
+ * expressions using jq-wasm.
+ *
+ * Runs OUTSIDE the Temporal workflow sandbox (local activity on the
+ * worker) because jq-wasm's Emscripten loader requires Node.js
+ * built-ins (fs, path, crypto) that are blocked in the deterministic
+ * V8 isolate.
+ *
+ * Local activity results are recorded in workflow history, providing
+ * deterministic replay for all expression evaluation — including
+ * non-deterministic operations like uuid generation.
+ *
+ * Activity contract:
+ *   Name:   "EvaluateExpressions"
+ *   Input:  (expressions: Record<string, string>, input: unknown, stateVars: Record<string, unknown>)
+ *   Output: Record<string, unknown>
+ */
+import { ApplicationFailure } from "@temporalio/activity";
+import { evaluateExpressionBatch } from "../workflow-engine/expression.js";
+export function createEvaluateExpressionsActivities() {
+    return {
+        EvaluateExpressions: async (expressions, input, stateVars) => {
+            try {
+                return await evaluateExpressionBatch(expressions, input, stateVars);
+            }
+            catch (err) {
+                // jq expression evaluation is deterministic and side-effect free:
+                // a failure (parse/compile/syntax/runtime error) is a property of the
+                // expression + input and will never succeed on retry. Surface it as a
+                // non-retryable failure so the workflow reaches a terminal FAILED phase
+                // instead of being retried forever by the local-activity retry policy.
+                const message = err instanceof Error ? err.message : String(err);
+                throw ApplicationFailure.nonRetryable(`Expression evaluation failed: ${message}`, "EXPRESSION_EVALUATION_FAILED");
+            }
+        },
+    };
+}
+//# sourceMappingURL=evaluate-expressions.js.map

package/dist/activities/evaluate-expressions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate-expressions.js","sourceRoot":"","sources":["../../src/activities/evaluate-expressions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,MAAM,UAAU,mCAAmC;IACjD,OAAO;QACL,mBAAmB,EAAE,KAAK,EACxB,WAAmC,EACnC,KAAc,EACd,SAAkC,EACA,EAAE;YACpC,IAAI,CAAC;gBACH,OAAO,MAAM,uBAAuB,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kEAAkE;gBAClE,sEAAsE;gBACtE,sEAAsE;gBACtE,wEAAwE;gBACxE,uEAAuE;gBACvE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,MAAM,kBAAkB,CAAC,YAAY,CACnC,iCAAiC,OAAO,EAAE,EAC1C,8BAA8B,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}