@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/workflow/validation/budget-warnings.js

@@ -0,0 +1,109 @@
+/**
+ * Budget misconfiguration warnings — ports
+ * pkg/domain/workflow/validation/budget_warnings.go. Detects budget shapes
+ * that are not proto-level errors but likely authoring mistakes; every
+ * string is a non-blocking warning. Keep the strings in lockstep with the
+ * cloud Java validator.
+ */
+import { WorkflowTaskKind } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/enum_pb";
+import { BudgetExceededPolicy } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/enum_pb";
+import { tryUnmarshalTaskConfig } from "../converter/unmarshal.js";
+/**
+ * Go renders dollar amounts with %.2f — correct decimal rounding with ties
+ * to EVEN — where toFixed(2) rounds ties away from zero: max_cost_usd
+ * 0.125 must print $0.12 on both editions (panel finding). Intl's halfEven
+ * mode matches Go's semantics on the same float64.
+ */
+const GO_2DP = new Intl.NumberFormat("en-US", {
+    minimumFractionDigits: 2,
+    maximumFractionDigits: 2,
+    useGrouping: false,
+    // Supported since Node 19; the compiler's lib types lag the runtime.
+    roundingMode: "halfEven",
+});
+export function checkBudgetWarnings(budget, tasks) {
+    const hasCostBearingTasks = tasks.some((task) => task.kind === WorkflowTaskKind.llm_call ||
+        task.kind === WorkflowTaskKind.agent_call);
+    if (budget === undefined) {
+        if (hasCostBearingTasks) {
+            return [
+                "Workflow contains cost-incurring tasks (agent_call, llm_call) but no budget limit is set. " +
+                    "Consider adding a budget to prevent unexpected costs.",
+            ];
+        }
+        return [];
+    }
+    const warnings = [];
+    const hasLimits = budget.maxCostMicros > 0n ||
+        budget.maxTotalTokens > 0n ||
+        budget.maxDurationSeconds > 0;
+    if (budget.onExceeded === BudgetExceededPolicy.budget_exceeded_terminate) {
+        if (budget.maxCostMicros === 0n) {
+            warnings.push("Budget has zero max_cost_micros with terminate policy; workflow will fail immediately on first cost-bearing task");
+        }
+        if (budget.maxTotalTokens === 0n) {
+            warnings.push("Budget has zero max_total_tokens with terminate policy; workflow will fail immediately on first cost-bearing task");
+        }
+    }
+    if (!hasCostBearingTasks && (budget.maxCostMicros > 0n || budget.maxTotalTokens > 0n)) {
+        warnings.push("Budget is configured but workflow contains no cost-bearing task kinds (llm_call, agent_call)");
+    }
+    if (hasLimits &&
+        budget.onExceeded === BudgetExceededPolicy.budget_exceeded_policy_unspecified) {
+        warnings.push("Budget limits are set but on_exceeded policy is not specified; defaults to terminate");
+    }
+    if (budget.maxDurationSeconds > 0 && budget.maxDurationSeconds < 10) {
+        warnings.push(`Budget duration of ${budget.maxDurationSeconds} seconds may be too short for workflow execution`);
+    }
+    if (budget.maxCostMicros > 0n) {
+        const perTaskEntries = [];
+        for (const task of tasks) {
+            switch (task.kind) {
+                case WorkflowTaskKind.llm_call: {
+                    const cfg = tryUnmarshalTaskConfig(task.kind, task.taskConfig);
+                    if (cfg !== undefined && cfg.maxCostMicros > 0n) {
+                        perTaskEntries.push({
+                            name: task.name,
+                            costMicros: Number(cfg.maxCostMicros),
+                            fieldLabel: `max_cost_micros (${cfg.maxCostMicros})`,
+                        });
+                    }
+                    break;
+                }
+                case WorkflowTaskKind.agent_call: {
+                    const cfg = tryUnmarshalTaskConfig(task.kind, task.taskConfig);
+                    const usd = cfg?.runConfig?.maxCostUsd ?? 0;
+                    if (usd > 0) {
+                        perTaskEntries.push({
+                            name: task.name,
+                            costMicros: usdToMicros(usd),
+                            fieldLabel: `run_config.max_cost_usd ($${GO_2DP.format(usd)})`,
+                        });
+                    }
+                    break;
+                }
+            }
+        }
+        const budgetMicros = Number(budget.maxCostMicros);
+        let perTaskCostSum = 0;
+        for (const entry of perTaskEntries) {
+            perTaskCostSum += entry.costMicros;
+            if (entry.costMicros > budgetMicros) {
+                warnings.push(`Task '${entry.name}' has ${entry.fieldLabel} that exceeds the workflow budget max_cost_micros (${budget.maxCostMicros}).`);
+            }
+        }
+        if (perTaskCostSum > budgetMicros && perTaskEntries.length > 1) {
+            warnings.push(`Combined per-task cost limits ($${GO_2DP.format(perTaskCostSum / 1_000_000)}) exceed the workflow budget ($${GO_2DP.format(budgetMicros / 1_000_000)}). ` +
+                "Some tasks may be terminated before reaching their individual limits.");
+        }
+    }
+    return warnings;
+}
+/**
+ * Converts a USD amount to micro-USD (1 USD = 1,000,000 micros), rounding
+ * to the nearest micro so float noise cannot skew budget comparisons.
+ */
+function usdToMicros(usd) {
+    return Math.round(usd * 1_000_000);
+}
+//# sourceMappingURL=budget-warnings.js.map

package/dist/domain/workflow/validation/budget-warnings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-warnings.js","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/budget-warnings.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wDAAwD,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,wDAAwD,CAAC;AAQ9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;IAC5C,qBAAqB,EAAE,CAAC;IACxB,qBAAqB,EAAE,CAAC;IACxB,WAAW,EAAE,KAAK;IAClB,qEAAqE;IACrE,YAAY,EAAE,UAAU;CACG,CAAC,CAAC;AAE/B,MAAM,UAAU,mBAAmB,CACjC,MAAkC,EAClC,KAAqB;IAErB,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CACpC,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,IAAI,KAAK,gBAAgB,CAAC,QAAQ;QACvC,IAAI,CAAC,IAAI,KAAK,gBAAgB,CAAC,UAAU,CAC5C,CAAC;IAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,mBAAmB,EAAE,CAAC;YACxB,OAAO;gBACL,4FAA4F;oBAC1F,uDAAuD;aAC1D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GACb,MAAM,CAAC,aAAa,GAAG,EAAE;QACzB,MAAM,CAAC,cAAc,GAAG,EAAE;QAC1B,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC;IAEhC,IAAI,MAAM,CAAC,UAAU,KAAK,oBAAoB,CAAC,yBAAyB,EAAE,CAAC;QACzE,IAAI,MAAM,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CACX,kHAAkH,CACnH,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CACX,mHAAmH,CACpH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,EAAE,IAAI,MAAM,CAAC,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC;QACtF,QAAQ,CAAC,IAAI,CACX,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IAED,IACE,SAAS;QACT,MAAM,CAAC,UAAU,KAAK,oBAAoB,CAAC,kCAAkC,EAC7E,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,kBAAkB,GAAG,CAAC,IAAI,MAAM,CAAC,kBAAkB,GAAG,EAAE,EAAE,CAAC;QACpE,QAAQ,CAAC,IAAI,CACX,sBAAsB,MAAM,CAAC,kBAAkB,kDAAkD,CAClG,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC;QAU9B,MAAM,cAAc,GAAmB,EAAE,CAAC;QAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC/B,MAAM,GAAG,GAAG,sBAAsB,CAAoB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;oBAClF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC;wBAChD,cAAc,CAAC,IAAI,CAAC;4BAClB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;4BACrC,UAAU,EAAE,oBAAoB,GAAG,CAAC,aAAa,GAAG;yBACrD,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;oBACjC,MAAM,GAAG,GAAG,sBAAsB,CAAsB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;oBACpF,MAAM,GAAG,GAAG,GAAG,EAAE,SAAS,EAAE,UAAU,IAAI,CAAC,CAAC;oBAC5C,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;wBACZ,cAAc,CAAC,IAAI,CAAC;4BAClB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC;4BAC5B,UAAU,EAAE,6BAA6B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;yBAC/D,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC;YACnC,IAAI,KAAK,CAAC,UAAU,GAAG,YAAY,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CACX,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,UAAU,sDAAsD,MAAM,CAAC,aAAa,IAAI,CAC3H,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,cAAc,GAAG,YAAY,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,QAAQ,CAAC,IAAI,CACX,mCAAmC,MAAM,CAAC,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC,kCAAkC,MAAM,CAAC,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,KAAK;gBACxJ,uEAAuE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;AACrC,CAAC"}

package/dist/domain/workflow/validation/crossref.d.ts

@@ -0,0 +1,31 @@
+import type { WorkflowSpec } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/spec_pb";
+/**
+ * Checks that every task has a recognized, non-zero WorkflowTaskKind —
+ * errors for unspecified (0) or unknown enum values (Go ValidateTaskKinds).
+ */
+export declare function validateTaskKinds(spec: WorkflowSpec | undefined): string[];
+/**
+ * Checks that all task-name references point to tasks that exist (Go
+ * ValidateCrossTaskReferences): llm_call/validate fallback_task,
+ * agent_call output.fallback_task, switch_case cases[].then, human_input
+ * outcomes[].then, and flow.then on every task. Also validates unique task
+ * names and detects cycles.
+ */
+export declare function validateCrossTaskReferences(spec: WorkflowSpec | undefined): string[];
+/**
+ * Checks the task-config semantics the config protos cannot declare (Go
+ * ValidateTaskConfigSurfaceRules). Since stigmer#805 armed the declared
+ * rules over strict-unmarshaled typed configs, what remains is genuinely
+ * contextual:
+ *
+ *   - agent_call workspace_entries must use git_repo sources:
+ *     WorkspaceSource's oneof legitimately offers local_path on the session
+ *     surface, but no client is connected to serve one when a workflow task
+ *     fires — a workflow-surface restriction, not a schema fact, so it
+ *     cannot live on the shared proto. (Source presence and git_repo.url's
+ *     HTTPS shape ARE schema facts enforced via the constraints step.)
+ *
+ * Keep the strings in lockstep with the cloud Java validator.
+ */
+export declare function validateTaskConfigSurfaceRules(spec: WorkflowSpec | undefined): string[];
+//# sourceMappingURL=crossref.d.ts.map

package/dist/domain/workflow/validation/crossref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crossref.d.ts","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/crossref.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,wDAAwD,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,EAAE,CAa1E;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,YAAY,GAAG,SAAS,GAC7B,MAAM,EAAE,CAuBV;AAqMD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,YAAY,GAAG,SAAS,GAC7B,MAAM,EAAE,CA4BV"}

package/dist/domain/workflow/validation/crossref.js

@@ -0,0 +1,338 @@
+/**
+ * Task-kind and cross-task-reference validation — ports
+ * pkg/domain/workflow/validation/crossref.go: recognized task kinds, unique
+ * task names, flow.then / fallback_task / cases[].then / outcomes[].then
+ * reference resolution with did-you-mean suggestions, cycle detection, and
+ * the surface rules the task-config protos cannot declare. Reference checks
+ * read the raw task_config Struct (not the typed config) so the errors
+ * speak the author's own vocabulary. Keep every string in lockstep with the
+ * cloud Java validator.
+ */
+import { enumToJson } from "@bufbuild/protobuf";
+import { WorkflowTaskKind, WorkflowTaskKindSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/enum_pb";
+/**
+ * Checks that every task has a recognized, non-zero WorkflowTaskKind —
+ * errors for unspecified (0) or unknown enum values (Go ValidateTaskKinds).
+ */
+export function validateTaskKinds(spec) {
+    if (spec === undefined || spec.tasks.length === 0) {
+        return [];
+    }
+    const errors = [];
+    for (const task of spec.tasks) {
+        if (WorkflowTaskKind[task.kind] === undefined || task.kind === 0) {
+            errors.push(`task '${task.name}': unknown or unspecified task kind (value=${task.kind})`);
+        }
+    }
+    return errors;
+}
+/**
+ * Checks that all task-name references point to tasks that exist (Go
+ * ValidateCrossTaskReferences): llm_call/validate fallback_task,
+ * agent_call output.fallback_task, switch_case cases[].then, human_input
+ * outcomes[].then, and flow.then on every task. Also validates unique task
+ * names and detects cycles.
+ */
+export function validateCrossTaskReferences(spec) {
+    if (spec === undefined || spec.tasks.length === 0) {
+        return [];
+    }
+    const errors = [];
+    const taskNames = buildTaskNameSet(spec.tasks);
+    errors.push(...validateUniqueTaskNames(spec.tasks));
+    errors.push(...validateFlowReferences(spec.tasks, taskNames));
+    for (const task of spec.tasks) {
+        if (task.taskConfig === undefined) {
+            continue;
+        }
+        errors.push(...extractAndValidateRefs(task.name, task.kind, task.taskConfig, taskNames));
+    }
+    errors.push(...validateNoCycles(spec.tasks, taskNames));
+    return errors;
+}
+function buildTaskNameSet(tasks) {
+    const names = new Set();
+    for (const t of tasks) {
+        if (t.name !== "") {
+            names.add(t.name);
+        }
+    }
+    return names;
+}
+function validateUniqueTaskNames(tasks) {
+    const seen = new Map();
+    const errors = [];
+    tasks.forEach((task, i) => {
+        if (task.name === "") {
+            return;
+        }
+        const firstIdx = seen.get(task.name);
+        if (firstIdx !== undefined) {
+            errors.push(`duplicate task name "${task.name}" at tasks[${i}]: already defined at tasks[${firstIdx}]`);
+        }
+        seen.set(task.name, i);
+    });
+    return errors;
+}
+function validateFlowReferences(tasks, taskNames) {
+    const errors = [];
+    for (const task of tasks) {
+        if (task.flow === undefined || task.flow.then === "") {
+            continue;
+        }
+        const then = task.flow.then;
+        if (then === "end") {
+            continue;
+        }
+        if (!taskNames.has(then)) {
+            const suggestion = suggestSimilar(then, taskNames);
+            let msg = `task '${task.name}' flow.then references unknown task '${then}'`;
+            if (suggestion !== "") {
+                msg += ` (did you mean '${suggestion}'?)`;
+            }
+            errors.push(msg);
+        }
+    }
+    return errors;
+}
+/**
+ * Cycle detection over the flow.then graph. Go iterates its task-name map
+ * in random order, so a multi-node cycle's reported rotation varies per
+ * run there; iterating in insertion order here is deterministic and always
+ * one of the rotations Go could emit.
+ */
+function validateNoCycles(tasks, taskNames) {
+    const graph = new Map();
+    for (const task of tasks) {
+        if (task.flow === undefined || task.flow.then === "") {
+            continue;
+        }
+        graph.set(task.name, task.flow.then);
+    }
+    const visited = new Set();
+    const path = new Set();
+    const pathOrder = [];
+    const errors = [];
+    const dfs = (node) => {
+        if (path.has(node)) {
+            const startIdx = pathOrder.indexOf(node);
+            const cycleParts = [...pathOrder.slice(startIdx), node];
+            errors.push(`circular dependency detected: ${cycleParts.join(" -> ")}`);
+            return;
+        }
+        if (visited.has(node)) {
+            return;
+        }
+        visited.add(node);
+        path.add(node);
+        pathOrder.push(node);
+        const next = graph.get(node);
+        if (next !== undefined && next !== "end" && taskNames.has(next)) {
+            dfs(next);
+        }
+        path.delete(node);
+        pathOrder.pop();
+    };
+    for (const name of taskNames) {
+        if (!visited.has(name)) {
+            dfs(name);
+        }
+    }
+    return errors;
+}
+function extractAndValidateRefs(taskName, kind, config, validNames) {
+    const errors = [];
+    const fields = config;
+    switch (kind) {
+        case WorkflowTaskKind.llm_call:
+        case WorkflowTaskKind.validate: {
+            const ref = getStringField(fields, "fallbackTask", "fallback_task");
+            if (ref !== "" && !validNames.has(ref)) {
+                const suggestion = suggestSimilar(ref, validNames);
+                let msg = `task '${taskName}' (${enumToJson(WorkflowTaskKindSchema, kind)}) fallback_task references unknown task '${ref}'`;
+                if (suggestion !== "") {
+                    msg += ` (did you mean '${suggestion}'?)`;
+                }
+                errors.push(msg);
+            }
+            break;
+        }
+        case WorkflowTaskKind.agent_call: {
+            const output = getStructField(fields, "output");
+            if (output !== undefined) {
+                const ref = getStringField(output, "fallbackTask", "fallback_task");
+                if (ref !== "" && !validNames.has(ref)) {
+                    const suggestion = suggestSimilar(ref, validNames);
+                    let msg = `task '${taskName}' (agent_call) output.fallback_task references unknown task '${ref}'`;
+                    if (suggestion !== "") {
+                        msg += ` (did you mean '${suggestion}'?)`;
+                    }
+                    errors.push(msg);
+                }
+            }
+            break;
+        }
+        case WorkflowTaskKind.switch_case: {
+            getListField(fields, "cases").forEach((c, i) => {
+                const caseStruct = structValueOf(c);
+                if (caseStruct === undefined) {
+                    return;
+                }
+                const ref = getStringField(caseStruct, "then");
+                if (ref !== "" && ref !== "end" && !validNames.has(ref)) {
+                    const suggestion = suggestSimilar(ref, validNames);
+                    let msg = `task '${taskName}' (switch_case) cases[${i}].then references unknown task '${ref}'`;
+                    if (suggestion !== "") {
+                        msg += ` (did you mean '${suggestion}'?)`;
+                    }
+                    errors.push(msg);
+                }
+            });
+            break;
+        }
+        case WorkflowTaskKind.human_input: {
+            getListField(fields, "outcomes").forEach((o, i) => {
+                const outcomeStruct = structValueOf(o);
+                if (outcomeStruct === undefined) {
+                    return;
+                }
+                const ref = getStringField(outcomeStruct, "then");
+                if (ref !== "" && ref !== "end" && !validNames.has(ref)) {
+                    const suggestion = suggestSimilar(ref, validNames);
+                    let msg = `task '${taskName}' (human_input) outcomes[${i}].then references unknown task '${ref}'`;
+                    if (suggestion !== "") {
+                        msg += ` (did you mean '${suggestion}'?)`;
+                    }
+                    errors.push(msg);
+                }
+            });
+            break;
+        }
+    }
+    return errors;
+}
+/**
+ * Checks the task-config semantics the config protos cannot declare (Go
+ * ValidateTaskConfigSurfaceRules). Since stigmer#805 armed the declared
+ * rules over strict-unmarshaled typed configs, what remains is genuinely
+ * contextual:
+ *
+ *   - agent_call workspace_entries must use git_repo sources:
+ *     WorkspaceSource's oneof legitimately offers local_path on the session
+ *     surface, but no client is connected to serve one when a workflow task
+ *     fires — a workflow-surface restriction, not a schema fact, so it
+ *     cannot live on the shared proto. (Source presence and git_repo.url's
+ *     HTTPS shape ARE schema facts enforced via the constraints step.)
+ *
+ * Keep the strings in lockstep with the cloud Java validator.
+ */
+export function validateTaskConfigSurfaceRules(spec) {
+    if (spec === undefined || spec.tasks.length === 0) {
+        return [];
+    }
+    const errors = [];
+    for (const task of spec.tasks) {
+        if (task.kind !== WorkflowTaskKind.agent_call || task.taskConfig === undefined) {
+            continue;
+        }
+        getListField(task.taskConfig, "workspace_entries").forEach((v, i) => {
+            const entry = structValueOf(v);
+            if (entry === undefined) {
+                return;
+            }
+            const source = getStructField(entry, "source");
+            if (source === undefined) {
+                // Absence is the constraints step's required-rule to report.
+                return;
+            }
+            if (getStructField(source, "git_repo") === undefined) {
+                errors.push(`task '${task.name}' (agent_call): workspace_entries[${i}] must use a git_repo source — no client is connected to serve a local_path when a workflow task fires`);
+            }
+        });
+    }
+    return errors;
+}
+/**
+ * The first non-empty string among the given keys (Go getStringField): a
+ * present key with a non-string or empty value falls through to the next.
+ * The stubs surface Struct fields as plain JsonObject, so the readers here
+ * work over plain JSON — the same shapes Go's structpb getters resolve.
+ */
+function getStringField(fields, ...keys) {
+    for (const key of keys) {
+        const v = fields[key];
+        if (typeof v === "string" && v !== "") {
+            return v;
+        }
+    }
+    return "";
+}
+/**
+ * The struct value of the FIRST present key (Go getStructField returns on
+ * the first hit even when it is not a struct — mirrored).
+ */
+function getStructField(fields, ...keys) {
+    for (const key of keys) {
+        const v = fields[key];
+        if (v !== undefined) {
+            return structValueOf(v);
+        }
+    }
+    return undefined;
+}
+function getListField(fields, key) {
+    const v = fields[key];
+    return Array.isArray(v) ? v : [];
+}
+function structValueOf(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v)
+        ? v
+        : undefined;
+}
+/**
+ * The single closest task name within edit distance 3, or "" (Go
+ * suggestSimilar): candidates are scanned in sorted order and a strictly
+ * smaller distance wins, so ties resolve to the lexicographically first.
+ */
+function suggestSimilar(target, names) {
+    const maxDistance = 3;
+    let bestName = "";
+    let bestDist = maxDistance + 1;
+    for (const name of [...names].sort()) {
+        const d = levenshtein(target.toLowerCase(), name.toLowerCase());
+        if (d < bestDist) {
+            bestDist = d;
+            bestName = name;
+        }
+    }
+    return bestDist <= maxDistance ? bestName : "";
+}
+/**
+ * Two-row Levenshtein distance (Go levenshtein). Byte vs UTF-16 code-unit
+ * comparison is equivalent for the ASCII task names the validator sees.
+ */
+function levenshtein(a, b) {
+    const la = a.length;
+    const lb = b.length;
+    if (la === 0) {
+        return lb;
+    }
+    if (lb === 0) {
+        return la;
+    }
+    let prev = new Array(lb + 1);
+    let curr = new Array(lb + 1);
+    for (let j = 0; j <= lb; j++) {
+        prev[j] = j;
+    }
+    for (let i = 1; i <= la; i++) {
+        curr[0] = i;
+        for (let j = 1; j <= lb; j++) {
+            const cost = a.charCodeAt(i - 1) === b.charCodeAt(j - 1) ? 0 : 1;
+            curr[j] = Math.min(curr[j - 1] + 1, prev[j] + 1, prev[j - 1] + cost);
+        }
+        [prev, curr] = [curr, prev];
+    }
+    return prev[lb];
+}
+//# sourceMappingURL=crossref.js.map

package/dist/domain/workflow/validation/crossref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crossref.js","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/crossref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAMlH;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA8B;IAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CACT,SAAS,IAAI,CAAC,IAAI,8CAA8C,IAAI,CAAC,IAAI,GAAG,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAA8B;IAE9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE/C,MAAM,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IAE9D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CACT,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IAExD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAqB;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YAClB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAqB;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACT,wBAAwB,IAAI,CAAC,IAAI,cAAc,CAAC,+BAA+B,QAAQ,GAAG,CAC3F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAqB,EACrB,SAAsB;IAEtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACrD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACnD,IAAI,GAAG,GAAG,SAAS,IAAI,CAAC,IAAI,wCAAwC,IAAI,GAAG,CAAC;YAC5E,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;gBACtB,GAAG,IAAI,mBAAmB,UAAU,KAAK,CAAC;YAC5C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,KAAqB,EACrB,SAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACrD,SAAS;QACX,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,iCAAiC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,SAAS,CAAC,GAAG,EAAE,CAAC;IAClB,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAgB,EAChB,IAAsB,EACtB,MAAkB,EAClB,UAAuB;IAEvB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC;IAEtB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,gBAAgB,CAAC,QAAQ,CAAC;QAC/B,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;YACpE,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;gBACnD,IAAI,GAAG,GAAG,SAAS,QAAQ,MAAM,UAAU,CAAC,sBAAsB,EAAE,IAAI,CAAC,4CAA4C,GAAG,GAAG,CAAC;gBAC5H,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;oBACtB,GAAG,IAAI,mBAAmB,UAAU,KAAK,CAAC;gBAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;gBACpE,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;oBACnD,IAAI,GAAG,GAAG,SAAS,QAAQ,gEAAgE,GAAG,GAAG,CAAC;oBAClG,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;wBACtB,GAAG,IAAI,mBAAmB,UAAU,KAAK,CAAC;oBAC5C,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;YAClC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,GAAG,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC/C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;oBACnD,IAAI,GAAG,GAAG,SAAS,QAAQ,yBAAyB,CAAC,mCAAmC,GAAG,GAAG,CAAC;oBAC/F,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;wBACtB,GAAG,IAAI,mBAAmB,UAAU,KAAK,CAAC;oBAC5C,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QAED,KAAK,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;YAClC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAChD,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;gBACvC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChC,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBAClD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;oBACnD,IAAI,GAAG,GAAG,SAAS,QAAQ,4BAA4B,CAAC,mCAAmC,GAAG,GAAG,CAAC;oBAClG,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;wBACtB,GAAG,IAAI,mBAAmB,UAAU,KAAK,CAAC;oBAC5C,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,8BAA8B,CAC5C,IAA8B;IAE9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAClE,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,6DAA6D;gBAC7D,OAAO;YACT,CAAC;YACD,IAAI,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CACT,SAAS,IAAI,CAAC,IAAI,qCAAqC,CAAC,wGAAwG,CACjK,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAkB,EAAE,GAAG,IAAc;IAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CACrB,MAAkB,EAClB,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB,EAAE,GAAW;IACnD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,CAAY;IACjC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,KAAkB;IACxD,MAAM,WAAW,GAAG,CAAC,CAAC;IACtB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,QAAQ,GAAG,WAAW,GAAG,CAAC,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;YACjB,QAAQ,GAAG,CAAC,CAAC;YACb,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,IAAI,GAAa,IAAI,KAAK,CAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,IAAI,IAAI,GAAa,IAAI,KAAK,CAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,CAAC;QACD,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,IAAI,CAAC,EAAE,CAAE,CAAC;AACnB,CAAC"}

package/dist/domain/workflow/validation/expression-warnings.d.ts

@@ -0,0 +1,3 @@
+import type { WorkflowSpec } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/spec_pb";
+export declare function checkExpressionWarnings(spec: WorkflowSpec | undefined): string[];
+//# sourceMappingURL=expression-warnings.d.ts.map

package/dist/domain/workflow/validation/expression-warnings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-warnings.d.ts","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/expression-warnings.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wDAAwD,CAAC;AAE3F,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,YAAY,GAAG,SAAS,GAC7B,MAAM,EAAE,CAsBV"}

package/dist/domain/workflow/validation/expression-warnings.js

@@ -0,0 +1,78 @@
+export function checkExpressionWarnings(spec) {
+    if (spec === undefined || spec.tasks.length === 0) {
+        return [];
+    }
+    const warnings = [];
+    for (const task of spec.tasks) {
+        if (task.taskConfig === undefined) {
+            continue;
+        }
+        for (const envKey of findContextEnvRefs(task.taskConfig)) {
+            warnings.push(`task '${task.name}': expression references '$context.env.${envKey}' which resolves to null. ` +
+                `Environment variables are accessed via '$env.${envKey}', not '$context.env.${envKey}'. ` +
+                "$context holds accumulated task outputs, not environment variables.");
+        }
+    }
+    return warnings;
+}
+/**
+ * Scans a raw task config for strings containing "$context.env." and
+ * returns the env key names referenced (e.g. "NOTIFICATION_DATE"). The
+ * stubs surface Struct fields as plain JsonObject, so the walk is over
+ * plain JSON — the same tree Go's structpb walk resolves.
+ */
+function findContextEnvRefs(s) {
+    const keys = [];
+    for (const v of Object.values(s)) {
+        keys.push(...findContextEnvRefsInValue(v));
+    }
+    return keys;
+}
+function findContextEnvRefsInValue(v) {
+    if (typeof v === "string") {
+        return extractContextEnvKeys(v);
+    }
+    if (Array.isArray(v)) {
+        const keys = [];
+        for (const elem of v) {
+            keys.push(...findContextEnvRefsInValue(elem));
+        }
+        return keys;
+    }
+    if (typeof v === "object" && v !== null) {
+        return findContextEnvRefs(v);
+    }
+    return [];
+}
+/**
+ * Extracts env key names from expressions like
+ * "${ $context.env.NOTIFICATION_DATE }".
+ */
+function extractContextEnvKeys(s) {
+    const pattern = "$context.env.";
+    const keys = [];
+    for (;;) {
+        const idx = s.indexOf(pattern);
+        if (idx < 0) {
+            break;
+        }
+        const rest = s.slice(idx + pattern.length);
+        let keyEnd = 0;
+        while (keyEnd < rest.length && isEnvKeyChar(rest.charCodeAt(keyEnd))) {
+            keyEnd++;
+        }
+        if (keyEnd > 0) {
+            keys.push(rest.slice(0, keyEnd));
+        }
+        s = rest.slice(keyEnd);
+    }
+    return keys;
+}
+function isEnvKeyChar(c) {
+    return ((c >= 0x41 && c <= 0x5a) || // A-Z
+        (c >= 0x61 && c <= 0x7a) || // a-z
+        (c >= 0x30 && c <= 0x39) || // 0-9
+        c === 0x5f // _
+    );
+}
+//# sourceMappingURL=expression-warnings.js.map

package/dist/domain/workflow/validation/expression-warnings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-warnings.js","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/expression-warnings.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,uBAAuB,CACrC,IAA8B;IAE9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,0CAA0C,MAAM,4BAA4B;gBAC5F,gDAAgD,MAAM,wBAAwB,MAAM,KAAK;gBACzF,qEAAqE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,CAAa;IACvC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,CAAY;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,CAAS;IACtC,MAAM,OAAO,GAAG,eAAe,CAAC;IAChC,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,MAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,EAAE,CAAC;QACX,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CACL,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,MAAM;QAClC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,MAAM;QAClC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,MAAM;QAClC,CAAC,KAAK,IAAI,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC"}

package/dist/domain/workflow/validation/format-violation.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Cross-edition violation rendering — ports FormatViolation from
+ * pkg/domain/workflow/validation/task_config_constraints.go. Renders one
+ * protovalidate violation as "<field.path> – <message>", matching the Go
+ * and Cloud Java formatters exactly (en-dash separator, "<message>"
+ * sentinel when the rule is message-level, and [index] / ['key'] subscripts
+ * for repeated/map elements) — see prettyPrint / renderPath in
+ * backend/libs/java/utils/.../ProtoMessageFieldsValidator.java. All three
+ * editions emit identical strings for the same violation at Layer 1
+ * (validateSpec's folded whole-resource pass) and Layer 2 (typed task
+ * configs); the conformance suite pins the exact string (#805). Keep the
+ * formatters in lockstep.
+ *
+ * WATCH ITEM (carried from sub-project #4): the <message> half is
+ * protovalidate's text. Authored CEL messages (what the suite pins) are
+ * identical across editions by construction; protovalidate-es's
+ * library-generated messages for STANDARD rules could drift from
+ * protovalidate-go's — any such divergence surfaces at the conformance
+ * gate and goes to the owner.
+ */
+import type { Violation } from "@bufbuild/protovalidate";
+export declare function formatViolation(violation: Violation): string;
+//# sourceMappingURL=format-violation.d.ts.map

package/dist/domain/workflow/validation/format-violation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-violation.d.ts","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/format-violation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAMzD,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAkC5D"}