@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/workflow/validation/format-violation.js

@@ -0,0 +1,37 @@
+import { violationToProto } from "@bufbuild/protovalidate";
+/** The en-dash separator both peer formatters use. */
+const SEPARATOR = " \u2013 ";
+export function formatViolation(violation) {
+    // The proto form carries the same FieldPath elements Go's formatter
+    // walks (field name or number, plus the subscript oneof).
+    const [proto] = violationToProto(violation);
+    const message = proto.message ?? "";
+    if (proto.field === undefined) {
+        return `<message>${SEPARATOR}${message}`;
+    }
+    const parts = [];
+    for (const el of proto.field.elements) {
+        // Prefer the field name; fall back to the field number when unknown.
+        let rendered = el.fieldName ?? String(el.fieldNumber ?? "");
+        switch (el.subscript.case) {
+            case "index":
+                rendered += `[${el.subscript.value}]`;
+                break;
+            case "boolKey":
+                rendered += `[${el.subscript.value}]`;
+                break;
+            case "intKey":
+                rendered += `[${el.subscript.value}]`;
+                break;
+            case "uintKey":
+                rendered += `[${el.subscript.value}]`;
+                break;
+            case "stringKey":
+                rendered += `['${el.subscript.value}']`;
+                break;
+        }
+        parts.push(rendered);
+    }
+    return parts.join(".") + SEPARATOR + message;
+}
+//# sourceMappingURL=format-violation.js.map

package/dist/domain/workflow/validation/format-violation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-violation.js","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/format-violation.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,sDAAsD;AACtD,MAAM,SAAS,GAAG,UAAU,CAAC;AAE7B,MAAM,UAAU,eAAe,CAAC,SAAoB;IAClD,oEAAoE;IACpE,0DAA0D;IAC1D,MAAM,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,YAAY,SAAS,GAAG,OAAO,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtC,qEAAqE;QACrE,IAAI,QAAQ,GAAG,EAAE,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC5D,QAAQ,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC1B,KAAK,OAAO;gBACV,QAAQ,IAAI,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC;gBACtC,MAAM;YACR,KAAK,SAAS;gBACZ,QAAQ,IAAI,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC;gBACtC,MAAM;YACR,KAAK,QAAQ;gBACX,QAAQ,IAAI,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC;gBACtC,MAAM;YACR,KAAK,SAAS;gBACZ,QAAQ,IAAI,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC;gBACtC,MAAM;YACR,KAAK,WAAW;gBACd,QAAQ,IAAI,KAAK,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;gBACxC,MAAM;QACV,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,OAAO,CAAC;AAC/C,CAAC"}

package/dist/domain/workflow/validation/human-input-validation.d.ts

@@ -0,0 +1,3 @@
+import type { WorkflowSpec } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/spec_pb";
+export declare function validateHumanInputTimeoutPolicies(spec: WorkflowSpec | undefined): string[];
+//# sourceMappingURL=human-input-validation.d.ts.map

package/dist/domain/workflow/validation/human-input-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-input-validation.d.ts","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/human-input-validation.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wDAAwD,CAAC;AAM3F,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,YAAY,GAAG,SAAS,GAC7B,MAAM,EAAE,CAoCV"}

package/dist/domain/workflow/validation/human-input-validation.js

@@ -0,0 +1,78 @@
+/**
+ * Human-input timeout-policy validation — ports
+ * pkg/domain/workflow/validation/human_input_validation.go.
+ * FAIL/APPROVE/DENY need no shape. HUMAN_INPUT_TIMEOUT_ESCALATE carries the
+ * outcome-by-name contract (oss#781): a timeout resolves to the outcome
+ * NAMED "escalate" and follows its `then` branch, so the policy is only
+ * valid when such an outcome exists with `then` set. Fail closed — a gate
+ * whose escalation has nowhere to go must never persist; the runner's
+ * loader carries the same check for hand-written YAML. Whether the `then`
+ * TARGET exists (and the graph stays acyclic) is
+ * validateCrossTaskReferences' job — this rule checks shape, not
+ * reachability, so the layers compose without duplication.
+ *
+ * The rule reads the raw task_config Struct like its siblings so the error
+ * speaks the author's own vocabulary. Strict JSON parsing accepts an enum
+ * by name or by number, so both spellings are checked.
+ */
+import { enumToJson } from "@bufbuild/protobuf";
+import { WorkflowTaskKind } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/enum_pb";
+import { HumanInputTimeoutPolicy, HumanInputTimeoutPolicySchema, } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/tasks/human_input_pb";
+export function validateHumanInputTimeoutPolicies(spec) {
+    if (spec === undefined || spec.tasks.length === 0) {
+        return [];
+    }
+    const escalate = HumanInputTimeoutPolicy.HUMAN_INPUT_TIMEOUT_ESCALATE;
+    const escalateName = enumToJson(HumanInputTimeoutPolicySchema, escalate);
+    const errors = [];
+    for (const task of spec.tasks) {
+        if (task.kind !== WorkflowTaskKind.human_input || task.taskConfig === undefined) {
+            continue;
+        }
+        const fields = task.taskConfig;
+        const value = fields["on_timeout"];
+        if (value === undefined) {
+            continue;
+        }
+        let isEscalate = false;
+        if (typeof value === "string") {
+            isEscalate = value === escalateName;
+        }
+        else if (typeof value === "number") {
+            isEscalate = value === escalate;
+        }
+        if (!isEscalate) {
+            continue;
+        }
+        if (!hasEscalateOutcomeWithThen(fields["outcomes"])) {
+            errors.push(`task '${task.name}' (human_input): on_timeout policy ${escalateName} requires an outcome named 'escalate' with 'then' set — the timeout resolves to that outcome and follows its 'then' branch`);
+        }
+    }
+    return errors;
+}
+/**
+ * Whether the raw `outcomes` value carries an outcome named "escalate"
+ * whose `then` is a non-empty string — the shape the escalate timeout
+ * policy resolves to at runtime.
+ */
+function hasEscalateOutcomeWithThen(outcomes) {
+    if (!Array.isArray(outcomes)) {
+        return false;
+    }
+    for (const entry of outcomes) {
+        if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
+            continue;
+        }
+        if (stringValueOf(entry["name"]) !== "escalate") {
+            continue;
+        }
+        if (stringValueOf(entry["then"]) !== "") {
+            return true;
+        }
+    }
+    return false;
+}
+function stringValueOf(v) {
+    return typeof v === "string" ? v : "";
+}
+//# sourceMappingURL=human-input-validation.js.map

package/dist/domain/workflow/validation/human-input-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-input-validation.js","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/human-input-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wDAAwD,CAAC;AAE1F,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,qEAAqE,CAAC;AAE7E,MAAM,UAAU,iCAAiC,CAC/C,IAA8B;IAE9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,4BAA4B,CAAC;IACtE,MAAM,YAAY,GAAG,UAAU,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAChF,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,UAAU,GAAG,KAAK,KAAK,YAAY,CAAC;QACtC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,UAAU,GAAG,KAAK,KAAK,QAAQ,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CACT,SAAS,IAAI,CAAC,IAAI,sCAAsC,YAAY,4HAA4H,CACjM,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,0BAA0B,CAAC,QAA+B;IACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAChD,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,CAAwB;IAC7C,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC"}

package/dist/domain/workflow/validation/model-validation.d.ts

@@ -0,0 +1,13 @@
+import type { WorkflowSpec } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/spec_pb";
+import type { ModelCatalogProvider } from "../registry/model-catalog-provider.js";
+/**
+ * Checks that model IDs specified in workflow tasks are valid entries in
+ * the model registry for the task's effective harness (Go
+ * ValidateModelReferences):
+ *   - agent_call: run_config.model_name (optional) against harness from
+ *     the task config, plus the tier/thinking variant-attribute rules
+ *   - llm_call: model (required) against the native harness
+ *   - eval: model (required) against the native harness
+ */
+export declare function validateModelReferences(models: ModelCatalogProvider, spec: WorkflowSpec | undefined): string[];
+//# sourceMappingURL=model-validation.d.ts.map

package/dist/domain/workflow/validation/model-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-validation.d.ts","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/model-validation.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wDAAwD,CAAC;AAU3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAOlF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE,YAAY,GAAG,SAAS,GAC7B,MAAM,EAAE,CAmFV"}

package/dist/domain/workflow/validation/model-validation.js

@@ -0,0 +1,175 @@
+import { ServiceTier, ThinkingMode } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { WorkflowTaskKind } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/enum_pb";
+import { tryUnmarshalTaskConfig } from "../converter/unmarshal.js";
+import { FAST_VARIANT_KEY, THINKING_CAPABILITY_KEY, } from "../registry/model-registry-store.js";
+import { HARNESS_NAME_NATIVE, harnessName, suggestSimilarModels, } from "../registry/pin-validation.js";
+/**
+ * Checks that model IDs specified in workflow tasks are valid entries in
+ * the model registry for the task's effective harness (Go
+ * ValidateModelReferences):
+ *   - agent_call: run_config.model_name (optional) against harness from
+ *     the task config, plus the tier/thinking variant-attribute rules
+ *   - llm_call: model (required) against the native harness
+ *   - eval: model (required) against the native harness
+ */
+export function validateModelReferences(models, spec) {
+    if (spec === undefined || spec.tasks.length === 0) {
+        return [];
+    }
+    if (!models.hasAnyModels()) {
+        return [];
+    }
+    const errors = [];
+    for (const task of spec.tasks) {
+        if (task.taskConfig === undefined) {
+            continue;
+        }
+        let model;
+        let harness;
+        let kindLabel;
+        switch (task.kind) {
+            case WorkflowTaskKind.agent_call: {
+                kindLabel = "agent_call";
+                const cfg = tryUnmarshalTaskConfig(task.kind, task.taskConfig);
+                if (cfg === undefined) {
+                    continue;
+                }
+                harness = harnessName(cfg.harness);
+                // Variant-attribute validation is independent of the model check
+                // below: FAST/ENABLED with no model_name must fail even though
+                // the model loop skips (#357/#772, same fail-closed rule as
+                // execution create).
+                const tierErr = validateAgentCallServiceTier(models, task.name, harness, cfg.runConfig);
+                if (tierErr !== "") {
+                    errors.push(tierErr);
+                }
+                const thinkingErr = validateAgentCallThinkingMode(models, task.name, harness, cfg.runConfig);
+                if (thinkingErr !== "") {
+                    errors.push(thinkingErr);
+                }
+                if ((cfg.runConfig?.modelName ?? "") === "") {
+                    continue;
+                }
+                model = cfg.runConfig.modelName;
+                break;
+            }
+            case WorkflowTaskKind.llm_call: {
+                kindLabel = "llm_call";
+                const cfg = tryUnmarshalTaskConfig(task.kind, task.taskConfig);
+                if (cfg === undefined || cfg.model === "") {
+                    continue;
+                }
+                model = cfg.model;
+                harness = HARNESS_NAME_NATIVE;
+                break;
+            }
+            case WorkflowTaskKind.eval: {
+                kindLabel = "eval";
+                const cfg = tryUnmarshalTaskConfig(task.kind, task.taskConfig);
+                if (cfg === undefined || cfg.model === "") {
+                    continue;
+                }
+                model = cfg.model;
+                harness = HARNESS_NAME_NATIVE;
+                break;
+            }
+            default:
+                continue;
+        }
+        if (!models.hasHarness(harness)) {
+            continue;
+        }
+        if (models.isValidModel(harness, model)) {
+            continue;
+        }
+        errors.push(buildModelError(models, task.name, kindLabel, model, harness));
+    }
+    return errors;
+}
+/**
+ * Applies the same fail-closed service-tier rules as execution create to an
+ * agent_call's run_config, with one extra dimension execution create cannot
+ * have: the task config names its harness, so the fast variant must be
+ * priced FOR THAT HARNESS — a fast price under another harness would
+ * validate a tier the execution path can never apply (a silent no-op, the
+ * exact class #357 exists to kill).
+ *
+ * STANDARD/unset is always valid; unknown tier strings never reach this
+ * function (strict unmarshaling refuses non-canonical enum values).
+ */
+function validateAgentCallServiceTier(models, taskName, harness, rc) {
+    if (rc?.serviceTier !== ServiceTier.FAST) {
+        return "";
+    }
+    const modelName = (rc.modelName ?? "").trim();
+    if (modelName === "") {
+        return (`task '${taskName}' (agent_call): run_config.service_tier 'fast' requires ` +
+            `run_config.model_name — the fast tier is a per-model price`);
+    }
+    if (!models.hasPricingVariantForHarness(harness, modelName, FAST_VARIANT_KEY)) {
+        return (`task '${taskName}' (agent_call): run_config.service_tier 'fast' is not available ` +
+            `for model '${modelName}' on harness '${harness}': the model registry prices no fast ` +
+            `variant for it${fastCapableSuffix(models, harness)}`);
+    }
+    return "";
+}
+/**
+ * Applies the same fail-closed thinking-mode rules as execution create to
+ * an agent_call's run_config (oss#772), harness-scoped like the tier check
+ * above. Capability-gated, not pricing-gated: thinking bills at base
+ * per-token rates, so the registry fact that makes ENABLED selectable is
+ * capabilities.thinking under the task's harness — which in v1 only the
+ * cursor harness can honor.
+ *
+ * DISABLED/unset is always valid; unknown mode strings never reach this
+ * function (strict unmarshaling refuses non-canonical enum values).
+ */
+function validateAgentCallThinkingMode(models, taskName, harness, rc) {
+    if (rc?.thinkingMode !== ThinkingMode.ENABLED) {
+        return "";
+    }
+    const modelName = (rc.modelName ?? "").trim();
+    if (modelName === "") {
+        return (`task '${taskName}' (agent_call): run_config.thinking_mode 'enabled' requires ` +
+            `run_config.model_name — thinking is a per-model capability`);
+    }
+    if (!models.hasCapabilityForHarness(harness, modelName, THINKING_CAPABILITY_KEY)) {
+        return (`task '${taskName}' (agent_call): run_config.thinking_mode 'enabled' is not available ` +
+            `for model '${modelName}' on harness '${harness}': the model registry declares no thinking ` +
+            `capability for it${thinkingCapableSuffix(models, harness)}`);
+    }
+    return "";
+}
+/**
+ * Renders "; models with a thinking mode on '<harness>': a, b, c" —
+ * actionable refusal detail, sorted (the store keeps the list sorted),
+ * empty when the registry declares none for that harness.
+ */
+function thinkingCapableSuffix(models, harness) {
+    const capable = models.canonicalModelsWithCapabilityForHarness(harness, THINKING_CAPABILITY_KEY);
+    if (capable.length === 0) {
+        return "";
+    }
+    return `; models with a thinking mode on '${harness}': ${capable.join(", ")}`;
+}
+/**
+ * Renders "; models with a fast tier on '<harness>': a, b, c" — sorted,
+ * empty when the registry prices none for that harness.
+ */
+function fastCapableSuffix(models, harness) {
+    const capable = models.canonicalModelsWithVariantForHarness(harness, FAST_VARIANT_KEY);
+    if (capable.length === 0) {
+        return "";
+    }
+    return `; models with a fast tier on '${harness}': ${capable.join(", ")}`;
+}
+function buildModelError(models, taskName, kindLabel, model, harness) {
+    const suggestions = suggestSimilarModels(model, models.canonicalModels(harness));
+    let msg = `task '${taskName}' (${kindLabel}): model '${model}' is not a valid model for harness '${harness}'`;
+    if (suggestions.length > 0) {
+        const quoted = suggestions.map((s) => `'${s}'`);
+        msg += `. Did you mean: ${quoted.join(", ")}?`;
+    }
+    return msg;
+}
+//# sourceMappingURL=model-validation.js.map

package/dist/domain/workflow/validation/model-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-validation.js","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/model-validation.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,8DAA8D,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,MAAM,wDAAwD,CAAC;AAM1F,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA4B,EAC5B,IAA8B;IAE9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QAED,IAAI,KAAa,CAAC;QAClB,IAAI,OAAe,CAAC;QACpB,IAAI,SAAiB,CAAC;QAEtB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;gBACjC,SAAS,GAAG,YAAY,CAAC;gBACzB,MAAM,GAAG,GAAG,sBAAsB,CAAsB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBACpF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,SAAS;gBACX,CAAC;gBACD,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnC,iEAAiE;gBACjE,+DAA+D;gBAC/D,4DAA4D;gBAC5D,qBAAqB;gBACrB,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxF,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,WAAW,GAAG,6BAA6B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7F,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3B,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBACD,KAAK,GAAG,GAAG,CAAC,SAAU,CAAC,SAAS,CAAC;gBACjC,MAAM;YACR,CAAC;YAED,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC/B,SAAS,GAAG,UAAU,CAAC;gBACvB,MAAM,GAAG,GAAG,sBAAsB,CAAoB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBAClF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;oBAC1C,SAAS;gBACX,CAAC;gBACD,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBAClB,OAAO,GAAG,mBAAmB,CAAC;gBAC9B,MAAM;YACR,CAAC;YAED,KAAK,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3B,SAAS,GAAG,MAAM,CAAC;gBACnB,MAAM,GAAG,GAAG,sBAAsB,CAAiB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC/E,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;oBAC1C,SAAS;gBACX,CAAC;gBACD,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBAClB,OAAO,GAAG,mBAAmB,CAAC;gBAC9B,MAAM;YACR,CAAC;YAED;gBACE,SAAS;QACb,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,4BAA4B,CACnC,MAA4B,EAC5B,QAAgB,EAChB,OAAe,EACf,EAAyB;IAEzB,IAAI,EAAE,EAAE,WAAW,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,CACL,SAAS,QAAQ,0DAA0D;YAC3E,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC9E,OAAO,CACL,SAAS,QAAQ,kEAAkE;YACnF,cAAc,SAAS,iBAAiB,OAAO,uCAAuC;YACtF,iBAAiB,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,6BAA6B,CACpC,MAA4B,EAC5B,QAAgB,EAChB,OAAe,EACf,EAAyB;IAEzB,IAAI,EAAE,EAAE,YAAY,KAAK,YAAY,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,CACL,SAAS,QAAQ,8DAA8D;YAC/E,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACjF,OAAO,CACL,SAAS,QAAQ,sEAAsE;YACvF,cAAc,SAAS,iBAAiB,OAAO,6CAA6C;YAC5F,oBAAoB,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,MAA4B,EAC5B,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,CAAC,uCAAuC,CAC5D,OAAO,EACP,uBAAuB,CACxB,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,qCAAqC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACxB,MAA4B,EAC5B,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,CAAC,oCAAoC,CACzD,OAAO,EACP,gBAAgB,CACjB,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,iCAAiC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CACtB,MAA4B,EAC5B,QAAgB,EAChB,SAAiB,EACjB,KAAa,EACb,OAAe;IAEf,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjF,IAAI,GAAG,GAAG,SAAS,QAAQ,MAAM,SAAS,aAAa,KAAK,uCAAuC,OAAO,GAAG,CAAC;IAE9G,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,GAAG,IAAI,mBAAmB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACjD,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/domain/workflow/validation/task-config-constraints.d.ts

@@ -0,0 +1,7 @@
+import type { WorkflowSpec } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/spec_pb";
+/**
+ * Runs protovalidate over every task's strict-unmarshaled typed config —
+ * the declarative half of Layer-2 task-config validation.
+ */
+export declare function validateTaskConfigConstraints(spec: WorkflowSpec | undefined): string[];
+//# sourceMappingURL=task-config-constraints.d.ts.map

package/dist/domain/workflow/validation/task-config-constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-config-constraints.d.ts","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/task-config-constraints.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,wDAAwD,CAAC;AAehE;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,YAAY,GAAG,SAAS,GAC7B,MAAM,EAAE,CAUV"}

package/dist/domain/workflow/validation/task-config-constraints.js

@@ -0,0 +1,126 @@
+/**
+ * Declared task-config constraint validation — ports
+ * ValidateTaskConfigConstraints from
+ * pkg/domain/workflow/validation/task_config_constraints.go (stigmer#805).
+ *
+ * Layer 1 (RPC-level protovalidate) cannot see inside task_config because
+ * it is an opaque google.protobuf.Struct on the wire; the rules declared on
+ * the typed task-config protos (required fields, bounds, CEL rules like
+ * wait's duration.non_zero) only become checkable after the strict
+ * unmarshal. This step closes that gap for every task, including tasks
+ * nested inside control-flow configs (for_each/fork/try_catch do blocks)
+ * and compensate lists, which no other validation layer reaches.
+ *
+ * The rendered string is "task '<name>' (<kind>): <path> – <message>" —
+ * the task prefix matches this package's other validators, the violation
+ * half is the shared cross-edition formatViolation rendering. The Go and
+ * cloud Java validators mirror this step byte-for-byte; the conformance
+ * suite pins the exact string on both editions.
+ *
+ * A thrown error is a fault in the validation machinery itself (never a
+ * user-fixable spec problem) and surfaces as a system error, mirroring the
+ * Layer-1 contract.
+ */
+import { enumToJson } from "@bufbuild/protobuf";
+import { WorkflowTaskKindSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/enum_pb";
+import { ForTaskConfigSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/tasks/for_pb";
+import { ForkTaskConfigSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/tasks/fork_pb";
+import { TryTaskConfigSchema } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/tasks/try_pb";
+import { taskConfigSchemaFor, unmarshalTaskConfig, } from "../converter/unmarshal.js";
+import { validator } from "../../../pipeline/steps/validation.js";
+import { formatViolation } from "./format-violation.js";
+/**
+ * Runs protovalidate over every task's strict-unmarshaled typed config —
+ * the declarative half of Layer-2 task-config validation.
+ */
+export function validateTaskConfigConstraints(spec) {
+    if (spec === undefined || spec.tasks.length === 0) {
+        return [];
+    }
+    const violations = [];
+    for (const task of spec.tasks) {
+        violations.push(...taskConstraintViolations(task));
+    }
+    return violations;
+}
+/**
+ * Validates one task's typed config and recurses into the tasks nested
+ * inside it. Iteration order is part of the cross-edition contract (the
+ * persist gate surfaces errors[0]): the task's own violations first, then
+ * nested tasks in declaration order, then the compensate list.
+ */
+function taskConstraintViolations(task) {
+    const out = [];
+    if (task.taskConfig !== undefined) {
+        let cfg;
+        try {
+            cfg = unmarshalTaskConfig(task.kind, task.taskConfig);
+        }
+        catch {
+            // An unmarshal failure is a structural defect the conversion step has
+            // already reported as INVALID — never double-report it here.
+            cfg = undefined;
+        }
+        if (cfg !== undefined) {
+            for (const v of configConstraintViolations(task, cfg)) {
+                out.push(`task '${task.name}' (${enumToJson(WorkflowTaskKindSchema, task.kind)}): ${v}`);
+            }
+            for (const nested of nestedTasks(cfg)) {
+                out.push(...taskConstraintViolations(nested));
+            }
+        }
+    }
+    for (const comp of task.compensate) {
+        out.push(...taskConstraintViolations(comp));
+    }
+    return out;
+}
+/**
+ * Runs the shared protovalidate validator over one typed task config.
+ * protovalidate descends into nested messages on its own, so a parent
+ * config's run also covers the scalar fields of tasks nested in it (their
+ * task_config is a Struct again — that is what the walker's recursion is
+ * for).
+ */
+function configConstraintViolations(task, cfg) {
+    const schema = taskConfigSchemaFor(task.kind);
+    if (schema === undefined) {
+        // Unknown kinds were already rejected by validateTaskKinds; an
+        // unmarshaled config without a schema is a machinery fault.
+        throw new Error(`no task-config schema for kind ${task.kind}`);
+    }
+    const result = validator().validate(schema, cfg);
+    if (result.kind === "valid") {
+        return [];
+    }
+    if (result.kind === "invalid") {
+        return result.error.violations.map((v) => formatViolation(v));
+    }
+    // Anything other than a validation verdict is a fault in the validation
+    // machinery itself, not a user-fixable spec problem.
+    throw result.error;
+}
+/**
+ * The WorkflowTask lists embedded in a control-flow task config, in
+ * declaration order — the same recursion set the converter walks
+ * (convertForTask/convertForkTask/convertTryTask) and the cloud Java
+ * TaskConfigStrictParser mirrors.
+ */
+function nestedTasks(cfg) {
+    switch (cfg.$typeName) {
+        case ForTaskConfigSchema.typeName:
+            return cfg.do;
+        case ForkTaskConfigSchema.typeName:
+            return cfg.branches.flatMap((branch) => branch.do);
+        case TryTaskConfigSchema.typeName: {
+            const tryCfg = cfg;
+            const out = [...tryCfg.try];
+            if (tryCfg.catch !== undefined) {
+                out.push(...tryCfg.catch.do);
+            }
+            return out;
+        }
+    }
+    return [];
+}
+//# sourceMappingURL=task-config-constraints.js.map

package/dist/domain/workflow/validation/task-config-constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-config-constraints.js","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/task-config-constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAKhG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6DAA6D,CAAC;AAElG,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AAEpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6DAA6D,CAAC;AAGlG,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAA8B;IAE9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,IAAkB;IAClD,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,GAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,6DAA6D;YAC7D,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,0BAA0B,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,IAAI,CACN,SAAS,IAAI,CAAC,IAAI,MAAM,UAAU,CAAC,sBAAsB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC/E,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,0BAA0B,CAAC,IAAkB,EAAE,GAAY;IAClE,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,+DAA+D;QAC/D,4DAA4D;QAC5D,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,wEAAwE;IACxE,qDAAqD;IACrD,MAAM,MAAM,CAAC,KAAK,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,GAAY;IAC/B,QAAQ,GAAG,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,mBAAmB,CAAC,QAAQ;YAC/B,OAAQ,GAAqB,CAAC,EAAE,CAAC;QACnC,KAAK,oBAAoB,CAAC,QAAQ;YAChC,OAAQ,GAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,KAAK,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,GAAoB,CAAC;YACpC,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/domain/workflow/validation/validator.d.ts

@@ -0,0 +1,11 @@
+import type { WorkflowSpec } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/spec_pb";
+import type { ServerlessWorkflowValidation } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/serverless/validation_pb";
+import type { Logger } from "../../../boot/logger.js";
+import type { ModelCatalogProvider } from "../registry/model-catalog-provider.js";
+export declare class InProcessValidator {
+    private readonly modelRegistry;
+    private readonly logger;
+    constructor(modelRegistry: ModelCatalogProvider, logger: Logger);
+    validate(spec: WorkflowSpec | undefined): ServerlessWorkflowValidation;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/domain/workflow/validation/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/validator.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wDAAwD,CAAC;AAK3F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,yEAAyE,CAAC;AAE5H,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAYlF,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,aAAa,EAAE,oBAAoB,EACnC,MAAM,EAAE,MAAM;IAGjC,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,SAAS,GAAG,4BAA4B;CA6FvE"}

package/dist/domain/workflow/validation/validator.js

@@ -0,0 +1,116 @@
+/**
+ * In-process workflow-spec validation — ports
+ * pkg/domain/workflow/validation/validator.go. Validates a WorkflowSpec
+ * entirely in-process: converts the spec to CNCF Serverless Workflow DSL
+ * YAML, runs cross-reference validation, the declared task-config
+ * constraints (#805), the surface rules, harness-aware model validation,
+ * the human-input timeout-policy rule, and produces budget/expression
+ * warnings.
+ *
+ * Verdict states:
+ *   - VALID: conversion succeeded, no structural errors
+ *   - INVALID: user error (bad structure, missing fields, bad references)
+ *   - FAILED: system error (nil spec)
+ * The yaml field always carries the generated CNCF YAML when conversion
+ * succeeds (even for INVALID), as it aids debugging. A machinery fault
+ * (the validation infrastructure itself failing) THROWS — callers surface
+ * it as a gRPC internal error, mirroring Go's (nil, err) contract.
+ */
+import { create } from "@bufbuild/protobuf";
+import { timestampNow } from "@bufbuild/protobuf/wkt";
+import { ServerlessWorkflowValidationSchema, ValidationState, } from "@stigmer/protos/ai/stigmer/agentic/workflow/v1/serverless/validation_pb";
+import { protoToYaml } from "../converter/converter.js";
+import { checkBudgetWarnings } from "./budget-warnings.js";
+import { validateCrossTaskReferences, validateTaskConfigSurfaceRules, validateTaskKinds, } from "./crossref.js";
+import { checkExpressionWarnings } from "./expression-warnings.js";
+import { validateHumanInputTimeoutPolicies } from "./human-input-validation.js";
+import { validateModelReferences } from "./model-validation.js";
+import { validateTaskConfigConstraints } from "./task-config-constraints.js";
+export class InProcessValidator {
+    modelRegistry;
+    logger;
+    constructor(modelRegistry, logger) {
+        this.modelRegistry = modelRegistry;
+        this.logger = logger;
+    }
+    validate(spec) {
+        if (spec === undefined) {
+            return create(ServerlessWorkflowValidationSchema, {
+                state: ValidationState.FAILED,
+                errors: ["WorkflowSpec cannot be nil"],
+                validatedAt: timestampNow(),
+            });
+        }
+        this.logger.debug("starting in-process workflow validation");
+        // Step 0: task kind validation (fail fast for unknown kinds).
+        const kindErrors = validateTaskKinds(spec);
+        if (kindErrors.length > 0) {
+            return create(ServerlessWorkflowValidationSchema, {
+                state: ValidationState.INVALID,
+                errors: kindErrors,
+                validatedAt: timestampNow(),
+            });
+        }
+        // Step 1: convert proto to CNCF YAML.
+        let yaml;
+        try {
+            yaml = protoToYaml(spec);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            this.logger.error("YAML generation failed", { error: message });
+            return create(ServerlessWorkflowValidationSchema, {
+                state: ValidationState.INVALID,
+                errors: [`Failed to generate YAML: ${message}`],
+                validatedAt: timestampNow(),
+            });
+        }
+        this.logger.debug("YAML generation succeeded", { yamlLength: yaml.length });
+        const errors = [];
+        const warnings = [];
+        // Step 2: cross-reference validation (unique names, flow.then targets,
+        // cycles).
+        errors.push(...validateCrossTaskReferences(spec));
+        // Step 2b: typed task-config constraint validation — protovalidate over
+        // each strict-unmarshaled config, nested tasks included (#805). A
+        // throw here is a fault in the validation machinery, not a spec
+        // problem, and propagates as a system error.
+        errors.push(...validateTaskConfigConstraints(spec));
+        // Step 2c: bespoke task-config surface rules (semantics beyond what
+        // the config protos can declare).
+        errors.push(...validateTaskConfigSurfaceRules(spec));
+        // Step 2d: model reference validation (harness-aware).
+        errors.push(...validateModelReferences(this.modelRegistry, spec));
+        // Step 2e: human-input timeout policy validation (fail closed on
+        // policies the runtime cannot honor).
+        errors.push(...validateHumanInputTimeoutPolicies(spec));
+        // Step 3: budget warnings.
+        warnings.push(...checkBudgetWarnings(spec.budget, spec.tasks));
+        // Step 4: expression warnings ($context.env.* → should be $env.*).
+        warnings.push(...checkExpressionWarnings(spec));
+        if (errors.length > 0) {
+            this.logger.warn("validation failed (state: INVALID)", {
+                errors: errors.length,
+                warnings: warnings.length,
+            });
+            return create(ServerlessWorkflowValidationSchema, {
+                state: ValidationState.INVALID,
+                yaml,
+                errors,
+                warnings,
+                validatedAt: timestampNow(),
+            });
+        }
+        this.logger.info("validation passed (state: VALID)", {
+            warnings: warnings.length,
+        });
+        return create(ServerlessWorkflowValidationSchema, {
+            state: ValidationState.VALID,
+            yaml,
+            errors,
+            warnings,
+            validatedAt: timestampNow(),
+        });
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/domain/workflow/validation/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../../src/domain/workflow/validation/validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EACL,kCAAkC,EAClC,eAAe,GAChB,MAAM,yEAAyE,CAAC;AAIjF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,iCAAiC,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,OAAO,kBAAkB;IAEV;IACA;IAFnB,YACmB,aAAmC,EACnC,MAAc;QADd,kBAAa,GAAb,aAAa,CAAsB;QACnC,WAAM,GAAN,MAAM,CAAQ;IAC9B,CAAC;IAEJ,QAAQ,CAAC,IAA8B;QACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,eAAe,CAAC,MAAM;gBAC7B,MAAM,EAAE,CAAC,4BAA4B,CAAC;gBACtC,WAAW,EAAE,YAAY,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAE7D,8DAA8D;QAC9D,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,eAAe,CAAC,OAAO;gBAC9B,MAAM,EAAE,UAAU;gBAClB,WAAW,EAAE,YAAY,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,eAAe,CAAC,OAAO;gBAC9B,MAAM,EAAE,CAAC,4BAA4B,OAAO,EAAE,CAAC;gBAC/C,WAAW,EAAE,YAAY,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,uEAAuE;QACvE,WAAW;QACX,MAAM,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;QAElD,wEAAwE;QACxE,kEAAkE;QAClE,gEAAgE;QAChE,6CAA6C;QAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpD,oEAAoE;QACpE,kCAAkC;QAClC,MAAM,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC;QAErD,uDAAuD;QACvD,MAAM,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;QAElE,iEAAiE;QACjE,sCAAsC;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC;QAExD,2BAA2B;QAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAE/D,mEAAmE;QACnE,QAAQ,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAEhD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;gBACrD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,QAAQ,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,eAAe,CAAC,OAAO;gBAC9B,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW,EAAE,YAAY,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YACnD,QAAQ,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,kCAAkC,EAAE;YAChD,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,IAAI;YACJ,MAAM;YACN,QAAQ;YACR,WAAW,EAAE,YAAY,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;CACF"}