@travisliu/open-dynamic-workflow 0.3.0

package/dist/pipeline/types.d.ts

@@ -0,0 +1,92 @@
+import type { AgentCallInput, AgentResult } from "../types/agent.js";
+import type { SerializedError } from "../types/errors.js";
+export type PipelineStrategy = "item-streaming" | "stage-barrier";
+export interface PipelineOptions {
+    label?: string;
+    strategy?: PipelineStrategy;
+    concurrency?: number;
+    stageConcurrency?: Record<string, number>;
+    preserveOrder?: boolean;
+    failFast?: boolean;
+}
+export interface NormalizedPipelineOptions {
+    label?: string;
+    strategy: PipelineStrategy;
+    concurrency?: number;
+    stageConcurrency: Record<string, number>;
+    preserveOrder: boolean;
+    failFast: boolean;
+}
+export interface PipelineStageContext {
+    pipelineId: string;
+    runId: string;
+    artifactsDir: string;
+    itemIndex: number;
+    stageIndex: number;
+    stageName: string;
+    agent(input: AgentCallInput): Promise<AgentResult>;
+    log(message: string, data?: unknown): void;
+    agentId(suffix?: string): string;
+    signal: AbortSignal;
+    sleep(ms: number): Promise<void>;
+}
+export interface PipelineStage<I = unknown, O = unknown> {
+    name: string;
+    run: (input: I, context: PipelineStageContext) => Promise<O> | O;
+    concurrency?: number;
+    timeoutMs?: number;
+}
+export interface PipelineStageResult<O = unknown> {
+    stageName: string;
+    stageIndex: number;
+    status: "succeeded" | "failed" | "skipped" | "timed_out" | "cancelled";
+    startedAt: string;
+    finishedAt: string;
+    durationMs: number;
+    value?: O;
+    error?: SerializedError;
+    childAgentIds: string[];
+}
+export interface PipelineItemSuccess<O = unknown> {
+    itemIndex: number;
+    status: "succeeded";
+    startedAt: string;
+    finishedAt: string;
+    durationMs: number;
+    value: O;
+    stages: PipelineStageResult[];
+}
+export interface PipelineItemFailure {
+    itemIndex: number;
+    status: "failed" | "cancelled" | "timed_out";
+    startedAt: string;
+    finishedAt: string;
+    durationMs: number;
+    failedStage?: string;
+    error?: SerializedError;
+    stages: PipelineStageResult[];
+}
+export type PipelineItemResult<O = unknown> = PipelineItemSuccess<O> | PipelineItemFailure;
+export type PipelineResult<O = unknown> = PipelineItemResult<O>[];
+export interface PipelineStageArtifacts {
+    stageName: string;
+    stageIndex: number;
+    status: string;
+    value?: unknown;
+    error?: SerializedError;
+    childAgentIds: string[];
+}
+export interface PipelineSummary {
+    pipelineId: string;
+    label?: string | undefined;
+    strategy: PipelineStrategy;
+    status: "succeeded" | "failed" | "cancelled";
+    itemCount: number;
+    succeededCount: number;
+    failedCount: number;
+    cancelledCount: number;
+    skippedCount: number;
+    stageNames: string[];
+    durationMs: number;
+    artifactPath: string;
+}

package/dist/pipeline/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/pipeline/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/pipeline/types.ts"],"names":[],"mappings":""}

package/dist/pipeline/validate.d.ts

@@ -0,0 +1,11 @@
+import type { PipelineStage, NormalizedPipelineOptions } from "./types.js";
+export declare const DEFAULT_PIPELINE_OPTIONS: {
+    readonly strategy: "item-streaming";
+    readonly preserveOrder: true;
+    readonly failFast: false;
+};
+export declare function validateAndNormalizePipelineArgs(items: unknown, stages: unknown, options?: unknown): {
+    normalizedItems: unknown[];
+    normalizedStages: PipelineStage[];
+    normalizedOptions: NormalizedPipelineOptions;
+};

package/dist/pipeline/validate.js

@@ -0,0 +1,139 @@
+import { InvalidDslCallError } from "../workflow/errors.js";
+import { assertValidPipelineStageName } from "./id.js";
+export const DEFAULT_PIPELINE_OPTIONS = {
+    strategy: "item-streaming",
+    preserveOrder: true,
+    failFast: false
+};
+const ALLOWED_OPTION_KEYS = [
+    "label",
+    "strategy",
+    "concurrency",
+    "stageConcurrency",
+    "preserveOrder",
+    "failFast"
+];
+export function validateAndNormalizePipelineArgs(items, stages, options) {
+    // 1. Validate items
+    if (!Array.isArray(items)) {
+        throw new InvalidDslCallError("pipeline() items must be an array.");
+    }
+    // 2. Validate stages
+    if (!Array.isArray(stages)) {
+        throw new InvalidDslCallError("pipeline() stages must be an array.");
+    }
+    if (stages.length === 0) {
+        throw new InvalidDslCallError("pipeline() stages cannot be empty.");
+    }
+    const normalizedStages = [];
+    const stageNames = new Set();
+    for (let i = 0; i < stages.length; i++) {
+        const stage = stages[i];
+        if (!stage || typeof stage !== "object") {
+            throw new InvalidDslCallError(`pipeline() stage at index ${i} must be an object.`);
+        }
+        const { name, run, concurrency, timeoutMs } = stage;
+        if (name === undefined) {
+            throw new InvalidDslCallError(`pipeline() stage at index ${i} is missing 'name'.`);
+        }
+        assertValidPipelineStageName(name);
+        if (stageNames.has(name)) {
+            throw new InvalidDslCallError(`pipeline() duplicate stage name detected: '${name}'.`);
+        }
+        stageNames.add(name);
+        if (run === undefined) {
+            throw new InvalidDslCallError(`pipeline() stage '${name}' is missing 'run' function.`);
+        }
+        if (typeof run !== "function") {
+            throw new InvalidDslCallError(`pipeline() stage '${name}' 'run' must be a function.`);
+        }
+        if (concurrency !== undefined) {
+            if (typeof concurrency !== "number" || concurrency <= 0 || !Number.isInteger(concurrency)) {
+                throw new InvalidDslCallError(`pipeline() stage '${name}' concurrency must be a positive integer.`);
+            }
+        }
+        if (timeoutMs !== undefined) {
+            if (typeof timeoutMs !== "number" || timeoutMs <= 0 || isNaN(timeoutMs)) {
+                throw new InvalidDslCallError(`pipeline() stage '${name}' timeoutMs must be a positive number.`);
+            }
+        }
+        normalizedStages.push({
+            name,
+            run,
+            ...(concurrency !== undefined ? { concurrency } : {}),
+            ...(timeoutMs !== undefined ? { timeoutMs } : {})
+        });
+    }
+    // 3. Validate options
+    let normalizedOptions = {
+        strategy: DEFAULT_PIPELINE_OPTIONS.strategy,
+        preserveOrder: DEFAULT_PIPELINE_OPTIONS.preserveOrder,
+        failFast: DEFAULT_PIPELINE_OPTIONS.failFast,
+        stageConcurrency: {}
+    };
+    if (options !== undefined) {
+        if (!options || typeof options !== "object" || Array.isArray(options)) {
+            throw new InvalidDslCallError("pipeline() options must be an object.");
+        }
+        // Check unsupported keys
+        const optionKeys = Object.keys(options);
+        for (const key of optionKeys) {
+            if (!ALLOWED_OPTION_KEYS.includes(key)) {
+                throw new InvalidDslCallError(`pipeline() options contain unsupported key '${key}'.`);
+            }
+        }
+        const opts = options;
+        if (opts.label !== undefined) {
+            if (typeof opts.label !== "string" || opts.label.trim() === "") {
+                throw new InvalidDslCallError("pipeline() options label must be a non-empty string.");
+            }
+            normalizedOptions.label = opts.label;
+        }
+        if (opts.strategy !== undefined) {
+            if (opts.strategy !== "item-streaming" && opts.strategy !== "stage-barrier") {
+                throw new InvalidDslCallError(`pipeline() options strategy must be 'item-streaming' or 'stage-barrier'.`);
+            }
+            normalizedOptions.strategy = opts.strategy;
+        }
+        if (opts.concurrency !== undefined) {
+            if (typeof opts.concurrency !== "number" || opts.concurrency <= 0 || !Number.isInteger(opts.concurrency)) {
+                throw new InvalidDslCallError("pipeline() options concurrency must be a positive integer.");
+            }
+            normalizedOptions.concurrency = opts.concurrency;
+        }
+        if (opts.preserveOrder !== undefined) {
+            if (typeof opts.preserveOrder !== "boolean") {
+                throw new InvalidDslCallError("pipeline() options preserveOrder must be a boolean.");
+            }
+            normalizedOptions.preserveOrder = opts.preserveOrder;
+        }
+        if (opts.failFast !== undefined) {
+            if (typeof opts.failFast !== "boolean") {
+                throw new InvalidDslCallError("pipeline() options failFast must be a boolean.");
+            }
+            normalizedOptions.failFast = opts.failFast;
+        }
+        if (opts.stageConcurrency !== undefined) {
+            if (!opts.stageConcurrency || typeof opts.stageConcurrency !== "object" || Array.isArray(opts.stageConcurrency)) {
+                throw new InvalidDslCallError("pipeline() options stageConcurrency must be an object.");
+            }
+            const stageConcurrencyKeys = Object.keys(opts.stageConcurrency);
+            for (const stageName of stageConcurrencyKeys) {
+                if (!stageNames.has(stageName)) {
+                    throw new InvalidDslCallError(`pipeline() options stageConcurrency contains unknown stage name '${stageName}'.`);
+                }
+                const val = opts.stageConcurrency[stageName];
+                if (typeof val !== "number" || val <= 0 || !Number.isInteger(val)) {
+                    throw new InvalidDslCallError(`pipeline() options stageConcurrency for stage '${stageName}' must be a positive integer.`);
+                }
+                normalizedOptions.stageConcurrency[stageName] = val;
+            }
+        }
+    }
+    return {
+        normalizedItems: items,
+        normalizedStages,
+        normalizedOptions
+    };
+}
+//# sourceMappingURL=validate.js.map

package/dist/pipeline/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/pipeline/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAGvD,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,gBAAgB;IAC1B,aAAa,EAAE,IAAI;IACnB,QAAQ,EAAE,KAAK;CACP,CAAC;AAEX,MAAM,mBAAmB,GAAG;IAC1B,OAAO;IACP,UAAU;IACV,aAAa;IACb,kBAAkB;IAClB,eAAe;IACf,UAAU;CACX,CAAC;AAEF,MAAM,UAAU,gCAAgC,CAC9C,KAAc,EACd,MAAe,EACf,OAAiB;IAMjB,oBAAoB;IACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IACtE,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,gBAAgB,GAAoB,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,CAAC,qBAAqB,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAY,CAAC;QAE3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,CAAC,qBAAqB,CAAC,CAAC;QACrF,CAAC;QACD,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAEnC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,mBAAmB,CAAC,8CAA8C,IAAI,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAErB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,IAAI,8BAA8B,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,IAAI,6BAA6B,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,IAAI,2CAA2C,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,IAAI,wCAAwC,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC;YACpB,IAAI;YACJ,GAAG;YACH,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,IAAI,iBAAiB,GAA8B;QACjD,QAAQ,EAAE,wBAAwB,CAAC,QAAQ;QAC3C,aAAa,EAAE,wBAAwB,CAAC,aAAa;QACrD,QAAQ,EAAE,wBAAwB,CAAC,QAAQ;QAC3C,gBAAgB,EAAE,EAAE;KACrB,CAAC;IAEF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,CAAC,CAAC;QACzE,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,mBAAmB,CAAC,+CAA+C,GAAG,IAAI,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,OAA0B,CAAC;QAExC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC/D,MAAM,IAAI,mBAAmB,CAAC,sDAAsD,CAAC,CAAC;YACxF,CAAC;YACD,iBAAiB,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,gBAAgB,IAAI,IAAI,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;gBAC5E,MAAM,IAAI,mBAAmB,CAC3B,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,iBAAiB,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzG,MAAM,IAAI,mBAAmB,CAAC,4DAA4D,CAAC,CAAC;YAC9F,CAAC;YACD,iBAAiB,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,mBAAmB,CAAC,qDAAqD,CAAC,CAAC;YACvF,CAAC;YACD,iBAAiB,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,IAAI,mBAAmB,CAAC,gDAAgD,CAAC,CAAC;YAClF,CAAC;YACD,iBAAiB,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAChH,MAAM,IAAI,mBAAmB,CAAC,wDAAwD,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChE,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;gBAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,mBAAmB,CAC3B,oEAAoE,SAAS,IAAI,CAClF,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClE,MAAM,IAAI,mBAAmB,CAC3B,kDAAkD,SAAS,+BAA+B,CAC3F,CAAC;gBACJ,CAAC;gBACD,iBAAiB,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,eAAe,EAAE,KAAK;QACtB,gBAAgB;QAChB,iBAAiB;KAClB,CAAC;AACJ,CAAC"}

package/dist/runtime/public.d.ts

@@ -0,0 +1,3 @@
+export * from "../types/index.js";
+export { defineTool, isDefinedTool } from "../tools/index.js";
+export * from "../workflow/runtime.js";

package/dist/runtime/public.js

@@ -0,0 +1,4 @@
+export * from "../types/index.js";
+export { defineTool, isDefinedTool } from "../tools/index.js";
+export * from "../workflow/runtime.js";
+//# sourceMappingURL=public.js.map

package/dist/runtime/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../../src/runtime/public.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,cAAc,wBAAwB,CAAC"}

package/dist/security/env.d.ts

@@ -0,0 +1,38 @@
+import type { ProviderCommand } from "../types/agent.js";
+export declare const DEFAULT_REDACT_PATTERNS: string[];
+export declare function shouldRedactEnvName(name: string, patterns?: string[]): boolean;
+export declare function buildProviderEnv(input: {
+    baseEnv: NodeJS.ProcessEnv;
+    passEnv: string[];
+    explicitEnv?: Record<string, string>;
+}): Record<string, string>;
+export declare function redactText(input: string, secretValues: string[]): string;
+/**
+ * Stateful redactor for streaming text.
+ * Ensures secrets split across chunks are correctly identified and redacted.
+ */
+export declare class StreamRedactor {
+    private buffer;
+    private readonly secrets;
+    private readonly maxSecretLen;
+    constructor(secretValues: string[]);
+    /**
+     * Processes a new chunk of text and returns the redacted part that is safe to output.
+     */
+    process(chunk: string): string;
+    /**
+     * Flushes any remaining text in the buffer, redacting it one last time.
+     */
+    flush(): string;
+}
+export declare function collectSecretValues(baseEnv: NodeJS.ProcessEnv, patterns?: string[]): string[];
+/**
+ * Redacts string values inside a JSON-like structure.
+ * Accepts JSON-like values only; must not contain circular references.
+ */
+export declare function redactJsonValue(value: unknown, secretValues: string[]): unknown;
+export declare function redactProviderCommand(command: ProviderCommand, secretValues: string[]): ProviderCommand;
+export declare function redactSerializedError<T extends {
+    message?: string;
+    stack?: string;
+}>(error: T, secretValues: string[]): T;

package/dist/security/env.js

@@ -0,0 +1,186 @@
+export const DEFAULT_REDACT_PATTERNS = [
+    "*_KEY",
+    "*_TOKEN",
+    "*_SECRET",
+    "PASSWORD",
+    "OPENAI_API_KEY",
+    "GEMINI_API_KEY",
+    "GOOGLE_API_KEY"
+];
+export function shouldRedactEnvName(name, patterns = DEFAULT_REDACT_PATTERNS) {
+    const upperName = name.toUpperCase();
+    for (const pattern of patterns) {
+        const upperPattern = pattern.toUpperCase();
+        if (upperPattern.startsWith("*") && upperPattern.endsWith("*")) {
+            const core = upperPattern.slice(1, -1);
+            if (upperName.includes(core))
+                return true;
+        }
+        else if (upperPattern.startsWith("*")) {
+            const suffix = upperPattern.slice(1);
+            if (upperName.endsWith(suffix))
+                return true;
+        }
+        else if (upperPattern.endsWith("*")) {
+            const prefix = upperPattern.slice(0, -1);
+            if (upperName.startsWith(prefix))
+                return true;
+        }
+        else {
+            if (upperName === upperPattern)
+                return true;
+        }
+    }
+    return false;
+}
+export function buildProviderEnv(input) {
+    const env = {};
+    const systemKeys = ["PATH", "HOME", "USER", "LANG", "TERM", "SYSTEMROOT", "WINDIR"];
+    const allAllowedKeys = new Set([
+        ...systemKeys.map((k) => k.toUpperCase()),
+        ...input.passEnv.map((k) => k.toUpperCase())
+    ]);
+    for (const [key, value] of Object.entries(input.baseEnv)) {
+        if (value !== undefined && allAllowedKeys.has(key.toUpperCase())) {
+            env[key] = value;
+        }
+    }
+    if (input.explicitEnv) {
+        for (const [key, value] of Object.entries(input.explicitEnv)) {
+            env[key] = value;
+        }
+    }
+    return env;
+}
+export function redactText(input, secretValues) {
+    if (!input)
+        return input;
+    let redacted = input;
+    const validSecrets = secretValues
+        .map((s) => s.trim())
+        .filter((s) => s.length >= 4);
+    // Sort by length descending to ensure longer secrets are redacted first
+    const sortedSecrets = [...new Set(validSecrets)].sort((a, b) => b.length - a.length);
+    for (const secret of sortedSecrets) {
+        const escaped = secret.replace(/[-\/\\^$*+?.()|[\]{}]/g, "\\$&");
+        const regex = new RegExp(escaped, "g");
+        redacted = redacted.replace(regex, "[REDACTED]");
+    }
+    return redacted;
+}
+/**
+ * Stateful redactor for streaming text.
+ * Ensures secrets split across chunks are correctly identified and redacted.
+ */
+export class StreamRedactor {
+    buffer = "";
+    secrets;
+    maxSecretLen;
+    constructor(secretValues) {
+        this.secrets = [...new Set(secretValues.map((s) => s.trim()).filter((s) => s.length >= 4))]
+            .sort((a, b) => b.length - a.length);
+        this.maxSecretLen = this.secrets.length > 0 ? Math.max(...this.secrets.map((s) => s.length)) : 0;
+    }
+    /**
+     * Processes a new chunk of text and returns the redacted part that is safe to output.
+     */
+    process(chunk) {
+        if (this.maxSecretLen === 0)
+            return chunk;
+        this.buffer += chunk;
+        let out = "";
+        // We keep at least maxSecretLen characters in the buffer to ensure we can 
+        // identify any secret that might be starting or ending in this context.
+        while (this.buffer.length > this.maxSecretLen) {
+            // Use the existing redactText to see what the buffer looks like when redacted
+            const redacted = redactText(this.buffer, this.secrets);
+            if (redacted.startsWith("[REDACTED]")) {
+                // A secret was found at the very beginning of our buffer.
+                // We need to figure out which one it was so we can consume it from the original buffer.
+                let matchedSecretLen = 0;
+                for (const secret of this.secrets) {
+                    if (this.buffer.startsWith(secret)) {
+                        matchedSecretLen = secret.length;
+                        break;
+                    }
+                }
+                if (matchedSecretLen > 0) {
+                    out += "[REDACTED]";
+                    this.buffer = this.buffer.slice(matchedSecretLen);
+                    continue;
+                }
+            }
+            // If no secret matched at the beginning, the first character is safe to output
+            // because we have at least maxSecretLen context following it.
+            out += this.buffer[0];
+            this.buffer = this.buffer.slice(1);
+        }
+        return out;
+    }
+    /**
+     * Flushes any remaining text in the buffer, redacting it one last time.
+     */
+    flush() {
+        if (!this.buffer)
+            return "";
+        const redacted = redactText(this.buffer, this.secrets);
+        this.buffer = "";
+        return redacted;
+    }
+}
+export function collectSecretValues(baseEnv, patterns = DEFAULT_REDACT_PATTERNS) {
+    const values = [];
+    for (const [key, value] of Object.entries(baseEnv)) {
+        if (value && shouldRedactEnvName(key, patterns)) {
+            values.push(value);
+        }
+    }
+    return values;
+}
+/**
+ * Redacts string values inside a JSON-like structure.
+ * Accepts JSON-like values only; must not contain circular references.
+ */
+export function redactJsonValue(value, secretValues) {
+    if (typeof value === "string") {
+        return redactText(value, secretValues);
+    }
+    if (Array.isArray(value)) {
+        return value.map((v) => redactJsonValue(v, secretValues));
+    }
+    if (value !== null && typeof value === "object") {
+        const redacted = {};
+        for (const [key, val] of Object.entries(value)) {
+            redacted[key] = redactJsonValue(val, secretValues);
+        }
+        return redacted;
+    }
+    return value;
+}
+export function redactProviderCommand(command, secretValues) {
+    const redacted = {
+        ...command,
+        command: redactText(command.command, secretValues),
+        args: command.args.map((arg) => redactText(arg, secretValues)),
+        stdin: command.stdin ? redactText(command.stdin, secretValues) : command.stdin,
+    };
+    if (command.env) {
+        const env = {};
+        for (const [key, value] of Object.entries(command.env)) {
+            env[key] = redactText(value, secretValues);
+        }
+        redacted.env = env;
+    }
+    else {
+        redacted.env = undefined;
+    }
+    return redacted;
+}
+export function redactSerializedError(error, secretValues) {
+    return {
+        ...error,
+        message: error.message ? redactText(error.message, secretValues) : error.message,
+        stack: error.stack ? redactText(error.stack, secretValues) : error.stack
+    };
+}
+//# sourceMappingURL=env.js.map

package/dist/security/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/security/env.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO;IACP,SAAS;IACT,UAAU;IACV,UAAU;IACV,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,WAAqB,uBAAuB;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC5C,CAAC;aAAM,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC9C,CAAC;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,SAAS,KAAK,YAAY;gBAAE,OAAO,IAAI,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACzC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;KAC7C,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,YAAsB;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,YAAY,GAAG,YAAY;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAEhC,wEAAwE;IACxE,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAErF,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,GAAW,EAAE,CAAC;IACX,OAAO,CAAW;IAClB,YAAY,CAAS;IAEtC,YAAY,YAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;aACxF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAAa;QACnB,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE1C,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACrB,IAAI,GAAG,GAAG,EAAE,CAAC;QAEb,2EAA2E;QAC3E,wEAAwE;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9C,8EAA8E;YAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAEvD,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACtC,0DAA0D;gBAC1D,wFAAwF;gBACxF,IAAI,gBAAgB,GAAG,CAAC,CAAC;gBACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;wBACnC,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;wBACjC,MAAM;oBACR,CAAC;gBACH,CAAC;gBAED,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;oBACzB,GAAG,IAAI,YAAY,CAAC;oBACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBAClD,SAAS;gBACX,CAAC;YACH,CAAC;YAED,+EAA+E;YAC/E,8DAA8D;YAC9D,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CACjC,OAA0B,EAC1B,WAAqB,uBAAuB;IAE5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,IAAI,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,YAAsB;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAwB,EAAE,YAAsB;IACpF,MAAM,QAAQ,GAAoB;QAChC,GAAG,OAAO;QACV,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC;QAClD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC9D,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;KAC/E,CAAC;IAEF,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;QACD,QAAQ,CAAC,GAAG,GAAG,GAAG,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,GAAG,GAAG,SAAS,CAAC;IAC3B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAQ,EACR,YAAsB;IAEtB,OAAO;QACL,GAAG,KAAK;QACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;QAChF,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;KACzE,CAAC;AACJ,CAAC"}

package/dist/security/metadata.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Sanitizes metadata for external exposure in events, reports, and artifacts.
+ * This prevents sensitive data or excessive volume from leaking while preserving
+ * essential shared-agent and pipeline context.
+ */
+export declare function sanitizeMetadata(metadata?: Record<string, any>): Record<string, any>;

package/dist/security/metadata.js

@@ -0,0 +1,41 @@
+/**
+ * Sanitizes metadata for external exposure in events, reports, and artifacts.
+ * This prevents sensitive data or excessive volume from leaking while preserving
+ * essential shared-agent and pipeline context.
+ */
+export function sanitizeMetadata(metadata) {
+    if (!metadata || typeof metadata !== "object") {
+        return {};
+    }
+    const safeFields = new Set([
+        "sharedAgentId",
+        "sharedAgentSource",
+        "pipelineId",
+        "pipelineLabel",
+        "itemIndex",
+        "stageIndex",
+        "stageName",
+        "modelResolutionSource",
+    ]);
+    const MAX_STRING_LENGTH = 256;
+    const sanitized = {};
+    for (const [key, value] of Object.entries(metadata)) {
+        if (!safeFields.has(key)) {
+            continue;
+        }
+        if (typeof value === "string") {
+            sanitized[key] = value.length > MAX_STRING_LENGTH
+                ? value.substring(0, MAX_STRING_LENGTH) + "..."
+                : value;
+        }
+        else if (typeof value === "boolean") {
+            sanitized[key] = value;
+        }
+        else if (typeof value === "number" && Number.isFinite(value)) {
+            sanitized[key] = value;
+        }
+        // Objects and arrays are dropped as per requirements
+    }
+    return sanitized;
+}
+//# sourceMappingURL=metadata.js.map

package/dist/security/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../src/security/metadata.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA8B;IAC7D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,eAAe;QACf,mBAAmB;QACnB,YAAY;QACZ,eAAe;QACf,WAAW;QACX,YAAY;QACZ,WAAW;QACX,uBAAuB;KACxB,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,GAAG,CAAC;IAC9B,MAAM,SAAS,GAAwB,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,iBAAiB;gBAC/C,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG,KAAK;gBAC/C,CAAC,CAAC,KAAK,CAAC;QACZ,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,qDAAqD;IACvD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/shared-agents/context.d.ts

@@ -0,0 +1,2 @@
+import type { SharedAgentDefinition } from "./types.js";
+export declare function normalizeSharedAgentContext(definition: SharedAgentDefinition, context: unknown): Record<string, unknown>;

package/dist/shared-agents/context.js

@@ -0,0 +1,5 @@
+import { validateSharedAgentInput } from "./validate.js";
+export function normalizeSharedAgentContext(definition, context) {
+    return validateSharedAgentInput(definition, context);
+}
+//# sourceMappingURL=context.js.map

package/dist/shared-agents/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/shared-agents/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAGzD,MAAM,UAAU,2BAA2B,CACzC,UAAiC,EACjC,OAAgB;IAEhB,OAAO,wBAAwB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC"}

package/dist/shared-agents/define-agent.d.ts

@@ -0,0 +1,3 @@
+import type { SharedAgentDefinition } from "./types.js";
+export declare function defineAgent<T extends SharedAgentDefinition>(definition: T): T;
+export declare function isDefinedSharedAgent(value: unknown): value is SharedAgentDefinition;

package/dist/shared-agents/define-agent.js

@@ -0,0 +1,15 @@
+const SHARED_AGENT_MARKER = Symbol.for("open-dynamic-workflow.sharedAgentDefinition");
+export function defineAgent(definition) {
+    Object.defineProperty(definition, SHARED_AGENT_MARKER, {
+        value: true,
+        enumerable: false,
+        configurable: false
+    });
+    return definition;
+}
+export function isDefinedSharedAgent(value) {
+    return !!value &&
+        typeof value === "object" &&
+        value[SHARED_AGENT_MARKER] === true;
+}
+//# sourceMappingURL=define-agent.js.map

package/dist/shared-agents/define-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-agent.js","sourceRoot":"","sources":["../../src/shared-agents/define-agent.ts"],"names":[],"mappings":"AAEA,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;AAEtF,MAAM,UAAU,WAAW,CAAkC,UAAa;IACxE,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,mBAAmB,EAAE;QACrD,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK;QACjB,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,CAAC,CAAC,KAAK;QACZ,OAAO,KAAK,KAAK,QAAQ;QACxB,KAAiC,CAAC,mBAAmB,CAAC,KAAK,IAAI,CAAC;AACrE,CAAC"}

package/dist/shared-agents/execute.d.ts

@@ -0,0 +1,24 @@
+import type { DirectAgentCallInput, AgentResult } from "../types/agent.js";
+import type { ResolvedConfig } from "../types/config.js";
+import type { SharedAgentRegistry } from "./registry.js";
+import type { SharedAgentPipelineMetadata } from "./types.js";
+export interface ExecuteSharedAgentInput {
+    sharedAgentId: string;
+    context?: unknown;
+    origin: "workflow" | "pipeline-stage";
+    pipeline?: SharedAgentPipelineMetadata | undefined;
+}
+export interface ExecuteSharedAgentDeps {
+    registry: SharedAgentRegistry;
+    config: ResolvedConfig;
+    runId: string;
+    cwd: string;
+    signal: AbortSignal;
+    agent(input: DirectAgentCallInput): Promise<AgentResult>;
+    log(message: string, data?: unknown): void;
+    artifactsDir: string;
+}
+/**
+ * Executes a shared agent by resolving it, validating context, and executing its run() method.
+ */
+export declare function executeSharedAgent(input: ExecuteSharedAgentInput, deps: ExecuteSharedAgentDeps): Promise<AgentResult>;