@travisliu/open-dynamic-workflow 0.3.0

package/dist/shared-agents/execute.js

@@ -0,0 +1,63 @@
+import { ErrorCode } from "../errors/codes.js";
+import { OpenDynamicWorkflowError } from "../errors/types.js";
+import { sanitizeMetadata } from "../security/metadata.js";
+import { normalizeSharedAgentContext } from "./context.js";
+import { withToolForbidden } from "../workflow/scope.js";
+import { renderAgentPrompt } from "./render.js";
+import { resolveSharedAgent } from "./resolver.js";
+/**
+ * Executes a shared agent by resolving it, validating context, and executing its run() method.
+ */
+export async function executeSharedAgent(input, deps) {
+    const entry = resolveSharedAgent(deps.registry, input.sharedAgentId);
+    const { definition } = entry;
+    const context = normalizeSharedAgentContext(definition, input.context);
+    const runtimeObj = {
+        agent: (innerInput) => {
+            const enrichedInput = {
+                ...innerInput,
+                label: innerInput.label || entry.id,
+                metadata: {
+                    ...sanitizeMetadata(definition.metadata || {}),
+                    ...innerInput.metadata,
+                    sharedAgentId: entry.id,
+                    sharedAgentSource: "registry",
+                    ...(input.pipeline ?? {}),
+                }
+            };
+            return deps.agent(enrichedInput);
+        },
+        log: deps.log,
+        signal: deps.signal,
+        runId: deps.runId,
+        cwd: deps.cwd,
+        artifactsDir: deps.artifactsDir,
+        renderAgentPrompt: (customContext) => {
+            if (!("agentPrompt" in definition) || typeof definition.agentPrompt !== "string") {
+                throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_PROMPT_RENDER_FAILED, "Cannot render agent prompt because 'agentPrompt' is not defined in this shared agent.");
+            }
+            if (!customContext || typeof customContext !== "object") {
+                throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_PROMPT_RENDER_FAILED, "Context passed to renderAgentPrompt must be an object.");
+            }
+            const declaredFields = new Set(Object.keys(definition.inputSchema?.properties || {}));
+            return renderAgentPrompt({
+                agentPrompt: definition.agentPrompt,
+                context: customContext,
+                declaredFields,
+                strictVariables: deps.config.sharedAgents?.strictPromptTemplateVariables ?? true,
+            });
+        }
+    };
+    if (input.pipeline !== undefined) {
+        runtimeObj.pipeline = input.pipeline;
+    }
+    try {
+        return await withToolForbidden("shared-agent-definition", async () => {
+            return await definition.run(context, runtimeObj);
+        });
+    }
+    catch (err) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_RUNTIME_FAILED, `Shared agent '${entry.id}' runtime execution failed: ${err.message}`, { cause: err });
+    }
+}
+//# sourceMappingURL=execute.js.map

package/dist/shared-agents/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../src/shared-agents/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAG9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAwBnD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B,EAC9B,IAA4B;IAE5B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAE7B,MAAM,OAAO,GAAG,2BAA2B,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvE,MAAM,UAAU,GAAuB;QACrC,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE;YACpB,MAAM,aAAa,GAAyB;gBAC1C,GAAG,UAAU;gBACb,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE;gBACnC,QAAQ,EAAE;oBACR,GAAG,gBAAgB,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAC9C,GAAG,UAAU,CAAC,QAAQ;oBACtB,aAAa,EAAE,KAAK,CAAC,EAAE;oBACvB,iBAAiB,EAAE,UAAU;oBAC7B,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;iBAC1B;aACF,CAAC;YACF,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACnC,CAAC;QACD,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,iBAAiB,EAAE,CAAC,aAAsB,EAAE,EAAE;YAC5C,IAAI,CAAC,CAAC,aAAa,IAAI,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACjF,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,iCAAiC,EAC3C,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACxD,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,iCAAiC,EAC3C,wDAAwD,CACzD,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,IAAI,EAAE,CAAC,CACtD,CAAC;YACF,OAAO,iBAAiB,CAAC;gBACvB,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,OAAO,EAAE,aAAwC;gBACjD,cAAc;gBACd,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,6BAA6B,IAAI,IAAI;aACjF,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACnE,OAAO,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,2BAA2B,EACrC,iBAAiB,KAAK,CAAC,EAAE,+BAA+B,GAAG,CAAC,OAAO,EAAE,EACrE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/shared-agents/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./types.js";
+export { defineAgent, isDefinedSharedAgent } from "./define-agent.js";
+export { SharedAgentRegistry } from "./registry.js";
+export { loadSharedAgentRegistry, type LoadSharedAgentRegistryInput, } from "./load.js";
+export { validateSharedAgentDefinition, validateSharedAgentSource, type SharedAgentValidationOptions, } from "./validate.js";

package/dist/shared-agents/index.js

@@ -0,0 +1,6 @@
+export * from "./types.js";
+export { defineAgent, isDefinedSharedAgent } from "./define-agent.js";
+export { SharedAgentRegistry } from "./registry.js";
+export { loadSharedAgentRegistry, } from "./load.js";
+export { validateSharedAgentDefinition, validateSharedAgentSource, } from "./validate.js";
+//# sourceMappingURL=index.js.map

package/dist/shared-agents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/shared-agents/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,uBAAuB,GAExB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAE1B,MAAM,eAAe,CAAC"}

package/dist/shared-agents/load.d.ts

@@ -0,0 +1,8 @@
+import { SharedAgentRegistry } from "./registry.js";
+export interface LoadSharedAgentRegistryInput {
+    cwd: string;
+    dir?: string;
+    maxDefinitions?: number;
+    strictPromptTemplateVariables?: boolean;
+}
+export declare function loadSharedAgentRegistry(input: LoadSharedAgentRegistryInput): Promise<SharedAgentRegistry>;

package/dist/shared-agents/load.js

@@ -0,0 +1,141 @@
+import { readFile, readdir, stat, realpath } from "node:fs/promises";
+import { resolve, relative, join, extname } from "node:path";
+import * as vm from "node:vm";
+import * as ts from "typescript";
+import { ErrorCode } from "../errors/codes.js";
+import { OpenDynamicWorkflowError } from "../errors/types.js";
+import { SharedAgentRegistry } from "./registry.js";
+import { validateSharedAgentDefinition, validateSharedAgentSource } from "./validate.js";
+import { isDefinedSharedAgent } from "./define-agent.js";
+const SUPPORTED_EXTENSIONS = [".ts", ".js", ".mjs", ".cjs"];
+export async function loadSharedAgentRegistry(input) {
+    const registry = new SharedAgentRegistry();
+    const realCwd = await realpath(resolve(input.cwd));
+    const maxDefinitions = input.maxDefinitions ?? 100;
+    const discoveredFiles = [];
+    if (input.dir) {
+        const absolutePath = resolve(realCwd, input.dir);
+        try {
+            const entries = await readdir(absolutePath, { withFileTypes: true });
+            const sortedNames = entries.map(e => e.name).sort();
+            for (const name of sortedNames) {
+                const fullPath = join(absolutePath, name);
+                const entry = entries.find(e => e.name === name);
+                let isFile = entry.isFile();
+                if (entry.isSymbolicLink()) {
+                    const realTarget = await realpath(fullPath);
+                    const relativeToCwd = relative(realCwd, realTarget);
+                    const relativeToDir = relative(absolutePath, realTarget);
+                    if (relativeToCwd.startsWith("..") && relativeToDir.startsWith("..")) {
+                        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_SECURITY_POLICY_VIOLATION, `Shared agent symlink '${fullPath}' points outside the workspace.`);
+                    }
+                    const targetStat = await stat(realTarget);
+                    isFile = targetStat.isFile();
+                }
+                if (isFile && SUPPORTED_EXTENSIONS.includes(extname(name))) {
+                    discoveredFiles.push(fullPath);
+                }
+            }
+        }
+        catch (err) {
+            if (err instanceof OpenDynamicWorkflowError)
+                throw err;
+            // Ignore missing files/dirs if they were part of the default paths
+        }
+    }
+    if (discoveredFiles.length > maxDefinitions) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Discovered ${discoveredFiles.length} shared agent definitions, which exceeds the limit of ${maxDefinitions}.`);
+    }
+    for (const filePath of discoveredFiles) {
+        const ext = extname(filePath);
+        const sourceText = await readFile(filePath, "utf8");
+        let definition;
+        if (SUPPORTED_EXTENSIONS.includes(ext)) {
+            validateSharedAgentSource(sourceText, filePath);
+            let codeToRun = sourceText;
+            if (ext === ".ts" || ext === ".js" || ext === ".mjs") {
+                codeToRun = transpileTs(sourceText, filePath);
+            }
+            definition = evaluateJsDefinition(codeToRun, filePath);
+        }
+        else {
+            continue;
+        }
+        const validatedDefinition = validateSharedAgentDefinition(definition, filePath, {
+            strictPromptTemplateVariables: input.strictPromptTemplateVariables ?? true,
+        });
+        registry.register({
+            id: validatedDefinition.id,
+            sourcePath: filePath,
+            definition: validatedDefinition,
+            validatedAt: new Date().toISOString(),
+        });
+    }
+    return registry;
+}
+function evaluateJsDefinition(sourceText, filePath) {
+    let captured = undefined;
+    const moduleExports = {};
+    const sandbox = {
+        defineAgent: (def) => {
+            captured = def;
+            // Apply the marker so isDefinedSharedAgent(result) will pass
+            const SHARED_AGENT_MARKER = Symbol.for("open-dynamic-workflow.sharedAgentDefinition");
+            Object.defineProperty(def, SHARED_AGENT_MARKER, {
+                value: true,
+                enumerable: false,
+                configurable: false
+            });
+            return def;
+        },
+        console: {
+            log: () => { },
+            error: () => { },
+            warn: () => { },
+        },
+        exports: moduleExports,
+        module: { exports: moduleExports },
+        require: (mod) => {
+            if (mod.includes("define-agent") || mod.includes("open-dynamic-workflow")) {
+                return {
+                    defineAgent: sandbox.defineAgent,
+                    default: sandbox.defineAgent
+                };
+            }
+            throw new Error(`Cannot require module ${mod}`);
+        }
+    };
+    let codeToRun = sourceText;
+    if (codeToRun.includes("export default")) {
+        codeToRun = codeToRun.replace("export default", "sandboxDefault = ");
+    }
+    const context = vm.createContext(sandbox);
+    try {
+        const script = new vm.Script(codeToRun, { filename: filePath });
+        script.runInContext(context, { timeout: 250 });
+    }
+    catch (err) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_RUNTIME_FAILED, `Failed to evaluate shared agent ${filePath}: ${err.message}`);
+    }
+    const result = sandbox.sandboxDefault || sandbox.module.exports.default;
+    if (!isDefinedSharedAgent(result)) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent file ${filePath} does not export a valid definition using defineAgent() as the default export.`);
+    }
+    return result;
+}
+function transpileTs(sourceText, filePath) {
+    try {
+        const transpile = ts.default?.transpileModule ?? ts.transpileModule;
+        const result = transpile(sourceText, {
+            compilerOptions: {
+                target: ts.ScriptTarget?.ES2022 ?? 9, // ES2022 is 9 in TypeScript ScriptTarget enum
+                module: ts.ModuleKind?.CommonJS ?? 1, // CommonJS is 1
+            }
+        });
+        return result.outputText;
+    }
+    catch (err) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_RUNTIME_FAILED, `TypeScript transpilation failed for ${filePath}: ${err.message}`);
+    }
+}
+//# sourceMappingURL=load.js.map

package/dist/shared-agents/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/shared-agents/load.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAS,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAc,MAAM,WAAW,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAUzD,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmC;IAEnC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,GAAG,CAAC;IAEnD,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAEpD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAE,CAAC;gBAElD,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3B,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAC5C,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBACpD,MAAM,aAAa,GAAG,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;oBACzD,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrE,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,sCAAsC,EAChD,yBAAyB,QAAQ,iCAAiC,CACnE,CAAC;oBACJ,CAAC;oBACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC1C,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;gBAC/B,CAAC;gBAED,IAAI,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC3D,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,wBAAwB;gBAAE,MAAM,GAAG,CAAC;YACvD,mEAAmE;QACrE,CAAC;IACH,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAC5C,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,+BAA+B,EACzC,cAAc,eAAe,CAAC,MAAM,yDAAyD,cAAc,GAAG,CAC/G,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,UAAe,CAAC;QAEpB,IAAI,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAEhD,IAAI,SAAS,GAAG,UAAU,CAAC;YAC3B,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACrD,SAAS,GAAG,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAChD,CAAC;YAED,UAAU,GAAG,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACJ,SAAS;QACb,CAAC;QAED,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,UAAU,EAAE,QAAQ,EAAE;YAC9E,6BAA6B,EAAE,KAAK,CAAC,6BAA6B,IAAI,IAAI;SAC3E,CAAC,CAAC;QAEH,QAAQ,CAAC,QAAQ,CAAC;YAChB,EAAE,EAAE,mBAAmB,CAAC,EAAE;YAC1B,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,mBAAmB;YAC/B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,QAAgB;IAC9D,IAAI,QAAQ,GAAQ,SAAS,CAAC;IAC9B,MAAM,aAAa,GAAG,EAAE,CAAC;IAEzB,MAAM,OAAO,GAAG;QACZ,WAAW,EAAE,CAAC,GAAQ,EAAE,EAAE;YACtB,QAAQ,GAAG,GAAG,CAAC;YACf,6DAA6D;YAC7D,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YACtF,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,mBAAmB,EAAE;gBAC5C,KAAK,EAAE,IAAI;gBACX,UAAU,EAAE,KAAK;gBACjB,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC;QACf,CAAC;QACD,OAAO,EAAE;YACL,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;YACb,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;YACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;SACjB;QACD,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE;QAClC,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE;YACrB,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBACxE,OAAO;oBACH,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,OAAO,CAAC,WAAW;iBAC/B,CAAC;YACN,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;KACJ,CAAC;IAEF,IAAI,SAAS,GAAG,UAAU,CAAC;IAC3B,IAAI,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,MAAM,IAAI,wBAAwB,CAC9B,SAAS,CAAC,2BAA2B,EACrC,mCAAmC,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,CAChE,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAI,OAAe,CAAC,cAAc,IAAK,OAAO,CAAC,MAAM,CAAC,OAAe,CAAC,OAAO,CAAC;IAE1F,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,wBAAwB,CAC9B,SAAS,CAAC,+BAA+B,EACzC,qBAAqB,QAAQ,gFAAgF,CAChH,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB;IACvD,IAAI,CAAC;QACH,MAAM,SAAS,GAAI,EAAU,CAAC,OAAO,EAAE,eAAe,IAAI,EAAE,CAAC,eAAe,CAAC;QAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE;YACnC,eAAe,EAAE;gBACf,MAAM,EAAG,EAAU,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,EAAE,8CAA8C;gBAC7F,MAAM,EAAG,EAAU,CAAC,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAE,gBAAgB;aAChE;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,2BAA2B,EACrC,uCAAuC,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,CAClE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/shared-agents/registry.d.ts

@@ -0,0 +1,8 @@
+import type { SharedAgentRegistryEntry } from "./types.js";
+export declare class SharedAgentRegistry {
+    private readonly entries;
+    register(entry: SharedAgentRegistryEntry): void;
+    get(id: string): SharedAgentRegistryEntry | undefined;
+    has(id: string): boolean;
+    list(): SharedAgentRegistryEntry[];
+}

package/dist/shared-agents/registry.js

@@ -0,0 +1,25 @@
+import { ErrorCode } from "../errors/codes.js";
+import { OpenDynamicWorkflowError } from "../errors/types.js";
+export class SharedAgentRegistry {
+    entries = new Map();
+    register(entry) {
+        if (typeof entry.id !== "string" || entry.id.trim() === "") {
+            throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent in ${entry.sourcePath} must declare a non-empty id.`);
+        }
+        const existing = this.entries.get(entry.id);
+        if (existing) {
+            throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_DUPLICATE_ID, `Duplicate shared agent id '${entry.id}' in ${existing.sourcePath} and ${entry.sourcePath}.`);
+        }
+        this.entries.set(entry.id, entry);
+    }
+    get(id) {
+        return this.entries.get(id);
+    }
+    has(id) {
+        return this.entries.has(id);
+    }
+    list() {
+        return Array.from(this.entries.values());
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/shared-agents/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/shared-agents/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAG9D,MAAM,OAAO,mBAAmB;IACb,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEvE,QAAQ,CAAC,KAA+B;QACtC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,+BAA+B,EACzC,mBAAmB,KAAK,CAAC,UAAU,+BAA+B,CACnE,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,yBAAyB,EACnC,8BAA8B,KAAK,CAAC,EAAE,QAAQ,QAAQ,CAAC,UAAU,QAAQ,KAAK,CAAC,UAAU,GAAG,CAC7F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/shared-agents/render.d.ts

@@ -0,0 +1,11 @@
+export interface RenderAgentPromptInput {
+    agentPrompt: string;
+    context: Record<string, unknown>;
+    declaredFields: Set<string>;
+    strictVariables: boolean;
+}
+/**
+ * Renders a declarative agentPrompt template by interpolating variables from context.
+ * Supports only simple {{name}} interpolation.
+ */
+export declare function renderAgentPrompt(input: RenderAgentPromptInput): string;

package/dist/shared-agents/render.js

@@ -0,0 +1,31 @@
+import { ErrorCode } from "../errors/codes.js";
+import { OpenDynamicWorkflowError } from "../errors/types.js";
+/**
+ * Renders a declarative agentPrompt template by interpolating variables from context.
+ * Supports only simple {{name}} interpolation.
+ */
+export function renderAgentPrompt(input) {
+    const rendered = input.agentPrompt.replace(/\{\{\s*([A-Za-z_][A-Za-z0-9_]*)\s*\}\}/g, (_match, key) => {
+        if (!input.declaredFields.has(key)) {
+            throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_UNDECLARED_PROMPT_VARIABLE, `agentPrompt references undeclared context field '${key}'.`);
+        }
+        const value = input.context[key];
+        if (value === undefined) {
+            if (input.strictVariables) {
+                throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_PROMPT_RENDER_FAILED, `agentPrompt variable '${key}' was not provided.`);
+            }
+            return "";
+        }
+        return typeof value === "string" ? value : JSON.stringify(value);
+    });
+    // Reject unclosed tokens or expression-like templates by checking the template structure (excluding valid tokens)
+    const templateWithoutValidTokens = input.agentPrompt.replace(/\{\{\s*[A-Za-z_][A-Za-z0-9_]*\s*\}\}/g, "");
+    if (templateWithoutValidTokens.includes("{{") || templateWithoutValidTokens.includes("}}")) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_PROMPT_RENDER_FAILED, "agentPrompt contains unclosed tokens or unsupported expression-like templates.");
+    }
+    if (rendered.trim() === "") {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_PROMPT_RENDER_FAILED, "Rendered prompt must be non-empty.");
+    }
+    return rendered;
+}
+//# sourceMappingURL=render.js.map

package/dist/shared-agents/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../src/shared-agents/render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAS9D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA6B;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CACxC,yCAAyC,EACzC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACd,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,uCAAuC,EACjD,oDAAoD,GAAG,IAAI,CAC5D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1B,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,iCAAiC,EAC3C,yBAAyB,GAAG,qBAAqB,CAClD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CACF,CAAC;IAEF,kHAAkH;IAClH,MAAM,0BAA0B,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAC1D,uCAAuC,EACvC,EAAE,CACH,CAAC;IACF,IAAI,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,iCAAiC,EAC3C,gFAAgF,CACjF,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,iCAAiC,EAC3C,oCAAoC,CACrC,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/shared-agents/resolver.d.ts

@@ -0,0 +1,7 @@
+import type { SharedAgentRegistry } from "./registry.js";
+import type { SharedAgentRegistryEntry } from "./types.js";
+/**
+ * Resolves a shared agent definition from the registry by ID.
+ * Rejects path-like IDs to ensure agents are referenced by stable name.
+ */
+export declare function resolveSharedAgent(registry: SharedAgentRegistry, id: unknown): SharedAgentRegistryEntry;

package/dist/shared-agents/resolver.js

@@ -0,0 +1,22 @@
+import { ErrorCode } from "../errors/codes.js";
+import { OpenDynamicWorkflowError } from "../errors/types.js";
+/**
+ * Resolves a shared agent definition from the registry by ID.
+ * Rejects path-like IDs to ensure agents are referenced by stable name.
+ */
+export function resolveSharedAgent(registry, id) {
+    if (typeof id !== "string" ||
+        id.trim() === "" ||
+        id.startsWith(".") ||
+        id.startsWith("/") ||
+        id.includes("/") ||
+        id.includes("\\")) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_NOT_FOUND, "Shared agent definition references must use a registry ID, not a path.");
+    }
+    const entry = registry.get(id);
+    if (!entry) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_NOT_FOUND, `Shared agent '${id}' was not found in the configured registry.`);
+    }
+    return entry;
+}
+//# sourceMappingURL=resolver.js.map

package/dist/shared-agents/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../src/shared-agents/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAI9D;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA6B,EAC7B,EAAW;IAEX,IACE,OAAO,EAAE,KAAK,QAAQ;QACtB,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;QAChB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAClB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAClB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EACjB,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,sBAAsB,EAChC,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,sBAAsB,EAChC,iBAAiB,EAAE,6CAA6C,CACjE,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/shared-agents/types.d.ts

@@ -0,0 +1,33 @@
+import type { DirectAgentCallInput, AgentResult } from "../types/agent.js";
+import type { JsonSchema } from "../types/common.js";
+export interface SharedAgentDefinition {
+    id: string;
+    description?: string;
+    inputSchema?: JsonSchema;
+    agentPrompt?: string;
+    metadata?: Record<string, unknown>;
+    run(context: Record<string, unknown>, runtime: SharedAgentRuntime): Promise<AgentResult>;
+}
+export interface SharedAgentRuntime {
+    agent(input: DirectAgentCallInput): Promise<AgentResult>;
+    log(message: string, data?: unknown): void;
+    signal: AbortSignal;
+    runId: string;
+    cwd: string;
+    artifactsDir: string;
+    renderAgentPrompt(context: unknown): string;
+    pipeline?: SharedAgentPipelineMetadata;
+}
+export interface SharedAgentPipelineMetadata {
+    pipelineId: string;
+    itemIndex: number;
+    stageIndex: number;
+    stageName: string;
+    pipelineLabel?: string | undefined;
+}
+export interface SharedAgentRegistryEntry {
+    id: string;
+    sourcePath: string;
+    definition: SharedAgentDefinition;
+    validatedAt: string;
+}

package/dist/shared-agents/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/shared-agents/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared-agents/types.ts"],"names":[],"mappings":""}

package/dist/shared-agents/validate.d.ts

@@ -0,0 +1,7 @@
+import type { SharedAgentDefinition } from "./types.js";
+export interface SharedAgentValidationOptions {
+    strictPromptTemplateVariables?: boolean;
+}
+export declare function validateSharedAgentDefinition(definition: unknown, sourcePath: string, options?: SharedAgentValidationOptions): SharedAgentDefinition;
+export declare function validateSharedAgentSource(sourceText: string, sourcePath: string): void;
+export declare function validateSharedAgentInput(definition: SharedAgentDefinition, input: unknown): Record<string, unknown>;

package/dist/shared-agents/validate.js

@@ -0,0 +1,223 @@
+import AjvModule from "ajv";
+import * as ts from "typescript";
+import { ErrorCode } from "../errors/codes.js";
+import { OpenDynamicWorkflowError } from "../errors/types.js";
+const Ajv = AjvModule.default || AjvModule;
+const ajv = new Ajv({ allErrors: true });
+const ID_REGEX = /^[a-z0-9][a-z0-9-_.]*$/;
+export function validateSharedAgentDefinition(definition, sourcePath, options = {}) {
+    if (!definition || typeof definition !== "object") {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent definition in ${sourcePath} must be an object.`);
+    }
+    const def = definition;
+    // Validate ID
+    if (typeof def.id !== "string" || !ID_REGEX.test(def.id)) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent in ${sourcePath} has invalid id '${def.id}'. IDs must match ${ID_REGEX}.`);
+    }
+    // Validate description
+    if (def.description !== undefined && typeof def.description !== "string") {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent in ${sourcePath} has invalid description. If provided, it must be a string.`);
+    }
+    // Validate run
+    if (typeof def.run !== "function") {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent in ${sourcePath} must have a 'run' function.`);
+    }
+    // Validate JSON schemas
+    if (def.inputSchema !== undefined) {
+        validateSchema(def.inputSchema, "inputSchema", sourcePath);
+    }
+    if (def.schema !== undefined) {
+        validateSchema(def.schema, "schema", sourcePath);
+    }
+    if (def.agentPrompt !== undefined) {
+        if (typeof def.agentPrompt !== "string") {
+            throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent in ${sourcePath} has invalid agentPrompt. If provided, it must be a string.`);
+        }
+        const sharedDef = def;
+        if (options.strictPromptTemplateVariables) {
+            validatePromptVariables(sharedDef, sourcePath);
+        }
+    }
+    return def;
+}
+function validateSchema(schema, fieldName, sourcePath) {
+    if (!schema || typeof schema !== "object") {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent in ${sourcePath} has invalid ${fieldName}. It must be an object.`);
+    }
+    try {
+        ajv.compile(schema);
+    }
+    catch (err) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_INVALID_DEFINITION, `Shared agent in ${sourcePath} has invalid ${fieldName}: ${err.message}`);
+    }
+}
+function validatePromptVariables(def, sourcePath) {
+    if (!def.agentPrompt)
+        return;
+    const matches = def.agentPrompt.matchAll(/\{\{([^}]+)\}\}/g);
+    const variables = new Set();
+    for (const match of matches) {
+        if (match[1]) {
+            variables.add(match[1].trim());
+        }
+    }
+    if (variables.size === 0)
+        return;
+    const inputProperties = def.inputSchema?.properties || {};
+    const declaredVariables = new Set(Object.keys(inputProperties));
+    for (const variable of variables) {
+        if (!declaredVariables.has(variable)) {
+            throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_UNDECLARED_PROMPT_VARIABLE, `Shared agent '${def.id}' in ${sourcePath} uses undeclared prompt variable '{{${variable}}}'.`);
+        }
+    }
+}
+export function validateSharedAgentSource(sourceText, sourcePath) {
+    const sourceFile = ts.createSourceFile(sourcePath, sourceText, ts.ScriptTarget.Latest, true);
+    const forbiddenIdentifiers = new Set([
+        "globalThis",
+        "global",
+        "window",
+        "self",
+        "fetch",
+        "eval",
+        "Function",
+        "Object",
+        "Reflect",
+        "Proxy",
+        "AsyncFunction",
+        "process",
+        "fs",
+        "path",
+        "os",
+        "child_process",
+        "net",
+        "http",
+        "https",
+        "shell",
+        "phase",
+        "parallel",
+        "pipeline",
+        "args",
+    ]);
+    const forbiddenProperties = new Set([
+        "constructor",
+        "__proto__",
+        "prototype",
+        "Function",
+        "fs",
+        "path",
+        "os",
+        "child_process",
+        "net",
+        "http",
+        "https",
+        "shell",
+        "process",
+        "fetch",
+        "Object",
+        "Reflect",
+        "Proxy",
+        "AsyncFunction",
+        "phase",
+        "parallel",
+        "pipeline",
+        "args",
+    ]);
+    function report(node, message) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_SECURITY_POLICY_VIOLATION, message);
+    }
+    function staticStringValue(node) {
+        if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node)) {
+            return node.text;
+        }
+        if (ts.isBinaryExpression(node) && node.operatorToken.kind === ts.SyntaxKind.PlusToken) {
+            const left = staticStringValue(node.left);
+            const right = staticStringValue(node.right);
+            if (left !== null && right !== null) {
+                return left + right;
+            }
+        }
+        return null;
+    }
+    function visit(node) {
+        if (ts.isImportDeclaration(node) || ts.isImportEqualsDeclaration(node)) {
+            let isAllowed = false;
+            if (ts.isImportDeclaration(node)) {
+                if (node.importClause?.isTypeOnly) {
+                    isAllowed = true;
+                }
+                else {
+                    const moduleSpecifier = node.moduleSpecifier;
+                    if (ts.isStringLiteral(moduleSpecifier)) {
+                        const val = moduleSpecifier.text;
+                        if (val === "@travisliu/open-dynamic-workflow" || val.includes("define-agent")) {
+                            isAllowed = true;
+                        }
+                    }
+                }
+            }
+            if (!isAllowed) {
+                report(node, `Arbitrary imports are not allowed in shared agent: ${sourcePath}`);
+            }
+        }
+        if (ts.isCallExpression(node)) {
+            const callee = node.expression;
+            if (ts.isIdentifier(callee)) {
+                const calleeText = callee.text;
+                if (calleeText === "require") {
+                    report(node, `require() is not supported in shared agent: ${sourcePath}`);
+                }
+            }
+            if (node.expression.kind === ts.SyntaxKind.ImportKeyword) {
+                report(node, `Dynamic import() is not supported in shared agent: ${sourcePath}`);
+            }
+        }
+        if (node.kind === ts.SyntaxKind.ThisKeyword) {
+            report(node, `'this' keyword is not allowed in shared agent to prevent sandbox escapes: ${sourcePath}`);
+        }
+        if (ts.isIdentifier(node)) {
+            if (forbiddenIdentifiers.has(node.text)) {
+                report(node, `Access to restricted identifier '${node.text}' is not allowed in shared agent: ${sourcePath}`);
+            }
+        }
+        if (ts.isPropertyAccessExpression(node)) {
+            const propName = node.name.text;
+            if (forbiddenProperties.has(propName)) {
+                report(node, `Access to restricted property '${propName}' is not allowed in shared agent: ${sourcePath}`);
+            }
+        }
+        if (ts.isElementAccessExpression(node)) {
+            const arg = node.argumentExpression;
+            const resolvedValue = staticStringValue(arg);
+            if (resolvedValue === null) {
+                report(node, `Dynamic element access is not allowed in shared agent to prevent security bypasses: ${sourcePath}`);
+            }
+            else if (forbiddenProperties.has(resolvedValue)) {
+                report(node, `Access to restricted property '${resolvedValue}' via element access is not allowed in shared agent: ${sourcePath}`);
+            }
+        }
+        ts.forEachChild(node, visit);
+    }
+    ts.forEachChild(sourceFile, visit);
+}
+export function validateSharedAgentInput(definition, input) {
+    if (input === undefined)
+        return {};
+    if (!input || typeof input !== "object" || Array.isArray(input)) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_CONTEXT_VALIDATION_FAILED, "Shared agent context must be an object.");
+    }
+    const ctx = input;
+    if (ctx.subPrompt !== undefined) {
+        throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_CONTEXT_VALIDATION_FAILED, "Context field 'subPrompt' is deprecated and restricted. Use 'prompt' instead.");
+    }
+    if (definition.inputSchema) {
+        const validate = ajv.compile(definition.inputSchema);
+        const valid = validate(ctx);
+        if (!valid) {
+            const error = ajv.errorsText(validate.errors);
+            throw new OpenDynamicWorkflowError(ErrorCode.SHARED_AGENT_CONTEXT_VALIDATION_FAILED, `Shared agent context validation failed: ${error}`);
+        }
+    }
+    return ctx;
+}
+//# sourceMappingURL=validate.js.map