@travisliu/open-dynamic-workflow 0.3.0

package/dist/tools/registry.d.ts

@@ -0,0 +1,9 @@
+import { BrandedToolDefinition, ToolRegistry } from "../types/tool.js";
+export interface BuildToolRegistryInput {
+    definitions: Array<{
+        definition: BrandedToolDefinition;
+        sourcePath: string;
+    }>;
+    maxDefinitions: number;
+}
+export declare function buildToolRegistry(input: BuildToolRegistryInput): ToolRegistry;

package/dist/tools/registry.js

@@ -0,0 +1,97 @@
+import AjvModule from "ajv";
+import { formatAjvErrors, isJsonCompatible, isSafeToolDefinitionId } from "./validate.js";
+import { OpenDynamicWorkflowError } from "../errors/types.js";
+const Ajv = AjvModule.default || AjvModule;
+const ajv = new Ajv({ allErrors: true });
+export function buildToolRegistry(input) {
+    const { definitions, maxDefinitions } = input;
+    if (definitions.length > maxDefinitions) {
+        throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Too many tool definitions. Maximum allowed is ${maxDefinitions}.`);
+    }
+    const registered = [];
+    const ids = new Map(); // id -> sourcePath
+    for (const { definition, sourcePath } of definitions) {
+        // 1. Basic validation
+        if (!isSafeToolDefinitionId(definition.id)) {
+            throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Invalid tool ID '${definition.id}' in ${sourcePath}. Tool IDs must be non-empty and not path-like.`);
+        }
+        if (ids.has(definition.id)) {
+            throw new OpenDynamicWorkflowError("TOOL_DUPLICATE_DEFINITION", `Duplicate tool ID '${definition.id}' detected. Found in:\n  - ${ids.get(definition.id)}\n  - ${sourcePath}`);
+        }
+        ids.set(definition.id, sourcePath);
+        if (!definition.description || typeof definition.description !== "string") {
+            throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Tool '${definition.id}' in ${sourcePath} is missing a description.`);
+        }
+        if (!definition.inputSchema) {
+            throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Tool '${definition.id}' in ${sourcePath} is missing 'inputSchema'.`);
+        }
+        if (typeof definition.run !== "function") {
+            throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Tool '${definition.id}' in ${sourcePath} is missing a 'run' function.`);
+        }
+        if (definition.defaultTimeoutMs !== undefined) {
+            if (!Number.isInteger(definition.defaultTimeoutMs) || definition.defaultTimeoutMs <= 0) {
+                throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Tool '${definition.id}' in ${sourcePath} has an invalid 'defaultTimeoutMs'. It must be a positive integer.`);
+            }
+        }
+        if (definition.metadata !== undefined) {
+            if (!isJsonCompatible(definition.metadata)) {
+                throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Tool '${definition.id}' in ${sourcePath} has metadata that is not JSON-compatible.`);
+            }
+        }
+        // 2. Schema compilation
+        let validateInput;
+        try {
+            const ajvValidate = ajv.compile(definition.inputSchema);
+            validateInput = (data) => {
+                const ok = ajvValidate(data);
+                if (ok)
+                    return { ok: true, value: data };
+                return { ok: false, errors: formatAjvErrors(ajvValidate.errors) };
+            };
+        }
+        catch (err) {
+            throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Tool '${definition.id}' in ${sourcePath} has an invalid 'inputSchema': ${err.message}`);
+        }
+        let validateOutput;
+        if (definition.outputSchema) {
+            try {
+                const ajvValidate = ajv.compile(definition.outputSchema);
+                validateOutput = (data) => {
+                    const ok = ajvValidate(data);
+                    if (ok)
+                        return { ok: true, value: data };
+                    return { ok: false, errors: formatAjvErrors(ajvValidate.errors) };
+                };
+            }
+            catch (err) {
+                throw new OpenDynamicWorkflowError("TOOL_INVALID_DEFINITION", `Tool '${definition.id}' in ${sourcePath} has an invalid 'outputSchema': ${err.message}`);
+            }
+        }
+        else {
+            validateOutput = (data) => ({ ok: true, value: data });
+        }
+        registered.push(Object.freeze({
+            definition,
+            sourcePath,
+            validateInput,
+            validateOutput
+        }));
+    }
+    const toolsMap = new Map();
+    for (const def of registered) {
+        toolsMap.set(def.definition.id, def);
+    }
+    return Object.freeze({
+        get: (id) => toolsMap.get(id),
+        require: (id) => {
+            const tool = toolsMap.get(id);
+            if (!tool) {
+                throw new OpenDynamicWorkflowError("TOOL_DEFINITION_NOT_FOUND", `Tool definition '${id}' not found in registry.`);
+            }
+            return tool;
+        },
+        has: (id) => toolsMap.has(id),
+        list: () => Array.from(toolsMap.values())
+    });
+}
+//# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,KAAK,CAAC;AAO5B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,GAAG,GAAI,SAAiB,CAAC,OAAO,IAAI,SAAS,CAAC;AACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAOzC,MAAM,UAAU,iBAAiB,CAAC,KAA6B;IAC7D,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IAE9C,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,iDAAiD,cAAc,GAAG,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAA+B,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,mBAAmB;IAE1D,KAAK,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,WAAW,EAAE,CAAC;QACrD,sBAAsB;QACtB,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,oBAAoB,UAAU,CAAC,EAAE,QAAQ,UAAU,iDAAiD,CACrG,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,wBAAwB,CAChC,2BAAkC,EAClC,sBAAsB,UAAU,CAAC,EAAE,8BAA8B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,UAAU,EAAE,CAC7G,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAEnC,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC1E,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,SAAS,UAAU,CAAC,EAAE,QAAQ,UAAU,4BAA4B,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,SAAS,UAAU,CAAC,EAAE,QAAQ,UAAU,4BAA4B,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;YACzC,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,SAAS,UAAU,CAAC,EAAE,QAAQ,UAAU,+BAA+B,CACxE,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,UAAU,CAAC,gBAAgB,IAAI,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,SAAS,UAAU,CAAC,EAAE,QAAQ,UAAU,oEAAoE,CAC7G,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,SAAS,UAAU,CAAC,EAAE,QAAQ,UAAU,4CAA4C,CACrF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,aAAsD,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACxD,aAAa,GAAG,CAAC,IAAa,EAAE,EAAE;gBAChC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,EAAE;oBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,SAAS,UAAU,CAAC,EAAE,QAAQ,UAAU,kCAAkC,GAAG,CAAC,OAAO,EAAE,CACxF,CAAC;QACJ,CAAC;QAED,IAAI,cAAuD,CAAC;QAC5D,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACzD,cAAc,GAAG,CAAC,IAAa,EAAE,EAAE;oBACjC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;oBAC7B,IAAI,EAAE;wBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;oBACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,wBAAwB,CAChC,yBAAgC,EAChC,SAAS,UAAU,CAAC,EAAE,QAAQ,UAAU,mCAAmC,GAAG,CAAC,OAAO,EAAE,CACzF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5B,UAAU;YACV,UAAU;YACV,aAAa;YACb,cAAc;SACf,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,wBAAwB,CAChC,2BAAkC,EAClC,oBAAoB,EAAE,0BAA0B,CACjD,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/serialization.d.ts

@@ -0,0 +1,11 @@
+import type { JsonValue } from "../types/common.js";
+export interface SerializationOptions {
+    secrets?: string[];
+    maxStringLength?: number;
+    maxArrayLength?: number;
+    maxObjectFields?: number;
+    maxDepth?: number;
+}
+export declare function redactAndBoundValue(value: unknown, options?: SerializationOptions, depth?: number): any;
+export declare function serializeToolValue(value: unknown, label: string, secrets?: string[]): JsonValue;
+export declare function createPreview(value: unknown, secrets?: string[]): unknown;

package/dist/tools/serialization.js

@@ -0,0 +1,68 @@
+import { ErrorCode } from "../errors/codes.js";
+import { OpenDynamicWorkflowError } from "../errors/types.js";
+import { cloneJsonValue } from "../workflow/json.js";
+import { redactText } from "../security/env.js";
+export function redactAndBoundValue(value, options = {}, depth = 0) {
+    const { secrets = [], maxStringLength = 10000, maxArrayLength = 100, maxObjectFields = 50, maxDepth = 10 } = options;
+    if (value === null || value === undefined)
+        return value;
+    if (depth > maxDepth)
+        return "[RECURSION_LIMIT]";
+    if (typeof value === "string") {
+        let redacted = redactText(value, secrets);
+        if (redacted.length > maxStringLength) {
+            redacted = redacted.substring(0, maxStringLength) + "... [TRUNCATED]";
+        }
+        return redacted;
+    }
+    if (typeof value === "number" || typeof value === "boolean") {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        if (value.length === 0)
+            return [];
+        const bounded = value.slice(0, maxArrayLength).map(item => redactAndBoundValue(item, options, depth + 1));
+        if (value.length > maxArrayLength) {
+            bounded.push(`... [${value.length - maxArrayLength} more items]`);
+        }
+        return bounded;
+    }
+    if (typeof value === "object") {
+        const keys = Object.keys(value);
+        if (keys.length === 0)
+            return {};
+        const bounded = {};
+        for (const key of keys.slice(0, maxObjectFields)) {
+            bounded[key] = redactAndBoundValue(value[key], options, depth + 1);
+        }
+        if (keys.length > maxObjectFields) {
+            bounded["..."] = `${keys.length - maxObjectFields} more fields`;
+        }
+        return bounded;
+    }
+    return String(value);
+}
+export function serializeToolValue(value, label, secrets = []) {
+    try {
+        // 1. Ensure it's valid JSON-clonable
+        const cloned = cloneJsonValue(value, label);
+        // 2. Redact and bound
+        return redactAndBoundValue(cloned, { secrets });
+    }
+    catch (error) {
+        if (error instanceof OpenDynamicWorkflowError && error.code === ErrorCode.WORKFLOW_INVALID_CALL) {
+            throw new OpenDynamicWorkflowError(ErrorCode.TOOL_SERIALIZATION_FAILED, error.message, { cause: error });
+        }
+        throw error;
+    }
+}
+export function createPreview(value, secrets = []) {
+    return redactAndBoundValue(value, {
+        secrets,
+        maxStringLength: 1000,
+        maxArrayLength: 5,
+        maxObjectFields: 5,
+        maxDepth: 3
+    });
+}
+//# sourceMappingURL=serialization.js.map

package/dist/tools/serialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialization.js","sourceRoot":"","sources":["../../src/tools/serialization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAUhD,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,UAAgC,EAAE,EAAE,KAAK,GAAG,CAAC;IAC/F,MAAM,EACJ,OAAO,GAAG,EAAE,EACZ,eAAe,GAAG,KAAK,EACvB,cAAc,GAAG,GAAG,EACpB,eAAe,GAAG,EAAE,EACpB,QAAQ,GAAG,EAAE,EACd,GAAG,OAAO,CAAC;IAEZ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAExD,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO,mBAAmB,CAAC;IAEjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACtC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,iBAAiB,CAAC;QACxE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,MAAM,GAAG,cAAc,cAAc,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAE,KAAa,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,eAAe,cAAc,CAAC;QAClE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,KAAa,EAAE,UAAoB,EAAE;IACtF,IAAI,CAAC;QACH,qCAAqC;QACrC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5C,sBAAsB;QACtB,OAAO,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,wBAAwB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,qBAAqB,EAAE,CAAC;YAChG,MAAM,IAAI,wBAAwB,CAChC,SAAS,CAAC,yBAAyB,EACnC,KAAK,CAAC,OAAO,EACb,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,UAAoB,EAAE;IAClE,OAAO,mBAAmB,CAAC,KAAK,EAAE;QAChC,OAAO;QACP,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,CAAC;QACjB,eAAe,EAAE,CAAC;QAClB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/validate.d.ts

@@ -0,0 +1,18 @@
+import type { ErrorObject } from "ajv";
+/**
+ * Checks if a value is JSON-compatible.
+ * Rejects functions, symbols, cyclic structures, BigInt, and host objects.
+ */
+export declare function isJsonCompatible(value: unknown, seen?: WeakSet<object>): boolean;
+/**
+ * Formats Ajv errors into a standard ToolValidationResult error shape.
+ */
+export declare function formatAjvErrors(errors: ErrorObject[] | null | undefined): Array<{
+    path: string;
+    keyword?: string;
+    message: string;
+}>;
+/**
+ * Checks if a tool ID is safe (non-empty, no path-like characters, no whitespace).
+ */
+export declare function isSafeToolDefinitionId(id: string): boolean;

package/dist/tools/validate.js

@@ -0,0 +1,55 @@
+/**
+ * Checks if a value is JSON-compatible.
+ * Rejects functions, symbols, cyclic structures, BigInt, and host objects.
+ */
+export function isJsonCompatible(value, seen = new WeakSet()) {
+    if (value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+        return true;
+    }
+    if (typeof value !== "object" || value === null) {
+        return false;
+    }
+    if (seen.has(value)) {
+        return false; // Cyclic
+    }
+    seen.add(value);
+    if (Array.isArray(value)) {
+        return value.every(item => isJsonCompatible(item, seen));
+    }
+    // Plain objects only
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== null && proto !== Object.prototype) {
+        return false;
+    }
+    for (const key of Object.keys(value)) {
+        if (!isJsonCompatible(value[key], seen)) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * Formats Ajv errors into a standard ToolValidationResult error shape.
+ */
+export function formatAjvErrors(errors) {
+    if (!errors)
+        return [];
+    return errors.map(err => ({
+        path: err.instancePath || "",
+        keyword: err.keyword,
+        message: err.message || "Unknown validation error"
+    }));
+}
+/**
+ * Checks if a tool ID is safe (non-empty, no path-like characters, no whitespace).
+ */
+export function isSafeToolDefinitionId(id) {
+    if (!id || typeof id !== "string")
+        return false;
+    // No whitespace
+    if (/\s/.test(id))
+        return false;
+    // Non-empty, and no /, \, or ..
+    return id.length > 0 && !id.includes("/") && !id.includes("\\") && !id.includes("..");
+}
+//# sourceMappingURL=validate.js.map

package/dist/tools/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/tools/validate.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,IAAI,GAAG,IAAI,OAAO,EAAE;IACnE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3G,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,CAAC,SAAS;IACzB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,qBAAqB;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,gBAAgB,CAAE,KAAa,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAwC;IAKtE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,0BAA0B;KACnD,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEhD,gBAAgB;IAChB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhC,gCAAgC;IAChC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC"}

package/dist/types/agent.d.ts

@@ -0,0 +1,136 @@
+import type { AgentArtifacts } from "./artifacts.js";
+import type { JsonSchema, ProviderName } from "./common.js";
+import type { SerializedError } from "./errors.js";
+export type StructuredOutputTransport = "validate-only" | "prompt" | "native" | "auto";
+export interface StructuredOutputConfig {
+    transport?: StructuredOutputTransport | undefined;
+}
+export interface AgentPermissionsInput {
+    mode: "dangerously-full-access";
+}
+export type AgentPermissions = {
+    mode: "default";
+} | {
+    mode: "dangerously-full-access";
+};
+export interface DirectAgentCallInput {
+    id?: string | undefined;
+    label?: string | undefined;
+    provider?: ProviderName | undefined;
+    prompt: string;
+    model?: string | undefined;
+    schema?: JsonSchema | undefined;
+    structuredOutput?: StructuredOutputConfig | undefined;
+    timeoutMs?: number | undefined;
+    cwd?: string | undefined;
+    permissions?: AgentPermissionsInput | undefined;
+    metadata?: Record<string, unknown> | undefined;
+}
+export interface DefinitionAgentCallInput {
+    id?: string | undefined;
+    definition: string;
+    label?: string | undefined;
+    provider?: ProviderName | undefined;
+    prompt?: string | undefined;
+    model?: string | undefined;
+    schema?: JsonSchema | undefined;
+    structuredOutput?: StructuredOutputConfig | undefined;
+    timeoutMs?: number | undefined;
+    cwd?: string | undefined;
+    permissions?: AgentPermissionsInput | undefined;
+    metadata?: Record<string, unknown> | undefined;
+}
+export type AgentCallInput = DirectAgentCallInput | DefinitionAgentCallInput;
+export type AgentTaskState = "queued" | "preparing" | "running" | "validating" | "collecting_artifacts" | "succeeded" | "failed" | "timed_out" | "cancelled" | "skipped";
+export type AgentResultStatus = "succeeded" | "failed" | "timed_out" | "cancelled" | "skipped";
+export type AgentResult = AgentSuccessResult | AgentFailureResult;
+export interface AgentSuccessResult {
+    ok: true;
+    status: "succeeded";
+    id: string;
+    label?: string | undefined;
+    provider: ProviderName;
+    model?: string | undefined;
+    text?: string | undefined;
+    json?: unknown;
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    durationMs: number;
+    artifacts: AgentArtifacts;
+    cache?: AgentResultCacheInfo | undefined;
+    permissions: AgentPermissions;
+    metadata?: Record<string, unknown> | undefined;
+}
+export interface AgentFailureResult {
+    ok: false;
+    status: "failed" | "timed_out" | "cancelled" | "skipped";
+    id: string;
+    label?: string | undefined;
+    provider: ProviderName;
+    model?: string | undefined;
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+    durationMs: number;
+    artifacts: AgentArtifacts;
+    error: SerializedError;
+    cache?: AgentResultCacheInfo | undefined;
+    permissions: AgentPermissions;
+    metadata?: Record<string, unknown> | undefined;
+}
+export interface AgentResultCacheInfo {
+    hit: boolean;
+    callId?: string | undefined;
+    previousRunId?: string | undefined;
+    previousAgentId?: string | undefined;
+}
+export interface AgentRunInput {
+    id: string;
+    label?: string | undefined;
+    provider: ProviderName;
+    prompt: string;
+    model?: string | undefined;
+    schema?: JsonSchema | undefined;
+    structuredOutput?: StructuredOutputConfig | undefined;
+    timeoutMs: number;
+    cwd: string;
+    env: Record<string, string>;
+    permissions: AgentPermissions;
+    metadata?: Record<string, unknown> | undefined;
+}
+export interface ProviderHealth {
+    provider: ProviderName;
+    available: boolean;
+    command?: string;
+    version?: string;
+    message?: string;
+    error?: SerializedError;
+    supportsModelSelection?: boolean;
+}
+export interface ProviderCommand {
+    command: string;
+    args: string[];
+    stdin?: string | undefined;
+    cwd: string;
+    env?: Record<string, string> | undefined;
+}
+export interface ProviderParseInput {
+    input: AgentRunInput;
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+}
+export interface ProviderParsedResult {
+    text?: string | undefined;
+    json?: unknown | undefined;
+    structuredJson?: unknown | undefined;
+    raw?: unknown | undefined;
+    parseWarnings?: string[] | undefined;
+}
+export interface AgentAdapter {
+    name: ProviderName;
+    checkHealth?(): Promise<ProviderHealth>;
+    buildCommand(input: AgentRunInput): Promise<ProviderCommand>;
+    parseResult(input: ProviderParseInput): Promise<ProviderParsedResult>;
+}

package/dist/types/agent.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent.js.map

package/dist/types/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/types/agent.ts"],"names":[],"mappings":""}

package/dist/types/artifacts.d.ts

@@ -0,0 +1,88 @@
+export interface AgentArtifacts {
+    dir: string;
+    promptPath: string;
+    stdoutPath: string;
+    stderrPath: string;
+    rawResultPath?: string;
+    normalizedResultPath?: string;
+    schemaPath?: string;
+    validationErrorPath?: string;
+    permissionsPath?: string;
+    metadataPath?: string;
+}
+export interface RunManifest {
+    schemaVersion: "open-dynamic-workflow.manifest.v1";
+    runId: string;
+    status: "running" | "succeeded" | "failed" | "cancelled";
+    createdAt: string;
+    updatedAt: string;
+    workflowPath: string;
+    workflowHash: string;
+    workflow?: {
+        name: string;
+        file: string;
+        requestedTarget: string;
+        targetKind: "workflow-name" | "workflow-file";
+    } | undefined;
+    openDynamicWorkflowVersion: string;
+    cwd: string;
+    configPath?: string | undefined;
+    error?: any;
+}
+export interface CreateRunInput {
+    runId: string;
+    outDir: string;
+    workflowPath: string;
+    workflowSource: string;
+    workflowHash: string;
+    workflow?: {
+        name: string;
+        file: string;
+        requestedTarget: string;
+        targetKind: "workflow-name" | "workflow-file";
+    } | undefined;
+    resolvedConfig: unknown;
+    openDynamicWorkflowVersion: string;
+    cwd: string;
+    configPath?: string | undefined;
+}
+export interface ToolArtifacts {
+    dir: string;
+    metadataPath: string;
+    inputPath: string;
+    outputPath?: string;
+    errorPath?: string;
+}
+export interface RunArtifacts {
+    runId: string;
+    rootDir: string;
+    manifestPath: string;
+    workflowInputPath: string;
+    resolvedConfigPath: string;
+    runInputPath: string;
+    callsPath: string;
+    cacheIndexPath: string;
+    eventsPath: string;
+    reportPath: string;
+    agentDir(agentId: string): string;
+    toolDir(toolCallId: string): string;
+    workflowInvocationDir(workflowInvocationId: string): string;
+}
+export interface WorkflowInvocationArtifacts {
+    rootDir: string;
+    inputPath: string;
+    resultPath: string;
+    errorPath: string;
+    summaryPath: string;
+}
+export interface ArtifactStore {
+    createRun(input: CreateRunInput): Promise<RunArtifacts>;
+    writeText(relativePath: string, content: string): Promise<string>;
+    appendText(relativePath: string, content: string): Promise<string>;
+    writeJson(relativePath: string, value: unknown): Promise<string>;
+    appendJsonl(relativePath: string, value: unknown): Promise<string>;
+    writeFinalReport(value: unknown): Promise<string>;
+    updateManifest(status: "succeeded" | "failed" | "cancelled", error?: any): Promise<string>;
+    getRunArtifacts(): RunArtifacts;
+    isRunCreated(): boolean;
+}

package/dist/types/artifacts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=artifacts.js.map

package/dist/types/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../src/types/artifacts.ts"],"names":[],"mappings":""}

package/dist/types/common.d.ts

@@ -0,0 +1,15 @@
+export type JsonPrimitive = string | number | boolean | null;
+export type JsonValue = JsonPrimitive | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export type JsonObject = {
+    [key: string]: JsonValue;
+};
+export type JsonSchema = JsonObject;
+export type ProviderName = "mock" | "codex" | "gemini" | "copilot" | "opencode" | "antigravity" | "pi" | string;
+export type ReporterMode = "pretty" | "json" | "jsonl";
+export type WorkflowStatus = "succeeded" | "failed" | "cancelled";
+export type MaybePromise<T> = T | Promise<T>;
+export interface Timestamped {
+    timestamp: string;
+}

package/dist/types/common.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=common.js.map

package/dist/types/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/types/common.ts"],"names":[],"mappings":""}

package/dist/types/config.d.ts

@@ -0,0 +1,119 @@
+import type { JsonObject, ProviderName, ReporterMode } from "./common.js";
+export interface ProviderModelArgConfig {
+    flag: string;
+}
+export interface ProviderConfig {
+    command: string;
+    args?: string[];
+    defaultModel?: string | null;
+    modelArg?: ProviderModelArgConfig | false;
+    timeoutMs?: number;
+    env?: Record<string, string>;
+    mock?: MockProviderConfig;
+    promptMode?: "stdin" | "arg";
+    promptFlag?: string;
+    modelFlag?: string;
+    sandboxFlag?: string;
+    dangerouslySkipPermissionsFlag?: string;
+    useSandboxByDefault?: boolean;
+    permissionPolicy?: string;
+    printTimeoutFlag?: string;
+    agentFlag?: string;
+    dirFlag?: string | false;
+    formatFlag?: string;
+    format?: string;
+    variantFlag?: string;
+    defaultAgent?: string;
+    defaultVariant?: string;
+    piProvider?: string;
+    providerFlag?: string;
+    executionMode?: string;
+    approvalMode?: string;
+    safeTools?: string[];
+    fullAccessTools?: string[];
+    thinking?: string;
+    systemPrompt?: string;
+    appendSystemPrompt?: string;
+    deterministicEnv?: boolean;
+    noSession?: boolean;
+    noContextFiles?: boolean;
+    noExtensions?: boolean;
+    noSkills?: boolean;
+    noPromptTemplates?: boolean;
+    noThemes?: boolean;
+}
+export interface MockProviderConfig {
+    responses?: Record<string, MockProviderResponse>;
+    defaultResponse?: MockProviderResponse;
+}
+export interface MockProviderResponse {
+    text?: string;
+    json?: unknown;
+    stdout?: string;
+    stderr?: string;
+    exitCode?: number;
+    delayMs?: number;
+    fail?: boolean;
+    timeout?: boolean;
+}
+export interface SecurityConfig {
+    allowWorkflowImports: false;
+    passEnv: string[];
+    redactEnv: string[];
+}
+export interface ReportingConfig {
+    mode: ReporterMode;
+    verbose: boolean;
+}
+export interface SharedAgentsConfig {
+    dir: string;
+    allowDynamicIds: false;
+    maxDefinitions: number;
+    strictPromptTemplateVariables: boolean;
+}
+export interface WorkflowDiscoveryConfig {
+    include: string[];
+}
+export interface WorkflowConfig {
+    discovery: WorkflowDiscoveryConfig;
+    maxDepth: number;
+}
+export interface OrchestrationConfig {
+    concurrency?: number;
+}
+export interface OpenDynamicWorkflowConfig {
+    defaultProvider: ProviderName;
+    concurrency: number;
+    timeoutMs: number;
+    defaultModel?: string | null;
+    failFast?: boolean;
+    providers: Record<string, ProviderConfig>;
+    security: SecurityConfig;
+    reporting: ReportingConfig;
+    sharedAgents: SharedAgentsConfig;
+    workflow: WorkflowConfig;
+    orchestration?: OrchestrationConfig;
+}
+export interface ResolvedConfig extends OpenDynamicWorkflowConfig {
+    cwd: string;
+    outDir: string;
+    configPath?: string;
+    cliArgs: Record<string, string | boolean | number>;
+}
+export interface CliRunOptions {
+    workflowFile: string;
+    provider?: ProviderName;
+    model?: string;
+    args: JsonObject;
+    configPath?: string;
+    cwd?: string;
+    outDir?: string;
+    report?: ReporterMode;
+    concurrency?: number;
+    timeoutMs?: number;
+    resume?: string;
+    noCache?: boolean;
+    dryRun: boolean;
+    failFast: boolean;
+    verbose: boolean;
+}

package/dist/types/config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.js.map