@viewportai/daemon 0.2.0 → 0.2.1

package/dist/workflows/workflow-schema.js

@@ -0,0 +1,294 @@
+import { z } from 'zod';
+import { CapabilityRequestSchema, ExecutorRequirementSchema } from './workflow-executor-schema.js';
+export const WORKFLOW_SCHEMA_VERSION = 'viewport.workflow/v1';
+const InputValueSchema = z.lazy(() => z.union([
+    z.string(),
+    z.number(),
+    z.boolean(),
+    z.null(),
+    z.array(InputValueSchema),
+    z.record(z.string(), InputValueSchema),
+]));
+const InputDefinitionSchema = z
+    .object({
+    type: z.enum(['string', 'number', 'boolean', 'json']),
+    required: z.boolean().optional(),
+    default: InputValueSchema.optional(),
+    description: z.string().optional(),
+})
+    .strict();
+const identifierSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .regex(/^[a-zA-Z0-9._/-]+$/);
+const OutputDefinitionSchema = z
+    .object({
+    type: z.enum(['string', 'number', 'boolean', 'json', 'file', 'artifact']),
+    description: z.string().optional(),
+    extract: z.string().trim().min(1).optional(),
+})
+    .strict();
+const ArtifactDefinitionSchema = z
+    .object({
+    path: z.string().trim().min(1),
+    type: z.enum(['file', 'directory', 'patch', 'report', 'log']).optional(),
+    description: z.string().optional(),
+})
+    .strict();
+const RetryPolicySchema = z
+    .object({
+    maxAttempts: z.number().int().min(1).max(10),
+    backoffSeconds: z.number().int().min(0).max(86_400).optional(),
+    transient: z.array(z.string().min(1)).optional(),
+    fatal: z.array(z.string().min(1)).optional(),
+})
+    .strict();
+const NodePolicySchema = z
+    .object({
+    onFailure: z.enum(['halt', 'continue', 'skip_dependents']).optional(),
+    approvalRequired: z.boolean().optional(),
+})
+    .strict();
+const HookRecordSchema = z
+    .object({
+    record: z.boolean().optional(),
+})
+    .strict();
+const PermissionHookDecisionSchema = z
+    .object({
+    behavior: z.enum(['allow', 'deny']),
+    message: z.string().trim().min(1).optional(),
+})
+    .strict();
+const PermissionHookRuleSchema = z.union([
+    PermissionHookDecisionSchema,
+    z
+        .object({
+        default: PermissionHookDecisionSchema.optional(),
+        tools: z.record(z.string().trim().min(1), PermissionHookDecisionSchema).optional(),
+    })
+        .strict()
+        .refine((rule) => Boolean(rule.default) || Boolean(rule.tools), {
+        message: 'Set default or tools for PermissionRequest hook rules.',
+    }),
+]);
+const HookRulesSchema = z
+    .object({
+    PreToolUse: HookRecordSchema.optional(),
+    PostToolUse: HookRecordSchema.optional(),
+    PostToolUseFailure: HookRecordSchema.optional(),
+    PermissionRequest: PermissionHookRuleSchema.optional(),
+})
+    .strict();
+const InlineAgentDefinitionSchema = z
+    .object({
+    title: z.string().trim().min(1).optional(),
+    prompt: z.string().trim().min(1),
+    agent: z.string().trim().min(1).optional(),
+    model: z.string().trim().min(1).optional(),
+})
+    .strict();
+const GateDefinitionSchema = z.discriminatedUnion('type', [
+    z
+        .object({
+        type: z.literal('check'),
+        expression: z.string().trim().min(1),
+        description: z.string().optional(),
+    })
+        .strict(),
+    z
+        .object({
+        type: z.literal('policy'),
+        expression: z.string().trim().min(1),
+        description: z.string().optional(),
+    })
+        .strict(),
+    z
+        .object({
+        type: z.literal('human_review'),
+        prompt: z.string().trim().min(1),
+        description: z.string().optional(),
+    })
+        .strict(),
+    z
+        .object({
+        type: z.literal('schedule'),
+        waitUntil: z.string().trim().min(1),
+        description: z.string().optional(),
+    })
+        .strict(),
+]);
+const EnvValueSchema = z
+    .object({
+    value: z.string().optional(),
+    secret: identifierSchema.optional(),
+})
+    .strict()
+    .refine((entry) => Boolean(entry.value) !== Boolean(entry.secret), {
+    message: 'Set exactly one of value or secret.',
+});
+const RequiresSchema = z
+    .object({
+    agents: z.array(z.string().trim().min(1)).optional(),
+    tools: z.array(z.string().trim().min(1)).optional(),
+    integrations: z.array(z.string().trim().min(1)).optional(),
+    secrets: z.array(identifierSchema).optional(),
+})
+    .strict();
+const ContextReferenceSchema = z
+    .object({
+    ref: z.string().trim().min(1),
+    as: identifierSchema.optional(),
+    required: z.boolean().optional(),
+    description: z.string().optional(),
+    refresh: z.enum(['manual', 'before_run', 'on_demand']).optional(),
+})
+    .strict();
+const ContextSchema = z.array(z.union([z.string().trim().min(1), ContextReferenceSchema]));
+const TriggerRuleSchema = z.enum(['all_success', 'all_done', 'one_success']);
+const NodeBaseSchema = z.object({
+    title: z.string().trim().min(1).optional(),
+    needs: z.array(z.string().trim().min(1)).optional(),
+    when: z.string().trim().min(1).optional(),
+    triggerRule: TriggerRuleSchema.optional(),
+    timeoutSeconds: z.number().int().positive().max(86_400).optional(),
+    retry: RetryPolicySchema.optional(),
+    policy: NodePolicySchema.optional(),
+    outputs: z.record(identifierSchema, OutputDefinitionSchema).optional(),
+    artifacts: z.record(identifierSchema, ArtifactDefinitionSchema).optional(),
+    env: z.record(identifierSchema, EnvValueSchema).optional(),
+});
+const PromptNodeSchema = NodeBaseSchema.extend({
+    type: z.literal('prompt'),
+    prompt: z.string().trim().min(1),
+    agent: z.string().trim().min(1).optional(),
+    provider: z.string().trim().min(1).optional(),
+    model: z.string().trim().min(1).optional(),
+    hooks: HookRulesSchema.optional(),
+    agents: z.record(identifierSchema, InlineAgentDefinitionSchema).optional(),
+    inlineAgentFailurePolicy: z.enum(['fail', 'continue']).optional(),
+}).strict();
+const ShellNodeSchema = NodeBaseSchema.extend({
+    type: z.literal('shell'),
+    command: z.string().trim().min(1),
+    cwd: z.string().trim().min(1).optional(),
+}).strict();
+const ApprovalOnRejectSchema = z.union([
+    z
+        .object({
+        command: z.string().trim().min(1),
+        cwd: z.string().trim().min(1).optional(),
+        timeoutSeconds: z.number().int().positive().max(86_400).optional(),
+    })
+        .strict(),
+    z
+        .object({
+        prompt: z.string().trim().min(1),
+        agent: z.string().trim().min(1).optional(),
+        model: z.string().trim().min(1).optional(),
+    })
+        .strict(),
+]);
+const ApprovalNodeSchema = NodeBaseSchema.extend({
+    type: z.literal('approval'),
+    prompt: z.string().trim().min(1),
+    captureResponse: z.boolean().optional(),
+    onReject: ApprovalOnRejectSchema.optional(),
+}).strict();
+const PlanNodeSchema = NodeBaseSchema.extend({
+    type: z.literal('plan'),
+    title: z.string().trim().min(1),
+    body: z.string().trim().min(1),
+    summary: z.string().trim().min(1).optional(),
+    source: z.string().trim().min(1).optional(),
+    sourceRef: z.string().trim().min(1).optional(),
+    waitForApproval: z.boolean().optional(),
+}).strict();
+const GateNodeSchema = NodeBaseSchema.extend({
+    type: z.literal('gate'),
+    gate: GateDefinitionSchema,
+}).strict();
+const LoopBodySchema = z.discriminatedUnion('type', [
+    z
+        .object({
+        type: z.literal('shell'),
+        command: z.string().trim().min(1),
+        cwd: z.string().trim().min(1).optional(),
+        timeoutSeconds: z.number().int().positive().max(86_400).optional(),
+    })
+        .strict(),
+    z
+        .object({
+        type: z.literal('prompt'),
+        prompt: z.string().trim().min(1),
+        agent: z.string().trim().min(1).optional(),
+        model: z.string().trim().min(1).optional(),
+    })
+        .strict(),
+]);
+const LoopNodeSchema = NodeBaseSchema.extend({
+    type: z.literal('loop'),
+    foreach: z.string().trim().min(1).optional(),
+    while: z.string().trim().min(1).optional(),
+    until: z.string().trim().min(1).optional(),
+    maxIterations: z.number().int().min(1).max(1000),
+    body: LoopBodySchema,
+})
+    .strict()
+    .superRefine((node, ctx) => {
+    const modes = [node.foreach, node.while, node.until].filter(Boolean).length;
+    if (modes !== 1) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: 'Loop node must specify exactly one of foreach, while, or until.',
+            path: [],
+        });
+    }
+});
+const SubflowChildShellSchema = z
+    .object({
+    type: z.literal('shell'),
+    title: z.string().trim().min(1).optional(),
+    needs: z.array(z.string().trim().min(1)).optional(),
+    when: z.string().trim().min(1).optional(),
+    command: z.string().trim().min(1),
+    cwd: z.string().trim().min(1).optional(),
+    timeoutSeconds: z.number().int().positive().max(86_400).optional(),
+    outputs: z.record(identifierSchema, OutputDefinitionSchema).optional(),
+})
+    .strict();
+const SubflowChildSchema = z.discriminatedUnion('type', [SubflowChildShellSchema]);
+const SubflowNodeSchema = NodeBaseSchema.extend({
+    type: z.literal('subflow'),
+    inline: z
+        .object({
+        nodes: z.record(z.string().trim().min(1), SubflowChildSchema),
+    })
+        .strict(),
+    inputs: z.record(identifierSchema, z.string().trim().min(1)).optional(),
+}).strict();
+const WorkflowNodeSchema = z.discriminatedUnion('type', [
+    PromptNodeSchema,
+    ShellNodeSchema,
+    ApprovalNodeSchema,
+    PlanNodeSchema,
+    GateNodeSchema,
+    LoopNodeSchema,
+    SubflowNodeSchema,
+]);
+export const WorkflowDefinitionSchema = z
+    .object({
+    schema: z.literal(WORKFLOW_SCHEMA_VERSION),
+    name: identifierSchema,
+    title: z.string().trim().min(1).optional(),
+    description: z.string().optional(),
+    inputs: z.record(z.string(), InputDefinitionSchema).optional(),
+    context: ContextSchema.optional(),
+    requires: RequiresSchema.optional(),
+    executor: ExecutorRequirementSchema.optional(),
+    capabilityRequests: z.array(CapabilityRequestSchema).optional(),
+    nodes: z.record(z.string().trim().min(1), WorkflowNodeSchema),
+})
+    .strict();
+//# sourceMappingURL=workflow-schema.js.map

package/dist/workflows/workflow-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-schema.js","sourceRoot":"","sources":["../../src/workflows/workflow-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAEnG,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAA+B,CAAC;AAEvE,MAAM,gBAAgB,GAAkC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAClE,CAAC,CAAC,KAAK,CAAC;IACN,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACzB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;CACvC,CAAC,CACH,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,oBAAoB,CAAC,CAAC;AAE/B,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACzE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC9D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC;IACvC,4BAA4B;IAC5B,CAAC;SACE,MAAM,CAAC;QACN,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;QAChD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC,QAAQ,EAAE;KACnF,CAAC;SACD,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QAC9D,OAAO,EAAE,wDAAwD;KAClE,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACxC,kBAAkB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC/C,iBAAiB,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,2BAA2B,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACxD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;IACjE,OAAO,EAAE,qCAAqC;CAC/C,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,EAAE,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;AAE3F,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;AAE7E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAClE,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IACtE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC1E,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IAC1E,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC;IACrC,CAAC;SACE,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KACnE,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,IAAI,EAAE,oBAAoB;CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KACnE,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAChD,IAAI,EAAE,cAAc;CACrB,CAAC;KACC,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC5E,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,iEAAiE;YAC1E,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAEnF,MAAM,iBAAiB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;KAC9D,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,gBAAgB;IAChB,eAAe;IACf,kBAAkB;IAClB,cAAc;IACd,cAAc;IACd,cAAc;IACd,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAC1C,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IAC9D,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC9C,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;CAC9D,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/workflows/workflow-source.d.ts

@@ -0,0 +1,3 @@
+import type { ParsedWorkflow, WorkflowRunRequest } from './types.js';
+export declare function resolveWorkflowSource(request: WorkflowRunRequest, directoryPath: string): Promise<ParsedWorkflow>;
+//# sourceMappingURL=workflow-source.d.ts.map

package/dist/workflows/workflow-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-source.d.ts","sourceRoot":"","sources":["../../src/workflows/workflow-source.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErE,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,kBAAkB,EAC3B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,cAAc,CAAC,CAkBzB"}

package/dist/workflows/workflow-source.js

@@ -0,0 +1,29 @@
+import path from 'node:path';
+import { parseWorkflow, parseWorkflowFile } from './parser.js';
+export async function resolveWorkflowSource(request, directoryPath) {
+    if (request.workflowYaml) {
+        return parseWorkflow(request.workflowYaml, request.workflowSourceRef?.trim() || 'viewport://workflow/inline');
+    }
+    if (!request.workflowPath) {
+        throw new Error('Workflow run requires a workflow file path or YAML snapshot');
+    }
+    const workflowPath = path.isAbsolute(request.workflowPath)
+        ? request.workflowPath
+        : path.join(directoryPath, request.workflowPath);
+    const parsed = await parseWorkflowFile(workflowPath);
+    assertDeclaredDigestMatches(request, parsed.digest);
+    return parsed;
+}
+function assertDeclaredDigestMatches(request, actualDigest) {
+    const declaredDigest = request.workflowContract?.declaredDigest;
+    if (!declaredDigest)
+        return;
+    if (normalizeDigest(declaredDigest) === normalizeDigest(actualDigest))
+        return;
+    const contract = request.workflowContract;
+    throw new Error(`Workflow digest mismatch for ${contract?.id ?? request.workflowPath}: expected ${declaredDigest}, got sha256:${actualDigest}`);
+}
+function normalizeDigest(value) {
+    return value.startsWith('sha256:') ? value.slice('sha256:'.length) : value;
+}
+//# sourceMappingURL=workflow-source.js.map

package/dist/workflows/workflow-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-source.js","sourceRoot":"","sources":["../../src/workflows/workflow-source.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAG/D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA2B,EAC3B,aAAqB;IAErB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,aAAa,CAClB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,4BAA4B,CAClE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC;QACxD,CAAC,CAAC,OAAO,CAAC,YAAY;QACtB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACrD,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,2BAA2B,CAAC,OAA2B,EAAE,YAAoB;IACpF,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC;IAChE,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,IAAI,eAAe,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC;QAAE,OAAO;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC1C,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,EAAE,EAAE,IAAI,OAAO,CAAC,YAAY,cAAc,cAAc,gBAAgB,YAAY,EAAE,CAC/H,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7E,CAAC"}

package/docs/configuration.md

@@ -6,7 +6,7 @@ Daemon runtime settings resolve in this order (later wins):
 
 1. Built-in defaults
 2. `~/.viewport/config.json` (`daemon.*`)
-3. Environment variables (`VPD_*` / `VIEWPORT_*`)
+3. Environment variables (`VIEWPORT_*`)
 4. CLI flags
 
 Session config resolution is separate:
@@ -32,14 +32,14 @@ Session config resolution is separate:
     "logFile": "~/.viewport/daemon.log",
     "relay": {
       "enabled": false,
-      "endpoint": "wss://relay.example.test/ws",
-      "serverUrl": "https://api.example.test",
+      "endpoint": "wss://relay.getviewport.com/ws",
+      "serverUrl": "https://getviewport.com",
       "workspaceId": "workspace_demo",
-      "enrollToken": "workspace_enroll_...",
+      "issueToken": "install_daemon_issue_...",
       "tlsVerify": "auto",
       "caCertPath": "/path/to/relay-ca.pem",
       "tlsPins": ["ab12cd34..."],
-      "tokenIssuer": "viewport-server-poc",
+      "tokenIssuer": "getviewport-runtime",
       "tokenAudience": "viewport-relay",
       "signingKeys": {
         "v1": "replace-me"
@@ -50,26 +50,46 @@ Session config resolution is separate:
 }
 ```
 
+Optional pairing-browser override:
+
+```json
+{
+  "daemon": {
+    "server": {
+      "url": "https://getviewport.com",
+      "appUrl": "https://app.getviewport.com"
+    }
+  }
+}
+```
+
+Use `appUrl` only when the browser pairing app is intentionally hosted at a different origin than the API server. For the managed topology:
+
+- API server: `https://getviewport.com`
+- browser app: `https://app.getviewport.com`
+
 ## Environment variables
 
-- `VPD_LISTEN` / `VIEWPORT_LISTEN`
-- `VPD_PROFILE` / `VIEWPORT_PROFILE`
-- `VPD_ALLOWED_HOSTS` / `VIEWPORT_ALLOWED_HOSTS`
-- `VPD_ALLOWED_ORIGINS` / `VIEWPORT_ALLOWED_ORIGINS`
-- `VPD_AUTH` / `VIEWPORT_AUTH`
-- `VPD_LOG_FILE` / `VIEWPORT_LOG_FILE`
-- `VPD_RELAY_ENABLED` / `VIEWPORT_RELAY_ENABLED`
-- `VPD_RELAY_ENDPOINT` / `VIEWPORT_RELAY_ENDPOINT`
-- `VPD_RELAY_SERVER` / `VIEWPORT_RELAY_SERVER`
-- `VPD_RELAY_WORKSPACE` / `VIEWPORT_RELAY_WORKSPACE`
-- `VPD_RELAY_ENROLL_TOKEN` / `VIEWPORT_RELAY_ENROLL_TOKEN`
-- `VPD_RELAY_TLS_VERIFY` / `VIEWPORT_RELAY_TLS_VERIFY` (`auto|0|1`)
-- `VPD_RELAY_CA_CERT` / `VIEWPORT_RELAY_CA_CERT`
-- `VPD_RELAY_TLS_PINS` / `VIEWPORT_RELAY_TLS_PINS` (comma-separated SHA-256 cert fingerprints)
-- `VPD_RELAY_TOKEN_ISSUER` / `VIEWPORT_RELAY_TOKEN_ISSUER`
-- `VPD_RELAY_TOKEN_AUDIENCE` / `VIEWPORT_RELAY_TOKEN_AUDIENCE`
-- `VPD_RELAY_TOKEN_SIGNING_KEYS_JSON` / `VIEWPORT_RELAY_TOKEN_SIGNING_KEYS_JSON`
-- `VPD_RELAY_TOKEN_CLOCK_SKEW_SEC` / `VIEWPORT_RELAY_TOKEN_CLOCK_SKEW_SEC`
+- `VIEWPORT_LISTEN`
+- `VIEWPORT_PROFILE`
+- `VIEWPORT_ALLOWED_HOSTS`
+- `VIEWPORT_ALLOWED_ORIGINS`
+- `VIEWPORT_AUTH`
+- `VIEWPORT_LOG_FILE`
+- `VIEWPORT_SERVER_URL` / `VPD_SERVER_URL`
+- `VIEWPORT_APP_URL` / `VPD_APP_URL`
+- `VIEWPORT_RELAY_ENABLED`
+- `VIEWPORT_RELAY_ENDPOINT`
+- `VIEWPORT_RELAY_SERVER`
+- `VIEWPORT_RELAY_WORKSPACE`
+- `VIEWPORT_RELAY_ISSUE_TOKEN`
+- `VIEWPORT_RELAY_TLS_VERIFY` (`auto|0|1`)
+- `VIEWPORT_RELAY_CA_CERT`
+- `VIEWPORT_RELAY_TLS_PINS` (comma-separated SHA-256 cert fingerprints)
+- `VIEWPORT_RELAY_TOKEN_ISSUER`
+- `VIEWPORT_RELAY_TOKEN_AUDIENCE`
+- `VIEWPORT_RELAY_TOKEN_SIGNING_KEYS_JSON`
+- `VIEWPORT_RELAY_TOKEN_CLOCK_SKEW_SEC`
 - `VIEWPORT_HTTP_LOG_LEVEL`
 - `VIEWPORT_MAX_WS_CLIENTS`
 
@@ -85,7 +105,7 @@ Session config resolution is separate:
 - `--relay-endpoint`
 - `--relay-server`
 - `--relay-workspace`
-- `--relay-enroll-token`
+- `--relay-issue-token`
 - `--relay-tls-verify`
 - `--relay-ca-cert`
 - `--relay-tls-pins`
@@ -95,15 +115,20 @@ Session config resolution is separate:
 - `--relay-token-clock-skew-sec`
 - `--no-relay`
 
+Pairing-only flags:
+
+- `--server`
+- `--app-url`
+
 ## Relay bootstrap
 
 - Configure relay credentials:
 
 ```bash
-vpd remote login --server https://getviewport.test --workspace workspace_demo --token <enroll-token> --enable
+vpd remote login --server https://app.getviewport.com --workspace workspace_demo --token <issue-token> --enable
 ```
 
-- If `--token` is omitted, the command can auto-rotate (or auto-enroll with `--user`) by calling the server API.
+- `--token` should be the daemon issue token the control plane returns after pairing approval.
 - Apply updates with:
 
 ```bash

package/docs/developer-workflows.md

@@ -58,7 +58,7 @@ That makes tarball install a stronger release-confidence check than `npm link`,
 npm run verify:repo
 ```
 
-2. Environment verification (isolated runtime):
+2. Environment verification (temporary runtime config):
 
 ```bash
 npm run verify:env
@@ -70,7 +70,7 @@ npm run verify:env
 npm run verify:env:service
 ```
 
-4. Package/install verification from isolated npm prefix:
+4. Package/install verification from a temporary npm prefix:
 
 ```bash
 npm run verify:install
@@ -105,3 +105,19 @@ Use only these shell entrypoints:
 4. `scripts/test-env.sh`
 5. `scripts/install-verify.sh`
 6. `scripts/verify.sh`
+
+## Linked-build workflow
+
+Start the daemon from the repo against your existing global daemon home:
+
+```bash
+npm run daemon:start
+npm run daemon:doctor
+```
+
+That path keeps one daemon model:
+
+- global state in `~/.viewport/`
+- optional project override in `.viewport/config.json`
+- local repo builds activated via `npm run daemon`
+- `vpd doctor` shows the active config path and whether it came from an explicit override or the nearest ancestor `.viewport/config.json`