@xopcai/xopc 0.0.142 → 0.0.144

package/dist/src/agent/workflow/runtime.js

@@ -1,402 +0,0 @@
-import { emptySnapshotFor } from "./snapshot-empty.js";
-import { parseWorkflowScript } from "./parser.js";
-import { availableParallelism } from "node:os";
-import { Script, createContext } from "node:vm";
-//#region src/agent/workflow/runtime.ts
-/**
-* Sandboxed workflow runtime.
-*
-* Parses the script via {@link parseWorkflowScript} (which strips the `meta`
-* export), wraps the remaining body in an async IIFE, and runs it inside a
-* Node `vm` context with a curated set of globals:
-*
-*   - `agent(prompt, opts)` — spawns a subagent through the injected
-*     {@link SubagentRunner} and returns its result (string, or schema-validated
-*     object). Failures resolve to `null`.
-*   - `parallel(thunks)` — concurrent fan-out; thunks (not promises!) so the
-*     limiter sees each agent() call.
-*   - `pipeline(items, ...stages)` — per-item sequential stages, items run
-*     concurrently (no stage barrier). Each stage receives
-*     `(prevResult, originalItem, index)`. A stage that throws drops that item
-*     to `null` and skips remaining stages.
-*   - `phase(title)` — marks the current phase; surfaces through `onPhase`.
-*   - `log(message)` — appends to the workflow log.
-*   - `budget` — `{ total, spent(), remaining() }` for self-pacing scripts.
-*   - `args`, `cwd`, `process.cwd()`.
-*
-* The runtime is the only code that touches `vm`. It exposes no IO surface,
-* carries no LLM dependency, and is fully driven by injected callbacks — that
-* means the workflow tool, tests, and any future runner share one runtime.
-*/
-const DEFAULT_CONCURRENCY_FLOOR = 1;
-const DEFAULT_CONCURRENCY_CEILING = 16;
-const DEFAULT_MAX_SUBAGENTS = 1e3;
-async function runWorkflow(script, deps, options) {
-	const started = Date.now();
-	const { meta, body } = parseWorkflowScript(script);
-	const state = {
-		logs: [],
-		phases: [],
-		agentCount: 0,
-		spent: 0
-	};
-	const concurrency = clampConcurrency(options.concurrency);
-	const maxSubagents = Math.max(1, options.maxSubagents ?? DEFAULT_MAX_SUBAGENTS);
-	const limiter = createLimiter(concurrency);
-	const pendingAgentRuns = /* @__PURE__ */ new Set();
-	const phaseDefaultModels = buildPhaseModelMap(meta.phases);
-	const log = (message) => {
-		const text = String(message);
-		state.logs.push(text);
-		options.onLog?.(text);
-	};
-	const phase = (title) => {
-		const text = requireString(title, "phase title");
-		state.currentPhase = text;
-		if (!state.phases.includes(text)) state.phases.push(text);
-		options.onPhase?.(text);
-	};
-	const budget = Object.freeze({
-		total: options.tokenBudget ?? null,
-		spent: () => state.spent,
-		remaining: () => options.tokenBudget == null ? Number.POSITIVE_INFINITY : Math.max(0, options.tokenBudget - state.spent)
-	});
-	const throwIfAborted = () => {
-		if (!options.signal?.aborted) return;
-		const reason = options.signal.reason;
-		if (reason instanceof Error) throw reason;
-		if (reason) throw new Error(String(reason));
-		throw new Error("workflow aborted");
-	};
-	const resolveAgentModelSelection = (normalized, assignedPhase) => {
-		const modelRef = normalized.model?.trim() || (assignedPhase ? phaseDefaultModels.get(assignedPhase) : void 0);
-		if (modelRef) {
-			if (!deps.resolveModelId) throw new Error("workflow runtime missing resolveModelId; cannot resolve real model id");
-			const model = deps.resolveModelId(modelRef);
-			return {
-				modelRef,
-				resolvedModelRef: modelToRef(model),
-				model
-			};
-		}
-		return {};
-	};
-	const agent = async (prompt, agentOptions = {}) => {
-		throwIfAborted();
-		if (budget.total !== null && budget.remaining() <= 0) throw new Error("workflow token budget exhausted");
-		if (state.agentCount >= maxSubagents) throw new Error(`workflow agent quota exhausted (max ${maxSubagents})`);
-		const taskPrompt = requireString(prompt, "agent prompt");
-		const normalized = normalizeAgentOptions(agentOptions);
-		const assignedPhase = normalized.phase ?? state.currentPhase;
-		const requestedLabel = normalized.label?.trim();
-		const modelSelection = resolveAgentModelSelection(normalized, assignedPhase);
-		state.agentCount += 1;
-		const id = state.agentCount;
-		const label = requestedLabel || defaultAgentLabel(assignedPhase, id);
-		const invocation = buildInvocationSnapshot({
-			prompt: taskPrompt,
-			label,
-			phase: assignedPhase,
-			normalized,
-			modelSelection
-		});
-		options.onAgentQueued?.({
-			id,
-			label,
-			phase: assignedPhase,
-			prompt: taskPrompt,
-			invocation
-		});
-		const runPromise = limiter(async () => {
-			options.onAgentStart?.({
-				id,
-				label,
-				phase: assignedPhase,
-				prompt: taskPrompt
-			});
-			try {
-				throwIfAborted();
-				const enhanced = options.enhanceSubagentRun?.({
-					id,
-					label,
-					phase: assignedPhase,
-					prompt: taskPrompt
-				});
-				const result = await deps.runner.run(taskPrompt, {
-					label,
-					schema: normalized.schema,
-					allowedToolNames: normalized.toolset,
-					maxIterations: normalized.maxIterations,
-					phase: assignedPhase,
-					signal: options.signal,
-					model: modelSelection.model,
-					...enhanced
-				});
-				throwIfAborted();
-				const status = result === null ? "error" : "done";
-				state.spent += estimateTokens(result);
-				options.onAgentEnd?.({
-					id,
-					label,
-					phase: assignedPhase,
-					result,
-					status
-				});
-				return result;
-			} catch (e) {
-				if (options.signal?.aborted) {
-					options.onAgentEnd?.({
-						id,
-						label,
-						phase: assignedPhase,
-						result: null,
-						status: "skipped"
-					});
-					throw e;
-				}
-				log(`agent ${label} failed: ${e instanceof Error ? e.message : String(e)}`);
-				options.onAgentEnd?.({
-					id,
-					label,
-					phase: assignedPhase,
-					result: null,
-					status: "error"
-				});
-				return null;
-			}
-		});
-		pendingAgentRuns.add(runPromise);
-		runPromise.then(() => pendingAgentRuns.delete(runPromise), () => pendingAgentRuns.delete(runPromise));
-		return runPromise;
-	};
-	const parallel = async (thunks) => {
-		throwIfAborted();
-		if (!Array.isArray(thunks)) throw new TypeError("parallel() expects an array of functions");
-		for (const t of thunks) if (typeof t !== "function") throw new TypeError("parallel() expects an array of functions, not promises. Wrap each call: () => agent(...)");
-		return Promise.all(thunks.map(async (thunk, index) => {
-			try {
-				return await thunk();
-			} catch (e) {
-				if (options.signal?.aborted) throw e;
-				log(`parallel[${index}] failed: ${e instanceof Error ? e.message : String(e)}`);
-				return null;
-			}
-		}));
-	};
-	const pipeline = async (items, ...stages) => {
-		throwIfAborted();
-		if (!Array.isArray(items)) throw new TypeError("pipeline() expects an array as the first argument");
-		for (const stage of stages) if (typeof stage !== "function") throw new TypeError("pipeline() stages must be functions: pipeline(items, item => ..., result => ...)");
-		const typedStages = stages;
-		return Promise.all(items.map(async (item, index) => {
-			let value = item;
-			for (const stage of typedStages) try {
-				throwIfAborted();
-				value = await stage(value, item, index);
-				throwIfAborted();
-			} catch (e) {
-				if (options.signal?.aborted) throw e;
-				log(`pipeline[${index}] failed: ${e instanceof Error ? e.message : String(e)}`);
-				return null;
-			}
-			return value;
-		}));
-	};
-	const context = createContext({
-		agent,
-		parallel,
-		pipeline,
-		log,
-		phase,
-		args: options.args,
-		cwd: options.cwd,
-		process: Object.freeze({ cwd: () => options.cwd }),
-		budget,
-		console: {
-			log,
-			info: log,
-			warn: (m) => log(`[warn] ${String(m)}`),
-			error: (m) => log(`[error] ${String(m)}`)
-		},
-		JSON,
-		Math,
-		Array,
-		Object,
-		String,
-		Number,
-		Boolean,
-		Set,
-		Map,
-		Promise
-	});
-	const script$ = new Script(`(async () => {\n${body}\n})()`, { filename: `${meta.name}.workflow.js` });
-	let result;
-	try {
-		result = await script$.runInContext(context);
-		await Promise.allSettled([...pendingAgentRuns]);
-	} catch (e) {
-		await Promise.allSettled([...pendingAgentRuns]);
-		throw rewriteScriptError(e);
-	}
-	assertStructuredCloneable(result, "workflow result");
-	return {
-		meta,
-		result,
-		logs: state.logs,
-		phases: state.phases,
-		agentCount: state.agentCount,
-		durationMs: Date.now() - started
-	};
-}
-function clampConcurrency(requested) {
-	if (typeof requested === "number" && Number.isFinite(requested) && requested >= 1) return Math.min(Math.floor(requested), DEFAULT_CONCURRENCY_CEILING);
-	let cpu = DEFAULT_CONCURRENCY_CEILING;
-	try {
-		cpu = availableParallelism();
-	} catch {}
-	return Math.max(DEFAULT_CONCURRENCY_FLOOR, Math.min(DEFAULT_CONCURRENCY_CEILING, cpu - 2));
-}
-function createLimiter(limit) {
-	let active = 0;
-	const queue = [];
-	const next = () => {
-		active -= 1;
-		const resume = queue.shift();
-		if (resume) resume();
-	};
-	return async (fn) => {
-		if (active >= limit) await new Promise((resolve) => queue.push(resolve));
-		active += 1;
-		try {
-			return await fn();
-		} finally {
-			next();
-		}
-	};
-}
-function buildPhaseModelMap(phases) {
-	const out = /* @__PURE__ */ new Map();
-	if (!phases) return out;
-	for (const p of phases) if (p && typeof p.title === "string" && typeof p.model === "string" && p.model.trim()) out.set(p.title, p.model.trim());
-	return out;
-}
-function requireString(value, name) {
-	if (typeof value !== "string") throw new TypeError(`${name} must be a string`);
-	return value;
-}
-function optionalString(value, name) {
-	if (value === void 0) return void 0;
-	return requireString(value, name);
-}
-function normalizeAgentOptions(value) {
-	if (value === void 0 || value === null) return {};
-	if (typeof value !== "object") throw new TypeError("agent options must be an object");
-	const options = value;
-	const toolset = options.toolset;
-	if (toolset !== void 0) {
-		if (!Array.isArray(toolset) || toolset.some((t) => typeof t !== "string")) throw new TypeError("agent toolset must be an array of strings");
-	}
-	const maxIterations = options.maxIterations;
-	if (maxIterations !== void 0) {
-		if (typeof maxIterations !== "number" || !Number.isFinite(maxIterations) || maxIterations < 1) throw new TypeError("agent maxIterations must be a positive number");
-	}
-	const modelStr = optionalString(options.model, "agent model");
-	return {
-		label: optionalString(options.label, "agent label"),
-		phase: optionalString(options.phase, "agent phase"),
-		schema: options.schema,
-		model: modelStr,
-		toolset,
-		maxIterations
-	};
-}
-function buildInvocationSnapshot(params) {
-	return compactObject({
-		prompt: params.prompt,
-		label: params.label,
-		phase: params.phase,
-		modelRef: params.modelSelection.modelRef,
-		resolvedModelRef: params.modelSelection.resolvedModelRef,
-		schema: cloneJsonValue(params.normalized.schema),
-		toolset: params.normalized.toolset ? [...params.normalized.toolset] : void 0,
-		maxIterations: params.normalized.maxIterations
-	});
-}
-function modelToRef(model) {
-	return `${model.provider}/${model.id}`;
-}
-function cloneJsonValue(value) {
-	if (value === void 0) return void 0;
-	return structuredClone(value);
-}
-function compactObject(value) {
-	for (const key of Object.keys(value)) if (value[key] === void 0) delete value[key];
-	return value;
-}
-function assertStructuredCloneable(value, name) {
-	try {
-		structuredClone(value);
-	} catch (e) {
-		const promisePath = findPromisePath(value, "");
-		if (promisePath !== null) throw new Error(`${name} contains a Promise at \`${promisePath || "<root>"}\` — missing 'await' before parallel()/pipeline()/agent(). Async return auto-unwraps a bare Promise, but a Promise nested in an object/array is returned as-is.`);
-		const detail = e instanceof Error ? ` ${e.message}` : "";
-		throw new Error(`${name} must be structured-cloneable; did you forget to await agent(), parallel(), or pipeline()?${detail}`);
-	}
-}
-/**
-* Find the first Promise lurking in `value`, returning a JS-path like
-* "results[0].pending". Returns null when no Promise is found. Bounded
-* depth/breadth so it never explodes on weird user shapes.
-*/
-function findPromisePath(value, path, depth = 0) {
-	if (depth > 4) return null;
-	if (isThenable(value)) return path;
-	if (Array.isArray(value)) {
-		for (let i = 0; i < Math.min(value.length, 32); i++) {
-			const inner = findPromisePath(value[i], `${path}[${i}]`, depth + 1);
-			if (inner !== null) return inner;
-		}
-		return null;
-	}
-	if (value !== null && typeof value === "object") {
-		let count = 0;
-		for (const [key, child] of Object.entries(value)) {
-			if (count++ > 32) break;
-			const inner = findPromisePath(child, path ? `${path}.${key}` : key, depth + 1);
-			if (inner !== null) return inner;
-		}
-	}
-	return null;
-}
-function isThenable(value) {
-	return value !== null && typeof value === "object" && typeof value.then === "function";
-}
-/**
-* Rewrite TypeErrors that look like "called .map on a Promise" with an
-* await-shaped hint. Static lint catches the obvious form at parse time;
-* this is the safety net for cases lint can't see (dynamic indirection,
-* values stashed in helper closures).
-*/
-const PROMISE_METHOD_ERROR = /\.(map|filter|forEach|flat|flatMap|find|some|every|reduce|join|length|then)\b is not a function/;
-function rewriteScriptError(error) {
-	const asError = error;
-	if (!(asError?.name === "TypeError" && typeof asError.message === "string")) return error instanceof Error ? error : new Error(String(error));
-	const message = asError.message;
-	if (!PROMISE_METHOD_ERROR.test(message)) return error instanceof Error ? error : new Error(message);
-	return /* @__PURE__ */ new Error(`${message}\n\nHint: parallel()/pipeline()/agent() return a Promise — 'await' the call before using its result.\n  ❌ const r = parallel(...); r.map(...)\n  ✅ const r = await parallel(...); r.map(...)`);
-}
-function defaultAgentLabel(phase, index) {
-	return phase ? `${phase} agent ${index}` : `agent ${index}`;
-}
-function estimateTokens(value) {
-	if (value === null || value === void 0) return 0;
-	try {
-		return Math.ceil(JSON.stringify(value).length / 4);
-	} catch {
-		return Math.ceil(String(value).length / 4);
-	}
-}
-//#endregion
-export { emptySnapshotFor, runWorkflow };
-
-//# sourceMappingURL=runtime.js.map

package/dist/src/agent/workflow/runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.js","names":[],"sources":["../../../../src/agent/workflow/runtime.ts"],"sourcesContent":["/**\n * Sandboxed workflow runtime.\n *\n * Parses the script via {@link parseWorkflowScript} (which strips the `meta`\n * export), wraps the remaining body in an async IIFE, and runs it inside a\n * Node `vm` context with a curated set of globals:\n *\n *   - `agent(prompt, opts)` — spawns a subagent through the injected\n *     {@link SubagentRunner} and returns its result (string, or schema-validated\n *     object). Failures resolve to `null`.\n *   - `parallel(thunks)` — concurrent fan-out; thunks (not promises!) so the\n *     limiter sees each agent() call.\n *   - `pipeline(items, ...stages)` — per-item sequential stages, items run\n *     concurrently (no stage barrier). Each stage receives\n *     `(prevResult, originalItem, index)`. A stage that throws drops that item\n *     to `null` and skips remaining stages.\n *   - `phase(title)` — marks the current phase; surfaces through `onPhase`.\n *   - `log(message)` — appends to the workflow log.\n *   - `budget` — `{ total, spent(), remaining() }` for self-pacing scripts.\n *   - `args`, `cwd`, `process.cwd()`.\n *\n * The runtime is the only code that touches `vm`. It exposes no IO surface,\n * carries no LLM dependency, and is fully driven by injected callbacks — that\n * means the workflow tool, tests, and any future runner share one runtime.\n */\n\nimport { availableParallelism } from 'node:os';\nimport { createContext, Script } from 'node:vm';\n\nimport type { Api, Model } from '@earendil-works/pi-ai';\n\nimport { parseWorkflowScript } from './parser.js';\nimport type {\n  AgentScriptOptions,\n  SubagentRunner,\n  WorkflowMetaPhase,\n  WorkflowRunOptions,\n  WorkflowRunResult,\n  WorkflowAgentStatus,\n  WorkflowAgentInvocationSnapshot,\n} from './types.js';\n\nconst DEFAULT_CONCURRENCY_FLOOR = 1;\nconst DEFAULT_CONCURRENCY_CEILING = 16;\nconst DEFAULT_MAX_SUBAGENTS = 1000;\n\ninterface RuntimeState {\n  currentPhase?: string;\n  logs: string[];\n  phases: string[];\n  agentCount: number;\n  spent: number;\n}\n\nexport interface RunWorkflowDeps {\n  runner: SubagentRunner;\n  /** Resolve a model ref (`provider/model` or configured typed id) to a {@link Model}. Throws on unknown ref. */\n  resolveModelId?: (modelId: string) => Model<Api>;\n}\n\nexport async function runWorkflow<T = unknown>(\n  script: string,\n  deps: RunWorkflowDeps,\n  options: WorkflowRunOptions,\n): Promise<WorkflowRunResult<T>> {\n  const started = Date.now();\n  const { meta, body } = parseWorkflowScript(script);\n\n  const state: RuntimeState = { logs: [], phases: [], agentCount: 0, spent: 0 };\n  const concurrency = clampConcurrency(options.concurrency);\n  const maxSubagents = Math.max(1, options.maxSubagents ?? DEFAULT_MAX_SUBAGENTS);\n  const limiter = createLimiter(concurrency);\n  const pendingAgentRuns = new Set<Promise<unknown>>();\n  const phaseDefaultModels = buildPhaseModelMap(meta.phases);\n\n  const log = (message: unknown) => {\n    const text = String(message);\n    state.logs.push(text);\n    options.onLog?.(text);\n  };\n\n  const phase = (title: unknown) => {\n    const text = requireString(title, 'phase title');\n    state.currentPhase = text;\n    if (!state.phases.includes(text)) state.phases.push(text);\n    options.onPhase?.(text);\n  };\n\n  const budget = Object.freeze({\n    total: options.tokenBudget ?? null,\n    spent: () => state.spent,\n    remaining: () =>\n      options.tokenBudget == null\n        ? Number.POSITIVE_INFINITY\n        : Math.max(0, options.tokenBudget - state.spent),\n  });\n\n  const throwIfAborted = () => {\n    if (!options.signal?.aborted) return;\n    const reason = options.signal.reason;\n    if (reason instanceof Error) throw reason;\n    if (reason) throw new Error(String(reason));\n    throw new Error('workflow aborted');\n  };\n\n  const resolveAgentModelSelection = (\n    normalized: AgentScriptOptions,\n    assignedPhase: string | undefined,\n  ): { modelRef?: string; resolvedModelRef?: string; model?: Model<Api> } => {\n    const modelRef = normalized.model?.trim() || (assignedPhase ? phaseDefaultModels.get(assignedPhase) : undefined);\n    if (modelRef) {\n      if (!deps.resolveModelId) {\n        throw new Error('workflow runtime missing resolveModelId; cannot resolve real model id');\n      }\n      const model = deps.resolveModelId(modelRef);\n      return { modelRef, resolvedModelRef: modelToRef(model), model };\n    }\n    return {};\n  };\n\n  const agent = async (prompt: unknown, agentOptions: unknown = {}) => {\n    throwIfAborted();\n    if (budget.total !== null && budget.remaining() <= 0) {\n      throw new Error('workflow token budget exhausted');\n    }\n    if (state.agentCount >= maxSubagents) {\n      throw new Error(`workflow agent quota exhausted (max ${maxSubagents})`);\n    }\n\n    const taskPrompt = requireString(prompt, 'agent prompt');\n    const normalized = normalizeAgentOptions(agentOptions);\n    const assignedPhase = normalized.phase ?? state.currentPhase;\n    const requestedLabel = normalized.label?.trim();\n    const modelSelection = resolveAgentModelSelection(normalized, assignedPhase);\n\n    state.agentCount += 1;\n    const id = state.agentCount;\n    const label = requestedLabel || defaultAgentLabel(assignedPhase, id);\n    const invocation = buildInvocationSnapshot({\n      prompt: taskPrompt,\n      label,\n      phase: assignedPhase,\n      normalized,\n      modelSelection,\n    });\n    options.onAgentQueued?.({ id, label, phase: assignedPhase, prompt: taskPrompt, invocation });\n\n    const runPromise = limiter(async () => {\n      options.onAgentStart?.({ id, label, phase: assignedPhase, prompt: taskPrompt });\n\n      try {\n        throwIfAborted();\n        const enhanced = options.enhanceSubagentRun?.({\n          id,\n          label,\n          phase: assignedPhase,\n          prompt: taskPrompt,\n        });\n        const result = await deps.runner.run<unknown>(taskPrompt, {\n          label,\n          schema: normalized.schema,\n          allowedToolNames: normalized.toolset,\n          maxIterations: normalized.maxIterations,\n          phase: assignedPhase,\n          signal: options.signal,\n          model: modelSelection.model,\n          ...enhanced,\n        });\n        throwIfAborted();\n\n        const status: WorkflowAgentStatus = result === null ? 'error' : 'done';\n        state.spent += estimateTokens(result);\n        options.onAgentEnd?.({ id, label, phase: assignedPhase, result, status });\n        return result;\n      } catch (e) {\n        if (options.signal?.aborted) {\n          options.onAgentEnd?.({ id, label, phase: assignedPhase, result: null, status: 'skipped' });\n          throw e;\n        }\n        const message = e instanceof Error ? e.message : String(e);\n        log(`agent ${label} failed: ${message}`);\n        options.onAgentEnd?.({ id, label, phase: assignedPhase, result: null, status: 'error' });\n        return null;\n      }\n    });\n\n    pendingAgentRuns.add(runPromise);\n    // `then` (not `finally`) keeps the bookkeeping promise from re-throwing into\n    // the unhandled-rejection channel when `runPromise` rejects on abort.\n    runPromise.then(\n      () => pendingAgentRuns.delete(runPromise),\n      () => pendingAgentRuns.delete(runPromise),\n    );\n    return runPromise;\n  };\n\n  const parallel = async (thunks: unknown) => {\n    throwIfAborted();\n    if (!Array.isArray(thunks)) throw new TypeError('parallel() expects an array of functions');\n    for (const t of thunks) {\n      if (typeof t !== 'function') {\n        throw new TypeError(\n          'parallel() expects an array of functions, not promises. Wrap each call: () => agent(...)',\n        );\n      }\n    }\n    return Promise.all(\n      thunks.map(async (thunk, index) => {\n        try {\n          return await (thunk as () => unknown)();\n        } catch (e) {\n          if (options.signal?.aborted) throw e;\n          const message = e instanceof Error ? e.message : String(e);\n          log(`parallel[${index}] failed: ${message}`);\n          return null;\n        }\n      }),\n    );\n  };\n\n  const pipeline = async (items: unknown, ...stages: Array<unknown>) => {\n    throwIfAborted();\n    if (!Array.isArray(items)) {\n      throw new TypeError('pipeline() expects an array as the first argument');\n    }\n    for (const stage of stages) {\n      if (typeof stage !== 'function') {\n        throw new TypeError(\n          'pipeline() stages must be functions: pipeline(items, item => ..., result => ...)',\n        );\n      }\n    }\n    const typedStages = stages as Array<\n      (prev: unknown, original: unknown, index: number) => unknown\n    >;\n    return Promise.all(\n      items.map(async (item, index) => {\n        let value: unknown = item;\n        for (const stage of typedStages) {\n          try {\n            throwIfAborted();\n            value = await stage(value, item, index);\n            throwIfAborted();\n          } catch (e) {\n            if (options.signal?.aborted) throw e;\n            const message = e instanceof Error ? e.message : String(e);\n            log(`pipeline[${index}] failed: ${message}`);\n            return null;\n          }\n        }\n        return value;\n      }),\n    );\n  };\n\n  const context = createContext({\n    agent,\n    parallel,\n    pipeline,\n    log,\n    phase,\n    args: options.args,\n    cwd: options.cwd,\n    process: Object.freeze({ cwd: () => options.cwd }),\n    budget,\n    console: {\n      log,\n      info: log,\n      warn: (m: unknown) => log(`[warn] ${String(m)}`),\n      error: (m: unknown) => log(`[error] ${String(m)}`),\n    },\n    JSON,\n    Math,\n    Array,\n    Object,\n    String,\n    Number,\n    Boolean,\n    Set,\n    Map,\n    Promise,\n  });\n\n  const wrapped = `(async () => {\\n${body}\\n})()`;\n  const script$ = new Script(wrapped, { filename: `${meta.name}.workflow.js` });\n\n  let result: unknown;\n  try {\n    result = await script$.runInContext(context);\n    // Wait for any agent() runs the script forgot to await before declaring success.\n    await Promise.allSettled([...pendingAgentRuns]);\n  } catch (e) {\n    // Drain pending agent calls before propagating, so the snapshot reflects final state.\n    await Promise.allSettled([...pendingAgentRuns]);\n    throw rewriteScriptError(e);\n  }\n\n  assertStructuredCloneable(result, 'workflow result');\n\n  return {\n    meta,\n    result: result as T,\n    logs: state.logs,\n    phases: state.phases,\n    agentCount: state.agentCount,\n    durationMs: Date.now() - started,\n  };\n}\n\nexport { emptySnapshotFor } from './snapshot-empty.js';\n\n// ---------------------------------------------------------------------------\n// Internals\n// ---------------------------------------------------------------------------\n\nfunction clampConcurrency(requested?: number): number {\n  if (typeof requested === 'number' && Number.isFinite(requested) && requested >= 1) {\n    return Math.min(Math.floor(requested), DEFAULT_CONCURRENCY_CEILING);\n  }\n  let cpu = DEFAULT_CONCURRENCY_CEILING;\n  try {\n    cpu = availableParallelism();\n  } catch {\n    // Some sandboxes throw; fall back to the ceiling.\n  }\n  return Math.max(DEFAULT_CONCURRENCY_FLOOR, Math.min(DEFAULT_CONCURRENCY_CEILING, cpu - 2));\n}\n\nfunction createLimiter(limit: number) {\n  let active = 0;\n  const queue: Array<() => void> = [];\n  const next = () => {\n    active -= 1;\n    const resume = queue.shift();\n    if (resume) resume();\n  };\n  return async <T>(fn: () => Promise<T>): Promise<T> => {\n    if (active >= limit) {\n      await new Promise<void>((resolve) => queue.push(resolve));\n    }\n    active += 1;\n    try {\n      return await fn();\n    } finally {\n      next();\n    }\n  };\n}\n\nfunction buildPhaseModelMap(phases: WorkflowMetaPhase[] | undefined): Map<string, string> {\n  const out = new Map<string, string>();\n  if (!phases) return out;\n  for (const p of phases) {\n    if (p && typeof p.title === 'string' && typeof p.model === 'string' && p.model.trim()) {\n      out.set(p.title, p.model.trim());\n    }\n  }\n  return out;\n}\n\nfunction requireString(value: unknown, name: string): string {\n  if (typeof value !== 'string') throw new TypeError(`${name} must be a string`);\n  return value;\n}\n\nfunction optionalString(value: unknown, name: string): string | undefined {\n  if (value === undefined) return undefined;\n  return requireString(value, name);\n}\n\nfunction normalizeAgentOptions(value: unknown): AgentScriptOptions {\n  if (value === undefined || value === null) return {};\n  if (typeof value !== 'object') throw new TypeError('agent options must be an object');\n  const options = value as AgentScriptOptions;\n  const toolset = options.toolset;\n  if (toolset !== undefined) {\n    if (!Array.isArray(toolset) || toolset.some((t) => typeof t !== 'string')) {\n      throw new TypeError('agent toolset must be an array of strings');\n    }\n  }\n  const maxIterations = options.maxIterations;\n  if (maxIterations !== undefined) {\n    if (typeof maxIterations !== 'number' || !Number.isFinite(maxIterations) || maxIterations < 1) {\n      throw new TypeError('agent maxIterations must be a positive number');\n    }\n  }\n  const modelStr = optionalString(options.model, 'agent model');\n  return {\n    label: optionalString(options.label, 'agent label'),\n    phase: optionalString(options.phase, 'agent phase'),\n    schema: options.schema,\n    model: modelStr,\n    toolset,\n    maxIterations,\n  };\n}\n\nfunction buildInvocationSnapshot(params: {\n  prompt: string;\n  label: string;\n  phase: string | undefined;\n  normalized: AgentScriptOptions;\n  modelSelection: { modelRef?: string; resolvedModelRef?: string };\n}): WorkflowAgentInvocationSnapshot {\n  return compactObject({\n    prompt: params.prompt,\n    label: params.label,\n    phase: params.phase,\n    modelRef: params.modelSelection.modelRef,\n    resolvedModelRef: params.modelSelection.resolvedModelRef,\n    schema: cloneJsonValue(params.normalized.schema),\n    toolset: params.normalized.toolset ? [...params.normalized.toolset] : undefined,\n    maxIterations: params.normalized.maxIterations,\n  });\n}\n\nfunction modelToRef(model: Model<Api>): string {\n  return `${model.provider}/${model.id}`;\n}\n\nfunction cloneJsonValue<T>(value: T | undefined): T | undefined {\n  if (value === undefined) return undefined;\n  return structuredClone(value);\n}\n\nfunction compactObject<T extends Record<string, unknown>>(value: T): T {\n  for (const key of Object.keys(value)) {\n    if (value[key] === undefined) delete value[key];\n  }\n  return value;\n}\n\nfunction assertStructuredCloneable(value: unknown, name: string): void {\n  try {\n    structuredClone(value);\n  } catch (e) {\n    const promisePath = findPromisePath(value, '');\n    if (promisePath !== null) {\n      throw new Error(\n        `${name} contains a Promise at \\`${promisePath || '<root>'}\\` — missing 'await' before parallel()/pipeline()/agent(). ` +\n          `Async return auto-unwraps a bare Promise, but a Promise nested in an object/array is returned as-is.`,\n      );\n    }\n    const detail = e instanceof Error ? ` ${e.message}` : '';\n    throw new Error(\n      `${name} must be structured-cloneable; did you forget to await agent(), parallel(), or pipeline()?${detail}`,\n    );\n  }\n}\n\n/**\n * Find the first Promise lurking in `value`, returning a JS-path like\n * \"results[0].pending\". Returns null when no Promise is found. Bounded\n * depth/breadth so it never explodes on weird user shapes.\n */\nfunction findPromisePath(value: unknown, path: string, depth = 0): string | null {\n  if (depth > 4) return null;\n  if (isThenable(value)) return path;\n  if (Array.isArray(value)) {\n    for (let i = 0; i < Math.min(value.length, 32); i++) {\n      const inner = findPromisePath(value[i], `${path}[${i}]`, depth + 1);\n      if (inner !== null) return inner;\n    }\n    return null;\n  }\n  if (value !== null && typeof value === 'object') {\n    let count = 0;\n    for (const [key, child] of Object.entries(value as Record<string, unknown>)) {\n      if (count++ > 32) break;\n      const inner = findPromisePath(child, path ? `${path}.${key}` : key, depth + 1);\n      if (inner !== null) return inner;\n    }\n  }\n  return null;\n}\n\nfunction isThenable(value: unknown): boolean {\n  return (\n    value !== null &&\n    typeof value === 'object' &&\n    typeof (value as { then?: unknown }).then === 'function'\n  );\n}\n\n/**\n * Rewrite TypeErrors that look like \"called .map on a Promise\" with an\n * await-shaped hint. Static lint catches the obvious form at parse time;\n * this is the safety net for cases lint can't see (dynamic indirection,\n * values stashed in helper closures).\n */\nconst PROMISE_METHOD_ERROR =\n  /\\.(map|filter|forEach|flat|flatMap|find|some|every|reduce|join|length|then)\\b is not a function/;\n\nfunction rewriteScriptError(error: unknown): Error {\n  // VM-context errors aren't `instanceof` host classes (the vm has its own\n  // global constructors), so check by name + duck-typing message.\n  const asError = error as { name?: string; message?: string } | null | undefined;\n  const isTypeError = asError?.name === 'TypeError' && typeof asError.message === 'string';\n  if (!isTypeError) {\n    return error instanceof Error ? error : new Error(String(error));\n  }\n  const message = (asError as { message: string }).message;\n  if (!PROMISE_METHOD_ERROR.test(message)) {\n    return error instanceof Error ? error : new Error(message);\n  }\n  return new Error(\n    `${message}\\n\\nHint: parallel()/pipeline()/agent() return a Promise — 'await' the call before using its result.\\n` +\n      `  ❌ const r = parallel(...); r.map(...)\\n` +\n      `  ✅ const r = await parallel(...); r.map(...)`,\n  );\n}\n\nfunction defaultAgentLabel(phase: string | undefined, index: number): string {\n  return phase ? `${phase} agent ${index}` : `agent ${index}`;\n}\n\nfunction estimateTokens(value: unknown): number {\n  if (value === null || value === undefined) return 0;\n  try {\n    return Math.ceil(JSON.stringify(value).length / 4);\n  } catch {\n    return Math.ceil(String(value).length / 4);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,MAAM,4BAA4B;AAClC,MAAM,8BAA8B;AACpC,MAAM,wBAAwB;AAgB9B,eAAsB,YACpB,QACA,MACA,SAC+B;CAC/B,MAAM,UAAU,KAAK,KAAK;CAC1B,MAAM,EAAE,MAAM,SAAS,oBAAoB,OAAO;CAElD,MAAM,QAAsB;EAAE,MAAM,EAAE;EAAE,QAAQ,EAAE;EAAE,YAAY;EAAG,OAAO;EAAG;CAC7E,MAAM,cAAc,iBAAiB,QAAQ,YAAY;CACzD,MAAM,eAAe,KAAK,IAAI,GAAG,QAAQ,gBAAgB,sBAAsB;CAC/E,MAAM,UAAU,cAAc,YAAY;CAC1C,MAAM,mCAAmB,IAAI,KAAuB;CACpD,MAAM,qBAAqB,mBAAmB,KAAK,OAAO;CAE1D,MAAM,OAAO,YAAqB;EAChC,MAAM,OAAO,OAAO,QAAQ;AAC5B,QAAM,KAAK,KAAK,KAAK;AACrB,UAAQ,QAAQ,KAAK;;CAGvB,MAAM,SAAS,UAAmB;EAChC,MAAM,OAAO,cAAc,OAAO,cAAc;AAChD,QAAM,eAAe;AACrB,MAAI,CAAC,MAAM,OAAO,SAAS,KAAK,CAAE,OAAM,OAAO,KAAK,KAAK;AACzD,UAAQ,UAAU,KAAK;;CAGzB,MAAM,SAAS,OAAO,OAAO;EAC3B,OAAO,QAAQ,eAAe;EAC9B,aAAa,MAAM;EACnB,iBACE,QAAQ,eAAe,OACnB,OAAO,oBACP,KAAK,IAAI,GAAG,QAAQ,cAAc,MAAM,MAAM;EACrD,CAAC;CAEF,MAAM,uBAAuB;AAC3B,MAAI,CAAC,QAAQ,QAAQ,QAAS;EAC9B,MAAM,SAAS,QAAQ,OAAO;AAC9B,MAAI,kBAAkB,MAAO,OAAM;AACnC,MAAI,OAAQ,OAAM,IAAI,MAAM,OAAO,OAAO,CAAC;AAC3C,QAAM,IAAI,MAAM,mBAAmB;;CAGrC,MAAM,8BACJ,YACA,kBACyE;EACzE,MAAM,WAAW,WAAW,OAAO,MAAM,KAAK,gBAAgB,mBAAmB,IAAI,cAAc,GAAG,KAAA;AACtG,MAAI,UAAU;AACZ,OAAI,CAAC,KAAK,eACR,OAAM,IAAI,MAAM,wEAAwE;GAE1F,MAAM,QAAQ,KAAK,eAAe,SAAS;AAC3C,UAAO;IAAE;IAAU,kBAAkB,WAAW,MAAM;IAAE;IAAO;;AAEjE,SAAO,EAAE;;CAGX,MAAM,QAAQ,OAAO,QAAiB,eAAwB,EAAE,KAAK;AACnE,kBAAgB;AAChB,MAAI,OAAO,UAAU,QAAQ,OAAO,WAAW,IAAI,EACjD,OAAM,IAAI,MAAM,kCAAkC;AAEpD,MAAI,MAAM,cAAc,aACtB,OAAM,IAAI,MAAM,uCAAuC,aAAa,GAAG;EAGzE,MAAM,aAAa,cAAc,QAAQ,eAAe;EACxD,MAAM,aAAa,sBAAsB,aAAa;EACtD,MAAM,gBAAgB,WAAW,SAAS,MAAM;EAChD,MAAM,iBAAiB,WAAW,OAAO,MAAM;EAC/C,MAAM,iBAAiB,2BAA2B,YAAY,cAAc;AAE5E,QAAM,cAAc;EACpB,MAAM,KAAK,MAAM;EACjB,MAAM,QAAQ,kBAAkB,kBAAkB,eAAe,GAAG;EACpE,MAAM,aAAa,wBAAwB;GACzC,QAAQ;GACR;GACA,OAAO;GACP;GACA;GACD,CAAC;AACF,UAAQ,gBAAgB;GAAE;GAAI;GAAO,OAAO;GAAe,QAAQ;GAAY;GAAY,CAAC;EAE5F,MAAM,aAAa,QAAQ,YAAY;AACrC,WAAQ,eAAe;IAAE;IAAI;IAAO,OAAO;IAAe,QAAQ;IAAY,CAAC;AAE/E,OAAI;AACF,oBAAgB;IAChB,MAAM,WAAW,QAAQ,qBAAqB;KAC5C;KACA;KACA,OAAO;KACP,QAAQ;KACT,CAAC;IACF,MAAM,SAAS,MAAM,KAAK,OAAO,IAAa,YAAY;KACxD;KACA,QAAQ,WAAW;KACnB,kBAAkB,WAAW;KAC7B,eAAe,WAAW;KAC1B,OAAO;KACP,QAAQ,QAAQ;KAChB,OAAO,eAAe;KACtB,GAAG;KACJ,CAAC;AACF,oBAAgB;IAEhB,MAAM,SAA8B,WAAW,OAAO,UAAU;AAChE,UAAM,SAAS,eAAe,OAAO;AACrC,YAAQ,aAAa;KAAE;KAAI;KAAO,OAAO;KAAe;KAAQ;KAAQ,CAAC;AACzE,WAAO;YACA,GAAG;AACV,QAAI,QAAQ,QAAQ,SAAS;AAC3B,aAAQ,aAAa;MAAE;MAAI;MAAO,OAAO;MAAe,QAAQ;MAAM,QAAQ;MAAW,CAAC;AAC1F,WAAM;;AAGR,QAAI,SAAS,MAAM,WADH,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GAClB;AACxC,YAAQ,aAAa;KAAE;KAAI;KAAO,OAAO;KAAe,QAAQ;KAAM,QAAQ;KAAS,CAAC;AACxF,WAAO;;IAET;AAEF,mBAAiB,IAAI,WAAW;AAGhC,aAAW,WACH,iBAAiB,OAAO,WAAW,QACnC,iBAAiB,OAAO,WAAW,CAC1C;AACD,SAAO;;CAGT,MAAM,WAAW,OAAO,WAAoB;AAC1C,kBAAgB;AAChB,MAAI,CAAC,MAAM,QAAQ,OAAO,CAAE,OAAM,IAAI,UAAU,2CAA2C;AAC3F,OAAK,MAAM,KAAK,OACd,KAAI,OAAO,MAAM,WACf,OAAM,IAAI,UACR,2FACD;AAGL,SAAO,QAAQ,IACb,OAAO,IAAI,OAAO,OAAO,UAAU;AACjC,OAAI;AACF,WAAO,MAAO,OAAyB;YAChC,GAAG;AACV,QAAI,QAAQ,QAAQ,QAAS,OAAM;AAEnC,QAAI,YAAY,MAAM,YADN,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GACd;AAC5C,WAAO;;IAET,CACH;;CAGH,MAAM,WAAW,OAAO,OAAgB,GAAG,WAA2B;AACpE,kBAAgB;AAChB,MAAI,CAAC,MAAM,QAAQ,MAAM,CACvB,OAAM,IAAI,UAAU,oDAAoD;AAE1E,OAAK,MAAM,SAAS,OAClB,KAAI,OAAO,UAAU,WACnB,OAAM,IAAI,UACR,mFACD;EAGL,MAAM,cAAc;AAGpB,SAAO,QAAQ,IACb,MAAM,IAAI,OAAO,MAAM,UAAU;GAC/B,IAAI,QAAiB;AACrB,QAAK,MAAM,SAAS,YAClB,KAAI;AACF,oBAAgB;AAChB,YAAQ,MAAM,MAAM,OAAO,MAAM,MAAM;AACvC,oBAAgB;YACT,GAAG;AACV,QAAI,QAAQ,QAAQ,QAAS,OAAM;AAEnC,QAAI,YAAY,MAAM,YADN,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GACd;AAC5C,WAAO;;AAGX,UAAO;IACP,CACH;;CAGH,MAAM,UAAU,cAAc;EAC5B;EACA;EACA;EACA;EACA;EACA,MAAM,QAAQ;EACd,KAAK,QAAQ;EACb,SAAS,OAAO,OAAO,EAAE,WAAW,QAAQ,KAAK,CAAC;EAClD;EACA,SAAS;GACP;GACA,MAAM;GACN,OAAO,MAAe,IAAI,UAAU,OAAO,EAAE,GAAG;GAChD,QAAQ,MAAe,IAAI,WAAW,OAAO,EAAE,GAAG;GACnD;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CAGF,MAAM,UAAU,IAAI,OAAO,mBADQ,KAAK,SACJ,EAAE,UAAU,GAAG,KAAK,KAAK,eAAe,CAAC;CAE7E,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,QAAQ,aAAa,QAAQ;AAE5C,QAAM,QAAQ,WAAW,CAAC,GAAG,iBAAiB,CAAC;UACxC,GAAG;AAEV,QAAM,QAAQ,WAAW,CAAC,GAAG,iBAAiB,CAAC;AAC/C,QAAM,mBAAmB,EAAE;;AAG7B,2BAA0B,QAAQ,kBAAkB;AAEpD,QAAO;EACL;EACQ;EACR,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,YAAY,KAAK,KAAK,GAAG;EAC1B;;AASH,SAAS,iBAAiB,WAA4B;AACpD,KAAI,OAAO,cAAc,YAAY,OAAO,SAAS,UAAU,IAAI,aAAa,EAC9E,QAAO,KAAK,IAAI,KAAK,MAAM,UAAU,EAAE,4BAA4B;CAErE,IAAI,MAAM;AACV,KAAI;AACF,QAAM,sBAAsB;SACtB;AAGR,QAAO,KAAK,IAAI,2BAA2B,KAAK,IAAI,6BAA6B,MAAM,EAAE,CAAC;;AAG5F,SAAS,cAAc,OAAe;CACpC,IAAI,SAAS;CACb,MAAM,QAA2B,EAAE;CACnC,MAAM,aAAa;AACjB,YAAU;EACV,MAAM,SAAS,MAAM,OAAO;AAC5B,MAAI,OAAQ,SAAQ;;AAEtB,QAAO,OAAU,OAAqC;AACpD,MAAI,UAAU,MACZ,OAAM,IAAI,SAAe,YAAY,MAAM,KAAK,QAAQ,CAAC;AAE3D,YAAU;AACV,MAAI;AACF,UAAO,MAAM,IAAI;YACT;AACR,SAAM;;;;AAKZ,SAAS,mBAAmB,QAA8D;CACxF,MAAM,sBAAM,IAAI,KAAqB;AACrC,KAAI,CAAC,OAAQ,QAAO;AACpB,MAAK,MAAM,KAAK,OACd,KAAI,KAAK,OAAO,EAAE,UAAU,YAAY,OAAO,EAAE,UAAU,YAAY,EAAE,MAAM,MAAM,CACnF,KAAI,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAGpC,QAAO;;AAGT,SAAS,cAAc,OAAgB,MAAsB;AAC3D,KAAI,OAAO,UAAU,SAAU,OAAM,IAAI,UAAU,GAAG,KAAK,mBAAmB;AAC9E,QAAO;;AAGT,SAAS,eAAe,OAAgB,MAAkC;AACxE,KAAI,UAAU,KAAA,EAAW,QAAO,KAAA;AAChC,QAAO,cAAc,OAAO,KAAK;;AAGnC,SAAS,sBAAsB,OAAoC;AACjE,KAAI,UAAU,KAAA,KAAa,UAAU,KAAM,QAAO,EAAE;AACpD,KAAI,OAAO,UAAU,SAAU,OAAM,IAAI,UAAU,kCAAkC;CACrF,MAAM,UAAU;CAChB,MAAM,UAAU,QAAQ;AACxB,KAAI,YAAY,KAAA;MACV,CAAC,MAAM,QAAQ,QAAQ,IAAI,QAAQ,MAAM,MAAM,OAAO,MAAM,SAAS,CACvE,OAAM,IAAI,UAAU,4CAA4C;;CAGpE,MAAM,gBAAgB,QAAQ;AAC9B,KAAI,kBAAkB,KAAA;MAChB,OAAO,kBAAkB,YAAY,CAAC,OAAO,SAAS,cAAc,IAAI,gBAAgB,EAC1F,OAAM,IAAI,UAAU,gDAAgD;;CAGxE,MAAM,WAAW,eAAe,QAAQ,OAAO,cAAc;AAC7D,QAAO;EACL,OAAO,eAAe,QAAQ,OAAO,cAAc;EACnD,OAAO,eAAe,QAAQ,OAAO,cAAc;EACnD,QAAQ,QAAQ;EAChB,OAAO;EACP;EACA;EACD;;AAGH,SAAS,wBAAwB,QAMG;AAClC,QAAO,cAAc;EACnB,QAAQ,OAAO;EACf,OAAO,OAAO;EACd,OAAO,OAAO;EACd,UAAU,OAAO,eAAe;EAChC,kBAAkB,OAAO,eAAe;EACxC,QAAQ,eAAe,OAAO,WAAW,OAAO;EAChD,SAAS,OAAO,WAAW,UAAU,CAAC,GAAG,OAAO,WAAW,QAAQ,GAAG,KAAA;EACtE,eAAe,OAAO,WAAW;EAClC,CAAC;;AAGJ,SAAS,WAAW,OAA2B;AAC7C,QAAO,GAAG,MAAM,SAAS,GAAG,MAAM;;AAGpC,SAAS,eAAkB,OAAqC;AAC9D,KAAI,UAAU,KAAA,EAAW,QAAO,KAAA;AAChC,QAAO,gBAAgB,MAAM;;AAG/B,SAAS,cAAiD,OAAa;AACrE,MAAK,MAAM,OAAO,OAAO,KAAK,MAAM,CAClC,KAAI,MAAM,SAAS,KAAA,EAAW,QAAO,MAAM;AAE7C,QAAO;;AAGT,SAAS,0BAA0B,OAAgB,MAAoB;AACrE,KAAI;AACF,kBAAgB,MAAM;UACf,GAAG;EACV,MAAM,cAAc,gBAAgB,OAAO,GAAG;AAC9C,MAAI,gBAAgB,KAClB,OAAM,IAAI,MACR,GAAG,KAAK,2BAA2B,eAAe,SAAS,iKAE5D;EAEH,MAAM,SAAS,aAAa,QAAQ,IAAI,EAAE,YAAY;AACtD,QAAM,IAAI,MACR,GAAG,KAAK,4FAA4F,SACrG;;;;;;;;AASL,SAAS,gBAAgB,OAAgB,MAAc,QAAQ,GAAkB;AAC/E,KAAI,QAAQ,EAAG,QAAO;AACtB,KAAI,WAAW,MAAM,CAAE,QAAO;AAC9B,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,IAAI,MAAM,QAAQ,GAAG,EAAE,KAAK;GACnD,MAAM,QAAQ,gBAAgB,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,IAAI,QAAQ,EAAE;AACnE,OAAI,UAAU,KAAM,QAAO;;AAE7B,SAAO;;AAET,KAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;EAC/C,IAAI,QAAQ;AACZ,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAiC,EAAE;AAC3E,OAAI,UAAU,GAAI;GAClB,MAAM,QAAQ,gBAAgB,OAAO,OAAO,GAAG,KAAK,GAAG,QAAQ,KAAK,QAAQ,EAAE;AAC9E,OAAI,UAAU,KAAM,QAAO;;;AAG/B,QAAO;;AAGT,SAAS,WAAW,OAAyB;AAC3C,QACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAQ,MAA6B,SAAS;;;;;;;;AAUlD,MAAM,uBACJ;AAEF,SAAS,mBAAmB,OAAuB;CAGjD,MAAM,UAAU;AAEhB,KAAI,EADgB,SAAS,SAAS,eAAe,OAAO,QAAQ,YAAY,UAE9E,QAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC;CAElE,MAAM,UAAW,QAAgC;AACjD,KAAI,CAAC,qBAAqB,KAAK,QAAQ,CACrC,QAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,QAAQ;AAE5D,wBAAO,IAAI,MACT,GAAG,QAAQ,8LAGZ;;AAGH,SAAS,kBAAkB,OAA2B,OAAuB;AAC3E,QAAO,QAAQ,GAAG,MAAM,SAAS,UAAU,SAAS;;AAGtD,SAAS,eAAe,OAAwB;AAC9C,KAAI,UAAU,QAAQ,UAAU,KAAA,EAAW,QAAO;AAClD,KAAI;AACF,SAAO,KAAK,KAAK,KAAK,UAAU,MAAM,CAAC,SAAS,EAAE;SAC5C;AACN,SAAO,KAAK,KAAK,OAAO,MAAM,CAAC,SAAS,EAAE"}

package/dist/src/connectors/oauth.d.ts

@@ -1,22 +0,0 @@
-import { CredentialResolver } from '../auth/credentials.js';
-import type { ConnectorDefinition } from './types.js';
-export type ConnectorOAuthStartResult = {
-    connectorId: string;
-    provider: 'github';
-    deviceCode: string;
-    userCode: string;
-    verificationUri: string;
-    expiresInSeconds: number;
-    intervalSeconds: number;
-};
-export type ConnectorOAuthCompleteResult = {
-    connectorId: string;
-    provider: 'github';
-    connected: true;
-};
-export declare function githubConnectorOAuthCredentialProviderId(definition: ConnectorDefinition): string;
-export declare function assertConnectorOAuthReady(definition: ConnectorDefinition, resolver?: CredentialResolver): Promise<void>;
-export declare function startConnectorOAuth(definition: ConnectorDefinition): Promise<ConnectorOAuthStartResult>;
-export declare function completeConnectorOAuth(definition: ConnectorDefinition, params: {
-    deviceCode: string;
-}, resolver?: CredentialResolver): Promise<ConnectorOAuthCompleteResult>;

package/dist/src/connectors/oauth.js

@@ -1,99 +0,0 @@
-import { CredentialResolver, init_credentials } from "../auth/credentials.js";
-import { connectorSecretProviderId } from "./secret-store.js";
-//#region src/connectors/oauth.ts
-init_credentials();
-const GITHUB_DEVICE_CODE_URL = "https://github.com/login/device/code";
-const GITHUB_ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
-const GITHUB_OAUTH_FIELD_KEY = "GITHUB_PERSONAL_ACCESS_TOKEN";
-const DEFAULT_GITHUB_SCOPES = [
-	"repo",
-	"read:user",
-	"read:org"
-];
-function githubOAuthClientId() {
-	const clientId = process.env.XOPC_GITHUB_OAUTH_CLIENT_ID?.trim() ?? "";
-	if (!clientId) throw new Error("GitHub OAuth is not configured. Set XOPC_GITHUB_OAUTH_CLIENT_ID to enable GitHub Connect.");
-	return clientId;
-}
-function assertConnectorSupportsOAuth(definition) {
-	if (definition.auth.mode !== "oauth" || !definition.capabilities.includes("auth.oauth")) throw new Error(`Connector "${definition.id}" does not support OAuth.`);
-	if (definition.id !== "github") throw new Error(`OAuth provider is not implemented for connector: ${definition.id}`);
-}
-async function readJsonResponse(response, context) {
-	const data = await response.json().catch(async () => ({ error_description: await response.text() }));
-	if (!response.ok) {
-		const errorData = data;
-		throw new Error(`${context}: ${errorData.error_description ?? errorData.error ?? response.statusText}`);
-	}
-	return data;
-}
-function githubConnectorOAuthCredentialProviderId(definition) {
-	return connectorSecretProviderId(definition.id, GITHUB_OAUTH_FIELD_KEY);
-}
-async function assertConnectorOAuthReady(definition, resolver = new CredentialResolver()) {
-	if (definition.auth.mode !== "oauth") return;
-	assertConnectorSupportsOAuth(definition);
-	if (!(await resolver.loadOAuthToken(githubConnectorOAuthCredentialProviderId(definition)))?.access) throw new Error(`Connect ${definition.displayName} with OAuth before installing this connector.`);
-}
-async function startConnectorOAuth(definition) {
-	assertConnectorSupportsOAuth(definition);
-	const clientId = githubOAuthClientId();
-	const data = await readJsonResponse(await fetch(GITHUB_DEVICE_CODE_URL, {
-		method: "POST",
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json"
-		},
-		body: JSON.stringify({
-			client_id: clientId,
-			scope: DEFAULT_GITHUB_SCOPES.join(" ")
-		})
-	}), "GitHub device authorization failed");
-	return {
-		connectorId: definition.id,
-		provider: "github",
-		deviceCode: data.device_code,
-		userCode: data.user_code,
-		verificationUri: data.verification_uri,
-		expiresInSeconds: data.expires_in,
-		intervalSeconds: data.interval ?? 5
-	};
-}
-async function completeConnectorOAuth(definition, params, resolver = new CredentialResolver()) {
-	assertConnectorSupportsOAuth(definition);
-	const deviceCode = params.deviceCode.trim();
-	if (!deviceCode) throw new Error("Missing GitHub OAuth device code.");
-	const data = await readJsonResponse(await fetch(GITHUB_ACCESS_TOKEN_URL, {
-		method: "POST",
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/json"
-		},
-		body: JSON.stringify({
-			client_id: githubOAuthClientId(),
-			device_code: deviceCode,
-			grant_type: "urn:ietf:params:oauth:grant-type:device_code"
-		})
-	}), "GitHub token exchange failed");
-	if (data.error) {
-		if (data.error === "authorization_pending") throw new Error("GitHub authorization is still pending. Complete the browser step and try again.");
-		if (data.error === "slow_down") throw new Error("GitHub asked us to slow down. Wait a few seconds and try again.");
-		throw new Error(data.error_description ?? data.error);
-	}
-	if (!data.access_token) throw new Error("GitHub token exchange did not return an access token.");
-	await resolver.saveOAuthToken(githubConnectorOAuthCredentialProviderId(definition), {
-		access: data.access_token,
-		refresh: "",
-		scope: data.scope?.split(/\s+/).filter(Boolean),
-		createdAt: (/* @__PURE__ */ new Date()).toISOString()
-	});
-	return {
-		connectorId: definition.id,
-		provider: "github",
-		connected: true
-	};
-}
-//#endregion
-export { assertConnectorOAuthReady, completeConnectorOAuth, githubConnectorOAuthCredentialProviderId, startConnectorOAuth };
-
-//# sourceMappingURL=oauth.js.map

package/dist/src/connectors/oauth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.js","names":[],"sources":["../../../src/connectors/oauth.ts"],"sourcesContent":["import { CredentialResolver } from '../auth/credentials.js';\nimport { connectorSecretProviderId } from './secret-store.js';\nimport type { ConnectorDefinition } from './types.js';\n\nexport type ConnectorOAuthStartResult = {\n  connectorId: string;\n  provider: 'github';\n  deviceCode: string;\n  userCode: string;\n  verificationUri: string;\n  expiresInSeconds: number;\n  intervalSeconds: number;\n};\n\nexport type ConnectorOAuthCompleteResult = {\n  connectorId: string;\n  provider: 'github';\n  connected: true;\n};\n\ntype GitHubDeviceCodeResponse = {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  expires_in: number;\n  interval?: number;\n};\n\ntype GitHubTokenResponse = {\n  access_token?: string;\n  token_type?: string;\n  scope?: string;\n  error?: string;\n  error_description?: string;\n  interval?: number;\n};\n\nconst GITHUB_DEVICE_CODE_URL = 'https://github.com/login/device/code';\nconst GITHUB_ACCESS_TOKEN_URL = 'https://github.com/login/oauth/access_token';\nconst GITHUB_OAUTH_FIELD_KEY = 'GITHUB_PERSONAL_ACCESS_TOKEN';\nconst DEFAULT_GITHUB_SCOPES = ['repo', 'read:user', 'read:org'];\n\nfunction githubOAuthClientId(): string {\n  const clientId = process.env.XOPC_GITHUB_OAUTH_CLIENT_ID?.trim() ?? '';\n  if (!clientId) {\n    throw new Error('GitHub OAuth is not configured. Set XOPC_GITHUB_OAUTH_CLIENT_ID to enable GitHub Connect.');\n  }\n  return clientId;\n}\n\nfunction assertConnectorSupportsOAuth(definition: ConnectorDefinition): void {\n  if (definition.auth.mode !== 'oauth' || !definition.capabilities.includes('auth.oauth')) {\n    throw new Error(`Connector \"${definition.id}\" does not support OAuth.`);\n  }\n  if (definition.id !== 'github') {\n    throw new Error(`OAuth provider is not implemented for connector: ${definition.id}`);\n  }\n}\n\nasync function readJsonResponse<T>(response: Response, context: string): Promise<T> {\n  const data = await response.json().catch(async () => ({ error_description: await response.text() }));\n  if (!response.ok) {\n    const errorData = data as { error_description?: string; error?: string };\n    throw new Error(`${context}: ${errorData.error_description ?? errorData.error ?? response.statusText}`);\n  }\n  return data as T;\n}\n\nexport function githubConnectorOAuthCredentialProviderId(definition: ConnectorDefinition): string {\n  return connectorSecretProviderId(definition.id, GITHUB_OAUTH_FIELD_KEY);\n}\n\nexport async function assertConnectorOAuthReady(\n  definition: ConnectorDefinition,\n  resolver = new CredentialResolver(),\n): Promise<void> {\n  if (definition.auth.mode !== 'oauth') {\n    return;\n  }\n  assertConnectorSupportsOAuth(definition);\n  const token = await resolver.loadOAuthToken(githubConnectorOAuthCredentialProviderId(definition));\n  if (!token?.access) {\n    throw new Error(`Connect ${definition.displayName} with OAuth before installing this connector.`);\n  }\n}\n\nexport async function startConnectorOAuth(definition: ConnectorDefinition): Promise<ConnectorOAuthStartResult> {\n  assertConnectorSupportsOAuth(definition);\n  const clientId = githubOAuthClientId();\n  const response = await fetch(GITHUB_DEVICE_CODE_URL, {\n    method: 'POST',\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      client_id: clientId,\n      scope: DEFAULT_GITHUB_SCOPES.join(' '),\n    }),\n  });\n  const data = await readJsonResponse<GitHubDeviceCodeResponse>(response, 'GitHub device authorization failed');\n  return {\n    connectorId: definition.id,\n    provider: 'github',\n    deviceCode: data.device_code,\n    userCode: data.user_code,\n    verificationUri: data.verification_uri,\n    expiresInSeconds: data.expires_in,\n    intervalSeconds: data.interval ?? 5,\n  };\n}\n\nexport async function completeConnectorOAuth(\n  definition: ConnectorDefinition,\n  params: { deviceCode: string },\n  resolver = new CredentialResolver(),\n): Promise<ConnectorOAuthCompleteResult> {\n  assertConnectorSupportsOAuth(definition);\n  const deviceCode = params.deviceCode.trim();\n  if (!deviceCode) {\n    throw new Error('Missing GitHub OAuth device code.');\n  }\n\n  const response = await fetch(GITHUB_ACCESS_TOKEN_URL, {\n    method: 'POST',\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      client_id: githubOAuthClientId(),\n      device_code: deviceCode,\n      grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\n    }),\n  });\n  const data = await readJsonResponse<GitHubTokenResponse>(response, 'GitHub token exchange failed');\n  if (data.error) {\n    if (data.error === 'authorization_pending') {\n      throw new Error('GitHub authorization is still pending. Complete the browser step and try again.');\n    }\n    if (data.error === 'slow_down') {\n      throw new Error('GitHub asked us to slow down. Wait a few seconds and try again.');\n    }\n    throw new Error(data.error_description ?? data.error);\n  }\n  if (!data.access_token) {\n    throw new Error('GitHub token exchange did not return an access token.');\n  }\n\n  await resolver.saveOAuthToken(githubConnectorOAuthCredentialProviderId(definition), {\n    access: data.access_token,\n    refresh: '',\n    scope: data.scope?.split(/\\s+/).filter(Boolean),\n    createdAt: new Date().toISOString(),\n  });\n  return {\n    connectorId: definition.id,\n    provider: 'github',\n    connected: true,\n  };\n}\n"],"mappings":";;;kBAA4D;AAqC5D,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,yBAAyB;AAC/B,MAAM,wBAAwB;CAAC;CAAQ;CAAa;CAAW;AAE/D,SAAS,sBAA8B;CACrC,MAAM,WAAW,QAAQ,IAAI,6BAA6B,MAAM,IAAI;AACpE,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,4FAA4F;AAE9G,QAAO;;AAGT,SAAS,6BAA6B,YAAuC;AAC3E,KAAI,WAAW,KAAK,SAAS,WAAW,CAAC,WAAW,aAAa,SAAS,aAAa,CACrF,OAAM,IAAI,MAAM,cAAc,WAAW,GAAG,2BAA2B;AAEzE,KAAI,WAAW,OAAO,SACpB,OAAM,IAAI,MAAM,oDAAoD,WAAW,KAAK;;AAIxF,eAAe,iBAAoB,UAAoB,SAA6B;CAClF,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,MAAM,aAAa,EAAE,mBAAmB,MAAM,SAAS,MAAM,EAAE,EAAE;AACpG,KAAI,CAAC,SAAS,IAAI;EAChB,MAAM,YAAY;AAClB,QAAM,IAAI,MAAM,GAAG,QAAQ,IAAI,UAAU,qBAAqB,UAAU,SAAS,SAAS,aAAa;;AAEzG,QAAO;;AAGT,SAAgB,yCAAyC,YAAyC;AAChG,QAAO,0BAA0B,WAAW,IAAI,uBAAuB;;AAGzE,eAAsB,0BACpB,YACA,WAAW,IAAI,oBAAoB,EACpB;AACf,KAAI,WAAW,KAAK,SAAS,QAC3B;AAEF,8BAA6B,WAAW;AAExC,KAAI,EAAC,MADe,SAAS,eAAe,yCAAyC,WAAW,CAAC,GACrF,OACV,OAAM,IAAI,MAAM,WAAW,WAAW,YAAY,+CAA+C;;AAIrG,eAAsB,oBAAoB,YAAqE;AAC7G,8BAA6B,WAAW;CACxC,MAAM,WAAW,qBAAqB;CAYtC,MAAM,OAAO,MAAM,iBAA2C,MAXvC,MAAM,wBAAwB;EACnD,QAAQ;EACR,SAAS;GACP,QAAQ;GACR,gBAAgB;GACjB;EACD,MAAM,KAAK,UAAU;GACnB,WAAW;GACX,OAAO,sBAAsB,KAAK,IAAI;GACvC,CAAC;EACH,CAAC,EACsE,qCAAqC;AAC7G,QAAO;EACL,aAAa,WAAW;EACxB,UAAU;EACV,YAAY,KAAK;EACjB,UAAU,KAAK;EACf,iBAAiB,KAAK;EACtB,kBAAkB,KAAK;EACvB,iBAAiB,KAAK,YAAY;EACnC;;AAGH,eAAsB,uBACpB,YACA,QACA,WAAW,IAAI,oBAAoB,EACI;AACvC,8BAA6B,WAAW;CACxC,MAAM,aAAa,OAAO,WAAW,MAAM;AAC3C,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,oCAAoC;CAetD,MAAM,OAAO,MAAM,iBAAsC,MAZlC,MAAM,yBAAyB;EACpD,QAAQ;EACR,SAAS;GACP,QAAQ;GACR,gBAAgB;GACjB;EACD,MAAM,KAAK,UAAU;GACnB,WAAW,qBAAqB;GAChC,aAAa;GACb,YAAY;GACb,CAAC;EACH,CAAC,EACiE,+BAA+B;AAClG,KAAI,KAAK,OAAO;AACd,MAAI,KAAK,UAAU,wBACjB,OAAM,IAAI,MAAM,kFAAkF;AAEpG,MAAI,KAAK,UAAU,YACjB,OAAM,IAAI,MAAM,kEAAkE;AAEpF,QAAM,IAAI,MAAM,KAAK,qBAAqB,KAAK,MAAM;;AAEvD,KAAI,CAAC,KAAK,aACR,OAAM,IAAI,MAAM,wDAAwD;AAG1E,OAAM,SAAS,eAAe,yCAAyC,WAAW,EAAE;EAClF,QAAQ,KAAK;EACb,SAAS;EACT,OAAO,KAAK,OAAO,MAAM,MAAM,CAAC,OAAO,QAAQ;EAC/C,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC,CAAC;AACF,QAAO;EACL,aAAa,WAAW;EACxB,UAAU;EACV,WAAW;EACZ"}

package/dist/src/workflows/runtime/script-runtime.d.ts

@@ -1,3 +0,0 @@
-export { parseWorkflowScript } from '../../agent/workflow/parser.js';
-export { runWorkflow as runWorkflowScript } from '../../agent/workflow/runtime.js';
-export type { SubagentRunner as WorkflowScriptSubagentRunner, WorkflowRunOptions as WorkflowScriptRunOptions, WorkflowRunResult as WorkflowScriptRunResult, } from '../../agent/workflow/types.js';

package/dist/src/workflows/runtime/script-runtime.js

@@ -1,3 +0,0 @@
-import { parseWorkflowScript } from "../../agent/workflow/parser.js";
-import { runWorkflow } from "../../agent/workflow/runtime.js";
-export { parseWorkflowScript, runWorkflow as runWorkflowScript };

package/dist/src/workflows/runtime/script-workflow-runtime.d.ts

@@ -1,5 +0,0 @@
-import type { WorkflowRuntime, WorkflowRuntimeDeps, WorkflowRuntimeRunOptions, WorkflowRuntimeRunResult } from './workflow-runtime-port.js';
-export declare class ScriptWorkflowRuntime implements WorkflowRuntime {
-    run<T = unknown>(script: string, deps: WorkflowRuntimeDeps, options: WorkflowRuntimeRunOptions): Promise<WorkflowRuntimeRunResult<T>>;
-}
-export declare function createScriptWorkflowRuntime(): WorkflowRuntime;

package/dist/src/workflows/runtime/script-workflow-runtime.js

@@ -1,15 +0,0 @@
-import { runWorkflow } from "../../agent/workflow/runtime.js";
-import "./script-runtime.js";
-//#region src/workflows/runtime/script-workflow-runtime.ts
-var ScriptWorkflowRuntime = class {
-	run(script, deps, options) {
-		return runWorkflow(script, deps, options);
-	}
-};
-function createScriptWorkflowRuntime() {
-	return new ScriptWorkflowRuntime();
-}
-//#endregion
-export { ScriptWorkflowRuntime, createScriptWorkflowRuntime };
-
-//# sourceMappingURL=script-workflow-runtime.js.map

package/dist/src/workflows/runtime/script-workflow-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"script-workflow-runtime.js","names":["runWorkflowScript"],"sources":["../../../../src/workflows/runtime/script-workflow-runtime.ts"],"sourcesContent":["import { runWorkflowScript } from './script-runtime.js';\nimport type {\n  WorkflowRuntime,\n  WorkflowRuntimeDeps,\n  WorkflowRuntimeRunOptions,\n  WorkflowRuntimeRunResult,\n} from './workflow-runtime-port.js';\n\nexport class ScriptWorkflowRuntime implements WorkflowRuntime {\n  run<T = unknown>(\n    script: string,\n    deps: WorkflowRuntimeDeps,\n    options: WorkflowRuntimeRunOptions,\n  ): Promise<WorkflowRuntimeRunResult<T>> {\n    return runWorkflowScript<T>(script, deps, options);\n  }\n}\n\nexport function createScriptWorkflowRuntime(): WorkflowRuntime {\n  return new ScriptWorkflowRuntime();\n}\n"],"mappings":";;;AAQA,IAAa,wBAAb,MAA8D;CAC5D,IACE,QACA,MACA,SACsC;AACtC,SAAOA,YAAqB,QAAQ,MAAM,QAAQ;;;AAItD,SAAgB,8BAA+C;AAC7D,QAAO,IAAI,uBAAuB"}