@xopcai/xopc 0.0.86 → 0.0.87

package/dist/src/agent/tools/factory.js

@@ -20,7 +20,6 @@ import { createTodoTool } from "./todo-tool.js";
 import { createSessionStatusTool } from "./session-status-tool.js";
 import { createDreamingTool } from "./dreaming-tool.js";
 import { createClarifyTool } from "./clarify-tool.js";
-import { createImageTool } from "./image-tool.js";
 import { BrowserManager } from "../../browser/manager.js";
 import { resolveBrowserBackendFromConfig } from "../../browser/backend-from-config.js";
 import { checkBrowserReadiness } from "../../browser/readiness.js";
@@ -33,6 +32,7 @@ import { buildSandboxToolMap, createExecuteCodeTool } from "./execute-code-tool.
 import { createCronjobTool } from "./cronjob-tool.js";
 import { createSkillViewTool, createSkillsListTool } from "./skills-tools.js";
 import { createSkillManageTool } from "./skill-manage-tool.js";
+import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool } from "./image-generate-tool.js";
 import "./index.js";
 import { shouldRegisterCuratedMemoryTool } from "../memory/memory-config.js";

package/dist/src/agent/tools/index.d.ts

@@ -18,7 +18,6 @@ export { createTodoTool, TodoStore, type TodoItem, type TodoStatus } from './tod
 export { createSessionStatusTool } from './session-status-tool.js';
 export { createDreamingTool, type DreamingToolDeps } from './dreaming-tool.js';
 export { createClarifyTool, type ClarifyRequestPayload, type GatewayClarifyRequestFn, } from './clarify-tool.js';
-export { createBrowserTools, type CreateBrowserToolsDeps } from './browser-legacy-tools.js';
 export { BrowserManager, assertBrowserUrlAllowed } from '../../browser/index.js';
 export { createDelegateTool, DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS, } from './delegate-tool.js';
 export { createWorkflowTool, type WorkflowToolDeps, type WorkflowToolInput } from './workflow-tool.js';

package/dist/src/agent/tools/index.js

@@ -20,11 +20,8 @@ import { TodoStore, createTodoTool } from "./todo-tool.js";
 import { createSessionStatusTool } from "./session-status-tool.js";
 import { createDreamingTool } from "./dreaming-tool.js";
 import { createClarifyTool } from "./clarify-tool.js";
-import { resolveImageModelConfigForTool } from "../image/tool-model-config.js";
-import { createImageTool } from "./image-tool.js";
-import { assertBrowserUrlAllowed } from "../../browser/url-policy.js";
-import { createBrowserTools } from "./browser-legacy-tools.js";
 import { BrowserManager } from "../../browser/manager.js";
+import { assertBrowserUrlAllowed } from "../../browser/url-policy.js";
 import "../../browser/index.js";
 import { DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS, createDelegateTool } from "./delegate-tool.js";
 import { createWorkflowTool } from "./workflow-tool.js";
@@ -32,5 +29,7 @@ import { SANDBOX_ALLOWED_TOOLS, buildSandboxToolMap, createExecuteCodeTool } fro
 import { createCronjobTool, scanCronPrompt } from "./cronjob-tool.js";
 import { createSkillViewTool, createSkillsListTool } from "./skills-tools.js";
 import { createSkillManageTool } from "./skill-manage-tool.js";
+import { resolveImageModelConfigForTool } from "../image/tool-model-config.js";
+import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool, resolveImageGenerationModelConfigForTool } from "./image-generate-tool.js";
-export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, assertBrowserUrlAllowed, buildSandboxToolMap, createBrowserTools, createClarifyTool, createCreateShareTool, createCronjobTool, createCuratedMemoryTool, createDelegateTool, createDreamingTool, createEditFileTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createSendMediaTool, createSessionSearchTool, createSessionStatusTool, createShellTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createTodoTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, editFileTool, findTool, formatSize, fuzzyFindText, generateDiffString, grepTool, invalidateSessionSearchIndexCache, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, restoreLineEndings, scanCronPrompt, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };
+export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, assertBrowserUrlAllowed, buildSandboxToolMap, createClarifyTool, createCreateShareTool, createCronjobTool, createCuratedMemoryTool, createDelegateTool, createDreamingTool, createEditFileTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createSendMediaTool, createSessionSearchTool, createSessionStatusTool, createShellTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createTodoTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, editFileTool, findTool, formatSize, fuzzyFindText, generateDiffString, grepTool, invalidateSessionSearchIndexCache, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, restoreLineEndings, scanCronPrompt, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };

package/dist/src/agent/tools/shell.js

@@ -1,4 +1,3 @@
-import { checkShellSafety } from "../prompt/safety.js";
 import { evaluateExecPolicy } from "../sandbox/exec-policy.js";
 import { spawn } from "child_process";
 import { Type } from "@sinclair/typebox";
@@ -56,18 +55,6 @@ function createShellTool(cwd, options) {
 		label: "💻 Shell",
 		async execute(toolCallId, params, _signal) {
 			const p = params;
-			const safety = checkShellSafety(p.command);
-			if (!safety.allowed) return {
-				content: [{
-					type: "text",
-					text: `🚫 ${safety.message}`
-				}],
-				details: {
-					exitCode: null,
-					timedOut: false,
-					truncated: false
-				}
-			};
 			const passthroughNames = options?.getSkillPassthroughEnvVarNames?.() ?? [];
 			const policy = evaluateExecPolicy({
 				command: p.command,

package/dist/src/agent/tools/shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell.js","names":[],"sources":["../../../../src/agent/tools/shell.ts"],"sourcesContent":["// Shell tool - executes commands with output truncation\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport { spawn } from 'child_process';\nimport { evaluateExecPolicy } from '../sandbox/exec-policy.js';\nimport { checkShellSafety } from '../prompt/safety.js';\nimport { createWriteStream } from 'fs';\n\nconst MAX_SHELL_TIMEOUT = 300;\nconst DEFAULT_MAX_BYTES = 50 * 1024;\nconst DEFAULT_MAX_LINES = 2000;\n\nconst ShellSchema = Type.Object({\n  command: Type.String({ description: 'Shell command to execute' }),\n});\n\nexport interface ShellDetails {\n  exitCode: number | null;\n  timedOut: boolean;\n  truncated: boolean;\n  truncatedBy?: 'lines' | 'bytes';\n  outputBytes?: number;\n}\n\nfunction formatSize(bytes: number): string {\n  if (bytes < 1024) return `${bytes}B`;\n  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;\n  return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;\n}\n\nfunction truncateTail(content: string, maxLines = DEFAULT_MAX_LINES, maxBytes = DEFAULT_MAX_BYTES) {\n  const totalBytes = Buffer.byteLength(content, 'utf-8');\n  const lines = content.split('\\n');\n  const totalLines = lines.length;\n\n  if (totalLines <= maxLines && totalBytes <= maxBytes) {\n    return { content, truncated: false, truncatedBy: null, totalLines, totalBytes, outputLines: totalLines, outputBytes: totalBytes };\n  }\n\n  const outputLinesArr: string[] = [];\n  let outputBytesCount = 0;\n  let truncatedBy: 'lines' | 'bytes' = 'lines';\n\n  for (let i = lines.length - 1; i >= 0 && outputLinesArr.length < maxLines; i--) {\n    const line = lines[i];\n    const lineBytes = Buffer.byteLength(line, 'utf-8') + (outputLinesArr.length > 0 ? 1 : 0);\n\n    if (outputBytesCount + lineBytes > maxBytes) {\n      truncatedBy = 'bytes';\n      break;\n    }\n\n    outputLinesArr.unshift(line);\n    outputBytesCount += lineBytes;\n  }\n\n  return { content: outputLinesArr.join('\\n'), truncated: true, truncatedBy, totalLines, totalBytes, outputLines: outputLinesArr.length, outputBytes: outputBytesCount };\n}\n\nexport interface CreateShellToolOptions {\n  /** Env var names allowed through {@link prepareSafeToolEnv} even if they match secret heuristics (skill passthrough). */\n  getSkillPassthroughEnvVarNames?: () => string[];\n}\n\nexport function createShellTool(\n  cwd: string,\n  options?: CreateShellToolOptions,\n): AgentTool {\n  return {\n    name: 'shell',\n    description: 'Execute shell command.',\n    parameters: ShellSchema,\n    label: '💻 Shell',\n\n    async execute(\n      toolCallId: string,\n      params: any,\n      _signal?: AbortSignal,\n    ): Promise<AgentToolResult<ShellDetails>> {\n      const p = params as { command: string };\n\n      // Legacy safety check (kept for backward compat; exec-policy is the primary gate)\n      const safety = checkShellSafety(p.command);\n      if (!safety.allowed) {\n        return {\n          content: [{ type: 'text', text: `🚫 ${safety.message}` }],\n          details: { exitCode: null, timedOut: false, truncated: false },\n        };\n      }\n\n      // Sandbox exec-policy check (path + command injection + env sanitization)\n      const passthroughNames = options?.getSkillPassthroughEnvVarNames?.() ?? [];\n      const policy = evaluateExecPolicy({\n        command: p.command,\n        cwd,\n        allowedEnvVars: passthroughNames,\n      });\n      if (!policy.allowed) {\n        return {\n          content: [{ type: 'text', text: `🚫 Sandbox: ${policy.reason}` }],\n          details: { exitCode: null, timedOut: false, truncated: false },\n        };\n      }\n\n      return new Promise((resolve) => {\n        const _startTime = Date.now();\n        let output = '';\n        let errorOutput = '';\n        let timedOut = false;\n        let _tempFile: string | null = null;\n        let tempStream: ReturnType<typeof createWriteStream> | null = null;\n        const useTempFile = false; // Disabled - stream directly\n\n        const effectiveTimeoutSec = Math.min(\n          MAX_SHELL_TIMEOUT,\n          Math.ceil(policy.timeoutMs / 1000),\n        );\n        const timeout = setTimeout(() => {\n          timedOut = true;\n          proc.kill('SIGKILL');\n        }, effectiveTimeoutSec * 1000);\n\n        const proc = spawn(p.command, [], {\n          shell: true,\n          cwd: policy.effectiveCwd,\n          env: {\n            ...policy.sanitizedEnv,\n            COLUMNS: '200',\n          },\n        });\n\n        proc.stdout?.on('data', (data) => {\n          const text = data.toString();\n          if (!useTempFile) output += text;\n        });\n\n        proc.stderr?.on('data', (data) => {\n          const text = data.toString();\n          errorOutput += text;\n        });\n\n        proc.on('close', (code) => {\n          clearTimeout(timeout);\n          tempStream?.end();\n\n          const fullOutput = errorOutput + output;\n          const truncation = truncateTail(fullOutput);\n\n          let resultText = truncation.content;\n          if (timedOut) {\n            resultText = `⏱️ Command timed out after ${MAX_SHELL_TIMEOUT}s\\n` + resultText;\n          }\n          if (truncation.truncated) {\n            resultText += `\\n\\n[Output truncated: ${formatSize(truncation.outputBytes)} of ${formatSize(truncation.totalBytes)}]`;\n          }\n\n          resolve({\n            content: [{ type: 'text', text: resultText }],\n            details: {\n              exitCode: code,\n              timedOut,\n              truncated: truncation.truncated,\n              truncatedBy: truncation.truncatedBy,\n              outputBytes: truncation.outputBytes,\n            },\n          });\n        });\n\n        proc.on('error', (err) => {\n          clearTimeout(timeout);\n          resolve({\n            content: [{ type: 'text', text: `Error: ${err.message}` }],\n            details: { exitCode: null, timedOut: false, truncated: false },\n          });\n        });\n      });\n    },\n  } as any;\n}\n"],"mappings":";;;;;AAQA,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB,KAAK;AAC/B,MAAM,oBAAoB;AAE1B,MAAM,cAAc,KAAK,OAAO,EAC9B,SAAS,KAAK,OAAO,EAAE,aAAa,4BAA4B,CAAC,EAClE,CAAC;AAUF,SAAS,WAAW,OAAuB;AACzC,KAAI,QAAQ,KAAM,QAAO,GAAG,MAAM;AAClC,KAAI,QAAQ,OAAO,KAAM,QAAO,IAAI,QAAQ,MAAM,QAAQ,EAAE,CAAC;AAC7D,QAAO,IAAI,SAAS,OAAO,OAAO,QAAQ,EAAE,CAAC;;AAG/C,SAAS,aAAa,SAAiB,WAAW,mBAAmB,WAAW,mBAAmB;CACjG,MAAM,aAAa,OAAO,WAAW,SAAS,QAAQ;CACtD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,aAAa,MAAM;AAEzB,KAAI,cAAc,YAAY,cAAc,SAC1C,QAAO;EAAE;EAAS,WAAW;EAAO,aAAa;EAAM;EAAY;EAAY,aAAa;EAAY,aAAa;EAAY;CAGnI,MAAM,iBAA2B,EAAE;CACnC,IAAI,mBAAmB;CACvB,IAAI,cAAiC;AAErC,MAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,KAAK,eAAe,SAAS,UAAU,KAAK;EAC9E,MAAM,OAAO,MAAM;EACnB,MAAM,YAAY,OAAO,WAAW,MAAM,QAAQ,IAAI,eAAe,SAAS,IAAI,IAAI;AAEtF,MAAI,mBAAmB,YAAY,UAAU;AAC3C,iBAAc;AACd;;AAGF,iBAAe,QAAQ,KAAK;AAC5B,sBAAoB;;AAGtB,QAAO;EAAE,SAAS,eAAe,KAAK,KAAK;EAAE,WAAW;EAAM;EAAa;EAAY;EAAY,aAAa,eAAe;EAAQ,aAAa;EAAkB;;AAQxK,SAAgB,gBACd,KACA,SACW;AACX,QAAO;EACL,MAAM;EACN,aAAa;EACb,YAAY;EACZ,OAAO;EAEP,MAAM,QACJ,YACA,QACA,SACwC;GACxC,MAAM,IAAI;GAGV,MAAM,SAAS,iBAAiB,EAAE,QAAQ;AAC1C,OAAI,CAAC,OAAO,QACV,QAAO;IACL,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM,MAAM,OAAO;KAAW,CAAC;IACzD,SAAS;KAAE,UAAU;KAAM,UAAU;KAAO,WAAW;KAAO;IAC/D;GAIH,MAAM,mBAAmB,SAAS,kCAAkC,IAAI,EAAE;GAC1E,MAAM,SAAS,mBAAmB;IAChC,SAAS,EAAE;IACX;IACA,gBAAgB;IACjB,CAAC;AACF,OAAI,CAAC,OAAO,QACV,QAAO;IACL,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM,eAAe,OAAO;KAAU,CAAC;IACjE,SAAS;KAAE,UAAU;KAAM,UAAU;KAAO,WAAW;KAAO;IAC/D;AAGH,UAAO,IAAI,SAAS,YAAY;IAE9B,IAAI,SAAS;IACb,IAAI,cAAc;IAClB,IAAI,WAAW;IAEf,IAAI,aAA0D;IAG9D,MAAM,sBAAsB,KAAK,IAC/B,mBACA,KAAK,KAAK,OAAO,YAAY,IAAK,CACnC;IACD,MAAM,UAAU,iBAAiB;AAC/B,gBAAW;AACX,UAAK,KAAK,UAAU;OACnB,sBAAsB,IAAK;IAE9B,MAAM,OAAO,MAAM,EAAE,SAAS,EAAE,EAAE;KAChC,OAAO;KACP,KAAK,OAAO;KACZ,KAAK;MACH,GAAG,OAAO;MACV,SAAS;MACV;KACF,CAAC;AAEF,SAAK,QAAQ,GAAG,SAAS,SAAS;KAChC,MAAM,OAAO,KAAK,UAAU;AACV,eAAU;MAC5B;AAEF,SAAK,QAAQ,GAAG,SAAS,SAAS;KAChC,MAAM,OAAO,KAAK,UAAU;AAC5B,oBAAe;MACf;AAEF,SAAK,GAAG,UAAU,SAAS;AACzB,kBAAa,QAAQ;AACrB,iBAAY,KAAK;KAGjB,MAAM,aAAa,aADA,cAAc,OACU;KAE3C,IAAI,aAAa,WAAW;AAC5B,SAAI,SACF,cAAa,8BAA8B,kBAAkB,OAAO;AAEtE,SAAI,WAAW,UACb,eAAc,0BAA0B,WAAW,WAAW,YAAY,CAAC,MAAM,WAAW,WAAW,WAAW,CAAC;AAGrH,aAAQ;MACN,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM;OAAY,CAAC;MAC7C,SAAS;OACP,UAAU;OACV;OACA,WAAW,WAAW;OACtB,aAAa,WAAW;OACxB,aAAa,WAAW;OACzB;MACF,CAAC;MACF;AAEF,SAAK,GAAG,UAAU,QAAQ;AACxB,kBAAa,QAAQ;AACrB,aAAQ;MACN,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM,UAAU,IAAI;OAAW,CAAC;MAC1D,SAAS;OAAE,UAAU;OAAM,UAAU;OAAO,WAAW;OAAO;MAC/D,CAAC;MACF;KACF;;EAEL"}
+{"version":3,"file":"shell.js","names":[],"sources":["../../../../src/agent/tools/shell.ts"],"sourcesContent":["// Shell tool - executes commands with output truncation\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport { spawn } from 'child_process';\nimport { evaluateExecPolicy } from '../sandbox/exec-policy.js';\nimport { createWriteStream } from 'fs';\n\nconst MAX_SHELL_TIMEOUT = 300;\nconst DEFAULT_MAX_BYTES = 50 * 1024;\nconst DEFAULT_MAX_LINES = 2000;\n\nconst ShellSchema = Type.Object({\n  command: Type.String({ description: 'Shell command to execute' }),\n});\n\nexport interface ShellDetails {\n  exitCode: number | null;\n  timedOut: boolean;\n  truncated: boolean;\n  truncatedBy?: 'lines' | 'bytes';\n  outputBytes?: number;\n}\n\nfunction formatSize(bytes: number): string {\n  if (bytes < 1024) return `${bytes}B`;\n  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;\n  return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;\n}\n\nfunction truncateTail(content: string, maxLines = DEFAULT_MAX_LINES, maxBytes = DEFAULT_MAX_BYTES) {\n  const totalBytes = Buffer.byteLength(content, 'utf-8');\n  const lines = content.split('\\n');\n  const totalLines = lines.length;\n\n  if (totalLines <= maxLines && totalBytes <= maxBytes) {\n    return { content, truncated: false, truncatedBy: null, totalLines, totalBytes, outputLines: totalLines, outputBytes: totalBytes };\n  }\n\n  const outputLinesArr: string[] = [];\n  let outputBytesCount = 0;\n  let truncatedBy: 'lines' | 'bytes' = 'lines';\n\n  for (let i = lines.length - 1; i >= 0 && outputLinesArr.length < maxLines; i--) {\n    const line = lines[i];\n    const lineBytes = Buffer.byteLength(line, 'utf-8') + (outputLinesArr.length > 0 ? 1 : 0);\n\n    if (outputBytesCount + lineBytes > maxBytes) {\n      truncatedBy = 'bytes';\n      break;\n    }\n\n    outputLinesArr.unshift(line);\n    outputBytesCount += lineBytes;\n  }\n\n  return { content: outputLinesArr.join('\\n'), truncated: true, truncatedBy, totalLines, totalBytes, outputLines: outputLinesArr.length, outputBytes: outputBytesCount };\n}\n\nexport interface CreateShellToolOptions {\n  /** Env var names allowed through {@link prepareSafeToolEnv} even if they match secret heuristics (skill passthrough). */\n  getSkillPassthroughEnvVarNames?: () => string[];\n}\n\nexport function createShellTool(\n  cwd: string,\n  options?: CreateShellToolOptions,\n): AgentTool {\n  return {\n    name: 'shell',\n    description: 'Execute shell command.',\n    parameters: ShellSchema,\n    label: '💻 Shell',\n\n    async execute(\n      toolCallId: string,\n      params: any,\n      _signal?: AbortSignal,\n    ): Promise<AgentToolResult<ShellDetails>> {\n      const p = params as { command: string };\n\n      // Sandbox exec-policy check (path + command injection + env sanitization)\n      const passthroughNames = options?.getSkillPassthroughEnvVarNames?.() ?? [];\n      const policy = evaluateExecPolicy({\n        command: p.command,\n        cwd,\n        allowedEnvVars: passthroughNames,\n      });\n      if (!policy.allowed) {\n        return {\n          content: [{ type: 'text', text: `🚫 Sandbox: ${policy.reason}` }],\n          details: { exitCode: null, timedOut: false, truncated: false },\n        };\n      }\n\n      return new Promise((resolve) => {\n        const _startTime = Date.now();\n        let output = '';\n        let errorOutput = '';\n        let timedOut = false;\n        let _tempFile: string | null = null;\n        let tempStream: ReturnType<typeof createWriteStream> | null = null;\n        const useTempFile = false; // Disabled - stream directly\n\n        const effectiveTimeoutSec = Math.min(\n          MAX_SHELL_TIMEOUT,\n          Math.ceil(policy.timeoutMs / 1000),\n        );\n        const timeout = setTimeout(() => {\n          timedOut = true;\n          proc.kill('SIGKILL');\n        }, effectiveTimeoutSec * 1000);\n\n        const proc = spawn(p.command, [], {\n          shell: true,\n          cwd: policy.effectiveCwd,\n          env: {\n            ...policy.sanitizedEnv,\n            COLUMNS: '200',\n          },\n        });\n\n        proc.stdout?.on('data', (data) => {\n          const text = data.toString();\n          if (!useTempFile) output += text;\n        });\n\n        proc.stderr?.on('data', (data) => {\n          const text = data.toString();\n          errorOutput += text;\n        });\n\n        proc.on('close', (code) => {\n          clearTimeout(timeout);\n          tempStream?.end();\n\n          const fullOutput = errorOutput + output;\n          const truncation = truncateTail(fullOutput);\n\n          let resultText = truncation.content;\n          if (timedOut) {\n            resultText = `⏱️ Command timed out after ${MAX_SHELL_TIMEOUT}s\\n` + resultText;\n          }\n          if (truncation.truncated) {\n            resultText += `\\n\\n[Output truncated: ${formatSize(truncation.outputBytes)} of ${formatSize(truncation.totalBytes)}]`;\n          }\n\n          resolve({\n            content: [{ type: 'text', text: resultText }],\n            details: {\n              exitCode: code,\n              timedOut,\n              truncated: truncation.truncated,\n              truncatedBy: truncation.truncatedBy,\n              outputBytes: truncation.outputBytes,\n            },\n          });\n        });\n\n        proc.on('error', (err) => {\n          clearTimeout(timeout);\n          resolve({\n            content: [{ type: 'text', text: `Error: ${err.message}` }],\n            details: { exitCode: null, timedOut: false, truncated: false },\n          });\n        });\n      });\n    },\n  } as any;\n}\n"],"mappings":";;;;AAOA,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB,KAAK;AAC/B,MAAM,oBAAoB;AAE1B,MAAM,cAAc,KAAK,OAAO,EAC9B,SAAS,KAAK,OAAO,EAAE,aAAa,4BAA4B,CAAC,EAClE,CAAC;AAUF,SAAS,WAAW,OAAuB;AACzC,KAAI,QAAQ,KAAM,QAAO,GAAG,MAAM;AAClC,KAAI,QAAQ,OAAO,KAAM,QAAO,IAAI,QAAQ,MAAM,QAAQ,EAAE,CAAC;AAC7D,QAAO,IAAI,SAAS,OAAO,OAAO,QAAQ,EAAE,CAAC;;AAG/C,SAAS,aAAa,SAAiB,WAAW,mBAAmB,WAAW,mBAAmB;CACjG,MAAM,aAAa,OAAO,WAAW,SAAS,QAAQ;CACtD,MAAM,QAAQ,QAAQ,MAAM,KAAK;CACjC,MAAM,aAAa,MAAM;AAEzB,KAAI,cAAc,YAAY,cAAc,SAC1C,QAAO;EAAE;EAAS,WAAW;EAAO,aAAa;EAAM;EAAY;EAAY,aAAa;EAAY,aAAa;EAAY;CAGnI,MAAM,iBAA2B,EAAE;CACnC,IAAI,mBAAmB;CACvB,IAAI,cAAiC;AAErC,MAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,KAAK,eAAe,SAAS,UAAU,KAAK;EAC9E,MAAM,OAAO,MAAM;EACnB,MAAM,YAAY,OAAO,WAAW,MAAM,QAAQ,IAAI,eAAe,SAAS,IAAI,IAAI;AAEtF,MAAI,mBAAmB,YAAY,UAAU;AAC3C,iBAAc;AACd;;AAGF,iBAAe,QAAQ,KAAK;AAC5B,sBAAoB;;AAGtB,QAAO;EAAE,SAAS,eAAe,KAAK,KAAK;EAAE,WAAW;EAAM;EAAa;EAAY;EAAY,aAAa,eAAe;EAAQ,aAAa;EAAkB;;AAQxK,SAAgB,gBACd,KACA,SACW;AACX,QAAO;EACL,MAAM;EACN,aAAa;EACb,YAAY;EACZ,OAAO;EAEP,MAAM,QACJ,YACA,QACA,SACwC;GACxC,MAAM,IAAI;GAGV,MAAM,mBAAmB,SAAS,kCAAkC,IAAI,EAAE;GAC1E,MAAM,SAAS,mBAAmB;IAChC,SAAS,EAAE;IACX;IACA,gBAAgB;IACjB,CAAC;AACF,OAAI,CAAC,OAAO,QACV,QAAO;IACL,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM,eAAe,OAAO;KAAU,CAAC;IACjE,SAAS;KAAE,UAAU;KAAM,UAAU;KAAO,WAAW;KAAO;IAC/D;AAGH,UAAO,IAAI,SAAS,YAAY;IAE9B,IAAI,SAAS;IACb,IAAI,cAAc;IAClB,IAAI,WAAW;IAEf,IAAI,aAA0D;IAG9D,MAAM,sBAAsB,KAAK,IAC/B,mBACA,KAAK,KAAK,OAAO,YAAY,IAAK,CACnC;IACD,MAAM,UAAU,iBAAiB;AAC/B,gBAAW;AACX,UAAK,KAAK,UAAU;OACnB,sBAAsB,IAAK;IAE9B,MAAM,OAAO,MAAM,EAAE,SAAS,EAAE,EAAE;KAChC,OAAO;KACP,KAAK,OAAO;KACZ,KAAK;MACH,GAAG,OAAO;MACV,SAAS;MACV;KACF,CAAC;AAEF,SAAK,QAAQ,GAAG,SAAS,SAAS;KAChC,MAAM,OAAO,KAAK,UAAU;AACV,eAAU;MAC5B;AAEF,SAAK,QAAQ,GAAG,SAAS,SAAS;KAChC,MAAM,OAAO,KAAK,UAAU;AAC5B,oBAAe;MACf;AAEF,SAAK,GAAG,UAAU,SAAS;AACzB,kBAAa,QAAQ;AACrB,iBAAY,KAAK;KAGjB,MAAM,aAAa,aADA,cAAc,OACU;KAE3C,IAAI,aAAa,WAAW;AAC5B,SAAI,SACF,cAAa,8BAA8B,kBAAkB,OAAO;AAEtE,SAAI,WAAW,UACb,eAAc,0BAA0B,WAAW,WAAW,YAAY,CAAC,MAAM,WAAW,WAAW,WAAW,CAAC;AAGrH,aAAQ;MACN,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM;OAAY,CAAC;MAC7C,SAAS;OACP,UAAU;OACV;OACA,WAAW,WAAW;OACtB,aAAa,WAAW;OACxB,aAAa,WAAW;OACzB;MACF,CAAC;MACF;AAEF,SAAK,GAAG,UAAU,QAAQ;AACxB,kBAAa,QAAQ;AACrB,aAAQ;MACN,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM,UAAU,IAAI;OAAW,CAAC;MAC1D,SAAS;OAAE,UAAU;OAAM,UAAU;OAAO,WAAW;OAAO;MAC/D,CAAC;MACF;KACF;;EAEL"}

package/dist/src/agent/tools/workflow-tool.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_providers, resolveModel } from "../../providers/index.js";
 import { parseWorkflowScript } from "../workflow/parser.js";
 import { getLastWorkflowMemory } from "../workflow/last-run-memory.js";
 import { previewValue, recomputeCounts, renderWorkflowText } from "../workflow/snapshot.js";
@@ -23,6 +24,7 @@ import { Type } from "@sinclair/typebox";
 * organised today.
 */
 init_logger();
+init_providers();
 const log = createLogger("workflow-tool");
 const DEFAULT_TIMEOUT_SEC = 1800;
 const MAX_TIMEOUT_SEC = 14400;
@@ -125,13 +127,17 @@ function createWorkflowTool(deps) {
 				toolExecutorConfig: deps.toolExecutorConfig,
 				buildChildTools: deps.buildChildTools
 			});
+			const resolveModelId = (modelId) => resolveModel(modelId);
 			const controller = new AbortController();
 			const onParentAbort = () => controller.abort();
 			signal?.addEventListener("abort", onParentAbort, { once: true });
 			const timeoutHandle = timeoutSec > 0 ? setTimeout(() => controller.abort(), timeoutSec * 1e3) : void 0;
 			pushUpdate();
 			try {
-				const result = await runWorkflow(script, { runner }, {
+				const result = await runWorkflow(script, {
+					runner,
+					resolveModelId
+				}, {
 					cwd: deps.workspace,
 					args: params.args,
 					signal: controller.signal,

package/dist/src/agent/tools/workflow-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-tool.js","names":[],"sources":["../../../../src/agent/tools/workflow-tool.ts"],"sourcesContent":["/**\n * `workflow` — the AgentTool the parent model calls to spawn a fan-out run.\n *\n * Shape mirrors `delegate-tool`: factory builds a closure over deps; `execute`\n * parses the script, instantiates the {@link DelegateSubagentRunner}, drives the\n * {@link runWorkflow} runtime, and pushes a live text snapshot through\n * `onUpdate` for streaming UIs (TUI, gateway console).\n *\n * Why this lives in `src/agent/tools/` (not under `src/agent/workflow/`):\n * the runtime is reusable infrastructure; the AgentTool wrapping is a\n * presentation concern that depends on the AgentToolsFactory wiring. Keeping\n * the wrapper here matches how `delegate-tool` and `execute-code-tool` are\n * organised today.\n */\n\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport type { Api, Model } from '@earendil-works/pi-ai';\n\nimport type { Config } from '../../config/schema.js';\nimport type { MessageBus } from '../../infra/bus/index.js';\nimport { createLogger } from '../../utils/logger.js';\n\nimport type { BuildChildToolsOptions } from '../child-agent-factory.js';\nimport {\n  DelegateSubagentRunner,\n  getLastWorkflowMemory,\n  parseWorkflowScript,\n  previewValue,\n  recomputeCounts,\n  renderWorkflowText,\n  runWorkflow,\n  type WorkflowAgentSnapshot,\n  type WorkflowCatalog,\n  type WorkflowMeta,\n  type WorkflowSnapshot,\n} from '../workflow/index.js';\nimport type { ToolExecutorConfig } from './executor.js';\n\nconst log = createLogger('workflow-tool');\n\nconst DEFAULT_TIMEOUT_SEC = 30 * 60;\nconst MAX_TIMEOUT_SEC = 4 * 60 * 60;\nconst DEFAULT_MAX_CONCURRENCY = 16;\nconst DEFAULT_MAX_SUBAGENTS = 1000;\n\nconst WorkflowToolSchema = Type.Object({\n  name: Type.Optional(\n    Type.String({\n      description:\n        'Name of a saved workflow to run. Either `name` or `script` is required. ' +\n        'Use `name` whenever the user references a known workflow (built-in or in ~/.xopc/workflows/).',\n    }),\n  ),\n  script: Type.Optional(\n    Type.String({\n      description: [\n        'Raw JavaScript workflow script (no Markdown fences, no TypeScript syntax). Ignored when `name` is set.',\n        \"First statement: export const meta = { name: 'snake_case', description: 'short, human-readable' }.\",\n        'Use phase(title), agent(prompt, opts), parallel(arrayOfFunctions), pipeline(items, ...stages), log(message), args, and budget.',\n        'The script must call agent() at least once.',\n        'parallel() requires functions: await parallel(items.map(item => () => agent(...))).',\n      ].join(' '),\n    }),\n  ),\n  args: Type.Optional(\n    Type.Any({\n      description: 'Optional JSON value exposed to the workflow script as the global `args`.',\n    }),\n  ),\n});\n\nexport type WorkflowToolInput = {\n  name?: string;\n  script?: string;\n  args?: unknown;\n};\n\nexport interface WorkflowToolDeps {\n  workspace: string;\n  bus: MessageBus;\n  /** Returns the parent agent's primary model — subagents default to this. */\n  getSubagentModel: () => Model<Api>;\n  getConfig: () => Config | undefined;\n  /** Same injection point delegate-tool uses; supplied by AgentToolsFactory. */\n  buildChildTools: (opts: BuildChildToolsOptions) => AgentTool<any, any>[];\n  toolExecutorConfig?: Partial<ToolExecutorConfig>;\n  /** Catalog for `name` lookups (built-in + ~/.xopc/workflows/). */\n  catalog: WorkflowCatalog;\n  /** Per-call sessionKey lookup — used to record \"last successful workflow\" for /workflow save. */\n  getCurrentSessionKey?: () => string | undefined;\n}\n\nexport function createWorkflowTool(deps: WorkflowToolDeps): AgentTool {\n  return {\n    name: 'workflow',\n    label: '◆ Workflow',\n    description: [\n      'Run a deterministic JavaScript workflow that orchestrates multiple isolated subagents through agent(), parallel(), and pipeline().',\n      'Two ways to invoke:',\n      '  1. `name`: run a saved workflow from the catalog (built-in or ~/.xopc/workflows/). Prefer this when the user references a known name.',\n      '  2. `script`: provide a raw JS workflow inline. Use when no saved workflow fits. Header is required: export const meta = { name, description }.',\n      'Named-workflow triggers — call this tool with `{ name: \"<name>\" }` IMMEDIATELY when the user message is any of:',\n      '  • a bare workflow name like \"/audit_repo\", \"/pr_review\", \"/research\", or \"audit_repo\"',\n      '  • \"run the audit_repo workflow\", \"review this PR\", \"debug this error\", \"kick off research\", \"do a multi_perspective_review on X\" (extract args when natural: target, question, error, diff)',\n      '  • after /workflows lists saved workflows and the user picks one',\n      'Use phase(title) at runtime to mark progress groups. Each agent() returns a string, or a schema-validated object when opts.schema is set.',\n      'Prefer for decomposable work: repo audits, PR review, incident triage, multi-perspective review, fan-out research, large refactors. Do not use for a single quick read/edit.',\n      'parallel() takes thunks, not promises: parallel(items.map(item => () => agent(...))).',\n      'pipeline(items, ...stages) interleaves items across stages — fastest path by default; only use parallel() when you genuinely need a cross-item barrier.',\n      'Failed agent()/parallel()/pipeline() entries resolve to null; check before synthesizing.',\n      'Do not use Date.now(), Math.random(), new Date(), require, import, fs, or network APIs — they are unavailable for determinism.',\n      'Always end with a synthesis agent() that consolidates findings, especially when you fan out for review or research.',\n    ].join('\\n\\n'),\n    parameters: WorkflowToolSchema,\n\n    async execute(\n      _toolCallId: string,\n      params: WorkflowToolInput,\n      signal?: AbortSignal,\n      onUpdate?: (update: AgentToolResult<WorkflowSnapshot | undefined>) => void,\n    ): Promise<AgentToolResult<WorkflowSnapshot | { error: string }>> {\n      let script: string;\n      let resolvedSource: 'name' | 'script' = 'script';\n      try {\n        const resolved = resolveScript(params, deps.catalog);\n        script = resolved.script;\n        resolvedSource = resolved.source;\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return {\n          content: [{ type: 'text', text: `workflow: ${message}` }],\n          details: { error: message },\n        };\n      }\n\n      const cfg = deps.getConfig();\n      const wfCfg = cfg?.agents?.defaults?.workflow;\n      const concurrency = wfCfg?.maxConcurrency ?? DEFAULT_MAX_CONCURRENCY;\n      const maxSubagents = wfCfg?.maxSubagents ?? DEFAULT_MAX_SUBAGENTS;\n      const timeoutSec = clampTimeout(wfCfg?.defaultTimeoutSec);\n\n      // Parse early so a bad script returns an error result instead of throwing\n      // through the agent loop. The runtime parses again, but that's cheap.\n      let meta: WorkflowMeta;\n      try {\n        meta = parseWorkflowScript(script).meta;\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return {\n          content: [\n            {\n              type: 'text',\n              text:\n                resolvedSource === 'name'\n                  ? `workflow \"${params.name}\" failed to parse: ${message}`\n                  : `workflow parse error: ${message}`,\n            },\n          ],\n          details: { error: message },\n        };\n      }\n\n      const snapshot: WorkflowSnapshot = {\n        name: meta.name,\n        description: meta.description,\n        phases: [],\n        logs: [],\n        agents: [],\n        agentCount: 0,\n        runningCount: 0,\n        doneCount: 0,\n        errorCount: 0,\n        skippedCount: 0,\n      };\n\n      const pushUpdate = (completed = false) => {\n        recomputeCounts(snapshot);\n        onUpdate?.({\n          content: [\n            {\n              type: 'text',\n              text: renderWorkflowText(snapshot, completed, { showResultPreviews: false }),\n            },\n          ],\n          details: snapshot,\n        });\n      };\n\n      const runner = new DelegateSubagentRunner({\n        workspace: deps.workspace,\n        bus: deps.bus,\n        getDefaultModel: deps.getSubagentModel,\n        getConfig: deps.getConfig,\n        toolExecutorConfig: deps.toolExecutorConfig,\n        buildChildTools: deps.buildChildTools,\n      });\n\n      // Combined abort: parent signal + per-run timeout.\n      const controller = new AbortController();\n      const onParentAbort = () => controller.abort();\n      signal?.addEventListener('abort', onParentAbort, { once: true });\n      const timeoutHandle =\n        timeoutSec > 0\n          ? setTimeout(() => controller.abort(), timeoutSec * 1000)\n          : undefined;\n\n      pushUpdate();\n\n      try {\n        const result = await runWorkflow(script, { runner }, {\n          cwd: deps.workspace,\n          args: params.args,\n          signal: controller.signal,\n          concurrency,\n          maxSubagents,\n          onLog: (message) => {\n            snapshot.logs.push(message);\n            pushUpdate();\n          },\n          onPhase: (title) => {\n            snapshot.currentPhase = title;\n            if (!snapshot.phases.includes(title)) snapshot.phases.push(title);\n            pushUpdate();\n          },\n          onAgentStart: (event) => {\n            snapshot.agents.push({\n              id: event.id,\n              label: event.label,\n              phase: event.phase,\n              prompt: event.prompt,\n              status: 'running',\n            });\n            pushUpdate();\n          },\n          onAgentEnd: (event) => {\n            const agent = findAgentById(snapshot.agents, event.id);\n            if (agent) {\n              agent.status = event.status;\n              agent.resultPreview = previewValue(event.result);\n            }\n            pushUpdate();\n          },\n        });\n\n        if (result.agentCount === 0) {\n          const reason =\n            'workflow scripts must call agent() at least once; this workflow declared phases but never ran a subagent.';\n          snapshot.logs.push(reason);\n          pushUpdate(true);\n          return {\n            content: [{ type: 'text', text: reason }],\n            details: snapshot,\n          };\n        }\n\n        snapshot.result = result.result;\n        snapshot.durationMs = result.durationMs;\n        pushUpdate(true);\n\n        // Record for /workflow save — last successful run per session.\n        // Failures are intentionally skipped so users do not save broken scripts.\n        try {\n          getLastWorkflowMemory().record(deps.getCurrentSessionKey?.(), {\n            script,\n            metaName: result.meta.name,\n            source: resolvedSource,\n            recordedAt: Date.now(),\n          });\n        } catch {\n          // Memory recording is best-effort; never break a successful run on it.\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `workflow ${result.meta.name} completed: ${result.agentCount} subagent(s), ${snapshot.errorCount} error(s).\\n\\nResult:\\n${safeStringify(result.result)}`,\n            },\n          ],\n          details: snapshot,\n        };\n      } catch (e) {\n        if (controller.signal.aborted) {\n          for (const a of snapshot.agents) {\n            if (a.status === 'running') {\n              a.status = 'skipped';\n              a.error = 'aborted';\n            }\n          }\n          pushUpdate(true);\n          const reason = signal?.aborted ? 'workflow aborted' : `workflow timed out after ${timeoutSec}s`;\n          return {\n            content: [{ type: 'text', text: reason }],\n            details: snapshot,\n          };\n        }\n        const message = e instanceof Error ? e.message : String(e);\n        log.warn({ err: e, errorMessage: message, workflow: meta.name }, `workflow failed: ${message}`);\n        snapshot.logs.push(`workflow failed: ${message}`);\n        pushUpdate(true);\n        return {\n          content: [{ type: 'text', text: `workflow failed: ${message}` }],\n          details: snapshot,\n        };\n      } finally {\n        if (timeoutHandle) clearTimeout(timeoutHandle);\n        signal?.removeEventListener('abort', onParentAbort);\n      }\n    },\n  } as unknown as AgentTool;\n}\n\n// ---------------------------------------------------------------------------\n\nfunction normalizeScript(script: string): string {\n  let text = script.trim();\n  const fence = text.match(/^```(?:js|javascript)?\\s*\\n([\\s\\S]*?)\\n```$/i);\n  if (fence) text = fence[1].trim();\n  return text;\n}\n\nfunction resolveScript(\n  params: WorkflowToolInput,\n  catalog: WorkflowCatalog,\n): { script: string; source: 'name' | 'script' } {\n  const name = params.name?.trim();\n  if (name) {\n    const loaded = catalog.load(name);\n    return { script: loaded.script, source: 'name' };\n  }\n  if (!params.script || !params.script.trim()) {\n    throw new Error('either `name` or `script` is required.');\n  }\n  return { script: normalizeScript(params.script), source: 'script' };\n}\n\nfunction clampTimeout(requested: number | undefined): number {\n  const v = typeof requested === 'number' && Number.isFinite(requested) ? requested : DEFAULT_TIMEOUT_SEC;\n  if (v <= 0) return 0;\n  return Math.min(MAX_TIMEOUT_SEC, Math.max(1, Math.floor(v)));\n}\n\nfunction findAgentById(agents: WorkflowAgentSnapshot[], id: number): WorkflowAgentSnapshot | undefined {\n  // Linear scan — agent lists are small in practice (capped at maxSubagents).\n  for (let i = agents.length - 1; i >= 0; i--) {\n    if (agents[i].id === id) return agents[i];\n  }\n  return undefined;\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value, null, 2);\n  } catch {\n    return String(value);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;aAqBqD;AAkBrD,MAAM,MAAM,aAAa,gBAAgB;AAEzC,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAE9B,MAAM,qBAAqB,KAAK,OAAO;CACrC,MAAM,KAAK,SACT,KAAK,OAAO,EACV,aACE,yKAEH,CAAC,CACH;CACD,QAAQ,KAAK,SACX,KAAK,OAAO,EACV,aAAa;EACX;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,IAAI,EACZ,CAAC,CACH;CACD,MAAM,KAAK,SACT,KAAK,IAAI,EACP,aAAa,4EACd,CAAC,CACH;CACF,CAAC;AAuBF,SAAgB,mBAAmB,MAAmC;AACpE,QAAO;EACL,MAAM;EACN,OAAO;EACP,aAAa;GACX;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,KAAK,OAAO;EACd,YAAY;EAEZ,MAAM,QACJ,aACA,QACA,QACA,UACgE;GAChE,IAAI;GACJ,IAAI,iBAAoC;AACxC,OAAI;IACF,MAAM,WAAW,cAAc,QAAQ,KAAK,QAAQ;AACpD,aAAS,SAAS;AAClB,qBAAiB,SAAS;YACnB,GAAG;IACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,aAAa;MAAW,CAAC;KACzD,SAAS,EAAE,OAAO,SAAS;KAC5B;;GAIH,MAAM,QADM,KAAK,WACA,EAAE,QAAQ,UAAU;GACrC,MAAM,cAAc,OAAO,kBAAkB;GAC7C,MAAM,eAAe,OAAO,gBAAgB;GAC5C,MAAM,aAAa,aAAa,OAAO,kBAAkB;GAIzD,IAAI;AACJ,OAAI;AACF,WAAO,oBAAoB,OAAO,CAAC;YAC5B,GAAG;IACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MACE,mBAAmB,SACf,aAAa,OAAO,KAAK,qBAAqB,YAC9C,yBAAyB;MAChC,CACF;KACD,SAAS,EAAE,OAAO,SAAS;KAC5B;;GAGH,MAAM,WAA6B;IACjC,MAAM,KAAK;IACX,aAAa,KAAK;IAClB,QAAQ,EAAE;IACV,MAAM,EAAE;IACR,QAAQ,EAAE;IACV,YAAY;IACZ,cAAc;IACd,WAAW;IACX,YAAY;IACZ,cAAc;IACf;GAED,MAAM,cAAc,YAAY,UAAU;AACxC,oBAAgB,SAAS;AACzB,eAAW;KACT,SAAS,CACP;MACE,MAAM;MACN,MAAM,mBAAmB,UAAU,WAAW,EAAE,oBAAoB,OAAO,CAAC;MAC7E,CACF;KACD,SAAS;KACV,CAAC;;GAGJ,MAAM,SAAS,IAAI,uBAAuB;IACxC,WAAW,KAAK;IAChB,KAAK,KAAK;IACV,iBAAiB,KAAK;IACtB,WAAW,KAAK;IAChB,oBAAoB,KAAK;IACzB,iBAAiB,KAAK;IACvB,CAAC;GAGF,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,sBAAsB,WAAW,OAAO;AAC9C,WAAQ,iBAAiB,SAAS,eAAe,EAAE,MAAM,MAAM,CAAC;GAChE,MAAM,gBACJ,aAAa,IACT,iBAAiB,WAAW,OAAO,EAAE,aAAa,IAAK,GACvD,KAAA;AAEN,eAAY;AAEZ,OAAI;IACF,MAAM,SAAS,MAAM,YAAY,QAAQ,EAAE,QAAQ,EAAE;KACnD,KAAK,KAAK;KACV,MAAM,OAAO;KACb,QAAQ,WAAW;KACnB;KACA;KACA,QAAQ,YAAY;AAClB,eAAS,KAAK,KAAK,QAAQ;AAC3B,kBAAY;;KAEd,UAAU,UAAU;AAClB,eAAS,eAAe;AACxB,UAAI,CAAC,SAAS,OAAO,SAAS,MAAM,CAAE,UAAS,OAAO,KAAK,MAAM;AACjE,kBAAY;;KAEd,eAAe,UAAU;AACvB,eAAS,OAAO,KAAK;OACnB,IAAI,MAAM;OACV,OAAO,MAAM;OACb,OAAO,MAAM;OACb,QAAQ,MAAM;OACd,QAAQ;OACT,CAAC;AACF,kBAAY;;KAEd,aAAa,UAAU;MACrB,MAAM,QAAQ,cAAc,SAAS,QAAQ,MAAM,GAAG;AACtD,UAAI,OAAO;AACT,aAAM,SAAS,MAAM;AACrB,aAAM,gBAAgB,aAAa,MAAM,OAAO;;AAElD,kBAAY;;KAEf,CAAC;AAEF,QAAI,OAAO,eAAe,GAAG;KAC3B,MAAM,SACJ;AACF,cAAS,KAAK,KAAK,OAAO;AAC1B,gBAAW,KAAK;AAChB,YAAO;MACL,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM;OAAQ,CAAC;MACzC,SAAS;MACV;;AAGH,aAAS,SAAS,OAAO;AACzB,aAAS,aAAa,OAAO;AAC7B,eAAW,KAAK;AAIhB,QAAI;AACF,4BAAuB,CAAC,OAAO,KAAK,wBAAwB,EAAE;MAC5D;MACA,UAAU,OAAO,KAAK;MACtB,QAAQ;MACR,YAAY,KAAK,KAAK;MACvB,CAAC;YACI;AAIR,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MAAM,YAAY,OAAO,KAAK,KAAK,cAAc,OAAO,WAAW,gBAAgB,SAAS,WAAW,yBAAyB,cAAc,OAAO,OAAO;MAC7J,CACF;KACD,SAAS;KACV;YACM,GAAG;AACV,QAAI,WAAW,OAAO,SAAS;AAC7B,UAAK,MAAM,KAAK,SAAS,OACvB,KAAI,EAAE,WAAW,WAAW;AAC1B,QAAE,SAAS;AACX,QAAE,QAAQ;;AAGd,gBAAW,KAAK;AAEhB,YAAO;MACL,SAAS,CAAC;OAAE,MAAM;OAAQ,MAFb,QAAQ,UAAU,qBAAqB,4BAA4B,WAAW;OAEnD,CAAC;MACzC,SAAS;MACV;;IAEH,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,QAAI,KAAK;KAAE,KAAK;KAAG,cAAc;KAAS,UAAU,KAAK;KAAM,EAAE,oBAAoB,UAAU;AAC/F,aAAS,KAAK,KAAK,oBAAoB,UAAU;AACjD,eAAW,KAAK;AAChB,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,oBAAoB;MAAW,CAAC;KAChE,SAAS;KACV;aACO;AACR,QAAI,cAAe,cAAa,cAAc;AAC9C,YAAQ,oBAAoB,SAAS,cAAc;;;EAGxD;;AAKH,SAAS,gBAAgB,QAAwB;CAC/C,IAAI,OAAO,OAAO,MAAM;CACxB,MAAM,QAAQ,KAAK,MAAM,+CAA+C;AACxE,KAAI,MAAO,QAAO,MAAM,GAAG,MAAM;AACjC,QAAO;;AAGT,SAAS,cACP,QACA,SAC+C;CAC/C,MAAM,OAAO,OAAO,MAAM,MAAM;AAChC,KAAI,KAEF,QAAO;EAAE,QADM,QAAQ,KAAK,KACL,CAAC;EAAQ,QAAQ;EAAQ;AAElD,KAAI,CAAC,OAAO,UAAU,CAAC,OAAO,OAAO,MAAM,CACzC,OAAM,IAAI,MAAM,yCAAyC;AAE3D,QAAO;EAAE,QAAQ,gBAAgB,OAAO,OAAO;EAAE,QAAQ;EAAU;;AAGrE,SAAS,aAAa,WAAuC;CAC3D,MAAM,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,UAAU,GAAG,YAAY;AACpF,KAAI,KAAK,EAAG,QAAO;AACnB,QAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;;AAG9D,SAAS,cAAc,QAAiC,IAA+C;AAErG,MAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,IACtC,KAAI,OAAO,GAAG,OAAO,GAAI,QAAO,OAAO;;AAK3C,SAAS,cAAc,OAAwB;AAC7C,KAAI;AACF,SAAO,KAAK,UAAU,OAAO,MAAM,EAAE;SAC/B;AACN,SAAO,OAAO,MAAM"}
+{"version":3,"file":"workflow-tool.js","names":["resolveModelById"],"sources":["../../../../src/agent/tools/workflow-tool.ts"],"sourcesContent":["/**\n * `workflow` — the AgentTool the parent model calls to spawn a fan-out run.\n *\n * Shape mirrors `delegate-tool`: factory builds a closure over deps; `execute`\n * parses the script, instantiates the {@link DelegateSubagentRunner}, drives the\n * {@link runWorkflow} runtime, and pushes a live text snapshot through\n * `onUpdate` for streaming UIs (TUI, gateway console).\n *\n * Why this lives in `src/agent/tools/` (not under `src/agent/workflow/`):\n * the runtime is reusable infrastructure; the AgentTool wrapping is a\n * presentation concern that depends on the AgentToolsFactory wiring. Keeping\n * the wrapper here matches how `delegate-tool` and `execute-code-tool` are\n * organised today.\n */\n\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport type { Api, Model } from '@earendil-works/pi-ai';\n\nimport type { Config } from '../../config/schema.js';\nimport type { MessageBus } from '../../infra/bus/index.js';\nimport { createLogger } from '../../utils/logger.js';\n\nimport type { BuildChildToolsOptions } from '../child-agent-factory.js';\nimport {\n  DelegateSubagentRunner,\n  getLastWorkflowMemory,\n  parseWorkflowScript,\n  previewValue,\n  recomputeCounts,\n  renderWorkflowText,\n  runWorkflow,\n  type WorkflowAgentSnapshot,\n  type WorkflowCatalog,\n  type WorkflowMeta,\n  type WorkflowSnapshot,\n} from '../workflow/index.js';\nimport { resolveModel as resolveModelById } from '../../providers/index.js';\nimport type { ToolExecutorConfig } from './executor.js';\n\nconst log = createLogger('workflow-tool');\n\nconst DEFAULT_TIMEOUT_SEC = 30 * 60;\nconst MAX_TIMEOUT_SEC = 4 * 60 * 60;\nconst DEFAULT_MAX_CONCURRENCY = 16;\nconst DEFAULT_MAX_SUBAGENTS = 1000;\n\nconst WorkflowToolSchema = Type.Object({\n  name: Type.Optional(\n    Type.String({\n      description:\n        'Name of a saved workflow to run. Either `name` or `script` is required. ' +\n        'Use `name` whenever the user references a known workflow (built-in or in ~/.xopc/workflows/).',\n    }),\n  ),\n  script: Type.Optional(\n    Type.String({\n      description: [\n        'Raw JavaScript workflow script (no Markdown fences, no TypeScript syntax). Ignored when `name` is set.',\n        \"First statement: export const meta = { name: 'snake_case', description: 'short, human-readable' }.\",\n        'Use phase(title), agent(prompt, opts), parallel(arrayOfFunctions), pipeline(items, ...stages), log(message), args, and budget.',\n        'The script must call agent() at least once.',\n        'parallel() requires functions: await parallel(items.map(item => () => agent(...))).',\n      ].join(' '),\n    }),\n  ),\n  args: Type.Optional(\n    Type.Any({\n      description: 'Optional JSON value exposed to the workflow script as the global `args`.',\n    }),\n  ),\n});\n\nexport type WorkflowToolInput = {\n  name?: string;\n  script?: string;\n  args?: unknown;\n};\n\nexport interface WorkflowToolDeps {\n  workspace: string;\n  bus: MessageBus;\n  /** Returns the parent agent's primary model — subagents default to this. */\n  getSubagentModel: () => Model<Api>;\n  getConfig: () => Config | undefined;\n  /** Same injection point delegate-tool uses; supplied by AgentToolsFactory. */\n  buildChildTools: (opts: BuildChildToolsOptions) => AgentTool<any, any>[];\n  toolExecutorConfig?: Partial<ToolExecutorConfig>;\n  /** Catalog for `name` lookups (built-in + ~/.xopc/workflows/). */\n  catalog: WorkflowCatalog;\n  /** Per-call sessionKey lookup — used to record \"last successful workflow\" for /workflow save. */\n  getCurrentSessionKey?: () => string | undefined;\n}\n\nexport function createWorkflowTool(deps: WorkflowToolDeps): AgentTool {\n  return {\n    name: 'workflow',\n    label: '◆ Workflow',\n    description: [\n      'Run a deterministic JavaScript workflow that orchestrates multiple isolated subagents through agent(), parallel(), and pipeline().',\n      'Two ways to invoke:',\n      '  1. `name`: run a saved workflow from the catalog (built-in or ~/.xopc/workflows/). Prefer this when the user references a known name.',\n      '  2. `script`: provide a raw JS workflow inline. Use when no saved workflow fits. Header is required: export const meta = { name, description }.',\n      'Named-workflow triggers — call this tool with `{ name: \"<name>\" }` IMMEDIATELY when the user message is any of:',\n      '  • a bare workflow name like \"/audit_repo\", \"/pr_review\", \"/research\", or \"audit_repo\"',\n      '  • \"run the audit_repo workflow\", \"review this PR\", \"debug this error\", \"kick off research\", \"do a multi_perspective_review on X\" (extract args when natural: target, question, error, diff)',\n      '  • after /workflows lists saved workflows and the user picks one',\n      'Use phase(title) at runtime to mark progress groups. Each agent() returns a string, or a schema-validated object when opts.schema is set.',\n      'Prefer for decomposable work: repo audits, PR review, incident triage, multi-perspective review, fan-out research, large refactors. Do not use for a single quick read/edit.',\n      'parallel() takes thunks, not promises: parallel(items.map(item => () => agent(...))).',\n      'pipeline(items, ...stages) interleaves items across stages — fastest path by default; only use parallel() when you genuinely need a cross-item barrier.',\n      'Failed agent()/parallel()/pipeline() entries resolve to null; check before synthesizing.',\n      'Do not use Date.now(), Math.random(), new Date(), require, import, fs, or network APIs — they are unavailable for determinism.',\n      'Always end with a synthesis agent() that consolidates findings, especially when you fan out for review or research.',\n    ].join('\\n\\n'),\n    parameters: WorkflowToolSchema,\n\n    async execute(\n      _toolCallId: string,\n      params: WorkflowToolInput,\n      signal?: AbortSignal,\n      onUpdate?: (update: AgentToolResult<WorkflowSnapshot | undefined>) => void,\n    ): Promise<AgentToolResult<WorkflowSnapshot | { error: string }>> {\n      let script: string;\n      let resolvedSource: 'name' | 'script' = 'script';\n      try {\n        const resolved = resolveScript(params, deps.catalog);\n        script = resolved.script;\n        resolvedSource = resolved.source;\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return {\n          content: [{ type: 'text', text: `workflow: ${message}` }],\n          details: { error: message },\n        };\n      }\n\n      const cfg = deps.getConfig();\n      const wfCfg = cfg?.agents?.defaults?.workflow;\n      const concurrency = wfCfg?.maxConcurrency ?? DEFAULT_MAX_CONCURRENCY;\n      const maxSubagents = wfCfg?.maxSubagents ?? DEFAULT_MAX_SUBAGENTS;\n      const timeoutSec = clampTimeout(wfCfg?.defaultTimeoutSec);\n\n      // Parse early so a bad script returns an error result instead of throwing\n      // through the agent loop. The runtime parses again, but that's cheap.\n      let meta: WorkflowMeta;\n      try {\n        meta = parseWorkflowScript(script).meta;\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return {\n          content: [\n            {\n              type: 'text',\n              text:\n                resolvedSource === 'name'\n                  ? `workflow \"${params.name}\" failed to parse: ${message}`\n                  : `workflow parse error: ${message}`,\n            },\n          ],\n          details: { error: message },\n        };\n      }\n\n      const snapshot: WorkflowSnapshot = {\n        name: meta.name,\n        description: meta.description,\n        phases: [],\n        logs: [],\n        agents: [],\n        agentCount: 0,\n        runningCount: 0,\n        doneCount: 0,\n        errorCount: 0,\n        skippedCount: 0,\n      };\n\n      const pushUpdate = (completed = false) => {\n        recomputeCounts(snapshot);\n        onUpdate?.({\n          content: [\n            {\n              type: 'text',\n              text: renderWorkflowText(snapshot, completed, { showResultPreviews: false }),\n            },\n          ],\n          details: snapshot,\n        });\n      };\n\n      const runner = new DelegateSubagentRunner({\n        workspace: deps.workspace,\n        bus: deps.bus,\n        getDefaultModel: deps.getSubagentModel,\n        getConfig: deps.getConfig,\n        toolExecutorConfig: deps.toolExecutorConfig,\n        buildChildTools: deps.buildChildTools,\n      });\n\n      const resolveModelId = (modelId: string): Model<Api> => resolveModelById(modelId);\n\n      // Combined abort: parent signal + per-run timeout.\n      const controller = new AbortController();\n      const onParentAbort = () => controller.abort();\n      signal?.addEventListener('abort', onParentAbort, { once: true });\n      const timeoutHandle =\n        timeoutSec > 0\n          ? setTimeout(() => controller.abort(), timeoutSec * 1000)\n          : undefined;\n\n      pushUpdate();\n\n      try {\n        const result = await runWorkflow(script, { runner, resolveModelId }, {\n          cwd: deps.workspace,\n          args: params.args,\n          signal: controller.signal,\n          concurrency,\n          maxSubagents,\n          onLog: (message) => {\n            snapshot.logs.push(message);\n            pushUpdate();\n          },\n          onPhase: (title) => {\n            snapshot.currentPhase = title;\n            if (!snapshot.phases.includes(title)) snapshot.phases.push(title);\n            pushUpdate();\n          },\n          onAgentStart: (event) => {\n            snapshot.agents.push({\n              id: event.id,\n              label: event.label,\n              phase: event.phase,\n              prompt: event.prompt,\n              status: 'running',\n            });\n            pushUpdate();\n          },\n          onAgentEnd: (event) => {\n            const agent = findAgentById(snapshot.agents, event.id);\n            if (agent) {\n              agent.status = event.status;\n              agent.resultPreview = previewValue(event.result);\n            }\n            pushUpdate();\n          },\n        });\n\n        if (result.agentCount === 0) {\n          const reason =\n            'workflow scripts must call agent() at least once; this workflow declared phases but never ran a subagent.';\n          snapshot.logs.push(reason);\n          pushUpdate(true);\n          return {\n            content: [{ type: 'text', text: reason }],\n            details: snapshot,\n          };\n        }\n\n        snapshot.result = result.result;\n        snapshot.durationMs = result.durationMs;\n        pushUpdate(true);\n\n        // Record for /workflow save — last successful run per session.\n        // Failures are intentionally skipped so users do not save broken scripts.\n        try {\n          getLastWorkflowMemory().record(deps.getCurrentSessionKey?.(), {\n            script,\n            metaName: result.meta.name,\n            source: resolvedSource,\n            recordedAt: Date.now(),\n          });\n        } catch {\n          // Memory recording is best-effort; never break a successful run on it.\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `workflow ${result.meta.name} completed: ${result.agentCount} subagent(s), ${snapshot.errorCount} error(s).\\n\\nResult:\\n${safeStringify(result.result)}`,\n            },\n          ],\n          details: snapshot,\n        };\n      } catch (e) {\n        if (controller.signal.aborted) {\n          for (const a of snapshot.agents) {\n            if (a.status === 'running') {\n              a.status = 'skipped';\n              a.error = 'aborted';\n            }\n          }\n          pushUpdate(true);\n          const reason = signal?.aborted ? 'workflow aborted' : `workflow timed out after ${timeoutSec}s`;\n          return {\n            content: [{ type: 'text', text: reason }],\n            details: snapshot,\n          };\n        }\n        const message = e instanceof Error ? e.message : String(e);\n        log.warn({ err: e, errorMessage: message, workflow: meta.name }, `workflow failed: ${message}`);\n        snapshot.logs.push(`workflow failed: ${message}`);\n        pushUpdate(true);\n        return {\n          content: [{ type: 'text', text: `workflow failed: ${message}` }],\n          details: snapshot,\n        };\n      } finally {\n        if (timeoutHandle) clearTimeout(timeoutHandle);\n        signal?.removeEventListener('abort', onParentAbort);\n      }\n    },\n  } as unknown as AgentTool;\n}\n\n// ---------------------------------------------------------------------------\n\nfunction normalizeScript(script: string): string {\n  let text = script.trim();\n  const fence = text.match(/^```(?:js|javascript)?\\s*\\n([\\s\\S]*?)\\n```$/i);\n  if (fence) text = fence[1].trim();\n  return text;\n}\n\nfunction resolveScript(\n  params: WorkflowToolInput,\n  catalog: WorkflowCatalog,\n): { script: string; source: 'name' | 'script' } {\n  const name = params.name?.trim();\n  if (name) {\n    const loaded = catalog.load(name);\n    return { script: loaded.script, source: 'name' };\n  }\n  if (!params.script || !params.script.trim()) {\n    throw new Error('either `name` or `script` is required.');\n  }\n  return { script: normalizeScript(params.script), source: 'script' };\n}\n\nfunction clampTimeout(requested: number | undefined): number {\n  const v = typeof requested === 'number' && Number.isFinite(requested) ? requested : DEFAULT_TIMEOUT_SEC;\n  if (v <= 0) return 0;\n  return Math.min(MAX_TIMEOUT_SEC, Math.max(1, Math.floor(v)));\n}\n\nfunction findAgentById(agents: WorkflowAgentSnapshot[], id: number): WorkflowAgentSnapshot | undefined {\n  // Linear scan — agent lists are small in practice (capped at maxSubagents).\n  for (let i = agents.length - 1; i >= 0; i--) {\n    if (agents[i].id === id) return agents[i];\n  }\n  return undefined;\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value, null, 2);\n  } catch {\n    return String(value);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;aAqBqD;gBAgBuB;AAG5E,MAAM,MAAM,aAAa,gBAAgB;AAEzC,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAE9B,MAAM,qBAAqB,KAAK,OAAO;CACrC,MAAM,KAAK,SACT,KAAK,OAAO,EACV,aACE,yKAEH,CAAC,CACH;CACD,QAAQ,KAAK,SACX,KAAK,OAAO,EACV,aAAa;EACX;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,IAAI,EACZ,CAAC,CACH;CACD,MAAM,KAAK,SACT,KAAK,IAAI,EACP,aAAa,4EACd,CAAC,CACH;CACF,CAAC;AAuBF,SAAgB,mBAAmB,MAAmC;AACpE,QAAO;EACL,MAAM;EACN,OAAO;EACP,aAAa;GACX;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,KAAK,OAAO;EACd,YAAY;EAEZ,MAAM,QACJ,aACA,QACA,QACA,UACgE;GAChE,IAAI;GACJ,IAAI,iBAAoC;AACxC,OAAI;IACF,MAAM,WAAW,cAAc,QAAQ,KAAK,QAAQ;AACpD,aAAS,SAAS;AAClB,qBAAiB,SAAS;YACnB,GAAG;IACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,aAAa;MAAW,CAAC;KACzD,SAAS,EAAE,OAAO,SAAS;KAC5B;;GAIH,MAAM,QADM,KAAK,WACA,EAAE,QAAQ,UAAU;GACrC,MAAM,cAAc,OAAO,kBAAkB;GAC7C,MAAM,eAAe,OAAO,gBAAgB;GAC5C,MAAM,aAAa,aAAa,OAAO,kBAAkB;GAIzD,IAAI;AACJ,OAAI;AACF,WAAO,oBAAoB,OAAO,CAAC;YAC5B,GAAG;IACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MACE,mBAAmB,SACf,aAAa,OAAO,KAAK,qBAAqB,YAC9C,yBAAyB;MAChC,CACF;KACD,SAAS,EAAE,OAAO,SAAS;KAC5B;;GAGH,MAAM,WAA6B;IACjC,MAAM,KAAK;IACX,aAAa,KAAK;IAClB,QAAQ,EAAE;IACV,MAAM,EAAE;IACR,QAAQ,EAAE;IACV,YAAY;IACZ,cAAc;IACd,WAAW;IACX,YAAY;IACZ,cAAc;IACf;GAED,MAAM,cAAc,YAAY,UAAU;AACxC,oBAAgB,SAAS;AACzB,eAAW;KACT,SAAS,CACP;MACE,MAAM;MACN,MAAM,mBAAmB,UAAU,WAAW,EAAE,oBAAoB,OAAO,CAAC;MAC7E,CACF;KACD,SAAS;KACV,CAAC;;GAGJ,MAAM,SAAS,IAAI,uBAAuB;IACxC,WAAW,KAAK;IAChB,KAAK,KAAK;IACV,iBAAiB,KAAK;IACtB,WAAW,KAAK;IAChB,oBAAoB,KAAK;IACzB,iBAAiB,KAAK;IACvB,CAAC;GAEF,MAAM,kBAAkB,YAAgCA,aAAiB,QAAQ;GAGjF,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,sBAAsB,WAAW,OAAO;AAC9C,WAAQ,iBAAiB,SAAS,eAAe,EAAE,MAAM,MAAM,CAAC;GAChE,MAAM,gBACJ,aAAa,IACT,iBAAiB,WAAW,OAAO,EAAE,aAAa,IAAK,GACvD,KAAA;AAEN,eAAY;AAEZ,OAAI;IACF,MAAM,SAAS,MAAM,YAAY,QAAQ;KAAE;KAAQ;KAAgB,EAAE;KACnE,KAAK,KAAK;KACV,MAAM,OAAO;KACb,QAAQ,WAAW;KACnB;KACA;KACA,QAAQ,YAAY;AAClB,eAAS,KAAK,KAAK,QAAQ;AAC3B,kBAAY;;KAEd,UAAU,UAAU;AAClB,eAAS,eAAe;AACxB,UAAI,CAAC,SAAS,OAAO,SAAS,MAAM,CAAE,UAAS,OAAO,KAAK,MAAM;AACjE,kBAAY;;KAEd,eAAe,UAAU;AACvB,eAAS,OAAO,KAAK;OACnB,IAAI,MAAM;OACV,OAAO,MAAM;OACb,OAAO,MAAM;OACb,QAAQ,MAAM;OACd,QAAQ;OACT,CAAC;AACF,kBAAY;;KAEd,aAAa,UAAU;MACrB,MAAM,QAAQ,cAAc,SAAS,QAAQ,MAAM,GAAG;AACtD,UAAI,OAAO;AACT,aAAM,SAAS,MAAM;AACrB,aAAM,gBAAgB,aAAa,MAAM,OAAO;;AAElD,kBAAY;;KAEf,CAAC;AAEF,QAAI,OAAO,eAAe,GAAG;KAC3B,MAAM,SACJ;AACF,cAAS,KAAK,KAAK,OAAO;AAC1B,gBAAW,KAAK;AAChB,YAAO;MACL,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM;OAAQ,CAAC;MACzC,SAAS;MACV;;AAGH,aAAS,SAAS,OAAO;AACzB,aAAS,aAAa,OAAO;AAC7B,eAAW,KAAK;AAIhB,QAAI;AACF,4BAAuB,CAAC,OAAO,KAAK,wBAAwB,EAAE;MAC5D;MACA,UAAU,OAAO,KAAK;MACtB,QAAQ;MACR,YAAY,KAAK,KAAK;MACvB,CAAC;YACI;AAIR,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MAAM,YAAY,OAAO,KAAK,KAAK,cAAc,OAAO,WAAW,gBAAgB,SAAS,WAAW,yBAAyB,cAAc,OAAO,OAAO;MAC7J,CACF;KACD,SAAS;KACV;YACM,GAAG;AACV,QAAI,WAAW,OAAO,SAAS;AAC7B,UAAK,MAAM,KAAK,SAAS,OACvB,KAAI,EAAE,WAAW,WAAW;AAC1B,QAAE,SAAS;AACX,QAAE,QAAQ;;AAGd,gBAAW,KAAK;AAEhB,YAAO;MACL,SAAS,CAAC;OAAE,MAAM;OAAQ,MAFb,QAAQ,UAAU,qBAAqB,4BAA4B,WAAW;OAEnD,CAAC;MACzC,SAAS;MACV;;IAEH,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,QAAI,KAAK;KAAE,KAAK;KAAG,cAAc;KAAS,UAAU,KAAK;KAAM,EAAE,oBAAoB,UAAU;AAC/F,aAAS,KAAK,KAAK,oBAAoB,UAAU;AACjD,eAAW,KAAK;AAChB,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,oBAAoB;MAAW,CAAC;KAChE,SAAS;KACV;aACO;AACR,QAAI,cAAe,cAAa,cAAc;AAC9C,YAAQ,oBAAoB,SAAS,cAAc;;;EAGxD;;AAKH,SAAS,gBAAgB,QAAwB;CAC/C,IAAI,OAAO,OAAO,MAAM;CACxB,MAAM,QAAQ,KAAK,MAAM,+CAA+C;AACxE,KAAI,MAAO,QAAO,MAAM,GAAG,MAAM;AACjC,QAAO;;AAGT,SAAS,cACP,QACA,SAC+C;CAC/C,MAAM,OAAO,OAAO,MAAM,MAAM;AAChC,KAAI,KAEF,QAAO;EAAE,QADM,QAAQ,KAAK,KACL,CAAC;EAAQ,QAAQ;EAAQ;AAElD,KAAI,CAAC,OAAO,UAAU,CAAC,OAAO,OAAO,MAAM,CACzC,OAAM,IAAI,MAAM,yCAAyC;AAE3D,QAAO;EAAE,QAAQ,gBAAgB,OAAO,OAAO;EAAE,QAAQ;EAAU;;AAGrE,SAAS,aAAa,WAAuC;CAC3D,MAAM,IAAI,OAAO,cAAc,YAAY,OAAO,SAAS,UAAU,GAAG,YAAY;AACpF,KAAI,KAAK,EAAG,QAAO;AACnB,QAAO,KAAK,IAAI,iBAAiB,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;;AAG9D,SAAS,cAAc,QAAiC,IAA+C;AAErG,MAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,IACtC,KAAI,OAAO,GAAG,OAAO,GAAI,QAAO,OAAO;;AAK3C,SAAS,cAAc,OAAwB;AAC7C,KAAI;AACF,SAAO,KAAK,UAAU,OAAO,MAAM,EAAE;SAC/B;AACN,SAAO,OAAO,MAAM"}

package/dist/src/agent/workflow/channel-capability.d.ts

@@ -42,9 +42,9 @@ export interface WorkflowProgressPostInput {
      * prefixes mid-run `append` messages with "▾ progress" so the user can tell
      * them apart from the final summary).
      *
-     * Optional for backwards compatibility with hand-rolled callers and unit
-     * tests; the broker always provides it. Capabilities that consume the field
-     * should default to `'edit'` when missing.
+     * Optional only to keep hand-rolled callers and unit-test stubs lean — the
+     * broker always provides it. Capabilities that consume the field should
+     * default to `'edit'` when missing.
      */
     mode?: WorkflowProgressMode;
 }

package/dist/src/agent/workflow/lint.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Static lint for workflow scripts.
+ *
+ * Catches the single most common AI-authoring bug: calling `agent()`,
+ * `parallel()`, or `pipeline()` without `await` and then using the returned
+ * Promise as if it were a value. The runtime would throw a cryptic TypeError
+ * like `results.map is not a function`; this lint converts it into an
+ * actionable error before the script ever runs.
+ *
+ * Rules (per matching CallExpression):
+ *   Allowed parents
+ *     - AwaitExpression argument                  `await parallel(...)`
+ *     - ReturnStatement argument                  `return agent(...)` (auto-unwraps)
+ *     - ExpressionStatement                       fire-and-forget; pending agents drain
+ *     - ArrowFunctionExpression expression body   `() => agent(...)` (thunk for parallel/pipeline)
+ *   Anything else (VariableDeclarator init, MemberExpression object, template
+ *   interpolation, binary/logical operand, call argument, property/array
+ *   element, ...) is rejected with a teaching message.
+ *
+ * Out of scope (handled by the runtime):
+ *   - `parallel([agent(...), agent(...)])` (promises instead of thunks) — caught
+ *     by the runtime's TypeError ("expects an array of functions, not promises").
+ *   - Promise-as-value bugs that survive lint (dynamic indirection, late await).
+ */
+import type { Node } from 'acorn';
+type AnyNode = Node & {
+    [key: string]: any;
+    start: number;
+    end: number;
+    loc?: {
+        start: {
+            line: number;
+            column: number;
+        };
+    };
+};
+export declare function lintAwaits(ast: AnyNode): void;
+export {};

package/dist/src/agent/workflow/lint.js

@@ -0,0 +1,74 @@
+//#region src/agent/workflow/lint.ts
+const LINT_TARGETS = new Set([
+	"agent",
+	"parallel",
+	"pipeline"
+]);
+function lintAwaits(ast) {
+	walk(ast, null, (node, parent) => {
+		if (!isLintTarget(node)) return;
+		if (isAcceptableParent(parent, node)) return;
+		const calleeName = node.callee.name;
+		const line = node.loc?.start.line ?? "?";
+		throw new Error(formatError(calleeName, line, parent));
+	});
+}
+function isLintTarget(node) {
+	if (node.type !== "CallExpression") return false;
+	const callee = node.callee;
+	if (!callee || callee.type !== "Identifier") return false;
+	return LINT_TARGETS.has(callee.name);
+}
+function isAcceptableParent(parent, call) {
+	if (!parent) return false;
+	switch (parent.type) {
+		case "AwaitExpression": return parent.argument === call;
+		case "ReturnStatement": return parent.argument === call;
+		case "ExpressionStatement": return parent.expression === call;
+		case "ArrowFunctionExpression": return parent.expression === true && parent.body === call;
+		default: return false;
+	}
+}
+function formatError(name, line, parent) {
+	const ctx = parentContextHint(parent);
+	return [
+		`workflow lint error at line ${line}: \`${name}(...)\` returns a Promise but is used without 'await'${ctx ? ` (${ctx})` : ""}.`,
+		`  ❌ const x = ${name}(...); x.map(...)`,
+		`  ✅ const x = await ${name}(...); x.map(...)`,
+		`Workflow scripts run in an async IIFE — 'await' parallel()/pipeline()/agent() before using their results, or 'return' them directly.`
+	].join("\n");
+}
+function parentContextHint(parent) {
+	if (!parent) return "";
+	switch (parent.type) {
+		case "VariableDeclarator": return "assigned to variable";
+		case "AssignmentExpression": return "assigned via =";
+		case "MemberExpression": return "method/property access on Promise";
+		case "TemplateLiteral": return "interpolated in template string";
+		case "BinaryExpression":
+		case "LogicalExpression": return "used in expression";
+		case "ConditionalExpression": return "used as ternary operand";
+		case "CallExpression": return "passed as argument";
+		case "Property": return "used as object property value";
+		case "ArrayExpression": return "placed in array (use a thunk: () => call)";
+		case "SpreadElement": return "spread";
+		case "IfStatement":
+		case "WhileStatement":
+		case "DoWhileStatement":
+		case "ForStatement": return "used as condition";
+		default: return parent.type;
+	}
+}
+function walk(node, parent, visit) {
+	visit(node, parent);
+	for (const value of Object.values(node)) if (Array.isArray(value)) {
+		for (const v of value) if (isAstNode(v)) walk(v, node, visit);
+	} else if (isAstNode(value)) walk(value, node, visit);
+}
+function isAstNode(value) {
+	return !!value && typeof value === "object" && typeof value.type === "string";
+}
+//#endregion
+export { lintAwaits };
+
+//# sourceMappingURL=lint.js.map

package/dist/src/agent/workflow/lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint.js","names":[],"sources":["../../../../src/agent/workflow/lint.ts"],"sourcesContent":["/**\n * Static lint for workflow scripts.\n *\n * Catches the single most common AI-authoring bug: calling `agent()`,\n * `parallel()`, or `pipeline()` without `await` and then using the returned\n * Promise as if it were a value. The runtime would throw a cryptic TypeError\n * like `results.map is not a function`; this lint converts it into an\n * actionable error before the script ever runs.\n *\n * Rules (per matching CallExpression):\n *   Allowed parents\n *     - AwaitExpression argument                  `await parallel(...)`\n *     - ReturnStatement argument                  `return agent(...)` (auto-unwraps)\n *     - ExpressionStatement                       fire-and-forget; pending agents drain\n *     - ArrowFunctionExpression expression body   `() => agent(...)` (thunk for parallel/pipeline)\n *   Anything else (VariableDeclarator init, MemberExpression object, template\n *   interpolation, binary/logical operand, call argument, property/array\n *   element, ...) is rejected with a teaching message.\n *\n * Out of scope (handled by the runtime):\n *   - `parallel([agent(...), agent(...)])` (promises instead of thunks) — caught\n *     by the runtime's TypeError (\"expects an array of functions, not promises\").\n *   - Promise-as-value bugs that survive lint (dynamic indirection, late await).\n */\n\nimport type { Node } from 'acorn';\n\ntype AnyNode = Node & {\n  [key: string]: any;\n  start: number;\n  end: number;\n  loc?: { start: { line: number; column: number } };\n};\n\nconst LINT_TARGETS = new Set(['agent', 'parallel', 'pipeline']);\n\nexport function lintAwaits(ast: AnyNode): void {\n  walk(ast, null, (node, parent) => {\n    if (!isLintTarget(node)) return;\n    if (isAcceptableParent(parent, node)) return;\n    const calleeName = (node.callee as AnyNode).name as string;\n    const line = node.loc?.start.line ?? '?';\n    throw new Error(formatError(calleeName, line, parent));\n  });\n}\n\nfunction isLintTarget(node: AnyNode): boolean {\n  if (node.type !== 'CallExpression') return false;\n  const callee = node.callee as AnyNode | undefined;\n  if (!callee || callee.type !== 'Identifier') return false;\n  return LINT_TARGETS.has(callee.name);\n}\n\nfunction isAcceptableParent(parent: AnyNode | null, call: AnyNode): boolean {\n  if (!parent) return false;\n  switch (parent.type) {\n    case 'AwaitExpression':\n      return parent.argument === call;\n    case 'ReturnStatement':\n      return parent.argument === call;\n    case 'ExpressionStatement':\n      return parent.expression === call;\n    case 'ArrowFunctionExpression':\n      // `() => agent(...)` — thunk-style body that the runtime invokes/awaits.\n      return parent.expression === true && parent.body === call;\n    default:\n      return false;\n  }\n}\n\nfunction formatError(name: string, line: number | string, parent: AnyNode | null): string {\n  const ctx = parentContextHint(parent);\n  return [\n    `workflow lint error at line ${line}: \\`${name}(...)\\` returns a Promise but is used without 'await'${ctx ? ` (${ctx})` : ''}.`,\n    `  ❌ const x = ${name}(...); x.map(...)`,\n    `  ✅ const x = await ${name}(...); x.map(...)`,\n    `Workflow scripts run in an async IIFE — 'await' parallel()/pipeline()/agent() before using their results, or 'return' them directly.`,\n  ].join('\\n');\n}\n\nfunction parentContextHint(parent: AnyNode | null): string {\n  if (!parent) return '';\n  switch (parent.type) {\n    case 'VariableDeclarator':\n      return 'assigned to variable';\n    case 'AssignmentExpression':\n      return 'assigned via =';\n    case 'MemberExpression':\n      return 'method/property access on Promise';\n    case 'TemplateLiteral':\n      return 'interpolated in template string';\n    case 'BinaryExpression':\n    case 'LogicalExpression':\n      return 'used in expression';\n    case 'ConditionalExpression':\n      return 'used as ternary operand';\n    case 'CallExpression':\n      return 'passed as argument';\n    case 'Property':\n      return 'used as object property value';\n    case 'ArrayExpression':\n      return 'placed in array (use a thunk: () => ' + 'call)';\n    case 'SpreadElement':\n      return 'spread';\n    case 'IfStatement':\n    case 'WhileStatement':\n    case 'DoWhileStatement':\n    case 'ForStatement':\n      return 'used as condition';\n    default:\n      return parent.type;\n  }\n}\n\nfunction walk(\n  node: AnyNode,\n  parent: AnyNode | null,\n  visit: (n: AnyNode, p: AnyNode | null) => void,\n): void {\n  visit(node, parent);\n  for (const value of Object.values(node)) {\n    if (Array.isArray(value)) {\n      for (const v of value) {\n        if (isAstNode(v)) walk(v, node, visit);\n      }\n    } else if (isAstNode(value)) {\n      walk(value, node, visit);\n    }\n  }\n}\n\nfunction isAstNode(value: unknown): value is AnyNode {\n  return !!value && typeof value === 'object' && typeof (value as AnyNode).type === 'string';\n}\n"],"mappings":";AAkCA,MAAM,eAAe,IAAI,IAAI;CAAC;CAAS;CAAY;CAAW,CAAC;AAE/D,SAAgB,WAAW,KAAoB;AAC7C,MAAK,KAAK,OAAO,MAAM,WAAW;AAChC,MAAI,CAAC,aAAa,KAAK,CAAE;AACzB,MAAI,mBAAmB,QAAQ,KAAK,CAAE;EACtC,MAAM,aAAc,KAAK,OAAmB;EAC5C,MAAM,OAAO,KAAK,KAAK,MAAM,QAAQ;AACrC,QAAM,IAAI,MAAM,YAAY,YAAY,MAAM,OAAO,CAAC;GACtD;;AAGJ,SAAS,aAAa,MAAwB;AAC5C,KAAI,KAAK,SAAS,iBAAkB,QAAO;CAC3C,MAAM,SAAS,KAAK;AACpB,KAAI,CAAC,UAAU,OAAO,SAAS,aAAc,QAAO;AACpD,QAAO,aAAa,IAAI,OAAO,KAAK;;AAGtC,SAAS,mBAAmB,QAAwB,MAAwB;AAC1E,KAAI,CAAC,OAAQ,QAAO;AACpB,SAAQ,OAAO,MAAf;EACE,KAAK,kBACH,QAAO,OAAO,aAAa;EAC7B,KAAK,kBACH,QAAO,OAAO,aAAa;EAC7B,KAAK,sBACH,QAAO,OAAO,eAAe;EAC/B,KAAK,0BAEH,QAAO,OAAO,eAAe,QAAQ,OAAO,SAAS;EACvD,QACE,QAAO;;;AAIb,SAAS,YAAY,MAAc,MAAuB,QAAgC;CACxF,MAAM,MAAM,kBAAkB,OAAO;AACrC,QAAO;EACL,+BAA+B,KAAK,MAAM,KAAK,uDAAuD,MAAM,KAAK,IAAI,KAAK,GAAG;EAC7H,iBAAiB,KAAK;EACtB,uBAAuB,KAAK;EAC5B;EACD,CAAC,KAAK,KAAK;;AAGd,SAAS,kBAAkB,QAAgC;AACzD,KAAI,CAAC,OAAQ,QAAO;AACpB,SAAQ,OAAO,MAAf;EACE,KAAK,qBACH,QAAO;EACT,KAAK,uBACH,QAAO;EACT,KAAK,mBACH,QAAO;EACT,KAAK,kBACH,QAAO;EACT,KAAK;EACL,KAAK,oBACH,QAAO;EACT,KAAK,wBACH,QAAO;EACT,KAAK,iBACH,QAAO;EACT,KAAK,WACH,QAAO;EACT,KAAK,kBACH,QAAO;EACT,KAAK,gBACH,QAAO;EACT,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,eACH,QAAO;EACT,QACE,QAAO,OAAO;;;AAIpB,SAAS,KACP,MACA,QACA,OACM;AACN,OAAM,MAAM,OAAO;AACnB,MAAK,MAAM,SAAS,OAAO,OAAO,KAAK,CACrC,KAAI,MAAM,QAAQ,MAAM;OACjB,MAAM,KAAK,MACd,KAAI,UAAU,EAAE,CAAE,MAAK,GAAG,MAAM,MAAM;YAE/B,UAAU,MAAM,CACzB,MAAK,OAAO,MAAM,MAAM;;AAK9B,SAAS,UAAU,OAAkC;AACnD,QAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,OAAQ,MAAkB,SAAS"}

package/dist/src/agent/workflow/parser.js

@@ -1,3 +1,4 @@
+import { lintAwaits } from "./lint.js";
 import { parse } from "acorn";
 //#region src/agent/workflow/parser.ts
 /**
@@ -23,7 +24,8 @@ function parseWorkflowScript(script) {
 			sourceType: "module",
 			allowAwaitOutsideFunction: true,
 			allowReturnOutsideFunction: true,
-			ranges: false
+			ranges: false,
+			locations: true
 		});
 	} catch (e) {
 		const msg = e instanceof Error ? e.message : String(e);
@@ -31,6 +33,7 @@ function parseWorkflowScript(script) {
 	}
 	assertDeterministicAst(ast);
 	assertNoDangerousImports(ast);
+	lintAwaits(ast);
 	const first = ast.body?.[0];
 	if (first?.type !== "ExportNamedDeclaration") throw new Error("`export const meta = { name, description }` must be the first statement in the script");
 	const declaration = first.declaration;

package/dist/src/agent/workflow/parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"parser.js","names":[],"sources":["../../../../src/agent/workflow/parser.ts"],"sourcesContent":["/**\n * Workflow script parser.\n *\n * Responsibilities:\n *   1. Parse the script with acorn (latest ECMA, top-level await + return allowed).\n *   2. Enforce determinism — reject `Date.now()`, `Math.random()`, `new Date()`,\n *      `require`, `import`, dynamic eval. This keeps future resume/replay possible\n *      and surfaces non-deterministic mistakes early.\n *   3. Require the first statement to be `export const meta = <literal>`, validate\n *      the literal shape, and strip that line from the body returned to the runtime.\n *\n * Returning a `{ meta, body }` pair means the runtime can `vm.Script(body)` without\n * any further AST work.\n */\n\nimport { parse } from 'acorn';\nimport type { Node } from 'acorn';\n\nimport type { WorkflowMeta, WorkflowMetaPhase } from './types.js';\n\ntype AnyNode = Node & { [key: string]: any; start: number; end: number };\n\nconst NONDETERMINISM_ERROR =\n  'Workflow scripts must be deterministic: Date.now()/Math.random()/new Date() are unavailable. ' +\n  'Pass timestamps via args or stamp them after the workflow returns.';\n\nexport interface ParsedWorkflow {\n  meta: WorkflowMeta;\n  body: string;\n}\n\nexport function parseWorkflowScript(script: string): ParsedWorkflow {\n  let ast: AnyNode;\n  try {\n    ast = parse(script, {\n      ecmaVersion: 'latest',\n      sourceType: 'module',\n      allowAwaitOutsideFunction: true,\n      allowReturnOutsideFunction: true,\n      ranges: false,\n    }) as AnyNode;\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    throw new Error(`Workflow script parse error: ${msg}`);\n  }\n\n  assertDeterministicAst(ast);\n  assertNoDangerousImports(ast);\n\n  const first = ast.body?.[0] as AnyNode | undefined;\n  if (first?.type !== 'ExportNamedDeclaration') {\n    throw new Error(\n      '`export const meta = { name, description }` must be the first statement in the script',\n    );\n  }\n\n  const declaration = first.declaration as AnyNode | null;\n  if (declaration?.type !== 'VariableDeclaration' || declaration.kind !== 'const') {\n    throw new Error('meta export must be `export const meta = ...`');\n  }\n  if (declaration.declarations.length !== 1) {\n    throw new Error('meta export must declare only `meta`');\n  }\n  const declarator = declaration.declarations[0] as AnyNode;\n  if (declarator.id?.type !== 'Identifier' || declarator.id.name !== 'meta') {\n    throw new Error('meta export must declare `meta`');\n  }\n  if (!declarator.init) {\n    throw new Error('meta must have a literal value');\n  }\n\n  const meta = evaluateLiteral(declarator.init, 'meta');\n  validateMeta(meta);\n\n  return {\n    meta,\n    body: script.slice(0, first.start) + script.slice(first.end),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Determinism / safety guards\n// ---------------------------------------------------------------------------\n\nfunction assertDeterministicAst(node: AnyNode): void {\n  if (isDateNowCall(node) || isMathRandomCall(node) || isNewDateExpression(node)) {\n    throw new Error(NONDETERMINISM_ERROR);\n  }\n  for (const child of astChildren(node)) {\n    assertDeterministicAst(child);\n  }\n}\n\nfunction assertNoDangerousImports(node: AnyNode): void {\n  if (node.type === 'ImportDeclaration' || node.type === 'ImportExpression') {\n    throw new Error(\n      \"Workflow scripts cannot use `import` — only the exposed globals (agent, parallel, pipeline, phase, log, args, cwd, budget) are available.\",\n    );\n  }\n  if (node.type === 'CallExpression') {\n    const callee = node.callee as AnyNode | undefined;\n    if (callee?.type === 'Identifier' && (callee.name === 'require' || callee.name === 'eval')) {\n      throw new Error(`Workflow scripts cannot call \\`${callee.name}\\`.`);\n    }\n  }\n  for (const child of astChildren(node)) {\n    assertNoDangerousImports(child);\n  }\n}\n\nfunction astChildren(node: AnyNode): AnyNode[] {\n  const children: AnyNode[] = [];\n  for (const value of Object.values(node)) {\n    if (Array.isArray(value)) {\n      for (const v of value) {\n        if (isAstNode(v)) children.push(v);\n      }\n    } else if (isAstNode(value)) {\n      children.push(value);\n    }\n  }\n  return children;\n}\n\nfunction isAstNode(value: unknown): value is AnyNode {\n  return !!value && typeof value === 'object' && typeof (value as AnyNode).type === 'string';\n}\n\nfunction isDateNowCall(node: AnyNode): boolean {\n  return node.type === 'CallExpression' && isMemberExpression(node.callee, 'Date', 'now');\n}\n\nfunction isMathRandomCall(node: AnyNode): boolean {\n  return node.type === 'CallExpression' && isMemberExpression(node.callee, 'Math', 'random');\n}\n\nfunction isNewDateExpression(node: AnyNode): boolean {\n  return (\n    node.type === 'NewExpression' &&\n    (node.callee as AnyNode | undefined)?.type === 'Identifier' &&\n    (node.callee as AnyNode).name === 'Date'\n  );\n}\n\nfunction isMemberExpression(\n  node: AnyNode | undefined,\n  objectName: string,\n  propertyName: string,\n): boolean {\n  if (\n    node?.type !== 'MemberExpression' ||\n    (node.object as AnyNode | undefined)?.type !== 'Identifier' ||\n    (node.object as AnyNode).name !== objectName\n  ) {\n    return false;\n  }\n  const prop = node.property as AnyNode | undefined;\n  if (!node.computed && prop?.type === 'Identifier') return prop.name === propertyName;\n  if (prop?.type === 'Literal' && typeof prop.value === 'string') return prop.value === propertyName;\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// Literal evaluator (meta must be a pure literal)\n// ---------------------------------------------------------------------------\n\nfunction evaluateLiteral(node: AnyNode, path: string): any {\n  switch (node.type) {\n    case 'ObjectExpression': {\n      const out: Record<string, unknown> = {};\n      for (const prop of node.properties as AnyNode[]) {\n        if (prop.type === 'SpreadElement') {\n          throw new Error(`spread not allowed in ${path}`);\n        }\n        if (prop.type !== 'Property') {\n          throw new Error(`only plain properties allowed in ${path}`);\n        }\n        if (prop.computed) {\n          throw new Error(`computed keys not allowed in ${path}`);\n        }\n        if (prop.kind !== 'init' || prop.method) {\n          throw new Error(`methods/accessors not allowed in ${path}`);\n        }\n        const key = propertyKey(prop.key as AnyNode, path);\n        if (key === '__proto__' || key === 'constructor' || key === 'prototype') {\n          throw new Error(`reserved key name not allowed in ${path}: ${key}`);\n        }\n        out[key] = evaluateLiteral(prop.value as AnyNode, `${path}.${key}`);\n      }\n      return out;\n    }\n    case 'ArrayExpression':\n      return (node.elements as Array<AnyNode | null>).map((element, index) => {\n        if (!element) throw new Error(`sparse arrays not allowed in ${path}`);\n        if (element.type === 'SpreadElement') {\n          throw new Error(`spread not allowed in ${path}`);\n        }\n        return evaluateLiteral(element, `${path}[${index}]`);\n      });\n    case 'Literal':\n      return node.value;\n    case 'TemplateLiteral':\n      if (node.expressions.length > 0) {\n        throw new Error(`template interpolation not allowed in ${path}`);\n      }\n      return node.quasis\n        .map((quasi: AnyNode) => quasi.value.cooked ?? quasi.value.raw)\n        .join('');\n    case 'UnaryExpression':\n      if (\n        node.operator === '-' &&\n        node.argument?.type === 'Literal' &&\n        typeof node.argument.value === 'number'\n      ) {\n        return -node.argument.value;\n      }\n      throw new Error(`only negative-number unary allowed in ${path}`);\n    default:\n      throw new Error(`non-literal node type in ${path}: ${node.type}`);\n  }\n}\n\nfunction propertyKey(node: AnyNode, path: string): string {\n  if (node.type === 'Identifier') return node.name;\n  if (node.type === 'Literal' && (typeof node.value === 'string' || typeof node.value === 'number')) {\n    return String(node.value);\n  }\n  throw new Error(`unsupported key type in ${path}: ${node.type}`);\n}\n\nfunction validateMeta(meta: unknown): asserts meta is WorkflowMeta {\n  if (!meta || typeof meta !== 'object') {\n    throw new Error('meta must be an object');\n  }\n  const value = meta as WorkflowMeta;\n  if (typeof value.name !== 'string' || !value.name.trim()) {\n    throw new Error('meta.name must be a non-empty string');\n  }\n  if (!/^[a-z][a-z0-9_-]*$/.test(value.name)) {\n    throw new Error(\n      `meta.name must be lowercase snake_case (got \"${value.name}\"). Example: \"audit_repo\".`,\n    );\n  }\n  if (typeof value.description !== 'string' || !value.description.trim()) {\n    throw new Error('meta.description must be a non-empty string');\n  }\n  if (value.whenToUse !== undefined && typeof value.whenToUse !== 'string') {\n    throw new Error('meta.whenToUse must be a string');\n  }\n  if (value.phases !== undefined) {\n    if (!Array.isArray(value.phases)) {\n      throw new Error('meta.phases must be an array');\n    }\n    for (const phase of value.phases) {\n      if (!phase || typeof phase !== 'object' || typeof (phase as WorkflowMetaPhase).title !== 'string') {\n        throw new Error('each meta phase must have a title string');\n      }\n    }\n  }\n  if (value.tags !== undefined) {\n    if (!Array.isArray(value.tags) || value.tags.some((tag) => typeof tag !== 'string' || !tag.trim())) {\n      throw new Error('meta.tags must be an array of non-empty strings');\n    }\n  }\n  if (value.estimatedAgents !== undefined) {\n    const est = value.estimatedAgents;\n    if (!est || typeof est !== 'object') {\n      throw new Error('meta.estimatedAgents must be an object');\n    }\n    if (typeof est.min !== 'number' || typeof est.max !== 'number' || !Number.isFinite(est.min) || !Number.isFinite(est.max)) {\n      throw new Error('meta.estimatedAgents.min and .max must be finite numbers');\n    }\n    if (est.min < 1 || est.max < est.min) {\n      throw new Error('meta.estimatedAgents requires min >= 1 and max >= min');\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAsBA,MAAM,uBACJ;AAQF,SAAgB,oBAAoB,QAAgC;CAClE,IAAI;AACJ,KAAI;AACF,QAAM,MAAM,QAAQ;GAClB,aAAa;GACb,YAAY;GACZ,2BAA2B;GAC3B,4BAA4B;GAC5B,QAAQ;GACT,CAAC;UACK,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,QAAM,IAAI,MAAM,gCAAgC,MAAM;;AAGxD,wBAAuB,IAAI;AAC3B,0BAAyB,IAAI;CAE7B,MAAM,QAAQ,IAAI,OAAO;AACzB,KAAI,OAAO,SAAS,yBAClB,OAAM,IAAI,MACR,wFACD;CAGH,MAAM,cAAc,MAAM;AAC1B,KAAI,aAAa,SAAS,yBAAyB,YAAY,SAAS,QACtE,OAAM,IAAI,MAAM,gDAAgD;AAElE,KAAI,YAAY,aAAa,WAAW,EACtC,OAAM,IAAI,MAAM,uCAAuC;CAEzD,MAAM,aAAa,YAAY,aAAa;AAC5C,KAAI,WAAW,IAAI,SAAS,gBAAgB,WAAW,GAAG,SAAS,OACjE,OAAM,IAAI,MAAM,kCAAkC;AAEpD,KAAI,CAAC,WAAW,KACd,OAAM,IAAI,MAAM,iCAAiC;CAGnD,MAAM,OAAO,gBAAgB,WAAW,MAAM,OAAO;AACrD,cAAa,KAAK;AAElB,QAAO;EACL;EACA,MAAM,OAAO,MAAM,GAAG,MAAM,MAAM,GAAG,OAAO,MAAM,MAAM,IAAI;EAC7D;;AAOH,SAAS,uBAAuB,MAAqB;AACnD,KAAI,cAAc,KAAK,IAAI,iBAAiB,KAAK,IAAI,oBAAoB,KAAK,CAC5E,OAAM,IAAI,MAAM,qBAAqB;AAEvC,MAAK,MAAM,SAAS,YAAY,KAAK,CACnC,wBAAuB,MAAM;;AAIjC,SAAS,yBAAyB,MAAqB;AACrD,KAAI,KAAK,SAAS,uBAAuB,KAAK,SAAS,mBACrD,OAAM,IAAI,MACR,4IACD;AAEH,KAAI,KAAK,SAAS,kBAAkB;EAClC,MAAM,SAAS,KAAK;AACpB,MAAI,QAAQ,SAAS,iBAAiB,OAAO,SAAS,aAAa,OAAO,SAAS,QACjF,OAAM,IAAI,MAAM,kCAAkC,OAAO,KAAK,KAAK;;AAGvE,MAAK,MAAM,SAAS,YAAY,KAAK,CACnC,0BAAyB,MAAM;;AAInC,SAAS,YAAY,MAA0B;CAC7C,MAAM,WAAsB,EAAE;AAC9B,MAAK,MAAM,SAAS,OAAO,OAAO,KAAK,CACrC,KAAI,MAAM,QAAQ,MAAM;OACjB,MAAM,KAAK,MACd,KAAI,UAAU,EAAE,CAAE,UAAS,KAAK,EAAE;YAE3B,UAAU,MAAM,CACzB,UAAS,KAAK,MAAM;AAGxB,QAAO;;AAGT,SAAS,UAAU,OAAkC;AACnD,QAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,OAAQ,MAAkB,SAAS;;AAGpF,SAAS,cAAc,MAAwB;AAC7C,QAAO,KAAK,SAAS,oBAAoB,mBAAmB,KAAK,QAAQ,QAAQ,MAAM;;AAGzF,SAAS,iBAAiB,MAAwB;AAChD,QAAO,KAAK,SAAS,oBAAoB,mBAAmB,KAAK,QAAQ,QAAQ,SAAS;;AAG5F,SAAS,oBAAoB,MAAwB;AACnD,QACE,KAAK,SAAS,mBACb,KAAK,QAAgC,SAAS,gBAC9C,KAAK,OAAmB,SAAS;;AAItC,SAAS,mBACP,MACA,YACA,cACS;AACT,KACE,MAAM,SAAS,sBACd,KAAK,QAAgC,SAAS,gBAC9C,KAAK,OAAmB,SAAS,WAElC,QAAO;CAET,MAAM,OAAO,KAAK;AAClB,KAAI,CAAC,KAAK,YAAY,MAAM,SAAS,aAAc,QAAO,KAAK,SAAS;AACxE,KAAI,MAAM,SAAS,aAAa,OAAO,KAAK,UAAU,SAAU,QAAO,KAAK,UAAU;AACtF,QAAO;;AAOT,SAAS,gBAAgB,MAAe,MAAmB;AACzD,SAAQ,KAAK,MAAb;EACE,KAAK,oBAAoB;GACvB,MAAM,MAA+B,EAAE;AACvC,QAAK,MAAM,QAAQ,KAAK,YAAyB;AAC/C,QAAI,KAAK,SAAS,gBAChB,OAAM,IAAI,MAAM,yBAAyB,OAAO;AAElD,QAAI,KAAK,SAAS,WAChB,OAAM,IAAI,MAAM,oCAAoC,OAAO;AAE7D,QAAI,KAAK,SACP,OAAM,IAAI,MAAM,gCAAgC,OAAO;AAEzD,QAAI,KAAK,SAAS,UAAU,KAAK,OAC/B,OAAM,IAAI,MAAM,oCAAoC,OAAO;IAE7D,MAAM,MAAM,YAAY,KAAK,KAAgB,KAAK;AAClD,QAAI,QAAQ,eAAe,QAAQ,iBAAiB,QAAQ,YAC1D,OAAM,IAAI,MAAM,oCAAoC,KAAK,IAAI,MAAM;AAErE,QAAI,OAAO,gBAAgB,KAAK,OAAkB,GAAG,KAAK,GAAG,MAAM;;AAErE,UAAO;;EAET,KAAK,kBACH,QAAQ,KAAK,SAAmC,KAAK,SAAS,UAAU;AACtE,OAAI,CAAC,QAAS,OAAM,IAAI,MAAM,gCAAgC,OAAO;AACrE,OAAI,QAAQ,SAAS,gBACnB,OAAM,IAAI,MAAM,yBAAyB,OAAO;AAElD,UAAO,gBAAgB,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG;IACpD;EACJ,KAAK,UACH,QAAO,KAAK;EACd,KAAK;AACH,OAAI,KAAK,YAAY,SAAS,EAC5B,OAAM,IAAI,MAAM,yCAAyC,OAAO;AAElE,UAAO,KAAK,OACT,KAAK,UAAmB,MAAM,MAAM,UAAU,MAAM,MAAM,IAAI,CAC9D,KAAK,GAAG;EACb,KAAK;AACH,OACE,KAAK,aAAa,OAClB,KAAK,UAAU,SAAS,aACxB,OAAO,KAAK,SAAS,UAAU,SAE/B,QAAO,CAAC,KAAK,SAAS;AAExB,SAAM,IAAI,MAAM,yCAAyC,OAAO;EAClE,QACE,OAAM,IAAI,MAAM,4BAA4B,KAAK,IAAI,KAAK,OAAO;;;AAIvE,SAAS,YAAY,MAAe,MAAsB;AACxD,KAAI,KAAK,SAAS,aAAc,QAAO,KAAK;AAC5C,KAAI,KAAK,SAAS,cAAc,OAAO,KAAK,UAAU,YAAY,OAAO,KAAK,UAAU,UACtF,QAAO,OAAO,KAAK,MAAM;AAE3B,OAAM,IAAI,MAAM,2BAA2B,KAAK,IAAI,KAAK,OAAO;;AAGlE,SAAS,aAAa,MAA6C;AACjE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,OAAM,IAAI,MAAM,yBAAyB;CAE3C,MAAM,QAAQ;AACd,KAAI,OAAO,MAAM,SAAS,YAAY,CAAC,MAAM,KAAK,MAAM,CACtD,OAAM,IAAI,MAAM,uCAAuC;AAEzD,KAAI,CAAC,qBAAqB,KAAK,MAAM,KAAK,CACxC,OAAM,IAAI,MACR,gDAAgD,MAAM,KAAK,4BAC5D;AAEH,KAAI,OAAO,MAAM,gBAAgB,YAAY,CAAC,MAAM,YAAY,MAAM,CACpE,OAAM,IAAI,MAAM,8CAA8C;AAEhE,KAAI,MAAM,cAAc,KAAA,KAAa,OAAO,MAAM,cAAc,SAC9D,OAAM,IAAI,MAAM,kCAAkC;AAEpD,KAAI,MAAM,WAAW,KAAA,GAAW;AAC9B,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,CAC9B,OAAM,IAAI,MAAM,+BAA+B;AAEjD,OAAK,MAAM,SAAS,MAAM,OACxB,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,OAAQ,MAA4B,UAAU,SACvF,OAAM,IAAI,MAAM,2CAA2C;;AAIjE,KAAI,MAAM,SAAS,KAAA;MACb,CAAC,MAAM,QAAQ,MAAM,KAAK,IAAI,MAAM,KAAK,MAAM,QAAQ,OAAO,QAAQ,YAAY,CAAC,IAAI,MAAM,CAAC,CAChG,OAAM,IAAI,MAAM,kDAAkD;;AAGtE,KAAI,MAAM,oBAAoB,KAAA,GAAW;EACvC,MAAM,MAAM,MAAM;AAClB,MAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,OAAM,IAAI,MAAM,yCAAyC;AAE3D,MAAI,OAAO,IAAI,QAAQ,YAAY,OAAO,IAAI,QAAQ,YAAY,CAAC,OAAO,SAAS,IAAI,IAAI,IAAI,CAAC,OAAO,SAAS,IAAI,IAAI,CACtH,OAAM,IAAI,MAAM,2DAA2D;AAE7E,MAAI,IAAI,MAAM,KAAK,IAAI,MAAM,IAAI,IAC/B,OAAM,IAAI,MAAM,wDAAwD"}
+{"version":3,"file":"parser.js","names":[],"sources":["../../../../src/agent/workflow/parser.ts"],"sourcesContent":["/**\n * Workflow script parser.\n *\n * Responsibilities:\n *   1. Parse the script with acorn (latest ECMA, top-level await + return allowed).\n *   2. Enforce determinism — reject `Date.now()`, `Math.random()`, `new Date()`,\n *      `require`, `import`, dynamic eval. This keeps future resume/replay possible\n *      and surfaces non-deterministic mistakes early.\n *   3. Require the first statement to be `export const meta = <literal>`, validate\n *      the literal shape, and strip that line from the body returned to the runtime.\n *\n * Returning a `{ meta, body }` pair means the runtime can `vm.Script(body)` without\n * any further AST work.\n */\n\nimport { parse } from 'acorn';\nimport type { Node } from 'acorn';\n\nimport { lintAwaits } from './lint.js';\nimport type { WorkflowMeta, WorkflowMetaPhase } from './types.js';\n\ntype AnyNode = Node & { [key: string]: any; start: number; end: number };\n\nconst NONDETERMINISM_ERROR =\n  'Workflow scripts must be deterministic: Date.now()/Math.random()/new Date() are unavailable. ' +\n  'Pass timestamps via args or stamp them after the workflow returns.';\n\nexport interface ParsedWorkflow {\n  meta: WorkflowMeta;\n  body: string;\n}\n\nexport function parseWorkflowScript(script: string): ParsedWorkflow {\n  let ast: AnyNode;\n  try {\n    ast = parse(script, {\n      ecmaVersion: 'latest',\n      sourceType: 'module',\n      allowAwaitOutsideFunction: true,\n      allowReturnOutsideFunction: true,\n      ranges: false,\n      locations: true,\n    }) as AnyNode;\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    throw new Error(`Workflow script parse error: ${msg}`);\n  }\n\n  assertDeterministicAst(ast);\n  assertNoDangerousImports(ast);\n  lintAwaits(ast);\n\n  const first = ast.body?.[0] as AnyNode | undefined;\n  if (first?.type !== 'ExportNamedDeclaration') {\n    throw new Error(\n      '`export const meta = { name, description }` must be the first statement in the script',\n    );\n  }\n\n  const declaration = first.declaration as AnyNode | null;\n  if (declaration?.type !== 'VariableDeclaration' || declaration.kind !== 'const') {\n    throw new Error('meta export must be `export const meta = ...`');\n  }\n  if (declaration.declarations.length !== 1) {\n    throw new Error('meta export must declare only `meta`');\n  }\n  const declarator = declaration.declarations[0] as AnyNode;\n  if (declarator.id?.type !== 'Identifier' || declarator.id.name !== 'meta') {\n    throw new Error('meta export must declare `meta`');\n  }\n  if (!declarator.init) {\n    throw new Error('meta must have a literal value');\n  }\n\n  const meta = evaluateLiteral(declarator.init, 'meta');\n  validateMeta(meta);\n\n  return {\n    meta,\n    body: script.slice(0, first.start) + script.slice(first.end),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Determinism / safety guards\n// ---------------------------------------------------------------------------\n\nfunction assertDeterministicAst(node: AnyNode): void {\n  if (isDateNowCall(node) || isMathRandomCall(node) || isNewDateExpression(node)) {\n    throw new Error(NONDETERMINISM_ERROR);\n  }\n  for (const child of astChildren(node)) {\n    assertDeterministicAst(child);\n  }\n}\n\nfunction assertNoDangerousImports(node: AnyNode): void {\n  if (node.type === 'ImportDeclaration' || node.type === 'ImportExpression') {\n    throw new Error(\n      \"Workflow scripts cannot use `import` — only the exposed globals (agent, parallel, pipeline, phase, log, args, cwd, budget) are available.\",\n    );\n  }\n  if (node.type === 'CallExpression') {\n    const callee = node.callee as AnyNode | undefined;\n    if (callee?.type === 'Identifier' && (callee.name === 'require' || callee.name === 'eval')) {\n      throw new Error(`Workflow scripts cannot call \\`${callee.name}\\`.`);\n    }\n  }\n  for (const child of astChildren(node)) {\n    assertNoDangerousImports(child);\n  }\n}\n\nfunction astChildren(node: AnyNode): AnyNode[] {\n  const children: AnyNode[] = [];\n  for (const value of Object.values(node)) {\n    if (Array.isArray(value)) {\n      for (const v of value) {\n        if (isAstNode(v)) children.push(v);\n      }\n    } else if (isAstNode(value)) {\n      children.push(value);\n    }\n  }\n  return children;\n}\n\nfunction isAstNode(value: unknown): value is AnyNode {\n  return !!value && typeof value === 'object' && typeof (value as AnyNode).type === 'string';\n}\n\nfunction isDateNowCall(node: AnyNode): boolean {\n  return node.type === 'CallExpression' && isMemberExpression(node.callee, 'Date', 'now');\n}\n\nfunction isMathRandomCall(node: AnyNode): boolean {\n  return node.type === 'CallExpression' && isMemberExpression(node.callee, 'Math', 'random');\n}\n\nfunction isNewDateExpression(node: AnyNode): boolean {\n  return (\n    node.type === 'NewExpression' &&\n    (node.callee as AnyNode | undefined)?.type === 'Identifier' &&\n    (node.callee as AnyNode).name === 'Date'\n  );\n}\n\nfunction isMemberExpression(\n  node: AnyNode | undefined,\n  objectName: string,\n  propertyName: string,\n): boolean {\n  if (\n    node?.type !== 'MemberExpression' ||\n    (node.object as AnyNode | undefined)?.type !== 'Identifier' ||\n    (node.object as AnyNode).name !== objectName\n  ) {\n    return false;\n  }\n  const prop = node.property as AnyNode | undefined;\n  if (!node.computed && prop?.type === 'Identifier') return prop.name === propertyName;\n  if (prop?.type === 'Literal' && typeof prop.value === 'string') return prop.value === propertyName;\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// Literal evaluator (meta must be a pure literal)\n// ---------------------------------------------------------------------------\n\nfunction evaluateLiteral(node: AnyNode, path: string): any {\n  switch (node.type) {\n    case 'ObjectExpression': {\n      const out: Record<string, unknown> = {};\n      for (const prop of node.properties as AnyNode[]) {\n        if (prop.type === 'SpreadElement') {\n          throw new Error(`spread not allowed in ${path}`);\n        }\n        if (prop.type !== 'Property') {\n          throw new Error(`only plain properties allowed in ${path}`);\n        }\n        if (prop.computed) {\n          throw new Error(`computed keys not allowed in ${path}`);\n        }\n        if (prop.kind !== 'init' || prop.method) {\n          throw new Error(`methods/accessors not allowed in ${path}`);\n        }\n        const key = propertyKey(prop.key as AnyNode, path);\n        if (key === '__proto__' || key === 'constructor' || key === 'prototype') {\n          throw new Error(`reserved key name not allowed in ${path}: ${key}`);\n        }\n        out[key] = evaluateLiteral(prop.value as AnyNode, `${path}.${key}`);\n      }\n      return out;\n    }\n    case 'ArrayExpression':\n      return (node.elements as Array<AnyNode | null>).map((element, index) => {\n        if (!element) throw new Error(`sparse arrays not allowed in ${path}`);\n        if (element.type === 'SpreadElement') {\n          throw new Error(`spread not allowed in ${path}`);\n        }\n        return evaluateLiteral(element, `${path}[${index}]`);\n      });\n    case 'Literal':\n      return node.value;\n    case 'TemplateLiteral':\n      if (node.expressions.length > 0) {\n        throw new Error(`template interpolation not allowed in ${path}`);\n      }\n      return node.quasis\n        .map((quasi: AnyNode) => quasi.value.cooked ?? quasi.value.raw)\n        .join('');\n    case 'UnaryExpression':\n      if (\n        node.operator === '-' &&\n        node.argument?.type === 'Literal' &&\n        typeof node.argument.value === 'number'\n      ) {\n        return -node.argument.value;\n      }\n      throw new Error(`only negative-number unary allowed in ${path}`);\n    default:\n      throw new Error(`non-literal node type in ${path}: ${node.type}`);\n  }\n}\n\nfunction propertyKey(node: AnyNode, path: string): string {\n  if (node.type === 'Identifier') return node.name;\n  if (node.type === 'Literal' && (typeof node.value === 'string' || typeof node.value === 'number')) {\n    return String(node.value);\n  }\n  throw new Error(`unsupported key type in ${path}: ${node.type}`);\n}\n\nfunction validateMeta(meta: unknown): asserts meta is WorkflowMeta {\n  if (!meta || typeof meta !== 'object') {\n    throw new Error('meta must be an object');\n  }\n  const value = meta as WorkflowMeta;\n  if (typeof value.name !== 'string' || !value.name.trim()) {\n    throw new Error('meta.name must be a non-empty string');\n  }\n  if (!/^[a-z][a-z0-9_-]*$/.test(value.name)) {\n    throw new Error(\n      `meta.name must be lowercase snake_case (got \"${value.name}\"). Example: \"audit_repo\".`,\n    );\n  }\n  if (typeof value.description !== 'string' || !value.description.trim()) {\n    throw new Error('meta.description must be a non-empty string');\n  }\n  if (value.whenToUse !== undefined && typeof value.whenToUse !== 'string') {\n    throw new Error('meta.whenToUse must be a string');\n  }\n  if (value.phases !== undefined) {\n    if (!Array.isArray(value.phases)) {\n      throw new Error('meta.phases must be an array');\n    }\n    for (const phase of value.phases) {\n      if (!phase || typeof phase !== 'object' || typeof (phase as WorkflowMetaPhase).title !== 'string') {\n        throw new Error('each meta phase must have a title string');\n      }\n    }\n  }\n  if (value.tags !== undefined) {\n    if (!Array.isArray(value.tags) || value.tags.some((tag) => typeof tag !== 'string' || !tag.trim())) {\n      throw new Error('meta.tags must be an array of non-empty strings');\n    }\n  }\n  if (value.estimatedAgents !== undefined) {\n    const est = value.estimatedAgents;\n    if (!est || typeof est !== 'object') {\n      throw new Error('meta.estimatedAgents must be an object');\n    }\n    if (typeof est.min !== 'number' || typeof est.max !== 'number' || !Number.isFinite(est.min) || !Number.isFinite(est.max)) {\n      throw new Error('meta.estimatedAgents.min and .max must be finite numbers');\n    }\n    if (est.min < 1 || est.max < est.min) {\n      throw new Error('meta.estimatedAgents requires min >= 1 and max >= min');\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAuBA,MAAM,uBACJ;AAQF,SAAgB,oBAAoB,QAAgC;CAClE,IAAI;AACJ,KAAI;AACF,QAAM,MAAM,QAAQ;GAClB,aAAa;GACb,YAAY;GACZ,2BAA2B;GAC3B,4BAA4B;GAC5B,QAAQ;GACR,WAAW;GACZ,CAAC;UACK,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,QAAM,IAAI,MAAM,gCAAgC,MAAM;;AAGxD,wBAAuB,IAAI;AAC3B,0BAAyB,IAAI;AAC7B,YAAW,IAAI;CAEf,MAAM,QAAQ,IAAI,OAAO;AACzB,KAAI,OAAO,SAAS,yBAClB,OAAM,IAAI,MACR,wFACD;CAGH,MAAM,cAAc,MAAM;AAC1B,KAAI,aAAa,SAAS,yBAAyB,YAAY,SAAS,QACtE,OAAM,IAAI,MAAM,gDAAgD;AAElE,KAAI,YAAY,aAAa,WAAW,EACtC,OAAM,IAAI,MAAM,uCAAuC;CAEzD,MAAM,aAAa,YAAY,aAAa;AAC5C,KAAI,WAAW,IAAI,SAAS,gBAAgB,WAAW,GAAG,SAAS,OACjE,OAAM,IAAI,MAAM,kCAAkC;AAEpD,KAAI,CAAC,WAAW,KACd,OAAM,IAAI,MAAM,iCAAiC;CAGnD,MAAM,OAAO,gBAAgB,WAAW,MAAM,OAAO;AACrD,cAAa,KAAK;AAElB,QAAO;EACL;EACA,MAAM,OAAO,MAAM,GAAG,MAAM,MAAM,GAAG,OAAO,MAAM,MAAM,IAAI;EAC7D;;AAOH,SAAS,uBAAuB,MAAqB;AACnD,KAAI,cAAc,KAAK,IAAI,iBAAiB,KAAK,IAAI,oBAAoB,KAAK,CAC5E,OAAM,IAAI,MAAM,qBAAqB;AAEvC,MAAK,MAAM,SAAS,YAAY,KAAK,CACnC,wBAAuB,MAAM;;AAIjC,SAAS,yBAAyB,MAAqB;AACrD,KAAI,KAAK,SAAS,uBAAuB,KAAK,SAAS,mBACrD,OAAM,IAAI,MACR,4IACD;AAEH,KAAI,KAAK,SAAS,kBAAkB;EAClC,MAAM,SAAS,KAAK;AACpB,MAAI,QAAQ,SAAS,iBAAiB,OAAO,SAAS,aAAa,OAAO,SAAS,QACjF,OAAM,IAAI,MAAM,kCAAkC,OAAO,KAAK,KAAK;;AAGvE,MAAK,MAAM,SAAS,YAAY,KAAK,CACnC,0BAAyB,MAAM;;AAInC,SAAS,YAAY,MAA0B;CAC7C,MAAM,WAAsB,EAAE;AAC9B,MAAK,MAAM,SAAS,OAAO,OAAO,KAAK,CACrC,KAAI,MAAM,QAAQ,MAAM;OACjB,MAAM,KAAK,MACd,KAAI,UAAU,EAAE,CAAE,UAAS,KAAK,EAAE;YAE3B,UAAU,MAAM,CACzB,UAAS,KAAK,MAAM;AAGxB,QAAO;;AAGT,SAAS,UAAU,OAAkC;AACnD,QAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,OAAQ,MAAkB,SAAS;;AAGpF,SAAS,cAAc,MAAwB;AAC7C,QAAO,KAAK,SAAS,oBAAoB,mBAAmB,KAAK,QAAQ,QAAQ,MAAM;;AAGzF,SAAS,iBAAiB,MAAwB;AAChD,QAAO,KAAK,SAAS,oBAAoB,mBAAmB,KAAK,QAAQ,QAAQ,SAAS;;AAG5F,SAAS,oBAAoB,MAAwB;AACnD,QACE,KAAK,SAAS,mBACb,KAAK,QAAgC,SAAS,gBAC9C,KAAK,OAAmB,SAAS;;AAItC,SAAS,mBACP,MACA,YACA,cACS;AACT,KACE,MAAM,SAAS,sBACd,KAAK,QAAgC,SAAS,gBAC9C,KAAK,OAAmB,SAAS,WAElC,QAAO;CAET,MAAM,OAAO,KAAK;AAClB,KAAI,CAAC,KAAK,YAAY,MAAM,SAAS,aAAc,QAAO,KAAK,SAAS;AACxE,KAAI,MAAM,SAAS,aAAa,OAAO,KAAK,UAAU,SAAU,QAAO,KAAK,UAAU;AACtF,QAAO;;AAOT,SAAS,gBAAgB,MAAe,MAAmB;AACzD,SAAQ,KAAK,MAAb;EACE,KAAK,oBAAoB;GACvB,MAAM,MAA+B,EAAE;AACvC,QAAK,MAAM,QAAQ,KAAK,YAAyB;AAC/C,QAAI,KAAK,SAAS,gBAChB,OAAM,IAAI,MAAM,yBAAyB,OAAO;AAElD,QAAI,KAAK,SAAS,WAChB,OAAM,IAAI,MAAM,oCAAoC,OAAO;AAE7D,QAAI,KAAK,SACP,OAAM,IAAI,MAAM,gCAAgC,OAAO;AAEzD,QAAI,KAAK,SAAS,UAAU,KAAK,OAC/B,OAAM,IAAI,MAAM,oCAAoC,OAAO;IAE7D,MAAM,MAAM,YAAY,KAAK,KAAgB,KAAK;AAClD,QAAI,QAAQ,eAAe,QAAQ,iBAAiB,QAAQ,YAC1D,OAAM,IAAI,MAAM,oCAAoC,KAAK,IAAI,MAAM;AAErE,QAAI,OAAO,gBAAgB,KAAK,OAAkB,GAAG,KAAK,GAAG,MAAM;;AAErE,UAAO;;EAET,KAAK,kBACH,QAAQ,KAAK,SAAmC,KAAK,SAAS,UAAU;AACtE,OAAI,CAAC,QAAS,OAAM,IAAI,MAAM,gCAAgC,OAAO;AACrE,OAAI,QAAQ,SAAS,gBACnB,OAAM,IAAI,MAAM,yBAAyB,OAAO;AAElD,UAAO,gBAAgB,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG;IACpD;EACJ,KAAK,UACH,QAAO,KAAK;EACd,KAAK;AACH,OAAI,KAAK,YAAY,SAAS,EAC5B,OAAM,IAAI,MAAM,yCAAyC,OAAO;AAElE,UAAO,KAAK,OACT,KAAK,UAAmB,MAAM,MAAM,UAAU,MAAM,MAAM,IAAI,CAC9D,KAAK,GAAG;EACb,KAAK;AACH,OACE,KAAK,aAAa,OAClB,KAAK,UAAU,SAAS,aACxB,OAAO,KAAK,SAAS,UAAU,SAE/B,QAAO,CAAC,KAAK,SAAS;AAExB,SAAM,IAAI,MAAM,yCAAyC,OAAO;EAClE,QACE,OAAM,IAAI,MAAM,4BAA4B,KAAK,IAAI,KAAK,OAAO;;;AAIvE,SAAS,YAAY,MAAe,MAAsB;AACxD,KAAI,KAAK,SAAS,aAAc,QAAO,KAAK;AAC5C,KAAI,KAAK,SAAS,cAAc,OAAO,KAAK,UAAU,YAAY,OAAO,KAAK,UAAU,UACtF,QAAO,OAAO,KAAK,MAAM;AAE3B,OAAM,IAAI,MAAM,2BAA2B,KAAK,IAAI,KAAK,OAAO;;AAGlE,SAAS,aAAa,MAA6C;AACjE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,OAAM,IAAI,MAAM,yBAAyB;CAE3C,MAAM,QAAQ;AACd,KAAI,OAAO,MAAM,SAAS,YAAY,CAAC,MAAM,KAAK,MAAM,CACtD,OAAM,IAAI,MAAM,uCAAuC;AAEzD,KAAI,CAAC,qBAAqB,KAAK,MAAM,KAAK,CACxC,OAAM,IAAI,MACR,gDAAgD,MAAM,KAAK,4BAC5D;AAEH,KAAI,OAAO,MAAM,gBAAgB,YAAY,CAAC,MAAM,YAAY,MAAM,CACpE,OAAM,IAAI,MAAM,8CAA8C;AAEhE,KAAI,MAAM,cAAc,KAAA,KAAa,OAAO,MAAM,cAAc,SAC9D,OAAM,IAAI,MAAM,kCAAkC;AAEpD,KAAI,MAAM,WAAW,KAAA,GAAW;AAC9B,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,CAC9B,OAAM,IAAI,MAAM,+BAA+B;AAEjD,OAAK,MAAM,SAAS,MAAM,OACxB,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,OAAQ,MAA4B,UAAU,SACvF,OAAM,IAAI,MAAM,2CAA2C;;AAIjE,KAAI,MAAM,SAAS,KAAA;MACb,CAAC,MAAM,QAAQ,MAAM,KAAK,IAAI,MAAM,KAAK,MAAM,QAAQ,OAAO,QAAQ,YAAY,CAAC,IAAI,MAAM,CAAC,CAChG,OAAM,IAAI,MAAM,kDAAkD;;AAGtE,KAAI,MAAM,oBAAoB,KAAA,GAAW;EACvC,MAAM,MAAM,MAAM;AAClB,MAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,OAAM,IAAI,MAAM,yCAAyC;AAE3D,MAAI,OAAO,IAAI,QAAQ,YAAY,OAAO,IAAI,QAAQ,YAAY,CAAC,OAAO,SAAS,IAAI,IAAI,IAAI,CAAC,OAAO,SAAS,IAAI,IAAI,CACtH,OAAM,IAAI,MAAM,2DAA2D;AAE7E,MAAI,IAAI,MAAM,KAAK,IAAI,MAAM,IAAI,IAC/B,OAAM,IAAI,MAAM,wDAAwD"}

package/dist/src/agent/workflow/runtime.d.ts

@@ -23,9 +23,12 @@
  * carries no LLM dependency, and is fully driven by injected callbacks — that
  * means the workflow tool, tests, and any future runner share one runtime.
  */
+import type { Api, Model } from '@earendil-works/pi-ai';
 import type { SubagentRunner, WorkflowRunOptions, WorkflowRunResult, WorkflowSnapshot } from './types.js';
 export interface RunWorkflowDeps {
     runner: SubagentRunner;
+    /** Resolve a real model id (must contain `/`) to a {@link Model}. Throws on unknown id. */
+    resolveModelId?: (modelId: string) => Model<Api>;
 }
 export declare function runWorkflow<T = unknown>(script: string, deps: RunWorkflowDeps, options: WorkflowRunOptions): Promise<WorkflowRunResult<T>>;
 export declare function emptySnapshotFor(name: string, description?: string): WorkflowSnapshot;