@xyne/workflow-sdk 1.0.0

package/dist/client/workflow-client.js

@@ -0,0 +1,293 @@
+/**
+ * createWorkflowClient — typed HTTP client for the workflow router.
+ *
+ * Framework-agnostic: works in browsers, Node, Deno, Bun — anywhere
+ * that has a global `fetch`. The UI hooks wrap this with TanStack Query
+ * for caching/polling; this layer is pure fetch + type safety.
+ */
+// ─── Error ───
+export class WorkflowClientError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = 'WorkflowClientError';
+    }
+}
+function buildUrl(baseUrl, path, query) {
+    // Strip trailing slash from baseUrl, ensure path starts with /
+    const base = baseUrl.replace(/\/+$/, '');
+    const normalizedPath = path.startsWith('/') ? path : `/${path}`;
+    let url = `${base}${normalizedPath}`;
+    if (query) {
+        const params = new URLSearchParams();
+        for (const [key, value] of Object.entries(query)) {
+            if (value !== undefined) {
+                params.set(key, value);
+            }
+        }
+        const qs = params.toString();
+        if (qs) {
+            url = `${url}?${qs}`;
+        }
+    }
+    return url;
+}
+async function request(config, opts) {
+    const fetchFn = config.fetch ?? globalThis.fetch;
+    const headers = await config.getHeaders();
+    const url = buildUrl(config.baseUrl, opts.path, opts.query);
+    const init = {
+        method: opts.method,
+        headers: {
+            ...headers,
+            ...(opts.body !== undefined ? { 'Content-Type': 'application/json' } : {}),
+        },
+        ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
+    };
+    const response = await fetchFn(url, init);
+    if (!response.ok) {
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch {
+            body = await response.text();
+        }
+        const message = typeof body === 'object' && body !== null && 'error' in body
+            ? String(body.error)
+            : `HTTP ${String(response.status)}`;
+        throw new WorkflowClientError(message, response.status, body);
+    }
+    // 204 No Content — return undefined
+    if (response.status === 204) {
+        return undefined;
+    }
+    return response.json();
+}
+// ─── Client Factory ───
+function createSchemaClient(config) {
+    return {
+        async steps() {
+            const res = await request(config, {
+                method: 'GET',
+                path: '/schema/steps',
+            });
+            return res.steps;
+        },
+        async step(type) {
+            return request(config, {
+                method: 'GET',
+                path: `/schema/steps/${encodeURIComponent(type)}`,
+            });
+        },
+        async triggers() {
+            const res = await request(config, {
+                method: 'GET',
+                path: '/schema/triggers',
+            });
+            return res.triggers;
+        },
+        async trigger(type) {
+            return request(config, {
+                method: 'GET',
+                path: `/schema/triggers/${encodeURIComponent(type)}`,
+            });
+        },
+        async operators() {
+            const res = await request(config, {
+                method: 'GET',
+                path: '/schema/operators',
+            });
+            return res.operators;
+        },
+        async availableContext(workflowConfig, atStepId) {
+            const res = await request(config, {
+                method: 'POST',
+                path: '/schema/available-context',
+                body: { config: workflowConfig, atStepId },
+            });
+            return res.context;
+        },
+    };
+}
+function createWorkflowsCrudClient(config) {
+    return {
+        async list() {
+            const res = await request(config, {
+                method: 'GET',
+                path: '/workflows',
+            });
+            return res.workflows;
+        },
+        async get(id) {
+            return request(config, {
+                method: 'GET',
+                path: `/workflows/${encodeURIComponent(id)}`,
+            });
+        },
+        async create(input) {
+            return request(config, {
+                method: 'POST',
+                path: '/workflows',
+                body: input,
+            });
+        },
+        async update(id, input) {
+            return request(config, {
+                method: 'PUT',
+                path: `/workflows/${encodeURIComponent(id)}`,
+                body: input,
+            });
+        },
+        async validate(workflowConfig) {
+            return request(config, {
+                method: 'POST',
+                path: '/workflows/validate',
+                body: workflowConfig,
+            });
+        },
+        async activate(id) {
+            await request(config, {
+                method: 'POST',
+                path: `/workflows/${encodeURIComponent(id)}/activate`,
+            });
+        },
+        async deactivate(id) {
+            await request(config, {
+                method: 'POST',
+                path: `/workflows/${encodeURIComponent(id)}/deactivate`,
+            });
+        },
+        async trigger(id, payload, attachments) {
+            const body = { ...(payload ?? {}) };
+            if (attachments && attachments.length > 0) {
+                body['attachments'] = attachments;
+            }
+            return request(config, {
+                method: 'POST',
+                path: `/workflows/${encodeURIComponent(id)}/trigger`,
+                body,
+            });
+        },
+    };
+}
+function createUploadsClient(config) {
+    return {
+        async create(files) {
+            const fetchFn = config.fetch ?? globalThis.fetch;
+            const headers = await config.getHeaders();
+            // Drop Content-Type so the browser sets the multipart boundary itself.
+            const stripped = {};
+            for (const [k, v] of Object.entries(headers)) {
+                if (k.toLowerCase() !== 'content-type')
+                    stripped[k] = v;
+            }
+            const form = new FormData();
+            files.forEach((file, i) => {
+                const name = file instanceof File ? file.name : `file_${String(i)}`;
+                form.append('files', file, name);
+            });
+            const url = buildUrl(config.baseUrl, '/uploads');
+            const response = await fetchFn(url, {
+                method: 'POST',
+                headers: stripped,
+                body: form,
+            });
+            if (!response.ok) {
+                let body;
+                try {
+                    body = await response.json();
+                }
+                catch {
+                    body = await response.text();
+                }
+                const message = typeof body === 'object' && body !== null && 'error' in body
+                    ? String(body.error)
+                    : `HTTP ${String(response.status)}`;
+                throw new WorkflowClientError(message, response.status, body);
+            }
+            return response.json();
+        },
+    };
+}
+function createExecutionsClient(config) {
+    return {
+        async list(params) {
+            return request(config, {
+                method: 'GET',
+                path: '/executions',
+                query: {
+                    workflowId: params?.workflowId,
+                    status: params?.status,
+                    limit: params?.limit?.toString(),
+                    cursor: params?.cursor,
+                },
+            });
+        },
+        async get(id) {
+            return request(config, {
+                method: 'GET',
+                path: `/executions/${encodeURIComponent(id)}`,
+            });
+        },
+        async resume(id, input) {
+            await request(config, {
+                method: 'POST',
+                path: `/executions/${encodeURIComponent(id)}/resume`,
+                body: input ?? {},
+            });
+        },
+        async rerun(id, input) {
+            return request(config, {
+                method: 'POST',
+                path: `/executions/${encodeURIComponent(id)}/rerun`,
+                body: input,
+            });
+        },
+        async cancel(id) {
+            await request(config, {
+                method: 'POST',
+                path: `/executions/${encodeURIComponent(id)}/cancel`,
+            });
+        },
+    };
+}
+function createCredentialsClient(config) {
+    return {
+        async list() {
+            const res = await request(config, {
+                method: 'GET',
+                path: '/credentials',
+            });
+            return res.credentials;
+        },
+        async create(data) {
+            return request(config, {
+                method: 'POST',
+                path: '/credentials',
+                body: data,
+            });
+        },
+        async delete(name) {
+            await request(config, {
+                method: 'DELETE',
+                path: `/credentials/${encodeURIComponent(name)}`,
+            });
+        },
+    };
+}
+// ─── Public Factory ───
+export function createWorkflowClient(config) {
+    return {
+        baseUrl: config.baseUrl,
+        schema: createSchemaClient(config),
+        workflows: createWorkflowsCrudClient(config),
+        executions: createExecutionsClient(config),
+        credentials: createCredentialsClient(config),
+        uploads: createUploadsClient(config),
+    };
+}
+//# sourceMappingURL=workflow-client.js.map

package/dist/client/workflow-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-client.js","sourceRoot":"","sources":["../../src/client/workflow-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA8BH,gBAAgB;AAEhB,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAG1B;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAWD,SAAS,QAAQ,CACf,OAAe,EACf,IAAY,EACZ,KAA0C;IAE1C,+DAA+D;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAChE,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,cAAc,EAAE,CAAC;IAErC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,EAAE,EAAE,CAAC;YACP,GAAG,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAA4B,EAC5B,IAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAgB;QACxB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE;YACP,GAAG,OAAO;YACV,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAE1C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAa,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GACX,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI;YAC1D,CAAC,CAAC,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC;YAC5C,CAAC,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAED,oCAAoC;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,SAAc,CAAC;IACxB,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;AACvC,CAAC;AAED,yBAAyB;AAEzB,SAAS,kBAAkB,CAAC,MAA4B;IACtD,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,GAAG,MAAM,OAAO,CAA2B,MAAM,EAAE;gBAC1D,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,eAAe;aACtB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,KAAK,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,IAAY;YACrB,OAAO,OAAO,CAAiB,MAAM,EAAE;gBACrC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAiC,MAAM,EAAE;gBAChE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,kBAAkB;aACzB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,QAAQ,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,IAAY;YACxB,OAAO,OAAO,CAAoB,MAAM,EAAE;gBACxC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,SAAS;YACb,MAAM,GAAG,GAAG,MAAM,OAAO,CAAsC,MAAM,EAAE;gBACrE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,mBAAmB;aAC1B,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,SAAS,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,gBAAgB,CACpB,cAA8B,EAC9B,QAAgB;YAEhB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAuC,MAAM,EAAE;gBACtE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,2BAA2B;gBACjC,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE;aAC3C,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,OAAO,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,MAA4B;IAE5B,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,GAAG,MAAM,OAAO,CAAkC,MAAM,EAAE;gBACjE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,SAAS,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,EAAU;YAClB,OAAO,OAAO,CAAiB,MAAM,EAAE;gBACrC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,EAAE;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAA0B;YACrC,OAAO,OAAO,CAAiB,MAAM,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAA0B;YACjD,OAAO,OAAO,CAAiB,MAAM,EAAE;gBACrC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,EAAE;gBAC5C,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,cAA8B;YAC3C,OAAO,OAAO,CAAmB,MAAM,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,cAAc;aACrB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAU;YACvB,MAAM,OAAO,CAAyB,MAAM,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,WAAW;aACtD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAU;YACzB,MAAM,OAAO,CAA2B,MAAM,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,aAAa;aACxD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,OAAO,CACX,EAAU,EACV,OAAiC,EACjC,WAA0B;YAE1B,MAAM,IAAI,GAA4B,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC;YACpC,CAAC;YACD,OAAO,OAAO,CAA0B,MAAM,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,UAAU;gBACpD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA4B;IACvD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAsB;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,uEAAuE;YACvE,MAAM,QAAQ,GAA2B,EAAE,CAAC;YAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc;oBAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBACxB,MAAM,IAAI,GAAG,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBAClC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,QAAQ;gBACjB,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAa,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC/B,CAAC;gBACD,MAAM,OAAO,GACX,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI;oBAC1D,CAAC,CAAC,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC;oBAC5C,CAAC,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChE,CAAC;YAED,OAAO,QAAQ,CAAC,IAAI,EAA4C,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAA4B;IAE5B,OAAO;QACL,KAAK,CAAC,IAAI,CACR,MAA4B;YAE5B,OAAO,OAAO,CAAiC,MAAM,EAAE;gBACrD,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE;oBACL,UAAU,EAAE,MAAM,EAAE,UAAU;oBAC9B,MAAM,EAAE,MAAM,EAAE,MAAM;oBACtB,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;oBAChC,MAAM,EAAE,MAAM,EAAE,MAAM;iBACvB;aACF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,EAAU;YAClB,OAAO,OAAO,CAAkB,MAAM,EAAE;gBACtC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAmB;YAC1C,MAAM,OAAO,CAAuB,MAAM,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,eAAe,kBAAkB,CAAC,EAAE,CAAC,SAAS;gBACpD,IAAI,EAAE,KAAK,IAAI,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,KAAiB;YACvC,OAAO,OAAO,CAA0B,MAAM,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,eAAe,kBAAkB,CAAC,EAAE,CAAC,QAAQ;gBACnD,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU;YACrB,MAAM,OAAO,CAAO,MAAM,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,eAAe,kBAAkB,CAAC,EAAE,CAAC,SAAS;aACrD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA4B;IAE5B,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,GAAG,MAAM,OAAO,CAAsC,MAAM,EAAE;gBACrE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,cAAc;aACrB,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,WAAW,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAA2B;YACtC,OAAO,OAAO,CAAmB,MAAM,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAY;YACvB,MAAM,OAAO,CAAO,MAAM,EAAE;gBAC1B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,yBAAyB;AAEzB,MAAM,UAAU,oBAAoB,CAClC,MAA4B;IAE5B,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;QAClC,SAAS,EAAE,yBAAyB,CAAC,MAAM,CAAC;QAC5C,UAAU,EAAE,sBAAsB,CAAC,MAAM,CAAC;QAC1C,WAAW,EAAE,uBAAuB,CAAC,MAAM,CAAC;QAC5C,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC;KACrC,CAAC;AACJ,CAAC"}

package/dist/common/attachment.d.ts

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+/**
+ * Attachment — opaque reference to a file managed by the host's StorageAdapter.
+ *
+ * Used everywhere the framework carries a file:
+ * - Trigger inputs (uploaded via `POST /uploads`, attached to `context.trigger.attachments`)
+ * - Resume payloads (uploaded with feedback in a review-gate retry)
+ * - Step inputs (rerunFromStep with attachments in configOverrides)
+ *
+ * The framework never opens `data` — it's a host-defined reference (URL,
+ * blob ID, signed token, `mem://uuid`). Steps that need the bytes call
+ * `StorageAdapter.read()` via a service the host registers.
+ */
+export declare const AttachmentSchema: z.ZodObject<{
+    name: z.ZodString;
+    mimeType: z.ZodString;
+    data: z.ZodString;
+    size: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    data: string;
+    mimeType: string;
+    size?: number | undefined;
+}, {
+    name: string;
+    data: string;
+    mimeType: string;
+    size?: number | undefined;
+}>;
+export type Attachment = z.infer<typeof AttachmentSchema>;
+//# sourceMappingURL=attachment.d.ts.map

package/dist/common/attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.d.ts","sourceRoot":"","sources":["../../src/common/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAM3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/common/attachment.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+/**
+ * Attachment — opaque reference to a file managed by the host's StorageAdapter.
+ *
+ * Used everywhere the framework carries a file:
+ * - Trigger inputs (uploaded via `POST /uploads`, attached to `context.trigger.attachments`)
+ * - Resume payloads (uploaded with feedback in a review-gate retry)
+ * - Step inputs (rerunFromStep with attachments in configOverrides)
+ *
+ * The framework never opens `data` — it's a host-defined reference (URL,
+ * blob ID, signed token, `mem://uuid`). Steps that need the bytes call
+ * `StorageAdapter.read()` via a service the host registers.
+ */
+export const AttachmentSchema = z.object({
+    name: z.string().describe('Original filename — e.g. "contract.pdf"'),
+    mimeType: z.string().describe('MIME type — e.g. "application/pdf", "image/png"'),
+    data: z.string().describe('Opaque host reference. Framework treats this as a string'),
+    size: z.number().int().nonnegative().optional()
+        .describe('Size in bytes — set by storage after upload'),
+});
+//# sourceMappingURL=attachment.js.map

package/dist/common/attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.js","sourceRoot":"","sources":["../../src/common/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAChF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACrF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;SAC5C,QAAQ,CAAC,6CAA6C,CAAC;CAC3D,CAAC,CAAC"}

package/dist/common/executable-check.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Executable upload safety check.
+ *
+ * Allow-by-default with a deny-list of known dangerous types — covers the
+ * common attack surface (native binaries, scripts that auto-run, installers,
+ * macro-enabled Office docs) without forcing workflow authors to enumerate
+ * every safe MIME type.
+ *
+ * Two checks run in parallel so spoofed MIME types alone can't bypass:
+ *   1. MIME type matches the deny-list
+ *   2. Filename extension matches the deny-list
+ *
+ * Either match blocks the upload. To accept executables (e.g. a security-
+ * analysis workflow that intentionally examines binaries), the host opts
+ * in via `RuntimeOptions.allowExecutableUploads = true`.
+ */
+/**
+ * MIME types treated as executable / unsafe (lowercase — input is also
+ * lowercased before comparison).
+ */
+export declare const BLOCKED_EXECUTABLE_MIME_TYPES: ReadonlySet<string>;
+/**
+ * File extensions treated as executable / unsafe (case-insensitive, no dot).
+ * The check uses the LAST extension so `report.exe.txt` is treated as text
+ * (Windows shows the trailing extension, which is what the user actually sees).
+ */
+export declare const BLOCKED_EXECUTABLE_EXTENSIONS: ReadonlySet<string>;
+/**
+ * Extract the lowercase extension (no dot) from a filename, or '' if none.
+ * A leading dot doesn't count — `.bashrc` has no extension, not "bashrc".
+ */
+export declare function extensionOf(name: string): string;
+/**
+ * Returns a human-readable reason if the file should be blocked as
+ * executable, or `null` if it's safe.
+ *
+ * Always check both the MIME type and the filename — clients can spoof one
+ * but rarely both. This is defense-in-depth, not authoritative malware
+ * detection (run real AV at the storage layer for that).
+ */
+export declare function isExecutable(mimeType: string, name: string): string | null;
+//# sourceMappingURL=executable-check.d.ts.map

package/dist/common/executable-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-check.d.ts","sourceRoot":"","sources":["../../src/common/executable-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;GAGG;AACH,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAwC5D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAmB5D,CAAC;AAEH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS1E"}

package/dist/common/executable-check.js

@@ -0,0 +1,115 @@
+/**
+ * Executable upload safety check.
+ *
+ * Allow-by-default with a deny-list of known dangerous types — covers the
+ * common attack surface (native binaries, scripts that auto-run, installers,
+ * macro-enabled Office docs) without forcing workflow authors to enumerate
+ * every safe MIME type.
+ *
+ * Two checks run in parallel so spoofed MIME types alone can't bypass:
+ *   1. MIME type matches the deny-list
+ *   2. Filename extension matches the deny-list
+ *
+ * Either match blocks the upload. To accept executables (e.g. a security-
+ * analysis workflow that intentionally examines binaries), the host opts
+ * in via `RuntimeOptions.allowExecutableUploads = true`.
+ */
+/**
+ * MIME types treated as executable / unsafe (lowercase — input is also
+ * lowercased before comparison).
+ */
+export const BLOCKED_EXECUTABLE_MIME_TYPES = new Set([
+    // Native binaries
+    'application/x-msdownload',
+    'application/x-msdos-program',
+    'application/x-executable',
+    'application/x-mach-binary',
+    'application/vnd.microsoft.portable-executable',
+    'application/x-msi',
+    'application/x-ms-installer',
+    // Shell + Windows scripts
+    'application/x-sh',
+    'application/x-shellscript',
+    'application/x-bat',
+    'application/x-csh',
+    'application/x-cmd',
+    'application/x-msmetafile',
+    // JavaScript / ECMAScript
+    'text/javascript',
+    'application/javascript',
+    'application/ecmascript',
+    'application/x-javascript',
+    // Java / Flash
+    'application/java-archive',
+    'application/x-java-archive',
+    'application/x-java-jnlp-file',
+    'application/x-shockwave-flash',
+    // Installer / package formats that bundle executables
+    'application/vnd.android.package-archive',
+    'application/x-debian-package',
+    'application/x-rpm',
+    // Macro-enabled Office documents (lowercased — IANA tokens are case-insensitive)
+    'application/vnd.ms-word.document.macroenabled.12',
+    'application/vnd.ms-word.template.macroenabled.12',
+    'application/vnd.ms-excel.sheet.macroenabled.12',
+    'application/vnd.ms-excel.template.macroenabled.12',
+    'application/vnd.ms-excel.addin.macroenabled.12',
+    'application/vnd.ms-excel.sheet.binary.macroenabled.12',
+    'application/vnd.ms-powerpoint.presentation.macroenabled.12',
+    'application/vnd.ms-powerpoint.template.macroenabled.12',
+    'application/vnd.ms-powerpoint.addin.macroenabled.12',
+]);
+/**
+ * File extensions treated as executable / unsafe (case-insensitive, no dot).
+ * The check uses the LAST extension so `report.exe.txt` is treated as text
+ * (Windows shows the trailing extension, which is what the user actually sees).
+ */
+export const BLOCKED_EXECUTABLE_EXTENSIONS = new Set([
+    // Windows
+    'exe', 'msi', 'com', 'scr', 'cmd', 'bat', 'ps1', 'psm1',
+    'vbs', 'vbe', 'wsf', 'wsh', 'hta', 'cpl', 'lnk',
+    'dll', 'sys', 'drv', 'ocx',
+    // macOS / Unix
+    'app', 'dmg', 'pkg',
+    'sh', 'bash', 'zsh', 'fish', 'csh', 'ksh', 'command', 'tool',
+    // Java / Flash
+    'jar', 'war', 'jnlp', 'swf',
+    // Mobile installers
+    'apk', 'ipa', 'xap',
+    // Linux installers
+    'deb', 'rpm', 'run', 'bin',
+    // JavaScript (auto-executes in browser / Node contexts)
+    'js', 'mjs', 'cjs',
+    // Macro-enabled Office
+    'docm', 'dotm', 'xlsm', 'xltm', 'xlam', 'xlsb',
+    'pptm', 'potm', 'ppam', 'ppsm', 'sldm',
+]);
+/**
+ * Extract the lowercase extension (no dot) from a filename, or '' if none.
+ * A leading dot doesn't count — `.bashrc` has no extension, not "bashrc".
+ */
+export function extensionOf(name) {
+    const dot = name.lastIndexOf('.');
+    if (dot <= 0 || dot === name.length - 1)
+        return '';
+    return name.slice(dot + 1).toLowerCase();
+}
+/**
+ * Returns a human-readable reason if the file should be blocked as
+ * executable, or `null` if it's safe.
+ *
+ * Always check both the MIME type and the filename — clients can spoof one
+ * but rarely both. This is defense-in-depth, not authoritative malware
+ * detection (run real AV at the storage layer for that).
+ */
+export function isExecutable(mimeType, name) {
+    if (BLOCKED_EXECUTABLE_MIME_TYPES.has(mimeType.toLowerCase())) {
+        return `Executable MIME type "${mimeType}" is not allowed.`;
+    }
+    const ext = extensionOf(name);
+    if (ext && BLOCKED_EXECUTABLE_EXTENSIONS.has(ext)) {
+        return `Files with .${ext} extension are not allowed.`;
+    }
+    return null;
+}
+//# sourceMappingURL=executable-check.js.map

package/dist/common/executable-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-check.js","sourceRoot":"","sources":["../../src/common/executable-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACxE,kBAAkB;IAClB,0BAA0B;IAC1B,6BAA6B;IAC7B,0BAA0B;IAC1B,2BAA2B;IAC3B,+CAA+C;IAC/C,mBAAmB;IACnB,4BAA4B;IAC5B,0BAA0B;IAC1B,kBAAkB;IAClB,2BAA2B;IAC3B,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,0BAA0B;IAC1B,0BAA0B;IAC1B,iBAAiB;IACjB,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,eAAe;IACf,0BAA0B;IAC1B,4BAA4B;IAC5B,8BAA8B;IAC9B,+BAA+B;IAC/B,sDAAsD;IACtD,yCAAyC;IACzC,8BAA8B;IAC9B,mBAAmB;IACnB,iFAAiF;IACjF,kDAAkD;IAClD,kDAAkD;IAClD,gDAAgD;IAChD,mDAAmD;IACnD,gDAAgD;IAChD,uDAAuD;IACvD,4DAA4D;IAC5D,wDAAwD;IACxD,qDAAqD;CACtD,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACxE,UAAU;IACV,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IACvD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC/C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC1B,eAAe;IACf,KAAK,EAAE,KAAK,EAAE,KAAK;IACnB,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;IAC5D,eAAe;IACf,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IAC3B,oBAAoB;IACpB,KAAK,EAAE,KAAK,EAAE,KAAK;IACnB,mBAAmB;IACnB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC1B,wDAAwD;IACxD,IAAI,EAAE,KAAK,EAAE,KAAK;IAClB,uBAAuB;IACvB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CACvC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAY;IACzD,IAAI,6BAA6B,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC9D,OAAO,yBAAyB,QAAQ,mBAAmB,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,IAAI,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,eAAe,GAAG,6BAA6B,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/common/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @xyne/workflow-sdk/common — browser-safe shared primitives.
+ *
+ * Everything exported from this module is guaranteed to be importable in
+ * non-Node environments (browsers, edge runtimes). It contains types and
+ * pure utilities that travel across the framework boundary:
+ *
+ * - {@link Attachment} — opaque file reference produced by the storage layer
+ * - {@link ResumePayload} / {@link ResumeAttachment} / {@link ResumeAction} — pause/resume contract
+ * - {@link isExecutable}, {@link extensionOf} — upload safety check used at both perimeter and UI
+ *
+ * The main `@xyne/workflow-sdk` barrel still re-exports these for
+ * server-side use; UI / builder code should import from here so that
+ * Node-only modules (`node:vm`, persistence runtimes) stay out of the
+ * browser bundle.
+ */
+export type { Attachment } from './attachment.js';
+export { AttachmentSchema } from './attachment.js';
+export type { ResumePayload, ResumeAttachment, ResumeAction, } from './resume-payload.js';
+export { isExecutable, extensionOf, BLOCKED_EXECUTABLE_MIME_TYPES, BLOCKED_EXECUTABLE_EXTENSIONS, } from './executable-check.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,WAAW,EACX,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC"}

package/dist/common/index.js

@@ -0,0 +1,19 @@
+/**
+ * @xyne/workflow-sdk/common — browser-safe shared primitives.
+ *
+ * Everything exported from this module is guaranteed to be importable in
+ * non-Node environments (browsers, edge runtimes). It contains types and
+ * pure utilities that travel across the framework boundary:
+ *
+ * - {@link Attachment} — opaque file reference produced by the storage layer
+ * - {@link ResumePayload} / {@link ResumeAttachment} / {@link ResumeAction} — pause/resume contract
+ * - {@link isExecutable}, {@link extensionOf} — upload safety check used at both perimeter and UI
+ *
+ * The main `@xyne/workflow-sdk` barrel still re-exports these for
+ * server-side use; UI / builder code should import from here so that
+ * Node-only modules (`node:vm`, persistence runtimes) stay out of the
+ * browser bundle.
+ */
+export { AttachmentSchema } from './attachment.js';
+export { isExecutable, extensionOf, BLOCKED_EXECUTABLE_MIME_TYPES, BLOCKED_EXECUTABLE_EXTENSIONS, } from './executable-check.js';
+//# sourceMappingURL=index.js.map

package/dist/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/common/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAMnD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC"}

package/dist/common/resume-payload.d.ts

@@ -0,0 +1,34 @@
+/**
+ * ResumePayload — the unified shape for resuming a paused execution.
+ *
+ * One contract for every pause type:
+ * - Mid-execution agent pauses (tool approval, input required, user interrupted)
+ * - Review gates (`onComplete: 'review'`)
+ *
+ * The router validates incoming bodies into this shape; persistence stores it
+ * verbatim; the executor and step `onResume` handlers consume it.
+ */
+import type { Attachment } from './attachment.js';
+/**
+ * Alias for {@link Attachment} kept for clarity at call sites that historically
+ * said "resume attachment". The shape is shared across the framework.
+ */
+export type ResumeAttachment = Attachment;
+/**
+ * What the user decided.
+ * - `approve`: continue from a mid-pause OR advance past a review gate
+ * - `retry`:   re-execute the current step with `priorState` + `feedback` (review gate)
+ * - `abort`:   cancel the execution
+ */
+export type ResumeAction = 'approve' | 'retry' | 'abort';
+/** Payload from the host when resuming a paused execution. */
+export interface ResumePayload {
+    action: ResumeAction;
+    /** User-provided text input (form feedback, instruction, additional context). */
+    feedback?: string;
+    /** Files uploaded alongside the feedback. Opaque references — host resolves. */
+    attachments?: ResumeAttachment[];
+    /** Step-specific extras from custom form fields. Opaque to the framework. */
+    data?: Record<string, unknown>;
+}
+//# sourceMappingURL=resume-payload.d.ts.map

package/dist/common/resume-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-payload.d.ts","sourceRoot":"","sources":["../../src/common/resume-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC"}

package/dist/common/resume-payload.js

@@ -0,0 +1,12 @@
+/**
+ * ResumePayload — the unified shape for resuming a paused execution.
+ *
+ * One contract for every pause type:
+ * - Mid-execution agent pauses (tool approval, input required, user interrupted)
+ * - Review gates (`onComplete: 'review'`)
+ *
+ * The router validates incoming bodies into this shape; persistence stores it
+ * verbatim; the executor and step `onResume` handlers consume it.
+ */
+export {};
+//# sourceMappingURL=resume-payload.js.map

package/dist/common/resume-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-payload.js","sourceRoot":"","sources":["../../src/common/resume-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}