@xyne/workflow-sdk 2.3.0 → 2.4.0

package/dist/common/principal.d.ts

@@ -1,45 +0,0 @@
-/**
- * Principal + authorization descriptors — browser-safe shared types.
- *
- * The host authenticates a request into an {@link AuthContext} (the principal).
- * The SDK never interprets `metadata` — it's an opaque claims bag (teamIds,
- * roles, deptId, …). Scoping is derived from the principal by host hooks.
- */
-/** The authenticated principal, produced by the host's `authenticate()` hook. */
-export interface AuthContext {
-    userId: string;
-    /** Host-defined claims — workspaceId, tenantId, teamIds, roles, etc. Opaque to the SDK. */
-    metadata: Record<string, unknown>;
-}
-/** Verbs the scope hooks can differentiate on. Resource types extend this over time. */
-export type WorkflowAction = 'workflow.list' | 'workflow.read' | 'workflow.write' | 'workflow.trigger' | 'execution.list' | 'execution.read' | 'execution.write';
-/**
- * One node in the host's scope hierarchy — what the UI renders in the scope
- * navigator. The host (not the SDK) decides what a node represents
- * (department, team, project); `kind` is a display label only.
- */
-export interface ScopeNode {
-    /** Opaque scope id — matches `WorkflowRecord.scope`. */
-    id: string;
-    label: string;
-    /** Display grouping/icon hint, e.g. 'Department' | 'Team'. Not used for routing. */
-    kind?: string;
-    parentId?: string | null;
-    hasChildren?: boolean;
-    counts?: {
-        workflows?: number;
-        running?: number;
-    };
-}
-/**
- * What the UI bootstraps from on load. Drives the scope navigator and gates
- * cross-scope ("admin") affordances.
- */
-export interface SessionDescriptor {
-    userId: string;
-    /** Top-level scopes the principal can reach. */
-    scopes: ScopeNode[];
-    /** Opaque capability flags, e.g. 'workflow.list.crossScope' for an admin view. */
-    capabilities: string[];
-}
-//# sourceMappingURL=principal.d.ts.map

package/dist/common/principal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../src/common/principal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,wFAAwF;AACxF,MAAM,MAAM,cAAc,GACtB,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,kFAAkF;IAClF,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB"}

package/dist/common/principal.js

@@ -1,9 +0,0 @@
-/**
- * Principal + authorization descriptors — browser-safe shared types.
- *
- * The host authenticates a request into an {@link AuthContext} (the principal).
- * The SDK never interprets `metadata` — it's an opaque claims bag (teamIds,
- * roles, deptId, …). Scoping is derived from the principal by host hooks.
- */
-export {};
-//# sourceMappingURL=principal.js.map

package/dist/common/principal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principal.js","sourceRoot":"","sources":["../../src/common/principal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/steps/builtin/transform.step.d.ts

@@ -1,247 +0,0 @@
-/**
- * TRANSFORM step — pure data manipulation.
- *
- * Applies a sequence of operations to the workflow context:
- * - set: write a value at a dotted path
- * - rename: move a value from one path to another
- * - remove: delete a value at a dotted path
- * - copy: copy a value from one path to another
- *
- * No services, no credentials — pure deterministic logic.
- */
-import { z } from 'zod';
-import { BaseActionStep } from '../base-step.js';
-import type { StepExecutionContext } from '../base-step.js';
-import { BuiltinStepType } from '../../types/known-types.js';
-import type { StepCategory } from '../../types/categories.js';
-export declare const TransformOpSchema: z.ZodDiscriminatedUnion<"op", [z.ZodObject<{
-    op: z.ZodLiteral<"set">;
-    path: z.ZodString;
-    value: z.ZodUnknown;
-}, "strip", z.ZodTypeAny, {
-    op: "set";
-    path: string;
-    value?: unknown;
-}, {
-    op: "set";
-    path: string;
-    value?: unknown;
-}>, z.ZodObject<{
-    op: z.ZodLiteral<"rename">;
-    from: z.ZodString;
-    to: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    op: "rename";
-    from: string;
-    to: string;
-}, {
-    op: "rename";
-    from: string;
-    to: string;
-}>, z.ZodObject<{
-    op: z.ZodLiteral<"remove">;
-    path: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    op: "remove";
-    path: string;
-}, {
-    op: "remove";
-    path: string;
-}>, z.ZodObject<{
-    op: z.ZodLiteral<"copy">;
-    from: z.ZodString;
-    to: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    op: "copy";
-    from: string;
-    to: string;
-}, {
-    op: "copy";
-    from: string;
-    to: string;
-}>]>;
-export type TransformOp = z.infer<typeof TransformOpSchema>;
-export declare const TransformStepConfigSchema: z.ZodObject<{
-    operations: z.ZodArray<z.ZodDiscriminatedUnion<"op", [z.ZodObject<{
-        op: z.ZodLiteral<"set">;
-        path: z.ZodString;
-        value: z.ZodUnknown;
-    }, "strip", z.ZodTypeAny, {
-        op: "set";
-        path: string;
-        value?: unknown;
-    }, {
-        op: "set";
-        path: string;
-        value?: unknown;
-    }>, z.ZodObject<{
-        op: z.ZodLiteral<"rename">;
-        from: z.ZodString;
-        to: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        op: "rename";
-        from: string;
-        to: string;
-    }, {
-        op: "rename";
-        from: string;
-        to: string;
-    }>, z.ZodObject<{
-        op: z.ZodLiteral<"remove">;
-        path: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        op: "remove";
-        path: string;
-    }, {
-        op: "remove";
-        path: string;
-    }>, z.ZodObject<{
-        op: z.ZodLiteral<"copy">;
-        from: z.ZodString;
-        to: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        op: "copy";
-        from: string;
-        to: string;
-    }, {
-        op: "copy";
-        from: string;
-        to: string;
-    }>]>, "many">;
-}, "strip", z.ZodTypeAny, {
-    operations: ({
-        op: "set";
-        path: string;
-        value?: unknown;
-    } | {
-        op: "rename";
-        from: string;
-        to: string;
-    } | {
-        op: "remove";
-        path: string;
-    } | {
-        op: "copy";
-        from: string;
-        to: string;
-    })[];
-}, {
-    operations: ({
-        op: "set";
-        path: string;
-        value?: unknown;
-    } | {
-        op: "rename";
-        from: string;
-        to: string;
-    } | {
-        op: "remove";
-        path: string;
-    } | {
-        op: "copy";
-        from: string;
-        to: string;
-    })[];
-}>;
-export type TransformStepConfig = z.infer<typeof TransformStepConfigSchema>;
-export interface TransformStepOutput extends Record<string, unknown> {
-    applied: number;
-}
-export declare class TransformStep extends BaseActionStep<typeof TransformStepConfigSchema, TransformStepOutput> {
-    readonly type = BuiltinStepType.TRANSFORM;
-    readonly name = "Transform";
-    readonly description = "Apply data transformations to the workflow context";
-    readonly configSchema: z.ZodObject<{
-        operations: z.ZodArray<z.ZodDiscriminatedUnion<"op", [z.ZodObject<{
-            op: z.ZodLiteral<"set">;
-            path: z.ZodString;
-            value: z.ZodUnknown;
-        }, "strip", z.ZodTypeAny, {
-            op: "set";
-            path: string;
-            value?: unknown;
-        }, {
-            op: "set";
-            path: string;
-            value?: unknown;
-        }>, z.ZodObject<{
-            op: z.ZodLiteral<"rename">;
-            from: z.ZodString;
-            to: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            op: "rename";
-            from: string;
-            to: string;
-        }, {
-            op: "rename";
-            from: string;
-            to: string;
-        }>, z.ZodObject<{
-            op: z.ZodLiteral<"remove">;
-            path: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            op: "remove";
-            path: string;
-        }, {
-            op: "remove";
-            path: string;
-        }>, z.ZodObject<{
-            op: z.ZodLiteral<"copy">;
-            from: z.ZodString;
-            to: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            op: "copy";
-            from: string;
-            to: string;
-        }, {
-            op: "copy";
-            from: string;
-            to: string;
-        }>]>, "many">;
-    }, "strip", z.ZodTypeAny, {
-        operations: ({
-            op: "set";
-            path: string;
-            value?: unknown;
-        } | {
-            op: "rename";
-            from: string;
-            to: string;
-        } | {
-            op: "remove";
-            path: string;
-        } | {
-            op: "copy";
-            from: string;
-            to: string;
-        })[];
-    }, {
-        operations: ({
-            op: "set";
-            path: string;
-            value?: unknown;
-        } | {
-            op: "rename";
-            from: string;
-            to: string;
-        } | {
-            op: "remove";
-            path: string;
-        } | {
-            op: "copy";
-            from: string;
-            to: string;
-        })[];
-    }>;
-    readonly outputSchema: z.ZodObject<{
-        applied: z.ZodNumber;
-    }, "strip", z.ZodTypeAny, {
-        applied: number;
-    }, {
-        applied: number;
-    }>;
-    readonly category: StepCategory;
-    readonly icon = "filter";
-    execute(config: TransformStepConfig, ctx: StepExecutionContext): Promise<TransformStepOutput>;
-}
-//# sourceMappingURL=transform.step.d.ts.map

package/dist/steps/builtin/transform.step.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transform.step.d.ts","sourceRoot":"","sources":["../../../src/steps/builtin/transform.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AA4B9D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAK5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E,MAAM,WAAW,mBAAoB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,OAAO,EAAE,MAAM,CAAC;CACjB;AA+DD,qBAAa,aAAc,SAAQ,cAAc,CAC/C,OAAO,yBAAyB,EAChC,mBAAmB,CACpB;IACC,SAAkB,IAAI,6BAA6B;IACnD,SAAkB,IAAI,eAAe;IACrC,SAAkB,WAAW,wDAAwD;IACrF,SAAkB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAA6B;IAC3D,SAAkB,YAAY;;;;;;OAA6B;IAC3D,SAAkB,QAAQ,EAAE,YAAY,CAAU;IAClD,SAAkB,IAAI,YAAY;IAEnB,OAAO,CACpB,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAAC,mBAAmB,CAAC;CAyChC"}

package/dist/steps/builtin/transform.step.js

@@ -1,135 +0,0 @@
-/**
- * TRANSFORM step — pure data manipulation.
- *
- * Applies a sequence of operations to the workflow context:
- * - set: write a value at a dotted path
- * - rename: move a value from one path to another
- * - remove: delete a value at a dotted path
- * - copy: copy a value from one path to another
- *
- * No services, no credentials — pure deterministic logic.
- */
-import { z } from 'zod';
-import { BaseActionStep } from '../base-step.js';
-import { BuiltinStepType } from '../../types/known-types.js';
-import { resolvePath } from '../../engine/variable-resolver.js';
-// ─── Config ───
-const SetOpSchema = z.object({
-    op: z.literal('set'),
-    path: z.string().min(1).describe('Dotted path where the value will be written'),
-    value: z.unknown().describe('Value to set at the path'),
-});
-const RenameOpSchema = z.object({
-    op: z.literal('rename'),
-    from: z.string().min(1).describe('Source dotted path'),
-    to: z.string().min(1).describe('Destination dotted path'),
-});
-const RemoveOpSchema = z.object({
-    op: z.literal('remove'),
-    path: z.string().min(1).describe('Dotted path to delete'),
-});
-const CopyOpSchema = z.object({
-    op: z.literal('copy'),
-    from: z.string().min(1).describe('Source dotted path'),
-    to: z.string().min(1).describe('Destination dotted path'),
-});
-export const TransformOpSchema = z.discriminatedUnion('op', [
-    SetOpSchema,
-    RenameOpSchema,
-    RemoveOpSchema,
-    CopyOpSchema,
-]);
-export const TransformStepConfigSchema = z.object({
-    operations: z.array(TransformOpSchema).min(1).describe('Sequence of data transformation operations to apply'),
-});
-const TransformStepOutputSchema = z.object({
-    applied: z.number(),
-});
-// ─── Helpers ───
-/**
- * Set a value at a dotted path on a target object.
- * Creates intermediate objects as needed.
- */
-function setAtPath(target, path, value) {
-    const parts = path.split('.');
-    let current = target;
-    for (let i = 0; i < parts.length - 1; i++) {
-        const key = parts[i];
-        if (current[key] === undefined ||
-            current[key] === null ||
-            typeof current[key] !== 'object') {
-            current[key] = {};
-        }
-        current = current[key];
-    }
-    current[parts[parts.length - 1]] = value;
-}
-/**
- * Delete a value at a dotted path.
- */
-function deleteAtPath(target, path) {
-    const parts = path.split('.');
-    let current = target;
-    for (let i = 0; i < parts.length - 1; i++) {
-        const key = parts[i];
-        if (current[key] === undefined ||
-            current[key] === null ||
-            typeof current[key] !== 'object') {
-            return false;
-        }
-        current = current[key];
-    }
-    const lastKey = parts[parts.length - 1];
-    if (lastKey in current) {
-        delete current[lastKey];
-        return true;
-    }
-    return false;
-}
-// ─── Step ───
-export class TransformStep extends BaseActionStep {
-    type = BuiltinStepType.TRANSFORM;
-    name = 'Transform';
-    description = 'Apply data transformations to the workflow context';
-    configSchema = TransformStepConfigSchema;
-    outputSchema = TransformStepOutputSchema;
-    category = 'data';
-    icon = 'filter';
-    async execute(config, ctx) {
-        let applied = 0;
-        // Operate on the steps record
-        const data = ctx.workflow.steps;
-        for (const op of config.operations) {
-            switch (op.op) {
-                case 'set':
-                    setAtPath(data, op.path, op.value);
-                    applied++;
-                    break;
-                case 'rename': {
-                    const value = resolvePath(ctx.workflow, op.from);
-                    if (value !== undefined) {
-                        setAtPath(data, op.to, value);
-                        deleteAtPath(data, op.from);
-                        applied++;
-                    }
-                    break;
-                }
-                case 'remove':
-                    if (deleteAtPath(data, op.path)) {
-                        applied++;
-                    }
-                    break;
-                case 'copy': {
-                    const val = resolvePath(ctx.workflow, op.from);
-                    if (val !== undefined) {
-                        setAtPath(data, op.to, val);
-                        applied++;
-                    }
-                    break;
-                }
-            }
-        }
-        return { applied };
-    }
-}
-//# sourceMappingURL=transform.step.js.map

package/dist/steps/builtin/transform.step.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transform.step.js","sourceRoot":"","sources":["../../../src/steps/builtin/transform.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAEhE,iBAAiB;AAEjB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC/E,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACtD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACtD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IAC1D,WAAW;IACX,cAAc;IACd,cAAc;IACd,YAAY;CACb,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC;CAC9G,CAAC,CAAC;AAUH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,kBAAkB;AAElB;;;GAGG;AACH,SAAS,SAAS,CAChB,MAA+B,EAC/B,IAAY,EACZ,KAAc;IAEd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAA4B,MAAM,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,IACE,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI;YACrB,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,EAChC,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,GAAG,CAA4B,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,KAAK,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CACnB,MAA+B,EAC/B,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAA4B,MAAM,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,IACE,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI;YACrB,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,EAChC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,GAAG,CAA4B,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IACzC,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,eAAe;AAEf,MAAM,OAAO,aAAc,SAAQ,cAGlC;IACmB,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC;IACjC,IAAI,GAAG,WAAW,CAAC;IACnB,WAAW,GAAG,oDAAoD,CAAC;IACnE,YAAY,GAAG,yBAAyB,CAAC;IACzC,YAAY,GAAG,yBAAyB,CAAC;IACzC,QAAQ,GAAiB,MAAM,CAAC;IAChC,IAAI,GAAG,QAAQ,CAAC;IAEzB,KAAK,CAAC,OAAO,CACpB,MAA2B,EAC3B,GAAyB;QAEzB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,8BAA8B;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAgC,CAAC;QAE3D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACnC,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBACd,KAAK,KAAK;oBACR,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;oBACnC,OAAO,EAAE,CAAC;oBACV,MAAM;gBAER,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;oBACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;wBAC9B,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;wBAC5B,OAAO,EAAE,CAAC;oBACZ,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,QAAQ;oBACX,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChC,OAAO,EAAE,CAAC;oBACZ,CAAC;oBACD,MAAM;gBAER,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;oBAC/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;wBACtB,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;wBAC5B,OAAO,EAAE,CAAC;oBACZ,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/types/attachment.d.ts

@@ -1,23 +0,0 @@
-/**
- * Attachment — opaque reference to a file managed by the host's StorageAdapter.
- *
- * Used everywhere the framework carries a file:
- * - Trigger inputs (uploaded via `POST /uploads`, attached to `context.trigger.attachments`)
- * - Resume payloads (uploaded with feedback in a review-gate retry)
- * - Step inputs (rerunFromStep with attachments in configOverrides)
- *
- * The framework never opens `data` — it's a host-defined reference (URL,
- * blob ID, signed token, `mem://uuid`). Steps that need the bytes call
- * `StorageAdapter.read()` via a service the host registers.
- */
-export interface Attachment {
-    /** Original filename — e.g. "contract.pdf". */
-    name: string;
-    /** MIME type — e.g. "application/pdf", "image/png". */
-    mimeType: string;
-    /** Opaque host reference. Framework treats this as a string. */
-    data: string;
-    /** Size in bytes — set by storage after upload. Useful for UI display + size budgets. */
-    size?: number;
-}
-//# sourceMappingURL=attachment.d.ts.map

package/dist/types/attachment.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attachment.d.ts","sourceRoot":"","sources":["../../src/types/attachment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/types/attachment.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=attachment.js.map

package/dist/types/attachment.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"attachment.js","sourceRoot":"","sources":["../../src/types/attachment.ts"],"names":[],"mappings":""}

package/dist/types/resume-payload.d.ts

@@ -1,34 +0,0 @@
-/**
- * ResumePayload — the unified shape for resuming a paused execution.
- *
- * One contract for every pause type:
- * - Mid-execution agent pauses (tool approval, input required, user interrupted)
- * - Review gates (`onComplete: 'review'`)
- *
- * The router validates incoming bodies into this shape; persistence stores it
- * verbatim; the executor and step `onResume` handlers consume it.
- */
-import type { Attachment } from './attachment.js';
-/**
- * Alias for {@link Attachment} kept for clarity at call sites that historically
- * said "resume attachment". The shape is shared across the framework.
- */
-export type ResumeAttachment = Attachment;
-/**
- * What the user decided.
- * - `approve`: continue from a mid-pause OR advance past a review gate
- * - `retry`:   re-execute the current step with `priorState` + `feedback` (review gate)
- * - `abort`:   cancel the execution
- */
-export type ResumeAction = 'approve' | 'retry' | 'abort';
-/** Payload from the host when resuming a paused execution. */
-export interface ResumePayload {
-    action: ResumeAction;
-    /** User-provided text input (form feedback, instruction, additional context). */
-    feedback?: string;
-    /** Files uploaded alongside the feedback. Opaque references — host resolves. */
-    attachments?: ResumeAttachment[];
-    /** Step-specific extras from custom form fields. Opaque to the framework. */
-    data?: Record<string, unknown>;
-}
-//# sourceMappingURL=resume-payload.d.ts.map

package/dist/types/resume-payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resume-payload.d.ts","sourceRoot":"","sources":["../../src/types/resume-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC"}

package/dist/types/resume-payload.js

@@ -1,12 +0,0 @@
-/**
- * ResumePayload — the unified shape for resuming a paused execution.
- *
- * One contract for every pause type:
- * - Mid-execution agent pauses (tool approval, input required, user interrupted)
- * - Review gates (`onComplete: 'review'`)
- *
- * The router validates incoming bodies into this shape; persistence stores it
- * verbatim; the executor and step `onResume` handlers consume it.
- */
-export {};
-//# sourceMappingURL=resume-payload.js.map

package/dist/types/resume-payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resume-payload.js","sourceRoot":"","sources":["../../src/types/resume-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/util/executable-check.d.ts

@@ -1,42 +0,0 @@
-/**
- * Executable upload safety check.
- *
- * Allow-by-default with a deny-list of known dangerous types — covers the
- * common attack surface (native binaries, scripts that auto-run, installers,
- * macro-enabled Office docs) without forcing workflow authors to enumerate
- * every safe MIME type.
- *
- * Two checks run in parallel so spoofed MIME types alone can't bypass:
- *   1. MIME type matches the deny-list
- *   2. Filename extension matches the deny-list
- *
- * Either match blocks the upload. To accept executables (e.g. a security-
- * analysis workflow that intentionally examines binaries), the host opts
- * in via `RuntimeOptions.allowExecutableUploads = true`.
- */
-/**
- * MIME types treated as executable / unsafe (lowercase — input is also
- * lowercased before comparison).
- */
-export declare const BLOCKED_EXECUTABLE_MIME_TYPES: ReadonlySet<string>;
-/**
- * File extensions treated as executable / unsafe (case-insensitive, no dot).
- * The check uses the LAST extension so `report.exe.txt` is treated as text
- * (Windows shows the trailing extension, which is what the user actually sees).
- */
-export declare const BLOCKED_EXECUTABLE_EXTENSIONS: ReadonlySet<string>;
-/**
- * Extract the lowercase extension (no dot) from a filename, or '' if none.
- * A leading dot doesn't count — `.bashrc` has no extension, not "bashrc".
- */
-export declare function extensionOf(name: string): string;
-/**
- * Returns a human-readable reason if the file should be blocked as
- * executable, or `null` if it's safe.
- *
- * Always check both the MIME type and the filename — clients can spoof one
- * but rarely both. This is defense-in-depth, not authoritative malware
- * detection (run real AV at the storage layer for that).
- */
-export declare function isExecutable(mimeType: string, name: string): string | null;
-//# sourceMappingURL=executable-check.d.ts.map

package/dist/util/executable-check.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"executable-check.d.ts","sourceRoot":"","sources":["../../src/util/executable-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;GAGG;AACH,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAwC5D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAmB5D,CAAC;AAEH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS1E"}