@xyne/workflow-sdk 3.2.15 → 3.2.16

package/dist/testing/authz-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz-conformance.js","sourceRoot":"","sources":["../../src/testing/authz-conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAMxD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAmChE,qBAAqB;AAErB,kFAAkF;AAClF,SAAS,KAAK,CAAC,SAAkB,EAAE,OAAe;IAChD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,0EAA0E;AAC1E,KAAK,UAAU,QAAQ,CAAC,EAA0B;IAChD,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kBAAkB;AAElB,SAAS,YAAY,CAAgB,GAA0C;IAC7E,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,KAAK,GAAiB,EAAE,KAAK,CAAC,OAAO,KAAI,CAAC,EAAE,CAAC;IACnD,MAAM,SAAS,GAAqB,EAAE,KAAK,CAAC,QAAQ,KAAI,CAAC,EAAE,KAAK,CAAC,UAAU,KAAI,CAAC,EAAE,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,eAAe,CAAyC;QAC1E,WAAW;QACX,KAAK;QACL,SAAS;QACT,QAAQ;QACR,KAAK;QACL,QAAQ;QACR,QAAQ;QACR,UAAU,EAAE,GAAG,CAAC,cAAc,EAAE;KACjC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,KAAK,CAAgB,GAA0C;IAC5E,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAEtF,gBAAgB;AAEhB,MAAM,UAAU,qBAAqB,CACnC,GAA0C;IAE1C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,wBAAwB;IAExB,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,mEAAmE;QACzE,KAAK,CAAC,GAAG;YACP,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,KAAK,MAAM,GAAG,IAAI,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBACtE,KAAK,CACH,CAAC,MAAM,EACP,GAAG,IAAI,wBAAwB,GAAG,CAAC,EAAE,2BAA2B;wBAC9D,wCAAwC,CAC3C,CAAC;oBACF,KAAK,CACH,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,EACxD,GAAG,IAAI,wBAAwB,GAAG,CAAC,EAAE,kCAAkC;wBACrE,mEAAmE,CACtE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,iEAAiE;QACvE,KAAK,CAAC,GAAG;YACP,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,KAAK,MAAM,GAAG,IAAI,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBACpE,KAAK,CACH,CAAC,MAAM,EACP,GAAG,IAAI,sBAAsB,GAAG,CAAC,EAAE,2BAA2B;wBAC5D,wCAAwC,CAC3C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,oEAAoE;QAC1E,KAAK,CAAC,GAAG;YACP,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACtF,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC3F,KAAK,CACH,OAAO,IAAI,CAAC,MAAM,EAClB,GAAG,IAAI,yBAAyB,OAAO,CAAC,UAAU,qBAAqB;oBACrE,iEAAiE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,0BAA0B;IAE1B,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,2EAA2E;QACjF,KAAK,CAAC,GAAG;YACP,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9C,IAAI,KAAwB,CAAC;gBAC7B,IAAI,CAAC;oBACH,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBAChF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,iBAAiB;wBAAE,SAAS,CAAC,kCAAkC;oBAClF,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;gBACpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CACjC,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAC5E,CAAC;gBACF,KAAK,CACH,SAAS,KAAK,CAAC,MAAM,EACrB,GAAG,IAAI,sBAAsB,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,mBAAmB;oBAChF,mBAAmB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,6BAA6B;oBAC7E,8BAA8B,OAAO,CAAC,UAAU,EAAE,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,2EAA2E;QACjF,KAAK,CAAC,GAAG;YACP,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9C,IAAI,KAAwB,CAAC;gBAC7B,IAAI,CAAC;oBACH,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBAC5E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,iBAAiB;wBAAE,SAAS,CAAC,qCAAqC;oBACrF,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;gBACpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CACjC,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE;oBAC1B,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,aAAa;oBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CACH,CAAC;gBACF,KAAK,CACH,SAAS,KAAK,CAAC,MAAM,EACrB,GAAG,IAAI,YAAY,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG;oBACrE,iCAAiC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,cAAc;oBAC5E,iDAAiD,CACpD,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,qEAAqE;QAC3E,KAAK,CAAC,GAAG;YACP,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;gBACxF,KAAK,CACH,SAAS,KAAK,CAAC,MAAM,EACrB,GAAG,IAAI,oBAAoB,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,oBAAoB;oBAC/E,6BAA6B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,mBAAmB;oBAC7E,4CAA4C,CAC/C,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,wBAAwB;IAExB,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,sEAAsE;QAC5E,KAAK,CAAC,GAAG;YACP,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9D,IAAI,CAAC,UAAU,CAAC,gBAAgB;oBAAE,OAAO,CAAC,0CAA0C;gBAEpF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC9C,MAAM,IAAI,GAAkB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CACxC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAC9C,CAAC;gBACF,IAAI,MAAM;oBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAEhC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC7D,KAAK,CACH,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAC9B,GAAG,IAAI,+BAA+B,OAAO,CAAC,MAAM,gBAAgB,IAAI,CAAC,MAAM,GAAG;oBAChF,yEAAyE,CAC5E,CAAC;gBACF,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;oBACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACtD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACzC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7B,KAAK,CACH,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EACvC,GAAG,IAAI,iDAAiD;wBACtD,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,KAAK;wBAC1D,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;wBAC9E,2EAA2E,CAC9E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/testing/index.d.ts

@@ -7,4 +7,11 @@
  */
 export { createMockContext } from './mock-context.js';
 export { createMockStepContext, createMockControlFlowContext, } from './mock-step-context.js';
+/**
+ * The authorization conformance kit — the contract test every host's
+ * authorizer + adapter pair should pass. Also available as its own entry point,
+ * `@xyne/workflow-sdk/testing/authz-conformance`.
+ */
+export { authzConformanceCases } from './authz-conformance.js';
+export type { AuthzConformanceConfig, AuthzConformanceFixture, ConformanceCase, } from './authz-conformance.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,GAChB,MAAM,wBAAwB,CAAC"}

package/dist/testing/index.js

@@ -7,4 +7,10 @@
  */
 export { createMockContext } from './mock-context.js';
 export { createMockStepContext, createMockControlFlowContext, } from './mock-step-context.js';
+/**
+ * The authorization conformance kit — the contract test every host's
+ * authorizer + adapter pair should pass. Also available as its own entry point,
+ * `@xyne/workflow-sdk/testing/authz-conformance`.
+ */
+export { authzConformanceCases } from './authz-conformance.js';
 //# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/testing/mock-context.d.ts

@@ -1,11 +1,15 @@
 import type { WorkflowContext } from '../types/context.js';
+import type { ResourceAttributes } from '../authz/attributes.js';
 /**
  * Create a mock WorkflowContext for testing.
  *
  * Provides sensible defaults — override any field via the `overrides` param.
+ * Pass `attributes` to simulate the workflow's tenant; steps that resolve
+ * credentials or store attachments key off it.
  */
 export declare function createMockContext(overrides?: Partial<WorkflowContext> & {
     workflowId?: string;
+    attributes?: ResourceAttributes<'workflow'>;
     metadata?: Record<string, unknown>;
     triggerType?: string;
     triggerData?: Record<string, unknown>;

package/dist/testing/mock-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-context.d.ts","sourceRoot":"","sources":["../../src/testing/mock-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC,GACA,eAAe,CAqBjB"}
+{"version":3,"file":"mock-context.d.ts","sourceRoot":"","sources":["../../src/testing/mock-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC,GACA,eAAe,CAuBjB"}

package/dist/testing/mock-context.js

@@ -2,12 +2,15 @@
  * Create a mock WorkflowContext for testing.
  *
  * Provides sensible defaults — override any field via the `overrides` param.
+ * Pass `attributes` to simulate the workflow's tenant; steps that resolve
+ * credentials or store attachments key off it.
  */
 export function createMockContext(overrides) {
-    const { workflowId, metadata, triggerType, triggerData, ...rest } = overrides ?? {};
+    const { workflowId, attributes, metadata, triggerType, triggerData, ...rest } = overrides ?? {};
     return {
         workflow: {
             id: workflowId ?? 'wf_test',
+            attributes: attributes,
             metadata: metadata ?? {},
         },
         trigger: {

package/dist/testing/mock-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"mock-context.js","sourceRoot":"","sources":["../../src/testing/mock-context.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAKC;IAED,MAAM,EACJ,UAAU,EACV,QAAQ,EACR,WAAW,EACX,WAAW,EACX,GAAG,IAAI,EACR,GAAG,SAAS,IAAI,EAAE,CAAC;IAEpB,OAAO;QACL,QAAQ,EAAE;YACR,EAAE,EAAE,UAAU,IAAI,SAAS;YAC3B,QAAQ,EAAE,QAAQ,IAAI,EAAE;SACzB;QACD,OAAO,EAAE;YACP,IAAI,EAAE,WAAW,IAAI,MAAM;YAC3B,GAAG,WAAW;SACf;QACD,KAAK,EAAE,EAAE;QACT,GAAG,IAAI;KACR,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mock-context.js","sourceRoot":"","sources":["../../src/testing/mock-context.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAMC;IAED,MAAM,EACJ,UAAU,EACV,UAAU,EACV,QAAQ,EACR,WAAW,EACX,WAAW,EACX,GAAG,IAAI,EACR,GAAG,SAAS,IAAI,EAAE,CAAC;IAEpB,OAAO;QACL,QAAQ,EAAE;YACR,EAAE,EAAE,UAAU,IAAI,SAAS;YAC3B,UAAU,EAAE,UAA4C;YACxD,QAAQ,EAAE,QAAQ,IAAI,EAAE;SACzB;QACD,OAAO,EAAE;YACP,IAAI,EAAE,WAAW,IAAI,MAAM;YAC3B,GAAG,WAAW;SACf;QACD,KAAK,EAAE,EAAE;QACT,GAAG,IAAI;KACR,CAAC;AACJ,CAAC"}

package/dist/testing/mock-step-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-step-context.d.ts","sourceRoot":"","sources":["../../src/testing/mock-step-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,UAAU,sBAAsB,CAC9B,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAEnE,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACtC,gCAAgC;IAChC,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAClD,oCAAoC;IACpC,UAAU,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;IACzD,+BAA+B;IAC/B,GAAG,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,8BAA8B;IAC9B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC1C,mEAAmE;IACnE,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC1C,iDAAiD;IACjD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAC1C,oBAAoB,CAAC,SAAS,CAAC,CAoCjC;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAAG;IAC5C,wDAAwD;IACxD,UAAU,CAAC,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;CACxD,GACA,2BAA2B,CAAC,SAAS,CAAC,GAAG;IAC1C,iDAAiD;IACjD,eAAe,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,EAAE,eAAe,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CACvG,CAaA"}
+{"version":3,"file":"mock-step-context.d.ts","sourceRoot":"","sources":["../../src/testing/mock-step-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,UAAU,sBAAsB,CAC9B,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAEnE,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACtC,gCAAgC;IAChC,WAAW,CAAC,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAClD,oCAAoC;IACpC,UAAU,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;IACzD,+BAA+B;IAC/B,GAAG,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,8BAA8B;IAC9B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC1C,mEAAmE;IACnE,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC1C,iDAAiD;IACjD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAC1C,oBAAoB,CAAC,SAAS,CAAC,CAqCjC;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAAG;IAC5C,wDAAwD;IACxD,UAAU,CAAC,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;CACxD,GACA,2BAA2B,CAAC,SAAS,CAAC,GAAG;IAC1C,iDAAiD;IACjD,eAAe,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,EAAE,eAAe,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CACvG,CAaA"}

package/dist/testing/mock-step-context.js

@@ -17,6 +17,7 @@ export function createMockStepContext(options) {
             stepId: 'step_test_id',
             stepName: 'step_test',
             isResuming: false,
+            attributes: undefined,
             metadata: {},
             baseUrl: '',
             ...options?.runtime,

package/dist/testing/mock-step-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"mock-step-context.js","sourceRoot":"","sources":["../../src/testing/mock-step-context.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA6BtD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAGnC,OAA2C;IAE3C,MAAM,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAE1C,OAAO;QACL,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE;QAClD,OAAO,EAAE;YACP,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE;YACX,GAAG,OAAO,EAAE,OAAO;SACpB;QACD,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,QAAQ,EACN,OAAO,EAAE,QAAQ;YAChB,IAAI,eAAe,EAA4C;QAClE,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;QACvC,UAAU,EAAE;YACV,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,SAAS;YAC1C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,SAAS;SACjD;QACD,KAAK,EAAE,mBAAmB,EAAE;QAC5B,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;QAC3B,GAAG,EAAE;YACH,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YAChC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YAChC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;SACnC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAG1C,OAGC;IAKD,MAAM,KAAK,GAAyF,EAAE,CAAC;IACvG,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/C,OAAO;QACL,GAAG,OAAO;QACV,UAAU,EACR,OAAO,EAAE,UAAU;YACnB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC;QACJ,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mock-step-context.js","sourceRoot":"","sources":["../../src/testing/mock-step-context.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAIhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA6BtD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAGnC,OAA2C;IAE3C,MAAM,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAE1C,OAAO;QACL,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE;QAClD,OAAO,EAAE;YACP,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,SAA2C;YACvD,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE;YACX,GAAG,OAAO,EAAE,OAAO;SACpB;QACD,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,QAAQ,EACN,OAAO,EAAE,QAAQ;YAChB,IAAI,eAAe,EAA4C;QAClE,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;QACvC,UAAU,EAAE;YACV,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,SAAS;YAC1C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,SAAS;SACjD;QACD,KAAK,EAAE,mBAAmB,EAAE;QAC5B,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;QAC3B,GAAG,EAAE;YACH,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YAChC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YAChC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;SACnC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAG1C,OAGC;IAKD,MAAM,KAAK,GAAyF,EAAE,CAAC;IACvG,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/C,OAAO;QACL,GAAG,OAAO;QACV,UAAU,EACR,OAAO,EAAE,UAAU;YACnB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC;QACJ,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC"}

package/dist/types/context.d.ts

@@ -1,4 +1,5 @@
 import type { StepType } from './step-types.js';
+import type { ResourceAttributes } from '../authz/attributes.js';
 /**
  * Trigger context is generic in the SDK — host defines concrete shapes.
  * Must have at minimum a `type` field for matching.
@@ -15,18 +16,36 @@ export interface StepContextEntry {
 /**
  * The shared context that flows through a workflow execution.
  *
- * - `workflow` — identity: just the workflow id + host-defined metadata
+ * - `workflow` — identity: the workflow id, its typed scope, and host metadata
  * - `trigger` — the event/webhook/cron payload that started the execution
  * - `steps` — accumulated outputs from each step (keyed by step id)
  * - `__meta` — internal bookkeeping (error state, execution chain for cycle detection)
  *
  * The SDK only needs `workflow.id` internally (static data scoping, execution tracking).
- * Host-specific fields (workspaceId, createdById, tenantId, etc.) go in `workflow.metadata`.
  */
 export interface WorkflowContext {
     workflow: {
         id: string;
-        /** Host-defined metadata — workspaceId, createdById, tenantId, etc. */
+        /**
+         * The workflow's scoping attributes — *which tenant this execution acts as*.
+         *
+         * At execution time there is no caller to authorize: a cron tick or a
+         * webhook has no user. So the scope is carried by the resource itself, and
+         * this is it. Credential resolution and attachment storage key off this, so
+         * it decides which tenant's secrets and files the run touches.
+         *
+         * The executor re-hydrates this from the workflow record on every run — it
+         * is deliberately NOT trusted from the persisted execution context, which
+         * would go stale if the workflow were re-scoped mid-flight.
+         *
+         * Typed via {@link Register}; `unknown` until a product opts in.
+         */
+        attributes: ResourceAttributes<'workflow'>;
+        /**
+         * Host-defined metadata — the workflow's `name`, and whatever else the host
+         * stored alongside it. NOT a scope: put scoping data in `attributes`, which
+         * is typed and which the authorizer actually sees.
+         */
         metadata: Record<string, unknown>;
     };
     trigger: TriggerContext;

package/dist/types/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/types/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,uEAAuE;QACvE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;IACF,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B;;;WAGG;QACH,WAAW,CAAC,EAAE;YACZ,WAAW,EAAE,MAAM,CAAC;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC;QACF;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC7C,CAAC;CACH"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/types/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX;;;;;;;;;;;;;WAaG;QACH,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC3C;;;;WAIG;QACH,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;IACF,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B;;;WAGG;QACH,WAAW,CAAC,EAAE;YACZ,WAAW,EAAE,MAAM,CAAC;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC;QACF;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC7C,CAAC;CACH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xyne/workflow-sdk",
-  "version": "3.2.15",
+  "version": "3.2.16",
   "description": "Workflow engine SDK — steps, triggers, executor, agents, and a framework-agnostic HTTP router.",
   "license": "UNLICENSED",
   "repository": {
@@ -32,6 +32,10 @@
       "types": "./dist/testing/index.d.ts",
       "import": "./dist/testing/index.js"
     },
+    "./testing/authz-conformance": {
+      "types": "./dist/testing/authz-conformance.d.ts",
+      "import": "./dist/testing/authz-conformance.js"
+    },
     "./agents": {
       "types": "./dist/agents/index.d.ts",
       "import": "./dist/agents/index.js"
@@ -80,11 +84,13 @@
   "scripts": {
     "build": "tsc",
     "watch": "tsc --watch",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.test.json",
+    "typecheck:src": "tsc --noEmit",
+    "typecheck:test": "tsc -p tsconfig.test.json",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
-    "prepublishOnly": "npm run build && npm test"
+    "prepublishOnly": "npm run typecheck && npm run build && npm test"
   },
   "dependencies": {
     "zod": "^3.25.76",

package/dist/common/principal.d.ts

@@ -1,45 +0,0 @@
-/**
- * Principal + authorization descriptors — browser-safe shared types.
- *
- * The host authenticates a request into an {@link AuthContext} (the principal).
- * The SDK never interprets `metadata` — it's an opaque claims bag (teamIds,
- * roles, deptId, …). Scoping is derived from the principal by host hooks.
- */
-/** The authenticated principal, produced by the host's `authenticate()` hook. */
-export interface AuthContext {
-    userId: string;
-    /** Host-defined claims — workspaceId, tenantId, teamIds, roles, etc. Opaque to the SDK. */
-    metadata: Record<string, unknown>;
-}
-/** Verbs the scope hooks can differentiate on. Resource types extend this over time. */
-export type WorkflowAction = 'workflow.list' | 'workflow.read' | 'workflow.write' | 'workflow.trigger' | 'execution.list' | 'execution.read' | 'execution.write';
-/**
- * One node in the host's scope hierarchy — what the UI renders in the scope
- * navigator. The host (not the SDK) decides what a node represents
- * (department, team, project); `kind` is a display label only.
- */
-export interface ScopeNode {
-    /** Opaque scope id — matches `WorkflowRecord.scope`. */
-    id: string;
-    label: string;
-    /** Display grouping/icon hint, e.g. 'Department' | 'Team'. Not used for routing. */
-    kind?: string;
-    parentId?: string | null;
-    hasChildren?: boolean;
-    counts?: {
-        workflows?: number;
-        running?: number;
-    };
-}
-/**
- * What the UI bootstraps from on load. Drives the scope navigator and gates
- * cross-scope ("admin") affordances.
- */
-export interface SessionDescriptor {
-    userId: string;
-    /** Top-level scopes the principal can reach. */
-    scopes: ScopeNode[];
-    /** Opaque capability flags, e.g. 'workflow.list.crossScope' for an admin view. */
-    capabilities: string[];
-}
-//# sourceMappingURL=principal.d.ts.map

package/dist/common/principal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../src/common/principal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,wFAAwF;AACxF,MAAM,MAAM,cAAc,GACtB,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,kFAAkF;IAClF,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB"}

package/dist/common/principal.js

@@ -1,9 +0,0 @@
-/**
- * Principal + authorization descriptors — browser-safe shared types.
- *
- * The host authenticates a request into an {@link AuthContext} (the principal).
- * The SDK never interprets `metadata` — it's an opaque claims bag (teamIds,
- * roles, deptId, …). Scoping is derived from the principal by host hooks.
- */
-export {};
-//# sourceMappingURL=principal.js.map

package/dist/common/principal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"principal.js","sourceRoot":"","sources":["../../src/common/principal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/steps/builtin/transform.step.d.ts

@@ -1,247 +0,0 @@
-/**
- * TRANSFORM step — pure data manipulation.
- *
- * Applies a sequence of operations to the workflow context:
- * - set: write a value at a dotted path
- * - rename: move a value from one path to another
- * - remove: delete a value at a dotted path
- * - copy: copy a value from one path to another
- *
- * No services, no credentials — pure deterministic logic.
- */
-import { z } from 'zod';
-import { BaseActionStep } from '../base-step.js';
-import type { StepExecutionContext } from '../base-step.js';
-import { BuiltinStepType } from '../../types/known-types.js';
-import type { StepCategory } from '../../types/categories.js';
-export declare const TransformOpSchema: z.ZodDiscriminatedUnion<"op", [z.ZodObject<{
-    op: z.ZodLiteral<"set">;
-    path: z.ZodString;
-    value: z.ZodUnknown;
-}, "strip", z.ZodTypeAny, {
-    op: "set";
-    path: string;
-    value?: unknown;
-}, {
-    op: "set";
-    path: string;
-    value?: unknown;
-}>, z.ZodObject<{
-    op: z.ZodLiteral<"rename">;
-    from: z.ZodString;
-    to: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    op: "rename";
-    from: string;
-    to: string;
-}, {
-    op: "rename";
-    from: string;
-    to: string;
-}>, z.ZodObject<{
-    op: z.ZodLiteral<"remove">;
-    path: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    op: "remove";
-    path: string;
-}, {
-    op: "remove";
-    path: string;
-}>, z.ZodObject<{
-    op: z.ZodLiteral<"copy">;
-    from: z.ZodString;
-    to: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    op: "copy";
-    from: string;
-    to: string;
-}, {
-    op: "copy";
-    from: string;
-    to: string;
-}>]>;
-export type TransformOp = z.infer<typeof TransformOpSchema>;
-export declare const TransformStepConfigSchema: z.ZodObject<{
-    operations: z.ZodArray<z.ZodDiscriminatedUnion<"op", [z.ZodObject<{
-        op: z.ZodLiteral<"set">;
-        path: z.ZodString;
-        value: z.ZodUnknown;
-    }, "strip", z.ZodTypeAny, {
-        op: "set";
-        path: string;
-        value?: unknown;
-    }, {
-        op: "set";
-        path: string;
-        value?: unknown;
-    }>, z.ZodObject<{
-        op: z.ZodLiteral<"rename">;
-        from: z.ZodString;
-        to: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        op: "rename";
-        from: string;
-        to: string;
-    }, {
-        op: "rename";
-        from: string;
-        to: string;
-    }>, z.ZodObject<{
-        op: z.ZodLiteral<"remove">;
-        path: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        op: "remove";
-        path: string;
-    }, {
-        op: "remove";
-        path: string;
-    }>, z.ZodObject<{
-        op: z.ZodLiteral<"copy">;
-        from: z.ZodString;
-        to: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        op: "copy";
-        from: string;
-        to: string;
-    }, {
-        op: "copy";
-        from: string;
-        to: string;
-    }>]>, "many">;
-}, "strip", z.ZodTypeAny, {
-    operations: ({
-        op: "set";
-        path: string;
-        value?: unknown;
-    } | {
-        op: "rename";
-        from: string;
-        to: string;
-    } | {
-        op: "remove";
-        path: string;
-    } | {
-        op: "copy";
-        from: string;
-        to: string;
-    })[];
-}, {
-    operations: ({
-        op: "set";
-        path: string;
-        value?: unknown;
-    } | {
-        op: "rename";
-        from: string;
-        to: string;
-    } | {
-        op: "remove";
-        path: string;
-    } | {
-        op: "copy";
-        from: string;
-        to: string;
-    })[];
-}>;
-export type TransformStepConfig = z.infer<typeof TransformStepConfigSchema>;
-export interface TransformStepOutput extends Record<string, unknown> {
-    applied: number;
-}
-export declare class TransformStep extends BaseActionStep<typeof TransformStepConfigSchema, TransformStepOutput> {
-    readonly type = BuiltinStepType.TRANSFORM;
-    readonly name = "Transform";
-    readonly description = "Apply data transformations to the workflow context";
-    readonly configSchema: z.ZodObject<{
-        operations: z.ZodArray<z.ZodDiscriminatedUnion<"op", [z.ZodObject<{
-            op: z.ZodLiteral<"set">;
-            path: z.ZodString;
-            value: z.ZodUnknown;
-        }, "strip", z.ZodTypeAny, {
-            op: "set";
-            path: string;
-            value?: unknown;
-        }, {
-            op: "set";
-            path: string;
-            value?: unknown;
-        }>, z.ZodObject<{
-            op: z.ZodLiteral<"rename">;
-            from: z.ZodString;
-            to: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            op: "rename";
-            from: string;
-            to: string;
-        }, {
-            op: "rename";
-            from: string;
-            to: string;
-        }>, z.ZodObject<{
-            op: z.ZodLiteral<"remove">;
-            path: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            op: "remove";
-            path: string;
-        }, {
-            op: "remove";
-            path: string;
-        }>, z.ZodObject<{
-            op: z.ZodLiteral<"copy">;
-            from: z.ZodString;
-            to: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            op: "copy";
-            from: string;
-            to: string;
-        }, {
-            op: "copy";
-            from: string;
-            to: string;
-        }>]>, "many">;
-    }, "strip", z.ZodTypeAny, {
-        operations: ({
-            op: "set";
-            path: string;
-            value?: unknown;
-        } | {
-            op: "rename";
-            from: string;
-            to: string;
-        } | {
-            op: "remove";
-            path: string;
-        } | {
-            op: "copy";
-            from: string;
-            to: string;
-        })[];
-    }, {
-        operations: ({
-            op: "set";
-            path: string;
-            value?: unknown;
-        } | {
-            op: "rename";
-            from: string;
-            to: string;
-        } | {
-            op: "remove";
-            path: string;
-        } | {
-            op: "copy";
-            from: string;
-            to: string;
-        })[];
-    }>;
-    readonly outputSchema: z.ZodObject<{
-        applied: z.ZodNumber;
-    }, "strip", z.ZodTypeAny, {
-        applied: number;
-    }, {
-        applied: number;
-    }>;
-    readonly category: StepCategory;
-    readonly icon = "filter";
-    execute(config: TransformStepConfig, ctx: StepExecutionContext): Promise<TransformStepOutput>;
-}
-//# sourceMappingURL=transform.step.d.ts.map

package/dist/steps/builtin/transform.step.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transform.step.d.ts","sourceRoot":"","sources":["../../../src/steps/builtin/transform.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AA4B9D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAK5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E,MAAM,WAAW,mBAAoB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAClE,OAAO,EAAE,MAAM,CAAC;CACjB;AA+DD,qBAAa,aAAc,SAAQ,cAAc,CAC/C,OAAO,yBAAyB,EAChC,mBAAmB,CACpB;IACC,SAAkB,IAAI,6BAA6B;IACnD,SAAkB,IAAI,eAAe;IACrC,SAAkB,WAAW,wDAAwD;IACrF,SAAkB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAA6B;IAC3D,SAAkB,YAAY;;;;;;OAA6B;IAC3D,SAAkB,QAAQ,EAAE,YAAY,CAAU;IAClD,SAAkB,IAAI,YAAY;IAEnB,OAAO,CACpB,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAAC,mBAAmB,CAAC;CAyChC"}