@xyne/workflow-sdk 3.2.37 → 3.2.38

package/dist/runtime/workflow-runtime.d.ts

@@ -22,9 +22,8 @@ import type { CredentialSummary, CredentialListItem, ResolvedCredential, CreateC
 import type { Action } from '../authz/types.js';
 import type { ResourceAttributes } from '../authz/attributes.js';
 import type { IdScope } from '../authz/id-scope.js';
-import type { StepRegistry } from '../steps/step-registry.js';
-import type { TriggerRegistry } from '../triggers/trigger-registry.js';
-import type { WebhookRequest } from '../triggers/webhook-trigger.js';
+import type { ConnectorRegistry } from '../connectors/core/connector-registry.js';
+import type { InboundHttpRequest, WebhookIngestResult } from '../ingest/types.js';
 export declare class WorkflowRuntime<TServices extends Record<string, unknown> = Record<string, unknown>, TCtx = unknown, TFilter = IdScope> {
     private readonly persistence;
     /** Authorization port — host-supplied, always. See {@link RuntimeOptions.authorizer}. */
@@ -32,9 +31,9 @@ export declare class WorkflowRuntime<TServices extends Record<string, unknown> =
     private readonly queue;
     private readonly scheduler;
     private readonly services;
-    readonly steps: StepRegistry;
-    readonly triggers: TriggerRegistry;
+    readonly connectors: ConnectorRegistry;
     private readonly executor;
+    private readonly credentialResolver;
     private readonly log;
     private readonly baseUrl;
     /** Pub/sub transport for live execution events. Exposed for the router's SSE stream. */
@@ -114,9 +113,11 @@ export declare class WorkflowRuntime<TServices extends Record<string, unknown> =
     /**
      * Activate a workflow's trigger.
      *
-     * - WebhookTrigger: generates a unique path, stores it, calls onActivate()
+     * - Every trigger: its credential slots must resolve to accepted credentials
      * - CronTrigger: registers with the scheduler
-     * - EventTrigger / ManualTrigger: no activation needed (status change only)
+     *
+     * Only then is the workflow marked ACTIVE. Webhook ingest and event dispatch
+     * both key off that status, so it is what actually turns a workflow on.
      */
     activateWorkflow(ctx: TCtx, workflowId: string, opts?: MutationOptions): Promise<void>;
     /**
@@ -157,19 +158,23 @@ export declare class WorkflowRuntime<TServices extends Record<string, unknown> =
      */
     dispatchEvent(event: DispatchEventInput): Promise<string[]>;
     /**
-     * Handle an incoming webhook request.
+     * Ingest a request to a workflow's webhook URL, `<baseUrl>/webhooks/<workflowId>`.
      *
-     * Looks up the workflow by webhook path, delegates to the trigger's
-     * `handleRequest()`, and enqueues an execution.
-     */
-    handleWebhook(path: string, request: WebhookRequest): Promise<{
-        executionId: string;
-        httpResponse: {
-            status: number;
-            headers?: Record<string, string>;
-            body?: unknown;
-        };
-    }>;
+     * The order is fixed, and the trigger's own code runs only after the sender is
+     * authenticated:
+     *
+     * 1. The workflow exists, is ACTIVE and uses a webhook trigger — else 404, the
+     *    same answer for each so workflow ids cannot be probed.
+     * 2. The trigger's credentials resolve — else 401, before any connector code runs.
+     * 3. The trigger's own `verify` accepts the request — else 401.
+     * 4. The body is parsed from the raw bytes — else 400.
+     * 5. The trigger turns the request into events and a reply.
+     * 6. Each event must pass the workflow's trigger filter, or it is dropped.
+     * 7. Survivors are enqueued before the reply is returned.
+     *
+     * Reasons for a rejection go to the log; responses stay generic.
+     */
+    handleWebhook(workflowId: string, request: InboundHttpRequest): Promise<WebhookIngestResult>;
     /**
      * Handle an incoming wait-callback at `POST /wait/callback/<secret>/<executionId>`.
      *
@@ -208,31 +213,32 @@ export declare class WorkflowRuntime<TServices extends Record<string, unknown> =
      */
     triggerManual(ctx: TCtx, workflowId: string, payload: Record<string, unknown>): Promise<string>;
     /**
-     * Fire a workflow through the unauthenticated Webhook V2 API.
+     * Start a workflow from the API trigger route.
+     *
+     * No caller reaches the SDK here: the route has no session, and the SDK does
+     * not authorize whoever calls it. A host that exposes the route guards it
+     * itself, for example with an API key. The workflow must use an API trigger,
+     * and the payload must satisfy its input schema.
      *
-     * This intentionally bypasses caller authorization because the host exposes
-     * the route publicly. The workflow itself must opt in by using WEBHOOK_V2,
-     * and the execution is marked as public so privileged steps can enforce their
-     * own public-trigger restrictions.
+     * Runs are marked as public triggers, so privileged steps refuse them.
+     */
+    triggerViaApi(workflowId: string, payload: Record<string, unknown>): Promise<string>;
+    /**
+     * What the API trigger route needs before it builds a payload: the trigger's
+     * input schema, and the workflow's scope for storing uploaded files. Checked
+     * the same way as {@link triggerViaApi}.
      */
-    triggerWebhookV2Public(workflowId: string, payload: Record<string, unknown>): Promise<string>;
+    getApiTriggerTarget(workflowId: string): Promise<{
+        inputSchema: Record<string, unknown> | undefined;
+        storageScope: ResourceAttributes<'workflow'>;
+    }>;
+    /** The workflow exists and uses an API trigger. */
+    private apiTriggerWorkflow;
     /**
      * Return the configured trigger input schema for routes that need to translate
      * transport-level payloads before calling `triggerManual()`.
      */
     getWorkflowTriggerInputSchema(ctx: TCtx, workflowId: string): Promise<Record<string, unknown> | undefined>;
-    /**
-     * Return trigger input schema for public transport routes.
-     *
-     * Unlike getWorkflowTriggerInputSchema(), this does not authorize a caller;
-     * it only verifies the workflow exists and opted into the expected public
-     * trigger type.
-     */
-    getWorkflowTriggerInputSchemaPublic(workflowId: string, expectedTriggerType: string): Promise<Record<string, unknown> | undefined>;
-    /**
-     * Return the workflow-owned storage scope for public transport routes.
-     */
-    getWorkflowStorageScopePublic(workflowId: string, expectedTriggerType: string): Promise<ResourceAttributes<'workflow'>>;
     /**
      * Resume a paused execution. Guards `execution:approve`, then does the work.
      */

package/dist/runtime/workflow-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-runtime.d.ts","sourceRoot":"","sources":["../../src/runtime/workflow-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,eAAe,EACf,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAEV,eAAe,EAIhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,eAAe,EACf,UAAU,EACV,sBAAsB,EAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAEV,MAAM,EAGP,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAIvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAoDrE,qBAAa,eAAe,CAC1B,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnE,IAAI,GAAG,OAAO,EACd,OAAO,GAAG,OAAO;IAEjB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAChD,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC9C,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC9C,8EAA8E;IAC9E,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;gBAErC,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC;IAwB1D;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,YAAY;IAIpB;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAqB7B;;;;OAIG;YACW,OAAO;IAUrB;;;;OAIG;YACW,kBAAkB;IAWhC,mFAAmF;YACrE,gBAAgB;IAW9B,8EAA8E;IAC9E,OAAO,CAAC,SAAS;IAIjB;;;;OAIG;YACW,YAAY;IAO1B,4EAA4E;IAC5E,OAAO,CAAC,WAAW;IAInB,2FAA2F;IAC3F,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,YAAY;IAIpB,8EAA8E;IAC9E,OAAO,CAAC,aAAa;IAgBrB;;;;OAIG;YACW,OAAO;IAerB;;;;;;OAMG;IACH,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB;IAOxD;;;;;;OAMG;IACG,gBAAgB,CACpB,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC;IAShB;;;;OAIG;YACW,gBAAgB;IAwC9B;;OAEG;IACG,kBAAkB,CACtB,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC;IAuChB;;;;;;;OAOG;IACG,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAYjF;;;OAGG;IACG,sBAAsB,CAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,CAAC;IAIlC;;;;OAIG;IACH,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAOlE;;;;;OAKG;IACG,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA0CjE;;;;;OAKG;IACG,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC;QACT,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KACpF,CAAC;IAiDF;;;;;;;;;;;;;;;;;;;OAmBG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC;QACT,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,OAAO,CAAC;KACf,CAAC;IAiCF;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC;IAuBlB;;;;;;;OAOG;IACG,sBAAsB,CAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC;IAoClB;;;OAGG;IACG,6BAA6B,CACjC,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAe/C;;;;;;OAMG;IACG,mCAAmC,CACvC,UAAU,EAAE,MAAM,EAClB,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAkB/C;;OAEG;IACG,6BAA6B,CACjC,UAAU,EAAE,MAAM,EAClB,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAc1C;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAOhF;;;;OAIG;YACW,cAAc;IAgF5B;;;;;;;;;;;;;OAaG;IACG,aAAa,CACjB,GAAG,EAAE,IAAI,EACT,iBAAiB,EAAE,MAAM,EACzB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QACR,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,GACA,OAAO,CAAC,MAAM,CAAC;IAelB;;;OAGG;IACG,aAAa,CACjB,GAAG,EAAE,IAAI,EACT,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5D,OAAO,CAAC,cAAc,EAAE,CAAC;IAM5B,qFAAqF;IAC/E,cAAc,CAClB,GAAG,EAAE,IAAI,GACR,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAI1F;;;OAGG;IACG,WAAW,CACf,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,GAAG;QAAE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IAOpE;;;;;OAKG;IACG,cAAc,CAClB,GAAG,EAAE,IAAI,EACT,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,cAAc,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,uEAAuE;QACvE,QAAQ,EAAE,MAAM,CAAC;QACjB,uEAAuE;QACvE,UAAU,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;KAC7C,EACD,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,cAAc,CAAC;IAuC1B;;;;;OAKG;IACG,cAAc,CAClB,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,sDAAsD;QACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,EACD,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,cAAc,CAAC;IAiD1B,uCAAuC;IACjC,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAKrD;;;;;OAKG;IACG,SAAS,CACb,GAAG,EAAE,IAAI,EACT,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,GAAG;QAAE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IAKlE;;;;OAIG;IACG,YAAY,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAIzD,gDAAgD;IAC1C,YAAY,CAChB,GAAG,EAAE,IAAI,EACT,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,uEAAuE;QACvE,UAAU,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;KAC3C,GACA,OAAO,CAAC,YAAY,CAAC;IAkBxB,qEAAqE;IAC/D,SAAS,CACb,GAAG,EAAE,IAAI,EACT,KAAK,EAAE;QACL,OAAO,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QACxD,SAAS,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpD,EACD,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC;IAYV,YAAY,CAChB,GAAG,EAAE,IAAI,EACT,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACjD,OAAO,CAAC,IAAI,CAAC;IAqChB;;;OAGG;IACG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxD;;OAEG;IACG,YAAY,CAChB,GAAG,EAAE,IAAI,EACT,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IAMtG;;OAEG;IACG,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;IAiBlG;;;OAGG;IACG,aAAa,CACjB,GAAG,EAAE,IAAI,EACT,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,IAAI,GACX,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAM9E;;;OAGG;IACG,cAAc,CAClB,GAAG,EAAE,IAAI,EACT,MAAM,EAAE;QACN,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GACA,OAAO,CAAC;QAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAM7D;;;OAGG;IACG,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QACnE,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,IAAI,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IA6DH;;OAEG;IACG,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAChE,SAAS,EAAE,eAAe,CAAC;QAC3B,KAAK,EAAE,UAAU,EAAE,CAAC;QACpB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,GAAG,IAAI,CAAC;IAkDT;;OAEG;IACG,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBpE,0EAA0E;IACpE,eAAe,CACnB,GAAG,EAAE,IAAI,EACT,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACzC,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAS1B,gBAAgB,CACpB,UAAU,EAAE,kBAAkB,CAAC,YAAY,CAAC,EAC5C,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IAKvB,uBAAuB,CAC3B,UAAU,EAAE,kBAAkB,CAAC,YAAY,CAAC,EAC5C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAQpC;;;;;;;;;;;OAWG;IACG,gBAAgB,CACpB,UAAU,EAAE,kBAAkB,CAAC,YAAY,CAAC,EAC5C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAIpC;;OAEG;IACG,iBAAiB,CACrB,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAC1C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAMrC;;;;;;OAMG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAkE/D;;;;;OAKG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YA6CnD,gBAAgB;CAwC/B"}
+{"version":3,"file":"workflow-runtime.d.ts","sourceRoot":"","sources":["../../src/runtime/workflow-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,eAAe,EACf,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAEV,eAAe,EAIhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,eAAe,EACf,UAAU,EACV,sBAAsB,EAIvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAEV,MAAM,EAGP,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAUlF,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAgElF,qBAAa,eAAe,CAC1B,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnE,IAAI,GAAG,OAAO,EACd,OAAO,GAAG,OAAO;IAEjB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAChD,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC9C,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC9C,8EAA8E;IAC9E,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;gBAErC,IAAI,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC;IAwB1D;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,YAAY;IAIpB;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAqB7B;;;;OAIG;YACW,OAAO;IAUrB;;;;OAIG;YACW,kBAAkB;IAWhC,mFAAmF;YACrE,gBAAgB;IAW9B,8EAA8E;IAC9E,OAAO,CAAC,SAAS;IAIjB;;;;OAIG;YACW,YAAY;IAO1B,4EAA4E;IAC5E,OAAO,CAAC,WAAW;IAInB,2FAA2F;IAC3F,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,YAAY;IAIpB,8EAA8E;IAC9E,OAAO,CAAC,aAAa;IAgBrB;;;;OAIG;YACW,OAAO;IAerB;;;;;;OAMG;IACH,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB;IAOxD;;;;;;;;OAQG;IACG,gBAAgB,CACpB,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC;IAUhB;;;;OAIG;YACW,gBAAgB;IAqC9B;;OAEG;IACG,kBAAkB,CACtB,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC;IA8BhB;;;;;;;OAOG;IACG,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAYjF;;;OAGG;IACG,sBAAsB,CAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,CAAC;IAIlC;;;;OAIG;IACH,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM;IAOlE;;;;;OAKG;IACG,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA8CjE;;;;;;;;;;;;;;;;OAgBG;IACG,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;IAoE/B;;;;;;;;;;;;;;;;;;;OAmBG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC;QACT,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,OAAO,CAAC;KACf,CAAC;IAiCF;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC;IAuBlB;;;;;;;;;OASG;IACG,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC;IAyBlB;;;;OAIG;IACG,mBAAmB,CACvB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QACT,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QACjD,YAAY,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;KAC9C,CAAC;IAQF,mDAAmD;YACrC,kBAAkB;IAchC;;;OAGG;IACG,6BAA6B,CACjC,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAU/C;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAOhF;;;;OAIG;YACW,cAAc;IAgF5B;;;;;;;;;;;;;OAaG;IACG,aAAa,CACjB,GAAG,EAAE,IAAI,EACT,iBAAiB,EAAE,MAAM,EACzB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QACR,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,GACA,OAAO,CAAC,MAAM,CAAC;IAelB;;;OAGG;IACG,aAAa,CACjB,GAAG,EAAE,IAAI,EACT,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5D,OAAO,CAAC,cAAc,EAAE,CAAC;IAM5B,qFAAqF;IAC/E,cAAc,CAClB,GAAG,EAAE,IAAI,GACR,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAI1F;;;OAGG;IACG,WAAW,CACf,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,GAAG;QAAE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IAOpE;;;;;OAKG;IACG,cAAc,CAClB,GAAG,EAAE,IAAI,EACT,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,cAAc,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,uEAAuE;QACvE,QAAQ,EAAE,MAAM,CAAC;QACjB,uEAAuE;QACvE,UAAU,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;KAC7C,EACD,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,cAAc,CAAC;IAyC1B;;;;;OAKG;IACG,cAAc,CAClB,GAAG,EAAE,IAAI,EACT,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,sDAAsD;QACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,EACD,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,cAAc,CAAC;IAiD1B,uCAAuC;IACjC,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAKrD;;;;;OAKG;IACG,SAAS,CACb,GAAG,EAAE,IAAI,EACT,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,GAAG;QAAE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IAKlE;;;;OAIG;IACG,YAAY,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAIzD,gDAAgD;IAC1C,YAAY,CAChB,GAAG,EAAE,IAAI,EACT,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,uEAAuE;QACvE,UAAU,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;KAC3C,GACA,OAAO,CAAC,YAAY,CAAC;IAkBxB,qEAAqE;IAC/D,SAAS,CACb,GAAG,EAAE,IAAI,EACT,KAAK,EAAE;QACL,OAAO,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QACxD,SAAS,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpD,EACD,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC;IAYV,YAAY,CAChB,GAAG,EAAE,IAAI,EACT,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACjD,OAAO,CAAC,IAAI,CAAC;IAqChB;;;OAGG;IACG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxD;;OAEG;IACG,YAAY,CAChB,GAAG,EAAE,IAAI,EACT,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IAMtG;;OAEG;IACG,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;IAiBlG;;;OAGG;IACG,aAAa,CACjB,GAAG,EAAE,IAAI,EACT,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,IAAI,GACX,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAM9E;;;OAGG;IACG,cAAc,CAClB,GAAG,EAAE,IAAI,EACT,MAAM,EAAE;QACN,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GACA,OAAO,CAAC;QAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAM7D;;;OAGG;IACG,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QACnE,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,IAAI,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IA6DH;;OAEG;IACG,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAChE,SAAS,EAAE,eAAe,CAAC;QAC3B,KAAK,EAAE,UAAU,EAAE,CAAC;QACpB,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,GAAG,IAAI,CAAC;IAkDT;;OAEG;IACG,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBpE,0EAA0E;IACpE,eAAe,CACnB,GAAG,EAAE,IAAI,EACT,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACzC,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAS1B,gBAAgB,CACpB,UAAU,EAAE,kBAAkB,CAAC,YAAY,CAAC,EAC5C,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IAKvB,uBAAuB,CAC3B,UAAU,EAAE,kBAAkB,CAAC,YAAY,CAAC,EAC5C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAQpC;;;;;;;;;;;OAWG;IACG,gBAAgB,CACpB,UAAU,EAAE,kBAAkB,CAAC,YAAY,CAAC,EAC5C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAIpC;;OAEG;IACG,iBAAiB,CACrB,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAC1C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAMrC;;;;;;OAMG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAkE/D;;;;;OAKG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YA6CnD,gBAAgB;CAwC/B"}

package/dist/runtime/workflow-runtime.js

@@ -18,10 +18,18 @@ import { validateTriggerPayload } from '../common/validate-payload.js';
 import { AccessDeniedError, ResourceNotFoundError } from '../authz/default.js';
 import { EventTrigger } from '../triggers/event-trigger.js';
 import { WebhookTrigger } from '../triggers/webhook-trigger.js';
+import { ApiTrigger } from '../triggers/api-trigger.js';
+import { CredentialResolver } from '../engine/credential-resolver.js';
+import { headerValue } from '../ingest/headers.js';
+import { parseInboundBody } from '../ingest/body.js';
+import { matchesTriggerFilter } from '../ingest/filter.js';
 import { CronTrigger } from '../triggers/cron-trigger.js';
 import { PauseStep } from '../engine/pause-step.js';
 import { leafStepId } from '../engine/node-path.js';
 // ─── Helpers ───
+function messageOf(err) {
+    return err instanceof Error ? err.message : String(err);
+}
 const noopLogger = {
     info: () => { },
     warn: () => { },
@@ -32,6 +40,13 @@ function generateSecret() {
     crypto.getRandomValues(bytes);
     return Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
 }
+/** The trigger's author-supplied input schema, when it has one. */
+function inputSchemaOf(config) {
+    const inputSchema = (config.trigger.config ?? {})['inputSchema'];
+    return inputSchema && typeof inputSchema === 'object' && !Array.isArray(inputSchema)
+        ? inputSchema
+        : undefined;
+}
 function parseWorkflowConfig(raw) {
     return JSON.parse(raw ?? '{}');
 }
@@ -69,9 +84,9 @@ export class WorkflowRuntime {
     queue;
     scheduler;
     services;
-    steps;
-    triggers;
+    connectors;
     executor;
+    credentialResolver;
     log;
     baseUrl;
     /** Pub/sub transport for live execution events. Exposed for the router's SSE stream. */
@@ -95,9 +110,9 @@ export class WorkflowRuntime {
         this.queue = opts.queue;
         this.scheduler = opts.scheduler;
         this.services = opts.services;
-        this.steps = opts.steps;
-        this.triggers = opts.triggers;
+        this.connectors = opts.connectors;
         this.executor = opts.executor;
+        this.credentialResolver = new CredentialResolver(opts.persistence);
         this.log = opts.logger ?? noopLogger;
         this.eventBus = opts.eventBus;
         this.storage = opts.storage;
@@ -247,23 +262,26 @@ export class WorkflowRuntime {
      * can render inline in the workflow builder.
      */
     validateConfig(config) {
-        const validator = new ConfigValidator(this.triggers, this.steps);
+        const validator = new ConfigValidator(this.connectors);
         return validator.validate(config);
     }
     // ─── Workflow Lifecycle ───
     /**
      * Activate a workflow's trigger.
      *
-     * - WebhookTrigger: generates a unique path, stores it, calls onActivate()
+     * - Every trigger: its credential slots must resolve to accepted credentials
      * - CronTrigger: registers with the scheduler
-     * - EventTrigger / ManualTrigger: no activation needed (status change only)
+     *
+     * Only then is the workflow marked ACTIVE. Webhook ingest and event dispatch
+     * both key off that status, so it is what actually turns a workflow on.
      */
     async activateWorkflow(ctx, workflowId, opts) {
         // Guard up front, before any external side-effects (webhook/scheduler).
         const { record } = await this.authorizedWorkflow(ctx, workflowId, 'workflow:activate');
         await this.activateInternal(record);
-        // After the side-effects, never before: a webhook path that failed to store
-        // is not a change worth telling anyone about.
+        await this.persistence.updateWorkflow(workflowId, { status: 'ACTIVE' });
+        // After the side-effects, never before: an activation that failed is not a
+        // change worth telling anyone about.
         this.publishWorkflowChange(workflowId, 'activated', opts?.origin);
     }
     /**
@@ -274,20 +292,16 @@ export class WorkflowRuntime {
     async activateInternal(workflow) {
         const workflowId = workflow.id;
         const config = parseWorkflowConfig(workflow.config);
-        if (!this.triggers.has(config.trigger.type)) {
+        if (!this.connectors.hasTrigger(config.trigger.type)) {
             throw new Error(`Trigger type "${config.trigger.type}" is not registered`);
         }
-        const trigger = this.triggers.get(config.trigger.type);
+        const trigger = this.connectors.getTrigger(config.trigger.type);
+        // A missing, revoked or wrong-type credential fails here, naming the slot,
+        // rather than on the first event.
+        if (trigger.credentialSlots?.length) {
+            await this.credentialResolver.resolve(workflow.attributes, trigger, config.trigger.config);
+        }
         if (trigger instanceof WebhookTrigger) {
-            const secret = generateSecret();
-            const path = `/webhooks/${workflowId}/${secret}`;
-            await this.persistence.storeWebhookPath(workflowId, path, secret);
-            if (trigger.onActivate) {
-                await trigger.onActivate(config.trigger.config, {
-                    webhookUrl: this.baseUrl + path,
-                    credentials: {},
-                });
-            }
             this.log.info(`activated webhook trigger for workflow ${workflowId}`);
         }
         else if (trigger instanceof CronTrigger) {
@@ -310,24 +324,16 @@ export class WorkflowRuntime {
         // Falls through rather than returning early on an unregistered trigger type:
         // the call still succeeded, and every successful call must leave by the same
         // door so that none of them can quietly skip the notification below.
-        const trigger = this.triggers.has(config.trigger.type)
-            ? this.triggers.get(config.trigger.type)
+        const trigger = this.connectors.hasTrigger(config.trigger.type)
+            ? this.connectors.getTrigger(config.trigger.type)
             : null;
-        if (trigger instanceof WebhookTrigger) {
-            if (trigger.onDeactivate) {
-                await trigger.onDeactivate(config.trigger.config, {
-                    webhookUrl: '',
-                    credentials: {},
-                });
-            }
-            await this.persistence.removeWebhookPath(workflowId);
-            this.log.info(`deactivated webhook trigger for workflow ${workflowId}`);
-        }
-        else if (trigger instanceof CronTrigger) {
+        if (trigger instanceof CronTrigger) {
             await this.scheduler.unschedule(workflowId);
             this.log.info(`deactivated cron trigger for workflow ${workflowId}`);
         }
-        // EventTrigger, ManualTrigger and unregistered types need no teardown.
+        // Webhook, event and manual triggers need no teardown: webhook ingest and
+        // event dispatch only reach ACTIVE workflows, so the status below stops them.
+        await this.persistence.updateWorkflow(workflowId, { status: 'DISABLED' });
         this.publishWorkflowChange(workflowId, 'deactivated', opts?.origin);
     }
     // ─── Workflow callback secret ───
@@ -379,9 +385,9 @@ export class WorkflowRuntime {
         const executionIds = [];
         for (const workflow of workflows) {
             const config = parseWorkflowConfig(workflow.config);
-            if (!this.triggers.has(config.trigger.type))
+            if (!this.connectors.hasTrigger(config.trigger.type))
                 continue;
-            const trigger = this.triggers.get(config.trigger.type);
+            const trigger = this.connectors.getTrigger(config.trigger.type);
             if (!(trigger instanceof EventTrigger))
                 continue;
             // Hydrate lightweight payload → full context
@@ -399,6 +405,10 @@ export class WorkflowRuntime {
             if (!trigger.matchFilters(config.trigger.config, payload)) {
                 continue;
             }
+            // And the author's filter, before a run exists.
+            if (!matchesTriggerFilter(config.trigger.filter, payload, config.variables)) {
+                continue;
+            }
             const execId = await this.createAndEnqueue(workflow, {
                 type: event.type,
                 ...payload,
@@ -408,43 +418,80 @@ export class WorkflowRuntime {
         return executionIds;
     }
     /**
-     * Handle an incoming webhook request.
+     * Ingest a request to a workflow's webhook URL, `<baseUrl>/webhooks/<workflowId>`.
+     *
+     * The order is fixed, and the trigger's own code runs only after the sender is
+     * authenticated:
      *
-     * Looks up the workflow by webhook path, delegates to the trigger's
-     * `handleRequest()`, and enqueues an execution.
+     * 1. The workflow exists, is ACTIVE and uses a webhook trigger — else 404, the
+     *    same answer for each so workflow ids cannot be probed.
+     * 2. The trigger's credentials resolve — else 401, before any connector code runs.
+     * 3. The trigger's own `verify` accepts the request — else 401.
+     * 4. The body is parsed from the raw bytes — else 400.
+     * 5. The trigger turns the request into events and a reply.
+     * 6. Each event must pass the workflow's trigger filter, or it is dropped.
+     * 7. Survivors are enqueued before the reply is returned.
+     *
+     * Reasons for a rejection go to the log; responses stay generic.
      */
-    async handleWebhook(path, request) {
-        const webhookRecord = await this.persistence.getWebhookByPath(path);
-        if (!webhookRecord) {
-            return {
-                executionId: '',
-                httpResponse: { status: 404, body: { error: 'Webhook not found' } },
-            };
+    async handleWebhook(workflowId, request) {
+        const notFound = {
+            reply: { status: 404, body: { error: 'Webhook not found' } },
+            executionIds: [],
+        };
+        const unauthorized = {
+            reply: { status: 401, body: { error: 'Unauthorized' } },
+            executionIds: [],
+        };
+        const workflow = await this.persistence.getWorkflow(workflowId);
+        if (!workflow || workflow.status !== 'ACTIVE')
+            return notFound;
+        const config = parseWorkflowConfig(workflow.config);
+        const trigger = this.connectors.findTrigger(config.trigger.type)?.trigger;
+        if (!(trigger instanceof WebhookTrigger))
+            return notFound;
+        const attributes = workflow.attributes;
+        const triggerConfig = config.trigger.config;
+        let ctx;
+        try {
+            const credentials = await this.credentialResolver.resolve(attributes, trigger, triggerConfig);
+            ctx = { credentials, attributes, baseUrl: this.baseUrl };
         }
-        const workflow = await this.persistence.getWorkflow(webhookRecord.workflowId);
-        if (!workflow || workflow.status !== 'ACTIVE') {
-            return {
-                executionId: '',
-                httpResponse: { status: 404, body: { error: 'Workflow not active' } },
-            };
+        catch (err) {
+            // Fail closed: verification never runs without the credentials it needs.
+            this.log.warn(`webhook ${workflowId}: rejected, ${messageOf(err)}`);
+            return unauthorized;
         }
-        const config = parseWorkflowConfig(workflow.config);
-        const trigger = this.triggers.get(config.trigger.type);
-        if (!(trigger instanceof WebhookTrigger)) {
-            return {
-                executionId: '',
-                httpResponse: {
-                    status: 400,
-                    body: { error: 'Workflow does not use a webhook trigger' },
-                },
-            };
+        let verified = false;
+        try {
+            verified = await trigger.verify(request, triggerConfig, ctx);
         }
-        const { triggerData, httpResponse } = await trigger.handleRequest(request, config.trigger.config);
-        const execId = await this.createAndEnqueue(workflow, {
-            type: config.trigger.type,
-            ...triggerData,
-        }, { publicTrigger: true });
-        return { executionId: execId, httpResponse };
+        catch (err) {
+            this.log.warn(`webhook ${workflowId}: verification threw: ${messageOf(err)}`);
+        }
+        if (!verified) {
+            this.log.warn(`webhook ${workflowId}: rejected by ${trigger.type} verification`);
+            return unauthorized;
+        }
+        let body;
+        try {
+            body = parseInboundBody(request.rawBody, headerValue(request.headers, 'content-type'));
+        }
+        catch (err) {
+            this.log.warn(`webhook ${workflowId}: rejected, ${messageOf(err)}`);
+            return { reply: { status: 400, body: { error: 'Malformed request body' } }, executionIds: [] };
+        }
+        const translation = await trigger.handleRequest({ ...request, body }, triggerConfig, ctx);
+        const executionIds = [];
+        for (const event of translation.events) {
+            if (!matchesTriggerFilter(config.trigger.filter, event.payload, config.variables))
+                continue;
+            executionIds.push(await this.createAndEnqueue(workflow, { type: event.type, ...event.payload }, { publicTrigger: true }));
+        }
+        return {
+            reply: translation.reply ?? { status: 200, body: { ok: true } },
+            executionIds,
+        };
     }
     /**
      * Handle an incoming wait-callback at `POST /wait/callback/<secret>/<executionId>`.
@@ -524,91 +571,67 @@ export class WorkflowRuntime {
         return this.createAndEnqueue(workflow, triggerPayload);
     }
     /**
-     * Fire a workflow through the unauthenticated Webhook V2 API.
+     * Start a workflow from the API trigger route.
+     *
+     * No caller reaches the SDK here: the route has no session, and the SDK does
+     * not authorize whoever calls it. A host that exposes the route guards it
+     * itself, for example with an API key. The workflow must use an API trigger,
+     * and the payload must satisfy its input schema.
      *
-     * This intentionally bypasses caller authorization because the host exposes
-     * the route publicly. The workflow itself must opt in by using WEBHOOK_V2,
-     * and the execution is marked as public so privileged steps can enforce their
-     * own public-trigger restrictions.
+     * Runs are marked as public triggers, so privileged steps refuse them.
      */
-    async triggerWebhookV2Public(workflowId, payload) {
-        const workflow = await this.persistence.getWorkflow(workflowId);
-        if (!workflow) {
-            throw new Error(`Workflow ${workflowId} not found`);
-        }
-        const config = parseWorkflowConfig(workflow.config);
-        if (config.trigger.type !== 'WEBHOOK_V2') {
-            throw new Error(`Workflow ${workflowId} does not use a WEBHOOK_V2 trigger`);
-        }
-        const triggerCfg = (config.trigger.config ?? {});
-        const inputSchema = triggerCfg['inputSchema'];
-        const webhookV2InputSchema = inputSchema && Array.isArray(inputSchema['required'])
+    async triggerViaApi(workflowId, payload) {
+        const { workflow, config } = await this.apiTriggerWorkflow(workflowId);
+        const inputSchema = inputSchemaOf(config);
+        // Uploaded documents are optional on this route even when the schema lists
+        // them as required.
+        const apiInputSchema = inputSchema && Array.isArray(inputSchema['required'])
             ? {
                 ...inputSchema,
                 required: inputSchema['required'].filter((field) => field !== 'documents'),
             }
             : inputSchema;
-        const errors = validateTriggerPayload(webhookV2InputSchema, payload);
+        const errors = validateTriggerPayload(apiInputSchema, payload);
         if (errors.length > 0) {
             throw new Error(`Invalid trigger payload: ${errors.map((e) => e.message).join('; ')}`);
         }
-        return this.createAndEnqueue(workflow, {
-            type: config.trigger.type,
-            ...payload,
-        }, { publicTrigger: true });
+        return this.createAndEnqueue(workflow, { type: config.trigger.type, ...payload }, { publicTrigger: true });
     }
     /**
-     * Return the configured trigger input schema for routes that need to translate
-     * transport-level payloads before calling `triggerManual()`.
+     * What the API trigger route needs before it builds a payload: the trigger's
+     * input schema, and the workflow's scope for storing uploaded files. Checked
+     * the same way as {@link triggerViaApi}.
      */
-    async getWorkflowTriggerInputSchema(ctx, workflowId) {
-        const workflow = await this.persistence.getWorkflow(workflowId);
-        if (!workflow) {
-            throw new Error(`Workflow ${workflowId} not found`);
-        }
-        await this.require(ctx, 'workflow:run', this.workflowRef(workflow));
-        const config = parseWorkflowConfig(workflow.config);
-        const triggerCfg = (config.trigger.config ?? {});
-        const inputSchema = triggerCfg['inputSchema'];
-        return inputSchema && typeof inputSchema === 'object' && !Array.isArray(inputSchema)
-            ? inputSchema
-            : undefined;
+    async getApiTriggerTarget(workflowId) {
+        const { workflow, config } = await this.apiTriggerWorkflow(workflowId);
+        return {
+            inputSchema: inputSchemaOf(config),
+            storageScope: workflow.attributes,
+        };
     }
-    /**
-     * Return trigger input schema for public transport routes.
-     *
-     * Unlike getWorkflowTriggerInputSchema(), this does not authorize a caller;
-     * it only verifies the workflow exists and opted into the expected public
-     * trigger type.
-     */
-    async getWorkflowTriggerInputSchemaPublic(workflowId, expectedTriggerType) {
+    /** The workflow exists and uses an API trigger. */
+    async apiTriggerWorkflow(workflowId) {
         const workflow = await this.persistence.getWorkflow(workflowId);
-        if (!workflow) {
-            throw new Error(`Workflow ${workflowId} not found`);
-        }
+        if (!workflow)
+            throw new ResourceNotFoundError('Workflow', workflowId);
         const config = parseWorkflowConfig(workflow.config);
-        if (config.trigger.type !== expectedTriggerType) {
-            throw new Error(`Workflow ${workflowId} does not use a ${expectedTriggerType} trigger`);
+        const trigger = this.connectors.findTrigger(config.trigger.type)?.trigger;
+        if (!(trigger instanceof ApiTrigger)) {
+            throw new Error(`Workflow ${workflowId} does not use an API trigger`);
         }
-        const triggerCfg = (config.trigger.config ?? {});
-        const inputSchema = triggerCfg['inputSchema'];
-        return inputSchema && typeof inputSchema === 'object' && !Array.isArray(inputSchema)
-            ? inputSchema
-            : undefined;
+        return { workflow, config };
     }
     /**
-     * Return the workflow-owned storage scope for public transport routes.
+     * Return the configured trigger input schema for routes that need to translate
+     * transport-level payloads before calling `triggerManual()`.
      */
-    async getWorkflowStorageScopePublic(workflowId, expectedTriggerType) {
+    async getWorkflowTriggerInputSchema(ctx, workflowId) {
         const workflow = await this.persistence.getWorkflow(workflowId);
         if (!workflow) {
             throw new Error(`Workflow ${workflowId} not found`);
         }
-        const config = parseWorkflowConfig(workflow.config);
-        if (config.trigger.type !== expectedTriggerType) {
-            throw new Error(`Workflow ${workflowId} does not use a ${expectedTriggerType} trigger`);
-        }
-        return workflow.attributes;
+        await this.require(ctx, 'workflow:run', this.workflowRef(workflow));
+        return inputSchemaOf(parseWorkflowConfig(workflow.config));
     }
     /**
      * Resume a paused execution. Guards `execution:approve`, then does the work.
@@ -766,8 +789,10 @@ export class WorkflowRuntime {
                 // Internal post-create activation — already authorized by the create above.
                 await this.activateInternal(record);
             }
-            catch {
-                // Non-fatal — workflow is created but trigger may need manual activation
+            catch (err) {
+                // Non-fatal — the workflow is created, and its trigger can be activated
+                // once whatever failed is fixed.
+                this.log.warn(`created workflow ${id} but could not activate its trigger: ${messageOf(err)}`);
             }
         }
         this.log.info(`created workflow ${id} (${input.name})`);
@@ -1208,9 +1233,9 @@ export class WorkflowRuntime {
         if (!workflow || workflow.status !== 'ACTIVE')
             return null;
         const config = parseWorkflowConfig(workflow.config);
-        if (!this.triggers.has(config.trigger.type))
+        if (!this.connectors.hasTrigger(config.trigger.type))
             return null;
-        const trigger = this.triggers.get(config.trigger.type);
+        const trigger = this.connectors.getTrigger(config.trigger.type);
         if (!(trigger instanceof CronTrigger))
             return null;
         const metadata = JSON.parse(workflow.metadata ?? '{}');