actoviq-agent-sdk 0.4.6 → 0.4.7

package/dist/src/workflow-v2/localProcessChild.js

@@ -0,0 +1,305 @@
+/**
+ * The function is stringified and launched with `node --eval`. It must remain
+ * self-contained: no references to module-scope values or imports.
+ */
+async function isolatedWorkflowChildMain() {
+    const vm = process.getBuiltinModule('node:vm');
+    const readline = process.getBuiltinModule('node:readline');
+    const hardMaxMessageBytes = 16 * 1_024 * 1_024;
+    let maxMessageBytes = hardMaxMessageBytes;
+    let maxProtocolMessages = 1_024;
+    let sentMessages = 0;
+    let receivedMessages = 0;
+    let nextCapabilityId = 1;
+    let executeStarted = false;
+    let closing = false;
+    const pendingCapabilities = new Map();
+    function byteLength(value) {
+        return Buffer.byteLength(value, 'utf8');
+    }
+    function protocolError(message, code = 'WORKFLOW_PROTOCOL_ERROR') {
+        const error = new Error(message);
+        error.code = code;
+        return error;
+    }
+    function send(message) {
+        sentMessages += 1;
+        if (sentMessages + receivedMessages > maxProtocolMessages) {
+            throw protocolError('Workflow exceeded its protocol message count.', 'WORKFLOW_MESSAGE_LIMIT_EXCEEDED');
+        }
+        const json = JSON.stringify(message);
+        if (byteLength(json) > maxMessageBytes) {
+            throw protocolError('Workflow protocol message exceeded its byte limit.', 'WORKFLOW_MESSAGE_LIMIT_EXCEEDED');
+        }
+        process.stdout.write(`${json}\n`);
+    }
+    function sanitizeMessage(error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return message.slice(0, 2_048);
+    }
+    function errorCode(error) {
+        if (error && typeof error === 'object' && 'code' in error) {
+            const code = String(error.code);
+            if (code === 'ERR_SCRIPT_EXECUTION_TIMEOUT')
+                return 'WORKFLOW_TIMEOUT';
+            if (code.startsWith('WORKFLOW_'))
+                return code;
+        }
+        return 'WORKFLOW_EXECUTION_FAILED';
+    }
+    function closeAfterResponse() {
+        if (closing)
+            return;
+        closing = true;
+        setImmediate(() => {
+            for (const pending of pendingCapabilities.values()) {
+                pending.reject(protocolError('Workflow child closed before capability response.'));
+            }
+            pendingCapabilities.clear();
+            input.close();
+            process.stdin.pause();
+        });
+    }
+    function safeJsonStringify(value) {
+        const json = JSON.stringify(value === undefined ? null : value);
+        if (typeof json !== 'string') {
+            throw protocolError('Workflow value must be JSON serializable.', 'WORKFLOW_EXECUTION_FAILED');
+        }
+        if (byteLength(json) > maxMessageBytes) {
+            throw protocolError('Workflow capability value exceeded its message limit.', 'WORKFLOW_MESSAGE_LIMIT_EXCEEDED');
+        }
+        return json;
+    }
+    async function callCapability(name, inputJson) {
+        if (typeof inputJson !== 'string' || byteLength(inputJson) > maxMessageBytes) {
+            throw protocolError('Workflow capability input exceeded its message limit.', 'WORKFLOW_MESSAGE_LIMIT_EXCEEDED');
+        }
+        const value = JSON.parse(inputJson);
+        const id = `capability:${nextCapabilityId++}`;
+        const result = await new Promise((resolve, reject) => {
+            pendingCapabilities.set(id, { resolve, reject });
+            try {
+                send({
+                    jsonrpc: '2.0',
+                    id,
+                    method: 'capability.call',
+                    params: { name, input: value },
+                });
+            }
+            catch (error) {
+                pendingCapabilities.delete(id);
+                reject(error instanceof Error ? error : new Error(String(error)));
+            }
+        });
+        return safeJsonStringify(result);
+    }
+    function validateExecuteParams(value) {
+        if (!value || typeof value !== 'object') {
+            throw protocolError('workflow.execute params must be an object.');
+        }
+        const params = value;
+        if (typeof params.source !== 'string' || params.source.trim().length === 0) {
+            throw protocolError('Workflow source must be a non-empty string.');
+        }
+        if (!Array.isArray(params.capabilities)
+            || !params.capabilities.every(name => typeof name === 'string')) {
+            throw protocolError('Workflow capabilities must be a string array.');
+        }
+        for (const field of [
+            'vmTimeoutMs',
+            'maxOutputBytes',
+            'maxMessageBytes',
+            'maxProtocolMessages',
+        ]) {
+            if (!Number.isSafeInteger(params[field]) || Number(params[field]) <= 0) {
+                throw protocolError(`${field} must be a positive safe integer.`);
+            }
+        }
+        if (Number(params.maxMessageBytes) > hardMaxMessageBytes) {
+            throw protocolError('maxMessageBytes exceeds the hard child limit.');
+        }
+        return params;
+    }
+    async function execute(paramsValue) {
+        const params = validateExecuteParams(paramsValue);
+        maxMessageBytes = params.maxMessageBytes;
+        maxProtocolMessages = params.maxProtocolMessages;
+        const contextObject = Object.create(null);
+        Object.defineProperties(contextObject, {
+            __actoviqInputJson: {
+                value: safeJsonStringify(params.input),
+                configurable: true,
+                writable: false,
+            },
+            __actoviqCapabilityNamesJson: {
+                value: safeJsonStringify(params.capabilities),
+                configurable: true,
+                writable: false,
+            },
+            __actoviqHostCapabilityCall: {
+                value: callCapability,
+                configurable: true,
+                writable: false,
+            },
+        });
+        const context = vm.createContext(contextObject, {
+            name: 'actoviq-local-isolated-workflow',
+            codeGeneration: { strings: false, wasm: false },
+        });
+        const nativeWorkflowContext = new vm.Script([
+            '(() => {',
+            '  const __hostCall = globalThis.__actoviqHostCapabilityCall;',
+            '  const __capabilityNames = JSON.parse(globalThis.__actoviqCapabilityNamesJson);',
+            '  const __capabilities = Object.create(null);',
+            '  for (const __name of __capabilityNames) {',
+            '    Object.defineProperty(__capabilities, __name, {',
+            '      enumerable: true,',
+            '      configurable: false,',
+            '      writable: false,',
+            '      value: async (__input = null) => {',
+            '        const __inputJson = JSON.stringify(__input);',
+            '        const __outputJson = await __hostCall(__name, __inputJson);',
+            '        return JSON.parse(__outputJson);',
+            '      },',
+            '    });',
+            '  }',
+            '  return Object.freeze({',
+            '    input: JSON.parse(globalThis.__actoviqInputJson),',
+            '    capabilities: Object.freeze(__capabilities),',
+            '  });',
+            '})()',
+        ].join('\n'), {
+            filename: 'isolated-workflow-context.js',
+        }).runInContext(context, { timeout: params.vmTimeoutMs });
+        delete contextObject.__actoviqInputJson;
+        delete contextObject.__actoviqCapabilityNamesJson;
+        delete contextObject.__actoviqHostCapabilityCall;
+        Object.defineProperty(contextObject, '__actoviqContext', {
+            value: nativeWorkflowContext,
+            configurable: false,
+            writable: false,
+        });
+        const program = new vm.Script([
+            '"use strict";',
+            `const __actoviqProgram = (${params.source});`,
+            'if (typeof __actoviqProgram !== "function") {',
+            '  throw new TypeError("Workflow source must evaluate to a function.");',
+            '}',
+            'Promise.resolve(__actoviqProgram(globalThis.__actoviqContext));',
+        ].join('\n'), {
+            filename: 'isolated-workflow.js',
+        });
+        const pendingResult = program.runInContext(context, {
+            timeout: params.vmTimeoutMs,
+        });
+        const rawResult = await pendingResult;
+        Object.defineProperty(contextObject, '__actoviqResult', {
+            value: rawResult,
+            configurable: true,
+        });
+        let serialized;
+        try {
+            serialized = new vm.Script('JSON.stringify(globalThis.__actoviqResult)', { filename: 'isolated-workflow-output.js' }).runInContext(context, { timeout: params.vmTimeoutMs });
+        }
+        finally {
+            delete contextObject.__actoviqResult;
+        }
+        if (typeof serialized !== 'string') {
+            throw protocolError('Workflow output must be a JSON value.', 'WORKFLOW_EXECUTION_FAILED');
+        }
+        if (byteLength(serialized) > params.maxOutputBytes) {
+            throw protocolError('Workflow output exceeded its byte limit.', 'WORKFLOW_OUTPUT_LIMIT_EXCEEDED');
+        }
+        return JSON.parse(serialized);
+    }
+    async function handleMessage(message) {
+        if (message.jsonrpc !== '2.0') {
+            throw protocolError('Workflow child requires JSON-RPC 2.0 messages.');
+        }
+        if (message.method === 'workflow.execute') {
+            if (executeStarted) {
+                throw protocolError('Workflow child accepts exactly one execute request.');
+            }
+            executeStarted = true;
+            const id = message.id;
+            try {
+                const result = await execute(message.params);
+                send({ jsonrpc: '2.0', id, result });
+            }
+            catch (error) {
+                try {
+                    send({
+                        jsonrpc: '2.0',
+                        id,
+                        error: {
+                            code: errorCode(error),
+                            message: sanitizeMessage(error),
+                        },
+                    });
+                }
+                catch (sendError) {
+                    process.stderr.write(sanitizeMessage(sendError));
+                    process.exitCode = 1;
+                }
+            }
+            finally {
+                closeAfterResponse();
+            }
+            return;
+        }
+        const id = message.id;
+        const pending = pendingCapabilities.get(id);
+        if (!pending) {
+            throw protocolError(`Unexpected JSON-RPC response id: ${String(id)}.`);
+        }
+        pendingCapabilities.delete(id);
+        if (message.error !== undefined) {
+            const remote = message.error;
+            pending.reject(protocolError(typeof remote.message === 'string' ? remote.message : 'Capability call failed.', typeof remote.code === 'string' ? remote.code : 'WORKFLOW_CAPABILITY_FAILED'));
+        }
+        else {
+            pending.resolve(message.result);
+        }
+    }
+    const input = readline.createInterface({
+        input: process.stdin,
+        crlfDelay: Infinity,
+        terminal: false,
+    });
+    input.on('line', line => {
+        if (closing)
+            return;
+        if (byteLength(line) > maxMessageBytes) {
+            process.stderr.write('Workflow input message exceeded its byte limit.');
+            process.exitCode = 1;
+            closeAfterResponse();
+            return;
+        }
+        receivedMessages += 1;
+        if (receivedMessages + sentMessages > maxProtocolMessages) {
+            process.stderr.write('Workflow input exceeded its protocol message count.');
+            process.exitCode = 1;
+            closeAfterResponse();
+            return;
+        }
+        let message;
+        try {
+            message = JSON.parse(line);
+        }
+        catch {
+            process.stderr.write('Workflow child received invalid JSON.');
+            process.exitCode = 1;
+            closeAfterResponse();
+            return;
+        }
+        void handleMessage(message).catch(error => {
+            process.stderr.write(sanitizeMessage(error));
+            process.exitCode = 1;
+            closeAfterResponse();
+        });
+    });
+}
+export function createLocalProcessChildSource() {
+    return `void (${isolatedWorkflowChildMain.toString()})();`;
+}
+//# sourceMappingURL=localProcessChild.js.map

package/dist/src/workflow-v2/localProcessChild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localProcessChild.js","sourceRoot":"","sources":["../../../src/workflow-v2/localProcessChild.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,KAAK,UAAU,yBAAyB;IACtC,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAA6B,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,eAAe,CAAmC,CAAC;IAqB7F,MAAM,mBAAmB,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC;IAC/C,IAAI,eAAe,GAAG,mBAAmB,CAAC;IAC1C,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAGhC,CAAC;IAEJ,SAAS,UAAU,CAAC,KAAa;QAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,SAAS,aAAa,CAAC,OAAe,EAAE,IAAI,GAAG,yBAAyB;QACtE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAA8B,CAAC;QAC9D,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,IAAI,CAAC,OAAmB;QAC/B,YAAY,IAAI,CAAC,CAAC;QAClB,IAAI,YAAY,GAAG,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;YAC1D,MAAM,aAAa,CACjB,+CAA+C,EAC/C,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,EAAE,CAAC;YACvC,MAAM,aAAa,CACjB,oDAAoD,EACpD,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,SAAS,eAAe,CAAC,KAAc;QACrC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,SAAS,SAAS,CAAC,KAAc;QAC/B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,IAAI,KAAK,8BAA8B;gBAAE,OAAO,kBAAkB,CAAC;YACvE,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;QACD,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,SAAS,kBAAkB;QACzB,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,YAAY,CAAC,GAAG,EAAE;YAChB,KAAK,MAAM,OAAO,IAAI,mBAAmB,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnD,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,mDAAmD,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,iBAAiB,CAAC,KAAc;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,aAAa,CACjB,2CAA2C,EAC3C,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,EAAE,CAAC;YACvC,MAAM,aAAa,CACjB,uDAAuD,EACvD,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,SAAiB;QAC3D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,SAAS,CAAC,GAAG,eAAe,EAAE,CAAC;YAC7E,MAAM,aAAa,CACjB,uDAAuD,EACvD,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;QAC/C,MAAM,EAAE,GAAG,cAAc,gBAAgB,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,CAAC;oBACH,OAAO,EAAE,KAAK;oBACd,EAAE;oBACF,MAAM,EAAE,iBAAiB;oBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE;iBAC/B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,SAAS,qBAAqB,CAAC,KAAc;QAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,aAAa,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG,KAA+B,CAAC;QAC/C,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,MAAM,aAAa,CAAC,6CAA6C,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;eAClC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAClE,MAAM,aAAa,CAAC,+CAA+C,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,MAAM,KAAK,IAAI;YAClB,aAAa;YACb,gBAAgB;YAChB,iBAAiB;YACjB,qBAAqB;SACb,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,MAAM,aAAa,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,mBAAmB,EAAE,CAAC;YACzD,MAAM,aAAa,CAAC,+CAA+C,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,MAAuB,CAAC;IACjC,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,WAAoB;QACzC,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAClD,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzC,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;QAEjD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QACrE,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE;YACrC,kBAAkB,EAAE;gBAClB,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC;gBACtC,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,KAAK;aAChB;YACD,4BAA4B,EAAE;gBAC5B,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC7C,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,KAAK;aAChB;YACD,2BAA2B,EAAE;gBAC3B,KAAK,EAAE,cAAc;gBACrB,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,KAAK;aAChB;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE;YAC9C,IAAI,EAAE,iCAAiC;YACvC,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,qBAAqB,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC;YAC1C,UAAU;YACV,8DAA8D;YAC9D,kFAAkF;YAClF,+CAA+C;YAC/C,6CAA6C;YAC7C,qDAAqD;YACrD,yBAAyB;YACzB,4BAA4B;YAC5B,wBAAwB;YACxB,0CAA0C;YAC1C,sDAAsD;YACtD,qEAAqE;YACrE,0CAA0C;YAC1C,UAAU;YACV,SAAS;YACT,KAAK;YACL,0BAA0B;YAC1B,uDAAuD;YACvD,kDAAkD;YAClD,OAAO;YACP,MAAM;SACP,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACZ,QAAQ,EAAE,8BAA8B;SACzC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,OAAO,aAAa,CAAC,kBAAkB,CAAC;QACxC,OAAO,aAAa,CAAC,4BAA4B,CAAC;QAClD,OAAO,aAAa,CAAC,2BAA2B,CAAC;QACjD,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,kBAAkB,EAAE;YACvD,KAAK,EAAE,qBAAqB;YAC5B,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC;YAC5B,eAAe;YACf,6BAA6B,MAAM,CAAC,MAAM,IAAI;YAC9C,+CAA+C;YAC/C,wEAAwE;YACxE,GAAG;YACH,iEAAiE;SAClE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACZ,QAAQ,EAAE,sBAAsB;SACjC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE;YAClD,OAAO,EAAE,MAAM,CAAC,WAAW;SAC5B,CAAyB,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC;QAEtC,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,iBAAiB,EAAE;YACtD,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,EAAE,CAAC,MAAM,CACxB,4CAA4C,EAC5C,EAAE,QAAQ,EAAE,6BAA6B,EAAE,CAC5C,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,OAAO,aAAa,CAAC,eAAe,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,aAAa,CACjB,uCAAuC,EACvC,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YACnD,MAAM,aAAa,CACjB,0CAA0C,EAC1C,gCAAgC,CACjC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,OAAmB;QAC9C,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,aAAa,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC1C,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,aAAa,CAAC,qDAAqD,CAAC,CAAC;YAC7E,CAAC;YACD,cAAc,GAAG,IAAI,CAAC;YACtB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAW,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,IAAI,CAAC;wBACH,OAAO,EAAE,KAAK;wBACd,EAAE;wBACF,KAAK,EAAE;4BACL,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC;4BACtB,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC;yBAChC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;oBACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,kBAAkB,EAAE,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAW,CAAC;QAC/B,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,oCAAoC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,OAAO,CAAC,KAA8C,CAAC;YACtE,OAAO,CAAC,MAAM,CAAC,aAAa,CAC1B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,EAC/E,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,CAC7E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC;QACrC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;QACtB,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,EAAE,CAAC;YACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACxE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,gBAAgB,IAAI,CAAC,CAAC;QACtB,IAAI,gBAAgB,GAAG,YAAY,GAAG,mBAAmB,EAAE,CAAC;YAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC9D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,kBAAkB,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO,SAAS,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC;AAC7D,CAAC"}

package/dist/src/workflow-v2/router.d.ts

@@ -0,0 +1,10 @@
+import type { WorkflowExecutionRequest, WorkflowExecutionResult, WorkflowExecutorRouterOptions } from './types.js';
+/** Selects an executor strictly from the request's explicit trust tier. */
+export declare class WorkflowExecutorRouter {
+    private readonly trustedExecutor;
+    private readonly sandboxExecutor;
+    constructor(options?: WorkflowExecutorRouterOptions);
+    execute(request: WorkflowExecutionRequest): Promise<WorkflowExecutionResult>;
+}
+export declare function executeWorkflow(request: WorkflowExecutionRequest, options?: WorkflowExecutorRouterOptions): Promise<WorkflowExecutionResult>;
+//# sourceMappingURL=router.d.ts.map

package/dist/src/workflow-v2/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/workflow-v2/router.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,YAAY,CAAC;AAEpB,2EAA2E;AAC3E,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAErB,OAAO,GAAE,6BAAkC;IAMvD,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAc7E;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,wBAAwB,EACjC,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,uBAAuB,CAAC,CAElC"}

package/dist/src/workflow-v2/router.js

@@ -0,0 +1,28 @@
+import { UntrustedWorkflowRejectedError, WorkflowConfigurationError, } from './errors.js';
+import { TrustedCompatibilityWorkflowExecutor } from './trustedCompatibilityExecutor.js';
+/** Selects an executor strictly from the request's explicit trust tier. */
+export class WorkflowExecutorRouter {
+    trustedExecutor;
+    sandboxExecutor;
+    constructor(options = {}) {
+        this.trustedExecutor = options.trustedExecutor
+            ?? new TrustedCompatibilityWorkflowExecutor();
+        this.sandboxExecutor = options.sandboxExecutor;
+    }
+    execute(request) {
+        if (request.trust === 'trusted') {
+            return this.trustedExecutor.execute(request);
+        }
+        if (request.trust === 'untrusted') {
+            if (!this.sandboxExecutor) {
+                return Promise.reject(new UntrustedWorkflowRejectedError());
+            }
+            return this.sandboxExecutor.execute(request);
+        }
+        return Promise.reject(new WorkflowConfigurationError(`Unknown workflow trust tier: ${String(request.trust)}.`));
+    }
+}
+export function executeWorkflow(request, options = {}) {
+    return new WorkflowExecutorRouter(options).execute(request);
+}
+//# sourceMappingURL=router.js.map

package/dist/src/workflow-v2/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/workflow-v2/router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oCAAoC,EAAE,MAAM,mCAAmC,CAAC;AAOzF,2EAA2E;AAC3E,MAAM,OAAO,sBAAsB;IAChB,eAAe,CAAC;IAChB,eAAe,CAAC;IAEjC,YAAY,UAAyC,EAAE;QACrD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe;eACzC,IAAI,oCAAoC,EAAE,CAAC;QAChD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IACjD,CAAC;IAED,OAAO,CAAC,OAAiC;QACvC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,8BAA8B,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAClD,gCAAgC,MAAM,CAAE,OAA+B,CAAC,KAAK,CAAC,GAAG,CAClF,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAC7B,OAAiC,EACjC,UAAyC,EAAE;IAE3C,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC"}

package/dist/src/workflow-v2/trustedCompatibilityExecutor.d.ts

@@ -0,0 +1,17 @@
+import type { TrustedWorkflowExecutionRequest, TrustedWorkflowExecutor, WorkflowCapabilityMap, WorkflowExecutionResult, WorkflowExecutorLimits } from './types.js';
+export interface TrustedCompatibilityWorkflowExecutorOptions extends WorkflowExecutorLimits {
+    readonly capabilities?: WorkflowCapabilityMap;
+}
+/**
+ * In-process compatibility executor for explicitly trusted source only.
+ * node:vm provides a separate context but is not a security boundary. Finite
+ * VM and wall-clock deadlines still prevent ordinary runaway trusted scripts.
+ */
+export declare class TrustedCompatibilityWorkflowExecutor implements TrustedWorkflowExecutor {
+    readonly kind = "trusted-node-vm-compatibility";
+    private readonly limits;
+    private readonly capabilities;
+    constructor(options?: TrustedCompatibilityWorkflowExecutorOptions);
+    execute(request: TrustedWorkflowExecutionRequest): Promise<WorkflowExecutionResult>;
+}
+//# sourceMappingURL=trustedCompatibilityExecutor.d.ts.map

package/dist/src/workflow-v2/trustedCompatibilityExecutor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustedCompatibilityExecutor.d.ts","sourceRoot":"","sources":["../../../src/workflow-v2/trustedCompatibilityExecutor.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAEV,+BAA+B,EAC/B,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,2CAA4C,SAAQ,sBAAsB;IACzF,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED;;;;GAIG;AACH,qBAAa,oCAAqC,YAAW,uBAAuB;IAClF,QAAQ,CAAC,IAAI,mCAAmC;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAElB,OAAO,GAAE,2CAAgD;IAK/D,OAAO,CACX,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,uBAAuB,CAAC;CAiJpC"}

package/dist/src/workflow-v2/trustedCompatibilityExecutor.js

@@ -0,0 +1,159 @@
+import { Buffer } from 'node:buffer';
+import vm from 'node:vm';
+import { withWorkflowBoundary } from './boundary.js';
+import { normalizeCapabilityMap, resolveAllowedCapabilities, } from './capabilities.js';
+import { WorkflowExecutionError, WorkflowOutputLimitError, WorkflowTimeoutError, WorkflowTrustTierError, } from './errors.js';
+import { assertJsonByteLimit, cloneJsonValue } from './json.js';
+import { resolveRunTimeout, resolveWorkflowExecutorLimits, } from './limits.js';
+/**
+ * In-process compatibility executor for explicitly trusted source only.
+ * node:vm provides a separate context but is not a security boundary. Finite
+ * VM and wall-clock deadlines still prevent ordinary runaway trusted scripts.
+ */
+export class TrustedCompatibilityWorkflowExecutor {
+    kind = 'trusted-node-vm-compatibility';
+    limits;
+    capabilities;
+    constructor(options = {}) {
+        this.limits = resolveWorkflowExecutorLimits(options);
+        this.capabilities = normalizeCapabilityMap(options.capabilities);
+    }
+    async execute(request) {
+        if (request.trust !== 'trusted') {
+            throw new WorkflowTrustTierError('trusted', request.trust);
+        }
+        if (typeof request.source !== 'string' || request.source.trim().length === 0) {
+            throw new WorkflowExecutionError('Workflow source must be a non-empty string.');
+        }
+        const timeoutMs = resolveRunTimeout(request.timeoutMs, this.limits.timeoutMs);
+        const allowed = resolveAllowedCapabilities(request.capabilities, this.capabilities);
+        const input = cloneJsonValue(request.input ?? null, this.limits.maxMessageBytes);
+        const sourceBytes = Buffer.byteLength(request.source, 'utf8');
+        if (sourceBytes > this.limits.maxMessageBytes) {
+            throw new WorkflowExecutionError(`Workflow source exceeds the ${this.limits.maxMessageBytes}-byte message limit.`);
+        }
+        const startedAt = Date.now();
+        const expiresAt = startedAt + timeoutMs;
+        let capabilityCalls = 0;
+        const value = await withWorkflowBoundary(timeoutMs, request.signal, async (signal) => {
+            const contextObject = Object.create(null);
+            const capabilityObject = Object.create(null);
+            for (const name of allowed) {
+                const handler = this.capabilities.get(name);
+                if (!handler)
+                    continue;
+                Object.defineProperty(capabilityObject, name, {
+                    enumerable: true,
+                    configurable: false,
+                    writable: false,
+                    value: async (capabilityInput = null) => {
+                        signal.throwIfAborted();
+                        capabilityCalls += 1;
+                        const safeInput = cloneJsonValue(capabilityInput, this.limits.maxMessageBytes);
+                        const output = await handler(safeInput, {
+                            name,
+                            trust: 'trusted',
+                            signal,
+                        });
+                        signal.throwIfAborted();
+                        return cloneJsonValue(output, this.limits.maxMessageBytes);
+                    },
+                });
+            }
+            Object.freeze(capabilityObject);
+            Object.defineProperties(contextObject, {
+                __actoviqInput: { value: input, configurable: false, writable: false },
+                __actoviqCapabilities: {
+                    value: capabilityObject,
+                    configurable: false,
+                    writable: false,
+                },
+                __actoviqSignal: { value: signal, configurable: false, writable: false },
+            });
+            const context = vm.createContext(contextObject, {
+                name: 'actoviq-trusted-workflow-compatibility',
+            });
+            const program = new vm.Script([
+                '"use strict";',
+                `const __actoviqProgram = (${request.source});`,
+                'if (typeof __actoviqProgram !== "function") {',
+                '  throw new TypeError("Workflow source must evaluate to a function.");',
+                '}',
+                'Promise.resolve(__actoviqProgram({',
+                '  input: globalThis.__actoviqInput,',
+                '  capabilities: globalThis.__actoviqCapabilities,',
+                '  signal: globalThis.__actoviqSignal,',
+                '}));',
+            ].join('\n'), { filename: 'trusted-workflow.js' });
+            let pending;
+            try {
+                pending = program.runInContext(context, {
+                    timeout: Math.max(1, expiresAt - Date.now()),
+                });
+            }
+            catch (error) {
+                if (isVmTimeout(error)) {
+                    throw new WorkflowTimeoutError(timeoutMs, { cause: error });
+                }
+                throw new WorkflowExecutionError(errorMessage(error), { cause: error });
+            }
+            let rawResult;
+            try {
+                rawResult = await pending;
+            }
+            catch (error) {
+                throw new WorkflowExecutionError(errorMessage(error), { cause: error });
+            }
+            signal.throwIfAborted();
+            Object.defineProperty(contextObject, '__actoviqResult', {
+                value: rawResult,
+                configurable: true,
+            });
+            let serialized;
+            try {
+                serialized = new vm.Script('JSON.stringify(globalThis.__actoviqResult)', { filename: 'trusted-workflow-output.js' }).runInContext(context, {
+                    timeout: Math.max(1, expiresAt - Date.now()),
+                });
+            }
+            catch (error) {
+                if (isVmTimeout(error)) {
+                    throw new WorkflowTimeoutError(timeoutMs, { cause: error });
+                }
+                throw new WorkflowExecutionError('Workflow output is not JSON serializable.', {
+                    cause: error,
+                });
+            }
+            finally {
+                delete contextObject.__actoviqResult;
+            }
+            if (typeof serialized !== 'string') {
+                throw new WorkflowExecutionError('Workflow output must be a JSON value.');
+            }
+            try {
+                assertJsonByteLimit(serialized, this.limits.maxOutputBytes, 'output');
+            }
+            catch (error) {
+                if (error instanceof WorkflowOutputLimitError)
+                    throw error;
+                throw new WorkflowExecutionError('Workflow output validation failed.', { cause: error });
+            }
+            return JSON.parse(serialized);
+        });
+        return Object.freeze({
+            value,
+            trust: 'trusted',
+            executor: this.kind,
+            durationMs: Date.now() - startedAt,
+            capabilityCalls,
+        });
+    }
+}
+function isVmTimeout(error) {
+    return error instanceof Error
+        && 'code' in error
+        && error.code === 'ERR_SCRIPT_EXECUTION_TIMEOUT';
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=trustedCompatibilityExecutor.js.map

package/dist/src/workflow-v2/trustedCompatibilityExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustedCompatibilityExecutor.js","sourceRoot":"","sources":["../../../src/workflow-v2/trustedCompatibilityExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,aAAa,CAAC;AAcrB;;;;GAIG;AACH,MAAM,OAAO,oCAAoC;IACtC,IAAI,GAAG,+BAA+B,CAAC;IAC/B,MAAM,CAAC;IACP,YAAY,CAAC;IAE9B,YAAY,UAAuD,EAAE;QACnE,IAAI,CAAC,MAAM,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAwC;QAExC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,sBAAsB,CAAC,6CAA6C,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC9C,MAAM,IAAI,sBAAsB,CAC9B,+BAA+B,IAAI,CAAC,MAAM,CAAC,eAAe,sBAAsB,CACjF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;QACxC,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACjF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;YACrE,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAG1C,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,MAAM,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAI,EAAE;oBAC5C,UAAU,EAAE,IAAI;oBAChB,YAAY,EAAE,KAAK;oBACnB,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,KAAK,EAAE,kBAA6B,IAAI,EAAsB,EAAE;wBACrE,MAAM,CAAC,cAAc,EAAE,CAAC;wBACxB,eAAe,IAAI,CAAC,CAAC;wBACrB,MAAM,SAAS,GAAG,cAAc,CAC9B,eAAe,EACf,IAAI,CAAC,MAAM,CAAC,eAAe,CAC5B,CAAC;wBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE;4BACtC,IAAI;4BACJ,KAAK,EAAE,SAAS;4BAChB,MAAM;yBACP,CAAC,CAAC;wBACH,MAAM,CAAC,cAAc,EAAE,CAAC;wBACxB,OAAO,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;oBAC7D,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAEhC,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE;gBACrC,cAAc,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACtE,qBAAqB,EAAE;oBACrB,KAAK,EAAE,gBAAgB;oBACvB,YAAY,EAAE,KAAK;oBACnB,QAAQ,EAAE,KAAK;iBAChB;gBACD,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;aACzE,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE;gBAC9C,IAAI,EAAE,wCAAwC;aAC/C,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC,MAAM,CAC3B;gBACE,eAAe;gBACf,6BAA6B,OAAO,CAAC,MAAM,IAAI;gBAC/C,+CAA+C;gBAC/C,wEAAwE;gBACxE,GAAG;gBACH,oCAAoC;gBACpC,qCAAqC;gBACrC,mDAAmD;gBACnD,uCAAuC;gBACvC,MAAM;aACP,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CACpC,CAAC;YAEF,IAAI,OAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE;oBACtC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;iBAC7C,CAAyB,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM,IAAI,sBAAsB,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,IAAI,SAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,OAAO,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,sBAAsB,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,CAAC,cAAc,EAAE,CAAC;YAExB,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,iBAAiB,EAAE;gBACtD,KAAK,EAAE,SAAS;gBAChB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,UAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,EAAE,CAAC,MAAM,CACxB,4CAA4C,EAC5C,EAAE,QAAQ,EAAE,4BAA4B,EAAE,CAC3C,CAAC,YAAY,CAAC,OAAO,EAAE;oBACtB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;iBAC7C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM,IAAI,sBAAsB,CAAC,2CAA2C,EAAE;oBAC5E,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,OAAO,aAAa,CAAC,eAAe,CAAC;YACvC,CAAC;YACD,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,sBAAsB,CAAC,uCAAuC,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC;gBACH,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,wBAAwB;oBAAE,MAAM,KAAK,CAAC;gBAC3D,MAAM,IAAI,sBAAsB,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAc,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK;YACL,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,eAAe;SAChB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK;WACxB,MAAM,IAAI,KAAK;WACf,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/src/workflow-v2/types.d.ts

@@ -0,0 +1,67 @@
+export type WorkflowTrustTier = 'trusted' | 'untrusted';
+export type JsonPrimitive = string | number | boolean | null;
+export type JsonValue = JsonPrimitive | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export interface WorkflowExecutionRequestBase {
+    /** Source must evaluate to `(context) => JsonValue | Promise<JsonValue>`. */
+    readonly source: string;
+    readonly input?: JsonValue;
+    /** Finite wall-clock deadline for this execution. */
+    readonly timeoutMs?: number;
+    readonly signal?: AbortSignal;
+    /** Per-run subset of executor capabilities exposed to the script. Default: none. */
+    readonly capabilities?: readonly string[];
+}
+export interface TrustedWorkflowExecutionRequest extends WorkflowExecutionRequestBase {
+    readonly trust: 'trusted';
+}
+export interface UntrustedWorkflowExecutionRequest extends WorkflowExecutionRequestBase {
+    readonly trust: 'untrusted';
+    /** Explicit cwd for the isolated child. It must already exist and be a directory. */
+    readonly workspaceDir: string;
+}
+export type WorkflowExecutionRequest = TrustedWorkflowExecutionRequest | UntrustedWorkflowExecutionRequest;
+export interface WorkflowExecutionResult {
+    readonly value: JsonValue;
+    readonly trust: WorkflowTrustTier;
+    readonly executor: string;
+    readonly durationMs: number;
+    readonly capabilityCalls: number;
+}
+export interface WorkflowCapabilityContext {
+    readonly name: string;
+    readonly trust: WorkflowTrustTier;
+    readonly signal: AbortSignal;
+    readonly workspaceDir?: string;
+}
+export type WorkflowCapabilityHandler = (input: JsonValue, context: WorkflowCapabilityContext) => JsonValue | PromiseLike<JsonValue>;
+export type WorkflowCapabilityMap = Readonly<Record<string, WorkflowCapabilityHandler>>;
+export interface TrustedWorkflowExecutor {
+    readonly kind: string;
+    execute(request: TrustedWorkflowExecutionRequest): Promise<WorkflowExecutionResult>;
+}
+/**
+ * Pluggable boundary for local-process, container, or remote isolation.
+ * Container and remote implementations can enforce stronger CPU, memory,
+ * filesystem, and network policy without changing the runtime contract.
+ */
+export interface SandboxWorkflowExecutor {
+    readonly kind: string;
+    readonly isolation: 'local-process' | 'container' | 'remote';
+    execute(request: UntrustedWorkflowExecutionRequest): Promise<WorkflowExecutionResult>;
+}
+export interface ExternalSandboxWorkflowExecutor extends SandboxWorkflowExecutor {
+    readonly isolation: 'container' | 'remote';
+}
+export interface WorkflowExecutorRouterOptions {
+    readonly trustedExecutor?: TrustedWorkflowExecutor;
+    readonly sandboxExecutor?: SandboxWorkflowExecutor;
+}
+export interface WorkflowExecutorLimits {
+    readonly timeoutMs?: number;
+    readonly maxOutputBytes?: number;
+    readonly maxMessageBytes?: number;
+    readonly maxProtocolMessages?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/workflow-v2/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/workflow-v2/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,CAAC;AAExD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEnF,MAAM,WAAW,4BAA4B;IAC3C,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,oFAAoF;IACpF,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,+BAAgC,SAAQ,4BAA4B;IACnF,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,iCAAkC,SAAQ,4BAA4B;IACrF,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,wBAAwB,GAChC,+BAA+B,GAC/B,iCAAiC,CAAC;AAEtC,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,yBAAyB,KAC/B,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;AAExC,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;AAExF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,OAAO,EAAE,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrF;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC7D,OAAO,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,+BAAgC,SAAQ,uBAAuB;IAC9E,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAC;CAC5C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,uBAAuB,CAAC;IACnD,QAAQ,CAAC,eAAe,CAAC,EAAE,uBAAuB,CAAC;CACpD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC"}

package/dist/src/workflow-v2/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/workflow-v2/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/workflow-v2/types.ts"],"names":[],"mappings":""}