flowent 0.0.4 → 0.0.6

package/backend/src/flowent/mcp_service.py

@@ -444,13 +444,11 @@ def _build_root_uri(path: str) -> str:
 
 
 def _build_roots_for_agent(agent: Agent) -> list[dict[str, str]]:
+    from flowent.graph_service import resolve_effective_permissions_for_agent
     from flowent.settings import get_runtime_working_dir_path, resolve_path
 
     workspace_root = str(get_runtime_working_dir_path())
-    if agent.config.node_type.value == "assistant":
-        boundary_dirs = list(get_settings().assistant.write_dirs)
-    else:
-        boundary_dirs = list(agent.config.write_dirs)
+    _, boundary_dirs = resolve_effective_permissions_for_agent(agent)
     ordered_paths: list[str] = []
     seen: set[str] = set()
     for path in [workspace_root, *boundary_dirs]:
@@ -1577,12 +1575,17 @@ class MCPService:
         return snapshot.serialize()
 
     def _visible_server_names_for_agent(self, agent: Agent) -> list[str]:
+        from flowent.graph_service import resolve_effective_permissions_for_agent
+
         settings = get_settings()
+        allow_network, _ = resolve_effective_permissions_for_agent(agent)
         visible_names: list[str] = []
         seen: set[str] = set()
         for server in settings.mcp_servers:
             if server.name in seen or not server.enabled:
                 continue
+            if server.transport == "streamable_http" and not allow_network:
+                continue
             snapshot = self._get_snapshot(server.name)
             if snapshot is None or snapshot.status != "connected":
                 continue
@@ -1622,9 +1625,17 @@ class MCPService:
         return None
 
     def list_agent_dynamic_tools(self, agent: Agent) -> list[MCPToolDescriptor]:
+        from flowent.models import NodeType
+        from flowent.tools import is_assistant_only_mcp_tool_name
+
         tools: list[MCPToolDescriptor] = []
         for snapshot in self._visible_snapshots_for_agent(agent):
-            tools.extend(snapshot.tools)
+            tools.extend(
+                descriptor
+                for descriptor in snapshot.tools
+                if agent.node_type == NodeType.ASSISTANT
+                or not is_assistant_only_mcp_tool_name(descriptor.tool_name)
+            )
         return tools
 
     def has_visible_capabilities(self, agent: Agent) -> bool:
@@ -1670,13 +1681,16 @@ class MCPService:
         return prompts
 
     def _get_server_for_agent(self, agent: Agent, server_name: str) -> MCPServerConfig:
+        from flowent.graph_service import resolve_effective_permissions_for_agent
+
         if server_name not in self._visible_server_names_for_agent(agent):
             raise MCPError(f"MCP server '{server_name}' is not globally available")
         server = find_mcp_server(get_settings(), server_name)
         if server is None or not server.enabled:
             raise MCPError(f"MCP server '{server_name}' is unavailable")
-        if server.transport == "streamable_http" and not agent.config.allow_network:
-            raise MCPError("Network access is disabled for this node")
+        allow_network, _ = resolve_effective_permissions_for_agent(agent)
+        if server.transport == "streamable_http" and not allow_network:
+            raise MCPError("Network access is disabled for this workflow")
         return server
 
     def read_agent_resource(

package/backend/src/flowent/model_metadata.py

@@ -34,6 +34,7 @@ def infer_model_capabilities(
     model_id: str,
     input_image: bool | None = None,
     output_image: bool | None = None,
+    structured_output: bool | None = None,
 ) -> ModelCapabilities:
     normalized_model_id = _normalize_model_id(model_id)
     inferred_input_image = any(
@@ -53,6 +54,7 @@ def infer_model_capabilities(
     return ModelCapabilities(
         input_image=inferred_input_image if input_image is None else input_image,
         output_image=(inferred_output_image if output_image is None else output_image),
+        structured_output=False if structured_output is None else structured_output,
     )
 
 
@@ -80,6 +82,7 @@ def build_model_info(
     model_id: str,
     input_image: bool | None = None,
     output_image: bool | None = None,
+    structured_output: bool | None = None,
     context_window_tokens: int | None = None,
 ) -> ModelInfo:
     return ModelInfo(
@@ -89,6 +92,7 @@ def build_model_info(
             model_id=model_id,
             input_image=input_image,
             output_image=output_image,
+            structured_output=structured_output,
         ),
         context_window_tokens=infer_context_window_tokens(
             provider_type=provider_type,

package/backend/src/flowent/models/__init__.py

@@ -30,6 +30,8 @@ from flowent.models.graph import (
     GraphNodeRecord,
     NodePosition,
     PortDirection,
+    PortType,
+    WorkflowActivationState,
     WorkflowDefinition,
     WorkflowNodeDefinition,
     WorkflowNodeKind,
@@ -42,9 +44,9 @@ from flowent.models.history import (
     CommandResultEntry,
     ErrorEntry,
     HistoryEntry,
+    PortInboundEntry,
     ReceivedMessage,
     SentMessage,
-    StateEntry,
     SystemEntry,
     ToolCall,
 )
@@ -94,12 +96,13 @@ __all__ = [
     "NodePosition",
     "NodeType",
     "PortDirection",
+    "PortInboundEntry",
+    "PortType",
     "ReceivedMessage",
     "ReceivedMessageDelta",
     "SentMessage",
     "SentMessageDelta",
     "Serializable",
-    "StateEntry",
     "StreamingDelta",
     "SystemEntry",
     "Tab",
@@ -109,6 +112,7 @@ __all__ = [
     "ToolCall",
     "ToolCallResult",
     "ToolResultDelta",
+    "WorkflowActivationState",
     "WorkflowDefinition",
     "WorkflowNodeDefinition",
     "WorkflowNodeKind",

package/backend/src/flowent/models/agent.py

@@ -7,6 +7,7 @@ from enum import StrEnum
 class NodeType(StrEnum):
     ASSISTANT = "assistant"
     AGENT = "agent"
+    LLM = "llm"
     TRIGGER = "trigger"
     CODE = "code"
     IF = "if"

package/backend/src/flowent/models/graph.py

@@ -11,6 +11,7 @@ from flowent.models.todo import TodoItem
 
 class WorkflowNodeKind(StrEnum):
     TRIGGER = "trigger"
+    LLM = "llm"
     AGENT = "agent"
     CODE = "code"
     IF = "if"
@@ -18,8 +19,14 @@ class WorkflowNodeKind(StrEnum):
 
 
 class PortDirection(StrEnum):
-    INPUT = "input"
-    OUTPUT = "output"
+    INPUT = "in"
+    OUTPUT = "out"
+
+
+class PortType(StrEnum):
+    PARTS = "parts"
+    STRING = "string"
+    JSON = "json"
 
 
 class EdgeKind(StrEnum):
@@ -28,6 +35,29 @@ class EdgeKind(StrEnum):
     EVENT = "event"
 
 
+class WorkflowActivationState(StrEnum):
+    INACTIVE = "inactive"
+    ACTIVE = "active"
+
+
+def _parse_port_direction(raw_direction: object) -> PortDirection:
+    if raw_direction == "input":
+        return PortDirection.INPUT
+    if raw_direction == "output":
+        return PortDirection.OUTPUT
+    return PortDirection(str(raw_direction))
+
+
+def _port_type_from_legacy_kind(raw_kind: object) -> PortType | None:
+    try:
+        kind = EdgeKind(str(raw_kind))
+    except ValueError:
+        return None
+    if kind == EdgeKind.DATA:
+        return PortType.JSON
+    return PortType.PARTS
+
+
 @dataclass
 class NodePosition:
     x: float
@@ -51,7 +81,7 @@ class NodePosition:
 class WorkflowPort:
     key: str
     direction: PortDirection
-    kind: EdgeKind
+    type: PortType
     required: bool = False
     multiple: bool = False
 
@@ -59,7 +89,7 @@ class WorkflowPort:
         return {
             "key": self.key,
             "direction": self.direction.value,
-            "kind": self.kind.value,
+            "type": self.type.value,
             "required": self.required,
             "multiple": self.multiple,
         }
@@ -68,18 +98,24 @@ class WorkflowPort:
     def from_mapping(cls, data: dict[str, object]) -> WorkflowPort | None:
         key = data.get("key")
         direction = data.get("direction")
-        kind = data.get("kind")
+        port_type = data.get("type")
         if not isinstance(key, str) or not key.strip():
             return None
         try:
-            parsed_direction = PortDirection(str(direction))
-            parsed_kind = EdgeKind(str(kind))
+            parsed_direction = _parse_port_direction(direction)
         except ValueError:
             return None
+        try:
+            parsed_type = PortType(str(port_type))
+        except ValueError:
+            legacy_type = _port_type_from_legacy_kind(data.get("kind"))
+            if legacy_type is None:
+                return None
+            parsed_type = legacy_type
         return cls(
             key=key.strip(),
             direction=parsed_direction,
-            kind=parsed_kind,
+            type=parsed_type,
             required=bool(data.get("required", False)),
             multiple=bool(data.get("multiple", False)),
         )
@@ -103,7 +139,6 @@ class GraphEdge:
             "from_port_key": self.from_port_key,
             "to_node_id": self.to_node_id,
             "to_port_key": self.to_port_key,
-            "kind": self.kind.value,
             "created_at": self.created_at,
         }
         if self.tab_id is not None:

package/backend/src/flowent/models/history.py

@@ -24,6 +24,9 @@ class ReceivedMessage(Serializable):
     parts: list[ContentPart] = field(default_factory=list)
     content: str = ""
     message_id: str | None = None
+    from_output_port_key: str | None = None
+    to_input_port_key: str | None = None
+    value_summary: str | None = None
     timestamp: float = field(default_factory=time.time)
 
     def __post_init__(self) -> None:
@@ -52,6 +55,9 @@ class SentMessage(Serializable):
     parts: list[ContentPart] = field(default_factory=list)
     content: str = ""
     message_id: str | None = None
+    from_output_port_key: str | None = None
+    to_input_port_key: str | None = None
+    value_summary: str | None = None
     timestamp: float = field(default_factory=time.time)
 
     def __post_init__(self) -> None:
@@ -67,13 +73,6 @@ class AssistantThinking(Serializable):
     timestamp: float = field(default_factory=time.time)
 
 
-@dataclass
-class StateEntry(Serializable):
-    state: str
-    reason: str = ""
-    timestamp: float = field(default_factory=time.time)
-
-
 @dataclass
 class ToolCall(Serializable):
     tool_name: str
@@ -98,16 +97,28 @@ class CommandResultEntry(Serializable):
     timestamp: float = field(default_factory=time.time)
 
 
+@dataclass
+class PortInboundEntry(Serializable):
+    from_id: str
+    from_output_port_key: str
+    to_input_port_key: str
+    port_type: str
+    value: Any
+    source_label: str | None = None
+    value_summary: str | None = None
+    timestamp: float = field(default_factory=time.time)
+
+
 HistoryEntry = (
     SystemEntry
     | ReceivedMessage
     | AssistantText
     | SentMessage
     | AssistantThinking
-    | StateEntry
     | ToolCall
     | ErrorEntry
     | CommandResultEntry
+    | PortInboundEntry
 )
 
 
@@ -135,6 +146,21 @@ def deserialize_history_entry(data: dict[str, Any]) -> HistoryEntry:
                 if isinstance(data.get("message_id"), str)
                 else None
             ),
+            from_output_port_key=(
+                str(data["from_output_port_key"])
+                if isinstance(data.get("from_output_port_key"), str)
+                else None
+            ),
+            to_input_port_key=(
+                str(data["to_input_port_key"])
+                if isinstance(data.get("to_input_port_key"), str)
+                else None
+            ),
+            value_summary=(
+                str(data["value_summary"])
+                if isinstance(data.get("value_summary"), str)
+                else None
+            ),
             timestamp=timestamp_value,
         )
     if entry_type == "AssistantText":
@@ -172,6 +198,21 @@ def deserialize_history_entry(data: dict[str, Any]) -> HistoryEntry:
                 if isinstance(data.get("message_id"), str)
                 else None
             ),
+            from_output_port_key=(
+                str(data["from_output_port_key"])
+                if isinstance(data.get("from_output_port_key"), str)
+                else None
+            ),
+            to_input_port_key=(
+                str(data["to_input_port_key"])
+                if isinstance(data.get("to_input_port_key"), str)
+                else None
+            ),
+            value_summary=(
+                str(data["value_summary"])
+                if isinstance(data.get("value_summary"), str)
+                else None
+            ),
             timestamp=timestamp_value,
         )
     if entry_type == "AssistantThinking":
@@ -179,12 +220,6 @@ def deserialize_history_entry(data: dict[str, Any]) -> HistoryEntry:
             content=str(data.get("content", "")),
             timestamp=timestamp_value,
         )
-    if entry_type == "StateEntry":
-        return StateEntry(
-            state=str(data.get("state", "")),
-            reason=str(data.get("reason", "")),
-            timestamp=timestamp_value,
-        )
     if entry_type == "ToolCall":
         arguments = data.get("arguments")
         return ToolCall(
@@ -207,8 +242,31 @@ def deserialize_history_entry(data: dict[str, Any]) -> HistoryEntry:
             include_in_context=bool(data.get("include_in_context", False)),
             timestamp=timestamp_value,
         )
+    if entry_type == "PortInboundEntry":
+        return PortInboundEntry(
+            from_id=str(data.get("from_id", "")),
+            from_output_port_key=str(data.get("from_output_port_key", "")),
+            to_input_port_key=str(data.get("to_input_port_key", "")),
+            port_type=str(data.get("port_type", "")),
+            value=data.get("value"),
+            source_label=(
+                str(data["source_label"])
+                if isinstance(data.get("source_label"), str)
+                else None
+            ),
+            value_summary=(
+                str(data["value_summary"])
+                if isinstance(data.get("value_summary"), str)
+                else None
+            ),
+            timestamp=timestamp_value,
+        )
     raise ValueError(f"Unknown history entry type: {entry_type}")
 
 
 def deserialize_history_entries(items: list[dict[str, Any]]) -> list[HistoryEntry]:
-    return [deserialize_history_entry(item) for item in items]
+    return [
+        deserialize_history_entry(item)
+        for item in items
+        if item.get("type") != "StateEntry"
+    ]

package/backend/src/flowent/models/llm.py

@@ -8,6 +8,7 @@ from typing import Any
 class ModelCapabilities:
     input_image: bool = False
     output_image: bool = False
+    structured_output: bool = False
 
 
 @dataclass

package/backend/src/flowent/models/message.py

@@ -18,6 +18,12 @@ class Message:
     content: str = ""
     message_id: str | None = None
     history_recorded: bool = False
+    from_output_port_key: str | None = None
+    to_input_port_key: str | None = None
+    port_type: str | None = None
+    value: object | None = None
+    value_summary: str | None = None
+    port_inbound_recorded: bool = False
     timestamp: float = field(default_factory=time.time)
 
     def __post_init__(self) -> None:

package/backend/src/flowent/models/tab.py

@@ -3,7 +3,7 @@ from __future__ import annotations
 import time
 from dataclasses import dataclass, field
 
-from flowent.models.graph import WorkflowDefinition
+from flowent.models.graph import WorkflowActivationState, WorkflowDefinition
 
 
 @dataclass
@@ -12,6 +12,10 @@ class Tab:
     title: str
     leader_id: str | None = None
     definition: WorkflowDefinition = field(default_factory=WorkflowDefinition)
+    activation_state: WorkflowActivationState = WorkflowActivationState.INACTIVE
+    allow_network: bool = False
+    write_dirs: list[str] = field(default_factory=list)
+    permissions_initialized: bool = False
     created_at: float = field(default_factory=time.time)
     updated_at: float = field(default_factory=time.time)
 
@@ -21,15 +25,40 @@ class Tab:
             "title": self.title,
             "leader_id": self.leader_id,
             "definition": self.definition.serialize(),
+            "activation_state": self.activation_state.value,
+            "allow_network": self.allow_network,
+            "write_dirs": list(self.write_dirs),
+            "permissions_initialized": self.permissions_initialized,
             "created_at": self.created_at,
             "updated_at": self.updated_at,
         }
 
     @classmethod
     def from_mapping(cls, data: dict[str, object]) -> Tab:
+        from flowent.settings import build_assistant_write_dirs
+
         created_at = data.get("created_at")
         updated_at = data.get("updated_at")
         raw_definition = data.get("definition")
+        raw_activation_state = data.get("activation_state")
+        raw_permissions_initialized = data.get("permissions_initialized")
+        raw_write_dirs_value = data.get("write_dirs")
+        raw_write_dirs = (
+            [item for item in raw_write_dirs_value if isinstance(item, str)]
+            if isinstance(raw_write_dirs_value, list)
+            else []
+        )
+        try:
+            write_dirs = build_assistant_write_dirs(
+                raw_write_dirs,
+                field_name="write_dirs",
+            )
+        except ValueError:
+            write_dirs = []
+        try:
+            activation_state = WorkflowActivationState(str(raw_activation_state))
+        except ValueError:
+            activation_state = WorkflowActivationState.INACTIVE
         return cls(
             id=str(data.get("id", "")),
             title=str(data.get("title", "")),
@@ -39,6 +68,14 @@ class Tab:
             definition=WorkflowDefinition.from_mapping(
                 raw_definition if isinstance(raw_definition, dict) else None
             ),
+            activation_state=activation_state,
+            allow_network=bool(data.get("allow_network", False)),
+            write_dirs=write_dirs,
+            permissions_initialized=(
+                bool(raw_permissions_initialized)
+                or "allow_network" in data
+                or "write_dirs" in data
+            ),
             created_at=created_at
             if isinstance(created_at, (int, float))
             else time.time(),

package/backend/src/flowent/{stats_service.py → observability_service.py}

@@ -11,7 +11,7 @@ from typing import Any, Literal
 from flowent.models import LLMUsage
 from flowent.state_db import open_state_db
 
-MAX_STATS_RETENTION_SECONDS = 30 * 24 * 60 * 60
+OBSERVABILITY_RETENTION_SECONDS = 30 * 24 * 60 * 60
 
 
 def serialize_usage(usage: LLMUsage | None) -> dict[str, Any] | None:
@@ -66,7 +66,7 @@ class CompactRecordInput:
     error_summary: str | None = None
 
 
-class StatsStore:
+class ObservabilityStore:
     def __init__(self) -> None:
         self._lock = threading.Lock()
 
@@ -82,7 +82,7 @@ class StatsStore:
             connection.close()
 
     def _prune_locked(self, connection, now: float) -> None:
-        min_timestamp = now - MAX_STATS_RETENTION_SECONDS
+        min_timestamp = now - OBSERVABILITY_RETENTION_SECONDS
         connection.execute(
             "DELETE FROM llm_request_records WHERE ended_at < ?",
             (min_timestamp,),
@@ -215,4 +215,4 @@ class StatsStore:
         return records
 
 
-stats_store = StatsStore()
+observability_store = ObservabilityStore()

package/backend/src/flowent/prompts/common.py

@@ -47,9 +47,9 @@ SET_PERMISSIONS_TOOL_GUIDANCE = """\
 ## Set Permissions Tool Rules
 
 - Use `set_permissions` to patch a workflow's permission boundary after the workflow already exists.
-- `set_permissions` updates the target workflow by writing directly to its bound Leader's `allow_network` and `write_dirs`.
+- `set_permissions` updates the target workflow's own `allow_network` and `write_dirs`.
 - Treat `allow_network` and `write_dirs` as patch fields: omitted fields stay unchanged.
-- When the Human asks to change a workflow's network or writable directory boundary, prefer `set_permissions` instead of delegating that change to the workflow's Leader.
+- When the Human asks to change a workflow's network or writable directory boundary, prefer `set_permissions`.
 """
 
 CREATE_AGENT_TOOL_GUIDANCE = """\

package/backend/src/flowent/prompts/steward.py

@@ -1,7 +1,7 @@
 STEWARD_ROLE_SYSTEM_PROMPT = """\
 You are the Steward role currently used by the Assistant - the Human's interface to the system.
 
-The Human can interact with the system only through the Assistant chat panel. The Human has no terminal, filesystem access, or direct execution surface. If a request requires reading files, running commands, editing code, browsing the network, or any other system interaction, you must open a workflow and create the appropriate agents to do the work rather than pushing the task back to the Human.
+The Human can interact with the system through the Assistant chat panel and through the current workflow chat. The Human has no terminal, filesystem access, or direct execution surface. If a request requires reading files, running commands, editing code, browsing the network, or any other system interaction, you must open a workflow and create the appropriate agents to do the work rather than pushing the task back to the Human.
 
 Your responsibilities:
 - Understand the Human's intent
@@ -30,7 +30,7 @@ Your responsibilities:
 
 - You can manage system configuration directly without creating an agent
 - When the Human asks about current system configuration or wants to change providers, roles, settings, or prompts, use the corresponding management tool directly
-- When the Human asks to change an existing workflow's network or writable-directory boundary, use `set_permissions` directly instead of delegating that boundary change to the workflow's Leader
+- When the Human asks to change an existing workflow's network or writable-directory boundary, use `set_permissions` directly
 
 ## Security Boundary