langflower 0.0.3 → 0.0.5

package/vendor/runtime/dist/testing/nodes/hitl-node.js

@@ -47,4 +47,3 @@ export function createHitlTestNode(options) {
         },
     };
 }
-//# sourceMappingURL=hitl-node.js.map

package/vendor/runtime/dist/testing/nodes/join-node.d.ts

@@ -10,4 +10,3 @@ export type JoinTestNodeOptions = {
  * (combineLatest) or `zip` (flush after emit).
  */
 export declare function createJoinTestNode(options: JoinTestNodeOptions): RuntimeNode;
-//# sourceMappingURL=join-node.d.ts.map

package/vendor/runtime/dist/testing/nodes/join-node.js

@@ -30,4 +30,3 @@ export function createJoinTestNode(options) {
         bypassPorts: {},
     };
 }
-//# sourceMappingURL=join-node.js.map

package/vendor/runtime/dist/testing/nodes/merge-node.d.ts

@@ -9,4 +9,3 @@ export type MergeTestNodeOptions = {
  * connection so a test can read the flattened stream.
  */
 export declare function createMergeTestNode(options: MergeTestNodeOptions): RuntimeNode;
-//# sourceMappingURL=merge-node.d.ts.map

package/vendor/runtime/dist/testing/nodes/merge-node.js

@@ -29,4 +29,3 @@ export function createMergeTestNode(options) {
         bypassPorts: {},
     };
 }
-//# sourceMappingURL=merge-node.js.map

package/vendor/runtime/dist/testing/nodes/preview-node.d.ts

@@ -4,4 +4,3 @@ export type PreviewTestNodeOptions = {
 };
 /** Preview stand-in — `text` in → formatted `text` out (passthrough). */
 export declare function createPreviewTestNode(options: PreviewTestNodeOptions): RuntimeNode;
-//# sourceMappingURL=preview-node.d.ts.map

package/vendor/runtime/dist/testing/nodes/preview-node.js

@@ -25,4 +25,3 @@ export function createPreviewTestNode(options) {
         bypassPorts: {},
     };
 }
-//# sourceMappingURL=preview-node.js.map

package/vendor/runtime/dist/testing/nodes/pushable-node.d.ts

@@ -12,4 +12,3 @@ export type PushableTestNodeHandle = {
  * Used to prove zip flush (re-fire one slot without sibling).
  */
 export declare function createPushableTestNode(options: PushableTestNodeOptions): PushableTestNodeHandle;
-//# sourceMappingURL=pushable-node.d.ts.map

package/vendor/runtime/dist/testing/nodes/pushable-node.js

@@ -27,4 +27,3 @@ export function createPushableTestNode(options) {
         },
     };
 }
-//# sourceMappingURL=pushable-node.js.map

package/vendor/runtime/dist/testing/nodes/router-node.d.ts

@@ -6,4 +6,3 @@ export type RouterTestNodeOptions = {
 };
 /** Router stand-in — bypass metadata only; runtime materializes channel IO. */
 export declare function createRouterTestNode(options: RouterTestNodeOptions): RuntimeNode;
-//# sourceMappingURL=router-node.d.ts.map

package/vendor/runtime/dist/testing/nodes/router-node.js

@@ -11,4 +11,3 @@ export function createRouterTestNode(options) {
         bypassPorts,
     };
 }
-//# sourceMappingURL=router-node.js.map

package/vendor/runtime/dist/testing/readOutputValue.d.ts

@@ -1,3 +1,2 @@
 import { StatefulObservable } from '@rx-evo/stateful-observable';
 export declare function readOutputValue(output: StatefulObservable<unknown, unknown>): Promise<unknown>;
-//# sourceMappingURL=readOutputValue.d.ts.map

package/vendor/runtime/dist/testing/readOutputValue.js

@@ -2,4 +2,3 @@ import { firstValueFrom } from 'rxjs';
 export async function readOutputValue(output) {
     return firstValueFrom(output.value$);
 }
-//# sourceMappingURL=readOutputValue.js.map

package/vendor/runtime/dist/testing/workflows/workflow-events.d.ts

@@ -18,4 +18,3 @@ export declare function runAndCollectEvents(runtime: RuntimeRunner | RuntimeHarn
     readonly events: readonly RuntimeRunnerEvent[];
 }>;
 export declare function noDoneWithin(runtime: RuntimeRunner | RuntimeHarness, ms: number, runId?: RunId): Promise<boolean>;
-//# sourceMappingURL=workflow-events.d.ts.map

package/vendor/runtime/dist/testing/workflows/workflow-events.js

@@ -75,4 +75,3 @@ export async function noDoneWithin(runtime, ms, runId) {
     ]);
     return result === 'timeout';
 }
-//# sourceMappingURL=workflow-events.js.map

package/vendor/runtime/dist/types.d.ts

@@ -14,6 +14,12 @@ export type RunId = string & {
     readonly __brand: 'RunId';
 };
 type RuntimeInputPortMode = 'single' | 'merge' | 'combine' | 'zip' | 'bypass';
+export type RuntimeFeedRole = 'none' | 'reasoning' | 'draft' | 'tool' | 'shell' | 'result' | 'recovery';
+export type RuntimeFeedPortMeta = {
+    readonly role?: RuntimeFeedRole;
+    /** When true, feed visit stays open for chunks / interleaved streams. */
+    readonly streaming?: boolean;
+};
 /**
  * Typed metadata attached to every `statefulConnection` / `statefulObservable`
  * via the `meta` field. Replaces the old string-encoding scheme.
@@ -35,6 +41,8 @@ export type PortMeta = {
      * `node.inputs` for the canvas.
      */
     readonly defaultValue?: unknown;
+    /** Author-supplied feed role / streaming hint for the work log. */
+    readonly feed?: RuntimeFeedPortMeta;
 };
 /**
  * Extract the `meta` type carried by a {@link StatefulObservable} /
@@ -120,6 +128,8 @@ export type RuntimeOutputEmittedEvent = {
     readonly edgeIds: EdgeId[];
     readonly state: RuntimePortSignalState;
     readonly value: unknown;
+    /** Resolved author feed contract carried with the runtime fact. */
+    readonly feed?: RuntimeFeedPortMeta;
 };
 export type RuntimeInputReceivedEvent = {
     readonly kind: 'input-received';
@@ -130,6 +140,8 @@ export type RuntimeInputReceivedEvent = {
     readonly edgeIds: EdgeId[];
     readonly state: RuntimePortSignalState;
     readonly value: unknown;
+    /** Resolved author feed contract carried with the runtime fact. */
+    readonly feed?: RuntimeFeedPortMeta;
 };
 export type RuntimeRunnerEvent = RuntimeOutputEmittedEvent | RuntimeInputReceivedEvent | {
     /**
@@ -399,4 +411,3 @@ export type RuntimeRunnerApi = {
     readonly eventLog: readonly RuntimeRunnerEvent[];
 };
 export {};
-//# sourceMappingURL=types.d.ts.map

package/vendor/runtime/dist/types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=types.js.map

package/vendor/server/dist/bootstrap/copy-force.d.ts

@@ -5,4 +5,3 @@ export declare const copyFileForce: (sourcePath: string, destinationPath: string
  * Extra files already under destination are left in place.
  */
 export declare const copyDirForce: (sourceDir: string, destinationDir: string) => Promise<void>;
-//# sourceMappingURL=copy-force.d.ts.map

package/vendor/server/dist/bootstrap/copy-force.js

@@ -16,4 +16,3 @@ export const copyDirForce = async (sourceDir, destinationDir) => {
         force: true,
     });
 };
-//# sourceMappingURL=copy-force.js.map

package/vendor/server/dist/bootstrap/copy-if-missing.d.ts

@@ -5,4 +5,3 @@ export declare const copyFileIfMissing: (sourcePath: string, destinationPath: st
  * Existence of the destination path (even empty) skips the copy — no overwrite.
  */
 export declare const copyDirIfMissing: (sourceDir: string, destinationDir: string) => Promise<void>;
-//# sourceMappingURL=copy-if-missing.d.ts.map

package/vendor/server/dist/bootstrap/copy-if-missing.js

@@ -30,4 +30,3 @@ export const copyDirIfMissing = async (sourceDir, destinationDir) => {
         errorOnExist: true,
     });
 };
-//# sourceMappingURL=copy-if-missing.js.map

package/vendor/server/dist/bootstrap/project-bootstrap.service.d.ts

@@ -15,4 +15,3 @@ export type BootstrapProjectOptions = {
 export declare function bootstrapProject(projectDir: string, options?: BootstrapProjectOptions): Promise<SeedSkeletonResult>;
 /** True when the project already has a `.langflower` directory. */
 export declare const hasLangflowerProject: (projectDir: string) => Promise<boolean>;
-//# sourceMappingURL=project-bootstrap.service.d.ts.map

package/vendor/server/dist/bootstrap/project-bootstrap.service.js

@@ -1,9 +1,17 @@
 import { DEFAULT_CONFIG } from '@langflower/shared/constants/defaults.js';
+import { DEFAULT_PERMISSION_CONFIG } from '@langflower/tools/permission';
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { resolveSkeletonRoot } from './resolve-skeleton-root.js';
 import { seedSkeletonContent, } from './seed-skeleton.js';
 const FIRST_RUN_WORKFLOW_ID = 'starter';
+/** First-run project config — explicit permission + local JSON Schema. */
+const FIRST_RUN_LANGFLOWER_JSONC = {
+    $schema: './schemas/langflower-config.schema.json',
+    currentWorkflowId: FIRST_RUN_WORKFLOW_ID,
+    provider: {},
+    permission: DEFAULT_PERMISSION_CONFIG,
+};
 const pathExists = async (targetPath) => {
     try {
         await fs.access(targetPath);
@@ -30,7 +38,7 @@ const writeLangflowerJsoncIfMissing = async (langflowerDir) => {
     if (await pathExists(langflowerConfigPath)) {
         return;
     }
-    await fs.writeFile(langflowerConfigPath, `${JSON.stringify({ currentWorkflowId: FIRST_RUN_WORKFLOW_ID, provider: {} }, null, 2)}\n`, 'utf8');
+    await fs.writeFile(langflowerConfigPath, `${JSON.stringify(FIRST_RUN_LANGFLOWER_JSONC, null, '\t')}\n`, 'utf8');
 };
 /**
  * Seed `.langflower/` from the packaged skeleton.
@@ -72,4 +80,3 @@ export const hasLangflowerProject = async (projectDir) => {
         return false;
     }
 };
-//# sourceMappingURL=project-bootstrap.service.js.map

package/vendor/server/dist/bootstrap/resolve-skeleton-root.d.ts

@@ -6,4 +6,3 @@
  * `skeleton/` next to package.json (shipped via package `files`).
  */
 export declare const resolveSkeletonRoot: (fromModuleUrl?: string) => Promise<string>;
-//# sourceMappingURL=resolve-skeleton-root.d.ts.map

package/vendor/server/dist/bootstrap/resolve-skeleton-root.js

@@ -32,4 +32,3 @@ export const resolveSkeletonRoot = async (fromModuleUrl = import.meta.url) => {
     }
     throw new Error(`Langflower skeleton seed not found (looked for ${distSkeleton} and ${packageSkeleton})`);
 };
-//# sourceMappingURL=resolve-skeleton-root.js.map

package/vendor/server/dist/bootstrap/seed-skeleton.d.ts

@@ -13,4 +13,3 @@ export type SeedSkeletonOptions = {
  * skeleton-owned files (extra project-only files stay).
  */
 export declare const seedSkeletonContent: (skeletonRoot: string, langflowerDir: string, options: SeedSkeletonOptions) => Promise<SeedSkeletonResult>;
-//# sourceMappingURL=seed-skeleton.d.ts.map

package/vendor/server/dist/bootstrap/seed-skeleton.js

@@ -40,6 +40,7 @@ export const seedSkeletonContent = async (skeletonRoot, langflowerDir, options)
         await fs.mkdir(path.join(langflowerDir, 'nodes'), { recursive: true });
     }
     await copyFile(path.join(skeletonRoot, 'instructions.md'), path.join(langflowerDir, 'instructions.md'));
+    await copyDir(path.join(skeletonRoot, 'schemas'), path.join(langflowerDir, 'schemas'));
     for (const skillId of await listSkeletonSkillIds(skeletonRoot)) {
         await copyDir(path.join(skeletonRoot, 'skills', skillId), path.join(langflowerDir, 'skills', skillId));
     }
@@ -52,4 +53,3 @@ export const seedSkeletonContent = async (skeletonRoot, langflowerDir, options)
     }
     return { workflowIds };
 };
-//# sourceMappingURL=seed-skeleton.js.map

package/vendor/server/dist/bridge/attach-langflower-bridge.d.ts

@@ -4,14 +4,16 @@ import type { LangflowerBridge } from './langflower-bridge.types.js';
 export type { LangflowerBridge } from './langflower-bridge.types.js';
 export type AttachLangflowerBridgeOptions = {
     readonly onRunSettled?: (status: TerminalExecutionProgressStatus) => void;
+    /** Initial effective `serverLogs` gate (defaults to enabled). */
+    readonly serverLogsEnabled?: boolean;
 };
 /**
  * Wire `langflowerWsConfig` handlers onto the WS bridge.
  *
  * Call order (see also `BRIDGE.md`):
+ * 0. Diagnostic bridge JSONL log (gated by effective `serverLogs`)
  * 1. Always-on runner telemetry fan-out
  * 2. Connect / disconnect → index + bootstrap snapshots
  * 3. Intent handlers by bus namespace (workflow → palette → editor → runner)
  */
-export declare const attachLangflowerBridge: (bridge: LangflowerBridge, context: ServerContext, options?: AttachLangflowerBridgeOptions) => (() => void);
-//# sourceMappingURL=attach-langflower-bridge.d.ts.map
+export declare const attachLangflowerBridge: (bridge: LangflowerBridge, context: ServerContext, options?: AttachLangflowerBridgeOptions) => (() => Promise<void>);

package/vendor/server/dist/bridge/attach-langflower-bridge.js

@@ -3,19 +3,22 @@ import { Subscription } from 'rxjs';
 import { RunCheckpointSession } from '../checkpoint/run-checkpoint-session.js';
 import { LangflowerSession } from '../session/langflower-session.js';
 import { clearClientIndex, indexClient, unindexClient, } from './client-index.js';
+import { attachBridgeEventLog } from './bridge-event-log.js';
 import { emitBootstrap } from './emit-bootstrap.js';
 import { forwardRunnerEvent } from './forward-runner-event.js';
-import { wireConfigHandlers } from './wire-config-handlers.js';
+import { applyServerLogsGate, wireConfigHandlers, } from './wire-config-handlers.js';
 import { wireEditorHandlers } from './wire-editor-handlers.js';
 import { wireCustomPaletteHandlers } from './wire-custom-palette-handlers.js';
 import { wirePaletteHandlers } from './wire-palette-handlers.js';
 import { wireProjectBootstrapHandlers } from './wire-project-bootstrap-handlers.js';
 import { wireRunnerHandlers } from './wire-runner-handlers.js';
 import { wireWorkflowHandlers } from './wire-workflow-handlers.js';
+import { createSettingsDraftController } from './settings-draft-controller.js';
 /**
  * Wire `langflowerWsConfig` handlers onto the WS bridge.
  *
  * Call order (see also `BRIDGE.md`):
+ * 0. Diagnostic bridge JSONL log (gated by effective `serverLogs`)
  * 1. Always-on runner telemetry fan-out
  * 2. Connect / disconnect → index + bootstrap snapshots
  * 3. Intent handlers by bus namespace (workflow → palette → editor → runner)
@@ -25,6 +28,8 @@ export const attachLangflowerBridge = (bridge, context, options = {}) => {
     const checkpoints = new RunCheckpointSession(context.projectDir);
     const rootSubscription = new Subscription();
     const onRunSettled = options.onRunSettled;
+    const diagnosticLog = attachBridgeEventLog(bridge, context.projectDir, rootSubscription, { enabled: options.serverLogsEnabled !== false });
+    const draftController = createSettingsDraftController(bridge, context, session);
     // 1. Always-on telemetry: subscribe once for the whole bridge lifetime,
     // independent of clients/runs. Guarantees initial `pending` events from
     // `runner.start()` are captured — a later per-client subscription would
@@ -45,7 +50,7 @@ export const attachLangflowerBridge = (bridge, context, options = {}) => {
         indexClient(bridge, client);
         const subscriptions = new Subscription();
         rootSubscription.add(subscriptions);
-        void emitBootstrap(client, context, session, checkpoints);
+        void emitBootstrap(client, context, session, checkpoints, draftController);
         subscriptions.add(client.disconnected$.subscribe(() => {
             subscriptions.unsubscribe();
             unindexClient(bridge, client.id);
@@ -55,14 +60,19 @@ export const attachLangflowerBridge = (bridge, context, options = {}) => {
     rootSubscription.add(wireWorkflowHandlers(bridge, context, session));
     rootSubscription.add(wirePaletteHandlers(bridge, context));
     rootSubscription.add(wireCustomPaletteHandlers(bridge, context));
-    rootSubscription.add(wireConfigHandlers(bridge, context));
+    rootSubscription.add(wireConfigHandlers(bridge, context, session, draftController, {
+        onEffectiveConfig: (config) => {
+            applyServerLogsGate(diagnosticLog.setEnabled, config);
+        },
+    }));
     rootSubscription.add(wireProjectBootstrapHandlers(bridge, context, session));
-    rootSubscription.add(wireEditorHandlers(bridge, context, session));
+    rootSubscription.add(wireEditorHandlers(bridge, context, session, draftController));
     rootSubscription.add(wireRunnerHandlers(bridge, context, session, checkpoints));
-    return () => {
+    return async () => {
+        diagnosticLog.writeServerClosing();
         rootSubscription.unsubscribe();
         clearClientIndex(bridge);
         session.dispose();
+        await diagnosticLog.flush();
     };
 };
-//# sourceMappingURL=attach-langflower-bridge.js.map

package/vendor/server/dist/bridge/bind-llm-context.d.ts

@@ -11,4 +11,3 @@ export type ListProviderModelsResult = {
     readonly error?: string;
 };
 export declare const listProviderModels: (langflowerConfigService: LangflowerConfigService, providerId: string) => Promise<ListProviderModelsResult>;
-//# sourceMappingURL=bind-llm-context.d.ts.map

package/vendor/server/dist/bridge/bind-llm-context.js

@@ -28,4 +28,3 @@ export const listProviderModels = async (langflowerConfigService, providerId) =>
         ...(result.error !== undefined ? { error: result.error } : {}),
     };
 };
-//# sourceMappingURL=bind-llm-context.js.map

package/vendor/server/dist/bridge/bridge-event-log.d.ts

@@ -0,0 +1,12 @@
+import { Subscription } from 'rxjs';
+import type { LangflowerBridge } from './langflower-bridge.types.js';
+export type BridgeEventLog = {
+    readonly filePath: string;
+    setEnabled(enabled: boolean): void;
+    writeServerClosing(): void;
+    flush(): Promise<void>;
+};
+export type AttachBridgeEventLogOptions = {
+    readonly enabled?: boolean;
+};
+export declare const attachBridgeEventLog: (bridge: LangflowerBridge, projectDir: string, subscriptions: Subscription, options?: AttachBridgeEventLogOptions) => BridgeEventLog;

package/vendor/server/dist/bridge/bridge-event-log.js

@@ -0,0 +1,199 @@
+import { randomUUID } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { langflowerWsConfig } from '@langflower/shared/langflower.js';
+import { Subscription } from 'rxjs';
+const REDACTED = '[REDACTED]';
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const isSecretKey = (key) => {
+    const normalized = key.toLowerCase();
+    return (normalized.includes('apikey') ||
+        normalized.includes('authorization') ||
+        normalized.includes('cookie') ||
+        normalized.includes('token') ||
+        normalized.includes('password') ||
+        normalized.includes('secret') ||
+        normalized.includes('credential'));
+};
+const sanitize = (value, seen = new WeakSet()) => {
+    if (value === null ||
+        typeof value === 'string' ||
+        typeof value === 'number' ||
+        typeof value === 'boolean') {
+        return value;
+    }
+    if (typeof value === 'bigint') {
+        return `${value}n`;
+    }
+    if (typeof value === 'undefined') {
+        return '[undefined]';
+    }
+    if (typeof value === 'symbol' || typeof value === 'function') {
+        return `[${typeof value}]`;
+    }
+    if (value instanceof Error) {
+        return {
+            name: value.name,
+            message: value.message,
+        };
+    }
+    if (value instanceof Date) {
+        return value.toISOString();
+    }
+    if (typeof value === 'object') {
+        if (seen.has(value)) {
+            return '[circular]';
+        }
+        seen.add(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => sanitize(entry, seen));
+    }
+    if (isRecord(value)) {
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
+            key,
+            isSecretKey(key) ? REDACTED : sanitize(entry, seen),
+        ]));
+    }
+    return String(value);
+};
+const toSafeTimestamp = (date) => date.toISOString().replaceAll(':', '-').replaceAll('.', '-');
+const asObservable = (value) => isRecord(value) && typeof value.subscribe === 'function'
+    ? value
+    : undefined;
+const asInboundEvent = (value) => isRecord(value) && typeof value.clientId === 'string' && 'payload' in value
+    ? { clientId: value.clientId, payload: value.payload }
+    : undefined;
+const logPath = (projectDir) => path.join(projectDir, '.langflower', 'logs', `${toSafeTimestamp(new Date())}-${process.pid}-${randomUUID()}.log`);
+export const attachBridgeEventLog = (bridge, projectDir, subscriptions, options = {}) => {
+    const filePath = logPath(projectDir);
+    let enabled = options.enabled !== false;
+    let acceptingWrites = true;
+    let closed = false;
+    let reportedFailure = false;
+    let directoryReady = false;
+    let writeQueue = Promise.resolve();
+    const reportFailure = (error) => {
+        if (reportedFailure) {
+            return;
+        }
+        reportedFailure = true;
+        const message = error instanceof Error ? error.message : String(error);
+        process.stderr.write(`Langflower diagnostic logging disabled: ${message}\n`);
+    };
+    const write = (record) => {
+        if (!enabled || !acceptingWrites || closed) {
+            return;
+        }
+        const line = `${JSON.stringify(sanitize({
+            schemaVersion: 1,
+            timestamp: new Date().toISOString(),
+            ...record,
+        }))}\n`;
+        writeQueue = writeQueue.then(async () => {
+            if (!enabled || !acceptingWrites) {
+                return;
+            }
+            try {
+                if (!directoryReady) {
+                    await fs.mkdir(path.dirname(filePath), { recursive: true });
+                    directoryReady = true;
+                }
+                await fs.appendFile(filePath, line, 'utf8');
+            }
+            catch (error) {
+                acceptingWrites = false;
+                reportFailure(error);
+            }
+        });
+    };
+    const bridgeChannels = bridge;
+    const inboundKeys = Object.keys(langflowerWsConfig.fromClientToServer);
+    const outboundKeys = Object.keys(langflowerWsConfig.fromServerToClient);
+    for (const type of inboundKeys) {
+        const channel = asObservable(bridgeChannels[type]);
+        if (channel === undefined) {
+            continue;
+        }
+        subscriptions.add(channel.subscribe((value) => {
+            const event = asInboundEvent(value);
+            if (event !== undefined) {
+                write({
+                    kind: 'frame',
+                    direction: 'inbound',
+                    clientId: event.clientId,
+                    type,
+                    payload: event.payload,
+                });
+            }
+        }));
+    }
+    for (const type of outboundKeys) {
+        const channel = asObservable(bridgeChannels[type]);
+        if (channel === undefined) {
+            continue;
+        }
+        subscriptions.add(channel.subscribe((payload) => {
+            write({
+                kind: 'frame',
+                direction: 'outbound',
+                scope: 'broadcast',
+                type,
+                payload,
+            });
+        }));
+    }
+    subscriptions.add(bridge.status$.subscribe((status) => {
+        write({ kind: 'status', status });
+    }));
+    subscriptions.add(bridge.errors$.subscribe((error) => {
+        write({
+            kind: 'error',
+            error: {
+                code: error.code,
+                message: error.message,
+                ...('cause' in error ? { cause: error.cause } : {}),
+            },
+        });
+    }));
+    subscriptions.add(bridge.connections$.subscribe((client) => {
+        write({ kind: 'connection', clientId: client.id });
+        const clientSubscriptions = new Subscription();
+        subscriptions.add(clientSubscriptions);
+        const clientChannels = client;
+        for (const type of outboundKeys) {
+            const channel = asObservable(clientChannels[type]);
+            if (channel === undefined) {
+                continue;
+            }
+            clientSubscriptions.add(channel.subscribe((payload) => {
+                write({
+                    kind: 'frame',
+                    direction: 'outbound',
+                    scope: 'client',
+                    clientId: client.id,
+                    type,
+                    payload,
+                });
+            }));
+        }
+        clientSubscriptions.add(client.disconnected$.subscribe(() => {
+            write({ kind: 'disconnection', clientId: client.id });
+            clientSubscriptions.unsubscribe();
+        }));
+    }));
+    write({ kind: 'server-started' });
+    return {
+        filePath,
+        setEnabled: (nextEnabled) => {
+            enabled = nextEnabled;
+        },
+        writeServerClosing: () => {
+            write({ kind: 'server-closing' });
+            closed = true;
+        },
+        flush: async () => {
+            await writeQueue;
+        },
+    };
+};

package/vendor/server/dist/bridge/bridge-outbound.d.ts

@@ -2,4 +2,3 @@ import type { LangflowerBridge, LangflowerClient } from './langflower-bridge.typ
 export type { LangflowerBridge, LangflowerClient, } from './langflower-bridge.types.js';
 export declare const clientEmit: <T extends keyof LangflowerClient, Payload>(client: LangflowerClient, channel: T, payload: Payload) => void;
 export declare const bridgeEmit: <T extends keyof LangflowerClient, Payload>(bridge: LangflowerBridge, channel: T, payload: Payload) => void;
-//# sourceMappingURL=bridge-outbound.d.ts.map

package/vendor/server/dist/bridge/bridge-outbound.js

@@ -12,4 +12,3 @@ export const bridgeEmit = (bridge, channel, payload) => {
     }
     subject.next(payload);
 };
-//# sourceMappingURL=bridge-outbound.js.map

package/vendor/server/dist/bridge/build-execution-context.d.ts

@@ -2,7 +2,7 @@ import { type ExecutionContext } from '@langflower/node-sdk';
 import type { LlmExecutionCaps } from '@langflower/node-sdk/llm';
 import type { McpHandle } from '@langflower/node-sdk/mcp';
 import type { RuntimeSeedPortValue } from '@langflower/runtime';
-import type { LangflowerConfig, RunnerPermissionAskPayload } from '@langflower/shared/langflower.js';
+import { type LangflowerConfig, type RunnerPermissionAskPayload } from '@langflower/shared/langflower.js';
 import type { ServerContext } from '../server-context.js';
 import type { LangflowerSession } from '../session/langflower-session.js';
 type WorkflowGraphNode = {
@@ -26,4 +26,3 @@ export declare const buildExecutionContext: (context: ExecutionContextDeps, runI
 export declare const applyObservableContextSeeds: (session: LangflowerSession, seeds: Readonly<Record<string, ReadonlyArray<RuntimeSeedPortValue>>>) => Record<string, ReadonlyArray<RuntimeSeedPortValue>>;
 export declare const buildContextSeeds: (session: LangflowerSession, context: ExecutionContextDeps, runId: string, emitPermissionAsk: (payload: RunnerPermissionAskPayload) => void) => Promise<Record<string, ReadonlyArray<RuntimeSeedPortValue>>>;
 export {};
-//# sourceMappingURL=build-execution-context.d.ts.map

package/vendor/server/dist/bridge/build-execution-context.js

@@ -1,10 +1,11 @@
-import { parseLlmRolePreset, resolveEffectiveEnabledToolIds, resolveEffectiveSkillId, resolveRolePermissionPosture, } from '@langflower/common-nodes/ai/llm-role-preset';
+import { parseLlmRolePreset, resolveEffectiveSkillId, resolveEffectiveToolPermissions, toolPermissionsToEnabledIds, } from '@langflower/common-nodes/ai/llm-role-preset';
 import { attachRunHostServices } from '@langflower/common-nodes/ai/run-host-services';
 import { contextSymbol, } from '@langflower/node-sdk';
+import { parseDefaultChatModel, } from '@langflower/shared/langflower.js';
 import { collectEnabledMcpIdsFromNodes, createSystemMcpHandles, filterMcpFailuresForNode, filterMcpHandlesByIds, parseEnabledMcpIds, } from '@langflower/tools/create-system-mcp-handles';
 import { createProjectHarness, } from '@langflower/tools/create-project-harness';
 import { createWebFetch } from '@langflower/tools/create-web-fetch';
-import { mergePermissionConfigs, } from '@langflower/tools/permission';
+import { mergeProjectAndNodePermissions, } from '@langflower/tools/permission';
 import { isObservable, throwError } from 'rxjs';
 import { bindCreateChatCompletionStream } from './bind-llm-context.js';
 import { wrapBuiltinToolHandles } from './wrap-builtin-tool-handles.js';
@@ -37,7 +38,8 @@ export const buildExecutionContext = async (context, runId, node, hooks, preload
         ? await readAgentsMarkdown(context.projectDir)
         : '';
     const config = preloadedConfig ?? (await context.langflowerConfigService.read());
-    const permission = mergePermissionConfigs(config.permission, resolveRolePermissionPosture(rolePreset));
+    const toolPermissions = resolveEffectiveToolPermissions(rolePreset, node.params.toolPermissions, node.params.enabledToolIds);
+    const permission = mergeProjectAndNodePermissions(config.permission, toolPermissions);
     const toolHarness = hooks === undefined
         ? createToolHarness({
             projectRoot: context.projectDir,
@@ -63,8 +65,8 @@ export const buildExecutionContext = async (context, runId, node, hooks, preload
             : {}),
         webFetch,
     };
-    const enabledToolIds = resolveEffectiveEnabledToolIds(rolePreset, node.params.enabledToolIds);
-    const toolHandles = wrapBuiltinToolHandles(harness, enabledToolIds);
+    const enabledToolIds = toolPermissionsToEnabledIds(toolPermissions);
+    const toolHandles = wrapBuiltinToolHandles(harness, enabledToolIds, permission);
     const mcpHandles = filterMcpHandlesByIds(runMcpHandles ?? [], parseEnabledMcpIds(node.params.enabledMcpIds));
     const base = {
         projectDir: context.projectDir,
@@ -78,12 +80,14 @@ export const buildExecutionContext = async (context, runId, node, hooks, preload
         ...(toolHandles.length > 0 ? { toolHandles } : {}),
         ...(mcpHandles.length > 0 ? { mcpHandles } : {}),
     };
+    const defaultChat = parseDefaultChatModel(config.model);
     return attachRunHostServices(base, {
         ...(node.type !== 'common-fake-llm'
             ? {
                 createChatCompletionStream: bindCreateChatCompletionStream(context.langflowerConfigService),
             }
             : {}),
+        ...(defaultChat !== null ? { defaultChat } : {}),
         ...(skillMarkdown.length > 0 ? { skillMarkdown } : {}),
         ...(agentsMarkdown.length > 0 ? { agentsMarkdown } : {}),
         ...(toolHarness.authorize !== undefined
@@ -173,4 +177,3 @@ export const buildContextSeeds = async (session, context, runId, emitPermissionA
     }
     return seeds;
 };
-//# sourceMappingURL=build-execution-context.js.map

package/vendor/server/dist/bridge/build-langflower-config-snapshot.d.ts

@@ -4,4 +4,3 @@ import type { ServerContext } from '../server-context.js';
  * Build the bridge config snapshot (effective + redacted layers + global path).
  */
 export declare const buildLangflowerConfigSnapshot: (context: ServerContext) => Promise<LangflowerConfigSnapshotPayload>;
-//# sourceMappingURL=build-langflower-config-snapshot.d.ts.map

package/vendor/server/dist/bridge/build-langflower-config-snapshot.js

@@ -15,4 +15,3 @@ export const buildLangflowerConfigSnapshot = async (context) => {
         globalPath: context.langflowerConfigService.globalPath(),
     };
 };
-//# sourceMappingURL=build-langflower-config-snapshot.js.map