newo 3.7.1 → 3.7.3

package/dist/sync/flow-metadata.js

@@ -0,0 +1,283 @@
+import { listFlowEvents, listFlowStates, createFlowEvent, updateFlowEvent, deleteFlowEvent, createFlowState, updateFlowState, deleteFlowState, updateFlow } from '../api.js';
+export function emptyFlowSyncCounts() {
+    return {
+        flowsUpdated: 0,
+        eventsCreated: 0,
+        eventsUpdated: 0,
+        eventsDeleted: 0,
+        statesCreated: 0,
+        statesUpdated: 0,
+        statesDeleted: 0,
+        errors: []
+    };
+}
+/**
+ * True when remote FlowEvent fields differ from what the local metadata says.
+ * We only compare semantic fields the platform stores - `id` is platform-owned.
+ */
+export function flowEventDiffers(local, remote) {
+    return (normalizeStr(local.description) !== normalizeStr(remote.description) ||
+        normalizeStr(local.skill_selector) !== normalizeStr(remote.skill_selector) ||
+        normalizeStr(local.skill_idn) !== normalizeStr(remote.skill_idn) ||
+        normalizeStr(local.state_idn) !== normalizeStr(remote.state_idn) ||
+        normalizeStr(local.interrupt_mode) !== normalizeStr(remote.interrupt_mode) ||
+        normalizeStr(local.integration_idn) !== normalizeStr(remote.integration_idn) ||
+        normalizeStr(local.connector_idn) !== normalizeStr(remote.connector_idn));
+}
+export function flowStateDiffers(local, remote) {
+    return (normalizeStr(local.title) !== normalizeStr(remote.title) ||
+        normalizeStr(local.default_value) !== normalizeStr(remote.default_value) ||
+        normalizeStr(local.scope) !== normalizeStr(remote.scope));
+}
+/**
+ * Normalizes nullable/undefined string fields so YAML round-trips don't
+ * register as differences. `null`, `undefined`, and missing all collapse to ''.
+ */
+function normalizeStr(value) {
+    if (value === null || value === undefined)
+        return '';
+    return String(value);
+}
+function buildEventCreateRequest(local) {
+    return {
+        idn: local.idn,
+        description: local.description ?? '',
+        skill_selector: local.skill_selector,
+        ...(local.skill_idn != null ? { skill_idn: local.skill_idn } : {}),
+        state_idn: local.state_idn ?? null,
+        interrupt_mode: local.interrupt_mode,
+        integration_idn: local.integration_idn ?? '',
+        connector_idn: local.connector_idn ?? ''
+    };
+}
+function buildEventUpdateRequest(local) {
+    return {
+        idn: local.idn,
+        description: local.description ?? '',
+        skill_selector: local.skill_selector,
+        skill_idn: local.skill_idn ?? null,
+        state_idn: local.state_idn ?? null,
+        interrupt_mode: local.interrupt_mode,
+        integration_idn: local.integration_idn ?? null,
+        connector_idn: local.connector_idn ?? null
+    };
+}
+function buildStateCreateRequest(local) {
+    const req = {
+        title: local.title || local.idn,
+        idn: local.idn,
+        scope: local.scope
+    };
+    if (local.default_value != null) {
+        req.default_value = local.default_value;
+    }
+    return req;
+}
+function buildStateUpdateRequest(local) {
+    const req = {
+        title: local.title || local.idn,
+        idn: local.idn,
+        scope: local.scope
+    };
+    if (local.default_value != null) {
+        req.default_value = local.default_value;
+    }
+    return req;
+}
+function shouldUpdateFlow(local, remote) {
+    return (normalizeStr(local.title) !== normalizeStr(remote.title) ||
+        normalizeStr(local.description) !== normalizeStr(remote.description) ||
+        normalizeStr(local.default_runner_type) !== normalizeStr(remote.default_runner_type));
+}
+/**
+ * Reconcile one flow's metadata with the platform.
+ *
+ * @param client          authenticated Axios client
+ * @param flowId          platform flow ID (UUID)
+ * @param local           parsed FlowMetadata from the customer's local YAML
+ * @param remoteFlow      flow data fetched from GET /flows/{id} - if null,
+ *                        flow-level updates are skipped (still syncs children).
+ *                        Pass null when caller already knows the GET endpoint
+ *                        will 404 (e.g. legacy data) or wants children-only.
+ * @param verbose         when true, emits per-operation log lines
+ * @param counts          shared counter mutated in place across multiple flows
+ */
+export async function syncFlowMetadata(client, flowId, local, remoteFlow, verbose, counts) {
+    // 1. Flow-level fields (title, description, runner type)
+    if (remoteFlow && shouldUpdateFlow(local, remoteFlow)) {
+        try {
+            const updateRequest = {
+                idn: local.idn,
+                title: local.title,
+                description: local.description ?? '',
+                default_runner_type: local.default_runner_type,
+                default_model: local.default_model
+            };
+            await updateFlow(client, flowId, updateRequest);
+            counts.flowsUpdated++;
+            if (verbose) {
+                console.log(`    ↑ Updated flow metadata: ${local.idn} (title: "${remoteFlow.title}" → "${local.title}")`);
+            }
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            counts.errors.push(`Failed to update flow ${local.idn}: ${msg}`);
+            console.error(`    ❌ Failed to update flow ${local.idn}: ${msg}`);
+        }
+    }
+    // 2. Events
+    let remoteEvents = [];
+    try {
+        remoteEvents = await listFlowEvents(client, flowId);
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        counts.errors.push(`Failed to list events for flow ${local.idn}: ${msg}`);
+        return;
+    }
+    const localEvents = local.events ?? [];
+    const remoteByIdn = new Map(remoteEvents.map(e => [e.idn, e]));
+    const localByIdn = new Map(localEvents.map(e => [e.idn, e]));
+    // Create or update events present locally
+    for (const localEvent of localEvents) {
+        const remote = remoteByIdn.get(localEvent.idn);
+        if (!remote) {
+            // Create
+            try {
+                await createFlowEvent(client, flowId, buildEventCreateRequest(localEvent));
+                counts.eventsCreated++;
+                if (verbose)
+                    console.log(`    ↑ Created event: ${local.idn}/${localEvent.idn}`);
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                counts.errors.push(`Failed to create event ${localEvent.idn} in flow ${local.idn}: ${msg}`);
+                console.error(`    ❌ Failed to create event ${localEvent.idn}: ${msg}`);
+            }
+        }
+        else if (flowEventDiffers(localEvent, remote)) {
+            try {
+                await updateFlowEvent(client, remote.id, buildEventUpdateRequest(localEvent));
+                counts.eventsUpdated++;
+                if (verbose)
+                    console.log(`    ↑ Updated event: ${local.idn}/${localEvent.idn}`);
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                counts.errors.push(`Failed to update event ${localEvent.idn} in flow ${local.idn}: ${msg}`);
+                console.error(`    ❌ Failed to update event ${localEvent.idn}: ${msg}`);
+            }
+        }
+    }
+    // Delete events present remotely but missing locally
+    for (const remoteEvent of remoteEvents) {
+        if (!localByIdn.has(remoteEvent.idn)) {
+            try {
+                await deleteFlowEvent(client, remoteEvent.id);
+                counts.eventsDeleted++;
+                if (verbose)
+                    console.log(`    ↑ Deleted event: ${local.idn}/${remoteEvent.idn}`);
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                counts.errors.push(`Failed to delete event ${remoteEvent.idn} in flow ${local.idn}: ${msg}`);
+                console.error(`    ❌ Failed to delete event ${remoteEvent.idn}: ${msg}`);
+            }
+        }
+    }
+    // 3. State fields
+    let remoteStates = [];
+    try {
+        remoteStates = await listFlowStates(client, flowId);
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        counts.errors.push(`Failed to list states for flow ${local.idn}: ${msg}`);
+        return;
+    }
+    const localStates = local.state_fields ?? [];
+    const remoteStatesByIdn = new Map(remoteStates.map(s => [s.idn, s]));
+    const localStatesByIdn = new Map(localStates.map(s => [s.idn, s]));
+    for (const localState of localStates) {
+        const remote = remoteStatesByIdn.get(localState.idn);
+        if (!remote) {
+            try {
+                await createFlowState(client, flowId, buildStateCreateRequest(localState));
+                counts.statesCreated++;
+                if (verbose)
+                    console.log(`    ↑ Created state: ${local.idn}/${localState.idn}`);
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                counts.errors.push(`Failed to create state ${localState.idn} in flow ${local.idn}: ${msg}`);
+                console.error(`    ❌ Failed to create state ${localState.idn}: ${msg}`);
+            }
+        }
+        else if (flowStateDiffers(localState, remote)) {
+            try {
+                await updateFlowState(client, remote.id, buildStateUpdateRequest(localState));
+                counts.statesUpdated++;
+                if (verbose)
+                    console.log(`    ↑ Updated state: ${local.idn}/${localState.idn}`);
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                counts.errors.push(`Failed to update state ${localState.idn} in flow ${local.idn}: ${msg}`);
+                console.error(`    ❌ Failed to update state ${localState.idn}: ${msg}`);
+            }
+        }
+    }
+    for (const remoteState of remoteStates) {
+        if (!localStatesByIdn.has(remoteState.idn)) {
+            try {
+                await deleteFlowState(client, remoteState.id);
+                counts.statesDeleted++;
+                if (verbose)
+                    console.log(`    ↑ Deleted state: ${local.idn}/${remoteState.idn}`);
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                counts.errors.push(`Failed to delete state ${remoteState.idn} in flow ${local.idn}: ${msg}`);
+                console.error(`    ❌ Failed to delete state ${remoteState.idn}: ${msg}`);
+            }
+        }
+    }
+}
+/**
+ * Combined count of operations across all categories.
+ */
+export function totalFlowSyncOps(counts) {
+    return (counts.flowsUpdated +
+        counts.eventsCreated + counts.eventsUpdated + counts.eventsDeleted +
+        counts.statesCreated + counts.statesUpdated + counts.statesDeleted);
+}
+/**
+ * Human-readable summary line for the push report.
+ */
+export function describeFlowSyncCounts(counts) {
+    const parts = [];
+    if (counts.flowsUpdated)
+        parts.push(`${counts.flowsUpdated} flow(s)`);
+    if (counts.eventsCreated || counts.eventsUpdated || counts.eventsDeleted) {
+        const eventOps = [];
+        if (counts.eventsCreated)
+            eventOps.push(`+${counts.eventsCreated}`);
+        if (counts.eventsUpdated)
+            eventOps.push(`~${counts.eventsUpdated}`);
+        if (counts.eventsDeleted)
+            eventOps.push(`-${counts.eventsDeleted}`);
+        parts.push(`events ${eventOps.join('/')}`);
+    }
+    if (counts.statesCreated || counts.statesUpdated || counts.statesDeleted) {
+        const stateOps = [];
+        if (counts.statesCreated)
+            stateOps.push(`+${counts.statesCreated}`);
+        if (counts.statesUpdated)
+            stateOps.push(`~${counts.statesUpdated}`);
+        if (counts.statesDeleted)
+            stateOps.push(`-${counts.statesDeleted}`);
+        parts.push(`states ${stateOps.join('/')}`);
+    }
+    return parts.join(', ');
+}
+//# sourceMappingURL=flow-metadata.js.map

package/dist/sync/json-attr-utils.d.ts

@@ -8,7 +8,7 @@
  * `value_type: json`. The API may return the `value` field as either a
  * STRING containing JSON or as an already-parsed OBJECT.
  *
- * Without normalization, two bugs leak through:
+ * Without normalization, several bugs leak through:
  *
  * 1. When the API returns the value as an OBJECT, `yaml.dump` serializes
  *    it as a YAML structure (mappings/sequences). Pushing back then sends
@@ -21,10 +21,25 @@
  *    string vs object representations it triggers spurious pushes that
  *    overwrite the canvas with the wrong shape (Builder shows blank).
  *
- * The fix is conservative: for `value_type: json` only, always coerce the
- * value to a STRING when persisting and when pushing, and use canonical
- * JSON for comparisons. String-typed values in the wild are left
- * untouched, so no churn for the majority of attributes.
+ * 3. (Bug 3.7.2-a) Canvas JSON strings with structural newlines (real
+ *    U+000A between tokens) can be emitted by yaml.dump as double-quoted
+ *    scalars with `\n` escape sequences. patchYamlToPyyaml then converts
+ *    those to single-quoted YAML scalars, where `\n` is treated as two
+ *    literal chars (backslash + n). On push the platform stores those
+ *    literal chars and the Builder calls JSON.parse, which fails on
+ *    backslash-n as structural whitespace.
+ *
+ * 4. (Bug 3.7.2-b) Canvas body text contains Markdown with `\_`
+ *    (backslash + underscore). `\_` is not a valid JSON escape sequence
+ *    per RFC 8259 (valid ones: " \ / b f n r t uXXXX). Chrome V8's
+ *    JSON.parse is strict: it throws SyntaxError on `\_`, silently
+ *    blanking the Builder.
+ *
+ * The fix for (3) and (4): for `value_type: json` string values, strip
+ * invalid escape sequences then compact via JSON.parse + JSON.stringify.
+ * Compaction removes structural newlines and re-serializes all string
+ * values with only valid JSON escapes, producing a single-line string
+ * that round-trips through YAML without corruption.
  */
 /**
  * True if the attribute is a JSON-typed attribute (case- and
@@ -32,26 +47,40 @@
  * `ValueType.JSON`, etc.).
  */
 export declare function isJsonValueType(valueType: unknown): boolean;
+/**
+ * Fix invalid JSON escape sequences inside JSON string values.
+ *
+ * Per RFC 8259, valid escape sequences inside a JSON string are:
+ *   \" \\ \/ \b \f \n \r \t \uXXXX
+ * Anything else (e.g. `\_` `\.` from Markdown) is invalid and causes
+ * JSON.parse to throw. Fix: drop the backslash (e.g. `\_` → `_`).
+ *
+ * Only modifies characters inside JSON string values (tracks quote
+ * context). Structural characters outside strings are untouched.
+ */
+export declare function fixInvalidJsonEscapes(s: string): string;
 /**
  * Coerce a JSON-typed attribute's value to a STRING suitable for storage
  * in attributes.yaml and for sending to the platform.
  *
  * - `null` / `undefined` → `''`
  * - object → compact JSON string (`JSON.stringify(value)`)
- * - string → returned as-is (we trust the platform's existing format)
+ * - string → fix invalid escapes (e.g. `\_` → `_`), then compact via
+ *            JSON.parse + JSON.stringify. If parsing still fails after
+ *            fixing escapes, return the fixed string as-is.
  * - other → `String(value)`
  *
- * We deliberately do NOT re-format string values, even when they look
- * like JSON. Many existing canvases are stored pretty-printed and
- * reformatting would create huge spurious diffs in users' repos.
+ * Compacting removes structural newlines and guarantees a single-line
+ * string that yaml.dump serializes without escape-sequence corruption in
+ * the patchYamlToPyyaml pass. See module-level comment for full context.
  */
 export declare function normalizeJsonValueForStorage(value: unknown): string;
 /**
  * Canonical comparison for JSON-typed attribute values.
  *
  * Returns the canonical form (compact JSON if parseable, otherwise the
- * raw string). Use this on both sides of a comparison so that pretty- vs
- * compact-printed JSON does not register as a change, and so that an
+ * fixed string). Use this on both sides of a comparison so that pretty-
+ * vs compact-printed JSON does not register as a change, and so that an
  * object on one side equals its stringified form on the other side.
  */
 export declare function canonicalJsonValue(value: unknown): string;

package/dist/sync/json-attr-utils.js

@@ -8,7 +8,7 @@
  * `value_type: json`. The API may return the `value` field as either a
  * STRING containing JSON or as an already-parsed OBJECT.
  *
- * Without normalization, two bugs leak through:
+ * Without normalization, several bugs leak through:
  *
  * 1. When the API returns the value as an OBJECT, `yaml.dump` serializes
  *    it as a YAML structure (mappings/sequences). Pushing back then sends
@@ -21,10 +21,25 @@
  *    string vs object representations it triggers spurious pushes that
  *    overwrite the canvas with the wrong shape (Builder shows blank).
  *
- * The fix is conservative: for `value_type: json` only, always coerce the
- * value to a STRING when persisting and when pushing, and use canonical
- * JSON for comparisons. String-typed values in the wild are left
- * untouched, so no churn for the majority of attributes.
+ * 3. (Bug 3.7.2-a) Canvas JSON strings with structural newlines (real
+ *    U+000A between tokens) can be emitted by yaml.dump as double-quoted
+ *    scalars with `\n` escape sequences. patchYamlToPyyaml then converts
+ *    those to single-quoted YAML scalars, where `\n` is treated as two
+ *    literal chars (backslash + n). On push the platform stores those
+ *    literal chars and the Builder calls JSON.parse, which fails on
+ *    backslash-n as structural whitespace.
+ *
+ * 4. (Bug 3.7.2-b) Canvas body text contains Markdown with `\_`
+ *    (backslash + underscore). `\_` is not a valid JSON escape sequence
+ *    per RFC 8259 (valid ones: " \ / b f n r t uXXXX). Chrome V8's
+ *    JSON.parse is strict: it throws SyntaxError on `\_`, silently
+ *    blanking the Builder.
+ *
+ * The fix for (3) and (4): for `value_type: json` string values, strip
+ * invalid escape sequences then compact via JSON.parse + JSON.stringify.
+ * Compaction removes structural newlines and re-serializes all string
+ * values with only valid JSON escapes, producing a single-line string
+ * that round-trips through YAML without corruption.
  */
 /**
  * True if the attribute is a JSON-typed attribute (case- and
@@ -37,24 +52,84 @@ export function isJsonValueType(valueType) {
     const lower = valueType.toLowerCase();
     return lower === 'json' || lower.endsWith('.json');
 }
+/**
+ * Fix invalid JSON escape sequences inside JSON string values.
+ *
+ * Per RFC 8259, valid escape sequences inside a JSON string are:
+ *   \" \\ \/ \b \f \n \r \t \uXXXX
+ * Anything else (e.g. `\_` `\.` from Markdown) is invalid and causes
+ * JSON.parse to throw. Fix: drop the backslash (e.g. `\_` → `_`).
+ *
+ * Only modifies characters inside JSON string values (tracks quote
+ * context). Structural characters outside strings are untouched.
+ */
+export function fixInvalidJsonEscapes(s) {
+    const VALID_ESCAPES = new Set(['"', '\\', '/', 'b', 'f', 'n', 'r', 't', 'u']);
+    const result = [];
+    let inString = false;
+    let i = 0;
+    while (i < s.length) {
+        const c = s[i];
+        if (inString) {
+            if (c === '\\' && i + 1 < s.length) {
+                const next = s[i + 1];
+                if (VALID_ESCAPES.has(next)) {
+                    result.push(c, next);
+                }
+                else {
+                    result.push(next); // drop the backslash — \_ → _, etc.
+                }
+                i += 2;
+                continue;
+            }
+            else if (c === '"') {
+                inString = false;
+                result.push(c);
+            }
+            else {
+                result.push(c);
+            }
+        }
+        else {
+            if (c === '"') {
+                inString = true;
+                result.push(c);
+            }
+            else {
+                result.push(c);
+            }
+        }
+        i++;
+    }
+    return result.join('');
+}
 /**
  * Coerce a JSON-typed attribute's value to a STRING suitable for storage
  * in attributes.yaml and for sending to the platform.
  *
  * - `null` / `undefined` → `''`
  * - object → compact JSON string (`JSON.stringify(value)`)
- * - string → returned as-is (we trust the platform's existing format)
+ * - string → fix invalid escapes (e.g. `\_` → `_`), then compact via
+ *            JSON.parse + JSON.stringify. If parsing still fails after
+ *            fixing escapes, return the fixed string as-is.
  * - other → `String(value)`
  *
- * We deliberately do NOT re-format string values, even when they look
- * like JSON. Many existing canvases are stored pretty-printed and
- * reformatting would create huge spurious diffs in users' repos.
+ * Compacting removes structural newlines and guarantees a single-line
+ * string that yaml.dump serializes without escape-sequence corruption in
+ * the patchYamlToPyyaml pass. See module-level comment for full context.
  */
 export function normalizeJsonValueForStorage(value) {
     if (value == null)
         return '';
-    if (typeof value === 'string')
-        return value;
+    if (typeof value === 'string') {
+        const fixed = fixInvalidJsonEscapes(value);
+        try {
+            return JSON.stringify(JSON.parse(fixed));
+        }
+        catch {
+            return fixed;
+        }
+    }
     if (typeof value === 'object') {
         try {
             return JSON.stringify(value);
@@ -69,20 +144,12 @@ export function normalizeJsonValueForStorage(value) {
  * Canonical comparison for JSON-typed attribute values.
  *
  * Returns the canonical form (compact JSON if parseable, otherwise the
- * raw string). Use this on both sides of a comparison so that pretty- vs
- * compact-printed JSON does not register as a change, and so that an
+ * fixed string). Use this on both sides of a comparison so that pretty-
+ * vs compact-printed JSON does not register as a change, and so that an
  * object on one side equals its stringified form on the other side.
  */
 export function canonicalJsonValue(value) {
-    const stringified = normalizeJsonValueForStorage(value);
-    if (stringified === '')
-        return '';
-    try {
-        return JSON.stringify(JSON.parse(stringified));
-    }
-    catch {
-        return stringified;
-    }
+    return normalizeJsonValueForStorage(value);
 }
 /**
  * True if two JSON-typed attribute values are semantically equal.

package/dist/sync/push.js

@@ -1,8 +1,8 @@
 /**
  * Push operations for changed files
  */
-import { updateSkill, createAgent, createFlow, createSkill, publishFlow } from '../api.js';
-import { ensureState, mapPath, skillMetadataPath, projectDir, agentMetadataPath } from '../fsutil.js';
+import { updateSkill, createAgent, createFlow, createSkill, publishFlow, getFlow } from '../api.js';
+import { ensureState, mapPath, skillMetadataPath, projectDir, agentMetadataPath, flowMetadataPath } from '../fsutil.js';
 import { validateSkillFolder, getSingleSkillFile, getExtensionForRunner } from './skill-files.js';
 import fs from 'fs-extra';
 import { sha256, loadHashes, saveHashes } from '../hash.js';
@@ -11,6 +11,7 @@ import { generateFlowsYaml } from './metadata.js';
 import { isProjectMap, isLegacyProjectMap } from './projects.js';
 import { flowsYamlPath } from '../fsutil.js';
 import { pushAllProjectAttributes } from './attributes.js';
+import { syncFlowMetadata, emptyFlowSyncCounts, totalFlowSyncOps, describeFlowSyncCounts } from './flow-metadata.js';
 /**
  * Scan filesystem for local-only entities not in the project map yet
  */
@@ -444,6 +445,68 @@ export async function pushChanged(client, customer, verbose = false, shouldPubli
             }
         }
     }
+    // Sync flow metadata (title, events, state_fields) for any flow whose
+    // metadata.yaml hash has changed. This closes the loop on GH issue #3:
+    // previously push only updated skill scripts, leaving local edits to
+    // flow events and title silently un-synced.
+    const flowSyncCounts = emptyFlowSyncCounts();
+    for (const [projectIdn, projectData] of Object.entries(projects)) {
+        for (const [agentIdn, agentObj] of Object.entries(projectData.agents)) {
+            for (const [flowIdn, flowObj] of Object.entries(agentObj.flows)) {
+                if (!flowObj.id)
+                    continue;
+                const metaPath = flowMetadataPath(customer.idn, projectIdn, agentIdn, flowIdn);
+                if (!(await fs.pathExists(metaPath)))
+                    continue;
+                const metaContent = await fs.readFile(metaPath, 'utf8');
+                const metaHash = sha256(metaContent);
+                const oldHash = hashes[metaPath];
+                if (oldHash === metaHash) {
+                    if (verbose)
+                        console.log(`    ✓ Flow metadata unchanged: ${flowIdn}`);
+                    continue;
+                }
+                if (verbose)
+                    console.log(`    🔄 Flow metadata changed, syncing: ${agentIdn}/${flowIdn}`);
+                let localFlow;
+                try {
+                    localFlow = yaml.load(metaContent);
+                }
+                catch (error) {
+                    console.error(`❌ Failed to parse flow metadata for ${flowIdn}: ${error instanceof Error ? error.message : String(error)}`);
+                    continue;
+                }
+                let remoteFlow = null;
+                try {
+                    remoteFlow = await getFlow(client, flowObj.id);
+                }
+                catch (error) {
+                    // 404 means the flow ID is stale; skip flow-level update but still
+                    // try to sync children since list endpoints may still work.
+                    if (verbose) {
+                        console.log(`    ⚠️  Could not GET flow ${flowIdn}: ${error.response?.status ?? error.message}`);
+                    }
+                }
+                const opsBefore = totalFlowSyncOps(flowSyncCounts);
+                await syncFlowMetadata(client, flowObj.id, localFlow, remoteFlow, verbose, flowSyncCounts);
+                const opsAfter = totalFlowSyncOps(flowSyncCounts);
+                if (opsAfter > opsBefore) {
+                    pushed += (opsAfter - opsBefore);
+                    metadataChanged = true;
+                }
+                // Hash is updated regardless of whether ops happened, so we don't
+                // re-scan the same untouched flow on the next push.
+                newHashes[metaPath] = metaHash;
+            }
+        }
+    }
+    const totalFlowOps = totalFlowSyncOps(flowSyncCounts);
+    if (totalFlowOps > 0) {
+        console.log(`↑ Flow metadata synced: ${describeFlowSyncCounts(flowSyncCounts)}`);
+    }
+    if (flowSyncCounts.errors.length > 0) {
+        console.warn(`⚠️  ${flowSyncCounts.errors.length} flow-metadata error(s) during push.`);
+    }
     if (verbose)
         console.log(`🔄 Scanned ${scanned} files, found ${pushed} changes`);
     // Push project attributes for all projects

package/dist/types.d.ts

@@ -441,6 +441,22 @@ export interface CreateFlowEventRequest {
 export interface CreateFlowEventResponse {
     id: string;
 }
+/**
+ * Payload for PATCH /api/v1/designer/flows/events/{eventId}
+ *
+ * Required fields per probe testing: idn, skill_selector, interrupt_mode.
+ * Sending the full event body is the platform's expected shape.
+ */
+export interface UpdateFlowEventRequest {
+    idn: string;
+    description?: string | null;
+    skill_selector: string;
+    skill_idn?: string | null;
+    state_idn?: string | null;
+    interrupt_mode: string;
+    integration_idn?: string | null;
+    connector_idn?: string | null;
+}
 export interface CreateFlowStateRequest {
     title: string;
     idn: string;
@@ -450,6 +466,27 @@ export interface CreateFlowStateRequest {
 export interface CreateFlowStateResponse {
     id: string;
 }
+/**
+ * Payload for PUT /api/v1/designer/flows/states/{stateId}
+ */
+export interface UpdateFlowStateRequest {
+    title: string;
+    idn: string;
+    default_value?: string;
+    scope: string;
+}
+/**
+ * Payload for PATCH /api/v1/designer/flows/{flowId}
+ *
+ * Empty body returns 500; the platform requires the full descriptor.
+ */
+export interface UpdateFlowRequest {
+    idn: string;
+    title: string;
+    description?: string;
+    default_runner_type: RunnerType;
+    default_model: ModelConfig;
+}
 export interface CreateSkillParameterRequest {
     name: string;
     default_value?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "newo",
-  "version": "3.7.1",
+  "version": "3.7.3",
   "description": "NEWO CLI: Professional command-line tool with modular architecture for NEWO AI Agent development. Features account migration, integration management, webhook automation, AKB knowledge base, project attributes, sandbox testing, IDN-based file management, real-time progress tracking, intelligent sync operations, and comprehensive multi-customer support.",
   "type": "module",
   "bin": {