qlogicagent 2.13.5 → 2.13.6

package/dist/orchestration/workflow/budget-permission-gate.d.ts

@@ -1,85 +0,0 @@
-/**
- * Budget + permission ExecutionGate — the engine half of plan D15 ("无人值守触发须过 budget+权限闸门")
- * and the M2 acceptance "触发式运行受 budget+权限闸门拦截".
- *
- * A workflow run is either ATTENDED (trigger "manual": a human is present and authorizes
- * interactively) or UNATTENDED (trigger "schedule" / "im-message" / "webhook": fired by the
- * trigger layer with nobody watching). This gate enforces two independent guarantees on every
- * node, before it executes:
- *
- *   1. Permission (security, HARD fail-loud) — an unattended run may only execute side-effecting
- *      ("sensitive") node kinds that were EXPLICITLY authorized via `allowUnattendedKinds`. A
- *      sensitive kind that was not pre-authorized throws `WorkflowPermissionDenied` and halts the
- *      run (status "failed"). Pure / control-flow kinds (set/if/loop/merge/passthrough/trigger)
- *      are always allowed. Manual runs skip permission entirely (the user is the authorization).
- *   2. Budget (resumable pause) — every node must pass the per-run budget (D15 "每轮过 budget"):
- *      a hard cap on node executions and an optional wall-clock cap. Exceeding either throws
- *      `WorkflowBudgetExceeded`, which extends the runtime's pause signal, so the run SUSPENDS
- *      with its cache intact (raise the budget, then resume) rather than failing — mirroring the
- *      existing ProductBudgetTracker "exceeded → pause" semantics.
- *
- * Pure and deterministic: no I/O, an injectable clock. fail-loud construction: a non-positive
- * `maxNodeExecutions` (or non-positive `maxDurationMs`) throws — a budget with no ceiling is a
- * silent way to disable the gate, which D15 forbids.
- */
-import { WorkflowPauseSignal, type ExecutionGate } from "./workflow-runtime.js";
-/** The trigger kinds that can start a run. Single source of the union (consumed by the controller). */
-export type WorkflowTriggerKind = "manual" | "schedule" | "im-message" | "webhook" | "intent" | "form";
-/**
- * Node kinds that reach the outside world (network calls, channel sends, agent/tool/mcp side
- * effects). These require explicit authorization to run unattended. Control / data-shaping kinds
- * (set / if / loop / merge / passthrough / trigger) are NOT here — they cannot escape the engine.
- */
-export declare const SENSITIVE_KINDS: ReadonlySet<string>;
-/** Hard, non-resumable denial: an unauthorized side-effecting kind under an unattended trigger. */
-export declare class WorkflowPermissionDenied extends Error {
-    readonly nodeId: string;
-    readonly kind: string;
-    readonly trigger: WorkflowTriggerKind;
-    constructor(nodeId: string, kind: string, trigger: WorkflowTriggerKind);
-}
-/**
- * Budget ceiling reached. Extends WorkflowPauseSignal so the runtime treats it as a graceful,
- * resumable suspension (cache retained) rather than a failure — the caller raises the budget and
- * resumes, and already-completed nodes hit cache.
- */
-export declare class WorkflowBudgetExceeded extends WorkflowPauseSignal {
-    readonly reason: "executions" | "duration";
-    readonly limit: number;
-    constructor(atNodeId: string, reason: "executions" | "duration", limit: number);
-}
-export interface BudgetPermissionGateOptions {
-    /** Trigger kind of THIS run. "manual" = attended (permission skipped); others = unattended. */
-    trigger: WorkflowTriggerKind;
-    /** Hard cap on node executions per run (D15 loop hard-cap is separate, in the scheduler). */
-    maxNodeExecutions: number;
-    /** Optional wall-clock cap in ms; the run pauses once elapsed reaches it. */
-    maxDurationMs?: number;
-    /** Sensitive kinds an UNATTENDED run is allowed to execute. Ignored for manual runs. */
-    allowUnattendedKinds?: readonly string[];
-    /** Injectable clock (ms epoch) for deterministic tests. */
-    now?: () => number;
-}
-export declare class BudgetPermissionGate implements ExecutionGate {
-    private readonly trigger;
-    private maxNodeExecutions;
-    private maxDurationMs?;
-    private readonly allow;
-    private readonly now;
-    private executions;
-    private startedAt;
-    constructor(opts: BudgetPermissionGateOptions);
-    private get unattended();
-    /** Invoked by the runtime before each node executes. Throws to deny (hard) or pause (budget). */
-    check(nodeId: string, kind: string): void;
-    /**
-     * Raise the remaining allowance so a budget-paused run can resume (D15 "抬预算后 resume").
-     * Deltas are ADDED to the current ceilings. fail-loud: a non-positive delta is rejected, and
-     * extending duration is only valid when a duration cap exists (extending an absent cap is a
-     * silent no-op the caller likely did not intend).
-     */
-    extend(delta: {
-        executions?: number;
-        durationMs?: number;
-    }): void;
-}

package/dist/orchestration/workflow/budget-permission-gate.js

@@ -1,134 +0,0 @@
-/**
- * Budget + permission ExecutionGate — the engine half of plan D15 ("无人值守触发须过 budget+权限闸门")
- * and the M2 acceptance "触发式运行受 budget+权限闸门拦截".
- *
- * A workflow run is either ATTENDED (trigger "manual": a human is present and authorizes
- * interactively) or UNATTENDED (trigger "schedule" / "im-message" / "webhook": fired by the
- * trigger layer with nobody watching). This gate enforces two independent guarantees on every
- * node, before it executes:
- *
- *   1. Permission (security, HARD fail-loud) — an unattended run may only execute side-effecting
- *      ("sensitive") node kinds that were EXPLICITLY authorized via `allowUnattendedKinds`. A
- *      sensitive kind that was not pre-authorized throws `WorkflowPermissionDenied` and halts the
- *      run (status "failed"). Pure / control-flow kinds (set/if/loop/merge/passthrough/trigger)
- *      are always allowed. Manual runs skip permission entirely (the user is the authorization).
- *   2. Budget (resumable pause) — every node must pass the per-run budget (D15 "每轮过 budget"):
- *      a hard cap on node executions and an optional wall-clock cap. Exceeding either throws
- *      `WorkflowBudgetExceeded`, which extends the runtime's pause signal, so the run SUSPENDS
- *      with its cache intact (raise the budget, then resume) rather than failing — mirroring the
- *      existing ProductBudgetTracker "exceeded → pause" semantics.
- *
- * Pure and deterministic: no I/O, an injectable clock. fail-loud construction: a non-positive
- * `maxNodeExecutions` (or non-positive `maxDurationMs`) throws — a budget with no ceiling is a
- * silent way to disable the gate, which D15 forbids.
- */
-import { WorkflowPauseSignal } from "./workflow-runtime.js";
-import { isUnattendedTrigger } from "./node-schema.js";
-/**
- * Node kinds that reach the outside world (network calls, channel sends, agent/tool/mcp side
- * effects). These require explicit authorization to run unattended. Control / data-shaping kinds
- * (set / if / loop / merge / passthrough / trigger) are NOT here — they cannot escape the engine.
- */
-export const SENSITIVE_KINDS = new Set([
-    "agent",
-    "tool",
-    "http",
-    "mcp",
-    "channel",
-    "im",
-]);
-/** Hard, non-resumable denial: an unauthorized side-effecting kind under an unattended trigger. */
-export class WorkflowPermissionDenied extends Error {
-    nodeId;
-    kind;
-    trigger;
-    constructor(nodeId, kind, trigger) {
-        super(`Permission denied: node "${nodeId}" (kind "${kind}") may not run under unattended ` +
-            `trigger "${trigger}". Authorize it by adding "${kind}" to allowUnattendedKinds.`);
-        this.nodeId = nodeId;
-        this.kind = kind;
-        this.trigger = trigger;
-        this.name = "WorkflowPermissionDenied";
-    }
-}
-/**
- * Budget ceiling reached. Extends WorkflowPauseSignal so the runtime treats it as a graceful,
- * resumable suspension (cache retained) rather than a failure — the caller raises the budget and
- * resumes, and already-completed nodes hit cache.
- */
-export class WorkflowBudgetExceeded extends WorkflowPauseSignal {
-    reason;
-    limit;
-    constructor(atNodeId, reason, limit) {
-        super(atNodeId);
-        this.reason = reason;
-        this.limit = limit;
-        this.name = "WorkflowBudgetExceeded";
-        this.message = `Budget exceeded (${reason} limit ${limit}) before node "${atNodeId}"`;
-    }
-}
-export class BudgetPermissionGate {
-    trigger;
-    maxNodeExecutions;
-    maxDurationMs;
-    allow;
-    now;
-    executions = 0;
-    startedAt = -1;
-    constructor(opts) {
-        if (!Number.isInteger(opts.maxNodeExecutions) || opts.maxNodeExecutions <= 0) {
-            throw new Error(`BudgetPermissionGate: maxNodeExecutions must be a positive integer, got ${opts.maxNodeExecutions}`);
-        }
-        if (opts.maxDurationMs !== undefined && !(opts.maxDurationMs > 0)) {
-            throw new Error(`BudgetPermissionGate: maxDurationMs must be greater than 0 when provided, got ${opts.maxDurationMs}`);
-        }
-        this.trigger = opts.trigger;
-        this.maxNodeExecutions = opts.maxNodeExecutions;
-        this.maxDurationMs = opts.maxDurationMs;
-        this.allow = new Set(opts.allowUnattendedKinds ?? []);
-        this.now = opts.now ?? (() => Date.now());
-    }
-    get unattended() {
-        return isUnattendedTrigger(this.trigger);
-    }
-    /** Invoked by the runtime before each node executes. Throws to deny (hard) or pause (budget). */
-    check(nodeId, kind) {
-        // 1) Permission first: a forbidden side effect must never run, regardless of budget.
-        if (this.unattended && SENSITIVE_KINDS.has(kind) && !this.allow.has(kind)) {
-            throw new WorkflowPermissionDenied(nodeId, kind, this.trigger);
-        }
-        // 2) Budget: start the clock on the first checked node so duration measures real run time.
-        if (this.startedAt < 0)
-            this.startedAt = this.now();
-        if (this.maxDurationMs !== undefined && this.now() - this.startedAt >= this.maxDurationMs) {
-            throw new WorkflowBudgetExceeded(nodeId, "duration", this.maxDurationMs);
-        }
-        if (this.executions >= this.maxNodeExecutions) {
-            throw new WorkflowBudgetExceeded(nodeId, "executions", this.maxNodeExecutions);
-        }
-        this.executions++;
-    }
-    /**
-     * Raise the remaining allowance so a budget-paused run can resume (D15 "抬预算后 resume").
-     * Deltas are ADDED to the current ceilings. fail-loud: a non-positive delta is rejected, and
-     * extending duration is only valid when a duration cap exists (extending an absent cap is a
-     * silent no-op the caller likely did not intend).
-     */
-    extend(delta) {
-        if (delta.executions !== undefined) {
-            if (!Number.isInteger(delta.executions) || delta.executions <= 0) {
-                throw new Error(`BudgetPermissionGate.extend: executions delta must be a positive integer, got ${delta.executions}`);
-            }
-            this.maxNodeExecutions += delta.executions;
-        }
-        if (delta.durationMs !== undefined) {
-            if (!(delta.durationMs > 0)) {
-                throw new Error(`BudgetPermissionGate.extend: durationMs delta must be greater than 0, got ${delta.durationMs}`);
-            }
-            if (this.maxDurationMs === undefined) {
-                throw new Error("BudgetPermissionGate.extend: cannot extend duration on a gate with no duration cap");
-            }
-            this.maxDurationMs += delta.durationMs;
-        }
-    }
-}

package/dist/orchestration/workflow/builtin-executors.d.ts

@@ -1,18 +0,0 @@
-/**
- * Built-in deterministic NodeExecutors (M2).
- *
- * These are REAL node implementations (not mocks): pure data transforms used by automation
- * workflows. Host-backed kinds (agent/tool/http/mcp/channel) are injected separately so the
- * engine stays a pure executor (plan D12/D13).
- *
- * Note: "loop" is NOT here — loop control is owned by the runtime (DagScheduler.decideLoop),
- * not a user executor.
- */
-import type { NodeExecutor } from "./node-schema.js";
-/**
- * Params the runtime must NOT pre-resolve at node level (D34): these carry per-item
- * expressions ($json = each item) that the executor evaluates itself — same restricted
- * language, same evaluator, just per-item invocation.
- */
-export declare const RAW_PARAM_KEYS: Record<string, readonly string[]>;
-export declare const builtinExecutors: Record<string, NodeExecutor>;

package/dist/orchestration/workflow/builtin-executors.js

@@ -1,191 +0,0 @@
-/**
- * Built-in deterministic NodeExecutors (M2).
- *
- * These are REAL node implementations (not mocks): pure data transforms used by automation
- * workflows. Host-backed kinds (agent/tool/http/mcp/channel) are injected separately so the
- * engine stays a pure executor (plan D12/D13).
- *
- * Note: "loop" is NOT here — loop control is owned by the runtime (DagScheduler.decideLoop),
- * not a user executor.
- */
-import { resolveBinding } from "./expression.js";
-/**
- * Params the runtime must NOT pre-resolve at node level (D34): these carry per-item
- * expressions ($json = each item) that the executor evaluates itself — same restricted
- * language, same evaluator, just per-item invocation.
- */
-export const RAW_PARAM_KEYS = {
-    filter: ["condition"],
-    transform: ["mapping"],
-};
-function itemCtx(ctx, item) {
-    return { json: item.json, vars: ctx.vars, trigger: ctx.trigger, now: ctx.now };
-}
-/** `set`: emit a single DataItem. params.json (resolved object) becomes the item's json. */
-const setExec = (_inputs, params) => {
-    const json = params.json && typeof params.json === "object" && !Array.isArray(params.json)
-        ? params.json
-        : { value: params.json ?? params.value ?? null };
-    return { outputs: { default: [{ json }] } };
-};
-/** `passthrough`: forward the default input port unchanged. */
-const passthroughExec = (inputs) => {
-    return { outputs: { default: inputs.default ?? [] } };
-};
-/** `merge`: concatenate items from every input port into the default output port. */
-const mergeExec = (inputs) => {
-    const all = [];
-    for (const port of Object.keys(inputs))
-        all.push(...inputs[port]);
-    return { outputs: { default: all } };
-};
-/**
- * `if`: route on a boolean condition. params.condition is resolved (by the runtime's expression
- * layer) to a value; truthy → fire "true", else "false". The chosen port carries the input items.
- */
-const ifExec = (inputs, params) => {
-    const cond = Boolean(params.condition);
-    const port = cond ? "true" : "false";
-    const items = inputs.default ?? [];
-    const outputs = { true: [], false: [] };
-    outputs[port] = items;
-    return { outputs, firedPorts: [port] };
-};
-/**
- * `trigger`: a preset entry node (spec §B3). Emits the run's trigger payload (or, for manual
- * runs, params.payload) as a single DataItem so downstream nodes can reference $trigger / inputs.
- */
-const triggerExec = (_inputs, params, ctx) => {
-    const payload = ctx.trigger ??
-        (params.payload && typeof params.payload === "object" && !Array.isArray(params.payload)
-            ? params.payload
-            : {});
-    return { outputs: { default: [{ json: payload }] } };
-};
-/**
- * `filter` (D34): keep only items whose per-item condition is truthy. params.condition is a
- * RAW `{{ }}` expression evaluated per item with $json = that item (RAW_PARAM_KEYS).
- */
-const filterExec = (inputs, params, ctx) => {
-    const condition = params.condition;
-    if (typeof condition !== "string" || !condition.trim()) {
-        throw new Error(`filter node requires string param "condition" (per-item {{ }} expression over $json)`);
-    }
-    const items = inputs.default ?? [];
-    const kept = items.filter((item) => Boolean(resolveBinding(condition, itemCtx(ctx, item))));
-    return { outputs: { default: kept } };
-};
-/**
- * `switch` (D34): multi-way branch. params.cases = [{port, condition}] — conditions are resolved
- * at node level (like `if`); the FIRST truthy case fires, else params.defaultPort (default "default").
- * Declare the ports in the node's outPorts.
- */
-const switchExec = (inputs, params) => {
-    const cases = Array.isArray(params.cases) ? params.cases : [];
-    if (cases.length === 0)
-        throw new Error(`switch node requires non-empty param "cases" ([{port, condition}])`);
-    const items = inputs.default ?? [];
-    const fallback = typeof params.defaultPort === "string" && params.defaultPort ? params.defaultPort : "default";
-    let fired = fallback;
-    for (const c of cases) {
-        if (typeof c.port !== "string" || !c.port)
-            throw new Error(`switch case requires string "port"`);
-        if (Boolean(c.condition)) {
-            fired = c.port;
-            break;
-        }
-    }
-    const outputs = {};
-    for (const c of cases)
-        if (typeof c.port === "string")
-            outputs[c.port] = [];
-    outputs[fallback] = outputs[fallback] ?? [];
-    outputs[fired] = items;
-    return { outputs, firedPorts: [fired] };
-};
-/** `aggregate` (D34): collapse all default-port items into ONE item {json:{items,count}} (split→merge 收拢). */
-const aggregateExec = (inputs) => {
-    const items = inputs.default ?? [];
-    return { outputs: { default: [{ json: { items: items.map((i) => i.json), count: items.length } }] } };
-};
-/**
- * `transform` (D34): per-item restricted mapping — params.mapping = {outKey: "{{ expr }}"}
- * evaluated per item with $json bound (RAW_PARAM_KEYS). NO arbitrary code, ever (D6 hard line);
- * the whitelist functions of the expression language are the entire surface.
- */
-const transformExec = (inputs, params, ctx) => {
-    const mapping = params.mapping;
-    if (typeof mapping !== "object" || mapping === null || Array.isArray(mapping)) {
-        throw new Error(`transform node requires object param "mapping" ({outKey: "{{ expr }}"})`);
-    }
-    const entries = Object.entries(mapping);
-    if (entries.length === 0)
-        throw new Error(`transform node: "mapping" must have at least one key`);
-    const items = inputs.default ?? [];
-    const out = items.map((item) => {
-        const json = {};
-        for (const [key, expr] of entries) {
-            json[key] = typeof expr === "string" ? resolveBinding(expr, itemCtx(ctx, item)) : expr;
-        }
-        return { json };
-    });
-    return { outputs: { default: out } };
-};
-/**
- * `wait` (D34): two modes, one node.
- *  - delay (default): params.ms (1..3_600_000) — cancel-aware sleep of the BRANCH, not the engine.
- *  - until webhook: params.until="webhook" + params.path — suspend until that webhook path is
- *    called (host-backed await-in-memory, same posture as approval: run stays "running", restart
- *    loses the wait and fails loud, checkpoint replay recovers prior steps on re-run).
- */
-const waitExec = async (inputs, params, ctx) => {
-    if (params.until === "webhook") {
-        const host = ctx.host;
-        if (!host?.waitWebhook)
-            throw new Error(`wait(until=webhook) requires an ExecutorHost with waitWebhook`);
-        const rawPath = typeof params.path === "string" && params.path.trim() ? params.path.trim() : "";
-        if (!rawPath)
-            throw new Error(`wait(until=webhook) requires param "path" (the webhook path to wait for)`);
-        const timeoutMs = typeof params.timeoutMs === "number" && params.timeoutMs > 0 ? params.timeoutMs : undefined;
-        const payload = await host.waitWebhook({
-            path: rawPath.startsWith("/") ? rawPath : `/${rawPath}`,
-            nodeId: ctx.nodeId,
-            workflowId: ctx.workflowId,
-            timeoutMs,
-            signal: ctx.signal,
-        });
-        return { outputs: { default: [...(inputs.default ?? []), { json: { webhook: payload } }] } };
-    }
-    const ms = Number(params.ms);
-    if (!Number.isFinite(ms) || ms < 1 || ms > 3_600_000) {
-        throw new Error(`wait node requires param "ms" in 1..3600000`);
-    }
-    await new Promise((resolve, reject) => {
-        const timer = setTimeout(() => { ctx.signal?.removeEventListener("abort", onAbort); resolve(); }, ms);
-        const onAbort = () => { clearTimeout(timer); reject(new Error("wait node canceled")); };
-        ctx.signal?.addEventListener("abort", onAbort, { once: true });
-    });
-    return { outputs: { default: inputs.default ?? [] } };
-};
-/**
- * `manual` (IT-11): explicit placeholder for n8n-imported steps we cannot faithfully convert
- * (Code nodes, unmapped types). Runs FAIL LOUD — never a silent passthrough that changes
- * semantics. The original n8n type/params stay on the node for the human migration pass.
- */
-const manualExec = (_inputs, params, ctx) => {
-    const origin = typeof params._n8nType === "string" ? `(来自 n8n 节点「${params._n8nType}」)` : "";
-    throw new Error(`节点「${ctx.nodeId}」${origin}导入时未能自动转换,请打开节点完成人工迁移后再运行`);
-};
-export const builtinExecutors = {
-    set: setExec,
-    passthrough: passthroughExec,
-    merge: mergeExec,
-    if: ifExec,
-    trigger: triggerExec,
-    filter: filterExec,
-    switch: switchExec,
-    aggregate: aggregateExec,
-    transform: transformExec,
-    wait: waitExec,
-    manual: manualExec,
-};

package/dist/orchestration/workflow/capability-catalog.d.ts

@@ -1,64 +0,0 @@
-/**
- * Capability Catalog (spec D24) — THE single source of truth for "what can a workflow node
- * actually reference". One catalog feeds five consumers: the AI graph builder's prompt +
- * list_capabilities tool, the canvas "+" suggestions, the advanced node library, the node
- * config dropdowns, and Hub bundle `requires` verification.
- *
- * Channels are deliberately ABSENT here: the engine is channel-opaque (delivery lives in the
- * gateway), so the gateway merges its own channel registry into `workflow.capabilities` /
- * `x/workflow.chat` responses. Everything else enumerates REAL runtime state — no static lists.
- */
-import type { ToolDefinition } from "../../protocol/wire/chat-types.js";
-export type CapabilityCategory = "agent" | "tool" | "skill" | "mcp" | "memory" | "channel" | "control";
-export interface CapabilityEntry {
-    category: CapabilityCategory;
-    /** Workflow node kind that uses this capability. */
-    kind: string;
-    /** Concrete reference: tool name / agent id / "server.tool" / memory op / channel name. */
-    id: string;
-    /** Human-readable name for pickers and the AI prompt. */
-    label: string;
-    description?: string;
-    /** JSON schema of the underlying callable's input (tools/mcp), when known. */
-    paramsSchema?: Record<string, unknown>;
-    /** Prefill for add_node params when the user picks this entry. */
-    paramsTemplate?: Record<string, unknown>;
-}
-export interface CapabilityCatalogDeps {
-    getToolManifest(): ToolDefinition[];
-    /** Available agent ids a workflow `agent` node can target (self first). */
-    listAgentIds(): {
-        id: string;
-        name?: string;
-    }[];
-    /** Project root for project-scoped skill resolution. */
-    projectRoot: string;
-}
-/** Enumerate every capability a workflow in `projectRoot` can reference right now. */
-export declare function buildCapabilityCatalog(deps: CapabilityCatalogDeps): CapabilityEntry[];
-/**
- * Compact catalog text for the AI graph builder's system prompt: category headers + `id — desc`
- * lines, hard-capped per category so huge tool sets don't blow the prompt (the agent uses the
- * list_capabilities tool for the long tail).
- */
-export declare function renderCatalogForPrompt(entries: CapabilityEntry[], perCategoryCap?: number): string;
-/** Refs the validator extracts from a def to check against the catalog (anti-hallucination). */
-export declare function collectCapabilityRefs(def: {
-    nodes: {
-        id: string;
-        kind: string;
-        params?: Record<string, unknown>;
-    }[];
-}): {
-    category: CapabilityCategory;
-    ref: string;
-    nodeId: string;
-}[];
-/** Validate def refs against the catalog. Returns human-readable errors (empty = clean). */
-export declare function validateCapabilityRefs(def: {
-    nodes: {
-        id: string;
-        kind: string;
-        params?: Record<string, unknown>;
-    }[];
-}, entries: CapabilityEntry[]): string[];

package/dist/orchestration/workflow/capability-catalog.js

@@ -1,166 +0,0 @@
-/**
- * Capability Catalog (spec D24) — THE single source of truth for "what can a workflow node
- * actually reference". One catalog feeds five consumers: the AI graph builder's prompt +
- * list_capabilities tool, the canvas "+" suggestions, the advanced node library, the node
- * config dropdowns, and Hub bundle `requires` verification.
- *
- * Channels are deliberately ABSENT here: the engine is channel-opaque (delivery lives in the
- * gateway), so the gateway merges its own channel registry into `workflow.capabilities` /
- * `x/workflow.chat` responses. Everything else enumerates REAL runtime state — no static lists.
- */
-import { resolveActiveSkills } from "../../runtime/infra/skill-resolver.js";
-const MCP_TOOL_PREFIX = "mcp__";
-/** Internal/meta tools that make no sense as standalone workflow steps. */
-const TOOL_BLOCKLIST = new Set(["skill", "workflow", "ask_user"]);
-function localizedFallback(text) {
-    return text?.fallback;
-}
-/** Enumerate every capability a workflow in `projectRoot` can reference right now. */
-export function buildCapabilityCatalog(deps) {
-    const entries = [];
-    // ── agents ──
-    for (const agent of deps.listAgentIds()) {
-        entries.push({
-            category: "agent",
-            kind: "agent",
-            id: agent.id,
-            label: agent.name ?? agent.id,
-            description: agent.id === "qlogicagent" ? "小智本体(默认)" : undefined,
-            paramsTemplate: { prompt: "", ...(agent.id === "qlogicagent" ? {} : { agentId: agent.id }) },
-        });
-    }
-    // ── tools + mcp (one manifest, two categories) ──
-    const mcpByServer = new Map();
-    for (const def of deps.getToolManifest()) {
-        const name = def.function.name;
-        if (name.startsWith(MCP_TOOL_PREFIX)) {
-            const rest = name.slice(MCP_TOOL_PREFIX.length);
-            const sep = rest.indexOf("__");
-            if (sep <= 0)
-                continue;
-            const server = rest.slice(0, sep);
-            const tool = rest.slice(sep + 2);
-            const list = mcpByServer.get(server) ?? [];
-            list.push({ tool, def });
-            mcpByServer.set(server, list);
-            continue;
-        }
-        if (TOOL_BLOCKLIST.has(name))
-            continue;
-        entries.push({
-            category: "tool",
-            kind: "tool",
-            id: name,
-            label: localizedFallback(def.meta?.displayName) ?? name,
-            description: localizedFallback(def.meta?.displayDescription) ?? def.function.description,
-            paramsSchema: def.function.parameters,
-            paramsTemplate: { tool: name, args: {} },
-        });
-    }
-    for (const [server, tools] of mcpByServer) {
-        for (const { tool, def } of tools) {
-            entries.push({
-                category: "mcp",
-                kind: "mcp",
-                id: `${server}.${tool}`,
-                label: `${server} / ${tool}`,
-                description: def.function.description,
-                paramsSchema: def.function.parameters,
-                paramsTemplate: { server, tool, args: {} },
-            });
-        }
-    }
-    // ── skills (project-aware enablement) ──
-    for (const skill of resolveActiveSkills(deps.projectRoot)) {
-        entries.push({
-            category: "skill",
-            kind: "skill",
-            id: skill.name,
-            label: skill.name,
-            description: skill.description,
-            paramsTemplate: { skill: skill.name, args: "" },
-        });
-    }
-    // ── control / data-shaping builtins + advanced steps (D34;静态=引擎内建即真相) ──
-    entries.push({ category: "control", kind: "if", id: "if", label: "条件分支", description: "按条件走 true/false", paramsTemplate: { condition: "" } }, { category: "control", kind: "switch", id: "switch", label: "多路分支", description: "多个条件分支,首个为真生效", paramsTemplate: { cases: [{ port: "a", condition: "" }], defaultPort: "default" } }, { category: "control", kind: "filter", id: "filter", label: "过滤", description: "逐条过滤数据($json 指当前条)", paramsTemplate: { condition: "{{ $json.score }}" } }, { category: "control", kind: "transform", id: "transform", label: "字段映射", description: "逐条映射出新字段(受限表达式,非代码)", paramsTemplate: { mapping: { out: "{{ $json.value }}" } } }, { category: "control", kind: "aggregate", id: "aggregate", label: "汇总", description: "把多条收拢成一条 {items,count}", paramsTemplate: {} }, { category: "control", kind: "wait", id: "wait", label: "等待", description: "延时(可取消)", paramsTemplate: { ms: 60000 } }, { category: "control", kind: "set", id: "set", label: "赋值", description: "产出一条固定/表达式数据", paramsTemplate: { json: {} } }, { category: "control", kind: "merge", id: "merge", label: "合并", description: "多入口数据并流", paramsTemplate: {} }, { category: "control", kind: "subworkflow", id: "subworkflow", label: "子流程", description: "调用另一个工作流作为一步", paramsTemplate: { workflowId: "" } }, { category: "control", kind: "approval", id: "approval", label: "人工审批", description: "暂停等你批准后继续(超时自动拒)", paramsTemplate: { prompt: "继续执行?" } });
-    // ── memory (project-scoped memdir ops; global scope gated until IT-7) ──
-    entries.push({ category: "memory", kind: "memory", id: "memory.read", label: "读取记忆", description: "读项目记忆(指定 key 读主题文件,缺省读索引)", paramsTemplate: { op: "read" } }, { category: "memory", kind: "memory", id: "memory.write", label: "写入记忆", description: "写项目记忆(指定 key 写主题文件,缺省追加索引)", paramsTemplate: { op: "write", value: "" } }, { category: "memory", kind: "memory", id: "memory.search", label: "搜索记忆", description: "BM25 搜索项目记忆", paramsTemplate: { op: "search", query: "" } });
-    return entries;
-}
-/**
- * Compact catalog text for the AI graph builder's system prompt: category headers + `id — desc`
- * lines, hard-capped per category so huge tool sets don't blow the prompt (the agent uses the
- * list_capabilities tool for the long tail).
- */
-export function renderCatalogForPrompt(entries, perCategoryCap = 25) {
-    const order = ["agent", "skill", "tool", "mcp", "channel", "memory"];
-    const labels = { agent: "Agent", skill: "技能 skill", tool: "工具 tool", mcp: "MCP", channel: "渠道 channel", memory: "记忆 memory" };
-    const lines = [];
-    for (const cat of order) {
-        const items = entries.filter((e) => e.category === cat);
-        if (items.length === 0)
-            continue;
-        lines.push(`【${labels[cat]}】(${items.length} 个可用)`);
-        for (const item of items.slice(0, perCategoryCap)) {
-            lines.push(`- ${item.id}${item.description ? ` — ${item.description.slice(0, 60)}` : ""}`);
-        }
-        if (items.length > perCategoryCap)
-            lines.push(`- …其余 ${items.length - perCategoryCap} 个用 list_capabilities("${cat}") 查询`);
-    }
-    return lines.join("\n");
-}
-/** Refs the validator extracts from a def to check against the catalog (anti-hallucination). */
-export function collectCapabilityRefs(def) {
-    const refs = [];
-    for (const node of def.nodes) {
-        const p = node.params ?? {};
-        switch (node.kind) {
-            case "agent": {
-                const agentId = typeof p.agentId === "string" && p.agentId && p.agentId !== "self" ? p.agentId : "qlogicagent";
-                refs.push({ category: "agent", ref: agentId, nodeId: node.id });
-                break;
-            }
-            case "tool":
-                if (typeof p.tool === "string" && p.tool)
-                    refs.push({ category: "tool", ref: p.tool, nodeId: node.id });
-                break;
-            case "skill":
-                if (typeof p.skill === "string" && p.skill)
-                    refs.push({ category: "skill", ref: p.skill, nodeId: node.id });
-                break;
-            case "mcp":
-                if (typeof p.server === "string" && p.server && typeof p.tool === "string" && p.tool) {
-                    refs.push({ category: "mcp", ref: `${p.server}.${p.tool}`, nodeId: node.id });
-                }
-                break;
-            case "channel":
-                if (typeof p.channel === "string" && p.channel)
-                    refs.push({ category: "channel", ref: p.channel, nodeId: node.id });
-                break;
-            default:
-                break;
-        }
-    }
-    return refs;
-}
-/** Validate def refs against the catalog. Returns human-readable errors (empty = clean). */
-export function validateCapabilityRefs(def, entries) {
-    const known = new Map();
-    for (const e of entries) {
-        const set = known.get(e.category) ?? new Set();
-        set.add(e.id);
-        known.set(e.category, set);
-    }
-    const errors = [];
-    for (const { category, ref, nodeId } of collectCapabilityRefs(def)) {
-        // A category with zero known entries means the catalog has no visibility (e.g. channels
-        // when the gateway didn't inject any) — skip rather than reject everything blindly.
-        const set = known.get(category);
-        if (!set || set.size === 0)
-            continue;
-        if (!set.has(ref)) {
-            errors.push(`节点「${nodeId}」引用了不存在的 ${category}:"${ref}"(可用:${[...set].slice(0, 8).join("、")}${set.size > 8 ? "…" : ""})`);
-        }
-    }
-    return errors;
-}