qlogicagent 2.13.5 → 2.13.6

package/dist/orchestration/workflow/qla-executor-host.d.ts

@@ -1,77 +0,0 @@
-/**
- * QlogicagentExecutorHost — the REAL host backing host-executors (agent/tool/http/mcp/channel)
- * with qlogicagent's actual capabilities. No mocks, no stubs (plan §1.5).
- *
- * Boundary capabilities (runAgent / invokeMcp / sendChannel) are injected so this file stays
- * decoupled from the handler host that owns processManager/acpDetector and the openclaw channel
- * callback. Tool invocation goes straight through the single-source-of-truth tool registry
- * (`findTool`). fail-loud everywhere: unknown tool, missing channel host, or any rejection throws.
- */
-import type { RuntimeToolContract } from "../../runtime/ports/index.js";
-import { type DataItem } from "./data-item.js";
-import type { ExecutorHost, ToolHostRequest, MemoryHostRequest, SubworkflowHostRequest, ApprovalHostRequest, WebhookWaitHostRequest } from "./node-schema.js";
-/** Injected boundary capabilities — supplied by the handler host that owns the real runners. */
-export interface QlaExecutorHostDeps {
-    /** Run one agent turn (spawn external ACP agent + sendTask). Returns the agent's text output. */
-    runAgent: (req: {
-        agentId?: string;
-        prompt: string;
-        signal?: AbortSignal;
-    }) => Promise<string>;
-    /** Invoke an MCP server tool through the real MCP bridge. */
-    invokeMcp: (req: {
-        server: string;
-        tool: string;
-        args: Record<string, unknown>;
-        signal?: AbortSignal;
-    }) => Promise<unknown>;
-    /**
-     * Send a message out through a channel via the openclaw channel layer.
-     * Undefined in standalone qlogicagent (no gateway) → channel nodes fail-loud (D12/D13).
-     */
-    sendChannel?: (req: {
-        channel: string;
-        target?: string;
-        payload: unknown;
-        signal?: AbortSignal;
-    }) => Promise<unknown>;
-    /** Tool lookup supplied by the runtime host. */
-    findTool: (name: string) => RuntimeToolContract | undefined;
-    /**
-     * Project-scoped memory backend for the `memory` kind (spec D25). The handler host wires
-     * the owning project root's memdir; absent → memory nodes fail-loud.
-     */
-    memory?: (req: MemoryHostRequest) => Promise<DataItem[]>;
-    /** Run another workflow as a step (D34); the handler enforces cycle guards. */
-    runSubworkflow?: (req: SubworkflowHostRequest) => Promise<DataItem[]>;
-    /** Human-in-the-loop approval (D34): notify + await the owner's decision. */
-    approval?: (req: ApprovalHostRequest) => Promise<{
-        approved: boolean;
-        decidedAt: string;
-        note?: string;
-    }>;
-    /** D34 wait-until-webhook: suspend until the path is hit (handler owns the wake registry). */
-    waitWebhook?: (req: WebhookWaitHostRequest) => Promise<Record<string, unknown>>;
-    /**
-     * IT-7b fine-grained unattended audit (unified permission engine's operation classifier).
-     * Called for every tool invocation in an UNATTENDED run; throw to refuse (fail-loud).
-     */
-    auditUnattendedTool?: (req: ToolHostRequest) => void;
-    /**
-     * Vault credential → auth headers, resolved at EXECUTION time only (D29). Absent ⇒ http
-     * nodes carrying credentialId fail-loud (never silently unauthenticated).
-     */
-    resolveCredentialHeaders?: (credentialId: string) => Record<string, string>;
-    /** fetch impl; defaults to global fetch. Injectable for tests. */
-    fetchImpl?: typeof fetch;
-    /**
-     * Owning workflow root (multi-root, R5):tool 节点的 cwd 必须钉在所属项目工作区。
-     * in-process 工具注册表跟随 agent 的"活动项目"全局 cwd —— 不钉的话,项目 A 的
-     * tool 节点会在项目 B 的目录里动文件(跨项目写,真机踩过:产物落错工作区)。
-     * 注入方式 = exec 工具既有的 `workdir` 参数(作者显式指定时尊重);其余工具无
-     * per-call cwd 通道,仍循全局 cwd —— 工作流里写文件的正路是 agent 节点(子进程
-     * 带根 cwd)与 exec;若需全工具 cwd 线程化,另立决策改 RuntimeToolContract。
-     */
-    workspaceCwd?: string;
-}
-export declare function createQlaExecutorHost(deps: QlaExecutorHostDeps): ExecutorHost;

package/dist/orchestration/workflow/qla-executor-host.js

@@ -1,124 +0,0 @@
-/**
- * QlogicagentExecutorHost — the REAL host backing host-executors (agent/tool/http/mcp/channel)
- * with qlogicagent's actual capabilities. No mocks, no stubs (plan §1.5).
- *
- * Boundary capabilities (runAgent / invokeMcp / sendChannel) are injected so this file stays
- * decoupled from the handler host that owns processManager/acpDetector and the openclaw channel
- * callback. Tool invocation goes straight through the single-source-of-truth tool registry
- * (`findTool`). fail-loud everywhere: unknown tool, missing channel host, or any rejection throws.
- */
-import { item } from "./data-item.js";
-/** Concatenate the text content blocks of a tool result. */
-function toolResultText(result) {
-    const blocks = (result.content ?? []);
-    return blocks
-        .filter(b => b.type === "text" && typeof b.text === "string")
-        .map(b => b.text)
-        .join("\n");
-}
-export function createQlaExecutorHost(deps) {
-    const lookup = deps.findTool;
-    const doFetch = deps.fetchImpl ?? fetch;
-    return {
-        async runAgent(req) {
-            const output = await deps.runAgent({ agentId: req.agentId, prompt: req.prompt, signal: req.signal });
-            // `text` is the reply TEXT downstream expressions reference ($node("x")….json.text —
-            // the system-prompt example and the natural key); `output` stays for older graphs.
-            return [item({ text: output, output })];
-        },
-        async invokeTool(req) {
-            const tool = lookup(req.tool);
-            if (!tool) {
-                throw new Error(`workflow tool node: no qlogicagent tool named "${req.tool}"`);
-            }
-            if (!tool.execute) {
-                throw new Error(`workflow tool node: qlogicagent tool "${req.tool}" is not executable`);
-            }
-            // R5 multi-root cwd pin:exec 跑在所属工作流根(经其既有 workdir 参数),不跟随
-            // 进程级"活动项目"——否则产物/副作用落进别的项目工作区。作者显式 workdir 优先。
-            let args = req.args;
-            if (deps.workspaceCwd && req.tool === "exec") {
-                const wd = args.workdir;
-                if (wd === undefined || wd === null || wd === "") {
-                    args = { ...args, workdir: deps.workspaceCwd };
-                }
-            }
-            // IT-7b fine-grained unattended audit: the handler injects the unified permission
-            // engine's operation classifier — destructive / cross-workspace specifics are
-            // refused even when the KIND was granted (D30 grants are kind-level).
-            // 审计看到的是最终生效的 args(含 cwd 钉位)。
-            if (req.unattended && deps.auditUnattendedTool) {
-                deps.auditUnattendedTool({ ...req, args });
-            }
-            const toolCallId = `wf_${req.tool}_${Date.now().toString(36)}`;
-            const result = await tool.execute(toolCallId, args, req.signal);
-            return [item({ result: toolResultText(result), details: result.details ?? null })];
-        },
-        async httpRequest(req) {
-            // D29: vault credential injection — decrypted only here, only now; never logged,
-            // never echoed back into outputs.
-            let headers = req.headers;
-            if (req.credentialId) {
-                if (!deps.resolveCredentialHeaders) {
-                    throw new Error(`workflow http node: credentialId "${req.credentialId}" set but no credential vault is wired`);
-                }
-                headers = { ...headers, ...deps.resolveCredentialHeaders(req.credentialId) };
-            }
-            const res = await doFetch(req.url, {
-                method: req.method || "GET",
-                headers,
-                body: req.body === undefined ? undefined : typeof req.body === "string" ? req.body : JSON.stringify(req.body),
-                signal: req.signal,
-            });
-            const text = await res.text();
-            const contentType = res.headers.get("content-type") ?? "";
-            let body = text;
-            if (contentType.includes("application/json") && text.length > 0) {
-                try {
-                    body = JSON.parse(text);
-                }
-                catch {
-                    // Declared JSON but unparseable → surface raw text + flag, do not silently coerce.
-                    body = { __unparsedJson: text };
-                }
-            }
-            return [item({ status: res.status, ok: res.ok, body: body })];
-        },
-        async invokeMcp(req) {
-            const raw = await deps.invokeMcp({ server: req.server, tool: req.tool, args: req.args, signal: req.signal });
-            return [item({ result: raw })];
-        },
-        async sendChannel(req) {
-            if (!deps.sendChannel) {
-                throw new Error(`workflow channel node: sendChannel requires the openclaw gateway host, none injected ` +
-                    `(channel/IM nodes are unavailable in standalone qlogicagent — D12/D13).`);
-            }
-            const raw = await deps.sendChannel({ channel: req.channel, target: req.target, payload: req.payload, signal: req.signal });
-            return [item({ sent: true, result: raw })];
-        },
-        async memory(req) {
-            if (!deps.memory) {
-                throw new Error(`workflow memory node: no memory backend injected (handler host wires the project memdir)`);
-            }
-            return deps.memory(req);
-        },
-        async runSubworkflow(req) {
-            if (!deps.runSubworkflow) {
-                throw new Error(`workflow subworkflow node: no sub-run backend injected (handler host wires the controller)`);
-            }
-            return deps.runSubworkflow(req);
-        },
-        async approval(req) {
-            if (!deps.approval) {
-                throw new Error(`workflow approval node: no approval backend injected (handler host wires the notify/await loop)`);
-            }
-            return deps.approval(req);
-        },
-        async waitWebhook(req) {
-            if (!deps.waitWebhook) {
-                throw new Error(`workflow wait(until=webhook): no webhook-wait backend injected (handler host wires the wake registry)`);
-            }
-            return deps.waitWebhook(req);
-        },
-    };
-}

package/dist/orchestration/workflow/run-checkpoint-store.d.ts

@@ -1,53 +0,0 @@
-/**
- * Run Checkpoint Store — durable crash-restart recovery for in-flight workflow runs (plan §M3).
- *
- * The runtime's output cache is content-addressed (key = hash(kind + params + input signature +
- * runIndex), spec §A5). Persisting that cache to disk turns run-from-node into crash recovery:
- * after a qlogicagent restart, a FRESH WorkflowRuntime replays the same DAG, recomputes the same
- * cache keys, and hits the persisted entries for every node that already completed — so those
- * executors are NOT re-invoked (no duplicate agent turns / channel sends), and only the
- * not-yet-run remainder executes. This is exactly the M3 acceptance:
- * "qlogicagent 崩溃重启从 checkpoint 恢复在跑工作流".
- *
- * Stored at `<project>/.qlogicagent/workflows/<workflowId>/runs/<runId>/cache.json`.
- * NodeExecResult is JSON (PortMap of DataItems + firedPorts), so the snapshot round-trips losslessly.
- *
- * fail-loud: a corrupt/unreadable snapshot is treated as absent (a fresh run), never silently
- * partially applied.
- */
-import type { NodeExecResult } from "./node-schema.js";
-/** One persisted cache entry: a content key and the executor result it produced. */
-export interface CheckpointEntry {
-    key: string;
-    result: NodeExecResult;
-}
-/** A point-in-time snapshot of a run's content-addressed output cache. */
-export interface CheckpointSnapshot {
-    workflowId: string;
-    runId: string;
-    entries: CheckpointEntry[];
-    updatedAt: string;
-}
-/**
- * Durable run state the runtime loads on (re)start and persists after each computed node.
- * Implementations may be file-backed (production) or in-memory (tests).
- */
-export interface RunCheckpoint {
-    /** Load the prior snapshot, or undefined for a never-started / absent run. */
-    load(): Promise<CheckpointSnapshot | undefined>;
-    /** Persist the full set of computed cache entries (idempotent overwrite). */
-    persist(entries: CheckpointEntry[]): Promise<void>;
-    /** Remove the snapshot once the run has completed successfully. */
-    clear(): Promise<void>;
-}
-/** File-backed checkpoint under `.qlogicagent/workflows/<id>/runs/<runId>/cache.json`. */
-export declare class FileRunCheckpoint implements RunCheckpoint {
-    private readonly workflowId;
-    private readonly runId;
-    private readonly dir;
-    private readonly file;
-    constructor(cwd: string, workflowId: string, runId: string);
-    load(): Promise<CheckpointSnapshot | undefined>;
-    persist(entries: CheckpointEntry[]): Promise<void>;
-    clear(): Promise<void>;
-}

package/dist/orchestration/workflow/run-checkpoint-store.js

@@ -1,59 +0,0 @@
-/**
- * Run Checkpoint Store — durable crash-restart recovery for in-flight workflow runs (plan §M3).
- *
- * The runtime's output cache is content-addressed (key = hash(kind + params + input signature +
- * runIndex), spec §A5). Persisting that cache to disk turns run-from-node into crash recovery:
- * after a qlogicagent restart, a FRESH WorkflowRuntime replays the same DAG, recomputes the same
- * cache keys, and hits the persisted entries for every node that already completed — so those
- * executors are NOT re-invoked (no duplicate agent turns / channel sends), and only the
- * not-yet-run remainder executes. This is exactly the M3 acceptance:
- * "qlogicagent 崩溃重启从 checkpoint 恢复在跑工作流".
- *
- * Stored at `<project>/.qlogicagent/workflows/<workflowId>/runs/<runId>/cache.json`.
- * NodeExecResult is JSON (PortMap of DataItems + firedPorts), so the snapshot round-trips losslessly.
- *
- * fail-loud: a corrupt/unreadable snapshot is treated as absent (a fresh run), never silently
- * partially applied.
- */
-import { join } from "node:path";
-import { mkdir, rm } from "node:fs/promises";
-import { readJsonFile, writeJsonFile } from "../../runtime/infra/disk-storage.js";
-import { getDefaultPathService } from "../../runtime/infra/default-path-service.js";
-function runDir(cwd, workflowId, runId) {
-    return join(getDefaultPathService().getProjectAgentDir(cwd), "workflows", workflowId, "runs", runId);
-}
-/** File-backed checkpoint under `.qlogicagent/workflows/<id>/runs/<runId>/cache.json`. */
-export class FileRunCheckpoint {
-    workflowId;
-    runId;
-    dir;
-    file;
-    constructor(cwd, workflowId, runId) {
-        this.workflowId = workflowId;
-        this.runId = runId;
-        if (!cwd)
-            throw new Error("FileRunCheckpoint requires a project cwd");
-        if (!workflowId)
-            throw new Error("FileRunCheckpoint requires a workflowId");
-        if (!runId)
-            throw new Error("FileRunCheckpoint requires a runId");
-        this.dir = runDir(cwd, workflowId, runId);
-        this.file = join(this.dir, "cache.json");
-    }
-    async load() {
-        return readJsonFile(this.file);
-    }
-    async persist(entries) {
-        await mkdir(this.dir, { recursive: true });
-        const snap = {
-            workflowId: this.workflowId,
-            runId: this.runId,
-            entries,
-            updatedAt: new Date().toISOString(),
-        };
-        await writeJsonFile(this.file, snap);
-    }
-    async clear() {
-        await rm(this.dir, { recursive: true, force: true });
-    }
-}

package/dist/orchestration/workflow/run-history-store.d.ts

@@ -1,65 +0,0 @@
-/**
- * Run History Store — durable per-workflow run records (闭环 "察" 半场).
- *
- * The checkpoint store (run-checkpoint-store.ts) is an execution cache that is
- * DELETED when a run completes — it cannot answer "what did the last run do?".
- * This store keeps a bounded, append-style history per workflow so the canvas
- * can show past runs and per-node outputs:
- *
- *   `<project>/.qlogicagent/workflows/<workflowId>/runs/history.json`
- *
- * Recording happens in WorkflowController.run() — the single choke point every
- * trigger path goes through (manual RPC, cron scheduler, IM, webhook) — so
- * scheduled runs are captured identically to manual ones.
- *
- * Node outputs are stored as TRUNCATED JSON previews (default-port items'
- * `json`), not full PortMaps: history is for inspection, the checkpoint cache
- * remains the execution-fidelity layer. Bounded to the most recent
- * MAX_RUN_HISTORY entries; corrupt/missing history degrades to empty (history
- * must never block a run).
- */
-import type { RunResult } from "./workflow-runtime.js";
-export declare const MAX_RUN_HISTORY = 20;
-export type RunHistoryStatus = "running" | "completed" | "failed" | "paused" | "skipped" | "canceled";
-export interface RunNodeRecord {
-    /** Whether the node's executor actually ran (false = checkpoint cache hit). */
-    executed: boolean;
-    /** Truncated JSON preview of the node's output items (port → items[].json). */
-    preview: string;
-    seq?: number;
-    startedAt?: string;
-    durationMs?: number;
-    attempts?: number;
-    cacheHit?: boolean;
-    /** Per-node disposition; "failed" with a surviving run = onError errorPort/continue (D32). */
-    nodeStatus?: "completed" | "failed";
-}
-export interface RunHistoryEntry {
-    runId: string;
-    status: RunHistoryStatus;
-    triggerType: string;
-    startedAt: string;
-    finishedAt?: string;
-    durationMs?: number;
-    error?: string;
-    /** nodeId → output record. Present once the run settles (not while running). */
-    nodes?: Record<string, RunNodeRecord>;
-}
-/** Summary row for list views — full node outputs stay behind get(). */
-export type RunHistorySummary = Omit<RunHistoryEntry, "nodes">;
-/** Build per-node output previews (+ D33 trace stats) from a settled RunResult. */
-export declare function buildNodeRecords(result: RunResult): Record<string, RunNodeRecord>;
-export declare class WorkflowRunHistoryStore {
-    private readonly cwd;
-    constructor(cwd: string);
-    /** Record a run start. Prepends a "running" entry and prunes to the bound. */
-    begin(workflowId: string, entry: Pick<RunHistoryEntry, "runId" | "triggerType" | "startedAt">): Promise<void>;
-    /** Settle a run entry (status/outputs/error). Unknown runId is a no-op (pruned entry). */
-    finish(workflowId: string, runId: string, patch: Partial<Pick<RunHistoryEntry, "status" | "finishedAt" | "durationMs" | "error" | "nodes">>): Promise<void>;
-    /** Most-recent-first run summaries (no node outputs — those stay behind get()). */
-    list(workflowId: string): Promise<RunHistorySummary[]>;
-    /** Full entry incl. per-node output previews. */
-    get(workflowId: string, runId: string): Promise<RunHistoryEntry | undefined>;
-    private read;
-    private write;
-}

package/dist/orchestration/workflow/run-history-store.js

@@ -1,104 +0,0 @@
-/**
- * Run History Store — durable per-workflow run records (闭环 "察" 半场).
- *
- * The checkpoint store (run-checkpoint-store.ts) is an execution cache that is
- * DELETED when a run completes — it cannot answer "what did the last run do?".
- * This store keeps a bounded, append-style history per workflow so the canvas
- * can show past runs and per-node outputs:
- *
- *   `<project>/.qlogicagent/workflows/<workflowId>/runs/history.json`
- *
- * Recording happens in WorkflowController.run() — the single choke point every
- * trigger path goes through (manual RPC, cron scheduler, IM, webhook) — so
- * scheduled runs are captured identically to manual ones.
- *
- * Node outputs are stored as TRUNCATED JSON previews (default-port items'
- * `json`), not full PortMaps: history is for inspection, the checkpoint cache
- * remains the execution-fidelity layer. Bounded to the most recent
- * MAX_RUN_HISTORY entries; corrupt/missing history degrades to empty (history
- * must never block a run).
- */
-import { join } from "node:path";
-import { mkdir } from "node:fs/promises";
-import { readJsonFile, writeJsonFile } from "../../runtime/infra/disk-storage.js";
-import { workflowsDir } from "./workflow-store.js";
-export const MAX_RUN_HISTORY = 20;
-/** Per-node output preview cap (chars) — keeps history.json small even for media-heavy runs. */
-const NODE_PREVIEW_MAX_CHARS = 2000;
-function historyPath(cwd, workflowId) {
-    return join(workflowsDir(cwd), workflowId, "runs", "history.json");
-}
-/** Build per-node output previews (+ D33 trace stats) from a settled RunResult. */
-export function buildNodeRecords(result) {
-    const nodes = {};
-    for (const [nodeId, portMap] of Object.entries(result.outputs)) {
-        const byPort = {};
-        for (const [port, items] of Object.entries(portMap)) {
-            byPort[port] = items.map(item => item.json);
-        }
-        let preview = JSON.stringify(byPort);
-        if (preview.length > NODE_PREVIEW_MAX_CHARS) {
-            preview = `${preview.slice(0, NODE_PREVIEW_MAX_CHARS)}…(truncated)`;
-        }
-        const stats = result.nodeStats?.[nodeId];
-        nodes[nodeId] = {
-            executed: result.executed.has(nodeId),
-            preview,
-            ...(stats ? {
-                seq: stats.seq,
-                startedAt: stats.startedAt,
-                durationMs: stats.durationMs,
-                attempts: stats.attempts,
-                cacheHit: stats.cacheHit,
-                nodeStatus: stats.status,
-            } : {}),
-        };
-    }
-    return nodes;
-}
-export class WorkflowRunHistoryStore {
-    cwd;
-    constructor(cwd) {
-        this.cwd = cwd;
-        if (!cwd)
-            throw new Error("WorkflowRunHistoryStore requires a project cwd");
-    }
-    /** Record a run start. Prepends a "running" entry and prunes to the bound. */
-    async begin(workflowId, entry) {
-        const entries = await this.read(workflowId);
-        entries.unshift({ ...entry, status: "running" });
-        await this.write(workflowId, entries.slice(0, MAX_RUN_HISTORY));
-    }
-    /** Settle a run entry (status/outputs/error). Unknown runId is a no-op (pruned entry). */
-    async finish(workflowId, runId, patch) {
-        const entries = await this.read(workflowId);
-        const entry = entries.find(e => e.runId === runId);
-        if (!entry)
-            return;
-        Object.assign(entry, patch);
-        await this.write(workflowId, entries);
-    }
-    /** Most-recent-first run summaries (no node outputs — those stay behind get()). */
-    async list(workflowId) {
-        return (await this.read(workflowId)).map(({ nodes: _nodes, ...summary }) => summary);
-    }
-    /** Full entry incl. per-node output previews. */
-    async get(workflowId, runId) {
-        return (await this.read(workflowId)).find(e => e.runId === runId);
-    }
-    async read(workflowId) {
-        try {
-            const entries = await readJsonFile(historyPath(this.cwd, workflowId));
-            return Array.isArray(entries) ? entries : [];
-        }
-        catch {
-            // History must never block a run — corrupt history degrades to empty.
-            return [];
-        }
-    }
-    async write(workflowId, entries) {
-        const path = historyPath(this.cwd, workflowId);
-        await mkdir(join(workflowsDir(this.cwd), workflowId, "runs"), { recursive: true });
-        await writeJsonFile(path, entries);
-    }
-}

package/dist/orchestration/workflow/trigger-validation.d.ts

@@ -1,22 +0,0 @@
-/**
- * Trigger validation — deterministic, fail-loud gate for workflow trigger configs (plan D7/D15).
- *
- * Triggers are the unattended entry points to a workflow (schedule/im-message/webhook/manual). A
- * malformed trigger (an unparseable cron, a non-path webhook, an uncompilable IM match regex) must
- * be rejected at the SINGLE mutation channel (`applyPatch` set_trigger), not silently persisted to
- * fail later inside the gateway trigger layer where it is unreachable to fix. This keeps §1.5
- * fail-loud and satisfies D15 ("schedule 须有效 cron / webhook 鉴权+限流" preconditions).
- *
- * Pure functions, no I/O, no side effects — the gateway still owns actual registration/auth/rate
- * limiting; this only guarantees the stored config is structurally valid and runnable.
- */
-import type { TriggerDef } from "./workflow-trigger.js";
-/** Returns a list of human-readable errors; empty ⇒ the trigger is valid. */
-export declare function validateTrigger(trigger: TriggerDef): string[];
-/**
- * Validate a 5-field (min hour dom month dow) or 6-field (sec + the same) cron expression.
- * Each field accepts a star, a star-step (every-N), a single value, a range, a stepped range, and
- * comma-lists of those. Month and day-of-week additionally accept their 3-letter names.
- * Day-of-week allows 0 and 7 for Sunday.
- */
-export declare function validateCron(cron: string): string[];