stagent 0.9.6 → 0.11.0

package/src/lib/workflows/types.ts

@@ -20,8 +20,37 @@ export interface WorkflowStep {
   budgetUsd?: number;
   /** Per-step runtime override — takes precedence over workflow.runtimeId and global settings */
   runtimeId?: string;
+  /**
+   * If set, this step is a pure time delay (not a task). Format: Nm|Nh|Nd|Nw
+   * (1 minute to 30 days). When the engine reaches a delay step, the workflow
+   * is marked paused with resume_at = now + delayDuration. The scheduler tick
+   * resumes the workflow when resume_at is reached. Delay steps must NOT have
+   * a prompt/profile/runtime. See features/workflow-step-delays.md.
+   */
+  delayDuration?: string;
+  /**
+   * Optional declarative side-effect to apply after the step's task completes
+   * successfully. Used by bulk row enrichment to write the agent's result back
+   * into a user table cell. Discriminated union — `type` selects the variant.
+   * See features/bulk-row-enrichment.md.
+   */
+  postAction?: StepPostAction;
 }
 
+/**
+ * Declarative post-step side effect. Currently only `update_row` is supported;
+ * adding new variants is purely additive (extend the union, add a dispatcher
+ * branch). The `tableId` is informational/audit-only — `updateRow` finds the
+ * row by `rowId`. The `rowId` field may contain `{{itemVariable.field}}`
+ * placeholders that are resolved against the current loop iteration's row.
+ */
+export type StepPostAction = {
+  type: "update_row";
+  tableId: string;
+  rowId: string;
+  column: string;
+};
+
 /** Selector for auto-discovering documents from the project pool */
 export interface DocumentSelector {
   fromWorkflowId?: string;
@@ -40,6 +69,16 @@ export interface LoopConfig {
   assignedAgent?: string;
   agentProfile?: string;
   completionSignals?: string[];
+  /**
+   * Row-driven loop: when set, the loop iterates once per item instead of
+   * looping autonomously until completionSignals fire. Each item is bound
+   * into the prompt template under the name in `itemVariable` (default
+   * "item"). Used by bulk row enrichment workflows. Iteration count is
+   * still capped by `maxIterations`. See features/bulk-row-enrichment.md.
+   */
+  items?: unknown[];
+  /** Variable name the current item is bound to (default "item"). */
+  itemVariable?: string;
 }
 
 export interface SwarmConfig {
@@ -51,10 +90,37 @@ export interface WorkflowDefinition {
   steps: WorkflowStep[];
   loopConfig?: LoopConfig;
   swarmConfig?: SwarmConfig;
+  metadata?: WorkflowMetadata;
   /** Parent task ID — set when workflow is created from AI assist, used to propagate document context */
   sourceTaskId?: string;
 }
 
+export interface WorkflowMetadata {
+  enrichment?: WorkflowEnrichmentMetadata;
+}
+
+export interface WorkflowEnrichmentTargetContract {
+  columnName: string;
+  columnLabel: string;
+  dataType: "text" | "number" | "boolean" | "select" | "url" | "email";
+  allowedOptions?: string[];
+}
+
+export interface WorkflowEnrichmentMetadata {
+  tableId: string;
+  tableName: string;
+  targetColumn: string;
+  targetColumnLabel: string;
+  promptMode: "auto" | "custom";
+  strategy:
+    | "single-pass-lookup"
+    | "single-pass-classify"
+    | "research-and-synthesize";
+  agentProfile: string;
+  eligibleRowCount: number;
+  targetContract: WorkflowEnrichmentTargetContract;
+}
+
 export type LoopStopReason =
   | "max_iterations"
   | "time_budget"
@@ -99,7 +165,9 @@ export type WorkflowStepStatus =
   | "completed"
   | "failed"
   | "waiting_approval"
-  | "waiting_dependencies";
+  | "waiting_dependencies"
+  /** Step is a time delay and the workflow is paused waiting for resume_at. */
+  | "delayed";
 
 export interface StepState {
   stepId: string;
@@ -132,3 +200,100 @@ export function createInitialState(definition: WorkflowDefinition): WorkflowStat
     startedAt: new Date().toISOString(),
   };
 }
+
+/**
+ * Document reference returned by the workflow status API alongside each step
+ * (output) or parent task (input). The shape matches what the API route
+ * actually selects from the documents table.
+ */
+export interface WorkflowStatusDocument {
+  id: string;
+  originalName: string;
+  mimeType: string;
+  storagePath: string;
+  direction: string;
+}
+
+/**
+ * Step with computed state — the shape returned by the status API for every
+ * non-loop pattern (sequence, parallel, swarm, planner-executor, checkpoint).
+ * `state` is always present because the route synthesizes a pending placeholder
+ * when the real stepState hasn't been created yet.
+ */
+export interface StepWithState extends WorkflowStep {
+  state: StepState;
+}
+
+/**
+ * Run-history summary row returned alongside every status response — counts
+ * of tasks per workflow run number.
+ */
+export interface WorkflowRunHistoryEntry {
+  runNumber: number | null;
+  taskCount: number;
+  completedCount: number;
+  failedCount: number;
+}
+
+/**
+ * All non-loop workflow patterns share one response shape. Alias exists so
+ * the union arm and the new-pattern checklist (TDR-031) can both reference
+ * it — when a new pattern is added to WorkflowPattern, it automatically
+ * joins this arm unless the author explicitly adds a new arm with different
+ * fields.
+ */
+export type NonLoopPattern = Exclude<WorkflowPattern, "loop">;
+
+/**
+ * Discriminated union shape for `GET /api/workflows/[id]/status` responses.
+ * Consumers MUST narrow on `pattern` before reading pattern-specific fields.
+ * See TDR-031: Workflow status API is a pattern-discriminated union.
+ *
+ *   - Loop arm: raw step definitions (no `.state`), plus `loopState` carrying
+ *     the real iteration progress in `loopState.iterations[]`. Consumers that
+ *     need completed outputs for a loop workflow should read from
+ *     `loopState.iterations[].result`, not `steps[].state.result` (which does
+ *     not exist on this arm — it's a compile error).
+ *
+ *   - Non-loop arm: each step wrapped with `.state` synthesized from
+ *     `workflowState.stepStates[i]`, plus `resumeAt` for delay pauses. The
+ *     non-loop arm covers sequence, parallel, swarm, planner-executor, and
+ *     checkpoint patterns — they all share the step-state rendering path.
+ */
+export type WorkflowStatusResponse =
+  | {
+      pattern: "loop";
+      id: string;
+      name: string;
+      status: string;
+      projectId?: string | null;
+      definition?: string;
+      loopConfig?: LoopConfig;
+      loopState: LoopState | null;
+      swarmConfig?: SwarmConfig;
+      /** Raw step definitions — no `.state` on this arm. Reading from the
+       *  iteration stream (`loopState.iterations[]`) is the correct path. */
+      steps: WorkflowStep[];
+      stepDocuments?: Record<string, WorkflowStatusDocument[]>;
+      parentDocuments?: WorkflowStatusDocument[];
+      runNumber?: number;
+      runHistory?: WorkflowRunHistoryEntry[];
+    }
+  | {
+      pattern: NonLoopPattern;
+      id: string;
+      name: string;
+      status: string;
+      /** Epoch ms for a paused (delay-step) workflow's scheduled resume. */
+      resumeAt: number | null;
+      projectId?: string | null;
+      definition?: string;
+      swarmConfig?: SwarmConfig;
+      /** Each step wrapped with `.state` — always present on this arm. */
+      steps: StepWithState[];
+      workflowState: WorkflowState | null;
+      stepDocuments?: Record<string, WorkflowStatusDocument[]>;
+      parentDocuments?: WorkflowStatusDocument[];
+      runNumber?: number;
+      runHistory?: WorkflowRunHistoryEntry[];
+    };

package/src/test/setup.ts

@@ -3,6 +3,16 @@ import { mkdtempSync, mkdirSync } from "fs";
 import { join } from "path";
 import { tmpdir } from "os";
 
+// Mock ResizeObserver for cmdk
+global.ResizeObserver = class ResizeObserver {
+  observe() {}
+  unobserve() {}
+  disconnect() {}
+};
+
+// Mock scrollIntoView for cmdk
+HTMLElement.prototype.scrollIntoView = () => {};
+
 if (!process.env.STAGENT_DATA_DIR) {
   const tempDataDir = mkdtempSync(join(tmpdir(), "stagent-vitest-"));
   mkdirSync(tempDataDir, { recursive: true });

package/src/app/api/license/checkout/route.ts

@@ -1,28 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { createCheckoutSession } from "@/lib/billing/stripe";
-import { TIERS } from "@/lib/license/tier-limits";
-
-/**
- * POST /api/license/checkout
- * Creates a Stripe Checkout Session and returns the URL.
- * Body: { tier: "solo"|"operator"|"scale", billingPeriod?: "monthly"|"annual" }
- */
-export async function POST(req: NextRequest) {
-  const body = await req.json();
-  const { tier, billingPeriod } = body;
-
-  if (!tier || tier === "community" || !TIERS.includes(tier)) {
-    return NextResponse.json(
-      { error: "Valid paid tier required (solo, operator, scale)" },
-      { status: 400 }
-    );
-  }
-
-  const result = await createCheckoutSession(tier, billingPeriod ?? "monthly");
-
-  if ("error" in result) {
-    return NextResponse.json({ error: result.error }, { status: 502 });
-  }
-
-  return NextResponse.json({ url: result.url });
-}

package/src/app/api/license/portal/route.ts

@@ -1,26 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { createPortalSession } from "@/lib/billing/stripe";
-
-/**
- * GET /api/license/portal
- * Creates a Stripe Customer Portal session and redirects.
- * Query: ?email=user@example.com
- */
-export async function GET(req: NextRequest) {
-  const email = req.nextUrl.searchParams.get("email");
-
-  if (!email) {
-    return NextResponse.json(
-      { error: "email query parameter required" },
-      { status: 400 }
-    );
-  }
-
-  const result = await createPortalSession(email);
-
-  if ("error" in result) {
-    return NextResponse.json({ error: result.error }, { status: 502 });
-  }
-
-  return NextResponse.redirect(result.url);
-}

package/src/app/api/license/route.ts

@@ -1,89 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { licenseManager } from "@/lib/license/manager";
-import { TIER_LIMITS, type LimitResource } from "@/lib/license/tier-limits";
-import { LICENSE_FEATURES, canAccessFeature } from "@/lib/license/features";
-import { activateLicenseSchema } from "@/lib/validators/license";
-import type { LicenseTier } from "@/lib/license/tier-limits";
-
-/**
- * GET /api/license — current license status, feature flags, and limits.
- */
-export async function GET() {
-  // Read from DB directly — avoids stale singleton cache in Turbopack dev mode
-  const status = licenseManager.getStatusFromDb();
-  const tier = status.tier;
-
-  // Build feature access map
-  const features: Record<string, boolean> = {};
-  for (const feature of LICENSE_FEATURES) {
-    features[feature] = canAccessFeature(tier, feature);
-  }
-
-  // Build limit map
-  const limits: Record<string, number> = {};
-  for (const key of Object.keys(TIER_LIMITS[tier]) as LimitResource[]) {
-    const val = TIER_LIMITS[tier][key];
-    limits[key] = val === Infinity ? -1 : val; // -1 = unlimited for JSON
-  }
-
-  return NextResponse.json({
-    tier: status.tier,
-    status: status.status,
-    email: status.email,
-    activatedAt: status.activatedAt?.toISOString() ?? null,
-    expiresAt: status.expiresAt?.toISOString() ?? null,
-    lastValidatedAt: status.lastValidatedAt?.toISOString() ?? null,
-    gracePeriodExpiresAt: status.gracePeriodExpiresAt?.toISOString() ?? null,
-    isPremium: tier !== "community",
-    features,
-    limits,
-  });
-}
-
-/**
- * POST /api/license — activate a license.
- * Accepts either a license key or direct tier/email/token (from Stripe webhook flow).
- */
-export async function POST(req: NextRequest) {
-  const body = await req.json();
-  const parsed = activateLicenseSchema.safeParse(body);
-
-  if (!parsed.success) {
-    return NextResponse.json(
-      { error: "Invalid request", details: parsed.error.flatten() },
-      { status: 400 }
-    );
-  }
-
-  const { tier, email, token } = parsed.data;
-
-  if (!tier || !email) {
-    return NextResponse.json(
-      { error: "tier and email are required for activation" },
-      { status: 400 }
-    );
-  }
-
-  licenseManager.activate({
-    tier: tier as LicenseTier,
-    email,
-    encryptedToken: token,
-  });
-
-  return NextResponse.json({
-    success: true,
-    tier: licenseManager.getTier(),
-    status: licenseManager.getStatus().status,
-  });
-}
-
-/**
- * DELETE /api/license — deactivate and revert to community.
- */
-export async function DELETE() {
-  licenseManager.deactivate();
-  return NextResponse.json({
-    success: true,
-    tier: "community",
-  });
-}

package/src/app/api/license/usage/route.ts

@@ -1,63 +0,0 @@
-import { NextResponse } from "next/server";
-import { licenseManager } from "@/lib/license/manager";
-import { getContextVersionCount, getActiveScheduleCount } from "@/lib/license/limit-queries";
-import { getAllExecutions } from "@/lib/agents/execution-manager";
-import { db } from "@/lib/db";
-import { agentMemory } from "@/lib/db/schema";
-import { eq, sql, desc } from "drizzle-orm";
-
-/**
- * GET /api/license/usage
- * Returns current usage counts and limits for the subscription UI.
- */
-export async function GET() {
-  // Find the profile with the most memories for the usage display
-  const topProfile = db
-    .select({
-      profileId: agentMemory.profileId,
-      count: sql<number>`count(*)`,
-    })
-    .from(agentMemory)
-    .where(eq(agentMemory.status, "active"))
-    .groupBy(agentMemory.profileId)
-    .orderBy(desc(sql`count(*)`))
-    .limit(1)
-    .get();
-
-  const memoryCount = topProfile?.count ?? 0;
-
-  // Find the profile with the most context versions
-  // Use the same top profile for consistency
-  const contextCount = topProfile?.profileId
-    ? getContextVersionCount(topProfile.profileId)
-    : 0;
-
-  const scheduleCount = getActiveScheduleCount();
-  const parallelCount = getAllExecutions().size;
-
-  const limits = {
-    agentMemories: licenseManager.getLimit("agentMemories"),
-    contextVersions: licenseManager.getLimit("contextVersions"),
-    activeSchedules: licenseManager.getLimit("activeSchedules"),
-    parallelWorkflows: licenseManager.getLimit("parallelWorkflows"),
-  };
-
-  return NextResponse.json({
-    agentMemories: {
-      current: memoryCount,
-      limit: limits.agentMemories === Infinity ? -1 : limits.agentMemories,
-    },
-    contextVersions: {
-      current: contextCount,
-      limit: limits.contextVersions === Infinity ? -1 : limits.contextVersions,
-    },
-    activeSchedules: {
-      current: scheduleCount,
-      limit: limits.activeSchedules === Infinity ? -1 : limits.activeSchedules,
-    },
-    parallelWorkflows: {
-      current: parallelCount,
-      limit: limits.parallelWorkflows === Infinity ? -1 : limits.parallelWorkflows,
-    },
-  });
-}

package/src/app/api/marketplace/browse/route.ts

@@ -1,15 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { browseBlueprints } from "@/lib/marketplace/marketplace-client";
-
-/**
- * GET /api/marketplace/browse?page=1&category=general
- * Browse published marketplace blueprints. Available to all tiers.
- */
-export async function GET(req: NextRequest) {
-  const { searchParams } = req.nextUrl;
-  const page = parseInt(searchParams.get("page") ?? "1", 10);
-  const category = searchParams.get("category") ?? undefined;
-
-  const result = await browseBlueprints(page, category);
-  return NextResponse.json(result);
-}

package/src/app/api/marketplace/import/route.ts

@@ -1,28 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { licenseManager } from "@/lib/license/manager";
-import { importBlueprint } from "@/lib/marketplace/marketplace-client";
-
-/**
- * POST /api/marketplace/import
- * Import a blueprint from the marketplace. Requires Solo+ tier.
- */
-export async function POST(req: NextRequest) {
-  if (!licenseManager.isFeatureAllowed("marketplace-import")) {
-    return NextResponse.json(
-      { error: "Blueprint import requires Solo tier or above" },
-      { status: 402 }
-    );
-  }
-
-  const { blueprintId } = await req.json();
-  if (!blueprintId) {
-    return NextResponse.json({ error: "blueprintId required" }, { status: 400 });
-  }
-
-  const result = await importBlueprint(blueprintId);
-  if (!result.success) {
-    return NextResponse.json({ error: result.error }, { status: 500 });
-  }
-
-  return NextResponse.json({ content: result.content });
-}

package/src/app/api/marketplace/publish/route.ts

@@ -1,40 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { licenseManager } from "@/lib/license/manager";
-import { publishBlueprint } from "@/lib/marketplace/marketplace-client";
-
-/**
- * POST /api/marketplace/publish
- * Publish a workflow blueprint to the marketplace. Requires Operator+ tier.
- */
-export async function POST(req: NextRequest) {
-  if (!licenseManager.isFeatureAllowed("marketplace-publish")) {
-    return NextResponse.json(
-      { error: "Blueprint publishing requires Operator tier or above" },
-      { status: 402 }
-    );
-  }
-
-  const body = await req.json();
-  const { title, description, category, content, tags } = body;
-
-  if (!title || !content) {
-    return NextResponse.json(
-      { error: "title and content are required" },
-      { status: 400 }
-    );
-  }
-
-  const result = await publishBlueprint({
-    title,
-    description: description ?? "",
-    category: category ?? "general",
-    content,
-    tags: tags ?? [],
-  });
-
-  if (!result.success) {
-    return NextResponse.json({ error: result.error }, { status: 500 });
-  }
-
-  return NextResponse.json({ id: result.id }, { status: 201 });
-}

package/src/app/api/onboarding/email/route.ts

@@ -1,53 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { z } from "zod";
-import { getSupabaseClient } from "@/lib/cloud/supabase-client";
-
-const emailSchema = z.object({
-  email: z.string().email(),
-});
-
-/**
- * POST /api/onboarding/email
- * Creates a Supabase Auth user via magic link.
- * Fire-and-forget — does not block any local functionality.
- */
-export async function POST(req: NextRequest) {
-  const body = await req.json();
-  const parsed = emailSchema.safeParse(body);
-
-  if (!parsed.success) {
-    return NextResponse.json(
-      { error: "Valid email required" },
-      { status: 400 }
-    );
-  }
-
-  const supabase = getSupabaseClient();
-  if (!supabase) {
-    // Cloud not configured — silently succeed
-    return NextResponse.json({ ok: true });
-  }
-
-  try {
-    const { error } = await supabase.auth.signInWithOtp({
-      email: parsed.data.email,
-      options: {
-        emailRedirectTo: `${process.env.NEXT_PUBLIC_SUPABASE_URL ?? "http://localhost:3000"}/auth/callback`,
-      },
-    });
-
-    if (error) {
-      return NextResponse.json(
-        { error: error.message },
-        { status: 502 }
-      );
-    }
-
-    return NextResponse.json({ ok: true });
-  } catch {
-    return NextResponse.json(
-      { error: "Failed to connect to cloud service" },
-      { status: 502 }
-    );
-  }
-}

package/src/app/api/settings/telemetry/route.ts

@@ -1,14 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { getSetting, setSetting } from "@/lib/settings/helpers";
-import { SETTINGS_KEYS } from "@/lib/constants/settings";
-
-export async function GET() {
-  const enabled = await getSetting(SETTINGS_KEYS.TELEMETRY_ENABLED);
-  return NextResponse.json({ enabled: enabled === "true" });
-}
-
-export async function POST(req: NextRequest) {
-  const { enabled } = await req.json();
-  await setSetting(SETTINGS_KEYS.TELEMETRY_ENABLED, String(!!enabled));
-  return NextResponse.json({ enabled: !!enabled });
-}

package/src/app/api/sync/export/route.ts

@@ -1,54 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { licenseManager } from "@/lib/license/manager";
-import { exportAndUpload } from "@/lib/sync/cloud-sync";
-import { getSettingSync } from "@/lib/settings/helpers";
-import { SETTINGS_KEYS } from "@/lib/constants/settings";
-
-/**
- * POST /api/sync/export
- * Export and encrypt the database, upload to Supabase Storage.
- * Requires Operator+ tier and an authenticated Supabase session.
- * Body: { accessToken: string } — the user's Supabase JWT
- */
-export async function POST(req: NextRequest) {
-  if (!licenseManager.isFeatureAllowed("cloud-sync")) {
-    return NextResponse.json(
-      { error: "Cloud sync requires Operator tier or above" },
-      { status: 402 }
-    );
-  }
-
-  const email = licenseManager.getStatus().email;
-  if (!email) {
-    return NextResponse.json(
-      { error: "Sign in with your email first (Settings → Cloud Account)" },
-      { status: 400 }
-    );
-  }
-
-  // Get the user's access token for authenticated Storage uploads
-  const body = await req.json().catch(() => ({}));
-  const accessToken = body.accessToken as string | undefined;
-
-  let deviceId = getSettingSync(SETTINGS_KEYS.DEVICE_ID);
-  if (!deviceId) {
-    deviceId = crypto.randomUUID();
-    const { setSetting } = await import("@/lib/settings/helpers");
-    await setSetting(SETTINGS_KEYS.DEVICE_ID, deviceId);
-  }
-
-  const result = await exportAndUpload(email, deviceId, accessToken);
-
-  if (!result.success) {
-    return NextResponse.json({ error: result.error }, { status: 500 });
-  }
-
-  const { setSetting } = await import("@/lib/settings/helpers");
-  await setSetting(SETTINGS_KEYS.LAST_SYNC_AT, new Date().toISOString());
-
-  return NextResponse.json({
-    success: true,
-    blobPath: result.blobPath,
-    sizeBytes: result.sizeBytes,
-  });
-}

package/src/app/api/sync/restore/route.ts

@@ -1,37 +0,0 @@
-import { NextResponse } from "next/server";
-import { licenseManager } from "@/lib/license/manager";
-import { downloadAndRestore } from "@/lib/sync/cloud-sync";
-
-/**
- * POST /api/sync/restore
- * Download the latest snapshot, decrypt, and restore.
- * Requires Operator+ tier. Creates a safety backup first.
- */
-export async function POST() {
-  if (!licenseManager.isFeatureAllowed("cloud-sync")) {
-    return NextResponse.json(
-      { error: "Cloud sync requires Operator tier or above" },
-      { status: 402 }
-    );
-  }
-
-  const email = licenseManager.getStatus().email;
-  if (!email) {
-    return NextResponse.json(
-      { error: "No license email — activate your license first" },
-      { status: 400 }
-    );
-  }
-
-  const result = await downloadAndRestore(email);
-
-  if (!result.success) {
-    return NextResponse.json({ error: result.error }, { status: 500 });
-  }
-
-  return NextResponse.json({
-    success: true,
-    sizeBytes: result.sizeBytes,
-    message: "Database restored. Restart the app to apply changes.",
-  });
-}