ts-workflow-engine-lite 2.1.0

package/dist/src/api/routes/workflows/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../../../src/api/routes/workflows/shared.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,+BAA+B,CAAC;AAMvC,OAAO,EACL,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAmDlC,MAAM,UAAU,oBAAoB,CAAC,UAAmB;IACtD,OAAO,UAAgC,CAAC;AAC1C,CAAC;AAGD,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AACrD,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACxC,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC1C,eAAe,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AAC9C,eAAe,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC3C,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAO5B,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,GAAG,EAAE,uDAAuD;IAC5D,GAAG,+BAA+B,EAAE;CACrC,CAAC;AAeF,MAAM,iBAAiB,GAA2B;IAChD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,MAAM;QAChB,WAAW,EACT,4IAA4I;KAC/I;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,MAAM;QAChB,WAAW,EACT,+HAA+H;QACjI,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;KAC9B;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,wDAAwD;QACrE,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;KACnC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,+CAA+C;KAC7D;IACD;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE,MAAM;QAChB,WAAW,EACT,yFAAyF;QAC3F,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE;KACxD;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,kCAAkC,EAAE;KACpE;IACD;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE;KACjE;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE;YACP,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACzB;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,+DAA+D;QACjE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE;KAC1E;IACD;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,SAAS;QACnB,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE;KACnD;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,SAAS;QACnB,WAAW,EACT,oGAAoG;QACtG,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;SACjE;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,0DAA0D;QACvE,OAAO,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,EAAE;KAClE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,SAAS;QACnB,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE;KAC7C;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,SAAS;QACnB,WAAW,EACT,wJAAwJ;QAC1J,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;KAC1D;IACD;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,SAAS;QACnB,WAAW,EACT,4KAA4K;QAC9K,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,EAAE;KAC3E;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,GAAG,KAAK;IACR,YAAY,EAAE,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;IACjD,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC;CACzC,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAwB,EACxB,kBAAsC,EACtC,OAIC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,wBAAwB,CACrD,kBAAkB,CAAC,EAAE,CACtB,CAAC;IACF,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAmB;QACrC,EAAE,EAAE,kBAAkB,CAAC,EAAE;QACzB,IAAI,EAAE,kBAAkB,CAAC,IAAI;QAC7B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ,EAAE,WAAW;QACzD,UAAU,EAAE,kBAAkB;QAC9B,OAAO,EAAE,WAAW;QACpB,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,IAAI,WAAW;QAC3D,aAAa,EAAE,QAAQ,EAAE,aAAa;QACtC,aAAa,EAAE,QAAQ,EAAE,aAAa;QACtC,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;QACrC,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,QAAQ,EAAE,IAAI;KACrC,CAAC;IAEF,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,eAAe,GAA0B;QAC7C,EAAE,EAAE,cAAc,CAAC,EAAE;QACrB,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,WAAW,EAAE,cAAc,CAAC,WAAW;QACvC,UAAU,EAAE,cAAc,CAAC,UAAU;QACrC,OAAO,EAAE,cAAc,CAAC,OAAO;QAC/B,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,QAAQ;KAC7C,CAAC;IACF,MAAM,OAAO,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACnD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAU,EAAO,EAAE;IAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK;aAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;aAClC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;YAC5C,IAAI,OAAO,IAAI,KAAK,UAAU;gBAAE,OAAO;YACvC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAU,EAAU,EAAE;IACpD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO;SACf,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;SACvE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAS,EAAU,EAAE;IACpD,OAAO,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAS,EAAY,EAAE;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,CAAC,KAAU,EAAE,EAAE;QAC9B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtB,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IAEF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEzB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAU,EAAE,EAAE;gBACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,UAA8B,EAAE,EAAE;IAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACrC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAA+B,EAAE,EAAE;IAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,KAA+B,EAC/B,UAAoB,EACpB,EAAE;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAY,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAA+B,EAAE,EAAE;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChB,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/dist/src/api/routes/workflows/variables.d.ts

@@ -0,0 +1,2 @@
+import type { Router } from "express";
+export declare function registerVariableRoutes(router: Router): void;

package/dist/src/api/routes/workflows/variables.js

@@ -0,0 +1,34 @@
+import { param, query, validationResult } from "express-validator";
+import { getVariableSuggestions } from "../../../model/WorkflowVariables.js";
+import { sendError, sendSuccess } from "../../response.js";
+import { WorkflowApplicationService } from "../../services/WorkflowApplicationService.js";
+import { getRequestStorage } from "../../utils/requestContext.js";
+import { asyncHandler } from "../../utils/routeHelper.js";
+let _cachedService = null;
+function getService(req) {
+    const storage = getRequestStorage(req) ?? null;
+    if (!_cachedService || storage !== null) {
+        _cachedService = new WorkflowApplicationService(storage);
+    }
+    return _cachedService;
+}
+export function registerVariableRoutes(router) {
+    router.get("/:id/variables", param("id").isString().notEmpty().withMessage("Workflow ID is required"), query("before")
+        .optional()
+        .isString()
+        .withMessage("before must be a node ID string"), asyncHandler(async (req, res) => {
+        const errors = validationResult(req);
+        if (!errors.isEmpty()) {
+            sendError(res, 400, 400, errors.array()[0].msg);
+            return;
+        }
+        const service = getService(req);
+        const workflow = await service.getWorkflow(req.params.id);
+        const before = typeof req.query.before === "string" ? req.query.before : undefined;
+        const variables = getVariableSuggestions(workflow.definition, {
+            before,
+        });
+        sendSuccess(res, 200, { variables }, "Variable suggestions retrieved");
+    }));
+}
+//# sourceMappingURL=variables.js.map

package/dist/src/api/routes/workflows/variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variables.js","sourceRoot":"","sources":["../../../../../src/api/routes/workflows/variables.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,IAAI,cAAc,GAAsC,IAAI,CAAC;AAC7D,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC/C,IAAI,CAAC,cAAc,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACxC,cAAc,GAAG,IAAI,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AASD,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,CAAC,GAAG,CACR,gBAAgB,EAChB,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,KAAK,CAAC,QAAQ,CAAC;SACZ,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,WAAW,CAAC,iCAAiC,CAAC,EACjD,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GACV,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,SAAS,GAAG,sBAAsB,CAAC,QAAQ,CAAC,UAAU,EAAE;YAC5D,MAAM;SACP,CAAC,CAAC;QACH,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,gCAAgC,CAAC,CAAC;IACzE,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/api/routes/workflows/versioning.d.ts

@@ -0,0 +1,2 @@
+import type { Router } from "express";
+export declare function registerVersioningRoutes(router: Router): void;

package/dist/src/api/routes/workflows/versioning.js

@@ -0,0 +1,235 @@
+import { body, param, validationResult } from "express-validator";
+import { Logger } from "../../../utils/Logger.js";
+import { sendError, sendSuccess } from "../../response.js";
+import { WorkflowApplicationService } from "../../services/WorkflowApplicationService.js";
+import { getRequestEngine, getRequestStorage, requireRequestEngine, } from "../../utils/requestContext.js";
+import { asyncHandler } from "../../utils/routeHelper.js";
+let _cachedService = null;
+function getService(req) {
+    const storage = getRequestStorage(req) ?? null;
+    if (!_cachedService || storage !== null) {
+        _cachedService = new WorkflowApplicationService(storage);
+    }
+    return _cachedService;
+}
+export function registerVersioningRoutes(router) {
+    router.get("/:id/versions", param("id").isString().notEmpty().withMessage("Workflow ID is required"), asyncHandler(async (req, res) => {
+        const service = getService(req);
+        const result = await service.listVersions(req.params.id);
+        res.json({
+            success: true,
+            data: {
+                workflowId: req.params.id,
+                versions: result.versions,
+                latestVersion: result.versions.length > 0
+                    ? result.versions[result.versions.length - 1]
+                    : undefined,
+                publishedVersion: result.activeVersion,
+                lockedVersion: result.lockedVersion,
+            },
+            message: "Workflow versions retrieved",
+        });
+    }));
+    router.get("/:id/versions/:version", param("id").isString().notEmpty().withMessage("Workflow ID is required"), param("version").isString().notEmpty().withMessage("Version is required"), async (req, res) => {
+        const errors = validationResult(req);
+        if (!errors.isEmpty()) {
+            return sendError(res, 400, 400, errors.array()[0].msg);
+        }
+        try {
+            const storage = getRequestStorage(req);
+            const workflowId = req.params?.id;
+            const versionValue = req.params?.version;
+            if (storage) {
+                const versionNumber = Number.parseInt(versionValue, 10);
+                if (!Number.isFinite(versionNumber)) {
+                    return sendError(res, 400, 400, "Version must be a number");
+                }
+                const stored = await storage.loadWorkflowVersion(workflowId, versionNumber);
+                if (!stored) {
+                    return sendError(res, 404, 404, `Workflow version ${versionValue} not found`);
+                }
+                return sendSuccess(res, 200, stored, "Workflow version retrieved");
+            }
+            const engine = requireRequestEngine(req);
+            const workflow = typeof engine.getWorkflow === "function"
+                ? engine.getWorkflow(workflowId, versionValue)
+                : undefined;
+            if (!workflow) {
+                return sendError(res, 404, 404, `Workflow version ${versionValue} not found`);
+            }
+            return sendSuccess(res, 200, workflow, "Workflow version retrieved");
+        }
+        catch (error) {
+            Logger.error("api", "workflows", `Error getting workflow version ${req.params?.id}: ${error?.message}`, error?.stack);
+            return sendError(res, 500, 500, error?.message || "Failed to retrieve workflow version");
+        }
+    });
+    router.post("/:id/publish", param("id").isString().notEmpty().withMessage("Workflow ID is required"), body("version")
+        .optional()
+        .isInt({ min: 1 })
+        .withMessage("Version must be a positive integer"), body("canary.percent")
+        .optional()
+        .isFloat({ min: 0, max: 100 })
+        .withMessage("canary.percent must be between 0 and 100"), asyncHandler(async (req, res) => {
+        const service = getService(req);
+        const result = await service.publishWorkflow(req.params.id, {
+            version: req.body?.version,
+            canary: req.body?.canary?.percent
+                ? {
+                    percent: req.body.canary.percent,
+                    rules: req.body.canary.rules,
+                }
+                : undefined,
+        });
+        const engine = getRequestEngine(req);
+        if (!req.body?.canary?.percent && engine?.setActiveWorkflowVersion) {
+            engine.setActiveWorkflowVersion(req.params.id, String(result.publishedVersion));
+        }
+        if (engine?.setReleasePolicy) {
+            engine.setReleasePolicy(req.params.id, req.body?.canary?.percent
+                ? { type: "canary", canaryPercent: req.body.canary.percent }
+                : { type: "stable" });
+        }
+        if (req.body?.canary?.percent && engine?.startCanaryRelease) {
+            const targetVersion = req.body?.version ?? result.publishedVersion;
+            await engine.startCanaryRelease(req.params.id, targetVersion, req.body.canary.percent, req.body.canary.rules);
+        }
+        res.json({
+            success: true,
+            data: result,
+            message: req.body?.canary?.percent
+                ? "Workflow canary release started"
+                : "Workflow version published",
+        });
+    }));
+    router.post("/:id/publish/promote", param("id").isString().notEmpty().withMessage("Workflow ID is required"), async (req, res) => {
+        const errors = validationResult(req);
+        if (!errors.isEmpty()) {
+            return sendError(res, 400, 400, errors.array()[0].msg);
+        }
+        try {
+            const engine = getRequestEngine(req);
+            const workflowId = req.params?.id;
+            if (!engine?.promoteCanary) {
+                return sendError(res, 500, 500, "Canary promotion not supported");
+            }
+            await engine.promoteCanary(workflowId);
+            return sendSuccess(res, 200, { workflowId }, "Canary promoted");
+        }
+        catch (error) {
+            return sendError(res, 500, 500, error?.message || "Failed to promote canary");
+        }
+    });
+    router.get("/:id/release-status", param("id").isString().notEmpty().withMessage("Workflow ID is required"), async (req, res) => {
+        const errors = validationResult(req);
+        if (!errors.isEmpty()) {
+            return sendError(res, 400, 400, errors.array()[0].msg);
+        }
+        try {
+            const engine = getRequestEngine(req);
+            const workflowId = req.params?.id;
+            if (engine?.getCanaryStatus) {
+                const status = await engine.getCanaryStatus(workflowId);
+                return sendSuccess(res, 200, status, "Release status retrieved");
+            }
+            const storage = getRequestStorage(req);
+            const workflow = await storage?.loadWorkflowWithMetadata(workflowId);
+            if (!workflow) {
+                return sendError(res, 404, 404, "Workflow not found");
+            }
+            return sendSuccess(res, 200, {
+                publishedVersion: workflow.publishedVersion ?? workflow.version,
+                canaryVersion: workflow.canaryVersion,
+                canaryPercent: workflow.canaryPercent,
+                canaryStartedAt: workflow.canaryStartedAt,
+            }, "Release status retrieved");
+        }
+        catch (error) {
+            return sendError(res, 500, 500, error?.message || "Failed to get release status");
+        }
+    });
+    router.post("/:id/rollback", param("id").isString().notEmpty().withMessage("Workflow ID is required"), body("toVersion")
+        .optional()
+        .isInt({ min: 1 })
+        .withMessage("toVersion must be a positive integer"), async (req, res) => {
+        const errors = validationResult(req);
+        if (!errors.isEmpty()) {
+            return sendError(res, 400, 400, errors.array()[0].msg);
+        }
+        try {
+            const storage = getRequestStorage(req);
+            const workflowId = req.params?.id;
+            const toVersionInput = req.body?.toVersion;
+            if (storage) {
+                const workflow = await storage.loadWorkflowWithMetadata(workflowId);
+                if (!workflow) {
+                    return sendError(res, 404, 404, `Workflow with ID ${workflowId} not found`);
+                }
+                const versions = await storage.listWorkflowVersions(workflowId);
+                const sorted = versions.slice().sort((a, b) => a - b);
+                const currentPublished = workflow.publishedVersion;
+                let targetVersion = toVersionInput;
+                if (!targetVersion) {
+                    if (currentPublished) {
+                        const idx = sorted.indexOf(currentPublished);
+                        if (idx > 0) {
+                            targetVersion = sorted[idx - 1];
+                        }
+                    }
+                }
+                if (!targetVersion || !versions.includes(targetVersion)) {
+                    return sendError(res, 404, 404, "Rollback target version not found");
+                }
+                const updated = {
+                    ...workflow,
+                    publishedVersion: targetVersion,
+                    releasePolicy: { type: "stable" },
+                    updatedAt: Date.now(),
+                };
+                await storage.saveWorkflowWithMetadata(updated);
+                const engine = getRequestEngine(req);
+                if (engine?.setActiveWorkflowVersion) {
+                    engine.setActiveWorkflowVersion(workflowId, targetVersion.toString());
+                }
+                if (engine?.setReleasePolicy) {
+                    engine.setReleasePolicy(workflowId, { type: "stable" });
+                }
+                return sendSuccess(res, 200, updated, "Workflow version rolled back");
+            }
+            return sendError(res, 500, 500, "Workflow rollback not supported");
+        }
+        catch (error) {
+            Logger.error("api", "workflows", `Error rolling back workflow ${req.params?.id}: ${error?.message}`, error?.stack);
+            return sendError(res, 500, 500, error?.message || "Failed to rollback workflow");
+        }
+    });
+    router.post("/:id/lock", param("id").isString().notEmpty().withMessage("Workflow ID is required"), body("version")
+        .isInt({ min: 1 })
+        .withMessage("Version must be a positive integer"), asyncHandler(async (req, res) => {
+        const service = getService(req);
+        const result = await service.lockWorkflow(req.params.id, Number.parseInt(req.body.version, 10));
+        const engine = getRequestEngine(req);
+        if (engine?.setLockedWorkflowVersion) {
+            engine.setLockedWorkflowVersion(req.params.id, String(result.lockedVersion));
+        }
+        res.json({
+            success: true,
+            data: result,
+            message: "Workflow version locked",
+        });
+    }));
+    router.delete("/:id/lock", param("id").isString().notEmpty().withMessage("Workflow ID is required"), asyncHandler(async (req, res) => {
+        const service = getService(req);
+        const result = await service.unlockWorkflow(req.params.id);
+        const engine = getRequestEngine(req);
+        if (engine?.clearLockedWorkflowVersion) {
+            engine.clearLockedWorkflowVersion(req.params.id);
+        }
+        res.json({
+            success: true,
+            data: result,
+            message: "Workflow version unlocked",
+        });
+    }));
+}
+//# sourceMappingURL=versioning.js.map

package/dist/src/api/routes/workflows/versioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versioning.js","sourceRoot":"","sources":["../../../../../src/api/routes/workflows/versioning.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGlE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAIvD,IAAI,cAAc,GAAsC,IAAI,CAAC;AAC7D,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC/C,IAAI,CAAC,cAAc,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACxC,cAAc,GAAG,IAAI,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc;IAErD,MAAM,CAAC,GAAG,CACR,eAAe,EACf,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,aAAa,EACX,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBACxB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;oBAC7C,CAAC,CAAC,SAAS;gBACf,gBAAgB,EAAE,MAAM,CAAC,aAAa;gBACtC,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC;YACD,OAAO,EAAE,6BAA6B;SACvC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAGF,MAAM,CAAC,GAAG,CACR,wBAAwB,EACxB,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,qBAAqB,CAAC,EACzE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;YAEzC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBACpC,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAC9C,UAAU,EACV,aAAa,CACd,CAAC;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,SAAS,CACd,GAAG,EACH,GAAG,EACH,GAAG,EACH,oBAAoB,YAAY,YAAY,CAC7C,CAAC;gBACJ,CAAC;gBACD,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,WAAW,KAAK,UAAU;gBACtC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC;gBAC9C,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,SAAS,CACd,GAAG,EACH,GAAG,EACH,GAAG,EACH,oBAAoB,YAAY,YAAY,CAC7C,CAAC;YACJ,CAAC;YACD,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CACV,KAAK,EACL,WAAW,EACX,kCAAkC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,KAAK,EAAE,OAAO,EAAE,EACrE,KAAK,EAAE,KAAK,CACb,CAAC;YACF,OAAO,SAAS,CACd,GAAG,EACH,GAAG,EACH,GAAG,EACH,KAAK,EAAE,OAAO,IAAI,qCAAqC,CACxD,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAGF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,IAAI,CAAC,SAAS,CAAC;SACZ,QAAQ,EAAE;SACV,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;SACjB,WAAW,CAAC,oCAAoC,CAAC,EACpD,IAAI,CAAC,gBAAgB,CAAC;SACnB,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC7B,WAAW,CAAC,0CAA0C,CAAC,EAC1D,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;YAC1D,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO;YAC1B,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO;gBAC/B,CAAC,CAAC;oBACE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;oBAChC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;iBAC7B;gBACH,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QAGH,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAWtB,CAAC;QACd,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,wBAAwB,EAAE,CAAC;YACnE,MAAM,CAAC,wBAAwB,CAC7B,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAChC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;YAC7B,MAAM,CAAC,gBAAgB,CACrB,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO;gBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CACvB,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,gBAAgB,CAAC;YACnE,MAAM,MAAM,CAAC,kBAAkB,CAC7B,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,aAAa,EACb,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EACvB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CACtB,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO;gBAChC,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,4BAA4B;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAEtB,CAAC;YACd,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,EAAY,CAAC;YAC5C,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,gCAAgC,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACvC,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,SAAS,CACd,GAAG,EACH,GAAG,EACH,GAAG,EACH,KAAK,EAAE,OAAO,IAAI,0BAA0B,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,qBAAqB,EACrB,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAEtB,CAAC;YACd,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,EAAY,CAAC;YAC5C,IAAI,MAAM,EAAE,eAAe,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;gBACxD,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,wBAAwB,CAAC,UAAU,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,WAAW,CAChB,GAAG,EACH,GAAG,EACH;gBACE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,OAAO;gBAC/D,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,eAAe,EAAE,QAAQ,CAAC,eAAe;aAC1C,EACD,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,SAAS,CACd,GAAG,EACH,GAAG,EACH,GAAG,EACH,KAAK,EAAE,OAAO,IAAI,8BAA8B,CACjD,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAGF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,IAAI,CAAC,WAAW,CAAC;SACd,QAAQ,EAAE;SACV,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;SACjB,WAAW,CAAC,sCAAsC,CAAC,EACtD,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,EAAE,SAA+B,CAAC;YAEjE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;gBACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,SAAS,CACd,GAAG,EACH,GAAG,EACH,GAAG,EACH,oBAAoB,UAAU,YAAY,CAC3C,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;gBACnD,IAAI,aAAa,GAAG,cAAc,CAAC;gBACnC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,IAAI,gBAAgB,EAAE,CAAC;wBACrB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;wBAC7C,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;4BACZ,aAAa,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;wBAClC,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBACxD,OAAO,SAAS,CACd,GAAG,EACH,GAAG,EACH,GAAG,EACH,mCAAmC,CACpC,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAmB;oBAC9B,GAAG,QAAQ;oBACX,gBAAgB,EAAE,aAAa;oBAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACjC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC;gBACF,MAAM,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAEtB,CAAC;gBACd,IAAI,MAAM,EAAE,wBAAwB,EAAE,CAAC;oBACrC,MAAM,CAAC,wBAAwB,CAC7B,UAAU,EACV,aAAa,CAAC,QAAQ,EAAE,CACzB,CAAC;gBACJ,CAAC;gBACD,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;oBAC7B,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iCAAiC,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CACV,KAAK,EACL,WAAW,EACX,+BAA+B,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,KAAK,EAAE,OAAO,EAAE,EAClE,KAAK,EAAE,KAAK,CACb,CAAC;YACF,OAAO,SAAS,CACd,GAAG,EACH,GAAG,EACH,GAAG,EACH,KAAK,EAAE,OAAO,IAAI,6BAA6B,CAChD,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAGF,MAAM,CAAC,IAAI,CACT,WAAW,EACX,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,IAAI,CAAC,SAAS,CAAC;SACZ,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;SACjB,WAAW,CAAC,oCAAoC,CAAC,EACpD,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CACvC,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CACtC,CAAC;QAGF,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAEtB,CAAC;QACd,IAAI,MAAM,EAAE,wBAAwB,EAAE,CAAC;YACrC,MAAM,CAAC,wBAAwB,CAC7B,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAC7B,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAGF,MAAM,CAAC,MAAM,CACX,WAAW,EACX,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,EACxE,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAG3D,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAEtB,CAAC;QACd,IAAI,MAAM,EAAE,0BAA0B,EAAE,CAAC;YACvC,MAAM,CAAC,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/api/server.d.ts

@@ -0,0 +1,13 @@
+import type { Server } from "http";
+import type { WorkflowEngine } from "../engine/WorkflowEngine.js";
+import type { StorageProvider } from "../storage/StorageProvider.js";
+export interface ApiServerConfig {
+    port?: number;
+    enableAuth?: boolean;
+    enableRateLimit?: boolean;
+    enableMetrics?: boolean;
+    enableAuditLog?: boolean;
+}
+export declare function closeApiServer(server: Server): Promise<void>;
+export declare function startApiServer(engine: WorkflowEngine, storage?: StorageProvider | null, config?: ApiServerConfig): Promise<Server>;
+export { startApiServer as startServer };

package/dist/src/api/server.js

@@ -0,0 +1,311 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import cors from "cors";
+import express from "express";
+import helmet from "helmet";
+import morgan from "morgan";
+import { WebSocketServer } from "ws";
+import { getAppConfig } from "../config/AppConfig.js";
+import { setHookDispatcher } from "../event/HookManager.js";
+import { recordApiRequest } from "../metrics/index.js";
+import { AuditLogger } from "../utils/AuditLogger.js";
+import { parseEnvInt } from "../utils/env.js";
+import { errorMessage, errorStack, Logger } from "../utils/Logger.js";
+import { ApiError, ErrorCode, errorHandler } from "./ErrorHandler.js";
+import { combinedAuthMiddleware, verifyWsToken, } from "./middleware/auth.js";
+import { initRateLimiter, rateLimitMiddleware } from "./middleware/rateLimit.js";
+import { generateConceptsDocHtml } from "./docsPage.js";
+import { generateApiDocsHtml, openApiSpec } from "./openapi.js";
+import { generatePlaygroundHtml } from "./playgroundPage.js";
+import { generateWelcomeHtml } from "./welcomePage.js";
+import { normalizeApiResponse } from "./response.js";
+import { createWorkflowRouterBundle } from "./router.js";
+const apiShutdownHooks = new WeakMap();
+export async function closeApiServer(server) {
+    const hook = apiShutdownHooks.get(server);
+    if (hook) {
+        apiShutdownHooks.delete(server);
+        await hook();
+        return;
+    }
+    await new Promise((resolve) => {
+        server.close(() => resolve());
+    });
+}
+export async function startApiServer(engine, storage = null, config = {}) {
+    const port = config.port ??
+        parseEnvInt(process.env.API_PORT, 3345, { min: 0, max: 65535 });
+    const enableAuth = config.enableAuth ?? process.env.AUTH_ENABLED === "true";
+    const enableRateLimit = config.enableRateLimit ?? process.env.RATE_LIMIT_ENABLED !== "false";
+    const enableMetrics = config.enableMetrics ?? true;
+    const enableAuditLog = config.enableAuditLog ?? process.env.AUDIT_LOG_ENABLED !== "false";
+    const isProduction = process.env.NODE_ENV === "production";
+    if (isProduction) {
+        if (!process.env.JWT_SECRET || process.env.JWT_SECRET.length < 32) {
+            throw new Error("[SECURITY] Production mode requires JWT_SECRET with at least 32 characters. " +
+                "Set JWT_SECRET in your environment or disable production mode.");
+        }
+        if (process.env.AUTH_ENABLED !== "true") {
+            if (process.env.UNSAFE_DISABLE_AUTH === "true") {
+                Logger.warn("system", "security", "⚠️  UNSAFE_DISABLE_AUTH=true — authentication is DISABLED in production. " +
+                    "This is insecure and should only be used temporarily.");
+            }
+            else {
+                throw new Error("[SECURITY] Production mode requires AUTH_ENABLED=true. " +
+                    "Set AUTH_ENABLED=true or explicitly set UNSAFE_DISABLE_AUTH=true (not recommended).");
+            }
+        }
+        if (!process.env.CORS_ALLOWED_ORIGINS) {
+            Logger.warn("system", "security", "CORS_ALLOWED_ORIGINS not set — CORS will reject all cross-origin requests.");
+        }
+    }
+    const effectiveEnableAuth = isProduction
+        ? enableAuth || process.env.UNSAFE_DISABLE_AUTH !== "true"
+        : enableAuth;
+    try {
+        const app = express();
+        const { router: apiRouter, webhookManager, consoleWsManager, } = createWorkflowRouterBundle(engine, storage, { enableMetrics });
+        setHookDispatcher((payload) => {
+            webhookManager.triggerHook(payload, "system");
+            consoleWsManager.broadcastHook(payload);
+        });
+        app.use("/swagger-ui", express.static("node_modules/swagger-ui-dist"));
+        const cspDirectives = {
+            defaultSrc: ["'self'"],
+            imgSrc: ["'self'", "data:"],
+            connectSrc: ["'self'", "ws:", "wss:"],
+            fontSrc: ["'self'", "https://fonts.gstatic.com"],
+            styleSrc: ["'self'", "https://fonts.googleapis.com"],
+        };
+        if (isProduction) {
+            cspDirectives.scriptSrc = ["'self'"];
+            cspDirectives.styleSrc.push("'unsafe-inline'");
+        }
+        else {
+            cspDirectives.scriptSrc = [
+                "'self'",
+                "'unsafe-inline'",
+                "'unsafe-eval'",
+                "https://cdn.jsdelivr.net",
+                "https://unpkg.com",
+            ];
+            cspDirectives.styleSrc.push("'unsafe-inline'");
+            cspDirectives.imgSrc.push("https:");
+        }
+        app.use(helmet({
+            contentSecurityPolicy: {
+                directives: cspDirectives,
+            },
+            noSniff: true,
+            frameguard: { action: "deny" },
+            hsts: isProduction
+                ? { maxAge: 31536000, includeSubDomains: true }
+                : false,
+        }));
+        const allowedOrigins = process.env.CORS_ALLOWED_ORIGINS
+            ? process.env.CORS_ALLOWED_ORIGINS.split(",")
+                .map((o) => o.trim())
+                .filter(Boolean)
+            : [];
+        if (allowedOrigins.length > 0) {
+            app.use(cors({
+                origin: (origin, callback) => {
+                    if (!origin) {
+                        callback(null, true);
+                        return;
+                    }
+                    if (allowedOrigins.includes(origin)) {
+                        callback(null, true);
+                    }
+                    else {
+                        Logger.warn("api", "cors", `Rejected origin: ${origin}`);
+                        callback(new Error("Not allowed by CORS"));
+                    }
+                },
+                credentials: true,
+                maxAge: 86400,
+            }));
+        }
+        else if (!isProduction) {
+            app.use(cors());
+        }
+        else {
+            app.use(cors({ origin: false }));
+        }
+        app.use(express.json({ limit: process.env.JSON_BODY_LIMIT || "1mb" }));
+        app.use(morgan("dev", {
+            stream: {
+                write: (message) => {
+                    Logger.debug("api", "http", message.trim());
+                },
+            },
+        }));
+        app.use((req, res, next) => {
+            if (!req.path.startsWith("/workflow-api/v1")) {
+                next();
+                return;
+            }
+            const originalJson = res.json.bind(res);
+            res.json = ((body) => {
+                const normalized = normalizeApiResponse(body, res.statusCode || 200);
+                return originalJson(normalized);
+            });
+            next();
+        });
+        app.use((req, res, next) => {
+            const startTime = Date.now();
+            res.on("finish", () => {
+                const duration = (Date.now() - startTime) / 1000;
+                if (enableMetrics) {
+                    const normalizedPath = req.route
+                        ? `${req.baseUrl}${req.route.path}`
+                        : res.statusCode === 404
+                            ? "unmatched"
+                            : req.path
+                                .replace(/\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/gi, "/:id")
+                                .replace(/\/\d+/g, "/:id");
+                    recordApiRequest(req.method, normalizedPath, res.statusCode, duration);
+                }
+                if (enableAuditLog) {
+                    AuditLogger.logApiRequest(req.method, req.path, res.statusCode, req.user?.id, req.ip, req.get("user-agent"), req.traceId, { duration });
+                }
+            });
+            next();
+        });
+        if (enableRateLimit) {
+            if (storage) {
+                initRateLimiter(storage);
+            }
+            app.use(rateLimitMiddleware);
+        }
+        if (effectiveEnableAuth) {
+            app.use(combinedAuthMiddleware);
+        }
+        app.use("/workflow-api/v1", apiRouter);
+        app.get("/", (_req, res) => {
+            res.setHeader("Content-Type", "text/html");
+            res.send(generateWelcomeHtml(port));
+        });
+        app.get("/docs/concepts", (_req, res) => {
+            res.setHeader("Content-Type", "text/html");
+            res.send(generateConceptsDocHtml(port));
+        });
+        app.get("/playground", (_req, res) => {
+            res.setHeader("Content-Type", "text/html");
+            res.send(generatePlaygroundHtml(port));
+        });
+        app.get("/api-docs", (_req, res) => {
+            res.setHeader("Content-Type", "text/html");
+            res.send(generateApiDocsHtml());
+        });
+        app.get("/api-docs/openapi.json", (_req, res) => {
+            res.json(openApiSpec);
+        });
+        app.use((req, _res, next) => {
+            next(ApiError.notFound(`路径不存在: ${req.originalUrl}`, ErrorCode.RESOURCE_NOT_FOUND));
+        });
+        app.use(errorHandler);
+        function authenticateWsUpgrade(request) {
+            const protocols = request.headers["sec-websocket-protocol"];
+            if (protocols) {
+                const parts = protocols.split(",").map((p) => p.trim());
+                const bearerIdx = parts.indexOf("bearer");
+                if (bearerIdx !== -1 && parts[bearerIdx + 1]) {
+                    const user = verifyWsToken(parts[bearerIdx + 1]);
+                    if (user)
+                        return user;
+                }
+            }
+            const url = new URL(request.url || "", `http://${request.headers.host}`);
+            const token = url.searchParams.get("token");
+            if (token) {
+                return verifyWsToken(token);
+            }
+            const apiKey = url.searchParams.get("apiKey");
+            if (apiKey && process.env.API_KEY) {
+                const hashA = createHash("sha256").update(apiKey).digest();
+                const hashB = createHash("sha256").update(process.env.API_KEY).digest();
+                if (hashA.length === hashB.length && timingSafeEqual(hashA, hashB)) {
+                    const config = getAppConfig();
+                    return { id: config.auth.apiKeyUserId, role: config.auth.apiKeyRole };
+                }
+            }
+            return null;
+        }
+        const server = app.listen(port, () => {
+            Logger.info("system", "api", `API Server running on port ${port}`);
+            Logger.info("system", "api", `Welcome page: http://localhost:${port}/`);
+            Logger.info("system", "api", `Base URL: http://localhost:${port}/workflow-api/v1`);
+            Logger.info("system", "api", `API Docs: http://localhost:${port}/api-docs`);
+        });
+        const wss = new WebSocketServer({ noServer: true });
+        function isWebSocketOriginAllowed(request) {
+            const origin = request.headers.origin;
+            if (!origin)
+                return true;
+            const wsAllowedOrigins = process.env.CORS_ALLOWED_ORIGINS;
+            if (wsAllowedOrigins) {
+                const allowed = wsAllowedOrigins.split(",").map((o) => o.trim());
+                return allowed.includes(origin);
+            }
+            return !isProduction;
+        }
+        server.on("upgrade", (request, socket, head) => {
+            if (!isWebSocketOriginAllowed(request)) {
+                Logger.warn("api", "websocket", "WebSocket upgrade rejected by Origin policy", {
+                    origin: request.headers.origin,
+                    url: request.url,
+                });
+                socket.destroy();
+                return;
+            }
+            const wsUser = authenticateWsUpgrade(request);
+            if (effectiveEnableAuth && !wsUser) {
+                Logger.warn("api", "websocket", "WebSocket upgrade rejected: authentication failed", {
+                    url: request.url,
+                    ip: request.socket.remoteAddress,
+                });
+                socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
+                socket.destroy();
+                return;
+            }
+            const url = new URL(request.url || "", `http://${request.headers.host}`);
+            if (url.pathname === "/console/stream") {
+                wss.handleUpgrade(request, socket, head, (ws) => {
+                    consoleWsManager.handleGlobalConnection(ws, request);
+                });
+            }
+            else if (url.pathname.match(/^\/api\/console\/instances\/[^/]+\/stream$/)) {
+                const instanceId = url.pathname.split("/")[4];
+                wss.handleUpgrade(request, socket, head, (ws) => {
+                    consoleWsManager.handleConnection(ws, instanceId, request);
+                });
+            }
+            else if (url.pathname.match(/^\/workflow-api\/v1\/console\/instances\/[^/]+\/stream$/)) {
+                const instanceId = url.pathname.split("/")[6];
+                wss.handleUpgrade(request, socket, head, (ws) => {
+                    consoleWsManager.handleConnection(ws, instanceId, request);
+                });
+            }
+            else {
+                socket.destroy();
+            }
+        });
+        apiShutdownHooks.set(server, async () => {
+            webhookManager.destroy();
+            consoleWsManager.shutdown();
+            await new Promise((resolve) => {
+                server.close(() => {
+                    Logger.info("system", "api", "Server closed");
+                    resolve();
+                });
+            });
+        });
+        return server;
+    }
+    catch (error) {
+        Logger.error("system", "api", `Failed to start API server: ${errorMessage(error)}`, errorStack(error));
+        throw error;
+    }
+}
+export { startApiServer as startServer };
+//# sourceMappingURL=server.js.map