@bastani/atomic 0.9.41 → 0.9.42

package/docs/workflows/operations.md

@@ -324,9 +324,11 @@ Use slash commands for graph connect and stage attach because those are interact
 
 The run display shows stage execution durations without extra startup rows. To inspect startup diagnostics, use the workflow tool's `stage` / `stages` output. Live stages report `startup` with the current phase, total startup age, and seconds on the current step, for example `startup reload-active (45s total, 45s on current step; active)`. Phases are model resolution, route authority, resource preparation, queued/active resource reload, SDK creation, extension binding, attachment, delivery readiness, and first dispatch. An allocated session ID is not proof of attachment; first dispatch is not proof of a provider response or reviewer approval.
 
+Resource discovery allows up to four stage reloads at a time per Atomic process. `reload-queued` means the stage is waiting for a reload slot; `reload-active` means it has started loading resources. A slow active reload holds one slot, not the entire queue. This limit is separate from the workflow's stage concurrency setting.
+
 Slow startup is not automatically killed. Pause and graceful quit retain their resumable hold semantics; resume may still join the same pending creation and does not reset its age. Repeated pause/resume is not a startup restart.
 
-Explicit stage `abort()` or execution-owner cancellation rejects startup callers promptly. A cancelled stage may still show `ownershipPending: true`: non-cancellable resource loading, SDK creation, or binding must finish before its owner can be released. Cancelled queued siblings never begin their reload. Do not retry in-process while cleanup remains pending. If the operation never settles, stop the owning Atomic process before starting fresh execution; reconcile external effects first. Fresh execution is not a resumed reviewer approval, and a zero-progress run may have no usable durable continuation.
+Explicit stage `abort()` or execution-owner cancellation rejects startup callers promptly. Cancelling a stage in `reload-queued` removes it from the queue immediately, and its reload never starts. A cancelled stage may still show `ownershipPending: true`: non-cancellable resource loading, SDK creation, or binding must finish before its owner can be released. An active reload keeps its slot until it settles. Do not retry in-process while cleanup remains pending. If the operation never settles, stop the owning Atomic process before starting fresh execution; reconcile external effects first. Fresh execution is not a resumed reviewer approval, and a zero-progress run may have no usable durable continuation.
 
 ### Pausing, quitting, and resuming
 
@@ -850,6 +852,47 @@ After accepting startup recovery, inspect the original run ID with `/workflow st
 
 Invalid JSON or invalid shapes produce `CONFIG_INVALID` diagnostics. Missing config files are ignored.
 
+## Local workflow workers
+
+Local workers are opt-in. With no `localWorkers` setting or `RunOpts.localWorkers` option, Atomic does not create pool tables, worker processes, or worker polling loops. Enable a pool only for wide fan-out where running child workflows in separate processes is useful.
+
+```json
+{
+  "workflows": {
+    "localWorkers": {
+      "count": 4,
+      "definitions": [
+        { "path": "./workflows/research.ts", "exportName": "research" }
+      ]
+    },
+    "admission": {
+      "limits": { "session": 4, "process": 8 },
+      "host": { "maxLoadPerCpu": 2, "minFreeMemoryBytes": 2147483648 }
+    }
+  }
+}
+```
+
+The root workflow remains in its original process and owns the run graph, run controls, journal writes and Intercom routes. It can be an inline closure. Only an entire first-level `ctx.workflow(child)` subtree can move to a local worker. Nested workflows stay on that worker. Independent stage placement is not supported. Register every worker-eligible child definition by its module path and export name. The worker loads the module again in its own process, so the definition must be importable rather than a closure. Missing or incompatible definitions fail the run; Atomic does not fall back to local execution.
+
+Worker definitions are loaded in the SDK with `loadWorkerWorkflow(absolutePath, exportName)`, then passed to `ctx.workflow(...)`. The SDK also accepts `RunOpts.localWorkers`; the settings form applies to CLI launches. Paths in worker settings resolve against the invocation working directory. `RunOpts.localWorkers` paths resolve against `cwd` (or the current working directory when omitted). On resume, Atomic checks the saved worker options and definition entry-module digests. A changed definition or worker configuration is refused. The digest covers the entry file, not its imported dependency graph.
+
+Pools require the default-prefix local SQLite workflow journal. Memory, remote, custom-prefix, and custom journals cannot host workers. Start a new run to opt in; an existing unpooled run cannot change placement on resume. If new global worker settings prevent an older run from resuming, disable those settings for that resume.
+
+The supported placement is multiple local processes on Linux or macOS. Windows and any host without native process identity and boot identity refuse activation with an error. This is a containment requirement: lease expiry does not prove that an old process stopped. Remote hosts and network workers are not supported.
+
+The root's existing `/workflow status`, `/workflow stages`, steering, pause, quit, and resume controls still address one root. A worker failure can replay an unfinished child from its last committed checkpoint. This is at-least-once recovery. An external effect that happens before its checkpoint can happen again; use stable logical idempotency keys for effects that must not duplicate.
+
+### Worker resource limits
+
+`admission.limits` caps concurrent agent sessions and managed tool processes for one root. A session permit covers creation through disposal, including fallback and delegated sessions. A process permit remains held until the Atomic-managed process is confirmed stopped; yielding an observation wait does not release it. Processes launched outside Atomic's managed tools are not counted. The worker count is a placement limit, separate from these resource caps.
+
+`admission.host` adds launch gates for load per CPU and free memory. These measurements are advisory; they are not operating-system resource ceilings.
+
+`admission.userLimits` applies the selected session or process limit across runs that use a single canonical local SQLite journal path. Set `userDatabase` to that same path. A conflicting journal selection or unsupported storage fails clearly instead of claiming a cross-run limit that cannot be enforced. This is local-user coordination, not a multi-tenant security boundary. Include the admission option on participating non-pooled SDK runs if they should share the user-wide limit.
+
+Pooled SDK runs reject process-bound adapter, UI, persistence and similar runtime overrides before launch. CLI-owned host bindings remain local to the root; workers construct their own stage sessions.
+
 ## Settings
 
 Settings can list package sources directly:

package/docs/workflows.md

@@ -68,3 +68,28 @@ For authored graphs, design elapsed time using [runtime-aware scheduling and est
 | Run an implementation/review loop | Author a task-specific worker → fresh verifier → reducer loop with explicit evidence, repair bounds, and stop conditions. |
 | Create or edit reusable automation | A TypeScript workflow definition exported from `workflow({...})` |
 | Make a workflow robust | Design the stage graph, context handoffs, artifacts, validation gates, model fallbacks, and human approval points before coding |
+
+## Provider rate limits
+
+Workflow model chains skip accounts that are cooling down after a 429. If all eligible candidates are cooling down, the stage waits for the earliest reset instead of exhausting the chain. Atomic honors `Retry-After` seconds or HTTP dates when the provider exposes them, otherwise it uses exponential backoff with jitter, up to 60 seconds. A longer server deadline is still respected.
+
+`retry.enabled` and `retry.maxRetries` in [settings](/settings) bound retries for each candidate, including retries made within its session. Falling back does not grant the same candidate a fresh retry allowance. Disabling retries still allows an unused fallback, but does not retry a failed candidate. Waits count toward the workflow and structured-output time limits, and pause, quit, and cancellation remain available.
+
+The model-facing `workflow status` listing identifies stages waiting on a cooldown. Stage details and task results include `rateLimits`, with the configured provider ID, `rateLimitCount`, `cooldownUntil`, and `waitingUntil` while the fallback scheduler waits. Deadlines are Unix timestamps in milliseconds. Counts are shared across the process, not summed per stage.
+
+For high concurrency, an SDK host or workflow can set an optional shared request budget before starting model work:
+
+```ts
+import { configureProviderRequestBudget } from "@bastani/atomic";
+
+configureProviderRequestBudget("openai-1", { maxRequests: 30, intervalMs: 60_000 });
+configureProviderRequestBudget("openai-2", { maxRequests: 30, intervalMs: 60_000 });
+```
+
+Each budget limits starts in a rolling time window. OpenAI, Anthropic, Azure, Mistral, pi-messages, and explicit Codex SSE transports count HTTP attempts, including their internal retries. Other transports count model-stream starts; their own internal retries are not counted separately. Budgets do not limit tokens or simultaneous streams.
+
+Waiting for a budget slot does not consume an OpenAI or Anthropic SDK HTTP timeout. Workflow and structured-output time limits still include that wait.
+
+Pass `undefined` as the second argument to remove a budget, for example `configureProviderRequestBudget("openai-1", undefined)`. Configure budgets on each process start; do not put this setup behind a replay-cached `ctx.tool` call.
+
+Use the exact configured provider IDs. Separate provider IDs for separate accounts have independent limits; multiple IDs pointing to the same account do not share a limit. Cooldowns, counters, and budgets are process-local and reset when Atomic restarts. Recorded stage statistics remain available, but they do not restore a live limiter or coordinate separate Atomic processes.

package/examples/extensions/gondolin/package-lock.json

@@ -8,7 +8,7 @@
 			"name": "atomic-extension-gondolin",
 			"version": "0.79.7",
 			"dependencies": {
-				"@earendil-works/gondolin": "0.12.0"
+				"@earendil-works/gondolin": "0.14.0"
 			}
 		},
 		"node_modules/@cto.af/wtf8": {
@@ -21,31 +21,30 @@
 			}
 		},
 		"node_modules/@earendil-works/gondolin": {
-			"version": "0.12.0",
-			"resolved": "https://registry.npmjs.org/@earendil-works/gondolin/-/gondolin-0.12.0.tgz",
-			"integrity": "sha512-BXbvzQKb5QmxY5NtthRDONJTu7+IDKbzqWGrJyyNXMP7N681Tx0Q9TK8pK1ba8nUvYQTipNJyGZOsJfYiZll1A==",
+			"version": "0.14.0",
+			"resolved": "https://registry.npmjs.org/@earendil-works/gondolin/-/gondolin-0.14.0.tgz",
+			"integrity": "sha512-MSw+EGcqFJeyKHdXEfm+nMRr74ytT4x8DGIohav0oPCHeVQAB9AajquM94cv2xqvIU3VDAaZZVC07IXsOY6OVQ==",
 			"license": "Apache-2.0",
 			"dependencies": {
 				"cbor2": "^2.3.0",
-				"node-forge": "^1.3.3",
 				"ssh2": "^1.17.0",
-				"undici": "^6.21.0"
+				"undici": "^6.29.0"
 			},
 			"bin": {
 				"gondolin": "dist/bin/gondolin.js"
 			},
 			"engines": {
-				"node": ">=23.6.0"
+				"node": ">=22.19.0"
 			},
 			"optionalDependencies": {
-				"@earendil-works/gondolin-krun-runner-darwin-arm64": "0.12.0",
-				"@earendil-works/gondolin-krun-runner-linux-x64": "0.12.0"
+				"@earendil-works/gondolin-krun-runner-darwin-arm64": "0.14.0",
+				"@earendil-works/gondolin-krun-runner-linux-x64": "0.14.0"
 			}
 		},
 		"node_modules/@earendil-works/gondolin-krun-runner-darwin-arm64": {
-			"version": "0.12.0",
-			"resolved": "https://registry.npmjs.org/@earendil-works/gondolin-krun-runner-darwin-arm64/-/gondolin-krun-runner-darwin-arm64-0.12.0.tgz",
-			"integrity": "sha512-ftDlusht4PcT7Y3TuPrZIKrCXy3isiBTVMvlXYK0pcud2uXY6uwFTGeunYgP+8ND/60ddb+MImqbfmkcK8B84A==",
+			"version": "0.14.0",
+			"resolved": "https://registry.npmjs.org/@earendil-works/gondolin-krun-runner-darwin-arm64/-/gondolin-krun-runner-darwin-arm64-0.14.0.tgz",
+			"integrity": "sha512-fvuhz1CZPaEbmXC0luZoXd1obAb0bjaaGJz33Jo63bhMlosYunAahItakh7cU0dnTlNFzufOSnpGOPqtuYjnpQ==",
 			"cpu": [
 				"arm64"
 			],
@@ -59,9 +58,9 @@
 			}
 		},
 		"node_modules/@earendil-works/gondolin-krun-runner-linux-x64": {
-			"version": "0.12.0",
-			"resolved": "https://registry.npmjs.org/@earendil-works/gondolin-krun-runner-linux-x64/-/gondolin-krun-runner-linux-x64-0.12.0.tgz",
-			"integrity": "sha512-RRYsgwe2r5ApKmFNy469QgwnyjAHpAs9XANdWpTd9ol4iUYOY3sX7e0xIooAKxd+ktxGI4N/xRWicwGen3D/Ow==",
+			"version": "0.14.0",
+			"resolved": "https://registry.npmjs.org/@earendil-works/gondolin-krun-runner-linux-x64/-/gondolin-krun-runner-linux-x64-0.14.0.tgz",
+			"integrity": "sha512-91iw4smoOH/yOoAuQS6N2UZOxqSFwRhtk8rTyrokXBoWiWcveAzg4kHvnLcm40ZlNrWwzIDFrere4bkZeGDQcA==",
 			"cpu": [
 				"x64"
 			],
@@ -134,15 +133,6 @@
 			"license": "MIT",
 			"optional": true
 		},
-		"node_modules/node-forge": {
-			"version": "1.4.0",
-			"resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.4.0.tgz",
-			"integrity": "sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==",
-			"license": "(BSD-3-Clause OR GPL-2.0)",
-			"engines": {
-				"node": ">= 6.13.0"
-			}
-		},
 		"node_modules/safer-buffer": {
 			"version": "2.1.2",
 			"resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",

package/examples/extensions/gondolin/package.json

@@ -9,7 +9,7 @@
 		"check": "tsc -p ../../../test/tsconfig.remote-examples.json"
 	},
 	"dependencies": {
-		"@earendil-works/gondolin": "0.12.0"
+		"@earendil-works/gondolin": "0.14.0"
 	},
 	"atomic": {
 		"extensions": [

package/npm-shrinkwrap.json

@@ -1,16 +1,16 @@
 {
 	"name": "@bastani/atomic",
-	"version": "0.9.41",
+	"version": "0.9.42",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "@bastani/atomic",
-			"version": "0.9.41",
+			"version": "0.9.42",
 			"license": "MIT",
 			"dependencies": {
-				"@bastani/atomic-natives": "0.9.41",
-				"@bastani/pi-ai": "0.9.41",
+				"@bastani/atomic-natives": "0.9.42",
+				"@bastani/pi-ai": "0.9.42",
 				"@earendil-works/pi-agent-core": "1.4.0",
 				"@earendil-works/pi-codemode": "1.4.0",
 				"@earendil-works/pi-tui": "1.4.0",
@@ -427,18 +427,18 @@
 			}
 		},
 		"node_modules/@bastani/atomic-natives": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives/-/atomic-natives-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives/-/atomic-natives-0.9.42.tgz",
 			"license": "MIT",
 			"optionalDependencies": {
-				"@bastani/atomic-natives-darwin-arm64": "0.9.41",
-				"@bastani/atomic-natives-darwin-x64": "0.9.41",
-				"@bastani/atomic-natives-linux-arm64-gnu": "0.9.41",
-				"@bastani/atomic-natives-linux-arm64-musl": "0.9.41",
-				"@bastani/atomic-natives-linux-x64-gnu": "0.9.41",
-				"@bastani/atomic-natives-linux-x64-musl": "0.9.41",
-				"@bastani/atomic-natives-win32-arm64-msvc": "0.9.41",
-				"@bastani/atomic-natives-win32-x64-msvc": "0.9.41"
+				"@bastani/atomic-natives-darwin-arm64": "0.9.42",
+				"@bastani/atomic-natives-darwin-x64": "0.9.42",
+				"@bastani/atomic-natives-linux-arm64-gnu": "0.9.42",
+				"@bastani/atomic-natives-linux-arm64-musl": "0.9.42",
+				"@bastani/atomic-natives-linux-x64-gnu": "0.9.42",
+				"@bastani/atomic-natives-linux-x64-musl": "0.9.42",
+				"@bastani/atomic-natives-win32-arm64-msvc": "0.9.42",
+				"@bastani/atomic-natives-win32-x64-msvc": "0.9.42"
 			},
 			"engines": {
 				"bun": ">=1.4.2",
@@ -446,8 +446,8 @@
 			}
 		},
 		"node_modules/@bastani/atomic-natives-darwin-arm64": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-darwin-arm64/-/atomic-natives-darwin-arm64-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-darwin-arm64/-/atomic-natives-darwin-arm64-0.9.42.tgz",
 			"license": "MIT",
 			"os": [
 				"darwin"
@@ -458,8 +458,8 @@
 			"optional": true
 		},
 		"node_modules/@bastani/atomic-natives-darwin-x64": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-darwin-x64/-/atomic-natives-darwin-x64-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-darwin-x64/-/atomic-natives-darwin-x64-0.9.42.tgz",
 			"license": "MIT",
 			"os": [
 				"darwin"
@@ -470,8 +470,8 @@
 			"optional": true
 		},
 		"node_modules/@bastani/atomic-natives-linux-arm64-gnu": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-linux-arm64-gnu/-/atomic-natives-linux-arm64-gnu-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-linux-arm64-gnu/-/atomic-natives-linux-arm64-gnu-0.9.42.tgz",
 			"license": "MIT",
 			"os": [
 				"linux"
@@ -485,8 +485,8 @@
 			"optional": true
 		},
 		"node_modules/@bastani/atomic-natives-linux-arm64-musl": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-linux-arm64-musl/-/atomic-natives-linux-arm64-musl-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-linux-arm64-musl/-/atomic-natives-linux-arm64-musl-0.9.42.tgz",
 			"license": "MIT",
 			"os": [
 				"linux"
@@ -500,8 +500,8 @@
 			"optional": true
 		},
 		"node_modules/@bastani/atomic-natives-linux-x64-gnu": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-linux-x64-gnu/-/atomic-natives-linux-x64-gnu-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-linux-x64-gnu/-/atomic-natives-linux-x64-gnu-0.9.42.tgz",
 			"license": "MIT",
 			"os": [
 				"linux"
@@ -515,8 +515,8 @@
 			"optional": true
 		},
 		"node_modules/@bastani/atomic-natives-linux-x64-musl": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-linux-x64-musl/-/atomic-natives-linux-x64-musl-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-linux-x64-musl/-/atomic-natives-linux-x64-musl-0.9.42.tgz",
 			"license": "MIT",
 			"os": [
 				"linux"
@@ -530,8 +530,8 @@
 			"optional": true
 		},
 		"node_modules/@bastani/atomic-natives-win32-arm64-msvc": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-win32-arm64-msvc/-/atomic-natives-win32-arm64-msvc-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-win32-arm64-msvc/-/atomic-natives-win32-arm64-msvc-0.9.42.tgz",
 			"license": "MIT",
 			"os": [
 				"win32"
@@ -542,8 +542,8 @@
 			"optional": true
 		},
 		"node_modules/@bastani/atomic-natives-win32-x64-msvc": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-win32-x64-msvc/-/atomic-natives-win32-x64-msvc-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/atomic-natives-win32-x64-msvc/-/atomic-natives-win32-x64-msvc-0.9.42.tgz",
 			"license": "MIT",
 			"os": [
 				"win32"
@@ -554,8 +554,8 @@
 			"optional": true
 		},
 		"node_modules/@bastani/pi-ai": {
-			"version": "0.9.41",
-			"resolved": "https://registry.npmjs.org/@bastani/pi-ai/-/pi-ai-0.9.41.tgz",
+			"version": "0.9.42",
+			"resolved": "https://registry.npmjs.org/@bastani/pi-ai/-/pi-ai-0.9.42.tgz",
 			"license": "MIT",
 			"dependencies": {
 				"@anthropic-ai/sdk": "0.129.0",
@@ -2434,9 +2434,9 @@
 			"license": "ISC"
 		},
 		"node_modules/ip-address": {
-			"version": "10.7.2",
-			"resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.2.tgz",
-			"integrity": "sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==",
+			"version": "10.7.4",
+			"resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz",
+			"integrity": "sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==",
 			"license": "MIT",
 			"engines": {
 				"node": ">= 12"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/atomic",
-  "version": "0.9.41",
+  "version": "0.9.42",
   "description": "Atomic coding agent CLI with read, bash, edit, write tools and session management",
   "type": "module",
   "atomicConfig": {
@@ -89,8 +89,8 @@
     "prepublishOnly": "bun run clean && bun run build && bun run shrinkwrap"
   },
   "dependencies": {
-    "@bastani/atomic-natives": "0.9.41",
-    "@bastani/pi-ai": "0.9.41",
+    "@bastani/atomic-natives": "0.9.42",
+    "@bastani/pi-ai": "0.9.42",
     "@earendil-works/pi-agent-core": "1.4.0",
     "@earendil-works/pi-codemode": "1.4.0",
     "@earendil-works/pi-tui": "1.4.0",
@@ -144,7 +144,7 @@
     "ajv": "8.20.0",
     "shx": "0.3.4",
     "typescript": "7.0.2",
-    "vitest": "4.1.11"
+    "vitest": "4.1.12"
   },
   "keywords": [
     "coding-agent",

package/schemas/settings.schema.json

@@ -527,11 +527,97 @@
             },
             "journal": {
               "$ref": "#/$defs/StorageSelection"
+            },
+            "localWorkers": {
+              "type": "object",
+              "required": [
+                "count",
+                "definitions"
+              ],
+              "properties": {
+                "count": {
+                  "type": "integer",
+                  "minimum": 1,
+                  "description": "Number of local worker processes."
+                },
+                "definitions": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "required": [
+                      "path",
+                      "exportName"
+                    ],
+                    "properties": {
+                      "path": {
+                        "type": "string"
+                      },
+                      "exportName": {
+                        "type": "string"
+                      }
+                    },
+                    "additionalProperties": false
+                  },
+                  "description": "Importable child workflow definitions workers may run."
+                }
+              },
+              "additionalProperties": false
+            },
+            "admission": {
+              "type": "object",
+              "properties": {
+                "limits": {
+                  "type": "object",
+                  "properties": {
+                    "session": {
+                      "type": "integer",
+                      "minimum": 1
+                    },
+                    "process": {
+                      "type": "integer",
+                      "minimum": 1
+                    }
+                  },
+                  "additionalProperties": false
+                },
+                "userLimits": {
+                  "type": "object",
+                  "properties": {
+                    "session": {
+                      "type": "integer",
+                      "minimum": 1
+                    },
+                    "process": {
+                      "type": "integer",
+                      "minimum": 1
+                    }
+                  },
+                  "additionalProperties": false
+                },
+                "userDatabase": {
+                  "type": "string"
+                },
+                "host": {
+                  "type": "object",
+                  "properties": {
+                    "maxLoadPerCpu": {
+                      "type": "number",
+                      "minimum": 0
+                    },
+                    "minFreeMemoryBytes": {
+                      "type": "number",
+                      "minimum": 0
+                    }
+                  },
+                  "additionalProperties": false
+                }
+              },
+              "additionalProperties": false
             }
           }
         }
       ],
-      "description": "Local workflow paths, or an object with \"paths\" and \"journal\" storage settings."
+      "description": "Local workflow paths, or an object with \"paths\", \"journal\" storage, \"localWorkers\" and \"admission\" settings."
     },
     "enableSkillCommands": {
       "type": "boolean",