@codemation/core 0.10.1 → 0.11.0

package/dist/{RunIntentService-BE9CAkbf.d.ts → RunIntentService-BrEq6Jm6.d.ts}

@@ -16,1811 +16,1956 @@ type InputPortKey = string;
 type PersistedTokenId = string;
 type NodeConnectionName = string;
 //#endregion
-//#region src/contracts/testTriggerTypes.d.ts
+//#region src/triggers/polling/PollingTriggerDedupWindow.d.ts
 /**
- * Identifier minted by the host (or in-memory test runner) for one execution of a test suite.
- * One TestSuiteRun produces N child workflow runs, one per item yielded by `generateItems`.
+ * Merges processed-ID windows for polling triggers, capping the total to avoid unbounded growth.
+ * Plugin code receives an instance of this class via {@link PollingTriggerHandle.dedup}.
  */
-type TestSuiteRunId = string;
+declare class PollingTriggerDedupWindow {
+  static readonly defaultCapN = 2000;
+  merge(previous: ReadonlyArray<string>, incoming: ReadonlyArray<string>, capN?: number): ReadonlyArray<string>;
+}
+//#endregion
+//#region src/triggers/polling/PollingTriggerLogger.d.ts
 /**
- * Setup context passed to a {@link TestTriggerNodeConfig.generateItems} callback. Distinct from
- * {@link import("./runtimeTypes").TriggerSetupContext} on purpose: test triggers are not
- * activated by the live trigger lifecycle (webhooks, cron, polling) and never call `emit` —
- * the orchestrator pulls from the iterable they return and dispatches one run per item.
+ * Minimal logger surface for the polling-trigger runtime.
+ * Hosts supply this via {@link EngineDeps.pollingTriggerLogger};
+ * when absent the runtime is silent.
  */
-interface TestTriggerSetupContext<TConfig extends TestTriggerNodeConfig<unknown> = TestTriggerNodeConfig<unknown>> {
-  readonly workflowId: WorkflowId;
-  readonly nodeId: NodeId;
-  readonly config: TConfig;
-  readonly testSuiteRunId: TestSuiteRunId;
+interface PollingTriggerLogger {
+  info(message: string): void;
+  warn(message: string): void;
+  error(message: string, exception?: Error): void;
+  debug(message: string): void;
+}
+declare class NoOpPollingTriggerLogger implements PollingTriggerLogger {
+  info(): void;
+  warn(): void;
+  error(): void;
+  debug(): void;
+}
+//#endregion
+//#region src/contracts/credentialTypes.d.ts
+type CredentialTypeId = string;
+type CredentialInstanceId = string;
+type CredentialMaterialSourceKind = "db" | "env" | "code";
+type CredentialSetupStatus = "draft" | "ready";
+type CredentialHealthStatus = "unknown" | "healthy" | "failing";
+type CredentialFieldSchema = Readonly<{
+  key: string;
+  label: string;
+  type: "string" | "password" | "textarea" | "json" | "boolean";
+  required?: true;
+  order?: number;
   /**
-   * Resolves a credential session for a slot declared on this trigger's
-   * {@link import("./workflowTypes").NodeConfigBase.getCredentialRequirements}. Same contract as
-   * {@link import("./runtimeTypes").ExecutionContext.getCredential}.
+   * Where this field appears in the credential dialog. Use `"advanced"` for optional or
+   * power-user fields; they render inside a collapsible section (see `CredentialTypeDefinition.advancedSection`).
+   * Defaults to `"default"` when omitted.
    */
-  getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
-  /** AbortSignal raised when the suite is cancelled — long-running pulls should bail out. */
-  readonly signal: AbortSignal;
-}
-/**
- * A trigger config that emits **test cases**. Each item yielded by {@link generateItems}
- * becomes one workflow run (with `executionOptions.testContext` set), so 10 yielded items
- * → 10 runs marked under the same TestSuiteRun.
- *
- * The trigger is otherwise a normal {@link TriggerNodeConfig} (so the canvas treats it like
- * any other trigger), but its `triggerKind` is `"test"` so the live activation policy skips it.
- */
-interface TestTriggerNodeConfig<TOutputJson$1 = unknown> extends TriggerNodeConfig<TOutputJson$1, undefined> {
-  readonly triggerKind: "test";
+  visibility?: "default" | "advanced";
+  placeholder?: string;
+  helpText?: string;
+  /** When set, host resolves this field from process.env at runtime; env wins over stored values. */
+  envVarName?: string;
   /**
-   * Author-supplied async iterable of items, evaluated lazily. Implementations may fetch from
-   * credentialed APIs, read fixture files, or yield hard-coded items. The orchestrator iterates
-   * and dispatches one run per item, with concurrency capped by {@link concurrency} (default 4).
+   * When set, the dialog shows a copy action for this exact string (e.g. a static OAuth redirect URI
+   * pattern or documentation URL). Do not use for secret values.
    */
-  generateItems(ctx: TestTriggerSetupContext<TestTriggerNodeConfig<TOutputJson$1>>): AsyncIterable<Item<TOutputJson$1>>;
-  /** Per-suite-run cap on simultaneously-executing test cases. Default: 4. */
-  readonly concurrency?: number;
+  copyValue?: string;
+  /** Accessible label for the copy control (default: Copy). */
+  copyButtonLabel?: string;
+}>;
+type CredentialRequirement = Readonly<{
+  slotKey: string;
+  label: string;
+  acceptedTypes: ReadonlyArray<CredentialTypeId>;
+  optional?: true;
+  helpText?: string;
+  helpUrl?: string;
+}>;
+type CredentialBindingKey = Readonly<{
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  slotKey: string;
+}>;
+type CredentialBinding = Readonly<{
+  key: CredentialBindingKey;
+  instanceId: CredentialInstanceId;
+  updatedAt: string;
+}>;
+type CredentialHealth = Readonly<{
+  status: CredentialHealthStatus;
+  message?: string;
+  testedAt?: string;
+  expiresAt?: string;
+  details?: Readonly<Record<string, unknown>>;
+}>;
+type OAuth2ProviderFromPublicConfig = Readonly<{
+  authorizeUrlFieldKey: string;
+  tokenUrlFieldKey: string;
+  userInfoUrlFieldKey?: string;
+}>;
+type CredentialOAuth2ScopesFromPublicConfig = Readonly<{
+  presetFieldKey: string;
+  presetScopes: Readonly<Record<string, ReadonlyArray<string>>>;
+  customPresetKey?: string;
+  customScopesFieldKey?: string;
+}>;
+type CredentialOAuth2AuthDefinition = Readonly<{
+  kind: "oauth2";
+  providerId: string;
+  scopes: ReadonlyArray<string>;
+  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
+  clientIdFieldKey?: string;
+  clientSecretFieldKey?: string;
+} | {
+  kind: "oauth2";
+  providerFromPublicConfig: OAuth2ProviderFromPublicConfig;
+  scopes: ReadonlyArray<string>;
+  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
+  clientIdFieldKey?: string;
+  clientSecretFieldKey?: string;
+} | {
+  kind: "oauth2";
   /**
-   * Free-form description of where the test cases come from — surfaced in the node properties
-   * panel and the suite-detail header so authors revisiting the workflow six months later
-   * remember which mailbox / folder / fixture file the cases originate from.
-   *
-   * Example: `"All emails in the Gmail label \"test/triage-fixtures\" — 14 messages as of 2026-05-03."`
+   * Free-form provider identifier for telemetry, DB rows, and Better Auth provider naming.
+   * Not used for any registry lookup — URLs come from {@link authorizeUrl} / {@link tokenUrl}.
    */
-  readonly description?: string;
+  providerId: string;
   /**
-   * Resolves a human-readable label for one yielded test case (e.g. email subject). The
-   * orchestrator calls this once per yielded item, persists the result on the run, and the
-   * Tests-tab UI uses it to render the case row instead of the opaque runId. Return
-   * `undefined` to fall back to "Case #N".
+   * Authorization endpoint. May contain `{publicFieldKey}` placeholders that the runtime
+   * substitutes from the credential's resolved public config (URL-encoded).
+   * Example: `https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/authorize`
    */
-  caseLabel?(item: Item<TOutputJson$1>): string | undefined;
+  authorizeUrl: string;
+  /** Token endpoint. Same templating rules as {@link authorizeUrl}. */
+  tokenUrl: string;
+  /** Optional userinfo endpoint. Same templating rules as {@link authorizeUrl}. */
+  userInfoUrl?: string;
+  scopes: ReadonlyArray<string>;
+  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
+  clientIdFieldKey?: string;
+  clientSecretFieldKey?: string;
+}>;
+type CredentialAuthDefinition = CredentialOAuth2AuthDefinition;
+type CredentialAdvancedSectionPresentation = Readonly<{
+  /** Collapsible section title (default: "Advanced"). */
+  title?: string;
+  /** Optional short helper text shown inside the section (above the fields). */
+  description?: string;
+  /** When true, the advanced section starts expanded. Default: false (collapsed). */
+  defaultOpen?: boolean;
+}>;
+type CredentialTypeDefinition = Readonly<{
+  typeId: CredentialTypeId;
+  displayName: string;
+  description?: string;
+  publicFields?: ReadonlyArray<CredentialFieldSchema>;
+  secretFields?: ReadonlyArray<CredentialFieldSchema>;
+  /**
+   * Optional labels for the collapsible block that contains every field with `visibility: "advanced"`.
+   * If omitted, the UI still shows that block with defaults (title "Advanced", collapsed).
+   */
+  advancedSection?: CredentialAdvancedSectionPresentation;
+  supportedSourceKinds?: ReadonlyArray<CredentialMaterialSourceKind>;
+  auth?: CredentialAuthDefinition;
+}>;
+/**
+ * JSON-shaped credential field bag (public config, resolved secret material, etc.).
+ */
+type CredentialJsonRecord = Readonly<Record<string, unknown>>;
+/**
+ * Persisted credential instance with typed `publicConfig`.
+ * Hosts may specialize `secretRef` with a stricter union while remaining
+ * assignable here for session/test callbacks.
+ */
+type CredentialInstanceRecord<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord> = Readonly<{
+  instanceId: CredentialInstanceId;
+  typeId: CredentialTypeId;
+  displayName: string;
+  sourceKind: CredentialMaterialSourceKind;
+  publicConfig: TPublicConfig;
+  secretRef: CredentialJsonRecord;
+  tags: ReadonlyArray<string>;
+  setupStatus: CredentialSetupStatus;
+  createdAt: string;
+  updatedAt: string;
+}>;
+/**
+ * Arguments passed to `CredentialType.createSession` and `CredentialType.test`.
+ * Declare `TPublicConfig` / `TMaterial` on `CredentialType` so implementations are checked
+ * against your credential shapes (similar to `NodeExecutionContext.config` for nodes).
+ */
+type CredentialSessionFactoryArgs<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord> = Readonly<{
+  instance: CredentialInstanceRecord<TPublicConfig>;
+  material: TMaterial;
+  publicConfig: TPublicConfig;
+}>;
+type CredentialSessionFactory<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord, TSession = unknown> = (args: CredentialSessionFactoryArgs<TPublicConfig, TMaterial>) => Promise<TSession>;
+type CredentialHealthTester<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord> = (args: CredentialSessionFactoryArgs<TPublicConfig, TMaterial>) => Promise<CredentialHealth>;
+/**
+ * Full credential type implementation: `definition` (UI/schema), `createSession`, and `test`.
+ * Use this at registration and config boundaries; `CredentialTypeDefinition` is only the schema slice.
+ */
+type CredentialType<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord, TSession = unknown> = Readonly<{
+  definition: CredentialTypeDefinition;
+  createSession: CredentialSessionFactory<TPublicConfig, TMaterial, TSession>;
+  test: CredentialHealthTester<TPublicConfig, TMaterial>;
+}>;
+/**
+ * Credential type with unspecified generics — used for `CodemationConfig.credentialTypes`, the host registry,
+ * and anywhere a concrete `CredentialType<YourPublic, YourMaterial, YourSession>` is placed in a heterogeneous list.
+ * Using `any` here avoids unsafe `as` casts while keeping typed `satisfies CredentialType<…>` definitions.
+ */
+type AnyCredentialType = CredentialType<any, any, unknown>;
+interface CredentialSessionService {
+  getSession<TSession = unknown>(args: Readonly<{
+    workflowId: WorkflowId;
+    nodeId: NodeId;
+    slotKey: string;
+  }>): Promise<TSession>;
+}
+interface CredentialTypeRegistry {
+  listTypes(): ReadonlyArray<CredentialTypeDefinition>;
+  getType(typeId: CredentialTypeId): CredentialTypeDefinition | undefined;
+}
+declare class CredentialUnboundError extends Error {
+  readonly bindingKey: CredentialBindingKey;
+  readonly acceptedTypes: ReadonlyArray<CredentialTypeId>;
+  constructor(bindingKey: CredentialBindingKey, acceptedTypes?: ReadonlyArray<CredentialTypeId>);
+  private static createMessage;
 }
 //#endregion
-//#region src/events/runEvents.d.ts
+//#region src/contracts/collectionTypes.d.ts
 /**
- * Outcome of a single test case (one workflow run dispatched by the test-suite orchestrator).
- * - `running`: workflow still in flight
- * - `succeeded`: workflow completed AND all assertions passed (or no assertions)
- * - `failed`: workflow failed OR (workflow completed but ≥1 assertion failed)
- * - `errored` / `cancelled`: workflow itself errored or was cancelled
- */
-type TestCaseRunStatus = "running" | "succeeded" | "failed" | "errored" | "cancelled";
-/** Aggregate outcome of a TestSuiteRun. */
-type TestSuiteRunStatus = "succeeded" | "failed" | "partial" | "errored" | "cancelled";
-type RunEvent = Readonly<{
-  kind: "runCreated";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-}> | Readonly<{
-  kind: "runSaved";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  state: PersistedRunState;
-}> | Readonly<{
-  kind: "nodeQueued";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  snapshot: NodeExecutionSnapshot;
-}> | Readonly<{
-  kind: "nodeStarted";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  snapshot: NodeExecutionSnapshot;
-}> | Readonly<{
-  kind: "nodeCompleted";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  snapshot: NodeExecutionSnapshot;
-}> | Readonly<{
-  kind: "nodeFailed";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  snapshot: NodeExecutionSnapshot;
-}> | Readonly<{
-  kind: "connectionInvocationStarted";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  record: ConnectionInvocationRecord;
-}> | Readonly<{
-  kind: "connectionInvocationCompleted";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  record: ConnectionInvocationRecord;
-}> | Readonly<{
-  kind: "connectionInvocationFailed";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  record: ConnectionInvocationRecord;
-}> | Readonly<{
-  kind: "testSuiteStarted";
-  testSuiteRunId: TestSuiteRunId;
-  workflowId: WorkflowId;
-  triggerNodeId: string;
-  triggerNodeName?: string;
-  concurrency: number;
-  at: string;
-}> | Readonly<{
-  kind: "testSuiteFinished";
-  testSuiteRunId: TestSuiteRunId;
-  workflowId: WorkflowId;
-  status: TestSuiteRunStatus;
-  totalCases: number;
-  passedCases: number;
-  failedCases: number;
-  at: string;
-}> | Readonly<{
-  kind: "testCaseStarted";
-  testSuiteRunId: TestSuiteRunId;
-  testCaseIndex: number;
-  runId: RunId;
-  workflowId: WorkflowId;
-  testCaseLabel?: string;
-  at: string;
-}> | Readonly<{
-  kind: "testCaseCompleted";
-  testSuiteRunId: TestSuiteRunId;
-  testCaseIndex: number;
-  runId: RunId;
-  workflowId: WorkflowId;
-  status: TestCaseRunStatus;
-  at: string;
-}>;
-interface RunEventSubscription {
-  close(): Promise<void>;
-}
-interface RunEventBus {
-  publish(event: RunEvent): Promise<void>;
-  subscribe(onEvent: (event: RunEvent) => void): Promise<RunEventSubscription>;
-  subscribeToWorkflow(workflowId: WorkflowId, onEvent: (event: RunEvent) => void): Promise<RunEventSubscription>;
-}
-//#endregion
-//#region src/policies/executionLimits/EngineExecutionLimitsPolicy.d.ts
-interface EngineExecutionLimitsPolicyConfig {
-  readonly defaultMaxNodeActivations: number;
-  readonly hardMaxNodeActivations: number;
-  readonly defaultMaxSubworkflowDepth: number;
-  readonly hardMaxSubworkflowDepth: number;
-}
-/** Framework defaults for {@link EngineExecutionLimitsPolicy} (merged with host `runtime.engineExecutionLimits`). */
-declare const ENGINE_EXECUTION_LIMITS_DEFAULTS: EngineExecutionLimitsPolicyConfig;
-/**
- * Resolves per-run execution limits: defaults, hard ceilings, and subworkflow depth for new runs.
+ * Represents a typed store for a single collection.
+ * All rows include auto-managed id, created_at, and updated_at fields.
  */
-declare class EngineExecutionLimitsPolicy {
-  private readonly config;
-  constructor(config?: EngineExecutionLimitsPolicyConfig);
+interface CollectionStore<TRow extends Record<string, unknown> = Record<string, unknown>> {
   /**
-   * Effective options for a new root run (depth 0): defaults merged with engine ceilings.
-   * Replaces a separate one-method factory for root-run bootstrap.
+   * Insert a new row. id, created_at, and updated_at are auto-populated.
    */
-  createRootExecutionOptions(): RunExecutionOptions;
-  mergeExecutionOptionsForNewRun(parent: ParentExecutionRef | undefined, user: RunExecutionOptions | undefined): RunExecutionOptions;
-  private capNumber;
-}
-//#endregion
-//#region src/di/CoreTokens.d.ts
-declare const CoreTokens: {
-  readonly PersistedWorkflowTokenRegistry: TypeToken<PersistedWorkflowTokenRegistryLike>;
-  readonly CredentialSessionService: TypeToken<CredentialSessionService>;
-  readonly CredentialTypeRegistry: TypeToken<CredentialTypeRegistry>;
-  readonly WorkflowRunnerService: TypeToken<WorkflowRunnerService>;
-  readonly LiveWorkflowRepository: TypeToken<LiveWorkflowRepository>;
-  readonly WorkflowRepository: TypeToken<WorkflowRepository>;
-  readonly NodeResolver: TypeToken<NodeResolver>;
-  readonly WorkflowNodeInstanceFactory: TypeToken<WorkflowNodeInstanceFactory>;
-  readonly RunIdFactory: TypeToken<RunIdFactory>;
-  readonly ActivationIdFactory: TypeToken<ActivationIdFactory>;
-  readonly WorkflowExecutionRepository: TypeToken<WorkflowExecutionRepository>;
-  readonly TriggerSetupStateRepository: TypeToken<TriggerSetupStateRepository>;
-  readonly NodeActivationScheduler: TypeToken<NodeActivationScheduler>;
-  readonly RunDataFactory: TypeToken<RunDataFactory>;
-  readonly ExecutionContextFactory: TypeToken<ExecutionContextFactory>;
-  readonly RunEventBus: TypeToken<RunEventBus>;
-  readonly BinaryStorage: TypeToken<BinaryStorage>;
-  readonly WebhookBasePath: TypeToken<string>;
-  /** Engine execution limits (defaults + optional host overrides). Consumers may bind a custom instance to override. */
-  readonly EngineExecutionLimitsPolicy: TypeToken<EngineExecutionLimitsPolicy>;
-  readonly WorkflowActivationPolicy: TypeToken<WorkflowActivationPolicy>;
-};
-//#endregion
-//#region src/contracts/runTypes.d.ts
-/**
- * Test-suite linkage for a run. When set, this run was started by a TestSuiteOrchestrator
- * as one test case inside a TestSuiteRun. The `IsTestRun` node and host-side persisters key
- * off the presence of this field. Subworkflow runs inherit it from their parent run.
- */
-interface RunTestContext {
-  readonly testSuiteRunId: string;
-  readonly testCaseIndex: number;
+  insert(row: TRow): Promise<TRow & {
+    id: string;
+    created_at: Date;
+    updated_at: Date;
+  }>;
   /**
-   * Optional human-friendly label for this test case (e.g. an email subject when fixtures
-   * are loaded from a mailbox). Resolved per item by `TestTrigger.caseLabel(item)` if set,
-   * persisted on `Run.test_case_label` so the Tests-tab tree-table can show "RFQ for batch 14"
-   * instead of "run_1777755971399_bbb86beac1396".
+   * Get a single row by id.
    */
-  readonly testCaseLabel?: string;
-}
-interface RunExecutionOptions {
-  /** Run-intent override: force the inline scheduler and bypass node-level offload decisions. */
-  localOnly?: boolean;
-  /** Marks runs started from webhook handling so orchestration can apply webhook-specific continuation rules. */
-  webhook?: boolean;
-  mode?: "manual" | "debug";
-  sourceWorkflowId?: WorkflowId;
-  sourceRunId?: RunId;
-  derivedFromRunId?: RunId;
-  isMutable?: boolean;
-  /** Set by the engine for this run: 0 = root, 1 = first child subworkflow, … */
-  subworkflowDepth?: number;
-  /** Effective cap after engine policy merge (successful node completions per run). */
-  maxNodeActivations?: number;
-  /** Effective cap after engine policy merge (subworkflow nesting). */
-  maxSubworkflowDepth?: number;
-  /** Present iff started by a TestSuiteOrchestrator; propagates to subworkflow runs via {@link ParentExecutionRef.testContext}. */
-  testContext?: RunTestContext;
-}
-/** Engine-owned counters persisted with the run (worker-safe). */
-interface EngineRunCounters {
-  completedNodeActivations: number;
-}
-type RunStopCondition = Readonly<{
-  kind: "workflowCompleted";
-}> | Readonly<{
-  kind: "nodeCompleted";
-  nodeId: NodeId;
-}>;
-interface RunStateResetRequest {
-  clearFromNodeId: NodeId;
-}
-interface PersistedRunControlState {
-  stopCondition?: RunStopCondition;
-}
-interface PersistedWorkflowSnapshotNode {
-  id: NodeId;
-  kind: NodeKind;
-  name?: string;
-  nodeTokenId: PersistedTokenId;
-  configTokenId: PersistedTokenId;
-  tokenName?: string;
-  configTokenName?: string;
-  config: unknown;
-}
-interface PersistedWorkflowSnapshot {
-  id: WorkflowId;
-  name: string;
-  nodes: ReadonlyArray<PersistedWorkflowSnapshotNode>;
-  edges: ReadonlyArray<Edge>;
-  /** When the snapshot was built from a live workflow definition that configured a workflow error handler. */
-  workflowErrorHandlerConfigured?: boolean;
-  /** Connection metadata for child nodes not in the execution graph (e.g. AI agent attachments). */
-  connections?: ReadonlyArray<WorkflowNodeConnection>;
-}
-type PinnedNodeOutputsByPort = Readonly<Record<OutputPortKey, Items>>;
-interface PersistedMutableNodeState {
-  pinnedOutputsByPort?: PinnedNodeOutputsByPort;
-  lastDebugInput?: Items;
-}
-interface PersistedMutableRunState {
-  nodesById: Readonly<Record<NodeId, PersistedMutableNodeState>>;
-}
-type NodeInputsByPort = Readonly<Record<InputPortKey, Items>>;
-interface RunQueueEntry {
-  nodeId: NodeId;
-  input: Items;
-  toInput?: InputPortKey;
-  batchId?: string;
-  from?: Readonly<{
-    nodeId: NodeId;
-    output: OutputPortKey;
+  get(id: string): Promise<(TRow & {
+    id: string;
+    created_at: Date;
+    updated_at: Date;
+  }) | null>;
+  /**
+   * Find a single row matching the provided filter.
+   */
+  findOne(filter: Partial<TRow>): Promise<(TRow & {
+    id: string;
+    created_at: Date;
+    updated_at: Date;
+  }) | null>;
+  /**
+   * List rows with optional pagination and filtering.
+   */
+  list(opts?: {
+    limit?: number;
+    offset?: number;
+    where?: Partial<TRow>;
+  }): Promise<{
+    rows: ReadonlyArray<TRow & {
+      id: string;
+      created_at: Date;
+      updated_at: Date;
+    }>;
+    total: number;
   }>;
-  collect?: Readonly<{
-    expectedInputs: ReadonlyArray<InputPortKey>;
-    received: Readonly<Record<InputPortKey, Items>>;
+  /**
+   * Update a row by id with partial data.
+   */
+  update(id: string, patch: Partial<TRow>): Promise<TRow & {
+    id: string;
+    created_at: Date;
+    updated_at: Date;
+  }>;
+  /**
+   * Delete a row by id. Hard delete only (no soft delete).
+   */
+  delete(id: string): Promise<{
+    deleted: boolean;
   }>;
 }
-type NodeExecutionStatus = "pending" | "queued" | "running" | "completed" | "failed" | "skipped";
-interface NodeExecutionError {
-  message: string;
-  name?: string;
-  stack?: string;
-  details?: JsonValue;
-}
-interface NodeExecutionSnapshot {
-  runId: RunId;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  activationId?: NodeActivationId;
-  parent?: ParentExecutionRef;
-  status: NodeExecutionStatus;
-  usedPinnedOutput?: boolean;
-  queuedAt?: string;
-  startedAt?: string;
-  finishedAt?: string;
-  updatedAt: string;
-  inputsByPort?: NodeInputsByPort;
-  outputs?: NodeOutputs;
-  error?: NodeExecutionError;
-}
-/** Stable id for a single connection invocation row in {@link ConnectionInvocationRecord}. */
-type ConnectionInvocationId = string;
 /**
- * One logical LLM or tool call under an owning workflow node (e.g. AI agent).
- * The owning node defines what {@link managedInput} and {@link managedOutput} contain.
+ * Runtime collections context: keyed by collection name.
  */
-interface ConnectionInvocationRecord {
-  readonly invocationId: ConnectionInvocationId;
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly connectionNodeId: NodeId;
-  readonly parentAgentNodeId: NodeId;
-  readonly parentAgentActivationId: NodeActivationId;
-  readonly status: NodeExecutionStatus;
-  readonly managedInput?: JsonValue;
-  readonly managedOutput?: JsonValue;
-  readonly error?: NodeExecutionError;
-  readonly queuedAt?: string;
-  readonly startedAt?: string;
-  readonly finishedAt?: string;
-  readonly updatedAt: string;
-  /** Per-item iteration id minted by the engine when this invocation occurred inside a runnable node's per-item loop. */
-  readonly iterationId?: NodeIterationId;
-  /** Item index (0-based) of the iteration that produced this invocation. */
-  readonly itemIndex?: number;
-  /** When set, this invocation was produced inside a sub-agent triggered by the named parent invocation. */
-  readonly parentInvocationId?: ConnectionInvocationId;
-}
-/** Arguments for appending a {@link ConnectionInvocationRecord} (engine fills run/workflow ids and timestamps). */
-type ConnectionInvocationAppendArgs = Readonly<{
-  invocationId: ConnectionInvocationId;
-  connectionNodeId: NodeId;
-  parentAgentNodeId: NodeId;
-  parentAgentActivationId: NodeActivationId;
-  status: NodeExecutionStatus;
-  managedInput?: JsonValue;
-  managedOutput?: JsonValue;
-  error?: NodeExecutionError;
-  queuedAt?: string;
-  startedAt?: string;
-  finishedAt?: string;
-  iterationId?: NodeIterationId;
-  itemIndex?: number;
-  parentInvocationId?: ConnectionInvocationId;
-}>;
-interface RunCurrentState {
-  outputsByNode: Record<NodeId, NodeOutputs>;
-  nodeSnapshotsByNodeId: Record<NodeId, NodeExecutionSnapshot>;
-  /** Append-only history of connection-scoped invocations (LLM/tool) for inspector and canvas. */
-  connectionInvocations?: ReadonlyArray<ConnectionInvocationRecord>;
-  mutableState?: PersistedMutableRunState;
+type CollectionsContext = Readonly<Record<string, CollectionStore>>;
+//#endregion
+//#region src/contracts/CostTrackingTelemetryContract.d.ts
+type CostTrackingComponent = "chat" | "ocr" | "rag";
+declare const CostTrackingTelemetryMetricNames: {
+  readonly usage: "codemation.cost.usage";
+  readonly estimatedCost: "codemation.cost.estimated";
+};
+declare const CostTrackingTelemetryAttributeNames: {
+  readonly component: "cost.component";
+  readonly provider: "cost.provider";
+  readonly operation: "cost.operation";
+  readonly pricingKey: "cost.pricing_key";
+  readonly usageUnit: "cost.usage_unit";
+  readonly currency: "cost.currency";
+  readonly currencyScale: "cost.currency_scale";
+  readonly estimateKind: "cost.estimate_kind";
+};
+interface CostTrackingUsageRecord {
+  readonly component: CostTrackingComponent;
+  readonly provider: string;
+  readonly operation: string;
+  readonly pricingKey: string;
+  readonly usageUnit: string;
+  readonly quantity: number;
+  readonly modelName?: string;
+  readonly attributes?: TelemetryAttributes;
 }
-interface CurrentStateExecutionRequest {
-  workflow: WorkflowDefinition;
-  items?: Items;
-  parent?: ParentExecutionRef;
-  executionOptions?: RunExecutionOptions;
-  workflowSnapshot?: PersistedWorkflowSnapshot;
-  mutableState?: PersistedMutableRunState;
-  currentState?: RunCurrentState;
-  stopCondition?: RunStopCondition;
-  reset?: RunStateResetRequest;
+interface CostTrackingPriceQuote {
+  readonly currency: string;
+  readonly currencyScale: number;
+  readonly estimatedAmountMinor: number;
+  readonly estimateKind: "catalog";
 }
-interface ExecutionFrontierPlan {
-  rootNodeId?: NodeId;
-  rootNodeInput?: Items;
-  queue: RunQueueEntry[];
-  currentState: RunCurrentState;
-  stopCondition: RunStopCondition;
-  satisfiedNodeIds: ReadonlyArray<NodeId>;
-  skippedNodeIds: ReadonlyArray<NodeId>;
-  clearedNodeIds: ReadonlyArray<NodeId>;
-  preservedPinnedNodeIds: ReadonlyArray<NodeId>;
+interface CostTrackingTelemetry {
+  captureUsage(args: CostTrackingUsageRecord): Promise<CostTrackingPriceQuote | undefined>;
+  forScope(scope: TelemetryScope): CostTrackingTelemetry;
 }
-type RunStatus = "running" | "pending" | "completed" | "failed";
-interface RunSummary {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  status: RunStatus;
-  /**
-   * Test-case status for runs dispatched as part of a TestSuiteRun. Carries the
-   * assertion-rollup-corrected outcome the test orchestrator persists onto the row, so the
-   * executions list can show "failed" for a run whose workflow completed cleanly but whose
-   * assertions caught regressions. Absent for non-test runs and legacy rows.
-   */
-  testCaseStatus?: TestCaseRunStatus;
-  /** ISO timestamp when the run finished (derived from node snapshots or store `updatedAt`); omit while running/pending. */
-  finishedAt?: string;
-  parent?: ParentExecutionRef;
-  executionOptions?: RunExecutionOptions;
+interface CostTrackingTelemetryFactory {
+  create(args: Readonly<{
+    telemetry: ExecutionTelemetry;
+  }>): CostTrackingTelemetry;
 }
-interface PendingNodeExecution {
-  runId: RunId;
-  activationId: NodeActivationId;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  itemsIn: number;
-  inputsByPort: NodeInputsByPort;
-  receiptId: string;
-  queue?: string;
-  batchId?: string;
-  enqueuedAt: string;
+//#endregion
+//#region src/contracts/NoOpTelemetryArtifactReference.d.ts
+declare class NoOpTelemetryArtifactReference {
+  static readonly value: TelemetryArtifactReference;
 }
-interface PersistedRunSchedulingState {
-  pending?: PendingNodeExecution;
-  queue: RunQueueEntry[];
+//#endregion
+//#region src/contracts/NoOpTelemetrySpanScope.d.ts
+declare class NoOpTelemetrySpanScope {
+  static readonly value: TelemetrySpanScope;
+  /** Internal: the shared no-op {@link NodeExecutionTelemetry} that {@link NoOpNodeExecutionTelemetry} re-exposes. */
+  static readonly nodeExecutionTelemetryValue: NodeExecutionTelemetry;
 }
-interface PersistedRunState {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  /** Canonical terminal time for listings and retention when persisted on the run root. */
-  finishedAt?: string;
-  /** Optimistic concurrency / CAS on the run aggregate (repository may increment on save). */
-  revision?: number;
-  parent?: ParentExecutionRef;
-  executionOptions?: RunExecutionOptions;
-  control?: PersistedRunControlState;
-  workflowSnapshot?: PersistedWorkflowSnapshot;
-  mutableState?: PersistedMutableRunState;
-  /** Frozen at createRun from workflow + runtime defaults for prune/storage decisions. */
-  policySnapshot?: PersistedRunPolicySnapshot;
-  /** Successful node completions so far (for activation budget). */
-  engineCounters?: EngineRunCounters;
-  status: RunStatus;
-  pending?: PendingNodeExecution;
-  queue: RunQueueEntry[];
-  outputsByNode: Record<NodeId, NodeOutputs>;
-  nodeSnapshotsByNodeId: Record<NodeId, NodeExecutionSnapshot>;
-  /** Append-only history of connection invocations (LLM/tool) nested under owning nodes. */
-  connectionInvocations?: ReadonlyArray<ConnectionInvocationRecord>;
+//#endregion
+//#region src/contracts/NoOpNodeExecutionTelemetry.d.ts
+declare class NoOpNodeExecutionTelemetry {
+  static readonly value: NodeExecutionTelemetry;
 }
-interface WorkflowExecutionRepository {
-  createRun(args: {
+//#endregion
+//#region src/contracts/NoOpExecutionTelemetry.d.ts
+declare class NoOpExecutionTelemetry {
+  static readonly value: ExecutionTelemetry;
+}
+//#endregion
+//#region src/contracts/NoOpExecutionTelemetryFactory.d.ts
+declare class NoOpExecutionTelemetryFactory implements ExecutionTelemetryFactory {
+  create(_: Readonly<{
     runId: RunId;
     workflowId: WorkflowId;
-    startedAt: string;
     parent?: ParentExecutionRef;
-    executionOptions?: RunExecutionOptions;
-    control?: PersistedRunControlState;
-    workflowSnapshot?: PersistedWorkflowSnapshot;
-    mutableState?: PersistedMutableRunState;
     policySnapshot?: PersistedRunPolicySnapshot;
-    engineCounters?: EngineRunCounters;
-  }): Promise<void>;
-  load(runId: RunId): Promise<PersistedRunState | undefined>;
-  loadSchedulingState(runId: RunId): Promise<PersistedRunSchedulingState | undefined>;
-  save(state: PersistedRunState): Promise<void>;
-  deleteRun?(runId: RunId): Promise<void>;
+  }>): ExecutionTelemetry;
 }
-interface WorkflowExecutionListingRepository {
-  listRuns(args?: Readonly<{
-    workflowId?: WorkflowId;
-    limit?: number;
-  }>): Promise<ReadonlyArray<RunSummary>>;
+//#endregion
+//#region src/contracts/CodemationTelemetryAttributeNames.d.ts
+declare class CodemationTelemetryAttributeNames {
+  static readonly workflowId = "codemation.workflow.id";
+  static readonly runId = "codemation.run.id";
+  static readonly nodeId = "codemation.node.id";
+  static readonly activationId = "codemation.activation.id";
+  static readonly nodeType = "codemation.node.type";
+  static readonly nodeRole = "codemation.node.role";
+  static readonly workflowFolder = "codemation.workflow.folder";
+  static readonly connectionInvocationId = "codemation.connection.invocation_id";
+  static readonly toolName = "codemation.tool.name";
+  static readonly traceParentRunId = "codemation.parent.run.id";
+  /** Per-item iteration that emitted this span/metric. Set on spans recorded inside a runnable per-item loop. */
+  static readonly iterationId = "codemation.iteration.id";
+  /** Item index (0-based) of the iteration. */
+  static readonly iterationIndex = "codemation.iteration.index";
+  /** Set when this span/metric was recorded under a sub-agent triggered by an outer LLM/tool call. */
+  static readonly parentInvocationId = "codemation.parent.invocation_id";
+  /** MCP server id on spans created for callTool invocations. */
+  static readonly mcpServerId = "mcp.server_id";
+  /** MCP tool name on spans created for callTool invocations. */
+  static readonly mcpToolName = "mcp.tool_name";
 }
-/** Runs eligible for retention-based pruning (completed or failed, older than cutoff). */
-interface RunPruneCandidate {
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly startedAt: string;
-  readonly finishedAt: string;
+//#endregion
+//#region src/contracts/GenAiTelemetryAttributeNames.d.ts
+declare class GenAiTelemetryAttributeNames {
+  static readonly operationName = "gen_ai.operation.name";
+  static readonly requestModel = "gen_ai.request.model";
+  static readonly usageInputTokens = "gen_ai.usage.input_tokens";
+  static readonly usageOutputTokens = "gen_ai.usage.output_tokens";
+  static readonly usageTotalTokens = "gen_ai.usage.total_tokens";
+  static readonly usageCacheReadInputTokens = "gen_ai.usage.cache_read.input_tokens";
+  static readonly usageCacheCreationInputTokens = "gen_ai.usage.cache_creation.input_tokens";
+  static readonly usageReasoningTokens = "codemation.gen_ai.usage.reasoning_tokens";
 }
-interface WorkflowExecutionPruneRepository {
-  listRunsOlderThan(args: Readonly<{
-    nowIso: string;
-    defaultRetentionSeconds: number;
-    limit?: number;
-  }>): Promise<ReadonlyArray<RunPruneCandidate>>;
+//#endregion
+//#region src/contracts/CodemationTelemetryMetricNames.d.ts
+declare class CodemationTelemetryMetricNames {
+  static readonly agentTurns = "codemation.ai.turns";
+  static readonly agentToolCalls = "codemation.ai.tool_calls";
+  static readonly gmailMessagesEmitted = "codemation.gmail.messages_emitted";
+  static readonly gmailAttachments = "codemation.gmail.attachments";
+  static readonly gmailAttachmentBytes = "codemation.gmail.attachment_bytes";
 }
-type RunResult = {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  status: "completed";
-  outputs: Items;
-} | {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  status: "pending";
-  pending: PendingNodeExecution;
-} | {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  status: "failed";
-  error: {
-    message: string;
-  };
-};
-type WebhookRunResult = Readonly<{
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  runStatus: "pending" | "completed";
-  response: Items;
-}>;
-interface PersistedWorkflowTokenRegistryLike {
-  register(type: TypeToken<unknown>, packageId: string, persistedNameOverride?: string): string;
-  getTokenId(type: TypeToken<unknown>): string | undefined;
-  resolve(tokenId: string): TypeToken<unknown> | undefined;
-  registerFromWorkflows?(workflows: ReadonlyArray<WorkflowDefinition>): void;
+//#endregion
+//#region src/contracts/telemetryTypes.d.ts
+type TelemetryAttributePrimitive = string | number | boolean | null;
+interface TelemetryAttributes {
+  readonly [key: string]: TelemetryAttributePrimitive | undefined;
 }
-interface RunCompletionNotifier {
-  resolveRunCompletion(result: RunResult): void;
-  resolveWebhookResponse(result: WebhookRunResult): void;
+interface TelemetryMetricRecord {
+  readonly name: string;
+  readonly value: number;
+  readonly unit?: string;
+  readonly attributes?: TelemetryAttributes;
 }
-interface RunEventPublisherDeps {
-  eventBus?: RunEventBus;
+interface TelemetrySpanEventRecord {
+  readonly name: string;
+  readonly occurredAt?: Date;
+  readonly attributes?: TelemetryAttributes;
+}
+interface TelemetryArtifactAttachment {
+  readonly kind: string;
+  readonly contentType: string;
+  readonly previewText?: string;
+  readonly previewJson?: JsonValue;
+  readonly payloadText?: string;
+  readonly payloadJson?: JsonValue;
+  readonly bytes?: number;
+  readonly truncated?: boolean;
+  readonly expiresAt?: Date;
+}
+interface TelemetryArtifactReference {
+  readonly artifactId: string;
+  readonly traceId?: string;
+  readonly spanId?: string;
+}
+interface TelemetrySpanEnd {
+  readonly status?: "ok" | "error";
+  readonly statusMessage?: string;
+  readonly endedAt?: Date;
+  readonly attributes?: TelemetryAttributes;
+}
+interface TelemetryChildSpanStart {
+  readonly name: string;
+  readonly kind?: "internal" | "client";
+  readonly startedAt?: Date;
+  readonly attributes?: TelemetryAttributes;
+}
+interface TelemetryScope {
+  readonly traceId?: string;
+  readonly spanId?: string;
+  readonly costTracking?: CostTrackingTelemetry;
+  addSpanEvent(args: TelemetrySpanEventRecord): Promise<void> | void;
+  recordMetric(args: TelemetryMetricRecord): Promise<void> | void;
+  attachArtifact(args: TelemetryArtifactAttachment): Promise<TelemetryArtifactReference> | TelemetryArtifactReference;
+}
+interface TelemetrySpanScope extends TelemetryScope {
+  readonly traceId: string;
+  readonly spanId: string;
+  end(args?: TelemetrySpanEnd): Promise<void> | void;
+  /**
+   * Lift this span into a {@link NodeExecutionTelemetry} scoped to a different (nodeId, activationId).
+   * Children created via the returned telemetry's `startChildSpan` get this span as their parent.
+   *
+   * Used at the sub-agent boundary so that nested runtime telemetry parents under the agent.tool.call
+   * span instead of the orchestrator's node-level span.
+   */
+  asNodeTelemetry(args: Readonly<{
+    nodeId: NodeId;
+    activationId: NodeActivationId;
+  }>): NodeExecutionTelemetry;
+}
+interface NodeExecutionTelemetry extends ExecutionTelemetry, TelemetrySpanScope {
+  startChildSpan(args: TelemetryChildSpanStart): TelemetrySpanScope;
+}
+interface ExecutionTelemetry extends TelemetryScope {
+  readonly traceId: string;
+  readonly spanId: string;
+  forNode(args: Readonly<{
+    nodeId: NodeId;
+    activationId: NodeActivationId;
+  }>): NodeExecutionTelemetry;
+}
+interface ExecutionTelemetryFactory {
+  create(args: Readonly<{
+    runId: RunId;
+    workflowId: WorkflowId;
+    parent?: ParentExecutionRef;
+    policySnapshot?: PersistedRunPolicySnapshot;
+  }>): ExecutionTelemetry;
 }
 //#endregion
-//#region src/triggers/polling/PollingTriggerDedupWindow.d.ts
+//#region src/contracts/workflowActivationPolicy.d.ts
 /**
- * Merges processed-ID windows for polling triggers, capping the total to avoid unbounded growth.
- * Plugin code receives an instance of this class via {@link PollingTriggerHandle.dedup}.
+ * Host-controlled policy: when false, trigger {@link TriggerNode} setup is skipped and webhook routes
+ * for that workflow are not registered (see engine trigger runtime + webhook matcher).
  */
-declare class PollingTriggerDedupWindow {
-  static readonly defaultCapN = 2000;
-  merge(previous: ReadonlyArray<string>, incoming: ReadonlyArray<string>, capN?: number): ReadonlyArray<string>;
+interface WorkflowActivationPolicy {
+  isActive(workflowId: WorkflowId): boolean;
+}
+/** Default for tests and harnesses: every workflow is treated as active (legacy behavior). */
+declare class AllWorkflowsActiveWorkflowActivationPolicy implements WorkflowActivationPolicy {
+  isActive(_workflowId: WorkflowId): boolean;
 }
 //#endregion
-//#region src/triggers/polling/PollingTriggerLogger.d.ts
-/**
- * Minimal logger surface for the polling-trigger runtime.
- * Hosts supply this via {@link EngineDeps.pollingTriggerLogger};
- * when absent the runtime is silent.
- */
-interface PollingTriggerLogger {
-  info(message: string): void;
+//#region src/contracts/webhookTypes.d.ts
+type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+interface WebhookControlSignal {
+  readonly __webhookControl: true;
+  readonly kind: "respondNow" | "respondNowAndContinue";
+  readonly responseItems: Items;
+  readonly continueItems?: Items;
+}
+interface WebhookTriggerRoutingDiagnostics {
   warn(message: string): void;
-  error(message: string, exception?: Error): void;
-  debug(message: string): void;
+  /** Inactive workflows omitted from the webhook route index (optional; host should wire for clarity at boot/reload). */
+  info?(message: string): void;
 }
-declare class NoOpPollingTriggerLogger implements PollingTriggerLogger {
-  info(): void;
-  warn(): void;
-  error(): void;
-  debug(): void;
+interface TriggerInstanceId {
+  workflowId: WorkflowId;
+  nodeId: NodeId;
 }
-//#endregion
-//#region src/contracts/credentialTypes.d.ts
-type CredentialTypeId = string;
-type CredentialInstanceId = string;
-type CredentialMaterialSourceKind = "db" | "env" | "code";
-type CredentialSetupStatus = "draft" | "ready";
-type CredentialHealthStatus = "unknown" | "healthy" | "failing";
-type CredentialFieldSchema = Readonly<{
-  key: string;
-  label: string;
-  type: "string" | "password" | "textarea" | "json" | "boolean";
-  required?: true;
-  order?: number;
-  /**
-   * Where this field appears in the credential dialog. Use `"advanced"` for optional or
-   * power-user fields; they render inside a collapsible section (see `CredentialTypeDefinition.advancedSection`).
-   * Defaults to `"default"` when omitted.
-   */
-  visibility?: "default" | "advanced";
-  placeholder?: string;
-  helpText?: string;
-  /** When set, host resolves this field from process.env at runtime; env wins over stored values. */
-  envVarName?: string;
-  /**
-   * When set, the dialog shows a copy action for this exact string (e.g. a static OAuth redirect URI
-   * pattern or documentation URL). Do not use for secret values.
-   */
-  copyValue?: string;
-  /** Accessible label for the copy control (default: Copy). */
-  copyButtonLabel?: string;
-}>;
-type CredentialRequirement = Readonly<{
-  slotKey: string;
-  label: string;
-  acceptedTypes: ReadonlyArray<CredentialTypeId>;
-  optional?: true;
-  helpText?: string;
-  helpUrl?: string;
-}>;
-type CredentialBindingKey = Readonly<{
+/** Match for an incoming HTTP request: user-defined URL segment + workflow trigger node. */
+interface WebhookInvocationMatch {
+  /** Same value as the webhook trigger's configured endpoint key (URL segment under the webhook base path). */
+  endpointPath: string;
   workflowId: WorkflowId;
   nodeId: NodeId;
-  slotKey: string;
-}>;
-type CredentialBinding = Readonly<{
-  key: CredentialBindingKey;
-  instanceId: CredentialInstanceId;
-  updatedAt: string;
-}>;
-type CredentialHealth = Readonly<{
-  status: CredentialHealthStatus;
-  message?: string;
-  testedAt?: string;
-  expiresAt?: string;
-  details?: Readonly<Record<string, unknown>>;
-}>;
-type OAuth2ProviderFromPublicConfig = Readonly<{
-  authorizeUrlFieldKey: string;
-  tokenUrlFieldKey: string;
-  userInfoUrlFieldKey?: string;
-}>;
-type CredentialOAuth2ScopesFromPublicConfig = Readonly<{
-  presetFieldKey: string;
-  presetScopes: Readonly<Record<string, ReadonlyArray<string>>>;
-  customPresetKey?: string;
-  customScopesFieldKey?: string;
-}>;
-type CredentialOAuth2AuthDefinition = Readonly<{
-  kind: "oauth2";
-  providerId: string;
-  scopes: ReadonlyArray<string>;
-  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
-  clientIdFieldKey?: string;
-  clientSecretFieldKey?: string;
+  methods: ReadonlyArray<HttpMethod>;
+  parseJsonBody?: (body: unknown) => unknown;
+}
+/** Result of resolving an HTTP method + endpoint path against the catalog webhook index (404 vs 405 vs match). */
+type WebhookTriggerResolution = {
+  status: "notFound";
 } | {
-  kind: "oauth2";
-  providerFromPublicConfig: OAuth2ProviderFromPublicConfig;
-  scopes: ReadonlyArray<string>;
-  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
-  clientIdFieldKey?: string;
-  clientSecretFieldKey?: string;
+  status: "methodNotAllowed";
+  match: WebhookInvocationMatch;
 } | {
-  kind: "oauth2";
-  /**
-   * Free-form provider identifier for telemetry, DB rows, and Better Auth provider naming.
-   * Not used for any registry lookup — URLs come from {@link authorizeUrl} / {@link tokenUrl}.
-   */
-  providerId: string;
-  /**
-   * Authorization endpoint. May contain `{publicFieldKey}` placeholders that the runtime
-   * substitutes from the credential's resolved public config (URL-encoded).
-   * Example: `https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/authorize`
-   */
-  authorizeUrl: string;
-  /** Token endpoint. Same templating rules as {@link authorizeUrl}. */
-  tokenUrl: string;
-  /** Optional userinfo endpoint. Same templating rules as {@link authorizeUrl}. */
-  userInfoUrl?: string;
-  scopes: ReadonlyArray<string>;
-  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
-  clientIdFieldKey?: string;
-  clientSecretFieldKey?: string;
-}>;
-type CredentialAuthDefinition = CredentialOAuth2AuthDefinition;
-type CredentialAdvancedSectionPresentation = Readonly<{
-  /** Collapsible section title (default: "Advanced"). */
-  title?: string;
-  /** Optional short helper text shown inside the section (above the fields). */
-  description?: string;
-  /** When true, the advanced section starts expanded. Default: false (collapsed). */
-  defaultOpen?: boolean;
-}>;
-type CredentialTypeDefinition = Readonly<{
-  typeId: CredentialTypeId;
-  displayName: string;
-  description?: string;
-  publicFields?: ReadonlyArray<CredentialFieldSchema>;
-  secretFields?: ReadonlyArray<CredentialFieldSchema>;
-  /**
-   * Optional labels for the collapsible block that contains every field with `visibility: "advanced"`.
-   * If omitted, the UI still shows that block with defaults (title "Advanced", collapsed).
-   */
-  advancedSection?: CredentialAdvancedSectionPresentation;
-  supportedSourceKinds?: ReadonlyArray<CredentialMaterialSourceKind>;
-  auth?: CredentialAuthDefinition;
-}>;
-/**
- * JSON-shaped credential field bag (public config, resolved secret material, etc.).
- */
-type CredentialJsonRecord = Readonly<Record<string, unknown>>;
-/**
- * Persisted credential instance with typed `publicConfig`.
- * Hosts may specialize `secretRef` with a stricter union while remaining
- * assignable here for session/test callbacks.
- */
-type CredentialInstanceRecord<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord> = Readonly<{
-  instanceId: CredentialInstanceId;
-  typeId: CredentialTypeId;
-  displayName: string;
-  sourceKind: CredentialMaterialSourceKind;
-  publicConfig: TPublicConfig;
-  secretRef: CredentialJsonRecord;
-  tags: ReadonlyArray<string>;
-  setupStatus: CredentialSetupStatus;
-  createdAt: string;
-  updatedAt: string;
-}>;
-/**
- * Arguments passed to `CredentialType.createSession` and `CredentialType.test`.
- * Declare `TPublicConfig` / `TMaterial` on `CredentialType` so implementations are checked
- * against your credential shapes (similar to `NodeExecutionContext.config` for nodes).
- */
-type CredentialSessionFactoryArgs<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord> = Readonly<{
-  instance: CredentialInstanceRecord<TPublicConfig>;
-  material: TMaterial;
-  publicConfig: TPublicConfig;
-}>;
-type CredentialSessionFactory<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord, TSession = unknown> = (args: CredentialSessionFactoryArgs<TPublicConfig, TMaterial>) => Promise<TSession>;
-type CredentialHealthTester<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord> = (args: CredentialSessionFactoryArgs<TPublicConfig, TMaterial>) => Promise<CredentialHealth>;
-/**
- * Full credential type implementation: `definition` (UI/schema), `createSession`, and `test`.
- * Use this at registration and config boundaries; `CredentialTypeDefinition` is only the schema slice.
- */
-type CredentialType<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord, TSession = unknown> = Readonly<{
-  definition: CredentialTypeDefinition;
-  createSession: CredentialSessionFactory<TPublicConfig, TMaterial, TSession>;
-  test: CredentialHealthTester<TPublicConfig, TMaterial>;
-}>;
+  status: "ok";
+  match: WebhookInvocationMatch;
+};
 /**
- * Credential type with unspecified generics — used for `CodemationConfig.credentialTypes`, the host registry,
- * and anywhere a concrete `CredentialType<YourPublic, YourMaterial, YourSession>` is placed in a heterogeneous list.
- * Using `any` here avoids unsafe `as` casts while keeping typed `satisfies CredentialType<…>` definitions.
+ * Resolves webhook routes from workflow definitions (catalog-backed index, no registration at trigger setup).
  */
-type AnyCredentialType = CredentialType<any, any, unknown>;
-interface CredentialSessionService {
-  getSession<TSession = unknown>(args: Readonly<{
+interface WebhookTriggerMatcher {
+  match(args: {
+    endpointPath: string;
+    method: HttpMethod;
+  }): WebhookInvocationMatch | undefined;
+  lookup(endpointPath: string): WebhookInvocationMatch | undefined;
+  onEngineWorkflowsLoaded?(): void;
+  onEngineStopped?(): void;
+  /** Rebuild route index after activation changes without stopping the engine. */
+  reloadWebhookRoutes?(): void;
+}
+//#endregion
+//#region src/contracts/runtimeTypes.d.ts
+interface WorkflowRunnerService {
+  runById(args: {
     workflowId: WorkflowId;
-    nodeId: NodeId;
-    slotKey: string;
-  }>): Promise<TSession>;
+    startAt?: NodeId;
+    items: Items;
+    parent?: ParentExecutionRef;
+  }): Promise<RunResult>;
+}
+interface WorkflowRunnerResolver {
+  resolve(): WorkflowRunnerService | undefined;
+}
+interface WorkflowRepository {
+  list(): ReadonlyArray<WorkflowDefinition>;
+  get(workflowId: WorkflowId): WorkflowDefinition | undefined;
 }
-interface CredentialTypeRegistry {
-  listTypes(): ReadonlyArray<CredentialTypeDefinition>;
-  getType(typeId: CredentialTypeId): CredentialTypeDefinition | undefined;
+interface LiveWorkflowRepository extends WorkflowRepository {
+  setWorkflows(workflows: ReadonlyArray<WorkflowDefinition>): void;
 }
-declare class CredentialUnboundError extends Error {
-  readonly bindingKey: CredentialBindingKey;
-  readonly acceptedTypes: ReadonlyArray<CredentialTypeId>;
-  constructor(bindingKey: CredentialBindingKey, acceptedTypes?: ReadonlyArray<CredentialTypeId>);
-  private static createMessage;
+interface NodeResolver {
+  resolve<T>(token: TypeToken<T>): T;
 }
-//#endregion
-//#region src/contracts/collectionTypes.d.ts
-/**
- * Represents a typed store for a single collection.
- * All rows include auto-managed id, created_at, and updated_at fields.
- */
-interface CollectionStore<TRow extends Record<string, unknown> = Record<string, unknown>> {
-  /**
-   * Insert a new row. id, created_at, and updated_at are auto-populated.
-   */
-  insert(row: TRow): Promise<TRow & {
-    id: string;
-    created_at: Date;
-    updated_at: Date;
-  }>;
-  /**
-   * Get a single row by id.
-   */
-  get(id: string): Promise<(TRow & {
-    id: string;
-    created_at: Date;
-    updated_at: Date;
-  }) | null>;
-  /**
-   * Find a single row matching the provided filter.
-   */
-  findOne(filter: Partial<TRow>): Promise<(TRow & {
-    id: string;
-    created_at: Date;
-    updated_at: Date;
-  }) | null>;
+interface NodeExecutionStatePublisher {
+  markQueued(args: {
+    nodeId: NodeId;
+    activationId?: NodeActivationId;
+    inputsByPort?: NodeInputsByPort;
+  }): Promise<void>;
+  markRunning(args: {
+    nodeId: NodeId;
+    activationId?: NodeActivationId;
+    inputsByPort?: NodeInputsByPort;
+  }): Promise<void>;
+  markCompleted(args: {
+    nodeId: NodeId;
+    activationId?: NodeActivationId;
+    inputsByPort?: NodeInputsByPort;
+    outputs?: NodeOutputs;
+  }): Promise<void>;
+  markFailed(args: {
+    nodeId: NodeId;
+    activationId?: NodeActivationId;
+    inputsByPort?: NodeInputsByPort;
+    error: Error;
+  }): Promise<void>;
+  appendConnectionInvocation(args: ConnectionInvocationAppendArgs): Promise<void>;
   /**
-   * List rows with optional pagination and filtering.
+   * Annotates the current snapshot for `nodeId` with the id of the child run spawned by a
+   * SubWorkflow invocation. Called from `SubWorkflowNode.execute` after `runById` resolves.
+   * The engine's subsequent `markCompleted` call preserves the value via `previous.childRunId`.
    */
-  list(opts?: {
-    limit?: number;
-    offset?: number;
-    where?: Partial<TRow>;
-  }): Promise<{
-    rows: ReadonlyArray<TRow & {
-      id: string;
-      created_at: Date;
-      updated_at: Date;
-    }>;
-    total: number;
-  }>;
+  setChildRunId?(args: {
+    nodeId: NodeId;
+    childRunId: RunId;
+  }): Promise<void>;
+}
+type BinaryBody = ReadableStream<Uint8Array> | AsyncIterable<Uint8Array> | Uint8Array | ArrayBuffer;
+interface BinaryStorageWriteRequest {
+  storageKey: string;
+  body: BinaryBody;
+}
+interface BinaryStorageWriteResult {
+  storageKey: string;
+  size: number;
+  sha256?: string;
+}
+interface BinaryStorageReadResult {
+  body: ReadableStream<Uint8Array>;
+  size?: number;
+}
+interface BinaryStorageStatResult {
+  exists: boolean;
+  size?: number;
+}
+interface BinaryStorage {
+  readonly driverName: string;
+  write(args: BinaryStorageWriteRequest): Promise<BinaryStorageWriteResult>;
+  openReadStream(storageKey: string): Promise<BinaryStorageReadResult | undefined>;
+  stat(storageKey: string): Promise<BinaryStorageStatResult>;
+  delete(storageKey: string): Promise<void>;
+  /** Deletes multiple objects in bulk. Keys are batched internally. */
+  deleteMany(storageKeys: ReadonlyArray<string>): Promise<void>;
+  /** Lists all keys sharing a common prefix. Returns keys in arbitrary order. */
+  listByPrefix(prefix: string): Promise<ReadonlyArray<string>>;
+}
+interface BinaryAttachmentCreateRequest {
+  name: string;
+  body: BinaryBody;
+  mimeType: string;
+  filename?: string;
+  previewKind?: BinaryAttachment["previewKind"];
+}
+interface NodeBinaryAttachmentService extends ExecutionBinaryService {
+  attach(args: BinaryAttachmentCreateRequest): Promise<BinaryAttachment>;
+  withAttachment<TJson>(item: Item<TJson>, name: string, attachment: BinaryAttachment): Item<TJson>;
+}
+interface ExecutionBinaryService {
+  forNode(args: {
+    nodeId: NodeId;
+    activationId: NodeActivationId;
+  }): NodeBinaryAttachmentService;
+  openReadStream(attachment: BinaryAttachment): Promise<BinaryStorageReadResult | undefined>;
+}
+interface ExecutionContext {
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  /** This run's subworkflow depth (0 = root). */
+  subworkflowDepth: number;
+  /** Effective activation budget cap for this run (after policy merge). */
+  engineMaxNodeActivations: number;
+  /** Effective subworkflow nesting cap for this run (after policy merge). */
+  engineMaxSubworkflowDepth: number;
+  now: () => Date;
+  data: RunDataSnapshot;
+  nodeState?: NodeExecutionStatePublisher;
+  telemetry: ExecutionTelemetry;
+  binary: ExecutionBinaryService;
+  getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
+  /** Per-item iteration id, set by {@link NodeExecutor} on the ctx passed into runnable `execute`. */
+  iterationId?: NodeIterationId;
+  /** Item index (0-based) within the current activation's batch; set alongside {@link iterationId}. */
+  itemIndex?: number;
+  /** When set, this ctx is executing inside a sub-agent triggered by the named parent invocation. */
+  parentInvocationId?: ConnectionInvocationId;
   /**
-   * Update a row by id with partial data.
+   * Present iff the run was started by a TestSuiteOrchestrator. The {@link IsTestRunNode}
+   * branches on this; assertion-emitting nodes use it to decide whether to record results.
    */
-  update(id: string, patch: Partial<TRow>): Promise<TRow & {
-    id: string;
-    created_at: Date;
-    updated_at: Date;
-  }>;
+  testContext?: RunTestContext;
   /**
-   * Delete a row by id. Hard delete only (no soft delete).
+   * Collections registered in the codemation config, keyed by collection name.
    */
-  delete(id: string): Promise<{
-    deleted: boolean;
-  }>;
-}
-/**
- * Runtime collections context: keyed by collection name.
- */
-type CollectionsContext = Readonly<Record<string, CollectionStore>>;
-//#endregion
-//#region src/contracts/CostTrackingTelemetryContract.d.ts
-type CostTrackingComponent = "chat" | "ocr" | "rag";
-declare const CostTrackingTelemetryMetricNames: {
-  readonly usage: "codemation.cost.usage";
-  readonly estimatedCost: "codemation.cost.estimated";
-};
-declare const CostTrackingTelemetryAttributeNames: {
-  readonly component: "cost.component";
-  readonly provider: "cost.provider";
-  readonly operation: "cost.operation";
-  readonly pricingKey: "cost.pricing_key";
-  readonly usageUnit: "cost.usage_unit";
-  readonly currency: "cost.currency";
-  readonly currencyScale: "cost.currency_scale";
-  readonly estimateKind: "cost.estimate_kind";
-};
-interface CostTrackingUsageRecord {
-  readonly component: CostTrackingComponent;
-  readonly provider: string;
-  readonly operation: string;
-  readonly pricingKey: string;
-  readonly usageUnit: string;
-  readonly quantity: number;
-  readonly modelName?: string;
-  readonly attributes?: TelemetryAttributes;
+  readonly collections?: CollectionsContext;
 }
-interface CostTrackingPriceQuote {
-  readonly currency: string;
-  readonly currencyScale: number;
-  readonly estimatedAmountMinor: number;
-  readonly estimateKind: "catalog";
+interface ExecutionContextFactory {
+  create(args: {
+    runId: RunId;
+    workflowId: WorkflowId;
+    parent?: ParentExecutionRef;
+    policySnapshot?: PersistedRunPolicySnapshot;
+    subworkflowDepth: number;
+    engineMaxNodeActivations: number;
+    engineMaxSubworkflowDepth: number;
+    data: RunDataSnapshot;
+    nodeState?: NodeExecutionStatePublisher;
+    telemetry?: ExecutionTelemetry;
+    getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
+    testContext?: RunTestContext;
+  }): ExecutionContext;
 }
-interface CostTrackingTelemetry {
-  captureUsage(args: CostTrackingUsageRecord): Promise<CostTrackingPriceQuote | undefined>;
-  forScope(scope: TelemetryScope): CostTrackingTelemetry;
+interface NodeExecutionContext<TConfig extends NodeConfigBase = NodeConfigBase> extends ExecutionContext {
+  nodeId: NodeId;
+  activationId: NodeActivationId;
+  config: TConfig;
+  telemetry: NodeExecutionTelemetry;
+  binary: NodeBinaryAttachmentService;
 }
-interface CostTrackingTelemetryFactory {
-  create(args: Readonly<{
-    telemetry: ExecutionTelemetry;
-  }>): CostTrackingTelemetry;
+interface PollingTriggerHandle {
+  /**
+   * Start the polling loop. The runtime registers its own cleanup handle so callers do not need to
+   * call {@link TriggerSetupContext.registerCleanup} for the loop.
+   * @returns The state returned by the first cycle (or `undefined` when the overlap guard fired).
+   */
+  start<TState, TItem>(args: {
+    intervalMs: number;
+    seedState?: TState;
+    runCycle: (cycleCtx: {
+      previousState: TState | undefined;
+      signal: AbortSignal;
+    }) => Promise<{
+      items: Items<TItem>;
+      nextState: TState;
+    }>;
+  }): Promise<TState | undefined>;
+  /** Convenience dedup-window helper. */
+  readonly dedup: PollingTriggerDedupWindow;
 }
-//#endregion
-//#region src/contracts/NoOpTelemetryArtifactReference.d.ts
-declare class NoOpTelemetryArtifactReference {
-  static readonly value: TelemetryArtifactReference;
+interface TriggerSetupContext<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>, TSetupState$1 extends JsonValue | undefined = TriggerNodeSetupState<TConfig>> extends ExecutionContext {
+  trigger: TriggerInstanceId;
+  config: TConfig;
+  previousState: TSetupState$1;
+  registerCleanup(cleanup: TriggerCleanupHandle): void;
+  emit(items: Items): Promise<void>;
+  /** Generic polling-trigger surface. Pre-binds trigger id, emit, and registerCleanup. */
+  readonly polling: PollingTriggerHandle;
 }
-//#endregion
-//#region src/contracts/NoOpTelemetrySpanScope.d.ts
-declare class NoOpTelemetrySpanScope {
-  static readonly value: TelemetrySpanScope;
-  /** Internal: the shared no-op {@link NodeExecutionTelemetry} that {@link NoOpNodeExecutionTelemetry} re-exposes. */
-  static readonly nodeExecutionTelemetryValue: NodeExecutionTelemetry;
+interface TriggerTestItemsContext<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>, TSetupState$1 extends JsonValue | undefined = TriggerNodeSetupState<TConfig>> extends ExecutionContext {
+  trigger: TriggerInstanceId;
+  nodeId: NodeId;
+  config: TConfig;
+  previousState: TSetupState$1;
 }
-//#endregion
-//#region src/contracts/NoOpNodeExecutionTelemetry.d.ts
-declare class NoOpNodeExecutionTelemetry {
-  static readonly value: NodeExecutionTelemetry;
+/**
+ * Trigger setup state is intentionally engine-owned so future ownership and
+ * leader-election metadata can be coordinated centrally rather than pushed into
+ * package-level setup code.
+ */
+interface PersistedTriggerSetupState<TState extends JsonValue | undefined = JsonValue | undefined> {
+  trigger: TriggerInstanceId;
+  updatedAt: string;
+  state: TState;
 }
-//#endregion
-//#region src/contracts/NoOpExecutionTelemetry.d.ts
-declare class NoOpExecutionTelemetry {
-  static readonly value: ExecutionTelemetry;
+interface TriggerSetupStateRepository {
+  load(trigger: TriggerInstanceId): Promise<PersistedTriggerSetupState | undefined>;
+  save(state: PersistedTriggerSetupState): Promise<void>;
+  delete(trigger: TriggerInstanceId): Promise<void>;
 }
-//#endregion
-//#region src/contracts/NoOpExecutionTelemetryFactory.d.ts
-declare class NoOpExecutionTelemetryFactory implements ExecutionTelemetryFactory {
-  create(_: Readonly<{
-    runId: RunId;
-    workflowId: WorkflowId;
-    parent?: ParentExecutionRef;
-    policySnapshot?: PersistedRunPolicySnapshot;
-  }>): ExecutionTelemetry;
+interface TriggerCleanupHandle {
+  stop(): Promise<void> | void;
 }
-//#endregion
-//#region src/contracts/CodemationTelemetryAttributeNames.d.ts
-declare class CodemationTelemetryAttributeNames {
-  static readonly workflowId = "codemation.workflow.id";
-  static readonly runId = "codemation.run.id";
-  static readonly nodeId = "codemation.node.id";
-  static readonly activationId = "codemation.activation.id";
-  static readonly nodeType = "codemation.node.type";
-  static readonly nodeRole = "codemation.node.role";
-  static readonly workflowFolder = "codemation.workflow.folder";
-  static readonly connectionInvocationId = "codemation.connection.invocation_id";
-  static readonly toolName = "codemation.tool.name";
-  static readonly traceParentRunId = "codemation.parent.run.id";
-  /** Per-item iteration that emitted this span/metric. Set on spans recorded inside a runnable per-item loop. */
-  static readonly iterationId = "codemation.iteration.id";
-  /** Item index (0-based) of the iteration. */
-  static readonly iterationIndex = "codemation.iteration.index";
-  /** Set when this span/metric was recorded under a sub-agent triggered by an outer LLM/tool call. */
-  static readonly parentInvocationId = "codemation.parent.invocation_id";
+interface EngineHost {
+  credentialSessions: CredentialSessionService;
+  workflows?: WorkflowRunnerService;
 }
-//#endregion
-//#region src/contracts/GenAiTelemetryAttributeNames.d.ts
-declare class GenAiTelemetryAttributeNames {
-  static readonly operationName = "gen_ai.operation.name";
-  static readonly requestModel = "gen_ai.request.model";
-  static readonly usageInputTokens = "gen_ai.usage.input_tokens";
-  static readonly usageOutputTokens = "gen_ai.usage.output_tokens";
-  static readonly usageTotalTokens = "gen_ai.usage.total_tokens";
-  static readonly usageCacheReadInputTokens = "gen_ai.usage.cache_read.input_tokens";
-  static readonly usageCacheCreationInputTokens = "gen_ai.usage.cache_creation.input_tokens";
-  static readonly usageReasoningTokens = "codemation.gen_ai.usage.reasoning_tokens";
+/**
+ * Per-item runnable node: return JSON, an array to fan-out on `main`, an explicit `Item`, or {@link emitPorts}
+ * for multi-port emission. Engine applies `inputSchema.parse(item.json)` and passes the result as `args.input`
+ * (wire `item.json` is unchanged). Transform helpers may opt into binary preservation, while routers and
+ * pass-through nodes should return explicit items when they need to preserve full item state.
+ */
+interface RunnableNodeExecuteArgs<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown> {
+  readonly input: TInputJson$1;
+  readonly item: Item;
+  readonly itemIndex: number;
+  readonly items: Items;
+  readonly ctx: NodeExecutionContext<TConfig>;
 }
-//#endregion
-//#region src/contracts/CodemationTelemetryMetricNames.d.ts
-declare class CodemationTelemetryMetricNames {
-  static readonly agentTurns = "codemation.ai.turns";
-  static readonly agentToolCalls = "codemation.ai.tool_calls";
-  static readonly gmailMessagesEmitted = "codemation.gmail.messages_emitted";
-  static readonly gmailAttachments = "codemation.gmail.attachments";
-  static readonly gmailAttachmentBytes = "codemation.gmail.attachment_bytes";
+interface RunnableNode<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown, _TOutputJson = unknown> {
+  readonly kind: "node";
+  /**
+   * Declared output ports (e.g. `["main"]`).
+   *
+   * Prefer describing dynamic router ports (Switch) and fixed multi-ports (If true/false)
+   * via {@link NodeConfigBase.declaredOutputPorts}. Engine defaults to `["main"]` when omitted.
+   */
+  readonly outputPorts?: ReadonlyArray<OutputPortKey>;
+  /** When omitted, engine uses {@link RunnableNodeConfig.inputSchema} or `z.unknown()`. */
+  readonly inputSchema?: ZodType<TInputJson$1>;
+  execute(args: RunnableNodeExecuteArgs<TConfig, TInputJson$1>): Promise<unknown> | unknown;
 }
-//#endregion
-//#region src/contracts/telemetryTypes.d.ts
-type TelemetryAttributePrimitive = string | number | boolean | null;
-interface TelemetryAttributes {
-  readonly [key: string]: TelemetryAttributePrimitive | undefined;
+/** @deprecated Use {@link RunnableNode} */
+type ItemNode<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown, TOutputJson$1 = unknown> = RunnableNode<TConfig, TInputJson$1, TOutputJson$1>;
+interface MultiInputNode<TConfig extends NodeConfigBase = NodeConfigBase> {
+  kind: "node";
+  /**
+   * Declared output ports (typically `["main"]`).
+   *
+   * Prefer describing ports for authoring/canvas via {@link NodeConfigBase.declaredOutputPorts}.
+   * Engine defaults to `["main"]` when omitted.
+   */
+  outputPorts?: ReadonlyArray<OutputPortKey>;
+  executeMulti(inputsByPort: NodeInputsByPort, ctx: NodeExecutionContext<TConfig>): Promise<NodeOutputs>;
 }
-interface TelemetryMetricRecord {
-  readonly name: string;
-  readonly value: number;
-  readonly unit?: string;
-  readonly attributes?: TelemetryAttributes;
+type TriggerSetupStateFor<TConfig extends TriggerNodeConfig<any, any>> = TriggerNodeSetupState<TConfig>;
+interface TriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> {
+  kind: "trigger";
+  outputPorts: readonly ["main"];
+  setup(ctx: TriggerSetupContext<TConfig>): Promise<TriggerSetupStateFor<TConfig>>;
+  execute(items: Items, ctx: NodeExecutionContext<TConfig>): Promise<NodeOutputs>;
 }
-interface TelemetrySpanEventRecord {
-  readonly name: string;
-  readonly occurredAt?: Date;
-  readonly attributes?: TelemetryAttributes;
+interface TestableTriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> extends TriggerNode<TConfig> {
+  getTestItems(ctx: TriggerTestItemsContext<TConfig>): Promise<Items>;
 }
-interface TelemetryArtifactAttachment {
-  readonly kind: string;
-  readonly contentType: string;
-  readonly previewText?: string;
-  readonly previewJson?: JsonValue;
-  readonly payloadText?: string;
-  readonly payloadJson?: JsonValue;
-  readonly bytes?: number;
-  readonly truncated?: boolean;
-  readonly expiresAt?: Date;
+type ExecutableTriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> = TriggerNode<TConfig>;
+interface NodeExecutionRequest {
+  runId: RunId;
+  activationId: NodeActivationId;
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  input: Items;
+  parent?: ParentExecutionRef;
+  queue?: string;
+  executionOptions?: RunExecutionOptions;
 }
-interface TelemetryArtifactReference {
-  readonly artifactId: string;
-  readonly traceId?: string;
-  readonly spanId?: string;
+interface NodeExecutionScheduler {
+  enqueue(request: NodeExecutionRequest): Promise<{
+    receiptId: string;
+  }>;
+  cancel?(receiptId: string): Promise<void>;
 }
-interface TelemetrySpanEnd {
-  readonly status?: "ok" | "error";
-  readonly statusMessage?: string;
-  readonly endedAt?: Date;
-  readonly attributes?: TelemetryAttributes;
+interface NodeExecutionRequestHandler {
+  handleNodeExecutionRequest(request: NodeExecutionRequest): Promise<void>;
 }
-interface TelemetryChildSpanStart {
-  readonly name: string;
-  readonly kind?: "internal" | "client";
-  readonly startedAt?: Date;
-  readonly attributes?: TelemetryAttributes;
+type NodeActivationRequestBase = Readonly<{
+  runId: RunId;
+  activationId: NodeActivationId;
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  parent?: ParentExecutionRef;
+  executionOptions?: RunExecutionOptions;
+  batchId?: string;
+  ctx: NodeExecutionContext;
+}>;
+type NodeActivationRequest = (NodeActivationRequestBase & Readonly<{
+  kind: "single";
+  input: Items;
+}>) | (NodeActivationRequestBase & Readonly<{
+  kind: "multi";
+  inputsByPort: NodeInputsByPort;
+}>);
+interface NodeActivationReceipt {
+  receiptId: string;
+  mode?: "local" | "worker";
+  queue?: string;
 }
-interface TelemetryScope {
-  readonly traceId?: string;
-  readonly spanId?: string;
-  readonly costTracking?: CostTrackingTelemetry;
-  addSpanEvent(args: TelemetrySpanEventRecord): Promise<void> | void;
-  recordMetric(args: TelemetryMetricRecord): Promise<void> | void;
-  attachArtifact(args: TelemetryArtifactAttachment): Promise<TelemetryArtifactReference> | TelemetryArtifactReference;
+interface PreparedNodeActivationDispatch {
+  readonly receipt: NodeActivationReceipt;
+  dispatch(): Promise<void>;
 }
-interface TelemetrySpanScope extends TelemetryScope {
-  readonly traceId: string;
-  readonly spanId: string;
-  end(args?: TelemetrySpanEnd): Promise<void> | void;
-  /**
-   * Lift this span into a {@link NodeExecutionTelemetry} scoped to a different (nodeId, activationId).
-   * Children created via the returned telemetry's `startChildSpan` get this span as their parent.
-   *
-   * Used at the sub-agent boundary so that nested runtime telemetry parents under the agent.tool.call
-   * span instead of the orchestrator's node-level span.
-   */
-  asNodeTelemetry(args: Readonly<{
+interface NodeActivationContinuation {
+  markNodeRunning(args: {
+    runId: RunId;
+    activationId: NodeActivationId;
     nodeId: NodeId;
+    inputsByPort: NodeInputsByPort;
+  }): Promise<void>;
+  resumeFromNodeResult(args: {
+    runId: RunId;
     activationId: NodeActivationId;
-  }>): NodeExecutionTelemetry;
-}
-interface NodeExecutionTelemetry extends ExecutionTelemetry, TelemetrySpanScope {
-  startChildSpan(args: TelemetryChildSpanStart): TelemetrySpanScope;
-}
-interface ExecutionTelemetry extends TelemetryScope {
-  readonly traceId: string;
-  readonly spanId: string;
-  forNode(args: Readonly<{
     nodeId: NodeId;
+    outputs: NodeOutputs;
+  }): Promise<RunResult>;
+  resumeFromNodeError(args: {
+    runId: RunId;
     activationId: NodeActivationId;
-  }>): NodeExecutionTelemetry;
+    nodeId: NodeId;
+    error: Error;
+  }): Promise<RunResult>;
 }
-interface ExecutionTelemetryFactory {
-  create(args: Readonly<{
-    runId: RunId;
-    workflowId: WorkflowId;
-    parent?: ParentExecutionRef;
-    policySnapshot?: PersistedRunPolicySnapshot;
-  }>): ExecutionTelemetry;
+interface NodeActivationScheduler {
+  setContinuation?(continuation: NodeActivationContinuation): void;
+  prepareDispatch(request: NodeActivationRequest): Promise<PreparedNodeActivationDispatch>;
+  cancel?(receiptId: string): Promise<void>;
 }
-//#endregion
-//#region src/contracts/workflowActivationPolicy.d.ts
-/**
- * Host-controlled policy: when false, trigger {@link TriggerNode} setup is skipped and webhook routes
- * for that workflow are not registered (see engine trigger runtime + webhook matcher).
- */
-interface WorkflowActivationPolicy {
-  isActive(workflowId: WorkflowId): boolean;
+interface WorkflowNodeInstanceFactory {
+  createNodes(workflow: WorkflowDefinition): ReadonlyMap<NodeId, unknown>;
+  createByType(type: TypeToken<unknown>): unknown;
 }
-/** Default for tests and harnesses: every workflow is treated as active (legacy behavior). */
-declare class AllWorkflowsActiveWorkflowActivationPolicy implements WorkflowActivationPolicy {
-  isActive(_workflowId: WorkflowId): boolean;
+interface NodeExecutor {
+  execute(request: NodeActivationRequest): Promise<NodeOutputs>;
 }
-//#endregion
-//#region src/contracts/webhookTypes.d.ts
-type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
-interface WebhookControlSignal {
-  readonly __webhookControl: true;
-  readonly kind: "respondNow" | "respondNowAndContinue";
-  readonly responseItems: Items;
-  readonly continueItems?: Items;
+interface WorkflowSnapshotFactory {
+  create(workflow: WorkflowDefinition): PersistedWorkflowSnapshot;
 }
-interface WebhookTriggerRoutingDiagnostics {
-  warn(message: string): void;
-  /** Inactive workflows omitted from the webhook route index (optional; host should wire for clarity at boot/reload). */
-  info?(message: string): void;
+interface WorkflowSnapshotResolver {
+  resolve(args: {
+    workflowId: WorkflowId;
+    workflowSnapshot?: PersistedWorkflowSnapshot;
+  }): WorkflowDefinition | undefined;
 }
-interface TriggerInstanceId {
-  workflowId: WorkflowId;
-  nodeId: NodeId;
+/** Optional host wiring for trigger lifecycle logs (boot skip + activation sync). */
+interface TriggerRuntimeDiagnostics {
+  info(message: string): void;
+  warn(message: string): void;
 }
-/** Match for an incoming HTTP request: user-defined URL segment + workflow trigger node. */
-interface WebhookInvocationMatch {
-  /** Same value as the webhook trigger's configured endpoint key (URL segment under the webhook base path). */
-  endpointPath: string;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  methods: ReadonlyArray<HttpMethod>;
-  parseJsonBody?: (body: unknown) => unknown;
+interface EngineDeps {
+  credentialSessions: CredentialSessionService;
+  liveWorkflowRepository: LiveWorkflowRepository;
+  workflowRepository: WorkflowRepository;
+  /** When {@link AllWorkflowsActiveWorkflowActivationPolicy}, all workflows behave as active (tests). */
+  workflowActivationPolicy: WorkflowActivationPolicy;
+  nodeResolver: NodeResolver;
+  triggerSetupStateRepository: TriggerSetupStateRepository;
+  webhookTriggerMatcher: WebhookTriggerMatcher;
+  runIdFactory: RunIdFactory;
+  activationIdFactory: ActivationIdFactory;
+  workflowExecutionRepository: WorkflowExecutionRepository;
+  activationScheduler: NodeActivationScheduler;
+  runDataFactory: RunDataFactory;
+  executionContextFactory: ExecutionContextFactory;
+  executionTelemetryFactory?: ExecutionTelemetryFactory;
+  nodeExecutor: NodeExecutor;
+  eventBus?: RunEventBus;
+  tokenRegistry: PersistedWorkflowTokenRegistryLike;
+  workflowNodeInstanceFactory: WorkflowNodeInstanceFactory;
+  /** Defaults for prune/storage snapshot when workflow omits explicit policy fields. */
+  workflowPolicyRuntimeDefaults?: WorkflowPolicyRuntimeDefaults;
+  /** When set, logs inactive-workflow skips at boot and trigger start/stop on activation changes. */
+  triggerRuntimeDiagnostics?: TriggerRuntimeDiagnostics;
+  /** When set, the polling-trigger runtime uses this logger for cycle info/debug/error. */
+  pollingTriggerLogger?: PollingTriggerLogger;
 }
-/** Result of resolving an HTTP method + endpoint path against the catalog webhook index (404 vs 405 vs match). */
-type WebhookTriggerResolution = {
-  status: "notFound";
-} | {
-  status: "methodNotAllowed";
-  match: WebhookInvocationMatch;
-} | {
-  status: "ok";
-  match: WebhookInvocationMatch;
-};
+//#endregion
+//#region src/contracts/retryPolicySpec.types.d.ts
 /**
- * Resolves webhook routes from workflow definitions (catalog-backed index, no registration at trigger setup).
+ * In-process retry policy for runnable nodes. Serialized configs use the same
+ * `kind` discriminator (`JSON.stringify` / persisted workflows).
+ *
+ * `maxAttempts` is the total number of tries including the first (e.g. 3 means up to 2 delays after failures).
  */
-interface WebhookTriggerMatcher {
-  match(args: {
-    endpointPath: string;
-    method: HttpMethod;
-  }): WebhookInvocationMatch | undefined;
-  lookup(endpointPath: string): WebhookInvocationMatch | undefined;
-  onEngineWorkflowsLoaded?(): void;
-  onEngineStopped?(): void;
-  /** Rebuild route index after activation changes without stopping the engine. */
-  reloadWebhookRoutes?(): void;
-}
-//#endregion
-//#region src/contracts/runtimeTypes.d.ts
-interface WorkflowRunnerService {
-  runById(args: {
-    workflowId: WorkflowId;
-    startAt?: NodeId;
-    items: Items;
-    parent?: ParentExecutionRef;
-  }): Promise<RunResult>;
-}
-interface WorkflowRunnerResolver {
-  resolve(): WorkflowRunnerService | undefined;
+type RetryPolicySpec = NoneRetryPolicySpec | FixedRetryPolicySpec | ExponentialRetryPolicySpec;
+interface NoneRetryPolicySpec {
+  readonly kind: "none";
 }
-interface WorkflowRepository {
-  list(): ReadonlyArray<WorkflowDefinition>;
-  get(workflowId: WorkflowId): WorkflowDefinition | undefined;
+interface FixedRetryPolicySpec {
+  readonly kind: "fixed";
+  /** Total attempts including the first execution. Must be >= 1. */
+  readonly maxAttempts: number;
+  readonly delayMs: number;
 }
-interface LiveWorkflowRepository extends WorkflowRepository {
-  setWorkflows(workflows: ReadonlyArray<WorkflowDefinition>): void;
+interface ExponentialRetryPolicySpec {
+  readonly kind: "exponential";
+  /** Total attempts including the first execution. Must be >= 1. */
+  readonly maxAttempts: number;
+  readonly initialDelayMs: number;
+  readonly multiplier: number;
+  readonly maxDelayMs?: number;
+  /** When true, each delay is multiplied by a random factor in [1, 1.2). */
+  readonly jitter?: boolean;
 }
-interface NodeResolver {
-  resolve<T>(token: TypeToken<T>): T;
+//#endregion
+//#region src/contracts/workflowTypes.d.ts
+type NodeIdRef<TJson = unknown> = NodeId & Readonly<{
+  __codemationNodeJson?: TJson;
+}>;
+type NodeKind = "trigger" | "node";
+type JsonPrimitive = string | number | boolean | null;
+interface JsonObject {
+  readonly [key: string]: JsonValue;
 }
-interface NodeExecutionStatePublisher {
-  markQueued(args: {
-    nodeId: NodeId;
-    activationId?: NodeActivationId;
-    inputsByPort?: NodeInputsByPort;
-  }): Promise<void>;
-  markRunning(args: {
-    nodeId: NodeId;
-    activationId?: NodeActivationId;
-    inputsByPort?: NodeInputsByPort;
-  }): Promise<void>;
-  markCompleted(args: {
+type JsonValue = JsonPrimitive | JsonObject | JsonArray;
+type JsonArray = ReadonlyArray<JsonValue>;
+/** JSON value that is not a top-level array (nested arrays inside objects are allowed). */
+type JsonNonArray = JsonPrimitive | JsonObject;
+interface Edge {
+  from: {
     nodeId: NodeId;
-    activationId?: NodeActivationId;
-    inputsByPort?: NodeInputsByPort;
-    outputs?: NodeOutputs;
-  }): Promise<void>;
-  markFailed(args: {
+    output: OutputPortKey;
+  };
+  to: {
     nodeId: NodeId;
-    activationId?: NodeActivationId;
-    inputsByPort?: NodeInputsByPort;
-    error: Error;
-  }): Promise<void>;
-  appendConnectionInvocation(args: ConnectionInvocationAppendArgs): Promise<void>;
-}
-type BinaryBody = ReadableStream<Uint8Array> | AsyncIterable<Uint8Array> | Uint8Array | ArrayBuffer;
-interface BinaryStorageWriteRequest {
-  storageKey: string;
-  body: BinaryBody;
-}
-interface BinaryStorageWriteResult {
-  storageKey: string;
-  size: number;
-  sha256?: string;
-}
-interface BinaryStorageReadResult {
-  body: ReadableStream<Uint8Array>;
-  size?: number;
-}
-interface BinaryStorageStatResult {
-  exists: boolean;
-  size?: number;
+    input: InputPortKey;
+  };
 }
-interface BinaryStorage {
-  readonly driverName: string;
-  write(args: BinaryStorageWriteRequest): Promise<BinaryStorageWriteResult>;
-  openReadStream(storageKey: string): Promise<BinaryStorageReadResult | undefined>;
-  stat(storageKey: string): Promise<BinaryStorageStatResult>;
-  delete(storageKey: string): Promise<void>;
+/**
+ * Named connection from a parent node to child nodes that exist in {@link WorkflowDefinition.nodes}
+ * but are not traversed by the main execution graph. Parents are commonly executable nodes, but may
+ * also be connection-owned nodes for recursive agent attachments.
+ */
+interface WorkflowNodeConnection {
+  readonly parentNodeId: NodeId;
+  readonly connectionName: NodeConnectionName;
+  readonly childNodeIds: ReadonlyArray<NodeId>;
 }
-interface BinaryAttachmentCreateRequest {
+interface WorkflowDefinition {
+  id: WorkflowId;
   name: string;
-  body: BinaryBody;
-  mimeType: string;
-  filename?: string;
-  previewKind?: BinaryAttachment["previewKind"];
-}
-interface NodeBinaryAttachmentService extends ExecutionBinaryService {
-  attach(args: BinaryAttachmentCreateRequest): Promise<BinaryAttachment>;
-  withAttachment<TJson>(item: Item<TJson>, name: string, attachment: BinaryAttachment): Item<TJson>;
+  nodes: NodeDefinition[];
+  edges: Edge[];
+  /**
+   * Optional metadata: which nodes are connection-owned children (e.g. AI agent `llm` / `tools` slots).
+   * When omitted, all nodes in {@link nodes} are treated as executable for topology.
+   */
+  readonly connections?: ReadonlyArray<WorkflowNodeConnection>;
+  /** Directory + file-stem path under a workflow discovery root (for UI grouping only). */
+  discoveryPathSegments?: readonly string[];
+  /** Retention for run JSON and binaries (seconds). Host/env may supply defaults when omitted. */
+  readonly prunePolicy?: WorkflowPrunePolicySpec;
+  /** Whether to keep run data after completion. Host/env may supply defaults when omitted. */
+  readonly storagePolicy?: WorkflowStoragePolicySpec;
+  /** Invoked after a node fails permanently (retries exhausted) and node error handler did not recover. */
+  readonly workflowErrorHandler?: WorkflowErrorHandlerSpec;
 }
-interface ExecutionBinaryService {
-  forNode(args: {
+interface WorkflowGraph {
+  next(nodeId: NodeId, output: OutputPortKey): ReadonlyArray<Readonly<{
     nodeId: NodeId;
-    activationId: NodeActivationId;
-  }): NodeBinaryAttachmentService;
-  openReadStream(attachment: BinaryAttachment): Promise<BinaryStorageReadResult | undefined>;
+    input: InputPortKey;
+  }>>;
 }
-interface ExecutionContext {
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  /** This run's subworkflow depth (0 = root). */
-  subworkflowDepth: number;
-  /** Effective activation budget cap for this run (after policy merge). */
-  engineMaxNodeActivations: number;
-  /** Effective subworkflow nesting cap for this run (after policy merge). */
-  engineMaxSubworkflowDepth: number;
-  now: () => Date;
-  data: RunDataSnapshot;
-  nodeState?: NodeExecutionStatePublisher;
-  telemetry: ExecutionTelemetry;
-  binary: ExecutionBinaryService;
-  getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
-  /** Per-item iteration id, set by {@link NodeExecutor} on the ctx passed into runnable `execute`. */
-  iterationId?: NodeIterationId;
-  /** Item index (0-based) within the current activation's batch; set alongside {@link iterationId}. */
-  itemIndex?: number;
-  /** When set, this ctx is executing inside a sub-agent triggered by the named parent invocation. */
-  parentInvocationId?: ConnectionInvocationId;
+interface WorkflowGraphFactory {
+  create(def: WorkflowDefinition): WorkflowGraph;
+}
+interface NodeConfigBase {
+  readonly kind: NodeKind;
+  readonly type: TypeToken<unknown>;
+  readonly name?: string;
+  readonly id?: NodeId;
+  readonly icon?: string;
+  readonly execution?: Readonly<{
+    hint?: "local" | "worker";
+    queue?: string;
+  }>;
+  /** In-process execute retries (runnable nodes). Triggers typically omit this. */
+  readonly retryPolicy?: RetryPolicySpec;
+  /** Recover from execute failures; return outputs to continue, or rethrow to fail the node. */
+  readonly nodeErrorHandler?: NodeErrorHandlerSpec;
   /**
-   * Present iff the run was started by a TestSuiteOrchestrator. The {@link IsTestRunNode}
-   * branches on this; assertion-emitting nodes use it to decide whether to record results.
+   * When true, edges carrying zero items on an output port still schedule single-input downstream nodes.
+   * Decided from the **source** node that produced the (empty) output. Default (false/undefined): empty
+   * main batches skip downstream execution and propagate the empty path.
    */
-  testContext?: RunTestContext;
+  readonly continueWhenEmptyOutput?: boolean;
   /**
-   * Collections registered in the codemation config, keyed by collection name.
+   * Declared I/O port names for canvas authoring (unioned with ports inferred from edges).
+   * Use for dynamic routers (Switch) and future error ports.
    */
-  readonly collections?: CollectionsContext;
-}
-interface ExecutionContextFactory {
-  create(args: {
-    runId: RunId;
-    workflowId: WorkflowId;
-    parent?: ParentExecutionRef;
-    policySnapshot?: PersistedRunPolicySnapshot;
-    subworkflowDepth: number;
-    engineMaxNodeActivations: number;
-    engineMaxSubworkflowDepth: number;
-    data: RunDataSnapshot;
-    nodeState?: NodeExecutionStatePublisher;
-    telemetry?: ExecutionTelemetry;
-    getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
-    testContext?: RunTestContext;
-  }): ExecutionContext;
-}
-interface NodeExecutionContext<TConfig extends NodeConfigBase = NodeConfigBase> extends ExecutionContext {
-  nodeId: NodeId;
-  activationId: NodeActivationId;
-  config: TConfig;
-  telemetry: NodeExecutionTelemetry;
-  binary: NodeBinaryAttachmentService;
-}
-interface PollingTriggerHandle {
+  readonly declaredOutputPorts?: ReadonlyArray<OutputPortKey>;
+  readonly declaredInputPorts?: ReadonlyArray<InputPortKey>;
+  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
   /**
-   * Start the polling loop. The runtime registers its own cleanup handle so callers do not need to
-   * call {@link TriggerSetupContext.registerCleanup} for the loop.
-   * @returns The state returned by the first cycle (or `undefined` when the overlap guard fired).
+   * Marker: this node emits {@link import("./assertionTypes").AssertionResult}-shaped items on its
+   * `main` port. The TestSuiteOrchestrator (and host-side TestAssertionPersister) listen for
+   * `nodeCompleted` events from nodes with this flag set, and persist their output items as
+   * TestAssertion records (only when the run carries a `testContext`). Set on assertion node
+   * configs (e.g. `AssertionNodeConfig`, `StringEqualsAssertionNodeConfig`).
    */
-  start<TState, TItem>(args: {
-    intervalMs: number;
-    seedState?: TState;
-    runCycle: (cycleCtx: {
-      previousState: TState | undefined;
-      signal: AbortSignal;
-    }) => Promise<{
-      items: Items<TItem>;
-      nextState: TState;
-    }>;
-  }): Promise<TState | undefined>;
-  /** Convenience dedup-window helper. */
-  readonly dedup: PollingTriggerDedupWindow;
-}
-interface TriggerSetupContext<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>, TSetupState$1 extends JsonValue | undefined = TriggerNodeSetupState<TConfig>> extends ExecutionContext {
-  trigger: TriggerInstanceId;
-  config: TConfig;
-  previousState: TSetupState$1;
-  registerCleanup(cleanup: TriggerCleanupHandle): void;
-  emit(items: Items): Promise<void>;
-  /** Generic polling-trigger surface. Pre-binds trigger id, emit, and registerCleanup. */
-  readonly polling: PollingTriggerHandle;
-}
-interface TriggerTestItemsContext<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>, TSetupState$1 extends JsonValue | undefined = TriggerNodeSetupState<TConfig>> extends ExecutionContext {
-  trigger: TriggerInstanceId;
-  nodeId: NodeId;
-  config: TConfig;
-  previousState: TSetupState$1;
+  readonly emitsAssertions?: true;
+  /**
+   * Static configuration summary surfaced in the workflow inspector — the design-time
+   * "what does this node do" panel that renders before any run telemetry exists.
+   *
+   * Return 2–6 short label/value pairs derived from this config (method + url for an HTTP
+   * call, model + tool list for an agent, schedule + timezone for a cron trigger, etc.).
+   * Values are truncated by the UI; aim for one line each. Return `undefined` to opt out
+   * — the inspector hides the section when no rows are produced.
+   *
+   * Implement on the config class instance so the function can read sibling config fields.
+   * `defineNode({ inspectorSummary })` plumbs through to this.
+   */
+  inspectorSummary?(): ReadonlyArray<NodeInspectorSummaryRow> | undefined;
 }
 /**
- * Trigger setup state is intentionally engine-owned so future ownership and
- * leader-election metadata can be coordinated centrally rather than pushed into
- * package-level setup code.
+ * One row of a node's static configuration summary. See {@link NodeConfigBase.inspectorSummary}.
  */
-interface PersistedTriggerSetupState<TState extends JsonValue | undefined = JsonValue | undefined> {
-  trigger: TriggerInstanceId;
-  updatedAt: string;
-  state: TState;
-}
-interface TriggerSetupStateRepository {
-  load(trigger: TriggerInstanceId): Promise<PersistedTriggerSetupState | undefined>;
-  save(state: PersistedTriggerSetupState): Promise<void>;
-  delete(trigger: TriggerInstanceId): Promise<void>;
-}
-interface TriggerCleanupHandle {
-  stop(): Promise<void> | void;
-}
-interface EngineHost {
-  credentialSessions: CredentialSessionService;
-  workflows?: WorkflowRunnerService;
+interface NodeInspectorSummaryRow {
+  readonly label: string;
+  readonly value: string;
 }
+declare const runnableNodeInputType: unique symbol;
+declare const runnableNodeOutputType: unique symbol;
+declare const triggerNodeOutputType: unique symbol;
 /**
- * Per-item runnable node: return JSON, an array to fan-out on `main`, an explicit `Item`, or {@link emitPorts}
- * for multi-port emission. Engine applies `inputSchema.parse(item.json)` and passes the result as `args.input`
- * (wire `item.json` is unchanged). Transform helpers may opt into binary preservation, while routers and
- * pass-through nodes should return explicit items when they need to preserve full item state.
+ * Runnable node: **`TInputJson`** is what **`inputSchema`** validates on **`item.json`** (the wire payload).
+ * **`TOutputJson`** is emitted `item.json` on outputs.
  */
-interface RunnableNodeExecuteArgs<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown> {
-  readonly input: TInputJson$1;
-  readonly item: Item;
-  readonly itemIndex: number;
-  readonly items: Items;
-  readonly ctx: NodeExecutionContext<TConfig>;
-}
-interface RunnableNode<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown, _TOutputJson = unknown> {
+interface RunnableNodeConfig<TInputJson$1 = unknown, TOutputJson$1 = unknown> extends NodeConfigBase {
   readonly kind: "node";
+  readonly [runnableNodeInputType]?: TInputJson$1;
+  readonly [runnableNodeOutputType]?: TOutputJson$1;
   /**
-   * Declared output ports (e.g. `["main"]`).
-   *
-   * Prefer describing dynamic router ports (Switch) and fixed multi-ports (If true/false)
-   * via {@link NodeConfigBase.declaredOutputPorts}. Engine defaults to `["main"]` when omitted.
+   * Optional Zod input contract for {@link RunnableNode} when not set on the node class.
+   * Resolution order: node instance `inputSchema`, then config `inputSchema`, then `z.unknown()`.
    */
-  readonly outputPorts?: ReadonlyArray<OutputPortKey>;
-  /** When omitted, engine uses {@link RunnableNodeConfig.inputSchema} or `z.unknown()`. */
   readonly inputSchema?: ZodType<TInputJson$1>;
-  execute(args: RunnableNodeExecuteArgs<TConfig, TInputJson$1>): Promise<unknown> | unknown;
+  /**
+   * When an activation receives **zero** input items, the engine normally runs `execute` zero times.
+   * Set to **`runOnce`** to run `execute` once with an empty `items` batch (and a synthetic wire item for schema parsing).
+   * Used by batch-style callback nodes (built-in `Callback`) so `callback([], ctx)` still runs.
+   */
+  readonly emptyBatchExecution?: "skip" | "runOnce";
 }
-/** @deprecated Use {@link RunnableNode} */
-type ItemNode<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown, TOutputJson$1 = unknown> = RunnableNode<TConfig, TInputJson$1, TOutputJson$1>;
-interface MultiInputNode<TConfig extends NodeConfigBase = NodeConfigBase> {
-  kind: "node";
+declare const triggerNodeSetupStateType: unique symbol;
+interface TriggerNodeConfig<TOutputJson$1 = unknown, TSetupState$1 extends JsonValue | undefined = undefined> extends NodeConfigBase {
+  readonly kind: "trigger";
+  readonly [triggerNodeOutputType]?: TOutputJson$1;
+  readonly [triggerNodeSetupStateType]?: TSetupState$1;
+  /**
+   * Distinguishes triggers driven by the live activation policy (webhooks, cron, polling) from
+   * triggers driven only by the {@link TestSuiteOrchestrator}. `WorkflowActivation` skips
+   * `"test"` triggers; the orchestrator skips `"live"` triggers. Defaults to `"live"` when omitted.
+   */
+  readonly triggerKind?: "live" | "test";
+}
+type RunnableNodeInputJson<TConfig extends RunnableNodeConfig<any, any>> = TConfig extends RunnableNodeConfig<infer TInputJson, any> ? TInputJson : never;
+type RunnableNodeOutputJson<TConfig extends RunnableNodeConfig<any, any>> = TConfig extends RunnableNodeConfig<any, infer TOutputJson> ? TOutputJson : never;
+type TriggerNodeOutputJson<TConfig extends TriggerNodeConfig<any, any>> = TConfig extends TriggerNodeConfig<infer TOutputJson, any> ? TOutputJson : never;
+type TriggerNodeSetupState<TConfig extends TriggerNodeConfig<any, any>> = TConfig extends TriggerNodeConfig<any, infer TSetupState> ? TSetupState : never;
+interface NodeDefinition {
+  id: NodeId;
+  kind: NodeKind;
+  type: TypeToken<unknown>;
+  name?: string;
+  config: NodeConfigBase;
+}
+interface NodeRef {
+  id: NodeId;
+  kind: NodeKind;
+  name?: string;
+}
+declare function nodeRef<TJson>(nodeId: NodeId): NodeIdRef<TJson>;
+type PairedItemRef = Readonly<{
+  nodeId: NodeId;
+  output: OutputPortKey;
+  itemIndex: number;
+}>;
+type BinaryPreviewKind = "image" | "audio" | "video" | "download";
+type BinaryAttachment = Readonly<{
+  id: string;
+  storageKey: string;
+  mimeType: string;
+  size: number;
+  storageDriver: string;
+  previewKind: BinaryPreviewKind;
+  createdAt: string;
+  runId: RunId;
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  activationId: NodeActivationId;
+  filename?: string;
+  sha256?: string;
+}>;
+type ItemBinary = Readonly<Record<string, BinaryAttachment>>;
+type Item<TJson = unknown> = Readonly<{
+  json: TJson;
+  binary?: ItemBinary;
+  meta?: Readonly<Record<string, unknown>>;
+  paired?: ReadonlyArray<PairedItemRef>;
+}>;
+type Items<TJson = unknown> = ReadonlyArray<Item<TJson>>;
+type NodeOutputs = Partial<Record<OutputPortKey, Items>>;
+type RunId = string;
+type NodeActivationId = string;
+/**
+ * One per-item iteration of a runnable node's execute loop. Refines `NodeActivationId` for
+ * per-item connection invocations and telemetry. Undefined when the executing node is a batch
+ * node or trigger that does not iterate items.
+ */
+type NodeIterationId = string;
+interface ParentExecutionRef {
+  runId: RunId;
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  /** Subworkflow depth of the **spawning** run (0 = root). Passed when starting a child run. */
+  subworkflowDepth?: number;
+  /** Effective max node activations from the parent run (propagated to child policy merge). */
+  engineMaxNodeActivations?: number;
+  /** Effective max subworkflow depth from the parent run (propagated to child policy merge). */
+  engineMaxSubworkflowDepth?: number;
   /**
-   * Declared output ports (typically `["main"]`).
-   *
-   * Prefer describing ports for authoring/canvas via {@link NodeConfigBase.declaredOutputPorts}.
-   * Engine defaults to `["main"]` when omitted.
+   * Test-suite linkage inherited by the child subworkflow run. Set by whichever node
+   * spawns the subworkflow when its own `ctx.testContext` is present, so assertions
+   * emitted inside a subworkflow land under the correct parent test case.
    */
-  outputPorts?: ReadonlyArray<OutputPortKey>;
-  executeMulti(inputsByPort: NodeInputsByPort, ctx: NodeExecutionContext<TConfig>): Promise<NodeOutputs>;
+  testContext?: RunTestContext;
 }
-type TriggerSetupStateFor<TConfig extends TriggerNodeConfig<any, any>> = TriggerNodeSetupState<TConfig>;
-interface TriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> {
-  kind: "trigger";
-  outputPorts: readonly ["main"];
-  setup(ctx: TriggerSetupContext<TConfig>): Promise<TriggerSetupStateFor<TConfig>>;
-  execute(items: Items, ctx: NodeExecutionContext<TConfig>): Promise<NodeOutputs>;
+interface RunDataSnapshot {
+  getOutputs(nodeId: NodeId): NodeOutputs | undefined;
+  getOutputItems<TJson = unknown>(nodeId: NodeId | NodeIdRef<TJson>, output?: OutputPortKey): Items<TJson>;
+  getOutputItem<TJson = unknown>(nodeId: NodeId | NodeIdRef<TJson>, itemIndex: number, output?: OutputPortKey): Item<TJson> | undefined;
 }
-interface TestableTriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> extends TriggerNode<TConfig> {
-  getTestItems(ctx: TriggerTestItemsContext<TConfig>): Promise<Items>;
+interface MutableRunData extends RunDataSnapshot {
+  setOutputs(nodeId: NodeId, outputs: NodeOutputs): void;
+  dump(): Record<NodeId, NodeOutputs>;
 }
-type ExecutableTriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> = TriggerNode<TConfig>;
-interface NodeExecutionRequest {
-  runId: RunId;
-  activationId: NodeActivationId;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  input: Items;
-  parent?: ParentExecutionRef;
-  queue?: string;
-  executionOptions?: RunExecutionOptions;
+interface RunDataFactory {
+  create(initial?: Record<NodeId, NodeOutputs>): MutableRunData;
 }
-interface NodeExecutionScheduler {
-  enqueue(request: NodeExecutionRequest): Promise<{
-    receiptId: string;
-  }>;
-  cancel?(receiptId: string): Promise<void>;
+interface RunIdFactory {
+  makeRunId(): RunId;
 }
-interface NodeExecutionRequestHandler {
-  handleNodeExecutionRequest(request: NodeExecutionRequest): Promise<void>;
+interface ActivationIdFactory {
+  makeActivationId(): NodeActivationId;
 }
-type NodeActivationRequestBase = Readonly<{
-  runId: RunId;
-  activationId: NodeActivationId;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  parent?: ParentExecutionRef;
-  executionOptions?: RunExecutionOptions;
-  batchId?: string;
-  ctx: NodeExecutionContext;
-}>;
-type NodeActivationRequest = (NodeActivationRequestBase & Readonly<{
-  kind: "single";
-  input: Items;
-}>) | (NodeActivationRequestBase & Readonly<{
-  kind: "multi";
-  inputsByPort: NodeInputsByPort;
-}>);
-interface NodeActivationReceipt {
-  receiptId: string;
-  mode?: "local" | "worker";
+type UpstreamRefPlaceholder = `$${number}`;
+declare const branchRef: (index: number) => UpstreamRefPlaceholder;
+type ExecutionMode = "local" | "worker";
+interface NodeSchedulerDecision {
+  mode: ExecutionMode;
   queue?: string;
 }
-interface PreparedNodeActivationDispatch {
-  readonly receipt: NodeActivationReceipt;
-  dispatch(): Promise<void>;
-}
-interface NodeActivationContinuation {
-  markNodeRunning(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    inputsByPort: NodeInputsByPort;
-  }): Promise<void>;
-  resumeFromNodeResult(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    outputs: NodeOutputs;
-  }): Promise<RunResult>;
-  resumeFromNodeError(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
+interface NodeOffloadPolicy {
+  decide(args: {
+    workflowId: WorkflowId;
     nodeId: NodeId;
-    error: Error;
-  }): Promise<RunResult>;
+    config: NodeConfigBase;
+  }): NodeSchedulerDecision;
 }
-interface NodeActivationScheduler {
-  setContinuation?(continuation: NodeActivationContinuation): void;
-  prepareDispatch(request: NodeActivationRequest): Promise<PreparedNodeActivationDispatch>;
-  cancel?(receiptId: string): Promise<void>;
+/** Whether to persist run execution data after the workflow finishes. */
+type WorkflowStoragePolicyMode = "ALL" | "SUCCESS" | "ERROR" | "NEVER";
+type WorkflowStoragePolicySpec = WorkflowStoragePolicyMode | TypeToken<WorkflowStoragePolicyResolver>;
+interface WorkflowStoragePolicyResolver {
+  shouldPersist(args: WorkflowStoragePolicyDecisionArgs): boolean | Promise<boolean>;
 }
-interface WorkflowNodeInstanceFactory {
-  createNodes(workflow: WorkflowDefinition): ReadonlyMap<NodeId, unknown>;
-  createByType(type: TypeToken<unknown>): unknown;
+interface WorkflowStoragePolicyDecisionArgs {
+  readonly runId: RunId;
+  readonly workflowId: WorkflowId;
+  readonly workflow: WorkflowDefinition;
+  readonly finalStatus: "completed" | "failed";
+  readonly startedAt: string;
+  readonly finishedAt: string;
 }
-interface NodeExecutor {
-  execute(request: NodeActivationRequest): Promise<NodeOutputs>;
+interface WorkflowPrunePolicySpec {
+  readonly runDataRetentionSeconds?: number;
+  readonly binaryRetentionSeconds?: number;
+  readonly telemetrySpanRetentionSeconds?: number;
+  readonly telemetryArtifactRetentionSeconds?: number;
+  readonly telemetryMetricRetentionSeconds?: number;
 }
-interface WorkflowSnapshotFactory {
-  create(workflow: WorkflowDefinition): PersistedWorkflowSnapshot;
+interface PersistedRunPolicySnapshot {
+  readonly retentionSeconds?: number;
+  readonly binaryRetentionSeconds?: number;
+  readonly telemetrySpanRetentionSeconds?: number;
+  readonly telemetryArtifactRetentionSeconds?: number;
+  readonly telemetryMetricRetentionSeconds?: number;
+  readonly storagePolicy: WorkflowStoragePolicyMode;
 }
-interface WorkflowSnapshotResolver {
-  resolve(args: {
-    workflowId: WorkflowId;
-    workflowSnapshot?: PersistedWorkflowSnapshot;
-  }): WorkflowDefinition | undefined;
+interface WorkflowErrorHandler {
+  onError(ctx: WorkflowErrorContext): void | Promise<void>;
 }
-/** Optional host wiring for trigger lifecycle logs (boot skip + activation sync). */
-interface TriggerRuntimeDiagnostics {
-  info(message: string): void;
-  warn(message: string): void;
+interface WorkflowErrorContext {
+  readonly runId: RunId;
+  readonly workflowId: WorkflowId;
+  readonly workflow: WorkflowDefinition;
+  readonly failedNodeId: NodeId;
+  readonly error: Error;
+  readonly startedAt: string;
+  readonly finishedAt: string;
 }
-interface EngineDeps {
-  credentialSessions: CredentialSessionService;
-  liveWorkflowRepository: LiveWorkflowRepository;
-  workflowRepository: WorkflowRepository;
-  /** When {@link AllWorkflowsActiveWorkflowActivationPolicy}, all workflows behave as active (tests). */
-  workflowActivationPolicy: WorkflowActivationPolicy;
-  nodeResolver: NodeResolver;
-  triggerSetupStateRepository: TriggerSetupStateRepository;
-  webhookTriggerMatcher: WebhookTriggerMatcher;
-  runIdFactory: RunIdFactory;
-  activationIdFactory: ActivationIdFactory;
-  workflowExecutionRepository: WorkflowExecutionRepository;
-  activationScheduler: NodeActivationScheduler;
-  runDataFactory: RunDataFactory;
-  executionContextFactory: ExecutionContextFactory;
-  executionTelemetryFactory?: ExecutionTelemetryFactory;
-  nodeExecutor: NodeExecutor;
-  eventBus?: RunEventBus;
-  tokenRegistry: PersistedWorkflowTokenRegistryLike;
-  workflowNodeInstanceFactory: WorkflowNodeInstanceFactory;
-  /** Defaults for prune/storage snapshot when workflow omits explicit policy fields. */
-  workflowPolicyRuntimeDefaults?: WorkflowPolicyRuntimeDefaults;
-  /** When set, logs inactive-workflow skips at boot and trigger start/stop on activation changes. */
-  triggerRuntimeDiagnostics?: TriggerRuntimeDiagnostics;
-  /** When set, the polling-trigger runtime uses this logger for cycle info/debug/error. */
-  pollingTriggerLogger?: PollingTriggerLogger;
+type WorkflowErrorHandlerSpec = TypeToken<WorkflowErrorHandler> | WorkflowErrorHandler;
+interface NodeErrorHandlerArgs<TConfig extends NodeConfigBase = NodeConfigBase> {
+  readonly kind: "single" | "multi";
+  readonly items: Items;
+  readonly inputsByPort: Readonly<Record<InputPortKey, Items>> | undefined;
+  readonly ctx: NodeExecutionContext<TConfig>;
+  readonly error: Error;
+}
+interface NodeErrorHandler {
+  handle<TConfig extends NodeConfigBase>(args: NodeErrorHandlerArgs<TConfig>): Promise<NodeOutputs>;
+}
+type NodeErrorHandlerSpec = TypeToken<NodeErrorHandler> | NodeErrorHandler;
+/** Runtime defaults when workflow omits prune/storage fields (typically from host env). */
+interface WorkflowPolicyRuntimeDefaults {
+  readonly retentionSeconds?: number;
+  readonly binaryRetentionSeconds?: number;
+  readonly telemetrySpanRetentionSeconds?: number;
+  readonly telemetryArtifactRetentionSeconds?: number;
+  readonly telemetryMetricRetentionSeconds?: number;
+  readonly storagePolicy?: WorkflowStoragePolicyMode;
+}
+//#endregion
+//#region src/contracts/testTriggerTypes.d.ts
+/**
+ * Identifier minted by the host (or in-memory test runner) for one execution of a test suite.
+ * One TestSuiteRun produces N child workflow runs, one per item yielded by `generateItems`.
+ */
+type TestSuiteRunId = string;
+/**
+ * Setup context passed to a {@link TestTriggerNodeConfig.generateItems} callback. Distinct from
+ * {@link import("./runtimeTypes").TriggerSetupContext} on purpose: test triggers are not
+ * activated by the live trigger lifecycle (webhooks, cron, polling) and never call `emit` —
+ * the orchestrator pulls from the iterable they return and dispatches one run per item.
+ */
+interface TestTriggerSetupContext<TConfig extends TestTriggerNodeConfig<unknown> = TestTriggerNodeConfig<unknown>> {
+  readonly workflowId: WorkflowId;
+  readonly nodeId: NodeId;
+  readonly config: TConfig;
+  readonly testSuiteRunId: TestSuiteRunId;
+  /**
+   * Resolves a credential session for a slot declared on this trigger's
+   * {@link import("./workflowTypes").NodeConfigBase.getCredentialRequirements}. Same contract as
+   * {@link import("./runtimeTypes").ExecutionContext.getCredential}.
+   */
+  getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
+  /** AbortSignal raised when the suite is cancelled — long-running pulls should bail out. */
+  readonly signal: AbortSignal;
+}
+/**
+ * A trigger config that emits **test cases**. Each item yielded by {@link generateItems}
+ * becomes one workflow run (with `executionOptions.testContext` set), so 10 yielded items
+ * → 10 runs marked under the same TestSuiteRun.
+ *
+ * The trigger is otherwise a normal {@link TriggerNodeConfig} (so the canvas treats it like
+ * any other trigger), but its `triggerKind` is `"test"` so the live activation policy skips it.
+ */
+interface TestTriggerNodeConfig<TOutputJson$1 = unknown> extends TriggerNodeConfig<TOutputJson$1, undefined> {
+  readonly triggerKind: "test";
+  /**
+   * Author-supplied async iterable of items, evaluated lazily. Implementations may fetch from
+   * credentialed APIs, read fixture files, or yield hard-coded items. The orchestrator iterates
+   * and dispatches one run per item, with concurrency capped by {@link concurrency} (default 4).
+   */
+  generateItems(ctx: TestTriggerSetupContext<TestTriggerNodeConfig<TOutputJson$1>>): AsyncIterable<Item<TOutputJson$1>>;
+  /** Per-suite-run cap on simultaneously-executing test cases. Default: 4. */
+  readonly concurrency?: number;
+  /**
+   * Free-form description of where the test cases come from — surfaced in the node properties
+   * panel and the suite-detail header so authors revisiting the workflow six months later
+   * remember which mailbox / folder / fixture file the cases originate from.
+   *
+   * Example: `"All emails in the Gmail label \"test/triage-fixtures\" — 14 messages as of 2026-05-03."`
+   */
+  readonly description?: string;
+  /**
+   * Resolves a human-readable label for one yielded test case (e.g. email subject). The
+   * orchestrator calls this once per yielded item, persists the result on the run, and the
+   * Tests-tab UI uses it to render the case row instead of the opaque runId. Return
+   * `undefined` to fall back to "Case #N".
+   */
+  caseLabel?(item: Item<TOutputJson$1>): string | undefined;
 }
 //#endregion
-//#region src/contracts/retryPolicySpec.types.d.ts
+//#region src/events/runEvents.d.ts
 /**
- * In-process retry policy for runnable nodes. Serialized configs use the same
- * `kind` discriminator (`JSON.stringify` / persisted workflows).
- *
- * `maxAttempts` is the total number of tries including the first (e.g. 3 means up to 2 delays after failures).
+ * Outcome of a single test case (one workflow run dispatched by the test-suite orchestrator).
+ * - `running`: workflow still in flight
+ * - `succeeded`: workflow completed AND all assertions passed (or no assertions)
+ * - `failed`: workflow failed OR (workflow completed but ≥1 assertion failed)
+ * - `errored` / `cancelled`: workflow itself errored or was cancelled
  */
-type RetryPolicySpec = NoneRetryPolicySpec | FixedRetryPolicySpec | ExponentialRetryPolicySpec;
-interface NoneRetryPolicySpec {
-  readonly kind: "none";
-}
-interface FixedRetryPolicySpec {
-  readonly kind: "fixed";
-  /** Total attempts including the first execution. Must be >= 1. */
-  readonly maxAttempts: number;
-  readonly delayMs: number;
+type TestCaseRunStatus = "running" | "succeeded" | "failed" | "errored" | "cancelled";
+/** Aggregate outcome of a TestSuiteRun. */
+type TestSuiteRunStatus = "succeeded" | "failed" | "partial" | "errored" | "cancelled";
+type RunEvent = Readonly<{
+  kind: "runCreated";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+}> | Readonly<{
+  kind: "runSaved";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  state: PersistedRunState;
+}> | Readonly<{
+  kind: "nodeQueued";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  snapshot: NodeExecutionSnapshot;
+}> | Readonly<{
+  kind: "nodeStarted";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  snapshot: NodeExecutionSnapshot;
+}> | Readonly<{
+  kind: "nodeCompleted";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  snapshot: NodeExecutionSnapshot;
+}> | Readonly<{
+  kind: "nodeFailed";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  snapshot: NodeExecutionSnapshot;
+}> | Readonly<{
+  kind: "connectionInvocationStarted";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  record: ConnectionInvocationRecord;
+}> | Readonly<{
+  kind: "connectionInvocationCompleted";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  record: ConnectionInvocationRecord;
+}> | Readonly<{
+  kind: "connectionInvocationFailed";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  record: ConnectionInvocationRecord;
+}> | Readonly<{
+  kind: "testSuiteStarted";
+  testSuiteRunId: TestSuiteRunId;
+  workflowId: WorkflowId;
+  triggerNodeId: string;
+  triggerNodeName?: string;
+  concurrency: number;
+  at: string;
+}> | Readonly<{
+  kind: "testSuiteFinished";
+  testSuiteRunId: TestSuiteRunId;
+  workflowId: WorkflowId;
+  status: TestSuiteRunStatus;
+  totalCases: number;
+  passedCases: number;
+  failedCases: number;
+  at: string;
+}> | Readonly<{
+  kind: "testCaseStarted";
+  testSuiteRunId: TestSuiteRunId;
+  testCaseIndex: number;
+  runId: RunId;
+  workflowId: WorkflowId;
+  testCaseLabel?: string;
+  at: string;
+}> | Readonly<{
+  kind: "testCaseCompleted";
+  testSuiteRunId: TestSuiteRunId;
+  testCaseIndex: number;
+  runId: RunId;
+  workflowId: WorkflowId;
+  status: TestCaseRunStatus;
+  at: string;
+}>;
+interface RunEventSubscription {
+  close(): Promise<void>;
 }
-interface ExponentialRetryPolicySpec {
-  readonly kind: "exponential";
-  /** Total attempts including the first execution. Must be >= 1. */
-  readonly maxAttempts: number;
-  readonly initialDelayMs: number;
-  readonly multiplier: number;
-  readonly maxDelayMs?: number;
-  /** When true, each delay is multiplied by a random factor in [1, 1.2). */
-  readonly jitter?: boolean;
+interface RunEventBus {
+  publish(event: RunEvent): Promise<void>;
+  subscribe(onEvent: (event: RunEvent) => void): Promise<RunEventSubscription>;
+  subscribeToWorkflow(workflowId: WorkflowId, onEvent: (event: RunEvent) => void): Promise<RunEventSubscription>;
 }
 //#endregion
-//#region src/contracts/workflowTypes.d.ts
-type NodeIdRef<TJson = unknown> = NodeId & Readonly<{
-  __codemationNodeJson?: TJson;
-}>;
-type NodeKind = "trigger" | "node";
-type JsonPrimitive = string | number | boolean | null;
-interface JsonObject {
-  readonly [key: string]: JsonValue;
-}
-type JsonValue = JsonPrimitive | JsonObject | JsonArray;
-type JsonArray = ReadonlyArray<JsonValue>;
-/** JSON value that is not a top-level array (nested arrays inside objects are allowed). */
-type JsonNonArray = JsonPrimitive | JsonObject;
-interface Edge {
-  from: {
-    nodeId: NodeId;
-    output: OutputPortKey;
-  };
-  to: {
-    nodeId: NodeId;
-    input: InputPortKey;
-  };
+//#region src/policies/executionLimits/EngineExecutionLimitsPolicy.d.ts
+interface EngineExecutionLimitsPolicyConfig {
+  readonly defaultMaxNodeActivations: number;
+  readonly hardMaxNodeActivations: number;
+  readonly defaultMaxSubworkflowDepth: number;
+  readonly hardMaxSubworkflowDepth: number;
 }
+/** Framework defaults for {@link EngineExecutionLimitsPolicy} (merged with host `runtime.engineExecutionLimits`). */
+declare const ENGINE_EXECUTION_LIMITS_DEFAULTS: EngineExecutionLimitsPolicyConfig;
 /**
- * Named connection from a parent node to child nodes that exist in {@link WorkflowDefinition.nodes}
- * but are not traversed by the main execution graph. Parents are commonly executable nodes, but may
- * also be connection-owned nodes for recursive agent attachments.
+ * Resolves per-run execution limits: defaults, hard ceilings, and subworkflow depth for new runs.
  */
-interface WorkflowNodeConnection {
-  readonly parentNodeId: NodeId;
-  readonly connectionName: NodeConnectionName;
-  readonly childNodeIds: ReadonlyArray<NodeId>;
-}
-interface WorkflowDefinition {
-  id: WorkflowId;
-  name: string;
-  nodes: NodeDefinition[];
-  edges: Edge[];
+declare class EngineExecutionLimitsPolicy {
+  private readonly config;
+  constructor(config?: EngineExecutionLimitsPolicyConfig);
   /**
-   * Optional metadata: which nodes are connection-owned children (e.g. AI agent `llm` / `tools` slots).
-   * When omitted, all nodes in {@link nodes} are treated as executable for topology.
+   * Effective options for a new root run (depth 0): defaults merged with engine ceilings.
+   * Replaces a separate one-method factory for root-run bootstrap.
    */
-  readonly connections?: ReadonlyArray<WorkflowNodeConnection>;
-  /** Directory + file-stem path under a workflow discovery root (for UI grouping only). */
-  discoveryPathSegments?: readonly string[];
-  /** Retention for run JSON and binaries (seconds). Host/env may supply defaults when omitted. */
-  readonly prunePolicy?: WorkflowPrunePolicySpec;
-  /** Whether to keep run data after completion. Host/env may supply defaults when omitted. */
-  readonly storagePolicy?: WorkflowStoragePolicySpec;
-  /** Invoked after a node fails permanently (retries exhausted) and node error handler did not recover. */
-  readonly workflowErrorHandler?: WorkflowErrorHandlerSpec;
-}
-interface WorkflowGraph {
-  next(nodeId: NodeId, output: OutputPortKey): ReadonlyArray<Readonly<{
-    nodeId: NodeId;
-    input: InputPortKey;
-  }>>;
-}
-interface WorkflowGraphFactory {
-  create(def: WorkflowDefinition): WorkflowGraph;
+  createRootExecutionOptions(): RunExecutionOptions;
+  mergeExecutionOptionsForNewRun(parent: ParentExecutionRef | undefined, user: RunExecutionOptions | undefined): RunExecutionOptions;
+  private capNumber;
 }
-interface NodeConfigBase {
-  readonly kind: NodeKind;
-  readonly type: TypeToken<unknown>;
-  readonly name?: string;
-  readonly id?: NodeId;
-  readonly icon?: string;
-  readonly execution?: Readonly<{
-    hint?: "local" | "worker";
-    queue?: string;
-  }>;
-  /** In-process execute retries (runnable nodes). Triggers typically omit this. */
-  readonly retryPolicy?: RetryPolicySpec;
-  /** Recover from execute failures; return outputs to continue, or rethrow to fail the node. */
-  readonly nodeErrorHandler?: NodeErrorHandlerSpec;
-  /**
-   * When true, edges carrying zero items on an output port still schedule single-input downstream nodes.
-   * Decided from the **source** node that produced the (empty) output. Default (false/undefined): empty
-   * main batches skip downstream execution and propagate the empty path.
-   */
-  readonly continueWhenEmptyOutput?: boolean;
-  /**
-   * Declared I/O port names for canvas authoring (unioned with ports inferred from edges).
-   * Use for dynamic routers (Switch) and future error ports.
-   */
-  readonly declaredOutputPorts?: ReadonlyArray<OutputPortKey>;
-  readonly declaredInputPorts?: ReadonlyArray<InputPortKey>;
-  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
+//#endregion
+//#region src/di/CoreTokens.d.ts
+declare const CoreTokens: {
+  readonly PersistedWorkflowTokenRegistry: TypeToken<PersistedWorkflowTokenRegistryLike>;
+  readonly CredentialSessionService: TypeToken<CredentialSessionService>;
+  readonly CredentialTypeRegistry: TypeToken<CredentialTypeRegistry>;
+  readonly WorkflowRunnerService: TypeToken<WorkflowRunnerService>;
+  readonly LiveWorkflowRepository: TypeToken<LiveWorkflowRepository>;
+  readonly WorkflowRepository: TypeToken<WorkflowRepository>;
+  readonly NodeResolver: TypeToken<NodeResolver>;
+  readonly WorkflowNodeInstanceFactory: TypeToken<WorkflowNodeInstanceFactory>;
+  readonly RunIdFactory: TypeToken<RunIdFactory>;
+  readonly ActivationIdFactory: TypeToken<ActivationIdFactory>;
+  readonly WorkflowExecutionRepository: TypeToken<WorkflowExecutionRepository>;
+  readonly TriggerSetupStateRepository: TypeToken<TriggerSetupStateRepository>;
+  readonly NodeActivationScheduler: TypeToken<NodeActivationScheduler>;
+  readonly RunDataFactory: TypeToken<RunDataFactory>;
+  readonly ExecutionContextFactory: TypeToken<ExecutionContextFactory>;
+  readonly RunEventBus: TypeToken<RunEventBus>;
+  readonly BinaryStorage: TypeToken<BinaryStorage>;
+  readonly WebhookBasePath: TypeToken<string>;
+  /** Engine execution limits (defaults + optional host overrides). Consumers may bind a custom instance to override. */
+  readonly EngineExecutionLimitsPolicy: TypeToken<EngineExecutionLimitsPolicy>;
+  readonly WorkflowActivationPolicy: TypeToken<WorkflowActivationPolicy>;
   /**
-   * Marker: this node emits {@link import("./assertionTypes").AssertionResult}-shaped items on its
-   * `main` port. The TestSuiteOrchestrator (and host-side TestAssertionPersister) listen for
-   * `nodeCompleted` events from nodes with this flag set, and persist their output items as
-   * TestAssertion records (only when the run carries a `testContext`). Set on assertion node
-   * configs (e.g. `AssertionNodeConfig`, `StringEqualsAssertionNodeConfig`).
+   * Optional. When registered, AIAgentNode uses it to resolve mcpServers bindings,
+   * validate scopes, open pool connections, and prepare the MCP ToolSet map.
+   * Not registered in the default core bootstrap — the host provides the implementation.
    */
-  readonly emitsAssertions?: true;
-}
-declare const runnableNodeInputType: unique symbol;
-declare const runnableNodeOutputType: unique symbol;
-declare const triggerNodeOutputType: unique symbol;
+  readonly AgentMcpIntegration: TypeToken<AgentMcpIntegration>;
+};
+//#endregion
+//#region src/contracts/runTypes.d.ts
 /**
- * Runnable node: **`TInputJson`** is what **`inputSchema`** validates on **`item.json`** (the wire payload).
- * **`TOutputJson`** is emitted `item.json` on outputs.
+ * Test-suite linkage for a run. When set, this run was started by a TestSuiteOrchestrator
+ * as one test case inside a TestSuiteRun. The `IsTestRun` node and host-side persisters key
+ * off the presence of this field. Subworkflow runs inherit it from their parent run.
  */
-interface RunnableNodeConfig<TInputJson$1 = unknown, TOutputJson$1 = unknown> extends NodeConfigBase {
-  readonly kind: "node";
-  readonly [runnableNodeInputType]?: TInputJson$1;
-  readonly [runnableNodeOutputType]?: TOutputJson$1;
-  /**
-   * Optional Zod input contract for {@link RunnableNode} when not set on the node class.
-   * Resolution order: node instance `inputSchema`, then config `inputSchema`, then `z.unknown()`.
-   */
-  readonly inputSchema?: ZodType<TInputJson$1>;
+interface RunTestContext {
+  readonly testSuiteRunId: string;
+  readonly testCaseIndex: number;
   /**
-   * When an activation receives **zero** input items, the engine normally runs `execute` zero times.
-   * Set to **`runOnce`** to run `execute` once with an empty `items` batch (and a synthetic wire item for schema parsing).
-   * Used by batch-style callback nodes (built-in `Callback`) so `callback([], ctx)` still runs.
+   * Optional human-friendly label for this test case (e.g. an email subject when fixtures
+   * are loaded from a mailbox). Resolved per item by `TestTrigger.caseLabel(item)` if set,
+   * persisted on `Run.test_case_label` so the Tests-tab tree-table can show "RFQ for batch 14"
+   * instead of "run_1777755971399_bbb86beac1396".
    */
-  readonly emptyBatchExecution?: "skip" | "runOnce";
+  readonly testCaseLabel?: string;
 }
-declare const triggerNodeSetupStateType: unique symbol;
-interface TriggerNodeConfig<TOutputJson$1 = unknown, TSetupState$1 extends JsonValue | undefined = undefined> extends NodeConfigBase {
-  readonly kind: "trigger";
-  readonly [triggerNodeOutputType]?: TOutputJson$1;
-  readonly [triggerNodeSetupStateType]?: TSetupState$1;
-  /**
-   * Distinguishes triggers driven by the live activation policy (webhooks, cron, polling) from
-   * triggers driven only by the {@link TestSuiteOrchestrator}. `WorkflowActivation` skips
-   * `"test"` triggers; the orchestrator skips `"live"` triggers. Defaults to `"live"` when omitted.
-   */
-  readonly triggerKind?: "live" | "test";
+interface RunExecutionOptions {
+  /** Run-intent override: force the inline scheduler and bypass node-level offload decisions. */
+  localOnly?: boolean;
+  /** Marks runs started from webhook handling so orchestration can apply webhook-specific continuation rules. */
+  webhook?: boolean;
+  mode?: "manual" | "debug";
+  sourceWorkflowId?: WorkflowId;
+  sourceRunId?: RunId;
+  derivedFromRunId?: RunId;
+  isMutable?: boolean;
+  /** Set by the engine for this run: 0 = root, 1 = first child subworkflow, … */
+  subworkflowDepth?: number;
+  /** Effective cap after engine policy merge (successful node completions per run). */
+  maxNodeActivations?: number;
+  /** Effective cap after engine policy merge (subworkflow nesting). */
+  maxSubworkflowDepth?: number;
+  /** Present iff started by a TestSuiteOrchestrator; propagates to subworkflow runs via {@link ParentExecutionRef.testContext}. */
+  testContext?: RunTestContext;
 }
-type RunnableNodeInputJson<TConfig extends RunnableNodeConfig<any, any>> = TConfig extends RunnableNodeConfig<infer TInputJson, any> ? TInputJson : never;
-type RunnableNodeOutputJson<TConfig extends RunnableNodeConfig<any, any>> = TConfig extends RunnableNodeConfig<any, infer TOutputJson> ? TOutputJson : never;
-type TriggerNodeOutputJson<TConfig extends TriggerNodeConfig<any, any>> = TConfig extends TriggerNodeConfig<infer TOutputJson, any> ? TOutputJson : never;
-type TriggerNodeSetupState<TConfig extends TriggerNodeConfig<any, any>> = TConfig extends TriggerNodeConfig<any, infer TSetupState> ? TSetupState : never;
-interface NodeDefinition {
-  id: NodeId;
-  kind: NodeKind;
-  type: TypeToken<unknown>;
-  name?: string;
-  config: NodeConfigBase;
+/** Engine-owned counters persisted with the run (worker-safe). */
+interface EngineRunCounters {
+  completedNodeActivations: number;
 }
-interface NodeRef {
+type RunStopCondition = Readonly<{
+  kind: "workflowCompleted";
+}> | Readonly<{
+  kind: "nodeCompleted";
+  nodeId: NodeId;
+}>;
+interface RunStateResetRequest {
+  clearFromNodeId: NodeId;
+}
+interface PersistedRunControlState {
+  stopCondition?: RunStopCondition;
+}
+interface PersistedWorkflowSnapshotNode {
   id: NodeId;
   kind: NodeKind;
   name?: string;
+  nodeTokenId: PersistedTokenId;
+  configTokenId: PersistedTokenId;
+  tokenName?: string;
+  configTokenName?: string;
+  config: unknown;
+  /** Pre-computed static configuration summary; populated by WorkflowSnapshotCodec. */
+  inspectorSummary?: ReadonlyArray<Readonly<{
+    label: string;
+    value: string;
+  }>>;
 }
-declare function nodeRef<TJson>(nodeId: NodeId): NodeIdRef<TJson>;
-type PairedItemRef = Readonly<{
+interface PersistedWorkflowSnapshot {
+  id: WorkflowId;
+  name: string;
+  nodes: ReadonlyArray<PersistedWorkflowSnapshotNode>;
+  edges: ReadonlyArray<Edge>;
+  /** When the snapshot was built from a live workflow definition that configured a workflow error handler. */
+  workflowErrorHandlerConfigured?: boolean;
+  /** Connection metadata for child nodes not in the execution graph (e.g. AI agent attachments). */
+  connections?: ReadonlyArray<WorkflowNodeConnection>;
+}
+type PinnedNodeOutputsByPort = Readonly<Record<OutputPortKey, Items>>;
+interface PersistedMutableNodeState {
+  pinnedOutputsByPort?: PinnedNodeOutputsByPort;
+  lastDebugInput?: Items;
+}
+interface PersistedMutableRunState {
+  nodesById: Readonly<Record<NodeId, PersistedMutableNodeState>>;
+}
+type NodeInputsByPort = Readonly<Record<InputPortKey, Items>>;
+interface RunQueueEntry {
   nodeId: NodeId;
-  output: OutputPortKey;
-  itemIndex: number;
-}>;
-type BinaryPreviewKind = "image" | "audio" | "video" | "download";
-type BinaryAttachment = Readonly<{
-  id: string;
-  storageKey: string;
-  mimeType: string;
-  size: number;
-  storageDriver: string;
-  previewKind: BinaryPreviewKind;
-  createdAt: string;
+  input: Items;
+  toInput?: InputPortKey;
+  batchId?: string;
+  from?: Readonly<{
+    nodeId: NodeId;
+    output: OutputPortKey;
+  }>;
+  collect?: Readonly<{
+    expectedInputs: ReadonlyArray<InputPortKey>;
+    received: Readonly<Record<InputPortKey, Items>>;
+  }>;
+}
+type NodeExecutionStatus = "pending" | "queued" | "running" | "completed" | "failed" | "skipped";
+interface NodeExecutionError {
+  message: string;
+  name?: string;
+  stack?: string;
+  details?: JsonValue;
+}
+interface NodeExecutionSnapshot {
   runId: RunId;
   workflowId: WorkflowId;
   nodeId: NodeId;
-  activationId: NodeActivationId;
-  filename?: string;
-  sha256?: string;
-}>;
-type ItemBinary = Readonly<Record<string, BinaryAttachment>>;
-type Item<TJson = unknown> = Readonly<{
-  json: TJson;
-  binary?: ItemBinary;
-  meta?: Readonly<Record<string, unknown>>;
-  paired?: ReadonlyArray<PairedItemRef>;
-}>;
-type Items<TJson = unknown> = ReadonlyArray<Item<TJson>>;
-type NodeOutputs = Partial<Record<OutputPortKey, Items>>;
-type RunId = string;
-type NodeActivationId = string;
+  activationId?: NodeActivationId;
+  parent?: ParentExecutionRef;
+  status: NodeExecutionStatus;
+  usedPinnedOutput?: boolean;
+  queuedAt?: string;
+  startedAt?: string;
+  finishedAt?: string;
+  updatedAt: string;
+  inputsByPort?: NodeInputsByPort;
+  outputs?: NodeOutputs;
+  error?: NodeExecutionError;
+  /**
+   * When the node is a SubWorkflow invocation, the run id of the child run it spawned.
+   * Populated after the child run completes so the UI can deep-link to that specific execution.
+   */
+  childRunId?: RunId;
+}
+/** Stable id for a single connection invocation row in {@link ConnectionInvocationRecord}. */
+type ConnectionInvocationId = string;
 /**
- * One per-item iteration of a runnable node's execute loop. Refines `NodeActivationId` for
- * per-item connection invocations and telemetry. Undefined when the executing node is a batch
- * node or trigger that does not iterate items.
+ * One logical LLM or tool call under an owning workflow node (e.g. AI agent).
+ * The owning node defines what {@link managedInput} and {@link managedOutput} contain.
  */
-type NodeIterationId = string;
-interface ParentExecutionRef {
+interface ConnectionInvocationRecord {
+  readonly invocationId: ConnectionInvocationId;
+  readonly runId: RunId;
+  readonly workflowId: WorkflowId;
+  readonly connectionNodeId: NodeId;
+  readonly parentAgentNodeId: NodeId;
+  readonly parentAgentActivationId: NodeActivationId;
+  readonly status: NodeExecutionStatus;
+  readonly managedInput?: JsonValue;
+  readonly managedOutput?: JsonValue;
+  /** Short human-readable description of what this invocation is doing right now (e.g. `"calling search_messages"`). Rendered as a sub-line on the canvas node card. */
+  readonly statusLabel?: string;
+  /** Stable identifier for the thing this invocation acts on (e.g. an MCP tool name like `"search_messages"`). Persists across status transitions so the inspector can show it on completed/failed entries too. Connection nodes that ARE the tool (e.g. node-backed agent tools) leave this unset — the parent node id already identifies the subject. */
+  readonly subjectName?: string;
+  readonly error?: NodeExecutionError;
+  readonly queuedAt?: string;
+  readonly startedAt?: string;
+  readonly finishedAt?: string;
+  readonly updatedAt: string;
+  /** Per-item iteration id minted by the engine when this invocation occurred inside a runnable node's per-item loop. */
+  readonly iterationId?: NodeIterationId;
+  /** Item index (0-based) of the iteration that produced this invocation. */
+  readonly itemIndex?: number;
+  /** When set, this invocation was produced inside a sub-agent triggered by the named parent invocation. */
+  readonly parentInvocationId?: ConnectionInvocationId;
+}
+/** Arguments for appending a {@link ConnectionInvocationRecord} (engine fills run/workflow ids and timestamps). */
+type ConnectionInvocationAppendArgs = Readonly<{
+  invocationId: ConnectionInvocationId;
+  connectionNodeId: NodeId;
+  parentAgentNodeId: NodeId;
+  parentAgentActivationId: NodeActivationId;
+  status: NodeExecutionStatus;
+  managedInput?: JsonValue;
+  managedOutput?: JsonValue;
+  statusLabel?: string;
+  subjectName?: string;
+  error?: NodeExecutionError;
+  queuedAt?: string;
+  startedAt?: string;
+  finishedAt?: string;
+  iterationId?: NodeIterationId;
+  itemIndex?: number;
+  parentInvocationId?: ConnectionInvocationId;
+}>;
+interface RunCurrentState {
+  outputsByNode: Record<NodeId, NodeOutputs>;
+  nodeSnapshotsByNodeId: Record<NodeId, NodeExecutionSnapshot>;
+  /** Append-only history of connection-scoped invocations (LLM/tool) for inspector and canvas. */
+  connectionInvocations?: ReadonlyArray<ConnectionInvocationRecord>;
+  mutableState?: PersistedMutableRunState;
+}
+interface CurrentStateExecutionRequest {
+  workflow: WorkflowDefinition;
+  items?: Items;
+  parent?: ParentExecutionRef;
+  executionOptions?: RunExecutionOptions;
+  workflowSnapshot?: PersistedWorkflowSnapshot;
+  mutableState?: PersistedMutableRunState;
+  currentState?: RunCurrentState;
+  stopCondition?: RunStopCondition;
+  reset?: RunStateResetRequest;
+}
+interface ExecutionFrontierPlan {
+  rootNodeId?: NodeId;
+  rootNodeInput?: Items;
+  queue: RunQueueEntry[];
+  currentState: RunCurrentState;
+  stopCondition: RunStopCondition;
+  satisfiedNodeIds: ReadonlyArray<NodeId>;
+  skippedNodeIds: ReadonlyArray<NodeId>;
+  clearedNodeIds: ReadonlyArray<NodeId>;
+  preservedPinnedNodeIds: ReadonlyArray<NodeId>;
+}
+type RunStatus = "running" | "pending" | "completed" | "failed";
+interface RunSummary {
   runId: RunId;
   workflowId: WorkflowId;
-  nodeId: NodeId;
-  /** Subworkflow depth of the **spawning** run (0 = root). Passed when starting a child run. */
-  subworkflowDepth?: number;
-  /** Effective max node activations from the parent run (propagated to child policy merge). */
-  engineMaxNodeActivations?: number;
-  /** Effective max subworkflow depth from the parent run (propagated to child policy merge). */
-  engineMaxSubworkflowDepth?: number;
+  startedAt: string;
+  status: RunStatus;
   /**
-   * Test-suite linkage inherited by the child subworkflow run. Set by whichever node
-   * spawns the subworkflow when its own `ctx.testContext` is present, so assertions
-   * emitted inside a subworkflow land under the correct parent test case.
+   * Test-case status for runs dispatched as part of a TestSuiteRun. Carries the
+   * assertion-rollup-corrected outcome the test orchestrator persists onto the row, so the
+   * executions list can show "failed" for a run whose workflow completed cleanly but whose
+   * assertions caught regressions. Absent for non-test runs and legacy rows.
    */
-  testContext?: RunTestContext;
-}
-interface RunDataSnapshot {
-  getOutputs(nodeId: NodeId): NodeOutputs | undefined;
-  getOutputItems<TJson = unknown>(nodeId: NodeId | NodeIdRef<TJson>, output?: OutputPortKey): Items<TJson>;
-  getOutputItem<TJson = unknown>(nodeId: NodeId | NodeIdRef<TJson>, itemIndex: number, output?: OutputPortKey): Item<TJson> | undefined;
-}
-interface MutableRunData extends RunDataSnapshot {
-  setOutputs(nodeId: NodeId, outputs: NodeOutputs): void;
-  dump(): Record<NodeId, NodeOutputs>;
-}
-interface RunDataFactory {
-  create(initial?: Record<NodeId, NodeOutputs>): MutableRunData;
+  testCaseStatus?: TestCaseRunStatus;
+  /** ISO timestamp when the run finished (derived from node snapshots or store `updatedAt`); omit while running/pending. */
+  finishedAt?: string;
+  parent?: ParentExecutionRef;
+  executionOptions?: RunExecutionOptions;
 }
-interface RunIdFactory {
-  makeRunId(): RunId;
+interface PendingNodeExecution {
+  runId: RunId;
+  activationId: NodeActivationId;
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  itemsIn: number;
+  inputsByPort: NodeInputsByPort;
+  receiptId: string;
+  queue?: string;
+  batchId?: string;
+  enqueuedAt: string;
 }
-interface ActivationIdFactory {
-  makeActivationId(): NodeActivationId;
+interface PersistedRunSchedulingState {
+  pending?: PendingNodeExecution;
+  queue: RunQueueEntry[];
 }
-type UpstreamRefPlaceholder = `$${number}`;
-declare const branchRef: (index: number) => UpstreamRefPlaceholder;
-type ExecutionMode = "local" | "worker";
-interface NodeSchedulerDecision {
-  mode: ExecutionMode;
-  queue?: string;
+interface PersistedRunState {
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  /** Canonical terminal time for listings and retention when persisted on the run root. */
+  finishedAt?: string;
+  /** Optimistic concurrency / CAS on the run aggregate (repository may increment on save). */
+  revision?: number;
+  parent?: ParentExecutionRef;
+  executionOptions?: RunExecutionOptions;
+  control?: PersistedRunControlState;
+  workflowSnapshot?: PersistedWorkflowSnapshot;
+  mutableState?: PersistedMutableRunState;
+  /** Frozen at createRun from workflow + runtime defaults for prune/storage decisions. */
+  policySnapshot?: PersistedRunPolicySnapshot;
+  /** Successful node completions so far (for activation budget). */
+  engineCounters?: EngineRunCounters;
+  status: RunStatus;
+  pending?: PendingNodeExecution;
+  queue: RunQueueEntry[];
+  outputsByNode: Record<NodeId, NodeOutputs>;
+  nodeSnapshotsByNodeId: Record<NodeId, NodeExecutionSnapshot>;
+  /** Append-only history of connection invocations (LLM/tool) nested under owning nodes. */
+  connectionInvocations?: ReadonlyArray<ConnectionInvocationRecord>;
 }
-interface NodeOffloadPolicy {
-  decide(args: {
+interface WorkflowExecutionRepository {
+  createRun(args: {
+    runId: RunId;
     workflowId: WorkflowId;
-    nodeId: NodeId;
-    config: NodeConfigBase;
-  }): NodeSchedulerDecision;
+    startedAt: string;
+    parent?: ParentExecutionRef;
+    executionOptions?: RunExecutionOptions;
+    control?: PersistedRunControlState;
+    workflowSnapshot?: PersistedWorkflowSnapshot;
+    mutableState?: PersistedMutableRunState;
+    policySnapshot?: PersistedRunPolicySnapshot;
+    engineCounters?: EngineRunCounters;
+  }): Promise<void>;
+  load(runId: RunId): Promise<PersistedRunState | undefined>;
+  loadSchedulingState(runId: RunId): Promise<PersistedRunSchedulingState | undefined>;
+  save(state: PersistedRunState): Promise<void>;
+  deleteRun?(runId: RunId): Promise<void>;
 }
-/** Whether to persist run execution data after the workflow finishes. */
-type WorkflowStoragePolicyMode = "ALL" | "SUCCESS" | "ERROR" | "NEVER";
-type WorkflowStoragePolicySpec = WorkflowStoragePolicyMode | TypeToken<WorkflowStoragePolicyResolver>;
-interface WorkflowStoragePolicyResolver {
-  shouldPersist(args: WorkflowStoragePolicyDecisionArgs): boolean | Promise<boolean>;
+interface WorkflowExecutionListingRepository {
+  listRuns(args?: Readonly<{
+    workflowId?: WorkflowId;
+    limit?: number;
+  }>): Promise<ReadonlyArray<RunSummary>>;
 }
-interface WorkflowStoragePolicyDecisionArgs {
+/** Runs eligible for retention-based pruning (completed or failed, older than cutoff). */
+interface RunPruneCandidate {
   readonly runId: RunId;
   readonly workflowId: WorkflowId;
-  readonly workflow: WorkflowDefinition;
-  readonly finalStatus: "completed" | "failed";
   readonly startedAt: string;
   readonly finishedAt: string;
 }
-interface WorkflowPrunePolicySpec {
-  readonly runDataRetentionSeconds?: number;
-  readonly binaryRetentionSeconds?: number;
-  readonly telemetrySpanRetentionSeconds?: number;
-  readonly telemetryArtifactRetentionSeconds?: number;
-  readonly telemetryMetricRetentionSeconds?: number;
+interface WorkflowExecutionPruneRepository {
+  listRunsOlderThan(args: Readonly<{
+    nowIso: string;
+    defaultRetentionSeconds: number;
+    limit?: number;
+  }>): Promise<ReadonlyArray<RunPruneCandidate>>;
 }
-interface PersistedRunPolicySnapshot {
-  readonly retentionSeconds?: number;
-  readonly binaryRetentionSeconds?: number;
-  readonly telemetrySpanRetentionSeconds?: number;
-  readonly telemetryArtifactRetentionSeconds?: number;
-  readonly telemetryMetricRetentionSeconds?: number;
-  readonly storagePolicy: WorkflowStoragePolicyMode;
+type RunResult = {
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  status: "completed";
+  outputs: Items;
+} | {
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  status: "pending";
+  pending: PendingNodeExecution;
+} | {
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  status: "failed";
+  error: {
+    message: string;
+  };
+};
+type WebhookRunResult = Readonly<{
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  runStatus: "pending" | "completed";
+  response: Items;
+}>;
+interface PersistedWorkflowTokenRegistryLike {
+  register(type: TypeToken<unknown>, packageId: string, persistedNameOverride?: string): string;
+  getTokenId(type: TypeToken<unknown>): string | undefined;
+  resolve(tokenId: string): TypeToken<unknown> | undefined;
+  registerFromWorkflows?(workflows: ReadonlyArray<WorkflowDefinition>): void;
 }
-interface WorkflowErrorHandler {
-  onError(ctx: WorkflowErrorContext): void | Promise<void>;
+interface RunCompletionNotifier {
+  resolveRunCompletion(result: RunResult): void;
+  resolveWebhookResponse(result: WebhookRunResult): void;
 }
-interface WorkflowErrorContext {
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly workflow: WorkflowDefinition;
-  readonly failedNodeId: NodeId;
-  readonly error: Error;
-  readonly startedAt: string;
-  readonly finishedAt: string;
+interface RunEventPublisherDeps {
+  eventBus?: RunEventBus;
 }
-type WorkflowErrorHandlerSpec = TypeToken<WorkflowErrorHandler> | WorkflowErrorHandler;
-interface NodeErrorHandlerArgs<TConfig extends NodeConfigBase = NodeConfigBase> {
-  readonly kind: "single" | "multi";
-  readonly items: Items;
-  readonly inputsByPort: Readonly<Record<InputPortKey, Items>> | undefined;
-  readonly ctx: NodeExecutionContext<TConfig>;
-  readonly error: Error;
+//#endregion
+//#region src/contracts/agentMcpTypes.d.ts
+/**
+ * Emitted as a span event when a credential is missing required scopes
+ * (bind-time) or when callTool returns a permission error (runtime).
+ * The credential type id can be looked up from the credential instance when needed.
+ */
+interface NeedsReconsentEvent {
+  readonly serverId: string;
+  readonly credentialInstanceId: string;
+  readonly missingScopesHint?: readonly string[];
 }
-interface NodeErrorHandler {
-  handle<TConfig extends NodeConfigBase>(args: NodeErrorHandlerArgs<TConfig>): Promise<NodeOutputs>;
+/**
+ * An opaque MCP tool map: keyed by serverId → (toolName → tool definition).
+ * Typed as unknown so core does not depend on the AI SDK's ToolSet type.
+ * AIAgentNode (in core-nodes, which does depend on ai) casts this to
+ * ReadonlyMap<string, ToolSet> before passing to DeferredMetaToolStrategyFactory.
+ */
+type AgentMcpToolMap = ReadonlyMap<string, Readonly<Record<string, unknown>>>;
+/**
+ * Contract implemented by the host. Resolves MCP server bindings for an agent run
+ * via the standard credential-binding table (one slot per declared server, keyed
+ * by `(workflowId, mcpConnectionNodeId, "credential")`), and returns a ready-to-use
+ * tool map with wrapped execute callbacks for telemetry and 403 detection.
+ * Core-nodes imports this interface so AIAgentNode can inject it without
+ * depending on the host.
+ */
+interface AgentMcpIntegration {
+  /**
+   * Look up the credential binding per server, validate scopes, open pool
+   * connections, and return a tool map keyed by serverId. Each tool's
+   * execute callback includes:
+   * - Telemetry child span (mcp.server_id, mcp.tool_name attributes)
+   * - 403/permission error detection → emits a NeedsReconsentEvent span event
+   *
+   * Throws `AgentBindError` on validation failures (missing server, unbound
+   * credential slot, missing credential instance, insufficient scopes).
+   */
+  prepareMcpTools(args: {
+    readonly workflowId: WorkflowId;
+    readonly agentNodeId: NodeId;
+    readonly serverIds: ReadonlyArray<string>;
+    readonly pinnedMcpTools: readonly string[];
+    readonly emitSpanEvent: (event: TelemetrySpanEventRecord) => void;
+    readonly startChildSpan: (args: {
+      readonly name: string;
+      readonly attributes?: Record<string, string>;
+    }) => {
+      readonly end: (args?: {
+        status?: "ok" | "error";
+        statusMessage?: string;
+      }) => void;
+    };
+    /** Per-MCP-tool-call invocation appender. Optional; when omitted the wrapper emits only telemetry spans. */
+    readonly appendMcpInvocation?: (args: ConnectionInvocationAppendArgs) => Promise<void>;
+    /** Agent activation id to attach to each invocation record (used by canvas + inspector grouping). */
+    readonly parentAgentActivationId?: NodeActivationId;
+    /** Per-item iteration id when the agent runs inside a per-item loop. */
+    readonly iterationId?: NodeIterationId;
+    /** Item index (0-based) of the iteration that owns these tool calls. */
+    readonly itemIndex?: number;
+    /** Parent invocation id when this agent is itself executing as a sub-agent. */
+    readonly parentInvocationId?: ConnectionInvocationId;
+  }): Promise<AgentMcpToolMap>;
 }
-type NodeErrorHandlerSpec = TypeToken<NodeErrorHandler> | NodeErrorHandler;
-/** Runtime defaults when workflow omits prune/storage fields (typically from host env). */
-interface WorkflowPolicyRuntimeDefaults {
-  readonly retentionSeconds?: number;
-  readonly binaryRetentionSeconds?: number;
-  readonly telemetrySpanRetentionSeconds?: number;
-  readonly telemetryArtifactRetentionSeconds?: number;
-  readonly telemetryMetricRetentionSeconds?: number;
-  readonly storagePolicy?: WorkflowStoragePolicyMode;
+//#endregion
+//#region src/contracts/AgentBindError.d.ts
+/**
+ * Thrown at agent bind time when mcpServers declarations cannot be resolved.
+ * Causes include: unknown server id, missing credential instance, insufficient scopes,
+ * and ambiguous shorthand binding (multiple credential instances match).
+ */
+declare class AgentBindError extends Error {
+  constructor(message: string);
+}
+//#endregion
+//#region src/contracts/NoOpAgentMcpIntegration.d.ts
+/**
+ * No-op implementation of AgentMcpIntegration.
+ * Registered by the core engine runtime as a fallback when the host does not
+ * supply a real implementation (e.g. in unit tests or headless engine setups).
+ * Always returns an empty tool map so the agent runs with node-backed tools only.
+ */
+declare class NoOpAgentMcpIntegration implements AgentMcpIntegration {
+  prepareMcpTools(): Promise<AgentMcpToolMap>;
 }
 //#endregion
 //#region src/contracts/assertionTypes.d.ts
@@ -2116,12 +2261,46 @@ interface ExecutionInstanceDto {
   readonly itemIndex?: number;
   /** Parent invocation id when this instance was emitted by a sub-agent triggered by an outer LLM/tool call. */
   readonly parentInvocationId?: string;
+  /**
+   * When this instance is a SubWorkflow node activation, the run id of the child run it spawned.
+   * Used by the UI to deep-link directly to the child execution.
+   */
+  readonly childRunId?: string;
 }
 interface WorkflowDetailSelectionState {
   readonly selectedSlotNodeId: NodeId | null;
   readonly selectedInstanceId: ExecutionInstanceId | null;
 }
 //#endregion
+//#region src/contracts/mcpTypes.d.ts
+type McpServerTransport = "http";
+interface McpServerDeclaration {
+  /** Globally unique slug, e.g. "gmail". Workflow authors reference this. */
+  id: string;
+  displayName: string;
+  description: string;
+  transport: McpServerTransport;
+  url: string;
+  /**
+   * Credential types accepted by this MCP server, matching CredentialRequirement.acceptedTypes.
+   * Absent or empty means no credential is required.
+   */
+  acceptedCredentialTypes?: ReadonlyArray<string>;
+  /**
+   * Documentation only in MVP. The bind-time validator checks
+   * requiredScopes ⊆ CredentialInstance.scopesGranted.
+   */
+  requiredScopes?: string[];
+  /** Non-secret static headers merged onto every MCP request. */
+  staticHeaders?: Record<string, string>;
+  /**
+   * Overrides for tool descriptions advertised by the MCP server.
+   * Applied by the connection pool after tools/list.
+   * Key: exact tool name as returned by the server.
+   */
+  toolDescriptionOverrides?: Record<string, string>;
+}
+//#endregion
 //#region src/contracts/emitPorts.d.ts
 declare const EMIT_PORTS_BRAND: unique symbol;
 type PortsEmission = Readonly<{
@@ -2286,6 +2465,9 @@ declare const NodeIdSlugifier: {
 //#region src/workflow/definition/ConnectionInvocationIdFactory.d.ts
 /**
  * Unique ids for persisted connection invocation history rows (LLM/tool calls under an owning node).
+ *
+ * Uses Web Crypto's `randomUUID` so this module is safe in browser-bundle contexts —
+ * paired with `NodeIterationIdFactory` which had the same `node:crypto` regression.
  */
 declare class ConnectionInvocationIdFactory {
   static create(): string;
@@ -2302,6 +2484,12 @@ declare class ConnectionNodeIdFactory {
   static readonly connectionSegment: "__conn__";
   static languageModelConnectionNodeId(parentNodeId: NodeId): NodeId;
   static toolConnectionNodeId(parentNodeId: NodeId, toolName: string): NodeId;
+  static mcpConnectionNodeId(parentNodeId: NodeId, serverId: string): NodeId;
+  static isMcpConnectionNodeId(nodeId: NodeId): boolean;
+  static parseMcpConnectionNodeId(nodeId: NodeId): Readonly<{
+    parentNodeId: NodeId;
+    serverId: string;
+  }> | undefined;
   static isLanguageModelConnectionNodeId(nodeId: NodeId): boolean;
   static isToolConnectionNodeId(nodeId: NodeId): boolean;
   static parseLanguageModelConnectionNodeId(nodeId: NodeId): Readonly<{
@@ -2324,6 +2512,10 @@ declare class ConnectionNodeIdFactory {
  * Activations are per-batch (one scheduled execution of a node, possibly with N items).
  * Iterations refine that to one identifier per item-index inside the batch loop, so per-item
  * connection invocations and telemetry can be grouped without time-window heuristics.
+ *
+ * Uses Web Crypto's `randomUUID` (Node 19+ and all modern browsers) so this module is safe
+ * to include in the browser entry. Importing `node:crypto` here previously leaked into the
+ * canvas client bundle through `browser.ts` and OOM'd consumers' Turbopack builds.
  */
 declare class NodeIterationIdFactory {
   static create(): string;
@@ -2545,6 +2737,11 @@ declare class WorkflowSnapshotCodec {
   create(workflow: WorkflowDefinition): PersistedWorkflowSnapshot;
   hydrate(snapshotNode: PersistedWorkflowSnapshotNode, liveConfig: NodeConfigBase): NodeConfigBase;
   private serializeConfig;
+  /**
+   * Safely call `config.inspectorSummary()` and return a plain JSON-safe array, or undefined.
+   * Returns undefined if the method is absent, throws, or produces no valid rows.
+   */
+  private safeInspectorSummary;
   private injectTokenIds;
   private mergeValue;
   private mergeNestedValue;
@@ -2638,5 +2835,5 @@ declare class RunIntentService {
   private createWebhookExecutionOptions;
 }
 //#endregion
-export { RunRevision as $, InputPortKey as $a, PersistedMutableNodeState as $i, NodeActivationRequestBase as $n, NoOpExecutionTelemetryFactory as $r, PersistedRunPolicySnapshot as $t, RunFinishedAtFactory as A, TypeToken as Aa, CredentialSessionFactoryArgs as Ai, ExponentialRetryPolicySpec as An, WebhookControlSignal as Ar, ItemBinary as At, isUnbrandedPortsEmissionShape as B, singleton as Ba, PollingTriggerLogger as Bi, BinaryStorageWriteResult as Bn, TelemetryArtifactAttachment as Br, NodeDefinition as Bt, AnyTriggerNodeConfig as C, WorkflowExecutionRepository as Ca, CredentialInstanceRecord as Ci, WorkflowStoragePolicySpec as Cn, WorkflowRepository as Cr, deriveAssertionPassed as Ct, BranchStepsArg as D, InjectionToken$1 as Da, CredentialOAuth2ScopesFromPublicConfig as Di, runnableNodeOutputType as Dn, WorkflowSnapshotResolver as Dr, Edge as Dt, BranchOutputGuard as E, Disposable as Ea, CredentialOAuth2AuthDefinition as Ei, runnableNodeInputType as En, WorkflowSnapshotFactory as Er, BinaryPreviewKind as Et, NoRetryPolicy as F, injectable as Fa, CredentialTypeId as Fi, BinaryBody as Fn, AllWorkflowsActiveWorkflowActivationPolicy as Fr, JsonPrimitive as Ft, ExecutionPayloadPolicyFields as G, RunEvent as Ga, CurrentStateExecutionRequest as Gi, ExecutionContext as Gn, TelemetryMetricRecord as Gr, NodeIterationId as Gt, ConnectionInvocationKind as H, ENGINE_EXECUTION_LIMITS_DEFAULTS as Ha, ConnectionInvocationAppendArgs as Hi, EngineHost as Hn, TelemetryAttributePrimitive as Hr, NodeErrorHandlerArgs as Ht, getOriginIndexFromItem as I, instanceCachingFactory as Ia, CredentialTypeRegistry as Ii, BinaryStorage as In, WorkflowActivationPolicy as Ir, JsonValue as It, PersistedExecutionInstanceRecord as J, TestCaseRunStatus as Ja, NodeExecutionError as Ji, LiveWorkflowRepository as Jn, TelemetrySpanEventRecord as Jr, NodeOutputs as Jt, PayloadStorageKind as K, RunEventBus as Ka, EngineRunCounters as Ki, ExecutionContextFactory as Kn, TelemetryScope as Kr, NodeKind as Kt, PortsEmission as L, instancePerContainerCachingFactory as La, CredentialUnboundError as Li, BinaryStorageReadResult as Ln, ExecutionTelemetry as Lr, MutableRunData as Lt, NoOpCostTrackingTelemetry as M, delay as Ma, CredentialSetupStatus as Mi, NoneRetryPolicySpec as Mn, WebhookTriggerMatcher as Mr, JsonArray as Mt, ExpRetryPolicy as N, inject as Na, CredentialType as Ni, RetryPolicySpec as Nn, WebhookTriggerResolution as Nr, JsonNonArray as Nt, StepSequenceOutput as O, Lifecycle as Oa, CredentialRequirement as Oi, triggerNodeOutputType as On, HttpMethod as Or, ExecutionMode as Ot, RetryPolicy as P, injectAll as Pa, CredentialTypeDefinition as Pi, BinaryAttachmentCreateRequest as Pn, WebhookTriggerRoutingDiagnostics as Pr, JsonObject as Pt, RunIterationDto as Q, TestTriggerSetupContext as Qa, PendingNodeExecution as Qi, NodeActivationRequest as Qn, CodemationTelemetryAttributeNames as Qr, ParentExecutionRef as Qt, emitPorts as R, predicateAwareClassFactory as Ra, OAuth2ProviderFromPublicConfig as Ri, BinaryStorageStatResult as Rn, ExecutionTelemetryFactory as Rr, NodeActivationId as Rt, AnyRunnableNodeConfig as S, WorkflowExecutionPruneRepository as Sa, CredentialInstanceId as Si, WorkflowStoragePolicyResolver as Sn, WorkflowNodeInstanceFactory as Sr, DEFAULT_ASSERTION_PASS_THRESHOLD as St, BranchMoreArgs as T, DependencyContainer$1 as Ta, CredentialMaterialSourceKind as Ti, nodeRef as Tn, WorkflowRunnerService as Tr, BinaryAttachment as Tt, ExecutionInstanceDto as U, EngineExecutionLimitsPolicy as Ua, ConnectionInvocationId as Ui, ExecutableTriggerNode as Un, TelemetryAttributes as Ur, NodeErrorHandlerSpec as Ut, BatchId as V, CoreTokens as Va, PollingTriggerDedupWindow as Vi, EngineDeps as Vn, TelemetryArtifactReference as Vr, NodeErrorHandler as Vt, ExecutionInstanceId as W, EngineExecutionLimitsPolicyConfig as Wa, ConnectionInvocationRecord as Wi, ExecutionBinaryService as Wn, TelemetryChildSpanStart as Wr, NodeIdRef as Wt, PersistedRunWorkItemKind as X, TestSuiteRunId as Xa, NodeExecutionStatus as Xi, NodeActivationContinuation as Xn, CodemationTelemetryMetricNames as Xr, NodeSchedulerDecision as Xt, PersistedRunSlotProjectionRecord as Y, TestSuiteRunStatus as Ya, NodeExecutionSnapshot as Yi, MultiInputNode as Yn, TelemetrySpanScope as Yr, NodeRef as Yt, PersistedRunWorkItemRecord as Z, TestTriggerNodeConfig as Za, NodeInputsByPort as Zi, NodeActivationReceipt as Zn, GenAiTelemetryAttributeNames as Zr, PairedItemRef as Zt, NodeIdSlugifier as _, RunStopCondition as _a, CredentialBindingKey as _i, WorkflowNodeConnection as _n, TriggerRuntimeDiagnostics as _r, itemExpr as _t, RunPolicySnapshotFactory as a, PersistedWorkflowSnapshotNode as aa, CostTrackingPriceQuote as ai, RunnableNodeInputJson as an, NodeExecutionScheduler as ar, WorkflowRunDetailDto as at, ChainCursor as b, WebhookRunResult as ba, CredentialHealthStatus as bi, WorkflowStoragePolicyDecisionArgs as bn, TriggerSetupStateRepository as br, AssertionResult as bt, RunTerminalPersistenceCoordinator as c, RunCompletionNotifier as ca, CostTrackingTelemetryFactory as ci, TriggerNodeOutputJson as cn, NodeResolver as cr, Expr as ct, DefaultWorkflowGraphFactory as d, RunExecutionOptions as da, CollectionStore as di, WorkflowDefinition as dn, PreparedNodeActivationDispatch as dr, ItemExpr as dt, PersistedMutableRunState as ea, NoOpExecutionTelemetry as ei, RunDataFactory as en, NodeConnectionName as eo, NodeActivationScheduler as er, RunSlotProjectionState as et, WorkflowExecutableNodeClassifierFactory as f, RunPruneCandidate as fa, CollectionsContext as fi, WorkflowErrorContext as fn, RunnableNode as fr, ItemExprArgs as ft, ConnectionInvocationIdFactory as g, RunStatus as ga, CredentialBinding as gi, WorkflowGraphFactory as gn, TriggerNode as gr, isItemExpr as gt, ConnectionNodeIdFactory as h, RunStateResetRequest as ha, CredentialAuthDefinition as hi, WorkflowGraph as hn, TriggerCleanupHandle as hr, ItemExprResolvedContext as ht, WorkflowSnapshotCodec as i, PersistedWorkflowSnapshot as ia, CostTrackingComponent as ii, RunnableNodeConfig as in, WorkflowId as io, NodeExecutionRequestHandler as ir, WorkflowDetailSelectionState as it, NoOpCostTrackingTelemetryFactory as j, container$1 as ja, CredentialSessionService as ji, FixedRetryPolicySpec as jn, WebhookInvocationMatch as jr, Items as jt, ValidStepSequence as k, RegistrationOptions as ka, CredentialSessionFactory as ki, triggerNodeSetupStateType as kn, TriggerInstanceId as kr, Item as kt, WorkflowStoragePolicyEvaluator as l, RunCurrentState as la, CostTrackingTelemetryMetricNames as li, TriggerNodeSetupState as ln, PersistedTriggerSetupState as lr, Param as lt, NodeIterationIdFactory as m, RunResult as ma, CredentialAdvancedSectionPresentation as mi, WorkflowErrorHandlerSpec as mn, TestableTriggerNode as mr, ItemExprContext as mt, InMemoryLiveWorkflowRepository as n, PersistedRunSchedulingState as na, NoOpTelemetrySpanScope as ni, RunId as nn, OutputPortKey as no, NodeExecutionContext as nr, WorkItemId as nt, EngineExecutionLimitsPolicyFactory as o, PersistedWorkflowTokenRegistryLike as oa, CostTrackingTelemetry as oi, RunnableNodeOutputJson as on, NodeExecutionStatePublisher as or, CostCatalog as ot, WorkflowExecutableNodeClassifier as p, RunQueueEntry as pa, AnyCredentialType as pi, WorkflowErrorHandler as pn, RunnableNodeExecuteArgs as pr, ItemExprCallback as pt, PersistedExecutionInstanceKind as q, RunEventSubscription as qa, ExecutionFrontierPlan as qi, ItemNode as qn, TelemetrySpanEnd as qr, NodeOffloadPolicy as qt, EngineWorkflowRunnerService as r, PersistedRunState as ra, NoOpTelemetryArtifactReference as ri, RunIdFactory as rn, PersistedTokenId as ro, NodeExecutionRequest as rr, WorkItemStatus as rt, WorkflowPolicyErrorServices as s, PinnedNodeOutputsByPort as sa, CostTrackingTelemetryAttributeNames as si, TriggerNodeConfig as sn, NodeExecutor as sr, CostCatalogEntry as st, RunIntentService as t, PersistedRunControlState as ta, NoOpNodeExecutionTelemetry as ti, RunDataSnapshot as tn, NodeId as to, NodeBinaryAttachmentService as tr, SlotExecutionStateDto as tt, Engine as u, RunEventPublisherDeps as ua, CostTrackingUsageRecord as ui, UpstreamRefPlaceholder as un, PollingTriggerHandle as ur, ParamDeep as ut, WorkflowDefinitionError as v, RunSummary as va, CredentialFieldSchema as vi, WorkflowPolicyRuntimeDefaults as vn, TriggerSetupContext as vr, resolveItemExprsForExecution as vt, BooleanWhenOverloads as w, Container as wa, CredentialJsonRecord as wi, branchRef as wn, WorkflowRunnerResolver as wr, ActivationIdFactory as wt, WhenBuilder as x, WorkflowExecutionListingRepository as xa, CredentialHealthTester as xi, WorkflowStoragePolicyMode as xn, TriggerTestItemsContext as xr, AssertionResultProvenance as xt, WorkflowBuilder as y, RunTestContext as ya, CredentialHealth as yi, WorkflowPrunePolicySpec as yn, TriggerSetupStateFor as yr, resolveItemExprsInUnknown as yt, isPortsEmission as z, registry as za, NoOpPollingTriggerLogger as zi, BinaryStorageWriteRequest as zn, NodeExecutionTelemetry as zr, NodeConfigBase as zt };
-//# sourceMappingURL=RunIntentService-BE9CAkbf.d.ts.map
+export { PersistedRunWorkItemRecord as $, CredentialTypeDefinition as $a, WebhookTriggerRoutingDiagnostics as $i, JsonPrimitive as $n, BinaryAttachmentCreateRequest as $r, RunEventPublisherDeps as $t, RunFinishedAtFactory as A, CollectionStore as Aa, PreparedNodeActivationDispatch as Ai, CoreTokens as An, WorkflowDefinition as Ar, NeedsReconsentEvent as At, isUnbrandedPortsEmissionShape as B, CredentialHealthTester as Ba, TriggerTestItemsContext as Bi, TestTriggerNodeConfig as Bn, WorkflowStoragePolicyMode as Br, NodeInputsByPort as Bt, AnyTriggerNodeConfig as C, CostTrackingComponent as Ca, NodeExecutionRequestHandler as Ci, injectAll as Cn, RunnableNodeConfig as Cr, AssertionResultProvenance as Ct, BranchStepsArg as D, CostTrackingTelemetryFactory as Da, NodeResolver as Di, predicateAwareClassFactory as Dn, TriggerNodeOutputJson as Dr, AgentBindError as Dt, BranchOutputGuard as E, CostTrackingTelemetryAttributeNames as Ea, NodeExecutor as Ei, instancePerContainerCachingFactory as En, TriggerNodeConfig as Er, NoOpAgentMcpIntegration as Et, NoRetryPolicy as F, CredentialBinding as Fa, TriggerNode as Fi, RunEventBus as Fn, WorkflowGraphFactory as Fr, EngineRunCounters as Ft, ExecutionInstanceDto as G, CredentialOAuth2AuthDefinition as Ga, WorkflowSnapshotFactory as Gi, Edge as Gn, runnableNodeInputType as Gr, PersistedRunSchedulingState as Gt, McpServerTransport as H, CredentialInstanceRecord as Ha, WorkflowRepository as Hi, ActivationIdFactory as Hn, WorkflowStoragePolicySpec as Hr, PersistedMutableNodeState as Ht, getOriginIndexFromItem as I, CredentialBindingKey as Ia, TriggerRuntimeDiagnostics as Ii, RunEventSubscription as In, WorkflowNodeConnection as Ir, ExecutionFrontierPlan as It, PayloadStorageKind as J, CredentialSessionFactory as Ja, TriggerInstanceId as Ji, ItemBinary as Jn, triggerNodeSetupStateType as Jr, PersistedWorkflowSnapshotNode as Jt, ExecutionInstanceId as K, CredentialOAuth2ScopesFromPublicConfig as Ka, WorkflowSnapshotResolver as Ki, ExecutionMode as Kn, runnableNodeOutputType as Kr, PersistedRunState as Kt, PortsEmission as L, CredentialFieldSchema as La, TriggerSetupContext as Li, TestCaseRunStatus as Ln, WorkflowPolicyRuntimeDefaults as Lr, NodeExecutionError as Lt, NoOpCostTrackingTelemetry as M, AnyCredentialType as Ma, RunnableNodeExecuteArgs as Mi, EngineExecutionLimitsPolicy as Mn, WorkflowErrorHandler as Mr, ConnectionInvocationId as Mt, ExpRetryPolicy as N, CredentialAdvancedSectionPresentation as Na, TestableTriggerNode as Ni, EngineExecutionLimitsPolicyConfig as Nn, WorkflowErrorHandlerSpec as Nr, ConnectionInvocationRecord as Nt, StepSequenceOutput as O, CostTrackingTelemetryMetricNames as Oa, PersistedTriggerSetupState as Oi, registry as On, TriggerNodeSetupState as Or, AgentMcpIntegration as Ot, RetryPolicy as P, CredentialAuthDefinition as Pa, TriggerCleanupHandle as Pi, RunEvent as Pn, WorkflowGraph as Pr, CurrentStateExecutionRequest as Pt, PersistedRunWorkItemKind as Q, CredentialType as Qa, WebhookTriggerResolution as Qi, JsonObject as Qn, RetryPolicySpec as Qr, RunCurrentState as Qt, emitPorts as R, CredentialHealth as Ra, TriggerSetupStateFor as Ri, TestSuiteRunStatus as Rn, WorkflowPrunePolicySpec as Rr, NodeExecutionSnapshot as Rt, AnyRunnableNodeConfig as S, NoOpTelemetryArtifactReference as Sa, NodeExecutionRequest as Si, inject as Sn, RunIdFactory as Sr, AssertionResult as St, BranchMoreArgs as T, CostTrackingTelemetry as Ta, NodeExecutionStatePublisher as Ti, instanceCachingFactory as Tn, RunnableNodeOutputJson as Tr, deriveAssertionPassed as Tt, BatchId as U, CredentialJsonRecord as Ua, WorkflowRunnerResolver as Ui, BinaryAttachment as Un, branchRef as Ur, PersistedMutableRunState as Ut, McpServerDeclaration as V, CredentialInstanceId as Va, WorkflowNodeInstanceFactory as Vi, TestTriggerSetupContext as Vn, WorkflowStoragePolicyResolver as Vr, PendingNodeExecution as Vt, ConnectionInvocationKind as W, CredentialMaterialSourceKind as Wa, WorkflowRunnerService as Wi, BinaryPreviewKind as Wn, nodeRef as Wr, PersistedRunControlState as Wt, PersistedExecutionInstanceRecord as X, CredentialSessionService as Xa, WebhookInvocationMatch as Xi, JsonArray as Xn, FixedRetryPolicySpec as Xr, PinnedNodeOutputsByPort as Xt, PersistedExecutionInstanceKind as Y, CredentialSessionFactoryArgs as Ya, WebhookControlSignal as Yi, Items as Yn, ExponentialRetryPolicySpec as Yr, PersistedWorkflowTokenRegistryLike as Yt, PersistedRunSlotProjectionRecord as Z, CredentialSetupStatus as Za, WebhookTriggerMatcher as Zi, JsonNonArray as Zn, NoneRetryPolicySpec as Zr, RunCompletionNotifier as Zt, NodeIdSlugifier as _, CodemationTelemetryAttributeNames as _a, NodeActivationRequest as _i, Lifecycle as _n, ParentExecutionRef as _r, ItemExprResolvedContext as _t, RunPolicySnapshotFactory as a, TelemetryArtifactAttachment as aa, BinaryStorageWriteResult as ai, RunStatus as an, PollingTriggerLogger as ao, NodeErrorHandler as ar, WorkItemStatus as at, ChainCursor as b, NoOpNodeExecutionTelemetry as ba, NodeBinaryAttachmentService as bi, container$1 as bn, RunDataSnapshot as br, resolveItemExprsForExecution as bt, RunTerminalPersistenceCoordinator as c, TelemetryAttributes as ca, ExecutableTriggerNode as ci, RunTestContext as cn, NodeConnectionName as co, NodeIdRef as cr, CostCatalog as ct, DefaultWorkflowGraphFactory as d, TelemetryScope as da, ExecutionContextFactory as di, WorkflowExecutionPruneRepository as dn, PersistedTokenId as do, NodeKind as dr, Param as dt, AllWorkflowsActiveWorkflowActivationPolicy as ea, BinaryBody as ei, RunExecutionOptions as en, CredentialTypeId as eo, JsonValue as er, RunIterationDto as et, WorkflowExecutableNodeClassifierFactory as f, TelemetrySpanEnd as fa, ItemNode as fi, WorkflowExecutionRepository as fn, WorkflowId as fo, NodeOffloadPolicy as fr, ParamDeep as ft, ConnectionInvocationIdFactory as g, GenAiTelemetryAttributeNames as ga, NodeActivationReceipt as gi, InjectionToken$1 as gn, PairedItemRef as gr, ItemExprContext as gt, ConnectionNodeIdFactory as h, CodemationTelemetryMetricNames as ha, NodeActivationContinuation as hi, Disposable as hn, NodeSchedulerDecision as hr, ItemExprCallback as ht, WorkflowSnapshotCodec as i, NodeExecutionTelemetry as ia, BinaryStorageWriteRequest as ii, RunStateResetRequest as in, NoOpPollingTriggerLogger as io, NodeDefinition as ir, WorkItemId as it, NoOpCostTrackingTelemetryFactory as j, CollectionsContext as ja, RunnableNode as ji, ENGINE_EXECUTION_LIMITS_DEFAULTS as jn, WorkflowErrorContext as jr, ConnectionInvocationAppendArgs as jt, ValidStepSequence as k, CostTrackingUsageRecord as ka, PollingTriggerHandle as ki, singleton as kn, UpstreamRefPlaceholder as kr, AgentMcpToolMap as kt, WorkflowStoragePolicyEvaluator as l, TelemetryChildSpanStart as la, ExecutionBinaryService as li, WebhookRunResult as ln, NodeId as lo, NodeInspectorSummaryRow as lr, CostCatalogEntry as lt, NodeIterationIdFactory as m, TelemetrySpanScope as ma, MultiInputNode as mi, DependencyContainer$1 as mn, NodeRef as mr, ItemExprArgs as mt, InMemoryLiveWorkflowRepository as n, ExecutionTelemetry as na, BinaryStorageReadResult as ni, RunQueueEntry as nn, CredentialUnboundError as no, NodeActivationId as nr, RunSlotProjectionState as nt, EngineExecutionLimitsPolicyFactory as o, TelemetryArtifactReference as oa, EngineDeps as oi, RunStopCondition as on, PollingTriggerDedupWindow as oo, NodeErrorHandlerArgs as or, WorkflowDetailSelectionState as ot, WorkflowExecutableNodeClassifier as p, TelemetrySpanEventRecord as pa, LiveWorkflowRepository as pi, Container as pn, NodeOutputs as pr, ItemExpr as pt, ExecutionPayloadPolicyFields as q, CredentialRequirement as qa, HttpMethod as qi, Item as qn, triggerNodeOutputType as qr, PersistedWorkflowSnapshot as qt, EngineWorkflowRunnerService as r, ExecutionTelemetryFactory as ra, BinaryStorageStatResult as ri, RunResult as rn, OAuth2ProviderFromPublicConfig as ro, NodeConfigBase as rr, SlotExecutionStateDto as rt, WorkflowPolicyErrorServices as s, TelemetryAttributePrimitive as sa, EngineHost as si, RunSummary as sn, InputPortKey as so, NodeErrorHandlerSpec as sr, WorkflowRunDetailDto as st, RunIntentService as t, WorkflowActivationPolicy as ta, BinaryStorage as ti, RunPruneCandidate as tn, CredentialTypeRegistry as to, MutableRunData as tr, RunRevision as tt, Engine as u, TelemetryMetricRecord as ua, ExecutionContext as ui, WorkflowExecutionListingRepository as un, OutputPortKey as uo, NodeIterationId as ur, Expr as ut, WorkflowDefinitionError as v, NoOpExecutionTelemetryFactory as va, NodeActivationRequestBase as vi, RegistrationOptions as vn, PersistedRunPolicySnapshot as vr, isItemExpr as vt, BooleanWhenOverloads as w, CostTrackingPriceQuote as wa, NodeExecutionScheduler as wi, injectable as wn, RunnableNodeInputJson as wr, DEFAULT_ASSERTION_PASS_THRESHOLD as wt, WhenBuilder as x, NoOpTelemetrySpanScope as xa, NodeExecutionContext as xi, delay as xn, RunId as xr, resolveItemExprsInUnknown as xt, WorkflowBuilder as y, NoOpExecutionTelemetry as ya, NodeActivationScheduler as yi, TypeToken as yn, RunDataFactory as yr, itemExpr as yt, isPortsEmission as z, CredentialHealthStatus as za, TriggerSetupStateRepository as zi, TestSuiteRunId as zn, WorkflowStoragePolicyDecisionArgs as zr, NodeExecutionStatus as zt };
+//# sourceMappingURL=RunIntentService-BrEq6Jm6.d.ts.map