@codemation/core 0.10.2 → 0.11.1

package/dist/{RunIntentService-BqNjrksF.d.cts → agentMcpTypes-ZiNbNsEi.d.cts}

@@ -1,6 +1,6 @@
-import { DependencyContainer as Container, DependencyContainer as DependencyContainer$1, Disposable, InjectionToken as InjectionToken$1, InjectionToken as TypeToken, Lifecycle, RegistrationOptions, container, delay, inject, injectAll, injectable, instanceCachingFactory, instancePerContainerCachingFactory, predicateAwareClassFactory, registry, singleton } from "tsyringe";
 import { ReadableStream } from "node:stream/web";
 import { ZodType } from "zod";
+import { DependencyContainer as Container, DependencyContainer as DependencyContainer$1, Disposable, InjectionToken as InjectionToken$1, InjectionToken as TypeToken, Lifecycle, RegistrationOptions, container, delay, inject, injectAll, injectable, instanceCachingFactory, instancePerContainerCachingFactory, predicateAwareClassFactory, registry, singleton } from "tsyringe";
 
 //#region src/contracts/baseTypes.d.ts
 /**
@@ -15,2028 +15,1936 @@ type InputPortKey = string;
 type PersistedTokenId = string;
 type NodeConnectionName = string;
 //#endregion
-//#region src/contracts/testTriggerTypes.d.ts
+//#region src/triggers/polling/PollingTriggerDedupWindow.d.ts
 /**
- * Identifier minted by the host (or in-memory test runner) for one execution of a test suite.
- * One TestSuiteRun produces N child workflow runs, one per item yielded by `generateItems`.
+ * Merges processed-ID windows for polling triggers, capping the total to avoid unbounded growth.
+ * Plugin code receives an instance of this class via {@link PollingTriggerHandle.dedup}.
  */
-type TestSuiteRunId = string;
+declare class PollingTriggerDedupWindow {
+  static readonly defaultCapN = 2000;
+  merge(previous: ReadonlyArray<string>, incoming: ReadonlyArray<string>, capN?: number): ReadonlyArray<string>;
+}
+//#endregion
+//#region src/triggers/polling/PollingTriggerLogger.d.ts
 /**
- * Setup context passed to a {@link TestTriggerNodeConfig.generateItems} callback. Distinct from
- * {@link import("./runtimeTypes").TriggerSetupContext} on purpose: test triggers are not
- * activated by the live trigger lifecycle (webhooks, cron, polling) and never call `emit` —
- * the orchestrator pulls from the iterable they return and dispatches one run per item.
+ * Minimal logger surface for the polling-trigger runtime.
+ * Hosts supply this via {@link EngineDeps.pollingTriggerLogger};
+ * when absent the runtime is silent.
  */
-interface TestTriggerSetupContext<TConfig extends TestTriggerNodeConfig<unknown> = TestTriggerNodeConfig<unknown>> {
-  readonly workflowId: WorkflowId;
-  readonly nodeId: NodeId;
-  readonly config: TConfig;
-  readonly testSuiteRunId: TestSuiteRunId;
+interface PollingTriggerLogger {
+  info(message: string): void;
+  warn(message: string): void;
+  error(message: string, exception?: Error): void;
+  debug(message: string): void;
+}
+declare class NoOpPollingTriggerLogger implements PollingTriggerLogger {
+  info(): void;
+  warn(): void;
+  error(): void;
+  debug(): void;
+}
+//#endregion
+//#region src/contracts/credentialTypes.d.ts
+type CredentialTypeId = string;
+type CredentialInstanceId = string;
+type CredentialMaterialSourceKind = "db" | "env" | "code";
+type CredentialSetupStatus = "draft" | "ready";
+type CredentialHealthStatus = "unknown" | "healthy" | "failing";
+type CredentialFieldSchema = Readonly<{
+  key: string;
+  label: string;
+  type: "string" | "password" | "textarea" | "json" | "boolean";
+  required?: true;
+  order?: number;
   /**
-   * Resolves a credential session for a slot declared on this trigger's
-   * {@link import("./workflowTypes").NodeConfigBase.getCredentialRequirements}. Same contract as
-   * {@link import("./runtimeTypes").ExecutionContext.getCredential}.
+   * Where this field appears in the credential dialog. Use `"advanced"` for optional or
+   * power-user fields; they render inside a collapsible section (see `CredentialTypeDefinition.advancedSection`).
+   * Defaults to `"default"` when omitted.
    */
-  getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
-  /** AbortSignal raised when the suite is cancelled — long-running pulls should bail out. */
-  readonly signal: AbortSignal;
-}
-/**
- * A trigger config that emits **test cases**. Each item yielded by {@link generateItems}
- * becomes one workflow run (with `executionOptions.testContext` set), so 10 yielded items
- * → 10 runs marked under the same TestSuiteRun.
- *
- * The trigger is otherwise a normal {@link TriggerNodeConfig} (so the canvas treats it like
- * any other trigger), but its `triggerKind` is `"test"` so the live activation policy skips it.
- */
-interface TestTriggerNodeConfig<TOutputJson$1 = unknown> extends TriggerNodeConfig<TOutputJson$1, undefined> {
-  readonly triggerKind: "test";
+  visibility?: "default" | "advanced";
+  placeholder?: string;
+  helpText?: string;
+  /** When set, host resolves this field from process.env at runtime; env wins over stored values. */
+  envVarName?: string;
   /**
-   * Author-supplied async iterable of items, evaluated lazily. Implementations may fetch from
-   * credentialed APIs, read fixture files, or yield hard-coded items. The orchestrator iterates
-   * and dispatches one run per item, with concurrency capped by {@link concurrency} (default 4).
+   * When set, the dialog shows a copy action for this exact string (e.g. a static OAuth redirect URI
+   * pattern or documentation URL). Do not use for secret values.
    */
-  generateItems(ctx: TestTriggerSetupContext<TestTriggerNodeConfig<TOutputJson$1>>): AsyncIterable<Item<TOutputJson$1>>;
-  /** Per-suite-run cap on simultaneously-executing test cases. Default: 4. */
-  readonly concurrency?: number;
+  copyValue?: string;
+  /** Accessible label for the copy control (default: Copy). */
+  copyButtonLabel?: string;
+}>;
+type CredentialRequirement = Readonly<{
+  slotKey: string;
+  label: string;
+  acceptedTypes: ReadonlyArray<CredentialTypeId>;
+  optional?: true;
+  helpText?: string;
+  helpUrl?: string;
+}>;
+type CredentialBindingKey = Readonly<{
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  slotKey: string;
+}>;
+type CredentialBinding = Readonly<{
+  key: CredentialBindingKey;
+  instanceId: CredentialInstanceId;
+  updatedAt: string;
+}>;
+type CredentialHealth = Readonly<{
+  status: CredentialHealthStatus;
+  message?: string;
+  testedAt?: string;
+  expiresAt?: string;
+  details?: Readonly<Record<string, unknown>>;
+}>;
+type OAuth2ProviderFromPublicConfig = Readonly<{
+  authorizeUrlFieldKey: string;
+  tokenUrlFieldKey: string;
+  userInfoUrlFieldKey?: string;
+}>;
+type CredentialOAuth2ScopesFromPublicConfig = Readonly<{
+  presetFieldKey: string;
+  presetScopes: Readonly<Record<string, ReadonlyArray<string>>>;
+  customPresetKey?: string;
+  customScopesFieldKey?: string;
+}>;
+type CredentialOAuth2AuthDefinition = Readonly<{
+  kind: "oauth2";
+  providerId: string;
+  scopes: ReadonlyArray<string>;
+  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
+  clientIdFieldKey?: string;
+  clientSecretFieldKey?: string;
+} | {
+  kind: "oauth2";
+  providerFromPublicConfig: OAuth2ProviderFromPublicConfig;
+  scopes: ReadonlyArray<string>;
+  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
+  clientIdFieldKey?: string;
+  clientSecretFieldKey?: string;
+} | {
+  kind: "oauth2";
   /**
-   * Free-form description of where the test cases come from — surfaced in the node properties
-   * panel and the suite-detail header so authors revisiting the workflow six months later
-   * remember which mailbox / folder / fixture file the cases originate from.
-   *
-   * Example: `"All emails in the Gmail label \"test/triage-fixtures\" — 14 messages as of 2026-05-03."`
+   * Free-form provider identifier for telemetry, DB rows, and Better Auth provider naming.
+   * Not used for any registry lookup — URLs come from {@link authorizeUrl} / {@link tokenUrl}.
    */
-  readonly description?: string;
+  providerId: string;
   /**
-   * Resolves a human-readable label for one yielded test case (e.g. email subject). The
-   * orchestrator calls this once per yielded item, persists the result on the run, and the
-   * Tests-tab UI uses it to render the case row instead of the opaque runId. Return
-   * `undefined` to fall back to "Case #N".
+   * Authorization endpoint. May contain `{publicFieldKey}` placeholders that the runtime
+   * substitutes from the credential's resolved public config (URL-encoded).
+   * Example: `https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/authorize`
    */
-  caseLabel?(item: Item<TOutputJson$1>): string | undefined;
-}
-//#endregion
-//#region src/events/runEvents.d.ts
+  authorizeUrl: string;
+  /** Token endpoint. Same templating rules as {@link authorizeUrl}. */
+  tokenUrl: string;
+  /** Optional userinfo endpoint. Same templating rules as {@link authorizeUrl}. */
+  userInfoUrl?: string;
+  scopes: ReadonlyArray<string>;
+  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
+  clientIdFieldKey?: string;
+  clientSecretFieldKey?: string;
+}>;
+type CredentialAuthDefinition = CredentialOAuth2AuthDefinition;
+type CredentialAdvancedSectionPresentation = Readonly<{
+  /** Collapsible section title (default: "Advanced"). */
+  title?: string;
+  /** Optional short helper text shown inside the section (above the fields). */
+  description?: string;
+  /** When true, the advanced section starts expanded. Default: false (collapsed). */
+  defaultOpen?: boolean;
+}>;
+type CredentialTypeDefinition = Readonly<{
+  typeId: CredentialTypeId;
+  displayName: string;
+  description?: string;
+  publicFields?: ReadonlyArray<CredentialFieldSchema>;
+  secretFields?: ReadonlyArray<CredentialFieldSchema>;
+  /**
+   * Optional labels for the collapsible block that contains every field with `visibility: "advanced"`.
+   * If omitted, the UI still shows that block with defaults (title "Advanced", collapsed).
+   */
+  advancedSection?: CredentialAdvancedSectionPresentation;
+  supportedSourceKinds?: ReadonlyArray<CredentialMaterialSourceKind>;
+  auth?: CredentialAuthDefinition;
+}>;
 /**
- * Outcome of a single test case (one workflow run dispatched by the test-suite orchestrator).
- * - `running`: workflow still in flight
- * - `succeeded`: workflow completed AND all assertions passed (or no assertions)
- * - `failed`: workflow failed OR (workflow completed but ≥1 assertion failed)
- * - `errored` / `cancelled`: workflow itself errored or was cancelled
+ * JSON-shaped credential field bag (public config, resolved secret material, etc.).
  */
-type TestCaseRunStatus = "running" | "succeeded" | "failed" | "errored" | "cancelled";
-/** Aggregate outcome of a TestSuiteRun. */
-type TestSuiteRunStatus = "succeeded" | "failed" | "partial" | "errored" | "cancelled";
-type RunEvent = Readonly<{
-  kind: "runCreated";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-}> | Readonly<{
-  kind: "runSaved";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  state: PersistedRunState;
-}> | Readonly<{
-  kind: "nodeQueued";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  snapshot: NodeExecutionSnapshot;
-}> | Readonly<{
-  kind: "nodeStarted";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  snapshot: NodeExecutionSnapshot;
-}> | Readonly<{
-  kind: "nodeCompleted";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  snapshot: NodeExecutionSnapshot;
-}> | Readonly<{
-  kind: "nodeFailed";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  snapshot: NodeExecutionSnapshot;
-}> | Readonly<{
-  kind: "connectionInvocationStarted";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  record: ConnectionInvocationRecord;
-}> | Readonly<{
-  kind: "connectionInvocationCompleted";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  record: ConnectionInvocationRecord;
-}> | Readonly<{
-  kind: "connectionInvocationFailed";
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  at: string;
-  record: ConnectionInvocationRecord;
-}> | Readonly<{
-  kind: "testSuiteStarted";
-  testSuiteRunId: TestSuiteRunId;
-  workflowId: WorkflowId;
-  triggerNodeId: string;
-  triggerNodeName?: string;
-  concurrency: number;
-  at: string;
-}> | Readonly<{
-  kind: "testSuiteFinished";
-  testSuiteRunId: TestSuiteRunId;
-  workflowId: WorkflowId;
-  status: TestSuiteRunStatus;
-  totalCases: number;
-  passedCases: number;
-  failedCases: number;
-  at: string;
-}> | Readonly<{
-  kind: "testCaseStarted";
-  testSuiteRunId: TestSuiteRunId;
-  testCaseIndex: number;
-  runId: RunId;
-  workflowId: WorkflowId;
-  testCaseLabel?: string;
-  at: string;
-}> | Readonly<{
-  kind: "testCaseCompleted";
-  testSuiteRunId: TestSuiteRunId;
-  testCaseIndex: number;
-  runId: RunId;
-  workflowId: WorkflowId;
-  status: TestCaseRunStatus;
-  at: string;
+type CredentialJsonRecord = Readonly<Record<string, unknown>>;
+/**
+ * Persisted credential instance with typed `publicConfig`.
+ * Hosts may specialize `secretRef` with a stricter union while remaining
+ * assignable here for session/test callbacks.
+ */
+type CredentialInstanceRecord<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord> = Readonly<{
+  instanceId: CredentialInstanceId;
+  typeId: CredentialTypeId;
+  displayName: string;
+  sourceKind: CredentialMaterialSourceKind;
+  publicConfig: TPublicConfig;
+  secretRef: CredentialJsonRecord;
+  tags: ReadonlyArray<string>;
+  setupStatus: CredentialSetupStatus;
+  createdAt: string;
+  updatedAt: string;
 }>;
-interface RunEventSubscription {
-  close(): Promise<void>;
+/**
+ * Arguments passed to `CredentialType.createSession` and `CredentialType.test`.
+ * Declare `TPublicConfig` / `TMaterial` on `CredentialType` so implementations are checked
+ * against your credential shapes (similar to `NodeExecutionContext.config` for nodes).
+ */
+type CredentialSessionFactoryArgs<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord> = Readonly<{
+  instance: CredentialInstanceRecord<TPublicConfig>;
+  material: TMaterial;
+  publicConfig: TPublicConfig;
+}>;
+type CredentialSessionFactory<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord, TSession = unknown> = (args: CredentialSessionFactoryArgs<TPublicConfig, TMaterial>) => Promise<TSession>;
+type CredentialHealthTester<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord> = (args: CredentialSessionFactoryArgs<TPublicConfig, TMaterial>) => Promise<CredentialHealth>;
+/**
+ * Full credential type implementation: `definition` (UI/schema), `createSession`, and `test`.
+ * Use this at registration and config boundaries; `CredentialTypeDefinition` is only the schema slice.
+ */
+type CredentialType<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord, TSession = unknown> = Readonly<{
+  definition: CredentialTypeDefinition;
+  createSession: CredentialSessionFactory<TPublicConfig, TMaterial, TSession>;
+  test: CredentialHealthTester<TPublicConfig, TMaterial>;
+}>;
+/**
+ * Credential type with unspecified generics — used for `CodemationConfig.credentialTypes`, the host registry,
+ * and anywhere a concrete `CredentialType<YourPublic, YourMaterial, YourSession>` is placed in a heterogeneous list.
+ * Using `any` here avoids unsafe `as` casts while keeping typed `satisfies CredentialType<…>` definitions.
+ */
+type AnyCredentialType = CredentialType<any, any, unknown>;
+interface CredentialSessionService {
+  getSession<TSession = unknown>(args: Readonly<{
+    workflowId: WorkflowId;
+    nodeId: NodeId;
+    slotKey: string;
+  }>): Promise<TSession>;
 }
-interface RunEventBus {
-  publish(event: RunEvent): Promise<void>;
-  subscribe(onEvent: (event: RunEvent) => void): Promise<RunEventSubscription>;
-  subscribeToWorkflow(workflowId: WorkflowId, onEvent: (event: RunEvent) => void): Promise<RunEventSubscription>;
+interface CredentialTypeRegistry {
+  listTypes(): ReadonlyArray<CredentialTypeDefinition>;
+  getType(typeId: CredentialTypeId): CredentialTypeDefinition | undefined;
 }
-//#endregion
-//#region src/policies/executionLimits/EngineExecutionLimitsPolicy.d.ts
-interface EngineExecutionLimitsPolicyConfig {
-  readonly defaultMaxNodeActivations: number;
-  readonly hardMaxNodeActivations: number;
-  readonly defaultMaxSubworkflowDepth: number;
-  readonly hardMaxSubworkflowDepth: number;
+declare class CredentialUnboundError extends Error {
+  readonly bindingKey: CredentialBindingKey;
+  readonly acceptedTypes: ReadonlyArray<CredentialTypeId>;
+  constructor(bindingKey: CredentialBindingKey, acceptedTypes?: ReadonlyArray<CredentialTypeId>);
+  private static createMessage;
 }
-/** Framework defaults for {@link EngineExecutionLimitsPolicy} (merged with host `runtime.engineExecutionLimits`). */
-declare const ENGINE_EXECUTION_LIMITS_DEFAULTS: EngineExecutionLimitsPolicyConfig;
+//#endregion
+//#region src/contracts/collectionTypes.d.ts
 /**
- * Resolves per-run execution limits: defaults, hard ceilings, and subworkflow depth for new runs.
+ * Represents a typed store for a single collection.
+ * All rows include auto-managed id, created_at, and updated_at fields.
  */
-declare class EngineExecutionLimitsPolicy {
-  private readonly config;
-  constructor(config?: EngineExecutionLimitsPolicyConfig);
+interface CollectionStore<TRow extends Record<string, unknown> = Record<string, unknown>> {
   /**
-   * Effective options for a new root run (depth 0): defaults merged with engine ceilings.
-   * Replaces a separate one-method factory for root-run bootstrap.
+   * Insert a new row. id, created_at, and updated_at are auto-populated.
    */
-  createRootExecutionOptions(): RunExecutionOptions;
-  mergeExecutionOptionsForNewRun(parent: ParentExecutionRef | undefined, user: RunExecutionOptions | undefined): RunExecutionOptions;
-  private capNumber;
+  insert(row: TRow): Promise<TRow & {
+    id: string;
+    created_at: Date;
+    updated_at: Date;
+  }>;
+  /**
+   * Get a single row by id.
+   */
+  get(id: string): Promise<(TRow & {
+    id: string;
+    created_at: Date;
+    updated_at: Date;
+  }) | null>;
+  /**
+   * Find a single row matching the provided filter.
+   */
+  findOne(filter: Partial<TRow>): Promise<(TRow & {
+    id: string;
+    created_at: Date;
+    updated_at: Date;
+  }) | null>;
+  /**
+   * List rows with optional pagination and filtering.
+   */
+  list(opts?: {
+    limit?: number;
+    offset?: number;
+    where?: Partial<TRow>;
+  }): Promise<{
+    rows: ReadonlyArray<TRow & {
+      id: string;
+      created_at: Date;
+      updated_at: Date;
+    }>;
+    total: number;
+  }>;
+  /**
+   * Update a row by id with partial data.
+   */
+  update(id: string, patch: Partial<TRow>): Promise<TRow & {
+    id: string;
+    created_at: Date;
+    updated_at: Date;
+  }>;
+  /**
+   * Delete a row by id. Hard delete only (no soft delete).
+   */
+  delete(id: string): Promise<{
+    deleted: boolean;
+  }>;
 }
-//#endregion
-//#region src/di/CoreTokens.d.ts
-declare const CoreTokens: {
-  readonly PersistedWorkflowTokenRegistry: TypeToken<PersistedWorkflowTokenRegistryLike>;
-  readonly CredentialSessionService: TypeToken<CredentialSessionService>;
-  readonly CredentialTypeRegistry: TypeToken<CredentialTypeRegistry>;
-  readonly WorkflowRunnerService: TypeToken<WorkflowRunnerService>;
-  readonly LiveWorkflowRepository: TypeToken<LiveWorkflowRepository>;
-  readonly WorkflowRepository: TypeToken<WorkflowRepository>;
-  readonly NodeResolver: TypeToken<NodeResolver>;
-  readonly WorkflowNodeInstanceFactory: TypeToken<WorkflowNodeInstanceFactory>;
-  readonly RunIdFactory: TypeToken<RunIdFactory>;
-  readonly ActivationIdFactory: TypeToken<ActivationIdFactory>;
-  readonly WorkflowExecutionRepository: TypeToken<WorkflowExecutionRepository>;
-  readonly TriggerSetupStateRepository: TypeToken<TriggerSetupStateRepository>;
-  readonly NodeActivationScheduler: TypeToken<NodeActivationScheduler>;
-  readonly RunDataFactory: TypeToken<RunDataFactory>;
-  readonly ExecutionContextFactory: TypeToken<ExecutionContextFactory>;
-  readonly RunEventBus: TypeToken<RunEventBus>;
-  readonly BinaryStorage: TypeToken<BinaryStorage>;
-  readonly WebhookBasePath: TypeToken<string>;
-  /** Engine execution limits (defaults + optional host overrides). Consumers may bind a custom instance to override. */
-  readonly EngineExecutionLimitsPolicy: TypeToken<EngineExecutionLimitsPolicy>;
-  readonly WorkflowActivationPolicy: TypeToken<WorkflowActivationPolicy>;
-};
-//#endregion
-//#region src/contracts/runTypes.d.ts
 /**
- * Test-suite linkage for a run. When set, this run was started by a TestSuiteOrchestrator
- * as one test case inside a TestSuiteRun. The `IsTestRun` node and host-side persisters key
- * off the presence of this field. Subworkflow runs inherit it from their parent run.
+ * Runtime collections context: keyed by collection name.
  */
-interface RunTestContext {
-  readonly testSuiteRunId: string;
-  readonly testCaseIndex: number;
-  /**
-   * Optional human-friendly label for this test case (e.g. an email subject when fixtures
-   * are loaded from a mailbox). Resolved per item by `TestTrigger.caseLabel(item)` if set,
-   * persisted on `Run.test_case_label` so the Tests-tab tree-table can show "RFQ for batch 14"
-   * instead of "run_1777755971399_bbb86beac1396".
-   */
-  readonly testCaseLabel?: string;
+type CollectionsContext = Readonly<Record<string, CollectionStore>>;
+//#endregion
+//#region src/contracts/CostTrackingTelemetryContract.d.ts
+type CostTrackingComponent = "chat" | "ocr" | "rag";
+declare const CostTrackingTelemetryMetricNames: {
+  readonly usage: "codemation.cost.usage";
+  readonly estimatedCost: "codemation.cost.estimated";
+};
+declare const CostTrackingTelemetryAttributeNames: {
+  readonly component: "cost.component";
+  readonly provider: "cost.provider";
+  readonly operation: "cost.operation";
+  readonly pricingKey: "cost.pricing_key";
+  readonly usageUnit: "cost.usage_unit";
+  readonly currency: "cost.currency";
+  readonly currencyScale: "cost.currency_scale";
+  readonly estimateKind: "cost.estimate_kind";
+};
+interface CostTrackingUsageRecord {
+  readonly component: CostTrackingComponent;
+  readonly provider: string;
+  readonly operation: string;
+  readonly pricingKey: string;
+  readonly usageUnit: string;
+  readonly quantity: number;
+  readonly modelName?: string;
+  readonly attributes?: TelemetryAttributes;
 }
-interface RunExecutionOptions {
-  /** Run-intent override: force the inline scheduler and bypass node-level offload decisions. */
-  localOnly?: boolean;
-  /** Marks runs started from webhook handling so orchestration can apply webhook-specific continuation rules. */
-  webhook?: boolean;
-  mode?: "manual" | "debug";
-  sourceWorkflowId?: WorkflowId;
-  sourceRunId?: RunId;
-  derivedFromRunId?: RunId;
-  isMutable?: boolean;
-  /** Set by the engine for this run: 0 = root, 1 = first child subworkflow, … */
-  subworkflowDepth?: number;
-  /** Effective cap after engine policy merge (successful node completions per run). */
-  maxNodeActivations?: number;
-  /** Effective cap after engine policy merge (subworkflow nesting). */
-  maxSubworkflowDepth?: number;
-  /** Present iff started by a TestSuiteOrchestrator; propagates to subworkflow runs via {@link ParentExecutionRef.testContext}. */
-  testContext?: RunTestContext;
+interface CostTrackingPriceQuote {
+  readonly currency: string;
+  readonly currencyScale: number;
+  readonly estimatedAmountMinor: number;
+  readonly estimateKind: "catalog";
 }
-/** Engine-owned counters persisted with the run (worker-safe). */
-interface EngineRunCounters {
-  completedNodeActivations: number;
+interface CostTrackingTelemetry {
+  captureUsage(args: CostTrackingUsageRecord): Promise<CostTrackingPriceQuote | undefined>;
+  forScope(scope: TelemetryScope): CostTrackingTelemetry;
 }
-type RunStopCondition = Readonly<{
-  kind: "workflowCompleted";
-}> | Readonly<{
-  kind: "nodeCompleted";
-  nodeId: NodeId;
-}>;
-interface RunStateResetRequest {
-  clearFromNodeId: NodeId;
+interface CostTrackingTelemetryFactory {
+  create(args: Readonly<{
+    telemetry: ExecutionTelemetry;
+  }>): CostTrackingTelemetry;
 }
-interface PersistedRunControlState {
-  stopCondition?: RunStopCondition;
+//#endregion
+//#region src/contracts/NoOpTelemetryArtifactReference.d.ts
+declare class NoOpTelemetryArtifactReference {
+  static readonly value: TelemetryArtifactReference;
 }
-interface PersistedWorkflowSnapshotNode {
-  id: NodeId;
-  kind: NodeKind;
-  name?: string;
-  nodeTokenId: PersistedTokenId;
-  configTokenId: PersistedTokenId;
-  tokenName?: string;
-  configTokenName?: string;
-  config: unknown;
+//#endregion
+//#region src/contracts/NoOpTelemetrySpanScope.d.ts
+declare class NoOpTelemetrySpanScope {
+  static readonly value: TelemetrySpanScope;
+  /** Internal: the shared no-op {@link NodeExecutionTelemetry} that {@link NoOpNodeExecutionTelemetry} re-exposes. */
+  static readonly nodeExecutionTelemetryValue: NodeExecutionTelemetry;
 }
-interface PersistedWorkflowSnapshot {
-  id: WorkflowId;
-  name: string;
-  nodes: ReadonlyArray<PersistedWorkflowSnapshotNode>;
-  edges: ReadonlyArray<Edge>;
-  /** When the snapshot was built from a live workflow definition that configured a workflow error handler. */
-  workflowErrorHandlerConfigured?: boolean;
-  /** Connection metadata for child nodes not in the execution graph (e.g. AI agent attachments). */
-  connections?: ReadonlyArray<WorkflowNodeConnection>;
+//#endregion
+//#region src/contracts/NoOpNodeExecutionTelemetry.d.ts
+declare class NoOpNodeExecutionTelemetry {
+  static readonly value: NodeExecutionTelemetry;
 }
-type PinnedNodeOutputsByPort = Readonly<Record<OutputPortKey, Items>>;
-interface PersistedMutableNodeState {
-  pinnedOutputsByPort?: PinnedNodeOutputsByPort;
-  lastDebugInput?: Items;
+//#endregion
+//#region src/contracts/NoOpExecutionTelemetry.d.ts
+declare class NoOpExecutionTelemetry {
+  static readonly value: ExecutionTelemetry;
 }
-interface PersistedMutableRunState {
-  nodesById: Readonly<Record<NodeId, PersistedMutableNodeState>>;
+//#endregion
+//#region src/contracts/NoOpExecutionTelemetryFactory.d.ts
+declare class NoOpExecutionTelemetryFactory implements ExecutionTelemetryFactory {
+  create(_: Readonly<{
+    runId: RunId;
+    workflowId: WorkflowId;
+    parent?: ParentExecutionRef;
+    policySnapshot?: PersistedRunPolicySnapshot;
+  }>): ExecutionTelemetry;
 }
-type NodeInputsByPort = Readonly<Record<InputPortKey, Items>>;
-interface RunQueueEntry {
-  nodeId: NodeId;
-  input: Items;
-  toInput?: InputPortKey;
-  batchId?: string;
-  from?: Readonly<{
-    nodeId: NodeId;
-    output: OutputPortKey;
-  }>;
-  collect?: Readonly<{
-    expectedInputs: ReadonlyArray<InputPortKey>;
-    received: Readonly<Record<InputPortKey, Items>>;
-  }>;
+//#endregion
+//#region src/contracts/CodemationTelemetryAttributeNames.d.ts
+declare class CodemationTelemetryAttributeNames {
+  static readonly workflowId = "codemation.workflow.id";
+  static readonly runId = "codemation.run.id";
+  static readonly nodeId = "codemation.node.id";
+  static readonly activationId = "codemation.activation.id";
+  static readonly nodeType = "codemation.node.type";
+  static readonly nodeRole = "codemation.node.role";
+  static readonly workflowFolder = "codemation.workflow.folder";
+  static readonly connectionInvocationId = "codemation.connection.invocation_id";
+  static readonly toolName = "codemation.tool.name";
+  static readonly traceParentRunId = "codemation.parent.run.id";
+  /** Per-item iteration that emitted this span/metric. Set on spans recorded inside a runnable per-item loop. */
+  static readonly iterationId = "codemation.iteration.id";
+  /** Item index (0-based) of the iteration. */
+  static readonly iterationIndex = "codemation.iteration.index";
+  /** Set when this span/metric was recorded under a sub-agent triggered by an outer LLM/tool call. */
+  static readonly parentInvocationId = "codemation.parent.invocation_id";
+  /** MCP server id on spans created for callTool invocations. */
+  static readonly mcpServerId = "mcp.server_id";
+  /** MCP tool name on spans created for callTool invocations. */
+  static readonly mcpToolName = "mcp.tool_name";
 }
-type NodeExecutionStatus = "pending" | "queued" | "running" | "completed" | "failed" | "skipped";
-interface NodeExecutionError {
-  message: string;
-  name?: string;
-  stack?: string;
-  details?: JsonValue;
+//#endregion
+//#region src/contracts/GenAiTelemetryAttributeNames.d.ts
+declare class GenAiTelemetryAttributeNames {
+  static readonly operationName = "gen_ai.operation.name";
+  static readonly requestModel = "gen_ai.request.model";
+  static readonly usageInputTokens = "gen_ai.usage.input_tokens";
+  static readonly usageOutputTokens = "gen_ai.usage.output_tokens";
+  static readonly usageTotalTokens = "gen_ai.usage.total_tokens";
+  static readonly usageCacheReadInputTokens = "gen_ai.usage.cache_read.input_tokens";
+  static readonly usageCacheCreationInputTokens = "gen_ai.usage.cache_creation.input_tokens";
+  static readonly usageReasoningTokens = "codemation.gen_ai.usage.reasoning_tokens";
 }
-interface NodeExecutionSnapshot {
-  runId: RunId;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  activationId?: NodeActivationId;
-  parent?: ParentExecutionRef;
-  status: NodeExecutionStatus;
-  usedPinnedOutput?: boolean;
-  queuedAt?: string;
-  startedAt?: string;
-  finishedAt?: string;
-  updatedAt: string;
-  inputsByPort?: NodeInputsByPort;
-  outputs?: NodeOutputs;
-  error?: NodeExecutionError;
+//#endregion
+//#region src/contracts/CodemationTelemetryMetricNames.d.ts
+declare class CodemationTelemetryMetricNames {
+  static readonly agentTurns = "codemation.ai.turns";
+  static readonly agentToolCalls = "codemation.ai.tool_calls";
+  static readonly gmailMessagesEmitted = "codemation.gmail.messages_emitted";
+  static readonly gmailAttachments = "codemation.gmail.attachments";
+  static readonly gmailAttachmentBytes = "codemation.gmail.attachment_bytes";
+}
+//#endregion
+//#region src/contracts/telemetryTypes.d.ts
+type TelemetryAttributePrimitive = string | number | boolean | null;
+interface TelemetryAttributes {
+  readonly [key: string]: TelemetryAttributePrimitive | undefined;
+}
+interface TelemetryMetricRecord {
+  readonly name: string;
+  readonly value: number;
+  readonly unit?: string;
+  readonly attributes?: TelemetryAttributes;
+}
+interface TelemetrySpanEventRecord {
+  readonly name: string;
+  readonly occurredAt?: Date;
+  readonly attributes?: TelemetryAttributes;
+}
+interface TelemetryArtifactAttachment {
+  readonly kind: string;
+  readonly contentType: string;
+  readonly previewText?: string;
+  readonly previewJson?: JsonValue;
+  readonly payloadText?: string;
+  readonly payloadJson?: JsonValue;
+  readonly bytes?: number;
+  readonly truncated?: boolean;
+  readonly expiresAt?: Date;
+}
+interface TelemetryArtifactReference {
+  readonly artifactId: string;
+  readonly traceId?: string;
+  readonly spanId?: string;
+}
+interface TelemetrySpanEnd {
+  readonly status?: "ok" | "error";
+  readonly statusMessage?: string;
+  readonly endedAt?: Date;
+  readonly attributes?: TelemetryAttributes;
+}
+interface TelemetryChildSpanStart {
+  readonly name: string;
+  readonly kind?: "internal" | "client";
+  readonly startedAt?: Date;
+  readonly attributes?: TelemetryAttributes;
+}
+interface TelemetryScope {
+  readonly traceId?: string;
+  readonly spanId?: string;
+  readonly costTracking?: CostTrackingTelemetry;
+  addSpanEvent(args: TelemetrySpanEventRecord): Promise<void> | void;
+  recordMetric(args: TelemetryMetricRecord): Promise<void> | void;
+  attachArtifact(args: TelemetryArtifactAttachment): Promise<TelemetryArtifactReference> | TelemetryArtifactReference;
+}
+interface TelemetrySpanScope extends TelemetryScope {
+  readonly traceId: string;
+  readonly spanId: string;
+  end(args?: TelemetrySpanEnd): Promise<void> | void;
   /**
-   * When the node is a SubWorkflow invocation, the run id of the child run it spawned.
-   * Populated after the child run completes so the UI can deep-link to that specific execution.
+   * Lift this span into a {@link NodeExecutionTelemetry} scoped to a different (nodeId, activationId).
+   * Children created via the returned telemetry's `startChildSpan` get this span as their parent.
+   *
+   * Used at the sub-agent boundary so that nested runtime telemetry parents under the agent.tool.call
+   * span instead of the orchestrator's node-level span.
    */
-  childRunId?: RunId;
+  asNodeTelemetry(args: Readonly<{
+    nodeId: NodeId;
+    activationId: NodeActivationId;
+  }>): NodeExecutionTelemetry;
 }
-/** Stable id for a single connection invocation row in {@link ConnectionInvocationRecord}. */
-type ConnectionInvocationId = string;
+interface NodeExecutionTelemetry extends ExecutionTelemetry, TelemetrySpanScope {
+  startChildSpan(args: TelemetryChildSpanStart): TelemetrySpanScope;
+}
+interface ExecutionTelemetry extends TelemetryScope {
+  readonly traceId: string;
+  readonly spanId: string;
+  forNode(args: Readonly<{
+    nodeId: NodeId;
+    activationId: NodeActivationId;
+  }>): NodeExecutionTelemetry;
+}
+interface ExecutionTelemetryFactory {
+  create(args: Readonly<{
+    runId: RunId;
+    workflowId: WorkflowId;
+    parent?: ParentExecutionRef;
+    policySnapshot?: PersistedRunPolicySnapshot;
+  }>): ExecutionTelemetry;
+}
+//#endregion
+//#region src/contracts/workflowActivationPolicy.d.ts
 /**
- * One logical LLM or tool call under an owning workflow node (e.g. AI agent).
- * The owning node defines what {@link managedInput} and {@link managedOutput} contain.
+ * Host-controlled policy: when false, trigger {@link TriggerNode} setup is skipped and webhook routes
+ * for that workflow are not registered (see engine trigger runtime + webhook matcher).
  */
-interface ConnectionInvocationRecord {
-  readonly invocationId: ConnectionInvocationId;
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly connectionNodeId: NodeId;
-  readonly parentAgentNodeId: NodeId;
-  readonly parentAgentActivationId: NodeActivationId;
-  readonly status: NodeExecutionStatus;
-  readonly managedInput?: JsonValue;
-  readonly managedOutput?: JsonValue;
-  readonly error?: NodeExecutionError;
-  readonly queuedAt?: string;
-  readonly startedAt?: string;
-  readonly finishedAt?: string;
-  readonly updatedAt: string;
-  /** Per-item iteration id minted by the engine when this invocation occurred inside a runnable node's per-item loop. */
-  readonly iterationId?: NodeIterationId;
-  /** Item index (0-based) of the iteration that produced this invocation. */
-  readonly itemIndex?: number;
-  /** When set, this invocation was produced inside a sub-agent triggered by the named parent invocation. */
-  readonly parentInvocationId?: ConnectionInvocationId;
-}
-/** Arguments for appending a {@link ConnectionInvocationRecord} (engine fills run/workflow ids and timestamps). */
-type ConnectionInvocationAppendArgs = Readonly<{
-  invocationId: ConnectionInvocationId;
-  connectionNodeId: NodeId;
-  parentAgentNodeId: NodeId;
-  parentAgentActivationId: NodeActivationId;
-  status: NodeExecutionStatus;
-  managedInput?: JsonValue;
-  managedOutput?: JsonValue;
-  error?: NodeExecutionError;
-  queuedAt?: string;
-  startedAt?: string;
-  finishedAt?: string;
-  iterationId?: NodeIterationId;
-  itemIndex?: number;
-  parentInvocationId?: ConnectionInvocationId;
-}>;
-interface RunCurrentState {
-  outputsByNode: Record<NodeId, NodeOutputs>;
-  nodeSnapshotsByNodeId: Record<NodeId, NodeExecutionSnapshot>;
-  /** Append-only history of connection-scoped invocations (LLM/tool) for inspector and canvas. */
-  connectionInvocations?: ReadonlyArray<ConnectionInvocationRecord>;
-  mutableState?: PersistedMutableRunState;
+interface WorkflowActivationPolicy {
+  isActive(workflowId: WorkflowId): boolean;
 }
-interface CurrentStateExecutionRequest {
-  workflow: WorkflowDefinition;
-  items?: Items;
-  parent?: ParentExecutionRef;
-  executionOptions?: RunExecutionOptions;
-  workflowSnapshot?: PersistedWorkflowSnapshot;
-  mutableState?: PersistedMutableRunState;
-  currentState?: RunCurrentState;
-  stopCondition?: RunStopCondition;
-  reset?: RunStateResetRequest;
+/** Default for tests and harnesses: every workflow is treated as active (legacy behavior). */
+declare class AllWorkflowsActiveWorkflowActivationPolicy implements WorkflowActivationPolicy {
+  isActive(_workflowId: WorkflowId): boolean;
 }
-interface ExecutionFrontierPlan {
-  rootNodeId?: NodeId;
-  rootNodeInput?: Items;
-  queue: RunQueueEntry[];
-  currentState: RunCurrentState;
-  stopCondition: RunStopCondition;
-  satisfiedNodeIds: ReadonlyArray<NodeId>;
-  skippedNodeIds: ReadonlyArray<NodeId>;
-  clearedNodeIds: ReadonlyArray<NodeId>;
-  preservedPinnedNodeIds: ReadonlyArray<NodeId>;
+//#endregion
+//#region src/contracts/webhookTypes.d.ts
+type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+interface WebhookControlSignal {
+  readonly __webhookControl: true;
+  readonly kind: "respondNow" | "respondNowAndContinue";
+  readonly responseItems: Items;
+  readonly continueItems?: Items;
 }
-type RunStatus = "running" | "pending" | "completed" | "failed";
-interface RunSummary {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  status: RunStatus;
-  /**
-   * Test-case status for runs dispatched as part of a TestSuiteRun. Carries the
-   * assertion-rollup-corrected outcome the test orchestrator persists onto the row, so the
-   * executions list can show "failed" for a run whose workflow completed cleanly but whose
-   * assertions caught regressions. Absent for non-test runs and legacy rows.
-   */
-  testCaseStatus?: TestCaseRunStatus;
-  /** ISO timestamp when the run finished (derived from node snapshots or store `updatedAt`); omit while running/pending. */
-  finishedAt?: string;
-  parent?: ParentExecutionRef;
-  executionOptions?: RunExecutionOptions;
+interface WebhookTriggerRoutingDiagnostics {
+  warn(message: string): void;
+  /** Inactive workflows omitted from the webhook route index (optional; host should wire for clarity at boot/reload). */
+  info?(message: string): void;
 }
-interface PendingNodeExecution {
-  runId: RunId;
-  activationId: NodeActivationId;
+interface TriggerInstanceId {
   workflowId: WorkflowId;
   nodeId: NodeId;
-  itemsIn: number;
-  inputsByPort: NodeInputsByPort;
-  receiptId: string;
-  queue?: string;
-  batchId?: string;
-  enqueuedAt: string;
-}
-interface PersistedRunSchedulingState {
-  pending?: PendingNodeExecution;
-  queue: RunQueueEntry[];
 }
-interface PersistedRunState {
-  runId: RunId;
+/** Match for an incoming HTTP request: user-defined URL segment + workflow trigger node. */
+interface WebhookInvocationMatch {
+  /** Same value as the webhook trigger's configured endpoint key (URL segment under the webhook base path). */
+  endpointPath: string;
   workflowId: WorkflowId;
-  startedAt: string;
-  /** Canonical terminal time for listings and retention when persisted on the run root. */
-  finishedAt?: string;
-  /** Optimistic concurrency / CAS on the run aggregate (repository may increment on save). */
-  revision?: number;
-  parent?: ParentExecutionRef;
-  executionOptions?: RunExecutionOptions;
-  control?: PersistedRunControlState;
-  workflowSnapshot?: PersistedWorkflowSnapshot;
-  mutableState?: PersistedMutableRunState;
-  /** Frozen at createRun from workflow + runtime defaults for prune/storage decisions. */
-  policySnapshot?: PersistedRunPolicySnapshot;
-  /** Successful node completions so far (for activation budget). */
-  engineCounters?: EngineRunCounters;
-  status: RunStatus;
-  pending?: PendingNodeExecution;
-  queue: RunQueueEntry[];
-  outputsByNode: Record<NodeId, NodeOutputs>;
-  nodeSnapshotsByNodeId: Record<NodeId, NodeExecutionSnapshot>;
-  /** Append-only history of connection invocations (LLM/tool) nested under owning nodes. */
-  connectionInvocations?: ReadonlyArray<ConnectionInvocationRecord>;
-}
-interface WorkflowExecutionRepository {
-  createRun(args: {
-    runId: RunId;
-    workflowId: WorkflowId;
-    startedAt: string;
-    parent?: ParentExecutionRef;
-    executionOptions?: RunExecutionOptions;
-    control?: PersistedRunControlState;
-    workflowSnapshot?: PersistedWorkflowSnapshot;
-    mutableState?: PersistedMutableRunState;
-    policySnapshot?: PersistedRunPolicySnapshot;
-    engineCounters?: EngineRunCounters;
-  }): Promise<void>;
-  load(runId: RunId): Promise<PersistedRunState | undefined>;
-  loadSchedulingState(runId: RunId): Promise<PersistedRunSchedulingState | undefined>;
-  save(state: PersistedRunState): Promise<void>;
-  deleteRun?(runId: RunId): Promise<void>;
-}
-interface WorkflowExecutionListingRepository {
-  listRuns(args?: Readonly<{
-    workflowId?: WorkflowId;
-    limit?: number;
-  }>): Promise<ReadonlyArray<RunSummary>>;
-}
-/** Runs eligible for retention-based pruning (completed or failed, older than cutoff). */
-interface RunPruneCandidate {
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly startedAt: string;
-  readonly finishedAt: string;
-}
-interface WorkflowExecutionPruneRepository {
-  listRunsOlderThan(args: Readonly<{
-    nowIso: string;
-    defaultRetentionSeconds: number;
-    limit?: number;
-  }>): Promise<ReadonlyArray<RunPruneCandidate>>;
+  nodeId: NodeId;
+  methods: ReadonlyArray<HttpMethod>;
+  parseJsonBody?: (body: unknown) => unknown;
 }
-type RunResult = {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  status: "completed";
-  outputs: Items;
+/** Result of resolving an HTTP method + endpoint path against the catalog webhook index (404 vs 405 vs match). */
+type WebhookTriggerResolution = {
+  status: "notFound";
 } | {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  status: "pending";
-  pending: PendingNodeExecution;
+  status: "methodNotAllowed";
+  match: WebhookInvocationMatch;
 } | {
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  status: "failed";
-  error: {
-    message: string;
-  };
+  status: "ok";
+  match: WebhookInvocationMatch;
 };
-type WebhookRunResult = Readonly<{
-  runId: RunId;
-  workflowId: WorkflowId;
-  startedAt: string;
-  runStatus: "pending" | "completed";
-  response: Items;
-}>;
-interface PersistedWorkflowTokenRegistryLike {
-  register(type: TypeToken<unknown>, packageId: string, persistedNameOverride?: string): string;
-  getTokenId(type: TypeToken<unknown>): string | undefined;
-  resolve(tokenId: string): TypeToken<unknown> | undefined;
-  registerFromWorkflows?(workflows: ReadonlyArray<WorkflowDefinition>): void;
-}
-interface RunCompletionNotifier {
-  resolveRunCompletion(result: RunResult): void;
-  resolveWebhookResponse(result: WebhookRunResult): void;
-}
-interface RunEventPublisherDeps {
-  eventBus?: RunEventBus;
-}
-//#endregion
-//#region src/triggers/polling/PollingTriggerDedupWindow.d.ts
 /**
- * Merges processed-ID windows for polling triggers, capping the total to avoid unbounded growth.
- * Plugin code receives an instance of this class via {@link PollingTriggerHandle.dedup}.
+ * Resolves webhook routes from workflow definitions (catalog-backed index, no registration at trigger setup).
  */
-declare class PollingTriggerDedupWindow {
-  static readonly defaultCapN = 2000;
-  merge(previous: ReadonlyArray<string>, incoming: ReadonlyArray<string>, capN?: number): ReadonlyArray<string>;
+interface WebhookTriggerMatcher {
+  match(args: {
+    endpointPath: string;
+    method: HttpMethod;
+  }): WebhookInvocationMatch | undefined;
+  lookup(endpointPath: string): WebhookInvocationMatch | undefined;
+  onEngineWorkflowsLoaded?(): void;
+  onEngineStopped?(): void;
+  /** Rebuild route index after activation changes without stopping the engine. */
+  reloadWebhookRoutes?(): void;
 }
 //#endregion
-//#region src/triggers/polling/PollingTriggerLogger.d.ts
-/**
- * Minimal logger surface for the polling-trigger runtime.
- * Hosts supply this via {@link EngineDeps.pollingTriggerLogger};
- * when absent the runtime is silent.
- */
-interface PollingTriggerLogger {
-  info(message: string): void;
-  warn(message: string): void;
-  error(message: string, exception?: Error): void;
-  debug(message: string): void;
-}
-declare class NoOpPollingTriggerLogger implements PollingTriggerLogger {
-  info(): void;
-  warn(): void;
-  error(): void;
-  debug(): void;
-}
-//#endregion
-//#region src/contracts/credentialTypes.d.ts
-type CredentialTypeId = string;
-type CredentialInstanceId = string;
-type CredentialMaterialSourceKind = "db" | "env" | "code";
-type CredentialSetupStatus = "draft" | "ready";
-type CredentialHealthStatus = "unknown" | "healthy" | "failing";
-type CredentialFieldSchema = Readonly<{
-  key: string;
-  label: string;
-  type: "string" | "password" | "textarea" | "json" | "boolean";
-  required?: true;
-  order?: number;
-  /**
-   * Where this field appears in the credential dialog. Use `"advanced"` for optional or
-   * power-user fields; they render inside a collapsible section (see `CredentialTypeDefinition.advancedSection`).
-   * Defaults to `"default"` when omitted.
-   */
-  visibility?: "default" | "advanced";
-  placeholder?: string;
-  helpText?: string;
-  /** When set, host resolves this field from process.env at runtime; env wins over stored values. */
-  envVarName?: string;
-  /**
-   * When set, the dialog shows a copy action for this exact string (e.g. a static OAuth redirect URI
-   * pattern or documentation URL). Do not use for secret values.
-   */
-  copyValue?: string;
-  /** Accessible label for the copy control (default: Copy). */
-  copyButtonLabel?: string;
-}>;
-type CredentialRequirement = Readonly<{
-  slotKey: string;
-  label: string;
-  acceptedTypes: ReadonlyArray<CredentialTypeId>;
-  optional?: true;
-  helpText?: string;
-  helpUrl?: string;
-}>;
-type CredentialBindingKey = Readonly<{
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  slotKey: string;
-}>;
-type CredentialBinding = Readonly<{
-  key: CredentialBindingKey;
-  instanceId: CredentialInstanceId;
-  updatedAt: string;
-}>;
-type CredentialHealth = Readonly<{
-  status: CredentialHealthStatus;
-  message?: string;
-  testedAt?: string;
-  expiresAt?: string;
-  details?: Readonly<Record<string, unknown>>;
-}>;
-type OAuth2ProviderFromPublicConfig = Readonly<{
-  authorizeUrlFieldKey: string;
-  tokenUrlFieldKey: string;
-  userInfoUrlFieldKey?: string;
-}>;
-type CredentialOAuth2ScopesFromPublicConfig = Readonly<{
-  presetFieldKey: string;
-  presetScopes: Readonly<Record<string, ReadonlyArray<string>>>;
-  customPresetKey?: string;
-  customScopesFieldKey?: string;
-}>;
-type CredentialOAuth2AuthDefinition = Readonly<{
-  kind: "oauth2";
-  providerId: string;
-  scopes: ReadonlyArray<string>;
-  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
-  clientIdFieldKey?: string;
-  clientSecretFieldKey?: string;
-} | {
-  kind: "oauth2";
-  providerFromPublicConfig: OAuth2ProviderFromPublicConfig;
-  scopes: ReadonlyArray<string>;
-  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
-  clientIdFieldKey?: string;
-  clientSecretFieldKey?: string;
-} | {
-  kind: "oauth2";
-  /**
-   * Free-form provider identifier for telemetry, DB rows, and Better Auth provider naming.
-   * Not used for any registry lookup — URLs come from {@link authorizeUrl} / {@link tokenUrl}.
-   */
-  providerId: string;
-  /**
-   * Authorization endpoint. May contain `{publicFieldKey}` placeholders that the runtime
-   * substitutes from the credential's resolved public config (URL-encoded).
-   * Example: `https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/authorize`
-   */
-  authorizeUrl: string;
-  /** Token endpoint. Same templating rules as {@link authorizeUrl}. */
-  tokenUrl: string;
-  /** Optional userinfo endpoint. Same templating rules as {@link authorizeUrl}. */
-  userInfoUrl?: string;
-  scopes: ReadonlyArray<string>;
-  scopesFromPublicConfig?: CredentialOAuth2ScopesFromPublicConfig;
-  clientIdFieldKey?: string;
-  clientSecretFieldKey?: string;
-}>;
-type CredentialAuthDefinition = CredentialOAuth2AuthDefinition;
-type CredentialAdvancedSectionPresentation = Readonly<{
-  /** Collapsible section title (default: "Advanced"). */
-  title?: string;
-  /** Optional short helper text shown inside the section (above the fields). */
-  description?: string;
-  /** When true, the advanced section starts expanded. Default: false (collapsed). */
-  defaultOpen?: boolean;
-}>;
-type CredentialTypeDefinition = Readonly<{
-  typeId: CredentialTypeId;
-  displayName: string;
-  description?: string;
-  publicFields?: ReadonlyArray<CredentialFieldSchema>;
-  secretFields?: ReadonlyArray<CredentialFieldSchema>;
-  /**
-   * Optional labels for the collapsible block that contains every field with `visibility: "advanced"`.
-   * If omitted, the UI still shows that block with defaults (title "Advanced", collapsed).
-   */
-  advancedSection?: CredentialAdvancedSectionPresentation;
-  supportedSourceKinds?: ReadonlyArray<CredentialMaterialSourceKind>;
-  auth?: CredentialAuthDefinition;
-}>;
-/**
- * JSON-shaped credential field bag (public config, resolved secret material, etc.).
- */
-type CredentialJsonRecord = Readonly<Record<string, unknown>>;
-/**
- * Persisted credential instance with typed `publicConfig`.
- * Hosts may specialize `secretRef` with a stricter union while remaining
- * assignable here for session/test callbacks.
- */
-type CredentialInstanceRecord<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord> = Readonly<{
-  instanceId: CredentialInstanceId;
-  typeId: CredentialTypeId;
-  displayName: string;
-  sourceKind: CredentialMaterialSourceKind;
-  publicConfig: TPublicConfig;
-  secretRef: CredentialJsonRecord;
-  tags: ReadonlyArray<string>;
-  setupStatus: CredentialSetupStatus;
-  createdAt: string;
-  updatedAt: string;
-}>;
-/**
- * Arguments passed to `CredentialType.createSession` and `CredentialType.test`.
- * Declare `TPublicConfig` / `TMaterial` on `CredentialType` so implementations are checked
- * against your credential shapes (similar to `NodeExecutionContext.config` for nodes).
- */
-type CredentialSessionFactoryArgs<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord> = Readonly<{
-  instance: CredentialInstanceRecord<TPublicConfig>;
-  material: TMaterial;
-  publicConfig: TPublicConfig;
-}>;
-type CredentialSessionFactory<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord, TSession = unknown> = (args: CredentialSessionFactoryArgs<TPublicConfig, TMaterial>) => Promise<TSession>;
-type CredentialHealthTester<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord> = (args: CredentialSessionFactoryArgs<TPublicConfig, TMaterial>) => Promise<CredentialHealth>;
-/**
- * Full credential type implementation: `definition` (UI/schema), `createSession`, and `test`.
- * Use this at registration and config boundaries; `CredentialTypeDefinition` is only the schema slice.
- */
-type CredentialType<TPublicConfig extends CredentialJsonRecord = CredentialJsonRecord, TMaterial extends CredentialJsonRecord = CredentialJsonRecord, TSession = unknown> = Readonly<{
-  definition: CredentialTypeDefinition;
-  createSession: CredentialSessionFactory<TPublicConfig, TMaterial, TSession>;
-  test: CredentialHealthTester<TPublicConfig, TMaterial>;
-}>;
-/**
- * Credential type with unspecified generics — used for `CodemationConfig.credentialTypes`, the host registry,
- * and anywhere a concrete `CredentialType<YourPublic, YourMaterial, YourSession>` is placed in a heterogeneous list.
- * Using `any` here avoids unsafe `as` casts while keeping typed `satisfies CredentialType<…>` definitions.
- */
-type AnyCredentialType = CredentialType<any, any, unknown>;
-interface CredentialSessionService {
-  getSession<TSession = unknown>(args: Readonly<{
+//#region src/contracts/runtimeTypes.d.ts
+interface WorkflowRunnerService {
+  runById(args: {
     workflowId: WorkflowId;
-    nodeId: NodeId;
-    slotKey: string;
-  }>): Promise<TSession>;
+    startAt?: NodeId;
+    items: Items;
+    parent?: ParentExecutionRef;
+  }): Promise<RunResult>;
 }
-interface CredentialTypeRegistry {
-  listTypes(): ReadonlyArray<CredentialTypeDefinition>;
-  getType(typeId: CredentialTypeId): CredentialTypeDefinition | undefined;
+interface WorkflowRunnerResolver {
+  resolve(): WorkflowRunnerService | undefined;
 }
-declare class CredentialUnboundError extends Error {
-  readonly bindingKey: CredentialBindingKey;
-  readonly acceptedTypes: ReadonlyArray<CredentialTypeId>;
-  constructor(bindingKey: CredentialBindingKey, acceptedTypes?: ReadonlyArray<CredentialTypeId>);
-  private static createMessage;
+interface WorkflowRepository {
+  list(): ReadonlyArray<WorkflowDefinition>;
+  get(workflowId: WorkflowId): WorkflowDefinition | undefined;
 }
-//#endregion
-//#region src/contracts/collectionTypes.d.ts
-/**
- * Represents a typed store for a single collection.
- * All rows include auto-managed id, created_at, and updated_at fields.
- */
-interface CollectionStore<TRow extends Record<string, unknown> = Record<string, unknown>> {
-  /**
-   * Insert a new row. id, created_at, and updated_at are auto-populated.
-   */
-  insert(row: TRow): Promise<TRow & {
-    id: string;
-    created_at: Date;
-    updated_at: Date;
-  }>;
-  /**
-   * Get a single row by id.
-   */
-  get(id: string): Promise<(TRow & {
-    id: string;
-    created_at: Date;
-    updated_at: Date;
-  }) | null>;
-  /**
-   * Find a single row matching the provided filter.
-   */
-  findOne(filter: Partial<TRow>): Promise<(TRow & {
-    id: string;
-    created_at: Date;
-    updated_at: Date;
-  }) | null>;
-  /**
-   * List rows with optional pagination and filtering.
-   */
-  list(opts?: {
-    limit?: number;
-    offset?: number;
-    where?: Partial<TRow>;
-  }): Promise<{
-    rows: ReadonlyArray<TRow & {
-      id: string;
-      created_at: Date;
-      updated_at: Date;
-    }>;
-    total: number;
-  }>;
-  /**
-   * Update a row by id with partial data.
-   */
-  update(id: string, patch: Partial<TRow>): Promise<TRow & {
-    id: string;
-    created_at: Date;
-    updated_at: Date;
-  }>;
+interface LiveWorkflowRepository extends WorkflowRepository {
+  setWorkflows(workflows: ReadonlyArray<WorkflowDefinition>): void;
+}
+interface NodeResolver {
+  resolve<T>(token: TypeToken<T>): T;
+}
+interface NodeExecutionStatePublisher {
+  markQueued(args: {
+    nodeId: NodeId;
+    activationId?: NodeActivationId;
+    inputsByPort?: NodeInputsByPort;
+  }): Promise<void>;
+  markRunning(args: {
+    nodeId: NodeId;
+    activationId?: NodeActivationId;
+    inputsByPort?: NodeInputsByPort;
+  }): Promise<void>;
+  markCompleted(args: {
+    nodeId: NodeId;
+    activationId?: NodeActivationId;
+    inputsByPort?: NodeInputsByPort;
+    outputs?: NodeOutputs;
+  }): Promise<void>;
+  markFailed(args: {
+    nodeId: NodeId;
+    activationId?: NodeActivationId;
+    inputsByPort?: NodeInputsByPort;
+    error: Error;
+  }): Promise<void>;
+  appendConnectionInvocation(args: ConnectionInvocationAppendArgs): Promise<void>;
   /**
-   * Delete a row by id. Hard delete only (no soft delete).
+   * Annotates the current snapshot for `nodeId` with the id of the child run spawned by a
+   * SubWorkflow invocation. Called from `SubWorkflowNode.execute` after `runById` resolves.
+   * The engine's subsequent `markCompleted` call preserves the value via `previous.childRunId`.
    */
-  delete(id: string): Promise<{
-    deleted: boolean;
-  }>;
+  setChildRunId?(args: {
+    nodeId: NodeId;
+    childRunId: RunId;
+  }): Promise<void>;
 }
-/**
- * Runtime collections context: keyed by collection name.
- */
-type CollectionsContext = Readonly<Record<string, CollectionStore>>;
-//#endregion
-//#region src/contracts/CostTrackingTelemetryContract.d.ts
-type CostTrackingComponent = "chat" | "ocr" | "rag";
-declare const CostTrackingTelemetryMetricNames: {
-  readonly usage: "codemation.cost.usage";
-  readonly estimatedCost: "codemation.cost.estimated";
-};
-declare const CostTrackingTelemetryAttributeNames: {
-  readonly component: "cost.component";
-  readonly provider: "cost.provider";
-  readonly operation: "cost.operation";
-  readonly pricingKey: "cost.pricing_key";
-  readonly usageUnit: "cost.usage_unit";
-  readonly currency: "cost.currency";
-  readonly currencyScale: "cost.currency_scale";
-  readonly estimateKind: "cost.estimate_kind";
-};
-interface CostTrackingUsageRecord {
-  readonly component: CostTrackingComponent;
-  readonly provider: string;
-  readonly operation: string;
-  readonly pricingKey: string;
-  readonly usageUnit: string;
-  readonly quantity: number;
-  readonly modelName?: string;
-  readonly attributes?: TelemetryAttributes;
+type BinaryBody = ReadableStream<Uint8Array> | AsyncIterable<Uint8Array> | Uint8Array | ArrayBuffer;
+interface BinaryStorageWriteRequest {
+  storageKey: string;
+  body: BinaryBody;
 }
-interface CostTrackingPriceQuote {
-  readonly currency: string;
-  readonly currencyScale: number;
-  readonly estimatedAmountMinor: number;
-  readonly estimateKind: "catalog";
+interface BinaryStorageWriteResult {
+  storageKey: string;
+  size: number;
+  sha256?: string;
 }
-interface CostTrackingTelemetry {
-  captureUsage(args: CostTrackingUsageRecord): Promise<CostTrackingPriceQuote | undefined>;
-  forScope(scope: TelemetryScope): CostTrackingTelemetry;
+interface BinaryStorageReadResult {
+  body: ReadableStream<Uint8Array>;
+  size?: number;
 }
-interface CostTrackingTelemetryFactory {
-  create(args: Readonly<{
-    telemetry: ExecutionTelemetry;
-  }>): CostTrackingTelemetry;
+interface BinaryStorageStatResult {
+  exists: boolean;
+  size?: number;
 }
-//#endregion
-//#region src/contracts/NoOpTelemetryArtifactReference.d.ts
-declare class NoOpTelemetryArtifactReference {
-  static readonly value: TelemetryArtifactReference;
+interface BinaryStorage {
+  readonly driverName: string;
+  write(args: BinaryStorageWriteRequest): Promise<BinaryStorageWriteResult>;
+  openReadStream(storageKey: string): Promise<BinaryStorageReadResult | undefined>;
+  stat(storageKey: string): Promise<BinaryStorageStatResult>;
+  delete(storageKey: string): Promise<void>;
+  /** Deletes multiple objects in bulk. Keys are batched internally. */
+  deleteMany(storageKeys: ReadonlyArray<string>): Promise<void>;
+  /** Lists all keys sharing a common prefix. Returns keys in arbitrary order. */
+  listByPrefix(prefix: string): Promise<ReadonlyArray<string>>;
 }
-//#endregion
-//#region src/contracts/NoOpTelemetrySpanScope.d.ts
-declare class NoOpTelemetrySpanScope {
-  static readonly value: TelemetrySpanScope;
-  /** Internal: the shared no-op {@link NodeExecutionTelemetry} that {@link NoOpNodeExecutionTelemetry} re-exposes. */
-  static readonly nodeExecutionTelemetryValue: NodeExecutionTelemetry;
+interface BinaryAttachmentCreateRequest {
+  name: string;
+  body: BinaryBody;
+  mimeType: string;
+  filename?: string;
+  previewKind?: BinaryAttachment["previewKind"];
 }
-//#endregion
-//#region src/contracts/NoOpNodeExecutionTelemetry.d.ts
-declare class NoOpNodeExecutionTelemetry {
-  static readonly value: NodeExecutionTelemetry;
+interface NodeBinaryAttachmentService extends ExecutionBinaryService {
+  attach(args: BinaryAttachmentCreateRequest): Promise<BinaryAttachment>;
+  withAttachment<TJson>(item: Item<TJson>, name: string, attachment: BinaryAttachment): Item<TJson>;
 }
-//#endregion
-//#region src/contracts/NoOpExecutionTelemetry.d.ts
-declare class NoOpExecutionTelemetry {
-  static readonly value: ExecutionTelemetry;
+interface ExecutionBinaryService {
+  forNode(args: {
+    nodeId: NodeId;
+    activationId: NodeActivationId;
+  }): NodeBinaryAttachmentService;
+  openReadStream(attachment: BinaryAttachment): Promise<BinaryStorageReadResult | undefined>;
 }
-//#endregion
-//#region src/contracts/NoOpExecutionTelemetryFactory.d.ts
-declare class NoOpExecutionTelemetryFactory implements ExecutionTelemetryFactory {
-  create(_: Readonly<{
+interface ExecutionContext {
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  /** This run's subworkflow depth (0 = root). */
+  subworkflowDepth: number;
+  /** Effective activation budget cap for this run (after policy merge). */
+  engineMaxNodeActivations: number;
+  /** Effective subworkflow nesting cap for this run (after policy merge). */
+  engineMaxSubworkflowDepth: number;
+  now: () => Date;
+  data: RunDataSnapshot;
+  nodeState?: NodeExecutionStatePublisher;
+  telemetry: ExecutionTelemetry;
+  binary: ExecutionBinaryService;
+  getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
+  /** Per-item iteration id, set by {@link NodeExecutor} on the ctx passed into runnable `execute`. */
+  iterationId?: NodeIterationId;
+  /** Item index (0-based) within the current activation's batch; set alongside {@link iterationId}. */
+  itemIndex?: number;
+  /** When set, this ctx is executing inside a sub-agent triggered by the named parent invocation. */
+  parentInvocationId?: ConnectionInvocationId;
+  /**
+   * Present iff the run was started by a TestSuiteOrchestrator. The {@link IsTestRunNode}
+   * branches on this; assertion-emitting nodes use it to decide whether to record results.
+   */
+  testContext?: RunTestContext;
+  /**
+   * Collections registered in the codemation config, keyed by collection name.
+   */
+  readonly collections?: CollectionsContext;
+}
+interface ExecutionContextFactory {
+  create(args: {
     runId: RunId;
     workflowId: WorkflowId;
     parent?: ParentExecutionRef;
     policySnapshot?: PersistedRunPolicySnapshot;
-  }>): ExecutionTelemetry;
-}
-//#endregion
-//#region src/contracts/CodemationTelemetryAttributeNames.d.ts
-declare class CodemationTelemetryAttributeNames {
-  static readonly workflowId = "codemation.workflow.id";
-  static readonly runId = "codemation.run.id";
-  static readonly nodeId = "codemation.node.id";
-  static readonly activationId = "codemation.activation.id";
-  static readonly nodeType = "codemation.node.type";
-  static readonly nodeRole = "codemation.node.role";
-  static readonly workflowFolder = "codemation.workflow.folder";
-  static readonly connectionInvocationId = "codemation.connection.invocation_id";
-  static readonly toolName = "codemation.tool.name";
-  static readonly traceParentRunId = "codemation.parent.run.id";
-  /** Per-item iteration that emitted this span/metric. Set on spans recorded inside a runnable per-item loop. */
-  static readonly iterationId = "codemation.iteration.id";
-  /** Item index (0-based) of the iteration. */
-  static readonly iterationIndex = "codemation.iteration.index";
-  /** Set when this span/metric was recorded under a sub-agent triggered by an outer LLM/tool call. */
-  static readonly parentInvocationId = "codemation.parent.invocation_id";
-}
-//#endregion
-//#region src/contracts/GenAiTelemetryAttributeNames.d.ts
-declare class GenAiTelemetryAttributeNames {
-  static readonly operationName = "gen_ai.operation.name";
-  static readonly requestModel = "gen_ai.request.model";
-  static readonly usageInputTokens = "gen_ai.usage.input_tokens";
-  static readonly usageOutputTokens = "gen_ai.usage.output_tokens";
-  static readonly usageTotalTokens = "gen_ai.usage.total_tokens";
-  static readonly usageCacheReadInputTokens = "gen_ai.usage.cache_read.input_tokens";
-  static readonly usageCacheCreationInputTokens = "gen_ai.usage.cache_creation.input_tokens";
-  static readonly usageReasoningTokens = "codemation.gen_ai.usage.reasoning_tokens";
+    subworkflowDepth: number;
+    engineMaxNodeActivations: number;
+    engineMaxSubworkflowDepth: number;
+    data: RunDataSnapshot;
+    nodeState?: NodeExecutionStatePublisher;
+    telemetry?: ExecutionTelemetry;
+    getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
+    testContext?: RunTestContext;
+  }): ExecutionContext;
 }
-//#endregion
-//#region src/contracts/CodemationTelemetryMetricNames.d.ts
-declare class CodemationTelemetryMetricNames {
-  static readonly agentTurns = "codemation.ai.turns";
-  static readonly agentToolCalls = "codemation.ai.tool_calls";
-  static readonly gmailMessagesEmitted = "codemation.gmail.messages_emitted";
-  static readonly gmailAttachments = "codemation.gmail.attachments";
-  static readonly gmailAttachmentBytes = "codemation.gmail.attachment_bytes";
+interface NodeExecutionContext<TConfig extends NodeConfigBase = NodeConfigBase> extends ExecutionContext {
+  nodeId: NodeId;
+  activationId: NodeActivationId;
+  config: TConfig;
+  telemetry: NodeExecutionTelemetry;
+  binary: NodeBinaryAttachmentService;
 }
-//#endregion
-//#region src/contracts/telemetryTypes.d.ts
-type TelemetryAttributePrimitive = string | number | boolean | null;
-interface TelemetryAttributes {
-  readonly [key: string]: TelemetryAttributePrimitive | undefined;
+interface PollingTriggerHandle {
+  /**
+   * Start the polling loop. The runtime registers its own cleanup handle so callers do not need to
+   * call {@link TriggerSetupContext.registerCleanup} for the loop.
+   * @returns The state returned by the first cycle (or `undefined` when the overlap guard fired).
+   */
+  start<TState, TItem>(args: {
+    intervalMs: number;
+    seedState?: TState;
+    runCycle: (cycleCtx: {
+      previousState: TState | undefined;
+      signal: AbortSignal;
+    }) => Promise<{
+      items: Items<TItem>;
+      nextState: TState;
+    }>;
+  }): Promise<TState | undefined>;
+  /** Convenience dedup-window helper. */
+  readonly dedup: PollingTriggerDedupWindow;
 }
-interface TelemetryMetricRecord {
-  readonly name: string;
-  readonly value: number;
-  readonly unit?: string;
-  readonly attributes?: TelemetryAttributes;
+interface TriggerSetupContext<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>, TSetupState$1 extends JsonValue | undefined = TriggerNodeSetupState<TConfig>> extends ExecutionContext {
+  trigger: TriggerInstanceId;
+  config: TConfig;
+  previousState: TSetupState$1;
+  registerCleanup(cleanup: TriggerCleanupHandle): void;
+  emit(items: Items): Promise<void>;
+  /** Generic polling-trigger surface. Pre-binds trigger id, emit, and registerCleanup. */
+  readonly polling: PollingTriggerHandle;
 }
-interface TelemetrySpanEventRecord {
-  readonly name: string;
-  readonly occurredAt?: Date;
-  readonly attributes?: TelemetryAttributes;
+interface TriggerTestItemsContext<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>, TSetupState$1 extends JsonValue | undefined = TriggerNodeSetupState<TConfig>> extends ExecutionContext {
+  trigger: TriggerInstanceId;
+  nodeId: NodeId;
+  config: TConfig;
+  previousState: TSetupState$1;
 }
-interface TelemetryArtifactAttachment {
-  readonly kind: string;
-  readonly contentType: string;
-  readonly previewText?: string;
-  readonly previewJson?: JsonValue;
-  readonly payloadText?: string;
-  readonly payloadJson?: JsonValue;
-  readonly bytes?: number;
-  readonly truncated?: boolean;
-  readonly expiresAt?: Date;
+/**
+ * Trigger setup state is intentionally engine-owned so future ownership and
+ * leader-election metadata can be coordinated centrally rather than pushed into
+ * package-level setup code.
+ */
+interface PersistedTriggerSetupState<TState extends JsonValue | undefined = JsonValue | undefined> {
+  trigger: TriggerInstanceId;
+  updatedAt: string;
+  state: TState;
 }
-interface TelemetryArtifactReference {
-  readonly artifactId: string;
-  readonly traceId?: string;
-  readonly spanId?: string;
+interface TriggerSetupStateRepository {
+  load(trigger: TriggerInstanceId): Promise<PersistedTriggerSetupState | undefined>;
+  save(state: PersistedTriggerSetupState): Promise<void>;
+  delete(trigger: TriggerInstanceId): Promise<void>;
 }
-interface TelemetrySpanEnd {
-  readonly status?: "ok" | "error";
-  readonly statusMessage?: string;
-  readonly endedAt?: Date;
-  readonly attributes?: TelemetryAttributes;
+interface TriggerCleanupHandle {
+  stop(): Promise<void> | void;
 }
-interface TelemetryChildSpanStart {
-  readonly name: string;
-  readonly kind?: "internal" | "client";
-  readonly startedAt?: Date;
-  readonly attributes?: TelemetryAttributes;
+interface EngineHost {
+  credentialSessions: CredentialSessionService;
+  workflows?: WorkflowRunnerService;
 }
-interface TelemetryScope {
-  readonly traceId?: string;
-  readonly spanId?: string;
-  readonly costTracking?: CostTrackingTelemetry;
-  addSpanEvent(args: TelemetrySpanEventRecord): Promise<void> | void;
-  recordMetric(args: TelemetryMetricRecord): Promise<void> | void;
-  attachArtifact(args: TelemetryArtifactAttachment): Promise<TelemetryArtifactReference> | TelemetryArtifactReference;
+/**
+ * Per-item runnable node: return JSON, an array to fan-out on `main`, an explicit `Item`, or {@link emitPorts}
+ * for multi-port emission. Engine applies `inputSchema.parse(item.json)` and passes the result as `args.input`
+ * (wire `item.json` is unchanged). Transform helpers may opt into binary preservation, while routers and
+ * pass-through nodes should return explicit items when they need to preserve full item state.
+ */
+interface RunnableNodeExecuteArgs<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown> {
+  readonly input: TInputJson$1;
+  readonly item: Item;
+  readonly itemIndex: number;
+  readonly items: Items;
+  readonly ctx: NodeExecutionContext<TConfig>;
 }
-interface TelemetrySpanScope extends TelemetryScope {
-  readonly traceId: string;
-  readonly spanId: string;
-  end(args?: TelemetrySpanEnd): Promise<void> | void;
+interface RunnableNode<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown, _TOutputJson = unknown> {
+  readonly kind: "node";
   /**
-   * Lift this span into a {@link NodeExecutionTelemetry} scoped to a different (nodeId, activationId).
-   * Children created via the returned telemetry's `startChildSpan` get this span as their parent.
+   * Declared output ports (e.g. `["main"]`).
    *
-   * Used at the sub-agent boundary so that nested runtime telemetry parents under the agent.tool.call
-   * span instead of the orchestrator's node-level span.
+   * Prefer describing dynamic router ports (Switch) and fixed multi-ports (If true/false)
+   * via {@link NodeConfigBase.declaredOutputPorts}. Engine defaults to `["main"]` when omitted.
    */
-  asNodeTelemetry(args: Readonly<{
-    nodeId: NodeId;
-    activationId: NodeActivationId;
-  }>): NodeExecutionTelemetry;
-}
-interface NodeExecutionTelemetry extends ExecutionTelemetry, TelemetrySpanScope {
-  startChildSpan(args: TelemetryChildSpanStart): TelemetrySpanScope;
+  readonly outputPorts?: ReadonlyArray<OutputPortKey>;
+  /** When omitted, engine uses {@link RunnableNodeConfig.inputSchema} or `z.unknown()`. */
+  readonly inputSchema?: ZodType<TInputJson$1>;
+  execute(args: RunnableNodeExecuteArgs<TConfig, TInputJson$1>): Promise<unknown> | unknown;
 }
-interface ExecutionTelemetry extends TelemetryScope {
-  readonly traceId: string;
-  readonly spanId: string;
-  forNode(args: Readonly<{
-    nodeId: NodeId;
-    activationId: NodeActivationId;
-  }>): NodeExecutionTelemetry;
+/** @deprecated Use {@link RunnableNode} */
+type ItemNode<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown, TOutputJson$1 = unknown> = RunnableNode<TConfig, TInputJson$1, TOutputJson$1>;
+interface MultiInputNode<TConfig extends NodeConfigBase = NodeConfigBase> {
+  kind: "node";
+  /**
+   * Declared output ports (typically `["main"]`).
+   *
+   * Prefer describing ports for authoring/canvas via {@link NodeConfigBase.declaredOutputPorts}.
+   * Engine defaults to `["main"]` when omitted.
+   */
+  outputPorts?: ReadonlyArray<OutputPortKey>;
+  executeMulti(inputsByPort: NodeInputsByPort, ctx: NodeExecutionContext<TConfig>): Promise<NodeOutputs>;
 }
-interface ExecutionTelemetryFactory {
-  create(args: Readonly<{
-    runId: RunId;
-    workflowId: WorkflowId;
-    parent?: ParentExecutionRef;
-    policySnapshot?: PersistedRunPolicySnapshot;
-  }>): ExecutionTelemetry;
+type TriggerSetupStateFor<TConfig extends TriggerNodeConfig<any, any>> = TriggerNodeSetupState<TConfig>;
+interface TriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> {
+  kind: "trigger";
+  outputPorts: readonly ["main"];
+  setup(ctx: TriggerSetupContext<TConfig>): Promise<TriggerSetupStateFor<TConfig>>;
+  execute(items: Items, ctx: NodeExecutionContext<TConfig>): Promise<NodeOutputs>;
 }
-//#endregion
-//#region src/contracts/workflowActivationPolicy.d.ts
-/**
- * Host-controlled policy: when false, trigger {@link TriggerNode} setup is skipped and webhook routes
- * for that workflow are not registered (see engine trigger runtime + webhook matcher).
- */
-interface WorkflowActivationPolicy {
-  isActive(workflowId: WorkflowId): boolean;
+interface TestableTriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> extends TriggerNode<TConfig> {
+  getTestItems(ctx: TriggerTestItemsContext<TConfig>): Promise<Items>;
 }
-/** Default for tests and harnesses: every workflow is treated as active (legacy behavior). */
-declare class AllWorkflowsActiveWorkflowActivationPolicy implements WorkflowActivationPolicy {
-  isActive(_workflowId: WorkflowId): boolean;
+type ExecutableTriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> = TriggerNode<TConfig>;
+interface NodeExecutionRequest {
+  runId: RunId;
+  activationId: NodeActivationId;
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  input: Items;
+  parent?: ParentExecutionRef;
+  queue?: string;
+  executionOptions?: RunExecutionOptions;
 }
-//#endregion
-//#region src/contracts/webhookTypes.d.ts
-type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
-interface WebhookControlSignal {
-  readonly __webhookControl: true;
-  readonly kind: "respondNow" | "respondNowAndContinue";
-  readonly responseItems: Items;
-  readonly continueItems?: Items;
+interface NodeExecutionScheduler {
+  enqueue(request: NodeExecutionRequest): Promise<{
+    receiptId: string;
+  }>;
+  cancel?(receiptId: string): Promise<void>;
 }
-interface WebhookTriggerRoutingDiagnostics {
-  warn(message: string): void;
-  /** Inactive workflows omitted from the webhook route index (optional; host should wire for clarity at boot/reload). */
-  info?(message: string): void;
+interface NodeExecutionRequestHandler {
+  handleNodeExecutionRequest(request: NodeExecutionRequest): Promise<void>;
 }
-interface TriggerInstanceId {
+type NodeActivationRequestBase = Readonly<{
+  runId: RunId;
+  activationId: NodeActivationId;
   workflowId: WorkflowId;
   nodeId: NodeId;
+  parent?: ParentExecutionRef;
+  executionOptions?: RunExecutionOptions;
+  batchId?: string;
+  ctx: NodeExecutionContext;
+}>;
+type NodeActivationRequest = (NodeActivationRequestBase & Readonly<{
+  kind: "single";
+  input: Items;
+}>) | (NodeActivationRequestBase & Readonly<{
+  kind: "multi";
+  inputsByPort: NodeInputsByPort;
+}>);
+interface NodeActivationReceipt {
+  receiptId: string;
+  mode?: "local" | "worker";
+  queue?: string;
 }
-/** Match for an incoming HTTP request: user-defined URL segment + workflow trigger node. */
-interface WebhookInvocationMatch {
-  /** Same value as the webhook trigger's configured endpoint key (URL segment under the webhook base path). */
-  endpointPath: string;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  methods: ReadonlyArray<HttpMethod>;
-  parseJsonBody?: (body: unknown) => unknown;
+interface PreparedNodeActivationDispatch {
+  readonly receipt: NodeActivationReceipt;
+  dispatch(): Promise<void>;
 }
-/** Result of resolving an HTTP method + endpoint path against the catalog webhook index (404 vs 405 vs match). */
-type WebhookTriggerResolution = {
-  status: "notFound";
-} | {
-  status: "methodNotAllowed";
-  match: WebhookInvocationMatch;
-} | {
-  status: "ok";
-  match: WebhookInvocationMatch;
-};
-/**
- * Resolves webhook routes from workflow definitions (catalog-backed index, no registration at trigger setup).
- */
-interface WebhookTriggerMatcher {
-  match(args: {
-    endpointPath: string;
-    method: HttpMethod;
-  }): WebhookInvocationMatch | undefined;
-  lookup(endpointPath: string): WebhookInvocationMatch | undefined;
-  onEngineWorkflowsLoaded?(): void;
-  onEngineStopped?(): void;
-  /** Rebuild route index after activation changes without stopping the engine. */
-  reloadWebhookRoutes?(): void;
+interface NodeActivationContinuation {
+  markNodeRunning(args: {
+    runId: RunId;
+    activationId: NodeActivationId;
+    nodeId: NodeId;
+    inputsByPort: NodeInputsByPort;
+  }): Promise<void>;
+  resumeFromNodeResult(args: {
+    runId: RunId;
+    activationId: NodeActivationId;
+    nodeId: NodeId;
+    outputs: NodeOutputs;
+  }): Promise<RunResult>;
+  resumeFromNodeError(args: {
+    runId: RunId;
+    activationId: NodeActivationId;
+    nodeId: NodeId;
+    error: Error;
+  }): Promise<RunResult>;
+}
+interface NodeActivationScheduler {
+  setContinuation?(continuation: NodeActivationContinuation): void;
+  prepareDispatch(request: NodeActivationRequest): Promise<PreparedNodeActivationDispatch>;
+  cancel?(receiptId: string): Promise<void>;
+}
+interface WorkflowNodeInstanceFactory {
+  createNodes(workflow: WorkflowDefinition): ReadonlyMap<NodeId, unknown>;
+  createByType(type: TypeToken<unknown>): unknown;
 }
-//#endregion
-//#region src/contracts/runtimeTypes.d.ts
-interface WorkflowRunnerService {
-  runById(args: {
-    workflowId: WorkflowId;
-    startAt?: NodeId;
-    items: Items;
-    parent?: ParentExecutionRef;
-  }): Promise<RunResult>;
+interface NodeExecutor {
+  execute(request: NodeActivationRequest): Promise<NodeOutputs>;
 }
-interface WorkflowRunnerResolver {
-  resolve(): WorkflowRunnerService | undefined;
+interface WorkflowSnapshotFactory {
+  create(workflow: WorkflowDefinition): PersistedWorkflowSnapshot;
 }
-interface WorkflowRepository {
-  list(): ReadonlyArray<WorkflowDefinition>;
-  get(workflowId: WorkflowId): WorkflowDefinition | undefined;
+interface WorkflowSnapshotResolver {
+  resolve(args: {
+    workflowId: WorkflowId;
+    workflowSnapshot?: PersistedWorkflowSnapshot;
+  }): WorkflowDefinition | undefined;
 }
-interface LiveWorkflowRepository extends WorkflowRepository {
-  setWorkflows(workflows: ReadonlyArray<WorkflowDefinition>): void;
+/** Optional host wiring for trigger lifecycle logs (boot skip + activation sync). */
+interface TriggerRuntimeDiagnostics {
+  info(message: string): void;
+  warn(message: string): void;
 }
-interface NodeResolver {
-  resolve<T>(token: TypeToken<T>): T;
+interface EngineDeps {
+  credentialSessions: CredentialSessionService;
+  liveWorkflowRepository: LiveWorkflowRepository;
+  workflowRepository: WorkflowRepository;
+  /** When {@link AllWorkflowsActiveWorkflowActivationPolicy}, all workflows behave as active (tests). */
+  workflowActivationPolicy: WorkflowActivationPolicy;
+  nodeResolver: NodeResolver;
+  triggerSetupStateRepository: TriggerSetupStateRepository;
+  webhookTriggerMatcher: WebhookTriggerMatcher;
+  runIdFactory: RunIdFactory;
+  activationIdFactory: ActivationIdFactory;
+  workflowExecutionRepository: WorkflowExecutionRepository;
+  activationScheduler: NodeActivationScheduler;
+  runDataFactory: RunDataFactory;
+  executionContextFactory: ExecutionContextFactory;
+  executionTelemetryFactory?: ExecutionTelemetryFactory;
+  nodeExecutor: NodeExecutor;
+  eventBus?: RunEventBus;
+  tokenRegistry: PersistedWorkflowTokenRegistryLike;
+  workflowNodeInstanceFactory: WorkflowNodeInstanceFactory;
+  /** Defaults for prune/storage snapshot when workflow omits explicit policy fields. */
+  workflowPolicyRuntimeDefaults?: WorkflowPolicyRuntimeDefaults;
+  /** When set, logs inactive-workflow skips at boot and trigger start/stop on activation changes. */
+  triggerRuntimeDiagnostics?: TriggerRuntimeDiagnostics;
+  /** When set, the polling-trigger runtime uses this logger for cycle info/debug/error. */
+  pollingTriggerLogger?: PollingTriggerLogger;
 }
-interface NodeExecutionStatePublisher {
-  markQueued(args: {
-    nodeId: NodeId;
-    activationId?: NodeActivationId;
-    inputsByPort?: NodeInputsByPort;
-  }): Promise<void>;
-  markRunning(args: {
-    nodeId: NodeId;
-    activationId?: NodeActivationId;
-    inputsByPort?: NodeInputsByPort;
-  }): Promise<void>;
-  markCompleted(args: {
-    nodeId: NodeId;
-    activationId?: NodeActivationId;
-    inputsByPort?: NodeInputsByPort;
-    outputs?: NodeOutputs;
-  }): Promise<void>;
-  markFailed(args: {
-    nodeId: NodeId;
-    activationId?: NodeActivationId;
-    inputsByPort?: NodeInputsByPort;
-    error: Error;
-  }): Promise<void>;
-  appendConnectionInvocation(args: ConnectionInvocationAppendArgs): Promise<void>;
-  /**
-   * Annotates the current snapshot for `nodeId` with the id of the child run spawned by a
-   * SubWorkflow invocation. Called from `SubWorkflowNode.execute` after `runById` resolves.
-   * The engine's subsequent `markCompleted` call preserves the value via `previous.childRunId`.
-   */
-  setChildRunId?(args: {
-    nodeId: NodeId;
-    childRunId: RunId;
-  }): Promise<void>;
+//#endregion
+//#region src/contracts/retryPolicySpec.types.d.ts
+/**
+ * In-process retry policy for runnable nodes. Serialized configs use the same
+ * `kind` discriminator (`JSON.stringify` / persisted workflows).
+ *
+ * `maxAttempts` is the total number of tries including the first (e.g. 3 means up to 2 delays after failures).
+ */
+type RetryPolicySpec = NoneRetryPolicySpec | FixedRetryPolicySpec | ExponentialRetryPolicySpec;
+interface NoneRetryPolicySpec {
+  readonly kind: "none";
 }
-type BinaryBody = ReadableStream<Uint8Array> | AsyncIterable<Uint8Array> | Uint8Array | ArrayBuffer;
-interface BinaryStorageWriteRequest {
-  storageKey: string;
-  body: BinaryBody;
+interface FixedRetryPolicySpec {
+  readonly kind: "fixed";
+  /** Total attempts including the first execution. Must be >= 1. */
+  readonly maxAttempts: number;
+  readonly delayMs: number;
 }
-interface BinaryStorageWriteResult {
-  storageKey: string;
-  size: number;
-  sha256?: string;
+interface ExponentialRetryPolicySpec {
+  readonly kind: "exponential";
+  /** Total attempts including the first execution. Must be >= 1. */
+  readonly maxAttempts: number;
+  readonly initialDelayMs: number;
+  readonly multiplier: number;
+  readonly maxDelayMs?: number;
+  /** When true, each delay is multiplied by a random factor in [1, 1.2). */
+  readonly jitter?: boolean;
 }
-interface BinaryStorageReadResult {
-  body: ReadableStream<Uint8Array>;
-  size?: number;
+//#endregion
+//#region src/contracts/workflowTypes.d.ts
+type NodeIdRef<TJson = unknown> = NodeId & Readonly<{
+  __codemationNodeJson?: TJson;
+}>;
+type NodeKind = "trigger" | "node";
+type JsonPrimitive = string | number | boolean | null;
+interface JsonObject {
+  readonly [key: string]: JsonValue;
 }
-interface BinaryStorageStatResult {
-  exists: boolean;
-  size?: number;
+type JsonValue = JsonPrimitive | JsonObject | JsonArray;
+type JsonArray = ReadonlyArray<JsonValue>;
+/** JSON value that is not a top-level array (nested arrays inside objects are allowed). */
+type JsonNonArray = JsonPrimitive | JsonObject;
+interface Edge {
+  from: {
+    nodeId: NodeId;
+    output: OutputPortKey;
+  };
+  to: {
+    nodeId: NodeId;
+    input: InputPortKey;
+  };
 }
-interface BinaryStorage {
-  readonly driverName: string;
-  write(args: BinaryStorageWriteRequest): Promise<BinaryStorageWriteResult>;
-  openReadStream(storageKey: string): Promise<BinaryStorageReadResult | undefined>;
-  stat(storageKey: string): Promise<BinaryStorageStatResult>;
-  delete(storageKey: string): Promise<void>;
+/**
+ * Named connection from a parent node to child nodes that exist in {@link WorkflowDefinition.nodes}
+ * but are not traversed by the main execution graph. Parents are commonly executable nodes, but may
+ * also be connection-owned nodes for recursive agent attachments.
+ */
+interface WorkflowNodeConnection {
+  readonly parentNodeId: NodeId;
+  readonly connectionName: NodeConnectionName;
+  readonly childNodeIds: ReadonlyArray<NodeId>;
 }
-interface BinaryAttachmentCreateRequest {
+interface WorkflowDefinition {
+  id: WorkflowId;
   name: string;
-  body: BinaryBody;
-  mimeType: string;
-  filename?: string;
-  previewKind?: BinaryAttachment["previewKind"];
-}
-interface NodeBinaryAttachmentService extends ExecutionBinaryService {
-  attach(args: BinaryAttachmentCreateRequest): Promise<BinaryAttachment>;
-  withAttachment<TJson>(item: Item<TJson>, name: string, attachment: BinaryAttachment): Item<TJson>;
+  nodes: NodeDefinition[];
+  edges: Edge[];
+  /**
+   * Optional metadata: which nodes are connection-owned children (e.g. AI agent `llm` / `tools` slots).
+   * When omitted, all nodes in {@link nodes} are treated as executable for topology.
+   */
+  readonly connections?: ReadonlyArray<WorkflowNodeConnection>;
+  /** Directory + file-stem path under a workflow discovery root (for UI grouping only). */
+  discoveryPathSegments?: readonly string[];
+  /** Retention for run JSON and binaries (seconds). Host/env may supply defaults when omitted. */
+  readonly prunePolicy?: WorkflowPrunePolicySpec;
+  /** Whether to keep run data after completion. Host/env may supply defaults when omitted. */
+  readonly storagePolicy?: WorkflowStoragePolicySpec;
+  /** Invoked after a node fails permanently (retries exhausted) and node error handler did not recover. */
+  readonly workflowErrorHandler?: WorkflowErrorHandlerSpec;
 }
-interface ExecutionBinaryService {
-  forNode(args: {
+interface WorkflowGraph {
+  next(nodeId: NodeId, output: OutputPortKey): ReadonlyArray<Readonly<{
     nodeId: NodeId;
-    activationId: NodeActivationId;
-  }): NodeBinaryAttachmentService;
-  openReadStream(attachment: BinaryAttachment): Promise<BinaryStorageReadResult | undefined>;
+    input: InputPortKey;
+  }>>;
 }
-interface ExecutionContext {
-  runId: RunId;
-  workflowId: WorkflowId;
-  parent?: ParentExecutionRef;
-  /** This run's subworkflow depth (0 = root). */
-  subworkflowDepth: number;
-  /** Effective activation budget cap for this run (after policy merge). */
-  engineMaxNodeActivations: number;
-  /** Effective subworkflow nesting cap for this run (after policy merge). */
-  engineMaxSubworkflowDepth: number;
-  now: () => Date;
-  data: RunDataSnapshot;
-  nodeState?: NodeExecutionStatePublisher;
-  telemetry: ExecutionTelemetry;
-  binary: ExecutionBinaryService;
-  getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
-  /** Per-item iteration id, set by {@link NodeExecutor} on the ctx passed into runnable `execute`. */
-  iterationId?: NodeIterationId;
-  /** Item index (0-based) within the current activation's batch; set alongside {@link iterationId}. */
-  itemIndex?: number;
-  /** When set, this ctx is executing inside a sub-agent triggered by the named parent invocation. */
-  parentInvocationId?: ConnectionInvocationId;
+interface WorkflowGraphFactory {
+  create(def: WorkflowDefinition): WorkflowGraph;
+}
+interface NodeConfigBase {
+  readonly kind: NodeKind;
+  readonly type: TypeToken<unknown>;
+  readonly name?: string;
+  readonly id?: NodeId;
+  readonly icon?: string;
+  readonly execution?: Readonly<{
+    hint?: "local" | "worker";
+    queue?: string;
+  }>;
+  /** In-process execute retries (runnable nodes). Triggers typically omit this. */
+  readonly retryPolicy?: RetryPolicySpec;
+  /** Recover from execute failures; return outputs to continue, or rethrow to fail the node. */
+  readonly nodeErrorHandler?: NodeErrorHandlerSpec;
   /**
-   * Present iff the run was started by a TestSuiteOrchestrator. The {@link IsTestRunNode}
-   * branches on this; assertion-emitting nodes use it to decide whether to record results.
+   * When true, edges carrying zero items on an output port still schedule single-input downstream nodes.
+   * Decided from the **source** node that produced the (empty) output. Default (false/undefined): empty
+   * main batches skip downstream execution and propagate the empty path.
    */
-  testContext?: RunTestContext;
+  readonly continueWhenEmptyOutput?: boolean;
   /**
-   * Collections registered in the codemation config, keyed by collection name.
+   * Declared I/O port names for canvas authoring (unioned with ports inferred from edges).
+   * Use for dynamic routers (Switch) and future error ports.
+   */
+  readonly declaredOutputPorts?: ReadonlyArray<OutputPortKey>;
+  readonly declaredInputPorts?: ReadonlyArray<InputPortKey>;
+  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
+  /**
+   * Marker: this node emits {@link import("./assertionTypes").AssertionResult}-shaped items on its
+   * `main` port. The TestSuiteOrchestrator (and host-side TestAssertionPersister) listen for
+   * `nodeCompleted` events from nodes with this flag set, and persist their output items as
+   * TestAssertion records (only when the run carries a `testContext`). Set on assertion node
+   * configs (e.g. `AssertionNodeConfig`, `StringEqualsAssertionNodeConfig`).
    */
-  readonly collections?: CollectionsContext;
-}
-interface ExecutionContextFactory {
-  create(args: {
-    runId: RunId;
-    workflowId: WorkflowId;
-    parent?: ParentExecutionRef;
-    policySnapshot?: PersistedRunPolicySnapshot;
-    subworkflowDepth: number;
-    engineMaxNodeActivations: number;
-    engineMaxSubworkflowDepth: number;
-    data: RunDataSnapshot;
-    nodeState?: NodeExecutionStatePublisher;
-    telemetry?: ExecutionTelemetry;
-    getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
-    testContext?: RunTestContext;
-  }): ExecutionContext;
-}
-interface NodeExecutionContext<TConfig extends NodeConfigBase = NodeConfigBase> extends ExecutionContext {
-  nodeId: NodeId;
-  activationId: NodeActivationId;
-  config: TConfig;
-  telemetry: NodeExecutionTelemetry;
-  binary: NodeBinaryAttachmentService;
-}
-interface PollingTriggerHandle {
+  readonly emitsAssertions?: true;
   /**
-   * Start the polling loop. The runtime registers its own cleanup handle so callers do not need to
-   * call {@link TriggerSetupContext.registerCleanup} for the loop.
-   * @returns The state returned by the first cycle (or `undefined` when the overlap guard fired).
+   * Static configuration summary surfaced in the workflow inspector — the design-time
+   * "what does this node do" panel that renders before any run telemetry exists.
+   *
+   * Return 2–6 short label/value pairs derived from this config (method + url for an HTTP
+   * call, model + tool list for an agent, schedule + timezone for a cron trigger, etc.).
+   * Values are truncated by the UI; aim for one line each. Return `undefined` to opt out
+   * — the inspector hides the section when no rows are produced.
+   *
+   * Implement on the config class instance so the function can read sibling config fields.
+   * `defineNode({ inspectorSummary })` plumbs through to this.
    */
-  start<TState, TItem>(args: {
-    intervalMs: number;
-    seedState?: TState;
-    runCycle: (cycleCtx: {
-      previousState: TState | undefined;
-      signal: AbortSignal;
-    }) => Promise<{
-      items: Items<TItem>;
-      nextState: TState;
-    }>;
-  }): Promise<TState | undefined>;
-  /** Convenience dedup-window helper. */
-  readonly dedup: PollingTriggerDedupWindow;
-}
-interface TriggerSetupContext<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>, TSetupState$1 extends JsonValue | undefined = TriggerNodeSetupState<TConfig>> extends ExecutionContext {
-  trigger: TriggerInstanceId;
-  config: TConfig;
-  previousState: TSetupState$1;
-  registerCleanup(cleanup: TriggerCleanupHandle): void;
-  emit(items: Items): Promise<void>;
-  /** Generic polling-trigger surface. Pre-binds trigger id, emit, and registerCleanup. */
-  readonly polling: PollingTriggerHandle;
-}
-interface TriggerTestItemsContext<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>, TSetupState$1 extends JsonValue | undefined = TriggerNodeSetupState<TConfig>> extends ExecutionContext {
-  trigger: TriggerInstanceId;
-  nodeId: NodeId;
-  config: TConfig;
-  previousState: TSetupState$1;
+  inspectorSummary?(): ReadonlyArray<NodeInspectorSummaryRow> | undefined;
 }
 /**
- * Trigger setup state is intentionally engine-owned so future ownership and
- * leader-election metadata can be coordinated centrally rather than pushed into
- * package-level setup code.
+ * One row of a node's static configuration summary. See {@link NodeConfigBase.inspectorSummary}.
  */
-interface PersistedTriggerSetupState<TState extends JsonValue | undefined = JsonValue | undefined> {
-  trigger: TriggerInstanceId;
-  updatedAt: string;
-  state: TState;
-}
-interface TriggerSetupStateRepository {
-  load(trigger: TriggerInstanceId): Promise<PersistedTriggerSetupState | undefined>;
-  save(state: PersistedTriggerSetupState): Promise<void>;
-  delete(trigger: TriggerInstanceId): Promise<void>;
-}
-interface TriggerCleanupHandle {
-  stop(): Promise<void> | void;
-}
-interface EngineHost {
-  credentialSessions: CredentialSessionService;
-  workflows?: WorkflowRunnerService;
+interface NodeInspectorSummaryRow {
+  readonly label: string;
+  readonly value: string;
 }
+declare const runnableNodeInputType: unique symbol;
+declare const runnableNodeOutputType: unique symbol;
+declare const triggerNodeOutputType: unique symbol;
 /**
- * Per-item runnable node: return JSON, an array to fan-out on `main`, an explicit `Item`, or {@link emitPorts}
- * for multi-port emission. Engine applies `inputSchema.parse(item.json)` and passes the result as `args.input`
- * (wire `item.json` is unchanged). Transform helpers may opt into binary preservation, while routers and
- * pass-through nodes should return explicit items when they need to preserve full item state.
+ * Runnable node: **`TInputJson`** is what **`inputSchema`** validates on **`item.json`** (the wire payload).
+ * **`TOutputJson`** is emitted `item.json` on outputs.
  */
-interface RunnableNodeExecuteArgs<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown> {
-  readonly input: TInputJson$1;
-  readonly item: Item;
-  readonly itemIndex: number;
-  readonly items: Items;
-  readonly ctx: NodeExecutionContext<TConfig>;
-}
-interface RunnableNode<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown, _TOutputJson = unknown> {
+interface RunnableNodeConfig<TInputJson$1 = unknown, TOutputJson$1 = unknown> extends NodeConfigBase {
   readonly kind: "node";
+  readonly [runnableNodeInputType]?: TInputJson$1;
+  readonly [runnableNodeOutputType]?: TOutputJson$1;
   /**
-   * Declared output ports (e.g. `["main"]`).
-   *
-   * Prefer describing dynamic router ports (Switch) and fixed multi-ports (If true/false)
-   * via {@link NodeConfigBase.declaredOutputPorts}. Engine defaults to `["main"]` when omitted.
+   * Optional Zod input contract for {@link RunnableNode} when not set on the node class.
+   * Resolution order: node instance `inputSchema`, then config `inputSchema`, then `z.unknown()`.
    */
-  readonly outputPorts?: ReadonlyArray<OutputPortKey>;
-  /** When omitted, engine uses {@link RunnableNodeConfig.inputSchema} or `z.unknown()`. */
   readonly inputSchema?: ZodType<TInputJson$1>;
-  execute(args: RunnableNodeExecuteArgs<TConfig, TInputJson$1>): Promise<unknown> | unknown;
+  /**
+   * When an activation receives **zero** input items, the engine normally runs `execute` zero times.
+   * Set to **`runOnce`** to run `execute` once with an empty `items` batch (and a synthetic wire item for schema parsing).
+   * Used by batch-style callback nodes (built-in `Callback`) so `callback([], ctx)` still runs.
+   */
+  readonly emptyBatchExecution?: "skip" | "runOnce";
 }
-/** @deprecated Use {@link RunnableNode} */
-type ItemNode<TConfig extends RunnableNodeConfig<any, any> = RunnableNodeConfig<any, any>, TInputJson$1 = unknown, TOutputJson$1 = unknown> = RunnableNode<TConfig, TInputJson$1, TOutputJson$1>;
-interface MultiInputNode<TConfig extends NodeConfigBase = NodeConfigBase> {
-  kind: "node";
+declare const triggerNodeSetupStateType: unique symbol;
+interface TriggerNodeConfig<TOutputJson$1 = unknown, TSetupState$1 extends JsonValue | undefined = undefined> extends NodeConfigBase {
+  readonly kind: "trigger";
+  readonly [triggerNodeOutputType]?: TOutputJson$1;
+  readonly [triggerNodeSetupStateType]?: TSetupState$1;
   /**
-   * Declared output ports (typically `["main"]`).
-   *
-   * Prefer describing ports for authoring/canvas via {@link NodeConfigBase.declaredOutputPorts}.
-   * Engine defaults to `["main"]` when omitted.
+   * Distinguishes triggers driven by the live activation policy (webhooks, cron, polling) from
+   * triggers driven only by the {@link TestSuiteOrchestrator}. `WorkflowActivation` skips
+   * `"test"` triggers; the orchestrator skips `"live"` triggers. Defaults to `"live"` when omitted.
    */
-  outputPorts?: ReadonlyArray<OutputPortKey>;
-  executeMulti(inputsByPort: NodeInputsByPort, ctx: NodeExecutionContext<TConfig>): Promise<NodeOutputs>;
+  readonly triggerKind?: "live" | "test";
 }
-type TriggerSetupStateFor<TConfig extends TriggerNodeConfig<any, any>> = TriggerNodeSetupState<TConfig>;
-interface TriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> {
-  kind: "trigger";
-  outputPorts: readonly ["main"];
-  setup(ctx: TriggerSetupContext<TConfig>): Promise<TriggerSetupStateFor<TConfig>>;
-  execute(items: Items, ctx: NodeExecutionContext<TConfig>): Promise<NodeOutputs>;
+type RunnableNodeInputJson<TConfig extends RunnableNodeConfig<any, any>> = TConfig extends RunnableNodeConfig<infer TInputJson, any> ? TInputJson : never;
+type RunnableNodeOutputJson<TConfig extends RunnableNodeConfig<any, any>> = TConfig extends RunnableNodeConfig<any, infer TOutputJson> ? TOutputJson : never;
+type TriggerNodeOutputJson<TConfig extends TriggerNodeConfig<any, any>> = TConfig extends TriggerNodeConfig<infer TOutputJson, any> ? TOutputJson : never;
+type TriggerNodeSetupState<TConfig extends TriggerNodeConfig<any, any>> = TConfig extends TriggerNodeConfig<any, infer TSetupState> ? TSetupState : never;
+interface NodeDefinition {
+  id: NodeId;
+  kind: NodeKind;
+  type: TypeToken<unknown>;
+  name?: string;
+  config: NodeConfigBase;
 }
-interface TestableTriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> extends TriggerNode<TConfig> {
-  getTestItems(ctx: TriggerTestItemsContext<TConfig>): Promise<Items>;
+interface NodeRef {
+  id: NodeId;
+  kind: NodeKind;
+  name?: string;
 }
-type ExecutableTriggerNode<TConfig extends TriggerNodeConfig<any, any> = TriggerNodeConfig<any, any>> = TriggerNode<TConfig>;
-interface NodeExecutionRequest {
+declare function nodeRef<TJson>(nodeId: NodeId): NodeIdRef<TJson>;
+type PairedItemRef = Readonly<{
+  nodeId: NodeId;
+  output: OutputPortKey;
+  itemIndex: number;
+}>;
+type BinaryPreviewKind = "image" | "audio" | "video" | "download";
+type BinaryAttachment = Readonly<{
+  id: string;
+  storageKey: string;
+  mimeType: string;
+  size: number;
+  storageDriver: string;
+  previewKind: BinaryPreviewKind;
+  createdAt: string;
   runId: RunId;
+  workflowId: WorkflowId;
+  nodeId: NodeId;
   activationId: NodeActivationId;
+  filename?: string;
+  sha256?: string;
+}>;
+type ItemBinary = Readonly<Record<string, BinaryAttachment>>;
+type Item<TJson = unknown> = Readonly<{
+  json: TJson;
+  binary?: ItemBinary;
+  meta?: Readonly<Record<string, unknown>>;
+  paired?: ReadonlyArray<PairedItemRef>;
+}>;
+type Items<TJson = unknown> = ReadonlyArray<Item<TJson>>;
+type NodeOutputs = Partial<Record<OutputPortKey, Items>>;
+type RunId = string;
+type NodeActivationId = string;
+/**
+ * One per-item iteration of a runnable node's execute loop. Refines `NodeActivationId` for
+ * per-item connection invocations and telemetry. Undefined when the executing node is a batch
+ * node or trigger that does not iterate items.
+ */
+type NodeIterationId = string;
+interface ParentExecutionRef {
+  runId: RunId;
   workflowId: WorkflowId;
   nodeId: NodeId;
-  input: Items;
-  parent?: ParentExecutionRef;
-  queue?: string;
-  executionOptions?: RunExecutionOptions;
+  /** Subworkflow depth of the **spawning** run (0 = root). Passed when starting a child run. */
+  subworkflowDepth?: number;
+  /** Effective max node activations from the parent run (propagated to child policy merge). */
+  engineMaxNodeActivations?: number;
+  /** Effective max subworkflow depth from the parent run (propagated to child policy merge). */
+  engineMaxSubworkflowDepth?: number;
+  /**
+   * Test-suite linkage inherited by the child subworkflow run. Set by whichever node
+   * spawns the subworkflow when its own `ctx.testContext` is present, so assertions
+   * emitted inside a subworkflow land under the correct parent test case.
+   */
+  testContext?: RunTestContext;
 }
-interface NodeExecutionScheduler {
-  enqueue(request: NodeExecutionRequest): Promise<{
-    receiptId: string;
-  }>;
-  cancel?(receiptId: string): Promise<void>;
+interface RunDataSnapshot {
+  getOutputs(nodeId: NodeId): NodeOutputs | undefined;
+  getOutputItems<TJson = unknown>(nodeId: NodeId | NodeIdRef<TJson>, output?: OutputPortKey): Items<TJson>;
+  getOutputItem<TJson = unknown>(nodeId: NodeId | NodeIdRef<TJson>, itemIndex: number, output?: OutputPortKey): Item<TJson> | undefined;
 }
-interface NodeExecutionRequestHandler {
-  handleNodeExecutionRequest(request: NodeExecutionRequest): Promise<void>;
+interface MutableRunData extends RunDataSnapshot {
+  setOutputs(nodeId: NodeId, outputs: NodeOutputs): void;
+  dump(): Record<NodeId, NodeOutputs>;
 }
-type NodeActivationRequestBase = Readonly<{
-  runId: RunId;
-  activationId: NodeActivationId;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  parent?: ParentExecutionRef;
-  executionOptions?: RunExecutionOptions;
-  batchId?: string;
-  ctx: NodeExecutionContext;
-}>;
-type NodeActivationRequest = (NodeActivationRequestBase & Readonly<{
-  kind: "single";
-  input: Items;
-}>) | (NodeActivationRequestBase & Readonly<{
-  kind: "multi";
-  inputsByPort: NodeInputsByPort;
-}>);
-interface NodeActivationReceipt {
-  receiptId: string;
-  mode?: "local" | "worker";
-  queue?: string;
+interface RunDataFactory {
+  create(initial?: Record<NodeId, NodeOutputs>): MutableRunData;
+}
+interface RunIdFactory {
+  makeRunId(): RunId;
 }
-interface PreparedNodeActivationDispatch {
-  readonly receipt: NodeActivationReceipt;
-  dispatch(): Promise<void>;
+interface ActivationIdFactory {
+  makeActivationId(): NodeActivationId;
 }
-interface NodeActivationContinuation {
-  markNodeRunning(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    inputsByPort: NodeInputsByPort;
-  }): Promise<void>;
-  resumeFromNodeResult(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    outputs: NodeOutputs;
-  }): Promise<RunResult>;
-  resumeFromNodeError(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
+type UpstreamRefPlaceholder = `$${number}`;
+declare const branchRef: (index: number) => UpstreamRefPlaceholder;
+type ExecutionMode = "local" | "worker";
+interface NodeSchedulerDecision {
+  mode: ExecutionMode;
+  queue?: string;
+}
+interface NodeOffloadPolicy {
+  decide(args: {
+    workflowId: WorkflowId;
     nodeId: NodeId;
-    error: Error;
-  }): Promise<RunResult>;
+    config: NodeConfigBase;
+  }): NodeSchedulerDecision;
 }
-interface NodeActivationScheduler {
-  setContinuation?(continuation: NodeActivationContinuation): void;
-  prepareDispatch(request: NodeActivationRequest): Promise<PreparedNodeActivationDispatch>;
-  cancel?(receiptId: string): Promise<void>;
+/** Whether to persist run execution data after the workflow finishes. */
+type WorkflowStoragePolicyMode = "ALL" | "SUCCESS" | "ERROR" | "NEVER";
+type WorkflowStoragePolicySpec = WorkflowStoragePolicyMode | TypeToken<WorkflowStoragePolicyResolver>;
+interface WorkflowStoragePolicyResolver {
+  shouldPersist(args: WorkflowStoragePolicyDecisionArgs): boolean | Promise<boolean>;
 }
-interface WorkflowNodeInstanceFactory {
-  createNodes(workflow: WorkflowDefinition): ReadonlyMap<NodeId, unknown>;
-  createByType(type: TypeToken<unknown>): unknown;
+interface WorkflowStoragePolicyDecisionArgs {
+  readonly runId: RunId;
+  readonly workflowId: WorkflowId;
+  readonly workflow: WorkflowDefinition;
+  readonly finalStatus: "completed" | "failed";
+  readonly startedAt: string;
+  readonly finishedAt: string;
 }
-interface NodeExecutor {
-  execute(request: NodeActivationRequest): Promise<NodeOutputs>;
+interface WorkflowPrunePolicySpec {
+  readonly runDataRetentionSeconds?: number;
+  readonly binaryRetentionSeconds?: number;
+  readonly telemetrySpanRetentionSeconds?: number;
+  readonly telemetryArtifactRetentionSeconds?: number;
+  readonly telemetryMetricRetentionSeconds?: number;
 }
-interface WorkflowSnapshotFactory {
-  create(workflow: WorkflowDefinition): PersistedWorkflowSnapshot;
+interface PersistedRunPolicySnapshot {
+  readonly retentionSeconds?: number;
+  readonly binaryRetentionSeconds?: number;
+  readonly telemetrySpanRetentionSeconds?: number;
+  readonly telemetryArtifactRetentionSeconds?: number;
+  readonly telemetryMetricRetentionSeconds?: number;
+  readonly storagePolicy: WorkflowStoragePolicyMode;
 }
-interface WorkflowSnapshotResolver {
-  resolve(args: {
-    workflowId: WorkflowId;
-    workflowSnapshot?: PersistedWorkflowSnapshot;
-  }): WorkflowDefinition | undefined;
+interface WorkflowErrorHandler {
+  onError(ctx: WorkflowErrorContext): void | Promise<void>;
 }
-/** Optional host wiring for trigger lifecycle logs (boot skip + activation sync). */
-interface TriggerRuntimeDiagnostics {
-  info(message: string): void;
-  warn(message: string): void;
+interface WorkflowErrorContext {
+  readonly runId: RunId;
+  readonly workflowId: WorkflowId;
+  readonly workflow: WorkflowDefinition;
+  readonly failedNodeId: NodeId;
+  readonly error: Error;
+  readonly startedAt: string;
+  readonly finishedAt: string;
 }
-interface EngineDeps {
-  credentialSessions: CredentialSessionService;
-  liveWorkflowRepository: LiveWorkflowRepository;
-  workflowRepository: WorkflowRepository;
-  /** When {@link AllWorkflowsActiveWorkflowActivationPolicy}, all workflows behave as active (tests). */
-  workflowActivationPolicy: WorkflowActivationPolicy;
-  nodeResolver: NodeResolver;
-  triggerSetupStateRepository: TriggerSetupStateRepository;
-  webhookTriggerMatcher: WebhookTriggerMatcher;
-  runIdFactory: RunIdFactory;
-  activationIdFactory: ActivationIdFactory;
-  workflowExecutionRepository: WorkflowExecutionRepository;
-  activationScheduler: NodeActivationScheduler;
-  runDataFactory: RunDataFactory;
-  executionContextFactory: ExecutionContextFactory;
-  executionTelemetryFactory?: ExecutionTelemetryFactory;
-  nodeExecutor: NodeExecutor;
-  eventBus?: RunEventBus;
-  tokenRegistry: PersistedWorkflowTokenRegistryLike;
-  workflowNodeInstanceFactory: WorkflowNodeInstanceFactory;
-  /** Defaults for prune/storage snapshot when workflow omits explicit policy fields. */
-  workflowPolicyRuntimeDefaults?: WorkflowPolicyRuntimeDefaults;
-  /** When set, logs inactive-workflow skips at boot and trigger start/stop on activation changes. */
-  triggerRuntimeDiagnostics?: TriggerRuntimeDiagnostics;
-  /** When set, the polling-trigger runtime uses this logger for cycle info/debug/error. */
-  pollingTriggerLogger?: PollingTriggerLogger;
+type WorkflowErrorHandlerSpec = TypeToken<WorkflowErrorHandler> | WorkflowErrorHandler;
+interface NodeErrorHandlerArgs<TConfig extends NodeConfigBase = NodeConfigBase> {
+  readonly kind: "single" | "multi";
+  readonly items: Items;
+  readonly inputsByPort: Readonly<Record<InputPortKey, Items>> | undefined;
+  readonly ctx: NodeExecutionContext<TConfig>;
+  readonly error: Error;
+}
+interface NodeErrorHandler {
+  handle<TConfig extends NodeConfigBase>(args: NodeErrorHandlerArgs<TConfig>): Promise<NodeOutputs>;
+}
+type NodeErrorHandlerSpec = TypeToken<NodeErrorHandler> | NodeErrorHandler;
+/** Runtime defaults when workflow omits prune/storage fields (typically from host env). */
+interface WorkflowPolicyRuntimeDefaults {
+  readonly retentionSeconds?: number;
+  readonly binaryRetentionSeconds?: number;
+  readonly telemetrySpanRetentionSeconds?: number;
+  readonly telemetryArtifactRetentionSeconds?: number;
+  readonly telemetryMetricRetentionSeconds?: number;
+  readonly storagePolicy?: WorkflowStoragePolicyMode;
 }
 //#endregion
-//#region src/contracts/retryPolicySpec.types.d.ts
+//#region src/contracts/testTriggerTypes.d.ts
 /**
- * In-process retry policy for runnable nodes. Serialized configs use the same
- * `kind` discriminator (`JSON.stringify` / persisted workflows).
+ * Identifier minted by the host (or in-memory test runner) for one execution of a test suite.
+ * One TestSuiteRun produces N child workflow runs, one per item yielded by `generateItems`.
+ */
+type TestSuiteRunId = string;
+/**
+ * Setup context passed to a {@link TestTriggerNodeConfig.generateItems} callback. Distinct from
+ * {@link import("./runtimeTypes").TriggerSetupContext} on purpose: test triggers are not
+ * activated by the live trigger lifecycle (webhooks, cron, polling) and never call `emit` —
+ * the orchestrator pulls from the iterable they return and dispatches one run per item.
+ */
+interface TestTriggerSetupContext<TConfig extends TestTriggerNodeConfig<unknown> = TestTriggerNodeConfig<unknown>> {
+  readonly workflowId: WorkflowId;
+  readonly nodeId: NodeId;
+  readonly config: TConfig;
+  readonly testSuiteRunId: TestSuiteRunId;
+  /**
+   * Resolves a credential session for a slot declared on this trigger's
+   * {@link import("./workflowTypes").NodeConfigBase.getCredentialRequirements}. Same contract as
+   * {@link import("./runtimeTypes").ExecutionContext.getCredential}.
+   */
+  getCredential<TSession = unknown>(slotKey: string): Promise<TSession>;
+  /** AbortSignal raised when the suite is cancelled — long-running pulls should bail out. */
+  readonly signal: AbortSignal;
+}
+/**
+ * A trigger config that emits **test cases**. Each item yielded by {@link generateItems}
+ * becomes one workflow run (with `executionOptions.testContext` set), so 10 yielded items
+ * → 10 runs marked under the same TestSuiteRun.
  *
- * `maxAttempts` is the total number of tries including the first (e.g. 3 means up to 2 delays after failures).
+ * The trigger is otherwise a normal {@link TriggerNodeConfig} (so the canvas treats it like
+ * any other trigger), but its `triggerKind` is `"test"` so the live activation policy skips it.
  */
-type RetryPolicySpec = NoneRetryPolicySpec | FixedRetryPolicySpec | ExponentialRetryPolicySpec;
-interface NoneRetryPolicySpec {
-  readonly kind: "none";
+interface TestTriggerNodeConfig<TOutputJson$1 = unknown> extends TriggerNodeConfig<TOutputJson$1, undefined> {
+  readonly triggerKind: "test";
+  /**
+   * Author-supplied async iterable of items, evaluated lazily. Implementations may fetch from
+   * credentialed APIs, read fixture files, or yield hard-coded items. The orchestrator iterates
+   * and dispatches one run per item, with concurrency capped by {@link concurrency} (default 4).
+   */
+  generateItems(ctx: TestTriggerSetupContext<TestTriggerNodeConfig<TOutputJson$1>>): AsyncIterable<Item<TOutputJson$1>>;
+  /** Per-suite-run cap on simultaneously-executing test cases. Default: 4. */
+  readonly concurrency?: number;
+  /**
+   * Free-form description of where the test cases come from — surfaced in the node properties
+   * panel and the suite-detail header so authors revisiting the workflow six months later
+   * remember which mailbox / folder / fixture file the cases originate from.
+   *
+   * Example: `"All emails in the Gmail label \"test/triage-fixtures\" — 14 messages as of 2026-05-03."`
+   */
+  readonly description?: string;
+  /**
+   * Resolves a human-readable label for one yielded test case (e.g. email subject). The
+   * orchestrator calls this once per yielded item, persists the result on the run, and the
+   * Tests-tab UI uses it to render the case row instead of the opaque runId. Return
+   * `undefined` to fall back to "Case #N".
+   */
+  caseLabel?(item: Item<TOutputJson$1>): string | undefined;
 }
-interface FixedRetryPolicySpec {
-  readonly kind: "fixed";
-  /** Total attempts including the first execution. Must be >= 1. */
-  readonly maxAttempts: number;
-  readonly delayMs: number;
+//#endregion
+//#region src/events/runEvents.d.ts
+/**
+ * Outcome of a single test case (one workflow run dispatched by the test-suite orchestrator).
+ * - `running`: workflow still in flight
+ * - `succeeded`: workflow completed AND all assertions passed (or no assertions)
+ * - `failed`: workflow failed OR (workflow completed but ≥1 assertion failed)
+ * - `errored` / `cancelled`: workflow itself errored or was cancelled
+ */
+type TestCaseRunStatus = "running" | "succeeded" | "failed" | "errored" | "cancelled";
+/** Aggregate outcome of a TestSuiteRun. */
+type TestSuiteRunStatus = "succeeded" | "failed" | "partial" | "errored" | "cancelled";
+type RunEvent = Readonly<{
+  kind: "runCreated";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+}> | Readonly<{
+  kind: "runSaved";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  state: PersistedRunState;
+}> | Readonly<{
+  kind: "nodeQueued";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  snapshot: NodeExecutionSnapshot;
+}> | Readonly<{
+  kind: "nodeStarted";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  snapshot: NodeExecutionSnapshot;
+}> | Readonly<{
+  kind: "nodeCompleted";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  snapshot: NodeExecutionSnapshot;
+}> | Readonly<{
+  kind: "nodeFailed";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  snapshot: NodeExecutionSnapshot;
+}> | Readonly<{
+  kind: "connectionInvocationStarted";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  record: ConnectionInvocationRecord;
+}> | Readonly<{
+  kind: "connectionInvocationCompleted";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  record: ConnectionInvocationRecord;
+}> | Readonly<{
+  kind: "connectionInvocationFailed";
+  runId: RunId;
+  workflowId: WorkflowId;
+  parent?: ParentExecutionRef;
+  at: string;
+  record: ConnectionInvocationRecord;
+}> | Readonly<{
+  kind: "testSuiteStarted";
+  testSuiteRunId: TestSuiteRunId;
+  workflowId: WorkflowId;
+  triggerNodeId: string;
+  triggerNodeName?: string;
+  concurrency: number;
+  at: string;
+}> | Readonly<{
+  kind: "testSuiteFinished";
+  testSuiteRunId: TestSuiteRunId;
+  workflowId: WorkflowId;
+  status: TestSuiteRunStatus;
+  totalCases: number;
+  passedCases: number;
+  failedCases: number;
+  at: string;
+}> | Readonly<{
+  kind: "testCaseStarted";
+  testSuiteRunId: TestSuiteRunId;
+  testCaseIndex: number;
+  runId: RunId;
+  workflowId: WorkflowId;
+  testCaseLabel?: string;
+  at: string;
+}> | Readonly<{
+  kind: "testCaseCompleted";
+  testSuiteRunId: TestSuiteRunId;
+  testCaseIndex: number;
+  runId: RunId;
+  workflowId: WorkflowId;
+  status: TestCaseRunStatus;
+  at: string;
+}>;
+interface RunEventSubscription {
+  close(): Promise<void>;
 }
-interface ExponentialRetryPolicySpec {
-  readonly kind: "exponential";
-  /** Total attempts including the first execution. Must be >= 1. */
-  readonly maxAttempts: number;
-  readonly initialDelayMs: number;
-  readonly multiplier: number;
-  readonly maxDelayMs?: number;
-  /** When true, each delay is multiplied by a random factor in [1, 1.2). */
-  readonly jitter?: boolean;
+interface RunEventBus {
+  publish(event: RunEvent): Promise<void>;
+  subscribe(onEvent: (event: RunEvent) => void): Promise<RunEventSubscription>;
+  subscribeToWorkflow(workflowId: WorkflowId, onEvent: (event: RunEvent) => void): Promise<RunEventSubscription>;
 }
 //#endregion
-//#region src/contracts/workflowTypes.d.ts
-type NodeIdRef<TJson = unknown> = NodeId & Readonly<{
-  __codemationNodeJson?: TJson;
-}>;
-type NodeKind = "trigger" | "node";
-type JsonPrimitive = string | number | boolean | null;
-interface JsonObject {
-  readonly [key: string]: JsonValue;
-}
-type JsonValue = JsonPrimitive | JsonObject | JsonArray;
-type JsonArray = ReadonlyArray<JsonValue>;
-/** JSON value that is not a top-level array (nested arrays inside objects are allowed). */
-type JsonNonArray = JsonPrimitive | JsonObject;
-interface Edge {
-  from: {
-    nodeId: NodeId;
-    output: OutputPortKey;
-  };
-  to: {
-    nodeId: NodeId;
-    input: InputPortKey;
-  };
+//#region src/policies/executionLimits/EngineExecutionLimitsPolicy.d.ts
+interface EngineExecutionLimitsPolicyConfig {
+  readonly defaultMaxNodeActivations: number;
+  readonly hardMaxNodeActivations: number;
+  readonly defaultMaxSubworkflowDepth: number;
+  readonly hardMaxSubworkflowDepth: number;
 }
+/** Framework defaults for {@link EngineExecutionLimitsPolicy} (merged with host `runtime.engineExecutionLimits`). */
+declare const ENGINE_EXECUTION_LIMITS_DEFAULTS: EngineExecutionLimitsPolicyConfig;
 /**
- * Named connection from a parent node to child nodes that exist in {@link WorkflowDefinition.nodes}
- * but are not traversed by the main execution graph. Parents are commonly executable nodes, but may
- * also be connection-owned nodes for recursive agent attachments.
+ * Resolves per-run execution limits: defaults, hard ceilings, and subworkflow depth for new runs.
  */
-interface WorkflowNodeConnection {
-  readonly parentNodeId: NodeId;
-  readonly connectionName: NodeConnectionName;
-  readonly childNodeIds: ReadonlyArray<NodeId>;
-}
-interface WorkflowDefinition {
-  id: WorkflowId;
-  name: string;
-  nodes: NodeDefinition[];
-  edges: Edge[];
+declare class EngineExecutionLimitsPolicy {
+  private readonly config;
+  constructor(config?: EngineExecutionLimitsPolicyConfig);
   /**
-   * Optional metadata: which nodes are connection-owned children (e.g. AI agent `llm` / `tools` slots).
-   * When omitted, all nodes in {@link nodes} are treated as executable for topology.
+   * Effective options for a new root run (depth 0): defaults merged with engine ceilings.
+   * Replaces a separate one-method factory for root-run bootstrap.
    */
-  readonly connections?: ReadonlyArray<WorkflowNodeConnection>;
-  /** Directory + file-stem path under a workflow discovery root (for UI grouping only). */
-  discoveryPathSegments?: readonly string[];
-  /** Retention for run JSON and binaries (seconds). Host/env may supply defaults when omitted. */
-  readonly prunePolicy?: WorkflowPrunePolicySpec;
-  /** Whether to keep run data after completion. Host/env may supply defaults when omitted. */
-  readonly storagePolicy?: WorkflowStoragePolicySpec;
-  /** Invoked after a node fails permanently (retries exhausted) and node error handler did not recover. */
-  readonly workflowErrorHandler?: WorkflowErrorHandlerSpec;
-}
-interface WorkflowGraph {
-  next(nodeId: NodeId, output: OutputPortKey): ReadonlyArray<Readonly<{
-    nodeId: NodeId;
-    input: InputPortKey;
-  }>>;
-}
-interface WorkflowGraphFactory {
-  create(def: WorkflowDefinition): WorkflowGraph;
+  createRootExecutionOptions(): RunExecutionOptions;
+  mergeExecutionOptionsForNewRun(parent: ParentExecutionRef | undefined, user: RunExecutionOptions | undefined): RunExecutionOptions;
+  private capNumber;
 }
-interface NodeConfigBase {
-  readonly kind: NodeKind;
-  readonly type: TypeToken<unknown>;
-  readonly name?: string;
-  readonly id?: NodeId;
-  readonly icon?: string;
-  readonly execution?: Readonly<{
-    hint?: "local" | "worker";
-    queue?: string;
-  }>;
-  /** In-process execute retries (runnable nodes). Triggers typically omit this. */
-  readonly retryPolicy?: RetryPolicySpec;
-  /** Recover from execute failures; return outputs to continue, or rethrow to fail the node. */
-  readonly nodeErrorHandler?: NodeErrorHandlerSpec;
-  /**
-   * When true, edges carrying zero items on an output port still schedule single-input downstream nodes.
-   * Decided from the **source** node that produced the (empty) output. Default (false/undefined): empty
-   * main batches skip downstream execution and propagate the empty path.
-   */
-  readonly continueWhenEmptyOutput?: boolean;
-  /**
-   * Declared I/O port names for canvas authoring (unioned with ports inferred from edges).
-   * Use for dynamic routers (Switch) and future error ports.
-   */
-  readonly declaredOutputPorts?: ReadonlyArray<OutputPortKey>;
-  readonly declaredInputPorts?: ReadonlyArray<InputPortKey>;
-  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
+//#endregion
+//#region src/di/CoreTokens.d.ts
+declare const CoreTokens: {
+  readonly PersistedWorkflowTokenRegistry: TypeToken<PersistedWorkflowTokenRegistryLike>;
+  readonly CredentialSessionService: TypeToken<CredentialSessionService>;
+  readonly CredentialTypeRegistry: TypeToken<CredentialTypeRegistry>;
+  readonly WorkflowRunnerService: TypeToken<WorkflowRunnerService>;
+  readonly LiveWorkflowRepository: TypeToken<LiveWorkflowRepository>;
+  readonly WorkflowRepository: TypeToken<WorkflowRepository>;
+  readonly NodeResolver: TypeToken<NodeResolver>;
+  readonly WorkflowNodeInstanceFactory: TypeToken<WorkflowNodeInstanceFactory>;
+  readonly RunIdFactory: TypeToken<RunIdFactory>;
+  readonly ActivationIdFactory: TypeToken<ActivationIdFactory>;
+  readonly WorkflowExecutionRepository: TypeToken<WorkflowExecutionRepository>;
+  readonly TriggerSetupStateRepository: TypeToken<TriggerSetupStateRepository>;
+  readonly NodeActivationScheduler: TypeToken<NodeActivationScheduler>;
+  readonly RunDataFactory: TypeToken<RunDataFactory>;
+  readonly ExecutionContextFactory: TypeToken<ExecutionContextFactory>;
+  readonly RunEventBus: TypeToken<RunEventBus>;
+  readonly BinaryStorage: TypeToken<BinaryStorage>;
+  readonly WebhookBasePath: TypeToken<string>;
+  /** Engine execution limits (defaults + optional host overrides). Consumers may bind a custom instance to override. */
+  readonly EngineExecutionLimitsPolicy: TypeToken<EngineExecutionLimitsPolicy>;
+  readonly WorkflowActivationPolicy: TypeToken<WorkflowActivationPolicy>;
   /**
-   * Marker: this node emits {@link import("./assertionTypes").AssertionResult}-shaped items on its
-   * `main` port. The TestSuiteOrchestrator (and host-side TestAssertionPersister) listen for
-   * `nodeCompleted` events from nodes with this flag set, and persist their output items as
-   * TestAssertion records (only when the run carries a `testContext`). Set on assertion node
-   * configs (e.g. `AssertionNodeConfig`, `StringEqualsAssertionNodeConfig`).
+   * Optional. When registered, AIAgentNode uses it to resolve mcpServers bindings,
+   * validate scopes, open pool connections, and prepare the MCP ToolSet map.
+   * Not registered in the default core bootstrap — the host provides the implementation.
    */
-  readonly emitsAssertions?: true;
-}
-declare const runnableNodeInputType: unique symbol;
-declare const runnableNodeOutputType: unique symbol;
-declare const triggerNodeOutputType: unique symbol;
+  readonly AgentMcpIntegration: TypeToken<AgentMcpIntegration>;
+};
+//#endregion
+//#region src/contracts/runTypes.d.ts
 /**
- * Runnable node: **`TInputJson`** is what **`inputSchema`** validates on **`item.json`** (the wire payload).
- * **`TOutputJson`** is emitted `item.json` on outputs.
+ * Test-suite linkage for a run. When set, this run was started by a TestSuiteOrchestrator
+ * as one test case inside a TestSuiteRun. The `IsTestRun` node and host-side persisters key
+ * off the presence of this field. Subworkflow runs inherit it from their parent run.
  */
-interface RunnableNodeConfig<TInputJson$1 = unknown, TOutputJson$1 = unknown> extends NodeConfigBase {
-  readonly kind: "node";
-  readonly [runnableNodeInputType]?: TInputJson$1;
-  readonly [runnableNodeOutputType]?: TOutputJson$1;
-  /**
-   * Optional Zod input contract for {@link RunnableNode} when not set on the node class.
-   * Resolution order: node instance `inputSchema`, then config `inputSchema`, then `z.unknown()`.
-   */
-  readonly inputSchema?: ZodType<TInputJson$1>;
+interface RunTestContext {
+  readonly testSuiteRunId: string;
+  readonly testCaseIndex: number;
   /**
-   * When an activation receives **zero** input items, the engine normally runs `execute` zero times.
-   * Set to **`runOnce`** to run `execute` once with an empty `items` batch (and a synthetic wire item for schema parsing).
-   * Used by batch-style callback nodes (built-in `Callback`) so `callback([], ctx)` still runs.
+   * Optional human-friendly label for this test case (e.g. an email subject when fixtures
+   * are loaded from a mailbox). Resolved per item by `TestTrigger.caseLabel(item)` if set,
+   * persisted on `Run.test_case_label` so the Tests-tab tree-table can show "RFQ for batch 14"
+   * instead of "run_1777755971399_bbb86beac1396".
    */
-  readonly emptyBatchExecution?: "skip" | "runOnce";
+  readonly testCaseLabel?: string;
+}
+interface RunExecutionOptions {
+  /** Run-intent override: force the inline scheduler and bypass node-level offload decisions. */
+  localOnly?: boolean;
+  /** Marks runs started from webhook handling so orchestration can apply webhook-specific continuation rules. */
+  webhook?: boolean;
+  mode?: "manual" | "debug";
+  sourceWorkflowId?: WorkflowId;
+  sourceRunId?: RunId;
+  derivedFromRunId?: RunId;
+  isMutable?: boolean;
+  /** Set by the engine for this run: 0 = root, 1 = first child subworkflow, … */
+  subworkflowDepth?: number;
+  /** Effective cap after engine policy merge (successful node completions per run). */
+  maxNodeActivations?: number;
+  /** Effective cap after engine policy merge (subworkflow nesting). */
+  maxSubworkflowDepth?: number;
+  /** Present iff started by a TestSuiteOrchestrator; propagates to subworkflow runs via {@link ParentExecutionRef.testContext}. */
+  testContext?: RunTestContext;
+}
+/** Engine-owned counters persisted with the run (worker-safe). */
+interface EngineRunCounters {
+  completedNodeActivations: number;
 }
-declare const triggerNodeSetupStateType: unique symbol;
-interface TriggerNodeConfig<TOutputJson$1 = unknown, TSetupState$1 extends JsonValue | undefined = undefined> extends NodeConfigBase {
-  readonly kind: "trigger";
-  readonly [triggerNodeOutputType]?: TOutputJson$1;
-  readonly [triggerNodeSetupStateType]?: TSetupState$1;
-  /**
-   * Distinguishes triggers driven by the live activation policy (webhooks, cron, polling) from
-   * triggers driven only by the {@link TestSuiteOrchestrator}. `WorkflowActivation` skips
-   * `"test"` triggers; the orchestrator skips `"live"` triggers. Defaults to `"live"` when omitted.
-   */
-  readonly triggerKind?: "live" | "test";
+type RunStopCondition = Readonly<{
+  kind: "workflowCompleted";
+}> | Readonly<{
+  kind: "nodeCompleted";
+  nodeId: NodeId;
+}>;
+interface RunStateResetRequest {
+  clearFromNodeId: NodeId;
 }
-type RunnableNodeInputJson<TConfig extends RunnableNodeConfig<any, any>> = TConfig extends RunnableNodeConfig<infer TInputJson, any> ? TInputJson : never;
-type RunnableNodeOutputJson<TConfig extends RunnableNodeConfig<any, any>> = TConfig extends RunnableNodeConfig<any, infer TOutputJson> ? TOutputJson : never;
-type TriggerNodeOutputJson<TConfig extends TriggerNodeConfig<any, any>> = TConfig extends TriggerNodeConfig<infer TOutputJson, any> ? TOutputJson : never;
-type TriggerNodeSetupState<TConfig extends TriggerNodeConfig<any, any>> = TConfig extends TriggerNodeConfig<any, infer TSetupState> ? TSetupState : never;
-interface NodeDefinition {
-  id: NodeId;
-  kind: NodeKind;
-  type: TypeToken<unknown>;
-  name?: string;
-  config: NodeConfigBase;
+interface PersistedRunControlState {
+  stopCondition?: RunStopCondition;
 }
-interface NodeRef {
+interface PersistedWorkflowSnapshotNode {
   id: NodeId;
   kind: NodeKind;
   name?: string;
+  nodeTokenId: PersistedTokenId;
+  configTokenId: PersistedTokenId;
+  tokenName?: string;
+  configTokenName?: string;
+  config: unknown;
+  /** Pre-computed static configuration summary; populated by WorkflowSnapshotCodec. */
+  inspectorSummary?: ReadonlyArray<Readonly<{
+    label: string;
+    value: string;
+  }>>;
 }
-declare function nodeRef<TJson>(nodeId: NodeId): NodeIdRef<TJson>;
-type PairedItemRef = Readonly<{
+interface PersistedWorkflowSnapshot {
+  id: WorkflowId;
+  name: string;
+  nodes: ReadonlyArray<PersistedWorkflowSnapshotNode>;
+  edges: ReadonlyArray<Edge>;
+  /** When the snapshot was built from a live workflow definition that configured a workflow error handler. */
+  workflowErrorHandlerConfigured?: boolean;
+  /** Connection metadata for child nodes not in the execution graph (e.g. AI agent attachments). */
+  connections?: ReadonlyArray<WorkflowNodeConnection>;
+}
+type PinnedNodeOutputsByPort = Readonly<Record<OutputPortKey, Items>>;
+interface PersistedMutableNodeState {
+  pinnedOutputsByPort?: PinnedNodeOutputsByPort;
+  lastDebugInput?: Items;
+}
+interface PersistedMutableRunState {
+  nodesById: Readonly<Record<NodeId, PersistedMutableNodeState>>;
+}
+type NodeInputsByPort = Readonly<Record<InputPortKey, Items>>;
+interface RunQueueEntry {
   nodeId: NodeId;
-  output: OutputPortKey;
-  itemIndex: number;
-}>;
-type BinaryPreviewKind = "image" | "audio" | "video" | "download";
-type BinaryAttachment = Readonly<{
-  id: string;
-  storageKey: string;
-  mimeType: string;
-  size: number;
-  storageDriver: string;
-  previewKind: BinaryPreviewKind;
-  createdAt: string;
+  input: Items;
+  toInput?: InputPortKey;
+  batchId?: string;
+  from?: Readonly<{
+    nodeId: NodeId;
+    output: OutputPortKey;
+  }>;
+  collect?: Readonly<{
+    expectedInputs: ReadonlyArray<InputPortKey>;
+    received: Readonly<Record<InputPortKey, Items>>;
+  }>;
+}
+type NodeExecutionStatus = "pending" | "queued" | "running" | "completed" | "failed" | "skipped";
+interface NodeExecutionError {
+  message: string;
+  name?: string;
+  stack?: string;
+  details?: JsonValue;
+}
+interface NodeExecutionSnapshot {
   runId: RunId;
   workflowId: WorkflowId;
   nodeId: NodeId;
-  activationId: NodeActivationId;
-  filename?: string;
-  sha256?: string;
-}>;
-type ItemBinary = Readonly<Record<string, BinaryAttachment>>;
-type Item<TJson = unknown> = Readonly<{
-  json: TJson;
-  binary?: ItemBinary;
-  meta?: Readonly<Record<string, unknown>>;
-  paired?: ReadonlyArray<PairedItemRef>;
-}>;
-type Items<TJson = unknown> = ReadonlyArray<Item<TJson>>;
-type NodeOutputs = Partial<Record<OutputPortKey, Items>>;
-type RunId = string;
-type NodeActivationId = string;
+  activationId?: NodeActivationId;
+  parent?: ParentExecutionRef;
+  status: NodeExecutionStatus;
+  usedPinnedOutput?: boolean;
+  queuedAt?: string;
+  startedAt?: string;
+  finishedAt?: string;
+  updatedAt: string;
+  inputsByPort?: NodeInputsByPort;
+  outputs?: NodeOutputs;
+  error?: NodeExecutionError;
+  /**
+   * When the node is a SubWorkflow invocation, the run id of the child run it spawned.
+   * Populated after the child run completes so the UI can deep-link to that specific execution.
+   */
+  childRunId?: RunId;
+}
+/** Stable id for a single connection invocation row in {@link ConnectionInvocationRecord}. */
+type ConnectionInvocationId = string;
 /**
- * One per-item iteration of a runnable node's execute loop. Refines `NodeActivationId` for
- * per-item connection invocations and telemetry. Undefined when the executing node is a batch
- * node or trigger that does not iterate items.
+ * One logical LLM or tool call under an owning workflow node (e.g. AI agent).
+ * The owning node defines what {@link managedInput} and {@link managedOutput} contain.
  */
-type NodeIterationId = string;
-interface ParentExecutionRef {
+interface ConnectionInvocationRecord {
+  readonly invocationId: ConnectionInvocationId;
+  readonly runId: RunId;
+  readonly workflowId: WorkflowId;
+  readonly connectionNodeId: NodeId;
+  readonly parentAgentNodeId: NodeId;
+  readonly parentAgentActivationId: NodeActivationId;
+  readonly status: NodeExecutionStatus;
+  readonly managedInput?: JsonValue;
+  readonly managedOutput?: JsonValue;
+  /** Short human-readable description of what this invocation is doing right now (e.g. `"calling search_messages"`). Rendered as a sub-line on the canvas node card. */
+  readonly statusLabel?: string;
+  /** Stable identifier for the thing this invocation acts on (e.g. an MCP tool name like `"search_messages"`). Persists across status transitions so the inspector can show it on completed/failed entries too. Connection nodes that ARE the tool (e.g. node-backed agent tools) leave this unset — the parent node id already identifies the subject. */
+  readonly subjectName?: string;
+  readonly error?: NodeExecutionError;
+  readonly queuedAt?: string;
+  readonly startedAt?: string;
+  readonly finishedAt?: string;
+  readonly updatedAt: string;
+  /** Per-item iteration id minted by the engine when this invocation occurred inside a runnable node's per-item loop. */
+  readonly iterationId?: NodeIterationId;
+  /** Item index (0-based) of the iteration that produced this invocation. */
+  readonly itemIndex?: number;
+  /** When set, this invocation was produced inside a sub-agent triggered by the named parent invocation. */
+  readonly parentInvocationId?: ConnectionInvocationId;
+}
+/** Arguments for appending a {@link ConnectionInvocationRecord} (engine fills run/workflow ids and timestamps). */
+type ConnectionInvocationAppendArgs = Readonly<{
+  invocationId: ConnectionInvocationId;
+  connectionNodeId: NodeId;
+  parentAgentNodeId: NodeId;
+  parentAgentActivationId: NodeActivationId;
+  status: NodeExecutionStatus;
+  managedInput?: JsonValue;
+  managedOutput?: JsonValue;
+  statusLabel?: string;
+  subjectName?: string;
+  error?: NodeExecutionError;
+  queuedAt?: string;
+  startedAt?: string;
+  finishedAt?: string;
+  iterationId?: NodeIterationId;
+  itemIndex?: number;
+  parentInvocationId?: ConnectionInvocationId;
+}>;
+interface RunCurrentState {
+  outputsByNode: Record<NodeId, NodeOutputs>;
+  nodeSnapshotsByNodeId: Record<NodeId, NodeExecutionSnapshot>;
+  /** Append-only history of connection-scoped invocations (LLM/tool) for inspector and canvas. */
+  connectionInvocations?: ReadonlyArray<ConnectionInvocationRecord>;
+  mutableState?: PersistedMutableRunState;
+}
+interface CurrentStateExecutionRequest {
+  workflow: WorkflowDefinition;
+  items?: Items;
+  parent?: ParentExecutionRef;
+  executionOptions?: RunExecutionOptions;
+  workflowSnapshot?: PersistedWorkflowSnapshot;
+  mutableState?: PersistedMutableRunState;
+  currentState?: RunCurrentState;
+  stopCondition?: RunStopCondition;
+  reset?: RunStateResetRequest;
+}
+interface ExecutionFrontierPlan {
+  rootNodeId?: NodeId;
+  rootNodeInput?: Items;
+  queue: RunQueueEntry[];
+  currentState: RunCurrentState;
+  stopCondition: RunStopCondition;
+  satisfiedNodeIds: ReadonlyArray<NodeId>;
+  skippedNodeIds: ReadonlyArray<NodeId>;
+  clearedNodeIds: ReadonlyArray<NodeId>;
+  preservedPinnedNodeIds: ReadonlyArray<NodeId>;
+}
+type RunStatus = "running" | "pending" | "completed" | "failed";
+interface RunSummary {
   runId: RunId;
   workflowId: WorkflowId;
-  nodeId: NodeId;
-  /** Subworkflow depth of the **spawning** run (0 = root). Passed when starting a child run. */
-  subworkflowDepth?: number;
-  /** Effective max node activations from the parent run (propagated to child policy merge). */
-  engineMaxNodeActivations?: number;
-  /** Effective max subworkflow depth from the parent run (propagated to child policy merge). */
-  engineMaxSubworkflowDepth?: number;
+  startedAt: string;
+  status: RunStatus;
   /**
-   * Test-suite linkage inherited by the child subworkflow run. Set by whichever node
-   * spawns the subworkflow when its own `ctx.testContext` is present, so assertions
-   * emitted inside a subworkflow land under the correct parent test case.
+   * Test-case status for runs dispatched as part of a TestSuiteRun. Carries the
+   * assertion-rollup-corrected outcome the test orchestrator persists onto the row, so the
+   * executions list can show "failed" for a run whose workflow completed cleanly but whose
+   * assertions caught regressions. Absent for non-test runs and legacy rows.
    */
-  testContext?: RunTestContext;
-}
-interface RunDataSnapshot {
-  getOutputs(nodeId: NodeId): NodeOutputs | undefined;
-  getOutputItems<TJson = unknown>(nodeId: NodeId | NodeIdRef<TJson>, output?: OutputPortKey): Items<TJson>;
-  getOutputItem<TJson = unknown>(nodeId: NodeId | NodeIdRef<TJson>, itemIndex: number, output?: OutputPortKey): Item<TJson> | undefined;
-}
-interface MutableRunData extends RunDataSnapshot {
-  setOutputs(nodeId: NodeId, outputs: NodeOutputs): void;
-  dump(): Record<NodeId, NodeOutputs>;
-}
-interface RunDataFactory {
-  create(initial?: Record<NodeId, NodeOutputs>): MutableRunData;
+  testCaseStatus?: TestCaseRunStatus;
+  /** ISO timestamp when the run finished (derived from node snapshots or store `updatedAt`); omit while running/pending. */
+  finishedAt?: string;
+  parent?: ParentExecutionRef;
+  executionOptions?: RunExecutionOptions;
 }
-interface RunIdFactory {
-  makeRunId(): RunId;
+interface PendingNodeExecution {
+  runId: RunId;
+  activationId: NodeActivationId;
+  workflowId: WorkflowId;
+  nodeId: NodeId;
+  itemsIn: number;
+  inputsByPort: NodeInputsByPort;
+  receiptId: string;
+  queue?: string;
+  batchId?: string;
+  enqueuedAt: string;
 }
-interface ActivationIdFactory {
-  makeActivationId(): NodeActivationId;
+interface PersistedRunSchedulingState {
+  pending?: PendingNodeExecution;
+  queue: RunQueueEntry[];
 }
-type UpstreamRefPlaceholder = `$${number}`;
-declare const branchRef: (index: number) => UpstreamRefPlaceholder;
-type ExecutionMode = "local" | "worker";
-interface NodeSchedulerDecision {
-  mode: ExecutionMode;
-  queue?: string;
+interface PersistedRunState {
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  /** Canonical terminal time for listings and retention when persisted on the run root. */
+  finishedAt?: string;
+  /** Optimistic concurrency / CAS on the run aggregate (repository may increment on save). */
+  revision?: number;
+  parent?: ParentExecutionRef;
+  executionOptions?: RunExecutionOptions;
+  control?: PersistedRunControlState;
+  workflowSnapshot?: PersistedWorkflowSnapshot;
+  mutableState?: PersistedMutableRunState;
+  /** Frozen at createRun from workflow + runtime defaults for prune/storage decisions. */
+  policySnapshot?: PersistedRunPolicySnapshot;
+  /** Successful node completions so far (for activation budget). */
+  engineCounters?: EngineRunCounters;
+  status: RunStatus;
+  pending?: PendingNodeExecution;
+  queue: RunQueueEntry[];
+  outputsByNode: Record<NodeId, NodeOutputs>;
+  nodeSnapshotsByNodeId: Record<NodeId, NodeExecutionSnapshot>;
+  /** Append-only history of connection invocations (LLM/tool) nested under owning nodes. */
+  connectionInvocations?: ReadonlyArray<ConnectionInvocationRecord>;
 }
-interface NodeOffloadPolicy {
-  decide(args: {
+interface WorkflowExecutionRepository {
+  createRun(args: {
+    runId: RunId;
     workflowId: WorkflowId;
-    nodeId: NodeId;
-    config: NodeConfigBase;
-  }): NodeSchedulerDecision;
+    startedAt: string;
+    parent?: ParentExecutionRef;
+    executionOptions?: RunExecutionOptions;
+    control?: PersistedRunControlState;
+    workflowSnapshot?: PersistedWorkflowSnapshot;
+    mutableState?: PersistedMutableRunState;
+    policySnapshot?: PersistedRunPolicySnapshot;
+    engineCounters?: EngineRunCounters;
+  }): Promise<void>;
+  load(runId: RunId): Promise<PersistedRunState | undefined>;
+  loadSchedulingState(runId: RunId): Promise<PersistedRunSchedulingState | undefined>;
+  save(state: PersistedRunState): Promise<void>;
+  deleteRun?(runId: RunId): Promise<void>;
 }
-/** Whether to persist run execution data after the workflow finishes. */
-type WorkflowStoragePolicyMode = "ALL" | "SUCCESS" | "ERROR" | "NEVER";
-type WorkflowStoragePolicySpec = WorkflowStoragePolicyMode | TypeToken<WorkflowStoragePolicyResolver>;
-interface WorkflowStoragePolicyResolver {
-  shouldPersist(args: WorkflowStoragePolicyDecisionArgs): boolean | Promise<boolean>;
+interface WorkflowExecutionListingRepository {
+  listRuns(args?: Readonly<{
+    workflowId?: WorkflowId;
+    limit?: number;
+  }>): Promise<ReadonlyArray<RunSummary>>;
 }
-interface WorkflowStoragePolicyDecisionArgs {
+/** Runs eligible for retention-based pruning (completed or failed, older than cutoff). */
+interface RunPruneCandidate {
   readonly runId: RunId;
   readonly workflowId: WorkflowId;
-  readonly workflow: WorkflowDefinition;
-  readonly finalStatus: "completed" | "failed";
   readonly startedAt: string;
   readonly finishedAt: string;
 }
-interface WorkflowPrunePolicySpec {
-  readonly runDataRetentionSeconds?: number;
-  readonly binaryRetentionSeconds?: number;
-  readonly telemetrySpanRetentionSeconds?: number;
-  readonly telemetryArtifactRetentionSeconds?: number;
-  readonly telemetryMetricRetentionSeconds?: number;
-}
-interface PersistedRunPolicySnapshot {
-  readonly retentionSeconds?: number;
-  readonly binaryRetentionSeconds?: number;
-  readonly telemetrySpanRetentionSeconds?: number;
-  readonly telemetryArtifactRetentionSeconds?: number;
-  readonly telemetryMetricRetentionSeconds?: number;
-  readonly storagePolicy: WorkflowStoragePolicyMode;
-}
-interface WorkflowErrorHandler {
-  onError(ctx: WorkflowErrorContext): void | Promise<void>;
-}
-interface WorkflowErrorContext {
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly workflow: WorkflowDefinition;
-  readonly failedNodeId: NodeId;
-  readonly error: Error;
-  readonly startedAt: string;
-  readonly finishedAt: string;
+interface WorkflowExecutionPruneRepository {
+  listRunsOlderThan(args: Readonly<{
+    nowIso: string;
+    defaultRetentionSeconds: number;
+    limit?: number;
+  }>): Promise<ReadonlyArray<RunPruneCandidate>>;
 }
-type WorkflowErrorHandlerSpec = TypeToken<WorkflowErrorHandler> | WorkflowErrorHandler;
-interface NodeErrorHandlerArgs<TConfig extends NodeConfigBase = NodeConfigBase> {
-  readonly kind: "single" | "multi";
-  readonly items: Items;
-  readonly inputsByPort: Readonly<Record<InputPortKey, Items>> | undefined;
-  readonly ctx: NodeExecutionContext<TConfig>;
-  readonly error: Error;
+type RunResult = {
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  status: "completed";
+  outputs: Items;
+} | {
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  status: "pending";
+  pending: PendingNodeExecution;
+} | {
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  status: "failed";
+  error: {
+    message: string;
+  };
+};
+type WebhookRunResult = Readonly<{
+  runId: RunId;
+  workflowId: WorkflowId;
+  startedAt: string;
+  runStatus: "pending" | "completed";
+  response: Items;
+}>;
+interface PersistedWorkflowTokenRegistryLike {
+  register(type: TypeToken<unknown>, packageId: string, persistedNameOverride?: string): string;
+  getTokenId(type: TypeToken<unknown>): string | undefined;
+  resolve(tokenId: string): TypeToken<unknown> | undefined;
+  registerFromWorkflows?(workflows: ReadonlyArray<WorkflowDefinition>): void;
 }
-interface NodeErrorHandler {
-  handle<TConfig extends NodeConfigBase>(args: NodeErrorHandlerArgs<TConfig>): Promise<NodeOutputs>;
+interface RunCompletionNotifier {
+  resolveRunCompletion(result: RunResult): void;
+  resolveWebhookResponse(result: WebhookRunResult): void;
 }
-type NodeErrorHandlerSpec = TypeToken<NodeErrorHandler> | NodeErrorHandler;
-/** Runtime defaults when workflow omits prune/storage fields (typically from host env). */
-interface WorkflowPolicyRuntimeDefaults {
-  readonly retentionSeconds?: number;
-  readonly binaryRetentionSeconds?: number;
-  readonly telemetrySpanRetentionSeconds?: number;
-  readonly telemetryArtifactRetentionSeconds?: number;
-  readonly telemetryMetricRetentionSeconds?: number;
-  readonly storagePolicy?: WorkflowStoragePolicyMode;
+interface RunEventPublisherDeps {
+  eventBus?: RunEventBus;
 }
 //#endregion
-//#region src/orchestration/Engine.d.ts
-interface EngineTriggerRuntime {
-  startTriggers(): Promise<void>;
-  stop(): Promise<void>;
-  syncWorkflowTriggersForActivation(workflowId: WorkflowId): Promise<void>;
-  createTriggerTestItems(args: {
-    workflow: WorkflowDefinition;
-    nodeId: NodeId;
-  }): Promise<Items | undefined>;
-}
-interface EngineRunStartService {
-  runWorkflow(wf: WorkflowDefinition, startAt: NodeId, items: Items, parent?: ParentExecutionRef, executionOptions?: RunExecutionOptions, persistedStateOverrides?: Readonly<{
-    workflowSnapshot?: NonNullable<Awaited<ReturnType<WorkflowExecutionRepository["load"]>>>["workflowSnapshot"];
-    mutableState?: NonNullable<Awaited<ReturnType<WorkflowExecutionRepository["load"]>>>["mutableState"];
-  }>): Promise<RunResult>;
-  runWorkflowFromState(request: CurrentStateExecutionRequest): Promise<RunResult>;
-}
-interface EngineRunContinuationService {
-  markNodeRunning(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    inputsByPort: NodeInputsByPort;
-  }): Promise<void>;
-  resumeFromNodeResult(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    outputs: NodeOutputs;
-  }): Promise<RunResult>;
-  resumeFromNodeError(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    error: Error;
-  }): Promise<RunResult>;
-  resumeFromStepResult(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    outputs: NodeOutputs;
-  }): Promise<RunResult>;
-  resumeFromStepError(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    error: Error;
-  }): Promise<RunResult>;
-  waitForCompletion(runId: RunId): Promise<Extract<RunResult, {
-    status: "completed" | "failed";
-  }>>;
-  waitForWebhookResponse(runId: RunId): Promise<WebhookRunResult>;
-}
-interface EngineNodeExecutionRequestHandler {
-  handleNodeExecutionRequest(request: NodeExecutionRequest): Promise<void>;
-}
-interface EngineFacadeDeps {
-  liveWorkflowRepository: LiveWorkflowRepository;
-  tokenRegistry: PersistedWorkflowTokenRegistryLike;
-  webhookTriggerMatcher: WebhookTriggerMatcher;
-  workflowSnapshotResolver: WorkflowSnapshotResolver;
-  triggerRuntime: EngineTriggerRuntime;
-  runStartService: EngineRunStartService;
-  runContinuationService: EngineRunContinuationService;
-  nodeExecutionRequestHandler: EngineNodeExecutionRequestHandler;
-}
+//#region src/contracts/agentMcpTypes.d.ts
 /**
- * Runtime facade for orchestration, continuation, triggers, and webhook routing.
- * Prefer {@link import("../intents/RunIntentService").RunIntentService} for host/HTTP invocation boundaries.
- * The class token is exported from `@codemation/core/bootstrap` (not the main `@codemation/core` barrel).
+ * Emitted as a span event when a credential is missing required scopes
+ * (bind-time) or when callTool returns a permission error (runtime).
+ * The credential type id can be looked up from the credential instance when needed.
  */
-declare class Engine implements NodeActivationContinuation, NodeExecutionRequestHandler {
-  private readonly deps;
-  constructor(deps: EngineFacadeDeps);
-  loadWorkflows(workflows: ReadonlyArray<WorkflowDefinition>): void;
-  getTokenRegistry(): EngineFacadeDeps["tokenRegistry"];
-  resolveWorkflowSnapshot(args: {
-    workflowId: WorkflowId;
-    workflowSnapshot?: NonNullable<Awaited<ReturnType<WorkflowExecutionRepository["load"]>>>["workflowSnapshot"];
-  }): WorkflowDefinition | undefined;
-  startTriggers(): Promise<void>;
-  syncWorkflowTriggersForActivation(workflowId: WorkflowId): Promise<void>;
-  start(workflows: WorkflowDefinition[]): Promise<void>;
-  stop(): Promise<void>;
-  resolveWebhookTrigger(args: {
-    endpointPath: string;
-    method: HttpMethod;
-  }): WebhookTriggerResolution;
-  createTriggerTestItems(args: {
-    workflow: WorkflowDefinition;
-    nodeId: NodeId;
-  }): Promise<Items | undefined>;
-  runWorkflow(wf: WorkflowDefinition, startAt: NodeId, items: Items, parent?: ParentExecutionRef, executionOptions?: RunExecutionOptions, persistedStateOverrides?: Readonly<{
-    workflowSnapshot?: NonNullable<Awaited<ReturnType<WorkflowExecutionRepository["load"]>>>["workflowSnapshot"];
-    mutableState?: NonNullable<Awaited<ReturnType<WorkflowExecutionRepository["load"]>>>["mutableState"];
-  }>): Promise<RunResult>;
-  runWorkflowFromState(request: CurrentStateExecutionRequest): Promise<RunResult>;
-  markNodeRunning(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    inputsByPort: NodeInputsByPort;
-  }): Promise<void>;
-  resumeFromNodeResult(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    outputs: NodeOutputs;
-  }): Promise<RunResult>;
-  resumeFromNodeError(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    error: Error;
-  }): Promise<RunResult>;
-  resumeFromStepResult(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    outputs: NodeOutputs;
-  }): Promise<RunResult>;
-  resumeFromStepError(args: {
-    runId: RunId;
-    activationId: NodeActivationId;
-    nodeId: NodeId;
-    error: Error;
-  }): Promise<RunResult>;
-  waitForCompletion(runId: RunId): Promise<Extract<RunResult, {
-    status: "completed" | "failed";
-  }>>;
-  waitForWebhookResponse(runId: RunId): Promise<WebhookRunResult>;
-  handleNodeExecutionRequest(request: NodeExecutionRequest): Promise<void>;
-}
-//#endregion
-//#region src/runtime/InMemoryLiveWorkflowRepository.d.ts
-declare class InMemoryLiveWorkflowRepository implements LiveWorkflowRepository {
-  private readonly workflowsById;
-  setWorkflows(workflows: ReadonlyArray<WorkflowDefinition>): void;
-  list(): ReadonlyArray<WorkflowDefinition>;
-  get(workflowId: WorkflowId): WorkflowDefinition | undefined;
+interface NeedsReconsentEvent {
+  readonly serverId: string;
+  readonly credentialInstanceId: string;
+  readonly missingScopesHint?: readonly string[];
 }
-//#endregion
-//#region src/runtime/RunIntentService.d.ts
-type StartWorkflowIntent = {
-  workflow: WorkflowDefinition;
-  startAt?: string;
-  items: Items;
-  synthesizeTriggerItems?: boolean;
-  parent?: CurrentStateExecutionRequest["parent"];
-  executionOptions?: RunExecutionOptions;
-  workflowSnapshot?: CurrentStateExecutionRequest["workflowSnapshot"];
-  mutableState?: CurrentStateExecutionRequest["mutableState"];
-  currentState?: RunCurrentState;
-  stopCondition?: RunStopCondition;
-  reset?: CurrentStateExecutionRequest["reset"];
-};
-type RerunFromNodeIntent = {
-  workflow: WorkflowDefinition;
-  nodeId: NodeId;
-  currentState: RunCurrentState;
-  items?: Items;
-  synthesizeTriggerItems?: boolean;
-  parent?: CurrentStateExecutionRequest["parent"];
-  executionOptions?: RunExecutionOptions;
-  workflowSnapshot?: CurrentStateExecutionRequest["workflowSnapshot"];
-  mutableState?: CurrentStateExecutionRequest["mutableState"];
-};
-type MatchedWebhookRunIntent = {
-  endpointPath: string;
-  method: HttpMethod;
-  requestItem: Items[number];
-};
-type WebhookMatchRunIntent = {
-  match: WebhookInvocationMatch;
-  requestItem: Items[number];
-};
-declare class RunIntentService {
-  private readonly engine;
-  private readonly workflowRepository;
-  constructor(engine: Engine, workflowRepository: WorkflowRepository);
-  startWorkflow(args: StartWorkflowIntent): Promise<RunResult>;
-  rerunFromNode(args: RerunFromNodeIntent): Promise<RunResult>;
-  private resolveStartWorkflowItems;
-  private resolveRerunItems;
-  private resolveStartWorkflowTriggerNodeId;
-  private resolveRerunTriggerNodeId;
-  private firstTriggerNodeId;
-  private isTriggerNode;
-  private hasNonEmptyItems;
-  resolveWebhookTrigger(args: {
-    endpointPath: string;
-    method: HttpMethod;
-  }): WebhookTriggerResolution;
-  runMatchedWebhook(args: MatchedWebhookRunIntent): Promise<WebhookRunResult>;
-  runWebhookMatch(args: WebhookMatchRunIntent): Promise<WebhookRunResult>;
+/**
+ * An opaque MCP tool map: keyed by serverId → (toolName → tool definition).
+ * Typed as unknown so core does not depend on the AI SDK's ToolSet type.
+ * AIAgentNode (in core-nodes, which does depend on ai) casts this to
+ * ReadonlyMap<string, ToolSet> before passing to DeferredMetaToolStrategyFactory.
+ */
+type AgentMcpToolMap = ReadonlyMap<string, Readonly<Record<string, unknown>>>;
+/**
+ * Contract implemented by the host. Resolves MCP server bindings for an agent run
+ * via the standard credential-binding table (one slot per declared server, keyed
+ * by `(workflowId, mcpConnectionNodeId, "credential")`), and returns a ready-to-use
+ * tool map with wrapped execute callbacks for telemetry and 403 detection.
+ * Core-nodes imports this interface so AIAgentNode can inject it without
+ * depending on the host.
+ */
+interface AgentMcpIntegration {
   /**
-   * Webhook-triggered runs always force inline execution first.
-   * This is the highest-precedence scheduler override: it wins over node hints and container defaults.
+   * Look up the credential binding per server, validate scopes, open pool
+   * connections, and return a tool map keyed by serverId. Each tool's
+   * execute callback includes:
+   * - Telemetry child span (mcp.server_id, mcp.tool_name attributes)
+   * - 403/permission error detection → emits a NeedsReconsentEvent span event
+   *
+   * Throws `AgentBindError` on validation failures (missing server, unbound
+   * credential slot, missing credential instance, insufficient scopes).
    */
-  private createWebhookExecutionOptions;
+  prepareMcpTools(args: {
+    readonly workflowId: WorkflowId;
+    readonly agentNodeId: NodeId;
+    readonly serverIds: ReadonlyArray<string>;
+    readonly pinnedMcpTools: readonly string[];
+    readonly emitSpanEvent: (event: TelemetrySpanEventRecord) => void;
+    readonly startChildSpan: (args: {
+      readonly name: string;
+      readonly attributes?: Record<string, string>;
+    }) => {
+      readonly end: (args?: {
+        status?: "ok" | "error";
+        statusMessage?: string;
+      }) => void;
+    };
+    /** Per-MCP-tool-call invocation appender. Optional; when omitted the wrapper emits only telemetry spans. */
+    readonly appendMcpInvocation?: (args: ConnectionInvocationAppendArgs) => Promise<void>;
+    /** Agent activation id to attach to each invocation record (used by canvas + inspector grouping). */
+    readonly parentAgentActivationId?: NodeActivationId;
+    /** Per-item iteration id when the agent runs inside a per-item loop. */
+    readonly iterationId?: NodeIterationId;
+    /** Item index (0-based) of the iteration that owns these tool calls. */
+    readonly itemIndex?: number;
+    /** Parent invocation id when this agent is itself executing as a sub-agent. */
+    readonly parentInvocationId?: ConnectionInvocationId;
+  }): Promise<AgentMcpToolMap>;
 }
 //#endregion
-export { WorkflowPrunePolicySpec as $, CredentialHealth as $n, RunTestContext as $r, TriggerSetupStateFor as $t, NodeSchedulerDecision as A, TestSuiteRunId as Ai, CodemationTelemetryMetricNames as An, NodeExecutionStatus as Ar, NodeActivationContinuation as At, RunnableNodeOutputJson as B, CostTrackingTelemetry as Bn, PersistedWorkflowTokenRegistryLike as Br, NodeExecutionStatePublisher as Bt, NodeErrorHandlerSpec as C, EngineExecutionLimitsPolicy as Ci, TelemetryAttributes as Cn, ConnectionInvocationId as Cr, ExecutableTriggerNode as Ct, NodeOffloadPolicy as D, RunEventSubscription as Di, TelemetrySpanEnd as Dn, ExecutionFrontierPlan as Dr, ItemNode as Dt, NodeKind as E, RunEventBus as Ei, TelemetryScope as En, EngineRunCounters as Er, ExecutionContextFactory as Et, RunDataSnapshot as F, NodeId as Fi, NoOpNodeExecutionTelemetry as Fn, PersistedRunControlState as Fr, NodeBinaryAttachmentService as Ft, WorkflowDefinition as G, CollectionStore as Gn, RunExecutionOptions as Gr, PreparedNodeActivationDispatch as Gt, TriggerNodeOutputJson as H, CostTrackingTelemetryFactory as Hn, RunCompletionNotifier as Hr, NodeResolver as Ht, RunId as I, OutputPortKey as Ii, NoOpTelemetrySpanScope as In, PersistedRunSchedulingState as Ir, NodeExecutionContext as It, WorkflowErrorHandlerSpec as J, CredentialAdvancedSectionPresentation as Jn, RunResult as Jr, TestableTriggerNode as Jt, WorkflowErrorContext as K, CollectionsContext as Kn, RunPruneCandidate as Kr, RunnableNode as Kt, RunIdFactory as L, PersistedTokenId as Li, NoOpTelemetryArtifactReference as Ln, PersistedRunState as Lr, NodeExecutionRequest as Lt, ParentExecutionRef as M, TestTriggerSetupContext as Mi, CodemationTelemetryAttributeNames as Mn, PendingNodeExecution as Mr, NodeActivationRequest as Mt, PersistedRunPolicySnapshot as N, InputPortKey as Ni, NoOpExecutionTelemetryFactory as Nn, PersistedMutableNodeState as Nr, NodeActivationRequestBase as Nt, NodeOutputs as O, TestCaseRunStatus as Oi, TelemetrySpanEventRecord as On, NodeExecutionError as Or, LiveWorkflowRepository as Ot, RunDataFactory as P, NodeConnectionName as Pi, NoOpExecutionTelemetry as Pn, PersistedMutableRunState as Pr, NodeActivationScheduler as Pt, WorkflowPolicyRuntimeDefaults as Q, CredentialFieldSchema as Qn, RunSummary as Qr, TriggerSetupContext as Qt, RunnableNodeConfig as R, WorkflowId as Ri, CostTrackingComponent as Rn, PersistedWorkflowSnapshot as Rr, NodeExecutionRequestHandler as Rt, NodeErrorHandlerArgs as S, ENGINE_EXECUTION_LIMITS_DEFAULTS as Si, TelemetryAttributePrimitive as Sn, ConnectionInvocationAppendArgs as Sr, EngineHost as St, NodeIterationId as T, RunEvent as Ti, TelemetryMetricRecord as Tn, CurrentStateExecutionRequest as Tr, ExecutionContext as Tt, TriggerNodeSetupState as U, CostTrackingTelemetryMetricNames as Un, RunCurrentState as Ur, PersistedTriggerSetupState as Ut, TriggerNodeConfig as V, CostTrackingTelemetryAttributeNames as Vn, PinnedNodeOutputsByPort as Vr, NodeExecutor as Vt, UpstreamRefPlaceholder as W, CostTrackingUsageRecord as Wn, RunEventPublisherDeps as Wr, PollingTriggerHandle as Wt, WorkflowGraphFactory as X, CredentialBinding as Xn, RunStatus as Xr, TriggerNode as Xt, WorkflowGraph as Y, CredentialAuthDefinition as Yn, RunStateResetRequest as Yr, TriggerCleanupHandle as Yt, WorkflowNodeConnection as Z, CredentialBindingKey as Zn, RunStopCondition as Zr, TriggerRuntimeDiagnostics as Zt, MutableRunData as _, instancePerContainerCachingFactory as _i, ExecutionTelemetry as _n, CredentialUnboundError as _r, BinaryStorageReadResult as _t, BinaryAttachment as a, DependencyContainer$1 as ai, WorkflowRunnerService as an, CredentialMaterialSourceKind as ar, nodeRef as at, NodeDefinition as b, singleton as bi, TelemetryArtifactAttachment as bn, PollingTriggerLogger as br, BinaryStorageWriteResult as bt, ExecutionMode as c, Lifecycle as ci, HttpMethod as cn, CredentialRequirement as cr, triggerNodeOutputType as ct, Items as d, container as di, WebhookInvocationMatch as dn, CredentialSessionService as dr, FixedRetryPolicySpec as dt, WebhookRunResult as ei, TriggerSetupStateRepository as en, CredentialHealthStatus as er, WorkflowStoragePolicyDecisionArgs as et, JsonArray as f, delay as fi, WebhookTriggerMatcher as fn, CredentialSetupStatus as fr, NoneRetryPolicySpec as ft, JsonValue as g, instanceCachingFactory as gi, WorkflowActivationPolicy as gn, CredentialTypeRegistry as gr, BinaryStorage as gt, JsonPrimitive as h, injectable as hi, AllWorkflowsActiveWorkflowActivationPolicy as hn, CredentialTypeId as hr, BinaryBody as ht, ActivationIdFactory as i, Container as ii, WorkflowRunnerResolver as in, CredentialJsonRecord as ir, branchRef as it, PairedItemRef as j, TestTriggerNodeConfig as ji, GenAiTelemetryAttributeNames as jn, NodeInputsByPort as jr, NodeActivationReceipt as jt, NodeRef as k, TestSuiteRunStatus as ki, TelemetrySpanScope as kn, NodeExecutionSnapshot as kr, MultiInputNode as kt, Item as l, RegistrationOptions as li, TriggerInstanceId as ln, CredentialSessionFactory as lr, triggerNodeSetupStateType as lt, JsonObject as m, injectAll as mi, WebhookTriggerRoutingDiagnostics as mn, CredentialTypeDefinition as mr, BinaryAttachmentCreateRequest as mt, InMemoryLiveWorkflowRepository as n, WorkflowExecutionPruneRepository as ni, WorkflowNodeInstanceFactory as nn, CredentialInstanceId as nr, WorkflowStoragePolicyResolver as nt, BinaryPreviewKind as o, Disposable as oi, WorkflowSnapshotFactory as on, CredentialOAuth2AuthDefinition as or, runnableNodeInputType as ot, JsonNonArray as p, inject as pi, WebhookTriggerResolution as pn, CredentialType as pr, RetryPolicySpec as pt, WorkflowErrorHandler as q, AnyCredentialType as qn, RunQueueEntry as qr, RunnableNodeExecuteArgs as qt, Engine as r, WorkflowExecutionRepository as ri, WorkflowRepository as rn, CredentialInstanceRecord as rr, WorkflowStoragePolicySpec as rt, Edge as s, InjectionToken$1 as si, WorkflowSnapshotResolver as sn, CredentialOAuth2ScopesFromPublicConfig as sr, runnableNodeOutputType as st, RunIntentService as t, WorkflowExecutionListingRepository as ti, TriggerTestItemsContext as tn, CredentialHealthTester as tr, WorkflowStoragePolicyMode as tt, ItemBinary as u, TypeToken as ui, WebhookControlSignal as un, CredentialSessionFactoryArgs as ur, ExponentialRetryPolicySpec as ut, NodeActivationId as v, predicateAwareClassFactory as vi, ExecutionTelemetryFactory as vn, OAuth2ProviderFromPublicConfig as vr, BinaryStorageStatResult as vt, NodeIdRef as w, EngineExecutionLimitsPolicyConfig as wi, TelemetryChildSpanStart as wn, ConnectionInvocationRecord as wr, ExecutionBinaryService as wt, NodeErrorHandler as x, CoreTokens as xi, TelemetryArtifactReference as xn, PollingTriggerDedupWindow as xr, EngineDeps as xt, NodeConfigBase as y, registry as yi, NodeExecutionTelemetry as yn, NoOpPollingTriggerLogger as yr, BinaryStorageWriteRequest as yt, RunnableNodeInputJson as z, CostTrackingPriceQuote as zn, PersistedWorkflowSnapshotNode as zr, NodeExecutionScheduler as zt };
-//# sourceMappingURL=RunIntentService-BqNjrksF.d.cts.map
+export { instancePerContainerCachingFactory as $, NodeExecutor as $n, CostTrackingTelemetryAttributeNames as $r, TriggerNodeConfig as $t, RunResult as A, OAuth2ProviderFromPublicConfig as Ai, BinaryStorageStatResult as An, ExecutionTelemetryFactory as Ar, NodeConfigBase as At, Container as B, LiveWorkflowRepository as Bn, TelemetrySpanEventRecord as Br, NodeOutputs as Bt, PinnedNodeOutputsByPort as C, CredentialSessionService as Ci, FixedRetryPolicySpec as Cn, WebhookInvocationMatch as Cr, JsonArray as Ct, RunExecutionOptions as D, CredentialTypeId as Di, BinaryBody as Dn, AllWorkflowsActiveWorkflowActivationPolicy as Dr, JsonValue as Dt, RunEventPublisherDeps as E, CredentialTypeDefinition as Ei, BinaryAttachmentCreateRequest as En, WebhookTriggerRoutingDiagnostics as Er, JsonPrimitive as Et, RunTestContext as F, NodeConnectionName as Fi, ExecutableTriggerNode as Fn, TelemetryAttributes as Fr, NodeIdRef as Ft, RegistrationOptions as G, NodeActivationRequestBase as Gn, NoOpExecutionTelemetryFactory as Gr, PersistedRunPolicySnapshot as Gt, Disposable as H, NodeActivationContinuation as Hn, CodemationTelemetryMetricNames as Hr, NodeSchedulerDecision as Ht, WebhookRunResult as I, NodeId as Ii, ExecutionBinaryService as In, TelemetryChildSpanStart as Ir, NodeInspectorSummaryRow as It, delay as J, NodeExecutionContext as Jn, NoOpTelemetrySpanScope as Jr, RunId as Jt, TypeToken as K, NodeActivationScheduler as Kn, NoOpExecutionTelemetry as Kr, RunDataFactory as Kt, WorkflowExecutionListingRepository as L, OutputPortKey as Li, ExecutionContext as Ln, TelemetryMetricRecord as Lr, NodeIterationId as Lt, RunStatus as M, PollingTriggerLogger as Mi, BinaryStorageWriteResult as Mn, TelemetryArtifactAttachment as Mr, NodeErrorHandler as Mt, RunStopCondition as N, PollingTriggerDedupWindow as Ni, EngineDeps as Nn, TelemetryArtifactReference as Nr, NodeErrorHandlerArgs as Nt, RunPruneCandidate as O, CredentialTypeRegistry as Oi, BinaryStorage as On, WorkflowActivationPolicy as Or, MutableRunData as Ot, RunSummary as P, InputPortKey as Pi, EngineHost as Pn, TelemetryAttributePrimitive as Pr, NodeErrorHandlerSpec as Pt, instanceCachingFactory as Q, NodeExecutionStatePublisher as Qn, CostTrackingTelemetry as Qr, RunnableNodeOutputJson as Qt, WorkflowExecutionPruneRepository as R, PersistedTokenId as Ri, ExecutionContextFactory as Rn, TelemetryScope as Rr, NodeKind as Rt, PersistedWorkflowTokenRegistryLike as S, CredentialSessionFactoryArgs as Si, ExponentialRetryPolicySpec as Sn, WebhookControlSignal as Sr, Items as St, RunCurrentState as T, CredentialType as Ti, RetryPolicySpec as Tn, WebhookTriggerResolution as Tr, JsonObject as Tt, InjectionToken$1 as U, NodeActivationReceipt as Un, GenAiTelemetryAttributeNames as Ur, PairedItemRef as Ut, DependencyContainer$1 as V, MultiInputNode as Vn, TelemetrySpanScope as Vr, NodeRef as Vt, Lifecycle as W, NodeActivationRequest as Wn, CodemationTelemetryAttributeNames as Wr, ParentExecutionRef as Wt, injectAll as X, NodeExecutionRequestHandler as Xn, CostTrackingComponent as Xr, RunnableNodeConfig as Xt, inject as Y, NodeExecutionRequest as Yn, NoOpTelemetryArtifactReference as Yr, RunIdFactory as Yt, injectable as Z, NodeExecutionScheduler as Zn, CostTrackingPriceQuote as Zr, RunnableNodeInputJson as Zt, PersistedRunControlState as _, CredentialMaterialSourceKind as _i, nodeRef as _n, WorkflowRunnerService as _r, BinaryPreviewKind as _t, ConnectionInvocationId as a, AnyCredentialType as ai, WorkflowErrorHandler as an, RunnableNodeExecuteArgs as ar, EngineExecutionLimitsPolicy as at, PersistedWorkflowSnapshot as b, CredentialRequirement as bi, triggerNodeOutputType as bn, HttpMethod as br, Item as bt, EngineRunCounters as c, CredentialBinding as ci, WorkflowGraphFactory as cn, TriggerNode as cr, RunEventBus as ct, NodeExecutionSnapshot as d, CredentialHealth as di, WorkflowPrunePolicySpec as dn, TriggerSetupStateFor as dr, TestSuiteRunStatus as dt, CostTrackingTelemetryFactory as ei, TriggerNodeOutputJson as en, NodeResolver as er, predicateAwareClassFactory as et, NodeExecutionStatus as f, CredentialHealthStatus as fi, WorkflowStoragePolicyDecisionArgs as fn, TriggerSetupStateRepository as fr, TestSuiteRunId as ft, PersistedMutableRunState as g, CredentialJsonRecord as gi, branchRef as gn, WorkflowRunnerResolver as gr, BinaryAttachment as gt, PersistedMutableNodeState as h, CredentialInstanceRecord as hi, WorkflowStoragePolicySpec as hn, WorkflowRepository as hr, ActivationIdFactory as ht, ConnectionInvocationAppendArgs as i, CollectionsContext as ii, WorkflowErrorContext as in, RunnableNode as ir, ENGINE_EXECUTION_LIMITS_DEFAULTS as it, RunStateResetRequest as j, NoOpPollingTriggerLogger as ji, BinaryStorageWriteRequest as jn, NodeExecutionTelemetry as jr, NodeDefinition as jt, RunQueueEntry as k, CredentialUnboundError as ki, BinaryStorageReadResult as kn, ExecutionTelemetry as kr, NodeActivationId as kt, ExecutionFrontierPlan as l, CredentialBindingKey as li, WorkflowNodeConnection as ln, TriggerRuntimeDiagnostics as lr, RunEventSubscription as lt, PendingNodeExecution as m, CredentialInstanceId as mi, WorkflowStoragePolicyResolver as mn, WorkflowNodeInstanceFactory as mr, TestTriggerSetupContext as mt, AgentMcpToolMap as n, CostTrackingUsageRecord as ni, UpstreamRefPlaceholder as nn, PollingTriggerHandle as nr, singleton as nt, ConnectionInvocationRecord as o, CredentialAdvancedSectionPresentation as oi, WorkflowErrorHandlerSpec as on, TestableTriggerNode as or, EngineExecutionLimitsPolicyConfig as ot, NodeInputsByPort as p, CredentialHealthTester as pi, WorkflowStoragePolicyMode as pn, TriggerTestItemsContext as pr, TestTriggerNodeConfig as pt, container as q, NodeBinaryAttachmentService as qn, NoOpNodeExecutionTelemetry as qr, RunDataSnapshot as qt, NeedsReconsentEvent as r, CollectionStore as ri, WorkflowDefinition as rn, PreparedNodeActivationDispatch as rr, CoreTokens as rt, CurrentStateExecutionRequest as s, CredentialAuthDefinition as si, WorkflowGraph as sn, TriggerCleanupHandle as sr, RunEvent as st, AgentMcpIntegration as t, CostTrackingTelemetryMetricNames as ti, TriggerNodeSetupState as tn, PersistedTriggerSetupState as tr, registry as tt, NodeExecutionError as u, CredentialFieldSchema as ui, WorkflowPolicyRuntimeDefaults as un, TriggerSetupContext as ur, TestCaseRunStatus as ut, PersistedRunSchedulingState as v, CredentialOAuth2AuthDefinition as vi, runnableNodeInputType as vn, WorkflowSnapshotFactory as vr, Edge as vt, RunCompletionNotifier as w, CredentialSetupStatus as wi, NoneRetryPolicySpec as wn, WebhookTriggerMatcher as wr, JsonNonArray as wt, PersistedWorkflowSnapshotNode as x, CredentialSessionFactory as xi, triggerNodeSetupStateType as xn, TriggerInstanceId as xr, ItemBinary as xt, PersistedRunState as y, CredentialOAuth2ScopesFromPublicConfig as yi, runnableNodeOutputType as yn, WorkflowSnapshotResolver as yr, ExecutionMode as yt, WorkflowExecutionRepository as z, WorkflowId as zi, ItemNode as zn, TelemetrySpanEnd as zr, NodeOffloadPolicy as zt };
+//# sourceMappingURL=agentMcpTypes-ZiNbNsEi.d.cts.map