@codemation/core 0.11.0 → 0.12.0

package/dist/{index-Bes88mxT.d.ts → index-BZDhEQ6W.d.ts}

@@ -1,5 +1,7 @@
-import { $a as CredentialTypeDefinition, $i as WebhookTriggerRoutingDiagnostics, Ai as PreparedNodeActivationDispatch, Ar as WorkflowDefinition, Bi as TriggerTestItemsContext, Cr as RunnableNodeConfig, Da as CostTrackingTelemetryFactory, Di as NodeResolver, Er as TriggerNodeConfig, Fn as RunEventBus, Ft as EngineRunCounters, Gn as Edge, Gt as PersistedRunSchedulingState, Hi as WorkflowRepository, Hn as ActivationIdFactory, In as RunEventSubscription, Ji as TriggerInstanceId, Jt as PersistedWorkflowSnapshotNode, Kn as ExecutionMode, Kt as PersistedRunState, La as CredentialFieldSchema, Ln as TestCaseRunStatus, Ma as AnyCredentialType, Mn as EngineExecutionLimitsPolicy, Mt as ConnectionInvocationId, Nt as ConnectionInvocationRecord, Pn as RunEvent, Qa as CredentialType, Qr as RetryPolicySpec, Ra as CredentialHealth, Rn as TestSuiteRunStatus, Rt as NodeExecutionSnapshot, Si as NodeExecutionRequest, Ta as CostTrackingTelemetry, Ti as NodeExecutionStatePublisher, Ua as CredentialJsonRecord, Un as BinaryAttachment, V as McpServerDeclaration, Vi as WorkflowNodeInstanceFactory, Xa as CredentialSessionService, Xi as WebhookInvocationMatch, Ya as CredentialSessionFactoryArgs, Yn as Items, Zi as WebhookTriggerMatcher, _i as NodeActivationRequest, _r as ParentExecutionRef, ai as BinaryStorageWriteResult, ao as PollingTriggerLogger, bi as NodeBinaryAttachmentService, br as RunDataSnapshot, cn as RunTestContext, co as NodeConnectionName, ct as CostCatalog, di as ExecutionContextFactory, dn as WorkflowExecutionPruneRepository, ei as BinaryBody, en as RunExecutionOptions, eo as CredentialTypeId, er as JsonValue, fn as WorkflowExecutionRepository, fo as WorkflowId, fr as NodeOffloadPolicy, ft as ParamDeep, hi as NodeActivationContinuation, hr as NodeSchedulerDecision, i as WorkflowSnapshotCodec, ir as NodeDefinition, ja as CollectionsContext, ka as CostTrackingUsageRecord, li as ExecutionBinaryService, lo as NodeId, lr as NodeInspectorSummaryRow, lt as CostCatalogEntry, ma as TelemetrySpanScope, na as ExecutionTelemetry, ni as BinaryStorageReadResult, nr as NodeActivationId, oi as EngineDeps, pr as NodeOutputs, qa as CredentialRequirement, qi as HttpMethod, qn as Item, ra as ExecutionTelemetryFactory, ri as BinaryStorageStatResult, rn as RunResult, rr as NodeConfigBase, sn as RunSummary, ta as WorkflowActivationPolicy, ti as BinaryStorage, tn as RunPruneCandidate, tr as MutableRunData, u as Engine, ui as ExecutionContext, un as WorkflowExecutionListingRepository, uo as OutputPortKey, ut as Expr, vr as PersistedRunPolicySnapshot, wi as NodeExecutionScheduler, wr as RunnableNodeInputJson, xi as NodeExecutionContext, xr as RunId, yi as NodeActivationScheduler, yn as TypeToken, yr as RunDataFactory, zi as TriggerSetupStateRepository, zn as TestSuiteRunId } from "./RunIntentService-BrEq6Jm6.js";
-import { ZodType, input, output, z } from "zod";
+import { $a as CredentialFieldSchema, $t as PersistedRunState, A as DefinedNodeCredentialAccessors, Aa as TelemetrySpanScope, Ar as RunId, Ci as HumanTaskHandle, Da as TelemetryScope, Dr as PersistedRunPolicySnapshot, Eo as OutputPortKey, Er as ParentExecutionRef, Fi as NodeExecutionContext, Fr as TriggerNodeConfig, Ga as CostTrackingUsageRecord, Gn as RunEventSubscription, Ii as NodeExecutionRequest, Ji as SuspensionRequest, Jn as TestSuiteRunId, Kn as TestCaseRunStatus, M as DefinedNodeCredentialBindings, Mr as RunnableNodeConfig, Ni as NodeActivationScheduler, O as DefinedNode, On as TypeToken, Oo as WorkflowId, Or as RunDataFactory, Pi as NodeBinaryAttachmentService, Qn as BinaryAttachment, Qt as PersistedRunSchedulingState, Ri as NodeExecutionScheduler, Rt as ConnectionInvocationId, Si as HumanTaskActor, Sr as NodeOutputs, Ti as HumanTaskSubject, To as NodeId, Ua as CostTrackingTelemetryFactory, Un as RunEvent, Va as CostTrackingTelemetry, Vi as NodeResolver, Vn as EngineExecutionLimitsPolicy, Vt as EngineRunCounters, Wi as PreparedNodeActivationDispatch, Wn as RunEventBus, Wt as NodeExecutionSnapshot, Zn as ActivationIdFactory, _a as WorkflowActivationPolicy, _n as RunTestContext, ao as CredentialJsonRecord, bi as ExecutionContext, bn as WorkflowExecutionPruneRepository, cn as RunExecutionOptions, di as BinaryStorageReadResult, do as CredentialSessionFactoryArgs, dr as NodeActivationId, eo as CredentialHealth, er as Edge, fa as WebhookInvocationMatch, fi as BinaryStorageStatResult, fn as RunResult, fo as CredentialSessionService, fr as NodeConfigBase, gi as EngineDeps, gn as RunSummary, ha as WebhookTriggerRoutingDiagnostics, ho as CredentialTypeDefinition, ht as CostCatalogEntry, ia as WorkflowRepository, ir as Items, ji as NodeActivationRequest, ki as NodeActivationContinuation, kr as RunDataSnapshot, la as HttpMethod, li as BinaryBody, lo as CredentialRequirement, lr as JsonValue, mi as BinaryStorageWriteResult, mo as CredentialType, mt as CostCatalog, na as TriggerTestItemsContext, nn as PersistedWorkflowSnapshotNode, nr as Item, pa as WebhookTriggerMatcher, pr as NodeDefinition, qa as CollectionsContext, qn as TestSuiteRunStatus, ra as WorkflowNodeInstanceFactory, si as RetryPolicySpec, ta as TriggerSetupStateRepository, tr as ExecutionMode, ua as TriggerInstanceId, ui as BinaryStorage, un as RunPruneCandidate, ur as MutableRunData, va as ExecutionTelemetry, vr as NodeInspectorSummaryRow, wr as NodeSchedulerDecision, xi as ExecutionContextFactory, xn as WorkflowExecutionRepository, xo as PollingTriggerLogger, xr as NodeOffloadPolicy, ya as ExecutionTelemetryFactory, yi as ExecutionBinaryService, yn as WorkflowExecutionListingRepository, zi as NodeExecutionStatePublisher, zr as WorkflowDefinition, zt as ConnectionInvocationRecord } from "./index-CSKKuK60.js";
+import { i as WorkflowSnapshotCodec, u as Engine } from "./RunIntentService-BOSGwmqn.js";
+import { B as ZodSchemaAny, K as CallableToolConfig, q as CallableToolConfigOptions } from "./ItemsInputNormalizer-C09a7iFP.js";
+import { ZodType, z } from "zod";
 
 //#region src/orchestration/AbortControllerFactory.d.ts
 /**
@@ -34,102 +36,136 @@ declare class SystemClock implements Clock {
   now(): Date;
 }
 //#endregion
-//#region src/authoring/defineNode.types.d.ts
-type MaybePromise$2<TValue> = TValue | Promise<TValue>;
-type ResolvableCredentialType = AnyCredentialType | CredentialTypeId;
-type SessionForCredentialType<TCredential extends ResolvableCredentialType> = TCredential extends AnyCredentialType ? Awaited<ReturnType<TCredential["createSession"]>> : unknown;
-type DefinedNodeCredentialBinding = ResolvableCredentialType | Readonly<{
-  readonly type: ResolvableCredentialType | ReadonlyArray<ResolvableCredentialType>;
-  readonly label?: string;
-  readonly optional?: true;
-  readonly helpText?: string;
-  readonly helpUrl?: string;
-}>;
-type DefinedNodeCredentialBindings = Readonly<Record<string, DefinedNodeCredentialBinding>>;
-type SessionForBinding<TBinding extends DefinedNodeCredentialBinding> = TBinding extends Readonly<{
-  type: infer TType;
-}> ? TType extends ReadonlyArray<infer TEntry> ? SessionForCredentialType<TEntry & ResolvableCredentialType> : SessionForCredentialType<TType & ResolvableCredentialType> : SessionForCredentialType<TBinding & ResolvableCredentialType>;
-type DefinedNodeCredentialAccessors<TBindings extends DefinedNodeCredentialBindings | undefined> = TBindings extends DefinedNodeCredentialBindings ? Readonly<{ [TKey in keyof TBindings]: () => Promise<SessionForBinding<TBindings[TKey]>> }> : Readonly<Record<string, never>>;
-interface DefinedNodeRunContext<TConfig$1 extends CredentialJsonRecord, TBindings extends DefinedNodeCredentialBindings | undefined> {
-  readonly config: TConfig$1;
-  readonly credentials: DefinedNodeCredentialAccessors<TBindings>;
-  readonly execution: NodeExecutionContext<RunnableNodeConfig<TConfig$1, unknown>>;
+//#region src/contracts/humanTaskStoreTypes.d.ts
+type HumanTaskStatus = "pending" | "decided" | "timed_out" | "auto_accepted" | "cancelled";
+/** Persisted record for a single HITL task instance. */
+interface HumanTaskRecord {
+  readonly id: string;
+  readonly runId: string;
+  readonly workflowId: string;
+  readonly workspaceId?: string;
+  readonly nodeId: string;
+  readonly activationId: string;
+  readonly itemIndex: number;
+  readonly status: HumanTaskStatus;
+  readonly channel: string;
+  readonly subject: HumanTaskSubject;
+  readonly metadata: Record<string, JsonValue>;
+  readonly decisionSchemaJson: string;
+  readonly decisionSchemaHash: string;
+  readonly onTimeout: "halt" | "auto-accept";
+  readonly deliveryRef?: JsonValue;
+  readonly decision?: JsonValue;
+  readonly decidedAt?: Date;
+  readonly decidedBy?: HumanTaskActor;
+  readonly resumeTokenHash: string;
+  readonly expiresAt: Date;
+  readonly createdAt: Date;
+}
+interface HumanTaskStore {
+  create(record: HumanTaskRecord): Promise<void>;
+  findById(taskId: string): Promise<HumanTaskRecord | undefined>;
+  findByResumeTokenHash(tokenHash: string): Promise<HumanTaskRecord | undefined>;
+  findPendingForWorkspace(workspaceId: string): Promise<ReadonlyArray<HumanTaskRecord>>;
+  /** Returns all pending tasks regardless of workspace. Used by the local dev inbox (non-managed mode). */
+  findAllPending(): Promise<ReadonlyArray<HumanTaskRecord>>;
+  markDecided(args: {
+    taskId: string;
+    decision: JsonValue;
+    decidedBy: HumanTaskActor;
+    decidedAt: Date;
+  }): Promise<void>;
+  markTimedOut(taskId: string): Promise<void>;
+  markAutoAccepted(taskId: string): Promise<void>;
+  markCancelled(taskId: string): Promise<void>;
+  cancelPendingForRun(runId: string): Promise<void>;
 }
+declare const HumanTaskStoreToken: TypeToken<HumanTaskStore | undefined>;
+//#endregion
+//#region src/contracts/hitlSeamTypes.d.ts
 /**
- * Arguments for {@link defineNode} `execute` (engine `ctx` matches {@link RunnableNode.execute};
- * the second callback parameter adds {@link DefinedNodeRunContext} for credential accessors).
+ * Seam interfaces for HITL collaborators that are implemented in `@codemation/host`
+ * and injected into `NodeSuspensionHandler` at runtime. Core defines the interface only —
+ * no HTTP, vendor SDK, or Prisma dependencies here.
  */
-type DefineNodeExecuteArgs<TConfig$1 extends CredentialJsonRecord, TInputJson> = Readonly<{
-  input: TInputJson;
-  item: Item;
-  itemIndex: number;
-  items: Items;
-  ctx: NodeExecutionContext<RunnableNodeConfig<TInputJson, unknown> & Readonly<{
-    config: TConfig$1;
-  }>>;
-}>;
-type DefinedNodeConfigInput<TConfigResolved extends CredentialJsonRecord, TItemJson> = ParamDeep<TConfigResolved, TItemJson>;
-interface DefinedNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, _TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
-  readonly kind: "defined-node";
-  readonly key: TKey$1;
-  readonly title: string;
-  readonly description?: string;
-  create<TConfigItemJson = TInputJson>(config: DefinedNodeConfigInput<TConfig$1, TConfigItemJson>, name?: string, id?: string): RunnableNodeConfig<TInputJson, TOutputJson>;
-  register(context: {
-    registerNode<TValue>(token: TypeToken<TValue>, implementation?: TypeToken<TValue>): void;
-  }): void;
+/** Signs and hashes a HITL resume token. Core only needs the sign and hash operations. */
+interface HitlResumeTokenSignerSeam {
+  sign(args: {
+    taskId: string;
+    expiresAt: Date;
+    schemaHash: string;
+  }): string;
+  hashToken(token: string): string;
+}
+/** Schedules a delayed BullMQ job that drives the timeout path. */
+interface HitlTimeoutJobSchedulerSeam {
+  enqueueTimeoutJob(args: {
+    taskId: string;
+    expiresAt: Date;
+  }): Promise<void>;
 }
+declare const HitlResumeTokenSignerToken: TypeToken<HitlResumeTokenSignerSeam | undefined>;
+declare const HitlTimeoutJobSchedulerToken: TypeToken<HitlTimeoutJobSchedulerSeam | undefined>;
 /**
- * Plugin / DSL-friendly node: per-item `execute` with optional {@link RunnableNodeConfig.inputSchema}.
+ * Optional workspace ID injected into NodeSuspensionHandler in managed mode (T7 security fix).
+ * Allows the handler to stamp the workspaceId on each HumanTaskRecord so HitlCallbackHandler
+ * can assert workspace identity independently of the HMAC middleware.
+ * Not registered in non-managed mode; NodeSuspensionHandler defaults to null.
  */
-interface DefineNodeOptions<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
-  readonly key: TKey$1;
-  readonly title: string;
-  readonly description?: string;
-  /**
-   * Canvas icon for this node (same contract as `NodeConfigBase.icon` on runnable configs).
-   * The Next host resolves Lucide (`lucide:…`), built-in SVGs (`builtin:…`), Simple Icons (`si:…`), and image URLs (`https:`, `data:`, `/…`).
-   */
-  readonly icon?: string;
-  /** Default values / form hints for **static** node configuration (credentials, retry, IDs), not per-item payload. */
-  readonly input?: Readonly<Record<keyof TConfig$1 & string, unknown>>;
-  readonly configSchema?: z.ZodType<TConfig$1>;
-  readonly credentials?: TBindings;
-  /**
-   * Validates **`input`** (engine also accepts `inputSchema` on the node class).
-   */
-  readonly inputSchema?: ZodType<TInputJson>;
-  /** Preserve inbound `item.binary` when `execute` returns plain JSON or item-shaped results without `binary`. */
-  readonly keepBinaries?: boolean;
-  /**
-   * Static configuration summary surfaced in the workflow inspector — see
-   * {@link import("../contracts/workflowTypes").NodeConfigBase.inspectorSummary}.
-   *
-   * Receives the static config; returns 2–6 short label/value pairs (or `undefined` to skip).
-   */
-  readonly inspectorSummary?: (args: Readonly<{
-    config: TConfig$1;
-  }>) => ReadonlyArray<NodeInspectorSummaryRow> | undefined;
-  execute(args: DefineNodeExecuteArgs<TConfig$1, TInputJson>, context: DefinedNodeRunContext<TConfig$1, TBindings>): MaybePromise$2<TOutputJson>;
-}
+declare const HitlWorkspaceIdToken: TypeToken<string | undefined>;
+//#endregion
+//#region src/contracts/inboxChannelTypes.d.ts
 /**
- * Batch-oriented defined node: `run` receives all item JSON once (last item in activation); emits one output per input row.
+ * A single inbox delivery channel.
+ * Implementations: `LocalInboxChannel`, `ControlPlaneInboxChannel`.
  */
-interface DefineBatchNodeOptions<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
-  readonly key: TKey$1;
-  readonly title: string;
-  readonly description?: string;
-  readonly icon?: string;
-  readonly input?: Readonly<Record<keyof TConfig$1 & string, unknown>>;
-  readonly configSchema?: z.ZodType<TConfig$1>;
-  readonly credentials?: TBindings;
-  readonly inspectorSummary?: (args: Readonly<{
-    config: TConfig$1;
-  }>) => ReadonlyArray<NodeInspectorSummaryRow> | undefined;
-  run(items: ReadonlyArray<TInputJson>, context: DefinedNodeRunContext<TConfig$1, TBindings>): MaybePromise$2<ReadonlyArray<TOutputJson>>;
-}
-declare function defineNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefineNodeOptions<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>): DefinedNode<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>;
-declare function defineBatchNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefineBatchNodeOptions<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>): DefinedNode<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>;
+interface InboxChannel {
+  readonly kind: "local" | "control-plane-inbox";
+  deliver(args: InboxDeliverArgs): Promise<InboxDelivery>;
+  updateOnDecision?(args: InboxOnDecisionArgs): Promise<void>;
+  updateOnTimeout?(args: InboxOnTimeoutArgs): Promise<void>;
+}
+type InboxDeliverArgs = Readonly<{
+  task: HumanTaskHandle;
+  subject: HumanTaskSubject;
+  priority: "low" | "normal" | "high";
+  item: Item;
+  /** Present in managed mode (from `PairingConfig.workspaceId`). */
+  workspaceId?: string;
+}>;
+type InboxDelivery = {
+  kind: "local";
+  inboxItemId: string;
+} | {
+  kind: "cp";
+  inboxItemId: string;
+  workspaceId: string;
+};
+type InboxOnDecisionArgs = Readonly<{
+  delivery: InboxDelivery;
+  decision: {
+    approved: boolean;
+    note?: string;
+  };
+  actor: HumanTaskActor;
+}>;
+type InboxOnTimeoutArgs = Readonly<{
+  delivery: InboxDelivery;
+  policy: "halt" | "auto-accept";
+}>;
+/**
+ * Resolves the correct `InboxChannel` for the current deployment mode
+ * (local dev vs. managed/CP). Implemented in `@codemation/host`.
+ */
+interface InboxChannelResolverSeam {
+  resolve(): {
+    channel: InboxChannel;
+    workspaceId?: string;
+  };
+}
+declare const InboxChannelResolverToken: TypeToken<InboxChannelResolverSeam | undefined>;
+declare const LocalInboxChannelToken: TypeToken<InboxChannel | undefined>;
+declare const ControlPlaneInboxChannelToken: TypeToken<InboxChannel | undefined>;
 //#endregion
 //#region src/authoring/DefinedNodeRegistry.d.ts
 declare class DefinedNodeRegistry {
@@ -159,288 +195,6 @@ declare function defineCredential<TPublicSource extends CredentialFieldMap<any>
   readonly key: string;
 };
 //#endregion
-//#region src/ai/NodeBackedToolConfig.d.ts
-declare class NodeBackedToolConfig<TNodeConfig extends RunnableNodeConfig<any, any>, TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> implements ToolConfig {
-  readonly name: string;
-  readonly node: TNodeConfig;
-  readonly type: TypeToken<unknown>;
-  readonly toolKind: "nodeBacked";
-  readonly description?: string;
-  readonly presentation?: AgentCanvasPresentation;
-  private readonly inputSchemaValue;
-  private readonly outputSchemaValue;
-  private readonly mapInputValue?;
-  private readonly mapOutputValue?;
-  constructor(name: string, node: TNodeConfig, options: NodeBackedToolConfigOptions<TNodeConfig, TInputSchema, TOutputSchema>);
-  getCredentialRequirements(): ReadonlyArray<CredentialRequirement>;
-  getInputSchema(): TInputSchema;
-  getOutputSchema(): TOutputSchema;
-  toNodeItem(args: NodeBackedToolInputMapperArgs<TNodeConfig, input<TInputSchema>>): Item<RunnableNodeInputJson<TNodeConfig>>;
-  toToolOutput(args: NodeBackedToolOutputMapperArgs<TNodeConfig, input<TInputSchema>>): output<TOutputSchema>;
-  private readDefaultToolOutput;
-  private isItem;
-}
-//#endregion
-//#region src/ai/CallableToolConfig.d.ts
-type CallableToolExecuteHandler<TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> = (args: ToolExecuteArgs<CallableToolConfig<TInputSchema, TOutputSchema>, input<TInputSchema>>) => Promise<output<TOutputSchema>> | output<TOutputSchema>;
-type CallableToolConfigOptions<TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> = Readonly<{
-  name: string;
-  description?: string;
-  presentation?: AgentCanvasPresentation;
-  inputSchema: TInputSchema;
-  outputSchema: TOutputSchema;
-  /**
-   * Optional credential slots for this tool (same contract as other {@link ToolConfig} shapes).
-   */
-  credentialRequirements?: ReadonlyArray<CredentialRequirement>;
-  execute: CallableToolExecuteHandler<TInputSchema, TOutputSchema>;
-}>;
-/**
- * Inline callable agent tool: DSL sugar over {@link ToolConfig} without a separate {@link NodeResolver}-registered {@link Tool} class.
- */
-declare class CallableToolConfig<TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> implements ToolConfig {
-  readonly name: string;
-  readonly type: TypeToken<unknown>;
-  readonly toolKind: "callable";
-  readonly description?: string;
-  readonly presentation?: AgentCanvasPresentation;
-  private readonly inputSchemaValue;
-  private readonly outputSchemaValue;
-  private readonly credentialRequirementsValue?;
-  private readonly executeHandler;
-  constructor(name: string, options: CallableToolConfigOptions<TInputSchema, TOutputSchema>);
-  getCredentialRequirements(): ReadonlyArray<CredentialRequirement>;
-  getInputSchema(): TInputSchema;
-  getOutputSchema(): TOutputSchema;
-  /**
-   * Parses tool input and output with the configured Zod schemas.
-   */
-  executeTool(args: ToolExecuteArgs<CallableToolConfig<TInputSchema, TOutputSchema>, input<TInputSchema>>): Promise<output<TOutputSchema>>;
-  private parseInput;
-  private parseOutput;
-  private decorateValidationError;
-}
-//#endregion
-//#region src/ai/CallableToolFactory.d.ts
-declare class CallableToolFactoryImpl {
-  callableTool<TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny>(options: CallableToolConfigOptions<TInputSchema, TOutputSchema>): CallableToolConfig<TInputSchema, TOutputSchema>;
-}
-declare const CallableToolFactory: CallableToolFactoryImpl;
-//#endregion
-//#region src/ai/CallableToolKindToken.d.ts
-/**
- * Shared {@link import("../di").TypeToken} marker for {@link CallableToolConfig}.
- * Callable tools are not registered in {@link NodeResolver}; this class only satisfies {@link ToolConfig#type}.
- */
-declare class CallableToolKindToken {}
-//#endregion
-//#region src/ai/AgentToolFactory.d.ts
-declare class AgentToolFactoryImpl {
-  asTool<TNodeConfig extends RunnableNodeConfig<any, any>, TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny>(node: TNodeConfig, options: Readonly<{
-    name?: string;
-  } & NodeBackedToolConfigOptions<TNodeConfig, TInputSchema, TOutputSchema>>): NodeBackedToolConfig<TNodeConfig, TInputSchema, TOutputSchema>;
-  private withDefaultAgentInputMapper;
-  private mergeAgentToolInputWithCurrentItem;
-  private isMergeableRecord;
-}
-declare const AgentToolFactory: AgentToolFactoryImpl;
-//#endregion
-//#region src/ai/AgentMessageConfigNormalizerFactory.d.ts
-declare class AgentMessageConfigNormalizer {
-  /**
-   * Prefer {@code input.messages} when present (ItemNode / engine-mapped payloads); otherwise resolve from
-   * {@link AgentNodeConfig.messages} templates.
-   */
-  static resolveFromInputOrConfig<TInputJson, TOutputJson>(input: unknown, config: AgentNodeConfig<TInputJson, TOutputJson>, args: AgentMessageBuildArgs<TInputJson>): ReadonlyArray<AgentMessageDto>;
-  static normalize<TInputJson, TOutputJson>(config: AgentNodeConfig<TInputJson, TOutputJson>, args: AgentMessageBuildArgs<TInputJson>): ReadonlyArray<AgentMessageDto>;
-  private static tryMessagesFromStructuredInput;
-  private static normalizeRichMessages;
-  private static lineToDto;
-}
-//#endregion
-//#region src/ai/AgentConfigInspectorFactory.d.ts
-declare class AgentConfigInspector {
-  static isAgentNodeConfig(config: NodeConfigBase | undefined): config is AgentNodeConfig<any, any>;
-  private static hasCompatibleMessageConfiguration;
-}
-//#endregion
-//#region src/ai/AiHost.d.ts
-interface AgentCanvasPresentation<TIcon extends string = string> {
-  readonly label?: string;
-  readonly icon?: TIcon;
-}
-type ZodSchemaAny = ZodType<any, any, any>;
-interface ToolConfig {
-  readonly type: TypeToken<unknown>;
-  readonly name: string;
-  readonly description?: string;
-  readonly presentation?: AgentCanvasPresentation;
-  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
-}
-type ToolExecuteArgs<TConfig$1 extends ToolConfig = ToolConfig, TInput = unknown> = Readonly<{
-  config: TConfig$1;
-  input: TInput;
-  ctx: NodeExecutionContext<any>;
-  item: Item;
-  itemIndex: number;
-  items: Items;
-  /**
-   * Optional sub-agent boundary hooks: when present, the live `agent.tool.call` span and the
-   * planned tool-call invocationId are forwarded so node-backed runtimes can re-root their child
-   * execution scope. Plain function tools may safely ignore these hooks.
-   */
-  hooks?: Readonly<{
-    parentSpan?: TelemetrySpanScope;
-    parentInvocationId?: ConnectionInvocationId;
-  }>;
-}>;
-interface Tool<TConfig$1 extends ToolConfig = ToolConfig, TInputSchema extends ZodSchemaAny = ZodSchemaAny, TOutputSchema extends ZodSchemaAny = ZodSchemaAny> {
-  readonly defaultDescription: string;
-  readonly inputSchema: TInputSchema;
-  readonly outputSchema: TOutputSchema;
-  execute(args: ToolExecuteArgs<TConfig$1, input<TInputSchema>>): Promise<output<TOutputSchema>> | output<TOutputSchema>;
-}
-type AgentTool<TInputSchema extends ZodSchemaAny = ZodSchemaAny, TOutputSchema extends ZodSchemaAny = ZodSchemaAny> = Tool<ToolConfig, TInputSchema, TOutputSchema>;
-type AgentToolExecuteArgs<TInput = unknown> = ToolExecuteArgs<ToolConfig, TInput>;
-type AgentToolToken = TypeToken<Tool<ToolConfig, ZodSchemaAny, ZodSchemaAny>>;
-type AgentMessageRole = "system" | "user" | "assistant";
-type AgentMessageBuildArgs<TInputJson = unknown> = Readonly<{
-  item: Item<TInputJson>;
-  itemIndex: number;
-  items: Items<TInputJson>;
-  ctx: NodeExecutionContext<any>;
-}>;
-interface AgentMessageDto {
-  readonly role: AgentMessageRole;
-  readonly content: string;
-}
-type AgentMessageTemplateContent<TInputJson = unknown> = string | ((args: AgentMessageBuildArgs<TInputJson>) => string);
-interface AgentMessageTemplate<TInputJson = unknown> {
-  readonly role: AgentMessageRole;
-  readonly content: AgentMessageTemplateContent<TInputJson>;
-}
-/** A single prompt line: fixed DTO or template with optional function `content`. */
-type AgentMessageLine<TInputJson = unknown> = AgentMessageDto | AgentMessageTemplate<TInputJson>;
-/**
- * Message list for an agent. Prefer a **plain array** of `{ role, content }` (optionally with function `content` for templates).
- * Use the object form only when you need `buildMessages` to append messages after optional `prompt` lines.
- */
-type AgentMessageConfig<TInputJson = unknown> = Expr<ReadonlyArray<AgentMessageLine<TInputJson>>, TInputJson> | ReadonlyArray<AgentMessageLine<TInputJson>> | {
-  readonly prompt?: ReadonlyArray<AgentMessageLine<TInputJson>>;
-  readonly buildMessages?: (args: AgentMessageBuildArgs<TInputJson>) => ReadonlyArray<AgentMessageDto>;
-};
-type AgentTurnLimitBehavior = "error" | "respondWithLastMessage";
-interface AgentModelInvocationOptions {
-  readonly maxTokens?: number;
-  readonly providerOptions?: Readonly<Record<string, JsonValue>>;
-}
-interface AgentGuardrailConfig {
-  readonly maxTurns?: number;
-  readonly onTurnLimitReached?: AgentTurnLimitBehavior;
-  readonly modelInvocationOptions?: AgentModelInvocationOptions;
-}
-/** Defaults aligned with common tool-agent iteration limits (many products use ~10 max rounds). */
-declare const AgentGuardrailDefaults: {
-  readonly maxTurns: 10;
-  readonly onTurnLimitReached: AgentTurnLimitBehavior;
-};
-interface AgentToolDefinition {
-  readonly name: string;
-  readonly description: string;
-  readonly inputSchema: ZodSchemaAny;
-}
-type AgentToolCall = Readonly<{
-  id?: string;
-  name: string;
-  input: unknown;
-}>;
-type AgentToolCallPlanner<_TNodeConfig = unknown> = (item: Item, index: number, items: Items, ctx: NodeExecutionContext<any>) => ReadonlyArray<AgentToolCall>;
-interface ChatModelConfig {
-  readonly type: TypeToken<ChatModelFactory<ChatModelConfig>>;
-  readonly name: string;
-  readonly provider?: string;
-  readonly modelName?: string;
-  readonly presentation?: AgentCanvasPresentation;
-  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
-}
-/**
- * Provider-neutral chat language model wrapper returned by a {@link ChatModelFactory}.
- *
- * Thin adapter around an AI SDK `LanguageModelV2` (from `@ai-sdk/provider`) plus the call-site
- * defaults Codemation needs at every generate/stream: the provider label, the model name used for
- * pricing / telemetry, and the default invocation options (max output tokens, temperature,
- * provider-specific overrides).
- *
- * The consumer (AIAgentNode / AgentStructuredOutputRunner) passes `languageModel` directly into
- * `generateText({ model, ... })` from the `ai` package.
- */
-interface ChatLanguageModel {
-  /** AI SDK `LanguageModelV2` instance (kept `unknown` to avoid leaking the SDK type into `@codemation/core`). */
-  readonly languageModel: unknown;
-  /** Stable pricing/telemetry key — e.g. `"gpt-4.1-nano"`. */
-  readonly modelName: string;
-  /** Provider label — e.g. `"openai"`. Used for cost tracking. */
-  readonly provider?: string;
-  /** Defaults merged into every call. Consumers may override per-invocation. */
-  readonly defaultCallOptions?: ChatLanguageModelCallOptions;
-}
-interface ChatLanguageModelCallOptions {
-  readonly maxOutputTokens?: number;
-  readonly temperature?: number;
-  readonly providerOptions?: Readonly<Record<string, Readonly<Record<string, JsonValue>>>>;
-}
-/**
- * Options for a structured-output generate call. Mirrors
- * `generateText({ output: Output.object(...) })` from the `ai` package.
- */
-interface StructuredOutputOptions {
-  /** Optional schema name — used by some providers as the JSON schema name attribute. */
-  readonly schemaName?: string;
-  /** When `true`, the consumer should pass a strict-mode-compatible JSON Schema record. */
-  readonly strict?: boolean;
-}
-interface ChatModelFactory<TConfig$1 extends ChatModelConfig = ChatModelConfig> {
-  create(args: Readonly<{
-    config: TConfig$1;
-    ctx: NodeExecutionContext<any>;
-  }>): Promise<ChatLanguageModel> | ChatLanguageModel;
-}
-type NodeBackedToolInputMapperArgs<TNodeConfig extends RunnableNodeConfig<any, any>, TToolInput = unknown> = Readonly<{
-  input: TToolInput;
-  item: Item;
-  itemIndex: number;
-  items: Items;
-  ctx: NodeExecutionContext<any>;
-  node: TNodeConfig;
-}>;
-type NodeBackedToolOutputMapperArgs<TNodeConfig extends RunnableNodeConfig<any, any>, TToolInput = unknown> = Readonly<{
-  input: TToolInput;
-  item: Item;
-  itemIndex: number;
-  items: Items;
-  ctx: NodeExecutionContext<any>;
-  node: TNodeConfig;
-  outputs: NodeOutputs;
-}>;
-type NodeBackedToolInputMapper<TNodeConfig extends RunnableNodeConfig<any, any>, TToolInput = unknown> = (args: NodeBackedToolInputMapperArgs<TNodeConfig, TToolInput>) => Item<RunnableNodeInputJson<TNodeConfig>> | RunnableNodeInputJson<TNodeConfig>;
-type NodeBackedToolOutputMapper<TNodeConfig extends RunnableNodeConfig<any, any>, TToolInput = unknown, TToolOutput = unknown> = (args: NodeBackedToolOutputMapperArgs<TNodeConfig, TToolInput>) => TToolOutput;
-type NodeBackedToolConfigOptions<TNodeConfig extends RunnableNodeConfig<any, any>, TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> = Readonly<{
-  description?: string;
-  presentation?: AgentCanvasPresentation;
-  inputSchema: TInputSchema;
-  outputSchema: TOutputSchema;
-  mapInput?: NodeBackedToolInputMapper<TNodeConfig, input<TInputSchema>>;
-  mapOutput?: NodeBackedToolOutputMapper<TNodeConfig, input<TInputSchema>, output<TOutputSchema>>;
-}>;
-interface AgentNodeConfig<TInputJson = unknown, TOutputJson = unknown> extends RunnableNodeConfig<TInputJson, TOutputJson> {
-  readonly messages: AgentMessageConfig<TInputJson>;
-  readonly chatModel: ChatModelConfig;
-  readonly tools?: ReadonlyArray<ToolConfig>;
-  readonly guardrails?: AgentGuardrailConfig;
-  readonly outputSchema?: ZodType<TOutputJson>;
-}
-type AgentAttachmentRole = "languageModel" | "tool" | "nestedAgent";
-//#endregion
 //#region src/authoring/callableTool.types.d.ts
 /**
  * Workflow-facing helper for inline Zod-typed agent tools (same as {@link CallableToolFactory.callableTool}).
@@ -544,12 +298,12 @@ type DefinePollingTriggerTestItemsContext<TConfig$1 extends TriggerNodeConfig<an
 /**
  * Options accepted by `definePollingTrigger`.
  */
-interface DefinePollingTriggerOptions<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TItemJson, TState extends JsonValue | undefined, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
+interface DefinePollingTriggerOptions<TKey extends string, TConfig$1 extends CredentialJsonRecord, TItemJson, TState extends JsonValue | undefined, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
   /**
    * Unique node-token-id-style key, e.g. `"msgraph-mail.on-new-mail"`.
    * Used as the persisted runtime type name — must be stable across deployments.
    */
-  readonly key: TKey$1;
+  readonly key: TKey;
   readonly title: string;
   readonly description?: string;
   /** Canvas icon (same contract as `NodeConfigBase.icon`). */
@@ -604,9 +358,9 @@ interface DefinePollingTriggerOptions<TKey$1 extends string, TConfig$1 extends C
  *
  * `poll` is also directly callable for unit-testing — no runtime needed.
  */
-interface DefinedPollingTrigger<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TItemJson, TState extends JsonValue | undefined, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
+interface DefinedPollingTrigger<TKey extends string, TConfig$1 extends CredentialJsonRecord, TItemJson, TState extends JsonValue | undefined, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
   readonly kind: "defined-polling-trigger";
-  readonly key: TKey$1;
+  readonly key: TKey;
   readonly title: string;
   readonly description?: string;
   /**
@@ -671,28 +425,7 @@ declare class DefinedPollingTriggerConfig<TConfig$1 extends CredentialJsonRecord
  * });
  * ```
  */
-declare function definePollingTrigger<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TItemJson, TState extends JsonValue | undefined, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefinePollingTriggerOptions<TKey$1, TConfig$1, TItemJson, TState, TBindings>): DefinedPollingTrigger<TKey$1, TConfig$1, TItemJson, TState, TBindings>;
-//#endregion
-//#region src/ai/AgentConnectionNodeCollector.d.ts
-type AgentConnectionNodeRole = "languageModel" | "tool" | "nestedAgent";
-type AgentConnectionCredentialSource = Readonly<{
-  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
-}>;
-type AgentConnectionNodeDescriptor = Readonly<{
-  nodeId: NodeId;
-  parentNodeId: NodeId;
-  connectionName: NodeConnectionName;
-  role: AgentConnectionNodeRole;
-  name: string;
-  typeName: string;
-  icon?: string;
-  credentialSource: AgentConnectionCredentialSource;
-}>;
-type McpServerResolver = (id: string) => McpServerDeclaration | undefined;
-type AgentConnectionNodeCollectorApi = Readonly<{
-  collect(parentNodeId: NodeId, agentConfig: AgentNodeConfig<any, any>, mcpServerResolver?: McpServerResolver): ReadonlyArray<AgentConnectionNodeDescriptor>;
-}>;
-declare const AgentConnectionNodeCollector: AgentConnectionNodeCollectorApi;
+declare function definePollingTrigger<TKey extends string, TConfig$1 extends CredentialJsonRecord, TItemJson, TState extends JsonValue | undefined, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefinePollingTriggerOptions<TKey, TConfig$1, TItemJson, TState, TBindings>): DefinedPollingTrigger<TKey, TConfig$1, TItemJson, TState, TBindings>;
 //#endregion
 //#region src/events/ConnectionInvocationEventPublisher.d.ts
 /**
@@ -801,18 +534,6 @@ declare function tool(options?: PersistedRuntimeTypeDecoratorOptions): ClassDeco
 /** Marks a class as a persisted chat-model runtime type and an injectable tsyringe service. */
 declare function chatModel(options?: PersistedRuntimeTypeDecoratorOptions): ClassDecorator;
 //#endregion
-//#region src/serialization/ItemsInputNormalizer.d.ts
-/**
- * Normalizes external inputs into the engine's canonical `Items` shape.
- * Used at host and builder boundaries where callers may provide either a raw value,
- * a single item-like object, or an array of item-like values.
- */
-declare class ItemsInputNormalizer {
-  normalize(raw: unknown): Items;
-  private normalizeItem;
-  private isItem;
-}
-//#endregion
 //#region src/binaries/UnavailableBinaryStorage.d.ts
 declare class UnavailableBinaryStorage implements BinaryStorage {
   readonly driverName = "unavailable";
@@ -883,8 +604,9 @@ declare class DefaultExecutionContextFactory implements ExecutionContextFactory
   private readonly costTrackingFactory;
   private readonly currentDate;
   private readonly collections?;
+  private readonly nodeResolver?;
   private readonly telemetryDecoratorFactory;
-  constructor(binaryStorage?: BinaryStorage, telemetryFactory?: ExecutionTelemetryFactory, costTrackingFactory?: CostTrackingTelemetryFactory, currentDate?: () => Date, collections?: CollectionsContext | undefined);
+  constructor(binaryStorage?: BinaryStorage, telemetryFactory?: ExecutionTelemetryFactory, costTrackingFactory?: CostTrackingTelemetryFactory, currentDate?: () => Date, collections?: CollectionsContext | undefined, nodeResolver?: NodeResolver | undefined);
   create(args: {
     runId: RunId;
     workflowId: WorkflowId;
@@ -954,15 +676,71 @@ declare class NodeOutputNormalizer {
   private applyOutput;
 }
 //#endregion
+//#region src/execution/NodeSuspensionHandler.d.ts
+/**
+ * Handles per-item `SuspensionRequest` catches in the engine's item execution loop.
+ *
+ * Responsibilities:
+ * 1. Generate a `taskId` (UUID v4).
+ * 2. Persist a `HumanTask` row via `HumanTaskStore.create`.
+ * 3. Sign a resume URL via `HitlResumeTokenSigner.sign`.
+ * 4. Enqueue a delayed BullMQ timeout job via `HitlTimeoutJobScheduler.enqueue`.
+ * 5. Build a `HumanTaskHandle` and call `deliver`.
+ * 6. Append a `PersistedSuspensionEntry` to the run state and flip status to `"suspended"`.
+ * 7. Persist via `WorkflowExecutionRepository.save`.
+ * 8. Throw `RunSuspendedError` so the caller can exit cleanly.
+ *
+ * If `deliver` throws, the error propagates up to `NodeExecutionRequestHandlerService`
+ * which routes it through `resumeFromNodeError` → run status becomes `"failed"`.
+ *
+ * `humanTaskStore`, `tokenSigner`, and `timeoutScheduler` are optional —
+ * when not registered (e.g. in unit tests), the handler still suspends the run but
+ * skips persistence, token signing, and job scheduling.
+ */
+declare class NodeSuspensionHandler {
+  private readonly workflowExecutionRepository;
+  private readonly humanTaskStore?;
+  private readonly tokenSigner?;
+  private readonly timeoutScheduler?;
+  /** Workspace ID to stamp on HumanTaskRecord in managed mode (T7 security fix). Null in non-managed mode. */
+  private readonly workspaceId?;
+  constructor(workflowExecutionRepository: WorkflowExecutionRepository, humanTaskStore?: HumanTaskStore | undefined, tokenSigner?: HitlResumeTokenSignerSeam | undefined, timeoutScheduler?: HitlTimeoutJobSchedulerSeam | undefined, /** Workspace ID to stamp on HumanTaskRecord in managed mode (T7 security fix). Null in non-managed mode. */
+  workspaceId?: string | undefined);
+  handle(args: {
+    runId: RunId;
+    nodeId: NodeId;
+    activationId: NodeActivationId;
+    itemIndex: number;
+    suspensionRequest: SuspensionRequest;
+    state: PersistedRunState;
+    /** Telemetry scope of the node's per-item span. Used to emit `hitl.task.*` span events. */
+    telemetry?: TelemetryScope;
+  }): Promise<never>;
+  /**
+   * Parse a duration string into milliseconds.
+   * Accepts ISO 8601 durations ("PT24H", "PT30M") and shorthand ("24h", "30m", "1d").
+   * Throws for unrecognised formats.
+   */
+  private parseDurationMs;
+  private hashSchema;
+  private schemaToJson;
+}
+//#endregion
 //#region src/execution/NodeExecutor.d.ts
 declare class NodeExecutor {
   private readonly nodeInstanceFactory;
   private readonly retryRunner;
+  /** Required for HITL suspension support. When omitted, `SuspensionRequest` throws upward. */
+  private readonly suspensionHandler?;
+  /** Required alongside `suspensionHandler`. */
+  private readonly loadRunState?;
   private readonly fanInMerger;
   private readonly outputNormalizer;
   private readonly itemExprResolver;
   private readonly outputBehaviorResolver;
-  constructor(nodeInstanceFactory: WorkflowNodeInstanceFactory, retryRunner: InProcessRetryRunner, itemExprResolver?: ItemExprResolver, outputBehaviorResolver?: RunnableOutputBehaviorResolver);
+  constructor(nodeInstanceFactory: WorkflowNodeInstanceFactory, retryRunner: InProcessRetryRunner, itemExprResolver?: ItemExprResolver, outputBehaviorResolver?: RunnableOutputBehaviorResolver, /** Required for HITL suspension support. When omitted, `SuspensionRequest` throws upward. */
+  suspensionHandler?: NodeSuspensionHandler | undefined, /** Required alongside `suspensionHandler`. */
+  loadRunState?: ((runId: RunId) => Promise<PersistedRunState | undefined>) | undefined);
   execute(request: NodeActivationRequest): Promise<NodeOutputs>;
   private assertRequiredCredentialsBound;
   private isCredentialError;
@@ -1281,6 +1059,91 @@ interface OAuthFlowExecutor {
   }): Promise<OAuthMaterial>;
 }
 //#endregion
+//#region src/credentials/CredentialMaterialProvider.types.d.ts
+/**
+ * Material provider seam — see `docs/design/credentials-oauth-unification.md`,
+ * "Material provider seam" section. Sits beside the workspace's
+ * `CredentialStore`; persistence of the row stays at the store, persistence of
+ * the bytes goes through this provider so they can live at the control plane
+ * in managed mode.
+ */
+/**
+ * Pointer to material bytes. For local rows `ref` is the workspace instance id
+ * and the bytes co-locate with the row (existing `CredentialOAuth2Material` /
+ * `CredentialSecretMaterial` tables). For control-plane rows `ref` is the
+ * CP-side credential id; the workspace stores only the pointer.
+ */
+type CredentialMaterialRef = Readonly<{
+  source: "local" | "control-plane";
+  id: string;
+}>;
+/**
+ * Decrypted material bytes returned by a provider. Shape matches
+ * `OAuthMaterial` — every supported credential type today is OAuth-shaped.
+ */
+type MaterialBundle = OAuthMaterial;
+/**
+ * Caller context recorded by the CP material endpoint per fetch (D5 in the
+ * `credentials-vault` sprint README). The local provider accepts but ignores
+ * it; standalone mode has no audit log.
+ */
+type CallerContext = Readonly<{
+  workspaceId: string;
+  caller: Readonly<{
+    kind: "workflow-node";
+    workflowId: string;
+    nodeId: string;
+  }> | Readonly<{
+    kind: "concierge";
+    chatId: string;
+  }> | Readonly<{
+    kind: "research-agent";
+    chatId: string;
+  }> | Readonly<{
+    kind: "manual";
+    userId: string;
+  }>;
+  reason?: string;
+}>;
+interface CredentialMaterialProvider {
+  getMaterial(ref: CredentialMaterialRef, context: CallerContext): Promise<MaterialBundle>;
+  setMaterial(ref: CredentialMaterialRef, material: MaterialBundle): Promise<void>;
+}
+/**
+ * Thrown by a provider when asked to operate on a `ref.source` it does not
+ * handle (e.g. the local provider being asked to read `control-plane` bytes).
+ * Exported so `instanceof`-checks work across the workspace boundary.
+ */
+declare class IllegalMaterialSourceError extends Error {
+  readonly source: CredentialMaterialRef["source"];
+  readonly providerName: string;
+  constructor(source: CredentialMaterialRef["source"], providerName: string);
+}
+//#endregion
+//#region src/credentials/ManagedCredentialMaterialWriteError.d.ts
+/**
+ * Thrown by managed-mode providers when `setMaterial` is called. Managed
+ * credential bytes are owned by the control plane; the workspace must not
+ * mutate them. See `docs/design/credentials-oauth-unification.md` and
+ * `planning/sprints/credentials-vault/02-controlplane-material-provider.md`.
+ */
+declare class ManagedCredentialMaterialWriteError extends Error {
+  constructor(message?: string);
+}
+//#endregion
+//#region src/credentials/ManagedMaterialFetchError.d.ts
+/**
+ * Thrown by `ControlPlaneCredentialMaterialProvider` when the control-plane
+ * material endpoint returns a non-2xx response or a malformed body. Exposes
+ * the HTTP status and the raw error body so call sites can surface actionable
+ * detail without parsing strings.
+ */
+declare class ManagedMaterialFetchError extends Error {
+  readonly status: number;
+  readonly providerErrorBody: string;
+  constructor(status: number, providerErrorBody: string, message?: string);
+}
+//#endregion
 //#region src/orchestration/TestSuiteRunIdFactory.d.ts
 /**
  * Mints unique TestSuiteRun identifiers. Separated from {@link import("../types").RunIdFactory}
@@ -1298,7 +1161,7 @@ declare class TestSuiteRunIdFactory {
 interface TestSuiteOrchestratorEngine {
   runWorkflow(wf: WorkflowDefinition, startAt: NodeId, items: Items, parent?: ParentExecutionRef, executionOptions?: RunExecutionOptions): Promise<RunResult>;
   waitForCompletion(runId: RunId): Promise<Extract<RunResult, {
-    status: "completed" | "failed";
+    status: "completed" | "failed" | "halted";
   }>>;
 }
 interface TestSuiteCaseOutcome {
@@ -1349,5 +1212,5 @@ declare class TestSuiteOrchestrator {
   private publish;
 }
 //#endregion
-export { InjectableRuntimeDecoratorComposer as $, NodeBackedToolConfigOptions as $t, ConfigDrivenOffloadPolicy as A, defineBatchNode as An, AgentCanvasPresentation as At, DefaultAsyncSleeper as B, AgentModelInvocationOptions as Bt, InMemoryWorkflowExecutionRepository as C, DefineNodeOptions as Cn, CollectionIndexDefinition as Ct, HintOnlyOffloadPolicy as D, DefinedNodeCredentialBinding as Dn, defineCollection as Dt, LocalOnlyScheduler as E, DefinedNodeCredentialAccessors as En, c as Et, RunnableOutputBehaviorResolver as F, CredentialResolverFactory as Fn, AgentMessageDto as Ft, ItemsInputNormalizer as G, AgentToolDefinition as Gt, ChildExecutionScopeFactory as H, AgentTool as Ht, ItemExprResolver as I, AbortControllerFactory as In, AgentMessageLine as It, node as J, AgentTurnLimitBehavior as Jt, chatModel as K, AgentToolExecuteArgs as Kt, InProcessRetryRunner as L, AgentMessageRole as Lt, NodeInstanceFactory as M, Clock as Mn, AgentGuardrailDefaults as Mt, NodeExecutor as N, SystemClock as Nn, AgentMessageBuildArgs as Nt, DefaultDrivingScheduler as O, DefinedNodeCredentialBindings as On, callableTool as Ot, NodeOutputNormalizer as P, NodeEventPublisher as Pn, AgentMessageConfig as Pt, PersistedRuntimeTypeMetadataStore as Q, ChatModelFactory as Qt, CatalogBackedCostTrackingTelemetryFactory as R, AgentMessageTemplate as Rt, RunSummaryMapper as S, DefineNodeExecuteArgs as Sn, CollectionFieldDefinition as St, InMemoryBinaryStorage as T, DefinedNodeConfigInput as Tn, DefinedCollection as Tt, DefaultExecutionBinaryService as U, AgentToolCall as Ut, AsyncSleeper as V, AgentNodeConfig as Vt, UnavailableBinaryStorage as W, AgentToolCallPlanner as Wt, StackTraceCallSitePathResolver as X, ChatLanguageModelCallOptions as Xt, tool as Y, ChatLanguageModel as Yt, PersistedRuntimeTypeNameResolver as Z, ChatModelConfig as Zt, PollingTriggerRuntime as _, NodeBackedToolConfig as _n, DefinedPollingTriggerConfig as _t, TestSuiteRunResult as a, Tool as an, ConnectionInvocationEventPublisher as at, EngineCompositionDeps as b, DefinedNodeRegistry as bn, CollectionColumnBuilder as bt, OAuthFlowExecutor as c, ZodSchemaAny as cn, AgentConnectionNodeDescriptor as ct, OAuthMaterial as d, AgentToolFactory as dn, DefinePollingTriggerExecuteContext as dt, NodeBackedToolInputMapper as en, PersistedRuntimeTypeDecoratorOptions as et, WorkflowEdgePortValidator as f, CallableToolKindToken as fn, DefinePollingTriggerOptions as ft, PollingRunCycleResult as g, CallableToolExecuteHandler as gn, DefinedPollingTrigger as gt, PollingRunCycleArgs as h, CallableToolConfigOptions as hn, DefinePollingTriggerTestItemsContext as ht, TestSuiteOrchestratorEngine as i, StructuredOutputOptions as in, InMemoryRunEventBus as it, StaticCostCatalog as j, defineNode as jn, AgentGuardrailConfig as jt, InlineDrivingScheduler as k, DefinedNodeRunContext as kn, AgentAttachmentRole as kt, OAuthFlowStartArgs as l, AgentConfigInspector as ln, AgentConnectionNodeRole as lt, WorkflowEdgePortValidationResult as m, CallableToolConfig as mn, DefinePollingTriggerPollResult as mt, TestSuiteCaseOutcome as n, NodeBackedToolOutputMapper as nn, PersistedRuntimeTypeMetadata as nt, TestSuiteRunIdFactory as o, ToolConfig as on, AgentConnectionCredentialSource as ot, WorkflowEdgePortError as p, CallableToolFactory as pn, DefinePollingTriggerPollContext as pt, getPersistedRuntimeTypeMetadata as q, AgentToolToken as qt, TestSuiteOrchestrator as r, NodeBackedToolOutputMapperArgs as rn, EventPublishingWorkflowExecutionRepository as rt, OAuthFlowCallbackArgs as s, ToolExecuteArgs as sn, AgentConnectionNodeCollector as st, RunTestSuiteArgs as t, NodeBackedToolInputMapperArgs as tn, PersistedRuntimeTypeKind as tt, OAuthFlowStartResult as u, AgentMessageConfigNormalizer as un, McpServerResolver as ut, PollingTriggerStartArgs as v, DefineCredentialOptions as vn, definePollingTrigger as vt, InMemoryRunDataFactory as w, DefinedNode as wn, DefineCollectionOptions as wt, EngineFactory as x, DefineBatchNodeOptions as xn, CollectionDefinition as xt, WorkflowRepositoryWebhookTriggerMatcher as y, defineCredential as yn, DefinedCollectionRegistry as yt, DefaultExecutionContextFactory as z, AgentMessageTemplateContent as zt };
-//# sourceMappingURL=index-Bes88mxT.d.ts.map
+export { getPersistedRuntimeTypeMetadata as $, NodeEventPublisher as $t, InMemoryWorkflowExecutionRepository as A, DefineCredentialOptions as At, NodeExecutor as B, InboxOnTimeoutArgs as Bt, PollingRunCycleResult as C, CollectionFieldDefinition as Ct, EngineCompositionDeps as D, c as Dt, WorkflowRepositoryWebhookTriggerMatcher as E, DefinedCollection as Et, DefaultDrivingScheduler as F, InboxChannelResolverSeam as Ft, CatalogBackedCostTrackingTelemetryFactory as G, HitlTimeoutJobSchedulerToken as Gt, RunnableOutputBehaviorResolver as H, HitlResumeTokenSignerSeam as Ht, InlineDrivingScheduler as I, InboxChannelResolverToken as It, AsyncSleeper as J, HumanTaskStatus as Jt, DefaultExecutionContextFactory as K, HitlWorkspaceIdToken as Kt, ConfigDrivenOffloadPolicy as L, InboxDeliverArgs as Lt, InMemoryBinaryStorage as M, DefinedNodeRegistry as Mt, LocalOnlyScheduler as N, ControlPlaneInboxChannelToken as Nt, EngineFactory as O, defineCollection as Ot, HintOnlyOffloadPolicy as P, InboxChannel as Pt, chatModel as Q, SystemClock as Qt, StaticCostCatalog as R, InboxDelivery as Rt, PollingRunCycleArgs as S, CollectionDefinition as St, PollingTriggerStartArgs as T, DefineCollectionOptions as Tt, ItemExprResolver as U, HitlResumeTokenSignerToken as Ut, NodeOutputNormalizer as V, LocalInboxChannelToken as Vt, InProcessRetryRunner as W, HitlTimeoutJobSchedulerSeam as Wt, DefaultExecutionBinaryService as X, HumanTaskStoreToken as Xt, ChildExecutionScopeFactory as Y, HumanTaskStore as Yt, UnavailableBinaryStorage as Z, Clock as Zt, OAuthFlowStartResult as _, DefinedPollingTrigger as _t, TestSuiteRunResult as a, InjectableRuntimeDecoratorComposer as at, WorkflowEdgePortError as b, DefinedCollectionRegistry as bt, ManagedCredentialMaterialWriteError as c, PersistedRuntimeTypeMetadata as ct, CredentialMaterialRef as d, ConnectionInvocationEventPublisher as dt, CredentialResolverFactory as en, node as et, IllegalMaterialSourceError as f, DefinePollingTriggerExecuteContext as ft, OAuthFlowStartArgs as g, DefinePollingTriggerTestItemsContext as gt, OAuthFlowExecutor as h, DefinePollingTriggerPollResult as ht, TestSuiteOrchestratorEngine as i, PersistedRuntimeTypeMetadataStore as it, InMemoryRunDataFactory as j, defineCredential as jt, RunSummaryMapper as k, callableTool as kt, CallerContext as l, EventPublishingWorkflowExecutionRepository as lt, OAuthFlowCallbackArgs as m, DefinePollingTriggerPollContext as mt, TestSuiteCaseOutcome as n, StackTraceCallSitePathResolver as nt, TestSuiteRunIdFactory as o, PersistedRuntimeTypeDecoratorOptions as ot, MaterialBundle as p, DefinePollingTriggerOptions as pt, DefaultAsyncSleeper as q, HumanTaskRecord as qt, TestSuiteOrchestrator as r, PersistedRuntimeTypeNameResolver as rt, ManagedMaterialFetchError as s, PersistedRuntimeTypeKind as st, RunTestSuiteArgs as t, AbortControllerFactory as tn, tool as tt, CredentialMaterialProvider as u, InMemoryRunEventBus as ut, OAuthMaterial as v, DefinedPollingTriggerConfig as vt, PollingTriggerRuntime as w, CollectionIndexDefinition as wt, WorkflowEdgePortValidationResult as x, CollectionColumnBuilder as xt, WorkflowEdgePortValidator as y, definePollingTrigger as yt, NodeInstanceFactory as z, InboxOnDecisionArgs as zt };
+//# sourceMappingURL=index-BZDhEQ6W.d.ts.map