@codemation/core 0.11.0 → 0.12.0

package/dist/index.d.cts

@@ -1,346 +1,12 @@
-import { $ as injectAll, $n as NodeExecutionRequestHandler, $r as CostTrackingComponent, $t as RunnableNodeConfig, A as RunExecutionOptions, Ai as CredentialTypeId, An as BinaryBody, Ar as AllWorkflowsActiveWorkflowActivationPolicy, At as JsonValue, B as WorkflowExecutionListingRepository, Bi as OutputPortKey, Bn as ExecutionContext, Br as TelemetryMetricRecord, Bt as NodeIterationId, C as PersistedWorkflowSnapshot, Ci as CredentialRequirement, Cn as triggerNodeOutputType, Cr as HttpMethod, Ct as Item, D as RunCompletionNotifier, Di as CredentialSetupStatus, Dn as NoneRetryPolicySpec, Dr as WebhookTriggerMatcher, Dt as JsonNonArray, E as PinnedNodeOutputsByPort, Ei as CredentialSessionService, En as FixedRetryPolicySpec, Er as WebhookInvocationMatch, Et as JsonArray, F as RunStatus, Fi as PollingTriggerLogger, Fn as BinaryStorageWriteResult, Fr as TelemetryArtifactAttachment, Ft as NodeErrorHandler, G as Disposable, Gn as NodeActivationContinuation, Gr as CodemationTelemetryMetricNames, Gt as NodeSchedulerDecision, H as WorkflowExecutionRepository, Hi as WorkflowId, Hn as ItemNode, Hr as TelemetrySpanEnd, Ht as NodeOffloadPolicy, I as RunStopCondition, Ii as PollingTriggerDedupWindow, In as EngineDeps, Ir as TelemetryArtifactReference, It as NodeErrorHandlerArgs, J as RegistrationOptions, Jn as NodeActivationRequestBase, Jr as NoOpExecutionTelemetryFactory, Jt as PersistedRunPolicySnapshot, K as InjectionToken, Kn as NodeActivationReceipt, Kr as GenAiTelemetryAttributeNames, Kt as PairedItemRef, L as RunSummary, Li as InputPortKey, Ln as EngineHost, Lr as TelemetryAttributePrimitive, Lt as NodeErrorHandlerSpec, M as RunQueueEntry, Mi as CredentialUnboundError, Mn as BinaryStorageReadResult, Mr as ExecutionTelemetry, Mt as NodeActivationId, N as RunResult, Ni as OAuth2ProviderFromPublicConfig, Nn as BinaryStorageStatResult, Nr as ExecutionTelemetryFactory, Nt as NodeConfigBase, O as RunCurrentState, Oi as CredentialType, On as RetryPolicySpec, Or as WebhookTriggerResolution, Ot as JsonObject, P as RunStateResetRequest, Pi as NoOpPollingTriggerLogger, Pn as BinaryStorageWriteRequest, Pr as NodeExecutionTelemetry, Pt as NodeDefinition, Q as inject, Qn as NodeExecutionRequest, Qr as NoOpTelemetryArtifactReference, Qt as RunIdFactory, R as RunTestContext, Ri as NodeConnectionName, Rn as ExecutableTriggerNode, Rr as TelemetryAttributes, Rt as NodeIdRef, S as PersistedRunState, Si as CredentialOAuth2ScopesFromPublicConfig, Sn as runnableNodeOutputType, Sr as WorkflowSnapshotResolver, St as ExecutionMode, T as PersistedWorkflowTokenRegistryLike, Ti as CredentialSessionFactoryArgs, Tn as ExponentialRetryPolicySpec, Tr as WebhookControlSignal, Tt as Items, U as Container, Un as LiveWorkflowRepository, Ur as TelemetrySpanEventRecord, Ut as NodeOutputs, V as WorkflowExecutionPruneRepository, Vi as PersistedTokenId, Vn as ExecutionContextFactory, Vr as TelemetryScope, Vt as NodeKind, W as DependencyContainer, Wn as MultiInputNode, Wr as TelemetrySpanScope, Wt as NodeRef, X as container, Xn as NodeBinaryAttachmentService, Xr as NoOpNodeExecutionTelemetry, Xt as RunDataSnapshot, Y as TypeToken, Yn as NodeActivationScheduler, Yr as NoOpExecutionTelemetry, Yt as RunDataFactory, Z as delay, Zn as NodeExecutionContext, Zr as NoOpTelemetrySpanScope, Zt as RunId, _ as PendingNodeExecution, _i as CredentialInstanceId, _n as WorkflowStoragePolicyResolver, _r as WorkflowNodeInstanceFactory, _t as TestTriggerSetupContext, a as AgentMcpToolMap, ai as CostTrackingUsageRecord, an as UpstreamRefPlaceholder, ar as PollingTriggerHandle, at as singleton, b as PersistedRunControlState, bi as CredentialMaterialSourceKind, bn as nodeRef, br as WorkflowRunnerService, bt as BinaryPreviewKind, c as ConnectionInvocationId, ci as AnyCredentialType, cn as WorkflowErrorHandler, cr as RunnableNodeExecuteArgs, ct as EngineExecutionLimitsPolicy, d as EngineRunCounters, di as CredentialBinding, dn as WorkflowGraphFactory, dr as TriggerNode, dt as RunEventBus, ei as CostTrackingPriceQuote, en as RunnableNodeInputJson, er as NodeExecutionScheduler, et as injectable, f as ExecutionFrontierPlan, fi as CredentialBindingKey, fn as WorkflowNodeConnection, fr as TriggerRuntimeDiagnostics, ft as RunEventSubscription, g as NodeInputsByPort, gi as CredentialHealthTester, gn as WorkflowStoragePolicyMode, gr as TriggerTestItemsContext, gt as TestTriggerNodeConfig, h as NodeExecutionStatus, hi as CredentialHealthStatus, hn as WorkflowStoragePolicyDecisionArgs, hr as TriggerSetupStateRepository, ht as TestSuiteRunId, i as AgentMcpIntegration, ii as CostTrackingTelemetryMetricNames, in as TriggerNodeSetupState, ir as PersistedTriggerSetupState, it as registry, j as RunPruneCandidate, ji as CredentialTypeRegistry, jn as BinaryStorage, jr as WorkflowActivationPolicy, jt as MutableRunData, k as RunEventPublisherDeps, ki as CredentialTypeDefinition, kn as BinaryAttachmentCreateRequest, kr as WebhookTriggerRoutingDiagnostics, kt as JsonPrimitive, l as ConnectionInvocationRecord, li as CredentialAdvancedSectionPresentation, ln as WorkflowErrorHandlerSpec, lr as TestableTriggerNode, lt as EngineExecutionLimitsPolicyConfig, m as NodeExecutionSnapshot, mi as CredentialHealth, mn as WorkflowPrunePolicySpec, mr as TriggerSetupStateFor, mt as TestSuiteRunStatus, n as InMemoryLiveWorkflowRepository, ni as CostTrackingTelemetryAttributeNames, nn as TriggerNodeConfig, nr as NodeExecutor, nt as instancePerContainerCachingFactory, o as NeedsReconsentEvent, oi as CollectionStore, on as WorkflowDefinition, or as PreparedNodeActivationDispatch, ot as CoreTokens, p as NodeExecutionError, pi as CredentialFieldSchema, pn as WorkflowPolicyRuntimeDefaults, pr as TriggerSetupContext, pt as TestCaseRunStatus, q as Lifecycle, qn as NodeActivationRequest, qr as CodemationTelemetryAttributeNames, qt as ParentExecutionRef, ri as CostTrackingTelemetryFactory, rn as TriggerNodeOutputJson, rr as NodeResolver, rt as predicateAwareClassFactory, s as ConnectionInvocationAppendArgs, si as CollectionsContext, sn as WorkflowErrorContext, sr as RunnableNode, t as RunIntentService, ti as CostTrackingTelemetry, tn as RunnableNodeOutputJson, tr as NodeExecutionStatePublisher, tt as instanceCachingFactory, u as CurrentStateExecutionRequest, ui as CredentialAuthDefinition, un as WorkflowGraph, ur as TriggerCleanupHandle, ut as RunEvent, v as PersistedMutableNodeState, vi as CredentialInstanceRecord, vn as WorkflowStoragePolicySpec, vr as WorkflowRepository, vt as ActivationIdFactory, w as PersistedWorkflowSnapshotNode, wi as CredentialSessionFactory, wn as triggerNodeSetupStateType, wr as TriggerInstanceId, wt as ItemBinary, x as PersistedRunSchedulingState, xi as CredentialOAuth2AuthDefinition, xn as runnableNodeInputType, xr as WorkflowSnapshotFactory, xt as Edge, y as PersistedMutableRunState, yi as CredentialJsonRecord, yn as branchRef, yr as WorkflowRunnerResolver, yt as BinaryAttachment, z as WebhookRunResult, zi as NodeId, zn as ExecutionBinaryService, zr as TelemetryChildSpanStart, zt as NodeInspectorSummaryRow } from "./RunIntentService-MUHJ1bhO.cjs";
-import { a as ItemExprResolver, c as DefaultAsyncSleeper, d as UnavailableBinaryStorage, f as CredentialResolverFactory, i as RunnableOutputBehaviorResolver, m as CostCatalogEntry, n as InMemoryBinaryStorage, o as InProcessRetryRunner, p as CostCatalog, r as RunnableOutputBehavior, s as DefaultExecutionContextFactory, t as InMemoryRunDataFactory, u as DefaultExecutionBinaryService } from "./InMemoryRunDataFactory-hmkh0lzR.cjs";
-import { ZodType, input, output, z } from "zod";
+import { $ as injectAll, $n as NodeActivationRequestBase, $r as GenAiTelemetryAttributeNames, $t as RunnableNodeConfig, A as RunHaltReason, Ai as CredentialRequirement, An as BinaryBody, Ar as HttpMethod, At as JsonValue, B as WorkflowExecutionListingRepository, Bi as OAuth2ProviderFromPublicConfig, Bn as ExecutionBinaryService, Br as ExecutionTelemetryFactory, Bt as NodeIterationId, C as PersistedWorkflowSnapshotNode, Ci as CredentialHealthTester, Cn as triggerNodeOutputType, Cr as TriggerTestItemsContext, Ct as Item, D as RunCurrentState, Di as CredentialMaterialSourceKind, Dn as NoneRetryPolicySpec, Dr as WorkflowRunnerService, Dt as JsonNonArray, E as RunCompletionNotifier, Ei as CredentialJsonRecord, En as FixedRetryPolicySpec, Er as WorkflowRunnerResolver, Et as JsonArray, F as RunStatus, Fi as CredentialType, Fn as BinaryStorageWriteResult, Fr as WebhookTriggerResolution, Ft as NodeErrorHandler, G as Disposable, Gi as NodeConnectionName, Gn as HumanTaskId, Gr as TelemetryAttributes, Gt as NodeSchedulerDecision, H as WorkflowExecutionRepository, Hi as PollingTriggerLogger, Hn as ExecutionContextFactory, Hr as TelemetryArtifactAttachment, Ht as NodeOffloadPolicy, I as RunStopCondition, Ii as CredentialTypeDefinition, In as Duration, Ir as WebhookTriggerRoutingDiagnostics, It as NodeErrorHandlerArgs, J as RegistrationOptions, Ji as PersistedTokenId, Jn as LiveWorkflowRepository, Jr as TelemetryScope, Jt as PersistedRunPolicySnapshot, K as InjectionToken, Ki as NodeId, Kn as HumanTaskSubject, Kr as TelemetryChildSpanStart, Kt as PairedItemRef, L as RunSummary, Li as CredentialTypeId, Ln as EngineDeps, Lr as AllWorkflowsActiveWorkflowActivationPolicy, Lt as NodeErrorHandlerSpec, M as RunQueueEntry, Mi as CredentialSessionFactoryArgs, Mn as BinaryStorageReadResult, Mr as WebhookControlSignal, Mt as NodeActivationId, N as RunResult, Ni as CredentialSessionService, Nn as BinaryStorageStatResult, Nr as WebhookInvocationMatch, Nt as NodeConfigBase, O as RunEventPublisherDeps, Oi as CredentialOAuth2AuthDefinition, On as RetryPolicySpec, Or as WorkflowSnapshotFactory, Ot as JsonObject, P as RunStateResetRequest, Pi as CredentialSetupStatus, Pn as BinaryStorageWriteRequest, Pr as WebhookTriggerMatcher, Pt as NodeDefinition, Q as inject, Qn as NodeActivationRequest, Qr as CodemationTelemetryMetricNames, Qt as RunIdFactory, R as RunTestContext, Ri as CredentialTypeRegistry, Rn as EngineHost, Rr as WorkflowActivationPolicy, Rt as NodeIdRef, S as PersistedWorkflowSnapshot, Si as CredentialHealthStatus, Sn as runnableNodeOutputType, Sr as TriggerSetupStateRepository, St as ExecutionMode, T as PinnedNodeOutputsByPort, Ti as CredentialInstanceRecord, Tn as ExponentialRetryPolicySpec, Tr as WorkflowRepository, Tt as Items, U as Container, Ui as PollingTriggerDedupWindow, Un as HumanTaskActor, Ur as TelemetryArtifactReference, Ut as NodeOutputs, V as WorkflowExecutionPruneRepository, Vi as NoOpPollingTriggerLogger, Vn as ExecutionContext, Vr as NodeExecutionTelemetry, Vt as NodeKind, W as DependencyContainer, Wi as InputPortKey, Wn as HumanTaskHandle, Wr as TelemetryAttributePrimitive, Wt as NodeRef, X as container, Xn as NodeActivationContinuation, Xr as TelemetrySpanEventRecord, Xt as RunDataSnapshot, Y as TypeToken, Yi as WorkflowId, Yn as MultiInputNode, Yr as TelemetrySpanEnd, Yt as RunDataFactory, Z as delay, Zn as NodeActivationReceipt, Zr as TelemetrySpanScope, Zt as RunId, _ as PersistedMutableRunState, _i as CredentialAuthDefinition, _n as WorkflowStoragePolicyResolver, _r as TriggerCleanupHandle, _t as TestTriggerSetupContext, a as ConnectionInvocationId, ai as NoOpTelemetryArtifactReference, an as UpstreamRefPlaceholder, ar as NodeExecutionScheduler, at as singleton, b as PersistedRunState, bi as CredentialFieldSchema, bn as nodeRef, br as TriggerSetupContext, bt as BinaryPreviewKind, c as EngineRunCounters, ci as CostTrackingTelemetry, cn as WorkflowErrorHandler, cr as NodeResolver, ct as EngineExecutionLimitsPolicy, d as NodeExecutionSnapshot, di as CostTrackingTelemetryMetricNames, dn as WorkflowGraphFactory, dr as PreparedNodeActivationDispatch, dt as RunEventBus, ei as CodemationTelemetryAttributeNames, en as RunnableNodeInputJson, er as NodeActivationScheduler, et as injectable, f as NodeExecutionStatus, fi as CostTrackingUsageRecord, fn as WorkflowNodeConnection, fr as ResumeContext, ft as RunEventSubscription, g as PersistedMutableNodeState, gi as CredentialAdvancedSectionPresentation, gn as WorkflowStoragePolicyMode, gr as TestableTriggerNode, gt as TestTriggerNodeConfig, h as PendingResumeEntry, hi as AnyCredentialType, hn as WorkflowStoragePolicyDecisionArgs, hr as SuspensionRequest, ht as TestSuiteRunId, i as ConnectionInvocationAppendArgs, ii as NoOpTelemetrySpanScope, in as TriggerNodeSetupState, ir as NodeExecutionRequestHandler, it as registry, j as RunPruneCandidate, ji as CredentialSessionFactory, jn as BinaryStorage, jr as TriggerInstanceId, jt as MutableRunData, k as RunExecutionOptions, ki as CredentialOAuth2ScopesFromPublicConfig, kn as BinaryAttachmentCreateRequest, kr as WorkflowSnapshotResolver, kt as JsonPrimitive, l as ExecutionFrontierPlan, li as CostTrackingTelemetryAttributeNames, ln as WorkflowErrorHandlerSpec, lr as PersistedTriggerSetupState, lt as EngineExecutionLimitsPolicyConfig, m as PendingNodeExecution, mi as CollectionsContext, mn as WorkflowPrunePolicySpec, mr as RunnableNodeExecuteArgs, mt as TestSuiteRunStatus, n as AgentMcpToolMap, ni as NoOpExecutionTelemetry, nn as TriggerNodeConfig, nr as NodeExecutionContext, nt as instancePerContainerCachingFactory, o as ConnectionInvocationRecord, oi as CostTrackingComponent, on as WorkflowDefinition, or as NodeExecutionStatePublisher, ot as CoreTokens, p as NodeInputsByPort, pi as CollectionStore, pn as WorkflowPolicyRuntimeDefaults, pr as RunnableNode, pt as TestCaseRunStatus, q as Lifecycle, qi as OutputPortKey, qn as ItemNode, qr as TelemetryMetricRecord, qt as ParentExecutionRef, r as NeedsReconsentEvent, ri as NoOpNodeExecutionTelemetry, rn as TriggerNodeOutputJson, rr as NodeExecutionRequest, rt as predicateAwareClassFactory, s as CurrentStateExecutionRequest, si as CostTrackingPriceQuote, sn as WorkflowErrorContext, sr as NodeExecutor, t as AgentMcpIntegration, ti as NoOpExecutionTelemetryFactory, tn as RunnableNodeOutputJson, tr as NodeBinaryAttachmentService, tt as instanceCachingFactory, u as NodeExecutionError, ui as CostTrackingTelemetryFactory, un as WorkflowGraph, ur as PollingTriggerHandle, ut as RunEvent, v as PersistedRunControlState, vi as CredentialBinding, vn as WorkflowStoragePolicySpec, vr as TriggerNode, vt as ActivationIdFactory, w as PersistedWorkflowTokenRegistryLike, wi as CredentialInstanceId, wn as triggerNodeSetupStateType, wr as WorkflowNodeInstanceFactory, wt as ItemBinary, x as PersistedSuspensionEntry, xi as CredentialHealth, xn as runnableNodeInputType, xr as TriggerSetupStateFor, xt as Edge, y as PersistedRunSchedulingState, yi as CredentialBindingKey, yn as branchRef, yr as TriggerRuntimeDiagnostics, yt as BinaryAttachment, z as WebhookRunResult, zi as CredentialUnboundError, zn as ExecutableTriggerNode, zr as ExecutionTelemetry, zt as NodeInspectorSummaryRow } from "./agentMcpTypes-DUmniLOY.cjs";
+import { C as deriveAssertionPassed, S as DEFAULT_ASSERTION_PASS_THRESHOLD, T as AgentBindError, _ as WorkItemStatus, a as ExecutionPayloadPolicyFields, b as AssertionResult, c as PersistedExecutionInstanceRecord, d as PersistedRunWorkItemRecord, f as RunIterationDto, g as WorkItemId, h as SlotExecutionStateDto, i as ExecutionInstanceId, l as PersistedRunSlotProjectionRecord, m as RunSlotProjectionState, n as ConnectionInvocationKind, o as PayloadStorageKind, p as RunRevision, r as ExecutionInstanceDto, s as PersistedExecutionInstanceKind, t as BatchId, u as PersistedRunWorkItemKind, v as WorkflowDetailSelectionState, w as NoOpAgentMcpIntegration, x as AssertionResultProvenance, y as WorkflowRunDetailDto } from "./executionPersistenceContracts-DenJJK2T.cjs";
+import { a as ItemExprArgs, c as ItemExprResolvedContext, d as resolveItemExprsForExecution, f as resolveItemExprsInUnknown, i as ItemExpr, l as isItemExpr, n as Param, o as ItemExprCallback, r as ParamDeep, s as ItemExprContext, t as Expr, u as itemExpr } from "./params-DqRvku2h.cjs";
+import { n as CostCatalogEntry, t as CostCatalog } from "./CostCatalogContract-DD7fQ4FF.cjs";
+import { $ as McpServerDeclaration, A as ChatModelFactory, B as ZodSchemaAny, C as AgentToolDefinition, D as ChatLanguageModel, E as AgentTurnLimitBehavior, F as NodeBackedToolOutputMapperArgs, G as CallableToolFactory, H as AgentMessageConfigNormalizer, I as StructuredOutputOptions, J as CallableToolExecuteHandler, K as CallableToolConfig, L as Tool, M as NodeBackedToolInputMapper, N as NodeBackedToolInputMapperArgs, O as ChatLanguageModelCallOptions, P as NodeBackedToolOutputMapper, Q as RunFinishedAtFactory, R as ToolConfig, S as AgentToolCallPlanner, T as AgentToolToken, U as AgentToolFactory, V as AgentConfigInspector, W as CallableToolKindToken, X as NodeIterationIdFactory, Y as NodeBackedToolConfig, Z as ConnectionNodeIdFactory, _ as AgentMessageTemplateContent, a as AgentConnectionNodeRole, b as AgentTool, c as AgentCanvasPresentation, d as AgentMessageBuildArgs, et as McpServerTransport, f as AgentMessageConfig, g as AgentMessageTemplate, h as AgentMessageRole, i as AgentConnectionNodeDescriptor, j as NodeBackedToolConfigOptions, k as ChatModelConfig, l as AgentGuardrailConfig, m as AgentMessageLine, n as AgentConnectionCredentialSource, o as McpServerResolver, p as AgentMessageDto, q as CallableToolConfigOptions, r as AgentConnectionNodeCollector, s as AgentAttachmentRole, t as ItemsInputNormalizer, u as AgentGuardrailDefaults, v as AgentModelInvocationOptions, w as AgentToolExecuteArgs, x as AgentToolCall, y as AgentNodeConfig, z as ToolExecuteArgs } from "./ItemsInputNormalizer-DLaD6rTl.cjs";
+import { n as InMemoryLiveWorkflowRepository, t as RunIntentService } from "./RunIntentService-CWMMrAP4.cjs";
+import { _ as HumanTaskRecord, a as ItemExprResolver, b as HumanTaskStoreToken, c as DefaultAsyncSleeper, d as UnavailableBinaryStorage, f as HitlResumeTokenSignerSeam, g as HitlWorkspaceIdToken, h as HitlTimeoutJobSchedulerToken, i as RunnableOutputBehaviorResolver, m as HitlTimeoutJobSchedulerSeam, n as InMemoryBinaryStorage, o as InProcessRetryRunner, p as HitlResumeTokenSignerToken, r as RunnableOutputBehavior, s as DefaultExecutionContextFactory, t as InMemoryRunDataFactory, u as DefaultExecutionBinaryService, v as HumanTaskStatus, x as CredentialResolverFactory, y as HumanTaskStore } from "./InMemoryRunDataFactory-qMiYjhCK.cjs";
+import { ZodType, z } from "zod";
 
-//#region src/contracts/AgentBindError.d.ts
-/**
- * Thrown at agent bind time when mcpServers declarations cannot be resolved.
- * Causes include: unknown server id, missing credential instance, insufficient scopes,
- * and ambiguous shorthand binding (multiple credential instances match).
- */
-declare class AgentBindError extends Error {
-  constructor(message: string);
-}
-//#endregion
-//#region src/contracts/NoOpAgentMcpIntegration.d.ts
-/**
- * No-op implementation of AgentMcpIntegration.
- * Registered by the core engine runtime as a fallback when the host does not
- * supply a real implementation (e.g. in unit tests or headless engine setups).
- * Always returns an empty tool map so the agent runs with node-backed tools only.
- */
-declare class NoOpAgentMcpIntegration implements AgentMcpIntegration {
-  prepareMcpTools(): Promise<AgentMcpToolMap>;
-}
-//#endregion
-//#region src/contracts/assertionTypes.d.ts
-/**
- * One assertion emitted by an assertion-emitting node (a node whose config sets
- * `emitsAssertions: true`). Each emitted item on `main` carries one of these as `item.json`.
- *
- * Pass/fail is derived from `score >= (passThreshold ?? 0.5)` — see {@link deriveAssertionPassed}.
- * The `errored` marker is for cases where the assertion code itself threw (distinct from
- * "the assertion was evaluated and the score was low") and is treated as a hard fail in rollups
- * regardless of `score`.
- */
-interface AssertionResult {
-  readonly name: string;
-  /** 0..1 score. Source of truth for pass/fail (compared against `passThreshold`). */
-  readonly score: number;
-  /** 0..1 threshold for "passed". When omitted, consumers default to 0.5. */
-  readonly passThreshold?: number;
-  /** True when evaluating the assertion threw — treated as fail regardless of `score`. */
-  readonly errored?: true;
-  /** What the assertion expected. Free-form JSON; UIs render with a JSON viewer. */
-  readonly expected?: JsonValue;
-  /** What the workflow actually produced. */
-  readonly actual?: JsonValue;
-  /** Short human-readable explanation, especially for fails / errors. */
-  readonly message?: string;
-  /** Bag of supplemental fields (e.g. judge prompt, judge raw response, comparison method). */
-  readonly details?: Readonly<Record<string, JsonValue>>;
-}
-/**
- * Default {@link AssertionResult.passThreshold} when authors omit it. Boolean-style assertions
- * (assertEqual / contains / etc.) emit `score: 1` or `score: 0` so this default works for them;
- * AI-judge assertions are expected to set their own threshold.
- */
-declare const DEFAULT_ASSERTION_PASS_THRESHOLD = 0.5;
-/**
- * Derive whether an assertion result is considered "passing" using the score-based contract:
- * `errored` always fails, otherwise `score >= (passThreshold ?? 0.5)`. This is the canonical
- * derivation — UI and rollup code should call it rather than inlining the comparison so future
- * tweaks (e.g. NaN handling) land in one place.
- */
-declare function deriveAssertionPassed(result: {
-  readonly score: number;
-  readonly passThreshold?: number;
-  readonly errored?: true;
-}): boolean;
-/**
- * Provenance for a persisted {@link AssertionResult}: which node produced it and where in the
- * per-item iteration tree it landed. Filled in by the host-side persister, not the node itself.
- */
-interface AssertionResultProvenance {
-  readonly nodeId: NodeId;
-  /** Per-item iteration id when the emitting node ran inside a per-item loop. */
-  readonly iterationId?: string;
-  /** Item index (0-based) within the activation that produced this assertion. */
-  readonly itemIndex?: number;
-}
-//#endregion
-//#region src/contracts/itemExpr.d.ts
-declare const ITEM_EXPR_BRAND: unique symbol;
-type ItemExprResolvedContext = Readonly<{
-  runId: RunId;
-  workflowId: WorkflowId;
-  nodeId: NodeId;
-  activationId: NodeActivationId;
-  data: RunDataSnapshot;
-}>;
-/**
- * Context aligned with former {@link ItemInputMapperContext} — use **`data`** to read any completed upstream node.
- */
-type ItemExprContext = ItemExprResolvedContext;
-type ItemExprArgs<TItemJson = unknown> = Readonly<{
-  item: Item<TItemJson>;
-  itemIndex: number;
-  items: Items<TItemJson>;
-  ctx: ItemExprContext;
-}>;
-type ItemExprCallback<T, TItemJson = unknown> = (args: ItemExprArgs<TItemJson>) => T | Promise<T>;
-type ItemExpr<T, TItemJson = unknown> = Readonly<{
-  readonly [ITEM_EXPR_BRAND]: true;
-  readonly fn: ItemExprCallback<T, TItemJson>;
-}>;
-declare function itemExpr<T, TItemJson = unknown>(fn: ItemExprCallback<T, TItemJson>): ItemExpr<T, TItemJson>;
-declare function isItemExpr<T, TItemJson = unknown>(value: unknown): value is ItemExpr<T, TItemJson>;
-/**
- * Deep-resolves {@link itemExpr} leaves. Returns a new graph (does not mutate the original config object).
- */
-declare function resolveItemExprsInUnknown(value: unknown, args: ItemExprArgs, seen?: WeakSet<object>): Promise<unknown>;
-/**
- * Clones runnable config (best-effort) so per-item {@link itemExpr} resolution never mutates shared instances.
- */
-declare function resolveItemExprsForExecution(config: unknown, nodeCtx: NodeExecutionContext, item: Item, itemIndex: number, items: Items): Promise<unknown | undefined>;
-//#endregion
-//#region src/contracts/params.d.ts
-type Expr<T, TItemJson = unknown> = ItemExpr<T, TItemJson>;
-type Param<T, TItemJson = unknown> = T | Expr<T, TItemJson>;
-type ParamDeep<T, TItemJson = unknown> = Expr<T, TItemJson> | (T extends readonly (infer U)[] ? ReadonlyArray<ParamDeep<U, TItemJson>> : never) | (T extends object ? { [K in keyof T]: ParamDeep<T[K], TItemJson> } : T);
-//#endregion
-//#region src/contracts/executionPersistenceContracts.d.ts
-/** Canonical id for persisted execution rows (activation or connection invocation). */
-type ExecutionInstanceId = string;
-/** Stable id for persisted work-queue rows. */
-type WorkItemId = string;
-/** Batch grouping for planner activations. */
-type BatchId = string;
-/** Optimistic concurrency on the run root. */
-type RunRevision = number;
-type PersistedRunWorkItemKind = "queue" | "pending";
-type WorkItemStatus = "queued" | "claimed" | "completed" | "failed" | "cancelled";
-type PersistedExecutionInstanceKind = "workflowNodeActivation" | "connectionInvocation";
-type ConnectionInvocationKind = "languageModel" | "tool" | "nestedAgent";
-type PayloadStorageKind = "inline" | "external" | "omitted";
-/**
- * Persisted run-work-queue row (queue entry or pending activation).
- * Serialized to {@link RunWorkItem} in Prisma; engine still uses {@link PersistedRunState} queue + pending.
- */
-interface PersistedRunWorkItemRecord {
-  readonly workItemId: WorkItemId;
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly kind: PersistedRunWorkItemKind;
-  readonly orderIndex: number;
-  readonly status: WorkItemStatus;
-  readonly queueName?: string;
-  readonly claimToken?: string;
-  readonly claimedBy?: string;
-  readonly claimedAt?: string;
-  readonly availableAt: string;
-  readonly enqueuedAt: string;
-  readonly completedAt?: string;
-  readonly failedAt?: string;
-  readonly sourceInstanceId?: ExecutionInstanceId;
-  readonly parentInstanceId?: ExecutionInstanceId;
-  readonly itemsIn: number;
-  /** Queue entry when kind is queue; pending activation when kind is pending. */
-  readonly payloadJson: string;
-  readonly error?: Readonly<NodeExecutionError>;
-}
-/**
- * Payload policy fields for large-batch externalization (optional on first rollout).
- */
-interface ExecutionPayloadPolicyFields {
-  readonly inputStorageKind: PayloadStorageKind;
-  readonly outputStorageKind: PayloadStorageKind;
-  readonly inputBytes?: number;
-  readonly outputBytes?: number;
-  readonly inputPreviewJson?: unknown;
-  readonly outputPreviewJson?: unknown;
-  readonly inputPayloadRef?: string;
-  readonly outputPayloadRef?: string;
-  readonly inputTruncated?: boolean;
-  readonly outputTruncated?: boolean;
-}
-/**
- * One persisted execution row (workflow node activation or connection invocation).
- */
-interface PersistedExecutionInstanceRecord {
-  readonly instanceId: ExecutionInstanceId;
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly slotNodeId: NodeId;
-  readonly workflowNodeId: NodeId;
-  readonly kind: PersistedExecutionInstanceKind;
-  readonly connectionKind?: ConnectionInvocationKind;
-  readonly activationId?: NodeActivationId;
-  readonly batchId: BatchId;
-  readonly runIndex: number;
-  readonly parentInstanceId?: ExecutionInstanceId;
-  readonly parentRunId?: RunId;
-  readonly workerClaimToken?: string;
-  readonly status: NodeExecutionStatus;
-  readonly queuedAt?: string;
-  readonly startedAt?: string;
-  readonly finishedAt?: string;
-  readonly updatedAt: string;
-  readonly itemCount: number;
-  readonly inputJson?: string;
-  readonly outputJson?: string;
-  readonly errorJson?: string;
-  readonly inputItemIndicesJson?: string;
-  readonly outputItemCount?: number;
-  readonly successfulItemCount?: number;
-  readonly failedItemCount?: number;
-  readonly truncatedInputPreviewJson?: string;
-  readonly truncatedOutputPreviewJson?: string;
-  readonly inputTruncated?: boolean;
-  readonly outputTruncated?: boolean;
-  readonly usedPinnedOutput?: boolean;
-  readonly payloadPolicy?: ExecutionPayloadPolicyFields;
-}
-/**
- * Cached slot projection for planner/debugger/UI (not canonical history).
- */
-interface RunSlotProjectionState {
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly revision: RunRevision;
-  readonly slotStatesByNodeId: Record<NodeId, Readonly<{
-    latestInstanceId?: ExecutionInstanceId;
-    latestTerminalInstanceId?: ExecutionInstanceId;
-    latestRunningInstanceId?: ExecutionInstanceId;
-    latestStatus?: NodeExecutionStatus;
-    invocationCount: number;
-    runCount: number;
-  }>>;
-}
-interface PersistedRunSlotProjectionRecord {
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly revision: RunRevision;
-  readonly updatedAt: string;
-  readonly slotStatesJson: string;
-}
-interface WorkflowRunDetailDto {
-  readonly runId: RunId;
-  readonly workflowId: WorkflowId;
-  readonly startedAt: string;
-  readonly finishedAt?: string;
-  readonly status: RunStatus;
-  readonly workflowSnapshot?: PersistedWorkflowSnapshot;
-  readonly mutableState?: PersistedMutableRunState;
-  readonly slotStates: ReadonlyArray<SlotExecutionStateDto>;
-  readonly executionInstances: ReadonlyArray<ExecutionInstanceDto>;
-  readonly iterations?: ReadonlyArray<RunIterationDto>;
-}
-/**
- * Per-item iteration projected from connection invocations and node activations.
- *
- * One iteration = one item processed by an agent within an activation. Multiple invocations
- * (LLM rounds, tool calls) belonging to the same iteration share the iterationId.
- */
-interface RunIterationDto {
-  readonly iterationId: string;
-  readonly agentNodeId: NodeId;
-  readonly activationId: NodeActivationId;
-  readonly itemIndex: number;
-  readonly itemSummary?: string;
-  readonly status: NodeExecutionStatus;
-  readonly startedAt?: string;
-  readonly finishedAt?: string;
-  readonly invocationIds: ReadonlyArray<string>;
-  readonly parentInvocationId?: string;
-  /** Estimated cost rolled up from telemetry cost metric points, keyed by ISO currency code (e.g. "USD"). Values are minor units (cents-of-cents per the metric's `cost.currency_scale`). */
-  readonly estimatedCostMinorByCurrency?: Readonly<Record<string, number>>;
-  /** Currency scale (denominator) per currency, when present on the metric points. Joined with `estimatedCostMinorByCurrency` to format human-readable amounts. */
-  readonly estimatedCostCurrencyScaleByCurrency?: Readonly<Record<string, number>>;
-}
-interface SlotExecutionStateDto {
-  readonly slotNodeId: NodeId;
-  readonly latestInstanceId?: ExecutionInstanceId;
-  readonly latestTerminalInstanceId?: ExecutionInstanceId;
-  readonly latestRunningInstanceId?: ExecutionInstanceId;
-  readonly status?: NodeExecutionStatus;
-  readonly invocationCount: number;
-  readonly runCount: number;
-}
-interface ExecutionInstanceDto {
-  readonly instanceId: ExecutionInstanceId;
-  readonly slotNodeId: NodeId;
-  readonly workflowNodeId: NodeId;
-  readonly parentInstanceId?: ExecutionInstanceId;
-  readonly kind: PersistedExecutionInstanceKind;
-  readonly connectionKind?: ConnectionInvocationKind;
-  readonly runIndex: number;
-  readonly batchId: BatchId;
-  readonly activationId?: NodeActivationId;
-  readonly status: NodeExecutionStatus;
-  readonly queuedAt?: string;
-  readonly startedAt?: string;
-  readonly finishedAt?: string;
-  readonly itemCount: number;
-  readonly inputJson?: JsonValue;
-  readonly outputJson?: JsonValue;
-  readonly error?: Readonly<NodeExecutionError>;
-  /** Per-item iteration that produced this instance. Set on connectionInvocation rows produced inside per-item runnable loops. */
-  readonly iterationId?: string;
-  /** Item index (0-based) of the iteration. */
-  readonly itemIndex?: number;
-  /** Parent invocation id when this instance was emitted by a sub-agent triggered by an outer LLM/tool call. */
-  readonly parentInvocationId?: string;
-  /**
-   * When this instance is a SubWorkflow node activation, the run id of the child run it spawned.
-   * Used by the UI to deep-link directly to the child execution.
-   */
-  readonly childRunId?: string;
-}
-interface WorkflowDetailSelectionState {
-  readonly selectedSlotNodeId: NodeId | null;
-  readonly selectedInstanceId: ExecutionInstanceId | null;
-}
-//#endregion
-//#region src/contracts/mcpTypes.d.ts
-type McpServerTransport = "http";
-interface McpServerDeclaration {
-  /** Globally unique slug, e.g. "gmail". Workflow authors reference this. */
-  id: string;
-  displayName: string;
-  description: string;
-  transport: McpServerTransport;
-  url: string;
-  /**
-   * Credential types accepted by this MCP server, matching CredentialRequirement.acceptedTypes.
-   * Absent or empty means no credential is required.
-   */
-  acceptedCredentialTypes?: ReadonlyArray<string>;
-  /**
-   * Documentation only in MVP. The bind-time validator checks
-   * requiredScopes ⊆ CredentialInstance.scopesGranted.
-   */
-  requiredScopes?: string[];
-  /** Non-secret static headers merged onto every MCP request. */
-  staticHeaders?: Record<string, string>;
-  /**
-   * Overrides for tool descriptions advertised by the MCP server.
-   * Applied by the connection pool after tools/list.
-   * Key: exact tool name as returned by the server.
-   */
-  toolDescriptionOverrides?: Record<string, string>;
-}
-//#endregion
 //#region src/contracts/emitPorts.d.ts
 declare const EMIT_PORTS_BRAND: unique symbol;
 type PortsEmission = Readonly<{
@@ -400,12 +66,243 @@ declare class NoOpCostTrackingTelemetryFactory implements CostTrackingTelemetryF
   }>): CostTrackingTelemetry;
 }
 //#endregion
-//#region src/contracts/runFinishedAtFactory.d.ts
-type RunFinishedAtSource = Pick<PersistedRunState, "status" | "nodeSnapshotsByNodeId" | "finishedAt">;
-/** Derives workflow end time from persisted run root or node snapshots for run listings. */
-declare class RunFinishedAtFactory {
-  static resolveIso(state: RunFinishedAtSource): string | undefined;
+//#region src/authoring/defineNode.types.d.ts
+type MaybePromise$2<TValue> = TValue | Promise<TValue>;
+type ResolvableCredentialType = AnyCredentialType | CredentialTypeId;
+type SessionForCredentialType<TCredential extends ResolvableCredentialType> = TCredential extends AnyCredentialType ? Awaited<ReturnType<TCredential["createSession"]>> : unknown;
+type DefinedNodeCredentialBinding = ResolvableCredentialType | Readonly<{
+  readonly type: ResolvableCredentialType | ReadonlyArray<ResolvableCredentialType>;
+  readonly label?: string;
+  readonly optional?: true;
+  readonly helpText?: string;
+  readonly helpUrl?: string;
+}>;
+type DefinedNodeCredentialBindings = Readonly<Record<string, DefinedNodeCredentialBinding>>;
+type SessionForBinding<TBinding extends DefinedNodeCredentialBinding> = TBinding extends Readonly<{
+  type: infer TType;
+}> ? TType extends ReadonlyArray<infer TEntry> ? SessionForCredentialType<TEntry & ResolvableCredentialType> : SessionForCredentialType<TType & ResolvableCredentialType> : SessionForCredentialType<TBinding & ResolvableCredentialType>;
+type DefinedNodeCredentialAccessors<TBindings extends DefinedNodeCredentialBindings | undefined> = TBindings extends DefinedNodeCredentialBindings ? Readonly<{ [TKey in keyof TBindings]: () => Promise<SessionForBinding<TBindings[TKey]>> }> : Readonly<Record<string, never>>;
+interface DefinedNodeRunContext<TConfig$1 extends CredentialJsonRecord, TBindings extends DefinedNodeCredentialBindings | undefined> {
+  readonly config: TConfig$1;
+  readonly credentials: DefinedNodeCredentialAccessors<TBindings>;
+  readonly execution: NodeExecutionContext<RunnableNodeConfig<TConfig$1, unknown>>;
 }
+/**
+ * Arguments for {@link defineNode} `execute` (engine `ctx` matches {@link RunnableNode.execute};
+ * the second callback parameter adds {@link DefinedNodeRunContext} for credential accessors).
+ */
+type DefineNodeExecuteArgs<TConfig$1 extends CredentialJsonRecord, TInputJson> = Readonly<{
+  input: TInputJson;
+  item: Item;
+  itemIndex: number;
+  items: Items;
+  ctx: NodeExecutionContext<RunnableNodeConfig<TInputJson, unknown> & Readonly<{
+    config: TConfig$1;
+  }>>;
+}>;
+type DefinedNodeConfigInput<TConfigResolved extends CredentialJsonRecord, TItemJson> = ParamDeep<TConfigResolved, TItemJson>;
+interface DefinedNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, _TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
+  readonly kind: "defined-node";
+  readonly key: TKey$1;
+  readonly title: string;
+  readonly description?: string;
+  create<TConfigItemJson = TInputJson>(config: DefinedNodeConfigInput<TConfig$1, TConfigItemJson>, name?: string, id?: string): RunnableNodeConfig<TInputJson, TOutputJson>;
+  register(context: {
+    registerNode<TValue>(token: TypeToken<TValue>, implementation?: TypeToken<TValue>): void;
+  }): void;
+}
+/**
+ * Plugin / DSL-friendly node: per-item `execute` with optional {@link RunnableNodeConfig.inputSchema}.
+ */
+interface DefineNodeOptions<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
+  readonly key: TKey$1;
+  readonly title: string;
+  readonly description?: string;
+  /**
+   * Canvas icon for this node (same contract as `NodeConfigBase.icon` on runnable configs).
+   * The Next host resolves Lucide (`lucide:…`), built-in SVGs (`builtin:…`), Simple Icons (`si:…`), and image URLs (`https:`, `data:`, `/…`).
+   */
+  readonly icon?: string;
+  /** Default values / form hints for **static** node configuration (credentials, retry, IDs), not per-item payload. */
+  readonly input?: Readonly<Record<keyof TConfig$1 & string, unknown>>;
+  readonly configSchema?: z.ZodType<TConfig$1>;
+  readonly credentials?: TBindings;
+  /**
+   * Validates **`input`** (engine also accepts `inputSchema` on the node class).
+   */
+  readonly inputSchema?: ZodType<TInputJson>;
+  /** Preserve inbound `item.binary` when `execute` returns plain JSON or item-shaped results without `binary`. */
+  readonly keepBinaries?: boolean;
+  /**
+   * Static configuration summary surfaced in the workflow inspector — see
+   * {@link import("../contracts/workflowTypes").NodeConfigBase.inspectorSummary}.
+   *
+   * Receives the static config; returns 2–6 short label/value pairs (or `undefined` to skip).
+   */
+  readonly inspectorSummary?: (args: Readonly<{
+    config: TConfig$1;
+  }>) => ReadonlyArray<NodeInspectorSummaryRow> | undefined;
+  execute(args: DefineNodeExecuteArgs<TConfig$1, TInputJson>, context: DefinedNodeRunContext<TConfig$1, TBindings>): MaybePromise$2<TOutputJson>;
+}
+/**
+ * Batch-oriented defined node: `run` receives all item JSON once (last item in activation); emits one output per input row.
+ */
+interface DefineBatchNodeOptions<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
+  readonly key: TKey$1;
+  readonly title: string;
+  readonly description?: string;
+  readonly icon?: string;
+  readonly input?: Readonly<Record<keyof TConfig$1 & string, unknown>>;
+  readonly configSchema?: z.ZodType<TConfig$1>;
+  readonly credentials?: TBindings;
+  readonly inspectorSummary?: (args: Readonly<{
+    config: TConfig$1;
+  }>) => ReadonlyArray<NodeInspectorSummaryRow> | undefined;
+  run(items: ReadonlyArray<TInputJson>, context: DefinedNodeRunContext<TConfig$1, TBindings>): MaybePromise$2<ReadonlyArray<TOutputJson>>;
+}
+declare function defineNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefineNodeOptions<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>): DefinedNode<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>;
+declare function defineBatchNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefineBatchNodeOptions<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>): DefinedNode<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>;
+//#endregion
+//#region src/authoring/defineHumanApprovalNode.types.d.ts
+/**
+ * Decision shape merged into `item.json` after a HITL approval task resolves.
+ *
+ * - `"approved"` / `"rejected"` — from a human decision (uses `approvedPredicate`).
+ * - `"timed-out"` — timeout fired with `onTimeout: "halt"`.
+ * - `"auto-accepted"` — timeout fired with `onTimeout: "auto-accept"`.
+ */
+interface HumanApprovalDecisionResult {
+  readonly status: "approved" | "rejected" | "timed-out" | "auto-accepted";
+  /** Identity of the person who decided; absent for automated outcomes. */
+  readonly actor?: HumanTaskActor;
+  /** ISO 8601 timestamp of the decision. */
+  readonly decidedAt?: Date;
+  /** Optional free-text note from the reviewer. */
+  readonly note?: string;
+  /**
+   * Full raw decision payload (only present for `"approved"` / `"rejected"`).
+   * Shape is determined by the channel's `decisionSchema`.
+   */
+  readonly payload?: Record<string, unknown>;
+}
+/**
+ * Output item shape emitted by a `defineHumanApprovalNode`-based node.
+ * Original `item.json` fields are preserved and `decision` is merged in.
+ * If the input `item.json` already contained a `decision` key it is **overwritten**.
+ */
+type HumanApprovalOutputJson<TInputJson extends Record<string, unknown>> = TInputJson & {
+  readonly decision: HumanApprovalDecisionResult;
+};
+/**
+ * Extends {@link DefinedNode} with the `humanApprovalToolBehavior` metadata marker.
+ * Story 10 reads this field when attaching the node as an agent tool.
+ */
+interface DefinedHumanApprovalNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson extends Record<string, unknown>, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> extends DefinedNode<TKey$1, TConfig$1, TInputJson, HumanApprovalOutputJson<TInputJson>, TBindings> {
+  /**
+   * Behavior hint consumed by the agent runtime (story 10) when this node is attached as a tool.
+   * `"return"` (default) — return the rejection to the agent as a tool result.
+   * `"halt"` — halt the agent run on rejection.
+   *
+   * Standalone DSL usage ignores this field.
+   */
+  readonly humanApprovalToolBehavior: {
+    onRejected: "return" | "halt";
+  };
+}
+/**
+ * Returns `true` when `node` was created by {@link defineHumanApprovalNode}.
+ * Uses the `humanApprovalToolBehavior` typed field as the discriminant.
+ */
+declare function isHumanApprovalNode(node: unknown): node is DefinedHumanApprovalNode<string, Record<string, unknown>, Record<string, unknown>, undefined>;
+/**
+ * Authoring helper that compiles a HITL approval channel down to a regular
+ * {@link defineNode}-backed node with `SuspensionRequest` semantics.
+ *
+ * **Fast-forward decision semantics:**
+ * - On the first `execute` call (no `ctx.resumeContext`): throws a `SuspensionRequest`
+ *   that calls the author's `deliver`. The engine persists the suspension and continues.
+ * - On resume (`ctx.resumeContext` set): calls `onDecision`/`onTimeout` as appropriate,
+ *   merges a `decision` key into `item.json`, and returns an item with the original
+ *   `binary` map passed by reference (no copy).
+ *
+ * **Output shape per item:**
+ * ```ts
+ * // Input:  { json: { invoiceId: 42 }, binary?: {...} }
+ * // Output: { json: { invoiceId: 42, decision: { status: "approved", actor, decidedAt } }, binary: <unchanged> }
+ * ```
+ * If `item.json` already has a `decision` key it is **overwritten**. Namespace as
+ * needed if your schema reserves that key for another purpose.
+ *
+ * **Predicate persistence:**
+ * The `approvedPredicate` function is NOT serialized to the suspension record (except
+ * as an audit-only string via `toString()`). On resume, the workflow definition is
+ * reloaded from code at process start and the predicate closure is rebuilt naturally.
+ * If a deploy ships a changed predicate between suspend and resume, the *new* predicate
+ * runs — document this in your runbook when the predicate carries business logic that
+ * may change across deploys.
+ *
+ * @example
+ * ```ts
+ * export const slackApprovalNode = defineHumanApprovalNode({
+ *   key: "my-plugin.slackApproval",
+ *   title: "Slack Approval",
+ *   channel: "slack",
+ *   configSchema: z.object({ channel: z.string(), message: z.string() }),
+ *   decisionSchema: z.object({ approved: z.boolean(), note: z.string().optional() }),
+ *
+ *   async deliver({ task, config, item }, ctx) {
+ *     const ts = await postSlackMessage(config.channel, `Approve? <${task.resumeUrl}>`);
+ *     return { channel: config.channel, ts };
+ *   },
+ *
+ *   async onDecision({ decision, actor, delivery }, ctx) {
+ *     await updateSlackMessage(delivery.channel, delivery.ts, decision.approved ? "✅" : "❌");
+ *   },
+ * });
+ * ```
+ */
+declare function defineHumanApprovalNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson extends Record<string, unknown>, TDecision extends Record<string, unknown>, TDelivery extends JsonValue, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(opts: {
+  key: TKey$1;
+  title: string;
+  description?: string;
+  icon?: string;
+  channel: string;
+  configSchema: ZodType<TConfig$1>;
+  inputSchema?: ZodType<TInputJson>;
+  decisionSchema: ZodType<TDecision>;
+  credentials?: TBindings;
+  /**
+   * Custom predicate that decides whether a decision counts as "approved".
+   * When omitted, the helper checks if `decisionSchema` is a Zod object with an
+   * `approved: boolean` field; if so it uses `decision.approved === true`.
+   * If neither holds, `defineHumanApprovalNode` throws at **definition time** (not runtime).
+   */
+  approvedPredicate?: (decision: TDecision) => boolean;
+  /** Default suspension timeout. Defaults to `"24h"`. */
+  defaultTimeout?: Duration;
+  /** What to do when the task times out. Defaults to `"halt"`. */
+  defaultOnTimeout?: "halt" | "auto-accept";
+  inspectorSummary?: (config: TConfig$1) => ReadonlyArray<NodeInspectorSummaryRow> | undefined;
+  deliver: (args: {
+    task: HumanTaskHandle;
+    config: TConfig$1;
+    input: TInputJson;
+    item: Item;
+  }, ctx: ExecutionContext) => Promise<TDelivery>;
+  onDecision?: (args: {
+    decision: TDecision;
+    actor: HumanTaskActor;
+    task: HumanTaskHandle;
+    delivery: TDelivery;
+    item: Item;
+  }, ctx: ExecutionContext) => Promise<void>;
+  onTimeout?: (args: {
+    task: HumanTaskHandle;
+    delivery: TDelivery;
+    item: Item;
+    policy: "halt" | "auto-accept";
+  }, ctx: ExecutionContext) => Promise<void>;
+}): DefinedHumanApprovalNode<TKey$1, TConfig$1, TInputJson, TBindings>;
 //#endregion
 //#region src/workflow/dsl/workflowBuilderTypes.d.ts
 type AnyRunnableNodeConfig = RunnableNodeConfig<any, any>;
@@ -452,6 +349,25 @@ declare class ChainCursor<TCurrentJson> {
   thenIntoInputHints<TOutputJson, TConfig$1 extends RunnableNodeConfig<any, TOutputJson>>(config: TConfig$1): ChainCursor<RunnableNodeOutputJson<TConfig$1>>;
   readonly when: ChainCursorWhenOverloads<TCurrentJson>;
   route<TNextJson$1>(branches: Readonly<Record<OutputPortKey, (branch: ChainCursor<TCurrentJson>) => ChainCursor<TNextJson$1> | undefined>>): ChainCursor<TNextJson$1>;
+  /**
+   * Chainable shorthand for `.then(node.create(config, metadata?.name, metadata?.nodeId))`.
+   *
+   * Signals to readers that this step suspends the run and waits for a human decision.
+   * Throws at workflow-build time if `node` was not created via `defineHumanApprovalNode`.
+   *
+   * @example
+   * ```ts
+   * workflow
+   *   .trigger(...)
+   *   .humanApproval(inboxApproval, { title: "Approve?", body: "...", priority: "normal" })
+   *   .then(nextStep.create(...))
+   *   .build();
+   * ```
+   */
+  humanApproval<TKey$1 extends string, TConfig$1 extends Record<string, unknown>, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(node: DefinedHumanApprovalNode<TKey$1, TConfig$1, TCurrentJson & Record<string, unknown>, TBindings>, config: TConfig$1, metadata?: {
+    name?: string;
+    nodeId?: string;
+  }): ChainCursor<HumanApprovalOutputJson<TCurrentJson & Record<string, unknown>>>;
   build(): WorkflowDefinition;
   private resolveSharedInputPortHint;
 }
@@ -515,56 +431,6 @@ declare class ConnectionInvocationIdFactory {
   static createForTest(runId: string, connectionNodeId: NodeId, sequence: number): string;
 }
 //#endregion
-//#region src/workflow/definition/ConnectionNodeIdFactory.d.ts
-/**
- * Deterministic ids for workflow connection-owned child nodes (LLM slot, tools, etc.).
- * These are stable across loads.
- */
-declare class ConnectionNodeIdFactory {
-  static readonly connectionSegment: "__conn__";
-  static languageModelConnectionNodeId(parentNodeId: NodeId): NodeId;
-  static toolConnectionNodeId(parentNodeId: NodeId, toolName: string): NodeId;
-  static mcpConnectionNodeId(parentNodeId: NodeId, serverId: string): NodeId;
-  static isMcpConnectionNodeId(nodeId: NodeId): boolean;
-  static parseMcpConnectionNodeId(nodeId: NodeId): Readonly<{
-    parentNodeId: NodeId;
-    serverId: string;
-  }> | undefined;
-  static isLanguageModelConnectionNodeId(nodeId: NodeId): boolean;
-  static isToolConnectionNodeId(nodeId: NodeId): boolean;
-  static parseLanguageModelConnectionNodeId(nodeId: NodeId): Readonly<{
-    parentNodeId: NodeId;
-  }> | undefined;
-  static parseToolConnectionNodeId(nodeId: NodeId): Readonly<{
-    parentNodeId: NodeId;
-    normalizedToolName: string;
-  }> | undefined;
-  /** True when `nodeId` is a connection-owned child of `parentNodeId` (LLM or tool slot). */
-  static isConnectionOwnedDescendantOf(parentNodeId: NodeId, nodeId: NodeId): boolean;
-  /** Normalizes a tool display name to a stable id segment. */
-  static normalizeToolName(toolName: string): string;
-}
-//#endregion
-//#region src/workflow/definition/NodeIterationIdFactory.d.ts
-/**
- * Unique ids for one per-item iteration of a runnable node's execute loop.
- *
- * Activations are per-batch (one scheduled execution of a node, possibly with N items).
- * Iterations refine that to one identifier per item-index inside the batch loop, so per-item
- * connection invocations and telemetry can be grouped without time-window heuristics.
- *
- * Uses Web Crypto's `randomUUID` (Node 19+ and all modern browsers) so this module is safe
- * to include in the browser entry. Importing `node:crypto` here previously leaked into the
- * canvas client bundle through `browser.ts` and OOM'd consumers' Turbopack builds.
- */
-declare class NodeIterationIdFactory {
-  static create(): string;
-  /** Deterministic id for tests when a stable sequence is needed. */
-  static createForTest(seed: string, sequence: number): string;
-  /** Deterministic id derived from a connection node id (for sub-agent / tool-call scopes). */
-  static createForConnection(connectionNodeId: NodeId, sequence: number): string;
-}
-//#endregion
 //#region src/workflow/definition/WorkflowExecutableNodeClassifier.d.ts
 /**
  * Derives which workflow nodes participate in the main execution graph vs connection-only children.
@@ -611,102 +477,58 @@ declare class SystemClock implements Clock {
   now(): Date;
 }
 //#endregion
-//#region src/authoring/defineNode.types.d.ts
-type MaybePromise$2<TValue> = TValue | Promise<TValue>;
-type ResolvableCredentialType = AnyCredentialType | CredentialTypeId;
-type SessionForCredentialType<TCredential extends ResolvableCredentialType> = TCredential extends AnyCredentialType ? Awaited<ReturnType<TCredential["createSession"]>> : unknown;
-type DefinedNodeCredentialBinding = ResolvableCredentialType | Readonly<{
-  readonly type: ResolvableCredentialType | ReadonlyArray<ResolvableCredentialType>;
-  readonly label?: string;
-  readonly optional?: true;
-  readonly helpText?: string;
-  readonly helpUrl?: string;
-}>;
-type DefinedNodeCredentialBindings = Readonly<Record<string, DefinedNodeCredentialBinding>>;
-type SessionForBinding<TBinding extends DefinedNodeCredentialBinding> = TBinding extends Readonly<{
-  type: infer TType;
-}> ? TType extends ReadonlyArray<infer TEntry> ? SessionForCredentialType<TEntry & ResolvableCredentialType> : SessionForCredentialType<TType & ResolvableCredentialType> : SessionForCredentialType<TBinding & ResolvableCredentialType>;
-type DefinedNodeCredentialAccessors<TBindings extends DefinedNodeCredentialBindings | undefined> = TBindings extends DefinedNodeCredentialBindings ? Readonly<{ [TKey in keyof TBindings]: () => Promise<SessionForBinding<TBindings[TKey]>> }> : Readonly<Record<string, never>>;
-interface DefinedNodeRunContext<TConfig$1 extends CredentialJsonRecord, TBindings extends DefinedNodeCredentialBindings | undefined> {
-  readonly config: TConfig$1;
-  readonly credentials: DefinedNodeCredentialAccessors<TBindings>;
-  readonly execution: NodeExecutionContext<RunnableNodeConfig<TConfig$1, unknown>>;
-}
+//#region src/contracts/inboxChannelTypes.d.ts
 /**
- * Arguments for {@link defineNode} `execute` (engine `ctx` matches {@link RunnableNode.execute};
- * the second callback parameter adds {@link DefinedNodeRunContext} for credential accessors).
+ * A single inbox delivery channel.
+ * Implementations: `LocalInboxChannel`, `ControlPlaneInboxChannel`.
  */
-type DefineNodeExecuteArgs<TConfig$1 extends CredentialJsonRecord, TInputJson> = Readonly<{
-  input: TInputJson;
+interface InboxChannel {
+  readonly kind: "local" | "control-plane-inbox";
+  deliver(args: InboxDeliverArgs): Promise<InboxDelivery>;
+  updateOnDecision?(args: InboxOnDecisionArgs): Promise<void>;
+  updateOnTimeout?(args: InboxOnTimeoutArgs): Promise<void>;
+}
+type InboxDeliverArgs = Readonly<{
+  task: HumanTaskHandle;
+  subject: HumanTaskSubject;
+  priority: "low" | "normal" | "high";
   item: Item;
-  itemIndex: number;
-  items: Items;
-  ctx: NodeExecutionContext<RunnableNodeConfig<TInputJson, unknown> & Readonly<{
-    config: TConfig$1;
-  }>>;
+  /** Present in managed mode (from `PairingConfig.workspaceId`). */
+  workspaceId?: string;
+}>;
+type InboxDelivery = {
+  kind: "local";
+  inboxItemId: string;
+} | {
+  kind: "cp";
+  inboxItemId: string;
+  workspaceId: string;
+};
+type InboxOnDecisionArgs = Readonly<{
+  delivery: InboxDelivery;
+  decision: {
+    approved: boolean;
+    note?: string;
+  };
+  actor: HumanTaskActor;
+}>;
+type InboxOnTimeoutArgs = Readonly<{
+  delivery: InboxDelivery;
+  policy: "halt" | "auto-accept";
 }>;
-type DefinedNodeConfigInput<TConfigResolved extends CredentialJsonRecord, TItemJson> = ParamDeep<TConfigResolved, TItemJson>;
-interface DefinedNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, _TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
-  readonly kind: "defined-node";
-  readonly key: TKey$1;
-  readonly title: string;
-  readonly description?: string;
-  create<TConfigItemJson = TInputJson>(config: DefinedNodeConfigInput<TConfig$1, TConfigItemJson>, name?: string, id?: string): RunnableNodeConfig<TInputJson, TOutputJson>;
-  register(context: {
-    registerNode<TValue>(token: TypeToken<TValue>, implementation?: TypeToken<TValue>): void;
-  }): void;
-}
-/**
- * Plugin / DSL-friendly node: per-item `execute` with optional {@link RunnableNodeConfig.inputSchema}.
- */
-interface DefineNodeOptions<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
-  readonly key: TKey$1;
-  readonly title: string;
-  readonly description?: string;
-  /**
-   * Canvas icon for this node (same contract as `NodeConfigBase.icon` on runnable configs).
-   * The Next host resolves Lucide (`lucide:…`), built-in SVGs (`builtin:…`), Simple Icons (`si:…`), and image URLs (`https:`, `data:`, `/…`).
-   */
-  readonly icon?: string;
-  /** Default values / form hints for **static** node configuration (credentials, retry, IDs), not per-item payload. */
-  readonly input?: Readonly<Record<keyof TConfig$1 & string, unknown>>;
-  readonly configSchema?: z.ZodType<TConfig$1>;
-  readonly credentials?: TBindings;
-  /**
-   * Validates **`input`** (engine also accepts `inputSchema` on the node class).
-   */
-  readonly inputSchema?: ZodType<TInputJson>;
-  /** Preserve inbound `item.binary` when `execute` returns plain JSON or item-shaped results without `binary`. */
-  readonly keepBinaries?: boolean;
-  /**
-   * Static configuration summary surfaced in the workflow inspector — see
-   * {@link import("../contracts/workflowTypes").NodeConfigBase.inspectorSummary}.
-   *
-   * Receives the static config; returns 2–6 short label/value pairs (or `undefined` to skip).
-   */
-  readonly inspectorSummary?: (args: Readonly<{
-    config: TConfig$1;
-  }>) => ReadonlyArray<NodeInspectorSummaryRow> | undefined;
-  execute(args: DefineNodeExecuteArgs<TConfig$1, TInputJson>, context: DefinedNodeRunContext<TConfig$1, TBindings>): MaybePromise$2<TOutputJson>;
-}
 /**
- * Batch-oriented defined node: `run` receives all item JSON once (last item in activation); emits one output per input row.
+ * Resolves the correct `InboxChannel` for the current deployment mode
+ * (local dev vs. managed/CP). Implemented in `@codemation/host`.
  */
-interface DefineBatchNodeOptions<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined> {
-  readonly key: TKey$1;
-  readonly title: string;
-  readonly description?: string;
-  readonly icon?: string;
-  readonly input?: Readonly<Record<keyof TConfig$1 & string, unknown>>;
-  readonly configSchema?: z.ZodType<TConfig$1>;
-  readonly credentials?: TBindings;
-  readonly inspectorSummary?: (args: Readonly<{
-    config: TConfig$1;
-  }>) => ReadonlyArray<NodeInspectorSummaryRow> | undefined;
-  run(items: ReadonlyArray<TInputJson>, context: DefinedNodeRunContext<TConfig$1, TBindings>): MaybePromise$2<ReadonlyArray<TOutputJson>>;
-}
-declare function defineNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefineNodeOptions<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>): DefinedNode<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>;
-declare function defineBatchNode<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TInputJson, TOutputJson, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefineBatchNodeOptions<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>): DefinedNode<TKey$1, TConfig$1, TInputJson, TOutputJson, TBindings>;
+interface InboxChannelResolverSeam {
+  resolve(): {
+    channel: InboxChannel;
+    workspaceId?: string;
+  };
+}
+declare const InboxChannelResolverToken: TypeToken<InboxChannelResolverSeam | undefined>;
+declare const LocalInboxChannelToken: TypeToken<InboxChannel | undefined>;
+declare const ControlPlaneInboxChannelToken: TypeToken<InboxChannel | undefined>;
 //#endregion
 //#region src/authoring/DefinedNodeRegistry.d.ts
 declare class DefinedNodeRegistry {
@@ -736,288 +558,6 @@ declare function defineCredential<TPublicSource extends CredentialFieldMap<any>
   readonly key: string;
 };
 //#endregion
-//#region src/ai/NodeBackedToolConfig.d.ts
-declare class NodeBackedToolConfig<TNodeConfig extends RunnableNodeConfig<any, any>, TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> implements ToolConfig {
-  readonly name: string;
-  readonly node: TNodeConfig;
-  readonly type: TypeToken<unknown>;
-  readonly toolKind: "nodeBacked";
-  readonly description?: string;
-  readonly presentation?: AgentCanvasPresentation;
-  private readonly inputSchemaValue;
-  private readonly outputSchemaValue;
-  private readonly mapInputValue?;
-  private readonly mapOutputValue?;
-  constructor(name: string, node: TNodeConfig, options: NodeBackedToolConfigOptions<TNodeConfig, TInputSchema, TOutputSchema>);
-  getCredentialRequirements(): ReadonlyArray<CredentialRequirement>;
-  getInputSchema(): TInputSchema;
-  getOutputSchema(): TOutputSchema;
-  toNodeItem(args: NodeBackedToolInputMapperArgs<TNodeConfig, input<TInputSchema>>): Item<RunnableNodeInputJson<TNodeConfig>>;
-  toToolOutput(args: NodeBackedToolOutputMapperArgs<TNodeConfig, input<TInputSchema>>): output<TOutputSchema>;
-  private readDefaultToolOutput;
-  private isItem;
-}
-//#endregion
-//#region src/ai/CallableToolConfig.d.ts
-type CallableToolExecuteHandler<TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> = (args: ToolExecuteArgs<CallableToolConfig<TInputSchema, TOutputSchema>, input<TInputSchema>>) => Promise<output<TOutputSchema>> | output<TOutputSchema>;
-type CallableToolConfigOptions<TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> = Readonly<{
-  name: string;
-  description?: string;
-  presentation?: AgentCanvasPresentation;
-  inputSchema: TInputSchema;
-  outputSchema: TOutputSchema;
-  /**
-   * Optional credential slots for this tool (same contract as other {@link ToolConfig} shapes).
-   */
-  credentialRequirements?: ReadonlyArray<CredentialRequirement>;
-  execute: CallableToolExecuteHandler<TInputSchema, TOutputSchema>;
-}>;
-/**
- * Inline callable agent tool: DSL sugar over {@link ToolConfig} without a separate {@link NodeResolver}-registered {@link Tool} class.
- */
-declare class CallableToolConfig<TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> implements ToolConfig {
-  readonly name: string;
-  readonly type: TypeToken<unknown>;
-  readonly toolKind: "callable";
-  readonly description?: string;
-  readonly presentation?: AgentCanvasPresentation;
-  private readonly inputSchemaValue;
-  private readonly outputSchemaValue;
-  private readonly credentialRequirementsValue?;
-  private readonly executeHandler;
-  constructor(name: string, options: CallableToolConfigOptions<TInputSchema, TOutputSchema>);
-  getCredentialRequirements(): ReadonlyArray<CredentialRequirement>;
-  getInputSchema(): TInputSchema;
-  getOutputSchema(): TOutputSchema;
-  /**
-   * Parses tool input and output with the configured Zod schemas.
-   */
-  executeTool(args: ToolExecuteArgs<CallableToolConfig<TInputSchema, TOutputSchema>, input<TInputSchema>>): Promise<output<TOutputSchema>>;
-  private parseInput;
-  private parseOutput;
-  private decorateValidationError;
-}
-//#endregion
-//#region src/ai/CallableToolFactory.d.ts
-declare class CallableToolFactoryImpl {
-  callableTool<TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny>(options: CallableToolConfigOptions<TInputSchema, TOutputSchema>): CallableToolConfig<TInputSchema, TOutputSchema>;
-}
-declare const CallableToolFactory: CallableToolFactoryImpl;
-//#endregion
-//#region src/ai/CallableToolKindToken.d.ts
-/**
- * Shared {@link import("../di").TypeToken} marker for {@link CallableToolConfig}.
- * Callable tools are not registered in {@link NodeResolver}; this class only satisfies {@link ToolConfig#type}.
- */
-declare class CallableToolKindToken {}
-//#endregion
-//#region src/ai/AgentToolFactory.d.ts
-declare class AgentToolFactoryImpl {
-  asTool<TNodeConfig extends RunnableNodeConfig<any, any>, TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny>(node: TNodeConfig, options: Readonly<{
-    name?: string;
-  } & NodeBackedToolConfigOptions<TNodeConfig, TInputSchema, TOutputSchema>>): NodeBackedToolConfig<TNodeConfig, TInputSchema, TOutputSchema>;
-  private withDefaultAgentInputMapper;
-  private mergeAgentToolInputWithCurrentItem;
-  private isMergeableRecord;
-}
-declare const AgentToolFactory: AgentToolFactoryImpl;
-//#endregion
-//#region src/ai/AgentMessageConfigNormalizerFactory.d.ts
-declare class AgentMessageConfigNormalizer {
-  /**
-   * Prefer {@code input.messages} when present (ItemNode / engine-mapped payloads); otherwise resolve from
-   * {@link AgentNodeConfig.messages} templates.
-   */
-  static resolveFromInputOrConfig<TInputJson, TOutputJson>(input: unknown, config: AgentNodeConfig<TInputJson, TOutputJson>, args: AgentMessageBuildArgs<TInputJson>): ReadonlyArray<AgentMessageDto>;
-  static normalize<TInputJson, TOutputJson>(config: AgentNodeConfig<TInputJson, TOutputJson>, args: AgentMessageBuildArgs<TInputJson>): ReadonlyArray<AgentMessageDto>;
-  private static tryMessagesFromStructuredInput;
-  private static normalizeRichMessages;
-  private static lineToDto;
-}
-//#endregion
-//#region src/ai/AgentConfigInspectorFactory.d.ts
-declare class AgentConfigInspector {
-  static isAgentNodeConfig(config: NodeConfigBase | undefined): config is AgentNodeConfig<any, any>;
-  private static hasCompatibleMessageConfiguration;
-}
-//#endregion
-//#region src/ai/AiHost.d.ts
-interface AgentCanvasPresentation<TIcon extends string = string> {
-  readonly label?: string;
-  readonly icon?: TIcon;
-}
-type ZodSchemaAny = ZodType<any, any, any>;
-interface ToolConfig {
-  readonly type: TypeToken<unknown>;
-  readonly name: string;
-  readonly description?: string;
-  readonly presentation?: AgentCanvasPresentation;
-  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
-}
-type ToolExecuteArgs<TConfig$1 extends ToolConfig = ToolConfig, TInput = unknown> = Readonly<{
-  config: TConfig$1;
-  input: TInput;
-  ctx: NodeExecutionContext<any>;
-  item: Item;
-  itemIndex: number;
-  items: Items;
-  /**
-   * Optional sub-agent boundary hooks: when present, the live `agent.tool.call` span and the
-   * planned tool-call invocationId are forwarded so node-backed runtimes can re-root their child
-   * execution scope. Plain function tools may safely ignore these hooks.
-   */
-  hooks?: Readonly<{
-    parentSpan?: TelemetrySpanScope;
-    parentInvocationId?: ConnectionInvocationId;
-  }>;
-}>;
-interface Tool<TConfig$1 extends ToolConfig = ToolConfig, TInputSchema extends ZodSchemaAny = ZodSchemaAny, TOutputSchema extends ZodSchemaAny = ZodSchemaAny> {
-  readonly defaultDescription: string;
-  readonly inputSchema: TInputSchema;
-  readonly outputSchema: TOutputSchema;
-  execute(args: ToolExecuteArgs<TConfig$1, input<TInputSchema>>): Promise<output<TOutputSchema>> | output<TOutputSchema>;
-}
-type AgentTool<TInputSchema extends ZodSchemaAny = ZodSchemaAny, TOutputSchema extends ZodSchemaAny = ZodSchemaAny> = Tool<ToolConfig, TInputSchema, TOutputSchema>;
-type AgentToolExecuteArgs<TInput = unknown> = ToolExecuteArgs<ToolConfig, TInput>;
-type AgentToolToken = TypeToken<Tool<ToolConfig, ZodSchemaAny, ZodSchemaAny>>;
-type AgentMessageRole = "system" | "user" | "assistant";
-type AgentMessageBuildArgs<TInputJson = unknown> = Readonly<{
-  item: Item<TInputJson>;
-  itemIndex: number;
-  items: Items<TInputJson>;
-  ctx: NodeExecutionContext<any>;
-}>;
-interface AgentMessageDto {
-  readonly role: AgentMessageRole;
-  readonly content: string;
-}
-type AgentMessageTemplateContent<TInputJson = unknown> = string | ((args: AgentMessageBuildArgs<TInputJson>) => string);
-interface AgentMessageTemplate<TInputJson = unknown> {
-  readonly role: AgentMessageRole;
-  readonly content: AgentMessageTemplateContent<TInputJson>;
-}
-/** A single prompt line: fixed DTO or template with optional function `content`. */
-type AgentMessageLine<TInputJson = unknown> = AgentMessageDto | AgentMessageTemplate<TInputJson>;
-/**
- * Message list for an agent. Prefer a **plain array** of `{ role, content }` (optionally with function `content` for templates).
- * Use the object form only when you need `buildMessages` to append messages after optional `prompt` lines.
- */
-type AgentMessageConfig<TInputJson = unknown> = Expr<ReadonlyArray<AgentMessageLine<TInputJson>>, TInputJson> | ReadonlyArray<AgentMessageLine<TInputJson>> | {
-  readonly prompt?: ReadonlyArray<AgentMessageLine<TInputJson>>;
-  readonly buildMessages?: (args: AgentMessageBuildArgs<TInputJson>) => ReadonlyArray<AgentMessageDto>;
-};
-type AgentTurnLimitBehavior = "error" | "respondWithLastMessage";
-interface AgentModelInvocationOptions {
-  readonly maxTokens?: number;
-  readonly providerOptions?: Readonly<Record<string, JsonValue>>;
-}
-interface AgentGuardrailConfig {
-  readonly maxTurns?: number;
-  readonly onTurnLimitReached?: AgentTurnLimitBehavior;
-  readonly modelInvocationOptions?: AgentModelInvocationOptions;
-}
-/** Defaults aligned with common tool-agent iteration limits (many products use ~10 max rounds). */
-declare const AgentGuardrailDefaults: {
-  readonly maxTurns: 10;
-  readonly onTurnLimitReached: AgentTurnLimitBehavior;
-};
-interface AgentToolDefinition {
-  readonly name: string;
-  readonly description: string;
-  readonly inputSchema: ZodSchemaAny;
-}
-type AgentToolCall = Readonly<{
-  id?: string;
-  name: string;
-  input: unknown;
-}>;
-type AgentToolCallPlanner<_TNodeConfig = unknown> = (item: Item, index: number, items: Items, ctx: NodeExecutionContext<any>) => ReadonlyArray<AgentToolCall>;
-interface ChatModelConfig {
-  readonly type: TypeToken<ChatModelFactory<ChatModelConfig>>;
-  readonly name: string;
-  readonly provider?: string;
-  readonly modelName?: string;
-  readonly presentation?: AgentCanvasPresentation;
-  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
-}
-/**
- * Provider-neutral chat language model wrapper returned by a {@link ChatModelFactory}.
- *
- * Thin adapter around an AI SDK `LanguageModelV2` (from `@ai-sdk/provider`) plus the call-site
- * defaults Codemation needs at every generate/stream: the provider label, the model name used for
- * pricing / telemetry, and the default invocation options (max output tokens, temperature,
- * provider-specific overrides).
- *
- * The consumer (AIAgentNode / AgentStructuredOutputRunner) passes `languageModel` directly into
- * `generateText({ model, ... })` from the `ai` package.
- */
-interface ChatLanguageModel {
-  /** AI SDK `LanguageModelV2` instance (kept `unknown` to avoid leaking the SDK type into `@codemation/core`). */
-  readonly languageModel: unknown;
-  /** Stable pricing/telemetry key — e.g. `"gpt-4.1-nano"`. */
-  readonly modelName: string;
-  /** Provider label — e.g. `"openai"`. Used for cost tracking. */
-  readonly provider?: string;
-  /** Defaults merged into every call. Consumers may override per-invocation. */
-  readonly defaultCallOptions?: ChatLanguageModelCallOptions;
-}
-interface ChatLanguageModelCallOptions {
-  readonly maxOutputTokens?: number;
-  readonly temperature?: number;
-  readonly providerOptions?: Readonly<Record<string, Readonly<Record<string, JsonValue>>>>;
-}
-/**
- * Options for a structured-output generate call. Mirrors
- * `generateText({ output: Output.object(...) })` from the `ai` package.
- */
-interface StructuredOutputOptions {
-  /** Optional schema name — used by some providers as the JSON schema name attribute. */
-  readonly schemaName?: string;
-  /** When `true`, the consumer should pass a strict-mode-compatible JSON Schema record. */
-  readonly strict?: boolean;
-}
-interface ChatModelFactory<TConfig$1 extends ChatModelConfig = ChatModelConfig> {
-  create(args: Readonly<{
-    config: TConfig$1;
-    ctx: NodeExecutionContext<any>;
-  }>): Promise<ChatLanguageModel> | ChatLanguageModel;
-}
-type NodeBackedToolInputMapperArgs<TNodeConfig extends RunnableNodeConfig<any, any>, TToolInput = unknown> = Readonly<{
-  input: TToolInput;
-  item: Item;
-  itemIndex: number;
-  items: Items;
-  ctx: NodeExecutionContext<any>;
-  node: TNodeConfig;
-}>;
-type NodeBackedToolOutputMapperArgs<TNodeConfig extends RunnableNodeConfig<any, any>, TToolInput = unknown> = Readonly<{
-  input: TToolInput;
-  item: Item;
-  itemIndex: number;
-  items: Items;
-  ctx: NodeExecutionContext<any>;
-  node: TNodeConfig;
-  outputs: NodeOutputs;
-}>;
-type NodeBackedToolInputMapper<TNodeConfig extends RunnableNodeConfig<any, any>, TToolInput = unknown> = (args: NodeBackedToolInputMapperArgs<TNodeConfig, TToolInput>) => Item<RunnableNodeInputJson<TNodeConfig>> | RunnableNodeInputJson<TNodeConfig>;
-type NodeBackedToolOutputMapper<TNodeConfig extends RunnableNodeConfig<any, any>, TToolInput = unknown, TToolOutput = unknown> = (args: NodeBackedToolOutputMapperArgs<TNodeConfig, TToolInput>) => TToolOutput;
-type NodeBackedToolConfigOptions<TNodeConfig extends RunnableNodeConfig<any, any>, TInputSchema extends ZodSchemaAny, TOutputSchema extends ZodSchemaAny> = Readonly<{
-  description?: string;
-  presentation?: AgentCanvasPresentation;
-  inputSchema: TInputSchema;
-  outputSchema: TOutputSchema;
-  mapInput?: NodeBackedToolInputMapper<TNodeConfig, input<TInputSchema>>;
-  mapOutput?: NodeBackedToolOutputMapper<TNodeConfig, input<TInputSchema>, output<TOutputSchema>>;
-}>;
-interface AgentNodeConfig<TInputJson = unknown, TOutputJson = unknown> extends RunnableNodeConfig<TInputJson, TOutputJson> {
-  readonly messages: AgentMessageConfig<TInputJson>;
-  readonly chatModel: ChatModelConfig;
-  readonly tools?: ReadonlyArray<ToolConfig>;
-  readonly guardrails?: AgentGuardrailConfig;
-  readonly outputSchema?: ZodType<TOutputJson>;
-}
-type AgentAttachmentRole = "languageModel" | "tool" | "nestedAgent";
-//#endregion
 //#region src/authoring/callableTool.types.d.ts
 /**
  * Workflow-facing helper for inline Zod-typed agent tools (same as {@link CallableToolFactory.callableTool}).
@@ -1250,27 +790,6 @@ declare class DefinedPollingTriggerConfig<TConfig$1 extends CredentialJsonRecord
  */
 declare function definePollingTrigger<TKey$1 extends string, TConfig$1 extends CredentialJsonRecord, TItemJson, TState extends JsonValue | undefined, TBindings extends DefinedNodeCredentialBindings | undefined = undefined>(options: DefinePollingTriggerOptions<TKey$1, TConfig$1, TItemJson, TState, TBindings>): DefinedPollingTrigger<TKey$1, TConfig$1, TItemJson, TState, TBindings>;
 //#endregion
-//#region src/ai/AgentConnectionNodeCollector.d.ts
-type AgentConnectionNodeRole = "languageModel" | "tool" | "nestedAgent";
-type AgentConnectionCredentialSource = Readonly<{
-  getCredentialRequirements?(): ReadonlyArray<CredentialRequirement>;
-}>;
-type AgentConnectionNodeDescriptor = Readonly<{
-  nodeId: NodeId;
-  parentNodeId: NodeId;
-  connectionName: NodeConnectionName;
-  role: AgentConnectionNodeRole;
-  name: string;
-  typeName: string;
-  icon?: string;
-  credentialSource: AgentConnectionCredentialSource;
-}>;
-type McpServerResolver = (id: string) => McpServerDeclaration | undefined;
-type AgentConnectionNodeCollectorApi = Readonly<{
-  collect(parentNodeId: NodeId, agentConfig: AgentNodeConfig<any, any>, mcpServerResolver?: McpServerResolver): ReadonlyArray<AgentConnectionNodeDescriptor>;
-}>;
-declare const AgentConnectionNodeCollector: AgentConnectionNodeCollectorApi;
-//#endregion
 //#region src/events/ConnectionInvocationEventPublisher.d.ts
 /**
  * Publishes per-invocation lifecycle records onto the run {@link RunEventBus}.
@@ -1378,18 +897,6 @@ declare function tool(options?: PersistedRuntimeTypeDecoratorOptions): ClassDeco
 /** Marks a class as a persisted chat-model runtime type and an injectable tsyringe service. */
 declare function chatModel(options?: PersistedRuntimeTypeDecoratorOptions): ClassDecorator;
 //#endregion
-//#region src/serialization/ItemsInputNormalizer.d.ts
-/**
- * Normalizes external inputs into the engine's canonical `Items` shape.
- * Used at host and builder boundaries where callers may provide either a raw value,
- * a single item-like object, or an array of item-like values.
- */
-declare class ItemsInputNormalizer {
-  normalize(raw: unknown): Items;
-  private normalizeItem;
-  private isItem;
-}
-//#endregion
 //#region src/execution/ChildExecutionScopeFactory.d.ts
 /**
  * Builds a re-rooted child execution context for sub-agent (and other deeply-nested) invocations.
@@ -1541,5 +1048,90 @@ interface OAuthFlowExecutor {
   }): Promise<OAuthMaterial>;
 }
 //#endregion
-export { ActivationIdFactory, AgentAttachmentRole, AgentBindError, AgentCanvasPresentation, AgentConfigInspector, type AgentConnectionCredentialSource, AgentConnectionNodeCollector, type AgentConnectionNodeDescriptor, type AgentConnectionNodeRole, AgentGuardrailConfig, AgentGuardrailDefaults, AgentMcpIntegration, AgentMcpToolMap, AgentMessageBuildArgs, AgentMessageConfig, AgentMessageConfigNormalizer, AgentMessageDto, AgentMessageLine, AgentMessageRole, AgentMessageTemplate, AgentMessageTemplateContent, AgentModelInvocationOptions, AgentNodeConfig, AgentTool, AgentToolCall, AgentToolCallPlanner, AgentToolDefinition, AgentToolExecuteArgs, AgentToolFactory, AgentToolToken, AgentTurnLimitBehavior, AllWorkflowsActiveWorkflowActivationPolicy, AnyCredentialType, AnyRunnableNodeConfig, AnyTriggerNodeConfig, AssertionResult, AssertionResultProvenance, BatchId, BinaryAttachment, BinaryAttachmentCreateRequest, BinaryBody, BinaryPreviewKind, BinaryStorage, BinaryStorageReadResult, BinaryStorageStatResult, BinaryStorageWriteRequest, BinaryStorageWriteResult, BooleanWhenOverloads, BranchMoreArgs, BranchOutputGuard, BranchStepsArg, CallableToolConfig, type CallableToolConfigOptions, type CallableToolExecuteHandler, CallableToolFactory, CallableToolKindToken, ChainCursor, ChatLanguageModel, ChatLanguageModelCallOptions, ChatModelConfig, ChatModelFactory, ChildExecutionScopeFactory, type Clock, CodemationTelemetryAttributeNames, CodemationTelemetryMetricNames, CollectionColumnBuilder, CollectionDefinition, CollectionFieldDefinition, CollectionIndexDefinition, CollectionStore, CollectionsContext, ConnectionInvocationAppendArgs, ConnectionInvocationEventPublisher, ConnectionInvocationId, ConnectionInvocationIdFactory, ConnectionInvocationKind, ConnectionInvocationRecord, ConnectionNodeIdFactory, Container, CoreTokens, CostCatalog, CostCatalogEntry, CostTrackingComponent, CostTrackingPriceQuote, CostTrackingTelemetry, CostTrackingTelemetryAttributeNames, CostTrackingTelemetryFactory, CostTrackingTelemetryMetricNames, CostTrackingUsageRecord, CredentialAdvancedSectionPresentation, CredentialAuthDefinition, CredentialBinding, CredentialBindingKey, CredentialFieldSchema, CredentialHealth, CredentialHealthStatus, CredentialHealthTester, CredentialInstanceId, CredentialInstanceRecord, CredentialJsonRecord, CredentialMaterialSourceKind, CredentialOAuth2AuthDefinition, CredentialOAuth2ScopesFromPublicConfig, CredentialRequirement, CredentialResolverFactory, CredentialSessionFactory, CredentialSessionFactoryArgs, CredentialSessionService, CredentialSetupStatus, CredentialType, CredentialTypeDefinition, CredentialTypeId, CredentialTypeRegistry, CredentialUnboundError, CurrentStateExecutionRequest, DEFAULT_ASSERTION_PASS_THRESHOLD, DefaultAsyncSleeper, DefaultExecutionBinaryService, DefaultExecutionContextFactory, DefaultWorkflowGraphFactory, DefineBatchNodeOptions, DefineCollectionOptions, DefineCredentialOptions, DefineNodeExecuteArgs, DefineNodeOptions, DefinePollingTriggerExecuteContext, DefinePollingTriggerOptions, DefinePollingTriggerPollContext, DefinePollingTriggerPollResult, DefinePollingTriggerTestItemsContext, DefinedCollection, DefinedCollectionRegistry, DefinedNode, DefinedNodeConfigInput, DefinedNodeCredentialAccessors, DefinedNodeCredentialBinding, DefinedNodeCredentialBindings, DefinedNodeRegistry, DefinedNodeRunContext, DefinedPollingTrigger, DefinedPollingTriggerConfig, DependencyContainer, Disposable, Edge, EngineDeps, EngineExecutionLimitsPolicy, type EngineExecutionLimitsPolicyConfig, EngineHost, EngineRunCounters, EventPublishingWorkflowExecutionRepository, ExecutableTriggerNode, ExecutionBinaryService, ExecutionContext, ExecutionContextFactory, ExecutionFrontierPlan, ExecutionInstanceDto, ExecutionInstanceId, ExecutionMode, ExecutionPayloadPolicyFields, ExecutionTelemetry, ExecutionTelemetryFactory, ExpRetryPolicy, ExponentialRetryPolicySpec, Expr, FixedRetryPolicySpec, GenAiTelemetryAttributeNames, HttpMethod, InMemoryBinaryStorage, InMemoryLiveWorkflowRepository, InMemoryRunDataFactory, InMemoryRunEventBus, InProcessRetryRunner, InjectableRuntimeDecoratorComposer, InjectionToken, InputPortKey, Item, ItemBinary, ItemExpr, ItemExprArgs, ItemExprCallback, ItemExprContext, ItemExprResolvedContext, ItemExprResolver, ItemNode, Items, ItemsInputNormalizer, JsonArray, JsonNonArray, JsonObject, JsonPrimitive, JsonValue, Lifecycle, LiveWorkflowRepository, McpServerDeclaration, type McpServerResolver, McpServerTransport, MultiInputNode, MutableRunData, NeedsReconsentEvent, NoOpAgentMcpIntegration, NoOpCostTrackingTelemetry, NoOpCostTrackingTelemetryFactory, NoOpExecutionTelemetry, NoOpExecutionTelemetryFactory, NoOpNodeExecutionTelemetry, NoOpPollingTriggerLogger, NoOpTelemetryArtifactReference, NoOpTelemetrySpanScope, NoRetryPolicy, NodeActivationContinuation, NodeActivationId, NodeActivationReceipt, NodeActivationRequest, NodeActivationRequestBase, NodeActivationScheduler, NodeBackedToolConfig, NodeBackedToolConfigOptions, NodeBackedToolInputMapper, NodeBackedToolInputMapperArgs, NodeBackedToolOutputMapper, NodeBackedToolOutputMapperArgs, NodeBinaryAttachmentService, NodeConfigBase, NodeConnectionName, NodeDefinition, NodeErrorHandler, NodeErrorHandlerArgs, NodeErrorHandlerSpec, NodeEventPublisher, NodeExecutionContext, NodeExecutionError, NodeExecutionRequest, NodeExecutionRequestHandler, NodeExecutionScheduler, NodeExecutionSnapshot, NodeExecutionStatePublisher, NodeExecutionStatus, NodeExecutionTelemetry, NodeExecutor, NodeId, NodeIdRef, NodeIdSlugifier, NodeInputsByPort, NodeInspectorSummaryRow, NodeIterationId, NodeIterationIdFactory, NodeKind, NodeOffloadPolicy, NodeOutputNormalizer, NodeOutputs, NodeRef, NodeResolver, NodeSchedulerDecision, NoneRetryPolicySpec, OAuth2ProviderFromPublicConfig, type OAuthFlowCallbackArgs, type OAuthFlowExecutor, type OAuthFlowStartArgs, type OAuthFlowStartResult, type OAuthMaterial, OutputPortKey, PairedItemRef, Param, ParamDeep, ParentExecutionRef, PayloadStorageKind, PendingNodeExecution, PersistedExecutionInstanceKind, PersistedExecutionInstanceRecord, PersistedMutableNodeState, PersistedMutableRunState, PersistedRunControlState, PersistedRunPolicySnapshot, PersistedRunSchedulingState, PersistedRunSlotProjectionRecord, PersistedRunState, PersistedRunWorkItemKind, PersistedRunWorkItemRecord, type PersistedRuntimeTypeDecoratorOptions, type PersistedRuntimeTypeKind, type PersistedRuntimeTypeMetadata, PersistedRuntimeTypeMetadataStore, PersistedRuntimeTypeNameResolver, PersistedTokenId, PersistedTriggerSetupState, PersistedWorkflowSnapshot, PersistedWorkflowSnapshotNode, PersistedWorkflowTokenRegistryLike, PinnedNodeOutputsByPort, type PollingRunCycleArgs, type PollingRunCycleResult, PollingTriggerDedupWindow, PollingTriggerHandle, type PollingTriggerLogger, PollingTriggerRuntime, type PollingTriggerStartArgs, PortsEmission, PreparedNodeActivationDispatch, RegistrationOptions, RetryPolicy, RetryPolicySpec, RunCompletionNotifier, RunCurrentState, RunDataFactory, RunDataSnapshot, RunEvent, RunEventBus, RunEventPublisherDeps, RunEventSubscription, RunExecutionOptions, RunFinishedAtFactory, RunId, RunIdFactory, RunIntentService, RunIterationDto, RunPruneCandidate, RunQueueEntry, RunResult, RunRevision, RunSlotProjectionState, RunStateResetRequest, RunStatus, RunStopCondition, RunSummary, RunTestContext, RunnableNode, RunnableNodeConfig, RunnableNodeExecuteArgs, RunnableNodeInputJson, RunnableNodeOutputJson, RunnableOutputBehaviorResolver, SlotExecutionStateDto, StackTraceCallSitePathResolver, StepSequenceOutput, StructuredOutputOptions, SystemClock, TelemetryArtifactAttachment, TelemetryArtifactReference, TelemetryAttributePrimitive, TelemetryAttributes, TelemetryChildSpanStart, TelemetryMetricRecord, TelemetryScope, TelemetrySpanEnd, TelemetrySpanEventRecord, TelemetrySpanScope, TestCaseRunStatus, TestSuiteRunId, TestSuiteRunStatus, TestTriggerNodeConfig, TestTriggerSetupContext, TestableTriggerNode, Tool, ToolConfig, ToolExecuteArgs, TriggerCleanupHandle, TriggerInstanceId, TriggerNode, TriggerNodeConfig, TriggerNodeOutputJson, TriggerNodeSetupState, TriggerRuntimeDiagnostics, TriggerSetupContext, TriggerSetupStateFor, TriggerSetupStateRepository, TriggerTestItemsContext, TypeToken, UnavailableBinaryStorage, UpstreamRefPlaceholder, ValidStepSequence, WebhookControlSignal, WebhookInvocationMatch, WebhookRunResult, WebhookTriggerMatcher, WebhookTriggerResolution, WebhookTriggerRoutingDiagnostics, WhenBuilder, WorkItemId, WorkItemStatus, WorkflowActivationPolicy, WorkflowBuilder, WorkflowDefinition, WorkflowDefinitionError, WorkflowDetailSelectionState, type WorkflowEdgePortError, type WorkflowEdgePortValidationResult, WorkflowEdgePortValidator, WorkflowErrorContext, WorkflowErrorHandler, WorkflowErrorHandlerSpec, WorkflowExecutableNodeClassifier, WorkflowExecutableNodeClassifierFactory, WorkflowExecutionListingRepository, WorkflowExecutionPruneRepository, WorkflowExecutionRepository, WorkflowGraph, WorkflowGraphFactory, WorkflowId, WorkflowNodeConnection, WorkflowNodeInstanceFactory, WorkflowPolicyRuntimeDefaults, WorkflowPrunePolicySpec, WorkflowRepository, WorkflowRunDetailDto, WorkflowRunnerResolver, WorkflowRunnerService, WorkflowSnapshotFactory, WorkflowSnapshotResolver, WorkflowStoragePolicyDecisionArgs, WorkflowStoragePolicyMode, WorkflowStoragePolicyResolver, WorkflowStoragePolicySpec, ZodSchemaAny, branchRef, c, callableTool, chatModel, container, defineBatchNode, defineCollection, defineCredential, defineNode, definePollingTrigger, delay, deriveAssertionPassed, emitPorts, getOriginIndexFromItem, getPersistedRuntimeTypeMetadata, inject, injectAll, injectable, instanceCachingFactory, instancePerContainerCachingFactory, isItemExpr, isPortsEmission, isUnbrandedPortsEmissionShape, itemExpr, node, nodeRef, predicateAwareClassFactory, registry, resolveItemExprsForExecution, resolveItemExprsInUnknown, runnableNodeInputType, runnableNodeOutputType, singleton, tool, triggerNodeOutputType, triggerNodeSetupStateType };
+//#region src/credentials/CredentialMaterialProvider.types.d.ts
+/**
+ * Material provider seam — see `docs/design/credentials-oauth-unification.md`,
+ * "Material provider seam" section. Sits beside the workspace's
+ * `CredentialStore`; persistence of the row stays at the store, persistence of
+ * the bytes goes through this provider so they can live at the control plane
+ * in managed mode.
+ */
+/**
+ * Pointer to material bytes. For local rows `ref` is the workspace instance id
+ * and the bytes co-locate with the row (existing `CredentialOAuth2Material` /
+ * `CredentialSecretMaterial` tables). For control-plane rows `ref` is the
+ * CP-side credential id; the workspace stores only the pointer.
+ */
+type CredentialMaterialRef = Readonly<{
+  source: "local" | "control-plane";
+  id: string;
+}>;
+/**
+ * Decrypted material bytes returned by a provider. Shape matches
+ * `OAuthMaterial` — every supported credential type today is OAuth-shaped.
+ */
+type MaterialBundle = OAuthMaterial;
+/**
+ * Caller context recorded by the CP material endpoint per fetch (D5 in the
+ * `credentials-vault` sprint README). The local provider accepts but ignores
+ * it; standalone mode has no audit log.
+ */
+type CallerContext = Readonly<{
+  workspaceId: string;
+  caller: Readonly<{
+    kind: "workflow-node";
+    workflowId: string;
+    nodeId: string;
+  }> | Readonly<{
+    kind: "concierge";
+    chatId: string;
+  }> | Readonly<{
+    kind: "research-agent";
+    chatId: string;
+  }> | Readonly<{
+    kind: "manual";
+    userId: string;
+  }>;
+  reason?: string;
+}>;
+interface CredentialMaterialProvider {
+  getMaterial(ref: CredentialMaterialRef, context: CallerContext): Promise<MaterialBundle>;
+  setMaterial(ref: CredentialMaterialRef, material: MaterialBundle): Promise<void>;
+}
+/**
+ * Thrown by a provider when asked to operate on a `ref.source` it does not
+ * handle (e.g. the local provider being asked to read `control-plane` bytes).
+ * Exported so `instanceof`-checks work across the workspace boundary.
+ */
+declare class IllegalMaterialSourceError extends Error {
+  readonly source: CredentialMaterialRef["source"];
+  readonly providerName: string;
+  constructor(source: CredentialMaterialRef["source"], providerName: string);
+}
+//#endregion
+//#region src/credentials/ManagedCredentialMaterialWriteError.d.ts
+/**
+ * Thrown by managed-mode providers when `setMaterial` is called. Managed
+ * credential bytes are owned by the control plane; the workspace must not
+ * mutate them. See `docs/design/credentials-oauth-unification.md` and
+ * `planning/sprints/credentials-vault/02-controlplane-material-provider.md`.
+ */
+declare class ManagedCredentialMaterialWriteError extends Error {
+  constructor(message?: string);
+}
+//#endregion
+//#region src/credentials/ManagedMaterialFetchError.d.ts
+/**
+ * Thrown by `ControlPlaneCredentialMaterialProvider` when the control-plane
+ * material endpoint returns a non-2xx response or a malformed body. Exposes
+ * the HTTP status and the raw error body so call sites can surface actionable
+ * detail without parsing strings.
+ */
+declare class ManagedMaterialFetchError extends Error {
+  readonly status: number;
+  readonly providerErrorBody: string;
+  constructor(status: number, providerErrorBody: string, message?: string);
+}
+//#endregion
+export { ActivationIdFactory, AgentAttachmentRole, AgentBindError, AgentCanvasPresentation, AgentConfigInspector, type AgentConnectionCredentialSource, AgentConnectionNodeCollector, type AgentConnectionNodeDescriptor, type AgentConnectionNodeRole, AgentGuardrailConfig, AgentGuardrailDefaults, AgentMcpIntegration, AgentMcpToolMap, AgentMessageBuildArgs, AgentMessageConfig, AgentMessageConfigNormalizer, AgentMessageDto, AgentMessageLine, AgentMessageRole, AgentMessageTemplate, AgentMessageTemplateContent, AgentModelInvocationOptions, AgentNodeConfig, AgentTool, AgentToolCall, AgentToolCallPlanner, AgentToolDefinition, AgentToolExecuteArgs, AgentToolFactory, AgentToolToken, AgentTurnLimitBehavior, AllWorkflowsActiveWorkflowActivationPolicy, AnyCredentialType, AnyRunnableNodeConfig, AnyTriggerNodeConfig, AssertionResult, AssertionResultProvenance, BatchId, BinaryAttachment, BinaryAttachmentCreateRequest, BinaryBody, BinaryPreviewKind, BinaryStorage, BinaryStorageReadResult, BinaryStorageStatResult, BinaryStorageWriteRequest, BinaryStorageWriteResult, BooleanWhenOverloads, BranchMoreArgs, BranchOutputGuard, BranchStepsArg, CallableToolConfig, CallableToolConfigOptions, CallableToolExecuteHandler, CallableToolFactory, CallableToolKindToken, type CallerContext, ChainCursor, ChatLanguageModel, ChatLanguageModelCallOptions, ChatModelConfig, ChatModelFactory, ChildExecutionScopeFactory, type Clock, CodemationTelemetryAttributeNames, CodemationTelemetryMetricNames, CollectionColumnBuilder, CollectionDefinition, CollectionFieldDefinition, CollectionIndexDefinition, CollectionStore, CollectionsContext, ConnectionInvocationAppendArgs, ConnectionInvocationEventPublisher, ConnectionInvocationId, ConnectionInvocationIdFactory, ConnectionInvocationKind, ConnectionInvocationRecord, ConnectionNodeIdFactory, Container, ControlPlaneInboxChannelToken, CoreTokens, CostCatalog, CostCatalogEntry, CostTrackingComponent, CostTrackingPriceQuote, CostTrackingTelemetry, CostTrackingTelemetryAttributeNames, CostTrackingTelemetryFactory, CostTrackingTelemetryMetricNames, CostTrackingUsageRecord, CredentialAdvancedSectionPresentation, CredentialAuthDefinition, CredentialBinding, CredentialBindingKey, CredentialFieldSchema, CredentialHealth, CredentialHealthStatus, CredentialHealthTester, CredentialInstanceId, CredentialInstanceRecord, CredentialJsonRecord, type CredentialMaterialProvider, type CredentialMaterialRef, CredentialMaterialSourceKind, CredentialOAuth2AuthDefinition, CredentialOAuth2ScopesFromPublicConfig, CredentialRequirement, CredentialResolverFactory, CredentialSessionFactory, CredentialSessionFactoryArgs, CredentialSessionService, CredentialSetupStatus, CredentialType, CredentialTypeDefinition, CredentialTypeId, CredentialTypeRegistry, CredentialUnboundError, CurrentStateExecutionRequest, DEFAULT_ASSERTION_PASS_THRESHOLD, DefaultAsyncSleeper, DefaultExecutionBinaryService, DefaultExecutionContextFactory, DefaultWorkflowGraphFactory, DefineBatchNodeOptions, DefineCollectionOptions, DefineCredentialOptions, DefineNodeExecuteArgs, DefineNodeOptions, DefinePollingTriggerExecuteContext, DefinePollingTriggerOptions, DefinePollingTriggerPollContext, DefinePollingTriggerPollResult, DefinePollingTriggerTestItemsContext, DefinedCollection, DefinedCollectionRegistry, DefinedHumanApprovalNode, DefinedNode, DefinedNodeConfigInput, DefinedNodeCredentialAccessors, DefinedNodeCredentialBinding, DefinedNodeCredentialBindings, DefinedNodeRegistry, DefinedNodeRunContext, DefinedPollingTrigger, DefinedPollingTriggerConfig, DependencyContainer, Disposable, type Duration, Edge, EngineDeps, EngineExecutionLimitsPolicy, type EngineExecutionLimitsPolicyConfig, EngineHost, EngineRunCounters, EventPublishingWorkflowExecutionRepository, ExecutableTriggerNode, ExecutionBinaryService, ExecutionContext, ExecutionContextFactory, ExecutionFrontierPlan, ExecutionInstanceDto, ExecutionInstanceId, ExecutionMode, ExecutionPayloadPolicyFields, ExecutionTelemetry, ExecutionTelemetryFactory, ExpRetryPolicy, ExponentialRetryPolicySpec, Expr, FixedRetryPolicySpec, GenAiTelemetryAttributeNames, type HitlResumeTokenSignerSeam, HitlResumeTokenSignerToken, type HitlTimeoutJobSchedulerSeam, HitlTimeoutJobSchedulerToken, HitlWorkspaceIdToken, HttpMethod, HumanApprovalDecisionResult, HumanApprovalOutputJson, type HumanTaskActor, type HumanTaskHandle, type HumanTaskId, type HumanTaskRecord, type HumanTaskStatus, type HumanTaskStore, HumanTaskStoreToken, type HumanTaskSubject, IllegalMaterialSourceError, InMemoryBinaryStorage, InMemoryLiveWorkflowRepository, InMemoryRunDataFactory, InMemoryRunEventBus, InProcessRetryRunner, type InboxChannel, type InboxChannelResolverSeam, InboxChannelResolverToken, type InboxDeliverArgs, type InboxDelivery, type InboxOnDecisionArgs, type InboxOnTimeoutArgs, InjectableRuntimeDecoratorComposer, InjectionToken, InputPortKey, Item, ItemBinary, ItemExpr, ItemExprArgs, ItemExprCallback, ItemExprContext, ItemExprResolvedContext, ItemExprResolver, ItemNode, Items, ItemsInputNormalizer, JsonArray, JsonNonArray, JsonObject, JsonPrimitive, JsonValue, Lifecycle, LiveWorkflowRepository, LocalInboxChannelToken, ManagedCredentialMaterialWriteError, ManagedMaterialFetchError, type MaterialBundle, McpServerDeclaration, type McpServerResolver, McpServerTransport, MultiInputNode, MutableRunData, NeedsReconsentEvent, NoOpAgentMcpIntegration, NoOpCostTrackingTelemetry, NoOpCostTrackingTelemetryFactory, NoOpExecutionTelemetry, NoOpExecutionTelemetryFactory, NoOpNodeExecutionTelemetry, NoOpPollingTriggerLogger, NoOpTelemetryArtifactReference, NoOpTelemetrySpanScope, NoRetryPolicy, NodeActivationContinuation, NodeActivationId, NodeActivationReceipt, NodeActivationRequest, NodeActivationRequestBase, NodeActivationScheduler, NodeBackedToolConfig, NodeBackedToolConfigOptions, NodeBackedToolInputMapper, NodeBackedToolInputMapperArgs, NodeBackedToolOutputMapper, NodeBackedToolOutputMapperArgs, NodeBinaryAttachmentService, NodeConfigBase, NodeConnectionName, NodeDefinition, NodeErrorHandler, NodeErrorHandlerArgs, NodeErrorHandlerSpec, NodeEventPublisher, NodeExecutionContext, NodeExecutionError, NodeExecutionRequest, NodeExecutionRequestHandler, NodeExecutionScheduler, NodeExecutionSnapshot, NodeExecutionStatePublisher, NodeExecutionStatus, NodeExecutionTelemetry, NodeExecutor, NodeId, NodeIdRef, NodeIdSlugifier, NodeInputsByPort, NodeInspectorSummaryRow, NodeIterationId, NodeIterationIdFactory, NodeKind, NodeOffloadPolicy, NodeOutputNormalizer, NodeOutputs, NodeRef, NodeResolver, NodeSchedulerDecision, NoneRetryPolicySpec, OAuth2ProviderFromPublicConfig, type OAuthFlowCallbackArgs, type OAuthFlowExecutor, type OAuthFlowStartArgs, type OAuthFlowStartResult, type OAuthMaterial, OutputPortKey, PairedItemRef, Param, ParamDeep, ParentExecutionRef, PayloadStorageKind, PendingNodeExecution, type PendingResumeEntry, PersistedExecutionInstanceKind, PersistedExecutionInstanceRecord, PersistedMutableNodeState, PersistedMutableRunState, PersistedRunControlState, PersistedRunPolicySnapshot, PersistedRunSchedulingState, PersistedRunSlotProjectionRecord, PersistedRunState, PersistedRunWorkItemKind, PersistedRunWorkItemRecord, type PersistedRuntimeTypeDecoratorOptions, type PersistedRuntimeTypeKind, type PersistedRuntimeTypeMetadata, PersistedRuntimeTypeMetadataStore, PersistedRuntimeTypeNameResolver, type PersistedSuspensionEntry, PersistedTokenId, PersistedTriggerSetupState, PersistedWorkflowSnapshot, PersistedWorkflowSnapshotNode, PersistedWorkflowTokenRegistryLike, PinnedNodeOutputsByPort, type PollingRunCycleArgs, type PollingRunCycleResult, PollingTriggerDedupWindow, PollingTriggerHandle, type PollingTriggerLogger, PollingTriggerRuntime, type PollingTriggerStartArgs, PortsEmission, PreparedNodeActivationDispatch, RegistrationOptions, type ResumeContext, RetryPolicy, RetryPolicySpec, RunCompletionNotifier, RunCurrentState, RunDataFactory, RunDataSnapshot, RunEvent, RunEventBus, RunEventPublisherDeps, RunEventSubscription, RunExecutionOptions, RunFinishedAtFactory, type RunHaltReason, RunId, RunIdFactory, RunIntentService, RunIterationDto, RunPruneCandidate, RunQueueEntry, RunResult, RunRevision, RunSlotProjectionState, RunStateResetRequest, RunStatus, RunStopCondition, RunSummary, RunTestContext, RunnableNode, RunnableNodeConfig, RunnableNodeExecuteArgs, RunnableNodeInputJson, RunnableNodeOutputJson, RunnableOutputBehaviorResolver, SlotExecutionStateDto, StackTraceCallSitePathResolver, StepSequenceOutput, StructuredOutputOptions, SuspensionRequest, SystemClock, TelemetryArtifactAttachment, TelemetryArtifactReference, TelemetryAttributePrimitive, TelemetryAttributes, TelemetryChildSpanStart, TelemetryMetricRecord, TelemetryScope, TelemetrySpanEnd, TelemetrySpanEventRecord, TelemetrySpanScope, TestCaseRunStatus, TestSuiteRunId, TestSuiteRunStatus, TestTriggerNodeConfig, TestTriggerSetupContext, TestableTriggerNode, Tool, ToolConfig, ToolExecuteArgs, TriggerCleanupHandle, TriggerInstanceId, TriggerNode, TriggerNodeConfig, TriggerNodeOutputJson, TriggerNodeSetupState, TriggerRuntimeDiagnostics, TriggerSetupContext, TriggerSetupStateFor, TriggerSetupStateRepository, TriggerTestItemsContext, TypeToken, UnavailableBinaryStorage, UpstreamRefPlaceholder, ValidStepSequence, WebhookControlSignal, WebhookInvocationMatch, WebhookRunResult, WebhookTriggerMatcher, WebhookTriggerResolution, WebhookTriggerRoutingDiagnostics, WhenBuilder, WorkItemId, WorkItemStatus, WorkflowActivationPolicy, WorkflowBuilder, WorkflowDefinition, WorkflowDefinitionError, WorkflowDetailSelectionState, type WorkflowEdgePortError, type WorkflowEdgePortValidationResult, WorkflowEdgePortValidator, WorkflowErrorContext, WorkflowErrorHandler, WorkflowErrorHandlerSpec, WorkflowExecutableNodeClassifier, WorkflowExecutableNodeClassifierFactory, WorkflowExecutionListingRepository, WorkflowExecutionPruneRepository, WorkflowExecutionRepository, WorkflowGraph, WorkflowGraphFactory, WorkflowId, WorkflowNodeConnection, WorkflowNodeInstanceFactory, WorkflowPolicyRuntimeDefaults, WorkflowPrunePolicySpec, WorkflowRepository, WorkflowRunDetailDto, WorkflowRunnerResolver, WorkflowRunnerService, WorkflowSnapshotFactory, WorkflowSnapshotResolver, WorkflowStoragePolicyDecisionArgs, WorkflowStoragePolicyMode, WorkflowStoragePolicyResolver, WorkflowStoragePolicySpec, ZodSchemaAny, branchRef, c, callableTool, chatModel, container, defineBatchNode, defineCollection, defineCredential, defineHumanApprovalNode, defineNode, definePollingTrigger, delay, deriveAssertionPassed, emitPorts, getOriginIndexFromItem, getPersistedRuntimeTypeMetadata, inject, injectAll, injectable, instanceCachingFactory, instancePerContainerCachingFactory, isHumanApprovalNode, isItemExpr, isPortsEmission, isUnbrandedPortsEmissionShape, itemExpr, node, nodeRef, predicateAwareClassFactory, registry, resolveItemExprsForExecution, resolveItemExprsInUnknown, runnableNodeInputType, runnableNodeOutputType, singleton, tool, triggerNodeOutputType, triggerNodeSetupStateType };
 //# sourceMappingURL=index.d.cts.map