@hotmeshio/long-tail 0.1.5 → 0.1.6

package/build/services/yaml-workflow/pipeline/build/wiring.js

@@ -4,6 +4,91 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.wireStepInputs = wireStepInputs;
+/**
+ * HotMesh @pipe sub-pipe for today's date as YYYY-MM-DD.
+ * Must be used as a ROW-LEVEL entry in a parent @pipe, never inside an array row.
+ */
+const DATE_SUB_PIPE = {
+    '@pipe': [
+        ['{@date.now}'],
+        ['{@date.toISOString}', 0, 10],
+        ['{@string.substring}'],
+    ],
+};
+/**
+ * Convert a scalar derivation spec into a HotMesh @pipe expression.
+ * Uses fan-out/fan-in pattern: sub-pipes as row-level siblings, NOT nested inside array rows.
+ */
+function buildDerivationPipe(sourceRef, derivation) {
+    if (!derivation)
+        return sourceRef;
+    switch (derivation.strategy) {
+        case 'concat': {
+            const parts = derivation.parts || ['{value}'];
+            const hasDate = parts.some((p) => p === '{date}');
+            if (!hasDate) {
+                // Simple concat — no sub-pipes needed
+                const args = parts.map((p) => p === '{value}' ? sourceRef : p);
+                if (args.length === 1 && args[0] === sourceRef)
+                    return sourceRef;
+                return { '@pipe': [args, ['{@string.concat}']] };
+            }
+            // Fan-out/fan-in: each part that needs computation gets its own sub-pipe row
+            const rows = [];
+            for (const p of parts) {
+                if (p === '{value}') {
+                    rows.push({ '@pipe': [[sourceRef]] });
+                }
+                else if (p === '{date}') {
+                    rows.push(DATE_SUB_PIPE);
+                }
+                else {
+                    rows.push({ '@pipe': [[p]] });
+                }
+            }
+            rows.push(['{@string.concat}']);
+            return { '@pipe': rows };
+        }
+        case 'template': {
+            const tpl = derivation.template || '{value}';
+            const segments = tpl.split(/(\{value\}|\{date\})/).filter(Boolean);
+            const hasDate = segments.includes('{date}');
+            if (!hasDate) {
+                const args = segments.map((s) => s === '{value}' ? sourceRef : s);
+                if (args.length === 1 && args[0] === sourceRef)
+                    return sourceRef;
+                return { '@pipe': [args, ['{@string.concat}']] };
+            }
+            const rows = [];
+            for (const s of segments) {
+                if (s === '{value}') {
+                    rows.push({ '@pipe': [[sourceRef]] });
+                }
+                else if (s === '{date}') {
+                    rows.push(DATE_SUB_PIPE);
+                }
+                else {
+                    rows.push({ '@pipe': [[s]] });
+                }
+            }
+            rows.push(['{@string.concat}']);
+            return { '@pipe': rows };
+        }
+        case 'prefix': {
+            const concatParts = [];
+            if (derivation.prefix)
+                concatParts.push(derivation.prefix);
+            concatParts.push(sourceRef);
+            if (derivation.suffix)
+                concatParts.push(derivation.suffix);
+            if (concatParts.length === 1)
+                return sourceRef;
+            return { '@pipe': [concatParts, ['{@string.concat}']] };
+        }
+        default:
+            return sourceRef;
+    }
+}
 /**
  * Build input mappings for a step using the compilation plan's data flow edges.
  * Falls back to mechanical backward-scan when no plan is available.
@@ -30,14 +115,16 @@ function wireStepInputs(stepIdx, step, plan, stepIndexToActivityId, triggerId, t
                 inputMappings[edge.toField] = `{${transformActId}.output.data.${edge.toField}}`;
             }
             else if (edge.fromStep === 'trigger') {
-                inputMappings[edge.toField] = `{${triggerId}.output.data.${edge.fromField}}`;
+                const rawRef = `{${triggerId}.output.data.${edge.fromField}}`;
+                inputMappings[edge.toField] = buildDerivationPipe(rawRef, edge.derivation);
             }
             else {
                 // Remap the source step from collapsed to core index
                 const remappedFrom = collapsedToCoreIndex?.get(edge.fromStep) ?? edge.fromStep;
                 const sourceActId = stepIndexToActivityId.get(remappedFrom);
                 if (sourceActId) {
-                    inputMappings[edge.toField] = `{${sourceActId}.output.data.${edge.fromField}}`;
+                    const rawRef = `{${sourceActId}.output.data.${edge.fromField}}`;
+                    inputMappings[edge.toField] = buildDerivationPipe(rawRef, edge.derivation);
                 }
             }
         }

package/build/services/yaml-workflow/pipeline/prompts.d.ts

@@ -4,7 +4,7 @@
  * Consolidates all system/user prompt strings used by compile, validate,
  * and extract stages so they can be reviewed and tuned in one place.
  */
-export declare const COMPILATION_PROMPT = "You are a workflow compiler. You analyze MCP tool execution traces and produce a COMPILATION PLAN \u2014 a complete specification for building a deterministic YAML DAG workflow.\n\nGiven:\n1. The user's ORIGINAL PROMPT \u2014 the single most important signal for understanding intent\n2. EXECUTION STEPS \u2014 tool calls with arguments, result structure samples, and server IDs\n3. PATTERN ANNOTATIONS \u2014 pre-detected iteration candidates from static analysis\n4. NAIVE INPUT CLASSIFICATION \u2014 initial argument classification\n\nYour job: produce a plan that makes the workflow truly reusable and deterministic.\n\n## Critical: Understand Intent\n\nThe original prompt describes what the user wanted. The execution trace shows HOW an LLM accomplished it, but may include exploratory detours. Your compilation captures INTENT, not a blind replay.\n\nFor example, if the prompt says \"login to site X and take screenshots of all pages\":\n- INTENT: login \u2192 discover pages \u2192 iterate and screenshot each one\n- Execution may have included probing steps \u2014 exclude those\n- Deterministic version: accept credentials \u2192 login \u2192 extract links \u2192 iterate taking screenshots\n\n## Critical: Preserve Discovery Steps\n\nMany workflows follow a \"discover then act\" pattern: one step DISCOVERS data (e.g., extract navigation links, query a database, list files) and a later step ACTS on that data (e.g., screenshot each page, process each record, transform each file).\n\n**NEVER collapse discovery + action into a single step with the discovered data as a user input.** If the execution trace shows:\n1. Step A: extract_content \u2192 produces `links: [{text, href}, ...]`\n2. Step B: capture_pages(pages=[...array built from step A's links...])\n\nThe compiled workflow MUST keep BOTH steps: A produces the array, B consumes it. Do NOT make the array a trigger input \u2014 it was runtime-discovered, not user-provided.\n\n**How to detect**: If a step's argument contains a large array of items that closely mirrors a prior step's output array (same URLs, same items, possibly reshaped), that array was DERIVED from the prior step. Keep both steps and wire them with a data_flow edge (with a transform if formats differ).\n\n## Rules\n\n### Step Dispositions\n- **core**: Directly serves the workflow intent. Produces data consumed by later steps. **Discovery steps that produce arrays consumed by later action steps are ALWAYS core.**\n- **exploratory**: Probing/debugging/discovery steps that don't produce data needed by the workflow. Exclude these:\n  - Checking if compiled workflows exist (list_workflows, list_yaml_workflows)\n  - Listing files to see what exists (list_files, read_file)\n  - Initial tool calls that failed and were retried with different parameters\n  - Any step whose result is not consumed by a subsequent core step\n  - **NEVER mark a discovery step as exploratory if its output was used to build arguments for a later step**\n\n### Signal Steps (Human-in-the-Loop)\nSteps with kind \"signal\" represent a durable pause where the workflow waits for human input (e.g., credentials, approval). These are ALWAYS core \u2014 they are essential to the workflow's data flow. The signal step receives data from a human and makes it available to subsequent steps. Do NOT mark signal steps as exploratory. The escalation tool call (escalate_and_wait) that precedes a signal step is also always core.\n\n**Signal data flow**: The signal step result contains the human response fields (e.g., password). These MUST be wired via data_flow edges to every downstream step that needs them. Add a data_flow edge from the signal step index to the consuming step with the matching field name.\n\n**Credentials from signals**: When the signal provides a credential (format: password in the schema), downstream tools that need it should receive it as a separate named input argument. The runtime exchanges ephemeral credential tokens automatically. For tools with complex stored arguments (like run_script steps arrays), wire the credential as a top-level argument name \u2014 the runtime merges it with stored defaults.\n\n### Iteration Specifications\nWhen the execution shows repeated tool calls with varying arguments (the pattern detector may have already collapsed these):\n- Identify the SOURCE: which prior step's result contains the array being iterated. This is the step that PRODUCED the list of items \u2014 look for a step whose result contains an array field with items matching the iteration's varying values. For example, if the iteration visits multiple URLs, find the step that returned those URLs (e.g., extract_content with links).\n- The source is NEVER a step that doesn't have the array in its output. Double-check: does the source step's resultKeys include the source_field?\n- Specify the source_field: the dot-path to the array (e.g., \"links\", \"results.pages\")\n- List varying_keys (change per item) vs constant_args (shared)\n- **KEY MAPPINGS are critical**: array items often use different key names than the tool expects.\n  E.g., extract_content returns `links: [{text, href}, ...]` but the screenshot tool wants `url`.\n  Map: `{ \"url\": \"href\" }` \u2014 tool arg name \u2192 array item key name.\n  Use null for keys that are COMPUTED at runtime, not sourced from the array.\n  For example, screenshot_path is often derived from the link text or URL \u2014 it's not a field in the source array directly:\n  `{ \"screenshot_path\": null }` \u2014 the value must be computed or provided by the trigger.\n\n### Tool Simplification for Iterations (CRITICAL)\nThe iteration pattern works by extracting individual values from array items and passing them as simple key=value arguments to the iterated tool. This means:\n\n**The iterated tool MUST accept simple, flat arguments** (url, path, page_id \u2014 not complex nested structures like a `steps` array).\n\nIf the execution used a complex multi-step scripting tool (e.g., `run_script` with a `steps: [{action, url}, {action, path}]` array) for each iteration, you MUST replace it with a simpler tool from the same server that accepts flat arguments. Check the server's tool inventory for a simpler alternative.\n\nFor example:\n- `run_script(steps=[navigate, wait, screenshot])` per page \u2192 replace with `capture_page(url, path, full_page, wait_ms)` (1 call, flat args)\n- `run_script(steps=[navigate, fill, click])` per item \u2192 replace with `submit_form(url, fields)` (1 call, flat args)\n\nWhen replacing: use the same server_id but the simpler tool_name. The varying_keys and key_mappings should map directly to the simple tool's argument names.\n\n**If no simpler tool alternative exists**, use a data_flow edge with a transform to feed the array into a batch/composite tool that accepts the full array (like `capture_authenticated_pages` which takes a `pages` array).\n\n### Data Flow Graph\nSpecify directed edges showing how data flows between steps:\n- from_step: \"trigger\" (user input) or step index number\n- from_field: the output field name (or trigger input key)\n- to_step: the consuming step index\n- to_field: the argument key name\n- is_session_wire: true for session handles (page_id, _handle, session_id)\n\nSession handles are critical \u2014 they maintain authenticated browser sessions, database connections, etc. They must be threaded from their producer through ALL subsequent steps that need them.\n\n### Data Flow Transforms (CRITICAL for array reshaping)\nWhen a source step produces an array of objects in one format but the consuming step expects a DIFFERENT format, add a `transform` to the data_flow edge. Compare the source step's result structure with the consuming step's actual arguments from the trace.\n\n**Choosing the correct source field**: When a step produces multiple output fields, check the result sample to determine which field actually contains an ARRAY OF OBJECTS suitable for iteration/reshaping. Prefer structured array fields over raw/unstructured fields. Check the Tool-Specific Compilation Hints section (if present) for guidance on which fields to use for specific tools.\n\nFor example: extract_content returns `links: [{text, href}]` but capture tool expects `pages: [{url, screenshot_path, wait_ms, full_page}]`.\nAdd a transform with:\n- `field_map`: maps target keys \u2192 source keys (e.g., `{\"url\": \"href\"}`). Use null for keys not in the source.\n- `defaults`: static values to inject (e.g., `{\"wait_ms\": 3000, \"full_page\": true}`)\n- `derivations`: for computed keys (null in field_map), how to derive them from source data\n  - strategy: \"slugify\" (lowercase, replace spaces/special with hyphens), \"prefix\", \"template\"\n  - source_key: which source field to derive from\n  - prefix/suffix/template: string manipulation params\n\nExample edge with transform:\n```\n{\n  \"from_step\": 1, \"from_field\": \"links\", \"to_step\": 2, \"to_field\": \"pages\",\n  \"is_session_wire\": false,\n  \"transform\": {\n    \"field_map\": { \"url\": \"href\", \"screenshot_path\": null },\n    \"defaults\": { \"wait_ms\": 3000, \"full_page\": true },\n    \"derivations\": {\n      \"screenshot_path\": {\n        \"source_key\": \"href\",\n        \"strategy\": \"slugify\",\n        \"prefix\": \"screenshots/\",\n        \"suffix\": \".png\"\n      }\n    }\n  }\n}\n```\n\nIMPORTANT: Check EVERY array-typed data_flow edge. Compare the source step's result item keys with the consuming step's argument item keys. If they differ, add a transform. Look at the actual tool_arguments in the execution trace to determine the correct field_map, defaults, and derivations.\n\n### Input Classification\n- **dynamic**: Simple values callers MUST provide: URLs, credentials, file paths, queries, search terms. These are always scalar strings, numbers, or booleans \u2014 NEVER complex objects or arrays.\n- **fixed**: Implementation details with sensible defaults: selectors, timeouts, boolean flags, AND complex structured arguments like `steps` arrays, `login` objects, or `pages` arrays. These are baked into stored tool_arguments.\n\n**Complex tool arguments (arrays of objects, nested structures) are ALWAYS fixed.** They represent the implementation recipe, not user input. For example:\n- A `steps` array describing browser actions (navigate, fill, click, screenshot) \u2192 **fixed**\n- A `login` object with selectors and credentials \u2192 flatten the credentials (username, password) as dynamic, but the selectors as fixed\n- A `pages` array of URLs to capture \u2192 **fixed** if hardcoded from the trace, or a data_flow edge if discovered at runtime\n\nFlatten nested objects containing dynamic values. E.g., `login: {url, username, password}` \u2192 separate `login_url`, `username`, `password` fields. But NEVER expose the full nested object or array as a trigger input.\n\n**Arrays that were DISCOVERED at runtime (by a prior step) are NOT inputs.** They flow between steps via data_flow edges. Only make an array a trigger input if the user explicitly provided it in their prompt. If the array was produced by a discovery step (extract_content, query, list), keep the discovery step as core and wire its output to the consuming step.\n\n### Data Flow Wiring Precision\n- **Only wire inputs that semantically match.** A directory name (e.g., `screenshot_dir = \"screenshots\"`) must NOT be wired to a file path argument (e.g., `screenshot_path` which expects `\"screenshots/home.png\"`). If a tool argument needs a specific file path but the trigger only provides a directory, leave that argument unwired \u2014 the stored tool_arguments default will provide the correct value.\n- **Trigger inputs should map to the EXACT tool argument they represent.** Don't reuse a trigger input for a different-purpose argument just because the names are vaguely related.\n- **When in doubt, don't wire.** An unwired argument falls back to the stored tool_arguments default from the original execution \u2014 this is always correct. An incorrectly wired argument overrides the correct default with a wrong value.\n\n### Session Fields and Threading Rules\nList all fields that represent session tokens/handles that must flow through the DAG (e.g., page_id, _handle, session_id).\n\n**Critical**: When a login/setup step produces a page_id or _handle, ALL subsequent browser/page steps must receive that session wire \u2014 including steps inside iterations. The data_flow graph must include session wire edges from the producing step to EVERY downstream step that operates on the same session, not just the immediately next one. For iterations: wire the session from the setup step directly to the iteration body step.\n\n**COMPLETENESS REQUIREMENT**: For EACH step that uses a session field (check the step's argumentKeys \u2014 if it includes page_id, _handle, or session_id), you MUST emit a data_flow edge wiring that field from its producer. If step 0 produces _handle and steps 1, 2, and 3 all use it, you need THREE edges: 0\u21921, 0\u21922, 0\u21923. Do NOT assume downstream steps will \"inherit\" session fields \u2014 each consumer needs an explicit edge.\n\n### Data Flow Completeness Check\nBefore finalizing the plan, verify:\n1. Every step that has a session field in its argumentKeys has a corresponding is_session_wire edge\n2. Every step that consumes data from a prior step has a data_flow edge for that field\n3. Every dynamic trigger input is wired to at least one step via a data_flow edge from \"trigger\"\n4. Transform edges include the source field AND the consuming step can access all fields it needs\n\n## Output Format\n\nReturn a JSON object (no markdown fences):\n{\n  \"intent\": \"Brief generic description of what this workflow does\",\n  \"description\": \"Suggested workflow description for discovery\",\n  \"steps\": [\n    { \"index\": 0, \"purpose\": \"Navigate to the target site\", \"disposition\": \"core\" },\n    { \"index\": 1, \"purpose\": \"Extract navigation links from the page\", \"disposition\": \"core\" },\n    { \"index\": 2, \"purpose\": \"List files to check directory structure\", \"disposition\": \"exploratory\" }\n  ],\n  \"core_step_indices\": [0, 1, 3],\n  \"inputs\": [\n    { \"key\": \"base_url\", \"type\": \"string\", \"classification\": \"dynamic\", \"description\": \"The base URL of the site\" },\n    { \"key\": \"username\", \"type\": \"string\", \"classification\": \"dynamic\", \"description\": \"Login username\" },\n    { \"key\": \"timeout\", \"type\": \"number\", \"classification\": \"fixed\", \"description\": \"Page load timeout\", \"default\": 30000 }\n  ],\n  \"iterations\": [\n    {\n      \"body_step_index\": 3,\n      \"tool_name\": \"screenshot\",\n      \"server_id\": \"playwright\",\n      \"source_step_index\": 1,\n      \"source_field\": \"links\",\n      \"varying_keys\": [\"url\", \"screenshot_path\"],\n      \"constant_args\": { \"full_page\": true },\n      \"key_mappings\": { \"url\": \"href\", \"screenshot_path\": null }\n    }\n  ],\n  \"data_flow\": [\n    { \"from_step\": \"trigger\", \"from_field\": \"base_url\", \"to_step\": 0, \"to_field\": \"url\", \"is_session_wire\": false },\n    { \"from_step\": 0, \"from_field\": \"page_id\", \"to_step\": 1, \"to_field\": \"page_id\", \"is_session_wire\": true },\n    { \"from_step\": 0, \"from_field\": \"_handle\", \"to_step\": 1, \"to_field\": \"_handle\", \"is_session_wire\": true }\n  ],\n  \"session_fields\": [\"page_id\", \"_handle\"]\n}";
+export declare const COMPILATION_PROMPT = "You are a workflow compiler. You analyze MCP tool execution traces and produce a COMPILATION PLAN \u2014 a complete specification for building a deterministic YAML DAG workflow.\n\nGiven:\n1. The user's ORIGINAL PROMPT \u2014 the single most important signal for understanding intent\n2. EXECUTION STEPS \u2014 tool calls with arguments, result structure samples, and server IDs\n3. PATTERN ANNOTATIONS \u2014 pre-detected iteration candidates from static analysis\n4. NAIVE INPUT CLASSIFICATION \u2014 initial argument classification\n\nYour job: produce a plan that makes the workflow truly reusable and deterministic.\n\n## Critical: Understand Intent\n\nThe original prompt describes what the user wanted. The execution trace shows HOW an LLM accomplished it, but may include exploratory detours. Your compilation captures INTENT, not a blind replay.\n\nFor example, if the prompt says \"login to site X and take screenshots of all pages\":\n- INTENT: login \u2192 discover pages \u2192 iterate and screenshot each one\n- Execution may have included probing steps \u2014 exclude those\n- Deterministic version: accept credentials \u2192 login \u2192 extract links \u2192 iterate taking screenshots\n\n## Critical: Preserve Discovery Steps\n\nMany workflows follow a \"discover then act\" pattern: one step DISCOVERS data (e.g., extract navigation links, query a database, list files) and a later step ACTS on that data (e.g., screenshot each page, process each record, transform each file).\n\n**NEVER collapse discovery + action into a single step with the discovered data as a user input.** If the execution trace shows:\n1. Step A: extract_content \u2192 produces `links: [{text, href}, ...]`\n2. Step B: capture_pages(pages=[...array built from step A's links...])\n\nThe compiled workflow MUST keep BOTH steps: A produces the array, B consumes it. Do NOT make the array a trigger input \u2014 it was runtime-discovered, not user-provided.\n\n**How to detect**: If a step's argument contains a large array of items that closely mirrors a prior step's output array (same URLs, same items, possibly reshaped), that array was DERIVED from the prior step. Keep both steps and wire them with a data_flow edge (with a transform if formats differ).\n\n## Rules\n\n### Step Dispositions\n- **core**: Directly serves the workflow intent. Produces data consumed by later steps. **Discovery steps that produce arrays consumed by later action steps are ALWAYS core.**\n- **exploratory**: Probing/debugging/discovery steps that don't produce data needed by the workflow. Exclude these:\n  - Checking if compiled workflows exist (list_workflows, list_yaml_workflows)\n  - Listing files to see what exists (list_files, read_file)\n  - Initial tool calls that failed and were retried with different parameters\n  - Any step whose result is not consumed by a subsequent core step\n  - **NEVER mark a discovery step as exploratory if its output was used to build arguments for a later step**\n\n### Signal Steps (Human-in-the-Loop)\nSteps with kind \"signal\" represent a durable pause where the workflow waits for human input (e.g., credentials, approval). These are ALWAYS core \u2014 they are essential to the workflow's data flow. The signal step receives data from a human and makes it available to subsequent steps. Do NOT mark signal steps as exploratory. The escalation tool call (escalate_and_wait) that precedes a signal step is also always core.\n\n**Signal data flow**: The signal step result contains the human response fields (e.g., password). These MUST be wired via data_flow edges to every downstream step that needs them. Add a data_flow edge from the signal step index to the consuming step with the matching field name.\n\n**Credentials from signals**: When the signal provides a credential (format: password in the schema), downstream tools that need it should receive it as a separate named input argument. The runtime exchanges ephemeral credential tokens automatically. For tools with complex stored arguments (like run_script steps arrays), wire the credential as a top-level argument name \u2014 the runtime merges it with stored defaults.\n\n### Iteration Specifications\nWhen the execution shows repeated tool calls with varying arguments (the pattern detector may have already collapsed these):\n- Identify the SOURCE: which prior step's result contains the array being iterated. This is the step that PRODUCED the list of items \u2014 look for a step whose result contains an array field with items matching the iteration's varying values. For example, if the iteration visits multiple URLs, find the step that returned those URLs (e.g., extract_content with links).\n- The source is NEVER a step that doesn't have the array in its output. Double-check: does the source step's resultKeys include the source_field?\n- Specify the source_field: the dot-path to the array (e.g., \"links\", \"results.pages\")\n- List varying_keys (change per item) vs constant_args (shared)\n- **KEY MAPPINGS are critical**: array items often use different key names than the tool expects.\n  E.g., extract_content returns `links: [{text, href}, ...]` but the screenshot tool wants `url`.\n  Map: `{ \"url\": \"href\" }` \u2014 tool arg name \u2192 array item key name.\n  Use null for keys that are COMPUTED at runtime, not sourced from the array.\n  For example, screenshot_path is often derived from the link text or URL \u2014 it's not a field in the source array directly:\n  `{ \"screenshot_path\": null }` \u2014 the value must be computed or provided by the trigger.\n\n### Tool Simplification for Iterations (CRITICAL)\nThe iteration pattern works by extracting individual values from array items and passing them as simple key=value arguments to the iterated tool. This means:\n\n**The iterated tool MUST accept simple, flat arguments** (url, path, page_id \u2014 not complex nested structures like a `steps` array).\n\nIf the execution used a complex multi-step scripting tool (e.g., `run_script` with a `steps: [{action, url}, {action, path}]` array) for each iteration, you MUST replace it with a simpler tool from the same server that accepts flat arguments. Check the server's tool inventory for a simpler alternative.\n\nFor example:\n- `run_script(steps=[navigate, wait, screenshot])` per page \u2192 replace with `capture_page(url, path, full_page, wait_ms)` (1 call, flat args)\n- `run_script(steps=[navigate, fill, click])` per item \u2192 replace with `submit_form(url, fields)` (1 call, flat args)\n\nWhen replacing: use the same server_id but the simpler tool_name. The varying_keys and key_mappings should map directly to the simple tool's argument names.\n\n**If no simpler tool alternative exists**, use a data_flow edge with a transform to feed the array into a batch/composite tool that accepts the full array (like `capture_authenticated_pages` which takes a `pages` array).\n\n### Data Flow Graph\nSpecify directed edges showing how data flows between steps:\n- from_step: \"trigger\" (user input) or step index number\n- from_field: the output field name (or trigger input key)\n- to_step: the consuming step index\n- to_field: the argument key name\n- is_session_wire: true for session handles (page_id, _handle, session_id)\n\nSession handles are critical \u2014 they maintain authenticated browser sessions, database connections, etc. They must be threaded from their producer through ALL subsequent steps that need them.\n\n### Chain Analysis to Downstream Steps\nWhen a step produces a meaningful result (analysis, extraction, description, computed value) and a later step consumes related data (saving, storing, forwarding, reporting), there MUST be a data_flow edge connecting them. Match by semantic intent, not just field name:\n- Step produces `description` \u2192 downstream step takes `value` \u2192 edge with from_field: \"description\", to_field: \"value\"\n- Step produces `analysis.summary` \u2192 downstream step takes `content` \u2192 edge with appropriate field mapping\n\nIf the original execution trace shows that a step's output was used (even indirectly) as input to a later step, the compiled version must preserve that data chain. A broken chain means the downstream step receives no data \u2014 the worst possible compilation error.\n\n### Data Flow Transforms (CRITICAL for array reshaping)\nWhen a source step produces an array of objects in one format but the consuming step expects a DIFFERENT format, add a `transform` to the data_flow edge. Compare the source step's result structure with the consuming step's actual arguments from the trace.\n\n**Choosing the correct source field**: When a step produces multiple output fields, check the result sample to determine which field actually contains an ARRAY OF OBJECTS suitable for iteration/reshaping. Prefer structured array fields over raw/unstructured fields. Check the Tool-Specific Compilation Hints section (if present) for guidance on which fields to use for specific tools.\n\nFor example: extract_content returns `links: [{text, href}]` but capture tool expects `pages: [{url, screenshot_path, wait_ms, full_page}]`.\nAdd a transform with:\n- `field_map`: maps target keys \u2192 source keys (e.g., `{\"url\": \"href\"}`). Use null for keys not in the source.\n- `defaults`: static values to inject (e.g., `{\"wait_ms\": 3000, \"full_page\": true}`)\n- `derivations`: for computed keys (null in field_map), how to derive them from source data\n  - strategy: \"slugify\" (lowercase, replace spaces/special with hyphens), \"prefix\", \"template\", \"concat\"\n  - source_key: which source field to derive from\n  - prefix/suffix/template: string manipulation params\n\nAvailable derivation strategies:\n- **slugify**: Lowercase, replace spaces/special chars with hyphens. Optionally add prefix/suffix.\n- **prefix**: Prepend a static string.\n- **template**: Format string with `{value}` (source field) and `{date}` (today's ISO date, YYYY-MM-DD).\n- **concat**: Join multiple parts. Each part can use `{value}` and `{date}` placeholders.\n  Example: `{ \"strategy\": \"concat\", \"parts\": [\"{value}\", \"-\", \"{date}\"] }` produces `my-slug-2026-04-17`.\n- **passthrough**: No transformation.\n\nUse these when the workflow needs runtime-computed values (date-stamped filenames, slugified URLs, templated paths).\n\nExample edge with transform:\n```\n{\n  \"from_step\": 1, \"from_field\": \"links\", \"to_step\": 2, \"to_field\": \"pages\",\n  \"is_session_wire\": false,\n  \"transform\": {\n    \"field_map\": { \"url\": \"href\", \"screenshot_path\": null },\n    \"defaults\": { \"wait_ms\": 3000, \"full_page\": true },\n    \"derivations\": {\n      \"screenshot_path\": {\n        \"source_key\": \"href\",\n        \"strategy\": \"slugify\",\n        \"prefix\": \"screenshots/\",\n        \"suffix\": \".png\"\n      }\n    }\n  }\n}\n```\n\nIMPORTANT: Check EVERY array-typed data_flow edge. Compare the source step's result item keys with the consuming step's argument item keys. If they differ, add a transform. Look at the actual tool_arguments in the execution trace to determine the correct field_map, defaults, and derivations.\n\n### Scalar Derivations on Data Flow Edges\nWhen a scalar value needs runtime transformation before reaching its consumer, add a `derivation` to the data_flow edge (NOT a `transform` \u2014 transforms are for array reshaping). Derivations generate runtime expressions for string manipulation.\n\nCommon use case: the user's prompt mentions a pattern like \"save with key slug-{date}\" or \"name it {something}-{today's date}\". The trigger provides the base value, and the derivation appends or formats it at runtime.\n\nAdd a `derivation` field to the data_flow edge:\n```\n{\n  \"from_step\": \"trigger\", \"from_field\": \"key\", \"to_step\": 3, \"to_field\": \"key\",\n  \"is_session_wire\": false,\n  \"derivation\": { \"strategy\": \"concat\", \"parts\": [\"{value}\", \"-\", \"{date}\"] }\n}\n```\n\nThis produces a runtime-computed key like `my-slug-2026-04-17`. The `{value}` placeholder is the source field value; `{date}` is today's ISO date (YYYY-MM-DD).\n\nUse derivations when:\n- The user wants date-stamped keys, filenames, or identifiers\n- A value needs a prefix/suffix added at runtime\n- Two values need to be concatenated\n\n### Input Classification\n- **dynamic**: Simple values callers MUST provide: URLs, credentials, file paths, queries, search terms. These are always scalar strings, numbers, or booleans \u2014 NEVER complex objects or arrays.\n- **fixed**: Implementation details with sensible defaults: selectors, timeouts, boolean flags, AND complex structured arguments like `steps` arrays, `login` objects, or `pages` arrays. These are baked into stored tool_arguments.\n\n**Complex tool arguments (arrays of objects, nested structures) are ALWAYS fixed.** They represent the implementation recipe, not user input. For example:\n- A `steps` array describing browser actions (navigate, fill, click, screenshot) \u2192 **fixed**\n- A `login` object with selectors and credentials \u2192 flatten the credentials (username, password) as dynamic, but the selectors as fixed\n- A `pages` array of URLs to capture \u2192 **fixed** if hardcoded from the trace, or a data_flow edge if discovered at runtime\n\nFlatten nested objects containing dynamic values. E.g., `login: {url, username, password}` \u2192 separate `login_url`, `username`, `password` fields. But NEVER expose the full nested object or array as a trigger input.\n\n**Arrays that were DISCOVERED at runtime (by a prior step) are NOT inputs.** They flow between steps via data_flow edges. Only make an array a trigger input if the user explicitly provided it in their prompt. If the array was produced by a discovery step (extract_content, query, list), keep the discovery step as core and wire its output to the consuming step.\n\n### Prompt-Mentioned Values Are Dynamic\nIf a scalar value (URL, domain name, file path, key name, slug, query string) appears verbatim or closely paraphrased in the user's original prompt, classify it as **dynamic**. The user explicitly chose that value for this execution and will want to change it next time. Only classify a prompt-mentioned value as fixed if it is unambiguously an implementation constant (a CSS selector, a timeout, a boolean flag).\n\nThis is the most common compilation error: treating the user's specific request values as universal defaults. When in doubt, make it dynamic.\n\n### Data Flow Wiring Precision\n- **Only wire inputs that semantically match.** A directory name (e.g., `screenshot_dir = \"screenshots\"`) must NOT be wired to a file path argument (e.g., `screenshot_path` which expects `\"screenshots/home.png\"`). If a tool argument needs a specific file path but the trigger only provides a directory, leave that argument unwired \u2014 the stored tool_arguments default will provide the correct value.\n- **Trigger inputs should map to the EXACT tool argument they represent.** Don't reuse a trigger input for a different-purpose argument just because the names are vaguely related.\n- **When in doubt, don't wire.** An unwired argument falls back to the stored tool_arguments default from the original execution \u2014 this is always correct. An incorrectly wired argument overrides the correct default with a wrong value.\n\n### Session Fields and Threading Rules\nList all fields that represent session tokens/handles that must flow through the DAG (e.g., page_id, _handle, session_id).\n\n**Critical**: When a login/setup step produces a page_id or _handle, ALL subsequent browser/page steps must receive that session wire \u2014 including steps inside iterations. The data_flow graph must include session wire edges from the producing step to EVERY downstream step that operates on the same session, not just the immediately next one. For iterations: wire the session from the setup step directly to the iteration body step.\n\n**COMPLETENESS REQUIREMENT**: For EACH step that uses a session field (check the step's argumentKeys \u2014 if it includes page_id, _handle, or session_id), you MUST emit a data_flow edge wiring that field from its producer. If step 0 produces _handle and steps 1, 2, and 3 all use it, you need THREE edges: 0\u21921, 0\u21922, 0\u21923. Do NOT assume downstream steps will \"inherit\" session fields \u2014 each consumer needs an explicit edge.\n\n### Data Flow Completeness Check\nBefore finalizing the plan, verify:\n1. Every step that has a session field in its argumentKeys has a corresponding is_session_wire edge\n2. Every step that consumes data from a prior step has a data_flow edge for that field\n3. Every dynamic trigger input is wired to at least one step via a data_flow edge from \"trigger\"\n4. Transform edges include the source field AND the consuming step can access all fields it needs\n\n## Output Format\n\nReturn a JSON object (no markdown fences):\n{\n  \"intent\": \"Brief generic description of what this workflow does\",\n  \"description\": \"Suggested workflow description for discovery\",\n  \"steps\": [\n    { \"index\": 0, \"purpose\": \"Navigate to the target site\", \"disposition\": \"core\" },\n    { \"index\": 1, \"purpose\": \"Extract navigation links from the page\", \"disposition\": \"core\" },\n    { \"index\": 2, \"purpose\": \"List files to check directory structure\", \"disposition\": \"exploratory\" }\n  ],\n  \"core_step_indices\": [0, 1, 3],\n  \"inputs\": [\n    { \"key\": \"base_url\", \"type\": \"string\", \"classification\": \"dynamic\", \"description\": \"The base URL of the site\" },\n    { \"key\": \"username\", \"type\": \"string\", \"classification\": \"dynamic\", \"description\": \"Login username\" },\n    { \"key\": \"timeout\", \"type\": \"number\", \"classification\": \"fixed\", \"description\": \"Page load timeout\", \"default\": 30000 }\n  ],\n  \"iterations\": [\n    {\n      \"body_step_index\": 3,\n      \"tool_name\": \"screenshot\",\n      \"server_id\": \"playwright\",\n      \"source_step_index\": 1,\n      \"source_field\": \"links\",\n      \"varying_keys\": [\"url\", \"screenshot_path\"],\n      \"constant_args\": { \"full_page\": true },\n      \"key_mappings\": { \"url\": \"href\", \"screenshot_path\": null }\n    }\n  ],\n  \"data_flow\": [\n    { \"from_step\": \"trigger\", \"from_field\": \"base_url\", \"to_step\": 0, \"to_field\": \"url\", \"is_session_wire\": false },\n    { \"from_step\": 0, \"from_field\": \"page_id\", \"to_step\": 1, \"to_field\": \"page_id\", \"is_session_wire\": true },\n    { \"from_step\": 0, \"from_field\": \"_handle\", \"to_step\": 1, \"to_field\": \"_handle\", \"is_session_wire\": true }\n  ],\n  \"session_fields\": [\"page_id\", \"_handle\"]\n}";
 /**
  * Build the retry hint injected into the compile stage when
  * user feedback or a prior deployment error triggers recompilation.

package/build/services/yaml-workflow/pipeline/prompts.js

@@ -96,6 +96,13 @@ Specify directed edges showing how data flows between steps:
 
 Session handles are critical — they maintain authenticated browser sessions, database connections, etc. They must be threaded from their producer through ALL subsequent steps that need them.
 
+### Chain Analysis to Downstream Steps
+When a step produces a meaningful result (analysis, extraction, description, computed value) and a later step consumes related data (saving, storing, forwarding, reporting), there MUST be a data_flow edge connecting them. Match by semantic intent, not just field name:
+- Step produces \`description\` → downstream step takes \`value\` → edge with from_field: "description", to_field: "value"
+- Step produces \`analysis.summary\` → downstream step takes \`content\` → edge with appropriate field mapping
+
+If the original execution trace shows that a step's output was used (even indirectly) as input to a later step, the compiled version must preserve that data chain. A broken chain means the downstream step receives no data — the worst possible compilation error.
+
 ### Data Flow Transforms (CRITICAL for array reshaping)
 When a source step produces an array of objects in one format but the consuming step expects a DIFFERENT format, add a \`transform\` to the data_flow edge. Compare the source step's result structure with the consuming step's actual arguments from the trace.
 
@@ -106,10 +113,20 @@ Add a transform with:
 - \`field_map\`: maps target keys → source keys (e.g., \`{"url": "href"}\`). Use null for keys not in the source.
 - \`defaults\`: static values to inject (e.g., \`{"wait_ms": 3000, "full_page": true}\`)
 - \`derivations\`: for computed keys (null in field_map), how to derive them from source data
-  - strategy: "slugify" (lowercase, replace spaces/special with hyphens), "prefix", "template"
+  - strategy: "slugify" (lowercase, replace spaces/special with hyphens), "prefix", "template", "concat"
   - source_key: which source field to derive from
   - prefix/suffix/template: string manipulation params
 
+Available derivation strategies:
+- **slugify**: Lowercase, replace spaces/special chars with hyphens. Optionally add prefix/suffix.
+- **prefix**: Prepend a static string.
+- **template**: Format string with \`{value}\` (source field) and \`{date}\` (today's ISO date, YYYY-MM-DD).
+- **concat**: Join multiple parts. Each part can use \`{value}\` and \`{date}\` placeholders.
+  Example: \`{ "strategy": "concat", "parts": ["{value}", "-", "{date}"] }\` produces \`my-slug-2026-04-17\`.
+- **passthrough**: No transformation.
+
+Use these when the workflow needs runtime-computed values (date-stamped filenames, slugified URLs, templated paths).
+
 Example edge with transform:
 \`\`\`
 {
@@ -132,6 +149,27 @@ Example edge with transform:
 
 IMPORTANT: Check EVERY array-typed data_flow edge. Compare the source step's result item keys with the consuming step's argument item keys. If they differ, add a transform. Look at the actual tool_arguments in the execution trace to determine the correct field_map, defaults, and derivations.
 
+### Scalar Derivations on Data Flow Edges
+When a scalar value needs runtime transformation before reaching its consumer, add a \`derivation\` to the data_flow edge (NOT a \`transform\` — transforms are for array reshaping). Derivations generate runtime expressions for string manipulation.
+
+Common use case: the user's prompt mentions a pattern like "save with key slug-{date}" or "name it {something}-{today's date}". The trigger provides the base value, and the derivation appends or formats it at runtime.
+
+Add a \`derivation\` field to the data_flow edge:
+\`\`\`
+{
+  "from_step": "trigger", "from_field": "key", "to_step": 3, "to_field": "key",
+  "is_session_wire": false,
+  "derivation": { "strategy": "concat", "parts": ["{value}", "-", "{date}"] }
+}
+\`\`\`
+
+This produces a runtime-computed key like \`my-slug-2026-04-17\`. The \`{value}\` placeholder is the source field value; \`{date}\` is today's ISO date (YYYY-MM-DD).
+
+Use derivations when:
+- The user wants date-stamped keys, filenames, or identifiers
+- A value needs a prefix/suffix added at runtime
+- Two values need to be concatenated
+
 ### Input Classification
 - **dynamic**: Simple values callers MUST provide: URLs, credentials, file paths, queries, search terms. These are always scalar strings, numbers, or booleans — NEVER complex objects or arrays.
 - **fixed**: Implementation details with sensible defaults: selectors, timeouts, boolean flags, AND complex structured arguments like \`steps\` arrays, \`login\` objects, or \`pages\` arrays. These are baked into stored tool_arguments.
@@ -145,6 +183,11 @@ Flatten nested objects containing dynamic values. E.g., \`login: {url, username,
 
 **Arrays that were DISCOVERED at runtime (by a prior step) are NOT inputs.** They flow between steps via data_flow edges. Only make an array a trigger input if the user explicitly provided it in their prompt. If the array was produced by a discovery step (extract_content, query, list), keep the discovery step as core and wire its output to the consuming step.
 
+### Prompt-Mentioned Values Are Dynamic
+If a scalar value (URL, domain name, file path, key name, slug, query string) appears verbatim or closely paraphrased in the user's original prompt, classify it as **dynamic**. The user explicitly chose that value for this execution and will want to change it next time. Only classify a prompt-mentioned value as fixed if it is unambiguously an implementation constant (a CSS selector, a timeout, a boolean flag).
+
+This is the most common compilation error: treating the user's specific request values as universal defaults. When in doubt, make it dynamic.
+
 ### Data Flow Wiring Precision
 - **Only wire inputs that semantically match.** A directory name (e.g., \`screenshot_dir = "screenshots"\`) must NOT be wired to a file path argument (e.g., \`screenshot_path\` which expects \`"screenshots/home.png"\`). If a tool argument needs a specific file path but the trigger only provides a directory, leave that argument unwired — the stored tool_arguments default will provide the correct value.
 - **Trigger inputs should map to the EXACT tool argument they represent.** Don't reuse a trigger input for a different-purpose argument just because the names are vaguely related.

package/build/services/yaml-workflow/sql.d.ts

@@ -15,5 +15,8 @@ export declare const DISCOVER_WORKFLOWS = "\n  SELECT *,\n    ts_rank_cd(search_
 export declare const GET_VERSION_SNAPSHOT = "\n  SELECT * FROM lt_yaml_workflow_versions\n  WHERE workflow_id = $1 AND version = $2";
 export declare const UPDATE_STATUS_BASE = "UPDATE lt_yaml_workflows SET status = $2";
 export declare const UPDATE_STATUS_SUFFIX = " WHERE id = $1 RETURNING *";
+export declare const UPDATE_CRON_SCHEDULE = "\n  UPDATE lt_yaml_workflows\n  SET cron_schedule = $2, cron_envelope = $3, execute_as = $4\n  WHERE id = $1\n  RETURNING *";
+export declare const CLEAR_CRON_SCHEDULE = "\n  UPDATE lt_yaml_workflows\n  SET cron_schedule = NULL, cron_envelope = NULL, execute_as = NULL\n  WHERE id = $1\n  RETURNING *";
+export declare const GET_CRON_SCHEDULED_WORKFLOWS = "\n  SELECT * FROM lt_yaml_workflows\n  WHERE cron_schedule IS NOT NULL AND status = 'active'\n  ORDER BY name";
 export declare const FIND_BY_TAGS_ANY = "\n  SELECT * FROM lt_yaml_workflows\n  WHERE status = 'active' AND tags && $1::text[]\n  ORDER BY name";
 export declare const FIND_BY_TAGS_ALL = "\n  SELECT * FROM lt_yaml_workflows\n  WHERE status = 'active' AND tags @> $1::text[]\n  ORDER BY name";

package/build/services/yaml-workflow/sql.js

@@ -1,7 +1,7 @@
 "use strict";
 // ─── YAML workflow CRUD ─────────────────────────────────────────────────────
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FIND_BY_TAGS_ALL = exports.FIND_BY_TAGS_ANY = exports.UPDATE_STATUS_SUFFIX = exports.UPDATE_STATUS_BASE = exports.GET_VERSION_SNAPSHOT = exports.DISCOVER_WORKFLOWS = exports.LIST_VERSIONS = exports.COUNT_VERSIONS = exports.CREATE_VERSION_SNAPSHOT = exports.MARK_APP_ID_CONTENT_DEPLOYED = exports.MARK_CONTENT_DEPLOYED = exports.GET_DISTINCT_APP_IDS = exports.LIST_BY_APP_ID = exports.GET_ACTIVE_YAML_WORKFLOWS = exports.DELETE_YAML_WORKFLOW = exports.UPDATE_YAML_WORKFLOW_VERSION = exports.GET_YAML_WORKFLOW_BY_NAME = exports.GET_YAML_WORKFLOW = exports.CREATE_YAML_WORKFLOW = void 0;
+exports.FIND_BY_TAGS_ALL = exports.FIND_BY_TAGS_ANY = exports.GET_CRON_SCHEDULED_WORKFLOWS = exports.CLEAR_CRON_SCHEDULE = exports.UPDATE_CRON_SCHEDULE = exports.UPDATE_STATUS_SUFFIX = exports.UPDATE_STATUS_BASE = exports.GET_VERSION_SNAPSHOT = exports.DISCOVER_WORKFLOWS = exports.LIST_VERSIONS = exports.COUNT_VERSIONS = exports.CREATE_VERSION_SNAPSHOT = exports.MARK_APP_ID_CONTENT_DEPLOYED = exports.MARK_CONTENT_DEPLOYED = exports.GET_DISTINCT_APP_IDS = exports.LIST_BY_APP_ID = exports.GET_ACTIVE_YAML_WORKFLOWS = exports.DELETE_YAML_WORKFLOW = exports.UPDATE_YAML_WORKFLOW_VERSION = exports.GET_YAML_WORKFLOW_BY_NAME = exports.GET_YAML_WORKFLOW = exports.CREATE_YAML_WORKFLOW = void 0;
 exports.CREATE_YAML_WORKFLOW = `
   INSERT INTO lt_yaml_workflows
     (name, description, app_id, app_version, source_workflow_id,
@@ -72,6 +72,21 @@ exports.GET_VERSION_SNAPSHOT = `
 // ─── Status updates ─────────────────────────────────────────────────────────
 exports.UPDATE_STATUS_BASE = `UPDATE lt_yaml_workflows SET status = $2`;
 exports.UPDATE_STATUS_SUFFIX = ` WHERE id = $1 RETURNING *`;
+// ─── Cron scheduling ────────────────────────────────────────────────────────
+exports.UPDATE_CRON_SCHEDULE = `
+  UPDATE lt_yaml_workflows
+  SET cron_schedule = $2, cron_envelope = $3, execute_as = $4
+  WHERE id = $1
+  RETURNING *`;
+exports.CLEAR_CRON_SCHEDULE = `
+  UPDATE lt_yaml_workflows
+  SET cron_schedule = NULL, cron_envelope = NULL, execute_as = NULL
+  WHERE id = $1
+  RETURNING *`;
+exports.GET_CRON_SCHEDULED_WORKFLOWS = `
+  SELECT * FROM lt_yaml_workflows
+  WHERE cron_schedule IS NOT NULL AND status = 'active'
+  ORDER BY name`;
 // ─── Tag-based lookup ────────────────────────────────────────────────────────
 exports.FIND_BY_TAGS_ANY = `
   SELECT * FROM lt_yaml_workflows

package/build/services/yaml-workflow/types.d.ts

@@ -108,12 +108,24 @@ export interface DataFlowEdge {
         /** For computed fields (null in fieldMap): derivation hint. */
         derivations?: Record<string, {
             sourceKey: string;
-            strategy: 'slugify' | 'prefix' | 'template' | 'passthrough';
+            strategy: 'slugify' | 'prefix' | 'template' | 'passthrough' | 'concat';
             prefix?: string;
             suffix?: string;
             template?: string;
+            parts?: string[];
         }>;
     };
+    /**
+     * Scalar derivation applied to the wired value before it reaches the consumer.
+     * Generates a HotMesh @pipe expression in the YAML input maps.
+     */
+    derivation?: {
+        strategy: 'concat' | 'template' | 'prefix' | 'slugify' | 'passthrough';
+        parts?: string[];
+        template?: string;
+        prefix?: string;
+        suffix?: string;
+    };
 }
 /** Per-step semantic annotation from the LLM. */
 export interface StepSpec {

package/build/services/yaml-workflow/workers/callbacks.js

@@ -130,8 +130,16 @@ function applyDerivation(value, spec) {
             result = (spec.prefix || '') + result + (spec.suffix || '');
             break;
         case 'template':
-            result = (spec.template || '{value}').replace(/\{value\}/g, result);
+            result = (spec.template || '{value}')
+                .replace(/\{value\}/g, result)
+                .replace(/\{date\}/g, new Date().toISOString().slice(0, 10));
             break;
+        case 'concat': {
+            const parts = spec.parts || ['{value}'];
+            result = parts.map((p) => p.replace(/\{value\}/g, result)
+                .replace(/\{date\}/g, new Date().toISOString().slice(0, 10))).join('');
+            break;
+        }
         case 'passthrough':
             break;
     }

package/build/services/yaml-workflow/workers/register.js

@@ -54,6 +54,11 @@ const registeredTopics = new Set();
  * - 'llm' -> callLLM() with prompt template interpolation
  */
 async function registerWorkersForWorkflow(workflow) {
+    const defaultRetry = {
+        maximumAttempts: 3,
+        backoffCoefficient: 2,
+        maximumInterval: 30,
+    };
     const workerConfigs = [];
     // Clear previously registered workers for this workflow so redeployments
     // pick up updated manifests (e.g., new hook_topic bindings).
@@ -94,6 +99,7 @@ async function registerWorkersForWorkflow(workflow) {
                 topic: activity.topic,
                 workflowName: activity.workflow_name,
                 connection: (0, db_1.getConnection)(),
+                retry: defaultRetry,
                 callback: wrap((0, callbacks_1.buildTransformCallback)(activity)),
             });
         }
@@ -103,6 +109,7 @@ async function registerWorkersForWorkflow(workflow) {
                 topic: activity.topic,
                 workflowName: activity.workflow_name,
                 connection: (0, db_1.getConnection)(),
+                retry: defaultRetry,
                 callback: wrap((0, callbacks_1.buildLlmCallback)(activity)),
             });
         }
@@ -116,6 +123,7 @@ async function registerWorkersForWorkflow(workflow) {
                 topic: activity.topic,
                 workflowName: activity.workflow_name,
                 connection: (0, db_1.getConnection)(),
+                retry: defaultRetry,
                 callback: wrap(async (data) => {
                     const args = (data.data || {});
                     let mergedArgs = toolArgs ? { ...toolArgs, ...args } : args;
@@ -136,6 +144,11 @@ async function registerWorkersForWorkflow(workflow) {
                 continue;
             const storedArgs = activity.tool_arguments;
             const yamlHookTopic = hookTopicByEscalationTool.get(activity.activity_id);
+            // Identify keys that are wired via input_mappings. When a wired key
+            // resolves to nothing (upstream step failed/returned null), we must
+            // NOT fall back to stored tool_arguments — that would leak hardcoded
+            // values from the original execution trace.
+            const wiredKeys = new Set(Object.keys(activity.input_mappings || {}).filter(k => k !== '_scope' && k !== 'workflowName'));
             if (toolName === 'escalate_and_wait') {
                 logger_1.loggerRegistry.info(`[yaml-workflow] escalate_and_wait worker: activityId=${activity.activity_id}, hookTopic=${yamlHookTopic || 'NONE'}, mapKeys=[${[...hookTopicByEscalationTool.keys()].join(',')}]`);
             }
@@ -143,13 +156,20 @@ async function registerWorkersForWorkflow(workflow) {
                 topic: activity.topic,
                 workflowName: activity.workflow_name,
                 connection: (0, db_1.getConnection)(),
+                retry: defaultRetry,
                 callback: wrap(async (data) => {
                     const args = (data.data || {});
+                    // Start from stored defaults, then strip any wired keys that
+                    // didn't arrive (upstream failure) so stale defaults don't leak.
                     const mergedArgs = storedArgs ? { ...storedArgs } : {};
+                    for (const wk of wiredKeys) {
+                        if (!(wk in args))
+                            delete mergedArgs[wk];
+                    }
                     for (const [key, value] of Object.entries(args)) {
                         if (key === '_scope' || key === 'workflowName')
                             continue;
-                        if (value !== undefined && value !== null && value !== '') {
+                        if (value !== undefined) {
                             mergedArgs[key] = value;
                         }
                     }
@@ -172,6 +192,9 @@ async function registerWorkersForWorkflow(workflow) {
                     if (result && typeof result === 'object' && 'error' in result) {
                         logger_1.loggerRegistry.error(`[yaml-workflow:worker] ${toolName} error: ${JSON.stringify(result).slice(0, 200)}`);
                     }
+                    if (result == null) {
+                        logger_1.loggerRegistry.warn(`[yaml-workflow:worker] ${toolName} returned null/undefined`);
+                    }
                     return { metadata: { ...data.metadata }, data: result };
                 }),
             });
@@ -186,6 +209,11 @@ async function registerWorkersForWorkflow(workflow) {
         guid: `compiled::${workflow.graph_topic}-${hotmesh_1.HotMesh.guid()}`,
         engine: {
             connection: (0, db_1.getConnection)(),
+            retry: {
+                maximumAttempts: 3,
+                backoffCoefficient: 2,
+                maximumInterval: '30s',
+            },
         },
         workers: workerConfigs,
     });

package/build/system/index.js

@@ -77,6 +77,12 @@ function getSystemWorkers() {
             workers.push({ taskQueue: 'long-tail-system', workflow: mcpDeterministic });
         }
         catch { /* not available */ }
+        // ── Workflow builder (direct YAML construction) ──
+        try {
+            const { mcpWorkflowBuilder } = require('./workflows/mcp-workflow-builder');
+            workers.push({ taskQueue: 'long-tail-system', workflow: mcpWorkflowBuilder });
+        }
+        catch { /* not available */ }
     }
     return workers;
 }

package/build/system/mcp-servers/admin/schemas.d.ts

@@ -27,10 +27,10 @@ export declare const findTasksSchema: z.ZodObject<{
 }, {
     status?: string | undefined;
     workflow_type?: string | undefined;
-    limit?: number | undefined;
     workflow_id?: string | undefined;
-    origin_id?: string | undefined;
+    limit?: number | undefined;
     offset?: number | undefined;
+    origin_id?: string | undefined;
 }>;
 export declare const getProcessDetailSchema: z.ZodObject<{
     origin_id: z.ZodString;
@@ -57,9 +57,9 @@ export declare const findEscalationsSchema: z.ZodObject<{
     role?: string | undefined;
     status?: "pending" | "resolved" | undefined;
     type?: string | undefined;
-    priority?: number | undefined;
     limit?: number | undefined;
     offset?: number | undefined;
+    priority?: number | undefined;
 }>;
 export declare const getEscalationStatsSchema: z.ZodObject<{
     period: z.ZodOptional<z.ZodString>;
@@ -180,12 +180,12 @@ export declare const listMcpServersSchema: z.ZodObject<{
     limit: number;
     offset: number;
     status?: string | undefined;
-    search?: string | undefined;
     tags?: string | undefined;
+    search?: string | undefined;
 }, {
     status?: string | undefined;
-    search?: string | undefined;
     tags?: string | undefined;
+    search?: string | undefined;
     limit?: number | undefined;
     offset?: number | undefined;
 }>;
@@ -199,14 +199,14 @@ export declare const updateMcpServerSchema: z.ZodObject<{
     id: string;
     name?: string | undefined;
     description?: string | undefined;
-    auto_connect?: boolean | undefined;
     tags?: string[] | undefined;
+    auto_connect?: boolean | undefined;
 }, {
     id: string;
     name?: string | undefined;
     description?: string | undefined;
-    auto_connect?: boolean | undefined;
     tags?: string[] | undefined;
+    auto_connect?: boolean | undefined;
 }>;
 export declare const connectMcpServerSchema: z.ZodObject<{
     id: z.ZodString;
@@ -233,15 +233,15 @@ export declare const listYamlWorkflowsSchema: z.ZodObject<{
     limit: number;
     offset: number;
     status?: string | undefined;
-    search?: string | undefined;
     app_id?: string | undefined;
     source_workflow_id?: string | undefined;
+    search?: string | undefined;
 }, {
     status?: string | undefined;
-    search?: string | undefined;
-    limit?: number | undefined;
     app_id?: string | undefined;
     source_workflow_id?: string | undefined;
+    search?: string | undefined;
+    limit?: number | undefined;
     offset?: number | undefined;
 }>;
 export declare const getYamlWorkflowSchema: z.ZodObject<{
@@ -266,8 +266,8 @@ export declare const createYamlWorkflowSchema: z.ZodObject<{
     workflow_id: string;
     workflow_name: string;
     description?: string | undefined;
-    tags?: string[] | undefined;
     app_id?: string | undefined;
+    tags?: string[] | undefined;
     compilation_feedback?: string | undefined;
 }, {
     name: string;
@@ -275,8 +275,8 @@ export declare const createYamlWorkflowSchema: z.ZodObject<{
     workflow_id: string;
     workflow_name: string;
     description?: string | undefined;
-    tags?: string[] | undefined;
     app_id?: string | undefined;
+    tags?: string[] | undefined;
     compilation_feedback?: string | undefined;
 }>;
 export declare const deployYamlWorkflowSchema: z.ZodObject<{

package/build/system/mcp-servers/db-query/schemas.d.ts

@@ -14,8 +14,8 @@ export declare const findTasksSchema: z.ZodObject<{
 }, {
     status?: "pending" | "in_progress" | "completed" | "needs_intervention" | "failed" | undefined;
     workflow_type?: string | undefined;
-    limit?: number | undefined;
     workflow_id?: string | undefined;
+    limit?: number | undefined;
     origin_id?: string | undefined;
 }>;
 export declare const findEscalationsSchema: z.ZodObject<{
@@ -34,8 +34,8 @@ export declare const findEscalationsSchema: z.ZodObject<{
     role?: string | undefined;
     status?: "pending" | "resolved" | undefined;
     type?: string | undefined;
-    priority?: number | undefined;
     limit?: number | undefined;
+    priority?: number | undefined;
 }>;
 export declare const getProcessSummarySchema: z.ZodObject<{
     workflow_type: z.ZodOptional<z.ZodString>;