@hotmeshio/long-tail 0.1.5 → 0.1.7

package/build/services/workflow-sets/db.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkflowSet = createWorkflowSet;
+exports.getWorkflowSet = getWorkflowSet;
+exports.updateWorkflowSetPlan = updateWorkflowSetPlan;
+exports.updateWorkflowSetStatus = updateWorkflowSetStatus;
+exports.updateWorkflowSetSourceWorkflow = updateWorkflowSetSourceWorkflow;
+exports.deleteWorkflowSet = deleteWorkflowSet;
+exports.listWorkflowSets = listWorkflowSets;
+const db_1 = require("../../lib/db");
+const sql_1 = require("./sql");
+const DEFAULT_LIMIT = 20;
+async function createWorkflowSet(input) {
+    const pool = (0, db_1.getPool)();
+    const { rows } = await pool.query(sql_1.CREATE_WORKFLOW_SET, [
+        input.name,
+        input.description || null,
+        input.specification,
+        JSON.stringify(input.plan || []),
+        input.namespaces || [],
+        input.source_workflow_id || null,
+    ]);
+    return rows[0];
+}
+async function getWorkflowSet(id) {
+    const pool = (0, db_1.getPool)();
+    const { rows } = await pool.query(sql_1.GET_WORKFLOW_SET, [id]);
+    return rows[0] || null;
+}
+async function updateWorkflowSetPlan(id, plan, namespaces) {
+    const pool = (0, db_1.getPool)();
+    const { rows } = await pool.query(sql_1.UPDATE_WORKFLOW_SET_PLAN, [
+        id,
+        JSON.stringify(plan),
+        namespaces,
+    ]);
+    return rows[0] || null;
+}
+async function updateWorkflowSetStatus(id, status) {
+    const pool = (0, db_1.getPool)();
+    const { rows } = await pool.query(sql_1.UPDATE_WORKFLOW_SET_STATUS, [id, status]);
+    return rows[0] || null;
+}
+async function updateWorkflowSetSourceWorkflow(id, sourceWorkflowId) {
+    const pool = (0, db_1.getPool)();
+    await pool.query('UPDATE lt_workflow_sets SET source_workflow_id = $2 WHERE id = $1', [id, sourceWorkflowId]);
+}
+async function deleteWorkflowSet(id) {
+    const pool = (0, db_1.getPool)();
+    const { rowCount } = await pool.query(sql_1.DELETE_WORKFLOW_SET, [id]);
+    return (rowCount ?? 0) > 0;
+}
+async function listWorkflowSets(filters) {
+    const pool = (0, db_1.getPool)();
+    const conditions = [];
+    const values = [];
+    let idx = 1;
+    if (filters.status) {
+        conditions.push(`status = $${idx++}`);
+        values.push(filters.status);
+    }
+    if (filters.search) {
+        conditions.push(`(name ILIKE $${idx} OR description ILIKE $${idx})`);
+        values.push(`%${filters.search}%`);
+        idx++;
+    }
+    const where = conditions.length ? `WHERE ${conditions.join(' AND ')}` : '';
+    const limit = filters.limit || DEFAULT_LIMIT;
+    const offset = filters.offset || 0;
+    const [countResult, dataResult] = await Promise.all([
+        pool.query(`SELECT COUNT(*) FROM lt_workflow_sets ${where}`, values),
+        pool.query(`${sql_1.LIST_WORKFLOW_SETS_BASE} ${where} ORDER BY created_at DESC LIMIT $${idx++} OFFSET $${idx++}`, [...values, limit, offset]),
+    ]);
+    return {
+        sets: dataResult.rows,
+        total: parseInt(countResult.rows[0].count, 10),
+    };
+}

package/build/services/workflow-sets/index.d.ts

@@ -0,0 +1 @@
+export { createWorkflowSet, getWorkflowSet, updateWorkflowSetPlan, updateWorkflowSetStatus, updateWorkflowSetSourceWorkflow, deleteWorkflowSet, listWorkflowSets, } from './db';

package/build/services/workflow-sets/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listWorkflowSets = exports.deleteWorkflowSet = exports.updateWorkflowSetSourceWorkflow = exports.updateWorkflowSetStatus = exports.updateWorkflowSetPlan = exports.getWorkflowSet = exports.createWorkflowSet = void 0;
+var db_1 = require("./db");
+Object.defineProperty(exports, "createWorkflowSet", { enumerable: true, get: function () { return db_1.createWorkflowSet; } });
+Object.defineProperty(exports, "getWorkflowSet", { enumerable: true, get: function () { return db_1.getWorkflowSet; } });
+Object.defineProperty(exports, "updateWorkflowSetPlan", { enumerable: true, get: function () { return db_1.updateWorkflowSetPlan; } });
+Object.defineProperty(exports, "updateWorkflowSetStatus", { enumerable: true, get: function () { return db_1.updateWorkflowSetStatus; } });
+Object.defineProperty(exports, "updateWorkflowSetSourceWorkflow", { enumerable: true, get: function () { return db_1.updateWorkflowSetSourceWorkflow; } });
+Object.defineProperty(exports, "deleteWorkflowSet", { enumerable: true, get: function () { return db_1.deleteWorkflowSet; } });
+Object.defineProperty(exports, "listWorkflowSets", { enumerable: true, get: function () { return db_1.listWorkflowSets; } });

package/build/services/workflow-sets/sql.d.ts

@@ -0,0 +1,6 @@
+export declare const CREATE_WORKFLOW_SET = "\n  INSERT INTO lt_workflow_sets (name, description, specification, plan, namespaces, source_workflow_id)\n  VALUES ($1, $2, $3, $4, $5, $6)\n  RETURNING *";
+export declare const GET_WORKFLOW_SET = "\n  SELECT * FROM lt_workflow_sets WHERE id = $1";
+export declare const UPDATE_WORKFLOW_SET_PLAN = "\n  UPDATE lt_workflow_sets\n  SET plan = $2, namespaces = $3, status = 'planned', updated_at = NOW()\n  WHERE id = $1\n  RETURNING *";
+export declare const UPDATE_WORKFLOW_SET_STATUS = "\n  UPDATE lt_workflow_sets\n  SET status = $2, updated_at = NOW()\n  WHERE id = $1\n  RETURNING *";
+export declare const DELETE_WORKFLOW_SET = "\n  DELETE FROM lt_workflow_sets WHERE id = $1";
+export declare const LIST_WORKFLOW_SETS_BASE = "\n  SELECT * FROM lt_workflow_sets";

package/build/services/workflow-sets/sql.js

@@ -0,0 +1,24 @@
+"use strict";
+// ─── Workflow set CRUD ──────────────────────────────────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LIST_WORKFLOW_SETS_BASE = exports.DELETE_WORKFLOW_SET = exports.UPDATE_WORKFLOW_SET_STATUS = exports.UPDATE_WORKFLOW_SET_PLAN = exports.GET_WORKFLOW_SET = exports.CREATE_WORKFLOW_SET = void 0;
+exports.CREATE_WORKFLOW_SET = `
+  INSERT INTO lt_workflow_sets (name, description, specification, plan, namespaces, source_workflow_id)
+  VALUES ($1, $2, $3, $4, $5, $6)
+  RETURNING *`;
+exports.GET_WORKFLOW_SET = `
+  SELECT * FROM lt_workflow_sets WHERE id = $1`;
+exports.UPDATE_WORKFLOW_SET_PLAN = `
+  UPDATE lt_workflow_sets
+  SET plan = $2, namespaces = $3, status = 'planned', updated_at = NOW()
+  WHERE id = $1
+  RETURNING *`;
+exports.UPDATE_WORKFLOW_SET_STATUS = `
+  UPDATE lt_workflow_sets
+  SET status = $2, updated_at = NOW()
+  WHERE id = $1
+  RETURNING *`;
+exports.DELETE_WORKFLOW_SET = `
+  DELETE FROM lt_workflow_sets WHERE id = $1`;
+exports.LIST_WORKFLOW_SETS_BASE = `
+  SELECT * FROM lt_workflow_sets`;

package/build/services/yaml-workflow/db-utils.d.ts

@@ -12,6 +12,7 @@ export declare function listYamlWorkflows(filters: {
     tags?: string[];
     search?: string;
     source_workflow_id?: string;
+    set_id?: string;
     limit?: number;
     offset?: number;
 }): Promise<{

package/build/services/yaml-workflow/db-utils.js

@@ -69,6 +69,10 @@ async function listYamlWorkflows(filters) {
         conditions.push(`source_workflow_id = $${idx++}`);
         values.push(filters.source_workflow_id);
     }
+    if (filters.set_id) {
+        conditions.push(`set_id = $${idx++}`);
+        values.push(filters.set_id);
+    }
     const where = conditions.length ? `WHERE ${conditions.join(' AND ')}` : '';
     const limit = filters.limit || defaults_1.YAML_LIST_LIMIT;
     const offset = filters.offset || 0;

package/build/services/yaml-workflow/db.d.ts

@@ -1,6 +1,11 @@
 import type { LTYamlWorkflowRecord, LTYamlWorkflowVersionRecord, ActivityManifestEntry } from '../../types/yaml-workflow';
 import type { CreateYamlWorkflowInput } from './types';
 export { parseVersionFromYaml, updateYamlWorkflowStatus, listYamlWorkflows, findYamlWorkflowsByTags, } from './db-utils';
+/**
+ * Check whether a graph_topic is already in use by a non-archived workflow
+ * in the same namespace. Returns the conflicting workflow name, or null.
+ */
+export declare function checkTopicConflict(appId: string, graphTopic: string, excludeId?: string): Promise<string | null>;
 export declare function createYamlWorkflow(input: CreateYamlWorkflowInput): Promise<LTYamlWorkflowRecord>;
 export declare function getYamlWorkflow(id: string): Promise<LTYamlWorkflowRecord | null>;
 export declare function getYamlWorkflowByName(name: string): Promise<LTYamlWorkflowRecord | null>;
@@ -25,3 +30,6 @@ export declare function getVersionHistory(workflowId: string, limit?: number, of
 export declare function getVersionSnapshot(workflowId: string, version: number): Promise<LTYamlWorkflowVersionRecord | null>;
 export declare function markContentDeployed(workflowId: string): Promise<void>;
 export declare function markAppIdContentDeployed(appId: string): Promise<void>;
+export declare function updateCronSchedule(id: string, cronSchedule: string, cronEnvelope: Record<string, unknown> | null, executeAs: string | null): Promise<LTYamlWorkflowRecord | null>;
+export declare function clearCronSchedule(id: string): Promise<LTYamlWorkflowRecord | null>;
+export declare function getCronScheduledWorkflows(): Promise<LTYamlWorkflowRecord[]>;

package/build/services/yaml-workflow/db.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.findYamlWorkflowsByTags = exports.listYamlWorkflows = exports.updateYamlWorkflowStatus = exports.parseVersionFromYaml = void 0;
+exports.checkTopicConflict = checkTopicConflict;
 exports.createYamlWorkflow = createYamlWorkflow;
 exports.getYamlWorkflow = getYamlWorkflow;
 exports.getYamlWorkflowByName = getYamlWorkflowByName;
@@ -16,6 +17,9 @@ exports.getVersionHistory = getVersionHistory;
 exports.getVersionSnapshot = getVersionSnapshot;
 exports.markContentDeployed = markContentDeployed;
 exports.markAppIdContentDeployed = markAppIdContentDeployed;
+exports.updateCronSchedule = updateCronSchedule;
+exports.clearCronSchedule = clearCronSchedule;
+exports.getCronScheduledWorkflows = getCronScheduledWorkflows;
 const db_1 = require("../../lib/db");
 const defaults_1 = require("../../modules/defaults");
 const sql_1 = require("./sql");
@@ -26,6 +30,19 @@ Object.defineProperty(exports, "parseVersionFromYaml", { enumerable: true, get:
 Object.defineProperty(exports, "updateYamlWorkflowStatus", { enumerable: true, get: function () { return db_utils_2.updateYamlWorkflowStatus; } });
 Object.defineProperty(exports, "listYamlWorkflows", { enumerable: true, get: function () { return db_utils_2.listYamlWorkflows; } });
 Object.defineProperty(exports, "findYamlWorkflowsByTags", { enumerable: true, get: function () { return db_utils_2.findYamlWorkflowsByTags; } });
+/**
+ * Check whether a graph_topic is already in use by a non-archived workflow
+ * in the same namespace. Returns the conflicting workflow name, or null.
+ */
+async function checkTopicConflict(appId, graphTopic, excludeId) {
+    const pool = (0, db_1.getPool)();
+    const { rows } = await pool.query(sql_1.CHECK_TOPIC_UNIQUE, [appId, graphTopic]);
+    if (rows.length === 0)
+        return null;
+    if (excludeId && rows[0].id === excludeId)
+        return null;
+    return rows[0].name;
+}
 async function createYamlWorkflow(input) {
     const pool = (0, db_1.getPool)();
     const { rows } = await pool.query(sql_1.CREATE_YAML_WORKFLOW, [
@@ -45,6 +62,9 @@ async function createYamlWorkflow(input) {
         input.category || null,
         input.tags || [],
         input.metadata ? JSON.stringify(input.metadata) : null,
+        input.set_id || null,
+        input.set_role || null,
+        input.set_build_order ?? null,
     ]);
     const record = rows[0];
     await createVersionSnapshot(record.id, 1, record.yaml_content, input.activity_manifest || [], input.input_schema || {}, input.output_schema || {}, input.input_field_meta || [], 'Initial version');
@@ -194,3 +214,24 @@ async function markAppIdContentDeployed(appId) {
     const pool = (0, db_1.getPool)();
     await pool.query(sql_1.MARK_APP_ID_CONTENT_DEPLOYED, [appId]);
 }
+// -- Cron scheduling ---------------------------------------------------------
+async function updateCronSchedule(id, cronSchedule, cronEnvelope, executeAs) {
+    const pool = (0, db_1.getPool)();
+    const { rows } = await pool.query(sql_1.UPDATE_CRON_SCHEDULE, [
+        id,
+        cronSchedule,
+        cronEnvelope ? JSON.stringify(cronEnvelope) : null,
+        executeAs,
+    ]);
+    return rows[0] || null;
+}
+async function clearCronSchedule(id) {
+    const pool = (0, db_1.getPool)();
+    const { rows } = await pool.query(sql_1.CLEAR_CRON_SCHEDULE, [id]);
+    return rows[0] || null;
+}
+async function getCronScheduledWorkflows() {
+    const pool = (0, db_1.getPool)();
+    const { rows } = await pool.query(sql_1.GET_CRON_SCHEDULED_WORKFLOWS);
+    return rows;
+}

package/build/services/yaml-workflow/invoke.d.ts

@@ -0,0 +1,19 @@
+import type { LTYamlWorkflowRecord } from '../../types/yaml-workflow';
+interface InvokeOptions {
+    data?: Record<string, unknown>;
+    sync?: boolean;
+    timeout?: number;
+    execute_as?: string;
+    userId?: string;
+    /** Source identifier for metadata injection (e.g., 'cron') */
+    source?: string;
+}
+/**
+ * Invoke a YAML workflow with scope injection.
+ * Shared by HTTP route and cron callback.
+ */
+export declare function invokeYamlWorkflow(wf: LTYamlWorkflowRecord, options?: InvokeOptions): Promise<{
+    job_id: string;
+    result?: unknown;
+}>;
+export {};

package/build/services/yaml-workflow/invoke.js

@@ -0,0 +1,80 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.invokeYamlWorkflow = invokeYamlWorkflow;
+const yamlDeployer = __importStar(require("./deployer"));
+const principal_1 = require("../iam/principal");
+/**
+ * Invoke a YAML workflow with scope injection.
+ * Shared by HTTP route and cron callback.
+ */
+async function invokeYamlWorkflow(wf, options = {}) {
+    const data = { ...(options.data || {}) };
+    // Inject _scope so compiled workflow activities have identity context
+    if (!data._scope) {
+        const executeAs = options.execute_as;
+        const userId = options.userId;
+        if (executeAs) {
+            const [botPrincipal, invokerPrincipal] = await Promise.all([
+                (0, principal_1.resolvePrincipal)(executeAs),
+                userId ? (0, principal_1.resolvePrincipal)(userId) : Promise.resolve(null),
+            ]);
+            if (botPrincipal) {
+                data._scope = {
+                    principal: botPrincipal,
+                    scopes: ['mcp:tool:call'],
+                    ...(invokerPrincipal ? { initiatedBy: userId, initiatingPrincipal: invokerPrincipal } : {}),
+                };
+            }
+        }
+        else if (userId) {
+            const principal = await (0, principal_1.resolvePrincipal)(userId);
+            if (principal) {
+                data._scope = { principal, scopes: ['mcp:tool:call'] };
+            }
+        }
+    }
+    if (options.source) {
+        if (!data._metadata)
+            data._metadata = {};
+        data._metadata.source = options.source;
+    }
+    if (options.sync) {
+        const { job_id, result } = await yamlDeployer.invokeYamlWorkflowSync(wf.app_id, wf.graph_topic, data, options.timeout, wf.graph_topic);
+        return { job_id, result };
+    }
+    const jobId = await yamlDeployer.invokeYamlWorkflow(wf.app_id, wf.graph_topic, data, wf.graph_topic);
+    return { job_id: jobId };
+}

package/build/services/yaml-workflow/pipeline/build/dag.js

@@ -78,7 +78,7 @@ function appendNormalStep(dag, idx, step, prefix, graphTopic, plan, steps, trigg
     if (plan) {
         dag.prevActivityId = (0, transform_1.insertTransformActivities)(idx, plan, steps, prefix, graphTopic, dag.triggerId, triggerInputKeys, dag.stepIndexToActivityId, collapsedToCoreIndex, dag.activities, dag.transitions, dag.manifest, dag.prevActivityId);
     }
-    // Wire input mappings from upstream steps
+    // Wire input mappings from upstream steps (may include @pipe objects for derivations)
     const inputMappings = (0, wiring_1.wireStepInputs)(idx, step, plan, dag.stepIndexToActivityId, dag.triggerId, triggerInputKeys, steps, prefix, dag.prevActivityId, dag.prevResult, collapsedToCoreIndex);
     // Build the activity definition
     const resultSchema = step.result ? (0, utils_1.inferSchema)(step.result) : { type: 'object' };

package/build/services/yaml-workflow/pipeline/build/wiring.d.ts

@@ -6,4 +6,4 @@ import type { ExtractedStep, EnhancedCompilationPlan } from '../../types';
  * Build input mappings for a step using the compilation plan's data flow edges.
  * Falls back to mechanical backward-scan when no plan is available.
  */
-export declare function wireStepInputs(stepIdx: number, step: ExtractedStep, plan: EnhancedCompilationPlan | null, stepIndexToActivityId: Map<number, string>, triggerId: string, triggerInputKeys: Set<string>, steps: ExtractedStep[], prefix: string, prevActivityId: string, prevResult: unknown, collapsedToCoreIndex?: Map<number, number>): Record<string, string>;
+export declare function wireStepInputs(stepIdx: number, step: ExtractedStep, plan: EnhancedCompilationPlan | null, stepIndexToActivityId: Map<number, string>, triggerId: string, triggerInputKeys: Set<string>, steps: ExtractedStep[], prefix: string, prevActivityId: string, prevResult: unknown, collapsedToCoreIndex?: Map<number, number>): Record<string, unknown>;

package/build/services/yaml-workflow/pipeline/build/wiring.js

@@ -4,6 +4,94 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.wireStepInputs = wireStepInputs;
+/**
+ * HotMesh @pipe sub-pipe for today's date as YYYY-MM-DD.
+ * Follows RPN convention: operands row, then operator row.
+ * Row 1: date.now() → epoch (operator, no extra operands)
+ * Row 2: [isoString, 0, 10] — three operands for substring
+ * Row 3: substring(isoString, 0, 10) → "YYYY-MM-DD"
+ */
+const DATE_SUB_PIPE = {
+    '@pipe': [
+        ['{@date.now}'],
+        ['{@date.toISOString}', 0, 10],
+        ['{@string.substring}'],
+    ],
+};
+/**
+ * Convert a scalar derivation spec into a HotMesh @pipe expression.
+ * Uses fan-out/fan-in pattern: sub-pipes as row-level siblings, NOT nested inside array rows.
+ */
+function buildDerivationPipe(sourceRef, derivation) {
+    if (!derivation)
+        return sourceRef;
+    switch (derivation.strategy) {
+        case 'concat': {
+            const parts = derivation.parts || ['{value}'];
+            const hasDate = parts.some((p) => p === '{date}');
+            if (!hasDate) {
+                // Simple concat — no sub-pipes needed
+                const args = parts.map((p) => p === '{value}' ? sourceRef : p);
+                if (args.length === 1 && args[0] === sourceRef)
+                    return sourceRef;
+                return { '@pipe': [args, ['{@string.concat}']] };
+            }
+            // Fan-out/fan-in: each part that needs computation gets its own sub-pipe row
+            const rows = [];
+            for (const p of parts) {
+                if (p === '{value}') {
+                    rows.push({ '@pipe': [[sourceRef]] });
+                }
+                else if (p === '{date}') {
+                    rows.push(DATE_SUB_PIPE);
+                }
+                else {
+                    rows.push({ '@pipe': [[p]] });
+                }
+            }
+            rows.push(['{@string.concat}']);
+            return { '@pipe': rows };
+        }
+        case 'template': {
+            const tpl = derivation.template || '{value}';
+            const segments = tpl.split(/(\{value\}|\{date\})/).filter(Boolean);
+            const hasDate = segments.includes('{date}');
+            if (!hasDate) {
+                const args = segments.map((s) => s === '{value}' ? sourceRef : s);
+                if (args.length === 1 && args[0] === sourceRef)
+                    return sourceRef;
+                return { '@pipe': [args, ['{@string.concat}']] };
+            }
+            const rows = [];
+            for (const s of segments) {
+                if (s === '{value}') {
+                    rows.push({ '@pipe': [[sourceRef]] });
+                }
+                else if (s === '{date}') {
+                    rows.push(DATE_SUB_PIPE);
+                }
+                else {
+                    rows.push({ '@pipe': [[s]] });
+                }
+            }
+            rows.push(['{@string.concat}']);
+            return { '@pipe': rows };
+        }
+        case 'prefix': {
+            const concatParts = [];
+            if (derivation.prefix)
+                concatParts.push(derivation.prefix);
+            concatParts.push(sourceRef);
+            if (derivation.suffix)
+                concatParts.push(derivation.suffix);
+            if (concatParts.length === 1)
+                return sourceRef;
+            return { '@pipe': [concatParts, ['{@string.concat}']] };
+        }
+        default:
+            return sourceRef;
+    }
+}
 /**
  * Build input mappings for a step using the compilation plan's data flow edges.
  * Falls back to mechanical backward-scan when no plan is available.
@@ -23,6 +111,16 @@ function wireStepInputs(stepIdx, step, plan, stepIndexToActivityId, triggerId, t
             : stepIdx;
         const edgesForStep = plan.dataFlow.filter(e => e.toStep === collapsedIdx);
         for (const edge of edgesForStep) {
+            // Skip edges that target a complex nested object argument — these are stored
+            // defaults in tool_arguments (e.g., a nested `login` object with selectors)
+            // and must not be overridden by a flat scalar from an upstream step.
+            if (step.kind === 'tool' && !edge.transform) {
+                const argValue = step.arguments[edge.toField];
+                if (argValue && typeof argValue === 'object' && !Array.isArray(argValue) &&
+                    Object.keys(argValue).length > 2) {
+                    continue;
+                }
+            }
             if (edge.transform && Object.keys(edge.transform.fieldMap).length > 0) {
                 // This edge has a transform — the reshape activity was inserted before this step.
                 // Wire from the transform activity's output (which uses toField as the output key).
@@ -30,14 +128,16 @@ function wireStepInputs(stepIdx, step, plan, stepIndexToActivityId, triggerId, t
                 inputMappings[edge.toField] = `{${transformActId}.output.data.${edge.toField}}`;
             }
             else if (edge.fromStep === 'trigger') {
-                inputMappings[edge.toField] = `{${triggerId}.output.data.${edge.fromField}}`;
+                const rawRef = `{${triggerId}.output.data.${edge.fromField}}`;
+                inputMappings[edge.toField] = buildDerivationPipe(rawRef, edge.derivation);
             }
             else {
                 // Remap the source step from collapsed to core index
                 const remappedFrom = collapsedToCoreIndex?.get(edge.fromStep) ?? edge.fromStep;
                 const sourceActId = stepIndexToActivityId.get(remappedFrom);
                 if (sourceActId) {
-                    inputMappings[edge.toField] = `{${sourceActId}.output.data.${edge.fromField}}`;
+                    const rawRef = `{${sourceActId}.output.data.${edge.fromField}}`;
+                    inputMappings[edge.toField] = buildDerivationPipe(rawRef, edge.derivation);
                 }
             }
         }

package/build/services/yaml-workflow/pipeline/prompts.d.ts

@@ -4,7 +4,7 @@
  * Consolidates all system/user prompt strings used by compile, validate,
  * and extract stages so they can be reviewed and tuned in one place.
  */
-export declare const COMPILATION_PROMPT = "You are a workflow compiler. You analyze MCP tool execution traces and produce a COMPILATION PLAN \u2014 a complete specification for building a deterministic YAML DAG workflow.\n\nGiven:\n1. The user's ORIGINAL PROMPT \u2014 the single most important signal for understanding intent\n2. EXECUTION STEPS \u2014 tool calls with arguments, result structure samples, and server IDs\n3. PATTERN ANNOTATIONS \u2014 pre-detected iteration candidates from static analysis\n4. NAIVE INPUT CLASSIFICATION \u2014 initial argument classification\n\nYour job: produce a plan that makes the workflow truly reusable and deterministic.\n\n## Critical: Understand Intent\n\nThe original prompt describes what the user wanted. The execution trace shows HOW an LLM accomplished it, but may include exploratory detours. Your compilation captures INTENT, not a blind replay.\n\nFor example, if the prompt says \"login to site X and take screenshots of all pages\":\n- INTENT: login \u2192 discover pages \u2192 iterate and screenshot each one\n- Execution may have included probing steps \u2014 exclude those\n- Deterministic version: accept credentials \u2192 login \u2192 extract links \u2192 iterate taking screenshots\n\n## Critical: Preserve Discovery Steps\n\nMany workflows follow a \"discover then act\" pattern: one step DISCOVERS data (e.g., extract navigation links, query a database, list files) and a later step ACTS on that data (e.g., screenshot each page, process each record, transform each file).\n\n**NEVER collapse discovery + action into a single step with the discovered data as a user input.** If the execution trace shows:\n1. Step A: extract_content \u2192 produces `links: [{text, href}, ...]`\n2. Step B: capture_pages(pages=[...array built from step A's links...])\n\nThe compiled workflow MUST keep BOTH steps: A produces the array, B consumes it. Do NOT make the array a trigger input \u2014 it was runtime-discovered, not user-provided.\n\n**How to detect**: If a step's argument contains a large array of items that closely mirrors a prior step's output array (same URLs, same items, possibly reshaped), that array was DERIVED from the prior step. Keep both steps and wire them with a data_flow edge (with a transform if formats differ).\n\n## Rules\n\n### Step Dispositions\n- **core**: Directly serves the workflow intent. Produces data consumed by later steps. **Discovery steps that produce arrays consumed by later action steps are ALWAYS core.**\n- **exploratory**: Probing/debugging/discovery steps that don't produce data needed by the workflow. Exclude these:\n  - Checking if compiled workflows exist (list_workflows, list_yaml_workflows)\n  - Listing files to see what exists (list_files, read_file)\n  - Initial tool calls that failed and were retried with different parameters\n  - Any step whose result is not consumed by a subsequent core step\n  - **NEVER mark a discovery step as exploratory if its output was used to build arguments for a later step**\n\n### Signal Steps (Human-in-the-Loop)\nSteps with kind \"signal\" represent a durable pause where the workflow waits for human input (e.g., credentials, approval). These are ALWAYS core \u2014 they are essential to the workflow's data flow. The signal step receives data from a human and makes it available to subsequent steps. Do NOT mark signal steps as exploratory. The escalation tool call (escalate_and_wait) that precedes a signal step is also always core.\n\n**Signal data flow**: The signal step result contains the human response fields (e.g., password). These MUST be wired via data_flow edges to every downstream step that needs them. Add a data_flow edge from the signal step index to the consuming step with the matching field name.\n\n**Credentials from signals**: When the signal provides a credential (format: password in the schema), downstream tools that need it should receive it as a separate named input argument. The runtime exchanges ephemeral credential tokens automatically. For tools with complex stored arguments (like run_script steps arrays), wire the credential as a top-level argument name \u2014 the runtime merges it with stored defaults.\n\n### Iteration Specifications\nWhen the execution shows repeated tool calls with varying arguments (the pattern detector may have already collapsed these):\n- Identify the SOURCE: which prior step's result contains the array being iterated. This is the step that PRODUCED the list of items \u2014 look for a step whose result contains an array field with items matching the iteration's varying values. For example, if the iteration visits multiple URLs, find the step that returned those URLs (e.g., extract_content with links).\n- The source is NEVER a step that doesn't have the array in its output. Double-check: does the source step's resultKeys include the source_field?\n- Specify the source_field: the dot-path to the array (e.g., \"links\", \"results.pages\")\n- List varying_keys (change per item) vs constant_args (shared)\n- **KEY MAPPINGS are critical**: array items often use different key names than the tool expects.\n  E.g., extract_content returns `links: [{text, href}, ...]` but the screenshot tool wants `url`.\n  Map: `{ \"url\": \"href\" }` \u2014 tool arg name \u2192 array item key name.\n  Use null for keys that are COMPUTED at runtime, not sourced from the array.\n  For example, screenshot_path is often derived from the link text or URL \u2014 it's not a field in the source array directly:\n  `{ \"screenshot_path\": null }` \u2014 the value must be computed or provided by the trigger.\n\n### Tool Simplification for Iterations (CRITICAL)\nThe iteration pattern works by extracting individual values from array items and passing them as simple key=value arguments to the iterated tool. This means:\n\n**The iterated tool MUST accept simple, flat arguments** (url, path, page_id \u2014 not complex nested structures like a `steps` array).\n\nIf the execution used a complex multi-step scripting tool (e.g., `run_script` with a `steps: [{action, url}, {action, path}]` array) for each iteration, you MUST replace it with a simpler tool from the same server that accepts flat arguments. Check the server's tool inventory for a simpler alternative.\n\nFor example:\n- `run_script(steps=[navigate, wait, screenshot])` per page \u2192 replace with `capture_page(url, path, full_page, wait_ms)` (1 call, flat args)\n- `run_script(steps=[navigate, fill, click])` per item \u2192 replace with `submit_form(url, fields)` (1 call, flat args)\n\nWhen replacing: use the same server_id but the simpler tool_name. The varying_keys and key_mappings should map directly to the simple tool's argument names.\n\n**If no simpler tool alternative exists**, use a data_flow edge with a transform to feed the array into a batch/composite tool that accepts the full array (like `capture_authenticated_pages` which takes a `pages` array).\n\n### Data Flow Graph\nSpecify directed edges showing how data flows between steps:\n- from_step: \"trigger\" (user input) or step index number\n- from_field: the output field name (or trigger input key)\n- to_step: the consuming step index\n- to_field: the argument key name\n- is_session_wire: true for session handles (page_id, _handle, session_id)\n\nSession handles are critical \u2014 they maintain authenticated browser sessions, database connections, etc. They must be threaded from their producer through ALL subsequent steps that need them.\n\n### Data Flow Transforms (CRITICAL for array reshaping)\nWhen a source step produces an array of objects in one format but the consuming step expects a DIFFERENT format, add a `transform` to the data_flow edge. Compare the source step's result structure with the consuming step's actual arguments from the trace.\n\n**Choosing the correct source field**: When a step produces multiple output fields, check the result sample to determine which field actually contains an ARRAY OF OBJECTS suitable for iteration/reshaping. Prefer structured array fields over raw/unstructured fields. Check the Tool-Specific Compilation Hints section (if present) for guidance on which fields to use for specific tools.\n\nFor example: extract_content returns `links: [{text, href}]` but capture tool expects `pages: [{url, screenshot_path, wait_ms, full_page}]`.\nAdd a transform with:\n- `field_map`: maps target keys \u2192 source keys (e.g., `{\"url\": \"href\"}`). Use null for keys not in the source.\n- `defaults`: static values to inject (e.g., `{\"wait_ms\": 3000, \"full_page\": true}`)\n- `derivations`: for computed keys (null in field_map), how to derive them from source data\n  - strategy: \"slugify\" (lowercase, replace spaces/special with hyphens), \"prefix\", \"template\"\n  - source_key: which source field to derive from\n  - prefix/suffix/template: string manipulation params\n\nExample edge with transform:\n```\n{\n  \"from_step\": 1, \"from_field\": \"links\", \"to_step\": 2, \"to_field\": \"pages\",\n  \"is_session_wire\": false,\n  \"transform\": {\n    \"field_map\": { \"url\": \"href\", \"screenshot_path\": null },\n    \"defaults\": { \"wait_ms\": 3000, \"full_page\": true },\n    \"derivations\": {\n      \"screenshot_path\": {\n        \"source_key\": \"href\",\n        \"strategy\": \"slugify\",\n        \"prefix\": \"screenshots/\",\n        \"suffix\": \".png\"\n      }\n    }\n  }\n}\n```\n\nIMPORTANT: Check EVERY array-typed data_flow edge. Compare the source step's result item keys with the consuming step's argument item keys. If they differ, add a transform. Look at the actual tool_arguments in the execution trace to determine the correct field_map, defaults, and derivations.\n\n### Input Classification\n- **dynamic**: Simple values callers MUST provide: URLs, credentials, file paths, queries, search terms. These are always scalar strings, numbers, or booleans \u2014 NEVER complex objects or arrays.\n- **fixed**: Implementation details with sensible defaults: selectors, timeouts, boolean flags, AND complex structured arguments like `steps` arrays, `login` objects, or `pages` arrays. These are baked into stored tool_arguments.\n\n**Complex tool arguments (arrays of objects, nested structures) are ALWAYS fixed.** They represent the implementation recipe, not user input. For example:\n- A `steps` array describing browser actions (navigate, fill, click, screenshot) \u2192 **fixed**\n- A `login` object with selectors and credentials \u2192 flatten the credentials (username, password) as dynamic, but the selectors as fixed\n- A `pages` array of URLs to capture \u2192 **fixed** if hardcoded from the trace, or a data_flow edge if discovered at runtime\n\nFlatten nested objects containing dynamic values. E.g., `login: {url, username, password}` \u2192 separate `login_url`, `username`, `password` fields. But NEVER expose the full nested object or array as a trigger input.\n\n**Arrays that were DISCOVERED at runtime (by a prior step) are NOT inputs.** They flow between steps via data_flow edges. Only make an array a trigger input if the user explicitly provided it in their prompt. If the array was produced by a discovery step (extract_content, query, list), keep the discovery step as core and wire its output to the consuming step.\n\n### Data Flow Wiring Precision\n- **Only wire inputs that semantically match.** A directory name (e.g., `screenshot_dir = \"screenshots\"`) must NOT be wired to a file path argument (e.g., `screenshot_path` which expects `\"screenshots/home.png\"`). If a tool argument needs a specific file path but the trigger only provides a directory, leave that argument unwired \u2014 the stored tool_arguments default will provide the correct value.\n- **Trigger inputs should map to the EXACT tool argument they represent.** Don't reuse a trigger input for a different-purpose argument just because the names are vaguely related.\n- **When in doubt, don't wire.** An unwired argument falls back to the stored tool_arguments default from the original execution \u2014 this is always correct. An incorrectly wired argument overrides the correct default with a wrong value.\n\n### Session Fields and Threading Rules\nList all fields that represent session tokens/handles that must flow through the DAG (e.g., page_id, _handle, session_id).\n\n**Critical**: When a login/setup step produces a page_id or _handle, ALL subsequent browser/page steps must receive that session wire \u2014 including steps inside iterations. The data_flow graph must include session wire edges from the producing step to EVERY downstream step that operates on the same session, not just the immediately next one. For iterations: wire the session from the setup step directly to the iteration body step.\n\n**COMPLETENESS REQUIREMENT**: For EACH step that uses a session field (check the step's argumentKeys \u2014 if it includes page_id, _handle, or session_id), you MUST emit a data_flow edge wiring that field from its producer. If step 0 produces _handle and steps 1, 2, and 3 all use it, you need THREE edges: 0\u21921, 0\u21922, 0\u21923. Do NOT assume downstream steps will \"inherit\" session fields \u2014 each consumer needs an explicit edge.\n\n### Data Flow Completeness Check\nBefore finalizing the plan, verify:\n1. Every step that has a session field in its argumentKeys has a corresponding is_session_wire edge\n2. Every step that consumes data from a prior step has a data_flow edge for that field\n3. Every dynamic trigger input is wired to at least one step via a data_flow edge from \"trigger\"\n4. Transform edges include the source field AND the consuming step can access all fields it needs\n\n## Output Format\n\nReturn a JSON object (no markdown fences):\n{\n  \"intent\": \"Brief generic description of what this workflow does\",\n  \"description\": \"Suggested workflow description for discovery\",\n  \"steps\": [\n    { \"index\": 0, \"purpose\": \"Navigate to the target site\", \"disposition\": \"core\" },\n    { \"index\": 1, \"purpose\": \"Extract navigation links from the page\", \"disposition\": \"core\" },\n    { \"index\": 2, \"purpose\": \"List files to check directory structure\", \"disposition\": \"exploratory\" }\n  ],\n  \"core_step_indices\": [0, 1, 3],\n  \"inputs\": [\n    { \"key\": \"base_url\", \"type\": \"string\", \"classification\": \"dynamic\", \"description\": \"The base URL of the site\" },\n    { \"key\": \"username\", \"type\": \"string\", \"classification\": \"dynamic\", \"description\": \"Login username\" },\n    { \"key\": \"timeout\", \"type\": \"number\", \"classification\": \"fixed\", \"description\": \"Page load timeout\", \"default\": 30000 }\n  ],\n  \"iterations\": [\n    {\n      \"body_step_index\": 3,\n      \"tool_name\": \"screenshot\",\n      \"server_id\": \"playwright\",\n      \"source_step_index\": 1,\n      \"source_field\": \"links\",\n      \"varying_keys\": [\"url\", \"screenshot_path\"],\n      \"constant_args\": { \"full_page\": true },\n      \"key_mappings\": { \"url\": \"href\", \"screenshot_path\": null }\n    }\n  ],\n  \"data_flow\": [\n    { \"from_step\": \"trigger\", \"from_field\": \"base_url\", \"to_step\": 0, \"to_field\": \"url\", \"is_session_wire\": false },\n    { \"from_step\": 0, \"from_field\": \"page_id\", \"to_step\": 1, \"to_field\": \"page_id\", \"is_session_wire\": true },\n    { \"from_step\": 0, \"from_field\": \"_handle\", \"to_step\": 1, \"to_field\": \"_handle\", \"is_session_wire\": true }\n  ],\n  \"session_fields\": [\"page_id\", \"_handle\"]\n}";
+export declare const COMPILATION_PROMPT = "You are a workflow compiler. You analyze MCP tool execution traces and produce a COMPILATION PLAN \u2014 a complete specification for building a deterministic YAML DAG workflow.\n\nGiven:\n1. The user's ORIGINAL PROMPT \u2014 the single most important signal for understanding intent\n2. EXECUTION STEPS \u2014 tool calls with arguments, result structure samples, and server IDs\n3. PATTERN ANNOTATIONS \u2014 pre-detected iteration candidates from static analysis\n4. NAIVE INPUT CLASSIFICATION \u2014 initial argument classification\n\nYour job: produce a plan that makes the workflow truly reusable and deterministic.\n\n## Critical: Understand Intent\n\nThe original prompt describes what the user wanted. The execution trace shows HOW an LLM accomplished it, but may include exploratory detours. Your compilation captures INTENT, not a blind replay.\n\nFor example, if the prompt says \"login to site X and take screenshots of all pages\":\n- INTENT: login \u2192 discover pages \u2192 iterate and screenshot each one\n- Execution may have included probing steps \u2014 exclude those\n- Deterministic version: accept credentials \u2192 login \u2192 extract links \u2192 iterate taking screenshots\n\n## Critical: Preserve Discovery Steps\n\nMany workflows follow a \"discover then act\" pattern: one step DISCOVERS data (e.g., extract navigation links, query a database, list files) and a later step ACTS on that data (e.g., screenshot each page, process each record, transform each file).\n\n**NEVER collapse discovery + action into a single step with the discovered data as a user input.** If the execution trace shows:\n1. Step A: extract_content \u2192 produces `links: [{text, href}, ...]`\n2. Step B: capture_pages(pages=[...array built from step A's links...])\n\nThe compiled workflow MUST keep BOTH steps: A produces the array, B consumes it. Do NOT make the array a trigger input \u2014 it was runtime-discovered, not user-provided.\n\n**How to detect**: If a step's argument contains a large array of items that closely mirrors a prior step's output array (same URLs, same items, possibly reshaped), that array was DERIVED from the prior step. Keep both steps and wire them with a data_flow edge (with a transform if formats differ).\n\n## Rules\n\n### Step Dispositions\n- **core**: Directly serves the workflow intent. Produces data consumed by later steps. **Discovery steps that produce arrays consumed by later action steps are ALWAYS core.**\n- **exploratory**: Probing/debugging/discovery steps that don't produce data needed by the workflow. Exclude these:\n  - Checking if compiled workflows exist (list_workflows, list_yaml_workflows)\n  - Listing files to see what exists (list_files, read_file)\n  - Initial tool calls that failed and were retried with different parameters\n  - Any step whose result is not consumed by a subsequent core step\n  - **NEVER mark a discovery step as exploratory if its output was used to build arguments for a later step**\n\n### Signal Steps (Human-in-the-Loop)\nSteps with kind \"signal\" represent a durable pause where the workflow waits for human input (e.g., credentials, approval). These are ALWAYS core \u2014 they are essential to the workflow's data flow. The signal step receives data from a human and makes it available to subsequent steps. Do NOT mark signal steps as exploratory. The escalation tool call (escalate_and_wait) that precedes a signal step is also always core.\n\n**Signal data flow**: The signal step result contains the human response fields (e.g., password). These MUST be wired via data_flow edges to every downstream step that needs them. Add a data_flow edge from the signal step index to the consuming step with the matching field name.\n\n**Credentials from signals**: When the signal provides a credential (format: password in the schema), downstream tools that need it should receive it as a separate named input argument. The runtime exchanges ephemeral credential tokens automatically. For tools with complex stored arguments (like run_script steps arrays), wire the credential as a top-level argument name \u2014 the runtime merges it with stored defaults.\n\n### Iteration Specifications\nWhen the execution shows repeated tool calls with varying arguments (the pattern detector may have already collapsed these):\n- Identify the SOURCE: which prior step's result contains the array being iterated. This is the step that PRODUCED the list of items \u2014 look for a step whose result contains an array field with items matching the iteration's varying values. For example, if the iteration visits multiple URLs, find the step that returned those URLs (e.g., extract_content with links).\n- The source is NEVER a step that doesn't have the array in its output. Double-check: does the source step's resultKeys include the source_field?\n- Specify the source_field: the dot-path to the array (e.g., \"links\", \"results.pages\")\n- List varying_keys (change per item) vs constant_args (shared)\n- **KEY MAPPINGS are critical**: array items often use different key names than the tool expects.\n  E.g., extract_content returns `links: [{text, href}, ...]` but the screenshot tool wants `url`.\n  Map: `{ \"url\": \"href\" }` \u2014 tool arg name \u2192 array item key name.\n  Use null for keys that are COMPUTED at runtime, not sourced from the array.\n  For example, screenshot_path is often derived from the link text or URL \u2014 it's not a field in the source array directly:\n  `{ \"screenshot_path\": null }` \u2014 the value must be computed or provided by the trigger.\n\n### Tool Simplification for Iterations (CRITICAL)\nThe iteration pattern works by extracting individual values from array items and passing them as simple key=value arguments to the iterated tool. This means:\n\n**The iterated tool MUST accept simple, flat arguments** (url, path, page_id \u2014 not complex nested structures like a `steps` array).\n\nIf the execution used a complex multi-step scripting tool (e.g., `run_script` with a `steps: [{action, url}, {action, path}]` array) for each iteration, you MUST replace it with a simpler tool from the same server that accepts flat arguments. Check the server's tool inventory for a simpler alternative.\n\nFor example:\n- `run_script(steps=[navigate, wait, screenshot])` per page \u2192 replace with `capture_page(url, path, full_page, wait_ms)` (1 call, flat args)\n- `run_script(steps=[navigate, fill, click])` per item \u2192 replace with `submit_form(url, fields)` (1 call, flat args)\n\nWhen replacing: use the same server_id but the simpler tool_name. The varying_keys and key_mappings should map directly to the simple tool's argument names.\n\n**If no simpler tool alternative exists**, use a data_flow edge with a transform to feed the array into a batch/composite tool that accepts the full array (like `capture_authenticated_pages` which takes a `pages` array).\n\n### Data Flow Graph\nSpecify directed edges showing how data flows between steps:\n- from_step: \"trigger\" (user input) or step index number\n- from_field: the output field name (or trigger input key)\n- to_step: the consuming step index\n- to_field: the argument key name\n- is_session_wire: true for session handles (page_id, _handle, session_id)\n\nSession handles are critical \u2014 they maintain authenticated browser sessions, database connections, etc. They must be threaded from their producer through ALL subsequent steps that need them.\n\n### Chain Analysis to Downstream Steps\nWhen a step produces a meaningful result (analysis, extraction, description, computed value) and a later step consumes related data (saving, storing, forwarding, reporting), there MUST be a data_flow edge connecting them. Match by semantic intent, not just field name:\n- Step produces `description` \u2192 downstream step takes `value` \u2192 edge with from_field: \"description\", to_field: \"value\"\n- Step produces `analysis.summary` \u2192 downstream step takes `content` \u2192 edge with appropriate field mapping\n\nIf the original execution trace shows that a step's output was used (even indirectly) as input to a later step, the compiled version must preserve that data chain. A broken chain means the downstream step receives no data \u2014 the worst possible compilation error.\n\n### Data Flow Transforms (CRITICAL for array reshaping)\nWhen a source step produces an array of objects in one format but the consuming step expects a DIFFERENT format, add a `transform` to the data_flow edge. Compare the source step's result structure with the consuming step's actual arguments from the trace.\n\n**Choosing the correct source field**: When a step produces multiple output fields, check the result sample to determine which field actually contains an ARRAY OF OBJECTS suitable for iteration/reshaping. Prefer structured array fields over raw/unstructured fields. Check the Tool-Specific Compilation Hints section (if present) for guidance on which fields to use for specific tools.\n\nFor example: extract_content returns `links: [{text, href}]` but capture tool expects `pages: [{url, screenshot_path, wait_ms, full_page}]`.\nAdd a transform with:\n- `field_map`: maps target keys \u2192 source keys (e.g., `{\"url\": \"href\"}`). Use null for keys not in the source.\n- `defaults`: static values to inject (e.g., `{\"wait_ms\": 3000, \"full_page\": true}`)\n- `derivations`: for computed keys (null in field_map), how to derive them from source data\n  - strategy: \"slugify\" (lowercase, replace spaces/special with hyphens), \"prefix\", \"template\", \"concat\"\n  - source_key: which source field to derive from\n  - prefix/suffix/template: string manipulation params\n\nAvailable derivation strategies:\n- **slugify**: Lowercase, replace spaces/special chars with hyphens. Optionally add prefix/suffix.\n- **prefix**: Prepend a static string.\n- **template**: Format string with `{value}` (source field) and `{date}` (today's date as YYYY-MM-DD via @date.yyyymmdd).\n- **concat**: Join multiple parts. Each part can use `{value}` and `{date}` placeholders.\n  Example: `{ \"strategy\": \"concat\", \"parts\": [\"{value}\", \"-\", \"{date}\"] }` produces `my-slug-2026-04-17`.\n- **passthrough**: No transformation.\n\nUse these when the workflow needs runtime-computed values (date-stamped filenames, slugified URLs, templated paths).\n\nExample edge with transform:\n```\n{\n  \"from_step\": 1, \"from_field\": \"links\", \"to_step\": 2, \"to_field\": \"pages\",\n  \"is_session_wire\": false,\n  \"transform\": {\n    \"field_map\": { \"url\": \"href\", \"screenshot_path\": null },\n    \"defaults\": { \"wait_ms\": 3000, \"full_page\": true },\n    \"derivations\": {\n      \"screenshot_path\": {\n        \"source_key\": \"href\",\n        \"strategy\": \"slugify\",\n        \"prefix\": \"screenshots/\",\n        \"suffix\": \".png\"\n      }\n    }\n  }\n}\n```\n\nIMPORTANT: Check EVERY array-typed data_flow edge. Compare the source step's result item keys with the consuming step's argument item keys. If they differ, add a transform. Look at the actual tool_arguments in the execution trace to determine the correct field_map, defaults, and derivations.\n\n### Scalar Derivations on Data Flow Edges\nWhen a scalar value needs runtime transformation before reaching its consumer, add a `derivation` to the data_flow edge (NOT a `transform` \u2014 transforms are for array reshaping). Derivations generate runtime expressions for string manipulation.\n\nCommon use case: the user's prompt mentions a pattern like \"save with key slug-{date}\" or \"name it {something}-{today's date}\". The trigger provides the base value, and the derivation appends or formats it at runtime.\n\nAdd a `derivation` field to the data_flow edge:\n```\n{\n  \"from_step\": \"trigger\", \"from_field\": \"key\", \"to_step\": 3, \"to_field\": \"key\",\n  \"is_session_wire\": false,\n  \"derivation\": { \"strategy\": \"concat\", \"parts\": [\"{value}\", \"-\", \"{date}\"] }\n}\n```\n\nThis produces a runtime-computed key like `my-slug-2026-04-17`. The `{value}` placeholder is the source field value; `{date}` is today's ISO date (YYYY-MM-DD).\n\nUse derivations when:\n- The user wants date-stamped keys, filenames, or identifiers\n- A value needs a prefix/suffix added at runtime\n- Two values need to be concatenated\n\n### Input Classification\n- **dynamic**: Simple values callers MUST provide: URLs, credentials, file paths, queries, search terms. These are always scalar strings, numbers, or booleans \u2014 NEVER complex objects or arrays.\n- **fixed**: Implementation details with sensible defaults: selectors, timeouts, boolean flags, AND complex structured arguments like `steps` arrays, `login` objects, or `pages` arrays. These are baked into stored tool_arguments.\n\n**Complex tool arguments (arrays of objects, nested structures) are ALWAYS fixed.** They represent the implementation recipe, not user input. For example:\n- A `steps` array describing browser actions (navigate, fill, click, screenshot) \u2192 **fixed**\n- A `login` object with selectors and credentials \u2192 flatten the credentials (username, password) as dynamic, but the selectors as fixed\n- A `pages` array of URLs to capture \u2192 **fixed** if hardcoded from the trace, or a data_flow edge if discovered at runtime\n\nFlatten nested objects containing dynamic values. E.g., `login: {url, username, password}` \u2192 separate `login_url`, `username`, `password` fields. But NEVER expose the full nested object or array as a trigger input.\n\n**Arrays that were DISCOVERED at runtime (by a prior step) are NOT inputs.** They flow between steps via data_flow edges. Only make an array a trigger input if the user explicitly provided it in their prompt. If the array was produced by a discovery step (extract_content, query, list), keep the discovery step as core and wire its output to the consuming step.\n\n### Prompt-Mentioned Values Are Dynamic\nIf a scalar value (URL, domain name, file path, key name, slug, query string) appears verbatim or closely paraphrased in the user's original prompt, classify it as **dynamic**. The user explicitly chose that value for this execution and will want to change it next time. Only classify a prompt-mentioned value as fixed if it is unambiguously an implementation constant (a CSS selector, a timeout, a boolean flag).\n\nThis is the most common compilation error: treating the user's specific request values as universal defaults. When in doubt, make it dynamic.\n\n### Data Flow Wiring Precision\n- **Only wire inputs that semantically match.** A directory name (e.g., `screenshot_dir = \"screenshots\"`) must NOT be wired to a file path argument (e.g., `screenshot_path` which expects `\"screenshots/home.png\"`). If a tool argument needs a specific file path but the trigger only provides a directory, leave that argument unwired \u2014 the stored tool_arguments default will provide the correct value.\n- **Trigger inputs should map to the EXACT tool argument they represent.** Don't reuse a trigger input for a different-purpose argument just because the names are vaguely related.\n- **When in doubt, don't wire.** An unwired argument falls back to the stored tool_arguments default from the original execution \u2014 this is always correct. An incorrectly wired argument overrides the correct default with a wrong value.\n\n### Session Fields and Threading Rules\nList all fields that represent session tokens/handles that must flow through the DAG (e.g., page_id, _handle, session_id).\n\n**Critical**: When a login/setup step produces a page_id or _handle, ALL subsequent browser/page steps must receive that session wire \u2014 including steps inside iterations. The data_flow graph must include session wire edges from the producing step to EVERY downstream step that operates on the same session, not just the immediately next one. For iterations: wire the session from the setup step directly to the iteration body step.\n\n**COMPLETENESS REQUIREMENT**: For EACH step that uses a session field (check the step's argumentKeys \u2014 if it includes page_id, _handle, or session_id), you MUST emit a data_flow edge wiring that field from its producer. If step 0 produces _handle and steps 1, 2, and 3 all use it, you need THREE edges: 0\u21921, 0\u21922, 0\u21923. Do NOT assume downstream steps will \"inherit\" session fields \u2014 each consumer needs an explicit edge.\n\n### Data Flow Completeness Check\nBefore finalizing the plan, verify:\n1. Every step that has a session field in its argumentKeys has a corresponding is_session_wire edge\n2. Every step that consumes data from a prior step has a data_flow edge for that field\n3. Every dynamic trigger input is wired to at least one step via a data_flow edge from \"trigger\"\n4. Transform edges include the source field AND the consuming step can access all fields it needs\n\n## Output Format\n\nReturn a JSON object (no markdown fences):\n{\n  \"intent\": \"Brief generic description of what this workflow does\",\n  \"description\": \"Suggested workflow description for discovery\",\n  \"steps\": [\n    { \"index\": 0, \"purpose\": \"Navigate to the target site\", \"disposition\": \"core\" },\n    { \"index\": 1, \"purpose\": \"Extract navigation links from the page\", \"disposition\": \"core\" },\n    { \"index\": 2, \"purpose\": \"List files to check directory structure\", \"disposition\": \"exploratory\" }\n  ],\n  \"core_step_indices\": [0, 1, 3],\n  \"inputs\": [\n    { \"key\": \"base_url\", \"type\": \"string\", \"classification\": \"dynamic\", \"description\": \"The base URL of the site\" },\n    { \"key\": \"username\", \"type\": \"string\", \"classification\": \"dynamic\", \"description\": \"Login username\" },\n    { \"key\": \"timeout\", \"type\": \"number\", \"classification\": \"fixed\", \"description\": \"Page load timeout\", \"default\": 30000 }\n  ],\n  \"iterations\": [\n    {\n      \"body_step_index\": 3,\n      \"tool_name\": \"screenshot\",\n      \"server_id\": \"playwright\",\n      \"source_step_index\": 1,\n      \"source_field\": \"links\",\n      \"varying_keys\": [\"url\", \"screenshot_path\"],\n      \"constant_args\": { \"full_page\": true },\n      \"key_mappings\": { \"url\": \"href\", \"screenshot_path\": null }\n    }\n  ],\n  \"data_flow\": [\n    { \"from_step\": \"trigger\", \"from_field\": \"base_url\", \"to_step\": 0, \"to_field\": \"url\", \"is_session_wire\": false },\n    { \"from_step\": 0, \"from_field\": \"page_id\", \"to_step\": 1, \"to_field\": \"page_id\", \"is_session_wire\": true },\n    { \"from_step\": 0, \"from_field\": \"_handle\", \"to_step\": 1, \"to_field\": \"_handle\", \"is_session_wire\": true }\n  ],\n  \"session_fields\": [\"page_id\", \"_handle\"]\n}";
 /**
  * Build the retry hint injected into the compile stage when
  * user feedback or a prior deployment error triggers recompilation.