@makaio/framework 1.0.0-dev-1784889676396 → 1.0.0-dev-1785344643235

package/dist/{index-CvmWRumB.d.mts → index-BQLUVXIB.d.mts}

@@ -1,5 +1,5 @@
-import { q as ArtifactRevision$1 } from "./context-resolution-B9ANWbG0.mjs";
-import { i as JsonValue$1, t as JsonObjectContractSchema } from "./json-value-BwVdTylT.mjs";
+import { q as ArtifactRevision$1 } from "./context-resolution-BQBk4Ish.mjs";
+import { i as JsonValue$1, t as JsonObjectContractSchema } from "./json-value-Brslhqbm.mjs";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
 import { ExtractSubjectPayload, SubjectDefinition, TypedPayloadFilter } from "@makaio/framework/core";
@@ -173,12 +173,12 @@ type WorkflowSourceLocation = z.infer<typeof WorkflowSourceLocationSchema>;
  * - `sequence`       — ordered list of child nodes (the structural container)
  */
 declare const WorkflowNodeTypeSchema: z.ZodEnum<{
-  sequence: "sequence";
   station: "station";
   "delegate-agent": "delegate-agent";
   "delegate-role": "delegate-role";
-  gate: "gate";
+  sequence: "sequence";
   parallel: "parallel";
+  gate: "gate";
   iterate: "iterate";
   "iterate-chain": "iterate-chain";
   loop: "loop";
@@ -820,26 +820,28 @@ declare const WorkflowDefinitionSchema$1: z.ZodObject<{
     syncedAt: z.ZodOptional<z.ZodString>;
     metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
   }, z.core.$strict>], "kind">>;
+  executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"path">;
+    path: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"source">;
+    filename: z.ZodString;
+    source: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"definition">;
+    workflowId: z.ZodString;
+  }, z.core.$strict>], "kind">>;
+  requirements: z.ZodOptional<z.ZodObject<{
+    maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+    persistentStorage: z.ZodOptional<z.ZodBoolean>;
+    customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+    materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+      "local-directory": "local-directory";
+      "workspace-snapshot": "workspace-snapshot";
+    }>>>;
+  }, z.core.$strip>>;
   successFinalizerId: z.ZodOptional<z.ZodString>;
-  executionHints: z.ZodOptional<z.ZodObject<{
-    source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-      kind: z.ZodLiteral<"path">;
-      path: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-      kind: z.ZodLiteral<"source">;
-      filename: z.ZodString;
-      source: z.ZodString;
-    }, z.core.$strict>], "kind">>;
-    requirements: z.ZodOptional<z.ZodObject<{
-      isolation: z.ZodOptional<z.ZodEnum<{
-        local: "local";
-        remote: "remote";
-        container: "container";
-      }>>;
-      capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-    providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-  }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
 }, z.core.$strip>;
 /**
  * Workflow definition stored in the database.
@@ -855,8 +857,8 @@ declare const ExecutionStatusSchema$1: z.ZodEnum<{
   completed: "completed";
   cancelled: "cancelled";
   failed: "failed";
-  running: "running";
   paused: "paused";
+  running: "running";
   finalizing: "finalizing";
 }>;
 type ExecutionStatus = z.infer<typeof ExecutionStatusSchema$1>;
@@ -872,8 +874,8 @@ declare const WorkflowExecutionSchema$1: z.ZodObject<{
     completed: "completed";
     cancelled: "cancelled";
     failed: "failed";
-    running: "running";
     paused: "paused";
+    running: "running";
     finalizing: "finalizing";
   }>;
   inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -913,12 +915,12 @@ declare const WorkflowFrameStateSchema$1: z.ZodObject<{
   frameId: z.ZodString;
   nodeId: z.ZodString;
   nodeType: z.ZodEnum<{
-    sequence: "sequence";
     station: "station";
     "delegate-agent": "delegate-agent";
     "delegate-role": "delegate-role";
-    gate: "gate";
+    sequence: "sequence";
     parallel: "parallel";
+    gate: "gate";
     iterate: "iterate";
     "iterate-chain": "iterate-chain";
     loop: "loop";
@@ -1005,8 +1007,8 @@ declare const WorkflowResolvedRoleSchema: z.ZodObject<{
   harnessId: z.ZodOptional<z.ZodString>;
   systemPrompt: z.ZodOptional<z.ZodString>;
   contextMode: z.ZodOptional<z.ZodEnum<{
-    fresh: "fresh";
     fork: "fork";
+    fresh: "fresh";
   }>>;
   providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
     state: z.ZodLiteral<"resolved">;
@@ -1116,8 +1118,8 @@ declare const WorkflowResolvedAgentSchema: z.ZodObject<{
   harnessId: z.ZodOptional<z.ZodString>;
   systemPrompt: z.ZodOptional<z.ZodString>;
   contextMode: z.ZodOptional<z.ZodEnum<{
-    fresh: "fresh";
     fork: "fork";
+    fresh: "fresh";
   }>>;
   providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
     state: z.ZodLiteral<"resolved">;
@@ -1268,8 +1270,8 @@ declare const ExecutionListQuerySchema$1: z.ZodObject<{
     completed: "completed";
     cancelled: "cancelled";
     failed: "failed";
-    running: "running";
     paused: "paused";
+    running: "running";
     finalizing: "finalizing";
   }>>;
   artifactRef: z.ZodOptional<z.ZodObject<{
@@ -1472,11 +1474,69 @@ declare const WorkflowDelegateResultFinalizationRequestSchema: z.ZodObject<{
     }, z.core.$strict>;
   }, z.core.$strict>>;
 }, z.core.$strict>;
+/**
+ * Static authority gateway request for one delegate result finalization.
+ *
+ * Unlike the dynamically named finalizer subject, this envelope is safe to
+ * expose to restricted remote execution attempts. The Authority validates the
+ * selected finalizer against its durable definition snapshot before routing
+ * the enclosed payload to the finalizer's local namespace.
+ */
+declare const WorkflowDelegateResultFinalizationGatewayRequestSchema: z.ZodObject<{
+  executionId: z.ZodString;
+  workflowId: z.ZodString;
+  frameId: z.ZodString;
+  nodeId: z.ZodString;
+  nodeType: z.ZodEnum<{
+    "delegate-agent": "delegate-agent";
+    "delegate-role": "delegate-role";
+  }>;
+  rawResult: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+  toolObservations: z.ZodArray<z.ZodObject<{
+    toolName: z.ZodString;
+    outcome: z.ZodOptional<z.ZodEnum<{
+      success: "success";
+      failure: "failure";
+    }>>;
+    artifact: z.ZodOptional<z.ZodObject<{
+      kind: z.ZodString;
+      id: z.ZodString;
+      revision: z.ZodString;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+  economics: z.ZodOptional<z.ZodObject<{
+    durationMs: z.ZodNumber;
+    inputTokens: z.ZodOptional<z.ZodNumber>;
+    outputTokens: z.ZodOptional<z.ZodNumber>;
+    cachedInputTokens: z.ZodOptional<z.ZodNumber>;
+    toolCallCount: z.ZodOptional<z.ZodNumber>;
+    binding: z.ZodObject<{
+      adapterName: z.ZodString;
+      providerConfigId: z.ZodOptional<z.ZodString>;
+      providerDefinitionId: z.ZodOptional<z.ZodString>;
+      model: z.ZodOptional<z.ZodString>;
+      auth: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodEnum<{
+          explicit: "explicit";
+          inferred: "inferred";
+          none: "none";
+        }>;
+        owner: z.ZodEnum<{
+          provider: "provider";
+          client: "client";
+        }>;
+        methodId: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>;
+  }, z.core.$strict>>;
+  finalizerId: z.ZodString;
+}, z.core.$strict>;
 /** Authority response containing the durable delegate frame output. */
 declare const WorkflowDelegateResultFinalizationResponseSchema: z.ZodObject<{
   output: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
 }, z.core.$strict>;
 type WorkflowDelegateResultFinalizationRequest = z.infer<typeof WorkflowDelegateResultFinalizationRequestSchema>;
+type WorkflowDelegateResultFinalizationGatewayRequest = z.infer<typeof WorkflowDelegateResultFinalizationGatewayRequestSchema>;
 type WorkflowDelegateEconomics = z.infer<typeof WorkflowDelegateEconomicsSchema>;
 type WorkflowDelegateResultFinalizationResponse = z.infer<typeof WorkflowDelegateResultFinalizationResponseSchema>;
 /**
@@ -2423,26 +2483,28 @@ declare const WorkflowSchemas: {
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
     }, z.core.$strip>;
   };
@@ -2540,26 +2602,28 @@ declare const WorkflowSchemas: {
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>;
     }, z.core.$strip>;
     response: z.ZodObject<{
@@ -2683,26 +2747,28 @@ declare const WorkflowSchemas: {
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
     }, z.core.$strip>;
   };
@@ -2798,26 +2864,28 @@ declare const WorkflowSchemas: {
       syncedAt: z.ZodOptional<z.ZodString>;
       metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strict>], "kind">>;
+    executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      kind: z.ZodLiteral<"path">;
+      path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"source">;
+      filename: z.ZodString;
+      source: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"definition">;
+      workflowId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    requirements: z.ZodOptional<z.ZodObject<{
+      maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+      persistentStorage: z.ZodOptional<z.ZodBoolean>;
+      customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+      recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+      materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "local-directory": "local-directory";
+        "workspace-snapshot": "workspace-snapshot";
+      }>>>;
+    }, z.core.$strip>>;
     successFinalizerId: z.ZodOptional<z.ZodString>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>;
   'definition.updated': z.ZodObject<{
     id: z.ZodString;
@@ -2911,26 +2979,28 @@ declare const WorkflowSchemas: {
       syncedAt: z.ZodOptional<z.ZodString>;
       metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strict>], "kind">>;
+    executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      kind: z.ZodLiteral<"path">;
+      path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"source">;
+      filename: z.ZodString;
+      source: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"definition">;
+      workflowId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    requirements: z.ZodOptional<z.ZodObject<{
+      maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+      persistentStorage: z.ZodOptional<z.ZodBoolean>;
+      customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+      recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+      materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "local-directory": "local-directory";
+        "workspace-snapshot": "workspace-snapshot";
+      }>>>;
+    }, z.core.$strip>>;
     successFinalizerId: z.ZodOptional<z.ZodString>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>;
   'definition.deleted': z.ZodObject<{
     id: z.ZodString;
@@ -2957,25 +3027,6 @@ declare const WorkflowSchemas: {
         kind: z.ZodString;
         id: z.ZodString;
       }, z.core.$strict>], "type">>;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       parentSessionId: z.ZodOptional<z.ZodString>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strip>;
@@ -3009,25 +3060,6 @@ declare const WorkflowSchemas: {
         kind: z.ZodString;
         id: z.ZodString;
       }, z.core.$strict>], "type">>;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       parentSessionId: z.ZodOptional<z.ZodString>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       reason: z.ZodOptional<z.ZodString>;
@@ -3141,26 +3173,28 @@ declare const WorkflowSchemas: {
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>;
     }, z.core.$strict>;
     response: z.ZodObject<{
@@ -3598,12 +3632,71 @@ declare const WorkflowSchemas: {
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>;
     }, z.core.$strip>;
   };
+  /**
+   * Finalize a successful delegate result through the Authority-owned static
+   * gateway. The handler verifies the attempt peer and durable node selector
+   * before invoking the selected local finalizer.
+   */
+  finalizeDelegateResult: {
+    request: z.ZodObject<{
+      executionId: z.ZodString;
+      workflowId: z.ZodString;
+      frameId: z.ZodString;
+      nodeId: z.ZodString;
+      nodeType: z.ZodEnum<{
+        "delegate-agent": "delegate-agent";
+        "delegate-role": "delegate-role";
+      }>;
+      rawResult: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+      toolObservations: z.ZodArray<z.ZodObject<{
+        toolName: z.ZodString;
+        outcome: z.ZodOptional<z.ZodEnum<{
+          success: "success";
+          failure: "failure";
+        }>>;
+        artifact: z.ZodOptional<z.ZodObject<{
+          kind: z.ZodString;
+          id: z.ZodString;
+          revision: z.ZodString;
+        }, z.core.$strict>>;
+      }, z.core.$strict>>;
+      economics: z.ZodOptional<z.ZodObject<{
+        durationMs: z.ZodNumber;
+        inputTokens: z.ZodOptional<z.ZodNumber>;
+        outputTokens: z.ZodOptional<z.ZodNumber>;
+        cachedInputTokens: z.ZodOptional<z.ZodNumber>;
+        toolCallCount: z.ZodOptional<z.ZodNumber>;
+        binding: z.ZodObject<{
+          adapterName: z.ZodString;
+          providerConfigId: z.ZodOptional<z.ZodString>;
+          providerDefinitionId: z.ZodOptional<z.ZodString>;
+          model: z.ZodOptional<z.ZodString>;
+          auth: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodEnum<{
+              explicit: "explicit";
+              inferred: "inferred";
+              none: "none";
+            }>;
+            owner: z.ZodEnum<{
+              provider: "provider";
+              client: "client";
+            }>;
+            methodId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>;
+      }, z.core.$strict>>;
+      finalizerId: z.ZodString;
+    }, z.core.$strict>;
+    response: z.ZodObject<{
+      output: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+    }, z.core.$strict>;
+  };
   getExecution: {
     request: z.ZodObject<{
       executionId: z.ZodString;
@@ -3618,8 +3711,8 @@ declare const WorkflowSchemas: {
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -3676,8 +3769,8 @@ declare const WorkflowSchemas: {
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>>;
       artifactRef: z.ZodOptional<z.ZodObject<{
@@ -3700,8 +3793,8 @@ declare const WorkflowSchemas: {
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -3757,8 +3850,8 @@ declare const WorkflowSchemas: {
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -3938,12 +4031,12 @@ declare const WorkflowSchemas: {
         frameId: z.ZodString;
         nodeId: z.ZodString;
         nodeType: z.ZodEnum<{
-          sequence: "sequence";
           station: "station";
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
-          gate: "gate";
+          sequence: "sequence";
           parallel: "parallel";
+          gate: "gate";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -3997,6 +4090,17 @@ declare const WorkflowSchemas: {
   runFile: {
     request: z.ZodObject<{
       filePath: z.ZodString;
+      materializationSpec: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"local-directory">;
+        workspaceId: z.ZodString;
+        rootDigest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"workspace-snapshot">;
+        snapshotId: z.ZodString;
+        digest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>], "kind">>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       scope: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"global">;
@@ -4143,8 +4247,8 @@ declare const WorkflowSchemas: {
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fresh: "fresh";
         fork: "fork";
+        fresh: "fresh";
       }>>;
       providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         state: z.ZodLiteral<"resolved">;
@@ -4254,8 +4358,8 @@ declare const WorkflowSchemas: {
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fresh: "fresh";
         fork: "fork";
+        fresh: "fresh";
       }>>;
       providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         state: z.ZodLiteral<"resolved">;
@@ -4352,8 +4456,9 @@ declare const WorkflowSchemas: {
    *
    * Trust-boundary rules (enforced by the handler, not the schema):
    * - Local callers: always permitted.
-   * - Direct HMAC callers: `peer.kind === 'workflow-execution' && peer.id === executionId`.
-   * - Relay/E2E callers: authenticated and encrypted peer required.
+   * - Direct HMAC callers: authenticated `workflow-execution-attempt` peer
+   *   whose Authority-issued `executionId` claim matches the request.
+   * - Relay/E2E callers: authenticated, encrypted peer bound to `executionId`.
    */
   getRunContext: {
     request: z.ZodObject<{
@@ -4465,33 +4570,37 @@ declare const WorkflowSchemas: {
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
       workerManifest: z.ZodDefault<z.ZodObject<{
-        packages: z.ZodDefault<z.ZodArray<z.ZodObject<{
-          name: z.ZodString;
-          importPath: z.ZodString;
-        }, z.core.$strip>>>;
-      }, z.core.$strip>>;
+        contributionRefs: z.ZodArray<z.ZodObject<{
+          packageName: z.ZodString;
+          version: z.ZodString;
+          entrypoint: z.ZodString;
+          integrity: z.ZodString;
+        }, z.core.$strict>>;
+      }, z.core.$strict>>;
       inputs: z.ZodDefault<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>;
       config: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       scope: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -4513,38 +4622,8 @@ declare const WorkflowSchemas: {
         id: z.ZodString;
       }, z.core.$strip>>;
       coordinatorSessionId: z.ZodString;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       dispatchMetadata: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       cancelSubject: z.ZodString;
-      context: z.ZodObject<{
-        repoPath: z.ZodString;
-        makaioHome: z.ZodString;
-        os: z.ZodEnum<{
-          darwin: "darwin";
-          linux: "linux";
-          win32: "win32";
-        }>;
-        arch: z.ZodString;
-        worktree: z.ZodOptional<z.ZodString>;
-      }, z.core.$strip>;
       env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
       createdAt: z.ZodNumber;
       suspensionStrategy: z.ZodDefault<z.ZodEnum<{
@@ -4553,9 +4632,20 @@ declare const WorkflowSchemas: {
         "exit-and-resume": "exit-and-resume";
       }>>;
       terminalAuthority: z.ZodOptional<z.ZodEnum<{
-        authority: "authority";
         worker: "worker";
+        authority: "authority";
       }>>;
+      materializationSpec: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"local-directory">;
+        workspaceId: z.ZodString;
+        rootDigest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"workspace-snapshot">;
+        snapshotId: z.ZodString;
+        digest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>], "kind">>;
     }, z.core.$strip>;
   };
   'execution.started': z.ZodObject<{
@@ -4781,12 +4871,12 @@ declare const WorkflowSchemas: {
     frameId: z.ZodString;
     nodeId: z.ZodString;
     nodeType: z.ZodEnum<{
-      sequence: "sequence";
       station: "station";
       "delegate-agent": "delegate-agent";
       "delegate-role": "delegate-role";
-      gate: "gate";
+      sequence: "sequence";
       parallel: "parallel";
+      gate: "gate";
       iterate: "iterate";
       "iterate-chain": "iterate-chain";
       loop: "loop";
@@ -4911,8 +5001,8 @@ declare const WorkflowSchemas: {
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         startedAt: z.ZodNumber;
@@ -4942,12 +5032,12 @@ declare const WorkflowSchemas: {
         frameId: z.ZodString;
         nodeId: z.ZodString;
         nodeType: z.ZodEnum<{
-          sequence: "sequence";
           station: "station";
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
-          gate: "gate";
+          sequence: "sequence";
           parallel: "parallel";
+          gate: "gate";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -4989,8 +5079,8 @@ declare const WorkflowSchemas: {
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>>;
       limit: z.ZodOptional<z.ZodNumber>;
@@ -5006,8 +5096,8 @@ declare const WorkflowSchemas: {
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         startedAt: z.ZodNumber;
@@ -5213,26 +5303,28 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
     }, z.core.$strip>;
   };
@@ -5330,26 +5422,28 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>;
     }, z.core.$strip>;
     response: z.ZodObject<{
@@ -5473,26 +5567,28 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
     }, z.core.$strip>;
   };
@@ -5588,26 +5684,28 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
       syncedAt: z.ZodOptional<z.ZodString>;
       metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strict>], "kind">>;
+    executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      kind: z.ZodLiteral<"path">;
+      path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"source">;
+      filename: z.ZodString;
+      source: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"definition">;
+      workflowId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    requirements: z.ZodOptional<z.ZodObject<{
+      maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+      persistentStorage: z.ZodOptional<z.ZodBoolean>;
+      customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+      recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+      materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "local-directory": "local-directory";
+        "workspace-snapshot": "workspace-snapshot";
+      }>>>;
+    }, z.core.$strip>>;
     successFinalizerId: z.ZodOptional<z.ZodString>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>;
   'definition.updated': z.ZodObject<{
     id: z.ZodString;
@@ -5701,26 +5799,28 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
       syncedAt: z.ZodOptional<z.ZodString>;
       metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strict>], "kind">>;
+    executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      kind: z.ZodLiteral<"path">;
+      path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"source">;
+      filename: z.ZodString;
+      source: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"definition">;
+      workflowId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    requirements: z.ZodOptional<z.ZodObject<{
+      maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+      persistentStorage: z.ZodOptional<z.ZodBoolean>;
+      customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+      recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+      materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "local-directory": "local-directory";
+        "workspace-snapshot": "workspace-snapshot";
+      }>>>;
+    }, z.core.$strip>>;
     successFinalizerId: z.ZodOptional<z.ZodString>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>;
   'definition.deleted': z.ZodObject<{
     id: z.ZodString;
@@ -5747,25 +5847,6 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         kind: z.ZodString;
         id: z.ZodString;
       }, z.core.$strict>], "type">>;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       parentSessionId: z.ZodOptional<z.ZodString>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strip>;
@@ -5799,25 +5880,6 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         kind: z.ZodString;
         id: z.ZodString;
       }, z.core.$strict>], "type">>;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       parentSessionId: z.ZodOptional<z.ZodString>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       reason: z.ZodOptional<z.ZodString>;
@@ -5931,26 +5993,28 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>;
     }, z.core.$strict>;
     response: z.ZodObject<{
@@ -6388,12 +6452,71 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>;
     }, z.core.$strip>;
   };
+  /**
+   * Finalize a successful delegate result through the Authority-owned static
+   * gateway. The handler verifies the attempt peer and durable node selector
+   * before invoking the selected local finalizer.
+   */
+  finalizeDelegateResult: {
+    request: z.ZodObject<{
+      executionId: z.ZodString;
+      workflowId: z.ZodString;
+      frameId: z.ZodString;
+      nodeId: z.ZodString;
+      nodeType: z.ZodEnum<{
+        "delegate-agent": "delegate-agent";
+        "delegate-role": "delegate-role";
+      }>;
+      rawResult: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+      toolObservations: z.ZodArray<z.ZodObject<{
+        toolName: z.ZodString;
+        outcome: z.ZodOptional<z.ZodEnum<{
+          success: "success";
+          failure: "failure";
+        }>>;
+        artifact: z.ZodOptional<z.ZodObject<{
+          kind: z.ZodString;
+          id: z.ZodString;
+          revision: z.ZodString;
+        }, z.core.$strict>>;
+      }, z.core.$strict>>;
+      economics: z.ZodOptional<z.ZodObject<{
+        durationMs: z.ZodNumber;
+        inputTokens: z.ZodOptional<z.ZodNumber>;
+        outputTokens: z.ZodOptional<z.ZodNumber>;
+        cachedInputTokens: z.ZodOptional<z.ZodNumber>;
+        toolCallCount: z.ZodOptional<z.ZodNumber>;
+        binding: z.ZodObject<{
+          adapterName: z.ZodString;
+          providerConfigId: z.ZodOptional<z.ZodString>;
+          providerDefinitionId: z.ZodOptional<z.ZodString>;
+          model: z.ZodOptional<z.ZodString>;
+          auth: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodEnum<{
+              explicit: "explicit";
+              inferred: "inferred";
+              none: "none";
+            }>;
+            owner: z.ZodEnum<{
+              provider: "provider";
+              client: "client";
+            }>;
+            methodId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>;
+      }, z.core.$strict>>;
+      finalizerId: z.ZodString;
+    }, z.core.$strict>;
+    response: z.ZodObject<{
+      output: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+    }, z.core.$strict>;
+  };
   getExecution: {
     request: z.ZodObject<{
       executionId: z.ZodString;
@@ -6408,8 +6531,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -6466,8 +6589,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>>;
       artifactRef: z.ZodOptional<z.ZodObject<{
@@ -6490,8 +6613,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -6547,8 +6670,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -6728,12 +6851,12 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         frameId: z.ZodString;
         nodeId: z.ZodString;
         nodeType: z.ZodEnum<{
-          sequence: "sequence";
           station: "station";
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
-          gate: "gate";
+          sequence: "sequence";
           parallel: "parallel";
+          gate: "gate";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -6787,6 +6910,17 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
   runFile: {
     request: z.ZodObject<{
       filePath: z.ZodString;
+      materializationSpec: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"local-directory">;
+        workspaceId: z.ZodString;
+        rootDigest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"workspace-snapshot">;
+        snapshotId: z.ZodString;
+        digest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>], "kind">>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       scope: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"global">;
@@ -6933,8 +7067,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fresh: "fresh";
         fork: "fork";
+        fresh: "fresh";
       }>>;
       providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         state: z.ZodLiteral<"resolved">;
@@ -7044,8 +7178,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fresh: "fresh";
         fork: "fork";
+        fresh: "fresh";
       }>>;
       providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         state: z.ZodLiteral<"resolved">;
@@ -7142,8 +7276,9 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
    *
    * Trust-boundary rules (enforced by the handler, not the schema):
    * - Local callers: always permitted.
-   * - Direct HMAC callers: `peer.kind === 'workflow-execution' && peer.id === executionId`.
-   * - Relay/E2E callers: authenticated and encrypted peer required.
+   * - Direct HMAC callers: authenticated `workflow-execution-attempt` peer
+   *   whose Authority-issued `executionId` claim matches the request.
+   * - Relay/E2E callers: authenticated, encrypted peer bound to `executionId`.
    */
   getRunContext: {
     request: z.ZodObject<{
@@ -7255,33 +7390,37 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
       workerManifest: z.ZodDefault<z.ZodObject<{
-        packages: z.ZodDefault<z.ZodArray<z.ZodObject<{
-          name: z.ZodString;
-          importPath: z.ZodString;
-        }, z.core.$strip>>>;
-      }, z.core.$strip>>;
+        contributionRefs: z.ZodArray<z.ZodObject<{
+          packageName: z.ZodString;
+          version: z.ZodString;
+          entrypoint: z.ZodString;
+          integrity: z.ZodString;
+        }, z.core.$strict>>;
+      }, z.core.$strict>>;
       inputs: z.ZodDefault<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>;
       config: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       scope: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -7303,38 +7442,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         id: z.ZodString;
       }, z.core.$strip>>;
       coordinatorSessionId: z.ZodString;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       dispatchMetadata: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       cancelSubject: z.ZodString;
-      context: z.ZodObject<{
-        repoPath: z.ZodString;
-        makaioHome: z.ZodString;
-        os: z.ZodEnum<{
-          darwin: "darwin";
-          linux: "linux";
-          win32: "win32";
-        }>;
-        arch: z.ZodString;
-        worktree: z.ZodOptional<z.ZodString>;
-      }, z.core.$strip>;
       env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
       createdAt: z.ZodNumber;
       suspensionStrategy: z.ZodDefault<z.ZodEnum<{
@@ -7343,9 +7452,20 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         "exit-and-resume": "exit-and-resume";
       }>>;
       terminalAuthority: z.ZodOptional<z.ZodEnum<{
-        authority: "authority";
         worker: "worker";
+        authority: "authority";
       }>>;
+      materializationSpec: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"local-directory">;
+        workspaceId: z.ZodString;
+        rootDigest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"workspace-snapshot">;
+        snapshotId: z.ZodString;
+        digest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>], "kind">>;
     }, z.core.$strip>;
   };
   'execution.started': z.ZodObject<{
@@ -7571,12 +7691,12 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
     frameId: z.ZodString;
     nodeId: z.ZodString;
     nodeType: z.ZodEnum<{
-      sequence: "sequence";
       station: "station";
       "delegate-agent": "delegate-agent";
       "delegate-role": "delegate-role";
-      gate: "gate";
+      sequence: "sequence";
       parallel: "parallel";
+      gate: "gate";
       iterate: "iterate";
       "iterate-chain": "iterate-chain";
       loop: "loop";
@@ -7701,8 +7821,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         startedAt: z.ZodNumber;
@@ -7732,12 +7852,12 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         frameId: z.ZodString;
         nodeId: z.ZodString;
         nodeType: z.ZodEnum<{
-          sequence: "sequence";
           station: "station";
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
-          gate: "gate";
+          sequence: "sequence";
           parallel: "parallel";
+          gate: "gate";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -7779,8 +7899,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>>;
       limit: z.ZodOptional<z.ZodNumber>;
@@ -7796,8 +7916,8 @@ declare const WorkflowNamespace$1: _$_makaio_core0.BusNamespaceDefinition<"workf
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         startedAt: z.ZodNumber;
@@ -8003,26 +8123,28 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
     }, z.core.$strip>;
   };
@@ -8120,26 +8242,28 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>;
     }, z.core.$strip>;
     response: z.ZodObject<{
@@ -8263,26 +8387,28 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
     }, z.core.$strip>;
   };
@@ -8378,26 +8504,28 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       syncedAt: z.ZodOptional<z.ZodString>;
       metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strict>], "kind">>;
+    executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      kind: z.ZodLiteral<"path">;
+      path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"source">;
+      filename: z.ZodString;
+      source: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"definition">;
+      workflowId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    requirements: z.ZodOptional<z.ZodObject<{
+      maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+      persistentStorage: z.ZodOptional<z.ZodBoolean>;
+      customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+      recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+      materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "local-directory": "local-directory";
+        "workspace-snapshot": "workspace-snapshot";
+      }>>>;
+    }, z.core.$strip>>;
     successFinalizerId: z.ZodOptional<z.ZodString>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>;
   'definition.updated': z.ZodObject<{
     id: z.ZodString;
@@ -8491,26 +8619,28 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       syncedAt: z.ZodOptional<z.ZodString>;
       metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strict>], "kind">>;
+    executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      kind: z.ZodLiteral<"path">;
+      path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"source">;
+      filename: z.ZodString;
+      source: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"definition">;
+      workflowId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    requirements: z.ZodOptional<z.ZodObject<{
+      maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+      persistentStorage: z.ZodOptional<z.ZodBoolean>;
+      customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+      recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+      materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "local-directory": "local-directory";
+        "workspace-snapshot": "workspace-snapshot";
+      }>>>;
+    }, z.core.$strip>>;
     successFinalizerId: z.ZodOptional<z.ZodString>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>;
   'definition.deleted': z.ZodObject<{
     id: z.ZodString;
@@ -8532,30 +8662,11 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"session">;
         id: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        type: z.ZodLiteral<"external">;
-        kind: z.ZodString;
-        id: z.ZodString;
-      }, z.core.$strict>], "type">>;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
+      }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"external">;
+        kind: z.ZodString;
+        id: z.ZodString;
+      }, z.core.$strict>], "type">>;
       parentSessionId: z.ZodOptional<z.ZodString>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strip>;
@@ -8589,25 +8700,6 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         kind: z.ZodString;
         id: z.ZodString;
       }, z.core.$strict>], "type">>;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       parentSessionId: z.ZodOptional<z.ZodString>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       reason: z.ZodOptional<z.ZodString>;
@@ -8721,26 +8813,28 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>;
     }, z.core.$strict>;
     response: z.ZodObject<{
@@ -9178,12 +9272,71 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>;
     }, z.core.$strip>;
   };
+  /**
+   * Finalize a successful delegate result through the Authority-owned static
+   * gateway. The handler verifies the attempt peer and durable node selector
+   * before invoking the selected local finalizer.
+   */
+  finalizeDelegateResult: {
+    request: z.ZodObject<{
+      executionId: z.ZodString;
+      workflowId: z.ZodString;
+      frameId: z.ZodString;
+      nodeId: z.ZodString;
+      nodeType: z.ZodEnum<{
+        "delegate-agent": "delegate-agent";
+        "delegate-role": "delegate-role";
+      }>;
+      rawResult: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+      toolObservations: z.ZodArray<z.ZodObject<{
+        toolName: z.ZodString;
+        outcome: z.ZodOptional<z.ZodEnum<{
+          success: "success";
+          failure: "failure";
+        }>>;
+        artifact: z.ZodOptional<z.ZodObject<{
+          kind: z.ZodString;
+          id: z.ZodString;
+          revision: z.ZodString;
+        }, z.core.$strict>>;
+      }, z.core.$strict>>;
+      economics: z.ZodOptional<z.ZodObject<{
+        durationMs: z.ZodNumber;
+        inputTokens: z.ZodOptional<z.ZodNumber>;
+        outputTokens: z.ZodOptional<z.ZodNumber>;
+        cachedInputTokens: z.ZodOptional<z.ZodNumber>;
+        toolCallCount: z.ZodOptional<z.ZodNumber>;
+        binding: z.ZodObject<{
+          adapterName: z.ZodString;
+          providerConfigId: z.ZodOptional<z.ZodString>;
+          providerDefinitionId: z.ZodOptional<z.ZodString>;
+          model: z.ZodOptional<z.ZodString>;
+          auth: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodEnum<{
+              explicit: "explicit";
+              inferred: "inferred";
+              none: "none";
+            }>;
+            owner: z.ZodEnum<{
+              provider: "provider";
+              client: "client";
+            }>;
+            methodId: z.ZodString;
+          }, z.core.$strict>>;
+        }, z.core.$strict>;
+      }, z.core.$strict>>;
+      finalizerId: z.ZodString;
+    }, z.core.$strict>;
+    response: z.ZodObject<{
+      output: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+    }, z.core.$strict>;
+  };
   getExecution: {
     request: z.ZodObject<{
       executionId: z.ZodString;
@@ -9198,8 +9351,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -9256,8 +9409,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>>;
       artifactRef: z.ZodOptional<z.ZodObject<{
@@ -9280,8 +9433,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -9337,8 +9490,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         inputs: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
@@ -9518,12 +9671,12 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         frameId: z.ZodString;
         nodeId: z.ZodString;
         nodeType: z.ZodEnum<{
-          sequence: "sequence";
           station: "station";
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
-          gate: "gate";
+          sequence: "sequence";
           parallel: "parallel";
+          gate: "gate";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -9577,6 +9730,17 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
   runFile: {
     request: z.ZodObject<{
       filePath: z.ZodString;
+      materializationSpec: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"local-directory">;
+        workspaceId: z.ZodString;
+        rootDigest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"workspace-snapshot">;
+        snapshotId: z.ZodString;
+        digest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>], "kind">>;
       triggerPayload: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       scope: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"global">;
@@ -9723,8 +9887,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fresh: "fresh";
         fork: "fork";
+        fresh: "fresh";
       }>>;
       providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         state: z.ZodLiteral<"resolved">;
@@ -9834,8 +9998,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       harnessId: z.ZodOptional<z.ZodString>;
       systemPrompt: z.ZodOptional<z.ZodString>;
       contextMode: z.ZodOptional<z.ZodEnum<{
-        fresh: "fresh";
         fork: "fork";
+        fresh: "fresh";
       }>>;
       providerContext: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         state: z.ZodLiteral<"resolved">;
@@ -9932,8 +10096,9 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
    *
    * Trust-boundary rules (enforced by the handler, not the schema):
    * - Local callers: always permitted.
-   * - Direct HMAC callers: `peer.kind === 'workflow-execution' && peer.id === executionId`.
-   * - Relay/E2E callers: authenticated and encrypted peer required.
+   * - Direct HMAC callers: authenticated `workflow-execution-attempt` peer
+   *   whose Authority-issued `executionId` claim matches the request.
+   * - Relay/E2E callers: authenticated, encrypted peer bound to `executionId`.
    */
   getRunContext: {
     request: z.ZodObject<{
@@ -10045,33 +10210,37 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           syncedAt: z.ZodOptional<z.ZodString>;
           metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         }, z.core.$strict>], "kind">>;
+        executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          kind: z.ZodLiteral<"path">;
+          path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"source">;
+          filename: z.ZodString;
+          source: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+          kind: z.ZodLiteral<"definition">;
+          workflowId: z.ZodString;
+        }, z.core.$strict>], "kind">>;
+        requirements: z.ZodOptional<z.ZodObject<{
+          maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+          persistentStorage: z.ZodOptional<z.ZodBoolean>;
+          customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+          recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+          materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "local-directory": "local-directory";
+            "workspace-snapshot": "workspace-snapshot";
+          }>>>;
+        }, z.core.$strip>>;
         successFinalizerId: z.ZodOptional<z.ZodString>;
-        executionHints: z.ZodOptional<z.ZodObject<{
-          source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            kind: z.ZodLiteral<"path">;
-            path: z.ZodString;
-          }, z.core.$strict>, z.ZodObject<{
-            kind: z.ZodLiteral<"source">;
-            filename: z.ZodString;
-            source: z.ZodString;
-          }, z.core.$strict>], "kind">>;
-          requirements: z.ZodOptional<z.ZodObject<{
-            isolation: z.ZodOptional<z.ZodEnum<{
-              local: "local";
-              remote: "remote";
-              container: "container";
-            }>>;
-            capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-          }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-          providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       }, z.core.$strip>>;
       workerManifest: z.ZodDefault<z.ZodObject<{
-        packages: z.ZodDefault<z.ZodArray<z.ZodObject<{
-          name: z.ZodString;
-          importPath: z.ZodString;
-        }, z.core.$strip>>>;
-      }, z.core.$strip>>;
+        contributionRefs: z.ZodArray<z.ZodObject<{
+          packageName: z.ZodString;
+          version: z.ZodString;
+          entrypoint: z.ZodString;
+          integrity: z.ZodString;
+        }, z.core.$strict>>;
+      }, z.core.$strict>>;
       inputs: z.ZodDefault<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>;
       config: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       scope: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -10093,38 +10262,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         id: z.ZodString;
       }, z.core.$strip>>;
       coordinatorSessionId: z.ZodString;
-      executionHints: z.ZodOptional<z.ZodObject<{
-        source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-          kind: z.ZodLiteral<"path">;
-          path: z.ZodString;
-        }, z.core.$strict>, z.ZodObject<{
-          kind: z.ZodLiteral<"source">;
-          filename: z.ZodString;
-          source: z.ZodString;
-        }, z.core.$strict>], "kind">>;
-        requirements: z.ZodOptional<z.ZodObject<{
-          isolation: z.ZodOptional<z.ZodEnum<{
-            local: "local";
-            remote: "remote";
-            container: "container";
-          }>>;
-          capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-        providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
       dispatchMetadata: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
       cancelSubject: z.ZodString;
-      context: z.ZodObject<{
-        repoPath: z.ZodString;
-        makaioHome: z.ZodString;
-        os: z.ZodEnum<{
-          darwin: "darwin";
-          linux: "linux";
-          win32: "win32";
-        }>;
-        arch: z.ZodString;
-        worktree: z.ZodOptional<z.ZodString>;
-      }, z.core.$strip>;
       env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
       createdAt: z.ZodNumber;
       suspensionStrategy: z.ZodDefault<z.ZodEnum<{
@@ -10133,9 +10272,20 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         "exit-and-resume": "exit-and-resume";
       }>>;
       terminalAuthority: z.ZodOptional<z.ZodEnum<{
-        authority: "authority";
         worker: "worker";
+        authority: "authority";
       }>>;
+      materializationSpec: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"local-directory">;
+        workspaceId: z.ZodString;
+        rootDigest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"workspace-snapshot">;
+        snapshotId: z.ZodString;
+        digest: z.ZodString;
+        sourcePath: z.ZodString;
+      }, z.core.$strict>], "kind">>;
     }, z.core.$strip>;
   };
   'execution.started': z.ZodObject<{
@@ -10361,12 +10511,12 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
     frameId: z.ZodString;
     nodeId: z.ZodString;
     nodeType: z.ZodEnum<{
-      sequence: "sequence";
       station: "station";
       "delegate-agent": "delegate-agent";
       "delegate-role": "delegate-role";
-      gate: "gate";
+      sequence: "sequence";
       parallel: "parallel";
+      gate: "gate";
       iterate: "iterate";
       "iterate-chain": "iterate-chain";
       loop: "loop";
@@ -10491,8 +10641,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         startedAt: z.ZodNumber;
@@ -10522,12 +10672,12 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         frameId: z.ZodString;
         nodeId: z.ZodString;
         nodeType: z.ZodEnum<{
-          sequence: "sequence";
           station: "station";
           "delegate-agent": "delegate-agent";
           "delegate-role": "delegate-role";
-          gate: "gate";
+          sequence: "sequence";
           parallel: "parallel";
+          gate: "gate";
           iterate: "iterate";
           "iterate-chain": "iterate-chain";
           loop: "loop";
@@ -10569,8 +10719,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         completed: "completed";
         cancelled: "cancelled";
         failed: "failed";
-        running: "running";
         paused: "paused";
+        running: "running";
         finalizing: "finalizing";
       }>>;
       limit: z.ZodOptional<z.ZodNumber>;
@@ -10586,8 +10736,8 @@ declare const WorkflowSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           completed: "completed";
           cancelled: "cancelled";
           failed: "failed";
-          running: "running";
           paused: "paused";
+          running: "running";
           finalizing: "finalizing";
         }>;
         startedAt: z.ZodNumber;
@@ -10717,6 +10867,26 @@ declare function serializeArtifactRef$1(ref: WorkflowArtifactRef): string;
 declare function parseArtifactRef(key: string): WorkflowArtifactRef;
 //#endregion
 //#region core/contracts/src/workflow/run-context.d.ts
+/**
+ * Durable source descriptor for a workflow execution.
+ *
+ * Bootstrap worker configuration may contain a worker-local path. Durable
+ * path sources are instead workspace-relative and acquire their local
+ * realization only through a materialization spec.
+ */
+declare const WorkflowRunContextSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  kind: z.ZodLiteral<"path">;
+  path: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  kind: z.ZodLiteral<"source">;
+  filename: z.ZodString;
+  source: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  kind: z.ZodLiteral<"definition">;
+  workflowId: z.ZodString;
+}, z.core.$strict>], "kind">;
+/** Durable source descriptor for a workflow execution. */
+type WorkflowRunContextSource = z.infer<typeof WorkflowRunContextSourceSchema>;
 /**
  * Persisted, per-execution snapshot of the configuration and context needed to
  * run a workflow.
@@ -10834,33 +11004,37 @@ declare const WorkflowRunContextSchema$1: z.ZodObject<{
       syncedAt: z.ZodOptional<z.ZodString>;
       metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strict>], "kind">>;
+    executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      kind: z.ZodLiteral<"path">;
+      path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"source">;
+      filename: z.ZodString;
+      source: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"definition">;
+      workflowId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    requirements: z.ZodOptional<z.ZodObject<{
+      maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+      persistentStorage: z.ZodOptional<z.ZodBoolean>;
+      customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+      recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+      materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "local-directory": "local-directory";
+        "workspace-snapshot": "workspace-snapshot";
+      }>>>;
+    }, z.core.$strip>>;
     successFinalizerId: z.ZodOptional<z.ZodString>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>>;
   workerManifest: z.ZodDefault<z.ZodObject<{
-    packages: z.ZodDefault<z.ZodArray<z.ZodObject<{
-      name: z.ZodString;
-      importPath: z.ZodString;
-    }, z.core.$strip>>>;
-  }, z.core.$strip>>;
+    contributionRefs: z.ZodArray<z.ZodObject<{
+      packageName: z.ZodString;
+      version: z.ZodString;
+      entrypoint: z.ZodString;
+      integrity: z.ZodString;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
   inputs: z.ZodDefault<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>;
   config: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
   scope: z.ZodDefault<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -10882,38 +11056,8 @@ declare const WorkflowRunContextSchema$1: z.ZodObject<{
     id: z.ZodString;
   }, z.core.$strip>>;
   coordinatorSessionId: z.ZodString;
-  executionHints: z.ZodOptional<z.ZodObject<{
-    source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-      kind: z.ZodLiteral<"path">;
-      path: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-      kind: z.ZodLiteral<"source">;
-      filename: z.ZodString;
-      source: z.ZodString;
-    }, z.core.$strict>], "kind">>;
-    requirements: z.ZodOptional<z.ZodObject<{
-      isolation: z.ZodOptional<z.ZodEnum<{
-        local: "local";
-        remote: "remote";
-        container: "container";
-      }>>;
-      capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-    providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-  }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   dispatchMetadata: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
   cancelSubject: z.ZodString;
-  context: z.ZodObject<{
-    repoPath: z.ZodString;
-    makaioHome: z.ZodString;
-    os: z.ZodEnum<{
-      darwin: "darwin";
-      linux: "linux";
-      win32: "win32";
-    }>;
-    arch: z.ZodString;
-    worktree: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>;
   env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
   createdAt: z.ZodNumber;
   suspensionStrategy: z.ZodDefault<z.ZodEnum<{
@@ -10922,11 +11066,22 @@ declare const WorkflowRunContextSchema$1: z.ZodObject<{
     "exit-and-resume": "exit-and-resume";
   }>>;
   terminalAuthority: z.ZodOptional<z.ZodEnum<{
-    authority: "authority";
     worker: "worker";
+    authority: "authority";
   }>>;
+  materializationSpec: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"local-directory">;
+    workspaceId: z.ZodString;
+    rootDigest: z.ZodString;
+    sourcePath: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"workspace-snapshot">;
+    snapshotId: z.ZodString;
+    digest: z.ZodString;
+    sourcePath: z.ZodString;
+  }, z.core.$strict>], "kind">>;
 }, z.core.$strip>;
-type WorkflowRunContext = z.infer<typeof WorkflowRunContextSchema$1>;
+type WorkflowRunContext$1 = z.infer<typeof WorkflowRunContextSchema$1>;
 //#endregion
 //#region core/contracts/src/workflow/walk.d.ts
 /** How the current node was reached from its parent. */
@@ -11080,7 +11235,7 @@ type WorkflowWorkerBusAuth = z.infer<typeof WorkflowWorkerBusAuthSchema>;
  * - `source`: load workflow from inline source code with a virtual filename
  * - `definition`: load workflow by its registered definition ID
  */
-declare const WorkflowWorkerSourceSchema$1: z.ZodDiscriminatedUnion<[z.ZodObject<{
+declare const WorkflowWorkerSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   kind: z.ZodLiteral<"path">;
   path: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
@@ -11091,7 +11246,7 @@ declare const WorkflowWorkerSourceSchema$1: z.ZodDiscriminatedUnion<[z.ZodObject
   kind: z.ZodLiteral<"definition">;
   workflowId: z.ZodString;
 }, z.core.$strict>], "kind">;
-type WorkflowWorkerSource$1 = z.infer<typeof WorkflowWorkerSourceSchema$1>;
+type WorkflowWorkerSource$1 = z.infer<typeof WorkflowWorkerSourceSchema>;
 /**
  * Full configuration passed to a workflow worker process at startup.
  *
@@ -11202,26 +11357,28 @@ declare const WorkflowWorkerConfigSchema$1: z.ZodObject<{
       syncedAt: z.ZodOptional<z.ZodString>;
       metadata: z.ZodDefault<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
     }, z.core.$strict>], "kind">>;
+    executableSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+      kind: z.ZodLiteral<"path">;
+      path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"source">;
+      filename: z.ZodString;
+      source: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      kind: z.ZodLiteral<"definition">;
+      workflowId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    requirements: z.ZodOptional<z.ZodObject<{
+      maxRuntimeMs: z.ZodOptional<z.ZodNumber>;
+      persistentStorage: z.ZodOptional<z.ZodBoolean>;
+      customCapabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+      recoverableAllocation: z.ZodOptional<z.ZodBoolean>;
+      materializationModes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "local-directory": "local-directory";
+        "workspace-snapshot": "workspace-snapshot";
+      }>>>;
+    }, z.core.$strip>>;
     successFinalizerId: z.ZodOptional<z.ZodString>;
-    executionHints: z.ZodOptional<z.ZodObject<{
-      source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"path">;
-        path: z.ZodString;
-      }, z.core.$strict>, z.ZodObject<{
-        kind: z.ZodLiteral<"source">;
-        filename: z.ZodString;
-        source: z.ZodString;
-      }, z.core.$strict>], "kind">>;
-      requirements: z.ZodOptional<z.ZodObject<{
-        isolation: z.ZodOptional<z.ZodEnum<{
-          local: "local";
-          remote: "remote";
-          container: "container";
-        }>>;
-        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-      }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-      providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   }, z.core.$strip>>;
   executionId: z.ZodString;
   workflowId: z.ZodString;
@@ -11252,38 +11409,8 @@ declare const WorkflowWorkerConfigSchema$1: z.ZodObject<{
     kind: z.ZodLiteral<"hmac">;
     secret: z.ZodString;
   }, z.core.$strict>], "kind">>;
-  context: z.ZodObject<{
-    repoPath: z.ZodString;
-    makaioHome: z.ZodString;
-    os: z.ZodEnum<{
-      darwin: "darwin";
-      linux: "linux";
-      win32: "win32";
-    }>;
-    arch: z.ZodString;
-    worktree: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>;
   env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
   coordinatorSessionId: z.ZodString;
-  executionHints: z.ZodOptional<z.ZodObject<{
-    source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-      kind: z.ZodLiteral<"path">;
-      path: z.ZodString;
-    }, z.core.$strict>, z.ZodObject<{
-      kind: z.ZodLiteral<"source">;
-      filename: z.ZodString;
-      source: z.ZodString;
-    }, z.core.$strict>], "kind">>;
-    requirements: z.ZodOptional<z.ZodObject<{
-      isolation: z.ZodOptional<z.ZodEnum<{
-        local: "local";
-        remote: "remote";
-        container: "container";
-      }>>;
-      capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-    providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-  }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
   cancelSubject: z.ZodString;
   suspensionStrategy: z.ZodDefault<z.ZodEnum<{
     "wait-in-process": "wait-in-process";
@@ -11291,11 +11418,49 @@ declare const WorkflowWorkerConfigSchema$1: z.ZodObject<{
     "exit-and-resume": "exit-and-resume";
   }>>;
   terminalAuthority: z.ZodOptional<z.ZodEnum<{
-    authority: "authority";
     worker: "worker";
+    authority: "authority";
   }>>;
+  materializationSpec: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"local-directory">;
+    workspaceId: z.ZodString;
+    rootDigest: z.ZodString;
+    sourcePath: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"workspace-snapshot">;
+    snapshotId: z.ZodString;
+    digest: z.ZodString;
+    sourcePath: z.ZodString;
+  }, z.core.$strict>], "kind">>;
 }, z.core.$strip>;
 type WorkflowWorkerConfig$1 = z.infer<typeof WorkflowWorkerConfigSchema$1>;
+/**
+ * Ephemeral realization context produced by the materializer on the worker.
+ *
+ * Contains worker-local absolute paths and platform information. This type
+ * is NEVER persisted as part of {@link WorkflowRunContext} or any durable
+ * record. It exists only for the lifetime of a single worker process and
+ * is constructed from the portable {@link WorkerMaterializationSpec} after
+ * the materializer resolves the workspace on the local filesystem.
+ *
+ * - `workspaceRoot`: absolute path to the realized workspace root on this worker.
+ * - `sourcePath`: absolute path to the workflow source file within the workspace.
+ * - `contributionEntrypoints`: absolute paths to resolved contribution entrypoints.
+ * - `platform`: worker operating system (`darwin`, `linux`, `win32`).
+ * - `arch`: worker CPU architecture (e.g. `arm64`, `x64`).
+ */
+interface WorkerRuntimeContext$1 {
+  /** Absolute path to the realized workspace root on this worker. */
+  readonly workspaceRoot: string;
+  /** Absolute path to the workflow source file within the workspace. */
+  readonly sourcePath: string;
+  /** Absolute paths to resolved contribution entrypoints in load order. */
+  readonly contributionEntrypoints: readonly string[];
+  /** Worker operating system. */
+  readonly platform: 'darwin' | 'linux' | 'win32';
+  /** Worker CPU architecture (e.g. `'arm64'`, `'x64'`). */
+  readonly arch: string;
+}
 /**
  * Shared identity fields present on every workflow run result variant.
  */
@@ -11419,7 +11584,7 @@ type WorkflowRunResult$1 = WorkflowCompletedRunResult | WorkflowFailedRunResult
  * When `status` is `'paused'`, both `pausedAtGateId` and `pausedAtFrameId`
  * are required to uniquely identify the suspended gate frame.
  */
-declare const WorkflowRunResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+declare const WorkflowRunResultSchema$1: z.ZodDiscriminatedUnion<[z.ZodObject<{
   executionId: z.ZodString;
   workflowId: z.ZodString;
   status: z.ZodLiteral<"completed">;
@@ -11532,25 +11697,22 @@ declare const WorkflowRunResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
  *
  * Fully serializable so it can cross worker-thread, process, container, or
  * remote node boundaries without carrying runtime objects.
- */
-declare const WorkerContributionPackageRefSchema: z.ZodObject<{
-  name: z.ZodString;
-  importPath: z.ZodString;
-}, z.core.$strip>;
-type WorkerContributionPackageRef = z.infer<typeof WorkerContributionPackageRefSchema>;
+ *
 /**
- * Serializable manifest declaring worker-local extension packages.
+ * Serializable manifest declaring the exact worker-local extension packages.
  *
- * The manifest contains concrete import paths, not project-level desired
- * package specs. Product pool dispatch resolves desired project manifests into
- * this worker manifest before provisioning a WorkerNode.
+ * Product pool dispatch resolves project-level package pins into this exact
+ * identity before provisioning. Materializers verify every ref, and workers
+ * load only the verified worker-local entrypoints returned by materialization.
  */
 declare const WorkerContributionManifestSchema: z.ZodObject<{
-  packages: z.ZodDefault<z.ZodArray<z.ZodObject<{
-    name: z.ZodString;
-    importPath: z.ZodString;
-  }, z.core.$strip>>>;
-}, z.core.$strip>;
+  contributionRefs: z.ZodArray<z.ZodObject<{
+    packageName: z.ZodString;
+    version: z.ZodString;
+    entrypoint: z.ZodString;
+    integrity: z.ZodString;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
 type WorkerContributionManifest$1 = z.infer<typeof WorkerContributionManifestSchema>;
 /**
  * Optional controls for one workflow runner invocation.
@@ -11563,6 +11725,25 @@ interface WorkflowRunnerRunOptions$1 {
    */
   readonly dispatchMetadata?: z.infer<typeof JsonObjectContractSchema>;
 }
+/**
+ * Envelope returned by {@link IWorkflowRunner.run} that tells the caller
+ * whether the terminal result has already been durably committed by an
+ * Authority or still needs host-side finalization.
+ *
+ * - `uncommitted`: the runner produced the result but the durable lifecycle
+ *   transition has not been performed. The host executor must finalize or
+ *   park the execution (in-process and Piscina runners).
+ * - `authority-committed`: the Authority outcome RPC has converged canonical
+ *   state. The host executor verifies durable state but must not invoke
+ *   the fallback finalizer (WorkerNode dispatch runners).
+ */
+type WorkflowRunnerCompletion$1 = {
+  readonly state: 'uncommitted';
+  readonly result: WorkflowRunResult$1;
+} | {
+  readonly state: 'authority-committed';
+  readonly result: WorkflowRunResult$1;
+};
 /**
  * Contract for dispatching a full workflow execution to an isolated environment.
  *
@@ -11582,9 +11763,9 @@ interface IWorkflowRunner$1 {
    * @param signal - AbortSignal for cooperative cancellation.
    * @param manifest - Optional per-call contribution manifest. Overrides the runner's default.
    * @param options - Optional per-run controls for dispatch-capable runners.
-   * @returns The execution result with status-specific terminal details.
+   * @returns Completion envelope indicating whether the result needs host finalization.
    */
-  run(config: WorkflowWorkerConfig$1, signal: AbortSignal, manifest?: WorkerContributionManifest$1, options?: WorkflowRunnerRunOptions$1): Promise<WorkflowRunResult$1>;
+  run(config: WorkflowWorkerConfig$1, signal: AbortSignal, manifest?: WorkerContributionManifest$1, options?: WorkflowRunnerRunOptions$1): Promise<WorkflowRunnerCompletion$1>;
   /**
    * Release underlying resources (thread pool, processes, connections).
    *
@@ -11736,8 +11917,8 @@ declare const WorkLogExecutionSummarySchema: z.ZodObject<{
     completed: "completed";
     cancelled: "cancelled";
     failed: "failed";
-    running: "running";
     paused: "paused";
+    running: "running";
     finalizing: "finalizing";
   }>;
   startedAt: z.ZodNumber;
@@ -11763,12 +11944,12 @@ declare const WorkLogFrameEntrySchema$1: z.ZodObject<{
   frameId: z.ZodString;
   nodeId: z.ZodString;
   nodeType: z.ZodEnum<{
-    sequence: "sequence";
     station: "station";
     "delegate-agent": "delegate-agent";
     "delegate-role": "delegate-role";
-    gate: "gate";
+    sequence: "sequence";
     parallel: "parallel";
+    gate: "gate";
     iterate: "iterate";
     "iterate-chain": "iterate-chain";
     loop: "loop";
@@ -12289,8 +12470,8 @@ type IterateHandler<TTrigger = unknown, TPreviousSteps extends Record<string, Pr
  * - fresh: Start with clean context
  */
 declare const ContextModeSchema$1: z.ZodEnum<{
-  fresh: "fresh";
   fork: "fork";
+  fresh: "fresh";
 }>;
 type ContextMode = z.infer<typeof ContextModeSchema$1>;
 /**
@@ -12425,8 +12606,8 @@ declare const SubagentConfigSchema$1: z.ZodObject<{
     "extra-high": "extra-high";
   }>>;
   contextMode: z.ZodDefault<z.ZodEnum<{
-    fresh: "fresh";
     fork: "fork";
+    fresh: "fresh";
   }>>;
   tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
   disallowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -12595,8 +12776,8 @@ declare const SpawnSubagentRpcRequestSchema$1: z.ZodObject<{
       "extra-high": "extra-high";
     }>>;
     contextMode: z.ZodDefault<z.ZodEnum<{
-      fresh: "fresh";
       fork: "fork";
+      fresh: "fresh";
     }>>;
     tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
     disallowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -13405,49 +13586,4 @@ declare function defineWorkflowBundle(config: {
   /** Non-empty list of built workflows to include in the bundle. */readonly workflows: readonly BuiltWorkflow[];
 }): WorkflowBundle;
 //#endregion
-//#region core/contracts/src/workflow/execution-hints.d.ts
-/**
- * Executable source override for module-backed stored definitions.
- *
- * Generated workflow definitions can carry only trigger/provenance metadata
- * while their runtime remains in a module. This hint lets the executor dispatch
- * those definitions through a concrete file or inline source without knowing
- * which extension produced them.
- */
-declare const ExecutionSourceHintSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
-  kind: z.ZodLiteral<"path">;
-  path: z.ZodString;
-}, z.core.$strict>, z.ZodObject<{
-  kind: z.ZodLiteral<"source">;
-  filename: z.ZodString;
-  source: z.ZodString;
-}, z.core.$strict>], "kind">;
-/**
- * Advisory hints for worker provisioning passed to the workflow executor.
- *
- * Most values remain opaque provider-specific scheduling, pool, isolation, or
- * capability hints. `source` is the one generic executable hint: when present,
- * the executor uses it as the worker source for definition-backed starts.
- */
-declare const ExecutionHintsSchema$1: z.ZodObject<{
-  source: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
-    kind: z.ZodLiteral<"path">;
-    path: z.ZodString;
-  }, z.core.$strict>, z.ZodObject<{
-    kind: z.ZodLiteral<"source">;
-    filename: z.ZodString;
-    source: z.ZodString;
-  }, z.core.$strict>], "kind">>;
-  requirements: z.ZodOptional<z.ZodObject<{
-    isolation: z.ZodOptional<z.ZodEnum<{
-      local: "local";
-      remote: "remote";
-      container: "container";
-    }>>;
-    capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
-  }, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>>;
-  providers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-}, z.core.$catchall<z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>>>;
-type ExecutionHints = z.infer<typeof ExecutionHintsSchema$1>;
-//#endregion
-export { SendToSubagentResponse as $, WorkflowGateNode as $i, JsonPatchOperation$1 as $n, WorkflowFinalizationIntent as $r, RegisterExternalExecutionRequestSchema as $t, LoopGateHandler$1 as A, WorkflowStateDefinitionSchema as Aa, WorkflowArtifactBindingSchema as Ai, parseArtifactRef as An, WorkflowCancelPayload as Ar, WorkflowTriggerDef as At, DEFAULT_CONSTRAINTS$1 as B, WorkflowDelegateAgentNodeSchema as Bi, ArtifactQuerySourceSchema as Bn, WorkflowTriggerTypeRecord as Br, WorkLogGateEventSchema as Bt, NodeOptions as C, WorkflowResolvedRole as Ca, ExtensionWorkflowTrigger$1 as Ci, WalkRelationship as Cn, StepRunnerPlatformDefaults$1 as Cr, CronTriggerPayload as Ct, WorkflowStateAuthoringDefinition as D, WorkflowSourceLocation as Da, LoopGateOutcome as Di, WorkflowRunContextSchema$1 as Dn, TokenUsage as Dr, ManualWorkflowTrigger as Dt, WorkflowBuilder as E, WorkflowSequenceNodeSchema as Ea, GateInstanceListQuerySchema$1 as Ei, WorkflowRunContext as En, StepTelemetrySchema as Er, ExtractTriggerPayload as Et, CompleteTaskResponse as F, WorkflowDefinition$1 as Fi, WorkflowSchemas as Fn, WorkflowStepType as Fr, WorkLogExecutionSummary as Ft, ListSubagentsBySessionResponse as G, WorkflowExecution$1 as Gi, ContextBundle as Gn, WorkflowDelegateResultFinalizationResponse as Gr, CompleteExternalExecutionRequest as Gt, KillSubagentRequest as H, WorkflowDelegateRoleNodeSchema as Hi, BusEventPublishTargetSchema as Hn, WorkflowDelegateEconomicsSchema as Hr, WorkLogStatsSchema as Ht, CompletionMode$1 as I, WorkflowDefinitionProvenance as Ii, WorkflowSubjects$1 as In, WorkflowStepTypeSchema$1 as Ir, WorkLogExecutionSummarySchema as It, ReportProgressRequest as J, WorkflowExecutionScopeSchema as Ji, ContextPublishTargetSchema as Jn, WorkflowDelegateToolObservation as Jr, ExternalExecutionFrameCompletion as Jt, PendingRequest$1 as K, WorkflowExecutionSchema$1 as Ki, ContextBundleSchema as Kn, WorkflowDelegateResultFinalizationResponseSchema as Kr, CompleteExternalExecutionRequestSchema as Kt, CompletionModeSchema as L, WorkflowDefinitionProvenanceSchema as Li, ArtifactPublishTarget as Ln, createStepCancelSubject$1 as Lr, WorkLogFrameEntry as Lt, AwaitSubagentRequest as M, WorkflowStationNodeSchema as Ma, WorkflowArtifactWriteDeclarationSchema as Mi, WorkflowNamespace$1 as Mn, WorkflowCancelSubject as Mr, WorkLogArtifactWriteSchema as Mt, AwaitSubagentResponse$1 as N, WorkflowTrigger as Na, WorkflowCondition as Ni, WorkflowProgressUpdate as Nn, WorkflowRunnerStepType as Nr, WorkLogDynamicNodeMaterialization as Nt, WorkflowZodSchemas$1 as O, WorkflowSourceLocationSchema as Oa, LoopGateOutcomeSchema as Oi, WorkflowArtifactRef as On, TokenUsageSchema as Or, WebhookTriggerPayload as Ot, CompleteTaskRequest as P, WorkflowTriggerSchema as Pa, WorkflowConditionSchema as Pi, WorkflowProgressUpdateSchema as Pn, WorkflowRunnerStepTypeSchema as Pr, WorkLogDynamicNodeMaterializationSchema as Pt, SendToSubagentRequest as Q, WorkflowGateInstanceSchema$1 as Qi, ResolvedContextEntrySchema as Qn, WorkflowFinalizationDeliveryResultSchema as Qr, RegisterExternalExecutionRequest as Qt, ContextMode as R, WorkflowDefinitionSchema$1 as Ri, ArtifactPublishTargetSchema as Rn, createWorkflowCancelSubject$1 as Rr, WorkLogFrameEntrySchema$1 as Rt, LoopOptions as S, WorkflowResolvedAgentSchema as Sa, ExecutionsByArtifactRefsQuerySchema$1 as Si, WalkContext as Sn, StepRunnerBusAuthSchema as Sr, BusEventWorkflowTrigger as St, ParallelOptions as T, WorkflowSequenceNode as Ta, GateInstanceListQuery as Ti, walkWorkflowDefinition$1 as Tn, StepTelemetry as Tr, ExtensionWorkflowTrigger as Tt, KillSubagentResponse as U, WorkflowDynamicRegion as Ui, BusRequestSource as Un, WorkflowDelegateResultFinalizationRequest as Ur, WorkLogUsageSummary as Ut, ExecuteSubagentResponse as V, WorkflowDelegateRoleNode as Vi, BusEventPublishTarget as Vn, WorkflowDelegateEconomics as Vr, WorkLogStats as Vt, ListSubagentsBySessionRequest as W, WorkflowDynamicRegionSchema as Wi, BusRequestSourceSchema as Wn, WorkflowDelegateResultFinalizationRequestSchema as Wr, WorkLogUsageSummarySchema as Wt, RequestInputRpcRequest as X, WorkflowFrameStateSchema$1 as Xi, ContextSourceSchema as Xn, WorkflowFinalizationClaim as Xr, ExternalExecutionFrameStart as Xt, ReportProgressResponse as Y, WorkflowFrameState$1 as Yi, ContextSource as Yn, WorkflowDelegateToolObservationSchema as Yr, ExternalExecutionFrameCompletionSchema as Yt, RequestInputRpcResponse as Z, WorkflowGateInstance as Zi, ResolvedContextEntry as Zn, WorkflowFinalizationClaimSchema$1 as Zr, ExternalExecutionFrameStartSchema as Zt, BuiltWorkflow as _, WorkflowParallelMode as _a, ExecutionListQuery as _i, ProjectedNodeRole as _n, StepRunConfig as _r, StationStepContext as _t, defineWorkflowBundle as a, WorkflowIterateNode as aa, createWorkflowDelegateResultFinalizerNamespace$1 as ai, WorkflowRunResult$1 as an, ExecutionLinkListQuerySchema$1 as ar, SubagentConstraints$1 as at, IterateOptions as b, WorkflowParallelNodeSchema as ba, ExecutionStatusSchema$1 as bi, WorkflowDefinitionPathSegment as bn, StepRunResultSchema as br, WorkflowContextBase as bt, delegateToRole as c, WorkflowListQuerySchema$1 as ca, BusEventTriggerSchema as ci, WorkflowWorkerBusAuth as cn, ExecutionLinkTypeSchema as cr, SubagentStatusSchema as ct, iterateChain as d, WorkflowNode as da, EXECUTIONS_BY_ARTIFACT_REFS_MAX_REFS as di, WorkflowWorkerConfigSchema$1 as dn, SpanStatus as dr, ArtifactPatch as dt, WorkflowGateNodeSchema as ea, WorkflowFinalizationIntentSchema as ei, IWorkflowRunner$1 as en, JsonPatchOperationSchema$1 as er, SpawnSubagentRpcRequest as et, loop as f, WorkflowNodeBase as fa, EXECUTION_LIST_DEFAULT_LIMIT$1 as fi, WorkflowWorkerSource$1 as fn, SpanStatusSchema as fr, ArtifactUpdateOperation as ft, ArtifactBindingOptions as g, WorkflowNodeTypeSchema as ga, ExecutionListCursorSchema as gi, ProjectedNode as gn, StepCancelSubject as gr, StationHandler$1 as gt, AgentConfig as h, WorkflowNodeType as ha, ExecutionListCursor as hi, ProjectedEdgeKind as hn, StepCancelPayloadSchema as hr, PreviousStepOutput as ht, WorkflowBundle as i, WorkflowIterateChainNodeSchema as ia, WorkflowTerminalStatusSchema as ii, WorkerContributionPackageRefSchema as in, ExecutionLinkListQuery as ir, SubagentConfigSchema$1 as it, validateNoNestedLoops as j, WorkflowStationNode as ja, WorkflowArtifactWriteDeclaration as ji, serializeArtifactRef$1 as jn, WorkflowCancelPayloadSchema as jr, WorkLogArtifactWrite as jt, LoopGateContext as k, WorkflowStateDefinition as ka, WorkflowArtifactBinding as ki, WorkflowArtifactRefSchema as kn, WORKFLOW_CANCELLED_REASON$1 as kr, WebhookWorkflowTrigger as kt, gate as l, WorkflowLoopNode as la, EXECUTIONS_BY_ARTIFACT_REFS_DEFAULT_LIMIT_PER_REF as li, WorkflowWorkerBusAuthSchema as ln, SpanRecord as lr, UsageStats$1 as lt, zodSchemaToJsonRecord$1 as m, WorkflowNodeSchema as ma, EXECUTION_LIST_MIN_LIMIT$1 as mi, ProjectedEdge as mn, StepCancelPayload as mr, IterateHandler as mt, ExecutionHintsSchema$1 as n, WorkflowGateStatusSchema as na, WorkflowFinalizerIdSchema$1 as ni, WorkerContributionManifestSchema as nn, WorkflowErrorCode$1 as nr, SpawnSubagentRpcResponse as nt, defineWorkflow as o, WorkflowIterateNodeSchema as oa, createWorkflowFinalizerNamespace$1 as oi, WorkflowRunResultSchema as on, ExecutionLinkSchema$1 as or, SubagentExecutionFailed as ot, station as p, WorkflowNodeBaseSchema as pa, EXECUTION_LIST_MAX_LIMIT$1 as pi, WorkflowWorkerSourceSchema$1 as pn, IStepRunner as pr, ArtifactUpdater as pt, PendingRequestSchema as q, WorkflowExecutionScope as qi, ContextPublishTarget as qn, WorkflowDelegateResultFinalizerIdSchema as qr, EXTERNAL_EXECUTION_ID_PREFIX$1 as qt, ExecutionSourceHintSchema as r, WorkflowIterateChainNode as ra, WorkflowTerminalStatus as ri, WorkerContributionPackageRef as rn, ExecutionLink as rr, SubagentConfig$1 as rt, delegateToAgent as s, WorkflowListQuery as sa, BusEventTrigger as si, WorkflowRunnerRunOptions$1 as sn, ExecutionLinkType as sr, SubagentStatus$1 as st, ExecutionHints as t, WorkflowGateStatus as ta, WorkflowFinalizerId as ti, WorkerContributionManifest$1 as tn, WorkflowError$1 as tr, SpawnSubagentRpcRequestSchema$1 as tt, iterate as u, WorkflowLoopNodeSchema as ua, EXECUTIONS_BY_ARTIFACT_REFS_MAX_LIMIT_PER_REF as ui, WorkflowWorkerConfig$1 as un, SpanRecordSchema$1 as ur, ArtifactContext as ut, DefineWorkflowOptions as v, WorkflowParallelModeSchema as va, ExecutionListQuerySchema$1 as vi, ProjectedWorkflowGraph as vn, StepRunConfigSchema as vr, StepContext as vt, ParallelMode as w, WorkflowResolvedRoleSchema as wa, ExtensionWorkflowTriggerSchema as wi, WorkflowNodeVisitor as wn, StepRunnerPlatformDefaultsSchema as wr, CronWorkflowTrigger as wt, LoopGateRegistration as x, WorkflowResolvedAgent as xa, ExecutionsByArtifactRefsQuery as xi, projectWorkflowGraph as xn, StepRunnerBusAuth$1 as xr, WorkflowStateContext as xt, GateOptions as y, WorkflowParallelNode as ya, ExecutionStatus as yi, WorkflowDefinitionPath as yn, StepRunResult as yr, WorkflowContext as yt, ContextModeSchema$1 as z, WorkflowDelegateAgentNode as zi, ArtifactQuerySource as zn, IWorkflowTriggerTypeRegistry$1 as zr, WorkLogGateEvent as zt };
+export { SpawnSubagentRpcResponse as $, WorkflowGateNode as $i, WorkflowError$1 as $n, WorkflowFinalizationIntent as $r, WorkerContributionManifestSchema as $t, AwaitSubagentResponse$1 as A, WorkflowStateDefinitionSchema as Aa, WorkflowArtifactBindingSchema as Ai, WorkflowNamespace$1 as An, WorkflowCancelSubject as Ar, WorkLogDynamicNodeMaterialization as At, KillSubagentResponse as B, WorkflowDelegateAgentNodeSchema as Bi, BusEventPublishTargetSchema as Bn, WorkflowDelegateEconomicsSchema as Br, WorkLogUsageSummary as Bt, WorkflowBuilder as C, WorkflowResolvedRole as Ca, ExtensionWorkflowTrigger$1 as Ci, WorkflowRunContext$1 as Cn, StepTelemetry as Cr, ExtractTriggerPayload as Ct, LoopGateHandler$1 as D, WorkflowSourceLocation as Da, LoopGateOutcome as Di, WorkflowArtifactRefSchema as Dn, WORKFLOW_CANCELLED_REASON$1 as Dr, WorkflowTriggerDef as Dt, LoopGateContext as E, WorkflowSequenceNodeSchema as Ea, GateInstanceListQuerySchema$1 as Ei, WorkflowArtifactRef as En, TokenUsageSchema as Er, WebhookWorkflowTrigger as Et, ContextMode as F, WorkflowDefinition$1 as Fi, ArtifactPublishTarget as Fn, createStepCancelSubject$1 as Fr, WorkLogFrameEntrySchema$1 as Ft, ReportProgressRequest as G, WorkflowExecution$1 as Gi, ContextPublishTarget as Gn, WorkflowDelegateResultFinalizationResponse as Gr, ExternalExecutionFrameCompletion as Gt, ListSubagentsBySessionResponse as H, WorkflowDelegateRoleNodeSchema as Hi, BusRequestSourceSchema as Hn, WorkflowDelegateResultFinalizationGatewayRequestSchema as Hr, CompleteExternalExecutionRequest as Ht, ContextModeSchema$1 as I, WorkflowDefinitionProvenance as Ii, ArtifactPublishTargetSchema as In, createWorkflowCancelSubject$1 as Ir, WorkLogGateEvent as It, RequestInputRpcResponse as J, WorkflowExecutionScopeSchema as Ji, ContextSourceSchema as Jn, WorkflowDelegateToolObservation as Jr, ExternalExecutionFrameStartSchema as Jt, ReportProgressResponse as K, WorkflowExecutionSchema$1 as Ki, ContextPublishTargetSchema as Kn, WorkflowDelegateResultFinalizationResponseSchema as Kr, ExternalExecutionFrameCompletionSchema as Kt, DEFAULT_CONSTRAINTS$1 as L, WorkflowDefinitionProvenanceSchema as Li, ArtifactQuerySource as Ln, IWorkflowTriggerTypeRegistry$1 as Lr, WorkLogGateEventSchema as Lt, CompleteTaskResponse as M, WorkflowStationNodeSchema as Ma, WorkflowArtifactWriteDeclarationSchema as Mi, WorkflowProgressUpdateSchema as Mn, WorkflowRunnerStepTypeSchema as Mr, WorkLogExecutionSummary as Mt, CompletionMode$1 as N, WorkflowTrigger as Na, WorkflowCondition as Ni, WorkflowSchemas as Nn, WorkflowStepType as Nr, WorkLogExecutionSummarySchema as Nt, validateNoNestedLoops as O, WorkflowSourceLocationSchema as Oa, LoopGateOutcomeSchema as Oi, parseArtifactRef as On, WorkflowCancelPayload as Or, WorkLogArtifactWrite as Ot, CompletionModeSchema as P, WorkflowTriggerSchema as Pa, WorkflowConditionSchema as Pi, WorkflowSubjects$1 as Pn, WorkflowStepTypeSchema$1 as Pr, WorkLogFrameEntry as Pt, SpawnSubagentRpcRequestSchema$1 as Q, WorkflowGateInstanceSchema$1 as Qi, JsonPatchOperationSchema$1 as Qn, WorkflowFinalizationDeliveryResultSchema as Qr, WorkerContributionManifest$1 as Qt, ExecuteSubagentResponse as R, WorkflowDefinitionSchema$1 as Ri, ArtifactQuerySourceSchema as Rn, WorkflowTriggerTypeRecord as Rr, WorkLogStats as Rt, ParallelOptions as S, WorkflowResolvedAgentSchema as Sa, ExecutionsByArtifactRefsQuerySchema$1 as Si, walkWorkflowDefinition$1 as Sn, StepRunnerPlatformDefaultsSchema as Sr, ExtensionWorkflowTrigger as St, WorkflowZodSchemas$1 as T, WorkflowSequenceNode as Ta, GateInstanceListQuery as Ti, WorkflowRunContextSource as Tn, TokenUsage as Tr, WebhookTriggerPayload as Tt, PendingRequest$1 as U, WorkflowDynamicRegion as Ui, ContextBundle as Un, WorkflowDelegateResultFinalizationRequest as Ur, CompleteExternalExecutionRequestSchema as Ut, ListSubagentsBySessionRequest as V, WorkflowDelegateRoleNode as Vi, BusRequestSource as Vn, WorkflowDelegateResultFinalizationGatewayRequest as Vr, WorkLogUsageSummarySchema as Vt, PendingRequestSchema as W, WorkflowDynamicRegionSchema as Wi, ContextBundleSchema as Wn, WorkflowDelegateResultFinalizationRequestSchema as Wr, EXTERNAL_EXECUTION_ID_PREFIX$1 as Wt, SendToSubagentResponse as X, WorkflowFrameStateSchema$1 as Xi, ResolvedContextEntrySchema as Xn, WorkflowFinalizationClaim as Xr, RegisterExternalExecutionRequestSchema as Xt, SendToSubagentRequest as Y, WorkflowFrameState$1 as Yi, ResolvedContextEntry as Yn, WorkflowDelegateToolObservationSchema as Yr, RegisterExternalExecutionRequest as Yt, SpawnSubagentRpcRequest as Z, WorkflowGateInstance as Zi, JsonPatchOperation$1 as Zn, WorkflowFinalizationClaimSchema$1 as Zr, IWorkflowRunner$1 as Zt, IterateOptions as _, WorkflowParallelMode as _a, ExecutionListQuery as _i, WorkflowDefinitionPathSegment as _n, StepRunResult as _r, WorkflowContextBase as _t, delegateToRole as a, WorkflowIterateNode as aa, createWorkflowDelegateResultFinalizerNamespace$1 as ai, WorkflowWorkerBusAuth as an, ExecutionLinkType as ar, SubagentStatusSchema as at, NodeOptions as b, WorkflowParallelNodeSchema as ba, ExecutionStatusSchema$1 as bi, WalkRelationship as bn, StepRunnerBusAuthSchema as br, CronTriggerPayload as bt, iterateChain as c, WorkflowListQuerySchema$1 as ca, BusEventTriggerSchema as ci, WorkflowWorkerConfigSchema$1 as cn, SpanRecordSchema$1 as cr, ArtifactPatch as ct, zodSchemaToJsonRecord$1 as d, WorkflowNode as da, EXECUTIONS_BY_ARTIFACT_REFS_MAX_REFS as di, ProjectedEdge as dn, IStepRunner as dr, IterateHandler as dt, WorkflowGateNodeSchema as ea, WorkflowFinalizationIntentSchema as ei, WorkerRuntimeContext$1 as en, WorkflowErrorCode$1 as er, SubagentConfig$1 as et, AgentConfig as f, WorkflowNodeBase as fa, EXECUTION_LIST_DEFAULT_LIMIT$1 as fi, ProjectedEdgeKind as fn, StepCancelPayload as fr, PreviousStepOutput as ft, GateOptions as g, WorkflowNodeTypeSchema as ga, ExecutionListCursorSchema as gi, WorkflowDefinitionPath as gn, StepRunConfigSchema as gr, WorkflowContext as gt, DefineWorkflowOptions as h, WorkflowNodeType as ha, ExecutionListCursor as hi, ProjectedWorkflowGraph as hn, StepRunConfig as hr, StepContext as ht, delegateToAgent as i, WorkflowIterateChainNodeSchema as ia, WorkflowTerminalStatusSchema as ii, WorkflowRunnerRunOptions$1 as in, ExecutionLinkSchema$1 as ir, SubagentStatus$1 as it, CompleteTaskRequest as j, WorkflowStationNode as ja, WorkflowArtifactWriteDeclaration as ji, WorkflowProgressUpdate as jn, WorkflowRunnerStepType as jr, WorkLogDynamicNodeMaterializationSchema as jt, AwaitSubagentRequest as k, WorkflowStateDefinition as ka, WorkflowArtifactBinding as ki, serializeArtifactRef$1 as kn, WorkflowCancelPayloadSchema as kr, WorkLogArtifactWriteSchema as kt, loop as l, WorkflowLoopNode as la, EXECUTIONS_BY_ARTIFACT_REFS_DEFAULT_LIMIT_PER_REF as li, WorkflowWorkerSource$1 as ln, SpanStatus as lr, ArtifactUpdateOperation as lt, BuiltWorkflow as m, WorkflowNodeSchema as ma, EXECUTION_LIST_MIN_LIMIT$1 as mi, ProjectedNodeRole as mn, StepCancelSubject as mr, StationStepContext as mt, defineWorkflowBundle as n, WorkflowGateStatusSchema as na, WorkflowFinalizerIdSchema$1 as ni, WorkflowRunResultSchema$1 as nn, ExecutionLinkListQuery as nr, SubagentConstraints$1 as nt, gate as o, WorkflowIterateNodeSchema as oa, createWorkflowFinalizerNamespace$1 as oi, WorkflowWorkerBusAuthSchema as on, ExecutionLinkTypeSchema as or, UsageStats$1 as ot, ArtifactBindingOptions as p, WorkflowNodeBaseSchema as pa, EXECUTION_LIST_MAX_LIMIT$1 as pi, ProjectedNode as pn, StepCancelPayloadSchema as pr, StationHandler$1 as pt, RequestInputRpcRequest as q, WorkflowExecutionScope as qi, ContextSource as qn, WorkflowDelegateResultFinalizerIdSchema as qr, ExternalExecutionFrameStart as qt, defineWorkflow as r, WorkflowIterateChainNode as ra, WorkflowTerminalStatus as ri, WorkflowRunnerCompletion$1 as rn, ExecutionLinkListQuerySchema$1 as rr, SubagentExecutionFailed as rt, iterate as s, WorkflowListQuery as sa, BusEventTrigger as si, WorkflowWorkerConfig$1 as sn, SpanRecord as sr, ArtifactContext as st, WorkflowBundle as t, WorkflowGateStatus as ta, WorkflowFinalizerId as ti, WorkflowRunResult$1 as tn, ExecutionLink as tr, SubagentConfigSchema$1 as tt, station as u, WorkflowLoopNodeSchema as ua, EXECUTIONS_BY_ARTIFACT_REFS_MAX_LIMIT_PER_REF as ui, WorkflowWorkerSourceSchema as un, SpanStatusSchema as ur, ArtifactUpdater as ut, LoopGateRegistration as v, WorkflowParallelModeSchema as va, ExecutionListQuerySchema$1 as vi, projectWorkflowGraph as vn, StepRunResultSchema as vr, WorkflowStateContext as vt, WorkflowStateAuthoringDefinition as w, WorkflowResolvedRoleSchema as wa, ExtensionWorkflowTriggerSchema as wi, WorkflowRunContextSchema$1 as wn, StepTelemetrySchema as wr, ManualWorkflowTrigger as wt, ParallelMode as x, WorkflowResolvedAgent as xa, ExecutionsByArtifactRefsQuery as xi, WorkflowNodeVisitor as xn, StepRunnerPlatformDefaults$1 as xr, CronWorkflowTrigger as xt, LoopOptions as y, WorkflowParallelNode as ya, ExecutionStatus as yi, WalkContext as yn, StepRunnerBusAuth$1 as yr, BusEventWorkflowTrigger as yt, KillSubagentRequest as z, WorkflowDelegateAgentNode as zi, BusEventPublishTarget as zn, WorkflowDelegateEconomics as zr, WorkLogStatsSchema as zt };