@n8n/instance-ai 1.5.0 → 1.6.1

package/dist/tools/orchestration/browser-credential-setup.tool.js

@@ -7,6 +7,7 @@ const tools_1 = require("@mastra/core/tools");
 const api_types_1 = require("@n8n/api-types");
 const nanoid_1 = require("nanoid");
 const zod_1 = require("zod");
+const browser_credential_setup_nudge_1 = require("./browser-credential-setup.nudge");
 const browser_credential_setup_prompt_1 = require("./browser-credential-setup.prompt");
 const tracing_utils_1 = require("./tracing-utils");
 const register_with_mastra_1 = require("../../agent/register-with-mastra");
@@ -18,6 +19,42 @@ const research_tool_1 = require("../research.tool");
 const ask_user_tool_1 = require("../shared/ask-user.tool");
 var browser_credential_setup_prompt_2 = require("./browser-credential-setup.prompt");
 Object.defineProperty(exports, "buildBrowserAgentPrompt", { enumerable: true, get: function () { return browser_credential_setup_prompt_2.buildBrowserAgentPrompt; } });
+const PERMANENT_DENIAL_MARKER = 'User permanently denied access to';
+const BROWSER_DENIED_RESULT = 'Browser access was denied by the user. Provide manual setup guidance in chat — do not try the browser flow again in this turn.';
+const browserToolErrorResultSchema = zod_1.z.object({
+    isError: zod_1.z.literal(true),
+    structuredContent: zod_1.z.object({ error: zod_1.z.string().optional() }).optional(),
+    content: zod_1.z.array(zod_1.z.object({ text: zod_1.z.string() }).passthrough()).optional(),
+});
+function isPermanentDenialResult(result) {
+    const parsed = browserToolErrorResultSchema.safeParse(result);
+    if (!parsed.success)
+        return false;
+    const messages = [
+        parsed.data.structuredContent?.error ?? '',
+        ...(parsed.data.content?.map((c) => c.text) ?? []),
+    ];
+    return messages.some((m) => m.includes(PERMANENT_DENIAL_MARKER));
+}
+function wrapToolForDenialDetection(tool, onDenied) {
+    const originalExecute = tool.execute;
+    if (!originalExecute)
+        return tool;
+    const observingExecute = async (input, ctx) => {
+        const result = await originalExecute(input, ctx);
+        if (isPermanentDenialResult(result))
+            onDenied();
+        return result;
+    };
+    return { ...tool, execute: observingExecute };
+}
+function wrapBrowserToolsForDenialDetection(tools, onDenied) {
+    const wrapped = {};
+    for (const [name, tool] of Object.entries(tools)) {
+        wrapped[name] = name.startsWith('browser_') ? wrapToolForDenialDetection(tool, onDenied) : tool;
+    }
+    return wrapped;
+}
 function createPauseForUserTool() {
     return (0, tools_1.createTool)({
         id: 'pause-for-user',
@@ -31,6 +68,7 @@ function createPauseForUserTool() {
             requestId: zod_1.z.string(),
             message: zod_1.z.string(),
             severity: api_types_1.instanceAiConfirmationSeveritySchema,
+            inputType: zod_1.z.literal('continue'),
         }),
         resumeSchema: exports.browserCredentialSetupResumeSchema,
         execute: async (input, ctx) => {
@@ -41,6 +79,7 @@ function createPauseForUserTool() {
                     requestId: (0, nanoid_1.nanoid)(),
                     message: input.message,
                     severity: 'info',
+                    inputType: 'continue',
                 });
                 return { continued: false };
             }
@@ -84,7 +123,7 @@ function createBrowserCredentialSetupTool(context) {
             const gatewayBrowserTools = context.localMcpServer?.getToolsByCategory('browser') ?? [];
             if (gatewayBrowserTools.length > 0 && context.localMcpServer) {
                 const gatewayBrowserNames = new Set(gatewayBrowserTools.map((t) => t.name));
-                const allGatewayTools = (0, create_tools_from_mcp_server_1.createToolsFromLocalMcpServer)(context.localMcpServer);
+                const allGatewayTools = (0, create_tools_from_mcp_server_1.createToolsFromLocalMcpServer)(context.localMcpServer, context.logger);
                 for (const [name, tool] of Object.entries(allGatewayTools)) {
                     if (gatewayBrowserNames.has(name)) {
                         browserTools[name] = tool;
@@ -111,10 +150,14 @@ function createBrowserCredentialSetupTool(context) {
                         : 'No browser MCP tools available. Chrome DevTools MCP may not be connected.',
                 };
             }
-            browserTools['pause-for-user'] = createPauseForUserTool();
-            browserTools['ask-user'] = (0, ask_user_tool_1.createAskUserTool)();
+            let browserPermanentlyDenied = false;
+            const browserToolsWithDenialDetection = wrapBrowserToolsForDenialDetection(browserTools, () => {
+                browserPermanentlyDenied = true;
+            });
+            browserToolsWithDenialDetection['pause-for-user'] = createPauseForUserTool();
+            browserToolsWithDenialDetection['ask-user'] = (0, ask_user_tool_1.createAskUserTool)();
             if (context.domainContext) {
-                browserTools.research = (0, research_tool_1.createResearchTool)(context.domainContext);
+                browserToolsWithDenialDetection.research = (0, research_tool_1.createResearchTool)(context.domainContext);
             }
             const subAgentId = `agent-browser-${(0, nanoid_1.nanoid)(6)}`;
             context.eventBus.publish(context.threadId, {
@@ -124,7 +167,7 @@ function createBrowserCredentialSetupTool(context) {
                 payload: {
                     parentId: context.orchestratorAgentId,
                     role: 'credential-setup-browser-agent',
-                    tools: Object.keys(browserTools),
+                    tools: Object.keys(browserToolsWithDenialDetection),
                 },
             });
             let traceRun;
@@ -143,7 +186,7 @@ function createBrowserCredentialSetupTool(context) {
                         })),
                     },
                 });
-                const tracedBrowserTools = (0, tracing_utils_1.traceSubAgentTools)(context, browserTools, 'credential-setup-browser-agent');
+                const tracedBrowserTools = (0, tracing_utils_1.traceSubAgentTools)(context, browserToolsWithDenialDetection, 'credential-setup-browser-agent');
                 const browserPrompt = (0, browser_credential_setup_prompt_1.buildBrowserAgentPrompt)(toolSource);
                 const resultText = await (0, tracing_utils_1.withTraceRun)(context, traceRun, async () => {
                     const subAgent = new agent_1.Agent({
@@ -237,9 +280,14 @@ function createBrowserCredentialSetupTool(context) {
                             if (result.status === 'cancelled') {
                                 throw new Error('Run cancelled while waiting for confirmation');
                             }
+                            if (browserPermanentlyDenied) {
+                                return BROWSER_DENIED_RESULT;
+                            }
                             if (lastSuspendedToolName !== 'pause-for-user' && nudgeCount < MAX_NUDGES) {
                                 nudgeCount++;
-                                const nudge = await subAgent.stream('You stopped without confirming with the user. Call pause-for-user NOW to tell the user where the credential values live and to enter them privately in the n8n credential form.', {
+                                const priorMessages = activeStream.messageList.get.all.aiV5.model();
+                                const nudgeInput = (0, browser_credential_setup_nudge_1.buildNudgeStreamInput)(priorMessages);
+                                const nudge = await subAgent.stream(nudgeInput, {
                                     maxSteps: max_steps_1.MAX_STEPS.BROWSER,
                                     abortSignal: context.abortSignal,
                                     providerOptions: {

package/dist/tools/orchestration/browser-credential-setup.tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-credential-setup.tool.js","sourceRoot":"","sources":["../../../src/tools/orchestration/browser-credential-setup.tool.ts"],"names":[],"mappings":";;;AA+FA,4EAoSC;AAnYD,8CAA2C;AAE3C,8CAAgD;AAChD,8CAAsE;AACtE,mCAAgC;AAChC,6BAAwB;AAExB,uFAAoG;AACpG,mDAMyB;AACzB,2EAAsE;AACtE,yDAAsD;AACtD,uFAGiD;AACjD,uEAKyC;AAEzC,6FAA2F;AAC3F,oDAAsD;AACtD,2DAA4D;AAE5D,qFAAoG;AAA3F,0IAAA,uBAAuB,OAAA;AAEhC,SAAS,sBAAsB;IAC9B,OAAO,IAAA,kBAAU,EAAC;QACjB,EAAE,EAAE,gBAAgB;QACpB,WAAW,EACV,mFAAmF;YACnF,iIAAiI;QAClI,WAAW,EAAE,yCAAiC;QAC9C,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;SACtB,CAAC;QACF,aAAa,EAAE,OAAC,CAAC,MAAM,CAAC;YACvB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;YACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;YACnB,QAAQ,EAAE,gDAAoC;SAC9C,CAAC;QACF,YAAY,EAAE,0CAAkC;QAChD,OAAO,EAAE,KAAK,EAAE,KAAwD,EAAE,GAAG,EAAE,EAAE;YAChF,MAAM,UAAU,GAAG,GAAG,EAAE,KAAK,EAAE,UAEnB,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC;YAEpC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,OAAO,EAAE,CAAC;oBACf,SAAS,EAAE,IAAA,eAAM,GAAE;oBACnB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,QAAQ,EAAE,MAAe;iBACzB,CAAC,CAAC;gBACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7B,CAAC;YAED,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC3C,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAEY,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;CAChF,CAAC,CAAC;AAEU,QAAA,kCAAkC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1D,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,qCAAqC,GAAG,OAAC,CAAC,MAAM,CAAC;IACtD,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC/D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACpF,cAAc,EAAE,OAAC;SACf,KAAK,CACL,OAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC,CACF;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,6DAA6D,CAAC;CACzE,CAAC,CAAC;AAEH,SAAgB,gCAAgC,CAAC,OAA6B;IAC7E,OAAO,IAAA,kBAAU,EAAC;QACjB,EAAE,EAAE,0BAA0B;QAC9B,WAAW,EACV,oFAAoF;YACpF,mFAAmF;YACnF,gEAAgE;QACjE,WAAW,EAAE,qCAAqC;QAClD,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;SAClB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA4D,EAAE,EAAE;YAE/E,MAAM,YAAY,GAAe,EAAE,CAAC;YACpC,IAAI,UAA6B,CAAC;YAElC,MAAM,mBAAmB,GAAG,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAExF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAE9D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5E,MAAM,eAAe,GAAG,IAAA,4DAA6B,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC9E,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC5D,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACnC,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;oBAC3B,CAAC;gBACF,CAAC;gBACD,UAAU,GAAG,SAAS,CAAC;YACxB,CAAC;iBAAM,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAErC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACxC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBAC3B,CAAC;gBACD,UAAU,GAAG,qBAAqB,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACP,OAAO;oBACN,MAAM,EACL,iIAAiI;iBAClI,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO;oBACN,MAAM,EACL,UAAU,KAAK,SAAS;wBACvB,CAAC,CAAC,uHAAuH;wBACzH,CAAC,CAAC,2EAA2E;iBAC/E,CAAC;YACH,CAAC;YAGD,YAAY,CAAC,gBAAgB,CAAC,GAAG,sBAAsB,EAAE,CAAC;YAC1D,YAAY,CAAC,UAAU,CAAC,GAAG,IAAA,iCAAiB,GAAE,CAAC;YAG/C,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3B,YAAY,CAAC,QAAQ,GAAG,IAAA,kCAAkB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,UAAU,GAAG,iBAAiB,IAAA,eAAM,EAAC,CAAC,CAAC,EAAE,CAAC;YAGhD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;gBAC1C,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE;oBACR,QAAQ,EAAE,OAAO,CAAC,mBAAmB;oBACrC,IAAI,EAAE,gCAAgC;oBACtC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;iBAChC;aACD,CAAC,CAAC;YACH,IAAI,QAAwD,CAAC;YAC7D,IAAI,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAA,kCAAkB,EAAC,OAAO,EAAE;oBAC5C,OAAO,EAAE,UAAU;oBACnB,IAAI,EAAE,gCAAgC;oBACtC,IAAI,EAAE,0BAA0B;oBAChC,MAAM,EAAE;wBACP,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,CACxC,CAAC,KAMA,EAAE,EAAE,CAAC,CAAC;4BACN,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACxB,CAAC,CACF;qBACD;iBACD,CAAC,CAAC;gBACH,MAAM,kBAAkB,GAAG,IAAA,kCAAkB,EAC5C,OAAO,EACP,YAAY,EACZ,gCAAgC,CAChC,CAAC;gBACF,MAAM,aAAa,GAAG,IAAA,yDAAuB,EAAC,UAAU,CAAC,CAAC;gBAC1D,MAAM,UAAU,GAAG,MAAM,IAAA,4BAAY,EAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACnE,MAAM,QAAQ,GAAG,IAAI,aAAK,CAAC;wBAC1B,EAAE,EAAE,UAAU;wBACd,IAAI,EAAE,gCAAgC;wBACtC,YAAY,EAAE;4BACb,IAAI,EAAE,QAAiB;4BACvB,OAAO,EAAE,aAAa;4BACtB,eAAe,EAAE;gCAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;6BAClD;yBACD;wBACD,KAAK,EAAE,OAAO,CAAC,OAAO;wBACtB,KAAK,EAAE,kBAAkB;qBACzB,CAAC,CAAC;oBACH,IAAA,uCAAmB,EAClB,QAAQ,EACR,IAAA,yCAAqB,EAAC;wBACrB,YAAY,EAAE,aAAa;wBAC3B,KAAK,EAAE,kBAAkB;wBACzB,OAAO,EAAE,OAAO,CAAC,OAAO;qBACxB,CAAC,CACF,CAAC;oBAEF,IAAA,yCAAkB,EAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;oBAG1D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO;wBAC7B,CAAC,CAAC,sBAAsB,KAAK,CAAC,OAAO,EAAE;wBACvC,CAAC,CAAC,uGAAuG,CAAC;oBAE3G,IAAI,aAAa,GAAG,EAAE,CAAC;oBACvB,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAC1C,CAAC,CAMA,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/G,CAAC;wBACF,aAAa,GAAG,0BAA0B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnE,CAAC;oBAID,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACrE,MAAM,YAAY,GACjB,OAAO,IAAI,OAAO,CAAC,iBAAiB;wBACnC,CAAC,CAAC,6BAA6B,OAAO,CAAC,iBAAiB,IAAI;4BAC3D,wDAAwD;4BACxD,yEAAyE;wBAC1E,CAAC,CAAC,EAAE,CAAC;oBAEP,MAAM,QAAQ,GAAG;wBAChB,wBAAwB,KAAK,CAAC,cAAc,EAAE;wBAC9C,EAAE;wBACF,QAAQ;wBACR,aAAa;wBACb,YAAY;wBACZ,EAAE;wBACF,yBAAyB;wBACzB,sLAAsL;qBACtL;yBACC,MAAM,CAAC,OAAO,CAAC;yBACf,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEb,MAAM,WAAW,GAAG,IAAA,qCAAiB,GAAE,CAAC;oBACxC,OAAO,MAAM,IAAA,0CAAsB,EAAC,WAAW,EAAE,KAAK,IAAI,EAAE;wBAE3D,MAAM,iBAAiB,GAAG,IAAA,mDAAuB,EAAC,WAAW,CAAC,CAAC;wBAC/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE;4BAC9C,QAAQ,EAAE,qBAAS,CAAC,OAAO;4BAC3B,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,eAAe,EAAE;gCAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;6BAClD;4BACD,GAAG,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,EAAE,CAAC;yBAC9C,CAAC,CAAC;wBAEH,IAAI,YAAY,GAAG,MAAM,CAAC;wBAC1B,IAAI,iBAAiB,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7E,IAAI,qBAAqB,GAAG,EAAE,CAAC;wBAC/B,MAAM,UAAU,GAAG,CAAC,CAAC;wBACrB,IAAI,UAAU,GAAG,CAAC,CAAC;wBAEnB,OAAO,IAAI,EAAE,CAAC;4BACb,MAAM,MAAM,GAAG,MAAM,IAAA,kDAAsB,EAAC;gCAC3C,KAAK,EAAE,QAAQ;gCACf,MAAM,EAAE,YAAY;gCACpB,kBAAkB,EAAE,iBAAiB;gCACrC,OAAO,EAAE;oCACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;oCAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;oCACpB,OAAO,EAAE,UAAU;oCACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oCAC1B,MAAM,EAAE,OAAO,CAAC,WAAW;oCAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;iCACtB;gCACD,OAAO,EAAE;oCACR,IAAI,EAAE,MAAM;oCACZ,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;wCACxC,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;4CAClC,MAAM,IAAI,KAAK,CACd,0EAA0E,CAC1E,CAAC;wCACH,CAAC;wCACD,OAAO,MAAM,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;oCACrD,CAAC;oCACD,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;wCAC5B,qBAAqB,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;oCACnD,CAAC;iCACD;gCACD,iBAAiB;6BACjB,CAAC,CAAC;4BAEH,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gCACnC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;4BACjE,CAAC;4BAED,IAAI,qBAAqB,KAAK,gBAAgB,IAAI,UAAU,GAAG,UAAU,EAAE,CAAC;gCAG3E,UAAU,EAAE,CAAC;gCACb,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAClC,iLAAiL,EACjL;oCACC,QAAQ,EAAE,qBAAS,CAAC,OAAO;oCAC3B,WAAW,EAAE,OAAO,CAAC,WAAW;oCAChC,eAAe,EAAE;wCAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;qCAClD;oCACD,GAAG,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,EAAE,CAAC;iCAC9C,CACD,CAAC;gCACF,YAAY,GAAG,KAAK,CAAC;gCACrB,iBAAiB;oCAChB,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC;wCAChD,MAAM,CAAC,WAAW;wCAClB,iBAAiB,CAAC;gCACnB,SAAS;4BACV,CAAC;4BAED,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;wBACxE,CAAC;oBACF,CAAC,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,MAAM,IAAA,8BAAc,EAAC,OAAO,EAAE,QAAQ,EAAE;oBACvC,OAAO,EAAE;wBACR,MAAM,EAAE,UAAU;wBAClB,OAAO,EAAE,UAAU;wBACnB,IAAI,EAAE,gCAAgC;qBACtC;iBACD,CAAC,CAAC;gBAEH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC1C,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE;wBACR,IAAI,EAAE,gCAAgC;wBACtC,MAAM,EAAE,UAAU;qBAClB;iBACD,CAAC,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,IAAA,4BAAY,EAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC5C,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,gCAAgC;iBAC5C,CAAC,CAAC;gBAEH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC1C,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE;wBACR,IAAI,EAAE,gCAAgC;wBACtC,MAAM,EAAE,EAAE;wBACV,KAAK,EAAE,YAAY;qBACnB;iBACD,CAAC,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,wBAAwB,YAAY,EAAE,EAAE,CAAC;YAC3D,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"browser-credential-setup.tool.js","sourceRoot":"","sources":["../../../src/tools/orchestration/browser-credential-setup.tool.ts"],"names":[],"mappings":";;;AA8IA,4EAuTC;AArcD,8CAA2C;AAE3C,8CAAgD;AAChD,8CAAsE;AACtE,mCAAgC;AAChC,6BAAwB;AAExB,qFAAyE;AACzE,uFAAoG;AACpG,mDAMyB;AACzB,2EAAsE;AACtE,yDAAsD;AACtD,uFAGiD;AACjD,uEAKyC;AAEzC,6FAA2F;AAC3F,oDAAsD;AACtD,2DAA4D;AAE5D,qFAAoG;AAA3F,0IAAA,uBAAuB,OAAA;AAEhC,MAAM,uBAAuB,GAAG,mCAAmC,CAAC;AACpE,MAAM,qBAAqB,GAC1B,gIAAgI,CAAC;AAElI,MAAM,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,iBAAiB,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxE,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAAC,MAAe;IAC/C,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,QAAQ,GAAG;QAChB,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAClD,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAClE,CAAC;AAID,SAAS,0BAA0B,CAClC,IAAO,EACP,QAAoB;IAEpB,MAAM,eAAe,GAAG,IAAI,CAAC,OAAoC,CAAC;IAClE,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,gBAAgB,GAAkB,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,uBAAuB,CAAC,MAAM,CAAC;YAAE,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,gBAAgC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,kCAAkC,CAAC,KAAiB,EAAE,QAAoB;IAClF,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB;IAC9B,OAAO,IAAA,kBAAU,EAAC;QACjB,EAAE,EAAE,gBAAgB;QACpB,WAAW,EACV,mFAAmF;YACnF,iIAAiI;QAClI,WAAW,EAAE,yCAAiC;QAC9C,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;SACtB,CAAC;QACF,aAAa,EAAE,OAAC,CAAC,MAAM,CAAC;YACvB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;YACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;YACnB,QAAQ,EAAE,gDAAoC;YAC9C,SAAS,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC;SAChC,CAAC;QACF,YAAY,EAAE,0CAAkC;QAChD,OAAO,EAAE,KAAK,EAAE,KAAwD,EAAE,GAAG,EAAE,EAAE;YAChF,MAAM,UAAU,GAAG,GAAG,EAAE,KAAK,EAAE,UAEnB,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC;YAEpC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,OAAO,EAAE,CAAC;oBACf,SAAS,EAAE,IAAA,eAAM,GAAE;oBACnB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,QAAQ,EAAE,MAAe;oBACzB,SAAS,EAAE,UAAmB;iBAC9B,CAAC,CAAC;gBACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7B,CAAC;YAED,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC3C,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAEY,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;CAChF,CAAC,CAAC;AAEU,QAAA,kCAAkC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1D,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,qCAAqC,GAAG,OAAC,CAAC,MAAM,CAAC;IACtD,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC/D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACpF,cAAc,EAAE,OAAC;SACf,KAAK,CACL,OAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC,CACF;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,6DAA6D,CAAC;CACzE,CAAC,CAAC;AAEH,SAAgB,gCAAgC,CAAC,OAA6B;IAC7E,OAAO,IAAA,kBAAU,EAAC;QACjB,EAAE,EAAE,0BAA0B;QAC9B,WAAW,EACV,oFAAoF;YACpF,mFAAmF;YACnF,gEAAgE;QACjE,WAAW,EAAE,qCAAqC;QAClD,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;SAClB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA4D,EAAE,EAAE;YAE/E,MAAM,YAAY,GAAe,EAAE,CAAC;YACpC,IAAI,UAA6B,CAAC;YAElC,MAAM,mBAAmB,GAAG,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAExF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAE9D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5E,MAAM,eAAe,GAAG,IAAA,4DAA6B,EACpD,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,MAAM,CACd,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC5D,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACnC,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;oBAC3B,CAAC;gBACF,CAAC;gBACD,UAAU,GAAG,SAAS,CAAC;YACxB,CAAC;iBAAM,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAErC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACxC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBAC3B,CAAC;gBACD,UAAU,GAAG,qBAAqB,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACP,OAAO;oBACN,MAAM,EACL,iIAAiI;iBAClI,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO;oBACN,MAAM,EACL,UAAU,KAAK,SAAS;wBACvB,CAAC,CAAC,uHAAuH;wBACzH,CAAC,CAAC,2EAA2E;iBAC/E,CAAC;YACH,CAAC;YAED,IAAI,wBAAwB,GAAG,KAAK,CAAC;YACrC,MAAM,+BAA+B,GAAG,kCAAkC,CACzE,YAAY,EACZ,GAAG,EAAE;gBACJ,wBAAwB,GAAG,IAAI,CAAC;YACjC,CAAC,CACD,CAAC;YAGF,+BAA+B,CAAC,gBAAgB,CAAC,GAAG,sBAAsB,EAAE,CAAC;YAC7E,+BAA+B,CAAC,UAAU,CAAC,GAAG,IAAA,iCAAiB,GAAE,CAAC;YAGlE,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3B,+BAA+B,CAAC,QAAQ,GAAG,IAAA,kCAAkB,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,UAAU,GAAG,iBAAiB,IAAA,eAAM,EAAC,CAAC,CAAC,EAAE,CAAC;YAGhD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;gBAC1C,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE;oBACR,QAAQ,EAAE,OAAO,CAAC,mBAAmB;oBACrC,IAAI,EAAE,gCAAgC;oBACtC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC;iBACnD;aACD,CAAC,CAAC;YACH,IAAI,QAAwD,CAAC;YAC7D,IAAI,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAA,kCAAkB,EAAC,OAAO,EAAE;oBAC5C,OAAO,EAAE,UAAU;oBACnB,IAAI,EAAE,gCAAgC;oBACtC,IAAI,EAAE,0BAA0B;oBAChC,MAAM,EAAE;wBACP,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,CACxC,CAAC,KAMA,EAAE,EAAE,CAAC,CAAC;4BACN,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACxB,CAAC,CACF;qBACD;iBACD,CAAC,CAAC;gBACH,MAAM,kBAAkB,GAAG,IAAA,kCAAkB,EAC5C,OAAO,EACP,+BAA+B,EAC/B,gCAAgC,CAChC,CAAC;gBACF,MAAM,aAAa,GAAG,IAAA,yDAAuB,EAAC,UAAU,CAAC,CAAC;gBAC1D,MAAM,UAAU,GAAG,MAAM,IAAA,4BAAY,EAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACnE,MAAM,QAAQ,GAAG,IAAI,aAAK,CAAC;wBAC1B,EAAE,EAAE,UAAU;wBACd,IAAI,EAAE,gCAAgC;wBACtC,YAAY,EAAE;4BACb,IAAI,EAAE,QAAiB;4BACvB,OAAO,EAAE,aAAa;4BACtB,eAAe,EAAE;gCAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;6BAClD;yBACD;wBACD,KAAK,EAAE,OAAO,CAAC,OAAO;wBACtB,KAAK,EAAE,kBAAkB;qBACzB,CAAC,CAAC;oBACH,IAAA,uCAAmB,EAClB,QAAQ,EACR,IAAA,yCAAqB,EAAC;wBACrB,YAAY,EAAE,aAAa;wBAC3B,KAAK,EAAE,kBAAkB;wBACzB,OAAO,EAAE,OAAO,CAAC,OAAO;qBACxB,CAAC,CACF,CAAC;oBAEF,IAAA,yCAAkB,EAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;oBAG1D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO;wBAC7B,CAAC,CAAC,sBAAsB,KAAK,CAAC,OAAO,EAAE;wBACvC,CAAC,CAAC,uGAAuG,CAAC;oBAE3G,IAAI,aAAa,GAAG,EAAE,CAAC;oBACvB,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAC1C,CAAC,CAMA,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/G,CAAC;wBACF,aAAa,GAAG,0BAA0B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnE,CAAC;oBAID,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACrE,MAAM,YAAY,GACjB,OAAO,IAAI,OAAO,CAAC,iBAAiB;wBACnC,CAAC,CAAC,6BAA6B,OAAO,CAAC,iBAAiB,IAAI;4BAC3D,wDAAwD;4BACxD,yEAAyE;wBAC1E,CAAC,CAAC,EAAE,CAAC;oBAEP,MAAM,QAAQ,GAAG;wBAChB,wBAAwB,KAAK,CAAC,cAAc,EAAE;wBAC9C,EAAE;wBACF,QAAQ;wBACR,aAAa;wBACb,YAAY;wBACZ,EAAE;wBACF,yBAAyB;wBACzB,sLAAsL;qBACtL;yBACC,MAAM,CAAC,OAAO,CAAC;yBACf,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEb,MAAM,WAAW,GAAG,IAAA,qCAAiB,GAAE,CAAC;oBACxC,OAAO,MAAM,IAAA,0CAAsB,EAAC,WAAW,EAAE,KAAK,IAAI,EAAE;wBAE3D,MAAM,iBAAiB,GAAG,IAAA,mDAAuB,EAAC,WAAW,CAAC,CAAC;wBAC/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE;4BAC9C,QAAQ,EAAE,qBAAS,CAAC,OAAO;4BAC3B,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,eAAe,EAAE;gCAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;6BAClD;4BACD,GAAG,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,EAAE,CAAC;yBAC9C,CAAC,CAAC;wBAEH,IAAI,YAAY,GAAG,MAAM,CAAC;wBAC1B,IAAI,iBAAiB,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7E,IAAI,qBAAqB,GAAG,EAAE,CAAC;wBAC/B,MAAM,UAAU,GAAG,CAAC,CAAC;wBACrB,IAAI,UAAU,GAAG,CAAC,CAAC;wBAEnB,OAAO,IAAI,EAAE,CAAC;4BACb,MAAM,MAAM,GAAG,MAAM,IAAA,kDAAsB,EAAC;gCAC3C,KAAK,EAAE,QAAQ;gCACf,MAAM,EAAE,YAAY;gCACpB,kBAAkB,EAAE,iBAAiB;gCACrC,OAAO,EAAE;oCACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;oCAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;oCACpB,OAAO,EAAE,UAAU;oCACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oCAC1B,MAAM,EAAE,OAAO,CAAC,WAAW;oCAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;iCACtB;gCACD,OAAO,EAAE;oCACR,IAAI,EAAE,MAAM;oCACZ,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;wCACxC,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;4CAClC,MAAM,IAAI,KAAK,CACd,0EAA0E,CAC1E,CAAC;wCACH,CAAC;wCACD,OAAO,MAAM,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;oCACrD,CAAC;oCACD,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;wCAC5B,qBAAqB,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;oCACnD,CAAC;iCACD;gCACD,iBAAiB;6BACjB,CAAC,CAAC;4BAEH,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gCACnC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;4BACjE,CAAC;4BAKD,IAAI,wBAAwB,EAAE,CAAC;gCAC9B,OAAO,qBAAqB,CAAC;4BAC9B,CAAC;4BAED,IAAI,qBAAqB,KAAK,gBAAgB,IAAI,UAAU,GAAG,UAAU,EAAE,CAAC;gCAK3E,UAAU,EAAE,CAAC;gCACb,MAAM,aAAa,GAAG,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gCACpE,MAAM,UAAU,GAAG,IAAA,sDAAqB,EAAC,aAAa,CAAC,CAAC;gCACxD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE;oCAC/C,QAAQ,EAAE,qBAAS,CAAC,OAAO;oCAC3B,WAAW,EAAE,OAAO,CAAC,WAAW;oCAChC,eAAe,EAAE;wCAChB,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;qCAClD;oCACD,GAAG,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,EAAE,CAAC;iCAC9C,CAAC,CAAC;gCACH,YAAY,GAAG,KAAK,CAAC;gCACrB,iBAAiB;oCAChB,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC;wCAChD,MAAM,CAAC,WAAW;wCAClB,iBAAiB,CAAC;gCACnB,SAAS;4BACV,CAAC;4BAED,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;wBACxE,CAAC;oBACF,CAAC,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,MAAM,IAAA,8BAAc,EAAC,OAAO,EAAE,QAAQ,EAAE;oBACvC,OAAO,EAAE;wBACR,MAAM,EAAE,UAAU;wBAClB,OAAO,EAAE,UAAU;wBACnB,IAAI,EAAE,gCAAgC;qBACtC;iBACD,CAAC,CAAC;gBAEH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC1C,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE;wBACR,IAAI,EAAE,gCAAgC;wBACtC,MAAM,EAAE,UAAU;qBAClB;iBACD,CAAC,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,IAAA,4BAAY,EAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC5C,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,gCAAgC;iBAC5C,CAAC,CAAC;gBAEH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC1C,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE;wBACR,IAAI,EAAE,gCAAgC;wBACtC,MAAM,EAAE,EAAE;wBACV,KAAK,EAAE,YAAY;qBACnB;iBACD,CAAC,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,wBAAwB,YAAY,EAAE,EAAE,CAAC;YAC3D,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/orchestration/build-workflow-agent.prompt.js

@@ -2,7 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BUILDER_AGENT_PROMPT = void 0;
 exports.createSandboxBuilderAgentPrompt = createSandboxBuilderAgentPrompt;
-const parameter_guides_1 = require("@n8n/workflow-sdk/prompts/node-guidance/parameter-guides");
 const node_selection_1 = require("@n8n/workflow-sdk/prompts/node-selection");
 const sdk_reference_1 = require("@n8n/workflow-sdk/prompts/sdk-reference");
 const shared_prompts_1 = require("../../agent/shared-prompts");
@@ -33,11 +32,14 @@ const SDK_CODE_RULES = `## SDK Code Rules
 - Use \`expr('{{ $json.field }}')\` for n8n expressions. Variables MUST be inside \`{{ }}\`.
 - Do NOT use \`as const\` assertions — the workflow parser only supports JavaScript syntax, not TypeScript-only features. Just use plain string literals.
 - Use string values directly for discriminator fields like \`resource\` and \`operation\` (e.g., \`resource: 'message'\` not \`resource: 'message' as const\`).
-- When editing a pre-loaded workflow, **remove \`position\` arrays** from node configs — they are auto-calculated.
-- **No em-dash (\`—\`) or other special Unicode characters in node names or string values.** Use plain hyphen (\`-\`) instead. The SDK parser cannot handle em-dashes.
-- **IF node combinator** must be \`'and'\` or \`'or'\` (not \`'any'\` or \`'all'\`).`;
-function buildBuilderSpecificPatterns(mode) {
-    const openAiCredExample = mode === 'sandbox' ? "{ id: 'credId', name: 'OpenAI account' }" : "newCredential('OpenAI')";
+- When editing a pre-loaded workflow, **remove \`position\` arrays** from node configs — they are auto-calculated.`;
+const NODE_CONFIGURATION_SAFETY_RULES = `## Node Configuration Safety Rules
+
+- Fetch \`nodes(action="type-definition")\` before configuring nodes. Generated definitions and \`@builderHint\` annotations are the source of truth.
+- Use live \`nodes(action="explore-resources")\` for resource locator, list, and model fields when credentials are available.
+- If a configuration is unclear after reading the definition, ask for clarification or use placeholders — do not guess.`;
+function buildBuilderSpecificPatterns() {
+    const openAiCredExample = "newCredential('OpenAI')";
     return `## Critical Patterns (Common Mistakes)
 
 **Pay attention to @builderHint annotations in search results and type definitions** — these provide critical guidance on how to correctly configure node parameters. Write them out as notes when reviewing — they prevent common configuration mistakes.
@@ -244,14 +246,14 @@ ${node_selection_1.CONNECTION_CHANGING_PARAMETERS}
 ### Baseline Flow Control Nodes
 ${node_selection_1.BASELINE_FLOW_CONTROL}`;
 }
-const BUILDER_SPECIFIC_PATTERNS_TOOL = buildBuilderSpecificPatterns('tool');
-const BUILDER_SPECIFIC_PATTERNS_SANDBOX = buildBuilderSpecificPatterns('sandbox');
+const BUILDER_SPECIFIC_PATTERNS = buildBuilderSpecificPatterns();
 const SANDBOX_WORKFLOW_RULES = `Follow these rules strictly when generating workflows:
 
-1. **Always use raw credential objects from \`credentials(action="list")\`**
-   - Wire credentials as \`{ id, name }\` objects returned by \`credentials(action="list")\`
-   - NEVER use placeholder strings, fake API keys, or hardcoded auth values
-   - Example: \`credentials: { slackApi: { id: 'yXYBqho73obh58ZS', name: 'Slack Bot' } }\`
+1. **Use \`newCredential()\` for authentication**
+   - If the user selected a specific credential or an existing workflow already has one, wire it as \`newCredential('Credential Name', 'credential-id')\` using the exact ID from \`credentials(action="list")\` or the pre-loaded workflow
+   - If no exact credential was selected, more than one credential matches, or the service needs a new credential, wire \`newCredential('Suggested Credential Name')\`; \`submit-workflow\` will mock it for verification and the orchestrator will route setup after the build
+   - NEVER invent credential IDs, placeholder strings, fake API keys, or hardcoded auth values
+   - Example: \`credentials: { slackApi: newCredential('Slack Bot') }\`
    - The key (e.g. \`slackApi\`) is the credential **type** from the node type definition
 
 2. **Trust empty item lists — don't synthesize fake items**
@@ -273,28 +275,14 @@ const SANDBOX_WORKFLOW_RULES = `Follow these rules strictly when generating work
    - **Many mutually exclusive paths keyed off a value** → \`switch\` (\`onCase\`).
    - Nested control flow is supported: \`ifNode.onTrue(loopBuilder)\`, \`switchNode.onCase(0, loopBuilder)\`, and \`splitInBatches(sib).onEachBatch(ifElseBuilder)\` all compile and wire correctly. Use them when the semantics genuinely call for it, not as a workaround for empty-list handling.`;
 function composeSdkRulesAndPatterns(mode) {
-    const sandboxOverride = mode === 'sandbox'
-        ? "> **Sandbox credential override**: The SDK pattern examples below use `newCredential('X')`. " +
-            "In sandbox mode, replace every `newCredential('X')` with the raw `{ id, name }` object from " +
-            '`credentials(action="list")`. `newCredential()` serializes to `undefined` in sandbox and will ' +
-            'silently drop credentials from the saved workflow.'
-        : null;
     return [
         SDK_CODE_RULES,
         mode === 'sandbox' ? SANDBOX_WORKFLOW_RULES : sdk_reference_1.WORKFLOW_RULES,
-        ...(sandboxOverride ? [sandboxOverride] : []),
         '## SDK Patterns Reference\n\n' + sdk_reference_1.WORKFLOW_SDK_PATTERNS,
         '## Expression Reference\n\n' + sdk_reference_1.EXPRESSION_REFERENCE,
         '## Additional Functions\n\n' + sdk_reference_1.ADDITIONAL_FUNCTIONS,
-        '## Node-Specific Configuration Guides',
-        parameter_guides_1.IF_NODE_GUIDE.content,
-        parameter_guides_1.SWITCH_NODE_GUIDE.content,
-        parameter_guides_1.SET_NODE_GUIDE.content,
-        parameter_guides_1.HTTP_REQUEST_GUIDE.content,
-        parameter_guides_1.TOOL_NODES_GUIDE.content,
-        parameter_guides_1.EMBEDDING_NODES_GUIDE.content,
-        parameter_guides_1.RESOURCE_LOCATOR_GUIDE.content,
-        mode === 'sandbox' ? BUILDER_SPECIFIC_PATTERNS_SANDBOX : BUILDER_SPECIFIC_PATTERNS_TOOL,
+        NODE_CONFIGURATION_SAFETY_RULES,
+        BUILDER_SPECIFIC_PATTERNS,
     ].join('\n\n');
 }
 const SDK_RULES_AND_PATTERNS_TOOL = composeSdkRulesAndPatterns('tool');
@@ -321,10 +309,11 @@ ${shared_prompts_1.PLACEHOLDERS_RULE}
 Do NOT produce visible output until step 5. All reasoning happens internally.
 
 ## Credential Rules (tool mode)
-- Always use \`newCredential('Credential Name')\` for credentials, never fake keys or placeholders.
-- NEVER use raw credential objects like \`{ id: '...', name: '...' }\` — that form is for sandbox mode only.
+- Use \`newCredential('Credential Name', 'credential-id')\` only when the user selected a specific existing credential or the workflow already has one.
+- If no exact credential was selected, more than one credential matches, or the service needs a new credential, use \`newCredential('Suggested Credential Name')\`; the build tools mock unresolved credentials for verification.
+- NEVER use raw credential objects like \`{ id: '...', name: '...' }\` in tool mode.
 - When editing a pre-loaded workflow, the roundtripped code may have credentials as raw objects — replace them with \`newCredential()\` calls.
-- Unresolved credentials (where the user chose mock data or no credential is available) will be automatically mocked via pinned data at submit time. Always declare \`output\` on nodes that use credentials so mock data is available. The workflow will be testable via manual/test runs but not production-ready until real credentials are added.
+- Unresolved credentials (where the user chose mock data, no credential is available, or no explicit selection was made) will be automatically mocked via pinned data at submit time. Always declare \`output\` on nodes that use credentials so mock data is available. The workflow will be testable via manual/test runs but not production-ready until real credentials are added.
 
 ${SDK_RULES_AND_PATTERNS_TOOL}
 `;
@@ -435,7 +424,7 @@ Supported input types: \`string\`, \`number\`, \`boolean\`, \`array\`, \`object\
 ### Step 2: Submit and test the chunk
 
 1. Write the chunk file, then submit it: \`submit-workflow\` with the chunk file path.
-   - Sub-workflows with \`executeWorkflowTrigger\` can be tested immediately via \`executions(action="run")\` without publishing. However, they must be **published** via \`workflows(action="publish")\` before the parent workflow can call them in production (trigger-based) executions.
+   - Sub-workflows with \`executeWorkflowTrigger\` can be tested immediately via \`executions(action="run")\`.
 2. Run the chunk: \`executions(action="run")\` with \`inputData\` matching the trigger schema.
    - **Webhook workflows**: \`inputData\` IS the request body — do NOT wrap it in \`{ body: ... }\`. The system automatically places \`inputData\` into \`{ headers, query, body: inputData }\`. So to test a webhook expecting \`{ title: "Hello" }\`, pass \`inputData: { title: "Hello" }\`. Inside the workflow, the data arrives at \`$json.body.title\`.
    - **Event-based triggers** (e.g. Linear Trigger, GitHub Trigger, Slack Trigger): pass \`inputData\` matching what the trigger would normally emit. The system injects it as the trigger node's output — e.g. \`inputData: { action: "create", data: { id: "123", title: "Test issue" } }\` for a Linear Trigger. No need to rebuild the workflow with a Manual Trigger.
@@ -488,14 +477,13 @@ Replace \`CHUNK_WORKFLOW_ID\` with the actual ID returned by \`submit-workflow\`
 
 ${shared_prompts_1.PLACEHOLDERS_RULE}
 
-## Setup Workflows (Create Missing Resources)
+## Missing Resources
 
 When \`nodes(action="explore-resources")\` returns no results for a required resource:
 
-1. Use \`nodes(action="search")\` and \`nodes(action="type-definition")\` to find the "create" operation for that resource type
-2. Build a one-shot setup workflow in \`chunks/setup-<resource>.ts\` using a manual trigger + the create node
-3. Submit and run it — extract the created resource ID from the execution result
-4. Use that real resource ID in the main workflow
+1. If the resource can be represented as a user choice, use \`placeholder('Select <resource>')\` and let the setup flow collect it after the build
+2. If the user explicitly asked you to create the resource and the node type definition has a safe create operation, build and verify that resource-creation workflow as part of the requested work
+3. Otherwise, leave the main workflow as a saved draft and mention the missing resource in the one-line completion summary
 
 **For resources that can't be created via n8n** (e.g., Slack channels, external API resources), explain clearly in your summary what the user needs to create manually and what ID to put where.
 
@@ -513,7 +501,7 @@ ${shared_prompts_1.ASK_USER_FALLBACK}
 - You CANNOT find or use n8n API keys — they do not exist in the sandbox environment
 - Do NOT spend time searching for API keys, config files, environment variables, or process info — none of it is accessible
 
-**All interaction with n8n is through the provided tools:** \`submit-workflow\`, \`executions(action="run" | "debug" | "get")\`, \`credentials(action="list" | "test")\`, \`nodes(action="explore-resources")\`, \`workflows(action="publish" | "unpublish")\`, \`data-tables(action="list" | "create" | "schema")\`, etc. These tools communicate with n8n internally — no HTTP required.
+**All interaction with n8n is through the provided tools:** \`submit-workflow\`, \`executions(action="run" | "debug" | "get")\`, \`credentials(action="list" | "get" | "search-types" | "test")\`, \`nodes(action="explore-resources")\`, \`workflows(action="list" | "get" | "get-as-code")\`, \`data-tables(action="list" | "create" | "schema")\`, etc. These tools communicate with n8n internally — no HTTP required.
 
 ## Sandbox-Specific Rules
 
@@ -523,15 +511,25 @@ ${shared_prompts_1.ASK_USER_FALLBACK}
 
 ## Credentials (sandbox mode)
 
-Sandbox mode uses **raw credential objects** (not \`newCredential()\`). Call \`credentials(action="list")\` early. Each credential has an \`id\`, \`name\`, and \`type\`. Wire them into nodes like this:
+Sandbox mode uses \`newCredential()\` for authentication. Call \`credentials(action="list")\` early. Each credential has an \`id\`, \`name\`, and \`type\`. Wire selected existing credentials into nodes like this:
 
 \`\`\`typescript
 credentials: {
-  openWeatherMapApi: { id: 'yXYBqho73obh58ZS', name: 'OpenWeatherMap account' }
+  openWeatherMapApi: newCredential('OpenWeatherMap account', 'yXYBqho73obh58ZS')
 }
 \`\`\`
 
-The key (\`openWeatherMapApi\`) is the credential **type** from the node type definition. The \`id\` and \`name\` come from \`credentials(action="list")\`.
+For credentials that are not selected yet, keep the credential type key and omit the ID:
+
+\`\`\`typescript
+credentials: {
+  openWeatherMapApi: newCredential('OpenWeatherMap account')
+}
+\`\`\`
+
+The key (\`openWeatherMapApi\`) is the credential **type** from the node type definition. Exact IDs and names come from \`credentials(action="list")\`.
+
+Use the two-argument form only when the user selected the credential, there is exactly one matching credential, or you are preserving a credential already present on an existing workflow. If no exact credential was selected, more than one credential matches, or the service needs a new credential, use \`newCredential('Suggested Credential Name')\`; \`submit-workflow\` mocks it for verification and the orchestrator handles setup after the build.
 
 If the required credential type is not in \`credentials(action="list")\` results, call \`credentials(action="search-types")\` with the service name (e.g. "linear", "notion") to discover available dedicated credential types. Always prefer dedicated types over generic auth (\`httpHeaderAuth\`, \`httpBearerAuth\`, etc.). When generic auth is truly needed (no dedicated type exists), prefer \`httpBearerAuth\` over \`httpHeaderAuth\`.
 
@@ -547,13 +545,12 @@ n8n normalizes column names to snake_case (e.g., \`dayName\` → \`day_name\`).
 - **Complex workflows (5+ nodes, 2+ integrations) MUST use the Compositional Workflow Pattern.** Decompose into sub-workflows, test each independently, then compose. Do NOT write everything in a single workflow.
 - **If you edit code after submitting, you MUST call \`submit-workflow\` again before doing anything else (verify, run, or finish).** The system tracks file hashes — if the file changed since the last submit, your work is discarded. The sequence is always: edit → submit → then verify/run/finish.
 - **Follow the runtime verification instructions in your briefing.** If the briefing says verification is required, do not stop after a successful submit.
-- **Do NOT call \`workflows(action="publish")\`.** Publishing is the user's decision after they have tested the workflow. Your job ends at a successful submit.
 
 ## Mandatory Process
 
 ### For simple workflows (< 5 nodes, single integration):
 
-1. **Discover credentials**: Call \`credentials(action="list")\`. Note each credential's \`id\`, \`name\`, and \`type\`. You'll wire these into nodes as \`credentials: { credType: { id, name } }\`. If a required credential doesn't exist, mention it in your summary.
+1. **Discover credentials**: Call \`credentials(action="list")\`. Note each credential's \`id\`, \`name\`, and \`type\`. Use \`newCredential('Name', 'id')\` only for an explicitly selected, exactly matched, or existing workflow credential. For unresolved credentials, use \`newCredential('Suggested Name')\`; \`submit-workflow\` records the mocked credential and the orchestrator routes to setup after verification.
 
 2. **Discover nodes**:
    a. If the workflow fits a known category (notification, data_persistence, chatbot, scheduling, data_transformation, data_extraction, document_processing, form_input, content_generation, triage, scraping_and_research), call \`nodes(action="suggested")\` first — it returns curated node recommendations with pattern hints and configuration notes. **Pay attention to the notes** — they prevent common configuration mistakes.
@@ -569,11 +566,11 @@ n8n normalizes column names to snake_case (e.g., \`dayName\` → \`day_name\`).
 3. **Get node schemas**: Call \`nodes(action="type-definition")\` with ALL the node IDs you need in a single call (up to 5). For nodes with discriminators (from search results), include the \`resource\` and \`operation\` fields. **Read the definitions carefully** — they contain exact parameter names, types, required fields, valid enum values, credential types, displayOptions conditions, and \`@builderHint\` annotations with critical configuration guidance.
    **Important**: Only call \`nodes(action="type-definition")\` for nodes you will actually use in the workflow. Do not speculatively fetch definitions "just in case". If a definition returns empty or an error, do not retry — proceed with the information from \`nodes(action="search")\` results instead.
 
-4. **Resolve real resource IDs**: Check the node schemas from step 3 for parameters with \`searchListMethod\` or \`loadOptionsMethod\`. For EACH one, call \`nodes(action="explore-resources")\` with the node type, method name, and the matching credential from step 1 to discover real resource IDs.
+4. **Resolve real resource IDs**: Check the node schemas from step 3 for parameters with \`searchListMethod\` or \`loadOptionsMethod\`. For EACH one, call \`nodes(action="explore-resources")\` with the node type, method name, and the matching explicit credential from step 1 to discover real resource IDs.
    - **This is mandatory for: calendars, spreadsheets, channels, folders, models, databases, and any other list-based parameter.** Do NOT assume values like "primary", "default", or "General" — always look up the real ID.
    - **LLM models in particular** (OpenAI, Anthropic, Groq, etc.): always call \`explore-resources\` with the node's \`@searchListMethod\` when a credential for that provider is attached. The live list reflects what the credential can actually access — free/cheap tiers are often limited (e.g. an OpenAI free-tier key may only return \`gpt-5-mini\`). Picking a model ID that the credential can't access produces a broken workflow. The list is sorted newest-first; use the \`@builderHint\` as selection guidance (e.g. "prefer the GPT-5.4 family") over the live results, not as a hard-coded pick.
    - Example: Google Calendar's \`calendar\` parameter uses \`searchListMethod: getCalendars\`. Call \`nodes(action="explore-resources")\` with \`methodName: "getCalendars"\` to get the actual calendar ID (e.g., "user@example.com"), not "primary".
-   - **Never use \`placeholder()\` or fake IDs for discoverable resources.** Create them via a setup workflow instead (see "Setup Workflows" section). For user-provided values, follow the placeholder rules in "SDK Code Rules".
+   - **Never use fake IDs for discoverable resources.** Use \`placeholder()\` when the user needs to choose or create the resource after the build. For user-provided values, follow the placeholder rules in "SDK Code Rules".
    - **If \`explore-resources\` returns more than one match and the user did not name a specific one, use \`placeholder('Select <resource>')\` for that parameter** (e.g. \`placeholder('Select a calendar')\`, \`placeholder('Select a Slack channel')\`). Picking one silently is a guess; the setup wizard surfaces placeholders so the user can choose after the build. Only pick a single match without prompting.
    - If the resource can't be created via n8n (e.g., Slack channels), explain clearly in your summary what the user needs to set up.
 
@@ -598,16 +595,16 @@ Follow the **Compositional Workflow Pattern** above. The process becomes:
 
 1. **Discover credentials** (same as above).
 2. **Discover nodes and get schemas** (same as above).
-3. **Resolve real resource IDs** (same as above — call \`nodes(action="explore-resources")\` for EVERY parameter with \`searchListMethod\` or \`loadOptionsMethod\`). Never assume IDs like "primary" or "default". If a resource doesn't exist, build a setup workflow to create it.
+3. **Resolve real resource IDs** (same as above — call \`nodes(action="explore-resources")\` for EVERY parameter with \`searchListMethod\` or \`loadOptionsMethod\`). Never assume IDs like "primary" or "default". If a resource doesn't exist, use a placeholder unless the user explicitly asked you to create that resource.
 4. **Decompose** the workflow into logical chunks. Each chunk is a standalone sub-workflow with 2-4 nodes covering one capability (e.g., "fetch and format weather data", "generate AI recommendation", "store to data table").
 5. **For each chunk**:
    a. Write the chunk to \`${workspaceRoot}/chunks/<name>.ts\` with an \`executeWorkflowTrigger\` and explicit input schema.
    b. Run tsc.
-   c. Submit the chunk: \`submit-workflow\` with \`filePath\` pointing to the chunk file. Test via \`executions(action="run")\` (no publish needed for manual runs).
+   c. Submit the chunk: \`submit-workflow\` with \`filePath\` pointing to the chunk file. Test via \`executions(action="run")\`.
    d. Fix if needed (max 2 submission fix attempts per chunk).
 6. **Write the main workflow** in \`${workspaceRoot}/src/workflow.ts\` that composes chunks via \`executeWorkflow\` nodes, referencing each chunk's workflow ID.
 7. **Submit** the main workflow.
-8. **Done**: Output ONE sentence summarizing what was built, including the workflow ID and any known issues. Do NOT publish — the user will decide when to publish after testing.
+8. **Done**: Output ONE sentence summarizing what was built, including the workflow ID and any known issues.
 
 Do NOT produce visible output until the final step. All reasoning happens internally.
 

package/dist/tools/orchestration/build-workflow-agent.prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"build-workflow-agent.prompt.js","sourceRoot":"","sources":["../../../src/tools/orchestration/build-workflow-agent.prompt.ts"],"names":[],"mappings":";;;AAgYA,0EA4SC;AApqBD,+FAQkE;AAClE,6EAIkD;AAClD,2EAKiD;AAEjD,+DAAkF;AAIlF,MAAM,yBAAyB,GAAG;;;;;;;;;;;;;;;;;;0GAkBwE,CAAC;AAI3G,MAAM,cAAc,GAAG;;;;;;;;;;qFAU8D,CAAC;AAKtF,SAAS,4BAA4B,CAAC,IAAwB;IAC7D,MAAM,iBAAiB,GACtB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,yBAAyB,CAAC;IAC7F,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA+BwB,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuK/C,iCAAgB;;;EAGhB,+CAA8B;;;EAG9B,sCAAqB,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,8BAA8B,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;AAC5E,MAAM,iCAAiC,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;AAOlF,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;qSAyBsQ,CAAC;AAEtS,SAAS,0BAA0B,CAAC,IAAwB;IAM3D,MAAM,eAAe,GACpB,IAAI,KAAK,SAAS;QACjB,CAAC,CAAC,8FAA8F;YAC/F,8FAA8F;YAC9F,gGAAgG;YAChG,oDAAoD;QACrD,CAAC,CAAC,IAAI,CAAC;IACT,OAAO;QACN,cAAc;QACd,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,8BAAc;QAC5D,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,+BAA+B,GAAG,qCAAqB;QACvD,6BAA6B,GAAG,oCAAoB;QACpD,6BAA6B,GAAG,oCAAoB;QACpD,uCAAuC;QACvC,gCAAa,CAAC,OAAO;QACrB,oCAAiB,CAAC,OAAO;QACzB,iCAAc,CAAC,OAAO;QACtB,qCAAkB,CAAC,OAAO;QAC1B,mCAAgB,CAAC,OAAO;QACxB,wCAAqB,CAAC,OAAO;QAC7B,yCAAsB,CAAC,OAAO;QAC9B,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,8BAA8B;KACvF,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,2BAA2B,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,8BAA8B,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;AAIhE,QAAA,oBAAoB,GAAG;;EAElC,yBAAyB;;;;;;EAMzB,kCAAiB;;EAEjB,kCAAiB;;;;;;;;;;;;;;;;;EAiBjB,2BAA2B;CAC5B,CAAC;AAIF,SAAgB,+BAA+B,CAAC,aAAqB;IACpE,OAAO;;EAEN,yBAAyB;;;;0BAID,aAAa,6DAA6D,aAAa;;;EAG/G,aAAa;;;;;;;;;;;;;;;;;;KAkBV,aAAa;;;;;;;;;;;;;;;KAeb,aAAa;;;;;;;;;;;;;;;;;;;;;KAqBb,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsDb,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwChB,kCAAiB;;;;;;;;;;;;;;;;;EAiBjB,kCAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCA4DmB,aAAa;;;;;;;;;;;;;;kCAcjB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;6BAwBlB,aAAa;;;;sCAIJ,aAAa;;;;;;;yFAOsC,aAAa;;;;;;;;;;;;;;EAcpG,8BAA8B;CAC/B,CAAC;AACF,CAAC"}
+{"version":3,"file":"build-workflow-agent.prompt.js","sourceRoot":"","sources":["../../../src/tools/orchestration/build-workflow-agent.prompt.ts"],"names":[],"mappings":";;;AAwWA,0EAoTC;AAppBD,6EAIkD;AAClD,2EAKiD;AAEjD,+DAAkF;AAIlF,MAAM,yBAAyB,GAAG;;;;;;;;;;;;;;;;;;0GAkBwE,CAAC;AAI3G,MAAM,cAAc,GAAG;;;;;;;;mHAQ4F,CAAC;AAEpH,MAAM,+BAA+B,GAAG;;;;wHAIgF,CAAC;AAKzH,SAAS,4BAA4B;IACpC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;IACpD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA+BwB,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuK/C,iCAAgB;;;EAGhB,+CAA8B;;;EAG9B,sCAAqB,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,yBAAyB,GAAG,4BAA4B,EAAE,CAAC;AAQjE,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;qSA0BsQ,CAAC;AAEtS,SAAS,0BAA0B,CAAC,IAAwB;IAC3D,OAAO;QACN,cAAc;QACd,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,8BAAc;QAC5D,+BAA+B,GAAG,qCAAqB;QACvD,6BAA6B,GAAG,oCAAoB;QACpD,6BAA6B,GAAG,oCAAoB;QACpD,+BAA+B;QAC/B,yBAAyB;KACzB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,2BAA2B,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,8BAA8B,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;AAIhE,QAAA,oBAAoB,GAAG;;EAElC,yBAAyB;;;;;;EAMzB,kCAAiB;;EAEjB,kCAAiB;;;;;;;;;;;;;;;;;;EAkBjB,2BAA2B;CAC5B,CAAC;AAIF,SAAgB,+BAA+B,CAAC,aAAqB;IACpE,OAAO;;EAEN,yBAAyB;;;;0BAID,aAAa,6DAA6D,aAAa;;;EAG/G,aAAa;;;;;;;;;;;;;;;;;;KAkBV,aAAa;;;;;;;;;;;;;;;KAeb,aAAa;;;;;;;;;;;;;;;;;;;;;KAqBb,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsDb,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwChB,kCAAiB;;;;;;;;;;;;;;;;EAgBjB,kCAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCAqEmB,aAAa;;;;;;;;;;;;;;kCAcjB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;6BAwBlB,aAAa;;;;sCAIJ,aAAa;;;;;;;yFAOsC,aAAa;;;;;;;;;;;;;;EAcpG,8BAA8B;CAC/B,CAAC;AACF,CAAC"}

package/dist/tools/orchestration/build-workflow-agent.tool.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import type { OrchestrationContext } from '../../types';
-import { type WorkflowBuildOutcome, type WorkflowLoopState } from '../../workflow-loop';
+import { type WorkflowBuildOutcome, type WorkflowSetupRequirement, type WorkflowVerificationReadiness, type WorkflowLoopState } from '../../workflow-loop';
 import { type SubmitWorkflowAttempt, type SubmitWorkflowOutput } from '../workflows/submit-workflow.tool';
 export declare function buildWarmBuilderFollowUp(input: {
     task: string;
@@ -9,6 +9,9 @@ export declare function buildWarmBuilderFollowUp(input: {
     workItemId: string;
 }): string;
 export declare function recordSuccessfulWorkflowBuilds(tool: unknown, onWorkflowId: (workflowId: string) => void): void;
+export type OutcomeForVerificationReadiness = Pick<WorkflowBuildOutcome, 'submitted' | 'workflowId' | 'triggerNodes' | 'mockedCredentialTypes' | 'mockedCredentialsByNode' | 'verificationPinData' | 'usesWorkflowPinDataForVerification' | 'hasUnresolvedPlaceholders' | 'verification' | 'remediation'>;
+export declare function determineVerificationReadiness(outcome: OutcomeForVerificationReadiness): WorkflowVerificationReadiness;
+export declare function determineSetupRequirement(outcome: OutcomeForVerificationReadiness): WorkflowSetupRequirement;
 export declare function mergeLatestVerificationIntoOutcome(outcome: WorkflowBuildOutcome, latestOutcome: WorkflowBuildOutcome | undefined): WorkflowBuildOutcome;
 export declare function withTerminalLoopState(outcome: WorkflowBuildOutcome, state: WorkflowLoopState | undefined): WorkflowBuildOutcome;
 export declare function finalizeBuildResult(context: OrchestrationContext, workItemId: string, result: {
@@ -18,6 +21,8 @@ export declare function finalizeBuildResult(context: OrchestrationContext, workI
     text: string;
     outcome: WorkflowBuildOutcome;
 }>;
+export declare const DETACHED_BUILDER_REQUIREMENTS = "## Detached Task Contract\n\nYou are running as a detached background task. Do not stop after a successful submit \u2014 verify the workflow works.\n\n### Completion criteria\n\nYour job is done when ONE of these is true:\n- the workflow is verified (ran successfully)\n- you are blocked after one repair attempt per unique failure\n\nDo NOT stop after a successful submit without verifying. Every trigger type is testable:\nmanual / schedule via `executions(action=\"run\")`; event-based triggers (form, webhook,\nchat, mcp, linear, github, slack, etc.) via `verify-built-workflow` with an `inputData`\npayload. The pin-data adapter injects it as the trigger node's output.\n\n### Submit discipline\n\n**Every file edit MUST be followed by submit-workflow before you do anything else.**\nThe system tracks file hashes. If you edit the code and then call `executions(action=\"run\")` or finish without re-submitting, your work is discarded. The sequence is always: edit \u2192 submit \u2192 then verify/run.\n\n### Verification\n\n- If submit-workflow returned mocked credentials, call `verify-built-workflow` with the workItemId.\n- Otherwise pick based on trigger type:\n  - **Manual / Schedule** \u2014 `executions(action=\"run\")`.\n  - **Form Trigger** \u2014 `verify-built-workflow` with `inputData` as a flat field map, e.g. `{name: \"Alice\", email: \"a@b.c\"}`. Do NOT wrap in `formFields` \u2014 production Form Trigger emits fields directly on `$json`, and the adapter rejects wrapped payloads.\n  - **Webhook** \u2014 `verify-built-workflow` with `inputData` as the body payload, e.g. `{event: \"signup\", userId: \"...\"}`. Adapter wraps it under `body`; downstream expressions use `$json.body.<field>`.\n  - **Chat Trigger** \u2014 `verify-built-workflow` with `{chatInput: \"user message\"}`.\n  - **Other event triggers (Linear, GitHub, Slack, MCP, etc.)** \u2014 `verify-built-workflow` with `inputData` matching the trigger's expected payload shape.\n- If verify-built-workflow returns remediation with `shouldEdit: false`, stop editing and follow its guidance.\n- If verification fails with `shouldEdit: true`, make one batched code repair and re-submit. Never exceed the remaining repair budget in the remediation metadata.\n- If verification fails otherwise, call `executions(action=\"debug\")`, fix the code, re-submit, and retry once.\n- If the same failure signature repeats, stop and explain the block.\n\n### Resource discovery\n\nBefore writing code that uses external services, **resolve real resource IDs**:\n- Call `nodes(action=\"explore-resources\")` for any parameter with searchListMethod when a matching explicit credential is attached (calendars, spreadsheets, channels, models, etc.)\n- Do NOT use \"primary\", \"default\", or any assumed identifier \u2014 look up the actual value\n- Call `nodes(action=\"suggested\")` early if the workflow fits a known category (web_app, form_input, data_persistence, etc.) \u2014 the pattern hints prevent common mistakes\n- Check @builderHint annotations in node type definitions for critical configuration guidance\n";
+export declare function supportingWorkflowIdsFromSubmitAttempts(submitAttempts: SubmitWorkflowAttempt[], mainWorkflowPath: string, mainWorkflowId: string | undefined, referencedWorkflowIds?: string[]): string[];
 export declare function resultFromPostStreamError(input: {
     error: unknown;
     submitAttempts: SubmitWorkflowAttempt[];
@@ -71,15 +76,15 @@ export declare const buildWorkflowAgentInputSchema: z.ZodObject<{
     reason: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     task: string;
-    workflowId?: string | undefined;
     reason?: string | undefined;
+    workflowId?: string | undefined;
     workItemId?: string | undefined;
     conversationContext?: string | undefined;
     bypassPlan?: boolean | undefined;
 }, {
     task: string;
-    workflowId?: string | undefined;
     reason?: string | undefined;
+    workflowId?: string | undefined;
     workItemId?: string | undefined;
     conversationContext?: string | undefined;
     bypassPlan?: boolean | undefined;