@relayflows/sdk 2.0.9 → 2.0.11

package/dist/cloud-http.js

@@ -0,0 +1,84 @@
+export class CloudFlowError extends Error {
+    code;
+    status;
+    constructor(code, message, status) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = 'CloudFlowError';
+    }
+}
+export function cloudConnection(options) {
+    const rawToken = options.token ?? process.env['FLOWS_CLOUD_TOKEN'];
+    const token = rawToken?.trim();
+    if (!token || /[\r\n]/u.test(rawToken) || /^(?:rk|ot)_live_/u.test(token)) {
+        throw new CloudFlowError('configuration', 'Set FLOWS_CLOUD_TOKEN to a scoped Cloud API token (workflow:invoke:write and workflow:runs:read).');
+    }
+    let url;
+    try {
+        url = new URL(options.apiUrl ?? process.env['FLOWS_CLOUD_URL'] ?? 'https://agentrelay.com/cloud');
+    }
+    catch {
+        throw new CloudFlowError('configuration', 'FLOWS_CLOUD_URL must be an absolute Cloud application base URL.');
+    }
+    if (url.protocol !== 'https:'
+        || url.username || url.password || url.search || url.hash || !/^\/[A-Za-z0-9/_-]*$/u.test(url.pathname)) {
+        throw new CloudFlowError('configuration', 'Cloud URL must use HTTPS and a plain base path.');
+    }
+    return { baseUrl: `${url.origin}${url.pathname.replace(/\/+$/u, '')}`, token };
+}
+export async function cloudRequest(path, options, body) {
+    const { baseUrl, token } = cloudConnection(options);
+    const timeout = options.requestTimeoutMs ?? 30_000;
+    if (!Number.isSafeInteger(timeout) || timeout < 1 || timeout > 2_147_483_647) {
+        throw new CloudFlowError('configuration', 'requestTimeoutMs must be a positive 32-bit integer.');
+    }
+    const deadline = AbortSignal.timeout(timeout);
+    let response;
+    try {
+        response = await fetch(`${baseUrl}${path}`, {
+            method: body === undefined ? 'GET' : 'POST',
+            headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },
+            ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+            signal: options.signal ? AbortSignal.any([options.signal, deadline]) : deadline,
+            // A redirect must never carry the credential to a different origin.
+            redirect: 'error',
+        });
+    }
+    catch (error) {
+        options.signal?.throwIfAborted();
+        throw transportError(deadline.aborted ? deadline.reason : error);
+    }
+    if (!response.ok) {
+        // Do not echo server response bodies: they may contain credentials or source.
+        throw new CloudFlowError('http_error', `Cloud request failed with HTTP ${response.status}.`, response.status);
+    }
+    try {
+        return await response.json();
+    }
+    catch (error) {
+        options.signal?.throwIfAborted();
+        if (!(error instanceof SyntaxError))
+            throw transportError(deadline.aborted ? deadline.reason : error);
+        throw new CloudFlowError('invalid_response', 'Cloud returned a non-JSON response.');
+    }
+}
+// Defensive path-segment constraint; accepting a new server ID format needs an SDK change.
+export function cloudRunId(value) {
+    if (typeof value !== 'string' || !/^[A-Za-z0-9_-]{1,128}$/u.test(value)) {
+        throw new CloudFlowError('invalid_response', 'Cloud run ID must contain only letters, digits, underscores, or hyphens.');
+    }
+    return value;
+}
+export function isCloudRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function transportError(error) {
+    const cause = error instanceof Error ? error.cause : undefined;
+    const code = isCloudRecord(cause) ? cause.code : undefined;
+    const transient = (error instanceof Error && error.name === 'TimeoutError')
+        || ['ECONNRESET', 'ECONNREFUSED', 'EAI_AGAIN', 'ETIMEDOUT',
+            'UND_ERR_CONNECT_TIMEOUT', 'UND_ERR_HEADERS_TIMEOUT', 'UND_ERR_BODY_TIMEOUT', 'UND_ERR_SOCKET'].includes(String(code));
+    return new CloudFlowError(transient ? 'transient_error' : 'transport_error', transient ? 'Cloud transport temporarily unavailable.' : 'Cloud transport failed; check TLS and the configured URL (redirects are refused).');
+}
+//# sourceMappingURL=cloud-http.js.map

package/dist/cloud-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-http.js","sourceRoot":"","sources":["../src/cloud-http.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B;IAEA;IAHX,YACW,IAA0I,EACnJ,OAAe,EACN,MAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAsI;QAE1I,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,QAAS,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,cAAc,CAAC,eAAe,EACtC,mGAAmG,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,8BAA8B,CAAC,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,iEAAiE,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;WACxB,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,iDAAiD,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,OAA+B,EAC/B,IAAc;IAEd,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,aAAa,EAAE,CAAC;QAC7E,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,qDAAqD,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;YAC1C,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YAC3C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjF,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ;YAC/E,oEAAoE;YACpE,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,8EAA8E;QAC9E,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,kCAAkC,QAAQ,CAAC,MAAM,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;YAAE,MAAM,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtG,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,0EAA0E,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,SAAS,GAAG,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;WACtE,CAAC,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW;YACxD,yBAAyB,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3H,OAAO,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,EACzE,SAAS,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,mFAAmF,CAAC,CAAC;AAClJ,CAAC"}

package/dist/cloud-run.d.ts

@@ -0,0 +1,38 @@
+import type { RunCompletionReason } from './protocol.js';
+import type { FlowSpec } from './spec.js';
+import { type CloudConnectionOptions } from './cloud-http.js';
+export type CloudFlowSource = FlowSpec | {
+    path: string;
+};
+export interface RunInCloudOptions extends CloudConnectionOptions {
+    /** Existing Cloud workspace to run in; provisioning/authorization remains server-side. */
+    workspaceId?: string;
+}
+export interface CloudRunReceipt {
+    runId: string;
+    status: 'pending' | 'running';
+    /** Local correlation hash of the compiled spec; NOT server attestation or a sealed bundle digest. */
+    specHash: string;
+    /** Authenticated run API resource; this is not a public sharing URL. */
+    apiUrl: string;
+}
+export type CloudRunState = {
+    runId: string;
+    status: 'pending' | 'running';
+} | {
+    runId: string;
+    status: 'completed' | 'failed' | 'cancelled';
+    completionReason: RunCompletionReason;
+};
+/**
+ * Submit a declarative flow to Cloud's pinned v2 runtime. Compilation only
+ * happens here; Cloud owns provisioning and the Rust engine owns execution.
+ * Returns acceptance, not completion. No local daemon, CLI probe, or node up.
+ */
+export declare function runInCloud(flow: CloudFlowSource, options?: RunInCloudOptions): Promise<CloudRunReceipt>;
+export declare function getCloudFlowRun(runId: string, options?: CloudConnectionOptions): Promise<CloudRunState>;
+/** Wait without a fixed execution deadline. Abort stops observation, not the hosted run. */
+export declare function waitForCloudFlowRun(runId: string, options?: CloudConnectionOptions & {
+    pollIntervalMs?: number;
+}): Promise<CloudRunState>;
+//# sourceMappingURL=cloud-run.d.ts.map

package/dist/cloud-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-run.d.ts","sourceRoot":"","sources":["../src/cloud-run.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAMzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC1D,MAAM,WAAW,iBAAkB,SAAQ,sBAAsB;IAC/D,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,qGAAqG;IACrG,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,MAAM,aAAa,GACrB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;CAAE,GAChD;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAAC,gBAAgB,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE3G;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,eAAe,EACrB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,eAAe,CAAC,CA8C1B;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,aAAa,CAAC,CAkBxB;AAED,4FAA4F;AAC5F,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,sBAAsB,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GACjE,OAAO,CAAC,aAAa,CAAC,CAuBxB"}

package/dist/cloud-run.js

@@ -0,0 +1,112 @@
+import { RUN_COMPLETION_REASONS } from '@relayflows/surface';
+import { readFile } from 'node:fs/promises';
+import { setTimeout } from 'node:timers/promises';
+import { parse as parseYaml } from 'yaml';
+import { canonicalize, specHash } from './canonical.js';
+import { CompileError, compileSpec, kernelToAuthoring, toKernelSpec } from './compile.js';
+import { CloudFlowError, cloudConnection, cloudRequest, cloudRunId, isCloudRecord, } from './cloud-http.js';
+/**
+ * Submit a declarative flow to Cloud's pinned v2 runtime. Compilation only
+ * happens here; Cloud owns provisioning and the Rust engine owns execution.
+ * Returns acceptance, not completion. No local daemon, CLI probe, or node up.
+ */
+export async function runInCloud(flow, options = {}) {
+    const { baseUrl } = cloudConnection(options);
+    let spec;
+    try {
+        options.signal?.throwIfAborted();
+        if ('path' in flow) {
+            if (!/\.(?:ya?ml|json)$/iu.test(flow.path)) {
+                throw new CloudFlowError('unsupported_source', 'Cloud v2 currently accepts declarative YAML or JSON specs; authored TypeScript flows are not supported by the hosted runtime.');
+            }
+            const parsed = parseYaml(await readFile(flow.path, 'utf8'));
+            try {
+                spec = compileSpec(parsed);
+            }
+            catch (error) {
+                if (!(error instanceof CompileError))
+                    throw error;
+                // Prefer the authoring dialect; accept compiled kernel JSON for local-CLI
+                // compatibility. If both fail, retain the original authoring diagnostic.
+                try {
+                    spec = compileSpec(kernelToAuthoring(parsed));
+                }
+                catch {
+                    throw error;
+                }
+            }
+        }
+        else {
+            spec = compileSpec(flow);
+        }
+    }
+    catch (error) {
+        options.signal?.throwIfAborted();
+        if (error instanceof CloudFlowError)
+            throw error;
+        throw new CloudFlowError('invalid_input', 'Cannot read or compile the declarative flow. Check the file path and YAML/JSON spec.');
+    }
+    options.signal?.throwIfAborted();
+    const hash = specHash(toKernelSpec(spec));
+    const result = await cloudRequest('/api/v1/workflows/run', options, {
+        // JSON is a YAML subset. Sending canonical data preserves the exact spec
+        // while using the server's existing YAML-to-config admission path.
+        workflow: canonicalize(spec),
+        fileType: 'yaml',
+        relayflowVersion: 'v2',
+        ...(options.workspaceId === undefined ? {} : { workspaceId: options.workspaceId }),
+    });
+    if (!isCloudRecord(result) || (result.status !== 'pending' && result.status !== 'running')) {
+        throw new CloudFlowError('invalid_response', 'Cloud did not return an accepted run.');
+    }
+    const runId = cloudRunId(result.runId);
+    return { runId, status: result.status, specHash: hash, apiUrl: `${baseUrl}/api/v1/workflows/runs/${runId}` };
+}
+export async function getCloudFlowRun(runId, options = {}) {
+    cloudRunId(runId);
+    const result = await cloudRequest(`/api/v1/workflows/runs/${runId}`, options);
+    if (!isCloudRecord(result) || result.runId !== runId || result.relayflowVersion !== 'v2'
+        || typeof result.status !== 'string'
+        || !['pending', 'running', 'completed', 'failed', 'cancelled'].includes(result.status)) {
+        throw new CloudFlowError('invalid_response', 'Cloud returned an invalid v2 run record.');
+    }
+    if (result.status === 'pending' || result.status === 'running')
+        return { runId, status: result.status };
+    const report = result.result;
+    const reason = isCloudRecord(report) ? report.completionReason : undefined;
+    if (typeof reason !== 'string' || !RUN_COMPLETION_REASONS.includes(reason)
+        || (result.status === 'completed' && (reason !== 'success' || !isCloudRecord(report) || report.ok !== true || report.status !== 'completed'))
+        || (result.status === 'failed' && !['step_failed', 'budget_exceeded'].includes(reason))
+        || (result.status === 'cancelled' && reason !== 'canceled')) {
+        throw new CloudFlowError('invalid_response', 'Cloud terminal record lacks a valid, consistent run completionReason; no execution outcome is attested.');
+    }
+    return { runId, status: result.status, completionReason: reason };
+}
+/** Wait without a fixed execution deadline. Abort stops observation, not the hosted run. */
+export async function waitForCloudFlowRun(runId, options = {}) {
+    const interval = options.pollIntervalMs ?? 2_000;
+    if (!Number.isSafeInteger(interval) || interval < 1 || interval > 60_000) {
+        throw new CloudFlowError('configuration', 'pollIntervalMs must be an integer from 1 to 60000.');
+    }
+    let failures = 0;
+    for (;;) {
+        options.signal?.throwIfAborted();
+        try {
+            const run = await getCloudFlowRun(runId, options);
+            failures = 0;
+            if (run.status !== 'pending' && run.status !== 'running')
+                return run;
+        }
+        catch (error) {
+            options.signal?.throwIfAborted();
+            const transient = error instanceof CloudFlowError && (error.code === 'transient_error'
+                || (error.code === 'http_error' && [408, 429, 500, 502, 503, 504].includes(error.status ?? 0)));
+            if (!transient)
+                throw error;
+            // Only safe GET observation retries. Delay caps at 30s; no overall run deadline.
+            failures = Math.min(failures + 1, 16);
+        }
+        await setTimeout(failures ? Math.min(interval * 2 ** (failures - 1), 30_000) : interval, undefined, { signal: options.signal });
+    }
+}
+//# sourceMappingURL=cloud-run.js.map

package/dist/cloud-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-run.js","sourceRoot":"","sources":["../src/cloud-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE1F,OAAO,EACL,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,GAEzE,MAAM,iBAAiB,CAAC;AAmBzB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAqB,EACrB,UAA6B,EAAE;IAE/B,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAC3C,+HAA+H,CAAC,CAAC;YACrI,CAAC;YACD,MAAM,MAAM,GAAY,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAClD,0EAA0E;gBAC1E,yEAAyE;gBACzE,IAAI,CAAC;oBACH,IAAI,GAAG,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,IAAI,KAAK,YAAY,cAAc;YAAE,MAAM,KAAK,CAAC;QACjD,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,sFAAsF,CAAC,CAAC;IACpI,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,uBAAuB,EAAE,OAAO,EAAE;QAClE,yEAAyE;QACzE,mEAAmE;QACnE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC;QAC5B,QAAQ,EAAE,MAAM;QAChB,gBAAgB,EAAE,IAAI;QACtB,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;KACnF,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,0BAA0B,KAAK,EAAE,EAAE,CAAC;AAC/G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,UAAkC,EAAE;IAEpC,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,0BAA0B,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;WACnF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;WACjC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,0CAA0C,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACxG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAE,sBAA4C,CAAC,QAAQ,CAAC,MAAM,CAAC;WAC5F,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;WAC1I,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;WACpF,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,yGAAyG,CAAC,CAAC;IAC1J,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAA8C,EAAE,gBAAgB,EAAE,MAA6B,EAAE,CAAC;AACnI,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,UAAgE,EAAE;IAElE,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;QACzE,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC;QACR,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAClD,QAAQ,GAAG,CAAC,CAAC;YACb,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,KAAK,YAAY,cAAc,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB;mBACjF,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAClG,IAAI,CAAC,SAAS;gBAAE,MAAM,KAAK,CAAC;YAC5B,iFAAiF;YACjF,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EACrF,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/compile.d.ts

@@ -3,20 +3,38 @@ import { SPEC_SCHEMA_VERSION } from './spec.js';
 import { canonicalize, specHash } from './canonical.js';
 export declare class CompileError extends Error {
     readonly errors: string[];
-    constructor(errors: string[]);
+    /** Optional diagnostic kind for callers that classify refusals (e.g. preflight). */
+    readonly kind?: string;
+    constructor(errors: string[], kind?: string);
 }
+/**
+ * Parse the f.run timeout before submitting any command to the kernel.
+ *
+ * Accepts a positive whole-millisecond `number`, or a duration string of the
+ * form `<coefficient><unit>` where unit is `ms` / `s` / `m` — matched by an
+ * anchored regex that captures the coefficient first (group 1) and the unit
+ * second (group 2), so a future edit cannot silently swap them. Fractional
+ * coefficients that resolve to integer milliseconds are accepted; the
+ * multiplication is rounded to the nearest integer so `1.1s → 1100`
+ * survives float-precision (`1.1 * 1000 = 1100.0000000000002`) rather than
+ * being rejected by `isSafeInteger`.
+ */
+export declare function parseStepTimeout(timeout: unknown): number;
 /**
  * Compile a YAML string into a validated authoring `FlowSpec`.
  * Throws `CompileError` on a YAML parse error or any validation failure.
  */
-export declare function compileYaml(yaml: string): FlowSpec;
+export declare function compileYaml(yaml: string): CompiledFlowSpec;
 /** Kernel-dialect canonical JSON of `compileYaml` (sorted keys, no whitespace). */
 export declare function compileYamlToCanonicalJson(yaml: string): string;
 /**
  * Validate a parsed spec object and apply authoring defaults, returning a
  * normalized `FlowSpec`. Throws `CompileError` on validation failure.
  */
-export declare function compileSpec(spec: unknown): FlowSpec;
+export type CompiledFlowSpec = Omit<FlowSpec, 'budget'> & {
+    budget?: import('./spec.js').BudgetSpec;
+};
+export declare function compileSpec(spec: unknown): CompiledFlowSpec;
 /**
  * Map an authoring `FlowSpec` to the kernel spec dialect — the single shape at
  * the SDK↔kernel boundary (`kernel/relayflowd-core/src/spec.rs`). Authoring

package/dist/compile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../src/compile.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAGV,QAAQ,EAER,aAAa,EAYd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAKxD,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACd,MAAM,EAAE,MAAM,EAAE;CAK7B;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAMlD;AAED,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CA8BnD;AAgID;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,aAAa,CA+B1D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA8BzD;AA6RD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAIxG;AAED,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC"}
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../src/compile.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAGV,QAAQ,EAER,aAAa,EAYd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAMxD,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBACX,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM;CAM5C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CA4BzD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAM1D;AAED,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG;IAAE,MAAM,CAAC,EAAE,OAAO,WAAW,EAAE,UAAU,CAAA;CAAE,CAAC;AAEtG,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,CAiD3D;AAqID;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,aAAa,CAuB1D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA8BzD;AAwSD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAIxG;AAED,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC"}

package/dist/compile.js

@@ -14,19 +14,72 @@
 // proven, not asserted: `tests/spec-parity.test.ts` and the kernel's
 // `tests/spec_parity.rs` pin both sides to the same `testdata/` fixture.
 import { parse as parseYaml } from 'yaml';
+import { parseBudget, toKernelBudget } from './budget.js';
+import { bindingDependencies } from './input-binding.js';
+import { namedGateFailure } from './named-gates.js';
+import { lowerNamedGates } from './named-gate-lowering.js';
 import { SPEC_SCHEMA_VERSION } from './spec.js';
 import { canonicalize, specHash } from './canonical.js';
 import { validateOutputDeclaration } from './output-schema.js';
 import { validateSpec } from './validate.js';
 import { snapshotJsonValue } from './json-value.js';
+import { expandYamlHelpers } from './yaml-helpers.js';
 export class CompileError extends Error {
     errors;
-    constructor(errors) {
+    /** Optional diagnostic kind for callers that classify refusals (e.g. preflight). */
+    kind;
+    constructor(errors, kind) {
         super('spec compile failed:\n  - ' + errors.join('\n  - '));
         this.name = 'CompileError';
         this.errors = errors;
+        if (kind !== undefined)
+            this.kind = kind;
     }
 }
+/**
+ * Parse the f.run timeout before submitting any command to the kernel.
+ *
+ * Accepts a positive whole-millisecond `number`, or a duration string of the
+ * form `<coefficient><unit>` where unit is `ms` / `s` / `m` — matched by an
+ * anchored regex that captures the coefficient first (group 1) and the unit
+ * second (group 2), so a future edit cannot silently swap them. Fractional
+ * coefficients that resolve to integer milliseconds are accepted; the
+ * multiplication is rounded to the nearest integer so `1.1s → 1100`
+ * survives float-precision (`1.1 * 1000 = 1100.0000000000002`) rather than
+ * being rejected by `isSafeInteger`.
+ */
+export function parseStepTimeout(timeout) {
+    const unitToMs = { ms: 1, s: 1000, m: 60_000 };
+    let milliseconds;
+    if (typeof timeout === 'number') {
+        milliseconds = timeout;
+    }
+    else if (typeof timeout === 'string') {
+        const match = /^(\d+(?:\.\d+)?)(ms|s|m)$/.exec(timeout);
+        if (match === null) {
+            milliseconds = NaN;
+        }
+        else {
+            const coefficient = Number(match[1]);
+            const unit = match[2];
+            // Round to defeat float precision (1.1 * 1000 = 1100.0000000000002).
+            // Fractional milliseconds themselves (e.g. `1.5ms`) still round to `2`,
+            // which the isSafeInteger check below accepts. Sub-ms precision is not
+            // a supported unit — authors expressing "1.5ms" get the closest int.
+            milliseconds = Math.round(coefficient * unitToMs[unit]);
+        }
+    }
+    else {
+        milliseconds = NaN;
+    }
+    if (!Number.isSafeInteger(milliseconds) || milliseconds <= 0) {
+        throw new CompileError(['f.run timeout must be a positive whole number of milliseconds or a duration such as "10s" or "5m".'], 'timeout_invalid');
+    }
+    if (milliseconds > 15 * 60_000) {
+        throw new CompileError(['f.run timeout exceeds the maximum of 15 minutes declared in SURFACE.md.'], 'lease_exceeded');
+    }
+    return milliseconds;
+}
 /**
  * Compile a YAML string into a validated authoring `FlowSpec`.
  * Throws `CompileError` on a YAML parse error or any validation failure.
@@ -42,23 +95,34 @@ export function compileYaml(yaml) {
 export function compileYamlToCanonicalJson(yaml) {
     return canonicalize(toKernelSpec(compileYaml(yaml)));
 }
-/**
- * Validate a parsed spec object and apply authoring defaults, returning a
- * normalized `FlowSpec`. Throws `CompileError` on validation failure.
- */
 export function compileSpec(spec) {
     let snapshot;
     try {
         snapshot = snapshotJsonValue(spec, 'spec');
+        snapshot = expandYamlHelpers(snapshot);
     }
     catch (error) {
         throw new CompileError([
             error instanceof Error ? error.message : 'spec: expected JSON-compatible data',
         ]);
     }
+    if (snapshot !== null && typeof snapshot === 'object' && !Array.isArray(snapshot) && 'budget' in snapshot && snapshot.budget !== undefined) {
+        // parseBudget throws BudgetSyntaxError on any malformed header. Without
+        // this wrap, that throw escaped compileSpec's own CompileError contract,
+        // so callers (validate, cli/check) that only catch CompileError would
+        // surface the budget error as an uncaught exception instead of a
+        // diagnostic. Rewrap as CompileError so it flows through the same
+        // gate-1 refusal path as every other invalid spec.
+        try {
+            snapshot = { ...snapshot, budget: parseBudget(snapshot.budget) };
+        }
+        catch (error) {
+            throw new CompileError([`spec.budget: ${error instanceof Error ? error.message : 'budget_syntax_invalid'}`], 'budget_syntax_invalid');
+        }
+    }
     const validation = validateSpec(snapshot);
     if (!validation.ok)
-        throw new CompileError(validation.errors);
+        throw new CompileError(validation.errors, namedGateFailure(validation.errors));
     const input = snapshot;
     // Preserve named declarations and selectors through authoring normalization.
     // They are resolved exactly once at the kernel boundary, after public
@@ -75,6 +139,8 @@ export function compileSpec(spec) {
         ...(input.triggers?.length ? { triggers: input.triggers } : {}),
         steps,
         ...(input.budget !== undefined ? { budget: input.budget } : {}),
+        ...(input.workspace !== undefined ? { workspace: input.workspace } : {}),
+        ...(input.tools !== undefined ? { tools: input.tools } : {}),
     };
     return flow;
 }
@@ -84,7 +150,9 @@ function compileStep(step) {
     const base = {
         id: step.id,
         type: step.type,
-        ...(step.dependsOn !== undefined ? { dependsOn: step.dependsOn } : {}),
+        ...((step.dependsOn !== undefined || step.input !== undefined)
+            ? { dependsOn: step.input === undefined ? step.dependsOn : [...new Set([...(step.dependsOn ?? []), ...bindingDependencies(step.input)])] } : {}),
+        ...(step.input !== undefined ? { input: step.input } : {}),
         maxIterations,
         ...(step.memory !== undefined ? { memory: step.memory } : {}),
         ...(step.requirements !== undefined ? { requirements: step.requirements } : {}),
@@ -107,6 +175,7 @@ function compileStep(step) {
                 // #138: `timeoutMs` is deterministic-only — worker-backed verbs own
                 // their dispatch timeout. It must be spread HERE and nowhere in `base`.
                 ...(s.timeoutMs !== undefined ? { timeoutMs: s.timeoutMs } : {}),
+                ...(s.lease_ms !== undefined ? { lease_ms: parseStepTimeout(s.lease_ms) } : {}),
             };
         }
         case 'llm': {
@@ -134,6 +203,8 @@ function compileStep(step) {
                 ...(s.agent !== undefined ? { agent: s.agent } : {}),
                 ...(s.cli !== undefined ? { cli: s.cli } : {}),
                 ...(s.model !== undefined ? { model: s.model } : {}),
+                ...(s.cwd !== undefined ? { cwd: s.cwd } : {}),
+                ...(s.transport !== undefined ? { transport: s.transport } : {}),
                 recoveryMode,
                 ...(s.surfaces !== undefined ? { surfaces: s.surfaces } : {}),
                 ...(s.permissions !== undefined ? { permissions: s.permissions } : {}),
@@ -221,16 +292,8 @@ export function toKernelSpec(flow) {
         // reverts the other, and `validateSpec` and `flows check` would both still
         // look correct. See ops/reviews/20260903-pr139-repair-0903.md section 10.
         ...(compiled.triggers?.length ? { triggers: compiled.triggers.map(toKernelTrigger) } : {}),
-        steps: compiled.steps.map((step) => toKernelStep(resolveNamedAgent(step, compiled.agents))),
-        ...(compiled.budget !== undefined
-            ? {
-                budget: {
-                    ...(compiled.budget.maxTokensIn !== undefined ? { max_tokens_in: compiled.budget.maxTokensIn } : {}),
-                    ...(compiled.budget.maxTokensOut !== undefined ? { max_tokens_out: compiled.budget.maxTokensOut } : {}),
-                    ...(compiled.budget.maxDollars !== undefined ? { max_dollars: compiled.budget.maxDollars } : {}),
-                },
-            }
-            : {}),
+        steps: lowerNamedGates(compiled.steps).map((step) => toKernelStep(resolveNamedAgent(step, compiled.agents))),
+        ...(compiled.budget !== undefined ? { budget: toKernelBudget(compiled.budget) } : {}),
     };
 }
 /**
@@ -312,15 +375,15 @@ function kernelTriggerToAuthoring(value, at) {
 }
 function kernelStepToAuthoring(value, at) {
     const unionKeys = [
-        'id', 'type', 'depends_on', 'max_iterations', 'retry', 'verification', 'memory', 'requirements',
-        'command', 'timeout_ms', 'prompt', 'model', 'cli', 'instruction',
+        'id', 'type', 'depends_on', 'max_iterations', 'retry', 'verification', 'memory', 'requirements', 'input',
+        'command', 'timeout_ms', 'lease_ms', 'prompt', 'model', 'cli', 'instruction',
         'recovery_mode', 'surfaces', 'permissions',
     ];
     const step = requireKernelObject(value, unionKeys, at);
     const type = step['type'];
-    const commonKeys = ['id', 'type', 'depends_on', 'max_iterations', 'retry', 'verification', 'memory', 'requirements'];
+    const commonKeys = ['id', 'type', 'depends_on', 'max_iterations', 'retry', 'verification', 'memory', 'requirements', 'input'];
     const typeKeys = type === 'deterministic'
-        ? ['command', 'timeout_ms']
+        ? ['command', 'timeout_ms', 'lease_ms']
         : type === 'llm'
             ? ['prompt', 'model', 'cli']
             : type === 'agent'
@@ -333,6 +396,7 @@ function kernelStepToAuthoring(value, at) {
     const common = {
         id: step['id'],
         type,
+        ...(step['input'] !== undefined ? { input: step['input'] } : {}),
         ...(step['requirements'] !== undefined ? { requirements: kernelRequirementsToAuthoring(step['requirements'], `${at}.requirements`) } : {}),
         ...(dependsOn !== undefined && (!Array.isArray(dependsOn) || dependsOn.length > 0)
             ? { dependsOn }
@@ -346,6 +410,7 @@ function kernelStepToAuthoring(value, at) {
             ...common,
             command: step['command'],
             ...(step['timeout_ms'] !== undefined ? { timeoutMs: step['timeout_ms'] } : {}),
+            ...(step['lease_ms'] !== undefined ? { lease_ms: step['lease_ms'] } : {}),
         };
     }
     if (type === 'llm') {
@@ -399,8 +464,12 @@ function kernelMemoryToAuthoring(value, at) {
     };
 }
 function kernelBudgetToAuthoring(value, at) {
-    const budget = requireKernelObject(value, ['max_tokens_in', 'max_tokens_out', 'max_dollars'], at);
+    const budget = requireKernelObject(value, ['max_tokens_in', 'max_tokens_out', 'max_dollars', 'max_tokens', 'max_wallclock_ms', 'window', 'pricing'], at);
     return {
+        ...(budget['pricing'] !== undefined ? { pricing: budget['pricing'] } : {}),
+        ...(budget['max_tokens'] !== undefined ? { maxTokens: budget['max_tokens'] } : {}),
+        ...(budget['max_wallclock_ms'] !== undefined ? { maxWallclockMs: budget['max_wallclock_ms'] } : {}),
+        ...(budget['window'] !== undefined ? { window: budget['window'] } : {}),
         ...(budget['max_tokens_in'] !== undefined ? { maxTokensIn: budget['max_tokens_in'] } : {}),
         ...(budget['max_tokens_out'] !== undefined ? { maxTokensOut: budget['max_tokens_out'] } : {}),
         ...(budget['max_dollars'] !== undefined ? { maxDollars: budget['max_dollars'] } : {}),
@@ -443,7 +512,9 @@ function isObject(value) {
 function toKernelStep(step) {
     const common = {
         id: step.id,
-        depends_on: step.dependsOn ?? [],
+        depends_on: step.input === undefined ? step.dependsOn ?? []
+            : [...new Set([...(step.dependsOn ?? []), ...bindingDependencies(step.input)])],
+        ...(step.input !== undefined ? { input: step.input } : {}),
         max_iterations: step.maxIterations ?? 1,
         retry: { ...KERNEL_RETRY_DEFAULTS },
         verification: toKernelVerification(step),
@@ -468,6 +539,7 @@ function toKernelStep(step) {
                 type: 'deterministic',
                 command: step.command,
                 ...(step.timeoutMs !== undefined ? { timeout_ms: step.timeoutMs } : {}),
+                ...(step.lease_ms !== undefined ? { lease_ms: parseStepTimeout(step.lease_ms) } : {}),
             };
         case 'llm': {
             return {
@@ -485,6 +557,8 @@ function toKernelStep(step) {
                 instruction: step.instruction,
                 ...(step.cli !== undefined ? { cli: step.cli } : {}),
                 ...(step.model !== undefined ? { model: step.model } : {}),
+                ...(step.cwd !== undefined ? { cwd: step.cwd } : {}),
+                ...(step.transport !== undefined ? { transport: step.transport } : {}),
                 recovery_mode: step.recoveryMode ?? 'reset',
             };
             const surfaces = {