@stigmer/server 3.14.0-dev.20260910084630

package/src/domain/workflow/registry/data/task-kind-registry.json

@@ -0,0 +1,3177 @@
+{
+  "version": "1.0.0",
+  "generatedAt": "generated-by-codegen",
+  "descriptors": [
+    {
+      "kind": "set_vars",
+      "displayName": "Set Variables",
+      "description": "Assign values to workflow state variables using expressions.",
+      "category": "data",
+      "icon": "variable",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.SetTaskConfig",
+      "fields": [
+        {
+          "name": "variables",
+          "displayName": "Variables",
+          "description": "Variables to set in workflow state. Keys are variable names, values can be literals or expressions. Expressions use ${...} syntax, e.g., \"${.a + .b}\" or \"${now}\"",
+          "type": "map",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required"
+          ]
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Variables"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "variables": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "description": "Variables to set in workflow state. Keys are variable names, values can be literals or expressions. Expressions use ${...} syntax, e.g., \"${.a + .b}\" or \"${now}\"",
+            "type": "object"
+          }
+        },
+        "required": [
+          "variables"
+        ],
+        "title": "SetTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "set_vars mutates workflow context directly; it does not produce task output.",
+        "type": "null"
+      },
+      "yamlExamples": [
+        "- name: initialize\n  kind: set_vars\n  task_config:\n    variables:\n      status: \"pending\"\n      timestamp: \"${ now() }\"\n      request_id: \"${ $context.input.id }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/set-vars",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "http_call",
+      "displayName": "HTTP Call",
+      "description": "Make an HTTP request to an external API endpoint.",
+      "category": "invocation",
+      "icon": "globe",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.HttpCallTaskConfig",
+      "fields": [
+        {
+          "name": "method",
+          "displayName": "Method",
+          "description": "HTTP method (GET, POST, PUT, DELETE, PATCH).",
+          "type": "string",
+          "required": true,
+          "groupId": "request",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required"
+          ]
+        },
+        {
+          "name": "endpoint",
+          "displayName": "Endpoint",
+          "description": "HTTP endpoint configuration.",
+          "type": "message",
+          "required": true,
+          "groupId": "request",
+          "fieldNumber": 2,
+          "elementType": "HttpEndpoint",
+          "validationHints": [
+            "required"
+          ]
+        },
+        {
+          "name": "headers",
+          "displayName": "Headers",
+          "description": "HTTP headers (optional). Values can contain expressions: \"Bearer ${TOKEN}\"",
+          "type": "map",
+          "required": false,
+          "groupId": "request",
+          "fieldNumber": 3
+        },
+        {
+          "name": "body",
+          "displayName": "Body",
+          "description": "Request body (optional). Can be any JSON structure. Supports expressions in string values.",
+          "type": "struct",
+          "required": false,
+          "groupId": "request",
+          "fieldNumber": 4
+        },
+        {
+          "name": "timeout_seconds",
+          "displayName": "Timeout Seconds",
+          "description": "Request timeout in seconds. Max: 300 (5 minutes). Optional — unset (0) leaves the request bounded by the runner's activity timeout. When set, the runner aborts the request at this budget and fails the task with HTTP_CALL_TIMEOUT (non-retryable — catchable with try/catch); the activity timeout widens to fit (#686). Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+          "type": "int32",
+          "required": false,
+          "fieldNumber": 5,
+          "validationHints": [
+            "min: 1",
+            "max: 300"
+          ]
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "request",
+          "displayName": "Request"
+        },
+        {
+          "id": "auth",
+          "displayName": "Authentication"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "body": {
+            "description": "Request body (optional). Can be any JSON structure. Supports expressions in string values.",
+            "type": "object"
+          },
+          "endpoint": {
+            "additionalProperties": false,
+            "description": "HTTP endpoint configuration.",
+            "properties": {
+              "uri": {
+                "description": "URI of the endpoint. Can contain expressions: \"https://api.example.com/${.resource}\"",
+                "minLength": 1,
+                "type": "string"
+              }
+            },
+            "required": [
+              "uri"
+            ],
+            "type": "object"
+          },
+          "headers": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "description": "HTTP headers (optional). Values can contain expressions: \"Bearer ${TOKEN}\"",
+            "type": "object"
+          },
+          "method": {
+            "description": "HTTP method (GET, POST, PUT, DELETE, PATCH).",
+            "type": "string"
+          },
+          "timeout_seconds": {
+            "description": "Request timeout in seconds. Max: 300 (5 minutes). Optional — unset (0) leaves the request bounded by the runner's activity timeout. When set, the runner aborts the request at this budget and fails the task with HTTP_CALL_TIMEOUT (non-retryable — catchable with try/catch); the activity timeout widens to fit (#686). Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+            "maximum": 300,
+            "minimum": 1,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "method",
+          "endpoint"
+        ],
+        "title": "HttpCallTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "HTTP response including status code, headers, and body.",
+        "properties": {
+          "body": {
+            "type": "object"
+          },
+          "headers": {
+            "type": "object"
+          },
+          "status_code": {
+            "type": "integer"
+          }
+        },
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: fetch_data\n  kind: http_call\n  task_config:\n    method: \"GET\"\n    endpoint:\n      uri: \"https://api.example.com/tickets/${ $context.ticket_id }\"\n    headers:\n      Authorization: \"Bearer ${ .secrets.API_TOKEN }\"\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/http-call",
+      "isAiNative": false,
+      "requiresExternalService": true
+    },
+    {
+      "kind": "grpc_call",
+      "displayName": "gRPC Call",
+      "description": "Invoke a gRPC method on an external service.",
+      "category": "invocation",
+      "icon": "server",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.GrpcCallTaskConfig",
+      "fields": [
+        {
+          "name": "service",
+          "displayName": "Service",
+          "description": "Fully qualified service name. Example: \"com.example.UserService\"",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "method",
+          "displayName": "Method",
+          "description": "Method name to call. Example: \"GetUser\"",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 2,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "request",
+          "displayName": "Request",
+          "description": "Request message (optional). Can be any JSON structure matching the proto schema. Supports expressions in string values.",
+          "type": "struct",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 3
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Service Configuration"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "method": {
+            "description": "Method name to call. Example: \"GetUser\"",
+            "minLength": 1,
+            "type": "string"
+          },
+          "request": {
+            "description": "Request message (optional). Can be any JSON structure matching the proto schema. Supports expressions in string values.",
+            "type": "object"
+          },
+          "service": {
+            "description": "Fully qualified service name. Example: \"com.example.UserService\"",
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "service",
+          "method"
+        ],
+        "title": "GrpcCallTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "gRPC response message as JSON.",
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: call_service\n  kind: grpc_call\n  task_config:\n    service: \"user.UserService\"\n    method: \"GetUser\"\n    request:\n      user_id: \"${ $context.user_id }\"\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/grpc-call",
+      "isAiNative": false,
+      "requiresExternalService": true
+    },
+    {
+      "kind": "activity_call",
+      "displayName": "Activity Call",
+      "description": "Execute a Temporal activity by name with typed input.",
+      "category": "invocation",
+      "icon": "cog",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.CallActivityTaskConfig",
+      "fields": [
+        {
+          "name": "activity",
+          "displayName": "Activity",
+          "description": "Activity name to execute.",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "input",
+          "displayName": "Input",
+          "description": "Activity input (optional). Can be any JSON structure. Supports expressions in string values.",
+          "type": "struct",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 2
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Activity Configuration"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "activity": {
+            "description": "Activity name to execute.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "input": {
+            "description": "Activity input (optional). Can be any JSON structure. Supports expressions in string values.",
+            "type": "object"
+          }
+        },
+        "required": [
+          "activity"
+        ],
+        "title": "CallActivityTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Activity return value as JSON.",
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: process_payment\n  kind: activity_call\n  task_config:\n    activity: \"ProcessPayment\"\n    input:\n      amount: \"${ $context.order.total }\"\n      currency: \"USD\"\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/activity-call",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "switch_case",
+      "displayName": "Switch Case",
+      "description": "Branch conditionally based on expression evaluation.",
+      "category": "control_flow",
+      "icon": "git-branch",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.SwitchTaskConfig",
+      "fields": [
+        {
+          "name": "cases",
+          "displayName": "Cases",
+          "description": "List of switch cases (at least one required). Cases are evaluated in order. First matching case executes. If no \"when\" is specified, the case acts as default.",
+          "type": "repeated",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "elementType": "SwitchCase",
+          "validationHints": [
+            "min_items: 1"
+          ]
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Conditions"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "cases": {
+            "description": "List of switch cases (at least one required). Cases are evaluated in order. First matching case executes. If no \"when\" is specified, the case acts as default.",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "name": {
+                  "description": "Case name/identifier.",
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "then": {
+                  "description": "Target task name to execute if condition matches.",
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "when": {
+                  "description": "Condition expression (optional). If empty, this is the default case. Example: \"${ $context.value \u003e 5 }\"",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "name",
+                "then"
+              ],
+              "type": "object"
+            },
+            "minItems": 1,
+            "type": "array"
+          }
+        },
+        "title": "SwitchTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "switch_case directs flow control; it does not produce task output.",
+        "type": "null"
+      },
+      "yamlExamples": [
+        "- name: route_by_severity\n  kind: switch_case\n  task_config:\n    cases:\n      - name: critical\n        when: \"${ $context.triage.severity == 'critical' }\"\n        then: escalate\n      - name: high\n        when: \"${ $context.triage.severity == 'high' }\"\n        then: notify_team\n      - name: default\n        then: log_and_close\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/switch-case",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "for_each",
+      "displayName": "For Each",
+      "description": "Iterate over a collection, executing tasks for each item.",
+      "category": "control_flow",
+      "icon": "repeat",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.ForTaskConfig",
+      "fields": [
+        {
+          "name": "each",
+          "displayName": "Each",
+          "description": "Variable name for each item in the iteration. Accessible via ${ $data.item } in expressions.",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "in",
+          "displayName": "In",
+          "description": "Expression evaluating to the collection to iterate over. Example: \"${ $data.items }\" or \"${ [1, 2, 3] }\"",
+          "type": "string",
+          "required": true,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 2,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "do",
+          "displayName": "Do",
+          "description": "Tasks to execute for each iteration. Loop variables available: ${ $data.item }, ${ $data.index }",
+          "type": "repeated",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 3,
+          "elementType": "WorkflowTask",
+          "validationHints": [
+            "min_items: 1"
+          ]
+        },
+        {
+          "name": "max_parallelism",
+          "displayName": "Max Parallelism",
+          "description": "Maximum number of iterations to execute concurrently. 0 (default): sequential execution — iterations run one at a time in input order. This preserves pre-T17 behavior. 1: effectively sequential (one at a time, but uses the parallel execution path — useful for testing). N \u003e 1: up to N iterations run concurrently using Temporal workflow goroutines with a semaphore-based concurrency limiter. Results are always reassembled in original input order regardless of completion order.",
+          "type": "int32",
+          "required": false,
+          "fieldNumber": 4
+        },
+        {
+          "name": "batch_size",
+          "displayName": "Batch Size",
+          "description": "Number of items to process in each batch before moving to the next. 0 (default): no batching — all items are available for parallel execution (up to max_parallelism concurrent). N \u003e 0: items are chunked into groups of N. Each chunk is fully processed before the next chunk begins. Within each chunk, up to max_parallelism iterations run concurrently. Only meaningful when max_parallelism \u003e 0; ignored in sequential mode.",
+          "type": "int32",
+          "required": false,
+          "fieldNumber": 5
+        },
+        {
+          "name": "on_error",
+          "displayName": "On Error",
+          "description": "Policy for handling individual iteration failures. Default: FOR_EACH_FAIL_FAST (stop on first error). Only meaningful when max_parallelism \u003e 0; in sequential mode, any failure stops the loop regardless of this setting (pre-T17 behavior).",
+          "type": "enum",
+          "required": false,
+          "enumValues": [
+            "FOR_EACH_FAIL_FAST",
+            "FOR_EACH_CONTINUE",
+            "FOR_EACH_SKIP"
+          ],
+          "fieldNumber": 6
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Iteration"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "batch_size": {
+            "description": "Number of items to process in each batch before moving to the next. 0 (default): no batching — all items are available for parallel execution (up to max_parallelism concurrent). N \u003e 0: items are chunked into groups of N. Each chunk is fully processed before the next chunk begins. Within each chunk, up to max_parallelism iterations run concurrently. Only meaningful when max_parallelism \u003e 0; ignored in sequential mode.",
+            "type": "integer"
+          },
+          "do": {
+            "description": "Tasks to execute for each iteration. Loop variables available: ${ $data.item }, ${ $data.index }",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "compensate": {
+                  "description": "Compensation tasks to execute if this task needs to be \"undone.\"",
+                  "items": {
+                    "type": "object"
+                  },
+                  "type": "array"
+                },
+                "export": {
+                  "additionalProperties": false,
+                  "description": "Export configuration (how to save task output to context). Optional - if not set, output is not saved.",
+                  "properties": {
+                    "as": {
+                      "description": "Expression defining how to export output using ${...} syntax.",
+                      "minLength": 1,
+                      "type": "string"
+                    }
+                  },
+                  "type": "object"
+                },
+                "flow": {
+                  "additionalProperties": false,
+                  "description": "Flow control (which task executes next). Optional - if not set, continues to next task in sequence.",
+                  "properties": {
+                    "then": {
+                      "description": "Target task name or \"end\" to terminate workflow.",
+                      "type": "string"
+                    }
+                  },
+                  "type": "object"
+                },
+                "kind": {
+                  "description": "Task type (determines how to interpret task_config).",
+                  "enum": [
+                    "set_vars",
+                    "http_call",
+                    "grpc_call",
+                    "activity_call",
+                    "switch_case",
+                    "for_each",
+                    "fork",
+                    "try_catch",
+                    "listen",
+                    "wait",
+                    "raise_error",
+                    "run_workflow",
+                    "agent_call",
+                    "llm_call",
+                    "transform",
+                    "human_input",
+                    "validate",
+                    "emit_event",
+                    "notification",
+                    "eval"
+                  ],
+                  "type": "string"
+                },
+                "name": {
+                  "description": "Task name/identifier (must be unique within workflow). Must be a valid C-style identifier: starts with a letter or underscore, followed by letters, digits, or underscores.",
+                  "minLength": 1,
+                  "pattern": "^[a-zA-Z_][a-zA-Z0-9_]*$",
+                  "type": "string"
+                },
+                "task_config": {
+                  "description": "Task-specific configuration whose structure depends on the `kind` field.",
+                  "type": "object"
+                }
+              },
+              "required": [
+                "kind",
+                "task_config"
+              ],
+              "type": "object"
+            },
+            "minItems": 1,
+            "type": "array"
+          },
+          "each": {
+            "description": "Variable name for each item in the iteration. Accessible via ${ $data.item } in expressions.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "in": {
+            "description": "Expression evaluating to the collection to iterate over. Example: \"${ $data.items }\" or \"${ [1, 2, 3] }\"",
+            "minLength": 1,
+            "type": "string"
+          },
+          "max_parallelism": {
+            "description": "Maximum number of iterations to execute concurrently. 0 (default): sequential execution — iterations run one at a time in input order. This preserves pre-T17 behavior. 1: effectively sequential (one at a time, but uses the parallel execution path — useful for testing). N \u003e 1: up to N iterations run concurrently using Temporal workflow goroutines with a semaphore-based concurrency limiter. Results are always reassembled in original input order regardless of completion order.",
+            "type": "integer"
+          },
+          "on_error": {
+            "description": "Policy for handling individual iteration failures. Default: FOR_EACH_FAIL_FAST (stop on first error). Only meaningful when max_parallelism \u003e 0; in sequential mode, any failure stops the loop regardless of this setting (pre-T17 behavior).",
+            "enum": [
+              "FOR_EACH_FAIL_FAST",
+              "FOR_EACH_CONTINUE",
+              "FOR_EACH_SKIP"
+            ],
+            "type": "string"
+          }
+        },
+        "required": [
+          "each",
+          "in"
+        ],
+        "title": "ForTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Collected results from each iteration.",
+        "type": "array"
+      },
+      "yamlExamples": [
+        "- name: process_items\n  kind: for_each\n  task_config:\n    each: item\n    in: \"${ $context.items }\"\n    do:\n      - name: classify_item\n        kind: llm_call\n        task_config:\n          model: \"gpt-4o-mini\"\n          prompt: \"Classify: ${ $item.description }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/for-each",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "fork",
+      "displayName": "Fork",
+      "description": "Execute multiple branches in parallel, optionally racing.",
+      "category": "control_flow",
+      "icon": "git-fork",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.ForkTaskConfig",
+      "fields": [
+        {
+          "name": "branches",
+          "displayName": "Branches",
+          "description": "Branches to execute in parallel (at least 2 required).",
+          "type": "repeated",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "elementType": "ForkBranch",
+          "validationHints": [
+            "min_items: 2"
+          ]
+        },
+        {
+          "name": "compete",
+          "displayName": "Compete",
+          "description": "If true, first branch to complete wins (race mode). If false, all branches must complete (default).",
+          "type": "bool",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 2
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Parallel Branches"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "branches": {
+            "description": "Branches to execute in parallel (at least 2 required).",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "do": {
+                  "description": "Tasks to execute in this branch.",
+                  "items": {
+                    "additionalProperties": false,
+                    "properties": {
+                      "compensate": {
+                        "description": "Compensation tasks to execute if this task needs to be \"undone.\"",
+                        "items": {
+                          "type": "object"
+                        },
+                        "type": "array"
+                      },
+                      "export": {
+                        "additionalProperties": false,
+                        "description": "Export configuration (how to save task output to context). Optional - if not set, output is not saved.",
+                        "properties": {
+                          "as": {
+                            "description": "Expression defining how to export output using ${...} syntax.",
+                            "minLength": 1,
+                            "type": "string"
+                          }
+                        },
+                        "type": "object"
+                      },
+                      "flow": {
+                        "additionalProperties": false,
+                        "description": "Flow control (which task executes next). Optional - if not set, continues to next task in sequence.",
+                        "properties": {
+                          "then": {
+                            "description": "Target task name or \"end\" to terminate workflow.",
+                            "type": "string"
+                          }
+                        },
+                        "type": "object"
+                      },
+                      "kind": {
+                        "description": "Task type (determines how to interpret task_config).",
+                        "enum": [
+                          "set_vars",
+                          "http_call",
+                          "grpc_call",
+                          "activity_call",
+                          "switch_case",
+                          "for_each",
+                          "fork",
+                          "try_catch",
+                          "listen",
+                          "wait",
+                          "raise_error",
+                          "run_workflow",
+                          "agent_call",
+                          "llm_call",
+                          "transform",
+                          "human_input",
+                          "validate",
+                          "emit_event",
+                          "notification",
+                          "eval"
+                        ],
+                        "type": "string"
+                      },
+                      "name": {
+                        "description": "Task name/identifier (must be unique within workflow). Must be a valid C-style identifier: starts with a letter or underscore, followed by letters, digits, or underscores.",
+                        "minLength": 1,
+                        "pattern": "^[a-zA-Z_][a-zA-Z0-9_]*$",
+                        "type": "string"
+                      },
+                      "task_config": {
+                        "description": "Task-specific configuration whose structure depends on the `kind` field.",
+                        "type": "object"
+                      }
+                    },
+                    "required": [
+                      "kind",
+                      "task_config"
+                    ],
+                    "type": "object"
+                  },
+                  "minItems": 1,
+                  "type": "array"
+                },
+                "name": {
+                  "description": "Branch name/identifier.",
+                  "minLength": 1,
+                  "type": "string"
+                }
+              },
+              "required": [
+                "name"
+              ],
+              "type": "object"
+            },
+            "minItems": 2,
+            "type": "array"
+          },
+          "compete": {
+            "description": "If true, first branch to complete wins (race mode). If false, all branches must complete (default).",
+            "type": "boolean"
+          }
+        },
+        "title": "ForkTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Combined results from all branches (or winner if compete=true).",
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: parallel_enrichment\n  kind: fork\n  task_config:\n    branches:\n      - name: fetch_profile\n        do:\n          - name: get_profile\n            kind: http_call\n            task_config:\n              method: \"GET\"\n              endpoint:\n                uri: \"https://api.example.com/users/${ $context.user_id }\"\n      - name: fetch_history\n        do:\n          - name: get_history\n            kind: http_call\n            task_config:\n              method: \"GET\"\n              endpoint:\n                uri: \"https://api.example.com/history/${ $context.user_id }\"\n    compete: false\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/fork",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "try_catch",
+      "displayName": "Try/Catch",
+      "description": "Handle errors from a block of tasks with recovery logic.",
+      "category": "control_flow",
+      "icon": "shield",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.TryTaskConfig",
+      "fields": [
+        {
+          "name": "try",
+          "displayName": "Try",
+          "description": "Tasks to attempt (at least one required). If any task fails, execution jumps to catch block.",
+          "type": "repeated",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "elementType": "WorkflowTask",
+          "validationHints": [
+            "min_items: 1"
+          ]
+        },
+        {
+          "name": "catch",
+          "displayName": "Catch",
+          "description": "Catch block for error handling (optional). If not provided, errors propagate to parent.",
+          "type": "message",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 2,
+          "elementType": "CatchBlock"
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Error Handling"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "catch": {
+            "additionalProperties": false,
+            "description": "Catch block for error handling (optional). If not provided, errors propagate to parent.",
+            "properties": {
+              "as": {
+                "description": "Variable name to store the error (optional). Accessible via ${ .error } in catch tasks.",
+                "type": "string"
+              },
+              "compensate": {
+                "description": "Whether to run compensation tasks for already-completed try tasks before executing the catch do block. When true, the runtime walks the compensation stack (completed tasks that declared a `compensate` block) in reverse order and executes each task's compensation actions. After all compensations complete (or fail), the catch `do` block runs as normal. Compensation failures do not prevent the catch block from running. They are logged and included in the task output for diagnostics. Default: false (no compensation — preserves pre-T17 behavior).",
+                "type": "boolean"
+              },
+              "do": {
+                "description": "Tasks to execute when error is caught.",
+                "items": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "compensate": {
+                      "description": "Compensation tasks to execute if this task needs to be \"undone.\"",
+                      "items": {
+                        "type": "object"
+                      },
+                      "type": "array"
+                    },
+                    "export": {
+                      "additionalProperties": false,
+                      "description": "Export configuration (how to save task output to context). Optional - if not set, output is not saved.",
+                      "properties": {
+                        "as": {
+                          "description": "Expression defining how to export output using ${...} syntax.",
+                          "minLength": 1,
+                          "type": "string"
+                        }
+                      },
+                      "type": "object"
+                    },
+                    "flow": {
+                      "additionalProperties": false,
+                      "description": "Flow control (which task executes next). Optional - if not set, continues to next task in sequence.",
+                      "properties": {
+                        "then": {
+                          "description": "Target task name or \"end\" to terminate workflow.",
+                          "type": "string"
+                        }
+                      },
+                      "type": "object"
+                    },
+                    "kind": {
+                      "description": "Task type (determines how to interpret task_config).",
+                      "enum": [
+                        "set_vars",
+                        "http_call",
+                        "grpc_call",
+                        "activity_call",
+                        "switch_case",
+                        "for_each",
+                        "fork",
+                        "try_catch",
+                        "listen",
+                        "wait",
+                        "raise_error",
+                        "run_workflow",
+                        "agent_call",
+                        "llm_call",
+                        "transform",
+                        "human_input",
+                        "validate",
+                        "emit_event",
+                        "notification",
+                        "eval"
+                      ],
+                      "type": "string"
+                    },
+                    "name": {
+                      "description": "Task name/identifier (must be unique within workflow). Must be a valid C-style identifier: starts with a letter or underscore, followed by letters, digits, or underscores.",
+                      "minLength": 1,
+                      "pattern": "^[a-zA-Z_][a-zA-Z0-9_]*$",
+                      "type": "string"
+                    },
+                    "task_config": {
+                      "description": "Task-specific configuration whose structure depends on the `kind` field.",
+                      "type": "object"
+                    }
+                  },
+                  "required": [
+                    "kind",
+                    "task_config"
+                  ],
+                  "type": "object"
+                },
+                "minItems": 1,
+                "type": "array"
+              }
+            },
+            "type": "object"
+          },
+          "try": {
+            "description": "Tasks to attempt (at least one required). If any task fails, execution jumps to catch block.",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "compensate": {
+                  "description": "Compensation tasks to execute if this task needs to be \"undone.\"",
+                  "items": {
+                    "type": "object"
+                  },
+                  "type": "array"
+                },
+                "export": {
+                  "additionalProperties": false,
+                  "description": "Export configuration (how to save task output to context). Optional - if not set, output is not saved.",
+                  "properties": {
+                    "as": {
+                      "description": "Expression defining how to export output using ${...} syntax.",
+                      "minLength": 1,
+                      "type": "string"
+                    }
+                  },
+                  "type": "object"
+                },
+                "flow": {
+                  "additionalProperties": false,
+                  "description": "Flow control (which task executes next). Optional - if not set, continues to next task in sequence.",
+                  "properties": {
+                    "then": {
+                      "description": "Target task name or \"end\" to terminate workflow.",
+                      "type": "string"
+                    }
+                  },
+                  "type": "object"
+                },
+                "kind": {
+                  "description": "Task type (determines how to interpret task_config).",
+                  "enum": [
+                    "set_vars",
+                    "http_call",
+                    "grpc_call",
+                    "activity_call",
+                    "switch_case",
+                    "for_each",
+                    "fork",
+                    "try_catch",
+                    "listen",
+                    "wait",
+                    "raise_error",
+                    "run_workflow",
+                    "agent_call",
+                    "llm_call",
+                    "transform",
+                    "human_input",
+                    "validate",
+                    "emit_event",
+                    "notification",
+                    "eval"
+                  ],
+                  "type": "string"
+                },
+                "name": {
+                  "description": "Task name/identifier (must be unique within workflow). Must be a valid C-style identifier: starts with a letter or underscore, followed by letters, digits, or underscores.",
+                  "minLength": 1,
+                  "pattern": "^[a-zA-Z_][a-zA-Z0-9_]*$",
+                  "type": "string"
+                },
+                "task_config": {
+                  "description": "Task-specific configuration whose structure depends on the `kind` field.",
+                  "type": "object"
+                }
+              },
+              "required": [
+                "kind",
+                "task_config"
+              ],
+              "type": "object"
+            },
+            "minItems": 1,
+            "type": "array"
+          }
+        },
+        "title": "TryTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Output from the try block (success) or catch block (recovery).",
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: safe_api_call\n  kind: try_catch\n  task_config:\n    try:\n      - name: risky_call\n        kind: http_call\n        task_config:\n          method: \"POST\"\n          endpoint:\n            uri: \"https://api.unreliable.com/submit\"\n    catch:\n      as: error\n      do:\n        - name: log_failure\n          kind: set_vars\n          task_config:\n            variables:\n              error_message: \"${ $error.message }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/try-catch",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "listen",
+      "displayName": "Listen",
+      "description": "Wait for external signals or events before proceeding.",
+      "category": "event",
+      "icon": "radio",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.ListenTaskConfig",
+      "fields": [
+        {
+          "name": "to",
+          "displayName": "To",
+          "description": "Signal listening configuration.",
+          "type": "message",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "elementType": "ListenTo",
+          "validationHints": [
+            "required"
+          ]
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Signal Configuration"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "to": {
+            "additionalProperties": false,
+            "description": "Signal listening configuration.",
+            "properties": {
+              "mode": {
+                "description": "Listening mode: - \"one\": Wait for any one signal - \"all\": Wait for all signals",
+                "type": "string"
+              },
+              "signals": {
+                "description": "Signals to listen for.",
+                "items": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "id": {
+                      "description": "Signal identifier.",
+                      "minLength": 1,
+                      "type": "string"
+                    },
+                    "type": {
+                      "description": "Signal type: \"signal\", \"query\", or \"update\".",
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "id",
+                    "type"
+                  ],
+                  "type": "object"
+                },
+                "minItems": 1,
+                "type": "array"
+              }
+            },
+            "required": [
+              "mode"
+            ],
+            "type": "object"
+          }
+        },
+        "required": [
+          "to"
+        ],
+        "title": "ListenTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Signal payload received from the external source.",
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: wait_for_approval\n  kind: listen\n  task_config:\n    to:\n      mode: \"one\"\n      signals:\n        - id: \"approval_signal\"\n          type: \"signal\"\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/listen",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "wait",
+      "displayName": "Wait",
+      "description": "Pause execution for a specified duration.",
+      "category": "control_flow",
+      "icon": "clock",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.WaitTaskConfig",
+      "fields": [
+        {
+          "name": "duration",
+          "displayName": "Duration",
+          "description": "Relative duration to wait from now. Use this when you want to wait for a specific amount of time regardless of when the workflow reaches this task. Example: { days: 7 } = wait 1 week from now",
+          "type": "message",
+          "required": false,
+          "fieldNumber": 1,
+          "elementType": "Duration"
+        },
+        {
+          "name": "until",
+          "displayName": "Until",
+          "description": "Absolute timestamp to wait until. Use this when you want to wait until a specific point in time. If the timestamp is in the past, the task completes immediately. Example: \"2026-03-01T09:00:00Z\" = wait until March 1st, 2026 at 9am UTC",
+          "type": "string",
+          "required": false,
+          "fieldNumber": 2
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Duration"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "duration": {
+            "additionalProperties": false,
+            "description": "Relative duration to wait from now. Use this when you want to wait for a specific amount of time regardless of when the workflow reaches this task. Example: { days: 7 } = wait 1 week from now",
+            "properties": {
+              "days": {
+                "description": "Number of days to wait (24 hours each).",
+                "type": "integer"
+              },
+              "hours": {
+                "description": "Number of hours to wait.",
+                "type": "integer"
+              },
+              "milliseconds": {
+                "description": "Number of milliseconds to wait.",
+                "type": "integer"
+              },
+              "minutes": {
+                "description": "Number of minutes to wait.",
+                "type": "integer"
+              },
+              "seconds": {
+                "description": "Number of seconds to wait.",
+                "type": "integer"
+              }
+            },
+            "type": "object"
+          },
+          "until": {
+            "description": "Absolute timestamp to wait until. Use this when you want to wait until a specific point in time. If the timestamp is in the past, the task completes immediately. Example: \"2026-03-01T09:00:00Z\" = wait until March 1st, 2026 at 9am UTC",
+            "format": "date-time",
+            "type": "string"
+          }
+        },
+        "title": "WaitTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "wait does not produce task output.",
+        "type": "null"
+      },
+      "yamlExamples": [
+        "- name: cooldown\n  kind: wait\n  task_config:\n    duration:\n      seconds: 30\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/wait",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "raise_error",
+      "displayName": "Raise Error",
+      "description": "Raise an error to terminate execution or trigger error handling.",
+      "category": "event",
+      "icon": "alert-triangle",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.RaiseTaskConfig",
+      "fields": [
+        {
+          "name": "error",
+          "displayName": "Error",
+          "description": "Error type/name.",
+          "type": "string",
+          "required": true,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "message",
+          "displayName": "Message",
+          "description": "Error message. Can contain expressions: \"${ .errorMessage }\" Optional — when omitted, the raised error carries only the error type/name. (The runtime maps this to the problem-details `detail` field only when present; requiring it was contract fiction, #685.)",
+          "type": "string",
+          "required": false,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 2
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Error"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "error": {
+            "description": "Error type/name.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "message": {
+            "description": "Error message. Can contain expressions: \"${ .errorMessage }\" Optional — when omitted, the raised error carries only the error type/name. (The runtime maps this to the problem-details `detail` field only when present; requiring it was contract fiction, #685.)",
+            "type": "string"
+          }
+        },
+        "required": [
+          "error"
+        ],
+        "title": "RaiseTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "raise_error terminates the current execution path.",
+        "type": "null"
+      },
+      "yamlExamples": [
+        "- name: fail_invalid\n  kind: raise_error\n  task_config:\n    error: \"ValidationError\"\n    message: \"Required field missing: ${ $context.missing_field }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/raise-error",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "run_workflow",
+      "displayName": "Run Workflow",
+      "description": "Execute a sub-workflow as a child of the current workflow.",
+      "category": "invocation",
+      "icon": "workflow",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.RunTaskConfig",
+      "fields": [
+        {
+          "name": "workflow",
+          "displayName": "Workflow",
+          "description": "Sub-workflow name/identifier to execute.",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "input",
+          "displayName": "Input",
+          "description": "Sub-workflow input (optional). Can be any JSON structure. Supports expressions in string values.",
+          "type": "struct",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 2
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Sub-Workflow"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "input": {
+            "description": "Sub-workflow input (optional). Can be any JSON structure. Supports expressions in string values.",
+            "type": "object"
+          },
+          "workflow": {
+            "description": "Sub-workflow name/identifier to execute.",
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "workflow"
+        ],
+        "title": "RunTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Output from the child workflow execution.",
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: run_enrichment\n  kind: run_workflow\n  task_config:\n    workflow: \"data-enrichment\"\n    input:\n      user_id: \"${ $context.user.id }\"\n      source: \"parent_workflow\"\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/run-workflow",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "agent_call",
+      "displayName": "Agent Call",
+      "description": "Invoke an AI agent for complex, multi-step reasoning with tool access.",
+      "category": "ai",
+      "icon": "bot",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.AgentCallTaskConfig",
+      "fields": [
+        {
+          "name": "agent",
+          "displayName": "Agent",
+          "description": "Agent reference in \"org/slug\" or \"slug\" format. - \"slug\" only: uses the workflow's organization - \"org/slug\": explicit organization reference Examples: \"code-reviewer\", \"stigmer/code-reviewer\", \"acme/data-analyst\" Required field.",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1",
+            "max_length: 127"
+          ]
+        },
+        {
+          "name": "message",
+          "displayName": "Message",
+          "description": "Instructions/prompt to send to the agent. Supports interpolation of workflow variables using JQ expressions. Example: \"Analyze this code: ${ $context.fetchCode.body }\" Required field.",
+          "type": "string",
+          "required": true,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 2,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "env",
+          "displayName": "Env",
+          "description": "Runtime environment variables to pass to the agent. Values can be literal strings or JQ expressions that reference workflow context or secrets. Example: {\"GITHUB_TOKEN\": \"${ .secrets.GH_TOKEN }\"} Optional.",
+          "type": "map",
+          "required": false,
+          "groupId": "runtime",
+          "fieldNumber": 3
+        },
+        {
+          "name": "run_config",
+          "displayName": "Run Config",
+          "description": "Per-call model choice and run bounds. Unset fields inherit the platform defaults.",
+          "type": "message",
+          "required": false,
+          "fieldNumber": 4,
+          "elementType": "RunConfig"
+        },
+        {
+          "name": "output",
+          "displayName": "Output",
+          "description": "Structured output contract for this agent call. When set, the workflow runner extracts structured JSON from the agent's final response and validates it against the declared schema. The validated JSON is placed in the task output under the \"structured\" key, enabling reliable downstream routing via switch_case expressions. When not set, the task output contains the agent's raw text response.",
+          "type": "message",
+          "required": false,
+          "groupId": "output",
+          "fieldNumber": 5,
+          "elementType": "AgentCallOutputContract"
+        },
+        {
+          "name": "harness",
+          "displayName": "Harness",
+          "description": "Execution harness for the agent invocation. Determines which execution engine processes the agent call: - HARNESS_UNSPECIFIED / HARNESS_NATIVE: Stigmer native engine (Python/LangGraph) - HARNESS_CURSOR: Cursor SDK engine (TypeScript/Cursor) The runner creates a Session with this harness before creating the AgentExecution. The harness is a session-level concern — it determines tool availability, state management, model access, and billing tier. When unspecified, defaults to HARNESS_NATIVE (the workflow surface's platform default). YAML Example: - code_review: call: agent with: agent: \"code-reviewer\" harness: cursor message: \"Review this PR\"",
+          "type": "enum",
+          "required": false,
+          "enumValues": [
+            "HARNESS_NATIVE",
+            "HARNESS_CURSOR"
+          ],
+          "fieldNumber": 6
+        },
+        {
+          "name": "workspace_entries",
+          "displayName": "Workspace Entries",
+          "description": "Workspace the child run's session operates on. Empty means no workspace.",
+          "type": "repeated",
+          "required": false,
+          "fieldNumber": 7,
+          "elementType": "WorkspaceEntry"
+        },
+        {
+          "name": "environment_refs",
+          "displayName": "Environment Refs",
+          "description": "References to Environment resources whose values are provided to the child runs this task creates. This is how a tool-using agent becomes runnable from a workflow: bind an org-shared environment holding the needed credentials, and the child runs receive its values at runtime. The agent and its default instance stay untouched.",
+          "type": "repeated",
+          "required": false,
+          "fieldNumber": 8,
+          "elementType": "ApiResourceReference"
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Agent Configuration"
+        },
+        {
+          "id": "runtime",
+          "displayName": "Runtime Settings"
+        },
+        {
+          "id": "budget",
+          "displayName": "Budget Limits",
+          "description": "Cost controls for this agent call. Set max_cost_micros on the config field."
+        },
+        {
+          "id": "output",
+          "displayName": "Structured Output"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "agent": {
+            "description": "Agent reference in \"org/slug\" or \"slug\" format. - \"slug\" only: uses the workflow's organization - \"org/slug\": explicit organization reference Examples: \"code-reviewer\", \"stigmer/code-reviewer\", \"acme/data-analyst\" Required field.",
+            "maxLength": 127,
+            "minLength": 1,
+            "type": "string"
+          },
+          "env": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "description": "Runtime environment variables to pass to the agent. Values can be literal strings or JQ expressions that reference workflow context or secrets. Example: {\"GITHUB_TOKEN\": \"${ .secrets.GH_TOKEN }\"} Optional.",
+            "type": "object"
+          },
+          "environment_refs": {
+            "description": "References to Environment resources whose values are provided to the child runs this task creates. This is how a tool-using agent becomes runnable from a workflow: bind an org-shared environment holding the needed credentials, and the child runs receive its values at runtime. The agent and its default instance stay untouched.",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "kind": {
+                  "description": "Kind of the referenced resource (e.g., SKILL, AGENT, MCP_SERVER).",
+                  "enum": [
+                    "api_resource_version",
+                    "iam_policy",
+                    "identity_account",
+                    "api_key",
+                    "invitation",
+                    "identity_provider",
+                    "oauth_app",
+                    "platform_client",
+                    "organization",
+                    "platform",
+                    "agent",
+                    "agent_execution",
+                    "session",
+                    "skill",
+                    "mcp_server",
+                    "agent_instance",
+                    "agent_share",
+                    "agent_channel",
+                    "channel_app",
+                    "workflow",
+                    "workflow_instance",
+                    "workflow_execution",
+                    "environment",
+                    "artifact",
+                    "execution_context",
+                    "schedule",
+                    "memory",
+                    "project"
+                  ],
+                  "type": "string"
+                },
+                "org": {
+                  "description": "Organization that owns the referenced resource. When non-empty: must be a valid org slug (lowercase alphanumeric with hyphens, starts with a letter, 1-63 characters). Example: \"stigmer\", \"acme-corp\". When empty: the reference is relative — the server resolves it to the parent resource's organization at write time. All stored and returned references always have org populated (absolute form). Use empty org for same-org references (the common case). Use explicit org for cross-org references (e.g., marketplace resources).",
+                  "maxLength": 63,
+                  "pattern": "^$|^[a-z][a-z0-9-]*[a-z0-9]$",
+                  "type": "string"
+                },
+                "slug": {
+                  "description": "Resource slug (user-friendly identifier, unique within org). Format: lowercase alphanumeric with hyphens, must start with a letter and end with a letter or digit (e.g., \"web-search\", \"code-reviewer\"). Length: 2-63 characters.",
+                  "maxLength": 63,
+                  "minLength": 2,
+                  "pattern": "^[a-z][a-z0-9-]*[a-z0-9]$",
+                  "type": "string"
+                },
+                "version": {
+                  "description": "Version of the resource (optional, only applicable to versioned resources like Skills). Supports three formats: 1. Empty/unset → Resolves to \"latest\" (most recent version) 2. Tag name → Resolves to version with this tag (e.g., \"stable\", \"v1.0\") 3. Exact hash → Immutable reference to specific version (e.g., \"abc123...\") Default behavior: Empty means \"latest\" (current version). This field is ignored for non-versioned resources. Examples: - version: \"\" → Use latest version - version: \"latest\" → Use latest version (explicit) - version: \"stable\" → Use version tagged as \"stable\" - version: \"v1.0\" → Use version tagged as \"v1.0\" - version: \"abc123...\" → Use exact version with this hash (immutable)",
+                  "pattern": "^$|^latest$|^[a-zA-Z0-9._-]+$|^[a-f0-9]{64}$",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "slug"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "harness": {
+            "description": "Execution harness for the agent invocation. Determines which execution engine processes the agent call: - HARNESS_UNSPECIFIED / HARNESS_NATIVE: Stigmer native engine (Python/LangGraph) - HARNESS_CURSOR: Cursor SDK engine (TypeScript/Cursor) The runner creates a Session with this harness before creating the AgentExecution. The harness is a session-level concern — it determines tool availability, state management, model access, and billing tier. When unspecified, defaults to HARNESS_NATIVE (the workflow surface's platform default). YAML Example: - code_review: call: agent with: agent: \"code-reviewer\" harness: cursor message: \"Review this PR\"",
+            "enum": [
+              "HARNESS_NATIVE",
+              "HARNESS_CURSOR"
+            ],
+            "type": "string"
+          },
+          "message": {
+            "description": "Instructions/prompt to send to the agent. Supports interpolation of workflow variables using JQ expressions. Example: \"Analyze this code: ${ $context.fetchCode.body }\" Required field.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "output": {
+            "additionalProperties": false,
+            "description": "Structured output contract for this agent call. When set, the workflow runner extracts structured JSON from the agent's final response and validates it against the declared schema. The validated JSON is placed in the task output under the \"structured\" key, enabling reliable downstream routing via switch_case expressions. When not set, the task output contains the agent's raw text response.",
+            "properties": {
+              "fallback_task": {
+                "description": "Target task to branch to when schema validation cannot be resolved. Used in two scenarios: 1. on_invalid is ON_INVALID_RETRY and all retries are exhausted 2. on_invalid is ON_INVALID_FALLBACK (immediate branch, no retry) Must reference a valid task name in the same workflow. When empty and retries are exhausted, the task fails.",
+                "type": "string"
+              },
+              "max_retries": {
+                "description": "Maximum retry attempts when on_invalid is ON_INVALID_RETRY. Each retry re-prompts the agent with the specific validation errors and the expected schema, giving the agent an opportunity to self-correct. Only meaningful when on_invalid is ON_INVALID_RETRY; ignored otherwise. Default: 2 (the runner's retry loop). Valid range when set: 1-5. Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+                "maximum": 5,
+                "minimum": 1,
+                "type": "integer"
+              },
+              "on_invalid": {
+                "description": "Policy when agent output fails schema validation. Default: ON_INVALID_FAIL (task fails immediately).",
+                "enum": [
+                  "ON_INVALID_FAIL",
+                  "ON_INVALID_RETRY",
+                  "ON_INVALID_FALLBACK"
+                ],
+                "type": "string"
+              },
+              "schema": {
+                "description": "JSON Schema that the agent's structured output must conform to. Standard JSON Schema (draft 2020-12 or compatible). The workflow runner extracts JSON from the agent's final response and validates it against this schema. If validation fails, the on_invalid policy determines what happens next. The schema is carried as a google.protobuf.Struct to preserve the existing kind+Struct envelope pattern and allow YAML authors to write standard JSON Schema inline without a Stigmer-specific schema language.",
+                "type": "object"
+              }
+            },
+            "required": [
+              "schema"
+            ],
+            "type": "object"
+          },
+          "run_config": {
+            "additionalProperties": false,
+            "description": "Per-call model choice and run bounds. Unset fields inherit the platform defaults.",
+            "properties": {
+              "max_cost_usd": {
+                "description": "Maximum estimated cost in USD per run. The surface's platform execution profile caps this value; the lower bound wins.",
+                "type": "number"
+              },
+              "max_tool_rounds": {
+                "description": "Maximum model-to-tools reasoning cycles per run. The surface's platform execution profile caps this value; the lower bound wins.",
+                "type": "integer"
+              },
+              "model_name": {
+                "description": "The model each run uses. Example: \"claude-sonnet-4-6\".",
+                "type": "string"
+              },
+              "service_tier": {
+                "description": "Service tier for each run's model calls: standard (the default) or fast, where fast bills at the model's fast-tier rates and requires a model that offers one. In workflow YAML the shorthand spellings \"standard\"/\"fast\" are accepted alongside the canonical enum names. Mirrors ExecutionConfig.service_tier: UNSPECIFIED inherits the surface's platform default, which itself resolves to STANDARD — never the provider account default. FAST requires model_name (here or from the platform profile) to name a model with a registry fast pricing variant; validated fail-closed at create.",
+                "enum": [
+                  "SERVICE_TIER_STANDARD",
+                  "SERVICE_TIER_FAST"
+                ],
+                "type": "string"
+              },
+              "thinking_mode": {
+                "description": "Thinking mode for each run's model calls: disabled (the default) or enabled, where enabled selects the model's extended-reasoning variant (billed at base per-token rates — reasoning tokens bill as output). In workflow YAML the shorthand spellings \"disabled\"/\"enabled\" are accepted alongside the canonical enum names. Mirrors ExecutionConfig.thinking_mode: UNSPECIFIED inherits the surface's platform default, which itself resolves to DISABLED — never the provider account default. ENABLED requires model_name (here or from the platform profile) to name a model whose registry entry declares the thinking capability; validated fail-closed at create. Combines freely with service_tier.",
+                "enum": [
+                  "THINKING_MODE_DISABLED",
+                  "THINKING_MODE_ENABLED"
+                ],
+                "type": "string"
+              }
+            },
+            "type": "object"
+          },
+          "workspace_entries": {
+            "description": "Workspace the child run's session operates on. Empty means no workspace.",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "name": {
+                  "description": "Short identifier for this workspace entry.",
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "source": {
+                  "additionalProperties": false,
+                  "description": "The source that provides this entry's content.",
+                  "properties": {
+                    "git_repo": {
+                      "additionalProperties": false,
+                      "description": "Clone a git repository as the workspace source.",
+                      "properties": {
+                        "branch": {
+                          "description": "Branch to clone. When empty, the repository's default branch is used.",
+                          "type": "string"
+                        },
+                        "commit": {
+                          "description": "Commit SHA to checkout after cloning. When set, the workspace is checked out at this exact commit. When both branch and commit are set, the branch is cloned first, then the commit is checked out.",
+                          "type": "string"
+                        },
+                        "depth": {
+                          "description": "Number of commits to include in the clone history. When not set, defaults to a shallow clone with depth 1. Set to 0 for a full clone with complete history.",
+                          "type": "integer"
+                        },
+                        "url": {
+                          "description": "HTTPS clone URL for the repository.",
+                          "type": "string"
+                        },
+                        "write_back_mode": {
+                          "description": "Controls whether the platform creates a branch and pull request from the agent's file changes.",
+                          "enum": [
+                            "GIT_WRITE_BACK_BRANCH_AND_PR"
+                          ],
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "url"
+                      ],
+                      "type": "object"
+                    },
+                    "local_path": {
+                      "additionalProperties": false,
+                      "description": "Use an existing local directory as the workspace source.",
+                      "properties": {
+                        "path": {
+                          "description": "Absolute path to an existing directory on the host filesystem.",
+                          "minLength": 1,
+                          "type": "string"
+                        }
+                      },
+                      "type": "object"
+                    }
+                  },
+                  "type": "object"
+                }
+              },
+              "required": [
+                "source"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "agent",
+          "message"
+        ],
+        "title": "AgentCallTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Agent execution result with dual-channel output.",
+        "properties": {
+          "agent_execution_id": {
+            "description": "Execution ID for drill-down into agent trace.",
+            "type": "string"
+          },
+          "final_text": {
+            "description": "Human-readable agent response.",
+            "type": "string"
+          },
+          "structured": {
+            "description": "Validated JSON output (when output contract is configured).",
+            "type": "object"
+          },
+          "usage_summary": {
+            "properties": {
+              "artifact_count": {
+                "type": "integer"
+              },
+              "estimated_cost_usd": {
+                "type": "number"
+              },
+              "tool_call_count": {
+                "type": "integer"
+              },
+              "total_tokens": {
+                "type": "integer"
+              }
+            },
+            "type": "object"
+          }
+        },
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: triage_ticket\n  kind: agent_call\n  task_config:\n    agent: \"support-triage\"\n    message: \"${ .ticket.description }\"\n    output:\n      schema:\n        type: object\n        required: [severity, category]\n        properties:\n          severity:\n            type: string\n            enum: [low, medium, high, critical]\n          category:\n            type: string\n      on_invalid: ON_INVALID_RETRY\n      max_retries: 2\n  export:\n    as: \"${ .structured }\"\n",
+        "- name: fix_flaky_test\n  kind: agent_call\n  task_config:\n    agent: \"code-reviewer\"\n    message: \"Fix the flaky test in ${ .failing_test }\"\n    harness: HARNESS_CURSOR\n    run_config:\n      model_name: \"composer-2.5\"\n      max_cost_usd: 0.50\n      # Fast tier: billed at the model's fast rates. Valid only for\n      # models with a fast pricing tier; refused at create otherwise.\n      # The shorthand spellings \"standard\"/\"fast\" are also accepted.\n      service_tier: SERVICE_TIER_FAST\n",
+        "- name: deep_review\n  kind: agent_call\n  task_config:\n    agent: \"code-reviewer\"\n    message: \"Review the architecture of ${ .module }\"\n    harness: HARNESS_CURSOR\n    run_config:\n      model_name: \"claude-haiku-4-5\"\n      # Thinking mode: the model's extended-reasoning variant, billed\n      # at base per-token rates (reasoning tokens count as output).\n      # Valid only for models with the thinking capability; refused at\n      # create otherwise. The shorthand spellings \"disabled\"/\"enabled\"\n      # are also accepted.\n      thinking_mode: THINKING_MODE_ENABLED\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/agent-call",
+      "isAiNative": true,
+      "requiresExternalService": true
+    },
+    {
+      "kind": "llm_call",
+      "displayName": "LLM Call",
+      "description": "Direct LLM call for classification, extraction, scoring, or routing without agent overhead.",
+      "category": "ai",
+      "icon": "brain",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.LlmCallTaskConfig",
+      "fields": [
+        {
+          "name": "model",
+          "displayName": "Model",
+          "description": "Model reference resolved via the Stigmer model registry. Examples: \"gpt-4o\", \"gpt-4o-mini\", \"claude-sonnet-4-5\", \"claude-haiku-3-5\" Required field.",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1",
+            "max_length: 127"
+          ]
+        },
+        {
+          "name": "system_prompt",
+          "displayName": "System Prompt",
+          "description": "System prompt that sets the LLM's role and constraints. Supports ${ } expression interpolation for dynamic system prompts. Optional — omit for tasks where the user prompt is self-contained.",
+          "type": "string",
+          "required": false,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 2
+        },
+        {
+          "name": "prompt",
+          "displayName": "Prompt",
+          "description": "User prompt / instruction sent to the LLM. Supports ${ } expression interpolation for injecting workflow context. Example: \"Classify this ticket: ${ $context.ticket.description }\" Required field.",
+          "type": "string",
+          "required": true,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 3,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "response_schema",
+          "displayName": "Response Schema",
+          "description": "JSON Schema for structured output. When set, the runner requests structured output from the provider (e.g., OpenAI's response_format, Anthropic's tool_use extraction) and validates the response against this schema. Uses the same google.protobuf.Struct + JSON Schema pattern as AgentCallOutputContract.schema for consistency across the workflow domain. When not set, the task output is the LLM's raw text response.",
+          "type": "struct",
+          "required": false,
+          "groupId": "output",
+          "fieldNumber": 4
+        },
+        {
+          "name": "temperature",
+          "displayName": "Temperature",
+          "description": "Sampling temperature (0.0 to 2.0). Lower = more deterministic, higher = more creative. Range is 0.0-2.0 to accommodate all major providers (OpenAI supports up to 2.0; others clamp to their supported range at runtime). Optional — uses the provider's default when not set.",
+          "type": "float",
+          "required": false,
+          "groupId": "tuning",
+          "fieldNumber": 5,
+          "validationHints": [
+            "max: 2"
+          ]
+        },
+        {
+          "name": "max_tokens",
+          "displayName": "Max Tokens",
+          "description": "Maximum tokens in the LLM response. Optional — uses the provider's default when not set. Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+          "type": "int32",
+          "required": false,
+          "groupId": "tuning",
+          "fieldNumber": 6,
+          "validationHints": [
+            "min: 1"
+          ]
+        },
+        {
+          "name": "timeout",
+          "displayName": "Timeout",
+          "description": "Timeout for the LLM call in seconds. Max: 600 (10 minutes). Optional — unset (0) leaves the call bounded by the runner's activity timeout. When set, the runner bounds the provider request at this budget and a breach fails the task with LLM_TIMEOUT (non-retryable — catchable with try/catch); the activity timeout widens to fit (#686). Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+          "type": "int32",
+          "required": false,
+          "groupId": "tuning",
+          "fieldNumber": 7,
+          "validationHints": [
+            "min: 1",
+            "max: 600"
+          ]
+        },
+        {
+          "name": "on_invalid",
+          "displayName": "On Invalid",
+          "description": "Policy when the LLM response fails schema validation. Only meaningful when response_schema is set; ignored otherwise. Default: ON_INVALID_FAIL (task fails immediately).",
+          "type": "enum",
+          "required": false,
+          "enumValues": [
+            "ON_INVALID_FAIL",
+            "ON_INVALID_RETRY",
+            "ON_INVALID_FALLBACK"
+          ],
+          "groupId": "output",
+          "fieldNumber": 8
+        },
+        {
+          "name": "max_retries",
+          "displayName": "Max Retries",
+          "description": "Maximum schema-validation retry attempts when on_invalid is ON_INVALID_RETRY. Each retry re-prompts the LLM with the validation errors and expected schema, giving it an opportunity to self-correct. Only meaningful when on_invalid is ON_INVALID_RETRY; ignored otherwise. Default when unset: 1. Valid range when set: 1-5. Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+          "type": "int32",
+          "required": false,
+          "groupId": "output",
+          "fieldNumber": 9,
+          "validationHints": [
+            "min: 1",
+            "max: 5"
+          ]
+        },
+        {
+          "name": "fallback_task",
+          "displayName": "Fallback Task",
+          "description": "Target task to branch to when schema validation cannot be resolved. Used in two scenarios: 1. on_invalid is ON_INVALID_RETRY and all retries are exhausted 2. on_invalid is ON_INVALID_FALLBACK (immediate branch, no retry) Must reference a valid task name in the same workflow. When empty and retries are exhausted, the task fails.",
+          "type": "string",
+          "required": false,
+          "groupId": "output",
+          "fieldNumber": 10
+        },
+        {
+          "name": "max_cost_micros",
+          "displayName": "Max Cost Micros",
+          "description": "Per-task cost cap in micro-USD (1 USD = 1,000,000 micros). When set, the runtime terminates this specific LLM call if its cost exceeds this limit, independent of the workflow-level budget. The runtime checks both: per-task limit first, then workflow remaining budget. Optional — when 0, no per-task cost limit is enforced.",
+          "type": "int32",
+          "required": false,
+          "groupId": "budget",
+          "fieldNumber": 11
+        },
+        {
+          "name": "max_total_tokens",
+          "displayName": "Max Total Tokens",
+          "description": "Per-task token cap (input + output tokens combined). When set, the runtime terminates this specific LLM call if total tokens exceed this limit. Complements max_tokens (field 6), which limits only the output token count as a generation parameter. Optional — when 0, no per-task total token limit is enforced.",
+          "type": "int32",
+          "required": false,
+          "groupId": "budget",
+          "fieldNumber": 12
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Core Configuration"
+        },
+        {
+          "id": "output",
+          "displayName": "Output Control"
+        },
+        {
+          "id": "tuning",
+          "displayName": "Model Tuning"
+        },
+        {
+          "id": "budget",
+          "displayName": "Budget Limits"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "fallback_task": {
+            "description": "Target task to branch to when schema validation cannot be resolved. Used in two scenarios: 1. on_invalid is ON_INVALID_RETRY and all retries are exhausted 2. on_invalid is ON_INVALID_FALLBACK (immediate branch, no retry) Must reference a valid task name in the same workflow. When empty and retries are exhausted, the task fails.",
+            "type": "string"
+          },
+          "max_cost_micros": {
+            "description": "Per-task cost cap in micro-USD (1 USD = 1,000,000 micros). When set, the runtime terminates this specific LLM call if its cost exceeds this limit, independent of the workflow-level budget. The runtime checks both: per-task limit first, then workflow remaining budget. Optional — when 0, no per-task cost limit is enforced.",
+            "type": "integer"
+          },
+          "max_retries": {
+            "description": "Maximum schema-validation retry attempts when on_invalid is ON_INVALID_RETRY. Each retry re-prompts the LLM with the validation errors and expected schema, giving it an opportunity to self-correct. Only meaningful when on_invalid is ON_INVALID_RETRY; ignored otherwise. Default when unset: 1. Valid range when set: 1-5. Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+            "maximum": 5,
+            "minimum": 1,
+            "type": "integer"
+          },
+          "max_tokens": {
+            "description": "Maximum tokens in the LLM response. Optional — uses the provider's default when not set. Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+            "minimum": 1,
+            "type": "integer"
+          },
+          "max_total_tokens": {
+            "description": "Per-task token cap (input + output tokens combined). When set, the runtime terminates this specific LLM call if total tokens exceed this limit. Complements max_tokens (field 6), which limits only the output token count as a generation parameter. Optional — when 0, no per-task total token limit is enforced.",
+            "type": "integer"
+          },
+          "model": {
+            "description": "Model reference resolved via the Stigmer model registry. Examples: \"gpt-4o\", \"gpt-4o-mini\", \"claude-sonnet-4-5\", \"claude-haiku-3-5\" Required field.",
+            "maxLength": 127,
+            "minLength": 1,
+            "type": "string"
+          },
+          "on_invalid": {
+            "description": "Policy when the LLM response fails schema validation. Only meaningful when response_schema is set; ignored otherwise. Default: ON_INVALID_FAIL (task fails immediately).",
+            "enum": [
+              "ON_INVALID_FAIL",
+              "ON_INVALID_RETRY",
+              "ON_INVALID_FALLBACK"
+            ],
+            "type": "string"
+          },
+          "prompt": {
+            "description": "User prompt / instruction sent to the LLM. Supports ${ } expression interpolation for injecting workflow context. Example: \"Classify this ticket: ${ $context.ticket.description }\" Required field.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "response_schema": {
+            "description": "JSON Schema for structured output. When set, the runner requests structured output from the provider (e.g., OpenAI's response_format, Anthropic's tool_use extraction) and validates the response against this schema. Uses the same google.protobuf.Struct + JSON Schema pattern as AgentCallOutputContract.schema for consistency across the workflow domain. When not set, the task output is the LLM's raw text response.",
+            "type": "object"
+          },
+          "system_prompt": {
+            "description": "System prompt that sets the LLM's role and constraints. Supports ${ } expression interpolation for dynamic system prompts. Optional — omit for tasks where the user prompt is self-contained.",
+            "type": "string"
+          },
+          "temperature": {
+            "description": "Sampling temperature (0.0 to 2.0). Lower = more deterministic, higher = more creative. Range is 0.0-2.0 to accommodate all major providers (OpenAI supports up to 2.0; others clamp to their supported range at runtime). Optional — uses the provider's default when not set.",
+            "maximum": 2,
+            "type": "number"
+          },
+          "timeout": {
+            "description": "Timeout for the LLM call in seconds. Max: 600 (10 minutes). Optional — unset (0) leaves the call bounded by the runner's activity timeout. When set, the runner bounds the provider request at this budget and a breach fails the task with LLM_TIMEOUT (non-retryable — catchable with try/catch); the activity timeout widens to fit (#686). Unset (0) is valid: proto3 implicit presence makes an omitted field indistinguishable from 0, so the range rule must not fire on it (#673).",
+            "maximum": 600,
+            "minimum": 1,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "model",
+          "prompt"
+        ],
+        "title": "LlmCallTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "LLM response — structured JSON if response_schema is set, raw text otherwise.",
+        "properties": {
+          "structured": {
+            "description": "Validated JSON output (when response_schema is configured).",
+            "type": "object"
+          },
+          "text": {
+            "description": "Raw text response from the LLM.",
+            "type": "string"
+          }
+        },
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: classify_severity\n  kind: llm_call\n  task_config:\n    model: \"gpt-4o-mini\"\n    system_prompt: \"You are a support ticket classifier.\"\n    prompt: \"Classify this ticket: ${ $context.ticket.description }\"\n    response_schema:\n      type: object\n      required: [severity, category]\n      properties:\n        severity:\n          type: string\n          enum: [low, medium, high, critical]\n        category:\n          type: string\n    on_invalid: ON_INVALID_RETRY\n    max_retries: 2\n  export:\n    as: \"${ . }\"\n",
+        "- name: summarize\n  kind: llm_call\n  task_config:\n    model: \"claude-sonnet-4-5\"\n    prompt: \"Summarize in 2 sentences: ${ $context.document.text }\"\n    temperature: 0.3\n    max_tokens: 200\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/llm-call",
+      "isAiNative": true,
+      "requiresExternalService": true
+    },
+    {
+      "kind": "transform",
+      "displayName": "Transform",
+      "description": "Deterministic data transformation using JQ, JSONata, or template engines.",
+      "category": "data",
+      "icon": "shuffle",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.TransformTaskConfig",
+      "fields": [
+        {
+          "name": "engine",
+          "displayName": "Engine",
+          "description": "Transformation engine to use. Required — must be explicitly set (not UNSPECIFIED).",
+          "type": "enum",
+          "required": true,
+          "enumValues": [
+            "TRANSFORM_ENGINE_JQ",
+            "TRANSFORM_ENGINE_JSONATA",
+            "TRANSFORM_ENGINE_TEMPLATE"
+          ],
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required"
+          ]
+        },
+        {
+          "name": "expression",
+          "displayName": "Expression",
+          "description": "Transformation expression in the chosen engine's syntax. For JQ: a JQ filter expression (e.g., '{name: .full_name}') For JSONata: a JSONata expression (e.g., '{\"name\": full_name}') For TEMPLATE: a Go text/template string with {{ }} placeholders Required field.",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 2,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "input",
+          "displayName": "Input",
+          "description": "Expression selecting the input data for the transformation. Supports ${ } expression interpolation. When omitted, the entire workflow context is used as input. Example: \"${ $context.triage }\" to transform just the triage output.",
+          "type": "string",
+          "required": false,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 3
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Transformation"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "engine": {
+            "description": "Transformation engine to use. Required — must be explicitly set (not UNSPECIFIED).",
+            "enum": [
+              "TRANSFORM_ENGINE_JQ",
+              "TRANSFORM_ENGINE_JSONATA",
+              "TRANSFORM_ENGINE_TEMPLATE"
+            ],
+            "type": "string"
+          },
+          "expression": {
+            "description": "Transformation expression in the chosen engine's syntax. For JQ: a JQ filter expression (e.g., '{name: .full_name}') For JSONata: a JSONata expression (e.g., '{\"name\": full_name}') For TEMPLATE: a Go text/template string with {{ }} placeholders Required field.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "input": {
+            "description": "Expression selecting the input data for the transformation. Supports ${ } expression interpolation. When omitted, the entire workflow context is used as input. Example: \"${ $context.triage }\" to transform just the triage output.",
+            "type": "string"
+          }
+        },
+        "required": [
+          "engine",
+          "expression"
+        ],
+        "title": "TransformTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Result of applying the transformation expression to the input data.",
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: build_api_payload\n  kind: transform\n  task_config:\n    engine: TRANSFORM_ENGINE_JQ\n    expression: '{name: .customer.full_name, severity: .triage.severity, summary: .agent_analysis.structured.summary}'\n    input: \"${ $context }\"\n  export:\n    as: \"${ . }\"\n",
+        "- name: render_message\n  kind: transform\n  task_config:\n    engine: TRANSFORM_ENGINE_TEMPLATE\n    expression: \"Ticket {{ .ticket_id }} classified as {{ .severity }}\"\n    input: \"${ $context.build_api_payload }\"\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/transform",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "human_input",
+      "displayName": "Human Input",
+      "description": "Workflow-level approval gate that pauses execution for human review or input.",
+      "category": "governance",
+      "icon": "user-check",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.HumanInputTaskConfig",
+      "fields": [
+        {
+          "name": "prompt",
+          "displayName": "Prompt",
+          "description": "Message shown to the reviewer explaining what needs approval or input. Supports ${ } expression interpolation for injecting workflow context. Example: \"Approve escalation for ticket ${ $context.ticket.id }?\"",
+          "type": "string",
+          "required": true,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "form_schema",
+          "displayName": "Form Schema",
+          "description": "JSON Schema defining the input form rendered to the reviewer. When set, the approval UI renders a typed form based on this schema. The reviewer's form response is validated against the schema before the task completes, and the validated data appears in the task output under the \"form_data\" key. When not set, the reviewer sees only the outcome buttons (approve/deny or custom outcomes) without a data entry form. Uses the same google.protobuf.Struct + JSON Schema pattern as AgentCallOutputContract.schema and LlmCallTaskConfig.response_schema.",
+          "type": "struct",
+          "required": false,
+          "groupId": "form",
+          "fieldNumber": 2
+        },
+        {
+          "name": "outcomes",
+          "displayName": "Outcomes",
+          "description": "Named outcomes that the reviewer can select. Each outcome represents a decision the reviewer can make, with optional routing to a different downstream task. This enables rich branching beyond binary approve/deny. When empty, the task defaults to binary behavior: - \"approve\": task completes, workflow continues to next task - \"deny\": task fails (enters try_catch or EXECUTION_FAILED) When custom outcomes are defined, the first outcome is used as the default for HUMAN_INPUT_TIMEOUT_APPROVE, and the last outcome is used as the default for HUMAN_INPUT_TIMEOUT_DENY.",
+          "type": "repeated",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 3,
+          "elementType": "HumanInputOutcome"
+        },
+        {
+          "name": "approvers",
+          "displayName": "Approvers",
+          "description": "Approver identifiers — who is allowed to respond to this task. Supports user IDs, team slugs, and role names. Format examples: - \"user:jane@acme.com\" — specific user - \"team:engineering-leads\" — any member of the team - \"role:content-admin\" — any user with the role When empty, any authenticated user can respond. Resolution of these identifiers is a runtime concern (T13).",
+          "type": "repeated",
+          "required": false,
+          "groupId": "access",
+          "fieldNumber": 4,
+          "elementType": "string"
+        },
+        {
+          "name": "timeout",
+          "displayName": "Timeout",
+          "description": "Timeout in seconds before the on_timeout policy applies. Default: 0 (no timeout — the task waits indefinitely). Max: 2592000 (30 days). A timeout of 0 means the workflow will wait until a human responds. For production workflows, setting a timeout with an appropriate on_timeout policy is strongly recommended.",
+          "type": "int32",
+          "required": false,
+          "groupId": "timeout",
+          "fieldNumber": 5,
+          "validationHints": [
+            "max: 2592000"
+          ]
+        },
+        {
+          "name": "on_timeout",
+          "displayName": "On Timeout",
+          "description": "Policy applied when the timeout expires without a response. Only meaningful when timeout \u003e 0; ignored when timeout is 0. Default: HUMAN_INPUT_TIMEOUT_FAIL (task fails with timeout error).",
+          "type": "enum",
+          "required": false,
+          "enumValues": [
+            "HUMAN_INPUT_TIMEOUT_FAIL",
+            "HUMAN_INPUT_TIMEOUT_APPROVE",
+            "HUMAN_INPUT_TIMEOUT_DENY",
+            "HUMAN_INPUT_TIMEOUT_ESCALATE"
+          ],
+          "groupId": "timeout",
+          "fieldNumber": 6
+        },
+        {
+          "name": "notification_channels",
+          "displayName": "Notification Channels",
+          "description": "Channel identifiers for sending approval request notifications. When the task starts, the runtime sends notifications through these channels to alert potential approvers. Format examples: - \"slack:#approvals\" — Slack channel - \"email:ops@acme.com\" — email address - \"teams:#incident-response\" — Microsoft Teams channel The format and routing of notifications is a runtime concern (T13). The proto carries the identifiers; the runtime resolves them to actual notification providers configured in the workflow instance's environment.",
+          "type": "repeated",
+          "required": false,
+          "groupId": "access",
+          "fieldNumber": 7,
+          "elementType": "string"
+        },
+        {
+          "name": "payload",
+          "displayName": "Payload",
+          "description": "Structured material for the reviewer to examine before deciding. Supports ${ } expression interpolation: the whole value can be a single expression string (\"${ $context.draft_revision }\") or an inline object/array whose nested strings carry embedded expressions. The runtime resolves expressions when the gate activates and attaches the resolved payload to the approval_requested event, so the approval record is permanently bound to exactly what the reviewer saw. Distinct from prompt (the instruction to the reviewer) and form_schema (the shape of the reviewer's response): payload is the thing under review — an article diff, a proposed record set, a generated plan.",
+          "type": "value",
+          "required": false,
+          "fieldNumber": 8
+        },
+        {
+          "name": "ui_hint",
+          "displayName": "Ui Hint",
+          "description": "Hint identifying which UI should present the payload. A plain discriminator string (e.g. \"article-diff\", \"infra-proposal\") that embedding applications match against their registered review renderers. When no renderer is registered for the hint — or the gate is viewed from a surface without custom renderers (CLI, plain console) — the payload is shown as structured data by the built-in approval card, so workflows stay portable across surfaces.",
+          "type": "string",
+          "required": false,
+          "fieldNumber": 9,
+          "validationHints": [
+            "max_length: 63"
+          ]
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Prompt \u0026 Outcomes"
+        },
+        {
+          "id": "form",
+          "displayName": "Input Form"
+        },
+        {
+          "id": "access",
+          "displayName": "Access \u0026 Routing"
+        },
+        {
+          "id": "timeout",
+          "displayName": "Timeout Policy"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "approvers": {
+            "description": "Approver identifiers — who is allowed to respond to this task. Supports user IDs, team slugs, and role names. Format examples: - \"user:jane@acme.com\" — specific user - \"team:engineering-leads\" — any member of the team - \"role:content-admin\" — any user with the role When empty, any authenticated user can respond. Resolution of these identifiers is a runtime concern (T13).",
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "form_schema": {
+            "description": "JSON Schema defining the input form rendered to the reviewer. When set, the approval UI renders a typed form based on this schema. The reviewer's form response is validated against the schema before the task completes, and the validated data appears in the task output under the \"form_data\" key. When not set, the reviewer sees only the outcome buttons (approve/deny or custom outcomes) without a data entry form. Uses the same google.protobuf.Struct + JSON Schema pattern as AgentCallOutputContract.schema and LlmCallTaskConfig.response_schema.",
+            "type": "object"
+          },
+          "notification_channels": {
+            "description": "Channel identifiers for sending approval request notifications. When the task starts, the runtime sends notifications through these channels to alert potential approvers. Format examples: - \"slack:#approvals\" — Slack channel - \"email:ops@acme.com\" — email address - \"teams:#incident-response\" — Microsoft Teams channel The format and routing of notifications is a runtime concern (T13). The proto carries the identifiers; the runtime resolves them to actual notification providers configured in the workflow instance's environment.",
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "on_timeout": {
+            "description": "Policy applied when the timeout expires without a response. Only meaningful when timeout \u003e 0; ignored when timeout is 0. Default: HUMAN_INPUT_TIMEOUT_FAIL (task fails with timeout error).",
+            "enum": [
+              "HUMAN_INPUT_TIMEOUT_FAIL",
+              "HUMAN_INPUT_TIMEOUT_APPROVE",
+              "HUMAN_INPUT_TIMEOUT_DENY",
+              "HUMAN_INPUT_TIMEOUT_ESCALATE"
+            ],
+            "type": "string"
+          },
+          "outcomes": {
+            "description": "Named outcomes that the reviewer can select. Each outcome represents a decision the reviewer can make, with optional routing to a different downstream task. This enables rich branching beyond binary approve/deny. When empty, the task defaults to binary behavior: - \"approve\": task completes, workflow continues to next task - \"deny\": task fails (enters try_catch or EXECUTION_FAILED) When custom outcomes are defined, the first outcome is used as the default for HUMAN_INPUT_TIMEOUT_APPROVE, and the last outcome is used as the default for HUMAN_INPUT_TIMEOUT_DENY.",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "label": {
+                  "description": "Human-readable label for the button/action in the approval UI. When empty, the UI displays the capitalized name. Examples: \"Approve Escalation\", \"Reject — Not Customer-Impacting\"",
+                  "type": "string"
+                },
+                "name": {
+                  "description": "Outcome identifier used in task output and routing. Examples: \"approve\", \"deny\", \"needs_revision\", \"escalate\", \"defer\" Must be unique within the outcomes list.",
+                  "maxLength": 63,
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "then": {
+                  "description": "Task to branch to when this outcome is selected. Must reference a valid task name in the same workflow. When empty, the workflow continues to the next task in sequence.",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "name"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "payload": {
+            "description": "Structured material for the reviewer to examine before deciding. Supports ${ } expression interpolation: the whole value can be a single expression string (\"${ $context.draft_revision }\") or an inline object/array whose nested strings carry embedded expressions. The runtime resolves expressions when the gate activates and attaches the resolved payload to the approval_requested event, so the approval record is permanently bound to exactly what the reviewer saw. Distinct from prompt (the instruction to the reviewer) and form_schema (the shape of the reviewer's response): payload is the thing under review — an article diff, a proposed record set, a generated plan."
+          },
+          "prompt": {
+            "description": "Message shown to the reviewer explaining what needs approval or input. Supports ${ } expression interpolation for injecting workflow context. Example: \"Approve escalation for ticket ${ $context.ticket.id }?\"",
+            "minLength": 1,
+            "type": "string"
+          },
+          "timeout": {
+            "description": "Timeout in seconds before the on_timeout policy applies. Default: 0 (no timeout — the task waits indefinitely). Max: 2592000 (30 days). A timeout of 0 means the workflow will wait until a human responds. For production workflows, setting a timeout with an appropriate on_timeout policy is strongly recommended.",
+            "maximum": 2592000,
+            "type": "integer"
+          },
+          "ui_hint": {
+            "description": "Hint identifying which UI should present the payload. A plain discriminator string (e.g. \"article-diff\", \"infra-proposal\") that embedding applications match against their registered review renderers. When no renderer is registered for the hint — or the gate is viewed from a surface without custom renderers (CLI, plain console) — the payload is shown as structured data by the built-in approval card, so workflows stay portable across surfaces.",
+            "maxLength": 63,
+            "type": "string"
+          }
+        },
+        "required": [
+          "prompt"
+        ],
+        "title": "HumanInputTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Reviewer response including selected outcome and form data.",
+        "properties": {
+          "form_data": {
+            "description": "Validated form response (when form_schema is configured).",
+            "type": "object"
+          },
+          "outcome": {
+            "description": "Selected outcome name (e.g., 'approve', 'deny', 'needs_revision').",
+            "type": "string"
+          },
+          "responded_at": {
+            "description": "ISO 8601 timestamp of the response.",
+            "type": "string"
+          },
+          "reviewer": {
+            "description": "Identity of the user who responded.",
+            "type": "string"
+          }
+        },
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: manager_approval\n  kind: human_input\n  task_config:\n    prompt: \"Approve escalation for ${ $context.triage.severity } incident?\"\n    form_schema:\n      type: object\n      properties:\n        notes:\n          type: string\n          description: \"Optional notes for the engineering team\"\n        priority_override:\n          type: string\n          enum: [P1, P2, P3]\n    outcomes:\n      - name: approve\n        label: \"Approve Escalation\"\n      - name: deny\n        label: \"Reject\"\n        then: re_classify\n    approvers:\n      - \"team:engineering-leads\"\n    timeout: 86400\n    on_timeout: HUMAN_INPUT_TIMEOUT_DENY\n    notification_channels:\n      - \"slack:#incident-approvals\"\n  export:\n    as: \"${ . }\"\n",
+        "- name: release_signoff\n  kind: human_input\n  task_config:\n    prompt: \"Sign off on the ${ $context.release.version } release?\"\n    outcomes:\n      - name: ship\n        label: \"Ship It\"\n      - name: escalate\n        label: \"Escalate to On-Call Lead\"\n        then: page_oncall_lead\n      - name: hold\n        label: \"Hold the Release\"\n        then: end\n    approvers:\n      - \"team:release-managers\"\n    timeout: 3600\n    on_timeout: HUMAN_INPUT_TIMEOUT_ESCALATE\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/human-input",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "validate",
+      "displayName": "Validate",
+      "description": "Schema and business-rule validation checkpoint for workflow data.",
+      "category": "data",
+      "icon": "check-circle",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.ValidateTaskConfig",
+      "fields": [
+        {
+          "name": "input",
+          "displayName": "Input",
+          "description": "Expression selecting the data to validate. Supports ${ } expression interpolation. Example: \"${ $context.triage }\" to validate the triage task's output.",
+          "type": "string",
+          "required": true,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "schema",
+          "displayName": "Schema",
+          "description": "JSON Schema to validate the input data against. Standard JSON Schema (draft 2020-12 or compatible). The runtime validates the input data against this schema and reports detailed errors for any constraint violations. Uses the same google.protobuf.Struct + JSON Schema pattern as AgentCallOutputContract.schema, LlmCallTaskConfig.response_schema, and HumanInputTaskConfig.form_schema. At least one of schema or rules must be set.",
+          "type": "struct",
+          "required": false,
+          "groupId": "schema",
+          "fieldNumber": 2
+        },
+        {
+          "name": "rules",
+          "displayName": "Rules",
+          "description": "Business rules to evaluate against the input data. Each rule is a boolean expression that must evaluate to true. Rules complement schema validation by expressing constraints that JSON Schema cannot: cross-field dependencies, conditional requirements, and domain-specific invariants. At least one of schema or rules must be set.",
+          "type": "repeated",
+          "required": false,
+          "groupId": "rules",
+          "fieldNumber": 3,
+          "elementType": "ValidationRule"
+        },
+        {
+          "name": "on_fail",
+          "displayName": "On Fail",
+          "description": "Policy applied when validation fails. Default: VALIDATION_FAIL_RAISE (task fails with validation error).",
+          "type": "enum",
+          "required": false,
+          "enumValues": [
+            "VALIDATION_FAIL_RAISE",
+            "VALIDATION_FAIL_BRANCH",
+            "VALIDATION_FAIL_WARN"
+          ],
+          "groupId": "policy",
+          "fieldNumber": 4
+        },
+        {
+          "name": "fallback_task",
+          "displayName": "Fallback Task",
+          "description": "Target task to branch to when on_fail is VALIDATION_FAIL_BRANCH. Must reference a valid task name in the same workflow. Only meaningful when on_fail is VALIDATION_FAIL_BRANCH; ignored otherwise. When on_fail is BRANCH and fallback_task is empty, the task fails.",
+          "type": "string",
+          "required": false,
+          "groupId": "policy",
+          "fieldNumber": 5
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Validation Target"
+        },
+        {
+          "id": "schema",
+          "displayName": "Schema Validation"
+        },
+        {
+          "id": "rules",
+          "displayName": "Business Rules"
+        },
+        {
+          "id": "policy",
+          "displayName": "Failure Policy"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "fallback_task": {
+            "description": "Target task to branch to when on_fail is VALIDATION_FAIL_BRANCH. Must reference a valid task name in the same workflow. Only meaningful when on_fail is VALIDATION_FAIL_BRANCH; ignored otherwise. When on_fail is BRANCH and fallback_task is empty, the task fails.",
+            "type": "string"
+          },
+          "input": {
+            "description": "Expression selecting the data to validate. Supports ${ } expression interpolation. Example: \"${ $context.triage }\" to validate the triage task's output.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "on_fail": {
+            "description": "Policy applied when validation fails. Default: VALIDATION_FAIL_RAISE (task fails with validation error).",
+            "enum": [
+              "VALIDATION_FAIL_RAISE",
+              "VALIDATION_FAIL_BRANCH",
+              "VALIDATION_FAIL_WARN"
+            ],
+            "type": "string"
+          },
+          "rules": {
+            "description": "Business rules to evaluate against the input data. Each rule is a boolean expression that must evaluate to true. Rules complement schema validation by expressing constraints that JSON Schema cannot: cross-field dependencies, conditional requirements, and domain-specific invariants. At least one of schema or rules must be set.",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "expression": {
+                  "description": "Boolean expression that must evaluate to true for the rule to pass. Supports ${ } expression interpolation. The expression receives the validate task's input data as its context. Example: \"${ .severity != 'critical' || (.rationale != null \u0026\u0026 .rationale != '') }\"",
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "message": {
+                  "description": "Error message included in validation output when the rule fails. Supports ${ } expression interpolation for dynamic error messages. When empty, a generic message is generated from the rule name. Example: \"Critical severity requires a rationale\"",
+                  "type": "string"
+                },
+                "name": {
+                  "description": "Rule identifier for error reporting and debugging. Appears in validation error output so operators can identify which specific rule failed. Examples: \"critical_needs_rationale\", \"customer_impact_requires_high_severity\"",
+                  "maxLength": 127,
+                  "minLength": 1,
+                  "type": "string"
+                }
+              },
+              "required": [
+                "name",
+                "expression"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "schema": {
+            "description": "JSON Schema to validate the input data against. Standard JSON Schema (draft 2020-12 or compatible). The runtime validates the input data against this schema and reports detailed errors for any constraint violations. Uses the same google.protobuf.Struct + JSON Schema pattern as AgentCallOutputContract.schema, LlmCallTaskConfig.response_schema, and HumanInputTaskConfig.form_schema. At least one of schema or rules must be set.",
+            "type": "object"
+          }
+        },
+        "required": [
+          "input"
+        ],
+        "title": "ValidateTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Validation result with pass/fail status and error details.",
+        "properties": {
+          "data": {
+            "description": "The original input data that was validated.",
+            "type": "object"
+          },
+          "errors": {
+            "description": "List of validation errors (empty when valid is true).",
+            "items": {
+              "properties": {
+                "message": {
+                  "type": "string"
+                },
+                "path": {
+                  "type": "string"
+                },
+                "rule": {
+                  "type": "string"
+                }
+              },
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "valid": {
+            "description": "Whether all schema and rule validations passed.",
+            "type": "boolean"
+          }
+        },
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: check_triage_quality\n  kind: validate\n  task_config:\n    input: \"${ $context.triage }\"\n    schema:\n      type: object\n      required: [severity, category, customer_impact]\n      properties:\n        severity:\n          type: string\n          enum: [low, medium, high, critical]\n        category:\n          type: string\n          minLength: 1\n        customer_impact:\n          type: boolean\n    rules:\n      - name: critical_needs_rationale\n        expression: \"${ .severity != 'critical' || (.rationale != null \u0026\u0026 .rationale != '') }\"\n        message: \"Critical severity requires a rationale\"\n    on_fail: VALIDATION_FAIL_BRANCH\n    fallback_task: human_review\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/validate",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "emit_event",
+      "displayName": "Emit Event",
+      "description": "Publish a CloudEvents-formatted event for external consumers or other workflows.",
+      "category": "event",
+      "icon": "send",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.EmitEventTaskConfig",
+      "fields": [
+        {
+          "name": "event",
+          "displayName": "Event",
+          "description": "The event specification to emit. Contains the CloudEvents envelope fields (type, source, data, subject). Required field.",
+          "type": "message",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "elementType": "EmitEventSpec",
+          "validationHints": [
+            "required"
+          ]
+        },
+        {
+          "name": "delivery",
+          "displayName": "Delivery",
+          "description": "Delivery targets for the emitted event (optional). When empty, the task only constructs the CloudEvents envelope and exposes it as task output — no external delivery happens. Delivery is best-effort: a failed target never fails the task. Failures are collected into the \"delivery_errors\" array on the task output, one entry per failed target, so workflows can branch on delivery health. Each target has a 30-second timeout.",
+          "type": "repeated",
+          "required": false,
+          "groupId": "delivery",
+          "fieldNumber": 2,
+          "elementType": "EmitDeliveryTarget"
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Event Specification"
+        },
+        {
+          "id": "delivery",
+          "displayName": "Delivery"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "delivery": {
+            "description": "Delivery targets for the emitted event (optional). When empty, the task only constructs the CloudEvents envelope and exposes it as task output — no external delivery happens. Delivery is best-effort: a failed target never fails the task. Failures are collected into the \"delivery_errors\" array on the task output, one entry per failed target, so workflows can branch on delivery health. Each target has a 30-second timeout.",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "signal": {
+                  "additionalProperties": false,
+                  "description": "Signal another workflow execution's listen task.",
+                  "properties": {
+                    "execution_id": {
+                      "description": "Target workflow execution id (\"wfx_...\"), as returned by run/create. Usually flows from a prior task's output: \"${ .start_processor.execution_id }\"",
+                      "minLength": 1,
+                      "type": "string"
+                    },
+                    "signal_name": {
+                      "description": "Signal name, matching the target's listen task event id (verbatim).",
+                      "minLength": 1,
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "execution_id",
+                    "signal_name"
+                  ],
+                  "type": "object"
+                },
+                "webhook": {
+                  "additionalProperties": false,
+                  "description": "POST the CloudEvents envelope to an HTTP endpoint.",
+                  "properties": {
+                    "headers": {
+                      "additionalProperties": {
+                        "type": "string"
+                      },
+                      "description": "HTTP headers to send with the POST (optional). Values can contain runtime placeholders resolved just-in-time by the runner: \"Authorization: Bearer ${.secrets.WEBHOOK_TOKEN}\" or \"${.env_vars.KEY}\". Secrets resolve inside the delivery activity and never enter workflow history.",
+                      "type": "object"
+                    },
+                    "url": {
+                      "description": "Endpoint URL to POST the event to. Can contain expressions: \"https://hooks.example.com/${ $context.tenant }\"",
+                      "minLength": 1,
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "url"
+                  ],
+                  "type": "object"
+                }
+              },
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "event": {
+            "additionalProperties": false,
+            "description": "The event specification to emit. Contains the CloudEvents envelope fields (type, source, data, subject). Required field.",
+            "properties": {
+              "data": {
+                "description": "Event payload data. Arbitrary JSON object carried as the CloudEvents data attribute. Values within the Struct can contain ${ } expressions that the runtime evaluates before emission. Unlike other Struct fields in the workflow domain (response_schema, form_schema, schema) which carry JSON Schema definitions, this field carries the actual event payload — not a schema.",
+                "type": "object"
+              },
+              "source": {
+                "description": "CloudEvents source identifier. URI or URI-reference that identifies the context in which the event happened. Supports ${ } expression interpolation. When empty, the runtime defaults to the workflow execution URI (e.g., \"/workflows/{workflow_id}/executions/{execution_id}\").",
+                "type": "string"
+              },
+              "subject": {
+                "description": "CloudEvents subject identifier. Describes the subject of the event in the context of the event producer. Supports ${ } expression interpolation. Examples: \"${ $context.ticket.id }\", \"${ $context.order.number }\"",
+                "type": "string"
+              },
+              "type": {
+                "description": "CloudEvents type identifier. A reverse-DNS string that categorizes the event for routing and filtering. Examples: \"stigmer.workflow.ticket.classified\", \"acme.order.completed\"",
+                "maxLength": 255,
+                "minLength": 1,
+                "type": "string"
+              }
+            },
+            "required": [
+              "type"
+            ],
+            "type": "object"
+          }
+        },
+        "required": [
+          "event"
+        ],
+        "title": "EmitEventTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Fully-resolved CloudEvents envelope with runtime-generated fields.",
+        "properties": {
+          "data": {
+            "type": "object"
+          },
+          "datacontenttype": {
+            "description": "Always 'application/json'.",
+            "type": "string"
+          },
+          "delivery_errors": {
+            "description": "Present only when at least one delivery target failed. One entry per failed target; delivery is best-effort and never fails the task.",
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "id": {
+            "description": "Generated UUID for this event.",
+            "type": "string"
+          },
+          "source": {
+            "type": "string"
+          },
+          "specversion": {
+            "description": "Always '1.0'.",
+            "type": "string"
+          },
+          "subject": {
+            "type": "string"
+          },
+          "time": {
+            "description": "ISO 8601 timestamp of emission.",
+            "type": "string"
+          },
+          "type": {
+            "type": "string"
+          }
+        },
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: notify_classified\n  kind: emit_event\n  task_config:\n    event:\n      type: \"stigmer.workflow.ticket.classified\"\n      subject: \"${ $context.ticket.id }\"\n      data:\n        ticket_id: \"${ $context.ticket.id }\"\n        severity: \"${ $context.triage.severity }\"\n        category: \"${ $context.triage.category }\"\n  export:\n    as: \"${ . }\"\n",
+        "- name: notify_downstream\n  kind: emit_event\n  task_config:\n    event:\n      type: \"acme.order.fulfilled\"\n      subject: \"${ $context.order.number }\"\n      data:\n        order_id: \"${ $context.order.id }\"\n    delivery:\n      - webhook:\n          url: \"https://hooks.acme.com/orders\"\n          headers:\n            Authorization: \"Bearer ${.secrets.ACME_HOOK_TOKEN}\"\n      - signal:\n          execution_id: \"${ .start_shipping.execution_id }\"\n          signal_name: \"order-fulfilled\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/emit-event",
+      "isAiNative": false,
+      "requiresExternalService": false
+    },
+    {
+      "kind": "notification",
+      "displayName": "Notification",
+      "description": "Send a notification to humans through a channel (Slack, email, Discord, etc.).",
+      "category": "event",
+      "icon": "bell",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.NotificationTaskConfig",
+      "fields": [
+        {
+          "name": "channel",
+          "displayName": "Channel",
+          "description": "Notification channel identifier. Determines which notification provider processes this message. Common values: \"slack\", \"email\", \"discord\", \"teams\", \"webhook\" This is a string (not an enum) for extensibility — new channels can be added without proto changes. The runtime resolves the channel to its configured provider in the workflow instance's environment.",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1",
+            "max_length: 63"
+          ]
+        },
+        {
+          "name": "recipients",
+          "displayName": "Recipients",
+          "description": "Recipient identifiers for the notification. Format depends on the channel: - slack: \"#channel-name\", \"@username\", or Slack user IDs - email: \"user@example.com\" - discord: \"#channel-name\", \"@role\" - teams: \"#channel-name\" - webhook: URL or webhook identifier At least one recipient is required. Individual values may contain ${ } expressions that the runtime evaluates before delivery (e.g., \"${ $context.customer.email }\").",
+          "type": "repeated",
+          "required": false,
+          "groupId": "core",
+          "fieldNumber": 2,
+          "elementType": "string",
+          "validationHints": [
+            "min_items: 1"
+          ]
+        },
+        {
+          "name": "subject",
+          "displayName": "Subject",
+          "description": "Notification subject or title. Supports ${ } expression interpolation. Used as: email subject line, Slack message title, webhook payload title. Optional — some channels (e.g., simple Slack messages) may not use it.",
+          "type": "string",
+          "required": false,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 3
+        },
+        {
+          "name": "body",
+          "displayName": "Body",
+          "description": "Notification body / message content. Supports ${ } expression interpolation. The primary content of the notification. Formatting depends on channel (e.g., Slack Markdown, HTML for email, plain text for SMS). When template is also set, body serves as the fallback content if the template cannot be resolved.",
+          "type": "string",
+          "required": true,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 4,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "template",
+          "displayName": "Template",
+          "description": "Named template reference for rendering the notification. When set, the runtime looks up this template in the workflow instance's environment and uses it for rendering, with the workflow context as template data. The body field is used as fallback if the template cannot be resolved. Examples: \"incident-alert\", \"order-confirmation\", \"approval-request\" Template resolution and rendering is a runtime concern (T13).",
+          "type": "string",
+          "required": false,
+          "groupId": "template",
+          "fieldNumber": 5
+        },
+        {
+          "name": "metadata",
+          "displayName": "Metadata",
+          "description": "Channel-specific metadata as key-value pairs. Provides additional configuration that varies by notification channel: - slack: {\"thread_ts\": \"...\", \"unfurl_links\": \"false\"} - email: {\"priority\": \"high\", \"reply_to\": \"...\", \"cc\": \"...\"} - webhook: {\"method\": \"POST\", \"content_type\": \"application/json\"} Values may contain ${ } expressions that the runtime evaluates before delivery.",
+          "type": "map",
+          "required": false,
+          "groupId": "advanced",
+          "fieldNumber": 6
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Message"
+        },
+        {
+          "id": "template",
+          "displayName": "Template"
+        },
+        {
+          "id": "advanced",
+          "displayName": "Channel Options"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "body": {
+            "description": "Notification body / message content. Supports ${ } expression interpolation. The primary content of the notification. Formatting depends on channel (e.g., Slack Markdown, HTML for email, plain text for SMS). When template is also set, body serves as the fallback content if the template cannot be resolved.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "channel": {
+            "description": "Notification channel identifier. Determines which notification provider processes this message. Common values: \"slack\", \"email\", \"discord\", \"teams\", \"webhook\" This is a string (not an enum) for extensibility — new channels can be added without proto changes. The runtime resolves the channel to its configured provider in the workflow instance's environment.",
+            "maxLength": 63,
+            "minLength": 1,
+            "type": "string"
+          },
+          "metadata": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "description": "Channel-specific metadata as key-value pairs. Provides additional configuration that varies by notification channel: - slack: {\"thread_ts\": \"...\", \"unfurl_links\": \"false\"} - email: {\"priority\": \"high\", \"reply_to\": \"...\", \"cc\": \"...\"} - webhook: {\"method\": \"POST\", \"content_type\": \"application/json\"} Values may contain ${ } expressions that the runtime evaluates before delivery.",
+            "type": "object"
+          },
+          "recipients": {
+            "description": "Recipient identifiers for the notification. Format depends on the channel: - slack: \"#channel-name\", \"@username\", or Slack user IDs - email: \"user@example.com\" - discord: \"#channel-name\", \"@role\" - teams: \"#channel-name\" - webhook: URL or webhook identifier At least one recipient is required. Individual values may contain ${ } expressions that the runtime evaluates before delivery (e.g., \"${ $context.customer.email }\").",
+            "items": {
+              "type": "string"
+            },
+            "minItems": 1,
+            "type": "array"
+          },
+          "subject": {
+            "description": "Notification subject or title. Supports ${ } expression interpolation. Used as: email subject line, Slack message title, webhook payload title. Optional — some channels (e.g., simple Slack messages) may not use it.",
+            "type": "string"
+          },
+          "template": {
+            "description": "Named template reference for rendering the notification. When set, the runtime looks up this template in the workflow instance's environment and uses it for rendering, with the workflow context as template data. The body field is used as fallback if the template cannot be resolved. Examples: \"incident-alert\", \"order-confirmation\", \"approval-request\" Template resolution and rendering is a runtime concern (T13).",
+            "type": "string"
+          }
+        },
+        "required": [
+          "channel",
+          "body"
+        ],
+        "title": "NotificationTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Delivery confirmation.",
+        "properties": {
+          "channel": {
+            "type": "string"
+          },
+          "delivered": {
+            "type": "boolean"
+          },
+          "delivered_at": {
+            "description": "ISO 8601 timestamp of delivery.",
+            "type": "string"
+          },
+          "recipients": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          }
+        },
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: alert_slack\n  kind: notification\n  task_config:\n    channel: \"slack\"\n    recipients:\n      - \"#incident-response\"\n      - \"@oncall-lead\"\n    subject: \"P${ $context.triage.severity } Incident: ${ $context.ticket.title }\"\n    body: |\n      *Severity*: ${ $context.triage.severity }\n      *Category*: ${ $context.triage.category }\n      *Summary*: ${ $context.agent_analysis.structured.summary }\n    metadata:\n      thread_ts: \"${ $context.slack_thread_id }\"\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/notification",
+      "isAiNative": false,
+      "requiresExternalService": true
+    },
+    {
+      "kind": "eval",
+      "displayName": "Evaluate (LLM Judge)",
+      "description": "Assess semantic quality, correctness, safety, or completeness of content using an LLM judge.",
+      "category": "ai",
+      "icon": "scale",
+      "configProtoType": "ai.stigmer.agentic.workflow.v1.tasks.EvalTaskConfig",
+      "fields": [
+        {
+          "name": "model",
+          "displayName": "Model",
+          "description": "LLM model used as the judge. Resolved via the Stigmer model registry. Examples: \"gpt-4o\", \"claude-sonnet-4-5\"",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 1,
+          "validationHints": [
+            "required",
+            "min_length: 1",
+            "max_length: 127"
+          ]
+        },
+        {
+          "name": "subject",
+          "displayName": "Subject",
+          "description": "Expression selecting the data to evaluate. Supports ${ } expression interpolation. Example: \"${ $context.summarize.text }\" to evaluate a summary task's output.",
+          "type": "string",
+          "required": true,
+          "isExpression": true,
+          "groupId": "core",
+          "fieldNumber": 2,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "rubric",
+          "displayName": "Rubric",
+          "description": "Evaluation criteria in natural language. Tells the judge LLM what to assess and what \"good\" looks like. For pass_fail: describe what constitutes a pass. For numeric_score: describe the scoring scale. For multi_criteria: provide overall context (per-criterion detail goes in criteria field).",
+          "type": "string",
+          "required": true,
+          "groupId": "core",
+          "fieldNumber": 3,
+          "validationHints": [
+            "required",
+            "min_length: 1"
+          ]
+        },
+        {
+          "name": "scoring_mode",
+          "displayName": "Scoring Mode",
+          "description": "How the judge scores the subject. Default: EVAL_PASS_FAIL.",
+          "type": "enum",
+          "required": false,
+          "enumValues": [
+            "EVAL_PASS_FAIL",
+            "EVAL_NUMERIC_SCORE",
+            "EVAL_MULTI_CRITERIA"
+          ],
+          "groupId": "scoring",
+          "fieldNumber": 4
+        },
+        {
+          "name": "threshold",
+          "displayName": "Threshold",
+          "description": "Pass threshold for numeric_score and multi_criteria modes. The subject passes if score \u003e= threshold. Ignored for pass_fail mode (the judge's binary decision is used directly). Valid range: 0.0 to 1.0. Default: 0.5.",
+          "type": "float",
+          "required": false,
+          "groupId": "scoring",
+          "fieldNumber": 5,
+          "validationHints": [
+            "max: 1"
+          ]
+        },
+        {
+          "name": "on_fail",
+          "displayName": "On Fail",
+          "description": "Policy applied when the subject fails evaluation. Default: EVAL_FAIL_RAISE (task fails with evaluation error).",
+          "type": "enum",
+          "required": false,
+          "enumValues": [
+            "EVAL_FAIL_RAISE",
+            "EVAL_FAIL_BRANCH",
+            "EVAL_FAIL_WARN"
+          ],
+          "groupId": "policy",
+          "fieldNumber": 6
+        },
+        {
+          "name": "fallback_task",
+          "displayName": "Fallback Task",
+          "description": "Target task to branch to when on_fail is EVAL_FAIL_BRANCH. Must reference a valid task name in the same workflow. Only meaningful when on_fail is EVAL_FAIL_BRANCH; ignored otherwise.",
+          "type": "string",
+          "required": false,
+          "groupId": "policy",
+          "fieldNumber": 7
+        },
+        {
+          "name": "system_prompt",
+          "displayName": "System Prompt",
+          "description": "Optional custom system prompt override for the judge LLM. When set, replaces the auto-generated judge system prompt entirely. Use only when the default judge prompt template does not fit your needs. When empty, the runtime constructs a judge-appropriate system prompt from the rubric, scoring_mode, and criteria.",
+          "type": "string",
+          "required": false,
+          "isExpression": true,
+          "groupId": "advanced",
+          "fieldNumber": 8
+        },
+        {
+          "name": "criteria",
+          "displayName": "Criteria",
+          "description": "Evaluation criteria for multi_criteria mode. Required when scoring_mode is EVAL_MULTI_CRITERIA; ignored otherwise. Each criterion is scored independently, and the overall score is the weighted average (uniform if all weights are equal or zero).",
+          "type": "repeated",
+          "required": false,
+          "groupId": "scoring",
+          "fieldNumber": 9,
+          "elementType": "EvalCriterion"
+        },
+        {
+          "name": "max_cost_micros",
+          "displayName": "Max Cost Micros",
+          "description": "Per-task cost cap in micro-USD (1 USD = 1,000,000 micros). When set, the runtime terminates this eval call if its cost exceeds this limit, independent of the workflow-level budget. Optional — when 0, no per-task cost limit is enforced.",
+          "type": "int32",
+          "required": false,
+          "groupId": "advanced",
+          "fieldNumber": 10
+        }
+      ],
+      "fieldGroups": [
+        {
+          "id": "core",
+          "displayName": "Evaluation Setup"
+        },
+        {
+          "id": "scoring",
+          "displayName": "Scoring"
+        },
+        {
+          "id": "policy",
+          "displayName": "Failure Policy"
+        },
+        {
+          "id": "advanced",
+          "displayName": "Advanced"
+        }
+      ],
+      "configJsonSchema": {
+        "$schema": "https://json-schema.org/draft/2020-12/schema",
+        "additionalProperties": false,
+        "properties": {
+          "criteria": {
+            "description": "Evaluation criteria for multi_criteria mode. Required when scoring_mode is EVAL_MULTI_CRITERIA; ignored otherwise. Each criterion is scored independently, and the overall score is the weighted average (uniform if all weights are equal or zero).",
+            "items": {
+              "additionalProperties": false,
+              "properties": {
+                "description": {
+                  "description": "Description of what this criterion measures. Included in the judge prompt to guide the LLM's assessment. Example: \"Does the response accurately reflect the source data without hallucinations?\"",
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "name": {
+                  "description": "Name of this evaluation dimension. Used in the judge prompt and appears in the output. Examples: \"accuracy\", \"completeness\", \"safety\", \"relevance\"",
+                  "maxLength": 127,
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "weight": {
+                  "description": "Relative weight for computing the weighted average overall score. When all weights are equal (or all zero), criteria are averaged uniformly. Example: accuracy=3.0, formatting=1.0 means accuracy counts 3x more.",
+                  "type": "number"
+                }
+              },
+              "required": [
+                "name",
+                "description"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "fallback_task": {
+            "description": "Target task to branch to when on_fail is EVAL_FAIL_BRANCH. Must reference a valid task name in the same workflow. Only meaningful when on_fail is EVAL_FAIL_BRANCH; ignored otherwise.",
+            "type": "string"
+          },
+          "max_cost_micros": {
+            "description": "Per-task cost cap in micro-USD (1 USD = 1,000,000 micros). When set, the runtime terminates this eval call if its cost exceeds this limit, independent of the workflow-level budget. Optional — when 0, no per-task cost limit is enforced.",
+            "type": "integer"
+          },
+          "model": {
+            "description": "LLM model used as the judge. Resolved via the Stigmer model registry. Examples: \"gpt-4o\", \"claude-sonnet-4-5\"",
+            "maxLength": 127,
+            "minLength": 1,
+            "type": "string"
+          },
+          "on_fail": {
+            "description": "Policy applied when the subject fails evaluation. Default: EVAL_FAIL_RAISE (task fails with evaluation error).",
+            "enum": [
+              "EVAL_FAIL_RAISE",
+              "EVAL_FAIL_BRANCH",
+              "EVAL_FAIL_WARN"
+            ],
+            "type": "string"
+          },
+          "rubric": {
+            "description": "Evaluation criteria in natural language. Tells the judge LLM what to assess and what \"good\" looks like. For pass_fail: describe what constitutes a pass. For numeric_score: describe the scoring scale. For multi_criteria: provide overall context (per-criterion detail goes in criteria field).",
+            "minLength": 1,
+            "type": "string"
+          },
+          "scoring_mode": {
+            "description": "How the judge scores the subject. Default: EVAL_PASS_FAIL.",
+            "enum": [
+              "EVAL_PASS_FAIL",
+              "EVAL_NUMERIC_SCORE",
+              "EVAL_MULTI_CRITERIA"
+            ],
+            "type": "string"
+          },
+          "subject": {
+            "description": "Expression selecting the data to evaluate. Supports ${ } expression interpolation. Example: \"${ $context.summarize.text }\" to evaluate a summary task's output.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "system_prompt": {
+            "description": "Optional custom system prompt override for the judge LLM. When set, replaces the auto-generated judge system prompt entirely. Use only when the default judge prompt template does not fit your needs. When empty, the runtime constructs a judge-appropriate system prompt from the rubric, scoring_mode, and criteria.",
+            "type": "string"
+          },
+          "threshold": {
+            "description": "Pass threshold for numeric_score and multi_criteria modes. The subject passes if score \u003e= threshold. Ignored for pass_fail mode (the judge's binary decision is used directly). Valid range: 0.0 to 1.0. Default: 0.5.",
+            "maximum": 1,
+            "type": "number"
+          }
+        },
+        "required": [
+          "model",
+          "subject",
+          "rubric"
+        ],
+        "title": "EvalTaskConfig",
+        "type": "object"
+      },
+      "outputJsonSchema": {
+        "description": "Evaluation result with pass/fail, score, and judge reasoning.",
+        "properties": {
+          "criteria": {
+            "description": "Per-criterion scores and reasoning. Present only for multi_criteria mode.",
+            "items": {
+              "properties": {
+                "name": {
+                  "type": "string"
+                },
+                "reasoning": {
+                  "type": "string"
+                },
+                "score": {
+                  "type": "number"
+                }
+              },
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "model_used": {
+            "description": "The LLM model that served as judge.",
+            "type": "string"
+          },
+          "pass": {
+            "description": "Whether the subject passed evaluation.",
+            "type": "boolean"
+          },
+          "reasoning": {
+            "description": "The judge's explanation of its assessment.",
+            "type": "string"
+          },
+          "score": {
+            "description": "Numeric score (0.0-1.0). Present for numeric_score and multi_criteria modes.",
+            "type": "number"
+          },
+          "subject": {
+            "description": "The original subject data that was evaluated."
+          }
+        },
+        "type": "object"
+      },
+      "yamlExamples": [
+        "- name: check_summary_quality\n  kind: eval\n  task_config:\n    model: \"gpt-4o\"\n    subject: \"${ $context.summarize.text }\"\n    rubric: |\n      Evaluate whether this summary accurately captures the key points\n      of the source document without hallucinations or omissions.\n    scoring_mode: EVAL_PASS_FAIL\n    on_fail: EVAL_FAIL_BRANCH\n    fallback_task: regenerate_summary\n  export:\n    as: \"${ . }\"\n",
+        "- name: score_translation\n  kind: eval\n  task_config:\n    model: \"gpt-4o\"\n    subject: \"${ $context.translate.text }\"\n    rubric: |\n      Rate the quality of this translation on accuracy, fluency,\n      and preservation of meaning.\n    scoring_mode: EVAL_NUMERIC_SCORE\n    threshold: 0.7\n    on_fail: EVAL_FAIL_WARN\n  export:\n    as: \"${ . }\"\n",
+        "- name: evaluate_response\n  kind: eval\n  task_config:\n    model: \"gpt-4o\"\n    subject: \"${ $context.agent_response }\"\n    rubric: \"Evaluate this customer support response.\"\n    scoring_mode: EVAL_MULTI_CRITERIA\n    threshold: 0.75\n    criteria:\n      - name: accuracy\n        description: \"Is the information factually correct?\"\n        weight: 3.0\n      - name: helpfulness\n        description: \"Does it address the customer's actual question?\"\n        weight: 2.0\n      - name: tone\n        description: \"Is the tone professional and empathetic?\"\n        weight: 1.0\n    on_fail: EVAL_FAIL_RAISE\n  export:\n    as: \"${ . }\"\n"
+      ],
+      "documentationUrl": "/docs/guides/workflows/task-types/eval",
+      "isAiNative": true,
+      "requiresExternalService": false
+    }
+  ]
+}