@vaudience/aigentflow-flow-validator 0.25.0 → 0.27.0

package/dist/index.cjs

@@ -451,11 +451,10 @@ function validateBasicStructure(flow, issues) {
 
 // src/spec/aigentflow-spec.json
 var aigentflow_spec_default = {
-  specVersion: "2.831.0",
+  specVersion: "2.833.0",
   inputSchemaVersion: 1,
   executorSchemes: [
     "a2a",
-    "agent",
     "ai",
     "aiv",
     "async",
@@ -469,7 +468,6 @@ var aigentflow_spec_default = {
     "email",
     "eurostat",
     "eval",
-    "exons",
     "flow",
     "function",
     "gdelt",
@@ -768,6 +766,32 @@ var aigentflow_spec_default = {
   exons: {
     frontmatterDelimiter: "---"
   },
+  removedAgentSurfaces: {
+    removedSchemes: ["exons", "agent"],
+    paramScheme: "ai",
+    aiParams: [
+      "agentic",
+      "deny_tools",
+      "discoverable_tools",
+      "enable_signals",
+      "guardrails",
+      "max_tool_calls",
+      "max_tool_turns",
+      "mcp_server_url",
+      "parallel_tool_calls",
+      "require_confirmation",
+      "timeout_seconds",
+      "tool_auth_token",
+      "tool_discovery"
+    ],
+    flowKeys: ["exons_uploads"],
+    executorRemovedCode: "executor_removed",
+    agenticParamRemovedCode: "agentic_param_removed",
+    schemeMessageFormat: "step %q uses %s://, which AIgentFlow no longer runs: its own agent chains were removed",
+    paramsMessageFormat: "step %q sets %s on ai://: AIgentFlow's own agent loop (agentic mode) was removed, so these parameters no longer exist",
+    flowKeyMessageFormat: "the flow-level key %q belonged to a removed agent surface and is no longer read",
+    suggestion: 'Rebuild the step: a tool-using agent becomes atlas://agent/run (agent: "@org/name", prompt, capabilities); one tool becomes atlas://capability/<ref>; a plain prompt becomes ai://<provider>/chat or a prompt-only aiv://<org>/<name>. A flow that cannot be converted (started by a webhook, a schedule, a share link, a campaign or a flow:// sub-flow, none of which has a person for atlas to act for; or one that needs an inline .exons spec, an arbitrary MCP server URL or signals) has no replacement here: start it from a person, or use a routine in atlas'
+  },
   executorConfigEnvScopes: {
     referencePrefix: "${",
     referenceSuffix: "}",
@@ -994,7 +1018,7 @@ var aigentflow_spec_default = {
     providerAgent: "agent",
     providerCapability: "capability",
     agentResource: "run",
-    capabilityRefPattern: "^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$",
+    capabilityRefPattern: "^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$",
     operationUnknown: {
       code: "atlas_operation_unknown",
       messageFormat: "step %s uses %s, which is not an Atlas operation. The providers are agent (resource run) and capability (resource: a capability reference).",
@@ -1002,7 +1026,7 @@ var aigentflow_spec_default = {
     },
     agentMissing: {
       code: "atlas_agent_missing",
-      messageFormat: "step %s runs an Atlas agent but query.agent is missing or empty.",
+      messageFormat: "step %s runs an Atlas agent but query.agent is missing, empty or not a string.",
       suggestion: "Set query.agent to the agent to run, written out as a literal such as @acme/reporter."
     },
     agentNotLiteral: {
@@ -1028,9 +1052,46 @@ var aigentflow_spec_default = {
     capabilityRefInvalid: {
       code: "atlas_capability_ref_invalid",
       messageFormat: "step %s uses atlas://capability/%s, which is not a valid capability reference.",
-      suggestion: "A capability reference starts with a letter or digit and continues with letters, digits and _ . : - up to 128 characters in all."
+      suggestion: "A capability reference starts with a letter or digit and continues with letters, digits, _ and - up to 128 characters in all."
+    },
+    modelNotLiteral: {
+      code: "atlas_model_not_literal",
+      messageFormat: "step %s computes a value of query.model from a template. The provider, model and reasoning_effort must be fixed literals, never derived from input.",
+      suggestion: "Write the model choice out as literals. Data may go into the prompt or the inputs instead."
+    },
+    paramRefused: {
+      code: "atlas_param_refused",
+      messageFormat: "step %s sets %s under query. Atlas decides these itself, so a step may not set them.",
+      suggestion: "Remove these keys from the query.",
+      agentKeys: [
+        "api_key",
+        "attribution",
+        "base_url",
+        "host",
+        "idempotency_key",
+        "org_id",
+        "person",
+        "untrusted_input",
+        "untrusted_input_override",
+        "url",
+        "user_id"
+      ],
+      capabilityKeys: [
+        "attribution",
+        "idempotency_key",
+        "untrusted_input",
+        "untrusted_input_override"
+      ]
     }
   },
+  reservedInputNames: {
+    prefix: "__",
+    code: "reserved_input_name",
+    messageFormat: "the input %s starts with two underscores. That namespace belongs to the platform (the acting person, the credential manifest, the untrusted-input marker): a flow cannot declare an input there, and a value or default written under such a name is never delivered.",
+    suggestion: 'Rename the input so it does not start with "__".',
+    queryFieldFormat: "query.%s",
+    schemaFieldFormat: "input_schema.fields.%s"
+  },
   flowDataReservedKeys: {
     code: "flow_data_key_reserved",
     fieldFormat: "data.%s",
@@ -1983,6 +2044,19 @@ var EXONS = {
   /** The YAML frontmatter delimiter line. */
   frontmatterDelimiter: aigentflow_spec_default.exons.frontmatterDelimiter
 };
+var removed = aigentflow_spec_default.removedAgentSurfaces;
+var REMOVED_AGENT_SURFACES = {
+  schemes: new Set(removed.removedSchemes),
+  paramScheme: removed.paramScheme,
+  aiParams: new Set(removed.aiParams),
+  flowKeys: removed.flowKeys,
+  executorRemovedCode: removed.executorRemovedCode,
+  agenticParamRemovedCode: removed.agenticParamRemovedCode,
+  schemeMessageFormat: removed.schemeMessageFormat,
+  paramsMessageFormat: removed.paramsMessageFormat,
+  flowKeyMessageFormat: removed.flowKeyMessageFormat,
+  suggestion: removed.suggestion
+};
 var EXECUTOR_CONFIG_ENV_SCOPES = {
   referencePrefix: aigentflow_spec_default.executorConfigEnvScopes.referencePrefix,
   referenceSuffix: aigentflow_spec_default.executorConfigEnvScopes.referenceSuffix,
@@ -2086,8 +2160,245 @@ var ATLAS_EXECUTOR = {
   capabilitiesNotLiteral: atlas.capabilitiesNotLiteral,
   promptMissing: atlas.promptMissing,
   promptBoth: atlas.promptBoth,
-  capabilityRefInvalid: atlas.capabilityRefInvalid
+  capabilityRefInvalid: atlas.capabilityRefInvalid,
+  modelNotLiteral: atlas.modelNotLiteral,
+  paramRefused: {
+    code: atlas.paramRefused.code,
+    messageFormat: atlas.paramRefused.messageFormat,
+    suggestion: atlas.paramRefused.suggestion,
+    agentKeys: atlas.paramRefused.agentKeys,
+    capabilityKeys: atlas.paramRefused.capabilityKeys
+  }
+};
+var RESERVED_INPUT_NAMES = {
+  prefix: aigentflow_spec_default.reservedInputNames.prefix,
+  code: aigentflow_spec_default.reservedInputNames.code,
+  messageFormat: aigentflow_spec_default.reservedInputNames.messageFormat,
+  suggestion: aigentflow_spec_default.reservedInputNames.suggestion,
+  queryFieldFormat: aigentflow_spec_default.reservedInputNames.queryFieldFormat,
+  schemaFieldFormat: aigentflow_spec_default.reservedInputNames.schemaFieldFormat
+};
+var CODE_PARSE_FAILED = "orchestrator_exons_parse_failed";
+var CODE_NO_PROVIDER = "orchestrator_exons_no_provider";
+var CODE_RESOURCES = "exons_resources_unhonoured";
+var CODE_TOOL_WITHHELD = "orchestrator_tool_withheld";
+var EXONS_OPEN_DELIM = "{~";
+var EXONS_LEGACY_CONFIG_OPEN = "{~exons.config~}";
+var UTF8_BOM = "\uFEFF";
+var MAX_ALIAS_COUNT2 = 100;
+var UNREAD = {
+  parseError: null,
+  specRead: false,
+  hasSpec: false,
+  provider: "",
+  toolsAllowDeclared: false,
+  toolsAllow: [],
+  resources: []
+};
+var GO_SPACE = "\\t\\n\\v\\f\\r \\u0085\\u00a0\\u1680\\u2000-\\u200a\\u2028\\u2029\\u202f\\u205f\\u3000";
+var GO_TRIM_SPACE = new RegExp(`^[${GO_SPACE}]+|[${GO_SPACE}]+$`, "g");
+function goTrimSpace(s) {
+  return s.replace(GO_TRIM_SPACE, "");
+}
+function extractExonsFrontmatter(source) {
+  const delim = EXONS.frontmatterDelimiter;
+  let start = source.startsWith(UTF8_BOM) ? source.slice(UTF8_BOM.length) : source;
+  start = start.replace(/^[ \t]+/, "");
+  if (start.startsWith(EXONS_LEGACY_CONFIG_OPEN)) {
+    return {
+      frontmatter: "",
+      hasFrontmatter: false,
+      parseError: "legacy JSON config block detected; use YAML frontmatter"
+    };
+  }
+  if (!start.startsWith(delim)) return { frontmatter: "", hasFrontmatter: false, parseError: null };
+  let rest = start.slice(delim.length);
+  if (rest.startsWith("\n")) rest = rest.slice(1);
+  else if (rest.startsWith("\r\n")) rest = rest.slice(2);
+  else return { frontmatter: "", hasFrontmatter: false, parseError: null };
+  let pos = 0;
+  while (pos <= rest.length) {
+    const line = rest.slice(pos);
+    if (line.startsWith(delim)) {
+      const after = line.slice(delim.length);
+      if (after === "" || after[0] === "\n" || after[0] === "\r") {
+        return {
+          frontmatter: goTrimSpace(rest.slice(0, pos)),
+          hasFrontmatter: true,
+          parseError: null
+        };
+      }
+    }
+    const nl = line.indexOf("\n");
+    if (nl < 0) break;
+    pos += nl + 1;
+  }
+  return {
+    frontmatter: "",
+    hasFrontmatter: true,
+    parseError: "YAML frontmatter not properly closed"
+  };
+}
+function retagScalars(node) {
+  if (yaml.isMap(node)) {
+    for (const pair of node.items) {
+      retagScalars(pair.key);
+      retagScalars(pair.value);
+    }
+  } else if (yaml.isSeq(node)) {
+    for (const item of node.items) retagScalars(item);
+  } else if (yaml.isScalar(node) && (typeof node.value === "number" || typeof node.value === "boolean") && typeof node.source === "string") {
+    node.value = node.source;
+  }
+}
+var DecodeError = class extends Error {
 };
+function goString(v) {
+  if (v === null || v === void 0) return "";
+  if (isString(v)) return v;
+  throw new DecodeError("not a string");
+}
+function goStringList(v) {
+  if (v === null || v === void 0) return null;
+  if (!isArray(v)) throw new DecodeError("not a list");
+  return v.filter((item) => item !== null).map(goString);
+}
+function goStruct(v) {
+  if (v === null || v === void 0) return null;
+  if (!isRecord(v)) throw new DecodeError("not a mapping");
+  return v;
+}
+function decodeSpecFields(frontmatter) {
+  let value;
+  try {
+    const docs = yaml.parseAllDocuments(frontmatter, { merge: true });
+    const doc = Array.isArray(docs) ? docs[0] : void 0;
+    if (doc === void 0) {
+      value = null;
+    } else {
+      if (doc.errors.length > 0) return null;
+      retagScalars(doc.contents);
+      value = doc.toJS({ maxAliasCount: MAX_ALIAS_COUNT2 });
+    }
+  } catch {
+    return null;
+  }
+  try {
+    const root = goStruct(value) ?? {};
+    const execution = goStruct(root.execution);
+    const tools = goStruct(root.tools);
+    const requirements = goStruct(root.requirements);
+    const allow = tools === null ? null : goStringList(tools.allow);
+    let resources = [];
+    if (requirements !== null) {
+      const raw = requirements.resources;
+      if (raw !== null && raw !== void 0) {
+        if (!isArray(raw)) throw new DecodeError("not a list");
+        resources = raw.filter((entry) => entry !== null).map((entry) => {
+          const r = goStruct(entry) ?? {};
+          return { ref: goString(r.ref), kind: goString(r.kind), scope: goString(r.scope) };
+        });
+      }
+    }
+    return {
+      provider: execution === null ? "" : goString(execution.provider),
+      toolsAllowDeclared: allow !== null,
+      toolsAllow: allow ?? [],
+      resources
+    };
+  } catch (e) {
+    if (e instanceof DecodeError) return null;
+    throw e;
+  }
+}
+function inspectExonsFrontmatter(source) {
+  const fm = extractExonsFrontmatter(source);
+  if (fm.parseError !== null) return { ...UNREAD, parseError: fm.parseError };
+  if (!fm.hasFrontmatter || fm.frontmatter === "") return { ...UNREAD, specRead: true };
+  if (fm.frontmatter.includes(EXONS_OPEN_DELIM)) return { ...UNREAD };
+  const fields = decodeSpecFields(fm.frontmatter);
+  if (fields === null) return { ...UNREAD };
+  return { parseError: null, specRead: true, hasSpec: true, ...fields };
+}
+function validateOrchestratorExons(flow, issues) {
+  const orch = flow.orchestrator;
+  if (!isRecord(orch)) return;
+  const source = issues.stringOf(orch, "exons", "orchestrator");
+  if (source === null || source === "") return;
+  const field = "orchestrator.exons";
+  const report = inspectExonsFrontmatter(source);
+  if (report.parseError !== null) {
+    issues.error({
+      field,
+      code: CODE_PARSE_FAILED,
+      message: `orchestrator: failed to parse exons spec: ${report.parseError}`
+    });
+    return;
+  }
+  if (!report.specRead) return;
+  if (!report.hasSpec) {
+    issues.error({
+      field,
+      code: CODE_PARSE_FAILED,
+      message: "orchestrator: failed to parse exons spec: the document has no frontmatter spec",
+      suggestion: "Start the document with a --- frontmatter block that sets execution.provider"
+    });
+    return;
+  }
+  if (report.provider === "") {
+    issues.error({
+      field,
+      code: CODE_NO_PROVIDER,
+      message: "orchestrator: exons spec must have execution.provider set"
+    });
+  }
+  if (report.resources.length > 0) {
+    const refs = report.resources.map((r) => `${JSON.stringify(r.ref)} (kind ${r.kind})`);
+    issues.error({
+      field,
+      code: CODE_RESOURCES,
+      message: "the orchestrator's exons spec declares requirements.resources that AIgentFlow cannot honour, so it is refused rather than run without the narrowing it asks for: " + refs.join("; "),
+      suggestion: "Remove requirements.resources, and narrow the agent with tools.mcp_servers and tools.allow"
+    });
+  }
+  warnOrchestratorToolWithheld(flow, orch, report, issues);
+}
+function warnOrchestratorToolWithheld(flow, orch, report, issues) {
+  if (!report.toolsAllowDeclared) return;
+  const cfg = ORCHESTRATOR_TOOL_ALLOW;
+  const exempt = new Set(cfg.lifecycleTools);
+  const signals = typeof orch.enable_signals === "boolean" ? orch.enable_signals : cfg.enableSignalsDefault;
+  if (signals) for (const t of cfg.signalTools) exempt.add(t);
+  const allow = new Set(report.toolsAllow);
+  const withheld = (name) => !allow.has(name) && !exempt.has(name);
+  const warn = (message) => issues.warn({ field: cfg.warningField, code: CODE_TOOL_WITHHELD, message });
+  const named = [];
+  if (isArray(orch.tools)) {
+    orch.tools.forEach((raw, i) => {
+      const name = issues.stringAt(raw, `orchestrator.tools[${i}]`);
+      if (name !== null) named.push(name);
+    });
+  }
+  if (named.length > 0) {
+    for (const name of named) {
+      if (!withheld(name)) continue;
+      warn(
+        `orchestrator tool '${name}' is named in orchestrator.tools but the orchestrator's exons definition's tools.allow does not name it, so it is never offered: a tool must pass both lists. Add '${name}' to tools.allow, or remove it from orchestrator.tools.`
+      );
+    }
+    return;
+  }
+  if (withheld(cfg.askHumanTool)) {
+    warn(
+      `the orchestrator's exons definition has a tools.allow list that does not name ${cfg.askHumanTool}, so this orchestrator can never ask a person a question: human intervention is off. Add ${cfg.askHumanTool} to tools.allow if a human should be reachable, or ignore this if the orchestrator is meant to run unattended.`
+    );
+  }
+  if (isRecord(flow.campaign) && !cfg.campaignTools.some((name) => !withheld(name))) {
+    warn(
+      `this flow declares a campaign, but the orchestrator's exons definition has a tools.allow list that names none of the campaign tools (${cfg.campaignTools.join(", ")}), so no child mission can be spawned or tracked. Add the campaign tools the orchestrator needs to tools.allow.`
+    );
+  }
+}
 
 // src/validators/executors.ts
 var SCHEME_SEPARATOR = "://";
@@ -2151,12 +2462,64 @@ function checkExecutor(executor, field, stepID, issues) {
   }
   checkFunctionOperation(executor, field, stepID, templated, issues);
 }
+function removedExecutorScheme(executor) {
+  if (executor.includes(TEMPLATE_ACTION_OPEN)) return "";
+  const trimmed = goTrimSpace(executor);
+  const at = trimmed.indexOf(SCHEME_SEPARATOR);
+  return at < 0 ? "" : trimmed.slice(0, at).toLowerCase();
+}
+function checkRemovedSurfaces(executor, query, field, stepID, issues) {
+  const cfg = REMOVED_AGENT_SURFACES;
+  const quoted = JSON.stringify(stepID);
+  const scheme = removedExecutorScheme(executor);
+  if (cfg.schemes.has(scheme)) {
+    issues.error({
+      field,
+      message: fillRemovedMessage(cfg.schemeMessageFormat, quoted, scheme),
+      code: cfg.executorRemovedCode,
+      stepId: stepID,
+      suggestion: cfg.suggestion
+    });
+    return true;
+  }
+  if (scheme !== cfg.paramScheme || !isRecord(query)) return false;
+  const found = Object.keys(query).filter((key) => cfg.aiParams.has(key)).sort();
+  if (found.length > 0) {
+    issues.error({
+      field,
+      message: fillRemovedMessage(cfg.paramsMessageFormat, quoted, found.join(", ")),
+      code: cfg.agenticParamRemovedCode,
+      stepId: stepID,
+      suggestion: cfg.suggestion
+    });
+  }
+  return false;
+}
+function fillRemovedMessage(format, ...args) {
+  let i = 0;
+  return format.replace(/%[qs]/g, () => args[i++] ?? "");
+}
+function validateRemovedFlowKeys(flow, issues) {
+  const cfg = REMOVED_AGENT_SURFACES;
+  for (const key of cfg.flowKeys) {
+    if (Object.prototype.hasOwnProperty.call(flow, key)) {
+      issues.error({
+        field: key,
+        message: fillRemovedMessage(cfg.flowKeyMessageFormat, JSON.stringify(key)),
+        code: cfg.executorRemovedCode,
+        suggestion: cfg.suggestion
+      });
+    }
+  }
+}
 function checkAtlasStep(executor, query, stepField, stepID, issues) {
   if (executor.includes(TEMPLATE_ACTION_OPEN)) return;
-  const m = EXECUTOR_URL_PATTERN.exec(executor);
-  if (m === null || m[1] !== ATLAS_EXECUTOR.scheme) return;
-  const provider = m[2];
-  const resource = m[3];
+  const prefix = `${ATLAS_EXECUTOR.scheme}://`;
+  if (!executor.startsWith(prefix)) return;
+  const rest = executor.slice(prefix.length);
+  const slash = rest.indexOf("/");
+  const provider = slash < 0 ? rest : rest.slice(0, slash);
+  const resource = slash < 0 ? "" : rest.slice(slash + 1);
   const quoted = JSON.stringify(stepID);
   const report = (rule, ...args) => {
     let message = rule.messageFormat.replace("%s", () => quoted);
@@ -2170,31 +2533,41 @@ function checkAtlasStep(executor, query, stepField, stepID, issues) {
     });
   };
   const q2 = isRecord(query) ? query : {};
+  let refusedKeys = ATLAS_EXECUTOR.paramRefused.capabilityKeys;
   if (provider === ATLAS_EXECUTOR.providerCapability) {
     if (!ATLAS_EXECUTOR.capabilityRefPattern.test(resource)) {
       report(ATLAS_EXECUTOR.capabilityRefInvalid, resource);
     }
   } else if (provider === ATLAS_EXECUTOR.providerAgent && resource === ATLAS_EXECUTOR.agentResource) {
+    refusedKeys = ATLAS_EXECUTOR.paramRefused.agentKeys;
     const agent = q2.agent;
-    if (typeof agent !== "string" || agent === "") {
+    if (typeof agent !== "string" || agent.trim() === "") {
       report(ATLAS_EXECUTOR.agentMissing);
     } else if (agent.includes(TEMPLATE_ACTION_OPEN)) {
       report(ATLAS_EXECUTOR.agentNotLiteral);
     }
-    const prompt = q2.prompt;
-    const promptTemplate = q2.prompt_template;
-    const hasPrompt = prompt !== void 0 && prompt !== null && prompt !== "";
-    const hasTemplate = promptTemplate !== void 0 && promptTemplate !== null && promptTemplate !== "";
+    const hasPrompt = atlasTextPresent(q2.prompt);
+    const hasTemplate = atlasTextPresent(q2.prompt_template);
     if (!hasPrompt && !hasTemplate) report(ATLAS_EXECUTOR.promptMissing);
     else if (hasPrompt && hasTemplate) report(ATLAS_EXECUTOR.promptBoth);
+    if (anyTemplate(q2.model)) report(ATLAS_EXECUTOR.modelNotLiteral);
   } else {
     report(ATLAS_EXECUTOR.operationUnknown, executor);
     return;
   }
-  const caps = q2.capabilities;
-  if (Array.isArray(caps) && caps.some((c) => typeof c === "string" && c.includes(TEMPLATE_ACTION_OPEN))) {
-    report(ATLAS_EXECUTOR.capabilitiesNotLiteral);
-  }
+  if (anyTemplate(q2.capabilities)) report(ATLAS_EXECUTOR.capabilitiesNotLiteral);
+  const refused = refusedKeys.filter((key) => Object.prototype.hasOwnProperty.call(q2, key)).sort();
+  if (refused.length > 0) report(ATLAS_EXECUTOR.paramRefused, refused.join(", "));
+}
+function anyTemplate(v) {
+  if (typeof v === "string") return v.includes(TEMPLATE_ACTION_OPEN);
+  if (Array.isArray(v)) return v.some(anyTemplate);
+  if (isRecord(v)) return Object.values(v).some(anyTemplate);
+  return false;
+}
+function atlasTextPresent(v) {
+  if (v === void 0 || v === null) return false;
+  return typeof v !== "string" || v.trim() !== "";
 }
 function checkFunctionOperation(executor, field, stepID, templated, issues) {
   if (templated) return;
@@ -2219,7 +2592,9 @@ function validateExecutors(flow, issues) {
     const step = rawStep;
     const executor = issues.stringOf(step, "executor", `steps.${stepID}`);
     if (executor !== null && executor !== "") {
-      checkExecutor(executor, `steps.${stepID}.executor`, stepID, issues);
+      if (!checkRemovedSurfaces(executor, step.query, `steps.${stepID}`, stepID, issues)) {
+        checkExecutor(executor, `steps.${stepID}.executor`, stepID, issues);
+      }
       checkAtlasStep(executor, step.query, `steps.${stepID}`, stepID, issues);
     }
     const loop = step.loop;
@@ -2231,12 +2606,14 @@ function validateExecutors(flow, issues) {
         const subID = issues.stringOf(subStep, "id", subPath) ?? String(i);
         const subExecutor = issues.stringOf(subStep, "executor", subPath);
         if (subExecutor !== null && subExecutor !== "") {
-          checkExecutor(
-            subExecutor,
-            `steps.${stepID}.loop.steps[${i}].executor`,
-            `${stepID}.${subID}`,
-            issues
-          );
+          if (!checkRemovedSurfaces(subExecutor, subStep.query, subPath, `${stepID}.${subID}`, issues)) {
+            checkExecutor(
+              subExecutor,
+              `steps.${stepID}.loop.steps[${i}].executor`,
+              `${stepID}.${subID}`,
+              issues
+            );
+          }
           checkAtlasStep(subExecutor, subStep.query, subPath, `${stepID}.${subID}`, issues);
         }
       });
@@ -3880,6 +4257,37 @@ function validateInputSchema(flow, issues) {
   validateSchemaDefinition(flow.input_schema, "input_schema", issues);
 }
 
+// src/validators/reservedInputs.ts
+function formatField(format, name) {
+  return format.replace("%s", () => name);
+}
+function validateReservedInputNames(flow, issues) {
+  const rule = RESERVED_INPUT_NAMES;
+  const report = (name, fieldFormat) => {
+    issues.error({
+      field: formatField(fieldFormat, name),
+      message: rule.messageFormat.replace("%s", () => JSON.stringify(name)),
+      code: rule.code,
+      suggestion: rule.suggestion
+    });
+  };
+  const query = flow.query;
+  if (isRecord(query)) {
+    for (const name of Object.keys(query).sort()) {
+      if (name.startsWith(rule.prefix)) report(name, rule.queryFieldFormat);
+    }
+  }
+  const schema = flow.input_schema;
+  const fields = isRecord(schema) ? schema.fields : void 0;
+  if (!Array.isArray(fields)) return;
+  for (const f of fields) {
+    if (!isRecord(f)) continue;
+    if (typeof f.name === "string" && f.name.startsWith(rule.prefix)) {
+      report(f.name, rule.schemaFieldFormat);
+    }
+  }
+}
+
 // src/validators/outputSchema.ts
 function validateOutputSchemas(flow, issues) {
   const steps = flow.steps;
@@ -4994,7 +5402,7 @@ var CODE2 = "server_owned_query_key";
 var KEY_QUERY = "query";
 var KEY_ID = "id";
 var SERVER_OWNED = new Set(SERVER_OWNED_QUERY_KEYS.keys);
-function formatField(format, ...args) {
+function formatField2(format, ...args) {
   let i = 0;
   return format.replace(/%s/g, () => args[i++] ?? "");
 }
@@ -5012,7 +5420,7 @@ function validateServerOwnedQueryKeys(flow, issues) {
           issues,
           stepID,
           key,
-          formatField(SERVER_OWNED_QUERY_KEYS.stepFieldFormat, stepID, key)
+          formatField2(SERVER_OWNED_QUERY_KEYS.stepFieldFormat, stepID, key)
         );
       }
     }
@@ -5026,7 +5434,7 @@ function validateServerOwnedQueryKeys(flow, issues) {
           issues,
           stepID,
           key,
-          formatField(SERVER_OWNED_QUERY_KEYS.loopStepFieldFormat, stepID, subID, key)
+          formatField2(SERVER_OWNED_QUERY_KEYS.loopStepFieldFormat, stepID, subID, key)
         );
       }
     }
@@ -5043,9 +5451,9 @@ function refuse(issues, stepId, key, field) {
 }
 
 // src/validators/goUrl.ts
-var GO_SPACE = "\\t\\n\\v\\f\\r \\u0085\\u00A0\\u1680\\u2000-\\u200A\\u2028\\u2029\\u202F\\u205F\\u3000";
-var GO_TRIM_SPACE_RE = new RegExp(`^[${GO_SPACE}]+|[${GO_SPACE}]+$`, "g");
-function goTrimSpace(s) {
+var GO_SPACE2 = "\\t\\n\\v\\f\\r \\u0085\\u00A0\\u1680\\u2000-\\u200A\\u2028\\u2029\\u202F\\u205F\\u3000";
+var GO_TRIM_SPACE_RE = new RegExp(`^[${GO_SPACE2}]+|[${GO_SPACE2}]+$`, "g");
+function goTrimSpace2(s) {
   return s.replace(GO_TRIM_SPACE_RE, "");
 }
 function goToLower(s) {
@@ -5266,7 +5674,7 @@ function goQueryKeys(rawQuery) {
   return keys;
 }
 function goEndpointOrigin(raw, defaultPorts, protocolSeparator) {
-  const trimmed = goTrimSpace(raw);
+  const trimmed = goTrimSpace2(raw);
   const u = goParseSchemeHost(trimmed);
   if (u === null || u.scheme === "" || u.host === "") {
     return goToLower(trimmed.replace(/\/+$/, ""));
@@ -5293,7 +5701,7 @@ function own(m, key) {
   if (!isRecord(m) || !Object.prototype.hasOwnProperty.call(m, key)) return void 0;
   return m[key];
 }
-function formatField2(format, ...args) {
+function formatField3(format, ...args) {
   let i = 0;
   return format.replace(/%s/g, () => args[i++] ?? "");
 }
@@ -5315,14 +5723,14 @@ function credentialEndpointSteps(flow, issues) {
     out.push({
       executor: issues.stringOf(step, KEY_EXECUTOR, `steps.${stepId}`) ?? "",
       query: own(step, KEY_QUERY2),
-      field: (key) => formatField2(CREDENTIAL_ENDPOINT_PAIRING.stepFieldFormat, stepId, key)
+      field: (key) => formatField3(CREDENTIAL_ENDPOINT_PAIRING.stepFieldFormat, stepId, key)
     });
     for (const sub of loopSubStepsOfStep(stepId, step)) {
       const subId = issues.stringOf(sub.raw, KEY_ID2, sub.basePath) ?? "";
       out.push({
         executor: issues.stringOf(sub.raw, KEY_EXECUTOR, sub.basePath) ?? "",
         query: own(sub.raw, KEY_QUERY2),
-        field: (key) => formatField2(CREDENTIAL_ENDPOINT_PAIRING.loopStepFieldFormat, stepId, subId, key)
+        field: (key) => formatField3(CREDENTIAL_ENDPOINT_PAIRING.loopStepFieldFormat, stepId, subId, key)
       });
     }
   }
@@ -5386,7 +5794,7 @@ function validateAI(flow, steps, issues) {
     if ((stepsUsing.get(provider) ?? 0) > 0 && (stepsWithoutOwnKey.get(provider) ?? 0) === 0) {
       continue;
     }
-    warnStoredShape(issues, formatField2(CREDENTIAL_ENDPOINT_PAIRING.executorConfigBaseUrlFieldFormat, provider), provider);
+    warnStoredShape(issues, formatField3(CREDENTIAL_ENDPOINT_PAIRING.executorConfigBaseUrlFieldFormat, provider), provider);
   }
 }
 function warnStoredShape(issues, field, provider) {
@@ -5433,7 +5841,7 @@ function familySecret(flow, family, step, issues) {
     if (apiKey !== "" && listHas(family.secretParams, family.configApiKeyParam)) {
       return {
         envName: serverEnvRef(family, apiKey),
-        field: formatField2(
+        field: formatField3(
           CREDENTIAL_ENDPOINT_PAIRING.executorConfigKeyFieldFormat,
           configKey,
           CREDENTIAL_ENDPOINT_PAIRING.executorConfigApiKeyField
@@ -5446,7 +5854,7 @@ function familySecret(flow, family, step, issues) {
       if (v !== null) {
         return {
           envName: serverEnvRef(family, v),
-          field: formatField2(CREDENTIAL_ENDPOINT_PAIRING.executorConfigExtraFieldFormat, configKey, key)
+          field: formatField3(CREDENTIAL_ENDPOINT_PAIRING.executorConfigExtraFieldFormat, configKey, key)
         };
       }
     }
@@ -5472,13 +5880,13 @@ function familyAuthorEndpoint(flow, family, step, issues) {
     if (inst === null) continue;
     const baseUrl = configStringField(inst, configKey, CREDENTIAL_ENDPOINT_PAIRING.executorConfigBaseUrlField, issues);
     if (baseUrl !== "" && listHas(family.endpointParams, family.configBaseUrlParam)) {
-      return decide(baseUrl, formatField2(CREDENTIAL_ENDPOINT_PAIRING.executorConfigBaseUrlFieldFormat, configKey));
+      return decide(baseUrl, formatField3(CREDENTIAL_ENDPOINT_PAIRING.executorConfigBaseUrlFieldFormat, configKey));
     }
     const extra = own(inst, EXECUTOR_CONFIG_ENV_SCOPES.extraKey);
     for (const key of family.endpointParams) {
       const v = nonEmptyEndpoint(extra, key);
       if (v !== null)
-        return decide(v, formatField2(CREDENTIAL_ENDPOINT_PAIRING.executorConfigExtraFieldFormat, configKey, key));
+        return decide(v, formatField3(CREDENTIAL_ENDPOINT_PAIRING.executorConfigExtraFieldFormat, configKey, key));
     }
   }
   return null;
@@ -5500,227 +5908,6 @@ function validateFamilies(flow, steps, issues) {
     });
   }
 }
-var CODE_PARSE_FAILED = "orchestrator_exons_parse_failed";
-var CODE_NO_PROVIDER = "orchestrator_exons_no_provider";
-var CODE_RESOURCES = "exons_resources_unhonoured";
-var CODE_TOOL_WITHHELD = "orchestrator_tool_withheld";
-var EXONS_OPEN_DELIM = "{~";
-var EXONS_LEGACY_CONFIG_OPEN = "{~exons.config~}";
-var UTF8_BOM = "\uFEFF";
-var MAX_ALIAS_COUNT2 = 100;
-var UNREAD = {
-  parseError: null,
-  specRead: false,
-  hasSpec: false,
-  provider: "",
-  toolsAllowDeclared: false,
-  toolsAllow: [],
-  resources: []
-};
-var GO_SPACE2 = "\\t\\n\\v\\f\\r \\u0085\\u00a0\\u1680\\u2000-\\u200a\\u2028\\u2029\\u202f\\u205f\\u3000";
-var GO_TRIM_SPACE = new RegExp(`^[${GO_SPACE2}]+|[${GO_SPACE2}]+$`, "g");
-function goTrimSpace2(s) {
-  return s.replace(GO_TRIM_SPACE, "");
-}
-function extractExonsFrontmatter(source) {
-  const delim = EXONS.frontmatterDelimiter;
-  let start = source.startsWith(UTF8_BOM) ? source.slice(UTF8_BOM.length) : source;
-  start = start.replace(/^[ \t]+/, "");
-  if (start.startsWith(EXONS_LEGACY_CONFIG_OPEN)) {
-    return {
-      frontmatter: "",
-      hasFrontmatter: false,
-      parseError: "legacy JSON config block detected; use YAML frontmatter"
-    };
-  }
-  if (!start.startsWith(delim)) return { frontmatter: "", hasFrontmatter: false, parseError: null };
-  let rest = start.slice(delim.length);
-  if (rest.startsWith("\n")) rest = rest.slice(1);
-  else if (rest.startsWith("\r\n")) rest = rest.slice(2);
-  else return { frontmatter: "", hasFrontmatter: false, parseError: null };
-  let pos = 0;
-  while (pos <= rest.length) {
-    const line = rest.slice(pos);
-    if (line.startsWith(delim)) {
-      const after = line.slice(delim.length);
-      if (after === "" || after[0] === "\n" || after[0] === "\r") {
-        return {
-          frontmatter: goTrimSpace2(rest.slice(0, pos)),
-          hasFrontmatter: true,
-          parseError: null
-        };
-      }
-    }
-    const nl = line.indexOf("\n");
-    if (nl < 0) break;
-    pos += nl + 1;
-  }
-  return {
-    frontmatter: "",
-    hasFrontmatter: true,
-    parseError: "YAML frontmatter not properly closed"
-  };
-}
-function retagScalars(node) {
-  if (yaml.isMap(node)) {
-    for (const pair of node.items) {
-      retagScalars(pair.key);
-      retagScalars(pair.value);
-    }
-  } else if (yaml.isSeq(node)) {
-    for (const item of node.items) retagScalars(item);
-  } else if (yaml.isScalar(node) && (typeof node.value === "number" || typeof node.value === "boolean") && typeof node.source === "string") {
-    node.value = node.source;
-  }
-}
-var DecodeError = class extends Error {
-};
-function goString(v) {
-  if (v === null || v === void 0) return "";
-  if (isString(v)) return v;
-  throw new DecodeError("not a string");
-}
-function goStringList(v) {
-  if (v === null || v === void 0) return null;
-  if (!isArray(v)) throw new DecodeError("not a list");
-  return v.filter((item) => item !== null).map(goString);
-}
-function goStruct(v) {
-  if (v === null || v === void 0) return null;
-  if (!isRecord(v)) throw new DecodeError("not a mapping");
-  return v;
-}
-function decodeSpecFields(frontmatter) {
-  let value;
-  try {
-    const docs = yaml.parseAllDocuments(frontmatter, { merge: true });
-    const doc = Array.isArray(docs) ? docs[0] : void 0;
-    if (doc === void 0) {
-      value = null;
-    } else {
-      if (doc.errors.length > 0) return null;
-      retagScalars(doc.contents);
-      value = doc.toJS({ maxAliasCount: MAX_ALIAS_COUNT2 });
-    }
-  } catch {
-    return null;
-  }
-  try {
-    const root = goStruct(value) ?? {};
-    const execution = goStruct(root.execution);
-    const tools = goStruct(root.tools);
-    const requirements = goStruct(root.requirements);
-    const allow = tools === null ? null : goStringList(tools.allow);
-    let resources = [];
-    if (requirements !== null) {
-      const raw = requirements.resources;
-      if (raw !== null && raw !== void 0) {
-        if (!isArray(raw)) throw new DecodeError("not a list");
-        resources = raw.filter((entry) => entry !== null).map((entry) => {
-          const r = goStruct(entry) ?? {};
-          return { ref: goString(r.ref), kind: goString(r.kind), scope: goString(r.scope) };
-        });
-      }
-    }
-    return {
-      provider: execution === null ? "" : goString(execution.provider),
-      toolsAllowDeclared: allow !== null,
-      toolsAllow: allow ?? [],
-      resources
-    };
-  } catch (e) {
-    if (e instanceof DecodeError) return null;
-    throw e;
-  }
-}
-function inspectExonsFrontmatter(source) {
-  const fm = extractExonsFrontmatter(source);
-  if (fm.parseError !== null) return { ...UNREAD, parseError: fm.parseError };
-  if (!fm.hasFrontmatter || fm.frontmatter === "") return { ...UNREAD, specRead: true };
-  if (fm.frontmatter.includes(EXONS_OPEN_DELIM)) return { ...UNREAD };
-  const fields = decodeSpecFields(fm.frontmatter);
-  if (fields === null) return { ...UNREAD };
-  return { parseError: null, specRead: true, hasSpec: true, ...fields };
-}
-function validateOrchestratorExons(flow, issues) {
-  const orch = flow.orchestrator;
-  if (!isRecord(orch)) return;
-  const source = issues.stringOf(orch, "exons", "orchestrator");
-  if (source === null || source === "") return;
-  const field = "orchestrator.exons";
-  const report = inspectExonsFrontmatter(source);
-  if (report.parseError !== null) {
-    issues.error({
-      field,
-      code: CODE_PARSE_FAILED,
-      message: `orchestrator: failed to parse exons spec: ${report.parseError}`
-    });
-    return;
-  }
-  if (!report.specRead) return;
-  if (!report.hasSpec) {
-    issues.error({
-      field,
-      code: CODE_PARSE_FAILED,
-      message: "orchestrator: failed to parse exons spec: the document has no frontmatter spec",
-      suggestion: "Start the document with a --- frontmatter block that sets execution.provider"
-    });
-    return;
-  }
-  if (report.provider === "") {
-    issues.error({
-      field,
-      code: CODE_NO_PROVIDER,
-      message: "orchestrator: exons spec must have execution.provider set"
-    });
-  }
-  if (report.resources.length > 0) {
-    const refs = report.resources.map((r) => `${JSON.stringify(r.ref)} (kind ${r.kind})`);
-    issues.error({
-      field,
-      code: CODE_RESOURCES,
-      message: "the orchestrator's exons spec declares requirements.resources that AIgentFlow cannot honour, so it is refused rather than run without the narrowing it asks for: " + refs.join("; "),
-      suggestion: "Remove requirements.resources, and narrow the agent with tools.mcp_servers and tools.allow"
-    });
-  }
-  warnOrchestratorToolWithheld(flow, orch, report, issues);
-}
-function warnOrchestratorToolWithheld(flow, orch, report, issues) {
-  if (!report.toolsAllowDeclared) return;
-  const cfg = ORCHESTRATOR_TOOL_ALLOW;
-  const exempt = new Set(cfg.lifecycleTools);
-  const signals = typeof orch.enable_signals === "boolean" ? orch.enable_signals : cfg.enableSignalsDefault;
-  if (signals) for (const t of cfg.signalTools) exempt.add(t);
-  const allow = new Set(report.toolsAllow);
-  const withheld = (name) => !allow.has(name) && !exempt.has(name);
-  const warn = (message) => issues.warn({ field: cfg.warningField, code: CODE_TOOL_WITHHELD, message });
-  const named = [];
-  if (isArray(orch.tools)) {
-    orch.tools.forEach((raw, i) => {
-      const name = issues.stringAt(raw, `orchestrator.tools[${i}]`);
-      if (name !== null) named.push(name);
-    });
-  }
-  if (named.length > 0) {
-    for (const name of named) {
-      if (!withheld(name)) continue;
-      warn(
-        `orchestrator tool '${name}' is named in orchestrator.tools but the orchestrator's exons definition's tools.allow does not name it, so it is never offered: a tool must pass both lists. Add '${name}' to tools.allow, or remove it from orchestrator.tools.`
-      );
-    }
-    return;
-  }
-  if (withheld(cfg.askHumanTool)) {
-    warn(
-      `the orchestrator's exons definition has a tools.allow list that does not name ${cfg.askHumanTool}, so this orchestrator can never ask a person a question: human intervention is off. Add ${cfg.askHumanTool} to tools.allow if a human should be reachable, or ignore this if the orchestrator is meant to run unattended.`
-    );
-  }
-  if (isRecord(flow.campaign) && !cfg.campaignTools.some((name) => !withheld(name))) {
-    warn(
-      `this flow declares a campaign, but the orchestrator's exons definition has a tools.allow list that names none of the campaign tools (${cfg.campaignTools.join(", ")}), so no child mission can be spawned or tracked. Add the campaign tools the orchestrator needs to tools.allow.`
-    );
-  }
-}
 
 // src/validators/complianceResidency.ts
 function own2(m, key) {
@@ -5735,7 +5922,7 @@ function sprintf(format, ...args) {
   });
 }
 function literalOrEmpty(s) {
-  const t = goTrimSpace2(s);
+  const t = goTrimSpace(s);
   return t.includes(TEMPLATE_ACTION_OPEN) ? "" : t;
 }
 function euOnlyResidency(flow, issues) {
@@ -5750,7 +5937,7 @@ function euOnlyResidency(flow, issues) {
   }
   if (codes.length === 0) return null;
   const eu = new Set(COMPLIANCE_RESIDENCY.euResidencyCodes);
-  return codes.every((c) => eu.has(goTrimSpace2(c).toUpperCase())) ? codes : null;
+  return codes.every((c) => eu.has(goTrimSpace(c).toUpperCase())) ? codes : null;
 }
 function aiProvider(executor) {
   const prefix = COMPLIANCE_RESIDENCY.aiProtocol + COMPLIANCE_RESIDENCY.protocolSeparator;
@@ -5766,7 +5953,7 @@ function isRegionLane(provider) {
 }
 function nonBlankString(m, key) {
   const v = own2(m, key);
-  return typeof v === "string" && goTrimSpace2(v) !== "";
+  return typeof v === "string" && goTrimSpace(v) !== "";
 }
 function queryEnforcesRegion(query) {
   const v = own2(query, COMPLIANCE_RESIDENCY.enforceRegionParam);
@@ -5778,7 +5965,7 @@ function flowDirectsEndpoint(flow, provider, issues) {
   const inst = own2(own2(flow, "executor_config"), key);
   if (!isRecord(inst)) return false;
   const baseUrl = issues.stringOf(inst, "base_url", `executor_config.${key}`);
-  return baseUrl !== null && goTrimSpace2(baseUrl) !== "";
+  return baseUrl !== null && goTrimSpace(baseUrl) !== "";
 }
 function callPinsEndpoint(flow, provider, query, issues) {
   if (nonBlankString(query, COMPLIANCE_RESIDENCY.regionParam)) return true;
@@ -5851,7 +6038,7 @@ function warnOrchestrator(flow, issues, warn) {
   const provider = literalOrEmpty(report.provider);
   if (!isRegionLane(provider)) return;
   const region = issues.stringOf(orch, "region", "orchestrator");
-  if (region !== null && goTrimSpace2(region) !== "") return;
+  if (region !== null && goTrimSpace(region) !== "") return;
   if (orch.enforce_region === true) return;
   if (flowDirectsEndpoint(flow, provider, issues)) return;
   warn(COMPLIANCE_RESIDENCY.siteOrchestrator, COMPLIANCE_RESIDENCY.orchestratorField, void 0, provider);
@@ -6017,7 +6204,7 @@ function asFileRef(v) {
   };
 }
 function isTextualMediaType(mediaType) {
-  const base = goToLower(goTrimSpace((mediaType.split(";")[0] ?? "").toString()));
+  const base = goToLower(goTrimSpace2((mediaType.split(";")[0] ?? "").toString()));
   if (base.startsWith("text/")) return true;
   if (base.endsWith("+json") || base.endsWith("+xml")) return true;
   return TEXTUAL_MEDIA_BASES.has(base);
@@ -6121,7 +6308,7 @@ var Walker = class _Walker {
       }
     }
     const title = this.s(ex, "title", path);
-    if (goTrimSpace(title) === "") {
+    if (goTrimSpace2(title) === "") {
       this.err(
         "example_title_missing",
         `${path}.title`,
@@ -6138,7 +6325,7 @@ var Walker = class _Walker {
       }
     }
     const guidance = this.s(ex, "guidance", path);
-    if (goTrimSpace(guidance) === "") {
+    if (goTrimSpace2(guidance) === "") {
       this.warn(
         "example_guidance_missing",
         `${path}.guidance`,
@@ -6565,7 +6752,7 @@ var Walker = class _Walker {
     }
     const rubric = this.s(e, "rubric", path);
     if (rubric !== "") {
-      if (goTrimSpace(rubric) === "") {
+      if (goTrimSpace2(rubric) === "") {
         this.err(
           "example_rubric_empty",
           `${path}.rubric`,
@@ -6620,7 +6807,7 @@ var Walker = class _Walker {
       this.err("example_must_not_invalid", `${path}.must_not`, mustNotMsg);
     }
     mustNot.forEach((item, j) => {
-      if (goTrimSpace(item) === "" || runeCount(item) > L.maxMustNotRunes) {
+      if (goTrimSpace2(item) === "" || runeCount(item) > L.maxMustNotRunes) {
         this.err("example_must_not_invalid", `${path}.must_not[${j}]`, mustNotMsg);
       }
     });
@@ -7178,6 +7365,7 @@ function validateParsed(flow, opts, sources) {
   const f = flow;
   validateBasicStructure(f, issues);
   validateRetiredKeys(f, issues);
+  validateRemovedFlowKeys(f, issues);
   validateExecutors(f, issues);
   validateQuerySchema(f, issues);
   validateResponseExpectations(f, issues);
@@ -7189,6 +7377,7 @@ function validateParsed(flow, opts, sources) {
   validateOrchestratorCampaign(f, issues, opts);
   validateCredentialBindings(f, issues);
   validateInputSchema(f, issues);
+  validateReservedInputNames(f, issues);
   validateOutputSchemas(f, issues);
   validateQualityGates(f, issues);
   validateProcessingOperations(f, issues);