@vaudience/aigentflow-flow-validator 0.26.0 → 0.27.0

package/dist/cli.js

@@ -455,11 +455,10 @@ function validateBasicStructure(flow, issues) {
 // src/spec/aigentflow-spec.json
 var aigentflow_spec_default = {
   $comment: "Vendored enum surface mirrored from the AIgentFlow Go reference implementation. Regenerate / review on every flow-YAML schema change. See PARITY.md. Values here are public protocol/type names only.",
-  specVersion: "2.831.0",
+  specVersion: "2.833.0",
   inputSchemaVersion: 1,
   executorSchemes: [
     "a2a",
-    "agent",
     "ai",
     "aiv",
     "async",
@@ -473,7 +472,6 @@ var aigentflow_spec_default = {
     "email",
     "eurostat",
     "eval",
-    "exons",
     "flow",
     "function",
     "gdelt",
@@ -778,11 +776,36 @@ var aigentflow_spec_default = {
     ]
   },
   exons: {
-    $comment: "Where an inline .exons document arrives at the save door. A step's document is judged only on an executor starting executorPrefix, from the string query parameter documentParam, and never when it contains templateActionOpen (the engine renders step params first). Reference: validateInlineExonsStep, validateOrchestrator (v2.767.0, v2.777.0).",
-    executorPrefix: "exons://",
-    documentParam: "exons",
+    $comment: "The orchestrator's inline .exons document is still judged at the save door (orchestrator stays). A document opens with frontmatterDelimiter. Steps no longer carry inline .exons documents: the exons:// executor was removed (see removedAgentSurfaces).",
     frontmatterDelimiter: "---"
   },
+  removedAgentSurfaces: {
+    $comment: "AIgentFlow no longer runs agents of its own. executor_removed (ERROR): a step or loop sub-step whose executor scheme (text before '://', whitespace-trimmed, lower-cased) is in removedSchemes, or a top-level key in flowKeys (field = the key). agentic_param_removed (ERROR): an ai:// step or loop sub-step whose query carries ANY key of aiParams, on presence alone (null and false included); ONE finding per step, the keys sorted and joined by ', '. Only the paramScheme scheme is checked for params. A templated executor (containing templateActionOpen) is not judged. A step on a removed scheme yields ONLY executor_removed: no unknown_executor_scheme, executor-URL shape or inline-exons finding. Fields: steps.<id> and steps.<id>.loop.steps[<index>]. Not refused: aiv://, atlas://, ai:// tools / tool_choice / autofix / content_parts / stream, flow-level tool_discovery / discoverable_tools, the orchestrator block's own keys. Messages fill %s (the step id as written in the finding, then the scheme or the key list).",
+    removedSchemes: ["exons", "agent"],
+    paramScheme: "ai",
+    aiParams: [
+      "agentic",
+      "deny_tools",
+      "discoverable_tools",
+      "enable_signals",
+      "guardrails",
+      "max_tool_calls",
+      "max_tool_turns",
+      "mcp_server_url",
+      "parallel_tool_calls",
+      "require_confirmation",
+      "timeout_seconds",
+      "tool_auth_token",
+      "tool_discovery"
+    ],
+    flowKeys: ["exons_uploads"],
+    executorRemovedCode: "executor_removed",
+    agenticParamRemovedCode: "agentic_param_removed",
+    schemeMessageFormat: "step %q uses %s://, which AIgentFlow no longer runs: its own agent chains were removed",
+    paramsMessageFormat: "step %q sets %s on ai://: AIgentFlow's own agent loop (agentic mode) was removed, so these parameters no longer exist",
+    flowKeyMessageFormat: "the flow-level key %q belonged to a removed agent surface and is no longer read",
+    suggestion: 'Rebuild the step: a tool-using agent becomes atlas://agent/run (agent: "@org/name", prompt, capabilities); one tool becomes atlas://capability/<ref>; a plain prompt becomes ai://<provider>/chat or a prompt-only aiv://<org>/<name>. A flow that cannot be converted (started by a webhook, a schedule, a share link, a campaign or a flow:// sub-flow, none of which has a person for atlas to act for; or one that needs an inline .exons spec, an arbitrary MCP server URL or signals) has no replacement here: start it from a person, or use a routine in atlas'
+  },
   executorConfigEnvScopes: {
     $comment: "executor_config may expand only the environment variables of the key it is written under. A value is a reference when it starts with referencePrefix and ends with referenceSuffix around a non-empty name. Checked fields: fields, plus every string value of extra (prefixed extraFieldPrefix in the message). A key absent from scopes has an EMPTY scope and refuses every reference. scopes is the reference's executorConfigEnvScope evaluated for every key with a non-empty scope. Reference: ValidateExecutorConfigEnvScopes (v2.597.0).",
     referencePrefix: "${",
@@ -2111,13 +2134,22 @@ var ORCHESTRATOR_TOOL_ALLOW = {
   campaignTools: aigentflow_spec_default.orchestratorToolAllow.campaignTools
 };
 var EXONS = {
-  /** A step's document is judged only on an executor with this prefix. */
-  executorPrefix: aigentflow_spec_default.exons.executorPrefix,
-  /** The step `query` parameter that carries the document. */
-  documentParam: aigentflow_spec_default.exons.documentParam,
   /** The YAML frontmatter delimiter line. */
   frontmatterDelimiter: aigentflow_spec_default.exons.frontmatterDelimiter
 };
+var removed = aigentflow_spec_default.removedAgentSurfaces;
+var REMOVED_AGENT_SURFACES = {
+  schemes: new Set(removed.removedSchemes),
+  paramScheme: removed.paramScheme,
+  aiParams: new Set(removed.aiParams),
+  flowKeys: removed.flowKeys,
+  executorRemovedCode: removed.executorRemovedCode,
+  agenticParamRemovedCode: removed.agenticParamRemovedCode,
+  schemeMessageFormat: removed.schemeMessageFormat,
+  paramsMessageFormat: removed.paramsMessageFormat,
+  flowKeyMessageFormat: removed.flowKeyMessageFormat,
+  suggestion: removed.suggestion
+};
 var EXECUTOR_CONFIG_ENV_SCOPES = {
   referencePrefix: aigentflow_spec_default.executorConfigEnvScopes.referencePrefix,
   referenceSuffix: aigentflow_spec_default.executorConfigEnvScopes.referenceSuffix,
@@ -2243,6 +2275,230 @@ var RESERVED_INPUT_NAMES = {
   schemaFieldFormat: aigentflow_spec_default.reservedInputNames.schemaFieldFormat
 };
 
+// src/validators/exons.ts
+import { isMap as isMap2, isScalar as isScalar2, isSeq as isSeq2, parseAllDocuments } from "yaml";
+var CODE_PARSE_FAILED = "orchestrator_exons_parse_failed";
+var CODE_NO_PROVIDER = "orchestrator_exons_no_provider";
+var CODE_RESOURCES = "exons_resources_unhonoured";
+var CODE_TOOL_WITHHELD = "orchestrator_tool_withheld";
+var EXONS_OPEN_DELIM = "{~";
+var EXONS_LEGACY_CONFIG_OPEN = "{~exons.config~}";
+var UTF8_BOM = "\uFEFF";
+var MAX_ALIAS_COUNT2 = 100;
+var UNREAD = {
+  parseError: null,
+  specRead: false,
+  hasSpec: false,
+  provider: "",
+  toolsAllowDeclared: false,
+  toolsAllow: [],
+  resources: []
+};
+var GO_SPACE = "\\t\\n\\v\\f\\r \\u0085\\u00a0\\u1680\\u2000-\\u200a\\u2028\\u2029\\u202f\\u205f\\u3000";
+var GO_TRIM_SPACE = new RegExp(`^[${GO_SPACE}]+|[${GO_SPACE}]+$`, "g");
+function goTrimSpace(s) {
+  return s.replace(GO_TRIM_SPACE, "");
+}
+function extractExonsFrontmatter(source) {
+  const delim = EXONS.frontmatterDelimiter;
+  let start = source.startsWith(UTF8_BOM) ? source.slice(UTF8_BOM.length) : source;
+  start = start.replace(/^[ \t]+/, "");
+  if (start.startsWith(EXONS_LEGACY_CONFIG_OPEN)) {
+    return {
+      frontmatter: "",
+      hasFrontmatter: false,
+      parseError: "legacy JSON config block detected; use YAML frontmatter"
+    };
+  }
+  if (!start.startsWith(delim)) return { frontmatter: "", hasFrontmatter: false, parseError: null };
+  let rest = start.slice(delim.length);
+  if (rest.startsWith("\n")) rest = rest.slice(1);
+  else if (rest.startsWith("\r\n")) rest = rest.slice(2);
+  else return { frontmatter: "", hasFrontmatter: false, parseError: null };
+  let pos = 0;
+  while (pos <= rest.length) {
+    const line = rest.slice(pos);
+    if (line.startsWith(delim)) {
+      const after = line.slice(delim.length);
+      if (after === "" || after[0] === "\n" || after[0] === "\r") {
+        return {
+          frontmatter: goTrimSpace(rest.slice(0, pos)),
+          hasFrontmatter: true,
+          parseError: null
+        };
+      }
+    }
+    const nl = line.indexOf("\n");
+    if (nl < 0) break;
+    pos += nl + 1;
+  }
+  return {
+    frontmatter: "",
+    hasFrontmatter: true,
+    parseError: "YAML frontmatter not properly closed"
+  };
+}
+function retagScalars(node) {
+  if (isMap2(node)) {
+    for (const pair of node.items) {
+      retagScalars(pair.key);
+      retagScalars(pair.value);
+    }
+  } else if (isSeq2(node)) {
+    for (const item of node.items) retagScalars(item);
+  } else if (isScalar2(node) && (typeof node.value === "number" || typeof node.value === "boolean") && typeof node.source === "string") {
+    node.value = node.source;
+  }
+}
+var DecodeError = class extends Error {
+};
+function goString(v) {
+  if (v === null || v === void 0) return "";
+  if (isString(v)) return v;
+  throw new DecodeError("not a string");
+}
+function goStringList(v) {
+  if (v === null || v === void 0) return null;
+  if (!isArray(v)) throw new DecodeError("not a list");
+  return v.filter((item) => item !== null).map(goString);
+}
+function goStruct(v) {
+  if (v === null || v === void 0) return null;
+  if (!isRecord(v)) throw new DecodeError("not a mapping");
+  return v;
+}
+function decodeSpecFields(frontmatter) {
+  let value;
+  try {
+    const docs = parseAllDocuments(frontmatter, { merge: true });
+    const doc = Array.isArray(docs) ? docs[0] : void 0;
+    if (doc === void 0) {
+      value = null;
+    } else {
+      if (doc.errors.length > 0) return null;
+      retagScalars(doc.contents);
+      value = doc.toJS({ maxAliasCount: MAX_ALIAS_COUNT2 });
+    }
+  } catch {
+    return null;
+  }
+  try {
+    const root = goStruct(value) ?? {};
+    const execution = goStruct(root.execution);
+    const tools = goStruct(root.tools);
+    const requirements = goStruct(root.requirements);
+    const allow = tools === null ? null : goStringList(tools.allow);
+    let resources = [];
+    if (requirements !== null) {
+      const raw = requirements.resources;
+      if (raw !== null && raw !== void 0) {
+        if (!isArray(raw)) throw new DecodeError("not a list");
+        resources = raw.filter((entry) => entry !== null).map((entry) => {
+          const r = goStruct(entry) ?? {};
+          return { ref: goString(r.ref), kind: goString(r.kind), scope: goString(r.scope) };
+        });
+      }
+    }
+    return {
+      provider: execution === null ? "" : goString(execution.provider),
+      toolsAllowDeclared: allow !== null,
+      toolsAllow: allow ?? [],
+      resources
+    };
+  } catch (e) {
+    if (e instanceof DecodeError) return null;
+    throw e;
+  }
+}
+function inspectExonsFrontmatter(source) {
+  const fm = extractExonsFrontmatter(source);
+  if (fm.parseError !== null) return { ...UNREAD, parseError: fm.parseError };
+  if (!fm.hasFrontmatter || fm.frontmatter === "") return { ...UNREAD, specRead: true };
+  if (fm.frontmatter.includes(EXONS_OPEN_DELIM)) return { ...UNREAD };
+  const fields = decodeSpecFields(fm.frontmatter);
+  if (fields === null) return { ...UNREAD };
+  return { parseError: null, specRead: true, hasSpec: true, ...fields };
+}
+function validateOrchestratorExons(flow, issues) {
+  const orch = flow.orchestrator;
+  if (!isRecord(orch)) return;
+  const source = issues.stringOf(orch, "exons", "orchestrator");
+  if (source === null || source === "") return;
+  const field = "orchestrator.exons";
+  const report = inspectExonsFrontmatter(source);
+  if (report.parseError !== null) {
+    issues.error({
+      field,
+      code: CODE_PARSE_FAILED,
+      message: `orchestrator: failed to parse exons spec: ${report.parseError}`
+    });
+    return;
+  }
+  if (!report.specRead) return;
+  if (!report.hasSpec) {
+    issues.error({
+      field,
+      code: CODE_PARSE_FAILED,
+      message: "orchestrator: failed to parse exons spec: the document has no frontmatter spec",
+      suggestion: "Start the document with a --- frontmatter block that sets execution.provider"
+    });
+    return;
+  }
+  if (report.provider === "") {
+    issues.error({
+      field,
+      code: CODE_NO_PROVIDER,
+      message: "orchestrator: exons spec must have execution.provider set"
+    });
+  }
+  if (report.resources.length > 0) {
+    const refs = report.resources.map((r) => `${JSON.stringify(r.ref)} (kind ${r.kind})`);
+    issues.error({
+      field,
+      code: CODE_RESOURCES,
+      message: "the orchestrator's exons spec declares requirements.resources that AIgentFlow cannot honour, so it is refused rather than run without the narrowing it asks for: " + refs.join("; "),
+      suggestion: "Remove requirements.resources, and narrow the agent with tools.mcp_servers and tools.allow"
+    });
+  }
+  warnOrchestratorToolWithheld(flow, orch, report, issues);
+}
+function warnOrchestratorToolWithheld(flow, orch, report, issues) {
+  if (!report.toolsAllowDeclared) return;
+  const cfg = ORCHESTRATOR_TOOL_ALLOW;
+  const exempt = new Set(cfg.lifecycleTools);
+  const signals = typeof orch.enable_signals === "boolean" ? orch.enable_signals : cfg.enableSignalsDefault;
+  if (signals) for (const t of cfg.signalTools) exempt.add(t);
+  const allow = new Set(report.toolsAllow);
+  const withheld = (name) => !allow.has(name) && !exempt.has(name);
+  const warn = (message) => issues.warn({ field: cfg.warningField, code: CODE_TOOL_WITHHELD, message });
+  const named = [];
+  if (isArray(orch.tools)) {
+    orch.tools.forEach((raw, i) => {
+      const name = issues.stringAt(raw, `orchestrator.tools[${i}]`);
+      if (name !== null) named.push(name);
+    });
+  }
+  if (named.length > 0) {
+    for (const name of named) {
+      if (!withheld(name)) continue;
+      warn(
+        `orchestrator tool '${name}' is named in orchestrator.tools but the orchestrator's exons definition's tools.allow does not name it, so it is never offered: a tool must pass both lists. Add '${name}' to tools.allow, or remove it from orchestrator.tools.`
+      );
+    }
+    return;
+  }
+  if (withheld(cfg.askHumanTool)) {
+    warn(
+      `the orchestrator's exons definition has a tools.allow list that does not name ${cfg.askHumanTool}, so this orchestrator can never ask a person a question: human intervention is off. Add ${cfg.askHumanTool} to tools.allow if a human should be reachable, or ignore this if the orchestrator is meant to run unattended.`
+    );
+  }
+  if (isRecord(flow.campaign) && !cfg.campaignTools.some((name) => !withheld(name))) {
+    warn(
+      `this flow declares a campaign, but the orchestrator's exons definition has a tools.allow list that names none of the campaign tools (${cfg.campaignTools.join(", ")}), so no child mission can be spawned or tracked. Add the campaign tools the orchestrator needs to tools.allow.`
+    );
+  }
+}
+
 // src/validators/executors.ts
 var SCHEME_SEPARATOR = "://";
 var UNKNOWN_SCHEME_BASE = (scheme) => `Unknown executor scheme '${scheme}'. It may be valid in a newer AIgentFlow release, or it could be a typo.`;
@@ -2305,6 +2561,56 @@ function checkExecutor(executor, field, stepID, issues) {
   }
   checkFunctionOperation(executor, field, stepID, templated, issues);
 }
+function removedExecutorScheme(executor) {
+  if (executor.includes(TEMPLATE_ACTION_OPEN)) return "";
+  const trimmed = goTrimSpace(executor);
+  const at = trimmed.indexOf(SCHEME_SEPARATOR);
+  return at < 0 ? "" : trimmed.slice(0, at).toLowerCase();
+}
+function checkRemovedSurfaces(executor, query, field, stepID, issues) {
+  const cfg = REMOVED_AGENT_SURFACES;
+  const quoted = JSON.stringify(stepID);
+  const scheme = removedExecutorScheme(executor);
+  if (cfg.schemes.has(scheme)) {
+    issues.error({
+      field,
+      message: fillRemovedMessage(cfg.schemeMessageFormat, quoted, scheme),
+      code: cfg.executorRemovedCode,
+      stepId: stepID,
+      suggestion: cfg.suggestion
+    });
+    return true;
+  }
+  if (scheme !== cfg.paramScheme || !isRecord(query)) return false;
+  const found = Object.keys(query).filter((key) => cfg.aiParams.has(key)).sort();
+  if (found.length > 0) {
+    issues.error({
+      field,
+      message: fillRemovedMessage(cfg.paramsMessageFormat, quoted, found.join(", ")),
+      code: cfg.agenticParamRemovedCode,
+      stepId: stepID,
+      suggestion: cfg.suggestion
+    });
+  }
+  return false;
+}
+function fillRemovedMessage(format, ...args) {
+  let i = 0;
+  return format.replace(/%[qs]/g, () => args[i++] ?? "");
+}
+function validateRemovedFlowKeys(flow, issues) {
+  const cfg = REMOVED_AGENT_SURFACES;
+  for (const key of cfg.flowKeys) {
+    if (Object.prototype.hasOwnProperty.call(flow, key)) {
+      issues.error({
+        field: key,
+        message: fillRemovedMessage(cfg.flowKeyMessageFormat, JSON.stringify(key)),
+        code: cfg.executorRemovedCode,
+        suggestion: cfg.suggestion
+      });
+    }
+  }
+}
 function checkAtlasStep(executor, query, stepField, stepID, issues) {
   if (executor.includes(TEMPLATE_ACTION_OPEN)) return;
   const prefix = `${ATLAS_EXECUTOR.scheme}://`;
@@ -2385,7 +2691,9 @@ function validateExecutors(flow, issues) {
     const step = rawStep;
     const executor = issues.stringOf(step, "executor", `steps.${stepID}`);
     if (executor !== null && executor !== "") {
-      checkExecutor(executor, `steps.${stepID}.executor`, stepID, issues);
+      if (!checkRemovedSurfaces(executor, step.query, `steps.${stepID}`, stepID, issues)) {
+        checkExecutor(executor, `steps.${stepID}.executor`, stepID, issues);
+      }
       checkAtlasStep(executor, step.query, `steps.${stepID}`, stepID, issues);
     }
     const loop = step.loop;
@@ -2397,12 +2705,14 @@ function validateExecutors(flow, issues) {
         const subID = issues.stringOf(subStep, "id", subPath) ?? String(i);
         const subExecutor = issues.stringOf(subStep, "executor", subPath);
         if (subExecutor !== null && subExecutor !== "") {
-          checkExecutor(
-            subExecutor,
-            `steps.${stepID}.loop.steps[${i}].executor`,
-            `${stepID}.${subID}`,
-            issues
-          );
+          if (!checkRemovedSurfaces(subExecutor, subStep.query, subPath, `${stepID}.${subID}`, issues)) {
+            checkExecutor(
+              subExecutor,
+              `steps.${stepID}.loop.steps[${i}].executor`,
+              `${stepID}.${subID}`,
+              issues
+            );
+          }
           checkAtlasStep(subExecutor, subStep.query, subPath, `${stepID}.${subID}`, issues);
         }
       });
@@ -5240,9 +5550,9 @@ function refuse(issues, stepId, key, field) {
 }
 
 // src/validators/goUrl.ts
-var GO_SPACE = "\\t\\n\\v\\f\\r \\u0085\\u00A0\\u1680\\u2000-\\u200A\\u2028\\u2029\\u202F\\u205F\\u3000";
-var GO_TRIM_SPACE_RE = new RegExp(`^[${GO_SPACE}]+|[${GO_SPACE}]+$`, "g");
-function goTrimSpace(s) {
+var GO_SPACE2 = "\\t\\n\\v\\f\\r \\u0085\\u00A0\\u1680\\u2000-\\u200A\\u2028\\u2029\\u202F\\u205F\\u3000";
+var GO_TRIM_SPACE_RE = new RegExp(`^[${GO_SPACE2}]+|[${GO_SPACE2}]+$`, "g");
+function goTrimSpace2(s) {
   return s.replace(GO_TRIM_SPACE_RE, "");
 }
 function goToLower(s) {
@@ -5465,7 +5775,7 @@ function goQueryKeys(rawQuery) {
   return keys;
 }
 function goEndpointOrigin(raw, defaultPorts, protocolSeparator) {
-  const trimmed = goTrimSpace(raw);
+  const trimmed = goTrimSpace2(raw);
   const u = goParseSchemeHost(trimmed);
   if (u === null || u.scheme === "" || u.host === "") {
     return goToLower(trimmed.replace(/\/+$/, ""));
@@ -5700,230 +6010,6 @@ function validateFamilies(flow, steps, issues) {
   }
 }
 
-// src/validators/exons.ts
-import { isMap as isMap2, isScalar as isScalar2, isSeq as isSeq2, parseAllDocuments } from "yaml";
-var CODE_PARSE_FAILED = "orchestrator_exons_parse_failed";
-var CODE_NO_PROVIDER = "orchestrator_exons_no_provider";
-var CODE_RESOURCES = "exons_resources_unhonoured";
-var CODE_TOOL_WITHHELD = "orchestrator_tool_withheld";
-var EXONS_OPEN_DELIM = "{~";
-var EXONS_LEGACY_CONFIG_OPEN = "{~exons.config~}";
-var UTF8_BOM = "\uFEFF";
-var MAX_ALIAS_COUNT2 = 100;
-var UNREAD = {
-  parseError: null,
-  specRead: false,
-  hasSpec: false,
-  provider: "",
-  toolsAllowDeclared: false,
-  toolsAllow: [],
-  resources: []
-};
-var GO_SPACE2 = "\\t\\n\\v\\f\\r \\u0085\\u00a0\\u1680\\u2000-\\u200a\\u2028\\u2029\\u202f\\u205f\\u3000";
-var GO_TRIM_SPACE = new RegExp(`^[${GO_SPACE2}]+|[${GO_SPACE2}]+$`, "g");
-function goTrimSpace2(s) {
-  return s.replace(GO_TRIM_SPACE, "");
-}
-function extractExonsFrontmatter(source) {
-  const delim = EXONS.frontmatterDelimiter;
-  let start = source.startsWith(UTF8_BOM) ? source.slice(UTF8_BOM.length) : source;
-  start = start.replace(/^[ \t]+/, "");
-  if (start.startsWith(EXONS_LEGACY_CONFIG_OPEN)) {
-    return {
-      frontmatter: "",
-      hasFrontmatter: false,
-      parseError: "legacy JSON config block detected; use YAML frontmatter"
-    };
-  }
-  if (!start.startsWith(delim)) return { frontmatter: "", hasFrontmatter: false, parseError: null };
-  let rest = start.slice(delim.length);
-  if (rest.startsWith("\n")) rest = rest.slice(1);
-  else if (rest.startsWith("\r\n")) rest = rest.slice(2);
-  else return { frontmatter: "", hasFrontmatter: false, parseError: null };
-  let pos = 0;
-  while (pos <= rest.length) {
-    const line = rest.slice(pos);
-    if (line.startsWith(delim)) {
-      const after = line.slice(delim.length);
-      if (after === "" || after[0] === "\n" || after[0] === "\r") {
-        return {
-          frontmatter: goTrimSpace2(rest.slice(0, pos)),
-          hasFrontmatter: true,
-          parseError: null
-        };
-      }
-    }
-    const nl = line.indexOf("\n");
-    if (nl < 0) break;
-    pos += nl + 1;
-  }
-  return {
-    frontmatter: "",
-    hasFrontmatter: true,
-    parseError: "YAML frontmatter not properly closed"
-  };
-}
-function retagScalars(node) {
-  if (isMap2(node)) {
-    for (const pair of node.items) {
-      retagScalars(pair.key);
-      retagScalars(pair.value);
-    }
-  } else if (isSeq2(node)) {
-    for (const item of node.items) retagScalars(item);
-  } else if (isScalar2(node) && (typeof node.value === "number" || typeof node.value === "boolean") && typeof node.source === "string") {
-    node.value = node.source;
-  }
-}
-var DecodeError = class extends Error {
-};
-function goString(v) {
-  if (v === null || v === void 0) return "";
-  if (isString(v)) return v;
-  throw new DecodeError("not a string");
-}
-function goStringList(v) {
-  if (v === null || v === void 0) return null;
-  if (!isArray(v)) throw new DecodeError("not a list");
-  return v.filter((item) => item !== null).map(goString);
-}
-function goStruct(v) {
-  if (v === null || v === void 0) return null;
-  if (!isRecord(v)) throw new DecodeError("not a mapping");
-  return v;
-}
-function decodeSpecFields(frontmatter) {
-  let value;
-  try {
-    const docs = parseAllDocuments(frontmatter, { merge: true });
-    const doc = Array.isArray(docs) ? docs[0] : void 0;
-    if (doc === void 0) {
-      value = null;
-    } else {
-      if (doc.errors.length > 0) return null;
-      retagScalars(doc.contents);
-      value = doc.toJS({ maxAliasCount: MAX_ALIAS_COUNT2 });
-    }
-  } catch {
-    return null;
-  }
-  try {
-    const root = goStruct(value) ?? {};
-    const execution = goStruct(root.execution);
-    const tools = goStruct(root.tools);
-    const requirements = goStruct(root.requirements);
-    const allow = tools === null ? null : goStringList(tools.allow);
-    let resources = [];
-    if (requirements !== null) {
-      const raw = requirements.resources;
-      if (raw !== null && raw !== void 0) {
-        if (!isArray(raw)) throw new DecodeError("not a list");
-        resources = raw.filter((entry) => entry !== null).map((entry) => {
-          const r = goStruct(entry) ?? {};
-          return { ref: goString(r.ref), kind: goString(r.kind), scope: goString(r.scope) };
-        });
-      }
-    }
-    return {
-      provider: execution === null ? "" : goString(execution.provider),
-      toolsAllowDeclared: allow !== null,
-      toolsAllow: allow ?? [],
-      resources
-    };
-  } catch (e) {
-    if (e instanceof DecodeError) return null;
-    throw e;
-  }
-}
-function inspectExonsFrontmatter(source) {
-  const fm = extractExonsFrontmatter(source);
-  if (fm.parseError !== null) return { ...UNREAD, parseError: fm.parseError };
-  if (!fm.hasFrontmatter || fm.frontmatter === "") return { ...UNREAD, specRead: true };
-  if (fm.frontmatter.includes(EXONS_OPEN_DELIM)) return { ...UNREAD };
-  const fields = decodeSpecFields(fm.frontmatter);
-  if (fields === null) return { ...UNREAD };
-  return { parseError: null, specRead: true, hasSpec: true, ...fields };
-}
-function validateOrchestratorExons(flow, issues) {
-  const orch = flow.orchestrator;
-  if (!isRecord(orch)) return;
-  const source = issues.stringOf(orch, "exons", "orchestrator");
-  if (source === null || source === "") return;
-  const field = "orchestrator.exons";
-  const report = inspectExonsFrontmatter(source);
-  if (report.parseError !== null) {
-    issues.error({
-      field,
-      code: CODE_PARSE_FAILED,
-      message: `orchestrator: failed to parse exons spec: ${report.parseError}`
-    });
-    return;
-  }
-  if (!report.specRead) return;
-  if (!report.hasSpec) {
-    issues.error({
-      field,
-      code: CODE_PARSE_FAILED,
-      message: "orchestrator: failed to parse exons spec: the document has no frontmatter spec",
-      suggestion: "Start the document with a --- frontmatter block that sets execution.provider"
-    });
-    return;
-  }
-  if (report.provider === "") {
-    issues.error({
-      field,
-      code: CODE_NO_PROVIDER,
-      message: "orchestrator: exons spec must have execution.provider set"
-    });
-  }
-  if (report.resources.length > 0) {
-    const refs = report.resources.map((r) => `${JSON.stringify(r.ref)} (kind ${r.kind})`);
-    issues.error({
-      field,
-      code: CODE_RESOURCES,
-      message: "the orchestrator's exons spec declares requirements.resources that AIgentFlow cannot honour, so it is refused rather than run without the narrowing it asks for: " + refs.join("; "),
-      suggestion: "Remove requirements.resources, and narrow the agent with tools.mcp_servers and tools.allow"
-    });
-  }
-  warnOrchestratorToolWithheld(flow, orch, report, issues);
-}
-function warnOrchestratorToolWithheld(flow, orch, report, issues) {
-  if (!report.toolsAllowDeclared) return;
-  const cfg = ORCHESTRATOR_TOOL_ALLOW;
-  const exempt = new Set(cfg.lifecycleTools);
-  const signals = typeof orch.enable_signals === "boolean" ? orch.enable_signals : cfg.enableSignalsDefault;
-  if (signals) for (const t of cfg.signalTools) exempt.add(t);
-  const allow = new Set(report.toolsAllow);
-  const withheld = (name) => !allow.has(name) && !exempt.has(name);
-  const warn = (message) => issues.warn({ field: cfg.warningField, code: CODE_TOOL_WITHHELD, message });
-  const named = [];
-  if (isArray(orch.tools)) {
-    orch.tools.forEach((raw, i) => {
-      const name = issues.stringAt(raw, `orchestrator.tools[${i}]`);
-      if (name !== null) named.push(name);
-    });
-  }
-  if (named.length > 0) {
-    for (const name of named) {
-      if (!withheld(name)) continue;
-      warn(
-        `orchestrator tool '${name}' is named in orchestrator.tools but the orchestrator's exons definition's tools.allow does not name it, so it is never offered: a tool must pass both lists. Add '${name}' to tools.allow, or remove it from orchestrator.tools.`
-      );
-    }
-    return;
-  }
-  if (withheld(cfg.askHumanTool)) {
-    warn(
-      `the orchestrator's exons definition has a tools.allow list that does not name ${cfg.askHumanTool}, so this orchestrator can never ask a person a question: human intervention is off. Add ${cfg.askHumanTool} to tools.allow if a human should be reachable, or ignore this if the orchestrator is meant to run unattended.`
-    );
-  }
-  if (isRecord(flow.campaign) && !cfg.campaignTools.some((name) => !withheld(name))) {
-    warn(
-      `this flow declares a campaign, but the orchestrator's exons definition has a tools.allow list that names none of the campaign tools (${cfg.campaignTools.join(", ")}), so no child mission can be spawned or tracked. Add the campaign tools the orchestrator needs to tools.allow.`
-    );
-  }
-}
-
 // src/validators/complianceResidency.ts
 function own2(m, key) {
   if (!isRecord(m) || !Object.prototype.hasOwnProperty.call(m, key)) return void 0;
@@ -5937,7 +6023,7 @@ function sprintf(format, ...args) {
   });
 }
 function literalOrEmpty(s) {
-  const t = goTrimSpace2(s);
+  const t = goTrimSpace(s);
   return t.includes(TEMPLATE_ACTION_OPEN) ? "" : t;
 }
 function euOnlyResidency(flow, issues) {
@@ -5952,7 +6038,7 @@ function euOnlyResidency(flow, issues) {
   }
   if (codes.length === 0) return null;
   const eu = new Set(COMPLIANCE_RESIDENCY.euResidencyCodes);
-  return codes.every((c) => eu.has(goTrimSpace2(c).toUpperCase())) ? codes : null;
+  return codes.every((c) => eu.has(goTrimSpace(c).toUpperCase())) ? codes : null;
 }
 function aiProvider(executor) {
   const prefix = COMPLIANCE_RESIDENCY.aiProtocol + COMPLIANCE_RESIDENCY.protocolSeparator;
@@ -5968,7 +6054,7 @@ function isRegionLane(provider) {
 }
 function nonBlankString(m, key) {
   const v = own2(m, key);
-  return typeof v === "string" && goTrimSpace2(v) !== "";
+  return typeof v === "string" && goTrimSpace(v) !== "";
 }
 function queryEnforcesRegion(query) {
   const v = own2(query, COMPLIANCE_RESIDENCY.enforceRegionParam);
@@ -5980,7 +6066,7 @@ function flowDirectsEndpoint(flow, provider, issues) {
   const inst = own2(own2(flow, "executor_config"), key);
   if (!isRecord(inst)) return false;
   const baseUrl = issues.stringOf(inst, "base_url", `executor_config.${key}`);
-  return baseUrl !== null && goTrimSpace2(baseUrl) !== "";
+  return baseUrl !== null && goTrimSpace(baseUrl) !== "";
 }
 function callPinsEndpoint(flow, provider, query, issues) {
   if (nonBlankString(query, COMPLIANCE_RESIDENCY.regionParam)) return true;
@@ -6053,7 +6139,7 @@ function warnOrchestrator(flow, issues, warn) {
   const provider = literalOrEmpty(report.provider);
   if (!isRegionLane(provider)) return;
   const region = issues.stringOf(orch, "region", "orchestrator");
-  if (region !== null && goTrimSpace2(region) !== "") return;
+  if (region !== null && goTrimSpace(region) !== "") return;
   if (orch.enforce_region === true) return;
   if (flowDirectsEndpoint(flow, provider, issues)) return;
   warn(COMPLIANCE_RESIDENCY.siteOrchestrator, COMPLIANCE_RESIDENCY.orchestratorField, void 0, provider);
@@ -6219,7 +6305,7 @@ function asFileRef(v) {
   };
 }
 function isTextualMediaType(mediaType) {
-  const base = goToLower(goTrimSpace((mediaType.split(";")[0] ?? "").toString()));
+  const base = goToLower(goTrimSpace2((mediaType.split(";")[0] ?? "").toString()));
   if (base.startsWith("text/")) return true;
   if (base.endsWith("+json") || base.endsWith("+xml")) return true;
   return TEXTUAL_MEDIA_BASES.has(base);
@@ -6323,7 +6409,7 @@ var Walker = class _Walker {
       }
     }
     const title = this.s(ex, "title", path);
-    if (goTrimSpace(title) === "") {
+    if (goTrimSpace2(title) === "") {
       this.err(
         "example_title_missing",
         `${path}.title`,
@@ -6340,7 +6426,7 @@ var Walker = class _Walker {
       }
     }
     const guidance = this.s(ex, "guidance", path);
-    if (goTrimSpace(guidance) === "") {
+    if (goTrimSpace2(guidance) === "") {
       this.warn(
         "example_guidance_missing",
         `${path}.guidance`,
@@ -6767,7 +6853,7 @@ var Walker = class _Walker {
     }
     const rubric = this.s(e, "rubric", path);
     if (rubric !== "") {
-      if (goTrimSpace(rubric) === "") {
+      if (goTrimSpace2(rubric) === "") {
         this.err(
           "example_rubric_empty",
           `${path}.rubric`,
@@ -6822,7 +6908,7 @@ var Walker = class _Walker {
       this.err("example_must_not_invalid", `${path}.must_not`, mustNotMsg);
     }
     mustNot.forEach((item, j) => {
-      if (goTrimSpace(item) === "" || runeCount(item) > L.maxMustNotRunes) {
+      if (goTrimSpace2(item) === "" || runeCount(item) > L.maxMustNotRunes) {
         this.err("example_must_not_invalid", `${path}.must_not[${j}]`, mustNotMsg);
       }
     });
@@ -7377,6 +7463,7 @@ function validateParsed(flow, opts, sources) {
   const f = flow;
   validateBasicStructure(f, issues);
   validateRetiredKeys(f, issues);
+  validateRemovedFlowKeys(f, issues);
   validateExecutors(f, issues);
   validateQuerySchema(f, issues);
   validateResponseExpectations(f, issues);