@vaudience/aigentflow-flow-validator 0.26.0 → 0.28.0

package/dist/cli.js

@@ -455,11 +455,10 @@ function validateBasicStructure(flow, issues) {
 // src/spec/aigentflow-spec.json
 var aigentflow_spec_default = {
   $comment: "Vendored enum surface mirrored from the AIgentFlow Go reference implementation. Regenerate / review on every flow-YAML schema change. See PARITY.md. Values here are public protocol/type names only.",
-  specVersion: "2.831.0",
+  specVersion: "2.837.0",
   inputSchemaVersion: 1,
   executorSchemes: [
     "a2a",
-    "agent",
     "ai",
     "aiv",
     "async",
@@ -473,7 +472,6 @@ var aigentflow_spec_default = {
     "email",
     "eurostat",
     "eval",
-    "exons",
     "flow",
     "function",
     "gdelt",
@@ -488,6 +486,7 @@ var aigentflow_spec_default = {
     "messenger",
     "mock",
     "mqtt",
+    "nexus",
     "opencorporates",
     "openmeteo",
     "overpass",
@@ -558,12 +557,9 @@ var aigentflow_spec_default = {
       "step_failed",
       "mission_started",
       "mission_completed",
-      "dfm_suggestion",
       "timer",
       "request_turn",
       "mission_recovered",
-      "campaign_child_completed",
-      "campaign_child_failed",
       "human_response",
       "human_input"
     ],
@@ -579,15 +575,6 @@ var aigentflow_spec_default = {
       "aif_ask_human",
       "aif_flow_list",
       "aif_mission_reflect",
-      "aif_signal_complete",
-      "aif_signal_need_human",
-      "aif_signal_delegate",
-      "aif_signal_need_tool",
-      "aif_signal_modify_flow",
-      "aif_campaign_spawn",
-      "aif_campaign_status",
-      "aif_campaign_results",
-      "aif_campaign_cancel",
       "aif_memory_plan",
       "aif_memory_record",
       "aif_memory_recall",
@@ -758,30 +745,94 @@ var aigentflow_spec_default = {
     "fn_urldecode"
   ],
   orchestratorToolAllow: {
-    $comment: "An orchestrator tool is offered only if it passes BOTH orchestrator.tools (empty = every tool) AND the inline exons definition's tools.allow (absent = no narrowing). The lifecycle tools, and the signal tools when enable_signals is on (the default), are exempt from tools.allow. Reference: validateOrchestratorToolAllowWithholds (v2.760.0).",
+    $comment: "An orchestrator tool is offered only if it passes BOTH orchestrator.tools (empty = every tool) AND the inline exons definition's tools.allow (absent = no narrowing). Only the lifecycle tools are exempt from tools.allow. A removed signal or campaign tool name (removedSignalSurfaces.tools, removedCampaignSurfaces.tools) is never reported as withheld: it is refused as signal_removed / campaign_removed. Reference: validateOrchestratorToolAllowWithholds (v2.760.0, signal and campaign arms removed in 2.834.0 / 2.836.0).",
     warningField: "orchestrator.exons",
     askHumanTool: "aif_ask_human",
-    enableSignalsDefault: true,
-    lifecycleTools: ["aif_mission_complete", "aif_mission_fail", "aif_request_turn"],
-    signalTools: [
+    lifecycleTools: [
+      "aif_mission_complete",
+      "aif_mission_fail",
+      "aif_request_turn"
+    ]
+  },
+  exons: {
+    $comment: "The orchestrator's inline .exons document is still judged at the save door (orchestrator stays). A document opens with frontmatterDelimiter. Steps no longer carry inline .exons documents: the exons:// executor was removed (see removedAgentSurfaces).",
+    frontmatterDelimiter: "---"
+  },
+  removedAgentSurfaces: {
+    $comment: "AIgentFlow no longer runs agents of its own. executor_removed (ERROR): a step or loop sub-step whose executor scheme (text before '://', whitespace-trimmed, lower-cased) is in removedSchemes, or a top-level key in flowKeys (field = the key). agentic_param_removed (ERROR): an ai:// step or loop sub-step whose query carries ANY key of aiParams, on presence alone (null and false included); ONE finding per step, the keys sorted and joined by ', '. Only the paramScheme scheme is checked for params. A templated executor (containing templateActionOpen) is not judged. A step on a removed scheme yields ONLY executor_removed: no unknown_executor_scheme, executor-URL shape or inline-exons finding. Fields: steps.<id> and steps.<id>.loop.steps[<index>]. Not refused: aiv://, nexus:// (alias atlas://), ai:// tools / tool_choice / autofix / content_parts / stream, flow-level tool_discovery / discoverable_tools, the orchestrator block's own keys. Messages fill %s (the step id as written in the finding, then the scheme or the key list).",
+    removedSchemes: ["exons", "agent"],
+    paramScheme: "ai",
+    aiParams: [
+      "agentic",
+      "deny_tools",
+      "discoverable_tools",
+      "enable_signals",
+      "guardrails",
+      "max_tool_calls",
+      "max_tool_turns",
+      "mcp_server_url",
+      "parallel_tool_calls",
+      "require_confirmation",
+      "timeout_seconds",
+      "tool_auth_token",
+      "tool_discovery"
+    ],
+    flowKeys: ["exons_uploads"],
+    executorRemovedCode: "executor_removed",
+    agenticParamRemovedCode: "agentic_param_removed",
+    schemeMessageFormat: "step %q uses %s://, which AIgentFlow no longer runs: its own agent chains were removed",
+    paramsMessageFormat: "step %q sets %s on ai://: AIgentFlow's own agent loop (agentic mode) was removed, so these parameters no longer exist",
+    flowKeyMessageFormat: "the flow-level key %q belonged to a removed agent surface and is no longer read",
+    suggestion: `Rebuild the step: a tool-using agent becomes nexus://agent/run (agent: "@org/name", prompt, capabilities); one tool becomes nexus://capability/<ref>; a plain prompt becomes ai://<provider>/chat or a prompt-only aiv://<org>/<name>. A nexus:// step acts as the person responsible for the run: who started it, who last saved its schedule or webhook trigger, or a flow:// child's parent. What cannot be converted: a run with no person (one started by a service or key that names nobody; share links no longer exist), and a step that needs an inline .exons spec, an arbitrary MCP server URL or signals. For those, start the flow from a person, a schedule or a trigger, or use a routine in Nexus`
+  },
+  removedSignalSurfaces: {
+    $comment: "AIgentFlow 2.834.0 removed agent signals and dynamic flow modification (DFM). signal_removed (ERROR): (a) orchestrator.enable_signals: true (field orchestrator.enable_signals); (b) one of tools named in orchestrator.tools, orchestrator.deny_tools, orchestrator.require_approval_for (field = that list) or in the orchestrator .exons definition's tools.allow (field orchestrator.exons) - ONE finding per list, the removed names in list order, each once; (c) stepKey on a step or loop sub-step whose scheme is stepKeyScheme (field steps.<id> / steps.<id>.loop.steps[<index>]). flow_modification_removed (ERROR): (a) orchestrator.triggers holds a trigger of a type in triggers (ONE finding, field orchestrator.triggers); (b) flowModificationStepKey in a step's or loop sub-step's query (any scheme). Step keys are judged on map PRESENCE (null and false included). Steps skipped: templated executors, removed schemes (removedAgentSurfaces.removedSchemes) and the schemes in stepSkipSchemes (a flow:// query carries the CHILD's inputs). removed_key_ignored (WARNING, never an error): checkpoint.pre_dfm with any non-null value, and orchestrator.enable_signals: false. A YAML null on either block key is absent. Tool and trigger names match exactly and case-sensitively. The removed names left the orchestrator tool and trigger registries, but they are TOLERATED by the unknown-name checks, and enable_signals / pre_dfm stay in knownKeys, so the only finding is the new code. Order: the orchestrator block (enable_signals, then the lists, then triggers), then steps by id with loop sub-steps after their parent. Reference: aigentflow.removed.signalsurfaces.go.",
+    signalRemovedCode: "signal_removed",
+    flowModificationRemovedCode: "flow_modification_removed",
+    removedKeyIgnoredCode: "removed_key_ignored",
+    tools: [
       "aif_signal_complete",
       "aif_signal_need_human",
       "aif_signal_delegate",
       "aif_signal_need_tool",
       "aif_signal_modify_flow"
     ],
-    campaignTools: [
-      "aif_campaign_cancel",
-      "aif_campaign_results",
-      "aif_campaign_spawn",
-      "aif_campaign_status"
-    ]
+    triggers: [
+      "dfm_suggestion"
+    ],
+    stepKey: "enable_signals",
+    stepKeyScheme: "aiv",
+    flowModificationStepKey: "flow_modification_allowed",
+    stepSkipSchemes: [
+      "flow"
+    ],
+    enableSignalsMessage: "the orchestrator sets enable_signals: true: AIgentFlow's agent signals were removed in 2.834.0, so the tools it asks for no longer exist",
+    toolNamesMessageFormat: "%s names %s: AIgentFlow's agent signal tools were removed in 2.834.0",
+    stepKeyMessageFormat: "step %q sets enable_signals: AIgentFlow's agent signals were removed in 2.834.0, so the parameter no longer exists",
+    triggersMessage: "orchestrator.triggers names dfm_suggestion: dynamic flow modification was removed in 2.834.0, so nothing raises that trigger",
+    flowModificationStepMessageFormat: "step %q sets flow_modification_allowed: dynamic flow modification was removed in 2.834.0",
+    ignoredKeyMessageFormat: "%s is ignored: it configured AIgentFlow's agent signals / dynamic flow modification, removed in 2.834.0. AIgentFlow may have written this key into the flow itself; the flow runs as if it were absent",
+    ignoredKeySuggestion: "Remove the key; nothing reads it",
+    suggestion: "Signals and dynamic flow modification were removed in 2.834.0. aif_signal_need_human: add an async://human/<operation> step where the person must answer (inside a nexus://agent/run step, the atlas approval wait asks the person). aif_signal_delegate: run the other work as a flow:// step, or route with next: conditions. aif_signal_complete: an orchestrator ends the mission with aif_mission_complete. aif_signal_need_tool: no replacement; give the agent the capability in atlas. aif_signal_modify_flow, dfm_suggestion and flow_modification_allowed: no replacement; declare every step the flow may run and choose between them with next: conditions"
   },
-  exons: {
-    $comment: "Where an inline .exons document arrives at the save door. A step's document is judged only on an executor starting executorPrefix, from the string query parameter documentParam, and never when it contains templateActionOpen (the engine renders step params first). Reference: validateInlineExonsStep, validateOrchestrator (v2.767.0, v2.777.0).",
-    executorPrefix: "exons://",
-    documentParam: "exons",
-    frontmatterDelimiter: "---"
+  removedCampaignSurfaces: {
+    $comment: "AIgentFlow 2.836.0 removed campaigns. campaign_removed (ERROR): (a) the flow-root key flowKey with ANY non-null value (field campaign; the block is refused whole and nothing inside it is judged: no campaign rule, retired-key or unknown-key finding); (b) one of tools in orchestrator.tools, orchestrator.deny_tools, orchestrator.require_approval_for (field = the list) or the orchestrator .exons definition's tools.allow (field orchestrator.exons) - ONE finding per list, names in list order, each once; (c) orchestrator.triggers holding a trigger of a type in triggers (ONE finding, field orchestrator.triggers, the removed types in order, each once). Steps are never judged. Names match exactly and case-sensitively, and are tolerated by the unknown-name checks. There is no removed_key_ignored warning for campaigns. Order: block, then the lists (tools, deny_tools, require_approval_for, tools.allow), then triggers. Reference: aigentflow.removed.campaignsurfaces.go.",
+    code: "campaign_removed",
+    flowKey: "campaign",
+    tools: [
+      "aif_campaign_spawn",
+      "aif_campaign_status",
+      "aif_campaign_results",
+      "aif_campaign_cancel"
+    ],
+    triggers: [
+      "campaign_child_completed",
+      "campaign_child_failed"
+    ],
+    blockMessage: "the flow declares a campaign: block: campaigns were removed in 2.836.0, so nothing would spawn or track its child missions",
+    toolNamesMessageFormat: "%s names %s: AIgentFlow's campaign tools were removed in 2.836.0",
+    triggersMessageFormat: "orchestrator.triggers names %s: campaigns were removed in 2.836.0, so no child mission raises that trigger",
+    suggestion: "Campaigns were removed in 2.836.0. Fan the work out inside one flow instead: a for_each step whose executor is flow://stored/<flow_id> runs the child flow once per item and hands the next step every result (.data.<step>, in item order), so a coordinator -> workers -> synthesiser campaign becomes a plan step -> a for_each over flow:// -> a synthesis step (a fixed set of different workers is next: parallel: with a rendezvous). When each worker is an agent, make the worker a nexus://agent/run step (the for_each step itself, or a step of the child flow): it runs as the person responsible for the run, and a flow:// child inherits its parent's. Delete the campaign: block, the aif_campaign_* tool names and the campaign_child_* triggers"
   },
   executorConfigEnvScopes: {
     $comment: "executor_config may expand only the environment variables of the key it is written under. A value is a reference when it starts with referencePrefix and ends with referenceSuffix around a non-empty name. Checked fields: fields, plus every string value of extra (prefixed extraFieldPrefix in the message). A key absent from scopes has an EMPTY scope and refuses every reference. scopes is the reference's executorConfigEnvScope evaluated for every key with a non-empty scope. Reference: ValidateExecutorConfigEnvScopes (v2.597.0).",
@@ -1008,20 +1059,21 @@ var aigentflow_spec_default = {
     ]
   },
   atlasExecutor: {
-    $comment: "atlas://<provider>/<resource>: calls into the Atlas platform. Providers are agent (the one resource is run) and capability (the resource is a capability reference). All findings are ERRORS, field = the step (loop sub-steps use the composite step id and the sub-step path). Templated executors, unparsable URLs and other schemes are skipped. A literal agent and literal capabilities keep a step from being steered by data: query.agent and every string anywhere in query.capabilities and query.model may not contain templateActionOpen, while prompt, inputs and capability args may. agent, prompt and prompt_template count as present only when they are non-empty strings after trimming whitespace. A message format takes the quoted step id first. A URL the shared executor-URL shape refuses (a dot or colon in a reference, say) is still judged here, split at the first slash after atlas://.",
-    scheme: "atlas",
+    $comment: "nexus://<provider>/<resource> (alias atlas://, the same rules for both spellings since AIgentFlow 2.835.0; the scheme match is exact and case-sensitive against scheme and aliases): calls an agent or a capability in Nexus. An AigentChat-shaped nexus://<org>/<agent> (the executor removed in 2.819.0) is atlas_operation_unknown. Codes keep the atlas_ prefix. Providers are agent (the one resource is run) and capability (the resource is a capability reference). All findings are ERRORS, field = the step (loop sub-steps use the composite step id and the sub-step path). Templated executors, unparsable URLs and other schemes are skipped. A literal agent and literal capabilities keep a step from being steered by data: query.agent and every string anywhere in query.capabilities and query.model may not contain templateActionOpen, while prompt, inputs and capability args may. agent, prompt and prompt_template count as present only when they are non-empty strings after trimming whitespace. A message format takes the quoted step id first. A URL the shared executor-URL shape refuses (a dot or colon in a reference, say) is still judged here, split at the first slash after the scheme.",
+    scheme: "nexus",
+    aliases: ["atlas"],
     providerAgent: "agent",
     providerCapability: "capability",
     agentResource: "run",
     capabilityRefPattern: "^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$",
     operationUnknown: {
       code: "atlas_operation_unknown",
-      messageFormat: "step %s uses %s, which is not an Atlas operation. The providers are agent (resource run) and capability (resource: a capability reference).",
-      suggestion: "Use atlas://agent/run or atlas://capability/<capability-ref>."
+      messageFormat: "step %s uses %s, which is not a Nexus operation. The providers are agent (resource run) and capability (resource: a capability reference).",
+      suggestion: "Use nexus://agent/run or nexus://capability/<capability-ref>."
     },
     agentMissing: {
       code: "atlas_agent_missing",
-      messageFormat: "step %s runs an Atlas agent but query.agent is missing, empty or not a string.",
+      messageFormat: "step %s runs a Nexus agent but query.agent is missing, empty or not a string.",
       suggestion: "Set query.agent to the agent to run, written out as a literal such as @acme/reporter."
     },
     agentNotLiteral: {
@@ -1036,7 +1088,7 @@ var aigentflow_spec_default = {
     },
     promptMissing: {
       code: "atlas_prompt_missing",
-      messageFormat: "step %s runs an Atlas agent with neither query.prompt nor query.prompt_template.",
+      messageFormat: "step %s runs a Nexus agent with neither query.prompt nor query.prompt_template.",
       suggestion: "Set exactly one of query.prompt or query.prompt_template."
     },
     promptBoth: {
@@ -1046,7 +1098,7 @@ var aigentflow_spec_default = {
     },
     capabilityRefInvalid: {
       code: "atlas_capability_ref_invalid",
-      messageFormat: "step %s uses atlas://capability/%s, which is not a valid capability reference.",
+      messageFormat: "step %s uses nexus://capability/%s, which is not a valid capability reference.",
       suggestion: "A capability reference starts with a letter or digit and continues with letters, digits, _ and - up to 128 characters in all."
     },
     modelNotLiteral: {
@@ -1643,20 +1695,6 @@ var aigentflow_spec_default = {
       BillingConfig: {
         max_credits: "scalar"
       },
-      CampaignChildFlowDef: {
-        alias: "scalar",
-        flow_id: "scalar",
-        flow_name: "scalar"
-      },
-      CampaignConfig: {
-        child_flows: "list<CampaignChildFlowDef>",
-        max_concurrent: "scalar",
-        max_credits_per_child: "scalar",
-        max_depth: "scalar",
-        max_total_children: "scalar",
-        on_children_complete: "scalar",
-        shared_memory: "scalar"
-      },
       Checkpoint: {
         exact: "map<any>",
         fields: "map<FieldMatcher>",
@@ -1790,7 +1828,7 @@ var aigentflow_spec_default = {
       Flow: {
         aigentflow_version: "scalar",
         billing: "BillingConfig",
-        campaign: "CampaignConfig",
+        campaign: "any",
         checkpoint: "CheckpointConfig",
         classification: "FlowClassification",
         compliance: "FlowCompliance",
@@ -2105,19 +2143,64 @@ var KNOWN_KEYS = aigentflow_spec_default.knownKeys;
 var ORCHESTRATOR_TOOL_ALLOW = {
   warningField: aigentflow_spec_default.orchestratorToolAllow.warningField,
   askHumanTool: aigentflow_spec_default.orchestratorToolAllow.askHumanTool,
-  enableSignalsDefault: aigentflow_spec_default.orchestratorToolAllow.enableSignalsDefault,
-  lifecycleTools: aigentflow_spec_default.orchestratorToolAllow.lifecycleTools,
-  signalTools: aigentflow_spec_default.orchestratorToolAllow.signalTools,
-  campaignTools: aigentflow_spec_default.orchestratorToolAllow.campaignTools
+  lifecycleTools: aigentflow_spec_default.orchestratorToolAllow.lifecycleTools
 };
 var EXONS = {
-  /** A step's document is judged only on an executor with this prefix. */
-  executorPrefix: aigentflow_spec_default.exons.executorPrefix,
-  /** The step `query` parameter that carries the document. */
-  documentParam: aigentflow_spec_default.exons.documentParam,
   /** The YAML frontmatter delimiter line. */
   frontmatterDelimiter: aigentflow_spec_default.exons.frontmatterDelimiter
 };
+var removed = aigentflow_spec_default.removedAgentSurfaces;
+var REMOVED_AGENT_SURFACES = {
+  schemes: new Set(removed.removedSchemes),
+  paramScheme: removed.paramScheme,
+  aiParams: new Set(removed.aiParams),
+  flowKeys: removed.flowKeys,
+  executorRemovedCode: removed.executorRemovedCode,
+  agenticParamRemovedCode: removed.agenticParamRemovedCode,
+  schemeMessageFormat: removed.schemeMessageFormat,
+  paramsMessageFormat: removed.paramsMessageFormat,
+  flowKeyMessageFormat: removed.flowKeyMessageFormat,
+  suggestion: removed.suggestion
+};
+var signal = aigentflow_spec_default.removedSignalSurfaces;
+var REMOVED_SIGNAL_SURFACES = {
+  signalRemovedCode: signal.signalRemovedCode,
+  flowModificationRemovedCode: signal.flowModificationRemovedCode,
+  removedKeyIgnoredCode: signal.removedKeyIgnoredCode,
+  tools: signal.tools,
+  triggers: signal.triggers,
+  stepKey: signal.stepKey,
+  stepKeyScheme: signal.stepKeyScheme,
+  flowModificationStepKey: signal.flowModificationStepKey,
+  stepSkipSchemes: new Set(signal.stepSkipSchemes),
+  enableSignalsMessage: signal.enableSignalsMessage,
+  toolNamesMessageFormat: signal.toolNamesMessageFormat,
+  stepKeyMessageFormat: signal.stepKeyMessageFormat,
+  triggersMessage: signal.triggersMessage,
+  flowModificationStepMessageFormat: signal.flowModificationStepMessageFormat,
+  ignoredKeyMessageFormat: signal.ignoredKeyMessageFormat,
+  ignoredKeySuggestion: signal.ignoredKeySuggestion,
+  suggestion: signal.suggestion
+};
+var campaign = aigentflow_spec_default.removedCampaignSurfaces;
+var REMOVED_CAMPAIGN_SURFACES = {
+  code: campaign.code,
+  flowKey: campaign.flowKey,
+  tools: campaign.tools,
+  triggers: campaign.triggers,
+  blockMessage: campaign.blockMessage,
+  toolNamesMessageFormat: campaign.toolNamesMessageFormat,
+  triggersMessageFormat: campaign.triggersMessageFormat,
+  suggestion: campaign.suggestion
+};
+var REMOVED_ORCHESTRATOR_TOOLS = /* @__PURE__ */ new Set([
+  ...signal.tools,
+  ...campaign.tools
+]);
+var REMOVED_ORCHESTRATOR_TRIGGERS = /* @__PURE__ */ new Set([
+  ...signal.triggers,
+  ...campaign.triggers
+]);
 var EXECUTOR_CONFIG_ENV_SCOPES = {
   referencePrefix: aigentflow_spec_default.executorConfigEnvScopes.referencePrefix,
   referenceSuffix: aigentflow_spec_default.executorConfigEnvScopes.referenceSuffix,
@@ -2214,6 +2297,8 @@ var FUNCTION_OPERATIONS = {
 var atlas = aigentflow_spec_default.atlasExecutor;
 var ATLAS_EXECUTOR = {
   scheme: atlas.scheme,
+  /** The canonical scheme (nexus) and its aliases (atlas): one set of rules. */
+  schemes: /* @__PURE__ */ new Set([atlas.scheme, ...atlas.aliases]),
   providerAgent: atlas.providerAgent,
   providerCapability: atlas.providerCapability,
   agentResource: atlas.agentResource,
@@ -2243,6 +2328,223 @@ var RESERVED_INPUT_NAMES = {
   schemaFieldFormat: aigentflow_spec_default.reservedInputNames.schemaFieldFormat
 };
 
+// src/validators/exons.ts
+import { isMap as isMap2, isScalar as isScalar2, isSeq as isSeq2, parseAllDocuments } from "yaml";
+var CODE_PARSE_FAILED = "orchestrator_exons_parse_failed";
+var CODE_NO_PROVIDER = "orchestrator_exons_no_provider";
+var CODE_RESOURCES = "exons_resources_unhonoured";
+var CODE_TOOL_WITHHELD = "orchestrator_tool_withheld";
+var EXONS_OPEN_DELIM = "{~";
+var EXONS_LEGACY_CONFIG_OPEN = "{~exons.config~}";
+var UTF8_BOM = "\uFEFF";
+var MAX_ALIAS_COUNT2 = 100;
+var UNREAD = {
+  parseError: null,
+  specRead: false,
+  hasSpec: false,
+  provider: "",
+  toolsAllowDeclared: false,
+  toolsAllow: [],
+  resources: []
+};
+var GO_SPACE = "\\t\\n\\v\\f\\r \\u0085\\u00a0\\u1680\\u2000-\\u200a\\u2028\\u2029\\u202f\\u205f\\u3000";
+var GO_TRIM_SPACE = new RegExp(`^[${GO_SPACE}]+|[${GO_SPACE}]+$`, "g");
+function goTrimSpace(s) {
+  return s.replace(GO_TRIM_SPACE, "");
+}
+function extractExonsFrontmatter(source) {
+  const delim = EXONS.frontmatterDelimiter;
+  let start = source.startsWith(UTF8_BOM) ? source.slice(UTF8_BOM.length) : source;
+  start = start.replace(/^[ \t]+/, "");
+  if (start.startsWith(EXONS_LEGACY_CONFIG_OPEN)) {
+    return {
+      frontmatter: "",
+      hasFrontmatter: false,
+      parseError: "legacy JSON config block detected; use YAML frontmatter"
+    };
+  }
+  if (!start.startsWith(delim)) return { frontmatter: "", hasFrontmatter: false, parseError: null };
+  let rest = start.slice(delim.length);
+  if (rest.startsWith("\n")) rest = rest.slice(1);
+  else if (rest.startsWith("\r\n")) rest = rest.slice(2);
+  else return { frontmatter: "", hasFrontmatter: false, parseError: null };
+  let pos = 0;
+  while (pos <= rest.length) {
+    const line = rest.slice(pos);
+    if (line.startsWith(delim)) {
+      const after = line.slice(delim.length);
+      if (after === "" || after[0] === "\n" || after[0] === "\r") {
+        return {
+          frontmatter: goTrimSpace(rest.slice(0, pos)),
+          hasFrontmatter: true,
+          parseError: null
+        };
+      }
+    }
+    const nl = line.indexOf("\n");
+    if (nl < 0) break;
+    pos += nl + 1;
+  }
+  return {
+    frontmatter: "",
+    hasFrontmatter: true,
+    parseError: "YAML frontmatter not properly closed"
+  };
+}
+function retagScalars(node) {
+  if (isMap2(node)) {
+    for (const pair of node.items) {
+      retagScalars(pair.key);
+      retagScalars(pair.value);
+    }
+  } else if (isSeq2(node)) {
+    for (const item of node.items) retagScalars(item);
+  } else if (isScalar2(node) && (typeof node.value === "number" || typeof node.value === "boolean") && typeof node.source === "string") {
+    node.value = node.source;
+  }
+}
+var DecodeError = class extends Error {
+};
+function goString(v) {
+  if (v === null || v === void 0) return "";
+  if (isString(v)) return v;
+  throw new DecodeError("not a string");
+}
+function goStringList(v) {
+  if (v === null || v === void 0) return null;
+  if (!isArray(v)) throw new DecodeError("not a list");
+  return v.filter((item) => item !== null).map(goString);
+}
+function goStruct(v) {
+  if (v === null || v === void 0) return null;
+  if (!isRecord(v)) throw new DecodeError("not a mapping");
+  return v;
+}
+function decodeSpecFields(frontmatter) {
+  let value;
+  try {
+    const docs = parseAllDocuments(frontmatter, { merge: true });
+    const doc = Array.isArray(docs) ? docs[0] : void 0;
+    if (doc === void 0) {
+      value = null;
+    } else {
+      if (doc.errors.length > 0) return null;
+      retagScalars(doc.contents);
+      value = doc.toJS({ maxAliasCount: MAX_ALIAS_COUNT2 });
+    }
+  } catch {
+    return null;
+  }
+  try {
+    const root = goStruct(value) ?? {};
+    const execution = goStruct(root.execution);
+    const tools = goStruct(root.tools);
+    const requirements = goStruct(root.requirements);
+    const allow = tools === null ? null : goStringList(tools.allow);
+    let resources = [];
+    if (requirements !== null) {
+      const raw = requirements.resources;
+      if (raw !== null && raw !== void 0) {
+        if (!isArray(raw)) throw new DecodeError("not a list");
+        resources = raw.filter((entry) => entry !== null).map((entry) => {
+          const r = goStruct(entry) ?? {};
+          return { ref: goString(r.ref), kind: goString(r.kind), scope: goString(r.scope) };
+        });
+      }
+    }
+    return {
+      provider: execution === null ? "" : goString(execution.provider),
+      toolsAllowDeclared: allow !== null,
+      toolsAllow: allow ?? [],
+      resources
+    };
+  } catch (e) {
+    if (e instanceof DecodeError) return null;
+    throw e;
+  }
+}
+function inspectExonsFrontmatter(source) {
+  const fm = extractExonsFrontmatter(source);
+  if (fm.parseError !== null) return { ...UNREAD, parseError: fm.parseError };
+  if (!fm.hasFrontmatter || fm.frontmatter === "") return { ...UNREAD, specRead: true };
+  if (fm.frontmatter.includes(EXONS_OPEN_DELIM)) return { ...UNREAD };
+  const fields = decodeSpecFields(fm.frontmatter);
+  if (fields === null) return { ...UNREAD };
+  return { parseError: null, specRead: true, hasSpec: true, ...fields };
+}
+function validateOrchestratorExons(flow, issues) {
+  const orch = flow.orchestrator;
+  if (!isRecord(orch)) return;
+  const source = issues.stringOf(orch, "exons", "orchestrator");
+  if (source === null || source === "") return;
+  const field = "orchestrator.exons";
+  const report = inspectExonsFrontmatter(source);
+  if (report.parseError !== null) {
+    issues.error({
+      field,
+      code: CODE_PARSE_FAILED,
+      message: `orchestrator: failed to parse exons spec: ${report.parseError}`
+    });
+    return;
+  }
+  if (!report.specRead) return;
+  if (!report.hasSpec) {
+    issues.error({
+      field,
+      code: CODE_PARSE_FAILED,
+      message: "orchestrator: failed to parse exons spec: the document has no frontmatter spec",
+      suggestion: "Start the document with a --- frontmatter block that sets execution.provider"
+    });
+    return;
+  }
+  if (report.provider === "") {
+    issues.error({
+      field,
+      code: CODE_NO_PROVIDER,
+      message: "orchestrator: exons spec must have execution.provider set"
+    });
+  }
+  if (report.resources.length > 0) {
+    const refs = report.resources.map((r) => `${JSON.stringify(r.ref)} (kind ${r.kind})`);
+    issues.error({
+      field,
+      code: CODE_RESOURCES,
+      message: "the orchestrator's exons spec declares requirements.resources that AIgentFlow cannot honour, so it is refused rather than run without the narrowing it asks for: " + refs.join("; "),
+      suggestion: "Remove requirements.resources, and narrow the agent with tools.mcp_servers and tools.allow"
+    });
+  }
+  warnOrchestratorToolWithheld(orch, report, issues);
+}
+function warnOrchestratorToolWithheld(orch, report, issues) {
+  if (!report.toolsAllowDeclared) return;
+  const cfg = ORCHESTRATOR_TOOL_ALLOW;
+  const exempt = new Set(cfg.lifecycleTools);
+  const allow = new Set(report.toolsAllow);
+  const withheld = (name) => !allow.has(name) && !exempt.has(name) && !REMOVED_ORCHESTRATOR_TOOLS.has(name);
+  const warn = (message) => issues.warn({ field: cfg.warningField, code: CODE_TOOL_WITHHELD, message });
+  const named = [];
+  if (isArray(orch.tools)) {
+    orch.tools.forEach((raw, i) => {
+      const name = issues.stringAt(raw, `orchestrator.tools[${i}]`);
+      if (name !== null) named.push(name);
+    });
+  }
+  if (named.length > 0) {
+    for (const name of named) {
+      if (!withheld(name)) continue;
+      warn(
+        `orchestrator tool '${name}' is named in orchestrator.tools but the orchestrator's exons definition's tools.allow does not name it, so it is never offered: a tool must pass both lists. Add '${name}' to tools.allow, or remove it from orchestrator.tools.`
+      );
+    }
+    return;
+  }
+  if (withheld(cfg.askHumanTool)) {
+    warn(
+      `the orchestrator's exons definition has a tools.allow list that does not name ${cfg.askHumanTool}, so this orchestrator can never ask a person a question: human intervention is off. Add ${cfg.askHumanTool} to tools.allow if a human should be reachable, or ignore this if the orchestrator is meant to run unattended.`
+    );
+  }
+}
+
 // src/validators/executors.ts
 var SCHEME_SEPARATOR = "://";
 var UNKNOWN_SCHEME_BASE = (scheme) => `Unknown executor scheme '${scheme}'. It may be valid in a newer AIgentFlow release, or it could be a typo.`;
@@ -2305,11 +2607,61 @@ function checkExecutor(executor, field, stepID, issues) {
   }
   checkFunctionOperation(executor, field, stepID, templated, issues);
 }
+function removedExecutorScheme(executor) {
+  if (executor.includes(TEMPLATE_ACTION_OPEN)) return "";
+  const trimmed = goTrimSpace(executor);
+  const at = trimmed.indexOf(SCHEME_SEPARATOR);
+  return at < 0 ? "" : trimmed.slice(0, at).toLowerCase();
+}
+function checkRemovedSurfaces(executor, query, field, stepID, issues) {
+  const cfg = REMOVED_AGENT_SURFACES;
+  const quoted = JSON.stringify(stepID);
+  const scheme = removedExecutorScheme(executor);
+  if (cfg.schemes.has(scheme)) {
+    issues.error({
+      field,
+      message: fillRemovedMessage(cfg.schemeMessageFormat, quoted, scheme),
+      code: cfg.executorRemovedCode,
+      stepId: stepID,
+      suggestion: cfg.suggestion
+    });
+    return true;
+  }
+  if (scheme !== cfg.paramScheme || !isRecord(query)) return false;
+  const found = Object.keys(query).filter((key) => cfg.aiParams.has(key)).sort();
+  if (found.length > 0) {
+    issues.error({
+      field,
+      message: fillRemovedMessage(cfg.paramsMessageFormat, quoted, found.join(", ")),
+      code: cfg.agenticParamRemovedCode,
+      stepId: stepID,
+      suggestion: cfg.suggestion
+    });
+  }
+  return false;
+}
+function fillRemovedMessage(format, ...args) {
+  let i = 0;
+  return format.replace(/%[qs]/g, () => args[i++] ?? "");
+}
+function validateRemovedFlowKeys(flow, issues) {
+  const cfg = REMOVED_AGENT_SURFACES;
+  for (const key of cfg.flowKeys) {
+    if (Object.prototype.hasOwnProperty.call(flow, key)) {
+      issues.error({
+        field: key,
+        message: fillRemovedMessage(cfg.flowKeyMessageFormat, JSON.stringify(key)),
+        code: cfg.executorRemovedCode,
+        suggestion: cfg.suggestion
+      });
+    }
+  }
+}
 function checkAtlasStep(executor, query, stepField, stepID, issues) {
   if (executor.includes(TEMPLATE_ACTION_OPEN)) return;
-  const prefix = `${ATLAS_EXECUTOR.scheme}://`;
-  if (!executor.startsWith(prefix)) return;
-  const rest = executor.slice(prefix.length);
+  const sep = executor.indexOf(SCHEME_SEPARATOR);
+  if (sep < 0 || !ATLAS_EXECUTOR.schemes.has(executor.slice(0, sep))) return;
+  const rest = executor.slice(sep + SCHEME_SEPARATOR.length);
   const slash = rest.indexOf("/");
   const provider = slash < 0 ? rest : rest.slice(0, slash);
   const resource = slash < 0 ? "" : rest.slice(slash + 1);
@@ -2385,7 +2737,9 @@ function validateExecutors(flow, issues) {
     const step = rawStep;
     const executor = issues.stringOf(step, "executor", `steps.${stepID}`);
     if (executor !== null && executor !== "") {
-      checkExecutor(executor, `steps.${stepID}.executor`, stepID, issues);
+      if (!checkRemovedSurfaces(executor, step.query, `steps.${stepID}`, stepID, issues)) {
+        checkExecutor(executor, `steps.${stepID}.executor`, stepID, issues);
+      }
       checkAtlasStep(executor, step.query, `steps.${stepID}`, stepID, issues);
     }
     const loop = step.loop;
@@ -2397,12 +2751,14 @@ function validateExecutors(flow, issues) {
         const subID = issues.stringOf(subStep, "id", subPath) ?? String(i);
         const subExecutor = issues.stringOf(subStep, "executor", subPath);
         if (subExecutor !== null && subExecutor !== "") {
-          checkExecutor(
-            subExecutor,
-            `steps.${stepID}.loop.steps[${i}].executor`,
-            `${stepID}.${subID}`,
-            issues
-          );
+          if (!checkRemovedSurfaces(subExecutor, subStep.query, subPath, `${stepID}.${subID}`, issues)) {
+            checkExecutor(
+              subExecutor,
+              `steps.${stepID}.loop.steps[${i}].executor`,
+              `${stepID}.${subID}`,
+              issues
+            );
+          }
           checkAtlasStep(subExecutor, subStep.query, subPath, `${stepID}.${subID}`, issues);
         }
       });
@@ -3518,49 +3874,6 @@ function flowHasOrchestratorYieldEdge(flow) {
   }
   return false;
 }
-var GO_INT64_FLOAT_LIMIT = 2 ** 63;
-function decodeGoInt(v) {
-  if (typeof v !== "number" || Number.isNaN(v)) return null;
-  if (v >= GO_INT64_FLOAT_LIMIT) return null;
-  if (v === -Infinity) return -GO_INT64_FLOAT_LIMIT;
-  return Math.trunc(v);
-}
-function validateCampaignChildFlows(campaign, issues) {
-  const field = "campaign.child_flows";
-  const raw = campaign.child_flows;
-  if (raw !== void 0 && raw !== null && !Array.isArray(raw)) {
-    issues.error({ field, message: "campaign.child_flows must be a list", code: "invalid_type" });
-    return;
-  }
-  const entries = (Array.isArray(raw) ? raw : []).map((entry, i) => ({ entry, i })).filter(({ entry }) => entry !== null);
-  if (entries.length === 0) {
-    issues.error({
-      field,
-      message: "campaign requires at least one entry in child_flows",
-      code: "campaign_no_child_flows"
-    });
-    return;
-  }
-  for (const { entry, i } of entries) {
-    if (!isRecord(entry)) {
-      issues.error({
-        field: `${field}[${i}]`,
-        message: "each campaign.child_flows entry must be a mapping",
-        code: "invalid_type"
-      });
-      continue;
-    }
-    const id = issues.stringOf(entry, "flow_id", `${field}[${i}]`);
-    const name = issues.stringOf(entry, "flow_name", `${field}[${i}]`);
-    if (id !== null && id !== "" || name !== null && name !== "") continue;
-    issues.error({
-      field: `${field}[${i}]`,
-      message: `campaign.child_flows[${i}] needs a flow_id or a flow_name`,
-      code: "campaign_child_flow_no_id",
-      suggestion: "Name the child flow with flow_name, or pin it with flow_id"
-    });
-  }
-}
 function validateOrchestratorCampaign(flow, issues, opts) {
   const hasOrchestrator = isRecord(flow.orchestrator);
   if (hasOrchestrator) {
@@ -3616,6 +3929,7 @@ function validateOrchestratorCampaign(flow, issues, opts) {
         const trigger = rawTrigger;
         const base = `orchestrator.triggers[${i}]`;
         const type = issues.stringOf(trigger, "type", base);
+        if (type !== null && REMOVED_ORCHESTRATOR_TRIGGERS.has(type)) return;
         if (type === null || !ORCHESTRATOR_TRIGGERS.has(type)) {
           issues.error({
             field: `${base}.type`,
@@ -3646,7 +3960,9 @@ function validateOrchestratorCampaign(flow, issues, opts) {
     if (Array.isArray(orch.tools)) {
       orch.tools.forEach((raw, i) => {
         const tool = issues.stringAt(raw, `orchestrator.tools[${i}]`);
-        if (tool === null || ORCHESTRATOR_TOOLS.has(tool)) return;
+        if (tool === null || ORCHESTRATOR_TOOLS.has(tool) || REMOVED_ORCHESTRATOR_TOOLS.has(tool)) {
+          return;
+        }
         const finding = {
           field: `orchestrator.tools[${i}]`,
           message: `Unrecognised orchestrator tool name '${tool}'`,
@@ -3654,58 +3970,17 @@ function validateOrchestratorCampaign(flow, issues, opts) {
         };
         if (opts.strictRegistries) {
           issues.error(finding);
-        } else {
-          issues.warn(finding);
-        }
-      });
-    }
-    if (orch.agentic === false) {
-      issues.warn({
-        field: "orchestrator.agentic",
-        message: "orchestrator is most useful with agentic: true",
-        code: "orchestrator_not_agentic"
-      });
-    }
-  }
-  if (flow.campaign !== void 0 && flow.campaign !== null) {
-    if (!hasOrchestrator) {
-      issues.error({
-        field: "campaign",
-        message: "campaign requires an orchestrator block",
-        code: "campaign_requires_orchestrator"
-      });
-    }
-    const campaign = flow.campaign;
-    if (isRecord(campaign)) {
-      const cap = campaign.max_credits_per_child;
-      if (cap !== void 0 && cap !== null) {
-        const decoded = decodeGoInt(cap);
-        if (decoded === null) {
-          issues.error({
-            field: "campaign.max_credits_per_child",
-            message: `campaign.max_credits_per_child must be a number of credits, got '${String(cap)}'`,
-            code: "invalid_type"
-          });
-        } else if (decoded < 0) {
-          issues.error({
-            field: "campaign.max_credits_per_child",
-            message: "campaign: max_credits_per_child must be >= 0",
-            code: "campaign_invalid_max_credits_per_child"
-          });
+        } else {
+          issues.warn(finding);
         }
-      }
-      validateCampaignChildFlows(campaign, issues);
+      });
     }
-    const target = isRecord(campaign) ? issues.stringOf(campaign, "on_children_complete", "campaign") : null;
-    if (target !== null && target !== "") {
-      const steps = isRecord(flow.steps) ? flow.steps : {};
-      if (!(target in steps)) {
-        issues.error({
-          field: "campaign.on_children_complete",
-          message: `campaign.on_children_complete references unknown step '${target}'`,
-          code: "campaign_handoff_step_unknown"
-        });
-      }
+    if (orch.agentic === false) {
+      issues.warn({
+        field: "orchestrator.agentic",
+        message: "orchestrator is most useful with agentic: true",
+        code: "orchestrator_not_agentic"
+      });
     }
   }
 }
@@ -4833,10 +5108,6 @@ var CODE_UNKNOWN_YAML_KEY = "unknown_yaml_key";
 var KEY_BUDGET = "budget";
 var KEY_MAX_RETRIES = "max_retries";
 var REMOVED_IN = "v2.721.0";
-var KEY_BUDGET_MAX_PER_CHILD = "budget_max_per_child";
-var BUDGET_MAX_PER_CHILD_REMOVED_IN = "v2.728.0";
-var BUDGET_MAX_PER_CHILD_MESSAGE = `\`campaign.budget_max_per_child\` (USD) was removed from the grammar in AIgentFlow ${BUDGET_MAX_PER_CHILD_REMOVED_IN} because it capped nothing, and AIgentFlow refuses to save a flow that declares it.`;
-var BUDGET_MAX_PER_CHILD_SUGGESTION = "Use `campaign.max_credits_per_child: N` (a whole number of credits) \u2014 it is checked before each agentic turn of a child, and a spawn may lower it with `max_credits`.";
 var BUDGET_MESSAGE = `The flow-level \`budget:\` key was removed from the grammar in AIgentFlow ${REMOVED_IN} because nothing read it (it limited no spend), and AIgentFlow refuses to save a flow that declares it.`;
 var BUDGET_SUGGESTION = "Delete it. To cap spend use `billing: { max_credits: N }` \u2014 it caps the credit reservation and refuses further agentic turns (agentic ai://, exons://, the orchestrator); plain chat steps and flow:// sub-flows are not checked against it.";
 function maxRetriesMessage(owner) {
@@ -4864,15 +5135,6 @@ function validateRetiredKeys(flow, issues) {
       suggestion: MAX_RETRIES_SUGGESTION
     });
   }
-  const campaign = root.campaign;
-  if (isRecord(campaign) && declares(campaign, KEY_BUDGET_MAX_PER_CHILD)) {
-    issues.error({
-      field: `campaign.${KEY_BUDGET_MAX_PER_CHILD}`,
-      message: BUDGET_MAX_PER_CHILD_MESSAGE,
-      code: CODE_UNKNOWN_YAML_KEY,
-      suggestion: BUDGET_MAX_PER_CHILD_SUGGESTION
-    });
-  }
   const steps = flow.steps;
   if (!isRecord(steps)) return;
   for (const [stepID, rawStep] of Object.entries(steps)) {
@@ -5240,9 +5502,9 @@ function refuse(issues, stepId, key, field) {
 }
 
 // src/validators/goUrl.ts
-var GO_SPACE = "\\t\\n\\v\\f\\r \\u0085\\u00A0\\u1680\\u2000-\\u200A\\u2028\\u2029\\u202F\\u205F\\u3000";
-var GO_TRIM_SPACE_RE = new RegExp(`^[${GO_SPACE}]+|[${GO_SPACE}]+$`, "g");
-function goTrimSpace(s) {
+var GO_SPACE2 = "\\t\\n\\v\\f\\r \\u0085\\u00A0\\u1680\\u2000-\\u200A\\u2028\\u2029\\u202F\\u205F\\u3000";
+var GO_TRIM_SPACE_RE = new RegExp(`^[${GO_SPACE2}]+|[${GO_SPACE2}]+$`, "g");
+function goTrimSpace2(s) {
   return s.replace(GO_TRIM_SPACE_RE, "");
 }
 function goToLower(s) {
@@ -5465,7 +5727,7 @@ function goQueryKeys(rawQuery) {
   return keys;
 }
 function goEndpointOrigin(raw, defaultPorts, protocolSeparator) {
-  const trimmed = goTrimSpace(raw);
+  const trimmed = goTrimSpace2(raw);
   const u = goParseSchemeHost(trimmed);
   if (u === null || u.scheme === "" || u.host === "") {
     return goToLower(trimmed.replace(/\/+$/, ""));
@@ -5700,227 +5962,164 @@ function validateFamilies(flow, steps, issues) {
   }
 }
 
-// src/validators/exons.ts
-import { isMap as isMap2, isScalar as isScalar2, isSeq as isSeq2, parseAllDocuments } from "yaml";
-var CODE_PARSE_FAILED = "orchestrator_exons_parse_failed";
-var CODE_NO_PROVIDER = "orchestrator_exons_no_provider";
-var CODE_RESOURCES = "exons_resources_unhonoured";
-var CODE_TOOL_WITHHELD = "orchestrator_tool_withheld";
-var EXONS_OPEN_DELIM = "{~";
-var EXONS_LEGACY_CONFIG_OPEN = "{~exons.config~}";
-var UTF8_BOM = "\uFEFF";
-var MAX_ALIAS_COUNT2 = 100;
-var UNREAD = {
-  parseError: null,
-  specRead: false,
-  hasSpec: false,
-  provider: "",
-  toolsAllowDeclared: false,
-  toolsAllow: [],
-  resources: []
-};
-var GO_SPACE2 = "\\t\\n\\v\\f\\r \\u0085\\u00a0\\u1680\\u2000-\\u200a\\u2028\\u2029\\u202f\\u205f\\u3000";
-var GO_TRIM_SPACE = new RegExp(`^[${GO_SPACE2}]+|[${GO_SPACE2}]+$`, "g");
-function goTrimSpace2(s) {
-  return s.replace(GO_TRIM_SPACE, "");
+// src/validators/removedSignalCampaign.ts
+var TEMPLATE_ACTION_OPEN3 = "{{";
+function fill(format, ...args) {
+  let i = 0;
+  return format.replace(/%[qs]/g, () => args[i++] ?? "");
 }
-function extractExonsFrontmatter(source) {
-  const delim = EXONS.frontmatterDelimiter;
-  let start = source.startsWith(UTF8_BOM) ? source.slice(UTF8_BOM.length) : source;
-  start = start.replace(/^[ \t]+/, "");
-  if (start.startsWith(EXONS_LEGACY_CONFIG_OPEN)) {
-    return {
-      frontmatter: "",
-      hasFrontmatter: false,
-      parseError: "legacy JSON config block detected; use YAML frontmatter"
-    };
-  }
-  if (!start.startsWith(delim)) return { frontmatter: "", hasFrontmatter: false, parseError: null };
-  let rest = start.slice(delim.length);
-  if (rest.startsWith("\n")) rest = rest.slice(1);
-  else if (rest.startsWith("\r\n")) rest = rest.slice(2);
-  else return { frontmatter: "", hasFrontmatter: false, parseError: null };
-  let pos = 0;
-  while (pos <= rest.length) {
-    const line = rest.slice(pos);
-    if (line.startsWith(delim)) {
-      const after = line.slice(delim.length);
-      if (after === "" || after[0] === "\n" || after[0] === "\r") {
-        return {
-          frontmatter: goTrimSpace2(rest.slice(0, pos)),
-          hasFrontmatter: true,
-          parseError: null
-        };
-      }
-    }
-    const nl = line.indexOf("\n");
-    if (nl < 0) break;
-    pos += nl + 1;
-  }
-  return {
-    frontmatter: "",
-    hasFrontmatter: true,
-    parseError: "YAML frontmatter not properly closed"
-  };
+function stringEntries(m, key) {
+  const raw = m[key];
+  return Array.isArray(raw) ? raw.filter((v) => typeof v === "string") : [];
 }
-function retagScalars(node) {
-  if (isMap2(node)) {
-    for (const pair of node.items) {
-      retagScalars(pair.key);
-      retagScalars(pair.value);
-    }
-  } else if (isSeq2(node)) {
-    for (const item of node.items) retagScalars(item);
-  } else if (isScalar2(node) && (typeof node.value === "number" || typeof node.value === "boolean") && typeof node.source === "string") {
-    node.value = node.source;
+function triggerTypes(orch) {
+  const raw = orch.triggers;
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  for (const t of raw) {
+    if (isRecord(t) && typeof t.type === "string") out.push(t.type);
   }
+  return out;
 }
-var DecodeError = class extends Error {
-};
-function goString(v) {
-  if (v === null || v === void 0) return "";
-  if (isString(v)) return v;
-  throw new DecodeError("not a string");
-}
-function goStringList(v) {
-  if (v === null || v === void 0) return null;
-  if (!isArray(v)) throw new DecodeError("not a list");
-  return v.filter((item) => item !== null).map(goString);
-}
-function goStruct(v) {
-  if (v === null || v === void 0) return null;
-  if (!isRecord(v)) throw new DecodeError("not a mapping");
-  return v;
-}
-function decodeSpecFields(frontmatter) {
-  let value;
-  try {
-    const docs = parseAllDocuments(frontmatter, { merge: true });
-    const doc = Array.isArray(docs) ? docs[0] : void 0;
-    if (doc === void 0) {
-      value = null;
-    } else {
-      if (doc.errors.length > 0) return null;
-      retagScalars(doc.contents);
-      value = doc.toJS({ maxAliasCount: MAX_ALIAS_COUNT2 });
-    }
-  } catch {
-    return null;
-  }
-  try {
-    const root = goStruct(value) ?? {};
-    const execution = goStruct(root.execution);
-    const tools = goStruct(root.tools);
-    const requirements = goStruct(root.requirements);
-    const allow = tools === null ? null : goStringList(tools.allow);
-    let resources = [];
-    if (requirements !== null) {
-      const raw = requirements.resources;
-      if (raw !== null && raw !== void 0) {
-        if (!isArray(raw)) throw new DecodeError("not a list");
-        resources = raw.filter((entry) => entry !== null).map((entry) => {
-          const r = goStruct(entry) ?? {};
-          return { ref: goString(r.ref), kind: goString(r.kind), scope: goString(r.scope) };
-        });
-      }
-    }
-    return {
-      provider: execution === null ? "" : goString(execution.provider),
-      toolsAllowDeclared: allow !== null,
-      toolsAllow: allow ?? [],
-      resources
-    };
-  } catch (e) {
-    if (e instanceof DecodeError) return null;
-    throw e;
+function namesIn(names, removed2) {
+  const found = [];
+  for (const name of names) {
+    if (removed2.includes(name) && !found.includes(name)) found.push(name);
   }
+  return found;
 }
-function inspectExonsFrontmatter(source) {
-  const fm = extractExonsFrontmatter(source);
-  if (fm.parseError !== null) return { ...UNREAD, parseError: fm.parseError };
-  if (!fm.hasFrontmatter || fm.frontmatter === "") return { ...UNREAD, specRead: true };
-  if (fm.frontmatter.includes(EXONS_OPEN_DELIM)) return { ...UNREAD };
-  const fields = decodeSpecFields(fm.frontmatter);
-  if (fields === null) return { ...UNREAD };
-  return { parseError: null, specRead: true, hasSpec: true, ...fields };
-}
-function validateOrchestratorExons(flow, issues) {
-  const orch = flow.orchestrator;
-  if (!isRecord(orch)) return;
-  const source = issues.stringOf(orch, "exons", "orchestrator");
-  if (source === null || source === "") return;
-  const field = "orchestrator.exons";
+function orchestratorToolsAllow(orch) {
+  const source = orch.exons;
+  if (typeof source !== "string" || source === "") return [];
   const report = inspectExonsFrontmatter(source);
-  if (report.parseError !== null) {
-    issues.error({
-      field,
-      code: CODE_PARSE_FAILED,
-      message: `orchestrator: failed to parse exons spec: ${report.parseError}`
-    });
-    return;
-  }
-  if (!report.specRead) return;
-  if (!report.hasSpec) {
-    issues.error({
-      field,
-      code: CODE_PARSE_FAILED,
-      message: "orchestrator: failed to parse exons spec: the document has no frontmatter spec",
-      suggestion: "Start the document with a --- frontmatter block that sets execution.provider"
-    });
-    return;
-  }
-  if (report.provider === "") {
-    issues.error({
-      field,
-      code: CODE_NO_PROVIDER,
-      message: "orchestrator: exons spec must have execution.provider set"
-    });
+  if (report.parseError !== null || !report.specRead || !report.toolsAllowDeclared) return [];
+  return [...report.toolsAllow];
+}
+function validateRemovedOrchestratorSurfaces(flow, issues) {
+  const sig = REMOVED_SIGNAL_SURFACES;
+  const camp = REMOVED_CAMPAIGN_SURFACES;
+  const orch = isRecord(flow.orchestrator) ? flow.orchestrator : null;
+  const lists = orch === null ? [] : [
+    ...["tools", "deny_tools", "require_approval_for"].map((key) => ({
+      field: `orchestrator.${key}`,
+      names: stringEntries(orch, key)
+    })),
+    { field: "orchestrator.exons", names: orchestratorToolsAllow(orch) }
+  ];
+  if (orch !== null) {
+    if (orch.enable_signals === true) {
+      issues.error({
+        field: "orchestrator.enable_signals",
+        code: sig.signalRemovedCode,
+        message: sig.enableSignalsMessage,
+        suggestion: sig.suggestion
+      });
+    }
+    for (const list of lists) {
+      const named = namesIn(list.names, sig.tools);
+      if (named.length === 0) continue;
+      issues.error({
+        field: list.field,
+        code: sig.signalRemovedCode,
+        message: fill(sig.toolNamesMessageFormat, list.field, named.join(", ")),
+        suggestion: sig.suggestion
+      });
+    }
+    if (namesIn(triggerTypes(orch), sig.triggers).length > 0) {
+      issues.error({
+        field: "orchestrator.triggers",
+        code: sig.flowModificationRemovedCode,
+        message: sig.triggersMessage,
+        suggestion: sig.suggestion
+      });
+    }
   }
-  if (report.resources.length > 0) {
-    const refs = report.resources.map((r) => `${JSON.stringify(r.ref)} (kind ${r.kind})`);
+  const block = flow[camp.flowKey];
+  if (block !== void 0 && block !== null) {
     issues.error({
-      field,
-      code: CODE_RESOURCES,
-      message: "the orchestrator's exons spec declares requirements.resources that AIgentFlow cannot honour, so it is refused rather than run without the narrowing it asks for: " + refs.join("; "),
-      suggestion: "Remove requirements.resources, and narrow the agent with tools.mcp_servers and tools.allow"
-    });
-  }
-  warnOrchestratorToolWithheld(flow, orch, report, issues);
-}
-function warnOrchestratorToolWithheld(flow, orch, report, issues) {
-  if (!report.toolsAllowDeclared) return;
-  const cfg = ORCHESTRATOR_TOOL_ALLOW;
-  const exempt = new Set(cfg.lifecycleTools);
-  const signals = typeof orch.enable_signals === "boolean" ? orch.enable_signals : cfg.enableSignalsDefault;
-  if (signals) for (const t of cfg.signalTools) exempt.add(t);
-  const allow = new Set(report.toolsAllow);
-  const withheld = (name) => !allow.has(name) && !exempt.has(name);
-  const warn = (message) => issues.warn({ field: cfg.warningField, code: CODE_TOOL_WITHHELD, message });
-  const named = [];
-  if (isArray(orch.tools)) {
-    orch.tools.forEach((raw, i) => {
-      const name = issues.stringAt(raw, `orchestrator.tools[${i}]`);
-      if (name !== null) named.push(name);
+      field: camp.flowKey,
+      code: camp.code,
+      message: camp.blockMessage,
+      suggestion: camp.suggestion
     });
   }
-  if (named.length > 0) {
-    for (const name of named) {
-      if (!withheld(name)) continue;
-      warn(
-        `orchestrator tool '${name}' is named in orchestrator.tools but the orchestrator's exons definition's tools.allow does not name it, so it is never offered: a tool must pass both lists. Add '${name}' to tools.allow, or remove it from orchestrator.tools.`
-      );
+  if (orch !== null) {
+    for (const list of lists) {
+      const named = namesIn(list.names, camp.tools);
+      if (named.length === 0) continue;
+      issues.error({
+        field: list.field,
+        code: camp.code,
+        message: fill(camp.toolNamesMessageFormat, list.field, named.join(", ")),
+        suggestion: camp.suggestion
+      });
+    }
+    const triggers = namesIn(triggerTypes(orch), camp.triggers);
+    if (triggers.length > 0) {
+      issues.error({
+        field: "orchestrator.triggers",
+        code: camp.code,
+        message: fill(camp.triggersMessageFormat, triggers.join(", ")),
+        suggestion: camp.suggestion
+      });
     }
-    return;
   }
-  if (withheld(cfg.askHumanTool)) {
-    warn(
-      `the orchestrator's exons definition has a tools.allow list that does not name ${cfg.askHumanTool}, so this orchestrator can never ask a person a question: human intervention is off. Add ${cfg.askHumanTool} to tools.allow if a human should be reachable, or ignore this if the orchestrator is meant to run unattended.`
-    );
+  const judgeStep = (executor, query, field, stepID) => {
+    if (typeof executor !== "string" || executor === "") return;
+    if (executor.includes(TEMPLATE_ACTION_OPEN3)) return;
+    const scheme = removedExecutorScheme(executor);
+    if (REMOVED_AGENT_SURFACES.schemes.has(scheme) || sig.stepSkipSchemes.has(scheme)) return;
+    if (!isRecord(query)) return;
+    const quoted = JSON.stringify(stepID);
+    if (Object.prototype.hasOwnProperty.call(query, sig.flowModificationStepKey)) {
+      issues.error({
+        field,
+        code: sig.flowModificationRemovedCode,
+        stepId: stepID,
+        message: fill(sig.flowModificationStepMessageFormat, quoted),
+        suggestion: sig.suggestion
+      });
+    }
+    if (scheme === sig.stepKeyScheme && Object.prototype.hasOwnProperty.call(query, sig.stepKey)) {
+      issues.error({
+        field,
+        code: sig.signalRemovedCode,
+        stepId: stepID,
+        message: fill(sig.stepKeyMessageFormat, quoted),
+        suggestion: sig.suggestion
+      });
+    }
+  };
+  const steps = flow.steps;
+  if (isRecord(steps)) {
+    for (const stepID of Object.keys(steps).sort()) {
+      const step = steps[stepID];
+      if (!isRecord(step)) continue;
+      judgeStep(step.executor, step.query, `steps.${stepID}`, stepID);
+      const loop = step.loop;
+      if (!isRecord(loop) || !Array.isArray(loop.steps)) continue;
+      loop.steps.forEach((sub, i) => {
+        if (!isRecord(sub)) return;
+        const subID = issues.stringOf(sub, "id", `steps.${stepID}.loop.steps[${i}]`) ?? String(i);
+        judgeStep(
+          sub.executor,
+          sub.query,
+          `steps.${stepID}.loop.steps[${i}]`,
+          `${stepID}.${subID}`
+        );
+      });
+    }
   }
-  if (isRecord(flow.campaign) && !cfg.campaignTools.some((name) => !withheld(name))) {
-    warn(
-      `this flow declares a campaign, but the orchestrator's exons definition has a tools.allow list that names none of the campaign tools (${cfg.campaignTools.join(", ")}), so no child mission can be spawned or tracked. Add the campaign tools the orchestrator needs to tools.allow.`
-    );
+  const ignored = (field) => issues.warn({
+    field,
+    code: sig.removedKeyIgnoredCode,
+    message: fill(sig.ignoredKeyMessageFormat, field),
+    suggestion: sig.ignoredKeySuggestion
+  });
+  if (orch !== null && orch.enable_signals === false) ignored("orchestrator.enable_signals");
+  const checkpoint = flow.checkpoint;
+  if (isRecord(checkpoint) && checkpoint.pre_dfm !== void 0 && checkpoint.pre_dfm !== null) {
+    ignored("checkpoint.pre_dfm");
   }
 }
 
@@ -5937,7 +6136,7 @@ function sprintf(format, ...args) {
   });
 }
 function literalOrEmpty(s) {
-  const t = goTrimSpace2(s);
+  const t = goTrimSpace(s);
   return t.includes(TEMPLATE_ACTION_OPEN) ? "" : t;
 }
 function euOnlyResidency(flow, issues) {
@@ -5952,7 +6151,7 @@ function euOnlyResidency(flow, issues) {
   }
   if (codes.length === 0) return null;
   const eu = new Set(COMPLIANCE_RESIDENCY.euResidencyCodes);
-  return codes.every((c) => eu.has(goTrimSpace2(c).toUpperCase())) ? codes : null;
+  return codes.every((c) => eu.has(goTrimSpace(c).toUpperCase())) ? codes : null;
 }
 function aiProvider(executor) {
   const prefix = COMPLIANCE_RESIDENCY.aiProtocol + COMPLIANCE_RESIDENCY.protocolSeparator;
@@ -5968,7 +6167,7 @@ function isRegionLane(provider) {
 }
 function nonBlankString(m, key) {
   const v = own2(m, key);
-  return typeof v === "string" && goTrimSpace2(v) !== "";
+  return typeof v === "string" && goTrimSpace(v) !== "";
 }
 function queryEnforcesRegion(query) {
   const v = own2(query, COMPLIANCE_RESIDENCY.enforceRegionParam);
@@ -5980,7 +6179,7 @@ function flowDirectsEndpoint(flow, provider, issues) {
   const inst = own2(own2(flow, "executor_config"), key);
   if (!isRecord(inst)) return false;
   const baseUrl = issues.stringOf(inst, "base_url", `executor_config.${key}`);
-  return baseUrl !== null && goTrimSpace2(baseUrl) !== "";
+  return baseUrl !== null && goTrimSpace(baseUrl) !== "";
 }
 function callPinsEndpoint(flow, provider, query, issues) {
   if (nonBlankString(query, COMPLIANCE_RESIDENCY.regionParam)) return true;
@@ -6053,7 +6252,7 @@ function warnOrchestrator(flow, issues, warn) {
   const provider = literalOrEmpty(report.provider);
   if (!isRegionLane(provider)) return;
   const region = issues.stringOf(orch, "region", "orchestrator");
-  if (region !== null && goTrimSpace2(region) !== "") return;
+  if (region !== null && goTrimSpace(region) !== "") return;
   if (orch.enforce_region === true) return;
   if (flowDirectsEndpoint(flow, provider, issues)) return;
   warn(COMPLIANCE_RESIDENCY.siteOrchestrator, COMPLIANCE_RESIDENCY.orchestratorField, void 0, provider);
@@ -6219,7 +6418,7 @@ function asFileRef(v) {
   };
 }
 function isTextualMediaType(mediaType) {
-  const base = goToLower(goTrimSpace((mediaType.split(";")[0] ?? "").toString()));
+  const base = goToLower(goTrimSpace2((mediaType.split(";")[0] ?? "").toString()));
   if (base.startsWith("text/")) return true;
   if (base.endsWith("+json") || base.endsWith("+xml")) return true;
   return TEXTUAL_MEDIA_BASES.has(base);
@@ -6323,7 +6522,7 @@ var Walker = class _Walker {
       }
     }
     const title = this.s(ex, "title", path);
-    if (goTrimSpace(title) === "") {
+    if (goTrimSpace2(title) === "") {
       this.err(
         "example_title_missing",
         `${path}.title`,
@@ -6340,7 +6539,7 @@ var Walker = class _Walker {
       }
     }
     const guidance = this.s(ex, "guidance", path);
-    if (goTrimSpace(guidance) === "") {
+    if (goTrimSpace2(guidance) === "") {
       this.warn(
         "example_guidance_missing",
         `${path}.guidance`,
@@ -6767,7 +6966,7 @@ var Walker = class _Walker {
     }
     const rubric = this.s(e, "rubric", path);
     if (rubric !== "") {
-      if (goTrimSpace(rubric) === "") {
+      if (goTrimSpace2(rubric) === "") {
         this.err(
           "example_rubric_empty",
           `${path}.rubric`,
@@ -6822,7 +7021,7 @@ var Walker = class _Walker {
       this.err("example_must_not_invalid", `${path}.must_not`, mustNotMsg);
     }
     mustNot.forEach((item, j) => {
-      if (goTrimSpace(item) === "" || runeCount(item) > L.maxMustNotRunes) {
+      if (goTrimSpace2(item) === "" || runeCount(item) > L.maxMustNotRunes) {
         this.err("example_must_not_invalid", `${path}.must_not[${j}]`, mustNotMsg);
       }
     });
@@ -7377,6 +7576,7 @@ function validateParsed(flow, opts, sources) {
   const f = flow;
   validateBasicStructure(f, issues);
   validateRetiredKeys(f, issues);
+  validateRemovedFlowKeys(f, issues);
   validateExecutors(f, issues);
   validateQuerySchema(f, issues);
   validateResponseExpectations(f, issues);
@@ -7400,6 +7600,7 @@ function validateParsed(flow, opts, sources) {
   validateCredentialEndpointPairing(f, issues);
   validateExamples(f, issues);
   validateOrchestratorExons(f, issues);
+  validateRemovedOrchestratorSurfaces(f, issues);
   validateResidencyEnforcement(f, issues);
   validateUnknownKeys(f, issues);
   const templateStats = validateTemplates(f, issues, opts);