@vaudience/aigentflow-flow-validator 0.27.0 → 0.28.0

package/dist/cli.js

@@ -455,7 +455,7 @@ function validateBasicStructure(flow, issues) {
 // src/spec/aigentflow-spec.json
 var aigentflow_spec_default = {
   $comment: "Vendored enum surface mirrored from the AIgentFlow Go reference implementation. Regenerate / review on every flow-YAML schema change. See PARITY.md. Values here are public protocol/type names only.",
-  specVersion: "2.833.0",
+  specVersion: "2.837.0",
   inputSchemaVersion: 1,
   executorSchemes: [
     "a2a",
@@ -486,6 +486,7 @@ var aigentflow_spec_default = {
     "messenger",
     "mock",
     "mqtt",
+    "nexus",
     "opencorporates",
     "openmeteo",
     "overpass",
@@ -556,12 +557,9 @@ var aigentflow_spec_default = {
       "step_failed",
       "mission_started",
       "mission_completed",
-      "dfm_suggestion",
       "timer",
       "request_turn",
       "mission_recovered",
-      "campaign_child_completed",
-      "campaign_child_failed",
       "human_response",
       "human_input"
     ],
@@ -577,15 +575,6 @@ var aigentflow_spec_default = {
       "aif_ask_human",
       "aif_flow_list",
       "aif_mission_reflect",
-      "aif_signal_complete",
-      "aif_signal_need_human",
-      "aif_signal_delegate",
-      "aif_signal_need_tool",
-      "aif_signal_modify_flow",
-      "aif_campaign_spawn",
-      "aif_campaign_status",
-      "aif_campaign_results",
-      "aif_campaign_cancel",
       "aif_memory_plan",
       "aif_memory_record",
       "aif_memory_recall",
@@ -756,23 +745,13 @@ var aigentflow_spec_default = {
     "fn_urldecode"
   ],
   orchestratorToolAllow: {
-    $comment: "An orchestrator tool is offered only if it passes BOTH orchestrator.tools (empty = every tool) AND the inline exons definition's tools.allow (absent = no narrowing). The lifecycle tools, and the signal tools when enable_signals is on (the default), are exempt from tools.allow. Reference: validateOrchestratorToolAllowWithholds (v2.760.0).",
+    $comment: "An orchestrator tool is offered only if it passes BOTH orchestrator.tools (empty = every tool) AND the inline exons definition's tools.allow (absent = no narrowing). Only the lifecycle tools are exempt from tools.allow. A removed signal or campaign tool name (removedSignalSurfaces.tools, removedCampaignSurfaces.tools) is never reported as withheld: it is refused as signal_removed / campaign_removed. Reference: validateOrchestratorToolAllowWithholds (v2.760.0, signal and campaign arms removed in 2.834.0 / 2.836.0).",
     warningField: "orchestrator.exons",
     askHumanTool: "aif_ask_human",
-    enableSignalsDefault: true,
-    lifecycleTools: ["aif_mission_complete", "aif_mission_fail", "aif_request_turn"],
-    signalTools: [
-      "aif_signal_complete",
-      "aif_signal_need_human",
-      "aif_signal_delegate",
-      "aif_signal_need_tool",
-      "aif_signal_modify_flow"
-    ],
-    campaignTools: [
-      "aif_campaign_cancel",
-      "aif_campaign_results",
-      "aif_campaign_spawn",
-      "aif_campaign_status"
+    lifecycleTools: [
+      "aif_mission_complete",
+      "aif_mission_fail",
+      "aif_request_turn"
     ]
   },
   exons: {
@@ -780,7 +759,7 @@ var aigentflow_spec_default = {
     frontmatterDelimiter: "---"
   },
   removedAgentSurfaces: {
-    $comment: "AIgentFlow no longer runs agents of its own. executor_removed (ERROR): a step or loop sub-step whose executor scheme (text before '://', whitespace-trimmed, lower-cased) is in removedSchemes, or a top-level key in flowKeys (field = the key). agentic_param_removed (ERROR): an ai:// step or loop sub-step whose query carries ANY key of aiParams, on presence alone (null and false included); ONE finding per step, the keys sorted and joined by ', '. Only the paramScheme scheme is checked for params. A templated executor (containing templateActionOpen) is not judged. A step on a removed scheme yields ONLY executor_removed: no unknown_executor_scheme, executor-URL shape or inline-exons finding. Fields: steps.<id> and steps.<id>.loop.steps[<index>]. Not refused: aiv://, atlas://, ai:// tools / tool_choice / autofix / content_parts / stream, flow-level tool_discovery / discoverable_tools, the orchestrator block's own keys. Messages fill %s (the step id as written in the finding, then the scheme or the key list).",
+    $comment: "AIgentFlow no longer runs agents of its own. executor_removed (ERROR): a step or loop sub-step whose executor scheme (text before '://', whitespace-trimmed, lower-cased) is in removedSchemes, or a top-level key in flowKeys (field = the key). agentic_param_removed (ERROR): an ai:// step or loop sub-step whose query carries ANY key of aiParams, on presence alone (null and false included); ONE finding per step, the keys sorted and joined by ', '. Only the paramScheme scheme is checked for params. A templated executor (containing templateActionOpen) is not judged. A step on a removed scheme yields ONLY executor_removed: no unknown_executor_scheme, executor-URL shape or inline-exons finding. Fields: steps.<id> and steps.<id>.loop.steps[<index>]. Not refused: aiv://, nexus:// (alias atlas://), ai:// tools / tool_choice / autofix / content_parts / stream, flow-level tool_discovery / discoverable_tools, the orchestrator block's own keys. Messages fill %s (the step id as written in the finding, then the scheme or the key list).",
     removedSchemes: ["exons", "agent"],
     paramScheme: "ai",
     aiParams: [
@@ -804,7 +783,56 @@ var aigentflow_spec_default = {
     schemeMessageFormat: "step %q uses %s://, which AIgentFlow no longer runs: its own agent chains were removed",
     paramsMessageFormat: "step %q sets %s on ai://: AIgentFlow's own agent loop (agentic mode) was removed, so these parameters no longer exist",
     flowKeyMessageFormat: "the flow-level key %q belonged to a removed agent surface and is no longer read",
-    suggestion: 'Rebuild the step: a tool-using agent becomes atlas://agent/run (agent: "@org/name", prompt, capabilities); one tool becomes atlas://capability/<ref>; a plain prompt becomes ai://<provider>/chat or a prompt-only aiv://<org>/<name>. A flow that cannot be converted (started by a webhook, a schedule, a share link, a campaign or a flow:// sub-flow, none of which has a person for atlas to act for; or one that needs an inline .exons spec, an arbitrary MCP server URL or signals) has no replacement here: start it from a person, or use a routine in atlas'
+    suggestion: `Rebuild the step: a tool-using agent becomes nexus://agent/run (agent: "@org/name", prompt, capabilities); one tool becomes nexus://capability/<ref>; a plain prompt becomes ai://<provider>/chat or a prompt-only aiv://<org>/<name>. A nexus:// step acts as the person responsible for the run: who started it, who last saved its schedule or webhook trigger, or a flow:// child's parent. What cannot be converted: a run with no person (one started by a service or key that names nobody; share links no longer exist), and a step that needs an inline .exons spec, an arbitrary MCP server URL or signals. For those, start the flow from a person, a schedule or a trigger, or use a routine in Nexus`
+  },
+  removedSignalSurfaces: {
+    $comment: "AIgentFlow 2.834.0 removed agent signals and dynamic flow modification (DFM). signal_removed (ERROR): (a) orchestrator.enable_signals: true (field orchestrator.enable_signals); (b) one of tools named in orchestrator.tools, orchestrator.deny_tools, orchestrator.require_approval_for (field = that list) or in the orchestrator .exons definition's tools.allow (field orchestrator.exons) - ONE finding per list, the removed names in list order, each once; (c) stepKey on a step or loop sub-step whose scheme is stepKeyScheme (field steps.<id> / steps.<id>.loop.steps[<index>]). flow_modification_removed (ERROR): (a) orchestrator.triggers holds a trigger of a type in triggers (ONE finding, field orchestrator.triggers); (b) flowModificationStepKey in a step's or loop sub-step's query (any scheme). Step keys are judged on map PRESENCE (null and false included). Steps skipped: templated executors, removed schemes (removedAgentSurfaces.removedSchemes) and the schemes in stepSkipSchemes (a flow:// query carries the CHILD's inputs). removed_key_ignored (WARNING, never an error): checkpoint.pre_dfm with any non-null value, and orchestrator.enable_signals: false. A YAML null on either block key is absent. Tool and trigger names match exactly and case-sensitively. The removed names left the orchestrator tool and trigger registries, but they are TOLERATED by the unknown-name checks, and enable_signals / pre_dfm stay in knownKeys, so the only finding is the new code. Order: the orchestrator block (enable_signals, then the lists, then triggers), then steps by id with loop sub-steps after their parent. Reference: aigentflow.removed.signalsurfaces.go.",
+    signalRemovedCode: "signal_removed",
+    flowModificationRemovedCode: "flow_modification_removed",
+    removedKeyIgnoredCode: "removed_key_ignored",
+    tools: [
+      "aif_signal_complete",
+      "aif_signal_need_human",
+      "aif_signal_delegate",
+      "aif_signal_need_tool",
+      "aif_signal_modify_flow"
+    ],
+    triggers: [
+      "dfm_suggestion"
+    ],
+    stepKey: "enable_signals",
+    stepKeyScheme: "aiv",
+    flowModificationStepKey: "flow_modification_allowed",
+    stepSkipSchemes: [
+      "flow"
+    ],
+    enableSignalsMessage: "the orchestrator sets enable_signals: true: AIgentFlow's agent signals were removed in 2.834.0, so the tools it asks for no longer exist",
+    toolNamesMessageFormat: "%s names %s: AIgentFlow's agent signal tools were removed in 2.834.0",
+    stepKeyMessageFormat: "step %q sets enable_signals: AIgentFlow's agent signals were removed in 2.834.0, so the parameter no longer exists",
+    triggersMessage: "orchestrator.triggers names dfm_suggestion: dynamic flow modification was removed in 2.834.0, so nothing raises that trigger",
+    flowModificationStepMessageFormat: "step %q sets flow_modification_allowed: dynamic flow modification was removed in 2.834.0",
+    ignoredKeyMessageFormat: "%s is ignored: it configured AIgentFlow's agent signals / dynamic flow modification, removed in 2.834.0. AIgentFlow may have written this key into the flow itself; the flow runs as if it were absent",
+    ignoredKeySuggestion: "Remove the key; nothing reads it",
+    suggestion: "Signals and dynamic flow modification were removed in 2.834.0. aif_signal_need_human: add an async://human/<operation> step where the person must answer (inside a nexus://agent/run step, the atlas approval wait asks the person). aif_signal_delegate: run the other work as a flow:// step, or route with next: conditions. aif_signal_complete: an orchestrator ends the mission with aif_mission_complete. aif_signal_need_tool: no replacement; give the agent the capability in atlas. aif_signal_modify_flow, dfm_suggestion and flow_modification_allowed: no replacement; declare every step the flow may run and choose between them with next: conditions"
+  },
+  removedCampaignSurfaces: {
+    $comment: "AIgentFlow 2.836.0 removed campaigns. campaign_removed (ERROR): (a) the flow-root key flowKey with ANY non-null value (field campaign; the block is refused whole and nothing inside it is judged: no campaign rule, retired-key or unknown-key finding); (b) one of tools in orchestrator.tools, orchestrator.deny_tools, orchestrator.require_approval_for (field = the list) or the orchestrator .exons definition's tools.allow (field orchestrator.exons) - ONE finding per list, names in list order, each once; (c) orchestrator.triggers holding a trigger of a type in triggers (ONE finding, field orchestrator.triggers, the removed types in order, each once). Steps are never judged. Names match exactly and case-sensitively, and are tolerated by the unknown-name checks. There is no removed_key_ignored warning for campaigns. Order: block, then the lists (tools, deny_tools, require_approval_for, tools.allow), then triggers. Reference: aigentflow.removed.campaignsurfaces.go.",
+    code: "campaign_removed",
+    flowKey: "campaign",
+    tools: [
+      "aif_campaign_spawn",
+      "aif_campaign_status",
+      "aif_campaign_results",
+      "aif_campaign_cancel"
+    ],
+    triggers: [
+      "campaign_child_completed",
+      "campaign_child_failed"
+    ],
+    blockMessage: "the flow declares a campaign: block: campaigns were removed in 2.836.0, so nothing would spawn or track its child missions",
+    toolNamesMessageFormat: "%s names %s: AIgentFlow's campaign tools were removed in 2.836.0",
+    triggersMessageFormat: "orchestrator.triggers names %s: campaigns were removed in 2.836.0, so no child mission raises that trigger",
+    suggestion: "Campaigns were removed in 2.836.0. Fan the work out inside one flow instead: a for_each step whose executor is flow://stored/<flow_id> runs the child flow once per item and hands the next step every result (.data.<step>, in item order), so a coordinator -> workers -> synthesiser campaign becomes a plan step -> a for_each over flow:// -> a synthesis step (a fixed set of different workers is next: parallel: with a rendezvous). When each worker is an agent, make the worker a nexus://agent/run step (the for_each step itself, or a step of the child flow): it runs as the person responsible for the run, and a flow:// child inherits its parent's. Delete the campaign: block, the aif_campaign_* tool names and the campaign_child_* triggers"
   },
   executorConfigEnvScopes: {
     $comment: "executor_config may expand only the environment variables of the key it is written under. A value is a reference when it starts with referencePrefix and ends with referenceSuffix around a non-empty name. Checked fields: fields, plus every string value of extra (prefixed extraFieldPrefix in the message). A key absent from scopes has an EMPTY scope and refuses every reference. scopes is the reference's executorConfigEnvScope evaluated for every key with a non-empty scope. Reference: ValidateExecutorConfigEnvScopes (v2.597.0).",
@@ -1031,20 +1059,21 @@ var aigentflow_spec_default = {
     ]
   },
   atlasExecutor: {
-    $comment: "atlas://<provider>/<resource>: calls into the Atlas platform. Providers are agent (the one resource is run) and capability (the resource is a capability reference). All findings are ERRORS, field = the step (loop sub-steps use the composite step id and the sub-step path). Templated executors, unparsable URLs and other schemes are skipped. A literal agent and literal capabilities keep a step from being steered by data: query.agent and every string anywhere in query.capabilities and query.model may not contain templateActionOpen, while prompt, inputs and capability args may. agent, prompt and prompt_template count as present only when they are non-empty strings after trimming whitespace. A message format takes the quoted step id first. A URL the shared executor-URL shape refuses (a dot or colon in a reference, say) is still judged here, split at the first slash after atlas://.",
-    scheme: "atlas",
+    $comment: "nexus://<provider>/<resource> (alias atlas://, the same rules for both spellings since AIgentFlow 2.835.0; the scheme match is exact and case-sensitive against scheme and aliases): calls an agent or a capability in Nexus. An AigentChat-shaped nexus://<org>/<agent> (the executor removed in 2.819.0) is atlas_operation_unknown. Codes keep the atlas_ prefix. Providers are agent (the one resource is run) and capability (the resource is a capability reference). All findings are ERRORS, field = the step (loop sub-steps use the composite step id and the sub-step path). Templated executors, unparsable URLs and other schemes are skipped. A literal agent and literal capabilities keep a step from being steered by data: query.agent and every string anywhere in query.capabilities and query.model may not contain templateActionOpen, while prompt, inputs and capability args may. agent, prompt and prompt_template count as present only when they are non-empty strings after trimming whitespace. A message format takes the quoted step id first. A URL the shared executor-URL shape refuses (a dot or colon in a reference, say) is still judged here, split at the first slash after the scheme.",
+    scheme: "nexus",
+    aliases: ["atlas"],
     providerAgent: "agent",
     providerCapability: "capability",
     agentResource: "run",
     capabilityRefPattern: "^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$",
     operationUnknown: {
       code: "atlas_operation_unknown",
-      messageFormat: "step %s uses %s, which is not an Atlas operation. The providers are agent (resource run) and capability (resource: a capability reference).",
-      suggestion: "Use atlas://agent/run or atlas://capability/<capability-ref>."
+      messageFormat: "step %s uses %s, which is not a Nexus operation. The providers are agent (resource run) and capability (resource: a capability reference).",
+      suggestion: "Use nexus://agent/run or nexus://capability/<capability-ref>."
     },
     agentMissing: {
       code: "atlas_agent_missing",
-      messageFormat: "step %s runs an Atlas agent but query.agent is missing, empty or not a string.",
+      messageFormat: "step %s runs a Nexus agent but query.agent is missing, empty or not a string.",
       suggestion: "Set query.agent to the agent to run, written out as a literal such as @acme/reporter."
     },
     agentNotLiteral: {
@@ -1059,7 +1088,7 @@ var aigentflow_spec_default = {
     },
     promptMissing: {
       code: "atlas_prompt_missing",
-      messageFormat: "step %s runs an Atlas agent with neither query.prompt nor query.prompt_template.",
+      messageFormat: "step %s runs a Nexus agent with neither query.prompt nor query.prompt_template.",
       suggestion: "Set exactly one of query.prompt or query.prompt_template."
     },
     promptBoth: {
@@ -1069,7 +1098,7 @@ var aigentflow_spec_default = {
     },
     capabilityRefInvalid: {
       code: "atlas_capability_ref_invalid",
-      messageFormat: "step %s uses atlas://capability/%s, which is not a valid capability reference.",
+      messageFormat: "step %s uses nexus://capability/%s, which is not a valid capability reference.",
       suggestion: "A capability reference starts with a letter or digit and continues with letters, digits, _ and - up to 128 characters in all."
     },
     modelNotLiteral: {
@@ -1666,20 +1695,6 @@ var aigentflow_spec_default = {
       BillingConfig: {
         max_credits: "scalar"
       },
-      CampaignChildFlowDef: {
-        alias: "scalar",
-        flow_id: "scalar",
-        flow_name: "scalar"
-      },
-      CampaignConfig: {
-        child_flows: "list<CampaignChildFlowDef>",
-        max_concurrent: "scalar",
-        max_credits_per_child: "scalar",
-        max_depth: "scalar",
-        max_total_children: "scalar",
-        on_children_complete: "scalar",
-        shared_memory: "scalar"
-      },
       Checkpoint: {
         exact: "map<any>",
         fields: "map<FieldMatcher>",
@@ -1813,7 +1828,7 @@ var aigentflow_spec_default = {
       Flow: {
         aigentflow_version: "scalar",
         billing: "BillingConfig",
-        campaign: "CampaignConfig",
+        campaign: "any",
         checkpoint: "CheckpointConfig",
         classification: "FlowClassification",
         compliance: "FlowCompliance",
@@ -2128,10 +2143,7 @@ var KNOWN_KEYS = aigentflow_spec_default.knownKeys;
 var ORCHESTRATOR_TOOL_ALLOW = {
   warningField: aigentflow_spec_default.orchestratorToolAllow.warningField,
   askHumanTool: aigentflow_spec_default.orchestratorToolAllow.askHumanTool,
-  enableSignalsDefault: aigentflow_spec_default.orchestratorToolAllow.enableSignalsDefault,
-  lifecycleTools: aigentflow_spec_default.orchestratorToolAllow.lifecycleTools,
-  signalTools: aigentflow_spec_default.orchestratorToolAllow.signalTools,
-  campaignTools: aigentflow_spec_default.orchestratorToolAllow.campaignTools
+  lifecycleTools: aigentflow_spec_default.orchestratorToolAllow.lifecycleTools
 };
 var EXONS = {
   /** The YAML frontmatter delimiter line. */
@@ -2150,6 +2162,45 @@ var REMOVED_AGENT_SURFACES = {
   flowKeyMessageFormat: removed.flowKeyMessageFormat,
   suggestion: removed.suggestion
 };
+var signal = aigentflow_spec_default.removedSignalSurfaces;
+var REMOVED_SIGNAL_SURFACES = {
+  signalRemovedCode: signal.signalRemovedCode,
+  flowModificationRemovedCode: signal.flowModificationRemovedCode,
+  removedKeyIgnoredCode: signal.removedKeyIgnoredCode,
+  tools: signal.tools,
+  triggers: signal.triggers,
+  stepKey: signal.stepKey,
+  stepKeyScheme: signal.stepKeyScheme,
+  flowModificationStepKey: signal.flowModificationStepKey,
+  stepSkipSchemes: new Set(signal.stepSkipSchemes),
+  enableSignalsMessage: signal.enableSignalsMessage,
+  toolNamesMessageFormat: signal.toolNamesMessageFormat,
+  stepKeyMessageFormat: signal.stepKeyMessageFormat,
+  triggersMessage: signal.triggersMessage,
+  flowModificationStepMessageFormat: signal.flowModificationStepMessageFormat,
+  ignoredKeyMessageFormat: signal.ignoredKeyMessageFormat,
+  ignoredKeySuggestion: signal.ignoredKeySuggestion,
+  suggestion: signal.suggestion
+};
+var campaign = aigentflow_spec_default.removedCampaignSurfaces;
+var REMOVED_CAMPAIGN_SURFACES = {
+  code: campaign.code,
+  flowKey: campaign.flowKey,
+  tools: campaign.tools,
+  triggers: campaign.triggers,
+  blockMessage: campaign.blockMessage,
+  toolNamesMessageFormat: campaign.toolNamesMessageFormat,
+  triggersMessageFormat: campaign.triggersMessageFormat,
+  suggestion: campaign.suggestion
+};
+var REMOVED_ORCHESTRATOR_TOOLS = /* @__PURE__ */ new Set([
+  ...signal.tools,
+  ...campaign.tools
+]);
+var REMOVED_ORCHESTRATOR_TRIGGERS = /* @__PURE__ */ new Set([
+  ...signal.triggers,
+  ...campaign.triggers
+]);
 var EXECUTOR_CONFIG_ENV_SCOPES = {
   referencePrefix: aigentflow_spec_default.executorConfigEnvScopes.referencePrefix,
   referenceSuffix: aigentflow_spec_default.executorConfigEnvScopes.referenceSuffix,
@@ -2246,6 +2297,8 @@ var FUNCTION_OPERATIONS = {
 var atlas = aigentflow_spec_default.atlasExecutor;
 var ATLAS_EXECUTOR = {
   scheme: atlas.scheme,
+  /** The canonical scheme (nexus) and its aliases (atlas): one set of rules. */
+  schemes: /* @__PURE__ */ new Set([atlas.scheme, ...atlas.aliases]),
   providerAgent: atlas.providerAgent,
   providerCapability: atlas.providerCapability,
   agentResource: atlas.agentResource,
@@ -2460,16 +2513,14 @@ function validateOrchestratorExons(flow, issues) {
       suggestion: "Remove requirements.resources, and narrow the agent with tools.mcp_servers and tools.allow"
     });
   }
-  warnOrchestratorToolWithheld(flow, orch, report, issues);
+  warnOrchestratorToolWithheld(orch, report, issues);
 }
-function warnOrchestratorToolWithheld(flow, orch, report, issues) {
+function warnOrchestratorToolWithheld(orch, report, issues) {
   if (!report.toolsAllowDeclared) return;
   const cfg = ORCHESTRATOR_TOOL_ALLOW;
   const exempt = new Set(cfg.lifecycleTools);
-  const signals = typeof orch.enable_signals === "boolean" ? orch.enable_signals : cfg.enableSignalsDefault;
-  if (signals) for (const t of cfg.signalTools) exempt.add(t);
   const allow = new Set(report.toolsAllow);
-  const withheld = (name) => !allow.has(name) && !exempt.has(name);
+  const withheld = (name) => !allow.has(name) && !exempt.has(name) && !REMOVED_ORCHESTRATOR_TOOLS.has(name);
   const warn = (message) => issues.warn({ field: cfg.warningField, code: CODE_TOOL_WITHHELD, message });
   const named = [];
   if (isArray(orch.tools)) {
@@ -2492,11 +2543,6 @@ function warnOrchestratorToolWithheld(flow, orch, report, issues) {
       `the orchestrator's exons definition has a tools.allow list that does not name ${cfg.askHumanTool}, so this orchestrator can never ask a person a question: human intervention is off. Add ${cfg.askHumanTool} to tools.allow if a human should be reachable, or ignore this if the orchestrator is meant to run unattended.`
     );
   }
-  if (isRecord(flow.campaign) && !cfg.campaignTools.some((name) => !withheld(name))) {
-    warn(
-      `this flow declares a campaign, but the orchestrator's exons definition has a tools.allow list that names none of the campaign tools (${cfg.campaignTools.join(", ")}), so no child mission can be spawned or tracked. Add the campaign tools the orchestrator needs to tools.allow.`
-    );
-  }
 }
 
 // src/validators/executors.ts
@@ -2613,9 +2659,9 @@ function validateRemovedFlowKeys(flow, issues) {
 }
 function checkAtlasStep(executor, query, stepField, stepID, issues) {
   if (executor.includes(TEMPLATE_ACTION_OPEN)) return;
-  const prefix = `${ATLAS_EXECUTOR.scheme}://`;
-  if (!executor.startsWith(prefix)) return;
-  const rest = executor.slice(prefix.length);
+  const sep = executor.indexOf(SCHEME_SEPARATOR);
+  if (sep < 0 || !ATLAS_EXECUTOR.schemes.has(executor.slice(0, sep))) return;
+  const rest = executor.slice(sep + SCHEME_SEPARATOR.length);
   const slash = rest.indexOf("/");
   const provider = slash < 0 ? rest : rest.slice(0, slash);
   const resource = slash < 0 ? "" : rest.slice(slash + 1);
@@ -3828,49 +3874,6 @@ function flowHasOrchestratorYieldEdge(flow) {
   }
   return false;
 }
-var GO_INT64_FLOAT_LIMIT = 2 ** 63;
-function decodeGoInt(v) {
-  if (typeof v !== "number" || Number.isNaN(v)) return null;
-  if (v >= GO_INT64_FLOAT_LIMIT) return null;
-  if (v === -Infinity) return -GO_INT64_FLOAT_LIMIT;
-  return Math.trunc(v);
-}
-function validateCampaignChildFlows(campaign, issues) {
-  const field = "campaign.child_flows";
-  const raw = campaign.child_flows;
-  if (raw !== void 0 && raw !== null && !Array.isArray(raw)) {
-    issues.error({ field, message: "campaign.child_flows must be a list", code: "invalid_type" });
-    return;
-  }
-  const entries = (Array.isArray(raw) ? raw : []).map((entry, i) => ({ entry, i })).filter(({ entry }) => entry !== null);
-  if (entries.length === 0) {
-    issues.error({
-      field,
-      message: "campaign requires at least one entry in child_flows",
-      code: "campaign_no_child_flows"
-    });
-    return;
-  }
-  for (const { entry, i } of entries) {
-    if (!isRecord(entry)) {
-      issues.error({
-        field: `${field}[${i}]`,
-        message: "each campaign.child_flows entry must be a mapping",
-        code: "invalid_type"
-      });
-      continue;
-    }
-    const id = issues.stringOf(entry, "flow_id", `${field}[${i}]`);
-    const name = issues.stringOf(entry, "flow_name", `${field}[${i}]`);
-    if (id !== null && id !== "" || name !== null && name !== "") continue;
-    issues.error({
-      field: `${field}[${i}]`,
-      message: `campaign.child_flows[${i}] needs a flow_id or a flow_name`,
-      code: "campaign_child_flow_no_id",
-      suggestion: "Name the child flow with flow_name, or pin it with flow_id"
-    });
-  }
-}
 function validateOrchestratorCampaign(flow, issues, opts) {
   const hasOrchestrator = isRecord(flow.orchestrator);
   if (hasOrchestrator) {
@@ -3926,6 +3929,7 @@ function validateOrchestratorCampaign(flow, issues, opts) {
         const trigger = rawTrigger;
         const base = `orchestrator.triggers[${i}]`;
         const type = issues.stringOf(trigger, "type", base);
+        if (type !== null && REMOVED_ORCHESTRATOR_TRIGGERS.has(type)) return;
         if (type === null || !ORCHESTRATOR_TRIGGERS.has(type)) {
           issues.error({
             field: `${base}.type`,
@@ -3956,7 +3960,9 @@ function validateOrchestratorCampaign(flow, issues, opts) {
     if (Array.isArray(orch.tools)) {
       orch.tools.forEach((raw, i) => {
         const tool = issues.stringAt(raw, `orchestrator.tools[${i}]`);
-        if (tool === null || ORCHESTRATOR_TOOLS.has(tool)) return;
+        if (tool === null || ORCHESTRATOR_TOOLS.has(tool) || REMOVED_ORCHESTRATOR_TOOLS.has(tool)) {
+          return;
+        }
         const finding = {
           field: `orchestrator.tools[${i}]`,
           message: `Unrecognised orchestrator tool name '${tool}'`,
@@ -3977,47 +3983,6 @@ function validateOrchestratorCampaign(flow, issues, opts) {
       });
     }
   }
-  if (flow.campaign !== void 0 && flow.campaign !== null) {
-    if (!hasOrchestrator) {
-      issues.error({
-        field: "campaign",
-        message: "campaign requires an orchestrator block",
-        code: "campaign_requires_orchestrator"
-      });
-    }
-    const campaign = flow.campaign;
-    if (isRecord(campaign)) {
-      const cap = campaign.max_credits_per_child;
-      if (cap !== void 0 && cap !== null) {
-        const decoded = decodeGoInt(cap);
-        if (decoded === null) {
-          issues.error({
-            field: "campaign.max_credits_per_child",
-            message: `campaign.max_credits_per_child must be a number of credits, got '${String(cap)}'`,
-            code: "invalid_type"
-          });
-        } else if (decoded < 0) {
-          issues.error({
-            field: "campaign.max_credits_per_child",
-            message: "campaign: max_credits_per_child must be >= 0",
-            code: "campaign_invalid_max_credits_per_child"
-          });
-        }
-      }
-      validateCampaignChildFlows(campaign, issues);
-    }
-    const target = isRecord(campaign) ? issues.stringOf(campaign, "on_children_complete", "campaign") : null;
-    if (target !== null && target !== "") {
-      const steps = isRecord(flow.steps) ? flow.steps : {};
-      if (!(target in steps)) {
-        issues.error({
-          field: "campaign.on_children_complete",
-          message: `campaign.on_children_complete references unknown step '${target}'`,
-          code: "campaign_handoff_step_unknown"
-        });
-      }
-    }
-  }
 }
 
 // src/validators/credentialBindings.ts
@@ -5143,10 +5108,6 @@ var CODE_UNKNOWN_YAML_KEY = "unknown_yaml_key";
 var KEY_BUDGET = "budget";
 var KEY_MAX_RETRIES = "max_retries";
 var REMOVED_IN = "v2.721.0";
-var KEY_BUDGET_MAX_PER_CHILD = "budget_max_per_child";
-var BUDGET_MAX_PER_CHILD_REMOVED_IN = "v2.728.0";
-var BUDGET_MAX_PER_CHILD_MESSAGE = `\`campaign.budget_max_per_child\` (USD) was removed from the grammar in AIgentFlow ${BUDGET_MAX_PER_CHILD_REMOVED_IN} because it capped nothing, and AIgentFlow refuses to save a flow that declares it.`;
-var BUDGET_MAX_PER_CHILD_SUGGESTION = "Use `campaign.max_credits_per_child: N` (a whole number of credits) \u2014 it is checked before each agentic turn of a child, and a spawn may lower it with `max_credits`.";
 var BUDGET_MESSAGE = `The flow-level \`budget:\` key was removed from the grammar in AIgentFlow ${REMOVED_IN} because nothing read it (it limited no spend), and AIgentFlow refuses to save a flow that declares it.`;
 var BUDGET_SUGGESTION = "Delete it. To cap spend use `billing: { max_credits: N }` \u2014 it caps the credit reservation and refuses further agentic turns (agentic ai://, exons://, the orchestrator); plain chat steps and flow:// sub-flows are not checked against it.";
 function maxRetriesMessage(owner) {
@@ -5174,15 +5135,6 @@ function validateRetiredKeys(flow, issues) {
       suggestion: MAX_RETRIES_SUGGESTION
     });
   }
-  const campaign = root.campaign;
-  if (isRecord(campaign) && declares(campaign, KEY_BUDGET_MAX_PER_CHILD)) {
-    issues.error({
-      field: `campaign.${KEY_BUDGET_MAX_PER_CHILD}`,
-      message: BUDGET_MAX_PER_CHILD_MESSAGE,
-      code: CODE_UNKNOWN_YAML_KEY,
-      suggestion: BUDGET_MAX_PER_CHILD_SUGGESTION
-    });
-  }
   const steps = flow.steps;
   if (!isRecord(steps)) return;
   for (const [stepID, rawStep] of Object.entries(steps)) {
@@ -6010,6 +5962,167 @@ function validateFamilies(flow, steps, issues) {
   }
 }
 
+// src/validators/removedSignalCampaign.ts
+var TEMPLATE_ACTION_OPEN3 = "{{";
+function fill(format, ...args) {
+  let i = 0;
+  return format.replace(/%[qs]/g, () => args[i++] ?? "");
+}
+function stringEntries(m, key) {
+  const raw = m[key];
+  return Array.isArray(raw) ? raw.filter((v) => typeof v === "string") : [];
+}
+function triggerTypes(orch) {
+  const raw = orch.triggers;
+  if (!Array.isArray(raw)) return [];
+  const out = [];
+  for (const t of raw) {
+    if (isRecord(t) && typeof t.type === "string") out.push(t.type);
+  }
+  return out;
+}
+function namesIn(names, removed2) {
+  const found = [];
+  for (const name of names) {
+    if (removed2.includes(name) && !found.includes(name)) found.push(name);
+  }
+  return found;
+}
+function orchestratorToolsAllow(orch) {
+  const source = orch.exons;
+  if (typeof source !== "string" || source === "") return [];
+  const report = inspectExonsFrontmatter(source);
+  if (report.parseError !== null || !report.specRead || !report.toolsAllowDeclared) return [];
+  return [...report.toolsAllow];
+}
+function validateRemovedOrchestratorSurfaces(flow, issues) {
+  const sig = REMOVED_SIGNAL_SURFACES;
+  const camp = REMOVED_CAMPAIGN_SURFACES;
+  const orch = isRecord(flow.orchestrator) ? flow.orchestrator : null;
+  const lists = orch === null ? [] : [
+    ...["tools", "deny_tools", "require_approval_for"].map((key) => ({
+      field: `orchestrator.${key}`,
+      names: stringEntries(orch, key)
+    })),
+    { field: "orchestrator.exons", names: orchestratorToolsAllow(orch) }
+  ];
+  if (orch !== null) {
+    if (orch.enable_signals === true) {
+      issues.error({
+        field: "orchestrator.enable_signals",
+        code: sig.signalRemovedCode,
+        message: sig.enableSignalsMessage,
+        suggestion: sig.suggestion
+      });
+    }
+    for (const list of lists) {
+      const named = namesIn(list.names, sig.tools);
+      if (named.length === 0) continue;
+      issues.error({
+        field: list.field,
+        code: sig.signalRemovedCode,
+        message: fill(sig.toolNamesMessageFormat, list.field, named.join(", ")),
+        suggestion: sig.suggestion
+      });
+    }
+    if (namesIn(triggerTypes(orch), sig.triggers).length > 0) {
+      issues.error({
+        field: "orchestrator.triggers",
+        code: sig.flowModificationRemovedCode,
+        message: sig.triggersMessage,
+        suggestion: sig.suggestion
+      });
+    }
+  }
+  const block = flow[camp.flowKey];
+  if (block !== void 0 && block !== null) {
+    issues.error({
+      field: camp.flowKey,
+      code: camp.code,
+      message: camp.blockMessage,
+      suggestion: camp.suggestion
+    });
+  }
+  if (orch !== null) {
+    for (const list of lists) {
+      const named = namesIn(list.names, camp.tools);
+      if (named.length === 0) continue;
+      issues.error({
+        field: list.field,
+        code: camp.code,
+        message: fill(camp.toolNamesMessageFormat, list.field, named.join(", ")),
+        suggestion: camp.suggestion
+      });
+    }
+    const triggers = namesIn(triggerTypes(orch), camp.triggers);
+    if (triggers.length > 0) {
+      issues.error({
+        field: "orchestrator.triggers",
+        code: camp.code,
+        message: fill(camp.triggersMessageFormat, triggers.join(", ")),
+        suggestion: camp.suggestion
+      });
+    }
+  }
+  const judgeStep = (executor, query, field, stepID) => {
+    if (typeof executor !== "string" || executor === "") return;
+    if (executor.includes(TEMPLATE_ACTION_OPEN3)) return;
+    const scheme = removedExecutorScheme(executor);
+    if (REMOVED_AGENT_SURFACES.schemes.has(scheme) || sig.stepSkipSchemes.has(scheme)) return;
+    if (!isRecord(query)) return;
+    const quoted = JSON.stringify(stepID);
+    if (Object.prototype.hasOwnProperty.call(query, sig.flowModificationStepKey)) {
+      issues.error({
+        field,
+        code: sig.flowModificationRemovedCode,
+        stepId: stepID,
+        message: fill(sig.flowModificationStepMessageFormat, quoted),
+        suggestion: sig.suggestion
+      });
+    }
+    if (scheme === sig.stepKeyScheme && Object.prototype.hasOwnProperty.call(query, sig.stepKey)) {
+      issues.error({
+        field,
+        code: sig.signalRemovedCode,
+        stepId: stepID,
+        message: fill(sig.stepKeyMessageFormat, quoted),
+        suggestion: sig.suggestion
+      });
+    }
+  };
+  const steps = flow.steps;
+  if (isRecord(steps)) {
+    for (const stepID of Object.keys(steps).sort()) {
+      const step = steps[stepID];
+      if (!isRecord(step)) continue;
+      judgeStep(step.executor, step.query, `steps.${stepID}`, stepID);
+      const loop = step.loop;
+      if (!isRecord(loop) || !Array.isArray(loop.steps)) continue;
+      loop.steps.forEach((sub, i) => {
+        if (!isRecord(sub)) return;
+        const subID = issues.stringOf(sub, "id", `steps.${stepID}.loop.steps[${i}]`) ?? String(i);
+        judgeStep(
+          sub.executor,
+          sub.query,
+          `steps.${stepID}.loop.steps[${i}]`,
+          `${stepID}.${subID}`
+        );
+      });
+    }
+  }
+  const ignored = (field) => issues.warn({
+    field,
+    code: sig.removedKeyIgnoredCode,
+    message: fill(sig.ignoredKeyMessageFormat, field),
+    suggestion: sig.ignoredKeySuggestion
+  });
+  if (orch !== null && orch.enable_signals === false) ignored("orchestrator.enable_signals");
+  const checkpoint = flow.checkpoint;
+  if (isRecord(checkpoint) && checkpoint.pre_dfm !== void 0 && checkpoint.pre_dfm !== null) {
+    ignored("checkpoint.pre_dfm");
+  }
+}
+
 // src/validators/complianceResidency.ts
 function own2(m, key) {
   if (!isRecord(m) || !Object.prototype.hasOwnProperty.call(m, key)) return void 0;
@@ -7487,6 +7600,7 @@ function validateParsed(flow, opts, sources) {
   validateCredentialEndpointPairing(f, issues);
   validateExamples(f, issues);
   validateOrchestratorExons(f, issues);
+  validateRemovedOrchestratorSurfaces(f, issues);
   validateResidencyEnforcement(f, issues);
   validateUnknownKeys(f, issues);
   const templateStats = validateTemplates(f, issues, opts);