[EPIC-D][LOU-D35] Remove flows-ai converters and the nanoid dependency

CHANGELOG.md

@@ -16,6 +16,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `createAgent()` agents can pause for approval (LOU-D21): a `needsApproval` tool no longer fails the run with "requires approval but no approvalStore". The run pauses (`finishReason: 'awaiting-approval'`) in a per-agent `InMemoryApprovalStore` (or the new `approvalStore` option), and `agent.approvals.list()` / `agent.approvals.resolve({ id, approved, note? })` continue it, in its session if it paused in one. The `approve` option decides calls in code without pausing.
 - Tools own their contract (LOU-D22): `ToolDescriptor` gains optional `inputSchema` (zod) and `execute(args, ctx)`, which are now the canonical fields. `defineTool()` sets both and no longer calls `ai`'s `tool()`. Argument validation, the schema sent to the model, and tool execution read them first and fall back to `tool.parameters` / `tool.execute`. `ToolDescriptor.tool` (the `ai` v4 `Tool`) is now legacy: it is still built by `defineTool()` and still accepted on hand-written descriptors this release, but new code should set `inputSchema` and `execute`.
 
+### Removed
+- BREAKING: The flows-ai converters (LOU-D35) are gone: `convertToFlowDefinition()` and `convertFromFlowDefinition()` (`src/flows/converters.ts`) no longer ship from the package root or `./flows`. There is no replacement: the flows-ai engine they targeted was never a dependency of this package and `FlowExecutor` never used them. Run flows with `FlowExecutor` directly.
+- `nanoid` is no longer a dependency (LOU-D35). Generated ids (agent, run, trace, memory ids) now come from `globalThis.crypto.randomUUID()` via an internal `newId()`, so they are UUIDs instead of 21-character nanoids. Nothing public depended on the old format.
 - `finishReason: 'max-steps'` (LOU-U19): a run that exhausts `maxSteps` while the model still wanted to continue (last turn ended in tool calls) now resolves with `finishReason: 'max-steps'` instead of the stale last-turn reason (usually `'tool_calls'`), on `ExecutionResult`, the `finish` event and `run.done`. Resumed runs count `initialSteps` toward the budget. A run that finishes naturally within the budget is unchanged. Code that treated `'tool_calls'` as "hit maxSteps" should check `'max-steps'` instead (the eval `completed()` message and the MCP server's agent tool do).
 
 ### Docs

package.json

@@ -187,7 +187,6 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.1",
     "dockerode": "^5.0.1",
-    "nanoid": "^5.0.7",
     "prompts": "^2.4.2",
     "undici": "^8.11.2",
     "yaml": "^2.9.1"

src/core/AgentBuilder.ts

@@ -1,6 +1,6 @@
 import { AgentConfig, AgentType, ToolConfiguration, AgentFlow } from '../types';
 import { validateAgentConfig, validateAgentTools } from '../agent-types';
-import { nanoid } from 'nanoid';
+import { newId } from '../utils/id';
 import type { DefinedTool } from '../tools/defineTool';
 
 /**
@@ -109,7 +109,7 @@
   /**
    * Set expected result schema
    */
   public setExpectedResult(schema: any): this {
     this.config.expectedResult = schema;
     return this;
   }
@@ -125,7 +125,7 @@
   /**
    * Set events
    */
   public setEvents(events: any[]): this {
     this.config.events = events;
     return this;
   }
@@ -133,7 +133,7 @@
   /**
    * Set settings
    */
   public setSettings(settings: Record<string, any>): this {
     this.config.settings = settings;
     return this;
   }
@@ -141,7 +141,7 @@
   /**
    * Set metadata
    */
   public setMetadata(metadata: Record<string, any>): this {
     this.config.metadata = metadata;
     return this;
   }
@@ -153,7 +153,7 @@
     this.validate();
 
     return {
-      id: this.config.id || nanoid(),
+      id: this.config.id || newId(),
       name: this.config.name!,
       ...(this.config.agentType !== undefined && { agentType: this.config.agentType }),
       locale: this.config.locale || 'en',

src/data/mocks.ts

@@ -13,7 +13,7 @@ import {
   PaginatedResult,
 } from './repositories';
 import { Agent, Session, Result, Memory, Attachment } from './models';
-import { nanoid } from 'nanoid';
+import { newId } from '../utils/id';
 
 /**
  * Base Mock Repository
@@ -89,7 +89,7 @@ export class MockAgentRepository
   implements AgentRepository
 {
   protected generateId(): string {
-    return nanoid();
+    return newId();
   }
 
   async findByType(type: string): Promise<Agent[]> {
@@ -138,7 +138,7 @@ export class MockSessionRepository
   implements SessionRepository
 {
   protected generateId(): string {
-    return nanoid();
+    return newId();
   }
 
   async findByAgentId(agentId: string): Promise<Session[]> {
@@ -183,7 +183,7 @@ export class MockResultRepository
   implements ResultRepository
 {
   protected generateId(): string {
-    return nanoid();
+    return newId();
   }
 
   async findBySessionId(sessionId: string): Promise<Result | null> {
@@ -214,7 +214,7 @@ export class MockMemoryRepository
   implements MemoryRepository
 {
   protected generateId(): string {
-    return nanoid();
+    return newId();
   }
 
   /**

src/execution/AgentExecutor.ts

@@ -7,7 +7,7 @@ import type { Skill } from '../skills/defineSkill';
 import { withSkills } from '../skills/withSkills';
 import type { Subagents } from '../subagents/types';
 import { assertMaxSubagentDepth, withSubagents } from '../subagents/withSubagents';
-import { nanoid } from 'nanoid';
+import { newId } from '../utils/id';
 import { LLMProvider, Message, ToolCall, GenerateOptions, GenerateResult, ToolDefinition } from '../providers';
 import { AgentConfig } from '../types';
 import { ToolRegistry } from '../tools';
@@ -1033,7 +1033,7 @@ export class AgentExecutor {
     }
 
     const pending: PendingApproval = {
-      id: nanoid(),
+      id: newId(),
       toolCallId: toolCall.id,
       toolName: toolCall.function.name,
       args: toolResult.args || {},

src/execution/MemoryManager.ts

@@ -4,7 +4,7 @@
  */
 
 import { Memory, MemoryRepository } from '../data';
-import { nanoid } from 'nanoid';
+import { newId } from '../utils/id';
 
 /**
  * Memory manager configuration
@@ -124,7 +124,7 @@ export class MemoryManager {
     };
 
     const memory = new Memory({
-      id: nanoid(),
+      id: newId(),
       agentId,
       content,
       embedding: embedding ?? [],

src/execution/agentRun.ts

@@ -14,7 +14,7 @@
  * buffered without loss until they are read.
  */
 
-import { nanoid } from 'nanoid';
+import { newId } from '../utils/id';
 import type { GenerateOptions, GenerateResult, LLMProvider } from '../providers';
 import type { ExecuteOptions, ExecutionEvent, ExecutionResult } from './AgentExecutor';
 import type { PendingApproval } from './ApprovalGate';
@@ -140,7 +140,7 @@ function toJsonValue(value: unknown): unknown {
 type MeasuredStep = { finishReason: GenerateResult['finishReason']; usage: Usage; estimated: boolean; costUsd?: number };
 
 class AgentRunImpl implements AgentRun {
-  readonly runId = nanoid();
+  readonly runId = newId();
   readonly result: Promise<ExecutionResult>;
   private readonly controller = new AbortController();
   private readonly queue: AgentEvent[] = [];

src/execution/tracing.ts

@@ -10,7 +10,7 @@
  * for a console bridge and a real OTel bridge.
  */
 
-import { nanoid } from 'nanoid';
+import { newId } from '../utils/id';
 import { ErrorAttr, LegacyAttr } from './semconv';
 
 /** OpenTelemetry span kind, for the kinds this SDK emits. */
@@ -90,7 +90,7 @@ export async function withSpan<T>(
   kind?: SpanKind
 ): Promise<T> {
   const span: Span = {
-    id: nanoid(),
+    id: newId(),
     name,
     attributes,
     startTime: Date.now(),

src/flows/FlowBuilder.ts

@@ -1,4 +1,4 @@
-import { nanoid } from 'nanoid';
+import { newId } from '../utils/id';
 import { EditorStep, AgentFlow, FlowInputVariable } from '../types';
 
 /** Throw on the first input variable with a missing or duplicate name. */
@@ -107,7 +107,7 @@ export class FlowBuilder {
     this.validate();
 
     return {
-      id: this.flow.id || nanoid(),
+      id: this.flow.id || newId(),
       code: this.flow.code!,
       name: this.flow.name!,
       description: this.flow.description,