@elevasis/sdk 1.47.0 → 1.49.0

package/dist/test-utils/index.js

@@ -4102,6 +4102,34 @@ function detectCycle(visited, executionPath, currentStepId) {
     });
   }
 }
+function validateWorkflowGraph(steps, entryPoint, workflowId) {
+  const onPath = /* @__PURE__ */ new Set();
+  const executionPath = [];
+  const reached = /* @__PURE__ */ new Set();
+  const walk = (stepId) => {
+    detectCycle(onPath, executionPath, stepId);
+    onPath.add(stepId);
+    executionPath.push(stepId);
+    reached.add(stepId);
+    const step = steps[stepId];
+    if (step && step.next !== null) {
+      const targets = step.next.type === StepType.LINEAR ? [step.next.target] : [...step.next.routes.map((route) => route.target), step.next.default];
+      for (const target of targets) {
+        if (target in steps) walk(target);
+      }
+    }
+    executionPath.pop();
+    onPath.delete(stepId);
+  };
+  if (entryPoint in steps) walk(entryPoint);
+  const orphanIds = Object.keys(steps).filter((id) => !reached.has(id));
+  if (orphanIds.length > 0) {
+    throw new WorkflowValidationError(
+      `Workflow '${workflowId}' has step(s) unreachable from entry point '${entryPoint}': ${orphanIds.join(", ")}`,
+      { workflowId, entryPoint, orphanIds }
+    );
+  }
+}
 function validateTerminalOutput(stepId, output, outputSchema) {
   if (!outputSchema) {
     return;
@@ -4627,6 +4655,12 @@ function buildReasoningRequest(iterationContext) {
     capabilities
   };
 }
+
+// ../core/src/execution/engine/llm/types.ts
+function extractMessageText(content2) {
+  if (typeof content2 === "string") return content2;
+  return content2.filter((part) => part.type === "text").map((part) => part.text).join("\n");
+}
 var ToolCallActionSchema = z.object({
   type: z.literal("tool-call"),
   id: z.string().optional(),
@@ -4706,6 +4740,19 @@ var GPT5ConfigSchema = z.object({
   topP: z.number().min(0).max(1).optional(),
   modelOptions: GPT5OptionsSchema.optional()
 });
+var GPT56OptionsSchema = z.object({
+  reasoning_effort: z.enum(["none", "low", "medium", "high", "xhigh", "max"]).optional(),
+  verbosity: z.enum(["low", "medium", "high"]).optional()
+});
+var GPT56ConfigSchema = z.object({
+  model: z.enum(["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"]),
+  provider: z.enum(["openai"]),
+  apiKey: z.string(),
+  temperature: z.literal(1).optional(),
+  maxOutputTokens: z.number().min(4e3).optional(),
+  topP: z.number().min(0).max(1).optional(),
+  modelOptions: GPT56OptionsSchema.optional()
+});
 var MockConfigSchema = z.object({
   model: z.enum(["mock"]),
   provider: z.enum(["mock"]),
@@ -4758,9 +4805,12 @@ var AnthropicConfigSchema = z.discriminatedUnion("model", [
   AnthropicClaude5ConfigSchema,
   AnthropicStandardConfigSchema
 ]);
+var GPT56_CACHE_READ_RATE_MULTIPLIER = 0.1;
+var CACHE_CREATION_RATE_MULTIPLIER = 1.25;
 var MODEL_INFO = {
   // OpenAI GPT-5 (Reasoning Models)
   "gpt-5": {
+    provider: "openai",
     inputCostPer1M: 125,
     // $1.25 per 1M tokens
     outputCostPer1M: 1e3,
@@ -4774,6 +4824,7 @@ var MODEL_INFO = {
     configSchema: GPT5ConfigSchema
   },
   "gpt-5.4-mini": {
+    provider: "openai",
     inputCostPer1M: 75,
     // $0.75 per 1M tokens
     outputCostPer1M: 450,
@@ -4787,6 +4838,7 @@ var MODEL_INFO = {
     configSchema: GPT5ConfigSchema
   },
   "gpt-5.4-nano": {
+    provider: "openai",
     inputCostPer1M: 20,
     // $0.20 per 1M tokens
     outputCostPer1M: 125,
@@ -4798,8 +4850,60 @@ var MODEL_INFO = {
     category: "standard",
     configSchema: GPT5ConfigSchema
   },
+  // OpenAI GPT-5.6 family (GA 2026-07-09). All three tiers share 1.05M context, 128K max output,
+  // image input, tool use, structured outputs, and prompt caching -- they differ in reasoning depth
+  // and price, not capability. The bare `gpt-5.6` alias is deliberately unregistered; see OpenAIModel.
+  "gpt-5.6-sol": {
+    provider: "openai",
+    inputCostPer1M: 500,
+    // $5.00 per 1M tokens
+    outputCostPer1M: 3e3,
+    // $30.00 per 1M tokens
+    minTokens: 4e3,
+    recommendedTokens: 8e3,
+    maxTokens: 105e4,
+    // 1.05M context window
+    maxOutputTokens: 128e3,
+    category: "reasoning",
+    configSchema: GPT56ConfigSchema,
+    cacheReadRateMultiplier: GPT56_CACHE_READ_RATE_MULTIPLIER,
+    cacheCreationRateMultiplier: CACHE_CREATION_RATE_MULTIPLIER
+  },
+  "gpt-5.6-terra": {
+    provider: "openai",
+    inputCostPer1M: 250,
+    // $2.50 per 1M tokens
+    outputCostPer1M: 1500,
+    // $15.00 per 1M tokens
+    minTokens: 4e3,
+    recommendedTokens: 8e3,
+    maxTokens: 105e4,
+    // 1.05M context window
+    maxOutputTokens: 128e3,
+    category: "standard",
+    configSchema: GPT56ConfigSchema,
+    cacheReadRateMultiplier: GPT56_CACHE_READ_RATE_MULTIPLIER,
+    cacheCreationRateMultiplier: CACHE_CREATION_RATE_MULTIPLIER
+  },
+  "gpt-5.6-luna": {
+    provider: "openai",
+    inputCostPer1M: 100,
+    // $1.00 per 1M tokens
+    outputCostPer1M: 600,
+    // $6.00 per 1M tokens
+    minTokens: 4e3,
+    recommendedTokens: 8e3,
+    maxTokens: 105e4,
+    // 1.05M context window
+    maxOutputTokens: 128e3,
+    category: "standard",
+    configSchema: GPT56ConfigSchema,
+    cacheReadRateMultiplier: GPT56_CACHE_READ_RATE_MULTIPLIER,
+    cacheCreationRateMultiplier: CACHE_CREATION_RATE_MULTIPLIER
+  },
   // Mock model for testing
   mock: {
+    provider: "mock",
     inputCostPer1M: 0,
     // Free for tests
     outputCostPer1M: 0,
@@ -4813,6 +4917,7 @@ var MODEL_INFO = {
   },
   // OpenRouter Models (via openrouter.ai)
   "openrouter/z-ai/glm-5": {
+    provider: "openrouter",
     inputCostPer1M: 72,
     // $0.72 per 1M tokens
     outputCostPer1M: 230,
@@ -4826,6 +4931,7 @@ var MODEL_INFO = {
   },
   // Anthropic Claude Models (direct SDK access via @anthropic-ai/sdk)
   "claude-opus-5": {
+    provider: "anthropic",
     inputCostPer1M: 500,
     // $5.00 per 1M tokens
     outputCostPer1M: 2500,
@@ -4839,6 +4945,7 @@ var MODEL_INFO = {
     configSchema: AnthropicConfigSchema
   },
   "claude-sonnet-5": {
+    provider: "anthropic",
     // List pricing. An introductory rate of $2.00/$10.00 runs through 2026-08-31; encoding the
     // temporary rate would make historical cost analytics wrong once it lapses.
     inputCostPer1M: 300,
@@ -4854,6 +4961,7 @@ var MODEL_INFO = {
     configSchema: AnthropicConfigSchema
   },
   "claude-haiku-4-5-20251001": {
+    provider: "anthropic",
     inputCostPer1M: 100,
     // $1.00 per 1M tokens
     outputCostPer1M: 500,
@@ -4867,6 +4975,7 @@ var MODEL_INFO = {
     configSchema: AnthropicConfigSchema
   },
   "claude-haiku-4-5": {
+    provider: "anthropic",
     inputCostPer1M: 100,
     // $1.00 per 1M tokens
     outputCostPer1M: 500,
@@ -4886,7 +4995,7 @@ function getModelInfo(model) {
     return MODEL_INFO[model];
   }
   for (const knownModel of MODEL_KEYS_BY_SPECIFICITY) {
-    if (model.startsWith(knownModel)) {
+    if (model.startsWith(`${knownModel}-`)) {
       return MODEL_INFO[knownModel];
     }
   }
@@ -5257,7 +5366,9 @@ async function callLLMForAgentIteration(adapter, request) {
     message: request.capabilities.message,
     memoryOps: request.capabilities.memoryOps,
     historyTurns: request.conversationHistory?.length ?? 0,
-    messages: messages.map((m2) => ({ role: m2.role, ...preview(m2.content) }))
+    // `preview` reads text; `extractMessageText` is the identity function for the plain-string case
+    // this always was, and drops image parts (nothing to preview) rather than stringify them.
+    messages: messages.map((m2) => ({ role: m2.role, ...preview(extractMessageText(m2.content)) }))
   });
   let acceptedOutput;
   const response = await adapter.generate({
@@ -5280,7 +5391,10 @@ async function callLLMForAgentIteration(adapter, request) {
       // Same text the real request was billed for -- `estimateTokens`'s bias is a property of the
       // heuristic itself, not of which text it measures, so this is what calibrates the correction
       // `MemoryManager` applies to its own (much smaller) slice of the same request.
-      estimatedRequestTokens: estimateTokens(messages.map((m2) => m2.content).join(""))
+      // Same text-only reasoning as the `preview` call above -- an image part contributes no text
+      // tokens to this estimate (the real request's image token cost is a separate, provider-billed
+      // line item this heuristic was never calibrated against).
+      estimatedRequestTokens: estimateTokens(messages.map((m2) => extractMessageText(m2.content)).join(""))
     };
   } catch (error) {
     flowLog("agent.iteration.validationFailed", {
@@ -5318,7 +5432,7 @@ async function callLLMForAgentCompletion(adapter, request) {
   return {
     output: response.output,
     usage: response.usage,
-    estimatedRequestTokens: estimateTokens(messages.map((m2) => m2.content).join(""))
+    estimatedRequestTokens: estimateTokens(messages.map((m2) => extractMessageText(m2.content)).join(""))
   };
 }
 
@@ -8541,6 +8655,8 @@ createAdapter("acqDb", [
   "addCompaniesToList",
   "updateCompanyStage",
   "updateContactStage",
+  "clearCompanyStages",
+  "clearContactStages",
   // Company operations
   "createCompany",
   "upsertCompany",
@@ -8567,6 +8683,8 @@ createAdapter("acqDb", [
   "getDealById",
   "getContactById",
   "getCompanyById",
+  "listDeals",
+  "getDealPipelineAnalytics",
   // Deal transitions
   "updateDiscoveryData",
   "updateProposalData",
@@ -8644,6 +8762,8 @@ createAdapter("list", [
   "recordExecution",
   "updateCompanyStage",
   "updateContactStage",
+  "clearCompanyStages",
+  "clearContactStages",
   "listPendingCompanyIds",
   "listPendingContactIds"
 ]);
@@ -8661,6 +8781,10 @@ var METHODS = [
   "getItem",
   "listItems",
   "updateItem",
+  "addItemSourceAsset",
+  "removeItemSourceAsset",
+  "reorderItemSourceAssets",
+  "updateItemSourceAsset",
   "createAttempt",
   "listAttempts",
   "updateAttempt",
@@ -8668,6 +8792,8 @@ var METHODS = [
   "getSourceAsset",
   "listSourceAssets",
   "updateSourceAsset",
+  "getDistribution",
+  "listDistributions",
   "createDistribution",
   "updateDistribution"
 ];
@@ -8728,44 +8854,64 @@ var OntologyRecordBaseSchema = z.object({
 }).passthrough();
 var OntologyObjectTypeSchema = OntologyRecordBaseSchema.extend({
   properties: z.record(z.string().trim().min(1).max(200), z.unknown()).optional(),
-  storage: z.record(z.string(), z.unknown()).optional()
-});
+  storage: z.record(z.string(), z.unknown()).optional(),
+  // Carried by the legacy entity projection (`addLegacyEntityProjections`); not
+  // authored directly, but a real key an authored record must not collide with.
+  rowSchema: z.string().trim().min(1).optional(),
+  stateCatalogId: z.string().trim().min(1).optional()
+}).strict();
 var OntologyLinkTypeSchema = OntologyRecordBaseSchema.extend({
   from: OntologyIdSchema,
   to: OntologyIdSchema,
   cardinality: z.string().trim().min(1).max(80).optional(),
   via: z.string().trim().min(1).max(255).optional()
-});
+}).strict();
 var OntologyActionTypeSchema = OntologyRecordBaseSchema.extend({
   actsOn: OntologyReferenceListSchema,
   input: z.record(z.string().trim().min(1).max(200), z.unknown()).optional(),
-  effects: z.array(z.record(z.string(), z.unknown())).optional()
-});
+  effects: z.array(z.record(z.string(), z.unknown())).optional(),
+  resourceId: z.string().trim().min(1).optional(),
+  invocations: z.array(z.unknown()).optional(),
+  lifecycle: z.string().trim().min(1).optional(),
+  // Carried by the legacy action projection (`addLegacyActionProjections`); not
+  // authored directly, but a real key an authored record must not collide with.
+  legacyActionId: z.string().trim().min(1).optional()
+}).strict();
 var OntologyCatalogTypeSchema = OntologyRecordBaseSchema.extend({
   kind: z.string().trim().min(1).max(120).optional(),
   appliesTo: OntologyIdSchema.optional(),
-  entries: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
-});
+  entries: z.record(z.string().trim().min(1).max(200), z.unknown()).optional(),
+  // Carried by lead-gen's legacy stage-catalog projection
+  // (`createLeadGenStageCatalog`); not authored directly, but a real key an
+  // authored record must not collide with.
+  legacyCatalogKey: z.string().trim().min(1).optional(),
+  // Carried in live tenant configs (Elevasis, `nirvana-marketing`, and the
+  // `_template` scaffold all author these on `sales.crm:catalog/crm.pipeline`)
+  // as a cross-reference to the pre-ontology CRM pipeline key/entity id. No
+  // code currently reads them back — do not silently normalize them away.
+  legacyPipelineKey: z.string().trim().min(1).optional(),
+  legacyEntityKey: z.string().trim().min(1).optional()
+}).strict();
 var OntologyEventTypeSchema = OntologyRecordBaseSchema.extend({
   payload: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
-});
+}).strict();
 var OntologyInterfaceTypeSchema = OntologyRecordBaseSchema.extend({
   properties: z.record(z.string().trim().min(1).max(200), z.unknown()).optional()
-});
+}).strict();
 var OntologyValueTypeSchema = OntologyRecordBaseSchema.extend({
   primitive: z.string().trim().min(1).max(120).optional()
-});
+}).strict();
 var OntologySharedPropertySchema = OntologyRecordBaseSchema.extend({
   valueType: OntologyIdSchema.optional(),
   searchable: z.boolean().optional(),
   pii: z.boolean().optional()
-});
+}).strict();
 var OntologyGroupSchema = OntologyRecordBaseSchema.extend({
   members: OntologyReferenceListSchema
-});
+}).strict();
 var OntologyEndpointTypeSchema = OntologyRecordBaseSchema.extend({
   route: z.string().trim().min(1).max(500).optional()
-});
+}).strict();
 var OntologyScopeSchema = z.object({
   objectTypes: z.record(OntologyIdSchema, OntologyObjectTypeSchema).default({}).optional(),
   linkTypes: z.record(OntologyIdSchema, OntologyLinkTypeSchema).default({}).optional(),
@@ -8777,7 +8923,7 @@ var OntologyScopeSchema = z.object({
   sharedProperties: z.record(OntologyIdSchema, OntologySharedPropertySchema).default({}).optional(),
   groups: z.record(OntologyIdSchema, OntologyGroupSchema).default({}).optional(),
   endpoints: z.record(OntologyIdSchema, OntologyEndpointTypeSchema).default({}).optional()
-}).default({});
+}).strict().default({});
 var SCOPE_KIND = {
   objectTypes: "object",
   linkTypes: "link",
@@ -9030,29 +9176,45 @@ var SystemUiSchema = z.object({
   path: PathSchema,
   surfaces: ReferenceIdsSchema,
   icon: IconNameSchema.optional()
-});
+}).strict();
 var SystemInterfaceKeySchema = ModelIdSchema;
 var SystemInterfaceLifecycleSchema = z.enum(["draft", "active", "disabled", "deprecated", "archived"]).meta({ label: "System interface lifecycle", color: "teal" });
 var SYSTEM_INTERFACE_PROFILES = [
   {
     systemPath: "sales.lead-gen",
     interfaceKey: "api",
-    readinessProfile: "sales.lead-gen.api"
+    readinessProfile: "sales.lead-gen.api",
+    validation: "built-in"
   },
   {
     systemPath: "sales.crm",
     interfaceKey: "api",
-    readinessProfile: "sales.crm.api"
+    readinessProfile: "sales.crm.api",
+    validation: "built-in"
   },
   {
     systemPath: "sales.lead-gen",
     interfaceKey: "crm-handoff",
-    readinessProfile: "sales.lead-gen.crm-handoff"
+    readinessProfile: "sales.lead-gen.crm-handoff",
+    validation: "built-in"
+  },
+  {
+    // Gated by `CONTENT_API_INTERFACE` in `apps/api/src/business/content/organization-model.ts`,
+    // which every `/api/content/*` and `/api/external/content/*` route asserts. Contract-validated
+    // rather than built-in because the required step catalog is per-adopter: Elevasis declares
+    // `content:catalog/long-form-to-shorts-steps`, a tenant declares its own.
+    systemPath: "content",
+    interfaceKey: "api",
+    readinessProfile: "content.api",
+    validation: "contract"
   }
 ];
-var SYSTEM_INTERFACE_READINESS_PROFILES = SYSTEM_INTERFACE_PROFILES.map(
+SYSTEM_INTERFACE_PROFILES.map(
   (profile) => profile.readinessProfile
 );
+var BUILT_IN_VALIDATED_PROFILE_IDS = SYSTEM_INTERFACE_PROFILES.filter(
+  (profile) => profile.validation === "built-in"
+).map((profile) => profile.readinessProfile);
 var SystemInterfaceReadinessProfileSchema = z.string().trim().min(1);
 var SystemInterfaceResourceScopeSchema = z.array(ModelIdSchema).default([]);
 var SystemApiInterfaceReadinessContractSchema = z.object({
@@ -9090,7 +9252,7 @@ var SystemApiInterfaceSchema = z.object({
   readinessContract: SystemApiInterfaceReadinessContractSchema.optional()
 }).strict();
 function isReservedPlatformProfileId(profileId) {
-  return SYSTEM_INTERFACE_READINESS_PROFILES.includes(profileId);
+  return BUILT_IN_VALIDATED_PROFILE_IDS.includes(profileId);
 }
 function isBuiltInReadinessProfile(profileId) {
   return isReservedPlatformProfileId(profileId) || getBuiltInReadinessProfile(profileId) !== void 0;
@@ -9705,11 +9867,12 @@ var PROVIDER_DIALECTS = {
 
 // ../core/src/platform/registry/validation.ts
 var RegistryValidationError = class extends Error {
-  constructor(orgName, resourceId, field, message) {
+  constructor(orgName, resourceId, field, message, issues) {
     super(message);
     this.orgName = orgName;
     this.resourceId = resourceId;
     this.field = field;
+    this.issues = issues;
     this.name = "RegistryValidationError";
   }
 };
@@ -9730,7 +9893,14 @@ function emitGovernanceIssues(issues, mode, onWarning) {
   if (issues.length === 0) return;
   if (mode === "strict") {
     const first = issues[0];
-    throw new RegistryValidationError(first.orgName, first.resourceId, "organizationModel.resources", first.message);
+    const messages = issues.map((issue) => issue.message);
+    throw new RegistryValidationError(
+      first.orgName,
+      first.resourceId,
+      "organizationModel.resources",
+      messages.join("\n"),
+      messages
+    );
   }
   const warn = onWarning ?? ((issue) => console.warn(issue.message));
   for (const issue of issues) {
@@ -9891,7 +10061,7 @@ function addTopologyIssues(issues, orgName, deployment, organizationModel, syste
     if (ref.kind === "humanCheckpoint") return humanCheckpointIds.has(ref.id);
     if (ref.kind === "externalResource") return externalResourceIds.has(ref.id);
     if (ref.kind === "ontology") {
-      if (ontologyIndex === void 0) return true;
+      if (ontologyIndex === void 0) return false;
       return Object.values(ontologyIndex).some((records) => records[ref.id] !== void 0);
     }
     return false;
@@ -10049,7 +10219,8 @@ function addSystemInterfaceIssue(issues, orgName, systemPath, interfaceKey, issu
     message: `[${orgName}] ${issue.family}:${issue.code}: ${issue.message}`
   });
 }
-function validateDeclaredSystemInterfaceReadiness(orgName, organizationModel) {
+function validateDeclaredSystemInterfaceReadiness(orgName, organizationModel, options = {}) {
+  const mode = getResourceValidatorMode(options.mode);
   const issues = [];
   if (organizationModel === void 0) return { valid: true, issues };
   const model = organizationModel;
@@ -10075,17 +10246,27 @@ function validateDeclaredSystemInterfaceReadiness(orgName, organizationModel) {
     }
   }
   if (issues.length > 0) {
-    const first = issues[0];
-    throw new RegistryValidationError(
-      first.orgName,
-      `${first.systemPath}/${first.interfaceKey}`,
-      first.path ?? "organizationModel.systems.apiInterface",
-      first.message
-    );
+    if (mode === "strict") {
+      const first = issues[0];
+      const messages = issues.map((issue) => issue.message);
+      throw new RegistryValidationError(
+        first.orgName,
+        `${first.systemPath}/${first.interfaceKey}`,
+        first.path ?? "organizationModel.systems.apiInterface",
+        messages.join("\n"),
+        messages
+      );
+    }
+    const warn = options.onWarning ?? ((issue) => console.warn(issue.message));
+    for (const issue of issues) {
+      warn(issue);
+    }
+    return { valid: false, issues };
   }
   return { valid: true, issues };
 }
-function validateDeploymentSpec(orgName, resources) {
+function validateDeploymentSpec(orgName, resources, options = {}) {
+  const warn = options.onWarning ?? ((message) => console.warn(message));
   const seenIds = /* @__PURE__ */ new Set();
   resources.workflows?.forEach((workflow) => {
     const id = workflow.config.resourceId;
@@ -10104,6 +10285,14 @@ function validateDeploymentSpec(orgName, resources) {
     if (workflow.interface) {
       validateExecutionInterface(orgName, id, workflow.interface, workflow.contract.inputSchema);
     }
+    try {
+      validateEntryPoint(workflow.steps, workflow.entryPoint);
+      validateTerminalSteps(workflow.steps, id);
+      validateStepReferences(workflow.steps);
+      validateWorkflowGraph(workflow.steps, workflow.entryPoint, id);
+    } catch (error) {
+      warn(`[${orgName}] Workflow '${id}' graph validation: ${error instanceof Error ? error.message : String(error)}`);
+    }
   });
   resources.agents?.forEach((agent) => {
     const id = agent.config.resourceId;
@@ -10117,14 +10306,20 @@ function validateDeploymentSpec(orgName, resources) {
     }
     seenIds.add(id);
     validateResourceModelConfig(orgName, id, agent.modelConfig);
-    validateAgentGrammar(orgName, id, agent);
-    validateAgentCheapAssertions(orgName, id, agent);
+    validateAgentGrammar(orgName, id, agent, options.mode);
+    validateAgentCheapAssertions(orgName, id, agent, options.mode);
     if (agent.interface) {
       validateExecutionInterface(orgName, id, agent.interface, agent.contract.inputSchema);
     }
   });
-  validateResourceGovernance(orgName, resources);
-  validateDeclaredSystemInterfaceReadiness(orgName, resources.organizationModel);
+  validateResourceGovernance(orgName, resources, void 0, {
+    mode: options.mode,
+    onWarning: (issue) => warn(issue.message)
+  });
+  validateDeclaredSystemInterfaceReadiness(orgName, resources.organizationModel, {
+    mode: options.mode,
+    onWarning: (issue) => warn(issue.message)
+  });
 }
 function validateResourceModelConfig(orgName, resourceId, modelConfig) {
   try {
@@ -10199,7 +10394,7 @@ function describeGrammarRefusal(reasons, toolInputSchema) {
   }
   return `refused strict mode: ${reasons.join(", ")}`;
 }
-function validateAgentGrammar(orgName, agentId, agent) {
+function validateAgentGrammar(orgName, agentId, agent, mode) {
   const dialect = dialectForProvider(agent.modelConfig.provider);
   if (!dialect) return;
   const capabilities = agentCapabilitiesForGrammarCheck(agent.config);
@@ -10220,12 +10415,12 @@ function validateAgentGrammar(orgName, agentId, agent) {
     compileSchema(offending.inputSchema, dialect).refusalReasons,
     offending.inputSchema
   )}. This silently drops strict-mode enforcement for the agent's ENTIRE iteration schema on every call, not just this tool -- compileSchema refuses whole-schema, never per-tool.` : `[${orgName}] Agent '${agentId}' iteration schema refused strict mode for provider '${agent.modelConfig.provider}': ${compiled.refusalReasons.join(", ")}. No single tool is independently responsible -- this is a whole-schema limit (e.g. total optional properties across every tool exceeding the provider's cap).`;
-  if (getResourceValidatorMode() === "strict") {
+  if (getResourceValidatorMode(mode) === "strict") {
     throw new RegistryValidationError(orgName, agentId, "tools", message);
   }
   console.warn(message);
 }
-function validateAgentCheapAssertions(orgName, agentId, agent) {
+function validateAgentCheapAssertions(orgName, agentId, agent, mode) {
   const issues = [];
   const config2 = agent.config;
   if (config2.sessionCapable && config2.securityLevel === "none") {
@@ -10255,7 +10450,7 @@ function validateAgentCheapAssertions(orgName, agentId, agent) {
   }
   if (issues.length === 0) return;
   const message = `[${orgName}] Agent '${agentId}': ${issues.join(" ")}`;
-  if (getResourceValidatorMode() === "strict") {
+  if (getResourceValidatorMode(mode) === "strict") {
     throw new RegistryValidationError(orgName, agentId, "config", message);
   }
   console.warn(message);
@@ -10716,6 +10911,16 @@ function startWorker(org) {
           // real tier rather than silently passing on an absent one.
           systemPrompt: a3.config.systemPrompt,
           securityLevel: a3.config.securityLevel,
+          // Wave 2b / Decision 2: redacted model config (no `apiKey`) so the platform can re-run
+          // `validateAgentGrammar` and the token-floor check against what the org actually deployed
+          // instead of only ever seeing the platform's own placeholder stub config. `apiKey` is
+          // deliberately excluded -- this manifest crosses into apps/api's process and is logged.
+          modelConfig: a3.modelConfig ? {
+            model: a3.modelConfig.model,
+            provider: a3.modelConfig.provider,
+            temperature: a3.modelConfig.temperature,
+            maxOutputTokens: a3.modelConfig.maxOutputTokens
+          } : void 0,
           status: a3.config.status,
           description: a3.config.description,
           version: a3.config.version,
@@ -27635,6 +27840,8 @@ var mockAcqDb = (overrides) => createMockAdapter(
     "addCompaniesToList",
     "updateCompanyStage",
     "updateContactStage",
+    "clearCompanyStages",
+    "clearContactStages",
     "createCompany",
     "upsertCompany",
     "updateCompany",
@@ -27658,6 +27865,8 @@ var mockAcqDb = (overrides) => createMockAdapter(
     "getDealById",
     "getContactById",
     "getCompanyById",
+    "listDeals",
+    "getDealPipelineAnalytics",
     "updateDiscoveryData",
     "updateProposalData",
     "markProposalSent",
@@ -27734,6 +27943,8 @@ var mockList = (overrides) => createMockAdapter(
     "recordExecution",
     "updateCompanyStage",
     "updateContactStage",
+    "clearCompanyStages",
+    "clearContactStages",
     "listPendingCompanyIds",
     "listPendingContactIds"
   ],
@@ -27746,6 +27957,10 @@ var mockContent = (overrides) => createMockAdapter(
     "getItem",
     "listItems",
     "updateItem",
+    "addItemSourceAsset",
+    "removeItemSourceAsset",
+    "reorderItemSourceAssets",
+    "updateItemSourceAsset",
     "createAttempt",
     "listAttempts",
     "updateAttempt",
@@ -27753,6 +27968,8 @@ var mockContent = (overrides) => createMockAdapter(
     "getSourceAsset",
     "listSourceAssets",
     "updateSourceAsset",
+    "getDistribution",
+    "listDistributions",
     "createDistribution",
     "updateDistribution"
   ],
@@ -27780,7 +27997,20 @@ var createMockAttio = (_credential, overrides) => createMockAdapter(
   overrides
 );
 var createMockApify = (_credential, overrides) => createMockAdapter(["runActor", "getDatasetItems", "startActor"], overrides);
-var createMockDropbox = (_credential, overrides) => createMockAdapter(["uploadFile", "createFolder"], overrides);
+var createMockDropbox = (_credential, overrides) => createMockAdapter(
+  [
+    "uploadFile",
+    "createFolder",
+    "listFolder",
+    "getMetadata",
+    "getTemporaryLink",
+    "createSharedLink",
+    "download",
+    "getThumbnail",
+    "getThumbnailBatch"
+  ],
+  overrides
+);
 var createMockGmail = (_credential, overrides) => createMockAdapter(["sendEmail"], overrides);
 var createMockGoogleSheets = (_credential, overrides) => createMockAdapter(
   [