@runtypelabs/cli 2.16.4 → 2.16.6

package/dist/index.js

@@ -15732,6 +15732,865 @@ var productConfigurationSummarySchema = external_exports.object({
 var ORGANIZATION_INTEGRATION_PROVIDERS = ["slack", "telegram", "discord", "linear", "github"];
 var integrationProviderSchema = external_exports.enum(ORGANIZATION_INTEGRATION_PROVIDERS);
 var integrationStatusSchema = external_exports.enum(["active", "revoked", "pending"]);
+var FILTER_OPERATORS = [
+  "eq",
+  "neq",
+  "gt",
+  "gte",
+  "lt",
+  "lte",
+  "between",
+  "contains",
+  "startsWith",
+  "endsWith",
+  "in",
+  "notIn",
+  "isSet",
+  "isNotSet",
+  "isTrue",
+  "isFalse",
+  "withinLastDays",
+  "olderThanDays"
+];
+var FIELD_NAME_RE = /^[a-zA-Z0-9_][a-zA-Z0-9_.-]{0,63}$/;
+var filterFieldSchema = external_exports.string().regex(FIELD_NAME_RE, "Invalid field name");
+var recordFilterConditionSchema = external_exports.object({
+  field: filterFieldSchema,
+  op: external_exports.enum(FILTER_OPERATORS),
+  value: external_exports.unknown().optional()
+});
+var recordFilterGroupSchema = external_exports.lazy(
+  () => external_exports.object({
+    op: external_exports.enum(["and", "or"]),
+    conditions: external_exports.array(external_exports.union([recordFilterConditionSchema, recordFilterGroupSchema])).min(1).max(50)
+  })
+);
+var recordFilterSchema = external_exports.object({
+  type: external_exports.string().min(1).max(255),
+  where: external_exports.union([recordFilterConditionSchema, recordFilterGroupSchema]).optional()
+});
+var MCPServerCategory = {
+  COMMUNICATION: "communication",
+  PRODUCTIVITY: "productivity",
+  DEVELOPMENT: "development",
+  PROJECT_MANAGEMENT: "project_management"
+};
+var agentSubagentConfigSchema = external_exports.object({
+  /**
+   * Pool of tool IDs the parent is permitted to grant to ad-hoc subagents.
+   * Supports exact IDs, wildcards (`mcp:*`, `builtin:*`, `platform:*`), and
+   * runtime-tool names. Must be a SUBSET of the parent's resolved tools —
+   * validated at dispatch (no privilege escalation).
+   */
+  toolPool: external_exports.array(external_exports.string()),
+  /** Default for spawned subagent loops. Default 5. */
+  defaultMaxTurns: external_exports.number().optional(),
+  /** Hard cap a spawned subagent can request. Default 10. */
+  maxTurnsLimit: external_exports.number().optional(),
+  /** Hard ceiling on total spawns per top-level parent invocation. Default 5. */
+  maxSpawnsPerRun: external_exports.number().optional(),
+  /** Default model for spawned subagents. Defaults to parent's model. */
+  defaultModel: external_exports.string().optional(),
+  /**
+   * Whether a spawned subagent can itself spawn subagents. Default `false`
+   * (Anthropic-aligned). Even when `true`, MAX_NESTED_DEPTH still bounds the
+   * recursion tree.
+   */
+  allowNesting: external_exports.boolean().optional(),
+  /** Default per-spawn timeout. Default 300_000 (5 min). */
+  defaultTimeoutMs: external_exports.number().optional()
+});
+var codeModeConfigSchema = external_exports.object({
+  /** Tool IDs available in the sandbox (subset of agent's tools, supports wildcards like `mcp:*`) */
+  toolPool: external_exports.array(external_exports.string()),
+  /** Optional custom description prefix for the synthesized tool */
+  description: external_exports.string().optional(),
+  /** Sandbox execution timeout in ms (default 60000) */
+  timeoutMs: external_exports.number().optional()
+});
+var toolLimitSchema = external_exports.object({
+  maxCalls: external_exports.number().optional(),
+  required: external_exports.boolean().optional()
+});
+var approvalConfigSchema = external_exports.object({
+  /** Tools that require user approval before execution.
+   *  string[]: tool names/patterns ("send_email", "mcp:*", "builtin:*")
+   *  true: all tools require approval
+   *  false/undefined: no approval required (default) */
+  require: external_exports.union([external_exports.array(external_exports.string()), external_exports.boolean()]).optional(),
+  /** Timeout in ms for approval response (default: 300000 = 5 min) */
+  timeout: external_exports.number().optional()
+});
+var toolSearchConfigSchema = external_exports.object({
+  /** Explicit opt-in/out. When omitted, auto-activates if tool count >= threshold. */
+  enabled: external_exports.boolean().optional(),
+  /** Tool count at which search activates (default: 20) */
+  threshold: external_exports.number().optional(),
+  /** Tool names or IDs that should always be in the hot set */
+  alwaysLoaded: external_exports.array(external_exports.string()).optional()
+});
+var agentToolsConfigSchema = external_exports.object({
+  /** IDs of tools to enable (builtin:*, mcp:*, platform:*, platform:orthogonal:*, custom tool IDs) */
+  toolIds: external_exports.array(external_exports.string()).optional(),
+  /** Per-tool parameter configurations, keyed by tool ID */
+  toolConfigs: external_exports.record(external_exports.string(), external_exports.custom()).optional(),
+  /** Inline tool definitions (no DB storage needed) */
+  runtimeTools: external_exports.array(external_exports.custom()).optional(),
+  /** Runtime MCP server connections */
+  mcpServers: external_exports.array(external_exports.custom()).optional(),
+  /** Maximum tool calls per execution (renamed from maxTurns in agents) */
+  maxToolCalls: external_exports.number().optional(),
+  /** Tool calling strategy */
+  toolCallStrategy: external_exports.enum(["auto", "required", "none"]).optional(),
+  /** Allow parallel tool execution */
+  parallelCalls: external_exports.boolean().optional(),
+  /** Per-tool call limits */
+  perToolLimits: external_exports.record(external_exports.string(), toolLimitSchema).optional(),
+  /** Human-in-the-loop approval configuration */
+  approval: approvalConfigSchema.optional(),
+  /**
+   * Opt-in: enables agent-driven dynamic subagent spawning. When set, the
+   * prompt-step tool-prep layer synthesizes a `spawn_subagent` tool into the
+   * AI-SDK tool list with a dynamically-generated description listing the
+   * tools the parent's LLM can grant. See `AgentSubagentConfig` for fields.
+   */
+  subagentConfig: agentSubagentConfigSchema.optional(),
+  /**
+   * Opt-in: enables a synthesized `code_mode` tool that lets agents execute
+   * JavaScript code in a sandboxed V8 isolate with access to a subset of
+   * the agent's tools. The LLM writes code that calls tool functions
+   * deterministically instead of making individual tool calls.
+   */
+  codeModeConfig: codeModeConfigSchema.optional(),
+  /**
+   * Tool search configuration. When total tool count exceeds the threshold,
+   * deferred loading activates: only a "hot set" of tools is sent to the model
+   * each turn, and a synthetic `tool_search` meta-tool lets the model discover
+   * and load additional tools on demand.
+   *
+   * Auto-activates when omitted and total tool count >= 20.
+   * Set `enabled: false` to force all tools to be sent regardless of count.
+   */
+  toolSearch: toolSearchConfigSchema.optional()
+});
+var CreateToolSchema = external_exports.object({
+  name: external_exports.string().min(1).max(100),
+  description: external_exports.string().min(1).max(500),
+  toolType: external_exports.enum(["flow", "custom", "external", "graphql", "mcp", "local", "subagent"]),
+  parametersSchema: external_exports.record(external_exports.string(), external_exports.any()),
+  config: external_exports.record(external_exports.string(), external_exports.any())
+});
+var ExecuteToolSchema = external_exports.object({
+  // toolId is redundant with the URL path param (/v1/tools/:id/execute) and optional
+  // so MCP/SDK callers that only send { parameters } aren't rejected at validation.
+  toolId: external_exports.string().optional(),
+  parameters: external_exports.record(external_exports.string(), external_exports.any()),
+  context: external_exports.object({
+    flowExecutionId: external_exports.string().optional(),
+    stepId: external_exports.string().optional(),
+    userId: external_exports.string()
+  }).optional()
+});
+var contextFallbackSchema = external_exports.union([
+  external_exports.object({ type: external_exports.literal("retry"), delay: external_exports.number().optional() }),
+  external_exports.object({
+    type: external_exports.literal("step"),
+    stepType: external_exports.string(),
+    stepConfig: external_exports.record(external_exports.string(), external_exports.unknown()),
+    delay: external_exports.number().optional()
+  }),
+  external_exports.object({
+    type: external_exports.literal("flow"),
+    flowId: external_exports.string(),
+    inputs: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+    delay: external_exports.number().optional()
+  })
+]);
+var contextErrorHandlingConfigSchema = external_exports.union([
+  external_exports.enum(["fail", "continue", "default"]),
+  external_exports.object({
+    onError: external_exports.enum(["fail", "continue", "fallback", "default"]),
+    fallbacks: external_exports.array(contextFallbackSchema).optional()
+  })
+]);
+var httpConfigSchema = external_exports.object({
+  url: external_exports.string().min(1, "URL is required"),
+  method: external_exports.enum(["GET", "POST", "PUT", "DELETE", "PATCH"]).optional(),
+  headers: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  body: external_exports.string().optional(),
+  timeout: external_exports.number().optional()
+});
+var authConfigSchema = external_exports.object({
+  type: external_exports.enum(["none", "bearer", "basic", "api-key", "custom"]),
+  token: external_exports.string().optional(),
+  username: external_exports.string().optional(),
+  password: external_exports.string().optional(),
+  apiKey: external_exports.string().optional(),
+  headerName: external_exports.string().optional(),
+  customHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional()
+});
+var pdfOptionsConfigSchema = external_exports.object({
+  format: external_exports.enum(["A4", "Letter"]).optional(),
+  landscape: external_exports.boolean().optional(),
+  margin: external_exports.object({
+    top: external_exports.string().optional(),
+    bottom: external_exports.string().optional(),
+    left: external_exports.string().optional(),
+    right: external_exports.string().optional()
+  }).optional()
+});
+var setVariableConfigSchema = external_exports.object({
+  variableName: external_exports.string().min(1, "Variable name is required"),
+  // The object branch is modeled as a record (rather than the historical
+  // `z.object({})`) so the inferred union keeps its primitive members distinct:
+  // a bare `{}` is a supertype of `string | number | boolean` and would absorb
+  // them, degrading `value` to `{}`. A record accepts exactly the same inputs as
+  // the prior `z.object({})` (any plain object, never an array or primitive).
+  //
+  // `null` is accepted: clearing a variable (`value: null`) is a legitimate
+  // idiom (commonly the "else" branch of a conditional — `draft_email = null`,
+  // `skip_label`, etc.). The runtime normalizer already permits it
+  // (`context-steps-normalizer.ts` rejects only `undefined`), and the executor
+  // sets the variable to `null` without issue; the schema was the only layer
+  // rejecting it. Required so nested set-variable steps validate when the
+  // recursive conditional union lands (see
+  // `docs/features/planning/2026-06-04-conditional-nested-step-strict-validation.md`).
+  value: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean(), external_exports.null(), external_exports.record(external_exports.string(), external_exports.unknown())]),
+  valueTemplate: external_exports.string().optional()
+});
+var sendStreamConfigSchema = external_exports.object({
+  message: external_exports.string().min(1, "Message is required")
+});
+var fetchGithubConfigSchema = external_exports.object({
+  repository: external_exports.string().min(1, "Repository is required"),
+  path: external_exports.string().optional(),
+  branch: external_exports.string().optional(),
+  token: external_exports.string().optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  contentType: external_exports.enum(["raw", "metadata", "both"]).optional(),
+  // Ingestor service configuration
+  includePatterns: external_exports.array(external_exports.string()).optional(),
+  excludePatterns: external_exports.array(external_exports.string()).optional(),
+  compress: external_exports.boolean().optional(),
+  style: external_exports.enum(["xml", "json", "markdown"]).optional()
+});
+var apiCallConfigSchema = external_exports.object({
+  http: httpConfigSchema,
+  auth: authConfigSchema.optional(),
+  requestTemplate: external_exports.string().optional(),
+  responseMapping: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var executeAgentConfigSchema = external_exports.object({
+  agentId: external_exports.string().min(1, "Agent ID is required"),
+  message: external_exports.string().min(1, "Message is required"),
+  outputVariable: external_exports.string().optional(),
+  variables: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  maxTurns: external_exports.number().int().positive().optional(),
+  timeout: external_exports.number().int().positive().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var firecrawlConfigSchema = external_exports.object({
+  formats: external_exports.array(external_exports.enum(["markdown", "html", "rawHtml", "screenshot", "links", "json"])).optional(),
+  actions: external_exports.array(
+    external_exports.object({
+      type: external_exports.enum(["click", "write", "press", "wait", "screenshot"]),
+      selector: external_exports.string().optional(),
+      text: external_exports.string().optional(),
+      key: external_exports.string().optional(),
+      milliseconds: external_exports.number().optional(),
+      fullPage: external_exports.boolean().optional()
+    })
+  ).optional(),
+  location: external_exports.object({
+    country: external_exports.string().optional(),
+    languages: external_exports.array(external_exports.string()).optional()
+  }).optional(),
+  maxAge: external_exports.number().optional(),
+  storeInCache: external_exports.boolean().optional(),
+  onlyMainContent: external_exports.boolean().optional(),
+  // The Firecrawl executor (`apps/api/src/lib/context-steps/firecrawl-fetch.ts`)
+  // accepts EITHER a JSON-schema object OR a JSON string it `JSON.parse`s at
+  // runtime — so the validator must accept both, or it would reject a
+  // string-form `jsonSchema` that executes correctly.
+  jsonSchema: external_exports.union([external_exports.string(), external_exports.record(external_exports.string(), external_exports.unknown())]).optional(),
+  jsonPrompt: external_exports.string().optional()
+});
+var fetchUrlConfigSchema = external_exports.object({
+  http: httpConfigSchema,
+  auth: authConfigSchema.optional(),
+  responseType: external_exports.enum(["json", "text", "xml"]).optional(),
+  markdownIfAvailable: external_exports.boolean().optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional(),
+  // Firecrawl integration
+  fetchMethod: external_exports.enum(["standard", "firecrawl"]).optional(),
+  firecrawl: firecrawlConfigSchema.optional()
+});
+var crawlOptionsConfigSchema = external_exports.object({
+  includePatterns: external_exports.array(external_exports.string()).optional(),
+  excludePatterns: external_exports.array(external_exports.string()).optional(),
+  allowSubdomains: external_exports.boolean().optional(),
+  allowExternalLinks: external_exports.boolean().optional(),
+  ignoreSitemap: external_exports.boolean().optional(),
+  sitemapOnly: external_exports.boolean().optional()
+}).catchall(external_exports.any());
+var crawlAuthenticateConfigSchema = external_exports.object({
+  username: external_exports.string().optional(),
+  password: external_exports.string().optional()
+}).catchall(external_exports.any());
+var crawlJsonOptionsConfigSchema = external_exports.object({
+  schema: external_exports.record(external_exports.string(), external_exports.any()).optional(),
+  prompt: external_exports.string().optional()
+}).catchall(external_exports.any());
+var crawlConfigSchema = external_exports.object({
+  url: external_exports.string().min(1, "URL is required"),
+  limit: external_exports.number().int().positive().optional(),
+  depth: external_exports.number().int().nonnegative().optional(),
+  source: external_exports.string().optional(),
+  formats: external_exports.array(external_exports.string()).optional(),
+  render: external_exports.boolean().optional(),
+  maxAge: external_exports.number().int().nonnegative().optional(),
+  modifiedSince: external_exports.string().optional(),
+  options: crawlOptionsConfigSchema.optional(),
+  authenticate: crawlAuthenticateConfigSchema.optional(),
+  cookies: external_exports.array(external_exports.record(external_exports.string(), external_exports.any())).optional(),
+  setExtraHTTPHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  gotoOptions: external_exports.record(external_exports.string(), external_exports.any()).optional(),
+  waitForSelector: external_exports.string().optional(),
+  rejectResourceTypes: external_exports.array(external_exports.string()).optional(),
+  rejectRequestPattern: external_exports.union([external_exports.string(), external_exports.array(external_exports.string())]).optional(),
+  userAgent: external_exports.string().optional(),
+  jsonOptions: crawlJsonOptionsConfigSchema.optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional(),
+  pollIntervalMs: external_exports.number().int().min(1).optional(),
+  completionTimeoutMs: external_exports.number().int().positive().optional(),
+  // Executor-only flag the validator previously stripped on `.parse()`; the
+  // normalizer already carries it through. When true (default), crawl submits
+  // and pauses the flow for async DO polling; false = legacy synchronous polling.
+  asyncCrawl: external_exports.boolean().optional()
+});
+var searchConfigSchema = external_exports.object({
+  provider: external_exports.string().min(1, "Search provider is required"),
+  query: external_exports.string().min(1, "Search query is required"),
+  temperature: external_exports.number().min(0).max(2).optional(),
+  maxTokens: external_exports.number().positive().optional(),
+  maxResults: external_exports.number().positive().optional(),
+  returnCitations: external_exports.boolean().optional(),
+  dateRange: external_exports.object({
+    from: external_exports.string().optional(),
+    to: external_exports.string().optional()
+  }).optional(),
+  allowedDomains: external_exports.array(external_exports.string()).optional(),
+  blockedDomains: external_exports.array(external_exports.string()).optional(),
+  userLocation: external_exports.object({
+    country: external_exports.string().optional(),
+    region: external_exports.string().optional()
+  }).optional(),
+  sources: external_exports.array(
+    external_exports.object({
+      type: external_exports.string(),
+      country: external_exports.string().optional(),
+      safeSearch: external_exports.boolean().optional(),
+      xHandles: external_exports.array(external_exports.string()).optional(),
+      allowedWebsites: external_exports.array(external_exports.string()).optional(),
+      excludedWebsites: external_exports.array(external_exports.string()).optional()
+    })
+  ).optional(),
+  // Exa-specific options (executor-only; previously stripped by the validator)
+  exaSearchType: external_exports.enum(["auto", "neural", "keyword"]).optional(),
+  exaContents: external_exports.object({
+    text: external_exports.boolean().optional(),
+    summary: external_exports.boolean().optional(),
+    highlights: external_exports.boolean().optional()
+  }).optional(),
+  exaCategory: external_exports.string().optional(),
+  exaNumResults: external_exports.number().optional(),
+  exaIncludeDomains: external_exports.array(external_exports.string()).optional(),
+  exaExcludeDomains: external_exports.array(external_exports.string()).optional(),
+  exaStartCrawlDate: external_exports.string().optional(),
+  exaEndCrawlDate: external_exports.string().optional(),
+  exaStartPublishedDate: external_exports.string().optional(),
+  exaEndPublishedDate: external_exports.string().optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var sendTextConfigSchema = external_exports.object({
+  from: external_exports.string().min(1, "From is required"),
+  to: external_exports.string().min(1, "To is required"),
+  message: external_exports.string().min(1, "Message is required"),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var sendEventConfigSchema = external_exports.object({
+  provider: external_exports.enum(["posthog", "google-analytics", "amplitude", "segment"]),
+  eventName: external_exports.string().min(1, "Event name is required"),
+  properties: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var storeAssetConfigSchema = external_exports.object({
+  url: external_exports.string().min(1).optional(),
+  content: external_exports.string().min(1).optional(),
+  filename: external_exports.string().optional(),
+  contentType: external_exports.string().optional(),
+  visibility: external_exports.enum(["public", "private"]).optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var generatePdfConfigSchema = external_exports.object({
+  html: external_exports.string().min(1).optional(),
+  markdown: external_exports.string().min(1).optional(),
+  filename: external_exports.string().optional(),
+  visibility: external_exports.enum(["public", "private"]).optional(),
+  pdfOptions: pdfOptionsConfigSchema.optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var templateConfigSchema = external_exports.object({
+  template: external_exports.string().min(1, "Template body is required"),
+  inputs: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  outputFormat: external_exports.enum(["html", "email-html", "markdown", "pdf", "text"]),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  partials: external_exports.record(
+    external_exports.string().regex(/^[a-zA-Z_][a-zA-Z0-9_-]*$/, "Partial keys must be simple identifiers"),
+    external_exports.string()
+  ).optional(),
+  pdfOptions: pdfOptionsConfigSchema.optional(),
+  asArtifact: external_exports.boolean().optional(),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional(),
+  sampleData: external_exports.array(
+    external_exports.object({
+      name: external_exports.string().min(1),
+      data: external_exports.record(external_exports.string(), external_exports.unknown())
+    })
+  ).optional()
+});
+var comparisonOperatorSchema = external_exports.enum(["=", "!=", ">", "<", ">=", "<=", "exists", "not-exists"]);
+var waitUntilSuccessCriteriaSchema = external_exports.object({
+  type: external_exports.enum(["status", "json_path", "body_contains", "expression"]).optional(),
+  status: external_exports.number().optional(),
+  statusCode: external_exports.number().optional(),
+  jsonPath: external_exports.string().optional(),
+  expectedValue: external_exports.any().optional(),
+  operator: comparisonOperatorSchema.optional(),
+  bodyContains: external_exports.string().optional(),
+  expression: external_exports.string().optional()
+}).refine(
+  (data) => {
+    if (!data.type || data.type === "status") {
+      return true;
+    }
+    if (data.type === "json_path") {
+      return !!data.jsonPath;
+    }
+    if (data.type === "body_contains") {
+      return !!data.bodyContains;
+    }
+    if (data.type === "expression") {
+      return !!data.expression;
+    }
+    return true;
+  },
+  {
+    message: "Success criteria is missing required fields"
+  }
+);
+var waitUntilPollConfigSchema = external_exports.object({
+  enabled: external_exports.boolean().optional(),
+  http: httpConfigSchema,
+  auth: authConfigSchema.optional(),
+  intervalMs: external_exports.union([external_exports.number().int().min(100), external_exports.string().min(1)]).optional(),
+  maxAttempts: external_exports.number().int().min(1).optional(),
+  responseType: external_exports.enum(["json", "text"]).optional(),
+  success: waitUntilSuccessCriteriaSchema.optional()
+});
+var waitUntilConfigSchema = external_exports.object({
+  delayMs: external_exports.union([external_exports.number().nonnegative(), external_exports.string().min(1)]).optional(),
+  poll: waitUntilPollConfigSchema.optional(),
+  continueOnTimeout: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional(),
+  outputVariable: external_exports.string().optional(),
+  streamOutput: external_exports.boolean().optional()
+});
+var generateEmbeddingVectorStoreConfigSchema = external_exports.object({
+  destination: external_exports.enum(["weaviate", "vectorize", "pinecone"]),
+  weaviateConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    className: external_exports.string(),
+    uuid: external_exports.string().optional(),
+    properties: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  }).optional(),
+  vectorizeConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    idTemplate: external_exports.string(),
+    namespace: external_exports.string().optional(),
+    metadata: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  }).optional(),
+  pineconeConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    idTemplate: external_exports.string(),
+    namespace: external_exports.string().optional(),
+    metadata: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  }).optional()
+});
+var generateEmbeddingConfigSchema = external_exports.object({
+  inputSource: external_exports.enum(["text", "variable", "record"]).optional().default("text"),
+  text: external_exports.string().optional(),
+  variableName: external_exports.string().optional(),
+  recordId: external_exports.string().optional(),
+  recordType: external_exports.string().optional(),
+  recordName: external_exports.string().optional(),
+  textField: external_exports.string().optional(),
+  storeInRecord: external_exports.boolean().optional(),
+  embeddingModel: external_exports.string().optional(),
+  maxLength: external_exports.number().int().positive().optional(),
+  inputMode: external_exports.enum(["single", "batch"]).optional(),
+  inputVariable: external_exports.string().optional(),
+  itemAlias: external_exports.string().optional(),
+  textTemplate: external_exports.string().optional(),
+  batchSize: external_exports.number().int().positive().optional(),
+  vectorStore: generateEmbeddingVectorStoreConfigSchema.optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional()
+});
+var vectorSearchConfigSchema = external_exports.object({
+  query: external_exports.string().min(1, "Query is required"),
+  embeddingModel: external_exports.string().optional(),
+  vectorStore: external_exports.enum(["pgvector", "weaviate", "vectorize", "pinecone"]).optional(),
+  weaviateConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    className: external_exports.string()
+  }).optional(),
+  vectorizeConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    namespace: external_exports.string().optional()
+  }).optional(),
+  pineconeConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    namespace: external_exports.string().optional()
+  }).optional(),
+  limit: external_exports.number().int().positive().optional(),
+  threshold: external_exports.number().min(0).max(1).optional(),
+  recordType: external_exports.string().optional(),
+  metadataFilters: external_exports.record(external_exports.string(), external_exports.any()).optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  includeEmbedding: external_exports.boolean().optional(),
+  includeMetadata: external_exports.boolean().optional()
+});
+var toolCallConfigSchema = external_exports.object({
+  toolId: external_exports.string().min(1, "Tool ID is required"),
+  parameters: external_exports.record(external_exports.string(), external_exports.any()),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  maxRetries: external_exports.number().int().min(0).optional(),
+  timeout: external_exports.number().int().positive().optional(),
+  onError: external_exports.enum(["fail", "continue", "retry"]).optional()
+});
+var storeVectorConfigSchema = external_exports.object({
+  vectorsSource: external_exports.string().optional(),
+  inputMode: external_exports.enum(["single", "batch"]).optional(),
+  inputVariable: external_exports.string().optional(),
+  itemAlias: external_exports.string().optional(),
+  batchSize: external_exports.number().int().positive().optional(),
+  destination: external_exports.enum(["pgvector", "weaviate", "vectorize", "pinecone"]),
+  weaviateConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    className: external_exports.string(),
+    uuid: external_exports.string().optional(),
+    properties: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  }).optional(),
+  vectorizeConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    id: external_exports.string(),
+    namespace: external_exports.string().optional(),
+    metadata: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  }).optional(),
+  pineconeConfig: external_exports.object({
+    configId: external_exports.string().optional(),
+    id: external_exports.string(),
+    namespace: external_exports.string().optional(),
+    metadata: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  }).optional(),
+  weaviateConfigId: external_exports.string().optional(),
+  weaviateClassName: external_exports.string().optional(),
+  vectorizeConfigId: external_exports.string().optional(),
+  vectorizeNamespace: external_exports.string().optional(),
+  pineconeConfigId: external_exports.string().optional(),
+  pineconeNamespace: external_exports.string().optional(),
+  idTemplate: external_exports.string().optional(),
+  metadata: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  outputVariable: external_exports.string().optional(),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var upsertRecordConfigSchema = external_exports.object({
+  recordType: external_exports.string().min(1, "Record type is required"),
+  recordName: external_exports.string().optional(),
+  sourceVariable: external_exports.string().min(1, "Source variable is required"),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  mergeStrategy: external_exports.enum(["merge", "replace"]).optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional(),
+  contentField: external_exports.string().optional(),
+  inputMode: external_exports.enum(["single", "batch"]).optional(),
+  inputVariable: external_exports.string().optional(),
+  itemAlias: external_exports.string().optional(),
+  metadataMapping: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  batchSize: external_exports.number().int().positive().optional()
+});
+var sendEmailConfigSchema = external_exports.object({
+  from: external_exports.string().optional(),
+  to: external_exports.string().min(1, "To recipients are required"),
+  subject: external_exports.string().min(1, "Subject is required"),
+  replyTo: external_exports.string().optional(),
+  cc: external_exports.string().optional(),
+  bcc: external_exports.string().optional(),
+  html: external_exports.string().optional(),
+  text: external_exports.string().optional(),
+  attachments: external_exports.array(
+    external_exports.object({
+      filename: external_exports.string(),
+      content: external_exports.string(),
+      contentType: external_exports.string().optional()
+    })
+  ).optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var paginateApiConfigSchema = external_exports.object({
+  // API configuration (supports both the detailed `url` and the UI `http` format)
+  url: external_exports.string().optional(),
+  http: external_exports.object({
+    url: external_exports.string().min(1),
+    method: external_exports.enum(["GET", "POST", "PUT", "DELETE", "PATCH"]).optional(),
+    headers: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+    body: external_exports.string().optional(),
+    timeout: external_exports.number().optional()
+  }).optional(),
+  method: external_exports.enum(["GET", "POST"]).optional(),
+  headers: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  body: external_exports.string().optional(),
+  // Authentication — `api_key` is a string literal value (snake_case wire token),
+  // not an object key, so it needs no `@snake-case-ok` decorator.
+  authType: external_exports.enum(["none", "bearer", "api_key", "basic", "oauth2"]).optional(),
+  authConfig: external_exports.object({
+    bearerToken: external_exports.string().optional(),
+    apiKeyHeader: external_exports.string().optional(),
+    apiKeyValue: external_exports.string().optional(),
+    basicUsername: external_exports.string().optional(),
+    basicPassword: external_exports.string().optional(),
+    oauth2TokenUrl: external_exports.string().optional(),
+    oauth2ClientId: external_exports.string().optional(),
+    oauth2ClientSecret: external_exports.string().optional(),
+    oauth2Scopes: external_exports.array(external_exports.string()).optional()
+  }).optional(),
+  paginationType: external_exports.enum(["cursor", "offset", "page", "link_header"]).optional(),
+  paginationConfig: external_exports.object({
+    cursorPath: external_exports.string().optional(),
+    cursorParam: external_exports.string().optional(),
+    offsetParam: external_exports.string().optional(),
+    limitParam: external_exports.string().optional(),
+    limit: external_exports.number().int().positive().optional(),
+    totalPath: external_exports.string().optional(),
+    pageParam: external_exports.string().optional(),
+    perPageParam: external_exports.string().optional(),
+    perPage: external_exports.number().int().positive().optional(),
+    totalPagesPath: external_exports.string().optional()
+  }).optional(),
+  // Simplified (UI) pagination settings
+  pageSize: external_exports.number().int().positive().optional(),
+  maxPages: external_exports.number().int().positive().optional(),
+  offsetParam: external_exports.string().optional(),
+  limitParam: external_exports.string().optional(),
+  cursorParam: external_exports.string().optional(),
+  cursorPath: external_exports.string().optional(),
+  pageParam: external_exports.string().optional(),
+  startPage: external_exports.number().int().optional(),
+  // Entity extraction
+  entitiesPath: external_exports.string().optional(),
+  entityPath: external_exports.string().optional(),
+  entityIdPath: external_exports.string().optional(),
+  // Safety limits + rate limiting
+  maxEntities: external_exports.number().int().positive().optional(),
+  requestDelayMs: external_exports.number().int().nonnegative().optional(),
+  retryOnRateLimit: external_exports.boolean().optional(),
+  maxRetries: external_exports.number().int().min(0).optional(),
+  // Output
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  includeMetadata: external_exports.boolean().optional(),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var retrieveRecordConfigSchema = external_exports.object({
+  retrievalMode: external_exports.enum(["id", "query"]).optional(),
+  recordType: external_exports.string().optional(),
+  recordName: external_exports.string().optional(),
+  recordId: external_exports.string().optional(),
+  // Chip-based filter for richer query mode (metadata + top-level columns).
+  // Coexists with recordType/recordName so old saved flows keep working;
+  // when both are present, recordFilter wins in the executor.
+  recordFilter: recordFilterSchema.optional(),
+  fieldsToInclude: external_exports.string().optional(),
+  fieldsToExclude: external_exports.string().optional(),
+  availableFields: external_exports.array(external_exports.string()).optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  fields: external_exports.array(external_exports.string()).optional(),
+  includeMetadata: external_exports.boolean().optional(),
+  streamOutput: external_exports.boolean().optional()
+});
+var updateRecordConfigSchema = external_exports.object({
+  recordId: external_exports.string().optional(),
+  recordType: external_exports.string().optional(),
+  recordName: external_exports.string().optional(),
+  // Same chip filter as retrieve-record. Executor takes the first match
+  // (ordered by updatedAt desc). Validate-time check rejects malformed
+  // filters early instead of waiting for the compiler at execute time.
+  recordFilter: recordFilterSchema.optional(),
+  updates: external_exports.record(external_exports.string(), external_exports.any()),
+  updatesTemplate: external_exports.string().optional(),
+  mergeStrategy: external_exports.enum(["merge", "replace", "deep-merge"]),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  includeFullRecord: external_exports.boolean().optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional()
+});
+var transformDataNetworkAccessSchema = external_exports.union([
+  external_exports.literal("off"),
+  external_exports.literal("on"),
+  external_exports.object({ allowedHostnames: external_exports.array(external_exports.string()).min(1) })
+]);
+var transformDataConfigSchema = external_exports.object({
+  // Not used at runtime — all flow variables are passed to the script regardless.
+  inputVariables: external_exports.array(external_exports.string()).optional(),
+  script: external_exports.string().min(1, "Script is required"),
+  outputVariable: external_exports.string().min(1, "Output variable is required"),
+  streamOutput: external_exports.boolean().optional(),
+  sandboxProvider: external_exports.enum(["quickjs", "daytona", "cloudflare-worker", "runtype-sandbox", "cloudflare-sandbox"]).optional(),
+  language: external_exports.enum(["javascript", "typescript", "python"]).optional(),
+  // `inputMode: 'variable'` resolves `script` (and `packageJson`) as a template
+  // before execution; `'code'` (default) treats `script` as literal source.
+  inputMode: external_exports.enum(["code", "variable"]).optional(),
+  // package.json content (daytona / runtype-sandbox); respects `inputMode`.
+  packageJson: external_exports.string().optional(),
+  // Sandbox persistence (daytona / runtype-sandbox).
+  persistSandbox: external_exports.boolean().optional(),
+  reuseSandboxId: external_exports.string().optional(),
+  networkAccess: transformDataNetworkAccessSchema.optional(),
+  errorHandling: contextErrorHandlingConfigSchema.optional(),
+  defaultValue: external_exports.any().optional(),
+  // Tool access for code steps (cloudflare-worker sandbox only). Narrow 4-field
+  // shape the validator has always accepted; the full tool shapes are validated
+  // by the runtime-tools layer.
+  tools: external_exports.object({
+    toolIds: external_exports.array(external_exports.string()).optional(),
+    toolConfigs: external_exports.record(external_exports.string(), external_exports.any()).optional(),
+    runtimeTools: external_exports.array(external_exports.any()).optional(),
+    mcpServers: external_exports.array(external_exports.any()).optional()
+  }).optional()
+});
+var promptMessageSchema = external_exports.object({
+  role: external_exports.enum(["system", "user", "assistant"]),
+  content: external_exports.union([external_exports.string(), external_exports.array(external_exports.unknown())])
+});
+var promptPreviousMessagesSchema = external_exports.union([external_exports.string(), external_exports.array(promptMessageSchema)]);
+var promptFallbackSchema = external_exports.union([
+  external_exports.object({ type: external_exports.literal("retry"), delay: external_exports.number().optional() }),
+  external_exports.object({
+    type: external_exports.literal("model"),
+    model: external_exports.string(),
+    temperature: external_exports.number().optional(),
+    maxTokens: external_exports.number().optional(),
+    topP: external_exports.number().optional(),
+    topK: external_exports.number().optional(),
+    frequencyPenalty: external_exports.number().optional(),
+    presencePenalty: external_exports.number().optional(),
+    seed: external_exports.number().optional(),
+    delay: external_exports.number().optional()
+  }),
+  external_exports.object({ type: external_exports.literal("message"), message: external_exports.string(), delay: external_exports.number().optional() })
+]);
+var promptFallbackTriggerSchema = external_exports.union([
+  external_exports.object({ type: external_exports.literal("error") }),
+  external_exports.object({ type: external_exports.literal("empty-output") }),
+  external_exports.object({ type: external_exports.literal("slow"), afterMs: external_exports.number().optional() })
+]);
+var promptErrorHandlingConfigSchema = external_exports.union([
+  external_exports.enum(["fail", "continue", "fallback", "default"]),
+  external_exports.object({
+    onError: external_exports.enum(["fail", "continue", "fallback"]),
+    fallbacks: external_exports.array(promptFallbackSchema).optional(),
+    triggers: external_exports.array(promptFallbackTriggerSchema).optional()
+  })
+]);
+var promptConfigSchema = external_exports.object({
+  // Validation only requires a non-empty string here. The non-blocking
+  // model-advisory pass in `flow-validator.ts` (`collectModelAdvisoryIssues`)
+  // additionally emits warnings/recommendations for deprecated, non-routed,
+  // capability-mismatched, or not-enabled models — sourced from the model
+  // registry. Keep that pass in lockstep per `.claude/rules/flow-validation.md`.
+  model: external_exports.string().min(1, "Model is required"),
+  text: external_exports.string().optional(),
+  userPrompt: external_exports.string().optional(),
+  systemPrompt: external_exports.string().optional(),
+  responseFormat: external_exports.enum(["default", "json", "markdown", "html", "xml", "text"]).optional(),
+  outputVariable: external_exports.string().optional(),
+  temperature: external_exports.number().min(0).max(2).optional(),
+  maxTokens: external_exports.number().positive().optional(),
+  topP: external_exports.number().min(0).max(1).optional(),
+  topK: external_exports.number().int().min(1).max(500).optional(),
+  frequencyPenalty: external_exports.number().min(-2).max(2).optional(),
+  presencePenalty: external_exports.number().min(-2).max(2).optional(),
+  seed: external_exports.number().int().optional(),
+  // Canonical object form is the Phase-1 `agentToolsConfigSchema`. The
+  // `z.array(z.unknown())` arm preserves a legacy ARRAY `tools` shape
+  // (`[{ toolId }]` / `string[]`) that predates the object form — it exists in
+  // production (1 live flow + 6 version snapshots) and validated under the prior
+  // `z.any()`, so the union keeps it accepted rather than newly rejecting it. The
+  // runtime's tool resolver reads object keys, so an array `tools` resolves to no
+  // tools (unchanged behavior). Object inputs always match the first arm.
+  tools: external_exports.union([agentToolsConfigSchema, external_exports.array(external_exports.unknown())]).optional(),
+  artifacts: external_exports.object({
+    enabled: external_exports.literal(true),
+    types: external_exports.array(external_exports.enum(["markdown", "component"])).min(1)
+  }).optional(),
+  reasoning: external_exports.boolean().optional(),
+  previousMessages: promptPreviousMessagesSchema.optional(),
+  streamOutput: external_exports.boolean().optional(),
+  errorHandling: promptErrorHandlingConfigSchema.optional(),
+  mode: external_exports.string().optional()
+  // UI mode (task, agent, etc.)
+});
 var SERIALIZED_HELPERS_SOURCE = `
 // Transform helper functions (from packages/shared/src/transform-helpers.ts)
 const helpers = (function createHelpers() {
@@ -16120,30 +16979,6 @@ function resolveModelSecretNames(model) {
   }
   return [];
 }
-var MCPServerCategory = {
-  COMMUNICATION: "communication",
-  PRODUCTIVITY: "productivity",
-  DEVELOPMENT: "development",
-  PROJECT_MANAGEMENT: "project_management"
-};
-var CreateToolSchema = external_exports.object({
-  name: external_exports.string().min(1).max(100),
-  description: external_exports.string().min(1).max(500),
-  toolType: external_exports.enum(["flow", "custom", "external", "graphql", "mcp", "local", "subagent"]),
-  parametersSchema: external_exports.record(external_exports.string(), external_exports.any()),
-  config: external_exports.record(external_exports.string(), external_exports.any())
-});
-var ExecuteToolSchema = external_exports.object({
-  // toolId is redundant with the URL path param (/v1/tools/:id/execute) and optional
-  // so MCP/SDK callers that only send { parameters } aren't rejected at validation.
-  toolId: external_exports.string().optional(),
-  parameters: external_exports.record(external_exports.string(), external_exports.any()),
-  context: external_exports.object({
-    flowExecutionId: external_exports.string().optional(),
-    stepId: external_exports.string().optional(),
-    userId: external_exports.string()
-  }).optional()
-});
 var EMIT_ARTIFACT_MARKDOWN_TOOL_ID = "emit_artifact_markdown";
 var EMIT_ARTIFACT_COMPONENT_TOOL_ID = "emit_artifact_component";
 var EMIT_ARTIFACT_MARKDOWN_FULL_ID = `builtin:${EMIT_ARTIFACT_MARKDOWN_TOOL_ID}`;
@@ -27145,7 +27980,8 @@ var BuiltInToolCategory = {
   COMMERCE: "commerce",
   BROWSER: "browser",
   SANDBOX: "sandbox",
-  MESSAGING: "messaging"
+  MESSAGING: "messaging",
+  TEMPORAL: "temporal"
 };
 var BuiltInToolIdPrefix = {
   BUILTIN: "builtin",
@@ -27160,7 +27996,8 @@ var BuiltInToolGroup = {
   RECORD_MANAGEMENT: "record_management",
   UCP_COMMERCE: "ucp_commerce",
   SANDBOX_USE: "sandbox_use",
-  SANDBOX_SESSION: "sandbox_session"
+  SANDBOX_SESSION: "sandbox_session",
+  TEMPORAL: "temporal"
 };
 var BROWSER_RUN_DOCUMENTATION_URL = "https://developers.cloudflare.com/browser-run/quick-actions/";
 var BROWSER_SESSION_DOCUMENTATION_URL = "https://developers.cloudflare.com/browser-run/cdp/";
@@ -28718,6 +29555,133 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
     executionHint: "platform",
     hidden: true
   },
+  // Temporal — ground the agent in real-world time. Platform-executed, stateless,
+  // provider-agnostic. Timezone defaults follow a layered precedence resolved
+  // api-side (call param > conversation timezone > agent default > UTC).
+  {
+    id: "get_current_time",
+    name: "Get Current Time",
+    description: 'Get the current date and time. LLMs have no clock and no sense of "now" beyond their training cutoff \u2014 call this whenever the current date/time matters. Returns the instant in a specific IANA timezone (e.g. "America/New_York", "Asia/Tokyo"). When `timezone` is omitted, the resolved default is used (the conversation\'s timezone if set, otherwise the agent default, otherwise UTC). Returns ISO 8601 (UTC), plus the local date, 24-hour time, year/month/day, weekday name, Unix seconds, and the resolved timezone.',
+    category: BuiltInToolCategory.TEMPORAL,
+    toolGroup: BuiltInToolGroup.TEMPORAL,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        timezone: {
+          type: "string",
+          description: 'Optional IANA timezone name (e.g. "America/New_York", "Europe/London", "Asia/Tokyo"). Defaults to the resolved zone (conversation > agent default > UTC). Invalid zones fall back to UTC.'
+        }
+      },
+      required: []
+    },
+    executionHint: "platform",
+    requiresApiKey: false
+  },
+  {
+    id: "convert_time",
+    name: "Convert Time Between Zones",
+    description: 'Convert a wall-clock time from one IANA timezone to another, with daylight-saving handled automatically. Provide `time` as "YYYY-MM-DD HH:mm" or "HH:mm" (today is assumed when the date is omitted), plus the source and target IANA timezones. Returns the rendered local time in each zone and the whole-hour offset between them.',
+    category: BuiltInToolCategory.TEMPORAL,
+    toolGroup: BuiltInToolGroup.TEMPORAL,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        time: {
+          type: "string",
+          description: 'The wall-clock time to convert, as "YYYY-MM-DD HH:mm[:ss]" or "HH:mm[:ss]" (the current date in the source zone is assumed when only a time is given).'
+        },
+        sourceTimezone: {
+          type: "string",
+          description: 'IANA timezone the `time` is expressed in (e.g. "America/New_York").'
+        },
+        targetTimezone: {
+          type: "string",
+          description: 'IANA timezone to convert the `time` into (e.g. "Asia/Tokyo").'
+        }
+      },
+      required: ["time", "sourceTimezone", "targetTimezone"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false
+  },
+  {
+    id: "time_difference",
+    name: "Time Difference",
+    description: 'Compute the elapsed time between two instants \u2014 a stopwatch for the agent. Provide `from` (ISO 8601 / RFC 3339); `to` defaults to now if omitted. Returns the signed duration in milliseconds, a `direction` of "past" or "future" (relative to `from`), and a humanized string like "6 hours 30 minutes".',
+    category: BuiltInToolCategory.TEMPORAL,
+    toolGroup: BuiltInToolGroup.TEMPORAL,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        from: {
+          type: "string",
+          description: 'Start instant, ISO 8601 / RFC 3339 (e.g. "2026-06-03T12:00:00Z").'
+        },
+        to: {
+          type: "string",
+          description: "End instant, ISO 8601 / RFC 3339. Defaults to the current time when omitted."
+        }
+      },
+      required: ["from"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false
+  },
+  {
+    id: "set_timezone",
+    name: "Set Conversation Timezone",
+    description: `Remember the user's timezone for this conversation. Call this once you learn where the user is (e.g. they say "I'm in Tokyo" or mention a local time), passing the matching IANA timezone (e.g. "Asia/Tokyo"). From then on the time tools and any time-awareness context default to their local zone. Only meaningful inside a conversation.`,
+    category: BuiltInToolCategory.TEMPORAL,
+    toolGroup: BuiltInToolGroup.TEMPORAL,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        timezone: {
+          type: "string",
+          description: `The user's IANA timezone name (e.g. "America/New_York", "Asia/Tokyo", "Europe/London").`
+        }
+      },
+      required: ["timezone"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false
+  },
+  {
+    id: "set_reminder",
+    name: "Set Reminder",
+    description: 'Schedule yourself to run again later with a follow-up message \u2014 a durable "wake me later". Provide a `message` (the instruction you\'ll receive when it fires) plus exactly one of `at` (an absolute RFC 3339 / ISO 8601 timestamp, e.g. "2026-06-04T09:00:00Z") or `inSeconds` (a relative delay, e.g. 3600 for one hour). Optionally pass `timezone` to interpret a zone-less `at`. The reminder runs as a one-time scheduled execution of this same agent; when it fires you receive the message and can act on it (including reaching out to the user via your messaging or email tools). Only available to agents (not standalone flow steps).',
+    category: BuiltInToolCategory.TEMPORAL,
+    toolGroup: BuiltInToolGroup.TEMPORAL,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        message: {
+          type: "string",
+          description: "The follow-up instruction delivered to you when the reminder fires (becomes the kickoff message of the scheduled run)."
+        },
+        at: {
+          type: "string",
+          description: 'Absolute fire time, RFC 3339 / ISO 8601 (e.g. "2026-06-04T09:00:00Z"). Provide this OR `inSeconds`, not both.'
+        },
+        inSeconds: {
+          type: "number",
+          description: "Relative delay in seconds from now (e.g. 3600 = one hour). Provide this OR `at`, not both."
+        },
+        timezone: {
+          type: "string",
+          description: 'IANA timezone used to interpret a zone-less `at` value (e.g. "America/New_York"). Ignored when `at` already carries an offset or `inSeconds` is used.'
+        }
+      },
+      required: ["message"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false
+  },
   // Asset Storage — mirror files onto Runtype's CDN from a URL or inline bytes
   {
     id: "store_asset",
@@ -32519,6 +33483,9 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "nemotron-3-super-120b-a12b": {
     "vercel": "nvidia/nemotron-3-super-120b-a12b"
   },
+  "nemotron-3-ultra-550b-a55b": {
+    "vercel": "nvidia/nemotron-3-ultra-550b-a55b"
+  },
   "nemotron-nano-12b-v2-vl": {
     "vercel": "nvidia/nemotron-nano-12b-v2-vl"
   },
@@ -33716,6 +34683,179 @@ var SLACK_MANIFEST_BOT_SCOPES = [
   ...SLACK_REQUIRED_BOT_SCOPES,
   ...SLACK_OPTIONAL_BOT_SCOPES
 ];
+var reasoningConfigSchema = external_exports.union([
+  external_exports.boolean(),
+  external_exports.object({
+    enabled: external_exports.boolean(),
+    // OpenAI GPT-5 and o-series
+    reasoningEffort: external_exports.enum(["minimal", "low", "medium", "high", "xhigh"]).optional(),
+    reasoningSummary: external_exports.enum(["auto", "detailed"]).optional(),
+    // Anthropic Claude
+    budgetTokens: external_exports.number().int().min(1e3).max(1e5).optional(),
+    // Google Gemini
+    thinkingBudget: external_exports.number().int().min(1024).max(65536).optional(),
+    includeThoughts: external_exports.boolean().optional()
+  })
+]);
+var samplingConfigSchema = {
+  topP: external_exports.number().min(0).max(1).optional(),
+  topK: external_exports.number().int().min(1).max(500).optional(),
+  frequencyPenalty: external_exports.number().min(-2).max(2).optional(),
+  presencePenalty: external_exports.number().min(-2).max(2).optional(),
+  seed: external_exports.number().int().optional()
+};
+var errorHandlingSchema = external_exports.object({
+  onError: external_exports.enum(["fail", "continue", "fallback"]),
+  fallbacks: external_exports.array(
+    external_exports.discriminatedUnion("type", [
+      external_exports.object({
+        type: external_exports.literal("retry"),
+        delay: external_exports.number().int().min(0).max(6e4).optional()
+      }),
+      external_exports.object({
+        type: external_exports.literal("model"),
+        model: external_exports.string(),
+        temperature: external_exports.number().min(0).max(2).optional(),
+        maxTokens: external_exports.number().int().min(1).optional(),
+        delay: external_exports.number().int().min(0).max(6e4).optional()
+      }),
+      external_exports.object({
+        type: external_exports.literal("message"),
+        message: external_exports.string(),
+        delay: external_exports.number().int().min(0).max(6e4).optional()
+      })
+    ])
+  ).optional(),
+  // Conditions that activate the fallback chain. Mirrors PromptErrorHandling.triggers;
+  // defaults to error-only when omitted.
+  triggers: external_exports.array(external_exports.object({ type: external_exports.enum(["error", "empty-output"]) })).optional()
+}).optional();
+var artifactConfigSchema = external_exports.object({
+  enabled: external_exports.literal(true),
+  types: external_exports.array(external_exports.enum(["markdown", "component"])).min(1)
+});
+var temporalConfigSchema = external_exports.object({
+  injectElapsed: external_exports.boolean().optional(),
+  elapsedThresholdSeconds: external_exports.number().int().min(0).optional(),
+  groundNow: external_exports.boolean().optional(),
+  timezone: external_exports.string().optional()
+});
+var agentRuntimeConfigSchema = external_exports.object({
+  model: external_exports.string().optional(),
+  systemPrompt: external_exports.string().optional(),
+  temperature: external_exports.number().min(0).max(2).optional(),
+  ...samplingConfigSchema,
+  // Unified tools configuration (nested under 'tools').
+  //
+  // This is the **createAgent / FPO-v2 create-form** projection of the canonical
+  // `agentToolsConfigSchema` (`tool-types.ts`). It is kept separate on purpose —
+  // it carries create-time constraints (`.int().min().max()`), a create-form
+  // `runtimeTools.toolType` enum (`advisor`/`search` instead of the canonical
+  // `RuntimeToolDefinition` union), and does NOT yet accept `toolSearch`.
+  // Collapsing it onto the canonical leaves would change createAgent validation,
+  // so the two are pinned by review + the planning doc rather than a shared
+  // import. Adding `toolSearch` here (to match the canonical schema + the runtime
+  // wire form) is a tracked follow-up.
+  tools: external_exports.object({
+    toolIds: external_exports.array(external_exports.string()).optional(),
+    toolConfigs: external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), external_exports.unknown())).optional(),
+    runtimeTools: external_exports.array(
+      external_exports.object({
+        name: external_exports.string(),
+        description: external_exports.string(),
+        toolType: external_exports.enum([
+          "flow",
+          "custom",
+          "external",
+          "local",
+          "advisor",
+          "subagent",
+          "search"
+        ]),
+        parametersSchema: external_exports.record(external_exports.string(), external_exports.unknown()),
+        config: external_exports.record(external_exports.string(), external_exports.unknown())
+      })
+    ).optional(),
+    mcpServers: external_exports.array(
+      external_exports.object({
+        id: external_exports.string(),
+        name: external_exports.string().optional(),
+        url: external_exports.string(),
+        auth: external_exports.object({
+          type: external_exports.enum(["api_key", "bearer", "basic", "custom_header", "none"]),
+          headerName: external_exports.string().optional(),
+          token: external_exports.string().optional(),
+          username: external_exports.string().optional(),
+          password: external_exports.string().optional()
+        }).optional(),
+        allowedTools: external_exports.array(external_exports.string()).optional(),
+        timeout: external_exports.number().optional(),
+        transport: external_exports.enum(["streamable_http", "rest"]).optional(),
+        enabled: external_exports.boolean().optional()
+      })
+    ).optional(),
+    maxToolCalls: external_exports.number().int().min(1).max(100).optional(),
+    toolCallStrategy: external_exports.enum(["auto", "required", "none"]).optional(),
+    parallelCalls: external_exports.boolean().optional(),
+    approval: external_exports.object({
+      require: external_exports.union([external_exports.array(external_exports.string()), external_exports.boolean()]),
+      timeout: external_exports.number().optional()
+    }).optional(),
+    perToolLimits: external_exports.record(
+      external_exports.string(),
+      external_exports.object({
+        maxCalls: external_exports.number().optional(),
+        required: external_exports.boolean().optional()
+      })
+    ).optional(),
+    subagentConfig: external_exports.object({
+      toolPool: external_exports.array(external_exports.string()),
+      defaultMaxTurns: external_exports.number().int().min(1).max(100).optional(),
+      maxTurnsLimit: external_exports.number().int().min(1).max(100).optional(),
+      maxSpawnsPerRun: external_exports.number().int().min(1).max(50).optional(),
+      defaultModel: external_exports.string().optional(),
+      allowNesting: external_exports.boolean().optional(),
+      defaultTimeoutMs: external_exports.number().int().min(1e3).max(6e5).optional()
+    }).optional(),
+    codeModeConfig: external_exports.object({
+      toolPool: external_exports.array(external_exports.string()),
+      description: external_exports.string().optional(),
+      timeoutMs: external_exports.number().int().min(1e3).max(6e5).optional()
+    }).optional()
+  }).optional(),
+  artifacts: artifactConfigSchema.optional(),
+  reasoning: reasoningConfigSchema.optional(),
+  advisor: external_exports.object({
+    model: external_exports.string(),
+    systemPrompt: external_exports.string().optional()
+  }).optional().nullable(),
+  loopConfig: external_exports.object({
+    maxTurns: external_exports.number().int().min(1).max(100).optional(),
+    maxCost: external_exports.number().min(0).optional(),
+    enableReflection: external_exports.boolean().optional(),
+    reflectionInterval: external_exports.number().int().min(1).max(50).optional()
+  }).optional(),
+  voice: external_exports.object({
+    enabled: external_exports.boolean().optional(),
+    provider: external_exports.string().optional(),
+    interruptionMode: external_exports.enum(["none", "cancel", "barge-in"]).optional(),
+    elevenLabs: external_exports.object({
+      voiceId: external_exports.string().optional(),
+      modelId: external_exports.string().optional(),
+      stability: external_exports.number().min(0).max(1).optional(),
+      similarity: external_exports.number().min(0).max(1).optional()
+    }).optional()
+  }).optional(),
+  errorHandling: errorHandlingSchema,
+  loggingPolicy: external_exports.enum(["default", "on", "off"]).optional(),
+  // Opt-in temporal awareness. `injectElapsed` turns on the automatic
+  // "time has passed" decorator (a `<temporal_context>` block prepended to
+  // the user turn at dispatch, gated on turn ≥ 2 and a gap ≥
+  // `elapsedThresholdSeconds`). `groundNow` additionally surfaces the current
+  // datetime in that block. `timezone` is the agent's DEFAULT IANA zone —
+  // the layered tool/decorator resolution overrides it per-conversation.
+  temporal: temporalConfigSchema.optional()
+});
 var SECRET_REF_PATTERN = /\{\{secret:([A-Z][A-Z0-9_]*[A-Z0-9])\}\}/g;
 function extractSecretReferences(template) {
   const keys = /* @__PURE__ */ new Set();
@@ -33750,6 +34890,7 @@ function extractSecretReferencesFromAnyValue(value, maxDepth = 10) {
 }
 var FULL_PRODUCT_OBJECT_VERSION_1_0 = "1.0";
 var FULL_PRODUCT_OBJECT_VERSION_1_1 = "1.1";
+var FULL_PRODUCT_OBJECT_VERSION_2_0 = "2.0";
 var createPolicySchema = external_exports.enum(["create", "skip", "manual"]).optional();
 var flowStepSchema = external_exports.object({
   type: external_exports.string().refine(
@@ -33778,7 +34919,7 @@ var agentToolSchema = external_exports.object({
   description: external_exports.string().optional(),
   config: external_exports.record(external_exports.string(), external_exports.any()).optional()
 });
-var agentSubagentConfigSchema = external_exports.object({
+var agentSubagentConfigSchema2 = external_exports.object({
   toolPool: external_exports.array(external_exports.string()).optional(),
   defaultMaxTurns: external_exports.number().int().positive().optional(),
   maxSpawnsPerRun: external_exports.number().int().positive().optional(),
@@ -33848,7 +34989,7 @@ var agentMcpServerSchema = external_exports.object({
   transport: external_exports.enum(["streamable_http", "rest"]).optional(),
   enabled: external_exports.boolean().optional()
 });
-var agentToolsConfigSchema = external_exports.object({
+var agentToolsConfigSchema2 = external_exports.object({
   toolIds: external_exports.array(external_exports.string()).optional(),
   toolConfigs: external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), external_exports.any())).optional(),
   runtimeTools: external_exports.array(external_exports.object({
@@ -33870,7 +35011,7 @@ var agentToolsConfigSchema = external_exports.object({
     maxCalls: external_exports.number().int().positive().optional(),
     required: external_exports.boolean().optional()
   })).optional(),
-  subagentConfig: agentSubagentConfigSchema.optional(),
+  subagentConfig: agentSubagentConfigSchema2.optional(),
   codeModeConfig: external_exports.object({
     toolPool: external_exports.array(external_exports.string()).optional(),
     description: external_exports.string().optional(),
@@ -33910,7 +35051,7 @@ var agentDefinitionSchema = external_exports.object({
   seed: external_exports.number().int().optional(),
   // Tools — legacy simple array, or the full config object
   tools: external_exports.array(agentToolSchema).optional(),
-  toolsConfig: agentToolsConfigSchema.optional(),
+  toolsConfig: agentToolsConfigSchema2.optional(),
   // Advanced config
   loopConfig: agentLoopConfigSchema.optional(),
   reasoning: external_exports.union([external_exports.boolean(), agentReasoningConfigSchema]).optional(),
@@ -33921,13 +35062,30 @@ var agentDefinitionSchema = external_exports.object({
     model: external_exports.string(),
     systemPrompt: external_exports.string().optional()
   }).optional(),
-  subagentConfig: agentSubagentConfigSchema.optional(),
+  subagentConfig: agentSubagentConfigSchema2.optional(),
   capabilityToolRefs: external_exports.array(capabilityToolRefSchema).optional(),
   // External / managed agent configs
   externalConfig: agentExternalConfigSchema.optional(),
   claudeManagedConfig: agentClaudeManagedConfigSchema.optional(),
   createPolicy: createPolicySchema
 });
+var agentDefinitionSchemaV2 = external_exports.object({
+  name: external_exports.string().min(1),
+  description: external_exports.string().min(1),
+  icon: external_exports.string().max(50).optional(),
+  agentType: external_exports.enum(["runtype", "external", "claude_managed"]).optional(),
+  // Canonical runtime config — identical to `createAgentSchema.config`.
+  config: agentRuntimeConfigSchema.optional(),
+  // FPO-specific wiring, top-level like the flat shape.
+  capabilityToolRefs: external_exports.array(capabilityToolRefSchema).optional(),
+  // External / managed agent configs (top-level, mirroring `createAgent`).
+  externalConfig: agentExternalConfigSchema.optional(),
+  claudeManagedConfig: agentClaudeManagedConfigSchema.optional(),
+  createPolicy: createPolicySchema
+}).strict();
+function isNestedFpoAgent(agent) {
+  return !!agent && typeof agent === "object" && "config" in agent && !("model" in agent);
+}
 var capabilitySchema = external_exports.object({
   id: external_exports.string().min(1),
   name: external_exports.string().min(1),
@@ -33935,7 +35093,12 @@ var capabilitySchema = external_exports.object({
   inputSchema: external_exports.record(external_exports.string(), external_exports.any()).optional(),
   outputSchema: external_exports.record(external_exports.string(), external_exports.any()).optional(),
   flow: flowDefinitionSchema.optional(),
-  agent: agentDefinitionSchema.optional(),
+  // Accept BOTH inline-agent shapes. The flat ≤1.1 shape requires a top-level
+  // `model`; the v2 shape is `.strict()` with no top-level `model`. These are
+  // mutually exclusive, so the union routes unambiguously. Version-consistency
+  // (flat ↔ ≤1.1, nested ↔ 2.0) is enforced in `fullProductObjectSchema`'s
+  // superRefine, which has access to the document `version`.
+  agent: external_exports.union([agentDefinitionSchema, agentDefinitionSchemaV2]).optional(),
   existingFlowId: external_exports.string().optional(),
   existingAgentId: external_exports.string().optional()
 }).refine(
@@ -34075,7 +35238,11 @@ var metaSchema = external_exports.object({
   planHash: external_exports.string().min(1)
 });
 var fullProductObjectSchema = external_exports.object({
-  version: external_exports.enum([FULL_PRODUCT_OBJECT_VERSION_1_0, FULL_PRODUCT_OBJECT_VERSION_1_1]),
+  version: external_exports.enum([
+    FULL_PRODUCT_OBJECT_VERSION_1_0,
+    FULL_PRODUCT_OBJECT_VERSION_1_1,
+    FULL_PRODUCT_OBJECT_VERSION_2_0
+  ]),
   product: external_exports.object({
     name: external_exports.string().min(1),
     description: external_exports.string().min(1),
@@ -34090,78 +35257,24 @@ var fullProductObjectSchema = external_exports.object({
   secrets: external_exports.array(productSecretSchema).max(50).optional(),
   _meta: metaSchema
 }).superRefine((fpo, ctx) => {
-  const capIds = /* @__PURE__ */ new Set();
+  const isV2 = fpo.version === FULL_PRODUCT_OBJECT_VERSION_2_0;
   for (const [i, cap] of fpo.capabilities.entries()) {
-    const id = cap.id;
-    if (capIds.has(id)) {
+    const agent = cap.agent;
+    if (!agent || typeof agent !== "object") continue;
+    const looksNested = "config" in agent && !("model" in agent);
+    if (isV2 && !looksNested) {
       ctx.addIssue({
         code: "custom",
-        message: `Duplicate capability id: ${id}`,
-        path: ["capabilities", i, "id"]
+        message: "Version 2.0 requires the nested inline-agent shape: put model/systemPrompt/tools under `agent.config`.",
+        path: ["capabilities", i, "agent"]
       });
-    }
-    capIds.add(id);
-  }
-  const toolIds = /* @__PURE__ */ new Set();
-  for (const [i, tool] of fpo.tools.entries()) {
-    if (toolIds.has(tool.id)) {
+    } else if (!isV2 && looksNested) {
       ctx.addIssue({
         code: "custom",
-        message: `Duplicate tool id: ${tool.id}`,
-        path: ["tools", i, "id"]
+        message: 'The nested `agent.config` shape requires version "2.0". Use the flat agent shape for version 1.0/1.1, or set version to "2.0".',
+        path: ["capabilities", i, "agent"]
       });
     }
-    toolIds.add(tool.id);
-  }
-  const surfaceIds = /* @__PURE__ */ new Set();
-  for (const [i, surface] of fpo.surfaces.entries()) {
-    if (surfaceIds.has(surface.id)) {
-      ctx.addIssue({
-        code: "custom",
-        message: `Duplicate surface id: ${surface.id}`,
-        path: ["surfaces", i, "id"]
-      });
-    }
-    surfaceIds.add(surface.id);
-  }
-  if (fpo.records) {
-    const recordIds = /* @__PURE__ */ new Set();
-    for (const [i, record2] of fpo.records.entries()) {
-      if (recordIds.has(record2.id)) {
-        ctx.addIssue({
-          code: "custom",
-          message: `Duplicate record id: ${record2.id}`,
-          path: ["records", i, "id"]
-        });
-      }
-      recordIds.add(record2.id);
-    }
-  }
-  if (fpo.schedules) {
-    const scheduleIds = /* @__PURE__ */ new Set();
-    for (const [i, schedule] of fpo.schedules.entries()) {
-      if (scheduleIds.has(schedule.id)) {
-        ctx.addIssue({
-          code: "custom",
-          message: `Duplicate schedule id: ${schedule.id}`,
-          path: ["schedules", i, "id"]
-        });
-      }
-      scheduleIds.add(schedule.id);
-    }
-  }
-  if (fpo.secrets) {
-    const secretIds = /* @__PURE__ */ new Set();
-    for (const [i, secret] of fpo.secrets.entries()) {
-      if (secretIds.has(secret.id)) {
-        ctx.addIssue({
-          code: "custom",
-          message: `Duplicate secret id: ${secret.id}`,
-          path: ["secrets", i, "id"]
-        });
-      }
-      secretIds.add(secret.id);
-    }
   }
 });
 function createIssue(severity, code, message, path16, suggestedFix) {
@@ -34254,6 +35367,29 @@ function validateAgentDefinition(agent, capIndex) {
       createIssue("error", "AGENT_NAME_EMPTY", "Agent name is required", `${base}.name`)
     );
   }
+  if (isNestedFpoAgent(agent)) {
+    validateNestedAgent(agent, base, result);
+  } else {
+    validateFlatAgent(agent, base, result);
+  }
+  if (agent.capabilityToolRefs) {
+    for (const [i, ref] of agent.capabilityToolRefs.entries()) {
+      if (!ref.toolName || ref.toolName.trim() === "") {
+        result.errors.push(
+          createIssue("error", "CAPABILITY_TOOL_REF_NAME_EMPTY", "capabilityToolRefs toolName is required", `${base}.capabilityToolRefs[${i}].toolName`)
+        );
+      }
+      if (!ref.capabilityId || ref.capabilityId.trim() === "") {
+        result.errors.push(
+          createIssue("error", "CAPABILITY_TOOL_REF_ID_EMPTY", "capabilityToolRefs capabilityId is required", `${base}.capabilityToolRefs[${i}].capabilityId`)
+        );
+      }
+    }
+  }
+  result.valid = result.errors.length === 0;
+  return result;
+}
+function validateFlatAgent(agent, base, result) {
   if (!agent.model || agent.model.trim() === "") {
     result.errors.push(
       createIssue("error", "AGENT_NO_MODEL", "Agent model is required", `${base}.model`)
@@ -34289,22 +35425,35 @@ function validateAgentDefinition(agent, capIndex) {
       }
     }
   }
-  if (agent.capabilityToolRefs) {
-    for (const [i, ref] of agent.capabilityToolRefs.entries()) {
-      if (!ref.toolName || ref.toolName.trim() === "") {
+}
+function validateNestedAgent(agent, base, result) {
+  const config3 = agent.config;
+  if (!config3?.model || config3.model.trim() === "") {
+    result.errors.push(
+      createIssue("error", "AGENT_NO_MODEL", "Agent model is required", `${base}.config.model`)
+    );
+  }
+  if (config3?.advisor) {
+    if (!config3.advisor.model || config3.advisor.model.trim() === "") {
+      result.errors.push(
+        createIssue("error", "AGENT_ADVISOR_NO_MODEL", "Advisor model is required when advisor is configured", `${base}.config.advisor.model`)
+      );
+    }
+  }
+  if (config3?.tools?.runtimeTools) {
+    for (const [i, tool] of config3.tools.runtimeTools.entries()) {
+      if (!tool.name || tool.name.trim() === "") {
         result.errors.push(
-          createIssue("error", "CAPABILITY_TOOL_REF_NAME_EMPTY", "capabilityToolRefs toolName is required", `${base}.capabilityToolRefs[${i}].toolName`)
+          createIssue("error", "RUNTIME_TOOL_NAME_EMPTY", "Runtime tool name is required", `${base}.config.tools.runtimeTools[${i}].name`)
         );
       }
-      if (!ref.capabilityId || ref.capabilityId.trim() === "") {
-        result.errors.push(
-          createIssue("error", "CAPABILITY_TOOL_REF_ID_EMPTY", "capabilityToolRefs capabilityId is required", `${base}.capabilityToolRefs[${i}].capabilityId`)
+      if (tool.toolType === "flow" && (!tool.config?.steps || !Array.isArray(tool.config.steps) || tool.config.steps.length === 0)) {
+        result.warnings.push(
+          createIssue("warning", "FLOW_RUNTIME_TOOL_NO_STEPS", "Flow runtime tool should have steps in config", `${base}.config.tools.runtimeTools[${i}].config.steps`)
         );
       }
     }
   }
-  result.valid = result.errors.length === 0;
-  return result;
 }
 var KEBAB_CASE_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
 function validateCapability(cap, index, context) {
@@ -34521,7 +35670,16 @@ function validateConnectivity(fpo) {
     }
   }
   for (const [ci, cap] of fpo.capabilities.entries()) {
-    const toolIds = cap.agent?.toolsConfig?.toolIds;
+    const agent = cap.agent;
+    let toolIds;
+    let toolIdsPath;
+    if (isNestedFpoAgent(agent)) {
+      toolIds = agent.config?.tools?.toolIds;
+      toolIdsPath = "config.tools.toolIds";
+    } else {
+      toolIds = agent?.toolsConfig?.toolIds;
+      toolIdsPath = "toolsConfig.toolIds";
+    }
     if (!toolIds) continue;
     for (const [ti, toolId] of toolIds.entries()) {
       if (!toolId.startsWith("capability:")) continue;
@@ -34533,7 +35691,7 @@ function validateConnectivity(fpo) {
             "error",
             "CAPABILITY_TOOLID_REF_NOT_FOUND",
             `toolIds references non-existent capability "${refCapId}"`,
-            `capabilities[${ci}].agent.toolsConfig.toolIds[${ti}]`,
+            `capabilities[${ci}].agent.${toolIdsPath}[${ti}]`,
             "Ensure the capability:<id> matches an existing capability"
           )
         );
@@ -34543,7 +35701,7 @@ function validateConnectivity(fpo) {
             "error",
             "CAPABILITY_TOOLID_REF_NOT_FLOW",
             `toolIds references capability "${refCapId}" which is not a flow capability`,
-            `capabilities[${ci}].agent.toolsConfig.toolIds[${ti}]`,
+            `capabilities[${ci}].agent.${toolIdsPath}[${ti}]`,
             "capability: refs in toolIds can only reference capabilities backed by a flow"
           )
         );
@@ -34554,7 +35712,7 @@ function validateConnectivity(fpo) {
             "error",
             "CAPABILITY_TOOLID_REF_SELF",
             `toolIds cannot reference the capability's own id "${cap.id}"`,
-            `capabilities[${ci}].agent.toolsConfig.toolIds[${ti}]`
+            `capabilities[${ci}].agent.${toolIdsPath}[${ti}]`
           )
         );
       }
@@ -34589,59 +35747,80 @@ function validateConnectivity(fpo) {
   result.valid = result.errors.length === 0;
   return result;
 }
+function safeValidate(fn) {
+  try {
+    return fn();
+  } catch {
+    return emptyResult();
+  }
+}
+function readId(entry) {
+  return entry && typeof entry === "object" ? entry.id : void 0;
+}
 function validateFPO(fpo) {
   const result = emptyResult();
   const capIds = /* @__PURE__ */ new Set();
   for (const [i, cap] of fpo.capabilities.entries()) {
-    if (capIds.has(cap.id)) {
+    const id = readId(cap);
+    if (id === void 0) continue;
+    if (capIds.has(id)) {
       result.errors.push(
-        createIssue("error", "DUPLICATE_CAPABILITY_ID", `Duplicate capability id: "${cap.id}"`, `capabilities[${i}].id`)
+        createIssue("error", "DUPLICATE_CAPABILITY_ID", `Duplicate capability id: "${id}"`, `capabilities[${i}].id`)
       );
     }
-    capIds.add(cap.id);
+    capIds.add(id);
   }
   const toolIdSet = /* @__PURE__ */ new Set();
   for (const [i, tool] of fpo.tools.entries()) {
-    if (toolIdSet.has(tool.id)) {
+    const id = readId(tool);
+    if (id === void 0) continue;
+    if (toolIdSet.has(id)) {
       result.errors.push(
-        createIssue("error", "DUPLICATE_TOOL_ID", `Duplicate tool id: "${tool.id}"`, `tools[${i}].id`)
+        createIssue("error", "DUPLICATE_TOOL_ID", `Duplicate tool id: "${id}"`, `tools[${i}].id`)
       );
     }
-    toolIdSet.add(tool.id);
+    toolIdSet.add(id);
   }
   const surfaceIds = /* @__PURE__ */ new Set();
   for (const [i, surface] of fpo.surfaces.entries()) {
-    if (surfaceIds.has(surface.id)) {
+    const id = readId(surface);
+    if (id === void 0) continue;
+    if (surfaceIds.has(id)) {
       result.errors.push(
-        createIssue("error", "DUPLICATE_SURFACE_ID", `Duplicate surface id: "${surface.id}"`, `surfaces[${i}].id`)
+        createIssue("error", "DUPLICATE_SURFACE_ID", `Duplicate surface id: "${id}"`, `surfaces[${i}].id`)
       );
     }
-    surfaceIds.add(surface.id);
+    surfaceIds.add(id);
   }
   if (fpo.records) {
     const recordIds = /* @__PURE__ */ new Set();
     for (const [i, record2] of fpo.records.entries()) {
-      if (recordIds.has(record2.id)) {
+      const id = readId(record2);
+      if (id === void 0) continue;
+      if (recordIds.has(id)) {
         result.errors.push(
-          createIssue("error", "DUPLICATE_RECORD_ID", `Duplicate record id: "${record2.id}"`, `records[${i}].id`)
+          createIssue("error", "DUPLICATE_RECORD_ID", `Duplicate record id: "${id}"`, `records[${i}].id`)
         );
       }
-      recordIds.add(record2.id);
+      recordIds.add(id);
     }
   }
-  const capIdSet = new Set(fpo.capabilities.map((c) => c.id));
   if (fpo.schedules) {
     const scheduleIds = /* @__PURE__ */ new Set();
     for (const [i, schedule] of fpo.schedules.entries()) {
-      if (scheduleIds.has(schedule.id)) {
-        result.errors.push(
-          createIssue("error", "DUPLICATE_SCHEDULE_ID", `Duplicate schedule id: "${schedule.id}"`, `schedules[${i}].id`)
-        );
+      const id = readId(schedule);
+      if (id !== void 0) {
+        if (scheduleIds.has(id)) {
+          result.errors.push(
+            createIssue("error", "DUPLICATE_SCHEDULE_ID", `Duplicate schedule id: "${id}"`, `schedules[${i}].id`)
+          );
+        }
+        scheduleIds.add(id);
       }
-      scheduleIds.add(schedule.id);
-      if (!capIdSet.has(schedule.capabilityId)) {
+      const capabilityId = schedule && typeof schedule === "object" ? schedule.capabilityId : void 0;
+      if (capabilityId !== void 0 && !capIds.has(capabilityId)) {
         result.errors.push(
-          createIssue("error", "SCHEDULE_CAPABILITY_NOT_FOUND", `Schedule "${schedule.id}" references capability "${schedule.capabilityId}" which does not exist`, `schedules[${i}].capabilityId`)
+          createIssue("error", "SCHEDULE_CAPABILITY_NOT_FOUND", `Schedule "${readId(schedule) ?? ""}" references capability "${capabilityId}" which does not exist`, `schedules[${i}].capabilityId`)
         );
       }
     }
@@ -34649,23 +35828,81 @@ function validateFPO(fpo) {
   if (fpo.secrets) {
     const secretIds = /* @__PURE__ */ new Set();
     for (const [i, secret] of fpo.secrets.entries()) {
-      if (secretIds.has(secret.id)) {
+      const id = readId(secret);
+      if (id === void 0) continue;
+      if (secretIds.has(id)) {
         result.errors.push(
-          createIssue("error", "DUPLICATE_SECRET_ID", `Duplicate secret id: "${secret.id}"`, `secrets[${i}].id`)
+          createIssue("error", "DUPLICATE_SECRET_ID", `Duplicate secret id: "${id}"`, `secrets[${i}].id`)
         );
       }
-      secretIds.add(secret.id);
+      secretIds.add(id);
     }
   }
-  const toolIds = new Set(fpo.tools.map((t) => t.id));
+  const toolIds = new Set(
+    [...toolIdSet].filter((id) => typeof id === "string")
+  );
   const capResults = fpo.capabilities.map(
-    (cap, i) => validateCapability(cap, i, { toolIds })
+    (cap, i) => safeValidate(() => validateCapability(cap, i, { toolIds }))
   );
-  const toolResults = fpo.tools.map((tool, i) => validateToolDefinition(tool, i));
-  const surfaceResults = fpo.surfaces.map((surface, i) => validateSurfaceDefinition(surface, i));
-  const connectivityResult = validateConnectivity(fpo);
+  const toolResults = fpo.tools.map(
+    (tool, i) => safeValidate(() => validateToolDefinition(tool, i))
+  );
+  const surfaceResults = fpo.surfaces.map(
+    (surface, i) => safeValidate(() => validateSurfaceDefinition(surface, i))
+  );
+  const connectivityResult = safeValidate(() => validateConnectivity(fpo));
   return mergeResults(result, ...capResults, ...toolResults, ...surfaceResults, connectivityResult);
 }
+function zodIssueCodeToValidationCode(code) {
+  return code ? `SCHEMA_${code.toUpperCase()}` : "SCHEMA_ERROR";
+}
+function zodIssuesToValidationIssues(issues) {
+  return issues.map(
+    (issue2) => createIssue(
+      "error",
+      zodIssueCodeToValidationCode(issue2.code),
+      issue2.message,
+      issue2.path.map(String).join(".")
+    )
+  );
+}
+function zodIssuesToValidationResult(issues) {
+  const result = emptyResult();
+  result.errors.push(...zodIssuesToValidationIssues(issues));
+  result.valid = false;
+  return result;
+}
+function mergeZodSchemaAndSemantic(parsed, fallbackSemanticInput, validate) {
+  if (parsed.success) {
+    return validate(parsed.data);
+  }
+  const schemaResult = zodIssuesToValidationResult(parsed.error.issues);
+  if (fallbackSemanticInput === null || fallbackSemanticInput === void 0) {
+    return schemaResult;
+  }
+  let semanticResult;
+  try {
+    semanticResult = validate(fallbackSemanticInput);
+  } catch {
+    semanticResult = emptyResult();
+  }
+  const merged = mergeResults(schemaResult, semanticResult);
+  merged.valid = false;
+  return merged;
+}
+function coerceFullProductObjectForSemanticValidation(body) {
+  if (typeof body !== "object" || body === null) return null;
+  const obj = body;
+  return {
+    ...obj,
+    capabilities: Array.isArray(obj.capabilities) ? obj.capabilities : [],
+    tools: Array.isArray(obj.tools) ? obj.tools : [],
+    surfaces: Array.isArray(obj.surfaces) ? obj.surfaces : [],
+    records: Array.isArray(obj.records) ? obj.records : void 0,
+    schedules: Array.isArray(obj.schedules) ? obj.schedules : void 0,
+    secrets: Array.isArray(obj.secrets) ? obj.secrets : void 0
+  };
+}
 var FULL_PRODUCT_OBJECT_TEMPLATE_VERSION = "1.0";
 var FULL_PRODUCT_OBJECT_TEMPLATE_VERSION_1_1 = "1.1";
 var fpoTemplateVariableInputTypeSchema = external_exports.enum([
@@ -34798,9 +36035,6 @@ function getVariableReferences(template) {
   }
   return references;
 }
-function normalizeValidationPath(path16) {
-  return path16.map(String).join(".");
-}
 function coerceFPOTemplateVariableValue(variable, rawValue) {
   if (rawValue === void 0 || rawValue === null || rawValue === "") {
     return void 0;
@@ -34912,11 +36146,7 @@ function validateFPOTemplate(body, options = {}) {
   const parseResult = fullProductObjectTemplateSchema.safeParse(body);
   if (!parseResult.success) {
     const result2 = emptyResult();
-    result2.errors.push(
-      ...parseResult.error.issues.map(
-        (issue2) => createIssue("error", "SCHEMA_ERROR", issue2.message, normalizeValidationPath(issue2.path))
-      )
-    );
+    result2.errors.push(...zodIssuesToValidationIssues(parseResult.error.issues));
     result2.valid = false;
     return {
       ...result2,
@@ -57634,20 +58864,12 @@ function runValidation(body, kind) {
   }
   const parsed = fullProductObjectSchema.safeParse(body);
   if (!parsed.success) {
-    return {
-      kind,
-      valid: false,
-      errors: parsed.error.issues.map(
-        (issue2) => ({
-          code: "SCHEMA_ERROR",
-          message: issue2.message,
-          path: issue2.path.map(String).join("."),
-          severity: "error"
-        })
-      ),
-      warnings: [],
-      recommendations: []
-    };
+    const merged = mergeZodSchemaAndSemantic(
+      parsed,
+      coerceFullProductObjectForSemanticValidation(body),
+      validateFPO
+    );
+    return { kind, ...merged };
   }
   return { kind, ...validateFPO(parsed.data) };
 }