@runtypelabs/cli 2.24.1 → 2.25.1

package/dist/index.js

@@ -3060,9 +3060,9 @@ var $ZodURL = /* @__PURE__ */ $constructor("$ZodURL", (inst, def) => {
   $ZodStringFormat.init(inst, def);
   inst._zod.check = (payload) => {
     try {
-      const trimmed = payload.value.trim();
+      const trimmed2 = payload.value.trim();
       if (!def.normalize && def.protocol?.source === httpProtocol.source) {
-        if (!/^https?:\/\//i.test(trimmed)) {
+        if (!/^https?:\/\//i.test(trimmed2)) {
           payload.issues.push({
             code: "invalid_format",
             format: "url",
@@ -3074,7 +3074,7 @@ var $ZodURL = /* @__PURE__ */ $constructor("$ZodURL", (inst, def) => {
           return;
         }
       }
-      const url2 = new URL(trimmed);
+      const url2 = new URL(trimmed2);
       if (def.hostname) {
         def.hostname.lastIndex = 0;
         if (!def.hostname.test(url2.hostname)) {
@@ -3106,7 +3106,7 @@ var $ZodURL = /* @__PURE__ */ $constructor("$ZodURL", (inst, def) => {
       if (def.normalize) {
         payload.value = url2.href;
       } else {
-        payload.value = trimmed;
+        payload.value = trimmed2;
       }
       return;
     } catch (_2) {
@@ -15181,7 +15181,7 @@ var edgeContextPayloadSchema = external_exports.object({
   exp: external_exports.number().int().positive()
 });
 
-// ../shared/dist/chunk-3FPSMWBQ.mjs
+// ../shared/dist/chunk-OOL23ALD.mjs
 function getNestedValue(obj, path19) {
   let normalizedPath = path19;
   normalizedPath = normalizedPath.replace(/^\$\.?/, "");
@@ -15257,8 +15257,8 @@ var RUNTIME_PREFIXES = {
 };
 var PREFIX_PATTERN = /^([A-Za-z][A-Za-z0-9_-]*):(.*)$/s;
 function classifyVariableReference(token) {
-  const trimmed = token.trim();
-  const prefixMatch = PREFIX_PATTERN.exec(trimmed);
+  const trimmed2 = token.trim();
+  const prefixMatch = PREFIX_PATTERN.exec(trimmed2);
   if (prefixMatch) {
     const prefix = `${prefixMatch[1]}:`;
     const rest = prefixMatch[2] ?? "";
@@ -15266,12 +15266,12 @@ function classifyVariableReference(token) {
     if (spec) {
       return { namespace: spec.namespace, baseName: rest.trim() };
     }
-    return { namespace: "unknown", raw: trimmed };
+    return { namespace: "unknown", raw: trimmed2 };
   }
-  if (isSystemVariable(trimmed)) {
-    return { namespace: "system", baseName: trimmed };
+  if (isSystemVariable(trimmed2)) {
+    return { namespace: "system", baseName: trimmed2 };
   }
-  return { namespace: "plain", baseName: trimmed };
+  return { namespace: "plain", baseName: trimmed2 };
 }
 function isSystemVariable(varName) {
   const rootSegment = varName.split(".")[0] || "";
@@ -15287,15 +15287,15 @@ function parseTemplateExpression(expr) {
       operands: tokens.rawOperands.map(parseOperand)
     };
   }
-  const trimmed = expr.trim();
-  const pipeIndex = trimmed.indexOf("|");
+  const trimmed2 = expr.trim();
+  const pipeIndex = trimmed2.indexOf("|");
   if (pipeIndex === -1) {
-    return { kind: "legacy", variable: trimmed };
+    return { kind: "legacy", variable: trimmed2 };
   }
   return {
     kind: "legacy",
-    variable: trimmed.slice(0, pipeIndex).trim(),
-    defaultValue: trimmed.slice(pipeIndex + 1).trim()
+    variable: trimmed2.slice(0, pipeIndex).trim(),
+    defaultValue: trimmed2.slice(pipeIndex + 1).trim()
   };
 }
 function tokenizeFallbackExpression(expr) {
@@ -15566,7 +15566,7 @@ function resolveFallback(parsed, context, tracking) {
 }
 var templateEngine = new SimpleTemplateEngine();
 
-// ../shared/dist/chunk-ONVX3P3J.mjs
+// ../shared/dist/chunk-CNO2UJFO.mjs
 var tokensSchema = external_exports.object({ input: external_exports.number(), output: external_exports.number() });
 var wireStopReasonSchema = external_exports.enum([
   "end_turn",
@@ -15641,7 +15641,13 @@ var unifiedExecutionErrorEventSchema = external_exports.object({
   error: unifiedErrorPayloadSchema,
   completedAt: external_exports.string().optional(),
   code: external_exports.string().optional(),
-  upgradeUrl: external_exports.string().optional()
+  upgradeUrl: external_exports.string().optional(),
+  // Structured discriminant for a platform-key spend block (credit_exhausted |
+  // trial_expired | auto_topup_failed) so the dashboard paywall can render
+  // differentiated copy. The `PlatformKeyBlockReason` union lives in
+  // `@runtypelabs/model-execution`, which `shared` cannot import — typed as a
+  // string to mirror the sibling `code` / `upgradeUrl` fields.
+  blockReason: external_exports.string().optional()
 });
 var unifiedTurnStartEventSchema = external_exports.object({
   ...unifiedBase,
@@ -15867,7 +15873,11 @@ var unifiedToolCompleteEventSchema = external_exports.object({
 });
 var unifiedSubagentAttributionSchema = external_exports.object({
   toolName: external_exports.string(),
-  agentName: external_exports.string().optional()
+  agentName: external_exports.string().optional(),
+  // Parent-stream correlation id: the subagent tool bubble the client already
+  // saw (the approval's own `toolCallId` is the muted child's never-streamed
+  // tool_use id).
+  parentToolCallId: external_exports.string().optional()
 });
 var unifiedApprovalStartEventSchema = external_exports.object({
   ...unifiedBase,
@@ -16034,7 +16044,8 @@ var externalAgentContextSchema = external_exports.object({
 });
 var subagentAttributionSchema = external_exports.object({
   toolName: external_exports.string(),
-  agentName: external_exports.string().optional()
+  agentName: external_exports.string().optional(),
+  parentToolCallId: external_exports.string().optional()
 });
 var tokensSchema2 = external_exports.object({ input: external_exports.number(), output: external_exports.number() });
 var wireStopReasonSchema2 = external_exports.enum([
@@ -16393,6 +16404,11 @@ var flowErrorEventSchema = external_exports.object({
   // Spread only on platform-key spend errors (api raw-write).
   code: external_exports.string().optional(),
   upgradeUrl: external_exports.string().optional(),
+  // Structured discriminant for a platform-key spend block (credit_exhausted |
+  // trial_expired | auto_topup_failed). Typed as a string here because the
+  // `PlatformKeyBlockReason` union lives in `@runtypelabs/model-execution`,
+  // which `shared` cannot import — mirrors the sibling `code` / `upgradeUrl`.
+  blockReason: external_exports.string().optional(),
   timestamp: external_exports.string().optional(),
   flowId: external_exports.string().optional(),
   toolContext: toolContextSchema.optional()
@@ -16420,7 +16436,13 @@ var flowAwaitEventSchema = external_exports.object({
   // never a control signal.
   awaitReason: external_exports.string().optional(),
   crawlId: external_exports.string().optional(),
-  stepId: external_exports.string().optional()
+  stepId: external_exports.string().optional(),
+  // Approval pauses (`awaitReason: 'approval_required'`) carry the approval
+  // handle + configured timeout (ms). The flow→agent bridges and the unified
+  // translator key on `approvalId` to surface the pause as an approval event
+  // instead of a local-tool await.
+  approvalId: external_exports.string().optional(),
+  timeout: external_exports.number().optional()
 });
 var stepStartEventSchema = external_exports.object({
   ...baseFlowEvent,
@@ -16711,6 +16733,7 @@ var AGENT_CONTENT_CONFIG_KEYS = {
   errorHandling: true,
   artifacts: true,
   loggingPolicy: true,
+  piiRedaction: true,
   temporal: true,
   memory: true,
   sandbox: true,
@@ -17624,6 +17647,51 @@ var retrieveRecordConfigSchema = external_exports.object({
   includeMetadata: external_exports.boolean().optional(),
   streamOutput: external_exports.boolean().optional()
 });
+var LIST_RECORDS_MAX_LIMIT = 1e3;
+var hasNonEmptyString = (value) => typeof value === "string" && value.trim().length > 0;
+var getRecordConfigSchema = external_exports.object({
+  recordId: external_exports.string().optional(),
+  recordType: external_exports.string().optional(),
+  recordName: external_exports.string().optional(),
+  recordFilter: recordFilterSchema.optional(),
+  fieldsToInclude: external_exports.string().optional(),
+  fieldsToExclude: external_exports.string().optional(),
+  availableFields: external_exports.array(external_exports.string()).optional(),
+  includeMetadata: external_exports.boolean().optional(),
+  streamOutput: external_exports.boolean().optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required")
+}).superRefine((config3, ctx) => {
+  const hasFilterType = hasNonEmptyString(config3.recordFilter?.type);
+  if (!hasNonEmptyString(config3.recordId) && !hasNonEmptyString(config3.recordType) && !hasNonEmptyString(config3.recordName) && !hasFilterType) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["recordId"],
+      message: "get-record step requires at least one of 'recordId', 'recordType', 'recordName', or 'recordFilter'"
+    });
+  }
+});
+var listRecordsConfigSchema = external_exports.object({
+  recordType: external_exports.string().optional(),
+  recordName: external_exports.string().optional(),
+  recordFilter: recordFilterSchema.optional(),
+  limit: external_exports.number().int().min(1).max(LIST_RECORDS_MAX_LIMIT).optional(),
+  onEmpty: external_exports.enum(["succeed", "fail"]).optional(),
+  fieldsToInclude: external_exports.string().optional(),
+  fieldsToExclude: external_exports.string().optional(),
+  availableFields: external_exports.array(external_exports.string()).optional(),
+  includeMetadata: external_exports.boolean().optional(),
+  streamOutput: external_exports.boolean().optional(),
+  outputVariable: external_exports.string().min(1, "Output variable is required")
+}).superRefine((config3, ctx) => {
+  const hasFilterType = hasNonEmptyString(config3.recordFilter?.type);
+  if (!hasNonEmptyString(config3.recordType) && !hasNonEmptyString(config3.recordName) && !hasFilterType) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["recordType"],
+      message: "list-records step requires at least one of 'recordType', 'recordName', or 'recordFilter'"
+    });
+  }
+});
 var updateRecordConfigSchema = external_exports.object({
   recordId: external_exports.string().optional(),
   recordType: external_exports.string().optional(),
@@ -17852,6 +17920,8 @@ var sharedStepConfigSchemas = {
   "send-email": sendEmailConfigSchema,
   "paginate-api": paginateApiConfigSchema,
   "retrieve-record": retrieveRecordConfigSchema,
+  "get-record": getRecordConfigSchema,
+  "list-records": listRecordsConfigSchema,
   "update-record": updateRecordConfigSchema,
   "transform-data": transformDataConfigSchema,
   prompt: promptConfigSchema,
@@ -17879,6 +17949,8 @@ var CONTEXT_STEP_TYPES = [
   "crawl",
   "fetch-url",
   "retrieve-record",
+  "get-record",
+  "list-records",
   "fetch-github",
   "api-call",
   "transform-data",
@@ -17970,6 +18042,52 @@ function isCustomSendFromAddressOnManagedDomain(configuredFrom, preferredManaged
     preferredManagedDomain
   );
 }
+function isPlainObject9(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function trimmed(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function retrieveRecordProducesArray(config3) {
+  const recordId = trimmed(config3.recordId);
+  if (recordId) return false;
+  if (config3.retrievalMode && config3.retrievalMode !== "query") return false;
+  const recordType = trimmed(config3.recordType);
+  const recordName = trimmed(config3.recordName);
+  const filter = config3.recordFilter;
+  const filterType = isPlainObject9(filter) ? trimmed(filter.type) : "";
+  return !!(recordType || recordName || filterType);
+}
+function resolveRetrieveRecordAlias(config3) {
+  const common = {
+    recordType: config3.recordType,
+    recordName: config3.recordName,
+    recordFilter: config3.recordFilter,
+    fieldsToInclude: config3.fieldsToInclude,
+    fieldsToExclude: config3.fieldsToExclude,
+    availableFields: config3.availableFields,
+    includeMetadata: config3.includeMetadata,
+    streamOutput: config3.streamOutput,
+    outputVariable: config3.outputVariable
+  };
+  if (retrieveRecordProducesArray(config3)) {
+    return {
+      type: "list-records",
+      config: {
+        ...common,
+        limit: LIST_RECORDS_MAX_LIMIT,
+        onEmpty: "fail"
+      }
+    };
+  }
+  return {
+    type: "get-record",
+    config: {
+      recordId: config3.recordId,
+      ...common
+    }
+  };
+}
 var NormalizationError = class extends Error {
   constructor(message, stepType, fieldName, expectedType, actualValue) {
     super(message);
@@ -18172,6 +18290,8 @@ function normalizeContextStep(apiStep, options = {}) {
     "crawl",
     "fetch-url",
     "retrieve-record",
+    "get-record",
+    "list-records",
     "fetch-github",
     "api-call",
     "transform-data",
@@ -18228,11 +18348,26 @@ function normalizeContextStep(apiStep, options = {}) {
           type: "fetch-url",
           config: normalizeFetchUrlConfig(apiStep.config)
         };
-      case "retrieve-record":
+      case "retrieve-record": {
+        const legacyConfig = normalizeRetrieveRecordConfig(apiStep.config);
+        const aliased = resolveRetrieveRecordAlias(legacyConfig);
+        return {
+          ...baseStep,
+          type: aliased.type,
+          config: aliased.config
+        };
+      }
+      case "get-record":
         return {
           ...baseStep,
-          type: "retrieve-record",
-          config: normalizeRetrieveRecordConfig(apiStep.config)
+          type: "get-record",
+          config: normalizeGetRecordConfig(apiStep.config)
+        };
+      case "list-records":
+        return {
+          ...baseStep,
+          type: "list-records",
+          config: normalizeListRecordsConfig(apiStep.config)
         };
       case "fetch-github":
         return {
@@ -18632,6 +18767,84 @@ function normalizeRetrieveRecordConfig(config3) {
     outputVariable: config3.outputVariable
   };
 }
+function normalizeGetRecordConfig(config3) {
+  validateConfig(config3, "get-record");
+  const filter = config3.recordFilter;
+  const hasFilter = filter && typeof filter === "object" && typeof filter.type === "string" && filter.type.length > 0;
+  if (!config3.recordId && !config3.recordType && !config3.recordName && !hasFilter) {
+    throw new NormalizationError(
+      `get-record step requires at least one of 'recordId', 'recordType', 'recordName', or 'recordFilter'`,
+      "get-record",
+      "recordId/recordType/recordName/recordFilter",
+      "at least one identification field",
+      void 0
+    );
+  }
+  validateString(config3.outputVariable, "outputVariable", "get-record", true);
+  if (config3.fieldsToInclude)
+    validateString(config3.fieldsToInclude, "fieldsToInclude", "get-record");
+  if (config3.fieldsToExclude)
+    validateString(config3.fieldsToExclude, "fieldsToExclude", "get-record");
+  if (config3.availableFields)
+    validateArray(config3.availableFields, "availableFields", "get-record");
+  if (config3.includeMetadata !== void 0)
+    validateBoolean(config3.includeMetadata, "includeMetadata", "get-record");
+  if (config3.streamOutput !== void 0)
+    validateBoolean(config3.streamOutput, "streamOutput", "get-record");
+  return {
+    recordId: config3.recordId,
+    recordType: config3.recordType,
+    recordName: config3.recordName,
+    recordFilter: config3.recordFilter,
+    fieldsToInclude: config3.fieldsToInclude,
+    fieldsToExclude: config3.fieldsToExclude,
+    availableFields: config3.availableFields,
+    includeMetadata: config3.includeMetadata,
+    streamOutput: config3.streamOutput,
+    outputVariable: config3.outputVariable
+  };
+}
+function normalizeListRecordsConfig(config3) {
+  validateConfig(config3, "list-records");
+  const filter = config3.recordFilter;
+  const hasFilter = filter && typeof filter === "object" && typeof filter.type === "string" && filter.type.length > 0;
+  if (!config3.recordType && !config3.recordName && !hasFilter) {
+    throw new NormalizationError(
+      `list-records step requires at least one of 'recordType', 'recordName', or 'recordFilter'`,
+      "list-records",
+      "recordType/recordName/recordFilter",
+      "at least one query field",
+      void 0
+    );
+  }
+  validateString(config3.outputVariable, "outputVariable", "list-records", true);
+  if (config3.limit !== void 0) validateNumber(config3.limit, "limit", "list-records");
+  if (config3.onEmpty !== void 0)
+    validateEnum(config3.onEmpty, ["succeed", "fail"], "onEmpty", "list-records");
+  if (config3.fieldsToInclude)
+    validateString(config3.fieldsToInclude, "fieldsToInclude", "list-records");
+  if (config3.fieldsToExclude)
+    validateString(config3.fieldsToExclude, "fieldsToExclude", "list-records");
+  if (config3.availableFields)
+    validateArray(config3.availableFields, "availableFields", "list-records");
+  if (config3.includeMetadata !== void 0)
+    validateBoolean(config3.includeMetadata, "includeMetadata", "list-records");
+  if (config3.streamOutput !== void 0)
+    validateBoolean(config3.streamOutput, "streamOutput", "list-records");
+  return {
+    recordType: config3.recordType,
+    recordName: config3.recordName,
+    recordFilter: config3.recordFilter,
+    limit: normalizeOptionalNumber(config3.limit),
+    onEmpty: config3.onEmpty,
+    fieldsToInclude: config3.fieldsToInclude,
+    fieldsToExclude: config3.fieldsToExclude,
+    availableFields: config3.availableFields,
+    includeMetadata: config3.includeMetadata,
+    streamOutput: config3.streamOutput,
+    outputVariable: config3.outputVariable
+  };
+}
 function normalizeFetchGithubConfig(config3) {
   validateConfig(config3, "fetch-github");
   validateString(config3.repository, "repository", "fetch-github", true);
@@ -19862,6 +20075,7 @@ function sanitizeCodeToolIdentifier(name) {
   if (/^[0-9]/.test(safe)) safe = "_" + safe;
   return safe;
 }
+var MAX_DURABLE_POLL_ATTEMPTS = 1e3;
 var flowStepValidationSchema = external_exports.object({
   // Optional stable client-supplied identifier. Preserved across saves so that
   // `flow_step_results.stepId` references stay valid and dashboard UI state
@@ -19927,7 +20141,12 @@ var LEGACY_TOOL_KEY_SUGGESTIONS = {
 function isObjectRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-var NETWORK_ISOLATED_SANDBOX_PROVIDERS = /* @__PURE__ */ new Set(["cloudflare-worker", "quickjs"]);
+var NETWORK_ISOLATED_SANDBOX_PROVIDERS = /* @__PURE__ */ new Set([
+  "cloudflare-worker",
+  "quickjs",
+  "runtype-sandbox",
+  "cloudflare-sandbox"
+]);
 var MAX_CONDITIONAL_NESTING_DEPTH = 10;
 var FETCH_CALL_PATTERN = /\bfetch\s*\(/;
 function validateSandboxNetworkAccess(config3, stepIndex, stepRef, buckets) {
@@ -20535,6 +20754,134 @@ function validateConditionExpressions(flowSteps, buckets, conditionalStepsExceed
     walkStepConditionExpressions(step, `flowSteps[${stepIndex}]`, stepRef, buckets, 1);
   }
 }
+var TOOL_STRATEGY_REQUIRED_MULTISTEP_CODE = "TOOL_STRATEGY_REQUIRED_MULTISTEP";
+function isRequiredMultiStepFootgun(input) {
+  if (input.toolCallStrategy !== "required") return false;
+  if (typeof input.maxTurns === "number" && input.maxTurns > 1) return true;
+  return input.maxToolCalls !== 1;
+}
+function toolStrategyRequiredMultiStepMessage() {
+  return 'Tool call strategy "required" forces the model to call a tool on every step. Unless the turn is capped to a single tool call (maxToolCalls of 1), the model can never return a final text answer and the output comes back empty \u2014 the runtime default allows multiple tool calls, so leaving maxToolCalls unset (or above 1), or running a multi-turn loop, triggers this. Use "auto" (recommended) so the model decides when to call tools and can finish with text, or keep "required" only for a single forced tool call (maxToolCalls of 1, no loop).';
+}
+function validateToolCallStrategyMultiStep(flowSteps, buckets) {
+  for (const [stepIndex, step] of flowSteps.entries()) {
+    if (step.enabled === false) continue;
+    if (step.type !== "prompt") continue;
+    if (!isObjectRecord(step.config)) continue;
+    const tools = step.config.tools;
+    if (!isObjectRecord(tools)) continue;
+    const toolCallStrategy = tools.toolCallStrategy ?? tools.tool_call_strategy;
+    const maxToolCallsRaw = tools.maxToolCalls ?? tools.max_tool_calls;
+    const maxToolCalls = typeof maxToolCallsRaw === "number" ? maxToolCallsRaw : void 0;
+    if (isRequiredMultiStepFootgun({ toolCallStrategy, maxToolCalls })) {
+      addIssue(
+        "warning",
+        {
+          code: TOOL_STRATEGY_REQUIRED_MULTISTEP_CODE,
+          message: toolStrategyRequiredMultiStepMessage(),
+          path: `flowSteps[${stepIndex}].config.tools`,
+          step: { index: stepIndex, name: step.name, type: step.type },
+          details: { toolCallStrategy: "required", maxToolCalls }
+        },
+        buckets
+      );
+    }
+  }
+}
+var WAIT_UNTIL_MAX_ATTEMPTS_CLAMPED_CODE = "WAIT_UNTIL_MAX_ATTEMPTS_CLAMPED";
+function validateWaitUntilPollBudget(flowSteps, buckets) {
+  for (const [stepIndex, step] of flowSteps.entries()) {
+    if (step.enabled === false) continue;
+    if (step.type !== "wait-until") continue;
+    if (!isObjectRecord(step.config)) continue;
+    const poll = step.config.poll;
+    if (!isObjectRecord(poll)) continue;
+    const maxAttempts = poll.maxAttempts;
+    if (typeof maxAttempts !== "number" || maxAttempts <= MAX_DURABLE_POLL_ATTEMPTS) continue;
+    addIssue(
+      "warning",
+      {
+        code: WAIT_UNTIL_MAX_ATTEMPTS_CLAMPED_CODE,
+        message: `poll.maxAttempts (${maxAttempts}) exceeds the durable poll budget of ${MAX_DURABLE_POLL_ATTEMPTS} attempts; when this step runs as a durable Workflow poll the attempt count is clamped to ${MAX_DURABLE_POLL_ATTEMPTS}. To cover the same wall-clock window, increase poll.intervalMs instead of adding attempts.`,
+        path: `flowSteps[${stepIndex}].config.poll.maxAttempts`,
+        step: { index: stepIndex, name: step.name, type: step.type },
+        details: { maxAttempts, maxDurablePollAttempts: MAX_DURABLE_POLL_ATTEMPTS }
+      },
+      buckets
+    );
+  }
+}
+var LIST_RECORDS_OBJECT_ACCESS_CODE = "LIST_RECORDS_OBJECT_ACCESS";
+var DEPRECATED_STEP_TYPE_CODE = "DEPRECATED_STEP_TYPE";
+function stepProducesRecordArray(type, config3) {
+  if (type === "list-records") return true;
+  if (type === "retrieve-record") {
+    return resolveRetrieveRecordAlias(config3).type === "list-records";
+  }
+  return false;
+}
+function validateListRecordsArrayAccess(flowSteps, buckets) {
+  const arrayOutputs = /* @__PURE__ */ new Map();
+  for (const [stepIndex, step] of flowSteps.entries()) {
+    if (step.enabled === false) continue;
+    if (!isObjectRecord(step.config)) continue;
+    const config3 = step.config;
+    for (const { variable, fieldPath } of extractVariableReferences(config3)) {
+      const classification = classifyVariableReference(variable);
+      if (classification.namespace !== "plain" && classification.namespace !== "flow") continue;
+      const segments = classification.baseName.split(".");
+      const root = segments[0] || "";
+      const origin = arrayOutputs.get(root);
+      if (!origin) continue;
+      if (segments.length < 2) continue;
+      const field = segments[1] || "";
+      if (/^\d+$/.test(field) || field === "length") continue;
+      addIssue(
+        "warning",
+        {
+          code: LIST_RECORDS_OBJECT_ACCESS_CODE,
+          message: `Variable "{{${variable}}}" reads field "${field}" on "${root}", but step "${origin.name}" returns an ARRAY of records (even when a single record matches). Object-style access resolves to undefined at runtime. Index into the array first \u2014 e.g. "{{${root}.0.${field}}}" for the first record \u2014 or loop over "${root}". To get a single record object, use a get-record step.`,
+          path: `flowSteps[${stepIndex}].config.${fieldPath}`,
+          step: { index: stepIndex, name: step.name, type: step.type },
+          details: {
+            variable,
+            rootVariable: root,
+            field,
+            originStepIndex: origin.index,
+            originStepName: origin.name
+          }
+        },
+        buckets
+      );
+    }
+    const outputVar = getStepOutputVariable(step);
+    if (outputVar) {
+      if (stepProducesRecordArray(step.type, config3)) {
+        arrayOutputs.set(outputVar, { index: stepIndex, name: step.name });
+      } else {
+        arrayOutputs.delete(outputVar);
+      }
+    }
+  }
+}
+function validateDeprecatedStepTypes(flowSteps, buckets) {
+  for (const [stepIndex, step] of flowSteps.entries()) {
+    if (step.type !== "retrieve-record") continue;
+    const config3 = isObjectRecord(step.config) ? step.config : {};
+    const resolvedType = resolveRetrieveRecordAlias(config3).type;
+    addIssue(
+      "warning",
+      {
+        code: DEPRECATED_STEP_TYPE_CODE,
+        message: `The "retrieve-record" step is deprecated. Use "get-record" (returns a single record object) or "list-records" (returns an array of records) instead \u2014 this config resolves to "${resolvedType}".`,
+        path: `flowSteps[${stepIndex}].type`,
+        step: { index: stepIndex, name: step.name, type: step.type },
+        details: { deprecatedType: "retrieve-record", resolvedType }
+      },
+      buckets
+    );
+  }
+}
 function collectAccountScopedReferences(step, stepIndex, pendingChecks) {
   const stepRef = {
     index: stepIndex,
@@ -21118,6 +21465,10 @@ function collectFlowStructureIssues(flowData, deps, buckets) {
   validateUpsertRecordSourceShape(flowData.flowSteps, buckets);
   validateStoreVectorSource(flowData.flowSteps, buckets, deps.declaredFlowInputs);
   validateConditionExpressions(flowData.flowSteps, buckets, conditionalStepsExceedingDepth);
+  validateToolCallStrategyMultiStep(flowData.flowSteps, buckets);
+  validateListRecordsArrayAccess(flowData.flowSteps, buckets);
+  validateWaitUntilPollBudget(flowData.flowSteps, buckets);
+  validateDeprecatedStepTypes(flowData.flowSteps, buckets);
   return { pendingChecks };
 }
 function validateFlowStructure(flowData, deps = {}) {
@@ -37609,7 +37960,11 @@ var BUILT_IN_GRADER_IDS = [
   "followsInstructions",
   "grounded",
   "rightTone",
-  "safeToSend"
+  "safeToSend",
+  "staysOnTask",
+  "sameLanguage",
+  "refusesWhenItShould",
+  "noPersonalData"
 ];
 var graderSeveritySchema = external_exports.enum(["gate", "soft"]);
 var severityFields = { severity: graderSeveritySchema.optional() };
@@ -37713,41 +38068,141 @@ var caseExpectedSchema = external_exports.object({
   json: external_exports.unknown().optional(),
   facts: external_exports.array(external_exports.string()).optional()
 });
+var EVAL_CASE_ORIGINS = ["manual", "saved_from_run", "generated", "imported", "fpo"];
+var evalCaseOriginSchema = external_exports.enum(EVAL_CASE_ORIGINS);
 var DEFAULT_MODELS_FOR_NEW_ACCOUNTS = [
   // Mixlayer models
-  { provider: "runtype", modelId: "qwen/qwen3.6-27b", isDefault: false },
-  { provider: "runtype", modelId: "qwen3.6-plus", isDefault: false },
-  // General Compute (platform key) - explicit provider prefix, single-provider model
-  { provider: "runtype", modelId: "general-compute/minimax-m2.7", isDefault: false },
+  {
+    provider: "runtype",
+    modelId: "qwen/qwen3.6-27b",
+    isDefault: false,
+    strengths: "Fast, low-cost open-weight workhorse with reasoning, tool-use, and vision \u2014 good for high-volume extraction, classification, and simple transforms.",
+    bestFor: ["fast-cheap", "vision"]
+  },
   // Routed models - benefit from automatic provider optimization
   // OpenAI models (routed via OpenAI direct, with Vercel fallback)
-  { provider: "runtype", modelId: "gpt-5.5", isDefault: false },
-  { provider: "runtype", modelId: "gpt-5.4-mini", isDefault: false },
-  { provider: "runtype", modelId: "gpt-5.4-nano", isDefault: false },
+  {
+    provider: "runtype",
+    modelId: "gpt-5.5",
+    isDefault: false,
+    strengths: "Top-tier general reasoning and tool-use with excellent structured-output reliability, vision, and a 1M context \u2014 a strong pick for complex, correctness-sensitive steps.",
+    bestFor: ["default", "deep-reasoning", "agentic-tools", "vision", "long-context"]
+  },
+  {
+    provider: "runtype",
+    modelId: "gpt-5.4-mini",
+    isDefault: false,
+    strengths: "Fast and affordable with dependable JSON formatting \u2014 a good fit for mid-complexity task steps.",
+    bestFor: ["fast-cheap", "default"]
+  },
+  {
+    provider: "runtype",
+    modelId: "gpt-5.4-nano",
+    isDefault: false,
+    strengths: "Cheapest and fastest GPT-5 tier \u2014 reserve for trivial deterministic transforms, routing, and classification, not complex authoring.",
+    bestFor: ["fast-cheap"]
+  },
   // Anthropic models (routed via Anthropic direct, with Vertex/Bedrock fallback)
-  { provider: "runtype", modelId: "claude-haiku-4-5", isDefault: false },
-  { provider: "runtype", modelId: "claude-sonnet-4-6", isDefault: false },
-  { provider: "runtype", modelId: "claude-opus-4-8", isDefault: false },
+  {
+    provider: "runtype",
+    modelId: "claude-haiku-4-5",
+    isDefault: false,
+    strengths: "Fast and inexpensive while retaining real reasoning, tool-use, and vision \u2014 great for high-volume task steps that still need some judgment.",
+    bestFor: ["fast-cheap", "agentic-tools", "vision"]
+  },
+  {
+    provider: "runtype",
+    modelId: "claude-sonnet-5",
+    isDefault: false,
+    strengths: "Balanced all-rounder: strong reasoning, very reliable multi-round tool loops, vision, and a 1M context \u2014 an excellent choice for agentic and structured work.",
+    bestFor: ["default", "agentic-tools", "vision", "long-context"]
+  },
+  {
+    provider: "runtype",
+    modelId: "claude-opus-4-8",
+    isDefault: false,
+    strengths: "Deepest reasoning and planning for hard analysis and multi-constraint synthesis, with vision and a 1M context \u2014 premium-priced, so reserve for genuinely difficult steps.",
+    bestFor: ["deep-reasoning", "vision", "long-context"]
+  },
   // Google models (routed via Google direct, with Vertex/Vercel fallback)
-  { provider: "runtype", modelId: "gemini-3-1-flash-lite", isDefault: false },
-  { provider: "runtype", modelId: "gemini-3.5-flash", isDefault: false },
-  { provider: "runtype", modelId: "gemini-3-1-flash-image", isDefault: false },
-  { provider: "runtype", modelId: "gemini-3.1-pro", isDefault: false },
+  {
+    provider: "runtype",
+    modelId: "gemini-3-1-flash-lite",
+    isDefault: false,
+    strengths: "Very fast and very cheap with full multimodal input (vision and audio), good structured output, and a 1M context \u2014 ideal for high-volume, simple steps.",
+    bestFor: ["fast-cheap", "vision", "long-context"]
+  },
+  {
+    provider: "runtype",
+    modelId: "gemini-3.5-flash",
+    isDefault: false,
+    strengths: "Fast, low-cost, and natively multimodal with good reasoning, tool-use, and a 1M context \u2014 a strong choice for vision and high-throughput steps.",
+    bestFor: ["default", "vision", "fast-cheap", "agentic-tools", "long-context"]
+  },
+  {
+    provider: "runtype",
+    modelId: "gemini-3-1-flash-image",
+    isDefault: false,
+    strengths: "Specialised for image generation and editing (image output) \u2014 use for steps that produce images, not text reasoning.",
+    bestFor: ["image-generation"]
+  },
+  {
+    provider: "runtype",
+    modelId: "gemini-3.1-pro",
+    isDefault: false,
+    strengths: "Google's frontier tier: strong reasoning, a 1M context, and multimodal input \u2014 for complex analytical or long-document steps.",
+    bestFor: ["deep-reasoning", "vision", "long-context"]
+  },
   // Inception models (routed via Vercel)
-  { provider: "runtype", modelId: "mercury-2", isDefault: false },
+  {
+    provider: "runtype",
+    modelId: "mercury-2",
+    isDefault: false,
+    strengths: "Diffusion-based LLM optimised for very low latency \u2014 good when speed matters more than deep reasoning.",
+    bestFor: ["fast-cheap"]
+  },
   // Moonshot models (routed via Vercel)
   // Kimi K2.6 is the default model: a reasoning + tool-use + vision model
   // already trusted as the product-generator default.
-  { provider: "runtype", modelId: "kimi-k2.6", isDefault: true },
+  {
+    provider: "runtype",
+    modelId: "kimi-k2.6",
+    isDefault: true,
+    strengths: "Capable open agentic model with reasoning, tool-use, and vision at strong value \u2014 the current account default and a dependable general workhorse.",
+    bestFor: ["default", "agentic-tools", "vision"]
+  },
   // NVIDIA Nemotron Ultra (reasoning + tool-use flagship, routed via Vercel)
-  { provider: "runtype", modelId: "nemotron-3-ultra-550b-a55b", isDefault: false },
+  {
+    provider: "runtype",
+    modelId: "nemotron-3-ultra-550b-a55b",
+    isDefault: false,
+    strengths: "Large open-weight reasoning and tool-use flagship with a 1M context at a low price \u2014 strong analytical depth where an open model is preferred.",
+    bestFor: ["deep-reasoning", "agentic-tools", "long-context"]
+  },
   // Google models (routed via Cloudflare Workers AI)
-  { provider: "runtype", modelId: "gemma-4-26b-a4b-it", isDefault: false },
+  {
+    provider: "runtype",
+    modelId: "gemma-4-26b-a4b-it",
+    isDefault: false,
+    strengths: "Lightweight open-weight instruct model served free on Workers AI \u2014 fine for straightforward general tasks at zero cost.",
+    bestFor: ["fast-cheap"]
+  },
   // Z.ai GLM-5.2 (agentic coding flagship, routed via Cloudflare Workers AI,
   // Vercel fallback). The bare routed name resolves to `@cf/zai-org/glm-5.2`.
-  { provider: "runtype", modelId: "glm-5.2", isDefault: false }
+  {
+    provider: "runtype",
+    modelId: "glm-5.2",
+    isDefault: false,
+    strengths: "Agentic flagship \u2014 best-in-class at long, multi-round tool-call loops and coding/agent workflows, with a 1M context; well suited to tool-heavy agent steps.",
+    bestFor: ["agentic-tools", "default", "deep-reasoning", "long-context"]
+  }
 ];
 var DEFAULT_MODEL_ID = DEFAULT_MODELS_FOR_NEW_ACCOUNTS.find((m2) => m2.isDefault)?.modelId ?? "kimi-k2.6";
+function renderDefaultModelStrengthsGuide() {
+  return DEFAULT_MODELS_FOR_NEW_ACCOUNTS.map(
+    (m2) => `- \`${m2.modelId}\`${m2.isDefault ? " (account default)" : ""} \u2014 ${m2.strengths}`
+  ).join("\n");
+}
 var userProfileFeaturesSchema = external_exports.object({
   enableAgentSkills: external_exports.boolean(),
   // Gates the WebMCP-powered dashboard assistant (copilot panel + chat
@@ -37768,9 +38223,21 @@ var userProfileFeaturesSchema = external_exports.object({
   // `POST /v1/skills/scan` verdict UI). Driven by the `enable-skill-scanner`
   // boolean flag (fail-closed until a rule enables it). The scan ROUTE stays
   // reachable; this only hides the UI while the scanner rollout completes.
-  enableSkillScanner: external_exports.boolean()
+  enableSkillScanner: external_exports.boolean(),
+  // Gates the usage-based-pricing dashboard surfaces (card-centric paywall /
+  // slow-mode copy, trial-expired alerts, CTAs to the credit-card entry page).
+  // Driven by the `usage-based-pricing` boolean flag (fail-closed in
+  // production until Lane 1 is live and a rule ramps a cohort). Off renders
+  // today's UI byte-identically.
+  usageBasedPricing: external_exports.boolean()
 });
 var MODEL_FAMILY_PROVIDER_IDS = {
+  "arrow-1-1": {
+    "vercel": "quiverai/arrow-1.1"
+  },
+  "arrow-1.1": {
+    "vercel": "quiverai/arrow-1.1"
+  },
   "claude-fable-5": {
     "anthropic": "claude-fable-5"
   },
@@ -37862,6 +38329,10 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "claude-sonnet-4.6": {
     "vercel": "anthropic/claude-sonnet-4.6"
   },
+  "claude-sonnet-5": {
+    "anthropic": "claude-sonnet-5",
+    "vercel": "anthropic/claude-sonnet-5"
+  },
   "codestral": {
     "vercel": "mistral/codestral"
   },
@@ -38046,6 +38517,9 @@ var MODEL_FAMILY_PROVIDER_IDS = {
     "google": "gemini-3.1-flash-lite",
     "vercel": "google/gemini-3.1-flash-lite"
   },
+  "gemini-3-1-flash-lite-image": {
+    "vercel": "google/gemini-3.1-flash-lite-image"
+  },
   "gemini-3-1-pro": {
     "google": "gemini-3.1-pro-preview",
     "vercel": "google/gemini-3.1-pro-preview"
@@ -38078,6 +38552,9 @@ var MODEL_FAMILY_PROVIDER_IDS = {
     "google": "gemini-3.1-flash-lite",
     "vercel": "google/gemini-3.1-flash-lite"
   },
+  "gemini-3.1-flash-lite-image": {
+    "vercel": "google/gemini-3.1-flash-lite-image"
+  },
   "gemini-3.1-pro-preview": {
     "google": "gemini-3.1-pro-preview",
     "vercel": "google/gemini-3.1-pro-preview"
@@ -38105,89 +38582,19 @@ var MODEL_FAMILY_PROVIDER_IDS = {
     "togetherai": "togetherai/pearl-ai/gemma-4-31b-it",
     "vercel": "google/gemma-4-31b-it"
   },
-  "glm-4-5": {
-    "vercel": "zai/glm-4.5"
-  },
-  "glm-4-5-air": {
-    "vercel": "zai/glm-4.5-air"
-  },
-  "glm-4-5v": {
-    "vercel": "zai/glm-4.5v"
-  },
-  "glm-4-6": {
-    "vercel": "zai/glm-4.6"
-  },
-  "glm-4-6v": {
-    "vercel": "zai/glm-4.6v"
-  },
-  "glm-4-6v-flash": {
-    "vercel": "zai/glm-4.6v-flash"
-  },
-  "glm-4-7": {
-    "vercel": "zai/glm-4.7"
-  },
-  "glm-4-7-flash": {
-    "vercel": "zai/glm-4.7-flash"
-  },
-  "glm-4-7-flashx": {
-    "vercel": "zai/glm-4.7-flashx"
-  },
-  "glm-4.5": {
-    "vercel": "zai/glm-4.5"
-  },
-  "glm-4.5-air": {
-    "vercel": "zai/glm-4.5-air"
-  },
-  "glm-4.5v": {
-    "vercel": "zai/glm-4.5v"
-  },
-  "glm-4.6": {
-    "vercel": "zai/glm-4.6"
-  },
-  "glm-4.6v": {
-    "vercel": "zai/glm-4.6v"
-  },
-  "glm-4.6v-flash": {
-    "vercel": "zai/glm-4.6v-flash"
-  },
-  "glm-4.7": {
-    "vercel": "zai/glm-4.7"
-  },
-  "glm-4.7-flash": {
-    "vercel": "zai/glm-4.7-flash"
-  },
-  "glm-4.7-flashx": {
-    "vercel": "zai/glm-4.7-flashx"
-  },
-  "glm-5": {
-    "togetherai": "togetherai/zai-org/GLM-5",
-    "vercel": "zai/glm-5"
-  },
-  "glm-5-1": {
-    "togetherai": "togetherai/zai-org/GLM-5.1",
-    "vercel": "zai/glm-5.1"
-  },
   "glm-5-2": {
+    "togetherai": "togetherai/zai-org/GLM-5.2",
     "vercel": "zai/glm-5.2"
   },
   "glm-5-2-fast": {
     "vercel": "zai/glm-5.2-fast"
   },
-  "glm-5-turbo": {
-    "vercel": "zai/glm-5-turbo"
-  },
-  "glm-5.1": {
-    "vercel": "zai/glm-5.1"
-  },
   "glm-5.2": {
     "vercel": "zai/glm-5.2"
   },
   "glm-5.2-fast": {
     "vercel": "zai/glm-5.2-fast"
   },
-  "glm-5v-turbo": {
-    "vercel": "zai/glm-5v-turbo"
-  },
   "google/gemma-4-31B-it": {
     "togetherai": "togetherai/google/gemma-4-31B-it"
   },
@@ -38519,6 +38926,9 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "grok-imagine-video-1-5": {
     "vercel": "xai/grok-imagine-video-1.5-preview"
   },
+  "grok-imagine-video-1.5": {
+    "vercel": "xai/grok-imagine-video-1.5"
+  },
   "grok-imagine-video-1.5-preview": {
     "vercel": "xai/grok-imagine-video-1.5-preview"
   },
@@ -38735,22 +39145,6 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "mimo-v2.5-pro": {
     "vercel": "xiaomi/mimo-v2.5-pro"
   },
-  "minimax-m2": {
-    "vercel": "minimax/minimax-m2"
-  },
-  "minimax-m2-1": {
-    "vercel": "minimax/minimax-m2.1"
-  },
-  "minimax-m2-1-lightning": {
-    "vercel": "minimax/minimax-m2.1-lightning"
-  },
-  "minimax-m2-5": {
-    "togetherai": "togetherai/MiniMaxAI/MiniMax-M2.5",
-    "vercel": "minimax/minimax-m2.5"
-  },
-  "minimax-m2-5-highspeed": {
-    "vercel": "minimax/minimax-m2.5-highspeed"
-  },
   "minimax-m2-7": {
     "general-compute": "general-compute/minimax-m2.7",
     "togetherai": "togetherai/MiniMaxAI/MiniMax-M2.7",
@@ -38759,18 +39153,6 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "minimax-m2-7-highspeed": {
     "vercel": "minimax/minimax-m2.7-highspeed"
   },
-  "minimax-m2.1": {
-    "vercel": "minimax/minimax-m2.1"
-  },
-  "minimax-m2.1-lightning": {
-    "vercel": "minimax/minimax-m2.1-lightning"
-  },
-  "minimax-m2.5": {
-    "vercel": "minimax/minimax-m2.5"
-  },
-  "minimax-m2.5-highspeed": {
-    "vercel": "minimax/minimax-m2.5-highspeed"
-  },
   "minimax-m2.7": {
     "general-compute": "general-compute/minimax-m2.7",
     "vercel": "minimax/minimax-m2.7"
@@ -38782,9 +39164,6 @@ var MODEL_FAMILY_PROVIDER_IDS = {
     "togetherai": "togetherai/MiniMaxAI/MiniMax-M3",
     "vercel": "minimax/minimax-m3"
   },
-  "MiniMaxAI/MiniMax-M2.5": {
-    "togetherai": "togetherai/MiniMaxAI/MiniMax-M2.5"
-  },
   "MiniMaxAI/MiniMax-M2.7": {
     "togetherai": "togetherai/MiniMaxAI/MiniMax-M2.7"
   },
@@ -39372,11 +39751,8 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "whisper-1": {
     "vercel": "openai/whisper-1"
   },
-  "zai-org/GLM-5": {
-    "togetherai": "togetherai/zai-org/GLM-5"
-  },
-  "zai-org/GLM-5.1": {
-    "togetherai": "togetherai/zai-org/GLM-5.1"
+  "zai-org/GLM-5.2": {
+    "togetherai": "togetherai/zai-org/GLM-5.2"
   }
 };
 var PLATFORM_KEY_PROVIDER_MAP = {
@@ -40362,10 +40738,12 @@ var sandboxConfigSchema = external_exports.object({
   instanceType: external_exports.enum(["standard-1", "standard-2", "standard-3", "standard-4"]).optional(),
   networkAccess: sandboxNetworkAccessSchema.optional(),
   ttl: external_exports.enum(["5m", "1h", "24h", "unlimited"]).optional(),
-  sleepAfter: external_exports.enum(["5m", "15m", "30m", "1h"]).optional(),
-  // Opt-in approval gate on `bash`. Default false; wiring lands in Phase 3. The
-  // approval decision is on tool name + params only — never the agent's reason.
-  requireApprovalForBash: external_exports.boolean().optional()
+  sleepAfter: external_exports.enum(["5m", "15m", "30m", "1h"]).optional()
+  // NOTE: a `requireApprovalForBash` knob was forward-declared here for Phase 3
+  // but never wired to any runtime gate, so it was REMOVED from the public
+  // schema rather than ship a misleading, inert control (post-Fable handoff 05,
+  // F3). To gate `bash` today use the generic `tools.approval` config, which
+  // matches the tool by name. Re-add the dedicated knob only with its wiring.
 });
 var agentRuntimeConfigSchema = external_exports.object({
   model: external_exports.string().optional(),
@@ -40494,6 +40872,10 @@ var agentRuntimeConfigSchema = external_exports.object({
   }).optional(),
   errorHandling: errorHandlingSchema,
   loggingPolicy: external_exports.enum(["default", "on", "off"]).optional(),
+  // Opt-in PII redaction for tail-log and telemetry payloads. `'default'`
+  // defers to a lower layer (surface/product) or the resolver default (off).
+  // Mirrors `loggingPolicy`.
+  piiRedaction: external_exports.enum(["default", "off", "redact"]).optional(),
   // Opt-in temporal awareness. `injectElapsed` turns on the automatic
   // "time has passed" decorator (a `<temporal_context>` block prepended to
   // the user turn at dispatch, gated on turn ≥ 2 and a gap ≥
@@ -40519,6 +40901,142 @@ var agentRuntimeConfigSchema = external_exports.object({
   // `./tenancy-strategy`; the expansion + gate logic lives in apps/api.
   tenancyStrategy: tenancyStrategySchema.optional()
 });
+var identityAdapterKindSchema = external_exports.enum(["oidc-jwt", "session", "custom"]);
+var ASYMMETRIC_JWT_ALGORITHMS = [
+  "RS256",
+  "RS384",
+  "RS512",
+  "PS256",
+  "PS384",
+  "PS512",
+  "ES256",
+  "ES384",
+  "ES512",
+  "EdDSA"
+];
+var asymmetricAlgorithmSchema = external_exports.enum(ASYMMETRIC_JWT_ALGORITHMS);
+var httpsUrlSchema = external_exports.string().url().refine((value) => value.startsWith("https://"), {
+  message: "must be an https:// URL (plaintext http is not accepted)."
+});
+var claimMapSchema = external_exports.object({
+  /** JSON path (dot notation) to the end-user id, e.g. `sub`. */
+  subject: external_exports.string().min(1),
+  /** JSON path to the tenant id, e.g. `org_id` / `o.id` / `organizationId`. Optional. */
+  tenant: external_exports.string().min(1).optional(),
+  /** JSON path to the end-user email. Optional. */
+  email: external_exports.string().min(1).optional(),
+  /** JSON path to a roles claim. Optional, display/authz context only. */
+  roles: external_exports.string().min(1).optional(),
+  /** JSON path to a permissions claim. Optional. */
+  permissions: external_exports.string().min(1).optional()
+});
+var oboModeSchema = external_exports.enum([
+  "token-exchange-8693",
+  // Okta / Auth0 Custom Token Exchange (RFC 8693)
+  "federated-token-vault",
+  // Auth0 Token Vault, WorkOS Pipes, Clerk OAuth tokens
+  "customer-endpoint"
+  // Better Auth / custom escape hatch
+]);
+var baseDescriptorShape = {
+  /** Stable integration id (surface-scoped). Also the isolation namespace (C1). */
+  id: external_exports.string().min(1),
+  kind: identityAdapterKindSchema,
+  claimMap: claimMapSchema,
+  /**
+   * The strongest assurance this integration may confer. Bounded ABOVE by the
+   * kind ceiling ({@link assuranceCeilingForKind}) — may only lower it, never
+   * raise it. A `custom`/`session` descriptor cannot declare `verified`.
+   */
+  maxAssurance: tenancyAssuranceLevelSchema.optional(),
+  capabilities: external_exports.object({
+    obo: external_exports.boolean().default(false),
+    oboMode: oboModeSchema.optional()
+  }).default({ obo: false })
+};
+var verifiableDescriptorShape = {
+  /** Expected `iss`. REQUIRED, non-empty, non-wildcard. */
+  issuer: httpsUrlSchema,
+  /** JWKS endpoint for the issuer's public keys. REQUIRED. */
+  jwksUri: httpsUrlSchema,
+  /** Expected `aud`. REQUIRED, non-empty, non-wildcard (see refinement). */
+  audience: external_exports.union([external_exports.string().min(1), external_exports.array(external_exports.string().min(1)).nonempty()]),
+  /** Non-empty subset of {@link ASYMMETRIC_JWT_ALGORITHMS}. */
+  allowedAlgorithms: external_exports.array(asymmetricAlgorithmSchema).nonempty(),
+  clockSkewSec: external_exports.number().int().min(0).max(120).optional()
+};
+var identityAdapterDescriptorSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    ...baseDescriptorShape,
+    ...verifiableDescriptorShape,
+    kind: external_exports.literal("oidc-jwt"),
+    /** `azp` allowlist (Clerk CSRF/origin guard, Auth0 authorized party). */
+    authorizedParties: external_exports.array(external_exports.string().min(1)).optional(),
+    /** Provider-specific post-verify policy toggles. */
+    claimPolicy: external_exports.object({
+      rejectImpersonation: external_exports.boolean().optional(),
+      // Clerk `act`
+      rejectPendingOrg: external_exports.boolean().optional(),
+      // Clerk `sts:pending`
+      rejectAudienceEqualsAzp: external_exports.boolean().optional(),
+      // Auth0 ID-vs-access-token
+      requireIssuerPathSegment: external_exports.string().min(1).optional()
+      // Okta `/oauth2/{id}`
+    }).optional()
+  }),
+  external_exports.object({
+    ...baseDescriptorShape,
+    ...verifiableDescriptorShape,
+    kind: external_exports.literal("session")
+  }),
+  external_exports.object({
+    ...baseDescriptorShape,
+    kind: external_exports.literal("custom"),
+    /** The customer verify endpoint (HTTPS). Egress is SSRF-guarded at call time. */
+    verifyEndpoint: httpsUrlSchema
+  })
+]).superRefine((descriptor, ctx) => {
+  if (descriptor.kind === "oidc-jwt" || descriptor.kind === "session") {
+    const auds = Array.isArray(descriptor.audience) ? descriptor.audience : [descriptor.audience];
+    if (auds.some((a) => a.trim() === "*" || a.trim() === "")) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["audience"],
+        message: "audience must name a specific relying party (no wildcard / empty value)."
+      });
+    }
+  }
+  if (descriptor.maxAssurance) {
+    const ceiling = assuranceCeilingForKind(descriptor.kind);
+    if (assuranceRank(descriptor.maxAssurance) === 0) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["maxAssurance"],
+        message: "maxAssurance cannot be 'anonymous' \u2014 it is a ceiling; omit the field or use 'asserted' / 'verified'."
+      });
+    } else if (assuranceRank(descriptor.maxAssurance) > assuranceRank(ceiling)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["maxAssurance"],
+        message: `maxAssurance '${descriptor.maxAssurance}' exceeds the '${descriptor.kind}' kind ceiling '${ceiling}'.`
+      });
+    }
+  }
+});
+function assuranceRank(level) {
+  return level === "verified" ? 2 : level === "asserted" ? 1 : 0;
+}
+function assuranceCeilingForKind(kind) {
+  return kind === "oidc-jwt" ? "verified" : "asserted";
+}
+var identityProofSchema = external_exports.object({
+  /** Which configured integration the token claims to come from (hint only). */
+  provider: external_exports.string().min(1).max(64),
+  /** The customer-native proof (JWT / opaque session token). */
+  token: external_exports.string().min(1).max(8192)
+}).describe(
+  "Customer-native auth proof for the Identity Exchange. When present and the surface has a matching integration, the verified tenant/end-user replace any body-asserted tenant/endUser (which are never trusted for web-embedded callers). Ignored until the Identity Exchange admission upgrade ships."
+);
 function extractSecretReferences(template) {
   const keys = /* @__PURE__ */ new Set();
   let match;
@@ -42094,10 +42612,22 @@ var FLOW_STEP_TYPE_METADATA = {
     configHints: "http, auth, requestTemplate, responseMapping, outputVariable"
   },
   "retrieve-record": {
-    description: "Load records from the Runtype record store by ID, by type+name, or by a chip-style recordFilter (metadata + top-level columns: id, name, createdAt, updatedAt).",
+    description: "DEPRECATED \u2014 use get-record (single object) or list-records (array) instead. Loads records from the Runtype record store; its return shape is inferred from the lookup method (an id lookup returns one object, a type/name/filter query returns an array even for a single match), which is the ambiguity the successor step types remove.",
+    category: "data",
+    isPrompt: false,
+    configHints: "DEPRECATED. Prefer get-record / list-records. recordType, recordName, recordFilter ({ type, where: { field, op, value } }), outputVariable"
+  },
+  "get-record": {
+    description: "Load a SINGLE record object from the Runtype record store by ID, by type+name, or by a chip-style recordFilter (first match, ordered by updated_at desc). Access fields directly in templates ({{var.field}}). Fails if no record matches.",
     category: "data",
     isPrompt: false,
-    configHints: "recordType, recordName, recordFilter ({ type, where: { field, op, value } }), outputVariable"
+    configHints: "recordId, recordType, recordName, recordFilter ({ type, where: { field, op, value } }), outputVariable (returns one object \u2014 access as {{var.field}})"
+  },
+  "list-records": {
+    description: "Load an ARRAY of records from the Runtype record store by type, name, or a chip-style recordFilter (metadata + top-level columns: id, name, createdAt, updatedAt), ordered by updated_at desc. Always returns an array \u2014 even for a single match \u2014 so index it in templates ({{var.0.field}}). Default limit 50 (max 1000).",
+    category: "data",
+    isPrompt: false,
+    configHints: "recordType, recordName, recordFilter ({ type, where: { field, op, value } }), limit (default 50, max 1000), onEmpty (succeed|fail), outputVariable (returns an array \u2014 index as {{var.0.field}})"
   },
   "upsert-record": {
     description: "Create or update a record. The sourceVariable must point to a JSON object.",
@@ -42802,7 +43332,8 @@ ${lines.join("\n")}`;
 var PLATFORM_FEATURES_SUMMARY = (() => {
   const integrations = PLATFORM_CATALOG.availableIntegrations.map((i) => i.provider).join(", ");
   const stepTypes = FLOW_STEP_TYPES.filter((t) => t !== "prompt").join(", ");
-  const models = DEFAULT_MODELS_FOR_NEW_ACCOUNTS.map((m2) => m2.modelId).join(", ");
+  const models = `use ONLY these routed IDs (never dated/legacy IDs like gpt-4.1 or gpt-4o), matched to the work:
+${renderDefaultModelStrengthsGuide()}`;
   return `## Available Platform Features
 
 - **Built-in tools**: GPT Image 2 image generation, provider-native web search (OpenAI web search, Anthropic web search/fetch, xAI Live Search for Grok-3 series, xAI X Search / Web Search agentic tools for Grok-4 series), Exa (AI search), Firecrawl (simple web scraping), Browser Run tools (rendered markdown, HTML, screenshots, snapshots, selector scraping, JSON extraction, link harvesting \u2014 stateless), Browser Session tools (persistent interactive browsing: open, navigate, click, type, scroll, screenshot, evaluate, close), Browser Agent (autonomous higher-level alternative \u2014 give a natural-language goal plus a startUrl or sessionId and the agent navigates/clicks/extracts on its own), Store Asset (host any file from a URL or base64 inline content \u2014 returns a permanent public or signed private URL, downloads as attachment), Publish Page (host HTML that renders inline in the browser at a shareable 7-day /preview/ URL under a locked-down CSP), vector search, UCP commerce tools (discovery, catalog, cart, checkout, orders for any UCP-enabled merchant)
@@ -42812,6 +43343,113 @@ var PLATFORM_FEATURES_SUMMARY = (() => {
 - **Available models**: ${models}
 - **Surface types**: ${PLATFORM_CATALOG.availableSurfaceTypes.join(", ")}`;
 })();
+var FLOW_GENERATION_GUIDE = `## Flow Generation Guide
+
+### Step Types
+
+- **prompt**: AI model call. Config: model, systemPrompt, userPrompt, responseFormat (text|json), outputVariable, tools
+- **transform-data**: Code execution in a sandboxed environment. **Use sparingly** \u2014 most agent-built flows over-use transform-data for work the platform already does natively. Before adding one, check the Transform-Data Anti-Patterns section: leading "Parse Input" steps duplicate the surface's \`parametersSchema\`; trailing "Final Output" reshapers add a dead hop; pre-cleaning data before a prompt step does the prompt's job in the wrong place; \`map().join()\` to format prompt input ignores that \`{{variable}}\` auto-stringifies; retrieving then plucking the first record ignores that \`recordFilter\` + \`{{records[0]}}\` work. Reach for transform-data only when the work is genuinely deterministic (record-name templating, JSON-shape coercion, math). Config: script, outputVariable, sandboxProvider (optional, default \`cloudflare-worker\`), language (required when sandboxProvider is \`runtype-sandbox\`). Sandbox providers: \`cloudflare-worker\` (default, JS only, strict mode ES module), \`runtype-sandbox\` (full container \u2014 supports \`javascript\`, \`typescript\`, and \`python\` via the \`language\` field), \`daytona\` (remote VM). For the default \`cloudflare-worker\` sandbox: always declare variables with const/let, access context variables via the \`input\` object (e.g., \`input.varName\`), use \`return { key: value }\` pattern. For \`runtype-sandbox\`: JS/TS use the same return pattern; Python uses \`print(json.dumps(...))\` to emit JSON output. Parameters are injected as a \`parameters\` object in all languages
+- **template**: Render a Liquid template into HTML, email-html, markdown, PDF, or text. **Prefer this over a prompt step when the output is a structured document** (invoice, receipt, email body, report) \u2014 keeps the LLM focused on producing data, not authoring HTML.
+
+  **Config fields:**
+  - \`template\` (required): Liquid template body
+  - \`outputFormat\` (required): \`html\` | \`email-html\` | \`markdown\` | \`pdf\` | \`text\`
+  - \`outputVariable\` (required): variable name to store the rendered output
+  - \`inputs\` (optional): map of logical name \u2192 expression resolving against flow context. If omitted, the entire flow context is available as template variables
+  - \`partials\` (optional): named partial templates referenceable via \`{% include 'name' %}\`
+  - \`pdfOptions\` (optional, pdf only): \`{ format?: 'A4' | 'Letter', landscape?: boolean, margin?: { top, bottom, left, right } }\`. PDF output returns \`{ contentType, bytes (base64), byteLength }\`
+  - \`asArtifact\` (optional): emit a Persona artifact event for chat surfaces \u2014 renders inline in the conversation
+  - \`streamOutput\` (optional): stream the rendered output via SSE
+  - \`sampleData\` (optional): array of \`{ name, data }\` scenarios for the dashboard template editor preview
+
+  **Liquid syntax quick reference:**
+  - Variables: \`{{ name }}\`, \`{{ object.field }}\`, \`{{ array[0] }}\`
+  - Filters: \`{{ name | upcase }}\`, \`{{ price | round: 2 }}\`, \`{{ title | default: "Untitled" }}\`
+  - Loops: \`{% for item in items %} ... {% endfor %}\`
+  - Conditionals: \`{% if condition %} ... {% elsif other %} ... {% else %} ... {% endif %}\`
+  - Partials: \`{% include 'partial_name' %}\` (references \`partials\` map keys)
+  - Assignment: \`{% assign total = 0 %}\`, \`{% capture greeting %}Hello {{ name }}{% endcapture %}\`
+  - Common filters: upcase, downcase, capitalize, strip, truncate, replace, split, join, size, round, date, default, escape, url_encode, newline_to_br
+
+  **Output format notes:**
+  - \`html\` / \`email-html\`: Raw HTML string. \`email-html\` is identical today but semantically marks output destined for send-email steps
+  - \`markdown\`: Plain markdown text
+  - \`pdf\`: Renders the Liquid body as HTML, then converts to PDF. Result is \`{ contentType: "application/pdf", bytes: "<base64>", byteLength: N }\`
+  - \`text\`: Plain text, no HTML processing
+
+  **Inputs map vs. full context:**
+  - With \`inputs\`: only the declared names are available inside the template. Example: \`inputs: { "customer": "{{order_data}}" }\` exposes \`order_data\` as \`{{ customer }}\` in the template. Preferred for clarity and safety
+  - Without \`inputs\`: the entire flow variable scope is available. Convenient for simple templates but risks name collisions
+
+  **Example \u2014 prompt produces JSON, template renders HTML:**
+  \`\`\`
+  Step 1 (prompt): model: "claude-sonnet-4-6", responseFormat: "json", outputVariable: "invoice"
+    \u2192 AI generates { "company": "Acme", "items": [{...}], "total": "1,234.56" }
+  Step 2 (template):
+    template: "<h1>Invoice for {{ data.company }}</h1>{% for item in data.items %}<p>{{ item.desc }}: \${{ item.price }}</p>{% endfor %}<p>Total: \${{ data.total }}</p>"
+    inputs: { "data": "{{invoice}}" }
+    outputFormat: "html"
+    outputVariable: "invoice_html"
+  \`\`\`
+- **conditional**: Branch logic. Either the binary shape (condition (JS expression), trueSteps, falseSteps) or N-way named branches (branches: [{ id, name, condition, steps }], evaluated first-match-wins, with otherwiseSteps as the fallback). Set outputVariable to merge whichever branch ran into one named result.
+- **fetch-url**: HTTP request. Config: http (url, method, headers, body), responseType, outputVariable
+- **api-call**: Structured API call. Config: http, auth, requestTemplate, responseMapping, outputVariable
+- **get-record**: Load a SINGLE record OBJECT. Config: recordId, OR recordType + recordName, OR recordFilter ({ type, where: { field, op, value } }) for richer metadata-aware queries; outputVariable. Reachable filter columns include id, name, createdAt, updatedAt plus any metadata key. Returns one object \u2014 access fields directly in templates (\`{{record.field}}\`). On multiple matches the first by updated_at desc wins; fails if none match.
+- **list-records**: Load an ARRAY of records. Config: recordType, recordName, OR recordFilter ({ type, where: { field, op, value } }); limit (default 50, max 1000), onEmpty (succeed|fail, default succeed), outputVariable. Ordered by updated_at desc. Always writes an array \u2014 even for a single match \u2014 so index it in templates (\`{{records.0.field}}\` or \`{{records[0].field}}\`); object-style access (\`{{records.field}}\`) on the array resolves to undefined.
+- **retrieve-record**: DEPRECATED \u2014 use get-record (single object) or list-records (array). Still accepted at write and aliased at execution onto one of them; its return shape is inferred from the lookup method (recordId \u2192 object, type/name/filter \u2192 array), which is the ambiguity the successors remove.
+- **upsert-record**: Create/update a record keyed by \`(recordType, recordName)\` per owner. Config: recordType, **recordName** (REQUIRED for upsert semantics \u2014 without it each run creates a fresh \`\${recordType}-\${Date.now()}\` record), sourceVariable (the JSON metadata payload only \u2014 do NOT wrap as \`{ name, type, metadata }\`; the wrapper gets stored verbatim), outputVariable. See "Record-Keyed Upsert Patterns" in the build-product instructions for the full anti-pattern list (silent timestamped fallback, wrapped-source footgun, JSONB-blob aggregate races).
+- **update-record**: Update record fields. Config: recordId, OR recordFilter ({ type, where }) for first-match-wins by predicate; updates, mergeStrategy (merge|replace|deep-merge), outputVariable.
+- **set-variable**: Set a variable. Config: variableName, value
+- **send-email**: Send email. Config: from, to, subject, html, outputVariable
+- **send-text**: Send SMS. Config: from, to, message, outputVariable
+- **search**: Web/AI search. Config: provider, query, maxResults, outputVariable
+- **generate-embedding**: Create vector embedding. Config: inputSource, text, embeddingModel, outputVariable
+- **vector-search**: Search vectors. Config: query, limit, threshold, outputVariable
+- **crawl**: Multi-page web crawl via Cloudflare Browser Rendering \u2192 markdown. Config: url (required; **query string is DROPPED** \u2014 \`item?id=42\` crawls \`/item\`), outputVariable (required), depth (0 = render seed only, recommended), limit, completionTimeoutMs (default 120000; a slower crawl SILENTLY resumes with output **null** \u2014 raise to e.g. 600000 + set pollIntervalMs), asyncCrawl (false = inline polling for smoke tests), errorHandling ({ onError } OBJECT, not a bare string). Output: \`{ crawlId, status, result, resultPages[] }\` \u2014 flatten \`resultPages[].records[]\` (each \`{ url, status, markdown? }\`). Renders the seed fully but at depth \u2265 1 enumerates child links WITHOUT rendering them and follows only ABSOLUTE hrefs. For query-string URLs / single detail or comment pages use **fetch-url** or **builtin:firecrawl** (preserves query strings) instead.
+- **paginate-api**: Paginated API fetch. Config: url, paginationType, entityPath, outputVariable
+- **store-vector**: Store embeddings. Config: vectorsSource, destination, outputVariable
+- **execute-agent**: Run an existing agent. Config: agentId, message, outputVariable
+- **save-memory**: Persist a fact or observation to Cloudflare Agent Memory. Config: profileTemplate (e.g. \`{{_user.id}}\`), contentVariable, sessionId?, outputVariable?
+- **recall-memory**: Query long-term memory for a synthesized answer. Config: profileTemplate, queryTemplate, thinkingLevel? (low|medium|high), responseLength? (short|medium|long), outputVariable
+- **memory-summary**: Fetch a Markdown summary of what the agent has stored. Config: profileTemplate, sessionId?, outputVariable
+
+> **Subagent tools** are not flow step types \u2014 they are runtime tools attached to prompt steps via \`tools.runtimeTools[]\` with \`toolType: 'subagent'\`. Use them when an agent should delegate focused sub-tasks with tool subsetting and context isolation. See the Subagent Delegation Guide.
+
+> **Agent-level memory shortcut:** if the memory belongs to an agent (not a standalone flow), prefer the agent's \`memory: { enabled: true }\` config over threading the three steps through a flow. The agent gets the same three operations as tools (\`save_memory\`, \`recall_memory\`, \`memory_summary\`) and auto-ingests each exchange. Use the flow steps only when the memory operation must run deterministically at a fixed point in the flow.
+
+### Tool Usage Best Practice
+
+Prefer registering tools on **prompt** or **execute-agent** steps via \`tools: { toolIds: [...] }\` rather than using standalone \`tool-call\` steps. When tools are registered on a prompt step, the AI model autonomously decides when and how to invoke them, producing more natural and adaptive flows.
+
+Only use a \`tool-call\` step when the tool must run deterministically at a fixed point in the flow (e.g., always store an asset, always send a notification) regardless of model judgment.
+
+> **Platform limits:** max 50 runtime tools per dispatch request, 30s tool timeout cap, and tool search auto-activates at 20+ tools (deferred tools become search-loaded). Fetch the \`limits\` documentation topic for the full list.
+
+### Variable System
+
+- System variables (read-only): \`{{_flow.id}}\`, \`{{_flow.name}}\`, \`{{_user.id}}\`, \`{{_organization.id}}\`, \`{{_agent.id}}\`, \`{{_execution.id}}\`, \`{{_execution.conversationId}}\`
+- Temporal: \`{{_now.date}}\` (YYYY-MM-DD), \`{{_now.time}}\` (HH:mm:ss), \`{{_now.weekday}}\`, \`{{_now.iso}}\`, \`{{_now.year|month|day|unix|timezone}}\` \u2014 rendered in the schedule's tz on schedule-fired runs, UTC otherwise
+- End-user variables (populated when the caller passes \`endUser\` on dispatch \u2014 Persona widget, SDK \`executeAgent\`, or top-level \`endUser: { id, email?, ... }\` on the dispatch body): \`{{_endUser.id}}\`, \`{{_endUser.email}}\`, plus any additional fields the caller provides under \`_endUser.*\`. Use these for memory sharding in SaaS products where your customer's users are not Runtype account holders.
+- Product Tenant variables (populated when the caller passes \`tenant\` on dispatch or \`agents/:id/execute\` \u2014 top-level \`tenant: { id, ... }\` on the body): \`{{_tenant.id}}\`, plus any additional fields under \`_tenant.*\`. The Product Tenant is the builder's customer/account *inside* a Product (nested under the Builder Org \`_user\` and above the individual End User \`_endUser\`). Use \`{{_tenant.id}}\` to address account-level scope shared by all of a tenant's end-users (e.g. shard shared memory by \`{{_tenant.id}}\` while sharding per-user memory by \`{{_endUser.id}}\`).
+- Record variables: \`{{_record.id}}\`, \`{{_record.name}}\`, \`{{_record.type}}\`, \`{{_record.metadata.field}}\`
+- Schedule (schedule-fired runs only): \`{{_schedule.id}}\`, \`{{_schedule.name}}\`, \`{{_schedule.cron}}\`, \`{{_schedule.timezone}}\`, \`{{_schedule.lastRunAt}}\`, \`{{_schedule.nextRunAt}}\` \u2014 useful for incremental-window patterns: \`{{_schedule.lastRunAt || "24h ago"}}\`
+- Message variables: \`{{messages}}\`, \`{{userMessage}}\`, \`{{lastMessage}}\`, \`{{messageCount}}\`
+- Step outputs: Use the outputVariable name from previous steps, e.g., \`{{result}}\`, \`{{analysis}}\`
+- **One distinct \`outputVariable\` per step \u2014 never share one across \`when\`-guarded steps.** A \`when\`-skipped step does not no-op; the engine writes \`null\` to its \`outputVariable\`. With last-writer-wins, if several steps point at the SAME output name (e.g. five HTTP-method steps all writing \`response\`), the skipped ones null out the value the one that ran produced, and every downstream read sees \`null\`. Give each step its own name (\`response_get\`, \`response_post\`, \u2026) and coalesce them in a final step (\`{{response_get || response_post || ...}}\`, or a transform-data returning the first non-null).
+- Custom inputs: \`{{input_name}}\` \u2014 top-level variables passed via dispatch inputs
+- Defaults & fallbacks:
+  - Legacy literal default: \`{{name|Anonymous}}\` \u2014 uses \`Anonymous\` if \`name\` is unset
+  - Truthy fallback: \`{{primary || fallback}}\` \u2014 first truthy operand wins (skips empty strings, 0, false)
+  - Nullish fallback: \`{{count ?? 0}}\` \u2014 keeps 0 / "" / false (only null/undefined fall through)
+  - Chains: \`{{a || b || "default"}}\` \u2014 supports paths and string/number/boolean/null literals; do NOT mix \`||\` and \`??\` in one expression
+
+### Model Selection
+
+Use ONLY routed model IDs from the list below (platform-key compatible). Never
+emit dated or legacy IDs (e.g. \`gpt-4.1\`, \`gpt-4o\`, \`claude-sonnet-4\`) \u2014 they
+are not enabled for new accounts. Match the model to the step's actual work:
+
+${renderDefaultModelStrengthsGuide()}`;
 var CATEGORY_DISPLAY_NAMES = {
   [BuiltInToolCategory.IMAGE_GENERATION]: "Image Generation",
   [BuiltInToolCategory.WEB_SEARCH]: "Web Search",
@@ -43628,6 +44266,22 @@ function selectAccountId(params) {
   if (isValidAccountId(params.userId)) return params.userId;
   return void 0;
 }
+function flattenTextContent(content) {
+  if (typeof content === "string") return content;
+  return content.filter((p) => p.type === "text" && typeof p.text === "string").map((p) => p.text).join("");
+}
+function hasUsableClaudeManagedSeed(messages) {
+  let lastUserIndex = -1;
+  for (let i = messages.length - 1; i >= 0; i--) {
+    if (messages[i]?.role === "user") {
+      lastUserIndex = i;
+      break;
+    }
+  }
+  if (lastUserIndex === -1) return false;
+  if (lastUserIndex > 0) return true;
+  return flattenTextContent(messages[lastUserIndex].content).length > 0;
+}
 var RecordInputSchema = external_exports.object({
   id: external_exports.string().min(1).optional(),
   name: external_exports.string().min(1).optional(),
@@ -43888,6 +44542,12 @@ var DispatchRequestSchema = external_exports.object({
   tenant: external_exports.object({
     id: external_exports.string().min(1)
   }).passthrough().optional(),
+  // Identity Exchange proof (design §4.1): a customer-native auth token the
+  // broker will verify server-side and admit as `verified` tenant/end-user.
+  // Wire contract only for now — parsed here, consumed by NOTHING until the
+  // admission slice wires verification into the tenancy seam. The token is a
+  // live credential: never log or persist it (see identityProofSchema docs).
+  identityProof: identityProofSchema.optional(),
   options: external_exports.object({
     streamResponse: external_exports.boolean().optional().default(true),
     modelOverride: external_exports.string().optional(),
@@ -43923,6 +44583,15 @@ var DispatchRequestSchema = external_exports.object({
   })
 }).refine((data) => data.flow || data.agent, {
   message: "Either 'flow' or 'agent' configuration must be provided"
+}).superRefine((data, ctx) => {
+  if (data.agent?.agentType !== "claude_managed") return;
+  if (!hasUsableClaudeManagedSeed(data.messages ?? [])) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["messages"],
+      message: "messages with a non-empty user message is required for Claude Managed agents"
+    });
+  }
 });
 var RunFlowOptionsSchema = external_exports.object({
   recordId: external_exports.string().optional(),
@@ -44984,11 +45653,11 @@ async function promptConfirm(message, options) {
   return new Promise((resolve12) => {
     rl.question(chalk3.cyan(`${message} (${hint}): `), (answer) => {
       rl.close();
-      const trimmed = answer.trim().toLowerCase();
-      if (trimmed === "") {
+      const trimmed2 = answer.trim().toLowerCase();
+      if (trimmed2 === "") {
         resolve12(defaultYes);
       } else {
-        resolve12(trimmed === "y" || trimmed === "yes");
+        resolve12(trimmed2 === "y" || trimmed2 === "yes");
       }
     });
   });
@@ -47370,7 +48039,13 @@ secretsCommand.command("get <id>").description("Get secret metadata (value is ne
   const { waitUntilExit } = render6(React6.createElement(App));
   await waitUntilExit();
 });
-secretsCommand.command("create").description("Create a new secret (provide the value via --value or stdin)").requiredOption("-k, --key <key>", "Secret key (alphanumeric/underscore, starts with a letter)").option("--value <value>", "Secret value (omit to read from stdin without echo)").option("-d, --description <text>", "Secret description").option("--json", "Output as JSON").option("--tty", "Force TTY mode").option("--no-tty", "Force non-TTY mode").action(
+secretsCommand.command("create").description("Create a new secret (provide the value via --value or stdin)").requiredOption("-k, --key <key>", "Secret key (alphanumeric/underscore, starts with a letter)").option("--value <value>", "Secret value (omit to read from stdin without echo)").option("-d, --description <text>", "Secret description").option(
+  "--product-tenant-id <id>",
+  "Scope the secret to a Product Tenant (tnt_*). Omit for an org-level secret; a scoped secret requires a value."
+).option(
+  "--end-user-id <id>",
+  "Scope the secret to an End User (eu_*); its enclosing tenant is derived server-side. Omit for an org-level secret; a scoped secret requires a value."
+).option("--json", "Output as JSON").option("--tty", "Force TTY mode").option("--no-tty", "Force non-TTY mode").action(
   async (options) => {
     const apiKey = await ensureAuth();
     if (!apiKey) return;
@@ -47390,6 +48065,8 @@ secretsCommand.command("create").description("Create a new secret (provide the v
       description: options.description
     };
     if (value !== void 0) body.value = value;
+    if (options.productTenantId !== void 0) body.productTenantId = options.productTenantId;
+    if (options.endUserId !== void 0) body.endUserId = options.endUserId;
     if (!isTTY(options) || options.json) {
       try {
         const data = await client.post("/secrets", body);
@@ -50501,9 +51178,9 @@ ${delta}` : `${content}${delta}`;
 }
 function getVisibleReasoningLines(reasoning, maxLines) {
   if (maxLines <= 0) return [];
-  const trimmed = reasoning.trimEnd();
-  if (!trimmed) return [];
-  return trimmed.split("\n").slice(-maxLines);
+  const trimmed2 = reasoning.trimEnd();
+  if (!trimmed2) return [];
+  return trimmed2.split("\n").slice(-maxLines);
 }
 
 // src/ink/marathon/useMarathonStream.ts
@@ -52906,12 +53583,12 @@ function parseSandboxTimeout(value, provider) {
 }
 function parseDaytonaExecutionResult(value) {
   if (typeof value !== "string") return value;
-  const trimmed = value.trim();
-  if (!trimmed) return "";
+  const trimmed2 = value.trim();
+  if (!trimmed2) return "";
   try {
-    return JSON.parse(trimmed);
+    return JSON.parse(trimmed2);
   } catch {
-    const lines = trimmed.split("\n").map((line) => line.trim()).filter(Boolean);
+    const lines = trimmed2.split("\n").map((line) => line.trim()).filter(Boolean);
     const lastLine = lines[lines.length - 1];
     if (!lastLine) return value;
     try {
@@ -55030,9 +55707,9 @@ function CheckpointPrompt({
     onSubmit
   ]);
   const handleSubmit = (text) => {
-    const trimmed = text.trim();
-    const modelArg = trimmed.startsWith("/model") ? trimmed.slice("/model".length).trim() : "";
-    if (trimmed.startsWith("/model")) {
+    const trimmed2 = text.trim();
+    const modelArg = trimmed2.startsWith("/model") ? trimmed2.slice("/model".length).trim() : "";
+    if (trimmed2.startsWith("/model")) {
       clearInputDraft();
       if (modelArg) {
         setPendingModel(modelArg);
@@ -55041,53 +55718,53 @@ function CheckpointPrompt({
       }
       return;
     }
-    if (trimmed.startsWith("/reflect")) {
+    if (trimmed2.startsWith("/reflect")) {
       setShowReflectEditor(true);
       clearInputDraft();
       return;
     }
-    if (trimmed === "/tree") {
+    if (trimmed2 === "/tree") {
       setTreePanelRows(onLoadTreeView?.() ?? []);
       clearInputDraft();
       return;
     }
-    if (trimmed === "/fork") {
+    if (trimmed2 === "/fork") {
       setForkCandidates(onLoadForkCandidates?.() ?? []);
       clearInputDraft();
       return;
     }
-    if (trimmed === "/copy") {
+    if (trimmed2 === "/copy") {
       onCopySession?.();
       clearInputDraft();
       return;
     }
-    if (trimmed === "/copy-trimmed") {
+    if (trimmed2 === "/copy-trimmed") {
       onCopySessionTrimmed?.();
       clearInputDraft();
       return;
     }
-    if (trimmed === "/open") {
+    if (trimmed2 === "/open") {
       onOpenStateFile?.();
       clearInputDraft();
       return;
     }
-    if (trimmed.startsWith("/help")) {
+    if (trimmed2.startsWith("/help")) {
       onToggleHelp();
       clearInputDraft();
       return;
     }
-    if (trimmed.startsWith("/tools")) {
+    if (trimmed2.startsWith("/tools")) {
       setPendingToolsToggle((prev) => !prev);
       clearInputDraft();
       return;
     }
-    if (trimmed.startsWith("/sandbox")) {
-      const arg = trimmed.slice("/sandbox".length).trim();
+    if (trimmed2.startsWith("/sandbox")) {
+      const arg = trimmed2.slice("/sandbox".length).trim();
       setPendingSandbox(arg ? arg : false);
       clearInputDraft();
       return;
     }
-    if (trimmed.startsWith("/stop")) {
+    if (trimmed2.startsWith("/stop")) {
       setPendingStop((prev) => !prev);
       clearInputDraft();
       return;
@@ -55096,11 +55773,11 @@ function CheckpointPrompt({
       submitStagedResult("stop");
       return;
     }
-    if (trimmed === "") {
+    if (trimmed2 === "") {
       submitStagedResult("continue");
       return;
     }
-    submitStagedResult("steer", trimmed);
+    submitStagedResult("steer", trimmed2);
   };
   const handleModelSelect = (model) => {
     setShowModelPicker(false);
@@ -55111,11 +55788,11 @@ function CheckpointPrompt({
   };
   const handleReflectSubmit = (message) => {
     setShowReflectEditor(false);
-    const trimmed = message.trim();
-    if (trimmed) {
+    const trimmed2 = message.trim();
+    if (trimmed2) {
       setValue((prev) => prev.trim() ? `${prev}
 
-${trimmed}` : trimmed);
+${trimmed2}` : trimmed2);
       setIsTyping(true);
     }
   };
@@ -55251,12 +55928,12 @@ function SteerComposer({ initialDraft = "", onSubmit, onCancel }) {
     }
   });
   const handleSubmit = (text) => {
-    const trimmed = text.trim();
-    if (!trimmed) {
+    const trimmed2 = text.trim();
+    if (!trimmed2) {
       onCancel("");
       return;
     }
-    onSubmit(trimmed, kind);
+    onSubmit(trimmed2, kind);
   };
   const kindLabel = kind === "steer" ? "deliver: next turn" : "deliver: after all work";
   return /* @__PURE__ */ jsxs23(
@@ -57261,8 +57938,8 @@ function MarathonApp({
     adjustedContentHeight - reasoningHintRows - reasoningBodyRows - reasoningLiveRows - thinkingRows - compactionIndicatorRows
   );
   const reasoningDetailLineCount = useMemo11(() => {
-    const trimmed = displayedReasoning.trimEnd();
-    return trimmed ? getReasoningLines(trimmed, terminalWidth).length : 0;
+    const trimmed2 = displayedReasoning.trimEnd();
+    return trimmed2 ? getReasoningLines(trimmed2, terminalWidth).length : 0;
   }, [displayedReasoning, terminalWidth]);
   const fileDetailRenderedLineCount = useMemo11(
     () => detailFile && detailFileContent ? getFileRenderedLineCount(detailFile.path, detailFileContent, terminalWidth) : 0,
@@ -58494,10 +59171,10 @@ var ALLOWED_VERIFICATION_COMMANDS = [
   /^(?:make|just)\s+(?:test|lint|build|check|typecheck)\b/i
 ];
 function isSafeVerificationCommand(command) {
-  const trimmed = command.trim();
-  if (!trimmed) return false;
-  if (BLOCKED_VERIFICATION_PATTERNS.some((pattern) => pattern.test(trimmed))) return false;
-  return ALLOWED_VERIFICATION_COMMANDS.some((pattern) => pattern.test(trimmed));
+  const trimmed2 = command.trim();
+  if (!trimmed2) return false;
+  if (BLOCKED_VERIFICATION_PATTERNS.some((pattern) => pattern.test(trimmed2))) return false;
+  return ALLOWED_VERIFICATION_COMMANDS.some((pattern) => pattern.test(trimmed2));
 }
 var SCRIPT_COMMAND_PATTERNS = [
   {
@@ -58514,9 +59191,9 @@ var SCRIPT_COMMAND_PATTERNS = [
   }
 ];
 function getScriptConfigFiles(command) {
-  const trimmed = command.trim();
+  const trimmed2 = command.trim();
   for (const { pattern, files } of SCRIPT_COMMAND_PATTERNS) {
-    if (pattern.test(trimmed)) return files;
+    if (pattern.test(trimmed2)) return files;
   }
   return [];
 }
@@ -60512,12 +61189,12 @@ function resolveModelContextLength(modelId, configuredModels, availableModels) {
 }
 function resolveAutoCompactTokenThreshold(modelContextLength, rawThreshold, strategy = "summary_fallback") {
   const effectiveBudget = resolveEffectiveInputBudgetTokens(modelContextLength);
-  const trimmed = rawThreshold?.trim();
-  if (!trimmed) {
+  const trimmed2 = rawThreshold?.trim();
+  if (!trimmed2) {
     const ratio = strategy === "provider_native" ? DEFAULT_PROVIDER_NATIVE_COMPACT_THRESHOLD_RATIO : DEFAULT_AUTO_COMPACT_THRESHOLD_RATIO;
     return typeof effectiveBudget === "number" && effectiveBudget > 0 ? Math.max(1, Math.floor(effectiveBudget * ratio)) : void 0;
   }
-  const percentMatch = trimmed.match(/^(\d+(?:\.\d+)?)%$/);
+  const percentMatch = trimmed2.match(/^(\d+(?:\.\d+)?)%$/);
   if (percentMatch) {
     const percentValue = Number(percentMatch[1]);
     if (!Number.isFinite(percentValue) || percentValue <= 0 || percentValue > 100) {
@@ -60527,7 +61204,7 @@ function resolveAutoCompactTokenThreshold(modelContextLength, rawThreshold, stra
     }
     return typeof effectiveBudget === "number" && effectiveBudget > 0 ? Math.max(1, Math.floor(effectiveBudget * (percentValue / 100))) : void 0;
   }
-  const numericValue = Number(trimmed);
+  const numericValue = Number(trimmed2);
   if (!Number.isFinite(numericValue) || numericValue <= 0) {
     throw new Error(
       `Invalid --compact-threshold value "${rawThreshold}". Use a percentage (e.g. 80%) or absolute token count (e.g. 120000).`
@@ -60997,9 +61674,9 @@ function formatBytes(bytes) {
   return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
 }
 function normalizeStartupModelOptionValue(value) {
-  const trimmed = value?.trim().toLowerCase().replace(/^model\//, "") ?? "";
-  if (!trimmed) return "";
-  const withoutProvider = trimmed.includes(":") ? trimmed.split(":").slice(1).join(":") : trimmed;
+  const trimmed2 = value?.trim().toLowerCase().replace(/^model\//, "") ?? "";
+  if (!trimmed2) return "";
+  const withoutProvider = trimmed2.includes(":") ? trimmed2.split(":").slice(1).join(":") : trimmed2;
   if (withoutProvider.includes("/")) {
     return withoutProvider.split("/").pop() ?? withoutProvider;
   }
@@ -61081,8 +61758,8 @@ function buildMarathonClientHeaders(devPlanOverride) {
   };
 }
 function normalizeMarathonAgentArgument(agent) {
-  const trimmed = agent.trim();
-  if (trimmed.length < 2) return trimmed;
+  const trimmed2 = agent.trim();
+  if (trimmed2.length < 2) return trimmed2;
   const matchingQuotePairs = [
     ['"', '"'],
     ["'", "'"],
@@ -61090,12 +61767,12 @@ function normalizeMarathonAgentArgument(agent) {
     ["\u2018", "\u2019"]
   ];
   for (const [openQuote, closeQuote] of matchingQuotePairs) {
-    if (trimmed.startsWith(openQuote) && trimmed.endsWith(closeQuote)) {
-      const unwrapped = trimmed.slice(openQuote.length, trimmed.length - closeQuote.length).trim();
-      return unwrapped || trimmed;
+    if (trimmed2.startsWith(openQuote) && trimmed2.endsWith(closeQuote)) {
+      const unwrapped = trimmed2.slice(openQuote.length, trimmed2.length - closeQuote.length).trim();
+      return unwrapped || trimmed2;
     }
   }
-  return trimmed;
+  return trimmed2;
 }
 function buildMarathonAutoCreatedAgentBootstrap(agentName, options = {}) {
   const normalizedModel = options.model?.trim();
@@ -64357,7 +65034,10 @@ function printSuiteResult(rootDir, outcome) {
   const rel = relative6(rootDir, outcome.file) || outcome.file;
   const badge = result.passed ? chalk27.green("PASS") : chalk27.red("FAIL");
   const score = `${result.passedCases}/${result.totalCases}`;
-  console.log(`${badge} ${chalk27.bold(definition.name)} ${chalk27.gray(`(${score} cases \xB7 ${rel})`)}`);
+  const runRef = result.runId ? ` \xB7 run ${result.runId}` : "";
+  console.log(
+    `${badge} ${chalk27.bold(definition.name)} ${chalk27.gray(`(${score} cases \xB7 ${rel}${runRef})`)}`
+  );
   for (const testCase of result.cases) {
     const caseBadge = testCase.passed ? chalk27.green("  \u2713") : chalk27.red("  \u2717");
     console.log(`${caseBadge} ${testCase.name}`);
@@ -66577,11 +67257,11 @@ async function promptLine(rl, question, defaultValue) {
   const answer = await new Promise((resolve12) => {
     rl.question(`${question}${hint}: `, resolve12);
   });
-  const trimmed = answer.trim();
-  if (!trimmed && defaultValue !== void 0) {
+  const trimmed2 = answer.trim();
+  if (!trimmed2 && defaultValue !== void 0) {
     return defaultValue;
   }
-  return trimmed;
+  return trimmed2;
 }
 async function promptConfirm2(rl, message, defaultYes = false) {
   const hint = defaultYes ? chalk30.dim(" (Y/n)") : chalk30.dim(" (y/N)");
@@ -68366,9 +69046,9 @@ async function readInput(input) {
   if (!input || input === "-") {
     return await readStdin();
   }
-  const trimmed = input.trim();
-  if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
-    return trimmed;
+  const trimmed2 = input.trim();
+  if (trimmed2.startsWith("{") || trimmed2.startsWith("[")) {
+    return trimmed2;
   }
   return readFileSync18(input, "utf-8");
 }
@@ -70287,6 +70967,19 @@ function maybeNotifyAboutCliUpdate(args, options = {}) {
   void refreshCliUpdateMetadata(options);
 }
 
+// src/lib/global-option-forwarding.ts
+function registerGlobalOptionForwarding(program2) {
+  program2.hook("preAction", (_thisCommand, actionCommand) => {
+    const globals = program2.opts();
+    if (typeof globals.apiUrl === "string" && globals.apiUrl.length > 0) {
+      process.env.RUNTYPE_API_URL = globals.apiUrl;
+    }
+    if (globals.json === true && actionCommand.getOptionValue("json") === void 0) {
+      actionCommand.setOptionValue("json", true);
+    }
+  });
+}
+
 // src/index.ts
 loadEnv();
 setCliTitle();
@@ -70325,6 +71018,7 @@ program.addCommand(validateProductCommand);
 program.addCommand(deployCommand);
 program.addCommand(skillsCommand);
 program.addCommand(appsCommand);
+registerGlobalOptionForwarding(program);
 program.exitOverride();
 async function run() {
   const userArgs = process.argv.slice(2);
@@ -70347,7 +71041,9 @@ run().catch((error51) => {
   } else if (commanderError.code === "commander.unknownOption") {
     console.error(chalk42.red(`Error: ${commanderError.message}`));
     process.exit(1);
-  } else if (commanderError.code === "commander.help" || commanderError.code === "commander.version") {
+  } else if (commanderError.code === "commander.unknownCommand") {
+    process.exit(1);
+  } else if (commanderError.code === "commander.help" || commanderError.code === "commander.helpDisplayed" || commanderError.code === "commander.version") {
     process.exit(0);
   } else {
     console.error(chalk42.red("An unexpected error occurred:"));