@runtypelabs/cli 2.32.5 → 2.33.1

package/dist/index.js

@@ -2,7 +2,7 @@
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __require = /* @__PURE__ */ ((x2) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x2, {
-  get: (a, b2) => (typeof require !== "undefined" ? require : a)[b2]
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
 }) : x2)(function(x2) {
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x2 + '" is not supported');
@@ -616,9 +616,6 @@ var OAuthManager = class {
 // src/auth/api-key-manager.ts
 import { RuntypeApiError } from "@runtypelabs/sdk";
 
-// src/lib/sdk-client.ts
-import { createClient } from "@runtypelabs/sdk";
-
 // ../shared/dist/chunk-ZUODFMLO.mjs
 var DEFAULT_MODELS_FOR_NEW_ACCOUNTS = [
   // Mixlayer models
@@ -1866,20 +1863,20 @@ function safeExtend(schema, shape) {
   });
   return clone(schema, def);
 }
-function merge(a, b2) {
+function merge(a, b) {
   if (a._zod.def.checks?.length) {
     throw new Error(".merge() cannot be used on object schemas containing refinements. Use .safeExtend() instead.");
   }
   const def = mergeDefs(a._zod.def, {
     get shape() {
-      const _shape = { ...a._zod.def.shape, ...b2._zod.def.shape };
+      const _shape = { ...a._zod.def.shape, ...b._zod.def.shape };
       assignProp(this, "shape", _shape);
       return _shape;
     },
     get catchall() {
-      return b2._zod.def.catchall;
+      return b._zod.def.catchall;
     },
-    checks: b2._zod.def.checks ?? []
+    checks: b._zod.def.checks ?? []
   });
   return clone(a, def);
 }
@@ -2082,7 +2079,7 @@ function hexToUint8Array(hex3) {
   return bytes;
 }
 function uint8ArrayToHex(bytes) {
-  return Array.from(bytes).map((b2) => b2.toString(16).padStart(2, "0")).join("");
+  return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 var Class = class {
   constructor(..._args) {
@@ -2219,7 +2216,7 @@ function toDotPath(_path) {
 }
 function prettifyError(error51) {
   const lines = [];
-  const issues = [...error51.issues].sort((a, b2) => (a.path ?? []).length - (b2.path ?? []).length);
+  const issues = [...error51.issues].sort((a, b) => (a.path ?? []).length - (b.path ?? []).length);
   for (const issue2 of issues) {
     lines.push(`\u2716 ${issue2.message}`);
     if (issue2.path?.length)
@@ -4194,19 +4191,19 @@ var $ZodIntersection = /* @__PURE__ */ $constructor("$ZodIntersection", (inst, d
     return handleIntersectionResults(payload, left, right);
   };
 });
-function mergeValues(a, b2) {
-  if (a === b2) {
+function mergeValues(a, b) {
+  if (a === b) {
     return { valid: true, data: a };
   }
-  if (a instanceof Date && b2 instanceof Date && +a === +b2) {
+  if (a instanceof Date && b instanceof Date && +a === +b) {
     return { valid: true, data: a };
   }
-  if (isPlainObject(a) && isPlainObject(b2)) {
-    const bKeys = Object.keys(b2);
+  if (isPlainObject(a) && isPlainObject(b)) {
+    const bKeys = Object.keys(b);
     const sharedKeys = Object.keys(a).filter((key) => bKeys.indexOf(key) !== -1);
-    const newObj = { ...a, ...b2 };
+    const newObj = { ...a, ...b };
     for (const key of sharedKeys) {
-      const sharedValue = mergeValues(a[key], b2[key]);
+      const sharedValue = mergeValues(a[key], b[key]);
       if (!sharedValue.valid) {
         return {
           valid: false,
@@ -4217,14 +4214,14 @@ function mergeValues(a, b2) {
     }
     return { valid: true, data: newObj };
   }
-  if (Array.isArray(a) && Array.isArray(b2)) {
-    if (a.length !== b2.length) {
+  if (Array.isArray(a) && Array.isArray(b)) {
+    if (a.length !== b.length) {
       return { valid: false, mergeErrorPath: [] };
     }
     const newArray = [];
     for (let index = 0; index < a.length; index++) {
       const itemA = a[index];
-      const itemB = b2[index];
+      const itemB = b[index];
       const sharedValue = mergeValues(itemA, itemB);
       if (!sharedValue.valid) {
         return {
@@ -12863,14 +12860,14 @@ var intersectionProcessor = (schema, ctx, json2, params) => {
     ...params,
     path: [...params.path, "allOf", 0]
   });
-  const b2 = process2(def.right, ctx, {
+  const b = process2(def.right, ctx, {
     ...params,
     path: [...params.path, "allOf", 1]
   });
   const isSimpleIntersection = (val) => "allOf" in val && Object.keys(val).length === 1;
   const allOf = [
     ...isSimpleIntersection(a) ? a.allOf : [a],
-    ...isSimpleIntersection(b2) ? b2.allOf : [b2]
+    ...isSimpleIntersection(b) ? b.allOf : [b]
   ];
   json2.allOf = allOf;
 };
@@ -15364,7 +15361,7 @@ var edgeContextPayloadSchema = external_exports.object({
 // ../shared/dist/chunk-SCJRL6LP.mjs
 var MAX_DURABLE_POLL_ATTEMPTS = 1e3;
 
-// ../shared/dist/chunk-FSHR33DZ.mjs
+// ../shared/dist/chunk-MATCHJ7V.mjs
 function getNestedValue(obj, path20) {
   let normalizedPath = path20;
   normalizedPath = normalizedPath.replace(/^\$\.?/, "");
@@ -20376,14 +20373,14 @@ function normalizeVectorSearchConfig(config3) {
   }
   const providerInput = config3.provider || config3.vectorStore || "record";
   const vectorStore = providerInput === "record" ? "pgvector" : providerInput;
-  const vectorizeConfig = config3.vectorizeConfigId || config3.vectorizeNamespace ? {
+  const vectorizeConfig = config3.vectorizeConfig || (config3.vectorizeConfigId || config3.vectorizeNamespace ? {
     configId: config3.vectorizeConfigId,
     namespace: config3.vectorizeNamespace
-  } : void 0;
-  const weaviateConfig = config3.weaviateClassName || config3.weaviateConfigId ? {
+  } : void 0);
+  const weaviateConfig = config3.weaviateConfig || (config3.weaviateClassName || config3.weaviateConfigId ? {
     configId: config3.weaviateConfigId,
     className: config3.weaviateClassName || ""
-  } : void 0;
+  } : void 0);
   return {
     query: config3.query,
     embeddingModel: config3.embeddingModel,
@@ -20956,6 +20953,9 @@ function sanitizeCodeToolIdentifier(name) {
   if (/^[0-9]/.test(safe)) safe = "_" + safe;
   return safe;
 }
+function snakeToCamel(str) {
+  return str.replace(/_([a-z])/g, (_2, letter) => letter.toUpperCase());
+}
 var flowStepValidationSchema = external_exports.object({
   // Optional stable client-supplied identifier. Preserved across saves so that
   // `flow_step_results.stepId` references stay valid and dashboard UI state
@@ -21018,6 +21018,12 @@ var KNOWN_TOOL_KEYS = /* @__PURE__ */ new Set([
   ...Object.keys(CAMEL_CASE_TOOL_KEYS),
   ...Object.keys(SNAKE_CASE_TOOL_KEYS)
 ]);
+for (const snakeKey of Object.keys(SNAKE_CASE_TOOL_KEYS)) {
+  const camelKey = snakeToCamel(snakeKey);
+  if (!(camelKey in CAMEL_CASE_TOOL_KEYS)) {
+    throw new Error(`No camelCase tool key for snake_case key "${snakeKey}"`);
+  }
+}
 var LEGACY_TOOL_KEY_SUGGESTIONS = {
   builtinTools: "toolIds"
 };
@@ -21096,28 +21102,28 @@ function formatPath(path20) {
     return acc ? `${acc}.${key}` : key;
   }, "");
 }
-function compareIssuePath(a, b2) {
-  if (!a && !b2) return 0;
+function compareIssuePath(a, b) {
+  if (!a && !b) return 0;
   if (!a) return 1;
-  if (!b2) return -1;
-  return a.localeCompare(b2);
+  if (!b) return -1;
+  return a.localeCompare(b);
 }
 function sortIssues(issues) {
-  return [...issues].sort((a, b2) => {
+  return [...issues].sort((a, b) => {
     const aStepIndex = a.step?.index ?? Number.MAX_SAFE_INTEGER;
-    const bStepIndex = b2.step?.index ?? Number.MAX_SAFE_INTEGER;
+    const bStepIndex = b.step?.index ?? Number.MAX_SAFE_INTEGER;
     if (aStepIndex !== bStepIndex) {
       return aStepIndex - bStepIndex;
     }
-    const pathCompare = compareIssuePath(a.path, b2.path);
+    const pathCompare = compareIssuePath(a.path, b.path);
     if (pathCompare !== 0) {
       return pathCompare;
     }
-    const codeCompare = a.code.localeCompare(b2.code);
+    const codeCompare = a.code.localeCompare(b.code);
     if (codeCompare !== 0) {
       return codeCompare;
     }
-    return a.message.localeCompare(b2.message);
+    return a.message.localeCompare(b.message);
   });
 }
 function addIssue(level, issue2, buckets) {
@@ -22749,15 +22755,50 @@ var runtimeArtifactManifestSchema = external_exports.object({
 var KNOWN_FLOW_STEP_TYPES = new Set(FLOW_STEP_TYPES);
 var API_INPROCESS_CAPABILITY_MATRIX = {
   target: "api-inprocess",
-  // Bumped 2026-07-31: adds the §A1 `unmaterializedPromptToolRefs` fold (prompt
-  // `toolIds` classes with no runtime lane). Carries forward 2026-07-30: the
-  // IMPLICIT platform-default fallback candidate no longer folds (see
-  // `implicitPlatformFallback` below). Carries forward
-  // 2026-07-29.4: api-hosted runtime fulfills managed fetch methods through
-  // ManagedFetchExecutor (the managed-fetch fact remains for attribution). The
-  // EXPLICIT Layer-2 fallback fold and the remaining parity-audit folds are
-  // unchanged.
-  version: "2026-07-31.1",
+  // Bumped 2026-08-05.3: graduates `conditionalNestedExecuteAgentStep` to
+  // SUPPORTED (the runtime-conditional-nested-execute-agent leg-2 port): a
+  // conditional-nested `execute-agent` runs on the engine-owned nested path
+  // (the shared `conditionalSubStepExecutor` re-enters `runContextStep`, whose
+  // default engine path dispatches `executeExecuteAgent`), so it no longer folds
+  // to legacy. The fact stays computed for decision attribution. Rollback lever:
+  // revert this bit to `true`.
+  // Bumped 2026-08-05.3: graduates `promptMcpServers` to SUPPORTED (the #6013
+  // fold — the runtime FLOW lane now discovers `config.tools.mcpServers` on
+  // prompt steps via `discoverMCPTools`, exactly like the agent lane, merging
+  // each step's servers' tools into its `config.tools.runtimeTools` before the
+  // prompt runs). The `hasPromptMcpServers` FACT is still computed for
+  // decision attribution but no longer folds. Rollback lever: revert this bit
+  // to `true`.
+  // Bumped 2026-08-05.2: graduates `conditionalNestedPromptStep` to SUPPORTED
+  // (the #6016 leg-1 port routes nested prompt sub-steps through the engine-owned
+  // `runPromptStep` path instead of the portable executor's throw). The
+  // `hasConditionalNestedPromptStep` FACT is still computed for decision
+  // attribution but no longer folds. Rollback lever: revert this bit to `true`.
+  // Bumped 2026-08-05.1: adds the #6023 leg 1 `customToolExecution` fold (a
+  // custom runtime tool requesting code_mode / a non-JS language / a
+  // container-backed sandbox provider the runtime's JS-only executor cannot
+  // honor). Carries forward 2026-08-03: the §A1 `promptCodeModeTools` fold.
+  // Carries forward 2026-07-31: the `unmaterializedPromptToolRefs` fold.
+  // Carries forward 2026-07-30: the IMPLICIT platform-default fallback
+  // candidate no longer folds (see `implicitPlatformFallback` below). Carries
+  // forward 2026-07-29.4: api-hosted runtime fulfills managed fetch methods
+  // through ManagedFetchExecutor (the managed-fetch fact remains for
+  // attribution). The EXPLICIT Layer-2 fallback fold and the remaining
+  // parity-audit folds are unchanged.
+  // Bumped 2026-08-06.1: graduates `promptCodeModeTools` + the
+  // `transformDataCodeModeTools` runtimeTools/toolIds cases (#6013) — the
+  // runtime flow lane synthesizes `code_mode` and runs it (plus transform-data
+  // tool pools) through the host `CodeModeExecutor`
+  // (`SANDBOX.workerLoaderExecuteTransformWithTools`). The
+  // `transformDataCodeModeTools` fact now folds only the `mcpServers` case.
+  // Rollback lever: revert the two bits to `true` (plus their tests).
+  // Bumped 2026-08-06.3: integration re-bump past the .1/.2 collisions — five
+  // #6013/#6016 graduations (advisorTools, transformDataCodeModeTools,
+  // promptCodeModeTools, promptMcpServers, promptArtifacts) landed on
+  // independent branches that each claimed their own suffix, plus the
+  // vendored-export re-fold pass. No bit changes with this bump; it exists so
+  // the combined base carries one unambiguous version.
+  version: "2026-08-06.3",
   unsupportedStepTypes: ["wait-until", "crawl"],
   unsupportedFeatures: {
     approvalSteps: true,
@@ -22765,8 +22806,18 @@ var API_INPROCESS_CAPABILITY_MATRIX = {
     claudeManagedAgent: true,
     inexpressibleVectorStep: true,
     unresolvableAgentRef: true,
-    conditionalNestedPromptStep: true,
-    conditionalNestedExecuteAgentStep: true,
+    // SUPPORTED as of 2026-08-05 (#6016 leg 1): the runtime flow lane routes a
+    // conditional-nested prompt through the engine-owned `runPromptStep` path
+    // (nested prompt dispatch in flow-engine.ts), so a prompt inside a
+    // conditional branch no longer folds to legacy.
+    conditionalNestedPromptStep: false,
+    // SUPPORTED as of 2026-08-05.3 (runtime-conditional-nested-execute-agent):
+    // the runtime flow lane routes a conditional-nested `execute-agent` through
+    // the engine-owned nested path (`conditionalSubStepExecutor` -> `runContextStep`
+    // -> the default engine dispatch of `executeExecuteAgent`), so an execute-agent
+    // inside a conditional branch no longer folds to legacy. The fact stays
+    // computed for decision attribution. Rollback lever: revert this bit.
+    conditionalNestedExecuteAgentStep: false,
     // SUPPORTED as of 2026-07-23 (slice 6 activation): the runtime flow lane
     // now PAUSES on definition-embedded client-executed (local / webmcp) tools
     // — `ClientToolRequiredError` → `step_await` / `flow_await` → durable KV
@@ -22776,7 +22827,13 @@ var API_INPROCESS_CAPABILITY_MATRIX = {
     // Rollback lever after retiring the flow request override: revert this bit
     // to `true` (the agent lane retains its separate rollout gate).
     clientExecutedTools: false,
-    advisorTools: true,
+    // SUPPORTED as of 2026-08-06 (#6013 advisor port): the runtime flow lane
+    // now executes advisor runtime tools server-side via nested model inference
+    // (`RuntimeToolExecutor.runAdvisor`), so an advisor flow stays on the
+    // runtime lane instead of folding to legacy. The `hasAdvisorTools` FACT is
+    // still computed for decision attribution but no longer folds. Rollback
+    // lever: flip this bit back to `true` (plus its test).
+    advisorTools: false,
     // G2 SUPPORTED: api-hosted runtime delegates Firecrawl / Massive fetch-url
     // methods through ManagedFetchExecutor to the same API implementations the
     // legacy executor uses. Keep the fact computed for attribution, like
@@ -22784,10 +22841,48 @@ var API_INPROCESS_CAPABILITY_MATRIX = {
     unsupportedFetchMethod: false,
     // Remaining 2026-07-29 parity-audit BRIDGE folds (G4/G5/G10/G14): feature
     // classes the runtime flow lane still cannot faithfully run.
-    transformDataCodeModeTools: true,
+    // SUPPORTED as of 2026-08-06 (#6013): a `transform-data` step whose
+    // `config.tools` carries a runtime tool pool binds those tools through the
+    // host `CodeModeExecutor` (`workerLoaderExecuteTransformWithTools`). The
+    // `mcpServers`-only case STAYS folded via the narrow
+    // `transformDataMcpServers` bit below (the runtime has no MCP discovery on
+    // transform steps, so an MCP tool pool would silently lose its tools).
+    // Rollback lever: revert this bit to `true` (plus its test).
+    transformDataCodeModeTools: false,
+    // #6013 narrow carve-out — the mcpServers-only transform code-mode case.
+    // `transformDataHasCodeModeTools` now fires only on `config.tools.mcpServers`,
+    // and this bit keeps that narrow case routed to legacy while the
+    // runtimeTools/toolIds cases graduate (bit above flipped false).
+    transformDataMcpServers: true,
     unsupportedTransformExecution: true,
-    promptMcpServers: true,
-    promptArtifacts: true,
+    // #6023 leg 1 (2026-08-05): a custom runtime tool requesting code_mode / a
+    // non-JS language / a container-backed sandbox provider has no runtime-lane
+    // port — `runCustom` ignores all three and silently misexecutes as JS. Same
+    // bridge class as `unsupportedTransformExecution` (G5), at the tool level.
+    customToolExecution: true,
+    // SUPPORTED as of 2026-08-05 (#6013 fold): the runtime FLOW lane now
+    // discovers `config.tools.mcpServers` on prompt steps via `discoverMCPTools`
+    // (mirroring the agent lane's agent-engine.ts wiring) and merges the
+    // discovered tools into each prompt step's `config.tools.runtimeTools`
+    // before it runs. Runtime discovery is the ONLY model-visible schema source
+    // (real `tools/list` schemas + fresh auth — no export-time materialization,
+    // which would ship empty schemas for allowedTools-gated servers). The
+    // `hasPromptMcpServers` FACT is still computed for decision-attribution logs
+    // but no longer folds. Rollback lever: revert this bit to `true`.
+    promptMcpServers: false,
+    // #6013 (G14, 2026-08-06): prompt-step artifact emission is ported to the
+    // runtime lane (injection + emit_artifact_* execution + artifact_* frame
+    // emission + strip). `hasPromptArtifacts` stays computed for decision
+    // attribution. Rollback lever: set this back to `true` (plus its test).
+    promptArtifacts: false,
+    // SUPPORTED as of 2026-08-06 (#6013): the runtime flow lane synthesizes
+    // the `code_mode` tool (byte-identical description/schema to legacy via the
+    // shared builders) and executes it through the host `CodeModeExecutor`.
+    // The `hasPromptCodeModeTools` FACT is still computed (for decision
+    // attribution) but no longer folds. A pool referencing an unmaterialized
+    // class still folds via the separate `unmaterializedPromptToolRefs` fact.
+    // Rollback lever: revert this bit to `true` (plus its test).
+    promptCodeModeTools: false,
     // SUPPORTED as of the fallback-chain port: the runtime flow engine now
     // executes EXPLICIT author-configured Layer-2 chains and synthesizes their
     // `usedFallback` / `fallbackModel` / `fallbackExecutions` attribution, so
@@ -22832,6 +22927,180 @@ var API_DURABLE_RESUME_CAPABILITY_MATRIX = {
     (stepType) => !DURABLE_HOSTED_STEP_TYPES.has(stepType)
   )
 };
+var VENDORED_EXPORT_CAPABILITY_MATRIX = {
+  ...API_INPROCESS_CAPABILITY_MATRIX,
+  target: "vendored-export",
+  // Bumped 2026-08-06.3: one-pass re-decision of the restated fold block after
+  // the five #6013/#6016 api-inprocess graduations (advisorTools,
+  // transformDataCodeModeTools, promptCodeModeTools, promptMcpServers,
+  // promptArtifacts) plus `conditionalNestedExecuteAgentStep`. Each restated
+  // literal was re-classified against this file's own criterion — ENGINE-owned
+  // (a self-contained container runs it) inherits the base `false`; HOST-SEAM
+  // (fulfilled only by an api-wired optional executor a vendored container
+  // lacks) becomes a documented entry in {@link VENDORED_EXPORT_REFOLDS}. The
+  // two CodeModeExecutor-backed bits re-fold; the other four graduate here too.
+  // Bumped 2026-08-06.2: re-folds `unsupportedFetchMethod` (see
+  // VENDORED_EXPORT_REFOLDS) — api-inprocess supports managed fetch methods
+  // only because the api host wires `ManagedFetchExecutor`; no export bundle
+  // does, so a firecrawl/massive fetch-url step fails as-shipped.
+  version: "2026-08-06.3",
+  unsupportedStepTypes: [
+    // ── Carried over from api-inprocess: durable-host-only step types. A
+    // self-contained container has no durable host (BYOC §3.3 / S0 — the
+    // exported runtime's `waitUntil` seam is unset; crawl needs the
+    // `CrawlPendingError` durable pause). Graduation lever: wire a durable
+    // store in the export (e.g. a Cloud SQL CheckpointStore) — then flip.
+    "wait-until",
+    "crawl",
+    // ── Hosted-service / DB-backed record & email steps (BYOC §7.2). A
+    // self-contained container has no hosted RecordStore / EmailSender; the
+    // Hosted endpoints are PROPOSED, not built, and S0 shows send-email /
+    // record steps fail in BOTH default and wired configs (no Bundled mode).
+    // Graduation lever: build the Hosted endpoints OR ship a Bundled
+    // RecordStore/EmailSender in the standard export — then remove.
+    "send-email",
+    "upsert-record",
+    "update-record",
+    "retrieve-record",
+    "get-record",
+    "list-records",
+    "search",
+    // ── Vector DB / embedding provider steps (BYOC §3.4 / §7.4). Only a
+    // customer-wired VectorStore / EmbeddingProvider can host these; the
+    // container ships neither. Graduation lever: bundle a pgvector
+    // VectorStore + a provider-backed EmbeddingProvider in the export.
+    "generate-embedding",
+    "vector-search",
+    "store-vector",
+    // ── Hosted asset / PDF service steps (BYOC §7.2). store-asset /
+    // generate-pdf are Hosted-only; no Bundled fulfillment. Graduation lever:
+    // build the Hosted asset/PDF endpoints or ship a Bundled renderer/store.
+    "store-asset",
+    "generate-pdf",
+    // ── Hosted memory-store steps (BYOC §3.4 / §7.2). Memory has Hosted/Custom
+    // only, no Bundled mode. Graduation lever: a Bundled MemoryStore seam in
+    // the export (or the Hosted memory endpoints).
+    "save-memory",
+    "recall-memory",
+    "memory-summary",
+    // ── template & transform-data: FAIL AS-SHIPPED (S0 §5.2.1 / §5.2.2). The
+    // export does NOT bundle liquidjs / QuickJS, so a self-contained container
+    // throws `TemplateRenderer not configured` / `SandboxNotConfiguredError`
+    // out of the box; they only PASS once the container wires the Bundled
+    // fulfillment (LiquidTemplateRenderer + QuickJSSafeCodeExecutor). Per the
+    // fail-closed / keep-gates-truthful principle these stay UNSUPPORTED for
+    // this v1. Graduation lever: bundle liquidjs + QuickJS as part of the
+    // STANDARD export (default-wire the renderer and sandbox) — then flip both
+    // to supported.
+    "template",
+    "transform-data"
+  ],
+  // Every api-inprocess feature fold carries over (shared engine, derived by
+  // spreading the base). Each is restated below with its evidence + graduation
+  // lever so the contract is self-documenting; values are pinned to the
+  // api-inprocess semantics a container inherits, never loosened — except the
+  // vendored-specific RE-FOLDS enumerated in {@link VENDORED_EXPORT_REFOLDS},
+  // which are strictly stricter.
+  unsupportedFeatures: {
+    ...API_INPROCESS_CAPABILITY_MATRIX.unsupportedFeatures,
+    approvalSteps: true,
+    // api-inprocess fold; the runtime flow engine derives no approval config. Graduation: port the approval rail.
+    batchInputMode: true,
+    // api-inprocess fold; batch has no conversational context (BYOC §3.2).
+    claudeManagedAgent: true,
+    // api-inprocess fold; exported execute-agent rejects claude_managed/external (BYOC §3.6, D-030/D-031).
+    inexpressibleVectorStep: true,
+    // api-inprocess fold; no vector seam in a self-contained container.
+    unresolvableAgentRef: true,
+    // api-inprocess fold; execute-agent resolves only against the embedded registry (ADR 0014).
+    // Nested-prompt dispatch is ENGINE-owned and works identically in a
+    // container, so this stays SUPPORTED (false) exactly as api-inprocess has
+    // it — a container does not re-fold what the engine runs itself.
+    conditionalNestedPromptStep: false,
+    // Conditional-nested `execute-agent` dispatch is ENGINE-owned exactly like
+    // nested prompt above (`conditionalSubStepExecutor` -> `runContextStep` ->
+    // `executeExecuteAgent`), so it inherits the base SUPPORTED (`false`) from
+    // the spread. NOT restated as a literal: the 2026-08-06.3 re-decision pass
+    // exists because a restated literal went stale when the base graduated.
+    // Client-executed (local/webmcp) tools PAUSE natively on the runtime flow
+    // lane; a self-contained container still pauses on them, so SUPPORTED
+    // (false) — carried over verbatim.
+    clientExecutedTools: false,
+    // `advisorTools` inherits the base SUPPORTED (`false`): `RuntimeToolExecutor
+    // .runAdvisor` resolves the advisor model through `PROVIDER_REGISTRY` +
+    // `adapter.getSecret`/`getBinding` — the same machinery every prompt step
+    // already uses — so a container that runs prompts runs advisors. No host
+    // seam involved.
+    // VENDORED RE-FOLD (not carried over): api-inprocess marks managed fetch
+    // methods SUPPORTED (false) only because the api host wires
+    // `ManagedFetchExecutor` — the seam exists precisely because the portable
+    // runtime cannot own Firecrawl / Massive credentials, rollout gates, or
+    // platform-spend metering. No export bundle wires it (the only
+    // implementation is `ApiManagedFetchExecutor`, wired solely by
+    // `apps/api/src/lib/runtime/playground-runtime.ts`), so a `fetch-url` step
+    // with `fetchMethod: 'firecrawl' | 'massive'` falls through to the portable
+    // base's not-supported error — and under the default `errorHandling:
+    // 'continue'` that failure is SWALLOWED and downstream steps see null.
+    // Declaring such a flow container-eligible is exactly the silent-misexecution
+    // class the fail-closed posture (which folded template / transform-data for
+    // the identical "passes only when hand-wired" reason) exists to prevent.
+    // Graduation lever: ship a Bundled managed-fetch fulfillment in the standard
+    // export (direct provider-credential fetch, or a hosted managed-fetch
+    // endpoint) — then flip back to false and drop it from
+    // {@link VENDORED_EXPORT_REFOLDS}. Plain `fetch-url` (no managed method)
+    // stays supported; only the managed methods fold.
+    unsupportedFetchMethod: true,
+    // VENDORED RE-FOLD (not carried over): api-inprocess graduated a
+    // `transform-data` step's runtimeTools/toolIds pool (#6013) only because the
+    // api host wires `ApiCodeModeExecutor` → `SANDBOX
+    // .workerLoaderExecuteTransformWithTools`. The seam exists precisely because
+    // NONE of the runtime's four shipped `SafeCodeExecutor`s can bind pool tools
+    // to sandboxed code, so an unwired container throws
+    // `CodeModeExecutorNotConfiguredError` (`runtime-context-step-executor.ts`
+    // fails closed on the transform-data path). Graduation lever: ship a Bundled
+    // code-with-tools fulfillment in the standard export — then flip to false and
+    // drop from {@link VENDORED_EXPORT_REFOLDS}.
+    transformDataCodeModeTools: true,
+    // The narrow mcpServers-only transform carve-out (#6013) is a base fold;
+    // carried over as `true` and restated for the same reason (no MCP discovery
+    // on transform steps).
+    transformDataMcpServers: true,
+    unsupportedTransformExecution: true,
+    // api-inprocess fold (G5); carried over.
+    customToolExecution: true,
+    // api-inprocess fold (#6023 leg 1); carried over.
+    // `promptMcpServers` inherits the base SUPPORTED (`false`). The runtime owns
+    // MCP end to end for the shipped default transport: `discoverMCPTools` falls
+    // back to its own `listServerTools` over `adapter.fetch` when no host
+    // `MCPToolExecutor` is present, and `RuntimeToolExecutor.runMCP` has a
+    // portable Streamable-HTTP JSON-RPC dispatch path on the same fallback. Only
+    // `transport: 'rest'` requires the host executor, and that is a per-server
+    // authoring choice this flow-level bit cannot express — the agent lane makes
+    // the identical bet in a container today.
+    // `promptArtifacts` inherits the base SUPPORTED (`false`): artifact emission
+    // is pure `UnifiedEventEmitter` frame production plus builtin-tool injection
+    // and strip, entirely inside the engine. (Persisting an artifact to hosted
+    // storage is the separate `store-asset` STEP TYPE, which stays folded above.)
+    // VENDORED RE-FOLD (not carried over): api-inprocess graduated a PROMPT
+    // step's `codeModeConfig.toolPool` (#6013) on the same `ApiCodeModeExecutor`
+    // seam as `transformDataCodeModeTools` above. The runtime synthesizes the
+    // `code_mode` tool byte-identically, but firing it without a host executor
+    // throws `CodeModeExecutorNotConfiguredError` (`tool-executor.ts` fails
+    // closed rather than silently degrading the pool to plain model tools).
+    // Under the default `errorHandling: 'continue'` that failure is swallowed —
+    // the same silent-misexecution class the fail-closed posture exists to
+    // prevent. Same graduation lever as the transform-data bit.
+    promptCodeModeTools: true,
+    // Explicit Layer-2 fallback chains are SUPPORTED (false) on the runtime
+    // lane, engine-owned, so a container runs them — carried over verbatim.
+    fallbackErrorHandling: false,
+    // Implicit platform-default fallback SUPPORTED (false) — engine-owned
+    // resilience; carried over verbatim (a container is not less capable).
+    implicitPlatformFallback: false,
+    unmaterializedPromptToolRefs: true
+    // api-inprocess fold (§A1); carried over.
+  }
+};
 var edgeAuthSnapshotSchema = external_exports.object({
   /**
    * Schema version. A plain positive int (not a literal) so a consumer pinned
@@ -37812,7 +38081,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
   {
     id: "sandbox:exec",
     name: "Sandbox Exec",
-    description: "Run a shell command in a Linux sandbox (Node 22, Python 3.12, git, pnpm). The sandbox persists across tool calls within the same execution \u2014 install packages, write files, then run them. Returns stdout, stderr, and exit code.",
+    description: "Run a shell command in a Linux sandbox (Node 22, Python 3.12, git, pnpm). Commands run in /workspace; installed packages and files you write there stay available to later calls in the same execution, but the working directory does not carry over \u2014 every call starts in /workspace again. Chain a directory change inside one command (`cd app && npm test`) or use absolute paths; a lone `cd` does nothing. Returns stdout, stderr, and exit code.",
     category: BuiltInToolCategory.SANDBOX,
     toolGroup: BuiltInToolGroup.SANDBOX_USE,
     providers: [BuiltInToolProvider.MULTI],
@@ -37821,7 +38090,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
       properties: {
         command: {
           type: "string",
-          description: "Shell command to execute (runs in bash)"
+          description: "Shell command to execute (runs in bash, cwd is /workspace)."
         },
         timeout: {
           type: "number",
@@ -37863,7 +38132,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
   {
     id: "sandbox:write_file",
     name: "Sandbox Write File",
-    description: "Write a file to the sandbox filesystem. Creates parent directories automatically. Use sandbox:exec to run files after writing them.",
+    description: "Write a file to the sandbox filesystem. Creates parent directories automatically. Relative paths resolve against /workspace, the directory every sandbox call starts in. Files written there stay available to later calls in the same execution. Use sandbox:exec to run files after writing them.",
     category: BuiltInToolCategory.SANDBOX,
     toolGroup: BuiltInToolGroup.SANDBOX_USE,
     providers: [BuiltInToolProvider.MULTI],
@@ -37872,7 +38141,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
       properties: {
         path: {
           type: "string",
-          description: "File path in the sandbox (e.g., /home/user/app/index.js)"
+          description: "File path in the sandbox (e.g. /workspace/app/index.js, or app/index.js relative to /workspace)"
         },
         content: {
           type: "string",
@@ -37888,7 +38157,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
   {
     id: "sandbox:read_file",
     name: "Sandbox Read File",
-    description: "Read a file from the sandbox filesystem. Returns the file content as a string.",
+    description: "Read a file from the sandbox filesystem. Relative paths resolve against /workspace, the directory every sandbox call starts in. Returns the file content as a string.",
     category: BuiltInToolCategory.SANDBOX,
     toolGroup: BuiltInToolGroup.SANDBOX_USE,
     providers: [BuiltInToolProvider.MULTI],
@@ -37897,7 +38166,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
       properties: {
         path: {
           type: "string",
-          description: "File path to read"
+          description: "File path to read (relative paths resolve against /workspace)"
         }
       },
       required: ["path"]
@@ -37934,7 +38203,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
   {
     id: "sandbox:git_checkout",
     name: "Sandbox Git Checkout",
-    description: "Clone a git repository into the sandbox. The repo is cloned into the current working directory.",
+    description: "Clone a git repository into the sandbox. The repo is cloned under /workspace, the directory every sandbox call starts in; reach it afterward with an explicit path (`cd <repo> && ...`), since the working directory does not carry over between calls.",
     category: BuiltInToolCategory.SANDBOX,
     toolGroup: BuiltInToolGroup.SANDBOX_USE,
     providers: [BuiltInToolProvider.MULTI],
@@ -37983,7 +38252,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
   {
     id: "sandbox:session_exec",
     name: "Sandbox Session Exec",
-    description: "Run a shell command in a specific sandbox identified by sandboxId.",
+    description: "Run a shell command in a specific sandbox identified by sandboxId. Commands run in /workspace; files stay available across calls but the working directory does not carry over \u2014 every call starts in /workspace again, so chain a directory change inside one command (`cd app && npm test`) or use absolute paths.",
     category: BuiltInToolCategory.SANDBOX,
     toolGroup: BuiltInToolGroup.SANDBOX_SESSION,
     providers: [BuiltInToolProvider.MULTI],
@@ -37996,7 +38265,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
         },
         command: {
           type: "string",
-          description: "Shell command to execute"
+          description: "Shell command to execute (runs in bash, cwd is /workspace)."
         },
         timeout: {
           type: "number",
@@ -38185,7 +38454,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
   {
     id: "bash",
     name: "Bash",
-    description: "Run a shell command on your Linux computer (Node 22, Python 3.12, git, pnpm, uv, ripgrep preinstalled). Commands run in /workspace; files you write there are available to later commands, but system-level changes outside /workspace may not persist. Combined stdout/stderr is returned. Prefer searching over dumping: use `rg`/`grep` to find the lines you need and `head`/`tail`/`sed -n` to read slices. Output is capped. If the command is still running at timeout_ms, it is NOT killed: bash returns a durable process_id and partial output. When the result has a deliveryId, pass it as ack_delivery_id on the next bash_output poll so newer output can advance. Poll only new output with bash_output, stop it with kill_process, or inspect handles with list_processes. Use run_in_background=true to yield immediately.",
+    description: "Run a shell command on your Linux computer (Node 22, Python 3.12, git, pnpm, uv, ripgrep preinstalled). Commands run in /workspace; files you write there are available to later commands, but system-level changes outside /workspace may not persist. Combined stdout/stderr is returned. Prefer searching over dumping: use `rg`/`grep` to find the lines you need and `head`/`tail`/`sed -n` to read slices. Output is capped. If the command is still running at timeout_ms, it is NOT killed: bash returns a durable process_id and partial output. When the result has a deliveryId, pass it as ack_delivery_id on the next bash_output poll so newer output can advance. Read only new output with bash_output (pass its wait_for_exit_ms to wait for the process rather than polling in a loop), stop it with kill_process, or inspect handles with list_processes. Use run_in_background=true to yield immediately.",
     category: BuiltInToolCategory.SANDBOX,
     toolGroup: BuiltInToolGroup.SANDBOX_AGENT,
     providers: [BuiltInToolProvider.MULTI],
@@ -38227,7 +38496,7 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
   {
     id: "bash_output",
     name: "Bash Output",
-    description: "Read only the new combined stdout/stderr produced after the last acknowledged delivery of a background bash process. Pass the previous successful bash or bash_output result's deliveryId as ack_delivery_id on the next poll; unacknowledged output is replayed so an API timeout cannot lose it. Acknowledge a terminal result's final delivery with one more poll so its bounded history record can retire. Returns status and an actual exitCode only after the process is terminal. Output is bounded and untrusted.",
+    description: "Read only the new combined stdout/stderr produced after the last acknowledged delivery of a background bash process. Do NOT poll in a tight loop: pass wait_for_exit_ms to wait server-side for the process to finish, so one call replaces many. Pass the previous successful bash or bash_output result's deliveryId as ack_delivery_id on the next poll; unacknowledged output is replayed so an API timeout cannot lose it. Acknowledge a terminal result's final delivery with one more poll so its bounded history record can retire. Returns status and an actual exitCode only after the process is terminal. Output is bounded and untrusted.",
     category: BuiltInToolCategory.SANDBOX,
     toolGroup: BuiltInToolGroup.SANDBOX_AGENT,
     providers: [BuiltInToolProvider.MULTI],
@@ -38246,6 +38515,10 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
           description: "deliveryId from the most recent successful bash or bash_output result for this process. Acknowledges that batch before reading newer output. Omit when no deliveryId has been received.",
           minLength: 1,
           maxLength: 64
+        },
+        wait_for_exit_ms: {
+          type: "number",
+          description: "Milliseconds to wait for the process to exit before returning. Use this instead of repeated polling when you expect the command to finish soon: it returns as soon as the process exits, or immediately if output is already waiting or the process has already finished. It waits for EXIT, so a process that prints progress as it goes still returns only at exit or at this deadline. Clamped to at most 240000 and to the time left in the turn; defaults to 0 (return whatever is available now)."
         }
       },
       required: ["process_id"]
@@ -45043,7 +45316,7 @@ var FLOW_STEP_TYPE_METADATA = {
     configHints: "recordId, recordType, recordName, recordFilter ({ type, where: { field, op, value } }), outputVariable (returns one object \u2014 access as {{var.field}})"
   },
   "list-records": {
-    description: "Load an ARRAY of records from the Runtype record store by type, name, or a chip-style recordFilter (metadata + top-level columns: id, name, createdAt, updatedAt), ordered by updated_at desc. Always returns an array \u2014 even for a single match \u2014 so index it in templates ({{var.0.field}}). Default limit 50 (max 1000).",
+    description: "Load an ARRAY of records from the Runtype record store by type, name, or a chip-style recordFilter (metadata + top-level columns: id, name, createdAt, updatedAt, schemaValid), ordered by updated_at desc. Always returns an array \u2014 even for a single match \u2014 so index it in templates ({{var.0.field}}). Default limit 50 (max 1000).",
     category: "data",
     isPrompt: false,
     configHints: "recordType, recordName, recordFilter ({ type, where: { field, op, value } }), limit (default 50, max 1000), onEmpty (succeed|fail), outputVariable (returns an array \u2014 index as {{var.0.field}})"
@@ -45830,7 +46103,7 @@ var TOOL_CATALOG_FOR_FLOW_GENERATION = (() => {
     const toolName = tool.id.replace(`orthogonal:${slug}:`, "");
     vendorGroups.get(slug).push(toolName);
   }
-  const orthogonalLines = Array.from(vendorGroups.entries()).sort(([a], [b2]) => a.localeCompare(b2)).map(([slug, tools]) => {
+  const orthogonalLines = Array.from(vendorGroups.entries()).sort(([a], [b]) => a.localeCompare(b)).map(([slug, tools]) => {
     const vendorName = ORTHOGONAL_API_NAMES[slug] ?? slug;
     return `- **${vendorName}** (\`platform:orthogonal:${slug}:<tool>\`): ${tools.join(", ")}`;
   });
@@ -46016,7 +46289,7 @@ var FLOW_GENERATION_GUIDE = `## Flow Generation Guide
 - **conditional**: Branch logic. Either the binary shape (condition (JS expression), trueSteps, falseSteps) or N-way named branches (branches: [{ id, name, condition, steps }], evaluated first-match-wins, with otherwiseSteps as the fallback). Set outputVariable to merge whichever branch ran into one named result.
 - **fetch-url**: HTTP request. Config: http (url, method, headers, body), responseType, outputVariable. Optional fetchMethod: 'firecrawl' (structured extraction) or 'massive' (JS-rendered/blocked pages, with massive: { format, country, delay, expiration }) instead of a raw fetch
 - **api-call**: Structured API call. Config: http, auth, responseMapping, outputVariable
-- **get-record**: Load a SINGLE record OBJECT. Config: recordId, OR recordType + recordName, OR recordFilter ({ type, where: { field, op, value } }) for richer metadata-aware queries; outputVariable. Reachable filter columns include id, name, createdAt, updatedAt plus any metadata key. Returns one object \u2014 access fields directly in templates (\`{{record.field}}\`). On multiple matches the first by updated_at desc wins; fails if none match.
+- **get-record**: Load a SINGLE record OBJECT. Config: recordId, OR recordType + recordName, OR recordFilter ({ type, where: { field, op, value } }) for richer metadata-aware queries; outputVariable. Reachable filter columns include id, name, createdAt, updatedAt, schemaValid (the collection-validation stamp) plus any metadata key. Returns one object \u2014 access fields directly in templates (\`{{record.field}}\`). On multiple matches the first by updated_at desc wins; fails if none match.
 - **list-records**: Load an ARRAY of records. Config: recordType, recordName, OR recordFilter ({ type, where: { field, op, value } }); limit (default 50, max 1000), onEmpty (succeed|fail, default succeed), outputVariable. Ordered by updated_at desc. Always writes an array \u2014 even for a single match \u2014 so index it in templates (\`{{records.0.field}}\` or \`{{records[0].field}}\`); object-style access (\`{{records.field}}\`) on the array resolves to undefined.
 - **retrieve-record**: DEPRECATED \u2014 use get-record (single object) or list-records (array). Still accepted at write and aliased at execution onto one of them; its return shape is inferred from the lookup method (recordId \u2192 object, type/name/filter \u2192 array), which is the ambiguity the successors remove.
 - **upsert-record**: Create/update a record keyed by \`(recordType, recordName)\` per owner. Config: recordType, **recordName** (REQUIRED for upsert semantics \u2014 without it each run creates a fresh \`\${recordType}-\${Date.now()}\` record), sourceVariable (the JSON metadata payload only \u2014 do NOT wrap as \`{ name, type, metadata }\`; the wrapper gets stored verbatim), outputVariable. See "Record-Keyed Upsert Patterns" in the build-product instructions for the full anti-pattern list (silent timestamped fallback, wrapped-source footgun, JSONB-blob aggregate races).
@@ -46845,7 +47118,15 @@ var FlowInputSchema = external_exports.object({
   name: external_exports.string().min(1).optional(),
   description: external_exports.string().optional(),
   steps: external_exports.array(external_exports.any()).optional(),
-  contentHash: external_exports.string().length(64).optional()
+  contentHash: external_exports.string().length(64).optional(),
+  // An inline/virtual flow may embed an agent registry (an `agents` map,
+  // mirroring `ExportedFlowDefinition.agents`) so the lane-routing eligibility
+  // analyzer and the runtime leg can resolve `execute-agent` refs against it
+  // instead of folding a resolvable embedded ref to legacy (or failing with
+  // AGENT_NOT_RESOLVED at execution). Optional and backward-compatible: flows
+  // without embedded agents omit it, and the values pass through verbatim so
+  // the full ExportedAgent shape survives the schema boundary.
+  agents: external_exports.record(external_exports.string(), external_exports.any()).optional()
 }).refine(
   (data) => {
     const hasFlowId = !!data.id;
@@ -47384,7 +47665,12 @@ var RuntimeStoredRecordSchema = external_exports.object({
   userId: external_exports.string(),
   organizationId: external_exports.string().nullable(),
   createdAt: external_exports.string(),
-  updatedAt: external_exports.string()
+  updatedAt: external_exports.string(),
+  metadataSchema: external_exports.record(external_exports.string(), external_exports.unknown()).nullable().optional(),
+  metadataLabels: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
+  schemaValid: external_exports.boolean().nullable().optional(),
+  messages: external_exports.array(external_exports.object({ role: external_exports.string(), content: external_exports.string() })).nullable().optional(),
+  productSurfaceId: external_exports.string().nullable().optional()
 });
 var FILTER_FIELD_NAME_RE = /^[a-zA-Z0-9_][a-zA-Z0-9_.-]{0,63}$/;
 var runtimeRecordFilterConditionSchema = external_exports.object({
@@ -47704,6 +47990,167 @@ var appDataGrantSchema = external_exports.object({
   // this field directly.
   writePolicy: external_exports.enum(["app", "creator"]).optional()
 });
+var APP_CSP_DIRECTIVES = [
+  "default-src",
+  "script-src",
+  "script-src-elem",
+  "script-src-attr",
+  "style-src",
+  "style-src-elem",
+  "style-src-attr",
+  "img-src",
+  "media-src",
+  "font-src",
+  "connect-src",
+  "frame-src",
+  "child-src",
+  "worker-src",
+  "object-src",
+  "manifest-src",
+  "form-action",
+  "base-uri",
+  "frame-ancestors"
+];
+var APP_CSP_KEYWORD_SOURCES = [
+  "'self'",
+  "'none'",
+  "'unsafe-inline'",
+  "'unsafe-eval'",
+  "'wasm-unsafe-eval'",
+  "'strict-dynamic'",
+  "'report-sample'"
+];
+var APP_CSP_SCHEME_SOURCES = ["https:", "data:", "blob:", "wss:", "mediastream:"];
+var APP_CSP_HOST_SOURCE_PATTERN = /^(https|wss):\/\/(\*\.)?[a-z0-9-]+(\.[a-z0-9-]+)*(:\d{1,5})?$/i;
+var APP_CSP_LIMITS = {
+  maxSourcesPerDirective: 20,
+  sourceMaxLength: 256
+};
+var APP_RESPONSE_HEADER_LIMITS = {
+  maxEntries: 20,
+  nameMaxLength: 128,
+  valueMaxLength: 1024
+};
+var APP_RESPONSE_HEADER_NAME_PATTERN = /^[a-zA-Z0-9-]+$/;
+var APP_DENIED_RESPONSE_HEADERS = {
+  "content-security-policy": 'Use the manifest "csp" field instead.',
+  "content-type": "Content types are inferred from the file extension.",
+  "content-length": "Runtype sets transport headers for the served response.",
+  "content-encoding": "Runtype sets transport headers for the served response.",
+  "transfer-encoding": "Runtype sets transport headers for the served response.",
+  connection: "Runtype sets transport headers for the served response.",
+  etag: "The ETag is derived from the stored bundle file.",
+  "cache-control": "Runtype owns caching so activating an older version takes effect immediately.",
+  "set-cookie": "Apps authenticate through the injected client token, not cookies.",
+  "x-robots-tag": "Indexing follows the app's visibility setting.",
+  "x-content-type-options": "Runtype always sends nosniff.",
+  "strict-transport-security": "HSTS is set for the whole serving domain.",
+  location: "Served bundle files are static content and never redirect."
+};
+function isAllowedAppCspDirective(name) {
+  return APP_CSP_DIRECTIVES.includes(name);
+}
+function isValidAppCspSource(source) {
+  if (source.length === 0 || source.length > APP_CSP_LIMITS.sourceMaxLength) return false;
+  if (APP_CSP_KEYWORD_SOURCES.includes(source)) return true;
+  if (APP_CSP_SCHEME_SOURCES.includes(source)) return true;
+  return APP_CSP_HOST_SOURCE_PATTERN.test(source);
+}
+function appResponseHeaderDenialReason(name) {
+  return APP_DENIED_RESPONSE_HEADERS[name.toLowerCase()] ?? null;
+}
+var APP_CSP_SOURCE_HELP = `Use a quoted keyword (${APP_CSP_KEYWORD_SOURCES.join(
+  ", "
+)}), a scheme (${APP_CSP_SCHEME_SOURCES.join(", ")}), or an https/wss origin such as https://cdn.example.com`;
+var appCspOverridesSchema = external_exports.record(external_exports.string(), external_exports.array(external_exports.string())).superRefine((overrides, ctx) => {
+  for (const [directive, sources] of Object.entries(overrides)) {
+    if (!isAllowedAppCspDirective(directive)) {
+      ctx.addIssue({
+        code: "custom",
+        path: [directive],
+        message: `Unsupported CSP directive "${directive}". Allowed directives: ${APP_CSP_DIRECTIVES.join(", ")}.`
+      });
+      continue;
+    }
+    if (sources.length === 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: [directive],
+        message: `CSP directive "${directive}" needs at least one source. Use "'none'" to block everything.`
+      });
+      continue;
+    }
+    if (sources.length > APP_CSP_LIMITS.maxSourcesPerDirective) {
+      ctx.addIssue({
+        code: "custom",
+        path: [directive],
+        message: `CSP directive "${directive}" has ${sources.length} sources, which exceeds the ${APP_CSP_LIMITS.maxSourcesPerDirective}-source limit.`
+      });
+      continue;
+    }
+    for (const [index, source] of sources.entries()) {
+      if (source.length > APP_CSP_LIMITS.sourceMaxLength) {
+        ctx.addIssue({
+          code: "custom",
+          path: [directive, index],
+          message: `CSP source in "${directive}" exceeds the ${APP_CSP_LIMITS.sourceMaxLength}-character limit.`
+        });
+        continue;
+      }
+      if (!isValidAppCspSource(source)) {
+        ctx.addIssue({
+          code: "custom",
+          path: [directive, index],
+          message: `CSP directive "${directive}" has an unsupported source "${source}". ${APP_CSP_SOURCE_HELP}.`
+        });
+      }
+    }
+  }
+});
+var appResponseHeaderOverridesSchema = external_exports.record(external_exports.string(), external_exports.string()).superRefine((headers, ctx) => {
+  const entries = Object.entries(headers);
+  if (entries.length > APP_RESPONSE_HEADER_LIMITS.maxEntries) {
+    ctx.addIssue({
+      code: "custom",
+      message: `${entries.length} response headers exceeds the ${APP_RESPONSE_HEADER_LIMITS.maxEntries}-header limit.`
+    });
+    return;
+  }
+  for (const [name, value] of entries) {
+    if (name.length > APP_RESPONSE_HEADER_LIMITS.nameMaxLength || !APP_RESPONSE_HEADER_NAME_PATTERN.test(name)) {
+      ctx.addIssue({
+        code: "custom",
+        path: [name],
+        message: `Response header name "${name}" is invalid. Use letters, digits, and hyphens only (max ${APP_RESPONSE_HEADER_LIMITS.nameMaxLength} characters).`
+      });
+      continue;
+    }
+    const denied = appResponseHeaderDenialReason(name);
+    if (denied) {
+      ctx.addIssue({
+        code: "custom",
+        path: [name],
+        message: `Response header "${name}" is set by Runtype and cannot be overridden. ${denied}`
+      });
+      continue;
+    }
+    if (/[\r\n]/.test(value)) {
+      ctx.addIssue({
+        code: "custom",
+        path: [name],
+        message: `Response header "${name}" must not contain a carriage return or newline.`
+      });
+      continue;
+    }
+    if (value.length > APP_RESPONSE_HEADER_LIMITS.valueMaxLength) {
+      ctx.addIssue({
+        code: "custom",
+        path: [name],
+        message: `Response header "${name}" exceeds the ${APP_RESPONSE_HEADER_LIMITS.valueMaxLength}-character value limit.`
+      });
+    }
+  }
+});
 var appManifestSchema = external_exports.object({
   name: external_exports.string().min(1).max(APP_MANIFEST_LIMITS.nameMaxLength),
   description: external_exports.string().max(2e3).optional(),
@@ -47712,7 +48159,9 @@ var appManifestSchema = external_exports.object({
     agents: external_exports.array(external_exports.string()).max(APP_MANIFEST_LIMITS.maxAgents).default([])
   }).strict().default({ flows: [], agents: [] }),
   data: external_exports.array(appDataGrantSchema).max(APP_MANIFEST_LIMITS.maxDataNamespaces).default([]),
-  auth: external_exports.enum(["none", "optional", "required"]).default("none")
+  auth: external_exports.enum(["none", "optional", "required"]).default("none"),
+  csp: appCspOverridesSchema.optional(),
+  headers: appResponseHeaderOverridesSchema.optional()
 }).strict();
 var appRoutingDocSchema = external_exports.object({
   appId: external_exports.string(),
@@ -47729,6 +48178,20 @@ var appRoutingDocSchema = external_exports.object({
     apiUrl: external_exports.string(),
     clientToken: external_exports.string().nullable()
   }),
+  /**
+   * The active manifest's serving policy, copied forward on activation.
+   * Optional so routing docs written before this field keep parsing.
+   *
+   * The SHAPE is validated here but the CONTENT deliberately is not: a doc
+   * whose csp/headers fail the stricter manifest rules must still parse, or a
+   * single bad value would take the whole app off the air. The edge runs
+   * `sanitizeAppCspOverrides` / `sanitizeAppResponseHeaders` at header-build
+   * time and falls back to the platform default for anything it rejects.
+   */
+  serving: external_exports.object({
+    csp: external_exports.record(external_exports.string(), external_exports.array(external_exports.string())).optional(),
+    headers: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  }).optional(),
   updatedAt: external_exports.string()
 });
 var SKILL_SCAN_HARD_BLOCK_CATEGORIES = [
@@ -47765,6 +48228,9 @@ function getDevPlanOverride() {
   return process.env.RUNTYPE_DEV_PLAN_OVERRIDE;
 }
 
+// src/lib/sdk-client.ts
+import { createClient } from "@runtypelabs/sdk";
+
 // src/lib/cli-version.ts
 import { readFileSync as readFileSync2 } from "fs";
 import { dirname, join } from "path";
@@ -47829,6 +48295,24 @@ var isAuthMeResponse = (value) => {
   const record2 = value;
   return typeof record2.userId === "string";
 };
+var ApiKeyValidationUnavailableError = class extends Error {
+  constructor(message, statusCode, options) {
+    super(message, options);
+    this.statusCode = statusCode;
+    this.name = "ApiKeyValidationUnavailableError";
+  }
+  statusCode;
+};
+var describeUnverifiableStatus = (statusCode, apiUrl) => {
+  const answered = `Could not verify the API key: the API at ${apiUrl} answered HTTP ${statusCode}`;
+  if (statusCode === 403 || statusCode === 407) {
+    return `${answered} (this can be an egress proxy or firewall blocking ${apiUrl}, not an invalid key)`;
+  }
+  if (statusCode >= 500) {
+    return `${answered} (the API or something in front of it is failing, not an invalid key). Try again shortly.`;
+  }
+  return `${answered}, which is neither a success nor a credential rejection, so the key was not verified.`;
+};
 var ApiKeyManager = class {
   /**
    * Exchange a Clerk session JWT for a persistent API key.
@@ -47858,14 +48342,32 @@ var ApiKeyManager = class {
     }
     return result;
   }
+  /**
+   * Resolve whether the API accepts this key.
+   *
+   * `false` means strictly "the API looked at these credentials and rejected
+   * them". Anything that leaves the key unchecked throws instead — the SDK
+   * mints a `RuntypeApiError` for every non-2xx response, so returning false
+   * for all of them reported an intercepting proxy's 403, a 407, or an API
+   * 5xx as "Invalid API key" and sent people hunting for a credential problem
+   * that did not exist.
+   */
   async validateApiKey(apiKey, apiUrl) {
-    const client = createCliClient(apiKey, apiUrl);
+    const resolvedApiUrl = apiUrl || getApiUrl();
+    const client = createCliClient(apiKey, resolvedApiUrl);
     try {
       await client.get("/users/profile");
       return true;
     } catch (error51) {
       if (error51 instanceof RuntypeApiError) {
-        return false;
+        if (error51.statusCode === 401) {
+          return false;
+        }
+        throw new ApiKeyValidationUnavailableError(
+          describeUnverifiableStatus(error51.statusCode, resolvedApiUrl),
+          error51.statusCode,
+          { cause: error51 }
+        );
       }
       throw error51;
     }
@@ -48539,6 +49041,10 @@ var NON_TTY_LOGIN_GUIDANCE = {
     "Existing account: ask the user for an API key from the dashboard (Settings > API keys), then run: runtype auth login --api-key <key>"
   ]
 };
+var API_UNREACHABLE_NEXT = [
+  "Confirm this environment can reach the Runtype API directly over HTTPS.",
+  "If egress is restricted, allowlist api.runtype.com (staging: api.runtype-staging.com), then re-run: runtype auth login --api-key <key>"
+];
 function refuseForcedTtyLogin(options) {
   if (options.tty === true && process.stdout.isTTY !== true) {
     console.error(
@@ -48651,6 +49157,21 @@ async function loginAction(options) {
           )
         );
       } catch (error51) {
+        if (error51 instanceof ApiKeyValidationUnavailableError) {
+          console.error(
+            JSON.stringify(
+              {
+                status: "error",
+                code: "api_unreachable",
+                error: error51.message,
+                next: API_UNREACHABLE_NEXT
+              },
+              null,
+              2
+            )
+          );
+          process.exit(1);
+        }
         const message = error51 instanceof Error ? error51.message : "Unknown error";
         console.error(JSON.stringify({ status: "error", error: message }, null, 2));
         process.exit(1);
@@ -49121,7 +49642,11 @@ async function ensureAuth(options) {
       if (isValid) {
         return envApiKey;
       }
-    } catch {
+    } catch (error51) {
+      if (error51 instanceof ApiKeyValidationUnavailableError) {
+        console.error(chalk4.yellow(`
+${error51.message}`));
+      }
     }
   }
   const store = new CredentialStore();
@@ -49562,7 +50087,8 @@ import chalk6 from "chalk";
 import React3 from "react";
 import { render as render3 } from "ink";
 import { useState as useState4, useEffect as useEffect5 } from "react";
-import { writeFileSync } from "fs";
+import { writeFileSync, mkdirSync } from "fs";
+import { dirname as dirname2 } from "path";
 
 // src/lib/terminal-image.ts
 var ESC = "\x1B";
@@ -50361,6 +50887,31 @@ recordsCommand.command("export").description("Export records to a file").option(
     process.exit(1);
   }
 });
+recordsCommand.command("typegen").description(
+  "Generate TypeScript types for your schematized record collections. Writes a .d.ts that augments the @runtypelabs/sdk RecordCollections map so client.records.from(slug) types record metadata. Commit the file and re-run this in CI, diffing against the committed copy (e.g. `runtype records typegen -o runtype-records.d.ts && git diff --exit-code runtype-records.d.ts`), to catch collection-schema drift."
+).option(
+  "-o, --output <file>",
+  "Write the declarations to a file (default: print to stdout)"
+).action(async (options) => {
+  const apiKey = await ensureAuth();
+  if (!apiKey) return;
+  const client = createCliClient(apiKey);
+  try {
+    const dts = await client.collections.typegen();
+    if (options.output) {
+      const dir = dirname2(options.output);
+      if (dir && dir !== ".") mkdirSync(dir, { recursive: true });
+      writeFileSync(options.output, dts);
+      console.log(chalk6.green(`Wrote record collection types to ${options.output}`));
+      return;
+    }
+    process.stdout.write(dts);
+  } catch (error51) {
+    const message = error51 instanceof Error ? error51.message : "Unknown error";
+    console.error(chalk6.red(`Failed to generate record types: ${message}`));
+    process.exit(1);
+  }
+});
 function csvEscape(value) {
   const text = neutralizeCsvFormula(value);
   if (text.includes(",") || text.includes('"') || text.includes("\n")) {
@@ -51471,18 +52022,18 @@ batchCommand.command("summary").description("Show a summary of active and recent
         console.log(`  Recently completed: ${data.recentlyCompleted}`);
         if (data.batches.length > 0) {
           console.log(chalk9.cyan("\nActive Batches:"));
-          for (const b2 of data.batches) {
+          for (const b of data.batches) {
             console.log(
-              `  ${chalk9.green(b2.id)} ${b2.flowName ?? ""} \u2014 ${b2.status} (${b2.processedRecords}/${b2.totalRecords}, ${b2.progress}%)`
+              `  ${chalk9.green(b.id)} ${b.flowName ?? ""} \u2014 ${b.status} (${b.processedRecords}/${b.totalRecords}, ${b.progress}%)`
             );
           }
         }
         if (data.recent.length > 0) {
           console.log(chalk9.cyan("\nRecently Completed:"));
-          for (const b2 of data.recent) {
-            const statusColor = b2.status === "completed" ? chalk9.green(b2.status) : chalk9.red(b2.status);
+          for (const b of data.recent) {
+            const statusColor = b.status === "completed" ? chalk9.green(b.status) : chalk9.red(b.status);
             console.log(
-              `  ${chalk9.green(b2.id)} ${b2.flowName ?? ""} \u2014 ${statusColor} (${b2.processedRecords}/${b2.totalRecords})`
+              `  ${chalk9.green(b.id)} ${b.flowName ?? ""} \u2014 ${statusColor} (${b.processedRecords}/${b.totalRecords})`
             );
           }
         }
@@ -51511,18 +52062,18 @@ batchCommand.command("summary").description("Show a summary of active and recent
             { label: "Active", value: data.activeBatches, color: "green" },
             { label: "Recently completed", value: data.recentlyCompleted }
           ];
-          for (const b2 of data.batches) {
+          for (const b of data.batches) {
             fields.push({
-              label: b2.id,
-              value: `${b2.flowName ?? ""} \u2014 ${b2.status} (${b2.processedRecords}/${b2.totalRecords}, ${b2.progress}%)`,
+              label: b.id,
+              value: `${b.flowName ?? ""} \u2014 ${b.status} (${b.processedRecords}/${b.totalRecords}, ${b.progress}%)`,
               color: "yellow"
             });
           }
-          for (const b2 of data.recent) {
+          for (const b of data.recent) {
             fields.push({
-              label: b2.id,
-              value: `${b2.flowName ?? ""} \u2014 ${b2.status} (${b2.processedRecords}/${b2.totalRecords})`,
-              color: b2.status === "completed" ? "green" : "red"
+              label: b.id,
+              value: `${b.flowName ?? ""} \u2014 ${b.status} (${b.processedRecords}/${b.totalRecords})`,
+              color: b.status === "completed" ? "green" : "red"
             });
           }
           setResultNode(React6.createElement(EntityCard, { fields }));
@@ -53292,9 +53843,9 @@ Histogram (${histogram.length} buckets):`));
         if (histogram.length === 0) {
           console.log(chalk15.gray("  No data"));
         } else {
-          for (const b2 of histogram) {
-            const errPart = b2.errors > 0 ? chalk15.red(` (${b2.errors} errors)`) : "";
-            console.log(`  ${chalk15.dim(b2.bucket)}  ${b2.count}${errPart}`);
+          for (const b of histogram) {
+            const errPart = b.errors > 0 ? chalk15.red(` (${b.errors} errors)`) : "";
+            console.log(`  ${chalk15.dim(b.bucket)}  ${b.count}${errPart}`);
           }
         }
       } catch (error51) {
@@ -53316,7 +53867,7 @@ Histogram (${histogram.length} buckets):`));
             const stats = res.data;
             const histogram = stats.histogram ?? [];
             const histogramSummary = histogram.length === 0 ? "No data" : histogram.map(
-              (b2) => `${b2.bucket}: ${b2.count}${b2.errors > 0 ? ` (${b2.errors} err)` : ""}`
+              (b) => `${b.bucket}: ${b.count}${b.errors > 0 ? ` (${b.errors} err)` : ""}`
             ).join("\n");
             setResultNode(
               React11.createElement(EntityCard, {
@@ -53965,6 +54516,7 @@ function InitApp({ apiUrl, onComplete }) {
     const checkAndAuth = async () => {
       const store = new CredentialStore();
       const existingKey = await store.getApiKey();
+      let storedKeyNotice = null;
       if (existingKey) {
         const apiKeyManager = new ApiKeyManager();
         try {
@@ -53983,14 +54535,15 @@ function InitApp({ apiUrl, onComplete }) {
             }));
             return;
           }
-        } catch {
+        } catch (err) {
+          storedKeyNotice = err instanceof Error ? err.message : String(err);
         }
       }
       setState((prev) => ({
         ...prev,
         step: 1,
         loading: true,
-        loadingLabel: "Opening browser to sign in..."
+        loadingLabel: storedKeyNotice ? `${storedKeyNotice} Opening browser to sign in instead...` : "Opening browser to sign in..."
       }));
       try {
         const oauth = new OAuthManager({
@@ -54498,6 +55051,21 @@ var initCommand = new Command14("init").description("Set up Runtype CLI with gui
           )
         );
       } catch (error51) {
+        if (error51 instanceof ApiKeyValidationUnavailableError) {
+          console.error(
+            JSON.stringify(
+              {
+                status: "error",
+                code: "api_unreachable",
+                error: error51.message,
+                next: "If egress is restricted, allowlist api.runtype.com (staging: api.runtype-staging.com), then re-run: runtype init --api-key <key>"
+              },
+              null,
+              2
+            )
+          );
+          process.exit(1);
+        }
         const message = error51 instanceof Error ? error51.message : "Authentication failed";
         console.error(
           JSON.stringify({ status: "error", error: message }, null, 2)
@@ -57362,7 +57930,7 @@ function extractTrackedFiles(snapshots, liveTools, planPath) {
     result.push({ path: planPath, type: "plan" });
   }
   const sorted = Array.from(fileMap.values()).sort(
-    (a, b2) => (b2.lastTouchedAt ?? 0) - (a.lastTouchedAt ?? 0)
+    (a, b) => (b.lastTouchedAt ?? 0) - (a.lastTouchedAt ?? 0)
   );
   result.push(...sorted);
   return result;
@@ -58593,7 +59161,7 @@ function ModelPicker({ currentModel, onSelect, onCancel, models }) {
     [contentWidth]
   );
   const sorted = useMemo7(
-    () => [...availableModels].sort((a, b2) => a.group.localeCompare(b2.group)),
+    () => [...availableModels].sort((a, b) => a.group.localeCompare(b.group)),
     [availableModels]
   );
   const filtered = useMemo7(() => {
@@ -62972,7 +63540,7 @@ function getSanitizedEnv() {
   return clean;
 }
 function redactSecrets(output, secrets) {
-  const sorted = secrets.filter((s) => s.length >= 8).sort((a, b2) => b2.length - a.length);
+  const sorted = secrets.filter((s) => s.length >= 8).sort((a, b) => b.length - a.length);
   let redacted = output;
   for (const secret of sorted) {
     redacted = redacted.replaceAll(secret, "[REDACTED]");
@@ -63905,7 +64473,7 @@ function buildTree(dirPath, maxDepth, depth = 0) {
     return [`${"  ".repeat(depth)}[error reading ${normalizeToolPath(dirPath)}: ${message}]`];
   }
   const lines = [];
-  for (const entry of entries.sort((a, b2) => a.name.localeCompare(b2.name))) {
+  for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
     const entryPath = path10.join(dirPath, entry.name);
     if (shouldIgnoreRepoEntry(entryPath)) continue;
     lines.push(`${"  ".repeat(depth)}- ${entry.name}${entry.isDirectory() ? "/" : ""}`);
@@ -64160,7 +64728,7 @@ function createDefaultLocalTools(context) {
             });
           }
         });
-        const matches = candidates.sort((a, b2) => b2.score - a.score || a.text.localeCompare(b2.text)).map((candidate) => candidate.text).filter((text, index, array2) => array2.indexOf(text) === index).slice(0, maxResults);
+        const matches = candidates.sort((a, b) => b.score - a.score || a.text.localeCompare(b.text)).map((candidate) => candidate.text).filter((text, index, array2) => array2.indexOf(text) === index).slice(0, maxResults);
         return matches.length > 0 ? matches.join("\n") : `No matches found for "${query}" under ${normalizeToolPath(startPath.resolvedPath)}`;
       }
     },
@@ -64209,7 +64777,7 @@ function createDefaultLocalTools(context) {
             });
           }
         });
-        const rankedMatches = matches.sort((a, b2) => b2.score - a.score || a.path.localeCompare(b2.path)).map((match) => match.path).slice(0, maxResults);
+        const rankedMatches = matches.sort((a, b) => b.score - a.score || a.path.localeCompare(b.path)).map((match) => match.path).slice(0, maxResults);
         return rankedMatches.length > 0 ? rankedMatches.join("\n") : `No files matched "${pattern}" under ${normalizeToolPath(startPath.resolvedPath)}`;
       }
     },
@@ -68464,8 +69032,8 @@ import React20 from "react";
 import { render as render20 } from "ink";
 import { useState as useState37, useEffect as useEffect31 } from "react";
 import { Text as Text34 } from "ink";
-import { readFileSync as readFileSync16, writeFileSync as writeFileSync6, mkdirSync as mkdirSync8 } from "fs";
-import { dirname as dirname8, relative as relative6, resolve as resolve10 } from "path";
+import { readFileSync as readFileSync16, writeFileSync as writeFileSync6, mkdirSync as mkdirSync9 } from "fs";
+import { dirname as dirname9, relative as relative6, resolve as resolve10 } from "path";
 
 // src/lib/eval-discovery.ts
 import { readdirSync as readdirSync6 } from "fs";
@@ -68732,14 +69300,14 @@ evalCommand.command("list").description("List eval batches").option("--flow <id>
         total,
         emptyMessage: "No eval batches found",
         renderCard: (item) => {
-          const b2 = item;
-          const name = b2.name || b2.id;
-          const progress = b2.totalRecords ? `${b2.completedRecords ?? 0}/${b2.totalRecords}` : "";
-          const statusColor = b2.status === "completed" ? "green" : "yellow";
+          const b = item;
+          const name = b.name || b.id;
+          const progress = b.totalRecords ? `${b.completedRecords ?? 0}/${b.totalRecords}` : "";
+          const statusColor = b.status === "completed" ? "green" : "yellow";
           return React20.createElement(
             Text34,
             { color: statusColor },
-            `  ${b2.id} ${name} [${b2.status}] ${progress}`
+            `  ${b.id} ${name} [${b.status}] ${progress}`
           );
         }
       });
@@ -69021,7 +69589,7 @@ evalCommand.command("run [idOrDirPrefix]").description(
       try {
         const xml = buildJUnitXml(outcomes.map(toJUnitSuite));
         const outPath = resolve10(options.junit);
-        mkdirSync8(dirname8(outPath), { recursive: true });
+        mkdirSync9(dirname9(outPath), { recursive: true });
         writeFileSync6(outPath, xml, "utf-8");
         console.log(chalk28.gray(`JUnit results written to ${options.junit}`));
       } catch (error51) {
@@ -69906,19 +70474,19 @@ import { execFileSync } from "child_process";
 // src/lib/persona-init.ts
 init_credential_store();
 
-// ../../node_modules/.pnpm/@runtypelabs+persona@4.14.0/node_modules/@runtypelabs/persona/dist/codegen.js
-var w = "4.14.0";
-var S = w;
-function b(e) {
-  return e?.cdnBase?.trim().replace(/\/+$/, "").replace(/[\\'"<>`]/g, (r) => `%${r.charCodeAt(0).toString(16).toUpperCase().padStart(2, "0")}`) || `https://cdn.jsdelivr.net/npm/@runtypelabs/persona@${S}/dist`;
+// ../../node_modules/.pnpm/@runtypelabs+persona@4.15.0/node_modules/@runtypelabs/persona/dist/codegen.js
+var S = "4.15.0";
+var x = S;
+function $(e) {
+  return e?.cdnBase?.trim().replace(/\/+$/, "").replace(/[\\'"<>`]/g, (r) => `%${r.charCodeAt(0).toString(16).toUpperCase().padStart(2, "0")}`) || `https://cdn.jsdelivr.net/npm/@runtypelabs/persona@${x}/dist`;
 }
 function u(e) {
   if (e !== void 0) return typeof e == "string" ? e : Array.isArray(e) ? `[${e.map((i) => i.toString()).join(", ")}]` : e.toString();
 }
-function I(e) {
+function v(e) {
   if (e) return { getHeaders: u(e.getHeaders), onFeedback: u(e.onFeedback), onCopy: u(e.onCopy), requestMiddleware: u(e.requestMiddleware), actionHandlers: u(e.actionHandlers), actionParsers: u(e.actionParsers), postprocessMessage: u(e.postprocessMessage), contextProviders: u(e.contextProviders), streamParser: u(e.streamParser) };
 }
-var x = `({ text, message }: any) => {
+var A = `({ text, message }: any) => {
   const jsonSource = (message as any).rawContent || text || message.content;
   if (!jsonSource || typeof jsonSource !== 'string') return null;
   let cleanJson = jsonSource
@@ -69932,7 +70500,7 @@ var x = `({ text, message }: any) => {
   } catch (e) { return null; }
   return null;
 }`;
-var A = `function(ctx) {
+var j = `function(ctx) {
   var jsonSource = ctx.message.rawContent || ctx.text || ctx.message.content;
   if (!jsonSource || typeof jsonSource !== 'string') return null;
   var cleanJson = jsonSource
@@ -69946,7 +70514,7 @@ var A = `function(ctx) {
   } catch (e) { return null; }
   return null;
 }`;
-var j = `(action: any, context: any) => {
+var O = `(action: any, context: any) => {
   if (action.type !== 'nav_then_click') return;
   const payload = action.payload || action.raw || {};
   const url = payload?.page;
@@ -69964,7 +70532,7 @@ var j = `(action: any, context: any) => {
   window.location.href = targetUrl;
   return { handled: true, displayText: text };
 }`;
-var O = `function(action, context) {
+var E = `function(action, context) {
   if (action.type !== 'nav_then_click') return;
   var payload = action.payload || action.raw || {};
   var url = payload.page;
@@ -69982,27 +70550,27 @@ var O = `function(action, context) {
   window.location.href = targetUrl;
   return { handled: true, displayText: text };
 }`;
-var v = `(parsed: any) => {
+var _ = `(parsed: any) => {
   if (!parsed || typeof parsed !== 'object') return null;
   if (parsed.action === 'nav_then_click') return 'Navigating...';
   if (parsed.action === 'message') return parsed.text || '';
   if (parsed.action === 'message_and_click') return parsed.text || 'Processing...';
   return parsed.text || null;
 }`;
-var _ = `function(parsed) {
+var T = `function(parsed) {
   if (!parsed || typeof parsed !== 'object') return null;
   if (parsed.action === 'nav_then_click') return 'Navigating...';
   if (parsed.action === 'message') return parsed.text || '';
   if (parsed.action === 'message_and_click') return parsed.text || 'Processing...';
   return parsed.text || null;
 }`;
-function T(e) {
+function M(e) {
   if (!e) return null;
   let i = e.toString();
   return i.includes("createJsonStreamParser") || i.includes("partial-json") ? "json" : i.includes("createRegexJsonParser") || i.includes("regex") ? "regex-json" : i.includes("createXmlParser") || i.includes("<text>") ? "xml" : null;
 }
 function h(e) {
-  return e.parserType ?? T(e.streamParser) ?? "plain";
+  return e.parserType ?? M(e.streamParser) ?? "plain";
 }
 function g(e, i) {
   let r = [];
@@ -70027,6 +70595,15 @@ function f(e, i) {
   return r;
 }
 function y(e, i) {
+  if (!e.suggestions) return [];
+  let r = JSON.stringify(e.suggestions, null, 2).split(`
+`);
+  return r.map((s, a) => {
+    let t = a === 0 ? `${i}suggestions: ` : i, n = a === r.length - 1 ? "," : "";
+    return `${t}${s}${n}`;
+  });
+}
+function C(e, i) {
   let r = [];
   if (e.layout) {
     let s = e.layout.header && Object.keys(e.layout.header).some((t) => t !== "render"), a = e.layout.messages && Object.keys(e.layout.messages).some((t) => t !== "renderUserMessage" && t !== "renderAssistantMessage");
@@ -70042,11 +70619,11 @@ function y(e, i) {
   }
   return r;
 }
-function $(e, i) {
+function w(e, i) {
   let r = [];
   return e && (e.getHeaders && r.push(`${i}getHeaders: ${e.getHeaders},`), e.requestMiddleware && r.push(`${i}requestMiddleware: ${e.requestMiddleware},`), e.actionParsers && r.push(`${i}actionParsers: ${e.actionParsers},`), e.actionHandlers && r.push(`${i}actionHandlers: ${e.actionHandlers},`), e.contextProviders && r.push(`${i}contextProviders: ${e.contextProviders},`), e.streamParser && r.push(`${i}streamParser: ${e.streamParser},`)), r;
 }
-function E(e, i, r) {
+function k(e, i, r) {
   Object.entries(i).forEach(([s, a]) => {
     if (!(a === void 0 || typeof a == "function")) {
       if (Array.isArray(a)) {
@@ -70054,7 +70631,7 @@ function E(e, i, r) {
         return;
       }
       if (a && typeof a == "object") {
-        e.push(`${r}${s}: {`), E(e, a, `${r}  `), e.push(`${r}},`);
+        e.push(`${r}${s}: {`), k(e, a, `${r}  `), e.push(`${r}},`);
         return;
       }
       e.push(`${r}${s}: ${JSON.stringify(a)},`);
@@ -70062,18 +70639,18 @@ function E(e, i, r) {
   });
 }
 function d(e, i, r, s) {
-  r && (e.push(`${s}${i}: {`), E(e, r, `${s}  `), e.push(`${s}},`));
+  r && (e.push(`${s}${i}: {`), k(e, r, `${s}  `), e.push(`${s}},`));
 }
 function c(e) {
   return (e?.target ?? "body").replace(/\\/g, "\\\\").replace(/'/g, "\\'");
 }
-function M(e, i = "esm", r) {
+function R(e, i = "esm", r) {
   let s = { ...e };
   delete s.postprocessMessage, delete s.initialMessages;
-  let a = r ? { ...r, hooks: I(r.hooks) } : void 0;
-  return i === "esm" ? R(s, a) : i === "script-installer" ? N(s, a) : i === "script-advanced" ? F(s, a) : i === "react-component" ? W(s, a) : i === "react-advanced" ? H(s, a) : D(s, a);
+  let a = r ? { ...r, hooks: v(r.hooks) } : void 0;
+  return i === "esm" ? W(s, a) : i === "script-installer" ? D(s, a) : i === "script-advanced" ? F(s, a) : i === "react-component" ? H(s, a) : i === "react-advanced" ? N(s, a) : J(s, a);
 }
-function R(e, i) {
+function W(e, i) {
   let r = i?.hooks, s = h(e), a = s !== "plain", t = ["import '@runtypelabs/persona/widget.css';", "import { initAgentWidget, markdownPostprocessor } from '@runtypelabs/persona';", "", "initAgentWidget({", `  target: '${c(i)}',`, "  config: {"];
   return e.apiUrl && t.push(`    apiUrl: "${e.apiUrl}",`), e.clientToken && t.push(`    clientToken: "${e.clientToken}",`), e.agentId && t.push(`    agentId: "${e.agentId}",`), e.target && t.push(`    target: "${e.target}",`), e.flowId && t.push(`    flowId: "${e.flowId}",`), a && t.push(`    parserType: "${s}",`), e.theme && typeof e.theme == "object" && Object.keys(e.theme).length > 0 && d(t, "theme", e.theme, "    "), e.launcher && d(t, "launcher", e.launcher, "    "), e.copy && (t.push("    copy: {"), Object.entries(e.copy).forEach(([n, o]) => {
     t.push(`      ${n}: "${o}",`);
@@ -70085,12 +70662,12 @@ function R(e, i) {
     typeof o == "string" ? t.push(`      ${n}: "${o}",`) : typeof o == "boolean" && t.push(`      ${n}: ${o},`);
   }), t.push("    },")), e.features && (t.push("    features: {"), Object.entries(e.features).forEach(([n, o]) => {
     t.push(`      ${n}: ${o},`);
-  }), t.push("    },")), e.suggestionChips && e.suggestionChips.length > 0 && (t.push("    suggestionChips: ["), e.suggestionChips.forEach((n) => {
+  }), t.push("    },")), t.push(...y(e, "    ")), e.suggestionChips && e.suggestionChips.length > 0 && (t.push("    suggestionChips: ["), e.suggestionChips.forEach((n) => {
     t.push(`      "${n}",`);
-  }), t.push("    ],")), e.suggestionChipsConfig && (t.push("    suggestionChipsConfig: {"), e.suggestionChipsConfig.fontFamily && t.push(`      fontFamily: "${e.suggestionChipsConfig.fontFamily}",`), e.suggestionChipsConfig.fontWeight && t.push(`      fontWeight: "${e.suggestionChipsConfig.fontWeight}",`), e.suggestionChipsConfig.paddingX && t.push(`      paddingX: "${e.suggestionChipsConfig.paddingX}",`), e.suggestionChipsConfig.paddingY && t.push(`      paddingY: "${e.suggestionChipsConfig.paddingY}",`), t.push("    },")), t.push(...g(e, "    ")), t.push(...m(e, "    ", r)), t.push(...f(e, "    ")), t.push(...y(e, "    ")), t.push(...$(r, "    ")), e.debug && t.push(`    debug: ${e.debug},`), r?.postprocessMessage ? t.push(`    postprocessMessage: ${r.postprocessMessage}`) : t.push("    postprocessMessage: ({ text }) => markdownPostprocessor(text)"), t.push("  }"), t.push("});"), t.join(`
+  }), t.push("    ],")), e.suggestionChipsConfig && (t.push("    suggestionChipsConfig: {"), e.suggestionChipsConfig.fontFamily && t.push(`      fontFamily: "${e.suggestionChipsConfig.fontFamily}",`), e.suggestionChipsConfig.fontWeight && t.push(`      fontWeight: "${e.suggestionChipsConfig.fontWeight}",`), e.suggestionChipsConfig.paddingX && t.push(`      paddingX: "${e.suggestionChipsConfig.paddingX}",`), e.suggestionChipsConfig.paddingY && t.push(`      paddingY: "${e.suggestionChipsConfig.paddingY}",`), t.push("    },")), t.push(...g(e, "    ")), t.push(...m(e, "    ", r)), t.push(...f(e, "    ")), t.push(...C(e, "    ")), t.push(...w(r, "    ")), e.debug && t.push(`    debug: ${e.debug},`), r?.postprocessMessage ? t.push(`    postprocessMessage: ${r.postprocessMessage}`) : t.push("    postprocessMessage: ({ text }) => markdownPostprocessor(text)"), t.push("  }"), t.push("});"), t.join(`
 `);
 }
-function W(e, i) {
+function H(e, i) {
   let r = i?.hooks, s = h(e), a = s !== "plain", t = ["// ChatWidget.tsx", "'use client'; // Required for Next.js - remove for Vite/CRA", "", "import { useEffect } from 'react';", "import '@runtypelabs/persona/widget.css';", "import { initAgentWidget, markdownPostprocessor } from '@runtypelabs/persona';", "import type { AgentWidgetInitHandle } from '@runtypelabs/persona';", "", "export function ChatWidget() {", "  useEffect(() => {", "    let handle: AgentWidgetInitHandle | null = null;", "", "    handle = initAgentWidget({", `      target: '${c(i)}',`, "      config: {"];
   return e.apiUrl && t.push(`        apiUrl: "${e.apiUrl}",`), e.clientToken && t.push(`        clientToken: "${e.clientToken}",`), e.agentId && t.push(`        agentId: "${e.agentId}",`), e.target && t.push(`        target: "${e.target}",`), e.flowId && t.push(`        flowId: "${e.flowId}",`), a && t.push(`        parserType: "${s}",`), e.theme && typeof e.theme == "object" && Object.keys(e.theme).length > 0 && d(t, "theme", e.theme, "        "), e.launcher && d(t, "launcher", e.launcher, "        "), e.copy && (t.push("        copy: {"), Object.entries(e.copy).forEach(([n, o]) => {
     t.push(`          ${n}: "${o}",`);
@@ -70102,12 +70679,12 @@ function W(e, i) {
     typeof o == "string" ? t.push(`          ${n}: "${o}",`) : typeof o == "boolean" && t.push(`          ${n}: ${o},`);
   }), t.push("        },")), e.features && (t.push("        features: {"), Object.entries(e.features).forEach(([n, o]) => {
     t.push(`          ${n}: ${o},`);
-  }), t.push("        },")), e.suggestionChips && e.suggestionChips.length > 0 && (t.push("        suggestionChips: ["), e.suggestionChips.forEach((n) => {
+  }), t.push("        },")), t.push(...y(e, "        ")), e.suggestionChips && e.suggestionChips.length > 0 && (t.push("        suggestionChips: ["), e.suggestionChips.forEach((n) => {
     t.push(`          "${n}",`);
-  }), t.push("        ],")), e.suggestionChipsConfig && (t.push("        suggestionChipsConfig: {"), e.suggestionChipsConfig.fontFamily && t.push(`          fontFamily: "${e.suggestionChipsConfig.fontFamily}",`), e.suggestionChipsConfig.fontWeight && t.push(`          fontWeight: "${e.suggestionChipsConfig.fontWeight}",`), e.suggestionChipsConfig.paddingX && t.push(`          paddingX: "${e.suggestionChipsConfig.paddingX}",`), e.suggestionChipsConfig.paddingY && t.push(`          paddingY: "${e.suggestionChipsConfig.paddingY}",`), t.push("        },")), t.push(...g(e, "        ")), t.push(...m(e, "        ", r)), t.push(...f(e, "        ")), t.push(...y(e, "        ")), t.push(...$(r, "        ")), e.debug && t.push(`        debug: ${e.debug},`), r?.postprocessMessage ? t.push(`        postprocessMessage: ${r.postprocessMessage}`) : t.push("        postprocessMessage: ({ text }) => markdownPostprocessor(text)"), t.push("      }"), t.push("    });"), t.push(""), t.push("    // Cleanup on unmount"), t.push("    return () => {"), t.push("      if (handle) {"), t.push("        handle.destroy();"), t.push("      }"), t.push("    };"), t.push("  }, []);"), t.push(""), t.push("  return null; // Widget injects itself into the DOM"), t.push("}"), t.push(""), t.push("// Usage in your app:"), t.push("// import { ChatWidget } from './components/ChatWidget';"), t.push("//"), t.push("// export default function App() {"), t.push("//   return ("), t.push("//     <div>"), t.push("//       {/* Your app content */}"), t.push("//       <ChatWidget />"), t.push("//     </div>"), t.push("//   );"), t.push("// }"), t.join(`
+  }), t.push("        ],")), e.suggestionChipsConfig && (t.push("        suggestionChipsConfig: {"), e.suggestionChipsConfig.fontFamily && t.push(`          fontFamily: "${e.suggestionChipsConfig.fontFamily}",`), e.suggestionChipsConfig.fontWeight && t.push(`          fontWeight: "${e.suggestionChipsConfig.fontWeight}",`), e.suggestionChipsConfig.paddingX && t.push(`          paddingX: "${e.suggestionChipsConfig.paddingX}",`), e.suggestionChipsConfig.paddingY && t.push(`          paddingY: "${e.suggestionChipsConfig.paddingY}",`), t.push("        },")), t.push(...g(e, "        ")), t.push(...m(e, "        ", r)), t.push(...f(e, "        ")), t.push(...C(e, "        ")), t.push(...w(r, "        ")), e.debug && t.push(`        debug: ${e.debug},`), r?.postprocessMessage ? t.push(`        postprocessMessage: ${r.postprocessMessage}`) : t.push("        postprocessMessage: ({ text }) => markdownPostprocessor(text)"), t.push("      }"), t.push("    });"), t.push(""), t.push("    // Cleanup on unmount"), t.push("    return () => {"), t.push("      if (handle) {"), t.push("        handle.destroy();"), t.push("      }"), t.push("    };"), t.push("  }, []);"), t.push(""), t.push("  return null; // Widget injects itself into the DOM"), t.push("}"), t.push(""), t.push("// Usage in your app:"), t.push("// import { ChatWidget } from './components/ChatWidget';"), t.push("//"), t.push("// export default function App() {"), t.push("//   return ("), t.push("//     <div>"), t.push("//       {/* Your app content */}"), t.push("//       <ChatWidget />"), t.push("//     </div>"), t.push("//   );"), t.push("// }"), t.join(`
 `);
 }
-function H(e, i) {
+function N(e, i) {
   let r = i?.hooks, s = ["// ChatWidgetAdvanced.tsx", "'use client'; // Required for Next.js - remove for Vite/CRA", "", "import { useEffect } from 'react';", "import '@runtypelabs/persona/widget.css';", "import {", "  initAgentWidget,", "  createFlexibleJsonStreamParser,", "  defaultJsonActionParser,", "  defaultActionHandlers,", "  markdownPostprocessor", "} from '@runtypelabs/persona';", "import type { AgentWidgetInitHandle } from '@runtypelabs/persona';", "", "const STORAGE_KEY = 'chat-widget-state';", "const PROCESSED_ACTIONS_KEY = 'chat-widget-processed-actions';", "", "// Types for DOM elements", "interface PageElement {", "  type: string;", "  tagName: string;", "  selector: string;", "  innerText: string;", "  href?: string;", "}", "", "interface DOMContext {", "  page_elements: PageElement[];", "  page_element_count: number;", "  element_types: Record<string, number>;", "  page_url: string;", "  page_title: string;", "  timestamp: string;", "}", "", "// DOM context provider - extracts page elements for AI context", "const collectDOMContext = (): DOMContext => {", "  const selectors = {", `    products: '[data-product-id], .product-card, .product-item, [role="article"]',`, `    buttons: 'button, [role="button"], .btn',`, "    links: 'a[href]',", "    inputs: 'input, textarea, select'", "  };", "", "  const elements: PageElement[] = [];", "  Object.entries(selectors).forEach(([type, selector]) => {", "    document.querySelectorAll(selector).forEach((element) => {", "      if (!(element instanceof HTMLElement)) return;", "      ", "      // Exclude elements within the widget", "      const widgetHost = element.closest('.persona-host');", "      if (widgetHost) return;", "      ", "      const text = element.innerText?.trim();", "      if (!text) return;", "", "      const selectorString =", "        element.id ? `#${element.id}` :", "        element.getAttribute('data-testid') ? `[data-testid=\"${element.getAttribute('data-testid')}\"]` :", "        element.getAttribute('data-product-id') ? `[data-product-id=\"${element.getAttribute('data-product-id')}\"]` :", "        element.tagName.toLowerCase();", "", "      const elementData: PageElement = {", "        type,", "        tagName: element.tagName.toLowerCase(),", "        selector: selectorString,", "        innerText: text.substring(0, 200)", "      };", "", "      if (type === 'links' && element instanceof HTMLAnchorElement && element.href) {", "        elementData.href = element.href;", "      }", "", "      elements.push(elementData);", "    });", "  });", "", "  const counts = elements.reduce((acc, el) => {", "    acc[el.type] = (acc[el.type] || 0) + 1;", "    return acc;", "  }, {} as Record<string, number>);", "", "  return {", "    page_elements: elements.slice(0, 50),", "    page_element_count: elements.length,", "    element_types: counts,", "    page_url: window.location.href,", "    page_title: document.title,", "    timestamp: new Date().toISOString()", "  };", "};", "", "export function ChatWidgetAdvanced() {", "  useEffect(() => {", "    let handle: AgentWidgetInitHandle | null = null;", "", "    // Load saved state", "    const loadSavedMessages = () => {", "      const savedState = localStorage.getItem(STORAGE_KEY);", "      if (savedState) {", "        try {", "          const { messages } = JSON.parse(savedState);", "          return messages || [];", "        } catch (e) {", "          console.error('Failed to load saved state:', e);", "        }", "      }", "      return [];", "    };", "", "    handle = initAgentWidget({", `      target: '${c(i)}',`, "      config: {"];
   return e.apiUrl && s.push(`        apiUrl: "${e.apiUrl}",`), e.clientToken && s.push(`        clientToken: "${e.clientToken}",`), e.agentId && s.push(`        agentId: "${e.agentId}",`), e.target && s.push(`        target: "${e.target}",`), e.flowId && s.push(`        flowId: "${e.flowId}",`), e.theme && typeof e.theme == "object" && Object.keys(e.theme).length > 0 && d(s, "theme", e.theme, "        "), e.launcher && d(s, "launcher", e.launcher, "        "), e.copy && (s.push("        copy: {"), Object.entries(e.copy).forEach(([a, t]) => {
     s.push(`          ${a}: "${t}",`);
@@ -70119,14 +70696,14 @@ function H(e, i) {
     typeof t == "string" ? s.push(`          ${a}: "${t}",`) : typeof t == "boolean" && s.push(`          ${a}: ${t},`);
   }), s.push("        },")), e.features && (s.push("        features: {"), Object.entries(e.features).forEach(([a, t]) => {
     s.push(`          ${a}: ${t},`);
-  }), s.push("        },")), e.suggestionChips && e.suggestionChips.length > 0 && (s.push("        suggestionChips: ["), e.suggestionChips.forEach((a) => {
+  }), s.push("        },")), s.push(...y(e, "        ")), e.suggestionChips && e.suggestionChips.length > 0 && (s.push("        suggestionChips: ["), e.suggestionChips.forEach((a) => {
     s.push(`          "${a}",`);
-  }), s.push("        ],")), e.suggestionChipsConfig && (s.push("        suggestionChipsConfig: {"), e.suggestionChipsConfig.fontFamily && s.push(`          fontFamily: "${e.suggestionChipsConfig.fontFamily}",`), e.suggestionChipsConfig.fontWeight && s.push(`          fontWeight: "${e.suggestionChipsConfig.fontWeight}",`), e.suggestionChipsConfig.paddingX && s.push(`          paddingX: "${e.suggestionChipsConfig.paddingX}",`), e.suggestionChipsConfig.paddingY && s.push(`          paddingY: "${e.suggestionChipsConfig.paddingY}",`), s.push("        },")), s.push(...g(e, "        ")), s.push(...m(e, "        ", r)), s.push(...f(e, "        ")), s.push(...y(e, "        ")), r?.getHeaders && s.push(`        getHeaders: ${r.getHeaders},`), r?.contextProviders && s.push(`        contextProviders: ${r.contextProviders},`), e.debug && s.push(`        debug: ${e.debug},`), s.push("        initialMessages: loadSavedMessages(),"), r?.streamParser ? s.push(`        streamParser: ${r.streamParser},`) : (s.push("        // Flexible JSON stream parser for handling structured actions"), s.push(`        streamParser: () => createFlexibleJsonStreamParser(${v}),`)), r?.actionParsers ? (s.push("        // Action parsers (custom merged with defaults)"), s.push(`        actionParsers: [...(${r.actionParsers}), defaultJsonActionParser,`), s.push("          // Built-in parser for markdown-wrapped JSON"), s.push(`          ${x}`), s.push("        ],")) : (s.push("        // Action parsers to detect JSON actions in responses"), s.push("        actionParsers: ["), s.push("          defaultJsonActionParser,"), s.push("          // Parser for markdown-wrapped JSON"), s.push(`          ${x}`), s.push("        ],")), r?.actionHandlers ? (s.push("        // Action handlers (custom merged with defaults)"), s.push(`        actionHandlers: [...(${r.actionHandlers}),`), s.push("          defaultActionHandlers.message,"), s.push("          defaultActionHandlers.messageAndClick,"), s.push("          // Built-in handler for nav_then_click action"), s.push(`          ${j}`), s.push("        ],")) : (s.push("        // Action handlers for navigation and other actions"), s.push("        actionHandlers: ["), s.push("          defaultActionHandlers.message,"), s.push("          defaultActionHandlers.messageAndClick,"), s.push("          // Handler for nav_then_click action"), s.push(`          ${j}`), s.push("        ],")), r?.postprocessMessage ? s.push(`        postprocessMessage: ${r.postprocessMessage},`) : s.push("        postprocessMessage: ({ text }) => markdownPostprocessor(text),"), r?.requestMiddleware ? (s.push("        // Request middleware (custom merged with DOM context)"), s.push("        requestMiddleware: ({ payload, config }) => {"), s.push(`          const customResult = (${r.requestMiddleware})({ payload, config });`), s.push("          const merged = customResult || payload;"), s.push("          return {"), s.push("            ...merged,"), s.push("            metadata: { ...merged.metadata, ...collectDOMContext() }"), s.push("          };"), s.push("        }")) : (s.push("        requestMiddleware: ({ payload }) => {"), s.push("          return {"), s.push("            ...payload,"), s.push("            metadata: collectDOMContext()"), s.push("          };"), s.push("        }")), s.push("      }"), s.push("    });"), s.push(""), s.push("    // Save state on message events"), s.push("    const handleMessage = () => {"), s.push("      const session = handle?.getSession?.();"), s.push("      if (session) {"), s.push("        localStorage.setItem(STORAGE_KEY, JSON.stringify({"), s.push("          messages: session.messages,"), s.push("          timestamp: new Date().toISOString()"), s.push("        }));"), s.push("      }"), s.push("    };"), s.push(""), s.push("    // Clear state on clear chat"), s.push("    const handleClearChat = () => {"), s.push("      localStorage.removeItem(STORAGE_KEY);"), s.push("      localStorage.removeItem(PROCESSED_ACTIONS_KEY);"), s.push("    };"), s.push(""), s.push("    window.addEventListener('persona:message', handleMessage);"), s.push("    window.addEventListener('persona:clear-chat', handleClearChat);"), s.push(""), s.push("    // Cleanup on unmount"), s.push("    return () => {"), s.push("      window.removeEventListener('persona:message', handleMessage);"), s.push("      window.removeEventListener('persona:clear-chat', handleClearChat);"), s.push("      if (handle) {"), s.push("        handle.destroy();"), s.push("      }"), s.push("    };"), s.push("  }, []);"), s.push(""), s.push("  return null; // Widget injects itself into the DOM"), s.push("}"), s.push(""), s.push("// Usage: Collects DOM context for AI-powered navigation"), s.push("// Features:"), s.push("// - Extracts page elements (products, buttons, links)"), s.push("// - Persists chat history across page loads"), s.push("// - Handles navigation actions (nav_then_click)"), s.push("// - Processes structured JSON actions from AI"), s.push("//"), s.push("// Example usage in Next.js:"), s.push("// import { ChatWidgetAdvanced } from './components/ChatWidgetAdvanced';"), s.push("//"), s.push("// export default function RootLayout({ children }) {"), s.push("//   return ("), s.push('//     <html lang="en">'), s.push("//       <body>"), s.push("//         {children}"), s.push("//         <ChatWidgetAdvanced />"), s.push("//       </body>"), s.push("//     </html>"), s.push("//   );"), s.push("// }"), s.join(`
+  }), s.push("        ],")), e.suggestionChipsConfig && (s.push("        suggestionChipsConfig: {"), e.suggestionChipsConfig.fontFamily && s.push(`          fontFamily: "${e.suggestionChipsConfig.fontFamily}",`), e.suggestionChipsConfig.fontWeight && s.push(`          fontWeight: "${e.suggestionChipsConfig.fontWeight}",`), e.suggestionChipsConfig.paddingX && s.push(`          paddingX: "${e.suggestionChipsConfig.paddingX}",`), e.suggestionChipsConfig.paddingY && s.push(`          paddingY: "${e.suggestionChipsConfig.paddingY}",`), s.push("        },")), s.push(...g(e, "        ")), s.push(...m(e, "        ", r)), s.push(...f(e, "        ")), s.push(...C(e, "        ")), r?.getHeaders && s.push(`        getHeaders: ${r.getHeaders},`), r?.contextProviders && s.push(`        contextProviders: ${r.contextProviders},`), e.debug && s.push(`        debug: ${e.debug},`), s.push("        initialMessages: loadSavedMessages(),"), r?.streamParser ? s.push(`        streamParser: ${r.streamParser},`) : (s.push("        // Flexible JSON stream parser for handling structured actions"), s.push(`        streamParser: () => createFlexibleJsonStreamParser(${_}),`)), r?.actionParsers ? (s.push("        // Action parsers (custom merged with defaults)"), s.push(`        actionParsers: [...(${r.actionParsers}), defaultJsonActionParser,`), s.push("          // Built-in parser for markdown-wrapped JSON"), s.push(`          ${A}`), s.push("        ],")) : (s.push("        // Action parsers to detect JSON actions in responses"), s.push("        actionParsers: ["), s.push("          defaultJsonActionParser,"), s.push("          // Parser for markdown-wrapped JSON"), s.push(`          ${A}`), s.push("        ],")), r?.actionHandlers ? (s.push("        // Action handlers (custom merged with defaults)"), s.push(`        actionHandlers: [...(${r.actionHandlers}),`), s.push("          defaultActionHandlers.message,"), s.push("          defaultActionHandlers.messageAndClick,"), s.push("          // Built-in handler for nav_then_click action"), s.push(`          ${O}`), s.push("        ],")) : (s.push("        // Action handlers for navigation and other actions"), s.push("        actionHandlers: ["), s.push("          defaultActionHandlers.message,"), s.push("          defaultActionHandlers.messageAndClick,"), s.push("          // Handler for nav_then_click action"), s.push(`          ${O}`), s.push("        ],")), r?.postprocessMessage ? s.push(`        postprocessMessage: ${r.postprocessMessage},`) : s.push("        postprocessMessage: ({ text }) => markdownPostprocessor(text),"), r?.requestMiddleware ? (s.push("        // Request middleware (custom merged with DOM context)"), s.push("        requestMiddleware: ({ payload, config }) => {"), s.push(`          const customResult = (${r.requestMiddleware})({ payload, config });`), s.push("          const merged = customResult || payload;"), s.push("          return {"), s.push("            ...merged,"), s.push("            metadata: { ...merged.metadata, ...collectDOMContext() }"), s.push("          };"), s.push("        }")) : (s.push("        requestMiddleware: ({ payload }) => {"), s.push("          return {"), s.push("            ...payload,"), s.push("            metadata: collectDOMContext()"), s.push("          };"), s.push("        }")), s.push("      }"), s.push("    });"), s.push(""), s.push("    // Save state on message events"), s.push("    const handleMessage = () => {"), s.push("      const session = handle?.getSession?.();"), s.push("      if (session) {"), s.push("        localStorage.setItem(STORAGE_KEY, JSON.stringify({"), s.push("          messages: session.messages,"), s.push("          timestamp: new Date().toISOString()"), s.push("        }));"), s.push("      }"), s.push("    };"), s.push(""), s.push("    // Clear state on clear chat"), s.push("    const handleClearChat = () => {"), s.push("      localStorage.removeItem(STORAGE_KEY);"), s.push("      localStorage.removeItem(PROCESSED_ACTIONS_KEY);"), s.push("    };"), s.push(""), s.push("    window.addEventListener('persona:message', handleMessage);"), s.push("    window.addEventListener('persona:clear-chat', handleClearChat);"), s.push(""), s.push("    // Cleanup on unmount"), s.push("    return () => {"), s.push("      window.removeEventListener('persona:message', handleMessage);"), s.push("      window.removeEventListener('persona:clear-chat', handleClearChat);"), s.push("      if (handle) {"), s.push("        handle.destroy();"), s.push("      }"), s.push("    };"), s.push("  }, []);"), s.push(""), s.push("  return null; // Widget injects itself into the DOM"), s.push("}"), s.push(""), s.push("// Usage: Collects DOM context for AI-powered navigation"), s.push("// Features:"), s.push("// - Extracts page elements (products, buttons, links)"), s.push("// - Persists chat history across page loads"), s.push("// - Handles navigation actions (nav_then_click)"), s.push("// - Processes structured JSON actions from AI"), s.push("//"), s.push("// Example usage in Next.js:"), s.push("// import { ChatWidgetAdvanced } from './components/ChatWidgetAdvanced';"), s.push("//"), s.push("// export default function RootLayout({ children }) {"), s.push("//   return ("), s.push('//     <html lang="en">'), s.push("//       <body>"), s.push("//         {children}"), s.push("//         <ChatWidgetAdvanced />"), s.push("//       </body>"), s.push("//     </html>"), s.push("//   );"), s.push("// }"), s.join(`
 `);
 }
-function k(e) {
+function P(e) {
   let i = h(e), r = i !== "plain", s = {};
-  if (e.apiUrl && (s.apiUrl = e.apiUrl), e.clientToken && (s.clientToken = e.clientToken), e.agentId && (s.agentId = e.agentId), e.target && (s.target = e.target), e.flowId && (s.flowId = e.flowId), r && (s.parserType = i), e.theme && (s.theme = e.theme), e.launcher && (s.launcher = e.launcher), e.copy && (s.copy = e.copy), e.sendButton && (s.sendButton = e.sendButton), e.voiceRecognition && (s.voiceRecognition = e.voiceRecognition), e.statusIndicator && (s.statusIndicator = e.statusIndicator), e.features && (s.features = e.features), e.suggestionChips?.length > 0 && (s.suggestionChips = e.suggestionChips), e.suggestionChipsConfig && (s.suggestionChipsConfig = e.suggestionChipsConfig), e.debug && (s.debug = e.debug), e.toolCall) {
+  if (e.apiUrl && (s.apiUrl = e.apiUrl), e.clientToken && (s.clientToken = e.clientToken), e.agentId && (s.agentId = e.agentId), e.target && (s.target = e.target), e.flowId && (s.flowId = e.flowId), r && (s.parserType = i), e.theme && (s.theme = e.theme), e.launcher && (s.launcher = e.launcher), e.copy && (s.copy = e.copy), e.sendButton && (s.sendButton = e.sendButton), e.voiceRecognition && (s.voiceRecognition = e.voiceRecognition), e.statusIndicator && (s.statusIndicator = e.statusIndicator), e.features && (s.features = e.features), e.suggestions && (s.suggestions = e.suggestions), e.suggestionChips?.length > 0 && (s.suggestionChips = e.suggestionChips), e.suggestionChipsConfig && (s.suggestionChipsConfig = e.suggestionChipsConfig), e.debug && (s.debug = e.debug), e.toolCall) {
     let a = {};
     Object.entries(e.toolCall).forEach(([t, n]) => {
       typeof n == "string" && (a[t] = n);
@@ -70156,8 +70733,8 @@ function k(e) {
         if (n !== "renderUserMessage" && n !== "renderAssistantMessage") if (n === "avatar" && typeof o == "object" && o !== null) t.avatar = o;
         else if (n === "timestamp" && typeof o == "object" && o !== null) {
           let p = {};
-          Object.entries(o).forEach(([l, C]) => {
-            l !== "format" && (typeof C == "string" || typeof C == "boolean") && (p[l] = C);
+          Object.entries(o).forEach(([l, b]) => {
+            l !== "format" && (typeof b == "string" || typeof b == "boolean") && (p[l] = b);
           }), Object.keys(p).length > 0 && (t.timestamp = p);
         } else (typeof o == "string" || typeof o == "boolean") && (t[n] = o);
       }), Object.keys(t).length > 0 && (a.messages = t);
@@ -70166,12 +70743,12 @@ function k(e) {
   }
   return s;
 }
-function N(e, i) {
-  let r = k(e), a = !!(i?.windowKey || i?.target) ? { config: r, ...i?.windowKey ? { windowKey: i.windowKey } : {}, ...i?.target ? { target: i.target } : {} } : r, t = JSON.stringify(a, null, 0).replace(/'/g, "&#39;");
-  return `<script src="${b(i)}/install.global.js" data-config='${t}'></script>`;
-}
 function D(e, i) {
-  let r = i?.hooks, s = h(e), a = s !== "plain", t = b(i), n = ["<!-- Load CSS -->", `<link rel="stylesheet" href="${t}/widget.css" />`, "", "<!-- Load JavaScript -->", `<script src="${t}/index.global.js"></script>`, "", "<!-- Initialize widget -->", "<script>", "  var handle = window.AgentWidget.initAgentWidget({", `    target: '${c(i)}',`, ...i?.windowKey ? [`    windowKey: '${i.windowKey}',`] : [], "    config: {"];
+  let r = P(e), a = !!(i?.windowKey || i?.target) ? { config: r, ...i?.windowKey ? { windowKey: i.windowKey } : {}, ...i?.target ? { target: i.target } : {} } : r, t = JSON.stringify(a, null, 0).replace(/'/g, "&#39;");
+  return `<script src="${$(i)}/install.global.js" data-config='${t}'></script>`;
+}
+function J(e, i) {
+  let r = i?.hooks, s = h(e), a = s !== "plain", t = $(i), n = ["<!-- Load CSS -->", `<link rel="stylesheet" href="${t}/widget.css" />`, "", "<!-- Load JavaScript -->", `<script src="${t}/index.global.js"></script>`, "", "<!-- Initialize widget -->", "<script>", "  var handle = window.AgentWidget.initAgentWidget({", `    target: '${c(i)}',`, ...i?.windowKey ? [`    windowKey: '${i.windowKey}',`] : [], "    config: {"];
   return e.apiUrl && n.push(`      apiUrl: "${e.apiUrl}",`), e.clientToken && n.push(`      clientToken: "${e.clientToken}",`), e.agentId && n.push(`      agentId: "${e.agentId}",`), e.target && n.push(`      target: "${e.target}",`), e.flowId && n.push(`      flowId: "${e.flowId}",`), a && n.push(`      parserType: "${s}",`), e.theme && typeof e.theme == "object" && Object.keys(e.theme).length > 0 && d(n, "theme", e.theme, "      "), e.launcher && d(n, "launcher", e.launcher, "      "), e.copy && (n.push("      copy: {"), Object.entries(e.copy).forEach(([o, p]) => {
     n.push(`        ${o}: "${p}",`);
   }), n.push("      },")), e.sendButton && (n.push("      sendButton: {"), Object.entries(e.sendButton).forEach(([o, p]) => {
@@ -70182,16 +70759,16 @@ function D(e, i) {
     typeof p == "string" ? n.push(`        ${o}: "${p}",`) : typeof p == "boolean" && n.push(`        ${o}: ${p},`);
   }), n.push("      },")), e.features && (n.push("      features: {"), Object.entries(e.features).forEach(([o, p]) => {
     n.push(`        ${o}: ${p},`);
-  }), n.push("      },")), e.suggestionChips && e.suggestionChips.length > 0 && (n.push("      suggestionChips: ["), e.suggestionChips.forEach((o) => {
+  }), n.push("      },")), n.push(...y(e, "      ")), e.suggestionChips && e.suggestionChips.length > 0 && (n.push("      suggestionChips: ["), e.suggestionChips.forEach((o) => {
     n.push(`        "${o}",`);
-  }), n.push("      ],")), e.suggestionChipsConfig && (n.push("      suggestionChipsConfig: {"), e.suggestionChipsConfig.fontFamily && n.push(`        fontFamily: "${e.suggestionChipsConfig.fontFamily}",`), e.suggestionChipsConfig.fontWeight && n.push(`        fontWeight: "${e.suggestionChipsConfig.fontWeight}",`), e.suggestionChipsConfig.paddingX && n.push(`        paddingX: "${e.suggestionChipsConfig.paddingX}",`), e.suggestionChipsConfig.paddingY && n.push(`        paddingY: "${e.suggestionChipsConfig.paddingY}",`), n.push("      },")), n.push(...g(e, "      ")), n.push(...m(e, "      ", r)), n.push(...f(e, "      ")), n.push(...y(e, "      ")), n.push(...$(r, "      ")), e.debug && n.push(`      debug: ${e.debug},`), r?.postprocessMessage ? n.push(`      postprocessMessage: ${r.postprocessMessage}`) : n.push("      postprocessMessage: ({ text }) => window.AgentWidget.markdownPostprocessor(text)"), n.push("    }"), n.push("  });"), n.push("</script>"), n.join(`
+  }), n.push("      ],")), e.suggestionChipsConfig && (n.push("      suggestionChipsConfig: {"), e.suggestionChipsConfig.fontFamily && n.push(`        fontFamily: "${e.suggestionChipsConfig.fontFamily}",`), e.suggestionChipsConfig.fontWeight && n.push(`        fontWeight: "${e.suggestionChipsConfig.fontWeight}",`), e.suggestionChipsConfig.paddingX && n.push(`        paddingX: "${e.suggestionChipsConfig.paddingX}",`), e.suggestionChipsConfig.paddingY && n.push(`        paddingY: "${e.suggestionChipsConfig.paddingY}",`), n.push("      },")), n.push(...g(e, "      ")), n.push(...m(e, "      ", r)), n.push(...f(e, "      ")), n.push(...C(e, "      ")), n.push(...w(r, "      ")), e.debug && n.push(`      debug: ${e.debug},`), r?.postprocessMessage ? n.push(`      postprocessMessage: ${r.postprocessMessage}`) : n.push("      postprocessMessage: ({ text }) => window.AgentWidget.markdownPostprocessor(text)"), n.push("    }"), n.push("  });"), n.push("</script>"), n.join(`
 `);
 }
 function F(e, i) {
-  let r = i?.hooks, s = k(e), t = ["<script>", "(function() {", "  'use strict';", "", "  // Configuration", `  var CONFIG = ${JSON.stringify(s, null, 2).split(`
+  let r = i?.hooks, s = P(e), t = ["<script>", "(function() {", "  'use strict';", "", "  // Configuration", `  var CONFIG = ${JSON.stringify(s, null, 2).split(`
 `).map((n, o) => o === 0 ? n : "  " + n).join(`
-`)};`, "", "  // Constants", `  var CDN_BASE = '${b(i)}';`, "  var STORAGE_KEY = 'chat-widget-state';", "  var PROCESSED_ACTIONS_KEY = 'chat-widget-processed-actions';", "", "  // DOM context provider - extracts page elements for AI context", "  var domContextProvider = function() {", "    var selectors = {", `      products: '[data-product-id], .product-card, .product-item, [role="article"]',`, `      buttons: 'button, [role="button"], .btn',`, "      links: 'a[href]',", "      inputs: 'input, textarea, select'", "    };", "", "    var elements = [];", "    Object.entries(selectors).forEach(function(entry) {", "      var type = entry[0], selector = entry[1];", "      document.querySelectorAll(selector).forEach(function(element) {", "        if (!(element instanceof HTMLElement)) return;", "        var widgetHost = element.closest('.persona-host');", "        if (widgetHost) return;", "        var text = element.innerText ? element.innerText.trim() : '';", "        if (!text) return;", "", "        var selectorString = element.id ? '#' + element.id :", `          element.getAttribute('data-testid') ? '[data-testid="' + element.getAttribute('data-testid') + '"]' :`, `          element.getAttribute('data-product-id') ? '[data-product-id="' + element.getAttribute('data-product-id') + '"]' :`, "          element.tagName.toLowerCase();", "", "        var elementData = {", "          type: type,", "          tagName: element.tagName.toLowerCase(),", "          selector: selectorString,", "          innerText: text.substring(0, 200)", "        };", "", "        if (type === 'links' && element instanceof HTMLAnchorElement && element.href) {", "          elementData.href = element.href;", "        }", "        elements.push(elementData);", "      });", "    });", "", "    var counts = elements.reduce(function(acc, el) {", "      acc[el.type] = (acc[el.type] || 0) + 1;", "      return acc;", "    }, {});", "", "    return {", "      page_elements: elements.slice(0, 50),", "      page_element_count: elements.length,", "      element_types: counts,", "      page_url: window.location.href,", "      page_title: document.title,", "      timestamp: new Date().toISOString()", "    };", "  };", "", "  // Load CSS dynamically", "  var loadCSS = function() {", "    if (document.querySelector('link[data-persona]')) return;", "    var link = document.createElement('link');", "    link.rel = 'stylesheet';", "    link.href = CDN_BASE + '/widget.css';", "    link.setAttribute('data-persona', 'true');", "    document.head.appendChild(link);", "  };", "", "  // Load JS dynamically", "  var loadJS = function(callback) {", "    if (window.AgentWidget) { callback(); return; }", "    var script = document.createElement('script');", "    script.src = CDN_BASE + '/index.global.js';", "    script.onload = callback;", "    script.onerror = function() { console.error('Failed to load AgentWidget'); };", "    document.head.appendChild(script);", "  };", "", "  // Create widget config with advanced features", "  var createWidgetConfig = function(agentWidget) {", "    var widgetConfig = Object.assign({}, CONFIG);", ""];
-  return r?.getHeaders && (t.push(`    widgetConfig.getHeaders = ${r.getHeaders};`), t.push("")), r?.contextProviders && (t.push(`    widgetConfig.contextProviders = ${r.contextProviders};`), t.push("")), r?.streamParser ? t.push(`    widgetConfig.streamParser = ${r.streamParser};`) : (t.push("    // Flexible JSON stream parser for handling structured actions"), t.push("    widgetConfig.streamParser = function() {"), t.push(`      return agentWidget.createFlexibleJsonStreamParser(${_});`), t.push("    };")), t.push(""), r?.actionParsers ? (t.push("    // Action parsers (custom merged with defaults)"), t.push(`    var customParsers = ${r.actionParsers};`), t.push("    widgetConfig.actionParsers = customParsers.concat(["), t.push("      agentWidget.defaultJsonActionParser,"), t.push(`      ${A}`), t.push("    ]);")) : (t.push("    // Action parsers to detect JSON actions in responses"), t.push("    widgetConfig.actionParsers = ["), t.push("      agentWidget.defaultJsonActionParser,"), t.push(`      ${A}`), t.push("    ];")), t.push(""), r?.actionHandlers ? (t.push("    // Action handlers (custom merged with defaults)"), t.push(`    var customHandlers = ${r.actionHandlers};`), t.push("    widgetConfig.actionHandlers = customHandlers.concat(["), t.push("      agentWidget.defaultActionHandlers.message,"), t.push("      agentWidget.defaultActionHandlers.messageAndClick,"), t.push(`      ${O}`), t.push("    ]);")) : (t.push("    // Action handlers for navigation and other actions"), t.push("    widgetConfig.actionHandlers = ["), t.push("      agentWidget.defaultActionHandlers.message,"), t.push("      agentWidget.defaultActionHandlers.messageAndClick,"), t.push(`      ${O}`), t.push("    ];")), t.push(""), r?.requestMiddleware ? (t.push("    // Request middleware (custom merged with DOM context)"), t.push("    widgetConfig.requestMiddleware = function(ctx) {"), t.push(`      var customResult = (${r.requestMiddleware})(ctx);`), t.push("      var merged = customResult || ctx.payload;"), t.push("      return Object.assign({}, merged, { metadata: Object.assign({}, merged.metadata, domContextProvider()) });"), t.push("    };")) : (t.push("    // Send DOM context with each request"), t.push("    widgetConfig.requestMiddleware = function(ctx) {"), t.push("      return Object.assign({}, ctx.payload, { metadata: domContextProvider() });"), t.push("    };")), t.push(""), r?.postprocessMessage ? t.push(`    widgetConfig.postprocessMessage = ${r.postprocessMessage};`) : (t.push("    // Markdown postprocessor"), t.push("    widgetConfig.postprocessMessage = function(ctx) {"), t.push("      return agentWidget.markdownPostprocessor(ctx.text);"), t.push("    };")), t.push(""), (r?.onFeedback || r?.onCopy) && (t.push("    // Message action callbacks"), t.push("    widgetConfig.messageActions = widgetConfig.messageActions || {};"), r?.onFeedback && t.push(`    widgetConfig.messageActions.onFeedback = ${r.onFeedback};`), r?.onCopy && t.push(`    widgetConfig.messageActions.onCopy = ${r.onCopy};`), t.push("")), t.push("    return widgetConfig;", "  };", "", "  // Initialize widget", "  var init = function() {", "    var agentWidget = window.AgentWidget;", "    if (!agentWidget) {", "      console.error('AgentWidget not loaded');", "      return;", "    }", "", "    var widgetConfig = createWidgetConfig(agentWidget);", "", "    // Load saved state", "    var savedState = localStorage.getItem(STORAGE_KEY);", "    if (savedState) {", "      try {", "        var parsed = JSON.parse(savedState);", "        widgetConfig.initialMessages = parsed.messages || [];", "      } catch (e) {", "        console.error('Failed to load saved state:', e);", "      }", "    }", "", "    // Initialize widget", "    var handle = agentWidget.initAgentWidget({", `      target: '${c(i)}',`, "      useShadowDom: false,", ...i?.windowKey ? [`      windowKey: '${i.windowKey}',`] : [], "      config: widgetConfig", "    });", "", "    // Save state on message events", "    window.addEventListener('persona:message', function() {", "      var session = handle.getSession ? handle.getSession() : null;", "      if (session) {", "        localStorage.setItem(STORAGE_KEY, JSON.stringify({", "          messages: session.messages,", "          timestamp: new Date().toISOString()", "        }));", "      }", "    });", "", "    // Clear state on clear chat", "    window.addEventListener('persona:clear-chat', function() {", "      localStorage.removeItem(STORAGE_KEY);", "      localStorage.removeItem(PROCESSED_ACTIONS_KEY);", "    });", "  };", "", "  // Wait for framework hydration to complete (Next.js, Nuxt, etc.)", "  // This prevents the framework from removing dynamically added CSS during reconciliation", "  var waitForHydration = function(callback) {", "    var executed = false;", "    ", "    var execute = function() {", "      if (executed) return;", "      executed = true;", "      callback();", "    };", "", "    var afterDom = function() {", "      // Strategy 1: Use requestIdleCallback if available (best for detecting idle after hydration)", "      if (typeof requestIdleCallback !== 'undefined') {", "        requestIdleCallback(function() {", "          // Double requestAnimationFrame ensures at least one full paint cycle completed", "          requestAnimationFrame(function() {", "            requestAnimationFrame(execute);", "          });", "        }, { timeout: 3000 }); // Max wait 3 seconds, then proceed anyway", "      } else {", "        // Strategy 2: Fallback for Safari (no requestIdleCallback)", "        // 300ms is typically enough for hydration on most pages", "        setTimeout(execute, 300);", "      }", "    };", "", "    if (document.readyState === 'loading') {", "      document.addEventListener('DOMContentLoaded', afterDom);", "    } else {", "      // DOM already ready, but still wait for potential hydration", "      afterDom();", "    }", "  };", "", "  // Boot sequence: wait for hydration, then load CSS and JS, then initialize", "  // This prevents Next.js/Nuxt/etc. from removing dynamically added CSS during reconciliation", "  waitForHydration(function() {", "    loadCSS();", "    loadJS(function() {", "      init();", "    });", "  });", "})();", "</script>"), t.join(`
+`)};`, "", "  // Constants", `  var CDN_BASE = '${$(i)}';`, "  var STORAGE_KEY = 'chat-widget-state';", "  var PROCESSED_ACTIONS_KEY = 'chat-widget-processed-actions';", "", "  // DOM context provider - extracts page elements for AI context", "  var domContextProvider = function() {", "    var selectors = {", `      products: '[data-product-id], .product-card, .product-item, [role="article"]',`, `      buttons: 'button, [role="button"], .btn',`, "      links: 'a[href]',", "      inputs: 'input, textarea, select'", "    };", "", "    var elements = [];", "    Object.entries(selectors).forEach(function(entry) {", "      var type = entry[0], selector = entry[1];", "      document.querySelectorAll(selector).forEach(function(element) {", "        if (!(element instanceof HTMLElement)) return;", "        var widgetHost = element.closest('.persona-host');", "        if (widgetHost) return;", "        var text = element.innerText ? element.innerText.trim() : '';", "        if (!text) return;", "", "        var selectorString = element.id ? '#' + element.id :", `          element.getAttribute('data-testid') ? '[data-testid="' + element.getAttribute('data-testid') + '"]' :`, `          element.getAttribute('data-product-id') ? '[data-product-id="' + element.getAttribute('data-product-id') + '"]' :`, "          element.tagName.toLowerCase();", "", "        var elementData = {", "          type: type,", "          tagName: element.tagName.toLowerCase(),", "          selector: selectorString,", "          innerText: text.substring(0, 200)", "        };", "", "        if (type === 'links' && element instanceof HTMLAnchorElement && element.href) {", "          elementData.href = element.href;", "        }", "        elements.push(elementData);", "      });", "    });", "", "    var counts = elements.reduce(function(acc, el) {", "      acc[el.type] = (acc[el.type] || 0) + 1;", "      return acc;", "    }, {});", "", "    return {", "      page_elements: elements.slice(0, 50),", "      page_element_count: elements.length,", "      element_types: counts,", "      page_url: window.location.href,", "      page_title: document.title,", "      timestamp: new Date().toISOString()", "    };", "  };", "", "  // Load CSS dynamically", "  var loadCSS = function() {", "    if (document.querySelector('link[data-persona]')) return;", "    var link = document.createElement('link');", "    link.rel = 'stylesheet';", "    link.href = CDN_BASE + '/widget.css';", "    link.setAttribute('data-persona', 'true');", "    document.head.appendChild(link);", "  };", "", "  // Load JS dynamically", "  var loadJS = function(callback) {", "    if (window.AgentWidget) { callback(); return; }", "    var script = document.createElement('script');", "    script.src = CDN_BASE + '/index.global.js';", "    script.onload = callback;", "    script.onerror = function() { console.error('Failed to load AgentWidget'); };", "    document.head.appendChild(script);", "  };", "", "  // Create widget config with advanced features", "  var createWidgetConfig = function(agentWidget) {", "    var widgetConfig = Object.assign({}, CONFIG);", ""];
+  return r?.getHeaders && (t.push(`    widgetConfig.getHeaders = ${r.getHeaders};`), t.push("")), r?.contextProviders && (t.push(`    widgetConfig.contextProviders = ${r.contextProviders};`), t.push("")), r?.streamParser ? t.push(`    widgetConfig.streamParser = ${r.streamParser};`) : (t.push("    // Flexible JSON stream parser for handling structured actions"), t.push("    widgetConfig.streamParser = function() {"), t.push(`      return agentWidget.createFlexibleJsonStreamParser(${T});`), t.push("    };")), t.push(""), r?.actionParsers ? (t.push("    // Action parsers (custom merged with defaults)"), t.push(`    var customParsers = ${r.actionParsers};`), t.push("    widgetConfig.actionParsers = customParsers.concat(["), t.push("      agentWidget.defaultJsonActionParser,"), t.push(`      ${j}`), t.push("    ]);")) : (t.push("    // Action parsers to detect JSON actions in responses"), t.push("    widgetConfig.actionParsers = ["), t.push("      agentWidget.defaultJsonActionParser,"), t.push(`      ${j}`), t.push("    ];")), t.push(""), r?.actionHandlers ? (t.push("    // Action handlers (custom merged with defaults)"), t.push(`    var customHandlers = ${r.actionHandlers};`), t.push("    widgetConfig.actionHandlers = customHandlers.concat(["), t.push("      agentWidget.defaultActionHandlers.message,"), t.push("      agentWidget.defaultActionHandlers.messageAndClick,"), t.push(`      ${E}`), t.push("    ]);")) : (t.push("    // Action handlers for navigation and other actions"), t.push("    widgetConfig.actionHandlers = ["), t.push("      agentWidget.defaultActionHandlers.message,"), t.push("      agentWidget.defaultActionHandlers.messageAndClick,"), t.push(`      ${E}`), t.push("    ];")), t.push(""), r?.requestMiddleware ? (t.push("    // Request middleware (custom merged with DOM context)"), t.push("    widgetConfig.requestMiddleware = function(ctx) {"), t.push(`      var customResult = (${r.requestMiddleware})(ctx);`), t.push("      var merged = customResult || ctx.payload;"), t.push("      return Object.assign({}, merged, { metadata: Object.assign({}, merged.metadata, domContextProvider()) });"), t.push("    };")) : (t.push("    // Send DOM context with each request"), t.push("    widgetConfig.requestMiddleware = function(ctx) {"), t.push("      return Object.assign({}, ctx.payload, { metadata: domContextProvider() });"), t.push("    };")), t.push(""), r?.postprocessMessage ? t.push(`    widgetConfig.postprocessMessage = ${r.postprocessMessage};`) : (t.push("    // Markdown postprocessor"), t.push("    widgetConfig.postprocessMessage = function(ctx) {"), t.push("      return agentWidget.markdownPostprocessor(ctx.text);"), t.push("    };")), t.push(""), (r?.onFeedback || r?.onCopy) && (t.push("    // Message action callbacks"), t.push("    widgetConfig.messageActions = widgetConfig.messageActions || {};"), r?.onFeedback && t.push(`    widgetConfig.messageActions.onFeedback = ${r.onFeedback};`), r?.onCopy && t.push(`    widgetConfig.messageActions.onCopy = ${r.onCopy};`), t.push("")), t.push("    return widgetConfig;", "  };", "", "  // Initialize widget", "  var init = function() {", "    var agentWidget = window.AgentWidget;", "    if (!agentWidget) {", "      console.error('AgentWidget not loaded');", "      return;", "    }", "", "    var widgetConfig = createWidgetConfig(agentWidget);", "", "    // Load saved state", "    var savedState = localStorage.getItem(STORAGE_KEY);", "    if (savedState) {", "      try {", "        var parsed = JSON.parse(savedState);", "        widgetConfig.initialMessages = parsed.messages || [];", "      } catch (e) {", "        console.error('Failed to load saved state:', e);", "      }", "    }", "", "    // Initialize widget", "    var handle = agentWidget.initAgentWidget({", `      target: '${c(i)}',`, "      useShadowDom: false,", ...i?.windowKey ? [`      windowKey: '${i.windowKey}',`] : [], "      config: widgetConfig", "    });", "", "    // Save state on message events", "    window.addEventListener('persona:message', function() {", "      var session = handle.getSession ? handle.getSession() : null;", "      if (session) {", "        localStorage.setItem(STORAGE_KEY, JSON.stringify({", "          messages: session.messages,", "          timestamp: new Date().toISOString()", "        }));", "      }", "    });", "", "    // Clear state on clear chat", "    window.addEventListener('persona:clear-chat', function() {", "      localStorage.removeItem(STORAGE_KEY);", "      localStorage.removeItem(PROCESSED_ACTIONS_KEY);", "    });", "  };", "", "  // Wait for framework hydration to complete (Next.js, Nuxt, etc.)", "  // This prevents the framework from removing dynamically added CSS during reconciliation", "  var waitForHydration = function(callback) {", "    var executed = false;", "    ", "    var execute = function() {", "      if (executed) return;", "      executed = true;", "      callback();", "    };", "", "    var afterDom = function() {", "      // Strategy 1: Use requestIdleCallback if available (best for detecting idle after hydration)", "      if (typeof requestIdleCallback !== 'undefined') {", "        requestIdleCallback(function() {", "          // Double requestAnimationFrame ensures at least one full paint cycle completed", "          requestAnimationFrame(function() {", "            requestAnimationFrame(execute);", "          });", "        }, { timeout: 3000 }); // Max wait 3 seconds, then proceed anyway", "      } else {", "        // Strategy 2: Fallback for Safari (no requestIdleCallback)", "        // 300ms is typically enough for hydration on most pages", "        setTimeout(execute, 300);", "      }", "    };", "", "    if (document.readyState === 'loading') {", "      document.addEventListener('DOMContentLoaded', afterDom);", "    } else {", "      // DOM already ready, but still wait for potential hydration", "      afterDom();", "    }", "  };", "", "  // Boot sequence: wait for hydration, then load CSS and JS, then initialize", "  // This prevents Next.js/Nuxt/etc. from removing dynamically added CSS during reconciliation", "  waitForHydration(function() {", "    loadCSS();", "    loadJS(function() {", "      init();", "    });", "  });", "})();", "</script>"), t.join(`
 `);
 }
 
@@ -70231,14 +70808,14 @@ function buildWidgetConfig(input) {
 function generatePersonaInitSnippet(input, personaFormat) {
   const widgetConfig = buildWidgetConfig(input);
   const target = input.targetSelector?.trim();
-  return M(
+  return R(
     widgetConfig,
     personaFormat,
     target ? { target } : void 0
   );
 }
 function getPersonaInstallerScriptUrl() {
-  const snippet = M(
+  const snippet = R(
     {
       apiUrl: "https://api.runtype.com",
       clientToken: "ct_test_demo_00000000000000000000000000000000",
@@ -70292,7 +70869,10 @@ async function getPersonaInitApiKeyNonInteractive(apiUrl) {
       if (isValid) {
         return envApiKey;
       }
-    } catch {
+    } catch (error51) {
+      if (error51 instanceof ApiKeyValidationUnavailableError) {
+        console.error(error51.message);
+      }
     }
   }
   const store = new CredentialStore();
@@ -70417,7 +70997,7 @@ async function runPersonaInit(options) {
 // src/lib/persona-demo.ts
 import { createServer } from "http";
 import { createServer as createNetServer } from "net";
-import { existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync17, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync17, writeFileSync as writeFileSync7 } from "fs";
 import path16 from "path";
 var PERSONA_DEMO_DEFAULT_DIR = "persona-demo";
 var PERSONA_DEMO_DEFAULT_PORT = 43110;
@@ -70453,7 +71033,7 @@ function ensurePersonaDemoCanWrite(directory, force) {
 }
 function writePersonaDemoPage(options) {
   ensurePersonaDemoCanWrite(options.directory, options.force);
-  mkdirSync9(options.directory, { recursive: true });
+  mkdirSync10(options.directory, { recursive: true });
   const filePath = personaDemoIndexPath(options.directory);
   const readmePath = personaDemoReadmePath(options.directory);
   writeFileSync7(filePath, `${options.html.trim()}
@@ -74299,7 +74879,7 @@ import { Command as Command32 } from "commander";
 import chalk40 from "chalk";
 
 // src/lib/skills-install.ts
-import { mkdirSync as mkdirSync11, readFileSync as readFileSync19, writeFileSync as writeFileSync9 } from "fs";
+import { mkdirSync as mkdirSync12, readFileSync as readFileSync19, writeFileSync as writeFileSync9 } from "fs";
 import path18 from "path";
 import readline4 from "readline";
 import chalk39 from "chalk";
@@ -74323,7 +74903,7 @@ function readSkillsInstallMetadata() {
 }
 function writeSkillsInstallMetadata(metadata) {
   try {
-    mkdirSync11(path18.dirname(metadataPath()), { recursive: true });
+    mkdirSync12(path18.dirname(metadataPath()), { recursive: true });
     writeFileSync9(metadataPath(), JSON.stringify(metadata, null, 2));
   } catch {
   }
@@ -75950,7 +76530,7 @@ import { spawn as spawn2 } from "child_process";
 import {
   closeSync,
   existsSync as existsSync18,
-  mkdirSync as mkdirSync12,
+  mkdirSync as mkdirSync13,
   openSync,
   readFileSync as readFileSync22,
   readdirSync as readdirSync8,
@@ -75961,7 +76541,7 @@ import {
   writeFileSync as writeFileSync10
 } from "fs";
 import { constants as osConstants } from "os";
-import { dirname as dirname10, isAbsolute as isAbsolute4, join as join16, relative as relative8, resolve as resolve12, sep as sep6 } from "path";
+import { dirname as dirname11, isAbsolute as isAbsolute4, join as join16, relative as relative8, resolve as resolve12, sep as sep6 } from "path";
 
 // src/lib/update-check.ts
 import chalk44 from "chalk";
@@ -75988,10 +76568,10 @@ function parseVersion(version2) {
 }
 function compareVersions(left, right) {
   const a = parseVersion(left);
-  const b2 = parseVersion(right);
-  if (!a || !b2) return 0;
+  const b = parseVersion(right);
+  if (!a || !b) return 0;
   for (let index = 0; index < 3; index++) {
-    const diff = a[index] - b2[index];
+    const diff = a[index] - b[index];
     if (diff !== 0) return diff;
   }
   return 0;
@@ -76149,7 +76729,7 @@ function getManagedCliState(homeDir = getRuntypeHomeDir()) {
   }
 }
 function writeManagedCliState(paths, state) {
-  mkdirSync12(paths.root, { recursive: true });
+  mkdirSync13(paths.root, { recursive: true });
   const temporaryPath = `${paths.state}.${process.pid}.${Date.now()}.tmp`;
   try {
     writeFileSync10(temporaryPath, `${JSON.stringify(state, null, 2)}
@@ -76186,12 +76766,12 @@ function isPathInside(parent, child) {
   return relativePath === "" || !relativePath.startsWith("..") && !isAbsolute4(relativePath);
 }
 function isSourceCheckout(entrypoint) {
-  let current = dirname10(entrypoint);
+  let current = dirname11(entrypoint);
   for (let depth = 0; depth < 8; depth += 1) {
     if (existsSync18(join16(current, ".git")) || existsSync18(join16(current, "pnpm-workspace.yaml"))) {
       return true;
     }
-    const parent = dirname10(current);
+    const parent = dirname11(current);
     if (parent === current) break;
     current = parent;
   }
@@ -76203,7 +76783,7 @@ function findProjectRoot(cwd) {
     if (existsSync18(join16(current, "package.json")) || existsSync18(join16(current, "pnpm-workspace.yaml"))) {
       return current;
     }
-    const parent = dirname10(current);
+    const parent = dirname11(current);
     if (parent === current) return void 0;
     current = parent;
   }
@@ -76332,7 +76912,7 @@ var defaultCommandRunner = async (command, args, options = {}) => new Promise((r
   });
 });
 function acquireUpdateLock(paths, now) {
-  mkdirSync12(paths.root, { recursive: true });
+  mkdirSync13(paths.root, { recursive: true });
   const tryAcquire = () => {
     try {
       const descriptor = openSync(paths.lock, "wx", 384);
@@ -76421,10 +77001,10 @@ async function installAndActivateCliVersion(version2, options = {}) {
   const temporaryRoot = join16(paths.versions, `.${version2}-${process.pid}-${now.getTime()}`);
   let installed = false;
   try {
-    mkdirSync12(paths.versions, { recursive: true });
+    mkdirSync13(paths.versions, { recursive: true });
     if (!isHealthyManagedVersion(paths, version2)) {
       rmSync2(temporaryRoot, { force: true, recursive: true });
-      mkdirSync12(temporaryRoot, { recursive: true });
+      mkdirSync13(temporaryRoot, { recursive: true });
       const npmCommand = options.npmCommand ?? (process.platform === "win32" ? "npm.cmd" : "npm");
       const installResult = await commandRunner(
         npmCommand,
@@ -76524,7 +77104,7 @@ function spawnAutoUpdateWorker(version2, context = {}) {
   const entrypoint = context.entrypoint ?? process.argv[1];
   if (!entrypoint || !existsSync18(entrypoint)) return false;
   const paths = getManagedCliPaths();
-  mkdirSync12(paths.root, { recursive: true });
+  mkdirSync13(paths.root, { recursive: true });
   const logDescriptor = openSync(paths.log, "a", 384);
   try {
     const child = spawn2(process.execPath, [entrypoint, INTERNAL_AUTO_UPDATE_ARG, version2], {