@stackbone/cli 0.9.3 → 0.9.4

package/main.js

@@ -7,7 +7,7 @@ import "semver/functions/compare.js";
 import "semver/functions/prerelease.js";
 import "semver/functions/valid.js";
 import { access, appendFile, chmod, constants, copyFile, cp, mkdir, mkdtemp, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
-import { homedir, tmpdir } from "node:os";
+import { homedir, release, tmpdir } from "node:os";
 import path, { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import semver from "semver";
 import pino from "pino";
@@ -132,7 +132,7 @@ var init_organizations = __esmMin((() => {
 		name: z.string().trim().min(1).max(120).optional(),
 		tier: z.literal("free").default("free")
 	});
-})), modelProviderSlotSchema, MODEL_PROVIDER_SLOTS, SLOT_NAMES, modelProviderSourceSchema, isModelProviderValuePresent, firstPresentName, resolveModelProviderSlots, overriddenExportedSlots, MODEL_PROVIDER_OVERRIDE_SECRET, storedOverridesSchema, encodeModelProviderOverrides, decodeModelProviderOverrides, writeModelProviderSlotsToEnv, modelProviderKindSchema, modelProviderGetResponseSchema, modelProviderPutRequestSchema, modelProviderAgentsOutcomeSchema, modelProviderPutResponseSchema, modelProviderFirstRunResponseSchema, modelProviderKeyCheckSchema, modelProviderTestResponseSchema, modelProviderModelTypeSchema, modelProviderModelSchema, canServeText, modelProviderModelsRequestSchema, modelProviderModelsResponseSchema, MODEL_PROVIDER_DEFAULT_ID, MODEL_PROVIDER_ID_PATTERN, modelProviderIdSchema, pickedModelProviderIdSchema, pinModelId, unpinModelId, modelProviderListItemSchema, modelProviderListResponseSchema, providerFields, modelProviderCreateRequestSchema, modelProviderUpdateRequestSchema;
+})), modelProviderSlotSchema, MODEL_PROVIDER_SLOTS, SLOT_NAMES, modelProviderSourceSchema, isModelProviderValuePresent, firstPresentName, resolveModelProviderSlots, overriddenExportedSlots, MODEL_PROVIDER_OVERRIDE_SECRET, storedOverridesSchema, encodeModelProviderOverrides, decodeModelProviderOverrides, writeModelProviderSlotsToEnv, modelProviderKindSchema, modelProviderGetResponseSchema, modelProviderPutRequestSchema, modelProviderAgentsOutcomeSchema, modelProviderPutResponseSchema, modelProviderFirstRunResponseSchema, modelProviderKeyCheckSchema, modelProviderTestResponseSchema, modelProviderModelTypeSchema, modelProviderModelSchema, canServeText, modelProviderModelsRequestSchema, modelProviderModelsResponseSchema, MODEL_PROVIDER_DEFAULT_ID, LIVEKIT_MODEL_PROVIDER_ID, MODEL_PROVIDER_ID_PATTERN, modelProviderIdSchema, pickedModelProviderIdSchema, pinModelId, unpinModelId, modelProviderListItemSchema, modelProviderListResponseSchema, providerFields, modelProviderCreateRequestSchema, modelProviderUpdateRequestSchema;
 var init_studio_model_provider = __esmMin((() => {
 	modelProviderSlotSchema = z.enum(["baseUrl", "apiKey"]);
 	MODEL_PROVIDER_SLOTS = {
@@ -226,7 +226,8 @@ var init_studio_model_provider = __esmMin((() => {
 		"openrouter",
 		"ollama",
 		"lmstudio",
-		"generic"
+		"generic",
+		"livekit"
 	]);
 	modelProviderGetResponseSchema = z.object({
 		configured: z.boolean(),
@@ -301,6 +302,7 @@ var init_studio_model_provider = __esmMin((() => {
 		warning: z.string().optional()
 	});
 	MODEL_PROVIDER_DEFAULT_ID = "default";
+	LIVEKIT_MODEL_PROVIDER_ID = "livekit";
 	MODEL_PROVIDER_ID_PATTERN = /^[a-z][a-z0-9-]{0,30}[a-z0-9]$/;
 	modelProviderIdSchema = z.string().regex(MODEL_PROVIDER_ID_PATTERN, { message: "Lowercase letters, digits and dashes, 2 to 32, starting with a letter." }).refine((id) => id !== MODEL_PROVIDER_DEFAULT_ID, { message: `'${MODEL_PROVIDER_DEFAULT_ID}' is provider 1's id.` });
 	pickedModelProviderIdSchema = z.string().regex(MODEL_PROVIDER_ID_PATTERN);
@@ -323,7 +325,11 @@ var init_studio_model_provider = __esmMin((() => {
 		kind: modelProviderKindSchema,
 		baseUrl: z.string(),
 		apiKey: z.string().nullable(),
-		source: z.enum(["env", "local"]),
+		source: z.enum([
+			"env",
+			"local",
+			"voice"
+		]),
 		removable: z.boolean(),
 		responding: z.boolean().nullable(),
 		error: z.string().optional()
@@ -997,9 +1003,9 @@ function requireCapability$1(capability, contract) {
 		error: null
 	};
 }
-var CAPABILITIES$1, MODULE_CAPABILITIES, contractBuildNameSchema, contractResponseSchema;
+var CAPABILITIES$2, MODULE_CAPABILITIES, contractBuildNameSchema, contractResponseSchema;
 var init_contract$1 = __esmMin((() => {
-	CAPABILITIES$1 = [
+	CAPABILITIES$2 = [
 		"database.postgres_direct",
 		"database.drizzle",
 		"rag.basic",
@@ -1017,7 +1023,7 @@ var init_contract$1 = __esmMin((() => {
 		"insights.basic",
 		"limits.basic"
 	];
-	new Set(CAPABILITIES$1);
+	new Set(CAPABILITIES$2);
 	MODULE_CAPABILITIES = {
 		database: "database.postgres_direct",
 		rag: "rag.basic",
@@ -3045,7 +3051,7 @@ var init_studio_internal_prompts = __esmMin((() => {
 			ownerName: "guardrail-classifier",
 			key: GUIDANCE_KEY,
 			title: "Guardrail classifier",
-			description: "Frames the model a model-backed guardrail asks about a turn (prompt injection, moderation, off-limits subjects). The question, the answer format and the rule that the checked text is data are added after it.",
+			description: "Frames the model a model-backed guardrail asks about a turn (prompt injection, moderation, off-limits subjects). The question, the answer format and the rule that the checked text is data are added after it. On an OpenRouter box the decision model (Jev) decides the incoming message and the reply first and does not read this text; it frames the checking model only, when Jev cannot answer. Put any nuance in the rule's own text.",
 			model: {
 				target: "setting",
 				settingKey: "guardrailModel"
@@ -5693,11 +5699,14 @@ var init_studio_triggers = __esmMin((() => {
 		/** Where the sample event came from (STA3-45 D5): the named link's own first
 		*  event (`link`), the provider's newest event fetched for a link that had none
 		*  (`fetched`), or the trigger's declared sample (`declared`) — which is also the
-		*  answer when that fetch found nothing or failed. */
+		*  answer when that fetch found nothing or failed. `none` is a webhook trigger
+		*  with no event of its own yet (STA3-121): nothing was evaluated, `output` is
+		*  `null` and `issues` empty, so it is no verdict, not a passing one. */
 		sampleSource: z.enum([
 			"link",
 			"fetched",
-			"declared"
+			"declared",
+			"none"
 		]),
 		/** The event fetched from the provider, present only on a `fetched` answer: the
 		*  one evaluated over, even when the link already kept another in the meantime.
@@ -11650,7 +11659,7 @@ var init_tool_call_ids = __esmMin((() => {
 //#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/common/rules.ts
 var withNormalizedToolCalls, withNormalizedToolCallId, normalizeMessage, applyCommonRules;
-var init_rules$4 = __esmMin((() => {
+var init_rules$5 = __esmMin((() => {
 	init_json();
 	init_reasoning();
 	init_tool_call_ids();
@@ -11694,9 +11703,15 @@ var init_rules$4 = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../libs/shared/model-provider-wire/src/lib/common/gateway.ts
+var keepRequest;
+var init_gateway = __esmMin((() => {
+	keepRequest = (body) => body;
+}));
+//#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/common/catalogue.ts
 var UNKNOWN_CAPABILITIES, openAiRoot, nativeRoot, dataEntriesOf, responsesFor, listedEntries, fromCapabilityList;
-var init_catalogue$5 = __esmMin((() => {
+var init_catalogue$6 = __esmMin((() => {
 	init_json();
 	UNKNOWN_CAPABILITIES = {
 		tools: null,
@@ -11815,8 +11830,8 @@ var init_model_type = __esmMin((() => {
 //#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/generic/catalogue.ts
 var LITELLM_MODES, typeOf$2, genericCatalogue;
-var init_catalogue$4 = __esmMin((() => {
-	init_catalogue$5();
+var init_catalogue$5 = __esmMin((() => {
+	init_catalogue$6();
 	init_json();
 	init_model_type();
 	LITELLM_MODES = new Map([
@@ -11851,25 +11866,97 @@ var init_catalogue$4 = __esmMin((() => {
 			return types;
 		},
 		fallbackType: genericFallbackType,
-		refusesUnknownModelId: false
+		refusesUnknownModelId: false,
+		fixedModelIds: null
 	};
 }));
 //#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/generic/rules.ts
 var genericRules;
-var init_rules$3 = __esmMin((() => {
-	init_catalogue$4();
+var init_rules$4 = __esmMin((() => {
+	init_gateway();
+	init_catalogue$5();
 	genericRules = {
 		wantsReasoning: () => false,
 		keepsProviderRouting: false,
+		adaptRequest: keepRequest,
 		catalogue: genericCatalogue
 	};
 }));
 //#endregion
+//#region ../../libs/shared/model-provider-wire/src/lib/livekit/catalogue.ts
+var LIVEKIT_INFERENCE_MODEL_IDS, LISTED, CAPABILITIES$1, TYPES, livekitCatalogue;
+var init_catalogue$4 = __esmMin((() => {
+	LIVEKIT_INFERENCE_MODEL_IDS = [
+		"google/gemma-4-31b-it",
+		"google/gemini-3.1-flash-lite",
+		"google/gemini-3.5-flash",
+		"google/gemini-3-flash",
+		"google/gemini-3.1-pro",
+		"google/gemini-2.5-flash-lite",
+		"google/gemini-2.5-flash",
+		"google/gemini-2.5-pro",
+		"openai/gpt-5.5",
+		"openai/gpt-5.4",
+		"openai/gpt-5.4-mini",
+		"openai/gpt-5.4-nano",
+		"openai/gpt-5.2",
+		"openai/gpt-5.1",
+		"openai/gpt-5",
+		"openai/gpt-5-mini",
+		"openai/gpt-5-nano",
+		"openai/gpt-4.1",
+		"openai/gpt-4.1-mini",
+		"openai/gpt-4.1-nano",
+		"openai/gpt-4o",
+		"openai/gpt-4o-mini",
+		"openai/gpt-oss-120b",
+		"moonshotai/kimi-k2.6",
+		"deepseek-ai/deepseek-v3.2",
+		"zai/glm-5.1",
+		"xai/grok-4.3"
+	];
+	LISTED = {
+		tools: true,
+		reasoning: null
+	};
+	CAPABILITIES$1 = new Map(LIVEKIT_INFERENCE_MODEL_IDS.map((id) => [id, LISTED]));
+	TYPES = new Map(LIVEKIT_INFERENCE_MODEL_IDS.map((id) => [id, "chat"]));
+	livekitCatalogue = {
+		catalogueSources: () => [],
+		capabilities: () => CAPABILITIES$1,
+		types: () => TYPES,
+		fallbackType: () => "chat",
+		refusesUnknownModelId: false,
+		fixedModelIds: LIVEKIT_INFERENCE_MODEL_IDS
+	};
+}));
+//#endregion
+//#region ../../libs/shared/model-provider-wire/src/lib/livekit/rules.ts
+var COMPLETION_TOKENS_PREFIX, withCompletionTokens, livekitRules;
+var init_rules$3 = __esmMin((() => {
+	init_catalogue$4();
+	COMPLETION_TOKENS_PREFIX = "openai/gpt-5";
+	withCompletionTokens = (body, modelId) => {
+		if (!modelId?.startsWith(COMPLETION_TOKENS_PREFIX) || !("max_tokens" in body)) return body;
+		const { max_tokens: maxTokens, ...rest } = body;
+		return "max_completion_tokens" in rest ? rest : {
+			...rest,
+			max_completion_tokens: maxTokens
+		};
+	};
+	livekitRules = {
+		wantsReasoning: () => false,
+		keepsProviderRouting: false,
+		adaptRequest: withCompletionTokens,
+		catalogue: livekitCatalogue
+	};
+}));
+//#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/lmstudio/catalogue.ts
 var capabilitiesOf$2, typeOf$1, describedModels, lmstudioCatalogue;
 var init_catalogue$3 = __esmMin((() => {
-	init_catalogue$5();
+	init_catalogue$6();
 	init_model_type$1();
 	init_json();
 	capabilitiesOf$2 = (entry) => {
@@ -11913,17 +12000,20 @@ var init_catalogue$3 = __esmMin((() => {
 			return types;
 		},
 		fallbackType: deriveModelType,
-		refusesUnknownModelId: true
+		refusesUnknownModelId: true,
+		fixedModelIds: null
 	};
 }));
 //#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/lmstudio/rules.ts
 var lmstudioRules;
 var init_rules$2 = __esmMin((() => {
+	init_gateway();
 	init_catalogue$3();
 	lmstudioRules = {
 		wantsReasoning: () => false,
 		keepsProviderRouting: false,
+		adaptRequest: keepRequest,
 		catalogue: lmstudioCatalogue
 	};
 }));
@@ -11931,7 +12021,7 @@ var init_rules$2 = __esmMin((() => {
 //#region ../../libs/shared/model-provider-wire/src/lib/ollama/catalogue.ts
 var TOOLS_CAPABILITIES, REASONING_CAPABILITIES, CHAT_CAPABILITIES, EMBEDDING_CAPABILITIES, capabilitiesOf$1, typeOf, taggedModels, taggedId, describedCapabilities, ollamaCatalogue;
 var init_catalogue$2 = __esmMin((() => {
-	init_catalogue$5();
+	init_catalogue$6();
 	init_model_type$1();
 	init_json();
 	TOOLS_CAPABILITIES = ["tools"];
@@ -12004,17 +12094,20 @@ var init_catalogue$2 = __esmMin((() => {
 			return types;
 		},
 		fallbackType: deriveModelType,
-		refusesUnknownModelId: false
+		refusesUnknownModelId: false,
+		fixedModelIds: null
 	};
 }));
 //#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/ollama/rules.ts
 var ollamaRules;
 var init_rules$1 = __esmMin((() => {
+	init_gateway();
 	init_catalogue$2();
 	ollamaRules = {
 		wantsReasoning: () => false,
 		keepsProviderRouting: false,
+		adaptRequest: keepRequest,
 		catalogue: ollamaCatalogue
 	};
 }));
@@ -12022,7 +12115,7 @@ var init_rules$1 = __esmMin((() => {
 //#region ../../libs/shared/model-provider-wire/src/lib/openrouter/catalogue.ts
 var TOOLS_PARAMETERS, REASONING_PARAMETERS, capabilitiesOf, openrouterCatalogue;
 var init_catalogue$1 = __esmMin((() => {
-	init_catalogue$5();
+	init_catalogue$6();
 	init_model_type$1();
 	TOOLS_PARAMETERS = ["tools"];
 	REASONING_PARAMETERS = ["reasoning", "include_reasoning"];
@@ -12042,18 +12135,21 @@ var init_catalogue$1 = __esmMin((() => {
 		},
 		types: () => /* @__PURE__ */ new Map(),
 		fallbackType: deriveModelType,
-		refusesUnknownModelId: false
+		refusesUnknownModelId: false,
+		fixedModelIds: null
 	};
 }));
 //#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/openrouter/rules.ts
 var openrouterRules;
 var init_rules = __esmMin((() => {
+	init_gateway();
 	init_reasoning_request();
 	init_catalogue$1();
 	openrouterRules = {
 		wantsReasoning: (modelId) => !replaysSignedReasoning(modelId),
 		keepsProviderRouting: true,
+		adaptRequest: keepRequest,
 		catalogue: openrouterCatalogue
 	};
 }));
@@ -12061,6 +12157,7 @@ var init_rules = __esmMin((() => {
 //#region ../../libs/shared/model-provider-wire/src/lib/gateway-rules.ts
 var BY_KIND, gatewayRulesFor;
 var init_gateway_rules = __esmMin((() => {
+	init_rules$4();
 	init_rules$3();
 	init_rules$2();
 	init_rules$1();
@@ -12069,7 +12166,8 @@ var init_gateway_rules = __esmMin((() => {
 		openrouter: openrouterRules,
 		ollama: ollamaRules,
 		lmstudio: lmstudioRules,
-		generic: genericRules
+		generic: genericRules,
+		livekit: livekitRules
 	};
 	gatewayRulesFor = (kind) => BY_KIND[kind];
 }));
@@ -12080,20 +12178,27 @@ var init_normalize_request = __esmMin((() => {
 	init_json();
 	init_provider_routing();
 	init_reasoning_request();
-	init_rules$4();
+	init_rules$5();
 	init_gateway_rules();
 	normalizeRequest = (body, target) => {
 		if (!isJsonRecord(body)) return body;
 		const common = applyCommonRules(body);
 		const rules = gatewayRulesFor(target.gatewayKind);
-		return withProviderRouting(withReasoningRequest(common, rules.wantsReasoning(target.modelId)), rules.keepsProviderRouting);
+		const routed = withProviderRouting(withReasoningRequest(common, rules.wantsReasoning(target.modelId)), rules.keepsProviderRouting);
+		return rules.adaptRequest(routed, target.modelId);
 	};
-})), OPENROUTER_HOST, gatewayKindForBaseUrl;
+})), OPENROUTER_HOST, LIVEKIT_INFERENCE_BASE_URL, LIVEKIT_INFERENCE_HOST, KIND_BY_HOST, gatewayKindForBaseUrl;
 var init_target = __esmMin((() => {
 	OPENROUTER_HOST = "openrouter.ai";
+	LIVEKIT_INFERENCE_BASE_URL = "https://agent-gateway.livekit.cloud/v1";
+	LIVEKIT_INFERENCE_HOST = "agent-gateway.livekit.cloud";
+	KIND_BY_HOST = {
+		[OPENROUTER_HOST]: "openrouter",
+		[LIVEKIT_INFERENCE_HOST]: "livekit"
+	};
 	gatewayKindForBaseUrl = (baseUrl) => {
 		try {
-			return new URL(baseUrl).hostname.replace(/\.$/, "") === OPENROUTER_HOST ? "openrouter" : "generic";
+			return KIND_BY_HOST[new URL(baseUrl).hostname.replace(/\.$/, "")] ?? "generic";
 		} catch {
 			return "generic";
 		}
@@ -12183,9 +12288,9 @@ var init_catalogue_entry = __esmMin((() => {
 }));
 //#endregion
 //#region ../../libs/shared/model-provider-wire/src/lib/catalogue.ts
-var modelsListSource, commonSources, catalogueSources, parseCatalogue, listedModelIds, checkModelId;
+var modelsListSource, commonSources, catalogueSources, parseCatalogue, fixedCatalogue, listedModelIds, checkModelId;
 var init_catalogue = __esmMin((() => {
-	init_catalogue$5();
+	init_catalogue$6();
 	init_catalogue_entry();
 	init_gateway_rules();
 	modelsListSource = (baseUrl) => ({
@@ -12226,6 +12331,14 @@ var init_catalogue = __esmMin((() => {
 		}
 		return models;
 	};
+	fixedCatalogue = (kind, baseUrl) => {
+		const ids = gatewayRulesFor(kind).catalogue.fixedModelIds;
+		if (ids === null) return null;
+		return parseCatalogue(kind, [{
+			source: modelsListSource(baseUrl),
+			json: { data: ids.map((id) => ({ id })) }
+		}]);
+	};
 	listedModelIds = (json) => dataEntriesOf(json).flatMap((entry) => {
 		const id = entry["id"];
 		return typeof id === "string" ? [id] : [];
@@ -12255,10 +12368,14 @@ var init_src$18 = __esmMin((() => {
 }));
 //#endregion
 //#region ../../libs/sdk/src/surfaces/external/ai/model-call-target.ts
-var MODEL_PROXY_URL_ENV, MODEL_PROXY_TOKEN_ENV, present$2, resolveModelCallTarget, pinModelForCallTarget;
+var STACKBONE_DEFAULT_HEADERS, MODEL_PROXY_URL_ENV, MODEL_PROXY_TOKEN_ENV, present$2, resolveModelCallTarget, pinModelForCallTarget;
 var init_model_call_target = __esmMin((() => {
 	init_src$26();
 	init_src$18();
+	STACKBONE_DEFAULT_HEADERS = {
+		"HTTP-Referer": "https://stackbone.ai",
+		"X-Title": "Stackbone Agent Platform"
+	};
 	MODEL_PROXY_URL_ENV = "STACKBONE_MODEL_PROXY_URL";
 	MODEL_PROXY_TOKEN_ENV = "STACKBONE_MODEL_PROXY_TOKEN";
 	present$2 = (value) => value !== void 0 && value !== "";
@@ -15821,7 +15938,7 @@ function parseRewriteReply(content) {
 	let parsed;
 	try {
 		const raw = (content ?? "").trim();
-		parsed = JSON.parse(JSON_FENCE.exec(raw)?.[1] ?? raw);
+		parsed = JSON.parse(JSON_FENCE$1.exec(raw)?.[1] ?? raw);
 	} catch {
 		return null;
 	}
@@ -15852,12 +15969,12 @@ function interleave(lists, topK) {
 	}
 	return merged;
 }
-var MAX_REWRITE_QUERIES, JSON_FENCE, REPLY_FORMAT, Rewriter;
+var MAX_REWRITE_QUERIES, JSON_FENCE$1, REPLY_FORMAT, Rewriter;
 var init_rewriter = __esmMin((() => {
 	init_src$26();
 	init_result$1();
 	MAX_REWRITE_QUERIES = 3;
-	JSON_FENCE = /^```(?:json)?([\s\S]*)```$/i;
+	JSON_FENCE$1 = /^```(?:json)?([\s\S]*)```$/i;
 	REPLY_FORMAT = `Write at most ${MAX_REWRITE_QUERIES} queries. Reply with JSON only: {"queries": ["...", "..."]}.`;
 	Rewriter = class {
 		constructor(options) {
@@ -17045,7 +17162,7 @@ function mapApiError(raw, model) {
 		cause: raw
 	};
 }
-var AiModule, ChatCompletionsNamespace, EmbeddingsNamespace, ImagesNamespace, ModelsNamespace, RerankNamespace, rerankResponseSchema, STACKBONE_DEFAULT_HEADERS, OPENROUTER_KEY_MISSING_MESSAGE, DATA_URL_RE;
+var AiModule, ChatCompletionsNamespace, EmbeddingsNamespace, ImagesNamespace, ModelsNamespace, RerankNamespace, rerankResponseSchema, OPENROUTER_KEY_MISSING_MESSAGE, DATA_URL_RE;
 var init_ai = __esmMin((() => {
 	init_module_gate();
 	init_result$1();
@@ -17286,10 +17403,6 @@ var init_ai = __esmMin((() => {
 		index: z.number().int().nonnegative(),
 		relevance_score: z.number()
 	})) });
-	STACKBONE_DEFAULT_HEADERS = {
-		"HTTP-Referer": "https://stackbone.ai",
-		"X-Title": "Stackbone Agent Platform"
-	};
 	OPENROUTER_KEY_MISSING_MESSAGE = "No model provider is configured — set `MODEL_PROVIDER_API_KEY` in the container, pass `modelProviderKey` to `createClient({...})`, or configure it from the Studio \"Model provider\" screen.";
 	DATA_URL_RE = /^data:(image\/[a-zA-Z0-9.+-]+);base64,(.*)$/;
 }));
@@ -18457,6 +18570,15 @@ function resolveBrowserbaseKeepAlive() {
 	return !(raw === "0" || raw === "false");
 }
 /**
+* On WSL, `chrome-launcher` rewrites `--user-data-dir` to a Windows UNC path even for the
+* Linux Chromium we pin; that Chromium cannot use it and never opens its debugging port
+* (STA3-109). A Linux `--user-data-dir` in `args` lands after it, and Chromium keeps the
+* last occurrence. Setting `userDataDir` instead does not help: it gets rewritten too.
+*/
+function isWsl() {
+	return release().toLowerCase().includes("microsoft");
+}
+/**
 * Resolve the Chrome/Chromium executable Stagehand's `chrome-launcher` should launch for a
 * LOCAL browser. Precedence: an explicit `STACKBONE_BROWSER_EXECUTABLE_PATH`, else the
 * workspace's Playwright Chromium (`playwright`'s `chromium.executablePath()`). Returns
@@ -18719,28 +18841,44 @@ function createStagehandBrowserFactory(options) {
 		} : void 0;
 		const initialState = options?.loadInitialStorageState ? await options.loadInitialStorageState().catch(() => void 0) : void 0;
 		const hasInitialState = initialState !== void 0 && isNonEmptyStorageState(initialState);
+		const { Stagehand, CustomOpenAIClient } = await importStagehand();
+		if (typeof CustomOpenAIClient !== "function") throw new Error(`browserTools: the installed @browserbasehq/stagehand does not export CustomOpenAIClient, which the browser tools need to reach the model provider. Install ${STAGEHAND_INSTALL_SPEC}.`);
 		const localBrowserLaunchOptions = {};
+		let wslProfileDir;
 		if (!browserbase) {
 			if (cdpUrl) localBrowserLaunchOptions["cdpUrl"] = cdpUrl;
-			if (headed) localBrowserLaunchOptions["headless"] = false;
+			if (!cdpUrl) localBrowserLaunchOptions["headless"] = !headed;
 			if (hasInitialState) localBrowserLaunchOptions["storageState"] = initialState;
 			if (!cdpUrl) {
 				const executablePath = await resolveChromeExecutablePath();
 				if (executablePath) localBrowserLaunchOptions["executablePath"] = executablePath;
-				localBrowserLaunchOptions["args"] = ["--no-sandbox", "--disable-dev-shm-usage"];
+				const args = ["--no-sandbox", "--disable-dev-shm-usage"];
+				if (isWsl()) {
+					wslProfileDir = await mkdtemp(join(tmpdir(), "stackbone-chromium-"));
+					args.push(`--user-data-dir=${wslProfileDir}`);
+				}
+				localBrowserLaunchOptions["args"] = args;
 			}
 		}
-		const model = {
-			modelName: options?.modelName ?? DEFAULT_BROWSER_MODEL,
-			apiKey,
-			baseURL
-		};
-		const { Stagehand } = await importStagehand();
+		const modelName = options?.modelName ?? DEFAULT_BROWSER_MODEL;
+		const llmClient = new CustomOpenAIClient({
+			modelName,
+			client: callWithBrowserModel(new OpenAI({
+				apiKey,
+				baseURL,
+				defaultHeaders: STACKBONE_DEFAULT_HEADERS
+			}))
+		});
+		const removeWslProfileDir = () => wslProfileDir ? rm(wslProfileDir, {
+			recursive: true,
+			force: true
+		}) : Promise.resolve();
 		const stagehand = new Stagehand(browserbase ? {
 			env: "BROWSERBASE",
 			apiKey: browserbase.apiKey,
 			projectId: browserbase.projectId,
-			model,
+			model: modelName,
+			llmClient,
 			browserbaseSessionCreateParams: {
 				projectId: browserbase.projectId,
 				proxies: true,
@@ -18750,16 +18888,28 @@ function createStagehandBrowserFactory(options) {
 			}
 		} : {
 			env: "LOCAL",
-			model,
+			model: modelName,
+			llmClient,
 			...Object.keys(localBrowserLaunchOptions).length > 0 ? { localBrowserLaunchOptions } : {}
 		});
-		await stagehand.init();
+		try {
+			await stagehand.init();
+		} catch (err) {
+			await removeWslProfileDir();
+			throw err;
+		}
 		const pageHandle = stagehand.context.activePage() ?? await stagehand.context.newPage();
 		if (hasInitialState) await injectStorageStateViaCDP(pageHandle, initialState);
 		const liveViewUrl = browserbase ? await resolveBrowserbaseLiveViewUrl(stagehand, browserbase, resolveLiveViewUrl) : void 0;
 		return {
 			page: adaptStagehandPage(stagehand, pageHandle),
-			close: () => stagehand.close(),
+			close: async () => {
+				try {
+					await stagehand.close();
+				} finally {
+					await removeWslProfileDir();
+				}
+			},
 			isLive: async () => {
 				try {
 					return await probeStagehandLive(stagehand.context.activePage() ?? pageHandle);
@@ -18772,6 +18922,43 @@ function createStagehandBrowserFactory(options) {
 	} };
 }
 /**
+* Make `client`'s chat calls carry the model of the browser tool call in flight
+* ({@link withBrowserModel}), keeping the request's own model outside one, and hand back
+* a `json_object` reply in a Markdown code fence as the bare JSON ({@link unfenceJsonReplies}).
+* Patched on the `openai` client because `CustomOpenAIClient` writes its launch
+* `modelName` into every request body and runs a bare `JSON.parse` on the reply.
+*/
+function callWithBrowserModel(client) {
+	const completions = client.chat.completions;
+	const create = completions.create.bind(completions);
+	completions.create = (async (body, options) => {
+		const completion = await create({
+			...body,
+			model: browserModel.getStore() ?? body.model
+		}, options);
+		return body.response_format?.type === "json_object" ? unfenceJsonReplies(completion) : completion;
+	});
+	return client;
+}
+/**
+* Replace each choice's content that is one Markdown code fence with the JSON inside
+* it, in place. OpenRouter does not apply `json_object` to Anthropic models, so
+* `anthropic/claude-haiku-4.5` fences every JSON reply, which Stagehand's `JSON.parse`
+* rejects (STA3-120 D6). Anything else (a stream, a tool call, unfenced text) passes
+* through untouched.
+*/
+function unfenceJsonReplies(completion) {
+	const choices = completion?.choices;
+	if (!Array.isArray(choices)) return completion;
+	for (const choice of choices) {
+		const message = choice?.message;
+		if (typeof message?.content !== "string") continue;
+		const json = JSON_FENCE.exec(message.content.trim())?.[1];
+		if (json !== void 0) message.content = json.trim();
+	}
+	return completion;
+}
+/**
 * Resolve the Browserbase live-view URL for an initialized Stagehand instance
 * (STA-140): read the session id it exposes, then hand it to `resolve` with the
 * account creds. Returns `undefined` when the instance carries no session id — never
@@ -18790,10 +18977,10 @@ async function resolveBrowserbaseLiveViewUrl(stagehand, credentials, resolve) {
 * the page, but the AI operations moved OFF the page onto the instance and now take
 * POSITIONAL args (`act(instruction, opts)`, `extract(instruction, schema, opts)`,
 * `observe(instruction, opts)`). The tools still speak the v2 options-object shape
-* (`act({ action, modelName })`, `extract({ instruction, schema, modelName })`), so
-* this adapter translates — keeping every tool body and its tests untouched across
-* the v2→v3 change. The creator's per-call `modelName` (and any other option) is
-* forwarded verbatim as the trailing options object.
+* (`act({ action })`, `extract({ instruction, schema })`), so this adapter translates —
+* keeping every tool body and its tests untouched across the v2→v3 change. Any other
+* option is forwarded verbatim as the trailing options object. The model is not one of
+* them: it rides the call's async context ({@link withBrowserModel}).
 */
 function adaptStagehandPage(stagehand, initialPage) {
 	const livePage = () => stagehand.context.activePage() ?? initialPage;
@@ -18841,7 +19028,7 @@ function adaptStagehandPage(stagehand, initialPage) {
 		}
 	};
 }
-var MAX_DOWNLOAD_BYTES, DOWNLOAD_STALL_MS, delay, DEFAULT_BROWSER_MODEL, BROWSERBASE_SESSION_TIMEOUT_SECONDS, BROWSERBASE_KEEP_ALIVE_ENV, HEADED_ENV, EXECUTABLE_PATH_ENV, PROBE_RETRY_DELAY_MS, BROWSERBASE_API_BASE$1, defaultResolveLiveViewUrl, defaultImportStagehand, readBrowserProviderSecrets;
+var MAX_DOWNLOAD_BYTES, DOWNLOAD_STALL_MS, browserModel, delay, DEFAULT_BROWSER_MODEL, BROWSERBASE_SESSION_TIMEOUT_SECONDS, BROWSERBASE_KEEP_ALIVE_ENV, HEADED_ENV, EXECUTABLE_PATH_ENV, PROBE_RETRY_DELAY_MS, BROWSERBASE_API_BASE$1, defaultResolveLiveViewUrl, defaultImportStagehand, readBrowserProviderSecrets, JSON_FENCE, STAGEHAND_PEER, STAGEHAND_INSTALL_SPEC;
 var init_browser_tools = __esmMin((() => {
 	init_ambient_client();
 	init_browser_profile_state();
@@ -18915,6 +19102,7 @@ var init_browser_tools = __esmMin((() => {
 		} },
 		additionalProperties: false
 	});
+	browserModel = globalThis[Symbol.for("stackbone.browserTool.modelStore")] ??= new AsyncLocalStorage();
 	delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 	DEFAULT_BROWSER_MODEL = "anthropic/claude-haiku-4.5";
 	BROWSERBASE_SESSION_TIMEOUT_SECONDS = 3600;
@@ -18938,6 +19126,12 @@ var init_browser_tools = __esmMin((() => {
 		"@browserbasehq/stagehand"
 );
 	readBrowserProviderSecrets = (names) => stackbone.secrets.getMany(names);
+	JSON_FENCE = /^```(?:json)?[^\S\n]*\n([\s\S]*)```$/i;
+	STAGEHAND_PEER = {
+		pkg: "@browserbasehq/stagehand",
+		version: "3.6.0"
+	};
+	STAGEHAND_INSTALL_SPEC = `${STAGEHAND_PEER.pkg}@${STAGEHAND_PEER.version}`;
 }));
 //#endregion
 //#region ../../libs/sdk/src/runtime/console-capture.ts
@@ -22541,6 +22735,7 @@ var init_store_pool = __esmMin((() => {
 }));
 //#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/util/provider-from-model-id.ts
+init_src$26();
 var GATEWAY_PREFIX = "openrouter";
 /**
 * The provider half of a `vendor/model` id, or null when the id does not name one.
@@ -22551,9 +22746,10 @@ var GATEWAY_PREFIX = "openrouter";
 */
 var providerFromModelId = (modelId) => {
 	if (!modelId) return null;
-	const slash = modelId.indexOf("/");
+	const bare = unpinModelId(modelId)?.modelId ?? modelId;
+	const slash = bare.indexOf("/");
 	if (slash <= 0) return null;
-	const prefix = modelId.slice(0, slash);
+	const prefix = bare.slice(0, slash);
 	return prefix === GATEWAY_PREFIX ? null : prefix;
 };
 //#endregion
@@ -22994,7 +23190,7 @@ var init_role = __esmMin((() => {
 var STACKBONE_CLI_BUILD_VERSION, EMULATOR_CAPABILITY_ROUTES, EMULATOR_CAPABILITIES, buildContractResponse;
 var init_contract = __esmMin((() => {
 	init_src$26();
-	STACKBONE_CLI_BUILD_VERSION = "0.9.3";
+	STACKBONE_CLI_BUILD_VERSION = "0.9.4";
 	EMULATOR_CAPABILITY_ROUTES = {
 		"database.postgres_direct": "/api/db",
 		"rag.basic": "/api/rag",
@@ -28309,7 +28505,7 @@ var init_error_envelopes = __esmMin((() => {
 function componentRef(name) {
 	return { $ref: `#/components/schemas/${name}` };
 }
-var foldOpenApiDefinitions, named, errorEnvelopeSchema, CATALOG_EXPOSURE_EXTENSION, excludeFromCatalog, isCatalogExclusion, confirmBeforeCalling, INVALID_ANNOTATION, readCatalogAnnotation, jsonBody, describedJsonBody, readOptionalJsonBody, describedJsonBodyOf, renderedSchema, referencedJsonBody, referencedJsonResponse, readOptionalJsonBodyAs, multipartBody, uploadedFile, jsonResponse$1, htmlResponse, errorResponse, forbiddenResponse, TARGET_NOUNS, invalidPayloadHook, repeatedQueryKeys;
+var foldOpenApiDefinitions, named, errorEnvelopeSchema, CATALOG_EXPOSURE_EXTENSION, excludeFromCatalog, isCatalogExclusion, confirmBeforeCalling, INVALID_ANNOTATION, readCatalogAnnotation, jsonBody, describedJsonBody, readOptionalJsonBody, describedJsonBodyOf, renderedSchema, referencedJsonBody, referencedJsonResponse, readOptionalJsonBodyAs, multipartBody, uploadedFile, jsonResponse$2, htmlResponse, errorResponse, forbiddenResponse, TARGET_NOUNS, invalidPayloadHook, repeatedQueryKeys;
 var init_route_helpers = __esmMin((() => {
 	init_src$25();
 	init_error_boundary();
@@ -28421,7 +28617,7 @@ var init_route_helpers = __esmMin((() => {
 		format: "binary",
 		description
 	});
-	jsonResponse$1 = (schema, description) => ({
+	jsonResponse$2 = (schema, description) => ({
 		description,
 		content: { "application/json": { schema } }
 	});
@@ -28429,7 +28625,7 @@ var init_route_helpers = __esmMin((() => {
 		description,
 		content: { "text/html": { schema: z.string() } }
 	});
-	errorResponse = (description) => jsonResponse$1(errorEnvelopeSchema, description);
+	errorResponse = (description) => jsonResponse$2(errorEnvelopeSchema, description);
 	forbiddenResponse = (...capabilities) => errorResponse(`The caller's role ${capabilities.length === 1 ? `does not grant \`${capabilities[0]}\`` : `grants none of ${capabilities.map((capability) => `\`${capability}\``).join(", ")}`}. Only reachable on the browser-direct datapath — a proxy-signed call was authorized before it was signed.`);
 	TARGET_NOUNS = {
 		json: "body",
@@ -28490,27 +28686,27 @@ var init_vendor_surfaces = __esmMin((() => {
 			method: "get",
 			path: "/models",
 			description: "The workspace's deep agents as an OpenAI model list — one entry per registered agent, which is what a client's model dropdown reads. Chat never routes through here.",
-			responses: { 200: jsonResponse$1(vendorPayload("An OpenAI `list` of `model` objects, one per registered deep agent."), "OpenAI's model list, with each agent's name as the model id.") }
+			responses: { 200: jsonResponse$2(vendorPayload("An OpenAI `list` of `model` objects, one per registered deep agent."), "OpenAI's model list, with each agent's name as the model id.") }
 		}),
 		vendorRoute("openai", {
 			method: "post",
 			path: "/chat/completions",
 			description: "Run one turn on the deep agent named by `model`. Stateless by default — send the whole `messages` array, as you would to OpenAI — unless the call carries `x-stackbone-session` (durable thread) or `x-stackbone-conversation` (grouping only). x-stackbone-identities is a JSON string map of at most 32 literal fields with 1–100 character names and 1–500 character opaque values. Use ASCII Unicode escapes in HTTP headers. The user scalar supplies only customerId; contradictory copies return 400.",
 			request: { body: jsonBody(vendorPayload("An OpenAI Chat Completions request, with `model` naming the deep agent."), "OpenAI's Chat Completions request body.") },
-			responses: { 200: jsonResponse$1(vendorPayload("OpenAI's `chat.completion` object."), streamedElsewhere("One `chat.completion`. A request that sets `\"stream\": true` is answered with `text/event-stream` instead: OpenAI's `chat.completion.chunk` frames, terminated by `data: [DONE]`.")) }
+			responses: { 200: jsonResponse$2(vendorPayload("OpenAI's `chat.completion` object."), streamedElsewhere("One `chat.completion`. A request that sets `\"stream\": true` is answered with `text/event-stream` instead: OpenAI's `chat.completion.chunk` frames, terminated by `data: [DONE]`.")) }
 		}),
 		vendorRoute("anthropic", {
 			method: "get",
 			path: "/models",
 			description: "The same catalog as the OpenAI surface's, in Anthropic's shape. Chat never routes through here.",
-			responses: { 200: jsonResponse$1(vendorPayload("An Anthropic `data` list of model objects, one per registered deep agent."), "Anthropic's model list, with each agent's name as the model id.") }
+			responses: { 200: jsonResponse$2(vendorPayload("An Anthropic `data` list of model objects, one per registered deep agent."), "Anthropic's model list, with each agent's name as the model id.") }
 		}),
 		vendorRoute("anthropic", {
 			method: "post",
 			path: "/messages",
 			description: "Run one turn on the deep agent named by `model`. Same session and x-stackbone-identities JSON headers as the OpenAI surface, same statelessness by default. metadata.user_id supplies only customerId; contradictory copies return 400.",
 			request: { body: jsonBody(vendorPayload("An Anthropic Messages request, with `model` naming the deep agent."), "Anthropic's Messages request body.") },
-			responses: { 200: jsonResponse$1(vendorPayload("Anthropic's `message` object."), streamedElsewhere("One `message`. A request that sets `\"stream\": true` is answered with `text/event-stream` instead: the `message_start` / `content_block_*` / `message_delta` / `message_stop` sequence.")) }
+			responses: { 200: jsonResponse$2(vendorPayload("Anthropic's `message` object."), streamedElsewhere("One `message`. A request that sets `\"stream\": true` is answered with `text/event-stream` instead: the `message_start` / `content_block_*` / `message_delta` / `message_stop` sequence.")) }
 		}),
 		vendorRoute("agui", {
 			method: "post",
@@ -29539,8 +29735,8 @@ var init_box_auth_gate = __esmMin((() => {
 			summary: "Prove a candidate deployment secret",
 			description: "Signed with the operator's candidate secret and answered against the box's own. Public by necessity: proving the secret is what happens BEFORE a valid control-plane signature can exist.",
 			responses: {
-				200: jsonResponse$1(proxyChallengeResponseSchema, "The secret matched."),
-				401: jsonResponse$1(proxyChallengeResponseSchema, "The secret did not match.")
+				200: jsonResponse$2(proxyChallengeResponseSchema, "The secret matched."),
+				401: jsonResponse$2(proxyChallengeResponseSchema, "The secret did not match.")
 			}
 		}), async (c) => {
 			const url = new URL(c.req.url);
@@ -29570,11 +29766,11 @@ var init_box_auth_gate = __esmMin((() => {
 			description: "Signed with the same secret the challenge above proved. First registration binds the installation and organization; later calls must name the same pair. The MCP resource can change for that pair. The deployment row is written only after this call succeeds.",
 			request: { body: CONTROL_PLANE_IDENTITY_BODY },
 			responses: {
-				200: jsonResponse$1(z.object({ ok: z.literal(true) }), "The box recorded the identity."),
-				400: jsonResponse$1(controlPlaneIdentityRefusalSchema, "The body did not name both ids as non-empty strings."),
-				401: jsonResponse$1(controlPlaneIdentityRefusalSchema, "The signature did not verify against the box's own secret."),
-				409: jsonResponse$1(controlPlaneIdentityRefusalSchema, "The box is already registered to a different organization or installation."),
-				500: jsonResponse$1(controlPlaneIdentityRefusalSchema, "The box could not record the identity.")
+				200: jsonResponse$2(z.object({ ok: z.literal(true) }), "The box recorded the identity."),
+				400: jsonResponse$2(controlPlaneIdentityRefusalSchema, "The body did not name both ids as non-empty strings."),
+				401: jsonResponse$2(controlPlaneIdentityRefusalSchema, "The signature did not verify against the box's own secret."),
+				409: jsonResponse$2(controlPlaneIdentityRefusalSchema, "The box is already registered to a different organization or installation."),
+				500: jsonResponse$2(controlPlaneIdentityRefusalSchema, "The box could not record the identity.")
 			}
 		}), async (c) => {
 			const url = new URL(c.req.url);
@@ -44594,7 +44790,7 @@ var identityPrincipal = (identity) => ({
 */
 var BOX_SYSTEM_TOKEN = `sbsys_${randomBytes(32).toString("base64url")}`;
 /** How an in-process self-call presents it. */
-var boxSystemAuthorization = () => `Bearer ${BOX_SYSTEM_TOKEN}`, signLiveKitToken;
+var boxSystemAuthorization = () => `Bearer ${BOX_SYSTEM_TOKEN}`, signLiveKitToken, signLiveKitInferenceToken;
 var init_livekit_token = __esmMin((() => {
 	init_src$26();
 	signLiveKitToken = async (input) => {
@@ -44616,6 +44812,13 @@ var init_livekit_token = __esmMin((() => {
 			typ: "JWT"
 		}).setIssuer(input.apiKey).setSubject(input.identity).setNotBefore(now - 60).setExpirationTime(now + 300).sign(new TextEncoder().encode(input.apiSecret));
 	};
+	signLiveKitInferenceToken = async (input) => {
+		const now = input.nowSeconds ?? Math.floor(Date.now() / 1e3);
+		return new SignJWT({ inference: { perform: true } }).setProtectedHeader({
+			alg: "HS256",
+			typ: "JWT"
+		}).setIssuer(input.apiKey).setSubject("stackbone-box").setNotBefore(now - 60).setExpirationTime(now + 600).sign(new TextEncoder().encode(input.apiSecret));
+	};
 }));
 //#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/voice/call-token.ts
@@ -47802,7 +48005,7 @@ var SimulatedConnectorRegistry = class {
 };
 //#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/model-provider/provider-catalogues.ts
-var PROBE_TIMEOUT_MS$1, probeSource, readCatalogue, MAX_CONCURRENT_PROBES, fetchCatalogueSources, describePending, MAX_REASON_LENGTH, shortReason, createProviderCatalogues, orderedUnion, providerNames, notRespondingMessage, duplicatedModelIds, listServedModels, createServedModelsSnapshot;
+var PROBE_TIMEOUT_MS$1, probeSource, readCatalogue, MAX_CONCURRENT_PROBES, fetchCatalogueSources, describePending, MAX_REASON_LENGTH, shortReason, createProviderCatalogues, orderedUnion, providerNames, notRespondingMessage, duplicatedModelIds, claimsPlainModelIds, listServedModels, createServedModelsSnapshot;
 var init_provider_catalogues = __esmMin((() => {
 	init_src$6();
 	init_src$18();
@@ -47837,6 +48040,11 @@ var init_provider_catalogues = __esmMin((() => {
 		}
 	};
 	readCatalogue = async ({ kind, baseUrl, apiKey }, fetchImpl) => {
+		const fixed = fixedCatalogue(kind, baseUrl);
+		if (fixed !== null) return {
+			ok: true,
+			models: [...fixed]
+		};
 		const first = await fetchCatalogueSources(catalogueSources(kind, baseUrl), apiKey, fetchImpl);
 		const refused = first.find((response) => response.source.required && response.error !== void 0);
 		if (refused) return {
@@ -47942,6 +48150,7 @@ var init_provider_catalogues = __esmMin((() => {
 			providerIds
 		}));
 	};
+	claimsPlainModelIds = (provider) => gatewayRulesFor(provider.kind).catalogue.fixedModelIds === null;
 	listServedModels = async (sources) => {
 		let providers;
 		try {
@@ -48121,8 +48330,57 @@ var init_answered_chat = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../libs/runtime/workspace-runtime/src/lib/model-provider/client/livekit-call.ts
+var LIVEKIT_RETRY_DELAYS_MS, MAX_RETRY_AFTER_MS, RETRIED_STATUSES, REGION_RESTRICTED_CODE, jsonResponse$1, liveKitCredentialsMissing, waitFor, sleep$2, explained, sendLiveKitCall;
+var init_livekit_call = __esmMin((() => {
+	init_src$9();
+	LIVEKIT_RETRY_DELAYS_MS = [250, 750];
+	MAX_RETRY_AFTER_MS = 2e3;
+	RETRIED_STATUSES = new Set([429, 503]);
+	REGION_RESTRICTED_CODE = "inference_region_restricted";
+	jsonResponse$1 = (status, body) => new Response(JSON.stringify(body), {
+		status,
+		headers: { "content-type": "application/json" }
+	});
+	liveKitCredentialsMissing = () => jsonResponse$1(503, openAiErrorBody("This model provider is LiveKit Inference, and the box has no LiveKit credentials to sign the call with. Save the LiveKit URL, API key and secret under Voice in Studio.", "api_error", "livekit_credentials_missing"));
+	waitFor = (response, fallbackMs) => {
+		const header = response.headers.get("retry-after");
+		const seconds = header === null ? NaN : Number(header);
+		if (!Number.isFinite(seconds) || seconds < 0) return fallbackMs;
+		return Math.min(seconds * 1e3, MAX_RETRY_AFTER_MS);
+	};
+	sleep$2 = (ms, signal) => new Promise((resolve, reject) => {
+		if (signal?.aborted) return reject(signal.reason);
+		const timer = setTimeout(resolve, ms);
+		signal?.addEventListener("abort", () => {
+			clearTimeout(timer);
+			reject(signal.reason);
+		}, { once: true });
+	});
+	explained = async (response, modelId) => {
+		if (response.status !== 403) return response;
+		const text = await response.text();
+		if (!text.includes(REGION_RESTRICTED_CODE)) return new Response(text, {
+			status: response.status,
+			headers: response.headers
+		});
+		return jsonResponse$1(403, openAiErrorBody(`LiveKit Inference refused the model \`${modelId ?? "unknown"}\`: it has no endpoint in this LiveKit project's data region. Pick a model with an endpoint there, or turn off the inference region restriction in the LiveKit project settings.`, "invalid_request_error", REGION_RESTRICTED_CODE));
+	};
+	sendLiveKitCall = async (input) => {
+		const delays = input.delaysMs ?? LIVEKIT_RETRY_DELAYS_MS;
+		const signal = input.init.signal ?? void 0;
+		for (let attempt = 0;; attempt++) {
+			const response = await input.fetchImpl(input.url, input.init);
+			const delay = delays[attempt];
+			if (!RETRIED_STATUSES.has(response.status) || delay === void 0) return explained(response, input.modelId);
+			await response.body?.cancel();
+			await sleep$2(waitFor(response, delay), signal);
+		}
+	};
+}));
+//#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/model-provider/client/model-provider-client.ts
-var ModelProviderUnreachableError, liveEnvironmentCredential, upstreamUrl, operationOf, isChatCompletion, ROUTED_OPERATIONS, PINNED_ONLY_OPERATIONS, takesPin, MODELS_PATH, modelIdOf, modelIdInBody, unpinRequest, readChatRequest, jsonResponse, notRespondingRefusal, routingRefusal, unreadablePinRefusal, createModelProviderClient;
+var ModelProviderUnreachableError, isLiveKitEndpoint, liveEnvironmentCredential, upstreamUrl, operationOf, isChatCompletion, ROUTED_OPERATIONS, PINNED_ONLY_OPERATIONS, takesPin, MODELS_PATH, modelIdOf, modelIdInBody, unpinRequest, readChatRequest, jsonResponse, notRespondingRefusal, routingRefusal, unreadablePinRefusal, createModelProviderClient;
 var init_model_provider_client = __esmMin((() => {
 	init_src$9();
 	init_src$18();
@@ -48133,6 +48391,7 @@ var init_model_provider_client = __esmMin((() => {
 	init_proxy_paths();
 	init_error_message();
 	init_answered_chat();
+	init_livekit_call();
 	ModelProviderUnreachableError = class extends Error {
 		constructor(provider, cause) {
 			super(messageOf$6(cause), { cause });
@@ -48140,6 +48399,7 @@ var init_model_provider_client = __esmMin((() => {
 			this.name = "ModelProviderUnreachableError";
 		}
 	};
+	isLiveKitEndpoint = (endpoint, chatKind) => (chatKind ?? endpoint.kind ?? gatewayKindForBaseUrl(endpoint.baseUrl ?? "https://openrouter.ai/api/v1")) === "livekit";
 	liveEnvironmentCredential = () => resolveModelProviderCredential(void 0, process.env);
 	upstreamUrl = (baseUrl, path) => `${(baseUrl ?? "https://openrouter.ai/api/v1").replace(/\/+$/, "")}/${path.replace(/^\/+/, "")}`;
 	operationOf = (path) => path.replace(/^\/+/, "");
@@ -48279,14 +48539,29 @@ var init_model_provider_client = __esmMin((() => {
 			}
 			const body = chat === void 0 ? request.body : chat.body;
 			const headers = { ...request.headers };
-			const { apiKey } = endpoint;
-			if (apiKey && apiKey.trim() !== "") headers["authorization"] = `Bearer ${apiKey}`;
-			const upstream = await (options.fetchImpl ?? fetch)(upstreamUrl(endpoint.baseUrl, path), {
+			const liveKit = isLiveKitEndpoint(endpoint, chatKind);
+			if (liveKit) {
+				const token = await (options.liveKitToken?.() ?? Promise.resolve(null));
+				if (token === null) return liveKitCredentialsMissing();
+				headers["authorization"] = `Bearer ${token}`;
+			} else {
+				const { apiKey } = endpoint;
+				if (apiKey && apiKey.trim() !== "") headers["authorization"] = `Bearer ${apiKey}`;
+			}
+			const url = upstreamUrl(endpoint.baseUrl, path);
+			const init = {
 				method: request.method ?? "GET",
 				headers,
 				...body !== void 0 ? { body } : {},
 				...request.signal ? { signal: request.signal } : {}
-			});
+			};
+			const fetchImpl = options.fetchImpl ?? fetch;
+			const upstream = liveKit ? await sendLiveKitCall({
+				url,
+				init,
+				modelId: chat?.modelId,
+				fetchImpl
+			}) : await fetchImpl(url, init);
 			return chat === void 0 ? upstream : answeredChat(upstream);
 		};
 		/** Provider 1, the credential in effect: every call's path before STA3-17. */
@@ -48365,10 +48640,14 @@ var init_model_provider_client = __esmMin((() => {
 			}
 			if (providers.length < 2 || PINNED_ONLY_OPERATIONS.has(operation)) return fallback;
 			if (listsModels) return listedUnion(providers);
+			const claiming = providers.filter(claimsPlainModelIds);
+			const [sole, ...others] = claiming;
+			if (sole !== void 0 && others.length === 0) return sole.id === "default" ? void 0 : sole;
+			const pool = claiming.length === 0 ? providers : claiming;
 			const modelId = modelIdInBody(request.body);
 			if (modelId === void 0) return fallback;
-			const resolution = await resolveRoute(providers, modelId);
-			return resolution.kind === "routed" ? resolution.provider : routingRefusal(resolution, modelId, providers);
+			const resolution = await resolveRoute(pool, modelId);
+			return resolution.kind === "routed" ? resolution.provider : routingRefusal(resolution, modelId, pool);
 		};
 		/** Send a call where {@link route} put it: provider 1, a provider, or the box's refusal. */
 		const dispatch = async (path, request, routed) => {
@@ -49212,6 +49491,153 @@ var listModelProviderModels = async (opts, body, env = {}) => {
 	});
 };
 //#endregion
+//#region ../../libs/runtime/workspace-runtime/src/lib/voice/livekit-credentials.ts
+init_src$26();
+var [URL_NAME, API_KEY_NAME, API_SECRET_NAME] = RESERVED_LIVEKIT_SECRET_NAMES;
+/**
+* Names a row this box's key cannot open (never its value), so the log says
+* which one to save again. True when `err` is that failure.
+*/
+var warnUndecryptable = (scope, name) => console.warn(`[${scope}] ${name} cannot be opened with this box's key; save it again`);
+var warnIfUndecryptable = (scope, name, err) => {
+	if (!(err instanceof SecretUndecryptableError)) return false;
+	warnUndecryptable(scope, name);
+	return true;
+};
+/**
+* The stored LiveKit credentials, read on EVERY call — no cache — or `null` when
+* any of the three is missing or empty. Half a credential set cannot open a
+* room, so it answers exactly what nothing stored answers.
+*
+* A row this box's key cannot open throws {@link SecretUndecryptableError},
+* after a warning that names the row (never its value): saving the credentials
+* again is the fix, and the caller tells the operator so. Any other failure
+* throws as it came.
+*/
+var readLiveKitCredentials = async (opts) => {
+	const values = await readSystemSecrets(opts, RESERVED_LIVEKIT_SECRET_NAMES, (name) => warnUndecryptable("voice", name));
+	const url = values.get(URL_NAME);
+	const apiKey = values.get(API_KEY_NAME);
+	const apiSecret = values.get(API_SECRET_NAME);
+	if (!url || !apiKey || !apiSecret) return null;
+	return {
+		url,
+		apiKey,
+		apiSecret
+	};
+};
+/** The secret naming the LiveKit outbound SIP trunk `placeCall` dials through (STA3-56). */
+var SIP_OUTBOUND_TRUNK_SECRET = "LIVEKIT_SIP_OUTBOUND_TRUNK_ID";
+/** The optional secret naming the number the callee sees; the trunk's own when absent. */
+var SIP_CALLER_ID_SECRET = "LIVEKIT_SIP_CALLER_ID";
+/**
+* The outbound trunk, read on every call, or `null` when no trunk id is saved.
+* Not reserved names, unlike the three credentials: a trunk id opens nothing on
+* its own and has no privileged screen yet, so it is read from an `is_system`
+* row or the operator's own secret of that name, whichever exists.
+*/
+var readSipOutboundConfig = async (opts) => {
+	const values = await readSecretsAnyKind(opts, [SIP_OUTBOUND_TRUNK_SECRET, SIP_CALLER_ID_SECRET], (name) => warnUndecryptable("voice", name));
+	const trunkId = values.get(SIP_OUTBOUND_TRUNK_SECRET)?.trim();
+	if (!trunkId) return null;
+	const callerId = values.get(SIP_CALLER_ID_SECRET)?.trim();
+	return {
+		trunkId,
+		...callerId ? { callerId } : {}
+	};
+};
+var voiceNotConfigured = (message) => ({ refusal: {
+	status: 503,
+	body: {
+		code: "voice_not_configured",
+		message
+	}
+} });
+/**
+* {@link readLiveKitCredentials} for a voice route: the credentials, or the 503 to
+* answer without them. A row sealed by another box key is fixed the way a missing one
+* is, by saving the credentials again, so it answers the same 503; any other read
+* failure is the box's own and throws, to the generic 500.
+*/
+var lookUpLiveKitCredentials = async (opts) => {
+	let credentials;
+	try {
+		credentials = await readLiveKitCredentials(opts);
+	} catch (err) {
+		if (!(err instanceof SecretUndecryptableError)) throw err;
+		return voiceNotConfigured("This box cannot read the saved LiveKit credentials: they were saved with another key. Open the Voice provider screen and save them again.");
+	}
+	if (!credentials) return voiceNotConfigured("This box has no LiveKit credentials. Save the URL, API key and API secret on the Voice provider screen.");
+	return { credentials };
+};
+/**
+* The screen's view: whether all three are saved, and the URL in clear.
+*
+* The key and the secret are asked after as EXISTENCE only, never decrypted:
+* this view never shows them, so opening them would be work done to throw away.
+* The URL is decrypted to be shown, and a URL row this box's key cannot open
+* (sealed by another box) reads as not configured instead of failing the screen
+* the operator needs to replace it from. Only that: a database or key failure
+* throws, because answering "not configured" would hide a configured box.
+*/
+var getVoiceProvider = async (opts) => {
+	const [url, apiKeySet, apiSecretSet] = await Promise.all([
+		readSystemSecret(opts, URL_NAME).catch((err) => {
+			if (!warnIfUndecryptable("voice-provider", URL_NAME, err)) throw err;
+			return null;
+		}),
+		systemSecretExists(opts, API_KEY_NAME),
+		systemSecretExists(opts, API_SECRET_NAME)
+	]);
+	return {
+		configured: url !== null && apiKeySet && apiSecretSet,
+		url
+	};
+};
+/**
+* Save all three as `is_system` rows, with the activity-log entry, in ONE
+* transaction: the box never holds a new URL beside an old secret, and never a
+* save the trail does not show. The entry names the URL alone.
+*/
+var setVoiceProvider = async (opts, body, actor = { userId: null }) => {
+	await opts.db.transaction(async (tx) => {
+		await seedSystemSecrets(opts, {
+			[URL_NAME]: body.url,
+			[API_KEY_NAME]: body.apiKey,
+			[API_SECRET_NAME]: body.apiSecret
+		}, tx);
+		await opts.audit.record({
+			action: "voice_provider.update",
+			actorUserId: actor.userId,
+			subjectType: "voice_provider",
+			payload: { url: body.url }
+		}, tx);
+	});
+	await notifySecretsChanged();
+};
+/**
+* Remove all three in ONE transaction, and answer the names actually removed.
+*
+* `cleared` comes off each DELETE's own answer, so a partial store records only
+* what it held, and a removal that found nothing records nothing — the rule
+* `removeModelProvider` keeps.
+*/
+var clearVoiceProvider = async (opts, actor = { userId: null }) => {
+	const cleared = await opts.db.transaction(async (tx) => {
+		const removed = [];
+		for (const name of RESERVED_LIVEKIT_SECRET_NAMES) if (await deleteSystemSecret(opts, name, tx)) removed.push(name);
+		if (removed.length > 0) await opts.audit.record({
+			action: "voice_provider.delete",
+			actorUserId: actor.userId,
+			subjectType: "voice_provider",
+			payload: { cleared: removed }
+		}, tx);
+		return removed;
+	});
+	if (cleared.length > 0) await notifySecretsChanged();
+	return cleared;
+};
+//#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/model-provider/provider-registry-store.ts
 init_src$26();
 init_src$18();
@@ -49234,6 +49660,14 @@ var assertExtraProviderId = (id) => {
 	if (id === "default") throw new ProviderStoreError("default_provider", id);
 	if (!MODEL_PROVIDER_ID_PATTERN.test(id)) throw new ProviderStoreError("invalid_id", id);
 };
+/**
+* Refuses a hand-made LiveKit provider: it is derived from the Voice credentials
+* (PLA-2416), and a second one would carry no credential of its own. Removal
+* stays open, so a row saved before the derivation can still be cleared.
+*/
+var assertNotVoiceProvider = (id, kind) => {
+	if (id === "livekit" || kind === "livekit") throw new ProviderStoreError("voice_provider", id);
+};
 var PROVIDER_SUFFIX = "__PROVIDER";
 /**
 * The two rows of an extra provider. The key is a row of its own holding the
@@ -49313,14 +49747,41 @@ var listExtraProviders = async (opts) => {
 	return (await Promise.all(rowNames.filter((name) => name.endsWith(PROVIDER_SUFFIX)).map((name) => readExtraProvider(opts, name)))).filter((provider) => provider !== null);
 };
 /**
+* LiveKit Inference, while the box holds its Voice credentials (PLA-2416): the
+* endpoint is fixed and the call is signed with those credentials, so there is
+* nothing to store and nothing an operator could get wrong. Credentials the box
+* cannot read leave it out rather than failing the list every model call reads.
+*/
+var readVoiceProvider = async (opts) => {
+	try {
+		if (await readLiveKitCredentials(opts) === null) return null;
+	} catch (err) {
+		console.warn(`[model-provider] LiveKit Inference left out, Voice credentials unreadable: ${String(err)}`);
+		return null;
+	}
+	return {
+		id: LIVEKIT_MODEL_PROVIDER_ID,
+		name: "LiveKit Inference",
+		kind: "livekit",
+		baseUrl: LIVEKIT_INFERENCE_BASE_URL,
+		apiKey: void 0,
+		source: "voice"
+	};
+};
+/**
 * Every configured provider, provider 1 first, then the extras in the order
-* they were added.
+* they were added, then LiveKit Inference when Voice is configured.
 *
 * `env` is the boot snapshot, taken before boot seeded the stored credential
 * onto `process.env` (see `resolveModelProviderSource`).
 */
 var listProviders = async (opts, env = {}) => {
-	const [first, extras] = await Promise.all([readDefaultProvider(opts, env), listExtraProviders(opts)]);
+	const [first, stored, voice] = await Promise.all([
+		readDefaultProvider(opts, env),
+		listExtraProviders(opts),
+		readVoiceProvider(opts)
+	]);
+	const extras = voice === null ? stored : [...stored.filter((p) => p.id !== voice.id), voice];
 	return first === null ? extras : [first, ...extras];
 };
 /**
@@ -49362,11 +49823,13 @@ var writeProvider = async (opts, id, input, action, actor) => {
 var providerExists = (opts, id) => systemSecretExists(opts, rowNamesOf(id).provider);
 var addProvider = async (opts, provider, actor = { userId: null }) => {
 	assertExtraProviderId(provider.id);
+	assertNotVoiceProvider(provider.id, provider.kind);
 	if (await providerExists(opts, provider.id)) throw new ProviderStoreError("duplicate", provider.id);
 	await writeProvider(opts, provider.id, provider, "model_provider.create", actor);
 };
 var updateProvider = async (opts, id, input, actor = { userId: null }) => {
 	assertExtraProviderId(id);
+	assertNotVoiceProvider(id, input.kind);
 	if (!await providerExists(opts, id)) throw new ProviderStoreError("not_found", id);
 	await writeProvider(opts, id, input, "model_provider.update", actor);
 };
@@ -49398,6 +49861,40 @@ var removeProvider = async (opts, id, actor = { userId: null }) => {
 	await notifySecretsChanged();
 };
 //#endregion
+//#region ../../libs/runtime/workspace-runtime/src/lib/model-provider/client/livekit-inference-auth.ts
+init_livekit_token();
+/**
+* Signs a new token this long before the cached one expires, so a call that
+* starts on a token never reaches LiveKit with it already expired.
+*/
+var REFRESH_MARGIN_SECONDS = 60;
+/**
+* The bearer for LiveKit Inference (PLA-2416), or `null` when the box has no
+* LiveKit credentials. One token is reused until it nears expiry, and a new one
+* is signed when the key or the secret changes.
+*/
+var createLiveKitInferenceAuth = (options) => {
+	const now = options.nowSeconds ?? (() => Math.floor(Date.now() / 1e3));
+	let cached = null;
+	return async () => {
+		const credentials = await options.credentials();
+		if (credentials === null) return null;
+		const signedWith = `${credentials.apiKey}\u0000${credentials.apiSecret}`;
+		const at = now();
+		if (cached?.signedWith === signedWith && cached.expiresAt - REFRESH_MARGIN_SECONDS > at) return cached.token;
+		const token = await signLiveKitInferenceToken({
+			...credentials,
+			nowSeconds: at
+		});
+		cached = {
+			signedWith,
+			token,
+			expiresAt: at + 600
+		};
+		return token;
+	};
+};
+//#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/otlp/otlp-config.ts
 var CAPTURE_MODES = [
 	"NO_CONTENT",
@@ -49585,7 +50082,8 @@ var createMountContext = (opts, hooks, app) => {
 			}),
 			storedKind: () => readStoredModelProviderKind(secrets),
 			providers: () => listProviders(secrets, bootEnv),
-			catalogues: opts.providerCatalogues
+			catalogues: opts.providerCatalogues,
+			liveKitToken: createLiveKitInferenceAuth({ credentials: () => readLiveKitCredentials(secrets) })
 		}),
 		servedModels: opts.servedModels ?? (() => null),
 		simulatedConnectors: new SimulatedConnectorRegistry({ runs: opts.invocations }),
@@ -56154,7 +56652,7 @@ function untilAborted(work, signal) {
 * download behind it; `return()` alone waits for a chunk a stalled stream never
 * sends.
 */
-function release(data, iterator) {
+function release$1(data, iterator) {
 	data.destroy?.();
 	Promise.resolve(iterator.return?.()).catch(() => void 0);
 }
@@ -56181,7 +56679,7 @@ async function bytesOf({ fileName, data }, maxBytes, signal) {
 			chunks.push(next.value);
 		}
 	} catch (err) {
-		release(data, iterator);
+		release$1(data, iterator);
 		throw err;
 	}
 	return Buffer.concat(chunks, length);
@@ -72207,7 +72705,7 @@ var createApprovalsRouter = (deps) => {
 		description: "What the SDK calls to pause on a human. The box records the row, publishes `approval.created` on its event bus so an open inbox repaints, and answers with the callback URL the decision will be POSTed back to. Repeat calls carrying the same `idempotencyKey` return the SAME approval rather than raising a second one.",
 		request: { body: jsonBody(named("CreateApprovalRequest", createApprovalRequestSchema), "The topic, the callback path the decision is delivered to, and the payload a reviewer reads.") },
 		responses: {
-			201: jsonResponse$1(named("ApprovalCreatedResponse", approvalCreatedResponseSchema), "The approval id, its callback URL and when it expires."),
+			201: jsonResponse$2(named("ApprovalCreatedResponse", approvalCreatedResponseSchema), "The approval id, its callback URL and when it expires."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			500: errorResponse("The store refused the row (`internal_error`), message verbatim.")
 		}
@@ -72248,7 +72746,7 @@ var createApprovalsRouter = (deps) => {
 		description: "Cursor-paginated, newest first unless `order=asc`, filterable by status, topic and the run that raised them. The cursor is opaque and rewinds to before/after the last id at that timestamp.",
 		request: { query: listApprovalsQuery },
 		responses: {
-			200: jsonResponse$1(named("ApprovalListResponse", approvalListResponseSchema), "One page of approvals, and the cursors either side of it."),
+			200: jsonResponse$2(named("ApprovalListResponse", approvalListResponseSchema), "One page of approvals, and the cursors either side of it."),
 			400: errorResponse("A filter this inbox cannot honour — an unknown `status`, a `runId` that is not a uuid, a `limit` outside [1, 100] (`invalid_payload`) — or a cursor this box did not issue (`invalid_cursor`).")
 		}
 	}), async (c) => {
@@ -72306,7 +72804,7 @@ var createApprovalsRouter = (deps) => {
 		description: "The row plus its audit trail: every decision recorded against it, including the one a timeout sweep wrote. A pending approval carries an empty `decisions` array, never a missing one.",
 		request: { params: approvalIdPath },
 		responses: {
-			200: jsonResponse$1(named("ApprovalDetailResponse", approvalDetailResponseSchema), "The approval and its decisions, oldest first."),
+			200: jsonResponse$2(named("ApprovalDetailResponse", approvalDetailResponseSchema), "The approval and its decisions, oldest first."),
 			404: errorResponse("No such approval (`approval_not_found`) — or an id that is not an id at all.")
 		}
 	}), async (c) => {
@@ -72327,7 +72825,7 @@ var createApprovalsRouter = (deps) => {
 			body: jsonBody(named("DecideApprovalRequest", decideApprovalRequestSchema), "The decision, plus the optional edited payload and reviewer comment that ride with it.")
 		},
 		responses: {
-			200: jsonResponse$1(named("DecideApprovalResponse", decideApprovalResponseSchema), "The approval as it now stands, and the decision recorded against it."),
+			200: jsonResponse$2(named("DecideApprovalResponse", decideApprovalResponseSchema), "The approval as it now stands, and the decision recorded against it."),
 			400: errorResponse("The body failed its schema, or an `editedPayload` was sent for a pause holding more than one tool call (`invalid_payload`)."),
 			403: forbiddenResponse("hitl:decide"),
 			404: errorResponse("No such approval (`approval_not_found`)."),
@@ -72596,7 +73094,7 @@ var createActivityRouter = (deps) => {
 		description: "The append-only trail of what humans did on THIS box — an approval decided, the creator's config saved or rolled back, a secret rotated. One SOURCE of the organization's activity log: the control plane serves its own rows separately and the Activity screen merges the two, so every page names the source it came from and how completely that source answered. `action` and `resourceType` are matched as OPEN strings, never against this build's catalog — a box on a newer image records actions an older bundle has never heard of, and dropping those rows would be the silent omission the log exists to prevent. Pages are walked with `nextCursor`. There is no write verb: the table refuses UPDATE and DELETE below every application.",
 		request: { query: auditQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("AuditPage", auditPageSchema), "One page of this source's rows, the cursor the next page is asked with (`null` on the last), and how completely this source answered."),
+			200: jsonResponse$2(named("AuditPage", auditPageSchema), "One page of this source's rows, the cursor the next page is asked with (`null` on the last), and how completely this source answered."),
 			400: errorResponse("The query string failed its schema (`invalid_payload` — an unparseable bound, or a `limit` past the contract ceiling), or the cursor is not one this box minted (`invalid_cursor`). An unreadable cursor is REFUSED rather than answered with the first page: a caller handed page one for a cursor it cannot advance pages forever."),
 			403: forbiddenResponse("activity:read")
 		}
@@ -72746,7 +73244,7 @@ var createBrowserProfilesRouter = (deps) => {
 		summary: "List the stored browser sessions",
 		description: "METADATA ONLY, newest refresh first. The stored session state is a serialized Playwright `storageState` — credential material — and no route on this box answers it, so a row here carries the origin, the identity, whether a re-login is pending and when it was last captured, and nothing else.",
 		responses: {
-			200: jsonResponse$1(named("StudioBrowserProfileListResponse", studioBrowserProfileListResponseSchema), "Every stored profile, as metadata."),
+			200: jsonResponse$2(named("StudioBrowserProfileListResponse", studioBrowserProfileListResponseSchema), "Every stored profile, as metadata."),
 			403: forbiddenResponse("secrets:rotate")
 		}
 	}), async (c) => c.json(await listBrowserProfiles(browserProfilesOptions), 200));
@@ -72760,7 +73258,7 @@ var createBrowserProfilesRouter = (deps) => {
 		description: "Deletes the encrypted session for one `origin` + `identity`, so the agent has to log in again. The profile is named in the QUERY STRING, not in a body.",
 		request: { query: revokeQuery },
 		responses: {
-			200: jsonResponse$1(named("StudioBrowserProfileDeleteResponse", studioBrowserProfileDeleteResponseSchema), "The profile is gone."),
+			200: jsonResponse$2(named("StudioBrowserProfileDeleteResponse", studioBrowserProfileDeleteResponseSchema), "The profile is gone."),
 			403: forbiddenResponse("secrets:rotate"),
 			404: errorResponse("No stored session for that origin — or no origin was named at all.")
 		}
@@ -73146,7 +73644,7 @@ var createBrowserProviderRouter = (secretsOptions) => {
 		summary: "Read the browser provider configuration",
 		description: "The stored mode and its identifiers in clear, the API key masked, plus the mode a launch would actually open right now and any `BROWSER_*` variable in the box's environment that outranks the stored value. `effective_mode` is null when the configuration is unsatisfiable, and `effective_error` names the missing field.",
 		responses: {
-			200: jsonResponse$1(named("BrowserProviderGetResponse", browserProviderGetResponseSchema), "The stored configuration and the mode it resolves to."),
+			200: jsonResponse$2(named("BrowserProviderGetResponse", browserProviderGetResponseSchema), "The stored configuration and the mode it resolves to."),
 			403: forbiddenResponse("secrets:rotate")
 		}
 	}), async (c) => c.json(await getBrowserProvider(secretsOptions), 200));
@@ -73159,7 +73657,7 @@ var createBrowserProviderRouter = (secretsOptions) => {
 		description: "REPLACES the whole configuration — a field omitted or empty is deleted from the store, which is how the API key is cleared. Cross-field requirements (\"browserbase needs a project id\") are deliberately not refused here: an unsatisfiable mode surfaces on the read as `effective_error`, so a half-finished save is still savable.",
 		request: { body: jsonBody(browserProviderRequestBody, "The mode and the fields that mode needs.") },
 		responses: {
-			200: jsonResponse$1(named("BrowserProviderGetResponse", browserProviderGetResponseSchema), "The fresh masked view, including the recomputed effective mode."),
+			200: jsonResponse$2(named("BrowserProviderGetResponse", browserProviderGetResponseSchema), "The fresh masked view, including the recomputed effective mode."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("secrets:rotate")
 		}
@@ -73176,7 +73674,7 @@ var createBrowserProviderRouter = (secretsOptions) => {
 		description: "Opens (or asks after) the browser the body describes, WITHOUT saving anything. A configuration that cannot be reached rides back as `ok: false` DATA with a reason the operator can act on — never as an error status.",
 		request: { body: jsonBody(browserProviderRequestBody, "The candidate configuration to probe. Same shape as the PUT body.") },
 		responses: {
-			200: jsonResponse$1(named("BrowserProviderTestResponse", browserProviderTestResponseSchema), "Whether the candidate configuration answered, and why not when it did not."),
+			200: jsonResponse$2(named("BrowserProviderTestResponse", browserProviderTestResponseSchema), "Whether the candidate configuration answered, and why not when it did not."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("secrets:rotate")
 		}
@@ -73611,7 +74109,7 @@ var createCatalogRouter = (deps) => {
 		tags: [CATALOG_TAG],
 		summary: "List everything this workspace serves",
 		description: "Every deep agent and every workflow the box hosts, of both kinds, in one normalized shape and one total order (name, then kind). Platform entries are RETURNED and flagged `system: true`, never filtered out. Both halves are resolved on the read, so an agent hot-added by `stackbone dev` and a workflow set swapped by a reload both appear with no restart — and a row degraded only because nobody has published the prompt it declares goes healthy on the next read.",
-		responses: { 200: jsonResponse$1(named("WorkspaceCatalogListResponse", workspaceCatalogListResponseSchema), "Every entry this workspace serves. A row is legitimately PARTIAL: `metadata`, `reason`, `prompts`, `models` and `outputs` are each absent or null on an entry the build recorded nothing about, which is a different answer from an empty one.") }
+		responses: { 200: jsonResponse$2(named("WorkspaceCatalogListResponse", workspaceCatalogListResponseSchema), "Every entry this workspace serves. A row is legitimately PARTIAL: `metadata`, `reason`, `prompts`, `models` and `outputs` are each absent or null on an entry the build recorded nothing about, which is a different answer from an empty one.") }
 	}), async (c) => c.json(workspaceCatalogListResponseSchema.parse({ items: await currentEntries() }), 200));
 	app.openapi(createRoute({
 		method: "get",
@@ -73619,7 +74117,7 @@ var createCatalogRouter = (deps) => {
 		tags: [CATALOG_TAG],
 		summary: "Summarise the last week of runs, per entry",
 		description: `For every entry the list above returns: when it last ran, and how its runs over the last 7 days came out. The window is FIXED, not a query param — it is echoed on the response so a screen labels what it shows, and a caller-chosen one would let two surfaces publish different "recent activity" for the same entry. Entry-driven by construction: an entry that has never run comes back with zeros rather than vanishing.`,
-		responses: { 200: jsonResponse$1(named("CatalogRunAggregatesResponse", catalogRunAggregatesResponseSchema), "One row per catalog entry, plus the window every row was counted over.") }
+		responses: { 200: jsonResponse$2(named("CatalogRunAggregatesResponse", catalogRunAggregatesResponseSchema), "One row per catalog entry, plus the window every row was counted over.") }
 	}), async (c) => {
 		const since = (/* @__PURE__ */ new Date(Date.now() - 7 * DAY_MS$1)).toISOString();
 		const items = await deps.invocations.aggregateRunsByEntity({
@@ -73645,8 +74143,8 @@ var createCatalogRouter = (deps) => {
 		description: "The static diagram of the workflow's control flow, as the build drew it from the source. A known workflow with no diagram to show answers `{ diagram: null }` — the bundle predates the scan, or carries a diagram this box cannot read. Not part of `GET /api/catalog`, which every screen reads: a diagram weighs tens of kilobytes.",
 		request: { params: workflowNamePath },
 		responses: {
-			200: jsonResponse$1(named("WorkflowDiagramResponse", workflowDiagramResponseSchema), "The diagram, or `null` when there is none to show."),
-			404: jsonResponse$1(workflowNotFoundBodySchema, "No workflow by that name.")
+			200: jsonResponse$2(named("WorkflowDiagramResponse", workflowDiagramResponseSchema), "The diagram, or `null` when there is none to show."),
+			404: jsonResponse$2(workflowNotFoundBodySchema, "No workflow by that name.")
 		}
 	}), (c) => {
 		const { name } = c.req.valid("param");
@@ -74077,7 +74575,7 @@ var createPromptsRouter = (opts) => {
 		summary: "List the workspace prompts",
 		description: "Every prompt this box holds, of every owner, with the PUBLISHED text resolved into `content` — so a list read shows what each owner actually runs, not the newest draft somebody saved. `content` is `null` on a prompt with nothing published, which is a different answer from the prompt not existing. Capped at 200 rows, ordered by owner then key.\n\nGated by `config:write` even though it is a read: a prompt body is authored content, and the seats that may not edit one were never shown it either.",
 		responses: {
-			200: jsonResponse$1(named("StudioPromptListResponse", studioPromptListResponseSchema), "Every prompt on this box, published text resolved."),
+			200: jsonResponse$2(named("StudioPromptListResponse", studioPromptListResponseSchema), "Every prompt on this box, published text resolved."),
 			403: forbiddenResponse("config:write")
 		}
 	}), async (c) => {
@@ -74093,7 +74591,7 @@ var createPromptsRouter = (opts) => {
 		description: "Writes a new prompt and PUBLISHES its version 1 — version 1 is the only version there is, so leaving it unpublished would mean every new prompt starts as text nothing runs and no read returns. The write/publish split earns its keep from the second version onwards. An `agent` owner is rebuilt after the write, because a deep agent bakes its instruction into its graph and would otherwise keep answering with nothing.\n\nThis is the ONE route that carries the owner in the BODY; every other route carries it in the path. Neither half has a default: a create that guessed an owner would put the prompt somewhere no read will look.",
 		request: { body: jsonBody(named("CreateStudioPromptRequest", createStudioPromptRequestSchema), "The owner, the key, the display name and the template text.") },
 		responses: {
-			200: jsonResponse$1(named("StudioPrompt", studioPromptSchema), "The prompt as it now stands, publishing version 1."),
+			200: jsonResponse$2(named("StudioPrompt", studioPromptSchema), "The prompt as it now stands, publishing version 1."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse("The row was written and then could not be read back (`studio_prompt_not_found`) — a concurrent delete, not a bad request."),
@@ -74170,7 +74668,7 @@ var createPromptsRouter = (opts) => {
 			query: promptVersionQuery
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioPrompt", studioPromptSchema), "The prompt, with the resolved text."),
+			200: jsonResponse$2(named("StudioPrompt", studioPromptSchema), "The prompt, with the resolved text."),
 			400: errorResponse(PROMPT_OWNER_OR_VERSION_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(PROMPT_NOT_FOUND_REFUSAL)
@@ -74208,7 +74706,7 @@ var createPromptsRouter = (opts) => {
 			body: jsonBody(named("UpdateStudioPromptRequest", updateStudioPromptRequestSchema), "The fields to change. At least one of `content`, `name`, `description` or `metadata`.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioPrompt", studioPromptSchema), "The prompt as it now stands — still publishing whatever it published before."),
+			200: jsonResponse$2(named("StudioPrompt", studioPromptSchema), "The prompt as it now stands — still publishing whatever it published before."),
 			400: errorResponse(`The body failed its schema (\`invalid_payload\`), or ${PROMPT_OWNER_REFUSAL}`),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(PROMPT_NOT_FOUND_REFUSAL)
@@ -74259,7 +74757,7 @@ var createPromptsRouter = (opts) => {
 		description: "A SOFT delete — the rows are kept for the audit window and every read filters them out. Refused while the prompt still publishes something: deleting text an owner is reading takes it away mid-flight, and the operator who typed the delete is rarely the one who finds out. Unpublish first.",
 		request: { params: loosePromptPath },
 		responses: {
-			200: jsonResponse$1(named("StudioPromptDeleteResponse", studioPromptDeleteResponseSchema), "The prompt that was removed."),
+			200: jsonResponse$2(named("StudioPromptDeleteResponse", studioPromptDeleteResponseSchema), "The prompt that was removed."),
 			400: errorResponse(PROMPT_OWNER_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(PROMPT_NOT_FOUND_REFUSAL),
@@ -74301,7 +74799,7 @@ var createPromptsRouter = (opts) => {
 		description: "Every version written under this key, newest first, each flagged with whether it is the one that RUNS. The history is the only place an operator can see which of several drafts is live. Capped at 200.",
 		request: { params: loosePromptPath },
 		responses: {
-			200: jsonResponse$1(named("StudioPromptVersionListResponse", studioPromptVersionListResponseSchema), "The versions written under this key, newest first."),
+			200: jsonResponse$2(named("StudioPromptVersionListResponse", studioPromptVersionListResponseSchema), "The versions written under this key, newest first."),
 			400: errorResponse(PROMPT_OWNER_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(PROMPT_NOT_FOUND_REFUSAL)
@@ -74326,7 +74824,7 @@ var createPromptsRouter = (opts) => {
 		description: "A HARD delete, unlike the prompt's own: a draft nobody published is an attempt, not a record. The PUBLISHED version is refused outright — it is what the owner runs. `latestVersion` is recomputed afterwards, so the head never points at a number the history no longer holds.",
 		request: { params: loosePromptVersionPath },
 		responses: {
-			200: jsonResponse$1(named("StudioPromptVersionDeleteResponse", studioPromptVersionDeleteResponseSchema), "The version that was removed."),
+			200: jsonResponse$2(named("StudioPromptVersionDeleteResponse", studioPromptVersionDeleteResponseSchema), "The version that was removed."),
 			400: errorResponse(PROMPT_OWNER_OR_VERSION_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(PROMPT_NOT_FOUND_REFUSAL),
@@ -74388,7 +74886,7 @@ var createPromptsRouter = (opts) => {
 			body: jsonBody(named("StudioPromptPublishRequest", studioPromptPublishRequestSchema), "The version to make live.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioPrompt", studioPromptSchema), "The prompt, now publishing the version that was asked for."),
+			200: jsonResponse$2(named("StudioPrompt", studioPromptSchema), "The prompt, now publishing the version that was asked for."),
 			400: errorResponse(`The body failed its schema (\`invalid_payload\`), or ${PROMPT_OWNER_REFUSAL}`),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(`${PROMPT_NOT_FOUND_REFUSAL} A version that was never written answers \`studio_prompt_version_not_found\`.`)
@@ -74435,7 +74933,7 @@ var createPromptsRouter = (opts) => {
 		description: "Clears the published pointer. The versions stay — what goes is what RUNS, which is exactly what the two delete refusals on this surface are waiting on. An `agent` owner is rebuilt afterwards: taking text out of service changes what it answers just as much as putting text in.",
 		request: { params: loosePromptPath },
 		responses: {
-			200: jsonResponse$1(named("StudioPrompt", studioPromptSchema), "The prompt, now publishing nothing."),
+			200: jsonResponse$2(named("StudioPrompt", studioPromptSchema), "The prompt, now publishing nothing."),
 			400: errorResponse(PROMPT_OWNER_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(PROMPT_NOT_FOUND_REFUSAL)
@@ -74480,7 +74978,7 @@ var createPromptsRouter = (opts) => {
 			body: jsonBody(named("StudioPromptCompileRequest", studioPromptCompileRequestSchema), "The variables to render with, and optionally the version — or the unsaved draft — to render.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioPromptCompileResponse", studioPromptCompileResponseSchema), "The rendered text, or the diagnostic saying why there is none."),
+			200: jsonResponse$2(named("StudioPromptCompileResponse", studioPromptCompileResponseSchema), "The rendered text, or the diagnostic saying why there is none."),
 			400: errorResponse(`The body failed its schema (\`invalid_payload\`), or ${PROMPT_OWNER_REFUSAL}`),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(`${PROMPT_NOT_FOUND_REFUSAL} A pinned version that was never written answers \`studio_prompt_version_not_found\`.`)
@@ -74861,7 +75359,7 @@ var createConfigRouter = (agentConfigOptions) => {
 		summary: "Read the active agent config",
 		description: "The active `AGENT_CONFIG` value, the JSON Schema the creator declared for it, and which version is live. `value` is null until the agent is configured for the first time; `schema` is null when the workspace declares none.",
 		responses: {
-			200: jsonResponse$1(named("StudioAgentConfig", studioAgentConfigGetResponseSchema), "The active config, its schema and its version."),
+			200: jsonResponse$2(named("StudioAgentConfig", studioAgentConfigGetResponseSchema), "The active config, its schema and its version."),
 			403: forbiddenResponse("config:write")
 		}
 	}), async (c) => c.json(await getAgentConfig(agentConfigOptions), 200));
@@ -74874,7 +75372,7 @@ var createConfigRouter = (agentConfigOptions) => {
 		description: "Appends a version and makes it active. A value structurally identical to the active one is a no-op: the reply comes back `unchanged: true` and no version is written.",
 		request: { body: jsonBody(named("StudioAgentConfigPutRequest", studioAgentConfigPutRequestSchema), "The new `AGENT_CONFIG` value, as a JSON object.") },
 		responses: {
-			200: jsonResponse$1(named("StudioAgentConfigPutResponse", studioAgentConfigPutResponseSchema), "The new active config, the value it replaced, and whether anything changed."),
+			200: jsonResponse$2(named("StudioAgentConfigPutResponse", studioAgentConfigPutResponseSchema), "The new active config, the value it replaced, and whether anything changed."),
 			400: errorResponse("The body is not a `{ value: object }` (`invalid_payload`), or the value fails the JSON Schema the creator declared (`agent_config_invalid`)."),
 			403: forbiddenResponse("config:write")
 		}
@@ -74895,7 +75393,7 @@ var createConfigRouter = (agentConfigOptions) => {
 		summary: "List the config versions",
 		description: "The 100 most recent versions, newest first, each with its value — so the editor can diff or preview one without a second round-trip.",
 		responses: {
-			200: jsonResponse$1(named("StudioAgentConfigVersionListResponse", studioAgentConfigVersionListResponseSchema), "The version history, newest first."),
+			200: jsonResponse$2(named("StudioAgentConfigVersionListResponse", studioAgentConfigVersionListResponseSchema), "The version history, newest first."),
 			403: forbiddenResponse("config:write")
 		}
 	}), async (c) => c.json(await listAgentConfigVersions(agentConfigOptions), 200));
@@ -74908,7 +75406,7 @@ var createConfigRouter = (agentConfigOptions) => {
 		description: "Re-applies an earlier version's value as a NEW version — the history is append-only, so a rollback is never a deletion.",
 		request: { params: looseVersionPath },
 		responses: {
-			200: jsonResponse$1(named("StudioAgentConfigPutResponse", studioAgentConfigPutResponseSchema), "The rolled-back value, now active as the newest version."),
+			200: jsonResponse$2(named("StudioAgentConfigPutResponse", studioAgentConfigPutResponseSchema), "The rolled-back value, now active as the newest version."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse("No such version — or a version that is not a number at all.")
 		}
@@ -76111,7 +76609,7 @@ var registerAuthorizeRoutes = (app, { getContext, registry }) => {
 		description: "Mints a token against the provider with the stored `client_credentials` and reports what happened. An app-only connector has no interactive \"connect account\" step, so this is the only way an operator finds out the credentials and tenant actually work.\n\nA provider REJECTION is a 200 with `ok: false` and the provider’s own sentence, not an error status: the fix is in the provider’s console, and a 4xx here would read as the box refusing the call. Only a connector that cannot be tested this way at all — any `authMode` other than `client_credentials` — is a 400.",
 		request: { params: connectorPath },
 		responses: {
-			200: jsonResponse$1(named("ConnectConnectorTestResponse", connectConnectorTestResponseSchema), "What the provider said. `ok: false` is a completed test with a negative answer."),
+			200: jsonResponse$2(named("ConnectConnectorTestResponse", connectConnectorTestResponseSchema), "What the provider said. `ok: false` is a completed test with a negative answer."),
 			400: errorResponse("This connector uses `oauth` or `api_key` auth, which has no credentials to test this way (`connect_test_not_supported`); or the broker refused the arguments (`invalid_args`, `invalid_grant`)."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			...brokerRefusalResponses("The test")
@@ -76164,7 +76662,7 @@ var registerAuthorizeRoutes = (app, { getContext, registry }) => {
 			body: describedJsonBodyOf(app, "ConnectAuthorizeRequest", authorizeConnectorRequestSchema, "Who the authorization is on behalf of. Omit it entirely for the plain service-account flow.")
 		},
 		responses: {
-			200: jsonResponse$1(named("ConnectAuthorizeResponse", connectAuthorizeResponseSchema), "The consent challenge. Note its `expiresAt` is an ISO 8601 STRING, unlike every other `expiresAt` on this surface."),
+			200: jsonResponse$2(named("ConnectAuthorizeResponse", connectAuthorizeResponseSchema), "The consent challenge. Note its `expiresAt` is an ISO 8601 STRING, unlike every other `expiresAt` on this surface."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the broker refused the request — an `app` principal cannot drive an interactive flow (`invalid_args`, `invalid_grant`)."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			...brokerRefusalResponses("Starting the authorization")
@@ -76405,7 +76903,7 @@ var registerConnectorRoutes = (app, { opts, getContext, registry, unavailable, c
 		description: "Stores the operator’s credentials for one connector, keyed on `connectorId` — posting the same id again UPSERTS the registration in place rather than failing. `clientSecret` is write-only: it is encrypted at rest by the box cipher and the readback carries only `hasClientSecret`.\n\nWhich fields are required depends on `authMode`, and the rule is enforced but not expressible in this schema: `api_key` needs only `clientSecret` (the key itself); `client_credentials` needs `clientId`, `clientSecret` and `tokenUrl`; `oauth` needs those three plus `authorizeUrl`. A body that misses one is refused with `invalid_payload` and the issue pinned to that field.\n\nA CUSTOM connector — one the workspace defines rather than picking from the catalog — additionally sends `baseUrl` and `specSource`; `protocol` is persisted on the row only for those.\n\nAn imported PIECE (`protocol: piece`) registers with `authMode: custom`, no `placement` and no `clientSecret`: it sends `credentialValues`, one value per `credentialFields` entry of its catalog definition. They are stored encrypted as the connection credential and never read back; a field that is not `secret` (a select with `options`, or a `type: number` field) is also kept as `extraFields` for the edit form. A field with `options` takes one of them, and a `number` field a number, sent as its text. A missing required field, a value off those, or an unknown key is refused on that field, naming it and never the value.\n\nA piece whose catalog entry lists more than one of `authMethods` (a GitHub App or a personal access token) also sends `authMethod`, the chosen `id`, and its values are checked against the fields of that method alone. The row keeps the method; re-registering under another one replaces it and the stored values together.\n\nA piece method of type `OAUTH2` registers with `authMode: oauth`, its `authMethod` and an OAuth app’s `clientId` and `clientSecret`: the row takes the method’s `authorizeUrl`, `tokenUrl` and `scopes` from the catalog definition, and a body that sends different ones is refused on that field. The grant comes from `POST /connectors/{connectorId}/authorize`. A method whose catalog entry lists `client_credentials` among its `grants` registers under `authMode: client_credentials` instead: no authorize step, the token is minted from the app itself.\n\nA method with `fields` (props such as a cloud, a tenant or a mailbox) also sends them as `credentialValues`; a blank one takes the field’s `defaultValue`, and a field with `options` takes one of them. Its URLs and scopes may name those fields as `{name}`: the row stores them filled in (URL-encoded in a URL, a scope value split on whitespace), and a name left without a value is refused on `credentialValues.<name>` with nothing written. The values are not secret; they are stored as `extraFields` and handed to the piece.\n\n`allowedOperations` has three states: absent keeps the stored fence (a key rotation posts the blank form), `null` removes it, an array sets it — and an array is checked against the armed triggers exactly as `PUT /connectors/{connectorId}/allowed-operations` checks it.",
 		request: { body: jsonBody(named("RegisterConnectorRequest", registerConnectorRequestSchema), "The registration. Mirrors the cloud studio-module DTO field for field.") },
 		responses: {
-			200: jsonResponse$1(CONNECT_CONNECTOR, "The registration as it now stands, read back through the masking projection."),
+			200: jsonResponse$2(CONNECT_CONNECTOR, "The registration as it now stands, read back through the masking projection."),
 			400: errorResponse("The body failed its schema, including the per-`authMode` required-field rules (`invalid_payload`).\n\nAlso `invalid_payload` when a `specSource` is sent for a connector this box already defines: a stored spec supersedes the catalog entry ENTIRELY, taking the delete guard, the provider error classes and the filter operators with it. Register a custom connector under an id of your own.\n\n`invalid_credential` when a piece’s own check refused the credential; `message` is the piece’s sentence. Nothing was saved."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			502: errorResponse("A piece could not be asked whether the credential works (`piece_runtime`): its bundle did not load, or its check did not answer in time. Nothing was saved; this is not a verdict on the credential."),
@@ -76510,7 +77008,7 @@ var registerConnectorRoutes = (app, { opts, getContext, registry, unavailable, c
 		summary: "List the connector gallery",
 		description: "Every brand this box knows how to connect: the built-in catalog, the Activepieces pieces the box lists, plus whatever the workspace declares under `<projectRoot>/connect/*.json` (a workspace document supersedes a built-in by reusing its id). Presentation and PRE-FILL only — `authorizeUrl`, `tokenUrl`, `scopes` and `placement` are what the register form fills in for the operator, and `requiredFields` is what they must still supply.\n\n`unavailable` lists the Activepieces pieces that never build, never load or carry a malformed manifest entry, each with its code, reason and logo. None of them is among `items`, and registering one is refused under any `authMode` (`invalid_payload`).\n\nThis is the catalog, not the registrations: `GET /api/connect/connectors` is what this box has actually registered.",
 		responses: {
-			200: jsonResponse$1(named("ConnectCatalogResponse", connectCatalogResponseSchema), "The gallery entries, in registry order."),
+			200: jsonResponse$2(named("ConnectCatalogResponse", connectCatalogResponseSchema), "The gallery entries, in registry order."),
 			403: forbiddenResponse(CONNECT_CAPABILITY)
 		}
 	}), (c) => c.json({
@@ -76526,7 +77024,7 @@ var registerConnectorRoutes = (app, { opts, getContext, registry, unavailable, c
 		summary: "Retry loading the default connector catalog",
 		description: "Tries the default Activepieces catalog this box missed at boot right away, instead of waiting for the next background attempt. A call while an attempt is already running waits for that one rather than starting a second. When the attempt fails, the background retries start over from their first wait (30 s).\n\nAnswers once the attempt is over, with the same `catalogLoad` that `GET /api/connect/catalog` carries: `failed: false` means the catalog loaded and the gallery now lists its pieces.",
 		responses: {
-			200: jsonResponse$1(named("ConnectCatalogRetryResponse", connectCatalogRetryResponseSchema), "Where the box stands on the default catalog after the attempt."),
+			200: jsonResponse$2(named("ConnectCatalogRetryResponse", connectCatalogRetryResponseSchema), "Where the box stands on the default catalog after the attempt."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			404: errorResponse("This box is not retrying a default catalog (`catalog_retry_not_found`): it loaded one at boot, names its own, or has none configured.")
 		}
@@ -76543,7 +77041,7 @@ var registerConnectorRoutes = (app, { opts, getContext, registry, unavailable, c
 		summary: "List the registered connectors",
 		description: "What this box has credentials for, ordered by provider. `hasClientSecret` is the entire readback of the stored secret — the ciphertext never leaves the box, and neither does any token.",
 		responses: {
-			200: jsonResponse$1(named("ConnectConnectorListResponse", connectConnectorListResponseSchema), "The registrations, each through the masking projection."),
+			200: jsonResponse$2(named("ConnectConnectorListResponse", connectConnectorListResponseSchema), "The registrations, each through the masking projection."),
 			403: forbiddenResponse(CONNECT_CAPABILITY)
 		}
 	}), async (c) => {
@@ -76572,7 +77070,7 @@ var registerConnectorRoutes = (app, { opts, getContext, registry, unavailable, c
 		description: "Drops the stored credentials AND disarms the inbound triggers that polled through this connection, answering how many went off with it (PLA-1095). Those were two acts that looked like one: a link left armed on a deleted connection failed every tick forever while the Triggers screen still read it as healthy. Disarming stops the polling and nothing else — the poll cursor stays put, so re-registering the connection and re-arming the link resumes from where it left off rather than from now.\n\nThe GRANTS made against this connector are NOT dropped with it — the grant row carries no foreign key to the registration, deliberately, so a re-registration under the same id keeps working. Revoke a grant separately with `DELETE /api/connect/grants/{grantId}`.",
 		request: { params: connectorPath },
 		responses: {
-			200: jsonResponse$1(named("ConnectConnectorDeleteResponse", connectConnectorDeleteResponseSchema), "The registration is gone."),
+			200: jsonResponse$2(named("ConnectConnectorDeleteResponse", connectConnectorDeleteResponseSchema), "The registration is gone."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			404: errorResponse("No registration under that id (`connector_installation_required`).")
 		}
@@ -76620,7 +77118,7 @@ var registerConnectorRoutes = (app, { opts, getContext, registry, unavailable, c
 			body: jsonBody(named("ConnectConnectorFenceRequest", connectConnectorFenceRequestSchema), "The fence, or `null` to remove it.")
 		},
 		responses: {
-			200: jsonResponse$1(CONNECT_CONNECTOR, "The registration as it now stands."),
+			200: jsonResponse$2(CONNECT_CONNECTOR, "The registration as it now stands."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			404: errorResponse("No registration under that id (`connector_installation_required`)."),
@@ -76658,7 +77156,7 @@ var registerConnectorRoutes = (app, { opts, getContext, registry, unavailable, c
 		description: "Drops the cached spec document for this registration. The next action-picker open (and the next action run) downloads the provider's current spec instead of the one this box already holds — which is how a table added to a Supabase project since the last read shows up.\n\nNothing is downloaded here: the refresh evicts, the next read fetches. A connector whose spec is EMBEDDED has nothing cached and answers `not_cached`.",
 		request: { params: connectorPath },
 		responses: {
-			200: jsonResponse$1(named("ConnectConnectorSpecRefresh", connectConnectorSpecRefreshResponseSchema), "The cached spec is gone, or there was none to drop."),
+			200: jsonResponse$2(named("ConnectConnectorSpecRefresh", connectConnectorSpecRefreshResponseSchema), "The cached spec is gone, or there was none to drop."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			404: errorResponse("No registration under that id (`connector_installation_required`).")
 		}
@@ -76699,7 +77197,7 @@ var registerConnectorRoutes = (app, { opts, getContext, registry, unavailable, c
 		description: "What the connector can be asked to do, for the action picker: `operations` for an OpenAPI/Swagger connector, `tools` for an MCP one. A CUSTOM connector is introspected from the spec on its own row; a built-in from the registry definition its registration references.\n\nA probe that FAILS is still a 200: the reason lands in `warnings` with an empty result, because \"this connector advertises nothing right now\" is a state the picker renders rather than an error it has to recover from. The same is true when the workspace has no definition to probe at all.",
 		request: { params: connectorPath },
 		responses: {
-			200: jsonResponse$1(named("ConnectConnectorOperations", introspectionResultSchema), "The operations or tools discovered, plus any non-fatal notes from the probe."),
+			200: jsonResponse$2(named("ConnectConnectorOperations", introspectionResultSchema), "The operations or tools discovered, plus any non-fatal notes from the probe."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			404: errorResponse("No registration under that id (`connector_installation_required`). A registration with nothing to introspect is a 200 with warnings, not this.")
 		}
@@ -76798,7 +77296,7 @@ var registerGrantRoutes = (app, { getContext }) => {
 		summary: "List the stored authorizations",
 		description: "Every grant this box holds, ordered by connector then principal. METADATA ONLY: the row behind each entry holds an encrypted access token and, for an interactive grant, an encrypted refresh token, and neither is reachable from any management route. A credential leaves this box only as a short-lived mint on `POST /api/connect/token`.",
 		responses: {
-			200: jsonResponse$1(named("ConnectGrantListResponse", connectGrantListResponseSchema), "The grants, with health and expiry but no token material."),
+			200: jsonResponse$2(named("ConnectGrantListResponse", connectGrantListResponseSchema), "The grants, with health and expiry but no token material."),
 			403: forbiddenResponse(CONNECT_CAPABILITY)
 		}
 	}), async (c) => {
@@ -76819,7 +77317,7 @@ var registerGrantRoutes = (app, { getContext }) => {
 		description: "Drops the durable authorization AND the token cached from it, so nothing minted before this call survives. The principal has to authorize from scratch next time — which is what separates this from `POST /api/connect/evict`, the agent wire’s targeted cache drop that leaves the grant standing.",
 		request: { params: grantPath },
 		responses: {
-			200: jsonResponse$1(named("ConnectGrantRevokeResponse", connectGrantRevokeResponseSchema), "The grant and its cached token are gone."),
+			200: jsonResponse$2(named("ConnectGrantRevokeResponse", connectGrantRevokeResponseSchema), "The grant and its cached token are gone."),
 			403: forbiddenResponse(CONNECT_CAPABILITY),
 			404: errorResponse("No grant with that row id on this box (`not_found`).")
 		}
@@ -76920,7 +77418,7 @@ var init_support = __esmMin((() => {
 	AGENT_WIRE_TAG = AGENT_CONNECT_TAG;
 	AGENT_WIRE_401 = errorResponse("The scheme-A signature is missing, malformed, computed with the wrong secret or outside the 5-minute drift window (`access_denied`) — or the signature was fine and the BROKER has no authorization to work with (`no_token`, `user_authorization_required`, `principal_required`).");
 	CONNECT_EXECUTE_FAILURE = named("ConnectExecuteFailure", connectExecuteFailureSchema);
-	executeRefusal = (description) => jsonResponse$1(z.union([CONNECT_EXECUTE_FAILURE, errorEnvelopeSchema]), description);
+	executeRefusal = (description) => jsonResponse$2(z.union([CONNECT_EXECUTE_FAILURE, errorEnvelopeSchema]), description);
 	answerExecuteFailure = (c, error) => {
 		const body = {
 			ok: false,
@@ -77039,7 +77537,7 @@ var createConnectTokenRouter = (opts, sharedContext) => {
 		description: "The runtime hot path: a `@stackbone/sdk/connect` adapter calls this before a tool call. The response carries `placement` — every slot the credential occupies — so the caller applies it where the OPERATOR configured it rather than guessing. It is the same set `POST /execute` applies inside the box, which is what keeps the two paths from disagreeing about one connector.\n\nThe two consumers read it differently, and only one of them can. `connectHeaders()` builds the request headers itself, so it honours the set: a `header` placement writes the raw token to that header, a `bearer` one writes `Authorization: Bearer`. `connect()` / `withConnect()` cannot — a connection runtime carries only a bearer through `auth.getToken`, and `TokenResult` has no slot for a placement — so that path stays BEARER-ONLY by construction. A non-bearer connector wired through it fails at the provider, not here: a key the provider reads from a header of its own, such as the `apikey` header the built-in `supabase` places beside its bearer, never reaches that header. Use `connectHeaders()` or `POST /execute` for those.\n\nThe signature proves POSSESSION of the workspace secret, not WHICH install is calling, so the body asserts its own scoping claims: `installationId` and `agentName` are read as claims, `connector` and `principal` pick the grant. A connector with no grant answers `no_token` on 401 and the adapter turns that into an authorization prompt.",
 		request: { body: jsonBody(named("ConnectTokenRequest", tokenRequestSchema), "Which connector, for which principal, on behalf of which install.") },
 		responses: {
-			200: jsonResponse$1(named("ConnectTokenResponse", connectTokenResponseSchema), "The minted credential. `expiresAt` is absent when the provider declared no expiry."),
+			200: jsonResponse$2(named("ConnectTokenResponse", connectTokenResponseSchema), "The minted credential. `expiresAt` is absent when the provider declared no expiry."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the broker refused the request (`invalid_args`, `invalid_grant`)."),
 			401: AGENT_WIRE_401,
 			404: errorResponse("The connector is not registered on this box (`connector_installation_required`, `not_found`)."),
@@ -77079,7 +77577,7 @@ var createConnectTokenRouter = (opts, sharedContext) => {
 		description: "Mints the credential, applies it in the connector’s declared placement, calls the operation and hands back ONLY its output. Nothing about the credential — not the token, not its placement — crosses this boundary, which is the whole reason a workflow step calls the box instead of the provider.\n\n`operation` names an operation id (OpenAPI) or a tool (MCP) as `GET /api/connect/connectors/{connectorId}/operations` reports it. `runId` is the one field that changes WHICH connector answers: a run wired to a stand-in reaches the stand-in and never leaves the box, which is how an eval exercises a send without sending anything.\n\nA refusal comes back in TWO shapes on the same statuses: `{ ok: false, error }` when the executor completed and the provider or the broker said no, including a broker error thrown before execution completes. Signature and payload validation failures use the box’s `{ code, message }` envelope.",
 		request: { body: jsonBody(named("ConnectExecuteRequest", executeRequestSchema), "The connector, the operation, and the args to run it with.") },
 		responses: {
-			200: jsonResponse$1(named("ConnectExecuteSuccess", connectExecuteSuccessSchema), "The operation’s own output, passed through untouched."),
+			200: jsonResponse$2(named("ConnectExecuteSuccess", connectExecuteSuccessSchema), "The operation’s own output, passed through untouched."),
 			400: executeRefusal("The body failed its schema (`invalid_payload`), or the broker refused the arguments (`invalid_args`, `invalid_grant`)."),
 			401: executeRefusal("The signature is missing or wrong (`access_denied`), or the connector has no usable authorization (`no_token`, `user_authorization_required`, `principal_required`)."),
 			404: executeRefusal("No such connector on this box, or no such operation on it (`not_found`, `connector_installation_required`)."),
@@ -77122,7 +77620,7 @@ var createConnectTokenRouter = (opts, sharedContext) => {
 		description: "The adapter’s 401-recovery hook: a provider rejected a token that has not expired yet, so the cached copy is dropped and the NEXT mint fetches a fresh one. The durable GRANT survives — that is what separates this from `DELETE /api/connect/grants/{grantId}`, which drops the authorization and makes the principal start over.\n\nEvicting a connector with nothing cached is not an error; it answers the same `evicted` either way.",
 		request: { body: jsonBody(named("ConnectEvictRequest", evictRequestSchema), "Which connector, for which principal.") },
 		responses: {
-			200: jsonResponse$1(named("ConnectEvictResponse", connectEvictResponseSchema), "The cached credential for that pair is gone. The grant is untouched."),
+			200: jsonResponse$2(named("ConnectEvictResponse", connectEvictResponseSchema), "The cached credential for that pair is gone. The grant is untouched."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the broker refused the arguments (`invalid_args`, `invalid_grant`)."),
 			401: AGENT_WIRE_401,
 			404: errorResponse("The connector is not registered on this box (`connector_installation_required`, `not_found`)."),
@@ -77343,7 +77841,7 @@ var createDbExplorerRouter = (deps) => {
 		summary: "List the schemas and their tables",
 		description: "The explorer sidebar: every schema `stackbone_viewer` can see, each with its tables and an ESTIMATED row count off `pg_class.reltuples` (never a `COUNT(*)`, which would scan the table to paint a sidebar). `stackbone_platform` sorts first.",
 		responses: {
-			200: jsonResponse$1(named("DbSchemasResponse", dbSchemasResponseSchema), "Every readable schema and its tables."),
+			200: jsonResponse$2(named("DbSchemasResponse", dbSchemasResponseSchema), "Every readable schema and its tables."),
 			403: forbiddenResponse("db:query")
 		}
 	}), async (c) => c.json(await listSchemas(dbExplorerOptions), 200));
@@ -77359,7 +77857,7 @@ var createDbExplorerRouter = (deps) => {
 			query: dbBrowseQuerySchema
 		},
 		responses: {
-			200: jsonResponse$1(named("DbBrowseResponse", dbBrowseResponseSchema), "One page of rows, and the cursor for the next."),
+			200: jsonResponse$2(named("DbBrowseResponse", dbBrowseResponseSchema), "One page of rows, and the cursor for the next."),
 			400: errorResponse("A segment is not a Postgres identifier, or the page controls failed their schema (`invalid_payload`) — or the cursor is not one this box issued (`invalid_cursor`)."),
 			403: forbiddenResponse("db:query"),
 			404: errorResponse("No such table in that schema (`table_not_found`).")
@@ -77392,7 +77890,7 @@ var createDbExplorerRouter = (deps) => {
 		description: `The ad-hoc editor. SELECT-only, one statement, run under \`stackbone_viewer\` with \`statement_timeout\` at ${VIEWER_STATEMENT_TIMEOUT_S}s; a query with no LIMIT (or a bigger one) is capped at ${STUDIO_DB_QUERY_ROW_LIMIT} rows and comes back \`truncated: true\`.`,
 		request: { body: jsonBody(named("DbQueryRequest", dbQueryRequestSchema), "The SQL to run.") },
 		responses: {
-			200: jsonResponse$1(named("DbQueryResponse", dbQueryResponseSchema), "The rows, their columns, whether the cap was applied, and how long it took."),
+			200: jsonResponse$2(named("DbQueryResponse", dbQueryResponseSchema), "The rows, their columns, whether the cap was applied, and how long it took."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the SQL is one this surface refuses to run: `non_select`, `multi_statement`, `select_for_update`, `cte_write`, `invalid_sql`."),
 			403: forbiddenResponse("db:query")
 		}
@@ -77547,7 +78045,7 @@ var createAgentsRouter = (deps) => {
 		tags: [AGENTS_TAG],
 		summary: "List the in-process deep agents",
 		description: "Read straight off the registry, never probed over HTTP — a deep agent runs in this process, so `healthy` is its readiness and not a reachability check. A DEGRADED agent is listed, honestly: it is registered and named, its graph never built, and `reason` says whether that is a missing model provider or a bug in the creator's code. A workspace with no deep agents answers an empty list.",
-		responses: { 200: jsonResponse$1(named("CatalogAgentListResponse", catalogAgentListResponseSchema), "Every deep agent this workspace registers.") }
+		responses: { 200: jsonResponse$2(named("CatalogAgentListResponse", catalogAgentListResponseSchema), "Every deep agent this workspace registers.") }
 	}), (c) => {
 		const items = (deps.getDeepAgentRegistry()?.list() ?? []).map(projectDeepAgentSummary);
 		return c.json({ items }, 200);
@@ -77560,7 +78058,7 @@ var createAgentsRouter = (deps) => {
 		description: "The full inspection view: the model, the system prompt, the tool names and whether the agent can hold durable sessions. Tools are NAME-ONLY — a deep agent exposes no per-tool JSON Schema over the catalog — and there are no channels, skills, schedules or hooks.",
 		request: { params: agentNamePath },
 		responses: {
-			200: jsonResponse$1(named("CatalogAgentDetail", catalogAgentDetailSchema), "The agent, as the inspection screen reads it."),
+			200: jsonResponse$2(named("CatalogAgentDetail", catalogAgentDetailSchema), "The agent, as the inspection screen reads it."),
 			404: errorResponse("No agent by that name (`agent_not_found`). The names this workspace DOES register ride back under `details.known`, so a typo is one round-trip to fix.")
 		}
 	}), async (c) => {
@@ -81034,7 +81532,7 @@ var createEvalsRouter = (options = {}) => {
 		tags: [EVALS_TAG],
 		summary: "List the criteria this build can judge with",
 		description: "Every criterion a suite may be written against, each carrying what it can judge (`targets`), a plain-language description and the JSON Schema of its own settings — a screen renders the criterion form straight from this. Two of those settings are painted with facts only this box holds and are therefore asked PER REQUEST: the rubric criterion's judging model (the chat models the configured provider lists, plus the one this workspace judges with) and the customer criterion's judging workflow (the workflows this box could start and await). Nothing is ever withheld: a box that can reach neither serves the same entries with EMPTY pickers. `simulatorWorkflow` rides beside the entries because which workflow plays the user is a SUITE setting, not a criterion one.",
-		responses: { 200: jsonResponse$1(named("EvalScorerCatalogResponse", evalScorerCatalogResponseSchema), "One entry per criterion, plus the suite-level simulator picker.") }
+		responses: { 200: jsonResponse$2(named("EvalScorerCatalogResponse", evalScorerCatalogResponseSchema), "One entry per criterion, plus the suite-level simulator picker.") }
 	}), async (c) => c.json(evalScorerCatalogResponseSchema.parse({
 		entries: await servedCatalog(options),
 		simulatorWorkflow: await servedSimulatorWorkflow(options)
@@ -81155,7 +81653,7 @@ var createEvalDatasetsRouter = (opts) => {
 		tags: [EVALS_TAG],
 		summary: "List the case lists",
 		description: "Every active list, WITHOUT its cases — the index screen paints a row from `caseCount` and `currentVersion`, and a thousand-case list per row would make the read useless. Read one list to get its cases.",
-		responses: { 200: jsonResponse$1(named("EvalDatasetListResponse", evalDatasetListResponseSchema), "Every active list, cases omitted.") }
+		responses: { 200: jsonResponse$2(named("EvalDatasetListResponse", evalDatasetListResponseSchema), "Every active list, cases omitted.") }
 	}), async (c) => c.json({ items: await opts.store.list() }, 200));
 	app.openapi(createRoute({
 		method: "post",
@@ -81166,7 +81664,7 @@ var createEvalDatasetsRouter = (opts) => {
 		description: "Writes a list at version 1. The cases ride in the body as ordinary JSON rows — there is no file upload anywhere on this surface — and an EMPTY `cases` is a real request: a list an operator will capture into from run details later.",
 		request: { body: jsonBody(named("CreateEvalDatasetRequest", createEvalDatasetRequestSchema), "The key, the name, and the case rows version 1 holds. Each case carries the `input` the target is given and, optionally, the `expected` answer, a `persona` to answer it back and the tags a suite filters on.") },
 		responses: {
-			201: jsonResponse$1(named("EvalDataset", evalDatasetSchema), "The stored list at version 1, cases included."),
+			201: jsonResponse$2(named("EvalDataset", evalDatasetSchema), "The stored list at version 1, cases included."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("config:write"),
 			409: errorResponse("Another list already holds that key (`eval_dataset_key_taken`). Deleting the old one frees the name.")
@@ -81206,7 +81704,7 @@ var createEvalDatasetsRouter = (opts) => {
 			body: jsonBody(named("CaptureEvalCaseRequest", captureEvalCaseRequestSchema), "The case to append, plus the free-text `note` kept on the version this mints.")
 		},
 		responses: {
-			201: jsonResponse$1(named("EvalDataset", evalDatasetSchema), "The list at its NEW version, with the captured case on it."),
+			201: jsonResponse$2(named("EvalDataset", evalDatasetSchema), "The list at its NEW version, with the captured case on it."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(LIST_NOT_FOUND_DESCRIPTION),
@@ -81248,7 +81746,7 @@ var createEvalDatasetsRouter = (opts) => {
 			query: datasetReadQuery
 		},
 		responses: {
-			200: jsonResponse$1(named("EvalDataset", evalDatasetSchema), "The list, with the cases of the version read."),
+			200: jsonResponse$2(named("EvalDataset", evalDatasetSchema), "The list, with the cases of the version read."),
 			400: errorResponse("The query string failed its schema (`invalid_payload`) — a `version` that is not a positive integer, or a `tags` filter that names no tag."),
 			404: errorResponse(LIST_NOT_FOUND_DESCRIPTION)
 		}
@@ -81276,7 +81774,7 @@ var createEvalDatasetsRouter = (opts) => {
 			body: jsonBody(named("UpdateEvalDatasetRequest", updateEvalDatasetRequestSchema), "The fields to change. Everything is optional, but at least one of `cases`, `name` or `description` is required.")
 		},
 		responses: {
-			200: jsonResponse$1(named("EvalDataset", evalDatasetSchema), "The list as it now stands, at the version this edit left it on."),
+			200: jsonResponse$2(named("EvalDataset", evalDatasetSchema), "The list as it now stands, at the version this edit left it on."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(LIST_NOT_FOUND_DESCRIPTION),
@@ -81319,7 +81817,7 @@ var createEvalDatasetsRouter = (opts) => {
 		description: "A SOFT delete, so the runs that measured against this list keep their subject. The key is freed for reuse. No body — a delete addressed by its path takes nothing.",
 		request: { params: looseKeyPath },
 		responses: {
-			200: jsonResponse$1(named("EvalDatasetDeleteResponse", evalDatasetDeleteResponseSchema), "The key that was deleted, so a screen can drop the row it was showing without remembering which delete just landed."),
+			200: jsonResponse$2(named("EvalDatasetDeleteResponse", evalDatasetDeleteResponseSchema), "The key that was deleted, so a screen can drop the row it was showing without remembering which delete just landed."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(LIST_NOT_FOUND_DESCRIPTION)
 		}
@@ -81394,7 +81892,7 @@ var createEvalRunsRouter = (opts) => {
 			body: describedJsonBodyOf(app, "LaunchEvalRunRequest", launchEvalRunRequestSchema, "What this launch seals about the thing it is measuring — the commit and the agent build nobody else can know — and, optionally, the variant columns to measure side by side. Every field is optional; `{}` is a complete launch.")
 		},
 		responses: {
-			202: jsonResponse$1(named("EvalRun", evalRunSchema), "The run row, durable and queued. NOTHING has been measured yet."),
+			202: jsonResponse$2(named("EvalRun", evalRunSchema), "The run row, durable and queued. NOTHING has been measured yet."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the suite cannot be measured here — `eval_dataset_empty`, `eval_dataset_version_missing`, `eval_rubric_missing`, `eval_rubric_version_missing`, `eval_rubric_ambiguous`, `eval_target_unsupported` or `eval_variant_unsupported`. Each is refused before a case is measured."),
 			403: forbiddenResponse("evals:run"),
 			404: errorResponse("No suite with that id on this box (`eval_suite_not_found`).")
@@ -81457,7 +81955,7 @@ var createEvalRunsRouter = (opts) => {
 		summary: "Read a suite's run history",
 		description: "Every run of that suite, newest first, WITHOUT the per-case verdicts — the history screen paints a row from the totals, and a run with a thousand case results per row would make the read useless. Read one run to get its verdicts.",
 		request: { params: looseSuiteIdPath$1 },
-		responses: { 200: jsonResponse$1(named("EvalRunListResponse", evalRunListResponseSchema), "That suite's runs, newest first. A suite this box does not hold has no runs, which is an empty list rather than a 404.") }
+		responses: { 200: jsonResponse$2(named("EvalRunListResponse", evalRunListResponseSchema), "That suite's runs, newest first. A suite this box does not hold has no runs, which is an empty list rather than a 404.") }
 	}), async (c) => c.json({ items: await opts.store.listForSuite(c.req.param("suiteId")) }, 200));
 	app.openapi(createRoute({
 		method: "get",
@@ -81467,7 +81965,7 @@ var createEvalRunsRouter = (opts) => {
 		description: "The most detailed answer on this surface: the run row, everything it SEALED about what it measured (the commit, the agent build, the model that answered and the model that graded), and one result per case with the score each criterion gave it.",
 		request: { params: looseRunIdPath },
 		responses: {
-			200: jsonResponse$1(named("EvalRunDetail", evalRunDetailSchema), "The run with its per-case verdicts."),
+			200: jsonResponse$2(named("EvalRunDetail", evalRunDetailSchema), "The run with its per-case verdicts."),
 			404: errorResponse(RUN_NOT_FOUND_DESCRIPTION)
 		}
 	}), async (c) => {
@@ -81483,7 +81981,7 @@ var createEvalRunsRouter = (opts) => {
 		description: "A suite's FIRST run does not get a row of zeros: `comparison` is `null` and `reason` says why in words, because \"we have never measured this before\" and \"nothing changed\" are opposite pieces of news. When there is a comparison it names the run it was measured against, so the deltas have a subject.",
 		request: { params: looseRunIdPath },
 		responses: {
-			200: jsonResponse$1(named("EvalRunComparisonResponse", evalRunComparisonResponseSchema), "The deltas and the run they are against — or `comparison: null` with the reason."),
+			200: jsonResponse$2(named("EvalRunComparisonResponse", evalRunComparisonResponseSchema), "The deltas and the run they are against — or `comparison: null` with the reason."),
 			404: errorResponse(RUN_NOT_FOUND_DESCRIPTION)
 		}
 	}), async (c) => {
@@ -81518,7 +82016,7 @@ var createEvalRunsRouter = (opts) => {
 		description: "The reporting read: one row per agent or workflow that has ever been measured here, without opening a suite. `system=exclude` leaves out the targets the platform installed for itself, as the suites list does. A literal segment beside `/runs/{runId}`, and registered before it, so it can never be read as a run id.",
 		request: { query: evalSystemEntriesQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("EvalTargetSummaryResponse", evalTargetSummaryResponseSchema), "One row per measured target."),
+			200: jsonResponse$2(named("EvalTargetSummaryResponse", evalTargetSummaryResponseSchema), "One row per measured target."),
 			400: errorResponse("The query failed its schema (`invalid_payload`).")
 		}
 	}), async (c) => c.json({ items: await opts.store.summaryByTarget(c.req.valid("query")) }, 200));
@@ -81532,7 +82030,7 @@ var createEvalRunsRouter = (opts) => {
 		description: "The engine reads this row between cases and stops there, SEALING what it already measured. Nothing here interrupts a case in flight — the platform has no live run cancellation, and pretending otherwise would leave a half-measured case looking like a real verdict. No body: the run is named by its path.",
 		request: { params: looseRunIdPath },
 		responses: {
-			200: jsonResponse$1(named("EvalRun", evalRunSchema), "The run row, now cancelled."),
+			200: jsonResponse$2(named("EvalRun", evalRunSchema), "The run row, now cancelled."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(RUN_NOT_FOUND_DESCRIPTION)
 		}
@@ -81733,7 +82231,7 @@ var createEvalSuitesRouter = (opts) => {
 		description: "Every active suite, with the criteria and the settings each one measures under. `system=exclude` leaves out the suites that measure an entry the platform installed for itself.",
 		request: { query: evalSystemEntriesQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("EvalSuiteListResponse", evalSuiteListResponseSchema), "Every active suite."),
+			200: jsonResponse$2(named("EvalSuiteListResponse", evalSuiteListResponseSchema), "Every active suite."),
 			400: errorResponse("The query failed its schema (`invalid_payload`).")
 		}
 	}), async (c) => c.json({ items: await opts.store.list(c.req.valid("query")) }, 200));
@@ -81746,7 +82244,7 @@ var createEvalSuitesRouter = (opts) => {
 		description: "Writes a suite: WHAT is measured (`targetKind` + `targetName`), over WHICH case list (`datasetId`, optionally pinned to a `datasetPin` version), with WHICH criteria, how many `repeats` and against what pass mark (`threshold`). Three validations run in this order and stop at the first — the wire schema, then the CATALOG (does this criterion exist, can it judge this target, does it understand these settings), then the target itself (is it served here). The catalog half is the very check `POST /api/evals/scorers/validate` runs, so a criterion the screen validated cannot be refused at save time.",
 		request: { body: jsonBody(named("CreateEvalSuiteRequest", createEvalSuiteRequestSchema), "The target, the case list, the criteria and the run settings.") },
 		responses: {
-			201: jsonResponse$1(named("EvalSuite", evalSuiteSchema), "The stored suite."),
+			201: jsonResponse$2(named("EvalSuite", evalSuiteSchema), "The stored suite."),
 			400: errorResponse(SUITE_WRITE_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			409: errorResponse("Another suite already holds that name (`eval_suite_name_taken`). Deleting the old one frees it.")
@@ -81799,7 +82297,7 @@ var createEvalSuitesRouter = (opts) => {
 		description: "The whole suite, criteria included.",
 		request: { params: looseSuiteIdPath },
 		responses: {
-			200: jsonResponse$1(named("EvalSuite", evalSuiteSchema), "The suite as it stands."),
+			200: jsonResponse$2(named("EvalSuite", evalSuiteSchema), "The suite as it stands."),
 			404: errorResponse(SUITE_NOT_FOUND_DESCRIPTION)
 		}
 	}), async (c) => {
@@ -81819,7 +82317,7 @@ var createEvalSuitesRouter = (opts) => {
 			body: jsonBody(named("UpdateEvalSuiteRequest", updateEvalSuiteRequestSchema), "The fields to change. Everything is optional.")
 		},
 		responses: {
-			200: jsonResponse$1(named("EvalSuite", evalSuiteSchema), "The suite as it now stands."),
+			200: jsonResponse$2(named("EvalSuite", evalSuiteSchema), "The suite as it now stands."),
 			400: errorResponse(SUITE_WRITE_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(SUITE_NOT_FOUND_DESCRIPTION),
@@ -81873,7 +82371,7 @@ var createEvalSuitesRouter = (opts) => {
 		description: "A SOFT delete, so the runs that measured under this suite keep their subject. The name is freed for reuse. No body — a delete addressed by its path takes nothing.",
 		request: { params: looseSuiteIdPath },
 		responses: {
-			200: jsonResponse$1(named("EvalSuiteDeleteResponse", evalSuiteDeleteResponseSchema), "The id that was deleted, so a screen can drop the row it was showing without remembering which delete just landed."),
+			200: jsonResponse$2(named("EvalSuiteDeleteResponse", evalSuiteDeleteResponseSchema), "The id that was deleted, so a screen can drop the row it was showing without remembering which delete just landed."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(SUITE_NOT_FOUND_DESCRIPTION)
 		}
@@ -82444,7 +82942,7 @@ var createFixturesRouter = (deps) => {
 		tags: [FIXTURES_TAG],
 		summary: "List the saved Playground inputs",
 		description: "Every fixture this agent holds. The cursors are always null — the store is a per-agent JSONL file read whole — and stay on the wire so the shape matches the cloud list a Studio screen may also be reading.",
-		responses: { 200: jsonResponse$1(named("FixtureListResponse", fixtureListResponseSchema), "Every saved fixture for this agent.") }
+		responses: { 200: jsonResponse$2(named("FixtureListResponse", fixtureListResponseSchema), "Every saved fixture for this agent.") }
 	}), async (c) => c.json({
 		items: await fixturesStore.list(),
 		nextCursor: null,
@@ -82459,7 +82957,7 @@ var createFixturesRouter = (deps) => {
 		description: "Names an input so it can be replayed from the Playground. The name is unique per agent — saving over an existing one is refused rather than silently replacing the input somebody else pinned.",
 		request: { body: jsonBody(named("CreateFixtureRequest", createFixtureRequestSchema), "The name, the input to save under it, and an optional description.") },
 		responses: {
-			201: jsonResponse$1(named("Fixture", fixtureSchema), "The fixture as it was stored."),
+			201: jsonResponse$2(named("Fixture", fixtureSchema), "The fixture as it was stored."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("runs:invoke"),
 			409: errorResponse("This agent already holds a fixture by that name (`fixture_name_conflict`).")
@@ -83016,7 +83514,7 @@ var createGuardrailsRouter = (opts) => {
 		tags: [GUARDRAILS_TAG],
 		summary: "List the checks this build can run",
 		description: "Every check a rule may be written against, each carrying the sides of a turn it can guard (`targets`) and the JSON Schema of its own settings. A screen renders the rule form straight from this — the same description the runtime enforces a write against, so a form and the box cannot disagree about what a check accepts. It is a CONSTANT of the build: no store is read, and the answer only changes when the box's image does.",
-		responses: { 200: jsonResponse$1(named("GuardrailCatalogResponse", guardrailCatalogResponseSchema), "One entry per check this build can run.") }
+		responses: { 200: jsonResponse$2(named("GuardrailCatalogResponse", guardrailCatalogResponseSchema), "One entry per check this build can run.") }
 	}), (c) => c.json(CATALOG_RESPONSE, 200));
 	app.openapi(createRoute({
 		method: "get",
@@ -83024,7 +83522,7 @@ var createGuardrailsRouter = (opts) => {
 		tags: [GUARDRAILS_TAG],
 		summary: "List the stored rules",
 		description: "Every guardrail this box holds, each with its attachments inline — so a screen can show what an edit or a delete would touch without a second request per row.",
-		responses: { 200: jsonResponse$1(named("GuardrailsListResponse", guardrailsListResponseSchema), "Every stored rule, with its attachments.") }
+		responses: { 200: jsonResponse$2(named("GuardrailsListResponse", guardrailsListResponseSchema), "Every stored rule, with its attachments.") }
 	}), async (c) => c.json({ items: await opts.store.list() }, 200));
 	app.openapi(createRoute({
 		method: "post",
@@ -83035,7 +83533,7 @@ var createGuardrailsRouter = (opts) => {
 		description: "Writes a new rule and, when the body carries an `attachment`, points it somewhere in the same breath — a rule and its blast radius are one fact, and splitting them would leave a window where a rule meant for one agent is live across the whole workspace. Absent means the workspace default set.",
 		request: { body: jsonBody(named("CreateGuardrailRequest", createGuardrailRequestSchema), "The check, its settings, what it does when it fires, and optionally where it applies.") },
 		responses: {
-			201: jsonResponse$1(named("Guardrail", guardrailSchema), "The stored rule, with the attachments it now carries."),
+			201: jsonResponse$2(named("Guardrail", guardrailSchema), "The stored rule, with the attachments it now carries."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or it read fine and the CHOSEN CHECK would not run under these settings — `details.errors` names which, one at a time."),
 			403: forbiddenResponse("config:write"),
 			409: errorResponse("Another rule already holds that name (`guardrail_name_taken`). Names are what a blocked user reads, so they are unique per box.")
@@ -83072,7 +83570,7 @@ var createGuardrailsRouter = (opts) => {
 		description: "The whole definition, attachments included.",
 		request: { params: looseGuardrailIdPath },
 		responses: {
-			200: jsonResponse$1(named("Guardrail", guardrailSchema), "The rule as it stands."),
+			200: jsonResponse$2(named("Guardrail", guardrailSchema), "The rule as it stands."),
 			404: errorResponse(RULE_NOT_FOUND_DESCRIPTION)
 		}
 	}), async (c) => {
@@ -83092,7 +83590,7 @@ var createGuardrailsRouter = (opts) => {
 			body: jsonBody(named("UpdateGuardrailRequest", updateGuardrailRequestSchema), "The fields to change. Everything is optional.")
 		},
 		responses: {
-			200: jsonResponse$1(named("Guardrail", guardrailSchema), "The rule as it now stands."),
+			200: jsonResponse$2(named("Guardrail", guardrailSchema), "The rule as it now stands."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the MERGED row — this patch over the stored values — is a rule its check would not run."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(RULE_NOT_FOUND_DESCRIPTION),
@@ -83177,7 +83675,7 @@ var createGuardrailsRouter = (opts) => {
 			body: jsonBody(named("AttachGuardrailRequest", attachGuardrailRequestSchema), "The scope, plus the unit name when the scope is a single agent or workflow.")
 		},
 		responses: {
-			201: jsonResponse$1(named("Guardrail", guardrailSchema), "The WHOLE rule, not just the new row: the screen repaints the blast radius from this answer instead of re-reading the list."),
+			201: jsonResponse$2(named("Guardrail", guardrailSchema), "The WHOLE rule, not just the new row: the screen repaints the blast radius from this answer instead of re-reading the list."),
 			400: errorResponse("The body failed its schema (`invalid_payload`) — a per-unit scope with no `unitName`, or a scope this build does not know."),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse(RULE_NOT_FOUND_DESCRIPTION)
@@ -85724,7 +86222,7 @@ var createInternalPromptsRouter = (opts) => {
 		summary: "List the box's own prompts and models",
 		description: "One row per model caller Stackbone itself runs on this box — the Studio copilot, the guardrail classifier, the eval judge, the persona simulator, Auto-map, memory extraction and the query rewrite. `prompt` says where its text is edited: a caller owned by an agent or a workflow names that catalog entry (its Prompts block edits it); a `system` caller carries the text compiled into this box as its default, the operator's PUBLISHED text when there is one (`null` means it runs on the default) and whether a prompt is stored at its address at all. `model` says where the model is picked and what it falls back to.\n\nRead-only. The text is written through `/api/prompts` (create or update, then publish; unpublish returns to the default), the copilot's and Auto-map's models through `/api/model-selections`, and the other settings-backed models through `/api/settings`.\n\nGated by `config:write` even though it is a read: it carries prompt bodies, and the seats that may not edit one were never shown it either.",
 		responses: {
-			200: jsonResponse$1(named("StudioInternalPromptListResponse", studioInternalPromptListResponseSchema), "Every internal caller, in the order the System screen lists them."),
+			200: jsonResponse$2(named("StudioInternalPromptListResponse", studioInternalPromptListResponseSchema), "Every internal caller, in the order the System screen lists them."),
 			403: forbiddenResponse("config:write")
 		}
 	}), async (c) => {
@@ -85814,7 +86312,7 @@ var createLogsRouter = (deps) => {
 		description: "The lines this box printed, read back out of its own database long after the ring buffer that streamed them has rolled over — this is what answers \"what did it print three weeks ago\", which the tail beside it cannot. Filters narrow the rows; a `q` text search additionally REQUIRES a `from`/`to` window, because searching log text is an unindexed scan. Pages are walked with `nextCursor`, and the rows carry the live tail's vocabulary (`msg`, `run_id`, `trace_id`) so one presentation layer renders both screens.",
 		request: { query: studioLogHistoryQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("StudioLogHistoryResponse", studioLogHistoryResponseSchema), "One page of stored lines, plus the cursor the next page is asked with (`null` on the last)."),
+			200: jsonResponse$2(named("StudioLogHistoryResponse", studioLogHistoryResponseSchema), "One page of stored lines, plus the cursor the next page is asked with (`null` on the last)."),
 			400: errorResponse("The query string failed its schema (`invalid_payload`), or the WINDOW cannot be answered — `text_search_needs_range`, `time_range_too_wide`, `time_range_unreadable`, `time_range_inverted` — or the search itself came back refused: a cursor this box did not mint (`invalid_cursor`) or a scan that outran its deadline (`search_timed_out`). Never a 500: each is the reader's own search coming back with a sentence about how to narrow it."),
 			403: forbiddenResponse("logs:read"),
 			503: errorResponse("This build has no log database behind it (`logs_history_unavailable`). An empty page would read as \"this box has never printed anything\", which is a different and much worse diagnosis.")
@@ -86078,7 +86576,7 @@ var createMemoryRouter = (deps) => {
 			body: jsonBody(named("SearchStudioMemoryPeopleRequest", searchStudioMemoryPeopleRequestSchema), "The search text, the cursor of the previous page and the page size.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioMemoryPersonListResponse", studioMemoryPersonListResponseSchema), "One page of people, their ids, fact counts and last call dates."),
+			200: jsonResponse$2(named("StudioMemoryPersonListResponse", studioMemoryPersonListResponseSchema), "One page of people, their ids, fact counts and last call dates."),
 			400: errorResponse("The agent scope, the body or the cursor is invalid."),
 			403: forbiddenResponse("db:query")
 		}
@@ -86099,7 +86597,7 @@ var createMemoryRouter = (deps) => {
 		description: "Facts in stored order with their creation and update call provenance, followed by the person’s calls newest first.",
 		request: { params: studioMemoryPersonParamSchema },
 		responses: {
-			200: jsonResponse$1(named("StudioMemoryDetailResponse", studioMemoryDetailResponseSchema), "The facts and calls retained for this person."),
+			200: jsonResponse$2(named("StudioMemoryDetailResponse", studioMemoryDetailResponseSchema), "The facts and calls retained for this person."),
 			400: errorResponse("The agent scope or person id is invalid."),
 			404: errorResponse("No person has this id on this agent, or no facts or calls remain for them."),
 			403: forbiddenResponse("db:query")
@@ -86120,7 +86618,7 @@ var createMemoryRouter = (deps) => {
 		description: "The agent runs whose frozen identity is exactly this person, newest first. Another format of the same number, or a mention of it in a transcript, is another person.",
 		request: { params: studioMemoryPersonParamSchema },
 		responses: {
-			200: jsonResponse$1(named("StudioMemoryPersonRunsResponse", studioMemoryPersonRunsResponseSchema), "The person’s runs on this agent, with their status and creation date."),
+			200: jsonResponse$2(named("StudioMemoryPersonRunsResponse", studioMemoryPersonRunsResponseSchema), "The person’s runs on this agent, with their status and creation date."),
 			400: errorResponse("The agent scope or person id is invalid."),
 			404: errorResponse("No person has this id on this agent."),
 			403: forbiddenResponse("db:query")
@@ -86141,7 +86639,7 @@ var createMemoryRouter = (deps) => {
 		description: "Deletes the person’s runs on this agent with their steps (the same runs `GET /agents/{agentId}/people/{personId}/runs` lists), the conversation checkpoints of those runs’ sessions, then every fact and call summary. The memory erase bumps the same revision tombstone as `stackbone.memory.deleteAll`, preventing an in-flight update from restoring erased data; `stackbone.memory.deleteAll` itself stays memory-only and leaves runs and checkpoints in place. The tombstone keeps only the opaque id: an erased id answers 404 here, on read and on its runs, and a person who comes back gets a new id.",
 		request: { params: studioMemoryPersonParamSchema },
 		responses: {
-			200: jsonResponse$1(named("DeleteStudioMemoryResponse", deleteStudioMemoryResponseSchema), "The number of fact and call rows removed, and the number of runs removed."),
+			200: jsonResponse$2(named("DeleteStudioMemoryResponse", deleteStudioMemoryResponseSchema), "The number of fact and call rows removed, and the number of runs removed."),
 			400: errorResponse("The agent scope or person id is invalid."),
 			403: forbiddenResponse("rag:write"),
 			404: errorResponse("No person has this id on this agent."),
@@ -86411,7 +86909,7 @@ var response = async (agent, overrides, db) => ({
 	...resolveEffectiveMemorySettings(agent.memory, overrides)
 });
 var responses = {
-	200: jsonResponse$1(named("StudioMemorySettingsResponse", studioMemorySettingsResponseSchema), "The overrides and effective per-field values and origins."),
+	200: jsonResponse$2(named("StudioMemorySettingsResponse", studioMemorySettingsResponseSchema), "The overrides and effective per-field values and origins."),
 	400: errorResponse("The agent or settings payload is invalid."),
 	404: errorResponse("The agent is not registered on this box.")
 };
@@ -86564,7 +87062,7 @@ var createMeRouter = () => {
 		summary: "Read what the calling credential may do",
 		description: "The capability list of the credential this request arrived with — what Studio draws its owner/admin surfaces from — and its role, as a label the Studio copilot is told. A browser-direct caller gets the capabilities its identity token was signed with; a self-host operator and an ungated `stackbone dev` box get the full owner expansion, because on neither is there anything the box would refuse. Carries no capability gate of its own: it reveals nothing the caller does not already hold, and gating the answer on a capability would make the answer depend on the answer.",
 		responses: {
-			200: jsonResponse$1(named("CallerCapabilities", callerCapabilitiesSchema), "What this caller may do on this box."),
+			200: jsonResponse$2(named("CallerCapabilities", callerCapabilitiesSchema), "What this caller may do on this box."),
 			403: errorResponse("The credential is not a SEAT: a proxy signature, a workflow callback or a workspace API key. Each of those names a machine rather than a person, so there are no capabilities to report — an API key carries its own permission list, written on the key and checked by the invocation surface it was minted for.")
 		}
 	}), (c) => {
@@ -86689,6 +87187,68 @@ var resetFirstRun = async (opts) => {
 	await deleteSystemSecret(opts, FIRST_RUN_COMPLETED_SECRET);
 };
 //#endregion
+//#region ../../libs/runtime/workspace-runtime/src/lib/model-provider/livekit-test.ts
+init_src$18();
+init_livekit_token();
+init_error_message();
+init_provider_catalogues();
+/** Served by LiveKit itself, so a refusal is about the credentials, not an upstream. */
+var PROBE_MODEL = "google/gemma-4-31b-it";
+var testLiveKitInference = async (opts, fetchImpl = fetch) => {
+	let credentials;
+	try {
+		credentials = await readLiveKitCredentials(opts);
+	} catch (err) {
+		return {
+			ok: false,
+			error: `The Voice credentials cannot be read (${messageOf$6(err)}). Save them again under Voice.`
+		};
+	}
+	if (credentials === null) return {
+		ok: false,
+		error: "No LiveKit credentials are saved under Voice."
+	};
+	let response;
+	try {
+		response = await fetchImpl(`${LIVEKIT_INFERENCE_BASE_URL}/chat/completions`, {
+			method: "POST",
+			headers: {
+				authorization: `Bearer ${await signLiveKitInferenceToken(credentials)}`,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify({
+				model: PROBE_MODEL,
+				max_tokens: 1,
+				messages: [{
+					role: "user",
+					content: "ping"
+				}]
+			}),
+			redirect: "manual",
+			signal: AbortSignal.timeout(PROBE_TIMEOUT_MS$1)
+		});
+	} catch (err) {
+		return {
+			ok: false,
+			error: `LiveKit Inference could not be reached (${messageOf$6(err)}).`
+		};
+	}
+	await response.body?.cancel();
+	if (response.status === 401 || response.status === 403) return {
+		ok: false,
+		error: `LiveKit rejected the Voice credentials (HTTP ${response.status}). Check the API key and secret saved under Voice.`
+	};
+	if (!response.ok) return {
+		ok: false,
+		error: `LiveKit Inference answered HTTP ${response.status}.`
+	};
+	return {
+		ok: true,
+		model_count: fixedCatalogue("livekit", "https://agent-gateway.livekit.cloud/v1")?.length ?? 0,
+		key_checked: "verified"
+	};
+};
+//#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/model-provider/http/model-provider-handlers.ts
 init_src$26();
 init_provider_catalogues();
@@ -86735,13 +87295,15 @@ var STORE_REFUSAL_STATUS = {
 	invalid_id: 400,
 	not_found: 404,
 	duplicate: 409,
-	default_provider: 409
+	default_provider: 409,
+	voice_provider: 409
 };
 var STORE_REFUSAL_MESSAGE = {
 	invalid_id: (id) => `'${id}' is not a provider id: lowercase letters, digits and dashes, 2 to 32, starting with a letter.`,
 	not_found: (id) => `No model provider '${id}' is configured on this box.`,
 	duplicate: (id) => `A model provider '${id}' already exists.`,
-	default_provider: () => "Provider 1 is saved and removed by the model provider form itself, not by its id."
+	default_provider: () => "Provider 1 is saved and removed by the model provider form itself, not by its id.",
+	voice_provider: () => "LiveKit Inference is added by saving the LiveKit credentials under Voice, not here."
 };
 var storeRefusal = (err) => ({
 	code: `model_provider_${err.code}`,
@@ -86820,12 +87382,12 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 					baseUrl: provider.baseUrl,
 					apiKey: maskedApiKey(provider.apiKey !== void 0),
 					source: provider.source,
-					removable: !(provider.id === "default" && provider.source === "env"),
+					removable: provider.source !== "voice" && !(provider.id === "default" && provider.source === "env"),
 					responding: read?.responding ?? null,
 					...read?.error === void 0 ? {} : { error: read.error }
 				};
 			}),
-			duplicatedIds: duplicatedModelIds(orderedUnion(providers, catalogues))
+			duplicatedIds: duplicatedModelIds(orderedUnion(providers.filter(claimsPlainModelIds), catalogues))
 		};
 	};
 	const listModels = async (body) => {
@@ -86869,7 +87431,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		tags: [MODEL_PROVIDER_TAG],
 		summary: "Read the model provider configuration",
 		description: "The stored base URL and a MASKED key — the plaintext never rides back through this surface. `source` says which of the two the runtime is actually resolving: a `MODEL_PROVIDER_*` variable in the box's boot environment outranks anything this screen holds, and saying so is the difference between a screen that lies and one an operator can act on.",
-		responses: { 200: jsonResponse$1(modelProviderGetResponse, "The configuration, masked, and where the live value comes from.") }
+		responses: { 200: jsonResponse$2(modelProviderGetResponse, "The configuration, masked, and where the live value comes from.") }
 	}), async (c) => c.json(await getModelProvider(secretsOptions, bootEnv), 200));
 	app.openapi(createRoute({
 		method: "put",
@@ -86881,7 +87443,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		description: "Persists, then makes the credential LIVE on the running workspace, then re-registers whatever was degraded — in that order. Anything else and the operator is told the save worked while the workspace stays exactly as broken as it was, with a `stackbone dev` restart as the undocumented missing step. The reply carries the masked view and, when the runtime could act on it, how many agents came up.",
 		request: { body: jsonBody(modelProviderRequestBody, "The base URL, and the key when the gateway needs one.") },
 		responses: {
-			200: jsonResponse$1(modelProviderPutResponse, "The fresh masked view, plus what came up when the runtime could report it."),
+			200: jsonResponse$2(modelProviderPutResponse, "The fresh masked view, plus what came up when the runtime could report it."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("secrets:rotate")
 		}
@@ -86903,7 +87465,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		summary: "Remove the saved model provider",
 		description: "Deletes the base URL, key and gateway kind the Model provider screen stored, with the override flags beside them, and takes them off the running workspace. Every value the box exports is back in force at once, with no restart; the reply is the view afterwards, so `source` and `env_override` say what is still resolving and `overridden` is empty. The first-run marker is untouched.",
 		responses: {
-			200: jsonResponse$1(modelProviderGetResponse, "The view after the removal, naming whatever the environment still supplies."),
+			200: jsonResponse$2(modelProviderGetResponse, "The view after the removal, naming whatever the environment still supplies."),
 			403: forbiddenResponse("secrets:rotate")
 		}
 	}), async (c) => {
@@ -86926,7 +87488,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		description: "Drops the override flag on one slot (`baseUrl` or `apiKey`), so the variable the box exports for it is back in force on the running workspace. The value this screen saved is kept, and wins again only if the variable is unset. The reply is the view afterwards; a slot that was not overridden answers the view unchanged and records nothing.",
 		request: { params: modelProviderOverrideSlotPath },
 		responses: {
-			200: jsonResponse$1(modelProviderGetResponse, "The view after the override was dropped, naming the variable back in force."),
+			200: jsonResponse$2(modelProviderGetResponse, "The view after the override was dropped, naming the variable back in force."),
 			400: errorResponse("The slot is neither `baseUrl` nor `apiKey` (`invalid_payload`)."),
 			403: forbiddenResponse("secrets:rotate")
 		}
@@ -86948,7 +87510,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		summary: "Continue without a provider",
 		description: "Writes NO credential. It records the decision and releases the boot gate, so the agents come up DEGRADED — registered, visible, with an actionable reason — rather than the process sitting there waiting for a browser. The provider view rides back unchanged (`configured: false`), so the screen can say plainly that nothing is configured and mean it.",
 		responses: {
-			200: jsonResponse$1(modelProviderPutResponse, "The unchanged view, plus what came up degraded."),
+			200: jsonResponse$2(modelProviderPutResponse, "The unchanged view, plus what came up degraded."),
 			403: forbiddenResponse("secrets:rotate")
 		}
 	}), async (c) => {
@@ -86961,7 +87523,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		tags: [MODEL_PROVIDER_TAG],
 		summary: "Is this still the deployment’s first run?",
 		description: "A presence check on the marker, never a decrypted read. The guided screen asks before it starts walking somebody through a setup that is already done, and lands them on the ordinary configuration screen instead.",
-		responses: { 200: jsonResponse$1(modelProviderFirstRunResponse, "Whether somebody has already been through the guided first run.") }
+		responses: { 200: jsonResponse$2(modelProviderFirstRunResponse, "Whether somebody has already been through the guided first run.") }
 	}), async (c) => {
 		const state = await readFirstRunState(secretsOptions);
 		return c.json(state, 200);
@@ -86974,7 +87536,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		summary: "Make the guided first run eligible again",
 		description: "Clears the MARKER only — the saved credential is untouched, because re-walking the setup must not log the operator out of the configuration they already have. Answers with the state it left behind so the screen can relaunch the flow without a second round-trip.",
 		responses: {
-			200: jsonResponse$1(modelProviderFirstRunResponse, "The marker, now cleared."),
+			200: jsonResponse$2(modelProviderFirstRunResponse, "The marker, now cleared."),
 			403: forbiddenResponse("secrets:rotate")
 		}
 	}), async (c) => {
@@ -86991,7 +87553,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		description: "Calls `GET {base_url}/models` with the body's credential WITHOUT saving anything. A gateway that refuses rides back as `ok: false` DATA carrying a reason the operator can act on, never as an error status.",
 		request: { body: jsonBody(modelProviderRequestBody, "The candidate credential to probe.") },
 		responses: {
-			200: jsonResponse$1(modelProviderTestResponse, "Whether the gateway answered, and why not when it did not."),
+			200: jsonResponse$2(modelProviderTestResponse, "Whether the gateway answered, and why not when it did not."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("secrets:rotate")
 		}
@@ -87004,7 +87566,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		description: "A POST because the body may carry a DRAFT credential the operator has not saved yet. With a `base_url` it probes that endpoint; with an empty body it resolves the SAVED provider server-side, which is how the stored key stays out of the browser. With an empty body on a box with providers beside provider 1, it lists every provider's models, each tagged with the `provider` that serves it, and fails only when no provider answers.",
 		request: { body: jsonBody(named("ModelProviderModelsRequest", modelProviderModelsRequestSchema), "The draft endpoint to probe, or `{}` to use the saved providers.") },
 		responses: {
-			200: jsonResponse$1(named("ModelProviderModelsResponse", modelProviderModelsResponseSchema), "The models the providers advertise, normalized."),
+			200: jsonResponse$2(named("ModelProviderModelsResponse", modelProviderModelsResponseSchema), "The models the providers advertise, normalized."),
 			400: errorResponse("The body failed its schema (`invalid_payload`).")
 		}
 	}), async (c) => c.json(await listModels(c.req.valid("json")), 200));
@@ -87014,7 +87576,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		tags: [MODEL_PROVIDER_TAG],
 		summary: "List the model providers",
 		description: "Provider 1 and every provider added beside it, provider 1 first, each catalogue read now. Keys are masked. `responding: false` is a provider whose read failed. `duplicatedIds` names every model id two providers serve: a call naming one is refused as ambiguous. Provider 1's own view stays `GET /api/model-provider`.",
-		responses: { 200: jsonResponse$1(modelProviderList, "Every provider, masked, and the ids two serve.") }
+		responses: { 200: jsonResponse$2(modelProviderList, "Every provider, masked, and the ids two serve.") }
 	}), async (c) => c.json(await providerList(), 200));
 	app.openapi(createRoute({
 		method: "post",
@@ -87026,10 +87588,10 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		description: "Saves a provider beside provider 1. From the next call on, a model only it lists is routed to it; a model another provider lists too is refused as ambiguous, which `duplicatedIds` in the reply names. The reply is the list.",
 		request: { body: jsonBody(named("ModelProviderCreateRequest", modelProviderCreateRequestSchema), "The id, name, gateway kind and endpoint, and the key when the gateway needs one.") },
 		responses: {
-			201: jsonResponse$1(modelProviderList, "The list with the new provider."),
+			201: jsonResponse$2(modelProviderList, "The list with the new provider."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("secrets:rotate"),
-			409: errorResponse("A provider with this id exists (`model_provider_duplicate`).")
+			409: errorResponse("A provider with this id exists (`model_provider_duplicate`), or it is LiveKit Inference, which Voice adds (`model_provider_voice_provider`).")
 		}
 	}), async (c) => {
 		const body = c.req.valid("json");
@@ -87052,7 +87614,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 			body: jsonBody(named("ModelProviderUpdateRequest", modelProviderUpdateRequestSchema), "The name, gateway kind and endpoint, and the key only to replace or clear it.")
 		},
 		responses: {
-			200: jsonResponse$1(modelProviderList, "The list with the provider as saved."),
+			200: jsonResponse$2(modelProviderList, "The list with the provider as saved."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the id is not a slug (`model_provider_invalid_id`)."),
 			403: forbiddenResponse("secrets:rotate"),
 			404: errorResponse("No provider has this id (`model_provider_not_found`)."),
@@ -87082,7 +87644,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		description: "Deletes an extra provider and its key. Its models leave the list and stop routing at once. Provider 1 is removed by `DELETE /api/model-provider`, and one the box exports cannot be removed here (D6), so `default` is refused. The reply is the list.",
 		request: { params: modelProviderIdPath },
 		responses: {
-			200: jsonResponse$1(modelProviderList, "The list without the provider."),
+			200: jsonResponse$2(modelProviderList, "The list without the provider."),
 			400: errorResponse("The id is not a slug (`model_provider_invalid_id`)."),
 			403: forbiddenResponse("secrets:rotate"),
 			404: errorResponse("No provider has this id (`model_provider_not_found`)."),
@@ -87102,10 +87664,10 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		tags: [MODEL_PROVIDER_TAG],
 		middleware: [requireCapability("secrets:rotate")],
 		summary: "Probe one saved model provider",
-		description: "Calls `GET {baseUrl}/models` on that provider alone, with its stored key, and nothing else. `default` probes provider 1 with the credential in effect. A gateway that refuses rides back as `ok: false` DATA, never as an error status.",
+		description: "Calls `GET {baseUrl}/models` on that provider alone, with its stored key, and nothing else. `default` probes provider 1 with the credential in effect. LiveKit Inference, which has no key and lists nothing, is probed with a one-token chat signed with the Voice credentials. A gateway that refuses rides back as `ok: false` DATA, never as an error status.",
 		request: { params: modelProviderIdPath },
 		responses: {
-			200: jsonResponse$1(modelProviderTestResponse, "Whether the gateway answered, and why not when it did not."),
+			200: jsonResponse$2(modelProviderTestResponse, "Whether the gateway answered, and why not when it did not."),
 			403: forbiddenResponse("secrets:rotate"),
 			404: errorResponse("No provider has this id (`model_provider_not_found`).")
 		}
@@ -87113,6 +87675,7 @@ var createModelProviderRouter = (secretsOptions, bootEnv = {}, live = {}) => {
 		const { id } = c.req.valid("param");
 		const provider = (await listProviders(secretsOptions, bootEnv)).find((p) => p.id === id);
 		if (!provider) return c.json(storeRefusal(new ProviderStoreError("not_found", id)), 404);
+		if (provider.kind === "livekit") return c.json(await testLiveKitInference(secretsOptions), 200);
 		return c.json(await testModelProviderConnection({
 			base_url: provider.baseUrl,
 			api_key: provider.apiKey ?? null
@@ -87348,7 +87911,7 @@ var createModelSelectionsRouter = (opts) => {
 		tags: [MODEL_SELECTIONS_TAG],
 		summary: "List the model selections",
 		description: "Every model an operator picked on this box, of every owner, ordered by owner then key. A key with no row runs on its code default. Capped at 500 rows.",
-		responses: { 200: jsonResponse$1(named("StudioModelSelectionListResponse", studioModelSelectionListResponseSchema), "Every pick on this box.") }
+		responses: { 200: jsonResponse$2(named("StudioModelSelectionListResponse", studioModelSelectionListResponseSchema), "Every pick on this box.") }
 	}), async (c) => {
 		const rows = await opts.db.select().from(modelSelections).orderBy(modelSelections.ownerKind, modelSelections.ownerName, modelSelections.key).limit(LIST_PAGE_SIZE);
 		return c.json({ items: rows.map(rowToSelection) }, 200);
@@ -87365,7 +87928,7 @@ var createModelSelectionsRouter = (opts) => {
 			body: jsonBody(named("PutStudioModelSelectionRequest", putStudioModelSelectionRequestSchema), "The model id, as the model provider names it, and optionally the provider it goes to.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioModelSelection", studioModelSelectionSchema), "The pick as it now stands."),
+			200: jsonResponse$2(named("StudioModelSelection", studioModelSelectionSchema), "The pick as it now stands."),
 			400: errorResponse(`The body failed its schema, or ${PATH_REFUSAL}`),
 			403: forbiddenResponse("config:write")
 		}
@@ -87418,7 +87981,7 @@ var createModelSelectionsRouter = (opts) => {
 		description: "Deletes the pick, so the key runs on the code's default model again — or on the box's `defaultModel` when the code declares none.",
 		request: { params: studioModelSelectionPathSchema },
 		responses: {
-			200: jsonResponse$1(named("StudioModelSelectionDeleteResponse", studioModelSelectionDeleteResponseSchema), "The pick that was removed."),
+			200: jsonResponse$2(named("StudioModelSelectionDeleteResponse", studioModelSelectionDeleteResponseSchema), "The pick that was removed."),
 			400: errorResponse(PATH_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse("No model is picked for that owner and key (`studio_model_selection_not_found`).")
@@ -87453,7 +88016,7 @@ var createModelSelectionsRouter = (opts) => {
 			body: jsonBody(named("PutStudioModelRoutingRequest", putStudioModelRoutingRequestSchema), "The provider routing, or a plain sort.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioModelRouting", studioModelRoutingSchema), "The routing as it now stands."),
+			200: jsonResponse$2(named("StudioModelRouting", studioModelRoutingSchema), "The routing as it now stands."),
 			400: errorResponse(`The body failed its schema, or ${ROUTING_PATH_REFUSAL}`),
 			403: forbiddenResponse("config:write")
 		}
@@ -87507,7 +88070,7 @@ var createModelSelectionsRouter = (opts) => {
 		description: "Deletes the routing, so the key runs on the code's `modelRouting` again: for a subagent with none, the agent's routing; else OpenRouter's default routing.",
 		request: { params: studioModelRoutingPathSchema },
 		responses: {
-			200: jsonResponse$1(named("StudioModelRoutingDeleteResponse", studioModelRoutingDeleteResponseSchema), "The routing that was removed."),
+			200: jsonResponse$2(named("StudioModelRoutingDeleteResponse", studioModelRoutingDeleteResponseSchema), "The routing that was removed."),
 			400: errorResponse(ROUTING_PATH_REFUSAL),
 			403: forbiddenResponse("config:write"),
 			404: errorResponse("No provider routing is picked for that agent and key (`studio_model_routing_not_found`).")
@@ -87567,7 +88130,7 @@ var createTelemetryExportRouter = (deps) => {
 		tags: [TELEMETRY_EXPORT_TAG],
 		summary: "Read the OTLP export posture",
 		description: "Whether an export endpoint is configured, whether the box is actually exporting, the one line the boot logged about it, and how many records never reached the collector. The endpoint itself is never in the answer — a collector URL routinely carries a token, and this read is open to every seat that can open settings.",
-		responses: { 200: jsonResponse$1(named("TelemetryExportPosture", telemetryExportPostureSchema), "The export posture, and what the export has lost.") }
+		responses: { 200: jsonResponse$2(named("TelemetryExportPosture", telemetryExportPostureSchema), "The export posture, and what the export has lost.") }
 	}), async (c) => {
 		const state = await deps.readState();
 		return c.json({
@@ -87696,7 +88259,7 @@ var createQueuesHandlers = () => {
 		tags: [AGENT_QUEUES_TAG],
 		summary: "List the agent-registered cron schedules (retired)",
 		description: "RETIRED, and deliberately empty FOREVER — not \"empty because nothing is scheduled\". This box's real recurring schedules are read at `GET /api/recurring-jobs`, which reports every declared cadence (workflow crons, one polling repeatable per intake link, the connection-refresh sweep) with its next fire time. Never wire a screen to this one.",
-		responses: { 200: jsonResponse$1(named("ListSchedulesResponse", listSchedulesResponseSchema), "Always `{ \"items\": [] }`.") }
+		responses: { 200: jsonResponse$2(named("ListSchedulesResponse", listSchedulesResponseSchema), "Always `{ \"items\": [] }`.") }
 	}), (c) => c.json({ items: [] }, 200));
 	const queues = new OpenAPIHono({ defaultHook: invalidPayloadHook });
 	queues.openapi(createRoute({
@@ -87705,7 +88268,7 @@ var createQueuesHandlers = () => {
 		tags: [QUEUES_TAG],
 		summary: "List the queues (retired)",
 		description: `The Queues Inspector sidebar. ${RETIRED} There are no queues to report, so the list is empty.`,
-		responses: { 200: jsonResponse$1(named("QueueListResponse", queueListResponseSchema), "Always `{ \"items\": [] }`.") }
+		responses: { 200: jsonResponse$2(named("QueueListResponse", queueListResponseSchema), "Always `{ \"items\": [] }`.") }
 	}), (c) => c.json({ items: [] }, 200));
 	queues.openapi(createRoute({
 		method: "get",
@@ -87718,7 +88281,7 @@ var createQueuesHandlers = () => {
 			query: peekQueueQuerySchema
 		},
 		responses: {
-			200: jsonResponse$1(named("PeekQueueResponse", peekQueueResponseSchema), "Always `{ \"items\": [] }`."),
+			200: jsonResponse$2(named("PeekQueueResponse", peekQueueResponseSchema), "Always `{ \"items\": [] }`."),
 			400: errorResponse("The queue name is not a BullMQ queue identifier, or the `limit` is outside [1, 50] (`invalid_payload`).")
 		}
 	}), (c) => c.json({ items: [] }, 200));
@@ -87732,7 +88295,7 @@ var createQueuesHandlers = () => {
 		description: `Drops every removable job — an active one stays, a worker holds it. ${RETIRED} There is nothing to remove, so the count is zero.`,
 		request: { params: queueNameParamsSchema },
 		responses: {
-			200: jsonResponse$1(named("PurgeQueueResponse", purgeQueueResponseSchema), "Always `{ \"purged\": 0 }`."),
+			200: jsonResponse$2(named("PurgeQueueResponse", purgeQueueResponseSchema), "Always `{ \"purged\": 0 }`."),
 			400: errorResponse("The queue name is not a BullMQ queue identifier (`invalid_payload`)."),
 			403: forbiddenResponse("runs:invoke")
 		}
@@ -87763,7 +88326,7 @@ var createQueuesHandlers = () => {
 		description: `The Jobs table. \`queue\` is REQUIRED — a BullMQ queue scopes its jobs, so there is no "all jobs" to list. ${RETIRED} There are no jobs to report, so the page is empty.`,
 		request: { query: listJobsQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("JobListResponse", jobListResponseSchema), "Always `{ \"items\": [], \"nextCursor\": null }`."),
+			200: jsonResponse$2(named("JobListResponse", jobListResponseSchema), "Always `{ \"items\": [], \"nextCursor\": null }`."),
 			400: errorResponse("The query failed its schema — a missing or malformed `queue` included (`invalid_payload`).")
 		}
 	}), (c) => c.json({
@@ -89723,7 +90286,7 @@ function mountRagRebuildRoutes(app, resolve) {
 		summary: "Read collection rebuild status",
 		request: { params },
 		responses: {
-			200: jsonResponse$1(named("RagRebuildStatusResponse", ragRebuildStatusResponseSchema), "Current and target identity, World lifecycle and retained progress; null before the first rebuild."),
+			200: jsonResponse$2(named("RagRebuildStatusResponse", ragRebuildStatusResponseSchema), "Current and target identity, World lifecycle and retained progress; null before the first rebuild."),
 			400: errors$1[400],
 			404: errors$1[404],
 			409: errors$1[409],
@@ -89756,7 +90319,7 @@ function mountRagRebuildRoutes(app, resolve) {
 			body: jsonBody(named("ChangeRagEmbeddingRequest", changeRagEmbeddingRequestSchema), "Target provider and model.")
 		},
 		responses: {
-			202: jsonResponse$1(named("RagRebuildStatus", ragRebuildStatusSchema), "Accepted logical rebuild and its current durable state."),
+			202: jsonResponse$2(named("RagRebuildStatus", ragRebuildStatusSchema), "Accepted logical rebuild and its current durable state."),
 			...errors$1
 		}
 	}), async (c) => {
@@ -89785,7 +90348,7 @@ function mountRagRebuildRoutes(app, resolve) {
 			body: jsonBody(named("RetryRagRebuildRequest", retryRagRebuildRequestSchema), "The logical rebuild to resume.")
 		},
 		responses: {
-			202: jsonResponse$1(named("RagRebuildStatus", ragRebuildStatusSchema), "Same logical rebuild, new fenced attempt."),
+			202: jsonResponse$2(named("RagRebuildStatus", ragRebuildStatusSchema), "Same logical rebuild, new fenced attempt."),
 			...errors$1
 		}
 	}), async (c) => {
@@ -89951,7 +90514,7 @@ var createRagRouter = (deps) => {
 		summary: "List the collections in this agent",
 		description: "Every row of `stackbone_rag_collections`, with the counts and the index metadata the Studio explorer renders. The counts come from the documents and chunks tables, so an empty collection created before its first ingest reads `0` with a null `last_ingested_at`.",
 		responses: {
-			200: jsonResponse$1(named("RagCollectionListResponse", ragCollectionListResponseSchema), "The collections, each with its dimensions, distance metric and counts."),
+			200: jsonResponse$2(named("RagCollectionListResponse", ragCollectionListResponseSchema), "The collections, each with its dimensions, distance metric and counts."),
 			409: errorResponse("The canonical `stackbone_rag_*` schema is not installed on this agent (`rag_schema_missing`). Studio gates its write affordances off THIS read rather than on an empty list, so the refusal is structured instead of an empty page.")
 		}
 	}), async (c) => {
@@ -89974,7 +90537,7 @@ var createRagRouter = (deps) => {
 			query: listRagDocsQuerySchema
 		},
 		responses: {
-			200: jsonResponse$1(named("RagDocumentListResponse", ragDocumentListResponseSchema), "One page of documents, and the cursor for the next."),
+			200: jsonResponse$2(named("RagDocumentListResponse", ragDocumentListResponseSchema), "One page of documents, and the cursor for the next."),
 			400: errorResponse("The query string failed its schema, or `filter` is not a JSON object this store can match (`invalid_payload`)."),
 			404: errorResponse("The `{name}` segment is not a collection name this box can read (`rag_collection_not_found`).")
 		}
@@ -90006,7 +90569,7 @@ var createRagRouter = (deps) => {
 			body: jsonBody(named("RagQueryRequest", ragQueryRequestSchema), "The query: `text` to embed server-side, or an `embedding` to search with directly, optional metadata `filter` and typed `ranges`, `hybrid: false` to search by meaning only, and optionally a `preview` that searches as if that version of a document were published.")
 		},
 		responses: {
-			200: jsonResponse$1(named("RagQueryResponse", ragQueryResponseSchema), "The hits, closest first (in fused order on a hybrid search), with the dimensions searched at and the model that embedded the query (null when the caller supplied the vector)."),
+			200: jsonResponse$2(named("RagQueryResponse", ragQueryResponseSchema), "The hits, closest first (in fused order on a hybrid search), with the dimensions searched at and the model that embedded the query (null when the caller supplied the vector)."),
 			400: errorResponse("Invalid metadata `ranges` are `rag_invalid_request`. Other body schema failures, including neither `text` nor `embedding` or an invalid `preview`, remain `invalid_payload`. An `embedding` with a different width than the collection returns `rag_dim_mismatch`, with `expected` and `received` under `details`."),
 			404: errorResponse("No such collection, or this agent has no RAG schema at all (`rag_collection_not_found`) — or `preview` names no document in it (`rag_document_not_found`) or a version that document never had (`rag_document_version_not_found`)."),
 			409: errorResponse("The explicit model conflicts with the collection (`rag_embedding_conflict`), or its embeddings are rebuilding or failed (`rag_collection_unavailable`)."),
@@ -90066,7 +90629,7 @@ var createRagRouter = (deps) => {
 		description: "The jobs an upload enqueues, newest first. Since feature 76 an ingest is a durable `rag-ingest` WORKFLOW RUN rather than a `rag_jobs` row, so this projects those runs onto the job shape the CLI and Studio have always read — same field names, same status vocabulary. `attempts` is therefore always 0: a retry starts a NEW run rather than incrementing a counter on this one.\n\n`collection` filters the page AFTER it is read (the runs query filters by entity, not by the workflow input), so a page can come back shorter than `limit` with a cursor still set.",
 		request: { query: listRagJobsQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("RagJobListResponse", ragJobListResponseSchema.extend({ items: z.array(RAG_JOB) })), "One page of ingest jobs, and the cursor for the next."),
+			200: jsonResponse$2(named("RagJobListResponse", ragJobListResponseSchema.extend({ items: z.array(RAG_JOB) })), "One page of ingest jobs, and the cursor for the next."),
 			400: errorResponse("The query string failed its schema (`invalid_payload`).")
 		}
 	}), async (c) => {
@@ -90094,7 +90657,7 @@ var createRagRouter = (deps) => {
 		description: "Flips the ingest RUN `running → cancelled`, closing its open steps. The status is final: nothing reopens the run. State-only, like the generic runs cancel: the World worker carries no live cancel signal yet, so an ingest that is ACTIVELY mid-flight keeps executing in the background, and whatever it writes afterwards does not change the job. A run that is not a `rag-ingest` workflow run answers 404 and keeps running.",
 		request: { params: jobPath },
 		responses: {
-			200: jsonResponse$1(RAG_JOB_ACTION_RESPONSE, "The job and the status it now holds."),
+			200: jsonResponse$2(RAG_JOB_ACTION_RESPONSE, "The job and the status it now holds."),
 			403: forbiddenResponse("rag:write", "rag:review"),
 			404: errorResponse("No such ingest run, a run that is not one, or a `{jobId}` this box cannot read as an id (`rag_job_not_found`)."),
 			409: errorResponse("The job already reached a terminal state (`rag_job_not_cancelable`), with the state it holds under `details.state`.")
@@ -90128,7 +90691,7 @@ var createRagRouter = (deps) => {
 		description: "Creates an empty collection. With embedding_provider and embedding_model, probes that saved provider through the box, derives a valid storage dimension and initializes its search mode before saving. Provider and probe failures save nothing. Name-only requests keep the default provider, openai/text-embedding-3-small and 1536 dimensions without a network probe, unless the model provider is known not to serve that model: then the collection gets the first embedding model it serves, pinned to its provider, and that model is probed for its dimension. When the model provider lists neither that model nor any embedding model, a name-only request is refused and saves nothing. hybrid_enabled turns on hybrid search (meaning plus exact terms such as product codes) and number_format (eu or us) sets how it reads numbers and dates; omitted, hybrid search is off and the format is eu. extract_enabled defaults to false and extract_fields to an empty list; each field has a name, a number/date/text type and an optional removed flag.",
 		request: { body: jsonBody(named("CreateRagCollectionRequest", createRagCollectionRequestSchema), "The collection name, any org-defined metadata to hang on it, its embedding model and its hybrid search settings.") },
 		responses: {
-			201: jsonResponse$1(named("CreateRagCollectionResponse", createRagCollectionResponseSchema), "The collection as the list endpoint would report it, with zero counts."),
+			201: jsonResponse$2(named("CreateRagCollectionResponse", createRagCollectionResponseSchema), "The collection as the list endpoint would report it, with zero counts."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), a collection of that name already exists (`rag_collection_already_exists`), or the request names no embedding model and the model provider lists none (`rag_embedding_model_required`: pass embedding_provider and embedding_model). The duplicate is a 400 and NOT a 409, unlike its already-exists siblings on this surface — the status has been 400 since the cloud surface this mirrors, and Studio keys on the code."),
 			403: forbiddenResponse("rag:write"),
 			502: errorResponse("The selected provider/model could not produce a valid embedding (`rag_embedding_probe_failed`), including missing/down providers, timeout or an invalid/storage-incompatible vector."),
@@ -90156,7 +90719,7 @@ var createRagRouter = (deps) => {
 			body: jsonBody(named("UpdateRagCollectionRequest", updateRagCollectionRequestSchema), "The settings to change. At least one of them; an omitted one keeps its value.")
 		},
 		responses: {
-			200: jsonResponse$1(named("UpdateRagCollectionResponse", updateRagCollectionResponseSchema), "The saved collection settings; extraction changes also report unconverted."),
+			200: jsonResponse$2(named("UpdateRagCollectionResponse", updateRagCollectionResponseSchema), "The saved collection settings; extraction changes also report unconverted."),
 			400: errorResponse("The body is empty, names an unknown key, number_format or field type (`invalid_payload`)."),
 			403: forbiddenResponse("rag:write"),
 			404: errorResponse("No such collection, or a `{name}` this box cannot read as a collection name (`rag_collection_not_found`). A box older than this route answers 404 `not_found` instead."),
@@ -90184,7 +90747,7 @@ var createRagRouter = (deps) => {
 		description: "Drops the collection with its documents, its chunks and the originals staged under the reserved `rag/` storage prefix. Not reversible, and not a soft delete.",
 		request: { params: collectionPath },
 		responses: {
-			200: jsonResponse$1(named("DeleteRagCollectionResponse", deleteRagCollectionResponseSchema), "The name that was dropped."),
+			200: jsonResponse$2(named("DeleteRagCollectionResponse", deleteRagCollectionResponseSchema), "The name that was dropped."),
 			403: forbiddenResponse("rag:write"),
 			404: errorResponse("No such collection, or a `{name}` this box cannot read as a collection name (`rag_collection_not_found`)."),
 			409: errorResponse("The canonical `stackbone_rag_*` schema is not installed on this agent (`rag_schema_missing`), or this collection is paused (`rag_collection_unavailable`).")
@@ -90212,7 +90775,7 @@ var createRagRouter = (deps) => {
 			body: multipartBody(named("UploadRagDocumentForm", uploadFormSchema$1), "The source bytes, the name to file them under, and their content type.")
 		},
 		responses: {
-			200: jsonResponse$1(named("UploadRagDocumentResponse", uploadRagDocumentResponseSchema), "The enqueued ingest job: the id to poll, the status it starts in, and the version the upload became."),
+			200: jsonResponse$2(named("UploadRagDocumentResponse", uploadRagDocumentResponseSchema), "The enqueued ingest job: the id to poll, the status it starts in, and the version the upload became."),
 			400: errorResponse("The body is not `multipart/form-data`, or it is missing `file`, `filename` or `content_type` — or sent `file` as ordinary text, or a `content_type` outside the three supported source formats, or a `metadata` that parses to something other than a JSON object (`invalid_payload`)."),
 			403: errorResponse("The caller's role grants neither `rag:write` nor `rag:review` (`forbidden`), or grants `rag:review` alone and the form has no `replaces`: only `rag:write` starts a new document. Only reachable on the browser-direct datapath — a proxy-signed call was authorized before it was signed."),
 			404: errorResponse("No such collection, or a `{name}` this box cannot read as a collection name (`rag_collection_not_found`) — or `replaces` names no document in it (`rag_document_not_found`)."),
@@ -90261,7 +90824,7 @@ var createRagRouter = (deps) => {
 		description: "Removes the document with every version of it, whichever version `{docId}` names: every chunk they produced and every original staged under the reserved `rag/` prefix. The collection itself stays.",
 		request: { params: collectionDocPath },
 		responses: {
-			200: jsonResponse$1(named("DeleteRagDocumentResponse", deleteRagDocumentResponseSchema), "The document id that was removed, and the collection it left."),
+			200: jsonResponse$2(named("DeleteRagDocumentResponse", deleteRagDocumentResponseSchema), "The document id that was removed, and the collection it left."),
 			403: forbiddenResponse("rag:write"),
 			404: errorResponse("No such collection or a `{name}` this box cannot read (`rag_collection_not_found`), or no such document in it (`rag_document_not_found`)."),
 			409: errorResponse("The canonical `stackbone_rag_*` schema is not installed on this agent (`rag_schema_missing`), or this collection is paused (`rag_collection_unavailable`).")
@@ -90287,7 +90850,7 @@ var createRagRouter = (deps) => {
 		description: "Mints a short-lived signed URL for the original staged under the reserved `rag/` prefix, plus the filename and content type the browser needs to name the download. A POST rather than a GET because it MINTS a credential; it reads nothing back into the response body.",
 		request: { params: collectionDocPath },
 		responses: {
-			200: jsonResponse$1(named("DownloadRagDocumentResponse", downloadRagDocumentResponseSchema), "The signed URL and the metadata to name the file with."),
+			200: jsonResponse$2(named("DownloadRagDocumentResponse", downloadRagDocumentResponseSchema), "The signed URL and the metadata to name the file with."),
 			403: forbiddenResponse("rag:write", "rag:review"),
 			404: errorResponse("No such collection or a `{name}` this box cannot read (`rag_collection_not_found`), or no such document in it (`rag_document_not_found`)."),
 			409: errorResponse("The canonical `stackbone_rag_*` schema is not installed on this agent (`rag_schema_missing`).")
@@ -90316,7 +90879,7 @@ var createRagRouter = (deps) => {
 			body: jsonBody(named("ExtractRagDocumentRequest", extractRagDocumentRequestSchema), "An optional document version; omitted selects the published version.")
 		},
 		responses: {
-			200: jsonResponse$1(named("ExtractRagDocumentResponse", extractRagDocumentResponseSchema), "The proposal, whether extraction failed, and whether the middle was skipped."),
+			200: jsonResponse$2(named("ExtractRagDocumentResponse", extractRagDocumentResponseSchema), "The proposal, whether extraction failed, and whether the middle was skipped."),
 			400: errorResponse("The request body failed schema validation (invalid_payload)."),
 			403: forbiddenResponse("rag:write"),
 			404: errorResponse("No such collection (rag_collection_not_found), document (rag_document_not_found), or version (rag_document_version_not_found)."),
@@ -90351,7 +90914,7 @@ var createRagRouter = (deps) => {
 			body: jsonBody(named("UpdateRagDocumentValuesRequest", updateRagDocumentValuesRequestSchema), "The values to merge, an optional version, and optional field definitions to add.")
 		},
 		responses: {
-			200: jsonResponse$1(named("UpdateRagDocumentValuesResponse", updateRagDocumentValuesResponseSchema), "The saved version and its merged metadata."),
+			200: jsonResponse$2(named("UpdateRagDocumentValuesResponse", updateRagDocumentValuesResponseSchema), "The saved version and its merged metadata."),
 			400: errorResponse("A malformed body is invalid_payload; an unknown field or a value that does not match its field type is rag_invalid_request."),
 			403: forbiddenResponse("rag:write"),
 			404: errorResponse("No such collection (rag_collection_not_found), document (rag_document_not_found), or requested or published version (rag_document_version_not_found)."),
@@ -90377,7 +90940,7 @@ var createRagRouter = (deps) => {
 		description: "Every version of the document `{docId}` names (the id of any one of its versions), newest first, in one page. `is_active` marks the version the agent reads. `ready` says whether publishing a version is accepted: it has chunks, and its newest ingest, if any, succeeded. `ingest_status` alone does not say that, because an ingest can succeed and write no chunk.",
 		request: { params: collectionDocPath },
 		responses: {
-			200: jsonResponse$1(named("RagDocumentVersionListResponse", ragDocumentVersionListResponseSchema), "Every version of the document, newest first."),
+			200: jsonResponse$2(named("RagDocumentVersionListResponse", ragDocumentVersionListResponseSchema), "Every version of the document, newest first."),
 			404: errorResponse("No such collection or a `{name}` this box cannot read (`rag_collection_not_found`), or no such document in it (`rag_document_not_found`)."),
 			409: errorResponse("The canonical `stackbone_rag_*` schema is not installed on this agent (`rag_schema_missing`).")
 		}
@@ -90403,7 +90966,7 @@ var createRagRouter = (deps) => {
 		description: "Makes `{version}` the version of the document the agent reads, `{docId}` being the id of any of its versions. Publishing an earlier version is the rollback. Every version keeps its own chunks, so nothing is re-embedded: the published flag moves under a lock on the document, and the version it leaves stays in the history.\n\nPublishing the version already published changes nothing and answers `changed: false`. A version with no chunks, or whose newest ingest did not succeed, is refused: publishing it would take the document away from the agent.",
 		request: { params: collectionDocVersionPath },
 		responses: {
-			200: jsonResponse$1(named("ActivateRagDocumentVersionResponse", activateRagDocumentVersionResponseSchema), "The version now published, the one published before, and whether anything changed."),
+			200: jsonResponse$2(named("ActivateRagDocumentVersionResponse", activateRagDocumentVersionResponseSchema), "The version now published, the one published before, and whether anything changed."),
 			403: forbiddenResponse("rag:write"),
 			404: errorResponse("No such collection or a `{name}` this box cannot read (`rag_collection_not_found`), no such document in it (`rag_document_not_found`), or no such version of it, a `{version}` that is not a positive integer included (`rag_document_version_not_found`)."),
 			409: errorResponse("The version is not ready to publish: it has no chunks, or its newest ingest did not succeed (`rag_version_not_ready`, with that `version` under `details`). Or the canonical `stackbone_rag_*` schema is not installed on this agent (`rag_schema_missing`). A paused collection answers `rag_collection_unavailable`.")
@@ -90432,7 +90995,7 @@ var createRagRouter = (deps) => {
 		description: "Removes `{version}` of the document `{docId}` names (the id of any of its versions): its row, every chunk it produced and its original staged under the reserved `rag/` prefix. The published version and every other version stay. The published version is refused: publish another one first, or delete the whole document.",
 		request: { params: collectionDocVersionPath },
 		responses: {
-			200: jsonResponse$1(named("DeleteRagDocumentVersionResponse", deleteRagDocumentVersionResponseSchema), "The id of the version that was removed, its number, and the collection it left."),
+			200: jsonResponse$2(named("DeleteRagDocumentVersionResponse", deleteRagDocumentVersionResponseSchema), "The id of the version that was removed, its number, and the collection it left."),
 			403: forbiddenResponse("rag:write", "rag:review"),
 			404: errorResponse("No such collection or a `{name}` this box cannot read (`rag_collection_not_found`), no such document in it (`rag_document_not_found`), or no such version of it, a `{version}` that is not a positive integer included (`rag_document_version_not_found`)."),
 			409: errorResponse("The version is the published one (`rag_version_active`), or its ingest is still queued or running (`rag_version_ingesting`), each with that `version` under `details`. Or the canonical `stackbone_rag_*` schema is not installed on this agent (`rag_schema_missing`). A paused collection answers `rag_collection_unavailable`.")
@@ -90460,7 +91023,7 @@ var createRagRouter = (deps) => {
 		description: "RE-RUNS the `rag-ingest` workflow over the failed run's stored input — the original is still staged under the reserved `rag/` prefix — so this is an actual re-ingest and not a row flip. Idempotent: the workflow's persist replaces the document in place. The answer carries the NEW run's id; the failed one keeps its own history. A run that is not a `rag-ingest` workflow run answers 404 and starts nothing.",
 		request: { params: jobPath },
 		responses: {
-			200: jsonResponse$1(RAG_JOB_ACTION_RESPONSE, "The NEW ingest run, queued."),
+			200: jsonResponse$2(RAG_JOB_ACTION_RESPONSE, "The NEW ingest run, queued."),
 			403: forbiddenResponse("rag:write", "rag:review"),
 			404: errorResponse("No such ingest run, a run that is not one, or a `{jobId}` this box cannot read as an id (`rag_job_not_found`)."),
 			409: errorResponse("The run did not fail, so there is nothing to retry (`rag_job_not_retryable`, with the state it holds under `details.state`) — or it failed but its stored input is incomplete, or the `rag-ingest` workflow runtime is not armed on this box, or the collection is paused (`rag_collection_unavailable`).")
@@ -90811,7 +91374,7 @@ var createRunsRouter = (deps) => {
 		description: "Cursor-paginated, newest first unless `order=asc`, filterable by status, trigger, entity name and kind, session, a `created_at` window and one `key:value` run tag (`tag`, an exact match on `metadata.tags`); `system=exclude` leaves out the runs of the entries the platform installed for itself. A pure READ: listing an open run never reconciles it — closing a finished workflow run is the background sweep's job, so this route never contends with the projector's writes.",
 		request: { query: listRunsQuery },
 		responses: {
-			200: jsonResponse$1(named("RunListResponse", runListResponseSchema), "One page of runs, and the cursors either side of it."),
+			200: jsonResponse$2(named("RunListResponse", runListResponseSchema), "One page of runs, and the cursors either side of it."),
 			400: errorResponse("The query failed its schema (`invalid_payload`), or the cursor is not one this box issued (`invalid_cursor`).")
 		}
 	}), async (c) => {
@@ -90832,7 +91395,7 @@ var createRunsRouter = (deps) => {
 		description: "The distinct entities present in this box's runs, feeding the Runs screen's name dropdown. TWO lists off ONE read so they can never disagree: `entries` keys each entity by (name, kind) — two same-named entries of different kinds are two rows — and `names` keeps the flat, pre-`entity_kind` shape for a Studio bundle that predates the kind. An entity that has never run does not appear. `system=exclude` leaves out the entries the platform installed for itself, as the list read does.",
 		request: { query: runEntityNamesQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("RunEntityNamesResponse", runEntityNamesResponseSchema), "Every entity name present in the runs, and the (name, kind) pairs behind them."),
+			200: jsonResponse$2(named("RunEntityNamesResponse", runEntityNamesResponseSchema), "Every entity name present in the runs, and the (name, kind) pairs behind them."),
 			400: errorResponse("The query failed its schema (`invalid_payload`).")
 		}
 	}), async (c) => {
@@ -90851,7 +91414,7 @@ var createRunsRouter = (deps) => {
 		description: "The run row as it now stands: status, trigger, timings, the input it started from, the output or error it ended with, and the token counters a chat turn folded onto it.",
 		request: { params: runIdPath },
 		responses: {
-			200: jsonResponse$1(named("Run", runSchema), "The run as it now stands."),
+			200: jsonResponse$2(named("Run", runSchema), "The run as it now stands."),
 			404: errorResponse("No such run (`run_not_found`) — or an id that is not an id at all.")
 		}
 	}), async (c) => {
@@ -90870,7 +91433,7 @@ var createRunsRouter = (deps) => {
 			query: runStepsQuerySchema
 		},
 		responses: {
-			200: jsonResponse$1(named("RunStepsResponse", runStepsResponseSchema), "One page of the run's steps, and the cursors either side of it."),
+			200: jsonResponse$2(named("RunStepsResponse", runStepsResponseSchema), "One page of the run's steps, and the cursors either side of it."),
 			400: errorResponse("The query failed its schema (`invalid_payload`), or the cursor is not one this box issued (`invalid_cursor`).")
 		}
 	}), async (c) => {
@@ -90896,7 +91459,7 @@ var createRunsRouter = (deps) => {
 		description: "One step with its payloads. The steps list leaves a `model_call`'s `input` and `output` out, because each is the whole prompt and reply of that call, stored uncapped; this is where they are read.",
 		request: { params: runStepPath },
 		responses: {
-			200: jsonResponse$1(named("RunStep", runStepSchema), "The step, payloads included."),
+			200: jsonResponse$2(named("RunStep", runStepSchema), "The step, payloads included."),
 			404: errorResponse("No such step in this run (`run_step_not_found`) — or an id that is not an id at all.")
 		}
 	}), async (c) => {
@@ -90915,7 +91478,7 @@ var createRunsRouter = (deps) => {
 		description: "Flips the row to `cancelled`, closes its open steps in the same transaction, and publishes `run.finished`. `cancelled` is final: a later close from the worker, a resume or the reconcile sweep does not change it. The SDK has no live cancel signal yet, so this closes the ROW — the worker behind it may keep running until it finishes on its own.",
 		request: { params: runIdPath },
 		responses: {
-			200: jsonResponse$1(named("CancelRunResponse", cancelRunResponseSchema), "The run as it now stands, `cancelled`."),
+			200: jsonResponse$2(named("CancelRunResponse", cancelRunResponseSchema), "The run as it now stands, `cancelled`."),
 			403: forbiddenResponse("runs:invoke"),
 			404: errorResponse("No such run (`run_not_found`)."),
 			409: errorResponse("The run is not running, so there is nothing to cancel (`run_not_running`).")
@@ -91088,7 +91651,7 @@ var createRecurringJobsRouter = (options) => {
 		tags: [RECURRING_JOBS_TAG],
 		summary: "List the box's recurring jobs",
 		description: "One item per DECLARED cadence — a workflow cron, an intake link's polling repeatable, the connection-refresh sweep — never one per repeatable Redis happens to hold, so a job whose repeatable failed to arm is reported here as inactive. A box with nothing armed yet answers an empty list, not an error.",
-		responses: { 200: jsonResponse$1(named("RecurringJobsResponse", recurringJobsResponseSchema), "Every declared recurring job, plus the box's own clock.") }
+		responses: { 200: jsonResponse$2(named("RecurringJobsResponse", recurringJobsResponseSchema), "Every declared recurring job, plus the box's own clock.") }
 	}), async (c) => {
 		const registry = options.resolveRecurringJobs();
 		const items = registry ? (await registry.list()).map(toWire) : [];
@@ -91109,7 +91672,7 @@ var createRecurringJobsRouter = (options) => {
 			description: paused ? "Stops every recurring job carrying `pause_key` — every cron of one workflow for a `pause_key`, one cron for a `cron_pause_key` — and stores the pause, so it holds across restarts and redeploys. A tick BullMQ already queued is skipped. The box's own sweeps carry no key and cannot be paused." : "Re-arms every recurring job carrying `pause_key` and drops the stored pause. A cron still paused under its other key stays off. BullMQ fires each at its next scheduled time, not immediately.",
 			request: { body: jsonBody(named("RecurringJobPauseRequest", recurringJobPauseRequestSchema), "The pause key the list reported for the jobs to switch.") },
 			responses: {
-				200: jsonResponse$1(named("RecurringJobPauseResponse", recurringJobPauseResponseSchema), "The key, its new state, and how many jobs it covered."),
+				200: jsonResponse$2(named("RecurringJobPauseResponse", recurringJobPauseResponseSchema), "The key, its new state, and how many jobs it covered."),
 				400: errorResponse("The body failed its schema."),
 				403: forbiddenResponse("config:write"),
 				404: errorResponse("No recurring job on this box carries that pause key.")
@@ -91763,7 +92326,7 @@ var createLimitsRouter = (options) => {
 		tags: [LIMITS_TAG],
 		summary: "List the workspace's concurrency limits",
 		description: "One item per limit `stackbone.config.ts` declares: the declared capacity, the operator's override, the capacity the box enforces, and how many slots are busy and waiting now. A box with no limits answers an empty list.",
-		responses: { 200: jsonResponse$1(named("LimitersResponse", limitersResponseSchema), "Every declared limit, plus the box's own clock.") }
+		responses: { 200: jsonResponse$2(named("LimitersResponse", limitersResponseSchema), "Every declared limit, plus the box's own clock.") }
 	}), async (c) => {
 		const limits = options.resolveLimits();
 		const items = limits ? await limits.listLimiters() : [];
@@ -91780,7 +92343,7 @@ var createLimitsRouter = (options) => {
 		description: "The slots of one limit: held first, then granted, then the queue in arrival order. A granted slot waits for its run to confirm it until `claimDeadline`; a busy slot goes back to the box at `expiresAt`.",
 		request: { params: namePath },
 		responses: {
-			200: jsonResponse$1(named("SlotsResponse", slotsResponseSchema), "The limit and its slots."),
+			200: jsonResponse$2(named("SlotsResponse", slotsResponseSchema), "The limit and its slots."),
 			400: errorResponse("The name is not a limit name (`invalid_payload`)."),
 			404: errorResponse("The workspace declares no limit of that name.")
 		}
@@ -91805,7 +92368,7 @@ var createLimitsRouter = (options) => {
 		description: "Gives a granted or held slot back and grants the next run in the queue. For a slot whose release was lost: the work ended but nothing called `releaseSlot`. Idempotent: a slot already released, or still waiting, answers `released: false` and changes nothing.",
 		request: { params: slotPath },
 		responses: {
-			200: jsonResponse$1(named("ReleaseSlotResponse", releaseSlotResponseSchema), "Whether this call released the slot."),
+			200: jsonResponse$2(named("ReleaseSlotResponse", releaseSlotResponseSchema), "Whether this call released the slot."),
 			400: errorResponse("The id is not a uuid (`invalid_payload`)."),
 			403: forbiddenResponse(RELEASE_CAPABILITY),
 			503: errorResponse("This box runs no concurrency-limits service.")
@@ -91843,7 +92406,7 @@ var createLimitsRouter = (options) => {
 			body: jsonBody(named("LimiterUpdateRequest", limiterUpdateRequestSchema), "The new capacity and/or max hold; `null` clears one.")
 		},
 		responses: {
-			200: jsonResponse$1(LIMITER, "The limit with its new overrides."),
+			200: jsonResponse$2(LIMITER, "The limit with its new overrides."),
 			400: errorResponse("The name or the body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse(OVERRIDES_CAPABILITY),
 			404: errorResponse("The workspace declares no limit of that name."),
@@ -91897,153 +92460,6 @@ var mountLimits = (app, ctx) => {
 	}));
 };
 //#endregion
-//#region ../../libs/runtime/workspace-runtime/src/lib/voice/livekit-credentials.ts
-init_src$26();
-var [URL_NAME, API_KEY_NAME, API_SECRET_NAME] = RESERVED_LIVEKIT_SECRET_NAMES;
-/**
-* Names a row this box's key cannot open (never its value), so the log says
-* which one to save again. True when `err` is that failure.
-*/
-var warnUndecryptable = (scope, name) => console.warn(`[${scope}] ${name} cannot be opened with this box's key; save it again`);
-var warnIfUndecryptable = (scope, name, err) => {
-	if (!(err instanceof SecretUndecryptableError)) return false;
-	warnUndecryptable(scope, name);
-	return true;
-};
-/**
-* The stored LiveKit credentials, read on EVERY call — no cache — or `null` when
-* any of the three is missing or empty. Half a credential set cannot open a
-* room, so it answers exactly what nothing stored answers.
-*
-* A row this box's key cannot open throws {@link SecretUndecryptableError},
-* after a warning that names the row (never its value): saving the credentials
-* again is the fix, and the caller tells the operator so. Any other failure
-* throws as it came.
-*/
-var readLiveKitCredentials = async (opts) => {
-	const values = await readSystemSecrets(opts, RESERVED_LIVEKIT_SECRET_NAMES, (name) => warnUndecryptable("voice", name));
-	const url = values.get(URL_NAME);
-	const apiKey = values.get(API_KEY_NAME);
-	const apiSecret = values.get(API_SECRET_NAME);
-	if (!url || !apiKey || !apiSecret) return null;
-	return {
-		url,
-		apiKey,
-		apiSecret
-	};
-};
-/** The secret naming the LiveKit outbound SIP trunk `placeCall` dials through (STA3-56). */
-var SIP_OUTBOUND_TRUNK_SECRET = "LIVEKIT_SIP_OUTBOUND_TRUNK_ID";
-/** The optional secret naming the number the callee sees; the trunk's own when absent. */
-var SIP_CALLER_ID_SECRET = "LIVEKIT_SIP_CALLER_ID";
-/**
-* The outbound trunk, read on every call, or `null` when no trunk id is saved.
-* Not reserved names, unlike the three credentials: a trunk id opens nothing on
-* its own and has no privileged screen yet, so it is read from an `is_system`
-* row or the operator's own secret of that name, whichever exists.
-*/
-var readSipOutboundConfig = async (opts) => {
-	const values = await readSecretsAnyKind(opts, [SIP_OUTBOUND_TRUNK_SECRET, SIP_CALLER_ID_SECRET], (name) => warnUndecryptable("voice", name));
-	const trunkId = values.get(SIP_OUTBOUND_TRUNK_SECRET)?.trim();
-	if (!trunkId) return null;
-	const callerId = values.get(SIP_CALLER_ID_SECRET)?.trim();
-	return {
-		trunkId,
-		...callerId ? { callerId } : {}
-	};
-};
-var voiceNotConfigured = (message) => ({ refusal: {
-	status: 503,
-	body: {
-		code: "voice_not_configured",
-		message
-	}
-} });
-/**
-* {@link readLiveKitCredentials} for a voice route: the credentials, or the 503 to
-* answer without them. A row sealed by another box key is fixed the way a missing one
-* is, by saving the credentials again, so it answers the same 503; any other read
-* failure is the box's own and throws, to the generic 500.
-*/
-var lookUpLiveKitCredentials = async (opts) => {
-	let credentials;
-	try {
-		credentials = await readLiveKitCredentials(opts);
-	} catch (err) {
-		if (!(err instanceof SecretUndecryptableError)) throw err;
-		return voiceNotConfigured("This box cannot read the saved LiveKit credentials: they were saved with another key. Open the Voice provider screen and save them again.");
-	}
-	if (!credentials) return voiceNotConfigured("This box has no LiveKit credentials. Save the URL, API key and API secret on the Voice provider screen.");
-	return { credentials };
-};
-/**
-* The screen's view: whether all three are saved, and the URL in clear.
-*
-* The key and the secret are asked after as EXISTENCE only, never decrypted:
-* this view never shows them, so opening them would be work done to throw away.
-* The URL is decrypted to be shown, and a URL row this box's key cannot open
-* (sealed by another box) reads as not configured instead of failing the screen
-* the operator needs to replace it from. Only that: a database or key failure
-* throws, because answering "not configured" would hide a configured box.
-*/
-var getVoiceProvider = async (opts) => {
-	const [url, apiKeySet, apiSecretSet] = await Promise.all([
-		readSystemSecret(opts, URL_NAME).catch((err) => {
-			if (!warnIfUndecryptable("voice-provider", URL_NAME, err)) throw err;
-			return null;
-		}),
-		systemSecretExists(opts, API_KEY_NAME),
-		systemSecretExists(opts, API_SECRET_NAME)
-	]);
-	return {
-		configured: url !== null && apiKeySet && apiSecretSet,
-		url
-	};
-};
-/**
-* Save all three as `is_system` rows, with the activity-log entry, in ONE
-* transaction: the box never holds a new URL beside an old secret, and never a
-* save the trail does not show. The entry names the URL alone.
-*/
-var setVoiceProvider = async (opts, body, actor = { userId: null }) => {
-	await opts.db.transaction(async (tx) => {
-		await seedSystemSecrets(opts, {
-			[URL_NAME]: body.url,
-			[API_KEY_NAME]: body.apiKey,
-			[API_SECRET_NAME]: body.apiSecret
-		}, tx);
-		await opts.audit.record({
-			action: "voice_provider.update",
-			actorUserId: actor.userId,
-			subjectType: "voice_provider",
-			payload: { url: body.url }
-		}, tx);
-	});
-	await notifySecretsChanged();
-};
-/**
-* Remove all three in ONE transaction, and answer the names actually removed.
-*
-* `cleared` comes off each DELETE's own answer, so a partial store records only
-* what it held, and a removal that found nothing records nothing — the rule
-* `removeModelProvider` keeps.
-*/
-var clearVoiceProvider = async (opts, actor = { userId: null }) => {
-	const cleared = await opts.db.transaction(async (tx) => {
-		const removed = [];
-		for (const name of RESERVED_LIVEKIT_SECRET_NAMES) if (await deleteSystemSecret(opts, name, tx)) removed.push(name);
-		if (removed.length > 0) await opts.audit.record({
-			action: "voice_provider.delete",
-			actorUserId: actor.userId,
-			subjectType: "voice_provider",
-			payload: { cleared: removed }
-		}, tx);
-		return removed;
-	});
-	if (cleared.length > 0) await notifySecretsChanged();
-	return cleared;
-};
-//#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/voice/agent-voice-settings.ts
 init_src$26();
 /**
@@ -92761,7 +93177,7 @@ var createApiKeysRouter = (options) => {
 		summary: "List the workspace API keys",
 		description: "Every key this workspace has ever minted, newest first — REVOKED ONES INCLUDED, because a key that vanished from the list cannot answer \"what was that, and who turned it off\". Each row carries the prefix and the selector with the secret masked; the secret itself is not stored and cannot be answered here.",
 		responses: {
-			200: jsonResponse$1(named("StudioApiKeyListResponse", studioApiKeyListResponseSchema), "Every key this workspace holds, masked."),
+			200: jsonResponse$2(named("StudioApiKeyListResponse", studioApiKeyListResponseSchema), "Every key this workspace holds, masked."),
 			403: forbiddenResponse(API_KEYS_CAPABILITY)
 		}
 	}), async (c) => c.json(await listApiKeys(options), 200));
@@ -92775,7 +93191,7 @@ var createApiKeysRouter = (options) => {
 		description: "Answers the full `sbk_live_…` key ONCE, in `key`. The box keeps the selector and a SHA-256 digest of the secret, so this response is the only time the plaintext exists anywhere — a caller that loses it revokes the key and mints another.\n\n`permissions` is fixed at mint: a key's reach cannot be edited afterwards, because widening a credential in place leaves nothing on the trail saying what it used to be allowed to do. `expires_at` may be omitted or null, which means \"valid until revoked\".",
 		request: { body: jsonBody(named("CreateStudioApiKeyRequest", createStudioApiKeyRequestSchema), "The display name, what the key may call, and when it stops working.") },
 		responses: {
-			201: jsonResponse$1(named("CreateStudioApiKeyResponse", createStudioApiKeyResponseSchema), "The masked key, and the plaintext — answered here and nowhere else, ever."),
+			201: jsonResponse$2(named("CreateStudioApiKeyResponse", createStudioApiKeyResponseSchema), "The masked key, and the plaintext — answered here and nowhere else, ever."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse(API_KEYS_CAPABILITY)
 		}
@@ -92789,7 +93205,7 @@ var createApiKeysRouter = (options) => {
 		description: "The masked row. There is no route that answers the secret a second time, and no row that could.",
 		request: { params: looseIdPath },
 		responses: {
-			200: jsonResponse$1(named("StudioApiKeyResponse", studioApiKeyResponseSchema), "The key, masked."),
+			200: jsonResponse$2(named("StudioApiKeyResponse", studioApiKeyResponseSchema), "The key, masked."),
 			403: forbiddenResponse(API_KEYS_CAPABILITY),
 			404: errorResponse("No such key — or an id that is not an id at all.")
 		}
@@ -92813,7 +93229,7 @@ var createApiKeysRouter = (options) => {
 		description: "Stops the key working, immediately and for good. A SOFT transition: the row stays and is stamped with when it happened and who did it, so the list can still explain a key that used to work. There is no un-revoke — mint another.",
 		request: { params: looseIdPath },
 		responses: {
-			200: jsonResponse$1(named("StudioApiKeyResponse", studioApiKeyResponseSchema), "The key as it now stands, revoked."),
+			200: jsonResponse$2(named("StudioApiKeyResponse", studioApiKeyResponseSchema), "The key as it now stands, revoked."),
 			403: forbiddenResponse(API_KEYS_CAPABILITY),
 			404: errorResponse("No such key — or an id that is not an id at all."),
 			409: errorResponse("The key was already revoked (`api_key_already_revoked`). The first revocation stands: re-stamping it would move the moment the key died and rename whoever stopped it.")
@@ -92908,7 +93324,7 @@ var createSecretsRouter = (secretsOptions) => {
 		summary: "List the workspace secrets",
 		description: "The names, descriptions and rotation timestamps. Values never leave through this route — each row carries a masked placeholder, and the plaintext is only ever answered by the reveal below.",
 		responses: {
-			200: jsonResponse$1(named("StudioSecretListResponse", studioSecretListResponseSchema), "Every secret this workspace holds, masked."),
+			200: jsonResponse$2(named("StudioSecretListResponse", studioSecretListResponseSchema), "Every secret this workspace holds, masked."),
 			403: forbiddenResponse("secrets:rotate")
 		}
 	}), async (c) => c.json(await listSecrets$1(secretsOptions), 200));
@@ -92922,7 +93338,7 @@ var createSecretsRouter = (secretsOptions) => {
 		description: "Writes the value under `name`, replacing whatever was there. The reply carries the masked row, never the value that was just written.",
 		request: { body: jsonBody(named("CreateStudioSecretRequest", createStudioSecretRequestSchema), "The name, the value and an optional description.") },
 		responses: {
-			200: jsonResponse$1(named("StudioSecretMutationResponse", studioSecretMutationResponseSchema), "The secret as it now stands, masked."),
+			200: jsonResponse$2(named("StudioSecretMutationResponse", studioSecretMutationResponseSchema), "The secret as it now stands, masked."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the name is one the install owns (`studio_secret_system_name`)."),
 			403: forbiddenResponse("secrets:rotate")
 		}
@@ -92947,7 +93363,7 @@ var createSecretsRouter = (secretsOptions) => {
 		description: "Removes the row and reloads the log scrubber before answering, so the value stops being masked only once it is gone.",
 		request: { params: looseSecretNamePath },
 		responses: {
-			200: jsonResponse$1(named("StudioSecretDeleteResponse", studioSecretDeleteResponseSchema), "The secret is gone."),
+			200: jsonResponse$2(named("StudioSecretDeleteResponse", studioSecretDeleteResponseSchema), "The secret is gone."),
 			400: errorResponse("The name is one the install owns (`studio_secret_system_name`)."),
 			403: forbiddenResponse("secrets:rotate"),
 			404: errorResponse("No such secret — or a name that is not a name at all.")
@@ -92980,7 +93396,7 @@ var createSecretsRouter = (secretsOptions) => {
 		description: "The only route that answers the plaintext, and the only one gated on `secrets:reveal` (owner/admin). The local box skips the re-auth ceremony the cloud path runs — a single-developer machine has nobody to challenge. Every answered reveal is recorded on the activity log, naming the secret and whoever asked.",
 		request: { params: looseSecretNamePath },
 		responses: {
-			200: jsonResponse$1(named("StudioSecretRevealResponse", studioSecretRevealResponseSchema), "The plaintext, and when the reveal stops being valid."),
+			200: jsonResponse$2(named("StudioSecretRevealResponse", studioSecretRevealResponseSchema), "The plaintext, and when the reveal stops being valid."),
 			403: forbiddenResponse("secrets:reveal"),
 			404: errorResponse("No such secret — or a name that is not a name at all.")
 		}
@@ -93128,7 +93544,7 @@ var createSessionsRouter = (deps) => {
 		description: "Cursor-paginated, newest first, filterable by agent, status and one `key:value` run tag (`tag`: the sessions with at least one run carrying it); `system=exclude` leaves out the sessions of the agents the platform installed for itself. Each row carries the read-time aggregates (turn count, last activity, preview, token totals). A workspace with no sessions store wired — a classic project — reports an empty page rather than an error.",
 		request: { query: listSessionsQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("SessionListResponse", sessionListResponseSchema), "One page of sessions, and the cursors either side of it."),
+			200: jsonResponse$2(named("SessionListResponse", sessionListResponseSchema), "One page of sessions, and the cursors either side of it."),
 			400: errorResponse("The query failed its schema (`invalid_payload`), or the cursor is not one this box issued (`invalid_cursor`).")
 		}
 	}), async (c) => {
@@ -93154,7 +93570,7 @@ var createSessionsRouter = (deps) => {
 		description: "The lifecycle row plus the same read-time aggregates the list carries. Not the turns — those are runs, read through `/api/runs`.",
 		request: { params: looseSessionIdPath },
 		responses: {
-			200: jsonResponse$1(named("Session", sessionSchema), "The session as it now stands."),
+			200: jsonResponse$2(named("Session", sessionSchema), "The session as it now stands."),
 			404: errorResponse("No such session — or an id that is not an id at all.")
 		}
 	}), async (c) => {
@@ -93323,7 +93739,7 @@ var createSettingsRouter = (opts, hooks = {}) => {
 		tags: [SETTINGS_TAG],
 		summary: "Read the workspace settings",
 		description: "Every knob, with the documented default filled in for anything nobody has written — a workspace that was never configured reads defaults, never an empty object. `updatedAt`/`updatedBy` are null until the first save, and `updatedByEmail` names only the self-host principal — every other author is an id for the caller to resolve against its member directory.",
-		responses: { 200: jsonResponse$1(named("WorkspaceSettingsResponse", workspaceSettingsResponseSchema), "The resolved settings, and who last changed them.") }
+		responses: { 200: jsonResponse$2(named("WorkspaceSettingsResponse", workspaceSettingsResponseSchema), "The resolved settings, and who last changed them.") }
 	}), async (c) => c.json(await getWorkspaceSettings(opts), 200));
 	app.openapi(createRoute({
 		method: "put",
@@ -93335,7 +93751,7 @@ var createSettingsRouter = (opts, hooks = {}) => {
 		description: "A SHALLOW merge: an absent key leaves the stored value alone, an explicit `null` clears it back to unset. The reply echoes the fresh view so the screen reflects the merged result without a second round-trip. Some keys carry a SECOND, per-key gate on top of `config:write` — see the 403.",
 		request: { body: jsonBody(named("WorkspaceSettingsPatch", workspaceSettingsPatchSchema), "The keys to change. Unknown keys are refused: an unrecognised key is almost always a typo, and accepting it would look like a save that changed nothing.") },
 		responses: {
-			200: jsonResponse$1(named("WorkspaceSettingsResponse", workspaceSettingsResponseSchema), "The settings as they now stand, with this call stamped as the author."),
+			200: jsonResponse$2(named("WorkspaceSettingsResponse", workspaceSettingsResponseSchema), "The settings as they now stand, with this call stamped as the author."),
 			400: errorResponse("The patch failed its schema (`invalid_payload`)."),
 			403: errorResponse("The caller does not hold `config:write` — or the patch names a key that needs a SECOND capability on top of it (`forbidden`): `logRetentionDays` / `logStorageBudgetGb` / `eventRetentionDays` need `retention:write`, `mcpEnabled` needs `mcp:manage`, `copilotEnabled` needs `copilot:manage`. Those govern how long the box keeps its own evidence, whether it answers MCP at all and whether Studio shows its copilot to the workspace, so the coarser capability is not enough. The WHOLE patch is refused, never half of it.")
 		}
@@ -93434,7 +93850,7 @@ var createStorageRouter = (deps) => {
 		tags: [STORAGE_TAG],
 		summary: "List the buckets this box can browse",
 		description: "Every bucket the box's S3 credential reaches — one under `stackbone dev` (the docker-compose MinIO), the install's own under a deployed image.",
-		responses: { 200: jsonResponse$1(named("StudioStorageBucketListResponse", studioStorageBucketListResponseSchema), "The buckets, each with the kind of store behind it.") }
+		responses: { 200: jsonResponse$2(named("StudioStorageBucketListResponse", studioStorageBucketListResponseSchema), "The buckets, each with the kind of store behind it.") }
 	}), async (c) => c.json(await listBuckets$1(deps.storage), 200));
 	app.openapi(createRoute({
 		method: "get",
@@ -93447,7 +93863,7 @@ var createStorageRouter = (deps) => {
 			query: listStudioStorageObjectsQuerySchema
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioStorageObjectListResponse", studioStorageObjectListResponseSchema), "One page of objects, the folders below the prefix, and the cursor for the next page."),
+			200: jsonResponse$2(named("StudioStorageObjectListResponse", studioStorageObjectListResponseSchema), "One page of objects, the folders below the prefix, and the cursor for the next page."),
 			400: errorResponse("The query failed its schema (`invalid_payload`)."),
 			404: errorResponse("No such bucket (`bucket_not_found`).")
 		}
@@ -93469,7 +93885,7 @@ var createStorageRouter = (deps) => {
 			body: multipartBody(named("StudioStorageUploadForm", uploadFormSchema), "The object bytes and the key to write them under.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioStorageUploadResponse", studioStorageUploadResponseSchema), "The stored key, its size and the etag the store minted."),
+			200: jsonResponse$2(named("StudioStorageUploadResponse", studioStorageUploadResponseSchema), "The stored key, its size and the etag the store minted."),
 			400: errorResponse("The body is not `multipart/form-data`, or it is missing `file` or `key` — or sent `file` as text rather than a part (`invalid_payload`)."),
 			403: errorResponse("The caller's role does not grant `runs:invoke` — or the key is under `rag/`, which is reserved for managed RAG originals and cannot be written from the explorer (`rag_storage_prefix_reserved`)."),
 			404: errorResponse("No such bucket (`bucket_not_found`), or a key this box cannot write (`object_not_found`).")
@@ -93512,7 +93928,7 @@ var createStorageRouter = (deps) => {
 			body: jsonBody(named("CreateStudioStorageFolderRequest", createStudioStorageFolderRequestSchema), "The full folder path, composed from the breadcrumb and the name the user typed.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioStorageCreateFolderResponse", studioStorageCreateFolderResponseSchema), "The normalised prefix that was created, always ending in `/`."),
+			200: jsonResponse$2(named("StudioStorageCreateFolderResponse", studioStorageCreateFolderResponseSchema), "The normalised prefix that was created, always ending in `/`."),
 			400: errorResponse("The body failed its schema, or the folder name is one the store will not take — `..` traversal and the like (`invalid_folder`)."),
 			403: errorResponse("The caller's role does not grant `runs:invoke` — or the prefix is `rag/`, which is reserved for managed RAG originals and cannot be written from the explorer (`rag_storage_prefix_reserved`)."),
 			404: errorResponse("No such bucket (`bucket_not_found`).")
@@ -93592,7 +94008,7 @@ var createStorageRouter = (deps) => {
 			body: jsonBody(named("StudioStoragePresignRequest", studioStoragePresignRequestSchema), "The key to sign for, and how long the URL should live.")
 		},
 		responses: {
-			200: jsonResponse$1(named("StudioStoragePresignResponse", studioStoragePresignResponseSchema), "The signed URL and the moment it stops working."),
+			200: jsonResponse$2(named("StudioStoragePresignResponse", studioStoragePresignResponseSchema), "The signed URL and the moment it stops working."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			404: errorResponse("No such bucket (`bucket_not_found`).")
 		}
@@ -93941,7 +94357,7 @@ var createVoiceProviderRouter = (secretsOptions, options = {}) => {
 		summary: "Read the LiveKit credentials status",
 		description: "`configured` is true only when the URL, the API key and the API secret are all saved. The URL rides back in clear; the key and the secret never do, not even masked. A partial store reads as not configured, with whatever URL it holds.",
 		responses: {
-			200: jsonResponse$1(voiceProviderGetResponse, "Whether voice is configured, and the URL."),
+			200: jsonResponse$2(voiceProviderGetResponse, "Whether voice is configured, and the URL."),
 			403: forbiddenResponse("secrets:rotate")
 		}
 	}), async (c) => c.json(await getVoiceProvider(secretsOptions), 200));
@@ -93955,7 +94371,7 @@ var createVoiceProviderRouter = (secretsOptions, options = {}) => {
 		description: "Writes the URL, the API key and the API secret together, in one transaction with the activity-log entry: all three land or none does. The URL must be `wss://` or `https://`, and the key and secret non-empty. The reply is the fresh view, which never carries the key or the secret.",
 		request: { body: jsonBody(named("VoiceProviderPutRequest", voiceProviderPutRequestSchema), "The LiveKit URL, API key and API secret.") },
 		responses: {
-			200: jsonResponse$1(voiceProviderGetResponse, "The fresh view after the save."),
+			200: jsonResponse$2(voiceProviderGetResponse, "The fresh view after the save."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse("secrets:rotate")
 		}
@@ -93977,7 +94393,7 @@ var createVoiceProviderRouter = (secretsOptions, options = {}) => {
 		summary: "Remove the LiveKit credentials",
 		description: "Deletes the URL, the API key and the API secret in one transaction. Removing nothing is not an error: the reply is the view afterwards either way, and only a removal that deleted a row is recorded on the activity log.",
 		responses: {
-			200: jsonResponse$1(voiceProviderGetResponse, "The view after the removal."),
+			200: jsonResponse$2(voiceProviderGetResponse, "The view after the removal."),
 			403: forbiddenResponse("secrets:rotate")
 		}
 	}), async (c) => {
@@ -94008,7 +94424,7 @@ var createVoiceRecordingsRouter = (options) => {
 		description: "The latest call recording of a session, from the box bucket the room route's egress uploads to (an audio-only OGG under `voice/recordings/<session_id>/<room>.ogg`). `status` is `recording` until LiveKit reports the egress ended, then `ready` or `failed`; the read asks LiveKit, so a call that just ended reads `ready` on the next read. Only a `ready` recording carries `url`, a presigned read valid one hour and unaudited (D32), and `expires_at`.",
 		request: { query: voiceRecordingQuerySchema },
 		responses: {
-			200: jsonResponse$1(named("VoiceRecordingResponse", voiceRecordingResponseSchema), "The recording, with a presigned read once it is ready."),
+			200: jsonResponse$2(named("VoiceRecordingResponse", voiceRecordingResponseSchema), "The recording, with a presigned read once it is ready."),
 			400: errorResponse("`session_id` is not a UUID (`invalid_payload`)."),
 			403: forbiddenResponse(VOICE_CAPABILITY$2),
 			404: errorResponse("The session has no call recording (`recording_not_found`).")
@@ -94354,7 +94770,7 @@ var createVoiceRoomsRouter = (options) => {
 		description: "Opens a fresh room `call-<agent>-<8 hex>` and answers the LiveKit URL, the browser's token to join it (it joins within five minutes; a call already running is not cut) and the settings the call runs with. The token carries the room's agent dispatch: joining the room sends the voice worker in with the agent's name, its effective voice settings, the session key `voice-<room>` every turn lands in, the tags each turn's run carries (`channel: voice`, `room`, and `origin`, which the caller states and which defaults to `studio`), the box's public URL the worker posts its turns to, and a call token: the worker's bearer for this call, valid two hours, until the box restarts, on the AG-UI chat of this agent and this session key on the trace relay `POST /voice/v1/traces`, and on this call's identity bootstrap, knowledge prefetch and heard completion at `/voice/v1/calls/{sessionKey}/bootstrap`, `/voice/v1/calls/{sessionKey}/knowledge` and `/voice/v1/calls/{sessionKey}/complete`, nowhere else. The box freezes memory policy, the agent's knowledge settings (`rag`), its refusal phrase (`refusalPhrase`, what the caller hears when a guardrail stops their sentence or the agent's reply) and the zone its turns are told today's date in (`timeZone`), none of them in the dispatch, at room acceptance, so a change saved in Studio reaches the next call; the worker supplies the original SIP participant's phoneNumber before output, or the browser call uses explicit identities supplied on this request. `variables` fill the `{{name}}` placeholders of the agent's greeting before it enters the dispatch (a missing one is left out) and reach every model call of the call as data. The bootstrap response contains no recalled facts or policy. On a box that exports traces (`OTEL_EXPORTER_OTLP_*`), the dispatch also asks the worker to send the call's spans to that relay with that token. The call is recorded to the box bucket as audio-only OGG only when the agent's `recording` voice setting is on (it is off by default) and the box bucket is not on a loopback or private host; a recording that fails never fails the call. The LiveKit API key and secret are never answered. The call token is answered only inside the room token's dispatch, which anyone holding the room token can read.",
 		request: { body: jsonBody(named("VoiceRoomRequest", voiceRoomRequestSchema), "The agent to call.") },
 		responses: {
-			200: jsonResponse$1(named("VoiceRoomResponse", voiceRoomResponseSchema), "The room, its participant token, and what the dispatch carries."),
+			200: jsonResponse$2(named("VoiceRoomResponse", voiceRoomResponseSchema), "The room, its participant token, and what the dispatch carries."),
 			400: errorResponse("The body failed its schema (`invalid_payload`)."),
 			403: forbiddenResponse(VOICE_CAPABILITY$1),
 			...VOICE_AGENT_REFUSALS,
@@ -94458,7 +94874,7 @@ var createVoiceSettingsRouter = (options) => {
 		description: "The settings the agent's next call runs with: the fields saved in Studio over the agent's code over the box defaults, the layer each leaf came from (`studio`, `code` or `default`), and `issue`, why a call cannot carry the merged value (`path: message`), or `null`. A saved field can stop combining with the code after a later deploy; the read describes it rather than failing.",
 		request: { params: agentPath },
 		responses: {
-			200: jsonResponse$1(SETTINGS_RESPONSE, "The effective settings and their origins."),
+			200: jsonResponse$2(SETTINGS_RESPONSE, "The effective settings and their origins."),
 			400: errorResponse("The name is not a deep agent name (`invalid_payload`)."),
 			...VOICE_AGENT_REFUSALS
 		}
@@ -94480,7 +94896,7 @@ var createVoiceSettingsRouter = (options) => {
 			body: jsonBody(named("StudioVoiceSettingsPatch", studioVoiceSettingsPatchSchema), "The fields to save.")
 		},
 		responses: {
-			200: jsonResponse$1(SETTINGS_RESPONSE, "The effective settings once saved."),
+			200: jsonResponse$2(SETTINGS_RESPONSE, "The effective settings once saved."),
 			400: errorResponse("The body failed its schema (`invalid_payload`), or the saved fields merged over the agent's code and the box defaults break a cross-field rule (`voice_settings_invalid`, the message names the field)."),
 			403: forbiddenResponse(WRITE_CAPABILITY),
 			...VOICE_AGENT_REFUSALS
@@ -94528,7 +94944,7 @@ var createVoiceSettingsRouter = (options) => {
 			query: resetQuery
 		},
 		responses: {
-			200: jsonResponse$1(SETTINGS_RESPONSE, "The effective settings once reset."),
+			200: jsonResponse$2(SETTINGS_RESPONSE, "The effective settings once reset."),
 			400: errorResponse("The name is not a deep agent name, or `fields` names something other than a leaf path (`invalid_payload`), or the fields Studio keeps merged over the agent's code and the box defaults break a cross-field rule (`voice_settings_invalid`, the message names the field)."),
 			403: forbiddenResponse(WRITE_CAPABILITY),
 			...VOICE_AGENT_REFUSALS
@@ -94641,7 +95057,7 @@ var createVoiceStatusRouter = (options) => {
 		summary: "Check whether the box reaches LiveKit",
 		description: "Lists the LiveKit project's rooms with the saved URL, API key and API secret, and answers whether that worked: `reachable: false` covers a refused key, a host that cannot be reached and a check that ran past five seconds alike, and LiveKit's own error is never answered. The answer is kept ten seconds for the same credentials, so a check repeated inside that window answers the first one's result and its `checkedAt`; saving other credentials checks again on the next read. It never says whether a voice worker is registered: no LiveKit API lists them.",
 		responses: {
-			200: jsonResponse$1(named("VoiceStatusResponse", voiceStatusResponseSchema), "Whether the box reached LiveKit with its saved credentials."),
+			200: jsonResponse$2(named("VoiceStatusResponse", voiceStatusResponseSchema), "Whether the box reached LiveKit with its saved credentials."),
 			403: forbiddenResponse(VOICE_CAPABILITY),
 			503: errorResponse("The LiveKit credentials are not saved on this box, or a saved one cannot be opened with this box's key and must be saved again (`voice_not_configured`).")
 		}
@@ -94811,7 +95227,7 @@ var createVoiceCallsRouter = (options) => {
 		return c.json(errorEnvelope("voice_lifecycle_failed", "The voice lifecycle operation failed."), 500);
 	});
 	const callResponses = {
-		200: jsonResponse$1(named("VoiceCallLifecycleResponse", voiceCallLifecycleResponseSchema), "The call operation completed."),
+		200: jsonResponse$2(named("VoiceCallLifecycleResponse", voiceCallLifecycleResponseSchema), "The call operation completed."),
 		400: errorResponse("Invalid bounded call payload."),
 		401: errorResponse("Missing, invalid or expired call token."),
 		403: errorResponse("Only the call token for this session is admitted."),
@@ -100288,7 +100704,7 @@ var init_trigger_capabilities_handlers = __esmMin((() => {
 			tags: [TRIGGER_CAPABILITIES_TAG],
 			summary: "List the triggers this box can link a workflow to",
 			description: "Every RESOLVABLE trigger across the connector registry, flattened. A descriptor whose poll cannot be resolved — a `strategy` with no registered code — is omitted, so the picker never offers a broken link source. A POLLING or WEBHOOK trigger of a piece connector is listed off its document, its props as `scopeParams`; arming a link on one runs the piece's own `onEnable`, which is where a bundle that cannot load or a credential the provider refuses is reported. A WEBHOOK one is never polled: arming it registers the link's own `/api/hooks/{subscriptionId}/{token}` URL at the provider, so it arms only on a box that knows its public URL.\n\nPresent only on a box with an inbound-trigger intake armed. A box that runs deep agents alone does not serve this route and does not describe it.",
-			responses: { 200: jsonResponse$1(triggerCapabilitiesResponseSchema, "The link sources, one row per connector trigger.") }
+			responses: { 200: jsonResponse$2(triggerCapabilitiesResponseSchema, "The link sources, one row per connector trigger.") }
 		}), (c) => c.json({ items: listTriggerCapabilities(registry) }, 200));
 	};
 }));
@@ -101199,7 +101615,7 @@ var init_intake_runtime = __esmMin((() => {
 }));
 //#endregion
 //#region ../../libs/runtime/workspace-runtime/src/lib/connect-inbound/subscriptions-router.ts
-var TRIGGER_SUBSCRIPTIONS_TAG, looseSubscriptionIdPath, deleteTriggerSubscriptionQuery, mappingCompileError, KEY_REFUSALS, keyCompileRefusal, keyCompileError, keysCompileError, previewKey, editingWaitOrKey, patchKeysRefusal, linkSampleEvent, namedLink, namedLinkSampleEvent, previewSample, armingMappingRefusal, trimmedScope, VERIFY_TOKEN_PARAM, withGeneratedVerifyToken, scopeValuesRefusal, sameScope, unreachableConnectorRefusal, fencedOperationRefusal, armingCursorSeed, webhookArm, armedWebhookUrl, answerEnableRefusal, armingEnable, transientRefusal, ENABLE_RETRYABLE_RESPONSE, disarmingHook, linkNames, createTriggerSubscriptionsRouter;
+var TRIGGER_SUBSCRIPTIONS_TAG, looseSubscriptionIdPath, deleteTriggerSubscriptionQuery, mappingCompileError, KEY_REFUSALS, keyCompileRefusal, keyCompileError, keysCompileError, compileKey, targetSchemaRefusal, previewKey, editingWaitOrKey, patchKeysRefusal, linkSampleEvent, namedLink, namedLinkSampleEvent, previewSample, armingMappingRefusal, trimmedScope, VERIFY_TOKEN_PARAM, withGeneratedVerifyToken, scopeValuesRefusal, sameScope, unreachableConnectorRefusal, fencedOperationRefusal, armingCursorSeed, webhookArm, armedWebhookUrl, answerEnableRefusal, armingEnable, transientRefusal, ENABLE_RETRYABLE_RESPONSE, disarmingHook, linkNames, createTriggerSubscriptionsRouter;
 var init_subscriptions_router = __esmMin((() => {
 	init_src$7();
 	init_src$6();
@@ -101250,19 +101666,33 @@ var init_subscriptions_router = __esmMin((() => {
 		return compiled.ok ? null : keyCompileRefusal(key, compiled.error);
 	};
 	keysCompileError = (keys) => keyCompileError(keys.correlationKey, "correlationKey") ?? keyCompileError(keys.conversationKey, "conversationKey");
-	previewKey = async (expression, key, sampleData) => {
+	compileKey = (expression, key) => {
 		if (!expression?.trim()) return {
 			ok: true,
-			value: {}
+			value: null
 		};
 		const compiled = compileMapping(expression);
-		if (!compiled.ok) return {
+		if (compiled.ok) return compiled;
+		return {
 			ok: false,
 			refusal: {
 				...keyCompileRefusal(key, compiled.error),
 				error: compiled.error
 			}
 		};
+	};
+	targetSchemaRefusal = (validated) => !validated.ok && validated.error.kind !== "schema_validation_error" ? {
+		code: validated.error.kind,
+		message: validated.error.message,
+		error: validated.error
+	} : null;
+	previewKey = async (expression, key, sampleData) => {
+		const compiled = compileKey(expression, key);
+		if (!compiled.ok) return compiled;
+		if (compiled.value === null) return {
+			ok: true,
+			value: {}
+		};
 		const applied = await applyMapping(compiled.value, sampleData);
 		if (!applied.ok) {
 			const { label, failed } = KEY_REFUSALS[key];
@@ -101297,6 +101727,10 @@ var init_subscriptions_router = __esmMin((() => {
 			event: own,
 			source: "link"
 		};
+		if (isWebhookTrigger(deps.registry, request.connector, request.trigger)) return {
+			event: void 0,
+			source: "none"
+		};
 		if (deps.fetchSampleEvent && link !== null && link.connector === request.connector && link.trigger === request.trigger) {
 			const warn = deps.logger?.warn ?? ((message) => console.warn(message));
 			let fetched = null;
@@ -101501,7 +101935,7 @@ var init_subscriptions_router = __esmMin((() => {
 			description: "Arms a new link and, when it is enabled, its polling repeatable. A link on a piece's webhook trigger arms no repeatable: its `onEnable` registers the link's own `/api/hooks/{subscriptionId}/{token}` URL at the provider, under a token minted for this arm and never returned. Every way a link can be born broken is refused here rather than at tick time: a trigger the registry does not resolve, a trigger missing one of the per-subscription values it declares (a mailbox and a Drive folder are both one of these) or carrying one that does not match the shape the param declares, and a `mapping`, `correlationKey` or `conversationKey` that does not compile as JSONata. A link carries the one key its kind reads: a workflow link resumes a run by `correlationKey`, an agent link continues a conversation by `conversationKey`, and the other kind's key is refused (`invalid_payload`) unless it is blank (null, empty or whitespace). A body that names no `targetKind` is a workflow link here too. An agent link with a `conversationKey` may also carry `debounceMs`, from 1 to 10000 ms: how long it waits after an event for more events of the same conversation, so a burst of chat messages gets one answer. Null or absent answers each event as it arrives. A non-null `debounceMs` is refused (`invalid_payload`) on a workflow link and on an agent link whose `conversationKey` is absent or blank. A link being ARMED is held to more: its `mapping` is run over the trigger's sample event and the result validated against the destination's input schema, so a mapping that could only ever be rejected never arms a poll that would consume events and start nothing. A blank or `null` `mapping` is judged on what the link delivers without one: a workflow link gets the event unchanged; an agent link gets it unchanged when it carries a non-empty text `message`, and otherwise as `{ message }` holding the event as text (a string as is, anything else as JSON), so an agent link with no mapping is not refused for an event whose `message` is missing or not text. Nothing is stored in its place: the stored `mapping` stays `null`. A trigger that declares no sample, or an empty one (`{}`), gives that check nothing to judge, and the link arms; once it has received an event, that event is the sample the check reads on every later patch. A link born with `enabled: false` skips that check — it is made on the patch that turns it on.",
 			request: { body: jsonBody(named("RegisterTriggerSubscriptionRequest", registerTriggerSubscriptionRequestSchema), "The capability to poll, the workflow or agent to start, and the optional JSONata in between. `principalKey` defaults to `app` — the integration's own credential rather than a user grant.") },
 			responses: {
-				201: jsonResponse$1(named("TriggerSubscriptionResponse", triggerSubscriptionResponseSchema), "The link as it was stored. Its repeatable is armed when `enabled`."),
+				201: jsonResponse$2(named("TriggerSubscriptionResponse", triggerSubscriptionResponseSchema), "The link as it was stored. Its repeatable is armed when `enabled`."),
 				403: forbiddenResponse("config:write"),
 				400: errorResponse("The body failed its schema (`invalid_payload`, including a key the link's kind does not read and a `debounceMs` on a workflow link or on an agent link with no `conversationKey`), or the link would be born broken: `unknown_capability` (no such polling trigger on that integration, including when the integration itself is unknown), `scope_required` (a value the trigger declares in `scopeParams` is missing — the message names which, and a mailbox-scoped trigger reports its mailbox this way too), `invalid_scope` (a value that does not match the pattern its param declares), `invalid_mapping`, `invalid_correlation_key` or `invalid_conversation_key` (the JSONata does not compile). A link being ARMED is also refused when its mapping (or, with none, the default its kind delivers) compiles but cannot fill the destination: `mapping_evaluation_failed` (it throws on the trigger's sample event) or `mapping_cannot_produce_input` (the mapped sample violates the destination's input schema — `details.mappingIssues` names the offending paths), and a piece trigger whose own `onEnable` fails: `trigger_enable_failed`, with the piece's message, or the broker's own code when the link's credential could not be minted (`no_token`, `user_authorization_required`, `invalid_grant`, `credential_error`). A piece's webhook link with no event yet is not judged on its mapping: its trigger's declared sample is another account's example, so the check waits for the link's first event. A piece's webhook trigger is refused `webhook_url_unavailable` on a box that knows no public URL its provider could deliver to (`stackbone dev` with no tunnel). Nothing is stored and nothing is armed."),
 				503: ENABLE_RETRYABLE_RESPONSE
@@ -101638,11 +102072,11 @@ var init_subscriptions_router = __esmMin((() => {
 			path: "/preview",
 			tags: [TRIGGER_SUBSCRIPTIONS_TAG],
 			summary: "Dry-run a candidate mapping over the trigger sample event",
-			description: "Compiles the JSONata, evaluates it over the sample event, then validates the result against the destination input JSON Schema: the workflow's declared schema, or an agent's required `message` string with at least one character. Whitespace is valid. No mapping is written, no repeatable armed, no delivery journalled and no cursor moved, so it is the safe way to author a mapping before saving one.\n\nThe sample event is the trigger descriptor's own, unless `subscriptionId` names a link on the same trigger. A link that has received an event is evaluated over its first real event (`sampleSource: link`). A link with none yet is evaluated over the newest event its provider holds, read once without claiming or delivering it; that event is kept as the link's sample and echoed back as `sampleEvent` (`sampleSource: fetched`). When that read finds nothing or fails (an empty mailbox, an expired credential, a timeout), the answer is over the descriptor's sample (`sampleSource: declared`), never an error.\n\nA blank or `null` `mapping` maps the way the link delivers: on a workflow it is the identity mapping and the sample event comes back unchanged; on an agent the sample event comes back unchanged when it carries a non-empty text `message`, and otherwise as `{ message }` holding the event as text (a string as is, anything else as JSON). `output` is whatever the expression produced, which may be a scalar or an array as easily as an object.\n\nThe key the link's kind reads is evaluated over the same sample event: `correlationKey` on a workflow link (the run a real event would resume), `conversationKey` on an agent link (the conversation it would land in). As on register, a non-blank key of the other kind is refused (`invalid_payload`); a blank one (null, empty or whitespace) is no key.\n\nPresent only on a box with an inbound-trigger intake armed.",
+			description: "Compiles the JSONata, evaluates it over the sample event, then validates the result against the destination input JSON Schema: the workflow's declared schema, or an agent's required `message` string with at least one character. Whitespace is valid. No mapping is written, no repeatable armed, no delivery journalled and no cursor moved, so it is the safe way to author a mapping before saving one.\n\nThe sample event is the trigger descriptor's own, unless `subscriptionId` names a link on the same trigger. A link that has received an event is evaluated over its first real event (`sampleSource: link`). A link with none yet is evaluated over the newest event its provider holds, read once without claiming or delivering it; that event is kept as the link's sample and echoed back as `sampleEvent` (`sampleSource: fetched`). When that read finds nothing or fails (an empty mailbox, an expired credential, a timeout), the answer is over the descriptor's sample (`sampleSource: declared`), never an error.\n\nA webhook trigger has no feed to read and its descriptor's sample comes from another account, so until the named link receives its first event nothing is evaluated: the answer is `{ output: null, issues: [], sampleSource: none }`, with no key and no verdict on the mapping. The same holds when no `subscriptionId` is given. A key or a destination input schema that does not compile is still refused with its 400, since it is wrong on any event.\n\nA blank or `null` `mapping` maps the way the link delivers: on a workflow it is the identity mapping and the sample event comes back unchanged; on an agent the sample event comes back unchanged when it carries a non-empty text `message`, and otherwise as `{ message }` holding the event as text (a string as is, anything else as JSON). `output` is whatever the expression produced, which may be a scalar or an array as easily as an object.\n\nThe key the link's kind reads is evaluated over the same sample event: `correlationKey` on a workflow link (the run a real event would resume), `conversationKey` on an agent link (the conversation it would land in). As on register, a non-blank key of the other kind is refused (`invalid_payload`); a blank one (null, empty or whitespace) is no key.\n\nPresent only on a box with an inbound-trigger intake armed.",
 			request: { body: jsonBody(named("PreviewTriggerMappingRequest", previewTriggerMappingRequestSchema), "The capability to read the sample event from, the workflow or agent to validate against, and the candidate `mapping` (plus the optional `correlationKey` or `conversationKey`) to try.") },
 			responses: {
-				200: jsonResponse$1(named("TriggerMappingPreview", triggerMappingPreviewResponseSchema), "The mapped output, plus one issue per field the target schema rejected. An empty `issues` with a 200 IS the passing dry-run. `sampleSource` says which sample event was evaluated over, and `sampleEvent` is present only when it was `fetched`. `correlationKey` and `conversationKey` are each present only when the request carried a non-blank expression for it, and `null` when that expression matched nothing."),
-				400: jsonResponse$1(named("TriggerMappingRefusal", triggerMappingRefusalSchema), "The body failed its schema (`invalid_payload`, including a key the link's kind does not read), the capability does not resolve (`unknown_capability`), or the operator's own expression is at fault: `invalid_mapping` / `invalid_correlation_key` / `invalid_conversation_key` (it does not parse) and `mapping_evaluation_failed` / `correlation_key_evaluation_failed` / `conversation_key_evaluation_failed` (it parsed and threw). A `invalid_target_schema` here is the WORKFLOW's declared input schema failing to compile — reported rather than answered as a passing dry-run with no issues."),
+				200: jsonResponse$2(named("TriggerMappingPreview", triggerMappingPreviewResponseSchema), "The mapped output, plus one issue per field the target schema rejected. An empty `issues` with a 200 IS the passing dry-run, except under `sampleSource: none`: a webhook trigger with no event yet, where nothing was evaluated and `output` is `null`. Otherwise `sampleSource` says which sample event was evaluated over, and `sampleEvent` is present only when it was `fetched`. `correlationKey` and `conversationKey` are each present only when the request carried a non-blank expression for it, and `null` when that expression matched nothing."),
+				400: jsonResponse$2(named("TriggerMappingRefusal", triggerMappingRefusalSchema), "The body failed its schema (`invalid_payload`, including a key the link's kind does not read), the capability does not resolve (`unknown_capability`), or the operator's own expression is at fault: `invalid_mapping` / `invalid_correlation_key` / `invalid_conversation_key` (it does not parse) and `mapping_evaluation_failed` / `correlation_key_evaluation_failed` / `conversation_key_evaluation_failed` (it parsed and threw). A `invalid_target_schema` here is the WORKFLOW's declared input schema failing to compile — reported rather than answered as a passing dry-run with no issues."),
 				404: errorResponse("This box holds no destination of that kind and name (`workflow_not_found` or `agent_not_found`). Platform-installed agents are unavailable as destinations."),
 				501: errorResponse("This runtime wired no destination-schema resolver, so there is nothing to validate against (`preview_unavailable`).")
 			}
@@ -101672,6 +102106,22 @@ var init_subscriptions_router = __esmMin((() => {
 				trigger,
 				subscriptionId
 			});
+			if (sample.source === "none") {
+				const correlation = compileKey(correlationKey, "correlationKey");
+				if (!correlation.ok) return c.json(correlation.refusal, 400);
+				const conversation = compileKey(conversationKey, "conversationKey");
+				if (!conversation.ok) return c.json(conversation.refusal, 400);
+				const declared = schemaPair.input;
+				if (declared != null && typeof declared === "object") {
+					const schemaRefusal = targetSchemaRefusal(validateAgainstSchema(null, declared));
+					if (schemaRefusal) return c.json(schemaRefusal, 400);
+				}
+				return c.json({
+					output: null,
+					issues: [],
+					sampleSource: sample.source
+				}, 200);
+			}
 			const sampleData = sample.event;
 			const source = {
 				sampleSource: sample.source,
@@ -101703,11 +102153,8 @@ var init_subscriptions_router = __esmMin((() => {
 				...source
 			}, 200);
 			const validated = validateAgainstSchema(output, inputSchema);
-			if (!validated.ok && validated.error.kind !== "schema_validation_error") return c.json({
-				code: validated.error.kind,
-				message: validated.error.message,
-				error: validated.error
-			}, 400);
+			const schemaRefusal = targetSchemaRefusal(validated);
+			if (schemaRefusal) return c.json(schemaRefusal, 400);
 			const issues = !validated.ok && validated.error.kind === "schema_validation_error" ? validated.error.issues : [];
 			return c.json({
 				output,
@@ -101725,7 +102172,7 @@ var init_subscriptions_router = __esmMin((() => {
 			description: "Runs the reserved `mapping-suggest` workflow inline over the org's model, grounded on the sample event — the first real event of the link `subscriptionId` names when it has one, else the trigger's own — and on the trigger's declared event schema, when it has one, and aimed at the destination input JSON Schema: the workflow's declared schema, or an agent's required `message` string with at least one character. The answer is a pair-list, not a mapping — the editor materialises it, and the operator still has to save.\n\nThe conversation key is offered as a named output too, so a suggestion may target `@correlationKey` instead of a destination input field.\n\nPresent only on a box with an inbound-trigger intake armed.",
 			request: { body: jsonBody(named("AutoMapTriggerMappingRequest", autoMapTriggerMappingRequestSchema), "The capability to map FROM and the workflow or agent to map TO.") },
 			responses: {
-				200: jsonResponse$1(named("TriggerAutoMapProposal", triggerAutoMapResponseSchema), "The model's proposed pairs, each a target path and the JSONata that fills it. An empty list is a legitimate answer."),
+				200: jsonResponse$2(named("TriggerAutoMapProposal", triggerAutoMapResponseSchema), "The model's proposed pairs, each a target path and the JSONata that fills it. An empty list is a legitimate answer."),
 				403: forbiddenResponse("config:write"),
 				400: errorResponse("The body failed its schema (`invalid_payload`), the capability does not resolve (`unknown_capability`), or the workflow declares no input schema, so there is nothing to map to (`no_target_schema`)."),
 				404: errorResponse("This box holds no destination of that kind and name (`workflow_not_found` or `agent_not_found`). Platform-installed agents are unavailable as destinations."),
@@ -101787,7 +102234,7 @@ var init_subscriptions_router = __esmMin((() => {
 			description: "Runs the options loader of a scope param the capability flags `dynamicOptions: true` (a piece dropdown, such as WhatsApp's business number) through the credential of `principalKey`, and answers the values it may take. Each `value` is the text a link stores under the param and is sent back as is on register: a string the piece answered stays that string, and anything else is its JSON. Writes nothing and arms nothing.\n\nPresent only on a box with an inbound-trigger intake armed.",
 			request: { body: jsonBody(named("TriggerScopeOptionsRequest", triggerScopeOptionsRequestSchema), "The capability, the param to load, the principal whose credential loads it, and the scope drafted so far.") },
 			responses: {
-				200: jsonResponse$1(named("TriggerScopeOptions", triggerScopeOptionsResponseSchema), "The options, in the piece's order, with its `placeholder` and `disabled` when it gave them. An empty list is a legitimate answer: the account has none."),
+				200: jsonResponse$2(named("TriggerScopeOptions", triggerScopeOptionsResponseSchema), "The options, in the piece's order, with its `placeholder` and `disabled` when it gave them. An empty list is a legitimate answer: the account has none."),
 				403: forbiddenResponse("config:write"),
 				400: errorResponse("The body failed its schema (`invalid_payload`), the param is typed rather than filled by the provider (`not_dynamic`), or the options could not be loaded for a reason somebody has to fix first: the broker's own code when the principal's credential could not be issued (`no_token`, `user_authorization_required`, `invalid_grant`, `credential_error`), `scope_options_failed` otherwise, with the piece's message."),
 				404: errorResponse("No such trigger on that integration (`unknown_capability`), or the trigger declares no scope param by that name (`unknown_scope_param`)."),
@@ -101839,7 +102286,7 @@ var init_subscriptions_router = __esmMin((() => {
 			tags: [TRIGGER_SUBSCRIPTIONS_TAG],
 			summary: "List every trigger → workflow link",
 			description: "Each link with the rollup of what it has actually done — when it last polled, when it last fired, and how many events it started or turned away. Polling and firing are two separate facts: an inbox with no new mail is a healthy link that has never fired.\n\n`activity.echoLoop` is set when a run the link started wrote back through the link's own connector with an `echoPath`, inside the last hour, and never asked `isOwnEcho` about that connector: the workflow may start itself. One per link, naming the connector, the operation and the run of the newest such write; `null` for a link that is off.\n\nPresent only on a box with an inbound-trigger intake armed.",
-			responses: { 200: jsonResponse$1(named("TriggerSubscriptionListResponse", triggerSubscriptionListResponseSchema), "Every link, plus the cadence the scheduler polls them at.") }
+			responses: { 200: jsonResponse$2(named("TriggerSubscriptionListResponse", triggerSubscriptionListResponseSchema), "Every link, plus the cadence the scheduler polls them at.") }
 		}), async (c) => c.json({
 			subscriptions: await deps.store.list(),
 			supportsResumeFromNow: true,
@@ -101853,7 +102300,7 @@ var init_subscriptions_router = __esmMin((() => {
 			description: "The operator-owned link WITHOUT the activity rollup the list carries — this read is also the intake tick's own, once per link per poll cadence, and joining the delivery journal on every tick would pay for it forever.\n\nAn armed link on a webhook trigger also carries `webhookUrl`, where the provider POSTs its events, for a piece that registers nothing itself and leaves the operator to paste it in.",
 			request: { params: looseSubscriptionIdPath },
 			responses: {
-				200: jsonResponse$1(named("TriggerSubscriptionResponse", triggerSubscriptionResponseSchema), "The link."),
+				200: jsonResponse$2(named("TriggerSubscriptionResponse", triggerSubscriptionResponseSchema), "The link."),
 				404: errorResponse("This box holds no link with that id (`not_found`).")
 			}
 		}), async (c) => {
@@ -101883,7 +102330,7 @@ var init_subscriptions_router = __esmMin((() => {
 				body: jsonBody(named("PatchTriggerSubscriptionRequest", patchTriggerSubscriptionRequestSchema), "The knobs a link can change after registration. Every field is optional on its own, but the body may not be empty.")
 			},
 			responses: {
-				200: jsonResponse$1(named("TriggerSubscriptionResponse", triggerSubscriptionResponseSchema), "The link as it now stands."),
+				200: jsonResponse$2(named("TriggerSubscriptionResponse", triggerSubscriptionResponseSchema), "The link as it now stands."),
 				403: forbiddenResponse("config:write"),
 				400: errorResponse("The body failed its schema — including the \"provide at least one field\" rule — (`invalid_payload`), it gives the link the key of the other kind (`invalid_payload`), it would leave a `debounceMs` on a workflow link or on an agent link with no `conversationKey` (`invalid_payload`), or the new JSONata does not compile (`invalid_mapping`, `invalid_correlation_key`, `invalid_conversation_key`). A patch that TURNS THE LINK ON is refused on the mapping it would leave behind when that mapping cannot fill the destination, a blank or `null` one judged on the default its kind delivers, as on register (`mapping_evaluation_failed`, `mapping_cannot_produce_input` — `details.mappingIssues` names the offending paths), and when a piece trigger's own `onEnable` fails (`trigger_enable_failed`, with the piece's message, or the broker's own code when the link's credential could not be minted), or when a piece's webhook trigger has no public URL to register (`webhook_url_unavailable`). A piece's webhook link that has received no event yet is not judged on its mapping; from its first event on, every save that leaves it armed is judged on that event. A `scope` edit is refused on the same two checks the register path runs (`scope_required`, `invalid_scope`), and — when the link stays armed — on the connection fence the new scope resolves onto (`operation_not_permitted`) and on a connector no request could reach (`connector_installation_required`). `resumeFrom` on a body that does not turn the link on is `invalid_payload`, `resumeFrom: \"cursor\"` on a link that has never polled is `no_cursor_to_resume_from` (it has no bookmark to resume from), and `resumeFrom: \"now\"` when no cursor can be minted for \"now\" is `cursor_seed_failed` — clearing the stored one instead would replay the provider's whole history. Nothing is written, `enabled` is left untouched, the previous expression stands and the cursor is not moved."),
 				404: errorResponse("This box holds no link with that id (`not_found`)."),
@@ -102039,7 +102486,7 @@ var init_subscriptions_router = __esmMin((() => {
 				query: deleteTriggerSubscriptionQuery
 			},
 			responses: {
-				200: jsonResponse$1(named("TriggerSubscriptionDeleteResponse", triggerSubscriptionDeleteResponseSchema), "The link is gone and its repeatable is disarmed."),
+				200: jsonResponse$2(named("TriggerSubscriptionDeleteResponse", triggerSubscriptionDeleteResponseSchema), "The link is gone and its repeatable is disarmed."),
 				403: forbiddenResponse("config:write"),
 				404: errorResponse("This box holds no link with that id (`not_found`)."),
 				502: errorResponse("The piece trigger's own `onDisable` failed (`trigger_disable_failed`), so whatever it registered at the provider may still be there. Nothing was removed and the link is still armed; retry, or send `?force=true` to delete it anyway.")
@@ -102189,7 +102636,7 @@ var init_webhook_router = __esmMin((() => {
 				body: describedJsonBody({}, "The provider's event, as it sends it. JSON is parsed, a form is read as its fields, and anything else reaches the trigger as text.")
 			},
 			responses: {
-				200: jsonResponse$1(webhookReceiptSchema, "Every event in the delivery reached the journal."),
+				200: jsonResponse$2(webhookReceiptSchema, "Every event in the delivery reached the journal."),
 				400: errorResponse("The body is declared JSON and does not parse (`invalid_payload`)."),
 				404: errorResponse("No link is armed at this URL (`not_found`): the id names no link, the link is off or is not a webhook trigger, or the token is not its own. One answer for all of them."),
 				413: errorResponse("The body is over the delivery cap (`payload_too_large`)."),
@@ -102833,7 +103280,7 @@ var init_destinations_router = __esmMin((() => {
 			description: "The SDK's call, signed with the box HMAC like `POST /api/connect/execute`. The SDK has already staged the bytes in the box's object store; the body names the key, never the bytes. The box resolves the output's binding, runs the connector's file writer through the action executor — so the connection fence applies to every call the sequence makes — and answers a RECEIPT.\n\nA receipt, not an error, because by the time a run reaches its output the expensive work is done. `filed: true` carries the provider's file id. `filed: false` carries the parked row: `unbound` when nobody has bound this output yet, `write_failed` when the provider refused — the row keeps the staged key so the document is not lost, and the installation screen lists it.\n\nThe one error is a binding this box cannot act on (`destination_misconfigured`): a connector with no file writer, or a destination with no `id`. Retrying cannot fix that, so nothing is parked for it.",
 			request: { body: jsonBody(named("OutputWriteRequest", outputWriteRequestSchema), "Which output of which workflow, the name and type the document gets, and the staged key.") },
 			responses: {
-				200: jsonResponse$1(named("OutputWriteReceipt", outputWriteReceiptSchema), "The document is at the provider (`filed`), or kept on this box (`parked`)."),
+				200: jsonResponse$2(named("OutputWriteReceipt", outputWriteReceiptSchema), "The document is at the provider (`filed`), or kept on this box (`parked`)."),
 				400: errorResponse("The body failed its schema (`invalid_payload`)."),
 				401: AGENT_WIRE_401,
 				409: errorResponse("The binding cannot be acted on (`destination_misconfigured`): its connector declares no file writer, names one this box has no code for, or stores a destination with no `id`. Fix the binding; nothing was parked.")
@@ -102861,7 +103308,7 @@ var init_destinations_router = __esmMin((() => {
 			description: "The SDK's other call, signed with the box HMAC exactly as `POST /write` is. The box resolves the action's binding, builds the same executor `/api/connect/execute` builds, and runs ONE operation through it.\n\nWhat crosses is smaller than a write's body because the decisions split differently: the WORKFLOW names the operation and composes the arguments, and the operator picked the connection and nothing else. There is no destination, no staged bytes and no file name.\n\nAnswers a RESULT, not an error, for the reason the write answers a receipt: by the time a run reaches its action the expensive work is done. `called: true` carries the operation's own output. `called: false` carries a refusal — `unbound` when nobody has bound this action yet, and otherwise the BROKER's own code and message, forwarded untouched. PLA-1093's connection fence lands in that arm, naming the operation attempted and the ones the connection permits, and it refuses before any credential is minted.",
 			request: { body: jsonBody(named("ActionCallRequest", actionCallRequestSchema), "Which action of which workflow, the operation to run, and its arguments.") },
 			responses: {
-				200: jsonResponse$1(named("ActionCallResult", actionCallResultSchema), "The operation ran (`called`), or nothing was called and the refusal says why."),
+				200: jsonResponse$2(named("ActionCallResult", actionCallResultSchema), "The operation ran (`called`), or nothing was called and the refusal says why."),
 				400: errorResponse("The body failed its schema (`invalid_payload`)."),
 				401: AGENT_WIRE_401
 			}
@@ -102875,7 +103322,7 @@ var init_destinations_router = __esmMin((() => {
 			tags: [DESTINATIONS_TAG],
 			summary: "List every output binding",
 			description: "Each declared output an operator has bound: which workflow, which output, which connector and grant, and the destination as the operator stored it.\n\nPresent only on a box with an inbound-trigger intake armed.",
-			responses: { 200: jsonResponse$1(named("DestinationBindingListResponse", destinationBindingListResponseSchema), "Every binding on this box.") }
+			responses: { 200: jsonResponse$2(named("DestinationBindingListResponse", destinationBindingListResponseSchema), "Every binding on this box.") }
 		}), async (c) => c.json({ bindings: await deps.store.listBindings() }, 200));
 		app.openapi(createRoute({
 			method: "post",
@@ -102885,7 +103332,7 @@ var init_destinations_router = __esmMin((() => {
 			description: "Decides how one of a workflow's declarations reaches the outside. WHICH rules apply comes from what the workspace declared the name as, never from the body: a `file` needs a connector that can file and a destination it accepts; an `action` needs a connector this box knows and NO destination, because the operator picks the connection and nothing else. A name nothing declares takes the file rules.\n\nAn UPSERT on the (workflow, output) pair: binding an output that is already bound replaces the binding and keeps its id, because the later decision is the one that holds. `principalKey` defaults to `app`.\n\nThe connector must be one `GET /api/destinations/capabilities` lists — a name this box does not know, or one with no file writer, is refused here rather than days later on a run nobody is watching — and `principalKey` must be a grant the broker can resolve.\n\n`destination` is stored as the operator sent it; the one shape rule is an `id` string, which is what the connector's writer receives. Every other key is display metadata the box never reads.",
 			request: { body: jsonBody(named("UpsertDestinationBindingRequest", upsertDestinationBindingRequestSchema), "The output to bind, the connector and grant to write through, and where.") },
 			responses: {
-				201: jsonResponse$1(named("DestinationBindingResponse", destinationBindingResponseSchema), "The binding as it was stored."),
+				201: jsonResponse$2(named("DestinationBindingResponse", destinationBindingResponseSchema), "The binding as it was stored."),
 				400: errorResponse("The body failed its schema (`invalid_payload`), names a connector this box does not know or that cannot file a document (`unknown_connector`, `connector_cannot_file`), names a grant the broker cannot resolve (`invalid_principal_key`), or sends a destination the declaration does not accept — missing or malformed for a `file` (`destination_required`, `invalid_destination`), present at all for an `action` (`destination_not_accepted`).")
 			}
 		}), async (c) => {
@@ -102909,7 +103356,7 @@ var init_destinations_router = __esmMin((() => {
 			summary: "Read one output binding",
 			request: { params: looseBindingIdPath },
 			responses: {
-				200: jsonResponse$1(named("DestinationBindingResponse", destinationBindingResponseSchema), "The binding."),
+				200: jsonResponse$2(named("DestinationBindingResponse", destinationBindingResponseSchema), "The binding."),
 				404: errorResponse("This box holds no binding with that id (`not_found`).")
 			}
 		}), async (c) => {
@@ -102927,7 +103374,7 @@ var init_destinations_router = __esmMin((() => {
 				body: jsonBody(named("PatchDestinationBindingRequest", patchDestinationBindingRequestSchema), "The fields to change.")
 			},
 			responses: {
-				200: jsonResponse$1(named("DestinationBindingResponse", destinationBindingResponseSchema), "The binding after the edit."),
+				200: jsonResponse$2(named("DestinationBindingResponse", destinationBindingResponseSchema), "The binding after the edit."),
 				400: errorResponse("The body failed its schema (`invalid_payload`), carried none of the three editable fields, named a connector this box cannot file through (`unknown_connector`, `connector_cannot_file`), named a grant the broker cannot resolve (`invalid_principal_key`), or sent a destination the declaration does not accept (`destination_required`, `invalid_destination`, `destination_not_accepted`)."),
 				404: errorResponse("This box holds no binding with that id (`not_found`).")
 			}
@@ -102961,7 +103408,7 @@ var init_destinations_router = __esmMin((() => {
 			description: "Removes the binding. The next write for that output parks as `unbound` instead of failing. A repeat delete answers 404, so a client can tell \"I removed it\" from \"it was already gone\".",
 			request: { params: looseBindingIdPath },
 			responses: {
-				200: jsonResponse$1(named("DestinationBindingDeleteResponse", destinationBindingDeleteResponseSchema), "The binding is gone."),
+				200: jsonResponse$2(named("DestinationBindingDeleteResponse", destinationBindingDeleteResponseSchema), "The binding is gone."),
 				404: errorResponse("This box holds no binding with that id (`not_found`).")
 			}
 		}), async (c) => {
@@ -102983,7 +103430,7 @@ var init_destinations_router = __esmMin((() => {
 			tags: [DESTINATIONS_TAG],
 			summary: "List the documents waiting to be filed",
 			description: "Every output a run produced that has not reached its destination, newest first: `unbound` rows waiting for a binding, `write_failed` rows carrying what the provider said and how many attempts have been made. A row leaves this list once a later attempt files it — `POST {id}/drain` is that attempt.",
-			responses: { 200: jsonResponse$1(named("ParkedOutputListResponse", parkedOutputListResponseSchema), "What is still waiting.") }
+			responses: { 200: jsonResponse$2(named("ParkedOutputListResponse", parkedOutputListResponseSchema), "What is still waiting.") }
 		}), async (c) => c.json({ parked: (await deps.store.listParked()).map(parkedListRow) }, 200));
 		app.openapi(createRoute({
 			method: "get",
@@ -102993,7 +103440,7 @@ var init_destinations_router = __esmMin((() => {
 			description: "The values behind a parked call, one row at a time (PLA-1273).\n\nIts own route because the arguments ARE the write: a workflow composes them freely, `stackbone.secrets` included, so handing them to an operator deciding whether to press Drain is a disclosure and not a lookup. The list route carries the argument NAMES and stops there — the operator sees the shape of the call unasked, and asks for what is inside it.\n\nEvery answered read leaves a `destination.reveal_args` row on the box's activity trail, naming the workflow, the output, the operation and the person. Never a key and never a value: a trail carrying the argument names of a call would put half the disclosure back into the record that exists to account for it.\n\n`{}` is a real answer, not an empty one. A document was never a call, and an action whose run composed nothing is still a row an operator can open — the kind of the row is not a reason to fail a read.",
 			request: { params: looseBindingIdPath },
 			responses: {
-				200: jsonResponse$1(named("ParkedOutputArgsResponse", parkedOutputArgsResponseSchema), "The argument object the run composed, whole."),
+				200: jsonResponse$2(named("ParkedOutputArgsResponse", parkedOutputArgsResponseSchema), "The argument object the run composed, whole."),
 				404: errorResponse("No parked row with that id on this box (`not_found`).")
 			}
 		}), async (c) => {
@@ -103022,7 +103469,7 @@ var init_destinations_router = __esmMin((() => {
 			tags: [DESTINATIONS_TAG],
 			summary: "List what an output can be bound through",
 			description: "Every connector on this box that can file a document — one declaring a `fileWriter` — and the fields an operator must fill in to say where it lands.\n\nThese are the connector's OWN `destinationParams`, not a trigger's scope params: a binding is not a trigger, and a write-only provider has no trigger to borrow from.\n\n`pattern` is deliberately absent, as it is on the trigger capabilities surface. The regex is an escape boundary the box enforces on the way in; a client holding a copy is a client that can disagree with the box about what is valid.",
-			responses: { 200: jsonResponse$1(named("DestinationCapabilityListResponse", destinationCapabilityListResponseSchema), "What this box can file through, and what each needs.") }
+			responses: { 200: jsonResponse$2(named("DestinationCapabilityListResponse", destinationCapabilityListResponseSchema), "What this box can file through, and what each needs.") }
 		}), async (c) => c.json({ capabilities: destinationCapabilities(deps.definitions) }, 200));
 		app.openapi(createRoute({
 			method: "post",
@@ -103032,7 +103479,7 @@ var init_destinations_router = __esmMin((() => {
 			description: "The operator's button, one row at a time. Deliberately NOT a sweep: this happens once per customer, at setup, with a human present — which is exactly when a failure is read and when nothing should be happening behind anyone's back.\n\nWHICH KIND the row is decides what runs: a document goes through the file writer, an action through the action caller (PLA-1253). The operator presses one button either way, because the question they are answering is one question.\n\nThe binding is re-read NOW, not as it was when the row parked, so an `unbound` row goes out as soon as its output has been bound.\n\nAnswers a RECEIPT, and the two shapes differ in one field. A document lands as `filed: true` with the provider's id; an action as `fired: true` with whatever the operation returned, which may be a list, a boolean, or nothing. The failing arm is identical: the PROVIDER'S OWN message and the row's attempt count — the operator pressing the button is the person who can act on \"this connection does not permit createIssue\", so it is not flattened into a status code.",
 			request: { params: looseBindingIdPath },
 			responses: {
-				200: jsonResponse$1(named("ParkedDrainReceipt", z.union([outputDrainReceiptSchema, actionDrainReceiptSchema])), "It is at the provider, or it is still here and this is why."),
+				200: jsonResponse$2(named("ParkedDrainReceipt", z.union([outputDrainReceiptSchema, actionDrainReceiptSchema])), "It is at the provider, or it is still here and this is why."),
 				404: errorResponse("No parked row with that id on this box (`not_found`)."),
 				409: errorResponse("Nothing to send: the row already went out or another drain has it right now (`already_filed`, `already_fired`), nobody has bound it yet (`unbound`), or its binding cannot be acted on (`destination_misconfigured`). None is fixed by pressing again.")
 			}
@@ -103237,7 +103684,7 @@ var init_discovery_handlers = __esmMin((() => {
 				agents: [...manifest.agents, ...deepAgentManifestEntries(ctx.getDeepAgentRegistry?.())]
 			};
 		};
-		const discoveryResponses = { 200: jsonResponse$1(discoveryResponseSchema, "Everything this workspace serves: its in-process deep agents, and its workflows.") };
+		const discoveryResponses = { 200: jsonResponse$2(discoveryResponseSchema, "Everything this workspace serves: its in-process deep agents, and its workflows.") };
 		app.openapi(createRoute({
 			method: "get",
 			path: "/api/discovery",
@@ -103260,7 +103707,7 @@ var init_discovery_handlers = __esmMin((() => {
 			tags: [WORKFLOWS_TAG],
 			summary: "List the workflows this box serves",
 			description: "The catalog rows a creator is offered by default. A workflow whose compile FAILED keeps its row, marked `degraded` with the compiler's own message, rather than vanishing from the list. The platform's own entries (`rag-ingest`, `mapping-suggest`) are hidden here — `GET /api/catalog` returns them flagged.",
-			responses: { 200: jsonResponse$1(workflowListResponseSchema, "The workflow rows.") }
+			responses: { 200: jsonResponse$2(workflowListResponseSchema, "The workflow rows.") }
 		}), (c) => c.json({ items: ctx.set.manifest().workflows }, 200));
 		app.openapi(createRoute({
 			method: "get",
@@ -103270,8 +103717,8 @@ var init_discovery_handlers = __esmMin((() => {
 			description: "Resolved against the UNFILTERED catalog rows, so a platform-owned entry the catalog lists can be opened. `steps` is heuristic — the WDK manifest keys steps by source FILE, so a step imported from a shared module is missing.",
 			request: { params: workflowNamePath },
 			responses: {
-				200: jsonResponse$1(workflowDetailSchema, "The workflow row."),
-				404: jsonResponse$1(workflowNotFoundBodySchema, "This workspace declares no workflow by that name. The names it does declare are in `details.known`.")
+				200: jsonResponse$2(workflowDetailSchema, "The workflow row."),
+				404: jsonResponse$2(workflowNotFoundBodySchema, "This workspace declares no workflow by that name. The names it does declare are in `details.known`.")
 			}
 		}), (c) => {
 			const { name } = c.req.valid("param");
@@ -103291,9 +103738,9 @@ var init_discovery_handlers = __esmMin((() => {
 			description: "The input/output JSON Schema the build folded onto this workflow. A known workflow that declared none answers `{ input: null, output: null }` — the Playground falls back to a raw-JSON field.",
 			request: { params: workflowNamePath },
 			responses: {
-				200: jsonResponse$1(workflowSchemaPairSchema, "The folded contract, either half nullable."),
-				404: jsonResponse$1(workflowNotFoundBodySchema, "No workflow by that name."),
-				503: jsonResponse$1(workflowNotReadyBodySchema, "The workflow is REGISTERED but cannot answer — its compile failed, or no runtime is armed. Never a 404: the entry exists, so the reason is the compiler's own message rather than \"unknown workflow\".")
+				200: jsonResponse$2(workflowSchemaPairSchema, "The folded contract, either half nullable."),
+				404: jsonResponse$2(workflowNotFoundBodySchema, "No workflow by that name."),
+				503: jsonResponse$2(workflowNotReadyBodySchema, "The workflow is REGISTERED but cannot answer — its compile failed, or no runtime is armed. Never a 404: the entry exists, so the reason is the compiler's own message rather than \"unknown workflow\".")
 			}
 		}), (c) => {
 			const { name } = c.req.valid("param");
@@ -103342,12 +103789,12 @@ var init_start_handlers = __esmMin((() => {
 				body: describedJsonBody(workflowInputBodySchema, "The workflow's own input. Validated against the contract the creator declared (`GET /api/workflows/{name}/schema`), not against a box schema. Omit it entirely for a workflow that takes none.")
 			},
 			responses: {
-				200: jsonResponse$1(workflowStartReceiptSchema, "The run was enqueued — or, for a `serial` workflow whose lock is held, the trigger was queued behind the active run."),
-				400: jsonResponse$1(workflowInputInvalidBodySchema, "The workflow's own declared validator rejected this input. NO run is started."),
-				403: jsonResponse$1(z.union([invocationDeniedBodySchema, errorEnvelopeSchema]), "Refused before the handler ran, for one of two reasons. `invocation_not_permitted`: the caller is a workspace API key whose grants do not name this workflow under `workflow:start` (`http/invocation-guard.ts`). `forbidden`: the caller's verified identity does not hold `runs:invoke` — only reachable on the browser-direct datapath, since a proxy-signed call was authorized before it was signed. No run is started either way."),
-				404: jsonResponse$1(workflowNotFoundBodySchema, "This workspace declares no workflow by that name. The names it does declare are in `details.known`."),
-				422: jsonResponse$1(workflowGuardrailBlockedBodySchema, "The operator's own guardrail policy declined this payload. A clean 4xx, never a 500 — the request was understood, and the body names WHICH rule refused it."),
-				503: jsonResponse$1(workflowNotReadyBodySchema, "The workflow is REGISTERED but cannot answer — its compile failed, or no runtime is armed. Never the 404 a typo gets: the entry exists, so the body carries the compiler's own message.")
+				200: jsonResponse$2(workflowStartReceiptSchema, "The run was enqueued — or, for a `serial` workflow whose lock is held, the trigger was queued behind the active run."),
+				400: jsonResponse$2(workflowInputInvalidBodySchema, "The workflow's own declared validator rejected this input. NO run is started."),
+				403: jsonResponse$2(z.union([invocationDeniedBodySchema, errorEnvelopeSchema]), "Refused before the handler ran, for one of two reasons. `invocation_not_permitted`: the caller is a workspace API key whose grants do not name this workflow under `workflow:start` (`http/invocation-guard.ts`). `forbidden`: the caller's verified identity does not hold `runs:invoke` — only reachable on the browser-direct datapath, since a proxy-signed call was authorized before it was signed. No run is started either way."),
+				404: jsonResponse$2(workflowNotFoundBodySchema, "This workspace declares no workflow by that name. The names it does declare are in `details.known`."),
+				422: jsonResponse$2(workflowGuardrailBlockedBodySchema, "The operator's own guardrail policy declined this payload. A clean 4xx, never a 500 — the request was understood, and the body names WHICH rule refused it."),
+				503: jsonResponse$2(workflowNotReadyBodySchema, "The workflow is REGISTERED but cannot answer — its compile failed, or no runtime is armed. Never the 404 a typo gets: the entry exists, so the body carries the compiler's own message.")
 			}
 		}), async (c) => {
 			const { name } = c.req.valid("param");
@@ -103440,12 +103887,12 @@ var init_chat_handlers = __esmMin((() => {
 			},
 			responses: {
 				200: sseResponse("The turn, frame by frame.", CHAT_FRAMES),
-				400: jsonResponse$1(workflowInputInvalidBodySchema, "The workflow's own declared validator rejected this input. NO run is started, and no stream opens."),
-				403: jsonResponse$1(invocationDeniedBodySchema, "The caller is a workspace API key whose grants do not name this workflow under `workflow:chat` — its own action, so a key that may `/start` this workflow is still refused here. Answered by `http/invocation-guard.ts` BEFORE this handler, and identical for a name that does not exist."),
-				404: jsonResponse$1(workflowNotFoundBodySchema, "No workflow by that name."),
-				409: jsonResponse$1(workflowSerialEntryBodySchema, "The workflow is `serial`. Fire it through `POST /api/workflows/{name}/start` instead: a serial run is queued behind the active one, which a held-open stream cannot wait for."),
-				422: jsonResponse$1(workflowGuardrailBlockedBodySchema, "The operator's own guardrail policy declined this payload — the same border `/start` crosses, re-run here so the streaming door refuses what the durable one refuses."),
-				503: jsonResponse$1(workflowNotReadyBodySchema, "The workflow is REGISTERED but cannot answer — its compile failed, or no runtime is armed.")
+				400: jsonResponse$2(workflowInputInvalidBodySchema, "The workflow's own declared validator rejected this input. NO run is started, and no stream opens."),
+				403: jsonResponse$2(invocationDeniedBodySchema, "The caller is a workspace API key whose grants do not name this workflow under `workflow:chat` — its own action, so a key that may `/start` this workflow is still refused here. Answered by `http/invocation-guard.ts` BEFORE this handler, and identical for a name that does not exist."),
+				404: jsonResponse$2(workflowNotFoundBodySchema, "No workflow by that name."),
+				409: jsonResponse$2(workflowSerialEntryBodySchema, "The workflow is `serial`. Fire it through `POST /api/workflows/{name}/start` instead: a serial run is queued behind the active one, which a held-open stream cannot wait for."),
+				422: jsonResponse$2(workflowGuardrailBlockedBodySchema, "The operator's own guardrail policy declined this payload — the same border `/start` crosses, re-run here so the streaming door refuses what the durable one refuses."),
+				503: jsonResponse$2(workflowNotReadyBodySchema, "The workflow is REGISTERED but cannot answer — its compile failed, or no runtime is armed.")
 			}
 		}), async (c) => {
 			const { name } = c.req.valid("param");
@@ -103570,7 +104017,7 @@ var init_hook_handlers = __esmMin((() => {
 				body: describedJsonBody({ description: "Whatever the parked hook was written to receive." }, "What the parked hook receives. Omit it for a hook whose answer is simply \"continue\".")
 			},
 			responses: {
-				200: jsonResponse$1(hookResumedResponseSchema, "The run was woken. The F5 sweep is nudged, so the projected run reopens `interrupted → running` without waiting for the next interval."),
+				200: jsonResponse$2(hookResumedResponseSchema, "The run was woken. The F5 sweep is nudged, so the projected run reopens `interrupted → running` without waiting for the next interval."),
 				400: errorResponse("`invalid_token` — the token segment was empty or whitespace."),
 				404: errorResponse("`hook_not_found` — no PARKED hook matches that token."),
 				500: errorResponse("`resume_failed` — the World rejected the resume. `details.cause` carries its message.")
@@ -103601,7 +104048,7 @@ var init_hook_handlers = __esmMin((() => {
 			description: "The ONLY World-reading route on the box, joined by `runs.trace_id` (= the World run id). Raw `defineHook` hooks are listed too, not just helper-created ones.\n\nRun STATE is deliberately not here — it comes from the projection at `GET /api/runs/{id}`. `resumeKind` is `null` for a hook parked on an EXTERNAL signal, and a run detail must not offer a manual approve for one; a resume-kind lookup that fails degrades every hook to `null` rather than guessing.",
 			request: { params: z.object({ traceId: z.string().openapi({ description: "The run's World run id — `runs.trace_id`, not `runs.id`. Blank is refused with `invalid_trace_id`." }) }) },
 			responses: {
-				200: jsonResponse$1(pendingHooksResponseSchema, "The run's pending hooks. An empty list means nothing is parked — never that the run is unknown."),
+				200: jsonResponse$2(pendingHooksResponseSchema, "The run's pending hooks. An empty list means nothing is parked — never that the run is unknown."),
 				400: errorResponse("`invalid_trace_id` — the segment was empty or whitespace."),
 				500: errorResponse("`hooks_read_failed` — the World could not be read. `details.cause` carries its message.")
 			}
@@ -104321,7 +104768,7 @@ var buildEmulatorApp = (opts, hooks = {}) => {
 		security: PUBLIC_ROUTE_SECURITY,
 		summary: "Stackbone Agent Protocol handshake",
 		description: "The protocol version this box speaks, the oldest it still serves, the capabilities it advertises and the build that answers. The SDK reads it before calling any gated surface.",
-		responses: { 200: jsonResponse$1(named("ContractResponse", contractResponseSchema), "The handshake this box answers with.") }
+		responses: { 200: jsonResponse$2(named("ContractResponse", contractResponseSchema), "The handshake this box answers with.") }
 	}), (c) => c.json(buildContractResponse({ sdkVersion: opts.sdkVersion }), 200));
 	app.get("/", (c) => c.html(renderStudioStub({
 		agentSlug: opts.agent.slug,
@@ -104336,7 +104783,7 @@ var buildEmulatorApp = (opts, hooks = {}) => {
 		security: PUBLIC_ROUTE_SECURITY,
 		summary: "Which host this box is",
 		description: "The cheap dev-facing health read. `host` is the tag the box was booted with; `emulator` is the legacy dev marker and is present on the dev host only.",
-		responses: { 200: jsonResponse$1(boxHealthSchema, "The host this box answers as.") }
+		responses: { 200: jsonResponse$2(boxHealthSchema, "The host this box answers as.") }
 	}), (c) => {
 		const body = {
 			status: "ok",
@@ -104354,7 +104801,7 @@ var buildEmulatorApp = (opts, hooks = {}) => {
 		security: PUBLIC_ROUTE_SECURITY,
 		summary: "Liveness",
 		description: "Answers the moment the server binds — no probe, no await. Fly's machine liveness check reads it.",
-		responses: { 200: jsonResponse$1(z.object({ status: z.literal("ok") }), "The server is listening.") }
+		responses: { 200: jsonResponse$2(z.object({ status: z.literal("ok") }), "The server is listening.") }
 	}), (c) => c.json({ status: "ok" }, 200));
 	app.openapi(createRoute({
 		method: "get",
@@ -104364,8 +104811,8 @@ var buildEmulatorApp = (opts, hooks = {}) => {
 		summary: "Subsystem health",
 		description: "Runs every probe this host declared, in parallel, and reports each one. A host that declares no subsystems answers `checks:{}` — read that as \"nothing to report\", not as proof of health.",
 		responses: {
-			200: jsonResponse$1(SUBSYSTEM_HEALTH, "Every declared subsystem passed."),
-			503: jsonResponse$1(SUBSYSTEM_HEALTH, "At least one subsystem is failing.")
+			200: jsonResponse$2(SUBSYSTEM_HEALTH, "Every declared subsystem passed."),
+			503: jsonResponse$2(SUBSYSTEM_HEALTH, "At least one subsystem is failing.")
 		}
 	}), async (c) => {
 		const results = await Promise.all(probes.map(async ([name, probe]) => {
@@ -104400,7 +104847,7 @@ var buildEmulatorApp = (opts, hooks = {}) => {
 		summary: "Injected service endpoints",
 		description: "The Postgres, object-storage and agent-process endpoints this box injected into the agent, read back. A creator uses it to point `psql` or an S3 client at the same stack their agent is running against. No secret is in the answer: the Postgres password is removed from the DSN, and the storage secret key is left out (the access key is in).",
 		responses: {
-			200: jsonResponse$1(boxServicesSchema, "The endpoints this box handed the agent."),
+			200: jsonResponse$2(boxServicesSchema, "The endpoints this box handed the agent."),
 			403: errorResponse("The caller's role does not grant `db:query`. Only a browser-direct identity token carries a role; a signed call and the self-host operator token are not checked against one.")
 		}
 	}), (c) => c.json({
@@ -105194,7 +105641,7 @@ var calls_workflow_ts_default = "import { z } from \"zod\";\nimport { streamDeep
 var plain_workflow_ts_default = "import { z } from \"zod\";\n\n/**\n * Workflow \"{{name}}\" — a durable pipeline.\n *\n * Each `\"use step\"` is a durable checkpoint: kill the runtime mid-run and it\n * resumes from the last completed step instead of replaying everything.\n */\n\n// THE contract — sibling exports next to the bare workflow function. The build\n// harvests these (by convention) into the manifest + a live validator. The\n// parameter type is DERIVED from `inputSchema` and the RETURN type from\n// `outputSchema` (both `z.infer`), so neither side can drift from the contract\n// the build harvests. Without the return annotation the schema is published to\n// Studio and the generated types and never compared to what the body returns\n// (PLA-1272).\nexport const inputSchema = z.object({\n  message: z.string().describe(\"The input to process\"),\n});\n\nexport const outputSchema = z.object({\n  message: z.string(),\n  processed: z.boolean(),\n});\n\ntype {{Name}}Input = z.infer<typeof inputSchema>;\n\nexport async function {{export}}(input: {{Name}}Input): Promise<z.infer<typeof outputSchema>> {\n  \"use workflow\";\n\n  const result = await processMessage(input); // step 1 — durable checkpoint\n  return result;\n}\n\nasync function processMessage(input: {{Name}}Input) {\n  \"use step\";\n  // Replace this with the deterministic work of your step (DB write, HTTP call,\n  // an LLM call, …). Returning a value records it as the step's checkpoint.\n  return { message: input.message, processed: true };\n}\n";
 //#endregion
 //#region src/services/scaffold/template-loader.ts
-var SDK_TEMPLATE_VERSION = "0.10.3";
+var SDK_TEMPLATE_VERSION = "0.10.4";
 var PREFIX = "./templates/";
 var templates = new Map(Object.entries(/* @__PURE__ */ Object.assign({
 	"./templates/deep-agents/index.ts.tmpl": index_ts_default,
@@ -114417,7 +114864,7 @@ var readLocalManifest = async (ctx) => {
 		capabilities: [],
 		deviations: ["agent.yaml `capabilities` is not a list — skipped capability validation."]
 	};
-	const known = new Set(CAPABILITIES$1);
+	const known = new Set(CAPABILITIES$2);
 	const capabilities = [];
 	const deviations = [];
 	for (const entry of declared) if (typeof entry === "string" && known.has(entry)) capabilities.push(entry);