@wayai/cli 0.3.161 → 0.3.163

package/dist/index.js

@@ -4624,6 +4624,327 @@ function normalizeAuthType(raw) {
   if (VALID_AUTH_TYPES.has(raw)) return raw;
   return LEGACY_AUTH_TYPE_MAP[raw] ?? raw;
 }
+function schemaToQuestions(schema) {
+  const classified = classifySchema(schema);
+  if (classified.refusals.length > 0) return { ok: false, refusals: classified.refusals };
+  const questions = {};
+  for (const [field, primitive] of classified.fields) {
+    questions[field] = toQuestion(primitive);
+  }
+  return { ok: true, questions };
+}
+function classifySchema(schema) {
+  const fields = /* @__PURE__ */ new Map();
+  if (!isRecord(schema) || schema.type !== "object") {
+    return { fields, refusals: [{ field: null, reason: "schema_not_object" }] };
+  }
+  const properties = schema.properties;
+  if (!isRecord(properties) || Object.keys(properties).length === 0) {
+    return { fields, refusals: [{ field: null, reason: "schema_has_no_properties" }] };
+  }
+  const refusals = [];
+  for (const [field, property] of Object.entries(properties)) {
+    const primitive = classifyField(field, property);
+    if ("reason" in primitive) {
+      refusals.push({ field, reason: primitive.reason });
+      continue;
+    }
+    fields.set(field, primitive);
+  }
+  return refusals.length > 0 ? { fields: /* @__PURE__ */ new Map(), refusals } : { fields, refusals };
+}
+function classifyField(field, property) {
+  if (!isRecord(property)) return { reason: "unsupported_type" };
+  const instructions = describeField(field, property);
+  if (property.enum !== void 0) {
+    const declared = property.enum;
+    if (!Array.isArray(declared) || declared.some((option) => typeof option !== "string")) {
+      return { reason: "unsupported_type" };
+    }
+    const options = [...new Set(declared)];
+    if (options.length < 2) return { reason: "too_few_options" };
+    return { kind: "choice", instructions, options };
+  }
+  if (property.type === "boolean") return { kind: "noul", instructions };
+  if (property.type === "integer") {
+    const minimum = property.minimum;
+    const maximum = property.maximum;
+    if (!Number.isInteger(minimum) || !Number.isInteger(maximum)) {
+      return { reason: "integer_not_bounded" };
+    }
+    const levels = maximum - minimum + 1;
+    if (levels < DECISION_SCORE_MIN_LEVELS) return { reason: "too_few_options" };
+    if (levels > DECISION_SCORE_MAX_LEVELS) return { reason: "integer_range_too_large" };
+    return { kind: "score", instructions, minimum, levels };
+  }
+  return { reason: "unsupported_type" };
+}
+function toQuestion(primitive) {
+  switch (primitive.kind) {
+    case "choice":
+      return {
+        type: "choice",
+        instructions: primitive.instructions,
+        // A JSON Schema enum carries no per-option text, so each option stands as
+        // its own description. The distinguishing detail an option needs belongs
+        // in the field's `description`, which is the instructions.
+        criteria: Object.fromEntries(primitive.options.map((option) => [option, option]))
+      };
+    case "noul":
+      return { type: "noul", instructions: primitive.instructions };
+    case "score":
+      return {
+        type: "score",
+        instructions: primitive.instructions,
+        criteria: scoreLevels(primitive.minimum, primitive.levels)
+      };
+  }
+}
+function describeField(field, property) {
+  const description = isRecord(property) ? property.description : void 0;
+  return typeof description === "string" && description.trim() !== "" ? description : field;
+}
+function scoreLevels(minimum, levels) {
+  return Array.from({ length: levels }, (_, index) => String(minimum + index));
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isDecisionsModel(modelId) {
+  if (typeof modelId !== "string") return false;
+  const normalized = modelId.trim().toLowerCase();
+  return DECISIONS_MODEL_PREFIXES.some((prefix) => normalized.startsWith(prefix));
+}
+function checkDecisionsModelBinding(agent) {
+  if (!isDecisionsModel(agent.model)) return null;
+  const model = String(agent.model);
+  const role = agent.agent_role;
+  if (!DECISION_CAPABLE_AGENT_ROLES.includes(role)) {
+    return refuse(
+      "role_produces_text",
+      `agent_role "${String(role)}" produces text, which the decisions model "${model}" does not return. A decisions model binds to: ${DECISION_CAPABLE_AGENT_ROLES.join(", ")}.`
+    );
+  }
+  if (agent.response_format !== "json_schema") {
+    return refuse(
+      "response_format_not_json_schema",
+      `response_format must be "json_schema" to bind the decisions model "${model}".`
+    );
+  }
+  if (agent.schema_json === null || agent.schema_json === void 0 || agent.schema_json === "") {
+    return refuse(
+      "schema_missing",
+      `schema_json is required to bind the decisions model "${model}": a decisions model answers questions, and the schema is where they come from.`
+    );
+  }
+  let schema = agent.schema_json;
+  if (typeof schema === "string") {
+    try {
+      schema = JSON.parse(schema);
+    } catch {
+      return refuse(
+        "schema_unreadable",
+        `schema_json is not valid JSON, so the decisions model "${model}" cannot be bound.`
+      );
+    }
+  }
+  const mapped = schemaToQuestions(schema);
+  if (mapped.ok) return null;
+  const detail = mapped.refusals.map((refusal2) => `${refusal2.field ?? "(schema)"}: ${refusal2.reason}`).join("; ");
+  return {
+    reason: "schema_not_closed_set",
+    schema_refusals: mapped.refusals,
+    message: `schema_json is not closed-set, so the decisions model "${model}" cannot answer it \u2014 ${detail}. A decisions model answers enum, boolean and bounded-integer fields only.`
+  };
+}
+function refuse(reason, message) {
+  return { reason, schema_refusals: [], message };
+}
+function readAgentSettingsModel(agentSettings) {
+  let settings = agentSettings;
+  if (typeof settings === "string") {
+    try {
+      settings = JSON.parse(settings);
+    } catch {
+      return null;
+    }
+  }
+  if (typeof settings !== "object" || settings === null || Array.isArray(settings)) return null;
+  const model = settings.model;
+  return typeof model === "string" ? model : null;
+}
+function resolveMonitorTrigger(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return "idle";
+  const raw = monitorConfig.trigger;
+  return MONITOR_TRIGGERS.includes(raw) ? raw : "idle";
+}
+function isFiringTrigger(trigger) {
+  return trigger !== "manual";
+}
+function monitorConfigNeedsDelay(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return false;
+  return resolveMonitorTrigger(monitorConfig) === "idle" && monitorConfig.delay_seconds === void 0;
+}
+function monitorInputShapingKeysOnIdle(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return [];
+  if (resolveMonitorTrigger(monitorConfig) !== "idle") return [];
+  const config = monitorConfig;
+  return MONITOR_INPUT_SHAPING_KEYS.filter((key) => config[key] !== void 0);
+}
+function monitorRuleKeysOffTrigger(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return [];
+  if (MONITOR_RULE_TRIGGERS.includes(resolveMonitorTrigger(monitorConfig))) return [];
+  const config = monitorConfig;
+  return MONITOR_RULE_KEYS.filter((key) => config[key] !== void 0);
+}
+function monitorRuleActionKinds(trigger) {
+  return trigger === "assistant_reply" ? MONITOR_ASSISTANT_REPLY_ACTION_KINDS : MONITOR_USER_MESSAGE_ACTION_KINDS;
+}
+function monitorActionKindMessage(kind, trigger) {
+  const allowed = monitorRuleActionKinds(trigger).join(", ");
+  if (trigger === "assistant_reply") {
+    return `an assistant_reply rule cannot select "${kind}". Use one of: ${allowed}.`;
+  }
+  return `a monitor rule cannot select "${kind}": it acts before the reply exists. Use one of: ${allowed}.`;
+}
+function monitorRuleReentryTrack(toolName) {
+  return MONITOR_RULE_REENTRY_TRACKS.get(toolName);
+}
+function monitorRuleToolNotAllowedMessage(toolName, trigger) {
+  if (trigger === "assistant_reply" && isReplyGateRefusedToolName(toolName)) {
+    return `an assistant_reply rule cannot call "${toolName}": the reply already exists when this monitor runs, so there is no turn left for it to act on. Put it on a user_message monitor instead, which runs before the answering agent.`;
+  }
+  const callable = trigger === "assistant_reply" ? MONITOR_RULE_ALLOWED_NATIVE_TOOLS.filter((name) => !isReplyGateRefusedToolName(name)) : MONITOR_RULE_ALLOWED_NATIVE_TOOLS;
+  return `a ${trigger} rule cannot call "${toolName}". Rules can call ${callable.join(", ")}, and this hub's own external HTTP and MCP tools. Assign anything else to the answering agent instead.`;
+}
+function isReplyGateRefusedToolName(toolName) {
+  return monitorRuleReentryTrack(toolName) === "agent" || toolName === INSERT_NOTE_TOOL_NAME;
+}
+function isRefusedNativeToolName(toolName, trigger) {
+  if (!NATIVE_TOOL_NAMES.has(toolName)) return false;
+  if (!MONITOR_RULE_ALLOWED_NATIVE_TOOLS.includes(toolName)) return true;
+  return trigger === "assistant_reply" && isReplyGateRefusedToolName(toolName);
+}
+function monitorRuleActions(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return [];
+  const config = monitorConfig;
+  const found = [];
+  const visit = (action, path35) => {
+    if (!action || typeof action !== "object" || Array.isArray(action)) return;
+    found.push({ action, path: path35 });
+  };
+  if (Array.isArray(config.rules)) {
+    config.rules.forEach((rule, index) => {
+      if (!rule || typeof rule !== "object" || Array.isArray(rule)) return;
+      visit(rule.action, ["rules", index, "action"]);
+    });
+  }
+  visit(config.fallback, ["fallback"]);
+  return found;
+}
+function collectMonitorRuleIssues(monitorConfig) {
+  const offTrigger = monitorRuleKeysOffTrigger(monitorConfig).map((key) => ({ path: [key], message: MONITOR_RULE_TRIGGER_MESSAGE }));
+  if (offTrigger.length > 0) return offTrigger;
+  const trigger = resolveMonitorTrigger(monitorConfig);
+  const kinds = monitorRuleActionKinds(trigger);
+  const issues = [];
+  for (const { action, path: path35 } of monitorRuleActions(monitorConfig)) {
+    const kind = action.kind;
+    if (typeof kind === "string" && !kinds.includes(kind)) {
+      issues.push({ path: [...path35, "kind"], message: monitorActionKindMessage(kind, trigger) });
+    }
+    const toolName = action.tool_name;
+    if (kind === "call_tool" && typeof toolName === "string" && isRefusedNativeToolName(toolName, trigger)) {
+      issues.push({ path: [...path35, "tool_name"], message: monitorRuleToolNotAllowedMessage(toolName, trigger) });
+      continue;
+    }
+    if (kind === "call_tool" && toolName === INSERT_NOTE_TOOL_NAME) {
+      issues.push(...insertNoteArgumentIssues(action, path35));
+    }
+    if (kind === "call_tool" && toolName === RUN_MONITOR_TOOL_NAME) {
+      const callee = readRunMonitorCallee(action);
+      if (!callee.ok) {
+        issues.push({
+          path: [...path35, "args", "monitor_name"],
+          message: runMonitorCalleeMessage(callee.reason)
+        });
+      }
+    }
+  }
+  return issues;
+}
+function readInsertNoteTemplate(action) {
+  const read = readConstStringArg(action, "template");
+  if (!read.ok) {
+    return {
+      ok: false,
+      reason: read.reason === "missing" ? "note_template_missing" : read.reason === "not_const" ? "note_template_not_const" : "note_template_empty"
+    };
+  }
+  if (read.value.length > MONITOR_NOTE_TEMPLATE_MAX) {
+    return { ok: false, reason: "note_template_too_long" };
+  }
+  return { ok: true, template: read.value };
+}
+function readConstStringArg(action, argName) {
+  const args2 = action && typeof action === "object" ? action.args : void 0;
+  const arg = args2 && typeof args2 === "object" ? args2[argName] : void 0;
+  if (arg === void 0) return { ok: false, reason: "missing" };
+  const constValue = arg && typeof arg === "object" && !Array.isArray(arg) ? arg.const : void 0;
+  if (typeof constValue !== "string") return { ok: false, reason: "not_const" };
+  if (constValue.trim() === "") return { ok: false, reason: "empty" };
+  return { ok: true, value: constValue };
+}
+function readRunMonitorCallee(action) {
+  const read = readConstStringArg(action, "monitor_name");
+  if (read.ok) return { ok: true, name: read.value };
+  return {
+    ok: false,
+    reason: read.reason === "missing" ? "callee_missing" : read.reason === "not_const" ? "callee_not_const" : "callee_empty"
+  };
+}
+function runMonitorCalleeMessage(reason) {
+  switch (reason) {
+    case "callee_missing":
+      return "run_monitor needs a monitor_name: the monitor to run.";
+    case "callee_not_const":
+      return "run_monitor's monitor_name must be a const you write \u2014 it chooses which monitor runs, so it cannot come from a variable.";
+    case "callee_empty":
+      return "run_monitor's monitor_name is empty \u2014 name the monitor to run.";
+  }
+}
+function insertNoteTemplateMessage(reason) {
+  switch (reason) {
+    case "note_template_missing":
+      return "insert_note needs a template: the note text to put in front of the answering agent.";
+    case "note_template_not_const":
+      return "insert_note's template must be a const string you write \u2014 the answering agent reads it as instructions, so it cannot come from a variable. Use {{variable_name}} inside it to substitute this monitor's variables.";
+    case "note_template_empty":
+      return "insert_note's template is empty \u2014 remove the rule, or give it something to say.";
+    case "note_template_too_long":
+      return `insert_note's template is longer than the ${MONITOR_NOTE_TEMPLATE_MAX}-character limit.`;
+  }
+}
+function insertNoteArgumentIssues(action, path35) {
+  const result = readInsertNoteTemplate(action);
+  if (result.ok) return [];
+  return [{
+    path: [...path35, "args", "template"],
+    message: insertNoteTemplateMessage(result.reason)
+  }];
+}
+function refineDecisionsModelBinding(body, ctx) {
+  const agent = body;
+  const refusal2 = checkDecisionsModelBinding({
+    model: readAgentSettingsModel(agent.agent_settings),
+    agent_role: agent.agent_role,
+    response_format: agent.response_format,
+    schema_json: agent.schema_json
+  });
+  if (refusal2) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["agent_settings", "model"], message: refusal2.message });
+  }
+}
 function visibleLength(s) {
   return s.replace(INVISIBLE_NAME_CHARS, "").length;
 }
@@ -4743,7 +5064,7 @@ function extractToolParameters(toolConfig) {
   if (!cfg || typeof cfg !== "object" || Array.isArray(cfg)) return void 0;
   return cfg.parameters;
 }
-function isRecord(v) {
+function isRecord2(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function isPrimitive(v) {
@@ -4765,7 +5086,7 @@ function validateSchema(schema, path35, errors, opts = {}) {
     });
     return;
   }
-  if (!isRecord(schema)) {
+  if (!isRecord2(schema)) {
     errors.push({
       path: path35,
       message: `expected object, got ${schema === null ? "null" : typeof schema}`
@@ -4827,7 +5148,7 @@ function validateSchema(schema, path35, errors, opts = {}) {
     }
   }
   if ("properties" in schema) {
-    if (!isRecord(schema.properties)) {
+    if (!isRecord2(schema.properties)) {
       errors.push({
         path: `${path35}.properties`,
         message: `properties must be an object, got ${Array.isArray(schema.properties) ? "array" : typeof schema.properties}`
@@ -4846,7 +5167,7 @@ function validateSchema(schema, path35, errors, opts = {}) {
     }
   }
   for (const key of SUBSCHEMA_OBJECT_KEYWORDS) {
-    if (key in schema && isRecord(schema[key])) {
+    if (key in schema && isRecord2(schema[key])) {
       validateSchema(schema[key], `${path35}.${key}`, errors, { depth: depth + 1 });
     }
   }
@@ -4858,7 +5179,7 @@ function validateSchema(schema, path35, errors, opts = {}) {
   }
   for (const key of SUBSCHEMA_MAP_KEYWORDS) {
     const map = schema[key];
-    if (isRecord(map)) {
+    if (isRecord2(map)) {
       for (const [name, sub] of Object.entries(map)) {
         validateSchema(sub, `${path35}.${key}.${name}`, errors, { depth: depth + 1 });
       }
@@ -4888,7 +5209,7 @@ function schemaTypeIncludes(schema, wanted) {
 }
 function validateToolInputSchema(schema) {
   const errors = [];
-  if (!isRecord(schema)) {
+  if (!isRecord2(schema)) {
     errors.push({
       path: "",
       message: `expected object at root, got ${schema === null ? "null" : typeof schema}`
@@ -5369,7 +5690,120 @@ function refineHubAsCodeDelegation(config, ctx) {
     });
   });
 }
-var uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, MAX_AUDIO_FILE_BASE64_BYTES, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, PREVIOUS_CONVERSATIONS_MAX, previousConversationsCountField, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupTypeSchema, EVENT_RELATIVE_FOLLOWUP_TYPES, followupTimeUnitSchema, followupIdSchema, SELECTABLE_FOLLOWUP_TYPES, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS, followupSchema, MAX_OUTCOMES_PER_STATUS, kanbanOutcomeSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, MAX_EVAL_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, ORG_TAG_NAME_REGEX, ORG_TAG_NAME_MAX_LENGTH, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, BASE_CREDENTIAL_MANAGED_BY, BASE_CREDENTIAL_NAME_MAX, baseCredentialNameSchema, createBaseCredentialLinkBody, baseCredentialLinkParams, baseCredentialLinkQuery, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlTable, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_MAX_RUNS_PER_SCENARIO, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, ISO_UTC_RE, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, evalDateContextSchema, EVAL_FIXTURE_NAME_MAX_LENGTH, evalFixtureOverrideSchema, runSessionQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, createEvalBody, updateEvalBody, EVAL_LIST_MAX_LIMIT, evalListLimit, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, EVAL_MAX_SELECTED_SCENARIOS, evalScenarioSelectionEntrySchema, evalScenarioSelectionSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, evalSessionConfigResponseSchema, evalSessionResponseSchema, evalSessionListConfigSchema, evalSessionListItemSchema, seedReleaseStatusSchema, EVAL_SESSION_NOT_QUIESCENT, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, copilotSuggestBody, copilotSuggestResponse, CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, planKeySchema, billingStatusSchema, billingPlanTypeSchema, dataUsageCountersSchema, REKOR_ENTITLEMENT_CONTRACT_VERSION, entitlementProjectionSchema, rekorEntitlementRefreshMessageSchema, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, PRICING_PLAN_ID_RE, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetBody, adminRepairLegacyOrgGrantsBody, adminRepairCompedPlansBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysBody, dataExplorerKvKeyBody, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteBody, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, META_ENTITY_ID_PATTERN, metaEntityId, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, passwordLoginBody, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, REKOR_ACTOR_TYPE_HEADER, REKOR_ACTOR_ID_HEADER, REKOR_ACTOR_LABEL_HEADER, REKOR_ACTOR_ORG_HEADER, REKOR_ACTOR_ADMIN_HEADER, REKOR_CLIENT_HEADER, REKOR_TOOL_ID_HEADER, REKOR_CLIENTS, rekorClientSchema, MAX_REKOR_TOOL_ID_LENGTH, rekorToolIdSchema, DATA_PROXY_MOUNT, DATA_PROXY_PREFIX, REKOR_V1_PREFIX, DATA_PROXY_ORG_QUERY_PARAM, MAX_PROVISIONING_BODY_BYTES, dataProxyQuery, rekorAttestation, REQUIRED_REKOR_ATTESTATION_HEADERS, BASE_DESTRUCTION_MOUNT, BASE_DESTRUCTION_PREFIX, BASE_DESTRUCTION_CONFIRM_PATH, baseDestructionConfirmBody, BASE_DESTRUCTION_GRACE_MS, BASE_DESTRUCTION_CONFIRM_TTL_MS, BASE_DESTRUCTION_ORG_QUERY_PARAM, baseDestructionQuery, baseDestructionParam, baseDestructionInitiateBody, baseDestructionStatus, baseDestructionRequest, baseDestructionListResponse, baseDestructionInitiateResponse, baseDestructionConfirmResponse, baseDestructionCancelResponse, rekorBaseChangeMessageSchema;
+function refineHubAsCodeFlagConditions(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  const checkList = (list, basePath) => {
+    if (!Array.isArray(list)) return;
+    list.forEach((row, rowIndex) => {
+      const operator = row?.operator;
+      if (!FLAG_CONDITION_OPERATORS.includes(operator)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: [...basePath, rowIndex, "operator"],
+          message: `operator must be one of: ${FLAG_CONDITION_OPERATORS.join(", ")}`
+        });
+      }
+    });
+  };
+  agents.forEach((agent, agentIndex) => {
+    const a = agent;
+    checkList(a?.flag_conditions, ["agents", agentIndex, "flag_conditions"]);
+    const monitorConfig = a?.monitor_config;
+    if (monitorConfig && typeof monitorConfig === "object" && !Array.isArray(monitorConfig)) {
+      const base = ["agents", agentIndex, "monitor_config"];
+      checkList(
+        monitorConfig.flag_conditions,
+        [...base, "flag_conditions"]
+      );
+      const rules = monitorConfig.rules;
+      if (Array.isArray(rules)) {
+        rules.forEach((rule, ruleIndex) => {
+          if (!rule || typeof rule !== "object" || Array.isArray(rule)) return;
+          checkList(rule.when, [...base, "rules", ruleIndex, "when"]);
+        });
+      }
+    }
+  });
+}
+function refineHubAsCodeMonitorConfig(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  agents.forEach((agent, agentIndex) => {
+    const monitorConfig = agent?.monitor_config;
+    if (!monitorConfig || typeof monitorConfig !== "object" || Array.isArray(monitorConfig)) return;
+    const basePath = ["agents", agentIndex, "monitor_config"];
+    const checkKeyValues = (keys, schemas) => {
+      for (const key of keys) {
+        const value = monitorConfig[key];
+        if (value === void 0) continue;
+        const parsed = schemas[key].safeParse(value);
+        if (!parsed.success) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: [...basePath, key],
+            message: parsed.error?.issues[0]?.message ?? `invalid ${key}`
+          });
+        }
+      }
+    };
+    const trigger = monitorConfig.trigger;
+    if (trigger !== void 0 && !MONITOR_TRIGGERS.includes(trigger)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [...basePath, "trigger"],
+        message: `trigger must be one of: ${MONITOR_TRIGGERS.join(", ")}`
+      });
+      return;
+    }
+    if (monitorConfigNeedsDelay(monitorConfig)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [...basePath, "delay_seconds"],
+        message: MONITOR_IDLE_DELAY_REQUIRED_MESSAGE
+      });
+    }
+    for (const key of monitorInputShapingKeysOnIdle(monitorConfig)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [...basePath, key],
+        message: MONITOR_INPUT_SHAPING_IDLE_MESSAGE
+      });
+    }
+    checkKeyValues(MONITOR_INPUT_SHAPING_KEYS, MONITOR_INPUT_SHAPING_SCHEMAS);
+    checkKeyValues(MONITOR_RULE_KEYS, MONITOR_RULE_SCHEMAS);
+    for (const issue of collectMonitorRuleIssues(monitorConfig)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [...basePath, ...issue.path],
+        message: issue.message
+      });
+    }
+  });
+}
+function refineHubAsCodeDecisionsModel(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  agents.forEach((agent, agentIndex) => {
+    const a = agent;
+    if (!a) return;
+    const responseFormat = a.response_format;
+    const refusal2 = checkDecisionsModelBinding({
+      model: readAgentSettingsModel(a.settings),
+      agent_role: a.role,
+      response_format: responseFormat ? "json_schema" : "text",
+      schema_json: responseFormat?.schema_json ?? null
+    });
+    if (refusal2) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["agents", agentIndex, "settings", "model"],
+        message: refusal2.message
+      });
+    }
+  });
+}
+var uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, MAX_AUDIO_FILE_BASE64_BYTES, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, PREVIOUS_CONVERSATIONS_MAX, FLAG_CONDITION_OPERATORS, DECISION_SCORE_MIN_LEVELS, DECISION_SCORE_MAX_LEVELS, DECISIONS_MODEL_PREFIXES, DECISION_CAPABLE_AGENT_ROLES, NATIVE_TOOL_SCHEMAS, WAYAI_CONNECTOR, BASE_NATIVE_TOOLS, NATIVE_TOOLS, NATIVE_TOOL_NAMES, previousConversationsCountField, summarizationThresholdField, flagConditionSchema, MONITOR_TRIGGERS, monitorTriggerSchema, MONITOR_FIRING_TRIGGERS, MONITOR_DELAY_SECONDS_MIN, MONITOR_IDLE_DELAY_REQUIRED_MESSAGE, MONITOR_HISTORY_MESSAGES_MAX, monitorHistoryMessagesSchema, monitorIncludeToolResultsSchema, MONITOR_INPUT_SHAPING_KEYS, MONITOR_INPUT_SHAPING_SCHEMAS, MONITOR_INPUT_SHAPING_IDLE_MESSAGE, monitorArgumentSourceSchema, MONITOR_NOTE_TEMPLATE_MAX, monitorActionSchema, monitorRuleSchema, MONITOR_RULE_KEYS, MONITOR_RULE_SCHEMAS, MONITOR_RULE_TRIGGERS, MONITOR_RULE_TRIGGER_MESSAGE, MONITOR_USER_MESSAGE_ACTION_KINDS, MONITOR_ASSISTANT_REPLY_ACTION_KINDS, INSERT_NOTE_TOOL_NAME, RUN_MONITOR_TOOL_NAME, MONITOR_RULE_ALLOWED_NATIVE_TOOLS, MONITOR_RULE_REENTRY_TOOLS, MONITOR_RULE_REENTRY_TRACKS, monitorConfigField, flagConditionsField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupTypeSchema, EVENT_RELATIVE_FOLLOWUP_TYPES, followupTimeUnitSchema, followupIdSchema, SELECTABLE_FOLLOWUP_TYPES, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS, followupSchema, MAX_OUTCOMES_PER_STATUS, kanbanOutcomeSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, MAX_EVAL_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, ORG_TAG_NAME_REGEX, ORG_TAG_NAME_MAX_LENGTH, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, BASE_CREDENTIAL_MANAGED_BY, BASE_CREDENTIAL_NAME_MAX, baseCredentialNameSchema, createBaseCredentialLinkBody, baseCredentialLinkParams, baseCredentialLinkQuery, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlTable, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_MAX_RUNS_PER_SCENARIO, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, ISO_UTC_RE, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, evalDateContextSchema, EVAL_FIXTURE_NAME_MAX_LENGTH, evalFixtureOverrideSchema, runSessionQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, createEvalBody, updateEvalBody, EVAL_LIST_MAX_LIMIT, evalListLimit, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, EVAL_MAX_SELECTED_SCENARIOS, evalScenarioSelectionEntrySchema, evalScenarioSelectionSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, evalSessionConfigResponseSchema, evalSessionResponseSchema, evalSessionListConfigSchema, evalSessionListItemSchema, seedReleaseStatusSchema, EVAL_SESSION_NOT_QUIESCENT, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, appMessageResponse, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, deleteUserConversationsResponse, sendMessageBody, listConversationsQuery, flagSourceSchema, getConversationsResponse, getConversationDetailParams, getConversationDetailQuery, getConversationDetailResponse, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, copilotSuggestBody, copilotSuggestResponse, CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, planKeySchema, billingStatusSchema, billingPlanTypeSchema, dataUsageCountersSchema, REKOR_ENTITLEMENT_CONTRACT_VERSION, entitlementProjectionSchema, rekorEntitlementRefreshMessageSchema, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeStateSchema, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, CI_APPLY_ENTITY_KINDS, CI_APPLY_OPERATIONS, ciApplyErrorBaseSchema, ciApplyErrorSchema, ciSyncCountSchema, ciSyncChangesSchema, ciSyncWarningSchema, ciSyncResponseSchema, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, PRICING_PLAN_ID_RE, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetBody, adminRepairLegacyOrgGrantsBody, adminRepairCompedPlansBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysBody, dataExplorerKvKeyBody, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteBody, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, META_ENTITY_ID_PATTERN, metaEntityId, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, passwordLoginBody, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, REKOR_ACTOR_TYPE_HEADER, REKOR_ACTOR_ID_HEADER, REKOR_ACTOR_LABEL_HEADER, REKOR_ACTOR_ORG_HEADER, REKOR_ACTOR_ADMIN_HEADER, REKOR_CLIENT_HEADER, REKOR_TOOL_ID_HEADER, REKOR_CLIENTS, rekorClientSchema, MAX_REKOR_TOOL_ID_LENGTH, rekorToolIdSchema, DATA_PROXY_MOUNT, DATA_PROXY_PREFIX, REKOR_V1_PREFIX, DATA_PROXY_ORG_QUERY_PARAM, MAX_PROVISIONING_BODY_BYTES, dataProxyQuery, rekorAttestation, REQUIRED_REKOR_ATTESTATION_HEADERS, BASE_DESTRUCTION_MOUNT, BASE_DESTRUCTION_PREFIX, BASE_DESTRUCTION_CONFIRM_PATH, baseDestructionConfirmBody, BASE_DESTRUCTION_GRACE_MS, BASE_DESTRUCTION_CONFIRM_TTL_MS, BASE_DESTRUCTION_ORG_QUERY_PARAM, baseDestructionQuery, baseDestructionParam, baseDestructionInitiateBody, baseDestructionStatus, baseDestructionRequest, baseDestructionListResponse, baseDestructionInitiateResponse, baseDestructionConfirmResponse, baseDestructionCancelResponse, rekorBaseChangeMessageSchema;
 var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
     "use strict";
@@ -5546,18 +5980,993 @@ var init_contracts = __esm({
     SUMMARIZATION_THRESHOLD_MIN = 1e3;
     SUMMARIZATION_THRESHOLD_MAX = 1e6;
     PREVIOUS_CONVERSATIONS_MAX = 20;
+    FLAG_CONDITION_OPERATORS = ["=", "!=", ">=", "<=", ">", "<"];
+    DECISION_SCORE_MIN_LEVELS = 2;
+    DECISION_SCORE_MAX_LEVELS = 10;
+    DECISIONS_MODEL_PREFIXES = ["typesafe/jev-", "jev-"];
+    DECISION_CAPABLE_AGENT_ROLES = [
+      "monitor",
+      "conversation_evaluator",
+      "message_evaluator"
+    ];
+    NATIVE_TOOL_SCHEMAS = {
+      "close_conversation": {
+        "tool_config": {
+          "name": "close_conversation",
+          "description": "Closes the current conversation and marks it as resolved",
+          // Non-strict, mirroring the `update_kanban_status` sibling below: under strict
+          // mode there are no optional fields, so `outcome` outside `required` makes the
+          // provider reject the definition and `outcome` inside `required` forces the
+          // model to emit it on every call. Requiredness is enforced SERVER-side instead
+          // (ops `outcomeRequired`) — and it must stay out of `required` here, or
+          // validateAndSanitizeToolParams would refuse the "retry without an outcome"
+          // recovery path a re-close depends on.
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "outcome": {
+                "type": "string",
+                "enum": "[KANBAN_OUTCOME_VALUES]",
+                "description": "Required only when the hub's terminal (conversation-ending) status declares outcomes: the closing outcome. Available outcomes: [KANBAN_OUTCOME_NAMES]"
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when the user's issue has been fully resolved."
+      },
+      "transfer_to_team": {
+        "tool_config": {
+          "name": "transfer_to_team",
+          "description": "Hand off conversation to a human support team",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "team_name": {
+                "type": "string",
+                "description": "Name of the team to transfer to"
+              }
+            },
+            "required": [
+              "team_name"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when the user needs assistance that requires human intervention. The team will receive the full conversation history."
+      },
+      "delegate_to_hub": {
+        "tool_config": {
+          "name": "delegate_to_hub",
+          "description": "Delegate a request to another hub. The target hub handles it as a task conversation and returns the result asynchronously.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "request": {
+                "type": "string",
+                "description": "The request to delegate to the target hub, phrased as a self-contained task."
+              }
+            },
+            "required": [
+              "request"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to hand a self-contained request to a configured partner hub. The target hub is set by an admin on the tool; you do not choose it. The result comes back asynchronously \u2014 do not wait for it in this turn."
+      },
+      "start_consult_thread": {
+        "tool_config": {
+          "name": "start_consult_thread",
+          "description": "Ask the consultant configured on this tool a question, in a consult thread the support team can see. The answer may come back in this turn or later.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "question": {
+                "type": "string",
+                "description": "What you need from the consultant, phrased so it can be answered without further back-and-forth."
+              },
+              "title": {
+                "type": "string",
+                "description": "A short label for the consult thread (a few words), so the support team can tell parallel consults apart."
+              }
+            },
+            "required": [
+              "question",
+              "title"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when answering needs knowledge you do not have and a consultant is configured for it. The consultant is set by an admin; you do not choose it. If the result says the answer will follow, END YOUR TURN \u2014 tell the customer you are checking and will come back to them. You will be brought back automatically when the answer arrives; do not poll or call this tool again for the same question."
+      },
+      "update_kanban_status": {
+        "tool_config": {
+          "name": "update_kanban_status",
+          "description": "Updates the kanban status of the current conversation to track its progress through workflow stages",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "new_kanban_status": {
+                "type": "string",
+                "enum": "[KANBAN_STATUS_VALUES]",
+                "description": "The new kanban status for the conversation. Available statuses: [KANBAN_STATUS_NAMES]"
+              },
+              "outcome": {
+                "type": "string",
+                "enum": "[KANBAN_OUTCOME_VALUES]",
+                "description": "Required only when moving to the terminal (conversation-ending) status: the closing outcome. Available outcomes: [KANBAN_OUTCOME_NAMES]"
+              },
+              "scheduled_event_date": {
+                "type": "string",
+                "description": 'Scheduled event date in RFC3339 format with timezone (e.g., "2024-01-01T00:00:00-03:00")'
+              },
+              "event_description": {
+                "type": "string",
+                "description": "Description of the scheduled event"
+              },
+              "event_sid": {
+                "type": "string",
+                "description": "External event ID for integration purposes"
+              }
+            },
+            "required": [
+              "new_kanban_status"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to update the kanban status of a conversation to reflect its current stage in the workflow."
+      },
+      "schedule_followup": {
+        "tool_config": {
+          "name": "schedule_followup",
+          "description": "Schedules a custom manual followup for the current conversation at an exact future time. The system automatically determines the receiver based on conversation status and hub AI mode.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "scheduled_time": {
+                "type": "string",
+                "description": 'Exact time to execute the followup in ISO 8601 format with timezone (e.g., "2024-01-01T14:30:00-03:00"). Must be in the future.'
+              },
+              "message": {
+                "type": "string",
+                "description": 'The followup message to send to the customer. Can include AI instructions in brackets like: "Message text [AI Context: instructions for AI]"'
+              }
+            },
+            "required": [
+              "scheduled_time",
+              "message"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to schedule a custom followup message at an exact future time. The caller is responsible for choosing appropriate timing (business hours, etc.). This is separate from automatic kanban-based followups."
+      },
+      "transfer_to_agent": {
+        "tool_config": {
+          "name": "transfer_to_agent",
+          "description": "Hand off conversation to another AI agent",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "agent_name": {
+                "type": "string",
+                "description": "Name of the AI agent to transfer to"
+              }
+            },
+            "required": [
+              "agent_name"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when you need to hand the conversation to another agent on the same track \u2014 a specialist for a specific domain, or back to the entry pilot/copilot acting as a router for a request outside your domain."
+      },
+      "consult_agent": {
+        "tool_config": {
+          "name": "consult_agent",
+          "description": "Consult an advisor agent for specialized knowledge without transferring the conversation",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "agent_name": {
+                "type": "string",
+                "description": "Name of the advisor agent to consult for advice"
+              },
+              "consult_question": {
+                "type": "string",
+                "description": "The specific question to ask the advisor agent"
+              }
+            },
+            "required": [
+              "agent_name",
+              "consult_question"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when you need expert advice from an advisor agent but want to maintain conversation ownership. The consulted advisor will provide advice that you can use to help the user."
+      },
+      "read_file": {
+        "tool_config": {
+          "name": "read_file",
+          "description": "Retrieve a file by path (preferred) or by ID. The file is injected into the conversation context for AI processing.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "description": 'Path to the file. Knowledge and skill files live under "resources/", exactly as listed in your resource structure or in a file listing \u2014 e.g. "resources/product-docs/references/menu.md", where the segment after "resources/" names the resource. Files attached to this conversation live under "conversation/" and are announced in the transcript by that path \u2014 e.g. "conversation/report.pdf". A shorter form also works for those two and is matched across everything you can read, preferring an exact path over one that merely ends with what you wrote ("references/menu.md", or just "menu.md"); dropping a middle segment does not resolve, and a bare name carried by both a resource and this conversation is reported as ambiguous so you can retry with the full path. Files from an EARLIER conversation with the same user live under "conversations/<conversation_id>/" \u2014 e.g. "conversations/1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed/receipt.pdf", exactly as the transcript of that conversation announces them (get_conversation). That form takes no shortening: write the mount, the conversation id and the file name in full. Prefer this over file_id: paths are stable, while IDs are regenerated whenever a hub is published.'
+              },
+              "file_id": {
+                "type": "string",
+                "description": "The file ID to retrieve, from a conversation message or a file listing. Still supported, but prefer path for resource files."
+              },
+              "resource_id": {
+                "type": "string",
+                "description": "Optional. Restricts a path to one resource \u2014 use it when the same file name exists in more than one resource and the tool reports the reference as ambiguous. Must be a resource linked to this agent."
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool to read a file for AI analysis. Provide either path (preferred \u2014 the exact paths appear in your resource structure and in list_files output) or file_id. The file will be injected into the conversation context."
+      },
+      "download_file": {
+        "tool_config": {
+          "name": "download_file",
+          "description": "Mount a resource file into the code execution sandbox so you can edit it. Path is provider-specific: Anthropic mounts at /tmp/<filename>, OpenAI mounts at /mnt/data/<filename> \u2014 use the `sandbox_path` returned in the result. After mounting, use the provider's code-execution tool (Anthropic code_execution view/str_replace/create, or OpenAI code_interpreter Python) to read or modify the file. When finished, call upload_file to commit changes back to the resource library. Bytes never enter conversation context.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "file_id": {
+                "type": "string",
+                "description": "The resource file_id to mount (from a file listing or read_file \u2014 a listing row carries file_id alongside its path). Must be a text file; binary files are rejected."
+              }
+            },
+            "required": [
+              "file_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to begin editing a resource file. Returns { sandbox_path, filename, sandbox_file_id }. After this, use your provider's code-execution tool to view and modify the file inside the sandbox, then call upload_file with the sandbox_file_id of the modified file to persist changes."
+      },
+      "upload_file": {
+        "tool_config": {
+          "name": "upload_file",
+          "description": "Persist a sandbox file to the resource library. Two modes: (1) UPDATE \u2014 pass file_id of an existing resource file to overwrite it (after download_file + code-execution edits). (2) CREATE \u2014 pass resource_id + filename instead of file_id to add a new file to that resource (after creating the file in the sandbox with code-execution). Requires write_enabled on the agent_resource binding for the target resource. sandbox_file_id is always required.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "file_id": {
+                "type": "string",
+                "description": "UPDATE mode only: the existing resource file_id to overwrite. Omit when creating a new file."
+              },
+              "resource_id": {
+                "type": "string",
+                "description": "CREATE mode only: the resource the new file belongs to. Required when file_id is omitted; ignored when file_id is provided."
+              },
+              "filename": {
+                "type": "string",
+                "description": "CREATE mode only: the filename for the new file (e.g. 'pricing_v2.md'). Required when file_id is omitted. MIME type is inferred from the extension; only text files are supported."
+              },
+              "folder_id": {
+                "type": "string",
+                "description": "CREATE mode only: optional folder to place the file in. Omit for resource root."
+              },
+              "sandbox_file_id": {
+                "type": "string",
+                "description": "The provider-specific file_id of the file inside the sandbox. Anthropic: take from bash_code_execution_tool_result content[].file_id. OpenAI: take from the container_file_citation annotations on code_interpreter_call output. Either one identifies the file as it currently exists in the sandbox."
+              }
+            },
+            "required": [
+              "sandbox_file_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to commit either an edit (file_id + sandbox_file_id) or a new file (resource_id + filename + sandbox_file_id). Returns { saved, file_id, file_hash, bytes } on success \u2014 the file_id you can reference later. Errors clearly when write access is denied or when neither identifier set is provided."
+      },
+      "send_files": {
+        "tool_config": {
+          "name": "send_files",
+          "description": "Send files to the end user through their conversation channel (App, WhatsApp, email, etc.)",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "file_ids": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": 'Files to send to the user, each named by path (preferred) or by ID. Paths are the addresses announced in the transcript and in your resource structure \u2014 "conversation/report.pdf" for a file attached to this conversation, "conversations/<conversation_id>/receipt.pdf" for one attached to an earlier conversation with the same user, "resources/product-docs/price-list.pdf" for a knowledge or skill file. IDs remain accepted, but they are regenerated whenever a hub is published, so a path is the stable address.'
+              },
+              "folder_ids": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Array of resource folder IDs to send all files from. Alternative to file_ids."
+              },
+              "message_text": {
+                "type": "string",
+                "description": "Message text to accompany the files. For WhatsApp, this becomes the caption on the last file. For email, this becomes the email body."
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool to send files to users. WhatsApp sends files individually with optional caption on last file. Email sends all files as attachments in a single email."
+      },
+      "list_files": {
+        "tool_config": {
+          "name": "list_files",
+          "description": "Browse the files you can reach, by path. Call it with no path to see the mounts, then pass a mount or a folder path to list what is inside it. Every row carries the exact path read_file and send_files accept.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "description": 'What to list. Omit it (or pass "") for the mounts you can browse \u2014 the available mounts are listed here at runtime. "conversation" lists the files attached to this conversation. "resources" lists every resource mount. "resources/<resource-slug>" lists the top level of a knowledge resource or skill, and "resources/<resource-slug>/<folder>/<subfolder>" lists that folder. Folder rows come back with their own path, so you drill down by passing back the path of the row you want.'
+              },
+              "query": {
+                "type": "string",
+                "description": "Search text. Matched against a file's title and its file name. Under a resource path this searches the WHOLE subtree below it, not just the level named, and every result is returned as a full path."
+              },
+              "tags": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Return files carrying ANY of these tags. Applies to resource files only \u2014 conversation attachments carry no tags. Searches the whole subtree, like query."
+              },
+              "metadata_filter": {
+                "type": "object",
+                "description": 'Filter resource files by their metadata using MongoDB-style operators. Supported: $eq (equal), $ne (not equal), $gt/$gte/$lt/$lte (comparisons), $in/$nin (in/not in array), $contains (substring for text, membership for a list), $and/$or/$not (logical). Nested paths like "location.city" are supported, and a bare value means equality. Examples: {"status": "active"}, {"priority": {"$gte": 5}}, {"location.city": "Miami"}, {"$and": [{"status": "active"}, {"priority": {"$gt": 3}}]}, {"$not": {"status": "archived"}}. A comparison between different types simply does not match. Schema from resource.file_metadata_schema. Searches the whole subtree, like query.'
+              },
+              "limit": {
+                "type": "integer",
+                "description": "Maximum number of rows to return (default: 50, max: 100). The response reports the total the page was drawn from."
+              },
+              "offset": {
+                "type": "integer",
+                "description": "Number of rows to skip for pagination (default: 0)"
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": 'Use to find out which files exist before reading one. Call it with no path first: that returns the mounts \u2014 "conversation" for what the user attached here, and one "resources/<slug>" per knowledge resource or skill linked to you. Then pass a mount or folder path back to list its contents. Every row carries a `path`; pass that path to read_file to open the file, or to send_files to deliver it. Pass query, tags or metadata_filter to search a whole resource at once instead of walking it folder by folder. Files from EARLIER conversations are not listed here \u2014 the transcript of each past conversation announces its own files by path (get_conversation).'
+      },
+      "list_resource_folders": {
+        "tool_config": {
+          "name": "list_resource_folders",
+          "description": "(deprecated \u2014 use list_files) List all folders in resources that this agent has access to. Returns all folders with parent_folder_id for hierarchy reconstruction.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "resource_id": {
+                "type": "string",
+                "description": "Resource ID to query folders from. Must be one of the knowledge resources linked to this agent (the available ids are listed here at runtime). Required for access control and performance."
+              },
+              "search_query": {
+                "type": "string",
+                "description": "Search folders by name"
+              },
+              "metadata_filter": {
+                "type": "object",
+                "description": 'Filter by metadata using MongoDB-style operators. Supported: $eq (equal), $ne (not equal), $gt/$gte/$lt/$lte (comparisons), $in/$nin (in/not in array), $contains (contains value), $and/$or/$not (logical). Supports nested paths like "location.city". Returns clear errors for type mismatches. Examples: {"status": "active"} for simple equality, {"priority": {"$gte": 5}} for comparison, {"location.city": "Miami"} for nested path, {"$and": [{"status": "active"}, {"priority": {"$gt": 3}}]} for complex logic, {"$not": {"status": "archived"}} for negation. Schema from resource.folder_metadata_schema.'
+              }
+            },
+            "required": [
+              "resource_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Deprecated: prefer list_files, which walks the same folders by path and needs no resource_id. Still works \u2014 lists all folders in a resource, filtered by search_query or metadata, returning folder info with parent_folder_id, file counts, and subfolder counts."
+      },
+      "list_resource_files": {
+        "tool_config": {
+          "name": "list_resource_files",
+          "description": "(deprecated \u2014 use list_files) List files in resources that this agent has access to. Each file is returned with its path \u2014 the address read_file accepts \u2014 plus metadata.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "resource_id": {
+                "type": "string",
+                "description": "Resource ID to query files from. Must be one of the knowledge resources linked to this agent (the available ids are listed here at runtime). Required for access control and performance."
+              },
+              "folder_id": {
+                "type": "string",
+                "description": "Filter by folder ID. Omit to return ALL files. Use 00000000-0000-0000-0000-000000000000 for root-level files only."
+              },
+              "search_query": {
+                "type": "string",
+                "description": "Search files by title or file name"
+              },
+              "tags": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Filter by tags (matches files with any of the specified tags)"
+              },
+              "metadata_filter": {
+                "type": "object",
+                "description": 'Filter by metadata using MongoDB-style operators. Supported: $eq (equal), $ne (not equal), $gt/$gte/$lt/$lte (comparisons), $in/$nin (in/not in array), $contains (contains value), $and/$or/$not (logical). Supports nested paths like "location.city". Returns clear errors for type mismatches. Examples: {"status": "active"} for simple equality, {"priority": {"$gte": 5}} for comparison, {"location.city": "Miami"} for nested path, {"$and": [{"status": "active"}, {"priority": {"$gt": 3}}]} for complex logic, {"$not": {"status": "archived"}} for negation. Schema from resource.file_metadata_schema.'
+              },
+              "limit": {
+                "type": "integer",
+                "description": "Maximum number of files to return (default: 50, max: 100)"
+              },
+              "offset": {
+                "type": "integer",
+                "description": "Number of files to skip for pagination (default: 0)"
+              }
+            },
+            "required": [
+              "resource_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Deprecated: prefer list_files, which lists the same files by path, needs no resource_id, and also sees this conversation's attachments. Still works \u2014 each row carries a `path`; pass that path to read_file to retrieve the file's content for AI analysis. `file_id` is also returned and still accepted."
+      },
+      "get_tool_schema": {
+        "tool_config": {
+          "name": "get_tool_schema",
+          "description": "MANDATORY FIRST STEP: Retrieves the complete parameter schema for any tool by name. You MUST call this before using ANY tool to get its exact required parameters. This ensures execute_tool will succeed.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "tool_name": {
+                "type": "string",
+                "description": "The name of the tool to retrieve the schema for"
+              }
+            },
+            "required": [
+              "tool_name"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Mandatory first step before execute_tool. Returns `function_schema` for the target tool \u2014 pass `function_schema.parameters` (same shape, same keys) as the `parameters` envelope in your execute_tool call."
+      },
+      "execute_tool": {
+        "tool_config": {
+          "name": "execute_tool",
+          "description": "Executes any tool by name. You MUST call get_tool_schema first for the target tool to learn its parameter shape, then pass that shape verbatim under `parameters`.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "required": [
+              "tool_name",
+              "parameters"
+            ],
+            "properties": {
+              "tool_name": {
+                "type": "string",
+                "description": "The name of the tool to execute."
+              },
+              "parameters": {
+                "type": "object",
+                "description": "The arguments object for the target tool. Must match `function_schema.parameters` returned by get_tool_schema \u2014 same keys, same shape, same required fields. Inner contents are validated by the target tool, not by execute_tool."
+              }
+            },
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "MANDATORY WORKFLOW: 1) Call get_tool_schema(tool_name) to receive the target's `function_schema`. 2) Build a `parameters` object that matches `function_schema.parameters` \u2014 same property keys, same types, all required fields. 3) Call execute_tool({ tool_name, parameters }). The `parameters` envelope here is identical in shape to `function_schema.parameters`."
+      },
+      "expand_summary": {
+        "tool_config": {
+          "name": "expand_summary",
+          "description": "Retrieve the original messages of a section in the conversation summary. The summary block at the top of the conversation lists sections with stable `id`s \u2014 pass one to get the verbatim messages it covers.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "section_id": {
+                "type": "string",
+                "description": "The `id` of the section from the <conversation_summary> block at the top of the conversation."
+              }
+            },
+            "required": [
+              "section_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when a summary section is too compressed for the question at hand \u2014 e.g. you need the user's exact wording, the precise text of a previous decision, or a tool result that the summary only references. If you pass an unknown `section_id`, the response will include `available_section_ids` so you can retry with a valid one."
+      },
+      "read_skill": {
+        "tool_config": {
+          "name": "read_skill",
+          "description": "Read a skill's SKILL.md content. Pass a skill_id from the skills linked to this agent (available ids are listed in the skill_id parameter).",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "skill_id": {
+                "type": "string",
+                "description": "The skill's resource_id. Must be one of the skills linked to this agent (the available ids are listed here at runtime)."
+              }
+            },
+            "required": [
+              "skill_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool to read a skill's instructions. Returns the full SKILL.md content as a string. Use read_skill_file to access other files referenced in the skill."
+      },
+      "read_skill_file": {
+        "tool_config": {
+          "name": "read_skill_file",
+          "description": "Read a file from a skill by relative path. No need to call read_skill first if you already know the file path.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "skill_id": {
+                "type": "string",
+                "description": "The skill's resource_id. Must be one of the skills linked to this agent (the available ids are listed here at runtime)."
+              },
+              "file_path": {
+                "type": "string",
+                "description": 'Relative path from skill root (e.g., "references/menu.md")'
+              }
+            },
+            "required": [
+              "skill_id",
+              "file_path"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": 'Use this tool to read files referenced in SKILL.md. Provide the relative path as shown in the skill content (e.g., "references/menu.md"). Returns content for text files or signed URL for binary files.'
+      },
+      "update_state": {
+        "tool_config": {
+          "name": "update_state",
+          "description": "Updates a configured state by merging updates with its current value. Scope (conversation vs user) is inferred from the state's definition.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "state_slug": {
+                "type": "string",
+                "description": "Stable slug of the state to update. Pass the slug (the left half), not the display name. Available states (slug + display name): [STATE_SLUG_VALUES]"
+              },
+              "updates": {
+                "type": "object",
+                "description": "Object with key-value pairs to merge into the current state"
+              }
+            },
+            "required": [
+              "state_slug",
+              "updates"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to track and update contextual information during conversations. Examples: updating cart items, recording form answers, saving user preferences. The updates are merged with existing state."
+      },
+      "get_state": {
+        "tool_config": {
+          "name": "get_state",
+          "description": "Retrieves the current value of a configured state. Scope is inferred from the state's definition.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "state_slug": {
+                "type": "string",
+                "description": "Stable slug of the state to retrieve. Pass the slug (the left half), not the display name. Available states (slug + display name): [STATE_SLUG_VALUES]"
+              }
+            },
+            "required": [
+              "state_slug"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to retrieve the current state value. This is useful when you need to check the current state before making decisions or when the state is not already available in the prompt context."
+      },
+      "reset_state": {
+        "tool_config": {
+          "name": "reset_state",
+          "description": "Resets a configured state to its initial value as defined in the state schema. Scope is inferred from the state's definition.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "state_slug": {
+                "type": "string",
+                "description": "Stable slug of the state to reset. Pass the slug (the left half), not the display name. Available states (slug + display name): [STATE_SLUG_VALUES]"
+              }
+            },
+            "required": [
+              "state_slug"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to reset state to its default initial value. This is useful when you need to clear accumulated state and start fresh, such as clearing a shopping cart or resetting form progress."
+      },
+      "get_conversations_summary": {
+        "tool_config": {
+          "name": "get_conversations_summary",
+          "description": "Retrieves a timeline of past conversations with the current user, showing summaries and conversation IDs.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "max_conversations": {
+                "type": "integer",
+                "description": "Maximum number of past conversations to return (default: 10)"
+              },
+              "max_characters": {
+                "type": "integer",
+                "description": "Maximum characters in the output (default: 20000, max: 40000). Truncates oldest entries first."
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool at the start of a conversation to retrieve the history of past conversations with this user. Returns summaries with conversation IDs that can be used with get_conversation for full transcripts."
+      },
+      "get_conversation": {
+        "tool_config": {
+          "name": "get_conversation",
+          "description": "Retrieves the full transcript of a specific past conversation, plus the IDs of the conversations closed immediately before and after it. Use get_conversations_summary first to find conversation IDs.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "conversation_id": {
+                "type": "string",
+                "description": "The ID of the conversation to retrieve (from get_conversations_summary results)"
+              },
+              "max_characters": {
+                "type": "integer",
+                "description": "Maximum characters in the output (default: 30000, max: 60000). Truncates oldest messages first."
+              }
+            },
+            "required": [
+              "conversation_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool to read the full transcript of a specific past conversation. First use get_conversations_summary to find conversation IDs, then use this tool to drill into the details. The response may include previous_conversation_id and next_conversation_id \u2014 the conversations closed nearest in time either side of this one, which you can pass straight back to this tool to keep moving through the user's history. They are neighbours by closing time, not a fixed chain, and either may be absent."
+      },
+      // ---------------------------------------------------------------------------
+      // Tools added to the TS catalog after the Supabase migration — schemas
+      // reconstructed from the handler signatures in
+      // apps/backend/src/tools/native/wayai/*.ts.
+      // ---------------------------------------------------------------------------
+      "set_state_path": {
+        "tool_config": {
+          "name": "set_state_path",
+          "description": "Set a specific path within a state object (dot/array path) without overwriting the rest of the state. Scope is inferred from the state's definition.",
+          // strict:false matches the other state ops so legacy composed-tool YAML
+          // mapping `state_scope` (now ignored at runtime) doesn't trip OpenAI
+          // strict-mode validators on in-flight calls.
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "state_slug": {
+                "type": "string",
+                "description": "Stable slug of the state variable to update. Pass the slug (the left half), not the display name. Available states (slug + display name): [STATE_SLUG_VALUES]"
+              },
+              "path": {
+                "type": "array",
+                "items": { "type": "string" },
+                "description": "Path within the state object, as an ordered list of keys."
+              },
+              "value": {
+                "description": "The value to write at the given path. Any JSON value is allowed."
+              }
+            },
+            "required": ["state_slug", "path", "value"],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool when you need to update a single field inside a structured state object without replacing the entire state. Provide the full path from the root of the state object."
+      },
+      // NEVER OFFERED TO A MODEL, unlike every other entry in this file — and it is
+      // `model_callable: false` on the catalog entry that delivers that, NOT the role
+      // restriction beside it. An earlier version of this comment credited
+      // `assignable_roles: ['monitor']`, which was wrong: a monitor runs a DISPATCHING
+      // turn on `idle` (only the synchronous side-call sets `omit_tools`), and
+      // `PATCH /api/setup/agents/:id` can re-role an agent that keeps the rows it
+      // holds — so the role gate left the tool offerable on two paths.
+      //
+      // The schema exists because the catalog requires one per tool (the parity check
+      // at the bottom of `native-tools.ts`) and because it is the one place the two
+      // arguments are described for whoever writes the rule.
+      //
+      // `tool_instructions: null` FOLLOWS FROM THAT: instructions are injected into an
+      // agent's system message when the tool is attached, and this tool is attached to
+      // an agent whose model is never told it exists.
+      // NEVER OFFERED TO A MODEL, like `insert_note` below and for the same reason:
+      // `model_callable: false` on the catalog entry. A monitor's RULE selects it and
+      // the monitor runtime carries it out — it never reaches `handleTool`, because
+      // running a callee means re-entering the side-call with the caller's cascade
+      // state, which no `ToolContext` carries.
+      "run_monitor": {
+        "tool_config": {
+          "name": "run_monitor",
+          "description": "Run another monitor on this hub. The named monitor judges the same conversation and acts on its own rules; nothing it finds is returned here.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "monitor_name": {
+                "type": "string",
+                "description": "The name of the monitor to run. It must be a monitor on this hub whose trigger is manual."
+              }
+            },
+            "required": ["monitor_name"],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": null
+      },
+      "insert_note": {
+        "tool_config": {
+          "name": "insert_note",
+          "description": "Insert an admin-authored note into the answering agent's context for this turn only. The note is written by the administrator, not by a model; the monitor's variables are substituted into it.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "template": {
+                "type": "string",
+                "description": "The note text. Write {{variable_name}} to substitute one of this monitor's own variables. Unresolved names render as nothing and are recorded on the audit row."
+              },
+              "keep_in_history": {
+                "type": "boolean",
+                "description": "Default false: the note briefs this turn only and is never stored. Set true to also record it as an internal message the support team can see and the customer never receives."
+              }
+            },
+            "required": ["template"],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": null
+      }
+    };
+    WAYAI_CONNECTOR = "b17d9f3a-4e1b-46c9-b648-a2f0c3611aa4";
+    BASE_NATIVE_TOOLS = [
+      // --- Wayai core tools ---
+      { tool_native_id: "nt-001", tool_name: "transfer_to_agent", tool_display_name: "Transfer to Agent", tool_description: "Transfer the conversation to another AI agent", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-002", tool_name: "transfer_to_team", tool_display_name: "Transfer to Team", tool_description: "Escalate conversation to a human support team", connector_id: WAYAI_CONNECTOR, operation: "transfer_to_team", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-003", tool_name: "close_conversation", tool_display_name: "Close Conversation", tool_description: "Close and end the current conversation", connector_id: WAYAI_CONNECTOR, operation: "close_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-004", tool_name: "update_kanban_status", tool_display_name: "Update Kanban Status", tool_description: "Update the kanban status of the conversation", connector_id: WAYAI_CONNECTOR, operation: "update_kanban_status", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-005", tool_name: "schedule_followup", tool_display_name: "Schedule Follow-up", tool_description: "Schedule a follow-up message for the conversation", connector_id: WAYAI_CONNECTOR, operation: "schedule_followup", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: true, execution_config: null },
+      { tool_native_id: "nt-006", tool_name: "send_files", tool_display_name: "Send Files", tool_description: "Send files to the user", connector_id: WAYAI_CONNECTOR, operation: "send_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-007", tool_name: "update_state", tool_display_name: "Update State", tool_description: "Update conversation or user state variables", connector_id: WAYAI_CONNECTOR, operation: "update_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-008", tool_name: "get_state", tool_display_name: "Get State", tool_description: "Retrieve conversation or user state values", connector_id: WAYAI_CONNECTOR, operation: "get_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-009", tool_name: "reset_state", tool_display_name: "Reset State", tool_description: "Reset conversation or user state to initial values", connector_id: WAYAI_CONNECTOR, operation: "reset_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-010", tool_name: "set_state_path", tool_display_name: "Set State Path", tool_description: "Set a specific path within state object", connector_id: WAYAI_CONNECTOR, operation: "set_state_path", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-011", tool_name: "consult_agent", tool_display_name: "Consult Agent", tool_description: "Consult an advisor agent for advice without transferring", connector_id: WAYAI_CONNECTOR, operation: "consult_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-013", tool_name: "read_skill", tool_display_name: "Read Skill", tool_description: "Read the full specification of a skill", connector_id: WAYAI_CONNECTOR, operation: "read_skill", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-014", tool_name: "read_skill_file", tool_display_name: "Read Skill File", tool_description: "Read a specific file within a skill", connector_id: WAYAI_CONNECTOR, operation: "read_skill_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-015", tool_name: "read_file", tool_display_name: "Read File", tool_description: "Read the contents of a resource file", connector_id: WAYAI_CONNECTOR, operation: "read_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      // Superseded by `list_files` (nt-027), which browses the same resource files
+      // by PATH plus this conversation's attachments.
+      //
+      // `ui_assignable: false` — DEPRECATED, not withdrawn. Hiding the Add grid entry
+      // stops a NEW agent from being wired to a tool that addresses files by an id a
+      // publish re-mints and that cannot see a conversation attachment at all (the id
+      // itself is discoverable — `RESOURCE_TOOL_INJECTIONS` still writes the linked
+      // ids into their `resource_id` description every turn), while every hub that
+      // already assigns one keeps
+      // working: the handler still dispatches, CI name resolution still resolves the
+      // name, and `wayai pull` / `push` still round-trips the YAML. There is no
+      // auto-provisioning anywhere in the platform, so an existing agent is never
+      // migrated for free — an author swaps the tool deliberately.
+      { tool_native_id: "nt-016", tool_name: "list_resource_files", tool_display_name: "List Resource Files", tool_description: "(deprecated \u2014 use list_files) List files in a resource folder", connector_id: WAYAI_CONNECTOR, operation: "list_resource_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, ui_assignable: false },
+      { tool_native_id: "nt-017", tool_name: "list_resource_folders", tool_display_name: "List Resource Folders", tool_description: "(deprecated \u2014 use list_files) List all resource folders", connector_id: WAYAI_CONNECTOR, operation: "list_resource_folders", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, ui_assignable: false },
+      { tool_native_id: "nt-018", tool_name: "get_conversations_summary", tool_display_name: "Get Conversations Summary", tool_description: "Get a summary of recent conversations", connector_id: WAYAI_CONNECTOR, operation: "get_conversations_summary", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-019", tool_name: "get_conversation", tool_display_name: "Get Conversation", tool_description: "Retrieve full conversation history", connector_id: WAYAI_CONNECTOR, operation: "get_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-020", tool_name: "get_tool_schema", tool_display_name: "Get Tool Schema", tool_description: "Retrieve the JSON schema for a tool", connector_id: WAYAI_CONNECTOR, operation: "get_tool_schema", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-021", tool_name: "execute_tool", tool_display_name: "Execute Tool", tool_description: "Execute any available tool by name", connector_id: WAYAI_CONNECTOR, operation: "execute_tool", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-022", tool_name: "expand_summary", tool_display_name: "Expand Summary", tool_description: "Retrieve the original messages of a section in the conversation summary", connector_id: WAYAI_CONNECTOR, operation: "expand_summary", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-023", tool_name: "download_file", tool_display_name: "Download File for Edit", tool_description: "Mount a resource file into the code execution sandbox for editing", connector_id: WAYAI_CONNECTOR, operation: "download_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-024", tool_name: "upload_file", tool_display_name: "Upload Edited File", tool_description: "Persist a sandbox-edited file back to the resource library", connector_id: WAYAI_CONNECTOR, operation: "upload_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      // Hub-as-agent delegation (consultant-agents H1.5). UN-GATED in PR 7 (H1.5b): the
+      // spawn + cross-DO completion callback shipped, so the tool is live across the
+      // catalog listing, CI push, the config snapshot, and the handler. (PR 6 shipped it
+      // `assignable: false` so no visible-but-inert tool could reach production between
+      // the two merges.)
+      //
+      // `ui_assignable: false` — CONFIG-AS-CODE ONLY for v1. Attaching this tool requires
+      // two admin decisions the Add dialog cannot yet collect: the target hub and the
+      // `context_boundary` (a data-sensitivity choice). Without a `hub` branch in the
+      // delegation dialog, clicking Add would submit no delegation params and the write
+      // path would reject it — a live button that only ever errors. Assign it via
+      // `wayai push` until the picker + boundary control ship.
+      { tool_native_id: "nt-025", tool_name: "delegate_to_hub", tool_display_name: "Delegate to Hub", tool_description: "Delegate a request to another hub as a task, and receive the result asynchronously", connector_id: WAYAI_CONNECTOR, operation: "delegate_to_hub", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, ui_assignable: false },
+      // Agent-initiated consults (consultant-agents H1.7b). A delegation tool like the
+      // three above: the TARGET is admin configuration (`delegated_agent_id` for a
+      // same-hub consultant, `delegated_hub_id` for a partner hub) and the model supplies
+      // only the question — so scoping "which consultants may this agent reach" reuses
+      // the existing assignment model with no new config surface.
+      //
+      // `ui_assignable: false` — CONFIG-AS-CODE ONLY for v1, same reasoning as
+      // `delegate_to_hub`: attaching it requires a target the Add dialog cannot yet
+      // collect (and, for a consultant target, the `allow_consultant_chain` opt-in). A
+      // live button that only ever errors is worse than no button. Assign via `wayai push`
+      // until the picker ships.
+      { tool_native_id: "nt-026", tool_name: "start_consult_thread", tool_display_name: "Start Consult Thread", tool_description: "Ask a configured consultant (or partner hub) a question in a visible consult thread", connector_id: WAYAI_CONNECTOR, operation: "start_consult_thread", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, ui_assignable: false },
+      // One drill-down listing for every file namespace, replacing `list_resource_files`
+      // (nt-016) and `list_resource_folders` (nt-017). Fully visible: it needs no
+      // configuration the Add dialog cannot collect — the mounts an agent may browse
+      // come from its existing resource links and its own conversation, and the only
+      // model-supplied input is a path.
+      { tool_native_id: "nt-027", tool_name: "list_files", tool_display_name: "List Files", tool_description: "Browse the files this agent can reach, by path", connector_id: WAYAI_CONNECTOR, operation: "list_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      // TWO gates, and BOTH are load-bearing — the first shipped alone and was not
+      // enough. `assignable_roles: ['monitor']` says only a monitor may HOLD it,
+      // because the tool has no meaning off a monitor: a rule SELECTS it and the note
+      // is injected into the ANSWERING agent's prompt for that one turn.
+      // `model_callable: false` says no model is ever TOLD it exists — which the role
+      // restriction does NOT imply, because an `idle` monitor runs a dispatching turn
+      // and a re-roled agent keeps the tools it holds. Offered and called, it reaches
+      // the native dispatcher's `default:` branch: a Sentry event and a provider
+      // re-call. See `NativeTool.model_callable`.
+      { tool_native_id: "nt-028", tool_name: "insert_note", tool_display_name: "Insert Note", tool_description: "Brief the answering agent with an admin-authored note before it replies", connector_id: WAYAI_CONNECTOR, operation: "insert_note", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, assignable_roles: ["monitor"], model_callable: false },
+      // TWO gates, same pair and same reasons as `insert_note` above — this is the
+      // second tool to need both, which is why they are catalog fields rather than a
+      // check at one site. `assignable_roles: ['monitor']`: only a monitor may hold it,
+      // because only a monitor's RULE can select it. `model_callable: false`: no model
+      // is ever told it exists, which the role restriction does NOT imply — an `idle`
+      // monitor runs a dispatching turn, and a re-roled agent keeps the rows it holds.
+      //
+      // The CALLEE is named, not identified by id (owner decision 9): a hub-relative
+      // name survives every copy path untouched, where a per-hub UUID in a JSON column
+      // would need remapping on both branching mechanisms and normalizing on both CI
+      // directions. `action.tool_name`, one key away in the same object, is the
+      // precedent.
+      { tool_native_id: "nt-029", tool_name: "run_monitor", tool_display_name: "Run Monitor", tool_description: "Run another monitor on this hub and let it act on its own rules", connector_id: WAYAI_CONNECTOR, operation: "run_monitor", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, assignable_roles: ["monitor"], model_callable: false }
+    ];
+    NATIVE_TOOLS = BASE_NATIVE_TOOLS.map((base) => {
+      const schema = NATIVE_TOOL_SCHEMAS[base.tool_name];
+      if (!schema) {
+        throw new Error(
+          `Native tool "${base.tool_name}" (${base.tool_native_id}) is missing an entry in NATIVE_TOOL_SCHEMAS. Add it to workers/shared/src/catalog/native-tool-schemas.ts.`
+        );
+      }
+      return {
+        ...base,
+        tool_config: schema.tool_config,
+        tool_instructions: schema.tool_instructions
+      };
+    });
+    NATIVE_TOOL_NAMES = new Set(NATIVE_TOOLS.map((t) => t.tool_name));
     previousConversationsCountField = external_exports.number().int().min(0).max(PREVIOUS_CONVERSATIONS_MAX).nullable().optional();
     summarizationThresholdField = external_exports.number().int().min(SUMMARIZATION_THRESHOLD_MIN).max(SUMMARIZATION_THRESHOLD_MAX).nullable().optional();
+    flagConditionSchema = external_exports.object({
+      variable: external_exports.string(),
+      operator: external_exports.enum(FLAG_CONDITION_OPERATORS),
+      // `boolean` is admitted for parity with the CI write path, whose refine gates the
+      // operator alone, so `value: false` on a boolean evaluation variable is storable
+      // config today and the evaluator honours it through `String()`. Narrowing here would
+      // reject on PATCH exactly what `wayai push` persists, so any REST caller that reads
+      // an agent and writes it back — the typed clients, the CLI's `ApiClient`, MCP — would
+      // fail on a hub configured through the other surface.
+      value: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()])
+    });
+    MONITOR_TRIGGERS = ["idle", "user_message", "assistant_reply", "manual"];
+    monitorTriggerSchema = external_exports.enum(MONITOR_TRIGGERS);
+    MONITOR_FIRING_TRIGGERS = MONITOR_TRIGGERS.filter(isFiringTrigger);
+    MONITOR_DELAY_SECONDS_MIN = 10;
+    MONITOR_IDLE_DELAY_REQUIRED_MESSAGE = "delay_seconds is required for an idle monitor (an absent trigger is idle)";
+    MONITOR_HISTORY_MESSAGES_MAX = 100;
+    monitorHistoryMessagesSchema = external_exports.number().int().min(1).max(MONITOR_HISTORY_MESSAGES_MAX);
+    monitorIncludeToolResultsSchema = external_exports.boolean();
+    MONITOR_INPUT_SHAPING_KEYS = ["history_messages", "include_tool_results"];
+    MONITOR_INPUT_SHAPING_SCHEMAS = {
+      history_messages: monitorHistoryMessagesSchema.optional(),
+      include_tool_results: monitorIncludeToolResultsSchema.optional()
+    };
+    MONITOR_INPUT_SHAPING_IDLE_MESSAGE = "only a user_message, assistant_reply or manual monitor reads this \u2014 an idle monitor runs as a full turn and takes the ordinary history window";
+    monitorArgumentSourceSchema = external_exports.union([
+      external_exports.object({ from_variable: external_exports.string().min(1) }).strict(),
+      external_exports.object({ const: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()]) }).strict()
+    ]);
+    MONITOR_NOTE_TEMPLATE_MAX = 2e3;
+    monitorActionSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({ kind: external_exports.literal("none") }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("call_tool"),
+        tool_name: external_exports.string().min(1),
+        args: external_exports.record(monitorArgumentSourceSchema).optional()
+      }).strict(),
+      external_exports.object({ kind: external_exports.literal("hold") }).strict(),
+      external_exports.object({ kind: external_exports.literal("rewrite"), note: external_exports.string().min(1).max(MONITOR_NOTE_TEMPLATE_MAX) }).strict()
+    ]);
+    monitorRuleSchema = external_exports.object({
+      when: external_exports.array(flagConditionSchema).min(1),
+      action: monitorActionSchema
+    }).strict();
+    MONITOR_RULE_KEYS = ["rules", "fallback"];
+    MONITOR_RULE_SCHEMAS = {
+      rules: external_exports.array(monitorRuleSchema).optional(),
+      fallback: monitorActionSchema.optional()
+    };
+    MONITOR_RULE_TRIGGERS = ["user_message", "assistant_reply", "manual"];
+    MONITOR_RULE_TRIGGER_MESSAGE = "only a user_message, assistant_reply or manual monitor acts on rules \u2014 set one of those triggers, or remove this key. A manual monitor acts on its rules when another monitor runs it.";
+    MONITOR_USER_MESSAGE_ACTION_KINDS = ["none", "call_tool"];
+    MONITOR_ASSISTANT_REPLY_ACTION_KINDS = ["none", "call_tool", "hold", "rewrite"];
+    INSERT_NOTE_TOOL_NAME = "insert_note";
+    RUN_MONITOR_TOOL_NAME = "run_monitor";
+    MONITOR_RULE_ALLOWED_NATIVE_TOOLS = [
+      "update_state",
+      "schedule_followup",
+      "transfer_to_agent",
+      "transfer_to_team",
+      INSERT_NOTE_TOOL_NAME,
+      RUN_MONITOR_TOOL_NAME
+    ];
+    MONITOR_RULE_REENTRY_TOOLS = {
+      transfer_to_agent: "agent",
+      transfer_to_team: "team"
+    };
+    MONITOR_RULE_REENTRY_TRACKS = new Map(Object.entries(MONITOR_RULE_REENTRY_TOOLS));
     monitorConfigField = external_exports.object({
-      delay_seconds: external_exports.number().int().min(10),
-      flag_conditions: external_exports.array(
-        external_exports.object({
-          variable: external_exports.string(),
-          operator: external_exports.enum(["=", "!="]),
-          value: external_exports.union([external_exports.string(), external_exports.number()])
-        })
-      ).optional()
-    }).passthrough().nullable().optional();
+      delay_seconds: external_exports.number().int().min(MONITOR_DELAY_SECONDS_MIN).optional(),
+      trigger: monitorTriggerSchema.optional(),
+      ...MONITOR_INPUT_SHAPING_SCHEMAS,
+      ...MONITOR_RULE_SCHEMAS,
+      flag_conditions: external_exports.array(flagConditionSchema).optional()
+    }).passthrough().superRefine((config, ctx) => {
+      if (monitorConfigNeedsDelay(config)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["delay_seconds"],
+          message: MONITOR_IDLE_DELAY_REQUIRED_MESSAGE
+        });
+      }
+      for (const key of monitorInputShapingKeysOnIdle(config)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: [key],
+          message: MONITOR_INPUT_SHAPING_IDLE_MESSAGE
+        });
+      }
+      for (const issue of collectMonitorRuleIssues(config)) {
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: issue.path, message: issue.message });
+      }
+    }).nullable().optional();
+    flagConditionsField = external_exports.array(flagConditionSchema).nullable().optional();
     agentIdParam = external_exports.object({
       id: uuidSchema
     });
@@ -5574,13 +6983,15 @@ var init_contracts = __esm({
       additional_context_template: external_exports.string().max(2e4).optional(),
       summarization_threshold_tokens: summarizationThresholdField,
       previous_conversations_count: previousConversationsCountField,
-      monitor_config: monitorConfigField
-    }).passthrough();
+      monitor_config: monitorConfigField,
+      flag_conditions: flagConditionsField
+    }).passthrough().superRefine(refineDecisionsModelBinding);
     updateAgentBody = external_exports.object({
       additional_context_template: external_exports.string().max(2e4).optional(),
       summarization_threshold_tokens: summarizationThresholdField,
       previous_conversations_count: previousConversationsCountField,
-      monitor_config: monitorConfigField
+      monitor_config: monitorConfigField,
+      flag_conditions: flagConditionsField
     }).passthrough();
     AGENT_PARAMETER_TYPES = ["string", "number", "boolean", "integer", "enum"];
     AGENT_PARAMETER_NAME_REGEX = /^[a-zA-Z_][a-zA-Z0-9_]{0,63}$/;
@@ -7572,11 +8983,11 @@ var init_contracts = __esm({
       ops_tenths_this_month: external_exports.number().nonnegative(),
       records_count: external_exports.number().nonnegative(),
       month_key: external_exports.string(),
-      // The closed window's meter reading (§2.7's prior-window snapshot). OPTIONAL for the same
+      // The closed window's meter reading (the prior-window snapshot). OPTIONAL for the same
       // reason this object is not `.strict()`: the producer deploys on its own cadence, and a
       // required field would fail the parse for every counter on any producer build that predates
       // it — turning an additive wire change into an outage of the gauge above. Absence and a
-      // non-matching key are the SAME outcome for a reader (§2.7 property 1: do not bill), so
+      // non-matching key are the SAME outcome for a reader (do not bill), so
       // nothing is lost by tolerating it.
       prior_window_key: external_exports.string().optional(),
       prior_window_ops_tenths: external_exports.number().nonnegative().optional()
@@ -7588,41 +8999,41 @@ var init_contracts = __esm({
        * Monotonic per org, WayAI-assigned. An ordering guard for concurrent WayAI
        * writers (a plan change racing a token mint) — NOT a cross-repo CAS. Gaps are
        * expected: a version is allocated per push attempt, and an idempotency skip
-       * (§2.4) burns none while a failed KV put burns one.
+       * burns none while a failed KV put burns one.
        */
       projection_version: external_exports.number().int().nonnegative(),
-      /** Diagnostic only — never gates. Freshness is `window_resets_at`'s job (§2.2). */
+      /** Diagnostic only — never gates. Freshness is `window_resets_at`'s job. */
       written_at: external_exports.string().datetime(),
       /** The WayAI org UUID. The `account_id` spelling is Rekor's documented carve-out. */
       account_id: external_exports.string().uuid(),
-      /** The EFFECTIVE plan, not the subscribed one (§2.2.1). Never gates. */
+      /** The EFFECTIVE plan, not the subscribed one. Never gates. */
       plan_key: planKeySchema,
-      /** Informational only (§2.2.1). `cancelled` spelling matches `BillingRecord`. */
+      /** Informational only. `cancelled` spelling matches `BillingRecord`. */
       billing_status: billingStatusSchema,
       /** Tenths, matching Rekor's meter granularity (write 10, point-read 1, list/SQL 10). */
       ops_tenths_included: external_exports.number().int().nonnegative(),
       max_records: external_exports.number().int().nonnegative(),
-      /** Its own field, no longer derived from `max_records` (§2.2). */
+      /** Its own field, no longer derived from `max_records`. */
       import_rows_included: external_exports.number().int().nonnegative(),
-      /** REQUIRED — absence is malformed, never coerced to `false` (§2.2.2). */
+      /** REQUIRED — absence is malformed, never coerced to `false`. */
       production_bases: external_exports.boolean(),
-      /** Opaque to Rekor; compared for equality only, to reset `usage:` counters (§2.3). */
+      /** Opaque to Rekor; compared for equality only, to reset `usage:` counters. */
       window_key: external_exports.string().min(1),
       /**
-       * The window's TRUE lower bound, for the reconcile's `operations_log` sum (§2.2).
+       * The window's TRUE lower bound, for the reconcile's `operations_log` sum.
        *
        * OPTIONAL, and that is not a rollout convenience — it is what "never gates" means
        * on the writer's side. The tier sources can be absent (a paid row carrying
        * `current_period_end` with no `current_period_start`) and inverted pairs are a
-       * §2.2 diagnostic, so requiring it here would let an inert field throw the strict
-       * parse and leave the org with NO projection — permanently stale under §2.3, with
-       * §2.5's fail-closed gates refusing base creation and 503-ing every import. The
+       * diagnostic, so requiring it here would let an inert field throw the strict
+       * parse and leave the org with NO projection — permanently stale, with the
+       * fail-closed gates refusing base creation and 503-ing every import. The
        * writer emits it whenever it has a sound value and omits it otherwise; Rekor's
        * observed-flip fallback covers the gap, and rollout step 3 keeps that fallback
        * for exactly this reason.
        */
       window_start: external_exports.string().datetime().optional(),
-      /** The sole staleness authority (§2.3). Never triggers a counter reset. */
+      /** The sole staleness authority. Never triggers a counter reset. */
       window_resets_at: external_exports.string().datetime()
     }).strict();
     rekorEntitlementRefreshMessageSchema = external_exports.object({
@@ -7862,6 +9273,9 @@ var init_contracts = __esm({
       refineHubAsCodeEvalAttachments(config, ctx);
       refineHubAsCodeResources(config, ctx);
       refineHubAsCodeDelegation(config, ctx);
+      refineHubAsCodeFlagConditions(config, ctx);
+      refineHubAsCodeMonitorConfig(config, ctx);
+      refineHubAsCodeDecisionsModel(config, ctx);
     });
     ciPullHubIdParam = external_exports.object({
       hub_id: ciUuidSchema
@@ -8089,7 +9503,7 @@ var init_contracts = __esm({
        *
        * Past-or-now only. A future start freezes the org's window permanently:
        * `maybeRolloverBillingWindow` derives a NEGATIVE elapsed and so never archives the
-       * metrics nor restamps the column, while the §2.6 trigger-5 sweep selects only windows
+       * metrics nor restamps the column, while the rollover sweep selects only windows
        * that have already passed — so nothing rolls the org over, its consumed operations
        * never reset, and past quota every AI turn is refused until a human re-patches.
        */
@@ -8184,7 +9598,7 @@ var init_contracts = __esm({
       seats_per_unit: external_exports.number().int().min(1, "seats_per_unit must be a positive integer").optional(),
       seats_scaling: external_exports.enum(["fixed", "per_quantity"]).optional(),
       is_active: external_exports.boolean().optional(),
-      // Rekor entitlement allowances (rekor-platform-contracts §2.2). Editable here for the
+      // Rekor entitlement allowances. Editable here for the
       // same reason `messages_per_unit` is — and this route is the only ROUTINE way to change an
       // allowance on a live plan: the seed establishes a plan row and never rewrites one, so a
       // seed-version bump no longer moves these values (see `seed.ts`).
@@ -8321,7 +9735,7 @@ var init_contracts = __esm({
       cmd: external_exports.string().min(1, "cmd is required").max(SANDBOX_EXEC_MAX_CMD_LENGTH, `cmd must be <= ${SANDBOX_EXEC_MAX_CMD_LENGTH} chars`),
       /**
        * Egress posture. Omitted ⇒ the driver fails closed to deny-all outbound (the
-       * §4 safe default). The route re-validates the (policy, allowlist) pair via
+       * safe default). The route re-validates the (policy, allowlist) pair via
        * `validateEgressConfig`.
        */
       egress_policy: sandboxEgressPolicy.optional(),
@@ -8912,7 +10326,7 @@ var init_contracts = __esm({
       base_id: external_exports.string()
     });
     rekorBaseChangeMessageSchema = external_exports.object({
-      /** The WayAI org UUID — one id namespace (plan §2). */
+      /** The WayAI org UUID — one id namespace. */
       org_id: external_exports.string().uuid(),
       /**
        * Not a UUID: a preview base id is `{prod_base_id}--{slug}`. Immutable per base — a
@@ -9642,7 +11056,7 @@ var init_api_client = __esm({
        * `toDataProxyPath` knows how WayAI mounts that surface. Identity is the
        * caller's ordinary WayAI session — there is one keyring login, and the
        * backend attests the org over its service binding rather than forwarding a
-       * credential (docs/reference/rekor-platform-contracts.md §1).
+       * credential.
        *
        * Returns the surface's `{ data, meta }` envelope rather than unwrapping, so
        * cursor-paginated lists can follow `meta.has_more`. A failure throws the same
@@ -9740,11 +11154,11 @@ var init_api_client = __esm({
             // unlabelled body should fall back rather than announce nothing.
             "Content-Type": body instanceof Uint8Array ? contentType || "application/octet-stream" : "application/json",
             // Names the calling surface for the Data Worker's audit rows, which
-            // record `cli` vs `api` vs `mcp` (contracts §1.4). A HINT, not an
+            // record `cli` vs `api` vs `mcp`. A HINT, not an
             // authorization input: any client can send it, so the backend must
             // normalize it against what it knows about its own ingress rather than
             // trust it. Nothing is granted or denied on its value; the Data Worker's
-            // audit rows are its consumer (contracts §1.4).
+            // audit rows are its consumer.
             "X-WayAI-Client": "cli"
           },
           // Bytes go on the wire verbatim (file content, attachments); everything
@@ -9832,23 +11246,344 @@ function redactSecrets(value) {
   if (BASE64_SECRET_RE.test(value) && BASE64_MARKER_RE.test(value)) {
     return REDACTED;
   }
-  return redactTokenShapes(value);
+  return redactTokenShapes(value);
+}
+function normalizeAuthType2(raw) {
+  if (VALID_AUTH_TYPES2.has(raw)) return raw;
+  return LEGACY_AUTH_TYPE_MAP2[raw] ?? raw;
+}
+function jsonLengthOrNull2(value) {
+  try {
+    const json = JSON.stringify(value);
+    return typeof json === "string" ? json.length : null;
+  } catch {
+    return null;
+  }
+}
+function withinJsonLength2(value, max) {
+  const length = jsonLengthOrNull2(value);
+  return length !== null && length <= max;
+}
+function schemaToQuestions2(schema) {
+  const classified = classifySchema2(schema);
+  if (classified.refusals.length > 0) return { ok: false, refusals: classified.refusals };
+  const questions = {};
+  for (const [field, primitive] of classified.fields) {
+    questions[field] = toQuestion2(primitive);
+  }
+  return { ok: true, questions };
+}
+function classifySchema2(schema) {
+  const fields = /* @__PURE__ */ new Map();
+  if (!isRecord3(schema) || schema.type !== "object") {
+    return { fields, refusals: [{ field: null, reason: "schema_not_object" }] };
+  }
+  const properties = schema.properties;
+  if (!isRecord3(properties) || Object.keys(properties).length === 0) {
+    return { fields, refusals: [{ field: null, reason: "schema_has_no_properties" }] };
+  }
+  const refusals = [];
+  for (const [field, property] of Object.entries(properties)) {
+    const primitive = classifyField2(field, property);
+    if ("reason" in primitive) {
+      refusals.push({ field, reason: primitive.reason });
+      continue;
+    }
+    fields.set(field, primitive);
+  }
+  return refusals.length > 0 ? { fields: /* @__PURE__ */ new Map(), refusals } : { fields, refusals };
+}
+function classifyField2(field, property) {
+  if (!isRecord3(property)) return { reason: "unsupported_type" };
+  const instructions = describeField2(field, property);
+  if (property.enum !== void 0) {
+    const declared = property.enum;
+    if (!Array.isArray(declared) || declared.some((option) => typeof option !== "string")) {
+      return { reason: "unsupported_type" };
+    }
+    const options = [...new Set(declared)];
+    if (options.length < 2) return { reason: "too_few_options" };
+    return { kind: "choice", instructions, options };
+  }
+  if (property.type === "boolean") return { kind: "noul", instructions };
+  if (property.type === "integer") {
+    const minimum = property.minimum;
+    const maximum = property.maximum;
+    if (!Number.isInteger(minimum) || !Number.isInteger(maximum)) {
+      return { reason: "integer_not_bounded" };
+    }
+    const levels = maximum - minimum + 1;
+    if (levels < DECISION_SCORE_MIN_LEVELS2) return { reason: "too_few_options" };
+    if (levels > DECISION_SCORE_MAX_LEVELS2) return { reason: "integer_range_too_large" };
+    return { kind: "score", instructions, minimum, levels };
+  }
+  return { reason: "unsupported_type" };
+}
+function toQuestion2(primitive) {
+  switch (primitive.kind) {
+    case "choice":
+      return {
+        type: "choice",
+        instructions: primitive.instructions,
+        // A JSON Schema enum carries no per-option text, so each option stands as
+        // its own description. The distinguishing detail an option needs belongs
+        // in the field's `description`, which is the instructions.
+        criteria: Object.fromEntries(primitive.options.map((option) => [option, option]))
+      };
+    case "noul":
+      return { type: "noul", instructions: primitive.instructions };
+    case "score":
+      return {
+        type: "score",
+        instructions: primitive.instructions,
+        criteria: scoreLevels2(primitive.minimum, primitive.levels)
+      };
+  }
+}
+function describeField2(field, property) {
+  const description = isRecord3(property) ? property.description : void 0;
+  return typeof description === "string" && description.trim() !== "" ? description : field;
+}
+function scoreLevels2(minimum, levels) {
+  return Array.from({ length: levels }, (_, index) => String(minimum + index));
+}
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isDecisionsModel2(modelId) {
+  if (typeof modelId !== "string") return false;
+  const normalized = modelId.trim().toLowerCase();
+  return DECISIONS_MODEL_PREFIXES2.some((prefix) => normalized.startsWith(prefix));
+}
+function checkDecisionsModelBinding2(agent) {
+  if (!isDecisionsModel2(agent.model)) return null;
+  const model = String(agent.model);
+  const role = agent.agent_role;
+  if (!DECISION_CAPABLE_AGENT_ROLES2.includes(role)) {
+    return refuse2(
+      "role_produces_text",
+      `agent_role "${String(role)}" produces text, which the decisions model "${model}" does not return. A decisions model binds to: ${DECISION_CAPABLE_AGENT_ROLES2.join(", ")}.`
+    );
+  }
+  if (agent.response_format !== "json_schema") {
+    return refuse2(
+      "response_format_not_json_schema",
+      `response_format must be "json_schema" to bind the decisions model "${model}".`
+    );
+  }
+  if (agent.schema_json === null || agent.schema_json === void 0 || agent.schema_json === "") {
+    return refuse2(
+      "schema_missing",
+      `schema_json is required to bind the decisions model "${model}": a decisions model answers questions, and the schema is where they come from.`
+    );
+  }
+  let schema = agent.schema_json;
+  if (typeof schema === "string") {
+    try {
+      schema = JSON.parse(schema);
+    } catch {
+      return refuse2(
+        "schema_unreadable",
+        `schema_json is not valid JSON, so the decisions model "${model}" cannot be bound.`
+      );
+    }
+  }
+  const mapped = schemaToQuestions2(schema);
+  if (mapped.ok) return null;
+  const detail = mapped.refusals.map((refusal2) => `${refusal2.field ?? "(schema)"}: ${refusal2.reason}`).join("; ");
+  return {
+    reason: "schema_not_closed_set",
+    schema_refusals: mapped.refusals,
+    message: `schema_json is not closed-set, so the decisions model "${model}" cannot answer it \u2014 ${detail}. A decisions model answers enum, boolean and bounded-integer fields only.`
+  };
+}
+function refuse2(reason, message) {
+  return { reason, schema_refusals: [], message };
+}
+function readAgentSettingsModel2(agentSettings) {
+  let settings = agentSettings;
+  if (typeof settings === "string") {
+    try {
+      settings = JSON.parse(settings);
+    } catch {
+      return null;
+    }
+  }
+  if (typeof settings !== "object" || settings === null || Array.isArray(settings)) return null;
+  const model = settings.model;
+  return typeof model === "string" ? model : null;
+}
+function resolveMonitorTrigger2(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return "idle";
+  const raw = monitorConfig.trigger;
+  return MONITOR_TRIGGERS2.includes(raw) ? raw : "idle";
+}
+function isFiringTrigger2(trigger) {
+  return trigger !== "manual";
+}
+function monitorConfigNeedsDelay2(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return false;
+  return resolveMonitorTrigger2(monitorConfig) === "idle" && monitorConfig.delay_seconds === void 0;
+}
+function monitorInputShapingKeysOnIdle2(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return [];
+  if (resolveMonitorTrigger2(monitorConfig) !== "idle") return [];
+  const config = monitorConfig;
+  return MONITOR_INPUT_SHAPING_KEYS2.filter((key) => config[key] !== void 0);
+}
+function monitorRuleKeysOffTrigger2(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return [];
+  if (MONITOR_RULE_TRIGGERS2.includes(resolveMonitorTrigger2(monitorConfig))) return [];
+  const config = monitorConfig;
+  return MONITOR_RULE_KEYS2.filter((key) => config[key] !== void 0);
+}
+function monitorRuleActionKinds2(trigger) {
+  return trigger === "assistant_reply" ? MONITOR_ASSISTANT_REPLY_ACTION_KINDS2 : MONITOR_USER_MESSAGE_ACTION_KINDS2;
+}
+function monitorActionKindMessage2(kind, trigger) {
+  const allowed = monitorRuleActionKinds2(trigger).join(", ");
+  if (trigger === "assistant_reply") {
+    return `an assistant_reply rule cannot select "${kind}". Use one of: ${allowed}.`;
+  }
+  return `a monitor rule cannot select "${kind}": it acts before the reply exists. Use one of: ${allowed}.`;
+}
+function monitorRuleReentryTrack2(toolName) {
+  return MONITOR_RULE_REENTRY_TRACKS2.get(toolName);
+}
+function monitorRuleToolNotAllowedMessage2(toolName, trigger) {
+  if (trigger === "assistant_reply" && isReplyGateRefusedToolName2(toolName)) {
+    return `an assistant_reply rule cannot call "${toolName}": the reply already exists when this monitor runs, so there is no turn left for it to act on. Put it on a user_message monitor instead, which runs before the answering agent.`;
+  }
+  const callable = trigger === "assistant_reply" ? MONITOR_RULE_ALLOWED_NATIVE_TOOLS2.filter((name) => !isReplyGateRefusedToolName2(name)) : MONITOR_RULE_ALLOWED_NATIVE_TOOLS2;
+  return `a ${trigger} rule cannot call "${toolName}". Rules can call ${callable.join(", ")}, and this hub's own external HTTP and MCP tools. Assign anything else to the answering agent instead.`;
+}
+function isReplyGateRefusedToolName2(toolName) {
+  return monitorRuleReentryTrack2(toolName) === "agent" || toolName === INSERT_NOTE_TOOL_NAME2;
+}
+function isRefusedNativeToolName2(toolName, trigger) {
+  if (!NATIVE_TOOL_NAMES2.has(toolName)) return false;
+  if (!MONITOR_RULE_ALLOWED_NATIVE_TOOLS2.includes(toolName)) return true;
+  return trigger === "assistant_reply" && isReplyGateRefusedToolName2(toolName);
+}
+function monitorRuleActions2(monitorConfig) {
+  if (!monitorConfig || typeof monitorConfig !== "object") return [];
+  const config = monitorConfig;
+  const found = [];
+  const visit = (action, path35) => {
+    if (!action || typeof action !== "object" || Array.isArray(action)) return;
+    found.push({ action, path: path35 });
+  };
+  if (Array.isArray(config.rules)) {
+    config.rules.forEach((rule, index) => {
+      if (!rule || typeof rule !== "object" || Array.isArray(rule)) return;
+      visit(rule.action, ["rules", index, "action"]);
+    });
+  }
+  visit(config.fallback, ["fallback"]);
+  return found;
+}
+function collectMonitorRuleIssues2(monitorConfig) {
+  const offTrigger = monitorRuleKeysOffTrigger2(monitorConfig).map((key) => ({ path: [key], message: MONITOR_RULE_TRIGGER_MESSAGE2 }));
+  if (offTrigger.length > 0) return offTrigger;
+  const trigger = resolveMonitorTrigger2(monitorConfig);
+  const kinds = monitorRuleActionKinds2(trigger);
+  const issues = [];
+  for (const { action, path: path35 } of monitorRuleActions2(monitorConfig)) {
+    const kind = action.kind;
+    if (typeof kind === "string" && !kinds.includes(kind)) {
+      issues.push({ path: [...path35, "kind"], message: monitorActionKindMessage2(kind, trigger) });
+    }
+    const toolName = action.tool_name;
+    if (kind === "call_tool" && typeof toolName === "string" && isRefusedNativeToolName2(toolName, trigger)) {
+      issues.push({ path: [...path35, "tool_name"], message: monitorRuleToolNotAllowedMessage2(toolName, trigger) });
+      continue;
+    }
+    if (kind === "call_tool" && toolName === INSERT_NOTE_TOOL_NAME2) {
+      issues.push(...insertNoteArgumentIssues2(action, path35));
+    }
+    if (kind === "call_tool" && toolName === RUN_MONITOR_TOOL_NAME2) {
+      const callee = readRunMonitorCallee2(action);
+      if (!callee.ok) {
+        issues.push({
+          path: [...path35, "args", "monitor_name"],
+          message: runMonitorCalleeMessage2(callee.reason)
+        });
+      }
+    }
+  }
+  return issues;
+}
+function readInsertNoteTemplate2(action) {
+  const read = readConstStringArg2(action, "template");
+  if (!read.ok) {
+    return {
+      ok: false,
+      reason: read.reason === "missing" ? "note_template_missing" : read.reason === "not_const" ? "note_template_not_const" : "note_template_empty"
+    };
+  }
+  if (read.value.length > MONITOR_NOTE_TEMPLATE_MAX2) {
+    return { ok: false, reason: "note_template_too_long" };
+  }
+  return { ok: true, template: read.value };
 }
-function normalizeAuthType2(raw) {
-  if (VALID_AUTH_TYPES2.has(raw)) return raw;
-  return LEGACY_AUTH_TYPE_MAP2[raw] ?? raw;
+function readConstStringArg2(action, argName) {
+  const args2 = action && typeof action === "object" ? action.args : void 0;
+  const arg = args2 && typeof args2 === "object" ? args2[argName] : void 0;
+  if (arg === void 0) return { ok: false, reason: "missing" };
+  const constValue = arg && typeof arg === "object" && !Array.isArray(arg) ? arg.const : void 0;
+  if (typeof constValue !== "string") return { ok: false, reason: "not_const" };
+  if (constValue.trim() === "") return { ok: false, reason: "empty" };
+  return { ok: true, value: constValue };
 }
-function jsonLengthOrNull2(value) {
-  try {
-    const json = JSON.stringify(value);
-    return typeof json === "string" ? json.length : null;
-  } catch {
-    return null;
-  }
+function readRunMonitorCallee2(action) {
+  const read = readConstStringArg2(action, "monitor_name");
+  if (read.ok) return { ok: true, name: read.value };
+  return {
+    ok: false,
+    reason: read.reason === "missing" ? "callee_missing" : read.reason === "not_const" ? "callee_not_const" : "callee_empty"
+  };
 }
-function withinJsonLength2(value, max) {
-  const length = jsonLengthOrNull2(value);
-  return length !== null && length <= max;
+function runMonitorCalleeMessage2(reason) {
+  switch (reason) {
+    case "callee_missing":
+      return "run_monitor needs a monitor_name: the monitor to run.";
+    case "callee_not_const":
+      return "run_monitor's monitor_name must be a const you write \u2014 it chooses which monitor runs, so it cannot come from a variable.";
+    case "callee_empty":
+      return "run_monitor's monitor_name is empty \u2014 name the monitor to run.";
+  }
+}
+function insertNoteTemplateMessage2(reason) {
+  switch (reason) {
+    case "note_template_missing":
+      return "insert_note needs a template: the note text to put in front of the answering agent.";
+    case "note_template_not_const":
+      return "insert_note's template must be a const string you write \u2014 the answering agent reads it as instructions, so it cannot come from a variable. Use {{variable_name}} inside it to substitute this monitor's variables.";
+    case "note_template_empty":
+      return "insert_note's template is empty \u2014 remove the rule, or give it something to say.";
+    case "note_template_too_long":
+      return `insert_note's template is longer than the ${MONITOR_NOTE_TEMPLATE_MAX2}-character limit.`;
+  }
+}
+function insertNoteArgumentIssues2(action, path35) {
+  const result = readInsertNoteTemplate2(action);
+  if (result.ok) return [];
+  return [{
+    path: [...path35, "args", "template"],
+    message: insertNoteTemplateMessage2(result.reason)
+  }];
+}
+function refineDecisionsModelBinding2(body, ctx) {
+  const agent = body;
+  const refusal2 = checkDecisionsModelBinding2({
+    model: readAgentSettingsModel2(agent.agent_settings),
+    agent_role: agent.agent_role,
+    response_format: agent.response_format,
+    schema_json: agent.schema_json
+  });
+  if (refusal2) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["agent_settings", "model"], message: refusal2.message });
+  }
 }
 function visibleLength2(s) {
   return s.replace(INVISIBLE_NAME_CHARS2, "").length;
@@ -9969,7 +11704,7 @@ function extractToolParameters2(toolConfig) {
   if (!cfg || typeof cfg !== "object" || Array.isArray(cfg)) return void 0;
   return cfg.parameters;
 }
-function isRecord2(v) {
+function isRecord22(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function isPrimitive2(v) {
@@ -9991,7 +11726,7 @@ function validateSchema2(schema, path35, errors, opts = {}) {
     });
     return;
   }
-  if (!isRecord2(schema)) {
+  if (!isRecord22(schema)) {
     errors.push({
       path: path35,
       message: `expected object, got ${schema === null ? "null" : typeof schema}`
@@ -10053,7 +11788,7 @@ function validateSchema2(schema, path35, errors, opts = {}) {
     }
   }
   if ("properties" in schema) {
-    if (!isRecord2(schema.properties)) {
+    if (!isRecord22(schema.properties)) {
       errors.push({
         path: `${path35}.properties`,
         message: `properties must be an object, got ${Array.isArray(schema.properties) ? "array" : typeof schema.properties}`
@@ -10072,7 +11807,7 @@ function validateSchema2(schema, path35, errors, opts = {}) {
     }
   }
   for (const key of SUBSCHEMA_OBJECT_KEYWORDS2) {
-    if (key in schema && isRecord2(schema[key])) {
+    if (key in schema && isRecord22(schema[key])) {
       validateSchema2(schema[key], `${path35}.${key}`, errors, { depth: depth + 1 });
     }
   }
@@ -10084,7 +11819,7 @@ function validateSchema2(schema, path35, errors, opts = {}) {
   }
   for (const key of SUBSCHEMA_MAP_KEYWORDS2) {
     const map = schema[key];
-    if (isRecord2(map)) {
+    if (isRecord22(map)) {
       for (const [name, sub] of Object.entries(map)) {
         validateSchema2(sub, `${path35}.${key}.${name}`, errors, { depth: depth + 1 });
       }
@@ -10114,7 +11849,7 @@ function schemaTypeIncludes2(schema, wanted) {
 }
 function validateToolInputSchema2(schema) {
   const errors = [];
-  if (!isRecord2(schema)) {
+  if (!isRecord22(schema)) {
     errors.push({
       path: "",
       message: `expected object at root, got ${schema === null ? "null" : typeof schema}`
@@ -10618,6 +12353,119 @@ function refineHubAsCodeDelegation2(config, ctx) {
     });
   });
 }
+function refineHubAsCodeFlagConditions2(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  const checkList = (list, basePath) => {
+    if (!Array.isArray(list)) return;
+    list.forEach((row, rowIndex) => {
+      const operator = row?.operator;
+      if (!FLAG_CONDITION_OPERATORS2.includes(operator)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: [...basePath, rowIndex, "operator"],
+          message: `operator must be one of: ${FLAG_CONDITION_OPERATORS2.join(", ")}`
+        });
+      }
+    });
+  };
+  agents.forEach((agent, agentIndex) => {
+    const a = agent;
+    checkList(a?.flag_conditions, ["agents", agentIndex, "flag_conditions"]);
+    const monitorConfig = a?.monitor_config;
+    if (monitorConfig && typeof monitorConfig === "object" && !Array.isArray(monitorConfig)) {
+      const base = ["agents", agentIndex, "monitor_config"];
+      checkList(
+        monitorConfig.flag_conditions,
+        [...base, "flag_conditions"]
+      );
+      const rules = monitorConfig.rules;
+      if (Array.isArray(rules)) {
+        rules.forEach((rule, ruleIndex) => {
+          if (!rule || typeof rule !== "object" || Array.isArray(rule)) return;
+          checkList(rule.when, [...base, "rules", ruleIndex, "when"]);
+        });
+      }
+    }
+  });
+}
+function refineHubAsCodeMonitorConfig2(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  agents.forEach((agent, agentIndex) => {
+    const monitorConfig = agent?.monitor_config;
+    if (!monitorConfig || typeof monitorConfig !== "object" || Array.isArray(monitorConfig)) return;
+    const basePath = ["agents", agentIndex, "monitor_config"];
+    const checkKeyValues = (keys, schemas) => {
+      for (const key of keys) {
+        const value = monitorConfig[key];
+        if (value === void 0) continue;
+        const parsed = schemas[key].safeParse(value);
+        if (!parsed.success) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: [...basePath, key],
+            message: parsed.error?.issues[0]?.message ?? `invalid ${key}`
+          });
+        }
+      }
+    };
+    const trigger = monitorConfig.trigger;
+    if (trigger !== void 0 && !MONITOR_TRIGGERS2.includes(trigger)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [...basePath, "trigger"],
+        message: `trigger must be one of: ${MONITOR_TRIGGERS2.join(", ")}`
+      });
+      return;
+    }
+    if (monitorConfigNeedsDelay2(monitorConfig)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [...basePath, "delay_seconds"],
+        message: MONITOR_IDLE_DELAY_REQUIRED_MESSAGE2
+      });
+    }
+    for (const key of monitorInputShapingKeysOnIdle2(monitorConfig)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [...basePath, key],
+        message: MONITOR_INPUT_SHAPING_IDLE_MESSAGE2
+      });
+    }
+    checkKeyValues(MONITOR_INPUT_SHAPING_KEYS2, MONITOR_INPUT_SHAPING_SCHEMAS2);
+    checkKeyValues(MONITOR_RULE_KEYS2, MONITOR_RULE_SCHEMAS2);
+    for (const issue of collectMonitorRuleIssues2(monitorConfig)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [...basePath, ...issue.path],
+        message: issue.message
+      });
+    }
+  });
+}
+function refineHubAsCodeDecisionsModel2(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  agents.forEach((agent, agentIndex) => {
+    const a = agent;
+    if (!a) return;
+    const responseFormat = a.response_format;
+    const refusal2 = checkDecisionsModelBinding2({
+      model: readAgentSettingsModel2(a.settings),
+      agent_role: a.role,
+      response_format: responseFormat ? "json_schema" : "text",
+      schema_json: responseFormat?.schema_json ?? null
+    });
+    if (refusal2) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["agents", agentIndex, "settings", "model"],
+        message: refusal2.message
+      });
+    }
+  });
+}
 function identifyTokenType(token) {
   if (token.startsWith("way_")) return "way_token";
   if (token.startsWith("eyJ")) return "jwt";
@@ -10657,7 +12505,7 @@ function findStepBoundaries(transcript) {
   }
   return out;
 }
-var UUID_RE, HEX_RE, WORKOS_ID_RE, OPAQUE_SECRET_RE, BASE64_SECRET_RE, BASE64_MARKER_RE, TOKEN_RE, SENSITIVE_FIELDS, SENSITIVE_KEY_ALTERNATION, SENSITIVE_KEY_PATTERN, JSON_CREDENTIAL_RE, QUERY_CREDENTIAL_RE, REDACTED, PROVIDER_TOKEN_RE, APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_CONTENT_BRAND, LlmProviderContentError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, REKOR_ACTOR_TYPE_HEADER2, REKOR_ACTOR_ID_HEADER2, REKOR_ACTOR_LABEL_HEADER2, REKOR_ACTOR_ORG_HEADER2, REKOR_ACTOR_ADMIN_HEADER2, REKOR_CLIENT_HEADER2, REKOR_TOOL_ID_HEADER2, REKOR_CLIENTS2, rekorClientSchema2, MAX_REKOR_TOOL_ID_LENGTH2, rekorToolIdSchema2, DATA_PROXY_MOUNT2, DATA_PROXY_PREFIX2, DATA_PROXY_ORG_QUERY_PARAM2, MAX_PROVISIONING_BODY_BYTES2, dataProxyQuery2, rekorAttestation2, REQUIRED_REKOR_ATTESTATION_HEADERS2, BASE_DESTRUCTION_MOUNT2, BASE_DESTRUCTION_PREFIX2, BASE_DESTRUCTION_CONFIRM_PATH2, baseDestructionConfirmBody2, BASE_DESTRUCTION_GRACE_MS2, BASE_DESTRUCTION_CONFIRM_TTL_MS2, BASE_DESTRUCTION_ORG_QUERY_PARAM2, baseDestructionQuery2, baseDestructionParam2, baseDestructionInitiateBody2, baseDestructionStatus2, baseDestructionRequest2, baseDestructionListResponse2, baseDestructionInitiateResponse2, baseDestructionConfirmResponse2, baseDestructionCancelResponse2, ENDPOINT_CONFIGS, AUTH_TYPE2, ORG_CREDENTIAL_AUTH_TYPES2, AUTH_TYPE_DISPLAY2, LEGACY_AUTH_TYPE_MAP2, VALID_AUTH_TYPES2, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, clientOptionalString2, clientOptionalBoolean2, clientOptionalNumber2, messageAttachment2, MAX_MESSAGE_BODY_BYTES2, MAX_ATTACHMENTS_PER_MESSAGE2, MAX_AUDIO_FILE_BASE64_BYTES2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, PREVIOUS_CONVERSATIONS_MAX2, previousConversationsCountField2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupTypeSchema2, EVENT_RELATIVE_FOLLOWUP_TYPES2, followupTimeUnitSchema2, followupIdSchema2, SELECTABLE_FOLLOWUP_TYPES2, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS2, followupSchema2, MAX_OUTCOMES_PER_STATUS2, kanbanOutcomeSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, PREVIEW_LABEL_MAX_LENGTH2, MAX_ENDED_INDEX_RETENTION_DAYS2, MAX_EVAL_RETENTION_DAYS2, previewLabelField2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, updateChannelTestIdentitiesBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, PRODUCTION_DIRECT_FIELDS2, setProductionCredentialBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, CONTEXT_BOUNDARIES2, contextBoundarySchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, ORG_TAG_NAME_REGEX2, ORG_TAG_NAME_MAX_LENGTH2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, BASE_CREDENTIAL_NAME_MAX2, baseCredentialNameSchema2, createBaseCredentialLinkBody2, baseCredentialLinkParams2, baseCredentialLinkQuery2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlTable2, analyticsSqlSchemaQuery2, EVAL_PACING_PRESET_NAMES2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_MAX_RUNS_PER_SCENARIO2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, ISO_UTC_RE2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, evalDateContextSchema2, EVAL_FIXTURE_NAME_MAX_LENGTH2, evalFixtureOverrideSchema2, runSessionQuery2, EVAL_INPUT_ROLES2, EVAL_INPUT_ROLE_LIST2, ROLE_ECHO_MAX2, EVAL_INITIAL_STATE_SCOPES2, MAX_INITIAL_STATE_ENTRIES2, evalInitialStateEntry2, createEvalBody2, updateEvalBody2, EVAL_LIST_MAX_LIMIT2, evalListLimit2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, EVAL_MAX_SELECTED_SCENARIOS2, evalScenarioSelectionEntrySchema2, evalScenarioSelectionSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, EVAL_ATTACHMENT_HASH_REGEX2, evalAttachmentRef2, turnMayCarryAttachments2, ATTACHMENTS_USER_ONLY_MESSAGE2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, fixtureField2, createJourneyBody2, updateJourneyBody2, evalSessionConfigResponseSchema2, evalSessionResponseSchema2, evalSessionListConfigSchema2, evalSessionListItemSchema2, seedReleaseStatusSchema2, getConversationsQuery2, getMessagesQuery2, appMessageSenderType2, appMessageReceiverType2, apiChannelMessage2, apiChannelMessageBody2, appMessageBody2, appMessageResponse2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, deleteUserConversationsResponse2, sendMessageBody2, listConversationsQuery2, flagSourceSchema2, getConversationsResponse2, getConversationDetailParams2, getConversationDetailQuery2, getConversationDetailResponse2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, copilotSuggestBody2, copilotSuggestResponse2, CONSULT_THREAD_STATUSES2, consultThreadStatus2, CONSULT_THREAD_TITLE_MAX2, consultThreadTitle2, consultThreadSummary2, listConsultThreadsQuery2, listConsultThreadsResponse2, createConsultThreadBody2, createConsultThreadResponse2, consultThreadIdParam2, updateConsultThreadBody2, updateConsultThreadResponse2, CONSULT_AWAIT_TIMEOUT_MS2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, planKeySchema2, billingStatusSchema2, billingPlanTypeSchema2, dataUsageCountersSchema2, REKOR_ENTITLEMENT_CONTRACT_VERSION2, entitlementProjectionSchema2, rekorEntitlementRefreshMessageSchema2, downloadBody2, uploadQuery2, signUrlBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, MAX_RESOURCE_FILE_SIZE2, MAX_10MB_BASE64_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_CARRIERS2, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES2, MAX_RESOURCE_ENCODED_BYTES2, MAX_HUB_AS_CODE_RESOURCES2, MAX_HUB_AS_CODE_RESOURCE_FILES2, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES2, MAX_CI_CONFIG_BODY_BYTES2, hubAsCodeStateSchema2, hubAsCodeResourceFileSchema2, hubAsCodeResourceSchema2, uuidPattern2, ciUuidSchema2, boundedHubAsCodeResourcesSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, CI_APPLY_ENTITY_KINDS2, CI_APPLY_OPERATIONS2, ciApplyErrorBaseSchema2, ciApplyErrorSchema2, ciSyncCountSchema2, ciSyncChangesSchema2, ciSyncWarningSchema2, ciSyncResponseSchema2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, PRICING_PLAN_ID_RE2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, adminScopedTargetBody2, adminRepairLegacyOrgGrantsBody2, adminRepairCompedPlansBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysBody2, dataExplorerKvKeyBody2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteBody2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, sandboxEgressPolicy2, SANDBOX_EXEC_MAX_CMD_LENGTH2, SANDBOX_EXEC_MAX_ALLOWLIST2, SANDBOX_EXEC_MAX_TIMEOUT_MS2, adminSandboxExecBody2, META_ENTITY_ID_PATTERN2, metaEntityId2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, passwordLoginBody2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, reportMessageSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, reporterReportSummarySchema2, reporterListResponseSchema2, getReportResponseSchema2, reporterTransitionResponseSchema2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2, rekorBaseChangeMessageSchema2, WAYAI_WORKSPACE_LAYOUT;
+var UUID_RE, HEX_RE, WORKOS_ID_RE, OPAQUE_SECRET_RE, BASE64_SECRET_RE, BASE64_MARKER_RE, TOKEN_RE, SENSITIVE_FIELDS, SENSITIVE_KEY_ALTERNATION, SENSITIVE_KEY_PATTERN, JSON_CREDENTIAL_RE, QUERY_CREDENTIAL_RE, REDACTED, PROVIDER_TOKEN_RE, APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_CONTENT_BRAND, LlmProviderContentError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, REKOR_ACTOR_TYPE_HEADER2, REKOR_ACTOR_ID_HEADER2, REKOR_ACTOR_LABEL_HEADER2, REKOR_ACTOR_ORG_HEADER2, REKOR_ACTOR_ADMIN_HEADER2, REKOR_CLIENT_HEADER2, REKOR_TOOL_ID_HEADER2, REKOR_CLIENTS2, rekorClientSchema2, MAX_REKOR_TOOL_ID_LENGTH2, rekorToolIdSchema2, DATA_PROXY_MOUNT2, DATA_PROXY_PREFIX2, DATA_PROXY_ORG_QUERY_PARAM2, MAX_PROVISIONING_BODY_BYTES2, dataProxyQuery2, rekorAttestation2, REQUIRED_REKOR_ATTESTATION_HEADERS2, BASE_DESTRUCTION_MOUNT2, BASE_DESTRUCTION_PREFIX2, BASE_DESTRUCTION_CONFIRM_PATH2, baseDestructionConfirmBody2, BASE_DESTRUCTION_GRACE_MS2, BASE_DESTRUCTION_CONFIRM_TTL_MS2, BASE_DESTRUCTION_ORG_QUERY_PARAM2, baseDestructionQuery2, baseDestructionParam2, baseDestructionInitiateBody2, baseDestructionStatus2, baseDestructionRequest2, baseDestructionListResponse2, baseDestructionInitiateResponse2, baseDestructionConfirmResponse2, baseDestructionCancelResponse2, ENDPOINT_CONFIGS, AUTH_TYPE2, ORG_CREDENTIAL_AUTH_TYPES2, AUTH_TYPE_DISPLAY2, LEGACY_AUTH_TYPE_MAP2, VALID_AUTH_TYPES2, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, clientOptionalString2, clientOptionalBoolean2, clientOptionalNumber2, messageAttachment2, MAX_MESSAGE_BODY_BYTES2, MAX_ATTACHMENTS_PER_MESSAGE2, MAX_AUDIO_FILE_BASE64_BYTES2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, PREVIOUS_CONVERSATIONS_MAX2, FLAG_CONDITION_OPERATORS2, DECISION_SCORE_MIN_LEVELS2, DECISION_SCORE_MAX_LEVELS2, DECISIONS_MODEL_PREFIXES2, DECISION_CAPABLE_AGENT_ROLES2, NATIVE_TOOL_SCHEMAS2, WAYAI_CONNECTOR2, BASE_NATIVE_TOOLS2, NATIVE_TOOLS2, NATIVE_TOOL_NAMES2, previousConversationsCountField2, summarizationThresholdField2, flagConditionSchema2, MONITOR_TRIGGERS2, monitorTriggerSchema2, MONITOR_FIRING_TRIGGERS2, MONITOR_DELAY_SECONDS_MIN2, MONITOR_IDLE_DELAY_REQUIRED_MESSAGE2, MONITOR_HISTORY_MESSAGES_MAX2, monitorHistoryMessagesSchema2, monitorIncludeToolResultsSchema2, MONITOR_INPUT_SHAPING_KEYS2, MONITOR_INPUT_SHAPING_SCHEMAS2, MONITOR_INPUT_SHAPING_IDLE_MESSAGE2, monitorArgumentSourceSchema2, MONITOR_NOTE_TEMPLATE_MAX2, monitorActionSchema2, monitorRuleSchema2, MONITOR_RULE_KEYS2, MONITOR_RULE_SCHEMAS2, MONITOR_RULE_TRIGGERS2, MONITOR_RULE_TRIGGER_MESSAGE2, MONITOR_USER_MESSAGE_ACTION_KINDS2, MONITOR_ASSISTANT_REPLY_ACTION_KINDS2, INSERT_NOTE_TOOL_NAME2, RUN_MONITOR_TOOL_NAME2, MONITOR_RULE_ALLOWED_NATIVE_TOOLS2, MONITOR_RULE_REENTRY_TOOLS2, MONITOR_RULE_REENTRY_TRACKS2, monitorConfigField2, flagConditionsField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupTypeSchema2, EVENT_RELATIVE_FOLLOWUP_TYPES2, followupTimeUnitSchema2, followupIdSchema2, SELECTABLE_FOLLOWUP_TYPES2, MAX_LINKED_FOLLOWUP_TARGETS_PER_STATUS2, followupSchema2, MAX_OUTCOMES_PER_STATUS2, kanbanOutcomeSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, PREVIEW_LABEL_MAX_LENGTH2, MAX_ENDED_INDEX_RETENTION_DAYS2, MAX_EVAL_RETENTION_DAYS2, previewLabelField2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, updateChannelTestIdentitiesBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, PRODUCTION_DIRECT_FIELDS2, setProductionCredentialBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, CONTEXT_BOUNDARIES2, contextBoundarySchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, ORG_TAG_NAME_REGEX2, ORG_TAG_NAME_MAX_LENGTH2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, BASE_CREDENTIAL_NAME_MAX2, baseCredentialNameSchema2, createBaseCredentialLinkBody2, baseCredentialLinkParams2, baseCredentialLinkQuery2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlTable2, analyticsSqlSchemaQuery2, EVAL_PACING_PRESET_NAMES2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_MAX_RUNS_PER_SCENARIO2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, ISO_UTC_RE2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, evalDateContextSchema2, EVAL_FIXTURE_NAME_MAX_LENGTH2, evalFixtureOverrideSchema2, runSessionQuery2, EVAL_INPUT_ROLES2, EVAL_INPUT_ROLE_LIST2, ROLE_ECHO_MAX2, EVAL_INITIAL_STATE_SCOPES2, MAX_INITIAL_STATE_ENTRIES2, evalInitialStateEntry2, createEvalBody2, updateEvalBody2, EVAL_LIST_MAX_LIMIT2, evalListLimit2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, EVAL_MAX_SELECTED_SCENARIOS2, evalScenarioSelectionEntrySchema2, evalScenarioSelectionSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, EVAL_ATTACHMENT_HASH_REGEX2, evalAttachmentRef2, turnMayCarryAttachments2, ATTACHMENTS_USER_ONLY_MESSAGE2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, fixtureField2, createJourneyBody2, updateJourneyBody2, evalSessionConfigResponseSchema2, evalSessionResponseSchema2, evalSessionListConfigSchema2, evalSessionListItemSchema2, seedReleaseStatusSchema2, getConversationsQuery2, getMessagesQuery2, appMessageSenderType2, appMessageReceiverType2, apiChannelMessage2, apiChannelMessageBody2, appMessageBody2, appMessageResponse2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, deleteUserConversationsResponse2, sendMessageBody2, listConversationsQuery2, flagSourceSchema2, getConversationsResponse2, getConversationDetailParams2, getConversationDetailQuery2, getConversationDetailResponse2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, copilotSuggestBody2, copilotSuggestResponse2, CONSULT_THREAD_STATUSES2, consultThreadStatus2, CONSULT_THREAD_TITLE_MAX2, consultThreadTitle2, consultThreadSummary2, listConsultThreadsQuery2, listConsultThreadsResponse2, createConsultThreadBody2, createConsultThreadResponse2, consultThreadIdParam2, updateConsultThreadBody2, updateConsultThreadResponse2, CONSULT_AWAIT_TIMEOUT_MS2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, planKeySchema2, billingStatusSchema2, billingPlanTypeSchema2, dataUsageCountersSchema2, REKOR_ENTITLEMENT_CONTRACT_VERSION2, entitlementProjectionSchema2, rekorEntitlementRefreshMessageSchema2, downloadBody2, uploadQuery2, signUrlBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, MAX_RESOURCE_FILE_SIZE2, MAX_10MB_BASE64_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_CARRIERS2, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES2, MAX_RESOURCE_ENCODED_BYTES2, MAX_HUB_AS_CODE_RESOURCES2, MAX_HUB_AS_CODE_RESOURCE_FILES2, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES2, MAX_CI_CONFIG_BODY_BYTES2, hubAsCodeStateSchema2, hubAsCodeResourceFileSchema2, hubAsCodeResourceSchema2, uuidPattern2, ciUuidSchema2, boundedHubAsCodeResourcesSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, CI_APPLY_ENTITY_KINDS2, CI_APPLY_OPERATIONS2, ciApplyErrorBaseSchema2, ciApplyErrorSchema2, ciSyncCountSchema2, ciSyncChangesSchema2, ciSyncWarningSchema2, ciSyncResponseSchema2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, PRICING_PLAN_ID_RE2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, adminScopedTargetBody2, adminRepairLegacyOrgGrantsBody2, adminRepairCompedPlansBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysBody2, dataExplorerKvKeyBody2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteBody2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, sandboxEgressPolicy2, SANDBOX_EXEC_MAX_CMD_LENGTH2, SANDBOX_EXEC_MAX_ALLOWLIST2, SANDBOX_EXEC_MAX_TIMEOUT_MS2, adminSandboxExecBody2, META_ENTITY_ID_PATTERN2, metaEntityId2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, passwordLoginBody2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, reportMessageSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, reporterReportSummarySchema2, reporterListResponseSchema2, getReportResponseSchema2, reporterTransitionResponseSchema2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2, rekorBaseChangeMessageSchema2, WAYAI_WORKSPACE_LAYOUT, decisionAnswerSchema, decisionsResponseSchema;
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
     "use strict";
@@ -10713,6 +12561,7 @@ var init_dist = __esm({
     init_zod();
     init_zod();
     init_zod();
+    init_zod();
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     HEX_RE = /^[0-9a-f]{16,}$/;
     WORKOS_ID_RE = /^(?:user|org)_[0-9A-HJKMNP-TV-Z]{26}$/;
@@ -10862,13 +12711,21 @@ var init_dist = __esm({
     };
     MEDIA_PROVIDER_HTTP_BRAND = /* @__PURE__ */ Symbol.for("wayai.MediaProviderHttpError");
     MediaProviderHttpError = class extends Error {
-      constructor(provider, status) {
+      constructor(provider, status, options = {}) {
         super(`${provider} API error (${status})`);
         this.provider = provider;
         this.status = status;
         this.name = "MediaProviderHttpError";
+        this.credentialRejected = options.credentialRejected ?? false;
       }
       [MEDIA_PROVIDER_HTTP_BRAND] = true;
+      /**
+       * The provider said the credential itself was rejected, under a status that does not say so
+       * (Google answers an invalid or expired key with 400 `API_KEY_INVALID`, not 401). Read off
+       * the body at the throw site, which carries only this flag on. Alerting keys on it so the
+       * admin is told to re-enter the key, not that the key is fine.
+       */
+      credentialRejected;
     };
     REKOR_ACTOR_TYPE_HEADER2 = "X-Rekor-Actor-Type";
     REKOR_ACTOR_ID_HEADER2 = "X-Rekor-Actor-Id";
@@ -11032,7 +12889,7 @@ var init_dist = __esm({
       "/api/users/me/deletion": { tier: "STRICT", userLimit: 3, userWindow: 3600, failClosed: true },
       "/api/users/me/deletion/preflight": { tier: "STANDARD", userLimit: 30, failClosed: true },
       "/api/users/deletion/undo": { tier: "STRICT", failClosed: true },
-      // Production-base destruction (docs/plans/base-deletion-lifecycle.md D4).
+      // Production-base destruction.
       //
       // Keyed off the CONTRACT constants, not literals: `BASE_DESTRUCTION_CONFIRM_PATH`'s own
       // docstring promises that the mount, the `AUTH_BYPASS_PATHS` entry, the rate-limit key and
@@ -11280,18 +13137,993 @@ var init_dist = __esm({
     SUMMARIZATION_THRESHOLD_MIN2 = 1e3;
     SUMMARIZATION_THRESHOLD_MAX2 = 1e6;
     PREVIOUS_CONVERSATIONS_MAX2 = 20;
+    FLAG_CONDITION_OPERATORS2 = ["=", "!=", ">=", "<=", ">", "<"];
+    DECISION_SCORE_MIN_LEVELS2 = 2;
+    DECISION_SCORE_MAX_LEVELS2 = 10;
+    DECISIONS_MODEL_PREFIXES2 = ["typesafe/jev-", "jev-"];
+    DECISION_CAPABLE_AGENT_ROLES2 = [
+      "monitor",
+      "conversation_evaluator",
+      "message_evaluator"
+    ];
+    NATIVE_TOOL_SCHEMAS2 = {
+      "close_conversation": {
+        "tool_config": {
+          "name": "close_conversation",
+          "description": "Closes the current conversation and marks it as resolved",
+          // Non-strict, mirroring the `update_kanban_status` sibling below: under strict
+          // mode there are no optional fields, so `outcome` outside `required` makes the
+          // provider reject the definition and `outcome` inside `required` forces the
+          // model to emit it on every call. Requiredness is enforced SERVER-side instead
+          // (ops `outcomeRequired`) — and it must stay out of `required` here, or
+          // validateAndSanitizeToolParams would refuse the "retry without an outcome"
+          // recovery path a re-close depends on.
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "outcome": {
+                "type": "string",
+                "enum": "[KANBAN_OUTCOME_VALUES]",
+                "description": "Required only when the hub's terminal (conversation-ending) status declares outcomes: the closing outcome. Available outcomes: [KANBAN_OUTCOME_NAMES]"
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when the user's issue has been fully resolved."
+      },
+      "transfer_to_team": {
+        "tool_config": {
+          "name": "transfer_to_team",
+          "description": "Hand off conversation to a human support team",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "team_name": {
+                "type": "string",
+                "description": "Name of the team to transfer to"
+              }
+            },
+            "required": [
+              "team_name"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when the user needs assistance that requires human intervention. The team will receive the full conversation history."
+      },
+      "delegate_to_hub": {
+        "tool_config": {
+          "name": "delegate_to_hub",
+          "description": "Delegate a request to another hub. The target hub handles it as a task conversation and returns the result asynchronously.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "request": {
+                "type": "string",
+                "description": "The request to delegate to the target hub, phrased as a self-contained task."
+              }
+            },
+            "required": [
+              "request"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to hand a self-contained request to a configured partner hub. The target hub is set by an admin on the tool; you do not choose it. The result comes back asynchronously \u2014 do not wait for it in this turn."
+      },
+      "start_consult_thread": {
+        "tool_config": {
+          "name": "start_consult_thread",
+          "description": "Ask the consultant configured on this tool a question, in a consult thread the support team can see. The answer may come back in this turn or later.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "question": {
+                "type": "string",
+                "description": "What you need from the consultant, phrased so it can be answered without further back-and-forth."
+              },
+              "title": {
+                "type": "string",
+                "description": "A short label for the consult thread (a few words), so the support team can tell parallel consults apart."
+              }
+            },
+            "required": [
+              "question",
+              "title"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when answering needs knowledge you do not have and a consultant is configured for it. The consultant is set by an admin; you do not choose it. If the result says the answer will follow, END YOUR TURN \u2014 tell the customer you are checking and will come back to them. You will be brought back automatically when the answer arrives; do not poll or call this tool again for the same question."
+      },
+      "update_kanban_status": {
+        "tool_config": {
+          "name": "update_kanban_status",
+          "description": "Updates the kanban status of the current conversation to track its progress through workflow stages",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "new_kanban_status": {
+                "type": "string",
+                "enum": "[KANBAN_STATUS_VALUES]",
+                "description": "The new kanban status for the conversation. Available statuses: [KANBAN_STATUS_NAMES]"
+              },
+              "outcome": {
+                "type": "string",
+                "enum": "[KANBAN_OUTCOME_VALUES]",
+                "description": "Required only when moving to the terminal (conversation-ending) status: the closing outcome. Available outcomes: [KANBAN_OUTCOME_NAMES]"
+              },
+              "scheduled_event_date": {
+                "type": "string",
+                "description": 'Scheduled event date in RFC3339 format with timezone (e.g., "2024-01-01T00:00:00-03:00")'
+              },
+              "event_description": {
+                "type": "string",
+                "description": "Description of the scheduled event"
+              },
+              "event_sid": {
+                "type": "string",
+                "description": "External event ID for integration purposes"
+              }
+            },
+            "required": [
+              "new_kanban_status"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to update the kanban status of a conversation to reflect its current stage in the workflow."
+      },
+      "schedule_followup": {
+        "tool_config": {
+          "name": "schedule_followup",
+          "description": "Schedules a custom manual followup for the current conversation at an exact future time. The system automatically determines the receiver based on conversation status and hub AI mode.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "scheduled_time": {
+                "type": "string",
+                "description": 'Exact time to execute the followup in ISO 8601 format with timezone (e.g., "2024-01-01T14:30:00-03:00"). Must be in the future.'
+              },
+              "message": {
+                "type": "string",
+                "description": 'The followup message to send to the customer. Can include AI instructions in brackets like: "Message text [AI Context: instructions for AI]"'
+              }
+            },
+            "required": [
+              "scheduled_time",
+              "message"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to schedule a custom followup message at an exact future time. The caller is responsible for choosing appropriate timing (business hours, etc.). This is separate from automatic kanban-based followups."
+      },
+      "transfer_to_agent": {
+        "tool_config": {
+          "name": "transfer_to_agent",
+          "description": "Hand off conversation to another AI agent",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "agent_name": {
+                "type": "string",
+                "description": "Name of the AI agent to transfer to"
+              }
+            },
+            "required": [
+              "agent_name"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when you need to hand the conversation to another agent on the same track \u2014 a specialist for a specific domain, or back to the entry pilot/copilot acting as a router for a request outside your domain."
+      },
+      "consult_agent": {
+        "tool_config": {
+          "name": "consult_agent",
+          "description": "Consult an advisor agent for specialized knowledge without transferring the conversation",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "agent_name": {
+                "type": "string",
+                "description": "Name of the advisor agent to consult for advice"
+              },
+              "consult_question": {
+                "type": "string",
+                "description": "The specific question to ask the advisor agent"
+              }
+            },
+            "required": [
+              "agent_name",
+              "consult_question"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when you need expert advice from an advisor agent but want to maintain conversation ownership. The consulted advisor will provide advice that you can use to help the user."
+      },
+      "read_file": {
+        "tool_config": {
+          "name": "read_file",
+          "description": "Retrieve a file by path (preferred) or by ID. The file is injected into the conversation context for AI processing.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "description": 'Path to the file. Knowledge and skill files live under "resources/", exactly as listed in your resource structure or in a file listing \u2014 e.g. "resources/product-docs/references/menu.md", where the segment after "resources/" names the resource. Files attached to this conversation live under "conversation/" and are announced in the transcript by that path \u2014 e.g. "conversation/report.pdf". A shorter form also works for those two and is matched across everything you can read, preferring an exact path over one that merely ends with what you wrote ("references/menu.md", or just "menu.md"); dropping a middle segment does not resolve, and a bare name carried by both a resource and this conversation is reported as ambiguous so you can retry with the full path. Files from an EARLIER conversation with the same user live under "conversations/<conversation_id>/" \u2014 e.g. "conversations/1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed/receipt.pdf", exactly as the transcript of that conversation announces them (get_conversation). That form takes no shortening: write the mount, the conversation id and the file name in full. Prefer this over file_id: paths are stable, while IDs are regenerated whenever a hub is published.'
+              },
+              "file_id": {
+                "type": "string",
+                "description": "The file ID to retrieve, from a conversation message or a file listing. Still supported, but prefer path for resource files."
+              },
+              "resource_id": {
+                "type": "string",
+                "description": "Optional. Restricts a path to one resource \u2014 use it when the same file name exists in more than one resource and the tool reports the reference as ambiguous. Must be a resource linked to this agent."
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool to read a file for AI analysis. Provide either path (preferred \u2014 the exact paths appear in your resource structure and in list_files output) or file_id. The file will be injected into the conversation context."
+      },
+      "download_file": {
+        "tool_config": {
+          "name": "download_file",
+          "description": "Mount a resource file into the code execution sandbox so you can edit it. Path is provider-specific: Anthropic mounts at /tmp/<filename>, OpenAI mounts at /mnt/data/<filename> \u2014 use the `sandbox_path` returned in the result. After mounting, use the provider's code-execution tool (Anthropic code_execution view/str_replace/create, or OpenAI code_interpreter Python) to read or modify the file. When finished, call upload_file to commit changes back to the resource library. Bytes never enter conversation context.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "file_id": {
+                "type": "string",
+                "description": "The resource file_id to mount (from a file listing or read_file \u2014 a listing row carries file_id alongside its path). Must be a text file; binary files are rejected."
+              }
+            },
+            "required": [
+              "file_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to begin editing a resource file. Returns { sandbox_path, filename, sandbox_file_id }. After this, use your provider's code-execution tool to view and modify the file inside the sandbox, then call upload_file with the sandbox_file_id of the modified file to persist changes."
+      },
+      "upload_file": {
+        "tool_config": {
+          "name": "upload_file",
+          "description": "Persist a sandbox file to the resource library. Two modes: (1) UPDATE \u2014 pass file_id of an existing resource file to overwrite it (after download_file + code-execution edits). (2) CREATE \u2014 pass resource_id + filename instead of file_id to add a new file to that resource (after creating the file in the sandbox with code-execution). Requires write_enabled on the agent_resource binding for the target resource. sandbox_file_id is always required.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "file_id": {
+                "type": "string",
+                "description": "UPDATE mode only: the existing resource file_id to overwrite. Omit when creating a new file."
+              },
+              "resource_id": {
+                "type": "string",
+                "description": "CREATE mode only: the resource the new file belongs to. Required when file_id is omitted; ignored when file_id is provided."
+              },
+              "filename": {
+                "type": "string",
+                "description": "CREATE mode only: the filename for the new file (e.g. 'pricing_v2.md'). Required when file_id is omitted. MIME type is inferred from the extension; only text files are supported."
+              },
+              "folder_id": {
+                "type": "string",
+                "description": "CREATE mode only: optional folder to place the file in. Omit for resource root."
+              },
+              "sandbox_file_id": {
+                "type": "string",
+                "description": "The provider-specific file_id of the file inside the sandbox. Anthropic: take from bash_code_execution_tool_result content[].file_id. OpenAI: take from the container_file_citation annotations on code_interpreter_call output. Either one identifies the file as it currently exists in the sandbox."
+              }
+            },
+            "required": [
+              "sandbox_file_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to commit either an edit (file_id + sandbox_file_id) or a new file (resource_id + filename + sandbox_file_id). Returns { saved, file_id, file_hash, bytes } on success \u2014 the file_id you can reference later. Errors clearly when write access is denied or when neither identifier set is provided."
+      },
+      "send_files": {
+        "tool_config": {
+          "name": "send_files",
+          "description": "Send files to the end user through their conversation channel (App, WhatsApp, email, etc.)",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "file_ids": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": 'Files to send to the user, each named by path (preferred) or by ID. Paths are the addresses announced in the transcript and in your resource structure \u2014 "conversation/report.pdf" for a file attached to this conversation, "conversations/<conversation_id>/receipt.pdf" for one attached to an earlier conversation with the same user, "resources/product-docs/price-list.pdf" for a knowledge or skill file. IDs remain accepted, but they are regenerated whenever a hub is published, so a path is the stable address.'
+              },
+              "folder_ids": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Array of resource folder IDs to send all files from. Alternative to file_ids."
+              },
+              "message_text": {
+                "type": "string",
+                "description": "Message text to accompany the files. For WhatsApp, this becomes the caption on the last file. For email, this becomes the email body."
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool to send files to users. WhatsApp sends files individually with optional caption on last file. Email sends all files as attachments in a single email."
+      },
+      "list_files": {
+        "tool_config": {
+          "name": "list_files",
+          "description": "Browse the files you can reach, by path. Call it with no path to see the mounts, then pass a mount or a folder path to list what is inside it. Every row carries the exact path read_file and send_files accept.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "path": {
+                "type": "string",
+                "description": 'What to list. Omit it (or pass "") for the mounts you can browse \u2014 the available mounts are listed here at runtime. "conversation" lists the files attached to this conversation. "resources" lists every resource mount. "resources/<resource-slug>" lists the top level of a knowledge resource or skill, and "resources/<resource-slug>/<folder>/<subfolder>" lists that folder. Folder rows come back with their own path, so you drill down by passing back the path of the row you want.'
+              },
+              "query": {
+                "type": "string",
+                "description": "Search text. Matched against a file's title and its file name. Under a resource path this searches the WHOLE subtree below it, not just the level named, and every result is returned as a full path."
+              },
+              "tags": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Return files carrying ANY of these tags. Applies to resource files only \u2014 conversation attachments carry no tags. Searches the whole subtree, like query."
+              },
+              "metadata_filter": {
+                "type": "object",
+                "description": 'Filter resource files by their metadata using MongoDB-style operators. Supported: $eq (equal), $ne (not equal), $gt/$gte/$lt/$lte (comparisons), $in/$nin (in/not in array), $contains (substring for text, membership for a list), $and/$or/$not (logical). Nested paths like "location.city" are supported, and a bare value means equality. Examples: {"status": "active"}, {"priority": {"$gte": 5}}, {"location.city": "Miami"}, {"$and": [{"status": "active"}, {"priority": {"$gt": 3}}]}, {"$not": {"status": "archived"}}. A comparison between different types simply does not match. Schema from resource.file_metadata_schema. Searches the whole subtree, like query.'
+              },
+              "limit": {
+                "type": "integer",
+                "description": "Maximum number of rows to return (default: 50, max: 100). The response reports the total the page was drawn from."
+              },
+              "offset": {
+                "type": "integer",
+                "description": "Number of rows to skip for pagination (default: 0)"
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": 'Use to find out which files exist before reading one. Call it with no path first: that returns the mounts \u2014 "conversation" for what the user attached here, and one "resources/<slug>" per knowledge resource or skill linked to you. Then pass a mount or folder path back to list its contents. Every row carries a `path`; pass that path to read_file to open the file, or to send_files to deliver it. Pass query, tags or metadata_filter to search a whole resource at once instead of walking it folder by folder. Files from EARLIER conversations are not listed here \u2014 the transcript of each past conversation announces its own files by path (get_conversation).'
+      },
+      "list_resource_folders": {
+        "tool_config": {
+          "name": "list_resource_folders",
+          "description": "(deprecated \u2014 use list_files) List all folders in resources that this agent has access to. Returns all folders with parent_folder_id for hierarchy reconstruction.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "resource_id": {
+                "type": "string",
+                "description": "Resource ID to query folders from. Must be one of the knowledge resources linked to this agent (the available ids are listed here at runtime). Required for access control and performance."
+              },
+              "search_query": {
+                "type": "string",
+                "description": "Search folders by name"
+              },
+              "metadata_filter": {
+                "type": "object",
+                "description": 'Filter by metadata using MongoDB-style operators. Supported: $eq (equal), $ne (not equal), $gt/$gte/$lt/$lte (comparisons), $in/$nin (in/not in array), $contains (contains value), $and/$or/$not (logical). Supports nested paths like "location.city". Returns clear errors for type mismatches. Examples: {"status": "active"} for simple equality, {"priority": {"$gte": 5}} for comparison, {"location.city": "Miami"} for nested path, {"$and": [{"status": "active"}, {"priority": {"$gt": 3}}]} for complex logic, {"$not": {"status": "archived"}} for negation. Schema from resource.folder_metadata_schema.'
+              }
+            },
+            "required": [
+              "resource_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Deprecated: prefer list_files, which walks the same folders by path and needs no resource_id. Still works \u2014 lists all folders in a resource, filtered by search_query or metadata, returning folder info with parent_folder_id, file counts, and subfolder counts."
+      },
+      "list_resource_files": {
+        "tool_config": {
+          "name": "list_resource_files",
+          "description": "(deprecated \u2014 use list_files) List files in resources that this agent has access to. Each file is returned with its path \u2014 the address read_file accepts \u2014 plus metadata.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "resource_id": {
+                "type": "string",
+                "description": "Resource ID to query files from. Must be one of the knowledge resources linked to this agent (the available ids are listed here at runtime). Required for access control and performance."
+              },
+              "folder_id": {
+                "type": "string",
+                "description": "Filter by folder ID. Omit to return ALL files. Use 00000000-0000-0000-0000-000000000000 for root-level files only."
+              },
+              "search_query": {
+                "type": "string",
+                "description": "Search files by title or file name"
+              },
+              "tags": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Filter by tags (matches files with any of the specified tags)"
+              },
+              "metadata_filter": {
+                "type": "object",
+                "description": 'Filter by metadata using MongoDB-style operators. Supported: $eq (equal), $ne (not equal), $gt/$gte/$lt/$lte (comparisons), $in/$nin (in/not in array), $contains (contains value), $and/$or/$not (logical). Supports nested paths like "location.city". Returns clear errors for type mismatches. Examples: {"status": "active"} for simple equality, {"priority": {"$gte": 5}} for comparison, {"location.city": "Miami"} for nested path, {"$and": [{"status": "active"}, {"priority": {"$gt": 3}}]} for complex logic, {"$not": {"status": "archived"}} for negation. Schema from resource.file_metadata_schema.'
+              },
+              "limit": {
+                "type": "integer",
+                "description": "Maximum number of files to return (default: 50, max: 100)"
+              },
+              "offset": {
+                "type": "integer",
+                "description": "Number of files to skip for pagination (default: 0)"
+              }
+            },
+            "required": [
+              "resource_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Deprecated: prefer list_files, which lists the same files by path, needs no resource_id, and also sees this conversation's attachments. Still works \u2014 each row carries a `path`; pass that path to read_file to retrieve the file's content for AI analysis. `file_id` is also returned and still accepted."
+      },
+      "get_tool_schema": {
+        "tool_config": {
+          "name": "get_tool_schema",
+          "description": "MANDATORY FIRST STEP: Retrieves the complete parameter schema for any tool by name. You MUST call this before using ANY tool to get its exact required parameters. This ensures execute_tool will succeed.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "tool_name": {
+                "type": "string",
+                "description": "The name of the tool to retrieve the schema for"
+              }
+            },
+            "required": [
+              "tool_name"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Mandatory first step before execute_tool. Returns `function_schema` for the target tool \u2014 pass `function_schema.parameters` (same shape, same keys) as the `parameters` envelope in your execute_tool call."
+      },
+      "execute_tool": {
+        "tool_config": {
+          "name": "execute_tool",
+          "description": "Executes any tool by name. You MUST call get_tool_schema first for the target tool to learn its parameter shape, then pass that shape verbatim under `parameters`.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "required": [
+              "tool_name",
+              "parameters"
+            ],
+            "properties": {
+              "tool_name": {
+                "type": "string",
+                "description": "The name of the tool to execute."
+              },
+              "parameters": {
+                "type": "object",
+                "description": "The arguments object for the target tool. Must match `function_schema.parameters` returned by get_tool_schema \u2014 same keys, same shape, same required fields. Inner contents are validated by the target tool, not by execute_tool."
+              }
+            },
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "MANDATORY WORKFLOW: 1) Call get_tool_schema(tool_name) to receive the target's `function_schema`. 2) Build a `parameters` object that matches `function_schema.parameters` \u2014 same property keys, same types, all required fields. 3) Call execute_tool({ tool_name, parameters }). The `parameters` envelope here is identical in shape to `function_schema.parameters`."
+      },
+      "expand_summary": {
+        "tool_config": {
+          "name": "expand_summary",
+          "description": "Retrieve the original messages of a section in the conversation summary. The summary block at the top of the conversation lists sections with stable `id`s \u2014 pass one to get the verbatim messages it covers.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "section_id": {
+                "type": "string",
+                "description": "The `id` of the section from the <conversation_summary> block at the top of the conversation."
+              }
+            },
+            "required": [
+              "section_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use when a summary section is too compressed for the question at hand \u2014 e.g. you need the user's exact wording, the precise text of a previous decision, or a tool result that the summary only references. If you pass an unknown `section_id`, the response will include `available_section_ids` so you can retry with a valid one."
+      },
+      "read_skill": {
+        "tool_config": {
+          "name": "read_skill",
+          "description": "Read a skill's SKILL.md content. Pass a skill_id from the skills linked to this agent (available ids are listed in the skill_id parameter).",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "skill_id": {
+                "type": "string",
+                "description": "The skill's resource_id. Must be one of the skills linked to this agent (the available ids are listed here at runtime)."
+              }
+            },
+            "required": [
+              "skill_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool to read a skill's instructions. Returns the full SKILL.md content as a string. Use read_skill_file to access other files referenced in the skill."
+      },
+      "read_skill_file": {
+        "tool_config": {
+          "name": "read_skill_file",
+          "description": "Read a file from a skill by relative path. No need to call read_skill first if you already know the file path.",
+          "strict": true,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "skill_id": {
+                "type": "string",
+                "description": "The skill's resource_id. Must be one of the skills linked to this agent (the available ids are listed here at runtime)."
+              },
+              "file_path": {
+                "type": "string",
+                "description": 'Relative path from skill root (e.g., "references/menu.md")'
+              }
+            },
+            "required": [
+              "skill_id",
+              "file_path"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": 'Use this tool to read files referenced in SKILL.md. Provide the relative path as shown in the skill content (e.g., "references/menu.md"). Returns content for text files or signed URL for binary files.'
+      },
+      "update_state": {
+        "tool_config": {
+          "name": "update_state",
+          "description": "Updates a configured state by merging updates with its current value. Scope (conversation vs user) is inferred from the state's definition.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "state_slug": {
+                "type": "string",
+                "description": "Stable slug of the state to update. Pass the slug (the left half), not the display name. Available states (slug + display name): [STATE_SLUG_VALUES]"
+              },
+              "updates": {
+                "type": "object",
+                "description": "Object with key-value pairs to merge into the current state"
+              }
+            },
+            "required": [
+              "state_slug",
+              "updates"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to track and update contextual information during conversations. Examples: updating cart items, recording form answers, saving user preferences. The updates are merged with existing state."
+      },
+      "get_state": {
+        "tool_config": {
+          "name": "get_state",
+          "description": "Retrieves the current value of a configured state. Scope is inferred from the state's definition.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "state_slug": {
+                "type": "string",
+                "description": "Stable slug of the state to retrieve. Pass the slug (the left half), not the display name. Available states (slug + display name): [STATE_SLUG_VALUES]"
+              }
+            },
+            "required": [
+              "state_slug"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to retrieve the current state value. This is useful when you need to check the current state before making decisions or when the state is not already available in the prompt context."
+      },
+      "reset_state": {
+        "tool_config": {
+          "name": "reset_state",
+          "description": "Resets a configured state to its initial value as defined in the state schema. Scope is inferred from the state's definition.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "state_slug": {
+                "type": "string",
+                "description": "Stable slug of the state to reset. Pass the slug (the left half), not the display name. Available states (slug + display name): [STATE_SLUG_VALUES]"
+              }
+            },
+            "required": [
+              "state_slug"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use to reset state to its default initial value. This is useful when you need to clear accumulated state and start fresh, such as clearing a shopping cart or resetting form progress."
+      },
+      "get_conversations_summary": {
+        "tool_config": {
+          "name": "get_conversations_summary",
+          "description": "Retrieves a timeline of past conversations with the current user, showing summaries and conversation IDs.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "max_conversations": {
+                "type": "integer",
+                "description": "Maximum number of past conversations to return (default: 10)"
+              },
+              "max_characters": {
+                "type": "integer",
+                "description": "Maximum characters in the output (default: 20000, max: 40000). Truncates oldest entries first."
+              }
+            },
+            "required": [],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool at the start of a conversation to retrieve the history of past conversations with this user. Returns summaries with conversation IDs that can be used with get_conversation for full transcripts."
+      },
+      "get_conversation": {
+        "tool_config": {
+          "name": "get_conversation",
+          "description": "Retrieves the full transcript of a specific past conversation, plus the IDs of the conversations closed immediately before and after it. Use get_conversations_summary first to find conversation IDs.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "conversation_id": {
+                "type": "string",
+                "description": "The ID of the conversation to retrieve (from get_conversations_summary results)"
+              },
+              "max_characters": {
+                "type": "integer",
+                "description": "Maximum characters in the output (default: 30000, max: 60000). Truncates oldest messages first."
+              }
+            },
+            "required": [
+              "conversation_id"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool to read the full transcript of a specific past conversation. First use get_conversations_summary to find conversation IDs, then use this tool to drill into the details. The response may include previous_conversation_id and next_conversation_id \u2014 the conversations closed nearest in time either side of this one, which you can pass straight back to this tool to keep moving through the user's history. They are neighbours by closing time, not a fixed chain, and either may be absent."
+      },
+      // ---------------------------------------------------------------------------
+      // Tools added to the TS catalog after the Supabase migration — schemas
+      // reconstructed from the handler signatures in
+      // apps/backend/src/tools/native/wayai/*.ts.
+      // ---------------------------------------------------------------------------
+      "set_state_path": {
+        "tool_config": {
+          "name": "set_state_path",
+          "description": "Set a specific path within a state object (dot/array path) without overwriting the rest of the state. Scope is inferred from the state's definition.",
+          // strict:false matches the other state ops so legacy composed-tool YAML
+          // mapping `state_scope` (now ignored at runtime) doesn't trip OpenAI
+          // strict-mode validators on in-flight calls.
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "state_slug": {
+                "type": "string",
+                "description": "Stable slug of the state variable to update. Pass the slug (the left half), not the display name. Available states (slug + display name): [STATE_SLUG_VALUES]"
+              },
+              "path": {
+                "type": "array",
+                "items": { "type": "string" },
+                "description": "Path within the state object, as an ordered list of keys."
+              },
+              "value": {
+                "description": "The value to write at the given path. Any JSON value is allowed."
+              }
+            },
+            "required": ["state_slug", "path", "value"],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": "Use this tool when you need to update a single field inside a structured state object without replacing the entire state. Provide the full path from the root of the state object."
+      },
+      // NEVER OFFERED TO A MODEL, unlike every other entry in this file — and it is
+      // `model_callable: false` on the catalog entry that delivers that, NOT the role
+      // restriction beside it. An earlier version of this comment credited
+      // `assignable_roles: ['monitor']`, which was wrong: a monitor runs a DISPATCHING
+      // turn on `idle` (only the synchronous side-call sets `omit_tools`), and
+      // `PATCH /api/setup/agents/:id` can re-role an agent that keeps the rows it
+      // holds — so the role gate left the tool offerable on two paths.
+      //
+      // The schema exists because the catalog requires one per tool (the parity check
+      // at the bottom of `native-tools.ts`) and because it is the one place the two
+      // arguments are described for whoever writes the rule.
+      //
+      // `tool_instructions: null` FOLLOWS FROM THAT: instructions are injected into an
+      // agent's system message when the tool is attached, and this tool is attached to
+      // an agent whose model is never told it exists.
+      // NEVER OFFERED TO A MODEL, like `insert_note` below and for the same reason:
+      // `model_callable: false` on the catalog entry. A monitor's RULE selects it and
+      // the monitor runtime carries it out — it never reaches `handleTool`, because
+      // running a callee means re-entering the side-call with the caller's cascade
+      // state, which no `ToolContext` carries.
+      "run_monitor": {
+        "tool_config": {
+          "name": "run_monitor",
+          "description": "Run another monitor on this hub. The named monitor judges the same conversation and acts on its own rules; nothing it finds is returned here.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "monitor_name": {
+                "type": "string",
+                "description": "The name of the monitor to run. It must be a monitor on this hub whose trigger is manual."
+              }
+            },
+            "required": ["monitor_name"],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": null
+      },
+      "insert_note": {
+        "tool_config": {
+          "name": "insert_note",
+          "description": "Insert an admin-authored note into the answering agent's context for this turn only. The note is written by the administrator, not by a model; the monitor's variables are substituted into it.",
+          "strict": false,
+          "parameters": {
+            "type": "object",
+            "properties": {
+              "template": {
+                "type": "string",
+                "description": "The note text. Write {{variable_name}} to substitute one of this monitor's own variables. Unresolved names render as nothing and are recorded on the audit row."
+              },
+              "keep_in_history": {
+                "type": "boolean",
+                "description": "Default false: the note briefs this turn only and is never stored. Set true to also record it as an internal message the support team can see and the customer never receives."
+              }
+            },
+            "required": ["template"],
+            "additionalProperties": false
+          }
+        },
+        "tool_instructions": null
+      }
+    };
+    WAYAI_CONNECTOR2 = "b17d9f3a-4e1b-46c9-b648-a2f0c3611aa4";
+    BASE_NATIVE_TOOLS2 = [
+      // --- Wayai core tools ---
+      { tool_native_id: "nt-001", tool_name: "transfer_to_agent", tool_display_name: "Transfer to Agent", tool_description: "Transfer the conversation to another AI agent", connector_id: WAYAI_CONNECTOR2, operation: "transfer_to_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-002", tool_name: "transfer_to_team", tool_display_name: "Transfer to Team", tool_description: "Escalate conversation to a human support team", connector_id: WAYAI_CONNECTOR2, operation: "transfer_to_team", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-003", tool_name: "close_conversation", tool_display_name: "Close Conversation", tool_description: "Close and end the current conversation", connector_id: WAYAI_CONNECTOR2, operation: "close_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-004", tool_name: "update_kanban_status", tool_display_name: "Update Kanban Status", tool_description: "Update the kanban status of the conversation", connector_id: WAYAI_CONNECTOR2, operation: "update_kanban_status", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-005", tool_name: "schedule_followup", tool_display_name: "Schedule Follow-up", tool_description: "Schedule a follow-up message for the conversation", connector_id: WAYAI_CONNECTOR2, operation: "schedule_followup", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: true, execution_config: null },
+      { tool_native_id: "nt-006", tool_name: "send_files", tool_display_name: "Send Files", tool_description: "Send files to the user", connector_id: WAYAI_CONNECTOR2, operation: "send_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-007", tool_name: "update_state", tool_display_name: "Update State", tool_description: "Update conversation or user state variables", connector_id: WAYAI_CONNECTOR2, operation: "update_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-008", tool_name: "get_state", tool_display_name: "Get State", tool_description: "Retrieve conversation or user state values", connector_id: WAYAI_CONNECTOR2, operation: "get_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-009", tool_name: "reset_state", tool_display_name: "Reset State", tool_description: "Reset conversation or user state to initial values", connector_id: WAYAI_CONNECTOR2, operation: "reset_state", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-010", tool_name: "set_state_path", tool_display_name: "Set State Path", tool_description: "Set a specific path within state object", connector_id: WAYAI_CONNECTOR2, operation: "set_state_path", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-011", tool_name: "consult_agent", tool_display_name: "Consult Agent", tool_description: "Consult an advisor agent for advice without transferring", connector_id: WAYAI_CONNECTOR2, operation: "consult_agent", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-013", tool_name: "read_skill", tool_display_name: "Read Skill", tool_description: "Read the full specification of a skill", connector_id: WAYAI_CONNECTOR2, operation: "read_skill", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-014", tool_name: "read_skill_file", tool_display_name: "Read Skill File", tool_description: "Read a specific file within a skill", connector_id: WAYAI_CONNECTOR2, operation: "read_skill_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-015", tool_name: "read_file", tool_display_name: "Read File", tool_description: "Read the contents of a resource file", connector_id: WAYAI_CONNECTOR2, operation: "read_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      // Superseded by `list_files` (nt-027), which browses the same resource files
+      // by PATH plus this conversation's attachments.
+      //
+      // `ui_assignable: false` — DEPRECATED, not withdrawn. Hiding the Add grid entry
+      // stops a NEW agent from being wired to a tool that addresses files by an id a
+      // publish re-mints and that cannot see a conversation attachment at all (the id
+      // itself is discoverable — `RESOURCE_TOOL_INJECTIONS` still writes the linked
+      // ids into their `resource_id` description every turn), while every hub that
+      // already assigns one keeps
+      // working: the handler still dispatches, CI name resolution still resolves the
+      // name, and `wayai pull` / `push` still round-trips the YAML. There is no
+      // auto-provisioning anywhere in the platform, so an existing agent is never
+      // migrated for free — an author swaps the tool deliberately.
+      { tool_native_id: "nt-016", tool_name: "list_resource_files", tool_display_name: "List Resource Files", tool_description: "(deprecated \u2014 use list_files) List files in a resource folder", connector_id: WAYAI_CONNECTOR2, operation: "list_resource_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, ui_assignable: false },
+      { tool_native_id: "nt-017", tool_name: "list_resource_folders", tool_display_name: "List Resource Folders", tool_description: "(deprecated \u2014 use list_files) List all resource folders", connector_id: WAYAI_CONNECTOR2, operation: "list_resource_folders", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, ui_assignable: false },
+      { tool_native_id: "nt-018", tool_name: "get_conversations_summary", tool_display_name: "Get Conversations Summary", tool_description: "Get a summary of recent conversations", connector_id: WAYAI_CONNECTOR2, operation: "get_conversations_summary", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-019", tool_name: "get_conversation", tool_display_name: "Get Conversation", tool_description: "Retrieve full conversation history", connector_id: WAYAI_CONNECTOR2, operation: "get_conversation", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-020", tool_name: "get_tool_schema", tool_display_name: "Get Tool Schema", tool_description: "Retrieve the JSON schema for a tool", connector_id: WAYAI_CONNECTOR2, operation: "get_tool_schema", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-021", tool_name: "execute_tool", tool_display_name: "Execute Tool", tool_description: "Execute any available tool by name", connector_id: WAYAI_CONNECTOR2, operation: "execute_tool", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-022", tool_name: "expand_summary", tool_display_name: "Expand Summary", tool_description: "Retrieve the original messages of a section in the conversation summary", connector_id: WAYAI_CONNECTOR2, operation: "expand_summary", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-023", tool_name: "download_file", tool_display_name: "Download File for Edit", tool_description: "Mount a resource file into the code execution sandbox for editing", connector_id: WAYAI_CONNECTOR2, operation: "download_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      { tool_native_id: "nt-024", tool_name: "upload_file", tool_display_name: "Upload Edited File", tool_description: "Persist a sandbox-edited file back to the resource library", connector_id: WAYAI_CONNECTOR2, operation: "upload_file", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      // Hub-as-agent delegation (consultant-agents H1.5). UN-GATED in PR 7 (H1.5b): the
+      // spawn + cross-DO completion callback shipped, so the tool is live across the
+      // catalog listing, CI push, the config snapshot, and the handler. (PR 6 shipped it
+      // `assignable: false` so no visible-but-inert tool could reach production between
+      // the two merges.)
+      //
+      // `ui_assignable: false` — CONFIG-AS-CODE ONLY for v1. Attaching this tool requires
+      // two admin decisions the Add dialog cannot yet collect: the target hub and the
+      // `context_boundary` (a data-sensitivity choice). Without a `hub` branch in the
+      // delegation dialog, clicking Add would submit no delegation params and the write
+      // path would reject it — a live button that only ever errors. Assign it via
+      // `wayai push` until the picker + boundary control ship.
+      { tool_native_id: "nt-025", tool_name: "delegate_to_hub", tool_display_name: "Delegate to Hub", tool_description: "Delegate a request to another hub as a task, and receive the result asynchronously", connector_id: WAYAI_CONNECTOR2, operation: "delegate_to_hub", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, ui_assignable: false },
+      // Agent-initiated consults (consultant-agents H1.7b). A delegation tool like the
+      // three above: the TARGET is admin configuration (`delegated_agent_id` for a
+      // same-hub consultant, `delegated_hub_id` for a partner hub) and the model supplies
+      // only the question — so scoping "which consultants may this agent reach" reuses
+      // the existing assignment model with no new config surface.
+      //
+      // `ui_assignable: false` — CONFIG-AS-CODE ONLY for v1, same reasoning as
+      // `delegate_to_hub`: attaching it requires a target the Add dialog cannot yet
+      // collect (and, for a consultant target, the `allow_consultant_chain` opt-in). A
+      // live button that only ever errors is worse than no button. Assign via `wayai push`
+      // until the picker ships.
+      { tool_native_id: "nt-026", tool_name: "start_consult_thread", tool_display_name: "Start Consult Thread", tool_description: "Ask a configured consultant (or partner hub) a question in a visible consult thread", connector_id: WAYAI_CONNECTOR2, operation: "start_consult_thread", tool_method: "internal", tool_group: "Native Tools", is_delegation: true, is_auto_set: false, execution_config: null, ui_assignable: false },
+      // One drill-down listing for every file namespace, replacing `list_resource_files`
+      // (nt-016) and `list_resource_folders` (nt-017). Fully visible: it needs no
+      // configuration the Add dialog cannot collect — the mounts an agent may browse
+      // come from its existing resource links and its own conversation, and the only
+      // model-supplied input is a path.
+      { tool_native_id: "nt-027", tool_name: "list_files", tool_display_name: "List Files", tool_description: "Browse the files this agent can reach, by path", connector_id: WAYAI_CONNECTOR2, operation: "list_files", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null },
+      // TWO gates, and BOTH are load-bearing — the first shipped alone and was not
+      // enough. `assignable_roles: ['monitor']` says only a monitor may HOLD it,
+      // because the tool has no meaning off a monitor: a rule SELECTS it and the note
+      // is injected into the ANSWERING agent's prompt for that one turn.
+      // `model_callable: false` says no model is ever TOLD it exists — which the role
+      // restriction does NOT imply, because an `idle` monitor runs a dispatching turn
+      // and a re-roled agent keeps the tools it holds. Offered and called, it reaches
+      // the native dispatcher's `default:` branch: a Sentry event and a provider
+      // re-call. See `NativeTool.model_callable`.
+      { tool_native_id: "nt-028", tool_name: "insert_note", tool_display_name: "Insert Note", tool_description: "Brief the answering agent with an admin-authored note before it replies", connector_id: WAYAI_CONNECTOR2, operation: "insert_note", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, assignable_roles: ["monitor"], model_callable: false },
+      // TWO gates, same pair and same reasons as `insert_note` above — this is the
+      // second tool to need both, which is why they are catalog fields rather than a
+      // check at one site. `assignable_roles: ['monitor']`: only a monitor may hold it,
+      // because only a monitor's RULE can select it. `model_callable: false`: no model
+      // is ever told it exists, which the role restriction does NOT imply — an `idle`
+      // monitor runs a dispatching turn, and a re-roled agent keeps the rows it holds.
+      //
+      // The CALLEE is named, not identified by id (owner decision 9): a hub-relative
+      // name survives every copy path untouched, where a per-hub UUID in a JSON column
+      // would need remapping on both branching mechanisms and normalizing on both CI
+      // directions. `action.tool_name`, one key away in the same object, is the
+      // precedent.
+      { tool_native_id: "nt-029", tool_name: "run_monitor", tool_display_name: "Run Monitor", tool_description: "Run another monitor on this hub and let it act on its own rules", connector_id: WAYAI_CONNECTOR2, operation: "run_monitor", tool_method: "internal", tool_group: "Native Tools", is_delegation: false, is_auto_set: false, execution_config: null, assignable_roles: ["monitor"], model_callable: false }
+    ];
+    NATIVE_TOOLS2 = BASE_NATIVE_TOOLS2.map((base) => {
+      const schema = NATIVE_TOOL_SCHEMAS2[base.tool_name];
+      if (!schema) {
+        throw new Error(
+          `Native tool "${base.tool_name}" (${base.tool_native_id}) is missing an entry in NATIVE_TOOL_SCHEMAS. Add it to workers/shared/src/catalog/native-tool-schemas.ts.`
+        );
+      }
+      return {
+        ...base,
+        tool_config: schema.tool_config,
+        tool_instructions: schema.tool_instructions
+      };
+    });
+    NATIVE_TOOL_NAMES2 = new Set(NATIVE_TOOLS2.map((t) => t.tool_name));
     previousConversationsCountField2 = external_exports.number().int().min(0).max(PREVIOUS_CONVERSATIONS_MAX2).nullable().optional();
     summarizationThresholdField2 = external_exports.number().int().min(SUMMARIZATION_THRESHOLD_MIN2).max(SUMMARIZATION_THRESHOLD_MAX2).nullable().optional();
+    flagConditionSchema2 = external_exports.object({
+      variable: external_exports.string(),
+      operator: external_exports.enum(FLAG_CONDITION_OPERATORS2),
+      // `boolean` is admitted for parity with the CI write path, whose refine gates the
+      // operator alone, so `value: false` on a boolean evaluation variable is storable
+      // config today and the evaluator honours it through `String()`. Narrowing here would
+      // reject on PATCH exactly what `wayai push` persists, so any REST caller that reads
+      // an agent and writes it back — the typed clients, the CLI's `ApiClient`, MCP — would
+      // fail on a hub configured through the other surface.
+      value: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()])
+    });
+    MONITOR_TRIGGERS2 = ["idle", "user_message", "assistant_reply", "manual"];
+    monitorTriggerSchema2 = external_exports.enum(MONITOR_TRIGGERS2);
+    MONITOR_FIRING_TRIGGERS2 = MONITOR_TRIGGERS2.filter(isFiringTrigger2);
+    MONITOR_DELAY_SECONDS_MIN2 = 10;
+    MONITOR_IDLE_DELAY_REQUIRED_MESSAGE2 = "delay_seconds is required for an idle monitor (an absent trigger is idle)";
+    MONITOR_HISTORY_MESSAGES_MAX2 = 100;
+    monitorHistoryMessagesSchema2 = external_exports.number().int().min(1).max(MONITOR_HISTORY_MESSAGES_MAX2);
+    monitorIncludeToolResultsSchema2 = external_exports.boolean();
+    MONITOR_INPUT_SHAPING_KEYS2 = ["history_messages", "include_tool_results"];
+    MONITOR_INPUT_SHAPING_SCHEMAS2 = {
+      history_messages: monitorHistoryMessagesSchema2.optional(),
+      include_tool_results: monitorIncludeToolResultsSchema2.optional()
+    };
+    MONITOR_INPUT_SHAPING_IDLE_MESSAGE2 = "only a user_message, assistant_reply or manual monitor reads this \u2014 an idle monitor runs as a full turn and takes the ordinary history window";
+    monitorArgumentSourceSchema2 = external_exports.union([
+      external_exports.object({ from_variable: external_exports.string().min(1) }).strict(),
+      external_exports.object({ const: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()]) }).strict()
+    ]);
+    MONITOR_NOTE_TEMPLATE_MAX2 = 2e3;
+    monitorActionSchema2 = external_exports.discriminatedUnion("kind", [
+      external_exports.object({ kind: external_exports.literal("none") }).strict(),
+      external_exports.object({
+        kind: external_exports.literal("call_tool"),
+        tool_name: external_exports.string().min(1),
+        args: external_exports.record(monitorArgumentSourceSchema2).optional()
+      }).strict(),
+      external_exports.object({ kind: external_exports.literal("hold") }).strict(),
+      external_exports.object({ kind: external_exports.literal("rewrite"), note: external_exports.string().min(1).max(MONITOR_NOTE_TEMPLATE_MAX2) }).strict()
+    ]);
+    monitorRuleSchema2 = external_exports.object({
+      when: external_exports.array(flagConditionSchema2).min(1),
+      action: monitorActionSchema2
+    }).strict();
+    MONITOR_RULE_KEYS2 = ["rules", "fallback"];
+    MONITOR_RULE_SCHEMAS2 = {
+      rules: external_exports.array(monitorRuleSchema2).optional(),
+      fallback: monitorActionSchema2.optional()
+    };
+    MONITOR_RULE_TRIGGERS2 = ["user_message", "assistant_reply", "manual"];
+    MONITOR_RULE_TRIGGER_MESSAGE2 = "only a user_message, assistant_reply or manual monitor acts on rules \u2014 set one of those triggers, or remove this key. A manual monitor acts on its rules when another monitor runs it.";
+    MONITOR_USER_MESSAGE_ACTION_KINDS2 = ["none", "call_tool"];
+    MONITOR_ASSISTANT_REPLY_ACTION_KINDS2 = ["none", "call_tool", "hold", "rewrite"];
+    INSERT_NOTE_TOOL_NAME2 = "insert_note";
+    RUN_MONITOR_TOOL_NAME2 = "run_monitor";
+    MONITOR_RULE_ALLOWED_NATIVE_TOOLS2 = [
+      "update_state",
+      "schedule_followup",
+      "transfer_to_agent",
+      "transfer_to_team",
+      INSERT_NOTE_TOOL_NAME2,
+      RUN_MONITOR_TOOL_NAME2
+    ];
+    MONITOR_RULE_REENTRY_TOOLS2 = {
+      transfer_to_agent: "agent",
+      transfer_to_team: "team"
+    };
+    MONITOR_RULE_REENTRY_TRACKS2 = new Map(Object.entries(MONITOR_RULE_REENTRY_TOOLS2));
     monitorConfigField2 = external_exports.object({
-      delay_seconds: external_exports.number().int().min(10),
-      flag_conditions: external_exports.array(
-        external_exports.object({
-          variable: external_exports.string(),
-          operator: external_exports.enum(["=", "!="]),
-          value: external_exports.union([external_exports.string(), external_exports.number()])
-        })
-      ).optional()
-    }).passthrough().nullable().optional();
+      delay_seconds: external_exports.number().int().min(MONITOR_DELAY_SECONDS_MIN2).optional(),
+      trigger: monitorTriggerSchema2.optional(),
+      ...MONITOR_INPUT_SHAPING_SCHEMAS2,
+      ...MONITOR_RULE_SCHEMAS2,
+      flag_conditions: external_exports.array(flagConditionSchema2).optional()
+    }).passthrough().superRefine((config, ctx) => {
+      if (monitorConfigNeedsDelay2(config)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["delay_seconds"],
+          message: MONITOR_IDLE_DELAY_REQUIRED_MESSAGE2
+        });
+      }
+      for (const key of monitorInputShapingKeysOnIdle2(config)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: [key],
+          message: MONITOR_INPUT_SHAPING_IDLE_MESSAGE2
+        });
+      }
+      for (const issue of collectMonitorRuleIssues2(config)) {
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: issue.path, message: issue.message });
+      }
+    }).nullable().optional();
+    flagConditionsField2 = external_exports.array(flagConditionSchema2).nullable().optional();
     agentIdParam2 = external_exports.object({
       id: uuidSchema2
     });
@@ -11308,13 +14140,15 @@ var init_dist = __esm({
       additional_context_template: external_exports.string().max(2e4).optional(),
       summarization_threshold_tokens: summarizationThresholdField2,
       previous_conversations_count: previousConversationsCountField2,
-      monitor_config: monitorConfigField2
-    }).passthrough();
+      monitor_config: monitorConfigField2,
+      flag_conditions: flagConditionsField2
+    }).passthrough().superRefine(refineDecisionsModelBinding2);
     updateAgentBody2 = external_exports.object({
       additional_context_template: external_exports.string().max(2e4).optional(),
       summarization_threshold_tokens: summarizationThresholdField2,
       previous_conversations_count: previousConversationsCountField2,
-      monitor_config: monitorConfigField2
+      monitor_config: monitorConfigField2,
+      flag_conditions: flagConditionsField2
     }).passthrough();
     AGENT_PARAMETER_TYPES2 = ["string", "number", "boolean", "integer", "enum"];
     AGENT_PARAMETER_NAME_REGEX2 = /^[a-zA-Z_][a-zA-Z0-9_]{0,63}$/;
@@ -13301,11 +16135,11 @@ var init_dist = __esm({
       ops_tenths_this_month: external_exports.number().nonnegative(),
       records_count: external_exports.number().nonnegative(),
       month_key: external_exports.string(),
-      // The closed window's meter reading (§2.7's prior-window snapshot). OPTIONAL for the same
+      // The closed window's meter reading (the prior-window snapshot). OPTIONAL for the same
       // reason this object is not `.strict()`: the producer deploys on its own cadence, and a
       // required field would fail the parse for every counter on any producer build that predates
       // it — turning an additive wire change into an outage of the gauge above. Absence and a
-      // non-matching key are the SAME outcome for a reader (§2.7 property 1: do not bill), so
+      // non-matching key are the SAME outcome for a reader (do not bill), so
       // nothing is lost by tolerating it.
       prior_window_key: external_exports.string().optional(),
       prior_window_ops_tenths: external_exports.number().nonnegative().optional()
@@ -13317,41 +16151,41 @@ var init_dist = __esm({
        * Monotonic per org, WayAI-assigned. An ordering guard for concurrent WayAI
        * writers (a plan change racing a token mint) — NOT a cross-repo CAS. Gaps are
        * expected: a version is allocated per push attempt, and an idempotency skip
-       * (§2.4) burns none while a failed KV put burns one.
+       * burns none while a failed KV put burns one.
        */
       projection_version: external_exports.number().int().nonnegative(),
-      /** Diagnostic only — never gates. Freshness is `window_resets_at`'s job (§2.2). */
+      /** Diagnostic only — never gates. Freshness is `window_resets_at`'s job. */
       written_at: external_exports.string().datetime(),
       /** The WayAI org UUID. The `account_id` spelling is Rekor's documented carve-out. */
       account_id: external_exports.string().uuid(),
-      /** The EFFECTIVE plan, not the subscribed one (§2.2.1). Never gates. */
+      /** The EFFECTIVE plan, not the subscribed one. Never gates. */
       plan_key: planKeySchema2,
-      /** Informational only (§2.2.1). `cancelled` spelling matches `BillingRecord`. */
+      /** Informational only. `cancelled` spelling matches `BillingRecord`. */
       billing_status: billingStatusSchema2,
       /** Tenths, matching Rekor's meter granularity (write 10, point-read 1, list/SQL 10). */
       ops_tenths_included: external_exports.number().int().nonnegative(),
       max_records: external_exports.number().int().nonnegative(),
-      /** Its own field, no longer derived from `max_records` (§2.2). */
+      /** Its own field, no longer derived from `max_records`. */
       import_rows_included: external_exports.number().int().nonnegative(),
-      /** REQUIRED — absence is malformed, never coerced to `false` (§2.2.2). */
+      /** REQUIRED — absence is malformed, never coerced to `false`. */
       production_bases: external_exports.boolean(),
-      /** Opaque to Rekor; compared for equality only, to reset `usage:` counters (§2.3). */
+      /** Opaque to Rekor; compared for equality only, to reset `usage:` counters. */
       window_key: external_exports.string().min(1),
       /**
-       * The window's TRUE lower bound, for the reconcile's `operations_log` sum (§2.2).
+       * The window's TRUE lower bound, for the reconcile's `operations_log` sum.
        *
        * OPTIONAL, and that is not a rollout convenience — it is what "never gates" means
        * on the writer's side. The tier sources can be absent (a paid row carrying
        * `current_period_end` with no `current_period_start`) and inverted pairs are a
-       * §2.2 diagnostic, so requiring it here would let an inert field throw the strict
-       * parse and leave the org with NO projection — permanently stale under §2.3, with
-       * §2.5's fail-closed gates refusing base creation and 503-ing every import. The
+       * diagnostic, so requiring it here would let an inert field throw the strict
+       * parse and leave the org with NO projection — permanently stale, with the
+       * fail-closed gates refusing base creation and 503-ing every import. The
        * writer emits it whenever it has a sound value and omits it otherwise; Rekor's
        * observed-flip fallback covers the gap, and rollout step 3 keeps that fallback
        * for exactly this reason.
        */
       window_start: external_exports.string().datetime().optional(),
-      /** The sole staleness authority (§2.3). Never triggers a counter reset. */
+      /** The sole staleness authority. Never triggers a counter reset. */
       window_resets_at: external_exports.string().datetime()
     }).strict();
     rekorEntitlementRefreshMessageSchema2 = external_exports.object({
@@ -13591,6 +16425,9 @@ var init_dist = __esm({
       refineHubAsCodeEvalAttachments2(config, ctx);
       refineHubAsCodeResources2(config, ctx);
       refineHubAsCodeDelegation2(config, ctx);
+      refineHubAsCodeFlagConditions2(config, ctx);
+      refineHubAsCodeMonitorConfig2(config, ctx);
+      refineHubAsCodeDecisionsModel2(config, ctx);
     });
     ciPullHubIdParam2 = external_exports.object({
       hub_id: ciUuidSchema2
@@ -13818,7 +16655,7 @@ var init_dist = __esm({
        *
        * Past-or-now only. A future start freezes the org's window permanently:
        * `maybeRolloverBillingWindow` derives a NEGATIVE elapsed and so never archives the
-       * metrics nor restamps the column, while the §2.6 trigger-5 sweep selects only windows
+       * metrics nor restamps the column, while the rollover sweep selects only windows
        * that have already passed — so nothing rolls the org over, its consumed operations
        * never reset, and past quota every AI turn is refused until a human re-patches.
        */
@@ -13913,7 +16750,7 @@ var init_dist = __esm({
       seats_per_unit: external_exports.number().int().min(1, "seats_per_unit must be a positive integer").optional(),
       seats_scaling: external_exports.enum(["fixed", "per_quantity"]).optional(),
       is_active: external_exports.boolean().optional(),
-      // Rekor entitlement allowances (rekor-platform-contracts §2.2). Editable here for the
+      // Rekor entitlement allowances. Editable here for the
       // same reason `messages_per_unit` is — and this route is the only ROUTINE way to change an
       // allowance on a live plan: the seed establishes a plan row and never rewrites one, so a
       // seed-version bump no longer moves these values (see `seed.ts`).
@@ -14050,7 +16887,7 @@ var init_dist = __esm({
       cmd: external_exports.string().min(1, "cmd is required").max(SANDBOX_EXEC_MAX_CMD_LENGTH2, `cmd must be <= ${SANDBOX_EXEC_MAX_CMD_LENGTH2} chars`),
       /**
        * Egress posture. Omitted ⇒ the driver fails closed to deny-all outbound (the
-       * §4 safe default). The route re-validates the (policy, allowlist) pair via
+       * safe default). The route re-validates the (policy, allowlist) pair via
        * `validateEgressConfig`.
        */
       egress_policy: sandboxEgressPolicy2.optional(),
@@ -14549,7 +17386,7 @@ var init_dist = __esm({
       name: external_exports.string().regex(ADMIN_SKILL_NAME_REGEX2, "invalid skill name")
     });
     rekorBaseChangeMessageSchema2 = external_exports.object({
-      /** The WayAI org UUID — one id namespace (plan §2). */
+      /** The WayAI org UUID — one id namespace. */
       org_id: external_exports.string().uuid(),
       /**
        * Not a UUID: a preview base id is `{prod_base_id}--{slug}`. Immutable per base — a
@@ -14576,6 +17413,33 @@ var init_dist = __esm({
       /** Subdir of `wsDir` holding base folders. */
       basesSubdir: "bases"
     };
+    decisionAnswerSchema = external_exports.discriminatedUnion("type", [
+      external_exports.object({
+        type: external_exports.literal("choice"),
+        choice: external_exports.string(),
+        confidence: external_exports.number().optional()
+      }),
+      external_exports.object({
+        type: external_exports.literal("score"),
+        score: external_exports.number(),
+        confidence: external_exports.number().optional()
+      }),
+      external_exports.object({
+        type: external_exports.literal("noul"),
+        noul: external_exports.number()
+      })
+    ]);
+    decisionsResponseSchema = external_exports.object({
+      id: external_exports.string().optional(),
+      model: external_exports.string().optional(),
+      provider: external_exports.string().optional(),
+      answers: external_exports.record(decisionAnswerSchema),
+      usage: external_exports.object({
+        input_tokens: external_exports.number().optional(),
+        output_tokens: external_exports.number().optional(),
+        cost: external_exports.number().optional()
+      }).optional()
+    });
   }
 });
 
@@ -15775,7 +18639,7 @@ var init_registry = __esm({
         // The organization vault this word named is retired: nothing resolves a value stored
         // there any more, so the surviving surface is `bases credentials` below — per-base
         // rows, which is what a `credential:<name>` reference actually reads. The row stays
-        // (this table records how every original word was dispositioned, and §3.2's semantic
+        // (this table records how every original word was dispositioned, and the semantic
         // collision list is checked independently of it) with `shipped: false`, which
         // `registry.test.ts` enforces by asserting the invocation is NOT reachable.
         original: "secrets",
@@ -18452,11 +21316,9 @@ function writeIfAbsent(filePath, content) {
   fs13.writeFileSync(filePath, content, "utf-8");
   return path14.basename(filePath);
 }
-var CLAUDE_MD_SHIM;
 var init_workspace_files = __esm({
   "src/lib/workspace-files.ts"() {
     "use strict";
-    CLAUDE_MD_SHIM = "@AGENTS.md\n";
   }
 });
 
@@ -18523,12 +21385,11 @@ function writeHubFolder(hubFolder, payload, options = {}) {
   const yamlContent = yaml7.dump(yamlPayload, YAML_DUMP_OPTIONS);
   writeFileIfChanged(hubFolder, path15.join(hubFolder, "hub.yaml"), yamlContent, log);
   if (options.seedAgentContext ?? true) {
-    for (const seeded of [
-      writeIfAbsent(path15.join(hubFolder, "AGENTS.md"), perHubAgentsMd(path15.basename(hubFolder))),
-      writeIfAbsent(path15.join(hubFolder, "CLAUDE.md"), CLAUDE_MD_SHIM)
-    ]) {
-      if (seeded) log.changed.push(seeded);
-    }
+    const seeded = writeIfAbsent(
+      path15.join(hubFolder, "AGENTS.md"),
+      perHubAgentsMd(path15.basename(hubFolder))
+    );
+    if (seeded) log.changed.push(seeded);
   }
   const oldYamlPath = path15.join(hubFolder, "wayai.yaml");
   if (fs14.existsSync(oldYamlPath)) {
@@ -26948,8 +29809,7 @@ Sources:
                  is NULL). Each row is resolved to a real user and granted both halves of
                  access, or dropped when no account matches. A repaired row is a REAL grant
                  to a real person and sends no email, so read --dry-run output as the list of
-                 people about to get access. Idempotent. See
-                 docs/runbooks/legacy-org-grant-repair.md.
+                 people about to get access. Idempotent.
 
   sandbox        Run arbitrary code in a fresh E2B sandbox (harness-agents isolation surface).
                  \`exec\` provisions a sandbox from a named Sandbox connection, runs one
@@ -26963,7 +29823,7 @@ Sources:
                  turn aborts on its next invocation. \`mass-destroy\` reaps every harness
                  sandbox/token/slot that is live NOW (scope: --hub < --org < --all, prefer
                  the narrowest). Run \`mass-destroy --dry-run\` first to see the blast
-                 radius. See docs/runbooks/harness-incident-response.md.
+                 radius.
 
 Types (do): ${VALID_TYPES.join(" | ")}
 Tables (analytics): ${VALID_ANALYTICS_TABLES.join(" | ")}