lua-cli 3.32.2 → 3.32.4

package/dist/api-exports.js

@@ -353,6 +353,84 @@ function isDesktopFileCommandName(value3) {
 function isDesktopFileSessionId(value3) {
   return typeof value3 === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value3);
 }
+function isModelIdSentinel(input) {
+  const lower = (input ?? "").trim().toLowerCase();
+  return lower === "auto" || lower.startsWith("auto/");
+}
+function normalizeModelId(input, registry) {
+  const requested = typeof input === "string" ? input.trim() : "";
+  if (!requested) return {
+    ok: false,
+    reason: "empty",
+    requested,
+    candidates: []
+  };
+  const lower = requested.toLowerCase();
+  if (isModelIdSentinel(lower)) return {
+    ok: true,
+    id: lower,
+    form: "sentinel"
+  };
+  const slash = requested.indexOf("/");
+  const malformed = slash === 0;
+  const provider = slash > 0 ? lower.slice(0, slash) : void 0;
+  if (provider && MODEL_ID_BYOK_PROVIDERS.includes(provider)) {
+    return {
+      ok: true,
+      id: requested,
+      form: "byok"
+    };
+  }
+  const bareId = slash >= 0 ? lower.slice(slash + 1) : lower;
+  const lastSegment = bareId.slice(bareId.lastIndexOf("/") + 1);
+  const exact = /* @__PURE__ */ new Set();
+  const hints = /* @__PURE__ */ new Set();
+  for (const code of registry) {
+    if (typeof code !== "string" || !code) continue;
+    const codeLower = code.toLowerCase();
+    if (!malformed && codeLower === lower) return {
+      ok: true,
+      id: code,
+      form: provider ? "canonical" : "bare"
+    };
+    const i = codeLower.indexOf("/");
+    if (i < 0) continue;
+    const codeBare = codeLower.slice(i + 1);
+    if (bareId && codeBare === bareId) exact.add(code);
+    else if (lastSegment && codeBare.slice(codeBare.lastIndexOf("/") + 1) === lastSegment) hints.add(code);
+  }
+  const sorted = [
+    ...exact
+  ].sort();
+  if (!provider && !malformed && sorted.length === 1) return {
+    ok: true,
+    id: sorted[0],
+    form: "bare"
+  };
+  if (!provider && !malformed && sorted.length > 1) {
+    return {
+      ok: false,
+      reason: "ambiguous",
+      requested,
+      candidates: sorted
+    };
+  }
+  return {
+    ok: false,
+    reason: "unknown",
+    requested,
+    candidates: sorted.length ? sorted : [
+      ...hints
+    ].sort()
+  };
+}
+function modelUnresolvedMessage(r) {
+  if (r.reason === "empty") return "model pin is empty \u2014 pin an approved model (provider/model) or omit `model`";
+  if (r.reason === "ambiguous") {
+    return `model "${r.requested}" does not resolve to one approved model \u2014 it names ${r.candidates.length}; pin one of: ${r.candidates.join(", ")}`;
+  }
+  return r.candidates.length ? `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms: ${r.candidates.join(", ")}` : `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms are the registry's provider-prefixed ids (provider/model) or a bare id that names exactly one of them`;
+}
 function isImplicitModelSelectionSource(source) {
   return source !== void 0 && IMPLICIT_MODEL_SELECTION_SOURCES.includes(source);
 }
@@ -653,6 +731,48 @@ function scheduledTimeKey(scheduledTime) {
 function scheduledWorkflowRunIdForTime(jobId, scheduledTime) {
   return scheduledWorkflowRunId(jobId, scheduledTime);
 }
+function workflowRetryMaxAttemptsMessage(got) {
+  const tail = got === void 0 ? "" : ` (got ${JSON.stringify(got)})`;
+  return `\`retry.maxAttempts\` must be an integer ${WORKFLOW_RETRY_MIN_ATTEMPTS}..${WORKFLOW_RETRY_MAX_ATTEMPTS}${tail}`;
+}
+function isWithinWorkflowRetryAttempts(value3) {
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_RETRY_MIN_ATTEMPTS && value3 <= WORKFLOW_RETRY_MAX_ATTEMPTS;
+}
+function workflowRetryUnknownMembersMessage(keys) {
+  const named = keys.map((k) => {
+    const engine = WORKFLOW_RETRY_ENGINE_KEYS.includes(k);
+    return `\`${k}\`${engine ? " (engine-owned \u2014 stamped by resetAttempts, never authored)" : ""}`;
+  });
+  return `\`retry\` has no member ${named.join(", ")}; members: ${WORKFLOW_RETRY_POLICY_KEYS.join(", ")}`;
+}
+function unknownWorkflowRetryMembers(retry) {
+  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return [];
+  return Object.keys(retry).filter((k) => !WORKFLOW_RETRY_POLICY_KEYS.includes(k));
+}
+function authoredRetryPolicy(retry) {
+  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return void 0;
+  const src = retry;
+  const out = {};
+  for (const k of WORKFLOW_RETRY_POLICY_KEYS) if (src[k] !== void 0) out[k] = src[k];
+  return Object.keys(out).length ? out : void 0;
+}
+function retryBudgetBaseAttempt(row) {
+  const base = row.retry?.budgetBaseAttempt;
+  return typeof base === "number" && Number.isSafeInteger(base) && base > 0 ? base : 0;
+}
+function retryBudgetAttempt(row) {
+  return Math.max(0, row.attempt - retryBudgetBaseAttempt(row));
+}
+function retryBudgetMaxAttempts(row) {
+  const max = row.retry?.maxAttempts;
+  return typeof max === "number" && Number.isFinite(max) && max >= 1 ? max : 1;
+}
+function retryBudgetRemaining(row) {
+  return retryBudgetAttempt(row) < retryBudgetMaxAttempts(row);
+}
+function retriesRemaining(row) {
+  return Math.max(0, retryBudgetMaxAttempts(row) - retryBudgetAttempt(row));
+}
 function isWithinWorkflowJobRange(member, value3) {
   const { min, max } = WORKFLOW_JOB_RANGES[member];
   return typeof value3 === "number" && Number.isInteger(value3) && value3 >= min && value3 <= max;
@@ -840,7 +960,66 @@ ${PREAMBLE}
 
 ${items.join("\n\n")}`;
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE;
+function workflowApprovalDecisionOf(resumeData) {
+  if (resumeData.timedOut === true) return "timed_out";
+  return resumeData.approved === true ? "approved" : "denied";
+}
+function workflowApprovalOutput(resumeData) {
+  const decision = typeof resumeData.decision === "string" ? resumeData.decision : workflowApprovalDecisionOf(resumeData);
+  const note = typeof resumeData.note === "string" && resumeData.note.trim() !== "" ? resumeData.note : void 0;
+  const text = typeof resumeData.text === "string" ? resumeData.text : note ?? decision;
+  return {
+    ...resumeData,
+    decision,
+    text
+  };
+}
+function isWorkflowApprovalOutput(value3) {
+  if (typeof value3 !== "object" || value3 === null || Array.isArray(value3)) return false;
+  const v = value3;
+  return typeof v.approved === "boolean" && WORKFLOW_APPROVAL_OUTPUT_DECISIONS.includes(v.decision) && typeof v.text === "string";
+}
+function extractSingleJsonValue(text) {
+  const trimmed = (text ?? "").trim();
+  if (!trimmed) return {
+    reason: "reply is empty"
+  };
+  const fenced = [
+    ...trimmed.matchAll(JSON_FENCE_RE)
+  ];
+  if (fenced.length > 1) return {
+    reason: "reply carries more than one fenced block"
+  };
+  const candidate = fenced.length === 1 ? fenced[0][1].trim() : trimmed;
+  try {
+    return {
+      value: JSON.parse(candidate)
+    };
+  } catch {
+    if (fenced.length === 1) return {
+      reason: "fenced block is not valid JSON"
+    };
+  }
+  const opens = [
+    trimmed.indexOf("{"),
+    trimmed.indexOf("[")
+  ].filter((i) => i !== -1);
+  const start = opens.length ? Math.min(...opens) : -1;
+  const end = Math.max(trimmed.lastIndexOf("}"), trimmed.lastIndexOf("]"));
+  if (start === -1 || end <= start) return {
+    reason: "reply is not JSON"
+  };
+  try {
+    return {
+      value: JSON.parse(trimmed.slice(start, end + 1))
+    };
+  } catch {
+    return {
+      reason: "reply does not contain a single JSON value"
+    };
+  }
+}
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1157,6 +1336,16 @@ var init_dist = __esm({
     __name2(isDesktopFileCommandName, "isDesktopFileCommandName");
     __name(isDesktopFileSessionId, "isDesktopFileSessionId");
     __name2(isDesktopFileSessionId, "isDesktopFileSessionId");
+    MODEL_ID_BYOK_PROVIDERS = [
+      "azure",
+      "bedrock"
+    ];
+    __name(isModelIdSentinel, "isModelIdSentinel");
+    __name2(isModelIdSentinel, "isModelIdSentinel");
+    __name(normalizeModelId, "normalizeModelId");
+    __name2(normalizeModelId, "normalizeModelId");
+    __name(modelUnresolvedMessage, "modelUnresolvedMessage");
+    __name2(modelUnresolvedMessage, "modelUnresolvedMessage");
     REASONING_EFFORT_VALUES = [
       "off",
       "minimal",
@@ -1928,6 +2117,37 @@ This text is who you are for this person. As you learn them, their name, their w
       "fixed",
       "exponential"
     ];
+    WORKFLOW_RETRY_MIN_ATTEMPTS = 1;
+    WORKFLOW_RETRY_POLICY_KEYS = [
+      "maxAttempts",
+      "backoffSeconds",
+      "backoff",
+      "maxBackoffSeconds"
+    ];
+    WORKFLOW_RETRY_MAX_ATTEMPTS = 20;
+    __name(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
+    __name2(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
+    __name(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
+    __name2(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
+    WORKFLOW_RETRY_ENGINE_KEYS = [
+      "budgetBaseAttempt"
+    ];
+    __name(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
+    __name2(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
+    __name(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
+    __name2(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
+    __name(authoredRetryPolicy, "authoredRetryPolicy");
+    __name2(authoredRetryPolicy, "authoredRetryPolicy");
+    __name(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
+    __name2(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
+    __name(retryBudgetAttempt, "retryBudgetAttempt");
+    __name2(retryBudgetAttempt, "retryBudgetAttempt");
+    __name(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
+    __name2(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
+    __name(retryBudgetRemaining, "retryBudgetRemaining");
+    __name2(retryBudgetRemaining, "retryBudgetRemaining");
+    __name(retriesRemaining, "retriesRemaining");
+    __name2(retriesRemaining, "retriesRemaining");
     WORKFLOW_JOB_RESOURCES = [
       "small",
       "medium",
@@ -2200,6 +2420,8 @@ This text is who you are for this person. As you learn them, their name, their w
       "workflow.goal.resumed",
       "workflow.goal.done",
       "workflow.goal.closed",
+      // LUA-760: an ended goal's cadence Job retired (deleted) — inline on done / closed, by R21 / R28, or by sweep #30
+      "workflow.goal.job_retired",
       // --- org policy (02 §2.10 / 09 R23) ---
       "workflow.policy.retention_changed",
       "workflow.policy.pacing_changed",
@@ -2249,6 +2471,79 @@ listed here; never invent a target.`;
     __name2(reachingIt, "reachingIt");
     __name(renderTargetsBlock, "renderTargetsBlock");
     __name2(renderTargetsBlock, "renderTargetsBlock");
+    WORKFLOW_APPROVAL_OUTPUT_DECISIONS = [
+      "approved",
+      "denied",
+      "timed_out"
+    ];
+    WORKFLOW_APPROVAL_OUTPUT_SCHEMA = {
+      type: "object",
+      properties: {
+        approved: {
+          type: "boolean"
+        },
+        decision: {
+          type: "string",
+          enum: [
+            ...WORKFLOW_APPROVAL_OUTPUT_DECISIONS
+          ]
+        },
+        /** the approver's note when given, else the decision word — what `${stepResults.<id>.text}` reads */
+        text: {
+          type: "string"
+        },
+        note: {
+          type: "string"
+        },
+        editedPayload: {},
+        editRevision: {
+          type: "integer"
+        },
+        decidedBy: {
+          type: "object",
+          properties: {
+            id: {
+              type: "string"
+            },
+            kind: {
+              type: "string"
+            }
+          }
+        },
+        timedOut: {
+          type: "boolean"
+        },
+        escalations: {
+          type: "integer"
+        },
+        evidence: {
+          type: "array",
+          items: {
+            type: "string"
+          }
+        },
+        items: {
+          type: "array",
+          items: {
+            type: "object"
+          }
+        }
+      },
+      required: [
+        "approved",
+        "decision",
+        "text"
+      ]
+    };
+    __name(workflowApprovalDecisionOf, "workflowApprovalDecisionOf");
+    __name2(workflowApprovalDecisionOf, "workflowApprovalDecisionOf");
+    __name(workflowApprovalOutput, "workflowApprovalOutput");
+    __name2(workflowApprovalOutput, "workflowApprovalOutput");
+    __name(isWorkflowApprovalOutput, "isWorkflowApprovalOutput");
+    __name2(isWorkflowApprovalOutput, "isWorkflowApprovalOutput");
+    JSON_FENCE_RE = /```(?:json)?[ \t]*\r?\n([\s\S]*?)\r?\n?```/g;
+    __name(extractSingleJsonValue, "extractSingleJsonValue");
+    __name2(extractSingleJsonValue, "extractSingleJsonValue");
   }
 });
 
@@ -2257,139 +2552,466 @@ import { createHash } from "crypto";
 import { z as z4 } from "zod";
 import { z as z22 } from "zod";
 import { createHash as createHash2 } from "crypto";
-function workspaceTemplatePath(template22) {
-  const key = template22.trim();
-  const expr = WORKSPACE_TEMPLATE_EXPR_RE.exec(key);
-  if (expr) return expr[1].split(".");
-  if (key.includes("${")) return void 0;
-  return key.replace(/^(?:input|initData)\./, "").split(".");
+function isMapConfigObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
 }
-function retryBackoffs() {
-  if (!Array.isArray(WORKFLOW_RETRY_BACKOFFS)) {
-    throw new Error("@lua/shared-types.WORKFLOW_RETRY_BACKOFFS is not a tuple \u2014 a jest.mock('@lua/shared-types') must spread jest.requireActual('@lua/shared-types')");
+function parseMapConfig(raw, stepId) {
+  if (isMapConfigObject(raw)) return raw;
+  if (typeof raw !== "string") {
+    throw new Error(`Stored mapping step "${stepId}" has a mapConfig that is neither a JSON string nor an object.`);
+  }
+  try {
+    return JSON.parse(raw);
+  } catch (e) {
+    throw new Error(`Stored mapping step "${stepId}" has invalid JSON mapConfig: ${e.message}`);
   }
-  return WORKFLOW_RETRY_BACKOFFS;
 }
-function sleepUntilUnsupportedMessage(id) {
-  return `the engine does not execute \`sleepUntil\` yet (node "${id}") \u2014 replace it with a \`sleep\` node with a \`duration\` in ms, e.g. { type: 'sleep', id: '${id}', duration: ${SLEEP_UNTIL_REPLACEMENT.duration} }`;
+function mapConfigWire(raw) {
+  if (typeof raw === "string") return raw;
+  if (isMapConfigObject(raw)) return canonicalJson(raw);
+  return void 0;
 }
-function fillPolicy(node, defaultTimeout) {
-  if (node.tier === void 0 && node.workspace !== void 0 && node.workspace !== "inherit") node.tier = "job";
-  if (node.timeoutSeconds === void 0) node.timeoutSeconds = node.tier === "job" ? WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS : defaultTimeout;
-  if (node.retry === void 0) node.retry = {
-    maxAttempts: 1
-  };
-  if (node.onError === void 0) node.onError = "fail";
-  if ((node.type === "step" || node.type === "tool") && node.sideEffects === void 0) node.sideEffects = "none";
+function describeBadPlaceholder(template22, idx, rawExpr) {
+  return `Template placeholder #${idx} (\${${rawExpr}}) in '${template22}'`;
 }
-function fillSingle(node) {
-  switch (node.type) {
-    case "step": {
-      fillPolicy(node, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS);
-      const s = node;
-      if (s.resumeTimeoutHours === void 0) s.resumeTimeoutHours = WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS;
-      if (s.onSuspendTimeout === void 0) s.onSuspendTimeout = "fail";
-      return;
-    }
-    case "agent":
-      fillPolicy(node, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS);
-      return;
-    case "tool":
-      fillPolicy(node, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS);
-      return;
-    case "workflow":
-      if (node.workflowId === WORKFLOW_ARM_SUBRUN_ID && Array.isArray(node.graph) && node.graph[1]) fillSingle(node.graph[1]);
-      return;
-  }
+function parseTemplatePlaceholder(rawExpr) {
+  const dot = rawExpr.indexOf(".");
+  return {
+    scope: dot === -1 ? rawExpr : rawExpr.slice(0, dot),
+    rest: dot === -1 ? "" : rawExpr.slice(dot + 1)
+  };
 }
-function fillHitl(node) {
-  if (node.type === "approval") {
-    const a = node;
-    if (a.approver === void 0) a.approver = "creator";
-    if (a.timeoutHours === void 0) a.timeoutHours = WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS;
-    if (a.onTimeout === void 0) a.onTimeout = "deny";
-    if (a.onDeny === void 0) a.onDeny = "continue";
-    if (a.excludeInitiator === void 0) a.excludeInitiator = false;
-    if (a.editable === void 0) a.editable = false;
-    return;
+function traverseMappingPath(root, path3, errorLabel) {
+  if (path3 === "" || path3 === ".") return root;
+  const parts = path3.split(".");
+  let value22 = root;
+  for (const part of parts) {
+    if (typeof value22 === "object" && value22 !== null) value22 = value22[part];
+    else throw new WorkflowTemplateError(`Invalid path ${path3} in ${errorLabel}`, path3);
   }
-  const w = node;
-  if (w.timeoutHours === void 0) w.timeoutHours = WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS;
-  if (w.onTimeout === void 0) w.onTimeout = "fail";
-  if (w.acceptedSources === void 0) w.acceptedSources = [
-    ...WORKFLOW_SIGNAL_DEFAULT_SOURCES
-  ];
-}
-function fillArm(arm) {
-  if (arm.type === "mapping") return;
-  if (isHitlNode(arm)) fillHitl(arm);
-  else fillSingle(arm);
+  return value22;
 }
-function fillEntry(entry) {
-  switch (entry.type) {
-    case "step":
-    case "agent":
-    case "tool":
-    case "workflow":
-      fillSingle(entry);
-      return;
-    case "parallel":
-      entry.steps.forEach(fillArm);
-      return;
-    case "conditional": {
-      const c = entry;
-      if (c.exclusive === void 0) c.exclusive = false;
-      c.steps.forEach(fillArm);
-      if (c.otherwise) fillArm(c.otherwise);
-      return;
-    }
-    case "foreach": {
-      const f = entry;
-      f.opts = f.opts ?? {};
-      if (f.opts.concurrency === void 0) f.opts.concurrency = WORKFLOW_FOREACH_DEFAULT_CONCURRENCY;
-      if (f.opts.maxItems === void 0) f.opts.maxItems = WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS;
-      fillArm(f.step);
-      return;
-    }
-    case "loop": {
-      const l = entry;
-      if (l.maxIterations === void 0) l.maxIterations = WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS;
-      fillArm(l.step);
-      return;
+function stringifyTemplateValue(v, template22, idx, rawExpr) {
+  if (v === null || v === void 0) return "";
+  if (typeof v === "object") {
+    try {
+      return JSON.stringify(v);
+    } catch (err) {
+      throw new WorkflowTemplateError(`${describeBadPlaceholder(template22, idx, rawExpr)} resolved to a value that could not be JSON-stringified (${err.message}).`, rawExpr);
     }
-    case "approval":
-    case "waitForSignal":
-      fillHitl(entry);
-      return;
-    case "mapping":
-    case "sleep":
-    case "sleepUntil":
-      return;
   }
+  return String(v);
 }
-function withDefaultsFilled(g) {
-  const out = clone(g);
-  out.definition.graph.forEach(fillEntry);
-  return out;
-}
-function isConnectionKeyShaped(value22) {
-  return WORKFLOW_CONNECTION_KEY_RE.test(value22) && !CONNECTION_ID_HEX_RE.test(value22);
-}
-function connectionKeyUndeclaredMessage(path3, key) {
-  return `${path3} '${key}' is neither a connection id nor a declared connections[].key \u2014 declare it: connections: [{ key: '${key}', integrationType: '<catalog slug, e.g. github>' }] and it resolves on any agent`;
+function escapeFence(content) {
+  return content.replace(/<\/lua-data/g, "<\\/lua-data");
 }
-function classifyModelProvider(model) {
-  const m = (model ?? "").trim().toLowerCase();
-  if (!m) return null;
-  if (/^(anthropic\/|claude)/.test(m)) return "anthropic";
-  if (/^(openai\/|gpt-|o[1-9](-|$)|chatgpt)/.test(m)) return "openai";
-  if (/^(google\/|gemini)/.test(m)) return "google";
-  return null;
+function fenceBlock(name, source, content) {
+  return `<lua-data name="${name}" source="${source}" untrusted="true">${escapeFence(content)}</lua-data>`;
 }
-function schemaAtPath(schema, path3) {
-  let cur = schema;
-  if (!cur || typeof cur !== "object") return void 0;
-  for (const seg of path3.split(".").filter(Boolean)) {
+function renderTemplate(template22, ctx, opts) {
+  let idx = 0;
+  return template22.replace(TEMPLATE_PLACEHOLDER, (_match, rawExpr) => {
+    idx += 1;
+    const { scope, rest } = parseTemplatePlaceholder(rawExpr);
+    const label = describeBadPlaceholder(template22, idx, rawExpr);
+    let rendered;
+    let source;
+    switch (scope) {
+      case "initData":
+        rendered = stringifyTemplateValue(traverseMappingPath(ctx.initData, rest, label), template22, idx, rawExpr);
+        source = "initData";
+        break;
+      case "state":
+        rendered = stringifyTemplateValue(traverseMappingPath(ctx.state, rest, label), template22, idx, rawExpr);
+        source = "state";
+        break;
+      case "requestContext":
+        rendered = stringifyTemplateValue(traverseMappingPath(ctx.requestContext, rest, label), template22, idx, rawExpr);
+        source = "requestContext";
+        break;
+      case "stepResults": {
+        const innerDot = rest.indexOf(".");
+        const stepId = innerDot === -1 ? rest : rest.slice(0, innerDot);
+        const subPath = innerDot === -1 ? "" : rest.slice(innerDot + 1);
+        if (!stepId) throw new WorkflowTemplateError(`${label} must name a step: \${stepResults.<stepId>.<path>}.`, rawExpr);
+        if (!(stepId in ctx.stepResults) || ctx.stepResults[stepId] == null) {
+          throw new WorkflowTemplateError(`${label} references stepResults.${stepId} but step "${stepId}" has no resolvable output (not an ancestor, not run, failed, or produced no output).`, rawExpr);
+        }
+        rendered = stringifyTemplateValue(traverseMappingPath(ctx.stepResults[stepId], subPath, label), template22, idx, rawExpr);
+        source = `step:${stepId}`;
+        break;
+      }
+      default:
+        throw new WorkflowTemplateError(`${label} references unknown namespace "${scope}". Use one of: ${TEMPLATE_NAMESPACES.join(", ")}.`, rawExpr);
+    }
+    return opts.fenced ? fenceBlock(rawExpr, source, rendered) : rendered;
+  });
+}
+function isMapDescriptor(v) {
+  if (v === null || typeof v !== "object" || Array.isArray(v)) return false;
+  const d = v;
+  const keys = Object.keys(d);
+  const only = /* @__PURE__ */ __name3((...allowed) => keys.every((k) => allowed.includes(k)), "only");
+  if ("value" in d) return keys.length === 1;
+  if ("template" in d) return keys.length === 1 && typeof d.template === "string";
+  if ("requestContextPath" in d) return keys.length === 1 && typeof d.requestContextPath === "string";
+  if ("knowledge" in d) return keys.length === 1 && typeof d.knowledge === "object" && d.knowledge !== null;
+  if ("initData" in d) return d.initData === true && typeof d.path === "string" && only("initData", "path");
+  if ("step" in d) {
+    const stepOk = typeof d.step === "string" || Array.isArray(d.step) && d.step.every((x) => typeof x === "string");
+    return stepOk && typeof d.path === "string" && only("step", "path", "rows");
+  }
+  return false;
+}
+function malformedMapMembers(cfg) {
+  if (!cfg || typeof cfg !== "object" || Array.isArray(cfg)) return [];
+  const out = [];
+  for (const [member, v] of Object.entries(cfg)) {
+    if (!v || typeof v !== "object" || Array.isArray(v) || isMapDescriptor(v)) continue;
+    const keys = Object.keys(v).filter((k) => MAP_DESCRIPTOR_KEYS.includes(k));
+    if (keys.length > 0) out.push({
+      member,
+      keys
+    });
+  }
+  return out;
+}
+function mapMemberMalformedMessage(id, m) {
+  const keys = m.keys.map((k) => `\`${k}\``).join(", ");
+  return `"${id}".${m.member} carries descriptor key${m.keys.length === 1 ? "" : "s"} ${keys} but is not an exact binding form ({initData:true, path} | {step, path[, rows]} | {value} | {template} | {requestContextPath} | {knowledge}) \u2014 it is passed to the step verbatim as a literal; fix the descriptor, or wrap it in {value: \u2026} if the literal is intended`;
+}
+function resolveDescriptor(key, m, ctx) {
+  if (!isMapDescriptor(m)) return {
+    value: m
+  };
+  try {
+    if ("value" in m) return {
+      value: m.value
+    };
+    if ("template" in m && typeof m.template === "string") {
+      return {
+        value: renderTemplate(m.template, ctx, {
+          fenced: false
+        })
+      };
+    }
+    if ("knowledge" in m || "rows" in m && m.rows !== void 0) {
+      return {
+        error: "binding_unresolved",
+        key
+      };
+    }
+    if ("requestContextPath" in m) {
+      const label = `requestContext path for key "${key}"`;
+      return {
+        value: traverseMappingPath(ctx.requestContext, m.requestContextPath, label)
+      };
+    }
+    if ("path" in m) {
+      const source = "initData" in m && m.initData ? "initData" : "step";
+      if (source === "initData") {
+        return {
+          value: traverseMappingPath(ctx.initData, m.path, `initData for key "${key}"`)
+        };
+      }
+      const stepRef = m.step;
+      const candidates = Array.isArray(stepRef) ? stepRef : [
+        stepRef
+      ];
+      const stepId = candidates.find((s) => ctx.stepResults[s] !== void 0 && ctx.stepResults[s] !== null);
+      if (stepId === void 0) return {
+        error: "binding_unresolved",
+        key
+      };
+      return {
+        value: traverseMappingPath(ctx.stepResults[stepId], m.path, `step ${candidates.join("|")} for key "${key}"`)
+      };
+    }
+    return {
+      error: "binding_unresolved",
+      key
+    };
+  } catch (err) {
+    if (err instanceof WorkflowTemplateError) return {
+      error: "binding_unresolved",
+      key
+    };
+    throw err;
+  }
+}
+function resolveMapping(cfg, ctx) {
+  const keys = Object.keys(cfg);
+  if (keys.length === 1 && keys[0] === "") {
+    return resolveDescriptor("", cfg[""], ctx);
+  }
+  const result = {};
+  for (const key of keys) {
+    const resolved = resolveDescriptor(key, cfg[key], ctx);
+    if ("error" in resolved) return resolved;
+    result[key] = resolved.value;
+  }
+  return {
+    value: result
+  };
+}
+function describeApproverSpecRefusal(spec) {
+  const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
+  const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
+  const users = typeof spec === "object" && spec !== null ? spec.users : void 0;
+  const approver = typeof users === "string" && USER_ID_SHAPED_RE.test(users) ? {
+    users: [
+      users
+    ]
+  } : "creator";
+  const message = `approver ${written} is not an approver \u2014 legal: ${APPROVER_SPEC_SHAPES.join(" | ")}. 'creator' is the person who started the run: write approver:'creator' for "ask me" / "I approve"; {users:[\u2026]} takes user ids, never emails, names or {type:'user'}` + (approver === "creator" ? "" : `; here: approver:${JSON.stringify(approver)}`);
+  return {
+    approver,
+    written,
+    message
+  };
+}
+function bindingRootsOk(template22) {
+  const refs = [
+    ...template22.matchAll(/\$\{\s*([A-Za-z_$][\w$]*)/g)
+  ].map((m) => m[1]);
+  return refs.length > 0 && refs.every((r) => BINDING_ROOTS.includes(r));
+}
+function isTemplateBinding(v) {
+  return typeof v === "object" && v !== null && typeof v.template === "string";
+}
+function approvalEditable(node) {
+  if (node.editable === true) return true;
+  if (node.editable === false) return false;
+  return Array.isArray(node.editablePaths) && node.editablePaths.length > 0;
+}
+function validateApproverBlock(node, opts = {
+  path: "approval"
+}) {
+  const issues = [];
+  const push = /* @__PURE__ */ __name3((code, path3, message, severity = "error") => issues.push({
+    code,
+    path: path3,
+    severity,
+    message
+  }), "push");
+  const checkSpec = /* @__PURE__ */ __name3((spec, path3) => {
+    const r = ApproverSpecSchema.safeParse(spec);
+    if (!r.success) {
+      const users = spec?.users;
+      if (Array.isArray(users) && users.length > APPROVER_SPEC_MAX_USERS) push("cap-exceeded", path3, `at most ${APPROVER_SPEC_MAX_USERS} users`);
+      else {
+        const refusal = describeApproverSpecRefusal(spec);
+        issues.push({
+          code: "approver-invalid",
+          path: path3,
+          severity: "error",
+          message: refusal.message,
+          repair: {
+            approver: refusal.approver,
+            written: refusal.written
+          }
+        });
+      }
+      return;
+    }
+    const s = r.data;
+    if (typeof s === "object") {
+      if ("governance" in s && !opts.governanceEnabled) push("approver-governance-unavailable", path3, "governance reviewer routing is not enabled for this deployment");
+      if ("group" in s && typeof s.group === "string" && !opts.scimEnabled && opts.idpGroups?.includes(s.group)) push("approver-idp-group-unavailable", path3, "IdP-group approvers are not enabled for this deployment");
+      const binding = "users" in s ? s.users : "role" in s ? s.role : "group" in s ? s.group : void 0;
+      if (isTemplateBinding(binding)) {
+        if (!bindingRootsOk(binding.template)) push("approver-binding-invalid", `${path3}.template`, "binding root must be initData / stepResults / requestContext / state");
+        if ("users" in s && opts.customerReachable) push("approver-binding-customer-reachable", `${path3}.users`, "a customer-reachable workflow may not bind its approver list");
+      }
+    }
+  }, "checkSpec");
+  if (node.approver !== void 0) checkSpec(node.approver, `${opts.path}.approver`);
+  if (node.fourEyes !== void 0) {
+    const r = FourEyesSchema.safeParse(node.fourEyes);
+    if (!r.success) push("approver-invalid", `${opts.path}.fourEyes`, "fourEyes needs { edit, approve } approver specs");
+    else {
+      checkSpec(r.data.edit, `${opts.path}.fourEyes.edit`);
+      checkSpec(r.data.approve, `${opts.path}.fourEyes.approve`);
+    }
+    if (!approvalEditable(node)) push("four-eyes-requires-editable", `${opts.path}.fourEyes`, "fourEyes requires editable:true");
+    if (node.approver !== void 0) push("four-eyes-overrides-approver", `${opts.path}.approver`, "fourEyes replaces approver", "warning");
+    if (node.itemsPath) push("four-eyes-items-unsupported", `${opts.path}.fourEyes`, "fourEyes cannot combine with itemsPath");
+  }
+  if (node.excludeInitiator && (node.approver === void 0 || node.approver === "creator") && !node.fourEyes) push("approver-excludes-only-candidate", `${opts.path}.excludeInitiator`, "'creator' with excludeInitiator leaves no approver");
+  if (Array.isArray(node.onTimeout)) {
+    const chain = node.onTimeout;
+    const hops = chain.filter((m) => typeof m === "object" && m !== null && "escalateTo" in m);
+    if (hops.length > ESCALATION_MAX_HOPS) push("escalation-chain-too-long", `${opts.path}.onTimeout`, `at most ${ESCALATION_MAX_HOPS} hops`);
+    const last = chain[chain.length - 1];
+    if (typeof last === "object" && last !== null) push("escalation-chain-not-terminal", `${opts.path}.onTimeout`, "a chain must end in deny | cancel-run | fail");
+    hops.forEach((h, i) => checkSpec(h.escalateTo, `${opts.path}.onTimeout[${i}].escalateTo`));
+  } else if (typeof node.onTimeout === "object" && node.onTimeout !== null) {
+    checkSpec(node.onTimeout.escalateTo, `${opts.path}.onTimeout.escalateTo`);
+  }
+  return issues;
+}
+function liftRenderedApprover(row, rendered) {
+  const text = (rendered ?? "").trim();
+  if (!text) return null;
+  if (row === "users") {
+    let members = null;
+    if (text.startsWith("[")) {
+      try {
+        members = JSON.parse(text);
+      } catch {
+        return null;
+      }
+    } else members = text.split(",").map((s) => s.trim());
+    if (!Array.isArray(members) || members.length === 0 || members.length > APPROVER_SPEC_MAX_USERS) return null;
+    if (!members.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128)) return null;
+    return {
+      users: [
+        ...new Set(members)
+      ].sort()
+    };
+  }
+  if (text.length > 128 || text.startsWith("[") || text.startsWith("{")) return null;
+  return row === "role" ? {
+    role: text
+  } : {
+    group: text
+  };
+}
+function workspaceTemplatePath(template22) {
+  const key = template22.trim();
+  const expr = WORKSPACE_TEMPLATE_EXPR_RE.exec(key);
+  if (expr) return expr[1].split(".");
+  if (key.includes("${")) return void 0;
+  return key.replace(/^(?:input|initData)\./, "").split(".");
+}
+function retryBackoffs() {
+  if (!Array.isArray(WORKFLOW_RETRY_BACKOFFS)) {
+    throw new Error("@lua/shared-types.WORKFLOW_RETRY_BACKOFFS is not a tuple \u2014 a jest.mock('@lua/shared-types') must spread jest.requireActual('@lua/shared-types')");
+  }
+  return WORKFLOW_RETRY_BACKOFFS;
+}
+function sleepUntilUnsupportedMessage(id) {
+  return `the engine does not execute \`sleepUntil\` yet (node "${id}") \u2014 replace it with a \`sleep\` node with a \`duration\` in ms, e.g. { type: 'sleep', id: '${id}', duration: ${SLEEP_UNTIL_REPLACEMENT.duration} }`;
+}
+function armSubrunUnsupportedMessage(id, workflowId) {
+  return `the engine does not execute the implicit \`${workflowId}\` arm subrun (node "${id}") \u2014 a [map, step] container arm is the step itself with the map as its \`input\` since lua-cli 3.32.4; re-run \`lua compile\` with the current CLI (a hand-written artifact: put the map on the arm node's \`input\` and drop the \`workflow\` wrapper)`;
+}
+function fillPolicy(node, defaultTimeout) {
+  if (node.tier === void 0 && node.workspace !== void 0 && node.workspace !== "inherit") node.tier = "job";
+  if (node.timeoutSeconds === void 0) node.timeoutSeconds = node.tier === "job" ? WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS : defaultTimeout;
+  if (node.retry === void 0) node.retry = {
+    maxAttempts: 1
+  };
+  if (node.onError === void 0) node.onError = "fail";
+  if ((node.type === "step" || node.type === "tool") && node.sideEffects === void 0) node.sideEffects = "none";
+}
+function fillSingle(node) {
+  switch (node.type) {
+    case "step": {
+      fillPolicy(node, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS);
+      const s = node;
+      if (s.resumeTimeoutHours === void 0) s.resumeTimeoutHours = WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS;
+      if (s.onSuspendTimeout === void 0) s.onSuspendTimeout = "fail";
+      return;
+    }
+    case "agent":
+      fillPolicy(node, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS);
+      return;
+    case "tool":
+      fillPolicy(node, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS);
+      return;
+    case "workflow":
+      return;
+  }
+}
+function fillHitl(node) {
+  if (node.type === "approval") {
+    const a = node;
+    if (a.approver === void 0) a.approver = "creator";
+    if (a.timeoutHours === void 0) a.timeoutHours = WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS;
+    if (a.onTimeout === void 0) a.onTimeout = "deny";
+    if (a.onDeny === void 0) a.onDeny = "continue";
+    if (a.excludeInitiator === void 0) a.excludeInitiator = false;
+    if (a.editable === void 0) a.editable = false;
+    return;
+  }
+  const w = node;
+  if (w.timeoutHours === void 0) w.timeoutHours = WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS;
+  if (w.onTimeout === void 0) w.onTimeout = "fail";
+  if (w.acceptedSources === void 0) w.acceptedSources = [
+    ...WORKFLOW_SIGNAL_DEFAULT_SOURCES
+  ];
+}
+function fillArm(arm) {
+  if (arm.type === "mapping") return;
+  if (isHitlNode(arm)) fillHitl(arm);
+  else fillSingle(arm);
+}
+function fillEntry(entry) {
+  switch (entry.type) {
+    case "step":
+    case "agent":
+    case "tool":
+    case "workflow":
+      fillSingle(entry);
+      return;
+    case "parallel":
+      entry.steps.forEach(fillArm);
+      return;
+    case "conditional": {
+      const c = entry;
+      if (c.exclusive === void 0) c.exclusive = false;
+      c.steps.forEach(fillArm);
+      if (c.otherwise) fillArm(c.otherwise);
+      return;
+    }
+    case "foreach": {
+      const f = entry;
+      f.opts = f.opts ?? {};
+      if (f.opts.concurrency === void 0) f.opts.concurrency = WORKFLOW_FOREACH_DEFAULT_CONCURRENCY;
+      if (f.opts.maxItems === void 0) f.opts.maxItems = WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS;
+      fillArm(f.step);
+      return;
+    }
+    case "loop": {
+      const l = entry;
+      if (l.maxIterations === void 0) l.maxIterations = WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS;
+      fillArm(l.step);
+      return;
+    }
+    case "approval":
+    case "waitForSignal":
+      fillHitl(entry);
+      return;
+    case "mapping":
+    case "sleep":
+    case "sleepUntil":
+      return;
+  }
+}
+function withDefaultsFilled(g) {
+  const out = clone(g);
+  out.definition.graph.forEach(fillEntry);
+  return out;
+}
+function isConnectionKeyShaped(value22) {
+  return WORKFLOW_CONNECTION_KEY_RE.test(value22) && !CONNECTION_ID_HEX_RE.test(value22);
+}
+function connectionKeyUndeclaredMessage(path3, key) {
+  return `${path3} '${key}' is neither a connection id nor a declared connections[].key \u2014 declare it: connections: [{ key: '${key}', integrationType: '<catalog slug, e.g. github>' }] and it resolves on any agent`;
+}
+function classifyModelProvider(model) {
+  const m = (model ?? "").trim().toLowerCase();
+  if (!m) return null;
+  if (/^(anthropic\/|claude)/.test(m)) return "anthropic";
+  if (/^(openai\/|gpt-|o[1-9](-|$)|chatgpt)/.test(m)) return "openai";
+  if (/^(google\/|gemini)/.test(m)) return "google";
+  return null;
+}
+function schemaAtPath(schema, path3) {
+  let cur = schema;
+  if (!cur || typeof cur !== "object") return void 0;
+  for (const seg of path3.split(".").filter(Boolean)) {
     const props = cur.properties;
     const next = props?.[seg];
     if (!next || typeof next !== "object") return void 0;
@@ -2417,12 +3039,11 @@ function mapConfigStepRefs(raw) {
   if (!cfg) return [];
   const ids = [];
   for (const d of Object.values(cfg)) {
-    if (!d || typeof d !== "object") continue;
-    const desc = d;
-    if (desc.step !== void 0) ids.push(...Array.isArray(desc.step) ? desc.step : [
-      desc.step
+    if (!isMapDescriptor(d)) continue;
+    if ("step" in d) ids.push(...Array.isArray(d.step) ? d.step : [
+      d.step
     ]);
-    if (typeof desc.template === "string") ids.push(...templateStepRefs(desc.template));
+    if ("template" in d) ids.push(...templateStepRefs(d.template));
   }
   return ids;
 }
@@ -2431,8 +3052,14 @@ function nodeStepRefs(entry) {
     case "agent": {
       const a = entry;
       const p = a.promptTemplate;
-      return typeof p === "string" ? templateStepRefs(p) : p && "template" in p ? templateStepRefs(p.template) : [];
+      const prompt = typeof p === "string" ? templateStepRefs(p) : p && "template" in p ? templateStepRefs(p.template) : [];
+      return [
+        ...prompt,
+        ...mapConfigStepRefs(a.input)
+      ];
     }
+    case "step":
+      return mapConfigStepRefs(entry.input);
     case "tool":
       return mapConfigStepRefs(entry.input);
     case "workflow":
@@ -2547,6 +3174,12 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     const r = node.retry;
     if (!r) return;
     const id = singleId(node);
+    const unknown = unknownWorkflowRetryMembers(r);
+    if (unknown.length) err("invalid-envelope", workflowRetryUnknownMembersMessage(unknown), `${path3}.retry`, id);
+    if (r.maxAttempts !== void 0 && !isWithinWorkflowRetryAttempts(r.maxAttempts)) {
+      const over = typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS;
+      err(over ? "cap-exceeded" : "invalid-envelope", workflowRetryMaxAttemptsMessage(r.maxAttempts), `${path3}.retry.maxAttempts`, id);
+    }
     const backoffs = retryBackoffs();
     if (r.backoff !== void 0 && !backoffs.includes(r.backoff)) {
       const list = backoffs.map((b) => `'${b}'`).join(" | ");
@@ -2643,6 +3276,21 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("job-tier-provider-unsupported", `model provider '${provider}' is outside LUA_WF_JOB_PROVIDERS [${opts.policy.jobProviders.join(", ")}]`, `${path3}.model`, id);
     }
   }, "checkTier");
+  const checkModel = /* @__PURE__ */ __name3((node, path3) => {
+    if (node.type !== "agent" || typeof node.model !== "string") return;
+    const registry = opts.approvedModels;
+    if (registry === void 0) return;
+    const id = singleId(node);
+    if (registry === "unavailable") {
+      const pin = node.model.trim();
+      if (pin && !normalizeModelId(pin, []).ok) {
+        warn("model-unresolved", `model "${pin}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`, `${path3}.model`, id);
+      }
+      return;
+    }
+    const resolved = normalizeModelId(node.model, registry);
+    if (!resolved.ok) err("model-unresolved", modelUnresolvedMessage(resolved), `${path3}.model`, id);
+  }, "checkModel");
   const checkWorkspace = /* @__PURE__ */ __name3((node, path3) => {
     const id = singleId(node);
     const ws = workspaceOf(node);
@@ -2689,35 +3337,43 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     const schema = node.type === "step" ? node.step.outputSchema : node.type === "agent" ? node.outputSchema : void 0;
     if (schema !== void 0) outputSchemas.set(singleId(node), schema);
   }, "recordOutputSchema");
+  const checkMapMembers = /* @__PURE__ */ __name3((cfg, basePath, id) => {
+    for (const m of malformedMapMembers(cfg)) {
+      warn(MAP_MEMBER_MALFORMED_CODE, mapMemberMalformedMessage(id, m), `${basePath}.${m.member}`, id);
+    }
+  }, "checkMapMembers");
+  const checkInputShape = /* @__PURE__ */ __name3((node, path3) => {
+    const input = node.input;
+    if (input === void 0) return;
+    const id = singleId(node);
+    if (input !== null && typeof input === "object" && !Array.isArray(input)) {
+      checkMapMembers(input, `${path3}.input`, id);
+      return;
+    }
+    err("invalid-envelope", `\`input\` must be an object map \u2014 each member a binding descriptor ({initData:true, path} | {step, path} | {value} | {template} | {requestContextPath}) or a JSON literal (got ${JSON.stringify(input)})`, `${path3}.input`, id);
+  }, "checkInputShape");
+  const checkBodyInput = /* @__PURE__ */ __name3((body, path3, container) => {
+    if (body.type === "workflow" || body.input === void 0) return;
+    err("arm-input-unsupported", container === "foreach" ? `a foreach body receives each item as its input \u2014 drop \`input\` on "${singleId(body)}" and map the items before the foreach instead` : `a loop body receives the previous output as its input \u2014 drop \`input\` on "${singleId(body)}" and put the map before the loop instead`, `${path3}.input`, singleId(body));
+  }, "checkBodyInput");
   const checkSingle = /* @__PURE__ */ __name3((node, path3, depth) => {
     recordOutputSchema(node);
-    if (node.type === "workflow" && node.workflowId === WORKFLOW_ARM_SUBRUN_ID) {
+    if (node.type === "workflow" && (typeof node.workflowId !== "string" || node.workflowId.length === 0)) {
       checkId(node.id, path3);
-      const body = node.graph;
-      if (!Array.isArray(body) || body.length !== 2 || body[0]?.type !== "mapping" || !body[1]) {
-        err("container-arm-empty", "an implicit arm subrun needs a [mapping, step] body", `${path3}.graph`, node.id);
-        return;
-      }
-      if (body[1].type === "mapping") {
-        err("container-arm-empty", "a bare mapping arm has nothing to run", `${path3}.graph.1`, node.id);
-        return;
-      }
-      const inner = body[1];
-      if (isHitlNode(inner)) {
-        err("node-type-unsupported-in-container", workflowHitlArmShapeMessage(inner.type, inner.id, "mapped-arm"), `${path3}.graph.1`, inner.id);
-        return;
-      }
-      upstream.add(singleId(body[1]));
-      checkArm(body[0], `${path3}.graph.0`, depth, "parallel");
-      checkSingle(body[1], `${path3}.graph.1`, depth);
-      upstream.add(body[0].id);
-      upstream.add(singleId(body[1]));
+      err("invalid-envelope", `\`workflowId\` must be a non-empty string naming the workflow to start (got ${JSON.stringify(node.workflowId)})`, `${path3}.workflowId`, node.id);
+      return;
+    }
+    if (node.type === "workflow" && (node.workflowId.startsWith("$") || Array.isArray(node.graph))) {
+      checkId(node.id, path3);
+      err("node-type-unsupported-by-engine", armSubrunUnsupportedMessage(node.id, node.workflowId), path3, node.id);
       return;
     }
     checkId(singleId(node), path3);
     checkPolicyEnums(node, path3);
+    checkInputShape(node, path3);
     checkTimeout(node, path3);
     checkTier(node, path3);
+    checkModel(node, path3);
     checkRetry(node, path3);
     checkWorkspace(node, path3);
     if (!opts.static) {
@@ -2740,7 +3396,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.type === "workflow" && node.kind === "subrun" && depth > caps.maxNestingDepth) {
       err("cap-exceeded", `nesting depth ${depth} exceeds ${caps.maxNestingDepth}`, path3, node.id);
     }
-    if (node.type === "workflow" && node.workflowId !== WORKFLOW_ARM_SUBRUN_ID && typeof g.definition?.id === "string" && node.workflowId === g.definition.id) {
+    if (node.type === "workflow" && typeof g.definition?.id === "string" && node.workflowId === g.definition.id) {
       err("subrun-cycle", `"${node.id}" starts "${node.workflowId}", which is this workflow itself`, path3, node.id);
     }
     for (const ref of nodeStepRefs(node)) {
@@ -2761,11 +3417,14 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (a.approver === "creator" && a.excludeInitiator === true) {
       err("approver-excludes-only-candidate", "approver:'creator' with excludeInitiator:true always excludes the only candidate", path3, a.id);
     }
-    if (a.fourEyes !== void 0 && a.editable !== true) {
+    const editable = approvalEditable(a);
+    if (a.fourEyes !== void 0 && !editable) {
       err("four-eyes-requires-editable", "`fourEyes` requires editable:true", `${path3}.fourEyes`, a.id);
     }
-    if ((a.editablePaths !== void 0 || a.editedPayloadSchema !== void 0) && a.editable !== true) {
-      err("editable-path-invalid", "`editablePaths` / `editedPayloadSchema` require editable:true", `${path3}.editablePaths`, a.id);
+    if (a.editable === false && Array.isArray(a.editablePaths) && a.editablePaths.length > 0) {
+      err("editable-path-invalid", "`editablePaths` beside editable:false is contradictory \u2014 drop the paths or set editable:true", `${path3}.editablePaths`, a.id);
+    } else if ((a.editablePaths !== void 0 || a.editedPayloadSchema !== void 0) && !editable) {
+      err("editable-path-invalid", "`editablePaths` / `editedPayloadSchema` require editable:true (a non-empty editablePaths implies it)", `${path3}.editablePaths`, a.id);
     }
     for (const p of a.editablePaths ?? []) {
       if (!EDITABLE_PATH_RE.test(p)) err("editable-path-invalid", `editablePaths entry "${p}" is outside the seg(.seg)*[*]/[n] grammar`, `${path3}.editablePaths`, a.id);
@@ -2796,6 +3455,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
   const checkArm = /* @__PURE__ */ __name3((arm, path3, depth, container) => {
     if (arm.type === "mapping") {
       checkId(arm.id, path3);
+      checkMapMembers(readMapConfig(arm.mapConfig), `${path3}.mapConfig`, arm.id);
       for (const ref of nodeStepRefs(arm)) {
         if (!upstream.has(ref)) err("template-reference-unresolved", `"${arm.id}" references stepResults.${ref}, which is not upstream`, path3, arm.id);
       }
@@ -2820,6 +3480,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
         break;
       case "mapping":
         checkId(entry.id, path3);
+        checkMapMembers(readMapConfig(entry.mapConfig), `${path3}.mapConfig`, entry.id);
         for (const ref of nodeStepRefs(entry)) {
           if (!upstream.has(ref)) err("template-reference-unresolved", `"${entry.id}" references stepResults.${ref}, which is not upstream`, path3, entry.id);
         }
@@ -2944,6 +3605,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
           } else checkHitlArm(f.step, `${path3}.step`, "foreach");
           declared.push(f.step.id);
         } else {
+          checkBodyInput(f.step, `${path3}.step`, "foreach");
           checkSingle(f.step, `${path3}.step`, o.chunk ? 2 : 1);
           declared.push(singleId(f.step));
         }
@@ -2964,6 +3626,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
           checkHitlArm(l.step, `${path3}.step`, "loop");
           declared.push(l.step.id);
         } else {
+          checkBodyInput(l.step, `${path3}.step`, "loop");
           checkSingle(l.step, `${path3}.step`, 1);
           declared.push(singleId(l.step));
         }
@@ -3358,230 +4021,64 @@ function renderPredicate(pred) {
       return `${renderRef(pred.value)} in ${JSON.stringify(pred.set)}`;
     case "notIn":
       return `${renderRef(pred.value)} not in ${JSON.stringify(pred.set)}`;
-    case "eq":
-      return `${renderRef(pred.left)} == ${renderRef(pred.right)}`;
-    case "ne":
-      return `${renderRef(pred.left)} != ${renderRef(pred.right)}`;
-    case "lt":
-      return `${renderRef(pred.left)} < ${renderRef(pred.right)}`;
-    case "lte":
-      return `${renderRef(pred.left)} <= ${renderRef(pred.right)}`;
-    case "gt":
-      return `${renderRef(pred.left)} > ${renderRef(pred.right)}`;
-    case "gte":
-      return `${renderRef(pred.left)} >= ${renderRef(pred.right)}`;
-  }
-}
-function wrapLabel(child, rendered) {
-  return child.op === "and" || child.op === "or" || child.op === "not" ? `(${rendered})` : rendered;
-}
-function renderRef(ref) {
-  if ("literal" in ref) return JSON.stringify(ref.literal);
-  return ref.path;
-}
-function step(s) {
-  const id = stepIdOf(s);
-  return {
-    path: /* @__PURE__ */ __name3((p) => ({
-      path: p === "" ? `stepResults.${id}` : `stepResults.${id}.${p}`
-    }), "path")
-  };
-}
-function stepOf(id) {
-  return step(id);
-}
-function init(path3) {
-  return {
-    path: path3 === "" ? "initData" : `initData.${path3}`
-  };
-}
-function state(path3) {
-  return {
-    path: path3 === "" ? "state" : `state.${path3}`
-  };
-}
-function lit(v) {
-  return {
-    literal: v
-  };
-}
-function toPathOrLiteral(v) {
-  if (typeof v === "object" && v !== null) {
-    if ("path" in v) return {
-      path: v.path
-    };
-    if ("literal" in v) return {
-      literal: v.literal
-    };
-  }
-  return {
-    literal: v
-  };
-}
-function isMapConfigObject(v) {
-  return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-function parseMapConfig(raw, stepId) {
-  if (isMapConfigObject(raw)) return raw;
-  if (typeof raw !== "string") {
-    throw new Error(`Stored mapping step "${stepId}" has a mapConfig that is neither a JSON string nor an object.`);
-  }
-  try {
-    return JSON.parse(raw);
-  } catch (e) {
-    throw new Error(`Stored mapping step "${stepId}" has invalid JSON mapConfig: ${e.message}`);
-  }
-}
-function mapConfigWire(raw) {
-  if (typeof raw === "string") return raw;
-  if (isMapConfigObject(raw)) return canonicalJson(raw);
-  return void 0;
-}
-function describeBadPlaceholder(template22, idx, rawExpr) {
-  return `Template placeholder #${idx} (\${${rawExpr}}) in '${template22}'`;
-}
-function parseTemplatePlaceholder(rawExpr) {
-  const dot = rawExpr.indexOf(".");
-  return {
-    scope: dot === -1 ? rawExpr : rawExpr.slice(0, dot),
-    rest: dot === -1 ? "" : rawExpr.slice(dot + 1)
-  };
-}
-function traverseMappingPath(root, path3, errorLabel) {
-  if (path3 === "" || path3 === ".") return root;
-  const parts = path3.split(".");
-  let value22 = root;
-  for (const part of parts) {
-    if (typeof value22 === "object" && value22 !== null) value22 = value22[part];
-    else throw new WorkflowTemplateError(`Invalid path ${path3} in ${errorLabel}`, path3);
-  }
-  return value22;
-}
-function stringifyTemplateValue(v, template22, idx, rawExpr) {
-  if (v === null || v === void 0) return "";
-  if (typeof v === "object") {
-    try {
-      return JSON.stringify(v);
-    } catch (err) {
-      throw new WorkflowTemplateError(`${describeBadPlaceholder(template22, idx, rawExpr)} resolved to a value that could not be JSON-stringified (${err.message}).`, rawExpr);
-    }
-  }
-  return String(v);
-}
-function escapeFence(content) {
-  return content.replace(/<\/lua-data/g, "<\\/lua-data");
-}
-function fenceBlock(name, source, content) {
-  return `<lua-data name="${name}" source="${source}" untrusted="true">${escapeFence(content)}</lua-data>`;
-}
-function renderTemplate(template22, ctx, opts) {
-  let idx = 0;
-  return template22.replace(TEMPLATE_PLACEHOLDER, (_match, rawExpr) => {
-    idx += 1;
-    const { scope, rest } = parseTemplatePlaceholder(rawExpr);
-    const label = describeBadPlaceholder(template22, idx, rawExpr);
-    let rendered;
-    let source;
-    switch (scope) {
-      case "initData":
-        rendered = stringifyTemplateValue(traverseMappingPath(ctx.initData, rest, label), template22, idx, rawExpr);
-        source = "initData";
-        break;
-      case "state":
-        rendered = stringifyTemplateValue(traverseMappingPath(ctx.state, rest, label), template22, idx, rawExpr);
-        source = "state";
-        break;
-      case "requestContext":
-        rendered = stringifyTemplateValue(traverseMappingPath(ctx.requestContext, rest, label), template22, idx, rawExpr);
-        source = "requestContext";
-        break;
-      case "stepResults": {
-        const innerDot = rest.indexOf(".");
-        const stepId = innerDot === -1 ? rest : rest.slice(0, innerDot);
-        const subPath = innerDot === -1 ? "" : rest.slice(innerDot + 1);
-        if (!stepId) throw new WorkflowTemplateError(`${label} must name a step: \${stepResults.<stepId>.<path>}.`, rawExpr);
-        if (!(stepId in ctx.stepResults) || ctx.stepResults[stepId] == null) {
-          throw new WorkflowTemplateError(`${label} references stepResults.${stepId} but step "${stepId}" has no resolvable output (not an ancestor, not run, failed, or produced no output).`, rawExpr);
-        }
-        rendered = stringifyTemplateValue(traverseMappingPath(ctx.stepResults[stepId], subPath, label), template22, idx, rawExpr);
-        source = `step:${stepId}`;
-        break;
-      }
-      default:
-        throw new WorkflowTemplateError(`${label} references unknown namespace "${scope}". Use one of: ${TEMPLATE_NAMESPACES.join(", ")}.`, rawExpr);
-    }
-    return opts.fenced ? fenceBlock(rawExpr, source, rendered) : rendered;
-  });
-}
-function resolveDescriptor(key, m, ctx) {
-  try {
-    if ("value" in m) return {
-      value: m.value
-    };
-    if ("template" in m && typeof m.template === "string") {
-      return {
-        value: renderTemplate(m.template, ctx, {
-          fenced: false
-        })
-      };
-    }
-    if ("knowledge" in m || "rows" in m && m.rows !== void 0) {
-      return {
-        error: "binding_unresolved",
-        key
-      };
-    }
-    if ("requestContextPath" in m) {
-      const label = `requestContext path for key "${key}"`;
-      return {
-        value: traverseMappingPath(ctx.requestContext, m.requestContextPath, label)
-      };
-    }
-    if ("path" in m) {
-      const source = "initData" in m && m.initData ? "initData" : "step";
-      if (source === "initData") {
-        return {
-          value: traverseMappingPath(ctx.initData, m.path, `initData for key "${key}"`)
-        };
-      }
-      const stepRef = m.step;
-      const candidates = Array.isArray(stepRef) ? stepRef : [
-        stepRef
-      ];
-      const stepId = candidates.find((s) => ctx.stepResults[s] !== void 0 && ctx.stepResults[s] !== null);
-      if (stepId === void 0) return {
-        error: "binding_unresolved",
-        key
-      };
-      return {
-        value: traverseMappingPath(ctx.stepResults[stepId], m.path, `step ${candidates.join("|")} for key "${key}"`)
-      };
-    }
-    return {
-      error: "binding_unresolved",
-      key
-    };
-  } catch (err) {
-    if (err instanceof WorkflowTemplateError) return {
-      error: "binding_unresolved",
-      key
-    };
-    throw err;
+    case "eq":
+      return `${renderRef(pred.left)} == ${renderRef(pred.right)}`;
+    case "ne":
+      return `${renderRef(pred.left)} != ${renderRef(pred.right)}`;
+    case "lt":
+      return `${renderRef(pred.left)} < ${renderRef(pred.right)}`;
+    case "lte":
+      return `${renderRef(pred.left)} <= ${renderRef(pred.right)}`;
+    case "gt":
+      return `${renderRef(pred.left)} > ${renderRef(pred.right)}`;
+    case "gte":
+      return `${renderRef(pred.left)} >= ${renderRef(pred.right)}`;
   }
 }
-function resolveMapping(cfg, ctx) {
-  const keys = Object.keys(cfg);
-  if (keys.length === 1 && keys[0] === "") {
-    return resolveDescriptor("", cfg[""], ctx);
-  }
-  const result = {};
-  for (const key of keys) {
-    const resolved = resolveDescriptor(key, cfg[key], ctx);
-    if ("error" in resolved) return resolved;
-    result[key] = resolved.value;
+function wrapLabel(child, rendered) {
+  return child.op === "and" || child.op === "or" || child.op === "not" ? `(${rendered})` : rendered;
+}
+function renderRef(ref) {
+  if ("literal" in ref) return JSON.stringify(ref.literal);
+  return ref.path;
+}
+function step(s) {
+  const id = stepIdOf(s);
+  return {
+    path: /* @__PURE__ */ __name3((p) => ({
+      path: p === "" ? `stepResults.${id}` : `stepResults.${id}.${p}`
+    }), "path")
+  };
+}
+function stepOf(id) {
+  return step(id);
+}
+function init(path3) {
+  return {
+    path: path3 === "" ? "initData" : `initData.${path3}`
+  };
+}
+function state(path3) {
+  return {
+    path: path3 === "" ? "state" : `state.${path3}`
+  };
+}
+function lit(v) {
+  return {
+    literal: v
+  };
+}
+function toPathOrLiteral(v) {
+  if (typeof v === "object" && v !== null) {
+    if ("path" in v) return {
+      path: v.path
+    };
+    if ("literal" in v) return {
+      literal: v.literal
+    };
   }
   return {
-    value: result
+    literal: v
   };
 }
 function continuedFailureValue(error, killReason) {
@@ -3603,17 +4100,10 @@ function isContinuedFailureValue(v) {
   const err = o.error;
   return o.__lua_workflow === CONTINUED_FAILURE_TAG && o.failed === true && o.text === "" && err !== null && typeof err === "object" && typeof err.code === "string" && typeof err.message === "string";
 }
-function lowerContainerArm(mapping, step22) {
-  const stepId = nodeIdOf(step22);
+function inlineContainerArm(mapping, step22) {
   return {
-    type: "workflow",
-    id: `${stepId}_arm`,
-    workflowId: WORKFLOW_ARM_SUBRUN_ID,
-    kind: "subrun",
-    graph: [
-      mapping,
-      step22
-    ]
+    ...step22,
+    input: parseMapConfig(mapping.mapConfig, mapping.id)
   };
 }
 function entryIds(entry) {
@@ -3683,6 +4173,27 @@ function resolvePlacements(calls) {
         break;
     }
   });
+  const armMapPlacementIssue = /* @__PURE__ */ __name3((node, ref, i, container) => {
+    if (!ref.armMap || node.type === "mapping" || isHitlNode2(node)) return void 0;
+    const id = nodeIdOf(node);
+    if ((container === "foreach" || container === "loop") && node.type !== "workflow") {
+      return {
+        code: "mapping-placement",
+        message: container === "foreach" ? `foreach body "${id}": a [map, step] body is not supported \u2014 the body receives each item as its input; map the items before the foreach instead (foreach(step, { items: \u2026 }) or a .map() before it)` : `loop body "${id}": a [map, step] body is not supported \u2014 the body receives the previous output as its input; put the .map() before the loop instead`,
+        callIndex: i,
+        stepId: id
+      };
+    }
+    if (node.input !== void 0) {
+      return {
+        code: "mapping-placement",
+        message: `"${id}": the [map, step] arm mapping and the node's own input map would both bind its input \u2014 keep one (drop the arm map, or the \`input\` on the declaration)`,
+        callIndex: i,
+        stepId: id
+      };
+    }
+    return void 0;
+  }, "armMapPlacementIssue");
   const hitlPlacementIssue = /* @__PURE__ */ __name3((node, ref, i, container) => {
     if (!isHitlNode2(node)) return void 0;
     const id = node.id;
@@ -3709,7 +4220,7 @@ function resolvePlacements(calls) {
       if (ref.node.type === "mapping" && !allowMapping) {
         issues.push({
           code: "mapping-placement",
-          message: `mapping "${ref.node.id}" cannot be a container arm \u2014 chain it as [map, step]`,
+          message: `mapping "${ref.node.id}" cannot be a container arm \u2014 chain it as [map, step] in a parallel / conditional arm, or place the .map() before the container`,
           callIndex: i,
           stepId: ref.node.id
         });
@@ -3730,7 +4241,7 @@ function resolvePlacements(calls) {
     if (d.node.type === "mapping" && !allowMapping) {
       issues.push({
         code: "mapping-placement",
-        message: `map "${ref.ref}" cannot be a parallel/foreach/loop arm \u2014 chain it as [map, step]`,
+        message: `map "${ref.ref}" cannot be a parallel/foreach/loop arm \u2014 chain it as [map, step] in a parallel arm, or place the .map() before the container`,
         callIndex: i,
         stepId: ref.ref
       });
@@ -3741,6 +4252,11 @@ function resolvePlacements(calls) {
       issues.push(hitl);
       return void 0;
     }
+    const mapped = armMapPlacementIssue(d.node, ref, i, container);
+    if (mapped) {
+      issues.push(mapped);
+      return void 0;
+    }
     const prior = placedBy.get(ref.ref);
     if (prior !== void 0 && prior !== i) {
       issues.push({
@@ -3761,6 +4277,10 @@ function resolvePlacements(calls) {
     }
     const hitl = hitlPlacementIssue(ref.node, ref, i, container);
     if (hitl) issues.push(hitl);
+    else {
+      const mapped = armMapPlacementIssue(ref.node, ref, i, container);
+      if (mapped) issues.push(mapped);
+    }
   }, "claim");
   calls.forEach((call, i) => {
     switch (call.kind) {
@@ -3788,7 +4308,7 @@ function resolvePlacements(calls) {
   const lookup = /* @__PURE__ */ __name3((ref) => {
     const n2 = "node" in ref ? ref.node : declared.get(ref.ref)?.node;
     if (!n2 || !ref.armMap || n2.type === "mapping" || isHitlNode2(n2)) return n2;
-    return lowerContainerArm(ref.armMap, n2);
+    return inlineContainerArm(ref.armMap, n2);
   }, "lookup");
   calls.forEach((call, i) => {
     switch (call.kind) {
@@ -4173,6 +4693,27 @@ function isTerminalRunStatus(status) {
 function pruneUndefined(o) {
   return Object.fromEntries(Object.entries(o).filter(([, v]) => v !== void 0));
 }
+function runOrigin(run) {
+  if (run.goalId) return "goal";
+  if (run.jobId || run.trigger === "schedule") return "schedule";
+  if (run.dynamic === true) return run.tags?.includes(WORKFLOW_INLINE_RUN_TAG) ? "inline" : "compose";
+  return "definition";
+}
+function runErrorIssues(issues) {
+  if (!Array.isArray(issues)) return void 0;
+  const out = [];
+  for (const raw of issues.slice(0, RUN_ERROR_ISSUES_MAX)) {
+    if (!raw || typeof raw !== "object") continue;
+    const o = raw;
+    if (typeof o.code !== "string" || !o.code) continue;
+    out.push(pruneUndefined({
+      code: o.code,
+      path: typeof o.path === "string" ? o.path : void 0,
+      message: typeof o.message === "string" ? o.message : void 0
+    }));
+  }
+  return out.length ? out : void 0;
+}
 function runNextAction(run) {
   if (isTerminalRunStatus(run.status)) return "none";
   if (run.status === "suspended" && run.gate?.kind === "budget") return "raise_budget";
@@ -4218,15 +4759,64 @@ function runCounts(counts) {
     pending: n(c.pending) + n(c.ready) + n(c.waiting)
   };
 }
-function runUsage(run) {
+function isPricedStepReceipt(receipt) {
+  return typeof receipt?.multiplier === "number" && Number.isFinite(receipt.multiplier);
+}
+function receiptEngine(engine) {
+  if (engine === "actions") return "seat";
+  if (engine === "credits") return "legacy";
+  return void 0;
+}
+function receiptTier(tier) {
+  return tier === "light" || tier === "standard" || tier === "heavy" ? tier : void 0;
+}
+function stepBillingView(receipt) {
+  const engine = receiptEngine(receipt?.engine);
+  if (!receipt || engine === void 0) return void 0;
+  return pruneUndefined({
+    engine,
+    attempt: typeof receipt.attempt === "number" ? receipt.attempt : void 0,
+    credits: typeof receipt.credits === "number" ? receipt.credits : void 0,
+    actions: typeof receipt.actionsEstimate === "number" ? receipt.actionsEstimate : void 0,
+    model: typeof receipt.model === "string" ? receipt.model : void 0,
+    tier: receiptTier(receipt.tier),
+    multiplier: typeof receipt.multiplier === "number" ? receipt.multiplier : void 0,
+    byok: typeof receipt.byok === "boolean" ? receipt.byok : void 0,
+    calibrated: typeof receipt.calibrated === "boolean" ? receipt.calibrated : void 0
+  });
+}
+function runUsage(run, receipts) {
+  const actions = n(run.budget?.spent?.actionsEstimate);
+  const stamped = run.budget?.engine;
+  const priced = (receipts ?? []).filter(isPricedStepReceipt);
+  const engine = stamped === "seat" || stamped === "legacy" ? stamped : actions > 0 || priced.some((r) => r.engine === "actions") ? "seat" : priced.some((r) => r.engine === "credits") ? "legacy" : void 0;
+  const seat = engine === "seat";
+  const metering = engine ? "priced" : "flat";
   return {
     creditsUsed: run.budget?.spent?.credits ?? 0,
     actionsEstimate: run.budget?.spent?.actionsEstimate ?? 0,
+    ...seat ? {
+      actionsUsed: actions
+    } : {},
+    metering,
+    ...engine ? {
+      engine
+    } : {},
     steps: run.budget?.spent?.steps ?? 0,
     inputTokens: run.usage?.inputTokens ?? 0,
     outputTokens: run.usage?.outputTokens ?? 0
   };
 }
+function runBudgetCap(budget) {
+  const cap = budget?.maxCredits;
+  return typeof cap === "number" && Number.isFinite(cap) && cap > 0 ? cap : void 0;
+}
+function runBudgetRemaining(budget) {
+  const cap = runBudgetCap(budget);
+  if (cap === void 0) return void 0;
+  const spent = budget?.spent;
+  return Math.max(0, cap - n(spent?.credits) - n(spent?.actionsEstimate) - n(budget?.reserved));
+}
 function runCancelView(cancel) {
   if (!cancel) return void 0;
   return {
@@ -4293,6 +4883,7 @@ function toWorkflowRunSummary(run) {
     repairOf: run.repairOf,
     repairRunIds: run.repairRunIds,
     trigger: run.trigger ?? "api",
+    origin: runOrigin(run),
     createdBy: {
       subjectType: principal?.subjectType ?? "system",
       subjectId: principal?.subjectId ?? run.userId ?? ""
@@ -4310,11 +4901,13 @@ function toWorkflowRunSummary(run) {
     usage: runUsage(run),
     // LUA-697: a row persisted before the write seams (#2406 / #2465 / the script tier) leaves scrubbed here too —
     // idempotent on a scrubbed message, bounded input; an empty message falls back to the code.
-    error: run.error ? {
+    error: run.error ? pruneUndefined({
       code: run.error.code ?? "error",
       message: scrubStepErrorMessage(run.error.message) ?? run.error.code ?? "error",
-      stepId: run.error.stepId
-    } : void 0,
+      stepId: run.error.stepId,
+      // LUA-784 (item 3): the unattended pre-start failure's refusal rows (`input_schema_invalid` and kin).
+      issues: runErrorIssues(run.error.issues)
+    }) : void 0,
     kind: "run",
     aclHash: run.aclHash,
     migration: run.migration,
@@ -4753,208 +5346,90 @@ function applyJsonPatch(doc, ops) {
       if (Array.isArray(parent) && typeof s === "number") parent = parent[s];
       else if (typeof parent === "object" && parent !== null && typeof s === "string") parent = parent[s];
       else parent = void 0;
-      if (parent === void 0) return {
-        ok: false,
-        code: "PATH_NOT_FOUND",
-        index: i,
-        path: op.path,
-        message: "path not found"
-      };
-    }
-    if (Array.isArray(parent)) {
-      if (last === "-") {
-        if (op.op !== "add") return {
-          ok: false,
-          code: "PATCH_INVALID",
-          index: i,
-          path: op.path,
-          message: "'-' only with add"
-        };
-        parent.push(structuredClone(op.value));
-        continue;
-      }
-      if (typeof last !== "number") return {
-        ok: false,
-        code: "PATCH_INVALID",
-        index: i,
-        path: op.path,
-        message: "array index expected"
-      };
-      if (op.op === "add") {
-        if (last > parent.length) return {
-          ok: false,
-          code: "PATH_NOT_FOUND",
-          index: i,
-          path: op.path,
-          message: "index out of range"
-        };
-        parent.splice(last, 0, structuredClone(op.value));
-      } else if (last >= parent.length) {
-        return {
-          ok: false,
-          code: "PATH_NOT_FOUND",
-          index: i,
-          path: op.path,
-          message: "index out of range"
-        };
-      } else if (op.op === "replace") parent[last] = structuredClone(op.value);
-      else parent.splice(last, 1);
-      continue;
-    }
-    if (typeof parent !== "object" || parent === null || typeof last !== "string" && typeof last !== "number") return {
-      ok: false,
-      code: "PATH_NOT_FOUND",
-      index: i,
-      path: op.path,
-      message: "path not found"
-    };
-    const obj = parent;
-    const key = String(last);
-    if (key === "__proto__" || key === "constructor" || key === "prototype") return {
-      ok: false,
-      code: "PATCH_INVALID",
-      index: i,
-      path: op.path,
-      message: "path not allowed"
-    };
-    if (op.op === "add") obj[key] = structuredClone(op.value);
-    else if (!(key in obj)) return {
-      ok: false,
-      code: "PATH_NOT_FOUND",
-      index: i,
-      path: op.path,
-      message: "path not found"
-    };
-    else if (op.op === "replace") obj[key] = structuredClone(op.value);
-    else delete obj[key];
-  }
-  return {
-    ok: true,
-    value: value22
-  };
-}
-function rebaseItemPointer(pointer, itemsPath, index) {
-  const base = `/${itemsPath.split(".").map(escapePointer).join("/")}/${index}`;
-  return pointer === "/" || pointer === "" ? base : `${base}${pointer}`;
-}
-function describeApproverSpecRefusal(spec) {
-  const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
-  const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
-  const users = typeof spec === "object" && spec !== null ? spec.users : void 0;
-  const approver = typeof users === "string" && USER_ID_SHAPED_RE.test(users) ? {
-    users: [
-      users
-    ]
-  } : "creator";
-  const message = `approver ${written} is not an approver \u2014 legal: ${APPROVER_SPEC_SHAPES.join(" | ")}. 'creator' is the person who started the run: write approver:'creator' for "ask me" / "I approve"; {users:[\u2026]} takes user ids, never emails, names or {type:'user'}` + (approver === "creator" ? "" : `; here: approver:${JSON.stringify(approver)}`);
-  return {
-    approver,
-    written,
-    message
-  };
-}
-function bindingRootsOk(template22) {
-  const refs = [
-    ...template22.matchAll(/\$\{\s*([A-Za-z_$][\w$]*)/g)
-  ].map((m) => m[1]);
-  return refs.length > 0 && refs.every((r) => BINDING_ROOTS.includes(r));
-}
-function isTemplateBinding(v) {
-  return typeof v === "object" && v !== null && typeof v.template === "string";
-}
-function validateApproverBlock(node, opts = {
-  path: "approval"
-}) {
-  const issues = [];
-  const push = /* @__PURE__ */ __name3((code, path3, message, severity = "error") => issues.push({
-    code,
-    path: path3,
-    severity,
-    message
-  }), "push");
-  const checkSpec = /* @__PURE__ */ __name3((spec, path3) => {
-    const r = ApproverSpecSchema.safeParse(spec);
-    if (!r.success) {
-      const users = spec?.users;
-      if (Array.isArray(users) && users.length > APPROVER_SPEC_MAX_USERS) push("cap-exceeded", path3, `at most ${APPROVER_SPEC_MAX_USERS} users`);
-      else {
-        const refusal = describeApproverSpecRefusal(spec);
-        issues.push({
-          code: "approver-invalid",
-          path: path3,
-          severity: "error",
-          message: refusal.message,
-          repair: {
-            approver: refusal.approver,
-            written: refusal.written
-          }
-        });
-      }
-      return;
-    }
-    const s = r.data;
-    if (typeof s === "object") {
-      if ("governance" in s && !opts.governanceEnabled) push("approver-governance-unavailable", path3, "governance reviewer routing is not enabled for this deployment");
-      if ("group" in s && typeof s.group === "string" && !opts.scimEnabled && opts.idpGroups?.includes(s.group)) push("approver-idp-group-unavailable", path3, "IdP-group approvers are not enabled for this deployment");
-      const binding = "users" in s ? s.users : "role" in s ? s.role : "group" in s ? s.group : void 0;
-      if (isTemplateBinding(binding)) {
-        if (!bindingRootsOk(binding.template)) push("approver-binding-invalid", `${path3}.template`, "binding root must be initData / stepResults / requestContext / state");
-        if ("users" in s && opts.customerReachable) push("approver-binding-customer-reachable", `${path3}.users`, "a customer-reachable workflow may not bind its approver list");
-      }
-    }
-  }, "checkSpec");
-  if (node.approver !== void 0) checkSpec(node.approver, `${opts.path}.approver`);
-  if (node.fourEyes !== void 0) {
-    const r = FourEyesSchema.safeParse(node.fourEyes);
-    if (!r.success) push("approver-invalid", `${opts.path}.fourEyes`, "fourEyes needs { edit, approve } approver specs");
-    else {
-      checkSpec(r.data.edit, `${opts.path}.fourEyes.edit`);
-      checkSpec(r.data.approve, `${opts.path}.fourEyes.approve`);
+      if (parent === void 0) return {
+        ok: false,
+        code: "PATH_NOT_FOUND",
+        index: i,
+        path: op.path,
+        message: "path not found"
+      };
     }
-    if (!node.editable) push("four-eyes-requires-editable", `${opts.path}.fourEyes`, "fourEyes requires editable:true");
-    if (node.approver !== void 0) push("four-eyes-overrides-approver", `${opts.path}.approver`, "fourEyes replaces approver", "warning");
-    if (node.itemsPath) push("four-eyes-items-unsupported", `${opts.path}.fourEyes`, "fourEyes cannot combine with itemsPath");
-  }
-  if (node.excludeInitiator && (node.approver === void 0 || node.approver === "creator") && !node.fourEyes) push("approver-excludes-only-candidate", `${opts.path}.excludeInitiator`, "'creator' with excludeInitiator leaves no approver");
-  if (Array.isArray(node.onTimeout)) {
-    const chain = node.onTimeout;
-    const hops = chain.filter((m) => typeof m === "object" && m !== null && "escalateTo" in m);
-    if (hops.length > ESCALATION_MAX_HOPS) push("escalation-chain-too-long", `${opts.path}.onTimeout`, `at most ${ESCALATION_MAX_HOPS} hops`);
-    const last = chain[chain.length - 1];
-    if (typeof last === "object" && last !== null) push("escalation-chain-not-terminal", `${opts.path}.onTimeout`, "a chain must end in deny | cancel-run | fail");
-    hops.forEach((h, i) => checkSpec(h.escalateTo, `${opts.path}.onTimeout[${i}].escalateTo`));
-  } else if (typeof node.onTimeout === "object" && node.onTimeout !== null) {
-    checkSpec(node.onTimeout.escalateTo, `${opts.path}.onTimeout.escalateTo`);
-  }
-  return issues;
-}
-function liftRenderedApprover(row, rendered) {
-  const text = (rendered ?? "").trim();
-  if (!text) return null;
-  if (row === "users") {
-    let members = null;
-    if (text.startsWith("[")) {
-      try {
-        members = JSON.parse(text);
-      } catch {
-        return null;
+    if (Array.isArray(parent)) {
+      if (last === "-") {
+        if (op.op !== "add") return {
+          ok: false,
+          code: "PATCH_INVALID",
+          index: i,
+          path: op.path,
+          message: "'-' only with add"
+        };
+        parent.push(structuredClone(op.value));
+        continue;
       }
-    } else members = text.split(",").map((s) => s.trim());
-    if (!Array.isArray(members) || members.length === 0 || members.length > APPROVER_SPEC_MAX_USERS) return null;
-    if (!members.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128)) return null;
-    return {
-      users: [
-        ...new Set(members)
-      ].sort()
+      if (typeof last !== "number") return {
+        ok: false,
+        code: "PATCH_INVALID",
+        index: i,
+        path: op.path,
+        message: "array index expected"
+      };
+      if (op.op === "add") {
+        if (last > parent.length) return {
+          ok: false,
+          code: "PATH_NOT_FOUND",
+          index: i,
+          path: op.path,
+          message: "index out of range"
+        };
+        parent.splice(last, 0, structuredClone(op.value));
+      } else if (last >= parent.length) {
+        return {
+          ok: false,
+          code: "PATH_NOT_FOUND",
+          index: i,
+          path: op.path,
+          message: "index out of range"
+        };
+      } else if (op.op === "replace") parent[last] = structuredClone(op.value);
+      else parent.splice(last, 1);
+      continue;
+    }
+    if (typeof parent !== "object" || parent === null || typeof last !== "string" && typeof last !== "number") return {
+      ok: false,
+      code: "PATH_NOT_FOUND",
+      index: i,
+      path: op.path,
+      message: "path not found"
+    };
+    const obj = parent;
+    const key = String(last);
+    if (key === "__proto__" || key === "constructor" || key === "prototype") return {
+      ok: false,
+      code: "PATCH_INVALID",
+      index: i,
+      path: op.path,
+      message: "path not allowed"
+    };
+    if (op.op === "add") obj[key] = structuredClone(op.value);
+    else if (!(key in obj)) return {
+      ok: false,
+      code: "PATH_NOT_FOUND",
+      index: i,
+      path: op.path,
+      message: "path not found"
     };
+    else if (op.op === "replace") obj[key] = structuredClone(op.value);
+    else delete obj[key];
   }
-  if (text.length > 128 || text.startsWith("[") || text.startsWith("{")) return null;
-  return row === "role" ? {
-    role: text
-  } : {
-    group: text
+  return {
+    ok: true,
+    value: value22
   };
 }
+function rebaseItemPointer(pointer, itemsPath, index) {
+  const base = `/${itemsPath.split(".").map(escapePointer).join("/")}/${index}`;
+  return pointer === "/" || pointer === "" ? base : `${base}${pointer}`;
+}
 function collectEnvTemplateKeys(value22) {
   const keys = /* @__PURE__ */ new Set();
   const walk22 = /* @__PURE__ */ __name3((v) => {
@@ -5203,7 +5678,6 @@ function* singleStepsOf(entry) {
       return;
     case "workflow":
       yield entry;
-      if (Array.isArray(entry.graph)) yield* singleStepsOf(entry.graph[1]);
       return;
     case "parallel":
     case "conditional":
@@ -5245,7 +5719,7 @@ function needsInheritedWorkspace(graph) {
   }
   return false;
 }
-var __defProp3, __name3, SideEffectsSchema, JobResourcesSchema, WORKFLOW_ARM_SUBRUN_ID, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
+var __defProp3, __name3, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
 var init_dist2 = __esm({
   "../workflow-graph/dist/index.mjs"() {
     "use strict";
@@ -5258,9 +5732,178 @@ var init_dist2 = __esm({
     init_dist();
     __defProp3 = Object.defineProperty;
     __name3 = /* @__PURE__ */ __name((target, value22) => __defProp3(target, "name", { value: value22, configurable: true }), "__name");
+    WorkflowTemplateError = class extends Error {
+      static {
+        __name(this, "WorkflowTemplateError");
+      }
+      static {
+        __name3(this, "WorkflowTemplateError");
+      }
+      placeholder;
+      constructor(message, placeholder) {
+        super(message), this.placeholder = placeholder;
+        this.name = "WorkflowTemplateError";
+      }
+    };
+    __name(isMapConfigObject, "isMapConfigObject");
+    __name3(isMapConfigObject, "isMapConfigObject");
+    __name(parseMapConfig, "parseMapConfig");
+    __name3(parseMapConfig, "parseMapConfig");
+    __name(mapConfigWire, "mapConfigWire");
+    __name3(mapConfigWire, "mapConfigWire");
+    TEMPLATE_PLACEHOLDER = /\$\{([^}]*)\}/g;
+    TEMPLATE_NAMESPACES = [
+      "initData",
+      "state",
+      "requestContext",
+      "stepResults"
+    ];
+    __name(describeBadPlaceholder, "describeBadPlaceholder");
+    __name3(describeBadPlaceholder, "describeBadPlaceholder");
+    __name(parseTemplatePlaceholder, "parseTemplatePlaceholder");
+    __name3(parseTemplatePlaceholder, "parseTemplatePlaceholder");
+    __name(traverseMappingPath, "traverseMappingPath");
+    __name3(traverseMappingPath, "traverseMappingPath");
+    __name(stringifyTemplateValue, "stringifyTemplateValue");
+    __name3(stringifyTemplateValue, "stringifyTemplateValue");
+    __name(escapeFence, "escapeFence");
+    __name3(escapeFence, "escapeFence");
+    __name(fenceBlock, "fenceBlock");
+    __name3(fenceBlock, "fenceBlock");
+    __name(renderTemplate, "renderTemplate");
+    __name3(renderTemplate, "renderTemplate");
+    __name(isMapDescriptor, "isMapDescriptor");
+    __name3(isMapDescriptor, "isMapDescriptor");
+    MAP_DESCRIPTOR_KEYS = [
+      "step",
+      "path",
+      "initData",
+      "value",
+      "template",
+      "requestContextPath",
+      "knowledge"
+    ];
+    MAP_MEMBER_MALFORMED_CODE = "map-member-malformed";
+    __name(malformedMapMembers, "malformedMapMembers");
+    __name3(malformedMapMembers, "malformedMapMembers");
+    __name(mapMemberMalformedMessage, "mapMemberMalformedMessage");
+    __name3(mapMemberMalformedMessage, "mapMemberMalformedMessage");
+    __name(resolveDescriptor, "resolveDescriptor");
+    __name3(resolveDescriptor, "resolveDescriptor");
+    __name(resolveMapping, "resolveMapping");
+    __name3(resolveMapping, "resolveMapping");
+    fromInit = /* @__PURE__ */ __name3((path3) => ({
+      initData: true,
+      path: path3
+    }), "fromInit");
+    fromStep = /* @__PURE__ */ __name3((s, path3 = "") => {
+      const idOf = /* @__PURE__ */ __name3((x) => typeof x === "string" ? x : x.id, "idOf");
+      return {
+        step: Array.isArray(s) ? s.map(idOf) : idOf(s),
+        path: path3
+      };
+    }, "fromStep");
+    value = /* @__PURE__ */ __name3((v) => ({
+      value: v
+    }), "value");
+    template = /* @__PURE__ */ __name3((s) => ({
+      template: s
+    }), "template");
+    fromRequest = /* @__PURE__ */ __name3((path3) => ({
+      requestContextPath: path3
+    }), "fromRequest");
+    rows = /* @__PURE__ */ __name3((s, path3, page) => ({
+      step: typeof s === "string" ? s : s.id,
+      path: path3,
+      rows: page
+    }), "rows");
+    fromKnowledge = /* @__PURE__ */ __name3((k) => ({
+      knowledge: k
+    }), "fromKnowledge");
     SideEffectsSchema = z4.enum(WORKFLOW_SIDE_EFFECTS);
     JobResourcesSchema = z4.enum(WORKFLOW_JOB_RESOURCES);
-    WORKFLOW_ARM_SUBRUN_ID = "$arm";
+    APPROVER_SPEC_MAX_USERS = 20;
+    ESCALATION_MAX_HOPS = 3;
+    TemplateBindingSchema = z22.object({
+      template: z22.string().min(1).max(2048)
+    }).strict();
+    ApproverSpecSchema = z22.union([
+      z22.literal("creator"),
+      z22.literal("org-admins"),
+      z22.object({
+        users: z22.union([
+          z22.array(z22.string().min(1).max(128)).min(1).max(APPROVER_SPEC_MAX_USERS),
+          TemplateBindingSchema
+        ])
+      }).strict(),
+      z22.object({
+        role: z22.union([
+          z22.string().min(1).max(128),
+          TemplateBindingSchema
+        ])
+      }).strict(),
+      z22.object({
+        group: z22.union([
+          z22.string().min(1).max(128),
+          TemplateBindingSchema
+        ])
+      }).strict(),
+      z22.object({
+        governance: z22.object({
+          policyId: z22.string().min(1).max(128)
+        }).strict()
+      }).strict()
+    ]);
+    FourEyesSchema = z22.object({
+      edit: ApproverSpecSchema,
+      approve: ApproverSpecSchema
+    }).strict();
+    EscalationHopSchema = z22.object({
+      escalateTo: ApproverSpecSchema,
+      timeoutHours: z22.number().finite().min(1).max(720)
+    }).strict();
+    TerminalOutcomeSchema = z22.enum([
+      "deny",
+      "cancel-run",
+      "fail",
+      "continue"
+    ]);
+    ApprovalOnTimeoutSchema = z22.union([
+      TerminalOutcomeSchema,
+      EscalationHopSchema,
+      z22.array(z22.union([
+        TerminalOutcomeSchema,
+        EscalationHopSchema
+      ])).min(1).max(ESCALATION_MAX_HOPS + 1)
+    ]);
+    APPROVER_SPEC_SHAPES = [
+      "'creator'",
+      "'org-admins'",
+      "{users:[userId, \u2026]}",
+      "{role:roleName}",
+      "{group:groupName}",
+      "{governance:{policyId}}"
+    ];
+    APPROVER_WRITTEN_MAX = 120;
+    USER_ID_SHAPED_RE = /^[^\s@]{1,128}$/;
+    __name(describeApproverSpecRefusal, "describeApproverSpecRefusal");
+    __name3(describeApproverSpecRefusal, "describeApproverSpecRefusal");
+    BINDING_ROOTS = [
+      "initData",
+      "stepResults",
+      "requestContext",
+      "state"
+    ];
+    __name(bindingRootsOk, "bindingRootsOk");
+    __name3(bindingRootsOk, "bindingRootsOk");
+    __name(isTemplateBinding, "isTemplateBinding");
+    __name3(isTemplateBinding, "isTemplateBinding");
+    __name(approvalEditable, "approvalEditable");
+    __name3(approvalEditable, "approvalEditable");
+    __name(validateApproverBlock, "validateApproverBlock");
+    __name3(validateApproverBlock, "validateApproverBlock");
+    __name(liftRenderedApprover, "liftRenderedApprover");
+    __name3(liftRenderedApprover, "liftRenderedApprover");
     WORKSPACE_TEMPLATE_EXPR_RE = /^\$\{\s*(?:initData|input)\.([^}]+?)\s*\}$/;
     __name(workspaceTemplatePath, "workspaceTemplatePath");
     __name3(workspaceTemplatePath, "workspaceTemplatePath");
@@ -5272,6 +5915,8 @@ var init_dist2 = __esm({
     });
     __name(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
     __name3(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
+    __name(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
+    __name3(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
     WORKFLOW_CAPS_DEFAULT = Object.freeze({
       maxParallelArms: 16,
       maxForeachConcurrency: 16,
@@ -5501,78 +6146,6 @@ var init_dist2 = __esm({
       op: "not",
       arg
     }), "not");
-    WorkflowTemplateError = class extends Error {
-      static {
-        __name(this, "WorkflowTemplateError");
-      }
-      static {
-        __name3(this, "WorkflowTemplateError");
-      }
-      placeholder;
-      constructor(message, placeholder) {
-        super(message), this.placeholder = placeholder;
-        this.name = "WorkflowTemplateError";
-      }
-    };
-    __name(isMapConfigObject, "isMapConfigObject");
-    __name3(isMapConfigObject, "isMapConfigObject");
-    __name(parseMapConfig, "parseMapConfig");
-    __name3(parseMapConfig, "parseMapConfig");
-    __name(mapConfigWire, "mapConfigWire");
-    __name3(mapConfigWire, "mapConfigWire");
-    TEMPLATE_PLACEHOLDER = /\$\{([^}]*)\}/g;
-    TEMPLATE_NAMESPACES = [
-      "initData",
-      "state",
-      "requestContext",
-      "stepResults"
-    ];
-    __name(describeBadPlaceholder, "describeBadPlaceholder");
-    __name3(describeBadPlaceholder, "describeBadPlaceholder");
-    __name(parseTemplatePlaceholder, "parseTemplatePlaceholder");
-    __name3(parseTemplatePlaceholder, "parseTemplatePlaceholder");
-    __name(traverseMappingPath, "traverseMappingPath");
-    __name3(traverseMappingPath, "traverseMappingPath");
-    __name(stringifyTemplateValue, "stringifyTemplateValue");
-    __name3(stringifyTemplateValue, "stringifyTemplateValue");
-    __name(escapeFence, "escapeFence");
-    __name3(escapeFence, "escapeFence");
-    __name(fenceBlock, "fenceBlock");
-    __name3(fenceBlock, "fenceBlock");
-    __name(renderTemplate, "renderTemplate");
-    __name3(renderTemplate, "renderTemplate");
-    __name(resolveDescriptor, "resolveDescriptor");
-    __name3(resolveDescriptor, "resolveDescriptor");
-    __name(resolveMapping, "resolveMapping");
-    __name3(resolveMapping, "resolveMapping");
-    fromInit = /* @__PURE__ */ __name3((path3) => ({
-      initData: true,
-      path: path3
-    }), "fromInit");
-    fromStep = /* @__PURE__ */ __name3((s, path3 = "") => {
-      const idOf = /* @__PURE__ */ __name3((x) => typeof x === "string" ? x : x.id, "idOf");
-      return {
-        step: Array.isArray(s) ? s.map(idOf) : idOf(s),
-        path: path3
-      };
-    }, "fromStep");
-    value = /* @__PURE__ */ __name3((v) => ({
-      value: v
-    }), "value");
-    template = /* @__PURE__ */ __name3((s) => ({
-      template: s
-    }), "template");
-    fromRequest = /* @__PURE__ */ __name3((path3) => ({
-      requestContextPath: path3
-    }), "fromRequest");
-    rows = /* @__PURE__ */ __name3((s, path3, page) => ({
-      step: typeof s === "string" ? s : s.id,
-      path: path3,
-      rows: page
-    }), "rows");
-    fromKnowledge = /* @__PURE__ */ __name3((k) => ({
-      knowledge: k
-    }), "fromKnowledge");
     CONTINUED_FAILURE_TAG = "continued_failure";
     CONTINUED_FAILURE_DEFAULT_CODE = "step_failed";
     CONTINUED_FAILURE_OUTPUT_SCHEMA = Object.freeze({
@@ -5625,8 +6198,8 @@ var init_dist2 = __esm({
     __name(isContinuedFailureValue, "isContinuedFailureValue");
     __name3(isContinuedFailureValue, "isContinuedFailureValue");
     isHitlNode2 = /* @__PURE__ */ __name3((n2) => isWorkflowHitlEntryType(n2.type), "isHitlNode");
-    __name(lowerContainerArm, "lowerContainerArm");
-    __name3(lowerContainerArm, "lowerContainerArm");
+    __name(inlineContainerArm, "inlineContainerArm");
+    __name3(inlineContainerArm, "inlineContainerArm");
     nodeIdOf = /* @__PURE__ */ __name3((n2) => n2.type === "step" ? n2.step.id : n2.id, "nodeIdOf");
     __name(entryIds, "entryIds");
     __name3(entryIds, "entryIds");
@@ -5686,6 +6259,12 @@ var init_dist2 = __esm({
     __name3(isTerminalRunStatus, "isTerminalRunStatus");
     __name(pruneUndefined, "pruneUndefined");
     __name3(pruneUndefined, "pruneUndefined");
+    WORKFLOW_INLINE_RUN_TAG = "inline";
+    __name(runOrigin, "runOrigin");
+    __name3(runOrigin, "runOrigin");
+    RUN_ERROR_ISSUES_MAX = 20;
+    __name(runErrorIssues, "runErrorIssues");
+    __name3(runErrorIssues, "runErrorIssues");
     __name(runNextAction, "runNextAction");
     __name3(runNextAction, "runNextAction");
     IN_FLIGHT = new Set(WORKFLOW_STEP_IN_FLIGHT);
@@ -5698,8 +6277,20 @@ var init_dist2 = __esm({
     n = /* @__PURE__ */ __name3((v) => typeof v === "number" && Number.isFinite(v) ? v : 0, "n");
     __name(runCounts, "runCounts");
     __name3(runCounts, "runCounts");
+    __name(isPricedStepReceipt, "isPricedStepReceipt");
+    __name3(isPricedStepReceipt, "isPricedStepReceipt");
+    __name(receiptEngine, "receiptEngine");
+    __name3(receiptEngine, "receiptEngine");
+    __name(receiptTier, "receiptTier");
+    __name3(receiptTier, "receiptTier");
+    __name(stepBillingView, "stepBillingView");
+    __name3(stepBillingView, "stepBillingView");
     __name(runUsage, "runUsage");
     __name3(runUsage, "runUsage");
+    __name(runBudgetCap, "runBudgetCap");
+    __name3(runBudgetCap, "runBudgetCap");
+    __name(runBudgetRemaining, "runBudgetRemaining");
+    __name3(runBudgetRemaining, "runBudgetRemaining");
     __name(runCancelView, "runCancelView");
     __name3(runCancelView, "runCancelView");
     __name(runWorkspaceView, "runWorkspaceView");
@@ -5834,86 +6425,6 @@ var init_dist2 = __esm({
     __name3(applyJsonPatch, "applyJsonPatch");
     __name(rebaseItemPointer, "rebaseItemPointer");
     __name3(rebaseItemPointer, "rebaseItemPointer");
-    APPROVER_SPEC_MAX_USERS = 20;
-    ESCALATION_MAX_HOPS = 3;
-    TemplateBindingSchema = z22.object({
-      template: z22.string().min(1).max(2048)
-    }).strict();
-    ApproverSpecSchema = z22.union([
-      z22.literal("creator"),
-      z22.literal("org-admins"),
-      z22.object({
-        users: z22.union([
-          z22.array(z22.string().min(1).max(128)).min(1).max(APPROVER_SPEC_MAX_USERS),
-          TemplateBindingSchema
-        ])
-      }).strict(),
-      z22.object({
-        role: z22.union([
-          z22.string().min(1).max(128),
-          TemplateBindingSchema
-        ])
-      }).strict(),
-      z22.object({
-        group: z22.union([
-          z22.string().min(1).max(128),
-          TemplateBindingSchema
-        ])
-      }).strict(),
-      z22.object({
-        governance: z22.object({
-          policyId: z22.string().min(1).max(128)
-        }).strict()
-      }).strict()
-    ]);
-    FourEyesSchema = z22.object({
-      edit: ApproverSpecSchema,
-      approve: ApproverSpecSchema
-    }).strict();
-    EscalationHopSchema = z22.object({
-      escalateTo: ApproverSpecSchema,
-      timeoutHours: z22.number().finite().min(1).max(720)
-    }).strict();
-    TerminalOutcomeSchema = z22.enum([
-      "deny",
-      "cancel-run",
-      "fail",
-      "continue"
-    ]);
-    ApprovalOnTimeoutSchema = z22.union([
-      TerminalOutcomeSchema,
-      EscalationHopSchema,
-      z22.array(z22.union([
-        TerminalOutcomeSchema,
-        EscalationHopSchema
-      ])).min(1).max(ESCALATION_MAX_HOPS + 1)
-    ]);
-    APPROVER_SPEC_SHAPES = [
-      "'creator'",
-      "'org-admins'",
-      "{users:[userId, \u2026]}",
-      "{role:roleName}",
-      "{group:groupName}",
-      "{governance:{policyId}}"
-    ];
-    APPROVER_WRITTEN_MAX = 120;
-    USER_ID_SHAPED_RE = /^[^\s@]{1,128}$/;
-    __name(describeApproverSpecRefusal, "describeApproverSpecRefusal");
-    __name3(describeApproverSpecRefusal, "describeApproverSpecRefusal");
-    BINDING_ROOTS = [
-      "initData",
-      "stepResults",
-      "requestContext",
-      "state"
-    ];
-    __name(bindingRootsOk, "bindingRootsOk");
-    __name3(bindingRootsOk, "bindingRootsOk");
-    __name(isTemplateBinding, "isTemplateBinding");
-    __name3(isTemplateBinding, "isTemplateBinding");
-    __name(validateApproverBlock, "validateApproverBlock");
-    __name3(validateApproverBlock, "validateApproverBlock");
-    __name(liftRenderedApprover, "liftRenderedApprover");
-    __name3(liftRenderedApprover, "liftRenderedApprover");
     WORKFLOW_ENV_OVERLAY_MAX_KEYS = 64;
     WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES = 4096;
     WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE = /(SECRET|TOKEN|KEY|PASSWORD)$/;
@@ -6016,14 +6527,13 @@ function stepNodeOf(s) {
 }
 function materializeEntry(entry, steps) {
   const single = /* @__PURE__ */ __name((n2) => {
-    if (n2.type === "step" && steps[n2.step.id]) return stepNodeOf(steps[n2.step.id]);
-    if (n2.type === "workflow" && n2.workflowId === WORKFLOW_ARM_SUBRUN_ID && n2.graph) return {
-      ...n2,
-      graph: [
-        n2.graph[0],
-        single(n2.graph[1])
-      ]
-    };
+    if (n2.type === "step" && steps[n2.step.id]) {
+      const node = stepNodeOf(steps[n2.step.id]);
+      return n2.input !== void 0 ? {
+        ...node,
+        input: n2.input
+      } : node;
+    }
     return n2;
   }, "single");
   switch (entry.type) {
@@ -6181,6 +6691,10 @@ var init_workflow = __esm({
     }, "assertPredicate");
     assertRetry = /* @__PURE__ */ __name((r, id) => {
       if (!r) return;
+      if (r.maxAttempts !== void 0 && !isWithinWorkflowRetryAttempts(r.maxAttempts)) {
+        const over = typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS;
+        throw new LuaWorkflowBuildError(over ? "cap-exceeded" : "invalid-envelope", `"${id}": ${workflowRetryMaxAttemptsMessage(r.maxAttempts)}`);
+      }
       if (r.backoff !== void 0 && !WORKFLOW_RETRY_BACKOFFS.includes(r.backoff)) throw new LuaWorkflowBuildError("backoff-invalid", `"${id}": retry.backoff must be ${WORKFLOW_RETRY_BACKOFFS.map((b) => `'${b}'`).join(" | ")}`);
       if (r.maxBackoffSeconds !== void 0) {
         if (r.backoff !== "exponential") throw new LuaWorkflowBuildError("backoff-invalid", `"${id}": retry.maxBackoffSeconds is only meaningful with backoff:'exponential'`);
@@ -6950,6 +7464,197 @@ var init_auth_error = __esm({
   }
 });
 
+// src/errors/cli.error.ts
+function isAccessDeniedError(error) {
+  if (CliError.isCliError(error)) return error.statusCode === 403;
+  return error instanceof Error && error.message.startsWith("Access denied (403)");
+}
+function authHint(error) {
+  if (error.suppressDefaultRemediation) return void 0;
+  if (error.reason === "no_agent_access") {
+    return [
+      "Your API key is valid, but it does not have access to the agentId in lua.skill.yaml \u2014 the agent belongs",
+      "to another account or organization, was deleted or transferred, or the yaml was copied from another project.",
+      "Check the configured agent and switch if needed:",
+      "  lua agents          (list agents you have access to)",
+      "  lua init            (re-select the agent for this project)"
+    ].join("\n");
+  }
+  return "Re-authenticate or check your API key: lua auth configure \xB7 https://admin.heylua.ai";
+}
+function numericStatus(error) {
+  const candidate = error.statusCode ?? error.status;
+  return typeof candidate === "number" && Number.isFinite(candidate) ? candidate : void 0;
+}
+function classifyCliError(error) {
+  if (CliError.isCliError(error)) {
+    return {
+      code: error.code,
+      exitCode: error.exitCode,
+      message: error.message,
+      hint: error.hint
+    };
+  }
+  if (AuthenticationError.isAuthenticationError(error)) {
+    return {
+      code: "auth",
+      exitCode: CLI_EXIT.AUTH,
+      message: error.message,
+      hint: authHint(error)
+    };
+  }
+  const e = typeof error === "object" && error !== null ? error : {};
+  const message = typeof e.message === "string" && e.message.length > 0 ? e.message : error instanceof Error ? error.name : String(error ?? "Unknown error");
+  if (e.name === "WorkflowLocalUsageError" || typeof e.code === "string" && e.code.startsWith("commander.")) {
+    return {
+      code: "usage",
+      exitCode: CLI_EXIT.USAGE,
+      message
+    };
+  }
+  const status = numericStatus(e);
+  if (status !== void 0) {
+    if (status === 401) return {
+      code: "auth",
+      exitCode: CLI_EXIT.AUTH,
+      message
+    };
+    if (status === 403) return {
+      code: "forbidden",
+      exitCode: CLI_EXIT.FORBIDDEN,
+      message
+    };
+    if (status === 404) return {
+      code: "not_found",
+      exitCode: CLI_EXIT.NOT_FOUND,
+      message
+    };
+    if (status >= 400 && status < 500) return {
+      code: `http_${status}`,
+      exitCode: CLI_EXIT.FORBIDDEN,
+      message
+    };
+    if (status >= 500 || status === 0) return {
+      code: "unavailable",
+      exitCode: CLI_EXIT.UNAVAILABLE,
+      message
+    };
+  }
+  const causeCode = e.cause?.code;
+  if (typeof e.code === "string" && NETWORK_ERRNO.has(e.code) || typeof causeCode === "string" && NETWORK_ERRNO.has(causeCode) || e.name === "AbortError" || e.name === "TimeoutError" || NETWORK_MESSAGE.test(message)) {
+    return {
+      code: "unavailable",
+      exitCode: CLI_EXIT.UNAVAILABLE,
+      message,
+      hint: UNAVAILABLE_HINT
+    };
+  }
+  return {
+    code: "error",
+    exitCode: CLI_EXIT.ERROR,
+    message
+  };
+}
+var CLI_EXIT, CliError, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT;
+var init_cli_error = __esm({
+  "src/errors/cli.error.ts"() {
+    "use strict";
+    init_auth_error();
+    CLI_EXIT = {
+      OK: 0,
+      ERROR: 1,
+      USAGE: 2,
+      NOT_FOUND: 3,
+      AUTH: 9,
+      FORBIDDEN: 10,
+      UNAVAILABLE: 11
+    };
+    CliError = class _CliError extends Error {
+      static {
+        __name(this, "CliError");
+      }
+      isCliError = true;
+      code;
+      exitCode;
+      hint;
+      statusCode;
+      constructor(code, message, options = {}) {
+        super(message);
+        this.name = "CliError";
+        this.code = code;
+        this.exitCode = options.exitCode ?? CLI_EXIT.ERROR;
+        this.hint = options.hint;
+        this.statusCode = options.statusCode;
+        if (Error.captureStackTrace) Error.captureStackTrace(this, _CliError);
+      }
+      /** Bad arguments, an unknown action, no project — exit 2. */
+      static usage(message, hint) {
+        return new _CliError("usage", message, {
+          exitCode: CLI_EXIT.USAGE,
+          hint
+        });
+      }
+      /** The named thing does not exist — exit 3. */
+      static notFound(message, hint) {
+        return new _CliError("not_found", message, {
+          exitCode: CLI_EXIT.NOT_FOUND,
+          hint,
+          statusCode: 404
+        });
+      }
+      /** The credential may not do this — exit 10. */
+      static forbidden(message, hint) {
+        return new _CliError("forbidden", message, {
+          exitCode: CLI_EXIT.FORBIDDEN,
+          hint,
+          statusCode: 403
+        });
+      }
+      /**
+      * An API refusal the site already holds the status of (LUA-766) — classified by the same table the top-level
+      * classifier applies to an untyped error: 401 auth · 403 forbidden · 404 not_found · other 4xx `http_<status>`
+      * (10) · 5xx / 0 unavailable (11, with the network hint unless the site gives its own) · no status `error` (1).
+      * A command that reads `response.error.statusCode` throws through here, so `lua logs` on a 503 exits 11 like
+      * every other verb instead of printing the message itself and then throwing an exit-1 `Error`.
+      */
+      static fromStatus(statusCode, message, hint) {
+        const reported = classifyCliError(Object.assign(new Error(message), {
+          statusCode
+        }));
+        const classHint = reported.exitCode === CLI_EXIT.UNAVAILABLE ? UNAVAILABLE_HINT : reported.hint;
+        return new _CliError(reported.code, message, {
+          exitCode: reported.exitCode,
+          hint: hint ?? classHint,
+          statusCode
+        });
+      }
+      static isCliError(error) {
+        return error instanceof _CliError || typeof error === "object" && error !== null && error.isCliError === true;
+      }
+    };
+    __name(isAccessDeniedError, "isAccessDeniedError");
+    NETWORK_ERRNO = /* @__PURE__ */ new Set([
+      "ECONNREFUSED",
+      "ECONNRESET",
+      "ENOTFOUND",
+      "ETIMEDOUT",
+      "EAI_AGAIN",
+      "EPIPE",
+      "EHOSTUNREACH",
+      "ENETUNREACH",
+      "UND_ERR_CONNECT_TIMEOUT",
+      "UND_ERR_HEADERS_TIMEOUT",
+      "UND_ERR_BODY_TIMEOUT",
+      "UND_ERR_SOCKET"
+    ]);
+    NETWORK_MESSAGE = /fetch failed|socket hang up|network request failed|request timeout|ECONNREFUSED|ENOTFOUND/i;
+    UNAVAILABLE_HINT = "The Lua API could not be reached \u2014 check your network and https://status.heylua.ai, then retry.";
+    __name(authHint, "authHint");
+    __name(numericStatus, "numericStatus");
+    __name(classifyCliError, "classifyCliError");
+  }
+});
+
 // src/utils/package-root.ts
 import { readFileSync, existsSync } from "fs";
 import { fileURLToPath, pathToFileURL } from "url";
@@ -7476,6 +8181,10 @@ async function* parseSseStream(body, signal) {
       if (frame) yield frame;
     }
   } finally {
+    try {
+      await reader.cancel();
+    } catch {
+    }
     try {
       reader.releaseLock();
     } catch {
@@ -7505,6 +8214,7 @@ var init_http_client = __esm({
     "use strict";
     init_dist();
     init_auth_error();
+    init_cli_error();
     init_lua_fetch();
     init_request_credential();
     DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
@@ -7568,7 +8278,7 @@ var init_http_client = __esm({
           if (AuthenticationError.isAuthenticationError(error)) {
             throw error;
           }
-          if (error instanceof Error && error.message.startsWith("Access denied (403)")) {
+          if (isAccessDeniedError(error)) {
             throw error;
           }
           if (error instanceof DOMException && error.name === "AbortError") {
@@ -7616,8 +8326,11 @@ var init_http_client = __esm({
         }
         if (response.status === 403) {
           const detail = errorData.message || "You do not have permission to access this resource.";
-          throw new Error(`Access denied (403): ${detail}
-Check that your Lua login has access to this agent or organization.`);
+          throw new CliError("forbidden", `Access denied (403): ${detail}`, {
+            exitCode: CLI_EXIT.FORBIDDEN,
+            statusCode: 403,
+            hint: "Check that your Lua login has access to this agent or organization."
+          });
         }
         return {
           success: false,
@@ -7859,6 +8572,7 @@ var init_auth = __esm({
     init_auth_api_service();
     init_constants();
     init_auth_error();
+    init_cli_error();
   }
 });
 
@@ -8086,6 +8800,9 @@ function buildSourceArchive(files) {
   const gz = zlib.gzipSync(Buffer.from(json, "utf-8"));
   return gz.toString("base64");
 }
+function getPrimitivesByKind(manifest, kind) {
+  return manifest.primitives.filter((p) => p.kind === kind);
+}
 function findPrimitive(manifest, name, kind) {
   return manifest.primitives.find((p) => {
     if (kind && p.kind !== kind) return false;
@@ -8106,6 +8823,7 @@ var init_artifact_loader = __esm({
     __name(loadOriginalSource, "loadOriginalSource");
     __name(normalizeEntryFile, "normalizeEntryFile");
     __name(buildSourceArchive, "buildSourceArchive");
+    __name(getPrimitivesByKind, "getPrimitivesByKind");
     __name(findPrimitive, "findPrimitive");
   }
 });
@@ -8752,6 +9470,7 @@ var init_base_handler = __esm({
     init_bundle_upload();
     init_semver();
     init_auth_error();
+    init_cli_error();
     DEFAULT_VERSION = SKILL_DEFAULTS.VERSION;
     BaseVersionedHandler = class {
       static {
@@ -8833,7 +9552,7 @@ var init_base_handler = __esm({
             serverItems
           };
         } catch (error) {
-          if (AuthenticationError.isAuthenticationError(error)) throw error;
+          if (AuthenticationError.isAuthenticationError(error) || isAccessDeniedError(error)) throw error;
           return {
             serverItems: null,
             fetchError: error instanceof Error ? error.message : String(error)
@@ -8863,13 +9582,24 @@ var init_base_handler = __esm({
           }
           const yamlItems = this.getFromYaml(config);
           const { yamlById, yamlByName, serverByName } = this.buildMaps(serverData.serverItems, yamlItems);
+          const idField = this.yamlConfig.idField;
+          const manifestNames = manifest ? new Set(getPrimitivesByKind(manifest, this.kind).map((p) => p.name)) : /* @__PURE__ */ new Set();
+          for (const stale of this.staleYamlRows(yamlItems, serverData.serverItems, manifestNames)) {
+            const idx = yamlItems.indexOf(stale);
+            if (idx < 0) continue;
+            const { [idField]: goneId, ...rest } = stale;
+            yamlItems[idx] = rest;
+            yamlUpdated = true;
+            const msg = `\u2139\uFE0F  ${this.displayName} "${stale.name}" (${goneId}) no longer exists on the server \u2014 re-registering it`;
+            messages.push(msg);
+            console.log(msg);
+          }
           const orphans = serverData.serverItems.filter((item) => {
             const id = item.id;
             const name = item.name;
             return !yamlById.has(id) && !yamlByName.has(name) && this.isActive(item) && this.shouldConsiderForOrphan(item);
           });
           if (orphans.length > 0) {
-            const idField = this.yamlConfig.idField;
             const stubs = orphans.map((item) => this.cleanItem({
               name: item.name,
               version: this.getActiveVersion(item) || DEFAULT_VERSION,
@@ -8912,6 +9642,7 @@ var init_base_handler = __esm({
             console.log(`\u2705 Server ${this.displayNamePlural} and YAML are fully in sync`);
           }
         } catch (error) {
+          if (AuthenticationError.isAuthenticationError(error) || isAccessDeniedError(error)) throw error;
           console.error(`\u274C Error syncing server ${this.displayNamePlural}:`, error);
         }
         return {
@@ -8968,6 +9699,7 @@ var init_base_handler = __esm({
               console.error(`   \u274C Failed to create "${item.name}" - no ID returned`);
             }
           } catch (error) {
+            if (AuthenticationError.isAuthenticationError(error) || isAccessDeniedError(error)) throw error;
             console.error(`   \u274C Failed to create "${item.name}": ${error instanceof Error ? error.message : error}`);
           }
         }
@@ -9102,6 +9834,15 @@ var init_base_handler = __esm({
       getItemId(item) {
         return item[this.yamlConfig.idField] || "";
       }
+      /**
+      * LUA-750: the yaml rows whose server id is gone (deleted server-side) and which `applySyncToYaml` should
+      * re-register. Default none — a handler whose `fetchFromServer` lists EVERY live row of its kind for the
+      * agent overrides this (a kind whose list omits inactive rows must not, or it would duplicate them).
+      * `manifestNames` is the set of primitives in local code: only those are worth re-creating.
+      */
+      staleYamlRows(_yamlItems, _serverItems, _manifestNames) {
+        return [];
+      }
       buildMaps(serverItems, yamlItems) {
         const yamlById = /* @__PURE__ */ new Map();
         const yamlByName = /* @__PURE__ */ new Map();
@@ -9500,6 +10241,7 @@ var init_cli = __esm({
   "src/utils/cli.ts"() {
     "use strict";
     init_auth_error();
+    init_cli_error();
     init_version_check();
     init_package_root();
     init_analytics();
@@ -9519,6 +10261,7 @@ var init_command_utils = __esm({
     init_request_credential();
     init_files();
     init_cli();
+    init_cli_error();
     __name(requireAuth, "requireAuth");
   }
 });
@@ -12990,6 +13733,14 @@ var init_workflow_api_service = __esm({
       async getVersionEnvOverlay(workflowId, version) {
         return this.httpGet(`${this.base}/${workflowId}/versions/${encodeURIComponent(version)}/env-overlay`, await this.auth());
       }
+      /**
+      * WF-403 (13 §13.14; LUA-752) — `GET …/:workflowId/export?version=`: the active (or named) version as pushable
+      * files (`{ form, version, files:[{ path, contents }], warnings }`). `lua workflows export` writes them to disk.
+      */
+      async exportWorkflowFiles(workflowId, version) {
+        const qs = version ? `?version=${encodeURIComponent(version)}` : "";
+        return this.httpGet(`${this.base}/${workflowId}/export${qs}`, await this.auth());
+      }
       async getWorkflowVersions(workflowId) {
         return this.httpGet(`${this.base}/${workflowId}/versions`, await this.auth());
       }
@@ -13067,7 +13818,10 @@ var init_workflow_api_service = __esm({
       async getRunReplayBundle(runId) {
         return this.httpGet(`${this.runs}/${runId}/journal?format=replay`, await this.auth());
       }
-      /** R11 — cancel (`mode:'request'` default; `'force'` after `forceAvailableAt`, 409 `FORCE_NOT_YET_AVAILABLE` before). */
+      /**
+      * R11 — cancel (`mode:'request'` default). A `'force'` before `forceAvailableAt` is the 200 verdict
+      * `{ transitioned:false, nextAction:'cancel_again', forceAvailableAt }` (PRO-979) — never a 409 (LUA-748).
+      */
       async cancelRun(runId, data = {}) {
         return this.httpPost(`${this.runs}/${runId}/cancel`, data, await this.auth());
       }
@@ -13083,6 +13837,34 @@ var init_workflow_api_service = __esm({
       async retryStep(runId, stepId, data = {}) {
         return this.httpPost(`${this.runs}/${runId}/steps/${pathId(stepId)}/retry`, data, await this.auth());
       }
+      /**
+      * R37 (LUA-752) — a human decides a parked step: `skip` it, `complete` it with the output it would have produced,
+      * or `fail` it (the step's onError policy applies). 400 `VALIDATION_FAILED{output-required}` / `RESOLVE_OUTPUT_INVALID`,
+      * 403 `APPROVAL_REQUIRES_HUMAN` / `NOT_RUN_CREATOR`, 404 `RUN_NOT_FOUND` / `STEP_NOT_FOUND`, 409 `STEP_NOT_PARKED` /
+      * `RUN_TERMINAL`, 413 `OUTPUT_TOO_LARGE`; the CAS loser is a 200 `{ resolved:false, reason, recorded }`.
+      */
+      async resolveStep(runId, stepId, data) {
+        return this.httpPost(`${this.runs}/${runId}/steps/${pathId(stepId)}/resolve`, data, await this.auth());
+      }
+      /**
+      * R45 (LUA-752) — raise a parked run's budget (`maxCredits` / `maxSteps` / `maxJobSeconds` / `maxDurationSeconds`;
+      * increases only). 400 `VALIDATION_FAILED` / `CAP_EXCEEDED`, 403 `NOT_RUN_CREATOR`, 409 `BUDGET_NOT_RAISABLE`.
+      */
+      async raiseBudget(runId, data) {
+        return this.httpPost(`${this.runs}/${runId}/budget`, data, await this.auth());
+      }
+      /**
+      * R39 (LUA-752) — the current approval payload with its `payloadFingerprint` / `editRevision` (what
+      * `approve --edit --fingerprint` echoes). `path` pages one array of a large payload.
+      */
+      async getApprovalPayload(runId, approvalId, query = {}) {
+        const q = new URLSearchParams();
+        if (query.path) q.append("path", query.path);
+        if (query.cursor) q.append("cursor", query.cursor);
+        if (query.limit !== void 0) q.append("limit", String(query.limit));
+        const qs = q.toString();
+        return this.httpGet(`${this.runs}/${runId}/approvals/${pathId(approvalId)}/payload${qs ? `?${qs}` : ""}`, await this.auth());
+      }
       /** R13 — resolve an approval (human; `expectedFingerprint` guards against an edited payload — 409 `PAYLOAD_MISMATCH`). */
       async resolveApproval(runId, approvalId, data) {
         return this.httpPost(`${this.runs}/${runId}/approvals/${pathId(approvalId)}/resolve`, data, await this.auth());
@@ -13146,6 +13928,14 @@ var init_workflow_api_service = __esm({
       async closeGoal(goalId, data = {}) {
         return this.httpPost(`${this.goals}/${encodeURIComponent(goalId)}/close`, data, await this.auth());
       }
+      /** LUA-749 R63 — edit (objective / judge / cadence / caps / note); a `budget` / `max_runs` park re-arms when the cap clears (`rearmed:true`). */
+      async updateGoal(goalId, data) {
+        return this.httpPatch(`${this.goals}/${encodeURIComponent(goalId)}`, data, await this.auth());
+      }
+      /** LUA-749 R64 — raise `maxTotalCredits` / `maxRuns` (increases only; 400 `GOAL_RAISE_BELOW_SPENT{field, value, spent}`). */
+      async raiseGoal(goalId, data) {
+        return this.httpPost(`${this.goals}/${encodeURIComponent(goalId)}/raise`, data, await this.auth());
+      }
       // ─── Schedules (R4-MF-2 list/get + R28 delete — `/workflows/:agentId/schedules`; LUA-627 stanza) ───
       /** Schedule tree (09 §9.5 — the write-only R27/R56/R28 family plus the R4-MF-2 read rows). */
       get schedules() {
@@ -13159,7 +13949,15 @@ var init_workflow_api_service = __esm({
       async getSchedule(jobId) {
         return this.httpGet(`${this.schedules}/${encodeURIComponent(jobId)}`, await this.auth());
       }
-      /** R28 — delete a schedule Job (404 `SCHEDULE_NOT_FOUND`). The CLI refuses a goal-owned job BEFORE this call (`goal_schedule`). */
+      /** R27 (LUA-752) — create or replace the plain schedule Job of a workflow (201; 400 `VALIDATION_FAILED` / `WORKFLOW_NOT_ON_AGENT`, 404 `WORKFLOW_NOT_FOUND`, 409 `SCHEDULE_CAP`). */
+      async createSchedule(data) {
+        return this.httpPost(this.schedules, data, await this.auth());
+      }
+      /** R56 (LUA-752) — pause / resume a schedule, persist `backfillOnEnable`, one-shot `backfillNow` (404 `SCHEDULE_NOT_FOUND`, 400 `VALIDATION_FAILED{issues}`). */
+      async updateSchedule(jobId, data) {
+        return this.httpPatch(`${this.schedules}/${encodeURIComponent(jobId)}`, data, await this.auth());
+      }
+      /** R28 — delete a schedule Job (404 `SCHEDULE_NOT_FOUND`). The CLI refuses a LIVE goal's job BEFORE this call (`goal_schedule`); an ended goal's lingering Job is retired here (LUA-760). */
       async deleteSchedule(jobId) {
         return this.httpDelete(`${this.schedules}/${encodeURIComponent(jobId)}`, await this.auth());
       }