lua-cli 3.32.3 → 3.32.5

package/dist/api-exports.js

@@ -353,6 +353,84 @@ function isDesktopFileCommandName(value3) {
 function isDesktopFileSessionId(value3) {
   return typeof value3 === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value3);
 }
+function isModelIdSentinel(input) {
+  const lower = (input ?? "").trim().toLowerCase();
+  return lower === "auto" || lower.startsWith("auto/");
+}
+function normalizeModelId(input, registry) {
+  const requested = typeof input === "string" ? input.trim() : "";
+  if (!requested) return {
+    ok: false,
+    reason: "empty",
+    requested,
+    candidates: []
+  };
+  const lower = requested.toLowerCase();
+  if (isModelIdSentinel(lower)) return {
+    ok: true,
+    id: lower,
+    form: "sentinel"
+  };
+  const slash = requested.indexOf("/");
+  const malformed = slash === 0;
+  const provider = slash > 0 ? lower.slice(0, slash) : void 0;
+  if (provider && MODEL_ID_BYOK_PROVIDERS.includes(provider)) {
+    return {
+      ok: true,
+      id: requested,
+      form: "byok"
+    };
+  }
+  const bareId = slash >= 0 ? lower.slice(slash + 1) : lower;
+  const lastSegment = bareId.slice(bareId.lastIndexOf("/") + 1);
+  const exact = /* @__PURE__ */ new Set();
+  const hints = /* @__PURE__ */ new Set();
+  for (const code of registry) {
+    if (typeof code !== "string" || !code) continue;
+    const codeLower = code.toLowerCase();
+    if (!malformed && codeLower === lower) return {
+      ok: true,
+      id: code,
+      form: provider ? "canonical" : "bare"
+    };
+    const i = codeLower.indexOf("/");
+    if (i < 0) continue;
+    const codeBare = codeLower.slice(i + 1);
+    if (bareId && codeBare === bareId) exact.add(code);
+    else if (lastSegment && codeBare.slice(codeBare.lastIndexOf("/") + 1) === lastSegment) hints.add(code);
+  }
+  const sorted = [
+    ...exact
+  ].sort();
+  if (!provider && !malformed && sorted.length === 1) return {
+    ok: true,
+    id: sorted[0],
+    form: "bare"
+  };
+  if (!provider && !malformed && sorted.length > 1) {
+    return {
+      ok: false,
+      reason: "ambiguous",
+      requested,
+      candidates: sorted
+    };
+  }
+  return {
+    ok: false,
+    reason: "unknown",
+    requested,
+    candidates: sorted.length ? sorted : [
+      ...hints
+    ].sort()
+  };
+}
+function modelUnresolvedMessage(r) {
+  if (r.reason === "empty") return "model pin is empty \u2014 pin an approved model (provider/model) or omit `model`";
+  if (r.reason === "ambiguous") {
+    return `model "${r.requested}" does not resolve to one approved model \u2014 it names ${r.candidates.length}; pin one of: ${r.candidates.join(", ")}`;
+  }
+  return r.candidates.length ? `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms: ${r.candidates.join(", ")}` : `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms are the registry's provider-prefixed ids (provider/model) or a bare id that names exactly one of them`;
+}
 function isImplicitModelSelectionSource(source) {
   return source !== void 0 && IMPLICIT_MODEL_SELECTION_SOURCES.includes(source);
 }
@@ -466,6 +544,11 @@ function isDeviceCredentialPrincipal(context) {
 function hasDeviceCredentialType(value3) {
   return DeviceCredentialClaimSchema.safeParse(value3).success;
 }
+function sessionAuthTime(context) {
+  if (!context || context.credential.type !== "firstPartySession") return void 0;
+  const authTime = context.authTime;
+  return typeof authTime === "number" && Number.isInteger(authTime) && authTime >= 0 && authTime <= SESSION_AUTH_TIME_MAX_S ? authTime : void 0;
+}
 function isTypedApiKeyPrincipal(context) {
   return context?.subject.subjectType === "apiKey" && context.credential.type === "apiKey" && !context.compatibility;
 }
@@ -638,6 +721,39 @@ function scheduledWorkflowRunId(jobId, scheduledTime) {
   const key = typeof scheduledTime === "number" ? String(scheduledTime) : scheduledTimeKey(scheduledTime);
   return `${WORKFLOW_SCHEDULED_RUN_ID_PREFIX}${jobId}_${key}`;
 }
+function renderWorkflowScheduleKeyTemplate(template3, ctx) {
+  if (!template3) return void 0;
+  const read = /* @__PURE__ */ __name2((path3) => path3.split(".").reduce((o, k) => o && typeof o === "object" ? o[k] : void 0, ctx.input), "read");
+  let unresolved = false;
+  const out = template3.replace(/\$\{\s*([a-zA-Z0-9_.]+)\s*\}/g, (_m, expr) => {
+    let v = "";
+    if (expr === "scheduledTime") v = ctx.scheduledTime ?? "";
+    else if (expr.startsWith("input.")) v = read(expr.slice("input.".length));
+    const s = v === void 0 || v === null ? "" : String(v);
+    if (s === "") unresolved = true;
+    return s;
+  });
+  if (unresolved) return void 0;
+  const key = out.slice(0, WORKFLOW_SCHEDULE_KEY_MAX);
+  return key && /^[A-Za-z0-9:_\-.\/]+$/.test(key) ? key : void 0;
+}
+function scheduledWorkflowIdempotencyKey(jobId, rendered) {
+  const head = `${WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX}${jobId}:`;
+  if (head.length + rendered.length <= WORKFLOW_SCHEDULE_KEY_MAX) return `${head}${rendered}`;
+  const digest = stableKeyDigest(rendered);
+  const room = WORKFLOW_SCHEDULE_KEY_MAX - head.length - digest.length - 1;
+  return `${head}${rendered.slice(0, Math.max(0, room))}~${digest}`;
+}
+function stableKeyDigest(s) {
+  let a = 2166136261;
+  let b = 84696351;
+  for (let i = 0; i < s.length; i++) {
+    const c = s.charCodeAt(i);
+    a = Math.imul(a ^ c, 16777619);
+    b = Math.imul(b ^ c, 16777619) ^ b >>> 13;
+  }
+  return (a >>> 0).toString(16).padStart(8, "0") + (b >>> 0).toString(16).padStart(8, "0");
+}
 function workflowOperationId(runId, stepId, billingEpoch) {
   return `${WORKFLOW_OPERATION_ID_PREFIX}${runId}:${stepId}:${billingEpoch}`;
 }
@@ -941,7 +1057,59 @@ function extractSingleJsonValue(text) {
     };
   }
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE;
+function agentFeatureCatalogDefault(featureName) {
+  return DEFAULT_ON_AGENT_FEATURES.includes(featureName);
+}
+function hasExplicitFeatureActive(row) {
+  return typeof row?.active === "boolean";
+}
+function effectiveFeatureActive(row, catalogDefault) {
+  return hasExplicitFeatureActive(row) ? row.active : catalogDefault;
+}
+function resolveEffectiveFeature(row, catalogDefault) {
+  return hasExplicitFeatureActive(row) ? {
+    active: row.active,
+    source: "agent",
+    default: catalogDefault
+  } : {
+    active: catalogDefault,
+    source: "default",
+    default: catalogDefault
+  };
+}
+function isFeatureRow(value3) {
+  return typeof value3 === "object" && value3 !== null;
+}
+function effectiveAgentFeatureRows(base, override) {
+  const merged = /* @__PURE__ */ new Map();
+  for (const [name, row] of Object.entries(base ?? {})) {
+    if (isFeatureRow(row)) merged.set(name, {
+      row,
+      origin: "baseAgent"
+    });
+  }
+  for (const [name, row] of Object.entries(override ?? {})) {
+    if (isFeatureRow(row)) merged.set(name, {
+      row,
+      origin: "subAgent"
+    });
+  }
+  return {
+    rows: Object.fromEntries([
+      ...merged
+    ].map(([name, e]) => [
+      name,
+      e.row
+    ])),
+    origins: Object.fromEntries([
+      ...merged
+    ].map(([name, e]) => [
+      name,
+      e.origin
+    ]))
+  };
+}
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1258,6 +1426,16 @@ var init_dist = __esm({
     __name2(isDesktopFileCommandName, "isDesktopFileCommandName");
     __name(isDesktopFileSessionId, "isDesktopFileSessionId");
     __name2(isDesktopFileSessionId, "isDesktopFileSessionId");
+    MODEL_ID_BYOK_PROVIDERS = [
+      "azure",
+      "bedrock"
+    ];
+    __name(isModelIdSentinel, "isModelIdSentinel");
+    __name2(isModelIdSentinel, "isModelIdSentinel");
+    __name(normalizeModelId, "normalizeModelId");
+    __name2(normalizeModelId, "normalizeModelId");
+    __name(modelUnresolvedMessage, "modelUnresolvedMessage");
+    __name2(modelUnresolvedMessage, "modelUnresolvedMessage");
     REASONING_EFFORT_VALUES = [
       "off",
       "minimal",
@@ -1676,6 +1854,7 @@ This text is who you are for this person. As you learn them, their name, their w
       }
     });
     IdSchema = z2.string().min(1).max(256);
+    SESSION_AUTH_TIME_MAX_S = 4102444800;
     PrincipalDescriptorSchema = z2.object({
       subjectType: SubjectTypeSchema,
       subjectId: IdSchema
@@ -1724,7 +1903,8 @@ This text is who you are for this person. As you learn them, their name, their w
       owner: PrincipalOwnerSchema.optional(),
       compatibility: z2.object({
         mode: z2.literal("legacy-owner-delegation")
-      }).strict().optional()
+      }).strict().optional(),
+      authTime: z2.number().int().nonnegative().max(SESSION_AUTH_TIME_MAX_S).optional()
     }).strict();
     DeviceCredentialPrincipalContextSchema = z2.object({
       version: z2.literal(1),
@@ -1780,6 +1960,8 @@ This text is who you are for this person. As you learn them, their name, their w
     }).passthrough();
     __name(hasDeviceCredentialType, "hasDeviceCredentialType");
     __name2(hasDeviceCredentialType, "hasDeviceCredentialType");
+    __name(sessionAuthTime, "sessionAuthTime");
+    __name2(sessionAuthTime, "sessionAuthTime");
     __name(isTypedApiKeyPrincipal, "isTypedApiKeyPrincipal");
     __name2(isTypedApiKeyPrincipal, "isTypedApiKeyPrincipal");
     __name(typedApiKeyPrincipalId, "typedApiKeyPrincipalId");
@@ -2011,6 +2193,14 @@ This text is who you are for this person. As you learn them, their name, their w
     __name2(isScheduledWorkflowRunId, "isScheduledWorkflowRunId");
     __name(scheduledWorkflowRunId, "scheduledWorkflowRunId");
     __name2(scheduledWorkflowRunId, "scheduledWorkflowRunId");
+    WORKFLOW_SCHEDULE_KEY_MAX = 128;
+    __name(renderWorkflowScheduleKeyTemplate, "renderWorkflowScheduleKeyTemplate");
+    __name2(renderWorkflowScheduleKeyTemplate, "renderWorkflowScheduleKeyTemplate");
+    WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX = "sched:";
+    __name(scheduledWorkflowIdempotencyKey, "scheduledWorkflowIdempotencyKey");
+    __name2(scheduledWorkflowIdempotencyKey, "scheduledWorkflowIdempotencyKey");
+    __name(stableKeyDigest, "stableKeyDigest");
+    __name2(stableKeyDigest, "stableKeyDigest");
     WORKFLOW_OPERATION_ID_PREFIX = "wf:";
     __name(workflowOperationId, "workflowOperationId");
     __name2(workflowOperationId, "workflowOperationId");
@@ -2456,6 +2646,23 @@ listed here; never invent a target.`;
     JSON_FENCE_RE = /```(?:json)?[ \t]*\r?\n([\s\S]*?)\r?\n?```/g;
     __name(extractSingleJsonValue, "extractSingleJsonValue");
     __name2(extractSingleJsonValue, "extractSingleJsonValue");
+    DEFAULT_ON_AGENT_FEATURES = [
+      "workflows",
+      "workflowCompose",
+      "observationalMemory"
+    ];
+    __name(agentFeatureCatalogDefault, "agentFeatureCatalogDefault");
+    __name2(agentFeatureCatalogDefault, "agentFeatureCatalogDefault");
+    __name(hasExplicitFeatureActive, "hasExplicitFeatureActive");
+    __name2(hasExplicitFeatureActive, "hasExplicitFeatureActive");
+    __name(effectiveFeatureActive, "effectiveFeatureActive");
+    __name2(effectiveFeatureActive, "effectiveFeatureActive");
+    __name(resolveEffectiveFeature, "resolveEffectiveFeature");
+    __name2(resolveEffectiveFeature, "resolveEffectiveFeature");
+    __name(isFeatureRow, "isFeatureRow");
+    __name2(isFeatureRow, "isFeatureRow");
+    __name(effectiveAgentFeatureRows, "effectiveAgentFeatureRows");
+    __name2(effectiveAgentFeatureRows, "effectiveAgentFeatureRows");
   }
 });
 
@@ -2666,6 +2873,129 @@ function resolveMapping(cfg, ctx) {
     value: result
   };
 }
+function describeApproverSpecRefusal(spec) {
+  const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
+  const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
+  const users = typeof spec === "object" && spec !== null ? spec.users : void 0;
+  const approver = typeof users === "string" && USER_ID_SHAPED_RE.test(users) ? {
+    users: [
+      users
+    ]
+  } : "creator";
+  const message = `approver ${written} is not an approver \u2014 legal: ${APPROVER_SPEC_SHAPES.join(" | ")}. 'creator' is the person who started the run: write approver:'creator' for "ask me" / "I approve"; {users:[\u2026]} takes user ids, never emails, names or {type:'user'}` + (approver === "creator" ? "" : `; here: approver:${JSON.stringify(approver)}`);
+  return {
+    approver,
+    written,
+    message
+  };
+}
+function bindingRootsOk(template22) {
+  const refs = [
+    ...template22.matchAll(/\$\{\s*([A-Za-z_$][\w$]*)/g)
+  ].map((m) => m[1]);
+  return refs.length > 0 && refs.every((r) => BINDING_ROOTS.includes(r));
+}
+function isTemplateBinding(v) {
+  return typeof v === "object" && v !== null && typeof v.template === "string";
+}
+function approvalEditable(node) {
+  if (node.editable === true) return true;
+  if (node.editable === false) return false;
+  return Array.isArray(node.editablePaths) && node.editablePaths.length > 0;
+}
+function validateApproverBlock(node, opts = {
+  path: "approval"
+}) {
+  const issues = [];
+  const push = /* @__PURE__ */ __name3((code, path3, message, severity = "error") => issues.push({
+    code,
+    path: path3,
+    severity,
+    message
+  }), "push");
+  const checkSpec = /* @__PURE__ */ __name3((spec, path3) => {
+    const r = ApproverSpecSchema.safeParse(spec);
+    if (!r.success) {
+      const users = spec?.users;
+      if (Array.isArray(users) && users.length > APPROVER_SPEC_MAX_USERS) push("cap-exceeded", path3, `at most ${APPROVER_SPEC_MAX_USERS} users`);
+      else {
+        const refusal = describeApproverSpecRefusal(spec);
+        issues.push({
+          code: "approver-invalid",
+          path: path3,
+          severity: "error",
+          message: refusal.message,
+          repair: {
+            approver: refusal.approver,
+            written: refusal.written
+          }
+        });
+      }
+      return;
+    }
+    const s = r.data;
+    if (typeof s === "object") {
+      if ("governance" in s && !opts.governanceEnabled) push("approver-governance-unavailable", path3, "governance reviewer routing is not enabled for this deployment");
+      if ("group" in s && typeof s.group === "string" && !opts.scimEnabled && opts.idpGroups?.includes(s.group)) push("approver-idp-group-unavailable", path3, "IdP-group approvers are not enabled for this deployment");
+      const binding = "users" in s ? s.users : "role" in s ? s.role : "group" in s ? s.group : void 0;
+      if (isTemplateBinding(binding)) {
+        if (!bindingRootsOk(binding.template)) push("approver-binding-invalid", `${path3}.template`, "binding root must be initData / stepResults / requestContext / state");
+        if ("users" in s && opts.customerReachable) push("approver-binding-customer-reachable", `${path3}.users`, "a customer-reachable workflow may not bind its approver list");
+      }
+    }
+  }, "checkSpec");
+  if (node.approver !== void 0) checkSpec(node.approver, `${opts.path}.approver`);
+  if (node.fourEyes !== void 0) {
+    const r = FourEyesSchema.safeParse(node.fourEyes);
+    if (!r.success) push("approver-invalid", `${opts.path}.fourEyes`, "fourEyes needs { edit, approve } approver specs");
+    else {
+      checkSpec(r.data.edit, `${opts.path}.fourEyes.edit`);
+      checkSpec(r.data.approve, `${opts.path}.fourEyes.approve`);
+    }
+    if (!approvalEditable(node)) push("four-eyes-requires-editable", `${opts.path}.fourEyes`, "fourEyes requires editable:true");
+    if (node.approver !== void 0) push("four-eyes-overrides-approver", `${opts.path}.approver`, "fourEyes replaces approver", "warning");
+    if (node.itemsPath) push("four-eyes-items-unsupported", `${opts.path}.fourEyes`, "fourEyes cannot combine with itemsPath");
+  }
+  if (node.excludeInitiator && (node.approver === void 0 || node.approver === "creator") && !node.fourEyes) push("approver-excludes-only-candidate", `${opts.path}.excludeInitiator`, "'creator' with excludeInitiator leaves no approver");
+  if (Array.isArray(node.onTimeout)) {
+    const chain = node.onTimeout;
+    const hops = chain.filter((m) => typeof m === "object" && m !== null && "escalateTo" in m);
+    if (hops.length > ESCALATION_MAX_HOPS) push("escalation-chain-too-long", `${opts.path}.onTimeout`, `at most ${ESCALATION_MAX_HOPS} hops`);
+    const last = chain[chain.length - 1];
+    if (typeof last === "object" && last !== null) push("escalation-chain-not-terminal", `${opts.path}.onTimeout`, "a chain must end in deny | cancel-run | fail");
+    hops.forEach((h, i) => checkSpec(h.escalateTo, `${opts.path}.onTimeout[${i}].escalateTo`));
+  } else if (typeof node.onTimeout === "object" && node.onTimeout !== null) {
+    checkSpec(node.onTimeout.escalateTo, `${opts.path}.onTimeout.escalateTo`);
+  }
+  return issues;
+}
+function liftRenderedApprover(row, rendered) {
+  const text = (rendered ?? "").trim();
+  if (!text) return null;
+  if (row === "users") {
+    let members = null;
+    if (text.startsWith("[")) {
+      try {
+        members = JSON.parse(text);
+      } catch {
+        return null;
+      }
+    } else members = text.split(",").map((s) => s.trim());
+    if (!Array.isArray(members) || members.length === 0 || members.length > APPROVER_SPEC_MAX_USERS) return null;
+    if (!members.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128)) return null;
+    return {
+      users: [
+        ...new Set(members)
+      ].sort()
+    };
+  }
+  if (text.length > 128 || text.startsWith("[") || text.startsWith("{")) return null;
+  return row === "role" ? {
+    role: text
+  } : {
+    group: text
+  };
+}
 function workspaceTemplatePath(template22) {
   const key = template22.trim();
   const expr = WORKSPACE_TEMPLATE_EXPR_RE.exec(key);
@@ -2682,6 +3012,9 @@ function retryBackoffs() {
 function sleepUntilUnsupportedMessage(id) {
   return `the engine does not execute \`sleepUntil\` yet (node "${id}") \u2014 replace it with a \`sleep\` node with a \`duration\` in ms, e.g. { type: 'sleep', id: '${id}', duration: ${SLEEP_UNTIL_REPLACEMENT.duration} }`;
 }
+function armSubrunUnsupportedMessage(id, workflowId) {
+  return `the engine does not execute the implicit \`${workflowId}\` arm subrun (node "${id}") \u2014 a [map, step] container arm is the step itself with the map as its \`input\` since lua-cli 3.32.4; re-run \`lua compile\` with the current CLI (a hand-written artifact: put the map on the arm node's \`input\` and drop the \`workflow\` wrapper)`;
+}
 function fillPolicy(node, defaultTimeout) {
   if (node.tier === void 0 && node.workspace !== void 0 && node.workspace !== "inherit") node.tier = "job";
   if (node.timeoutSeconds === void 0) node.timeoutSeconds = node.tier === "job" ? WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS : defaultTimeout;
@@ -2707,7 +3040,6 @@ function fillSingle(node) {
       fillPolicy(node, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS);
       return;
     case "workflow":
-      if (node.workflowId === WORKFLOW_ARM_SUBRUN_ID && Array.isArray(node.graph) && node.graph[1]) fillSingle(node.graph[1]);
       return;
   }
 }
@@ -2839,8 +3171,14 @@ function nodeStepRefs(entry) {
     case "agent": {
       const a = entry;
       const p = a.promptTemplate;
-      return typeof p === "string" ? templateStepRefs(p) : p && "template" in p ? templateStepRefs(p.template) : [];
+      const prompt = typeof p === "string" ? templateStepRefs(p) : p && "template" in p ? templateStepRefs(p.template) : [];
+      return [
+        ...prompt,
+        ...mapConfigStepRefs(a.input)
+      ];
     }
+    case "step":
+      return mapConfigStepRefs(entry.input);
     case "tool":
       return mapConfigStepRefs(entry.input);
     case "workflow":
@@ -2957,7 +3295,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     const id = singleId(node);
     const unknown = unknownWorkflowRetryMembers(r);
     if (unknown.length) err("invalid-envelope", workflowRetryUnknownMembersMessage(unknown), `${path3}.retry`, id);
-    if (r.maxAttempts !== void 0 && !isWithinWorkflowRetryAttempts(r.maxAttempts)) {
+    if (!isWithinWorkflowRetryAttempts(r.maxAttempts)) {
       const over = typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS;
       err(over ? "cap-exceeded" : "invalid-envelope", workflowRetryMaxAttemptsMessage(r.maxAttempts), `${path3}.retry.maxAttempts`, id);
     }
@@ -3057,6 +3395,21 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("job-tier-provider-unsupported", `model provider '${provider}' is outside LUA_WF_JOB_PROVIDERS [${opts.policy.jobProviders.join(", ")}]`, `${path3}.model`, id);
     }
   }, "checkTier");
+  const checkModel = /* @__PURE__ */ __name3((node, path3) => {
+    if (node.type !== "agent" || typeof node.model !== "string") return;
+    const registry = opts.approvedModels;
+    if (registry === void 0) return;
+    const id = singleId(node);
+    if (registry === "unavailable") {
+      const pin = node.model.trim();
+      if (pin && !normalizeModelId(pin, []).ok) {
+        warn("model-unresolved", `model "${pin}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`, `${path3}.model`, id);
+      }
+      return;
+    }
+    const resolved = normalizeModelId(node.model, registry);
+    if (!resolved.ok) err("model-unresolved", modelUnresolvedMessage(resolved), `${path3}.model`, id);
+  }, "checkModel");
   const checkWorkspace = /* @__PURE__ */ __name3((node, path3) => {
     const id = singleId(node);
     const ws = workspaceOf(node);
@@ -3109,38 +3462,29 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
   }, "checkMapMembers");
   const checkInputShape = /* @__PURE__ */ __name3((node, path3) => {
-    if (node.type !== "tool" && node.type !== "workflow") return;
     const input = node.input;
     if (input === void 0) return;
+    const id = singleId(node);
     if (input !== null && typeof input === "object" && !Array.isArray(input)) {
-      checkMapMembers(input, `${path3}.input`, node.id);
+      checkMapMembers(input, `${path3}.input`, id);
       return;
     }
-    err("invalid-envelope", `\`input\` must be an object map \u2014 each member a binding descriptor ({initData:true, path} | {step, path} | {value} | {template} | {requestContextPath}) or a JSON literal (got ${JSON.stringify(input)})`, `${path3}.input`, node.id);
+    err("invalid-envelope", `\`input\` must be an object map \u2014 each member a binding descriptor ({initData:true, path} | {step, path} | {value} | {template} | {requestContextPath}) or a JSON literal (got ${JSON.stringify(input)})`, `${path3}.input`, id);
   }, "checkInputShape");
+  const checkBodyInput = /* @__PURE__ */ __name3((body, path3, container) => {
+    if (body.type === "workflow" || body.input === void 0) return;
+    err("arm-input-unsupported", container === "foreach" ? `a foreach body receives each item as its input \u2014 drop \`input\` on "${singleId(body)}" and map the items before the foreach instead` : `a loop body receives the previous output as its input \u2014 drop \`input\` on "${singleId(body)}" and put the map before the loop instead`, `${path3}.input`, singleId(body));
+  }, "checkBodyInput");
   const checkSingle = /* @__PURE__ */ __name3((node, path3, depth) => {
     recordOutputSchema(node);
-    if (node.type === "workflow" && node.workflowId === WORKFLOW_ARM_SUBRUN_ID) {
+    if (node.type === "workflow" && (typeof node.workflowId !== "string" || node.workflowId.length === 0)) {
       checkId(node.id, path3);
-      const body = node.graph;
-      if (!Array.isArray(body) || body.length !== 2 || body[0]?.type !== "mapping" || !body[1]) {
-        err("container-arm-empty", "an implicit arm subrun needs a [mapping, step] body", `${path3}.graph`, node.id);
-        return;
-      }
-      if (body[1].type === "mapping") {
-        err("container-arm-empty", "a bare mapping arm has nothing to run", `${path3}.graph.1`, node.id);
-        return;
-      }
-      const inner = body[1];
-      if (isHitlNode(inner)) {
-        err("node-type-unsupported-in-container", workflowHitlArmShapeMessage(inner.type, inner.id, "mapped-arm"), `${path3}.graph.1`, inner.id);
-        return;
-      }
-      upstream.add(singleId(body[1]));
-      checkArm(body[0], `${path3}.graph.0`, depth, "parallel");
-      checkSingle(body[1], `${path3}.graph.1`, depth);
-      upstream.add(body[0].id);
-      upstream.add(singleId(body[1]));
+      err("invalid-envelope", `\`workflowId\` must be a non-empty string naming the workflow to start (got ${JSON.stringify(node.workflowId)})`, `${path3}.workflowId`, node.id);
+      return;
+    }
+    if (node.type === "workflow" && (node.workflowId.startsWith("$") || Array.isArray(node.graph))) {
+      checkId(node.id, path3);
+      err("node-type-unsupported-by-engine", armSubrunUnsupportedMessage(node.id, node.workflowId), path3, node.id);
       return;
     }
     checkId(singleId(node), path3);
@@ -3148,6 +3492,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     checkInputShape(node, path3);
     checkTimeout(node, path3);
     checkTier(node, path3);
+    checkModel(node, path3);
     checkRetry(node, path3);
     checkWorkspace(node, path3);
     if (!opts.static) {
@@ -3170,7 +3515,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.type === "workflow" && node.kind === "subrun" && depth > caps.maxNestingDepth) {
       err("cap-exceeded", `nesting depth ${depth} exceeds ${caps.maxNestingDepth}`, path3, node.id);
     }
-    if (node.type === "workflow" && node.workflowId !== WORKFLOW_ARM_SUBRUN_ID && typeof g.definition?.id === "string" && node.workflowId === g.definition.id) {
+    if (node.type === "workflow" && typeof g.definition?.id === "string" && node.workflowId === g.definition.id) {
       err("subrun-cycle", `"${node.id}" starts "${node.workflowId}", which is this workflow itself`, path3, node.id);
     }
     for (const ref of nodeStepRefs(node)) {
@@ -3191,11 +3536,14 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (a.approver === "creator" && a.excludeInitiator === true) {
       err("approver-excludes-only-candidate", "approver:'creator' with excludeInitiator:true always excludes the only candidate", path3, a.id);
     }
-    if (a.fourEyes !== void 0 && a.editable !== true) {
+    const editable = approvalEditable(a);
+    if (a.fourEyes !== void 0 && !editable) {
       err("four-eyes-requires-editable", "`fourEyes` requires editable:true", `${path3}.fourEyes`, a.id);
     }
-    if ((a.editablePaths !== void 0 || a.editedPayloadSchema !== void 0) && a.editable !== true) {
-      err("editable-path-invalid", "`editablePaths` / `editedPayloadSchema` require editable:true", `${path3}.editablePaths`, a.id);
+    if (a.editable === false && Array.isArray(a.editablePaths) && a.editablePaths.length > 0) {
+      err("editable-path-invalid", "`editablePaths` beside editable:false is contradictory \u2014 drop the paths or set editable:true", `${path3}.editablePaths`, a.id);
+    } else if ((a.editablePaths !== void 0 || a.editedPayloadSchema !== void 0) && !editable) {
+      err("editable-path-invalid", "`editablePaths` / `editedPayloadSchema` require editable:true (a non-empty editablePaths implies it)", `${path3}.editablePaths`, a.id);
     }
     for (const p of a.editablePaths ?? []) {
       if (!EDITABLE_PATH_RE.test(p)) err("editable-path-invalid", `editablePaths entry "${p}" is outside the seg(.seg)*[*]/[n] grammar`, `${path3}.editablePaths`, a.id);
@@ -3376,6 +3724,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
           } else checkHitlArm(f.step, `${path3}.step`, "foreach");
           declared.push(f.step.id);
         } else {
+          checkBodyInput(f.step, `${path3}.step`, "foreach");
           checkSingle(f.step, `${path3}.step`, o.chunk ? 2 : 1);
           declared.push(singleId(f.step));
         }
@@ -3396,6 +3745,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
           checkHitlArm(l.step, `${path3}.step`, "loop");
           declared.push(l.step.id);
         } else {
+          checkBodyInput(l.step, `${path3}.step`, "loop");
           checkSingle(l.step, `${path3}.step`, 1);
           declared.push(singleId(l.step));
         }
@@ -3869,17 +4219,10 @@ function isContinuedFailureValue(v) {
   const err = o.error;
   return o.__lua_workflow === CONTINUED_FAILURE_TAG && o.failed === true && o.text === "" && err !== null && typeof err === "object" && typeof err.code === "string" && typeof err.message === "string";
 }
-function lowerContainerArm(mapping, step22) {
-  const stepId = nodeIdOf(step22);
+function inlineContainerArm(mapping, step22) {
   return {
-    type: "workflow",
-    id: `${stepId}_arm`,
-    workflowId: WORKFLOW_ARM_SUBRUN_ID,
-    kind: "subrun",
-    graph: [
-      mapping,
-      step22
-    ]
+    ...step22,
+    input: parseMapConfig(mapping.mapConfig, mapping.id)
   };
 }
 function entryIds(entry) {
@@ -3949,6 +4292,27 @@ function resolvePlacements(calls) {
         break;
     }
   });
+  const armMapPlacementIssue = /* @__PURE__ */ __name3((node, ref, i, container) => {
+    if (!ref.armMap || node.type === "mapping" || isHitlNode2(node)) return void 0;
+    const id = nodeIdOf(node);
+    if ((container === "foreach" || container === "loop") && node.type !== "workflow") {
+      return {
+        code: "mapping-placement",
+        message: container === "foreach" ? `foreach body "${id}": a [map, step] body is not supported \u2014 the body receives each item as its input; map the items before the foreach instead (foreach(step, { items: \u2026 }) or a .map() before it)` : `loop body "${id}": a [map, step] body is not supported \u2014 the body receives the previous output as its input; put the .map() before the loop instead`,
+        callIndex: i,
+        stepId: id
+      };
+    }
+    if (node.input !== void 0) {
+      return {
+        code: "mapping-placement",
+        message: `"${id}": the [map, step] arm mapping and the node's own input map would both bind its input \u2014 keep one (drop the arm map, or the \`input\` on the declaration)`,
+        callIndex: i,
+        stepId: id
+      };
+    }
+    return void 0;
+  }, "armMapPlacementIssue");
   const hitlPlacementIssue = /* @__PURE__ */ __name3((node, ref, i, container) => {
     if (!isHitlNode2(node)) return void 0;
     const id = node.id;
@@ -3975,7 +4339,7 @@ function resolvePlacements(calls) {
       if (ref.node.type === "mapping" && !allowMapping) {
         issues.push({
           code: "mapping-placement",
-          message: `mapping "${ref.node.id}" cannot be a container arm \u2014 chain it as [map, step]`,
+          message: `mapping "${ref.node.id}" cannot be a container arm \u2014 chain it as [map, step] in a parallel / conditional arm, or place the .map() before the container`,
           callIndex: i,
           stepId: ref.node.id
         });
@@ -3996,7 +4360,7 @@ function resolvePlacements(calls) {
     if (d.node.type === "mapping" && !allowMapping) {
       issues.push({
         code: "mapping-placement",
-        message: `map "${ref.ref}" cannot be a parallel/foreach/loop arm \u2014 chain it as [map, step]`,
+        message: `map "${ref.ref}" cannot be a parallel/foreach/loop arm \u2014 chain it as [map, step] in a parallel arm, or place the .map() before the container`,
         callIndex: i,
         stepId: ref.ref
       });
@@ -4007,6 +4371,11 @@ function resolvePlacements(calls) {
       issues.push(hitl);
       return void 0;
     }
+    const mapped = armMapPlacementIssue(d.node, ref, i, container);
+    if (mapped) {
+      issues.push(mapped);
+      return void 0;
+    }
     const prior = placedBy.get(ref.ref);
     if (prior !== void 0 && prior !== i) {
       issues.push({
@@ -4027,6 +4396,10 @@ function resolvePlacements(calls) {
     }
     const hitl = hitlPlacementIssue(ref.node, ref, i, container);
     if (hitl) issues.push(hitl);
+    else {
+      const mapped = armMapPlacementIssue(ref.node, ref, i, container);
+      if (mapped) issues.push(mapped);
+    }
   }, "claim");
   calls.forEach((call, i) => {
     switch (call.kind) {
@@ -4054,7 +4427,7 @@ function resolvePlacements(calls) {
   const lookup = /* @__PURE__ */ __name3((ref) => {
     const n2 = "node" in ref ? ref.node : declared.get(ref.ref)?.node;
     if (!n2 || !ref.armMap || n2.type === "mapping" || isHitlNode2(n2)) return n2;
-    return lowerContainerArm(ref.armMap, n2);
+    return inlineContainerArm(ref.armMap, n2);
   }, "lookup");
   calls.forEach((call, i) => {
     switch (call.kind) {
@@ -4439,9 +4812,31 @@ function isTerminalRunStatus(status) {
 function pruneUndefined(o) {
   return Object.fromEntries(Object.entries(o).filter(([, v]) => v !== void 0));
 }
+function runOrigin(run) {
+  if (run.goalId) return "goal";
+  if (run.jobId || run.trigger === "schedule") return "schedule";
+  if (run.dynamic === true) return run.tags?.includes(WORKFLOW_INLINE_RUN_TAG) ? "inline" : "compose";
+  return "definition";
+}
+function runErrorIssues(issues) {
+  if (!Array.isArray(issues)) return void 0;
+  const out = [];
+  for (const raw of issues.slice(0, RUN_ERROR_ISSUES_MAX)) {
+    if (!raw || typeof raw !== "object") continue;
+    const o = raw;
+    if (typeof o.code !== "string" || !o.code) continue;
+    out.push(pruneUndefined({
+      code: o.code,
+      path: typeof o.path === "string" ? o.path : void 0,
+      message: typeof o.message === "string" ? o.message : void 0
+    }));
+  }
+  return out.length ? out : void 0;
+}
 function runNextAction(run) {
   if (isTerminalRunStatus(run.status)) return "none";
   if (run.status === "suspended" && run.gate?.kind === "budget") return "raise_budget";
+  if (run.status === "suspended" && run.gate?.kind === "billing") return "top_up";
   if (!run.cancel?.requestedAt) return "none";
   const forceAt = run.cancel.forceAfter ?? run.cancel.requestedAt + FORCE_CANCEL_STALE_MS;
   return Date.now() >= forceAt ? "force" : "cancel_again";
@@ -4469,6 +4864,12 @@ function runCountsFromStepStatuses(statuses) {
   for (const s of statuses) tally[s] = (tally[s] ?? 0) + 1;
   return runCountsFromStatusTally(tally);
 }
+function isBillingHeldStep(row) {
+  return row.status === "ready" && row.billingHold === true;
+}
+function stepEffectiveStatus(row) {
+  return isBillingHeldStep(row) ? "suspended" : row.status;
+}
 function runCounts(counts) {
   const c = counts ?? {};
   const rawInFlight = c.dispatched !== void 0 || c.claimed !== void 0 || c.running !== void 0 || c.cancellation_requested !== void 0;
@@ -4608,6 +5009,7 @@ function toWorkflowRunSummary(run) {
     repairOf: run.repairOf,
     repairRunIds: run.repairRunIds,
     trigger: run.trigger ?? "api",
+    origin: runOrigin(run),
     createdBy: {
       subjectType: principal?.subjectType ?? "system",
       subjectId: principal?.subjectId ?? run.userId ?? ""
@@ -4625,11 +5027,13 @@ function toWorkflowRunSummary(run) {
     usage: runUsage(run),
     // LUA-697: a row persisted before the write seams (#2406 / #2465 / the script tier) leaves scrubbed here too —
     // idempotent on a scrubbed message, bounded input; an empty message falls back to the code.
-    error: run.error ? {
+    error: run.error ? pruneUndefined({
       code: run.error.code ?? "error",
       message: scrubStepErrorMessage(run.error.message) ?? run.error.code ?? "error",
-      stepId: run.error.stepId
-    } : void 0,
+      stepId: run.error.stepId,
+      // LUA-784 (item 3): the unattended pre-start failure's refusal rows (`input_schema_invalid` and kin).
+      issues: runErrorIssues(run.error.issues)
+    }) : void 0,
     kind: "run",
     aclHash: run.aclHash,
     migration: run.migration,
@@ -5129,147 +5533,29 @@ function applyJsonPatch(doc, ops) {
       ok: false,
       code: "PATCH_INVALID",
       index: i,
-      path: op.path,
-      message: "path not allowed"
-    };
-    if (op.op === "add") obj[key] = structuredClone(op.value);
-    else if (!(key in obj)) return {
-      ok: false,
-      code: "PATH_NOT_FOUND",
-      index: i,
-      path: op.path,
-      message: "path not found"
-    };
-    else if (op.op === "replace") obj[key] = structuredClone(op.value);
-    else delete obj[key];
-  }
-  return {
-    ok: true,
-    value: value22
-  };
-}
-function rebaseItemPointer(pointer, itemsPath, index) {
-  const base = `/${itemsPath.split(".").map(escapePointer).join("/")}/${index}`;
-  return pointer === "/" || pointer === "" ? base : `${base}${pointer}`;
-}
-function describeApproverSpecRefusal(spec) {
-  const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
-  const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
-  const users = typeof spec === "object" && spec !== null ? spec.users : void 0;
-  const approver = typeof users === "string" && USER_ID_SHAPED_RE.test(users) ? {
-    users: [
-      users
-    ]
-  } : "creator";
-  const message = `approver ${written} is not an approver \u2014 legal: ${APPROVER_SPEC_SHAPES.join(" | ")}. 'creator' is the person who started the run: write approver:'creator' for "ask me" / "I approve"; {users:[\u2026]} takes user ids, never emails, names or {type:'user'}` + (approver === "creator" ? "" : `; here: approver:${JSON.stringify(approver)}`);
-  return {
-    approver,
-    written,
-    message
-  };
-}
-function bindingRootsOk(template22) {
-  const refs = [
-    ...template22.matchAll(/\$\{\s*([A-Za-z_$][\w$]*)/g)
-  ].map((m) => m[1]);
-  return refs.length > 0 && refs.every((r) => BINDING_ROOTS.includes(r));
-}
-function isTemplateBinding(v) {
-  return typeof v === "object" && v !== null && typeof v.template === "string";
-}
-function validateApproverBlock(node, opts = {
-  path: "approval"
-}) {
-  const issues = [];
-  const push = /* @__PURE__ */ __name3((code, path3, message, severity = "error") => issues.push({
-    code,
-    path: path3,
-    severity,
-    message
-  }), "push");
-  const checkSpec = /* @__PURE__ */ __name3((spec, path3) => {
-    const r = ApproverSpecSchema.safeParse(spec);
-    if (!r.success) {
-      const users = spec?.users;
-      if (Array.isArray(users) && users.length > APPROVER_SPEC_MAX_USERS) push("cap-exceeded", path3, `at most ${APPROVER_SPEC_MAX_USERS} users`);
-      else {
-        const refusal = describeApproverSpecRefusal(spec);
-        issues.push({
-          code: "approver-invalid",
-          path: path3,
-          severity: "error",
-          message: refusal.message,
-          repair: {
-            approver: refusal.approver,
-            written: refusal.written
-          }
-        });
-      }
-      return;
-    }
-    const s = r.data;
-    if (typeof s === "object") {
-      if ("governance" in s && !opts.governanceEnabled) push("approver-governance-unavailable", path3, "governance reviewer routing is not enabled for this deployment");
-      if ("group" in s && typeof s.group === "string" && !opts.scimEnabled && opts.idpGroups?.includes(s.group)) push("approver-idp-group-unavailable", path3, "IdP-group approvers are not enabled for this deployment");
-      const binding = "users" in s ? s.users : "role" in s ? s.role : "group" in s ? s.group : void 0;
-      if (isTemplateBinding(binding)) {
-        if (!bindingRootsOk(binding.template)) push("approver-binding-invalid", `${path3}.template`, "binding root must be initData / stepResults / requestContext / state");
-        if ("users" in s && opts.customerReachable) push("approver-binding-customer-reachable", `${path3}.users`, "a customer-reachable workflow may not bind its approver list");
-      }
-    }
-  }, "checkSpec");
-  if (node.approver !== void 0) checkSpec(node.approver, `${opts.path}.approver`);
-  if (node.fourEyes !== void 0) {
-    const r = FourEyesSchema.safeParse(node.fourEyes);
-    if (!r.success) push("approver-invalid", `${opts.path}.fourEyes`, "fourEyes needs { edit, approve } approver specs");
-    else {
-      checkSpec(r.data.edit, `${opts.path}.fourEyes.edit`);
-      checkSpec(r.data.approve, `${opts.path}.fourEyes.approve`);
-    }
-    if (!node.editable) push("four-eyes-requires-editable", `${opts.path}.fourEyes`, "fourEyes requires editable:true");
-    if (node.approver !== void 0) push("four-eyes-overrides-approver", `${opts.path}.approver`, "fourEyes replaces approver", "warning");
-    if (node.itemsPath) push("four-eyes-items-unsupported", `${opts.path}.fourEyes`, "fourEyes cannot combine with itemsPath");
-  }
-  if (node.excludeInitiator && (node.approver === void 0 || node.approver === "creator") && !node.fourEyes) push("approver-excludes-only-candidate", `${opts.path}.excludeInitiator`, "'creator' with excludeInitiator leaves no approver");
-  if (Array.isArray(node.onTimeout)) {
-    const chain = node.onTimeout;
-    const hops = chain.filter((m) => typeof m === "object" && m !== null && "escalateTo" in m);
-    if (hops.length > ESCALATION_MAX_HOPS) push("escalation-chain-too-long", `${opts.path}.onTimeout`, `at most ${ESCALATION_MAX_HOPS} hops`);
-    const last = chain[chain.length - 1];
-    if (typeof last === "object" && last !== null) push("escalation-chain-not-terminal", `${opts.path}.onTimeout`, "a chain must end in deny | cancel-run | fail");
-    hops.forEach((h, i) => checkSpec(h.escalateTo, `${opts.path}.onTimeout[${i}].escalateTo`));
-  } else if (typeof node.onTimeout === "object" && node.onTimeout !== null) {
-    checkSpec(node.onTimeout.escalateTo, `${opts.path}.onTimeout.escalateTo`);
-  }
-  return issues;
-}
-function liftRenderedApprover(row, rendered) {
-  const text = (rendered ?? "").trim();
-  if (!text) return null;
-  if (row === "users") {
-    let members = null;
-    if (text.startsWith("[")) {
-      try {
-        members = JSON.parse(text);
-      } catch {
-        return null;
-      }
-    } else members = text.split(",").map((s) => s.trim());
-    if (!Array.isArray(members) || members.length === 0 || members.length > APPROVER_SPEC_MAX_USERS) return null;
-    if (!members.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128)) return null;
-    return {
-      users: [
-        ...new Set(members)
-      ].sort()
+      path: op.path,
+      message: "path not allowed"
+    };
+    if (op.op === "add") obj[key] = structuredClone(op.value);
+    else if (!(key in obj)) return {
+      ok: false,
+      code: "PATH_NOT_FOUND",
+      index: i,
+      path: op.path,
+      message: "path not found"
     };
+    else if (op.op === "replace") obj[key] = structuredClone(op.value);
+    else delete obj[key];
   }
-  if (text.length > 128 || text.startsWith("[") || text.startsWith("{")) return null;
-  return row === "role" ? {
-    role: text
-  } : {
-    group: text
+  return {
+    ok: true,
+    value: value22
   };
 }
+function rebaseItemPointer(pointer, itemsPath, index) {
+  const base = `/${itemsPath.split(".").map(escapePointer).join("/")}/${index}`;
+  return pointer === "/" || pointer === "" ? base : `${base}${pointer}`;
+}
 function collectEnvTemplateKeys(value22) {
   const keys = /* @__PURE__ */ new Set();
   const walk22 = /* @__PURE__ */ __name3((v) => {
@@ -5518,7 +5804,6 @@ function* singleStepsOf(entry) {
       return;
     case "workflow":
       yield entry;
-      if (Array.isArray(entry.graph)) yield* singleStepsOf(entry.graph[1]);
       return;
     case "parallel":
     case "conditional":
@@ -5560,7 +5845,7 @@ function needsInheritedWorkspace(graph) {
   }
   return false;
 }
-var __defProp3, __name3, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, WORKFLOW_ARM_SUBRUN_ID, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
+var __defProp3, __name3, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
 var init_dist2 = __esm({
   "../workflow-graph/dist/index.mjs"() {
     "use strict";
@@ -5663,7 +5948,88 @@ var init_dist2 = __esm({
     }), "fromKnowledge");
     SideEffectsSchema = z4.enum(WORKFLOW_SIDE_EFFECTS);
     JobResourcesSchema = z4.enum(WORKFLOW_JOB_RESOURCES);
-    WORKFLOW_ARM_SUBRUN_ID = "$arm";
+    APPROVER_SPEC_MAX_USERS = 20;
+    ESCALATION_MAX_HOPS = 3;
+    TemplateBindingSchema = z22.object({
+      template: z22.string().min(1).max(2048)
+    }).strict();
+    ApproverSpecSchema = z22.union([
+      z22.literal("creator"),
+      z22.literal("org-admins"),
+      z22.object({
+        users: z22.union([
+          z22.array(z22.string().min(1).max(128)).min(1).max(APPROVER_SPEC_MAX_USERS),
+          TemplateBindingSchema
+        ])
+      }).strict(),
+      z22.object({
+        role: z22.union([
+          z22.string().min(1).max(128),
+          TemplateBindingSchema
+        ])
+      }).strict(),
+      z22.object({
+        group: z22.union([
+          z22.string().min(1).max(128),
+          TemplateBindingSchema
+        ])
+      }).strict(),
+      z22.object({
+        governance: z22.object({
+          policyId: z22.string().min(1).max(128)
+        }).strict()
+      }).strict()
+    ]);
+    FourEyesSchema = z22.object({
+      edit: ApproverSpecSchema,
+      approve: ApproverSpecSchema
+    }).strict();
+    EscalationHopSchema = z22.object({
+      escalateTo: ApproverSpecSchema,
+      timeoutHours: z22.number().finite().min(1).max(720)
+    }).strict();
+    TerminalOutcomeSchema = z22.enum([
+      "deny",
+      "cancel-run",
+      "fail",
+      "continue"
+    ]);
+    ApprovalOnTimeoutSchema = z22.union([
+      TerminalOutcomeSchema,
+      EscalationHopSchema,
+      z22.array(z22.union([
+        TerminalOutcomeSchema,
+        EscalationHopSchema
+      ])).min(1).max(ESCALATION_MAX_HOPS + 1)
+    ]);
+    APPROVER_SPEC_SHAPES = [
+      "'creator'",
+      "'org-admins'",
+      "{users:[userId, \u2026]}",
+      "{role:roleName}",
+      "{group:groupName}",
+      "{governance:{policyId}}"
+    ];
+    APPROVER_WRITTEN_MAX = 120;
+    USER_ID_SHAPED_RE = /^[^\s@]{1,128}$/;
+    __name(describeApproverSpecRefusal, "describeApproverSpecRefusal");
+    __name3(describeApproverSpecRefusal, "describeApproverSpecRefusal");
+    BINDING_ROOTS = [
+      "initData",
+      "stepResults",
+      "requestContext",
+      "state"
+    ];
+    __name(bindingRootsOk, "bindingRootsOk");
+    __name3(bindingRootsOk, "bindingRootsOk");
+    __name(isTemplateBinding, "isTemplateBinding");
+    __name3(isTemplateBinding, "isTemplateBinding");
+    __name(approvalEditable, "approvalEditable");
+    __name3(approvalEditable, "approvalEditable");
+    __name(validateApproverBlock, "validateApproverBlock");
+    __name3(validateApproverBlock, "validateApproverBlock");
+    __name(liftRenderedApprover, "liftRenderedApprover");
+    __name3(liftRenderedApprover, "liftRenderedApprover");
     WORKSPACE_TEMPLATE_EXPR_RE = /^\$\{\s*(?:initData|input)\.([^}]+?)\s*\}$/;
     __name(workspaceTemplatePath, "workspaceTemplatePath");
     __name3(workspaceTemplatePath, "workspaceTemplatePath");
@@ -5675,6 +6041,8 @@ var init_dist2 = __esm({
     });
     __name(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
     __name3(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
+    __name(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
+    __name3(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
     WORKFLOW_CAPS_DEFAULT = Object.freeze({
       maxParallelArms: 16,
       maxForeachConcurrency: 16,
@@ -5956,8 +6324,8 @@ var init_dist2 = __esm({
     __name(isContinuedFailureValue, "isContinuedFailureValue");
     __name3(isContinuedFailureValue, "isContinuedFailureValue");
     isHitlNode2 = /* @__PURE__ */ __name3((n2) => isWorkflowHitlEntryType(n2.type), "isHitlNode");
-    __name(lowerContainerArm, "lowerContainerArm");
-    __name3(lowerContainerArm, "lowerContainerArm");
+    __name(inlineContainerArm, "inlineContainerArm");
+    __name3(inlineContainerArm, "inlineContainerArm");
     nodeIdOf = /* @__PURE__ */ __name3((n2) => n2.type === "step" ? n2.step.id : n2.id, "nodeIdOf");
     __name(entryIds, "entryIds");
     __name3(entryIds, "entryIds");
@@ -6017,6 +6385,12 @@ var init_dist2 = __esm({
     __name3(isTerminalRunStatus, "isTerminalRunStatus");
     __name(pruneUndefined, "pruneUndefined");
     __name3(pruneUndefined, "pruneUndefined");
+    WORKFLOW_INLINE_RUN_TAG = "inline";
+    __name(runOrigin, "runOrigin");
+    __name3(runOrigin, "runOrigin");
+    RUN_ERROR_ISSUES_MAX = 20;
+    __name(runErrorIssues, "runErrorIssues");
+    __name3(runErrorIssues, "runErrorIssues");
     __name(runNextAction, "runNextAction");
     __name3(runNextAction, "runNextAction");
     IN_FLIGHT = new Set(WORKFLOW_STEP_IN_FLIGHT);
@@ -6026,6 +6400,10 @@ var init_dist2 = __esm({
     __name3(runCountsFromStatusTally, "runCountsFromStatusTally");
     __name(runCountsFromStepStatuses, "runCountsFromStepStatuses");
     __name3(runCountsFromStepStatuses, "runCountsFromStepStatuses");
+    __name(isBillingHeldStep, "isBillingHeldStep");
+    __name3(isBillingHeldStep, "isBillingHeldStep");
+    __name(stepEffectiveStatus, "stepEffectiveStatus");
+    __name3(stepEffectiveStatus, "stepEffectiveStatus");
     n = /* @__PURE__ */ __name3((v) => typeof v === "number" && Number.isFinite(v) ? v : 0, "n");
     __name(runCounts, "runCounts");
     __name3(runCounts, "runCounts");
@@ -6177,86 +6555,6 @@ var init_dist2 = __esm({
     __name3(applyJsonPatch, "applyJsonPatch");
     __name(rebaseItemPointer, "rebaseItemPointer");
     __name3(rebaseItemPointer, "rebaseItemPointer");
-    APPROVER_SPEC_MAX_USERS = 20;
-    ESCALATION_MAX_HOPS = 3;
-    TemplateBindingSchema = z22.object({
-      template: z22.string().min(1).max(2048)
-    }).strict();
-    ApproverSpecSchema = z22.union([
-      z22.literal("creator"),
-      z22.literal("org-admins"),
-      z22.object({
-        users: z22.union([
-          z22.array(z22.string().min(1).max(128)).min(1).max(APPROVER_SPEC_MAX_USERS),
-          TemplateBindingSchema
-        ])
-      }).strict(),
-      z22.object({
-        role: z22.union([
-          z22.string().min(1).max(128),
-          TemplateBindingSchema
-        ])
-      }).strict(),
-      z22.object({
-        group: z22.union([
-          z22.string().min(1).max(128),
-          TemplateBindingSchema
-        ])
-      }).strict(),
-      z22.object({
-        governance: z22.object({
-          policyId: z22.string().min(1).max(128)
-        }).strict()
-      }).strict()
-    ]);
-    FourEyesSchema = z22.object({
-      edit: ApproverSpecSchema,
-      approve: ApproverSpecSchema
-    }).strict();
-    EscalationHopSchema = z22.object({
-      escalateTo: ApproverSpecSchema,
-      timeoutHours: z22.number().finite().min(1).max(720)
-    }).strict();
-    TerminalOutcomeSchema = z22.enum([
-      "deny",
-      "cancel-run",
-      "fail",
-      "continue"
-    ]);
-    ApprovalOnTimeoutSchema = z22.union([
-      TerminalOutcomeSchema,
-      EscalationHopSchema,
-      z22.array(z22.union([
-        TerminalOutcomeSchema,
-        EscalationHopSchema
-      ])).min(1).max(ESCALATION_MAX_HOPS + 1)
-    ]);
-    APPROVER_SPEC_SHAPES = [
-      "'creator'",
-      "'org-admins'",
-      "{users:[userId, \u2026]}",
-      "{role:roleName}",
-      "{group:groupName}",
-      "{governance:{policyId}}"
-    ];
-    APPROVER_WRITTEN_MAX = 120;
-    USER_ID_SHAPED_RE = /^[^\s@]{1,128}$/;
-    __name(describeApproverSpecRefusal, "describeApproverSpecRefusal");
-    __name3(describeApproverSpecRefusal, "describeApproverSpecRefusal");
-    BINDING_ROOTS = [
-      "initData",
-      "stepResults",
-      "requestContext",
-      "state"
-    ];
-    __name(bindingRootsOk, "bindingRootsOk");
-    __name3(bindingRootsOk, "bindingRootsOk");
-    __name(isTemplateBinding, "isTemplateBinding");
-    __name3(isTemplateBinding, "isTemplateBinding");
-    __name(validateApproverBlock, "validateApproverBlock");
-    __name3(validateApproverBlock, "validateApproverBlock");
-    __name(liftRenderedApprover, "liftRenderedApprover");
-    __name3(liftRenderedApprover, "liftRenderedApprover");
     WORKFLOW_ENV_OVERLAY_MAX_KEYS = 64;
     WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES = 4096;
     WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE = /(SECRET|TOKEN|KEY|PASSWORD)$/;
@@ -6359,14 +6657,13 @@ function stepNodeOf(s) {
 }
 function materializeEntry(entry, steps) {
   const single = /* @__PURE__ */ __name((n2) => {
-    if (n2.type === "step" && steps[n2.step.id]) return stepNodeOf(steps[n2.step.id]);
-    if (n2.type === "workflow" && n2.workflowId === WORKFLOW_ARM_SUBRUN_ID && n2.graph) return {
-      ...n2,
-      graph: [
-        n2.graph[0],
-        single(n2.graph[1])
-      ]
-    };
+    if (n2.type === "step" && steps[n2.step.id]) {
+      const node = stepNodeOf(steps[n2.step.id]);
+      return n2.input !== void 0 ? {
+        ...node,
+        input: n2.input
+      } : node;
+    }
     return n2;
   }, "single");
   switch (entry.type) {
@@ -6524,7 +6821,10 @@ var init_workflow = __esm({
     }, "assertPredicate");
     assertRetry = /* @__PURE__ */ __name((r, id) => {
       if (!r) return;
-      if (typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS) throw new LuaWorkflowBuildError("cap-exceeded", `"${id}": ${workflowRetryMaxAttemptsMessage(r.maxAttempts)}`);
+      if (!isWithinWorkflowRetryAttempts(r.maxAttempts)) {
+        const over = typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS;
+        throw new LuaWorkflowBuildError(over ? "cap-exceeded" : "invalid-envelope", `"${id}": ${workflowRetryMaxAttemptsMessage(r.maxAttempts)}`);
+      }
       if (r.backoff !== void 0 && !WORKFLOW_RETRY_BACKOFFS.includes(r.backoff)) throw new LuaWorkflowBuildError("backoff-invalid", `"${id}": retry.backoff must be ${WORKFLOW_RETRY_BACKOFFS.map((b) => `'${b}'`).join(" | ")}`);
       if (r.maxBackoffSeconds !== void 0) {
         if (r.backoff !== "exponential") throw new LuaWorkflowBuildError("backoff-invalid", `"${id}": retry.maxBackoffSeconds is only meaningful with backoff:'exponential'`);
@@ -7299,7 +7599,102 @@ function isAccessDeniedError(error) {
   if (CliError.isCliError(error)) return error.statusCode === 403;
   return error instanceof Error && error.message.startsWith("Access denied (403)");
 }
-var CLI_EXIT, CliError;
+function authHint(error) {
+  if (error.suppressDefaultRemediation) return void 0;
+  if (error.reason === "no_agent_access") {
+    return [
+      "Your API key is valid, but it does not have access to the agentId in lua.skill.yaml \u2014 the agent belongs",
+      "to another account or organization, was deleted or transferred, or the yaml was copied from another project.",
+      "Check the configured agent and switch if needed:",
+      "  lua agents          (list agents you have access to)",
+      "  lua init            (re-select the agent for this project)"
+    ].join("\n");
+  }
+  return "Re-authenticate or check your API key: lua auth configure \xB7 https://admin.heylua.ai";
+}
+function numericStatus(error) {
+  const candidate = error.statusCode ?? error.status;
+  return typeof candidate === "number" && Number.isFinite(candidate) ? candidate : void 0;
+}
+function classifyCliError(error) {
+  if (CliError.isCliError(error)) {
+    return {
+      code: error.code,
+      exitCode: error.exitCode,
+      message: error.message,
+      hint: error.hint,
+      statusCode: error.statusCode,
+      serverCode: error.serverCode,
+      issues: error.issues
+    };
+  }
+  if (AuthenticationError.isAuthenticationError(error)) {
+    return {
+      code: "auth",
+      exitCode: CLI_EXIT.AUTH,
+      message: error.message,
+      hint: authHint(error)
+    };
+  }
+  const e = typeof error === "object" && error !== null ? error : {};
+  const message = typeof e.message === "string" && e.message.length > 0 ? e.message : error instanceof Error ? error.name : String(error ?? "Unknown error");
+  if (e.name === "WorkflowLocalUsageError" || typeof e.code === "string" && e.code.startsWith("commander.")) {
+    return {
+      code: "usage",
+      exitCode: CLI_EXIT.USAGE,
+      message
+    };
+  }
+  const status = numericStatus(e);
+  if (status !== void 0) {
+    const statusCode = status;
+    if (status === 401) return {
+      code: "auth",
+      exitCode: CLI_EXIT.AUTH,
+      message,
+      statusCode
+    };
+    if (status === 403) return {
+      code: "forbidden",
+      exitCode: CLI_EXIT.FORBIDDEN,
+      message,
+      statusCode
+    };
+    if (status === 404) return {
+      code: "not_found",
+      exitCode: CLI_EXIT.NOT_FOUND,
+      message,
+      statusCode
+    };
+    if (status >= 400 && status < 500) return {
+      code: `http_${status}`,
+      exitCode: CLI_EXIT.FORBIDDEN,
+      message,
+      statusCode
+    };
+    if (status >= 500 || status === 0) return {
+      code: "unavailable",
+      exitCode: CLI_EXIT.UNAVAILABLE,
+      message,
+      statusCode
+    };
+  }
+  const causeCode = e.cause?.code;
+  if (typeof e.code === "string" && NETWORK_ERRNO.has(e.code) || typeof causeCode === "string" && NETWORK_ERRNO.has(causeCode) || e.name === "AbortError" || e.name === "TimeoutError" || NETWORK_MESSAGE.test(message)) {
+    return {
+      code: "unavailable",
+      exitCode: CLI_EXIT.UNAVAILABLE,
+      message,
+      hint: UNAVAILABLE_HINT
+    };
+  }
+  return {
+    code: "error",
+    exitCode: CLI_EXIT.ERROR,
+    message
+  };
+}
+var CLI_EXIT, CliError, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT;
 var init_cli_error = __esm({
   "src/errors/cli.error.ts"() {
     "use strict";
@@ -7322,6 +7717,8 @@ var init_cli_error = __esm({
       exitCode;
       hint;
       statusCode;
+      serverCode;
+      issues;
       constructor(code, message, options = {}) {
         super(message);
         this.name = "CliError";
@@ -7329,6 +7726,8 @@ var init_cli_error = __esm({
         this.exitCode = options.exitCode ?? CLI_EXIT.ERROR;
         this.hint = options.hint;
         this.statusCode = options.statusCode;
+        this.serverCode = options.serverCode;
+        this.issues = options.issues?.length ? options.issues : void 0;
         if (Error.captureStackTrace) Error.captureStackTrace(this, _CliError);
       }
       /** Bad arguments, an unknown action, no project — exit 2. */
@@ -7354,11 +7753,50 @@ var init_cli_error = __esm({
           statusCode: 403
         });
       }
+      /**
+      * An API refusal the site already holds the status of (LUA-766) — classified by the same table the top-level
+      * classifier applies to an untyped error: 401 auth · 403 forbidden · 404 not_found · other 4xx `http_<status>`
+      * (10) · 5xx / 0 unavailable (11, with the network hint unless the site gives its own) · no status `error` (1).
+      * A command that reads `response.error.statusCode` throws through here, so `lua logs` on a 503 exits 11 like
+      * every other verb instead of printing the message itself and then throwing an exit-1 `Error`.
+      */
+      static fromStatus(statusCode, message, hint, detail = {}) {
+        const reported = classifyCliError(Object.assign(new Error(message), {
+          statusCode
+        }));
+        const classHint = reported.exitCode === CLI_EXIT.UNAVAILABLE ? UNAVAILABLE_HINT : reported.hint;
+        return new _CliError(reported.code, message, {
+          exitCode: reported.exitCode,
+          hint: hint ?? classHint,
+          statusCode,
+          serverCode: detail.serverCode,
+          issues: detail.issues
+        });
+      }
       static isCliError(error) {
         return error instanceof _CliError || typeof error === "object" && error !== null && error.isCliError === true;
       }
     };
     __name(isAccessDeniedError, "isAccessDeniedError");
+    NETWORK_ERRNO = /* @__PURE__ */ new Set([
+      "ECONNREFUSED",
+      "ECONNRESET",
+      "ENOTFOUND",
+      "ETIMEDOUT",
+      "EAI_AGAIN",
+      "EPIPE",
+      "EHOSTUNREACH",
+      "ENETUNREACH",
+      "UND_ERR_CONNECT_TIMEOUT",
+      "UND_ERR_HEADERS_TIMEOUT",
+      "UND_ERR_BODY_TIMEOUT",
+      "UND_ERR_SOCKET"
+    ]);
+    NETWORK_MESSAGE = /fetch failed|socket hang up|network request failed|request timeout|ECONNREFUSED|ENOTFOUND/i;
+    UNAVAILABLE_HINT = "The Lua API could not be reached \u2014 check your network and https://status.heylua.ai, then retry.";
+    __name(authHint, "authHint");
+    __name(numericStatus, "numericStatus");
+    __name(classifyCliError, "classifyCliError");
   }
 });
 
@@ -7833,6 +8271,52 @@ var init_request_credential = __esm({
 
 // src/api/http.client.ts
 import { randomUUID as randomUUID2 } from "crypto";
+async function classifyErrorResponse(response) {
+  let errorData;
+  try {
+    errorData = await response.json();
+  } catch (jsonError) {
+    errorData = {};
+  }
+  if (response.status === 401) {
+    const serverMessage = typeof errorData.message === "string" ? errorData.message : void 0;
+    if (serverMessage && /not an admin/i.test(serverMessage)) {
+      throw new AuthenticationError(`Access denied for this agent: ${serverMessage}`, "no_agent_access", serverMessage);
+    }
+    const isExplicitCredential = !!serverMessage && /(invalid|expired|missing|no)\s+(api[\s_-]?key|token|credential)/i.test(serverMessage);
+    const isBareAuthRejection = !serverMessage || /^unauthorized$/i.test(serverMessage);
+    if (isExplicitCredential || isBareAuthRejection) {
+      throw new AuthenticationError("Authentication failed. Your Lua credential may be invalid or expired.", "invalid_credentials", serverMessage);
+    }
+    throw new AuthenticationError(`Authentication failed: ${serverMessage}`, "unknown", serverMessage);
+  }
+  if (response.status === 403) {
+    const detail = errorData.message || "You do not have permission to access this resource.";
+    const serverCode = serverCodeOf(errorData.code, errorData.error);
+    throw new CliError("forbidden", `Access denied (403): ${detail}${serverCode ? ` (${serverCode})` : ""}`, {
+      exitCode: CLI_EXIT.FORBIDDEN,
+      statusCode: 403,
+      serverCode,
+      issues: Array.isArray(errorData.issues) ? errorData.issues : void 0,
+      hint: "Check that your Lua login has access to this agent or organization."
+    });
+  }
+  return {
+    success: false,
+    error: {
+      message: errorData.message || `HTTP ${response.status}: ${response.statusText}`,
+      statusCode: response.status,
+      error: errorData.error,
+      retryAfterSeconds: parseRetryAfter(response.headers.get("retry-after")),
+      ...errorData
+    }
+  };
+}
+function serverCodeOf(code, error) {
+  if (typeof code === "string" && code.length > 0) return code;
+  if (typeof error === "string" && /^[A-Z0-9][A-Z0-9_]*$/.test(error)) return error;
+  return void 0;
+}
 async function* parseSseStream(body, signal) {
   const reader = body.getReader();
   const decoder = new TextDecoder();
@@ -8013,42 +8497,7 @@ var init_http_client = __esm({
       * @private
       */
       async classifyErrorResponse(response) {
-        let errorData;
-        try {
-          errorData = await response.json();
-        } catch (jsonError) {
-          errorData = {};
-        }
-        if (response.status === 401) {
-          const serverMessage = typeof errorData.message === "string" ? errorData.message : void 0;
-          if (serverMessage && /not an admin/i.test(serverMessage)) {
-            throw new AuthenticationError(`Access denied for this agent: ${serverMessage}`, "no_agent_access", serverMessage);
-          }
-          const isExplicitCredential = !!serverMessage && /(invalid|expired|missing|no)\s+(api[\s_-]?key|token|credential)/i.test(serverMessage);
-          const isBareAuthRejection = !serverMessage || /^unauthorized$/i.test(serverMessage);
-          if (isExplicitCredential || isBareAuthRejection) {
-            throw new AuthenticationError("Authentication failed. Your Lua credential may be invalid or expired.", "invalid_credentials", serverMessage);
-          }
-          throw new AuthenticationError(`Authentication failed: ${serverMessage}`, "unknown", serverMessage);
-        }
-        if (response.status === 403) {
-          const detail = errorData.message || "You do not have permission to access this resource.";
-          throw new CliError("forbidden", `Access denied (403): ${detail}`, {
-            exitCode: CLI_EXIT.FORBIDDEN,
-            statusCode: 403,
-            hint: "Check that your Lua login has access to this agent or organization."
-          });
-        }
-        return {
-          success: false,
-          error: {
-            message: errorData.message || `HTTP ${response.status}: ${response.statusText}`,
-            statusCode: response.status,
-            error: errorData.error,
-            retryAfterSeconds: parseRetryAfter(response.headers.get("retry-after")),
-            ...errorData
-          }
-        };
+        return classifyErrorResponse(response);
       }
       /**
       * Checks if an HTTP status code is retryable
@@ -8256,6 +8705,8 @@ var init_http_client = __esm({
         };
       }
     };
+    __name(classifyErrorResponse, "classifyErrorResponse");
+    __name(serverCodeOf, "serverCodeOf");
     __name(parseSseStream, "parseSseStream");
     __name(parseRetryAfter, "parseRetryAfter");
     __name(isCoreDrainApiError, "isCoreDrainApiError");
@@ -12314,6 +12765,7 @@ var init_job_api_service = __esm({
   "src/api/job.api.service.ts"() {
     "use strict";
     init_http_client();
+    init_cli_error();
     init_job_instance();
     JobApi = class extends HttpClient {
       static {
@@ -12370,7 +12822,7 @@ var init_job_api_service = __esm({
         if (response.success && response.data) {
           return new JobInstance(this, response.data);
         }
-        throw new Error(response.error?.message || "Failed to get job");
+        throw CliError.fromStatus(response.error?.statusCode, response.error?.message || "Failed to get job");
       }
       /**
       * Creates a new job for the agent.
@@ -13440,6 +13892,14 @@ var init_workflow_api_service = __esm({
       async getVersionEnvOverlay(workflowId, version) {
         return this.httpGet(`${this.base}/${workflowId}/versions/${encodeURIComponent(version)}/env-overlay`, await this.auth());
       }
+      /**
+      * WF-403 (13 §13.14; LUA-752) — `GET …/:workflowId/export?version=`: the active (or named) version as pushable
+      * files (`{ form, version, files:[{ path, contents }], warnings }`). `lua workflows export` writes them to disk.
+      */
+      async exportWorkflowFiles(workflowId, version) {
+        const qs = version ? `?version=${encodeURIComponent(version)}` : "";
+        return this.httpGet(`${this.base}/${workflowId}/export${qs}`, await this.auth());
+      }
       async getWorkflowVersions(workflowId) {
         return this.httpGet(`${this.base}/${workflowId}/versions`, await this.auth());
       }
@@ -13536,6 +13996,34 @@ var init_workflow_api_service = __esm({
       async retryStep(runId, stepId, data = {}) {
         return this.httpPost(`${this.runs}/${runId}/steps/${pathId(stepId)}/retry`, data, await this.auth());
       }
+      /**
+      * R37 (LUA-752) — a human decides a parked step: `skip` it, `complete` it with the output it would have produced,
+      * or `fail` it (the step's onError policy applies). 400 `VALIDATION_FAILED{output-required}` / `RESOLVE_OUTPUT_INVALID`,
+      * 403 `APPROVAL_REQUIRES_HUMAN` / `NOT_RUN_CREATOR`, 404 `RUN_NOT_FOUND` / `STEP_NOT_FOUND`, 409 `STEP_NOT_PARKED` /
+      * `RUN_TERMINAL`, 413 `OUTPUT_TOO_LARGE`; the CAS loser is a 200 `{ resolved:false, reason, recorded }`.
+      */
+      async resolveStep(runId, stepId, data) {
+        return this.httpPost(`${this.runs}/${runId}/steps/${pathId(stepId)}/resolve`, data, await this.auth());
+      }
+      /**
+      * R45 (LUA-752) — raise a parked run's budget (`maxCredits` / `maxSteps` / `maxJobSeconds` / `maxDurationSeconds`;
+      * increases only). 400 `VALIDATION_FAILED` / `CAP_EXCEEDED`, 403 `NOT_RUN_CREATOR`, 409 `BUDGET_NOT_RAISABLE`.
+      */
+      async raiseBudget(runId, data) {
+        return this.httpPost(`${this.runs}/${runId}/budget`, data, await this.auth());
+      }
+      /**
+      * R39 (LUA-752) — the current approval payload with its `payloadFingerprint` / `editRevision` (what
+      * `approve --edit --fingerprint` echoes). `path` pages one array of a large payload.
+      */
+      async getApprovalPayload(runId, approvalId, query = {}) {
+        const q = new URLSearchParams();
+        if (query.path) q.append("path", query.path);
+        if (query.cursor) q.append("cursor", query.cursor);
+        if (query.limit !== void 0) q.append("limit", String(query.limit));
+        const qs = q.toString();
+        return this.httpGet(`${this.runs}/${runId}/approvals/${pathId(approvalId)}/payload${qs ? `?${qs}` : ""}`, await this.auth());
+      }
       /** R13 — resolve an approval (human; `expectedFingerprint` guards against an edited payload — 409 `PAYLOAD_MISMATCH`). */
       async resolveApproval(runId, approvalId, data) {
         return this.httpPost(`${this.runs}/${runId}/approvals/${pathId(approvalId)}/resolve`, data, await this.auth());
@@ -13620,6 +14108,14 @@ var init_workflow_api_service = __esm({
       async getSchedule(jobId) {
         return this.httpGet(`${this.schedules}/${encodeURIComponent(jobId)}`, await this.auth());
       }
+      /** R27 (LUA-752) — create or replace the plain schedule Job of a workflow (201; 400 `VALIDATION_FAILED` / `WORKFLOW_NOT_ON_AGENT`, 404 `WORKFLOW_NOT_FOUND`, 409 `SCHEDULE_CAP`). */
+      async createSchedule(data) {
+        return this.httpPost(this.schedules, data, await this.auth());
+      }
+      /** R56 (LUA-752) — pause / resume a schedule, persist `backfillOnEnable`, one-shot `backfillNow` (404 `SCHEDULE_NOT_FOUND`, 400 `VALIDATION_FAILED{issues}`). */
+      async updateSchedule(jobId, data) {
+        return this.httpPatch(`${this.schedules}/${encodeURIComponent(jobId)}`, data, await this.auth());
+      }
       /** R28 — delete a schedule Job (404 `SCHEDULE_NOT_FOUND`). The CLI refuses a LIVE goal's job BEFORE this call (`goal_schedule`); an ended goal's lingering Job is retired here (LUA-760). */
       async deleteSchedule(jobId) {
         return this.httpDelete(`${this.schedules}/${encodeURIComponent(jobId)}`, await this.auth());