lua-cli 3.32.3 → 3.32.5

package/dist/workflow-builder.js

@@ -647,6 +647,94 @@ function isDesktopFileSessionId(value3) {
 }
 __name(isDesktopFileSessionId, "isDesktopFileSessionId");
 __name2(isDesktopFileSessionId, "isDesktopFileSessionId");
+var MODEL_ID_BYOK_PROVIDERS = [
+  "azure",
+  "bedrock"
+];
+function isModelIdSentinel(input) {
+  const lower = (input ?? "").trim().toLowerCase();
+  return lower === "auto" || lower.startsWith("auto/");
+}
+__name(isModelIdSentinel, "isModelIdSentinel");
+__name2(isModelIdSentinel, "isModelIdSentinel");
+function normalizeModelId(input, registry) {
+  const requested = typeof input === "string" ? input.trim() : "";
+  if (!requested) return {
+    ok: false,
+    reason: "empty",
+    requested,
+    candidates: []
+  };
+  const lower = requested.toLowerCase();
+  if (isModelIdSentinel(lower)) return {
+    ok: true,
+    id: lower,
+    form: "sentinel"
+  };
+  const slash = requested.indexOf("/");
+  const malformed = slash === 0;
+  const provider = slash > 0 ? lower.slice(0, slash) : void 0;
+  if (provider && MODEL_ID_BYOK_PROVIDERS.includes(provider)) {
+    return {
+      ok: true,
+      id: requested,
+      form: "byok"
+    };
+  }
+  const bareId = slash >= 0 ? lower.slice(slash + 1) : lower;
+  const lastSegment = bareId.slice(bareId.lastIndexOf("/") + 1);
+  const exact = /* @__PURE__ */ new Set();
+  const hints = /* @__PURE__ */ new Set();
+  for (const code of registry) {
+    if (typeof code !== "string" || !code) continue;
+    const codeLower = code.toLowerCase();
+    if (!malformed && codeLower === lower) return {
+      ok: true,
+      id: code,
+      form: provider ? "canonical" : "bare"
+    };
+    const i = codeLower.indexOf("/");
+    if (i < 0) continue;
+    const codeBare = codeLower.slice(i + 1);
+    if (bareId && codeBare === bareId) exact.add(code);
+    else if (lastSegment && codeBare.slice(codeBare.lastIndexOf("/") + 1) === lastSegment) hints.add(code);
+  }
+  const sorted = [
+    ...exact
+  ].sort();
+  if (!provider && !malformed && sorted.length === 1) return {
+    ok: true,
+    id: sorted[0],
+    form: "bare"
+  };
+  if (!provider && !malformed && sorted.length > 1) {
+    return {
+      ok: false,
+      reason: "ambiguous",
+      requested,
+      candidates: sorted
+    };
+  }
+  return {
+    ok: false,
+    reason: "unknown",
+    requested,
+    candidates: sorted.length ? sorted : [
+      ...hints
+    ].sort()
+  };
+}
+__name(normalizeModelId, "normalizeModelId");
+__name2(normalizeModelId, "normalizeModelId");
+function modelUnresolvedMessage(r) {
+  if (r.reason === "empty") return "model pin is empty \u2014 pin an approved model (provider/model) or omit `model`";
+  if (r.reason === "ambiguous") {
+    return `model "${r.requested}" does not resolve to one approved model \u2014 it names ${r.candidates.length}; pin one of: ${r.candidates.join(", ")}`;
+  }
+  return r.candidates.length ? `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms: ${r.candidates.join(", ")}` : `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms are the registry's provider-prefixed ids (provider/model) or a bare id that names exactly one of them`;
+}
+__name(modelUnresolvedMessage, "modelUnresolvedMessage");
+__name2(modelUnresolvedMessage, "modelUnresolvedMessage");
 var IMPLICIT_MODEL_SELECTION_SOURCES = [
   "workspace-default",
   "platform-default"
@@ -1160,6 +1248,7 @@ var DeviceBindingSchema = z2.object({
   }
 });
 var IdSchema = z2.string().min(1).max(256);
+var SESSION_AUTH_TIME_MAX_S = 4102444800;
 var PrincipalDescriptorSchema = z2.object({
   subjectType: SubjectTypeSchema,
   subjectId: IdSchema
@@ -1208,7 +1297,8 @@ var GeneralPrincipalContextSchema = z2.object({
   owner: PrincipalOwnerSchema.optional(),
   compatibility: z2.object({
     mode: z2.literal("legacy-owner-delegation")
-  }).strict().optional()
+  }).strict().optional(),
+  authTime: z2.number().int().nonnegative().max(SESSION_AUTH_TIME_MAX_S).optional()
 }).strict();
 var DeviceCredentialPrincipalContextSchema = z2.object({
   version: z2.literal(1),
@@ -1274,6 +1364,13 @@ function hasDeviceCredentialType(value3) {
 }
 __name(hasDeviceCredentialType, "hasDeviceCredentialType");
 __name2(hasDeviceCredentialType, "hasDeviceCredentialType");
+function sessionAuthTime(context) {
+  if (!context || context.credential.type !== "firstPartySession") return void 0;
+  const authTime = context.authTime;
+  return typeof authTime === "number" && Number.isInteger(authTime) && authTime >= 0 && authTime <= SESSION_AUTH_TIME_MAX_S ? authTime : void 0;
+}
+__name(sessionAuthTime, "sessionAuthTime");
+__name2(sessionAuthTime, "sessionAuthTime");
 function isTypedApiKeyPrincipal(context) {
   return context?.subject.subjectType === "apiKey" && context.credential.type === "apiKey" && !context.compatibility;
 }
@@ -1676,6 +1773,47 @@ function scheduledWorkflowRunId(jobId, scheduledTime) {
 }
 __name(scheduledWorkflowRunId, "scheduledWorkflowRunId");
 __name2(scheduledWorkflowRunId, "scheduledWorkflowRunId");
+var WORKFLOW_SCHEDULE_KEY_MAX = 128;
+function renderWorkflowScheduleKeyTemplate(template3, ctx) {
+  if (!template3) return void 0;
+  const read = /* @__PURE__ */ __name2((path) => path.split(".").reduce((o, k) => o && typeof o === "object" ? o[k] : void 0, ctx.input), "read");
+  let unresolved = false;
+  const out = template3.replace(/\$\{\s*([a-zA-Z0-9_.]+)\s*\}/g, (_m, expr) => {
+    let v = "";
+    if (expr === "scheduledTime") v = ctx.scheduledTime ?? "";
+    else if (expr.startsWith("input.")) v = read(expr.slice("input.".length));
+    const s = v === void 0 || v === null ? "" : String(v);
+    if (s === "") unresolved = true;
+    return s;
+  });
+  if (unresolved) return void 0;
+  const key = out.slice(0, WORKFLOW_SCHEDULE_KEY_MAX);
+  return key && /^[A-Za-z0-9:_\-.\/]+$/.test(key) ? key : void 0;
+}
+__name(renderWorkflowScheduleKeyTemplate, "renderWorkflowScheduleKeyTemplate");
+__name2(renderWorkflowScheduleKeyTemplate, "renderWorkflowScheduleKeyTemplate");
+var WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX = "sched:";
+function scheduledWorkflowIdempotencyKey(jobId, rendered) {
+  const head = `${WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX}${jobId}:`;
+  if (head.length + rendered.length <= WORKFLOW_SCHEDULE_KEY_MAX) return `${head}${rendered}`;
+  const digest = stableKeyDigest(rendered);
+  const room = WORKFLOW_SCHEDULE_KEY_MAX - head.length - digest.length - 1;
+  return `${head}${rendered.slice(0, Math.max(0, room))}~${digest}`;
+}
+__name(scheduledWorkflowIdempotencyKey, "scheduledWorkflowIdempotencyKey");
+__name2(scheduledWorkflowIdempotencyKey, "scheduledWorkflowIdempotencyKey");
+function stableKeyDigest(s) {
+  let a = 2166136261;
+  let b = 84696351;
+  for (let i = 0; i < s.length; i++) {
+    const c = s.charCodeAt(i);
+    a = Math.imul(a ^ c, 16777619);
+    b = Math.imul(b ^ c, 16777619) ^ b >>> 13;
+  }
+  return (a >>> 0).toString(16).padStart(8, "0") + (b >>> 0).toString(16).padStart(8, "0");
+}
+__name(stableKeyDigest, "stableKeyDigest");
+__name2(stableKeyDigest, "stableKeyDigest");
 var WORKFLOW_OPERATION_ID_PREFIX = "wf:";
 function workflowOperationId(runId, stepId, billingEpoch) {
   return `${WORKFLOW_OPERATION_ID_PREFIX}${runId}:${stepId}:${billingEpoch}`;
@@ -2424,6 +2562,75 @@ function extractSingleJsonValue(text) {
 }
 __name(extractSingleJsonValue, "extractSingleJsonValue");
 __name2(extractSingleJsonValue, "extractSingleJsonValue");
+var DEFAULT_ON_AGENT_FEATURES = [
+  "workflows",
+  "workflowCompose",
+  "observationalMemory"
+];
+function agentFeatureCatalogDefault(featureName) {
+  return DEFAULT_ON_AGENT_FEATURES.includes(featureName);
+}
+__name(agentFeatureCatalogDefault, "agentFeatureCatalogDefault");
+__name2(agentFeatureCatalogDefault, "agentFeatureCatalogDefault");
+function hasExplicitFeatureActive(row) {
+  return typeof row?.active === "boolean";
+}
+__name(hasExplicitFeatureActive, "hasExplicitFeatureActive");
+__name2(hasExplicitFeatureActive, "hasExplicitFeatureActive");
+function effectiveFeatureActive(row, catalogDefault) {
+  return hasExplicitFeatureActive(row) ? row.active : catalogDefault;
+}
+__name(effectiveFeatureActive, "effectiveFeatureActive");
+__name2(effectiveFeatureActive, "effectiveFeatureActive");
+function resolveEffectiveFeature(row, catalogDefault) {
+  return hasExplicitFeatureActive(row) ? {
+    active: row.active,
+    source: "agent",
+    default: catalogDefault
+  } : {
+    active: catalogDefault,
+    source: "default",
+    default: catalogDefault
+  };
+}
+__name(resolveEffectiveFeature, "resolveEffectiveFeature");
+__name2(resolveEffectiveFeature, "resolveEffectiveFeature");
+function isFeatureRow(value3) {
+  return typeof value3 === "object" && value3 !== null;
+}
+__name(isFeatureRow, "isFeatureRow");
+__name2(isFeatureRow, "isFeatureRow");
+function effectiveAgentFeatureRows(base, override) {
+  const merged = /* @__PURE__ */ new Map();
+  for (const [name, row] of Object.entries(base ?? {})) {
+    if (isFeatureRow(row)) merged.set(name, {
+      row,
+      origin: "baseAgent"
+    });
+  }
+  for (const [name, row] of Object.entries(override ?? {})) {
+    if (isFeatureRow(row)) merged.set(name, {
+      row,
+      origin: "subAgent"
+    });
+  }
+  return {
+    rows: Object.fromEntries([
+      ...merged
+    ].map(([name, e]) => [
+      name,
+      e.row
+    ])),
+    origins: Object.fromEntries([
+      ...merged
+    ].map(([name, e]) => [
+      name,
+      e.origin
+    ]))
+  };
+}
+__name(effectiveAgentFeatureRows, "effectiveAgentFeatureRows");
+__name2(effectiveAgentFeatureRows, "effectiveAgentFeatureRows");
 
 // ../workflow-graph/dist/index.mjs
 import { createHash } from "crypto";
@@ -2724,7 +2931,211 @@ var fromKnowledge = /* @__PURE__ */ __name3((k) => ({
 }), "fromKnowledge");
 var SideEffectsSchema = z4.enum(WORKFLOW_SIDE_EFFECTS);
 var JobResourcesSchema = z4.enum(WORKFLOW_JOB_RESOURCES);
-var WORKFLOW_ARM_SUBRUN_ID = "$arm";
+var APPROVER_SPEC_MAX_USERS = 20;
+var ESCALATION_MAX_HOPS = 3;
+var TemplateBindingSchema = z22.object({
+  template: z22.string().min(1).max(2048)
+}).strict();
+var ApproverSpecSchema = z22.union([
+  z22.literal("creator"),
+  z22.literal("org-admins"),
+  z22.object({
+    users: z22.union([
+      z22.array(z22.string().min(1).max(128)).min(1).max(APPROVER_SPEC_MAX_USERS),
+      TemplateBindingSchema
+    ])
+  }).strict(),
+  z22.object({
+    role: z22.union([
+      z22.string().min(1).max(128),
+      TemplateBindingSchema
+    ])
+  }).strict(),
+  z22.object({
+    group: z22.union([
+      z22.string().min(1).max(128),
+      TemplateBindingSchema
+    ])
+  }).strict(),
+  z22.object({
+    governance: z22.object({
+      policyId: z22.string().min(1).max(128)
+    }).strict()
+  }).strict()
+]);
+var FourEyesSchema = z22.object({
+  edit: ApproverSpecSchema,
+  approve: ApproverSpecSchema
+}).strict();
+var EscalationHopSchema = z22.object({
+  escalateTo: ApproverSpecSchema,
+  timeoutHours: z22.number().finite().min(1).max(720)
+}).strict();
+var TerminalOutcomeSchema = z22.enum([
+  "deny",
+  "cancel-run",
+  "fail",
+  "continue"
+]);
+var ApprovalOnTimeoutSchema = z22.union([
+  TerminalOutcomeSchema,
+  EscalationHopSchema,
+  z22.array(z22.union([
+    TerminalOutcomeSchema,
+    EscalationHopSchema
+  ])).min(1).max(ESCALATION_MAX_HOPS + 1)
+]);
+var APPROVER_SPEC_SHAPES = [
+  "'creator'",
+  "'org-admins'",
+  "{users:[userId, \u2026]}",
+  "{role:roleName}",
+  "{group:groupName}",
+  "{governance:{policyId}}"
+];
+var APPROVER_WRITTEN_MAX = 120;
+var USER_ID_SHAPED_RE = /^[^\s@]{1,128}$/;
+function describeApproverSpecRefusal(spec) {
+  const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
+  const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
+  const users = typeof spec === "object" && spec !== null ? spec.users : void 0;
+  const approver = typeof users === "string" && USER_ID_SHAPED_RE.test(users) ? {
+    users: [
+      users
+    ]
+  } : "creator";
+  const message = `approver ${written} is not an approver \u2014 legal: ${APPROVER_SPEC_SHAPES.join(" | ")}. 'creator' is the person who started the run: write approver:'creator' for "ask me" / "I approve"; {users:[\u2026]} takes user ids, never emails, names or {type:'user'}` + (approver === "creator" ? "" : `; here: approver:${JSON.stringify(approver)}`);
+  return {
+    approver,
+    written,
+    message
+  };
+}
+__name(describeApproverSpecRefusal, "describeApproverSpecRefusal");
+__name3(describeApproverSpecRefusal, "describeApproverSpecRefusal");
+var BINDING_ROOTS = [
+  "initData",
+  "stepResults",
+  "requestContext",
+  "state"
+];
+function bindingRootsOk(template22) {
+  const refs = [
+    ...template22.matchAll(/\$\{\s*([A-Za-z_$][\w$]*)/g)
+  ].map((m) => m[1]);
+  return refs.length > 0 && refs.every((r) => BINDING_ROOTS.includes(r));
+}
+__name(bindingRootsOk, "bindingRootsOk");
+__name3(bindingRootsOk, "bindingRootsOk");
+function isTemplateBinding(v) {
+  return typeof v === "object" && v !== null && typeof v.template === "string";
+}
+__name(isTemplateBinding, "isTemplateBinding");
+__name3(isTemplateBinding, "isTemplateBinding");
+function approvalEditable(node) {
+  if (node.editable === true) return true;
+  if (node.editable === false) return false;
+  return Array.isArray(node.editablePaths) && node.editablePaths.length > 0;
+}
+__name(approvalEditable, "approvalEditable");
+__name3(approvalEditable, "approvalEditable");
+function validateApproverBlock(node, opts = {
+  path: "approval"
+}) {
+  const issues = [];
+  const push = /* @__PURE__ */ __name3((code, path, message, severity = "error") => issues.push({
+    code,
+    path,
+    severity,
+    message
+  }), "push");
+  const checkSpec = /* @__PURE__ */ __name3((spec, path) => {
+    const r = ApproverSpecSchema.safeParse(spec);
+    if (!r.success) {
+      const users = spec?.users;
+      if (Array.isArray(users) && users.length > APPROVER_SPEC_MAX_USERS) push("cap-exceeded", path, `at most ${APPROVER_SPEC_MAX_USERS} users`);
+      else {
+        const refusal = describeApproverSpecRefusal(spec);
+        issues.push({
+          code: "approver-invalid",
+          path,
+          severity: "error",
+          message: refusal.message,
+          repair: {
+            approver: refusal.approver,
+            written: refusal.written
+          }
+        });
+      }
+      return;
+    }
+    const s = r.data;
+    if (typeof s === "object") {
+      if ("governance" in s && !opts.governanceEnabled) push("approver-governance-unavailable", path, "governance reviewer routing is not enabled for this deployment");
+      if ("group" in s && typeof s.group === "string" && !opts.scimEnabled && opts.idpGroups?.includes(s.group)) push("approver-idp-group-unavailable", path, "IdP-group approvers are not enabled for this deployment");
+      const binding = "users" in s ? s.users : "role" in s ? s.role : "group" in s ? s.group : void 0;
+      if (isTemplateBinding(binding)) {
+        if (!bindingRootsOk(binding.template)) push("approver-binding-invalid", `${path}.template`, "binding root must be initData / stepResults / requestContext / state");
+        if ("users" in s && opts.customerReachable) push("approver-binding-customer-reachable", `${path}.users`, "a customer-reachable workflow may not bind its approver list");
+      }
+    }
+  }, "checkSpec");
+  if (node.approver !== void 0) checkSpec(node.approver, `${opts.path}.approver`);
+  if (node.fourEyes !== void 0) {
+    const r = FourEyesSchema.safeParse(node.fourEyes);
+    if (!r.success) push("approver-invalid", `${opts.path}.fourEyes`, "fourEyes needs { edit, approve } approver specs");
+    else {
+      checkSpec(r.data.edit, `${opts.path}.fourEyes.edit`);
+      checkSpec(r.data.approve, `${opts.path}.fourEyes.approve`);
+    }
+    if (!approvalEditable(node)) push("four-eyes-requires-editable", `${opts.path}.fourEyes`, "fourEyes requires editable:true");
+    if (node.approver !== void 0) push("four-eyes-overrides-approver", `${opts.path}.approver`, "fourEyes replaces approver", "warning");
+    if (node.itemsPath) push("four-eyes-items-unsupported", `${opts.path}.fourEyes`, "fourEyes cannot combine with itemsPath");
+  }
+  if (node.excludeInitiator && (node.approver === void 0 || node.approver === "creator") && !node.fourEyes) push("approver-excludes-only-candidate", `${opts.path}.excludeInitiator`, "'creator' with excludeInitiator leaves no approver");
+  if (Array.isArray(node.onTimeout)) {
+    const chain = node.onTimeout;
+    const hops = chain.filter((m) => typeof m === "object" && m !== null && "escalateTo" in m);
+    if (hops.length > ESCALATION_MAX_HOPS) push("escalation-chain-too-long", `${opts.path}.onTimeout`, `at most ${ESCALATION_MAX_HOPS} hops`);
+    const last = chain[chain.length - 1];
+    if (typeof last === "object" && last !== null) push("escalation-chain-not-terminal", `${opts.path}.onTimeout`, "a chain must end in deny | cancel-run | fail");
+    hops.forEach((h, i) => checkSpec(h.escalateTo, `${opts.path}.onTimeout[${i}].escalateTo`));
+  } else if (typeof node.onTimeout === "object" && node.onTimeout !== null) {
+    checkSpec(node.onTimeout.escalateTo, `${opts.path}.onTimeout.escalateTo`);
+  }
+  return issues;
+}
+__name(validateApproverBlock, "validateApproverBlock");
+__name3(validateApproverBlock, "validateApproverBlock");
+function liftRenderedApprover(row, rendered) {
+  const text = (rendered ?? "").trim();
+  if (!text) return null;
+  if (row === "users") {
+    let members = null;
+    if (text.startsWith("[")) {
+      try {
+        members = JSON.parse(text);
+      } catch {
+        return null;
+      }
+    } else members = text.split(",").map((s) => s.trim());
+    if (!Array.isArray(members) || members.length === 0 || members.length > APPROVER_SPEC_MAX_USERS) return null;
+    if (!members.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128)) return null;
+    return {
+      users: [
+        ...new Set(members)
+      ].sort()
+    };
+  }
+  if (text.length > 128 || text.startsWith("[") || text.startsWith("{")) return null;
+  return row === "role" ? {
+    role: text
+  } : {
+    group: text
+  };
+}
+__name(liftRenderedApprover, "liftRenderedApprover");
+__name3(liftRenderedApprover, "liftRenderedApprover");
 var WORKSPACE_TEMPLATE_EXPR_RE = /^\$\{\s*(?:initData|input)\.([^}]+?)\s*\}$/;
 function workspaceTemplatePath(template22) {
   const key = template22.trim();
@@ -2752,6 +3163,11 @@ function sleepUntilUnsupportedMessage(id) {
 }
 __name(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
 __name3(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
+function armSubrunUnsupportedMessage(id, workflowId) {
+  return `the engine does not execute the implicit \`${workflowId}\` arm subrun (node "${id}") \u2014 a [map, step] container arm is the step itself with the map as its \`input\` since lua-cli 3.32.4; re-run \`lua compile\` with the current CLI (a hand-written artifact: put the map on the arm node's \`input\` and drop the \`workflow\` wrapper)`;
+}
+__name(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
+__name3(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
 var WORKFLOW_CAPS_DEFAULT = Object.freeze({
   maxParallelArms: 16,
   maxForeachConcurrency: 16,
@@ -2804,7 +3220,6 @@ function fillSingle(node) {
       fillPolicy(node, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS);
       return;
     case "workflow":
-      if (node.workflowId === WORKFLOW_ARM_SUBRUN_ID && Array.isArray(node.graph) && node.graph[1]) fillSingle(node.graph[1]);
       return;
   }
 }
@@ -2994,8 +3409,14 @@ function nodeStepRefs(entry) {
     case "agent": {
       const a = entry;
       const p = a.promptTemplate;
-      return typeof p === "string" ? templateStepRefs(p) : p && "template" in p ? templateStepRefs(p.template) : [];
+      const prompt = typeof p === "string" ? templateStepRefs(p) : p && "template" in p ? templateStepRefs(p.template) : [];
+      return [
+        ...prompt,
+        ...mapConfigStepRefs(a.input)
+      ];
     }
+    case "step":
+      return mapConfigStepRefs(entry.input);
     case "tool":
       return mapConfigStepRefs(entry.input);
     case "workflow":
@@ -3114,7 +3535,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     const id = singleId(node);
     const unknown = unknownWorkflowRetryMembers(r);
     if (unknown.length) err("invalid-envelope", workflowRetryUnknownMembersMessage(unknown), `${path}.retry`, id);
-    if (r.maxAttempts !== void 0 && !isWithinWorkflowRetryAttempts(r.maxAttempts)) {
+    if (!isWithinWorkflowRetryAttempts(r.maxAttempts)) {
       const over = typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS;
       err(over ? "cap-exceeded" : "invalid-envelope", workflowRetryMaxAttemptsMessage(r.maxAttempts), `${path}.retry.maxAttempts`, id);
     }
@@ -3214,6 +3635,21 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("job-tier-provider-unsupported", `model provider '${provider}' is outside LUA_WF_JOB_PROVIDERS [${opts.policy.jobProviders.join(", ")}]`, `${path}.model`, id);
     }
   }, "checkTier");
+  const checkModel = /* @__PURE__ */ __name3((node, path) => {
+    if (node.type !== "agent" || typeof node.model !== "string") return;
+    const registry = opts.approvedModels;
+    if (registry === void 0) return;
+    const id = singleId(node);
+    if (registry === "unavailable") {
+      const pin = node.model.trim();
+      if (pin && !normalizeModelId(pin, []).ok) {
+        warn("model-unresolved", `model "${pin}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`, `${path}.model`, id);
+      }
+      return;
+    }
+    const resolved = normalizeModelId(node.model, registry);
+    if (!resolved.ok) err("model-unresolved", modelUnresolvedMessage(resolved), `${path}.model`, id);
+  }, "checkModel");
   const checkWorkspace = /* @__PURE__ */ __name3((node, path) => {
     const id = singleId(node);
     const ws = workspaceOf(node);
@@ -3266,38 +3702,29 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
   }, "checkMapMembers");
   const checkInputShape = /* @__PURE__ */ __name3((node, path) => {
-    if (node.type !== "tool" && node.type !== "workflow") return;
     const input = node.input;
     if (input === void 0) return;
+    const id = singleId(node);
     if (input !== null && typeof input === "object" && !Array.isArray(input)) {
-      checkMapMembers(input, `${path}.input`, node.id);
+      checkMapMembers(input, `${path}.input`, id);
       return;
     }
-    err("invalid-envelope", `\`input\` must be an object map \u2014 each member a binding descriptor ({initData:true, path} | {step, path} | {value} | {template} | {requestContextPath}) or a JSON literal (got ${JSON.stringify(input)})`, `${path}.input`, node.id);
+    err("invalid-envelope", `\`input\` must be an object map \u2014 each member a binding descriptor ({initData:true, path} | {step, path} | {value} | {template} | {requestContextPath}) or a JSON literal (got ${JSON.stringify(input)})`, `${path}.input`, id);
   }, "checkInputShape");
+  const checkBodyInput = /* @__PURE__ */ __name3((body, path, container) => {
+    if (body.type === "workflow" || body.input === void 0) return;
+    err("arm-input-unsupported", container === "foreach" ? `a foreach body receives each item as its input \u2014 drop \`input\` on "${singleId(body)}" and map the items before the foreach instead` : `a loop body receives the previous output as its input \u2014 drop \`input\` on "${singleId(body)}" and put the map before the loop instead`, `${path}.input`, singleId(body));
+  }, "checkBodyInput");
   const checkSingle = /* @__PURE__ */ __name3((node, path, depth) => {
     recordOutputSchema(node);
-    if (node.type === "workflow" && node.workflowId === WORKFLOW_ARM_SUBRUN_ID) {
+    if (node.type === "workflow" && (typeof node.workflowId !== "string" || node.workflowId.length === 0)) {
       checkId(node.id, path);
-      const body = node.graph;
-      if (!Array.isArray(body) || body.length !== 2 || body[0]?.type !== "mapping" || !body[1]) {
-        err("container-arm-empty", "an implicit arm subrun needs a [mapping, step] body", `${path}.graph`, node.id);
-        return;
-      }
-      if (body[1].type === "mapping") {
-        err("container-arm-empty", "a bare mapping arm has nothing to run", `${path}.graph.1`, node.id);
-        return;
-      }
-      const inner = body[1];
-      if (isHitlNode(inner)) {
-        err("node-type-unsupported-in-container", workflowHitlArmShapeMessage(inner.type, inner.id, "mapped-arm"), `${path}.graph.1`, inner.id);
-        return;
-      }
-      upstream.add(singleId(body[1]));
-      checkArm(body[0], `${path}.graph.0`, depth, "parallel");
-      checkSingle(body[1], `${path}.graph.1`, depth);
-      upstream.add(body[0].id);
-      upstream.add(singleId(body[1]));
+      err("invalid-envelope", `\`workflowId\` must be a non-empty string naming the workflow to start (got ${JSON.stringify(node.workflowId)})`, `${path}.workflowId`, node.id);
+      return;
+    }
+    if (node.type === "workflow" && (node.workflowId.startsWith("$") || Array.isArray(node.graph))) {
+      checkId(node.id, path);
+      err("node-type-unsupported-by-engine", armSubrunUnsupportedMessage(node.id, node.workflowId), path, node.id);
       return;
     }
     checkId(singleId(node), path);
@@ -3305,6 +3732,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     checkInputShape(node, path);
     checkTimeout(node, path);
     checkTier(node, path);
+    checkModel(node, path);
     checkRetry(node, path);
     checkWorkspace(node, path);
     if (!opts.static) {
@@ -3327,7 +3755,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.type === "workflow" && node.kind === "subrun" && depth > caps.maxNestingDepth) {
       err("cap-exceeded", `nesting depth ${depth} exceeds ${caps.maxNestingDepth}`, path, node.id);
     }
-    if (node.type === "workflow" && node.workflowId !== WORKFLOW_ARM_SUBRUN_ID && typeof g.definition?.id === "string" && node.workflowId === g.definition.id) {
+    if (node.type === "workflow" && typeof g.definition?.id === "string" && node.workflowId === g.definition.id) {
       err("subrun-cycle", `"${node.id}" starts "${node.workflowId}", which is this workflow itself`, path, node.id);
     }
     for (const ref of nodeStepRefs(node)) {
@@ -3348,11 +3776,14 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (a.approver === "creator" && a.excludeInitiator === true) {
       err("approver-excludes-only-candidate", "approver:'creator' with excludeInitiator:true always excludes the only candidate", path, a.id);
     }
-    if (a.fourEyes !== void 0 && a.editable !== true) {
+    const editable = approvalEditable(a);
+    if (a.fourEyes !== void 0 && !editable) {
       err("four-eyes-requires-editable", "`fourEyes` requires editable:true", `${path}.fourEyes`, a.id);
     }
-    if ((a.editablePaths !== void 0 || a.editedPayloadSchema !== void 0) && a.editable !== true) {
-      err("editable-path-invalid", "`editablePaths` / `editedPayloadSchema` require editable:true", `${path}.editablePaths`, a.id);
+    if (a.editable === false && Array.isArray(a.editablePaths) && a.editablePaths.length > 0) {
+      err("editable-path-invalid", "`editablePaths` beside editable:false is contradictory \u2014 drop the paths or set editable:true", `${path}.editablePaths`, a.id);
+    } else if ((a.editablePaths !== void 0 || a.editedPayloadSchema !== void 0) && !editable) {
+      err("editable-path-invalid", "`editablePaths` / `editedPayloadSchema` require editable:true (a non-empty editablePaths implies it)", `${path}.editablePaths`, a.id);
     }
     for (const p of a.editablePaths ?? []) {
       if (!EDITABLE_PATH_RE.test(p)) err("editable-path-invalid", `editablePaths entry "${p}" is outside the seg(.seg)*[*]/[n] grammar`, `${path}.editablePaths`, a.id);
@@ -3533,6 +3964,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
           } else checkHitlArm(f.step, `${path}.step`, "foreach");
           declared.push(f.step.id);
         } else {
+          checkBodyInput(f.step, `${path}.step`, "foreach");
           checkSingle(f.step, `${path}.step`, o.chunk ? 2 : 1);
           declared.push(singleId(f.step));
         }
@@ -3553,6 +3985,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
           checkHitlArm(l.step, `${path}.step`, "loop");
           declared.push(l.step.id);
         } else {
+          checkBodyInput(l.step, `${path}.step`, "loop");
           checkSingle(l.step, `${path}.step`, 1);
           declared.push(singleId(l.step));
         }
@@ -4220,21 +4653,14 @@ function isContinuedFailureValue(v) {
 __name(isContinuedFailureValue, "isContinuedFailureValue");
 __name3(isContinuedFailureValue, "isContinuedFailureValue");
 var isHitlNode2 = /* @__PURE__ */ __name3((n2) => isWorkflowHitlEntryType(n2.type), "isHitlNode");
-function lowerContainerArm(mapping, step22) {
-  const stepId = nodeIdOf(step22);
+function inlineContainerArm(mapping, step22) {
   return {
-    type: "workflow",
-    id: `${stepId}_arm`,
-    workflowId: WORKFLOW_ARM_SUBRUN_ID,
-    kind: "subrun",
-    graph: [
-      mapping,
-      step22
-    ]
+    ...step22,
+    input: parseMapConfig(mapping.mapConfig, mapping.id)
   };
 }
-__name(lowerContainerArm, "lowerContainerArm");
-__name3(lowerContainerArm, "lowerContainerArm");
+__name(inlineContainerArm, "inlineContainerArm");
+__name3(inlineContainerArm, "inlineContainerArm");
 var nodeIdOf = /* @__PURE__ */ __name3((n2) => n2.type === "step" ? n2.step.id : n2.id, "nodeIdOf");
 function entryIds(entry) {
   switch (entry.type) {
@@ -4305,6 +4731,27 @@ function resolvePlacements(calls) {
         break;
     }
   });
+  const armMapPlacementIssue = /* @__PURE__ */ __name3((node, ref, i, container) => {
+    if (!ref.armMap || node.type === "mapping" || isHitlNode2(node)) return void 0;
+    const id = nodeIdOf(node);
+    if ((container === "foreach" || container === "loop") && node.type !== "workflow") {
+      return {
+        code: "mapping-placement",
+        message: container === "foreach" ? `foreach body "${id}": a [map, step] body is not supported \u2014 the body receives each item as its input; map the items before the foreach instead (foreach(step, { items: \u2026 }) or a .map() before it)` : `loop body "${id}": a [map, step] body is not supported \u2014 the body receives the previous output as its input; put the .map() before the loop instead`,
+        callIndex: i,
+        stepId: id
+      };
+    }
+    if (node.input !== void 0) {
+      return {
+        code: "mapping-placement",
+        message: `"${id}": the [map, step] arm mapping and the node's own input map would both bind its input \u2014 keep one (drop the arm map, or the \`input\` on the declaration)`,
+        callIndex: i,
+        stepId: id
+      };
+    }
+    return void 0;
+  }, "armMapPlacementIssue");
   const hitlPlacementIssue = /* @__PURE__ */ __name3((node, ref, i, container) => {
     if (!isHitlNode2(node)) return void 0;
     const id = node.id;
@@ -4331,7 +4778,7 @@ function resolvePlacements(calls) {
       if (ref.node.type === "mapping" && !allowMapping) {
         issues.push({
           code: "mapping-placement",
-          message: `mapping "${ref.node.id}" cannot be a container arm \u2014 chain it as [map, step]`,
+          message: `mapping "${ref.node.id}" cannot be a container arm \u2014 chain it as [map, step] in a parallel / conditional arm, or place the .map() before the container`,
           callIndex: i,
           stepId: ref.node.id
         });
@@ -4352,7 +4799,7 @@ function resolvePlacements(calls) {
     if (d.node.type === "mapping" && !allowMapping) {
       issues.push({
         code: "mapping-placement",
-        message: `map "${ref.ref}" cannot be a parallel/foreach/loop arm \u2014 chain it as [map, step]`,
+        message: `map "${ref.ref}" cannot be a parallel/foreach/loop arm \u2014 chain it as [map, step] in a parallel arm, or place the .map() before the container`,
         callIndex: i,
         stepId: ref.ref
       });
@@ -4363,6 +4810,11 @@ function resolvePlacements(calls) {
       issues.push(hitl);
       return void 0;
     }
+    const mapped = armMapPlacementIssue(d.node, ref, i, container);
+    if (mapped) {
+      issues.push(mapped);
+      return void 0;
+    }
     const prior = placedBy.get(ref.ref);
     if (prior !== void 0 && prior !== i) {
       issues.push({
@@ -4383,6 +4835,10 @@ function resolvePlacements(calls) {
     }
     const hitl = hitlPlacementIssue(ref.node, ref, i, container);
     if (hitl) issues.push(hitl);
+    else {
+      const mapped = armMapPlacementIssue(ref.node, ref, i, container);
+      if (mapped) issues.push(mapped);
+    }
   }, "claim");
   calls.forEach((call, i) => {
     switch (call.kind) {
@@ -4410,7 +4866,7 @@ function resolvePlacements(calls) {
   const lookup = /* @__PURE__ */ __name3((ref) => {
     const n2 = "node" in ref ? ref.node : declared.get(ref.ref)?.node;
     if (!n2 || !ref.armMap || n2.type === "mapping" || isHitlNode2(n2)) return n2;
-    return lowerContainerArm(ref.armMap, n2);
+    return inlineContainerArm(ref.armMap, n2);
   }, "lookup");
   calls.forEach((call, i) => {
     switch (call.kind) {
@@ -4851,9 +5307,37 @@ function pruneUndefined(o) {
 }
 __name(pruneUndefined, "pruneUndefined");
 __name3(pruneUndefined, "pruneUndefined");
+var WORKFLOW_INLINE_RUN_TAG = "inline";
+function runOrigin(run) {
+  if (run.goalId) return "goal";
+  if (run.jobId || run.trigger === "schedule") return "schedule";
+  if (run.dynamic === true) return run.tags?.includes(WORKFLOW_INLINE_RUN_TAG) ? "inline" : "compose";
+  return "definition";
+}
+__name(runOrigin, "runOrigin");
+__name3(runOrigin, "runOrigin");
+var RUN_ERROR_ISSUES_MAX = 20;
+function runErrorIssues(issues) {
+  if (!Array.isArray(issues)) return void 0;
+  const out = [];
+  for (const raw of issues.slice(0, RUN_ERROR_ISSUES_MAX)) {
+    if (!raw || typeof raw !== "object") continue;
+    const o = raw;
+    if (typeof o.code !== "string" || !o.code) continue;
+    out.push(pruneUndefined({
+      code: o.code,
+      path: typeof o.path === "string" ? o.path : void 0,
+      message: typeof o.message === "string" ? o.message : void 0
+    }));
+  }
+  return out.length ? out : void 0;
+}
+__name(runErrorIssues, "runErrorIssues");
+__name3(runErrorIssues, "runErrorIssues");
 function runNextAction(run) {
   if (isTerminalRunStatus(run.status)) return "none";
   if (run.status === "suspended" && run.gate?.kind === "budget") return "raise_budget";
+  if (run.status === "suspended" && run.gate?.kind === "billing") return "top_up";
   if (!run.cancel?.requestedAt) return "none";
   const forceAt = run.cancel.forceAfter ?? run.cancel.requestedAt + FORCE_CANCEL_STALE_MS;
   return Date.now() >= forceAt ? "force" : "cancel_again";
@@ -4890,6 +5374,16 @@ function runCountsFromStepStatuses(statuses) {
 }
 __name(runCountsFromStepStatuses, "runCountsFromStepStatuses");
 __name3(runCountsFromStepStatuses, "runCountsFromStepStatuses");
+function isBillingHeldStep(row) {
+  return row.status === "ready" && row.billingHold === true;
+}
+__name(isBillingHeldStep, "isBillingHeldStep");
+__name3(isBillingHeldStep, "isBillingHeldStep");
+function stepEffectiveStatus(row) {
+  return isBillingHeldStep(row) ? "suspended" : row.status;
+}
+__name(stepEffectiveStatus, "stepEffectiveStatus");
+__name3(stepEffectiveStatus, "stepEffectiveStatus");
 var n = /* @__PURE__ */ __name3((v) => typeof v === "number" && Number.isFinite(v) ? v : 0, "n");
 function runCounts(counts) {
   const c = counts ?? {};
@@ -5050,6 +5544,7 @@ function toWorkflowRunSummary(run) {
     repairOf: run.repairOf,
     repairRunIds: run.repairRunIds,
     trigger: run.trigger ?? "api",
+    origin: runOrigin(run),
     createdBy: {
       subjectType: principal?.subjectType ?? "system",
       subjectId: principal?.subjectId ?? run.userId ?? ""
@@ -5067,11 +5562,13 @@ function toWorkflowRunSummary(run) {
     usage: runUsage(run),
     // LUA-697: a row persisted before the write seams (#2406 / #2465 / the script tier) leaves scrubbed here too —
     // idempotent on a scrubbed message, bounded input; an empty message falls back to the code.
-    error: run.error ? {
+    error: run.error ? pruneUndefined({
       code: run.error.code ?? "error",
       message: scrubStepErrorMessage(run.error.message) ?? run.error.code ?? "error",
-      stepId: run.error.stepId
-    } : void 0,
+      stepId: run.error.stepId,
+      // LUA-784 (item 3): the unattended pre-start failure's refusal rows (`input_schema_invalid` and kin).
+      issues: runErrorIssues(run.error.issues)
+    }) : void 0,
     kind: "run",
     aclHash: run.aclHash,
     migration: run.migration,
@@ -5724,204 +6221,6 @@ function rebaseItemPointer(pointer, itemsPath, index) {
 }
 __name(rebaseItemPointer, "rebaseItemPointer");
 __name3(rebaseItemPointer, "rebaseItemPointer");
-var APPROVER_SPEC_MAX_USERS = 20;
-var ESCALATION_MAX_HOPS = 3;
-var TemplateBindingSchema = z22.object({
-  template: z22.string().min(1).max(2048)
-}).strict();
-var ApproverSpecSchema = z22.union([
-  z22.literal("creator"),
-  z22.literal("org-admins"),
-  z22.object({
-    users: z22.union([
-      z22.array(z22.string().min(1).max(128)).min(1).max(APPROVER_SPEC_MAX_USERS),
-      TemplateBindingSchema
-    ])
-  }).strict(),
-  z22.object({
-    role: z22.union([
-      z22.string().min(1).max(128),
-      TemplateBindingSchema
-    ])
-  }).strict(),
-  z22.object({
-    group: z22.union([
-      z22.string().min(1).max(128),
-      TemplateBindingSchema
-    ])
-  }).strict(),
-  z22.object({
-    governance: z22.object({
-      policyId: z22.string().min(1).max(128)
-    }).strict()
-  }).strict()
-]);
-var FourEyesSchema = z22.object({
-  edit: ApproverSpecSchema,
-  approve: ApproverSpecSchema
-}).strict();
-var EscalationHopSchema = z22.object({
-  escalateTo: ApproverSpecSchema,
-  timeoutHours: z22.number().finite().min(1).max(720)
-}).strict();
-var TerminalOutcomeSchema = z22.enum([
-  "deny",
-  "cancel-run",
-  "fail",
-  "continue"
-]);
-var ApprovalOnTimeoutSchema = z22.union([
-  TerminalOutcomeSchema,
-  EscalationHopSchema,
-  z22.array(z22.union([
-    TerminalOutcomeSchema,
-    EscalationHopSchema
-  ])).min(1).max(ESCALATION_MAX_HOPS + 1)
-]);
-var APPROVER_SPEC_SHAPES = [
-  "'creator'",
-  "'org-admins'",
-  "{users:[userId, \u2026]}",
-  "{role:roleName}",
-  "{group:groupName}",
-  "{governance:{policyId}}"
-];
-var APPROVER_WRITTEN_MAX = 120;
-var USER_ID_SHAPED_RE = /^[^\s@]{1,128}$/;
-function describeApproverSpecRefusal(spec) {
-  const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
-  const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
-  const users = typeof spec === "object" && spec !== null ? spec.users : void 0;
-  const approver = typeof users === "string" && USER_ID_SHAPED_RE.test(users) ? {
-    users: [
-      users
-    ]
-  } : "creator";
-  const message = `approver ${written} is not an approver \u2014 legal: ${APPROVER_SPEC_SHAPES.join(" | ")}. 'creator' is the person who started the run: write approver:'creator' for "ask me" / "I approve"; {users:[\u2026]} takes user ids, never emails, names or {type:'user'}` + (approver === "creator" ? "" : `; here: approver:${JSON.stringify(approver)}`);
-  return {
-    approver,
-    written,
-    message
-  };
-}
-__name(describeApproverSpecRefusal, "describeApproverSpecRefusal");
-__name3(describeApproverSpecRefusal, "describeApproverSpecRefusal");
-var BINDING_ROOTS = [
-  "initData",
-  "stepResults",
-  "requestContext",
-  "state"
-];
-function bindingRootsOk(template22) {
-  const refs = [
-    ...template22.matchAll(/\$\{\s*([A-Za-z_$][\w$]*)/g)
-  ].map((m) => m[1]);
-  return refs.length > 0 && refs.every((r) => BINDING_ROOTS.includes(r));
-}
-__name(bindingRootsOk, "bindingRootsOk");
-__name3(bindingRootsOk, "bindingRootsOk");
-function isTemplateBinding(v) {
-  return typeof v === "object" && v !== null && typeof v.template === "string";
-}
-__name(isTemplateBinding, "isTemplateBinding");
-__name3(isTemplateBinding, "isTemplateBinding");
-function validateApproverBlock(node, opts = {
-  path: "approval"
-}) {
-  const issues = [];
-  const push = /* @__PURE__ */ __name3((code, path, message, severity = "error") => issues.push({
-    code,
-    path,
-    severity,
-    message
-  }), "push");
-  const checkSpec = /* @__PURE__ */ __name3((spec, path) => {
-    const r = ApproverSpecSchema.safeParse(spec);
-    if (!r.success) {
-      const users = spec?.users;
-      if (Array.isArray(users) && users.length > APPROVER_SPEC_MAX_USERS) push("cap-exceeded", path, `at most ${APPROVER_SPEC_MAX_USERS} users`);
-      else {
-        const refusal = describeApproverSpecRefusal(spec);
-        issues.push({
-          code: "approver-invalid",
-          path,
-          severity: "error",
-          message: refusal.message,
-          repair: {
-            approver: refusal.approver,
-            written: refusal.written
-          }
-        });
-      }
-      return;
-    }
-    const s = r.data;
-    if (typeof s === "object") {
-      if ("governance" in s && !opts.governanceEnabled) push("approver-governance-unavailable", path, "governance reviewer routing is not enabled for this deployment");
-      if ("group" in s && typeof s.group === "string" && !opts.scimEnabled && opts.idpGroups?.includes(s.group)) push("approver-idp-group-unavailable", path, "IdP-group approvers are not enabled for this deployment");
-      const binding = "users" in s ? s.users : "role" in s ? s.role : "group" in s ? s.group : void 0;
-      if (isTemplateBinding(binding)) {
-        if (!bindingRootsOk(binding.template)) push("approver-binding-invalid", `${path}.template`, "binding root must be initData / stepResults / requestContext / state");
-        if ("users" in s && opts.customerReachable) push("approver-binding-customer-reachable", `${path}.users`, "a customer-reachable workflow may not bind its approver list");
-      }
-    }
-  }, "checkSpec");
-  if (node.approver !== void 0) checkSpec(node.approver, `${opts.path}.approver`);
-  if (node.fourEyes !== void 0) {
-    const r = FourEyesSchema.safeParse(node.fourEyes);
-    if (!r.success) push("approver-invalid", `${opts.path}.fourEyes`, "fourEyes needs { edit, approve } approver specs");
-    else {
-      checkSpec(r.data.edit, `${opts.path}.fourEyes.edit`);
-      checkSpec(r.data.approve, `${opts.path}.fourEyes.approve`);
-    }
-    if (!node.editable) push("four-eyes-requires-editable", `${opts.path}.fourEyes`, "fourEyes requires editable:true");
-    if (node.approver !== void 0) push("four-eyes-overrides-approver", `${opts.path}.approver`, "fourEyes replaces approver", "warning");
-    if (node.itemsPath) push("four-eyes-items-unsupported", `${opts.path}.fourEyes`, "fourEyes cannot combine with itemsPath");
-  }
-  if (node.excludeInitiator && (node.approver === void 0 || node.approver === "creator") && !node.fourEyes) push("approver-excludes-only-candidate", `${opts.path}.excludeInitiator`, "'creator' with excludeInitiator leaves no approver");
-  if (Array.isArray(node.onTimeout)) {
-    const chain = node.onTimeout;
-    const hops = chain.filter((m) => typeof m === "object" && m !== null && "escalateTo" in m);
-    if (hops.length > ESCALATION_MAX_HOPS) push("escalation-chain-too-long", `${opts.path}.onTimeout`, `at most ${ESCALATION_MAX_HOPS} hops`);
-    const last = chain[chain.length - 1];
-    if (typeof last === "object" && last !== null) push("escalation-chain-not-terminal", `${opts.path}.onTimeout`, "a chain must end in deny | cancel-run | fail");
-    hops.forEach((h, i) => checkSpec(h.escalateTo, `${opts.path}.onTimeout[${i}].escalateTo`));
-  } else if (typeof node.onTimeout === "object" && node.onTimeout !== null) {
-    checkSpec(node.onTimeout.escalateTo, `${opts.path}.onTimeout.escalateTo`);
-  }
-  return issues;
-}
-__name(validateApproverBlock, "validateApproverBlock");
-__name3(validateApproverBlock, "validateApproverBlock");
-function liftRenderedApprover(row, rendered) {
-  const text = (rendered ?? "").trim();
-  if (!text) return null;
-  if (row === "users") {
-    let members = null;
-    if (text.startsWith("[")) {
-      try {
-        members = JSON.parse(text);
-      } catch {
-        return null;
-      }
-    } else members = text.split(",").map((s) => s.trim());
-    if (!Array.isArray(members) || members.length === 0 || members.length > APPROVER_SPEC_MAX_USERS) return null;
-    if (!members.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128)) return null;
-    return {
-      users: [
-        ...new Set(members)
-      ].sort()
-    };
-  }
-  if (text.length > 128 || text.startsWith("[") || text.startsWith("{")) return null;
-  return row === "role" ? {
-    role: text
-  } : {
-    group: text
-  };
-}
-__name(liftRenderedApprover, "liftRenderedApprover");
-__name3(liftRenderedApprover, "liftRenderedApprover");
 var WORKFLOW_ENV_OVERLAY_MAX_KEYS = 64;
 var WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES = 4096;
 var WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE = /(SECRET|TOKEN|KEY|PASSWORD)$/;
@@ -6205,7 +6504,6 @@ function* singleStepsOf(entry) {
       return;
     case "workflow":
       yield entry;
-      if (Array.isArray(entry.graph)) yield* singleStepsOf(entry.graph[1]);
       return;
     case "parallel":
     case "conditional":
@@ -6364,7 +6662,10 @@ var assertPredicate = /* @__PURE__ */ __name((p, where) => {
 }, "assertPredicate");
 var assertRetry = /* @__PURE__ */ __name((r, id) => {
   if (!r) return;
-  if (typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS) throw new LuaWorkflowBuildError("cap-exceeded", `"${id}": ${workflowRetryMaxAttemptsMessage(r.maxAttempts)}`);
+  if (!isWithinWorkflowRetryAttempts(r.maxAttempts)) {
+    const over = typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS;
+    throw new LuaWorkflowBuildError(over ? "cap-exceeded" : "invalid-envelope", `"${id}": ${workflowRetryMaxAttemptsMessage(r.maxAttempts)}`);
+  }
   if (r.backoff !== void 0 && !WORKFLOW_RETRY_BACKOFFS.includes(r.backoff)) throw new LuaWorkflowBuildError("backoff-invalid", `"${id}": retry.backoff must be ${WORKFLOW_RETRY_BACKOFFS.map((b) => `'${b}'`).join(" | ")}`);
   if (r.maxBackoffSeconds !== void 0) {
     if (r.backoff !== "exponential") throw new LuaWorkflowBuildError("backoff-invalid", `"${id}": retry.maxBackoffSeconds is only meaningful with backoff:'exponential'`);
@@ -6514,14 +6815,13 @@ function stepNodeOf(s) {
 __name(stepNodeOf, "stepNodeOf");
 function materializeEntry(entry, steps) {
   const single = /* @__PURE__ */ __name((n2) => {
-    if (n2.type === "step" && steps[n2.step.id]) return stepNodeOf(steps[n2.step.id]);
-    if (n2.type === "workflow" && n2.workflowId === WORKFLOW_ARM_SUBRUN_ID && n2.graph) return {
-      ...n2,
-      graph: [
-        n2.graph[0],
-        single(n2.graph[1])
-      ]
-    };
+    if (n2.type === "step" && steps[n2.step.id]) {
+      const node = stepNodeOf(steps[n2.step.id]);
+      return n2.input !== void 0 ? {
+        ...node,
+        input: n2.input
+      } : node;
+    }
     return n2;
   }, "single");
   switch (entry.type) {