lua-cli 3.32.4 → 3.32.6

package/dist/api-exports.js

@@ -431,6 +431,18 @@ function modelUnresolvedMessage(r) {
   }
   return r.candidates.length ? `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms: ${r.candidates.join(", ")}` : `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms are the registry's provider-prefixed ids (provider/model) or a bare id that names exactly one of them`;
 }
+function providerModelId(code) {
+  const requested = typeof code === "string" ? code.trim() : "";
+  if (!requested || isModelIdSentinel(requested)) return requested;
+  const slash = requested.indexOf("/");
+  if (slash <= 0) return requested;
+  const provider = requested.slice(0, slash).toLowerCase();
+  if (MODEL_ID_BYOK_PROVIDERS.includes(provider)) return requested;
+  return requested.slice(slash + 1);
+}
+function providerModelFamily(code) {
+  return providerModelId(code).toLowerCase().replace(MODEL_SNAPSHOT_SUFFIX, "");
+}
 function isImplicitModelSelectionSource(source) {
   return source !== void 0 && IMPLICIT_MODEL_SELECTION_SOURCES.includes(source);
 }
@@ -544,6 +556,11 @@ function isDeviceCredentialPrincipal(context) {
 function hasDeviceCredentialType(value3) {
   return DeviceCredentialClaimSchema.safeParse(value3).success;
 }
+function sessionAuthTime(context) {
+  if (!context || context.credential.type !== "firstPartySession") return void 0;
+  const authTime = context.authTime;
+  return typeof authTime === "number" && Number.isInteger(authTime) && authTime >= 0 && authTime <= SESSION_AUTH_TIME_MAX_S ? authTime : void 0;
+}
 function isTypedApiKeyPrincipal(context) {
   return context?.subject.subjectType === "apiKey" && context.credential.type === "apiKey" && !context.compatibility;
 }
@@ -716,6 +733,39 @@ function scheduledWorkflowRunId(jobId, scheduledTime) {
   const key = typeof scheduledTime === "number" ? String(scheduledTime) : scheduledTimeKey(scheduledTime);
   return `${WORKFLOW_SCHEDULED_RUN_ID_PREFIX}${jobId}_${key}`;
 }
+function renderWorkflowScheduleKeyTemplate(template3, ctx) {
+  if (!template3) return void 0;
+  const read = /* @__PURE__ */ __name2((path3) => path3.split(".").reduce((o, k) => o && typeof o === "object" ? o[k] : void 0, ctx.input), "read");
+  let unresolved = false;
+  const out = template3.replace(/\$\{\s*([a-zA-Z0-9_.]+)\s*\}/g, (_m, expr) => {
+    let v = "";
+    if (expr === "scheduledTime") v = ctx.scheduledTime ?? "";
+    else if (expr.startsWith("input.")) v = read(expr.slice("input.".length));
+    const s = v === void 0 || v === null ? "" : String(v);
+    if (s === "") unresolved = true;
+    return s;
+  });
+  if (unresolved) return void 0;
+  const key = out.slice(0, WORKFLOW_SCHEDULE_KEY_MAX);
+  return key && /^[A-Za-z0-9:_\-.\/]+$/.test(key) ? key : void 0;
+}
+function scheduledWorkflowIdempotencyKey(jobId, rendered) {
+  const head = `${WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX}${jobId}:`;
+  if (head.length + rendered.length <= WORKFLOW_SCHEDULE_KEY_MAX) return `${head}${rendered}`;
+  const digest = stableKeyDigest(rendered);
+  const room = WORKFLOW_SCHEDULE_KEY_MAX - head.length - digest.length - 1;
+  return `${head}${rendered.slice(0, Math.max(0, room))}~${digest}`;
+}
+function stableKeyDigest(s) {
+  let a = 2166136261;
+  let b = 84696351;
+  for (let i = 0; i < s.length; i++) {
+    const c = s.charCodeAt(i);
+    a = Math.imul(a ^ c, 16777619);
+    b = Math.imul(b ^ c, 16777619) ^ b >>> 13;
+  }
+  return (a >>> 0).toString(16).padStart(8, "0") + (b >>> 0).toString(16).padStart(8, "0");
+}
 function workflowOperationId(runId, stepId, billingEpoch) {
   return `${WORKFLOW_OPERATION_ID_PREFIX}${runId}:${stepId}:${billingEpoch}`;
 }
@@ -1019,7 +1069,59 @@ function extractSingleJsonValue(text) {
     };
   }
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE;
+function agentFeatureCatalogDefault(featureName) {
+  return DEFAULT_ON_AGENT_FEATURES.includes(featureName);
+}
+function hasExplicitFeatureActive(row) {
+  return typeof row?.active === "boolean";
+}
+function effectiveFeatureActive(row, catalogDefault) {
+  return hasExplicitFeatureActive(row) ? row.active : catalogDefault;
+}
+function resolveEffectiveFeature(row, catalogDefault) {
+  return hasExplicitFeatureActive(row) ? {
+    active: row.active,
+    source: "agent",
+    default: catalogDefault
+  } : {
+    active: catalogDefault,
+    source: "default",
+    default: catalogDefault
+  };
+}
+function isFeatureRow(value3) {
+  return typeof value3 === "object" && value3 !== null;
+}
+function effectiveAgentFeatureRows(base, override) {
+  const merged = /* @__PURE__ */ new Map();
+  for (const [name, row] of Object.entries(base ?? {})) {
+    if (isFeatureRow(row)) merged.set(name, {
+      row,
+      origin: "baseAgent"
+    });
+  }
+  for (const [name, row] of Object.entries(override ?? {})) {
+    if (isFeatureRow(row)) merged.set(name, {
+      row,
+      origin: "subAgent"
+    });
+  }
+  return {
+    rows: Object.fromEntries([
+      ...merged
+    ].map(([name, e]) => [
+      name,
+      e.row
+    ])),
+    origins: Object.fromEntries([
+      ...merged
+    ].map(([name, e]) => [
+      name,
+      e.origin
+    ]))
+  };
+}
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1346,6 +1448,11 @@ var init_dist = __esm({
     __name2(normalizeModelId, "normalizeModelId");
     __name(modelUnresolvedMessage, "modelUnresolvedMessage");
     __name2(modelUnresolvedMessage, "modelUnresolvedMessage");
+    __name(providerModelId, "providerModelId");
+    __name2(providerModelId, "providerModelId");
+    MODEL_SNAPSHOT_SUFFIX = /(?:[-@](?:19|20)\d{2}(?:0[1-9]|1[0-2])(?:0[1-9]|[12]\d|3[01])|-(?:19|20)\d{2}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01]))$/;
+    __name(providerModelFamily, "providerModelFamily");
+    __name2(providerModelFamily, "providerModelFamily");
     REASONING_EFFORT_VALUES = [
       "off",
       "minimal",
@@ -1764,6 +1871,7 @@ This text is who you are for this person. As you learn them, their name, their w
       }
     });
     IdSchema = z2.string().min(1).max(256);
+    SESSION_AUTH_TIME_MAX_S = 4102444800;
     PrincipalDescriptorSchema = z2.object({
       subjectType: SubjectTypeSchema,
       subjectId: IdSchema
@@ -1812,7 +1920,8 @@ This text is who you are for this person. As you learn them, their name, their w
       owner: PrincipalOwnerSchema.optional(),
       compatibility: z2.object({
         mode: z2.literal("legacy-owner-delegation")
-      }).strict().optional()
+      }).strict().optional(),
+      authTime: z2.number().int().nonnegative().max(SESSION_AUTH_TIME_MAX_S).optional()
     }).strict();
     DeviceCredentialPrincipalContextSchema = z2.object({
       version: z2.literal(1),
@@ -1868,6 +1977,8 @@ This text is who you are for this person. As you learn them, their name, their w
     }).passthrough();
     __name(hasDeviceCredentialType, "hasDeviceCredentialType");
     __name2(hasDeviceCredentialType, "hasDeviceCredentialType");
+    __name(sessionAuthTime, "sessionAuthTime");
+    __name2(sessionAuthTime, "sessionAuthTime");
     __name(isTypedApiKeyPrincipal, "isTypedApiKeyPrincipal");
     __name2(isTypedApiKeyPrincipal, "isTypedApiKeyPrincipal");
     __name(typedApiKeyPrincipalId, "typedApiKeyPrincipalId");
@@ -2099,6 +2210,14 @@ This text is who you are for this person. As you learn them, their name, their w
     __name2(isScheduledWorkflowRunId, "isScheduledWorkflowRunId");
     __name(scheduledWorkflowRunId, "scheduledWorkflowRunId");
     __name2(scheduledWorkflowRunId, "scheduledWorkflowRunId");
+    WORKFLOW_SCHEDULE_KEY_MAX = 128;
+    __name(renderWorkflowScheduleKeyTemplate, "renderWorkflowScheduleKeyTemplate");
+    __name2(renderWorkflowScheduleKeyTemplate, "renderWorkflowScheduleKeyTemplate");
+    WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX = "sched:";
+    __name(scheduledWorkflowIdempotencyKey, "scheduledWorkflowIdempotencyKey");
+    __name2(scheduledWorkflowIdempotencyKey, "scheduledWorkflowIdempotencyKey");
+    __name(stableKeyDigest, "stableKeyDigest");
+    __name2(stableKeyDigest, "stableKeyDigest");
     WORKFLOW_OPERATION_ID_PREFIX = "wf:";
     __name(workflowOperationId, "workflowOperationId");
     __name2(workflowOperationId, "workflowOperationId");
@@ -2544,6 +2663,23 @@ listed here; never invent a target.`;
     JSON_FENCE_RE = /```(?:json)?[ \t]*\r?\n([\s\S]*?)\r?\n?```/g;
     __name(extractSingleJsonValue, "extractSingleJsonValue");
     __name2(extractSingleJsonValue, "extractSingleJsonValue");
+    DEFAULT_ON_AGENT_FEATURES = [
+      "workflows",
+      "workflowCompose",
+      "observationalMemory"
+    ];
+    __name(agentFeatureCatalogDefault, "agentFeatureCatalogDefault");
+    __name2(agentFeatureCatalogDefault, "agentFeatureCatalogDefault");
+    __name(hasExplicitFeatureActive, "hasExplicitFeatureActive");
+    __name2(hasExplicitFeatureActive, "hasExplicitFeatureActive");
+    __name(effectiveFeatureActive, "effectiveFeatureActive");
+    __name2(effectiveFeatureActive, "effectiveFeatureActive");
+    __name(resolveEffectiveFeature, "resolveEffectiveFeature");
+    __name2(resolveEffectiveFeature, "resolveEffectiveFeature");
+    __name(isFeatureRow, "isFeatureRow");
+    __name2(isFeatureRow, "isFeatureRow");
+    __name(effectiveAgentFeatureRows, "effectiveAgentFeatureRows");
+    __name2(effectiveAgentFeatureRows, "effectiveAgentFeatureRows");
   }
 });
 
@@ -2932,7 +3068,7 @@ function fillHitl(node) {
     if (a.onTimeout === void 0) a.onTimeout = "deny";
     if (a.onDeny === void 0) a.onDeny = "continue";
     if (a.excludeInitiator === void 0) a.excludeInitiator = false;
-    if (a.editable === void 0) a.editable = false;
+    if (a.editable === void 0) a.editable = approvalEditable(a);
     return;
   }
   const w = node;
@@ -3176,7 +3312,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     const id = singleId(node);
     const unknown = unknownWorkflowRetryMembers(r);
     if (unknown.length) err("invalid-envelope", workflowRetryUnknownMembersMessage(unknown), `${path3}.retry`, id);
-    if (r.maxAttempts !== void 0 && !isWithinWorkflowRetryAttempts(r.maxAttempts)) {
+    if (!isWithinWorkflowRetryAttempts(r.maxAttempts)) {
       const over = typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS;
       err(over ? "cap-exceeded" : "invalid-envelope", workflowRetryMaxAttemptsMessage(r.maxAttempts), `${path3}.retry.maxAttempts`, id);
     }
@@ -3414,7 +3550,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     const a = node;
     checkId(a.id, path3);
-    if (a.approver === "creator" && a.excludeInitiator === true) {
+    if ((a.approver ?? "creator") === "creator" && a.excludeInitiator === true) {
       err("approver-excludes-only-candidate", "approver:'creator' with excludeInitiator:true always excludes the only candidate", path3, a.id);
     }
     const editable = approvalEditable(a);
@@ -4717,6 +4853,7 @@ function runErrorIssues(issues) {
 function runNextAction(run) {
   if (isTerminalRunStatus(run.status)) return "none";
   if (run.status === "suspended" && run.gate?.kind === "budget") return "raise_budget";
+  if (run.status === "suspended" && run.gate?.kind === "billing") return "top_up";
   if (!run.cancel?.requestedAt) return "none";
   const forceAt = run.cancel.forceAfter ?? run.cancel.requestedAt + FORCE_CANCEL_STALE_MS;
   return Date.now() >= forceAt ? "force" : "cancel_again";
@@ -4744,6 +4881,12 @@ function runCountsFromStepStatuses(statuses) {
   for (const s of statuses) tally[s] = (tally[s] ?? 0) + 1;
   return runCountsFromStatusTally(tally);
 }
+function isBillingHeldStep(row) {
+  return row.status === "ready" && row.billingHold === true;
+}
+function stepEffectiveStatus(row) {
+  return isBillingHeldStep(row) ? "suspended" : row.status;
+}
 function runCounts(counts) {
   const c = counts ?? {};
   const rawInFlight = c.dispatched !== void 0 || c.claimed !== void 0 || c.running !== void 0 || c.cancellation_requested !== void 0;
@@ -5430,6 +5573,53 @@ function rebaseItemPointer(pointer, itemsPath, index) {
   const base = `/${itemsPath.split(".").map(escapePointer).join("/")}/${index}`;
   return pointer === "/" || pointer === "" ? base : `${base}${pointer}`;
 }
+function validateWorkflowSchedule(schedule, path3 = "/schedule") {
+  if (schedule === void 0 || schedule === null) return [];
+  const issue = /* @__PURE__ */ __name3((at, detail) => [
+    {
+      code: WORKFLOW_SCHEDULE_SHAPE_ISSUE,
+      severity: "error",
+      path: at,
+      message: `${detail} \u2014 ${WORKFLOW_SCHEDULE_SHAPES_HINT}`
+    }
+  ], "issue");
+  if (!isObject(schedule)) {
+    return issue(path3, `\`schedule\` is ${Array.isArray(schedule) ? "an array" : `a ${typeof schedule}`}, not a typed schedule object`);
+  }
+  const type = schedule.type;
+  if (type === void 0) {
+    const keys = Object.keys(schedule);
+    const seen = keys.length ? ` (got { ${keys.join(", ")} })` : " (got {})";
+    return issue(path3, `\`schedule\` carries no \`type\` discriminator${seen}`);
+  }
+  if (typeof type !== "string" || !WORKFLOW_SCHEDULE_TYPES.includes(type)) {
+    return issue(path3, `\`schedule.type\` ${JSON.stringify(type)} is not one of ${WORKFLOW_SCHEDULE_TYPES.map((t) => `'${t}'`).join(" | ")}`);
+  }
+  switch (type) {
+    case "cron": {
+      if (typeof schedule.expression !== "string" || schedule.expression.trim().length === 0) {
+        return issue(`${path3}/expression`, "a { type: 'cron' } schedule needs a non-empty string `expression`");
+      }
+      if (schedule.timezone !== void 0 && (typeof schedule.timezone !== "string" || schedule.timezone.length === 0)) {
+        return issue(`${path3}/timezone`, "a { type: 'cron' } schedule's `timezone`, when given, is a non-empty IANA string");
+      }
+      return [];
+    }
+    case "interval": {
+      const s = schedule.seconds;
+      if (typeof s !== "number" || !Number.isFinite(s) || s <= 0) {
+        return issue(`${path3}/seconds`, "a { type: 'interval' } schedule needs a positive number `seconds`");
+      }
+      return [];
+    }
+    case "once": {
+      if (typeof schedule.executeAt !== "string" || Number.isNaN(Date.parse(schedule.executeAt))) {
+        return issue(`${path3}/executeAt`, "a { type: 'once' } schedule needs an ISO-8601 string `executeAt`");
+      }
+      return [];
+    }
+  }
+}
 function collectEnvTemplateKeys(value22) {
   const keys = /* @__PURE__ */ new Set();
   const walk22 = /* @__PURE__ */ __name3((v) => {
@@ -5719,7 +5909,7 @@ function needsInheritedWorkspace(graph) {
   }
   return false;
 }
-var __defProp3, __name3, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
+var __defProp3, __name3, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
 var init_dist2 = __esm({
   "../workflow-graph/dist/index.mjs"() {
     "use strict";
@@ -6274,6 +6464,10 @@ var init_dist2 = __esm({
     __name3(runCountsFromStatusTally, "runCountsFromStatusTally");
     __name(runCountsFromStepStatuses, "runCountsFromStepStatuses");
     __name3(runCountsFromStepStatuses, "runCountsFromStepStatuses");
+    __name(isBillingHeldStep, "isBillingHeldStep");
+    __name3(isBillingHeldStep, "isBillingHeldStep");
+    __name(stepEffectiveStatus, "stepEffectiveStatus");
+    __name3(stepEffectiveStatus, "stepEffectiveStatus");
     n = /* @__PURE__ */ __name3((v) => typeof v === "number" && Number.isFinite(v) ? v : 0, "n");
     __name(runCounts, "runCounts");
     __name3(runCounts, "runCounts");
@@ -6425,6 +6619,16 @@ var init_dist2 = __esm({
     __name3(applyJsonPatch, "applyJsonPatch");
     __name(rebaseItemPointer, "rebaseItemPointer");
     __name3(rebaseItemPointer, "rebaseItemPointer");
+    WORKFLOW_SCHEDULE_TYPES = [
+      "cron",
+      "interval",
+      "once"
+    ];
+    WORKFLOW_SCHEDULE_SHAPE_ISSUE = "schedule-shape-invalid";
+    WORKFLOW_SCHEDULE_SHAPES_HINT = "`schedule` must be one of { type: 'cron', expression: '<5-field cron>', timezone?: '<IANA tz>' } | { type: 'interval', seconds: <n> } | { type: 'once', executeAt: '<ISO-8601>' }";
+    isObject = /* @__PURE__ */ __name3((v) => typeof v === "object" && v !== null && !Array.isArray(v), "isObject");
+    __name(validateWorkflowSchedule, "validateWorkflowSchedule");
+    __name3(validateWorkflowSchedule, "validateWorkflowSchedule");
     WORKFLOW_ENV_OVERLAY_MAX_KEYS = 64;
     WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES = 4096;
     WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE = /(SECRET|TOKEN|KEY|PASSWORD)$/;
@@ -6691,7 +6895,7 @@ var init_workflow = __esm({
     }, "assertPredicate");
     assertRetry = /* @__PURE__ */ __name((r, id) => {
       if (!r) return;
-      if (r.maxAttempts !== void 0 && !isWithinWorkflowRetryAttempts(r.maxAttempts)) {
+      if (!isWithinWorkflowRetryAttempts(r.maxAttempts)) {
         const over = typeof r.maxAttempts === "number" && r.maxAttempts > WORKFLOW_RETRY_MAX_ATTEMPTS;
         throw new LuaWorkflowBuildError(over ? "cap-exceeded" : "invalid-envelope", `"${id}": ${workflowRetryMaxAttemptsMessage(r.maxAttempts)}`);
       }
@@ -7212,9 +7416,12 @@ var init_workflow = __esm({
         if (opts.approver === "creator" && opts.excludeInitiator === true) {
           throw new LuaWorkflowBuildError("approver-excludes-only-candidate", `"${id}": approver:'creator' with excludeInitiator:true always excludes the only candidate`);
         }
-        if (opts.fourEyes !== void 0 && opts.editable !== true) throw new LuaWorkflowBuildError("four-eyes-requires-editable", `"${id}": fourEyes requires editable:true`);
-        if ((opts.editablePaths !== void 0 || opts.editedPayloadSchema !== void 0) && opts.editable !== true) {
-          throw new LuaWorkflowBuildError("editable-path-invalid", `"${id}": editablePaths / editedPayloadSchema require editable:true`);
+        const editable = approvalEditable(opts);
+        if (opts.fourEyes !== void 0 && !editable) throw new LuaWorkflowBuildError("four-eyes-requires-editable", `"${id}": \`fourEyes\` requires editable:true`);
+        if (opts.editable === false && Array.isArray(opts.editablePaths) && opts.editablePaths.length > 0) {
+          throw new LuaWorkflowBuildError("editable-path-invalid", `"${id}": \`editablePaths\` beside editable:false is contradictory \u2014 drop the paths or set editable:true`);
+        } else if ((opts.editablePaths !== void 0 || opts.editedPayloadSchema !== void 0) && !editable) {
+          throw new LuaWorkflowBuildError("editable-path-invalid", `"${id}": \`editablePaths\` / \`editedPayloadSchema\` require editable:true (a non-empty editablePaths implies it)`);
         }
         for (const p of opts.editablePaths ?? []) {
           if (!EDITABLE_PATH_RE2.test(p)) throw new LuaWorkflowBuildError("editable-path-invalid", `"${id}": editablePaths entry "${p}" is outside the grammar seg(.seg)* with [*]/[n] selectors`);
@@ -7465,10 +7672,31 @@ var init_auth_error = __esm({
 });
 
 // src/errors/cli.error.ts
+function apiErrorDetail(error) {
+  return {
+    serverCode: error?.code,
+    issues: error?.issues,
+    upstream: error?.upstream,
+    requestId: error?.requestId,
+    vendor: error?.vendor,
+    retryAfterSeconds: error?.retryAfterSeconds
+  };
+}
 function isAccessDeniedError(error) {
   if (CliError.isCliError(error)) return error.statusCode === 403;
   return error instanceof Error && error.message.startsWith("Access denied (403)");
 }
+function upstreamUnavailableHint(upstream, requestId) {
+  const service = typeof upstream === "string" && upstream ? `its ${upstream} service` : "a service behind it";
+  const ref = typeof requestId === "string" && requestId ? ` If it persists, quote request ${requestId}.` : "";
+  return `The Lua API is up, but ${service} is temporarily unavailable (503 UPSTREAM_UNAVAILABLE) \u2014 retry in a moment.${ref}`;
+}
+function vendorUnavailableHint(vendor, requestId, retryAfterSeconds) {
+  const name = typeof vendor === "string" && vendor ? VENDOR_LABELS[vendor] ?? vendor : "a vendor it depends on";
+  const ref = typeof requestId === "string" && requestId ? ` If it persists, quote request ${requestId}.` : "";
+  const retry = typeof retryAfterSeconds === "number" ? "retry in a moment" : "the request may have applied at the vendor \u2014 check before retrying";
+  return `The Lua API is up, but ${name} is temporarily unavailable (503 VENDOR_UNAVAILABLE) \u2014 ${retry}.${ref}`;
+}
 function authHint(error) {
   if (error.suppressDefaultRemediation) return void 0;
   if (error.reason === "no_agent_access") {
@@ -7492,7 +7720,10 @@ function classifyCliError(error) {
       code: error.code,
       exitCode: error.exitCode,
       message: error.message,
-      hint: error.hint
+      hint: error.hint,
+      statusCode: error.statusCode,
+      serverCode: error.serverCode,
+      issues: error.issues
     };
   }
   if (AuthenticationError.isAuthenticationError(error)) {
@@ -7514,30 +7745,36 @@ function classifyCliError(error) {
   }
   const status = numericStatus(e);
   if (status !== void 0) {
+    const statusCode = status;
     if (status === 401) return {
       code: "auth",
       exitCode: CLI_EXIT.AUTH,
-      message
+      message,
+      statusCode
     };
     if (status === 403) return {
       code: "forbidden",
       exitCode: CLI_EXIT.FORBIDDEN,
-      message
+      message,
+      statusCode
     };
     if (status === 404) return {
       code: "not_found",
       exitCode: CLI_EXIT.NOT_FOUND,
-      message
+      message,
+      statusCode
     };
     if (status >= 400 && status < 500) return {
       code: `http_${status}`,
       exitCode: CLI_EXIT.FORBIDDEN,
-      message
+      message,
+      statusCode
     };
     if (status >= 500 || status === 0) return {
       code: "unavailable",
       exitCode: CLI_EXIT.UNAVAILABLE,
-      message
+      message,
+      statusCode
     };
   }
   const causeCode = e.cause?.code;
@@ -7555,7 +7792,7 @@ function classifyCliError(error) {
     message
   };
 }
-var CLI_EXIT, CliError, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT;
+var CLI_EXIT, CliError, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT, VENDOR_LABELS;
 var init_cli_error = __esm({
   "src/errors/cli.error.ts"() {
     "use strict";
@@ -7569,6 +7806,7 @@ var init_cli_error = __esm({
       FORBIDDEN: 10,
       UNAVAILABLE: 11
     };
+    __name(apiErrorDetail, "apiErrorDetail");
     CliError = class _CliError extends Error {
       static {
         __name(this, "CliError");
@@ -7578,6 +7816,8 @@ var init_cli_error = __esm({
       exitCode;
       hint;
       statusCode;
+      serverCode;
+      issues;
       constructor(code, message, options = {}) {
         super(message);
         this.name = "CliError";
@@ -7585,6 +7825,8 @@ var init_cli_error = __esm({
         this.exitCode = options.exitCode ?? CLI_EXIT.ERROR;
         this.hint = options.hint;
         this.statusCode = options.statusCode;
+        this.serverCode = options.serverCode;
+        this.issues = options.issues?.length ? options.issues : void 0;
         if (Error.captureStackTrace) Error.captureStackTrace(this, _CliError);
       }
       /** Bad arguments, an unknown action, no project — exit 2. */
@@ -7613,19 +7855,23 @@ var init_cli_error = __esm({
       /**
       * An API refusal the site already holds the status of (LUA-766) — classified by the same table the top-level
       * classifier applies to an untyped error: 401 auth · 403 forbidden · 404 not_found · other 4xx `http_<status>`
-      * (10) · 5xx / 0 unavailable (11, with the network hint unless the site gives its own) · no status `error` (1).
+      * (10) · 5xx / 0 unavailable (11, with the network hint unless the site gives its own — or the body's code
+      * picks one: a 503 UPSTREAM_UNAVAILABLE names the Lua service behind the API, LUA-810) · no status `error` (1).
       * A command that reads `response.error.statusCode` throws through here, so `lua logs` on a 503 exits 11 like
       * every other verb instead of printing the message itself and then throwing an exit-1 `Error`.
       */
-      static fromStatus(statusCode, message, hint) {
+      static fromStatus(statusCode, message, hint, detail = {}) {
         const reported = classifyCliError(Object.assign(new Error(message), {
           statusCode
         }));
+        const codeHint = detail.serverCode === "UPSTREAM_UNAVAILABLE" ? upstreamUnavailableHint(detail.upstream, detail.requestId) : detail.serverCode === "VENDOR_UNAVAILABLE" ? vendorUnavailableHint(detail.vendor, detail.requestId, detail.retryAfterSeconds) : void 0;
         const classHint = reported.exitCode === CLI_EXIT.UNAVAILABLE ? UNAVAILABLE_HINT : reported.hint;
         return new _CliError(reported.code, message, {
           exitCode: reported.exitCode,
-          hint: hint ?? classHint,
-          statusCode
+          hint: hint ?? codeHint ?? classHint,
+          statusCode,
+          serverCode: detail.serverCode,
+          issues: detail.issues
         });
       }
       static isCliError(error) {
@@ -7649,6 +7895,14 @@ var init_cli_error = __esm({
     ]);
     NETWORK_MESSAGE = /fetch failed|socket hang up|network request failed|request timeout|ECONNREFUSED|ENOTFOUND/i;
     UNAVAILABLE_HINT = "The Lua API could not be reached \u2014 check your network and https://status.heylua.ai, then retry.";
+    __name(upstreamUnavailableHint, "upstreamUnavailableHint");
+    VENDOR_LABELS = {
+      unified: "Unified.to",
+      github: "GitHub",
+      pusher: "Pusher",
+      google: "Google"
+    };
+    __name(vendorUnavailableHint, "vendorUnavailableHint");
     __name(authHint, "authHint");
     __name(numericStatus, "numericStatus");
     __name(classifyCliError, "classifyCliError");
@@ -8126,6 +8380,52 @@ var init_request_credential = __esm({
 
 // src/api/http.client.ts
 import { randomUUID as randomUUID2 } from "crypto";
+async function classifyErrorResponse(response) {
+  let errorData;
+  try {
+    errorData = await response.json();
+  } catch (jsonError) {
+    errorData = {};
+  }
+  if (response.status === 401) {
+    const serverMessage = typeof errorData.message === "string" ? errorData.message : void 0;
+    if (serverMessage && /not an admin/i.test(serverMessage)) {
+      throw new AuthenticationError(`Access denied for this agent: ${serverMessage}`, "no_agent_access", serverMessage);
+    }
+    const isExplicitCredential = !!serverMessage && /(invalid|expired|missing|no)\s+(api[\s_-]?key|token|credential)/i.test(serverMessage);
+    const isBareAuthRejection = !serverMessage || /^unauthorized$/i.test(serverMessage);
+    if (isExplicitCredential || isBareAuthRejection) {
+      throw new AuthenticationError("Authentication failed. Your Lua credential may be invalid or expired.", "invalid_credentials", serverMessage);
+    }
+    throw new AuthenticationError(`Authentication failed: ${serverMessage}`, "unknown", serverMessage);
+  }
+  if (response.status === 403) {
+    const detail = errorData.message || "You do not have permission to access this resource.";
+    const serverCode = serverCodeOf(errorData.code, errorData.error);
+    throw new CliError("forbidden", `Access denied (403): ${detail}${serverCode ? ` (${serverCode})` : ""}`, {
+      exitCode: CLI_EXIT.FORBIDDEN,
+      statusCode: 403,
+      serverCode,
+      issues: Array.isArray(errorData.issues) ? errorData.issues : void 0,
+      hint: "Check that your Lua login has access to this agent or organization."
+    });
+  }
+  return {
+    success: false,
+    error: {
+      message: errorData.message || `HTTP ${response.status}: ${response.statusText}`,
+      statusCode: response.status,
+      error: errorData.error,
+      retryAfterSeconds: parseRetryAfter(response.headers.get("retry-after")),
+      ...errorData
+    }
+  };
+}
+function serverCodeOf(code, error) {
+  if (typeof code === "string" && code.length > 0) return code;
+  if (typeof error === "string" && /^[A-Z0-9][A-Z0-9_]*$/.test(error)) return error;
+  return void 0;
+}
 async function* parseSseStream(body, signal) {
   const reader = body.getReader();
   const decoder = new TextDecoder();
@@ -8306,42 +8606,7 @@ var init_http_client = __esm({
       * @private
       */
       async classifyErrorResponse(response) {
-        let errorData;
-        try {
-          errorData = await response.json();
-        } catch (jsonError) {
-          errorData = {};
-        }
-        if (response.status === 401) {
-          const serverMessage = typeof errorData.message === "string" ? errorData.message : void 0;
-          if (serverMessage && /not an admin/i.test(serverMessage)) {
-            throw new AuthenticationError(`Access denied for this agent: ${serverMessage}`, "no_agent_access", serverMessage);
-          }
-          const isExplicitCredential = !!serverMessage && /(invalid|expired|missing|no)\s+(api[\s_-]?key|token|credential)/i.test(serverMessage);
-          const isBareAuthRejection = !serverMessage || /^unauthorized$/i.test(serverMessage);
-          if (isExplicitCredential || isBareAuthRejection) {
-            throw new AuthenticationError("Authentication failed. Your Lua credential may be invalid or expired.", "invalid_credentials", serverMessage);
-          }
-          throw new AuthenticationError(`Authentication failed: ${serverMessage}`, "unknown", serverMessage);
-        }
-        if (response.status === 403) {
-          const detail = errorData.message || "You do not have permission to access this resource.";
-          throw new CliError("forbidden", `Access denied (403): ${detail}`, {
-            exitCode: CLI_EXIT.FORBIDDEN,
-            statusCode: 403,
-            hint: "Check that your Lua login has access to this agent or organization."
-          });
-        }
-        return {
-          success: false,
-          error: {
-            message: errorData.message || `HTTP ${response.status}: ${response.statusText}`,
-            statusCode: response.status,
-            error: errorData.error,
-            retryAfterSeconds: parseRetryAfter(response.headers.get("retry-after")),
-            ...errorData
-          }
-        };
+        return classifyErrorResponse(response);
       }
       /**
       * Checks if an HTTP status code is retryable
@@ -8365,6 +8630,21 @@ var init_http_client = __esm({
         return Math.max(100, Math.random() * exponential);
       }
       /**
+      * The wait before the next attempt: the client's jittered exponential backoff, floored by the server's
+      * `retryAfterSeconds` on a 429 (the limiter's word is final) and on an idempotent read (GET / HEAD). LUA-810: a
+      * POST / PUT / PATCH / DELETE that met a 5xx keeps the client's own backoff — every 503 body carries
+      * `retryAfterSeconds: 5` (`CONTROL_UNAVAILABLE`, `UPSTREAM_UNAVAILABLE`), which floored all three waits at 5 s:
+      * a ≥15 s stall on a write that may already have landed, and retrying an ambiguous write harder does not make
+      * it less ambiguous. The client's own schedule is ≤1 s + ≤2 s + ≤4 s.
+      */
+      retryDelayMs(attempt, error, method) {
+        const own = this.calculateBackoff(attempt);
+        const advised = Number(error?.retryAfterSeconds ?? 0) * 1e3;
+        const verb = (method ?? "GET").toUpperCase();
+        const honourAdvice = error?.statusCode === 429 || verb === "GET" || verb === "HEAD";
+        return honourAdvice ? Math.max(own, advised) : own;
+      }
+      /**
       * Wraps request with retry logic for transient failures
       * @param url - The full URL to request
       * @param options - Fetch API request options
@@ -8398,8 +8678,7 @@ var init_http_client = __esm({
             throw error;
           }
           if (attempt < maxRetries) {
-            const serverDelay = Number(lastResult?.error?.retryAfterSeconds ?? 0) * 1e3;
-            const backoff = Math.max(this.calculateBackoff(attempt), serverDelay);
+            const backoff = this.retryDelayMs(attempt, lastResult?.error, options.method);
             await new Promise((resolve3) => setTimeout(resolve3, backoff));
           }
         }
@@ -8549,6 +8828,8 @@ var init_http_client = __esm({
         };
       }
     };
+    __name(classifyErrorResponse, "classifyErrorResponse");
+    __name(serverCodeOf, "serverCodeOf");
     __name(parseSseStream, "parseSseStream");
     __name(parseRetryAfter, "parseRetryAfter");
     __name(isCoreDrainApiError, "isCoreDrainApiError");
@@ -12607,6 +12888,7 @@ var init_job_api_service = __esm({
   "src/api/job.api.service.ts"() {
     "use strict";
     init_http_client();
+    init_cli_error();
     init_job_instance();
     JobApi = class extends HttpClient {
       static {
@@ -12663,7 +12945,7 @@ var init_job_api_service = __esm({
         if (response.success && response.data) {
           return new JobInstance(this, response.data);
         }
-        throw new Error(response.error?.message || "Failed to get job");
+        throw CliError.fromStatus(response.error?.statusCode, response.error?.message || "Failed to get job", void 0, apiErrorDetail(response.error));
       }
       /**
       * Creates a new job for the agent.