lua-cli 3.32.6 → 3.33.0

package/dist/workflow-builder.d.ts

@@ -140,11 +140,16 @@ export declare const exists: (ref: TypedRef<unknown>) => LuaPredicate;
 export declare const falsy: (ref: TypedRef<unknown>) => LuaPredicate;
 
 export declare interface ForeachOptions {
-    /** Cluster G (B34): PURE builder lowering — emits `{ type:'mapping', id:'<foreachId>_items', mapConfig:{'': items} }` before the foreach entry. */
-    items?: TypedRef<unknown[]> | {
-        step: string;
-        path: string;
-    } | {
+    /**
+     * Cluster G (B34): PURE builder lowering — emits `{ type:'mapping', id:'<foreachId>_items', mapConfig:{'': items} }`
+     * before the foreach entry. The lowering carries a typed path ref (`init('rows')` / `step(x).path('list')`), an
+     * `initData` descriptor (`fromInit('rows')`; `path` optional = the whole input) or a single-step descriptor
+     * (`fromStep(x, 'list')`). The slot admits the whole `MapDescriptor` union because that is what every descriptor
+     * factory is declared to return (LUA-864) — the members the lowering does not carry (`value` / `template` /
+     * `fromRequest` / `rows` / `fromKnowledge`, a fan-in `fromStep([…])`) are `invalid-envelope` at build:
+     * `.map({ '': … }, { id })` before the foreach instead.
+     */
+    items?: TypedRef<unknown[]> | MapDescriptor | {
         initData: true;
         path?: string;
     };
@@ -385,8 +390,16 @@ export declare interface LuaWorkflowConfig {
      * for how many attempts the run may make.
      */
     budget?: Pick<WorkflowDefinitionBudget, 'maxCredits' | 'maxSteps' | 'maxDurationSeconds'>;
-    /** verbatim LuaJob union (D12) → Job{kind:'workflow'} on publish */
-    schedule?: JobSchedule;
+    /**
+     * verbatim LuaJob union (D12) → Job{kind:'workflow'} on publish. `runAs` (LUA-779) governs the copy a
+     * marketplace template freezes from this schedule: `'installer'` (the default when absent — every install's
+     * fires run as the person who installed, who gets the run card in their inbox) or `'system'` (the frozen copy
+     * runs user-less and unwatched — no inbox card for its runs; the install response says so). On this agent the
+     * schedule runs as you either way.
+     */
+    schedule?: JobSchedule & {
+        runAs?: 'installer' | 'system';
+    };
     backfillOnEnable?: {
         maxOccurrences?: number;
     };
@@ -730,7 +743,7 @@ declare type WorkflowJobHarness_2 = (typeof WORKFLOW_JOB_HARNESSES)[number];
 
 declare type WorkflowJobResources = (typeof WORKFLOW_JOB_RESOURCES)[number];
 
-export declare type WorkflowJobToolId = 'shell' | 'read' | 'write' | 'edit' | 'glob' | 'grep' | 'git' | 'gh' | 'fetch';
+export declare type WorkflowJobToolId = 'shell' | 'read' | 'write' | 'edit' | 'glob' | 'grep' | 'git' | 'gh' | 'fetch' | 'ripwire';
 
 export declare interface WorkflowMergePolicy {
     strategy: 'rebase' | 'merge';