lua-cli 3.32.6 → 3.34.0

package/dist/api-exports.js

@@ -83,6 +83,9 @@ function aiGenerateInputFromSimplified(prompt, content) {
 function isAllowedReviewableExecuteTool(tool) {
   return REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST.includes(tool);
 }
+function isReviewableStandingStartTool(tool) {
+  return REVIEWABLE_STANDING_START_TOOLS.includes(tool);
+}
 function isReviewableMcpSendTool(tool) {
   return tool.length > REVIEWABLE_MCP_SEND_TOOL_SUFFIX.length && tool.endsWith(REVIEWABLE_MCP_SEND_TOOL_SUFFIX);
 }
@@ -112,7 +115,7 @@ function mcpSendSiblingForDraftTool(tool, availableToolIds) {
   return candidates[0]?.id;
 }
 function isReviewableExecuteTool(tool) {
-  return isAllowedReviewableExecuteTool(tool) || isReviewableMcpSendTool(tool);
+  return isAllowedReviewableExecuteTool(tool) || isReviewableMcpSendTool(tool) || isReviewableStandingStartTool(tool);
 }
 function isInteractiveChannel(channel) {
   if (!channel) return true;
@@ -258,7 +261,10 @@ function transformChatHistoryContentParts(parts) {
         content.push({
           type: "file",
           data: part.data,
-          mediaType
+          mediaType,
+          ...part.filename && {
+            filename: part.filename
+          }
         });
       }
     }
@@ -537,6 +543,55 @@ function normalizeLuaJobExecutionTimeoutSeconds(timeout) {
   }
   return Math.min(Math.max(timeout, LUA_JOB_MIN_TIMEOUT_SECONDS), LUA_JOB_MAX_TIMEOUT_SECONDS);
 }
+function isId(value3) {
+  return typeof value3 === "string" && value3.length > 0 && value3.length <= MAX_ID_LENGTH;
+}
+function parseScheduledJobFire(raw) {
+  if (new TextEncoder().encode(raw).byteLength > MAX_BODY_BYTES) {
+    throw new Error("Invalid scheduled job fire: body is too large");
+  }
+  let value3;
+  try {
+    value3 = JSON.parse(raw);
+  } catch {
+    throw new Error("Invalid scheduled job fire: body is not JSON");
+  }
+  if (!value3 || typeof value3 !== "object" || Array.isArray(value3)) {
+    throw new Error("Invalid scheduled job fire: body must be an object");
+  }
+  const record = value3;
+  if (Object.keys(record).some((key) => !KEYS.has(key))) {
+    throw new Error("Invalid scheduled job fire: unknown field");
+  }
+  if (record.v !== 1 || record.kind !== "scheduled-job-fire") {
+    throw new Error("Invalid scheduled job fire: unsupported contract");
+  }
+  if (!isId(record.agentId)) {
+    throw new Error("Invalid scheduled job fire: agentId is required");
+  }
+  if (!isId(record.jobId)) {
+    throw new Error("Invalid scheduled job fire: jobId is required");
+  }
+  if (typeof record.scheduledTime !== "string" || !UTC_ISO.test(record.scheduledTime) || !Number.isFinite(Date.parse(record.scheduledTime)) || ![
+    new Date(record.scheduledTime).toISOString(),
+    new Date(record.scheduledTime).toISOString().replace(".000Z", "Z")
+  ].includes(record.scheduledTime)) {
+    throw new Error("Invalid scheduled job fire: scheduledTime must be ISO 8601");
+  }
+  if (record.triggerId !== void 0 && !isId(record.triggerId)) {
+    throw new Error("Invalid scheduled job fire: triggerId must be a non-empty string");
+  }
+  return {
+    v: 1,
+    kind: "scheduled-job-fire",
+    agentId: record.agentId,
+    jobId: record.jobId,
+    scheduledTime: record.scheduledTime,
+    ...typeof record.triggerId === "string" ? {
+      triggerId: record.triggerId
+    } : {}
+  };
+}
 function triggerUrlEnvKey(triggerKey) {
   const upper = triggerKey.trim().replace(/[^A-Za-z0-9]+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
   return `${TEMPLATE_TRIGGER_URL_ENV_PREFIX}${upper}`;
@@ -711,6 +766,9 @@ function creatorUserId(identity) {
 function actingUserId(identity) {
   return creatorUserId(identity);
 }
+function isWorkflowSignalEventSite(value3) {
+  return typeof value3 === "string" && WORKFLOW_SIGNAL_EVENT_SITES.includes(value3);
+}
 function shouldSkipArchive(run, manifestSha256, sinkSha256) {
   if (!run.completedAt || !run.exportedAt || run.exportedAt < run.completedAt) return false;
   return !!manifestSha256 && manifestSha256 === sinkSha256;
@@ -850,6 +908,23 @@ function workflowHitlArmUnsupportedMessage(type, id, container) {
 function workflowHitlArmShapeMessage(type, id, shape) {
   return shape === "mapped-arm" ? `\`${type}\` arm "${id}" takes the previous output as its payload \u2014 it cannot head a [mapping, step] chain; map before the container instead` : `a chunked foreach hands each child a slice of items, not one \u2014 \`${type}\` body "${id}" takes one item; drop \`chunk\``;
 }
+function workflowGoalJudgeKind(judge) {
+  return judge && typeof judge === "object" && judge.predicate !== void 0 ? "predicate" : "agent";
+}
+function isWorkflowGoalJudgeComplete(judge) {
+  if (workflowGoalJudgeKind(judge) === "predicate") return true;
+  return typeof judge.agentId === "string" && judge.agentId.length > 0 && !!judge.schema && typeof judge.schema === "object" && !Array.isArray(judge.schema);
+}
+function normalizeWorkflowGoalJudge(judge) {
+  if (workflowGoalJudgeKind(judge) === "agent") return judge;
+  return {
+    agentId: judge.agentId ?? WORKFLOW_GOAL_JUDGE_SELF,
+    predicate: judge.predicate,
+    ...judge.schema ? {
+      schema: judge.schema
+    } : {}
+  };
+}
 function groupCount(re) {
   let n2 = GROUP_COUNT.get(re);
   if (n2 === void 0) {
@@ -1089,19 +1164,27 @@ function resolveEffectiveFeature(row, catalogDefault) {
     default: catalogDefault
   };
 }
-function isFeatureRow(value3) {
-  return typeof value3 === "object" && value3 !== null;
+function asFeatureRow(value3) {
+  if (value3 === false) return {
+    active: false
+  };
+  return typeof value3 === "object" && value3 !== null && !Array.isArray(value3) ? value3 : void 0;
+}
+function agentFeatureBagCarries(bag, name) {
+  return bag != null && Object.prototype.hasOwnProperty.call(bag, name) && asFeatureRow(bag[name]) !== void 0;
 }
 function effectiveAgentFeatureRows(base, override) {
   const merged = /* @__PURE__ */ new Map();
-  for (const [name, row] of Object.entries(base ?? {})) {
-    if (isFeatureRow(row)) merged.set(name, {
+  for (const [name, value3] of Object.entries(base ?? {})) {
+    const row = asFeatureRow(value3);
+    if (row) merged.set(name, {
       row,
       origin: "baseAgent"
     });
   }
-  for (const [name, row] of Object.entries(override ?? {})) {
-    if (isFeatureRow(row)) merged.set(name, {
+  for (const [name, value3] of Object.entries(override ?? {})) {
+    const row = asFeatureRow(value3);
+    if (row) merged.set(name, {
       row,
       origin: "subAgent"
     });
@@ -1121,7 +1204,15 @@ function effectiveAgentFeatureRows(base, override) {
     ]))
   };
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES;
+function agentFeatureMergeRuleFromEnv(env2) {
+  const raw = env2[SUBAGENT_PER_KEY_FLAG_ENV];
+  return typeof raw === "string" && PER_KEY_FLAG_VALUES.has(raw.trim().toLowerCase()) ? "per-key" : "wholesale";
+}
+function effectiveAgentFeatures(base, override, rule) {
+  if (rule === "wholesale") return override || base || void 0;
+  return effectiveAgentFeatureRows(base, override).rows;
+}
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1161,6 +1252,11 @@ var init_dist = __esm({
     ];
     __name(isAllowedReviewableExecuteTool, "isAllowedReviewableExecuteTool");
     __name2(isAllowedReviewableExecuteTool, "isAllowedReviewableExecuteTool");
+    REVIEWABLE_STANDING_START_TOOLS = [
+      "scheduleWorkflow"
+    ];
+    __name(isReviewableStandingStartTool, "isReviewableStandingStartTool");
+    __name2(isReviewableStandingStartTool, "isReviewableStandingStartTool");
     REVIEWABLE_MCP_SEND_TOOL_SUFFIX = "_create_messaging_message";
     __name(isReviewableMcpSendTool, "isReviewableMcpSendTool");
     __name2(isReviewableMcpSendTool, "isReviewableMcpSendTool");
@@ -1821,9 +1917,28 @@ This text is who you are for this person. As you learn them, their name, their w
     __name2(resolveLuaJobTimeoutSeconds, "resolveLuaJobTimeoutSeconds");
     __name(normalizeLuaJobExecutionTimeoutSeconds, "normalizeLuaJobExecutionTimeoutSeconds");
     __name2(normalizeLuaJobExecutionTimeoutSeconds, "normalizeLuaJobExecutionTimeoutSeconds");
+    KEYS = /* @__PURE__ */ new Set([
+      "v",
+      "kind",
+      "agentId",
+      "jobId",
+      "scheduledTime",
+      "triggerId"
+    ]);
+    MAX_BODY_BYTES = 4096;
+    MAX_ID_LENGTH = 512;
+    UTC_ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;
+    __name(isId, "isId");
+    __name2(isId, "isId");
+    __name(parseScheduledJobFire, "parseScheduledJobFire");
+    __name2(parseScheduledJobFire, "parseScheduledJobFire");
     TEMPLATE_TRIGGER_URL_ENV_PREFIX = "LUA_TRIGGER_URL__";
     __name(triggerUrlEnvKey, "triggerUrlEnvKey");
     __name2(triggerUrlEnvKey, "triggerUrlEnvKey");
+    TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES = Object.freeze([
+      "single",
+      "multiple"
+    ]);
     SUBJECT_TYPES = [
       "user",
       "apiKey",
@@ -2008,6 +2123,8 @@ This text is who you are for this person. As you learn them, their name, their w
     __name2(formatLuaClientHeader, "formatLuaClientHeader");
     __name(luaClientMetricLabels, "luaClientMetricLabels");
     __name2(luaClientMetricLabels, "luaClientMetricLabels");
+    LUA_SESSION_ID_CLAIM = "luaSessionId";
+    SESSION_REVOKED_CODE = "SESSION_REVOKED";
     AUTHZ_PROJECTION_VERSION = 1;
     ProjectedScopeSchema = z3.string().min(1).max(128);
     DisplayRoleSchema = z3.object({
@@ -2084,7 +2201,20 @@ This text is who you are for this person. As you learn them, their name, their w
         "platform-allowlist"
       ]),
       /** Product data only. A roster row confers nothing. */
-      rostered: z3.boolean()
+      rostered: z3.boolean(),
+      /**
+       * Ownership, product data only (PRO-1754). `createdBy` is the creating
+       * user's id straight off the sub-agent document; `owner` is that id
+       * resolved to a display identity after the list is decided. Both are
+       * absent when the document records no creator or the lookup fails —
+       * they never influence which resources are listed.
+       */
+      createdBy: z3.string().min(1).max(256).optional(),
+      owner: z3.object({
+        id: z3.string().min(1).max(256),
+        name: z3.string().optional(),
+        email: z3.string().optional()
+      }).optional()
     }).passthrough();
     CapabilityProfilesSchema = z3.record(z3.string().min(1).max(64), z3.array(ProjectedScopeSchema));
     RoleCatalogSchema = z3.record(z3.string().min(1).max(128), z3.object({
@@ -2167,6 +2297,15 @@ This text is who you are for this person. As you learn them, their name, their w
       ...WORKFLOW_RUN_IDLE,
       ...WORKFLOW_RUN_TERMINAL
     ];
+    WORKFLOW_RUN_GATE_KINDS = [
+      "start-consent",
+      "quota",
+      "billing",
+      "org_archived",
+      "disabled",
+      "exception",
+      "budget"
+    ];
     WORKFLOW_STEP_STATUSES = [
       "pending",
       "ready",
@@ -2188,6 +2327,13 @@ This text is who you are for this person. As you learn them, their name, their w
       "running",
       "cancellation_requested"
     ];
+    WORKFLOW_SIGNAL_EVENT_SITES = [
+      "webhook",
+      "trigger",
+      "device-trigger"
+    ];
+    __name(isWorkflowSignalEventSite, "isWorkflowSignalEventSite");
+    __name2(isWorkflowSignalEventSite, "isWorkflowSignalEventSite");
     ARCHIVE_WINDOW_MARGIN_DAYS = 7;
     __name(shouldSkipArchive, "shouldSkipArchive");
     __name2(shouldSkipArchive, "shouldSkipArchive");
@@ -2230,6 +2376,16 @@ This text is who you are for this person. As you learn them, their name, their w
     __name2(scheduledTimeKey, "scheduledTimeKey");
     __name(scheduledWorkflowRunIdForTime, "scheduledWorkflowRunIdForTime");
     __name2(scheduledWorkflowRunIdForTime, "scheduledWorkflowRunIdForTime");
+    WORKFLOW_SUSPEND_KINDS = [
+      "input",
+      "approval",
+      "signal",
+      "gate"
+    ];
+    WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS = [
+      ...WORKFLOW_SUSPEND_KINDS,
+      ...WORKFLOW_RUN_GATE_KINDS
+    ];
     WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES = 64 * 1024;
     WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES = 256 * 1024;
     WORKFLOW_RETRY_BACKOFFS = [
@@ -2352,6 +2508,13 @@ This text is who you are for this person. As you learn them, their name, their w
       min: 60,
       max: 2592e3
     });
+    WORKFLOW_GOAL_JUDGE_SELF = "$self";
+    __name(workflowGoalJudgeKind, "workflowGoalJudgeKind");
+    __name2(workflowGoalJudgeKind, "workflowGoalJudgeKind");
+    __name(isWorkflowGoalJudgeComplete, "isWorkflowGoalJudgeComplete");
+    __name2(isWorkflowGoalJudgeComplete, "isWorkflowGoalJudgeComplete");
+    __name(normalizeWorkflowGoalJudge, "normalizeWorkflowGoalJudge");
+    __name2(normalizeWorkflowGoalJudge, "normalizeWorkflowGoalJudge");
     REDACTED_PLACEHOLDER = "[REDACTED]";
     PROVIDER_MESSAGE_MAX_CHARS = 300;
     ERROR_MESSAGE_MAX_CHARS = 2e3;
@@ -2676,10 +2839,71 @@ listed here; never invent a target.`;
     __name2(effectiveFeatureActive, "effectiveFeatureActive");
     __name(resolveEffectiveFeature, "resolveEffectiveFeature");
     __name2(resolveEffectiveFeature, "resolveEffectiveFeature");
-    __name(isFeatureRow, "isFeatureRow");
-    __name2(isFeatureRow, "isFeatureRow");
+    __name(asFeatureRow, "asFeatureRow");
+    __name2(asFeatureRow, "asFeatureRow");
+    __name(agentFeatureBagCarries, "agentFeatureBagCarries");
+    __name2(agentFeatureBagCarries, "agentFeatureBagCarries");
     __name(effectiveAgentFeatureRows, "effectiveAgentFeatureRows");
     __name2(effectiveAgentFeatureRows, "effectiveAgentFeatureRows");
+    SUBAGENT_PER_KEY_FLAG_ENV = "LUA_SUBAGENT_FEATURES_PER_KEY";
+    PER_KEY_FLAG_VALUES = /* @__PURE__ */ new Set([
+      "1",
+      "true",
+      "on",
+      "yes"
+    ]);
+    __name(agentFeatureMergeRuleFromEnv, "agentFeatureMergeRuleFromEnv");
+    __name2(agentFeatureMergeRuleFromEnv, "agentFeatureMergeRuleFromEnv");
+    __name(effectiveAgentFeatures, "effectiveAgentFeatures");
+    __name2(effectiveAgentFeatures, "effectiveAgentFeatures");
+  }
+});
+
+// ../shared-types/dist/workflow-job-tools.mjs
+function effectiveJobTools(jobTools, readOnly) {
+  const base = jobTools?.length ? jobTools : WORKFLOW_JOB_DEFAULT_TOOLS;
+  const out = [];
+  for (const id of base) {
+    if (readOnly && WORKFLOW_JOB_READ_ONLY_DROPPED.includes(id)) continue;
+    if (!out.includes(id)) out.push(id);
+  }
+  return out;
+}
+var __defProp3, __name3, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_READ_ONLY_DROPPED, WORKFLOW_JOB_DEFAULT_TOOLS;
+var init_workflow_job_tools = __esm({
+  "../shared-types/dist/workflow-job-tools.mjs"() {
+    "use strict";
+    __defProp3 = Object.defineProperty;
+    __name3 = /* @__PURE__ */ __name((target, value3) => __defProp3(target, "name", { value: value3, configurable: true }), "__name");
+    WORKFLOW_JOB_TOOLS = [
+      "shell",
+      "read",
+      "write",
+      "edit",
+      "glob",
+      "grep",
+      "git",
+      "gh",
+      "fetch",
+      "ripwire"
+    ];
+    WORKFLOW_JOB_READ_ONLY_DROPPED = [
+      "write",
+      "edit",
+      "git",
+      "shell"
+    ];
+    WORKFLOW_JOB_DEFAULT_TOOLS = [
+      "shell",
+      "read",
+      "write",
+      "edit",
+      "glob",
+      "grep",
+      "git"
+    ];
+    __name(effectiveJobTools, "effectiveJobTools");
+    __name3(effectiveJobTools, "effectiveJobTools");
   }
 });
 
@@ -2787,7 +3011,7 @@ function isMapDescriptor(v) {
   if (v === null || typeof v !== "object" || Array.isArray(v)) return false;
   const d = v;
   const keys = Object.keys(d);
-  const only = /* @__PURE__ */ __name3((...allowed) => keys.every((k) => allowed.includes(k)), "only");
+  const only = /* @__PURE__ */ __name4((...allowed) => keys.every((k) => allowed.includes(k)), "only");
   if ("value" in d) return keys.length === 1;
   if ("template" in d) return keys.length === 1 && typeof d.template === "string";
   if ("requestContextPath" in d) return keys.length === 1 && typeof d.requestContextPath === "string";
@@ -2890,6 +3114,148 @@ function resolveMapping(cfg, ctx) {
     value: result
   };
 }
+function looksLikeModelTemplate(model) {
+  return typeof model === "string" && model.includes("${");
+}
+function parseModelTemplate(model) {
+  if (!looksLikeModelTemplate(model)) return {
+    kind: "static"
+  };
+  const trimmed = model.trim();
+  const m = WORKFLOW_MODEL_TEMPLATE_RE.exec(trimmed);
+  if (!m) {
+    const inner = /^\$\{([^}]*)\}$/.exec(trimmed)?.[1];
+    const root = inner?.split(/[.|]/, 1)[0];
+    const why = inner !== void 0 && root !== void 0 && root !== WORKFLOW_MODEL_TEMPLATE_ROOT ? `only the \`${WORKFLOW_MODEL_TEMPLATE_ROOT}\` root is allowed (got \`${root || "(empty)"}\`)` : inner !== void 0 && (inner === WORKFLOW_MODEL_TEMPLATE_ROOT || inner.startsWith(`${WORKFLOW_MODEL_TEMPLATE_ROOT}.`)) ? "the path after `initData.` is empty" : "the whole value must be exactly one placeholder \u2014 no prefix, suffix or second placeholder";
+    return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, why)
+    };
+  }
+  const path3 = m[1];
+  if (!path3.split(".").every((seg) => PATH_SEGMENT_RE.test(seg))) {
+    return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, `the path \`${path3}\` is not a dotted path of names and canonical [n] indexes`)
+    };
+  }
+  if (m[2] !== void 0) {
+    const dflt = m[2].trim();
+    if (!dflt) return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, "the default after `|` is empty")
+    };
+    if (dflt.includes("|")) {
+      return {
+        kind: "invalid",
+        message: modelTemplateInvalidMessage(model, "a placeholder names ONE default \u2014 a second `|` is not a fallback chain")
+      };
+    }
+    return {
+      kind: "template",
+      template: {
+        placeholder: trimmed,
+        path: path3,
+        default: dflt
+      }
+    };
+  }
+  return {
+    kind: "template",
+    template: {
+      placeholder: trimmed,
+      path: path3
+    }
+  };
+}
+function modelTemplateInvalidMessage(model, why) {
+  return `model "${model.trim()}" is not a valid run-input-bound model placeholder \u2014 ${why}; the forms are \${initData.<path>} and \${initData.<path>|<provider/model default>}`;
+}
+function modelTemplateDefaultRequiredMessage(model) {
+  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")}`;
+}
+function staticModelPin(model) {
+  if (typeof model !== "string") return void 0;
+  const parsed = parseModelTemplate(model);
+  if (parsed.kind === "static") return model;
+  if (parsed.kind === "template") return parsed.template.default;
+  return void 0;
+}
+function readPath(root, path3) {
+  let cur = root;
+  for (const seg of path3.split(".")) {
+    const name = seg.replace(/\[(?:0|[1-9]\d*)\]/g, "");
+    const indexes = [
+      ...seg.matchAll(/\[(0|[1-9]\d*)\]/g)
+    ].map((x) => Number(x[1]));
+    if (cur === null || typeof cur !== "object") return void 0;
+    cur = cur[name];
+    for (const i of indexes) {
+      if (!Array.isArray(cur)) return void 0;
+      cur = cur[i];
+    }
+  }
+  return cur;
+}
+function renderModelTemplate(model, initData) {
+  if (model === void 0 || !looksLikeModelTemplate(model)) return {
+    ok: true,
+    model,
+    source: "static"
+  };
+  const parsed = parseModelTemplate(model);
+  if (parsed.kind === "invalid") {
+    return {
+      ok: false,
+      placeholder: model.trim(),
+      path: "",
+      reason: "invalid",
+      message: parsed.message
+    };
+  }
+  if (parsed.kind === "static") return {
+    ok: true,
+    model,
+    source: "static"
+  };
+  const { placeholder, path: path3 } = parsed.template;
+  if (initData !== void 0 && initData !== null && (typeof initData !== "object" || Array.isArray(initData))) {
+    return {
+      ok: false,
+      placeholder,
+      path: path3,
+      reason: "input-not-object",
+      message: modelTemplateInputNotObjectMessage(placeholder, initData)
+    };
+  }
+  const value22 = readPath(initData, path3);
+  const reason = value22 === void 0 || value22 === null ? "unbound" : typeof value22 !== "string" ? "not-a-string" : value22.trim() ? null : "empty";
+  if (reason === null) return {
+    ok: true,
+    model: value22.trim(),
+    source: "initData"
+  };
+  if (parsed.template.default !== void 0) return {
+    ok: true,
+    model: parsed.template.default,
+    source: "default"
+  };
+  return {
+    ok: false,
+    placeholder,
+    path: path3,
+    reason,
+    message: modelTemplateUnboundMessage(placeholder, path3, reason)
+  };
+}
+function modelTemplateUnboundMessage(placeholder, path3, reason) {
+  const what = reason === "unbound" ? `the run input has no ${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path3}` : reason === "empty" ? `${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path3} is empty on the run input` : `${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path3} on the run input is not a string`;
+  return `model placeholder "${placeholder}" is unbound \u2014 ${what} and the placeholder declares no default; pass one in the run input or write \${${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path3}|<provider/model>}`;
+}
+function modelTemplateInputNotObjectMessage(placeholder, initData) {
+  const type = Array.isArray(initData) ? "an array" : `a ${typeof initData}`;
+  return `model placeholder "${placeholder}" cannot be rendered \u2014 the run input is ${type}, not an object; start the run with an object input (a JSON string must be parsed before it is passed)`;
+}
 function describeApproverSpecRefusal(spec) {
   const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
   const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
@@ -2924,13 +3290,13 @@ function validateApproverBlock(node, opts = {
   path: "approval"
 }) {
   const issues = [];
-  const push = /* @__PURE__ */ __name3((code, path3, message, severity = "error") => issues.push({
+  const push = /* @__PURE__ */ __name4((code, path3, message, severity = "error") => issues.push({
     code,
     path: path3,
     severity,
     message
   }), "push");
-  const checkSpec = /* @__PURE__ */ __name3((spec, path3) => {
+  const checkSpec = /* @__PURE__ */ __name4((spec, path3) => {
     const r = ApproverSpecSchema.safeParse(spec);
     if (!r.success) {
       const users = spec?.users;
@@ -3214,7 +3580,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
   static: true
 }) {
   const issues = [];
-  const err = /* @__PURE__ */ __name3((code, message, path3, stepId) => {
+  const err = /* @__PURE__ */ __name4((code, message, path3, stepId) => {
     issues.push({
       code,
       message,
@@ -3223,7 +3589,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       stepId
     });
   }, "err");
-  const warn = /* @__PURE__ */ __name3((code, message, path3, stepId) => {
+  const warn = /* @__PURE__ */ __name4((code, message, path3, stepId) => {
     issues.push({
       code,
       message,
@@ -3259,6 +3625,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
   }
   const declaredKeys = new Set(opts.connectionKeys ?? []);
+  const ownKeys = /* @__PURE__ */ new Set();
   if (g.connections !== void 0 && !Array.isArray(g.connections)) {
     err("connection-declaration-invalid", "`connections` must be an array of { key, integrationType }", "connections");
   }
@@ -3270,7 +3637,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("connection-declaration-invalid", `connections[${i}].key must match ${WORKFLOW_CONNECTION_KEY_RE}`, `${path3}.key`);
       return;
     }
-    if (declaredKeys.has(key)) {
+    if (ownKeys.has(key)) {
       err("connection-declaration-invalid", `connections[${i}].key "${key}" is declared twice`, `${path3}.key`);
       return;
     }
@@ -3278,9 +3645,10 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("connection-declaration-invalid", `connections[${i}] ("${key}") needs an integrationType (the catalog slug, e.g. 'github')`, `${path3}.integrationType`);
       return;
     }
+    ownKeys.add(key);
     declaredKeys.add(key);
   });
-  const undeclaredKey = /* @__PURE__ */ __name3((ref) => typeof ref === "string" && !declaredKeys.has(ref) && isConnectionKeyShaped(ref) && opts.connectionIds?.has(ref) !== true, "undeclaredKey");
+  const undeclaredKey = /* @__PURE__ */ __name4((ref) => typeof ref === "string" && !declaredKeys.has(ref) && isConnectionKeyShaped(ref) && opts.connectionIds?.has(ref) !== true, "undeclaredKey");
   const credentialsRef = envelopeWorkspace?.credentialsRef;
   if (undeclaredKey(credentialsRef)) {
     err("connection-key-undeclared", connectionKeyUndeclaredMessage("workspace.credentialsRef", credentialsRef), "workspace.credentialsRef");
@@ -3288,7 +3656,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
   const seen = /* @__PURE__ */ new Map();
   let nodeCount = 0;
   const upstream = /* @__PURE__ */ new Set();
-  const checkId = /* @__PURE__ */ __name3((id, path3) => {
+  const checkId = /* @__PURE__ */ __name4((id, path3) => {
     nodeCount += 1;
     if (seen.has(id)) {
       err("duplicate-step-id", `step id "${id}" is declared twice (first at ${seen.get(id)})`, path3, id);
@@ -3296,9 +3664,9 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       seen.set(id, path3);
     }
   }, "checkId");
-  const checkPolicyEnums = /* @__PURE__ */ __name3((node, path3) => {
+  const checkPolicyEnums = /* @__PURE__ */ __name4((node, path3) => {
     const id = singleId(node);
-    const check = /* @__PURE__ */ __name3((member, allowed) => {
+    const check = /* @__PURE__ */ __name4((member, allowed) => {
       const value22 = node[member];
       if (value22 === void 0 || typeof value22 === "string" && allowed.includes(value22)) return;
       err("invalid-envelope", `\`${member}\` must be ${allowed.map((a) => `'${a}'`).join(" | ")} (got ${JSON.stringify(value22)})`, `${path3}.${member}`, id);
@@ -3306,7 +3674,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     check("sideEffects", WORKFLOW_SIDE_EFFECTS);
     check("jobResources", WORKFLOW_JOB_RESOURCES);
   }, "checkPolicyEnums");
-  const checkRetry = /* @__PURE__ */ __name3((node, path3) => {
+  const checkRetry = /* @__PURE__ */ __name4((node, path3) => {
     const r = node.retry;
     if (!r) return;
     const id = singleId(node);
@@ -3332,7 +3700,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       }
     }
   }, "checkRetry");
-  const checkTimeout = /* @__PURE__ */ __name3((node, path3) => {
+  const checkTimeout = /* @__PURE__ */ __name4((node, path3) => {
     const t = node.timeoutSeconds;
     if (t === void 0) return;
     const id = singleId(node);
@@ -3351,7 +3719,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("timeout-exceeds-tier", `timeoutSeconds ${t} exceeds the worker tier's ${caps.maxWorkerTimeoutSeconds} s \u2014 steps longer than 10 min run on the Job tier: add tier:'job' (up to ${caps.maxJobSegmentSeconds} s)`, `${path3}.timeoutSeconds`, id);
     }
   }, "checkTimeout");
-  const checkSpecialistRole = /* @__PURE__ */ __name3((node, path3) => {
+  const checkSpecialistRole = /* @__PURE__ */ __name4((node, path3) => {
     const role = node.role;
     const hasRef = typeof role.ref === "string";
     const hasInline = role.name !== void 0 || role.instructions !== void 0 || Array.isArray(role.tools) && role.tools.length > 0;
@@ -3383,7 +3751,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       }
     }
   }, "checkSpecialistRole");
-  const checkRequiredConnections = /* @__PURE__ */ __name3((node, path3) => {
+  const checkRequiredConnections = /* @__PURE__ */ __name4((node, path3) => {
     const required = node.requiredConnections;
     if (!Array.isArray(required)) return;
     const undeclared = required.filter(undeclaredKey);
@@ -3396,7 +3764,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("required-connection-unknown", `requiredConnections ${JSON.stringify(unknown)} are neither declared connections[].key values nor connections the owner can mount`, `${path3}.requiredConnections`, singleId(node));
     }
   }, "checkRequiredConnections");
-  const checkTier = /* @__PURE__ */ __name3((node, path3) => {
+  const checkTier = /* @__PURE__ */ __name4((node, path3) => {
     const id = singleId(node);
     if (node.workspace && node.workspace !== "inherit" && node.tier !== void 0 && node.tier !== "job") {
       err("workspace-requires-job-tier", "a step mounting a workspace must be tier:'job'", `${path3}.workspace`, id);
@@ -3404,7 +3772,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.harness !== void 0 && node.tier !== "job") {
       err("harness-requires-job-tier", "`harness` is only legal on a tier:'job' agent step", `${path3}.harness`, id);
     }
-    const provider = node.type === "agent" ? classifyModelProvider(node.model) : null;
+    const provider = node.type === "agent" ? classifyModelProvider(staticModelPin(node.model)) : null;
     if (node.harness === "claude-code" && provider !== null && provider !== "anthropic") {
       err("harness-provider-mismatch", `harness:'claude-code' needs an Anthropic model (model "${node.type === "agent" ? node.model : ""}" is ${provider})`, `${path3}.harness`, id);
     }
@@ -3412,22 +3780,36 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("job-tier-provider-unsupported", `model provider '${provider}' is outside LUA_WF_JOB_PROVIDERS [${opts.policy.jobProviders.join(", ")}]`, `${path3}.model`, id);
     }
   }, "checkTier");
-  const checkModel = /* @__PURE__ */ __name3((node, path3) => {
+  const checkModel = /* @__PURE__ */ __name4((node, path3) => {
     if (node.type !== "agent" || typeof node.model !== "string") return;
+    const id = singleId(node);
+    const parsed = parseModelTemplate(node.model);
+    if (parsed.kind === "invalid") {
+      err("model-template-invalid", parsed.message, `${path3}.model`, id);
+      return;
+    }
+    if (parsed.kind === "template" && parsed.template.default === void 0) {
+      if (isJobTier(node)) {
+        err("model-template-default-required", modelTemplateDefaultRequiredMessage(node.model), `${path3}.model`, id);
+      }
+      return;
+    }
+    const pin = parsed.kind === "template" ? parsed.template.default : node.model;
+    if (pin === void 0) return;
+    const inContext = /* @__PURE__ */ __name4((message) => parsed.kind === "template" ? `${message} (the default of ${parsed.template.placeholder})` : message, "inContext");
     const registry = opts.approvedModels;
     if (registry === void 0) return;
-    const id = singleId(node);
     if (registry === "unavailable") {
-      const pin = node.model.trim();
-      if (pin && !normalizeModelId(pin, []).ok) {
-        warn("model-unresolved", `model "${pin}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`, `${path3}.model`, id);
+      const trimmed = pin.trim();
+      if (trimmed && !normalizeModelId(trimmed, []).ok) {
+        warn("model-unresolved", inContext(`model "${trimmed}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`), `${path3}.model`, id);
       }
       return;
     }
-    const resolved = normalizeModelId(node.model, registry);
-    if (!resolved.ok) err("model-unresolved", modelUnresolvedMessage(resolved), `${path3}.model`, id);
+    const resolved = normalizeModelId(pin, registry);
+    if (!resolved.ok) err("model-unresolved", inContext(modelUnresolvedMessage(resolved)), `${path3}.model`, id);
   }, "checkModel");
-  const checkWorkspace = /* @__PURE__ */ __name3((node, path3) => {
+  const checkWorkspace = /* @__PURE__ */ __name4((node, path3) => {
     const id = singleId(node);
     const ws = workspaceOf(node);
     if (isJobTier(node) && opts.policy && opts.policy.jobTier !== true) {
@@ -3450,6 +3832,9 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
         warn("gh-on-coding-turn", `"${id}" grants the gh tool on a coding turn \u2014 the pod can open/merge PRs on the workspace repo (purpose:'gh' token, pull_requests:write + contents:write)`, `${path3}.jobTools`, id);
       }
     }
+    if (node.type === "agent" && ws && ws !== "inherit" && ws.mount === "ro" && Array.isArray(tools) && effectiveJobTools(tools, true).length === 0) {
+      warn("ro-step-has-no-tools", `"${id}" mounts the workspace read-only and every jobTool it declares (${JSON.stringify(tools)}) is one the ro mount drops [${WORKFLOW_JOB_READ_ONLY_DROPPED.join(", ")}] \u2014 the coding turn would run with no tools at all; keep a read-only tool (read/glob/grep, gh) or mount rw`, `${path3}.jobTools`, id);
+    }
     if (ws && ws !== "inherit") {
       if (!envelopeWorkspace && !opts.mayInherit) {
         err("workspace-not-declared", `"${id}" mounts a workspace but the workflow declares none \u2014 add workspace:{kind, \u2026} on createWorkflow`, `${path3}.workspace`, id);
@@ -3469,16 +3854,16 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
   }, "checkWorkspace");
   const outputSchemas = /* @__PURE__ */ new Map();
-  const recordOutputSchema = /* @__PURE__ */ __name3((node) => {
+  const recordOutputSchema = /* @__PURE__ */ __name4((node) => {
     const schema = node.type === "step" ? node.step.outputSchema : node.type === "agent" ? node.outputSchema : void 0;
     if (schema !== void 0) outputSchemas.set(singleId(node), schema);
   }, "recordOutputSchema");
-  const checkMapMembers = /* @__PURE__ */ __name3((cfg, basePath, id) => {
+  const checkMapMembers = /* @__PURE__ */ __name4((cfg, basePath, id) => {
     for (const m of malformedMapMembers(cfg)) {
       warn(MAP_MEMBER_MALFORMED_CODE, mapMemberMalformedMessage(id, m), `${basePath}.${m.member}`, id);
     }
   }, "checkMapMembers");
-  const checkInputShape = /* @__PURE__ */ __name3((node, path3) => {
+  const checkInputShape = /* @__PURE__ */ __name4((node, path3) => {
     const input = node.input;
     if (input === void 0) return;
     const id = singleId(node);
@@ -3488,11 +3873,11 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     err("invalid-envelope", `\`input\` must be an object map \u2014 each member a binding descriptor ({initData:true, path} | {step, path} | {value} | {template} | {requestContextPath}) or a JSON literal (got ${JSON.stringify(input)})`, `${path3}.input`, id);
   }, "checkInputShape");
-  const checkBodyInput = /* @__PURE__ */ __name3((body, path3, container) => {
+  const checkBodyInput = /* @__PURE__ */ __name4((body, path3, container) => {
     if (body.type === "workflow" || body.input === void 0) return;
     err("arm-input-unsupported", container === "foreach" ? `a foreach body receives each item as its input \u2014 drop \`input\` on "${singleId(body)}" and map the items before the foreach instead` : `a loop body receives the previous output as its input \u2014 drop \`input\` on "${singleId(body)}" and put the map before the loop instead`, `${path3}.input`, singleId(body));
   }, "checkBodyInput");
-  const checkSingle = /* @__PURE__ */ __name3((node, path3, depth) => {
+  const checkSingle = /* @__PURE__ */ __name4((node, path3, depth) => {
     recordOutputSchema(node);
     if (node.type === "workflow" && (typeof node.workflowId !== "string" || node.workflowId.length === 0)) {
       checkId(node.id, path3);
@@ -3541,7 +3926,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       }
     }
   }, "checkSingle");
-  const checkHitl = /* @__PURE__ */ __name3((node, path3) => {
+  const checkHitl = /* @__PURE__ */ __name4((node, path3) => {
     if (node.type === "waitForSignal") {
       const w = node;
       checkId(w.id, path3);
@@ -3580,7 +3965,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       }
     }
   }, "checkHitl");
-  const checkHitlArm = /* @__PURE__ */ __name3((node, path3, container) => {
+  const checkHitlArm = /* @__PURE__ */ __name4((node, path3, container) => {
     if (!workflowContainerRunsHitlArm(container)) {
       checkId(node.id, path3);
       err("node-type-unsupported-in-container", workflowHitlArmUnsupportedMessage(node.type, node.id, container), path3, node.id);
@@ -3588,7 +3973,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     checkHitl(node, path3);
   }, "checkHitlArm");
-  const checkArm = /* @__PURE__ */ __name3((arm, path3, depth, container) => {
+  const checkArm = /* @__PURE__ */ __name4((arm, path3, depth, container) => {
     if (arm.type === "mapping") {
       checkId(arm.id, path3);
       checkMapMembers(readMapConfig(arm.mapConfig), `${path3}.mapConfig`, arm.id);
@@ -3824,7 +4209,7 @@ function isWellFormedPredicate(p) {
 }
 function canonicalJson(value22) {
   const seen = /* @__PURE__ */ new WeakSet();
-  const encode = /* @__PURE__ */ __name3((v) => {
+  const encode = /* @__PURE__ */ __name4((v) => {
     if (v === null || typeof v === "number" || typeof v === "boolean") return JSON.stringify(v);
     if (typeof v === "string") return JSON.stringify(v);
     if (typeof v === "bigint") return JSON.stringify(`${v}n`);
@@ -3851,7 +4236,7 @@ function hashGraph(g) {
 function compilePlan(g) {
   const steps = {};
   const order = [];
-  const addNode = /* @__PURE__ */ __name3((id, node) => {
+  const addNode = /* @__PURE__ */ __name4((id, node) => {
     if (id in steps) {
       throw new WorkflowPlanError("duplicate-step-id", `Duplicate step id "${id}" in definition.graph`);
     }
@@ -4181,7 +4566,7 @@ function renderRef(ref) {
 function step(s) {
   const id = stepIdOf(s);
   return {
-    path: /* @__PURE__ */ __name3((p) => ({
+    path: /* @__PURE__ */ __name4((p) => ({
       path: p === "" ? `stepResults.${id}` : `stepResults.${id}.${p}`
     }), "path")
   };
@@ -4269,7 +4654,7 @@ function resolvePlacements(calls) {
   const declared = /* @__PURE__ */ new Map();
   const placedBy = /* @__PURE__ */ new Map();
   const allIds = /* @__PURE__ */ new Map();
-  const claimId = /* @__PURE__ */ __name3((id, callIndex) => {
+  const claimId = /* @__PURE__ */ __name4((id, callIndex) => {
     const first = allIds.get(id);
     if (first !== void 0 && first !== callIndex) {
       issues.push({
@@ -4309,7 +4694,7 @@ function resolvePlacements(calls) {
         break;
     }
   });
-  const armMapPlacementIssue = /* @__PURE__ */ __name3((node, ref, i, container) => {
+  const armMapPlacementIssue = /* @__PURE__ */ __name4((node, ref, i, container) => {
     if (!ref.armMap || node.type === "mapping" || isHitlNode2(node)) return void 0;
     const id = nodeIdOf(node);
     if ((container === "foreach" || container === "loop") && node.type !== "workflow") {
@@ -4330,7 +4715,7 @@ function resolvePlacements(calls) {
     }
     return void 0;
   }, "armMapPlacementIssue");
-  const hitlPlacementIssue = /* @__PURE__ */ __name3((node, ref, i, container) => {
+  const hitlPlacementIssue = /* @__PURE__ */ __name4((node, ref, i, container) => {
     if (!isHitlNode2(node)) return void 0;
     const id = node.id;
     if (ref.armMap) {
@@ -4351,7 +4736,7 @@ function resolvePlacements(calls) {
     }
     return void 0;
   }, "hitlPlacementIssue");
-  const resolve3 = /* @__PURE__ */ __name3((ref, i, allowMapping, container) => {
+  const resolve3 = /* @__PURE__ */ __name4((ref, i, allowMapping, container) => {
     if ("node" in ref) {
       if (ref.node.type === "mapping" && !allowMapping) {
         issues.push({
@@ -4406,7 +4791,7 @@ function resolvePlacements(calls) {
     placedBy.set(ref.ref, i);
     return d.node;
   }, "resolve");
-  const claim = /* @__PURE__ */ __name3((ref, i, allowMapping, container) => {
+  const claim = /* @__PURE__ */ __name4((ref, i, allowMapping, container) => {
     if ("ref" in ref) {
       resolve3(ref, i, allowMapping, container);
       return;
@@ -4441,7 +4826,7 @@ function resolvePlacements(calls) {
     }
   });
   const graph = [];
-  const lookup = /* @__PURE__ */ __name3((ref) => {
+  const lookup = /* @__PURE__ */ __name4((ref) => {
     const n2 = "node" in ref ? ref.node : declared.get(ref.ref)?.node;
     if (!n2 || !ref.armMap || n2.type === "mapping" || isHitlNode2(n2)) return n2;
     return inlineContainerArm(ref.armMap, n2);
@@ -4584,11 +4969,11 @@ function seedLedgerFromRun(run, steps, targetPlan, opts = {}) {
   const seeded = [];
   const unseeded = [];
   const known = new Set(Object.keys(targetPlan.steps));
-  const parentOf = /* @__PURE__ */ __name3((id) => {
+  const parentOf = /* @__PURE__ */ __name4((id) => {
     const m = /^(.*)(\[\d+\]|#\d+)$/.exec(id);
     return m ? m[1] : void 0;
   }, "parentOf");
-  const dependsOf = /* @__PURE__ */ __name3((id) => {
+  const dependsOf = /* @__PURE__ */ __name4((id) => {
     const node = targetPlan.steps[id];
     if (node) return node.dependsOn;
     const parent = parentOf(id);
@@ -4675,7 +5060,7 @@ function replayLedger(g, ledger) {
     startedAt: 0,
     ...ledger.requestContext
   };
-  const ctxFor = /* @__PURE__ */ __name3((id) => ({
+  const ctxFor = /* @__PURE__ */ __name4((id) => ({
     initData: ledger.initData,
     stepResults: ancestorResults(plan, id, rows22),
     state: ledger.state ?? {},
@@ -4757,7 +5142,7 @@ function ancestorResults(plan, id, rows22) {
   const out = {};
   const joinAliased = /* @__PURE__ */ new Set();
   const seen = /* @__PURE__ */ new Set();
-  const take = /* @__PURE__ */ __name3((rowId) => {
+  const take = /* @__PURE__ */ __name4((rowId) => {
     const hit = replayResultOf(rows22.get(rowId), plan.steps[rowId]);
     if (!hit) return void 0;
     if (!joinAliased.has(rowId)) out[rowId] = hit.value;
@@ -4774,7 +5159,7 @@ function ancestorResults(plan, id, rows22) {
     }
     return hit;
   }, "take");
-  const walk22 = /* @__PURE__ */ __name3((ids) => {
+  const walk22 = /* @__PURE__ */ __name4((ids) => {
     for (const dep of ids) {
       if (seen.has(dep)) continue;
       seen.add(dep);
@@ -5128,7 +5513,7 @@ function timeZoneSupported(tz) {
 }
 function validateBusinessHours(cal, path3 = "businessHours") {
   const issues = [];
-  const issue = /* @__PURE__ */ __name3((p, message) => issues.push({
+  const issue = /* @__PURE__ */ __name4((p, message) => issues.push({
     code: "business-hours-invalid",
     path: p,
     message
@@ -5197,7 +5582,7 @@ function formatter(tz) {
 }
 function localParts(ms, tz) {
   const parts = formatter(tz).formatToParts(new Date(ms));
-  const get = /* @__PURE__ */ __name3((t) => parts.find((p) => p.type === t)?.value ?? "", "get");
+  const get = /* @__PURE__ */ __name4((t) => parts.find((p) => p.type === t)?.value ?? "", "get");
   const hour = Number(get("hour")) % 24;
   return {
     year: Number(get("year")),
@@ -5367,7 +5752,7 @@ function matchesEditablePath(pointer, editablePaths, op = "replace") {
 }
 function changedPointers(before, after, base = "") {
   if (before === after) return [];
-  const isObj = /* @__PURE__ */ __name3((v) => typeof v === "object" && v !== null && !Array.isArray(v), "isObj");
+  const isObj = /* @__PURE__ */ __name4((v) => typeof v === "object" && v !== null && !Array.isArray(v), "isObj");
   if (Array.isArray(before) && Array.isArray(after)) {
     if (before.length !== after.length) return [
       base || "/"
@@ -5575,7 +5960,7 @@ function rebaseItemPointer(pointer, itemsPath, index) {
 }
 function validateWorkflowSchedule(schedule, path3 = "/schedule") {
   if (schedule === void 0 || schedule === null) return [];
-  const issue = /* @__PURE__ */ __name3((at, detail) => [
+  const issue = /* @__PURE__ */ __name4((at, detail) => [
     {
       code: WORKFLOW_SCHEDULE_SHAPE_ISSUE,
       severity: "error",
@@ -5595,6 +5980,9 @@ function validateWorkflowSchedule(schedule, path3 = "/schedule") {
   if (typeof type !== "string" || !WORKFLOW_SCHEDULE_TYPES.includes(type)) {
     return issue(path3, `\`schedule.type\` ${JSON.stringify(type)} is not one of ${WORKFLOW_SCHEDULE_TYPES.map((t) => `'${t}'`).join(" | ")}`);
   }
+  if (schedule.runAs !== void 0 && !WORKFLOW_SCHEDULE_RUN_AS.includes(schedule.runAs)) {
+    return issue(`${path3}/runAs`, `\`schedule.runAs\` ${JSON.stringify(schedule.runAs)} is not one of ${WORKFLOW_SCHEDULE_RUN_AS.map((v) => `'${v}'`).join(" | ")}`);
+  }
   switch (type) {
     case "cron": {
       if (typeof schedule.expression !== "string" || schedule.expression.trim().length === 0) {
@@ -5622,7 +6010,7 @@ function validateWorkflowSchedule(schedule, path3 = "/schedule") {
 }
 function collectEnvTemplateKeys(value22) {
   const keys = /* @__PURE__ */ new Set();
-  const walk22 = /* @__PURE__ */ __name3((v) => {
+  const walk22 = /* @__PURE__ */ __name4((v) => {
     if (isEnvRef(v)) {
       keys.add(v.__envRef);
       return;
@@ -5649,7 +6037,7 @@ function collectEnvTemplateKeys(value22) {
 }
 function substituteEnvRefs(value22, overlay) {
   const missing = /* @__PURE__ */ new Set();
-  const walk22 = /* @__PURE__ */ __name3((v, slot = false) => {
+  const walk22 = /* @__PURE__ */ __name4((v, slot = false) => {
     if (isEnvRef(v)) {
       if (Object.prototype.hasOwnProperty.call(overlay, v.__envRef)) {
         const s = overlay[v.__envRef];
@@ -5909,25 +6297,57 @@ function needsInheritedWorkspace(graph) {
   }
   return false;
 }
-var __defProp3, __name3, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
+function armEntry2(arm) {
+  return Array.isArray(arm) ? arm[arm.length - 1] : arm;
+}
+function entryHasJobTier(entry) {
+  const n2 = armEntry2(entry);
+  if (!n2 || typeof n2 !== "object") return false;
+  const node = n2;
+  if (node.tier === "job") return true;
+  const ws = node.workspace;
+  if (ws !== void 0 && ws !== "inherit") return true;
+  switch (node.type) {
+    case "parallel":
+      return Array.isArray(node.steps) && node.steps.some(entryHasJobTier);
+    case "conditional":
+      return Array.isArray(node.steps) && node.steps.some(entryHasJobTier) || node.otherwise !== void 0 && entryHasJobTier(node.otherwise);
+    case "foreach":
+    case "loop":
+      return entryHasJobTier(node.step);
+    default:
+      return false;
+  }
+}
+function graphHasJobTierStep(envelopeOrGraph) {
+  if (!envelopeOrGraph || typeof envelopeOrGraph !== "object") return false;
+  const env2 = envelopeOrGraph;
+  const envWorkspace = env2.workspace;
+  if (envWorkspace !== void 0 && envWorkspace !== "inherit") return true;
+  const graph = Array.isArray(envelopeOrGraph) ? envelopeOrGraph : env2.definition?.graph ?? [];
+  return Array.isArray(graph) && graph.some(entryHasJobTier);
+}
+var __defProp4, __name4, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, WORKFLOW_MODEL_TEMPLATE_ROOT, WORKFLOW_MODEL_TEMPLATE_RE, PATH_SEGMENT_RE, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, WORKFLOW_SCHEDULE_RUN_AS, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
 var init_dist2 = __esm({
   "../workflow-graph/dist/index.mjs"() {
     "use strict";
     init_dist();
     init_dist();
     init_dist();
+    init_workflow_job_tools();
+    init_workflow_job_tools();
     init_dist();
     init_dist();
     init_dist();
     init_dist();
-    __defProp3 = Object.defineProperty;
-    __name3 = /* @__PURE__ */ __name((target, value22) => __defProp3(target, "name", { value: value22, configurable: true }), "__name");
+    __defProp4 = Object.defineProperty;
+    __name4 = /* @__PURE__ */ __name((target, value22) => __defProp4(target, "name", { value: value22, configurable: true }), "__name");
     WorkflowTemplateError = class extends Error {
       static {
         __name(this, "WorkflowTemplateError");
       }
       static {
-        __name3(this, "WorkflowTemplateError");
+        __name4(this, "WorkflowTemplateError");
       }
       placeholder;
       constructor(message, placeholder) {
@@ -5936,11 +6356,11 @@ var init_dist2 = __esm({
       }
     };
     __name(isMapConfigObject, "isMapConfigObject");
-    __name3(isMapConfigObject, "isMapConfigObject");
+    __name4(isMapConfigObject, "isMapConfigObject");
     __name(parseMapConfig, "parseMapConfig");
-    __name3(parseMapConfig, "parseMapConfig");
+    __name4(parseMapConfig, "parseMapConfig");
     __name(mapConfigWire, "mapConfigWire");
-    __name3(mapConfigWire, "mapConfigWire");
+    __name4(mapConfigWire, "mapConfigWire");
     TEMPLATE_PLACEHOLDER = /\$\{([^}]*)\}/g;
     TEMPLATE_NAMESPACES = [
       "initData",
@@ -5949,21 +6369,21 @@ var init_dist2 = __esm({
       "stepResults"
     ];
     __name(describeBadPlaceholder, "describeBadPlaceholder");
-    __name3(describeBadPlaceholder, "describeBadPlaceholder");
+    __name4(describeBadPlaceholder, "describeBadPlaceholder");
     __name(parseTemplatePlaceholder, "parseTemplatePlaceholder");
-    __name3(parseTemplatePlaceholder, "parseTemplatePlaceholder");
+    __name4(parseTemplatePlaceholder, "parseTemplatePlaceholder");
     __name(traverseMappingPath, "traverseMappingPath");
-    __name3(traverseMappingPath, "traverseMappingPath");
+    __name4(traverseMappingPath, "traverseMappingPath");
     __name(stringifyTemplateValue, "stringifyTemplateValue");
-    __name3(stringifyTemplateValue, "stringifyTemplateValue");
+    __name4(stringifyTemplateValue, "stringifyTemplateValue");
     __name(escapeFence, "escapeFence");
-    __name3(escapeFence, "escapeFence");
+    __name4(escapeFence, "escapeFence");
     __name(fenceBlock, "fenceBlock");
-    __name3(fenceBlock, "fenceBlock");
+    __name4(fenceBlock, "fenceBlock");
     __name(renderTemplate, "renderTemplate");
-    __name3(renderTemplate, "renderTemplate");
+    __name4(renderTemplate, "renderTemplate");
     __name(isMapDescriptor, "isMapDescriptor");
-    __name3(isMapDescriptor, "isMapDescriptor");
+    __name4(isMapDescriptor, "isMapDescriptor");
     MAP_DESCRIPTOR_KEYS = [
       "step",
       "path",
@@ -5975,43 +6395,64 @@ var init_dist2 = __esm({
     ];
     MAP_MEMBER_MALFORMED_CODE = "map-member-malformed";
     __name(malformedMapMembers, "malformedMapMembers");
-    __name3(malformedMapMembers, "malformedMapMembers");
+    __name4(malformedMapMembers, "malformedMapMembers");
     __name(mapMemberMalformedMessage, "mapMemberMalformedMessage");
-    __name3(mapMemberMalformedMessage, "mapMemberMalformedMessage");
+    __name4(mapMemberMalformedMessage, "mapMemberMalformedMessage");
     __name(resolveDescriptor, "resolveDescriptor");
-    __name3(resolveDescriptor, "resolveDescriptor");
+    __name4(resolveDescriptor, "resolveDescriptor");
     __name(resolveMapping, "resolveMapping");
-    __name3(resolveMapping, "resolveMapping");
-    fromInit = /* @__PURE__ */ __name3((path3) => ({
+    __name4(resolveMapping, "resolveMapping");
+    fromInit = /* @__PURE__ */ __name4((path3) => ({
       initData: true,
       path: path3
     }), "fromInit");
-    fromStep = /* @__PURE__ */ __name3((s, path3 = "") => {
-      const idOf = /* @__PURE__ */ __name3((x) => typeof x === "string" ? x : x.id, "idOf");
+    fromStep = /* @__PURE__ */ __name4((s, path3 = "") => {
+      const idOf = /* @__PURE__ */ __name4((x) => typeof x === "string" ? x : x.id, "idOf");
       return {
         step: Array.isArray(s) ? s.map(idOf) : idOf(s),
         path: path3
       };
     }, "fromStep");
-    value = /* @__PURE__ */ __name3((v) => ({
+    value = /* @__PURE__ */ __name4((v) => ({
       value: v
     }), "value");
-    template = /* @__PURE__ */ __name3((s) => ({
+    template = /* @__PURE__ */ __name4((s) => ({
       template: s
     }), "template");
-    fromRequest = /* @__PURE__ */ __name3((path3) => ({
+    fromRequest = /* @__PURE__ */ __name4((path3) => ({
       requestContextPath: path3
     }), "fromRequest");
-    rows = /* @__PURE__ */ __name3((s, path3, page) => ({
+    rows = /* @__PURE__ */ __name4((s, path3, page) => ({
       step: typeof s === "string" ? s : s.id,
       path: path3,
       rows: page
     }), "rows");
-    fromKnowledge = /* @__PURE__ */ __name3((k) => ({
+    fromKnowledge = /* @__PURE__ */ __name4((k) => ({
       knowledge: k
     }), "fromKnowledge");
     SideEffectsSchema = z4.enum(WORKFLOW_SIDE_EFFECTS);
     JobResourcesSchema = z4.enum(WORKFLOW_JOB_RESOURCES);
+    WORKFLOW_MODEL_TEMPLATE_ROOT = "initData";
+    WORKFLOW_MODEL_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*(?:\|([^}]*))?\}$/;
+    PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
+    __name(looksLikeModelTemplate, "looksLikeModelTemplate");
+    __name4(looksLikeModelTemplate, "looksLikeModelTemplate");
+    __name(parseModelTemplate, "parseModelTemplate");
+    __name4(parseModelTemplate, "parseModelTemplate");
+    __name(modelTemplateInvalidMessage, "modelTemplateInvalidMessage");
+    __name4(modelTemplateInvalidMessage, "modelTemplateInvalidMessage");
+    __name(modelTemplateDefaultRequiredMessage, "modelTemplateDefaultRequiredMessage");
+    __name4(modelTemplateDefaultRequiredMessage, "modelTemplateDefaultRequiredMessage");
+    __name(staticModelPin, "staticModelPin");
+    __name4(staticModelPin, "staticModelPin");
+    __name(readPath, "readPath");
+    __name4(readPath, "readPath");
+    __name(renderModelTemplate, "renderModelTemplate");
+    __name4(renderModelTemplate, "renderModelTemplate");
+    __name(modelTemplateUnboundMessage, "modelTemplateUnboundMessage");
+    __name4(modelTemplateUnboundMessage, "modelTemplateUnboundMessage");
+    __name(modelTemplateInputNotObjectMessage, "modelTemplateInputNotObjectMessage");
+    __name4(modelTemplateInputNotObjectMessage, "modelTemplateInputNotObjectMessage");
     APPROVER_SPEC_MAX_USERS = 20;
     ESCALATION_MAX_HOPS = 3;
     TemplateBindingSchema = z22.object({
@@ -6077,7 +6518,7 @@ var init_dist2 = __esm({
     APPROVER_WRITTEN_MAX = 120;
     USER_ID_SHAPED_RE = /^[^\s@]{1,128}$/;
     __name(describeApproverSpecRefusal, "describeApproverSpecRefusal");
-    __name3(describeApproverSpecRefusal, "describeApproverSpecRefusal");
+    __name4(describeApproverSpecRefusal, "describeApproverSpecRefusal");
     BINDING_ROOTS = [
       "initData",
       "stepResults",
@@ -6085,28 +6526,28 @@ var init_dist2 = __esm({
       "state"
     ];
     __name(bindingRootsOk, "bindingRootsOk");
-    __name3(bindingRootsOk, "bindingRootsOk");
+    __name4(bindingRootsOk, "bindingRootsOk");
     __name(isTemplateBinding, "isTemplateBinding");
-    __name3(isTemplateBinding, "isTemplateBinding");
+    __name4(isTemplateBinding, "isTemplateBinding");
     __name(approvalEditable, "approvalEditable");
-    __name3(approvalEditable, "approvalEditable");
+    __name4(approvalEditable, "approvalEditable");
     __name(validateApproverBlock, "validateApproverBlock");
-    __name3(validateApproverBlock, "validateApproverBlock");
+    __name4(validateApproverBlock, "validateApproverBlock");
     __name(liftRenderedApprover, "liftRenderedApprover");
-    __name3(liftRenderedApprover, "liftRenderedApprover");
+    __name4(liftRenderedApprover, "liftRenderedApprover");
     WORKSPACE_TEMPLATE_EXPR_RE = /^\$\{\s*(?:initData|input)\.([^}]+?)\s*\}$/;
     __name(workspaceTemplatePath, "workspaceTemplatePath");
-    __name3(workspaceTemplatePath, "workspaceTemplatePath");
+    __name4(workspaceTemplatePath, "workspaceTemplatePath");
     __name(retryBackoffs, "retryBackoffs");
-    __name3(retryBackoffs, "retryBackoffs");
+    __name4(retryBackoffs, "retryBackoffs");
     SLEEP_UNTIL_REPLACEMENT = Object.freeze({
       type: "sleep",
       duration: 6e4
     });
     __name(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
-    __name3(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
+    __name4(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
     __name(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
-    __name3(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
+    __name4(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
     WORKFLOW_CAPS_DEFAULT = Object.freeze({
       maxParallelArms: 16,
       maxForeachConcurrency: 16,
@@ -6131,71 +6572,60 @@ var init_dist2 = __esm({
       "api",
       "user"
     ];
-    clone = /* @__PURE__ */ __name3((v) => JSON.parse(JSON.stringify(v)), "clone");
+    clone = /* @__PURE__ */ __name4((v) => JSON.parse(JSON.stringify(v)), "clone");
     __name(fillPolicy, "fillPolicy");
-    __name3(fillPolicy, "fillPolicy");
+    __name4(fillPolicy, "fillPolicy");
     __name(fillSingle, "fillSingle");
-    __name3(fillSingle, "fillSingle");
+    __name4(fillSingle, "fillSingle");
     __name(fillHitl, "fillHitl");
-    __name3(fillHitl, "fillHitl");
+    __name4(fillHitl, "fillHitl");
     __name(fillArm, "fillArm");
-    __name3(fillArm, "fillArm");
+    __name4(fillArm, "fillArm");
     __name(fillEntry, "fillEntry");
-    __name3(fillEntry, "fillEntry");
+    __name4(fillEntry, "fillEntry");
     __name(withDefaultsFilled, "withDefaultsFilled");
-    __name3(withDefaultsFilled, "withDefaultsFilled");
+    __name4(withDefaultsFilled, "withDefaultsFilled");
     CONNECTION_ID_HEX_RE = /^[0-9a-f]{24}$/;
     __name(isConnectionKeyShaped, "isConnectionKeyShaped");
-    __name3(isConnectionKeyShaped, "isConnectionKeyShaped");
+    __name4(isConnectionKeyShaped, "isConnectionKeyShaped");
     __name(connectionKeyUndeclaredMessage, "connectionKeyUndeclaredMessage");
-    __name3(connectionKeyUndeclaredMessage, "connectionKeyUndeclaredMessage");
-    WORKFLOW_JOB_TOOLS = [
-      "shell",
-      "read",
-      "write",
-      "edit",
-      "glob",
-      "grep",
-      "git",
-      "gh",
-      "fetch"
-    ];
+    __name4(connectionKeyUndeclaredMessage, "connectionKeyUndeclaredMessage");
     WORKFLOW_JOB_MAX_WORKTREE_ARMS = 8;
     __name(classifyModelProvider, "classifyModelProvider");
-    __name3(classifyModelProvider, "classifyModelProvider");
-    workspaceOf = /* @__PURE__ */ __name3((node) => node.workspace, "workspaceOf");
-    mountsWorkspace = /* @__PURE__ */ __name3((node) => {
+    __name4(classifyModelProvider, "classifyModelProvider");
+    workspaceOf = /* @__PURE__ */ __name4((node) => node.workspace, "workspaceOf");
+    mountsWorkspace = /* @__PURE__ */ __name4((node) => {
       const w = workspaceOf(node);
       return w !== void 0 && w !== "inherit";
     }, "mountsWorkspace");
-    isJobTier = /* @__PURE__ */ __name3((node) => node.tier === "job" || mountsWorkspace(node), "isJobTier");
-    jobToolsOf = /* @__PURE__ */ __name3((node) => {
+    isJobTier = /* @__PURE__ */ __name4((node) => node.tier === "job" || mountsWorkspace(node), "isJobTier");
+    jobToolsOf = /* @__PURE__ */ __name4((node) => {
       if (node.type === "agent") return node.toolScope?.jobTools;
       return node.jobTools;
     }, "jobToolsOf");
     __name(schemaAtPath, "schemaAtPath");
-    __name3(schemaAtPath, "schemaAtPath");
-    schemaIsArray = /* @__PURE__ */ __name3((schema) => {
+    __name4(schemaAtPath, "schemaAtPath");
+    schemaIsArray = /* @__PURE__ */ __name4((schema) => {
       if (!schema) return void 0;
       const t = schema.type;
       if (t === void 0) return void 0;
       return Array.isArray(t) ? t.includes("array") : t === "array";
     }, "schemaIsArray");
-    isHitlNode = /* @__PURE__ */ __name3((n2) => isWorkflowHitlEntryType(n2.type), "isHitlNode");
-    isSingleStep = /* @__PURE__ */ __name3((n2) => !isHitlNode(n2), "isSingleStep");
-    singleId = /* @__PURE__ */ __name3((s) => s.type === "step" ? s.step.id : s.id, "singleId");
-    armId = /* @__PURE__ */ __name3((a) => a.type === "mapping" ? a.id : singleId(a), "armId");
+    isHitlNode = /* @__PURE__ */ __name4((n2) => isWorkflowHitlEntryType(n2.type), "isHitlNode");
+    isSingleStep = /* @__PURE__ */ __name4((n2) => !isHitlNode(n2), "isSingleStep");
+    singleId = /* @__PURE__ */ __name4((s) => s.type === "step" ? s.step.id : s.id, "singleId");
+    armId = /* @__PURE__ */ __name4((a) => a.type === "mapping" ? a.id : singleId(a), "armId");
     TEMPLATE_STEP_REF = /\$\{\s*stepResults\.([A-Za-z0-9_\-]+)/g;
     __name(templateStepRefs, "templateStepRefs");
-    __name3(templateStepRefs, "templateStepRefs");
+    __name4(templateStepRefs, "templateStepRefs");
     __name(readMapConfig, "readMapConfig");
-    __name3(readMapConfig, "readMapConfig");
+    __name4(readMapConfig, "readMapConfig");
     __name(mapConfigStepRefs, "mapConfigStepRefs");
-    __name3(mapConfigStepRefs, "mapConfigStepRefs");
+    __name4(mapConfigStepRefs, "mapConfigStepRefs");
     __name(nodeStepRefs, "nodeStepRefs");
-    __name3(nodeStepRefs, "nodeStepRefs");
+    __name4(nodeStepRefs, "nodeStepRefs");
     __name(validateLuaExtensions, "validateLuaExtensions");
-    __name3(validateLuaExtensions, "validateLuaExtensions");
+    __name4(validateLuaExtensions, "validateLuaExtensions");
     EDITABLE_PATH_RE = /^[A-Za-z_][A-Za-z0-9_]*(\[(\*|\d+)\])?(\.[A-Za-z_][A-Za-z0-9_]*(\[(\*|\d+)\])?)*$/;
     PREDICATE_OPS = /* @__PURE__ */ new Set([
       "eq",
@@ -6215,23 +6645,23 @@ var init_dist2 = __esm({
       "not"
     ]);
     __name(isPredicate, "isPredicate");
-    __name3(isPredicate, "isPredicate");
-    isPredicateScalar = /* @__PURE__ */ __name3((v) => v === null || typeof v === "string" || typeof v === "number" || typeof v === "boolean", "isPredicateScalar");
+    __name4(isPredicate, "isPredicate");
+    isPredicateScalar = /* @__PURE__ */ __name4((v) => v === null || typeof v === "string" || typeof v === "number" || typeof v === "boolean", "isPredicateScalar");
     __name(isPathOrLiteral, "isPathOrLiteral");
-    __name3(isPathOrLiteral, "isPathOrLiteral");
+    __name4(isPathOrLiteral, "isPathOrLiteral");
     __name(isWellFormedPredicate, "isWellFormedPredicate");
-    __name3(isWellFormedPredicate, "isWellFormedPredicate");
+    __name4(isWellFormedPredicate, "isWellFormedPredicate");
     GRAPH_HASH_PREFIX = "sha256-cj1:";
     __name(canonicalJson, "canonicalJson");
-    __name3(canonicalJson, "canonicalJson");
+    __name4(canonicalJson, "canonicalJson");
     __name(hashGraph, "hashGraph");
-    __name3(hashGraph, "hashGraph");
+    __name4(hashGraph, "hashGraph");
     WorkflowPlanError = class extends Error {
       static {
         __name(this, "WorkflowPlanError");
       }
       static {
-        __name3(this, "WorkflowPlanError");
+        __name4(this, "WorkflowPlanError");
       }
       code;
       constructor(code, message) {
@@ -6239,47 +6669,47 @@ var init_dist2 = __esm({
         this.name = "WorkflowPlanError";
       }
     };
-    isArmStep = /* @__PURE__ */ __name3((e) => isWorkflowArmEntryType(e.type), "isArmStep");
-    armStepId = /* @__PURE__ */ __name3((e) => e.type === "step" ? e.step.id : e.id, "armStepId");
-    armStepKind = /* @__PURE__ */ __name3((e) => WORKFLOW_ARM_ENTRY_STEP_KINDS[e.type], "armStepKind");
-    joinIdOf = /* @__PURE__ */ __name3((entryId) => `${entryId}.join`, "joinIdOf");
-    containerIdOf = /* @__PURE__ */ __name3((type, entryIndex) => `${type}@${entryIndex}`, "containerIdOf");
+    isArmStep = /* @__PURE__ */ __name4((e) => isWorkflowArmEntryType(e.type), "isArmStep");
+    armStepId = /* @__PURE__ */ __name4((e) => e.type === "step" ? e.step.id : e.id, "armStepId");
+    armStepKind = /* @__PURE__ */ __name4((e) => WORKFLOW_ARM_ENTRY_STEP_KINDS[e.type], "armStepKind");
+    joinIdOf = /* @__PURE__ */ __name4((entryId) => `${entryId}.join`, "joinIdOf");
+    containerIdOf = /* @__PURE__ */ __name4((type, entryIndex) => `${type}@${entryIndex}`, "containerIdOf");
     __name(compilePlan, "compilePlan");
-    __name3(compilePlan, "compilePlan");
+    __name4(compilePlan, "compilePlan");
     PATH_PLACEHOLDER = /^\$\{([^}]+)\}$/;
     MISSING = /* @__PURE__ */ Symbol("predicate.missing");
     __name(resolvePath, "resolvePath");
-    __name3(resolvePath, "resolvePath");
+    __name4(resolvePath, "resolvePath");
     __name(walk, "walk");
-    __name3(walk, "walk");
+    __name4(walk, "walk");
     __name(resolveValue, "resolveValue");
-    __name3(resolveValue, "resolveValue");
+    __name4(resolveValue, "resolveValue");
     __name(evaluatePredicate, "evaluatePredicate");
-    __name3(evaluatePredicate, "evaluatePredicate");
+    __name4(evaluatePredicate, "evaluatePredicate");
     __name(compare, "compare");
-    __name3(compare, "compare");
+    __name4(compare, "compare");
     __name(derivePredicateLabel, "derivePredicateLabel");
-    __name3(derivePredicateLabel, "derivePredicateLabel");
+    __name4(derivePredicateLabel, "derivePredicateLabel");
     __name(renderPredicate, "renderPredicate");
-    __name3(renderPredicate, "renderPredicate");
+    __name4(renderPredicate, "renderPredicate");
     __name(wrapLabel, "wrapLabel");
-    __name3(wrapLabel, "wrapLabel");
+    __name4(wrapLabel, "wrapLabel");
     __name(renderRef, "renderRef");
-    __name3(renderRef, "renderRef");
-    stepIdOf = /* @__PURE__ */ __name3((s) => typeof s === "string" ? s : s.id, "stepIdOf");
+    __name4(renderRef, "renderRef");
+    stepIdOf = /* @__PURE__ */ __name4((s) => typeof s === "string" ? s : s.id, "stepIdOf");
     __name(step, "step");
-    __name3(step, "step");
+    __name4(step, "step");
     __name(stepOf, "stepOf");
-    __name3(stepOf, "stepOf");
+    __name4(stepOf, "stepOf");
     __name(init, "init");
-    __name3(init, "init");
+    __name4(init, "init");
     __name(state, "state");
-    __name3(state, "state");
+    __name4(state, "state");
     __name(lit, "lit");
-    __name3(lit, "lit");
+    __name4(lit, "lit");
     __name(toPathOrLiteral, "toPathOrLiteral");
-    __name3(toPathOrLiteral, "toPathOrLiteral");
-    cmp = /* @__PURE__ */ __name3((op) => (l, r) => ({
+    __name4(toPathOrLiteral, "toPathOrLiteral");
+    cmp = /* @__PURE__ */ __name4((op) => (l, r) => ({
       op,
       left: toPathOrLiteral(l),
       right: toPathOrLiteral(r)
@@ -6290,49 +6720,49 @@ var init_dist2 = __esm({
     gte = cmp("gte");
     lt = cmp("lt");
     lte = cmp("lte");
-    inSet = /* @__PURE__ */ __name3((v, set) => ({
+    inSet = /* @__PURE__ */ __name4((v, set) => ({
       op: "in",
       value: {
         path: v.path
       },
       set
     }), "inSet");
-    notIn = /* @__PURE__ */ __name3((v, set) => ({
+    notIn = /* @__PURE__ */ __name4((v, set) => ({
       op: "notIn",
       value: {
         path: v.path
       },
       set
     }), "notIn");
-    exists = /* @__PURE__ */ __name3((ref) => ({
+    exists = /* @__PURE__ */ __name4((ref) => ({
       op: "exists",
       path: ref.path
     }), "exists");
-    notExists = /* @__PURE__ */ __name3((ref) => ({
+    notExists = /* @__PURE__ */ __name4((ref) => ({
       op: "notExists",
       path: ref.path
     }), "notExists");
-    truthy = /* @__PURE__ */ __name3((ref) => ({
+    truthy = /* @__PURE__ */ __name4((ref) => ({
       op: "truthy",
       value: {
         path: ref.path
       }
     }), "truthy");
-    falsy = /* @__PURE__ */ __name3((ref) => ({
+    falsy = /* @__PURE__ */ __name4((ref) => ({
       op: "falsy",
       value: {
         path: ref.path
       }
     }), "falsy");
-    and = /* @__PURE__ */ __name3((...args) => ({
+    and = /* @__PURE__ */ __name4((...args) => ({
       op: "and",
       args
     }), "and");
-    or = /* @__PURE__ */ __name3((...args) => ({
+    or = /* @__PURE__ */ __name4((...args) => ({
       op: "or",
       args
     }), "or");
-    not = /* @__PURE__ */ __name3((arg) => ({
+    not = /* @__PURE__ */ __name4((arg) => ({
       op: "not",
       arg
     }), "not");
@@ -6384,17 +6814,17 @@ var init_dist2 = __esm({
       "text"
     ]);
     __name(continuedFailureValue, "continuedFailureValue");
-    __name3(continuedFailureValue, "continuedFailureValue");
+    __name4(continuedFailureValue, "continuedFailureValue");
     __name(isContinuedFailureValue, "isContinuedFailureValue");
-    __name3(isContinuedFailureValue, "isContinuedFailureValue");
-    isHitlNode2 = /* @__PURE__ */ __name3((n2) => isWorkflowHitlEntryType(n2.type), "isHitlNode");
+    __name4(isContinuedFailureValue, "isContinuedFailureValue");
+    isHitlNode2 = /* @__PURE__ */ __name4((n2) => isWorkflowHitlEntryType(n2.type), "isHitlNode");
     __name(inlineContainerArm, "inlineContainerArm");
-    __name3(inlineContainerArm, "inlineContainerArm");
-    nodeIdOf = /* @__PURE__ */ __name3((n2) => n2.type === "step" ? n2.step.id : n2.id, "nodeIdOf");
+    __name4(inlineContainerArm, "inlineContainerArm");
+    nodeIdOf = /* @__PURE__ */ __name4((n2) => n2.type === "step" ? n2.step.id : n2.id, "nodeIdOf");
     __name(entryIds, "entryIds");
-    __name3(entryIds, "entryIds");
+    __name4(entryIds, "entryIds");
     __name(resolvePlacements, "resolvePlacements");
-    __name3(resolvePlacements, "resolvePlacements");
+    __name4(resolvePlacements, "resolvePlacements");
     GOAL_JUDGE_STEP_ID = "__goal_judge";
     NON_LEAF_KINDS = /* @__PURE__ */ new Set([
       "foreach",
@@ -6402,26 +6832,26 @@ var init_dist2 = __esm({
     ]);
     CONDITIONAL_JOIN_ID = /^conditional@\d+\.join$/;
     __name(isConditionalJoinId, "isConditionalJoinId");
-    __name3(isConditionalJoinId, "isConditionalJoinId");
+    __name4(isConditionalJoinId, "isConditionalJoinId");
     __name(isPlainObject, "isPlainObject");
-    __name3(isPlainObject, "isPlainObject");
+    __name4(isPlainObject, "isPlainObject");
     __name(leafValue, "leafValue");
-    __name3(leafValue, "leafValue");
+    __name4(leafValue, "leafValue");
     __name(runOutputLeaves, "runOutputLeaves");
-    __name3(runOutputLeaves, "runOutputLeaves");
+    __name4(runOutputLeaves, "runOutputLeaves");
     __name(deriveRunOutput, "deriveRunOutput");
-    __name3(deriveRunOutput, "deriveRunOutput");
+    __name4(deriveRunOutput, "deriveRunOutput");
     __name(subrunSettledOutput, "subrunSettledOutput");
-    __name3(subrunSettledOutput, "subrunSettledOutput");
+    __name4(subrunSettledOutput, "subrunSettledOutput");
     __name(seedLedgerFromRun, "seedLedgerFromRun");
-    __name3(seedLedgerFromRun, "seedLedgerFromRun");
-    branchArmId = /* @__PURE__ */ __name3((arm) => arm.type === "step" ? arm.step.id : arm.id, "branchArmId");
+    __name4(seedLedgerFromRun, "seedLedgerFromRun");
+    branchArmId = /* @__PURE__ */ __name4((arm) => arm.type === "step" ? arm.step.id : arm.id, "branchArmId");
     __name(branchSpecFromConditional, "branchSpecFromConditional");
-    __name3(branchSpecFromConditional, "branchSpecFromConditional");
+    __name4(branchSpecFromConditional, "branchSpecFromConditional");
     __name(selectBranchArms, "selectBranchArms");
-    __name3(selectBranchArms, "selectBranchArms");
-    canonical = /* @__PURE__ */ __name3((v) => JSON.stringify(sortKeys(v)), "canonical");
-    sortKeys = /* @__PURE__ */ __name3((v) => {
+    __name4(selectBranchArms, "selectBranchArms");
+    canonical = /* @__PURE__ */ __name4((v) => JSON.stringify(sortKeys(v)), "canonical");
+    sortKeys = /* @__PURE__ */ __name4((v) => {
       if (Array.isArray(v)) return v.map(sortKeys);
       if (v && typeof v === "object") {
         return Object.fromEntries(Object.keys(v).sort().map((k) => [
@@ -6432,65 +6862,65 @@ var init_dist2 = __esm({
       return v;
     }, "sortKeys");
     __name(replayLedger, "replayLedger");
-    __name3(replayLedger, "replayLedger");
+    __name4(replayLedger, "replayLedger");
     JOIN = ".join";
-    entryOfJoin = /* @__PURE__ */ __name3((id) => id.endsWith(JOIN) ? id.slice(0, -JOIN.length) : void 0, "entryOfJoin");
+    entryOfJoin = /* @__PURE__ */ __name4((id) => id.endsWith(JOIN) ? id.slice(0, -JOIN.length) : void 0, "entryOfJoin");
     __name(replayResultOf, "replayResultOf");
-    __name3(replayResultOf, "replayResultOf");
+    __name4(replayResultOf, "replayResultOf");
     __name(ancestorResults, "ancestorResults");
-    __name3(ancestorResults, "ancestorResults");
+    __name4(ancestorResults, "ancestorResults");
     __name(inferTaken, "inferTaken");
-    __name3(inferTaken, "inferTaken");
+    __name4(inferTaken, "inferTaken");
     __name(countChildren, "countChildren");
-    __name3(countChildren, "countChildren");
+    __name4(countChildren, "countChildren");
     FORCE_CANCEL_STALE_MS = 10 * 60 * 1e3;
     TERMINAL = new Set(WORKFLOW_RUN_TERMINAL);
     __name(isTerminalRunStatus, "isTerminalRunStatus");
-    __name3(isTerminalRunStatus, "isTerminalRunStatus");
+    __name4(isTerminalRunStatus, "isTerminalRunStatus");
     __name(pruneUndefined, "pruneUndefined");
-    __name3(pruneUndefined, "pruneUndefined");
+    __name4(pruneUndefined, "pruneUndefined");
     WORKFLOW_INLINE_RUN_TAG = "inline";
     __name(runOrigin, "runOrigin");
-    __name3(runOrigin, "runOrigin");
+    __name4(runOrigin, "runOrigin");
     RUN_ERROR_ISSUES_MAX = 20;
     __name(runErrorIssues, "runErrorIssues");
-    __name3(runErrorIssues, "runErrorIssues");
+    __name4(runErrorIssues, "runErrorIssues");
     __name(runNextAction, "runNextAction");
-    __name3(runNextAction, "runNextAction");
+    __name4(runNextAction, "runNextAction");
     IN_FLIGHT = new Set(WORKFLOW_STEP_IN_FLIGHT);
     __name(emptyRunCounts, "emptyRunCounts");
-    __name3(emptyRunCounts, "emptyRunCounts");
+    __name4(emptyRunCounts, "emptyRunCounts");
     __name(runCountsFromStatusTally, "runCountsFromStatusTally");
-    __name3(runCountsFromStatusTally, "runCountsFromStatusTally");
+    __name4(runCountsFromStatusTally, "runCountsFromStatusTally");
     __name(runCountsFromStepStatuses, "runCountsFromStepStatuses");
-    __name3(runCountsFromStepStatuses, "runCountsFromStepStatuses");
+    __name4(runCountsFromStepStatuses, "runCountsFromStepStatuses");
     __name(isBillingHeldStep, "isBillingHeldStep");
-    __name3(isBillingHeldStep, "isBillingHeldStep");
+    __name4(isBillingHeldStep, "isBillingHeldStep");
     __name(stepEffectiveStatus, "stepEffectiveStatus");
-    __name3(stepEffectiveStatus, "stepEffectiveStatus");
-    n = /* @__PURE__ */ __name3((v) => typeof v === "number" && Number.isFinite(v) ? v : 0, "n");
+    __name4(stepEffectiveStatus, "stepEffectiveStatus");
+    n = /* @__PURE__ */ __name4((v) => typeof v === "number" && Number.isFinite(v) ? v : 0, "n");
     __name(runCounts, "runCounts");
-    __name3(runCounts, "runCounts");
+    __name4(runCounts, "runCounts");
     __name(isPricedStepReceipt, "isPricedStepReceipt");
-    __name3(isPricedStepReceipt, "isPricedStepReceipt");
+    __name4(isPricedStepReceipt, "isPricedStepReceipt");
     __name(receiptEngine, "receiptEngine");
-    __name3(receiptEngine, "receiptEngine");
+    __name4(receiptEngine, "receiptEngine");
     __name(receiptTier, "receiptTier");
-    __name3(receiptTier, "receiptTier");
+    __name4(receiptTier, "receiptTier");
     __name(stepBillingView, "stepBillingView");
-    __name3(stepBillingView, "stepBillingView");
+    __name4(stepBillingView, "stepBillingView");
     __name(runUsage, "runUsage");
-    __name3(runUsage, "runUsage");
+    __name4(runUsage, "runUsage");
     __name(runBudgetCap, "runBudgetCap");
-    __name3(runBudgetCap, "runBudgetCap");
+    __name4(runBudgetCap, "runBudgetCap");
     __name(runBudgetRemaining, "runBudgetRemaining");
-    __name3(runBudgetRemaining, "runBudgetRemaining");
+    __name4(runBudgetRemaining, "runBudgetRemaining");
     __name(runCancelView, "runCancelView");
-    __name3(runCancelView, "runCancelView");
+    __name4(runCancelView, "runCancelView");
     __name(runWorkspaceView, "runWorkspaceView");
-    __name3(runWorkspaceView, "runWorkspaceView");
+    __name4(runWorkspaceView, "runWorkspaceView");
     __name(toWorkflowRunSummary, "toWorkflowRunSummary");
-    __name3(toWorkflowRunSummary, "toWorkflowRunSummary");
+    __name4(toWorkflowRunSummary, "toWorkflowRunSummary");
     STEP_ERROR_DETAIL_KEYS = [
       "reason",
       "key",
@@ -6519,15 +6949,34 @@ var init_dist2 = __esm({
       "workflowId",
       // LUA-696 (review 2): the `ctx.once` key of an `effect_in_doubt` park — the step site stamps it here (scrubbed)
       // beside `park.effectKey`; a key is user text and leaves scrubbed like every other string leaf.
-      "effectKey"
+      "effectKey",
+      // LUA-833: the Job tier's `job_auth_rejected{reason}` evidence — the pod that exited and its code, the Secret the
+      // row named (a k8s object NAME, `wfs-<hash12>-a<n>`, never a value), the execution the pod was spawned for, the
+      // one its credential was minted for, and whether that credential had expired. The LUA-716 / LUA-748 spawn
+      // refusals name `secretName` too.
+      "podName",
+      "exitCode",
+      "secretName",
+      "executionId",
+      "credentialsExecutionId",
+      "expired",
+      // Run-input-bound model pins (the Principal Engineer stage models): the Job tier's `MODEL_ERROR` refusals name the
+      // pin they judged (`requested`), the declared harness, the provider the classifier read and the precedence leg the
+      // pin came from (`source`: initData / default / node / env / org / stamp), and `provider_unsupported`'s fleet
+      // (`allowed`, the LUA_WF_JOB_PROVIDERS list) — the members the PR body promises.
+      "requested",
+      "harness",
+      "provider",
+      "source",
+      "allowed"
     ];
     STEP_ERROR_DETAIL_MAX_BYTES = 8 * 1024;
     DETAIL_MAX_DEPTH = 4;
     DETAIL_MAX_ITEMS = 100;
     __name(scrubDetailValue, "scrubDetailValue");
-    __name3(scrubDetailValue, "scrubDetailValue");
+    __name4(scrubDetailValue, "scrubDetailValue");
     __name(stepErrorDetail, "stepErrorDetail");
-    __name3(stepErrorDetail, "stepErrorDetail");
+    __name4(stepErrorDetail, "stepErrorDetail");
     MAX_HOLIDAYS = 366;
     MAX_WALK_DAYS = 400;
     HHMM = /^([01]\d|2[0-3]):([0-5]\d)$/;
@@ -6547,18 +6996,18 @@ var init_dist2 = __esm({
     };
     supportedTz = null;
     __name(timeZoneSupported, "timeZoneSupported");
-    __name3(timeZoneSupported, "timeZoneSupported");
+    __name4(timeZoneSupported, "timeZoneSupported");
     __name(validateBusinessHours, "validateBusinessHours");
-    __name3(validateBusinessHours, "validateBusinessHours");
+    __name4(validateBusinessHours, "validateBusinessHours");
     __name(toMinutes, "toMinutes");
-    __name3(toMinutes, "toMinutes");
+    __name4(toMinutes, "toMinutes");
     __name(resolveCalendar, "resolveCalendar");
-    __name3(resolveCalendar, "resolveCalendar");
+    __name4(resolveCalendar, "resolveCalendar");
     __name(assertValid, "assertValid");
-    __name3(assertValid, "assertValid");
+    __name4(assertValid, "assertValid");
     fmtCache = /* @__PURE__ */ new Map();
     __name(formatter, "formatter");
-    __name3(formatter, "formatter");
+    __name4(formatter, "formatter");
     WEEKDAYS = {
       Sun: 0,
       Mon: 1,
@@ -6569,25 +7018,25 @@ var init_dist2 = __esm({
       Sat: 6
     };
     __name(localParts, "localParts");
-    __name3(localParts, "localParts");
+    __name4(localParts, "localParts");
     __name(offsetAt, "offsetAt");
-    __name3(offsetAt, "offsetAt");
+    __name4(offsetAt, "offsetAt");
     __name(localToUtc, "localToUtc");
-    __name3(localToUtc, "localToUtc");
+    __name4(localToUtc, "localToUtc");
     __name(sameWall, "sameWall");
-    __name3(sameWall, "sameWall");
+    __name4(sameWall, "sameWall");
     __name(ymd, "ymd");
-    __name3(ymd, "ymd");
+    __name4(ymd, "ymd");
     __name(windowOf, "windowOf");
-    __name3(windowOf, "windowOf");
+    __name4(windowOf, "windowOf");
     __name(nextDayAnchor, "nextDayAnchor");
-    __name3(nextDayAnchor, "nextDayAnchor");
+    __name4(nextDayAnchor, "nextDayAnchor");
     __name(addBusinessTime, "addBusinessTime");
-    __name3(addBusinessTime, "addBusinessTime");
+    __name4(addBusinessTime, "addBusinessTime");
     __name(roundToBusinessTime, "roundToBusinessTime");
-    __name3(roundToBusinessTime, "roundToBusinessTime");
+    __name4(roundToBusinessTime, "roundToBusinessTime");
     __name(isBusinessTime, "isBusinessTime");
-    __name3(isBusinessTime, "isBusinessTime");
+    __name4(isBusinessTime, "isBusinessTime");
     JSON_PATCH_OPS = [
       "replace",
       "add",
@@ -6598,27 +7047,27 @@ var init_dist2 = __esm({
     JSON_PATCH_MAX_TOTAL_BYTES = 1024 * 1024;
     SEGMENT_RE = /^([A-Za-z_$][\w$-]*)((?:\[(?:\*|\d+)\])*)$/;
     __name(parseEditablePath, "parseEditablePath");
-    __name3(parseEditablePath, "parseEditablePath");
+    __name4(parseEditablePath, "parseEditablePath");
     __name(isEditablePathEntry, "isEditablePathEntry");
-    __name3(isEditablePathEntry, "isEditablePathEntry");
+    __name4(isEditablePathEntry, "isEditablePathEntry");
     __name(pointerToSegments, "pointerToSegments");
-    __name3(pointerToSegments, "pointerToSegments");
+    __name4(pointerToSegments, "pointerToSegments");
     __name(pointerToDotPath, "pointerToDotPath");
-    __name3(pointerToDotPath, "pointerToDotPath");
+    __name4(pointerToDotPath, "pointerToDotPath");
     __name(coveredBy, "coveredBy");
-    __name3(coveredBy, "coveredBy");
+    __name4(coveredBy, "coveredBy");
     __name(matchesEditablePath, "matchesEditablePath");
-    __name3(matchesEditablePath, "matchesEditablePath");
+    __name4(matchesEditablePath, "matchesEditablePath");
     __name(changedPointers, "changedPointers");
-    __name3(changedPointers, "changedPointers");
+    __name4(changedPointers, "changedPointers");
     __name(escapePointer, "escapePointer");
-    __name3(escapePointer, "escapePointer");
+    __name4(escapePointer, "escapePointer");
     __name(validateJsonPatch, "validateJsonPatch");
-    __name3(validateJsonPatch, "validateJsonPatch");
+    __name4(validateJsonPatch, "validateJsonPatch");
     __name(applyJsonPatch, "applyJsonPatch");
-    __name3(applyJsonPatch, "applyJsonPatch");
+    __name4(applyJsonPatch, "applyJsonPatch");
     __name(rebaseItemPointer, "rebaseItemPointer");
-    __name3(rebaseItemPointer, "rebaseItemPointer");
+    __name4(rebaseItemPointer, "rebaseItemPointer");
     WORKFLOW_SCHEDULE_TYPES = [
       "cron",
       "interval",
@@ -6626,22 +7075,26 @@ var init_dist2 = __esm({
     ];
     WORKFLOW_SCHEDULE_SHAPE_ISSUE = "schedule-shape-invalid";
     WORKFLOW_SCHEDULE_SHAPES_HINT = "`schedule` must be one of { type: 'cron', expression: '<5-field cron>', timezone?: '<IANA tz>' } | { type: 'interval', seconds: <n> } | { type: 'once', executeAt: '<ISO-8601>' }";
-    isObject = /* @__PURE__ */ __name3((v) => typeof v === "object" && v !== null && !Array.isArray(v), "isObject");
+    WORKFLOW_SCHEDULE_RUN_AS = [
+      "installer",
+      "system"
+    ];
+    isObject = /* @__PURE__ */ __name4((v) => typeof v === "object" && v !== null && !Array.isArray(v), "isObject");
     __name(validateWorkflowSchedule, "validateWorkflowSchedule");
-    __name3(validateWorkflowSchedule, "validateWorkflowSchedule");
+    __name4(validateWorkflowSchedule, "validateWorkflowSchedule");
     WORKFLOW_ENV_OVERLAY_MAX_KEYS = 64;
     WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES = 4096;
     WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE = /(SECRET|TOKEN|KEY|PASSWORD)$/;
-    isEnvRef = /* @__PURE__ */ __name3((v) => typeof v === "object" && v !== null && !Array.isArray(v) && typeof v.__envRef === "string" && Object.keys(v).length === 1, "isEnvRef");
-    looksLikeEmbeddedJson = /* @__PURE__ */ __name3((s) => s.length > 1 && s[0] === "{" && s.includes("__envRef"), "looksLikeEmbeddedJson");
+    isEnvRef = /* @__PURE__ */ __name4((v) => typeof v === "object" && v !== null && !Array.isArray(v) && typeof v.__envRef === "string" && Object.keys(v).length === 1, "isEnvRef");
+    looksLikeEmbeddedJson = /* @__PURE__ */ __name4((s) => s.length > 1 && s[0] === "{" && s.includes("__envRef"), "looksLikeEmbeddedJson");
     __name(collectEnvTemplateKeys, "collectEnvTemplateKeys");
-    __name3(collectEnvTemplateKeys, "collectEnvTemplateKeys");
+    __name4(collectEnvTemplateKeys, "collectEnvTemplateKeys");
     __name(substituteEnvRefs, "substituteEnvRefs");
-    __name3(substituteEnvRefs, "substituteEnvRefs");
+    __name4(substituteEnvRefs, "substituteEnvRefs");
     __name(hashEnvOverlay, "hashEnvOverlay");
-    __name3(hashEnvOverlay, "hashEnvOverlay");
+    __name4(hashEnvOverlay, "hashEnvOverlay");
     __name(validateEnvOverlay, "validateEnvOverlay");
-    __name3(validateEnvOverlay, "validateEnvOverlay");
+    __name4(validateEnvOverlay, "validateEnvOverlay");
     ZERO = {
       steps: {
         min: 0,
@@ -6654,24 +7107,30 @@ var init_dist2 = __esm({
       agentCalls: 0
     };
     __name(add, "add");
-    __name3(add, "add");
+    __name4(add, "add");
     __name(scale, "scale");
-    __name3(scale, "scale");
+    __name4(scale, "scale");
     __name(armEntry, "armEntry");
-    __name3(armEntry, "armEntry");
+    __name4(armEntry, "armEntry");
     __name(ofEntry, "ofEntry");
-    __name3(ofEntry, "ofEntry");
+    __name4(ofEntry, "ofEntry");
     __name(estimateGraph, "estimateGraph");
-    __name3(estimateGraph, "estimateGraph");
-    isRecord2 = /* @__PURE__ */ __name3((v) => !!v && typeof v === "object" && !Array.isArray(v), "isRecord");
+    __name4(estimateGraph, "estimateGraph");
+    isRecord2 = /* @__PURE__ */ __name4((v) => !!v && typeof v === "object" && !Array.isArray(v), "isRecord");
     __name(singleStepsOf, "singleStepsOf");
-    __name3(singleStepsOf, "singleStepsOf");
+    __name4(singleStepsOf, "singleStepsOf");
     __name(entriesOf, "entriesOf");
-    __name3(entriesOf, "entriesOf");
+    __name4(entriesOf, "entriesOf");
     __name(inheritTargets, "inheritTargets");
-    __name3(inheritTargets, "inheritTargets");
+    __name4(inheritTargets, "inheritTargets");
     __name(needsInheritedWorkspace, "needsInheritedWorkspace");
-    __name3(needsInheritedWorkspace, "needsInheritedWorkspace");
+    __name4(needsInheritedWorkspace, "needsInheritedWorkspace");
+    __name(armEntry2, "armEntry2");
+    __name4(armEntry2, "armEntry");
+    __name(entryHasJobTier, "entryHasJobTier");
+    __name4(entryHasJobTier, "entryHasJobTier");
+    __name(graphHasJobTierStep, "graphHasJobTierStep");
+    __name4(graphHasJobTierStep, "graphHasJobTierStep");
   }
 });
 
@@ -6808,7 +7267,7 @@ function defineWorkflow(cfg, build) {
   if (!(wf instanceof LuaWorkflow)) throw new LuaWorkflowBuildError("invalid-envelope", "defineWorkflow: the build callback must return `wf\u2026.commit()`");
   return wf;
 }
-var init2, state2, lit2, eq2, ne2, gt2, gte2, lt2, lte2, inSet2, notIn2, exists2, notExists2, truthy2, falsy2, and2, or2, not2, fromInit2, fromStep2, value2, template2, fromRequest2, rows2, fromKnowledge2, LuaWorkflowBuildError, STEP_ID_RE, WORKFLOW_NAME_RE, WORKFLOW_MAX_PARALLEL_ARMS, WORKFLOW_MAX_FOREACH_CONCURRENCY, WORKFLOW_MAX_FOREACH_ITEMS, WORKFLOW_WORKER_MAX_TIMEOUT_SECONDS, WORKFLOW_JOB_SEGMENT_MAX_SECONDS, WORKFLOW_JOB_MAX_TIMEOUT_SECONDS, WORKFLOW_LOOP_INTERVAL_MAX_SECONDS, WORKFLOW_FOREACH_RATE_MAX_PER_SECOND, WORKFLOW_SPECIALIST_ROLE_MAX_INSTRUCTIONS, WORKFLOW_DEFAULT_MAX_DURATION_SECONDS, WORKFLOW_HITL_MAX_DURATION_SECONDS, SECRET_KEY_RE, isZod, defined, templateText, assertNoClosure, assertPredicate, assertRetry, assertTimeout, envRefKeys, refToDescriptor, __workflowCommitHook, LuaWorkflow, isHitlEntry, WorkflowBuilderImpl, EDITABLE_PATH_RE2;
+var init2, state2, lit2, eq2, ne2, gt2, gte2, lt2, lte2, inSet2, notIn2, exists2, notExists2, truthy2, falsy2, and2, or2, not2, fromInit2, fromStep2, value2, template2, fromRequest2, rows2, fromKnowledge2, LuaWorkflowBuildError, STEP_ID_RE, WORKFLOW_NAME_RE, WORKFLOW_MAX_PARALLEL_ARMS, WORKFLOW_MAX_FOREACH_CONCURRENCY, WORKFLOW_MAX_FOREACH_ITEMS, WORKFLOW_WORKER_MAX_TIMEOUT_SECONDS, WORKFLOW_JOB_SEGMENT_MAX_SECONDS, WORKFLOW_JOB_MAX_TIMEOUT_SECONDS, WORKFLOW_LOOP_INTERVAL_MAX_SECONDS, WORKFLOW_FOREACH_RATE_MAX_PER_SECOND, WORKFLOW_SPECIALIST_ROLE_MAX_INSTRUCTIONS, WORKFLOW_DEFAULT_MAX_DURATION_SECONDS, WORKFLOW_HITL_MAX_DURATION_SECONDS, SECRET_KEY_RE, isZod, defined, templateText, assertNoClosure, assertPredicate, assertRetry, assertTimeout, envRefKeys, foreachItemsNotLowered, refToDescriptor, __workflowCommitHook, LuaWorkflow, isHitlEntry, WorkflowBuilderImpl, EDITABLE_PATH_RE2;
 var init_workflow = __esm({
   "src/types/workflow.ts"() {
     "use strict";
@@ -6927,6 +7386,7 @@ var init_workflow = __esm({
       }
       for (const inner of Object.values(v)) envRefKeys(inner, into);
     }, "envRefKeys");
+    foreachItemsNotLowered = /* @__PURE__ */ __name((what) => new LuaWorkflowBuildError("invalid-envelope", `foreach.items takes fromInit(path) / fromStep(step, path) or an initData.* / stepResults.* ref \u2014 ${what} is not a foreach source; .map({ '': \u2026 }, { id }) before the foreach instead`), "foreachItemsNotLowered");
     refToDescriptor = /* @__PURE__ */ __name((items) => {
       if (!items) throw new LuaWorkflowBuildError("invalid-envelope", "foreach.items needs a ref");
       if ("initData" in items && items.initData === true) {
@@ -6936,11 +7396,14 @@ var init_workflow = __esm({
         };
       }
       if ("step" in items && typeof items.step === "string" && !("path" in items && items.path.startsWith("stepResults"))) {
+        if ("rows" in items) throw foreachItemsNotLowered("rows(\u2026) (a paged dataset)");
         return {
           step: items.step,
           path: items.path
         };
       }
+      if ("step" in items && Array.isArray(items.step)) throw foreachItemsNotLowered("a fan-in fromStep([\u2026])");
+      if (typeof items.path !== "string") throw foreachItemsNotLowered("value(\u2026) / template(\u2026) / fromRequest(\u2026) / fromKnowledge(\u2026)");
       const path3 = items.path;
       if (path3.startsWith("initData")) return {
         initData: true,
@@ -7671,307 +8134,69 @@ var init_auth_error = __esm({
   }
 });
 
-// src/errors/cli.error.ts
-function apiErrorDetail(error) {
-  return {
-    serverCode: error?.code,
-    issues: error?.issues,
-    upstream: error?.upstream,
-    requestId: error?.requestId,
-    vendor: error?.vendor,
-    retryAfterSeconds: error?.retryAfterSeconds
+// src/utils/package-root.ts
+import { readFileSync, existsSync } from "fs";
+import { fileURLToPath, pathToFileURL } from "url";
+import { dirname, join as join2 } from "path";
+function locate() {
+  if (cachedRoot && cachedPkg) return {
+    root: cachedRoot,
+    pkg: cachedPkg
   };
+  let dir = dirname(fileURLToPath(import.meta.url));
+  while (true) {
+    const candidate = join2(dir, "package.json");
+    if (existsSync(candidate)) {
+      try {
+        const parsed = JSON.parse(readFileSync(candidate, "utf8"));
+        if (parsed?.name === "lua-cli") {
+          cachedRoot = dir;
+          cachedPkg = parsed;
+          return {
+            root: dir,
+            pkg: parsed
+          };
+        }
+      } catch {
+      }
+    }
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  throw new Error("Could not locate lua-cli package root from " + fileURLToPath(import.meta.url));
 }
-function isAccessDeniedError(error) {
-  if (CliError.isCliError(error)) return error.statusCode === 403;
-  return error instanceof Error && error.message.startsWith("Access denied (403)");
-}
-function upstreamUnavailableHint(upstream, requestId) {
-  const service = typeof upstream === "string" && upstream ? `its ${upstream} service` : "a service behind it";
-  const ref = typeof requestId === "string" && requestId ? ` If it persists, quote request ${requestId}.` : "";
-  return `The Lua API is up, but ${service} is temporarily unavailable (503 UPSTREAM_UNAVAILABLE) \u2014 retry in a moment.${ref}`;
-}
-function vendorUnavailableHint(vendor, requestId, retryAfterSeconds) {
-  const name = typeof vendor === "string" && vendor ? VENDOR_LABELS[vendor] ?? vendor : "a vendor it depends on";
-  const ref = typeof requestId === "string" && requestId ? ` If it persists, quote request ${requestId}.` : "";
-  const retry = typeof retryAfterSeconds === "number" ? "retry in a moment" : "the request may have applied at the vendor \u2014 check before retrying";
-  return `The Lua API is up, but ${name} is temporarily unavailable (503 VENDOR_UNAVAILABLE) \u2014 ${retry}.${ref}`;
+function getCliVersion() {
+  try {
+    return locate().pkg.version;
+  } catch {
+    return "0.0.0";
+  }
 }
-function authHint(error) {
-  if (error.suppressDefaultRemediation) return void 0;
-  if (error.reason === "no_agent_access") {
-    return [
-      "Your API key is valid, but it does not have access to the agentId in lua.skill.yaml \u2014 the agent belongs",
-      "to another account or organization, was deleted or transferred, or the yaml was copied from another project.",
-      "Check the configured agent and switch if needed:",
-      "  lua agents          (list agents you have access to)",
-      "  lua init            (re-select the agent for this project)"
-    ].join("\n");
+var cachedRoot, cachedPkg;
+var init_package_root = __esm({
+  "src/utils/package-root.ts"() {
+    "use strict";
+    cachedRoot = null;
+    cachedPkg = null;
+    __name(locate, "locate");
+    __name(getCliVersion, "getCliVersion");
   }
-  return "Re-authenticate or check your API key: lua auth configure \xB7 https://admin.heylua.ai";
+});
+
+// src/utils/lua-fetch.ts
+function luaClientHeaderValue() {
+  return formatLuaClientHeader("cli", getCliVersion());
 }
-function numericStatus(error) {
-  const candidate = error.statusCode ?? error.status;
-  return typeof candidate === "number" && Number.isFinite(candidate) ? candidate : void 0;
-}
-function classifyCliError(error) {
-  if (CliError.isCliError(error)) {
-    return {
-      code: error.code,
-      exitCode: error.exitCode,
-      message: error.message,
-      hint: error.hint,
-      statusCode: error.statusCode,
-      serverCode: error.serverCode,
-      issues: error.issues
-    };
-  }
-  if (AuthenticationError.isAuthenticationError(error)) {
-    return {
-      code: "auth",
-      exitCode: CLI_EXIT.AUTH,
-      message: error.message,
-      hint: authHint(error)
-    };
-  }
-  const e = typeof error === "object" && error !== null ? error : {};
-  const message = typeof e.message === "string" && e.message.length > 0 ? e.message : error instanceof Error ? error.name : String(error ?? "Unknown error");
-  if (e.name === "WorkflowLocalUsageError" || typeof e.code === "string" && e.code.startsWith("commander.")) {
-    return {
-      code: "usage",
-      exitCode: CLI_EXIT.USAGE,
-      message
-    };
-  }
-  const status = numericStatus(e);
-  if (status !== void 0) {
-    const statusCode = status;
-    if (status === 401) return {
-      code: "auth",
-      exitCode: CLI_EXIT.AUTH,
-      message,
-      statusCode
-    };
-    if (status === 403) return {
-      code: "forbidden",
-      exitCode: CLI_EXIT.FORBIDDEN,
-      message,
-      statusCode
-    };
-    if (status === 404) return {
-      code: "not_found",
-      exitCode: CLI_EXIT.NOT_FOUND,
-      message,
-      statusCode
-    };
-    if (status >= 400 && status < 500) return {
-      code: `http_${status}`,
-      exitCode: CLI_EXIT.FORBIDDEN,
-      message,
-      statusCode
-    };
-    if (status >= 500 || status === 0) return {
-      code: "unavailable",
-      exitCode: CLI_EXIT.UNAVAILABLE,
-      message,
-      statusCode
-    };
-  }
-  const causeCode = e.cause?.code;
-  if (typeof e.code === "string" && NETWORK_ERRNO.has(e.code) || typeof causeCode === "string" && NETWORK_ERRNO.has(causeCode) || e.name === "AbortError" || e.name === "TimeoutError" || NETWORK_MESSAGE.test(message)) {
-    return {
-      code: "unavailable",
-      exitCode: CLI_EXIT.UNAVAILABLE,
-      message,
-      hint: UNAVAILABLE_HINT
-    };
-  }
-  return {
-    code: "error",
-    exitCode: CLI_EXIT.ERROR,
-    message
-  };
-}
-var CLI_EXIT, CliError, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT, VENDOR_LABELS;
-var init_cli_error = __esm({
-  "src/errors/cli.error.ts"() {
-    "use strict";
-    init_auth_error();
-    CLI_EXIT = {
-      OK: 0,
-      ERROR: 1,
-      USAGE: 2,
-      NOT_FOUND: 3,
-      AUTH: 9,
-      FORBIDDEN: 10,
-      UNAVAILABLE: 11
-    };
-    __name(apiErrorDetail, "apiErrorDetail");
-    CliError = class _CliError extends Error {
-      static {
-        __name(this, "CliError");
-      }
-      isCliError = true;
-      code;
-      exitCode;
-      hint;
-      statusCode;
-      serverCode;
-      issues;
-      constructor(code, message, options = {}) {
-        super(message);
-        this.name = "CliError";
-        this.code = code;
-        this.exitCode = options.exitCode ?? CLI_EXIT.ERROR;
-        this.hint = options.hint;
-        this.statusCode = options.statusCode;
-        this.serverCode = options.serverCode;
-        this.issues = options.issues?.length ? options.issues : void 0;
-        if (Error.captureStackTrace) Error.captureStackTrace(this, _CliError);
-      }
-      /** Bad arguments, an unknown action, no project — exit 2. */
-      static usage(message, hint) {
-        return new _CliError("usage", message, {
-          exitCode: CLI_EXIT.USAGE,
-          hint
-        });
-      }
-      /** The named thing does not exist — exit 3. */
-      static notFound(message, hint) {
-        return new _CliError("not_found", message, {
-          exitCode: CLI_EXIT.NOT_FOUND,
-          hint,
-          statusCode: 404
-        });
-      }
-      /** The credential may not do this — exit 10. */
-      static forbidden(message, hint) {
-        return new _CliError("forbidden", message, {
-          exitCode: CLI_EXIT.FORBIDDEN,
-          hint,
-          statusCode: 403
-        });
-      }
-      /**
-      * An API refusal the site already holds the status of (LUA-766) — classified by the same table the top-level
-      * classifier applies to an untyped error: 401 auth · 403 forbidden · 404 not_found · other 4xx `http_<status>`
-      * (10) · 5xx / 0 unavailable (11, with the network hint unless the site gives its own — or the body's code
-      * picks one: a 503 UPSTREAM_UNAVAILABLE names the Lua service behind the API, LUA-810) · no status `error` (1).
-      * A command that reads `response.error.statusCode` throws through here, so `lua logs` on a 503 exits 11 like
-      * every other verb instead of printing the message itself and then throwing an exit-1 `Error`.
-      */
-      static fromStatus(statusCode, message, hint, detail = {}) {
-        const reported = classifyCliError(Object.assign(new Error(message), {
-          statusCode
-        }));
-        const codeHint = detail.serverCode === "UPSTREAM_UNAVAILABLE" ? upstreamUnavailableHint(detail.upstream, detail.requestId) : detail.serverCode === "VENDOR_UNAVAILABLE" ? vendorUnavailableHint(detail.vendor, detail.requestId, detail.retryAfterSeconds) : void 0;
-        const classHint = reported.exitCode === CLI_EXIT.UNAVAILABLE ? UNAVAILABLE_HINT : reported.hint;
-        return new _CliError(reported.code, message, {
-          exitCode: reported.exitCode,
-          hint: hint ?? codeHint ?? classHint,
-          statusCode,
-          serverCode: detail.serverCode,
-          issues: detail.issues
-        });
-      }
-      static isCliError(error) {
-        return error instanceof _CliError || typeof error === "object" && error !== null && error.isCliError === true;
-      }
-    };
-    __name(isAccessDeniedError, "isAccessDeniedError");
-    NETWORK_ERRNO = /* @__PURE__ */ new Set([
-      "ECONNREFUSED",
-      "ECONNRESET",
-      "ENOTFOUND",
-      "ETIMEDOUT",
-      "EAI_AGAIN",
-      "EPIPE",
-      "EHOSTUNREACH",
-      "ENETUNREACH",
-      "UND_ERR_CONNECT_TIMEOUT",
-      "UND_ERR_HEADERS_TIMEOUT",
-      "UND_ERR_BODY_TIMEOUT",
-      "UND_ERR_SOCKET"
-    ]);
-    NETWORK_MESSAGE = /fetch failed|socket hang up|network request failed|request timeout|ECONNREFUSED|ENOTFOUND/i;
-    UNAVAILABLE_HINT = "The Lua API could not be reached \u2014 check your network and https://status.heylua.ai, then retry.";
-    __name(upstreamUnavailableHint, "upstreamUnavailableHint");
-    VENDOR_LABELS = {
-      unified: "Unified.to",
-      github: "GitHub",
-      pusher: "Pusher",
-      google: "Google"
-    };
-    __name(vendorUnavailableHint, "vendorUnavailableHint");
-    __name(authHint, "authHint");
-    __name(numericStatus, "numericStatus");
-    __name(classifyCliError, "classifyCliError");
-  }
-});
-
-// src/utils/package-root.ts
-import { readFileSync, existsSync } from "fs";
-import { fileURLToPath, pathToFileURL } from "url";
-import { dirname, join as join2 } from "path";
-function locate() {
-  if (cachedRoot && cachedPkg) return {
-    root: cachedRoot,
-    pkg: cachedPkg
-  };
-  let dir = dirname(fileURLToPath(import.meta.url));
-  while (true) {
-    const candidate = join2(dir, "package.json");
-    if (existsSync(candidate)) {
-      try {
-        const parsed = JSON.parse(readFileSync(candidate, "utf8"));
-        if (parsed?.name === "lua-cli") {
-          cachedRoot = dir;
-          cachedPkg = parsed;
-          return {
-            root: dir,
-            pkg: parsed
-          };
-        }
-      } catch {
-      }
-    }
-    const parent = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  throw new Error("Could not locate lua-cli package root from " + fileURLToPath(import.meta.url));
-}
-function getCliVersion() {
-  try {
-    return locate().pkg.version;
-  } catch {
-    return "0.0.0";
-  }
-}
-var cachedRoot, cachedPkg;
-var init_package_root = __esm({
-  "src/utils/package-root.ts"() {
-    "use strict";
-    cachedRoot = null;
-    cachedPkg = null;
-    __name(locate, "locate");
-    __name(getCliVersion, "getCliVersion");
-  }
-});
-
-// src/utils/lua-fetch.ts
-function luaClientHeaderValue() {
-  return formatLuaClientHeader("cli", getCliVersion());
-}
-function headerRecord(headers) {
-  if (!headers) return {};
-  if (headers instanceof Headers) return Object.fromEntries(headers.entries());
-  if (Array.isArray(headers)) return Object.fromEntries(headers);
-  const record = {};
-  for (const [name, value3] of Object.entries(headers)) {
-    if (typeof value3 === "string") record[name] = value3;
-  }
-  return record;
+function headerRecord(headers) {
+  if (!headers) return {};
+  if (headers instanceof Headers) return Object.fromEntries(headers.entries());
+  if (Array.isArray(headers)) return Object.fromEntries(headers);
+  const record = {};
+  for (const [name, value3] of Object.entries(headers)) {
+    if (typeof value3 === "string") record[name] = value3;
+  }
+  return record;
 }
 function luaFetch(input, init3 = {}) {
   const headers = headerRecord(init3.headers);
@@ -7997,21 +8222,29 @@ var init_lua_fetch = __esm({
 
 // src/services/firebase-session.ts
 import { z as z5 } from "zod";
+function rejectedRefreshReason(message) {
+  const normalised = message.toUpperCase();
+  return REJECTED_REFRESH_REASONS.find((reason) => normalised.includes(reason));
+}
 function requireFirebaseWebApiKey() {
   if (!FIREBASE_WEB_API_KEY) {
     throw new Error("Firebase sign-in is not configured for this CLI build.");
   }
   return FIREBASE_WEB_API_KEY;
 }
-function uidFromFirebaseIdToken(idToken) {
+function claimsOfFirebaseIdToken(idToken) {
   const segments = idToken.split(".");
   if (segments.length !== 3 || !segments[1]) throw new Error(INVALID_FIREBASE_SESSION);
-  let payload;
   try {
-    payload = JSON.parse(Buffer.from(segments[1], "base64url").toString("utf8"));
+    const payload = JSON.parse(Buffer.from(segments[1], "base64url").toString("utf8"));
+    if (typeof payload !== "object" || payload === null) throw new Error(INVALID_FIREBASE_SESSION);
+    return payload;
   } catch {
     throw new Error(INVALID_FIREBASE_SESSION);
   }
+}
+function uidFromFirebaseIdToken(idToken) {
+  const payload = claimsOfFirebaseIdToken(idToken);
   const parsed = firebaseIdTokenPayloadSchema.safeParse(payload);
   if (parsed.success) return parsed.data.sub;
   throw new Error(INVALID_FIREBASE_SESSION);
@@ -8067,6 +8300,23 @@ async function fetchFirebase(url, init3, timeoutMessage) {
     if (timeoutId !== void 0) clearTimeout(timeoutId);
   }
 }
+async function exchangeFirebaseCustomToken(signInToken) {
+  const key = requireFirebaseWebApiKey();
+  const response = await fetchFirebase(`${FIREBASE_CUSTOM_TOKEN_URL}?key=${encodeURIComponent(key)}`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({
+      token: signInToken,
+      returnSecureToken: true
+    })
+  }, "Firebase sign-in timed out after 15 seconds.");
+  if (!response.ok) {
+    throw new Error(`Firebase sign-in failed: ${await parseFirebaseError(response)}`);
+  }
+  return parseFirebaseSession(await response.json());
+}
 async function refreshFirebaseSession(session) {
   const key = requireFirebaseWebApiKey();
   const response = await fetchFirebase(`${FIREBASE_REFRESH_URL}?key=${encodeURIComponent(key)}`, {
@@ -8080,20 +8330,43 @@ async function refreshFirebaseSession(session) {
     }).toString()
   }, "Firebase session refresh timed out after 15 seconds.");
   if (!response.ok) {
-    throw new Error(`Firebase session refresh failed: ${await parseFirebaseError(response)}`);
+    const reason = await parseFirebaseError(response);
+    const rejected = response.status < 500 ? rejectedRefreshReason(reason) : void 0;
+    if (rejected) throw new FirebaseSessionRejectedError(rejected);
+    throw new Error(`Firebase session refresh failed: ${reason}`);
   }
   const refreshed = parseFirebaseSession(await response.json());
   if (refreshed.uid !== session.uid) throw new Error("Firebase session refresh returned a different identity.");
   return refreshed;
 }
-var FIREBASE_REFRESH_URL, FIREBASE_REQUEST_TIMEOUT_MS, INVALID_FIREBASE_SESSION, customTokenResponseSchema, refreshResponseSchema, firebaseIdTokenPayloadSchema;
+var FIREBASE_CUSTOM_TOKEN_URL, FIREBASE_REFRESH_URL, FIREBASE_REQUEST_TIMEOUT_MS, INVALID_FIREBASE_SESSION, REJECTED_REFRESH_REASONS, FirebaseSessionRejectedError, customTokenResponseSchema, refreshResponseSchema, firebaseIdTokenPayloadSchema;
 var init_firebase_session = __esm({
   "src/services/firebase-session.ts"() {
     "use strict";
     init_constants();
+    FIREBASE_CUSTOM_TOKEN_URL = "https://identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken";
     FIREBASE_REFRESH_URL = "https://securetoken.googleapis.com/v1/token";
     FIREBASE_REQUEST_TIMEOUT_MS = 15e3;
     INVALID_FIREBASE_SESSION = "Sign-in failed because Firebase returned an invalid session.";
+    REJECTED_REFRESH_REASONS = [
+      "TOKEN_EXPIRED",
+      "USER_DISABLED",
+      "USER_NOT_FOUND",
+      "INVALID_REFRESH_TOKEN",
+      "INVALID_GRANT_TYPE",
+      "MISSING_REFRESH_TOKEN"
+    ];
+    __name(rejectedRefreshReason, "rejectedRefreshReason");
+    FirebaseSessionRejectedError = class extends Error {
+      static {
+        __name(this, "FirebaseSessionRejectedError");
+      }
+      reason;
+      constructor(reason) {
+        super(`Firebase session refresh rejected: ${reason}`), this.reason = reason;
+        this.name = "FirebaseSessionRejectedError";
+      }
+    };
     customTokenResponseSchema = z5.object({
       idToken: z5.string().min(1),
       refreshToken: z5.string().min(1),
@@ -8110,17 +8383,19 @@ var init_firebase_session = __esm({
       sub: z5.string().min(1)
     });
     __name(requireFirebaseWebApiKey, "requireFirebaseWebApiKey");
+    __name(claimsOfFirebaseIdToken, "claimsOfFirebaseIdToken");
     __name(uidFromFirebaseIdToken, "uidFromFirebaseIdToken");
     __name(parseFirebaseSession, "parseFirebaseSession");
     __name(parseFirebaseError, "parseFirebaseError");
     __name(fetchFirebase, "fetchFirebase");
+    __name(exchangeFirebaseCustomToken, "exchangeFirebaseCustomToken");
     __name(refreshFirebaseSession, "refreshFirebaseSession");
   }
 });
 
 // src/services/firebase-session-store.ts
 import { createHash as createHash3, randomUUID } from "crypto";
-import { mkdir, open, readFile, rename, unlink } from "fs/promises";
+import { mkdir, open, readFile, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { join as join3 } from "path";
 import { z as z6 } from "zod";
 function environmentKey(environment) {
@@ -8131,7 +8406,10 @@ ${environment.firebaseWebApiKey}`).digest("hex").slice(0, 16);
 function isMissing(error) {
   return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
-var storedFirebaseSessionSchema, currentFirebaseSessionEnvironment, wait, FirebaseSessionStore;
+function errorCode(error) {
+  return typeof error === "object" && error !== null && "code" in error ? String(error.code) : void 0;
+}
+var storedFirebaseSessionSchema, currentFirebaseSessionEnvironment, wait, LOCK_STALE_MS, LOCK_TIMEOUT_MS, FirebaseSessionStore;
 var init_firebase_session_store = __esm({
   "src/services/firebase-session-store.ts"() {
     "use strict";
@@ -8154,6 +8432,9 @@ var init_firebase_session_store = __esm({
     __name(environmentKey, "environmentKey");
     __name(isMissing, "isMissing");
     wait = /* @__PURE__ */ __name((milliseconds) => new Promise((resolve3) => setTimeout(resolve3, milliseconds)), "wait");
+    LOCK_STALE_MS = 3e4;
+    LOCK_TIMEOUT_MS = LOCK_STALE_MS + 5e3;
+    __name(errorCode, "errorCode");
     FirebaseSessionStore = class {
       static {
         __name(this, "FirebaseSessionStore");
@@ -8235,27 +8516,39 @@ var init_firebase_session_store = __esm({
           if (!isMissing(error)) throw error;
         }
       }
+      /**
+      * A lock DIRECTORY, not a file: `mkdir` is atomic on every platform Node runs on, where an exclusive `open`
+      * answered EPERM on Windows. The owner id inside lets a process release only its own lock, and a lock older
+      * than any operation could take is treated as left behind by a crashed process and removed.
+      */
       async withLock(operation) {
         await mkdir(this.directory, {
           recursive: true,
           mode: 448
         });
         const lockPath = `${this.path()}.lock`;
+        const ownerPath = join3(lockPath, "owner");
         const lockOwner = randomUUID();
-        const deadline = Date.now() + 2e4;
+        const deadline = Date.now() + LOCK_TIMEOUT_MS;
         while (true) {
           try {
-            const handle = await open(lockPath, "wx", 384);
-            try {
-              await handle.writeFile(lockOwner, "utf8");
-              await handle.sync();
-            } finally {
-              await handle.close();
-            }
-            break;
+            await mkdir(lockPath, {
+              mode: 448
+            });
+            await writeFile(ownerPath, lockOwner, {
+              encoding: "utf8",
+              mode: 384
+            });
+            if (await readFile(ownerPath, "utf8") === lockOwner) break;
           } catch (error) {
-            const code = typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
-            if (code !== "EEXIST") throw error;
+            if (errorCode(error) !== "EEXIST") throw error;
+            if (await this.isStaleLock(lockPath)) {
+              await rm(lockPath, {
+                recursive: true,
+                force: true
+              });
+              continue;
+            }
             if (Date.now() >= deadline) {
               throw new Error("Timed out waiting for another Lua CLI process to finish updating the session.");
             }
@@ -8266,115 +8559,480 @@ var init_firebase_session_store = __esm({
           return await operation();
         } finally {
           try {
-            if (await readFile(lockPath, "utf8") === lockOwner) await unlink(lockPath);
+            if (await readFile(ownerPath, "utf8") === lockOwner) await rm(lockPath, {
+              recursive: true,
+              force: true
+            });
           } catch (error) {
             if (!isMissing(error)) throw error;
           }
         }
       }
+      async isStaleLock(lockPath) {
+        try {
+          return Date.now() - (await stat(lockPath)).mtimeMs > LOCK_STALE_MS;
+        } catch (error) {
+          return isMissing(error);
+        }
+      }
+    };
+  }
+});
+
+// src/services/request-credential.ts
+import "dotenv/config";
+import { readFileSync as readFileSync2, unlinkSync } from "fs";
+function sessionSignedOutError() {
+  return new AuthenticationError("Your Lua CLI session was signed out.\n\n  Signing out of the Lua dashboard, desktop or mobile app also ends CLI sessions.\n  Run `lua auth configure` to sign in again.", "invalid_credentials", void 0, true);
+}
+function loadStoredApiKey() {
+  try {
+    return readFileSync2(CREDENTIALS_FILE, "utf8").trim() || null;
+  } catch {
+    return null;
+  }
+}
+function isRequestCredential(value3) {
+  return typeof value3 !== "string";
+}
+async function bearerFor(credential) {
+  return isRequestCredential(credential) ? credential.bearer() : credential;
+}
+async function registerSessionIfNeeded(live, authUrl) {
+  try {
+    if (typeof claimsOfFirebaseIdToken(live.idToken)[LUA_SESSION_ID_CLAIM] === "string") return void 0;
+    const response = await luaFetch(`${authUrl}/auth/sessions/register`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${live.idToken}`
+      }
+    });
+    if (!response.ok) return void 0;
+    const registered = await response.json().catch(() => null);
+    if (typeof registered?.token !== "string") return void 0;
+    const exchanged = await exchangeFirebaseCustomToken(registered.token);
+    return exchanged.uid === live.uid ? exchanged : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function resolveRequestCredential() {
+  if (process.env.LUA_API_KEY) return new StaticRequestCredential(process.env.LUA_API_KEY, "environment");
+  const store = new FirebaseSessionStore();
+  const session = await store.read();
+  if (session) return new FirebaseRequestCredential(store, session);
+  const storedApiKey = loadStoredApiKey();
+  if (storedApiKey) return new StaticRequestCredential(storedApiKey, "stored");
+  throw new AuthenticationError("No Lua CLI authentication found. Run `lua auth configure` or set LUA_API_KEY.", "invalid_credentials", void 0, true);
+}
+async function clearStoredFirebaseSession() {
+  const store = new FirebaseSessionStore();
+  const session = await store.read();
+  return session ? store.clearIfGeneration(session.generation) : false;
+}
+var StaticRequestCredential, FirebaseRequestCredential;
+var init_request_credential = __esm({
+  "src/services/request-credential.ts"() {
+    "use strict";
+    init_dist();
+    init_constants();
+    init_auth_error();
+    init_lua_fetch();
+    init_firebase_session();
+    init_firebase_session_store();
+    __name(sessionSignedOutError, "sessionSignedOutError");
+    __name(loadStoredApiKey, "loadStoredApiKey");
+    __name(isRequestCredential, "isRequestCredential");
+    __name(bearerFor, "bearerFor");
+    StaticRequestCredential = class StaticRequestCredential2 {
+      static {
+        __name(this, "StaticRequestCredential");
+      }
+      apiKey;
+      descriptor;
+      constructor(apiKey, source) {
+        this.apiKey = apiKey;
+        this.descriptor = {
+          kind: "api-key",
+          source
+        };
+      }
+      async bearer() {
+        return this.apiKey;
+      }
+    };
+    FirebaseRequestCredential = class FirebaseRequestCredential2 {
+      static {
+        __name(this, "FirebaseRequestCredential");
+      }
+      store;
+      descriptor;
+      liveSession;
+      refresh;
+      constructor(store, stored) {
+        this.store = store;
+        this.descriptor = {
+          kind: "first-party-session",
+          source: "stored",
+          uid: stored.firebaseUid
+        };
+      }
+      async bearer() {
+        if (this.liveSession && this.liveSession.expiresAt - Date.now() > 6e4) return this.liveSession.idToken;
+        if (!this.refresh) this.refresh = this.refreshBearer().finally(() => this.refresh = void 0);
+        return this.refresh;
+      }
+      async refreshBearer() {
+        let live;
+        let rejected = false;
+        await this.store.update(async (stored) => {
+          if (!stored) throw sessionSignedOutError();
+          try {
+            live = await refreshFirebaseSession({
+              idToken: "",
+              refreshToken: stored.refreshToken,
+              expiresAt: 0,
+              uid: stored.firebaseUid
+            });
+          } catch (error) {
+            if (!(error instanceof FirebaseSessionRejectedError)) throw error;
+            rejected = true;
+            return null;
+          }
+          live = await registerSessionIfNeeded(live, stored.authUrl) ?? live;
+          return {
+            ...stored,
+            refreshToken: live.refreshToken,
+            firebaseUid: live.uid
+          };
+        });
+        if (rejected) throw sessionSignedOutError();
+        if (!live) throw new Error("Firebase session refresh did not return a session.");
+        this.liveSession = live;
+        return live.idToken;
+      }
+    };
+    __name(registerSessionIfNeeded, "registerSessionIfNeeded");
+    __name(resolveRequestCredential, "resolveRequestCredential");
+    __name(clearStoredFirebaseSession, "clearStoredFirebaseSession");
+  }
+});
+
+// src/errors/cli.error.ts
+function apiErrorDetail(error) {
+  return {
+    serverCode: error?.code,
+    issues: error?.issues,
+    upstream: error?.upstream,
+    requestId: error?.requestId,
+    vendor: error?.vendor,
+    retryAfterSeconds: error?.retryAfterSeconds,
+    reason: error?.reason,
+    providerStatus: error?.providerStatus,
+    keyOwner: error?.keyOwner
+  };
+}
+function isAccessDeniedError(error) {
+  if (CliError.isCliError(error)) return error.statusCode === 403;
+  return error instanceof Error && error.message.startsWith("Access denied (403)");
+}
+function upstreamUnavailableHint(upstream, requestId) {
+  const service = typeof upstream === "string" && upstream ? `its ${upstream} service` : "a service behind it";
+  const ref = typeof requestId === "string" && requestId ? ` If it persists, quote request ${requestId}.` : "";
+  return `The Lua API is up, but ${service} is temporarily unavailable (503 UPSTREAM_UNAVAILABLE) \u2014 retry in a moment.${ref}`;
+}
+function vendorUnavailableHint(vendor, requestId, retryAfterSeconds) {
+  const name = typeof vendor === "string" && vendor ? VENDOR_LABELS[vendor] ?? vendor : "a vendor it depends on";
+  const ref = typeof requestId === "string" && requestId ? ` If it persists, quote request ${requestId}.` : "";
+  const retry = typeof retryAfterSeconds === "number" ? retryAfterSeconds > VENDOR_RETRY_SOON_SECONDS ? `retry in about ${Math.ceil(retryAfterSeconds)} s` : "retry in a moment" : "the request may have applied at the vendor \u2014 check before retrying";
+  return `The Lua API is up, but ${name} is temporarily unavailable (503 VENDOR_UNAVAILABLE) \u2014 ${retry}.${ref}`;
+}
+function providerRejectionReasonOf(reason) {
+  return typeof reason === "string" && PROVIDER_REJECTION_REASONS.has(reason) ? reason : void 0;
+}
+function providerKeyOwnerOf(keyOwner) {
+  return keyOwner === "byok" || keyOwner === "platform" ? keyOwner : void 0;
+}
+function providerStatusOf(status) {
+  return typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599 ? status : void 0;
+}
+function providerRejectedHint(reason, providerStatus, keyOwner) {
+  const owner = providerKeyOwnerOf(keyOwner);
+  const status = providerStatusOf(providerStatus);
+  const at = status !== void 0 ? ` (the provider answered HTTP ${status})` : "";
+  switch (providerRejectionReasonOf(reason)) {
+    case "invalid_api_key":
+      if (owner === "platform") return `The provider refused Lua's platform key${at} \u2014 ${PROVIDER_REJECTED_LUA_SIDE}.`;
+      return `The provider refused ${owner === "byok" ? "your organization's own API key" : "the API key behind this agent"}${at} \u2014 check the provider key in the agent's model settings at ${MODEL_SETTINGS_URL}. ${PROVIDER_REJECTED_NO_RETRY}`;
+    case "forbidden":
+      if (owner === "platform") return `Lua's platform key is not permitted to use this model${at} \u2014 ${PROVIDER_REJECTED_LUA_SIDE}.`;
+      return `${owner === "byok" ? "Your organization's provider key" : "The provider key behind this agent"} is not permitted to use this model${at} \u2014 check the key's access with the provider, or change the agent's model. ${PROVIDER_REJECTED_NO_RETRY}`;
+    case "model_not_found":
+      if (owner === "platform") return `The provider does not know the model id Lua configured${at} \u2014 ${PROVIDER_REJECTED_LUA_SIDE}.`;
+      return `The provider does not know this model id${at} \u2014 change the agent's model in its settings at ${MODEL_SETTINGS_URL} to one the provider serves. ${PROVIDER_REJECTED_NO_RETRY}`;
+    case "quota_exhausted":
+      if (owner === "platform") return `Lua's quota or billing allowance with this provider is exhausted${at} \u2014 ${PROVIDER_REJECTED_LUA_SIDE}.`;
+      return `The provider's quota or billing allowance for ${owner === "byok" ? "your organization's key" : "this key"} is exhausted${at} \u2014 top up or raise the limit with the provider. ${PROVIDER_REJECTED_NO_RETRY}`;
+    case "content_refused":
+      return `The provider's content policy declined this request as written${at} \u2014 adjust the request and send it again.`;
+    case "bad_request":
+      return `The provider could not accept the request as sent${at} \u2014 adjust the request (shorter input, fewer or smaller attachments, a supported format) and send it again.`;
+    default:
+      return `The model provider behind this agent refused the request${at} \u2014 ${owner === "platform" ? PROVIDER_REJECTED_LUA_SIDE : owner === "byok" ? `check the agent's model settings and the provider key at ${MODEL_SETTINGS_URL}` : `check the agent's model settings, or contact Lua support if the agent uses Lua's platform key`}. ${PROVIDER_REJECTED_NO_RETRY}`;
+  }
+}
+function authHint(error) {
+  if (error.suppressDefaultRemediation) return void 0;
+  if (error.reason === "no_agent_access") {
+    return [
+      "Your API key is valid, but it does not have access to the agentId in lua.skill.yaml \u2014 the agent belongs",
+      "to another account or organization, was deleted or transferred, or the yaml was copied from another project.",
+      "Check the configured agent and switch if needed:",
+      "  lua agents          (list agents you have access to)",
+      "  lua init            (re-select the agent for this project)"
+    ].join("\n");
+  }
+  return "Re-authenticate or check your API key: lua auth configure \xB7 https://admin.heylua.ai";
+}
+function numericStatus(error) {
+  const candidate = error.statusCode ?? error.status;
+  return typeof candidate === "number" && Number.isFinite(candidate) ? candidate : void 0;
+}
+function classifyCliError(error) {
+  if (CliError.isCliError(error)) {
+    return {
+      code: error.code,
+      exitCode: error.exitCode,
+      message: error.message,
+      hint: error.hint,
+      statusCode: error.statusCode,
+      serverCode: error.serverCode,
+      issues: error.issues
+    };
+  }
+  if (AuthenticationError.isAuthenticationError(error)) {
+    return {
+      code: "auth",
+      exitCode: CLI_EXIT.AUTH,
+      message: error.message,
+      hint: authHint(error)
     };
   }
-});
-
-// src/services/request-credential.ts
-import "dotenv/config";
-import { readFileSync as readFileSync2, unlinkSync } from "fs";
-function loadStoredApiKey() {
-  try {
-    return readFileSync2(CREDENTIALS_FILE, "utf8").trim() || null;
-  } catch {
-    return null;
+  const e = typeof error === "object" && error !== null ? error : {};
+  const message = typeof e.message === "string" && e.message.length > 0 ? e.message : error instanceof Error ? error.name : String(error ?? "Unknown error");
+  if (e.name === "WorkflowLocalUsageError" || typeof e.code === "string" && e.code.startsWith("commander.")) {
+    return {
+      code: "usage",
+      exitCode: CLI_EXIT.USAGE,
+      message
+    };
   }
+  const status = numericStatus(e);
+  if (status !== void 0) {
+    const statusCode = status;
+    if (status === 401) return {
+      code: "auth",
+      exitCode: CLI_EXIT.AUTH,
+      message,
+      statusCode
+    };
+    if (status === 403) return {
+      code: "forbidden",
+      exitCode: CLI_EXIT.FORBIDDEN,
+      message,
+      statusCode
+    };
+    if (status === 404) return {
+      code: "not_found",
+      exitCode: CLI_EXIT.NOT_FOUND,
+      message,
+      statusCode
+    };
+    if (status >= 400 && status < 500) return {
+      code: `http_${status}`,
+      exitCode: CLI_EXIT.FORBIDDEN,
+      message,
+      statusCode
+    };
+    if (status >= 500 || status === 0) return {
+      code: "unavailable",
+      exitCode: CLI_EXIT.UNAVAILABLE,
+      message,
+      statusCode
+    };
+  }
+  const causeCode = e.cause?.code;
+  if (typeof e.code === "string" && NETWORK_ERRNO.has(e.code) || typeof causeCode === "string" && NETWORK_ERRNO.has(causeCode) || e.name === "AbortError" || e.name === "TimeoutError" || NETWORK_MESSAGE.test(message)) {
+    return {
+      code: "unavailable",
+      exitCode: CLI_EXIT.UNAVAILABLE,
+      message,
+      hint: UNAVAILABLE_HINT
+    };
+  }
+  return {
+    code: "error",
+    exitCode: CLI_EXIT.ERROR,
+    message
+  };
 }
-function isRequestCredential(value3) {
-  return typeof value3 !== "string";
-}
-async function bearerFor(credential) {
-  return isRequestCredential(credential) ? credential.bearer() : credential;
-}
-async function resolveRequestCredential() {
-  if (process.env.LUA_API_KEY) return new StaticRequestCredential(process.env.LUA_API_KEY, "environment");
-  const store = new FirebaseSessionStore();
-  const session = await store.read();
-  if (session) return new FirebaseRequestCredential(store, session);
-  const storedApiKey = loadStoredApiKey();
-  if (storedApiKey) return new StaticRequestCredential(storedApiKey, "stored");
-  throw new AuthenticationError("No Lua CLI authentication found. Run `lua auth configure` or set LUA_API_KEY.", "invalid_credentials", void 0, true);
-}
-var StaticRequestCredential, FirebaseRequestCredential;
-var init_request_credential = __esm({
-  "src/services/request-credential.ts"() {
+var CLI_EXIT, CliError, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT, VENDOR_RETRY_SOON_SECONDS, VENDOR_LABELS, PROVIDER_REJECTED_SERVER_CODE, PROVIDER_REJECTED_HTTP_STATUS, PROVIDER_REJECTION_REASONS, PROVIDER_REJECTED_NO_RETRY, PROVIDER_REJECTED_LUA_SIDE, MODEL_SETTINGS_URL;
+var init_cli_error = __esm({
+  "src/errors/cli.error.ts"() {
     "use strict";
-    init_constants();
     init_auth_error();
-    init_lua_fetch();
-    init_firebase_session();
-    init_firebase_session_store();
-    __name(loadStoredApiKey, "loadStoredApiKey");
-    __name(isRequestCredential, "isRequestCredential");
-    __name(bearerFor, "bearerFor");
-    StaticRequestCredential = class StaticRequestCredential2 {
+    CLI_EXIT = {
+      OK: 0,
+      ERROR: 1,
+      USAGE: 2,
+      NOT_FOUND: 3,
+      AUTH: 9,
+      FORBIDDEN: 10,
+      UNAVAILABLE: 11,
+      PROVIDER_REJECTED: 12
+    };
+    __name(apiErrorDetail, "apiErrorDetail");
+    CliError = class _CliError extends Error {
       static {
-        __name(this, "StaticRequestCredential");
+        __name(this, "CliError");
       }
-      apiKey;
-      descriptor;
-      constructor(apiKey, source) {
-        this.apiKey = apiKey;
-        this.descriptor = {
-          kind: "api-key",
-          source
-        };
+      isCliError = true;
+      code;
+      exitCode;
+      hint;
+      statusCode;
+      serverCode;
+      issues;
+      constructor(code, message, options = {}) {
+        super(message);
+        this.name = "CliError";
+        this.code = code;
+        this.exitCode = options.exitCode ?? CLI_EXIT.ERROR;
+        this.hint = options.hint;
+        this.statusCode = options.statusCode;
+        this.serverCode = options.serverCode;
+        this.issues = options.issues?.length ? options.issues : void 0;
+        if (Error.captureStackTrace) Error.captureStackTrace(this, _CliError);
       }
-      async bearer() {
-        return this.apiKey;
+      /** Bad arguments, an unknown action, no project — exit 2. */
+      static usage(message, hint) {
+        return new _CliError("usage", message, {
+          exitCode: CLI_EXIT.USAGE,
+          hint
+        });
       }
-    };
-    FirebaseRequestCredential = class FirebaseRequestCredential2 {
-      static {
-        __name(this, "FirebaseRequestCredential");
+      /** The named thing does not exist — exit 3. */
+      static notFound(message, hint) {
+        return new _CliError("not_found", message, {
+          exitCode: CLI_EXIT.NOT_FOUND,
+          hint,
+          statusCode: 404
+        });
       }
-      store;
-      descriptor;
-      liveSession;
-      refresh;
-      constructor(store, stored) {
-        this.store = store;
-        this.descriptor = {
-          kind: "first-party-session",
-          source: "stored",
-          uid: stored.firebaseUid
-        };
+      /** The credential may not do this — exit 10. */
+      static forbidden(message, hint) {
+        return new _CliError("forbidden", message, {
+          exitCode: CLI_EXIT.FORBIDDEN,
+          hint,
+          statusCode: 403
+        });
       }
-      async bearer() {
-        if (this.liveSession && this.liveSession.expiresAt - Date.now() > 6e4) return this.liveSession.idToken;
-        if (!this.refresh) this.refresh = this.refreshBearer().finally(() => this.refresh = void 0);
-        return this.refresh;
+      /**
+      * The model provider behind the agent refused the request (LUA-820) — a 424 `PROVIDER_REJECTED` body, or a chat
+      * stream `error` chunk carrying that code — `provider_rejected`, exit 12, the hint picked by `reason` / `keyOwner`
+      * (`providerRejectedHint`). The message is the server's typed line ("Your model provider rejected the request
+      * (401 invalid_api_key): …"). Never a re-login or a network hint: the Lua session and the network are fine — the
+      * provider ANSWERED and said no, and the same request fails identically on a retry.
+      */
+      static providerRejected(message, detail = {}, options = {}) {
+        return new _CliError("provider_rejected", message, {
+          exitCode: CLI_EXIT.PROVIDER_REJECTED,
+          hint: options.hint ?? providerRejectedHint(detail.reason, detail.providerStatus, detail.keyOwner),
+          statusCode: options.statusCode ?? PROVIDER_REJECTED_HTTP_STATUS,
+          serverCode: PROVIDER_REJECTED_SERVER_CODE,
+          issues: detail.issues
+        });
       }
-      async refreshBearer() {
-        let live;
-        await this.store.update(async (stored) => {
-          if (!stored) {
-            throw new AuthenticationError("Your Lua CLI session has expired. Run `lua auth configure`.", "invalid_credentials");
-          }
-          live = await refreshFirebaseSession({
-            idToken: "",
-            refreshToken: stored.refreshToken,
-            expiresAt: 0,
-            uid: stored.firebaseUid
+      /**
+      * An API refusal the site already holds the status of (LUA-766) — classified by the same table the top-level
+      * classifier applies to an untyped error: 401 auth · 403 forbidden · 404 not_found · other 4xx `http_<status>`
+      * (10) · 5xx / 0 unavailable (11, with the network hint unless the site gives its own — or the body's code
+      * picks one: a 503 UPSTREAM_UNAVAILABLE names the Lua service behind the API, LUA-810) · no status `error` (1).
+      * The body's code can also pick the CLASS: a 424 `PROVIDER_REJECTED` is `provider_rejected` (12) with the
+      * per-reason hint (LUA-820) — a 424 WITHOUT the code stays the opaque `http_424`. A command that reads
+      * `response.error.statusCode` throws through here, so `lua logs` on a 503 exits 11 like every other verb instead
+      * of printing the message itself and then throwing an exit-1 `Error`.
+      */
+      static fromStatus(statusCode, message, hint, detail = {}) {
+        if (detail.serverCode === PROVIDER_REJECTED_SERVER_CODE) {
+          return _CliError.providerRejected(message, detail, {
+            hint,
+            statusCode
           });
-          return {
-            ...stored,
-            refreshToken: live.refreshToken,
-            firebaseUid: live.uid
-          };
+        }
+        const reported = classifyCliError(Object.assign(new Error(message), {
+          statusCode
+        }));
+        const codeHint = detail.serverCode === "UPSTREAM_UNAVAILABLE" ? upstreamUnavailableHint(detail.upstream, detail.requestId) : detail.serverCode === "VENDOR_UNAVAILABLE" ? vendorUnavailableHint(detail.vendor, detail.requestId, detail.retryAfterSeconds) : void 0;
+        const classHint = reported.exitCode === CLI_EXIT.UNAVAILABLE ? UNAVAILABLE_HINT : reported.hint;
+        return new _CliError(reported.code, message, {
+          exitCode: reported.exitCode,
+          hint: hint ?? codeHint ?? classHint,
+          statusCode,
+          serverCode: detail.serverCode,
+          issues: detail.issues
         });
-        if (!live) throw new Error("Firebase session refresh did not return a session.");
-        this.liveSession = live;
-        return live.idToken;
+      }
+      static isCliError(error) {
+        return error instanceof _CliError || typeof error === "object" && error !== null && error.isCliError === true;
       }
     };
-    __name(resolveRequestCredential, "resolveRequestCredential");
+    __name(isAccessDeniedError, "isAccessDeniedError");
+    NETWORK_ERRNO = /* @__PURE__ */ new Set([
+      "ECONNREFUSED",
+      "ECONNRESET",
+      "ENOTFOUND",
+      "ETIMEDOUT",
+      "EAI_AGAIN",
+      "EPIPE",
+      "EHOSTUNREACH",
+      "ENETUNREACH",
+      "UND_ERR_CONNECT_TIMEOUT",
+      "UND_ERR_HEADERS_TIMEOUT",
+      "UND_ERR_BODY_TIMEOUT",
+      "UND_ERR_SOCKET"
+    ]);
+    NETWORK_MESSAGE = /fetch failed|socket hang up|network request failed|request timeout|ECONNREFUSED|ENOTFOUND/i;
+    UNAVAILABLE_HINT = "The Lua API could not be reached \u2014 check your network and https://status.heylua.ai, then retry.";
+    __name(upstreamUnavailableHint, "upstreamUnavailableHint");
+    VENDOR_RETRY_SOON_SECONDS = 5;
+    VENDOR_LABELS = {
+      unified: "Unified.to",
+      github: "GitHub",
+      pusher: "Pusher",
+      google: "Google"
+    };
+    __name(vendorUnavailableHint, "vendorUnavailableHint");
+    PROVIDER_REJECTED_SERVER_CODE = "PROVIDER_REJECTED";
+    PROVIDER_REJECTED_HTTP_STATUS = 424;
+    PROVIDER_REJECTION_REASONS = /* @__PURE__ */ new Set([
+      "invalid_api_key",
+      "forbidden",
+      "model_not_found",
+      "content_refused",
+      "quota_exhausted",
+      "bad_request"
+    ]);
+    __name(providerRejectionReasonOf, "providerRejectionReasonOf");
+    __name(providerKeyOwnerOf, "providerKeyOwnerOf");
+    __name(providerStatusOf, "providerStatusOf");
+    PROVIDER_REJECTED_NO_RETRY = "Retrying the same request will fail identically.";
+    PROVIDER_REJECTED_LUA_SIDE = "a Lua-side model configuration problem, not your request or settings \u2014 contact Lua support if it persists";
+    MODEL_SETTINGS_URL = "https://admin.heylua.ai";
+    __name(providerRejectedHint, "providerRejectedHint");
+    __name(authHint, "authHint");
+    __name(numericStatus, "numericStatus");
+    __name(classifyCliError, "classifyCliError");
   }
 });
 
@@ -8388,6 +9046,10 @@ async function classifyErrorResponse(response) {
     errorData = {};
   }
   if (response.status === 401) {
+    if (serverCodeOf(errorData.code, errorData.error) === SESSION_REVOKED_CODE) {
+      await clearStoredFirebaseSession().catch(() => false);
+      throw sessionSignedOutError();
+    }
     const serverMessage = typeof errorData.message === "string" ? errorData.message : void 0;
     if (serverMessage && /not an admin/i.test(serverMessage)) {
       throw new AuthenticationError(`Access denied for this agent: ${serverMessage}`, "no_agent_access", serverMessage);
@@ -8513,6 +9175,7 @@ var init_http_client = __esm({
   "src/api/http.client.ts"() {
     "use strict";
     init_dist();
+    init_dist();
     init_auth_error();
     init_cli_error();
     init_lua_fetch();
@@ -8837,23 +9500,25 @@ var init_http_client = __esm({
   }
 });
 
-// src/api/auth.api.service.ts
-var init_auth_api_service = __esm({
-  "src/api/auth.api.service.ts"() {
+// src/api/cli-credentials.api.service.ts
+var init_cli_credentials_api_service = __esm({
+  "src/api/cli-credentials.api.service.ts"() {
     "use strict";
     init_http_client();
+    init_dist();
   }
 });
 
-// src/services/auth.ts
-import "dotenv/config";
-var init_auth = __esm({
-  "src/services/auth.ts"() {
+// src/services/credential-operational-context.ts
+var init_credential_operational_context = __esm({
+  "src/services/credential-operational-context.ts"() {
     "use strict";
-    init_auth_api_service();
+    init_dist();
+    init_cli_credentials_api_service();
     init_constants();
     init_auth_error();
     init_cli_error();
+    init_request_credential();
   }
 });
 
@@ -9152,7 +9817,7 @@ function walkWorkspace(rootDir, opts = {}) {
   const refs = [];
   const contentByHash = /* @__PURE__ */ new Map();
   let totalSize = 0;
-  const visit = /* @__PURE__ */ __name4((relPrefix) => {
+  const visit = /* @__PURE__ */ __name5((relPrefix) => {
     const absDir = relPrefix ? join4(rootDir, relPrefix) : rootDir;
     let entries;
     try {
@@ -9446,21 +10111,21 @@ function walk2(root, prefix, out) {
     }
   }
 }
-var __defProp4, __name4, FILE_HASH_LENGTH, SKIP_DIRECTORIES, ARCHIVE_ONLY_SKIP_DIRECTORIES, DEFAULT_MAX_FILE_BYTES, KIND_BY_EXT, CHECK_BLOBS_MAX_HASHES, BackupHttpError, BackupHttpClient, DEFAULT_CONCURRENCY, CREDENTIAL_PATHS, WINDOWS_ABSOLUTE_PATH, ARCHIVE_SCHEMA_VERSION;
+var __defProp5, __name5, FILE_HASH_LENGTH, SKIP_DIRECTORIES, ARCHIVE_ONLY_SKIP_DIRECTORIES, DEFAULT_MAX_FILE_BYTES, KIND_BY_EXT, CHECK_BLOBS_MAX_HASHES, BackupHttpError, BackupHttpClient, DEFAULT_CONCURRENCY, CREDENTIAL_PATHS, WINDOWS_ABSOLUTE_PATH, ARCHIVE_SCHEMA_VERSION;
 var init_dist3 = __esm({
   "../shared-source-sync/dist/index.mjs"() {
     "use strict";
-    __defProp4 = Object.defineProperty;
-    __name4 = /* @__PURE__ */ __name((target, value3) => __defProp4(target, "name", { value: value3, configurable: true }), "__name");
+    __defProp5 = Object.defineProperty;
+    __name5 = /* @__PURE__ */ __name((target, value3) => __defProp5(target, "name", { value: value3, configurable: true }), "__name");
     FILE_HASH_LENGTH = 16;
     __name(hashContentTruncated, "hashContentTruncated");
-    __name4(hashContentTruncated, "hashContentTruncated");
+    __name5(hashContentTruncated, "hashContentTruncated");
     __name(sha256Hex, "sha256Hex");
-    __name4(sha256Hex, "sha256Hex");
+    __name5(sha256Hex, "sha256Hex");
     __name(matchesFileHash, "matchesFileHash");
-    __name4(matchesFileHash, "matchesFileHash");
+    __name5(matchesFileHash, "matchesFileHash");
     __name(combineFileHashes, "combineFileHashes");
-    __name4(combineFileHashes, "combineFileHashes");
+    __name5(combineFileHashes, "combineFileHashes");
     SKIP_DIRECTORIES = /* @__PURE__ */ new Set([
       "node_modules",
       "dist",
@@ -9477,9 +10142,9 @@ var init_dist3 = __esm({
     ]);
     DEFAULT_MAX_FILE_BYTES = 256 * 1024;
     __name(shouldSkipDirectory, "shouldSkipDirectory");
-    __name4(shouldSkipDirectory, "shouldSkipDirectory");
+    __name5(shouldSkipDirectory, "shouldSkipDirectory");
     __name(shouldSkipFile, "shouldSkipFile");
-    __name4(shouldSkipFile, "shouldSkipFile");
+    __name5(shouldSkipFile, "shouldSkipFile");
     KIND_BY_EXT = {
       ".ts": "source",
       ".tsx": "source",
@@ -9491,16 +10156,16 @@ var init_dist3 = __esm({
       ".toml": "config"
     };
     __name(classifyFile, "classifyFile");
-    __name4(classifyFile, "classifyFile");
+    __name5(classifyFile, "classifyFile");
     __name(walkWorkspace, "walkWorkspace");
-    __name4(walkWorkspace, "walkWorkspace");
+    __name5(walkWorkspace, "walkWorkspace");
     CHECK_BLOBS_MAX_HASHES = 500;
     BackupHttpError = class extends Error {
       static {
         __name(this, "BackupHttpError");
       }
       static {
-        __name4(this, "BackupHttpError");
+        __name5(this, "BackupHttpError");
       }
       status;
       endpoint;
@@ -9515,7 +10180,7 @@ var init_dist3 = __esm({
         __name(this, "BackupHttpClient");
       }
       static {
-        __name4(this, "BackupHttpClient");
+        __name5(this, "BackupHttpClient");
       }
       options;
       fetchFn;
@@ -9620,17 +10285,17 @@ var init_dist3 = __esm({
     };
     DEFAULT_CONCURRENCY = 10;
     __name(uploadBlobs, "uploadBlobs");
-    __name4(uploadBlobs, "uploadBlobs");
+    __name5(uploadBlobs, "uploadBlobs");
     __name(decodeBlob, "decodeBlob");
-    __name4(decodeBlob, "decodeBlob");
+    __name5(decodeBlob, "decodeBlob");
     __name(verifyDownloaded, "verifyDownloaded");
-    __name4(verifyDownloaded, "verifyDownloaded");
+    __name5(verifyDownloaded, "verifyDownloaded");
     __name(downloadBlobs, "downloadBlobs");
-    __name4(downloadBlobs, "downloadBlobs");
+    __name5(downloadBlobs, "downloadBlobs");
     __name(resolveBackupFileTarget, "resolveBackupFileTarget");
-    __name4(resolveBackupFileTarget, "resolveBackupFileTarget");
+    __name5(resolveBackupFileTarget, "resolveBackupFileTarget");
     __name(restoreFromBlobs, "restoreFromBlobs");
-    __name4(restoreFromBlobs, "restoreFromBlobs");
+    __name5(restoreFromBlobs, "restoreFromBlobs");
     CREDENTIAL_PATHS = /* @__PURE__ */ new Set([
       ".env",
       ".lua/config.json",
@@ -9638,22 +10303,22 @@ var init_dist3 = __esm({
     ]);
     WINDOWS_ABSOLUTE_PATH = /^[a-z]:\//i;
     __name(normalizeWorkspaceRelativePath, "normalizeWorkspaceRelativePath");
-    __name4(normalizeWorkspaceRelativePath, "normalizeWorkspaceRelativePath");
+    __name5(normalizeWorkspaceRelativePath, "normalizeWorkspaceRelativePath");
     __name(isCredentialPersistencePath, "isCredentialPersistencePath");
-    __name4(isCredentialPersistencePath, "isCredentialPersistencePath");
+    __name5(isCredentialPersistencePath, "isCredentialPersistencePath");
     __name(pushAgentBackup, "pushAgentBackup");
-    __name4(pushAgentBackup, "pushAgentBackup");
+    __name5(pushAgentBackup, "pushAgentBackup");
     __name(pullAgentBackup, "pullAgentBackup");
-    __name4(pullAgentBackup, "pullAgentBackup");
+    __name5(pullAgentBackup, "pullAgentBackup");
     ARCHIVE_SCHEMA_VERSION = 1;
     __name(encodeWorkspaceArchive, "encodeWorkspaceArchive");
-    __name4(encodeWorkspaceArchive, "encodeWorkspaceArchive");
+    __name5(encodeWorkspaceArchive, "encodeWorkspaceArchive");
     __name(decodeWorkspaceArchive, "decodeWorkspaceArchive");
-    __name4(decodeWorkspaceArchive, "decodeWorkspaceArchive");
+    __name5(decodeWorkspaceArchive, "decodeWorkspaceArchive");
     __name(writeArchiveToWorkspace, "writeArchiveToWorkspace");
-    __name4(writeArchiveToWorkspace, "writeArchiveToWorkspace");
+    __name5(writeArchiveToWorkspace, "writeArchiveToWorkspace");
     __name(walk2, "walk");
-    __name4(walk2, "walk");
+    __name5(walk2, "walk");
   }
 });
 
@@ -10538,8 +11203,8 @@ async function requireAuth() {
 var init_command_utils = __esm({
   "src/utils/command-utils.ts"() {
     "use strict";
-    init_auth();
     init_request_credential();
+    init_credential_operational_context();
     init_files();
     init_cli();
     init_cli_error();
@@ -13137,11 +13802,48 @@ var init_ai_api_service = __esm({
 });
 
 // src/api/integrations.api.service.ts
-var IntegrationsApiService;
+function integrationPassthroughErrorFields(error) {
+  const fields = {};
+  if (!error) return fields;
+  const strings = [
+    "code",
+    "legacyCode",
+    "legacyMessage",
+    "vendor",
+    "requestId"
+  ];
+  for (const key of strings) {
+    const value3 = error[key];
+    if (typeof value3 === "string" && value3.length > 0) fields[key] = value3;
+  }
+  const numbers = [
+    "statusCode",
+    "retryAfterSeconds",
+    "vendorStatus"
+  ];
+  for (const key of numbers) {
+    const value3 = error[key];
+    if (typeof value3 === "number" && Number.isFinite(value3)) fields[key] = value3;
+  }
+  if (fields.statusCode !== void 0) fields.status = fields.statusCode;
+  return fields;
+}
+var IntegrationPassthroughError, IntegrationsApiService;
 var init_integrations_api_service = __esm({
   "src/api/integrations.api.service.ts"() {
     "use strict";
     init_http_client();
+    IntegrationPassthroughError = class extends Error {
+      static {
+        __name(this, "IntegrationPassthroughError");
+      }
+      constructor(message, fields = {}) {
+        super(message);
+        this.name = "IntegrationPassthroughError";
+        Object.assign(this, fields);
+      }
+    };
+    __name(integrationPassthroughErrorFields, "integrationPassthroughErrorFields");
     IntegrationsApiService = class extends HttpClient {
       static {
         __name(this, "IntegrationsApiService");
@@ -13157,12 +13859,14 @@ var init_integrations_api_service = __esm({
       * Sandbox-facing wrapper: returns the raw provider envelope
       * `{ status, headers, data }` (provider error statuses relayed faithfully in
       * `status`), and throws only on route-level failures (no connection,
-      * passthrough disabled, rate limited, transport error).
+      * passthrough disabled, rate limited, transport error) — as an
+      * `IntegrationPassthroughError` carrying the server's typed fields (LUA-860);
+      * `message` is the server's line, unchanged from the bare `Error` it used to be.
       */
       async passthroughForSandbox(integrationType, request) {
         const result = await this.passthrough(integrationType, request);
         if (!result.success || !result.data) {
-          throw new Error(result.error?.message || `Integration passthrough failed for '${integrationType}'`);
+          throw new IntegrationPassthroughError(result.error?.message || `Integration passthrough failed for '${integrationType}'`, integrationPassthroughErrorFields(result.error));
         }
         return result.data;
       }