lua-cli 3.33.0 → 3.35.0

package/dist/api-exports.d.ts

@@ -3603,6 +3603,21 @@ export declare interface LuaRequest {
     channel: Channel;
     /** Webhook data from channel integrations (only present for webhook-based channels) */
     webhook?: WebhookRequest;
+    /**
+     * Free-text context passed by the calling surface for this turn (e.g. LuaPop's
+     * `LuaPop.init({ runtimeContext })`, or the `runtimeContext` field on the chat
+     * request body). Also injected into the model's system prompt. Present only when
+     * the caller supplied it.
+     */
+    runtimeContext?: string;
+    /** The chat thread id for this turn. */
+    threadId?: string;
+    /** The resolved IANA timezone for this turn (e.g. "Africa/Nairobi"). */
+    timezone?: string;
+    /** The id of the user this turn is acting for, when a user is resolved. */
+    userId?: string;
+    /** The id of the agent handling this turn. */
+    agentId?: string;
 }
 
 /**
@@ -5704,8 +5719,15 @@ export declare type PreProcessorAction = 'proceed' | 'block';
 export declare type PreProcessorBlockResponse = {
     /** Stop processing immediately */
     action: 'block';
-    /** Message to show to the user */
-    response: string;
+    /**
+     * Message to show to the user.
+     *
+     * Omit it (or leave it empty) to end the turn SILENTLY — nothing is sent on
+     * any channel. That is the supported way to stay quiet, e.g. while a human
+     * agent is handling the conversation. The user's message is still recorded in
+     * the agent's history; only the reply is suppressed.
+     */
+    response?: string;
     /** Optional metadata */
     metadata?: Record<string, any>;
 };
@@ -6749,8 +6771,11 @@ export declare const User: {
     getChatHistory(): Promise<ChatHistoryMessage[]>;
     /**
      * PRO-1208 (B7) — push an approve/redirect/fix card to YOUR OWN inbox.
-     * Capped (5/day per agent), urgent-clamped, same-`key` deduped (revise in
-     * place). Cap-hit resolves to `{outcome: 'capped'}` — never throws.
+     * Capped per kind at 500/day per agent per end-user by default
+     * (`LUA_INBOX_AGENT_DEPOSIT_DAILY_CAP`); `priority: 'urgent'` is limited to
+     * 5/day by default (`LUA_INBOX_URGENT_PUSH_DAILY_CAP`) and lands demoted to
+     * `high` when over budget — never dropped. Same-`key` pushes revise in place.
+     * Cap-hit resolves to `{outcome: 'capped'}` — never throws.
      *
      * @example
      * const receipt = await User.Inbox.push({

package/dist/api-exports.js

@@ -83,6 +83,9 @@ function aiGenerateInputFromSimplified(prompt, content) {
 function isAllowedReviewableExecuteTool(tool) {
   return REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST.includes(tool);
 }
+function isReviewableStandingStartTool(tool) {
+  return REVIEWABLE_STANDING_START_TOOLS.includes(tool);
+}
 function isReviewableMcpSendTool(tool) {
   return tool.length > REVIEWABLE_MCP_SEND_TOOL_SUFFIX.length && tool.endsWith(REVIEWABLE_MCP_SEND_TOOL_SUFFIX);
 }
@@ -112,7 +115,7 @@ function mcpSendSiblingForDraftTool(tool, availableToolIds) {
   return candidates[0]?.id;
 }
 function isReviewableExecuteTool(tool) {
-  return isAllowedReviewableExecuteTool(tool) || isReviewableMcpSendTool(tool);
+  return isAllowedReviewableExecuteTool(tool) || isReviewableMcpSendTool(tool) || isReviewableStandingStartTool(tool);
 }
 function isInteractiveChannel(channel) {
   if (!channel) return true;
@@ -258,7 +261,10 @@ function transformChatHistoryContentParts(parts) {
         content.push({
           type: "file",
           data: part.data,
-          mediaType
+          mediaType,
+          ...part.filename && {
+            filename: part.filename
+          }
         });
       }
     }
@@ -537,6 +543,55 @@ function normalizeLuaJobExecutionTimeoutSeconds(timeout) {
   }
   return Math.min(Math.max(timeout, LUA_JOB_MIN_TIMEOUT_SECONDS), LUA_JOB_MAX_TIMEOUT_SECONDS);
 }
+function isId(value3) {
+  return typeof value3 === "string" && value3.length > 0 && value3.length <= MAX_ID_LENGTH;
+}
+function parseScheduledJobFire(raw) {
+  if (new TextEncoder().encode(raw).byteLength > MAX_BODY_BYTES) {
+    throw new Error("Invalid scheduled job fire: body is too large");
+  }
+  let value3;
+  try {
+    value3 = JSON.parse(raw);
+  } catch {
+    throw new Error("Invalid scheduled job fire: body is not JSON");
+  }
+  if (!value3 || typeof value3 !== "object" || Array.isArray(value3)) {
+    throw new Error("Invalid scheduled job fire: body must be an object");
+  }
+  const record = value3;
+  if (Object.keys(record).some((key) => !KEYS.has(key))) {
+    throw new Error("Invalid scheduled job fire: unknown field");
+  }
+  if (record.v !== 1 || record.kind !== "scheduled-job-fire") {
+    throw new Error("Invalid scheduled job fire: unsupported contract");
+  }
+  if (!isId(record.agentId)) {
+    throw new Error("Invalid scheduled job fire: agentId is required");
+  }
+  if (!isId(record.jobId)) {
+    throw new Error("Invalid scheduled job fire: jobId is required");
+  }
+  if (typeof record.scheduledTime !== "string" || !UTC_ISO.test(record.scheduledTime) || !Number.isFinite(Date.parse(record.scheduledTime)) || ![
+    new Date(record.scheduledTime).toISOString(),
+    new Date(record.scheduledTime).toISOString().replace(".000Z", "Z")
+  ].includes(record.scheduledTime)) {
+    throw new Error("Invalid scheduled job fire: scheduledTime must be ISO 8601");
+  }
+  if (record.triggerId !== void 0 && !isId(record.triggerId)) {
+    throw new Error("Invalid scheduled job fire: triggerId must be a non-empty string");
+  }
+  return {
+    v: 1,
+    kind: "scheduled-job-fire",
+    agentId: record.agentId,
+    jobId: record.jobId,
+    scheduledTime: record.scheduledTime,
+    ...typeof record.triggerId === "string" ? {
+      triggerId: record.triggerId
+    } : {}
+  };
+}
 function triggerUrlEnvKey(triggerKey) {
   const upper = triggerKey.trim().replace(/[^A-Za-z0-9]+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
   return `${TEMPLATE_TRIGGER_URL_ENV_PREFIX}${upper}`;
@@ -1157,7 +1212,7 @@ function effectiveAgentFeatures(base, override, rule) {
   if (rule === "wholesale") return override || base || void 0;
   return effectiveAgentFeatureRows(base, override).rows;
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1197,6 +1252,11 @@ var init_dist = __esm({
     ];
     __name(isAllowedReviewableExecuteTool, "isAllowedReviewableExecuteTool");
     __name2(isAllowedReviewableExecuteTool, "isAllowedReviewableExecuteTool");
+    REVIEWABLE_STANDING_START_TOOLS = [
+      "scheduleWorkflow"
+    ];
+    __name(isReviewableStandingStartTool, "isReviewableStandingStartTool");
+    __name2(isReviewableStandingStartTool, "isReviewableStandingStartTool");
     REVIEWABLE_MCP_SEND_TOOL_SUFFIX = "_create_messaging_message";
     __name(isReviewableMcpSendTool, "isReviewableMcpSendTool");
     __name2(isReviewableMcpSendTool, "isReviewableMcpSendTool");
@@ -1857,6 +1917,21 @@ This text is who you are for this person. As you learn them, their name, their w
     __name2(resolveLuaJobTimeoutSeconds, "resolveLuaJobTimeoutSeconds");
     __name(normalizeLuaJobExecutionTimeoutSeconds, "normalizeLuaJobExecutionTimeoutSeconds");
     __name2(normalizeLuaJobExecutionTimeoutSeconds, "normalizeLuaJobExecutionTimeoutSeconds");
+    KEYS = /* @__PURE__ */ new Set([
+      "v",
+      "kind",
+      "agentId",
+      "jobId",
+      "scheduledTime",
+      "triggerId"
+    ]);
+    MAX_BODY_BYTES = 4096;
+    MAX_ID_LENGTH = 512;
+    UTC_ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;
+    __name(isId, "isId");
+    __name2(isId, "isId");
+    __name(parseScheduledJobFire, "parseScheduledJobFire");
+    __name2(parseScheduledJobFire, "parseScheduledJobFire");
     TEMPLATE_TRIGGER_URL_ENV_PREFIX = "LUA_TRIGGER_URL__";
     __name(triggerUrlEnvKey, "triggerUrlEnvKey");
     __name2(triggerUrlEnvKey, "triggerUrlEnvKey");
@@ -2126,7 +2201,20 @@ This text is who you are for this person. As you learn them, their name, their w
         "platform-allowlist"
       ]),
       /** Product data only. A roster row confers nothing. */
-      rostered: z3.boolean()
+      rostered: z3.boolean(),
+      /**
+       * Ownership, product data only (PRO-1754). `createdBy` is the creating
+       * user's id straight off the sub-agent document; `owner` is that id
+       * resolved to a display identity after the list is decided. Both are
+       * absent when the document records no creator or the lookup fails —
+       * they never influence which resources are listed.
+       */
+      createdBy: z3.string().min(1).max(256).optional(),
+      owner: z3.object({
+        id: z3.string().min(1).max(256),
+        name: z3.string().optional(),
+        email: z3.string().optional()
+      }).optional()
     }).passthrough();
     CapabilityProfilesSchema = z3.record(z3.string().min(1).max(64), z3.array(ProjectedScopeSchema));
     RoleCatalogSchema = z3.record(z3.string().min(1).max(128), z3.object({
@@ -3026,6 +3114,148 @@ function resolveMapping(cfg, ctx) {
     value: result
   };
 }
+function looksLikeModelTemplate(model) {
+  return typeof model === "string" && model.includes("${");
+}
+function parseModelTemplate(model) {
+  if (!looksLikeModelTemplate(model)) return {
+    kind: "static"
+  };
+  const trimmed = model.trim();
+  const m = WORKFLOW_MODEL_TEMPLATE_RE.exec(trimmed);
+  if (!m) {
+    const inner = /^\$\{([^}]*)\}$/.exec(trimmed)?.[1];
+    const root = inner?.split(/[.|]/, 1)[0];
+    const why = inner !== void 0 && root !== void 0 && root !== WORKFLOW_MODEL_TEMPLATE_ROOT ? `only the \`${WORKFLOW_MODEL_TEMPLATE_ROOT}\` root is allowed (got \`${root || "(empty)"}\`)` : inner !== void 0 && (inner === WORKFLOW_MODEL_TEMPLATE_ROOT || inner.startsWith(`${WORKFLOW_MODEL_TEMPLATE_ROOT}.`)) ? "the path after `initData.` is empty" : "the whole value must be exactly one placeholder \u2014 no prefix, suffix or second placeholder";
+    return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, why)
+    };
+  }
+  const path3 = m[1];
+  if (!path3.split(".").every((seg) => PATH_SEGMENT_RE.test(seg))) {
+    return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, `the path \`${path3}\` is not a dotted path of names and canonical [n] indexes`)
+    };
+  }
+  if (m[2] !== void 0) {
+    const dflt = m[2].trim();
+    if (!dflt) return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, "the default after `|` is empty")
+    };
+    if (dflt.includes("|")) {
+      return {
+        kind: "invalid",
+        message: modelTemplateInvalidMessage(model, "a placeholder names ONE default \u2014 a second `|` is not a fallback chain")
+      };
+    }
+    return {
+      kind: "template",
+      template: {
+        placeholder: trimmed,
+        path: path3,
+        default: dflt
+      }
+    };
+  }
+  return {
+    kind: "template",
+    template: {
+      placeholder: trimmed,
+      path: path3
+    }
+  };
+}
+function modelTemplateInvalidMessage(model, why) {
+  return `model "${model.trim()}" is not a valid run-input-bound model placeholder \u2014 ${why}; the forms are \${initData.<path>} and \${initData.<path>|<provider/model default>}`;
+}
+function modelTemplateDefaultRequiredMessage(model) {
+  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")}`;
+}
+function staticModelPin(model) {
+  if (typeof model !== "string") return void 0;
+  const parsed = parseModelTemplate(model);
+  if (parsed.kind === "static") return model;
+  if (parsed.kind === "template") return parsed.template.default;
+  return void 0;
+}
+function readPath(root, path3) {
+  let cur = root;
+  for (const seg of path3.split(".")) {
+    const name = seg.replace(/\[(?:0|[1-9]\d*)\]/g, "");
+    const indexes = [
+      ...seg.matchAll(/\[(0|[1-9]\d*)\]/g)
+    ].map((x) => Number(x[1]));
+    if (cur === null || typeof cur !== "object") return void 0;
+    cur = cur[name];
+    for (const i of indexes) {
+      if (!Array.isArray(cur)) return void 0;
+      cur = cur[i];
+    }
+  }
+  return cur;
+}
+function renderModelTemplate(model, initData) {
+  if (model === void 0 || !looksLikeModelTemplate(model)) return {
+    ok: true,
+    model,
+    source: "static"
+  };
+  const parsed = parseModelTemplate(model);
+  if (parsed.kind === "invalid") {
+    return {
+      ok: false,
+      placeholder: model.trim(),
+      path: "",
+      reason: "invalid",
+      message: parsed.message
+    };
+  }
+  if (parsed.kind === "static") return {
+    ok: true,
+    model,
+    source: "static"
+  };
+  const { placeholder, path: path3 } = parsed.template;
+  if (initData !== void 0 && initData !== null && (typeof initData !== "object" || Array.isArray(initData))) {
+    return {
+      ok: false,
+      placeholder,
+      path: path3,
+      reason: "input-not-object",
+      message: modelTemplateInputNotObjectMessage(placeholder, initData)
+    };
+  }
+  const value22 = readPath(initData, path3);
+  const reason = value22 === void 0 || value22 === null ? "unbound" : typeof value22 !== "string" ? "not-a-string" : value22.trim() ? null : "empty";
+  if (reason === null) return {
+    ok: true,
+    model: value22.trim(),
+    source: "initData"
+  };
+  if (parsed.template.default !== void 0) return {
+    ok: true,
+    model: parsed.template.default,
+    source: "default"
+  };
+  return {
+    ok: false,
+    placeholder,
+    path: path3,
+    reason,
+    message: modelTemplateUnboundMessage(placeholder, path3, reason)
+  };
+}
+function modelTemplateUnboundMessage(placeholder, path3, reason) {
+  const what = reason === "unbound" ? `the run input has no ${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path3}` : reason === "empty" ? `${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path3} is empty on the run input` : `${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path3} on the run input is not a string`;
+  return `model placeholder "${placeholder}" is unbound \u2014 ${what} and the placeholder declares no default; pass one in the run input or write \${${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path3}|<provider/model>}`;
+}
+function modelTemplateInputNotObjectMessage(placeholder, initData) {
+  const type = Array.isArray(initData) ? "an array" : `a ${typeof initData}`;
+  return `model placeholder "${placeholder}" cannot be rendered \u2014 the run input is ${type}, not an object; start the run with an object input (a JSON string must be parsed before it is passed)`;
+}
 function describeApproverSpecRefusal(spec) {
   const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
   const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
@@ -3395,6 +3625,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
   }
   const declaredKeys = new Set(opts.connectionKeys ?? []);
+  const ownKeys = /* @__PURE__ */ new Set();
   if (g.connections !== void 0 && !Array.isArray(g.connections)) {
     err("connection-declaration-invalid", "`connections` must be an array of { key, integrationType }", "connections");
   }
@@ -3406,7 +3637,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("connection-declaration-invalid", `connections[${i}].key must match ${WORKFLOW_CONNECTION_KEY_RE}`, `${path3}.key`);
       return;
     }
-    if (declaredKeys.has(key)) {
+    if (ownKeys.has(key)) {
       err("connection-declaration-invalid", `connections[${i}].key "${key}" is declared twice`, `${path3}.key`);
       return;
     }
@@ -3414,6 +3645,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("connection-declaration-invalid", `connections[${i}] ("${key}") needs an integrationType (the catalog slug, e.g. 'github')`, `${path3}.integrationType`);
       return;
     }
+    ownKeys.add(key);
     declaredKeys.add(key);
   });
   const undeclaredKey = /* @__PURE__ */ __name4((ref) => typeof ref === "string" && !declaredKeys.has(ref) && isConnectionKeyShaped(ref) && opts.connectionIds?.has(ref) !== true, "undeclaredKey");
@@ -3540,7 +3772,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.harness !== void 0 && node.tier !== "job") {
       err("harness-requires-job-tier", "`harness` is only legal on a tier:'job' agent step", `${path3}.harness`, id);
     }
-    const provider = node.type === "agent" ? classifyModelProvider(node.model) : null;
+    const provider = node.type === "agent" ? classifyModelProvider(staticModelPin(node.model)) : null;
     if (node.harness === "claude-code" && provider !== null && provider !== "anthropic") {
       err("harness-provider-mismatch", `harness:'claude-code' needs an Anthropic model (model "${node.type === "agent" ? node.model : ""}" is ${provider})`, `${path3}.harness`, id);
     }
@@ -3550,18 +3782,32 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
   }, "checkTier");
   const checkModel = /* @__PURE__ */ __name4((node, path3) => {
     if (node.type !== "agent" || typeof node.model !== "string") return;
+    const id = singleId(node);
+    const parsed = parseModelTemplate(node.model);
+    if (parsed.kind === "invalid") {
+      err("model-template-invalid", parsed.message, `${path3}.model`, id);
+      return;
+    }
+    if (parsed.kind === "template" && parsed.template.default === void 0) {
+      if (isJobTier(node)) {
+        err("model-template-default-required", modelTemplateDefaultRequiredMessage(node.model), `${path3}.model`, id);
+      }
+      return;
+    }
+    const pin = parsed.kind === "template" ? parsed.template.default : node.model;
+    if (pin === void 0) return;
+    const inContext = /* @__PURE__ */ __name4((message) => parsed.kind === "template" ? `${message} (the default of ${parsed.template.placeholder})` : message, "inContext");
     const registry = opts.approvedModels;
     if (registry === void 0) return;
-    const id = singleId(node);
     if (registry === "unavailable") {
-      const pin = node.model.trim();
-      if (pin && !normalizeModelId(pin, []).ok) {
-        warn("model-unresolved", `model "${pin}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`, `${path3}.model`, id);
+      const trimmed = pin.trim();
+      if (trimmed && !normalizeModelId(trimmed, []).ok) {
+        warn("model-unresolved", inContext(`model "${trimmed}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`), `${path3}.model`, id);
       }
       return;
     }
-    const resolved = normalizeModelId(node.model, registry);
-    if (!resolved.ok) err("model-unresolved", modelUnresolvedMessage(resolved), `${path3}.model`, id);
+    const resolved = normalizeModelId(pin, registry);
+    if (!resolved.ok) err("model-unresolved", inContext(modelUnresolvedMessage(resolved)), `${path3}.model`, id);
   }, "checkModel");
   const checkWorkspace = /* @__PURE__ */ __name4((node, path3) => {
     const id = singleId(node);
@@ -6051,7 +6297,37 @@ function needsInheritedWorkspace(graph) {
   }
   return false;
 }
-var __defProp4, __name4, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, WORKFLOW_SCHEDULE_RUN_AS, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
+function armEntry2(arm) {
+  return Array.isArray(arm) ? arm[arm.length - 1] : arm;
+}
+function entryHasJobTier(entry) {
+  const n2 = armEntry2(entry);
+  if (!n2 || typeof n2 !== "object") return false;
+  const node = n2;
+  if (node.tier === "job") return true;
+  const ws = node.workspace;
+  if (ws !== void 0 && ws !== "inherit") return true;
+  switch (node.type) {
+    case "parallel":
+      return Array.isArray(node.steps) && node.steps.some(entryHasJobTier);
+    case "conditional":
+      return Array.isArray(node.steps) && node.steps.some(entryHasJobTier) || node.otherwise !== void 0 && entryHasJobTier(node.otherwise);
+    case "foreach":
+    case "loop":
+      return entryHasJobTier(node.step);
+    default:
+      return false;
+  }
+}
+function graphHasJobTierStep(envelopeOrGraph) {
+  if (!envelopeOrGraph || typeof envelopeOrGraph !== "object") return false;
+  const env2 = envelopeOrGraph;
+  const envWorkspace = env2.workspace;
+  if (envWorkspace !== void 0 && envWorkspace !== "inherit") return true;
+  const graph = Array.isArray(envelopeOrGraph) ? envelopeOrGraph : env2.definition?.graph ?? [];
+  return Array.isArray(graph) && graph.some(entryHasJobTier);
+}
+var __defProp4, __name4, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, WORKFLOW_MODEL_TEMPLATE_ROOT, WORKFLOW_MODEL_TEMPLATE_RE, PATH_SEGMENT_RE, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, WORKFLOW_SCHEDULE_RUN_AS, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
 var init_dist2 = __esm({
   "../workflow-graph/dist/index.mjs"() {
     "use strict";
@@ -6156,6 +6432,27 @@ var init_dist2 = __esm({
     }), "fromKnowledge");
     SideEffectsSchema = z4.enum(WORKFLOW_SIDE_EFFECTS);
     JobResourcesSchema = z4.enum(WORKFLOW_JOB_RESOURCES);
+    WORKFLOW_MODEL_TEMPLATE_ROOT = "initData";
+    WORKFLOW_MODEL_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*(?:\|([^}]*))?\}$/;
+    PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
+    __name(looksLikeModelTemplate, "looksLikeModelTemplate");
+    __name4(looksLikeModelTemplate, "looksLikeModelTemplate");
+    __name(parseModelTemplate, "parseModelTemplate");
+    __name4(parseModelTemplate, "parseModelTemplate");
+    __name(modelTemplateInvalidMessage, "modelTemplateInvalidMessage");
+    __name4(modelTemplateInvalidMessage, "modelTemplateInvalidMessage");
+    __name(modelTemplateDefaultRequiredMessage, "modelTemplateDefaultRequiredMessage");
+    __name4(modelTemplateDefaultRequiredMessage, "modelTemplateDefaultRequiredMessage");
+    __name(staticModelPin, "staticModelPin");
+    __name4(staticModelPin, "staticModelPin");
+    __name(readPath, "readPath");
+    __name4(readPath, "readPath");
+    __name(renderModelTemplate, "renderModelTemplate");
+    __name4(renderModelTemplate, "renderModelTemplate");
+    __name(modelTemplateUnboundMessage, "modelTemplateUnboundMessage");
+    __name4(modelTemplateUnboundMessage, "modelTemplateUnboundMessage");
+    __name(modelTemplateInputNotObjectMessage, "modelTemplateInputNotObjectMessage");
+    __name4(modelTemplateInputNotObjectMessage, "modelTemplateInputNotObjectMessage");
     APPROVER_SPEC_MAX_USERS = 20;
     ESCALATION_MAX_HOPS = 3;
     TemplateBindingSchema = z22.object({
@@ -6662,7 +6959,16 @@ var init_dist2 = __esm({
       "secretName",
       "executionId",
       "credentialsExecutionId",
-      "expired"
+      "expired",
+      // Run-input-bound model pins (the Principal Engineer stage models): the Job tier's `MODEL_ERROR` refusals name the
+      // pin they judged (`requested`), the declared harness, the provider the classifier read and the precedence leg the
+      // pin came from (`source`: initData / default / node / env / org / stamp), and `provider_unsupported`'s fleet
+      // (`allowed`, the LUA_WF_JOB_PROVIDERS list) — the members the PR body promises.
+      "requested",
+      "harness",
+      "provider",
+      "source",
+      "allowed"
     ];
     STEP_ERROR_DETAIL_MAX_BYTES = 8 * 1024;
     DETAIL_MAX_DEPTH = 4;
@@ -6819,6 +7125,12 @@ var init_dist2 = __esm({
     __name4(inheritTargets, "inheritTargets");
     __name(needsInheritedWorkspace, "needsInheritedWorkspace");
     __name4(needsInheritedWorkspace, "needsInheritedWorkspace");
+    __name(armEntry2, "armEntry2");
+    __name4(armEntry2, "armEntry");
+    __name(entryHasJobTier, "entryHasJobTier");
+    __name4(entryHasJobTier, "entryHasJobTier");
+    __name(graphHasJobTierStep, "graphHasJobTierStep");
+    __name4(graphHasJobTierStep, "graphHasJobTierStep");
   }
 });
 
@@ -15794,8 +16106,11 @@ var User = {
   },
   /**
   * PRO-1208 (B7) — push an approve/redirect/fix card to YOUR OWN inbox.
-  * Capped (5/day per agent), urgent-clamped, same-`key` deduped (revise in
-  * place). Cap-hit resolves to `{outcome: 'capped'}` — never throws.
+  * Capped per kind at 500/day per agent per end-user by default
+  * (`LUA_INBOX_AGENT_DEPOSIT_DAILY_CAP`); `priority: 'urgent'` is limited to
+  * 5/day by default (`LUA_INBOX_URGENT_PUSH_DAILY_CAP`) and lands demoted to
+  * `high` when over budget — never dropped. Same-`key` pushes revise in place.
+  * Cap-hit resolves to `{outcome: 'capped'}` — never throws.
   *
   * @example
   * const receipt = await User.Inbox.push({