lua-cli 3.33.0 → 3.35.0

package/dist/index.js

@@ -906,6 +906,9 @@ function aiGenerateInputFromSimplified(prompt, content) {
 function isAllowedReviewableExecuteTool(tool) {
   return REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST.includes(tool);
 }
+function isReviewableStandingStartTool(tool) {
+  return REVIEWABLE_STANDING_START_TOOLS.includes(tool);
+}
 function isReviewableMcpSendTool(tool) {
   return tool.length > REVIEWABLE_MCP_SEND_TOOL_SUFFIX.length && tool.endsWith(REVIEWABLE_MCP_SEND_TOOL_SUFFIX);
 }
@@ -935,7 +938,7 @@ function mcpSendSiblingForDraftTool(tool, availableToolIds) {
   return candidates[0]?.id;
 }
 function isReviewableExecuteTool(tool) {
-  return isAllowedReviewableExecuteTool(tool) || isReviewableMcpSendTool(tool);
+  return isAllowedReviewableExecuteTool(tool) || isReviewableMcpSendTool(tool) || isReviewableStandingStartTool(tool);
 }
 function isInteractiveChannel(channel) {
   if (!channel) return true;
@@ -1081,7 +1084,10 @@ function transformChatHistoryContentParts(parts) {
         content.push({
           type: "file",
           data: part.data,
-          mediaType
+          mediaType,
+          ...part.filename && {
+            filename: part.filename
+          }
         });
       }
     }
@@ -1360,6 +1366,55 @@ function normalizeLuaJobExecutionTimeoutSeconds(timeout) {
   }
   return Math.min(Math.max(timeout, LUA_JOB_MIN_TIMEOUT_SECONDS), LUA_JOB_MAX_TIMEOUT_SECONDS);
 }
+function isId(value3) {
+  return typeof value3 === "string" && value3.length > 0 && value3.length <= MAX_ID_LENGTH;
+}
+function parseScheduledJobFire(raw) {
+  if (new TextEncoder().encode(raw).byteLength > MAX_BODY_BYTES) {
+    throw new Error("Invalid scheduled job fire: body is too large");
+  }
+  let value3;
+  try {
+    value3 = JSON.parse(raw);
+  } catch {
+    throw new Error("Invalid scheduled job fire: body is not JSON");
+  }
+  if (!value3 || typeof value3 !== "object" || Array.isArray(value3)) {
+    throw new Error("Invalid scheduled job fire: body must be an object");
+  }
+  const record = value3;
+  if (Object.keys(record).some((key) => !KEYS.has(key))) {
+    throw new Error("Invalid scheduled job fire: unknown field");
+  }
+  if (record.v !== 1 || record.kind !== "scheduled-job-fire") {
+    throw new Error("Invalid scheduled job fire: unsupported contract");
+  }
+  if (!isId(record.agentId)) {
+    throw new Error("Invalid scheduled job fire: agentId is required");
+  }
+  if (!isId(record.jobId)) {
+    throw new Error("Invalid scheduled job fire: jobId is required");
+  }
+  if (typeof record.scheduledTime !== "string" || !UTC_ISO.test(record.scheduledTime) || !Number.isFinite(Date.parse(record.scheduledTime)) || ![
+    new Date(record.scheduledTime).toISOString(),
+    new Date(record.scheduledTime).toISOString().replace(".000Z", "Z")
+  ].includes(record.scheduledTime)) {
+    throw new Error("Invalid scheduled job fire: scheduledTime must be ISO 8601");
+  }
+  if (record.triggerId !== void 0 && !isId(record.triggerId)) {
+    throw new Error("Invalid scheduled job fire: triggerId must be a non-empty string");
+  }
+  return {
+    v: 1,
+    kind: "scheduled-job-fire",
+    agentId: record.agentId,
+    jobId: record.jobId,
+    scheduledTime: record.scheduledTime,
+    ...typeof record.triggerId === "string" ? {
+      triggerId: record.triggerId
+    } : {}
+  };
+}
 function triggerUrlEnvKey(triggerKey) {
   const upper = triggerKey.trim().replace(/[^A-Za-z0-9]+/g, "_").replace(/^_+|_+$/g, "").toUpperCase();
   return `${TEMPLATE_TRIGGER_URL_ENV_PREFIX}${upper}`;
@@ -1980,7 +2035,7 @@ function effectiveAgentFeatures(base, override, rule) {
   if (rule === "wholesale") return override || base || void 0;
   return effectiveAgentFeatureRows(base, override).rows;
 }
-var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, EventType, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, TYPED_API_KEY, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_JOURNAL_PROTOCOL_VERSION, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
+var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, EventType, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, TYPED_API_KEY, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_JOURNAL_PROTOCOL_VERSION, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -2011,6 +2066,11 @@ var init_dist = __esm({
     ];
     __name(isAllowedReviewableExecuteTool, "isAllowedReviewableExecuteTool");
     __name2(isAllowedReviewableExecuteTool, "isAllowedReviewableExecuteTool");
+    REVIEWABLE_STANDING_START_TOOLS = [
+      "scheduleWorkflow"
+    ];
+    __name(isReviewableStandingStartTool, "isReviewableStandingStartTool");
+    __name2(isReviewableStandingStartTool, "isReviewableStandingStartTool");
     REVIEWABLE_MCP_SEND_TOOL_SUFFIX = "_create_messaging_message";
     __name(isReviewableMcpSendTool, "isReviewableMcpSendTool");
     __name2(isReviewableMcpSendTool, "isReviewableMcpSendTool");
@@ -2711,6 +2771,21 @@ This text is who you are for this person. As you learn them, their name, their w
     __name2(resolveLuaJobTimeoutSeconds, "resolveLuaJobTimeoutSeconds");
     __name(normalizeLuaJobExecutionTimeoutSeconds, "normalizeLuaJobExecutionTimeoutSeconds");
     __name2(normalizeLuaJobExecutionTimeoutSeconds, "normalizeLuaJobExecutionTimeoutSeconds");
+    KEYS = /* @__PURE__ */ new Set([
+      "v",
+      "kind",
+      "agentId",
+      "jobId",
+      "scheduledTime",
+      "triggerId"
+    ]);
+    MAX_BODY_BYTES = 4096;
+    MAX_ID_LENGTH = 512;
+    UTC_ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;
+    __name(isId, "isId");
+    __name2(isId, "isId");
+    __name(parseScheduledJobFire, "parseScheduledJobFire");
+    __name2(parseScheduledJobFire, "parseScheduledJobFire");
     TEMPLATE_TRIGGER_URL_ENV_PREFIX = "LUA_TRIGGER_URL__";
     __name(triggerUrlEnvKey, "triggerUrlEnvKey");
     __name2(triggerUrlEnvKey, "triggerUrlEnvKey");
@@ -2981,7 +3056,20 @@ This text is who you are for this person. As you learn them, their name, their w
         "platform-allowlist"
       ]),
       /** Product data only. A roster row confers nothing. */
-      rostered: z3.boolean()
+      rostered: z3.boolean(),
+      /**
+       * Ownership, product data only (PRO-1754). `createdBy` is the creating
+       * user's id straight off the sub-agent document; `owner` is that id
+       * resolved to a display identity after the list is decided. Both are
+       * absent when the document records no creator or the lookup fails —
+       * they never influence which resources are listed.
+       */
+      createdBy: z3.string().min(1).max(256).optional(),
+      owner: z3.object({
+        id: z3.string().min(1).max(256),
+        name: z3.string().optional(),
+        email: z3.string().optional()
+      }).optional()
     }).passthrough();
     CapabilityProfilesSchema = z3.record(z3.string().min(1).max(64), z3.array(ProjectedScopeSchema));
     RoleCatalogSchema = z3.record(z3.string().min(1).max(128), z3.object({
@@ -4483,6 +4571,148 @@ function resolveMapping(cfg, ctx) {
     value: result
   };
 }
+function looksLikeModelTemplate(model) {
+  return typeof model === "string" && model.includes("${");
+}
+function parseModelTemplate(model) {
+  if (!looksLikeModelTemplate(model)) return {
+    kind: "static"
+  };
+  const trimmed = model.trim();
+  const m = WORKFLOW_MODEL_TEMPLATE_RE.exec(trimmed);
+  if (!m) {
+    const inner = /^\$\{([^}]*)\}$/.exec(trimmed)?.[1];
+    const root = inner?.split(/[.|]/, 1)[0];
+    const why = inner !== void 0 && root !== void 0 && root !== WORKFLOW_MODEL_TEMPLATE_ROOT ? `only the \`${WORKFLOW_MODEL_TEMPLATE_ROOT}\` root is allowed (got \`${root || "(empty)"}\`)` : inner !== void 0 && (inner === WORKFLOW_MODEL_TEMPLATE_ROOT || inner.startsWith(`${WORKFLOW_MODEL_TEMPLATE_ROOT}.`)) ? "the path after `initData.` is empty" : "the whole value must be exactly one placeholder \u2014 no prefix, suffix or second placeholder";
+    return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, why)
+    };
+  }
+  const path26 = m[1];
+  if (!path26.split(".").every((seg) => PATH_SEGMENT_RE.test(seg))) {
+    return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, `the path \`${path26}\` is not a dotted path of names and canonical [n] indexes`)
+    };
+  }
+  if (m[2] !== void 0) {
+    const dflt = m[2].trim();
+    if (!dflt) return {
+      kind: "invalid",
+      message: modelTemplateInvalidMessage(model, "the default after `|` is empty")
+    };
+    if (dflt.includes("|")) {
+      return {
+        kind: "invalid",
+        message: modelTemplateInvalidMessage(model, "a placeholder names ONE default \u2014 a second `|` is not a fallback chain")
+      };
+    }
+    return {
+      kind: "template",
+      template: {
+        placeholder: trimmed,
+        path: path26,
+        default: dflt
+      }
+    };
+  }
+  return {
+    kind: "template",
+    template: {
+      placeholder: trimmed,
+      path: path26
+    }
+  };
+}
+function modelTemplateInvalidMessage(model, why) {
+  return `model "${model.trim()}" is not a valid run-input-bound model placeholder \u2014 ${why}; the forms are \${initData.<path>} and \${initData.<path>|<provider/model default>}`;
+}
+function modelTemplateDefaultRequiredMessage(model) {
+  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")}`;
+}
+function staticModelPin(model) {
+  if (typeof model !== "string") return void 0;
+  const parsed = parseModelTemplate(model);
+  if (parsed.kind === "static") return model;
+  if (parsed.kind === "template") return parsed.template.default;
+  return void 0;
+}
+function readPath(root, path26) {
+  let cur = root;
+  for (const seg of path26.split(".")) {
+    const name = seg.replace(/\[(?:0|[1-9]\d*)\]/g, "");
+    const indexes = [
+      ...seg.matchAll(/\[(0|[1-9]\d*)\]/g)
+    ].map((x) => Number(x[1]));
+    if (cur === null || typeof cur !== "object") return void 0;
+    cur = cur[name];
+    for (const i of indexes) {
+      if (!Array.isArray(cur)) return void 0;
+      cur = cur[i];
+    }
+  }
+  return cur;
+}
+function renderModelTemplate(model, initData) {
+  if (model === void 0 || !looksLikeModelTemplate(model)) return {
+    ok: true,
+    model,
+    source: "static"
+  };
+  const parsed = parseModelTemplate(model);
+  if (parsed.kind === "invalid") {
+    return {
+      ok: false,
+      placeholder: model.trim(),
+      path: "",
+      reason: "invalid",
+      message: parsed.message
+    };
+  }
+  if (parsed.kind === "static") return {
+    ok: true,
+    model,
+    source: "static"
+  };
+  const { placeholder, path: path26 } = parsed.template;
+  if (initData !== void 0 && initData !== null && (typeof initData !== "object" || Array.isArray(initData))) {
+    return {
+      ok: false,
+      placeholder,
+      path: path26,
+      reason: "input-not-object",
+      message: modelTemplateInputNotObjectMessage(placeholder, initData)
+    };
+  }
+  const value22 = readPath(initData, path26);
+  const reason = value22 === void 0 || value22 === null ? "unbound" : typeof value22 !== "string" ? "not-a-string" : value22.trim() ? null : "empty";
+  if (reason === null) return {
+    ok: true,
+    model: value22.trim(),
+    source: "initData"
+  };
+  if (parsed.template.default !== void 0) return {
+    ok: true,
+    model: parsed.template.default,
+    source: "default"
+  };
+  return {
+    ok: false,
+    placeholder,
+    path: path26,
+    reason,
+    message: modelTemplateUnboundMessage(placeholder, path26, reason)
+  };
+}
+function modelTemplateUnboundMessage(placeholder, path26, reason) {
+  const what = reason === "unbound" ? `the run input has no ${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path26}` : reason === "empty" ? `${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path26} is empty on the run input` : `${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path26} on the run input is not a string`;
+  return `model placeholder "${placeholder}" is unbound \u2014 ${what} and the placeholder declares no default; pass one in the run input or write \${${WORKFLOW_MODEL_TEMPLATE_ROOT}.${path26}|<provider/model>}`;
+}
+function modelTemplateInputNotObjectMessage(placeholder, initData) {
+  const type = Array.isArray(initData) ? "an array" : `a ${typeof initData}`;
+  return `model placeholder "${placeholder}" cannot be rendered \u2014 the run input is ${type}, not an object; start the run with an object input (a JSON string must be parsed before it is passed)`;
+}
 function describeApproverSpecRefusal(spec) {
   const raw = spec === void 0 ? "undefined" : JSON.stringify(spec) ?? String(spec);
   const written = raw.length > APPROVER_WRITTEN_MAX ? `${raw.slice(0, APPROVER_WRITTEN_MAX - 1)}\u2026` : raw;
@@ -4852,6 +5082,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
   }
   const declaredKeys = new Set(opts.connectionKeys ?? []);
+  const ownKeys = /* @__PURE__ */ new Set();
   if (g.connections !== void 0 && !Array.isArray(g.connections)) {
     err("connection-declaration-invalid", "`connections` must be an array of { key, integrationType }", "connections");
   }
@@ -4863,7 +5094,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("connection-declaration-invalid", `connections[${i}].key must match ${WORKFLOW_CONNECTION_KEY_RE}`, `${path26}.key`);
       return;
     }
-    if (declaredKeys.has(key)) {
+    if (ownKeys.has(key)) {
       err("connection-declaration-invalid", `connections[${i}].key "${key}" is declared twice`, `${path26}.key`);
       return;
     }
@@ -4871,6 +5102,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("connection-declaration-invalid", `connections[${i}] ("${key}") needs an integrationType (the catalog slug, e.g. 'github')`, `${path26}.integrationType`);
       return;
     }
+    ownKeys.add(key);
     declaredKeys.add(key);
   });
   const undeclaredKey = /* @__PURE__ */ __name4((ref) => typeof ref === "string" && !declaredKeys.has(ref) && isConnectionKeyShaped(ref) && opts.connectionIds?.has(ref) !== true, "undeclaredKey");
@@ -4997,7 +5229,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.harness !== void 0 && node.tier !== "job") {
       err("harness-requires-job-tier", "`harness` is only legal on a tier:'job' agent step", `${path26}.harness`, id);
     }
-    const provider = node.type === "agent" ? classifyModelProvider(node.model) : null;
+    const provider = node.type === "agent" ? classifyModelProvider(staticModelPin(node.model)) : null;
     if (node.harness === "claude-code" && provider !== null && provider !== "anthropic") {
       err("harness-provider-mismatch", `harness:'claude-code' needs an Anthropic model (model "${node.type === "agent" ? node.model : ""}" is ${provider})`, `${path26}.harness`, id);
     }
@@ -5007,18 +5239,32 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
   }, "checkTier");
   const checkModel = /* @__PURE__ */ __name4((node, path26) => {
     if (node.type !== "agent" || typeof node.model !== "string") return;
+    const id = singleId(node);
+    const parsed = parseModelTemplate(node.model);
+    if (parsed.kind === "invalid") {
+      err("model-template-invalid", parsed.message, `${path26}.model`, id);
+      return;
+    }
+    if (parsed.kind === "template" && parsed.template.default === void 0) {
+      if (isJobTier(node)) {
+        err("model-template-default-required", modelTemplateDefaultRequiredMessage(node.model), `${path26}.model`, id);
+      }
+      return;
+    }
+    const pin = parsed.kind === "template" ? parsed.template.default : node.model;
+    if (pin === void 0) return;
+    const inContext = /* @__PURE__ */ __name4((message) => parsed.kind === "template" ? `${message} (the default of ${parsed.template.placeholder})` : message, "inContext");
     const registry = opts.approvedModels;
     if (registry === void 0) return;
-    const id = singleId(node);
     if (registry === "unavailable") {
-      const pin = node.model.trim();
-      if (pin && !normalizeModelId(pin, []).ok) {
-        warn("model-unresolved", `model "${pin}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`, `${path26}.model`, id);
+      const trimmed = pin.trim();
+      if (trimmed && !normalizeModelId(trimmed, []).ok) {
+        warn("model-unresolved", inContext(`model "${trimmed}" could not be checked against the approved-model registry (unavailable at push) \u2014 it dispatches only if it resolves there (a provider/model registry code, or a bare id exactly one approved model carries)`), `${path26}.model`, id);
       }
       return;
     }
-    const resolved = normalizeModelId(node.model, registry);
-    if (!resolved.ok) err("model-unresolved", modelUnresolvedMessage(resolved), `${path26}.model`, id);
+    const resolved = normalizeModelId(pin, registry);
+    if (!resolved.ok) err("model-unresolved", inContext(modelUnresolvedMessage(resolved)), `${path26}.model`, id);
   }, "checkModel");
   const checkWorkspace = /* @__PURE__ */ __name4((node, path26) => {
     const id = singleId(node);
@@ -7508,7 +7754,37 @@ function needsInheritedWorkspace(graph) {
   }
   return false;
 }
-var __defProp4, __name4, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, WORKFLOW_SCHEDULE_RUN_AS, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
+function armEntry2(arm) {
+  return Array.isArray(arm) ? arm[arm.length - 1] : arm;
+}
+function entryHasJobTier(entry) {
+  const n2 = armEntry2(entry);
+  if (!n2 || typeof n2 !== "object") return false;
+  const node = n2;
+  if (node.tier === "job") return true;
+  const ws = node.workspace;
+  if (ws !== void 0 && ws !== "inherit") return true;
+  switch (node.type) {
+    case "parallel":
+      return Array.isArray(node.steps) && node.steps.some(entryHasJobTier);
+    case "conditional":
+      return Array.isArray(node.steps) && node.steps.some(entryHasJobTier) || node.otherwise !== void 0 && entryHasJobTier(node.otherwise);
+    case "foreach":
+    case "loop":
+      return entryHasJobTier(node.step);
+    default:
+      return false;
+  }
+}
+function graphHasJobTierStep(envelopeOrGraph) {
+  if (!envelopeOrGraph || typeof envelopeOrGraph !== "object") return false;
+  const env = envelopeOrGraph;
+  const envWorkspace = env.workspace;
+  if (envWorkspace !== void 0 && envWorkspace !== "inherit") return true;
+  const graph = Array.isArray(envelopeOrGraph) ? envelopeOrGraph : env.definition?.graph ?? [];
+  return Array.isArray(graph) && graph.some(entryHasJobTier);
+}
+var __defProp4, __name4, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, WORKFLOW_MODEL_TEMPLATE_ROOT, WORKFLOW_MODEL_TEMPLATE_RE, PATH_SEGMENT_RE, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, WORKFLOW_SCHEDULE_RUN_AS, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
 var init_dist2 = __esm({
   "../workflow-graph/dist/index.mjs"() {
     "use strict";
@@ -7613,6 +7889,27 @@ var init_dist2 = __esm({
     }), "fromKnowledge");
     SideEffectsSchema = z6.enum(WORKFLOW_SIDE_EFFECTS);
     JobResourcesSchema = z6.enum(WORKFLOW_JOB_RESOURCES);
+    WORKFLOW_MODEL_TEMPLATE_ROOT = "initData";
+    WORKFLOW_MODEL_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*(?:\|([^}]*))?\}$/;
+    PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
+    __name(looksLikeModelTemplate, "looksLikeModelTemplate");
+    __name4(looksLikeModelTemplate, "looksLikeModelTemplate");
+    __name(parseModelTemplate, "parseModelTemplate");
+    __name4(parseModelTemplate, "parseModelTemplate");
+    __name(modelTemplateInvalidMessage, "modelTemplateInvalidMessage");
+    __name4(modelTemplateInvalidMessage, "modelTemplateInvalidMessage");
+    __name(modelTemplateDefaultRequiredMessage, "modelTemplateDefaultRequiredMessage");
+    __name4(modelTemplateDefaultRequiredMessage, "modelTemplateDefaultRequiredMessage");
+    __name(staticModelPin, "staticModelPin");
+    __name4(staticModelPin, "staticModelPin");
+    __name(readPath, "readPath");
+    __name4(readPath, "readPath");
+    __name(renderModelTemplate, "renderModelTemplate");
+    __name4(renderModelTemplate, "renderModelTemplate");
+    __name(modelTemplateUnboundMessage, "modelTemplateUnboundMessage");
+    __name4(modelTemplateUnboundMessage, "modelTemplateUnboundMessage");
+    __name(modelTemplateInputNotObjectMessage, "modelTemplateInputNotObjectMessage");
+    __name4(modelTemplateInputNotObjectMessage, "modelTemplateInputNotObjectMessage");
     APPROVER_SPEC_MAX_USERS = 20;
     ESCALATION_MAX_HOPS = 3;
     TemplateBindingSchema = z22.object({
@@ -8119,7 +8416,16 @@ var init_dist2 = __esm({
       "secretName",
       "executionId",
       "credentialsExecutionId",
-      "expired"
+      "expired",
+      // Run-input-bound model pins (the Principal Engineer stage models): the Job tier's `MODEL_ERROR` refusals name the
+      // pin they judged (`requested`), the declared harness, the provider the classifier read and the precedence leg the
+      // pin came from (`source`: initData / default / node / env / org / stamp), and `provider_unsupported`'s fleet
+      // (`allowed`, the LUA_WF_JOB_PROVIDERS list) — the members the PR body promises.
+      "requested",
+      "harness",
+      "provider",
+      "source",
+      "allowed"
     ];
     STEP_ERROR_DETAIL_MAX_BYTES = 8 * 1024;
     DETAIL_MAX_DEPTH = 4;
@@ -8276,6 +8582,12 @@ var init_dist2 = __esm({
     __name4(inheritTargets, "inheritTargets");
     __name(needsInheritedWorkspace, "needsInheritedWorkspace");
     __name4(needsInheritedWorkspace, "needsInheritedWorkspace");
+    __name(armEntry2, "armEntry2");
+    __name4(armEntry2, "armEntry");
+    __name(entryHasJobTier, "entryHasJobTier");
+    __name4(entryHasJobTier, "entryHasJobTier");
+    __name(graphHasJobTierStep, "graphHasJobTierStep");
+    __name4(graphHasJobTierStep, "graphHasJobTierStep");
   }
 });
 
@@ -20152,7 +20464,8 @@ function computeDeferred(graph, opts = {}) {
       deferred.add("job-tier-disabled");
       deferred.add("job-tier-provider-unsupported");
     }
-    if (n2.type === "agent" && typeof n2.model === "string" && !isModelIdSentinel(n2.model)) deferred.add("model-unresolved");
+    const modelPin = n2.type === "agent" ? staticModelPin(n2.model) : void 0;
+    if (modelPin !== void 0 && !isModelIdSentinel(modelPin)) deferred.add("model-unresolved");
     if (Array.isArray(n2.requiredConnections) && n2.requiredConnections.some(serverDecides)) deferred.add("required-connection-unknown");
     if (n2.type === "approval") {
       const a = n2.approver;
@@ -35197,7 +35510,11 @@ function createSandbox(options) {
         channel: options.channel ?? "unknown",
         webhook: options.webhookPayload ? {
           payload: options.webhookPayload
-        } : void 0
+        } : void 0,
+        runtimeContext: options.runtimeContext,
+        threadId: options.threadId,
+        timezone: options.timezone,
+        agentId: options.agentId
       }
     },
     User: userService,
@@ -38942,7 +39259,7 @@ async function testPreProcessor(entityName, inputJson, asJson = false) {
       } else if (result.action === "block") {
         console.log(`
 Action: BLOCK`);
-        console.log(`Response: ${result.response}`);
+        console.log(`Response: ${result.response || "(none \u2014 the turn ends silently)"}`);
         if (result.metadata) {
           console.log(`Metadata: ${JSON.stringify(result.metadata, null, 2)}`);
         }
@@ -40123,6 +40440,11 @@ function getDeployHint(type) {
   };
 }
 __name(getDeployHint, "getDeployHint");
+function writePersonaServedHint(version) {
+  writeInfo(`\u{1F4A1} Persona v${version} is now served \u2014 the push published it and pointed the agent at it.`);
+  writeInfo("   Roll back with `lua deploy persona` (pick an earlier version) or `lua persona production deploy --persona-version <n>`.");
+}
+__name(writePersonaServedHint, "writePersonaServedHint");
 async function promptVersionConfirmOrUpdate(currentVersion) {
   console.log(`
 Current version: ${currentVersion || "(none - first push)"}`);
@@ -40566,6 +40888,7 @@ Until the backup catches up, \`lua init\` for this agent will restore an older s
           when: "partial"
         });
       } else if (selectedType === "backup") {
+      } else if (selectedType === "agent") {
       } else if (deployHint) {
         writeHintBlock({
           headline: "Staged but NOT live yet. To make it active:",
@@ -40703,7 +41026,7 @@ Model: ${model}`);
       personaDeployWasAttempted = true;
       productionDeployedWithAutoDeploy = await deployPersonaVersionAfterPush(apiKey, agentId, result.persona.version, options.autoDeploy || false);
     } else {
-      writeInfo("\u{1F4A1} You can deploy the persona version later using: lua deploy");
+      writePersonaServedHint(result.persona.version);
     }
   }
   const personaAutoDeployFailed = Boolean(options.autoDeploy && personaDeployEligible && personaDeployWasAttempted && !productionDeployedWithAutoDeploy);
@@ -41003,8 +41326,7 @@ ${icon} Pushing ${items.length} ${handler.displayName}(s)...`);
     };
   }
   if (personaPushResult && !options.autoDeploy) {
-    writeInfo(`\u{1F4A1} Persona v${personaPushResult.version} pushed but not active on the dashboard yet.`);
-    writeInfo("   Run `lua deploy` or re-push with `--auto-deploy` to activate it.");
+    writePersonaServedHint(personaPushResult.version);
   }
   if (options.autoDeploy && toDeploy.length > 0) {
     writeProgress("\n\u{1F680} Deploying all pushed versions to production...");
@@ -41920,7 +42242,7 @@ var ChatApi = class extends HttpClient {
             } else if (chunk.type === "postprocess-complete" && onPostprocessComplete) {
               onPostprocessComplete(chunk.originalResponse, chunk.modifiedResponse);
             } else if (chunk.type === "preprocessor_blocked" && onPreprocessorBlocked) {
-              onPreprocessorBlocked(chunk.message || "Message was blocked by a preprocessor.");
+              onPreprocessorBlocked(chunk.message || void 0);
             } else if (chunk.type === "batch-abort" && onBatchAbort) {
               onBatchAbort(chunk.message || "");
             } else if (chunk.type === "batch-handled" && onBatchHandled) {
@@ -42964,7 +43286,8 @@ async function startChatLoop(chatEnv, probeWindow) {
         onPreprocessorBlocked: /* @__PURE__ */ __name((message) => {
           stopTypingIndicator(typingInterval);
           firstChunk = false;
-          console.log(`\u{1F6AB} Message blocked: ${message}
+          console.log(message ? `\u{1F6AB} Message blocked: ${message}
+` : `\u{1F6AB} Message blocked \u2014 no reply sent
 `);
           writeNextStep({
             command: buildLogsCommand({
@@ -43154,7 +43477,7 @@ async function sendSingleMessage(chatEnv, message, probeWindow) {
       }, "onPostprocessComplete"),
       onPreprocessorBlocked: /* @__PURE__ */ __name((message2) => {
         preprocessorBlocked = true;
-        console.log(`\u{1F6AB} Message blocked: ${message2}`);
+        console.log(message2 ? `\u{1F6AB} Message blocked: ${message2}` : `\u{1F6AB} Message blocked \u2014 no reply sent`);
         writeNextStep({
           command: buildLogsCommand({
             primitiveType: "preprocessor",
@@ -52039,6 +52362,7 @@ async function deployCore(ctx, name, version) {
   emitJson(ctx, res);
   if (!ctx.json) {
     writeSuccess(`\u2705 Version ${target} of "${wf.name}" deployed`);
+    for (const w of res.data?.warnings ?? []) writeInfo(`  \u26A0 ${w.message}`);
     if (res.data?.agentVersion) writeInfo(`   agentVersion: ${JSON.stringify(res.data.agentVersion)}`);
     writeHintBlock({
       headline: "Workflow is live. Start a run, then watch it:",
@@ -52299,7 +52623,6 @@ function printRun(run, withSteps) {
       console.log(run.status === "running" ? "\n\u26A0\uFE0F  Needs a decision \u2014 a step is parked on an exception gate (the run continues past it):" : "\n\u26A0\uFE0F  Needs a decision \u2014 the run is parked on an exception gate:");
       console.log(`   lua workflows retry-step ${id} --step <id>`);
       console.log(`   lua workflows resolve-step ${id} --step <id> --outcome skip|complete|fail [--output <json|@file>]`);
-      console.log("   To start a repair run instead, decide it from the desktop run page.");
     } else if (kind === "budget") {
       console.log(`
 \u23F8\uFE0F  Paused \u2014 run budget reached (${budgetCopy(run)}):`);
@@ -52823,9 +53146,9 @@ async function retryStepCore(ctx, runId, o) {
         const cap = res.error;
         const at = typeof cap?.attempt === "number" && typeof cap?.maxAttempts === "number" ? ` (attempt ${cap.attempt} of ${cap.maxAttempts})` : "";
         detail = {
-          message: `step "${o.step}" has reached the retry cap${at} \u2014 resolve it or repair the run`,
+          message: `step "${o.step}" has reached the retry cap${at} \u2014 resolve it (skip, complete or fail)`,
           hint: `lua workflows resolve-step ${runId} --step ${o.step} --outcome skip|complete|fail
-to start a repair run instead, decide it from the desktop run page`
+no repair run exists \u2014 a run is never re-run from its ledger; if the step cannot be resolved, fail it (--outcome fail) and start a new run`
         };
       }
     }
@@ -57485,7 +57808,17 @@ async function templatePublishAction(templateApi, config, options) {
     ...options.skipAutoApply === true ? {
       skipAutoApply: true
     } : {},
-    ...sectionBody
+    ...sectionBody,
+    // selfAudit is include-ONLY-when-authored, deliberately NOT part of the C12
+    // "always serialize, empty = CLEAR" rule that governs sectionBody above. The
+    // server is inherit-when-omitted for it (agent-template.service.ts:675 +
+    // agent-template.version.schema.ts:654 "inherited from the previous
+    // version"), so an absent block must leave the previous version's config
+    // intact — we omit the key entirely rather than send an empty clear. (Not in
+    // TEMPLATE_SECTION_KEYS / the consequence diff for the same reason.)
+    ...templateSection?.selfAudit !== void 0 ? {
+      selfAudit: templateSection.selfAudit
+    } : {}
   });
   if (options.json) {
     console.log(JSON.stringify(version, null, 2));