lua-cli 3.34.0 → 3.36.0

package/dist/api-exports.js

@@ -359,10 +359,113 @@ function isDesktopFileCommandName(value3) {
 function isDesktopFileSessionId(value3) {
   return typeof value3 === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value3);
 }
+function workflowRetryMaxAttemptsMessage(got) {
+  const tail = got === void 0 ? "" : ` (got ${JSON.stringify(got)})`;
+  return `\`retry.maxAttempts\` must be an integer ${WORKFLOW_RETRY_MIN_ATTEMPTS}..${WORKFLOW_RETRY_MAX_ATTEMPTS}${tail}`;
+}
+function isWithinWorkflowRetryAttempts(value3) {
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_RETRY_MIN_ATTEMPTS && value3 <= WORKFLOW_RETRY_MAX_ATTEMPTS;
+}
+function workflowRetryUnknownMembersMessage(keys) {
+  const named = keys.map((k) => {
+    const engine = WORKFLOW_RETRY_ENGINE_KEYS.includes(k);
+    return `\`${k}\`${engine ? " (engine-owned \u2014 stamped by resetAttempts, never authored)" : ""}`;
+  });
+  return `\`retry\` has no member ${named.join(", ")}; members: ${WORKFLOW_RETRY_POLICY_KEYS.join(", ")}`;
+}
+function unknownWorkflowRetryMembers(retry) {
+  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return [];
+  return Object.keys(retry).filter((k) => !WORKFLOW_RETRY_POLICY_KEYS.includes(k));
+}
+function authoredRetryPolicy(retry) {
+  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return void 0;
+  const src = retry;
+  const out = {};
+  for (const k of WORKFLOW_RETRY_POLICY_KEYS) if (src[k] !== void 0) out[k] = src[k];
+  return Object.keys(out).length ? out : void 0;
+}
+function retryBudgetBaseAttempt(row) {
+  const base = row.retry?.budgetBaseAttempt;
+  return typeof base === "number" && Number.isSafeInteger(base) && base > 0 ? base : 0;
+}
+function retryBudgetAttempt(row) {
+  return Math.max(0, row.attempt - retryBudgetBaseAttempt(row));
+}
+function retryBudgetMaxAttempts(row) {
+  const max = row.retry?.maxAttempts;
+  return typeof max === "number" && Number.isFinite(max) && max >= 1 ? max : 1;
+}
+function retryBudgetRemaining(row) {
+  return retryBudgetAttempt(row) < retryBudgetMaxAttempts(row);
+}
+function retriesRemaining(row) {
+  return Math.max(0, retryBudgetMaxAttempts(row) - retryBudgetAttempt(row));
+}
+function workflowModelCostComparison(estimate, onAgentModel, agentModel) {
+  if (agentModel === void 0 || onAgentModel === void 0 || !(onAgentModel > 0)) return void 0;
+  const ratio = Math.round(estimate / onAgentModel * 10) / 10;
+  return `\u2248 ${ratio}\xD7 the cost of running every step on ${agentModel}`;
+}
+function modelClassRank(modelClass) {
+  return WORKFLOW_MODEL_CLASSES.indexOf(modelClass);
+}
+function modelClassesAtOrBelow(maxClass) {
+  const ceiling = modelClassRank(maxClass);
+  return WORKFLOW_MODEL_CLASSES.filter((c) => modelClassRank(c) <= ceiling);
+}
+function workflowAutonomyMaxRunsPerHourCeiling(env2) {
+  const raw = Number((env2 ?? process.env)[WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV]);
+  return Number.isFinite(raw) && raw > 0 ? raw : WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING;
+}
+function isWithinWorkflowAutonomyRange(value3, ceiling) {
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_AUTONOMY_MIN_VALUE && value3 <= ceiling;
+}
+function workflowAutonomyRangeMessage(key, ceiling) {
+  return `\`${key}\` must be an integer ${WORKFLOW_AUTONOMY_MIN_VALUE}..${ceiling}`;
+}
+function isWithinWorkflowJobRange(member, value3) {
+  const { min, max } = WORKFLOW_JOB_RANGES[member];
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= min && value3 <= max;
+}
+function workflowJobRangeMessage(member) {
+  const { min, max } = WORKFLOW_JOB_RANGES[member];
+  return `\`${member}\` must be an integer ${min}..${max}`;
+}
+function isWorkflowSingleStepType(type) {
+  return typeof type === "string" && WORKFLOW_SINGLE_STEP_TYPES.includes(type);
+}
+function isWorkflowHitlEntryType(type) {
+  return typeof type === "string" && WORKFLOW_HITL_ENTRY_TYPES.includes(type);
+}
+function isWorkflowArmEntryType(type) {
+  return typeof type === "string" && WORKFLOW_ARM_ENTRY_TYPES.includes(type);
+}
+function workflowContainerRunsHitlArm(container) {
+  return typeof container === "string" && WORKFLOW_HITL_ARM_CONTAINERS.includes(container);
+}
+function workflowHitlArmUnsupportedMessage(type, id, container) {
+  const legal = WORKFLOW_HITL_ARM_CONTAINERS.map((c) => `\`${c}\``).join(" / ");
+  return `the engine does not run \`${type}\` inside a \`${container}\` yet (node "${id}") \u2014 place it at the top level, as a ${legal} arm, or inside a child \`workflow\``;
+}
+function workflowHitlArmShapeMessage(type, id, shape) {
+  return shape === "mapped-arm" ? `\`${type}\` arm "${id}" takes the previous output as its payload \u2014 it cannot head a [mapping, step] chain; map before the container instead` : `a chunked foreach hands each child a slice of items, not one \u2014 \`${type}\` body "${id}" takes one item; drop \`chunk\``;
+}
 function isModelIdSentinel(input) {
   const lower = (input ?? "").trim().toLowerCase();
   return lower === "auto" || lower.startsWith("auto/");
 }
+function isModelClassRef(input) {
+  return modelClassOf(input) !== void 0;
+}
+function modelClassOf(input) {
+  const lower = (input ?? "").trim().toLowerCase();
+  if (!lower.startsWith(MODEL_CLASS_REF_PREFIX)) return void 0;
+  const c = lower.slice(MODEL_CLASS_REF_PREFIX.length);
+  return WORKFLOW_MODEL_CLASSES.includes(c) ? c : void 0;
+}
+function modelClassRef(modelClass) {
+  return `${MODEL_CLASS_REF_PREFIX}${modelClass}`;
+}
 function normalizeModelId(input, registry) {
   const requested = typeof input === "string" ? input.trim() : "";
   if (!requested) return {
@@ -377,6 +480,11 @@ function normalizeModelId(input, registry) {
     id: lower,
     form: "sentinel"
   };
+  if (modelClassOf(lower) !== void 0) return {
+    ok: true,
+    id: lower,
+    form: "class"
+  };
   const slash = requested.indexOf("/");
   const malformed = slash === 0;
   const provider = slash > 0 ? lower.slice(0, slash) : void 0;
@@ -437,6 +545,9 @@ function modelUnresolvedMessage(r) {
   }
   return r.candidates.length ? `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms: ${r.candidates.join(", ")}` : `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms are the registry's provider-prefixed ids (provider/model) or a bare id that names exactly one of them`;
 }
+function modelClassUnresolvedMessage(ref) {
+  return `model "${ref.trim()}" is a model-class request that was not resolved before dispatch \u2014 a class is resolved to a concrete approved model by the class map at dispatch, and is never sent to a provider as written; this step refuses rather than run on a substituted model`;
+}
 function providerModelId(code) {
   const requested = typeof code === "string" ? code.trim() : "";
   if (!requested || isModelIdSentinel(requested)) return requested;
@@ -839,75 +950,6 @@ function scheduledTimeKey(scheduledTime) {
 function scheduledWorkflowRunIdForTime(jobId, scheduledTime) {
   return scheduledWorkflowRunId(jobId, scheduledTime);
 }
-function workflowRetryMaxAttemptsMessage(got) {
-  const tail = got === void 0 ? "" : ` (got ${JSON.stringify(got)})`;
-  return `\`retry.maxAttempts\` must be an integer ${WORKFLOW_RETRY_MIN_ATTEMPTS}..${WORKFLOW_RETRY_MAX_ATTEMPTS}${tail}`;
-}
-function isWithinWorkflowRetryAttempts(value3) {
-  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_RETRY_MIN_ATTEMPTS && value3 <= WORKFLOW_RETRY_MAX_ATTEMPTS;
-}
-function workflowRetryUnknownMembersMessage(keys) {
-  const named = keys.map((k) => {
-    const engine = WORKFLOW_RETRY_ENGINE_KEYS.includes(k);
-    return `\`${k}\`${engine ? " (engine-owned \u2014 stamped by resetAttempts, never authored)" : ""}`;
-  });
-  return `\`retry\` has no member ${named.join(", ")}; members: ${WORKFLOW_RETRY_POLICY_KEYS.join(", ")}`;
-}
-function unknownWorkflowRetryMembers(retry) {
-  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return [];
-  return Object.keys(retry).filter((k) => !WORKFLOW_RETRY_POLICY_KEYS.includes(k));
-}
-function authoredRetryPolicy(retry) {
-  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return void 0;
-  const src = retry;
-  const out = {};
-  for (const k of WORKFLOW_RETRY_POLICY_KEYS) if (src[k] !== void 0) out[k] = src[k];
-  return Object.keys(out).length ? out : void 0;
-}
-function retryBudgetBaseAttempt(row) {
-  const base = row.retry?.budgetBaseAttempt;
-  return typeof base === "number" && Number.isSafeInteger(base) && base > 0 ? base : 0;
-}
-function retryBudgetAttempt(row) {
-  return Math.max(0, row.attempt - retryBudgetBaseAttempt(row));
-}
-function retryBudgetMaxAttempts(row) {
-  const max = row.retry?.maxAttempts;
-  return typeof max === "number" && Number.isFinite(max) && max >= 1 ? max : 1;
-}
-function retryBudgetRemaining(row) {
-  return retryBudgetAttempt(row) < retryBudgetMaxAttempts(row);
-}
-function retriesRemaining(row) {
-  return Math.max(0, retryBudgetMaxAttempts(row) - retryBudgetAttempt(row));
-}
-function isWithinWorkflowJobRange(member, value3) {
-  const { min, max } = WORKFLOW_JOB_RANGES[member];
-  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= min && value3 <= max;
-}
-function workflowJobRangeMessage(member) {
-  const { min, max } = WORKFLOW_JOB_RANGES[member];
-  return `\`${member}\` must be an integer ${min}..${max}`;
-}
-function isWorkflowSingleStepType(type) {
-  return typeof type === "string" && WORKFLOW_SINGLE_STEP_TYPES.includes(type);
-}
-function isWorkflowHitlEntryType(type) {
-  return typeof type === "string" && WORKFLOW_HITL_ENTRY_TYPES.includes(type);
-}
-function isWorkflowArmEntryType(type) {
-  return typeof type === "string" && WORKFLOW_ARM_ENTRY_TYPES.includes(type);
-}
-function workflowContainerRunsHitlArm(container) {
-  return typeof container === "string" && WORKFLOW_HITL_ARM_CONTAINERS.includes(container);
-}
-function workflowHitlArmUnsupportedMessage(type, id, container) {
-  const legal = WORKFLOW_HITL_ARM_CONTAINERS.map((c) => `\`${c}\``).join(" / ");
-  return `the engine does not run \`${type}\` inside a \`${container}\` yet (node "${id}") \u2014 place it at the top level, as a ${legal} arm, or inside a child \`workflow\``;
-}
-function workflowHitlArmShapeMessage(type, id, shape) {
-  return shape === "mapped-arm" ? `\`${type}\` arm "${id}" takes the previous output as its payload \u2014 it cannot head a [mapping, step] chain; map before the container instead` : `a chunked foreach hands each child a slice of items, not one \u2014 \`${type}\` body "${id}" takes one item; drop \`chunk\``;
-}
 function workflowGoalJudgeKind(judge) {
   return judge && typeof judge === "object" && judge.predicate !== void 0 ? "predicate" : "agent";
 }
@@ -1212,7 +1254,7 @@ function effectiveAgentFeatures(base, override, rule) {
   if (rule === "wholesale") return override || base || void 0;
   return effectiveAgentFeatureRows(base, override).rows;
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1534,16 +1576,202 @@ var init_dist = __esm({
     __name2(isDesktopFileCommandName, "isDesktopFileCommandName");
     __name(isDesktopFileSessionId, "isDesktopFileSessionId");
     __name2(isDesktopFileSessionId, "isDesktopFileSessionId");
+    WORKFLOW_RETRY_BACKOFFS = [
+      "fixed",
+      "exponential"
+    ];
+    WORKFLOW_RETRY_MIN_ATTEMPTS = 1;
+    WORKFLOW_RETRY_POLICY_KEYS = [
+      "maxAttempts",
+      "backoffSeconds",
+      "backoff",
+      "maxBackoffSeconds"
+    ];
+    WORKFLOW_RETRY_MAX_ATTEMPTS = 20;
+    __name(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
+    __name2(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
+    __name(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
+    __name2(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
+    WORKFLOW_RETRY_ENGINE_KEYS = [
+      "budgetBaseAttempt"
+    ];
+    __name(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
+    __name2(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
+    __name(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
+    __name2(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
+    __name(authoredRetryPolicy, "authoredRetryPolicy");
+    __name2(authoredRetryPolicy, "authoredRetryPolicy");
+    __name(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
+    __name2(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
+    __name(retryBudgetAttempt, "retryBudgetAttempt");
+    __name2(retryBudgetAttempt, "retryBudgetAttempt");
+    __name(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
+    __name2(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
+    __name(retryBudgetRemaining, "retryBudgetRemaining");
+    __name2(retryBudgetRemaining, "retryBudgetRemaining");
+    __name(retriesRemaining, "retriesRemaining");
+    __name2(retriesRemaining, "retriesRemaining");
+    WORKFLOW_JOB_RESOURCES = [
+      "small",
+      "medium",
+      "large"
+    ];
+    WORKFLOW_SIDE_EFFECTS = [
+      "none",
+      "external"
+    ];
+    WORKFLOW_MODEL_CLASSES = [
+      "fast",
+      "balanced",
+      "strong"
+    ];
+    __name(workflowModelCostComparison, "workflowModelCostComparison");
+    __name2(workflowModelCostComparison, "workflowModelCostComparison");
+    WORKFLOW_DEFAULT_TASK_CLASS_MAP = Object.freeze({
+      classify: "fast",
+      extract: "fast",
+      transform: "fast",
+      draft: "balanced",
+      research: "balanced",
+      judge: "balanced",
+      reason: "strong",
+      code: "strong"
+    });
+    WORKFLOW_MODELS_MAX_CLASS_DEFAULT = WORKFLOW_MODEL_CLASSES[WORKFLOW_MODEL_CLASSES.length - 1];
+    __name(modelClassRank, "modelClassRank");
+    __name2(modelClassRank, "modelClassRank");
+    __name(modelClassesAtOrBelow, "modelClassesAtOrBelow");
+    __name2(modelClassesAtOrBelow, "modelClassesAtOrBelow");
+    WORKFLOW_AUTONOMY_NUMERIC_KEYS = [
+      "maxCredits",
+      "maxSteps",
+      "maxDurationSeconds",
+      "maxActions",
+      "maxRunsPerHour"
+    ];
+    WORKFLOW_AUTONOMY_ENVELOPE_KEYS = [
+      "enabled",
+      ...WORKFLOW_AUTONOMY_NUMERIC_KEYS,
+      "forms"
+    ];
+    WORKFLOW_AUTONOMY_DEFAULTS = Object.freeze({
+      maxCredits: 20,
+      maxSteps: 15,
+      maxDurationSeconds: 86400,
+      maxRunsPerHour: 20
+    });
+    WORKFLOW_AUTONOMY_CEILINGS = Object.freeze({
+      maxSteps: 40,
+      maxDurationSeconds: 604800
+    });
+    WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV = "LUA_WF_AUTONOMY_MAX_RUNS_PER_HOUR";
+    WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING = 200;
+    __name(workflowAutonomyMaxRunsPerHourCeiling, "workflowAutonomyMaxRunsPerHourCeiling");
+    __name2(workflowAutonomyMaxRunsPerHourCeiling, "workflowAutonomyMaxRunsPerHourCeiling");
+    WORKFLOW_AUTONOMY_FORMS_DEFAULT = Object.freeze([
+      "graph",
+      "static"
+    ]);
+    WORKFLOW_AUTONOMY_MIN_VALUE = 1;
+    __name(isWithinWorkflowAutonomyRange, "isWithinWorkflowAutonomyRange");
+    __name2(isWithinWorkflowAutonomyRange, "isWithinWorkflowAutonomyRange");
+    __name(workflowAutonomyRangeMessage, "workflowAutonomyRangeMessage");
+    __name2(workflowAutonomyRangeMessage, "workflowAutonomyRangeMessage");
+    WORKFLOW_JOB_RANGES = Object.freeze({
+      /** Coding-turn cap (`claude -p --max-turns`); absent ⇒ the cluster default (LUA_WF_JOB_MAX_TURNS). */
+      maxTurns: Object.freeze({
+        min: 1,
+        max: 500
+      }),
+      /** Harness messages per attempt (one per content block); absent ⇒ the cluster default (400). */
+      maxMessages: Object.freeze({
+        min: 1,
+        max: 5e3
+      }),
+      /** Input-side tokens per attempt (prompt + cache); absent ⇒ the cluster default (4M — LUA-708, was 30M). */
+      maxInputTokens: Object.freeze({
+        min: 1e6,
+        max: 5e8
+      })
+    });
+    WORKFLOW_JOB_RANGE_MEMBERS = Object.keys(WORKFLOW_JOB_RANGES);
+    __name(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
+    __name2(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
+    __name(workflowJobRangeMessage, "workflowJobRangeMessage");
+    __name2(workflowJobRangeMessage, "workflowJobRangeMessage");
+    WORKFLOW_SINGLE_STEP_TYPES = [
+      "agent",
+      "tool",
+      "workflow",
+      "step"
+    ];
+    WORKFLOW_HITL_ENTRY_TYPES = [
+      "approval",
+      "waitForSignal"
+    ];
+    WORKFLOW_ARM_ENTRY_TYPES = [
+      ...WORKFLOW_SINGLE_STEP_TYPES,
+      ...WORKFLOW_HITL_ENTRY_TYPES
+    ];
+    WORKFLOW_HITL_ARM_CONTAINERS = [
+      "parallel",
+      "conditional",
+      "foreach"
+    ];
+    __name(isWorkflowSingleStepType, "isWorkflowSingleStepType");
+    __name2(isWorkflowSingleStepType, "isWorkflowSingleStepType");
+    __name(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
+    __name2(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
+    __name(isWorkflowArmEntryType, "isWorkflowArmEntryType");
+    __name2(isWorkflowArmEntryType, "isWorkflowArmEntryType");
+    __name(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
+    __name2(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
+    __name(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
+    __name2(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
+    __name(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
+    __name2(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
+    WORKFLOW_GRAPH_ENTRY_STEP_KINDS = Object.freeze({
+      agent: "agent",
+      tool: "tool",
+      workflow: "subrun",
+      step: "code",
+      mapping: "map",
+      sleep: "sleep",
+      sleepUntil: "sleepUntil",
+      parallel: null,
+      conditional: "branch",
+      foreach: "foreach",
+      loop: "loop",
+      approval: "approval",
+      waitForSignal: "signal"
+    });
+    WORKFLOW_ARM_ENTRY_STEP_KINDS = Object.freeze(Object.fromEntries(WORKFLOW_ARM_ENTRY_TYPES.map((t) => [
+      t,
+      WORKFLOW_GRAPH_ENTRY_STEP_KINDS[t]
+    ])));
+    WORKFLOW_BUDGET_MAX_DURATION_SECONDS = Object.freeze({
+      min: 60,
+      max: 2592e3
+    });
     MODEL_ID_BYOK_PROVIDERS = [
       "azure",
       "bedrock"
     ];
     __name(isModelIdSentinel, "isModelIdSentinel");
     __name2(isModelIdSentinel, "isModelIdSentinel");
+    MODEL_CLASS_REF_PREFIX = "class/";
+    __name(isModelClassRef, "isModelClassRef");
+    __name2(isModelClassRef, "isModelClassRef");
+    __name(modelClassOf, "modelClassOf");
+    __name2(modelClassOf, "modelClassOf");
+    __name(modelClassRef, "modelClassRef");
+    __name2(modelClassRef, "modelClassRef");
     __name(normalizeModelId, "normalizeModelId");
     __name2(normalizeModelId, "normalizeModelId");
     __name(modelUnresolvedMessage, "modelUnresolvedMessage");
     __name2(modelUnresolvedMessage, "modelUnresolvedMessage");
+    __name(modelClassUnresolvedMessage, "modelClassUnresolvedMessage");
+    __name2(modelClassUnresolvedMessage, "modelClassUnresolvedMessage");
     __name(providerModelId, "providerModelId");
     __name2(providerModelId, "providerModelId");
     MODEL_SNAPSHOT_SUFFIX = /(?:[-@](?:19|20)\d{2}(?:0[1-9]|1[0-2])(?:0[1-9]|[12]\d|3[01])|-(?:19|20)\d{2}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01]))$/;
@@ -2175,7 +2403,15 @@ This text is who you are for this person. As you learn them, their name, their w
         "org-grant",
         "agent-grant-only"
       ]).describe("For user and staff principals, grant provenance: org-grant means a stored org grant produced the row. For owner-ceiling API keys, effective provenance: org-grant means the credential-owner intersection has org-level capability; agent-grant-only means the intersection reaches only an exact agent inside the org."),
-      anomalies: z3.array(ProjectionAnomalySchema).optional()
+      anomalies: z3.array(ProjectionAnomalySchema).optional(),
+      /**
+       * How many agents and Spaces in this org the caller can read — the size of
+       * the org's resource page under the same discovery rule, without paging it.
+       */
+      resourceCounts: z3.object({
+        agents: z3.number().int().nonnegative(),
+        spaces: z3.number().int().nonnegative()
+      }).optional()
     }).passthrough();
     ProjectedResourceSchema = z3.object({
       resourceType: z3.literal("agent"),
@@ -2214,7 +2450,21 @@ This text is who you are for this person. As you learn them, their name, their w
         id: z3.string().min(1).max(256),
         name: z3.string().optional(),
         email: z3.string().optional()
-      }).optional()
+      }).optional(),
+      /**
+       * Presentation enrichment (PRO-1994), product data only — never influences
+       * discovery. These moved off the O(orgs) `/context` roster onto the bounded
+       * per-active-org resource page so Desktop stops paying an org-count-scaled
+       * cost at sign-in. `persona`/`avatar` are loose (`PersonaText` / `AgentAvatar`
+       * are structured-or-string), `platform` marks the org's Designer agent
+       * (previously stamped only by `/context`; retires with PRO-1657).
+       */
+      persona: z3.unknown().optional(),
+      description: z3.string().optional(),
+      avatar: z3.unknown().nullish(),
+      platform: z3.boolean().optional(),
+      /** A Space's supervised agent ids (`kind: 'space'` rows only). */
+      supervisedAgents: z3.array(z3.string()).optional()
     }).passthrough();
     CapabilityProfilesSchema = z3.record(z3.string().min(1).max(64), z3.array(ProjectedScopeSchema));
     RoleCatalogSchema = z3.record(z3.string().min(1).max(128), z3.object({
@@ -2304,7 +2554,8 @@ This text is who you are for this person. As you learn them, their name, their w
       "org_archived",
       "disabled",
       "exception",
-      "budget"
+      "budget",
+      "model_policy"
     ];
     WORKFLOW_STEP_STATUSES = [
       "pending",
@@ -2388,126 +2639,6 @@ This text is who you are for this person. As you learn them, their name, their w
     ];
     WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES = 64 * 1024;
     WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES = 256 * 1024;
-    WORKFLOW_RETRY_BACKOFFS = [
-      "fixed",
-      "exponential"
-    ];
-    WORKFLOW_RETRY_MIN_ATTEMPTS = 1;
-    WORKFLOW_RETRY_POLICY_KEYS = [
-      "maxAttempts",
-      "backoffSeconds",
-      "backoff",
-      "maxBackoffSeconds"
-    ];
-    WORKFLOW_RETRY_MAX_ATTEMPTS = 20;
-    __name(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
-    __name2(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
-    __name(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
-    __name2(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
-    WORKFLOW_RETRY_ENGINE_KEYS = [
-      "budgetBaseAttempt"
-    ];
-    __name(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
-    __name2(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
-    __name(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
-    __name2(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
-    __name(authoredRetryPolicy, "authoredRetryPolicy");
-    __name2(authoredRetryPolicy, "authoredRetryPolicy");
-    __name(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
-    __name2(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
-    __name(retryBudgetAttempt, "retryBudgetAttempt");
-    __name2(retryBudgetAttempt, "retryBudgetAttempt");
-    __name(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
-    __name2(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
-    __name(retryBudgetRemaining, "retryBudgetRemaining");
-    __name2(retryBudgetRemaining, "retryBudgetRemaining");
-    __name(retriesRemaining, "retriesRemaining");
-    __name2(retriesRemaining, "retriesRemaining");
-    WORKFLOW_JOB_RESOURCES = [
-      "small",
-      "medium",
-      "large"
-    ];
-    WORKFLOW_SIDE_EFFECTS = [
-      "none",
-      "external"
-    ];
-    WORKFLOW_JOB_RANGES = Object.freeze({
-      /** Coding-turn cap (`claude -p --max-turns`); absent ⇒ the cluster default (LUA_WF_JOB_MAX_TURNS). */
-      maxTurns: Object.freeze({
-        min: 1,
-        max: 500
-      }),
-      /** Harness messages per attempt (one per content block); absent ⇒ the cluster default (400). */
-      maxMessages: Object.freeze({
-        min: 1,
-        max: 5e3
-      }),
-      /** Input-side tokens per attempt (prompt + cache); absent ⇒ the cluster default (4M — LUA-708, was 30M). */
-      maxInputTokens: Object.freeze({
-        min: 1e6,
-        max: 5e8
-      })
-    });
-    WORKFLOW_JOB_RANGE_MEMBERS = Object.keys(WORKFLOW_JOB_RANGES);
-    __name(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
-    __name2(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
-    __name(workflowJobRangeMessage, "workflowJobRangeMessage");
-    __name2(workflowJobRangeMessage, "workflowJobRangeMessage");
-    WORKFLOW_SINGLE_STEP_TYPES = [
-      "agent",
-      "tool",
-      "workflow",
-      "step"
-    ];
-    WORKFLOW_HITL_ENTRY_TYPES = [
-      "approval",
-      "waitForSignal"
-    ];
-    WORKFLOW_ARM_ENTRY_TYPES = [
-      ...WORKFLOW_SINGLE_STEP_TYPES,
-      ...WORKFLOW_HITL_ENTRY_TYPES
-    ];
-    WORKFLOW_HITL_ARM_CONTAINERS = [
-      "parallel",
-      "conditional",
-      "foreach"
-    ];
-    __name(isWorkflowSingleStepType, "isWorkflowSingleStepType");
-    __name2(isWorkflowSingleStepType, "isWorkflowSingleStepType");
-    __name(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
-    __name2(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
-    __name(isWorkflowArmEntryType, "isWorkflowArmEntryType");
-    __name2(isWorkflowArmEntryType, "isWorkflowArmEntryType");
-    __name(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
-    __name2(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
-    __name(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
-    __name2(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
-    __name(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
-    __name2(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
-    WORKFLOW_GRAPH_ENTRY_STEP_KINDS = Object.freeze({
-      agent: "agent",
-      tool: "tool",
-      workflow: "subrun",
-      step: "code",
-      mapping: "map",
-      sleep: "sleep",
-      sleepUntil: "sleepUntil",
-      parallel: null,
-      conditional: "branch",
-      foreach: "foreach",
-      loop: "loop",
-      approval: "approval",
-      waitForSignal: "signal"
-    });
-    WORKFLOW_ARM_ENTRY_STEP_KINDS = Object.freeze(Object.fromEntries(WORKFLOW_ARM_ENTRY_TYPES.map((t) => [
-      t,
-      WORKFLOW_GRAPH_ENTRY_STEP_KINDS[t]
-    ])));
-    WORKFLOW_BUDGET_MAX_DURATION_SECONDS = Object.freeze({
-      min: 60,
-      max: 2592e3
-    });
     WORKFLOW_GOAL_JUDGE_SELF = "$self";
     __name(workflowGoalJudgeKind, "workflowGoalJudgeKind");
     __name2(workflowGoalJudgeKind, "workflowGoalJudgeKind");
@@ -2712,7 +2843,20 @@ This text is who you are for this person. As you learn them, their name, their w
       "workflow.export.auto_pushed",
       "workflow.retention.restamped",
       "workflow.retention.reaped",
-      "workflow.run.schema_migrated"
+      "workflow.run.schema_migrated",
+      // --- per-step model selection (Workflow Model Selection plan 6.5 / Appendix C.4) ---
+      /** A `PATCH /admin/orgs/:orgId/workflow-policy` that changed the `models` block (who, what moved). */
+      "workflow.policy.models_changed",
+      /** A step's invocation hopped to another leg of its class — `{from, to, reason}`, priced at the served model. */
+      "workflow.step.model_fallback",
+      // --- autonomy envelope (Workflow autonomy plan A1; research/consent-gates.md §H2) ---
+      /**
+      * A start the consent ladder would have PARKED was admitted by `workflowPolicy.autonomy` instead —
+      * `WorkflowRunAutonomyAppliedPayload`. Deliberately NOT `workflow.run.gate_cleared`: nothing was
+      * gated and nobody approved it, and conflating the two would make "who approved this run"
+      * unanswerable for every run of either kind (§H2 "Audit").
+      */
+      "workflow.run.autonomy_applied"
     ];
     WORKFLOW_AUDIT_METADATA_MAX_BYTES = 4 * 1024;
     __name(isWorkflowAuditEvent, "isWorkflowAuditEvent");
@@ -3172,7 +3316,7 @@ function modelTemplateInvalidMessage(model, why) {
   return `model "${model.trim()}" is not a valid run-input-bound model placeholder \u2014 ${why}; the forms are \${initData.<path>} and \${initData.<path>|<provider/model default>}`;
 }
 function modelTemplateDefaultRequiredMessage(model) {
-  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")}`;
+  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")} or a class reference (|class/fast, |class/balanced, |class/strong)`;
 }
 function staticModelPin(model) {
   if (typeof model !== "string") return void 0;
@@ -3764,6 +3908,21 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("required-connection-unknown", `requiredConnections ${JSON.stringify(unknown)} are neither declared connections[].key values nor connections the owner can mount`, `${path3}.requiredConnections`, singleId(node));
     }
   }, "checkRequiredConnections");
+  const jobClassifiablePin = /* @__PURE__ */ __name4((model) => {
+    const pin = staticModelPin(model);
+    const modelClass = modelClassOf(pin);
+    if (modelClass === void 0) return pin;
+    const codes = opts.classMap?.[modelClass];
+    if (!codes) return void 0;
+    const jobProviders = opts.policy?.jobProviders;
+    for (const code of codes) {
+      const p = classifyModelProvider(code);
+      if (p === null) continue;
+      if (jobProviders && !jobProviders.includes(p)) continue;
+      return code;
+    }
+    return void 0;
+  }, "jobClassifiablePin");
   const checkTier = /* @__PURE__ */ __name4((node, path3) => {
     const id = singleId(node);
     if (node.workspace && node.workspace !== "inherit" && node.tier !== void 0 && node.tier !== "job") {
@@ -3772,7 +3931,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.harness !== void 0 && node.tier !== "job") {
       err("harness-requires-job-tier", "`harness` is only legal on a tier:'job' agent step", `${path3}.harness`, id);
     }
-    const provider = node.type === "agent" ? classifyModelProvider(staticModelPin(node.model)) : null;
+    const provider = node.type === "agent" ? classifyModelProvider(jobClassifiablePin(node.model)) : null;
     if (node.harness === "claude-code" && provider !== null && provider !== "anthropic") {
       err("harness-provider-mismatch", `harness:'claude-code' needs an Anthropic model (model "${node.type === "agent" ? node.model : ""}" is ${provider})`, `${path3}.harness`, id);
     }
@@ -3796,6 +3955,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     const pin = parsed.kind === "template" ? parsed.template.default : node.model;
     if (pin === void 0) return;
+    if (isModelClassRef(pin)) return;
     const inContext = /* @__PURE__ */ __name4((message) => parsed.kind === "template" ? `${message} (the default of ${parsed.template.placeholder})` : message, "inContext");
     const registry = opts.approvedModels;
     if (registry === void 0) return;
@@ -3809,6 +3969,12 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     const resolved = normalizeModelId(pin, registry);
     if (!resolved.ok) err("model-unresolved", inContext(modelUnresolvedMessage(resolved)), `${path3}.model`, id);
   }, "checkModel");
+  const checkTaskClass = /* @__PURE__ */ __name4((node, path3) => {
+    if (node.type !== "agent" || node.taskClass === void 0) return;
+    if (!opts.static) return;
+    if (typeof node.model === "string" && node.model.trim()) return;
+    err("task-class-without-model", `taskClass '${String(node.taskClass)}' needs a \`model\` on a pushed definition \u2014 write a class (model: 'class/fast' | 'class/balanced' | 'class/strong') or an approved provider/model code; nothing maps a task class to a model at dispatch, so a step with neither would run on the agent\u2019s own model`, `${path3}.taskClass`, singleId(node));
+  }, "checkTaskClass");
   const checkWorkspace = /* @__PURE__ */ __name4((node, path3) => {
     const id = singleId(node);
     const ws = workspaceOf(node);
@@ -3895,6 +4061,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     checkTimeout(node, path3);
     checkTier(node, path3);
     checkModel(node, path3);
+    checkTaskClass(node, path3);
     checkRetry(node, path3);
     checkWorkspace(node, path3);
     if (!opts.static) {
@@ -7461,6 +7628,10 @@ var init_workflow = __esm({
           maxDurationSeconds: cfg.budget?.maxDurationSeconds ?? (hitl ? WORKFLOW_HITL_MAX_DURATION_SECONDS : WORKFLOW_DEFAULT_MAX_DURATION_SECONDS)
         });
         const envelope = {
+          // A plain build/push is ALWAYS marker 1 (plan 6.4's compatibility row: "a CLI test that a plain push of
+          // such a definition stays at 1"). Moving a definition to 2 — the effort marker — is an explicit act
+          // (`lua push --apply-effort`, or a new compose while assignment is on), never a side effect of the SDK
+          // gaining an `effort` member.
           luaWorkflow: 1,
           budget,
           definition: defined({
@@ -7781,6 +7952,10 @@ var init_workflow = __esm({
           promptTemplate: templateText(opts.prompt),
           outputSchema: schemaToJson(opts.outputSchema),
           model: opts.model,
+          taskClass: opts.taskClass,
+          requires: opts.requires,
+          modelReason: opts.modelReason,
+          effort: opts.effort,
           toolScope: opts.toolScope,
           systemPrompt: opts.systemPrompt,
           timeoutSeconds: opts.timeoutSeconds,
@@ -14992,6 +15167,68 @@ var init_workflow_api_service = __esm({
         const qs = query.toString();
         return this.httpGet(`${this.runs}/${runId}/steps/${pathId(stepId)}/job${qs ? `?${qs}` : ""}`, await this.auth());
       }
+      // ─── [WMC-E7] Per-step model selection (§6.5, §6.7) ───
+      /**
+      * §6.5 — the organization's workflow policy, `models` block included. The route is the organization's, not
+      * the agent's, so the orgId comes from the project config rather than from `this.agentId`.
+      */
+      async getWorkflowPolicy(orgId, opts = {}) {
+        const qs = opts.effective ? "?effective=true" : "";
+        return this.httpGet(`/admin/orgs/${encodeURIComponent(orgId)}/workflow-policy${qs}`, await this.auth());
+      }
+      /**
+      * §6.5 — PATCH the `models` block. Only the members the caller named are sent, so a `set` of one field
+      * never clears the rest; the server validates against the organization's effective model set and refuses
+      * with a code the CLI prints verbatim (a class with no eligible row, a cap the raise would exceed).
+      */
+      async patchWorkflowPolicyModels(orgId, models) {
+        return this.httpPatch(`/admin/orgs/${encodeURIComponent(orgId)}/workflow-policy`, {
+          models
+        }, await this.auth());
+      }
+      // ─── [WMC-A6] Autonomy — the pre-consented envelope (research §H3) ───
+      /**
+      * PATCH the `autonomy` block of the ORGANIZATION's policy — the same R23 route the `models` block uses, and
+      * a sibling of it in the body, so one PATCH never has to carry two blocks it did not mean to touch.
+      *
+      * A member sent as `null` is CLEARED (`--clear`); a member omitted is left exactly as it was. That
+      * distinction is the route's, not the CLI's — which is why the patch type carries `null` rather than the CLI
+      * collapsing it to an absent key on the way out.
+      *
+      * Every ceiling is the server's: `caps.maxCreditsPerRun`, the organization's own `models.consentActions` and
+      * the platform's runs-per-hour env are all figures this client has never seen, so a value above one comes
+      * back as a typed 400 and is printed verbatim.
+      */
+      async patchWorkflowPolicyAutonomy(orgId, autonomy) {
+        return this.httpPatch(`/admin/orgs/${encodeURIComponent(orgId)}/workflow-policy`, {
+          autonomy
+        }, await this.auth());
+      }
+      /*
+      * There is deliberately NO per-agent writer here. `SubAgentWorkflowSettings.autonomy` is read by
+      * `effectiveWorkflowAutonomy`, but no HTTP surface writes it: `UpdateSubAgentRequestDto` has no
+      * `workflows` member, so a PATCH carrying one is accepted and DISCARDED. A client method that posted a
+      * narrowing into that hole would return 200 and change nothing, and the CLI would print a success line
+      * over it — on a consent surface, a false confirmation is worse than a missing feature. The read half
+      * already works: `?effective=true` shows a per-agent narrowing when the projection carries one.
+      */
+      /**
+      * §6.5 — clear a run gate by kind. `model_policy` is the kind a class request that could not be resolved
+      * parks on; the sweep clears it on its own when the switch returns, and this is the by-hand path.
+      */
+      async clearRunGate(runId, kind) {
+        return this.httpPost(`${this.runs}/${runId}/clear-gate`, {
+          kind
+        }, await this.auth());
+      }
+      /**
+      * §6.4 (Q19) — the deterministic rewrite of a dynamic parent's stored task classes into `class/<c>`.
+      * Not a fresh model composition: the server rewrites and publishes a NEW version on the immutable parent,
+      * and answers with it, so the CLI only has to print the version it got back.
+      */
+      async recomposeWorkflow(workflowId) {
+        return this.httpPost(`${this.base}/${workflowId}/recompose`, {}, await this.auth());
+      }
     };
   }
 });
@@ -16106,8 +16343,11 @@ var User = {
   },
   /**
   * PRO-1208 (B7) — push an approve/redirect/fix card to YOUR OWN inbox.
-  * Capped (5/day per agent), urgent-clamped, same-`key` deduped (revise in
-  * place). Cap-hit resolves to `{outcome: 'capped'}` — never throws.
+  * Capped per kind at 500/day per agent per end-user by default
+  * (`LUA_INBOX_AGENT_DEPOSIT_DAILY_CAP`); `priority: 'urgent'` is limited to
+  * 5/day by default (`LUA_INBOX_URGENT_PUSH_DAILY_CAP`) and lands demoted to
+  * `high` when over budget — never dropped. Same-`key` pushes revise in place.
+  * Cap-hit resolves to `{outcome: 'capped'}` — never throws.
   *
   * @example
   * const receipt = await User.Inbox.push({