lua-cli 3.35.0 → 3.36.0

package/dist/index.js

@@ -1182,10 +1182,113 @@ function isDesktopFileCommandName(value3) {
 function isDesktopFileSessionId(value3) {
   return typeof value3 === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value3);
 }
+function workflowRetryMaxAttemptsMessage(got) {
+  const tail = got === void 0 ? "" : ` (got ${JSON.stringify(got)})`;
+  return `\`retry.maxAttempts\` must be an integer ${WORKFLOW_RETRY_MIN_ATTEMPTS}..${WORKFLOW_RETRY_MAX_ATTEMPTS}${tail}`;
+}
+function isWithinWorkflowRetryAttempts(value3) {
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_RETRY_MIN_ATTEMPTS && value3 <= WORKFLOW_RETRY_MAX_ATTEMPTS;
+}
+function workflowRetryUnknownMembersMessage(keys) {
+  const named = keys.map((k) => {
+    const engine = WORKFLOW_RETRY_ENGINE_KEYS.includes(k);
+    return `\`${k}\`${engine ? " (engine-owned \u2014 stamped by resetAttempts, never authored)" : ""}`;
+  });
+  return `\`retry\` has no member ${named.join(", ")}; members: ${WORKFLOW_RETRY_POLICY_KEYS.join(", ")}`;
+}
+function unknownWorkflowRetryMembers(retry) {
+  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return [];
+  return Object.keys(retry).filter((k) => !WORKFLOW_RETRY_POLICY_KEYS.includes(k));
+}
+function authoredRetryPolicy(retry) {
+  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return void 0;
+  const src = retry;
+  const out = {};
+  for (const k of WORKFLOW_RETRY_POLICY_KEYS) if (src[k] !== void 0) out[k] = src[k];
+  return Object.keys(out).length ? out : void 0;
+}
+function retryBudgetBaseAttempt(row2) {
+  const base = row2.retry?.budgetBaseAttempt;
+  return typeof base === "number" && Number.isSafeInteger(base) && base > 0 ? base : 0;
+}
+function retryBudgetAttempt(row2) {
+  return Math.max(0, row2.attempt - retryBudgetBaseAttempt(row2));
+}
+function retryBudgetMaxAttempts(row2) {
+  const max = row2.retry?.maxAttempts;
+  return typeof max === "number" && Number.isFinite(max) && max >= 1 ? max : 1;
+}
+function retryBudgetRemaining(row2) {
+  return retryBudgetAttempt(row2) < retryBudgetMaxAttempts(row2);
+}
+function retriesRemaining(row2) {
+  return Math.max(0, retryBudgetMaxAttempts(row2) - retryBudgetAttempt(row2));
+}
+function workflowModelCostComparison(estimate, onAgentModel, agentModel) {
+  if (agentModel === void 0 || onAgentModel === void 0 || !(onAgentModel > 0)) return void 0;
+  const ratio = Math.round(estimate / onAgentModel * 10) / 10;
+  return `\u2248 ${ratio}\xD7 the cost of running every step on ${agentModel}`;
+}
+function modelClassRank(modelClass) {
+  return WORKFLOW_MODEL_CLASSES.indexOf(modelClass);
+}
+function modelClassesAtOrBelow(maxClass) {
+  const ceiling = modelClassRank(maxClass);
+  return WORKFLOW_MODEL_CLASSES.filter((c) => modelClassRank(c) <= ceiling);
+}
+function workflowAutonomyMaxRunsPerHourCeiling(env) {
+  const raw = Number((env ?? process.env)[WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV]);
+  return Number.isFinite(raw) && raw > 0 ? raw : WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING;
+}
+function isWithinWorkflowAutonomyRange(value3, ceiling) {
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_AUTONOMY_MIN_VALUE && value3 <= ceiling;
+}
+function workflowAutonomyRangeMessage(key, ceiling) {
+  return `\`${key}\` must be an integer ${WORKFLOW_AUTONOMY_MIN_VALUE}..${ceiling}`;
+}
+function isWithinWorkflowJobRange(member, value3) {
+  const { min, max } = WORKFLOW_JOB_RANGES[member];
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= min && value3 <= max;
+}
+function workflowJobRangeMessage(member) {
+  const { min, max } = WORKFLOW_JOB_RANGES[member];
+  return `\`${member}\` must be an integer ${min}..${max}`;
+}
+function isWorkflowSingleStepType(type) {
+  return typeof type === "string" && WORKFLOW_SINGLE_STEP_TYPES.includes(type);
+}
+function isWorkflowHitlEntryType(type) {
+  return typeof type === "string" && WORKFLOW_HITL_ENTRY_TYPES.includes(type);
+}
+function isWorkflowArmEntryType(type) {
+  return typeof type === "string" && WORKFLOW_ARM_ENTRY_TYPES.includes(type);
+}
+function workflowContainerRunsHitlArm(container) {
+  return typeof container === "string" && WORKFLOW_HITL_ARM_CONTAINERS.includes(container);
+}
+function workflowHitlArmUnsupportedMessage(type, id, container) {
+  const legal = WORKFLOW_HITL_ARM_CONTAINERS.map((c) => `\`${c}\``).join(" / ");
+  return `the engine does not run \`${type}\` inside a \`${container}\` yet (node "${id}") \u2014 place it at the top level, as a ${legal} arm, or inside a child \`workflow\``;
+}
+function workflowHitlArmShapeMessage(type, id, shape) {
+  return shape === "mapped-arm" ? `\`${type}\` arm "${id}" takes the previous output as its payload \u2014 it cannot head a [mapping, step] chain; map before the container instead` : `a chunked foreach hands each child a slice of items, not one \u2014 \`${type}\` body "${id}" takes one item; drop \`chunk\``;
+}
 function isModelIdSentinel(input) {
   const lower = (input ?? "").trim().toLowerCase();
   return lower === "auto" || lower.startsWith("auto/");
 }
+function isModelClassRef(input) {
+  return modelClassOf(input) !== void 0;
+}
+function modelClassOf(input) {
+  const lower = (input ?? "").trim().toLowerCase();
+  if (!lower.startsWith(MODEL_CLASS_REF_PREFIX)) return void 0;
+  const c = lower.slice(MODEL_CLASS_REF_PREFIX.length);
+  return WORKFLOW_MODEL_CLASSES.includes(c) ? c : void 0;
+}
+function modelClassRef(modelClass) {
+  return `${MODEL_CLASS_REF_PREFIX}${modelClass}`;
+}
 function normalizeModelId(input, registry) {
   const requested = typeof input === "string" ? input.trim() : "";
   if (!requested) return {
@@ -1200,6 +1303,11 @@ function normalizeModelId(input, registry) {
     id: lower,
     form: "sentinel"
   };
+  if (modelClassOf(lower) !== void 0) return {
+    ok: true,
+    id: lower,
+    form: "class"
+  };
   const slash = requested.indexOf("/");
   const malformed = slash === 0;
   const provider = slash > 0 ? lower.slice(0, slash) : void 0;
@@ -1260,6 +1368,9 @@ function modelUnresolvedMessage(r) {
   }
   return r.candidates.length ? `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms: ${r.candidates.join(", ")}` : `model "${r.requested}" does not resolve to an approved model \u2014 accepted forms are the registry's provider-prefixed ids (provider/model) or a bare id that names exactly one of them`;
 }
+function modelClassUnresolvedMessage(ref) {
+  return `model "${ref.trim()}" is a model-class request that was not resolved before dispatch \u2014 a class is resolved to a concrete approved model by the class map at dispatch, and is never sent to a provider as written; this step refuses rather than run on a substituted model`;
+}
 function providerModelId(code) {
   const requested = typeof code === "string" ? code.trim() : "";
   if (!requested || isModelIdSentinel(requested)) return requested;
@@ -1662,75 +1773,6 @@ function scheduledTimeKey(scheduledTime) {
 function scheduledWorkflowRunIdForTime(jobId, scheduledTime) {
   return scheduledWorkflowRunId(jobId, scheduledTime);
 }
-function workflowRetryMaxAttemptsMessage(got) {
-  const tail = got === void 0 ? "" : ` (got ${JSON.stringify(got)})`;
-  return `\`retry.maxAttempts\` must be an integer ${WORKFLOW_RETRY_MIN_ATTEMPTS}..${WORKFLOW_RETRY_MAX_ATTEMPTS}${tail}`;
-}
-function isWithinWorkflowRetryAttempts(value3) {
-  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_RETRY_MIN_ATTEMPTS && value3 <= WORKFLOW_RETRY_MAX_ATTEMPTS;
-}
-function workflowRetryUnknownMembersMessage(keys) {
-  const named = keys.map((k) => {
-    const engine = WORKFLOW_RETRY_ENGINE_KEYS.includes(k);
-    return `\`${k}\`${engine ? " (engine-owned \u2014 stamped by resetAttempts, never authored)" : ""}`;
-  });
-  return `\`retry\` has no member ${named.join(", ")}; members: ${WORKFLOW_RETRY_POLICY_KEYS.join(", ")}`;
-}
-function unknownWorkflowRetryMembers(retry) {
-  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return [];
-  return Object.keys(retry).filter((k) => !WORKFLOW_RETRY_POLICY_KEYS.includes(k));
-}
-function authoredRetryPolicy(retry) {
-  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return void 0;
-  const src = retry;
-  const out = {};
-  for (const k of WORKFLOW_RETRY_POLICY_KEYS) if (src[k] !== void 0) out[k] = src[k];
-  return Object.keys(out).length ? out : void 0;
-}
-function retryBudgetBaseAttempt(row2) {
-  const base = row2.retry?.budgetBaseAttempt;
-  return typeof base === "number" && Number.isSafeInteger(base) && base > 0 ? base : 0;
-}
-function retryBudgetAttempt(row2) {
-  return Math.max(0, row2.attempt - retryBudgetBaseAttempt(row2));
-}
-function retryBudgetMaxAttempts(row2) {
-  const max = row2.retry?.maxAttempts;
-  return typeof max === "number" && Number.isFinite(max) && max >= 1 ? max : 1;
-}
-function retryBudgetRemaining(row2) {
-  return retryBudgetAttempt(row2) < retryBudgetMaxAttempts(row2);
-}
-function retriesRemaining(row2) {
-  return Math.max(0, retryBudgetMaxAttempts(row2) - retryBudgetAttempt(row2));
-}
-function isWithinWorkflowJobRange(member, value3) {
-  const { min, max } = WORKFLOW_JOB_RANGES[member];
-  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= min && value3 <= max;
-}
-function workflowJobRangeMessage(member) {
-  const { min, max } = WORKFLOW_JOB_RANGES[member];
-  return `\`${member}\` must be an integer ${min}..${max}`;
-}
-function isWorkflowSingleStepType(type) {
-  return typeof type === "string" && WORKFLOW_SINGLE_STEP_TYPES.includes(type);
-}
-function isWorkflowHitlEntryType(type) {
-  return typeof type === "string" && WORKFLOW_HITL_ENTRY_TYPES.includes(type);
-}
-function isWorkflowArmEntryType(type) {
-  return typeof type === "string" && WORKFLOW_ARM_ENTRY_TYPES.includes(type);
-}
-function workflowContainerRunsHitlArm(container) {
-  return typeof container === "string" && WORKFLOW_HITL_ARM_CONTAINERS.includes(container);
-}
-function workflowHitlArmUnsupportedMessage(type, id, container) {
-  const legal = WORKFLOW_HITL_ARM_CONTAINERS.map((c) => `\`${c}\``).join(" / ");
-  return `the engine does not run \`${type}\` inside a \`${container}\` yet (node "${id}") \u2014 place it at the top level, as a ${legal} arm, or inside a child \`workflow\``;
-}
-function workflowHitlArmShapeMessage(type, id, shape) {
-  return shape === "mapped-arm" ? `\`${type}\` arm "${id}" takes the previous output as its payload \u2014 it cannot head a [mapping, step] chain; map before the container instead` : `a chunked foreach hands each child a slice of items, not one \u2014 \`${type}\` body "${id}" takes one item; drop \`chunk\``;
-}
 function workflowGoalJudgeKind(judge) {
   return judge && typeof judge === "object" && judge.predicate !== void 0 ? "predicate" : "agent";
 }
@@ -2035,7 +2077,7 @@ function effectiveAgentFeatures(base, override, rule) {
   if (rule === "wholesale") return override || base || void 0;
   return effectiveAgentFeatureRows(base, override).rows;
 }
-var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, MODEL_ID_BYOK_PROVIDERS, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, EventType, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, TYPED_API_KEY, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_JOURNAL_PROTOCOL_VERSION, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
+var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_AGENT_EFFORTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_TASK_CLASSES, WORKFLOW_MODEL_TRAITS, WORKFLOW_MODEL_REASON_MAX_LENGTH, WORKFLOW_MODELS_COMPOSE_MODES, WORKFLOW_MODELS_PIN_MODES, WORKFLOW_MODELS_FALLBACK_MODES, WORKFLOW_MODELS_CONSENT_ACTIONS_MIN, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_FORMS, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_ENABLED_DEFAULT, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, EventType, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, TYPED_API_KEY, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_JOURNAL_PROTOCOL_VERSION, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -2348,16 +2390,243 @@ var init_dist = __esm({
     __name2(isDesktopFileCommandName, "isDesktopFileCommandName");
     __name(isDesktopFileSessionId, "isDesktopFileSessionId");
     __name2(isDesktopFileSessionId, "isDesktopFileSessionId");
+    WORKFLOW_RETRY_BACKOFFS = [
+      "fixed",
+      "exponential"
+    ];
+    WORKFLOW_RETRY_MIN_ATTEMPTS = 1;
+    WORKFLOW_RETRY_POLICY_KEYS = [
+      "maxAttempts",
+      "backoffSeconds",
+      "backoff",
+      "maxBackoffSeconds"
+    ];
+    WORKFLOW_RETRY_MAX_ATTEMPTS = 20;
+    __name(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
+    __name2(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
+    __name(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
+    __name2(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
+    WORKFLOW_RETRY_ENGINE_KEYS = [
+      "budgetBaseAttempt"
+    ];
+    __name(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
+    __name2(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
+    __name(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
+    __name2(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
+    __name(authoredRetryPolicy, "authoredRetryPolicy");
+    __name2(authoredRetryPolicy, "authoredRetryPolicy");
+    __name(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
+    __name2(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
+    __name(retryBudgetAttempt, "retryBudgetAttempt");
+    __name2(retryBudgetAttempt, "retryBudgetAttempt");
+    __name(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
+    __name2(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
+    __name(retryBudgetRemaining, "retryBudgetRemaining");
+    __name2(retryBudgetRemaining, "retryBudgetRemaining");
+    __name(retriesRemaining, "retriesRemaining");
+    __name2(retriesRemaining, "retriesRemaining");
+    WORKFLOW_JOB_RESOURCES = [
+      "small",
+      "medium",
+      "large"
+    ];
+    WORKFLOW_SIDE_EFFECTS = [
+      "none",
+      "external"
+    ];
+    WORKFLOW_AGENT_EFFORTS = [
+      "low",
+      "medium",
+      "high"
+    ];
+    WORKFLOW_MODEL_CLASSES = [
+      "fast",
+      "balanced",
+      "strong"
+    ];
+    WORKFLOW_TASK_CLASSES = [
+      "classify",
+      "extract",
+      "transform",
+      "draft",
+      "research",
+      "reason",
+      "code",
+      "judge"
+    ];
+    WORKFLOW_MODEL_TRAITS = [
+      "vision",
+      "structured",
+      "largeContext",
+      "codeExecution"
+    ];
+    WORKFLOW_MODEL_REASON_MAX_LENGTH = 160;
+    __name(workflowModelCostComparison, "workflowModelCostComparison");
+    __name2(workflowModelCostComparison, "workflowModelCostComparison");
+    WORKFLOW_MODELS_COMPOSE_MODES = [
+      "off",
+      "on"
+    ];
+    WORKFLOW_MODELS_PIN_MODES = [
+      "class-only",
+      "allowed"
+    ];
+    WORKFLOW_MODELS_FALLBACK_MODES = [
+      "same-class",
+      "same-provider"
+    ];
+    WORKFLOW_MODELS_CONSENT_ACTIONS_MIN = 1;
+    WORKFLOW_DEFAULT_TASK_CLASS_MAP = Object.freeze({
+      classify: "fast",
+      extract: "fast",
+      transform: "fast",
+      draft: "balanced",
+      research: "balanced",
+      judge: "balanced",
+      reason: "strong",
+      code: "strong"
+    });
+    WORKFLOW_MODELS_MAX_CLASS_DEFAULT = WORKFLOW_MODEL_CLASSES[WORKFLOW_MODEL_CLASSES.length - 1];
+    __name(modelClassRank, "modelClassRank");
+    __name2(modelClassRank, "modelClassRank");
+    __name(modelClassesAtOrBelow, "modelClassesAtOrBelow");
+    __name2(modelClassesAtOrBelow, "modelClassesAtOrBelow");
+    WORKFLOW_AUTONOMY_FORMS = [
+      "graph",
+      "script",
+      "static"
+    ];
+    WORKFLOW_AUTONOMY_NUMERIC_KEYS = [
+      "maxCredits",
+      "maxSteps",
+      "maxDurationSeconds",
+      "maxActions",
+      "maxRunsPerHour"
+    ];
+    WORKFLOW_AUTONOMY_ENVELOPE_KEYS = [
+      "enabled",
+      ...WORKFLOW_AUTONOMY_NUMERIC_KEYS,
+      "forms"
+    ];
+    WORKFLOW_AUTONOMY_ENABLED_DEFAULT = false;
+    WORKFLOW_AUTONOMY_DEFAULTS = Object.freeze({
+      maxCredits: 20,
+      maxSteps: 15,
+      maxDurationSeconds: 86400,
+      maxRunsPerHour: 20
+    });
+    WORKFLOW_AUTONOMY_CEILINGS = Object.freeze({
+      maxSteps: 40,
+      maxDurationSeconds: 604800
+    });
+    WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV = "LUA_WF_AUTONOMY_MAX_RUNS_PER_HOUR";
+    WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING = 200;
+    __name(workflowAutonomyMaxRunsPerHourCeiling, "workflowAutonomyMaxRunsPerHourCeiling");
+    __name2(workflowAutonomyMaxRunsPerHourCeiling, "workflowAutonomyMaxRunsPerHourCeiling");
+    WORKFLOW_AUTONOMY_FORMS_DEFAULT = Object.freeze([
+      "graph",
+      "static"
+    ]);
+    WORKFLOW_AUTONOMY_MIN_VALUE = 1;
+    __name(isWithinWorkflowAutonomyRange, "isWithinWorkflowAutonomyRange");
+    __name2(isWithinWorkflowAutonomyRange, "isWithinWorkflowAutonomyRange");
+    __name(workflowAutonomyRangeMessage, "workflowAutonomyRangeMessage");
+    __name2(workflowAutonomyRangeMessage, "workflowAutonomyRangeMessage");
+    WORKFLOW_JOB_RANGES = Object.freeze({
+      /** Coding-turn cap (`claude -p --max-turns`); absent ⇒ the cluster default (LUA_WF_JOB_MAX_TURNS). */
+      maxTurns: Object.freeze({
+        min: 1,
+        max: 500
+      }),
+      /** Harness messages per attempt (one per content block); absent ⇒ the cluster default (400). */
+      maxMessages: Object.freeze({
+        min: 1,
+        max: 5e3
+      }),
+      /** Input-side tokens per attempt (prompt + cache); absent ⇒ the cluster default (4M — LUA-708, was 30M). */
+      maxInputTokens: Object.freeze({
+        min: 1e6,
+        max: 5e8
+      })
+    });
+    WORKFLOW_JOB_RANGE_MEMBERS = Object.keys(WORKFLOW_JOB_RANGES);
+    __name(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
+    __name2(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
+    __name(workflowJobRangeMessage, "workflowJobRangeMessage");
+    __name2(workflowJobRangeMessage, "workflowJobRangeMessage");
+    WORKFLOW_SINGLE_STEP_TYPES = [
+      "agent",
+      "tool",
+      "workflow",
+      "step"
+    ];
+    WORKFLOW_HITL_ENTRY_TYPES = [
+      "approval",
+      "waitForSignal"
+    ];
+    WORKFLOW_ARM_ENTRY_TYPES = [
+      ...WORKFLOW_SINGLE_STEP_TYPES,
+      ...WORKFLOW_HITL_ENTRY_TYPES
+    ];
+    WORKFLOW_HITL_ARM_CONTAINERS = [
+      "parallel",
+      "conditional",
+      "foreach"
+    ];
+    __name(isWorkflowSingleStepType, "isWorkflowSingleStepType");
+    __name2(isWorkflowSingleStepType, "isWorkflowSingleStepType");
+    __name(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
+    __name2(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
+    __name(isWorkflowArmEntryType, "isWorkflowArmEntryType");
+    __name2(isWorkflowArmEntryType, "isWorkflowArmEntryType");
+    __name(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
+    __name2(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
+    __name(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
+    __name2(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
+    __name(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
+    __name2(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
+    WORKFLOW_GRAPH_ENTRY_STEP_KINDS = Object.freeze({
+      agent: "agent",
+      tool: "tool",
+      workflow: "subrun",
+      step: "code",
+      mapping: "map",
+      sleep: "sleep",
+      sleepUntil: "sleepUntil",
+      parallel: null,
+      conditional: "branch",
+      foreach: "foreach",
+      loop: "loop",
+      approval: "approval",
+      waitForSignal: "signal"
+    });
+    WORKFLOW_ARM_ENTRY_STEP_KINDS = Object.freeze(Object.fromEntries(WORKFLOW_ARM_ENTRY_TYPES.map((t) => [
+      t,
+      WORKFLOW_GRAPH_ENTRY_STEP_KINDS[t]
+    ])));
+    WORKFLOW_BUDGET_MAX_DURATION_SECONDS = Object.freeze({
+      min: 60,
+      max: 2592e3
+    });
     MODEL_ID_BYOK_PROVIDERS = [
       "azure",
       "bedrock"
     ];
     __name(isModelIdSentinel, "isModelIdSentinel");
     __name2(isModelIdSentinel, "isModelIdSentinel");
+    MODEL_CLASS_REF_PREFIX = "class/";
+    __name(isModelClassRef, "isModelClassRef");
+    __name2(isModelClassRef, "isModelClassRef");
+    __name(modelClassOf, "modelClassOf");
+    __name2(modelClassOf, "modelClassOf");
+    __name(modelClassRef, "modelClassRef");
+    __name2(modelClassRef, "modelClassRef");
     __name(normalizeModelId, "normalizeModelId");
     __name2(normalizeModelId, "normalizeModelId");
     __name(modelUnresolvedMessage, "modelUnresolvedMessage");
     __name2(modelUnresolvedMessage, "modelUnresolvedMessage");
+    __name(modelClassUnresolvedMessage, "modelClassUnresolvedMessage");
+    __name2(modelClassUnresolvedMessage, "modelClassUnresolvedMessage");
     __name(providerModelId, "providerModelId");
     __name2(providerModelId, "providerModelId");
     MODEL_SNAPSHOT_SUFFIX = /(?:[-@](?:19|20)\d{2}(?:0[1-9]|1[0-2])(?:0[1-9]|[12]\d|3[01])|-(?:19|20)\d{2}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01]))$/;
@@ -3030,7 +3299,15 @@ This text is who you are for this person. As you learn them, their name, their w
         "org-grant",
         "agent-grant-only"
       ]).describe("For user and staff principals, grant provenance: org-grant means a stored org grant produced the row. For owner-ceiling API keys, effective provenance: org-grant means the credential-owner intersection has org-level capability; agent-grant-only means the intersection reaches only an exact agent inside the org."),
-      anomalies: z3.array(ProjectionAnomalySchema).optional()
+      anomalies: z3.array(ProjectionAnomalySchema).optional(),
+      /**
+       * How many agents and Spaces in this org the caller can read — the size of
+       * the org's resource page under the same discovery rule, without paging it.
+       */
+      resourceCounts: z3.object({
+        agents: z3.number().int().nonnegative(),
+        spaces: z3.number().int().nonnegative()
+      }).optional()
     }).passthrough();
     ProjectedResourceSchema = z3.object({
       resourceType: z3.literal("agent"),
@@ -3069,7 +3346,21 @@ This text is who you are for this person. As you learn them, their name, their w
         id: z3.string().min(1).max(256),
         name: z3.string().optional(),
         email: z3.string().optional()
-      }).optional()
+      }).optional(),
+      /**
+       * Presentation enrichment (PRO-1994), product data only — never influences
+       * discovery. These moved off the O(orgs) `/context` roster onto the bounded
+       * per-active-org resource page so Desktop stops paying an org-count-scaled
+       * cost at sign-in. `persona`/`avatar` are loose (`PersonaText` / `AgentAvatar`
+       * are structured-or-string), `platform` marks the org's Designer agent
+       * (previously stamped only by `/context`; retires with PRO-1657).
+       */
+      persona: z3.unknown().optional(),
+      description: z3.string().optional(),
+      avatar: z3.unknown().nullish(),
+      platform: z3.boolean().optional(),
+      /** A Space's supervised agent ids (`kind: 'space'` rows only). */
+      supervisedAgents: z3.array(z3.string()).optional()
     }).passthrough();
     CapabilityProfilesSchema = z3.record(z3.string().min(1).max(64), z3.array(ProjectedScopeSchema));
     RoleCatalogSchema = z3.record(z3.string().min(1).max(128), z3.object({
@@ -3159,7 +3450,8 @@ This text is who you are for this person. As you learn them, their name, their w
       "org_archived",
       "disabled",
       "exception",
-      "budget"
+      "budget",
+      "model_policy"
     ];
     WORKFLOW_STEP_STATUSES = [
       "pending",
@@ -3244,126 +3536,6 @@ This text is who you are for this person. As you learn them, their name, their w
     ];
     WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES = 64 * 1024;
     WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES = 256 * 1024;
-    WORKFLOW_RETRY_BACKOFFS = [
-      "fixed",
-      "exponential"
-    ];
-    WORKFLOW_RETRY_MIN_ATTEMPTS = 1;
-    WORKFLOW_RETRY_POLICY_KEYS = [
-      "maxAttempts",
-      "backoffSeconds",
-      "backoff",
-      "maxBackoffSeconds"
-    ];
-    WORKFLOW_RETRY_MAX_ATTEMPTS = 20;
-    __name(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
-    __name2(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
-    __name(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
-    __name2(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
-    WORKFLOW_RETRY_ENGINE_KEYS = [
-      "budgetBaseAttempt"
-    ];
-    __name(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
-    __name2(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
-    __name(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
-    __name2(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
-    __name(authoredRetryPolicy, "authoredRetryPolicy");
-    __name2(authoredRetryPolicy, "authoredRetryPolicy");
-    __name(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
-    __name2(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
-    __name(retryBudgetAttempt, "retryBudgetAttempt");
-    __name2(retryBudgetAttempt, "retryBudgetAttempt");
-    __name(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
-    __name2(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
-    __name(retryBudgetRemaining, "retryBudgetRemaining");
-    __name2(retryBudgetRemaining, "retryBudgetRemaining");
-    __name(retriesRemaining, "retriesRemaining");
-    __name2(retriesRemaining, "retriesRemaining");
-    WORKFLOW_JOB_RESOURCES = [
-      "small",
-      "medium",
-      "large"
-    ];
-    WORKFLOW_SIDE_EFFECTS = [
-      "none",
-      "external"
-    ];
-    WORKFLOW_JOB_RANGES = Object.freeze({
-      /** Coding-turn cap (`claude -p --max-turns`); absent ⇒ the cluster default (LUA_WF_JOB_MAX_TURNS). */
-      maxTurns: Object.freeze({
-        min: 1,
-        max: 500
-      }),
-      /** Harness messages per attempt (one per content block); absent ⇒ the cluster default (400). */
-      maxMessages: Object.freeze({
-        min: 1,
-        max: 5e3
-      }),
-      /** Input-side tokens per attempt (prompt + cache); absent ⇒ the cluster default (4M — LUA-708, was 30M). */
-      maxInputTokens: Object.freeze({
-        min: 1e6,
-        max: 5e8
-      })
-    });
-    WORKFLOW_JOB_RANGE_MEMBERS = Object.keys(WORKFLOW_JOB_RANGES);
-    __name(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
-    __name2(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
-    __name(workflowJobRangeMessage, "workflowJobRangeMessage");
-    __name2(workflowJobRangeMessage, "workflowJobRangeMessage");
-    WORKFLOW_SINGLE_STEP_TYPES = [
-      "agent",
-      "tool",
-      "workflow",
-      "step"
-    ];
-    WORKFLOW_HITL_ENTRY_TYPES = [
-      "approval",
-      "waitForSignal"
-    ];
-    WORKFLOW_ARM_ENTRY_TYPES = [
-      ...WORKFLOW_SINGLE_STEP_TYPES,
-      ...WORKFLOW_HITL_ENTRY_TYPES
-    ];
-    WORKFLOW_HITL_ARM_CONTAINERS = [
-      "parallel",
-      "conditional",
-      "foreach"
-    ];
-    __name(isWorkflowSingleStepType, "isWorkflowSingleStepType");
-    __name2(isWorkflowSingleStepType, "isWorkflowSingleStepType");
-    __name(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
-    __name2(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
-    __name(isWorkflowArmEntryType, "isWorkflowArmEntryType");
-    __name2(isWorkflowArmEntryType, "isWorkflowArmEntryType");
-    __name(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
-    __name2(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
-    __name(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
-    __name2(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
-    __name(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
-    __name2(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
-    WORKFLOW_GRAPH_ENTRY_STEP_KINDS = Object.freeze({
-      agent: "agent",
-      tool: "tool",
-      workflow: "subrun",
-      step: "code",
-      mapping: "map",
-      sleep: "sleep",
-      sleepUntil: "sleepUntil",
-      parallel: null,
-      conditional: "branch",
-      foreach: "foreach",
-      loop: "loop",
-      approval: "approval",
-      waitForSignal: "signal"
-    });
-    WORKFLOW_ARM_ENTRY_STEP_KINDS = Object.freeze(Object.fromEntries(WORKFLOW_ARM_ENTRY_TYPES.map((t) => [
-      t,
-      WORKFLOW_GRAPH_ENTRY_STEP_KINDS[t]
-    ])));
-    WORKFLOW_BUDGET_MAX_DURATION_SECONDS = Object.freeze({
-      min: 60,
-      max: 2592e3
-    });
     WORKFLOW_GOAL_JUDGE_SELF = "$self";
     __name(workflowGoalJudgeKind, "workflowGoalJudgeKind");
     __name2(workflowGoalJudgeKind, "workflowGoalJudgeKind");
@@ -3568,7 +3740,20 @@ This text is who you are for this person. As you learn them, their name, their w
       "workflow.export.auto_pushed",
       "workflow.retention.restamped",
       "workflow.retention.reaped",
-      "workflow.run.schema_migrated"
+      "workflow.run.schema_migrated",
+      // --- per-step model selection (Workflow Model Selection plan 6.5 / Appendix C.4) ---
+      /** A `PATCH /admin/orgs/:orgId/workflow-policy` that changed the `models` block (who, what moved). */
+      "workflow.policy.models_changed",
+      /** A step's invocation hopped to another leg of its class — `{from, to, reason}`, priced at the served model. */
+      "workflow.step.model_fallback",
+      // --- autonomy envelope (Workflow autonomy plan A1; research/consent-gates.md §H2) ---
+      /**
+      * A start the consent ladder would have PARKED was admitted by `workflowPolicy.autonomy` instead —
+      * `WorkflowRunAutonomyAppliedPayload`. Deliberately NOT `workflow.run.gate_cleared`: nothing was
+      * gated and nobody approved it, and conflating the two would make "who approved this run"
+      * unanswerable for every run of either kind (§H2 "Audit").
+      */
+      "workflow.run.autonomy_applied"
     ];
     WORKFLOW_AUDIT_METADATA_MAX_BYTES = 4 * 1024;
     __name(isWorkflowAuditEvent, "isWorkflowAuditEvent");
@@ -4629,7 +4814,7 @@ function modelTemplateInvalidMessage(model, why) {
   return `model "${model.trim()}" is not a valid run-input-bound model placeholder \u2014 ${why}; the forms are \${initData.<path>} and \${initData.<path>|<provider/model default>}`;
 }
 function modelTemplateDefaultRequiredMessage(model) {
-  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")}`;
+  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")} or a class reference (|class/fast, |class/balanced, |class/strong)`;
 }
 function staticModelPin(model) {
   if (typeof model !== "string") return void 0;
@@ -5221,6 +5406,21 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("required-connection-unknown", `requiredConnections ${JSON.stringify(unknown)} are neither declared connections[].key values nor connections the owner can mount`, `${path26}.requiredConnections`, singleId(node));
     }
   }, "checkRequiredConnections");
+  const jobClassifiablePin = /* @__PURE__ */ __name4((model) => {
+    const pin = staticModelPin(model);
+    const modelClass = modelClassOf(pin);
+    if (modelClass === void 0) return pin;
+    const codes = opts.classMap?.[modelClass];
+    if (!codes) return void 0;
+    const jobProviders = opts.policy?.jobProviders;
+    for (const code of codes) {
+      const p = classifyModelProvider(code);
+      if (p === null) continue;
+      if (jobProviders && !jobProviders.includes(p)) continue;
+      return code;
+    }
+    return void 0;
+  }, "jobClassifiablePin");
   const checkTier = /* @__PURE__ */ __name4((node, path26) => {
     const id = singleId(node);
     if (node.workspace && node.workspace !== "inherit" && node.tier !== void 0 && node.tier !== "job") {
@@ -5229,7 +5429,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.harness !== void 0 && node.tier !== "job") {
       err("harness-requires-job-tier", "`harness` is only legal on a tier:'job' agent step", `${path26}.harness`, id);
     }
-    const provider = node.type === "agent" ? classifyModelProvider(staticModelPin(node.model)) : null;
+    const provider = node.type === "agent" ? classifyModelProvider(jobClassifiablePin(node.model)) : null;
     if (node.harness === "claude-code" && provider !== null && provider !== "anthropic") {
       err("harness-provider-mismatch", `harness:'claude-code' needs an Anthropic model (model "${node.type === "agent" ? node.model : ""}" is ${provider})`, `${path26}.harness`, id);
     }
@@ -5253,6 +5453,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     const pin = parsed.kind === "template" ? parsed.template.default : node.model;
     if (pin === void 0) return;
+    if (isModelClassRef(pin)) return;
     const inContext = /* @__PURE__ */ __name4((message) => parsed.kind === "template" ? `${message} (the default of ${parsed.template.placeholder})` : message, "inContext");
     const registry = opts.approvedModels;
     if (registry === void 0) return;
@@ -5266,6 +5467,12 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     const resolved = normalizeModelId(pin, registry);
     if (!resolved.ok) err("model-unresolved", inContext(modelUnresolvedMessage(resolved)), `${path26}.model`, id);
   }, "checkModel");
+  const checkTaskClass = /* @__PURE__ */ __name4((node, path26) => {
+    if (node.type !== "agent" || node.taskClass === void 0) return;
+    if (!opts.static) return;
+    if (typeof node.model === "string" && node.model.trim()) return;
+    err("task-class-without-model", `taskClass '${String(node.taskClass)}' needs a \`model\` on a pushed definition \u2014 write a class (model: 'class/fast' | 'class/balanced' | 'class/strong') or an approved provider/model code; nothing maps a task class to a model at dispatch, so a step with neither would run on the agent\u2019s own model`, `${path26}.taskClass`, singleId(node));
+  }, "checkTaskClass");
   const checkWorkspace = /* @__PURE__ */ __name4((node, path26) => {
     const id = singleId(node);
     const ws = workspaceOf(node);
@@ -5352,6 +5559,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     checkTimeout(node, path26);
     checkTier(node, path26);
     checkModel(node, path26);
+    checkTaskClass(node, path26);
     checkRetry(node, path26);
     checkWorkspace(node, path26);
     if (!opts.static) {
@@ -8921,6 +9129,10 @@ var init_workflow = __esm({
           maxDurationSeconds: cfg.budget?.maxDurationSeconds ?? (hitl ? WORKFLOW_HITL_MAX_DURATION_SECONDS : WORKFLOW_DEFAULT_MAX_DURATION_SECONDS)
         });
         const envelope = {
+          // A plain build/push is ALWAYS marker 1 (plan 6.4's compatibility row: "a CLI test that a plain push of
+          // such a definition stays at 1"). Moving a definition to 2 — the effort marker — is an explicit act
+          // (`lua push --apply-effort`, or a new compose while assignment is on), never a side effect of the SDK
+          // gaining an `effort` member.
           luaWorkflow: 1,
           budget,
           definition: defined({
@@ -9241,6 +9453,10 @@ var init_workflow = __esm({
           promptTemplate: templateText(opts.prompt),
           outputSchema: schemaToJson(opts.outputSchema),
           model: opts.model,
+          taskClass: opts.taskClass,
+          requires: opts.requires,
+          modelReason: opts.modelReason,
+          effort: opts.effort,
           toolScope: opts.toolScope,
           systemPrompt: opts.systemPrompt,
           timeoutSeconds: opts.timeoutSeconds,
@@ -20340,6 +20556,8 @@ function sketchTopology(sourceFile, exportName, name, description) {
   }
   return {
     graph: {
+      // 1 is and stays the serializer's marker: the effort marker (2) is opted into by
+      // `lua push --apply-effort` or a new compose (plan 6.4), never by a plain compile.
       luaWorkflow: 1,
       definition: {
         id: name,
@@ -20465,7 +20683,7 @@ function computeDeferred(graph, opts = {}) {
       deferred.add("job-tier-provider-unsupported");
     }
     const modelPin = n2.type === "agent" ? staticModelPin(n2.model) : void 0;
-    if (modelPin !== void 0 && !isModelIdSentinel(modelPin)) deferred.add("model-unresolved");
+    if (modelPin !== void 0 && !isModelIdSentinel(modelPin) && !isModelClassRef(modelPin)) deferred.add("model-unresolved");
     if (Array.isArray(n2.requiredConnections) && n2.requiredConnections.some(serverDecides)) deferred.add("required-connection-unknown");
     if (n2.type === "approval") {
       const a = n2.approver;
@@ -26430,6 +26648,68 @@ var init_workflow_api_service = __esm({
         const qs = query.toString();
         return this.httpGet(`${this.runs}/${runId}/steps/${pathId(stepId)}/job${qs ? `?${qs}` : ""}`, await this.auth());
       }
+      // ─── [WMC-E7] Per-step model selection (§6.5, §6.7) ───
+      /**
+      * §6.5 — the organization's workflow policy, `models` block included. The route is the organization's, not
+      * the agent's, so the orgId comes from the project config rather than from `this.agentId`.
+      */
+      async getWorkflowPolicy(orgId, opts = {}) {
+        const qs = opts.effective ? "?effective=true" : "";
+        return this.httpGet(`/admin/orgs/${encodeURIComponent(orgId)}/workflow-policy${qs}`, await this.auth());
+      }
+      /**
+      * §6.5 — PATCH the `models` block. Only the members the caller named are sent, so a `set` of one field
+      * never clears the rest; the server validates against the organization's effective model set and refuses
+      * with a code the CLI prints verbatim (a class with no eligible row, a cap the raise would exceed).
+      */
+      async patchWorkflowPolicyModels(orgId, models) {
+        return this.httpPatch(`/admin/orgs/${encodeURIComponent(orgId)}/workflow-policy`, {
+          models
+        }, await this.auth());
+      }
+      // ─── [WMC-A6] Autonomy — the pre-consented envelope (research §H3) ───
+      /**
+      * PATCH the `autonomy` block of the ORGANIZATION's policy — the same R23 route the `models` block uses, and
+      * a sibling of it in the body, so one PATCH never has to carry two blocks it did not mean to touch.
+      *
+      * A member sent as `null` is CLEARED (`--clear`); a member omitted is left exactly as it was. That
+      * distinction is the route's, not the CLI's — which is why the patch type carries `null` rather than the CLI
+      * collapsing it to an absent key on the way out.
+      *
+      * Every ceiling is the server's: `caps.maxCreditsPerRun`, the organization's own `models.consentActions` and
+      * the platform's runs-per-hour env are all figures this client has never seen, so a value above one comes
+      * back as a typed 400 and is printed verbatim.
+      */
+      async patchWorkflowPolicyAutonomy(orgId, autonomy) {
+        return this.httpPatch(`/admin/orgs/${encodeURIComponent(orgId)}/workflow-policy`, {
+          autonomy
+        }, await this.auth());
+      }
+      /*
+      * There is deliberately NO per-agent writer here. `SubAgentWorkflowSettings.autonomy` is read by
+      * `effectiveWorkflowAutonomy`, but no HTTP surface writes it: `UpdateSubAgentRequestDto` has no
+      * `workflows` member, so a PATCH carrying one is accepted and DISCARDED. A client method that posted a
+      * narrowing into that hole would return 200 and change nothing, and the CLI would print a success line
+      * over it — on a consent surface, a false confirmation is worse than a missing feature. The read half
+      * already works: `?effective=true` shows a per-agent narrowing when the projection carries one.
+      */
+      /**
+      * §6.5 — clear a run gate by kind. `model_policy` is the kind a class request that could not be resolved
+      * parks on; the sweep clears it on its own when the switch returns, and this is the by-hand path.
+      */
+      async clearRunGate(runId, kind) {
+        return this.httpPost(`${this.runs}/${runId}/clear-gate`, {
+          kind
+        }, await this.auth());
+      }
+      /**
+      * §6.4 (Q19) — the deterministic rewrite of a dynamic parent's stored task classes into `class/<c>`.
+      * Not a fresh model composition: the server rewrites and publishes a NEW version on the immutable parent,
+      * and answers with it, so the CLI only has to print the version it got back.
+      */
+      async recomposeWorkflow(workflowId) {
+        return this.httpPost(`${this.base}/${workflowId}/recompose`, {}, await this.auth());
+      }
     };
   }
 });
@@ -36063,6 +36343,117 @@ __name(describeEnvOverlay, "describeEnvOverlay");
 
 // src/primitives/workflow.handler.ts
 init_base_handler();
+
+// src/interfaces/workflow-model-classes.ts
+init_dist();
+var has = /* @__PURE__ */ __name((tuple, v) => tuple.includes(v), "has");
+var isWorkflowModelClass = /* @__PURE__ */ __name((v) => has(WORKFLOW_MODEL_CLASSES, v), "isWorkflowModelClass");
+var isWorkflowTaskClass = /* @__PURE__ */ __name((v) => has(WORKFLOW_TASK_CLASSES, v), "isWorkflowTaskClass");
+var isWorkflowModelTrait = /* @__PURE__ */ __name((v) => has(WORKFLOW_MODEL_TRAITS, v), "isWorkflowModelTrait");
+var isWorkflowEffort = /* @__PURE__ */ __name((v) => has(WORKFLOW_AGENT_EFFORTS, v), "isWorkflowEffort");
+function isWrittenAsModelClassRef(model) {
+  return (model ?? "").trim().toLowerCase().startsWith(MODEL_CLASS_REF_PREFIX);
+}
+__name(isWrittenAsModelClassRef, "isWrittenAsModelClassRef");
+var oneOf = /* @__PURE__ */ __name((tuple) => tuple.map((v) => `\`${v}\``).join(", "), "oneOf");
+function validateAgentNodeModelMembers(node, path26) {
+  const issues = [];
+  if (typeof node.model === "string" && isWrittenAsModelClassRef(node.model)) {
+    if (!modelClassOf(node.model)) {
+      issues.push({
+        path: `${path26}.model`,
+        code: "model-class-unknown",
+        message: `"${node.model}" is not a model class \u2014 use one of ${oneOf(WORKFLOW_MODEL_CLASSES.map((c) => modelClassRef(c)))}, or pin an approved model code`
+      });
+    }
+  }
+  if (node.taskClass !== void 0) {
+    if (typeof node.taskClass !== "string" || !isWorkflowTaskClass(node.taskClass)) {
+      issues.push({
+        path: `${path26}.taskClass`,
+        code: "task-class-unknown",
+        message: `"${String(node.taskClass)}" is not a task class \u2014 use one of ${oneOf(WORKFLOW_TASK_CLASSES)}`
+      });
+    }
+  }
+  if (node.requires !== void 0) {
+    if (!Array.isArray(node.requires)) {
+      issues.push({
+        path: `${path26}.requires`,
+        code: "requires-invalid",
+        message: `\`requires\` must be an array of ${oneOf(WORKFLOW_MODEL_TRAITS)}`
+      });
+    } else {
+      node.requires.forEach((trait, i) => {
+        if (typeof trait !== "string" || !isWorkflowModelTrait(trait)) {
+          issues.push({
+            path: `${path26}.requires.${i}`,
+            code: "model-trait-unknown",
+            message: `"${String(trait)}" is not a model trait \u2014 use one of ${oneOf(WORKFLOW_MODEL_TRAITS)}`
+          });
+        }
+      });
+    }
+  }
+  if (node.effort !== void 0) {
+    if (typeof node.effort !== "string" || !isWorkflowEffort(node.effort)) {
+      issues.push({
+        path: `${path26}.effort`,
+        code: "effort-unknown",
+        message: `"${String(node.effort)}" is not a workflow effort \u2014 use one of ${oneOf(WORKFLOW_AGENT_EFFORTS)}. (\`off\`, \`minimal\` and \`max\` are the agent-level \`modelSettings.reasoning.effort\` scale, not this one.)`
+      });
+    }
+  }
+  if (node.modelReason !== void 0) {
+    if (typeof node.modelReason !== "string") {
+      issues.push({
+        path: `${path26}.modelReason`,
+        code: "model-reason-invalid",
+        message: "`modelReason` must be a string"
+      });
+    } else if (node.modelReason.length > WORKFLOW_MODEL_REASON_MAX_LENGTH) {
+      issues.push({
+        path: `${path26}.modelReason`,
+        code: "model-reason-too-long",
+        message: `\`modelReason\` is ${node.modelReason.length} characters \u2014 the cap is ${WORKFLOW_MODEL_REASON_MAX_LENGTH}`
+      });
+    }
+  }
+  return issues;
+}
+__name(validateAgentNodeModelMembers, "validateAgentNodeModelMembers");
+var WORKFLOW_MODEL_WALK_MAX_DEPTH = 64;
+var MEMBERS = [
+  "model",
+  "taskClass",
+  "requires",
+  "effort",
+  "modelReason"
+];
+function validateGraphModelMembers(graph) {
+  const issues = [];
+  const seen = /* @__PURE__ */ new Set();
+  const walk3 = /* @__PURE__ */ __name((value3, path26, depth) => {
+    if (depth > WORKFLOW_MODEL_WALK_MAX_DEPTH || value3 === null || typeof value3 !== "object") return;
+    if (seen.has(value3)) return;
+    seen.add(value3);
+    if (Array.isArray(value3)) {
+      value3.forEach((v, i) => walk3(v, `${path26}.${i}`, depth + 1));
+      return;
+    }
+    const node = value3;
+    if (MEMBERS.some((m) => node[m] !== void 0)) {
+      const label2 = typeof node.id === "string" && node.id ? node.id : path26;
+      issues.push(...validateAgentNodeModelMembers(node, label2));
+    }
+    for (const [k, v] of Object.entries(node)) walk3(v, path26 ? `${path26}.${k}` : k, depth + 1);
+  }, "walk");
+  walk3(graph, "", 0);
+  return issues;
+}
+__name(validateGraphModelMembers, "validateGraphModelMembers");
+
+// src/primitives/workflow.handler.ts
 var WorkflowHandler = class extends BaseVersionedHandler {
   static {
     __name(this, "WorkflowHandler");
@@ -36147,6 +36538,8 @@ var WorkflowHandler = class extends BaseVersionedHandler {
     const primitive = findPrimitive(manifest, name, this.kind);
     if (!primitive) return null;
     if (primitive.unplacedStepIds?.length) throw unplacedStepError(primitive.name, primitive.unplacedStepIds);
+    const modelIssues = validateGraphModelMembers(primitive.form === "script" ? primitive.meta : primitive.graph);
+    if (modelIssues.length) throw workflowModelMemberError(primitive.name, modelIssues);
     if (primitive.form === "script") return this.buildPushData(primitive, void 0);
     const data = super.prepareForPush(manifest, name, projectPath, bundleAccumulator);
     if (!data) return null;
@@ -36293,6 +36686,17 @@ function workflowNameTakenHint(name, error) {
   return `workflow name "${name}" is held by ${holder}${id} \u2014 ${see}. Push does not replace it: rename this workflow, or delete the other one first.`;
 }
 __name(workflowNameTakenHint, "workflowNameTakenHint");
+function workflowModelMemberError(workflowName, issues) {
+  return new CliError("error", `workflow "${workflowName}" is not pushed: ${issues.length} model-selection ${issues.length === 1 ? "value is" : "values are"} not in the vocabulary`, {
+    issues: issues.map((i) => ({
+      path: i.path,
+      code: i.code,
+      message: i.message
+    })),
+    hint: "Fix the values above and push again. Model classes are `class/fast`, `class/balanced` and `class/strong`; a concrete model code is checked by the server against your organization\u2019s approved models."
+  });
+}
+__name(workflowModelMemberError, "workflowModelMemberError");
 
 // src/primitives/index.ts
 init_skill_handler();
@@ -36950,10 +37354,20 @@ var ALIAS_MAP = {
       "jobs",
       "job-logs",
       "goals",
-      "schedules"
+      "schedules",
+      // [WMC-E7] per-step model selection (§6.5, §6.7): the org's model policy, the `model_policy` gate,
+      // and the deterministic rewrite of a definition composed before class resolution existed.
+      "policy",
+      "clear-gate",
+      "recompose"
     ],
     aliases: lowerKeys({
       goal: "goals",
+      policies: "policy",
+      cleargate: "clear-gate",
+      "clear-gates": "clear-gate",
+      ungate: "clear-gate",
+      recompile: "recompose",
       schedule: "schedules",
       sched: "schedules",
       ws: "workspace",
@@ -37769,7 +38183,16 @@ var WORKFLOW_SCRIPT_REPLAY_SOURCE = String.raw`
   function resolveModel(opts) {
     if (opts && opts.model) return opts.model;
     var ph = (opts && opts.phase) || currentPhase; var phases = __input.meta && __input.meta.phases;
-    if (ph && Array.isArray(phases)) for (var i = 0; i < phases.length; i++) if (phases[i] && phases[i].title === ph && phases[i].model) return phases[i].model;
+    var phase;
+    if (ph && Array.isArray(phases)) for (var i = 0; i < phases.length; i++) if (phases[i] && phases[i].title === ph) { phase = phases[i]; break; }
+    if (phase && phase.model) return phase.model;
+    // WMC (plan 6.3 script-form parity): a task class on the call or on its phase resolves to the SAME
+    // class/<c> sentinel the graph form writes, through the org's map on the tick input. No map (every run
+    // before the feature, and every organisation with assignment off) => undefined, exactly as before.
+    // NB: no backticks in this comment - the wrapper source is itself a template literal.
+    var map = __input.modelClassMap;
+    var tc = (opts && opts.taskClass) || (phase && phase.taskClass);
+    if (tc && map && map[tc]) return 'class/' + map[tc];
     return undefined;
   }
   function resolveRole(role) {
@@ -37961,6 +38384,12 @@ function computeWorkflowProtocolShipWindow(input) {
 }
 __name(computeWorkflowProtocolShipWindow, "computeWorkflowProtocolShipWindow");
 __name8(computeWorkflowProtocolShipWindow, "computeWorkflowProtocolShipWindow");
+var WORKFLOW_SCRIPT_EFFORT_PROTOCOL_VERSION = 2;
+function scriptEffortForwardable(journalProtocolVersion) {
+  return typeof journalProtocolVersion === "number" && journalProtocolVersion >= WORKFLOW_SCRIPT_EFFORT_PROTOCOL_VERSION;
+}
+__name(scriptEffortForwardable, "scriptEffortForwardable");
+__name8(scriptEffortForwardable, "scriptEffortForwardable");
 function workflowScriptReplaySource(journalProtocolVersion) {
   return WORKFLOW_SCRIPT_PROTOCOL_VERSIONS.includes(journalProtocolVersion) ? WORKFLOW_SCRIPT_REPLAY_SOURCES[journalProtocolVersion] : void 0;
 }
@@ -40398,15 +40827,30 @@ function formatPushFailureSummary(failedItems) {
   return lines.join("\n");
 }
 __name(formatPushFailureSummary, "formatPushFailureSummary");
+var MODEL_CLASS_RESOLUTION_OFF_CODES = [
+  "model-class-resolution-off",
+  "MODEL_CLASS_RESOLUTION_OFF"
+];
+function isModelClassResolutionOffCode(code) {
+  if (!code) return false;
+  const normal = code.toLowerCase().replace(/[^a-z]+/g, "-");
+  if (MODEL_CLASS_RESOLUTION_OFF_CODES.some((c) => c.toLowerCase() === code.toLowerCase())) return true;
+  const namesModelClass = normal.includes("model-class") || normal.includes("class-resolution");
+  const namesOff = /(^|-)(off|disabled|unavailable|not-enabled)(-|$)/.test(normal);
+  return namesModelClass && namesOff;
+}
+__name(isModelClassResolutionOffCode, "isModelClassResolutionOffCode");
+var MODEL_CLASS_RESOLUTION_OFF_HINT = "Model classes are not enabled on this environment yet \u2014 remove the `class/\u2026` values (pin an approved model code, or drop `model` to run the step on the agent's own model), or ask your administrator to enable them.";
 function pushRefusalError(handler, name, result) {
   const reason = result.error || "Unknown error";
   const isVersionConflict = reason.toLowerCase().includes("already exists");
+  const classResolutionOff = isModelClassResolutionOffCode(result.code) || !!result.issues?.some((i) => isModelClassResolutionOffCode(i.code));
   return new CliError("error", `${handler.displayName.toLowerCase()} "${name}" is not pushed: ${reason}`, {
     exitCode: CLI_EXIT.ERROR,
     statusCode: result.statusCode,
     serverCode: result.code,
     issues: result.issues,
-    hint: isVersionConflict ? `Version conflict \u2014 this version already exists on the server. Auto-bump: lua push ${handler.kind} --force \xB7 or push all: lua push all --force` : void 0
+    hint: classResolutionOff ? MODEL_CLASS_RESOLUTION_OFF_HINT : isVersionConflict ? `Version conflict \u2014 this version already exists on the server. Auto-bump: lua push ${handler.kind} --force \xB7 or push all: lua push all --force` : void 0
   });
 }
 __name(pushRefusalError, "pushRefusalError");
@@ -40419,8 +40863,31 @@ function stalePushEntryError(handler, name, entityId, serverMessage) {
   });
 }
 __name(stalePushEntryError, "stalePushEntryError");
+var WORKFLOW_EFFORT_MARKER = 2;
+function applyEffortMarker(pushData, applyEffort) {
+  if (!applyEffort) return pushData;
+  const graph = pushData.graph;
+  if (!graph || typeof graph !== "object") return pushData;
+  return {
+    ...pushData,
+    graph: {
+      ...graph,
+      luaWorkflow: WORKFLOW_EFFORT_MARKER
+    }
+  };
+}
+__name(applyEffortMarker, "applyEffortMarker");
+function effortMarkerNotice(cliVersion2, name) {
+  return `
+\u2699\uFE0F  --apply-effort: "${name}" is pushed with per-step effort ENABLED (lua-cli ${cliVersion2}).
+   From this version on, each agent step's \`effort\` is sent to the model instead of only counted in the estimate.
+   Runs already in flight and every version pushed before this one are unaffected \u2014 they keep their own marker.
+   Push without --apply-effort to go back to estimate-only.`;
+}
+__name(effortMarkerNotice, "effortMarkerNotice");
 
 // src/commands/push.ts
+init_package_root();
 function getDeployHint(type) {
   const deployableMap = {
     skill: "lua deploy skill",
@@ -40616,12 +41083,13 @@ async function pushVersionedPrimitive(handler, options = {}) {
     if (confirmedVersion !== selected.version) {
       handler.updateVersionInYaml(selected.name, confirmedVersion);
     }
+    if (options.applyEffort && handler.kind === "workflow") console.log(effortMarkerNotice(getCliVersion(), selected.name));
     writeProgress(`
 \u{1F680} Pushing ${selected.name} v${confirmedVersion} to server...`);
-    const result = await handler.pushToServer(apiKey, agentId, entityId, {
+    const result = await handler.pushToServer(apiKey, agentId, entityId, applyEffortMarker({
       ...pushData,
       version: confirmedVersion
-    });
+    }, options.applyEffort));
     if (!result.success) {
       if (result.statusCode === 404) throw stalePushEntryError(handler, selected.name, entityId, result.error);
       throw pushRefusalError(handler, selected.name, result);
@@ -40704,7 +41172,10 @@ async function pushCommand(type, cmdObj) {
       // Reading with `!== false` makes the programmatic-default-true path
       // explicit: when cmdObj is undefined (rare; programmatic invocation)
       // we still default to attaching source.
-      includeSource: cmdObj?.includeSource !== false
+      includeSource: cmdObj?.includeSource !== false,
+      // [WMC-E7] §6.9: a PLAIN push must never set the effort marker, so this reads the flag and nothing else —
+      // no env fallback, no inheritance from a previous push.
+      applyEffort: cmdObj?.applyEffort === true
     };
     let agentOutcome;
     let selectedType;
@@ -41177,6 +41648,11 @@ async function pushAllCommand(options) {
     webhookHandler,
     triggerHandler,
     jobHandler,
+    // BAC — workflows were absent here, so `lua push` / `lua push all` never uploaded a changed
+    // workflow (only the deprecated `lua push workflow` did). A published template then froze the
+    // OLD workflow graph while its jobs advanced — an undetectable jobs-vs-workflows version skew.
+    // Workflows ride the same push here; the deploy step below always activates them (see there).
+    workflowHandler,
     preprocessorHandler,
     postprocessorHandler,
     deviceHandler,
@@ -41208,6 +41684,9 @@ async function pushAllCommand(options) {
     const icon = kindIcons[handler.kind] || "\u{1F4E6}";
     writeProgress(`
 ${icon} Pushing ${items.length} ${handler.displayName}(s)...`);
+    if (options.applyEffort && handler.kind === "workflow") {
+      console.log(effortMarkerNotice(getCliVersion(), `${items.length} workflow(s)`));
+    }
     const handlerVersions = versionLookup.get(handler);
     for (const item of items) {
       try {
@@ -41236,20 +41715,20 @@ ${icon} Pushing ${items.length} ${handler.displayName}(s)...`);
         const baseVersion = serverHighest ? maxSemver(item.version, serverHighest) : item.version;
         let newVersion = incrementPatchVersion(baseVersion);
         writeInfo(`  \u{1F4DD} ${item.name}: ${item.version} \u2192 ${newVersion}`);
-        let result = await handler.pushToServer(apiKey, agentId, entityId, {
+        let result = await handler.pushToServer(apiKey, agentId, entityId, applyEffortMarker({
           ...pushData,
           version: newVersion
-        });
+        }, options.applyEffort));
         if (!result.success && result.error?.toLowerCase().includes("already exists")) {
           console.log(`  \u26A0\uFE0F  Version collision on ${item.name}, refetching server state and retrying...`);
           const freshHighest = await handler.getHighestServerVersion(apiKey, agentId, entityId);
           if (freshHighest) {
             const retryVersion = incrementPatchVersion(freshHighest);
             writeInfo(`  \u{1F4DD} ${item.name}: re-bumped ${newVersion} \u2192 ${retryVersion} after collision`);
-            result = await handler.pushToServer(apiKey, agentId, entityId, {
+            result = await handler.pushToServer(apiKey, agentId, entityId, applyEffortMarker({
               ...pushData,
               version: retryVersion
-            });
+            }, options.applyEffort));
             if (result.success) {
               newVersion = retryVersion;
             }
@@ -41274,7 +41753,7 @@ ${icon} Pushing ${items.length} ${handler.displayName}(s)...`);
           entityId
         });
         writeSuccess(`  \u2705 ${item.name} v${newVersion} pushed`);
-        if (options.autoDeploy) {
+        if (options.autoDeploy || handler.kind === PrimitiveKind.WORKFLOW) {
           toDeploy.push({
             handler,
             name: item.name,
@@ -41328,8 +41807,9 @@ ${icon} Pushing ${items.length} ${handler.displayName}(s)...`);
   if (personaPushResult && !options.autoDeploy) {
     writePersonaServedHint(personaPushResult.version);
   }
-  if (options.autoDeploy && toDeploy.length > 0) {
-    writeProgress("\n\u{1F680} Deploying all pushed versions to production...");
+  if (toDeploy.length > 0) {
+    const workflowsOnly = !options.autoDeploy;
+    writeProgress(workflowsOnly ? "\n\u{1F680} Activating workflow version(s) \u2014 workflows deploy on their own, not via `lua version promote`..." : "\n\u{1F680} Deploying all pushed versions to production...");
     writeInfo("\u23F1\uFE0F  Waiting for server to process versions (5 seconds)...\n");
     await new Promise((resolve7) => setTimeout(resolve7, 5e3));
     for (const item of toDeploy) {
@@ -51771,6 +52251,30 @@ init_constants();
 init_command_utils();
 init_analytics();
 init_workflow_api_service();
+
+// src/interfaces/workflow-autonomy.ts
+init_dist();
+var has2 = /* @__PURE__ */ __name((tuple, v) => tuple.includes(v), "has");
+var isWorkflowAutonomyForm = /* @__PURE__ */ __name((v) => has2(WORKFLOW_AUTONOMY_FORMS, v), "isWorkflowAutonomyForm");
+var kebab = /* @__PURE__ */ __name((key) => key.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase(), "kebab");
+var WORKFLOW_AUTONOMY_CLEAR_KEYS = WORKFLOW_AUTONOMY_ENVELOPE_KEYS.map((k) => kebab(k).replace(/-seconds$/, ""));
+var CLEAR_ALIASES = Object.freeze(Object.fromEntries(WORKFLOW_AUTONOMY_ENVELOPE_KEYS.flatMap((key) => {
+  const flag = kebab(key).replace(/-seconds$/, "");
+  return [
+    flag,
+    kebab(key),
+    key.toLowerCase()
+  ].map((alias) => [
+    alias,
+    key
+  ]);
+})));
+function autonomyClearKey(raw) {
+  return CLEAR_ALIASES[raw.trim().toLowerCase()];
+}
+__name(autonomyClearKey, "autonomyClearKey");
+
+// src/commands/workflows.ts
 init_artifact_loader();
 init_types();
 init_dist2();
@@ -51914,6 +52418,7 @@ function exitCodeForRunStatus(status) {
   if (status === "completed") return WORKFLOW_EXIT.OK;
   if (TERMINAL_FAILED.has(status)) return WORKFLOW_EXIT.RUN_FAILED;
   if (TERMINAL_CANCELLED.has(status)) return WORKFLOW_EXIT.RUN_CANCELLED;
+  if (status === "gated") return WORKFLOW_EXIT.RUN_GATED;
   return void 0;
 }
 __name(exitCodeForRunStatus, "exitCodeForRunStatus");
@@ -51965,11 +52470,12 @@ async function workflowsCommand(action, target, extra, cmdObj) {
         });
         return;
       }
-      const { agentId, apiKey } = await initializeCommand({
+      const { agentId, orgId, apiKey } = await initializeCommand({
         showProgress: !json
       });
       const ctx = {
         agentId,
+        orgId,
         apiKey,
         api: new WorkflowApi(BASE_URLS.API, apiKey, agentId),
         json
@@ -52084,6 +52590,15 @@ async function executeAction(ctx, action, target, extra, o) {
     // ── schedules <list|create|patch|pause|resume|delete> (LUA-627 reads + R28; LUA-752 R27 / R56; goal-owned rows refuse) ──
     case "schedules":
       return schedulesCore(ctx, target, extra, o);
+    // ── policy models <get|set> ([WMC-E7] — §6.5; the org's `models` block) ──
+    case "policy":
+      return policyCore(ctx, target, extra, o);
+    // ── clear-gate ([WMC-E7] — §6.5; `resume` stays the `kind:'input'` resume) ──
+    case "clear-gate":
+      return requireRun(runId, "clear-gate", () => clearGateCore(ctx, runId, o));
+    // ── recompose ([WMC-E7] — §6.4 Q19; a deterministic rewrite, never a fresh composition) ──
+    case "recompose":
+      return requireName(name, "recompose", () => recomposeCore(ctx, name, o));
     case "run":
       return WORKFLOW_EXIT.OK;
   }
@@ -52267,6 +52782,8 @@ async function viewCore(ctx, name) {
   if (active?.envTemplateKeys?.length) {
     console.log(`   Env overlay: ${active.envTemplateKeys.join(", ")}${active.envOverlayHash ? ` \xB7 ${active.envOverlayHash}` : ""}`);
   }
+  const agentModels = agentModelsBlock(active?.agentModels);
+  if (agentModels) console.log(agentModels);
   printViewSchedules(sched);
   printViewGoals(goals);
   printVersions(w.versions ?? [], w.activeVersionId);
@@ -52452,6 +52969,11 @@ async function startCore(ctx, name, o) {
   const { runId, status } = res.data;
   if (!ctx.json) {
     writeSuccess(startResultLine(res.data, wf.name));
+    const card = consentCardLines(res.data.modelConsent);
+    if (card.length) {
+      console.log("");
+      for (const line of card) console.log(line);
+    }
     if (status === "gated" && !o.follow) {
       writeInfo("\u23F8\uFE0F  The run is gated awaiting consent \u2014 approve it from the desktop or: lua workflows status " + runId);
     }
@@ -52605,6 +53127,131 @@ function budgetLine(run) {
   return `${parts.join(" \xB7 ")} (${budgetCopy(run)})`;
 }
 __name(budgetLine, "budgetLine");
+function autonomyDurationLabel(seconds) {
+  if (!Number.isFinite(seconds) || seconds < 0) return `${seconds} s`;
+  if (seconds >= 86400 && seconds % 86400 === 0) return `${fmtNum(seconds / 86400)} d`;
+  if (seconds >= 3600 && seconds % 3600 === 0) return `${fmtNum(seconds / 3600)} h`;
+  if (seconds >= 60 && seconds % 60 === 0) return `${fmtNum(seconds / 60)} m`;
+  return `${fmtNum(seconds)} s`;
+}
+__name(autonomyDurationLabel, "autonomyDurationLabel");
+function autonomyEnvelopeSummary(envelope) {
+  if (!envelope) return void 0;
+  const parts = [
+    envelope.maxCredits !== void 0 ? `${fmtNum(envelope.maxCredits)} credits` : void 0,
+    envelope.maxSteps !== void 0 ? `${fmtNum(envelope.maxSteps)} steps` : void 0,
+    envelope.maxDurationSeconds !== void 0 ? autonomyDurationLabel(envelope.maxDurationSeconds) : void 0
+  ].filter((p) => !!p);
+  return parts.length ? `\u2264 ${parts.join(" \xB7 ")}` : void 0;
+}
+__name(autonomyEnvelopeSummary, "autonomyEnvelopeSummary");
+var CONSENT_VIA_AUTONOMY = "autonomy";
+function consentLine(consent) {
+  if (consent?.via !== CONSENT_VIA_AUTONOMY) return void 0;
+  const envelope = autonomyEnvelopeSummary(consent.envelope);
+  return `auto (policy)${envelope ? ` \u2014 ${envelope}` : ""}`;
+}
+__name(consentLine, "consentLine");
+var dash = /* @__PURE__ */ __name((v) => v === void 0 || v === null || v === "" ? "\u2014" : String(v), "dash");
+function agentModelRow(s) {
+  const effort = s.effort === void 0 ? "\u2014" : s.effortApplied === false ? `${s.effort} (not applied)` : String(s.effort);
+  const requested = s.requires?.length ? `${dash(s.modelRequested)} +${s.requires.join(",")}` : dash(s.modelRequested);
+  return [
+    s.stepId,
+    dash(s.taskClass),
+    requested,
+    dash(s.modelResolved),
+    effort,
+    dash(s.modelReason)
+  ];
+}
+__name(agentModelRow, "agentModelRow");
+function agentModelsBlock(steps) {
+  if (!steps?.length) return void 0;
+  const rows3 = steps.map(agentModelRow);
+  const anyUnapplied = steps.some((s) => s.effort !== void 0 && s.effortApplied === false);
+  const table = renderTable([
+    "Step",
+    "Task class",
+    "Requested",
+    "Resolves to today",
+    "Effort",
+    "Reason"
+  ], rows3);
+  const note = anyUnapplied ? '\n\u{1F4A1} An effort marked "(not applied)" is recorded and counted in the estimate but not sent to the model. `lua push --apply-effort` applies it from the next push.' : "";
+  return `
+\u{1F916} Agent steps
+${table}${note}`;
+}
+__name(agentModelsBlock, "agentModelsBlock");
+function modelRollupRows(run, steps) {
+  const projected = run.usage?.byModel;
+  if (projected?.length) return [
+    ...projected
+  ];
+  const folded = /* @__PURE__ */ new Map();
+  for (const s of steps ?? []) {
+    const b = s.billing;
+    if (!b?.model) continue;
+    const row2 = folded.get(b.model) ?? {
+      model: b.model,
+      calls: 0
+    };
+    row2.calls = (row2.calls ?? 0) + 1;
+    if (b.credits !== void 0) row2.credits = (row2.credits ?? 0) + b.credits;
+    if (b.actions !== void 0) row2.actions = (row2.actions ?? 0) + b.actions;
+    folded.set(b.model, row2);
+  }
+  return [
+    ...folded.values()
+  ].sort((a, b) => (b.actions ?? b.credits ?? 0) - (a.actions ?? a.credits ?? 0));
+}
+__name(modelRollupRows, "modelRollupRows");
+function modelRollupBlock(run, steps) {
+  const rows3 = modelRollupRows(run, steps);
+  if (!rows3.length) return void 0;
+  const seat = run.usage?.engine === "seat" || rows3.some((r) => r.actions !== void 0);
+  const unit = seat ? "Actions" : "Credits";
+  const anyClass = rows3.some((r) => r.class !== void 0);
+  const anyFallback = rows3.some((r) => r.fallbacks !== void 0);
+  const head = [
+    "Model",
+    ...anyClass ? [
+      "Class"
+    ] : [],
+    "Calls",
+    unit,
+    ...anyFallback ? [
+      "Fallbacks"
+    ] : []
+  ];
+  const body = rows3.map((r) => {
+    const spend = seat ? r.actions : r.credits;
+    return [
+      r.model,
+      ...anyClass ? [
+        dash(r.class)
+      ] : [],
+      r.calls !== void 0 ? fmtNum(r.calls) : "\u2014",
+      spend !== void 0 ? fmtNum(spend) : "\u2014",
+      ...anyFallback ? [
+        r.fallbacks !== void 0 ? fmtNum(r.fallbacks) : "\u2014"
+      ] : []
+    ];
+  });
+  const derived = !run.usage?.byModel?.length;
+  const note = derived ? "\n   (derived from the step receipts \u2014 the run has no roll-up of its own)" : "";
+  return `
+\u{1F9E0} By model
+${renderTable(head, body)}${note}`;
+}
+__name(modelRollupBlock, "modelRollupBlock");
+function consentCardLines(consent) {
+  return consent?.card?.length ? [
+    ...consent.card
+  ] : [];
+}
+__name(consentCardLines, "consentCardLines");
 function printRun(run, withSteps) {
   const id = runIdOf(run);
   console.log(`
@@ -52614,6 +53261,8 @@ function printRun(run, withSteps) {
   console.log(`   Created:  ${when2(run.createdAt)}${run.startedAt ? ` \xB7 started ${when2(run.startedAt)}` : ""}${run.completedAt ? ` \xB7 completed ${when2(run.completedAt)}` : ""}`);
   if (run.lineageId && run.lineageId !== id) console.log(`   Lineage:  ${run.lineageId}`);
   if (run.parentRunId) console.log(`   Parent:   ${run.parentRunId} \u2014 lua workflows status ${run.parentRunId} --steps`);
+  const consent = consentLine(run.consent);
+  if (consent) console.log(`   Consent:  ${consent}`);
   const budget = budgetLine(run);
   if (budget) console.log(`   Budget:   ${budget}`);
   if (run.cancel) console.log(`   Cancel:   ${formatRunCancel(run.cancel)}`);
@@ -52629,6 +53278,11 @@ function printRun(run, withSteps) {
       console.log(`   lua workflows raise-budget ${id} --credits <n>`);
     } else if (kind === "billing") {
       for (const line of billingParkLines(run)) console.log(line);
+    } else if (kind === "model_policy") {
+      console.log(`
+\u23F8\uFE0F  Paused \u2014 a step's model request cannot be resolved under the current policy:`);
+      if (run.gate?.code) console.log(`   ${run.gate.code}${run.gate.stepId ? ` \xB7 step ${run.gate.stepId}` : ""}`);
+      console.log(`   lua workflows clear-gate ${id} --kind model_policy`);
     } else {
       console.log(`   Gate:     ${kind}${run.gate.reason ? ` (${run.gate.reason})` : ""}${run.gate.since ? ` since ${when2(run.gate.since)}` : ""}`);
     }
@@ -52677,6 +53331,8 @@ function printRun(run, withSteps) {
       for (const s of steps) for (const line of stepAttemptLines(s)) console.log(line);
     }
   }
+  const rollup = modelRollupBlock(run, steps);
+  if (rollup) console.log(rollup);
 }
 __name(printRun, "printRun");
 function billingParkLines(run) {
@@ -52706,6 +53362,8 @@ function stepAttemptLines(s) {
   if (billed) out.push(`   $ ${s.stepId}: attempt ${s.billing?.attempt ?? s.attempt ?? 1} billed: ${billed}`);
   const fetchable = outputRefLine(s.outputRef);
   if (fetchable) out.push(`   \u21E9 ${s.stepId}: ${fetchable}`);
+  const escalated = approverFallbackLine(s);
+  if (escalated) out.push(escalated);
   for (const a of s.attempts ?? []) {
     if (a.status === "completed") continue;
     const what = stepErrorCell(a.error) || a.killReason || "\u2014";
@@ -52715,6 +53373,13 @@ function stepAttemptLines(s) {
   return out;
 }
 __name(stepAttemptLines, "stepAttemptLines");
+function approverFallbackLine(s) {
+  const f = s.suspend?.approverFallback;
+  if (!f?.from || !f.to) return void 0;
+  const why = f.reason === "initiator_excluded" ? "the initiator is excluded (maker-checker)" : f.reason;
+  return `   \u21C5 ${s.stepId}: approver escalated ${f.from} \u2192 ${f.to}${why ? ` \u2014 ${why}` : ""}`;
+}
+__name(approverFallbackLine, "approverFallbackLine");
 function outputRefLine(ref) {
   if (!ref?.artefactId || !ref.url) return void 0;
   const gate = "needs workflows:read-outputs";
@@ -53681,6 +54346,26 @@ async function replayChildRun(ctx, childRunId) {
   };
 }
 __name(replayChildRun, "replayChildRun");
+var WORKFLOW_LOG_EVENT_PATTERN = /progress|log|started|completed|failed|skipped|model_resolved|model_policy_warning/;
+function modelEventDetail(type, data) {
+  if (type !== "step.model_resolved" && type !== "step.model_policy_warning") return void 0;
+  const d = data ?? {};
+  const nested = d.detail ?? {};
+  const str = /* @__PURE__ */ __name((...vals) => {
+    for (const v of vals) if (typeof v === "string" && v) return v;
+    return void 0;
+  }, "str");
+  const requested = str(d.requested, nested.requested, d.modelRequested, nested.modelRequested);
+  const resolved = str(d.resolved, nested.resolved, d.model, nested.model);
+  if (type === "step.model_resolved") {
+    const cls = requested?.startsWith("class/") ? requested.slice("class/".length) : str(d.taskClass, nested.taskClass);
+    return `model resolved \u2192 ${resolved ?? requested ?? "?"}${cls ? ` (${cls})` : ""}`;
+  }
+  const outcome = str(d.outcome, nested.outcome, d.code, nested.code) ?? "unknown";
+  const detail = str(d.message, nested.message) ?? (requested && resolved && requested !== resolved ? `${requested} \u2192 ${resolved}` : requested ?? resolved);
+  return `model policy warning: ${outcome}${detail ? ` ${detail}` : ""}`;
+}
+__name(modelEventDetail, "modelEventDetail");
 async function logsCore(ctx, runId, o) {
   if (o.follow) return watchCore(ctx, runId, o);
   const res = await ctx.api.getRunEvents(runId, {
@@ -53689,10 +54374,11 @@ async function logsCore(ctx, runId, o) {
   if (!res.success || !res.data) return apiFailure(ctx, res, "logs");
   emitJson(ctx, res);
   if (ctx.json) return WORKFLOW_EXIT.OK;
-  const events = (res.data.events ?? []).filter((e) => (!o.step || e.stepId === o.step) && /progress|log|started|completed|failed|skipped/.test(e.type));
+  const events = (res.data.events ?? []).filter((e) => (!o.step || e.stepId === o.step) && WORKFLOW_LOG_EVENT_PATTERN.test(e.type));
   if (events.length === 0) console.log("(no log events yet)");
   for (const e of events) {
-    const msg = scrubEventData(e.data)?.message ?? subrunEventDetail(e);
+    const data = scrubEventData(e.data);
+    const msg = modelEventDetail(e.type, data) ?? data?.message ?? subrunEventDetail(e);
     console.log(`[${clockOf(e.ts)}] ${e.type}${e.stepId ? ` \xB7 ${e.stepId}` : ""}${msg ? ` \xB7 ${msg}` : ""}`);
   }
   return WORKFLOW_EXIT.OK;
@@ -55384,6 +56070,290 @@ async function schedulesPatchCore(ctx, jobId, verb, o) {
   return WORKFLOW_EXIT.OK;
 }
 __name(schedulesPatchCore, "schedulesPatchCore");
+function csvFlag(raw) {
+  if (raw === void 0) return void 0;
+  const parts = (Array.isArray(raw) ? raw : [
+    raw
+  ]).flatMap((v) => String(v).split(","));
+  const out = parts.map((v) => v.trim()).filter((v) => v.length > 0);
+  return out;
+}
+__name(csvFlag, "csvFlag");
+function badFlagValue(flag, value3, allowed) {
+  return CliError.usage(`${flag}: "${value3}" is not a valid value`, `${flag} takes one of ${allowed.map((v) => `\`${v}\``).join(", ")}`);
+}
+__name(badFlagValue, "badFlagValue");
+function buildModelsPolicyPatch(o) {
+  const patch = {};
+  if (o.compose !== void 0) {
+    const v = String(o.compose);
+    if (!WORKFLOW_MODELS_COMPOSE_MODES.includes(v)) throw badFlagValue("--compose", v, WORKFLOW_MODELS_COMPOSE_MODES);
+    patch.compose = v;
+  }
+  if (o.maxClass !== void 0) {
+    const v = String(o.maxClass);
+    if (!isWorkflowModelClass(v)) throw badFlagValue("--max-class", v, WORKFLOW_MODEL_CLASSES);
+    patch.maxClass = v;
+  }
+  if (o.consentActions !== void 0) {
+    const n2 = parseIntegerFlag(o.consentActions, "--consent-actions", {
+      min: WORKFLOW_MODELS_CONSENT_ACTIONS_MIN
+    });
+    if (n2 !== void 0) patch.consentActions = n2;
+  }
+  if (o.pins !== void 0) {
+    const v = String(o.pins);
+    if (!WORKFLOW_MODELS_PIN_MODES.includes(v)) throw badFlagValue("--pins", v, WORKFLOW_MODELS_PIN_MODES);
+    patch.pins = v;
+  }
+  if (o.fallback !== void 0) {
+    const v = String(o.fallback);
+    if (!WORKFLOW_MODELS_FALLBACK_MODES.includes(v)) throw badFlagValue("--fallback", v, WORKFLOW_MODELS_FALLBACK_MODES);
+    patch.fallback = v;
+  }
+  const allow = csvFlag(o.allow);
+  if (allow !== void 0) patch.allow = allow;
+  const classes = {};
+  const perClass = {
+    fast: o.classFast,
+    balanced: o.classBalanced,
+    strong: o.classStrong
+  };
+  for (const c of WORKFLOW_MODEL_CLASSES) {
+    const codes = csvFlag(perClass[c]);
+    if (codes !== void 0) classes[c] = codes;
+  }
+  if (Object.keys(classes).length) patch.classes = classes;
+  if (o.classMap !== void 0) {
+    const map = {};
+    for (const entry of csvFlag(o.classMap) ?? []) {
+      const [task, cls] = entry.split("=").map((v) => v.trim());
+      if (!task || !cls) throw CliError.usage(`--class-map: "${entry}" is not a mapping`, "--class-map takes `<taskClass>=<modelClass>` pairs, e.g. --class-map judge=strong,draft=balanced");
+      if (!isWorkflowTaskClass(task)) throw badFlagValue("--class-map", task, WORKFLOW_TASK_CLASSES);
+      if (!isWorkflowModelClass(cls)) throw badFlagValue("--class-map", cls, WORKFLOW_MODEL_CLASSES);
+      map[task] = cls;
+    }
+    if (Object.keys(map).length) patch.classMap = map;
+  }
+  return patch;
+}
+__name(buildModelsPolicyPatch, "buildModelsPolicyPatch");
+function modelsPolicyLines(models) {
+  const lines = [
+    "\n\u{1F9E0} Workflow model policy"
+  ];
+  if (!models || Object.keys(models).length === 0) {
+    lines.push("   (not set \u2014 the platform defaults apply: assignment off, no class ceiling, composed steps class-only)");
+    return lines;
+  }
+  const show = /* @__PURE__ */ __name((label2, v, fallback) => {
+    lines.push(`   ${label2.padEnd(16)} ${v === void 0 || v === null ? `\u2014 (${fallback})` : String(v)}`);
+  }, "show");
+  show("compose", models.compose, "platform default");
+  show("maxClass", models.maxClass, "no ceiling below `strong`");
+  show("consentActions", models.consentActions, "platform default");
+  show("pins", models.pins, "class-only on composed definitions");
+  show("fallback", models.fallback, "same-class");
+  lines.push(`   ${"allow".padEnd(16)} ${models.allow?.length ? models.allow.join(", ") : "\u2014 (all approved, minus the organization\u2019s excluded models)"}`);
+  if (models.classes && Object.keys(models.classes).length) {
+    lines.push("   classes");
+    for (const c of WORKFLOW_MODEL_CLASSES) {
+      const codes = models.classes[c];
+      if (codes?.length) lines.push(`     ${c.padEnd(10)} ${codes.join(", ")}`);
+    }
+  }
+  if (models.classMap && Object.keys(models.classMap).length) {
+    lines.push("   classMap (overrides only)");
+    for (const [task, cls] of Object.entries(models.classMap)) lines.push(`     ${task.padEnd(10)} \u2192 ${cls}`);
+  }
+  return lines;
+}
+__name(modelsPolicyLines, "modelsPolicyLines");
+var WORKFLOW_AUTONOMY_ENABLED_WORDS = [
+  "on",
+  "off"
+];
+var AUTONOMY_NUMERIC_FLAGS = {
+  maxCredits: "--max-credits",
+  maxSteps: "--max-steps",
+  // `--max-duration` takes SECONDS and the wire key says so; `--max-duration-seconds` is `raise-budget`'s
+  // own flag for a different thing (one run's wall), so the two deliberately do not share a spelling.
+  maxDurationSeconds: "--max-duration",
+  maxActions: "--max-actions",
+  maxRunsPerHour: "--max-runs-per-hour"
+};
+function buildAutonomyPolicyPatch(o) {
+  const patch = {};
+  if (o.enabled !== void 0) {
+    const v = String(o.enabled).trim().toLowerCase();
+    if (!WORKFLOW_AUTONOMY_ENABLED_WORDS.includes(v)) throw badFlagValue("--enabled", String(o.enabled), WORKFLOW_AUTONOMY_ENABLED_WORDS);
+    patch.enabled = v === "on";
+  }
+  const raw = {
+    maxCredits: o.maxCredits,
+    maxSteps: o.maxSteps,
+    maxDurationSeconds: o.maxDuration,
+    maxActions: o.maxActions,
+    maxRunsPerHour: o.maxRunsPerHour
+  };
+  for (const key of WORKFLOW_AUTONOMY_NUMERIC_KEYS) {
+    const n2 = parseIntegerFlag(raw[key], AUTONOMY_NUMERIC_FLAGS[key], {
+      min: WORKFLOW_AUTONOMY_MIN_VALUE
+    });
+    if (n2 !== void 0) patch[key] = n2;
+  }
+  const forms = csvFlag(o.forms);
+  if (forms !== void 0) {
+    for (const f of forms) if (!isWorkflowAutonomyForm(f)) throw badFlagValue("--forms", f, WORKFLOW_AUTONOMY_FORMS);
+    patch.forms = forms;
+  }
+  for (const token of csvFlag(o.clear) ?? []) {
+    const key = autonomyClearKey(token);
+    if (!key) throw badFlagValue("--clear", token, WORKFLOW_AUTONOMY_CLEAR_KEYS);
+    if (patch[key] !== void 0) throw CliError.usage(`--clear: "${token}" is also being set by ${key === "enabled" ? "--enabled" : key === "forms" ? "--forms" : AUTONOMY_NUMERIC_FLAGS[key]}`, "Clear a member or set it, not both in one call \u2014 `--clear` sends `null` so the platform default applies again.");
+    patch[key] = null;
+  }
+  return patch;
+}
+__name(buildAutonomyPolicyPatch, "buildAutonomyPolicyPatch");
+function autonomyPolicyLines(autonomy, effective, opts = {}) {
+  const lines = [
+    "\n\u{1F6E1}\uFE0F  Workflow autonomy (the pre-consented envelope)"
+  ];
+  const show = /* @__PURE__ */ __name((target, label2, v, fallback) => {
+    const rendered = v === void 0 || v === null ? `\u2014 (${fallback})` : label2 === "maxDurationSeconds" && typeof v === "number" ? `${fmtNum(v)} (${autonomyDurationLabel(v)})` : Array.isArray(v) ? v.join(", ") : String(v);
+    target.push(`   ${label2.padEnd(18)} ${rendered}`);
+  }, "show");
+  const block = /* @__PURE__ */ __name((target, e) => {
+    show(target, "enabled", e.enabled, `${WORKFLOW_AUTONOMY_ENABLED_DEFAULT} \u2014 absent means the organization never opted in`);
+    show(target, "maxCredits", e.maxCredits, `default ${WORKFLOW_AUTONOMY_DEFAULTS.maxCredits}, clamped to caps.maxCreditsPerRun`);
+    show(target, "maxSteps", e.maxSteps, `default ${WORKFLOW_AUTONOMY_DEFAULTS.maxSteps}`);
+    show(target, "maxDurationSeconds", e.maxDurationSeconds, `default ${fmtNum(WORKFLOW_AUTONOMY_DEFAULTS.maxDurationSeconds)} \u2014 ${autonomyDurationLabel(WORKFLOW_AUTONOMY_DEFAULTS.maxDurationSeconds)}`);
+    show(target, "maxActions", e.maxActions, "the organization\u2019s own models.consentActions");
+    show(target, "maxRunsPerHour", e.maxRunsPerHour, `default ${WORKFLOW_AUTONOMY_DEFAULTS.maxRunsPerHour}`);
+    show(target, "forms", e.forms?.length ? e.forms : void 0, `${WORKFLOW_AUTONOMY_FORMS_DEFAULT.join(", ")} \u2014 script opts in`);
+  }, "block");
+  if (!autonomy || Object.keys(autonomy).length === 0) {
+    lines.push("   (not set \u2014 autonomy is OFF for this organization: every start that would ask a person still asks,", "    exactly as it does today)");
+  } else {
+    block(lines, autonomy);
+  }
+  if (effective) {
+    lines.push("\n   Effective envelope (the server\u2019s own resolution \u2014 org narrowed by agent, defaults applied)");
+    block(lines, effective);
+    if (effective.enabled !== true) lines.push("   (enabled is not true \u2014 nothing is pre-consented; every start that would ask still asks)");
+  } else if (opts.effectiveAsked) {
+    lines.push("\n   Effective envelope \u2014 the server served no resolution for it (a server without the envelope, or a", "   policy route that does not answer `?effective=true`). What is above is the STORED block only; what a", "   start would actually be admitted under is not shown.");
+  }
+  return lines;
+}
+__name(autonomyPolicyLines, "autonomyPolicyLines");
+var POLICY_NOUNS = [
+  "models",
+  "autonomy"
+];
+async function autonomyPolicyCore(ctx, verb, o) {
+  const action = verb ?? "get";
+  if (action !== "get" && action !== "set") throw CliError.usage(`policy autonomy: "${action}" is not an action`, "lua workflows policy autonomy get \xB7 lua workflows policy autonomy set \u2026");
+  if (o.agent) throw CliError.usage("policy autonomy: --agent is not supported", "There is no route that WRITES a per-agent workflow setting: the sub-agent PATCH has no `workflows` member, so a narrowing sent that way is accepted and discarded. Set the organization\u2019s envelope instead (lua workflows policy autonomy set \u2026); `policy autonomy get` shows a per-agent narrowing when the effective projection carries one.");
+  if (action === "get") {
+    const res2 = await ctx.api.getWorkflowPolicy(ctx.orgId, {
+      effective: true
+    });
+    if (!res2.success || !res2.data) return apiFailure(ctx, res2, "policy autonomy get");
+    emitJson(ctx, res2);
+    if (!ctx.json) for (const line of autonomyPolicyLines(res2.data.autonomy, res2.data.effective?.autonomy, {
+      effectiveAsked: true
+    })) console.log(line);
+    return WORKFLOW_EXIT.OK;
+  }
+  const patch = parsedOrUsage(() => buildAutonomyPolicyPatch(o));
+  if (Object.keys(patch).length === 0) throw CliError.usage("policy autonomy set: nothing to set", `Name at least one member: --enabled on|off \xB7 --max-credits <n> \xB7 --max-steps <n> \xB7 --max-duration <seconds> \xB7 --max-actions <n> \xB7 --max-runs-per-hour <n> \xB7 --forms ${WORKFLOW_AUTONOMY_FORMS.join(",")} \xB7 --clear <${WORKFLOW_AUTONOMY_CLEAR_KEYS.join("|")}>`);
+  const named = Object.keys(patch).join(", ");
+  const res = await ctx.api.patchWorkflowPolicyAutonomy(ctx.orgId, patch);
+  if (!res.success || !res.data) return apiFailure(ctx, res, "policy autonomy set");
+  emitJson(ctx, res);
+  if (!ctx.json) {
+    writeSuccess(`\u2705 Workflow autonomy policy updated (${named})`);
+    for (const line of autonomyPolicyLines(res.data.autonomy, res.data.effective?.autonomy)) console.log(line);
+    console.log("\n\u{1F4A1} A policy change reaches a starting agent within 30 seconds.");
+    console.log("   The platform switch and `dynamic: false` still sit above it, and `askAboveThresholds: false`");
+    console.log("   still refuses \u2014 autonomy turns an \u201Cask\u201D into an \u201Cauto\u201D, never a \u201Crefuse\u201D into either.");
+  }
+  return WORKFLOW_EXIT.OK;
+}
+__name(autonomyPolicyCore, "autonomyPolicyCore");
+async function policyCore(ctx, noun, verb, o) {
+  if (noun === "autonomy") return autonomyPolicyCore(ctx, verb, o);
+  if (noun !== "models") throw CliError.usage(`policy: "${noun ?? ""}" is not a policy noun`, `policy takes one of ${POLICY_NOUNS.map((n2) => `\`${n2}\``).join(", ")} \u2014 lua workflows policy models get \xB7 lua workflows policy autonomy get`);
+  const action = verb ?? "get";
+  if (action !== "get" && action !== "set") throw CliError.usage(`policy models: "${action}" is not an action`, "lua workflows policy models get \xB7 lua workflows policy models set \u2026");
+  if (action === "get") {
+    const res2 = await ctx.api.getWorkflowPolicy(ctx.orgId);
+    if (!res2.success || !res2.data) return apiFailure(ctx, res2, "policy models get");
+    emitJson(ctx, res2);
+    if (!ctx.json) for (const line of modelsPolicyLines(res2.data.models)) console.log(line);
+    return WORKFLOW_EXIT.OK;
+  }
+  const patch = buildModelsPolicyPatch(o);
+  if (Object.keys(patch).length === 0) throw CliError.usage("policy models set: nothing to set", "Name at least one field: --compose on|off \xB7 --max-class fast|balanced|strong \xB7 --consent-actions <n> \xB7 --pins class-only|allowed \xB7 --fallback same-class|same-provider \xB7 --allow <codes> \xB7 --class-fast/--class-balanced/--class-strong <codes> \xB7 --class-map <task>=<class>");
+  const res = await ctx.api.patchWorkflowPolicyModels(ctx.orgId, patch);
+  if (!res.success || !res.data) return apiFailure(ctx, res, "policy models set");
+  emitJson(ctx, res);
+  if (!ctx.json) {
+    writeSuccess(`\u2705 Workflow model policy updated (${Object.keys(patch).join(", ")})`);
+    for (const line of modelsPolicyLines(res.data.models)) console.log(line);
+    console.log("\n\u{1F4A1} A policy change reaches a composing agent within 30 seconds.");
+  }
+  return WORKFLOW_EXIT.OK;
+}
+__name(policyCore, "policyCore");
+async function clearGateCore(ctx, runId, o) {
+  const kind = o.kind;
+  if (!kind) throw CliError.usage("clear-gate: --kind is required", `lua workflows clear-gate ${runId} --kind model_policy`);
+  const res = await ctx.api.clearRunGate(runId, String(kind));
+  if (!res.success || !res.data) return apiFailure(ctx, res, "clear-gate");
+  emitJson(ctx, res);
+  if (ctx.json) return WORKFLOW_EXIT.OK;
+  if (res.data.cleared) {
+    writeSuccess(`\u2705 Cleared the ${res.data.kind ?? kind} gate on ${runId}${res.data.status ? ` \u2014 ${res.data.status}` : ""}`);
+    console.log(`   lua workflows watch ${runId}`);
+  } else {
+    writeInfo(`\u2139\uFE0F  ${runId} is not parked on a ${kind} gate${res.data.reason ? ` \u2014 ${res.data.reason}` : ""}. Nothing to clear.`);
+  }
+  return WORKFLOW_EXIT.OK;
+}
+__name(clearGateCore, "clearGateCore");
+function recomposeNextSteps(wf, version) {
+  const lines = [
+    `   lua workflows view ${wf.name}`,
+    `   lua workflows versions ${wf.name}`
+  ];
+  if (wf.dynamic === true) {
+    lines.push("   (this workflow was composed by chat \u2014 `deploy` does not apply to it; the new version is published on the", "    same definition, and `versions` shows which one is active)");
+  } else {
+    lines.push(`   lua workflows deploy ${wf.name} -v ${version ?? "latest"}`);
+  }
+  return lines;
+}
+__name(recomposeNextSteps, "recomposeNextSteps");
+async function recomposeCore(ctx, name, _o) {
+  const wf = await resolveWorkflow(ctx, name);
+  if (!wf) return WORKFLOW_EXIT.NOT_FOUND;
+  const res = await ctx.api.recomposeWorkflow(wf.id);
+  if (!res.success || !res.data) return apiFailure(ctx, res, "recompose");
+  emitJson(ctx, res);
+  if (ctx.json) return WORKFLOW_EXIT.OK;
+  const d = res.data;
+  if (d.unchanged) {
+    writeInfo(`\u2139\uFE0F  ${wf.name} already asks for model classes everywhere it can \u2014 no new version was published.`);
+    return WORKFLOW_EXIT.OK;
+  }
+  writeSuccess(`\u2705 ${wf.name} recomposed \u2192 version ${d.version ?? d.versionId ?? "(new)"}` + (d.rewritten !== void 0 ? ` \xB7 ${d.rewritten} agent step${d.rewritten === 1 ? "" : "s"} rewritten` : ""));
+  for (const line of recomposeNextSteps(wf, d.version)) console.log(line);
+  return WORKFLOW_EXIT.OK;
+}
+__name(recomposeCore, "recomposeCore");
 
 // src/commands/features.ts
 init_cli();
@@ -64118,6 +65088,69 @@ import chalk4 from "chalk";
 init_compiler2();
 init_artifact_loader();
 init_analytics();
+
+// src/commands/models-workflow-view.ts
+function classOf(m) {
+  const c = m.fitness?.class;
+  return c && WORKFLOW_MODEL_CLASSES.includes(c) ? c : void 0;
+}
+__name(classOf, "classOf");
+function isAwaitingConfirmation(m) {
+  return m.fitness !== void 0 && m.fitness.confirmed !== true;
+}
+__name(isAwaitingConfirmation, "isAwaitingConfirmation");
+function isPinOnly(m) {
+  return classOf(m) === void 0 || m.calibrated === false || isAwaitingConfirmation(m);
+}
+__name(isPinOnly, "isPinOnly");
+function costCell(m) {
+  if (m.actionMultiplier === void 0) return "\u2014";
+  const rate = `${m.actionMultiplier}\xD7`;
+  if (m.billing === "byok") return `${rate} (own key)`;
+  if (m.calibrated === false) return `${rate} (estimate)`;
+  return rate;
+}
+__name(costCell, "costCell");
+function notesCell(m) {
+  const notes = [];
+  if (isAwaitingConfirmation(m)) notes.push("awaiting confirmation");
+  if (m.billing === "byok") notes.push("own key");
+  if (m.calibrated === false) notes.push("rate not calibrated");
+  if (isPinOnly(m)) notes.push("pin only");
+  return notes.length ? notes.join(" \xB7 ") : "";
+}
+__name(notesCell, "notesCell");
+function workflowModelRows(models) {
+  const order = /* @__PURE__ */ __name((m) => {
+    const c = classOf(m);
+    if (c === void 0) return WORKFLOW_MODEL_CLASSES.length;
+    return WORKFLOW_MODEL_CLASSES.indexOf(c);
+  }, "order");
+  return [
+    ...models
+  ].sort((a, b) => order(a) - order(b) || (a.actionMultiplier ?? 0) - (b.actionMultiplier ?? 0) || a.code.localeCompare(b.code)).map((m) => ({
+    class: classOf(m) ?? "\u2014",
+    code: m.code,
+    bestFor: m.fitness?.bestFor?.length ? m.fitness.bestFor.join(", ") : "\u2014",
+    speed: m.fitness?.speed ?? "\u2014",
+    cost: costCell(m),
+    efforts: m.reasoning?.efforts?.length ? m.reasoning.efforts.join(", ") : "\u2014",
+    notes: notesCell(m)
+  }));
+}
+__name(workflowModelRows, "workflowModelRows");
+function workflowModelFootnotes(models) {
+  const out = [];
+  if (models.some(isAwaitingConfirmation)) out.push("\u2022 awaiting confirmation \u2014 new to the catalog. It can be pinned by code, but no model class resolves to it yet.");
+  if (models.some((m) => m.billing === "byok")) out.push("\u2022 own key \u2014 served through your organization\u2019s own provider key, shown at that provider\u2019s relative rate because you pay them directly.");
+  if (models.some((m) => m.calibrated === false)) out.push("\u2022 rate not calibrated \u2014 the cost shown is a conservative placeholder, not a measured rate.");
+  if (models.some((m) => m.reasoning?.efforts?.length === 1 || m.reasoning?.supported === false)) out.push("\u2022 a model with no graded effort ladder ignores a step\u2019s `effort`; it is recorded but inert.");
+  out.push("\u2022 cost is a multiple of a small call on the pricing baseline model \u2014 the unit your run budget counts.");
+  return out;
+}
+__name(workflowModelFootnotes, "workflowModelFootnotes");
+
+// src/commands/models.ts
 init_cli_error();
 function noAgentConfigured() {
   return CliError.usage("No agent configured.", "Run `lua init` first to set up a project.");
@@ -64184,6 +65217,44 @@ async function listModels(models, currentModel, opts) {
   console.log("");
 }
 __name(listModels, "listModels");
+async function listWorkflowModels(models, opts) {
+  const rows3 = models;
+  if (opts.json) {
+    console.log(JSON.stringify({
+      view: "workflows",
+      models
+    }, null, 2));
+    return;
+  }
+  const table = workflowModelRows(rows3);
+  console.log("");
+  console.log(chalk4.bold("\u{1F9ED} Models for workflow steps"));
+  console.log("");
+  console.log(renderTable([
+    "Class",
+    "Model",
+    "Best for",
+    "Speed",
+    "Cost",
+    "Efforts",
+    "Notes"
+  ], table.map((r) => [
+    r.class,
+    r.code,
+    r.bestFor,
+    r.speed,
+    r.cost,
+    r.efforts,
+    r.notes
+  ])));
+  console.log("");
+  for (const note of workflowModelFootnotes(rows3)) console.log(`  ${chalk4.gray(note)}`);
+  console.log("");
+  console.log(`  \u{1F4A1} A step asks for a class with ${chalk4.cyan("model: 'class/balanced'")}, or names its work with ${chalk4.cyan("taskClass")}.`);
+  console.log(`     ${chalk4.cyan("lua workflows policy models get")} shows the classes and ceilings your organization has set.`);
+  console.log("");
+}
+__name(listWorkflowModels, "listWorkflowModels");
 async function modelsCommand(action, opts) {
   return withErrorHandling(async () => {
     const resolvedAction = action ? validateOrSuggest("models.action", action) : "list";
@@ -64201,6 +65272,16 @@ async function modelsCommand(action, opts) {
         });
         return;
       }
+      if (opts.workflows) {
+        await listWorkflowModels(models, opts);
+        trackEvent("cli_models_listed", {
+          models_count: models.length,
+          has_current_model: false,
+          json_output: opts.json ?? false,
+          workflows_view: true
+        });
+        return;
+      }
       const currentModel = agentId ? await resolveCurrentModel(apiKey, agentId) : null;
       await listModels(models, currentModel, opts);
       trackEvent("cli_models_listed", {
@@ -64391,13 +65472,13 @@ function hasSox() {
 __name(hasSox, "hasSox");
 function detectSoxInstaller() {
   const os3 = platform3();
-  const has = /* @__PURE__ */ __name((bin) => spawnSync(bin, [
+  const has3 = /* @__PURE__ */ __name((bin) => spawnSync(bin, [
     "--version"
   ], {
     stdio: "ignore"
   }).status === 0, "has");
   if (os3 === "darwin") {
-    if (has("brew")) return {
+    if (has3("brew")) return {
       manager: "Homebrew",
       argv: [
         "brew",
@@ -64408,7 +65489,7 @@ function detectSoxInstaller() {
     return null;
   }
   if (os3 === "linux") {
-    if (has("apt-get")) return {
+    if (has3("apt-get")) return {
       manager: "apt",
       argv: [
         "sudo",
@@ -64419,7 +65500,7 @@ function detectSoxInstaller() {
       ],
       note: "may prompt for sudo password"
     };
-    if (has("apt")) return {
+    if (has3("apt")) return {
       manager: "apt",
       argv: [
         "sudo",
@@ -64430,7 +65511,7 @@ function detectSoxInstaller() {
       ],
       note: "may prompt for sudo password"
     };
-    if (has("dnf")) return {
+    if (has3("dnf")) return {
       manager: "dnf",
       argv: [
         "sudo",
@@ -64441,7 +65522,7 @@ function detectSoxInstaller() {
       ],
       note: "may prompt for sudo password"
     };
-    if (has("yum")) return {
+    if (has3("yum")) return {
       manager: "yum",
       argv: [
         "sudo",
@@ -64452,7 +65533,7 @@ function detectSoxInstaller() {
       ],
       note: "may prompt for sudo password"
     };
-    if (has("pacman")) return {
+    if (has3("pacman")) return {
       manager: "pacman",
       argv: [
         "sudo",
@@ -64463,7 +65544,7 @@ function detectSoxInstaller() {
       ],
       note: "may prompt for sudo password"
     };
-    if (has("apk")) return {
+    if (has3("apk")) return {
       manager: "apk",
       argv: [
         "sudo",
@@ -64476,7 +65557,7 @@ function detectSoxInstaller() {
     return null;
   }
   if (os3 === "win32") {
-    if (has("winget")) return {
+    if (has3("winget")) return {
       manager: "winget",
       argv: [
         "winget",
@@ -64487,7 +65568,7 @@ function detectSoxInstaller() {
         "--silent"
       ]
     };
-    if (has("choco")) return {
+    if (has3("choco")) return {
       manager: "Chocolatey",
       argv: [
         "choco",
@@ -64496,7 +65577,7 @@ function detectSoxInstaller() {
         "-y"
       ]
     };
-    if (has("scoop")) return {
+    if (has3("scoop")) return {
       manager: "Scoop",
       argv: [
         "scoop",
@@ -66471,7 +67552,7 @@ Examples:
   $ lua test skill --name mySkill --json              Output raw JSON for scripting
   $ lua test workflow --name outreach --input @leads.json --step-output draftEmail=@draft.json --approve reviewDrafts
 `).action(testCommand);
-  program2.command("push [type]").description("\u2601\uFE0F  Push skill, agent, webhook, job, MCP server, or backup to server").option("--force", "Skip all confirmation prompts (auto-confirm)").option("--auto-deploy", "Automatically deploy to production after push").option("--name <name>", "Entity name to push").option("--set-version <version>", "Version to set (e.g., 1.0.5)").option("--fresh", "Build backup manifest from disk instead of compiled manifest.json (push backup only)").option("--no-include-source", "Skip the per-skill source attach after push (default: attach, so admin Builder UI sees CLI edits)").addHelpText("after", `
+  program2.command("push [type]").description("\u2601\uFE0F  Push skill, agent, webhook, job, MCP server, or backup to server").option("--force", "Skip all confirmation prompts (auto-confirm)").option("--auto-deploy", "Automatically deploy to production after push").option("--name <name>", "Entity name to push").option("--set-version <version>", "Version to set (e.g., 1.0.5)").option("--fresh", "Build backup manifest from disk instead of compiled manifest.json (push backup only)").option("--apply-effort", "push workflow: send each agent step's effort to the model from this version on (a plain push never does)").option("--no-include-source", "Skip the per-skill source attach after push (default: attach, so admin Builder UI sees CLI edits)").addHelpText("after", `
 Arguments:
   type                   Optional: 'skill', 'agent', 'persona', 'webhook', 'job', 'preprocessor', 'postprocessor', 'mcp', 'backup', or 'all' (prompts if not provided)
 
@@ -66727,7 +67808,7 @@ Examples:
   $ lua jobs versions -i myJob                         View job versions
   $ lua jobs history -i myJob                          View execution history
 `).action(jobsCommand);
-  program2.command("workflows [action] [target] [extra]").description("\u{1F9ED} Manage workflows and their runs (list, start, watch, cancel, resume, retry-step, resolve-step, raise-budget, approve, signal, replay, export, schedules)").option("-i, --workflow-name <name>", "Workflow name (or id)").option("-r, --run-id <id>", "Run id").option("-v, --workflow-version <ver>", "deploy/start/export/goals create/schedules create: a semver, 'latest' (newest push) or a version id").option("--json", "Print the raw {success,data} envelope").option("--all", "list: include dynamic workflows").option("--input <json|@file>", "start/run/goals create/schedules create: run input").option("--idempotency-key <key>", "start: idempotency key").option("--correlation-key <key>", "start/runs: correlation key").option("--tag <tag>", "start/runs/schedules create: tag (repeatable, \u2264 10)", collect, []).option("--budget-credits <n>", "start/schedules create: run budget (credits)").option("--wait <s>", "start: server long-poll \u2264 55 s").option("--follow", "start/logs: attach watch").option("--status <status>", "runs/goals list: filter by status").option("--workflow <name>", "runs: filter by workflow").option("--limit <n>", "runs/goals list/approval-payload --path: page size").option("--cursor <c>", "runs/goals list/approval-payload --path: page cursor").option("--sort <field>", "runs: -createdAt|createdAt|-durationMs|durationMs").option("--steps", "status: per-step table").option("--strict", "status: exit 4/5 by terminal status").option("--after <seq>", "watch: replay from seq").option("--timeout <s>", "watch / start --follow: give up after s seconds while the run is still live (exit 7)").option("--events", "watch: print raw frames").option("--wait-for-human", "watch / start --follow: keep following through a human boundary (approval, input, signal, park) instead of exiting 8").option("--reason <text>", "cancel: reason").option("--step <id>", "resume/retry-step/resolve-step/logs: step id").option("--outcome <skip|complete|fail>", "resolve-step: the decision on the parked step (--action is accepted too)").option("--action <skip|complete|fail>", "resolve-step: alias of --outcome").option("--output <json|@file>", "resolve-step: the output a completed step would have produced (required with --outcome complete)").option("--credits <n>", "raise-budget: the new credit cap of a budget-parked run (above the current one)").option("--max-steps <n>", "raise-budget: the new step cap").option("--max-job-seconds <n>", "raise-budget: the new Job-tier seconds cap").option("--max-duration-seconds <n>", "raise-budget: the new wall-clock cap").option("--data <json|@file>", "resume: resumeData").option("--approval <id>", "approve/approval-payload: approval id").option("--path <array.path>", "approval-payload: page one array of a large payload (--cursor / --limit inside it)").option("--decision <approve|deny>", "approve: decision (default approve)").option("--note <text>", "approve/retry-step/resolve-step/raise-budget/goals close: note").option("--edit <json|@file>", "approve: edited payload (small inline edits)").option("--fingerprint <f>", "approve: payloadFingerprint (mandatory with --edit)").option("--payload <json|@file>", "signal: payload").option("--dedupe-key <key>", "signal: dedupe key").option("--local", "replay: replay locally against the compiled artifact").option("--since <dur>", "logs: window").option("--yes", "delete/delete-run/schedules delete: skip confirmation").option("--force", "delete: cancel in-flight runs first \xB7 run: seed from a changed graph \xB7 export: overwrite files").option("--step-output <id=json>", "run: complete a step with this output (repeatable)", collect, []).option("--approve <id[=@payload]>", "run: pre-answer an approval (repeatable)", collect, []).option("--deny <id[=@reason]>", "run: pre-deny an approval (repeatable)", collect, []).option("--signal <name=json>", "run: pre-supply a waitForSignal payload (repeatable)", collect, []).option("--from-run <runId>", "run: seed completed steps from a real run").option("--record <dir>", "run: record agent/tool outputs as fixtures").option("--fixtures <dir>", "run: replay recorded fixtures").option("--step-wall <s>", "run: per-step wall in seconds (default 600)").option("--job-wall <s>", "run: virtual wall for tier:'job' steps \u2014 splits at 14400 s segments, > 86400 is exit 2").option("--ledger-out <file>", "run: write the in-memory ledger as JSON").option("--agents <fake|live>", "run: fake agent steps (default) or call the dev API").option("--now <iso>", "run: virtual clock start").option("--park <id>", "run: simulate a platform-fault park of this step (repeatable)", collect, []).option("--fast-retries", "run: collapse retry backoff waits to 0").option("--real-time", "run: actually wait on sleeps/backoffs instead of fast-forwarding").option("--artefacts-dir <dir>", "run: back ctx.artefacts.* on disk").option("--workspace <dir>", "run: the checkout Job-tier code steps run in (ctx.workspace + ctx.exec / ctx.$)").option("--env <KEY=value>", "run: local env.template() overlay (repeatable; missing key \u21D2 exit 2)", collect, []).option("--max-ticks <n>", "run (script form): tick cap before SCRIPT_TICK_LIMIT (default 64)").option("--until <iso>", "archive-runs: window end").option("--out <dir>", "archive-runs: destination dir (archive-index.ndjson + <runId>.zip) \xB7 export: target dir").option("--concurrency <n>", "archive-runs: parallel exports (default 2, max 5)").option("--no-inputs", "archive-runs: exclude run inputs from the bundle").option("--no-artefacts", "archive-runs: exclude artefacts from the bundle").option("--retention-days <n>", "archive-runs: org run retention (default 90) \u2014 --since must fit retention \u2212 7 d").option("--connection <id>", "archive-runs: org storage connection for s3:// / gs:// sinks").option("--release", "workspace: release the run workspace (R42)").option("--attempt <n>", "job-logs: attempt (default latest)").option("--tail <n>", "job-logs: log lines (1..2000, default 200)").option("--objective <text>", "goals create: the objective (\u2264 2000 chars)").option("--judge-predicate <spec>", "goals create: deterministic judge \u2014 '<path> <op> [value]' (e.g. 'output.done truthy'), JSON or @file").option("--judge-agent <agentId|'$self'>", "goals create: judge agent \u2014 write '$self' quoted (or self); it needs --judge-role").option("--judge-role <json|@file>", "goals create: D25 role {name,instructions,tools} for a '$self' judge").option("--schema <json|@file>", "goals create: judge output JsonSchema (must declare a boolean `done`)").option("--cadence <cron|json|@file>", "goals create/schedules create: cadence entry (repeatable, \u2264 5); goals: none \u21D2 immediate", collect, []).option("--timezone <tz>", "goals create/edit/schedules create: IANA timezone for bare cron cadences").option("--notify <emailApp|email|app|off>", "schedules create: where each fire notifies").option("--backfill-on-enable <n|none>", "schedules create/patch/resume: replay \u2264 n missed fires on re-enable (patch: none clears it)").option("--backfill-now", "schedules resume (or patch --paused false): one-shot backfill on THIS re-enable").option("--paused <true|false>", "schedules patch: pause (true) or re-enable (false) the schedule").option("--max-runs <n>", "goals create/edit/raise: iteration cap (1..100)").option("--max-total-credits <n>", "goals create: lineage-wide credit gate").option("--max-credits <n|none>", "goals edit/raise: lineage-wide credit gate (edit: none clears it)").option("--every <interval>", "goals edit/schedules create: interval cadence \u2014 900, 15m, 2h (whole minutes, \u2265 60s)").option("--if-match <updatedAt>", "goals edit/raise: refuse the write if the goal changed since this updatedAt").addHelpText("after", `
+  program2.command("workflows [action] [target] [extra]").description("\u{1F9ED} Manage workflows and their runs (list, start, watch, cancel, resume, retry-step, resolve-step, raise-budget, approve, signal, replay, export, schedules)").option("-i, --workflow-name <name>", "Workflow name (or id)").option("-r, --run-id <id>", "Run id").option("-v, --workflow-version <ver>", "deploy/start/export/goals create/schedules create: a semver, 'latest' (newest push) or a version id").option("--json", "Print the raw {success,data} envelope").option("--all", "list: include dynamic workflows").option("--input <json|@file>", "start/run/goals create/schedules create: run input").option("--idempotency-key <key>", "start: idempotency key").option("--correlation-key <key>", "start/runs: correlation key").option("--tag <tag>", "start/runs/schedules create: tag (repeatable, \u2264 10)", collect, []).option("--budget-credits <n>", "start/schedules create: run budget (credits)").option("--wait <s>", "start: server long-poll \u2264 55 s").option("--follow", "start/logs: attach watch").option("--status <status>", "runs/goals list: filter by status").option("--workflow <name>", "runs: filter by workflow").option("--limit <n>", "runs/goals list/approval-payload --path: page size").option("--cursor <c>", "runs/goals list/approval-payload --path: page cursor").option("--sort <field>", "runs: -createdAt|createdAt|-durationMs|durationMs").option("--steps", "status: per-step table").option("--strict", "status: exit 4/5 by terminal status, 6 for a gated run").option("--compose <on|off>", "policy models set: may the composer be shown the model menu").option("--max-class <fast|balanced|strong>", "policy models set: ceiling for class requests and the class map").option("--consent-actions <n>", "policy models set: estimated actions above which a composed run shows the card").option("--allow <codes>", "policy models set: comma-separated approved codes to narrow the set to").option("--class-fast <codes>", "policy models set: ordered overrides of the fast class (comma-separated)").option("--class-balanced <codes>", "policy models set: ordered overrides of the balanced class (comma-separated)").option("--class-strong <codes>", "policy models set: ordered overrides of the strong class (comma-separated)").option("--class-map <pairs>", "policy models set: comma-separated <taskClass>=<modelClass> pairs").option("--pins <class-only|allowed>", "policy models set: may a composed definition pin a concrete code").option("--fallback <same-class|same-provider>", "policy models set: where a failed leg may hop to").option("--enabled <on|off>", "policy autonomy set: may a start inside the envelope skip the consent card").option("--max-duration <seconds>", "policy autonomy set: the envelope\u2019s duration bound, in seconds").option("--max-actions <n>", "policy autonomy set: the envelope\u2019s estimated-actions bound").option("--max-runs-per-hour <n>", "policy autonomy set: autonomous starts per hour, per agent").option("--forms <list>", "policy autonomy set: comma-separated forms the envelope admits (graph,script,static)").option("--clear <keys>", "policy autonomy set: comma-separated members to clear back to the platform default").option("--agent <agentId>", "policy autonomy: not supported \u2014 no route writes a per-agent envelope (see the refusal)").option("--kind <kind>", "clear-gate: the gate kind to clear (e.g. model_policy)").option("--after <seq>", "watch: replay from seq").option("--timeout <s>", "watch / start --follow: give up after s seconds while the run is still live (exit 7)").option("--events", "watch: print raw frames").option("--wait-for-human", "watch / start --follow: keep following through a human boundary (approval, input, signal, park) instead of exiting 8").option("--reason <text>", "cancel: reason").option("--step <id>", "resume/retry-step/resolve-step/logs: step id").option("--outcome <skip|complete|fail>", "resolve-step: the decision on the parked step (--action is accepted too)").option("--action <skip|complete|fail>", "resolve-step: alias of --outcome").option("--output <json|@file>", "resolve-step: the output a completed step would have produced (required with --outcome complete)").option("--credits <n>", "raise-budget: the new credit cap of a budget-parked run (above the current one)").option("--max-steps <n>", "raise-budget: the new step cap").option("--max-job-seconds <n>", "raise-budget: the new Job-tier seconds cap").option("--max-duration-seconds <n>", "raise-budget: the new wall-clock cap").option("--data <json|@file>", "resume: resumeData").option("--approval <id>", "approve/approval-payload: approval id").option("--path <array.path>", "approval-payload: page one array of a large payload (--cursor / --limit inside it)").option("--decision <approve|deny>", "approve: decision (default approve)").option("--note <text>", "approve/retry-step/resolve-step/raise-budget/goals close: note").option("--edit <json|@file>", "approve: edited payload (small inline edits)").option("--fingerprint <f>", "approve: payloadFingerprint (mandatory with --edit)").option("--payload <json|@file>", "signal: payload").option("--dedupe-key <key>", "signal: dedupe key").option("--local", "replay: replay locally against the compiled artifact").option("--since <dur>", "logs: window").option("--yes", "delete/delete-run/schedules delete: skip confirmation").option("--force", "delete: cancel in-flight runs first \xB7 run: seed from a changed graph \xB7 export: overwrite files").option("--step-output <id=json>", "run: complete a step with this output (repeatable)", collect, []).option("--approve <id[=@payload]>", "run: pre-answer an approval (repeatable)", collect, []).option("--deny <id[=@reason]>", "run: pre-deny an approval (repeatable)", collect, []).option("--signal <name=json>", "run: pre-supply a waitForSignal payload (repeatable)", collect, []).option("--from-run <runId>", "run: seed completed steps from a real run").option("--record <dir>", "run: record agent/tool outputs as fixtures").option("--fixtures <dir>", "run: replay recorded fixtures").option("--step-wall <s>", "run: per-step wall in seconds (default 600)").option("--job-wall <s>", "run: virtual wall for tier:'job' steps \u2014 splits at 14400 s segments, > 86400 is exit 2").option("--ledger-out <file>", "run: write the in-memory ledger as JSON").option("--agents <fake|live>", "run: fake agent steps (default) or call the dev API").option("--now <iso>", "run: virtual clock start").option("--park <id>", "run: simulate a platform-fault park of this step (repeatable)", collect, []).option("--fast-retries", "run: collapse retry backoff waits to 0").option("--real-time", "run: actually wait on sleeps/backoffs instead of fast-forwarding").option("--artefacts-dir <dir>", "run: back ctx.artefacts.* on disk").option("--workspace <dir>", "run: the checkout Job-tier code steps run in (ctx.workspace + ctx.exec / ctx.$)").option("--env <KEY=value>", "run: local env.template() overlay (repeatable; missing key \u21D2 exit 2)", collect, []).option("--max-ticks <n>", "run (script form): tick cap before SCRIPT_TICK_LIMIT (default 64)").option("--until <iso>", "archive-runs: window end").option("--out <dir>", "archive-runs: destination dir (archive-index.ndjson + <runId>.zip) \xB7 export: target dir").option("--concurrency <n>", "archive-runs: parallel exports (default 2, max 5)").option("--no-inputs", "archive-runs: exclude run inputs from the bundle").option("--no-artefacts", "archive-runs: exclude artefacts from the bundle").option("--retention-days <n>", "archive-runs: org run retention (default 90) \u2014 --since must fit retention \u2212 7 d").option("--connection <id>", "archive-runs: org storage connection for s3:// / gs:// sinks").option("--release", "workspace: release the run workspace (R42)").option("--attempt <n>", "job-logs: attempt (default latest)").option("--tail <n>", "job-logs: log lines (1..2000, default 200)").option("--objective <text>", "goals create: the objective (\u2264 2000 chars)").option("--judge-predicate <spec>", "goals create: deterministic judge \u2014 '<path> <op> [value]' (e.g. 'output.done truthy'), JSON or @file").option("--judge-agent <agentId|'$self'>", "goals create: judge agent \u2014 write '$self' quoted (or self); it needs --judge-role").option("--judge-role <json|@file>", "goals create: D25 role {name,instructions,tools} for a '$self' judge").option("--schema <json|@file>", "goals create: judge output JsonSchema (must declare a boolean `done`)").option("--cadence <cron|json|@file>", "goals create/schedules create: cadence entry (repeatable, \u2264 5); goals: none \u21D2 immediate", collect, []).option("--timezone <tz>", "goals create/edit/schedules create: IANA timezone for bare cron cadences").option("--notify <emailApp|email|app|off>", "schedules create: where each fire notifies").option("--backfill-on-enable <n|none>", "schedules create/patch/resume: replay \u2264 n missed fires on re-enable (patch: none clears it)").option("--backfill-now", "schedules resume (or patch --paused false): one-shot backfill on THIS re-enable").option("--paused <true|false>", "schedules patch: pause (true) or re-enable (false) the schedule").option("--max-runs <n>", "goals create/edit/raise: iteration cap (1..100)").option("--max-total-credits <n>", "goals create: lineage-wide credit gate").option("--max-credits <n|none>", "goals edit/raise: lineage-wide credit gate (edit: none clears it)").option("--every <interval>", "goals edit/schedules create: interval cadence \u2014 900, 15m, 2h (whole minutes, \u2265 60s)").option("--if-match <updatedAt>", "goals edit/raise: refuse the write if the goal changed since this updatedAt").addHelpText("after", `
 Arguments:
   action    list \xB7 view \xB7 versions \xB7 deploy \xB7 activate \xB7 deactivate \xB7 start \xB7 run \xB7 runs \xB7 status \xB7
             watch \xB7 cancel \xB7 resume \xB7 retry-step \xB7 resolve-step \xB7 raise-budget \xB7 approve \xB7 approval-payload \xB7
@@ -66784,6 +67865,15 @@ Examples:
   $ lua workflows goals pause wfg_1234 \xB7 goals resume wfg_1234 \xB7 goals close wfg_1234 --note "shipped"
   $ lua workflows schedules list -i outreach
   $ lua workflows schedules delete <jobId> --yes     (a goal's cadence is refused: goal_schedule)
+  $ lua workflows policy models get
+  $ lua workflows policy models set --compose on --max-class strong --consent-actions 60 --pins class-only
+  $ lua workflows policy models set --class-map judge=strong,draft=balanced --class-fast alibaba/qwen3.8-flash
+  $ lua workflows policy autonomy get                (the stored envelope and the one a start is admitted under)
+  $ lua workflows policy autonomy set --enabled on --max-credits 40 --max-steps 20 --max-duration 86400
+  $ lua workflows policy autonomy set --forms graph,static --max-runs-per-hour 20
+  $ lua workflows policy autonomy set --clear max-credits,forms            (back to the platform defaults)
+  $ lua workflows clear-gate <runId> --kind model_policy
+  $ lua workflows recompose outreach                 (rewrites stored task classes into class/<c>; a new version)
 `).action(workflowsCommand);
   program2.command("features [action]").description("\u{1F3AF} Manage agent features (RAG, webSearch, inquiry, outboundChannels)").option("--feature-name <name>", "Feature name").option("--recipient-scope <scope>", "For configure: outboundChannels recipient scope (current_user | anyone)").addHelpText("after", `
 Arguments:
@@ -66967,18 +68057,20 @@ Examples:
   $ lua agents              List all orgs and agents (formatted)
   $ lua agents --json       Output as JSON for scripting
 `).action(agentsCommand);
-  program2.command("models [action]").description("\u{1F9E0} List and manage LLM models for your agent").option("--model <code>", "Model code for 'set' action (e.g. 'openai/gpt-4o')").option("--json", "Output as JSON").addHelpText("after", `
+  program2.command("models [action]").description("\u{1F9E0} List and manage LLM models for your agent").option("--model <code>", "Model code for 'set' action (e.g. 'openai/gpt-4o')").option("--json", "Output as JSON").option("--workflows", "list: the catalog as a workflow step sees it \u2014 class, best for, speed, cost, efforts").addHelpText("after", `
 Arguments:
   action    Optional: 'list', 'set', or 'unset' (default: list)
 
 Options:
   --model <code>   Set model non-interactively (use with 'set' action)
   --json           Output list as JSON (use with 'list' action)
+  --workflows      List for workflow steps: class, best for, speed, cost, efforts (use with 'list')
 
 Examples:
   $ lua models                              List available models (formatted)
   $ lua models list                         List available models (explicit)
   $ lua models list --json                  List as JSON for scripting
+  $ lua models list --workflows             Class, best for, speed, cost and efforts, for workflow steps
   $ lua models set                          Interactively select a model
   $ lua models set --model openai/gpt-4o    Set model non-interactively
   $ lua models unset                        Remove model \u2014 use platform default