lua-cli 3.35.0 → 3.37.0

package/dist/workflow-builder.js

@@ -658,6 +658,274 @@ function isDesktopFileSessionId(value3) {
 }
 __name(isDesktopFileSessionId, "isDesktopFileSessionId");
 __name2(isDesktopFileSessionId, "isDesktopFileSessionId");
+var WORKFLOW_RETRY_BACKOFFS = [
+  "fixed",
+  "exponential"
+];
+var WORKFLOW_RETRY_MIN_ATTEMPTS = 1;
+var WORKFLOW_RETRY_POLICY_KEYS = [
+  "maxAttempts",
+  "backoffSeconds",
+  "backoff",
+  "maxBackoffSeconds"
+];
+var WORKFLOW_RETRY_MAX_ATTEMPTS = 20;
+function workflowRetryMaxAttemptsMessage(got) {
+  const tail = got === void 0 ? "" : ` (got ${JSON.stringify(got)})`;
+  return `\`retry.maxAttempts\` must be an integer ${WORKFLOW_RETRY_MIN_ATTEMPTS}..${WORKFLOW_RETRY_MAX_ATTEMPTS}${tail}`;
+}
+__name(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
+__name2(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
+function isWithinWorkflowRetryAttempts(value3) {
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_RETRY_MIN_ATTEMPTS && value3 <= WORKFLOW_RETRY_MAX_ATTEMPTS;
+}
+__name(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
+__name2(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
+var WORKFLOW_RETRY_ENGINE_KEYS = [
+  "budgetBaseAttempt"
+];
+function workflowRetryUnknownMembersMessage(keys) {
+  const named = keys.map((k) => {
+    const engine = WORKFLOW_RETRY_ENGINE_KEYS.includes(k);
+    return `\`${k}\`${engine ? " (engine-owned \u2014 stamped by resetAttempts, never authored)" : ""}`;
+  });
+  return `\`retry\` has no member ${named.join(", ")}; members: ${WORKFLOW_RETRY_POLICY_KEYS.join(", ")}`;
+}
+__name(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
+__name2(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
+function unknownWorkflowRetryMembers(retry) {
+  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return [];
+  return Object.keys(retry).filter((k) => !WORKFLOW_RETRY_POLICY_KEYS.includes(k));
+}
+__name(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
+__name2(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
+function authoredRetryPolicy(retry) {
+  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return void 0;
+  const src = retry;
+  const out = {};
+  for (const k of WORKFLOW_RETRY_POLICY_KEYS) if (src[k] !== void 0) out[k] = src[k];
+  return Object.keys(out).length ? out : void 0;
+}
+__name(authoredRetryPolicy, "authoredRetryPolicy");
+__name2(authoredRetryPolicy, "authoredRetryPolicy");
+function retryBudgetBaseAttempt(row) {
+  const base = row.retry?.budgetBaseAttempt;
+  return typeof base === "number" && Number.isSafeInteger(base) && base > 0 ? base : 0;
+}
+__name(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
+__name2(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
+function retryBudgetAttempt(row) {
+  return Math.max(0, row.attempt - retryBudgetBaseAttempt(row));
+}
+__name(retryBudgetAttempt, "retryBudgetAttempt");
+__name2(retryBudgetAttempt, "retryBudgetAttempt");
+function retryBudgetMaxAttempts(row) {
+  const max = row.retry?.maxAttempts;
+  return typeof max === "number" && Number.isFinite(max) && max >= 1 ? max : 1;
+}
+__name(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
+__name2(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
+function retryBudgetRemaining(row) {
+  return retryBudgetAttempt(row) < retryBudgetMaxAttempts(row);
+}
+__name(retryBudgetRemaining, "retryBudgetRemaining");
+__name2(retryBudgetRemaining, "retryBudgetRemaining");
+function retriesRemaining(row) {
+  return Math.max(0, retryBudgetMaxAttempts(row) - retryBudgetAttempt(row));
+}
+__name(retriesRemaining, "retriesRemaining");
+__name2(retriesRemaining, "retriesRemaining");
+var WORKFLOW_JOB_RESOURCES = [
+  "small",
+  "medium",
+  "large"
+];
+var WORKFLOW_SIDE_EFFECTS = [
+  "none",
+  "external"
+];
+var WORKFLOW_MODEL_CLASSES = [
+  "fast",
+  "balanced",
+  "strong"
+];
+function workflowModelCostComparison(estimate, onAgentModel, agentModel) {
+  if (agentModel === void 0 || onAgentModel === void 0 || !(onAgentModel > 0)) return void 0;
+  const ratio = Math.round(estimate / onAgentModel * 10) / 10;
+  return `\u2248 ${ratio}\xD7 the cost of running every step on ${agentModel}`;
+}
+__name(workflowModelCostComparison, "workflowModelCostComparison");
+__name2(workflowModelCostComparison, "workflowModelCostComparison");
+var WORKFLOW_DEFAULT_TASK_CLASS_MAP = Object.freeze({
+  classify: "fast",
+  extract: "fast",
+  transform: "fast",
+  draft: "balanced",
+  research: "balanced",
+  judge: "balanced",
+  reason: "strong",
+  code: "strong"
+});
+var WORKFLOW_MODELS_MAX_CLASS_DEFAULT = WORKFLOW_MODEL_CLASSES[WORKFLOW_MODEL_CLASSES.length - 1];
+function modelClassRank(modelClass) {
+  return WORKFLOW_MODEL_CLASSES.indexOf(modelClass);
+}
+__name(modelClassRank, "modelClassRank");
+__name2(modelClassRank, "modelClassRank");
+function modelClassesAtOrBelow(maxClass) {
+  const ceiling = modelClassRank(maxClass);
+  return WORKFLOW_MODEL_CLASSES.filter((c) => modelClassRank(c) <= ceiling);
+}
+__name(modelClassesAtOrBelow, "modelClassesAtOrBelow");
+__name2(modelClassesAtOrBelow, "modelClassesAtOrBelow");
+var WORKFLOW_AUTONOMY_NUMERIC_KEYS = [
+  "maxCredits",
+  "maxSteps",
+  "maxDurationSeconds",
+  "maxActions",
+  "maxRunsPerHour"
+];
+var WORKFLOW_AUTONOMY_ENVELOPE_KEYS = [
+  "enabled",
+  ...WORKFLOW_AUTONOMY_NUMERIC_KEYS,
+  "forms"
+];
+var WORKFLOW_AUTONOMY_DEFAULTS = Object.freeze({
+  maxCredits: 20,
+  maxSteps: 15,
+  maxDurationSeconds: 86400,
+  maxRunsPerHour: 20
+});
+var WORKFLOW_AUTONOMY_CEILINGS = Object.freeze({
+  maxSteps: 40,
+  maxDurationSeconds: 604800
+});
+var WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV = "LUA_WF_AUTONOMY_MAX_RUNS_PER_HOUR";
+var WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING = 200;
+function workflowAutonomyMaxRunsPerHourCeiling(env) {
+  const raw = Number((env ?? process.env)[WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV]);
+  return Number.isFinite(raw) && raw > 0 ? raw : WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING;
+}
+__name(workflowAutonomyMaxRunsPerHourCeiling, "workflowAutonomyMaxRunsPerHourCeiling");
+__name2(workflowAutonomyMaxRunsPerHourCeiling, "workflowAutonomyMaxRunsPerHourCeiling");
+var WORKFLOW_AUTONOMY_FORMS_DEFAULT = Object.freeze([
+  "graph",
+  "static"
+]);
+var WORKFLOW_AUTONOMY_MIN_VALUE = 1;
+function isWithinWorkflowAutonomyRange(value3, ceiling) {
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_AUTONOMY_MIN_VALUE && value3 <= ceiling;
+}
+__name(isWithinWorkflowAutonomyRange, "isWithinWorkflowAutonomyRange");
+__name2(isWithinWorkflowAutonomyRange, "isWithinWorkflowAutonomyRange");
+function workflowAutonomyRangeMessage(key, ceiling) {
+  return `\`${key}\` must be an integer ${WORKFLOW_AUTONOMY_MIN_VALUE}..${ceiling}`;
+}
+__name(workflowAutonomyRangeMessage, "workflowAutonomyRangeMessage");
+__name2(workflowAutonomyRangeMessage, "workflowAutonomyRangeMessage");
+var WORKFLOW_JOB_RANGES = Object.freeze({
+  /** Coding-turn cap (`claude -p --max-turns`); absent ⇒ the cluster default (LUA_WF_JOB_MAX_TURNS). */
+  maxTurns: Object.freeze({
+    min: 1,
+    max: 500
+  }),
+  /** Harness messages per attempt (one per content block); absent ⇒ the cluster default (400). */
+  maxMessages: Object.freeze({
+    min: 1,
+    max: 5e3
+  }),
+  /** Input-side tokens per attempt (prompt + cache); absent ⇒ the cluster default (4M — LUA-708, was 30M). */
+  maxInputTokens: Object.freeze({
+    min: 1e6,
+    max: 5e8
+  })
+});
+var WORKFLOW_JOB_RANGE_MEMBERS = Object.keys(WORKFLOW_JOB_RANGES);
+function isWithinWorkflowJobRange(member, value3) {
+  const { min, max } = WORKFLOW_JOB_RANGES[member];
+  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= min && value3 <= max;
+}
+__name(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
+__name2(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
+function workflowJobRangeMessage(member) {
+  const { min, max } = WORKFLOW_JOB_RANGES[member];
+  return `\`${member}\` must be an integer ${min}..${max}`;
+}
+__name(workflowJobRangeMessage, "workflowJobRangeMessage");
+__name2(workflowJobRangeMessage, "workflowJobRangeMessage");
+var WORKFLOW_SINGLE_STEP_TYPES = [
+  "agent",
+  "tool",
+  "workflow",
+  "step"
+];
+var WORKFLOW_HITL_ENTRY_TYPES = [
+  "approval",
+  "waitForSignal"
+];
+var WORKFLOW_ARM_ENTRY_TYPES = [
+  ...WORKFLOW_SINGLE_STEP_TYPES,
+  ...WORKFLOW_HITL_ENTRY_TYPES
+];
+var WORKFLOW_HITL_ARM_CONTAINERS = [
+  "parallel",
+  "conditional",
+  "foreach"
+];
+function isWorkflowSingleStepType(type) {
+  return typeof type === "string" && WORKFLOW_SINGLE_STEP_TYPES.includes(type);
+}
+__name(isWorkflowSingleStepType, "isWorkflowSingleStepType");
+__name2(isWorkflowSingleStepType, "isWorkflowSingleStepType");
+function isWorkflowHitlEntryType(type) {
+  return typeof type === "string" && WORKFLOW_HITL_ENTRY_TYPES.includes(type);
+}
+__name(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
+__name2(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
+function isWorkflowArmEntryType(type) {
+  return typeof type === "string" && WORKFLOW_ARM_ENTRY_TYPES.includes(type);
+}
+__name(isWorkflowArmEntryType, "isWorkflowArmEntryType");
+__name2(isWorkflowArmEntryType, "isWorkflowArmEntryType");
+function workflowContainerRunsHitlArm(container) {
+  return typeof container === "string" && WORKFLOW_HITL_ARM_CONTAINERS.includes(container);
+}
+__name(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
+__name2(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
+function workflowHitlArmUnsupportedMessage(type, id, container) {
+  const legal = WORKFLOW_HITL_ARM_CONTAINERS.map((c) => `\`${c}\``).join(" / ");
+  return `the engine does not run \`${type}\` inside a \`${container}\` yet (node "${id}") \u2014 place it at the top level, as a ${legal} arm, or inside a child \`workflow\``;
+}
+__name(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
+__name2(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
+function workflowHitlArmShapeMessage(type, id, shape) {
+  return shape === "mapped-arm" ? `\`${type}\` arm "${id}" takes the previous output as its payload \u2014 it cannot head a [mapping, step] chain; map before the container instead` : `a chunked foreach hands each child a slice of items, not one \u2014 \`${type}\` body "${id}" takes one item; drop \`chunk\``;
+}
+__name(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
+__name2(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
+var WORKFLOW_GRAPH_ENTRY_STEP_KINDS = Object.freeze({
+  agent: "agent",
+  tool: "tool",
+  workflow: "subrun",
+  step: "code",
+  mapping: "map",
+  sleep: "sleep",
+  sleepUntil: "sleepUntil",
+  parallel: null,
+  conditional: "branch",
+  foreach: "foreach",
+  loop: "loop",
+  approval: "approval",
+  waitForSignal: "signal"
+});
+var WORKFLOW_ARM_ENTRY_STEP_KINDS = Object.freeze(Object.fromEntries(WORKFLOW_ARM_ENTRY_TYPES.map((t) => [
+  t,
+  WORKFLOW_GRAPH_ENTRY_STEP_KINDS[t]
+])));
+var WORKFLOW_BUDGET_MAX_DURATION_SECONDS = Object.freeze({
+  min: 60,
+  max: 2592e3
+});
 var MODEL_ID_BYOK_PROVIDERS = [
   "azure",
   "bedrock"
@@ -668,6 +936,25 @@ function isModelIdSentinel(input) {
 }
 __name(isModelIdSentinel, "isModelIdSentinel");
 __name2(isModelIdSentinel, "isModelIdSentinel");
+var MODEL_CLASS_REF_PREFIX = "class/";
+function isModelClassRef(input) {
+  return modelClassOf(input) !== void 0;
+}
+__name(isModelClassRef, "isModelClassRef");
+__name2(isModelClassRef, "isModelClassRef");
+function modelClassOf(input) {
+  const lower = (input ?? "").trim().toLowerCase();
+  if (!lower.startsWith(MODEL_CLASS_REF_PREFIX)) return void 0;
+  const c = lower.slice(MODEL_CLASS_REF_PREFIX.length);
+  return WORKFLOW_MODEL_CLASSES.includes(c) ? c : void 0;
+}
+__name(modelClassOf, "modelClassOf");
+__name2(modelClassOf, "modelClassOf");
+function modelClassRef(modelClass) {
+  return `${MODEL_CLASS_REF_PREFIX}${modelClass}`;
+}
+__name(modelClassRef, "modelClassRef");
+__name2(modelClassRef, "modelClassRef");
 function normalizeModelId(input, registry) {
   const requested = typeof input === "string" ? input.trim() : "";
   if (!requested) return {
@@ -682,6 +969,11 @@ function normalizeModelId(input, registry) {
     id: lower,
     form: "sentinel"
   };
+  if (modelClassOf(lower) !== void 0) return {
+    ok: true,
+    id: lower,
+    form: "class"
+  };
   const slash = requested.indexOf("/");
   const malformed = slash === 0;
   const provider = slash > 0 ? lower.slice(0, slash) : void 0;
@@ -746,6 +1038,11 @@ function modelUnresolvedMessage(r) {
 }
 __name(modelUnresolvedMessage, "modelUnresolvedMessage");
 __name2(modelUnresolvedMessage, "modelUnresolvedMessage");
+function modelClassUnresolvedMessage(ref) {
+  return `model "${ref.trim()}" is a model-class request that was not resolved before dispatch \u2014 a class is resolved to a concrete approved model by the class map at dispatch, and is never sent to a provider as written; this step refuses rather than run on a substituted model`;
+}
+__name(modelClassUnresolvedMessage, "modelClassUnresolvedMessage");
+__name2(modelClassUnresolvedMessage, "modelClassUnresolvedMessage");
 function providerModelId(code) {
   const requested = typeof code === "string" ? code.trim() : "";
   if (!requested || isModelIdSentinel(requested)) return requested;
@@ -1599,7 +1896,15 @@ var ProjectedOrgSchema = z3.object({
     "org-grant",
     "agent-grant-only"
   ]).describe("For user and staff principals, grant provenance: org-grant means a stored org grant produced the row. For owner-ceiling API keys, effective provenance: org-grant means the credential-owner intersection has org-level capability; agent-grant-only means the intersection reaches only an exact agent inside the org."),
-  anomalies: z3.array(ProjectionAnomalySchema).optional()
+  anomalies: z3.array(ProjectionAnomalySchema).optional(),
+  /**
+   * How many agents and Spaces in this org the caller can read — the size of
+   * the org's resource page under the same discovery rule, without paging it.
+   */
+  resourceCounts: z3.object({
+    agents: z3.number().int().nonnegative(),
+    spaces: z3.number().int().nonnegative()
+  }).optional()
 }).passthrough();
 var ProjectedResourceSchema = z3.object({
   resourceType: z3.literal("agent"),
@@ -1638,7 +1943,21 @@ var ProjectedResourceSchema = z3.object({
     id: z3.string().min(1).max(256),
     name: z3.string().optional(),
     email: z3.string().optional()
-  }).optional()
+  }).optional(),
+  /**
+   * Presentation enrichment (PRO-1994), product data only — never influences
+   * discovery. These moved off the O(orgs) `/context` roster onto the bounded
+   * per-active-org resource page so Desktop stops paying an org-count-scaled
+   * cost at sign-in. `persona`/`avatar` are loose (`PersonaText` / `AgentAvatar`
+   * are structured-or-string), `platform` marks the org's Designer agent
+   * (previously stamped only by `/context`; retires with PRO-1657).
+   */
+  persona: z3.unknown().optional(),
+  description: z3.string().optional(),
+  avatar: z3.unknown().nullish(),
+  platform: z3.boolean().optional(),
+  /** A Space's supervised agent ids (`kind: 'space'` rows only). */
+  supervisedAgents: z3.array(z3.string()).optional()
 }).passthrough();
 var CapabilityProfilesSchema = z3.record(z3.string().min(1).max(64), z3.array(ProjectedScopeSchema));
 var RoleCatalogSchema = z3.record(z3.string().min(1).max(128), z3.object({
@@ -1824,7 +2143,8 @@ var WORKFLOW_RUN_GATE_KINDS = [
   "org_archived",
   "disabled",
   "exception",
-  "budget"
+  "budget",
+  "model_policy"
 ];
 var WORKFLOW_STEP_STATUSES = [
   "pending",
@@ -1959,6 +2279,19 @@ function workflowOrgSlotKey(orgId, kind) {
 __name(workflowOrgSlotKey, "workflowOrgSlotKey");
 __name2(workflowOrgSlotKey, "workflowOrgSlotKey");
 var WORKFLOW_CONNECTION_KEY_RE = /^[a-z][a-z0-9_-]{0,63}$/;
+var WORKFLOW_JOB_MODEL_SOURCE_LABELS = {
+  stamp: "lease stamp",
+  initData: "run input",
+  default: "placeholder default",
+  node: "node.model",
+  env: "platform default",
+  org: "org default"
+};
+function workflowJobModelSourceLabel(source) {
+  return WORKFLOW_JOB_MODEL_SOURCE_LABELS[source];
+}
+__name(workflowJobModelSourceLabel, "workflowJobModelSourceLabel");
+__name2(workflowJobModelSourceLabel, "workflowJobModelSourceLabel");
 function scheduledTimeKey(scheduledTime) {
   return scheduledTime.replace(/[^0-9TZ]/g, "");
 }
@@ -1981,195 +2314,6 @@ var WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS = [
 ];
 var WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES = 64 * 1024;
 var WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES = 256 * 1024;
-var WORKFLOW_RETRY_BACKOFFS = [
-  "fixed",
-  "exponential"
-];
-var WORKFLOW_RETRY_MIN_ATTEMPTS = 1;
-var WORKFLOW_RETRY_POLICY_KEYS = [
-  "maxAttempts",
-  "backoffSeconds",
-  "backoff",
-  "maxBackoffSeconds"
-];
-var WORKFLOW_RETRY_MAX_ATTEMPTS = 20;
-function workflowRetryMaxAttemptsMessage(got) {
-  const tail = got === void 0 ? "" : ` (got ${JSON.stringify(got)})`;
-  return `\`retry.maxAttempts\` must be an integer ${WORKFLOW_RETRY_MIN_ATTEMPTS}..${WORKFLOW_RETRY_MAX_ATTEMPTS}${tail}`;
-}
-__name(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
-__name2(workflowRetryMaxAttemptsMessage, "workflowRetryMaxAttemptsMessage");
-function isWithinWorkflowRetryAttempts(value3) {
-  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= WORKFLOW_RETRY_MIN_ATTEMPTS && value3 <= WORKFLOW_RETRY_MAX_ATTEMPTS;
-}
-__name(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
-__name2(isWithinWorkflowRetryAttempts, "isWithinWorkflowRetryAttempts");
-var WORKFLOW_RETRY_ENGINE_KEYS = [
-  "budgetBaseAttempt"
-];
-function workflowRetryUnknownMembersMessage(keys) {
-  const named = keys.map((k) => {
-    const engine = WORKFLOW_RETRY_ENGINE_KEYS.includes(k);
-    return `\`${k}\`${engine ? " (engine-owned \u2014 stamped by resetAttempts, never authored)" : ""}`;
-  });
-  return `\`retry\` has no member ${named.join(", ")}; members: ${WORKFLOW_RETRY_POLICY_KEYS.join(", ")}`;
-}
-__name(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
-__name2(workflowRetryUnknownMembersMessage, "workflowRetryUnknownMembersMessage");
-function unknownWorkflowRetryMembers(retry) {
-  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return [];
-  return Object.keys(retry).filter((k) => !WORKFLOW_RETRY_POLICY_KEYS.includes(k));
-}
-__name(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
-__name2(unknownWorkflowRetryMembers, "unknownWorkflowRetryMembers");
-function authoredRetryPolicy(retry) {
-  if (!retry || typeof retry !== "object" || Array.isArray(retry)) return void 0;
-  const src = retry;
-  const out = {};
-  for (const k of WORKFLOW_RETRY_POLICY_KEYS) if (src[k] !== void 0) out[k] = src[k];
-  return Object.keys(out).length ? out : void 0;
-}
-__name(authoredRetryPolicy, "authoredRetryPolicy");
-__name2(authoredRetryPolicy, "authoredRetryPolicy");
-function retryBudgetBaseAttempt(row) {
-  const base = row.retry?.budgetBaseAttempt;
-  return typeof base === "number" && Number.isSafeInteger(base) && base > 0 ? base : 0;
-}
-__name(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
-__name2(retryBudgetBaseAttempt, "retryBudgetBaseAttempt");
-function retryBudgetAttempt(row) {
-  return Math.max(0, row.attempt - retryBudgetBaseAttempt(row));
-}
-__name(retryBudgetAttempt, "retryBudgetAttempt");
-__name2(retryBudgetAttempt, "retryBudgetAttempt");
-function retryBudgetMaxAttempts(row) {
-  const max = row.retry?.maxAttempts;
-  return typeof max === "number" && Number.isFinite(max) && max >= 1 ? max : 1;
-}
-__name(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
-__name2(retryBudgetMaxAttempts, "retryBudgetMaxAttempts");
-function retryBudgetRemaining(row) {
-  return retryBudgetAttempt(row) < retryBudgetMaxAttempts(row);
-}
-__name(retryBudgetRemaining, "retryBudgetRemaining");
-__name2(retryBudgetRemaining, "retryBudgetRemaining");
-function retriesRemaining(row) {
-  return Math.max(0, retryBudgetMaxAttempts(row) - retryBudgetAttempt(row));
-}
-__name(retriesRemaining, "retriesRemaining");
-__name2(retriesRemaining, "retriesRemaining");
-var WORKFLOW_JOB_RESOURCES = [
-  "small",
-  "medium",
-  "large"
-];
-var WORKFLOW_SIDE_EFFECTS = [
-  "none",
-  "external"
-];
-var WORKFLOW_JOB_RANGES = Object.freeze({
-  /** Coding-turn cap (`claude -p --max-turns`); absent ⇒ the cluster default (LUA_WF_JOB_MAX_TURNS). */
-  maxTurns: Object.freeze({
-    min: 1,
-    max: 500
-  }),
-  /** Harness messages per attempt (one per content block); absent ⇒ the cluster default (400). */
-  maxMessages: Object.freeze({
-    min: 1,
-    max: 5e3
-  }),
-  /** Input-side tokens per attempt (prompt + cache); absent ⇒ the cluster default (4M — LUA-708, was 30M). */
-  maxInputTokens: Object.freeze({
-    min: 1e6,
-    max: 5e8
-  })
-});
-var WORKFLOW_JOB_RANGE_MEMBERS = Object.keys(WORKFLOW_JOB_RANGES);
-function isWithinWorkflowJobRange(member, value3) {
-  const { min, max } = WORKFLOW_JOB_RANGES[member];
-  return typeof value3 === "number" && Number.isInteger(value3) && value3 >= min && value3 <= max;
-}
-__name(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
-__name2(isWithinWorkflowJobRange, "isWithinWorkflowJobRange");
-function workflowJobRangeMessage(member) {
-  const { min, max } = WORKFLOW_JOB_RANGES[member];
-  return `\`${member}\` must be an integer ${min}..${max}`;
-}
-__name(workflowJobRangeMessage, "workflowJobRangeMessage");
-__name2(workflowJobRangeMessage, "workflowJobRangeMessage");
-var WORKFLOW_SINGLE_STEP_TYPES = [
-  "agent",
-  "tool",
-  "workflow",
-  "step"
-];
-var WORKFLOW_HITL_ENTRY_TYPES = [
-  "approval",
-  "waitForSignal"
-];
-var WORKFLOW_ARM_ENTRY_TYPES = [
-  ...WORKFLOW_SINGLE_STEP_TYPES,
-  ...WORKFLOW_HITL_ENTRY_TYPES
-];
-var WORKFLOW_HITL_ARM_CONTAINERS = [
-  "parallel",
-  "conditional",
-  "foreach"
-];
-function isWorkflowSingleStepType(type) {
-  return typeof type === "string" && WORKFLOW_SINGLE_STEP_TYPES.includes(type);
-}
-__name(isWorkflowSingleStepType, "isWorkflowSingleStepType");
-__name2(isWorkflowSingleStepType, "isWorkflowSingleStepType");
-function isWorkflowHitlEntryType(type) {
-  return typeof type === "string" && WORKFLOW_HITL_ENTRY_TYPES.includes(type);
-}
-__name(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
-__name2(isWorkflowHitlEntryType, "isWorkflowHitlEntryType");
-function isWorkflowArmEntryType(type) {
-  return typeof type === "string" && WORKFLOW_ARM_ENTRY_TYPES.includes(type);
-}
-__name(isWorkflowArmEntryType, "isWorkflowArmEntryType");
-__name2(isWorkflowArmEntryType, "isWorkflowArmEntryType");
-function workflowContainerRunsHitlArm(container) {
-  return typeof container === "string" && WORKFLOW_HITL_ARM_CONTAINERS.includes(container);
-}
-__name(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
-__name2(workflowContainerRunsHitlArm, "workflowContainerRunsHitlArm");
-function workflowHitlArmUnsupportedMessage(type, id, container) {
-  const legal = WORKFLOW_HITL_ARM_CONTAINERS.map((c) => `\`${c}\``).join(" / ");
-  return `the engine does not run \`${type}\` inside a \`${container}\` yet (node "${id}") \u2014 place it at the top level, as a ${legal} arm, or inside a child \`workflow\``;
-}
-__name(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
-__name2(workflowHitlArmUnsupportedMessage, "workflowHitlArmUnsupportedMessage");
-function workflowHitlArmShapeMessage(type, id, shape) {
-  return shape === "mapped-arm" ? `\`${type}\` arm "${id}" takes the previous output as its payload \u2014 it cannot head a [mapping, step] chain; map before the container instead` : `a chunked foreach hands each child a slice of items, not one \u2014 \`${type}\` body "${id}" takes one item; drop \`chunk\``;
-}
-__name(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
-__name2(workflowHitlArmShapeMessage, "workflowHitlArmShapeMessage");
-var WORKFLOW_GRAPH_ENTRY_STEP_KINDS = Object.freeze({
-  agent: "agent",
-  tool: "tool",
-  workflow: "subrun",
-  step: "code",
-  mapping: "map",
-  sleep: "sleep",
-  sleepUntil: "sleepUntil",
-  parallel: null,
-  conditional: "branch",
-  foreach: "foreach",
-  loop: "loop",
-  approval: "approval",
-  waitForSignal: "signal"
-});
-var WORKFLOW_ARM_ENTRY_STEP_KINDS = Object.freeze(Object.fromEntries(WORKFLOW_ARM_ENTRY_TYPES.map((t) => [
-  t,
-  WORKFLOW_GRAPH_ENTRY_STEP_KINDS[t]
-])));
-var WORKFLOW_BUDGET_MAX_DURATION_SECONDS = Object.freeze({
-  min: 60,
-  max: 2592e3
-});
 var WORKFLOW_GOAL_JUDGE_SELF = "$self";
 function workflowGoalJudgeKind(judge) {
   return judge && typeof judge === "object" && judge.predicate !== void 0 ? "predicate" : "agent";
@@ -2457,7 +2601,36 @@ var WORKFLOW_AUDIT_EVENTS = [
   "workflow.export.auto_pushed",
   "workflow.retention.restamped",
   "workflow.retention.reaped",
-  "workflow.run.schema_migrated"
+  "workflow.run.schema_migrated",
+  // --- per-step model selection (Workflow Model Selection plan 6.5 / Appendix C.4) ---
+  /** A `PATCH /admin/orgs/:orgId/workflow-policy` that changed the `models` block (who, what moved). */
+  "workflow.policy.models_changed",
+  /** A step's invocation hopped to another leg of its class — `{from, to, reason}`, priced at the served model. */
+  "workflow.step.model_fallback",
+  // --- autonomy envelope (Workflow autonomy plan A1; research/consent-gates.md §H2) ---
+  /**
+  * A start the consent ladder would have PARKED was admitted by `workflowPolicy.autonomy` instead —
+  * `WorkflowRunAutonomyAppliedPayload`. Deliberately NOT `workflow.run.gate_cleared`: nothing was
+  * gated and nobody approved it, and conflating the two would make "who approved this run"
+  * unanswerable for every run of either kind (§H2 "Audit").
+  */
+  "workflow.run.autonomy_applied",
+  // --- run budget cap enforcement (Job-tier billing plan D4; BAC-677) ---
+  /**
+  * The audit twin of the `run.budget_exceeded` run event (WJB-B2a): the run overshot its
+  * `budget.maxCredits` on its LAST step and completed anyway, `budget.exceeded: true`. The budget family
+  * already mirrors run events here — `workflow.run.budget_parked` / `workflow.run.budget_raised` are the
+  * twins of `run.budget_parked` / `run.budget_raised` — and an organisation reviewing what it was charged
+  * needs the overshoot in the audit store beside the raise that preceded it, not only in the run's own
+  * event stream.
+  *
+  * Declared with the run event rather than after it because the emitter port
+  * (`WorkflowAuditPort.action`, typed `workflow.run.${string}`) does not check against this tuple: a name
+  * that is NOT declared here is written to the audit store all the same and no compiler says so.
+  * Declaring it is what makes the later emitter checkable. `workflow.run.budget_parked` is likewise
+  * declared and not yet emitted.
+  */
+  "workflow.run.budget_exceeded"
 ];
 var WORKFLOW_AUDIT_METADATA_MAX_BYTES = 4 * 1024;
 function isWorkflowAuditEvent(action) {
@@ -3233,7 +3406,7 @@ function modelTemplateInvalidMessage(model, why) {
 __name(modelTemplateInvalidMessage, "modelTemplateInvalidMessage");
 __name4(modelTemplateInvalidMessage, "modelTemplateInvalidMessage");
 function modelTemplateDefaultRequiredMessage(model) {
-  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")}`;
+  return `model "${model}" runs on the Job tier, so its placeholder needs a default \u2014 the harness / provider gates (harness:'claude-code' needs an Anthropic model) classify it at push; write ${model.replace(/\}$/, "|<provider/model>}")} or a class reference (|class/fast, |class/balanced, |class/strong)`;
 }
 __name(modelTemplateDefaultRequiredMessage, "modelTemplateDefaultRequiredMessage");
 __name4(modelTemplateDefaultRequiredMessage, "modelTemplateDefaultRequiredMessage");
@@ -4008,6 +4181,21 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       err("required-connection-unknown", `requiredConnections ${JSON.stringify(unknown)} are neither declared connections[].key values nor connections the owner can mount`, `${path}.requiredConnections`, singleId(node));
     }
   }, "checkRequiredConnections");
+  const jobClassifiablePin = /* @__PURE__ */ __name4((model) => {
+    const pin = staticModelPin(model);
+    const modelClass = modelClassOf(pin);
+    if (modelClass === void 0) return pin;
+    const codes = opts.classMap?.[modelClass];
+    if (!codes) return void 0;
+    const jobProviders = opts.policy?.jobProviders;
+    for (const code of codes) {
+      const p = classifyModelProvider(code);
+      if (p === null) continue;
+      if (jobProviders && !jobProviders.includes(p)) continue;
+      return code;
+    }
+    return void 0;
+  }, "jobClassifiablePin");
   const checkTier = /* @__PURE__ */ __name4((node, path) => {
     const id = singleId(node);
     if (node.workspace && node.workspace !== "inherit" && node.tier !== void 0 && node.tier !== "job") {
@@ -4016,7 +4204,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     if (node.harness !== void 0 && node.tier !== "job") {
       err("harness-requires-job-tier", "`harness` is only legal on a tier:'job' agent step", `${path}.harness`, id);
     }
-    const provider = node.type === "agent" ? classifyModelProvider(staticModelPin(node.model)) : null;
+    const provider = node.type === "agent" ? classifyModelProvider(jobClassifiablePin(node.model)) : null;
     if (node.harness === "claude-code" && provider !== null && provider !== "anthropic") {
       err("harness-provider-mismatch", `harness:'claude-code' needs an Anthropic model (model "${node.type === "agent" ? node.model : ""}" is ${provider})`, `${path}.harness`, id);
     }
@@ -4040,6 +4228,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     const pin = parsed.kind === "template" ? parsed.template.default : node.model;
     if (pin === void 0) return;
+    if (isModelClassRef(pin)) return;
     const inContext = /* @__PURE__ */ __name4((message) => parsed.kind === "template" ? `${message} (the default of ${parsed.template.placeholder})` : message, "inContext");
     const registry = opts.approvedModels;
     if (registry === void 0) return;
@@ -4053,6 +4242,12 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     const resolved = normalizeModelId(pin, registry);
     if (!resolved.ok) err("model-unresolved", inContext(modelUnresolvedMessage(resolved)), `${path}.model`, id);
   }, "checkModel");
+  const checkTaskClass = /* @__PURE__ */ __name4((node, path) => {
+    if (node.type !== "agent" || node.taskClass === void 0) return;
+    if (!opts.static) return;
+    if (typeof node.model === "string" && node.model.trim()) return;
+    err("task-class-without-model", `taskClass '${String(node.taskClass)}' needs a \`model\` on a pushed definition \u2014 write a class (model: 'class/fast' | 'class/balanced' | 'class/strong') or an approved provider/model code; nothing maps a task class to a model at dispatch, so a step with neither would run on the agent\u2019s own model`, `${path}.taskClass`, singleId(node));
+  }, "checkTaskClass");
   const checkWorkspace = /* @__PURE__ */ __name4((node, path) => {
     const id = singleId(node);
     const ws = workspaceOf(node);
@@ -4139,6 +4334,7 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     checkTimeout(node, path);
     checkTier(node, path);
     checkModel(node, path);
+    checkTaskClass(node, path);
     checkRetry(node, path);
     checkWorkspace(node, path);
     if (!opts.static) {
@@ -7078,6 +7274,55 @@ function graphHasJobTierStep(envelopeOrGraph) {
 }
 __name(graphHasJobTierStep, "graphHasJobTierStep");
 __name4(graphHasJobTierStep, "graphHasJobTierStep");
+function jobTierSteps(envelopeOrGraph) {
+  const out = [];
+  if (!envelopeOrGraph || typeof envelopeOrGraph !== "object") return out;
+  const env = envelopeOrGraph;
+  const graph = Array.isArray(envelopeOrGraph) ? envelopeOrGraph : env.definition?.graph ?? [];
+  if (!Array.isArray(graph)) return out;
+  for (const entry of graph) collectJobTierSteps(entry, out);
+  return out;
+}
+__name(jobTierSteps, "jobTierSteps");
+__name4(jobTierSteps, "jobTierSteps");
+function jobTierStepIds(envelopeOrGraph) {
+  return jobTierSteps(envelopeOrGraph).map((s) => s.stepId);
+}
+__name(jobTierStepIds, "jobTierStepIds");
+__name4(jobTierStepIds, "jobTierStepIds");
+function collectJobTierSteps(entry, out) {
+  const n2 = armEntry2(entry);
+  if (!n2 || typeof n2 !== "object") return;
+  const node = n2;
+  const ws = node.workspace;
+  if (node.tier === "job" || ws !== void 0 && ws !== "inherit") {
+    const stepId = typeof node.id === "string" && node.id ? node.id : "(unnamed)";
+    const model = typeof node.model === "string" && node.model.trim() ? node.model.trim() : void 0;
+    out.push(model === void 0 ? {
+      stepId
+    } : {
+      stepId,
+      model
+    });
+  }
+  switch (node.type) {
+    case "parallel":
+      if (Array.isArray(node.steps)) for (const s of node.steps) collectJobTierSteps(s, out);
+      return;
+    case "conditional":
+      if (Array.isArray(node.steps)) for (const s of node.steps) collectJobTierSteps(s, out);
+      if (node.otherwise !== void 0) collectJobTierSteps(node.otherwise, out);
+      return;
+    case "foreach":
+    case "loop":
+      collectJobTierSteps(node.step, out);
+      return;
+    default:
+      return;
+  }
+}
+__name(collectJobTierSteps, "collectJobTierSteps");
+__name4(collectJobTierSteps, "collectJobTierSteps");
 
 // src/types/workflow.ts
 function createStep(s) {
@@ -7294,6 +7539,10 @@ var LuaWorkflow = class {
       maxDurationSeconds: cfg.budget?.maxDurationSeconds ?? (hitl ? WORKFLOW_HITL_MAX_DURATION_SECONDS : WORKFLOW_DEFAULT_MAX_DURATION_SECONDS)
     });
     const envelope = {
+      // A plain build/push is ALWAYS marker 1 (plan 6.4's compatibility row: "a CLI test that a plain push of
+      // such a definition stays at 1"). Moving a definition to 2 — the effort marker — is an explicit act
+      // (`lua push --apply-effort`, or a new compose while assignment is on), never a side effect of the SDK
+      // gaining an `effort` member.
       luaWorkflow: 1,
       budget,
       definition: defined({
@@ -7688,6 +7937,10 @@ var WorkflowBuilderImpl = class WorkflowBuilderImpl2 {
       promptTemplate: templateText(opts.prompt),
       outputSchema: schemaToJson(opts.outputSchema),
       model: opts.model,
+      taskClass: opts.taskClass,
+      requires: opts.requires,
+      modelReason: opts.modelReason,
+      effort: opts.effort,
       toolScope: opts.toolScope,
       systemPrompt: opts.systemPrompt,
       timeoutSeconds: opts.timeoutSeconds,