lua-cli 3.36.0 → 3.38.0

package/dist/api-exports.d.ts

@@ -218,19 +218,6 @@ declare interface AgentInvocationInput {
     };
 }
 
-/**
- * LUA-724 (PR 7) — the billed turn's pricing inputs, exactly as chat's settlement event carries
- * them (`chat.service.trackLlmInferenceUsage`): the model that ACTUALLY served the turn (the
- * resolver's code, not the caller's pin), the de-paged `contextInputTokens` (largest single
- * step's prompt — never the whole-turn sum), the tool-call COUNT, and whether the turn ran on
- * the org's own key. `chargedCredits` echoes the gate's answer (true ⇒ the legacy pool deducted
- * in real time; false ⇒ seat org / free turn — settlement meters it).
- *
- * Stamped by the serving pod ONLY on internal-auth turns that carry a billing `operationId`
- * (the workflow agent-step loopback), as the enumerable `luaMeter` top-level field of the
- * generate envelope — never on a Bearer turn, so the public wire is byte-identical. The
- * workflow executor prices the step's `run.budget.spent` from it with `priceModelCall`.
- */
 declare interface AgentInvocationMeter {
     model?: string;
     contextInputTokens?: number;
@@ -1457,6 +1444,18 @@ export declare type ChatMessage = TextMessage | ImageMessage | FileMessage;
  */
 export declare type ContainerArm = StepRef | [LuaMapConfig, StepRef];
 
+/** Teams: resource-specific permissions are granted per chat by whoever adds the app; file access is a tenant-wide grant. */
+declare interface ConversationAccess {
+    /** False when only messages that mention the agent are delivered. */
+    canReadAllMessages: boolean;
+    /** False when people are known only once they speak. */
+    canReadMembers: boolean;
+    /** False when files attached in the conversation cannot be opened. */
+    canReadFiles: boolean;
+    /** Provider permission names the conversation has not granted, e.g. `ChatMessage.Read.Chat`. */
+    missing: string[];
+}
+
 /**
  * Who is in the conversation this turn runs in.
  */
@@ -1501,6 +1500,11 @@ export declare interface ConversationRef {
         agentId: string;
         name?: string;
     }>;
+    /**
+     * What the channel lets the agent do in this conversation. Absent when the
+     * platform could not determine it (a shared bot outside Lua's tenant).
+     */
+    access?: ConversationAccess;
 }
 
 /**
@@ -7740,6 +7744,14 @@ declare interface WorkflowRun {
          * `lua workflows status` prints the roll-up when it is there and says nothing when it is not.
          */
         byModel?: WorkflowRunModelUsageRow[];
+        /**
+         * [WJB-B5] (BAC-671) — the run's token components, summed by the server from the usage rows its charges
+         * were written from (per-call `workflow:job` rows on the Job tier, `llm:inference` rows off it).
+         * `inputTokens` is the UNCACHED prompt; the two cache figures are read and write. Present only once the
+         * server projects it (a metered run on a server that has this change) — the CLI prints nothing otherwise,
+         * and never adds the members together: cache reads are a SUBSET of input on OpenAI-compatible providers.
+         */
+        tokens?: WorkflowRunTokensDto;
     };
     /**
      * R4: the run's caps and settled spend. `maxCredits` and `remaining` are both absent on an uncapped run (`0` = unset);
@@ -7757,6 +7769,12 @@ declare interface WorkflowRun {
         };
         reserved?: number;
         remaining?: number;
+        /**
+         * [WJB-B5] (BAC-677): the run went PAST its cap and finished anyway — the crossing step was terminal for
+         * the run, so it completed rather than parking for a raise nobody could act on. `true` or ABSENT on the
+         * wire, never `false`; the CLI prints it and never derives it from `spent > maxCredits`.
+         */
+        exceeded?: boolean;
     };
     createdAt: string;
     startedAt?: string;
@@ -7787,6 +7805,18 @@ declare interface WorkflowRunModelUsageRow {
 /** §02 §2.4 run statuses (one union across every section). */
 declare type WorkflowRunStatus = 'queued' | 'running' | 'cancellation_requested' | 'gated' | 'suspended' | 'waiting' | 'completed' | 'failed' | 'cancelled' | 'abandoned' | 'timed_out';
 
+/**
+ * [WJB-B5] (BAC-671) — the four token figures the server sums per run and per step (`WorkflowRunTokens` in
+ * `@lua/shared-types`). Every member optional: the CLI is a reader of whatever the server sends, and a figure
+ * a server does not project must print as nothing rather than as a zero the run never reported.
+ */
+declare interface WorkflowRunTokensDto {
+    inputTokens?: number;
+    cacheReadTokens?: number;
+    cacheCreationTokens?: number;
+    outputTokens?: number;
+}
+
 export declare type WorkflowRunTrigger = 'chat' | 'sdk' | 'api' | 'schedule' | 'webhook' | 'template' | 'workflow' | 'device';
 
 /**

package/dist/api-exports.js

@@ -18,6 +18,12 @@ var __export = (target, all) => {
 import { z } from "zod";
 import { z as z2 } from "zod";
 import { z as z3 } from "zod";
+function isChannelConversationChannel(channel) {
+  return !!channel && CHANNEL_CONVERSATION_CHANNELS.includes(channel);
+}
+function isChannelConversationThread(threadId, channel) {
+  return !!threadId && isChannelConversationChannel(channel);
+}
 function isPersonaTextObject(value3) {
   if (value3 === null || typeof value3 !== "object" || Array.isArray(value3)) return false;
   const obj = value3;
@@ -580,6 +586,101 @@ function buildDefaultPersona(agentName) {
 function buildPersonalSpaceStartingPersona(agentName) {
   return PERSONAL_SPACE_STARTING_PERSONA.replace(new RegExp(AGENT_NAME_TOKEN.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "g"), () => agentName || "Your assistant");
 }
+function maxDrainsForTier(tier) {
+  return tier === "enterprise" ? LOG_DRAIN_MAX_PER_ORG_ENTERPRISE : LOG_DRAIN_MAX_PER_ORG;
+}
+function resolvePresetEndpoint(type, site) {
+  const template3 = LOG_DRAIN_ENDPOINT_TEMPLATES[type];
+  if (!template3 || !site) return void 0;
+  return template3.replace("{site}", site);
+}
+function nextLogDrainQuotaResetAt(now) {
+  return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate() + 1)).toISOString();
+}
+function logDrainQuotaWindowExpired(usage, now) {
+  const resetsAt = Date.parse(usage?.resetsAt ?? "");
+  if (!Number.isFinite(resetsAt)) return true;
+  return now.getTime() >= resetsAt;
+}
+function logDrainQuotaRatio(usage, now) {
+  if (!usage) return 0;
+  if (now && logDrainQuotaWindowExpired(usage, now)) return 0;
+  const dimension = /* @__PURE__ */ __name2((used, limit) => {
+    if (!Number.isFinite(limit) || limit <= 0) return 0;
+    if (!Number.isFinite(used) || used <= 0) return 0;
+    return used / limit;
+  }, "dimension");
+  return Math.max(dimension(usage.usedEvents, usage.eventsPerDay), dimension(usage.usedBytes, usage.bytesPerDay));
+}
+function logDrainQuotaDegradationForRatio(ratio) {
+  if (!Number.isFinite(ratio)) return "none";
+  if (ratio >= LOG_DRAIN_QUOTA_PAUSE_RATIO) return "paused";
+  if (ratio >= LOG_DRAIN_QUOTA_DROP_INFO_RATIO) return "info_dropped";
+  if (ratio >= LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO) return "debug_dropped";
+  return "none";
+}
+function logDrainQuotaDegradation(usage, now) {
+  return logDrainQuotaDegradationForRatio(logDrainQuotaRatio(usage, now));
+}
+function logDrainQuotaWarned(usage, now) {
+  return logDrainQuotaRatio(usage, now) >= LOG_DRAIN_QUOTA_WARN_RATIO;
+}
+function logDrainQuotaDroppedSeverities(degradation) {
+  switch (degradation) {
+    case "debug_dropped":
+      return [
+        5
+      ];
+    case "info_dropped":
+      return [
+        5,
+        9
+      ];
+    default:
+      return [];
+  }
+}
+function encodeLogCursor(c) {
+  return Buffer.from(JSON.stringify({
+    t: c.t,
+    id: c.id
+  }), "utf8").toString("base64url");
+}
+function decodeLogCursor(raw) {
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  if (!trimmed || trimmed.length > LOG_CURSOR_MAX_LENGTH) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(Buffer.from(trimmed, "base64url").toString("utf8"));
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+  const { t, id } = parsed;
+  if (typeof t !== "number" || !Number.isSafeInteger(t) || t < 0) return null;
+  if (typeof id !== "string" || !id || id.length > LOG_CURSOR_MAX_ID_LENGTH) return null;
+  return {
+    t,
+    id
+  };
+}
+function parseLogTimeBound(raw, now = /* @__PURE__ */ new Date()) {
+  if (typeof raw !== "string") return null;
+  const value3 = raw.trim();
+  if (!value3) return null;
+  const relative = LOG_RELATIVE_TIME_PATTERN.exec(value3);
+  if (relative) {
+    const amount = Number(relative[1]);
+    const unitMs = RELATIVE_UNIT_MS[relative[2]];
+    if (!Number.isFinite(amount) || unitMs === void 0) return null;
+    const at2 = now.getTime() - amount * unitMs;
+    return Number.isFinite(at2) ? new Date(at2) : null;
+  }
+  if (!LOG_ISO_TIME_PATTERN.test(value3)) return null;
+  const at = Date.parse(value3);
+  return Number.isNaN(at) ? null : new Date(at);
+}
 function isRecord(value3) {
   return typeof value3 === "object" && value3 !== null;
 }
@@ -944,6 +1045,9 @@ function workflowOccurrenceId(lineageId, stepId) {
 function workflowOrgSlotKey(orgId, kind) {
   return `wf:org:${orgId}:${kind}`;
 }
+function workflowJobModelSourceLabel(source) {
+  return WORKFLOW_JOB_MODEL_SOURCE_LABELS[source];
+}
 function scheduledTimeKey(scheduledTime) {
   return scheduledTime.replace(/[^0-9TZ]/g, "");
 }
@@ -1254,12 +1358,39 @@ function effectiveAgentFeatures(base, override, rule) {
   if (rule === "wholesale") return override || base || void 0;
   return effectiveAgentFeatureRows(base, override).rows;
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
+var __defProp2, __name2, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
     __defProp2 = Object.defineProperty;
     __name2 = /* @__PURE__ */ __name((target, value3) => __defProp2(target, "name", { value: value3, configurable: true }), "__name");
+    PLUMBING_THREAD_CHANNELS = [
+      "trigger",
+      "template-install",
+      "template-uninstall"
+    ];
+    CHANNEL_CONVERSATION_CHANNELS = [
+      "whatsapp",
+      "slack",
+      "teams",
+      "front",
+      "email",
+      "messagebird",
+      "sms",
+      "mms",
+      "rcs",
+      "instagram",
+      "facebook",
+      "imessage"
+    ];
+    HIDDEN_THREAD_CHANNELS = [
+      ...PLUMBING_THREAD_CHANNELS,
+      ...CHANNEL_CONVERSATION_CHANNELS
+    ];
+    __name(isChannelConversationChannel, "isChannelConversationChannel");
+    __name2(isChannelConversationChannel, "isChannelConversationChannel");
+    __name(isChannelConversationThread, "isChannelConversationThread");
+    __name2(isChannelConversationThread, "isChannelConversationThread");
     __name(isPersonaTextObject, "isPersonaTextObject");
     __name2(isPersonaTextObject, "isPersonaTextObject");
     __name(flattenPersonaText, "flattenPersonaText");
@@ -1879,6 +2010,93 @@ This text is who you are for this person. As you learn them, their name, their w
 `;
     __name(buildPersonalSpaceStartingPersona, "buildPersonalSpaceStartingPersona");
     __name2(buildPersonalSpaceStartingPersona, "buildPersonalSpaceStartingPersona");
+    AGENT_LOG_SOURCES = [
+      "skill",
+      "job",
+      "webhook",
+      "trigger",
+      "preprocessor",
+      "postprocessor",
+      "user_message",
+      "agent_response",
+      "agent_error",
+      "runtime",
+      "mcp",
+      "rag",
+      "device",
+      "device-trigger",
+      "model-resolver",
+      "workflow-step",
+      "workflow-script",
+      "workflow"
+    ];
+    LOG_DRAIN_SOURCES = [
+      ...AGENT_LOG_SOURCES,
+      "execution",
+      // ── phase 2 ──
+      "delivery",
+      "trigger-execution",
+      "job-execution",
+      "workflow-run",
+      "workflow-audit"
+    ];
+    LOG_DRAIN_MAX_PER_ORG = 5;
+    LOG_DRAIN_MAX_PER_ORG_ENTERPRISE = 10;
+    __name(maxDrainsForTier, "maxDrainsForTier");
+    __name2(maxDrainsForTier, "maxDrainsForTier");
+    LOG_DRAIN_ENDPOINT_TEMPLATES = {
+      datadog: "https://http-intake.logs.{site}/api/v2/logs"
+    };
+    __name(resolvePresetEndpoint, "resolvePresetEndpoint");
+    __name2(resolvePresetEndpoint, "resolvePresetEndpoint");
+    LOG_DRAIN_QUOTAS = {
+      team: {
+        eventsPerDay: 1e6,
+        bytesPerDay: 1 * 1024 ** 3
+      },
+      business: {
+        eventsPerDay: 1e7,
+        bytesPerDay: 10 * 1024 ** 3
+      },
+      enterprise: {
+        eventsPerDay: Number.MAX_SAFE_INTEGER,
+        bytesPerDay: Number.MAX_SAFE_INTEGER
+      }
+    };
+    LOG_DRAIN_QUOTA_WARN_RATIO = 0.8;
+    LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO = 1;
+    LOG_DRAIN_QUOTA_DROP_INFO_RATIO = 1.25;
+    LOG_DRAIN_QUOTA_PAUSE_RATIO = 1.5;
+    __name(nextLogDrainQuotaResetAt, "nextLogDrainQuotaResetAt");
+    __name2(nextLogDrainQuotaResetAt, "nextLogDrainQuotaResetAt");
+    __name(logDrainQuotaWindowExpired, "logDrainQuotaWindowExpired");
+    __name2(logDrainQuotaWindowExpired, "logDrainQuotaWindowExpired");
+    __name(logDrainQuotaRatio, "logDrainQuotaRatio");
+    __name2(logDrainQuotaRatio, "logDrainQuotaRatio");
+    __name(logDrainQuotaDegradationForRatio, "logDrainQuotaDegradationForRatio");
+    __name2(logDrainQuotaDegradationForRatio, "logDrainQuotaDegradationForRatio");
+    __name(logDrainQuotaDegradation, "logDrainQuotaDegradation");
+    __name2(logDrainQuotaDegradation, "logDrainQuotaDegradation");
+    __name(logDrainQuotaWarned, "logDrainQuotaWarned");
+    __name2(logDrainQuotaWarned, "logDrainQuotaWarned");
+    __name(logDrainQuotaDroppedSeverities, "logDrainQuotaDroppedSeverities");
+    __name2(logDrainQuotaDroppedSeverities, "logDrainQuotaDroppedSeverities");
+    LOG_CURSOR_MAX_LENGTH = 512;
+    LOG_CURSOR_MAX_ID_LENGTH = 128;
+    LOG_RELATIVE_TIME_PATTERN = /^(\d{1,9})([smhd])$/;
+    LOG_ISO_TIME_PATTERN = /^\d{4}-\d{2}-\d{2}([Tt ]\d{2}:\d{2}(:\d{2}(\.\d{1,9})?)?([Zz]|[+-]\d{2}:?\d{2})?)?$/;
+    RELATIVE_UNIT_MS = {
+      s: 1e3,
+      m: 6e4,
+      h: 36e5,
+      d: 864e5
+    };
+    __name(encodeLogCursor, "encodeLogCursor");
+    __name2(encodeLogCursor, "encodeLogCursor");
+    __name(decodeLogCursor, "decodeLogCursor");
+    __name2(decodeLogCursor, "decodeLogCursor");
+    __name(parseLogTimeBound, "parseLogTimeBound");
+    __name2(parseLogTimeBound, "parseLogTimeBound");
     CORE_DRAINING_CODE = "CORE_DRAINING";
     CORE_DRAINING_DEFAULT_RETRY_MS = 1e3;
     CORE_DRAINING_MAX_RETRY_MS = 5e3;
@@ -2623,6 +2841,16 @@ This text is who you are for this person. As you learn them, their name, their w
     __name(workflowOrgSlotKey, "workflowOrgSlotKey");
     __name2(workflowOrgSlotKey, "workflowOrgSlotKey");
     WORKFLOW_CONNECTION_KEY_RE = /^[a-z][a-z0-9_-]{0,63}$/;
+    WORKFLOW_JOB_MODEL_SOURCE_LABELS = {
+      stamp: "lease stamp",
+      initData: "run input",
+      default: "placeholder default",
+      node: "node.model",
+      env: "platform default",
+      org: "org default"
+    };
+    __name(workflowJobModelSourceLabel, "workflowJobModelSourceLabel");
+    __name2(workflowJobModelSourceLabel, "workflowJobModelSourceLabel");
     __name(scheduledTimeKey, "scheduledTimeKey");
     __name2(scheduledTimeKey, "scheduledTimeKey");
     __name(scheduledWorkflowRunIdForTime, "scheduledWorkflowRunIdForTime");
@@ -2856,7 +3084,23 @@ This text is who you are for this person. As you learn them, their name, their w
       * gated and nobody approved it, and conflating the two would make "who approved this run"
       * unanswerable for every run of either kind (§H2 "Audit").
       */
-      "workflow.run.autonomy_applied"
+      "workflow.run.autonomy_applied",
+      // --- run budget cap enforcement (Job-tier billing plan D4; BAC-677) ---
+      /**
+      * The audit twin of the `run.budget_exceeded` run event (WJB-B2a): the run overshot its
+      * `budget.maxCredits` on its LAST step and completed anyway, `budget.exceeded: true`. The budget family
+      * already mirrors run events here — `workflow.run.budget_parked` / `workflow.run.budget_raised` are the
+      * twins of `run.budget_parked` / `run.budget_raised` — and an organisation reviewing what it was charged
+      * needs the overshoot in the audit store beside the raise that preceded it, not only in the run's own
+      * event stream.
+      *
+      * Declared with the run event rather than after it because the emitter port
+      * (`WorkflowAuditPort.action`, typed `workflow.run.${string}`) does not check against this tuple: a name
+      * that is NOT declared here is written to the audit store all the same and no compiler says so.
+      * Declaring it is what makes the later emitter checkable. `workflow.run.budget_parked` is likewise
+      * declared and not yet emitted.
+      */
+      "workflow.run.budget_exceeded"
     ];
     WORKFLOW_AUDIT_METADATA_MAX_BYTES = 4 * 1024;
     __name(isWorkflowAuditEvent, "isWorkflowAuditEvent");
@@ -6494,6 +6738,49 @@ function graphHasJobTierStep(envelopeOrGraph) {
   const graph = Array.isArray(envelopeOrGraph) ? envelopeOrGraph : env2.definition?.graph ?? [];
   return Array.isArray(graph) && graph.some(entryHasJobTier);
 }
+function jobTierSteps(envelopeOrGraph) {
+  const out = [];
+  if (!envelopeOrGraph || typeof envelopeOrGraph !== "object") return out;
+  const env2 = envelopeOrGraph;
+  const graph = Array.isArray(envelopeOrGraph) ? envelopeOrGraph : env2.definition?.graph ?? [];
+  if (!Array.isArray(graph)) return out;
+  for (const entry of graph) collectJobTierSteps(entry, out);
+  return out;
+}
+function jobTierStepIds(envelopeOrGraph) {
+  return jobTierSteps(envelopeOrGraph).map((s) => s.stepId);
+}
+function collectJobTierSteps(entry, out) {
+  const n2 = armEntry2(entry);
+  if (!n2 || typeof n2 !== "object") return;
+  const node = n2;
+  const ws = node.workspace;
+  if (node.tier === "job" || ws !== void 0 && ws !== "inherit") {
+    const stepId = typeof node.id === "string" && node.id ? node.id : "(unnamed)";
+    const model = typeof node.model === "string" && node.model.trim() ? node.model.trim() : void 0;
+    out.push(model === void 0 ? {
+      stepId
+    } : {
+      stepId,
+      model
+    });
+  }
+  switch (node.type) {
+    case "parallel":
+      if (Array.isArray(node.steps)) for (const s of node.steps) collectJobTierSteps(s, out);
+      return;
+    case "conditional":
+      if (Array.isArray(node.steps)) for (const s of node.steps) collectJobTierSteps(s, out);
+      if (node.otherwise !== void 0) collectJobTierSteps(node.otherwise, out);
+      return;
+    case "foreach":
+    case "loop":
+      collectJobTierSteps(node.step, out);
+      return;
+    default:
+      return;
+  }
+}
 var __defProp4, __name4, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, WORKFLOW_MODEL_TEMPLATE_ROOT, WORKFLOW_MODEL_TEMPLATE_RE, PATH_SEGMENT_RE, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, WORKFLOW_SCHEDULE_RUN_AS, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
 var init_dist2 = __esm({
   "../workflow-graph/dist/index.mjs"() {
@@ -7298,6 +7585,12 @@ var init_dist2 = __esm({
     __name4(entryHasJobTier, "entryHasJobTier");
     __name(graphHasJobTierStep, "graphHasJobTierStep");
     __name4(graphHasJobTierStep, "graphHasJobTierStep");
+    __name(jobTierSteps, "jobTierSteps");
+    __name4(jobTierSteps, "jobTierSteps");
+    __name(jobTierStepIds, "jobTierStepIds");
+    __name4(jobTierStepIds, "jobTierStepIds");
+    __name(collectJobTierSteps, "collectJobTierSteps");
+    __name4(collectJobTierSteps, "collectJobTierSteps");
   }
 });
 
@@ -8256,7 +8549,6 @@ var init_constants = __esm({
       API: process.env.LUA_API_URL || "https://api.heylua.ai",
       AUTH: process.env.LUA_AUTH_URL || "https://auth.heylua.ai",
       CHAT: process.env.LUA_API_URL || "https://api.heylua.ai",
-      WEBHOOK: process.env.LUA_WEBHOOK_URL || "https://webhook.heylua.ai",
       CDN: "https://cdn.heylua.ai"
     };
     CREDENTIALS_FILE = join(CLI_CONFIG_DIR, "credentials");