lua-cli 3.40.0 → 3.41.0

package/dist/api-exports.d.ts

@@ -476,10 +476,11 @@ export declare interface AgentStepOptions {
     /**
      * EM-WS3: pin a plugin step's Lua-API proxy (and its key) to ANOTHER agent instead of this workflow's own. Legal only
      * beside `plugins`. Refused at run time (`target_not_granted`) unless the platform's plugin-target switch is on AND
-     * this workflow's agent holds a `supervision:act` or `supervision:release` grant on the target.
+     * this workflow's agent holds a `supervision:act` or `supervision:release` grant on the target. EM-WS3 × EM-WS2: the
+     * id may be `template('${initData.<path>}')`, rendered from the run input at dispatch (a per-run target).
      */
     target?: {
-        agentId: string;
+        agentId: string | TemplateBinding;
     };
     /**
      * What this step DOES: `classify` | `extract` | `transform` | `draft` | `research` | `reason` | `code` |
@@ -3402,6 +3403,7 @@ export declare class LuaAgent {
     private readonly triggers;
     private readonly jobs;
     private readonly workflows;
+    private readonly webApps;
     private readonly preProcessors;
     private readonly postProcessors;
     private readonly mcpServers;
@@ -3441,6 +3443,7 @@ export declare class LuaAgent {
     getTriggers(): LuaTrigger[];
     getJobs(): LuaJob[];
     getWorkflows(): LuaWorkflow[];
+    getWebApps(): LuaWebApp[];
     getPreProcessors(): PreProcessor[];
     getPostProcessors(): PostProcessor[];
     getMCPServers(): LuaMCPServer[];
@@ -3485,6 +3488,8 @@ export declare interface LuaAgentConfig {
     jobs?: LuaJob[];
     /** Array of workflows (createWorkflow / defineWorkflow) — 03 §3.1; resolved by the compiler traverser, dropped from the agent bundle */
     workflows?: LuaWorkflow[];
+    /** Web apps (defineWebApp) opened from Lua Workspace and the admin console; pushed with `lua push webapp` */
+    webApps?: LuaWebApp[];
     /** Array of preprocessors (run before messages reach the agent) */
     preProcessors?: PreProcessor[];
     /** Array of postprocessors (run after agent generates responses) */
@@ -4402,14 +4407,14 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
          */
         options: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, "strip", z.ZodTypeAny, {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     }, {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     }>, z.ZodObject<{
         kind: z.ZodLiteral<"realtime">;
@@ -4468,14 +4473,14 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
          */
         options: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, "strip", z.ZodTypeAny, {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     }, {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     }>, z.ZodObject<{
         kind: z.ZodLiteral<"realtime">;
@@ -4534,14 +4539,14 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
          */
         options: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, "strip", z.ZodTypeAny, {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     }, {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     }>, z.ZodObject<{
         kind: z.ZodLiteral<"realtime">;
@@ -4726,9 +4731,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -4742,9 +4747,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -4757,9 +4762,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -4820,9 +4825,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -4836,9 +4841,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -4851,9 +4856,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -4914,9 +4919,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -4930,9 +4935,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -4945,9 +4950,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -5008,9 +5013,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -5024,9 +5029,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -5039,9 +5044,9 @@ declare const LuaVoiceConfigSchema: z.ZodEffects<z.ZodObject<{
         options?: Record<string, unknown>;
         model?: string;
     } | {
-        class?: "LLM" | "STT" | "STTv2" | "TTS";
         provider?: "deepgram" | "elevenlabs";
         kind?: "plugin";
+        class?: "LLM" | "STT" | "STTv2" | "TTS";
         options?: Record<string, unknown>;
     } | {
         provider?: "google" | "xai" | "openai";
@@ -5468,7 +5473,7 @@ export declare type LuaWorkflowBuildCode = 'duplicate-step-id' | 'unknown-step-r
 */
 | 'workspace-not-declared' | 'workspace-inherit-without-parent-workspace' | 'workspace-inherit-conflict' | 'harness-requires-job-tier' | 'max-turns-requires-job-tier' | 'max-turns-invalid'
 /** EM-WS3: a step's `plugins` outside the allowlist, repeated, or off the Job tier. */
-| 'plugins-invalid' | 'cap-exceeded' | 'chunk-size-invalid' | 'rate-limit-invalid' | 'backoff-invalid' | 'loop-interval-out-of-range' | 'mapping-placement' | 'container-arm-empty'
+| 'plugins-invalid' | 'target-invalid' | 'lua-api-invalid' | 'cap-exceeded' | 'chunk-size-invalid' | 'rate-limit-invalid' | 'backoff-invalid' | 'loop-interval-out-of-range' | 'mapping-placement' | 'container-arm-empty'
 /**
 * @deprecated LUA-684 — the builder no longer throws it: an `approval` / `waitForSignal` IS a container arm
 * (`parallel(['approve', …])`). Where the engine cannot run one — a `loop` body, the step of a `[map, step]`
@@ -5617,6 +5622,21 @@ export declare interface LuaWorkflowStep<TIn extends ZodType = ZodType, TOut ext
     workspace?: WorkflowStepWorkspace;
     jobResources?: WorkflowJobResources;
     jobTools?: WorkflowJobToolId[];
+    /**
+     * EM-WS3 × EM-WS2: let this `tier:'job'` step run `lua` (`ctx.exec('lua', [...])`, `` ctx.$`lua push …` ``) against the
+     * Lua API through the platform's staging-only proxy, with a short-lived key for ONE agent: this workflow's agent, or
+     * `target`. It is the same proxy and the same deny rules as a plugin agent step: deploy, promote, publish,
+     * activate, env, chat and runtime calls are refused.
+     */
+    luaApi?: true;
+    /**
+     * EM-WS3: pin the `luaApi` proxy (and its key) to ANOTHER agent. The id may be static or
+     * `template('${initData.<path>}')`, rendered from the run input at dispatch. The same flag and supervision-grant
+     * rules apply as on a plugin agent step.
+     */
+    target?: {
+        agentId: string | TemplateBinding;
+    };
     /** default { maxAttempts: 1 } */
     retry?: RetryPolicy;
     /** default 'none'; 'external' ⇒ park on platform-fault reclaim. */

package/dist/api-exports.js

@@ -2513,7 +2513,15 @@ function sortVerdictReasons(reasons) {
     ...reasons
   ].sort((a, b) => REVIEW_VERDICT_REASON_ORDER.indexOf(a.kind) - REVIEW_VERDICT_REASON_ORDER.indexOf(b.kind));
 }
-var __defProp3, __name3, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER;
+function envTemplatePlaceholder(key) {
+  if (ENV_TEMPLATE_SECRET_KEY_RE.test(key)) {
+    throw new Error(`env-template-secret-key: \`${key}\` looks like a secret \u2014 read it with env('${key}') inside execute instead`);
+  }
+  return {
+    __envRef: key
+  };
+}
+var __defProp3, __name3, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -5116,6 +5124,9 @@ listed here; never invent a target.`;
     ];
     __name(sortVerdictReasons, "sortVerdictReasons");
     __name3(sortVerdictReasons, "sortVerdictReasons");
+    ENV_TEMPLATE_SECRET_KEY_RE = /(SECRET|TOKEN|KEY|PASSWORD)$/;
+    __name(envTemplatePlaceholder, "envTemplatePlaceholder");
+    __name3(envTemplatePlaceholder, "envTemplatePlaceholder");
   }
 });
 
@@ -5144,16 +5155,110 @@ function workflowJobPluginsProblem(plugins) {
   if (new Set(plugins).size !== plugins.length) return "plugins must not repeat";
   return null;
 }
-function workflowJobTargetProblem(target, plugins) {
+function workflowJobTargetTemplatePath(binding) {
+  if (!binding || typeof binding !== "object" || Array.isArray(binding)) return null;
+  const keys = Object.keys(binding);
+  const tpl = binding.template;
+  if (keys.length !== 1 || typeof tpl !== "string" || tpl.length > 512) return null;
+  const m = WORKFLOW_JOB_TARGET_TEMPLATE_RE.exec(tpl.trim());
+  if (!m) return null;
+  const names = m[1].split(".").map((seg) => seg.replace(/\[(?:0|[1-9]\d*)\]/g, ""));
+  if (names.some((n2) => n2 === "__proto__" || n2 === "prototype" || n2 === "constructor")) return null;
+  return m[1].split(".").every((seg) => TARGET_PATH_SEGMENT_RE.test(seg)) ? m[1] : null;
+}
+function isWorkflowJobTargetTemplate(target) {
+  const agentId = target?.agentId;
+  return !!agentId && typeof agentId === "object";
+}
+function workflowJobLuaApiProblem(luaApi, nodeType, tier) {
+  if (luaApi === void 0) return null;
+  if (luaApi !== true) return "`luaApi` must be exactly true";
+  if (nodeType !== "code") return "`luaApi` is legal on code steps only (an agent step uses `plugins`)";
+  if (tier !== "job") return "`luaApi` requires tier:'job'";
+  return null;
+}
+function workflowJobUsesLuaApi(step3) {
+  return Array.isArray(step3.plugins) && step3.plugins.length > 0 || step3.kind === "code" && step3.luaApi === true;
+}
+function workflowJobTargetProblem(target, plugins, luaApi) {
   if (target === void 0) return null;
   if (!target || typeof target !== "object" || Array.isArray(target)) return "target must be { agentId }";
   const keys = Object.keys(target);
   const agentId = target.agentId;
-  if (keys.length !== 1 || typeof agentId !== "string" || !agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
-  if (!Array.isArray(plugins) || plugins.length === 0) return "`target` is legal only beside `plugins`";
+  if (keys.length !== 1 || !("agentId" in target)) return "target must be exactly { agentId }";
+  if (typeof agentId === "string") {
+    if (!agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
+    if (agentId.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
+  } else if (workflowJobTargetTemplatePath(agentId) === null) {
+    return "target.agentId must be a static id or template('${initData.<path>}') \u2014 exactly one initData placeholder, no default";
+  }
+  const hasPlugins = Array.isArray(plugins) && plugins.length > 0;
+  if (!hasPlugins && luaApi !== true) return "`target` is legal only beside `plugins` or `luaApi: true`";
   return null;
 }
-var __defProp4, __name4, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_READ_ONLY_DROPPED, WORKFLOW_JOB_DEFAULT_TOOLS, WORKFLOW_JOB_PLUGINS, WORKFLOW_JOB_PLUGIN_ROOT, WORKFLOW_JOB_PLUGINS_MAX;
+function readInitDataPath(root, path3) {
+  let cur = root;
+  for (const seg of path3.split(".")) {
+    const name = seg.replace(/\[(?:0|[1-9]\d*)\]/g, "");
+    const indexes = [
+      ...seg.matchAll(/\[(0|[1-9]\d*)\]/g)
+    ].map((x) => Number(x[1]));
+    if (cur === null || typeof cur !== "object" || !Object.prototype.hasOwnProperty.call(cur, name)) return void 0;
+    cur = cur[name];
+    for (const i of indexes) {
+      if (!Array.isArray(cur) || i >= cur.length) return void 0;
+      cur = cur[i];
+    }
+  }
+  return cur;
+}
+function renderWorkflowJobTarget(target, initData) {
+  const agentId = target?.agentId;
+  if (target === void 0 || target === null || agentId === void 0) return {
+    ok: true,
+    agentId: void 0,
+    templated: false
+  };
+  if (typeof agentId === "string") {
+    if (!agentId.trim() || agentId.includes("${")) return {
+      ok: false,
+      reason: "invalid",
+      message: "target.agentId is invalid"
+    };
+    return {
+      ok: true,
+      agentId,
+      templated: false
+    };
+  }
+  const path3 = workflowJobTargetTemplatePath(agentId);
+  if (path3 === null) return {
+    ok: false,
+    reason: "invalid",
+    message: "target.agentId is not a valid initData template"
+  };
+  const value3 = readInitDataPath(initData, path3);
+  if (value3 === void 0 || value3 === null) {
+    return {
+      ok: false,
+      reason: "unbound",
+      message: `target_unresolved: the run input has no initData.${path3}`
+    };
+  }
+  if (typeof value3 !== "string" || !value3.trim() || value3.length > 256 || /\s/.test(value3.trim())) {
+    return {
+      ok: false,
+      reason: "empty",
+      message: `target_unresolved: initData.${path3} is not a non-empty agent id`
+    };
+  }
+  return {
+    ok: true,
+    agentId: value3.trim(),
+    templated: true
+  };
+}
+var __defProp4, __name4, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_READ_ONLY_DROPPED, WORKFLOW_JOB_DEFAULT_TOOLS, WORKFLOW_JOB_PLUGINS, WORKFLOW_JOB_PLUGIN_ROOT, WORKFLOW_JOB_PLUGINS_MAX, WORKFLOW_JOB_TARGET_TEMPLATE_RE, TARGET_PATH_SEGMENT_RE;
 var init_workflow_job_tools = __esm({
   "../shared-types/dist/workflow-job-tools.mjs"() {
     "use strict";
@@ -5199,8 +5304,22 @@ var init_workflow_job_tools = __esm({
     __name4(workflowJobPluginDir, "workflowJobPluginDir");
     __name(workflowJobPluginsProblem, "workflowJobPluginsProblem");
     __name4(workflowJobPluginsProblem, "workflowJobPluginsProblem");
+    WORKFLOW_JOB_TARGET_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*\}$/;
+    TARGET_PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
+    __name(workflowJobTargetTemplatePath, "workflowJobTargetTemplatePath");
+    __name4(workflowJobTargetTemplatePath, "workflowJobTargetTemplatePath");
+    __name(isWorkflowJobTargetTemplate, "isWorkflowJobTargetTemplate");
+    __name4(isWorkflowJobTargetTemplate, "isWorkflowJobTargetTemplate");
+    __name(workflowJobLuaApiProblem, "workflowJobLuaApiProblem");
+    __name4(workflowJobLuaApiProblem, "workflowJobLuaApiProblem");
+    __name(workflowJobUsesLuaApi, "workflowJobUsesLuaApi");
+    __name4(workflowJobUsesLuaApi, "workflowJobUsesLuaApi");
     __name(workflowJobTargetProblem, "workflowJobTargetProblem");
     __name4(workflowJobTargetProblem, "workflowJobTargetProblem");
+    __name(readInitDataPath, "readInitDataPath");
+    __name4(readInitDataPath, "readInitDataPath");
+    __name(renderWorkflowJobTarget, "renderWorkflowJobTarget");
+    __name4(renderWorkflowJobTarget, "renderWorkflowJobTarget");
   }
 });
 
@@ -5676,6 +5795,15 @@ function liftRenderedApprover(row, rendered) {
     group: text
   };
 }
+function approverUsersOf(users) {
+  if (Array.isArray(users)) {
+    if (users.length === 0 || users.length > APPROVER_SPEC_MAX_USERS) return null;
+    return users.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128) ? users : null;
+  }
+  if (typeof users !== "string") return null;
+  const lifted = liftRenderedApprover("users", users);
+  return lifted && "users" in lifted ? lifted.users : null;
+}
 function workspaceTemplatePath(template22) {
   const key = template22.trim();
   const expr = WORKSPACE_TEMPLATE_EXPR_RE.exec(key);
@@ -6153,8 +6281,13 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     const plugins = node.plugins;
     const target = node.target;
+    const luaApi = node.luaApi;
+    if (luaApi !== void 0) {
+      const problem = workflowJobLuaApiProblem(luaApi, node.type === "step" ? "code" : node.type, isJobTier(node) ? "job" : node.tier);
+      if (problem) err("lua-api-invalid", problem, `${path3}.luaApi`, id2);
+    }
     if (target !== void 0) {
-      const problem = workflowJobTargetProblem(target, plugins);
+      const problem = workflowJobTargetProblem(target, plugins, luaApi);
       if (problem) err("target-invalid", problem, `${path3}.target`, id2);
     }
     if (plugins !== void 0) {
@@ -8918,6 +9051,8 @@ var init_dist2 = __esm({
     __name5(validateApproverBlock, "validateApproverBlock");
     __name(liftRenderedApprover, "liftRenderedApprover");
     __name5(liftRenderedApprover, "liftRenderedApprover");
+    __name(approverUsersOf, "approverUsersOf");
+    __name5(approverUsersOf, "approverUsersOf");
     WORKSPACE_TEMPLATE_EXPR_RE = /^\$\{\s*(?:initData|input)\.([^}]+?)\s*\}$/;
     __name(workspaceTemplatePath, "workspaceTemplatePath");
     __name5(workspaceTemplatePath, "workspaceTemplatePath");
@@ -9574,7 +9709,9 @@ function stepNodeOf(s) {
     tier,
     workspace: s.workspace,
     jobResources: s.jobResources,
-    jobTools: s.jobTools
+    jobTools: s.jobTools,
+    luaApi: s.luaApi,
+    target: s.target
   });
 }
 function materializeEntry(entry, steps) {
@@ -9919,6 +10056,14 @@ var init_workflow = __esm({
         const tier = s.tier ?? (s.workspace ? "job" : void 0);
         if (s.workspace && s.tier !== void 0 && s.tier !== "job") throw new LuaWorkflowBuildError("workspace-requires-job-tier", `"${s.id}": a step mounting a workspace must be tier:'job'`);
         if (s.jobTools && tier !== "job") throw new LuaWorkflowBuildError("cap-exceeded", `"${s.id}": jobTools require tier:'job' (job-tools-require-job-tier)`);
+        if (s.luaApi !== void 0) {
+          const problem = workflowJobLuaApiProblem(s.luaApi, "code", tier);
+          if (problem) throw new LuaWorkflowBuildError("lua-api-invalid", `"${s.id}": ${problem}`);
+        }
+        if (s.target !== void 0) {
+          const problem = workflowJobTargetProblem(s.target, void 0, s.luaApi);
+          if (problem) throw new LuaWorkflowBuildError("target-invalid", `"${s.id}": ${problem}`);
+        }
         assertTimeout({
           id: s.id,
           timeoutSeconds: s.timeoutSeconds,
@@ -10175,7 +10320,7 @@ var init_workflow = __esm({
         }
         if (opts.target !== void 0) {
           const problem = workflowJobTargetProblem(opts.target, opts.plugins);
-          if (problem) throw new LuaWorkflowBuildError("plugins-invalid", `"${id2}": ${problem}`);
+          if (problem) throw new LuaWorkflowBuildError("target-invalid", `"${id2}": ${problem}`);
         }
         assertTimeout({
           id: id2,
@@ -11994,6 +12139,7 @@ var init_types = __esm({
       PrimitiveKind2["DEVICE_TRIGGER"] = "device-trigger";
       PrimitiveKind2["VOICE"] = "voice";
       PrimitiveKind2["WORKFLOW"] = "workflow";
+      PrimitiveKind2["WEB_APP"] = "web-app";
       return PrimitiveKind2;
     })({});
   }
@@ -18078,14 +18224,8 @@ var readEnv = /* @__PURE__ */ __name((key) => {
   return void 0;
 }, "readEnv");
 var env = Object.assign((key, _opts) => readEnv(key), {
-  template: /* @__PURE__ */ __name((key) => {
-    if (/(SECRET|TOKEN|KEY|PASSWORD)$/.test(key)) {
-      throw new Error(`env-template-secret-key: \`${key}\` looks like a secret \u2014 read it with env('${key}') inside execute instead`);
-    }
-    return {
-      __envRef: key
-    };
-  }, "template")
+  // The ONE factory (`@lua/shared-types`) — the deployed step runtime's `env.template` is the same function.
+  template: /* @__PURE__ */ __name((key) => envTemplatePlaceholder(key), "template")
 });
 var log = Object.freeze({
   debug: /* @__PURE__ */ __name((message, fields) => emitLocalLog("debug", message, fields), "debug"),
@@ -18609,6 +18749,7 @@ var LuaAgent = class {
   triggers;
   jobs;
   workflows;
+  webApps;
   preProcessors;
   postProcessors;
   mcpServers;
@@ -18653,6 +18794,7 @@ var LuaAgent = class {
     this.triggers = config.triggers || [];
     this.jobs = config.jobs || [];
     this.workflows = config.workflows || [];
+    this.webApps = config.webApps || [];
     this.preProcessors = config.preProcessors || [];
     this.postProcessors = config.postProcessors || [];
     this.mcpServers = config.mcpServers || [];
@@ -18698,6 +18840,9 @@ var LuaAgent = class {
   getWorkflows() {
     return this.workflows;
   }
+  getWebApps() {
+    return this.webApps;
+  }
   getPreProcessors() {
     return this.preProcessors;
   }