lua-cli 3.40.0 → 3.42.0-beta.1

package/dist/api-exports.d.ts

@@ -476,10 +476,11 @@ export declare interface AgentStepOptions {
     /**
      * EM-WS3: pin a plugin step's Lua-API proxy (and its key) to ANOTHER agent instead of this workflow's own. Legal only
      * beside `plugins`. Refused at run time (`target_not_granted`) unless the platform's plugin-target switch is on AND
-     * this workflow's agent holds a `supervision:act` or `supervision:release` grant on the target.
+     * this workflow's agent holds a `supervision:act` or `supervision:release` grant on the target. EM-WS3 × EM-WS2: the
+     * id may be `template('${initData.<path>}')`, rendered from the run input at dispatch (a per-run target).
      */
     target?: {
-        agentId: string;
+        agentId: string | TemplateBinding;
     };
     /**
      * What this step DOES: `classify` | `extract` | `transform` | `draft` | `research` | `reason` | `code` |
@@ -1187,7 +1188,7 @@ export declare type Channel = 'web' | 'whatsapp' | 'facebook' | 'instagram' | 's
 
 /** Channels accepted by the v1 unified send. Warm-only channels (teams,
  * instagram, messenger) require a prior inbound conversation. */
-export declare const CHANNEL_SEND_CHANNELS: readonly ["whatsapp", "sms", "email", "webchat", "teams", "instagram", "messenger"];
+export declare const CHANNEL_SEND_CHANNELS: readonly ["whatsapp", "sms", "email", "webchat", "teams", "instagram", "messenger", "slack"];
 
 export declare const Channels: ChannelsApi;
 
@@ -1237,6 +1238,16 @@ export declare const Channels: ChannelsApi;
  *   to: { conversationId: '19:9495c339...@thread.v2' },
  *   text: 'Sample LOT-4471 is missing origin and cupping score.',
  * });
+ *
+ * // Reply in a Slack thread through the agent's own bot (the bot must be in the channel)
+ * await Channels.send({
+ *   channel: 'slack',
+ *   to: { conversationId: 'C0123ABCDEF:1712345678.000100' },
+ *   text: 'The overnight load finished with 3 warnings.',
+ * });
+ *
+ * // DM a person on Slack, found by their email in the bot's workspace
+ * await Channels.send({ channel: 'slack', to: { email: 'pat@acme.co' }, text: 'Your report is ready.' });
  * ```
  */
 export declare interface ChannelsApi {
@@ -1245,9 +1256,15 @@ export declare interface ChannelsApi {
      * Returns `ChannelSendOutput` — check `persisted` if memory durability matters.
      *
      * Address a person with `userId` (any channel), `phoneNumber` (whatsapp/sms)
-     * or `email`. Address a shared conversation with `conversationId` (teams
-     * only) — everyone in it receives the message, and because there is no single
-     * recipient the send returns `persisted: false`.
+     * or `email` (email, slack). Address a conversation with `conversationId`
+     * (teams, slack) — everyone in it receives the message. It is recorded in the
+     * room that mirrors the conversation when the agent has one; otherwise the send
+     * returns `persisted: false`.
+     *
+     * Slack `conversationId` forms: `Lua.request.conversation.externalId`, a channel
+     * id (`C…`, top level), `C…:threadTs` (a reply in that thread), a member id
+     * (`U…`, their DM with the bot) or 2–8 member ids (`U…,U…`, a group DM). With
+     * more than one Slack connection, pass `options.channelIdentifier` (`T…-A…`).
      *
      * @example
      * ```typescript
@@ -1385,8 +1402,10 @@ export declare interface ChannelSendOutput {
      */
     status: DeliveryStatus;
     delivered: boolean;
-    /** False for conversation-scoped sends: a shared conversation has no single
-     * user to attribute the message to, so nothing is written to agent memory. */
+    /** Whether agent memory recorded the message. A conversation-scoped send is
+     * recorded in the room that mirrors the conversation when the agent has one
+     * (and a Slack DM in the conversation of the post's own thread); otherwise it
+     * is delivered but not recorded (`persisted: false` with a `warning`). */
     persisted: boolean;
     /**
      * True when the send was deferred to the WhatsApp message-request queue
@@ -1404,11 +1423,16 @@ export declare interface ChannelSendOutput {
 }
 
 /** Recipient — exactly one of the fields must be set. userId works on every
- * channel (resolved via the user's channel history); raw identifiers only on
- * cold-start-capable channels (whatsapp/sms → phoneNumber, email → email).
- * `conversationId` addresses a shared conversation rather than a person —
- * everyone in it receives the message. Teams only, and warm-only: the agent
- * must already be part of that conversation. */
+ * channel (resolved via the user's channel history; on Slack, via the user's
+ * email to the workspace member); raw identifiers only on cold-start-capable
+ * channels (whatsapp/sms → phoneNumber, email and slack → email).
+ * `conversationId` addresses a conversation rather than a person — everyone in
+ * it receives the message:
+ * - teams: a group chat or channel the agent is already part of;
+ * - slack: `Lua.request.conversation.externalId` (`T…:A…:C…[:threadTs]`), a
+ *   channel id (`C…`, top level), `C…:threadTs` (a reply in that thread), a
+ *   member id (`U…`, their DM with the bot) or 2–8 member ids (`U…,U…`, a group
+ *   DM). The bot must be in the channel. */
 export declare interface ChannelSendTarget {
     userId?: string;
     phoneNumber?: string;
@@ -1564,16 +1588,16 @@ export declare interface ConversationParticipant {
 }
 
 /**
- * The conversation a turn runs in. Present on group turns (a desktop room or a
- * Teams group chat); undefined on 1:1 chats, jobs, webhooks, triggers and
- * workflow steps.
+ * The conversation a turn runs in. Present on group turns (a desktop room, a
+ * Teams group chat, a Slack channel thread or group DM); undefined on 1:1 chats,
+ * jobs, webhooks, triggers and workflow steps.
  */
 export declare interface ConversationRef {
     /** The room conversation id (`room:<id>`). */
     id: string;
     kind: ConversationKind;
     channel: Channel;
-    /** The provider's conversation id; pass it to `Channels.send({ to: { conversationId } })` to reply proactively. */
+    /** The provider's conversation id (Teams chat id, Slack `T…:A…:C…:threadTs`); pass it to `Channels.send({ to: { conversationId } })` to reply proactively. */
     externalId?: string;
     currentSpeakerId?: string;
     /** Capped at 50 entries, current speaker first; see `participantCount` and `truncated`. */
@@ -3402,6 +3426,7 @@ export declare class LuaAgent {
     private readonly triggers;
     private readonly jobs;
     private readonly workflows;
+    private readonly webApps;
     private readonly preProcessors;
     private readonly postProcessors;
     private readonly mcpServers;
@@ -3441,6 +3466,7 @@ export declare class LuaAgent {
     getTriggers(): LuaTrigger[];
     getJobs(): LuaJob[];
     getWorkflows(): LuaWorkflow[];
+    getWebApps(): LuaWebApp[];
     getPreProcessors(): PreProcessor[];
     getPostProcessors(): PostProcessor[];
     getMCPServers(): LuaMCPServer[];
@@ -3485,6 +3511,8 @@ export declare interface LuaAgentConfig {
     jobs?: LuaJob[];
     /** Array of workflows (createWorkflow / defineWorkflow) — 03 §3.1; resolved by the compiler traverser, dropped from the agent bundle */
     workflows?: LuaWorkflow[];
+    /** Web apps (defineWebApp) opened from Lua Workspace and the admin console; pushed with `lua push webapp` */
+    webApps?: LuaWebApp[];
     /** Array of preprocessors (run before messages reach the agent) */
     preProcessors?: PreProcessor[];
     /** Array of postprocessors (run after agent generates responses) */
@@ -5468,7 +5496,7 @@ export declare type LuaWorkflowBuildCode = 'duplicate-step-id' | 'unknown-step-r
 */
 | 'workspace-not-declared' | 'workspace-inherit-without-parent-workspace' | 'workspace-inherit-conflict' | 'harness-requires-job-tier' | 'max-turns-requires-job-tier' | 'max-turns-invalid'
 /** EM-WS3: a step's `plugins` outside the allowlist, repeated, or off the Job tier. */
-| 'plugins-invalid' | 'cap-exceeded' | 'chunk-size-invalid' | 'rate-limit-invalid' | 'backoff-invalid' | 'loop-interval-out-of-range' | 'mapping-placement' | 'container-arm-empty'
+| 'plugins-invalid' | 'target-invalid' | 'lua-api-invalid' | 'cap-exceeded' | 'chunk-size-invalid' | 'rate-limit-invalid' | 'backoff-invalid' | 'loop-interval-out-of-range' | 'mapping-placement' | 'container-arm-empty'
 /**
 * @deprecated LUA-684 — the builder no longer throws it: an `approval` / `waitForSignal` IS a container arm
 * (`parallel(['approve', …])`). Where the engine cannot run one — a `loop` body, the step of a `[map, step]`
@@ -5617,6 +5645,21 @@ export declare interface LuaWorkflowStep<TIn extends ZodType = ZodType, TOut ext
     workspace?: WorkflowStepWorkspace;
     jobResources?: WorkflowJobResources;
     jobTools?: WorkflowJobToolId[];
+    /**
+     * EM-WS3 × EM-WS2: let this `tier:'job'` step run `lua` (`ctx.exec('lua', [...])`, `` ctx.$`lua push …` ``) against the
+     * Lua API through the platform's staging-only proxy, with a short-lived key for ONE agent: this workflow's agent, or
+     * `target`. It is the same proxy and the same deny rules as a plugin agent step: deploy, promote, publish,
+     * activate, env, chat and runtime calls are refused.
+     */
+    luaApi?: true;
+    /**
+     * EM-WS3: pin the `luaApi` proxy (and its key) to ANOTHER agent. The id may be static or
+     * `template('${initData.<path>}')`, rendered from the run input at dispatch. The same flag and supervision-grant
+     * rules apply as on a plugin agent step.
+     */
+    target?: {
+        agentId: string | TemplateBinding;
+    };
     /** default { maxAttempts: 1 } */
     retry?: RetryPolicy;
     /** default 'none'; 'external' ⇒ park on platform-fault reclaim. */
@@ -7649,6 +7692,7 @@ export declare interface WaitForSignalOptions {
  */
 declare const WEB_APP_CSP_KEYS: readonly ["scriptSrc", "styleSrc", "imgSrc", "connectSrc", "fontSrc", "frameSrc", "workerSrc"];
 
+/** `defineWebApp({ name })`: the name leads the app's host label, so a DNS-safe subset. */
 export declare const WEB_APP_NAME_PATTERN: RegExp;
 
 declare const WEB_ROUTE_METHODS: readonly ["GET", "POST", "PUT", "PATCH", "DELETE"];

package/dist/api-exports.js

@@ -2513,7 +2513,15 @@ function sortVerdictReasons(reasons) {
     ...reasons
   ].sort((a, b) => REVIEW_VERDICT_REASON_ORDER.indexOf(a.kind) - REVIEW_VERDICT_REASON_ORDER.indexOf(b.kind));
 }
-var __defProp3, __name3, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER;
+function envTemplatePlaceholder(key) {
+  if (ENV_TEMPLATE_SECRET_KEY_RE.test(key)) {
+    throw new Error(`env-template-secret-key: \`${key}\` looks like a secret \u2014 read it with env('${key}') inside execute instead`);
+  }
+  return {
+    __envRef: key
+  };
+}
+var __defProp3, __name3, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -2594,7 +2602,8 @@ var init_dist = __esm({
       "webchat",
       "teams",
       "instagram",
-      "messenger"
+      "messenger",
+      "slack"
     ];
     REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST = [
       "sendChannelMessage",
@@ -2605,7 +2614,8 @@ var init_dist = __esm({
       "sendWebchatMessage",
       "sendTeamsMessage",
       "sendInstagramMessage",
-      "sendMessengerMessage"
+      "sendMessengerMessage",
+      "sendSlackMessage"
     ];
     __name(isAllowedReviewableExecuteTool, "isAllowedReviewableExecuteTool");
     __name3(isAllowedReviewableExecuteTool, "isAllowedReviewableExecuteTool");
@@ -4827,6 +4837,24 @@ listed here; never invent a target.`;
       label: copy(100),
       body: onboardingRichTextSchema
     }).strict();
+    onboardingInstallScreenSchema = z4.object({
+      title: onboardingHeadingSchema,
+      subtitle: copy(240),
+      ctaLabel: copy(80),
+      ctaHelperText: onboardingRichTextSchema
+    }).strict();
+    onboardingResultScreenSchema = z4.object({
+      title: onboardingHeadingSchema,
+      subheader: copy(240),
+      inputPlaceholder: copy(120)
+    }).strict();
+    onboardingConnectScreenSchema = z4.object({
+      title: onboardingHeadingSchema,
+      description: onboardingRichTextSchema,
+      ctaLabel: copy(80),
+      neverLine: copy(120),
+      footnote: copy(240)
+    }).strict();
     onboardingTemplateContentSchema = z4.object({
       id,
       templateId: copy(160),
@@ -4839,7 +4867,10 @@ listed here; never invent a target.`;
       artwork: onboardingArtworkSchema,
       hireButtonLabel: copy(80),
       changeRoleButtonLabel: copy(80),
-      nextStepText: onboardingRichTextSchema
+      nextStepText: onboardingRichTextSchema,
+      install: onboardingInstallScreenSchema.optional(),
+      result: onboardingResultScreenSchema.optional(),
+      connect: onboardingConnectScreenSchema.optional()
     }).strict();
     onboardingUnavailableOutcomeSchema = z4.object({
       id,
@@ -5009,6 +5040,9 @@ listed here; never invent a target.`;
     __name3(isQueryRecord, "isQueryRecord");
     __name(isWebRouteInput, "isWebRouteInput");
     __name3(isWebRouteInput, "isWebRouteInput");
+    WEB_APP_NAME_PATTERN = /^[a-z][a-z0-9-]*$/;
+    WEB_APP_ENTRY_HTML_MAX_CHARS = 256 * 1024;
+    WEB_APP_MAX_ASSET_BYTES = 8 * 1024 * 1024;
     EVIDENCE_SESSION_IDLE_MS = 30 * 6e4;
     EVIDENCE_MIN_CONVERSATIONS = 20;
     EVIDENCE_LOW_CONFIDENCE_N = 5;
@@ -5116,6 +5150,9 @@ listed here; never invent a target.`;
     ];
     __name(sortVerdictReasons, "sortVerdictReasons");
     __name3(sortVerdictReasons, "sortVerdictReasons");
+    ENV_TEMPLATE_SECRET_KEY_RE = /(SECRET|TOKEN|KEY|PASSWORD)$/;
+    __name(envTemplatePlaceholder, "envTemplatePlaceholder");
+    __name3(envTemplatePlaceholder, "envTemplatePlaceholder");
   }
 });
 
@@ -5144,16 +5181,110 @@ function workflowJobPluginsProblem(plugins) {
   if (new Set(plugins).size !== plugins.length) return "plugins must not repeat";
   return null;
 }
-function workflowJobTargetProblem(target, plugins) {
+function workflowJobTargetTemplatePath(binding) {
+  if (!binding || typeof binding !== "object" || Array.isArray(binding)) return null;
+  const keys = Object.keys(binding);
+  const tpl = binding.template;
+  if (keys.length !== 1 || typeof tpl !== "string" || tpl.length > 512) return null;
+  const m = WORKFLOW_JOB_TARGET_TEMPLATE_RE.exec(tpl.trim());
+  if (!m) return null;
+  const names = m[1].split(".").map((seg) => seg.replace(/\[(?:0|[1-9]\d*)\]/g, ""));
+  if (names.some((n2) => n2 === "__proto__" || n2 === "prototype" || n2 === "constructor")) return null;
+  return m[1].split(".").every((seg) => TARGET_PATH_SEGMENT_RE.test(seg)) ? m[1] : null;
+}
+function isWorkflowJobTargetTemplate(target) {
+  const agentId = target?.agentId;
+  return !!agentId && typeof agentId === "object";
+}
+function workflowJobLuaApiProblem(luaApi, nodeType, tier) {
+  if (luaApi === void 0) return null;
+  if (luaApi !== true) return "`luaApi` must be exactly true";
+  if (nodeType !== "code") return "`luaApi` is legal on code steps only (an agent step uses `plugins`)";
+  if (tier !== "job") return "`luaApi` requires tier:'job'";
+  return null;
+}
+function workflowJobUsesLuaApi(step3) {
+  return Array.isArray(step3.plugins) && step3.plugins.length > 0 || step3.kind === "code" && step3.luaApi === true;
+}
+function workflowJobTargetProblem(target, plugins, luaApi) {
   if (target === void 0) return null;
   if (!target || typeof target !== "object" || Array.isArray(target)) return "target must be { agentId }";
   const keys = Object.keys(target);
   const agentId = target.agentId;
-  if (keys.length !== 1 || typeof agentId !== "string" || !agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
-  if (!Array.isArray(plugins) || plugins.length === 0) return "`target` is legal only beside `plugins`";
+  if (keys.length !== 1 || !("agentId" in target)) return "target must be exactly { agentId }";
+  if (typeof agentId === "string") {
+    if (!agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
+    if (agentId.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
+  } else if (workflowJobTargetTemplatePath(agentId) === null) {
+    return "target.agentId must be a static id or template('${initData.<path>}') \u2014 exactly one initData placeholder, no default";
+  }
+  const hasPlugins = Array.isArray(plugins) && plugins.length > 0;
+  if (!hasPlugins && luaApi !== true) return "`target` is legal only beside `plugins` or `luaApi: true`";
   return null;
 }
-var __defProp4, __name4, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_READ_ONLY_DROPPED, WORKFLOW_JOB_DEFAULT_TOOLS, WORKFLOW_JOB_PLUGINS, WORKFLOW_JOB_PLUGIN_ROOT, WORKFLOW_JOB_PLUGINS_MAX;
+function readInitDataPath(root, path3) {
+  let cur = root;
+  for (const seg of path3.split(".")) {
+    const name = seg.replace(/\[(?:0|[1-9]\d*)\]/g, "");
+    const indexes = [
+      ...seg.matchAll(/\[(0|[1-9]\d*)\]/g)
+    ].map((x) => Number(x[1]));
+    if (cur === null || typeof cur !== "object" || !Object.prototype.hasOwnProperty.call(cur, name)) return void 0;
+    cur = cur[name];
+    for (const i of indexes) {
+      if (!Array.isArray(cur) || i >= cur.length) return void 0;
+      cur = cur[i];
+    }
+  }
+  return cur;
+}
+function renderWorkflowJobTarget(target, initData) {
+  const agentId = target?.agentId;
+  if (target === void 0 || target === null || agentId === void 0) return {
+    ok: true,
+    agentId: void 0,
+    templated: false
+  };
+  if (typeof agentId === "string") {
+    if (!agentId.trim() || agentId.includes("${")) return {
+      ok: false,
+      reason: "invalid",
+      message: "target.agentId is invalid"
+    };
+    return {
+      ok: true,
+      agentId,
+      templated: false
+    };
+  }
+  const path3 = workflowJobTargetTemplatePath(agentId);
+  if (path3 === null) return {
+    ok: false,
+    reason: "invalid",
+    message: "target.agentId is not a valid initData template"
+  };
+  const value3 = readInitDataPath(initData, path3);
+  if (value3 === void 0 || value3 === null) {
+    return {
+      ok: false,
+      reason: "unbound",
+      message: `target_unresolved: the run input has no initData.${path3}`
+    };
+  }
+  if (typeof value3 !== "string" || !value3.trim() || value3.length > 256 || /\s/.test(value3.trim())) {
+    return {
+      ok: false,
+      reason: "empty",
+      message: `target_unresolved: initData.${path3} is not a non-empty agent id`
+    };
+  }
+  return {
+    ok: true,
+    agentId: value3.trim(),
+    templated: true
+  };
+}
+var __defProp4, __name4, WORKFLOW_JOB_TOOLS, WORKFLOW_JOB_READ_ONLY_DROPPED, WORKFLOW_JOB_DEFAULT_TOOLS, WORKFLOW_JOB_PLUGINS, WORKFLOW_JOB_PLUGIN_ROOT, WORKFLOW_JOB_PLUGINS_MAX, WORKFLOW_JOB_TARGET_TEMPLATE_RE, TARGET_PATH_SEGMENT_RE;
 var init_workflow_job_tools = __esm({
   "../shared-types/dist/workflow-job-tools.mjs"() {
     "use strict";
@@ -5199,8 +5330,22 @@ var init_workflow_job_tools = __esm({
     __name4(workflowJobPluginDir, "workflowJobPluginDir");
     __name(workflowJobPluginsProblem, "workflowJobPluginsProblem");
     __name4(workflowJobPluginsProblem, "workflowJobPluginsProblem");
+    WORKFLOW_JOB_TARGET_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*\}$/;
+    TARGET_PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
+    __name(workflowJobTargetTemplatePath, "workflowJobTargetTemplatePath");
+    __name4(workflowJobTargetTemplatePath, "workflowJobTargetTemplatePath");
+    __name(isWorkflowJobTargetTemplate, "isWorkflowJobTargetTemplate");
+    __name4(isWorkflowJobTargetTemplate, "isWorkflowJobTargetTemplate");
+    __name(workflowJobLuaApiProblem, "workflowJobLuaApiProblem");
+    __name4(workflowJobLuaApiProblem, "workflowJobLuaApiProblem");
+    __name(workflowJobUsesLuaApi, "workflowJobUsesLuaApi");
+    __name4(workflowJobUsesLuaApi, "workflowJobUsesLuaApi");
     __name(workflowJobTargetProblem, "workflowJobTargetProblem");
     __name4(workflowJobTargetProblem, "workflowJobTargetProblem");
+    __name(readInitDataPath, "readInitDataPath");
+    __name4(readInitDataPath, "readInitDataPath");
+    __name(renderWorkflowJobTarget, "renderWorkflowJobTarget");
+    __name4(renderWorkflowJobTarget, "renderWorkflowJobTarget");
   }
 });
 
@@ -5676,6 +5821,15 @@ function liftRenderedApprover(row, rendered) {
     group: text
   };
 }
+function approverUsersOf(users) {
+  if (Array.isArray(users)) {
+    if (users.length === 0 || users.length > APPROVER_SPEC_MAX_USERS) return null;
+    return users.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128) ? users : null;
+  }
+  if (typeof users !== "string") return null;
+  const lifted = liftRenderedApprover("users", users);
+  return lifted && "users" in lifted ? lifted.users : null;
+}
 function workspaceTemplatePath(template22) {
   const key = template22.trim();
   const expr = WORKSPACE_TEMPLATE_EXPR_RE.exec(key);
@@ -6153,8 +6307,13 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     const plugins = node.plugins;
     const target = node.target;
+    const luaApi = node.luaApi;
+    if (luaApi !== void 0) {
+      const problem = workflowJobLuaApiProblem(luaApi, node.type === "step" ? "code" : node.type, isJobTier(node) ? "job" : node.tier);
+      if (problem) err("lua-api-invalid", problem, `${path3}.luaApi`, id2);
+    }
     if (target !== void 0) {
-      const problem = workflowJobTargetProblem(target, plugins);
+      const problem = workflowJobTargetProblem(target, plugins, luaApi);
       if (problem) err("target-invalid", problem, `${path3}.target`, id2);
     }
     if (plugins !== void 0) {
@@ -8918,6 +9077,8 @@ var init_dist2 = __esm({
     __name5(validateApproverBlock, "validateApproverBlock");
     __name(liftRenderedApprover, "liftRenderedApprover");
     __name5(liftRenderedApprover, "liftRenderedApprover");
+    __name(approverUsersOf, "approverUsersOf");
+    __name5(approverUsersOf, "approverUsersOf");
     WORKSPACE_TEMPLATE_EXPR_RE = /^\$\{\s*(?:initData|input)\.([^}]+?)\s*\}$/;
     __name(workspaceTemplatePath, "workspaceTemplatePath");
     __name5(workspaceTemplatePath, "workspaceTemplatePath");
@@ -9574,7 +9735,9 @@ function stepNodeOf(s) {
     tier,
     workspace: s.workspace,
     jobResources: s.jobResources,
-    jobTools: s.jobTools
+    jobTools: s.jobTools,
+    luaApi: s.luaApi,
+    target: s.target
   });
 }
 function materializeEntry(entry, steps) {
@@ -9919,6 +10082,14 @@ var init_workflow = __esm({
         const tier = s.tier ?? (s.workspace ? "job" : void 0);
         if (s.workspace && s.tier !== void 0 && s.tier !== "job") throw new LuaWorkflowBuildError("workspace-requires-job-tier", `"${s.id}": a step mounting a workspace must be tier:'job'`);
         if (s.jobTools && tier !== "job") throw new LuaWorkflowBuildError("cap-exceeded", `"${s.id}": jobTools require tier:'job' (job-tools-require-job-tier)`);
+        if (s.luaApi !== void 0) {
+          const problem = workflowJobLuaApiProblem(s.luaApi, "code", tier);
+          if (problem) throw new LuaWorkflowBuildError("lua-api-invalid", `"${s.id}": ${problem}`);
+        }
+        if (s.target !== void 0) {
+          const problem = workflowJobTargetProblem(s.target, void 0, s.luaApi);
+          if (problem) throw new LuaWorkflowBuildError("target-invalid", `"${s.id}": ${problem}`);
+        }
         assertTimeout({
           id: s.id,
           timeoutSeconds: s.timeoutSeconds,
@@ -10175,7 +10346,7 @@ var init_workflow = __esm({
         }
         if (opts.target !== void 0) {
           const problem = workflowJobTargetProblem(opts.target, opts.plugins);
-          if (problem) throw new LuaWorkflowBuildError("plugins-invalid", `"${id2}": ${problem}`);
+          if (problem) throw new LuaWorkflowBuildError("target-invalid", `"${id2}": ${problem}`);
         }
         assertTimeout({
           id: id2,
@@ -11994,6 +12165,7 @@ var init_types = __esm({
       PrimitiveKind2["DEVICE_TRIGGER"] = "device-trigger";
       PrimitiveKind2["VOICE"] = "voice";
       PrimitiveKind2["WORKFLOW"] = "workflow";
+      PrimitiveKind2["WEB_APP"] = "web-app";
       return PrimitiveKind2;
     })({});
   }
@@ -13490,7 +13662,8 @@ var init_skill_handler = __esm({
         }
         return {
           name: skill.name,
-          description: skill.description,
+          // Same fallback as createOnServer — the server's version row requires a description.
+          description: skill.description || `A Lua skill for ${skill.name}`,
           // Same gate as createOnServer — server validator rejects empty content.
           ...hasPersonaTextContent(skill.context) ? {
             context: skill.context
@@ -18078,14 +18251,8 @@ var readEnv = /* @__PURE__ */ __name((key) => {
   return void 0;
 }, "readEnv");
 var env = Object.assign((key, _opts) => readEnv(key), {
-  template: /* @__PURE__ */ __name((key) => {
-    if (/(SECRET|TOKEN|KEY|PASSWORD)$/.test(key)) {
-      throw new Error(`env-template-secret-key: \`${key}\` looks like a secret \u2014 read it with env('${key}') inside execute instead`);
-    }
-    return {
-      __envRef: key
-    };
-  }, "template")
+  // The ONE factory (`@lua/shared-types`) — the deployed step runtime's `env.template` is the same function.
+  template: /* @__PURE__ */ __name((key) => envTemplatePlaceholder(key), "template")
 });
 var log = Object.freeze({
   debug: /* @__PURE__ */ __name((message, fields) => emitLocalLog("debug", message, fields), "debug"),
@@ -18609,6 +18776,7 @@ var LuaAgent = class {
   triggers;
   jobs;
   workflows;
+  webApps;
   preProcessors;
   postProcessors;
   mcpServers;
@@ -18653,6 +18821,7 @@ var LuaAgent = class {
     this.triggers = config.triggers || [];
     this.jobs = config.jobs || [];
     this.workflows = config.workflows || [];
+    this.webApps = config.webApps || [];
     this.preProcessors = config.preProcessors || [];
     this.postProcessors = config.postProcessors || [];
     this.mcpServers = config.mcpServers || [];
@@ -18698,6 +18867,9 @@ var LuaAgent = class {
   getWorkflows() {
     return this.workflows;
   }
+  getWebApps() {
+    return this.webApps;
+  }
   getPreProcessors() {
     return this.preProcessors;
   }
@@ -18833,7 +19005,6 @@ __name(defineVoice, "defineVoice");
 
 // src/types/web-app.ts
 init_dist();
-var WEB_APP_NAME_PATTERN = /^[a-z][a-z0-9-]*$/;
 var ROUTE_KEY_PATTERN = new RegExp(`^(${WEB_ROUTE_METHODS.join("|")}) /\\S*$`);
 function route(def) {
   if (typeof def.handler !== "function") {