lua-cli 3.40.0 → 3.42.0-beta.1

package/dist/workflow-builder.d.ts

@@ -59,10 +59,11 @@ export declare interface AgentStepOptions {
     /**
      * EM-WS3: pin a plugin step's Lua-API proxy (and its key) to ANOTHER agent instead of this workflow's own. Legal only
      * beside `plugins`. Refused at run time (`target_not_granted`) unless the platform's plugin-target switch is on AND
-     * this workflow's agent holds a `supervision:act` or `supervision:release` grant on the target.
+     * this workflow's agent holds a `supervision:act` or `supervision:release` grant on the target. EM-WS3 × EM-WS2: the
+     * id may be `template('${initData.<path>}')`, rendered from the run input at dispatch (a per-run target).
      */
     target?: {
-        agentId: string;
+        agentId: string | TemplateBinding;
     };
     /**
      * What this step DOES: `classify` | `extract` | `transform` | `draft` | `research` | `reason` | `code` |
@@ -339,7 +340,7 @@ export declare type LuaWorkflowBuildCode = 'duplicate-step-id' | 'unknown-step-r
 */
 | 'workspace-not-declared' | 'workspace-inherit-without-parent-workspace' | 'workspace-inherit-conflict' | 'harness-requires-job-tier' | 'max-turns-requires-job-tier' | 'max-turns-invalid'
 /** EM-WS3: a step's `plugins` outside the allowlist, repeated, or off the Job tier. */
-| 'plugins-invalid' | 'cap-exceeded' | 'chunk-size-invalid' | 'rate-limit-invalid' | 'backoff-invalid' | 'loop-interval-out-of-range' | 'mapping-placement' | 'container-arm-empty'
+| 'plugins-invalid' | 'target-invalid' | 'lua-api-invalid' | 'cap-exceeded' | 'chunk-size-invalid' | 'rate-limit-invalid' | 'backoff-invalid' | 'loop-interval-out-of-range' | 'mapping-placement' | 'container-arm-empty'
 /**
 * @deprecated LUA-684 — the builder no longer throws it: an `approval` / `waitForSignal` IS a container arm
 * (`parallel(['approve', …])`). Where the engine cannot run one — a `loop` body, the step of a `[map, step]`
@@ -488,6 +489,21 @@ export declare interface LuaWorkflowStep<TIn extends ZodType = ZodType, TOut ext
     workspace?: WorkflowStepWorkspace;
     jobResources?: WorkflowJobResources;
     jobTools?: WorkflowJobToolId[];
+    /**
+     * EM-WS3 × EM-WS2: let this `tier:'job'` step run `lua` (`ctx.exec('lua', [...])`, `` ctx.$`lua push …` ``) against the
+     * Lua API through the platform's staging-only proxy, with a short-lived key for ONE agent: this workflow's agent, or
+     * `target`. It is the same proxy and the same deny rules as a plugin agent step: deploy, promote, publish,
+     * activate, env, chat and runtime calls are refused.
+     */
+    luaApi?: true;
+    /**
+     * EM-WS3: pin the `luaApi` proxy (and its key) to ANOTHER agent. The id may be static or
+     * `template('${initData.<path>}')`, rendered from the run input at dispatch. The same flag and supervision-grant
+     * rules apply as on a plugin agent step.
+     */
+    target?: {
+        agentId: string | TemplateBinding;
+    };
     /** default { maxAttempts: 1 } */
     retry?: RetryPolicy;
     /** default 'none'; 'external' ⇒ park on platform-fault reclaim. */

package/dist/workflow-builder.js

@@ -68,17 +68,125 @@ function workflowJobPluginsProblem(plugins) {
 }
 __name(workflowJobPluginsProblem, "workflowJobPluginsProblem");
 __name2(workflowJobPluginsProblem, "workflowJobPluginsProblem");
-function workflowJobTargetProblem(target, plugins) {
+var WORKFLOW_JOB_TARGET_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*\}$/;
+var TARGET_PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
+function workflowJobTargetTemplatePath(binding) {
+  if (!binding || typeof binding !== "object" || Array.isArray(binding)) return null;
+  const keys = Object.keys(binding);
+  const tpl = binding.template;
+  if (keys.length !== 1 || typeof tpl !== "string" || tpl.length > 512) return null;
+  const m = WORKFLOW_JOB_TARGET_TEMPLATE_RE.exec(tpl.trim());
+  if (!m) return null;
+  const names = m[1].split(".").map((seg) => seg.replace(/\[(?:0|[1-9]\d*)\]/g, ""));
+  if (names.some((n2) => n2 === "__proto__" || n2 === "prototype" || n2 === "constructor")) return null;
+  return m[1].split(".").every((seg) => TARGET_PATH_SEGMENT_RE.test(seg)) ? m[1] : null;
+}
+__name(workflowJobTargetTemplatePath, "workflowJobTargetTemplatePath");
+__name2(workflowJobTargetTemplatePath, "workflowJobTargetTemplatePath");
+function isWorkflowJobTargetTemplate(target) {
+  const agentId = target?.agentId;
+  return !!agentId && typeof agentId === "object";
+}
+__name(isWorkflowJobTargetTemplate, "isWorkflowJobTargetTemplate");
+__name2(isWorkflowJobTargetTemplate, "isWorkflowJobTargetTemplate");
+function workflowJobLuaApiProblem(luaApi, nodeType, tier) {
+  if (luaApi === void 0) return null;
+  if (luaApi !== true) return "`luaApi` must be exactly true";
+  if (nodeType !== "code") return "`luaApi` is legal on code steps only (an agent step uses `plugins`)";
+  if (tier !== "job") return "`luaApi` requires tier:'job'";
+  return null;
+}
+__name(workflowJobLuaApiProblem, "workflowJobLuaApiProblem");
+__name2(workflowJobLuaApiProblem, "workflowJobLuaApiProblem");
+function workflowJobUsesLuaApi(step3) {
+  return Array.isArray(step3.plugins) && step3.plugins.length > 0 || step3.kind === "code" && step3.luaApi === true;
+}
+__name(workflowJobUsesLuaApi, "workflowJobUsesLuaApi");
+__name2(workflowJobUsesLuaApi, "workflowJobUsesLuaApi");
+function workflowJobTargetProblem(target, plugins, luaApi) {
   if (target === void 0) return null;
   if (!target || typeof target !== "object" || Array.isArray(target)) return "target must be { agentId }";
   const keys = Object.keys(target);
   const agentId = target.agentId;
-  if (keys.length !== 1 || typeof agentId !== "string" || !agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
-  if (!Array.isArray(plugins) || plugins.length === 0) return "`target` is legal only beside `plugins`";
+  if (keys.length !== 1 || !("agentId" in target)) return "target must be exactly { agentId }";
+  if (typeof agentId === "string") {
+    if (!agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
+    if (agentId.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
+  } else if (workflowJobTargetTemplatePath(agentId) === null) {
+    return "target.agentId must be a static id or template('${initData.<path>}') \u2014 exactly one initData placeholder, no default";
+  }
+  const hasPlugins = Array.isArray(plugins) && plugins.length > 0;
+  if (!hasPlugins && luaApi !== true) return "`target` is legal only beside `plugins` or `luaApi: true`";
   return null;
 }
 __name(workflowJobTargetProblem, "workflowJobTargetProblem");
 __name2(workflowJobTargetProblem, "workflowJobTargetProblem");
+function readInitDataPath(root, path) {
+  let cur = root;
+  for (const seg of path.split(".")) {
+    const name = seg.replace(/\[(?:0|[1-9]\d*)\]/g, "");
+    const indexes = [
+      ...seg.matchAll(/\[(0|[1-9]\d*)\]/g)
+    ].map((x) => Number(x[1]));
+    if (cur === null || typeof cur !== "object" || !Object.prototype.hasOwnProperty.call(cur, name)) return void 0;
+    cur = cur[name];
+    for (const i of indexes) {
+      if (!Array.isArray(cur) || i >= cur.length) return void 0;
+      cur = cur[i];
+    }
+  }
+  return cur;
+}
+__name(readInitDataPath, "readInitDataPath");
+__name2(readInitDataPath, "readInitDataPath");
+function renderWorkflowJobTarget(target, initData) {
+  const agentId = target?.agentId;
+  if (target === void 0 || target === null || agentId === void 0) return {
+    ok: true,
+    agentId: void 0,
+    templated: false
+  };
+  if (typeof agentId === "string") {
+    if (!agentId.trim() || agentId.includes("${")) return {
+      ok: false,
+      reason: "invalid",
+      message: "target.agentId is invalid"
+    };
+    return {
+      ok: true,
+      agentId,
+      templated: false
+    };
+  }
+  const path = workflowJobTargetTemplatePath(agentId);
+  if (path === null) return {
+    ok: false,
+    reason: "invalid",
+    message: "target.agentId is not a valid initData template"
+  };
+  const value3 = readInitDataPath(initData, path);
+  if (value3 === void 0 || value3 === null) {
+    return {
+      ok: false,
+      reason: "unbound",
+      message: `target_unresolved: the run input has no initData.${path}`
+    };
+  }
+  if (typeof value3 !== "string" || !value3.trim() || value3.length > 256 || /\s/.test(value3.trim())) {
+    return {
+      ok: false,
+      reason: "empty",
+      message: `target_unresolved: initData.${path} is not a non-empty agent id`
+    };
+  }
+  return {
+    ok: true,
+    agentId: value3.trim(),
+    templated: true
+  };
+}
+__name(renderWorkflowJobTarget, "renderWorkflowJobTarget");
+__name2(renderWorkflowJobTarget, "renderWorkflowJobTarget");
 
 // src/types/workflow.ts
 import { zodToJsonSchema } from "zod-to-json-schema";
@@ -244,7 +352,8 @@ var REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST = [
   "sendWebchatMessage",
   "sendTeamsMessage",
   "sendInstagramMessage",
-  "sendMessengerMessage"
+  "sendMessengerMessage",
+  "sendSlackMessage"
 ];
 function isAllowedReviewableExecuteTool(tool) {
   return REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST.includes(tool);
@@ -4529,6 +4638,24 @@ var onboardingTemplateSectionSchema = z4.object({
   label: copy(100),
   body: onboardingRichTextSchema
 }).strict();
+var onboardingInstallScreenSchema = z4.object({
+  title: onboardingHeadingSchema,
+  subtitle: copy(240),
+  ctaLabel: copy(80),
+  ctaHelperText: onboardingRichTextSchema
+}).strict();
+var onboardingResultScreenSchema = z4.object({
+  title: onboardingHeadingSchema,
+  subheader: copy(240),
+  inputPlaceholder: copy(120)
+}).strict();
+var onboardingConnectScreenSchema = z4.object({
+  title: onboardingHeadingSchema,
+  description: onboardingRichTextSchema,
+  ctaLabel: copy(80),
+  neverLine: copy(120),
+  footnote: copy(240)
+}).strict();
 var onboardingTemplateContentSchema = z4.object({
   id,
   templateId: copy(160),
@@ -4541,7 +4668,10 @@ var onboardingTemplateContentSchema = z4.object({
   artwork: onboardingArtworkSchema,
   hireButtonLabel: copy(80),
   changeRoleButtonLabel: copy(80),
-  nextStepText: onboardingRichTextSchema
+  nextStepText: onboardingRichTextSchema,
+  install: onboardingInstallScreenSchema.optional(),
+  result: onboardingResultScreenSchema.optional(),
+  connect: onboardingConnectScreenSchema.optional()
 }).strict();
 var onboardingUnavailableOutcomeSchema = z4.object({
   id,
@@ -4762,6 +4892,8 @@ function isWebRouteInput(value3) {
 }
 __name(isWebRouteInput, "isWebRouteInput");
 __name3(isWebRouteInput, "isWebRouteInput");
+var WEB_APP_ENTRY_HTML_MAX_CHARS = 256 * 1024;
+var WEB_APP_MAX_ASSET_BYTES = 8 * 1024 * 1024;
 var EVIDENCE_SESSION_IDLE_MS = 30 * 6e4;
 var EVIDENCE_MIN_CONVERSATIONS = 20;
 var EVIDENCE_LOW_CONFIDENCE_N = 5;
@@ -5161,6 +5293,17 @@ function sortVerdictReasons(reasons) {
 }
 __name(sortVerdictReasons, "sortVerdictReasons");
 __name3(sortVerdictReasons, "sortVerdictReasons");
+var ENV_TEMPLATE_SECRET_KEY_RE = /(SECRET|TOKEN|KEY|PASSWORD)$/;
+function envTemplatePlaceholder(key) {
+  if (ENV_TEMPLATE_SECRET_KEY_RE.test(key)) {
+    throw new Error(`env-template-secret-key: \`${key}\` looks like a secret \u2014 read it with env('${key}') inside execute instead`);
+  }
+  return {
+    __envRef: key
+  };
+}
+__name(envTemplatePlaceholder, "envTemplatePlaceholder");
+__name3(envTemplatePlaceholder, "envTemplatePlaceholder");
 
 // ../workflow-graph/dist/index.mjs
 import { createHash } from "crypto";
@@ -5829,6 +5972,17 @@ function liftRenderedApprover(row, rendered) {
 }
 __name(liftRenderedApprover, "liftRenderedApprover");
 __name4(liftRenderedApprover, "liftRenderedApprover");
+function approverUsersOf(users) {
+  if (Array.isArray(users)) {
+    if (users.length === 0 || users.length > APPROVER_SPEC_MAX_USERS) return null;
+    return users.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128) ? users : null;
+  }
+  if (typeof users !== "string") return null;
+  const lifted = liftRenderedApprover("users", users);
+  return lifted && "users" in lifted ? lifted.users : null;
+}
+__name(approverUsersOf, "approverUsersOf");
+__name4(approverUsersOf, "approverUsersOf");
 var WORKSPACE_TEMPLATE_EXPR_RE = /^\$\{\s*(?:initData|input)\.([^}]+?)\s*\}$/;
 function workspaceTemplatePath(template22) {
   const key = template22.trim();
@@ -6395,8 +6549,13 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
     }
     const plugins = node.plugins;
     const target = node.target;
+    const luaApi = node.luaApi;
+    if (luaApi !== void 0) {
+      const problem = workflowJobLuaApiProblem(luaApi, node.type === "step" ? "code" : node.type, isJobTier(node) ? "job" : node.tier);
+      if (problem) err("lua-api-invalid", problem, `${path}.luaApi`, id2);
+    }
     if (target !== void 0) {
-      const problem = workflowJobTargetProblem(target, plugins);
+      const problem = workflowJobTargetProblem(target, plugins, luaApi);
       if (problem) err("target-invalid", problem, `${path}.target`, id2);
     }
     if (plugins !== void 0) {
@@ -9729,7 +9888,9 @@ function stepNodeOf(s) {
     tier,
     workspace: s.workspace,
     jobResources: s.jobResources,
-    jobTools: s.jobTools
+    jobTools: s.jobTools,
+    luaApi: s.luaApi,
+    target: s.target
   });
 }
 __name(stepNodeOf, "stepNodeOf");
@@ -9814,6 +9975,14 @@ var WorkflowBuilderImpl = class WorkflowBuilderImpl2 {
     const tier = s.tier ?? (s.workspace ? "job" : void 0);
     if (s.workspace && s.tier !== void 0 && s.tier !== "job") throw new LuaWorkflowBuildError("workspace-requires-job-tier", `"${s.id}": a step mounting a workspace must be tier:'job'`);
     if (s.jobTools && tier !== "job") throw new LuaWorkflowBuildError("cap-exceeded", `"${s.id}": jobTools require tier:'job' (job-tools-require-job-tier)`);
+    if (s.luaApi !== void 0) {
+      const problem = workflowJobLuaApiProblem(s.luaApi, "code", tier);
+      if (problem) throw new LuaWorkflowBuildError("lua-api-invalid", `"${s.id}": ${problem}`);
+    }
+    if (s.target !== void 0) {
+      const problem = workflowJobTargetProblem(s.target, void 0, s.luaApi);
+      if (problem) throw new LuaWorkflowBuildError("target-invalid", `"${s.id}": ${problem}`);
+    }
     assertTimeout({
       id: s.id,
       timeoutSeconds: s.timeoutSeconds,
@@ -10070,7 +10239,7 @@ var WorkflowBuilderImpl = class WorkflowBuilderImpl2 {
     }
     if (opts.target !== void 0) {
       const problem = workflowJobTargetProblem(opts.target, opts.plugins);
-      if (problem) throw new LuaWorkflowBuildError("plugins-invalid", `"${id2}": ${problem}`);
+      if (problem) throw new LuaWorkflowBuildError("target-invalid", `"${id2}": ${problem}`);
     }
     assertTimeout({
       id: id2,