lua-cli 3.42.0-beta.2 → 3.42.0

package/dist/index.js

@@ -1215,16 +1215,22 @@ function decideAgentProvisioning(params) {
   if (input.unattendedWorkflowIds.length) {
     return wf("unattendedWorkflowIds are not allowed on a provisioning grant (the member\u2019s consent does not cover them)");
   }
-  if (input.pendingSecretRequestIds.length) {
+  if (input.pendingSecretRequestIds.length && !params.pendingSecretsEnabled) {
     return {
       code: AGENT_PROVISIONING_ERRORS.PENDING_SECRETS_UNSUPPORTED,
-      message: "Pending secret requests cannot be attached yet"
+      message: "Pending secret requests are not enabled in this environment"
+    };
+  }
+  if (input.pendingSecretRequestIds.length > AGENT_PROVISIONING_LIMITS.pendingSecretsMax) {
+    return {
+      code: AGENT_PROVISIONING_ERRORS.PENDING_SECRETS_UNSUPPORTED,
+      message: `At most ${AGENT_PROVISIONING_LIMITS.pendingSecretsMax} pending secret requests can be attached`
     };
   }
   return null;
 }
 function consentCoversProvisioning(consent, request2) {
-  return consent.orgId === request2.orgId && consent.userId === request2.onBehalfOf && consent.provisionerAgentId === request2.provisionerAgentId && consent.agentName.trim() === request2.input.name && sameSet(consent.supervise ?? [], request2.input.supervise) && sameSet(consent.connections ?? [], request2.input.connections);
+  return consent.orgId === request2.orgId && consent.userId === request2.onBehalfOf && consent.provisionerAgentId === request2.provisionerAgentId && consent.agentName.trim() === request2.input.name && sameSet(consent.supervise ?? [], request2.input.supervise) && sameSet(consent.connections ?? [], request2.input.connections) && sameSet(consent.pendingSecretRequestIds ?? [], request2.input.pendingSecretRequestIds);
 }
 function parseAgentProvisioningApprovalPayload(payload) {
   if (!payload || typeof payload !== "object" || Array.isArray(payload)) return null;
@@ -2567,6 +2573,75 @@ function supervisionAccessBindingViolation(merged) {
   }
   return null;
 }
+function hasFormatCharacters(text) {
+  return FORMAT_CHARS.test(text);
+}
+function normalizedHandoverName(name) {
+  return oneLine(name.normalize("NFKC")).toLowerCase();
+}
+function handoverAgentIdSuffix(agentId) {
+  return agentId.slice(-6);
+}
+function parseConnectionHandoverApprovalPayload(payload) {
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) return null;
+  const top = Object.keys(payload);
+  if (top.length !== 1 || top[0] !== CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY) return null;
+  const p = payload[CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY];
+  if (!p || typeof p !== "object" || Array.isArray(p)) return null;
+  const r = p;
+  if (Object.keys(r).some((k) => !MEMBERS.includes(k))) return null;
+  const L = CONNECTION_HANDOVER_LIMITS;
+  if (!boundedString(r.connectionId, L.idMax) || !boundedString(r.agentId, L.idMax) || !boundedString(r.agentName, L.agentNameMax) || !boundedString(r.supervisorName, L.agentNameMax) || !boundedString(r.integration, L.integrationMax) || r.account !== void 0 && !boundedString(r.account, L.accountMax)) {
+    return null;
+  }
+  return {
+    connectionId: r.connectionId.trim(),
+    agentId: r.agentId.trim(),
+    agentName: r.agentName.trim(),
+    supervisorName: r.supervisorName.trim(),
+    integration: r.integration.trim(),
+    ...r.account !== void 0 ? {
+      account: r.account.trim()
+    } : {}
+  };
+}
+function describeConnectionHandoverApproval(payload) {
+  const parsed = parseConnectionHandoverApprovalPayload(payload);
+  if (!parsed) return null;
+  const agent = `"${oneLine(parsed.agentName)}" (\u2026${handoverAgentIdSuffix(parsed.agentId)})`;
+  const supervisor = `"${oneLine(parsed.supervisorName)}"`;
+  const integration = oneLine(parsed.integration);
+  const account = parsed.account ? ` (${oneLine(parsed.account)})` : "";
+  return [
+    `Give your ${integration} connection${account} to your agent ${agent}.`,
+    "It can then use this account through its tools.",
+    `${supervisor}, the agent asking, supervises it, so it can also reach this account through it: in test runs, previews and the actions its supervision rights allow.`,
+    "You can remove it at any time from the agent's connections."
+  ].join("\n");
+}
+function connectionHandoverApprovalTitle(facts) {
+  return `Give your ${oneLine(facts.integration)} connection to "${oneLine(facts.agentName)}"?`;
+}
+function normalizeConnectionHandoverArgs(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return null;
+  const r = raw;
+  if (Object.keys(r).some((k) => k !== "connectionId" && k !== "approval")) return null;
+  if (!boundedString(r.connectionId, CONNECTION_HANDOVER_LIMITS.idMax)) return null;
+  const approval = normalizeApprovalRef(r.approval);
+  if (!approval) return null;
+  return {
+    connectionId: r.connectionId.trim(),
+    approval
+  };
+}
+function approvalPayloadCoversConnectionHandover(payload, stored) {
+  const p = parseConnectionHandoverApprovalPayload(payload);
+  if (!p) return false;
+  const text = describeConnectionHandoverApproval(payload) ?? "";
+  if (text.length > CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS || scrubSecretText(text) !== text) return false;
+  const storedAccount = stored.account?.trim() || void 0;
+  return p.connectionId === stored.connectionId && p.agentId === stored.agentId && p.agentName === stored.agentName.trim() && p.supervisorName === stored.supervisorName.trim() && p.integration === stored.integration && p.account === storedAccount;
+}
 function agentMetricTagsKey(tags) {
   if (!tags) return "";
   return Object.keys(tags).sort().map((k) => `${encodeURIComponent(k)}=${encodeURIComponent(tags[k])}`).join("&");
@@ -6739,7 +6814,7 @@ function isPaymentRequiredChatErrorEnvelope(data) {
   if (d.type !== "error") return false;
   return d.textDelta === BILLING_REJECTION_TEXT_CREDITS || d.textDelta === BILLING_REJECTION_TEXT_SEAT || d.textDelta === BILLING_REJECTION_TEXT_USER_QUOTA;
 }
-var __defProp2, __name2, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_AGENT_EFFORTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_TASK_CLASSES, WORKFLOW_MODEL_TRAITS, WORKFLOW_MODEL_REASON_MAX_LENGTH, WORKFLOW_MODELS_COMPOSE_MODES, WORKFLOW_MODELS_PIN_MODES, WORKFLOW_MODELS_FALLBACK_MODES, WORKFLOW_MODELS_CONSENT_ACTIONS_MIN, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_FORMS, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_ENABLED_DEFAULT, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_ENVIRONMENTS, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_FORMATS, LOG_DRAIN_SEVERITIES, LOG_DRAIN_SOURCES, LOG_DRAIN_CONTENT_SOURCES, LOG_DRAIN_DEFAULT_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, EventType, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, TYPED_API_KEY, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_JOURNAL_PROTOCOL_VERSION, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_WALL_MS, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSETS, WEB_APP_ASSET_PATH_PATTERN, WEB_APP_ASSET_PATH_MAX_CHARS, WEB_APP_MAX_ROUTES, WEB_APP_MAX_ASSET_BYTES, WEB_APP_CSP_NONCE_PLACEHOLDER, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA;
+var __defProp2, __name2, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_AGENT_EFFORTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_TASK_CLASSES, WORKFLOW_MODEL_TRAITS, WORKFLOW_MODEL_REASON_MAX_LENGTH, WORKFLOW_MODELS_COMPOSE_MODES, WORKFLOW_MODELS_PIN_MODES, WORKFLOW_MODELS_FALLBACK_MODES, WORKFLOW_MODELS_CONSENT_ACTIONS_MIN, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_FORMS, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_ENABLED_DEFAULT, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_ENVIRONMENTS, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_FORMATS, LOG_DRAIN_SEVERITIES, LOG_DRAIN_SOURCES, LOG_DRAIN_CONTENT_SOURCES, LOG_DRAIN_DEFAULT_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, EventType, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, TYPED_API_KEY, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_JOURNAL_PROTOCOL_VERSION, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_WALL_MS, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSETS, WEB_APP_ASSET_PATH_PATTERN, WEB_APP_ASSET_PATH_MAX_CHARS, WEB_APP_MAX_ROUTES, WEB_APP_MAX_ASSET_BYTES, WEB_APP_CSP_NONCE_PLACEHOLDER, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -6943,7 +7018,19 @@ var init_dist = __esm({
       * SV — `Agents.notifyOwner(id, { message })`: post a message (no model turn) to the TARGET OWNER's home thread with
       * the caller. Needs the owner's opt-in recorded on the grant (`ownerNotify`) and `LUA_SUPERVISION_OWNER_NOTIFY_ENABLED`.
       */
-      "owner.notify": "observe"
+      "owner.notify": "observe",
+      /**
+      * SV — `Agents.connections(id).assign(connectionId, { approval })`: mount one of the target OWNER's personal
+      * connections on the target, consented by the owner's own signed-in decision on Lua's approval card
+      * (`supervised-connection-handover.types.ts`). Needs `LUA_SUPERVISED_CONNECTION_HANDOVER_ENABLED`.
+      */
+      "connections.assign": "act",
+      /**
+      * SV — `Agents.secrets(id).attach(requestIds)`: attach U9 requests HELD for this existing agent (`{ pendingFor,
+      * agentId }`) to its env. `act`, on a turn whose platform-picked user is the target's owner, never overwriting a
+      * key (`LUA_SECRET_ATTACH_EXISTING_ENABLED`).
+      */
+      "secrets.attach": "act"
     };
     __name(isSupervisionOp, "isSupervisionOp");
     __name2(isSupervisionOp, "isSupervisionOp");
@@ -7109,6 +7196,18 @@ var init_dist = __esm({
         gate: "observe",
         targeted: true,
         item: "SV"
+      },
+      /** SV — `Agents.connections(id).assign(connectionId, { approval })` (the owner's signed-in approval). */
+      "connections.assign": {
+        gate: "act",
+        targeted: true,
+        item: "SV"
+      },
+      /** SV — `Agents.secrets(id).attach(requestIds)`: held U9 requests onto an existing agent (owner's turn). */
+      "secrets.attach": {
+        gate: "act",
+        targeted: true,
+        item: "SV"
       }
     };
     SUPERVISION_UNTARGETED_OPS = [
@@ -7148,6 +7247,7 @@ var init_dist = __esm({
       nameMax: 80,
       personaMax: 2e4,
       connectionsMax: 20,
+      pendingSecretsMax: 20,
       maxAgentsPerUserCeiling: 50
     };
     AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY = "agentProvisioning";
@@ -7161,8 +7261,13 @@ var init_dist = __esm({
       MODEL_NOT_ALLOWED: "agent_provisioning_model_not_allowed",
       ACTIONS_NOT_ALLOWED: "agent_provisioning_actions_not_allowed",
       WORKFLOW_IDS_INVALID: "agent_provisioning_workflow_ids_invalid",
-      /** Until U9 lands, a non-empty `pendingSecretRequestIds` is refused with this code. */
+      /** A non-empty `pendingSecretRequestIds` while `LUA_SECRET_REQUESTS_ENABLED` is off (or over the limit). */
       PENDING_SECRETS_UNSUPPORTED: "agent_provisioning_pending_secrets_unsupported",
+      /**
+      * A pending secret request is not attachable to this create (unknown, another org / member / provisioner,
+      * not `ok`-tested, already attached or purged). Checked before the agent exists.
+      */
+      PENDING_SECRET_NOT_ATTACHABLE: "agent_provisioning_pending_secret_not_attachable",
       /** The `Agents.create` input is malformed (name, model, persona, list shapes or limits). */
       INVALID_INPUT: "agent_provisioning_invalid_input",
       /** `PUT …/agent-provisioning-policy` body is malformed (`*`, unknown action, out-of-range quota…). */
@@ -7534,7 +7639,13 @@ var init_dist = __esm({
       /** The input's `fields` do not match the provider's catalogue bundle. */
       FIELDS_INVALID: "secret_fields_invalid",
       /** `Secrets.test(key)` / status on a key with no request on record (the provider is unknown). */
-      KEY_NOT_FOUND: "secret_key_not_found"
+      KEY_NOT_FOUND: "secret_key_not_found",
+      /** A held request for an existing agent while `LUA_SECRET_ATTACH_EXISTING_ENABLED` is off. */
+      ATTACH_EXISTING_DISABLED: "secret_attach_existing_disabled",
+      /** `secrets.attach` would set an env key the agent already has: never overwritten (remove or rotate it first). */
+      KEY_EXISTS: "secret_key_exists",
+      /** A request held for an existing agent submitted on the public token page: its owner submits it signed in. */
+      OWNER_SUBMIT_REQUIRED: "secret_submit_requires_owner"
     };
     SECRET_OUTCOME_STATUSES = [
       ...SECRET_TEST_RESULTS,
@@ -7894,6 +8005,41 @@ var init_dist = __esm({
     __name2(sameSupervisionAccessFields, "sameSupervisionAccessFields");
     __name(supervisionAccessBindingViolation, "supervisionAccessBindingViolation");
     __name2(supervisionAccessBindingViolation, "supervisionAccessBindingViolation");
+    CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY = "connectionAssignment";
+    CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS = 1200;
+    CONNECTION_HANDOVER_LIMITS = {
+      idMax: 128,
+      agentNameMax: 200,
+      integrationMax: 60,
+      accountMax: 200
+    };
+    MEMBERS = [
+      "connectionId",
+      "agentId",
+      "agentName",
+      "supervisorName",
+      "integration",
+      "account"
+    ];
+    FORMAT_CHARS = /[\p{Cf}\u200b-\u200d\u202a-\u202e\u2066-\u2069\ufeff]/u;
+    __name(hasFormatCharacters, "hasFormatCharacters");
+    __name2(hasFormatCharacters, "hasFormatCharacters");
+    oneLine = /* @__PURE__ */ __name2((text) => text.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029"\u201c\u201d]/g, " ").replace(/\s+/g, " ").trim(), "oneLine");
+    __name(normalizedHandoverName, "normalizedHandoverName");
+    __name2(normalizedHandoverName, "normalizedHandoverName");
+    __name(handoverAgentIdSuffix, "handoverAgentIdSuffix");
+    __name2(handoverAgentIdSuffix, "handoverAgentIdSuffix");
+    boundedString = /* @__PURE__ */ __name2((v, max) => typeof v === "string" && v.trim().length > 0 && v.length <= max && !hasFormatCharacters(v), "boundedString");
+    __name(parseConnectionHandoverApprovalPayload, "parseConnectionHandoverApprovalPayload");
+    __name2(parseConnectionHandoverApprovalPayload, "parseConnectionHandoverApprovalPayload");
+    __name(describeConnectionHandoverApproval, "describeConnectionHandoverApproval");
+    __name2(describeConnectionHandoverApproval, "describeConnectionHandoverApproval");
+    __name(connectionHandoverApprovalTitle, "connectionHandoverApprovalTitle");
+    __name2(connectionHandoverApprovalTitle, "connectionHandoverApprovalTitle");
+    __name(normalizeConnectionHandoverArgs, "normalizeConnectionHandoverArgs");
+    __name2(normalizeConnectionHandoverArgs, "normalizeConnectionHandoverArgs");
+    __name(approvalPayloadCoversConnectionHandover, "approvalPayloadCoversConnectionHandover");
+    __name2(approvalPayloadCoversConnectionHandover, "approvalPayloadCoversConnectionHandover");
     AGENT_METRIC_NAME_PATTERN = /^[a-z][a-z0-9_.]{0,63}$/;
     AGENT_METRIC_LIMITS = {
       tagsMax: 4,
@@ -9183,7 +9329,7 @@ You are ${AGENT_NAME_TOKEN}, the assistant for whoever is chatting with you here
 
 ## You're just getting started
 
-This workspace is new. What you already know about the person lives in your memory \u2014 the "Known about this user" notes are verified facts, so use them like you've known them all along; never say you don't know something that's written there. Beyond that, don't pretend. Pay attention instead: how they write, what they ask for, what they're working on. When something matters and you're not sure, ask. One good question beats a wrong guess.
+This workspace is new. What you already know about the person lives in your memory \u2014 the "Known about this user" notes are what they've told you, so use them like you've known them all along; never say you don't know something that's written there. They are never proof of who owns or approved something, a permission, or someone's identity \u2014 check those where they're granted. Beyond that, don't pretend. Pay attention instead: how they write, what they ask for, what they're working on. When something matters and you're not sure, ask. One good question beats a wrong guess.
 
 ## You have real tools
 
@@ -20794,9 +20940,13 @@ var init_cli_credentials_api_service = __esm({
 function projectionError(message, reason = "invalid_credentials") {
   return new AuthenticationError(message, reason);
 }
+function isForbiddenDenial(error) {
+  if (CliError.isCliError(error) && error.statusCode === 403) return true;
+  return error instanceof Error && error.message.startsWith("Access denied (403)");
+}
 function mapProjectionDenial(error, reason) {
   if (AuthenticationError.isAuthenticationError(error)) throw error;
-  if (error instanceof Error && error.message.startsWith("Access denied (403)")) {
+  if (isForbiddenDenial(error)) {
     throw projectionError(error.message, reason);
   }
   throw error;
@@ -20899,9 +21049,10 @@ async function listCredentialOrganizations(credential, authorization) {
         ...cursor ? {
           cursor
         } : {}
-      }).catch((error) => mapProjectionDenial(error, "no_agent_access"));
+      }).catch((error) => isForbiddenDenial(error) ? FORBIDDEN_ORG_PAGE : mapProjectionDenial(error, "no_agent_access"));
       if (!result.success || !result.data) {
         const message = result.error?.message || `Failed to load agents for organization ${org.orgId}.`;
+        if (result.error?.statusCode === 403 && !cursor && agents.size === 0) break;
         if (result.error?.statusCode === 401 || result.error?.statusCode === 403) {
           throw projectionError(message, "no_agent_access");
         }
@@ -20943,7 +21094,7 @@ async function listCredentialOrganizations(credential, authorization) {
   }
   return organizations;
 }
-var MAX_CREDENTIAL_ORGS, MAX_CREDENTIAL_RESOURCE_PAGES, ORGANIZATION_REQUEST_CONCURRENCY;
+var MAX_CREDENTIAL_ORGS, MAX_CREDENTIAL_RESOURCE_PAGES, ORGANIZATION_REQUEST_CONCURRENCY, FORBIDDEN_ORG_PAGE;
 var init_credential_operational_context = __esm({
   "src/services/credential-operational-context.ts"() {
     "use strict";
@@ -20957,7 +21108,15 @@ var init_credential_operational_context = __esm({
     MAX_CREDENTIAL_RESOURCE_PAGES = 500;
     ORGANIZATION_REQUEST_CONCURRENCY = 10;
     __name(projectionError, "projectionError");
+    __name(isForbiddenDenial, "isForbiddenDenial");
     __name(mapProjectionDenial, "mapProjectionDenial");
+    FORBIDDEN_ORG_PAGE = {
+      success: false,
+      error: {
+        statusCode: 403,
+        message: "Access denied (403)"
+      }
+    };
     __name(throwProjectionFailure, "throwProjectionFailure");
     __name(identityOf, "identityOf");
     __name(getUserIdentity, "getUserIdentity");
@@ -21733,11 +21892,18 @@ const __lua_primitive__ = {
 
 export default {
   __lua_primitive__,
-  primitive: __primitive__,
+  primitive: ${this.wrapPrimitiveExpression("__primitive__")},
 };
 `;
       }
       /**
+      * Hook to wrap the `primitive` expression in a generated entry point.
+      * Default: identity, so entry points stay byte-identical.
+      */
+      wrapPrimitiveExpression(expr) {
+        return expr;
+      }
+      /**
       * Override to add extra fields to __lua_primitive__ object.
       * Return a string like: `context: "some value",\n  tools: ["tool1"]`
       */
@@ -22424,7 +22590,7 @@ var init_job_plugin = __esm({
 
 // src/compiler/plugins/webhook.plugin.ts
 import { Node as Node6 } from "ts-morph";
-var WebhookPlugin;
+var WEBHOOK_VALIDATION_WRAP_SOURCE, WebhookPlugin;
 var init_webhook_plugin = __esm({
   "src/compiler/plugins/webhook.plugin.ts"() {
     "use strict";
@@ -22432,6 +22598,60 @@ var init_webhook_plugin = __esm({
     init_ast_helpers();
     init_class_hierarchy();
     init_schema_converter();
+    WEBHOOK_VALIDATION_WRAP_SOURCE = `(function (p) {
+  if (!p || typeof p.execute !== 'function') return p;
+  var parts = [
+    ['query', p.querySchema],
+    ['headers', p.headerSchema],
+    ['body', p.bodySchema],
+  ].filter(function (e) { return e[1] && typeof e[1].safeParse === 'function'; });
+  if (parts.length === 0) return p;
+  var enforce = p.enforceSchemas === true;
+  return Object.assign({}, p, {
+    execute: async function (event) {
+      var ev = event || {};
+      var failed = [];
+      for (var i = 0; i < parts.length; i++) {
+        var part = parts[i][0];
+        var schema = parts[i][1];
+        var input = part === 'body' ? ev.body : (ev[part] == null ? {} : ev[part]);
+        var r;
+        if (enforce) {
+          r = typeof schema.safeParseAsync === 'function' ? await schema.safeParseAsync(input) : schema.safeParse(input);
+        } else {
+          try {
+            r = typeof schema.safeParseAsync === 'function' ? await schema.safeParseAsync(input) : schema.safeParse(input);
+          } catch (_e) {
+            continue;
+          }
+        }
+        if (!r || r.success) continue;
+        var issues = r.error && Array.isArray(r.error.issues) ? r.error.issues : [];
+        if (enforce) {
+          var first = issues[0];
+          var detail = first ? ': ' + (first.path && first.path.length ? first.path.join('.') + ': ' : '') + first.message : '';
+          var err = new Error('Webhook request validation failed: invalid ' + part + detail);
+          err.code = 'LUA_WEBHOOK_VALIDATION';
+          err.part = part;
+          err.issues = issues;
+          throw err;
+        }
+        failed.push({ part: part, issues: issues });
+      }
+      if (failed.length > 0 && typeof console !== 'undefined' && console.warn) {
+        try {
+          var total = 0;
+          for (var j = 0; j < failed.length; j++) total += failed[j].issues.length;
+          var f0 = failed[0];
+          var i0 = f0.issues[0];
+          var firstDesc = f0.part + ':' + (i0 && i0.path ? i0.path.join('.') : '') + ':' + (i0 && i0.code ? i0.code : 'unknown');
+          console.warn('[lua:webhook-schema] would-reject webhook=' + p.name + ' parts=' + failed.map(function (x) { return x.part; }).join(',') + ' issues=' + total + ' first=' + firstDesc + ' (request still processed; set enforceSchemas: true on the webhook to reject with HTTP 400)');
+        } catch (_e) {}
+      }
+      return p.execute.call(p, event);
+    },
+  });
+})`;
     WebhookPlugin = class extends BasePlugin {
       static {
         __name(this, "WebhookPlugin");
@@ -22485,15 +22705,20 @@ var init_webhook_plugin = __esm({
       * win at runtime.
       */
       getClassDefinitionPrimitiveShape(metadata) {
-        return `{
+        return `${WEBHOOK_VALIDATION_WRAP_SOURCE}({
     kind: 'webhook',
     name: __lua_instance__.name ?? ${JSON.stringify(metadata.name)},
     description: __lua_instance__.description ?? ${JSON.stringify(metadata.description)},
     querySchema: __lua_instance__.querySchema,
     headerSchema: __lua_instance__.headerSchema,
     bodySchema: __lua_instance__.bodySchema,
+    enforceSchemas: __lua_instance__.enforceSchemas,
     execute: typeof __lua_instance__.execute === 'function' ? __lua_instance__.execute.bind(__lua_instance__) : undefined,
-  }`;
+  })`;
+      }
+      /** Enforce declared schemas before `execute` (function / config-literal shapes). */
+      wrapPrimitiveExpression(expr) {
+        return `${WEBHOOK_VALIDATION_WRAP_SOURCE}(${expr})`;
       }
       /**
       * Extract metadata from webhook config object.
@@ -35311,7 +35536,7 @@ var init_agents_api_service = __esm({
         if (op === "lease.acquire" || op === "lease.release") {
           refuse("supervision_offline_unsupported", `${op} is not available offline; run it on the platform`);
         }
-        if (op === "lifecycle.archive" || op === "lifecycle.delete" || op === "config.set") {
+        if (op === "lifecycle.archive" || op === "lifecycle.delete" || op === "config.set" || op === "secrets.attach") {
           refuse("supervision_offline_unsupported", `${op} is not available offline; run it on the platform`);
         }
         if (op === "agents.directory" || op === "access.request" || op === "access.requests" || op === "access.cancel") {
@@ -35462,6 +35687,7 @@ var init_agents_api_service = __esm({
           case "evals.run":
           case "evals.cancel":
           case "owner.notify":
+          case "connections.assign":
             return refuse("supervision_offline_unsupported", `${op} is not available offline; run it on the platform`);
           default:
             return refuse("supervision_unknown_op", `Unknown supervision operation ${String(op)}`);
@@ -43955,7 +44181,34 @@ function buildSupervisionAgentsApi(call2) {
       ...input?.idempotencyKey !== void 0 ? {
         idempotencyKey: input.idempotencyKey
       } : {}
-    }), "notifyOwner")
+    }), "notifyOwner"),
+    // SV — the target OWNER hands it one of their personal connections (their signed-in approval, `act`).
+    /**
+    * Mount one of the OWNER's own personal connections on `agentId`. The owner consents on Lua's approval card in
+    * their own signed-in session: suspend YOUR run (started by the owner) on
+    * `.approval(step, { approver: 'creator', title })` with the payload exactly
+    * `{ connectionAssignment: { connectionId, agentId, agentName, supervisorName, integration, account } }` and `title`
+    * exactly `Give your <integration> connection to "<agentName>"?`, then call this from a code step of THAT run with
+    * `{ approval: { runId, stepId } }`. Needs an `act` grant on the agent.
+    */
+    connections: /* @__PURE__ */ __name8((agentId) => ({
+      assign: /* @__PURE__ */ __name8((connectionId, opts) => call2("connections.assign", agentId, {
+        connectionId,
+        approval: opts?.approval && typeof opts.approval === "object" ? {
+          ...opts.approval
+        } : opts?.approval
+      }), "assign")
+    }), "connections"),
+    // SV — held U9 secret requests (`Secrets.request({ target: { pendingFor, agentId } })`) onto an EXISTING agent.
+    /**
+    * Attach requests held for `agentId` to its env (`act`, on the agent owner's own turn; never overwrites a key).
+    * Answers the env keys set, never a value.
+    */
+    secrets: /* @__PURE__ */ __name8((agentId) => ({
+      attach: /* @__PURE__ */ __name8((requestIds) => call2("secrets.attach", agentId, {
+        requestIds: copyList(requestIds)
+      }), "attach")
+    }), "secrets")
   };
 }
 __name(buildSupervisionAgentsApi, "buildSupervisionAgentsApi");
@@ -47385,7 +47638,7 @@ function validateAgentNodeModelMembers(node, path31) {
 }
 __name(validateAgentNodeModelMembers, "validateAgentNodeModelMembers");
 var WORKFLOW_MODEL_WALK_MAX_DEPTH = 64;
-var MEMBERS = [
+var MEMBERS2 = [
   "model",
   "taskClass",
   "requires",
@@ -47404,7 +47657,7 @@ function validateGraphModelMembers(graph) {
       return;
     }
     const node = value3;
-    if (MEMBERS.some((m) => node[m] !== void 0)) {
+    if (MEMBERS2.some((m) => node[m] !== void 0)) {
       const label2 = typeof node.id === "string" && node.id ? node.id : path31;
       issues.push(...validateAgentNodeModelMembers(node, label2));
     }