lua-cli 3.44.0 → 3.46.0

package/dist/api-exports.js

@@ -19,6 +19,7 @@ import { z } from "zod";
 import { z as z2 } from "zod";
 import { z as z3 } from "zod";
 import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 function isChannelConversationChannel(channel) {
   return !!channel && CHANNEL_CONVERSATION_CHANNELS.includes(channel);
 }
@@ -156,12 +157,112 @@ function isUnsafeConnectionPathPart(pathPart) {
 function isPlatformInvocationCaller(v) {
   return typeof v === "string" && PLATFORM_INVOCATION_CALLERS.includes(v);
 }
-function supervisionSubjectId(agentId) {
-  return `agent:${agentId}`;
+function supervisionSubjectId(agentId2) {
+  return `agent:${agentId2}`;
 }
 function isSupervisionOp(op) {
   return typeof op === "string" && Object.prototype.hasOwnProperty.call(SUPERVISION_OPS, op);
 }
+function isSupervisionWatchdogOp(op) {
+  return typeof op === "string" && Object.prototype.hasOwnProperty.call(SUPERVISION_WATCHDOG_OPS, op);
+}
+function isSupervisionRollbackRefusalReason(v) {
+  return typeof v === "string" && Object.prototype.hasOwnProperty.call(SUPERVISION_ROLLBACK_REFUSAL_CODES, v);
+}
+function supervisionRollbackTargetRefusal(target, expectActive, window) {
+  if (target.status !== "superseded" || !target.promotedAt || target.compensationFailed === true) {
+    return {
+      reason: "never_active",
+      message: `Version ${target.version} was never fully the active version (status ${target.status ?? "unknown"})`
+    };
+  }
+  if (typeof expectActive !== "number" || !(target.version < expectActive)) {
+    return {
+      reason: "not_older",
+      message: `Version ${target.version} is not older than the active version ${expectActive ?? "none"}`
+    };
+  }
+  if (window) {
+    if (target.supersededVia === "rollback" || target.promotedVia === "rollback") {
+      return {
+        reason: "after_rollback",
+        message: `Version ${target.version} was retired or restored by a rollback`
+      };
+    }
+    if (target.supersededVia !== "promote" && target.supersededVia !== "scoped") {
+      return {
+        reason: "not_in_lineage",
+        message: `Version ${target.version} has no forward-promote history`
+      };
+    }
+    const ended = target.supersededAt ? new Date(target.supersededAt).getTime() : NaN;
+    if (!Number.isFinite(ended) || ended < window.now - window.windowMs) {
+      return {
+        reason: "too_old",
+        message: `Version ${target.version} was last active outside the ${Math.round(window.windowMs / 864e5)}-day window`
+      };
+    }
+  }
+  return null;
+}
+function supervisionRollbackRefusal(input) {
+  const { target, active, lineage, expectActive, windowMs, now } = input;
+  const pre = supervisionRollbackTargetRefusal(target, expectActive);
+  if (pre) return pre;
+  if (!active || active.version !== expectActive) {
+    return {
+      reason: "not_older",
+      message: `Version ${expectActive ?? "none"} is not the active version`
+    };
+  }
+  if (active.promotedVia === "rollback") {
+    return {
+      reason: "after_rollback",
+      message: `The active version ${active.version} was restored by a rollback; a watchdog does not roll back twice in a row`
+    };
+  }
+  let previous = active;
+  for (const step3 of lineage.slice(0, SUPERVISION_ROLLBACK_LINEAGE_MAX)) {
+    const label = `version ${step3.version}`;
+    if (step3.supersededVia === "rollback" || step3.promotedVia === "rollback") {
+      return {
+        reason: "after_rollback",
+        message: `The rollback lineage crosses ${label}, which a rollback retired or restored`
+      };
+    }
+    if (step3.supersededVia !== "promote" && step3.supersededVia !== "scoped") {
+      return {
+        reason: "not_in_lineage",
+        message: `The rollback lineage stops at ${label} (no forward-promote history)`
+      };
+    }
+    if (step3.compensationFailed === true || step3.status !== "superseded" || !step3.promotedAt) {
+      return {
+        reason: "not_in_lineage",
+        message: `The rollback lineage stops at ${label} (not fully served)`
+      };
+    }
+    if (!(step3.version < previous.version)) {
+      return {
+        reason: "after_backward_promote",
+        message: `Version ${previous.version} was promoted BACK over ${label}; a watchdog never reaches behind that`
+      };
+    }
+    const ended = step3.supersededAt ? new Date(step3.supersededAt).getTime() : NaN;
+    if (!Number.isFinite(ended) || ended < now - windowMs) {
+      return {
+        reason: "too_old",
+        message: `The rollback lineage reaches ${label}, last active outside the ${Math.round(windowMs / 864e5)}-day window`
+      };
+    }
+    if (step3.version === target.version && (!target.id || !step3.id || step3.id === target.id)) return null;
+    previous = step3;
+  }
+  return {
+    reason: "not_in_lineage",
+    message: `Version ${target.version} is not in the active version's recent forward-promote lineage`
+  };
+}
 function isUntargetedSupervisionOp(op) {
   return typeof op === "string" && SUPERVISION_UNTARGETED_OPS.includes(op);
 }
@@ -751,9 +852,9 @@ function isAgentConnectionBindingLoosening(previous, next) {
 function isAgentConnectionMountMode(value3) {
   return typeof value3 === "string" && AGENT_CONNECTION_MOUNT_MODES.includes(value3);
 }
-function agentConnectionBindingFor(bindings, agentId) {
-  if (!Array.isArray(bindings) || !agentId) return void 0;
-  return bindings.find((entry) => !!entry && typeof entry === "object" && entry.agentId === agentId);
+function agentConnectionBindingFor(bindings, agentId2) {
+  if (!Array.isArray(bindings) || !agentId2) return void 0;
+  return bindings.find((entry) => !!entry && typeof entry === "object" && entry.agentId === agentId2);
 }
 function agentConnectionBindingRefusal(binding, operation) {
   if (binding === void 0 || binding === null) return null;
@@ -1036,8 +1137,8 @@ function describeConnectionRequest(input) {
       return `Something went wrong connecting ${what}. Ask ${who} to try again with a new request.`;
   }
 }
-function operationDailyCapKey(agentId, connectionId, currency, utcDay) {
-  return `opcap:${agentId}:${connectionId}:${currency.toUpperCase()}:${utcDay}`;
+function operationDailyCapKey(agentId2, connectionId, currency, utcDay) {
+  return `opcap:${agentId2}:${connectionId}:${currency.toUpperCase()}:${utcDay}`;
 }
 function isPlainObject(value3) {
   return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
@@ -1063,7 +1164,7 @@ function parseCapAmount(value3) {
   if (typeof value3 !== "number" || !Number.isFinite(value3) || value3 < 0) return null;
   return value3;
 }
-function parseAgentConnectionOperationLimits(agentId, value3) {
+function parseAgentConnectionOperationLimits(agentId2, value3) {
   if (!isPlainObject(value3)) return {
     ok: false,
     error: "limits must be an object"
@@ -1076,7 +1177,7 @@ function parseAgentConnectionOperationLimits(agentId, value3) {
     };
   }
   const limits = {
-    agentId
+    agentId: agentId2
   };
   if (value3.caps !== void 0 && value3.caps !== null) {
     const caps = value3.caps;
@@ -1162,17 +1263,17 @@ function parseAgentConnectionOperationLimits(agentId, value3) {
     limits
   };
 }
-function findAgentConnectionOperationLimits(stored, agentId) {
-  if (!agentId || stored === void 0 || stored === null) return void 0;
+function findAgentConnectionOperationLimits(stored, agentId2) {
+  if (!agentId2 || stored === void 0 || stored === null) return void 0;
   if (!Array.isArray(stored)) return {
-    agentId,
+    agentId: agentId2,
     unreadable: true
   };
-  const entry = stored.find((row) => isPlainObject(row) && row.agentId === agentId);
+  const entry = stored.find((row) => isPlainObject(row) && row.agentId === agentId2);
   if (!entry) return void 0;
-  const parsed = parseAgentConnectionOperationLimits(agentId, entry);
+  const parsed = parseAgentConnectionOperationLimits(agentId2, entry);
   return parsed.ok ? parsed.limits : {
-    agentId,
+    agentId: agentId2,
     unreadable: true
   };
 }
@@ -1684,9 +1785,9 @@ function isEvalReservedDoubleId(double) {
 function evalCaseThreadId(runId, caseId) {
   return `evalrun:${runId}:${caseId}`;
 }
-function evalMonthlyCapKey(agentId, at = /* @__PURE__ */ new Date()) {
+function evalMonthlyCapKey(agentId2, at = /* @__PURE__ */ new Date()) {
   const yyyymm = `${at.getUTCFullYear()}${String(at.getUTCMonth() + 1).padStart(2, "0")}`;
-  return `evalcap:${agentId}:${yyyymm}`;
+  return `evalcap:${agentId2}:${yyyymm}`;
 }
 function isUnprovenUserSite(site) {
   return typeof site === "string" && (site === "job" || site === "workflow" || site.startsWith("workflow-"));
@@ -1755,8 +1856,8 @@ function hasFormatCharacters(text) {
 function normalizedHandoverName(name) {
   return oneLine(name.normalize("NFKC")).toLowerCase();
 }
-function handoverAgentIdSuffix(agentId) {
-  return agentId.slice(-6);
+function handoverAgentIdSuffix(agentId2) {
+  return agentId2.slice(-6);
 }
 function parseConnectionHandoverApprovalPayload(payload) {
   if (!payload || typeof payload !== "object" || Array.isArray(payload)) return null;
@@ -2048,11 +2149,11 @@ function parseThreadFollowUpInput(input) {
     } : {}
   };
 }
-function threadFollowUpRateKeys(agentId, threadId, nowMs) {
+function threadFollowUpRateKeys(agentId2, threadId, nowMs) {
   const hour = Math.floor(nowMs / 36e5);
   return {
-    perThread: `thread-followup:${agentId}:${threadId}:${hour}`,
-    perAgent: `thread-followup:${agentId}:${hour}`
+    perThread: `thread-followup:${agentId2}:${threadId}:${hour}`,
+    perAgent: `thread-followup:${agentId2}:${hour}`
   };
 }
 function progressFractionToPercent(fraction) {
@@ -2462,6 +2563,19 @@ function resolveSlackReactionName(value3) {
   }
   return slackEmojiName(trimmed);
 }
+function threadScopingSetting(type) {
+  const noun = THREAD_SCOPING_NOUN[type];
+  return {
+    key: `${type}.threadScoping`,
+    group: "conversations",
+    label: `One conversation per ${noun}`,
+    help: `Each ${noun} is its own conversation with its own history.`,
+    effect: "Off: every message from the same person shares one conversation.",
+    type: "boolean",
+    default: false,
+    confirm: "Changing this starts fresh conversations for ones that are already open. Earlier history isn't carried over."
+  };
+}
 function takeoverSettings(type) {
   const variants = type === "email" ? [
     "ses"
@@ -2817,13 +2931,13 @@ function channelSettingsGroups(channel, config) {
   const groups = [];
   for (const def of channelSettingDefinitions(channel, config)) {
     const { tunableDefault: _tunable, ...shown } = def;
-    const unavailable3 = channelSettingUnavailable(channel, def);
+    const unavailable2 = channelSettingUnavailable(channel, def);
     const view = {
       ...shown,
       ...effectiveChannelSetting(channel, def),
       resettable: channelSettingResettable(def),
-      ...unavailable3 && {
-        unavailable: unavailable3
+      ...unavailable2 && {
+        unavailable: unavailable2
       }
     };
     const group = groups.find((candidate) => candidate.key === def.group);
@@ -4435,6 +4549,9 @@ function workflowOccurrenceId(lineageId, stepId) {
 function workflowOrgSlotKey(orgId, kind) {
   return `wf:org:${orgId}:${kind}`;
 }
+function isWorkflowAgentAppConnectionId(id2) {
+  return typeof id2 === "string" && id2.startsWith(WORKFLOW_AGENT_APP_CONNECTION_PREFIX) && /^[A-Za-z0-9_-]{1,128}$/.test(id2);
+}
 function workflowJobModelSourceLabel(source) {
   return WORKFLOW_JOB_MODEL_SOURCE_LABELS[source];
 }
@@ -4615,8 +4732,8 @@ function scheduleHealthView(health, state3) {
     } : {}
   };
 }
-function scheduleHealthSourceId(agentId, jobId) {
-  return `schedule-health:${agentId}:${jobId}`;
+function scheduleHealthSourceId(agentId2, jobId) {
+  return `schedule-health:${agentId2}:${jobId}`;
 }
 function workflowGoalJudgeKind(judge) {
   return judge && typeof judge === "object" && judge.predicate !== void 0 ? "predicate" : "agent";
@@ -5285,7 +5402,7 @@ function evidenceDays(from, to) {
   return out;
 }
 function summarizeEvidence(input) {
-  const { agentId, from, to } = input;
+  const { agentId: agentId2, from, to } = input;
   const windowDays = evidenceDays(from, to);
   const readable = /* @__PURE__ */ __name3((s) => s === "ok" || s === "empty", "readable");
   const covered = /* @__PURE__ */ __name3((d) => readable(d.sources?.messages) && readable(d.sources?.analyses), "covered");
@@ -5359,7 +5476,7 @@ function summarizeEvidence(input) {
   const short = wordRows.reduce((a, h) => a + h.short, 0);
   const long = wordRows.reduce((a, h) => a + h.long, 0);
   return {
-    agentId,
+    agentId: agentId2,
     window: {
       from,
       to,
@@ -5917,7 +6034,7 @@ function classifyConnectionOperation(op) {
   return NOT_SEND;
 }
 function connectionSendPolicyIsActive(policy) {
-  return Boolean(policy) && (policy.allowSend === false || Array.isArray(policy.recipientAllowlist));
+  return !!policy && (policy.allowSend === false || Array.isArray(policy.recipientAllowlist));
 }
 function allowlistAdmits(entries, email) {
   const domain = email.slice(email.lastIndexOf("@") + 1);
@@ -5947,8 +6064,9 @@ function evaluateConnectionSendPolicy(policy, op) {
       classification
     };
   }
-  if (Array.isArray(policy.recipientAllowlist)) {
-    const denied = classification.recipients.filter((email) => !allowlistAdmits(policy.recipientAllowlist, email));
+  const allowlist = policy.recipientAllowlist;
+  if (Array.isArray(allowlist)) {
+    const denied = classification.recipients.filter((email) => !allowlistAdmits(allowlist, email));
     if (denied.length > 0 || classification.recipientsUnknown) {
       return {
         allowed: false,
@@ -5990,7 +6108,111 @@ function isPaymentRequiredChatErrorEnvelope(data) {
   if (d.type !== "error") return false;
   return d.textDelta === BILLING_REJECTION_TEXT_CREDITS || d.textDelta === BILLING_REJECTION_TEXT_SEAT || d.textDelta === BILLING_REJECTION_TEXT_USER_QUOTA;
 }
-var __defProp3, __name3, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, CHANNEL_SEND_CHANNELS, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA;
+function isCustomMcpConnectionId(id2) {
+  return typeof id2 === "string" && id2.startsWith(CUSTOM_MCP_CONNECTION_ID_PREFIX);
+}
+function isConnectionBackedMcpSource(source) {
+  return typeof source === "string" && CONNECTION_BACKED_MCP_SOURCES.includes(source);
+}
+function newCustomMcpReferenceId() {
+  const bytes = globalThis.crypto.getRandomValues(new Uint8Array(6));
+  return `mcpx_${Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+function customMcpWorkflowKey(displayName) {
+  const slug = displayName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  if (!slug) return `s-${fnv1a32(displayName.trim())}`;
+  return (/^[a-z]/.test(slug) ? slug : `s-${slug}`).slice(0, WORKFLOW_KEY_MAX_LENGTH);
+}
+function fnv1a32(value3) {
+  let hash = 2166136261;
+  for (const char of value3) {
+    hash ^= char.codePointAt(0) ?? 0;
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return hash.toString(16).padStart(8, "0");
+}
+function addCaseDuplicateIssues(names, ctx, path3) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const name of names) {
+    const lower2 = name.toLowerCase();
+    if (seen.has(lower2)) {
+      ctx.addIssue({
+        code: z5.ZodIssueCode.custom,
+        path: path3,
+        message: `Header "${name}" is listed twice`
+      });
+    }
+    seen.add(lower2);
+  }
+}
+function toCustomMcpToolSnapshot(tools) {
+  const snapshot = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    if (snapshot.length >= CUSTOM_MCP_MAX_TOOLS) break;
+    const name = tool.name;
+    if (typeof name !== "string" || !name || name.length > CUSTOM_MCP_TOOL_NAME_MAX_LENGTH || seen.has(name)) continue;
+    seen.add(name);
+    snapshot.push({
+      name,
+      ...typeof tool.title === "string" && tool.title ? {
+        title: tool.title.slice(0, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH)
+      } : {},
+      ...typeof tool.description === "string" && tool.description ? {
+        description: tool.description.slice(0, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH)
+      } : {}
+    });
+  }
+  return snapshot;
+}
+function customMcpRuntimeToolFilter(selection) {
+  return selection.allowAll ? void 0 : {
+    allow: [
+      ...selection.enabled
+    ]
+  };
+}
+function createBody(extra) {
+  return z5.discriminatedUnion("authKind", [
+    z5.object({
+      authKind: z5.literal("none"),
+      ...createFields,
+      ...extra
+    }).strict(),
+    z5.object({
+      authKind: z5.literal("headers"),
+      headers: customMcpHeadersSchema.refine((headers) => Object.keys(headers).length > 0, "Add a header"),
+      ...createFields,
+      ...extra
+    }).strict()
+  ]);
+}
+function startBody(extra) {
+  return z5.union([
+    z5.object({
+      url: customMcpUrlInputSchema,
+      displayName: customMcpDisplayNameSchema,
+      ...startFields,
+      ...extra
+    }).strict(),
+    /** Sign in again. `url` only after `REAUTH_REQUIRED`; otherwise the stored URL is used. */
+    z5.object({
+      targetConnectionId: customMcpConnectionIdSchema,
+      url: customMcpUrlInputSchema.optional(),
+      ...startFields
+    }).strict()
+  ]);
+}
+function maskMcpServerHeaders(server) {
+  const { headers, ...rest } = server;
+  const headerNames = Object.keys(headers ?? {});
+  return {
+    ...rest,
+    headerNames,
+    headersSet: headerNames.length > 0
+  };
+}
+var __defProp3, __name3, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_WATCHDOG_OPS, SUPERVISION_WATCHDOG_ERRORS, SUPERVISION_ROLLBACK_REFUSAL_CODES, SUPERVISION_ROLLBACK_LINEAGE_MAX, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, CHANNEL_SEND_CHANNELS, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, THREAD_SCOPING_NOUN, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_AGENT_APP_CONNECTION_PREFIX, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SIGNAL_NAME_RE, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA, CUSTOM_MCP_CONNECTION_ID_PREFIX, CUSTOM_MCP_SOURCE, CUSTOM_MCP_TRANSPORT, CUSTOM_MCP_CONNECTION_ID_PATTERN, customMcpConnectionIdSchema, CONNECTION_BACKED_MCP_SOURCES, CUSTOM_MCP_REFERENCE_ID_PATTERN, customMcpReferenceIdSchema, CUSTOM_MCP_AUTH_KINDS, customMcpAuthKindSchema, CUSTOM_MCP_OAUTH_REGISTRATIONS, customMcpOAuthRegistrationSchema, CUSTOM_MCP_HEALTH_STATES, customMcpHealthStateSchema, CUSTOM_MCP_FAILURE_STEPS, customMcpFailureStepSchema, CUSTOM_MCP_CONNECT_STEPS, customMcpConnectStepSchema, customMcpFailureCodeSchema, WORKFLOW_KEY_MAX_LENGTH, CUSTOM_MCP_URL_MAX_LENGTH, CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH, CUSTOM_MCP_MAX_HEADERS, CUSTOM_MCP_HEADER_NAME_MAX_LENGTH, CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH, CUSTOM_MCP_MAX_TOOLS, CUSTOM_MCP_TOOL_NAME_MAX_LENGTH, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH, CUSTOM_MCP_MIN_TIMEOUT_MS, CUSTOM_MCP_MAX_TIMEOUT_MS, CUSTOM_MCP_OAUTH_PENDING_TTL_MS, isoDateTime, agentId, nonNegativeInt, customMcpUrlInputSchema, customMcpDisplayNameSchema, customMcpTimeoutSchema, CUSTOM_MCP_RESERVED_HEADER_NAMES, HEADER_NAME, HEADER_VALUE_FORBIDDEN, customMcpHeaderNameSchema, headerValue, customMcpHeadersSchema, customMcpHeadersPatchSchema, customMcpToolNameSchema, customMcpToolSchema, customMcpServerInfoSchema, customMcpToolSelectionSchema, customMcpToolsResponseSchema, customMcpFailureSchema, customMcpHealthSchema, customMcpErrorBodySchema, customMcpConnectionBlockSchema, customMcpConnectionViewSchema, customMcpConnectionResponseSchema, customMcpProbeBodySchema, customMcpOAuthDiscoverySchema, customMcpProbeResponseSchema, createFields, mountAgentField, customMcpCreateAgentBodySchema, customMcpCreateUserBodySchema, customMcpOAuthClientSchema, startFields, customMcpOAuthStartAgentBodySchema, customMcpOAuthStartUserBodySchema, customMcpOAuthStartResponseSchema, nonce, customMcpOAuthSuccessRedirectQuerySchema, CUSTOM_MCP_OAUTH_CALLBACK_ERRORS, customMcpOAuthFailureRedirectQuerySchema, customMcpOAuthFinalizeBodySchema, customMcpCimdDocumentSchema, customMcpPatchBodySchema, customMcpCredentialRequestSchema, customMcpCredentialAuthSchema, customMcpCredentialResponseSchema, CUSTOM_MCP_CREDENTIAL_ERRORS, customMcpCredentialErrorBodySchema, customMcpHealthReportSchema, customMcpProbeRequestSchema, customMcpProbeResultSchema, customMcpOriginUrlSchema, customMcpServerProjectionSchema, customMcpMountUpsertBodySchema;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -6206,7 +6428,27 @@ var init_dist = __esm({
       * agentId }`) to its env. `act`, on a turn whose platform-picked user is the target's owner, never overwriting a
       * key (`LUA_SECRET_ATTACH_EXISTING_ENABLED`).
       */
-      "secrets.attach": "act"
+      "secrets.attach": "act",
+      /**
+      * SV (LUA-1080) — `Agents.deployed(id)`: what the target serves RIGHT NOW, read from each primitive's live pointer
+      * (skills with their tools, the published persona, pre/postprocessors), with version ids comparable to an agent
+      * version snapshot. Works whether or not the target has a promoted agent version. Metadata and hashes only.
+      */
+      "primitives.deployed": "observe",
+      // [WD]
+      /**
+      * WD (watchdog grant) — `Agents.versions(id).rollback(version, { expectActive })`: restore a version of the target
+      * that was ACTIVE before, is OLDER than the active one and was active within the last 7 days. CAS on the active
+      * version; only from a workflow step the watchdog grant names. Held only by a watchdog grant.
+      */
+      "versions.rollback": "rollback",
+      // [JR]
+      /**
+      * JR (BAC-2011) — `Agents.jobs(id).register({ versionId, jobId })`: register a job that is pinned in a STAGED version of
+      * the target (`snapshot.jobs[]`) so the promote activates and schedules it. Mongo-only marker write; EventBridge stays
+      * on the post-promote reconcile. Release-class: needs `register-job` AND `release` on the grant, from a signed step.
+      */
+      "jobs.register": "register-job"
     };
     __name(isSupervisionOp, "isSupervisionOp");
     __name3(isSupervisionOp, "isSupervisionOp");
@@ -6384,8 +6626,71 @@ var init_dist = __esm({
         gate: "act",
         targeted: true,
         item: "SV"
+      },
+      /** SV (LUA-1080) — `Agents.deployed(id)`: the target's deployed primitives (live pointers, no agent version needed). */
+      "primitives.deployed": {
+        gate: "observe",
+        targeted: true,
+        item: "SV"
+      },
+      /** WD — `Agents.versions(id).rollback(version, { expectActive })` (watchdog grant only). */
+      "versions.rollback": {
+        gate: "rollback",
+        targeted: true,
+        item: "WD"
+      },
+      /** JR (BAC-2011) — `Agents.jobs(id).register({ versionId, jobId })`: a job pinned in a STAGED version (`register-job`). */
+      "jobs.register": {
+        gate: "register-job",
+        targeted: true,
+        item: "JR"
       }
     };
+    SUPERVISION_WATCHDOG_OPS = {
+      logs: "observe",
+      "runs.list": "observe",
+      "runs.get": "observe",
+      "data.get": "observe",
+      "data.query": "observe",
+      "versions.list": "observe",
+      "versions.get": "observe",
+      "versions.diff": "observe",
+      "versions.rollback": "rollback"
+    };
+    __name(isSupervisionWatchdogOp, "isSupervisionWatchdogOp");
+    __name3(isSupervisionWatchdogOp, "isSupervisionWatchdogOp");
+    SUPERVISION_WATCHDOG_ERRORS = {
+      /** A watchdog holder called an op outside {@link SUPERVISION_WATCHDOG_OPS}. */
+      OP_REFUSED: "supervision_watchdog_op_refused",
+      /** See {@link SupervisionRollbackRefusalReason}. */
+      ROLLBACK_NEVER_ACTIVE: "supervision_rollback_never_active",
+      ROLLBACK_NOT_OLDER: "supervision_rollback_not_older",
+      ROLLBACK_NOT_IN_LINEAGE: "supervision_rollback_not_in_lineage",
+      ROLLBACK_AFTER_ROLLBACK: "supervision_rollback_after_rollback",
+      ROLLBACK_AFTER_BACKWARD_PROMOTE: "supervision_rollback_after_backward_promote",
+      ROLLBACK_TOO_OLD: "supervision_rollback_too_old",
+      /** `expectActive` is not the active version (CAS). */
+      ROLLBACK_CONFLICT: "supervision_rollback_conflict",
+      /** The promote failed part-way and its compensation restored the previous active version. */
+      ROLLBACK_INCOMPLETE: "supervision_rollback_incomplete",
+      /** The promote failed part-way AND its compensation failed: the Agents DB may have moved (manual triage). */
+      ROLLBACK_INCOMPLETE_UNCOMPENSATED: "supervision_rollback_incomplete_uncompensated"
+    };
+    SUPERVISION_ROLLBACK_REFUSAL_CODES = {
+      never_active: SUPERVISION_WATCHDOG_ERRORS.ROLLBACK_NEVER_ACTIVE,
+      not_older: SUPERVISION_WATCHDOG_ERRORS.ROLLBACK_NOT_OLDER,
+      not_in_lineage: SUPERVISION_WATCHDOG_ERRORS.ROLLBACK_NOT_IN_LINEAGE,
+      after_rollback: SUPERVISION_WATCHDOG_ERRORS.ROLLBACK_AFTER_ROLLBACK,
+      after_backward_promote: SUPERVISION_WATCHDOG_ERRORS.ROLLBACK_AFTER_BACKWARD_PROMOTE,
+      too_old: SUPERVISION_WATCHDOG_ERRORS.ROLLBACK_TOO_OLD
+    };
+    __name(isSupervisionRollbackRefusalReason, "isSupervisionRollbackRefusalReason");
+    __name3(isSupervisionRollbackRefusalReason, "isSupervisionRollbackRefusalReason");
+    SUPERVISION_ROLLBACK_LINEAGE_MAX = 25;
+    __name(supervisionRollbackTargetRefusal, "supervisionRollbackTargetRefusal");
+    __name3(supervisionRollbackTargetRefusal, "supervisionRollbackTargetRefusal");
+    __name(supervisionRollbackRefusal, "supervisionRollbackRefusal");
+    __name3(supervisionRollbackRefusal, "supervisionRollbackRefusal");
     SUPERVISION_UNTARGETED_OPS = [
       "agents.list",
       ...Object.entries(SUPERVISION_OPS_WAVE2).filter(([, contract]) => !contract.targeted).map(([op]) => op)
@@ -6821,7 +7126,9 @@ var init_dist = __esm({
       /** `secrets.attach` would set an env key the agent already has: never overwritten (remove or rotate it first). */
       KEY_EXISTS: "secret_key_exists",
       /** A request held for an existing agent submitted on the public token page: its owner submits it signed in. */
-      OWNER_SUBMIT_REQUIRED: "secret_submit_requires_owner"
+      OWNER_SUBMIT_REQUIRED: "secret_submit_requires_owner",
+      /** LUA-1079 — `requestSecret` with `pendingFor` on a client that did not declare the pending card capability. */
+      PENDING_CARD_UNSUPPORTED: "secret_pending_card_unsupported"
     };
     SECRET_OUTCOME_STATUSES = [
       ...SECRET_TEST_RESULTS,
@@ -7546,6 +7853,13 @@ var init_dist = __esm({
       welcome: "Welcome and Home page",
       takeover: "Human takeover"
     };
+    THREAD_SCOPING_NOUN = {
+      front: "Front conversation",
+      messagebird: "MessageBird conversation",
+      imessage: "iMessage chat"
+    };
+    __name(threadScopingSetting, "threadScopingSetting");
+    __name3(threadScopingSetting, "threadScopingSetting");
     TAKEOVER_CHANNEL_TYPES = [
       "whatsapp",
       "instagram",
@@ -7819,7 +8133,10 @@ var init_dist = __esm({
     CHANNEL_SETTINGS = {
       ...Object.fromEntries(TAKEOVER_CHANNEL_TYPES.map((type) => [
         type,
-        type === "email" ? EMAIL_SETTINGS : takeoverSettings(type)
+        type === "email" ? EMAIL_SETTINGS : type === "front" || type === "messagebird" || type === "imessage" ? [
+          ...takeoverSettings(type),
+          threadScopingSetting(type)
+        ] : takeoverSettings(type)
       ])),
       slack: SLACK_SETTINGS
     };
@@ -9566,6 +9883,9 @@ This text is who you are for this person. As you learn them, their name, their w
     __name(workflowOrgSlotKey, "workflowOrgSlotKey");
     __name3(workflowOrgSlotKey, "workflowOrgSlotKey");
     WORKFLOW_CONNECTION_KEY_RE = /^[a-z][a-z0-9_-]{0,63}$/;
+    WORKFLOW_AGENT_APP_CONNECTION_PREFIX = "agentapp_";
+    __name(isWorkflowAgentAppConnectionId, "isWorkflowAgentAppConnectionId");
+    __name3(isWorkflowAgentAppConnectionId, "isWorkflowAgentAppConnectionId");
     WORKFLOW_JOB_MODEL_SOURCE_LABELS = {
       stamp: "lease stamp",
       initData: "run input",
@@ -9591,6 +9911,7 @@ This text is who you are for this person. As you learn them, their name, their w
       ...WORKFLOW_RUN_GATE_KINDS
     ];
     WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES = 64 * 1024;
+    WORKFLOW_SIGNAL_NAME_RE = /^[a-zA-Z0-9_.-]{1,64}$/;
     WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS = 168;
     WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES = 256 * 1024;
     SCHEDULE_HEALTH_NOTIFY_CHANNELS = [
@@ -10535,6 +10856,497 @@ listed here; never invent a target.`;
     BILLING_REJECTION_TEXT_USER_QUOTA = "You've reached your monthly usage limit in this workspace. Ask a workspace admin to raise it.";
     __name(isPaymentRequiredChatErrorEnvelope, "isPaymentRequiredChatErrorEnvelope");
     __name3(isPaymentRequiredChatErrorEnvelope, "isPaymentRequiredChatErrorEnvelope");
+    CUSTOM_MCP_CONNECTION_ID_PREFIX = "mcp_";
+    CUSTOM_MCP_SOURCE = "custom";
+    CUSTOM_MCP_TRANSPORT = "streamable-http";
+    CUSTOM_MCP_CONNECTION_ID_PATTERN = /^mcp_[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+    __name(isCustomMcpConnectionId, "isCustomMcpConnectionId");
+    __name3(isCustomMcpConnectionId, "isCustomMcpConnectionId");
+    customMcpConnectionIdSchema = z5.string().regex(CUSTOM_MCP_CONNECTION_ID_PATTERN);
+    CONNECTION_BACKED_MCP_SOURCES = [
+      "unifiedto",
+      CUSTOM_MCP_SOURCE
+    ];
+    __name(isConnectionBackedMcpSource, "isConnectionBackedMcpSource");
+    __name3(isConnectionBackedMcpSource, "isConnectionBackedMcpSource");
+    CUSTOM_MCP_REFERENCE_ID_PATTERN = /^mcpx_[0-9a-f]{12}$/;
+    customMcpReferenceIdSchema = z5.string().regex(CUSTOM_MCP_REFERENCE_ID_PATTERN);
+    __name(newCustomMcpReferenceId, "newCustomMcpReferenceId");
+    __name3(newCustomMcpReferenceId, "newCustomMcpReferenceId");
+    CUSTOM_MCP_AUTH_KINDS = [
+      "none",
+      "headers",
+      "oauth"
+    ];
+    customMcpAuthKindSchema = z5.enum(CUSTOM_MCP_AUTH_KINDS);
+    CUSTOM_MCP_OAUTH_REGISTRATIONS = [
+      "cimd",
+      "dcr",
+      "manual"
+    ];
+    customMcpOAuthRegistrationSchema = z5.enum(CUSTOM_MCP_OAUTH_REGISTRATIONS);
+    CUSTOM_MCP_HEALTH_STATES = [
+      "ok",
+      "failing",
+      "needs_sign_in",
+      "auth_rejected"
+    ];
+    customMcpHealthStateSchema = z5.enum(CUSTOM_MCP_HEALTH_STATES);
+    CUSTOM_MCP_FAILURE_STEPS = [
+      "url",
+      "reach",
+      "auth_challenge",
+      "resource_metadata",
+      "authorization_server_metadata",
+      "pkce",
+      "client_registration",
+      "authorize",
+      "token_exchange",
+      "list_tools"
+    ];
+    customMcpFailureStepSchema = z5.enum(CUSTOM_MCP_FAILURE_STEPS);
+    CUSTOM_MCP_CONNECT_STEPS = [
+      "url",
+      "reach",
+      "auth_challenge",
+      "list_tools"
+    ];
+    customMcpConnectStepSchema = z5.enum(CUSTOM_MCP_CONNECT_STEPS);
+    customMcpFailureCodeSchema = z5.string().regex(/^[a-z0-9_]{1,64}$/);
+    WORKFLOW_KEY_MAX_LENGTH = 64;
+    __name(customMcpWorkflowKey, "customMcpWorkflowKey");
+    __name3(customMcpWorkflowKey, "customMcpWorkflowKey");
+    __name(fnv1a32, "fnv1a32");
+    __name3(fnv1a32, "fnv1a32");
+    CUSTOM_MCP_URL_MAX_LENGTH = 2048;
+    CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH = 120;
+    CUSTOM_MCP_MAX_HEADERS = 20;
+    CUSTOM_MCP_HEADER_NAME_MAX_LENGTH = 128;
+    CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH = 8192;
+    CUSTOM_MCP_MAX_TOOLS = 500;
+    CUSTOM_MCP_TOOL_NAME_MAX_LENGTH = 256;
+    CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH = 1024;
+    CUSTOM_MCP_MIN_TIMEOUT_MS = 1e3;
+    CUSTOM_MCP_MAX_TIMEOUT_MS = 12e4;
+    CUSTOM_MCP_OAUTH_PENDING_TTL_MS = 15 * 6e4;
+    isoDateTime = z5.string().datetime({
+      offset: true
+    });
+    agentId = z5.string().min(1).max(128);
+    nonNegativeInt = z5.number().int().min(0);
+    customMcpUrlInputSchema = z5.string().trim().min(1).max(CUSTOM_MCP_URL_MAX_LENGTH);
+    customMcpDisplayNameSchema = z5.string().trim().min(1).max(CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH);
+    customMcpTimeoutSchema = z5.number().int().min(CUSTOM_MCP_MIN_TIMEOUT_MS).max(CUSTOM_MCP_MAX_TIMEOUT_MS);
+    CUSTOM_MCP_RESERVED_HEADER_NAMES = [
+      "accept",
+      "connection",
+      "content-length",
+      "content-type",
+      "host",
+      "keep-alive",
+      "last-event-id",
+      "mcp-protocol-version",
+      "mcp-session-id",
+      "proxy-authorization",
+      "te",
+      "trailer",
+      "transfer-encoding",
+      "upgrade"
+    ];
+    HEADER_NAME = /^[A-Za-z][A-Za-z0-9!#$%&'*+.^_`|~-]*$/;
+    HEADER_VALUE_FORBIDDEN = /[\u0000-\u0008\u000a-\u001f\u007f]/;
+    customMcpHeaderNameSchema = z5.string().min(1).max(CUSTOM_MCP_HEADER_NAME_MAX_LENGTH).regex(HEADER_NAME, "Not a valid HTTP header name").refine((name) => !CUSTOM_MCP_RESERVED_HEADER_NAMES.includes(name.toLowerCase()), "This header is set by Lua");
+    headerValue = z5.string().min(1).max(CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH).refine((value3) => !HEADER_VALUE_FORBIDDEN.test(value3), "Header values cannot contain line breaks");
+    __name(addCaseDuplicateIssues, "addCaseDuplicateIssues");
+    __name3(addCaseDuplicateIssues, "addCaseDuplicateIssues");
+    customMcpHeadersSchema = z5.record(customMcpHeaderNameSchema, headerValue).superRefine((headers, ctx) => {
+      const names = Object.keys(headers);
+      if (names.length > CUSTOM_MCP_MAX_HEADERS) {
+        ctx.addIssue({
+          code: z5.ZodIssueCode.custom,
+          message: `At most ${CUSTOM_MCP_MAX_HEADERS} headers`
+        });
+      }
+      addCaseDuplicateIssues(names, ctx, []);
+    });
+    customMcpHeadersPatchSchema = z5.object({
+      set: customMcpHeadersSchema.optional(),
+      remove: z5.array(customMcpHeaderNameSchema).max(CUSTOM_MCP_MAX_HEADERS).optional()
+    }).strict().superRefine((patch, ctx) => {
+      const set = Object.keys(patch.set ?? {});
+      const remove = patch.remove ?? [];
+      if (!set.length && !remove.length) {
+        ctx.addIssue({
+          code: z5.ZodIssueCode.custom,
+          message: "Nothing to change"
+        });
+      }
+      addCaseDuplicateIssues(remove, ctx, [
+        "remove"
+      ]);
+      const setLower = new Set(set.map((name) => name.toLowerCase()));
+      for (const name of remove) {
+        if (setLower.has(name.toLowerCase())) {
+          ctx.addIssue({
+            code: z5.ZodIssueCode.custom,
+            path: [
+              "remove"
+            ],
+            message: `Header "${name}" is both set and removed`
+          });
+        }
+      }
+    });
+    customMcpToolNameSchema = z5.string().min(1).max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH);
+    customMcpToolSchema = z5.object({
+      name: customMcpToolNameSchema,
+      title: z5.string().max(CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH).optional(),
+      description: z5.string().max(CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH).optional()
+    });
+    customMcpServerInfoSchema = z5.object({
+      name: z5.string().max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH),
+      version: z5.string().max(128).optional(),
+      title: z5.string().max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH).optional()
+    });
+    __name(toCustomMcpToolSnapshot, "toCustomMcpToolSnapshot");
+    __name3(toCustomMcpToolSnapshot, "toCustomMcpToolSnapshot");
+    customMcpToolSelectionSchema = z5.object({
+      allowAll: z5.boolean(),
+      enabled: z5.array(customMcpToolNameSchema).max(CUSTOM_MCP_MAX_TOOLS)
+    }).strict().refine((selection) => new Set(selection.enabled).size === selection.enabled.length, {
+      path: [
+        "enabled"
+      ],
+      message: "Tool names must be unique"
+    });
+    __name(customMcpRuntimeToolFilter, "customMcpRuntimeToolFilter");
+    __name3(customMcpRuntimeToolFilter, "customMcpRuntimeToolFilter");
+    customMcpToolsResponseSchema = z5.object({
+      allowAll: z5.boolean(),
+      tools: z5.array(customMcpToolSchema.extend({
+        enabled: z5.boolean()
+      })),
+      serverInfo: customMcpServerInfoSchema.optional(),
+      refreshedAt: isoDateTime.optional()
+    });
+    customMcpFailureSchema = z5.object({
+      step: customMcpFailureStepSchema,
+      code: customMcpFailureCodeSchema,
+      /** Plain words for the person connecting. */
+      message: z5.string().max(500),
+      httpStatus: z5.number().int().min(100).max(599).optional(),
+      referenceId: customMcpReferenceIdSchema
+    });
+    customMcpHealthSchema = z5.object({
+      state: customMcpHealthStateSchema,
+      checkedAt: isoDateTime.optional(),
+      lastOkAt: isoDateTime.optional(),
+      lastFailureAt: isoDateTime.optional(),
+      consecutiveFailures: nonNegativeInt,
+      lastFailure: customMcpFailureSchema.omit({
+        message: true
+      }).optional()
+    });
+    customMcpErrorBodySchema = z5.object({
+      code: z5.string(),
+      message: z5.string(),
+      failure: customMcpFailureSchema.optional(),
+      callbackUrl: z5.string().url().optional(),
+      retryAfterSeconds: z5.number().int().positive().optional()
+    });
+    customMcpConnectionBlockSchema = z5.object({
+      authKind: customMcpAuthKindSchema,
+      /** `URL.host`, port included. */
+      host: z5.string(),
+      /** Host plus a masked path; never the URL. */
+      urlDisplay: z5.string(),
+      /** Names only, for the edit form. Present on `headers` connections. */
+      headerNames: z5.array(z5.string()).optional(),
+      /** The workflow connection key that names this server: {@link customMcpWorkflowKey} of its display name. */
+      workflowKey: z5.string().regex(WORKFLOW_CONNECTION_KEY_RE).optional(),
+      health: customMcpHealthSchema,
+      toolCount: nonNegativeInt,
+      enabledToolCount: nonNegativeInt
+    });
+    customMcpConnectionViewSchema = z5.object({
+      id: customMcpConnectionIdSchema,
+      displayName: z5.string(),
+      ownerType: z5.enum([
+        "user",
+        "agent"
+      ]),
+      agentId: z5.string().optional(),
+      customMcp: customMcpConnectionBlockSchema
+    });
+    customMcpConnectionResponseSchema = z5.object({
+      connection: customMcpConnectionViewSchema
+    });
+    customMcpProbeBodySchema = z5.object({
+      url: customMcpUrlInputSchema,
+      headers: customMcpHeadersSchema.optional()
+    }).strict();
+    customMcpOAuthDiscoverySchema = z5.object({
+      issuer: z5.string().url(),
+      scopes: z5.array(z5.string()),
+      /** `manual_required`: neither CIMD nor DCR; the person registers a client with `callbackUrl`. */
+      registration: z5.enum([
+        "cimd",
+        "dcr",
+        "manual_required"
+      ]),
+      callbackUrl: z5.string().url()
+    });
+    customMcpProbeResponseSchema = z5.discriminatedUnion("outcome", [
+      z5.object({
+        outcome: z5.literal("connected"),
+        authKind: z5.enum([
+          "none",
+          "headers"
+        ]),
+        serverInfo: customMcpServerInfoSchema,
+        tools: z5.array(customMcpToolSchema)
+      }),
+      /** The server challenged and publishes usable OAuth metadata. */
+      z5.object({
+        outcome: z5.literal("sign_in_required"),
+        oauth: customMcpOAuthDiscoverySchema
+      }),
+      /** The server challenged without usable OAuth and no headers were sent. */
+      z5.object({
+        outcome: z5.literal("credentials_required"),
+        httpStatus: z5.number().int()
+      })
+    ]);
+    createFields = {
+      url: customMcpUrlInputSchema,
+      displayName: customMcpDisplayNameSchema,
+      timeout: customMcpTimeoutSchema.optional(),
+      /** Defaults to allow-all. */
+      tools: customMcpToolSelectionSchema.optional()
+    };
+    mountAgentField = {
+      mountAgentId: agentId.optional()
+    };
+    __name(createBody, "createBody");
+    __name3(createBody, "createBody");
+    customMcpCreateAgentBodySchema = createBody({});
+    customMcpCreateUserBodySchema = createBody(mountAgentField);
+    customMcpOAuthClientSchema = z5.object({
+      clientId: z5.string().trim().min(1).max(512),
+      clientSecret: z5.string().min(1).max(2048).optional()
+    }).strict();
+    startFields = {
+      successRedirect: z5.string().max(CUSTOM_MCP_URL_MAX_LENGTH),
+      failureRedirect: z5.string().max(CUSTOM_MCP_URL_MAX_LENGTH),
+      state: z5.string().max(256),
+      client: customMcpOAuthClientSchema.optional()
+    };
+    __name(startBody, "startBody");
+    __name3(startBody, "startBody");
+    customMcpOAuthStartAgentBodySchema = startBody({});
+    customMcpOAuthStartUserBodySchema = startBody(mountAgentField);
+    customMcpOAuthStartResponseSchema = z5.object({
+      authUrl: z5.string().url(),
+      pendingId: z5.string().min(1),
+      expiresAt: isoDateTime,
+      registration: customMcpOAuthRegistrationSchema
+    });
+    nonce = z5.string().regex(/^[A-Za-z0-9_-]{32,128}$/);
+    customMcpOAuthSuccessRedirectQuerySchema = z5.object({
+      state: z5.string(),
+      id: z5.string().min(1),
+      nonce
+    });
+    CUSTOM_MCP_OAUTH_CALLBACK_ERRORS = [
+      "access_denied",
+      "authorize",
+      "token_exchange",
+      "expired"
+    ];
+    customMcpOAuthFailureRedirectQuerySchema = z5.object({
+      state: z5.string(),
+      error: z5.enum(CUSTOM_MCP_OAUTH_CALLBACK_ERRORS),
+      ref: customMcpReferenceIdSchema
+    });
+    customMcpOAuthFinalizeBodySchema = z5.object({
+      pendingId: z5.string().min(1).max(128),
+      nonce,
+      tools: customMcpToolSelectionSchema.optional()
+    }).strict();
+    customMcpCimdDocumentSchema = z5.object({
+      client_id: z5.string().url(),
+      client_name: z5.string(),
+      client_uri: z5.string().url().optional(),
+      logo_uri: z5.string().url().optional(),
+      redirect_uris: z5.array(z5.string().url()).min(1),
+      grant_types: z5.array(z5.enum([
+        "authorization_code",
+        "refresh_token"
+      ])),
+      response_types: z5.array(z5.literal("code")),
+      token_endpoint_auth_method: z5.literal("none")
+    });
+    customMcpPatchBodySchema = z5.object({
+      displayName: customMcpDisplayNameSchema.optional(),
+      url: customMcpUrlInputSchema.optional(),
+      headers: customMcpHeadersPatchSchema.optional(),
+      timeout: customMcpTimeoutSchema.optional()
+    }).strict().refine((body) => Object.values(body).some((value3) => value3 !== void 0), {
+      message: "Nothing to change"
+    });
+    customMcpCredentialRequestSchema = z5.object({
+      mode: z5.enum([
+        "mount",
+        "room_personal"
+      ]),
+      connectionId: customMcpConnectionIdSchema,
+      agentId,
+      /** The server rejected this token version: refresh unless it is already stale. */
+      rejectedTokenVersion: nonNegativeInt.optional()
+    }).strict();
+    customMcpCredentialAuthSchema = z5.discriminatedUnion("kind", [
+      z5.object({
+        kind: z5.literal("none")
+      }),
+      z5.object({
+        kind: z5.literal("headers"),
+        headers: z5.record(z5.string(), z5.string())
+      }),
+      z5.object({
+        kind: z5.literal("oauth"),
+        accessToken: z5.string().min(1),
+        tokenVersion: nonNegativeInt,
+        /** At least {@link CUSTOM_MCP_ACCESS_TOKEN_MIN_REMAINING_MS} away. */
+        expiresAt: isoDateTime
+      })
+    ]);
+    customMcpCredentialResponseSchema = z5.object({
+      connectionId: customMcpConnectionIdSchema,
+      credentialGeneration: nonNegativeInt,
+      url: z5.string().url(),
+      auth: customMcpCredentialAuthSchema
+    });
+    CUSTOM_MCP_CREDENTIAL_ERRORS = {
+      /** 403. Not mounted on this agent, or the room grant is no longer current. */
+      NOT_MOUNTED: "NOT_MOUNTED",
+      /** 404. */
+      NOT_FOUND: "NOT_FOUND",
+      /** 409. Paused by its owner. */
+      PAUSED: "PAUSED",
+      /** 409. The refresh token is gone or was refused; the owner must sign in again. */
+      NEEDS_SIGN_IN: "NEEDS_SIGN_IN",
+      /** 503. The token endpoint failed; retry later. */
+      REFRESH_UNAVAILABLE: "REFRESH_UNAVAILABLE"
+    };
+    customMcpCredentialErrorBodySchema = z5.object({
+      code: z5.nativeEnum(CUSTOM_MCP_CREDENTIAL_ERRORS),
+      message: z5.string()
+    });
+    customMcpHealthReportSchema = z5.object({
+      reports: z5.array(z5.object({
+        connectionId: customMcpConnectionIdSchema,
+        agentId,
+        credentialGeneration: nonNegativeInt,
+        tokenVersion: nonNegativeInt.optional(),
+        outcome: z5.enum([
+          "ok",
+          "failure"
+        ]),
+        failure: z5.object({
+          step: customMcpConnectStepSchema,
+          code: customMcpFailureCodeSchema,
+          httpStatus: z5.number().int().min(100).max(599).optional(),
+          referenceId: customMcpReferenceIdSchema
+        }).strict().optional(),
+        observedAt: isoDateTime
+      }).strict().refine((report) => report.outcome === "failure" === (report.failure !== void 0), {
+        path: [
+          "failure"
+        ],
+        message: "A failure report carries `failure`; an ok report does not"
+      })).min(1).max(50)
+    }).strict();
+    customMcpProbeRequestSchema = z5.object({
+      url: z5.string().url().max(CUSTOM_MCP_URL_MAX_LENGTH),
+      auth: z5.discriminatedUnion("kind", [
+        z5.object({
+          kind: z5.literal("none")
+        }).strict(),
+        z5.object({
+          kind: z5.literal("headers"),
+          headers: customMcpHeadersSchema
+        }).strict(),
+        z5.object({
+          kind: z5.literal("bearer"),
+          accessToken: z5.string().min(1)
+        }).strict()
+      ]),
+      timeout: customMcpTimeoutSchema.optional(),
+      referenceId: customMcpReferenceIdSchema
+    }).strict();
+    customMcpProbeResultSchema = z5.discriminatedUnion("ok", [
+      z5.object({
+        ok: z5.literal(true),
+        serverInfo: customMcpServerInfoSchema,
+        tools: z5.array(customMcpToolSchema).max(CUSTOM_MCP_MAX_TOOLS),
+        protocolVersion: z5.string().optional()
+      }),
+      z5.object({
+        ok: z5.literal(false),
+        step: customMcpConnectStepSchema,
+        code: customMcpFailureCodeSchema,
+        httpStatus: z5.number().int().min(100).max(599).optional(),
+        /** The 401/403 challenge, raw, for lua-api's OAuth discovery. */
+        wwwAuthenticate: z5.string().max(4096).optional()
+      })
+    ]);
+    customMcpOriginUrlSchema = z5.string().url().refine((value3) => {
+      try {
+        const url = new URL(value3);
+        return url.protocol === "https:" && url.pathname === "/" && !url.search && !url.hash && !url.username && !url.password;
+      } catch {
+        return false;
+      }
+    }, "Origin only");
+    customMcpServerProjectionSchema = z5.object({
+      name: z5.string().min(1),
+      runtimeKey: z5.string().min(1),
+      transport: z5.literal(CUSTOM_MCP_TRANSPORT),
+      source: z5.literal(CUSTOM_MCP_SOURCE),
+      url: customMcpOriginUrlSchema,
+      connectionId: customMcpConnectionIdSchema,
+      connectionLabel: z5.string(),
+      /** The connection's owner kind, for the dashboard's "Personal" label. */
+      ownerType: z5.enum([
+        "user",
+        "agent"
+      ]),
+      authKind: customMcpAuthKindSchema,
+      credentialGeneration: nonNegativeInt,
+      tools: z5.object({
+        allow: z5.array(z5.string())
+      }).optional(),
+      timeout: z5.number().int().positive()
+    });
+    customMcpMountUpsertBodySchema = z5.object({
+      source: z5.literal(CUSTOM_MCP_SOURCE),
+      transport: z5.literal(CUSTOM_MCP_TRANSPORT),
+      url: customMcpOriginUrlSchema,
+      connectionId: customMcpConnectionIdSchema,
+      connectionLabel: z5.string(),
+      ownerType: z5.enum([
+        "user",
+        "agent"
+      ]),
+      authKind: customMcpAuthKindSchema,
+      credentialGeneration: nonNegativeInt,
+      tools: z5.object({
+        allow: z5.array(customMcpToolNameSchema).max(CUSTOM_MCP_MAX_TOOLS)
+      }).strict().optional(),
+      timeout: customMcpTimeoutSchema.optional()
+    }).strict();
+    __name(maskMcpServerHeaders, "maskMcpServerHeaders");
+    __name3(maskMcpServerHeaders, "maskMcpServerHeaders");
   }
 });
 
@@ -11195,7 +12007,7 @@ var init_constants = __esm({
 });
 
 // src/services/firebase-session.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 function rejectedRefreshReason(message) {
   const normalised = message.toUpperCase();
   return REJECTED_REFRESH_REASONS.find((reason) => normalised.includes(reason));
@@ -11341,20 +12153,20 @@ var init_firebase_session = __esm({
         this.name = "FirebaseSessionRejectedError";
       }
     };
-    customTokenResponseSchema = z5.object({
-      idToken: z5.string().min(1),
-      refreshToken: z5.string().min(1),
-      expiresIn: z5.coerce.number().positive().finite(),
-      localId: z5.string().min(1).optional()
+    customTokenResponseSchema = z6.object({
+      idToken: z6.string().min(1),
+      refreshToken: z6.string().min(1),
+      expiresIn: z6.coerce.number().positive().finite(),
+      localId: z6.string().min(1).optional()
     });
-    refreshResponseSchema = z5.object({
-      id_token: z5.string().min(1),
-      refresh_token: z5.string().min(1),
-      expires_in: z5.coerce.number().positive().finite(),
-      user_id: z5.string().min(1)
+    refreshResponseSchema = z6.object({
+      id_token: z6.string().min(1),
+      refresh_token: z6.string().min(1),
+      expires_in: z6.coerce.number().positive().finite(),
+      user_id: z6.string().min(1)
     });
-    firebaseIdTokenPayloadSchema = z5.object({
-      sub: z5.string().min(1)
+    firebaseIdTokenPayloadSchema = z6.object({
+      sub: z6.string().min(1)
     });
     __name(requireFirebaseWebApiKey, "requireFirebaseWebApiKey");
     __name(claimsOfFirebaseIdToken, "claimsOfFirebaseIdToken");
@@ -11371,7 +12183,7 @@ var init_firebase_session = __esm({
 import { createHash, randomUUID } from "crypto";
 import { mkdir, open, readFile, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { join as join3 } from "path";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 function environmentKey(environment) {
   return createHash("sha256").update(`${environment.apiUrl}
 ${environment.authUrl}
@@ -11388,15 +12200,15 @@ var init_firebase_session_store = __esm({
   "src/services/firebase-session-store.ts"() {
     "use strict";
     init_constants();
-    storedFirebaseSessionSchema = z6.object({
-      version: z6.literal(1),
-      kind: z6.literal("firebase-session"),
-      generation: z6.string().min(1),
-      refreshToken: z6.string().min(1),
-      firebaseUid: z6.string().min(1),
-      apiUrl: z6.string().url(),
-      authUrl: z6.string().url(),
-      firebaseWebApiKey: z6.string().min(1)
+    storedFirebaseSessionSchema = z7.object({
+      version: z7.literal(1),
+      kind: z7.literal("firebase-session"),
+      generation: z7.string().min(1),
+      refreshToken: z7.string().min(1),
+      firebaseUid: z7.string().min(1),
+      apiUrl: z7.string().url(),
+      authUrl: z7.string().url(),
+      firebaseWebApiKey: z7.string().min(1)
     });
     currentFirebaseSessionEnvironment = /* @__PURE__ */ __name(() => ({
       apiUrl: BASE_URLS.API,
@@ -12065,14 +12877,15 @@ var init_http_client = __esm({
       * Performs an HTTP GET request
       * @param url - The relative URL path to request (will be appended to baseUrl)
       * @param headers - Optional HTTP headers to include in the request
+      * @param overrides - Optional per-call overrides (timeout, caller AbortSignal)
       * @returns Promise resolving to an ApiResponse with typed data
       * @protected
       */
-      async httpGet(url, headers) {
+      async httpGet(url, headers, overrides) {
         return this.retryableRequest(this.baseUrl + url, {
           method: "GET",
           headers
-        });
+        }, 3, overrides);
       }
       /**
       * Performs an HTTP POST request
@@ -12114,43 +12927,46 @@ var init_http_client = __esm({
       * @param url - The relative URL path to request (will be appended to baseUrl)
       * @param data - Optional request body data (will be JSON stringified)
       * @param headers - Optional HTTP headers to include in the request
+      * @param overrides - Optional per-call overrides (timeout, caller AbortSignal)
       * @returns Promise resolving to an ApiResponse with typed data
       * @protected
       */
-      async httpPut(url, data, headers) {
+      async httpPut(url, data, headers, overrides) {
         return this.retryableRequest(this.baseUrl + url, {
           method: "PUT",
           body: data ? JSON.stringify(data) : void 0,
           headers
-        });
+        }, 3, overrides);
       }
       /**
       * Performs an HTTP DELETE request
       * @param url - The relative URL path to request (will be appended to baseUrl)
       * @param headers - Optional HTTP headers to include in the request
+      * @param overrides - Optional per-call overrides (timeout, caller AbortSignal)
       * @returns Promise resolving to an ApiResponse with typed data
       * @protected
       */
-      async httpDelete(url, headers) {
+      async httpDelete(url, headers, overrides) {
         return this.retryableRequest(this.baseUrl + url, {
           method: "DELETE",
           headers
-        });
+        }, 3, overrides);
       }
       /**
       * Performs an HTTP PATCH request
       * @param url - The relative URL path to request (will be appended to baseUrl)
       * @param data - Optional request body data (will be JSON stringified)
       * @param headers - Optional HTTP headers to include in the request
+      * @param overrides - Optional per-call overrides (timeout, caller AbortSignal)
       * @returns Promise resolving to an ApiResponse with typed data
       * @protected
       */
-      async httpPatch(url, data, headers) {
+      async httpPatch(url, data, headers, overrides) {
         return this.retryableRequest(this.baseUrl + url, {
           method: "PATCH",
           body: data ? JSON.stringify(data) : void 0,
           headers
-        });
+        }, 3, overrides);
       }
       /**
       * Performs one HTTP PATCH attempt (no client retry).
@@ -12275,8 +13091,8 @@ var init_connection_requests_api_service = __esm({
         __name(this, "ConnectionRequestsApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       query() {
         return `agentId=${encodeURIComponent(this.agentId)}`;
@@ -12358,8 +13174,8 @@ function workflowJobTargetTemplatePath(binding) {
   return m[1].split(".").every((seg) => TARGET_PATH_SEGMENT_RE.test(seg)) ? m[1] : null;
 }
 function isWorkflowJobTargetTemplate(target) {
-  const agentId = target?.agentId;
-  return !!agentId && typeof agentId === "object";
+  const agentId2 = target?.agentId;
+  return !!agentId2 && typeof agentId2 === "object";
 }
 function workflowJobLuaApiProblem(luaApi, nodeType, tier) {
   if (luaApi === void 0) return null;
@@ -12375,12 +13191,12 @@ function workflowJobTargetProblem(target, plugins, luaApi) {
   if (target === void 0) return null;
   if (!target || typeof target !== "object" || Array.isArray(target)) return "target must be { agentId }";
   const keys = Object.keys(target);
-  const agentId = target.agentId;
+  const agentId2 = target.agentId;
   if (keys.length !== 1 || !("agentId" in target)) return "target must be exactly { agentId }";
-  if (typeof agentId === "string") {
-    if (!agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
-    if (agentId.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
-  } else if (workflowJobTargetTemplatePath(agentId) === null) {
+  if (typeof agentId2 === "string") {
+    if (!agentId2.trim() || agentId2.length > 256) return "target must be exactly { agentId: <non-empty string> }";
+    if (agentId2.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
+  } else if (workflowJobTargetTemplatePath(agentId2) === null) {
     return "target.agentId must be a static id or template('${initData.<path>}') \u2014 exactly one initData placeholder, no default";
   }
   const hasPlugins = Array.isArray(plugins) && plugins.length > 0;
@@ -12404,25 +13220,25 @@ function readInitDataPath(root, path3) {
   return cur;
 }
 function renderWorkflowJobTarget(target, initData) {
-  const agentId = target?.agentId;
-  if (target === void 0 || target === null || agentId === void 0) return {
+  const agentId2 = target?.agentId;
+  if (target === void 0 || target === null || agentId2 === void 0) return {
     ok: true,
     agentId: void 0,
     templated: false
   };
-  if (typeof agentId === "string") {
-    if (!agentId.trim() || agentId.includes("${")) return {
+  if (typeof agentId2 === "string") {
+    if (!agentId2.trim() || agentId2.includes("${")) return {
       ok: false,
       reason: "invalid",
       message: "target.agentId is invalid"
     };
     return {
       ok: true,
-      agentId,
+      agentId: agentId2,
       templated: false
     };
   }
-  const path3 = workflowJobTargetTemplatePath(agentId);
+  const path3 = workflowJobTargetTemplatePath(agentId2);
   if (path3 === null) return {
     ok: false,
     reason: "invalid",
@@ -12516,7 +13332,7 @@ var init_workflow_job_tools = __esm({
 
 // ../workflow-graph/dist/index.mjs
 import { createHash as createHash2 } from "crypto";
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 import { z as z22 } from "zod";
 import { createHash as createHash22 } from "crypto";
 function isMapConfigObject(v) {
@@ -12986,6 +13802,19 @@ function validateApprovalReminder(node, path3) {
   }
   return [];
 }
+function validateHitlTimeoutHours(node, path3) {
+  const h = node.timeoutHours;
+  if (typeof h !== "number") return [];
+  if (Number.isFinite(h) && h >= APPROVAL_TIMEOUT_HOURS_MIN && h <= APPROVAL_TIMEOUT_HOURS_MAX) return [];
+  return [
+    {
+      code: "timeout-hours-out-of-range",
+      path: `${path3}.timeoutHours`,
+      severity: "error",
+      message: `timeoutHours must be a number of hours in [${APPROVAL_TIMEOUT_HOURS_MIN}, ${APPROVAL_TIMEOUT_HOURS_MAX}] (got ${h})`
+    }
+  ];
+}
 function firstAskDeadline(node) {
   const head = Array.isArray(node.onTimeout) ? node.onTimeout[0] : node.onTimeout;
   if (typeof head === "object" && head !== null && "escalateTo" in head) {
@@ -13057,6 +13886,9 @@ function retryBackoffs() {
 function sleepUntilUnsupportedMessage(id2) {
   return `the engine does not execute \`sleepUntil\` yet (node "${id2}") \u2014 replace it with a \`sleep\` node with a \`duration\` in ms, e.g. { type: 'sleep', id: '${id2}', duration: ${SLEEP_UNTIL_REPLACEMENT.duration} }`;
 }
+function signalNameInvalidMessage(id2, name) {
+  return `waitForSignal "${id2}" signal "${name}" must match /${WORKFLOW_SIGNAL_NAME_RE.source}/ (the names a delivery accepts)`;
+}
 function armSubrunUnsupportedMessage(id2, workflowId) {
   return `the engine does not execute the implicit \`${workflowId}\` arm subrun (node "${id2}") \u2014 a [map, step] container arm is the step itself with the map as its \`input\` since lua-cli 3.32.4; re-run \`lua compile\` with the current CLI (a hand-written artifact: put the map on the arm node's \`input\` and drop the \`workflow\` wrapper)`;
 }
@@ -13649,10 +14481,13 @@ function validateLuaExtensions(g, caps = WORKFLOW_CAPS_DEFAULT, opts = {
       const w = node;
       checkId(w.id, path3);
       if (typeof w.signal !== "string" || w.signal.length === 0) err("invalid-envelope", "waitForSignal.signal is required", `${path3}.signal`, w.id);
+      else if (!WORKFLOW_SIGNAL_NAME_RE.test(w.signal)) err("signal-name-invalid", signalNameInvalidMessage(w.id, w.signal), `${path3}.signal`, w.id);
+      for (const r of validateHitlTimeoutHours(w, path3)) err(r.code, r.message, r.path, w.id);
       return;
     }
     const a = node;
     checkId(a.id, path3);
+    for (const r of validateHitlTimeoutHours(a, path3)) err(r.code, r.message, r.path, a.id);
     if ((a.approver ?? "creator") === "creator" && a.excludeInitiator === true) {
       err("approver-excludes-only-candidate", "approver:'creator' with excludeInitiator:true always excludes the only candidate", path3, a.id);
     }
@@ -16120,7 +16955,7 @@ function collectJobTierSteps(entry, out) {
       return;
   }
 }
-var __defProp6, __name6, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, WORKFLOW_MODEL_TEMPLATE_ROOT, WORKFLOW_MODEL_TEMPLATE_RE, PATH_SEGMENT_RE, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, APPROVAL_REMIND_AFTER_HOURS_MIN, APPROVAL_REMIND_AFTER_HOURS_MAX, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_WORKSPACE_TTL_MAX_HOURS_DEFAULT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS2, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, SUSPENDED_FOR_DIMENSIONS, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, WORKFLOW_SCHEDULE_RUN_AS, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
+var __defProp6, __name6, WorkflowTemplateError, TEMPLATE_PLACEHOLDER, TEMPLATE_NAMESPACES, MAP_DESCRIPTOR_KEYS, MAP_MEMBER_MALFORMED_CODE, fromInit, fromStep, value, template, fromRequest, rows, fromKnowledge, SideEffectsSchema, JobResourcesSchema, WORKFLOW_MODEL_TEMPLATE_ROOT, WORKFLOW_MODEL_TEMPLATE_RE, PATH_SEGMENT_RE, APPROVER_SPEC_MAX_USERS, ESCALATION_MAX_HOPS, TemplateBindingSchema, ApproverSpecSchema, FourEyesSchema, EscalationHopSchema, TerminalOutcomeSchema, ApprovalOnTimeoutSchema, APPROVER_SPEC_SHAPES, APPROVER_WRITTEN_MAX, USER_ID_SHAPED_RE, BINDING_ROOTS, APPROVAL_REMIND_AFTER_HOURS_MIN, APPROVAL_REMIND_AFTER_HOURS_MAX, APPROVAL_TIMEOUT_HOURS_MIN, APPROVAL_TIMEOUT_HOURS_MAX, WORKSPACE_TEMPLATE_EXPR_RE, SLEEP_UNTIL_REPLACEMENT, WORKFLOW_WORKSPACE_TTL_MAX_HOURS_DEFAULT, WORKFLOW_CAPS_DEFAULT, WORKFLOW_STEP_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_AGENT_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_JOB_DEFAULT_TIMEOUT_SECONDS, WORKFLOW_FOREACH_DEFAULT_CONCURRENCY, WORKFLOW_FOREACH_DEFAULT_MAX_ITEMS, WORKFLOW_LOOP_DEFAULT_MAX_ITERATIONS, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS2, WORKFLOW_SIGNAL_DEFAULT_SOURCES, clone, CONNECTION_ID_HEX_RE, WORKFLOW_JOB_MAX_WORKTREE_ARMS, workspaceOf, mountsWorkspace, isJobTier, jobToolsOf, schemaIsArray, isHitlNode, isSingleStep, singleId, armId, TEMPLATE_STEP_REF, EDITABLE_PATH_RE, PREDICATE_OPS, isPredicateScalar, GRAPH_HASH_PREFIX, WorkflowPlanError, isArmStep, armStepId, armStepKind, joinIdOf, containerIdOf, PATH_PLACEHOLDER, MISSING, stepIdOf, cmp, eq, ne, gt, gte, lt, lte, inSet, notIn, exists, notExists, truthy, falsy, and, or, not, CONTINUED_FAILURE_TAG, CONTINUED_FAILURE_DEFAULT_CODE, CONTINUED_FAILURE_OUTPUT_SCHEMA, CONTINUED_FAILURE_LEAF_PATHS, isHitlNode2, nodeIdOf, GOAL_JUDGE_STEP_ID, NON_LEAF_KINDS, CONDITIONAL_JOIN_ID, branchArmId, canonical, sortKeys, JOIN, entryOfJoin, FORCE_CANCEL_STALE_MS, TERMINAL, WORKFLOW_INLINE_RUN_TAG, RUN_ERROR_ISSUES_MAX, IN_FLIGHT, n, SUSPENDED_FOR_DIMENSIONS, STEP_ERROR_DETAIL_KEYS, STEP_ERROR_DETAIL_MAX_BYTES, DETAIL_MAX_DEPTH, DETAIL_MAX_ITEMS, MAX_HOLIDAYS, MAX_WALK_DAYS, HHMM, YMD, MS_PER_MIN, MS_PER_DAY, MON_FRI, supportedTz, fmtCache, WEEKDAYS, JSON_PATCH_OPS, JSON_PATCH_MAX_OPS, JSON_PATCH_MAX_VALUE_BYTES, JSON_PATCH_MAX_TOTAL_BYTES, SEGMENT_RE, WORKFLOW_SCHEDULE_TYPES, WORKFLOW_SCHEDULE_SHAPE_ISSUE, WORKFLOW_SCHEDULE_SHAPES_HINT, WORKFLOW_SCHEDULE_RUN_AS, isObject, WORKFLOW_ENV_OVERLAY_MAX_KEYS, WORKFLOW_ENV_OVERLAY_MAX_VALUE_BYTES, WORKFLOW_ENV_TEMPLATE_SECRET_KEY_RE, isEnvRef, looksLikeEmbeddedJson, ZERO, isRecord2;
 var init_dist2 = __esm({
   "../workflow-graph/dist/index.mjs"() {
     "use strict";
@@ -16224,8 +17059,8 @@ var init_dist2 = __esm({
     fromKnowledge = /* @__PURE__ */ __name6((k) => ({
       knowledge: k
     }), "fromKnowledge");
-    SideEffectsSchema = z7.enum(WORKFLOW_SIDE_EFFECTS);
-    JobResourcesSchema = z7.enum(WORKFLOW_JOB_RESOURCES);
+    SideEffectsSchema = z8.enum(WORKFLOW_SIDE_EFFECTS);
+    JobResourcesSchema = z8.enum(WORKFLOW_JOB_RESOURCES);
     WORKFLOW_MODEL_TEMPLATE_ROOT = "initData";
     WORKFLOW_MODEL_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*(?:\|([^}]*))?\}$/;
     PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
@@ -16329,8 +17164,12 @@ var init_dist2 = __esm({
     __name6(validateApproverBlock, "validateApproverBlock");
     APPROVAL_REMIND_AFTER_HOURS_MIN = 1;
     APPROVAL_REMIND_AFTER_HOURS_MAX = 720;
+    APPROVAL_TIMEOUT_HOURS_MIN = 1;
+    APPROVAL_TIMEOUT_HOURS_MAX = 720;
     __name(validateApprovalReminder, "validateApprovalReminder");
     __name6(validateApprovalReminder, "validateApprovalReminder");
+    __name(validateHitlTimeoutHours, "validateHitlTimeoutHours");
+    __name6(validateHitlTimeoutHours, "validateHitlTimeoutHours");
     __name(firstAskDeadline, "firstAskDeadline");
     __name6(firstAskDeadline, "firstAskDeadline");
     __name(liftRenderedApprover, "liftRenderedApprover");
@@ -16348,6 +17187,8 @@ var init_dist2 = __esm({
     });
     __name(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
     __name6(sleepUntilUnsupportedMessage, "sleepUntilUnsupportedMessage");
+    __name(signalNameInvalidMessage, "signalNameInvalidMessage");
+    __name6(signalNameInvalidMessage, "signalNameInvalidMessage");
     __name(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
     __name6(armSubrunUnsupportedMessage, "armSubrunUnsupportedMessage");
     WORKFLOW_WORKSPACE_TTL_MAX_HOURS_DEFAULT = 168;
@@ -17757,6 +18598,9 @@ var init_workflow = __esm({
         for (const r of validateApprovalReminder(opts, `approval("${id2}")`)) {
           if (r.severity === "error") throw new LuaWorkflowBuildError("remind-after-invalid", `"${id2}": ${r.message}`);
         }
+        for (const r of validateHitlTimeoutHours(opts, `approval("${id2}")`)) {
+          throw new LuaWorkflowBuildError("timeout-hours-out-of-range", `"${id2}": ${r.message}`);
+        }
         if (typeof opts.details === "function") throw new LuaWorkflowBuildError("closure-binding", `approval("${id2}").details must be template(...)`);
         this.recordEnvRefs(opts.details, opts.timeoutHours, opts.approver);
         const node = defined({
@@ -17787,6 +18631,10 @@ var init_workflow = __esm({
       waitForSignal(id2, opts) {
         this.assertId(id2, "waitForSignal()");
         if (!opts || typeof opts.signal !== "string" || opts.signal.length === 0) throw new LuaWorkflowBuildError("invalid-envelope", `waitForSignal("${id2}") needs a signal name`);
+        if (!WORKFLOW_SIGNAL_NAME_RE.test(opts.signal)) throw new LuaWorkflowBuildError("signal-name-invalid", signalNameInvalidMessage(id2, opts.signal));
+        for (const r of validateHitlTimeoutHours(opts, `waitForSignal("${id2}")`)) {
+          throw new LuaWorkflowBuildError("timeout-hours-out-of-range", `"${id2}": ${r.message}`);
+        }
         this.recordEnvRefs(opts.timeoutHours);
         const node = defined({
           type: "waitForSignal",
@@ -17849,7 +18697,7 @@ var init_workflow = __esm({
         if (this.mapCount >= 2 && this.unnamedMaps > 0) {
           this.warnings.push({
             code: "map-id-required",
-            message: `${this.unnamedMaps} of ${this.mapCount} map() calls have no explicit id \u2014 positional ids renumber on insert; pass { id } (error at push)`
+            message: `${this.unnamedMaps} of ${this.mapCount} map() calls have no explicit id \u2014 positional ids renumber on insert; pass { id } to every map() to keep step ids stable`
           });
         }
         if (graphHasHitl(graph, this.steps) && this.config.budget?.maxDurationSeconds === void 0) {
@@ -18028,9 +18876,9 @@ var init_skills_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Retrieves all skills for the agent
@@ -18540,7 +19388,7 @@ function walk3(root, prefix, out) {
     }
   }
 }
-var __defProp7, __name7, FILE_HASH_LENGTH, SKIP_DIRECTORIES, ARCHIVE_ONLY_SKIP_DIRECTORIES, DEFAULT_MAX_FILE_BYTES, KIND_BY_EXT, CHECK_BLOBS_MAX_HASHES, BackupHttpError, BackupHttpClient, DEFAULT_CONCURRENCY, CREDENTIAL_PATHS, WINDOWS_ABSOLUTE_PATH, ARCHIVE_SCHEMA_VERSION;
+var __defProp7, __name7, FILE_HASH_LENGTH, SKIP_DIRECTORIES, ARCHIVE_ONLY_SKIP_DIRECTORIES, DEFAULT_MAX_FILE_BYTES, KIND_BY_EXT, CHECK_BLOBS_MAX_HASHES, BackupHttpError, BackupHttpClient, DEFAULT_CONCURRENCY, CREDENTIAL_PATHS, WINDOWS_ABSOLUTE_PATH, ARCHIVE_SCHEMA_VERSION, SKILL_SOURCE_ARCHIVE_MAX_BYTES;
 var init_dist3 = __esm({
   "../shared-source-sync/dist/index.mjs"() {
     "use strict";
@@ -18748,6 +19596,7 @@ var init_dist3 = __esm({
     __name7(writeArchiveToWorkspace, "writeArchiveToWorkspace");
     __name(walk3, "walk");
     __name7(walk3, "walk");
+    SKILL_SOURCE_ARCHIVE_MAX_BYTES = 4 * 1024 * 1024;
   }
 });
 
@@ -18891,8 +19740,8 @@ var init_base_handler = __esm({
       * Local items take priority for shared IDs; server-only orphans are appended as minimal
       * cleanItem objects. On server failure, returns local items only with an empty orphan set.
       */
-      async fetchMergedForInteraction(apiKey, agentId, config) {
-        const serverData = await this.fetchServerState(apiKey, agentId);
+      async fetchMergedForInteraction(apiKey, agentId2, config) {
+        const serverData = await this.fetchServerState(apiKey, agentId2);
         const localItems = this.getFromYaml(config);
         if (!serverData.serverItems) {
           return {
@@ -18919,9 +19768,9 @@ var init_base_handler = __esm({
         };
       }
       /** Phase 1 of parallel sync: fetch server state (HTTP only, no YAML writes) */
-      async fetchServerState(apiKey, agentId) {
+      async fetchServerState(apiKey, agentId2) {
         try {
-          const api = this.getApi(apiKey, agentId);
+          const api = this.getApi(apiKey, agentId2);
           const serverItems = await this.fetchFromServer(api);
           return {
             serverItems
@@ -19034,11 +19883,11 @@ var init_base_handler = __esm({
           orphanedCount
         };
       }
-      async syncWithServer(apiKey, agentId, config, manifest) {
-        const serverData = await this.fetchServerState(apiKey, agentId);
+      async syncWithServer(apiKey, agentId2, config, manifest) {
+        const serverData = await this.fetchServerState(apiKey, agentId2);
         return this.applySyncToYaml(serverData, config, manifest, {
           apiKey,
-          agentId
+          agentId: agentId2
         });
       }
       /**
@@ -19179,8 +20028,8 @@ var init_base_handler = __esm({
       /**
       * Get the highest version string from the server for conflict avoidance.
       */
-      async getHighestServerVersion(apiKey, agentId, entityId) {
-        const { serverItems } = await this.fetchServerState(apiKey, agentId);
+      async getHighestServerVersion(apiKey, agentId2, entityId) {
+        const { serverItems } = await this.fetchServerState(apiKey, agentId2);
         if (!serverItems) return null;
         const entity = serverItems.find((item) => item.id === entityId);
         if (!entity?.versions || !Array.isArray(entity.versions)) return null;
@@ -19192,9 +20041,9 @@ var init_base_handler = __esm({
       * Fetch all server items once, extract highest version for each entity ID.
       * More efficient than calling getHighestServerVersion() per entity.
       */
-      async batchGetHighestVersions(apiKey, agentId, entityIds) {
+      async batchGetHighestVersions(apiKey, agentId2, entityIds) {
         const result = /* @__PURE__ */ new Map();
-        const { serverItems } = await this.fetchServerState(apiKey, agentId);
+        const { serverItems } = await this.fetchServerState(apiKey, agentId2);
         if (!serverItems) {
           entityIds.forEach((id2) => result.set(id2, null));
           return result;
@@ -19320,8 +20169,8 @@ var init_skill_handler = __esm({
         yamlKey: "skills",
         idField: "skillId"
       };
-      getApi(apiKey, agentId) {
-        return new SkillApi(BASE_URLS.API, apiKey, agentId);
+      getApi(apiKey, agentId2) {
+        return new SkillApi(BASE_URLS.API, apiKey, agentId2);
       }
       async fetchFromServer(api) {
         const response = await api.getSkills();
@@ -19421,8 +20270,8 @@ var init_skill_handler = __esm({
       // ===========================================================================
       // PUSH — custom to include tools array
       // ===========================================================================
-      async pushToServer(apiKey, agentId, entityId, pushData) {
-        const api = this.getApi(apiKey, agentId);
+      async pushToServer(apiKey, agentId2, entityId, pushData) {
+        const api = this.getApi(apiKey, agentId2);
         const response = await api.pushSkill(entityId, {
           ...pushData,
           skillId: entityId
@@ -19432,8 +20281,8 @@ var init_skill_handler = __esm({
           error: response.error?.message
         };
       }
-      async publishVersion(apiKey, agentId, entityId, version) {
-        const api = this.getApi(apiKey, agentId);
+      async publishVersion(apiKey, agentId2, entityId, version) {
+        const api = this.getApi(apiKey, agentId2);
         const response = await api.publishSkillVersion(entityId, version);
         return {
           success: response.success,
@@ -20134,9 +20983,9 @@ var init_products_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       async get(pageOrOptions, limitArg) {
         let page;
@@ -20722,9 +21571,9 @@ var init_order_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Creates a new order from a basket
@@ -20819,10 +21668,10 @@ var init_basket_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
         this.credential = credential;
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Creates a new user basket
@@ -21204,10 +22053,10 @@ var init_user_data_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId, targetUserId) {
+      constructor(baseUrl, credential, agentId2, targetUserId) {
         super(baseUrl, credential);
         this.credential = credential;
-        this.agentId = agentId;
+        this.agentId = agentId2;
         this.targetUserId = targetUserId;
       }
       get dataPath() {
@@ -21606,9 +22455,9 @@ var init_custom_data_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Lists the agent's data collections with entry counts, timestamps, and —
@@ -21816,9 +22665,9 @@ var init_webhook_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Retrieves all webhooks for the agent
@@ -22119,10 +22968,10 @@ var init_job_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
         this.credential = credential;
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Retrieves all jobs for the agent
@@ -22322,8 +23171,8 @@ var init_ai_api_service = __esm({
         __name(this, "AiApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       async generate(body) {
         return this.httpPost(`/developer/ai/${this.agentId}/generate`, body, {});
@@ -22431,8 +23280,8 @@ var init_integrations_api_service = __esm({
         __name(this, "IntegrationsApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       async passthrough(integrationType, request, options) {
         return this.httpPost(`/developer/unifiedto/connections/${encodeURIComponent(this.agentId)}/passthrough/${encodeURIComponent(integrationType)}`, options?.connectionId ? {
@@ -22441,12 +23290,12 @@ var init_integrations_api_service = __esm({
         } : request, {});
       }
       /** wave 2 U6 — `GET /developer/unifiedto/connections/:agentId/visible` for `agentId` (default: this agent). */
-      async listVisible(agentId = this.agentId) {
-        return this.httpGet(`/developer/unifiedto/connections/${encodeURIComponent(agentId)}/visible`);
+      async listVisible(agentId2 = this.agentId) {
+        return this.httpGet(`/developer/unifiedto/connections/${encodeURIComponent(agentId2)}/visible`);
       }
       /** wave 2 U6 — `POST /developer/unifiedto/connections/:agentId/:connectionId/checks`. */
-      async runCheck(connectionId, check, options = {}, agentId = this.agentId) {
-        return this.httpPost(`/developer/unifiedto/connections/${encodeURIComponent(agentId)}/${encodeURIComponent(connectionId)}/checks`, {
+      async runCheck(connectionId, check, options = {}, agentId2 = this.agentId) {
+        return this.httpPost(`/developer/unifiedto/connections/${encodeURIComponent(agentId2)}/${encodeURIComponent(connectionId)}/checks`, {
           check,
           ...options.allowWrite === true ? {
             allowWrite: true
@@ -22588,10 +23437,14 @@ var init_agents_api_service = __esm({
       * `(prompt)` call returns plain text and the `(input)` call returns the
       * full structured output.
       */
-      async invokeForSandbox(targetAgentId, promptOrInput) {
-        const input = typeof promptOrInput === "string" ? {
+      async invokeForSandbox(targetAgentId, promptOrInput, options) {
+        const base = typeof promptOrInput === "string" ? {
           prompt: promptOrInput
         } : promptOrInput;
+        const input = !base.signal && options?.signal ? {
+          ...base,
+          signal: options.signal
+        } : base;
         if (isAborted2(input.signal)) throw abortReason(input.signal);
         const result = await this.invoke(targetAgentId, input);
         if (!result.success) {
@@ -22601,8 +23454,20 @@ var init_agents_api_service = __esm({
         if (!result.data) {
           throw new Error("Agent invocation failed: empty response");
         }
-        if (typeof promptOrInput === "string") return result.data.text ?? "";
         const data = result.data;
+        if (data?.type === "error") {
+          if (isPaymentRequiredChatErrorEnvelope(data)) {
+            throw Object.assign(new Error(data.error || "Payment required"), {
+              name: "AgentInvocationError",
+              code: "PAYMENT_REQUIRED",
+              statusCode: 402
+            });
+          }
+          throw Object.assign(new Error(data.error || "Agent invocation failed"), {
+            name: "AgentInvocationError",
+            code: "AGENT_ERROR"
+          });
+        }
         if (data?.type === "preprocessor_blocked") {
           throw Object.assign(new Error(data.text || "Agent invocation blocked by preprocessor"), {
             name: "AgentInvocationError",
@@ -22617,9 +23482,29 @@ var init_agents_api_service = __esm({
             stage: data.governanceBlock?.stage
           });
         }
+        if (typeof promptOrInput === "string") return data.text ?? "";
         return toInvocationOutput(data, input.threadId);
       }
       /**
+      * BAC-2154 — the offline twin of `Agents.jobs(agentId).register`. A registration changes what a live agent runs,
+      * like `workflows.deploy`, so it is always refused offline, with no network call. Bad arguments are refused first.
+      * @experimental Gives `lua test` a typed refusal; the live call is served by the platform.
+      */
+      async registerJobForSandbox(targetAgentId, input) {
+        const refuse = /* @__PURE__ */ __name((code, message) => {
+          throw Object.assign(new Error(message), {
+            name: "SupervisionError",
+            code
+          });
+        }, "refuse");
+        if (!targetAgentId) refuse("supervision_no_target", "A target agent id is required");
+        const nonEmpty = /* @__PURE__ */ __name((v) => typeof v === "string" && v.length > 0, "nonEmpty");
+        if (!nonEmpty(input?.versionId) || !nonEmpty(input?.jobId)) {
+          refuse("supervision_bad_args", "jobs.register needs a non-empty versionId and jobId");
+        }
+        return refuse("supervision_release_offline_refused", "jobs.register is refused offline: a local test never changes a live agent");
+      }
+      /**
       * EM-WS2 — the offline (`lua test` / `lua dev`) twin of the `Agents.*`
       * supervision members. Read ops go to the developer REST routes with YOUR
       * developer credential (so they return what you can see, not what a
@@ -22637,7 +23522,8 @@ var init_agents_api_service = __esm({
             code
           });
         }, "refuse");
-        if (op === "versions.promote" || op === "persona.activate" || op === "versions.delete" || op === "workflows.create" || op === "workflows.push" || op === "workflows.deploy") {
+        if (op === "versions.promote" || // WD — a watchdog rollback changes what a live agent serves, like a promote.
+        op === "versions.rollback" || op === "persona.activate" || op === "versions.delete" || op === "workflows.create" || op === "workflows.push" || op === "workflows.deploy") {
           refuse("supervision_release_offline_refused", `${op} is refused offline: a local test never changes a live agent`);
         }
         if (op === "versions.preview" || op === "agents.list" || op === "agents.get" || op === "source.get" || // U25 — a subscription is live platform state (it starts a deployed trigger): never from a local test.
@@ -22805,6 +23691,8 @@ var init_agents_api_service = __esm({
           case "evals.cancel":
           case "owner.notify":
           case "connections.assign":
+          // SV (LUA-1080) — the live pointers are not exposed on a developer route: platform only.
+          case "primitives.deployed":
             return refuse("supervision_offline_unsupported", `${op} is not available offline; run it on the platform`);
           default:
             return refuse("supervision_unknown_op", `Unknown supervision operation ${String(op)}`);
@@ -22867,9 +23755,9 @@ var init_whatsapp_templates_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Lists WhatsApp templates for a channel with optional pagination and search
@@ -23007,9 +23895,9 @@ var init_developer_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Retrieves all environment variables for the agent in production
@@ -23122,9 +24010,9 @@ var init_developer_api_service = __esm({
       * @param email - The email address to look up
       * @returns Promise resolving to an ApiResponse containing the profile, or null if not found
       */
-      async getUserProfileByEmail(email, agentId) {
+      async getUserProfileByEmail(email, agentId2) {
         const path3 = `/developer/user/profile/email/${encodeURIComponent(email)}`;
-        const scopedPath = agentId ? `${path3}?agentId=${encodeURIComponent(agentId)}` : path3;
+        const scopedPath = agentId2 ? `${path3}?agentId=${encodeURIComponent(agentId2)}` : path3;
         return this.httpGet(scopedPath, {});
       }
       /**
@@ -23132,10 +24020,10 @@ var init_developer_api_service = __esm({
       * @param phone - The phone number to look up (with or without + prefix)
       * @returns Promise resolving to an ApiResponse containing the profile, or null if not found
       */
-      async getUserProfileByPhone(phone, agentId) {
+      async getUserProfileByPhone(phone, agentId2) {
         const normalizedPhone = phone.replace(/^\+/, "");
         const path3 = `/developer/user/profile/phone/${normalizedPhone}`;
-        const scopedPath = agentId ? `${path3}?agentId=${encodeURIComponent(agentId)}` : path3;
+        const scopedPath = agentId2 ? `${path3}?agentId=${encodeURIComponent(agentId2)}` : path3;
         return this.httpGet(scopedPath, {});
       }
       /**
@@ -23143,9 +24031,9 @@ var init_developer_api_service = __esm({
       * @param identity - `{ kind, scope, value }`, e.g. from `Lua.request.sender`
       * @returns Promise resolving to an ApiResponse containing the profile, or null if not found
       */
-      async getUserProfileByIdentity(identity, agentId) {
+      async getUserProfileByIdentity(identity, agentId2) {
         const path3 = `/developer/user/profile/identity/${encodeURIComponent(identity.kind)}/${encodeURIComponent(identity.value)}`;
-        return this.httpGet(`${path3}?scope=${encodeURIComponent(identity.scope)}&agentId=${encodeURIComponent(agentId)}`, {});
+        return this.httpGet(`${path3}?scope=${encodeURIComponent(identity.scope)}&agentId=${encodeURIComponent(agentId2)}`, {});
       }
     };
   }
@@ -23162,9 +24050,9 @@ var init_voice_api_service = __esm({
         __name(this, "VoiceApi");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       async getVoices() {
         return this.httpGet(`/developer/voice-agents/${this.agentId}`, {});
@@ -23255,8 +24143,8 @@ var init_channels_send_api_service = __esm({
         __name(this, "ChannelsSendApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       /** POST /developer/agents/:agentId/channels/send */
       async send(input) {
@@ -23378,8 +24266,8 @@ var init_inbox_push_api_service = __esm({
         __name(this, "InboxPushApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       /** POST /developer/agents/:agentId/inbox/push */
       async push(input) {
@@ -23400,8 +24288,8 @@ var init_directory_api_service = __esm({
         __name(this, "DirectoryApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       /** POST /developer/agents/:agentId/directory/resolve */
       async resolve(name) {
@@ -23472,9 +24360,22 @@ function createWorkflowsRuntime(getApi) {
     },
     async list(opts = {}) {
       const api = await getApi();
-      const ref = opts.workflow ? await resolveRef(api, opts.workflow) : {};
+      let workflowId;
+      if (opts.workflow) {
+        const v = opts.workflow.trim();
+        const defs = await api.getWorkflows({
+          includeDynamic: true
+        });
+        const hit = defs.success && defs.data ? defs.data.workflows.find((w) => w.name === v) ?? defs.data.workflows.find((w) => w.id === v) : void 0;
+        if (hit) workflowId = hit.id;
+        else if (isWorkflowIdShaped(v)) workflowId = v;
+        else {
+          unwrap(defs, "Workflows.list");
+          return [];
+        }
+      }
       const page = unwrap(await api.getRuns({
-        workflowId: ref.workflowId,
+        workflowId,
         status: opts.status,
         limit: opts.limit,
         correlationKey: opts.correlationKey,
@@ -23512,12 +24413,15 @@ function createWorkflowsRuntime(getApi) {
         ...opts
       }), "Workflows.signalByKey");
     },
-    raiseBudget: unavailable("raiseBudget", "R45"),
+    async raiseBudget(runId, patch) {
+      const api = await getApi();
+      return unwrap(await api.raiseBudget(runId, patch), "Workflows.raiseBudget");
+    },
     // Goals are scoped to the bound agent: the IF-21 `agentId` argument is parity with the HTTP twin
     // (`/workflows/:agentId/goals`), never a way to reach another agent's goals (403 otherwise).
-    async setGoal(agentId, goal) {
+    async setGoal(agentId2, goal) {
       const api = await getApi();
-      assertBoundAgent(api, agentId, "setGoal");
+      assertBoundAgent(api, agentId2, "setGoal");
       const g = goal;
       const target = g.workflowId ?? g.workflow;
       const ref = target ? await resolveRef(api, target) : {};
@@ -23527,35 +24431,35 @@ function createWorkflowsRuntime(getApi) {
       }), "Workflows.setGoal");
     },
     goals: {
-      async list(agentId, opts = {}) {
+      async list(agentId2, opts = {}) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.list");
+        assertBoundAgent(api, agentId2, "goals.list");
         return unwrap(await api.getGoals(opts), "Workflows.goals.list").items;
       },
-      async get(agentId, goalId) {
+      async get(agentId2, goalId) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.get");
+        assertBoundAgent(api, agentId2, "goals.get");
         return unwrap(await api.getGoal(goalId), "Workflows.goals.get");
       },
-      async pause(agentId, goalId) {
+      async pause(agentId2, goalId) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.pause");
+        assertBoundAgent(api, agentId2, "goals.pause");
         return unwrap(await api.pauseGoal(goalId), "Workflows.goals.pause");
       },
-      async resume(agentId, goalId) {
+      async resume(agentId2, goalId) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.resume");
+        assertBoundAgent(api, agentId2, "goals.resume");
         return unwrap(await api.resumeGoal(goalId), "Workflows.goals.resume");
       },
-      async close(agentId, goalId, opts = {}) {
+      async close(agentId2, goalId, opts = {}) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.close");
+        assertBoundAgent(api, agentId2, "goals.close");
         return unwrap(await api.closeGoal(goalId, opts), "Workflows.goals.close");
       }
     }
   };
 }
-var WORKFLOW_START_MAX_WAIT_SECONDS, WORKFLOW_START_CLIENT_DEADLINE_SLACK_MS, WorkflowApiError, unwrap, assertBoundAgent, pathId, unavailable, WorkflowApi;
+var WORKFLOW_START_MAX_WAIT_SECONDS, WORKFLOW_START_CLIENT_DEADLINE_SLACK_MS, WorkflowApiError, unwrap, isWorkflowIdShaped, assertBoundAgent, pathId, WorkflowApi;
 var init_workflow_api_service = __esm({
   "src/api/workflow.api.service.ts"() {
     "use strict";
@@ -23587,15 +24491,13 @@ var init_workflow_api_service = __esm({
       }
       return res.data;
     }, "unwrap");
-    assertBoundAgent = /* @__PURE__ */ __name((api, agentId, member) => {
-      if (agentId && agentId !== api.agentId) {
+    isWorkflowIdShaped = /* @__PURE__ */ __name((v) => /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(v) || /^wfc?_[A-Za-z0-9]/.test(v), "isWorkflowIdShaped");
+    assertBoundAgent = /* @__PURE__ */ __name((api, agentId2, member) => {
+      if (agentId2 && agentId2 !== api.agentId) {
         throw new WorkflowApiError("FORBIDDEN", `Workflows.${member}: goals are scoped to the bound agent ${api.agentId}`, 403);
       }
     }, "assertBoundAgent");
     pathId = /* @__PURE__ */ __name((id2) => encodeURIComponent(id2), "pathId");
-    unavailable = /* @__PURE__ */ __name((member, route2) => async () => {
-      throw new WorkflowApiError("WORKFLOWS_API_UNAVAILABLE", `Workflows.${member} is not available in this runtime yet (${route2} lands with a later wave)`, 501);
-    }, "unavailable");
     __name(createWorkflowsRuntime, "createWorkflowsRuntime");
     WorkflowApi = class extends HttpClient {
       static {
@@ -23603,10 +24505,10 @@ var init_workflow_api_service = __esm({
       }
       credential;
       agentId;
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
         this.credential = credential;
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /** PRO-1434 (main sync): auth rides the renewable request credential — resolve a current bearer per call. */
       async auth() {
@@ -24009,9 +24911,9 @@ var init_device_api_service = __esm({
         __name(this, "DeviceApi");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       async getDevices() {
         return this.httpGet(`/developer/devices/${this.agentId}`, {});
@@ -24035,20 +24937,35 @@ var init_device_api_service = __esm({
         return this.httpDelete(`/developer/devices/${this.agentId}/${deviceId}`, {});
       }
       async sendCommand(deviceName, command, payload, timeout) {
-        return this.httpPost(`/developer/devices/${this.agentId}/${deviceName}/command`, {
+        return this.httpPost(`/developer/devices/${this.agentId}/${encodeURIComponent(deviceName)}/command`, {
           command,
           payload,
           timeout: timeout || 3e4
         }, {});
       }
       async getDeviceStatus(deviceName) {
-        return this.httpGet(`/developer/devices/${this.agentId}/${deviceName}/status`, {});
+        return this.httpGet(`/developer/devices/${this.agentId}/${encodeURIComponent(deviceName)}/status`, {});
       }
       async enableDevice(deviceName) {
-        return this.httpPatch(`/developer/devices/${this.agentId}/${deviceName}/enable`, {}, {});
+        return this.httpPatch(`/developer/devices/${this.agentId}/${encodeURIComponent(deviceName)}/enable`, {}, {});
       }
       async disableDevice(deviceName) {
-        return this.httpPatch(`/developer/devices/${this.agentId}/${deviceName}/disable`, {}, {});
+        return this.httpPatch(`/developer/devices/${this.agentId}/${encodeURIComponent(deviceName)}/disable`, {}, {});
+      }
+      /** Device instances the agent has seen, with live status; self-describing devices only appear here. */
+      async getConnectedDevices() {
+        return this.httpGet(`/developer/devices/${this.agentId}/connected`, {});
+      }
+      /** Fire a trigger as the named device would; the live handler runs. */
+      async fireTrigger(deviceName, triggerName, payload) {
+        return this.httpPost(`/developer/devices/${this.agentId}/${encodeURIComponent(deviceName)}/trigger`, {
+          triggerName,
+          payload
+        }, {});
+      }
+      /** Remove a connected device's instance record (not its definition). */
+      async deleteDeviceInstance(deviceName) {
+        return this.httpDelete(`/developer/devices/${this.agentId}/${encodeURIComponent(deviceName)}/instance`, {});
       }
     };
   }
@@ -24344,8 +25261,8 @@ var init_secrets_api_service = __esm({
         __name(this, "SecretsApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       unwrap(result, what) {
         if (!result.success || result.data === void 0) {
@@ -24424,6 +25341,14 @@ function requireExpectActiveId(opts, what) {
 }
 __name(requireExpectActiveId, "requireExpectActiveId");
 __name2(requireExpectActiveId, "requireExpectActiveId");
+function optionalCommitHash(opts, what) {
+  const commitHash = opts?.commitHash;
+  if (commitHash === void 0) return void 0;
+  if (typeof commitHash === "string" && commitHash.length > 0) return commitHash;
+  throw typedError("supervision_bad_args", `${what} commitHash must be a non-empty string`);
+}
+__name(optionalCommitHash, "optionalCommitHash");
+__name2(optionalCommitHash, "optionalCommitHash");
 function approvalIdsOf(approval) {
   if (approval === void 0 || approval === null) return void 0;
   if (typeof approval !== "object" || Array.isArray(approval)) return {
@@ -24447,26 +25372,26 @@ function buildSupervisionAgentsApi(call2) {
     /** Agents of the caller's own organization, with the supervision actions the caller holds on each. */
     list: /* @__PURE__ */ __name2(() => call2("agents.list"), "list"),
     /** One agent of the caller's organization (not found = other org or no such agent). */
-    get: /* @__PURE__ */ __name2((agentId) => call2("agents.get", agentId), "get"),
+    get: /* @__PURE__ */ __name2((agentId2) => call2("agents.get", agentId2), "get"),
     /** Recent execution logs of a supervised agent (metadata + message, no user ids). */
-    logs: /* @__PURE__ */ __name2((agentId, opts = {}) => call2("logs", agentId, {
+    logs: /* @__PURE__ */ __name2((agentId2, opts = {}) => call2("logs", agentId2, {
       ...opts
     }), "logs"),
-    runs: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2((opts = {}) => call2("runs.list", agentId, {
+    runs: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2((opts = {}) => call2("runs.list", agentId2, {
         ...opts
       }), "list"),
-      get: /* @__PURE__ */ __name2((runId) => call2("runs.get", agentId, {
+      get: /* @__PURE__ */ __name2((runId) => call2("runs.get", agentId2, {
         runId
       }), "get")
     }), "runs"),
     /** Read-only, and only the collections the org admin named on the supervision grant. */
-    data: /* @__PURE__ */ __name2((agentId) => ({
-      get: /* @__PURE__ */ __name2((collection, entryId) => call2("data.get", agentId, {
+    data: /* @__PURE__ */ __name2((agentId2) => ({
+      get: /* @__PURE__ */ __name2((collection, entryId) => call2("data.get", agentId2, {
         collection,
         entryId
       }), "get"),
-      query: /* @__PURE__ */ __name2((collection, filter, opts = {}) => call2("data.query", agentId, {
+      query: /* @__PURE__ */ __name2((collection, filter, opts = {}) => call2("data.query", agentId2, {
         collection,
         ...filter ? {
           filter
@@ -24474,19 +25399,19 @@ function buildSupervisionAgentsApi(call2) {
         ...opts
       }), "query")
     }), "data"),
-    versions: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2((opts = {}) => call2("versions.list", agentId, {
+    versions: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2((opts = {}) => call2("versions.list", agentId2, {
         ...opts
       }), "list"),
-      get: /* @__PURE__ */ __name2((version) => call2("versions.get", agentId, {
+      get: /* @__PURE__ */ __name2((version) => call2("versions.get", agentId2, {
         version
       }), "get"),
-      diff: /* @__PURE__ */ __name2((from, to) => call2("versions.diff", agentId, {
+      diff: /* @__PURE__ */ __name2((from, to) => call2("versions.diff", agentId2, {
         from,
         to
       }), "diff"),
       /** Chat a staged version. No tools run unless `opts.toolScope.skillIds` allowlists them. */
-      preview: /* @__PURE__ */ __name2((version, prompt, opts = {}) => call2("versions.preview", agentId, {
+      preview: /* @__PURE__ */ __name2((version, prompt, opts = {}) => call2("versions.preview", agentId2, {
         version,
         prompt,
         ...opts.toolScope ? {
@@ -24494,14 +25419,28 @@ function buildSupervisionAgentsApi(call2) {
         } : {}
       }), "preview"),
       /** Make `version` live. Compare-and-swap: refused unless `expectActive` is the live version. */
-      promote: /* @__PURE__ */ __name2(async (version, opts) => call2("versions.promote", agentId, {
+      promote: /* @__PURE__ */ __name2(async (version, opts) => call2("versions.promote", agentId2, {
         version,
         expectActive: requireExpectActive(opts, "versions.promote")
       }), "promote"),
       /** Soft-delete a SUPERSEDED version (the active version and the last version are refused). */
-      delete: /* @__PURE__ */ __name2((version) => call2("versions.delete", agentId, {
+      delete: /* @__PURE__ */ __name2((version) => call2("versions.delete", agentId2, {
         version
       }), "delete"),
+      /**
+      * WD — restore a previously-active, OLDER `version` (watchdog grant; last 7 days; only from a workflow step the
+      * grant names). Compare-and-swap: `expectActive` is the active version number now (required, never null).
+      */
+      rollback: /* @__PURE__ */ __name2(async (version, opts) => {
+        const expectActive = requireExpectActive(opts, "versions.rollback");
+        if (expectActive === null) {
+          throw typedError("supervision_expect_active_required", "versions.rollback requires { expectActive } \u2014 the active version number (a rollback needs one)");
+        }
+        return call2("versions.rollback", agentId2, {
+          version,
+          expectActive
+        });
+      }, "rollback"),
       // wave 2 U11
       /**
       * U11 (DOC2 §6.1) — open a TEST SESSION on staged `opts.version`: multi-turn `chat`, `fire`, `effects()` and
@@ -24509,20 +25448,30 @@ function buildSupervisionAgentsApi(call2) {
       * tools) and never gets `egress: 'live'`.
       */
       session: /* @__PURE__ */ __name2(async (opts) => {
-        const opened = await call2("versions.session", agentId, {
+        const opened = await call2("versions.session", agentId2, {
           ...opts
         });
-        return buildTestSessionHandle(call2, agentId, opened);
+        return buildTestSessionHandle(call2, agentId2, opened);
       }, "session")
     }), "versions"),
+    /**
+    * BAC-2011 — register a job pinned in a STAGED `versionId` of the target (`supervision:register-job`, only from a
+    * workflow step the grant names). The job goes live with the ordinary promote of that version.
+    */
+    jobs: /* @__PURE__ */ __name2((agentId2) => ({
+      register: /* @__PURE__ */ __name2((opts) => call2("jobs.register", agentId2, {
+        versionId: opts?.versionId,
+        jobId: opts?.jobId
+      }), "register")
+    }), "jobs"),
     /** Read (`observe`) and release (`release`) a workflow of a supervised agent. */
-    workflows: /* @__PURE__ */ __name2((agentId) => ({
+    workflows: /* @__PURE__ */ __name2((agentId2) => ({
       /** One workflow: its live `activeVersionId` (deploy's `expectActive`) and its latest 20 versions. */
-      get: /* @__PURE__ */ __name2((workflowId) => call2("workflows.get", agentId, {
+      get: /* @__PURE__ */ __name2((workflowId) => call2("workflows.get", agentId2, {
         workflowId
       }), "get"),
       /** Create workflow `name` (inert: inactive, no version) or answer the existing one: `{ workflowId, name, created }`. */
-      create: /* @__PURE__ */ __name2((name, opts = {}) => call2("workflows.create", agentId, {
+      create: /* @__PURE__ */ __name2((name, opts = {}) => call2("workflows.create", agentId2, {
         name,
         ...opts?.description !== void 0 ? {
           description: opts.description
@@ -24532,52 +25481,65 @@ function buildSupervisionAgentsApi(call2) {
         } : {}
       }), "create"),
       /** Push a new, INACTIVE version (`activate` is always forced off; deploy it with `deploy`). */
-      push: /* @__PURE__ */ __name2((workflowId, definition) => call2("workflows.push", agentId, {
+      push: /* @__PURE__ */ __name2((workflowId, definition) => call2("workflows.push", agentId2, {
         workflowId,
         definition: {
           ...definition
         }
       }), "push"),
       /** Publish workflow `version`. Compare-and-swap: refused unless `expectActive` is the live version id. */
-      deploy: /* @__PURE__ */ __name2(async (workflowId, version, opts) => call2("workflows.deploy", agentId, {
-        workflowId,
-        version,
-        expectActive: requireExpectActiveId(opts, "workflows.deploy")
-      }), "deploy")
+      deploy: /* @__PURE__ */ __name2(async (workflowId, version, opts) => {
+        const expectActive = requireExpectActiveId(opts, "workflows.deploy");
+        const commitHash = optionalCommitHash(opts, "workflows.deploy");
+        return call2("workflows.deploy", agentId2, {
+          workflowId,
+          version,
+          expectActive,
+          ...commitHash !== void 0 ? {
+            commitHash
+          } : {}
+        });
+      }, "deploy")
     }), "workflows"),
-    persona: /* @__PURE__ */ __name2((agentId) => ({
-      versions: /* @__PURE__ */ __name2(() => call2("persona.versions", agentId), "versions"),
+    persona: /* @__PURE__ */ __name2((agentId2) => ({
+      versions: /* @__PURE__ */ __name2(() => call2("persona.versions", agentId2), "versions"),
       /** Serve persona `version`. Compare-and-swap on the served persona version. */
-      activate: /* @__PURE__ */ __name2(async (version, opts) => call2("persona.activate", agentId, {
+      activate: /* @__PURE__ */ __name2(async (version, opts) => call2("persona.activate", agentId2, {
         version,
         expectActive: requireExpectActive(opts, "persona.activate")
       }), "activate")
     }), "persona"),
-    source: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2(() => call2("source.list", agentId), "list"),
-      get: /* @__PURE__ */ __name2((path3) => call2("source.get", agentId, {
+    source: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2(() => call2("source.list", agentId2), "list"),
+      get: /* @__PURE__ */ __name2((path3) => call2("source.get", agentId2, {
         path: path3
       }), "get")
     }), "source"),
     /** Environment variable NAMES only — values are never returned. */
-    env: /* @__PURE__ */ __name2((agentId) => ({
-      keys: /* @__PURE__ */ __name2(() => call2("env.keys", agentId), "keys")
+    env: /* @__PURE__ */ __name2((agentId2) => ({
+      keys: /* @__PURE__ */ __name2(() => call2("env.keys", agentId2), "keys")
     }), "env"),
     /**
+    * SV (LUA-1080) — what `agentId` serves RIGHT NOW: its live skills (with tools), the published persona and its
+    * pre/postprocessors, each with the version id an agent version snapshot would pin. Works with no promoted agent
+    * version, so a release can diff live against a staged version. Metadata and hashes only (`observe`).
+    */
+    deployed: /* @__PURE__ */ __name2((agentId2) => call2("primitives.deployed", agentId2), "deployed"),
+    /**
     * U25 — supervision events of the target (`observe`): each event of a subscribed kind starts
     * one of the CALLER's own triggers (`triggerName`) with a `source: 'supervision'` body.
     */
-    events: /* @__PURE__ */ __name2((agentId) => ({
-      subscribe: /* @__PURE__ */ __name2((opts) => call2("events.subscribe", agentId, {
+    events: /* @__PURE__ */ __name2((agentId2) => ({
+      subscribe: /* @__PURE__ */ __name2((opts) => call2("events.subscribe", agentId2, {
         kinds: Array.isArray(opts?.kinds) ? [
           ...opts.kinds
         ] : opts?.kinds,
         triggerName: opts?.triggerName
       }), "subscribe"),
-      unsubscribe: /* @__PURE__ */ __name2((triggerName) => call2("events.unsubscribe", agentId, {
+      unsubscribe: /* @__PURE__ */ __name2((triggerName) => call2("events.unsubscribe", agentId2, {
         triggerName
       }), "unsubscribe"),
-      list: /* @__PURE__ */ __name2(() => call2("events.list", agentId), "list")
+      list: /* @__PURE__ */ __name2(() => call2("events.list", agentId2), "list")
     }), "events"),
     // wave 2 U1
     /**
@@ -24604,26 +25566,26 @@ function buildSupervisionAgentsApi(call2) {
       approval: approvalIdsOf(opts?.approval)
     }), "create"),
     // wave 2 U6 — the target's connections (`observe`): list, and READ catalogue checks only.
-    integrations: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2(() => call2("integrations.list", agentId), "list"),
-      check: /* @__PURE__ */ __name2((connectionId, check) => call2("integrations.check", agentId, {
+    integrations: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2(() => call2("integrations.list", agentId2), "list"),
+      check: /* @__PURE__ */ __name2((connectionId, check) => call2("integrations.check", agentId2, {
         connectionId,
         check
       }), "check")
     }), "integrations"),
     // wave 2 U30
     /** Recorded metrics of the target (`observe`): by `name` or `objectiveId`, bucketed `1h` / `1d`. */
-    metrics: /* @__PURE__ */ __name2((agentId) => ({
-      query: /* @__PURE__ */ __name2((q) => call2("metrics.query", agentId, {
+    metrics: /* @__PURE__ */ __name2((agentId2) => ({
+      query: /* @__PURE__ */ __name2((q) => call2("metrics.query", agentId2, {
         ...q
       }), "query")
     }), "metrics"),
     /** Objectives of the target: list (`observe`); propose (`act`) — never effective until the OWNER confirms. */
-    objectives: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2((opts = {}) => call2("objectives.list", agentId, {
+    objectives: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2((opts = {}) => call2("objectives.list", agentId2, {
         ...opts
       }), "list"),
-      propose: /* @__PURE__ */ __name2((proposal) => call2("objectives.propose", agentId, {
+      propose: /* @__PURE__ */ __name2((proposal) => call2("objectives.propose", agentId2, {
         proposal
       }), "propose")
     }), "objectives"),
@@ -24633,13 +25595,13 @@ function buildSupervisionAgentsApi(call2) {
     * `lastAgentChangeAt`, so a supervisor can back off while a person is working on the agent;
     * `acquire` / `release` (`act`) take, renew or drop the CALLER's own lease (1-240 minutes).
     */
-    lease: /* @__PURE__ */ __name2((agentId) => ({
-      get: /* @__PURE__ */ __name2(() => call2("lease.get", agentId), "get"),
-      acquire: /* @__PURE__ */ __name2((opts) => call2("lease.acquire", agentId, {
+    lease: /* @__PURE__ */ __name2((agentId2) => ({
+      get: /* @__PURE__ */ __name2(() => call2("lease.get", agentId2), "get"),
+      acquire: /* @__PURE__ */ __name2((opts) => call2("lease.acquire", agentId2, {
         ttlMinutes: opts?.ttlMinutes,
         reason: opts?.reason
       }), "acquire"),
-      release: /* @__PURE__ */ __name2(() => call2("lease.release", agentId), "release")
+      release: /* @__PURE__ */ __name2(() => call2("lease.release", agentId2), "release")
     }), "lease"),
     // wave 2 U4b
     /**
@@ -24648,15 +25610,15 @@ function buildSupervisionAgentsApi(call2) {
     * and revoke grants on it; external records are kept. `delete` also needs the agent's exact current name and
     * ends the 30-day restore window.
     */
-    lifecycle: /* @__PURE__ */ __name2((agentId) => ({
-      archive: /* @__PURE__ */ __name2(() => call2("lifecycle.archive", agentId), "archive"),
-      delete: /* @__PURE__ */ __name2((opts) => call2("lifecycle.delete", agentId, {
+    lifecycle: /* @__PURE__ */ __name2((agentId2) => ({
+      archive: /* @__PURE__ */ __name2(() => call2("lifecycle.archive", agentId2), "archive"),
+      delete: /* @__PURE__ */ __name2((opts) => call2("lifecycle.delete", agentId2, {
         confirmName: opts?.confirmName
       }), "delete")
     }), "lifecycle"),
     /** U4b — set the model, the name or NON-secret env keys (`act`); keys ending SECRET/TOKEN/KEY/PASSWORD refuse. */
-    config: /* @__PURE__ */ __name2((agentId) => ({
-      set: /* @__PURE__ */ __name2((input) => call2("config.set", agentId, {
+    config: /* @__PURE__ */ __name2((agentId2) => ({
+      set: /* @__PURE__ */ __name2((input) => call2("config.set", agentId2, {
         ...input?.model !== void 0 ? {
           model: input.model
         } : {},
@@ -24679,7 +25641,7 @@ function buildSupervisionAgentsApi(call2) {
     * `dataCollections`, and `notifyOwner` (the owner opts in to `notifyOwner` messages by approving it). When the
     * caller already holds a grant, the request upgrades it and the approver sees exactly what is added.
     */
-    requestAccess: /* @__PURE__ */ __name2((agentId, opts) => call2("access.request", agentId, {
+    requestAccess: /* @__PURE__ */ __name2((agentId2, opts) => call2("access.request", agentId2, {
       actions: Array.isArray(opts?.actions) ? [
         ...opts.actions
       ] : opts?.actions,
@@ -24712,15 +25674,15 @@ function buildSupervisionAgentsApi(call2) {
     * `'active'` — against a suite the owner defined (needs `supervision:preview` and the preview switch); results
     * are `observe`, transcripts (message bodies) need `observe-content`. `cancel` stops only runs you started.
     */
-    evals: /* @__PURE__ */ __name2((agentId) => ({
+    evals: /* @__PURE__ */ __name2((agentId2) => ({
       /** The target's suites (key, revision, case count, pass rate). */
-      suites: /* @__PURE__ */ __name2(() => call2("evals.suites.get", agentId, {}), "suites"),
+      suites: /* @__PURE__ */ __name2(() => call2("evals.suites.get", agentId2, {}), "suites"),
       /** One suite with its parsed cases. */
-      suite: /* @__PURE__ */ __name2((key) => call2("evals.suites.get", agentId, {
+      suite: /* @__PURE__ */ __name2((key) => call2("evals.suites.get", agentId2, {
         key
       }), "suite"),
       /** Start a run: `{ runId, estimate }`. Bounded by the suite budget, the agent's monthly cap and a daily cap. */
-      run: /* @__PURE__ */ __name2((opts) => call2("evals.run", agentId, {
+      run: /* @__PURE__ */ __name2((opts) => call2("evals.run", agentId2, {
         suite: opts?.suite,
         version: opts?.version,
         ...opts?.maxCredits !== void 0 ? {
@@ -24731,20 +25693,20 @@ function buildSupervisionAgentsApi(call2) {
         } : {}
       }), "run"),
       /** Runs, newest first (`suite`, `version`, `status`, `limit` ≤ 50, `before`). */
-      runs: /* @__PURE__ */ __name2((opts = {}) => call2("evals.get", agentId, {
+      runs: /* @__PURE__ */ __name2((opts = {}) => call2("evals.get", agentId2, {
         ...opts
       }), "runs"),
       /** One run with its per-case results (check detail and judge reasoning only with observe-content). */
-      getRun: /* @__PURE__ */ __name2((runId) => call2("evals.get", agentId, {
+      getRun: /* @__PURE__ */ __name2((runId) => call2("evals.get", agentId2, {
         runId
       }), "getRun"),
       /** One case's transcript (needs observe-content; a holdout case is not found). */
-      transcript: /* @__PURE__ */ __name2((runId, caseId) => call2("evals.get", agentId, {
+      transcript: /* @__PURE__ */ __name2((runId, caseId) => call2("evals.get", agentId2, {
         runId,
         caseId
       }), "transcript"),
       /** Cancel a queued or running run YOU started (works with the preview switch off). */
-      cancel: /* @__PURE__ */ __name2((runId) => call2("evals.cancel", agentId, {
+      cancel: /* @__PURE__ */ __name2((runId) => call2("evals.cancel", agentId2, {
         runId
       }), "cancel")
     }), "evals"),
@@ -24756,7 +25718,7 @@ function buildSupervisionAgentsApi(call2) {
     * An optional `idempotencyKey` makes a retry answer the first call's receipt instead of posting again; it is
     * forwarded only when present, so a keyless call sends exactly `{ message }`.
     */
-    notifyOwner: /* @__PURE__ */ __name2((agentId, input) => call2("owner.notify", agentId, {
+    notifyOwner: /* @__PURE__ */ __name2((agentId2, input) => call2("owner.notify", agentId2, {
       message: input?.message,
       ...input?.idempotencyKey !== void 0 ? {
         idempotencyKey: input.idempotencyKey
@@ -24771,8 +25733,8 @@ function buildSupervisionAgentsApi(call2) {
     * exactly `Give your <integration> connection to "<agentName>"?`, then call this from a code step of THAT run with
     * `{ approval: { runId, stepId } }`. Needs an `act` grant on the agent.
     */
-    connections: /* @__PURE__ */ __name2((agentId) => ({
-      assign: /* @__PURE__ */ __name2((connectionId, opts) => call2("connections.assign", agentId, {
+    connections: /* @__PURE__ */ __name2((agentId2) => ({
+      assign: /* @__PURE__ */ __name2((connectionId, opts) => call2("connections.assign", agentId2, {
         connectionId,
         approval: opts?.approval && typeof opts.approval === "object" ? {
           ...opts.approval
@@ -24784,8 +25746,8 @@ function buildSupervisionAgentsApi(call2) {
     * Attach requests held for `agentId` to its env (`act`, on the agent owner's own turn; never overwrites a key).
     * Answers the env keys set, never a value.
     */
-    secrets: /* @__PURE__ */ __name2((agentId) => ({
-      attach: /* @__PURE__ */ __name2((requestIds) => call2("secrets.attach", agentId, {
+    secrets: /* @__PURE__ */ __name2((agentId2) => ({
+      attach: /* @__PURE__ */ __name2((requestIds) => call2("secrets.attach", agentId2, {
         requestIds: copyList(requestIds)
       }), "attach")
     }), "secrets")
@@ -24800,14 +25762,14 @@ function copyList(value3) {
 }
 __name(copyList, "copyList");
 __name2(copyList, "copyList");
-function buildTestSessionHandle(call2, agentId, opened) {
+function buildTestSessionHandle(call2, agentId2, opened) {
   const sessionId = opened?.id;
   return {
     sessionId,
     version: opened?.version,
     session: opened,
     /** One multi-turn chat turn (same thread unless `threadId` names another key). */
-    chat: /* @__PURE__ */ __name2((input) => call2("sessions.chat", agentId, {
+    chat: /* @__PURE__ */ __name2((input) => call2("sessions.chat", agentId2, {
       sessionId,
       ...typeof input === "string" ? {
         prompt: input
@@ -24816,16 +25778,16 @@ function buildTestSessionHandle(call2, agentId, opened) {
       }
     }), "chat"),
     /** Fire one primitive against the staged version: `{ trigger, payload }` in this phase. */
-    fire: /* @__PURE__ */ __name2((input) => call2("sessions.fire", agentId, {
+    fire: /* @__PURE__ */ __name2((input) => call2("sessions.fire", agentId2, {
       sessionId,
       ...input
     }), "fire"),
     /** The effects the session recorded instead of executing. */
-    effects: /* @__PURE__ */ __name2(() => call2("sessions.effects", agentId, {
+    effects: /* @__PURE__ */ __name2(() => call2("sessions.effects", agentId2, {
       sessionId
     }), "effects"),
     /** Close: purges the session's shadow Data and recorded effects. */
-    close: /* @__PURE__ */ __name2(() => call2("sessions.close", agentId, {
+    close: /* @__PURE__ */ __name2(() => call2("sessions.close", agentId2, {
       sessionId
     }), "close")
   };
@@ -25344,7 +26306,7 @@ var LuaMCPServer = class {
       throw new Error("MCP server name is required");
     }
     if (config.transport === "stdio") {
-      throw new Error(`stdio transport is not supported yet. Please use 'streamable-http' (recommended) or 'sse' transport instead. See https://docs.heylua.ai/overview/mcp-servers for migration guide.`);
+      throw new Error(`stdio transport is not supported. Please use 'streamable-http' (recommended) or 'sse' transport instead. See https://docs.heylua.ai/overview/mcp-servers for migration guide.`);
     }
     if ((config.transport === "sse" || config.transport === "streamable-http") && !config.url) {
       throw new Error(`URL is required for ${config.transport} transport`);
@@ -25788,20 +26750,20 @@ init_order_instance();
 
 // src/api/threads.offline.ts
 init_dist();
-function unavailable2(member) {
+function unavailable(member) {
   return Object.assign(new Error(`Threads.${member} only runs on the Lua platform (deployed or sandbox agents), not in lua test / lua dev`), {
     name: "ThreadFollowUpError",
     code: THREAD_FOLLOW_UP_ERRORS.UNAVAILABLE
   });
 }
-__name(unavailable2, "unavailable");
+__name(unavailable, "unavailable");
 function createOfflineThreadsApi() {
   return {
     open: /* @__PURE__ */ __name(async () => {
-      throw unavailable2("open");
+      throw unavailable("open");
     }, "open"),
     followUp: /* @__PURE__ */ __name(async () => {
-      throw unavailable2("followUp");
+      throw unavailable("followUp");
     }, "followUp")
   };
 }
@@ -26460,7 +27422,14 @@ var Agents = {
     const { getAgentsInstance: getAgentsInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
     const agents = await getAgentsInstance2();
     return agents.superviseForSandbox(op, targetAgentId, args);
-  })
+  }),
+  jobs: /* @__PURE__ */ __name((agentId2) => ({
+    register: /* @__PURE__ */ __name(async (input) => {
+      const { getAgentsInstance: getAgentsInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+      const agents = await getAgentsInstance2();
+      return agents.registerJobForSandbox(agentId2, input);
+    }, "register")
+  }), "jobs")
 };
 var Voice = {
   async call(input) {