lua-cli 3.45.0 → 3.46.0

package/dist/api-exports.js

@@ -19,6 +19,7 @@ import { z } from "zod";
 import { z as z2 } from "zod";
 import { z as z3 } from "zod";
 import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 function isChannelConversationChannel(channel) {
   return !!channel && CHANNEL_CONVERSATION_CHANNELS.includes(channel);
 }
@@ -156,8 +157,8 @@ function isUnsafeConnectionPathPart(pathPart) {
 function isPlatformInvocationCaller(v) {
   return typeof v === "string" && PLATFORM_INVOCATION_CALLERS.includes(v);
 }
-function supervisionSubjectId(agentId) {
-  return `agent:${agentId}`;
+function supervisionSubjectId(agentId2) {
+  return `agent:${agentId2}`;
 }
 function isSupervisionOp(op) {
   return typeof op === "string" && Object.prototype.hasOwnProperty.call(SUPERVISION_OPS, op);
@@ -851,9 +852,9 @@ function isAgentConnectionBindingLoosening(previous, next) {
 function isAgentConnectionMountMode(value3) {
   return typeof value3 === "string" && AGENT_CONNECTION_MOUNT_MODES.includes(value3);
 }
-function agentConnectionBindingFor(bindings, agentId) {
-  if (!Array.isArray(bindings) || !agentId) return void 0;
-  return bindings.find((entry) => !!entry && typeof entry === "object" && entry.agentId === agentId);
+function agentConnectionBindingFor(bindings, agentId2) {
+  if (!Array.isArray(bindings) || !agentId2) return void 0;
+  return bindings.find((entry) => !!entry && typeof entry === "object" && entry.agentId === agentId2);
 }
 function agentConnectionBindingRefusal(binding, operation) {
   if (binding === void 0 || binding === null) return null;
@@ -1136,8 +1137,8 @@ function describeConnectionRequest(input) {
       return `Something went wrong connecting ${what}. Ask ${who} to try again with a new request.`;
   }
 }
-function operationDailyCapKey(agentId, connectionId, currency, utcDay) {
-  return `opcap:${agentId}:${connectionId}:${currency.toUpperCase()}:${utcDay}`;
+function operationDailyCapKey(agentId2, connectionId, currency, utcDay) {
+  return `opcap:${agentId2}:${connectionId}:${currency.toUpperCase()}:${utcDay}`;
 }
 function isPlainObject(value3) {
   return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
@@ -1163,7 +1164,7 @@ function parseCapAmount(value3) {
   if (typeof value3 !== "number" || !Number.isFinite(value3) || value3 < 0) return null;
   return value3;
 }
-function parseAgentConnectionOperationLimits(agentId, value3) {
+function parseAgentConnectionOperationLimits(agentId2, value3) {
   if (!isPlainObject(value3)) return {
     ok: false,
     error: "limits must be an object"
@@ -1176,7 +1177,7 @@ function parseAgentConnectionOperationLimits(agentId, value3) {
     };
   }
   const limits = {
-    agentId
+    agentId: agentId2
   };
   if (value3.caps !== void 0 && value3.caps !== null) {
     const caps = value3.caps;
@@ -1262,17 +1263,17 @@ function parseAgentConnectionOperationLimits(agentId, value3) {
     limits
   };
 }
-function findAgentConnectionOperationLimits(stored, agentId) {
-  if (!agentId || stored === void 0 || stored === null) return void 0;
+function findAgentConnectionOperationLimits(stored, agentId2) {
+  if (!agentId2 || stored === void 0 || stored === null) return void 0;
   if (!Array.isArray(stored)) return {
-    agentId,
+    agentId: agentId2,
     unreadable: true
   };
-  const entry = stored.find((row) => isPlainObject(row) && row.agentId === agentId);
+  const entry = stored.find((row) => isPlainObject(row) && row.agentId === agentId2);
   if (!entry) return void 0;
-  const parsed = parseAgentConnectionOperationLimits(agentId, entry);
+  const parsed = parseAgentConnectionOperationLimits(agentId2, entry);
   return parsed.ok ? parsed.limits : {
-    agentId,
+    agentId: agentId2,
     unreadable: true
   };
 }
@@ -1784,9 +1785,9 @@ function isEvalReservedDoubleId(double) {
 function evalCaseThreadId(runId, caseId) {
   return `evalrun:${runId}:${caseId}`;
 }
-function evalMonthlyCapKey(agentId, at = /* @__PURE__ */ new Date()) {
+function evalMonthlyCapKey(agentId2, at = /* @__PURE__ */ new Date()) {
   const yyyymm = `${at.getUTCFullYear()}${String(at.getUTCMonth() + 1).padStart(2, "0")}`;
-  return `evalcap:${agentId}:${yyyymm}`;
+  return `evalcap:${agentId2}:${yyyymm}`;
 }
 function isUnprovenUserSite(site) {
   return typeof site === "string" && (site === "job" || site === "workflow" || site.startsWith("workflow-"));
@@ -1855,8 +1856,8 @@ function hasFormatCharacters(text) {
 function normalizedHandoverName(name) {
   return oneLine(name.normalize("NFKC")).toLowerCase();
 }
-function handoverAgentIdSuffix(agentId) {
-  return agentId.slice(-6);
+function handoverAgentIdSuffix(agentId2) {
+  return agentId2.slice(-6);
 }
 function parseConnectionHandoverApprovalPayload(payload) {
   if (!payload || typeof payload !== "object" || Array.isArray(payload)) return null;
@@ -2148,11 +2149,11 @@ function parseThreadFollowUpInput(input) {
     } : {}
   };
 }
-function threadFollowUpRateKeys(agentId, threadId, nowMs) {
+function threadFollowUpRateKeys(agentId2, threadId, nowMs) {
   const hour = Math.floor(nowMs / 36e5);
   return {
-    perThread: `thread-followup:${agentId}:${threadId}:${hour}`,
-    perAgent: `thread-followup:${agentId}:${hour}`
+    perThread: `thread-followup:${agentId2}:${threadId}:${hour}`,
+    perAgent: `thread-followup:${agentId2}:${hour}`
   };
 }
 function progressFractionToPercent(fraction) {
@@ -4731,8 +4732,8 @@ function scheduleHealthView(health, state3) {
     } : {}
   };
 }
-function scheduleHealthSourceId(agentId, jobId) {
-  return `schedule-health:${agentId}:${jobId}`;
+function scheduleHealthSourceId(agentId2, jobId) {
+  return `schedule-health:${agentId2}:${jobId}`;
 }
 function workflowGoalJudgeKind(judge) {
   return judge && typeof judge === "object" && judge.predicate !== void 0 ? "predicate" : "agent";
@@ -5401,7 +5402,7 @@ function evidenceDays(from, to) {
   return out;
 }
 function summarizeEvidence(input) {
-  const { agentId, from, to } = input;
+  const { agentId: agentId2, from, to } = input;
   const windowDays = evidenceDays(from, to);
   const readable = /* @__PURE__ */ __name3((s) => s === "ok" || s === "empty", "readable");
   const covered = /* @__PURE__ */ __name3((d) => readable(d.sources?.messages) && readable(d.sources?.analyses), "covered");
@@ -5475,7 +5476,7 @@ function summarizeEvidence(input) {
   const short = wordRows.reduce((a, h) => a + h.short, 0);
   const long = wordRows.reduce((a, h) => a + h.long, 0);
   return {
-    agentId,
+    agentId: agentId2,
     window: {
       from,
       to,
@@ -6033,7 +6034,7 @@ function classifyConnectionOperation(op) {
   return NOT_SEND;
 }
 function connectionSendPolicyIsActive(policy) {
-  return Boolean(policy) && (policy.allowSend === false || Array.isArray(policy.recipientAllowlist));
+  return !!policy && (policy.allowSend === false || Array.isArray(policy.recipientAllowlist));
 }
 function allowlistAdmits(entries, email) {
   const domain = email.slice(email.lastIndexOf("@") + 1);
@@ -6063,8 +6064,9 @@ function evaluateConnectionSendPolicy(policy, op) {
       classification
     };
   }
-  if (Array.isArray(policy.recipientAllowlist)) {
-    const denied = classification.recipients.filter((email) => !allowlistAdmits(policy.recipientAllowlist, email));
+  const allowlist = policy.recipientAllowlist;
+  if (Array.isArray(allowlist)) {
+    const denied = classification.recipients.filter((email) => !allowlistAdmits(allowlist, email));
     if (denied.length > 0 || classification.recipientsUnknown) {
       return {
         allowed: false,
@@ -6106,7 +6108,111 @@ function isPaymentRequiredChatErrorEnvelope(data) {
   if (d.type !== "error") return false;
   return d.textDelta === BILLING_REJECTION_TEXT_CREDITS || d.textDelta === BILLING_REJECTION_TEXT_SEAT || d.textDelta === BILLING_REJECTION_TEXT_USER_QUOTA;
 }
-var __defProp3, __name3, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_WATCHDOG_OPS, SUPERVISION_WATCHDOG_ERRORS, SUPERVISION_ROLLBACK_REFUSAL_CODES, SUPERVISION_ROLLBACK_LINEAGE_MAX, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, CHANNEL_SEND_CHANNELS, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, THREAD_SCOPING_NOUN, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_AGENT_APP_CONNECTION_PREFIX, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SIGNAL_NAME_RE, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA;
+function isCustomMcpConnectionId(id2) {
+  return typeof id2 === "string" && id2.startsWith(CUSTOM_MCP_CONNECTION_ID_PREFIX);
+}
+function isConnectionBackedMcpSource(source) {
+  return typeof source === "string" && CONNECTION_BACKED_MCP_SOURCES.includes(source);
+}
+function newCustomMcpReferenceId() {
+  const bytes = globalThis.crypto.getRandomValues(new Uint8Array(6));
+  return `mcpx_${Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+function customMcpWorkflowKey(displayName) {
+  const slug = displayName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  if (!slug) return `s-${fnv1a32(displayName.trim())}`;
+  return (/^[a-z]/.test(slug) ? slug : `s-${slug}`).slice(0, WORKFLOW_KEY_MAX_LENGTH);
+}
+function fnv1a32(value3) {
+  let hash = 2166136261;
+  for (const char of value3) {
+    hash ^= char.codePointAt(0) ?? 0;
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return hash.toString(16).padStart(8, "0");
+}
+function addCaseDuplicateIssues(names, ctx, path3) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const name of names) {
+    const lower2 = name.toLowerCase();
+    if (seen.has(lower2)) {
+      ctx.addIssue({
+        code: z5.ZodIssueCode.custom,
+        path: path3,
+        message: `Header "${name}" is listed twice`
+      });
+    }
+    seen.add(lower2);
+  }
+}
+function toCustomMcpToolSnapshot(tools) {
+  const snapshot = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    if (snapshot.length >= CUSTOM_MCP_MAX_TOOLS) break;
+    const name = tool.name;
+    if (typeof name !== "string" || !name || name.length > CUSTOM_MCP_TOOL_NAME_MAX_LENGTH || seen.has(name)) continue;
+    seen.add(name);
+    snapshot.push({
+      name,
+      ...typeof tool.title === "string" && tool.title ? {
+        title: tool.title.slice(0, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH)
+      } : {},
+      ...typeof tool.description === "string" && tool.description ? {
+        description: tool.description.slice(0, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH)
+      } : {}
+    });
+  }
+  return snapshot;
+}
+function customMcpRuntimeToolFilter(selection) {
+  return selection.allowAll ? void 0 : {
+    allow: [
+      ...selection.enabled
+    ]
+  };
+}
+function createBody(extra) {
+  return z5.discriminatedUnion("authKind", [
+    z5.object({
+      authKind: z5.literal("none"),
+      ...createFields,
+      ...extra
+    }).strict(),
+    z5.object({
+      authKind: z5.literal("headers"),
+      headers: customMcpHeadersSchema.refine((headers) => Object.keys(headers).length > 0, "Add a header"),
+      ...createFields,
+      ...extra
+    }).strict()
+  ]);
+}
+function startBody(extra) {
+  return z5.union([
+    z5.object({
+      url: customMcpUrlInputSchema,
+      displayName: customMcpDisplayNameSchema,
+      ...startFields,
+      ...extra
+    }).strict(),
+    /** Sign in again. `url` only after `REAUTH_REQUIRED`; otherwise the stored URL is used. */
+    z5.object({
+      targetConnectionId: customMcpConnectionIdSchema,
+      url: customMcpUrlInputSchema.optional(),
+      ...startFields
+    }).strict()
+  ]);
+}
+function maskMcpServerHeaders(server) {
+  const { headers, ...rest } = server;
+  const headerNames = Object.keys(headers ?? {});
+  return {
+    ...rest,
+    headerNames,
+    headersSet: headerNames.length > 0
+  };
+}
+var __defProp3, __name3, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_WATCHDOG_OPS, SUPERVISION_WATCHDOG_ERRORS, SUPERVISION_ROLLBACK_REFUSAL_CODES, SUPERVISION_ROLLBACK_LINEAGE_MAX, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, CHANNEL_SEND_CHANNELS, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, THREAD_SCOPING_NOUN, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_AGENT_APP_CONNECTION_PREFIX, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SIGNAL_NAME_RE, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA, CUSTOM_MCP_CONNECTION_ID_PREFIX, CUSTOM_MCP_SOURCE, CUSTOM_MCP_TRANSPORT, CUSTOM_MCP_CONNECTION_ID_PATTERN, customMcpConnectionIdSchema, CONNECTION_BACKED_MCP_SOURCES, CUSTOM_MCP_REFERENCE_ID_PATTERN, customMcpReferenceIdSchema, CUSTOM_MCP_AUTH_KINDS, customMcpAuthKindSchema, CUSTOM_MCP_OAUTH_REGISTRATIONS, customMcpOAuthRegistrationSchema, CUSTOM_MCP_HEALTH_STATES, customMcpHealthStateSchema, CUSTOM_MCP_FAILURE_STEPS, customMcpFailureStepSchema, CUSTOM_MCP_CONNECT_STEPS, customMcpConnectStepSchema, customMcpFailureCodeSchema, WORKFLOW_KEY_MAX_LENGTH, CUSTOM_MCP_URL_MAX_LENGTH, CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH, CUSTOM_MCP_MAX_HEADERS, CUSTOM_MCP_HEADER_NAME_MAX_LENGTH, CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH, CUSTOM_MCP_MAX_TOOLS, CUSTOM_MCP_TOOL_NAME_MAX_LENGTH, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH, CUSTOM_MCP_MIN_TIMEOUT_MS, CUSTOM_MCP_MAX_TIMEOUT_MS, CUSTOM_MCP_OAUTH_PENDING_TTL_MS, isoDateTime, agentId, nonNegativeInt, customMcpUrlInputSchema, customMcpDisplayNameSchema, customMcpTimeoutSchema, CUSTOM_MCP_RESERVED_HEADER_NAMES, HEADER_NAME, HEADER_VALUE_FORBIDDEN, customMcpHeaderNameSchema, headerValue, customMcpHeadersSchema, customMcpHeadersPatchSchema, customMcpToolNameSchema, customMcpToolSchema, customMcpServerInfoSchema, customMcpToolSelectionSchema, customMcpToolsResponseSchema, customMcpFailureSchema, customMcpHealthSchema, customMcpErrorBodySchema, customMcpConnectionBlockSchema, customMcpConnectionViewSchema, customMcpConnectionResponseSchema, customMcpProbeBodySchema, customMcpOAuthDiscoverySchema, customMcpProbeResponseSchema, createFields, mountAgentField, customMcpCreateAgentBodySchema, customMcpCreateUserBodySchema, customMcpOAuthClientSchema, startFields, customMcpOAuthStartAgentBodySchema, customMcpOAuthStartUserBodySchema, customMcpOAuthStartResponseSchema, nonce, customMcpOAuthSuccessRedirectQuerySchema, CUSTOM_MCP_OAUTH_CALLBACK_ERRORS, customMcpOAuthFailureRedirectQuerySchema, customMcpOAuthFinalizeBodySchema, customMcpCimdDocumentSchema, customMcpPatchBodySchema, customMcpCredentialRequestSchema, customMcpCredentialAuthSchema, customMcpCredentialResponseSchema, CUSTOM_MCP_CREDENTIAL_ERRORS, customMcpCredentialErrorBodySchema, customMcpHealthReportSchema, customMcpProbeRequestSchema, customMcpProbeResultSchema, customMcpOriginUrlSchema, customMcpServerProjectionSchema, customMcpMountUpsertBodySchema;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -6335,7 +6441,14 @@ var init_dist = __esm({
       * that was ACTIVE before, is OLDER than the active one and was active within the last 7 days. CAS on the active
       * version; only from a workflow step the watchdog grant names. Held only by a watchdog grant.
       */
-      "versions.rollback": "rollback"
+      "versions.rollback": "rollback",
+      // [JR]
+      /**
+      * JR (BAC-2011) — `Agents.jobs(id).register({ versionId, jobId })`: register a job that is pinned in a STAGED version of
+      * the target (`snapshot.jobs[]`) so the promote activates and schedules it. Mongo-only marker write; EventBridge stays
+      * on the post-promote reconcile. Release-class: needs `register-job` AND `release` on the grant, from a signed step.
+      */
+      "jobs.register": "register-job"
     };
     __name(isSupervisionOp, "isSupervisionOp");
     __name3(isSupervisionOp, "isSupervisionOp");
@@ -6525,6 +6638,12 @@ var init_dist = __esm({
         gate: "rollback",
         targeted: true,
         item: "WD"
+      },
+      /** JR (BAC-2011) — `Agents.jobs(id).register({ versionId, jobId })`: a job pinned in a STAGED version (`register-job`). */
+      "jobs.register": {
+        gate: "register-job",
+        targeted: true,
+        item: "JR"
       }
     };
     SUPERVISION_WATCHDOG_OPS = {
@@ -10737,6 +10856,497 @@ listed here; never invent a target.`;
     BILLING_REJECTION_TEXT_USER_QUOTA = "You've reached your monthly usage limit in this workspace. Ask a workspace admin to raise it.";
     __name(isPaymentRequiredChatErrorEnvelope, "isPaymentRequiredChatErrorEnvelope");
     __name3(isPaymentRequiredChatErrorEnvelope, "isPaymentRequiredChatErrorEnvelope");
+    CUSTOM_MCP_CONNECTION_ID_PREFIX = "mcp_";
+    CUSTOM_MCP_SOURCE = "custom";
+    CUSTOM_MCP_TRANSPORT = "streamable-http";
+    CUSTOM_MCP_CONNECTION_ID_PATTERN = /^mcp_[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+    __name(isCustomMcpConnectionId, "isCustomMcpConnectionId");
+    __name3(isCustomMcpConnectionId, "isCustomMcpConnectionId");
+    customMcpConnectionIdSchema = z5.string().regex(CUSTOM_MCP_CONNECTION_ID_PATTERN);
+    CONNECTION_BACKED_MCP_SOURCES = [
+      "unifiedto",
+      CUSTOM_MCP_SOURCE
+    ];
+    __name(isConnectionBackedMcpSource, "isConnectionBackedMcpSource");
+    __name3(isConnectionBackedMcpSource, "isConnectionBackedMcpSource");
+    CUSTOM_MCP_REFERENCE_ID_PATTERN = /^mcpx_[0-9a-f]{12}$/;
+    customMcpReferenceIdSchema = z5.string().regex(CUSTOM_MCP_REFERENCE_ID_PATTERN);
+    __name(newCustomMcpReferenceId, "newCustomMcpReferenceId");
+    __name3(newCustomMcpReferenceId, "newCustomMcpReferenceId");
+    CUSTOM_MCP_AUTH_KINDS = [
+      "none",
+      "headers",
+      "oauth"
+    ];
+    customMcpAuthKindSchema = z5.enum(CUSTOM_MCP_AUTH_KINDS);
+    CUSTOM_MCP_OAUTH_REGISTRATIONS = [
+      "cimd",
+      "dcr",
+      "manual"
+    ];
+    customMcpOAuthRegistrationSchema = z5.enum(CUSTOM_MCP_OAUTH_REGISTRATIONS);
+    CUSTOM_MCP_HEALTH_STATES = [
+      "ok",
+      "failing",
+      "needs_sign_in",
+      "auth_rejected"
+    ];
+    customMcpHealthStateSchema = z5.enum(CUSTOM_MCP_HEALTH_STATES);
+    CUSTOM_MCP_FAILURE_STEPS = [
+      "url",
+      "reach",
+      "auth_challenge",
+      "resource_metadata",
+      "authorization_server_metadata",
+      "pkce",
+      "client_registration",
+      "authorize",
+      "token_exchange",
+      "list_tools"
+    ];
+    customMcpFailureStepSchema = z5.enum(CUSTOM_MCP_FAILURE_STEPS);
+    CUSTOM_MCP_CONNECT_STEPS = [
+      "url",
+      "reach",
+      "auth_challenge",
+      "list_tools"
+    ];
+    customMcpConnectStepSchema = z5.enum(CUSTOM_MCP_CONNECT_STEPS);
+    customMcpFailureCodeSchema = z5.string().regex(/^[a-z0-9_]{1,64}$/);
+    WORKFLOW_KEY_MAX_LENGTH = 64;
+    __name(customMcpWorkflowKey, "customMcpWorkflowKey");
+    __name3(customMcpWorkflowKey, "customMcpWorkflowKey");
+    __name(fnv1a32, "fnv1a32");
+    __name3(fnv1a32, "fnv1a32");
+    CUSTOM_MCP_URL_MAX_LENGTH = 2048;
+    CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH = 120;
+    CUSTOM_MCP_MAX_HEADERS = 20;
+    CUSTOM_MCP_HEADER_NAME_MAX_LENGTH = 128;
+    CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH = 8192;
+    CUSTOM_MCP_MAX_TOOLS = 500;
+    CUSTOM_MCP_TOOL_NAME_MAX_LENGTH = 256;
+    CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH = 1024;
+    CUSTOM_MCP_MIN_TIMEOUT_MS = 1e3;
+    CUSTOM_MCP_MAX_TIMEOUT_MS = 12e4;
+    CUSTOM_MCP_OAUTH_PENDING_TTL_MS = 15 * 6e4;
+    isoDateTime = z5.string().datetime({
+      offset: true
+    });
+    agentId = z5.string().min(1).max(128);
+    nonNegativeInt = z5.number().int().min(0);
+    customMcpUrlInputSchema = z5.string().trim().min(1).max(CUSTOM_MCP_URL_MAX_LENGTH);
+    customMcpDisplayNameSchema = z5.string().trim().min(1).max(CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH);
+    customMcpTimeoutSchema = z5.number().int().min(CUSTOM_MCP_MIN_TIMEOUT_MS).max(CUSTOM_MCP_MAX_TIMEOUT_MS);
+    CUSTOM_MCP_RESERVED_HEADER_NAMES = [
+      "accept",
+      "connection",
+      "content-length",
+      "content-type",
+      "host",
+      "keep-alive",
+      "last-event-id",
+      "mcp-protocol-version",
+      "mcp-session-id",
+      "proxy-authorization",
+      "te",
+      "trailer",
+      "transfer-encoding",
+      "upgrade"
+    ];
+    HEADER_NAME = /^[A-Za-z][A-Za-z0-9!#$%&'*+.^_`|~-]*$/;
+    HEADER_VALUE_FORBIDDEN = /[\u0000-\u0008\u000a-\u001f\u007f]/;
+    customMcpHeaderNameSchema = z5.string().min(1).max(CUSTOM_MCP_HEADER_NAME_MAX_LENGTH).regex(HEADER_NAME, "Not a valid HTTP header name").refine((name) => !CUSTOM_MCP_RESERVED_HEADER_NAMES.includes(name.toLowerCase()), "This header is set by Lua");
+    headerValue = z5.string().min(1).max(CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH).refine((value3) => !HEADER_VALUE_FORBIDDEN.test(value3), "Header values cannot contain line breaks");
+    __name(addCaseDuplicateIssues, "addCaseDuplicateIssues");
+    __name3(addCaseDuplicateIssues, "addCaseDuplicateIssues");
+    customMcpHeadersSchema = z5.record(customMcpHeaderNameSchema, headerValue).superRefine((headers, ctx) => {
+      const names = Object.keys(headers);
+      if (names.length > CUSTOM_MCP_MAX_HEADERS) {
+        ctx.addIssue({
+          code: z5.ZodIssueCode.custom,
+          message: `At most ${CUSTOM_MCP_MAX_HEADERS} headers`
+        });
+      }
+      addCaseDuplicateIssues(names, ctx, []);
+    });
+    customMcpHeadersPatchSchema = z5.object({
+      set: customMcpHeadersSchema.optional(),
+      remove: z5.array(customMcpHeaderNameSchema).max(CUSTOM_MCP_MAX_HEADERS).optional()
+    }).strict().superRefine((patch, ctx) => {
+      const set = Object.keys(patch.set ?? {});
+      const remove = patch.remove ?? [];
+      if (!set.length && !remove.length) {
+        ctx.addIssue({
+          code: z5.ZodIssueCode.custom,
+          message: "Nothing to change"
+        });
+      }
+      addCaseDuplicateIssues(remove, ctx, [
+        "remove"
+      ]);
+      const setLower = new Set(set.map((name) => name.toLowerCase()));
+      for (const name of remove) {
+        if (setLower.has(name.toLowerCase())) {
+          ctx.addIssue({
+            code: z5.ZodIssueCode.custom,
+            path: [
+              "remove"
+            ],
+            message: `Header "${name}" is both set and removed`
+          });
+        }
+      }
+    });
+    customMcpToolNameSchema = z5.string().min(1).max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH);
+    customMcpToolSchema = z5.object({
+      name: customMcpToolNameSchema,
+      title: z5.string().max(CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH).optional(),
+      description: z5.string().max(CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH).optional()
+    });
+    customMcpServerInfoSchema = z5.object({
+      name: z5.string().max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH),
+      version: z5.string().max(128).optional(),
+      title: z5.string().max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH).optional()
+    });
+    __name(toCustomMcpToolSnapshot, "toCustomMcpToolSnapshot");
+    __name3(toCustomMcpToolSnapshot, "toCustomMcpToolSnapshot");
+    customMcpToolSelectionSchema = z5.object({
+      allowAll: z5.boolean(),
+      enabled: z5.array(customMcpToolNameSchema).max(CUSTOM_MCP_MAX_TOOLS)
+    }).strict().refine((selection) => new Set(selection.enabled).size === selection.enabled.length, {
+      path: [
+        "enabled"
+      ],
+      message: "Tool names must be unique"
+    });
+    __name(customMcpRuntimeToolFilter, "customMcpRuntimeToolFilter");
+    __name3(customMcpRuntimeToolFilter, "customMcpRuntimeToolFilter");
+    customMcpToolsResponseSchema = z5.object({
+      allowAll: z5.boolean(),
+      tools: z5.array(customMcpToolSchema.extend({
+        enabled: z5.boolean()
+      })),
+      serverInfo: customMcpServerInfoSchema.optional(),
+      refreshedAt: isoDateTime.optional()
+    });
+    customMcpFailureSchema = z5.object({
+      step: customMcpFailureStepSchema,
+      code: customMcpFailureCodeSchema,
+      /** Plain words for the person connecting. */
+      message: z5.string().max(500),
+      httpStatus: z5.number().int().min(100).max(599).optional(),
+      referenceId: customMcpReferenceIdSchema
+    });
+    customMcpHealthSchema = z5.object({
+      state: customMcpHealthStateSchema,
+      checkedAt: isoDateTime.optional(),
+      lastOkAt: isoDateTime.optional(),
+      lastFailureAt: isoDateTime.optional(),
+      consecutiveFailures: nonNegativeInt,
+      lastFailure: customMcpFailureSchema.omit({
+        message: true
+      }).optional()
+    });
+    customMcpErrorBodySchema = z5.object({
+      code: z5.string(),
+      message: z5.string(),
+      failure: customMcpFailureSchema.optional(),
+      callbackUrl: z5.string().url().optional(),
+      retryAfterSeconds: z5.number().int().positive().optional()
+    });
+    customMcpConnectionBlockSchema = z5.object({
+      authKind: customMcpAuthKindSchema,
+      /** `URL.host`, port included. */
+      host: z5.string(),
+      /** Host plus a masked path; never the URL. */
+      urlDisplay: z5.string(),
+      /** Names only, for the edit form. Present on `headers` connections. */
+      headerNames: z5.array(z5.string()).optional(),
+      /** The workflow connection key that names this server: {@link customMcpWorkflowKey} of its display name. */
+      workflowKey: z5.string().regex(WORKFLOW_CONNECTION_KEY_RE).optional(),
+      health: customMcpHealthSchema,
+      toolCount: nonNegativeInt,
+      enabledToolCount: nonNegativeInt
+    });
+    customMcpConnectionViewSchema = z5.object({
+      id: customMcpConnectionIdSchema,
+      displayName: z5.string(),
+      ownerType: z5.enum([
+        "user",
+        "agent"
+      ]),
+      agentId: z5.string().optional(),
+      customMcp: customMcpConnectionBlockSchema
+    });
+    customMcpConnectionResponseSchema = z5.object({
+      connection: customMcpConnectionViewSchema
+    });
+    customMcpProbeBodySchema = z5.object({
+      url: customMcpUrlInputSchema,
+      headers: customMcpHeadersSchema.optional()
+    }).strict();
+    customMcpOAuthDiscoverySchema = z5.object({
+      issuer: z5.string().url(),
+      scopes: z5.array(z5.string()),
+      /** `manual_required`: neither CIMD nor DCR; the person registers a client with `callbackUrl`. */
+      registration: z5.enum([
+        "cimd",
+        "dcr",
+        "manual_required"
+      ]),
+      callbackUrl: z5.string().url()
+    });
+    customMcpProbeResponseSchema = z5.discriminatedUnion("outcome", [
+      z5.object({
+        outcome: z5.literal("connected"),
+        authKind: z5.enum([
+          "none",
+          "headers"
+        ]),
+        serverInfo: customMcpServerInfoSchema,
+        tools: z5.array(customMcpToolSchema)
+      }),
+      /** The server challenged and publishes usable OAuth metadata. */
+      z5.object({
+        outcome: z5.literal("sign_in_required"),
+        oauth: customMcpOAuthDiscoverySchema
+      }),
+      /** The server challenged without usable OAuth and no headers were sent. */
+      z5.object({
+        outcome: z5.literal("credentials_required"),
+        httpStatus: z5.number().int()
+      })
+    ]);
+    createFields = {
+      url: customMcpUrlInputSchema,
+      displayName: customMcpDisplayNameSchema,
+      timeout: customMcpTimeoutSchema.optional(),
+      /** Defaults to allow-all. */
+      tools: customMcpToolSelectionSchema.optional()
+    };
+    mountAgentField = {
+      mountAgentId: agentId.optional()
+    };
+    __name(createBody, "createBody");
+    __name3(createBody, "createBody");
+    customMcpCreateAgentBodySchema = createBody({});
+    customMcpCreateUserBodySchema = createBody(mountAgentField);
+    customMcpOAuthClientSchema = z5.object({
+      clientId: z5.string().trim().min(1).max(512),
+      clientSecret: z5.string().min(1).max(2048).optional()
+    }).strict();
+    startFields = {
+      successRedirect: z5.string().max(CUSTOM_MCP_URL_MAX_LENGTH),
+      failureRedirect: z5.string().max(CUSTOM_MCP_URL_MAX_LENGTH),
+      state: z5.string().max(256),
+      client: customMcpOAuthClientSchema.optional()
+    };
+    __name(startBody, "startBody");
+    __name3(startBody, "startBody");
+    customMcpOAuthStartAgentBodySchema = startBody({});
+    customMcpOAuthStartUserBodySchema = startBody(mountAgentField);
+    customMcpOAuthStartResponseSchema = z5.object({
+      authUrl: z5.string().url(),
+      pendingId: z5.string().min(1),
+      expiresAt: isoDateTime,
+      registration: customMcpOAuthRegistrationSchema
+    });
+    nonce = z5.string().regex(/^[A-Za-z0-9_-]{32,128}$/);
+    customMcpOAuthSuccessRedirectQuerySchema = z5.object({
+      state: z5.string(),
+      id: z5.string().min(1),
+      nonce
+    });
+    CUSTOM_MCP_OAUTH_CALLBACK_ERRORS = [
+      "access_denied",
+      "authorize",
+      "token_exchange",
+      "expired"
+    ];
+    customMcpOAuthFailureRedirectQuerySchema = z5.object({
+      state: z5.string(),
+      error: z5.enum(CUSTOM_MCP_OAUTH_CALLBACK_ERRORS),
+      ref: customMcpReferenceIdSchema
+    });
+    customMcpOAuthFinalizeBodySchema = z5.object({
+      pendingId: z5.string().min(1).max(128),
+      nonce,
+      tools: customMcpToolSelectionSchema.optional()
+    }).strict();
+    customMcpCimdDocumentSchema = z5.object({
+      client_id: z5.string().url(),
+      client_name: z5.string(),
+      client_uri: z5.string().url().optional(),
+      logo_uri: z5.string().url().optional(),
+      redirect_uris: z5.array(z5.string().url()).min(1),
+      grant_types: z5.array(z5.enum([
+        "authorization_code",
+        "refresh_token"
+      ])),
+      response_types: z5.array(z5.literal("code")),
+      token_endpoint_auth_method: z5.literal("none")
+    });
+    customMcpPatchBodySchema = z5.object({
+      displayName: customMcpDisplayNameSchema.optional(),
+      url: customMcpUrlInputSchema.optional(),
+      headers: customMcpHeadersPatchSchema.optional(),
+      timeout: customMcpTimeoutSchema.optional()
+    }).strict().refine((body) => Object.values(body).some((value3) => value3 !== void 0), {
+      message: "Nothing to change"
+    });
+    customMcpCredentialRequestSchema = z5.object({
+      mode: z5.enum([
+        "mount",
+        "room_personal"
+      ]),
+      connectionId: customMcpConnectionIdSchema,
+      agentId,
+      /** The server rejected this token version: refresh unless it is already stale. */
+      rejectedTokenVersion: nonNegativeInt.optional()
+    }).strict();
+    customMcpCredentialAuthSchema = z5.discriminatedUnion("kind", [
+      z5.object({
+        kind: z5.literal("none")
+      }),
+      z5.object({
+        kind: z5.literal("headers"),
+        headers: z5.record(z5.string(), z5.string())
+      }),
+      z5.object({
+        kind: z5.literal("oauth"),
+        accessToken: z5.string().min(1),
+        tokenVersion: nonNegativeInt,
+        /** At least {@link CUSTOM_MCP_ACCESS_TOKEN_MIN_REMAINING_MS} away. */
+        expiresAt: isoDateTime
+      })
+    ]);
+    customMcpCredentialResponseSchema = z5.object({
+      connectionId: customMcpConnectionIdSchema,
+      credentialGeneration: nonNegativeInt,
+      url: z5.string().url(),
+      auth: customMcpCredentialAuthSchema
+    });
+    CUSTOM_MCP_CREDENTIAL_ERRORS = {
+      /** 403. Not mounted on this agent, or the room grant is no longer current. */
+      NOT_MOUNTED: "NOT_MOUNTED",
+      /** 404. */
+      NOT_FOUND: "NOT_FOUND",
+      /** 409. Paused by its owner. */
+      PAUSED: "PAUSED",
+      /** 409. The refresh token is gone or was refused; the owner must sign in again. */
+      NEEDS_SIGN_IN: "NEEDS_SIGN_IN",
+      /** 503. The token endpoint failed; retry later. */
+      REFRESH_UNAVAILABLE: "REFRESH_UNAVAILABLE"
+    };
+    customMcpCredentialErrorBodySchema = z5.object({
+      code: z5.nativeEnum(CUSTOM_MCP_CREDENTIAL_ERRORS),
+      message: z5.string()
+    });
+    customMcpHealthReportSchema = z5.object({
+      reports: z5.array(z5.object({
+        connectionId: customMcpConnectionIdSchema,
+        agentId,
+        credentialGeneration: nonNegativeInt,
+        tokenVersion: nonNegativeInt.optional(),
+        outcome: z5.enum([
+          "ok",
+          "failure"
+        ]),
+        failure: z5.object({
+          step: customMcpConnectStepSchema,
+          code: customMcpFailureCodeSchema,
+          httpStatus: z5.number().int().min(100).max(599).optional(),
+          referenceId: customMcpReferenceIdSchema
+        }).strict().optional(),
+        observedAt: isoDateTime
+      }).strict().refine((report) => report.outcome === "failure" === (report.failure !== void 0), {
+        path: [
+          "failure"
+        ],
+        message: "A failure report carries `failure`; an ok report does not"
+      })).min(1).max(50)
+    }).strict();
+    customMcpProbeRequestSchema = z5.object({
+      url: z5.string().url().max(CUSTOM_MCP_URL_MAX_LENGTH),
+      auth: z5.discriminatedUnion("kind", [
+        z5.object({
+          kind: z5.literal("none")
+        }).strict(),
+        z5.object({
+          kind: z5.literal("headers"),
+          headers: customMcpHeadersSchema
+        }).strict(),
+        z5.object({
+          kind: z5.literal("bearer"),
+          accessToken: z5.string().min(1)
+        }).strict()
+      ]),
+      timeout: customMcpTimeoutSchema.optional(),
+      referenceId: customMcpReferenceIdSchema
+    }).strict();
+    customMcpProbeResultSchema = z5.discriminatedUnion("ok", [
+      z5.object({
+        ok: z5.literal(true),
+        serverInfo: customMcpServerInfoSchema,
+        tools: z5.array(customMcpToolSchema).max(CUSTOM_MCP_MAX_TOOLS),
+        protocolVersion: z5.string().optional()
+      }),
+      z5.object({
+        ok: z5.literal(false),
+        step: customMcpConnectStepSchema,
+        code: customMcpFailureCodeSchema,
+        httpStatus: z5.number().int().min(100).max(599).optional(),
+        /** The 401/403 challenge, raw, for lua-api's OAuth discovery. */
+        wwwAuthenticate: z5.string().max(4096).optional()
+      })
+    ]);
+    customMcpOriginUrlSchema = z5.string().url().refine((value3) => {
+      try {
+        const url = new URL(value3);
+        return url.protocol === "https:" && url.pathname === "/" && !url.search && !url.hash && !url.username && !url.password;
+      } catch {
+        return false;
+      }
+    }, "Origin only");
+    customMcpServerProjectionSchema = z5.object({
+      name: z5.string().min(1),
+      runtimeKey: z5.string().min(1),
+      transport: z5.literal(CUSTOM_MCP_TRANSPORT),
+      source: z5.literal(CUSTOM_MCP_SOURCE),
+      url: customMcpOriginUrlSchema,
+      connectionId: customMcpConnectionIdSchema,
+      connectionLabel: z5.string(),
+      /** The connection's owner kind, for the dashboard's "Personal" label. */
+      ownerType: z5.enum([
+        "user",
+        "agent"
+      ]),
+      authKind: customMcpAuthKindSchema,
+      credentialGeneration: nonNegativeInt,
+      tools: z5.object({
+        allow: z5.array(z5.string())
+      }).optional(),
+      timeout: z5.number().int().positive()
+    });
+    customMcpMountUpsertBodySchema = z5.object({
+      source: z5.literal(CUSTOM_MCP_SOURCE),
+      transport: z5.literal(CUSTOM_MCP_TRANSPORT),
+      url: customMcpOriginUrlSchema,
+      connectionId: customMcpConnectionIdSchema,
+      connectionLabel: z5.string(),
+      ownerType: z5.enum([
+        "user",
+        "agent"
+      ]),
+      authKind: customMcpAuthKindSchema,
+      credentialGeneration: nonNegativeInt,
+      tools: z5.object({
+        allow: z5.array(customMcpToolNameSchema).max(CUSTOM_MCP_MAX_TOOLS)
+      }).strict().optional(),
+      timeout: customMcpTimeoutSchema.optional()
+    }).strict();
+    __name(maskMcpServerHeaders, "maskMcpServerHeaders");
+    __name3(maskMcpServerHeaders, "maskMcpServerHeaders");
   }
 });
 
@@ -11397,7 +12007,7 @@ var init_constants = __esm({
 });
 
 // src/services/firebase-session.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 function rejectedRefreshReason(message) {
   const normalised = message.toUpperCase();
   return REJECTED_REFRESH_REASONS.find((reason) => normalised.includes(reason));
@@ -11543,20 +12153,20 @@ var init_firebase_session = __esm({
         this.name = "FirebaseSessionRejectedError";
       }
     };
-    customTokenResponseSchema = z5.object({
-      idToken: z5.string().min(1),
-      refreshToken: z5.string().min(1),
-      expiresIn: z5.coerce.number().positive().finite(),
-      localId: z5.string().min(1).optional()
+    customTokenResponseSchema = z6.object({
+      idToken: z6.string().min(1),
+      refreshToken: z6.string().min(1),
+      expiresIn: z6.coerce.number().positive().finite(),
+      localId: z6.string().min(1).optional()
     });
-    refreshResponseSchema = z5.object({
-      id_token: z5.string().min(1),
-      refresh_token: z5.string().min(1),
-      expires_in: z5.coerce.number().positive().finite(),
-      user_id: z5.string().min(1)
+    refreshResponseSchema = z6.object({
+      id_token: z6.string().min(1),
+      refresh_token: z6.string().min(1),
+      expires_in: z6.coerce.number().positive().finite(),
+      user_id: z6.string().min(1)
     });
-    firebaseIdTokenPayloadSchema = z5.object({
-      sub: z5.string().min(1)
+    firebaseIdTokenPayloadSchema = z6.object({
+      sub: z6.string().min(1)
     });
     __name(requireFirebaseWebApiKey, "requireFirebaseWebApiKey");
     __name(claimsOfFirebaseIdToken, "claimsOfFirebaseIdToken");
@@ -11573,7 +12183,7 @@ var init_firebase_session = __esm({
 import { createHash, randomUUID } from "crypto";
 import { mkdir, open, readFile, rename, rm, stat, unlink, writeFile } from "fs/promises";
 import { join as join3 } from "path";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 function environmentKey(environment) {
   return createHash("sha256").update(`${environment.apiUrl}
 ${environment.authUrl}
@@ -11590,15 +12200,15 @@ var init_firebase_session_store = __esm({
   "src/services/firebase-session-store.ts"() {
     "use strict";
     init_constants();
-    storedFirebaseSessionSchema = z6.object({
-      version: z6.literal(1),
-      kind: z6.literal("firebase-session"),
-      generation: z6.string().min(1),
-      refreshToken: z6.string().min(1),
-      firebaseUid: z6.string().min(1),
-      apiUrl: z6.string().url(),
-      authUrl: z6.string().url(),
-      firebaseWebApiKey: z6.string().min(1)
+    storedFirebaseSessionSchema = z7.object({
+      version: z7.literal(1),
+      kind: z7.literal("firebase-session"),
+      generation: z7.string().min(1),
+      refreshToken: z7.string().min(1),
+      firebaseUid: z7.string().min(1),
+      apiUrl: z7.string().url(),
+      authUrl: z7.string().url(),
+      firebaseWebApiKey: z7.string().min(1)
     });
     currentFirebaseSessionEnvironment = /* @__PURE__ */ __name(() => ({
       apiUrl: BASE_URLS.API,
@@ -12267,14 +12877,15 @@ var init_http_client = __esm({
       * Performs an HTTP GET request
       * @param url - The relative URL path to request (will be appended to baseUrl)
       * @param headers - Optional HTTP headers to include in the request
+      * @param overrides - Optional per-call overrides (timeout, caller AbortSignal)
       * @returns Promise resolving to an ApiResponse with typed data
       * @protected
       */
-      async httpGet(url, headers) {
+      async httpGet(url, headers, overrides) {
         return this.retryableRequest(this.baseUrl + url, {
           method: "GET",
           headers
-        });
+        }, 3, overrides);
       }
       /**
       * Performs an HTTP POST request
@@ -12316,43 +12927,46 @@ var init_http_client = __esm({
       * @param url - The relative URL path to request (will be appended to baseUrl)
       * @param data - Optional request body data (will be JSON stringified)
       * @param headers - Optional HTTP headers to include in the request
+      * @param overrides - Optional per-call overrides (timeout, caller AbortSignal)
       * @returns Promise resolving to an ApiResponse with typed data
       * @protected
       */
-      async httpPut(url, data, headers) {
+      async httpPut(url, data, headers, overrides) {
         return this.retryableRequest(this.baseUrl + url, {
           method: "PUT",
           body: data ? JSON.stringify(data) : void 0,
           headers
-        });
+        }, 3, overrides);
       }
       /**
       * Performs an HTTP DELETE request
       * @param url - The relative URL path to request (will be appended to baseUrl)
       * @param headers - Optional HTTP headers to include in the request
+      * @param overrides - Optional per-call overrides (timeout, caller AbortSignal)
       * @returns Promise resolving to an ApiResponse with typed data
       * @protected
       */
-      async httpDelete(url, headers) {
+      async httpDelete(url, headers, overrides) {
         return this.retryableRequest(this.baseUrl + url, {
           method: "DELETE",
           headers
-        });
+        }, 3, overrides);
       }
       /**
       * Performs an HTTP PATCH request
       * @param url - The relative URL path to request (will be appended to baseUrl)
       * @param data - Optional request body data (will be JSON stringified)
       * @param headers - Optional HTTP headers to include in the request
+      * @param overrides - Optional per-call overrides (timeout, caller AbortSignal)
       * @returns Promise resolving to an ApiResponse with typed data
       * @protected
       */
-      async httpPatch(url, data, headers) {
+      async httpPatch(url, data, headers, overrides) {
         return this.retryableRequest(this.baseUrl + url, {
           method: "PATCH",
           body: data ? JSON.stringify(data) : void 0,
           headers
-        });
+        }, 3, overrides);
       }
       /**
       * Performs one HTTP PATCH attempt (no client retry).
@@ -12477,8 +13091,8 @@ var init_connection_requests_api_service = __esm({
         __name(this, "ConnectionRequestsApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       query() {
         return `agentId=${encodeURIComponent(this.agentId)}`;
@@ -12560,8 +13174,8 @@ function workflowJobTargetTemplatePath(binding) {
   return m[1].split(".").every((seg) => TARGET_PATH_SEGMENT_RE.test(seg)) ? m[1] : null;
 }
 function isWorkflowJobTargetTemplate(target) {
-  const agentId = target?.agentId;
-  return !!agentId && typeof agentId === "object";
+  const agentId2 = target?.agentId;
+  return !!agentId2 && typeof agentId2 === "object";
 }
 function workflowJobLuaApiProblem(luaApi, nodeType, tier) {
   if (luaApi === void 0) return null;
@@ -12577,12 +13191,12 @@ function workflowJobTargetProblem(target, plugins, luaApi) {
   if (target === void 0) return null;
   if (!target || typeof target !== "object" || Array.isArray(target)) return "target must be { agentId }";
   const keys = Object.keys(target);
-  const agentId = target.agentId;
+  const agentId2 = target.agentId;
   if (keys.length !== 1 || !("agentId" in target)) return "target must be exactly { agentId }";
-  if (typeof agentId === "string") {
-    if (!agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
-    if (agentId.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
-  } else if (workflowJobTargetTemplatePath(agentId) === null) {
+  if (typeof agentId2 === "string") {
+    if (!agentId2.trim() || agentId2.length > 256) return "target must be exactly { agentId: <non-empty string> }";
+    if (agentId2.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
+  } else if (workflowJobTargetTemplatePath(agentId2) === null) {
     return "target.agentId must be a static id or template('${initData.<path>}') \u2014 exactly one initData placeholder, no default";
   }
   const hasPlugins = Array.isArray(plugins) && plugins.length > 0;
@@ -12606,25 +13220,25 @@ function readInitDataPath(root, path3) {
   return cur;
 }
 function renderWorkflowJobTarget(target, initData) {
-  const agentId = target?.agentId;
-  if (target === void 0 || target === null || agentId === void 0) return {
+  const agentId2 = target?.agentId;
+  if (target === void 0 || target === null || agentId2 === void 0) return {
     ok: true,
     agentId: void 0,
     templated: false
   };
-  if (typeof agentId === "string") {
-    if (!agentId.trim() || agentId.includes("${")) return {
+  if (typeof agentId2 === "string") {
+    if (!agentId2.trim() || agentId2.includes("${")) return {
       ok: false,
       reason: "invalid",
       message: "target.agentId is invalid"
     };
     return {
       ok: true,
-      agentId,
+      agentId: agentId2,
       templated: false
     };
   }
-  const path3 = workflowJobTargetTemplatePath(agentId);
+  const path3 = workflowJobTargetTemplatePath(agentId2);
   if (path3 === null) return {
     ok: false,
     reason: "invalid",
@@ -12718,7 +13332,7 @@ var init_workflow_job_tools = __esm({
 
 // ../workflow-graph/dist/index.mjs
 import { createHash as createHash2 } from "crypto";
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 import { z as z22 } from "zod";
 import { createHash as createHash22 } from "crypto";
 function isMapConfigObject(v) {
@@ -16445,8 +17059,8 @@ var init_dist2 = __esm({
     fromKnowledge = /* @__PURE__ */ __name6((k) => ({
       knowledge: k
     }), "fromKnowledge");
-    SideEffectsSchema = z7.enum(WORKFLOW_SIDE_EFFECTS);
-    JobResourcesSchema = z7.enum(WORKFLOW_JOB_RESOURCES);
+    SideEffectsSchema = z8.enum(WORKFLOW_SIDE_EFFECTS);
+    JobResourcesSchema = z8.enum(WORKFLOW_JOB_RESOURCES);
     WORKFLOW_MODEL_TEMPLATE_ROOT = "initData";
     WORKFLOW_MODEL_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*(?:\|([^}]*))?\}$/;
     PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
@@ -18262,9 +18876,9 @@ var init_skills_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Retrieves all skills for the agent
@@ -18774,7 +19388,7 @@ function walk3(root, prefix, out) {
     }
   }
 }
-var __defProp7, __name7, FILE_HASH_LENGTH, SKIP_DIRECTORIES, ARCHIVE_ONLY_SKIP_DIRECTORIES, DEFAULT_MAX_FILE_BYTES, KIND_BY_EXT, CHECK_BLOBS_MAX_HASHES, BackupHttpError, BackupHttpClient, DEFAULT_CONCURRENCY, CREDENTIAL_PATHS, WINDOWS_ABSOLUTE_PATH, ARCHIVE_SCHEMA_VERSION;
+var __defProp7, __name7, FILE_HASH_LENGTH, SKIP_DIRECTORIES, ARCHIVE_ONLY_SKIP_DIRECTORIES, DEFAULT_MAX_FILE_BYTES, KIND_BY_EXT, CHECK_BLOBS_MAX_HASHES, BackupHttpError, BackupHttpClient, DEFAULT_CONCURRENCY, CREDENTIAL_PATHS, WINDOWS_ABSOLUTE_PATH, ARCHIVE_SCHEMA_VERSION, SKILL_SOURCE_ARCHIVE_MAX_BYTES;
 var init_dist3 = __esm({
   "../shared-source-sync/dist/index.mjs"() {
     "use strict";
@@ -18982,6 +19596,7 @@ var init_dist3 = __esm({
     __name7(writeArchiveToWorkspace, "writeArchiveToWorkspace");
     __name(walk3, "walk");
     __name7(walk3, "walk");
+    SKILL_SOURCE_ARCHIVE_MAX_BYTES = 4 * 1024 * 1024;
   }
 });
 
@@ -19125,8 +19740,8 @@ var init_base_handler = __esm({
       * Local items take priority for shared IDs; server-only orphans are appended as minimal
       * cleanItem objects. On server failure, returns local items only with an empty orphan set.
       */
-      async fetchMergedForInteraction(apiKey, agentId, config) {
-        const serverData = await this.fetchServerState(apiKey, agentId);
+      async fetchMergedForInteraction(apiKey, agentId2, config) {
+        const serverData = await this.fetchServerState(apiKey, agentId2);
         const localItems = this.getFromYaml(config);
         if (!serverData.serverItems) {
           return {
@@ -19153,9 +19768,9 @@ var init_base_handler = __esm({
         };
       }
       /** Phase 1 of parallel sync: fetch server state (HTTP only, no YAML writes) */
-      async fetchServerState(apiKey, agentId) {
+      async fetchServerState(apiKey, agentId2) {
         try {
-          const api = this.getApi(apiKey, agentId);
+          const api = this.getApi(apiKey, agentId2);
           const serverItems = await this.fetchFromServer(api);
           return {
             serverItems
@@ -19268,11 +19883,11 @@ var init_base_handler = __esm({
           orphanedCount
         };
       }
-      async syncWithServer(apiKey, agentId, config, manifest) {
-        const serverData = await this.fetchServerState(apiKey, agentId);
+      async syncWithServer(apiKey, agentId2, config, manifest) {
+        const serverData = await this.fetchServerState(apiKey, agentId2);
         return this.applySyncToYaml(serverData, config, manifest, {
           apiKey,
-          agentId
+          agentId: agentId2
         });
       }
       /**
@@ -19413,8 +20028,8 @@ var init_base_handler = __esm({
       /**
       * Get the highest version string from the server for conflict avoidance.
       */
-      async getHighestServerVersion(apiKey, agentId, entityId) {
-        const { serverItems } = await this.fetchServerState(apiKey, agentId);
+      async getHighestServerVersion(apiKey, agentId2, entityId) {
+        const { serverItems } = await this.fetchServerState(apiKey, agentId2);
         if (!serverItems) return null;
         const entity = serverItems.find((item) => item.id === entityId);
         if (!entity?.versions || !Array.isArray(entity.versions)) return null;
@@ -19426,9 +20041,9 @@ var init_base_handler = __esm({
       * Fetch all server items once, extract highest version for each entity ID.
       * More efficient than calling getHighestServerVersion() per entity.
       */
-      async batchGetHighestVersions(apiKey, agentId, entityIds) {
+      async batchGetHighestVersions(apiKey, agentId2, entityIds) {
         const result = /* @__PURE__ */ new Map();
-        const { serverItems } = await this.fetchServerState(apiKey, agentId);
+        const { serverItems } = await this.fetchServerState(apiKey, agentId2);
         if (!serverItems) {
           entityIds.forEach((id2) => result.set(id2, null));
           return result;
@@ -19554,8 +20169,8 @@ var init_skill_handler = __esm({
         yamlKey: "skills",
         idField: "skillId"
       };
-      getApi(apiKey, agentId) {
-        return new SkillApi(BASE_URLS.API, apiKey, agentId);
+      getApi(apiKey, agentId2) {
+        return new SkillApi(BASE_URLS.API, apiKey, agentId2);
       }
       async fetchFromServer(api) {
         const response = await api.getSkills();
@@ -19655,8 +20270,8 @@ var init_skill_handler = __esm({
       // ===========================================================================
       // PUSH — custom to include tools array
       // ===========================================================================
-      async pushToServer(apiKey, agentId, entityId, pushData) {
-        const api = this.getApi(apiKey, agentId);
+      async pushToServer(apiKey, agentId2, entityId, pushData) {
+        const api = this.getApi(apiKey, agentId2);
         const response = await api.pushSkill(entityId, {
           ...pushData,
           skillId: entityId
@@ -19666,8 +20281,8 @@ var init_skill_handler = __esm({
           error: response.error?.message
         };
       }
-      async publishVersion(apiKey, agentId, entityId, version) {
-        const api = this.getApi(apiKey, agentId);
+      async publishVersion(apiKey, agentId2, entityId, version) {
+        const api = this.getApi(apiKey, agentId2);
         const response = await api.publishSkillVersion(entityId, version);
         return {
           success: response.success,
@@ -20368,9 +20983,9 @@ var init_products_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       async get(pageOrOptions, limitArg) {
         let page;
@@ -20956,9 +21571,9 @@ var init_order_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Creates a new order from a basket
@@ -21053,10 +21668,10 @@ var init_basket_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
         this.credential = credential;
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Creates a new user basket
@@ -21438,10 +22053,10 @@ var init_user_data_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId, targetUserId) {
+      constructor(baseUrl, credential, agentId2, targetUserId) {
         super(baseUrl, credential);
         this.credential = credential;
-        this.agentId = agentId;
+        this.agentId = agentId2;
         this.targetUserId = targetUserId;
       }
       get dataPath() {
@@ -21840,9 +22455,9 @@ var init_custom_data_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Lists the agent's data collections with entry counts, timestamps, and —
@@ -22050,9 +22665,9 @@ var init_webhook_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Retrieves all webhooks for the agent
@@ -22353,10 +22968,10 @@ var init_job_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
         this.credential = credential;
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Retrieves all jobs for the agent
@@ -22556,8 +23171,8 @@ var init_ai_api_service = __esm({
         __name(this, "AiApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       async generate(body) {
         return this.httpPost(`/developer/ai/${this.agentId}/generate`, body, {});
@@ -22665,8 +23280,8 @@ var init_integrations_api_service = __esm({
         __name(this, "IntegrationsApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       async passthrough(integrationType, request, options) {
         return this.httpPost(`/developer/unifiedto/connections/${encodeURIComponent(this.agentId)}/passthrough/${encodeURIComponent(integrationType)}`, options?.connectionId ? {
@@ -22675,12 +23290,12 @@ var init_integrations_api_service = __esm({
         } : request, {});
       }
       /** wave 2 U6 — `GET /developer/unifiedto/connections/:agentId/visible` for `agentId` (default: this agent). */
-      async listVisible(agentId = this.agentId) {
-        return this.httpGet(`/developer/unifiedto/connections/${encodeURIComponent(agentId)}/visible`);
+      async listVisible(agentId2 = this.agentId) {
+        return this.httpGet(`/developer/unifiedto/connections/${encodeURIComponent(agentId2)}/visible`);
       }
       /** wave 2 U6 — `POST /developer/unifiedto/connections/:agentId/:connectionId/checks`. */
-      async runCheck(connectionId, check, options = {}, agentId = this.agentId) {
-        return this.httpPost(`/developer/unifiedto/connections/${encodeURIComponent(agentId)}/${encodeURIComponent(connectionId)}/checks`, {
+      async runCheck(connectionId, check, options = {}, agentId2 = this.agentId) {
+        return this.httpPost(`/developer/unifiedto/connections/${encodeURIComponent(agentId2)}/${encodeURIComponent(connectionId)}/checks`, {
           check,
           ...options.allowWrite === true ? {
             allowWrite: true
@@ -22822,10 +23437,14 @@ var init_agents_api_service = __esm({
       * `(prompt)` call returns plain text and the `(input)` call returns the
       * full structured output.
       */
-      async invokeForSandbox(targetAgentId, promptOrInput) {
-        const input = typeof promptOrInput === "string" ? {
+      async invokeForSandbox(targetAgentId, promptOrInput, options) {
+        const base = typeof promptOrInput === "string" ? {
           prompt: promptOrInput
         } : promptOrInput;
+        const input = !base.signal && options?.signal ? {
+          ...base,
+          signal: options.signal
+        } : base;
         if (isAborted2(input.signal)) throw abortReason(input.signal);
         const result = await this.invoke(targetAgentId, input);
         if (!result.success) {
@@ -22867,6 +23486,25 @@ var init_agents_api_service = __esm({
         return toInvocationOutput(data, input.threadId);
       }
       /**
+      * BAC-2154 — the offline twin of `Agents.jobs(agentId).register`. A registration changes what a live agent runs,
+      * like `workflows.deploy`, so it is always refused offline, with no network call. Bad arguments are refused first.
+      * @experimental Gives `lua test` a typed refusal; the live call is served by the platform.
+      */
+      async registerJobForSandbox(targetAgentId, input) {
+        const refuse = /* @__PURE__ */ __name((code, message) => {
+          throw Object.assign(new Error(message), {
+            name: "SupervisionError",
+            code
+          });
+        }, "refuse");
+        if (!targetAgentId) refuse("supervision_no_target", "A target agent id is required");
+        const nonEmpty = /* @__PURE__ */ __name((v) => typeof v === "string" && v.length > 0, "nonEmpty");
+        if (!nonEmpty(input?.versionId) || !nonEmpty(input?.jobId)) {
+          refuse("supervision_bad_args", "jobs.register needs a non-empty versionId and jobId");
+        }
+        return refuse("supervision_release_offline_refused", "jobs.register is refused offline: a local test never changes a live agent");
+      }
+      /**
       * EM-WS2 — the offline (`lua test` / `lua dev`) twin of the `Agents.*`
       * supervision members. Read ops go to the developer REST routes with YOUR
       * developer credential (so they return what you can see, not what a
@@ -23117,9 +23755,9 @@ var init_whatsapp_templates_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Lists WhatsApp templates for a channel with optional pagination and search
@@ -23257,9 +23895,9 @@ var init_developer_api_service = __esm({
       * @param credential - The API key for authentication
       * @param agentId - The unique identifier of the agent
       */
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /**
       * Retrieves all environment variables for the agent in production
@@ -23372,9 +24010,9 @@ var init_developer_api_service = __esm({
       * @param email - The email address to look up
       * @returns Promise resolving to an ApiResponse containing the profile, or null if not found
       */
-      async getUserProfileByEmail(email, agentId) {
+      async getUserProfileByEmail(email, agentId2) {
         const path3 = `/developer/user/profile/email/${encodeURIComponent(email)}`;
-        const scopedPath = agentId ? `${path3}?agentId=${encodeURIComponent(agentId)}` : path3;
+        const scopedPath = agentId2 ? `${path3}?agentId=${encodeURIComponent(agentId2)}` : path3;
         return this.httpGet(scopedPath, {});
       }
       /**
@@ -23382,10 +24020,10 @@ var init_developer_api_service = __esm({
       * @param phone - The phone number to look up (with or without + prefix)
       * @returns Promise resolving to an ApiResponse containing the profile, or null if not found
       */
-      async getUserProfileByPhone(phone, agentId) {
+      async getUserProfileByPhone(phone, agentId2) {
         const normalizedPhone = phone.replace(/^\+/, "");
         const path3 = `/developer/user/profile/phone/${normalizedPhone}`;
-        const scopedPath = agentId ? `${path3}?agentId=${encodeURIComponent(agentId)}` : path3;
+        const scopedPath = agentId2 ? `${path3}?agentId=${encodeURIComponent(agentId2)}` : path3;
         return this.httpGet(scopedPath, {});
       }
       /**
@@ -23393,9 +24031,9 @@ var init_developer_api_service = __esm({
       * @param identity - `{ kind, scope, value }`, e.g. from `Lua.request.sender`
       * @returns Promise resolving to an ApiResponse containing the profile, or null if not found
       */
-      async getUserProfileByIdentity(identity, agentId) {
+      async getUserProfileByIdentity(identity, agentId2) {
         const path3 = `/developer/user/profile/identity/${encodeURIComponent(identity.kind)}/${encodeURIComponent(identity.value)}`;
-        return this.httpGet(`${path3}?scope=${encodeURIComponent(identity.scope)}&agentId=${encodeURIComponent(agentId)}`, {});
+        return this.httpGet(`${path3}?scope=${encodeURIComponent(identity.scope)}&agentId=${encodeURIComponent(agentId2)}`, {});
       }
     };
   }
@@ -23412,9 +24050,9 @@ var init_voice_api_service = __esm({
         __name(this, "VoiceApi");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       async getVoices() {
         return this.httpGet(`/developer/voice-agents/${this.agentId}`, {});
@@ -23505,8 +24143,8 @@ var init_channels_send_api_service = __esm({
         __name(this, "ChannelsSendApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       /** POST /developer/agents/:agentId/channels/send */
       async send(input) {
@@ -23628,8 +24266,8 @@ var init_inbox_push_api_service = __esm({
         __name(this, "InboxPushApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       /** POST /developer/agents/:agentId/inbox/push */
       async push(input) {
@@ -23650,8 +24288,8 @@ var init_directory_api_service = __esm({
         __name(this, "DirectoryApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       /** POST /developer/agents/:agentId/directory/resolve */
       async resolve(name) {
@@ -23781,9 +24419,9 @@ function createWorkflowsRuntime(getApi) {
     },
     // Goals are scoped to the bound agent: the IF-21 `agentId` argument is parity with the HTTP twin
     // (`/workflows/:agentId/goals`), never a way to reach another agent's goals (403 otherwise).
-    async setGoal(agentId, goal) {
+    async setGoal(agentId2, goal) {
       const api = await getApi();
-      assertBoundAgent(api, agentId, "setGoal");
+      assertBoundAgent(api, agentId2, "setGoal");
       const g = goal;
       const target = g.workflowId ?? g.workflow;
       const ref = target ? await resolveRef(api, target) : {};
@@ -23793,29 +24431,29 @@ function createWorkflowsRuntime(getApi) {
       }), "Workflows.setGoal");
     },
     goals: {
-      async list(agentId, opts = {}) {
+      async list(agentId2, opts = {}) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.list");
+        assertBoundAgent(api, agentId2, "goals.list");
         return unwrap(await api.getGoals(opts), "Workflows.goals.list").items;
       },
-      async get(agentId, goalId) {
+      async get(agentId2, goalId) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.get");
+        assertBoundAgent(api, agentId2, "goals.get");
         return unwrap(await api.getGoal(goalId), "Workflows.goals.get");
       },
-      async pause(agentId, goalId) {
+      async pause(agentId2, goalId) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.pause");
+        assertBoundAgent(api, agentId2, "goals.pause");
         return unwrap(await api.pauseGoal(goalId), "Workflows.goals.pause");
       },
-      async resume(agentId, goalId) {
+      async resume(agentId2, goalId) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.resume");
+        assertBoundAgent(api, agentId2, "goals.resume");
         return unwrap(await api.resumeGoal(goalId), "Workflows.goals.resume");
       },
-      async close(agentId, goalId, opts = {}) {
+      async close(agentId2, goalId, opts = {}) {
         const api = await getApi();
-        assertBoundAgent(api, agentId, "goals.close");
+        assertBoundAgent(api, agentId2, "goals.close");
         return unwrap(await api.closeGoal(goalId, opts), "Workflows.goals.close");
       }
     }
@@ -23854,8 +24492,8 @@ var init_workflow_api_service = __esm({
       return res.data;
     }, "unwrap");
     isWorkflowIdShaped = /* @__PURE__ */ __name((v) => /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(v) || /^wfc?_[A-Za-z0-9]/.test(v), "isWorkflowIdShaped");
-    assertBoundAgent = /* @__PURE__ */ __name((api, agentId, member) => {
-      if (agentId && agentId !== api.agentId) {
+    assertBoundAgent = /* @__PURE__ */ __name((api, agentId2, member) => {
+      if (agentId2 && agentId2 !== api.agentId) {
         throw new WorkflowApiError("FORBIDDEN", `Workflows.${member}: goals are scoped to the bound agent ${api.agentId}`, 403);
       }
     }, "assertBoundAgent");
@@ -23867,10 +24505,10 @@ var init_workflow_api_service = __esm({
       }
       credential;
       agentId;
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
         this.credential = credential;
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       /** PRO-1434 (main sync): auth rides the renewable request credential — resolve a current bearer per call. */
       async auth() {
@@ -24273,9 +24911,9 @@ var init_device_api_service = __esm({
         __name(this, "DeviceApi");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
+      constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential);
-        this.agentId = agentId;
+        this.agentId = agentId2;
       }
       async getDevices() {
         return this.httpGet(`/developer/devices/${this.agentId}`, {});
@@ -24623,8 +25261,8 @@ var init_secrets_api_service = __esm({
         __name(this, "SecretsApiService");
       }
       agentId;
-      constructor(baseUrl, credential, agentId) {
-        super(baseUrl, credential), this.agentId = agentId;
+      constructor(baseUrl, credential, agentId2) {
+        super(baseUrl, credential), this.agentId = agentId2;
       }
       unwrap(result, what) {
         if (!result.success || result.data === void 0) {
@@ -24734,26 +25372,26 @@ function buildSupervisionAgentsApi(call2) {
     /** Agents of the caller's own organization, with the supervision actions the caller holds on each. */
     list: /* @__PURE__ */ __name2(() => call2("agents.list"), "list"),
     /** One agent of the caller's organization (not found = other org or no such agent). */
-    get: /* @__PURE__ */ __name2((agentId) => call2("agents.get", agentId), "get"),
+    get: /* @__PURE__ */ __name2((agentId2) => call2("agents.get", agentId2), "get"),
     /** Recent execution logs of a supervised agent (metadata + message, no user ids). */
-    logs: /* @__PURE__ */ __name2((agentId, opts = {}) => call2("logs", agentId, {
+    logs: /* @__PURE__ */ __name2((agentId2, opts = {}) => call2("logs", agentId2, {
       ...opts
     }), "logs"),
-    runs: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2((opts = {}) => call2("runs.list", agentId, {
+    runs: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2((opts = {}) => call2("runs.list", agentId2, {
         ...opts
       }), "list"),
-      get: /* @__PURE__ */ __name2((runId) => call2("runs.get", agentId, {
+      get: /* @__PURE__ */ __name2((runId) => call2("runs.get", agentId2, {
         runId
       }), "get")
     }), "runs"),
     /** Read-only, and only the collections the org admin named on the supervision grant. */
-    data: /* @__PURE__ */ __name2((agentId) => ({
-      get: /* @__PURE__ */ __name2((collection, entryId) => call2("data.get", agentId, {
+    data: /* @__PURE__ */ __name2((agentId2) => ({
+      get: /* @__PURE__ */ __name2((collection, entryId) => call2("data.get", agentId2, {
         collection,
         entryId
       }), "get"),
-      query: /* @__PURE__ */ __name2((collection, filter, opts = {}) => call2("data.query", agentId, {
+      query: /* @__PURE__ */ __name2((collection, filter, opts = {}) => call2("data.query", agentId2, {
         collection,
         ...filter ? {
           filter
@@ -24761,19 +25399,19 @@ function buildSupervisionAgentsApi(call2) {
         ...opts
       }), "query")
     }), "data"),
-    versions: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2((opts = {}) => call2("versions.list", agentId, {
+    versions: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2((opts = {}) => call2("versions.list", agentId2, {
         ...opts
       }), "list"),
-      get: /* @__PURE__ */ __name2((version) => call2("versions.get", agentId, {
+      get: /* @__PURE__ */ __name2((version) => call2("versions.get", agentId2, {
         version
       }), "get"),
-      diff: /* @__PURE__ */ __name2((from, to) => call2("versions.diff", agentId, {
+      diff: /* @__PURE__ */ __name2((from, to) => call2("versions.diff", agentId2, {
         from,
         to
       }), "diff"),
       /** Chat a staged version. No tools run unless `opts.toolScope.skillIds` allowlists them. */
-      preview: /* @__PURE__ */ __name2((version, prompt, opts = {}) => call2("versions.preview", agentId, {
+      preview: /* @__PURE__ */ __name2((version, prompt, opts = {}) => call2("versions.preview", agentId2, {
         version,
         prompt,
         ...opts.toolScope ? {
@@ -24781,12 +25419,12 @@ function buildSupervisionAgentsApi(call2) {
         } : {}
       }), "preview"),
       /** Make `version` live. Compare-and-swap: refused unless `expectActive` is the live version. */
-      promote: /* @__PURE__ */ __name2(async (version, opts) => call2("versions.promote", agentId, {
+      promote: /* @__PURE__ */ __name2(async (version, opts) => call2("versions.promote", agentId2, {
         version,
         expectActive: requireExpectActive(opts, "versions.promote")
       }), "promote"),
       /** Soft-delete a SUPERSEDED version (the active version and the last version are refused). */
-      delete: /* @__PURE__ */ __name2((version) => call2("versions.delete", agentId, {
+      delete: /* @__PURE__ */ __name2((version) => call2("versions.delete", agentId2, {
         version
       }), "delete"),
       /**
@@ -24798,7 +25436,7 @@ function buildSupervisionAgentsApi(call2) {
         if (expectActive === null) {
           throw typedError("supervision_expect_active_required", "versions.rollback requires { expectActive } \u2014 the active version number (a rollback needs one)");
         }
-        return call2("versions.rollback", agentId, {
+        return call2("versions.rollback", agentId2, {
           version,
           expectActive
         });
@@ -24810,20 +25448,30 @@ function buildSupervisionAgentsApi(call2) {
       * tools) and never gets `egress: 'live'`.
       */
       session: /* @__PURE__ */ __name2(async (opts) => {
-        const opened = await call2("versions.session", agentId, {
+        const opened = await call2("versions.session", agentId2, {
           ...opts
         });
-        return buildTestSessionHandle(call2, agentId, opened);
+        return buildTestSessionHandle(call2, agentId2, opened);
       }, "session")
     }), "versions"),
+    /**
+    * BAC-2011 — register a job pinned in a STAGED `versionId` of the target (`supervision:register-job`, only from a
+    * workflow step the grant names). The job goes live with the ordinary promote of that version.
+    */
+    jobs: /* @__PURE__ */ __name2((agentId2) => ({
+      register: /* @__PURE__ */ __name2((opts) => call2("jobs.register", agentId2, {
+        versionId: opts?.versionId,
+        jobId: opts?.jobId
+      }), "register")
+    }), "jobs"),
     /** Read (`observe`) and release (`release`) a workflow of a supervised agent. */
-    workflows: /* @__PURE__ */ __name2((agentId) => ({
+    workflows: /* @__PURE__ */ __name2((agentId2) => ({
       /** One workflow: its live `activeVersionId` (deploy's `expectActive`) and its latest 20 versions. */
-      get: /* @__PURE__ */ __name2((workflowId) => call2("workflows.get", agentId, {
+      get: /* @__PURE__ */ __name2((workflowId) => call2("workflows.get", agentId2, {
         workflowId
       }), "get"),
       /** Create workflow `name` (inert: inactive, no version) or answer the existing one: `{ workflowId, name, created }`. */
-      create: /* @__PURE__ */ __name2((name, opts = {}) => call2("workflows.create", agentId, {
+      create: /* @__PURE__ */ __name2((name, opts = {}) => call2("workflows.create", agentId2, {
         name,
         ...opts?.description !== void 0 ? {
           description: opts.description
@@ -24833,7 +25481,7 @@ function buildSupervisionAgentsApi(call2) {
         } : {}
       }), "create"),
       /** Push a new, INACTIVE version (`activate` is always forced off; deploy it with `deploy`). */
-      push: /* @__PURE__ */ __name2((workflowId, definition) => call2("workflows.push", agentId, {
+      push: /* @__PURE__ */ __name2((workflowId, definition) => call2("workflows.push", agentId2, {
         workflowId,
         definition: {
           ...definition
@@ -24843,7 +25491,7 @@ function buildSupervisionAgentsApi(call2) {
       deploy: /* @__PURE__ */ __name2(async (workflowId, version, opts) => {
         const expectActive = requireExpectActiveId(opts, "workflows.deploy");
         const commitHash = optionalCommitHash(opts, "workflows.deploy");
-        return call2("workflows.deploy", agentId, {
+        return call2("workflows.deploy", agentId2, {
           workflowId,
           version,
           expectActive,
@@ -24853,45 +25501,45 @@ function buildSupervisionAgentsApi(call2) {
         });
       }, "deploy")
     }), "workflows"),
-    persona: /* @__PURE__ */ __name2((agentId) => ({
-      versions: /* @__PURE__ */ __name2(() => call2("persona.versions", agentId), "versions"),
+    persona: /* @__PURE__ */ __name2((agentId2) => ({
+      versions: /* @__PURE__ */ __name2(() => call2("persona.versions", agentId2), "versions"),
       /** Serve persona `version`. Compare-and-swap on the served persona version. */
-      activate: /* @__PURE__ */ __name2(async (version, opts) => call2("persona.activate", agentId, {
+      activate: /* @__PURE__ */ __name2(async (version, opts) => call2("persona.activate", agentId2, {
         version,
         expectActive: requireExpectActive(opts, "persona.activate")
       }), "activate")
     }), "persona"),
-    source: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2(() => call2("source.list", agentId), "list"),
-      get: /* @__PURE__ */ __name2((path3) => call2("source.get", agentId, {
+    source: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2(() => call2("source.list", agentId2), "list"),
+      get: /* @__PURE__ */ __name2((path3) => call2("source.get", agentId2, {
         path: path3
       }), "get")
     }), "source"),
     /** Environment variable NAMES only — values are never returned. */
-    env: /* @__PURE__ */ __name2((agentId) => ({
-      keys: /* @__PURE__ */ __name2(() => call2("env.keys", agentId), "keys")
+    env: /* @__PURE__ */ __name2((agentId2) => ({
+      keys: /* @__PURE__ */ __name2(() => call2("env.keys", agentId2), "keys")
     }), "env"),
     /**
     * SV (LUA-1080) — what `agentId` serves RIGHT NOW: its live skills (with tools), the published persona and its
     * pre/postprocessors, each with the version id an agent version snapshot would pin. Works with no promoted agent
     * version, so a release can diff live against a staged version. Metadata and hashes only (`observe`).
     */
-    deployed: /* @__PURE__ */ __name2((agentId) => call2("primitives.deployed", agentId), "deployed"),
+    deployed: /* @__PURE__ */ __name2((agentId2) => call2("primitives.deployed", agentId2), "deployed"),
     /**
     * U25 — supervision events of the target (`observe`): each event of a subscribed kind starts
     * one of the CALLER's own triggers (`triggerName`) with a `source: 'supervision'` body.
     */
-    events: /* @__PURE__ */ __name2((agentId) => ({
-      subscribe: /* @__PURE__ */ __name2((opts) => call2("events.subscribe", agentId, {
+    events: /* @__PURE__ */ __name2((agentId2) => ({
+      subscribe: /* @__PURE__ */ __name2((opts) => call2("events.subscribe", agentId2, {
         kinds: Array.isArray(opts?.kinds) ? [
           ...opts.kinds
         ] : opts?.kinds,
         triggerName: opts?.triggerName
       }), "subscribe"),
-      unsubscribe: /* @__PURE__ */ __name2((triggerName) => call2("events.unsubscribe", agentId, {
+      unsubscribe: /* @__PURE__ */ __name2((triggerName) => call2("events.unsubscribe", agentId2, {
         triggerName
       }), "unsubscribe"),
-      list: /* @__PURE__ */ __name2(() => call2("events.list", agentId), "list")
+      list: /* @__PURE__ */ __name2(() => call2("events.list", agentId2), "list")
     }), "events"),
     // wave 2 U1
     /**
@@ -24918,26 +25566,26 @@ function buildSupervisionAgentsApi(call2) {
       approval: approvalIdsOf(opts?.approval)
     }), "create"),
     // wave 2 U6 — the target's connections (`observe`): list, and READ catalogue checks only.
-    integrations: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2(() => call2("integrations.list", agentId), "list"),
-      check: /* @__PURE__ */ __name2((connectionId, check) => call2("integrations.check", agentId, {
+    integrations: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2(() => call2("integrations.list", agentId2), "list"),
+      check: /* @__PURE__ */ __name2((connectionId, check) => call2("integrations.check", agentId2, {
         connectionId,
         check
       }), "check")
     }), "integrations"),
     // wave 2 U30
     /** Recorded metrics of the target (`observe`): by `name` or `objectiveId`, bucketed `1h` / `1d`. */
-    metrics: /* @__PURE__ */ __name2((agentId) => ({
-      query: /* @__PURE__ */ __name2((q) => call2("metrics.query", agentId, {
+    metrics: /* @__PURE__ */ __name2((agentId2) => ({
+      query: /* @__PURE__ */ __name2((q) => call2("metrics.query", agentId2, {
         ...q
       }), "query")
     }), "metrics"),
     /** Objectives of the target: list (`observe`); propose (`act`) — never effective until the OWNER confirms. */
-    objectives: /* @__PURE__ */ __name2((agentId) => ({
-      list: /* @__PURE__ */ __name2((opts = {}) => call2("objectives.list", agentId, {
+    objectives: /* @__PURE__ */ __name2((agentId2) => ({
+      list: /* @__PURE__ */ __name2((opts = {}) => call2("objectives.list", agentId2, {
         ...opts
       }), "list"),
-      propose: /* @__PURE__ */ __name2((proposal) => call2("objectives.propose", agentId, {
+      propose: /* @__PURE__ */ __name2((proposal) => call2("objectives.propose", agentId2, {
         proposal
       }), "propose")
     }), "objectives"),
@@ -24947,13 +25595,13 @@ function buildSupervisionAgentsApi(call2) {
     * `lastAgentChangeAt`, so a supervisor can back off while a person is working on the agent;
     * `acquire` / `release` (`act`) take, renew or drop the CALLER's own lease (1-240 minutes).
     */
-    lease: /* @__PURE__ */ __name2((agentId) => ({
-      get: /* @__PURE__ */ __name2(() => call2("lease.get", agentId), "get"),
-      acquire: /* @__PURE__ */ __name2((opts) => call2("lease.acquire", agentId, {
+    lease: /* @__PURE__ */ __name2((agentId2) => ({
+      get: /* @__PURE__ */ __name2(() => call2("lease.get", agentId2), "get"),
+      acquire: /* @__PURE__ */ __name2((opts) => call2("lease.acquire", agentId2, {
         ttlMinutes: opts?.ttlMinutes,
         reason: opts?.reason
       }), "acquire"),
-      release: /* @__PURE__ */ __name2(() => call2("lease.release", agentId), "release")
+      release: /* @__PURE__ */ __name2(() => call2("lease.release", agentId2), "release")
     }), "lease"),
     // wave 2 U4b
     /**
@@ -24962,15 +25610,15 @@ function buildSupervisionAgentsApi(call2) {
     * and revoke grants on it; external records are kept. `delete` also needs the agent's exact current name and
     * ends the 30-day restore window.
     */
-    lifecycle: /* @__PURE__ */ __name2((agentId) => ({
-      archive: /* @__PURE__ */ __name2(() => call2("lifecycle.archive", agentId), "archive"),
-      delete: /* @__PURE__ */ __name2((opts) => call2("lifecycle.delete", agentId, {
+    lifecycle: /* @__PURE__ */ __name2((agentId2) => ({
+      archive: /* @__PURE__ */ __name2(() => call2("lifecycle.archive", agentId2), "archive"),
+      delete: /* @__PURE__ */ __name2((opts) => call2("lifecycle.delete", agentId2, {
         confirmName: opts?.confirmName
       }), "delete")
     }), "lifecycle"),
     /** U4b — set the model, the name or NON-secret env keys (`act`); keys ending SECRET/TOKEN/KEY/PASSWORD refuse. */
-    config: /* @__PURE__ */ __name2((agentId) => ({
-      set: /* @__PURE__ */ __name2((input) => call2("config.set", agentId, {
+    config: /* @__PURE__ */ __name2((agentId2) => ({
+      set: /* @__PURE__ */ __name2((input) => call2("config.set", agentId2, {
         ...input?.model !== void 0 ? {
           model: input.model
         } : {},
@@ -24993,7 +25641,7 @@ function buildSupervisionAgentsApi(call2) {
     * `dataCollections`, and `notifyOwner` (the owner opts in to `notifyOwner` messages by approving it). When the
     * caller already holds a grant, the request upgrades it and the approver sees exactly what is added.
     */
-    requestAccess: /* @__PURE__ */ __name2((agentId, opts) => call2("access.request", agentId, {
+    requestAccess: /* @__PURE__ */ __name2((agentId2, opts) => call2("access.request", agentId2, {
       actions: Array.isArray(opts?.actions) ? [
         ...opts.actions
       ] : opts?.actions,
@@ -25026,15 +25674,15 @@ function buildSupervisionAgentsApi(call2) {
     * `'active'` — against a suite the owner defined (needs `supervision:preview` and the preview switch); results
     * are `observe`, transcripts (message bodies) need `observe-content`. `cancel` stops only runs you started.
     */
-    evals: /* @__PURE__ */ __name2((agentId) => ({
+    evals: /* @__PURE__ */ __name2((agentId2) => ({
       /** The target's suites (key, revision, case count, pass rate). */
-      suites: /* @__PURE__ */ __name2(() => call2("evals.suites.get", agentId, {}), "suites"),
+      suites: /* @__PURE__ */ __name2(() => call2("evals.suites.get", agentId2, {}), "suites"),
       /** One suite with its parsed cases. */
-      suite: /* @__PURE__ */ __name2((key) => call2("evals.suites.get", agentId, {
+      suite: /* @__PURE__ */ __name2((key) => call2("evals.suites.get", agentId2, {
         key
       }), "suite"),
       /** Start a run: `{ runId, estimate }`. Bounded by the suite budget, the agent's monthly cap and a daily cap. */
-      run: /* @__PURE__ */ __name2((opts) => call2("evals.run", agentId, {
+      run: /* @__PURE__ */ __name2((opts) => call2("evals.run", agentId2, {
         suite: opts?.suite,
         version: opts?.version,
         ...opts?.maxCredits !== void 0 ? {
@@ -25045,20 +25693,20 @@ function buildSupervisionAgentsApi(call2) {
         } : {}
       }), "run"),
       /** Runs, newest first (`suite`, `version`, `status`, `limit` ≤ 50, `before`). */
-      runs: /* @__PURE__ */ __name2((opts = {}) => call2("evals.get", agentId, {
+      runs: /* @__PURE__ */ __name2((opts = {}) => call2("evals.get", agentId2, {
         ...opts
       }), "runs"),
       /** One run with its per-case results (check detail and judge reasoning only with observe-content). */
-      getRun: /* @__PURE__ */ __name2((runId) => call2("evals.get", agentId, {
+      getRun: /* @__PURE__ */ __name2((runId) => call2("evals.get", agentId2, {
         runId
       }), "getRun"),
       /** One case's transcript (needs observe-content; a holdout case is not found). */
-      transcript: /* @__PURE__ */ __name2((runId, caseId) => call2("evals.get", agentId, {
+      transcript: /* @__PURE__ */ __name2((runId, caseId) => call2("evals.get", agentId2, {
         runId,
         caseId
       }), "transcript"),
       /** Cancel a queued or running run YOU started (works with the preview switch off). */
-      cancel: /* @__PURE__ */ __name2((runId) => call2("evals.cancel", agentId, {
+      cancel: /* @__PURE__ */ __name2((runId) => call2("evals.cancel", agentId2, {
         runId
       }), "cancel")
     }), "evals"),
@@ -25070,7 +25718,7 @@ function buildSupervisionAgentsApi(call2) {
     * An optional `idempotencyKey` makes a retry answer the first call's receipt instead of posting again; it is
     * forwarded only when present, so a keyless call sends exactly `{ message }`.
     */
-    notifyOwner: /* @__PURE__ */ __name2((agentId, input) => call2("owner.notify", agentId, {
+    notifyOwner: /* @__PURE__ */ __name2((agentId2, input) => call2("owner.notify", agentId2, {
       message: input?.message,
       ...input?.idempotencyKey !== void 0 ? {
         idempotencyKey: input.idempotencyKey
@@ -25085,8 +25733,8 @@ function buildSupervisionAgentsApi(call2) {
     * exactly `Give your <integration> connection to "<agentName>"?`, then call this from a code step of THAT run with
     * `{ approval: { runId, stepId } }`. Needs an `act` grant on the agent.
     */
-    connections: /* @__PURE__ */ __name2((agentId) => ({
-      assign: /* @__PURE__ */ __name2((connectionId, opts) => call2("connections.assign", agentId, {
+    connections: /* @__PURE__ */ __name2((agentId2) => ({
+      assign: /* @__PURE__ */ __name2((connectionId, opts) => call2("connections.assign", agentId2, {
         connectionId,
         approval: opts?.approval && typeof opts.approval === "object" ? {
           ...opts.approval
@@ -25098,8 +25746,8 @@ function buildSupervisionAgentsApi(call2) {
     * Attach requests held for `agentId` to its env (`act`, on the agent owner's own turn; never overwrites a key).
     * Answers the env keys set, never a value.
     */
-    secrets: /* @__PURE__ */ __name2((agentId) => ({
-      attach: /* @__PURE__ */ __name2((requestIds) => call2("secrets.attach", agentId, {
+    secrets: /* @__PURE__ */ __name2((agentId2) => ({
+      attach: /* @__PURE__ */ __name2((requestIds) => call2("secrets.attach", agentId2, {
         requestIds: copyList(requestIds)
       }), "attach")
     }), "secrets")
@@ -25114,14 +25762,14 @@ function copyList(value3) {
 }
 __name(copyList, "copyList");
 __name2(copyList, "copyList");
-function buildTestSessionHandle(call2, agentId, opened) {
+function buildTestSessionHandle(call2, agentId2, opened) {
   const sessionId = opened?.id;
   return {
     sessionId,
     version: opened?.version,
     session: opened,
     /** One multi-turn chat turn (same thread unless `threadId` names another key). */
-    chat: /* @__PURE__ */ __name2((input) => call2("sessions.chat", agentId, {
+    chat: /* @__PURE__ */ __name2((input) => call2("sessions.chat", agentId2, {
       sessionId,
       ...typeof input === "string" ? {
         prompt: input
@@ -25130,16 +25778,16 @@ function buildTestSessionHandle(call2, agentId, opened) {
       }
     }), "chat"),
     /** Fire one primitive against the staged version: `{ trigger, payload }` in this phase. */
-    fire: /* @__PURE__ */ __name2((input) => call2("sessions.fire", agentId, {
+    fire: /* @__PURE__ */ __name2((input) => call2("sessions.fire", agentId2, {
       sessionId,
       ...input
     }), "fire"),
     /** The effects the session recorded instead of executing. */
-    effects: /* @__PURE__ */ __name2(() => call2("sessions.effects", agentId, {
+    effects: /* @__PURE__ */ __name2(() => call2("sessions.effects", agentId2, {
       sessionId
     }), "effects"),
     /** Close: purges the session's shadow Data and recorded effects. */
-    close: /* @__PURE__ */ __name2(() => call2("sessions.close", agentId, {
+    close: /* @__PURE__ */ __name2(() => call2("sessions.close", agentId2, {
       sessionId
     }), "close")
   };
@@ -25658,7 +26306,7 @@ var LuaMCPServer = class {
       throw new Error("MCP server name is required");
     }
     if (config.transport === "stdio") {
-      throw new Error(`stdio transport is not supported yet. Please use 'streamable-http' (recommended) or 'sse' transport instead. See https://docs.heylua.ai/overview/mcp-servers for migration guide.`);
+      throw new Error(`stdio transport is not supported. Please use 'streamable-http' (recommended) or 'sse' transport instead. See https://docs.heylua.ai/overview/mcp-servers for migration guide.`);
     }
     if ((config.transport === "sse" || config.transport === "streamable-http") && !config.url) {
       throw new Error(`URL is required for ${config.transport} transport`);
@@ -26774,7 +27422,14 @@ var Agents = {
     const { getAgentsInstance: getAgentsInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
     const agents = await getAgentsInstance2();
     return agents.superviseForSandbox(op, targetAgentId, args);
-  })
+  }),
+  jobs: /* @__PURE__ */ __name((agentId2) => ({
+    register: /* @__PURE__ */ __name(async (input) => {
+      const { getAgentsInstance: getAgentsInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+      const agents = await getAgentsInstance2();
+      return agents.registerJobForSandbox(agentId2, input);
+    }, "register")
+  }), "jobs")
 };
 var Voice = {
   async call(input) {