lua-cli 3.45.0 → 3.47.0

package/dist/workflow-builder.js

@@ -84,8 +84,8 @@ function workflowJobTargetTemplatePath(binding) {
 __name(workflowJobTargetTemplatePath, "workflowJobTargetTemplatePath");
 __name2(workflowJobTargetTemplatePath, "workflowJobTargetTemplatePath");
 function isWorkflowJobTargetTemplate(target) {
-  const agentId = target?.agentId;
-  return !!agentId && typeof agentId === "object";
+  const agentId2 = target?.agentId;
+  return !!agentId2 && typeof agentId2 === "object";
 }
 __name(isWorkflowJobTargetTemplate, "isWorkflowJobTargetTemplate");
 __name2(isWorkflowJobTargetTemplate, "isWorkflowJobTargetTemplate");
@@ -107,12 +107,12 @@ function workflowJobTargetProblem(target, plugins, luaApi) {
   if (target === void 0) return null;
   if (!target || typeof target !== "object" || Array.isArray(target)) return "target must be { agentId }";
   const keys = Object.keys(target);
-  const agentId = target.agentId;
+  const agentId2 = target.agentId;
   if (keys.length !== 1 || !("agentId" in target)) return "target must be exactly { agentId }";
-  if (typeof agentId === "string") {
-    if (!agentId.trim() || agentId.length > 256) return "target must be exactly { agentId: <non-empty string> }";
-    if (agentId.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
-  } else if (workflowJobTargetTemplatePath(agentId) === null) {
+  if (typeof agentId2 === "string") {
+    if (!agentId2.trim() || agentId2.length > 256) return "target must be exactly { agentId: <non-empty string> }";
+    if (agentId2.includes("${")) return "a run-input target is written template('${initData.<path>}'), never a string with ${\u2026}";
+  } else if (workflowJobTargetTemplatePath(agentId2) === null) {
     return "target.agentId must be a static id or template('${initData.<path>}') \u2014 exactly one initData placeholder, no default";
   }
   const hasPlugins = Array.isArray(plugins) && plugins.length > 0;
@@ -140,25 +140,25 @@ function readInitDataPath(root, path) {
 __name(readInitDataPath, "readInitDataPath");
 __name2(readInitDataPath, "readInitDataPath");
 function renderWorkflowJobTarget(target, initData) {
-  const agentId = target?.agentId;
-  if (target === void 0 || target === null || agentId === void 0) return {
+  const agentId2 = target?.agentId;
+  if (target === void 0 || target === null || agentId2 === void 0) return {
     ok: true,
     agentId: void 0,
     templated: false
   };
-  if (typeof agentId === "string") {
-    if (!agentId.trim() || agentId.includes("${")) return {
+  if (typeof agentId2 === "string") {
+    if (!agentId2.trim() || agentId2.includes("${")) return {
       ok: false,
       reason: "invalid",
       message: "target.agentId is invalid"
     };
     return {
       ok: true,
-      agentId,
+      agentId: agentId2,
       templated: false
     };
   }
-  const path = workflowJobTargetTemplatePath(agentId);
+  const path = workflowJobTargetTemplatePath(agentId2);
   if (path === null) return {
     ok: false,
     reason: "invalid",
@@ -196,6 +196,7 @@ import { z } from "zod";
 import { z as z2 } from "zod";
 import { z as z3 } from "zod";
 import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 var __defProp3 = Object.defineProperty;
 var __name3 = /* @__PURE__ */ __name((target, value3) => __defProp3(target, "name", { value: value3, configurable: true }), "__name");
 var PLUMBING_THREAD_CHANNELS = [
@@ -433,8 +434,8 @@ function isPlatformInvocationCaller(v) {
 }
 __name(isPlatformInvocationCaller, "isPlatformInvocationCaller");
 __name3(isPlatformInvocationCaller, "isPlatformInvocationCaller");
-function supervisionSubjectId(agentId) {
-  return `agent:${agentId}`;
+function supervisionSubjectId(agentId2) {
+  return `agent:${agentId2}`;
 }
 __name(supervisionSubjectId, "supervisionSubjectId");
 __name3(supervisionSubjectId, "supervisionSubjectId");
@@ -561,7 +562,14 @@ var SUPERVISION_OPS = {
   * that was ACTIVE before, is OLDER than the active one and was active within the last 7 days. CAS on the active
   * version; only from a workflow step the watchdog grant names. Held only by a watchdog grant.
   */
-  "versions.rollback": "rollback"
+  "versions.rollback": "rollback",
+  // [JR]
+  /**
+  * JR (BAC-2011) — `Agents.jobs(id).register({ versionId, jobId })`: register a job that is pinned in a STAGED version of
+  * the target (`snapshot.jobs[]`) so the promote activates and schedules it. Mongo-only marker write; EventBridge stays
+  * on the post-promote reconcile. Release-class: needs `register-job` AND `release` on the grant, from a signed step.
+  */
+  "jobs.register": "register-job"
 };
 function isSupervisionOp(op) {
   return typeof op === "string" && Object.prototype.hasOwnProperty.call(SUPERVISION_OPS, op);
@@ -754,6 +762,12 @@ var SUPERVISION_OPS_WAVE2 = {
     gate: "rollback",
     targeted: true,
     item: "WD"
+  },
+  /** JR (BAC-2011) — `Agents.jobs(id).register({ versionId, jobId })`: a job pinned in a STAGED version (`register-job`). */
+  "jobs.register": {
+    gate: "register-job",
+    targeted: true,
+    item: "JR"
   }
 };
 var SUPERVISION_WATCHDOG_OPS = {
@@ -1686,9 +1700,9 @@ function isAgentConnectionMountMode(value3) {
 }
 __name(isAgentConnectionMountMode, "isAgentConnectionMountMode");
 __name3(isAgentConnectionMountMode, "isAgentConnectionMountMode");
-function agentConnectionBindingFor(bindings, agentId) {
-  if (!Array.isArray(bindings) || !agentId) return void 0;
-  return bindings.find((entry) => !!entry && typeof entry === "object" && entry.agentId === agentId);
+function agentConnectionBindingFor(bindings, agentId2) {
+  if (!Array.isArray(bindings) || !agentId2) return void 0;
+  return bindings.find((entry) => !!entry && typeof entry === "object" && entry.agentId === agentId2);
 }
 __name(agentConnectionBindingFor, "agentConnectionBindingFor");
 __name3(agentConnectionBindingFor, "agentConnectionBindingFor");
@@ -2104,9 +2118,9 @@ function formatClientOutcomeTurns(outcomes) {
 }
 __name(formatClientOutcomeTurns, "formatClientOutcomeTurns");
 __name3(formatClientOutcomeTurns, "formatClientOutcomeTurns");
-function parseClientOutcomeTurns(text) {
-  if (typeof text !== "string") return null;
-  const lines = text.split("\n").map((line) => line.trim()).filter(Boolean);
+function parseClientOutcomeTurns(text2) {
+  if (typeof text2 !== "string") return null;
+  const lines = text2.split("\n").map((line) => line.trim()).filter(Boolean);
   if (lines.length === 0 || lines.length > CLIENT_OUTCOME_TURNS_MAX) return null;
   const out = [];
   for (const line of lines) {
@@ -2260,8 +2274,8 @@ function describeConnectionRequest(input) {
 }
 __name(describeConnectionRequest, "describeConnectionRequest");
 __name3(describeConnectionRequest, "describeConnectionRequest");
-function operationDailyCapKey(agentId, connectionId, currency, utcDay) {
-  return `opcap:${agentId}:${connectionId}:${currency.toUpperCase()}:${utcDay}`;
+function operationDailyCapKey(agentId2, connectionId, currency, utcDay) {
+  return `opcap:${agentId2}:${connectionId}:${currency.toUpperCase()}:${utcDay}`;
 }
 __name(operationDailyCapKey, "operationDailyCapKey");
 __name3(operationDailyCapKey, "operationDailyCapKey");
@@ -2318,7 +2332,7 @@ function parseCapAmount(value3) {
 }
 __name(parseCapAmount, "parseCapAmount");
 __name3(parseCapAmount, "parseCapAmount");
-function parseAgentConnectionOperationLimits(agentId, value3) {
+function parseAgentConnectionOperationLimits(agentId2, value3) {
   if (!isPlainObject(value3)) return {
     ok: false,
     error: "limits must be an object"
@@ -2331,7 +2345,7 @@ function parseAgentConnectionOperationLimits(agentId, value3) {
     };
   }
   const limits = {
-    agentId
+    agentId: agentId2
   };
   if (value3.caps !== void 0 && value3.caps !== null) {
     const caps = value3.caps;
@@ -2419,17 +2433,17 @@ function parseAgentConnectionOperationLimits(agentId, value3) {
 }
 __name(parseAgentConnectionOperationLimits, "parseAgentConnectionOperationLimits");
 __name3(parseAgentConnectionOperationLimits, "parseAgentConnectionOperationLimits");
-function findAgentConnectionOperationLimits(stored, agentId) {
-  if (!agentId || stored === void 0 || stored === null) return void 0;
+function findAgentConnectionOperationLimits(stored, agentId2) {
+  if (!agentId2 || stored === void 0 || stored === null) return void 0;
   if (!Array.isArray(stored)) return {
-    agentId,
+    agentId: agentId2,
     unreadable: true
   };
-  const entry = stored.find((row) => isPlainObject(row) && row.agentId === agentId);
+  const entry = stored.find((row) => isPlainObject(row) && row.agentId === agentId2);
   if (!entry) return void 0;
-  const parsed = parseAgentConnectionOperationLimits(agentId, entry);
+  const parsed = parseAgentConnectionOperationLimits(agentId2, entry);
   return parsed.ok ? parsed.limits : {
-    agentId,
+    agentId: agentId2,
     unreadable: true
   };
 }
@@ -2495,9 +2509,9 @@ function idOrName(value3) {
 }
 __name(idOrName, "idOrName");
 __name3(idOrName, "idOrName");
-function addresses(text) {
-  if (typeof text !== "string") return [];
-  return (text.match(EMAIL_IN_TEXT) ?? []).map((address) => address.toLowerCase());
+function addresses(text2) {
+  if (typeof text2 !== "string") return [];
+  return (text2.match(EMAIL_IN_TEXT) ?? []).map((address) => address.toLowerCase());
 }
 __name(addresses, "addresses");
 __name3(addresses, "addresses");
@@ -2651,8 +2665,8 @@ __name3(contentRecordExcluded, "contentRecordExcluded");
 var MAX_EXCLUSION_DEPTH = 32;
 function jsonLookingString(value3) {
   if (typeof value3 !== "string") return false;
-  const text = value3.trim();
-  return text.startsWith("{") && text.endsWith("}") || text.startsWith("[") && text.endsWith("]");
+  const text2 = value3.trim();
+  return text2.startsWith("{") && text2.endsWith("}") || text2.startsWith("[") && text2.endsWith("]");
 }
 __name(jsonLookingString, "jsonLookingString");
 __name3(jsonLookingString, "jsonLookingString");
@@ -2676,11 +2690,11 @@ function applyContentExclusions(value3, exclusions) {
   };
   let removed = 0;
   let blocked = false;
-  const walkString = /* @__PURE__ */ __name3((text, depth) => {
-    const parsed = parseEmbeddedJson(text);
-    if (!parsed) return text;
+  const walkString = /* @__PURE__ */ __name3((text2, depth) => {
+    const parsed = parseEmbeddedJson(text2);
+    if (!parsed) return text2;
     const next2 = walk22(parsed.value, depth);
-    return next2 === parsed.value ? text : JSON.stringify(next2);
+    return next2 === parsed.value ? text2 : JSON.stringify(next2);
   }, "walkString");
   const walk22 = /* @__PURE__ */ __name3((node, depth) => {
     if (blocked) return node;
@@ -2786,8 +2800,8 @@ function contentProjectionParameters(params) {
     if (PROJECTION_PARAMETER_KEYS.has(name)) {
       found.push(key);
     } else if (name === "expand") {
-      const text = typeof value3 === "string" ? value3 : JSON.stringify(value3 ?? "");
-      if (/select/i.test(normaliseRequestParameterKey(text))) found.push(key);
+      const text2 = typeof value3 === "string" ? value3 : JSON.stringify(value3 ?? "");
+      if (/select/i.test(normaliseRequestParameterKey(text2))) found.push(key);
     }
   }
   return found;
@@ -2876,9 +2890,9 @@ __name(currencyMinorUnitExponent, "currencyMinorUnitExponent");
 __name3(currencyMinorUnitExponent, "currencyMinorUnitExponent");
 var DECIMAL_AMOUNT = /^(\d+)(?:\.(\d+))?$/;
 function majorToMinorUnits(amount, currency) {
-  const text = typeof amount === "number" ? Number.isFinite(amount) ? String(amount) : "" : typeof amount === "string" ? amount.trim() : "";
-  if (/e/i.test(text)) return void 0;
-  const match = DECIMAL_AMOUNT.exec(text);
+  const text2 = typeof amount === "number" ? Number.isFinite(amount) ? String(amount) : "" : typeof amount === "string" ? amount.trim() : "";
+  if (/e/i.test(text2)) return void 0;
+  const match = DECIMAL_AMOUNT.exec(text2);
   if (!match) return void 0;
   const exponent = currencyMinorUnitExponent(currency);
   const whole = match[1];
@@ -2892,9 +2906,9 @@ function majorToMinorUnits(amount, currency) {
 __name(majorToMinorUnits, "majorToMinorUnits");
 __name3(majorToMinorUnits, "majorToMinorUnits");
 function readMinorUnits(amount) {
-  const text = typeof amount === "number" ? String(amount) : typeof amount === "string" ? amount.trim() : "";
-  if (!/^\d+$/.test(text)) return void 0;
-  const minor = Number(text);
+  const text2 = typeof amount === "number" ? String(amount) : typeof amount === "string" ? amount.trim() : "";
+  if (!/^\d+$/.test(text2)) return void 0;
+  const minor = Number(text2);
   return Number.isSafeInteger(minor) ? minor : void 0;
 }
 __name(readMinorUnits, "readMinorUnits");
@@ -3020,8 +3034,8 @@ function isWorkflowSecretKey(key) {
 }
 __name(isWorkflowSecretKey, "isWorkflowSecretKey");
 __name3(isWorkflowSecretKey, "isWorkflowSecretKey");
-function applyPatterns(text, patterns, counter) {
-  let out = text;
+function applyPatterns(text2, patterns, counter) {
+  let out = text2;
   for (const { re, suffix } of patterns) {
     re.lastIndex = 0;
     if (!re.test(out)) continue;
@@ -3043,21 +3057,21 @@ function applyPatterns(text, patterns, counter) {
 }
 __name(applyPatterns, "applyPatterns");
 __name3(applyPatterns, "applyPatterns");
-function scrubSecretText(text) {
-  if (typeof text !== "string" || text.length < 4) return text;
-  return applyPatterns(applyPatterns(text, SECRET_LITERAL_PATTERNS), SECRET_PAIR_PATTERNS);
+function scrubSecretText(text2) {
+  if (typeof text2 !== "string" || text2.length < 4) return text2;
+  return applyPatterns(applyPatterns(text2, SECRET_LITERAL_PATTERNS), SECRET_PAIR_PATTERNS);
 }
 __name(scrubSecretText, "scrubSecretText");
 __name3(scrubSecretText, "scrubSecretText");
-function scrubSecretTextCounted(text) {
-  if (typeof text !== "string" || text.length < 4) return {
-    text,
+function scrubSecretTextCounted(text2) {
+  if (typeof text2 !== "string" || text2.length < 4) return {
+    text: text2,
     redactions: 0
   };
   const counter = {
     redactions: 0
   };
-  const out = applyPatterns(applyPatterns(text, SECRET_LITERAL_PATTERNS, counter), SECRET_PAIR_PATTERNS, counter);
+  const out = applyPatterns(applyPatterns(text2, SECRET_LITERAL_PATTERNS, counter), SECRET_PAIR_PATTERNS, counter);
   return {
     text: out,
     redactions: counter.redactions
@@ -3067,12 +3081,12 @@ __name(scrubSecretTextCounted, "scrubSecretTextCounted");
 __name3(scrubSecretTextCounted, "scrubSecretTextCounted");
 var SCRUB_INPUT_MAX_CHARS = 16 * 1024;
 var SCRUB_CUT_BACKOFF_CHARS = 256;
-function boundScrubInput(text, max = SCRUB_INPUT_MAX_CHARS) {
-  if (typeof text !== "string" || text.length <= max) return text;
-  const window = text.slice(Math.max(0, max - SCRUB_CUT_BACKOFF_CHARS), max);
+function boundScrubInput(text2, max = SCRUB_INPUT_MAX_CHARS) {
+  if (typeof text2 !== "string" || text2.length <= max) return text2;
+  const window = text2.slice(Math.max(0, max - SCRUB_CUT_BACKOFF_CHARS), max);
   const ws = window.search(/\s\S*$/);
   const cut2 = ws >= 0 ? max - window.length + ws : max;
-  return `${text.slice(0, cut2)}\u2026`;
+  return `${text2.slice(0, cut2)}\u2026`;
 }
 __name(boundScrubInput, "boundScrubInput");
 __name3(boundScrubInput, "boundScrubInput");
@@ -3098,9 +3112,9 @@ function messageText(value3) {
 __name(messageText, "messageText");
 __name3(messageText, "messageText");
 function scrubProviderMessage(raw, max = PROVIDER_MESSAGE_MAX_CHARS) {
-  const text = boundScrubInput(messageText(raw)).replace(/\s+/g, " ").trim();
-  if (!text) return void 0;
-  const out = scrubSecretText(text);
+  const text2 = boundScrubInput(messageText(raw)).replace(/\s+/g, " ").trim();
+  if (!text2) return void 0;
+  const out = scrubSecretText(text2);
   return out.length > max ? `${out.slice(0, max - 1)}\u2026` : out;
 }
 __name(scrubProviderMessage, "scrubProviderMessage");
@@ -3206,9 +3220,9 @@ function evalCaseThreadId(runId, caseId) {
 }
 __name(evalCaseThreadId, "evalCaseThreadId");
 __name3(evalCaseThreadId, "evalCaseThreadId");
-function evalMonthlyCapKey(agentId, at = /* @__PURE__ */ new Date()) {
+function evalMonthlyCapKey(agentId2, at = /* @__PURE__ */ new Date()) {
   const yyyymm = `${at.getUTCFullYear()}${String(at.getUTCMonth() + 1).padStart(2, "0")}`;
-  return `evalcap:${agentId}:${yyyymm}`;
+  return `evalcap:${agentId2}:${yyyymm}`;
 }
 __name(evalMonthlyCapKey, "evalMonthlyCapKey");
 __name3(evalMonthlyCapKey, "evalMonthlyCapKey");
@@ -3302,19 +3316,19 @@ var MEMBERS = [
   "account"
 ];
 var FORMAT_CHARS = /[\p{Cf}\u200b-\u200d\u202a-\u202e\u2066-\u2069\ufeff]/u;
-function hasFormatCharacters(text) {
-  return FORMAT_CHARS.test(text);
+function hasFormatCharacters(text2) {
+  return FORMAT_CHARS.test(text2);
 }
 __name(hasFormatCharacters, "hasFormatCharacters");
 __name3(hasFormatCharacters, "hasFormatCharacters");
-var oneLine = /* @__PURE__ */ __name3((text) => text.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029"\u201c\u201d]/g, " ").replace(/\s+/g, " ").trim(), "oneLine");
+var oneLine = /* @__PURE__ */ __name3((text2) => text2.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029"\u201c\u201d]/g, " ").replace(/\s+/g, " ").trim(), "oneLine");
 function normalizedHandoverName(name) {
   return oneLine(name.normalize("NFKC")).toLowerCase();
 }
 __name(normalizedHandoverName, "normalizedHandoverName");
 __name3(normalizedHandoverName, "normalizedHandoverName");
-function handoverAgentIdSuffix(agentId) {
-  return agentId.slice(-6);
+function handoverAgentIdSuffix(agentId2) {
+  return agentId2.slice(-6);
 }
 __name(handoverAgentIdSuffix, "handoverAgentIdSuffix");
 __name3(handoverAgentIdSuffix, "handoverAgentIdSuffix");
@@ -3382,8 +3396,8 @@ __name3(normalizeConnectionHandoverArgs, "normalizeConnectionHandoverArgs");
 function approvalPayloadCoversConnectionHandover(payload, stored) {
   const p = parseConnectionHandoverApprovalPayload(payload);
   if (!p) return false;
-  const text = describeConnectionHandoverApproval(payload) ?? "";
-  if (text.length > CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS || scrubSecretText(text) !== text) return false;
+  const text2 = describeConnectionHandoverApproval(payload) ?? "";
+  if (text2.length > CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS || scrubSecretText(text2) !== text2) return false;
   const storedAccount = stored.account?.trim() || void 0;
   return p.connectionId === stored.connectionId && p.agentId === stored.agentId && p.agentName === stored.agentName.trim() && p.supervisorName === stored.supervisorName.trim() && p.integration === stored.integration && p.account === storedAccount;
 }
@@ -3747,13 +3761,13 @@ function parseThreadFollowUpInput(input) {
   if (hasPrompt === hasMessage) return null;
   const raw = hasPrompt ? o.prompt : o.message;
   if (typeof raw !== "string") return null;
-  const text = raw.trim();
+  const text2 = raw.trim();
   const max = hasPrompt ? THREAD_FOLLOW_UP_LIMITS.promptMax : THREAD_FOLLOW_UP_LIMITS.messageMax;
-  if (text.length === 0 || text.length > max) return null;
+  if (text2.length === 0 || text2.length > max) return null;
   if (o.idempotencyKey !== void 0 && !isValidCallerDedupeKey(o.idempotencyKey)) return null;
   return {
     mode: hasPrompt ? "turn" : "message",
-    text,
+    text: text2,
     ...o.idempotencyKey !== void 0 ? {
       idempotencyKey: o.idempotencyKey
     } : {}
@@ -3761,11 +3775,11 @@ function parseThreadFollowUpInput(input) {
 }
 __name(parseThreadFollowUpInput, "parseThreadFollowUpInput");
 __name3(parseThreadFollowUpInput, "parseThreadFollowUpInput");
-function threadFollowUpRateKeys(agentId, threadId, nowMs) {
+function threadFollowUpRateKeys(agentId2, threadId, nowMs) {
   const hour = Math.floor(nowMs / 36e5);
   return {
-    perThread: `thread-followup:${agentId}:${threadId}:${hour}`,
-    perAgent: `thread-followup:${agentId}:${hour}`
+    perThread: `thread-followup:${agentId2}:${threadId}:${hour}`,
+    perAgent: `thread-followup:${agentId2}:${hour}`
   };
 }
 __name(threadFollowUpRateKeys, "threadFollowUpRateKeys");
@@ -4696,8 +4710,8 @@ function withOverride(def, override) {
     "effect",
     "confirm"
   ]) {
-    const text = stored[field];
-    if (typeof text === "string" && text.trim()) next[field] = text;
+    const text2 = stored[field];
+    if (typeof text2 === "string" && text2.trim()) next[field] = text2;
   }
   if (def.tunableDefault && stored.default !== void 0) {
     const check = validateChannelSettingValue(def, stored.default);
@@ -4822,26 +4836,26 @@ function validateChannelSettingValue(def, value3, channel) {
         ok: false,
         error: "Must not be empty"
       };
-      const text = value3.trim();
-      if (rules.maxLength !== void 0 && text.length > rules.maxLength) {
+      const text2 = value3.trim();
+      if (rules.maxLength !== void 0 && text2.length > rules.maxLength) {
         return {
           ok: false,
           error: `Must be at most ${rules.maxLength} characters`
         };
       }
-      if (UNSAFE_TEXT.test(text)) return {
+      if (UNSAFE_TEXT.test(text2)) return {
         ok: false,
         error: 'Must not contain <, > or " characters'
       };
-      if (rules.format === "slackReaction" && resolveSlackReactionName(text) === void 0) {
+      if (rules.format === "slackReaction" && resolveSlackReactionName(text2) === void 0) {
         return {
           ok: false,
-          error: `${text} is not an emoji Slack can react with; use a common emoji or a :shortcode:`
+          error: `${text2} is not an emoji Slack can react with; use a common emoji or a :shortcode:`
         };
       }
       return {
         ok: true,
-        value: text
+        value: text2
       };
     }
     case "enum": {
@@ -5276,11 +5290,11 @@ function transformChatHistoryContentParts(parts) {
           mediaType: videoMatch[1]
         });
       } else {
-        let text = rawText.replace(/\\\\\\n/g, "\n");
-        text = removeNavigateBlock(text);
+        let text2 = rawText.replace(/\\\\\\n/g, "\n");
+        text2 = removeNavigateBlock(text2);
         content.push({
           type: "text",
-          text
+          text: text2
         });
       }
     } else if (part.type === "file") {
@@ -5411,6 +5425,102 @@ function foldRichPartsIntoMessages(messages, records, makeMessage, sameTurnGroup
 }
 __name(foldRichPartsIntoMessages, "foldRichPartsIntoMessages");
 __name3(foldRichPartsIntoMessages, "foldRichPartsIntoMessages");
+var WORK_ITEMS_KEY = "_luaWorkItems";
+var MAX_WORK_ITEMS = 100;
+var LIMITS = {
+  id: 200,
+  title: 120,
+  group: 40,
+  status: 40,
+  action: 200
+};
+function text(item, field, index, required) {
+  const value3 = item[field];
+  if (value3 === void 0 && !required) return void 0;
+  if (typeof value3 !== "string" || required && value3.trim().length === 0) {
+    throw new Error(`Work item ${index}: \`${field}\` must be a ${required ? "non-empty " : ""}string`);
+  }
+  if ([
+    ...value3
+  ].length > LIMITS[field]) {
+    throw new Error(`Work item ${index}: \`${field}\` is longer than ${LIMITS[field]} characters`);
+  }
+  return value3;
+}
+__name(text, "text");
+__name3(text, "text");
+function normalizeWorkItems(items) {
+  if (!Array.isArray(items)) throw new Error("Work items must be an array");
+  if (items.length > MAX_WORK_ITEMS) {
+    throw new Error(`At most ${MAX_WORK_ITEMS} work items can be published (got ${items.length})`);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  return items.map((raw, index) => {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+      throw new Error(`Work item ${index} must be an object`);
+    }
+    const item = raw;
+    const id2 = text(item, "id", index, true);
+    if (seen.has(id2)) throw new Error(`Work item ${index}: \`id\` "${id2}" is used more than once`);
+    seen.add(id2);
+    const title = text(item, "title", index, true);
+    const group = text(item, "group", index, true);
+    const action = text(item, "action", index, true);
+    const status = text(item, "status", index, false);
+    if (item.needsAction !== void 0 && typeof item.needsAction !== "boolean") {
+      throw new Error(`Work item ${index}: \`needsAction\` must be a boolean`);
+    }
+    const when = item.updatedAt;
+    const date = when instanceof Date ? when : typeof when === "string" ? new Date(when) : null;
+    if (!date || Number.isNaN(date.getTime())) {
+      throw new Error(`Work item ${index}: \`updatedAt\` must be a valid date`);
+    }
+    return {
+      id: id2,
+      title,
+      group,
+      ...item.needsAction !== void 0 ? {
+        needsAction: item.needsAction
+      } : {},
+      ...status !== void 0 ? {
+        status
+      } : {},
+      updatedAt: date.toISOString(),
+      action
+    };
+  });
+}
+__name(normalizeWorkItems, "normalizeWorkItems");
+__name3(normalizeWorkItems, "normalizeWorkItems");
+function workItemsRecord(items, now = /* @__PURE__ */ new Date()) {
+  return {
+    v: 1,
+    items: normalizeWorkItems(items),
+    updatedAt: now.toISOString()
+  };
+}
+__name(workItemsRecord, "workItemsRecord");
+__name3(workItemsRecord, "workItemsRecord");
+function withoutWorkItems(data) {
+  if (!data || typeof data !== "object" || !(WORK_ITEMS_KEY in data)) return data;
+  const { [WORK_ITEMS_KEY]: _list, ...rest } = data;
+  return rest;
+}
+__name(withoutWorkItems, "withoutWorkItems");
+__name3(withoutWorkItems, "withoutWorkItems");
+function mutationWithoutWorkItems(mutation) {
+  return {
+    ...mutation,
+    ...mutation.set ? {
+      set: withoutWorkItems(mutation.set)
+    } : {},
+    ...mutation.unset ? {
+      unset: mutation.unset.filter((field) => field !== WORK_ITEMS_KEY)
+    } : {}
+  };
+}
+__name(mutationWithoutWorkItems, "mutationWithoutWorkItems");
+__name3(mutationWithoutWorkItems, "mutationWithoutWorkItems");
 var BROWSER_COMMANDS = [
   // health + lifecycle / navigation
   {
@@ -8587,8 +8697,8 @@ function scheduleHealthView(health, state3) {
 }
 __name(scheduleHealthView, "scheduleHealthView");
 __name3(scheduleHealthView, "scheduleHealthView");
-function scheduleHealthSourceId(agentId, jobId) {
-  return `schedule-health:${agentId}:${jobId}`;
+function scheduleHealthSourceId(agentId2, jobId) {
+  return `schedule-health:${agentId2}:${jobId}`;
 }
 __name(scheduleHealthSourceId, "scheduleHealthSourceId");
 __name3(scheduleHealthSourceId, "scheduleHealthSourceId");
@@ -8627,17 +8737,17 @@ var MAX_KEY_CHARS = 64;
 var KEY_SCRUB_INPUT_MAX_CHARS = 256;
 var STRING_SCRUB_INPUT_MAX_CHARS = 4 * APPROVAL_ARG_STRING_MAX_CHARS;
 var ELLIPSIS = "\u2026";
-function cut(text, max) {
-  if (text.length <= max) return text;
+function cut(text2, max) {
+  if (text2.length <= max) return text2;
   let end = Math.max(0, max - 1);
-  const last = text.charCodeAt(end - 1);
+  const last = text2.charCodeAt(end - 1);
   if (last >= 55296 && last <= 56319) end -= 1;
-  return `${text.slice(0, end)}${ELLIPSIS}`;
+  return `${text2.slice(0, end)}${ELLIPSIS}`;
 }
 __name(cut, "cut");
 __name3(cut, "cut");
-function scrubString(text, state3) {
-  const scrubbed = scrubSecretText(boundScrubInput(text, STRING_SCRUB_INPUT_MAX_CHARS));
+function scrubString(text2, state3) {
+  const scrubbed = scrubSecretText(boundScrubInput(text2, STRING_SCRUB_INPUT_MAX_CHARS));
   if (scrubbed.length > APPROVAL_ARG_STRING_MAX_CHARS) state3.truncated = true;
   return cut(scrubbed, APPROVAL_ARG_STRING_MAX_CHARS);
 }
@@ -8729,10 +8839,10 @@ function walkObject(obj, depth, state3) {
 }
 __name(walkObject, "walkObject");
 __name3(walkObject, "walkObject");
-function fitString(text, room) {
-  let n2 = Math.min(text.length, room - 3);
+function fitString(text2, room) {
+  let n2 = Math.min(text2.length, room - 3);
   while (n2 >= 16) {
-    const candidate = cut(text, n2);
+    const candidate = cut(text2, n2);
     if (JSON.stringify(candidate).length <= room) return candidate;
     n2 = Math.floor(n2 * 0.8);
   }
@@ -8831,9 +8941,9 @@ function createPersistScrubber(maxChars = PERSIST_SCRUB_MAX_CHARS) {
     const bounded = boundScrubInput(value3, remaining);
     if (bounded !== value3) state3.truncated = true;
     remaining -= bounded.length;
-    const { text, redactions } = scrubSecretTextCounted(bounded);
+    const { text: text2, redactions } = scrubSecretTextCounted(bounded);
     state3.redactions += redactions;
-    return text;
+    return text2;
   }, "scrub");
   return {
     scrub,
@@ -8845,9 +8955,9 @@ __name3(createPersistScrubber, "createPersistScrubber");
 function scrubMessageContentForPersist(content, maxChars = PERSIST_SCRUB_MAX_CHARS) {
   const { scrub, state: state3 } = createPersistScrubber(maxChars);
   if (typeof content === "string") {
-    const text = scrub(content);
+    const text2 = scrub(content);
     return {
-      content: text !== content ? text : content,
+      content: text2 !== content ? text2 : content,
       ...state3
     };
   }
@@ -8859,19 +8969,19 @@ function scrubMessageContentForPersist(content, maxChars = PERSIST_SCRUB_MAX_CHA
   let changed = false;
   const parts = content.map((part) => {
     if (typeof part === "string") {
-      const text = scrub(part);
-      if (text === part) return part;
+      const text2 = scrub(part);
+      if (text2 === part) return part;
       changed = true;
-      return text;
+      return text2;
     }
     if (part && typeof part === "object" && part.type === "text" && typeof part.text === "string") {
       const original = part.text;
-      const text = scrub(original);
-      if (text === original) return part;
+      const text2 = scrub(original);
+      if (text2 === original) return part;
       changed = true;
       return {
         ...part,
-        text
+        text: text2
       };
     }
     return part;
@@ -9196,11 +9306,11 @@ __name3(workflowApprovalDecisionOf, "workflowApprovalDecisionOf");
 function workflowApprovalOutput(resumeData) {
   const decision = typeof resumeData.decision === "string" ? resumeData.decision : workflowApprovalDecisionOf(resumeData);
   const note = typeof resumeData.note === "string" && resumeData.note.trim() !== "" ? resumeData.note : void 0;
-  const text = typeof resumeData.text === "string" ? resumeData.text : note ?? decision;
+  const text2 = typeof resumeData.text === "string" ? resumeData.text : note ?? decision;
   return {
     ...resumeData,
     decision,
-    text
+    text: text2
   };
 }
 __name(workflowApprovalOutput, "workflowApprovalOutput");
@@ -9213,8 +9323,8 @@ function isWorkflowApprovalOutput(value3) {
 __name(isWorkflowApprovalOutput, "isWorkflowApprovalOutput");
 __name3(isWorkflowApprovalOutput, "isWorkflowApprovalOutput");
 var JSON_FENCE_RE = /```(?:json)?[ \t]*\r?\n([\s\S]*?)\r?\n?```/g;
-function extractSingleJsonValue(text) {
-  const trimmed = (text ?? "").trim();
+function extractSingleJsonValue(text2) {
+  const trimmed = (text2 ?? "").trim();
   if (!trimmed) return {
     reason: "reply is empty"
   };
@@ -9759,8 +9869,8 @@ var ATTACHMENT_LINES = [
     (m) => `[File: ${m[1]}]`
   ]
 ];
-function evidenceDisplayText(text) {
-  const raw = typeof text === "string" ? text : "";
+function evidenceDisplayText(text2) {
+  const raw = typeof text2 === "string" ? text2 : "";
   if (!raw.trim()) return "";
   const lines = removeHiddenBlocks(raw).split(/\r?\n/).map((line) => {
     const t = line.trim();
@@ -9775,15 +9885,15 @@ function evidenceDisplayText(text) {
 }
 __name(evidenceDisplayText, "evidenceDisplayText");
 __name3(evidenceDisplayText, "evidenceDisplayText");
-function evidenceSnippet(text) {
-  const flat = evidenceDisplayText(text);
+function evidenceSnippet(text2) {
+  const flat = evidenceDisplayText(text2);
   return flat.length <= EVIDENCE_SNIPPET_MAX_CHARS ? flat : `${flat.slice(0, EVIDENCE_SNIPPET_MAX_CHARS - 1)}\u2026`;
 }
 __name(evidenceSnippet, "evidenceSnippet");
 __name3(evidenceSnippet, "evidenceSnippet");
-function evidenceWordCount(text) {
-  if (typeof text !== "string") return 0;
-  const t = text.trim();
+function evidenceWordCount(text2) {
+  if (typeof text2 !== "string") return 0;
+  const t = text2.trim();
   return t ? t.split(/\s+/).length : 0;
 }
 __name(evidenceWordCount, "evidenceWordCount");
@@ -9793,10 +9903,10 @@ function evidenceKey(label) {
 }
 __name(evidenceKey, "evidenceKey");
 __name3(evidenceKey, "evidenceKey");
-function evidenceOpaqueKey(text) {
+function evidenceOpaqueKey(text2) {
   let h = 0xcbf29ce484222325n;
   const prime = 0x100000001b3n;
-  for (const ch of evidenceKey(text)) {
+  for (const ch of evidenceKey(text2)) {
     h ^= BigInt(ch.codePointAt(0) ?? 0);
     h = h * prime & 0xffffffffffffffffn;
   }
@@ -9947,7 +10057,7 @@ function evidenceDays(from, to) {
 __name(evidenceDays, "evidenceDays");
 __name3(evidenceDays, "evidenceDays");
 function summarizeEvidence(input) {
-  const { agentId, from, to } = input;
+  const { agentId: agentId2, from, to } = input;
   const windowDays = evidenceDays(from, to);
   const readable = /* @__PURE__ */ __name3((s) => s === "ok" || s === "empty", "readable");
   const covered = /* @__PURE__ */ __name3((d) => readable(d.sources?.messages) && readable(d.sources?.analyses), "covered");
@@ -10021,7 +10131,7 @@ function summarizeEvidence(input) {
   const short = wordRows.reduce((a, h) => a + h.short, 0);
   const long = wordRows.reduce((a, h) => a + h.long, 0);
   return {
-    agentId,
+    agentId: agentId2,
     window: {
       from,
       to,
@@ -10676,16 +10786,16 @@ function slashDecodedPath(path) {
 }
 __name(slashDecodedPath, "slashDecodedPath");
 __name3(slashDecodedPath, "slashDecodedPath");
-function jsonHasDuplicateKey(text) {
+function jsonHasDuplicateKey(text2) {
   const stack = [];
-  for (let i = 0; i < text.length; i++) {
-    const c = text[i];
+  for (let i = 0; i < text2.length; i++) {
+    const c = text2[i];
     if (c === '"') {
       let j = i + 1;
-      while (j < text.length && text[j] !== '"') j += text[j] === "\\" ? 2 : 1;
+      while (j < text2.length && text2[j] !== '"') j += text2[j] === "\\" ? 2 : 1;
       const top = stack[stack.length - 1];
       if (top && top.expectKey) {
-        const key = JSON.parse(text.slice(i, j + 1));
+        const key = JSON.parse(text2.slice(i, j + 1));
         if (top.keys.has(key)) return true;
         top.keys.add(key);
         top.expectKey = false;
@@ -10779,7 +10889,7 @@ function classifyConnectionOperation(op) {
 __name(classifyConnectionOperation, "classifyConnectionOperation");
 __name3(classifyConnectionOperation, "classifyConnectionOperation");
 function connectionSendPolicyIsActive(policy) {
-  return Boolean(policy) && (policy.allowSend === false || Array.isArray(policy.recipientAllowlist));
+  return !!policy && (policy.allowSend === false || Array.isArray(policy.recipientAllowlist));
 }
 __name(connectionSendPolicyIsActive, "connectionSendPolicyIsActive");
 __name3(connectionSendPolicyIsActive, "connectionSendPolicyIsActive");
@@ -10815,8 +10925,9 @@ function evaluateConnectionSendPolicy(policy, op) {
       classification
     };
   }
-  if (Array.isArray(policy.recipientAllowlist)) {
-    const denied = classification.recipients.filter((email) => !allowlistAdmits(policy.recipientAllowlist, email));
+  const allowlist = policy.recipientAllowlist;
+  if (Array.isArray(allowlist)) {
+    const denied = classification.recipients.filter((email) => !allowlistAdmits(allowlist, email));
     if (denied.length > 0 || classification.recipientsUnknown) {
       return {
         allowed: false,
@@ -10870,10 +10981,605 @@ function isPaymentRequiredChatErrorEnvelope(data) {
 }
 __name(isPaymentRequiredChatErrorEnvelope, "isPaymentRequiredChatErrorEnvelope");
 __name3(isPaymentRequiredChatErrorEnvelope, "isPaymentRequiredChatErrorEnvelope");
+var CUSTOM_MCP_CONNECTION_ID_PREFIX = "mcp_";
+var CUSTOM_MCP_SOURCE = "custom";
+var CUSTOM_MCP_TRANSPORT = "streamable-http";
+var CUSTOM_MCP_CONNECTION_ID_PATTERN = /^mcp_[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+function isCustomMcpConnectionId(id2) {
+  return typeof id2 === "string" && id2.startsWith(CUSTOM_MCP_CONNECTION_ID_PREFIX);
+}
+__name(isCustomMcpConnectionId, "isCustomMcpConnectionId");
+__name3(isCustomMcpConnectionId, "isCustomMcpConnectionId");
+var customMcpConnectionIdSchema = z5.string().regex(CUSTOM_MCP_CONNECTION_ID_PATTERN);
+var CONNECTION_BACKED_MCP_SOURCES = [
+  "unifiedto",
+  CUSTOM_MCP_SOURCE
+];
+function isConnectionBackedMcpSource(source) {
+  return typeof source === "string" && CONNECTION_BACKED_MCP_SOURCES.includes(source);
+}
+__name(isConnectionBackedMcpSource, "isConnectionBackedMcpSource");
+__name3(isConnectionBackedMcpSource, "isConnectionBackedMcpSource");
+var CUSTOM_MCP_REFERENCE_ID_PATTERN = /^mcpx_[0-9a-f]{12}$/;
+var customMcpReferenceIdSchema = z5.string().regex(CUSTOM_MCP_REFERENCE_ID_PATTERN);
+function newCustomMcpReferenceId() {
+  const bytes = globalThis.crypto.getRandomValues(new Uint8Array(6));
+  return `mcpx_${Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+__name(newCustomMcpReferenceId, "newCustomMcpReferenceId");
+__name3(newCustomMcpReferenceId, "newCustomMcpReferenceId");
+var CUSTOM_MCP_AUTH_KINDS = [
+  "none",
+  "headers",
+  "oauth"
+];
+var customMcpAuthKindSchema = z5.enum(CUSTOM_MCP_AUTH_KINDS);
+var CUSTOM_MCP_OAUTH_REGISTRATIONS = [
+  "cimd",
+  "dcr",
+  "manual"
+];
+var customMcpOAuthRegistrationSchema = z5.enum(CUSTOM_MCP_OAUTH_REGISTRATIONS);
+var CUSTOM_MCP_HEALTH_STATES = [
+  "ok",
+  "failing",
+  "needs_sign_in",
+  "auth_rejected"
+];
+var customMcpHealthStateSchema = z5.enum(CUSTOM_MCP_HEALTH_STATES);
+var CUSTOM_MCP_FAILURE_STEPS = [
+  "url",
+  "reach",
+  "auth_challenge",
+  "resource_metadata",
+  "authorization_server_metadata",
+  "pkce",
+  "client_registration",
+  "authorize",
+  "token_exchange",
+  "list_tools"
+];
+var customMcpFailureStepSchema = z5.enum(CUSTOM_MCP_FAILURE_STEPS);
+var CUSTOM_MCP_CONNECT_STEPS = [
+  "url",
+  "reach",
+  "auth_challenge",
+  "list_tools"
+];
+var customMcpConnectStepSchema = z5.enum(CUSTOM_MCP_CONNECT_STEPS);
+var customMcpFailureCodeSchema = z5.string().regex(/^[a-z0-9_]{1,64}$/);
+var WORKFLOW_KEY_MAX_LENGTH = 64;
+function customMcpWorkflowKey(displayName) {
+  const slug = displayName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  if (!slug) return `s-${fnv1a32(displayName.trim())}`;
+  return (/^[a-z]/.test(slug) ? slug : `s-${slug}`).slice(0, WORKFLOW_KEY_MAX_LENGTH);
+}
+__name(customMcpWorkflowKey, "customMcpWorkflowKey");
+__name3(customMcpWorkflowKey, "customMcpWorkflowKey");
+function fnv1a32(value3) {
+  let hash = 2166136261;
+  for (const char of value3) {
+    hash ^= char.codePointAt(0) ?? 0;
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return hash.toString(16).padStart(8, "0");
+}
+__name(fnv1a32, "fnv1a32");
+__name3(fnv1a32, "fnv1a32");
+var CUSTOM_MCP_URL_MAX_LENGTH = 2048;
+var CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH = 120;
+var CUSTOM_MCP_MAX_HEADERS = 20;
+var CUSTOM_MCP_HEADER_NAME_MAX_LENGTH = 128;
+var CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH = 8192;
+var CUSTOM_MCP_MAX_TOOLS = 500;
+var CUSTOM_MCP_TOOL_NAME_MAX_LENGTH = 256;
+var CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH = 1024;
+var CUSTOM_MCP_MIN_TIMEOUT_MS = 1e3;
+var CUSTOM_MCP_MAX_TIMEOUT_MS = 12e4;
+var CUSTOM_MCP_OAUTH_PENDING_TTL_MS = 15 * 6e4;
+var isoDateTime = z5.string().datetime({
+  offset: true
+});
+var agentId = z5.string().min(1).max(128);
+var nonNegativeInt = z5.number().int().min(0);
+var customMcpUrlInputSchema = z5.string().trim().min(1).max(CUSTOM_MCP_URL_MAX_LENGTH);
+var customMcpDisplayNameSchema = z5.string().trim().min(1).max(CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH);
+var customMcpTimeoutSchema = z5.number().int().min(CUSTOM_MCP_MIN_TIMEOUT_MS).max(CUSTOM_MCP_MAX_TIMEOUT_MS);
+var CUSTOM_MCP_RESERVED_HEADER_NAMES = [
+  "accept",
+  "connection",
+  "content-length",
+  "content-type",
+  "host",
+  "keep-alive",
+  "last-event-id",
+  "mcp-protocol-version",
+  "mcp-session-id",
+  "proxy-authorization",
+  "te",
+  "trailer",
+  "transfer-encoding",
+  "upgrade"
+];
+var HEADER_NAME = /^[A-Za-z][A-Za-z0-9!#$%&'*+.^_`|~-]*$/;
+var HEADER_VALUE_FORBIDDEN = /[\u0000-\u0008\u000a-\u001f\u007f]/;
+var customMcpHeaderNameSchema = z5.string().min(1).max(CUSTOM_MCP_HEADER_NAME_MAX_LENGTH).regex(HEADER_NAME, "Not a valid HTTP header name").refine((name) => !CUSTOM_MCP_RESERVED_HEADER_NAMES.includes(name.toLowerCase()), "This header is set by Lua");
+var headerValue = z5.string().min(1).max(CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH).refine((value3) => !HEADER_VALUE_FORBIDDEN.test(value3), "Header values cannot contain line breaks");
+function addCaseDuplicateIssues(names, ctx, path) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const name of names) {
+    const lower2 = name.toLowerCase();
+    if (seen.has(lower2)) {
+      ctx.addIssue({
+        code: z5.ZodIssueCode.custom,
+        path,
+        message: `Header "${name}" is listed twice`
+      });
+    }
+    seen.add(lower2);
+  }
+}
+__name(addCaseDuplicateIssues, "addCaseDuplicateIssues");
+__name3(addCaseDuplicateIssues, "addCaseDuplicateIssues");
+var customMcpHeadersSchema = z5.record(customMcpHeaderNameSchema, headerValue).superRefine((headers, ctx) => {
+  const names = Object.keys(headers);
+  if (names.length > CUSTOM_MCP_MAX_HEADERS) {
+    ctx.addIssue({
+      code: z5.ZodIssueCode.custom,
+      message: `At most ${CUSTOM_MCP_MAX_HEADERS} headers`
+    });
+  }
+  addCaseDuplicateIssues(names, ctx, []);
+});
+var customMcpHeadersPatchSchema = z5.object({
+  set: customMcpHeadersSchema.optional(),
+  remove: z5.array(customMcpHeaderNameSchema).max(CUSTOM_MCP_MAX_HEADERS).optional()
+}).strict().superRefine((patch, ctx) => {
+  const set = Object.keys(patch.set ?? {});
+  const remove = patch.remove ?? [];
+  if (!set.length && !remove.length) {
+    ctx.addIssue({
+      code: z5.ZodIssueCode.custom,
+      message: "Nothing to change"
+    });
+  }
+  addCaseDuplicateIssues(remove, ctx, [
+    "remove"
+  ]);
+  const setLower = new Set(set.map((name) => name.toLowerCase()));
+  for (const name of remove) {
+    if (setLower.has(name.toLowerCase())) {
+      ctx.addIssue({
+        code: z5.ZodIssueCode.custom,
+        path: [
+          "remove"
+        ],
+        message: `Header "${name}" is both set and removed`
+      });
+    }
+  }
+});
+var customMcpToolNameSchema = z5.string().min(1).max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH);
+var customMcpToolSchema = z5.object({
+  name: customMcpToolNameSchema,
+  title: z5.string().max(CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH).optional(),
+  description: z5.string().max(CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH).optional()
+});
+var customMcpServerInfoSchema = z5.object({
+  name: z5.string().max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH),
+  version: z5.string().max(128).optional(),
+  title: z5.string().max(CUSTOM_MCP_TOOL_NAME_MAX_LENGTH).optional()
+});
+function toCustomMcpToolSnapshot(tools) {
+  const snapshot = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    if (snapshot.length >= CUSTOM_MCP_MAX_TOOLS) break;
+    const name = tool.name;
+    if (typeof name !== "string" || !name || name.length > CUSTOM_MCP_TOOL_NAME_MAX_LENGTH || seen.has(name)) continue;
+    seen.add(name);
+    snapshot.push({
+      name,
+      ...typeof tool.title === "string" && tool.title ? {
+        title: tool.title.slice(0, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH)
+      } : {},
+      ...typeof tool.description === "string" && tool.description ? {
+        description: tool.description.slice(0, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH)
+      } : {}
+    });
+  }
+  return snapshot;
+}
+__name(toCustomMcpToolSnapshot, "toCustomMcpToolSnapshot");
+__name3(toCustomMcpToolSnapshot, "toCustomMcpToolSnapshot");
+var customMcpToolSelectionSchema = z5.object({
+  allowAll: z5.boolean(),
+  enabled: z5.array(customMcpToolNameSchema).max(CUSTOM_MCP_MAX_TOOLS)
+}).strict().refine((selection) => new Set(selection.enabled).size === selection.enabled.length, {
+  path: [
+    "enabled"
+  ],
+  message: "Tool names must be unique"
+});
+function customMcpRuntimeToolFilter(selection) {
+  return selection.allowAll ? void 0 : {
+    allow: [
+      ...selection.enabled
+    ]
+  };
+}
+__name(customMcpRuntimeToolFilter, "customMcpRuntimeToolFilter");
+__name3(customMcpRuntimeToolFilter, "customMcpRuntimeToolFilter");
+var customMcpToolsResponseSchema = z5.object({
+  allowAll: z5.boolean(),
+  tools: z5.array(customMcpToolSchema.extend({
+    enabled: z5.boolean()
+  })),
+  serverInfo: customMcpServerInfoSchema.optional(),
+  refreshedAt: isoDateTime.optional()
+});
+var customMcpFailureSchema = z5.object({
+  step: customMcpFailureStepSchema,
+  code: customMcpFailureCodeSchema,
+  /** Plain words for the person connecting. */
+  message: z5.string().max(500),
+  httpStatus: z5.number().int().min(100).max(599).optional(),
+  referenceId: customMcpReferenceIdSchema
+});
+var customMcpHealthSchema = z5.object({
+  state: customMcpHealthStateSchema,
+  checkedAt: isoDateTime.optional(),
+  lastOkAt: isoDateTime.optional(),
+  lastFailureAt: isoDateTime.optional(),
+  consecutiveFailures: nonNegativeInt,
+  lastFailure: customMcpFailureSchema.omit({
+    message: true
+  }).optional()
+});
+var customMcpErrorBodySchema = z5.object({
+  code: z5.string(),
+  message: z5.string(),
+  failure: customMcpFailureSchema.optional(),
+  callbackUrl: z5.string().url().optional(),
+  retryAfterSeconds: z5.number().int().positive().optional()
+});
+var customMcpConnectionBlockSchema = z5.object({
+  authKind: customMcpAuthKindSchema,
+  /** `URL.host`, port included. */
+  host: z5.string(),
+  /** Host plus a masked path; never the URL. */
+  urlDisplay: z5.string(),
+  /** Names only, for the edit form. Present on `headers` connections. */
+  headerNames: z5.array(z5.string()).optional(),
+  /** The workflow connection key that names this server: {@link customMcpWorkflowKey} of its display name. */
+  workflowKey: z5.string().regex(WORKFLOW_CONNECTION_KEY_RE).optional(),
+  health: customMcpHealthSchema,
+  toolCount: nonNegativeInt,
+  enabledToolCount: nonNegativeInt
+});
+var customMcpConnectionViewSchema = z5.object({
+  id: customMcpConnectionIdSchema,
+  displayName: z5.string(),
+  ownerType: z5.enum([
+    "user",
+    "agent"
+  ]),
+  agentId: z5.string().optional(),
+  customMcp: customMcpConnectionBlockSchema
+});
+var customMcpConnectionResponseSchema = z5.object({
+  connection: customMcpConnectionViewSchema
+});
+var customMcpProbeBodySchema = z5.object({
+  url: customMcpUrlInputSchema,
+  headers: customMcpHeadersSchema.optional()
+}).strict();
+var customMcpOAuthDiscoverySchema = z5.object({
+  issuer: z5.string().url(),
+  scopes: z5.array(z5.string()),
+  /** `manual_required`: neither CIMD nor DCR; the person registers a client with `callbackUrl`. */
+  registration: z5.enum([
+    "cimd",
+    "dcr",
+    "manual_required"
+  ]),
+  callbackUrl: z5.string().url()
+});
+var customMcpProbeResponseSchema = z5.discriminatedUnion("outcome", [
+  z5.object({
+    outcome: z5.literal("connected"),
+    authKind: z5.enum([
+      "none",
+      "headers"
+    ]),
+    serverInfo: customMcpServerInfoSchema,
+    tools: z5.array(customMcpToolSchema)
+  }),
+  /** The server challenged and publishes usable OAuth metadata. */
+  z5.object({
+    outcome: z5.literal("sign_in_required"),
+    oauth: customMcpOAuthDiscoverySchema
+  }),
+  /** The server challenged without usable OAuth and no headers were sent. */
+  z5.object({
+    outcome: z5.literal("credentials_required"),
+    httpStatus: z5.number().int()
+  })
+]);
+var createFields = {
+  url: customMcpUrlInputSchema,
+  displayName: customMcpDisplayNameSchema,
+  timeout: customMcpTimeoutSchema.optional(),
+  /** Defaults to allow-all. */
+  tools: customMcpToolSelectionSchema.optional()
+};
+var mountAgentField = {
+  mountAgentId: agentId.optional()
+};
+function createBody(extra) {
+  return z5.discriminatedUnion("authKind", [
+    z5.object({
+      authKind: z5.literal("none"),
+      ...createFields,
+      ...extra
+    }).strict(),
+    z5.object({
+      authKind: z5.literal("headers"),
+      headers: customMcpHeadersSchema.refine((headers) => Object.keys(headers).length > 0, "Add a header"),
+      ...createFields,
+      ...extra
+    }).strict()
+  ]);
+}
+__name(createBody, "createBody");
+__name3(createBody, "createBody");
+var customMcpCreateAgentBodySchema = createBody({});
+var customMcpCreateUserBodySchema = createBody(mountAgentField);
+var customMcpOAuthClientSchema = z5.object({
+  clientId: z5.string().trim().min(1).max(512),
+  clientSecret: z5.string().min(1).max(2048).optional()
+}).strict();
+var startFields = {
+  successRedirect: z5.string().max(CUSTOM_MCP_URL_MAX_LENGTH),
+  failureRedirect: z5.string().max(CUSTOM_MCP_URL_MAX_LENGTH),
+  state: z5.string().max(256),
+  client: customMcpOAuthClientSchema.optional()
+};
+function startBody(extra) {
+  return z5.union([
+    z5.object({
+      url: customMcpUrlInputSchema,
+      displayName: customMcpDisplayNameSchema,
+      ...startFields,
+      ...extra
+    }).strict(),
+    /** Sign in again. `url` only after `REAUTH_REQUIRED`; otherwise the stored URL is used. */
+    z5.object({
+      targetConnectionId: customMcpConnectionIdSchema,
+      url: customMcpUrlInputSchema.optional(),
+      ...startFields
+    }).strict()
+  ]);
+}
+__name(startBody, "startBody");
+__name3(startBody, "startBody");
+var customMcpOAuthStartAgentBodySchema = startBody({});
+var customMcpOAuthStartUserBodySchema = startBody(mountAgentField);
+var customMcpOAuthStartResponseSchema = z5.object({
+  authUrl: z5.string().url(),
+  pendingId: z5.string().min(1),
+  expiresAt: isoDateTime,
+  registration: customMcpOAuthRegistrationSchema
+});
+var nonce = z5.string().regex(/^[A-Za-z0-9_-]{32,128}$/);
+var customMcpOAuthSuccessRedirectQuerySchema = z5.object({
+  state: z5.string(),
+  id: z5.string().min(1),
+  nonce
+});
+var CUSTOM_MCP_OAUTH_CALLBACK_ERRORS = [
+  "access_denied",
+  "authorize",
+  "token_exchange",
+  "expired"
+];
+var customMcpOAuthFailureRedirectQuerySchema = z5.object({
+  state: z5.string(),
+  error: z5.enum(CUSTOM_MCP_OAUTH_CALLBACK_ERRORS),
+  ref: customMcpReferenceIdSchema
+});
+var customMcpOAuthFinalizeBodySchema = z5.object({
+  pendingId: z5.string().min(1).max(128),
+  nonce,
+  tools: customMcpToolSelectionSchema.optional()
+}).strict();
+var customMcpCimdDocumentSchema = z5.object({
+  client_id: z5.string().url(),
+  client_name: z5.string(),
+  client_uri: z5.string().url().optional(),
+  logo_uri: z5.string().url().optional(),
+  redirect_uris: z5.array(z5.string().url()).min(1),
+  grant_types: z5.array(z5.enum([
+    "authorization_code",
+    "refresh_token"
+  ])),
+  response_types: z5.array(z5.literal("code")),
+  token_endpoint_auth_method: z5.literal("none")
+});
+var customMcpPatchBodySchema = z5.object({
+  displayName: customMcpDisplayNameSchema.optional(),
+  url: customMcpUrlInputSchema.optional(),
+  headers: customMcpHeadersPatchSchema.optional(),
+  timeout: customMcpTimeoutSchema.optional()
+}).strict().refine((body) => Object.values(body).some((value3) => value3 !== void 0), {
+  message: "Nothing to change"
+});
+var customMcpCredentialRequestSchema = z5.object({
+  mode: z5.enum([
+    "mount",
+    "room_personal"
+  ]),
+  connectionId: customMcpConnectionIdSchema,
+  agentId,
+  /** The server rejected this token version: refresh unless it is already stale. */
+  rejectedTokenVersion: nonNegativeInt.optional()
+}).strict();
+var customMcpCredentialAuthSchema = z5.discriminatedUnion("kind", [
+  z5.object({
+    kind: z5.literal("none")
+  }),
+  z5.object({
+    kind: z5.literal("headers"),
+    headers: z5.record(z5.string(), z5.string())
+  }),
+  z5.object({
+    kind: z5.literal("oauth"),
+    accessToken: z5.string().min(1),
+    tokenVersion: nonNegativeInt,
+    /** At least {@link CUSTOM_MCP_ACCESS_TOKEN_MIN_REMAINING_MS} away. */
+    expiresAt: isoDateTime
+  })
+]);
+var customMcpCredentialResponseSchema = z5.object({
+  connectionId: customMcpConnectionIdSchema,
+  credentialGeneration: nonNegativeInt,
+  url: z5.string().url(),
+  auth: customMcpCredentialAuthSchema
+});
+var CUSTOM_MCP_CREDENTIAL_ERRORS = {
+  /** 403. Not mounted on this agent, or the room grant is no longer current. */
+  NOT_MOUNTED: "NOT_MOUNTED",
+  /** 404. */
+  NOT_FOUND: "NOT_FOUND",
+  /** 409. Paused by its owner. */
+  PAUSED: "PAUSED",
+  /** 409. The refresh token is gone or was refused; the owner must sign in again. */
+  NEEDS_SIGN_IN: "NEEDS_SIGN_IN",
+  /** 503. The token endpoint failed; retry later. */
+  REFRESH_UNAVAILABLE: "REFRESH_UNAVAILABLE"
+};
+var customMcpCredentialErrorBodySchema = z5.object({
+  code: z5.nativeEnum(CUSTOM_MCP_CREDENTIAL_ERRORS),
+  message: z5.string()
+});
+var customMcpHealthReportSchema = z5.object({
+  reports: z5.array(z5.object({
+    connectionId: customMcpConnectionIdSchema,
+    agentId,
+    credentialGeneration: nonNegativeInt,
+    tokenVersion: nonNegativeInt.optional(),
+    outcome: z5.enum([
+      "ok",
+      "failure"
+    ]),
+    failure: z5.object({
+      step: customMcpConnectStepSchema,
+      code: customMcpFailureCodeSchema,
+      httpStatus: z5.number().int().min(100).max(599).optional(),
+      referenceId: customMcpReferenceIdSchema
+    }).strict().optional(),
+    observedAt: isoDateTime
+  }).strict().refine((report) => report.outcome === "failure" === (report.failure !== void 0), {
+    path: [
+      "failure"
+    ],
+    message: "A failure report carries `failure`; an ok report does not"
+  })).min(1).max(50)
+}).strict();
+var customMcpProbeRequestSchema = z5.object({
+  url: z5.string().url().max(CUSTOM_MCP_URL_MAX_LENGTH),
+  auth: z5.discriminatedUnion("kind", [
+    z5.object({
+      kind: z5.literal("none")
+    }).strict(),
+    z5.object({
+      kind: z5.literal("headers"),
+      headers: customMcpHeadersSchema
+    }).strict(),
+    z5.object({
+      kind: z5.literal("bearer"),
+      accessToken: z5.string().min(1)
+    }).strict()
+  ]),
+  timeout: customMcpTimeoutSchema.optional(),
+  referenceId: customMcpReferenceIdSchema
+}).strict();
+var customMcpProbeResultSchema = z5.discriminatedUnion("ok", [
+  z5.object({
+    ok: z5.literal(true),
+    serverInfo: customMcpServerInfoSchema,
+    tools: z5.array(customMcpToolSchema).max(CUSTOM_MCP_MAX_TOOLS),
+    protocolVersion: z5.string().optional()
+  }),
+  z5.object({
+    ok: z5.literal(false),
+    step: customMcpConnectStepSchema,
+    code: customMcpFailureCodeSchema,
+    httpStatus: z5.number().int().min(100).max(599).optional(),
+    /** The 401/403 challenge, raw, for lua-api's OAuth discovery. */
+    wwwAuthenticate: z5.string().max(4096).optional()
+  })
+]);
+var customMcpOriginUrlSchema = z5.string().url().refine((value3) => {
+  try {
+    const url = new URL(value3);
+    return url.protocol === "https:" && url.pathname === "/" && !url.search && !url.hash && !url.username && !url.password;
+  } catch {
+    return false;
+  }
+}, "Origin only");
+var customMcpServerProjectionSchema = z5.object({
+  name: z5.string().min(1),
+  runtimeKey: z5.string().min(1),
+  transport: z5.literal(CUSTOM_MCP_TRANSPORT),
+  source: z5.literal(CUSTOM_MCP_SOURCE),
+  url: customMcpOriginUrlSchema,
+  connectionId: customMcpConnectionIdSchema,
+  connectionLabel: z5.string(),
+  /** The connection's owner kind, for the dashboard's "Personal" label. */
+  ownerType: z5.enum([
+    "user",
+    "agent"
+  ]),
+  authKind: customMcpAuthKindSchema,
+  credentialGeneration: nonNegativeInt,
+  tools: z5.object({
+    allow: z5.array(z5.string())
+  }).optional(),
+  timeout: z5.number().int().positive()
+});
+var customMcpMountUpsertBodySchema = z5.object({
+  source: z5.literal(CUSTOM_MCP_SOURCE),
+  transport: z5.literal(CUSTOM_MCP_TRANSPORT),
+  url: customMcpOriginUrlSchema,
+  connectionId: customMcpConnectionIdSchema,
+  connectionLabel: z5.string(),
+  ownerType: z5.enum([
+    "user",
+    "agent"
+  ]),
+  authKind: customMcpAuthKindSchema,
+  credentialGeneration: nonNegativeInt,
+  tools: z5.object({
+    allow: z5.array(customMcpToolNameSchema).max(CUSTOM_MCP_MAX_TOOLS)
+  }).strict().optional(),
+  timeout: customMcpTimeoutSchema.optional()
+}).strict();
+function maskMcpServerHeaders(server) {
+  const { headers, ...rest } = server;
+  const headerNames = Object.keys(headers ?? {});
+  return {
+    ...rest,
+    headerNames,
+    headersSet: headerNames.length > 0
+  };
+}
+__name(maskMcpServerHeaders, "maskMcpServerHeaders");
+__name3(maskMcpServerHeaders, "maskMcpServerHeaders");
 
 // ../workflow-graph/dist/index.mjs
 import { createHash } from "crypto";
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 import { z as z22 } from "zod";
 import { createHash as createHash2 } from "crypto";
 var __defProp4 = Object.defineProperty;
@@ -11168,8 +11874,8 @@ var rows = /* @__PURE__ */ __name4((s, path, page) => ({
 var fromKnowledge = /* @__PURE__ */ __name4((k) => ({
   knowledge: k
 }), "fromKnowledge");
-var SideEffectsSchema = z5.enum(WORKFLOW_SIDE_EFFECTS);
-var JobResourcesSchema = z5.enum(WORKFLOW_JOB_RESOURCES);
+var SideEffectsSchema = z6.enum(WORKFLOW_SIDE_EFFECTS);
+var JobResourcesSchema = z6.enum(WORKFLOW_JOB_RESOURCES);
 var WORKFLOW_MODEL_TEMPLATE_ROOT = "initData";
 var WORKFLOW_MODEL_TEMPLATE_RE = /^\$\{\s*initData\.([A-Za-z0-9_.\-[\]]+)\s*(?:\|([^}]*))?\}$/;
 var PATH_SEGMENT_RE = /^[A-Za-z0-9_-]+(?:\[(?:0|[1-9]\d*)\])*$/;
@@ -11579,17 +12285,17 @@ function firstAskDeadline(node) {
 __name(firstAskDeadline, "firstAskDeadline");
 __name4(firstAskDeadline, "firstAskDeadline");
 function liftRenderedApprover(row, rendered) {
-  const text = (rendered ?? "").trim();
-  if (!text) return null;
+  const text2 = (rendered ?? "").trim();
+  if (!text2) return null;
   if (row === "users") {
     let members = null;
-    if (text.startsWith("[")) {
+    if (text2.startsWith("[")) {
       try {
-        members = JSON.parse(text);
+        members = JSON.parse(text2);
       } catch {
         return null;
       }
-    } else members = text.split(",").map((s) => s.trim());
+    } else members = text2.split(",").map((s) => s.trim());
     if (!Array.isArray(members) || members.length === 0 || members.length > APPROVER_SPEC_MAX_USERS) return null;
     if (!members.every((m) => typeof m === "string" && m.length > 0 && m.length <= 128)) return null;
     return {
@@ -11598,11 +12304,11 @@ function liftRenderedApprover(row, rendered) {
       ].sort()
     };
   }
-  if (text.length > 128 || text.startsWith("[") || text.startsWith("{")) return null;
+  if (text2.length > 128 || text2.startsWith("[") || text2.startsWith("{")) return null;
   return row === "role" ? {
-    role: text
+    role: text2
   } : {
-    group: text
+    group: text2
   };
 }
 __name(liftRenderedApprover, "liftRenderedApprover");
@@ -11849,9 +12555,9 @@ var isSingleStep = /* @__PURE__ */ __name4((n2) => !isHitlNode(n2), "isSingleSte
 var singleId = /* @__PURE__ */ __name4((s) => s.type === "step" ? s.step.id : s.id, "singleId");
 var armId = /* @__PURE__ */ __name4((a) => a.type === "mapping" ? a.id : singleId(a), "armId");
 var TEMPLATE_STEP_REF = /\$\{\s*stepResults\.([A-Za-z0-9_\-]+)/g;
-function templateStepRefs(text) {
+function templateStepRefs(text2) {
   const ids = [];
-  for (const m of text.matchAll(TEMPLATE_STEP_REF)) ids.push(m[1]);
+  for (const m of text2.matchAll(TEMPLATE_STEP_REF)) ids.push(m[1]);
   return ids;
 }
 __name(templateStepRefs, "templateStepRefs");