lua-cli 3.49.0 → 3.49.2

package/dist/api-exports.js

@@ -943,6 +943,35 @@ function aiGenerateInputFromSimplified(prompt, content) {
     ]
   };
 }
+function directProviderOfOpenRouterModel(model) {
+  return OPENROUTER_DIRECT_VENDORS.find((vendor) => vendor.pattern.test(model))?.provider;
+}
+function openRouterModelIssue(options) {
+  const model = typeof options.model === "string" && options.model ? options.model : void 0;
+  if (options.provider === "openrouter" && !model) return OPENROUTER_NEEDS_MODEL_MESSAGE;
+  if (!model || !model.includes("/")) return null;
+  const direct = directProviderOfOpenRouterModel(model);
+  if (!direct) return null;
+  return `model ${model} runs on provider '${direct}': set provider '${direct}' instead of a vendor/model id`;
+}
+function formatDecisionSandboxPrimitive(name, tool) {
+  return tool ? `${name}${DECISION_SANDBOX_TOOL_SEPARATOR}${tool}` : name;
+}
+function parseDecisionSandboxPrimitive(value3) {
+  const at = value3.indexOf(DECISION_SANDBOX_TOOL_SEPARATOR);
+  const name = at < 0 ? value3 : value3.slice(0, at);
+  const tool = at < 0 ? "" : value3.slice(at + DECISION_SANDBOX_TOOL_SEPARATOR.length);
+  if (name.length === 0) return void 0;
+  return tool.length > 0 ? {
+    name,
+    tool
+  } : {
+    name
+  };
+}
+function decisionPublishStampKey(agentId2) {
+  return `decisions:stamp:${agentId2}`;
+}
 function isIntegrationPassthroughReadMethod(method) {
   return typeof method === "string" && INTEGRATION_PASSTHROUGH_READ_METHODS.includes(method.toUpperCase());
 }
@@ -4686,6 +4715,10 @@ function browserLogContextOfWorkerContext(context) {
   if (context?.primitiveId) out.primitiveId = context.primitiveId;
   if (context?.primitiveName) out.primitiveName = context.primitiveName;
   if (context?.channel) out.channel = context.channel;
+  if (context?.environment && AGENT_LOG_ENVIRONMENTS.includes(context.environment)) {
+    out.environment = context.environment;
+  }
+  if (context?.agentVersion) out.agentVersion = context.agentVersion;
   return out;
 }
 function browserLogEventOfWorkerEvent(event, mapping = {}) {
@@ -7489,7 +7522,7 @@ function maskMcpServerHeaders(server) {
     headersSet: headerNames.length > 0
   };
 }
-var __defProp4, __name4, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, DECISION_PROVIDERS, DECISION_QUESTION_TYPES, DECISION_NAME_PATTERN, DECISION_LIMITS, DECISION_ERROR_CODES, MAX_NAME_CHARS, InstructionsSchema, NameSchema, OddsQuestionSchema, ChoiceQuestionSchema, ScoreQuestionSchema, DecisionQuestionSchema, DecisionOptionsSchema, DecisionQuestionsSchema, DecisionDefinitionSchema, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, MESSAGING_CHANNELS, VOICE_CHANNELS, TURN_CATEGORIES, AGENT_TOOL_CATEGORIES, count, AnthropicSseUsageReader, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_WATCHDOG_OPS, SUPERVISION_WATCHDOG_ERRORS, SUPERVISION_ROLLBACK_REFUSAL_CODES, SUPERVISION_ROLLBACK_LINEAGE_MAX, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, CHANNEL_SEND_CHANNELS, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, THREAD_SCOPING_NOUN, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, WORK_ITEMS_KEY, MAX_WORK_ITEMS, LIMITS, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, SERVER_TRIGGERED_BROWSER_SOURCES, BROWSER_FALLBACKS, DEFAULT_BROWSER_FALLBACK, PROXY_COUNTRY_CODE, BROWSER_LOG_CONTENT_MODES, DEFAULT_BROWSER_LOG_CONTENT, BROWSER_SCREENSHOT_POLICIES, DEFAULT_BROWSER_SCREENSHOT_POLICY, BROWSER_PROFILE_NAME_PATTERN, BROWSER_LIMIT_KEYS, BROWSER_LIMIT_MAX, BROWSER_EXECUTE_METHOD, BROWSER_GLOBAL_METHODS, BROWSER_EXECUTE_DEFAULT_TIMEOUT_MS, BROWSER_EXECUTE_MAX_TIMEOUT_MS, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, BROWSER_READ_FORMATS, BROWSER_READ_DEFAULT_TIMEOUT_MS, BROWSER_READ_MIN_TIMEOUT_MS, BROWSER_READ_MAX_TIMEOUT_MS, BROWSER_READ_MAX_CONTENT_CHARS, BROWSER_READ_DEFAULT_SELECTOR, BROWSER_READ_MATCH_SEPARATOR, BROWSER_READ_LOGIN_BLOCKER, BROWSER_ERROR_NAME, HTTP_STATUS_FAILURE, LOGIN_PATH_SEGMENTS, LOGIN_HOST_LABELS, AGENT_LOG_SOURCES, AGENT_LOG_ENVIRONMENTS, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, BROWSER_LOG_EVENT_KINDS, BROWSER_LOG_ENGINES, BROWSER_SESSION_OPEN_REASONS, BROWSER_BLOCK_KINDS, BROWSER_WALL_KINDS, BROWSER_WALL_NEXT_ACTIONS, BROWSER_CONFIRM_DECISIONS, BROWSER_SESSION_CLOSE_REASONS, BROWSER_LOG_CONTEXT_KEYS, BROWSER_LOG_ID_MAX_CHARS, BROWSER_LOG_TEXT_MAX_CHARS, isString, isBoolean, isCount, isPlainObject2, oneOf, isLimits, EVENT_SHAPES, BASE_KEYS, BROWSER_WORKER_SESSION_ID_SEPARATOR, BROWSER_WORKER_BLOCK_REASON_MAX_CHARS, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_AGENT_APP_CONNECTION_PREFIX, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SIGNAL_NAME_RE, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA, CUSTOM_MCP_CONNECTION_ID_PREFIX, CUSTOM_MCP_SOURCE, CUSTOM_MCP_TRANSPORT, CUSTOM_MCP_CONNECTION_ID_PATTERN, customMcpConnectionIdSchema, CONNECTION_BACKED_MCP_SOURCES, CUSTOM_MCP_REFERENCE_ID_PATTERN, customMcpReferenceIdSchema, CUSTOM_MCP_AUTH_KINDS, customMcpAuthKindSchema, CUSTOM_MCP_OAUTH_REGISTRATIONS, customMcpOAuthRegistrationSchema, CUSTOM_MCP_HEALTH_STATES, customMcpHealthStateSchema, CUSTOM_MCP_FAILURE_STEPS, customMcpFailureStepSchema, CUSTOM_MCP_CONNECT_STEPS, customMcpConnectStepSchema, customMcpFailureCodeSchema, WORKFLOW_KEY_MAX_LENGTH, CUSTOM_MCP_URL_MAX_LENGTH, CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH, CUSTOM_MCP_MAX_HEADERS, CUSTOM_MCP_HEADER_NAME_MAX_LENGTH, CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH, CUSTOM_MCP_MAX_TOOLS, CUSTOM_MCP_TOOL_NAME_MAX_LENGTH, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH, CUSTOM_MCP_MIN_TIMEOUT_MS, CUSTOM_MCP_MAX_TIMEOUT_MS, CUSTOM_MCP_OAUTH_PENDING_TTL_MS, isoDateTime, agentId, nonNegativeInt, customMcpUrlInputSchema, customMcpDisplayNameSchema, customMcpTimeoutSchema, CUSTOM_MCP_RESERVED_HEADER_NAMES, HEADER_NAME, HEADER_VALUE_FORBIDDEN, customMcpHeaderNameSchema, headerValue, customMcpHeadersSchema, customMcpHeadersPatchSchema, customMcpToolNameSchema, customMcpToolSchema, customMcpServerInfoSchema, customMcpToolSelectionSchema, customMcpToolsResponseSchema, customMcpFailureSchema, customMcpHealthSchema, customMcpErrorBodySchema, customMcpConnectionBlockSchema, customMcpConnectionViewSchema, customMcpConnectionResponseSchema, customMcpProbeBodySchema, customMcpOAuthDiscoverySchema, customMcpProbeResponseSchema, createFields, mountAgentField, customMcpCreateAgentBodySchema, customMcpCreateUserBodySchema, customMcpOAuthClientSchema, startFields, customMcpOAuthStartAgentBodySchema, customMcpOAuthStartUserBodySchema, customMcpOAuthStartResponseSchema, nonce, customMcpOAuthSuccessRedirectQuerySchema, CUSTOM_MCP_OAUTH_CALLBACK_ERRORS, customMcpOAuthFailureRedirectQuerySchema, customMcpOAuthFinalizeBodySchema, customMcpCimdDocumentSchema, customMcpPatchBodySchema, customMcpCredentialRequestSchema, customMcpCredentialAuthSchema, customMcpCredentialResponseSchema, CUSTOM_MCP_CREDENTIAL_ERRORS, customMcpCredentialErrorBodySchema, customMcpHealthReportSchema, customMcpProbeRequestSchema, customMcpProbeResultSchema, customMcpOriginUrlSchema, customMcpServerProjectionSchema, customMcpMountUpsertBodySchema;
+var __defProp4, __name4, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, DECISION_PROVIDERS, DECISION_FALLBACK_PROVIDERS, OPENROUTER_DIRECT_VENDORS, OPENROUTER_NEEDS_MODEL_MESSAGE, DECISION_QUESTION_TYPES, DECISION_NAME_PATTERN, DECISION_SANDBOX_SITE_HEADER, DECISION_SANDBOX_PRIMITIVE_HEADER, DECISION_SANDBOX_TOOL_SEPARATOR, DECISION_LIMITS, DECISION_ERROR_CODES, MAX_NAME_CHARS, InstructionsSchema, NameSchema, OddsQuestionSchema, ChoiceQuestionSchema, ScoreQuestionSchema, DecisionQuestionSchema, DecisionOptionsSchema, DecisionQuestionsSchema, DecisionDefinitionSchema, DecisionDefinitionWriteSchema, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, MESSAGING_CHANNELS, VOICE_CHANNELS, TURN_CATEGORIES, AGENT_TOOL_CATEGORIES, count, AnthropicSseUsageReader, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_WATCHDOG_OPS, SUPERVISION_WATCHDOG_ERRORS, SUPERVISION_ROLLBACK_REFUSAL_CODES, SUPERVISION_ROLLBACK_LINEAGE_MAX, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, CHANNEL_SEND_CHANNELS, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, THREAD_SCOPING_NOUN, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, WORK_ITEMS_KEY, MAX_WORK_ITEMS, LIMITS, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, SERVER_TRIGGERED_BROWSER_SOURCES, BROWSER_FALLBACKS, DEFAULT_BROWSER_FALLBACK, PROXY_COUNTRY_CODE, BROWSER_LOG_CONTENT_MODES, DEFAULT_BROWSER_LOG_CONTENT, BROWSER_SCREENSHOT_POLICIES, DEFAULT_BROWSER_SCREENSHOT_POLICY, BROWSER_PROFILE_NAME_PATTERN, BROWSER_LIMIT_KEYS, BROWSER_LIMIT_MAX, BROWSER_EXECUTE_METHOD, BROWSER_GLOBAL_METHODS, BROWSER_EXECUTE_DEFAULT_TIMEOUT_MS, BROWSER_EXECUTE_MAX_TIMEOUT_MS, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, BROWSER_READ_FORMATS, BROWSER_READ_DEFAULT_TIMEOUT_MS, BROWSER_READ_MIN_TIMEOUT_MS, BROWSER_READ_MAX_TIMEOUT_MS, BROWSER_READ_MAX_CONTENT_CHARS, BROWSER_READ_DEFAULT_SELECTOR, BROWSER_READ_MATCH_SEPARATOR, BROWSER_READ_LOGIN_BLOCKER, BROWSER_ERROR_NAME, HTTP_STATUS_FAILURE, LOGIN_PATH_SEGMENTS, LOGIN_HOST_LABELS, AGENT_LOG_SOURCES, AGENT_LOG_ENVIRONMENTS, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, BROWSER_LOG_EVENT_KINDS, BROWSER_LOG_ENGINES, BROWSER_SESSION_OPEN_REASONS, BROWSER_BLOCK_KINDS, BROWSER_WALL_KINDS, BROWSER_WALL_NEXT_ACTIONS, BROWSER_CONFIRM_DECISIONS, BROWSER_SESSION_CLOSE_REASONS, BROWSER_LOG_CONTEXT_KEYS, BROWSER_LOG_ID_MAX_CHARS, BROWSER_LOG_TEXT_MAX_CHARS, isString, isBoolean, isCount, isPlainObject2, oneOf, isLimits, EVENT_SHAPES, BASE_KEYS, BROWSER_WORKER_SESSION_ID_SEPARATOR, BROWSER_WORKER_BLOCK_REASON_MAX_CHARS, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_AGENT_APP_CONNECTION_PREFIX, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SIGNAL_NAME_RE, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA, CUSTOM_MCP_CONNECTION_ID_PREFIX, CUSTOM_MCP_SOURCE, CUSTOM_MCP_TRANSPORT, CUSTOM_MCP_CONNECTION_ID_PATTERN, customMcpConnectionIdSchema, CONNECTION_BACKED_MCP_SOURCES, CUSTOM_MCP_REFERENCE_ID_PATTERN, customMcpReferenceIdSchema, CUSTOM_MCP_AUTH_KINDS, customMcpAuthKindSchema, CUSTOM_MCP_OAUTH_REGISTRATIONS, customMcpOAuthRegistrationSchema, CUSTOM_MCP_HEALTH_STATES, customMcpHealthStateSchema, CUSTOM_MCP_FAILURE_STEPS, customMcpFailureStepSchema, CUSTOM_MCP_CONNECT_STEPS, customMcpConnectStepSchema, customMcpFailureCodeSchema, WORKFLOW_KEY_MAX_LENGTH, CUSTOM_MCP_URL_MAX_LENGTH, CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH, CUSTOM_MCP_MAX_HEADERS, CUSTOM_MCP_HEADER_NAME_MAX_LENGTH, CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH, CUSTOM_MCP_MAX_TOOLS, CUSTOM_MCP_TOOL_NAME_MAX_LENGTH, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH, CUSTOM_MCP_MIN_TIMEOUT_MS, CUSTOM_MCP_MAX_TIMEOUT_MS, CUSTOM_MCP_OAUTH_PENDING_TTL_MS, isoDateTime, agentId, nonNegativeInt, customMcpUrlInputSchema, customMcpDisplayNameSchema, customMcpTimeoutSchema, CUSTOM_MCP_RESERVED_HEADER_NAMES, HEADER_NAME, HEADER_VALUE_FORBIDDEN, customMcpHeaderNameSchema, headerValue, customMcpHeadersSchema, customMcpHeadersPatchSchema, customMcpToolNameSchema, customMcpToolSchema, customMcpServerInfoSchema, customMcpToolSelectionSchema, customMcpToolsResponseSchema, customMcpFailureSchema, customMcpHealthSchema, customMcpErrorBodySchema, customMcpConnectionBlockSchema, customMcpConnectionViewSchema, customMcpConnectionResponseSchema, customMcpProbeBodySchema, customMcpOAuthDiscoverySchema, customMcpProbeResponseSchema, createFields, mountAgentField, customMcpCreateAgentBodySchema, customMcpCreateUserBodySchema, customMcpOAuthClientSchema, startFields, customMcpOAuthStartAgentBodySchema, customMcpOAuthStartUserBodySchema, customMcpOAuthStartResponseSchema, nonce, customMcpOAuthSuccessRedirectQuerySchema, CUSTOM_MCP_OAUTH_CALLBACK_ERRORS, customMcpOAuthFailureRedirectQuerySchema, customMcpOAuthFinalizeBodySchema, customMcpCimdDocumentSchema, customMcpPatchBodySchema, customMcpCredentialRequestSchema, customMcpCredentialAuthSchema, customMcpCredentialResponseSchema, CUSTOM_MCP_CREDENTIAL_ERRORS, customMcpCredentialErrorBodySchema, customMcpHealthReportSchema, customMcpProbeRequestSchema, customMcpProbeResultSchema, customMcpOriginUrlSchema, customMcpServerProjectionSchema, customMcpMountUpsertBodySchema;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -7562,15 +7595,44 @@ var init_dist = __esm({
     __name(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
     __name4(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
     DECISION_PROVIDERS = [
+      "jev",
+      "openai",
+      "openrouter"
+    ];
+    DECISION_FALLBACK_PROVIDERS = [
       "jev",
       "openai"
     ];
+    OPENROUTER_DIRECT_VENDORS = [
+      {
+        pattern: /^~?typesafe\//,
+        provider: "jev"
+      },
+      {
+        pattern: /^openai\//,
+        provider: "openai"
+      }
+    ];
+    __name(directProviderOfOpenRouterModel, "directProviderOfOpenRouterModel");
+    __name4(directProviderOfOpenRouterModel, "directProviderOfOpenRouterModel");
+    OPENROUTER_NEEDS_MODEL_MESSAGE = "provider openrouter needs a model id, such as liquid/d1";
+    __name(openRouterModelIssue, "openRouterModelIssue");
+    __name4(openRouterModelIssue, "openRouterModelIssue");
     DECISION_QUESTION_TYPES = [
       "odds",
       "choice",
       "score"
     ];
     DECISION_NAME_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
+    DECISION_SANDBOX_SITE_HEADER = "x-lua-sandbox-site";
+    DECISION_SANDBOX_PRIMITIVE_HEADER = "x-lua-sandbox-primitive";
+    DECISION_SANDBOX_TOOL_SEPARATOR = "#";
+    __name(formatDecisionSandboxPrimitive, "formatDecisionSandboxPrimitive");
+    __name4(formatDecisionSandboxPrimitive, "formatDecisionSandboxPrimitive");
+    __name(parseDecisionSandboxPrimitive, "parseDecisionSandboxPrimitive");
+    __name4(parseDecisionSandboxPrimitive, "parseDecisionSandboxPrimitive");
+    __name(decisionPublishStampKey, "decisionPublishStampKey");
+    __name4(decisionPublishStampKey, "decisionPublishStampKey");
     DECISION_LIMITS = {
       maxQuestions: 64,
       minOptions: 2,
@@ -7596,7 +7658,8 @@ var init_dist = __esm({
       UNAVAILABLE: "decision_unavailable",
       DISABLED: "decision_disabled",
       INSUFFICIENT_CREDITS: "decision_insufficient_credits",
-      NOT_FOUND: "decision_not_found"
+      NOT_FOUND: "decision_not_found",
+      CANCELLED: "decision_cancelled"
     };
     MAX_NAME_CHARS = 64;
     InstructionsSchema = z.string().trim().min(1).max(DECISION_LIMITS.maxInstructionChars);
@@ -7637,7 +7700,7 @@ var init_dist = __esm({
       ]).optional(),
       model: z.string().min(1).optional(),
       fallback: z.union([
-        z.enum(DECISION_PROVIDERS),
+        z.enum(DECISION_FALLBACK_PROVIDERS),
         z.literal("none")
       ]).optional(),
       region: z.literal("eu").optional(),
@@ -7666,6 +7729,16 @@ var init_dist = __esm({
       description: z.string().max(DECISION_LIMITS.maxInstructionChars).optional(),
       questions: DecisionQuestionsSchema
     }).strict();
+    DecisionDefinitionWriteSchema = DecisionDefinitionSchema.superRefine((definition, ctx) => {
+      const issue = openRouterModelIssue(definition);
+      if (issue) ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: [
+          "model"
+        ],
+        message: issue
+      });
+    });
     INTEGRATION_PASSTHROUGH_READ_METHODS = [
       "GET",
       "HEAD"
@@ -10221,7 +10294,11 @@ var init_dist = __esm({
       "max-steps",
       "cost-cap",
       "error",
-      "reaped"
+      "reaped",
+      "cancelled",
+      "confirmation",
+      "blocked",
+      "stopped"
     ];
     BROWSER_LOG_CONTEXT_KEYS = [
       "runId",
@@ -10249,7 +10326,8 @@ var init_dist = __esm({
         optional: {
           limits: isLimits,
           region: isString,
-          liveUrl: isString
+          liveUrl: isString,
+          browser: isString
         }
       },
       command: {
@@ -13392,6 +13470,218 @@ var init_auth_error = __esm({
   }
 });
 
+// ../sandbox-runtime/dist/decisions-api.mjs
+function isRecord3(value3) {
+  return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
+}
+function isProvider(value3) {
+  return DECISION_PROVIDERS.includes(value3);
+}
+function invalid2(message) {
+  return new DecisionError(message, {
+    code: DECISION_ERROR_CODES.INVALID
+  });
+}
+function assertInstructions(builder, instructions) {
+  if (typeof instructions !== "string" || instructions.trim().length === 0) {
+    throw invalid2(`Decisions.${builder} needs non-empty instructions`);
+  }
+  if (instructions.length > DECISION_LIMITS.maxInstructionChars) {
+    throw invalid2(`Decisions.${builder} instructions must be at most ${DECISION_LIMITS.maxInstructionChars} characters`);
+  }
+}
+function assertCount(what, count2, min, max) {
+  if (count2 < min || count2 > max) {
+    throw invalid2(`${what} must hold ${min} to ${max} entries, got ${count2}`);
+  }
+}
+function odds(instructions, criteria) {
+  assertInstructions("odds", instructions);
+  if (criteria === void 0) return {
+    type: "odds",
+    instructions
+  };
+  if (!isRecord3(criteria)) throw invalid2("Decisions.odds criteria must be an object like { yes, no }");
+  return {
+    type: "odds",
+    instructions,
+    criteria
+  };
+}
+function choice(instructions, options) {
+  assertInstructions("choice", instructions);
+  if (!isRecord3(options)) throw invalid2("Decisions.choice options must be an object of label to description");
+  assertCount("Decisions.choice options", Object.keys(options).length, DECISION_LIMITS.minOptions, DECISION_LIMITS.maxOptions);
+  return {
+    type: "choice",
+    instructions,
+    options
+  };
+}
+function score(instructions, levels) {
+  assertInstructions("score", instructions);
+  if (!Array.isArray(levels)) throw invalid2("Decisions.score levels must be an array");
+  assertCount("Decisions.score levels", levels.length, DECISION_LIMITS.minLevels, DECISION_LIMITS.maxLevels);
+  return {
+    type: "score",
+    instructions,
+    levels
+  };
+}
+function assertDecisionQuestion(name, question) {
+  if (!isRecord3(question) || !DECISION_QUESTION_TYPES.includes(question.type)) {
+    throw invalid2(`questions.${name} must be built with Decisions.odds, Decisions.choice or Decisions.score`);
+  }
+  if (typeof question.instructions !== "string" || question.instructions.trim().length === 0) {
+    throw invalid2(`questions.${name}.instructions must be a non-empty string`);
+  }
+}
+function checkDecisionRequest(request) {
+  if (!isRecord3(request)) {
+    throw invalid2("Decisions.ask needs { state, questions } or (state, question)");
+  }
+  if (request.state === void 0 || request.state === null) {
+    throw invalid2("Decisions.ask needs a state");
+  }
+  if (!isRecord3(request.questions) || Object.keys(request.questions).length === 0) {
+    throw invalid2("Decisions.ask needs at least one question in questions");
+  }
+  for (const [name, question] of Object.entries(request.questions)) assertDecisionQuestion(name, question);
+  return request;
+}
+function checkDecisionRunRequest(request) {
+  if (typeof request.name !== "string" || !DECISION_NAME_PATTERN.test(request.name)) {
+    throw invalid2("Decisions.run needs the name of a decision declared on the agent");
+  }
+  if (request.state === void 0 || request.state === null) {
+    throw invalid2("Decisions.run needs a state");
+  }
+  return request;
+}
+function toDecisionError(caught) {
+  if (caught instanceof DecisionError) return caught;
+  const raw = isRecord3(caught) ? caught : {};
+  const detail = typeof raw.message === "string" && raw.message.length > 0 ? raw.message : "Decision failed";
+  const code = typeof raw.code === "string" && raw.code.length > 0 ? raw.code : DECISION_ERROR_CODES.UNAVAILABLE;
+  const message = detail.startsWith(`${code}: `) ? detail : `${code}: ${detail}`;
+  return new DecisionError(message, {
+    code,
+    ...isProvider(raw.provider) && {
+      provider: raw.provider
+    },
+    ...typeof raw.upstreamStatus === "number" && {
+      upstreamStatus: raw.upstreamStatus
+    },
+    ...typeof raw.decisionId === "string" && {
+      decisionId: raw.decisionId
+    }
+  });
+}
+function buildDecisionsApi(transport) {
+  async function relay2(send) {
+    if (!transport) {
+      throw new DecisionError("Decisions is not available in this runtime", {
+        code: DECISION_ERROR_CODES.UNAVAILABLE
+      });
+    }
+    try {
+      return await send(transport);
+    } catch (caught) {
+      throw toDecisionError(caught);
+    }
+  }
+  __name(relay2, "relay");
+  __name6(relay2, "relay");
+  async function ask(requestOrState, question, options) {
+    if (question === void 0) {
+      const request2 = checkDecisionRequest(requestOrState);
+      return relay2((t) => t.ask(request2));
+    }
+    const request = checkDecisionRequest({
+      ...options,
+      state: requestOrState,
+      questions: {
+        [SINGLE_DECISION_KEY]: question
+      }
+    });
+    const result = await relay2((t) => t.ask(request));
+    return result.answers[SINGLE_DECISION_KEY];
+  }
+  __name(ask, "ask");
+  __name6(ask, "ask");
+  async function run(name, state3, options) {
+    const request = checkDecisionRunRequest({
+      ...options,
+      name,
+      state: state3
+    });
+    return await relay2((t) => t.run(request));
+  }
+  __name(run, "run");
+  __name6(run, "run");
+  return {
+    ask,
+    run,
+    odds,
+    choice,
+    score
+  };
+}
+var __defProp6, __name6, DECISION_ERROR_NAME, SINGLE_DECISION_KEY, DecisionError;
+var init_decisions_api = __esm({
+  "../sandbox-runtime/dist/decisions-api.mjs"() {
+    "use strict";
+    init_dist();
+    __defProp6 = Object.defineProperty;
+    __name6 = /* @__PURE__ */ __name((target, value3) => __defProp6(target, "name", { value: value3, configurable: true }), "__name");
+    DECISION_ERROR_NAME = "DecisionError";
+    SINGLE_DECISION_KEY = "answer";
+    DecisionError = class extends Error {
+      static {
+        __name(this, "DecisionError");
+      }
+      static {
+        __name6(this, "DecisionError");
+      }
+      code;
+      constructor(message, fields) {
+        super(message);
+        this.name = DECISION_ERROR_NAME;
+        this.code = fields.code;
+        if (fields.provider !== void 0) this.provider = fields.provider;
+        if (fields.upstreamStatus !== void 0) this.upstreamStatus = fields.upstreamStatus;
+        if (fields.decisionId !== void 0) this.decisionId = fields.decisionId;
+      }
+    };
+    __name(isRecord3, "isRecord");
+    __name6(isRecord3, "isRecord");
+    __name(isProvider, "isProvider");
+    __name6(isProvider, "isProvider");
+    __name(invalid2, "invalid");
+    __name6(invalid2, "invalid");
+    __name(assertInstructions, "assertInstructions");
+    __name6(assertInstructions, "assertInstructions");
+    __name(assertCount, "assertCount");
+    __name6(assertCount, "assertCount");
+    __name(odds, "odds");
+    __name6(odds, "odds");
+    __name(choice, "choice");
+    __name6(choice, "choice");
+    __name(score, "score");
+    __name6(score, "score");
+    __name(assertDecisionQuestion, "assertDecisionQuestion");
+    __name6(assertDecisionQuestion, "assertDecisionQuestion");
+    __name(checkDecisionRequest, "checkDecisionRequest");
+    __name6(checkDecisionRequest, "checkDecisionRequest");
+    __name(checkDecisionRunRequest, "checkDecisionRunRequest");
+    __name6(checkDecisionRunRequest, "checkDecisionRunRequest");
+    __name(toDecisionError, "toDecisionError");
+    __name6(toDecisionError, "toDecisionError");
+    __name(buildDecisionsApi, "buildDecisionsApi");
+    __name6(buildDecisionsApi, "buildDecisionsApi");
+  }
+});
+
 // src/errors/cli.error.ts
 function apiErrorDetail(error) {
   return {
@@ -13406,6 +13696,9 @@ function apiErrorDetail(error) {
     keyOwner: error?.keyOwner
   };
 }
+function isLuaErrorBody(body) {
+  return typeof body.message === "string" || typeof body.statusCode === "number" || typeof body.code === "string";
+}
 function isAccessDeniedError(error) {
   if (CliError.isCliError(error)) return error.statusCode === 403;
   return error instanceof Error && error.message.startsWith("Access denied (403)");
@@ -13472,6 +13765,41 @@ function numericStatus(error) {
   const candidate = error.statusCode ?? error.status;
   return typeof candidate === "number" && Number.isFinite(candidate) ? candidate : void 0;
 }
+function statusClass(status) {
+  if (status === 401) return {
+    code: "auth",
+    exitCode: CLI_EXIT.AUTH
+  };
+  if (status === 403) return {
+    code: "forbidden",
+    exitCode: CLI_EXIT.FORBIDDEN
+  };
+  if (status === 404) return {
+    code: "not_found",
+    exitCode: CLI_EXIT.NOT_FOUND
+  };
+  if (status >= 400 && status < 500) return {
+    code: `http_${status}`,
+    exitCode: CLI_EXIT.FORBIDDEN
+  };
+  if (status >= 500 || status === 0) return {
+    code: "unavailable",
+    exitCode: CLI_EXIT.UNAVAILABLE
+  };
+  return void 0;
+}
+function decisionErrorClass(error, message) {
+  if (error.name !== DECISION_ERROR_NAME || typeof error.code !== "string" || error.code.length === 0) return void 0;
+  const status = Object.hasOwn(DECISION_STATUS, error.code) ? DECISION_STATUS[error.code] : void 0;
+  return {
+    code: error.code,
+    exitCode: (status === void 0 ? void 0 : statusClass(status)?.exitCode) ?? CLI_EXIT.ERROR,
+    message,
+    ...typeof error.decisionId === "string" && error.decisionId.length > 0 ? {
+      decisionId: error.decisionId
+    } : {}
+  };
+}
 function classifyCliError(error) {
   if (CliError.isCliError(error)) {
     return {
@@ -13501,40 +13829,15 @@ function classifyCliError(error) {
       message
     };
   }
+  const decision = decisionErrorClass(e, message);
+  if (decision) return decision;
   const status = numericStatus(e);
-  if (status !== void 0) {
-    const statusCode = status;
-    if (status === 401) return {
-      code: "auth",
-      exitCode: CLI_EXIT.AUTH,
-      message,
-      statusCode
-    };
-    if (status === 403) return {
-      code: "forbidden",
-      exitCode: CLI_EXIT.FORBIDDEN,
-      message,
-      statusCode
-    };
-    if (status === 404) return {
-      code: "not_found",
-      exitCode: CLI_EXIT.NOT_FOUND,
-      message,
-      statusCode
-    };
-    if (status >= 400 && status < 500) return {
-      code: `http_${status}`,
-      exitCode: CLI_EXIT.FORBIDDEN,
-      message,
-      statusCode
-    };
-    if (status >= 500 || status === 0) return {
-      code: "unavailable",
-      exitCode: CLI_EXIT.UNAVAILABLE,
-      message,
-      statusCode
-    };
-  }
+  const byStatus = status === void 0 ? void 0 : statusClass(status);
+  if (byStatus) return {
+    ...byStatus,
+    message,
+    statusCode: status
+  };
   const causeCode = e.cause?.code;
   if (typeof e.code === "string" && NETWORK_ERRNO.has(e.code) || typeof causeCode === "string" && NETWORK_ERRNO.has(causeCode) || e.name === "AbortError" || e.name === "TimeoutError" || NETWORK_MESSAGE.test(message)) {
     return {
@@ -13550,10 +13853,12 @@ function classifyCliError(error) {
     message
   };
 }
-var CLI_EXIT, CliError, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT, VENDOR_RETRY_SOON_SECONDS, VENDOR_LABELS, PROVIDER_REJECTED_SERVER_CODE, PROVIDER_REJECTED_HTTP_STATUS, PROVIDER_REJECTION_REASONS, PROVIDER_REJECTED_NO_RETRY, PROVIDER_REJECTED_LUA_SIDE, MODEL_SETTINGS_URL;
+var CLI_EXIT, CliError, EDGE_BLOCKED_CODE, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT, VENDOR_RETRY_SOON_SECONDS, VENDOR_LABELS, PROVIDER_REJECTED_SERVER_CODE, PROVIDER_REJECTED_HTTP_STATUS, PROVIDER_REJECTION_REASONS, PROVIDER_REJECTED_NO_RETRY, PROVIDER_REJECTED_LUA_SIDE, MODEL_SETTINGS_URL, DECISION_STATUS;
 var init_cli_error = __esm({
   "src/errors/cli.error.ts"() {
     "use strict";
+    init_dist();
+    init_decisions_api();
     init_auth_error();
     CLI_EXIT = {
       OK: 0,
@@ -13661,6 +13966,8 @@ var init_cli_error = __esm({
         return error instanceof _CliError || typeof error === "object" && error !== null && error.isCliError === true;
       }
     };
+    EDGE_BLOCKED_CODE = "EDGE_BLOCKED";
+    __name(isLuaErrorBody, "isLuaErrorBody");
     __name(isAccessDeniedError, "isAccessDeniedError");
     NETWORK_ERRNO = /* @__PURE__ */ new Set([
       "ECONNREFUSED",
@@ -13706,6 +14013,18 @@ var init_cli_error = __esm({
     __name(providerRejectedHint, "providerRejectedHint");
     __name(authHint, "authHint");
     __name(numericStatus, "numericStatus");
+    __name(statusClass, "statusClass");
+    DECISION_STATUS = {
+      [DECISION_ERROR_CODES.INVALID]: 400,
+      [DECISION_ERROR_CODES.INSUFFICIENT_CREDITS]: 402,
+      [DECISION_ERROR_CODES.NOT_FOUND]: 404,
+      [DECISION_ERROR_CODES.REJECTED]: 422,
+      [DECISION_ERROR_CODES.TIMEOUT]: 503,
+      [DECISION_ERROR_CODES.UNAVAILABLE]: 503,
+      [DECISION_ERROR_CODES.DISABLED]: 503,
+      [DECISION_ERROR_CODES.CANCELLED]: 400
+    };
+    __name(decisionErrorClass, "decisionErrorClass");
     __name(classifyCliError, "classifyCliError");
   }
 });
@@ -14356,6 +14675,14 @@ async function classifyErrorResponse(response) {
     }
     throw new AuthenticationError(`Authentication failed: ${serverMessage}`, "unknown", serverMessage);
   }
+  if (response.status === 403 && !isLuaErrorBody(errorData) && isHtmlResponse(response)) {
+    throw new CliError("forbidden", "The request was blocked before it reached Lua (HTTP 403 from the network firewall), not by your credentials.", {
+      exitCode: CLI_EXIT.FORBIDDEN,
+      statusCode: 403,
+      serverCode: EDGE_BLOCKED_CODE,
+      hint: "Something in the request looked like an attack to the firewall, for example a URL that contains a system path. Change the request and try again."
+    });
+  }
   if (response.status === 403) {
     const detail = errorData.message || "You do not have permission to access this resource.";
     const serverCode = serverCodeOf(errorData.code, errorData.error);
@@ -14448,6 +14775,9 @@ async function* parseSseStream(body, signal) {
     }
   }
 }
+function isHtmlResponse(response) {
+  return (response.headers.get("content-type") ?? "").toLowerCase().includes("text/html");
+}
 function parseRetryAfter(raw) {
   if (!raw) return void 0;
   const seconds = Number.parseInt(raw, 10);
@@ -14865,6 +15195,7 @@ var init_http_client = __esm({
     __name(classifyErrorResponse, "classifyErrorResponse");
     __name(serverCodeOf, "serverCodeOf");
     __name(parseSseStream, "parseSseStream");
+    __name(isHtmlResponse, "isHtmlResponse");
     __name(parseRetryAfter, "parseRetryAfter");
     __name(isCoreDrainApiError, "isCoreDrainApiError");
     __name(coreDrainApiRetryDelayMs, "coreDrainApiRetryDelayMs");
@@ -14962,217 +15293,6 @@ var init_connection_requests_api_service = __esm({
   }
 });
 
-// ../sandbox-runtime/dist/decisions-api.mjs
-function isRecord3(value3) {
-  return typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
-}
-function isProvider(value3) {
-  return DECISION_PROVIDERS.includes(value3);
-}
-function invalid2(message) {
-  return new DecisionError(message, {
-    code: DECISION_ERROR_CODES.INVALID
-  });
-}
-function assertInstructions(builder, instructions) {
-  if (typeof instructions !== "string" || instructions.trim().length === 0) {
-    throw invalid2(`Decisions.${builder} needs non-empty instructions`);
-  }
-  if (instructions.length > DECISION_LIMITS.maxInstructionChars) {
-    throw invalid2(`Decisions.${builder} instructions must be at most ${DECISION_LIMITS.maxInstructionChars} characters`);
-  }
-}
-function assertCount(what, count2, min, max) {
-  if (count2 < min || count2 > max) {
-    throw invalid2(`${what} must hold ${min} to ${max} entries, got ${count2}`);
-  }
-}
-function odds(instructions, criteria) {
-  assertInstructions("odds", instructions);
-  if (criteria === void 0) return {
-    type: "odds",
-    instructions
-  };
-  if (!isRecord3(criteria)) throw invalid2("Decisions.odds criteria must be an object like { yes, no }");
-  return {
-    type: "odds",
-    instructions,
-    criteria
-  };
-}
-function choice(instructions, options) {
-  assertInstructions("choice", instructions);
-  if (!isRecord3(options)) throw invalid2("Decisions.choice options must be an object of label to description");
-  assertCount("Decisions.choice options", Object.keys(options).length, DECISION_LIMITS.minOptions, DECISION_LIMITS.maxOptions);
-  return {
-    type: "choice",
-    instructions,
-    options
-  };
-}
-function score(instructions, levels) {
-  assertInstructions("score", instructions);
-  if (!Array.isArray(levels)) throw invalid2("Decisions.score levels must be an array");
-  assertCount("Decisions.score levels", levels.length, DECISION_LIMITS.minLevels, DECISION_LIMITS.maxLevels);
-  return {
-    type: "score",
-    instructions,
-    levels
-  };
-}
-function assertDecisionQuestion(name, question) {
-  if (!isRecord3(question) || !DECISION_QUESTION_TYPES.includes(question.type)) {
-    throw invalid2(`questions.${name} must be built with Decisions.odds, Decisions.choice or Decisions.score`);
-  }
-  if (typeof question.instructions !== "string" || question.instructions.trim().length === 0) {
-    throw invalid2(`questions.${name}.instructions must be a non-empty string`);
-  }
-}
-function checkDecisionRequest(request) {
-  if (!isRecord3(request)) {
-    throw invalid2("Decisions.ask needs { state, questions } or (state, question)");
-  }
-  if (request.state === void 0 || request.state === null) {
-    throw invalid2("Decisions.ask needs a state");
-  }
-  if (!isRecord3(request.questions) || Object.keys(request.questions).length === 0) {
-    throw invalid2("Decisions.ask needs at least one question in questions");
-  }
-  for (const [name, question] of Object.entries(request.questions)) assertDecisionQuestion(name, question);
-  return request;
-}
-function checkDecisionRunRequest(request) {
-  if (typeof request.name !== "string" || !DECISION_NAME_PATTERN.test(request.name)) {
-    throw invalid2("Decisions.run needs the name of a decision declared on the agent");
-  }
-  if (request.state === void 0 || request.state === null) {
-    throw invalid2("Decisions.run needs a state");
-  }
-  return request;
-}
-function toDecisionError(caught) {
-  if (caught instanceof DecisionError) return caught;
-  const raw = isRecord3(caught) ? caught : {};
-  const message = typeof raw.message === "string" && raw.message.length > 0 ? raw.message : "Decision failed";
-  const code = typeof raw.code === "string" && raw.code.length > 0 ? raw.code : DECISION_ERROR_CODES.UNAVAILABLE;
-  return new DecisionError(message, {
-    code,
-    ...isProvider(raw.provider) && {
-      provider: raw.provider
-    },
-    ...typeof raw.upstreamStatus === "number" && {
-      upstreamStatus: raw.upstreamStatus
-    },
-    ...typeof raw.decisionId === "string" && {
-      decisionId: raw.decisionId
-    }
-  });
-}
-function buildDecisionsApi(transport) {
-  async function relay2(send) {
-    if (!transport) {
-      throw new DecisionError("Decisions is not available in this runtime", {
-        code: DECISION_ERROR_CODES.UNAVAILABLE
-      });
-    }
-    try {
-      return await send(transport);
-    } catch (caught) {
-      throw toDecisionError(caught);
-    }
-  }
-  __name(relay2, "relay");
-  __name6(relay2, "relay");
-  async function ask(requestOrState, question, options) {
-    if (question === void 0) {
-      const request2 = checkDecisionRequest(requestOrState);
-      return relay2((t) => t.ask(request2));
-    }
-    const request = checkDecisionRequest({
-      ...options,
-      state: requestOrState,
-      questions: {
-        [SINGLE_DECISION_KEY]: question
-      }
-    });
-    const result = await relay2((t) => t.ask(request));
-    return result.answers[SINGLE_DECISION_KEY];
-  }
-  __name(ask, "ask");
-  __name6(ask, "ask");
-  async function run(name, state3, options) {
-    const request = checkDecisionRunRequest({
-      ...options,
-      name,
-      state: state3
-    });
-    return await relay2((t) => t.run(request));
-  }
-  __name(run, "run");
-  __name6(run, "run");
-  return {
-    ask,
-    run,
-    odds,
-    choice,
-    score
-  };
-}
-var __defProp6, __name6, DECISION_ERROR_NAME, SINGLE_DECISION_KEY, DecisionError;
-var init_decisions_api = __esm({
-  "../sandbox-runtime/dist/decisions-api.mjs"() {
-    "use strict";
-    init_dist();
-    __defProp6 = Object.defineProperty;
-    __name6 = /* @__PURE__ */ __name((target, value3) => __defProp6(target, "name", { value: value3, configurable: true }), "__name");
-    DECISION_ERROR_NAME = "DecisionError";
-    SINGLE_DECISION_KEY = "answer";
-    DecisionError = class extends Error {
-      static {
-        __name(this, "DecisionError");
-      }
-      static {
-        __name6(this, "DecisionError");
-      }
-      code;
-      constructor(message, fields) {
-        super(message);
-        this.name = DECISION_ERROR_NAME;
-        this.code = fields.code;
-        if (fields.provider !== void 0) this.provider = fields.provider;
-        if (fields.upstreamStatus !== void 0) this.upstreamStatus = fields.upstreamStatus;
-        if (fields.decisionId !== void 0) this.decisionId = fields.decisionId;
-      }
-    };
-    __name(isRecord3, "isRecord");
-    __name6(isRecord3, "isRecord");
-    __name(isProvider, "isProvider");
-    __name6(isProvider, "isProvider");
-    __name(invalid2, "invalid");
-    __name6(invalid2, "invalid");
-    __name(assertInstructions, "assertInstructions");
-    __name6(assertInstructions, "assertInstructions");
-    __name(assertCount, "assertCount");
-    __name6(assertCount, "assertCount");
-    __name(odds, "odds");
-    __name6(odds, "odds");
-    __name(choice, "choice");
-    __name6(choice, "choice");
-    __name(score, "score");
-    __name6(score, "score");
-    __name(assertDecisionQuestion, "assertDecisionQuestion");
-    __name6(assertDecisionQuestion, "assertDecisionQuestion");
-    __name(checkDecisionRequest, "checkDecisionRequest");
-    __name6(checkDecisionRequest, "checkDecisionRequest");
-    __name(checkDecisionRunRequest, "checkDecisionRunRequest");
-    __name6(checkDecisionRunRequest, "checkDecisionRunRequest");
-    __name(toDecisionError, "toDecisionError");
-    __name6(toDecisionError, "toDecisionError");
-    __name(buildDecisionsApi, "buildDecisionsApi");
-    __name6(buildDecisionsApi, "buildDecisionsApi");
-  }
-});
-
 // src/api/decisions.api.service.ts
 function resultOf(response) {
   if (!response.success) throw toDecisionError(response.error);
@@ -15183,13 +15303,20 @@ function resultOf(response) {
   }
   return response.data;
 }
-function buildOfflineDecisionsApi(getService) {
+function decisionTestSiteHeaders(site) {
+  return {
+    [DECISION_SANDBOX_SITE_HEADER]: DECISION_LUA_TEST_SITE,
+    [DECISION_SANDBOX_PRIMITIVE_HEADER]: formatDecisionSandboxPrimitive(`${site.kind}:${site.name}`, site.tool)
+  };
+}
+function buildOfflineDecisionsApi(getService, testSite) {
+  const headers = testSite ? decisionTestSiteHeaders(testSite) : void 0;
   return buildDecisionsApi({
-    ask: /* @__PURE__ */ __name(async (request) => (await getService()).askForSandbox(request), "ask"),
-    run: /* @__PURE__ */ __name(async (request) => (await getService()).runForSandbox(request), "run")
+    ask: /* @__PURE__ */ __name(async (request) => (await getService()).askForSandbox(request, headers), "ask"),
+    run: /* @__PURE__ */ __name(async (request) => (await getService()).runForSandbox(request, headers), "run")
   });
 }
-var DecisionsApiService;
+var DECISION_LUA_TEST_SITE, DecisionsApiService;
 var init_decisions_api_service = __esm({
   "src/api/decisions.api.service.ts"() {
     "use strict";
@@ -15197,6 +15324,8 @@ var init_decisions_api_service = __esm({
     init_decisions_api();
     init_http_client();
     __name(resultOf, "resultOf");
+    DECISION_LUA_TEST_SITE = "lua-test";
+    __name(decisionTestSiteHeaders, "decisionTestSiteHeaders");
     DecisionsApiService = class extends HttpClient {
       static {
         __name(this, "DecisionsApiService");
@@ -15205,17 +15334,17 @@ var init_decisions_api_service = __esm({
       constructor(baseUrl, credential, agentId2) {
         super(baseUrl, credential), this.agentId = agentId2;
       }
-      async ask(body) {
-        return this.httpPostOnce(`/developer/decisions/${this.agentId}/ask`, body, {});
+      async ask(body, headers = {}) {
+        return this.httpPostOnce(`/developer/decisions/${this.agentId}/ask`, body, headers);
       }
-      async run({ name, ...body }) {
-        return this.httpPostOnce(`/developer/decisions/${this.agentId}/run/${encodeURIComponent(name)}`, body, {});
+      async run({ name, ...body }, headers = {}) {
+        return this.httpPostOnce(`/developer/decisions/${this.agentId}/run/${encodeURIComponent(name)}`, body, headers);
       }
-      async askForSandbox(request) {
-        return resultOf(await this.ask(request));
+      async askForSandbox(request, headers) {
+        return resultOf(await this.ask(request, headers));
       }
-      async runForSandbox(request) {
-        return resultOf(await this.run(request));
+      async runForSandbox(request, headers) {
+        return resultOf(await this.run(request, headers));
       }
       async getDecisions() {
         return this.httpGet(`/developer/decisions/${this.agentId}/definitions`, {});
@@ -21793,6 +21922,9 @@ var init_semver = __esm({
 });
 
 // src/primitives/base.handler.ts
+function nameFlagDeleteCommand(deleteCommand, displayName, name) {
+  return `${deleteCommand} --${displayName.toLowerCase().replace(/\s+/g, "-")}-name ${name}`;
+}
 var DEFAULT_VERSION, BaseVersionedHandler;
 var init_base_handler = __esm({
   "src/primitives/base.handler.ts"() {
@@ -21805,10 +21937,14 @@ var init_base_handler = __esm({
     init_auth_error();
     init_cli_error();
     DEFAULT_VERSION = SKILL_DEFAULTS.VERSION;
+    __name(nameFlagDeleteCommand, "nameFlagDeleteCommand");
     BaseVersionedHandler = class {
       static {
         __name(this, "BaseVersionedHandler");
       }
+      serverDeleteCommand(name) {
+        return nameFlagDeleteCommand(this.deleteCommand, this.displayName, name);
+      }
       /**
       * Strip a YAML item to only the canonical fields: name, version, [idField].
       * Override if your YAML type has additional fields.
@@ -21946,7 +22082,6 @@ var init_base_handler = __esm({
             }));
             yamlItems.push(...stubs);
             yamlUpdated = true;
-            const flagName = `--${this.displayName.toLowerCase().replace(/\s+/g, "-")}-name`;
             console.log(`
 \u26A0\uFE0F  Found ${this.displayNamePlural} on server not in your local code:`);
             for (const item of orphans) {
@@ -21955,7 +22090,7 @@ var init_base_handler = __esm({
               console.log(msg);
             }
             console.log(`   Added to lua.skill.yaml as server-only entries.`);
-            console.log(`   To remove from server: ${this.deleteCommand} ${flagName} <name>`);
+            console.log(`   To remove from server: ${this.serverDeleteCommand("<name>")}`);
             console.log(`   To restore source from backup: lua sync --accept
 `);
             orphanedCount = orphans.length;
@@ -22593,6 +22728,7 @@ var init_cli = __esm({
     init_analytics();
     init_hints();
     init_write_info();
+    init_write_info();
   }
 });
 
@@ -30019,6 +30155,8 @@ export {
   UserDataInstance,
   Voice,
   WEB_APP_NAME_PATTERN,
+  WORKFLOW_DEFAULT_MAX_DURATION_SECONDS,
+  WORKFLOW_HITL_MAX_DURATION_SECONDS,
   Workflows,
   and2 as and,
   checkAsUserRequiresUser,