lua-cli 3.49.1 → 3.50.0

package/dist/api-exports.js

@@ -943,6 +943,17 @@ function aiGenerateInputFromSimplified(prompt, content) {
     ]
   };
 }
+function directProviderOfOpenRouterModel(model) {
+  return OPENROUTER_DIRECT_VENDORS.find((vendor) => vendor.pattern.test(model))?.provider;
+}
+function openRouterModelIssue(options) {
+  const model = typeof options.model === "string" && options.model ? options.model : void 0;
+  if (options.provider === "openrouter" && !model) return OPENROUTER_NEEDS_MODEL_MESSAGE;
+  if (!model || !model.includes("/")) return null;
+  const direct = directProviderOfOpenRouterModel(model);
+  if (!direct) return null;
+  return `model ${model} runs on provider '${direct}': set provider '${direct}' instead of a vendor/model id`;
+}
 function formatDecisionSandboxPrimitive(name, tool) {
   return tool ? `${name}${DECISION_SANDBOX_TOOL_SEPARATOR}${tool}` : name;
 }
@@ -2650,6 +2661,31 @@ function scrubProviderMessage(raw, max = PROVIDER_MESSAGE_MAX_CHARS) {
 function scrubStepErrorMessage(raw) {
   return scrubProviderMessage(raw, ERROR_MESSAGE_MAX_CHARS);
 }
+function scrubSecretsDeep(value3, options = {}) {
+  return scrubDeep(value3, 0, /* @__PURE__ */ new WeakSet(), options.text !== false);
+}
+function isPlainObject2(v) {
+  if (!v || typeof v !== "object") return false;
+  const proto = Object.getPrototypeOf(v);
+  return proto === Object.prototype || proto === null;
+}
+function scrubDeep(value3, depth, seen, text2) {
+  if (typeof value3 === "string") return text2 ? scrubSecretText(value3) : value3;
+  if (!value3 || typeof value3 !== "object") return value3;
+  if (!Array.isArray(value3) && !isPlainObject2(value3)) return value3;
+  if (depth >= SCRUB_DEEP_MAX_DEPTH || seen.has(value3)) return REDACTED_PLACEHOLDER;
+  seen.add(value3);
+  try {
+    if (Array.isArray(value3)) return value3.map((v) => scrubDeep(v, depth + 1, seen, text2));
+    const out = {};
+    for (const [k, v] of Object.entries(value3)) {
+      out[k] = isWorkflowSecretKey(k) && v !== null && v !== void 0 && typeof v !== "boolean" ? REDACTED_PLACEHOLDER : scrubDeep(v, depth + 1, seen, text2);
+    }
+    return out;
+  } finally {
+    seen.delete(value3);
+  }
+}
 function isTestSessionId(value3) {
   return typeof value3 === "string" && TEST_SESSION_ID_PATTERN.test(value3);
 }
@@ -2774,6 +2810,68 @@ function supervisionAccessBindingViolation(merged) {
   }
   return null;
 }
+function canonicalSupervisedSecretJson(row) {
+  const sorted = {};
+  for (const k of Object.keys(row).sort()) sorted[k] = row[k];
+  return JSON.stringify(sorted);
+}
+function validateSupervisedSecretPut(args) {
+  const bad = /* @__PURE__ */ __name4((message) => ({
+    ok: false,
+    code: SUPERVISED_SECRET_ERRORS.BAD_ARGS,
+    message
+  }), "bad");
+  const collection = args?.collection;
+  if (typeof collection !== "string" || !SUPERVISED_SECRET_NAME_RE.test(collection) || collection.startsWith("__")) {
+    return bad("collection must be an explicit collection name (letters, digits, _ . : -; at most 128)");
+  }
+  const key = args?.key;
+  if (typeof key !== "string" || !SUPERVISED_SECRET_NAME_RE.test(key)) {
+    return bad("key must be an explicit row key (letters, digits, _ . : -; at most 128)");
+  }
+  const value3 = args?.value;
+  if (!value3 || typeof value3 !== "object" || Array.isArray(value3) || Object.getPrototypeOf(value3) !== Object.prototype) {
+    return bad("value must be a plain object of scalar fields");
+  }
+  const fields = Object.keys(value3);
+  const row = {};
+  for (const field of fields) {
+    if (!SUPERVISED_SECRET_FIELD_RE.test(field)) {
+      return bad("value field names must be plain identifiers (no $ prefix, no dots; at most 64 characters)");
+    }
+    const v = value3[field];
+    if (typeof v === "string") {
+      if (v.length > SUPERVISED_SECRET_LIMITS.maxStringLength) {
+        return bad(`value.${field} is longer than ${SUPERVISED_SECRET_LIMITS.maxStringLength} characters`);
+      }
+    } else if (typeof v === "number") {
+      if (!Number.isFinite(v)) return bad(`value.${field} must be a finite number`);
+    } else if (typeof v !== "boolean" && v !== null) {
+      return bad(`value.${field} must be a string, a finite number, a boolean or null (no nesting)`);
+    }
+    row[field] = v;
+  }
+  if (Object.prototype.hasOwnProperty.call(row, SUPERVISED_SECRET_KEY_FIELD) && row[SUPERVISED_SECRET_KEY_FIELD] !== key) {
+    return bad(`value.${SUPERVISED_SECRET_KEY_FIELD}, when present, must equal key`);
+  }
+  row[SUPERVISED_SECRET_KEY_FIELD] = key;
+  if (Object.keys(row).length > SUPERVISED_SECRET_LIMITS.maxFields) {
+    return bad(`value has more than ${SUPERVISED_SECRET_LIMITS.maxFields} fields`);
+  }
+  if (Object.keys(row).length < 2) return bad("value must carry at least one field besides _pk");
+  const bytes = new TextEncoder().encode(canonicalSupervisedSecretJson(row)).byteLength;
+  if (bytes > SUPERVISED_SECRET_LIMITS.maxBytes) {
+    return bad(`value is larger than ${SUPERVISED_SECRET_LIMITS.maxBytes} bytes`);
+  }
+  return {
+    ok: true,
+    input: {
+      collection,
+      key,
+      row
+    }
+  };
+}
 function hasFormatCharacters(text2) {
   return FORMAT_CHARS.test(text2);
 }
@@ -4659,7 +4757,7 @@ function describeFieldViolation(key, value3, check) {
   return void 0;
 }
 function describeBrowserLogEventViolation(value3) {
-  if (!isPlainObject2(value3)) return "event must be an object";
+  if (!isPlainObject3(value3)) return "event must be an object";
   const event = value3;
   const base = describeBaseViolation(event);
   if (base) return base;
@@ -4679,7 +4777,7 @@ function isBrowserLogEvent(value3) {
 }
 function describeBrowserLogContextViolation(value3) {
   if (value3 === void 0) return void 0;
-  if (!isPlainObject2(value3)) return "logContext must be an object";
+  if (!isPlainObject3(value3)) return "logContext must be an object";
   for (const [key, entry] of Object.entries(value3)) {
     if (!BROWSER_LOG_CONTEXT_KEYS.includes(key)) return `logContext.${key} is not allowed`;
     if (entry === void 0) continue;
@@ -4704,6 +4802,10 @@ function browserLogContextOfWorkerContext(context) {
   if (context?.primitiveId) out.primitiveId = context.primitiveId;
   if (context?.primitiveName) out.primitiveName = context.primitiveName;
   if (context?.channel) out.channel = context.channel;
+  if (context?.environment && AGENT_LOG_ENVIRONMENTS.includes(context.environment)) {
+    out.environment = context.environment;
+  }
+  if (context?.agentVersion) out.agentVersion = context.agentVersion;
   return out;
 }
 function browserLogEventOfWorkerEvent(event, mapping = {}) {
@@ -7507,7 +7609,13 @@ function maskMcpServerHeaders(server) {
     headersSet: headerNames.length > 0
   };
 }
-var __defProp4, __name4, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, DECISION_PROVIDERS, DECISION_QUESTION_TYPES, DECISION_NAME_PATTERN, DECISION_SANDBOX_SITE_HEADER, DECISION_SANDBOX_PRIMITIVE_HEADER, DECISION_SANDBOX_TOOL_SEPARATOR, DECISION_LIMITS, DECISION_ERROR_CODES, MAX_NAME_CHARS, InstructionsSchema, NameSchema, OddsQuestionSchema, ChoiceQuestionSchema, ScoreQuestionSchema, DecisionQuestionSchema, DecisionOptionsSchema, DecisionQuestionsSchema, DecisionDefinitionSchema, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, MESSAGING_CHANNELS, VOICE_CHANNELS, TURN_CATEGORIES, AGENT_TOOL_CATEGORIES, count, AnthropicSseUsageReader, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_WATCHDOG_OPS, SUPERVISION_WATCHDOG_ERRORS, SUPERVISION_ROLLBACK_REFUSAL_CODES, SUPERVISION_ROLLBACK_LINEAGE_MAX, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, CHANNEL_SEND_CHANNELS, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, THREAD_SCOPING_NOUN, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, WORK_ITEMS_KEY, MAX_WORK_ITEMS, LIMITS, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, SERVER_TRIGGERED_BROWSER_SOURCES, BROWSER_FALLBACKS, DEFAULT_BROWSER_FALLBACK, PROXY_COUNTRY_CODE, BROWSER_LOG_CONTENT_MODES, DEFAULT_BROWSER_LOG_CONTENT, BROWSER_SCREENSHOT_POLICIES, DEFAULT_BROWSER_SCREENSHOT_POLICY, BROWSER_PROFILE_NAME_PATTERN, BROWSER_LIMIT_KEYS, BROWSER_LIMIT_MAX, BROWSER_EXECUTE_METHOD, BROWSER_GLOBAL_METHODS, BROWSER_EXECUTE_DEFAULT_TIMEOUT_MS, BROWSER_EXECUTE_MAX_TIMEOUT_MS, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, BROWSER_READ_FORMATS, BROWSER_READ_DEFAULT_TIMEOUT_MS, BROWSER_READ_MIN_TIMEOUT_MS, BROWSER_READ_MAX_TIMEOUT_MS, BROWSER_READ_MAX_CONTENT_CHARS, BROWSER_READ_DEFAULT_SELECTOR, BROWSER_READ_MATCH_SEPARATOR, BROWSER_READ_LOGIN_BLOCKER, BROWSER_ERROR_NAME, HTTP_STATUS_FAILURE, LOGIN_PATH_SEGMENTS, LOGIN_HOST_LABELS, AGENT_LOG_SOURCES, AGENT_LOG_ENVIRONMENTS, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, BROWSER_LOG_EVENT_KINDS, BROWSER_LOG_ENGINES, BROWSER_SESSION_OPEN_REASONS, BROWSER_BLOCK_KINDS, BROWSER_WALL_KINDS, BROWSER_WALL_NEXT_ACTIONS, BROWSER_CONFIRM_DECISIONS, BROWSER_SESSION_CLOSE_REASONS, BROWSER_LOG_CONTEXT_KEYS, BROWSER_LOG_ID_MAX_CHARS, BROWSER_LOG_TEXT_MAX_CHARS, isString, isBoolean, isCount, isPlainObject2, oneOf, isLimits, EVENT_SHAPES, BASE_KEYS, BROWSER_WORKER_SESSION_ID_SEPARATOR, BROWSER_WORKER_BLOCK_REASON_MAX_CHARS, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_AGENT_APP_CONNECTION_PREFIX, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SIGNAL_NAME_RE, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA, CUSTOM_MCP_CONNECTION_ID_PREFIX, CUSTOM_MCP_SOURCE, CUSTOM_MCP_TRANSPORT, CUSTOM_MCP_CONNECTION_ID_PATTERN, customMcpConnectionIdSchema, CONNECTION_BACKED_MCP_SOURCES, CUSTOM_MCP_REFERENCE_ID_PATTERN, customMcpReferenceIdSchema, CUSTOM_MCP_AUTH_KINDS, customMcpAuthKindSchema, CUSTOM_MCP_OAUTH_REGISTRATIONS, customMcpOAuthRegistrationSchema, CUSTOM_MCP_HEALTH_STATES, customMcpHealthStateSchema, CUSTOM_MCP_FAILURE_STEPS, customMcpFailureStepSchema, CUSTOM_MCP_CONNECT_STEPS, customMcpConnectStepSchema, customMcpFailureCodeSchema, WORKFLOW_KEY_MAX_LENGTH, CUSTOM_MCP_URL_MAX_LENGTH, CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH, CUSTOM_MCP_MAX_HEADERS, CUSTOM_MCP_HEADER_NAME_MAX_LENGTH, CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH, CUSTOM_MCP_MAX_TOOLS, CUSTOM_MCP_TOOL_NAME_MAX_LENGTH, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH, CUSTOM_MCP_MIN_TIMEOUT_MS, CUSTOM_MCP_MAX_TIMEOUT_MS, CUSTOM_MCP_OAUTH_PENDING_TTL_MS, isoDateTime, agentId, nonNegativeInt, customMcpUrlInputSchema, customMcpDisplayNameSchema, customMcpTimeoutSchema, CUSTOM_MCP_RESERVED_HEADER_NAMES, HEADER_NAME, HEADER_VALUE_FORBIDDEN, customMcpHeaderNameSchema, headerValue, customMcpHeadersSchema, customMcpHeadersPatchSchema, customMcpToolNameSchema, customMcpToolSchema, customMcpServerInfoSchema, customMcpToolSelectionSchema, customMcpToolsResponseSchema, customMcpFailureSchema, customMcpHealthSchema, customMcpErrorBodySchema, customMcpConnectionBlockSchema, customMcpConnectionViewSchema, customMcpConnectionResponseSchema, customMcpProbeBodySchema, customMcpOAuthDiscoverySchema, customMcpProbeResponseSchema, createFields, mountAgentField, customMcpCreateAgentBodySchema, customMcpCreateUserBodySchema, customMcpOAuthClientSchema, startFields, customMcpOAuthStartAgentBodySchema, customMcpOAuthStartUserBodySchema, customMcpOAuthStartResponseSchema, nonce, customMcpOAuthSuccessRedirectQuerySchema, CUSTOM_MCP_OAUTH_CALLBACK_ERRORS, customMcpOAuthFailureRedirectQuerySchema, customMcpOAuthFinalizeBodySchema, customMcpCimdDocumentSchema, customMcpPatchBodySchema, customMcpCredentialRequestSchema, customMcpCredentialAuthSchema, customMcpCredentialResponseSchema, CUSTOM_MCP_CREDENTIAL_ERRORS, customMcpCredentialErrorBodySchema, customMcpHealthReportSchema, customMcpProbeRequestSchema, customMcpProbeResultSchema, customMcpOriginUrlSchema, customMcpServerProjectionSchema, customMcpMountUpsertBodySchema;
+function sharedDataOwnerKey(collectionId) {
+  return `${SHARED_DATA_OWNER_PREFIX}${collectionId}`;
+}
+function isSharedDataOwnerKey(agentId2) {
+  return typeof agentId2 === "string" && agentId2.startsWith(SHARED_DATA_OWNER_PREFIX);
+}
+var __defProp4, __name4, PLUMBING_THREAD_CHANNELS, CHANNEL_CONVERSATION_CHANNELS, HIDDEN_THREAD_CHANNELS, CHOICE_PERSON_TURN_CHANNELS, CHOICE_REPLAY_CLIENT_CAPABILITIES, CHOICE_REPLAY_CLIENT_SURFACES, DECISION_PROVIDERS, DECISION_FALLBACK_PROVIDERS, OPENROUTER_DIRECT_VENDORS, OPENROUTER_NEEDS_MODEL_MESSAGE, DECISION_QUESTION_TYPES, DECISION_NAME_PATTERN, DECISION_SANDBOX_SITE_HEADER, DECISION_SANDBOX_PRIMITIVE_HEADER, DECISION_SANDBOX_TOOL_SEPARATOR, DECISION_LIMITS, DECISION_ERROR_CODES, MAX_NAME_CHARS, InstructionsSchema, NameSchema, OddsQuestionSchema, ChoiceQuestionSchema, ScoreQuestionSchema, DecisionQuestionSchema, DecisionOptionsSchema, DecisionQuestionsSchema, DecisionDefinitionSchema, DecisionDefinitionWriteSchema, INTEGRATION_PASSTHROUGH_READ_METHODS, URL_REINTERPRETED_PATH_CHARACTERS, PERCENT_ENCODED_DOT, PERCENT_ESCAPE, DECODED_PATH_SEPARATORS, DECODED_LEADING_SEPARATOR, MAX_PERCENT_DECODE_ROUNDS, URL_RESOLUTION_PROBE_BASE, PLATFORM_INVOCATION_CALLERS, MESSAGING_CHANNELS, VOICE_CHANNELS, TURN_CATEGORIES, AGENT_TOOL_CATEGORIES, count, AnthropicSseUsageReader, SUPERVISION_OPS, SUPERVISION_OPS_WAVE2, SUPERVISION_WATCHDOG_OPS, SUPERVISION_WATCHDOG_ERRORS, SUPERVISION_ROLLBACK_REFUSAL_CODES, SUPERVISION_ROLLBACK_LINEAGE_MAX, SUPERVISION_UNTARGETED_OPS, SUPERVISED_WORKFLOW_VERSIONS_MAX, SUPERVISION_EVENT_KINDS, AGENT_PROVISIONING_LIMITS, AGENT_PROVISIONING_APPROVAL_PAYLOAD_KEY, AGENT_PROVISIONING_ERRORS, PROVISIONED_SUPERVISION_ACTIONS, isNonEmptyString, uniqueStrings, sameSet, AGENT_PROVISIONING_APPROVAL_CARD_MAX_CHARS, APPROVAL_PAYLOAD_MEMBERS, AGENT_CONNECTION_POLICIES, AGENT_CONNECTION_POLICY_DEFAULT, AGENT_CONNECTION_MOUNT_MODES, AGENT_CONNECTION_GOVERNANCE_ERRORS, AGENT_CONNECTION_OPERATION_RULES_MAX, AGENT_CONNECTION_OPERATION_PATTERN_MAX_LENGTH, OPERATION_RULE_METHODS, PATH_SEPARATOR, PATH_SINGLE_SEGMENT_WILDCARD, PATH_REST_WILDCARD, METHOD_OVERRIDE_HEADER_NAMES, METHOD_OVERRIDE_QUERY_NAMES, ODATA_BATCH_SEGMENT, GOOGLE_BATCH_FIRST_SEGMENT, CONNECTION_CHECK_RESULTS, CONNECTION_CHECK_CATALOGUE_V1, CONNECTION_CHECK_NAME_PATTERN, CONNECTION_CHECK_NAME_MAX, CONNECT_OUTCOME_STATUSES, SECRET_TEST_RESULTS, SECRET_DATADOG_REGIONS, SECRET_PROVIDER_CATALOGUE_V1, SECRET_TEST_MAX_RESPONSE_BYTES, SECRET_ENV_KEY_PATTERN, SECRET_REQUEST_ERRORS, SECRET_OUTCOME_STATUSES, CLIENT_OUTCOME_TURNS_MAX, SHORT_TEXT_MAX, SLUG_MAX, shortText, optionalShortText, CONNECTION_REQUEST_TERMINAL_STATES, CONNECTION_USE_ORIGINS, AGENT_CONNECTION_OPERATION_LIMITS_BOUNDS, CURRENCY_CODE, LIMITS_KEYS, CAPS_KEYS, EXCLUSIONS_KEYS, EMAIL_IN_TEXT, MAX_EXCLUSION_DEPTH, PROJECTION_PARAMETER_KEYS, CHANNEL_PARAMETER_KEYS, GMAIL_SYSTEM_LABEL_IDS, ZERO_DECIMAL_CURRENCIES, THREE_DECIMAL_CURRENCIES, DECIMAL_AMOUNT, REDACTED_PLACEHOLDER, PROVIDER_MESSAGE_MAX_CHARS, ERROR_MESSAGE_MAX_CHARS, SECRET_LITERAL_PATTERNS, SECRET_NAME, SECRET_PAIR_PATTERNS, GROUP_COUNT, WORKFLOW_SECRET_KEY_RE, WORKFLOW_RESERVED_SECRET_KEYS, SCRUB_INPUT_MAX_CHARS, SCRUB_CUT_BACKOFF_CHARS, SCRUB_DEEP_MAX_DEPTH, TEST_SESSION_ID_PATTERN, TEST_SESSION_COLLECTION_PREFIX, TEST_EFFECT_BODY_MAX_BYTES, TEST_EFFECT_DROPPED_HEADERS, EVAL_CREDITS_PER_1K_TOKENS, EVAL_RESERVED_TOOL_ID_PREFIXES, SUPERVISED_SECRET_LIMITS, SUPERVISED_SECRET_NAME_RE, SUPERVISED_SECRET_FIELD_RE, SUPERVISED_SECRET_KEY_FIELD, SUPERVISED_SECRET_ERRORS, CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY, CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS, CONNECTION_HANDOVER_LIMITS, MEMBERS, FORMAT_CHARS, oneLine, boundedString, AGENT_METRIC_NAME_PATTERN, AGENT_METRIC_LIMITS, AGENT_OBJECTIVE_ERRORS, CHANGE_LEASE_TTL_MINUTES_MIN, CHANGE_LEASE_TTL_MINUTES_MAX, CHANGE_LEASE_REASON_MAX, CHANGE_LEASE_ERRORS, AGENT_CONFIG_SET_LIMITS, SECRET_ENV_KEY_SUFFIXES, DEFAULT_OWNER_DEPARTURE_POLICY, AGENT_LIFECYCLE_ERRORS, USER_COST_COUNTER_TTL_SECONDS, USER_COST_ATTRIBUTION_CHANNELS, CALLER_DEDUPE_KEY_MAX, FOLLOW_UP_IDEMPOTENCY_TTL_SECONDS, THREAD_FOLLOW_UP_LIMITS, THREAD_FOLLOW_UP_ERRORS, PROGRESS_UPDATE_LIMITS, PAUSABLE_CAPABILITY_KINDS, UNIFIED_CATCH_UP_MAX_WINDOW_HOURS, UNIFIED_CATCH_UP_EVENTS, UNIFIED_CATCH_UP_FILTERABLE_OBJECT_TYPES, AGENT_NEVER_RULES_MAX, AGENT_NEVER_RULE_FIELD_MAX, AGENT_NEVER_RULE_INPUT_MATCH_MAX, NEVER_RULE_ID_PATTERN, NEVER_RULE_HTTP_METHODS, TEMPLATE_DISTRIBUTION_MODES, CHANNEL_SEND_CHANNELS, TAKEOVER_MAX_IDLE_MINUTES, MINUTES_PER_DAY, DEFAULT_IDLE_RELEASE_MINUTES, FALLBACK_IDLE_RELEASE_MINUTES, VARIATION_SELECTORS, SLACK_EMOJI_NAMES, SLACK_SHORTCODE, PLAIN_EMAIL_ADDRESS, DOMAIN, UNSAFE_TEXT, SLACK_CONVERSATION_ID, CHANNEL_SETTING_GROUPS, THREAD_SCOPING_NOUN, TAKEOVER_CHANNEL_TYPES, EMAIL_SETTINGS, SLACK_SETTING_DEFAULTS, SLACK_REACTION_MAX, SLACK_INTRO_MAX, SLACK_EXAMPLE_PROMPTS_MAX, SLACK_EXAMPLE_PROMPT_MAX, SLACK_SUPPORT_CONTACT_MAX, SLACK_SETTINGS, CHANNEL_SETTINGS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_STANDING_START_TOOLS, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, WORK_ITEMS_KEY, MAX_WORK_ITEMS, LIMITS, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, SERVER_TRIGGERED_BROWSER_SOURCES, BROWSER_FALLBACKS, DEFAULT_BROWSER_FALLBACK, PROXY_COUNTRY_CODE, BROWSER_LOG_CONTENT_MODES, DEFAULT_BROWSER_LOG_CONTENT, BROWSER_SCREENSHOT_POLICIES, DEFAULT_BROWSER_SCREENSHOT_POLICY, BROWSER_PROFILE_NAME_PATTERN, BROWSER_LIMIT_KEYS, BROWSER_LIMIT_MAX, BROWSER_EXECUTE_METHOD, BROWSER_GLOBAL_METHODS, BROWSER_EXECUTE_DEFAULT_TIMEOUT_MS, BROWSER_EXECUTE_MAX_TIMEOUT_MS, LOG_FIELDS_MAX_KEYS, LOG_FIELD_MAX_VALUE_BYTES, LOG_FIELDS_MAX_BYTES, LOG_FIELD_KEY_PATTERN, LOG_FIELD_SECRET_SHAPED_KEY_PATTERNS, LOG_FIELDS_CLAMPED_KEY, LOG_FIELD_ARRAY_COUNT_SUFFIX, LuaLogFieldsError, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, BROWSER_READ_FORMATS, BROWSER_READ_DEFAULT_TIMEOUT_MS, BROWSER_READ_MIN_TIMEOUT_MS, BROWSER_READ_MAX_TIMEOUT_MS, BROWSER_READ_MAX_CONTENT_CHARS, BROWSER_READ_DEFAULT_SELECTOR, BROWSER_READ_MATCH_SEPARATOR, BROWSER_READ_LOGIN_BLOCKER, BROWSER_ERROR_NAME, HTTP_STATUS_FAILURE, LOGIN_PATH_SEGMENTS, LOGIN_HOST_LABELS, AGENT_LOG_SOURCES, AGENT_LOG_ENVIRONMENTS, AGENT_LOG_FIELDS_MAX_WIRE_KEYS, BROWSER_LOG_EVENT_KINDS, BROWSER_LOG_ENGINES, BROWSER_SESSION_OPEN_REASONS, BROWSER_BLOCK_KINDS, BROWSER_WALL_KINDS, BROWSER_WALL_NEXT_ACTIONS, BROWSER_CONFIRM_DECISIONS, BROWSER_SESSION_CLOSE_REASONS, BROWSER_LOG_CONTEXT_KEYS, BROWSER_LOG_ID_MAX_CHARS, BROWSER_LOG_TEXT_MAX_CHARS, isString, isBoolean, isCount, isPlainObject3, oneOf, isLimits, EVENT_SHAPES, BASE_KEYS, BROWSER_WORKER_SESSION_ID_SEPARATOR, BROWSER_WORKER_BLOCK_REASON_MAX_CHARS, WORKFLOW_RETRY_BACKOFFS, WORKFLOW_RETRY_MIN_ATTEMPTS, WORKFLOW_RETRY_POLICY_KEYS, WORKFLOW_RETRY_MAX_ATTEMPTS, WORKFLOW_RETRY_ENGINE_KEYS, WORKFLOW_JOB_RESOURCES, WORKFLOW_SIDE_EFFECTS, WORKFLOW_MODEL_CLASSES, WORKFLOW_DEFAULT_TASK_CLASS_MAP, WORKFLOW_MODELS_MAX_CLASS_DEFAULT, WORKFLOW_AUTONOMY_NUMERIC_KEYS, WORKFLOW_AUTONOMY_ENVELOPE_KEYS, WORKFLOW_AUTONOMY_DEFAULTS, WORKFLOW_AUTONOMY_CEILINGS, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_ENV, WORKFLOW_AUTONOMY_MAX_RUNS_PER_HOUR_CEILING, WORKFLOW_AUTONOMY_FORMS_DEFAULT, WORKFLOW_AUTONOMY_MIN_VALUE, WORKFLOW_JOB_RANGES, WORKFLOW_JOB_RANGE_MEMBERS, WORKFLOW_SINGLE_STEP_TYPES, WORKFLOW_HITL_ENTRY_TYPES, WORKFLOW_ARM_ENTRY_TYPES, WORKFLOW_HITL_ARM_CONTAINERS, WORKFLOW_GRAPH_ENTRY_STEP_KINDS, WORKFLOW_ARM_ENTRY_STEP_KINDS, WORKFLOW_BUDGET_MAX_DURATION_SECONDS, MODEL_ID_BYOK_PROVIDERS, MODEL_CLASS_REF_PREFIX, MODEL_SNAPSHOT_SUFFIX, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, PLATFORM_FALLBACK_MODEL_SOURCE, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, LOG_DRAIN_TYPES_PHASE1, LOG_DRAIN_TYPES_PHASE2, LOG_DRAIN_TYPES_IMPLEMENTED, LOG_DRAIN_SOURCES, LOG_DRAIN_MAX_PER_ORG, LOG_DRAIN_MAX_PER_ORG_ENTERPRISE, LOG_DRAIN_DATADOG_SITES, LOG_DRAIN_NEWRELIC_SITES, LOG_DRAIN_ENDPOINT_TEMPLATES, LOG_DRAIN_PRESET_SITES, LOG_DRAIN_BUCKET_NAME_PATTERN, LOG_DRAIN_BUCKET_HOST_PATTERNS, LOG_DRAIN_PRESET_HOST_SUFFIXES, DRAIN_CONTENT_ACK_ERROR_CODE, DRAIN_CONTENT_ACK_FIELD, DrainContentAckRequiredError, LOG_DRAIN_PRESET_PATHS, PRESET_SEGMENT_RE, LOG_DRAIN_QUOTAS, LOG_DRAIN_QUOTA_WARN_RATIO, LOG_DRAIN_QUOTA_DROP_DEBUG_RATIO, LOG_DRAIN_QUOTA_DROP_INFO_RATIO, LOG_DRAIN_QUOTA_PAUSE_RATIO, LOG_EXPORT_SOURCES, LOG_EXPORT_MAX_WINDOW_DAYS, LOG_EXPORT_MAX_WINDOW_MS, LOG_EXPORT_URL_TTL_SECONDS, LOG_EXPORT_FILE_RETENTION_DAYS, LOG_EXPORT_FILE_RETENTION_MS, LOG_EXPORT_PART_MAX_BYTES, LOG_DRAIN_NOTICE_RATE_LIMIT_MS, LOG_DRAIN_VERIFICATION_STALE_MS, LOG_DRAIN_DIGEST_INTERVAL_MS, LOG_DRAIN_DIGEST_MAX_ENTRIES, LOG_DRAIN_NOTICE_ERROR_MAX_CHARS, LOG_DRAIN_USAGE_LINE_ITEM, LOG_DRAIN_BYTES_PER_GIB, DEFAULT_LOG_DRAIN_PLAN_CONFIG, TIERS, LOG_CURSOR_MAX_LENGTH, LOG_CURSOR_MAX_ID_LENGTH, LOG_RELATIVE_TIME_PATTERN, LOG_ISO_TIME_PATTERN, RELATIVE_UNIT_MS, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, KEYS, MAX_BODY_BYTES, MAX_ID_LENGTH, UTC_ISO, TEMPLATE_TRIGGER_URL_ENV_PREFIX, TEMPLATE_INSTALL_POLICY_PER_WORKSPACE_VALUES, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, SESSION_AUTH_TIME_MAX_S, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, LUA_SESSION_ID_CLAIM, SESSION_REVOKED_CODE, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema, SYSTEM_USER_PREFIX, WORKFLOW_RUN_IN_FLIGHT, WORKFLOW_RUN_IDLE, WORKFLOW_RUN_TERMINAL, WORKFLOW_RUN_STATUSES, WORKFLOW_RUN_GATE_KINDS, WORKFLOW_STEP_STATUSES, WORKFLOW_STEP_IN_FLIGHT, WORKFLOW_SIGNAL_EVENT_SITES, ARCHIVE_WINDOW_MARGIN_DAYS, WORKFLOW_ORG_PURGING_TTL_S, WORKFLOW_ORG_PURGE_FORCE_AFTER_MS, IDEMPOTENCY_HOLDING_STATUSES, WORKFLOW_SCHEDULED_RUN_ID_PREFIX, CLOUD_TASK_RUN_ID_PREFIX, WORKFLOW_SCHEDULE_KEY_MAX, WORKFLOW_SCHEDULE_IDEMPOTENCY_KEY_PREFIX, WORKFLOW_OPERATION_ID_PREFIX, WORKFLOW_CONNECTION_KEY_RE, WORKFLOW_AGENT_APP_CONNECTION_PREFIX, WORKFLOW_JOB_MODEL_SOURCE_LABELS, WORKFLOW_SUSPEND_KINDS, WORKFLOW_RUN_NOTIFICATION_SUSPENDED_KINDS, WORKFLOW_SIGNAL_PAYLOAD_MAX_BYTES, WORKFLOW_SIGNAL_NAME_RE, WORKFLOW_SUSPEND_DEFAULT_TIMEOUT_HOURS, WORKFLOW_RESOLVE_OUTPUT_MAX_BYTES, SCHEDULE_HEALTH_NOTIFY_CHANNELS, SCHEDULE_HEALTH_DEFAULT_NOTIFY, SCHEDULE_HEALTH_LIMITS, KNOWN_KEYS, WORKFLOW_GOAL_JUDGE_SELF, APPROVAL_ARGS_MAX_CHARS, APPROVAL_ARG_STRING_MAX_CHARS, APPROVAL_ARGS_SUMMARY_MAX_CHARS, MAX_DEPTH, MAX_KEYS, MAX_ITEMS, MAX_NODES, MAX_KEY_CHARS, KEY_SCRUB_INPUT_MAX_CHARS, STRING_SCRUB_INPUT_MAX_CHARS, ELLIPSIS, SKIP, SCRUB_SECRETS_BEFORE_PERSIST_ENV, PERSIST_SCRUB_MAX_CHARS, PERSIST_SCRUB_REF_MAX_CHARS, WORKFLOW_AUDIT_EVENTS, WORKFLOW_AUDIT_METADATA_MAX_BYTES, INDENT, WRAP_WIDTH, NOUNS, GET_TOOL_NAMES, PREAMBLE, WORKFLOW_APPROVAL_OUTPUT_DECISIONS, WORKFLOW_APPROVAL_OUTPUT_SCHEMA, JSON_FENCE_RE, DEFAULT_ON_AGENT_FEATURES, SUBAGENT_PER_KEY_FLAG_ENV, PER_KEY_FLAG_VALUES, ONBOARDING_FLOW_KEY, ONBOARDING_SCHEMA_VERSION, id, copy, onboardingHeadingSchema, onboardingRichTextInlineSchema, onboardingRichTextSchema, onboardingDestinationSchema, onboardingArtworkSchema, onboardingAnswerSchema, onboardingQuestionSchema, onboardingTemplateSectionSchema, onboardingInstallScreenSchema, onboardingResultScreenSchema, onboardingConnectScreenSchema, onboardingTemplateContentSchema, onboardingUnavailableOutcomeSchema, onboardingFlowSchema, onboardingActorSchema, onboardingEditorSchema, onboardingPublicationSummarySchema, onboardingValidationIssueSchema, onboardingValidationResponseSchema, onboardingAssetSchema, onboardingPublicAssetSchema, getOnboardingConfigResponseSchema, saveOnboardingDraftRequestSchema, validateOnboardingRequestSchema, publishOnboardingRequestSchema, rollbackOnboardingRequestSchema, onboardingTemplateCatalogItemSchema, getPublishedOnboardingResponseSchema, WEB_ROUTE_PROTOCOL_VERSION, WEB_ROUTE_METHODS, WEB_ROUTE_REQUEST_HEADER_ALLOWLIST, WEB_ROUTE_RESPONSE_HEADER_ALLOWLIST, WEB_ROUTE_MAX_REQUEST_BODY_BYTES, WEB_ROUTE_MAX_RESPONSE_BYTES, WEB_APP_NAME_PATTERN, WEB_APP_ENTRY_HTML_MAX_CHARS, WEB_APP_MAX_ASSET_BYTES, EVIDENCE_SESSION_IDLE_MS, EVIDENCE_MIN_CONVERSATIONS, EVIDENCE_LOW_CONFIDENCE_N, EVIDENCE_SNIPPET_MAX_CHARS, EVIDENCE_EXAMPLES_PER_ITEM, EVIDENCE_SHOWN_ITEMS, EVIDENCE_LATENCY_BOUNDS_MS, EVIDENCE_WORD_BOUNDS, BAD_CONVERSATION_REASONS, ATTACHMENT_LINES, REVIEW_VERDICT_REASON_ORDER, ENV_TEMPLATE_SECRET_KEY_RE, CONNECTION_SEND_NOT_ALLOWED, CONNECTION_RECIPIENT_NOT_ALLOWED, NOT_SEND, PLAIN_ADDRESS, RecipientSet, MCP_MESSAGING_CREATE, MCP_CALENDAR_EVENT_WRITE, REPLY_KEYS, DEDICATED_MAIL_SLUGS, FULL_SUITE_SLUGS, WELL_KNOWN_MAIL_FOLDERS, MEMBER_KEYS, CANONICAL_ORIGIN, CANONICAL_PREFIX, STRICT_BASE64, GMAIL_PREFIX, GMAIL_MESSAGES_SEND, GMAIL_DRAFTS_SEND, GOOGLE_BATCH, GRAPH_VERSION, GRAPH_PRINCIPAL, GRAPH_SEND_MAIL, GRAPH_MESSAGE_ACTION, GRAPH_OWNER, GRAPH_EVENTS, GRAPH_EVENT_COLLECTION, GRAPH_EVENT_ID, GRAPH_EVENT_ITEM, GRAPH_EVENT_ACTION, GRAPH_BATCH, GRAPH_TEAMS_MESSAGE, GRAPH_ACTIVITY_NOTIFICATION, GRAPH_GROUP_CONVERSATION, GCAL_EVENTS, GRAPH_READ_KEYS, MALFORMED_POLICY, BILLING_REJECTION_TEXT_CREDITS, BILLING_REJECTION_TEXT_SEAT, BILLING_REJECTION_TEXT_USER_QUOTA, CUSTOM_MCP_CONNECTION_ID_PREFIX, CUSTOM_MCP_SOURCE, CUSTOM_MCP_TRANSPORT, CUSTOM_MCP_CONNECTION_ID_PATTERN, customMcpConnectionIdSchema, CONNECTION_BACKED_MCP_SOURCES, CUSTOM_MCP_REFERENCE_ID_PATTERN, customMcpReferenceIdSchema, CUSTOM_MCP_AUTH_KINDS, customMcpAuthKindSchema, CUSTOM_MCP_OAUTH_REGISTRATIONS, customMcpOAuthRegistrationSchema, CUSTOM_MCP_HEALTH_STATES, customMcpHealthStateSchema, CUSTOM_MCP_FAILURE_STEPS, customMcpFailureStepSchema, CUSTOM_MCP_CONNECT_STEPS, customMcpConnectStepSchema, customMcpFailureCodeSchema, WORKFLOW_KEY_MAX_LENGTH, CUSTOM_MCP_URL_MAX_LENGTH, CUSTOM_MCP_DISPLAY_NAME_MAX_LENGTH, CUSTOM_MCP_MAX_HEADERS, CUSTOM_MCP_HEADER_NAME_MAX_LENGTH, CUSTOM_MCP_HEADER_VALUE_MAX_LENGTH, CUSTOM_MCP_MAX_TOOLS, CUSTOM_MCP_TOOL_NAME_MAX_LENGTH, CUSTOM_MCP_TOOL_TEXT_MAX_LENGTH, CUSTOM_MCP_MIN_TIMEOUT_MS, CUSTOM_MCP_MAX_TIMEOUT_MS, CUSTOM_MCP_OAUTH_PENDING_TTL_MS, isoDateTime, agentId, nonNegativeInt, customMcpUrlInputSchema, customMcpDisplayNameSchema, customMcpTimeoutSchema, CUSTOM_MCP_RESERVED_HEADER_NAMES, HEADER_NAME, HEADER_VALUE_FORBIDDEN, customMcpHeaderNameSchema, headerValue, customMcpHeadersSchema, customMcpHeadersPatchSchema, customMcpToolNameSchema, customMcpToolSchema, customMcpServerInfoSchema, customMcpToolSelectionSchema, customMcpToolsResponseSchema, customMcpFailureSchema, customMcpHealthSchema, customMcpErrorBodySchema, customMcpConnectionBlockSchema, customMcpConnectionViewSchema, customMcpConnectionResponseSchema, customMcpProbeBodySchema, customMcpOAuthDiscoverySchema, customMcpProbeResponseSchema, createFields, mountAgentField, customMcpCreateAgentBodySchema, customMcpCreateUserBodySchema, customMcpOAuthClientSchema, startFields, customMcpOAuthStartAgentBodySchema, customMcpOAuthStartUserBodySchema, customMcpOAuthStartResponseSchema, nonce, customMcpOAuthSuccessRedirectQuerySchema, CUSTOM_MCP_OAUTH_CALLBACK_ERRORS, customMcpOAuthFailureRedirectQuerySchema, customMcpOAuthFinalizeBodySchema, customMcpCimdDocumentSchema, customMcpPatchBodySchema, customMcpCredentialRequestSchema, customMcpCredentialAuthSchema, customMcpCredentialResponseSchema, CUSTOM_MCP_CREDENTIAL_ERRORS, customMcpCredentialErrorBodySchema, customMcpHealthReportSchema, customMcpProbeRequestSchema, customMcpProbeResultSchema, customMcpOriginUrlSchema, customMcpServerProjectionSchema, customMcpMountUpsertBodySchema, SHARED_DATA_NAME_RE, SHARED_DATA_OWNER_PREFIX, SHARED_DATA_ERRORS;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -7580,9 +7688,29 @@ var init_dist = __esm({
     __name(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
     __name4(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
     DECISION_PROVIDERS = [
+      "jev",
+      "openai",
+      "openrouter"
+    ];
+    DECISION_FALLBACK_PROVIDERS = [
       "jev",
       "openai"
     ];
+    OPENROUTER_DIRECT_VENDORS = [
+      {
+        pattern: /^~?typesafe\//,
+        provider: "jev"
+      },
+      {
+        pattern: /^openai\//,
+        provider: "openai"
+      }
+    ];
+    __name(directProviderOfOpenRouterModel, "directProviderOfOpenRouterModel");
+    __name4(directProviderOfOpenRouterModel, "directProviderOfOpenRouterModel");
+    OPENROUTER_NEEDS_MODEL_MESSAGE = "provider openrouter needs a model id, such as liquid/d1";
+    __name(openRouterModelIssue, "openRouterModelIssue");
+    __name4(openRouterModelIssue, "openRouterModelIssue");
     DECISION_QUESTION_TYPES = [
       "odds",
       "choice",
@@ -7665,7 +7793,7 @@ var init_dist = __esm({
       ]).optional(),
       model: z.string().min(1).optional(),
       fallback: z.union([
-        z.enum(DECISION_PROVIDERS),
+        z.enum(DECISION_FALLBACK_PROVIDERS),
         z.literal("none")
       ]).optional(),
       region: z.literal("eu").optional(),
@@ -7694,6 +7822,16 @@ var init_dist = __esm({
       description: z.string().max(DECISION_LIMITS.maxInstructionChars).optional(),
       questions: DecisionQuestionsSchema
     }).strict();
+    DecisionDefinitionWriteSchema = DecisionDefinitionSchema.superRefine((definition, ctx) => {
+      const issue = openRouterModelIssue(definition);
+      if (issue) ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: [
+          "model"
+        ],
+        message: issue
+      });
+    });
     INTEGRATION_PASSTHROUGH_READ_METHODS = [
       "GET",
       "HEAD"
@@ -7938,7 +8076,14 @@ var init_dist = __esm({
       * the target (`snapshot.jobs[]`) so the promote activates and schedules it. Mongo-only marker write; EventBridge stays
       * on the post-promote reconcile. Release-class: needs `register-job` AND `release` on the grant, from a signed step.
       */
-      "jobs.register": "register-job"
+      "jobs.register": "register-job",
+      // [SW]
+      /**
+      * SW — `Agents.secrets(id).put(collection, key, value)`: write ONE secret row into the TARGET's own Data, in a
+      * collection the grant names in `secretWriteCollections` (deny by default), keyed by `data._pk`. The value never
+      * comes back: the answer is `{ ok, id, fingerprint }`, and the audit row carries the fingerprint only.
+      */
+      "secrets.put": "act"
     };
     __name(isSupervisionOp, "isSupervisionOp");
     __name4(isSupervisionOp, "isSupervisionOp");
@@ -8134,6 +8279,12 @@ var init_dist = __esm({
         gate: "register-job",
         targeted: true,
         item: "JR"
+      },
+      /** SW — `Agents.secrets(id).put(collection, key, value)`: one secret row in a `secretWriteCollections` collection. */
+      "secrets.put": {
+        gate: "act",
+        targeted: true,
+        item: "SW"
       }
     };
     SUPERVISION_WATCHDOG_OPS = {
@@ -8821,6 +8972,12 @@ var init_dist = __esm({
       {
         re: /\b(npm_)[A-Za-z0-9]{36}\b/g
       },
+      // Linear personal API keys (`lin_api_` + 40) and OAuth access / refresh tokens (`lin_oauth_` + 64 hex,
+      // `lin_refresh_`): the fleet's Engineering Manager hands OAuth tokens to agents in a prompt + tool call, and
+      // both landed verbatim in `vmExecutionLogs` (2026-10-11).
+      {
+        re: /\b(lin_(?:api|oauth|refresh)_)[A-Za-z0-9]{16,}/g
+      },
       {
         re: /\b(sk-ant-)[A-Za-z0-9_-]{16,}/g
       },
@@ -8839,11 +8996,16 @@ var init_dist = __esm({
       {
         re: /\b(ya29\.)[A-Za-z0-9_-]{20,}/g
       },
+      // 2026-10-11: `(?<![A-Za-z0-9_-])`, not `\b` — with `\b` every `eyJ` after a `-` / `_` started an attempt that
+      // ran the first segment to the end of the run and failed on the missing `.`, so `eyJabcdefgh-` × 1 MB took
+      // ~115 s (quadratic). Now a run of segment characters admits at most one attempt.
       {
-        re: /\b(eyJ)[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g
+        re: /(?<![A-Za-z0-9_-])(eyJ)[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g
       },
+      // 2026-10-11: the body stops at the next `-----BEGIN ` — a lazy `[\s\S]*?` let every unterminated BEGIN scan to the
+      // end of the text (quadratic on a repeated header with no END). A key whose END follows is matched as before.
       {
-        re: /(-----BEGIN [A-Z ]*PRIVATE KEY-----)[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g
+        re: /(-----BEGIN [A-Z ]*PRIVATE KEY-----)(?:(?!-----BEGIN )[\s\S])*?-----END [A-Z ]*PRIVATE KEY-----/g
       },
       // `https://x-access-token:<token>@github.com/…` (the git credential shape the pod scrubbed already)
       {
@@ -8851,7 +9013,7 @@ var init_dist = __esm({
         suffix: true
       }
     ];
-    SECRET_NAME = "(?:authorization|proxy-authorization|x-api-key|x-wf-[a-z-]*key|x-internal-auth|api[_-]?key|apikey|access[_-]?key|secret[_-]?key|private[_-]?key|client[_-]?secret|secret|password|passwd|pwd|passphrase|token|credentials?)";
+    SECRET_NAME = "(?:access[_-]?token|refresh[_-]?token|id[_-]?token|auth[_-]?token|authorization|proxy-authorization|x-api-key|x-wf-[a-z-]*key|x-internal-auth|api[_-]?key|apikey|access[_-]?key|secret[_-]?key|private[_-]?key|client[_-]?secret|secret|password|passwd|pwd|passphrase|token|credentials?)";
     SECRET_PAIR_PATTERNS = [
       // `Authorization: Bearer x`, `x-api-key: x`, `AWS_SECRET_ACCESS_KEY=x`, `SVC_JOB_KEY=x`, `"apiKey": "x"`,
       // `FOO_TOKEN=x`, `secretKey=x`, `password=x`. Groups: the char before the name, the name, the separator
@@ -8927,6 +9089,13 @@ var init_dist = __esm({
     __name4(scrubProviderMessage, "scrubProviderMessage");
     __name(scrubStepErrorMessage, "scrubStepErrorMessage");
     __name4(scrubStepErrorMessage, "scrubStepErrorMessage");
+    SCRUB_DEEP_MAX_DEPTH = 12;
+    __name(scrubSecretsDeep, "scrubSecretsDeep");
+    __name4(scrubSecretsDeep, "scrubSecretsDeep");
+    __name(isPlainObject2, "isPlainObject2");
+    __name4(isPlainObject2, "isPlainObject");
+    __name(scrubDeep, "scrubDeep");
+    __name4(scrubDeep, "scrubDeep");
     TEST_SESSION_ID_PATTERN = /^tsn_[0-9a-f-]{36}$/;
     __name(isTestSessionId, "isTestSessionId");
     __name4(isTestSessionId, "isTestSessionId");
@@ -8978,6 +9147,27 @@ var init_dist = __esm({
     __name4(sameSupervisionAccessFields, "sameSupervisionAccessFields");
     __name(supervisionAccessBindingViolation, "supervisionAccessBindingViolation");
     __name4(supervisionAccessBindingViolation, "supervisionAccessBindingViolation");
+    SUPERVISED_SECRET_LIMITS = {
+      /** Fields in `value` (the `_pk` field included). */
+      maxFields: 32,
+      /** One string field's length. */
+      maxStringLength: 8192,
+      /** The canonical JSON of the whole row. */
+      maxBytes: 16384
+    };
+    SUPERVISED_SECRET_NAME_RE = /^[A-Za-z0-9_.:-]{1,128}$/;
+    SUPERVISED_SECRET_FIELD_RE = /^[A-Za-z_][A-Za-z0-9_]{0,63}$/;
+    SUPERVISED_SECRET_KEY_FIELD = "_pk";
+    SUPERVISED_SECRET_ERRORS = {
+      BAD_ARGS: "supervision_secret_bad_args",
+      NOT_GRANTED: "supervision_secret_write_not_granted",
+      /** A collection named for secret writes is write-only for the supervisor: `data.get` / `data.query` refuse it. */
+      WRITE_ONLY: "supervision_secret_collection_write_only"
+    };
+    __name(canonicalSupervisedSecretJson, "canonicalSupervisedSecretJson");
+    __name4(canonicalSupervisedSecretJson, "canonicalSupervisedSecretJson");
+    __name(validateSupervisedSecretPut, "validateSupervisedSecretPut");
+    __name4(validateSupervisedSecretPut, "validateSupervisedSecretPut");
     CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY = "connectionAssignment";
     CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS = 1200;
     CONNECTION_HANDOVER_LIMITS = {
@@ -9867,7 +10057,7 @@ var init_dist = __esm({
       },
       {
         name: "find",
-        description: "Act by semantic locator. Args: by(role|text|label|placeholder|alt|title|testid), query, action(click|fill|type|hover|focus|check|uncheck|text), value?, name?, exact?."
+        description: "Act by semantic locator. Args: by(role|text|label|placeholder|alt|title|testid), query, action(click|fill|hover|check|text), value?, name?, exact?."
       },
       // AI fallbacks
       {
@@ -9881,7 +10071,7 @@ var init_dist = __esm({
       // wait
       {
         name: "wait",
-        description: "Wait for a condition. Provide one of: selector(+state), ms, text, url, load, fn."
+        description: "Wait for a condition. Provide one of: selector (waits until it is visible), ms, text, url, load, fn."
       },
       // tabs / frames
       {
@@ -9916,7 +10106,7 @@ var init_dist = __esm({
       },
       {
         name: "set",
-        description: "Configure the browser. Args: setting(viewport|device|geo|headers|credentials|media), args[]."
+        description: "Configure the browser. Args: setting(viewport|device|geo|headers|credentials|media|offline), args[]."
       },
       // files / clipboard
       {
@@ -9960,7 +10150,7 @@ var init_dist = __esm({
       },
       {
         name: "keyboard",
-        description: "Low-level keyboard at focus. Args: action(type|inserttext|keydown|keyup), text?, key?."
+        description: "Low-level keyboard at focus. Args: action(type|inserttext), text. Use press for single keys and chords."
       },
       {
         name: "state",
@@ -10249,7 +10439,11 @@ var init_dist = __esm({
       "max-steps",
       "cost-cap",
       "error",
-      "reaped"
+      "reaped",
+      "cancelled",
+      "confirmation",
+      "blocked",
+      "stopped"
     ];
     BROWSER_LOG_CONTEXT_KEYS = [
       "runId",
@@ -10266,9 +10460,9 @@ var init_dist = __esm({
     isString = /* @__PURE__ */ __name4((value3) => typeof value3 === "string", "isString");
     isBoolean = /* @__PURE__ */ __name4((value3) => typeof value3 === "boolean", "isBoolean");
     isCount = /* @__PURE__ */ __name4((value3) => typeof value3 === "number" && Number.isFinite(value3) && value3 >= 0, "isCount");
-    isPlainObject2 = /* @__PURE__ */ __name4((value3) => typeof value3 === "object" && value3 !== null && !Array.isArray(value3), "isPlainObject");
+    isPlainObject3 = /* @__PURE__ */ __name4((value3) => typeof value3 === "object" && value3 !== null && !Array.isArray(value3), "isPlainObject");
     oneOf = /* @__PURE__ */ __name4((values) => (value3) => typeof value3 === "string" && values.includes(value3), "oneOf");
-    isLimits = /* @__PURE__ */ __name4((value3) => isPlainObject2(value3) && Object.values(value3).every((entry) => isCount(entry)), "isLimits");
+    isLimits = /* @__PURE__ */ __name4((value3) => isPlainObject3(value3) && Object.values(value3).every((entry) => isCount(entry)), "isLimits");
     EVENT_SHAPES = {
       "session.opened": {
         required: {
@@ -10277,7 +10471,8 @@ var init_dist = __esm({
         optional: {
           limits: isLimits,
           region: isString,
-          liveUrl: isString
+          liveUrl: isString,
+          browser: isString
         }
       },
       command: {
@@ -10287,7 +10482,7 @@ var init_dist = __esm({
           ok: isBoolean
         },
         optional: {
-          args: isPlainObject2,
+          args: isPlainObject3,
           urlBefore: isString,
           urlAfter: isString,
           resultBytes: isCount,
@@ -13189,6 +13384,66 @@ listed here; never invent a target.`;
     }).strict();
     __name(maskMcpServerHeaders, "maskMcpServerHeaders");
     __name4(maskMcpServerHeaders, "maskMcpServerHeaders");
+    SHARED_DATA_NAME_RE = /^[A-Za-z0-9_.-]{1,128}$/;
+    SHARED_DATA_OWNER_PREFIX = "shared:";
+    __name(sharedDataOwnerKey, "sharedDataOwnerKey");
+    __name4(sharedDataOwnerKey, "sharedDataOwnerKey");
+    __name(isSharedDataOwnerKey, "isSharedDataOwnerKey");
+    __name4(isSharedDataOwnerKey, "isSharedDataOwnerKey");
+    SHARED_DATA_ERRORS = {
+      /** Not in the ACL for this access, the collection does not exist, or it belongs to another org: one answer. */
+      FORBIDDEN: "shared_data_forbidden",
+      /** A test session may read a shared collection but never write it (no shadow namespace for shared rows). */
+      TEST_SESSION_WRITE_REFUSED: "shared_data_test_session_write_refused",
+      /** `lua test` / offline runs have no server-side ACL to consult. */
+      UNAVAILABLE_OFFLINE: "shared_data_unavailable_offline",
+      /** A private Data route was called with a shared-collection owner key. */
+      RESERVED_OWNER_KEY: "shared_data_reserved_owner_key",
+      INVALID_NAME: "shared_data_invalid_name"
+    };
+  }
+});
+
+// src/api/shared-data.offline.ts
+function assertSharedName(name) {
+  if (typeof name !== "string" || !SHARED_DATA_NAME_RE.test(name)) {
+    throw new SharedDataError(SHARED_DATA_ERRORS.INVALID_NAME, "Data.shared(name): name must be 1-128 of [A-Za-z0-9_.-]");
+  }
+}
+function offlineSharedData(name) {
+  assertSharedName(name);
+  const refuse = /* @__PURE__ */ __name(async () => {
+    throw new SharedDataError(SHARED_DATA_ERRORS.UNAVAILABLE_OFFLINE, `Data.shared('${name}') is only available to a deployed agent (the org ACL is checked on the platform); it is not available in local test runs`);
+  }, "refuse");
+  return {
+    collections: refuse,
+    create: refuse,
+    get: refuse,
+    getEntry: refuse,
+    update: refuse,
+    patch: refuse,
+    increment: refuse,
+    search: refuse,
+    delete: refuse
+  };
+}
+var SharedDataError;
+var init_shared_data_offline = __esm({
+  "src/api/shared-data.offline.ts"() {
+    "use strict";
+    init_dist();
+    SharedDataError = class extends Error {
+      static {
+        __name(this, "SharedDataError");
+      }
+      code;
+      name = "SharedDataError";
+      constructor(code, message) {
+        super(message), this.code = code;
+      }
+    };
+    __name(assertSharedName, "assertSharedName");
+    __name(offlineSharedData, "offlineSharedData");
   }
 });
 
@@ -13646,6 +13901,9 @@ function apiErrorDetail(error) {
     keyOwner: error?.keyOwner
   };
 }
+function isLuaErrorBody(body) {
+  return typeof body.message === "string" || typeof body.statusCode === "number" || typeof body.code === "string";
+}
 function isAccessDeniedError(error) {
   if (CliError.isCliError(error)) return error.statusCode === 403;
   return error instanceof Error && error.message.startsWith("Access denied (403)");
@@ -13800,7 +14058,7 @@ function classifyCliError(error) {
     message
   };
 }
-var CLI_EXIT, CliError, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT, VENDOR_RETRY_SOON_SECONDS, VENDOR_LABELS, PROVIDER_REJECTED_SERVER_CODE, PROVIDER_REJECTED_HTTP_STATUS, PROVIDER_REJECTION_REASONS, PROVIDER_REJECTED_NO_RETRY, PROVIDER_REJECTED_LUA_SIDE, MODEL_SETTINGS_URL, DECISION_STATUS;
+var CLI_EXIT, CliError, EDGE_BLOCKED_CODE, NETWORK_ERRNO, NETWORK_MESSAGE, UNAVAILABLE_HINT, VENDOR_RETRY_SOON_SECONDS, VENDOR_LABELS, PROVIDER_REJECTED_SERVER_CODE, PROVIDER_REJECTED_HTTP_STATUS, PROVIDER_REJECTION_REASONS, PROVIDER_REJECTED_NO_RETRY, PROVIDER_REJECTED_LUA_SIDE, MODEL_SETTINGS_URL, DECISION_STATUS;
 var init_cli_error = __esm({
   "src/errors/cli.error.ts"() {
     "use strict";
@@ -13913,6 +14171,8 @@ var init_cli_error = __esm({
         return error instanceof _CliError || typeof error === "object" && error !== null && error.isCliError === true;
       }
     };
+    EDGE_BLOCKED_CODE = "EDGE_BLOCKED";
+    __name(isLuaErrorBody, "isLuaErrorBody");
     __name(isAccessDeniedError, "isAccessDeniedError");
     NETWORK_ERRNO = /* @__PURE__ */ new Set([
       "ECONNREFUSED",
@@ -14620,6 +14880,14 @@ async function classifyErrorResponse(response) {
     }
     throw new AuthenticationError(`Authentication failed: ${serverMessage}`, "unknown", serverMessage);
   }
+  if (response.status === 403 && !isLuaErrorBody(errorData) && isHtmlResponse(response)) {
+    throw new CliError("forbidden", "The request was blocked before it reached Lua (HTTP 403 from the network firewall), not by your credentials.", {
+      exitCode: CLI_EXIT.FORBIDDEN,
+      statusCode: 403,
+      serverCode: EDGE_BLOCKED_CODE,
+      hint: "Something in the request looked like an attack to the firewall, for example a URL that contains a system path. Change the request and try again."
+    });
+  }
   if (response.status === 403) {
     const detail = errorData.message || "You do not have permission to access this resource.";
     const serverCode = serverCodeOf(errorData.code, errorData.error);
@@ -14712,6 +14980,9 @@ async function* parseSseStream(body, signal) {
     }
   }
 }
+function isHtmlResponse(response) {
+  return (response.headers.get("content-type") ?? "").toLowerCase().includes("text/html");
+}
 function parseRetryAfter(raw) {
   if (!raw) return void 0;
   const seconds = Number.parseInt(raw, 10);
@@ -15129,6 +15400,7 @@ var init_http_client = __esm({
     __name(classifyErrorResponse, "classifyErrorResponse");
     __name(serverCodeOf, "serverCodeOf");
     __name(parseSseStream, "parseSseStream");
+    __name(isHtmlResponse, "isHtmlResponse");
     __name(parseRetryAfter, "parseRetryAfter");
     __name(isCoreDrainApiError, "isCoreDrainApiError");
     __name(coreDrainApiRetryDelayMs, "coreDrainApiRetryDelayMs");
@@ -17633,7 +17905,7 @@ function resolvePlacements(calls) {
 function isConditionalJoinId(stepId) {
   return CONDITIONAL_JOIN_ID.test(stepId);
 }
-function isPlainObject3(v) {
+function isPlainObject4(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function leafValue(row) {
@@ -17654,7 +17926,7 @@ function deriveRunOutput(steps) {
   if (leaves.length === 1) {
     const leaf = leaves[0];
     const value22 = leafValue(leaf);
-    if (isConditionalJoinId(leaf.stepId) && isPlainObject3(value22)) {
+    if (isConditionalJoinId(leaf.stepId) && isPlainObject4(value22)) {
       const keys = Object.keys(value22);
       if (keys.length === 1) return {
         output: value22[keys[0]],
@@ -19644,8 +19916,8 @@ var init_dist2 = __esm({
     CONDITIONAL_JOIN_ID = /^conditional@\d+\.join$/;
     __name(isConditionalJoinId, "isConditionalJoinId");
     __name8(isConditionalJoinId, "isConditionalJoinId");
-    __name(isPlainObject3, "isPlainObject");
-    __name8(isPlainObject3, "isPlainObject");
+    __name(isPlainObject4, "isPlainObject");
+    __name8(isPlainObject4, "isPlainObject");
     __name(leafValue, "leafValue");
     __name8(leafValue, "leafValue");
     __name(runOutputLeaves, "runOutputLeaves");
@@ -22661,6 +22933,7 @@ var init_cli = __esm({
     init_analytics();
     init_hints();
     init_write_info();
+    init_write_info();
   }
 });
 
@@ -24683,6 +24956,7 @@ var init_custom_data_api_service = __esm({
     init_http_client();
     init_custom_data();
     init_data_entry_instance();
+    init_shared_data_offline();
     CustomDataApi = class extends HttpClient {
       static {
         __name(this, "CustomDataApi");
@@ -24883,6 +25157,10 @@ var init_custom_data_api_service = __esm({
         }
         throw new Error(response.error?.message || "Failed to delete custom data entry");
       }
+      /** Org-shared Data. Local runs have no org ACL to consult, so every call of the handle rejects (offline). */
+      shared(name) {
+        return offlineSharedData(name);
+      }
     };
   }
 });
@@ -25778,7 +26056,7 @@ var init_agents_api_service = __esm({
         if (op === "lease.acquire" || op === "lease.release") {
           refuse("supervision_offline_unsupported", `${op} is not available offline; run it on the platform`);
         }
-        if (op === "lifecycle.archive" || op === "lifecycle.delete" || op === "config.set" || op === "secrets.attach") {
+        if (op === "lifecycle.archive" || op === "lifecycle.delete" || op === "config.set" || op === "secrets.attach" || op === "secrets.put") {
           refuse("supervision_offline_unsupported", `${op} is not available offline; run it on the platform`);
         }
         if (op === "agents.directory" || op === "access.request" || op === "access.requests" || op === "access.cancel") {
@@ -25830,7 +26108,9 @@ var init_agents_api_service = __esm({
             return runSummary(await get(`/workflows/${id2}/runs/${encodeURIComponent(String(args.runId ?? ""))}`));
           case "versions.list":
             return get(`/developer/agents/${id2}/versions${q({
-              limit: args.limit
+              limit: args.limit,
+              status: Array.isArray(args.status) ? args.status.join(",") : args.status,
+              offset: args.offset
             })}`);
           case "versions.get":
             return get(`/developer/agents/${id2}/versions/${encodeURIComponent(String(args.version))}`);
@@ -26695,10 +26975,32 @@ function createWorkflowsRuntime(getApi) {
         assertBoundAgent(api, agentId2, "goals.close");
         return unwrap(await api.closeGoal(goalId, opts), "Workflows.goals.close");
       }
+    },
+    // Lua Apps — off the platform (`lua apps dev`, `lua test webapp`) a route runs as you, so the viewer IS the
+    // CLI's own credential; on the platform the sandbox global routes these through the gateway-sealed viewer.
+    viewer: {
+      async decideApproval(runId, approvalId, decision) {
+        const api = viewerApi(await getApi(), decision.agentId);
+        return unwrap(await api.resolveApproval(runId, approvalId, {
+          decision: decision.decision,
+          ...decision.note !== void 0 ? {
+            note: decision.note
+          } : {},
+          ...decision.expectedFingerprint !== void 0 ? {
+            expectedFingerprint: decision.expectedFingerprint
+          } : {}
+        }), "Workflows.viewer.decideApproval");
+      },
+      async resume(runId, stepId, resumeData, opts = {}) {
+        const api = viewerApi(await getApi(), opts.agentId);
+        return unwrap(await api.resumeRun(runId, stepId, {
+          resumeData
+        }), "Workflows.viewer.resume");
+      }
     }
   };
 }
-var WORKFLOW_START_MAX_WAIT_SECONDS, WORKFLOW_START_CLIENT_DEADLINE_SLACK_MS, WorkflowApiError, unwrap, isWorkflowIdShaped, assertBoundAgent, pathId, WorkflowApi;
+var WORKFLOW_START_MAX_WAIT_SECONDS, WORKFLOW_START_CLIENT_DEADLINE_SLACK_MS, WorkflowApiError, unwrap, isWorkflowIdShaped, viewerApi, assertBoundAgent, pathId, WorkflowApi;
 var init_workflow_api_service = __esm({
   "src/api/workflow.api.service.ts"() {
     "use strict";
@@ -26731,6 +27033,7 @@ var init_workflow_api_service = __esm({
       return res.data;
     }, "unwrap");
     isWorkflowIdShaped = /* @__PURE__ */ __name((v) => /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(v) || /^wfc?_[A-Za-z0-9]/.test(v), "isWorkflowIdShaped");
+    viewerApi = /* @__PURE__ */ __name((api, agentId2) => agentId2 && agentId2 !== api.agentId ? api.forAgent(agentId2) : api, "viewerApi");
     assertBoundAgent = /* @__PURE__ */ __name((api, agentId2, member) => {
       if (agentId2 && agentId2 !== api.agentId) {
         throw new WorkflowApiError("FORBIDDEN", `Workflows.${member}: goals are scoped to the bound agent ${api.agentId}`, 403);
@@ -26738,7 +27041,7 @@ var init_workflow_api_service = __esm({
     }, "assertBoundAgent");
     pathId = /* @__PURE__ */ __name((id2) => encodeURIComponent(id2), "pathId");
     __name(createWorkflowsRuntime, "createWorkflowsRuntime");
-    WorkflowApi = class extends HttpClient {
+    WorkflowApi = class _WorkflowApi extends HttpClient {
       static {
         __name(this, "WorkflowApi");
       }
@@ -26749,6 +27052,10 @@ var init_workflow_api_service = __esm({
         this.credential = credential;
         this.agentId = agentId2;
       }
+      /** The same client and credential, bound to another agent's workflow tree (`Workflows.viewer` with `agentId`). */
+      forAgent(agentId2) {
+        return new _WorkflowApi(this.baseUrl, this.credential, agentId2);
+      }
       /** PRO-1434 (main sync): auth rides the renewable request credential — resolve a current bearer per call. */
       async auth() {
         return {
@@ -28000,7 +28307,20 @@ function buildSupervisionAgentsApi(call2) {
     secrets: /* @__PURE__ */ __name2((agentId2) => ({
       attach: /* @__PURE__ */ __name2((requestIds) => call2("secrets.attach", agentId2, {
         requestIds: copyList(requestIds)
-      }), "attach")
+      }), "attach"),
+      /**
+      * SW — write ONE secret row into `agentId`'s own Data: the row of `collection` whose `_pk` is `key`, replaced
+      * whole by `value` (flat: string / number / boolean / null fields), created when absent. Needs `act` and the
+      * collection in the grant's `secretWriteCollections`. Answers `{ ok, id, fingerprint }`, never the value; call it
+      * from code (a workflow step, a job), so the secret never passes through a model.
+      */
+      put: /* @__PURE__ */ __name2((collection, key, value3) => call2("secrets.put", agentId2, {
+        collection,
+        key,
+        value: value3 && typeof value3 === "object" && !Array.isArray(value3) ? {
+          ...value3
+        } : value3
+      }), "put")
     }), "secrets")
   };
 }
@@ -28065,6 +28385,7 @@ var offlineMetrics = {
 };
 
 // src/api-exports.ts
+init_shared_data_offline();
 init_connection_requests_api_service();
 init_decisions_api_service();
 init_decisions_api();
@@ -29161,6 +29482,7 @@ function createOfflineProgressApi() {
 __name(createOfflineProgressApi, "createOfflineProgressApi");
 
 // src/api-exports.ts
+init_shared_data_offline();
 var User = {
   /**
   * Retrieves user data by userId, email, or phone.
@@ -29414,6 +29736,31 @@ var Data = {
   async delete(collectionName, entryId) {
     const instance2 = await getDataInstance();
     return instance2.delete(collectionName, entryId);
+  },
+  /**
+  * An org-shared Data collection (namespace). An org admin creates it and names which agents of the org may read
+  * and which may write it (`POST /admin/orgs/:orgId/shared-collections`); agents never create one. The handle has
+  * the same methods as `Data`, scoped to the namespace, so a namespace can hold several collections:
+  *
+  * ```typescript
+  * const map = Data.shared('fleet_map');
+  * await map.create('repos', { repo: 'lua-core-services', tier: 1 }, { searchText: 'backend monorepo' }); // writers
+  * const { data } = await map.get('repos', { tier: 1 });                                                    // readers
+  * const hits = await map.search('edges', 'who calls lua-agents', 10);
+  * ```
+  *
+  * - Readers may `collections`, `get`, `getEntry`, `search`; writers may also `create`, `update`, `patch`,
+  *   `increment`, `delete` (a writer can read). Anything else rejects with `code === 'shared_data_forbidden'`
+  *   (403) — also when the name does not exist or belongs to another org.
+  * - Same limits, filters, managed indexes, compare-and-swap and vector search as `Data`. Every write is audited
+  *   (agent, collection, entry id; never the value).
+  * - A test session may read but not write (`shared_data_test_session_write_refused`, 409).
+  * - Deployed agents only: under `lua test` every call rejects with `code === 'shared_data_unavailable_offline'`.
+  *
+  * @param name - The shared collection name the org admin created (1-128 of `[A-Za-z0-9_.-]`)
+  */
+  shared(name) {
+    return offlineSharedData(name);
   }
 };
 var Products = {
@@ -30079,6 +30426,7 @@ export {
   Products,
   Progress,
   Secrets,
+  SharedDataError,
   Team,
   Templates,
   Threads,