lua-cli 3.49.1 → 3.50.0

package/dist/workflow-builder.js

@@ -1184,9 +1184,40 @@ function aiGenerateInputFromSimplified(prompt, content) {
 __name(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
 __name4(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
 var DECISION_PROVIDERS = [
+  "jev",
+  "openai",
+  "openrouter"
+];
+var DECISION_FALLBACK_PROVIDERS = [
   "jev",
   "openai"
 ];
+var OPENROUTER_DIRECT_VENDORS = [
+  {
+    pattern: /^~?typesafe\//,
+    provider: "jev"
+  },
+  {
+    pattern: /^openai\//,
+    provider: "openai"
+  }
+];
+function directProviderOfOpenRouterModel(model) {
+  return OPENROUTER_DIRECT_VENDORS.find((vendor) => vendor.pattern.test(model))?.provider;
+}
+__name(directProviderOfOpenRouterModel, "directProviderOfOpenRouterModel");
+__name4(directProviderOfOpenRouterModel, "directProviderOfOpenRouterModel");
+var OPENROUTER_NEEDS_MODEL_MESSAGE = "provider openrouter needs a model id, such as liquid/d1";
+function openRouterModelIssue(options) {
+  const model = typeof options.model === "string" && options.model ? options.model : void 0;
+  if (options.provider === "openrouter" && !model) return OPENROUTER_NEEDS_MODEL_MESSAGE;
+  if (!model || !model.includes("/")) return null;
+  const direct = directProviderOfOpenRouterModel(model);
+  if (!direct) return null;
+  return `model ${model} runs on provider '${direct}': set provider '${direct}' instead of a vendor/model id`;
+}
+__name(openRouterModelIssue, "openRouterModelIssue");
+__name4(openRouterModelIssue, "openRouterModelIssue");
 var DECISION_NAME_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
 var DECISION_SANDBOX_TOOL_SEPARATOR = "#";
 function formatDecisionSandboxPrimitive(name, tool) {
@@ -1270,7 +1301,7 @@ var DecisionOptionsSchema = z.object({
   ]).optional(),
   model: z.string().min(1).optional(),
   fallback: z.union([
-    z.enum(DECISION_PROVIDERS),
+    z.enum(DECISION_FALLBACK_PROVIDERS),
     z.literal("none")
   ]).optional(),
   region: z.literal("eu").optional(),
@@ -1299,6 +1330,16 @@ var DecisionDefinitionSchema = DecisionOptionsSchema.extend({
   description: z.string().max(DECISION_LIMITS.maxInstructionChars).optional(),
   questions: DecisionQuestionsSchema
 }).strict();
+var DecisionDefinitionWriteSchema = DecisionDefinitionSchema.superRefine((definition, ctx) => {
+  const issue = openRouterModelIssue(definition);
+  if (issue) ctx.addIssue({
+    code: z.ZodIssueCode.custom,
+    path: [
+      "model"
+    ],
+    message: issue
+  });
+});
 var INTEGRATION_PASSTHROUGH_READ_METHODS = [
   "GET",
   "HEAD"
@@ -1666,7 +1707,14 @@ var SUPERVISION_OPS = {
   * the target (`snapshot.jobs[]`) so the promote activates and schedules it. Mongo-only marker write; EventBridge stays
   * on the post-promote reconcile. Release-class: needs `register-job` AND `release` on the grant, from a signed step.
   */
-  "jobs.register": "register-job"
+  "jobs.register": "register-job",
+  // [SW]
+  /**
+  * SW — `Agents.secrets(id).put(collection, key, value)`: write ONE secret row into the TARGET's own Data, in a
+  * collection the grant names in `secretWriteCollections` (deny by default), keyed by `data._pk`. The value never
+  * comes back: the answer is `{ ok, id, fingerprint }`, and the audit row carries the fingerprint only.
+  */
+  "secrets.put": "act"
 };
 function isSupervisionOp(op) {
   return typeof op === "string" && Object.prototype.hasOwnProperty.call(SUPERVISION_OPS, op);
@@ -1865,6 +1913,12 @@ var SUPERVISION_OPS_WAVE2 = {
     gate: "register-job",
     targeted: true,
     item: "JR"
+  },
+  /** SW — `Agents.secrets(id).put(collection, key, value)`: one secret row in a `secretWriteCollections` collection. */
+  "secrets.put": {
+    gate: "act",
+    targeted: true,
+    item: "SW"
   }
 };
 var SUPERVISION_WATCHDOG_OPS = {
@@ -4032,6 +4086,12 @@ var SECRET_LITERAL_PATTERNS = [
   {
     re: /\b(npm_)[A-Za-z0-9]{36}\b/g
   },
+  // Linear personal API keys (`lin_api_` + 40) and OAuth access / refresh tokens (`lin_oauth_` + 64 hex,
+  // `lin_refresh_`): the fleet's Engineering Manager hands OAuth tokens to agents in a prompt + tool call, and
+  // both landed verbatim in `vmExecutionLogs` (2026-10-11).
+  {
+    re: /\b(lin_(?:api|oauth|refresh)_)[A-Za-z0-9]{16,}/g
+  },
   {
     re: /\b(sk-ant-)[A-Za-z0-9_-]{16,}/g
   },
@@ -4050,11 +4110,16 @@ var SECRET_LITERAL_PATTERNS = [
   {
     re: /\b(ya29\.)[A-Za-z0-9_-]{20,}/g
   },
+  // 2026-10-11: `(?<![A-Za-z0-9_-])`, not `\b` — with `\b` every `eyJ` after a `-` / `_` started an attempt that
+  // ran the first segment to the end of the run and failed on the missing `.`, so `eyJabcdefgh-` × 1 MB took
+  // ~115 s (quadratic). Now a run of segment characters admits at most one attempt.
   {
-    re: /\b(eyJ)[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g
+    re: /(?<![A-Za-z0-9_-])(eyJ)[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g
   },
+  // 2026-10-11: the body stops at the next `-----BEGIN ` — a lazy `[\s\S]*?` let every unterminated BEGIN scan to the
+  // end of the text (quadratic on a repeated header with no END). A key whose END follows is matched as before.
   {
-    re: /(-----BEGIN [A-Z ]*PRIVATE KEY-----)[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g
+    re: /(-----BEGIN [A-Z ]*PRIVATE KEY-----)(?:(?!-----BEGIN )[\s\S])*?-----END [A-Z ]*PRIVATE KEY-----/g
   },
   // `https://x-access-token:<token>@github.com/…` (the git credential shape the pod scrubbed already)
   {
@@ -4062,7 +4127,7 @@ var SECRET_LITERAL_PATTERNS = [
     suffix: true
   }
 ];
-var SECRET_NAME = "(?:authorization|proxy-authorization|x-api-key|x-wf-[a-z-]*key|x-internal-auth|api[_-]?key|apikey|access[_-]?key|secret[_-]?key|private[_-]?key|client[_-]?secret|secret|password|passwd|pwd|passphrase|token|credentials?)";
+var SECRET_NAME = "(?:access[_-]?token|refresh[_-]?token|id[_-]?token|auth[_-]?token|authorization|proxy-authorization|x-api-key|x-wf-[a-z-]*key|x-internal-auth|api[_-]?key|apikey|access[_-]?key|secret[_-]?key|private[_-]?key|client[_-]?secret|secret|password|passwd|pwd|passphrase|token|credentials?)";
 var SECRET_PAIR_PATTERNS = [
   // `Authorization: Bearer x`, `x-api-key: x`, `AWS_SECRET_ACCESS_KEY=x`, `SVC_JOB_KEY=x`, `"apiKey": "x"`,
   // `FOO_TOKEN=x`, `secretKey=x`, `password=x`. Groups: the char before the name, the name, the separator
@@ -4221,6 +4286,38 @@ function scrubStepErrorMessage(raw) {
 }
 __name(scrubStepErrorMessage, "scrubStepErrorMessage");
 __name4(scrubStepErrorMessage, "scrubStepErrorMessage");
+var SCRUB_DEEP_MAX_DEPTH = 12;
+function scrubSecretsDeep(value3, options = {}) {
+  return scrubDeep(value3, 0, /* @__PURE__ */ new WeakSet(), options.text !== false);
+}
+__name(scrubSecretsDeep, "scrubSecretsDeep");
+__name4(scrubSecretsDeep, "scrubSecretsDeep");
+function isPlainObject2(v) {
+  if (!v || typeof v !== "object") return false;
+  const proto = Object.getPrototypeOf(v);
+  return proto === Object.prototype || proto === null;
+}
+__name(isPlainObject2, "isPlainObject2");
+__name4(isPlainObject2, "isPlainObject");
+function scrubDeep(value3, depth, seen, text2) {
+  if (typeof value3 === "string") return text2 ? scrubSecretText(value3) : value3;
+  if (!value3 || typeof value3 !== "object") return value3;
+  if (!Array.isArray(value3) && !isPlainObject2(value3)) return value3;
+  if (depth >= SCRUB_DEEP_MAX_DEPTH || seen.has(value3)) return REDACTED_PLACEHOLDER;
+  seen.add(value3);
+  try {
+    if (Array.isArray(value3)) return value3.map((v) => scrubDeep(v, depth + 1, seen, text2));
+    const out = {};
+    for (const [k, v] of Object.entries(value3)) {
+      out[k] = isWorkflowSecretKey(k) && v !== null && v !== void 0 && typeof v !== "boolean" ? REDACTED_PLACEHOLDER : scrubDeep(v, depth + 1, seen, text2);
+    }
+    return out;
+  } finally {
+    seen.delete(value3);
+  }
+}
+__name(scrubDeep, "scrubDeep");
+__name4(scrubDeep, "scrubDeep");
 var TEST_SESSION_ID_PATTERN = /^tsn_[0-9a-f-]{36}$/;
 function isTestSessionId(value3) {
   return typeof value3 === "string" && TEST_SESSION_ID_PATTERN.test(value3);
@@ -4396,6 +4493,89 @@ function supervisionAccessBindingViolation(merged) {
 }
 __name(supervisionAccessBindingViolation, "supervisionAccessBindingViolation");
 __name4(supervisionAccessBindingViolation, "supervisionAccessBindingViolation");
+var SUPERVISED_SECRET_LIMITS = {
+  /** Fields in `value` (the `_pk` field included). */
+  maxFields: 32,
+  /** One string field's length. */
+  maxStringLength: 8192,
+  /** The canonical JSON of the whole row. */
+  maxBytes: 16384
+};
+var SUPERVISED_SECRET_NAME_RE = /^[A-Za-z0-9_.:-]{1,128}$/;
+var SUPERVISED_SECRET_FIELD_RE = /^[A-Za-z_][A-Za-z0-9_]{0,63}$/;
+var SUPERVISED_SECRET_KEY_FIELD = "_pk";
+var SUPERVISED_SECRET_ERRORS = {
+  BAD_ARGS: "supervision_secret_bad_args",
+  NOT_GRANTED: "supervision_secret_write_not_granted",
+  /** A collection named for secret writes is write-only for the supervisor: `data.get` / `data.query` refuse it. */
+  WRITE_ONLY: "supervision_secret_collection_write_only"
+};
+function canonicalSupervisedSecretJson(row) {
+  const sorted = {};
+  for (const k of Object.keys(row).sort()) sorted[k] = row[k];
+  return JSON.stringify(sorted);
+}
+__name(canonicalSupervisedSecretJson, "canonicalSupervisedSecretJson");
+__name4(canonicalSupervisedSecretJson, "canonicalSupervisedSecretJson");
+function validateSupervisedSecretPut(args) {
+  const bad = /* @__PURE__ */ __name4((message) => ({
+    ok: false,
+    code: SUPERVISED_SECRET_ERRORS.BAD_ARGS,
+    message
+  }), "bad");
+  const collection = args?.collection;
+  if (typeof collection !== "string" || !SUPERVISED_SECRET_NAME_RE.test(collection) || collection.startsWith("__")) {
+    return bad("collection must be an explicit collection name (letters, digits, _ . : -; at most 128)");
+  }
+  const key = args?.key;
+  if (typeof key !== "string" || !SUPERVISED_SECRET_NAME_RE.test(key)) {
+    return bad("key must be an explicit row key (letters, digits, _ . : -; at most 128)");
+  }
+  const value3 = args?.value;
+  if (!value3 || typeof value3 !== "object" || Array.isArray(value3) || Object.getPrototypeOf(value3) !== Object.prototype) {
+    return bad("value must be a plain object of scalar fields");
+  }
+  const fields = Object.keys(value3);
+  const row = {};
+  for (const field of fields) {
+    if (!SUPERVISED_SECRET_FIELD_RE.test(field)) {
+      return bad("value field names must be plain identifiers (no $ prefix, no dots; at most 64 characters)");
+    }
+    const v = value3[field];
+    if (typeof v === "string") {
+      if (v.length > SUPERVISED_SECRET_LIMITS.maxStringLength) {
+        return bad(`value.${field} is longer than ${SUPERVISED_SECRET_LIMITS.maxStringLength} characters`);
+      }
+    } else if (typeof v === "number") {
+      if (!Number.isFinite(v)) return bad(`value.${field} must be a finite number`);
+    } else if (typeof v !== "boolean" && v !== null) {
+      return bad(`value.${field} must be a string, a finite number, a boolean or null (no nesting)`);
+    }
+    row[field] = v;
+  }
+  if (Object.prototype.hasOwnProperty.call(row, SUPERVISED_SECRET_KEY_FIELD) && row[SUPERVISED_SECRET_KEY_FIELD] !== key) {
+    return bad(`value.${SUPERVISED_SECRET_KEY_FIELD}, when present, must equal key`);
+  }
+  row[SUPERVISED_SECRET_KEY_FIELD] = key;
+  if (Object.keys(row).length > SUPERVISED_SECRET_LIMITS.maxFields) {
+    return bad(`value has more than ${SUPERVISED_SECRET_LIMITS.maxFields} fields`);
+  }
+  if (Object.keys(row).length < 2) return bad("value must carry at least one field besides _pk");
+  const bytes = new TextEncoder().encode(canonicalSupervisedSecretJson(row)).byteLength;
+  if (bytes > SUPERVISED_SECRET_LIMITS.maxBytes) {
+    return bad(`value is larger than ${SUPERVISED_SECRET_LIMITS.maxBytes} bytes`);
+  }
+  return {
+    ok: true,
+    input: {
+      collection,
+      key,
+      row
+    }
+  };
+}
+__name(validateSupervisedSecretPut, "validateSupervisedSecretPut");
+__name4(validateSupervisedSecretPut, "validateSupervisedSecretPut");
 var CONNECTION_HANDOVER_APPROVAL_PAYLOAD_KEY = "connectionAssignment";
 var CONNECTION_HANDOVER_APPROVAL_CARD_MAX_CHARS = 1200;
 var CONNECTION_HANDOVER_LIMITS = {
@@ -6738,7 +6918,7 @@ var BROWSER_COMMANDS = [
   },
   {
     name: "find",
-    description: "Act by semantic locator. Args: by(role|text|label|placeholder|alt|title|testid), query, action(click|fill|type|hover|focus|check|uncheck|text), value?, name?, exact?."
+    description: "Act by semantic locator. Args: by(role|text|label|placeholder|alt|title|testid), query, action(click|fill|hover|check|text), value?, name?, exact?."
   },
   // AI fallbacks
   {
@@ -6752,7 +6932,7 @@ var BROWSER_COMMANDS = [
   // wait
   {
     name: "wait",
-    description: "Wait for a condition. Provide one of: selector(+state), ms, text, url, load, fn."
+    description: "Wait for a condition. Provide one of: selector (waits until it is visible), ms, text, url, load, fn."
   },
   // tabs / frames
   {
@@ -6787,7 +6967,7 @@ var BROWSER_COMMANDS = [
   },
   {
     name: "set",
-    description: "Configure the browser. Args: setting(viewport|device|geo|headers|credentials|media), args[]."
+    description: "Configure the browser. Args: setting(viewport|device|geo|headers|credentials|media|offline), args[]."
   },
   // files / clipboard
   {
@@ -6831,7 +7011,7 @@ var BROWSER_COMMANDS = [
   },
   {
     name: "keyboard",
-    description: "Low-level keyboard at focus. Args: action(type|inserttext|keydown|keyup), text?, key?."
+    description: "Low-level keyboard at focus. Args: action(type|inserttext), text. Use press for single keys and chords."
   },
   {
     name: "state",
@@ -7508,7 +7688,11 @@ var BROWSER_SESSION_CLOSE_REASONS = [
   "max-steps",
   "cost-cap",
   "error",
-  "reaped"
+  "reaped",
+  "cancelled",
+  "confirmation",
+  "blocked",
+  "stopped"
 ];
 var BROWSER_LOG_CONTEXT_KEYS = [
   "runId",
@@ -7525,9 +7709,9 @@ var BROWSER_LOG_TEXT_MAX_CHARS = 64 * 1024;
 var isString = /* @__PURE__ */ __name4((value3) => typeof value3 === "string", "isString");
 var isBoolean = /* @__PURE__ */ __name4((value3) => typeof value3 === "boolean", "isBoolean");
 var isCount = /* @__PURE__ */ __name4((value3) => typeof value3 === "number" && Number.isFinite(value3) && value3 >= 0, "isCount");
-var isPlainObject2 = /* @__PURE__ */ __name4((value3) => typeof value3 === "object" && value3 !== null && !Array.isArray(value3), "isPlainObject");
+var isPlainObject3 = /* @__PURE__ */ __name4((value3) => typeof value3 === "object" && value3 !== null && !Array.isArray(value3), "isPlainObject");
 var oneOf = /* @__PURE__ */ __name4((values) => (value3) => typeof value3 === "string" && values.includes(value3), "oneOf");
-var isLimits = /* @__PURE__ */ __name4((value3) => isPlainObject2(value3) && Object.values(value3).every((entry) => isCount(entry)), "isLimits");
+var isLimits = /* @__PURE__ */ __name4((value3) => isPlainObject3(value3) && Object.values(value3).every((entry) => isCount(entry)), "isLimits");
 var EVENT_SHAPES = {
   "session.opened": {
     required: {
@@ -7536,7 +7720,8 @@ var EVENT_SHAPES = {
     optional: {
       limits: isLimits,
       region: isString,
-      liveUrl: isString
+      liveUrl: isString,
+      browser: isString
     }
   },
   command: {
@@ -7546,7 +7731,7 @@ var EVENT_SHAPES = {
       ok: isBoolean
     },
     optional: {
-      args: isPlainObject2,
+      args: isPlainObject3,
       urlBefore: isString,
       urlAfter: isString,
       resultBytes: isCount,
@@ -7651,7 +7836,7 @@ function describeFieldViolation(key, value3, check) {
 __name(describeFieldViolation, "describeFieldViolation");
 __name4(describeFieldViolation, "describeFieldViolation");
 function describeBrowserLogEventViolation(value3) {
-  if (!isPlainObject2(value3)) return "event must be an object";
+  if (!isPlainObject3(value3)) return "event must be an object";
   const event = value3;
   const base = describeBaseViolation(event);
   if (base) return base;
@@ -7675,7 +7860,7 @@ __name(isBrowserLogEvent, "isBrowserLogEvent");
 __name4(isBrowserLogEvent, "isBrowserLogEvent");
 function describeBrowserLogContextViolation(value3) {
   if (value3 === void 0) return void 0;
-  if (!isPlainObject2(value3)) return "logContext must be an object";
+  if (!isPlainObject3(value3)) return "logContext must be an object";
   for (const [key, entry] of Object.entries(value3)) {
     if (!BROWSER_LOG_CONTEXT_KEYS.includes(key)) return `logContext.${key} is not allowed`;
     if (entry === void 0) continue;
@@ -7706,6 +7891,10 @@ function browserLogContextOfWorkerContext(context) {
   if (context?.primitiveId) out.primitiveId = context.primitiveId;
   if (context?.primitiveName) out.primitiveName = context.primitiveName;
   if (context?.channel) out.channel = context.channel;
+  if (context?.environment && AGENT_LOG_ENVIRONMENTS.includes(context.environment)) {
+    out.environment = context.environment;
+  }
+  if (context?.agentVersion) out.agentVersion = context.agentVersion;
   return out;
 }
 __name(browserLogContextOfWorkerContext, "browserLogContextOfWorkerContext");
@@ -13299,6 +13488,17 @@ function maskMcpServerHeaders(server) {
 }
 __name(maskMcpServerHeaders, "maskMcpServerHeaders");
 __name4(maskMcpServerHeaders, "maskMcpServerHeaders");
+var SHARED_DATA_OWNER_PREFIX = "shared:";
+function sharedDataOwnerKey(collectionId) {
+  return `${SHARED_DATA_OWNER_PREFIX}${collectionId}`;
+}
+__name(sharedDataOwnerKey, "sharedDataOwnerKey");
+__name4(sharedDataOwnerKey, "sharedDataOwnerKey");
+function isSharedDataOwnerKey(agentId2) {
+  return typeof agentId2 === "string" && agentId2.startsWith(SHARED_DATA_OWNER_PREFIX);
+}
+__name(isSharedDataOwnerKey, "isSharedDataOwnerKey");
+__name4(isSharedDataOwnerKey, "isSharedDataOwnerKey");
 
 // ../workflow-graph/dist/index.mjs
 import { createHash } from "crypto";
@@ -15948,11 +16148,11 @@ function isConditionalJoinId(stepId) {
 }
 __name(isConditionalJoinId, "isConditionalJoinId");
 __name5(isConditionalJoinId, "isConditionalJoinId");
-function isPlainObject3(v) {
+function isPlainObject4(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
-__name(isPlainObject3, "isPlainObject");
-__name5(isPlainObject3, "isPlainObject");
+__name(isPlainObject4, "isPlainObject");
+__name5(isPlainObject4, "isPlainObject");
 function leafValue(row) {
   if (row.status === "completed") return row.output === void 0 ? null : row.output;
   return continuedFailureValue(row.error, row.killReason);
@@ -15975,7 +16175,7 @@ function deriveRunOutput(steps) {
   if (leaves.length === 1) {
     const leaf = leaves[0];
     const value22 = leafValue(leaf);
-    if (isConditionalJoinId(leaf.stepId) && isPlainObject3(value22)) {
+    if (isConditionalJoinId(leaf.stepId) && isPlainObject4(value22)) {
       const keys = Object.keys(value22);
       if (keys.length === 1) return {
         output: value22[keys[0]],