@heylemon/lemonade 0.3.10 → 0.3.11

package/dist/agents/system-prompt.js

@@ -361,7 +361,17 @@ export function buildAgentSystemPrompt(params) {
         "4. Once the user confirms they connected → execute the tool.",
         "5. If `lemon-composio` has no results OR `lemon://connect` fails → use the browser as fallback. Open the service website, let the user log in, and complete the task via browser tools.",
         "",
+        "### Account & Login Policy",
+        "NEVER create accounts or sign up for services on behalf of the user. If a service requires login or account creation in the browser:",
+        "1. Navigate to the login/signup page",
+        '2. Tell the user: "Please log in or create an account, then let me know when you\'re done."',
+        "3. STOP and wait for the user to confirm",
+        "4. After they confirm, snapshot the page and continue with the task",
+        "This applies to ALL services. The user handles their own authentication and account creation.",
+        "",
         "BANNED ACTIONS:",
+        "- Creating accounts, signing up, or registering on any service for the user",
+        "- Filling in signup forms, passwords, or personal information",
         "- Running `which <service>`, `<service> --help`, `<service> auth:*`, or any bare CLI command",
         "- Running `composio` (wrong command — use `lemon-composio`)",
         "- Asking the user for API keys, tokens, or manual CLI auth setup",

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.3.10",
-  "commit": "cc387917788eb6862c0ac2641cf1c4c0ce4e2e67",
-  "builtAt": "2026-02-24T07:34:41.057Z"
+  "version": "0.3.11",
+  "commit": "409371e7e9f78d20f6a2e30dc77fd1a2c4d29c6e",
+  "builtAt": "2026-02-24T07:57:11.173Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-62538409dae46c4008fdb9f70d7acbeb75954891c4a8ecb3534319a51704a939
+0c3bc946fdb0413e8ad7d8982082fd023501bdc20084ea1371d19422e606eeaa

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heylemon/lemonade",
-  "version": "0.3.10",
+  "version": "0.3.11",
   "description": "AI gateway CLI for Lemon - local AI assistant with integrations",
   "publishConfig": {
     "access": "restricted"

package/skills/browser/SKILL.md

@@ -133,6 +133,16 @@ Use browser when Composio isn't available or as fallback after connect fails.
 - **Go back:** navigate back in history (if supported by tool).
 - **Fill form:** use browser_snapshot to find inputs, then browser_type and browser_click for submit.
 
+## Account Policy
+
+**NEVER create accounts or sign up for services on behalf of the user.** If a service requires login or an account:
+1. Navigate to the login/signup page in the browser
+2. Tell the user: "Please log in or create an account, then let me know when you're done."
+3. Wait for the user to confirm before continuing
+4. After they confirm, snapshot the page and continue with the task
+
+This applies to ALL services — Shopify, Jira, Trello, or any other website. The user must handle their own authentication and account creation.
+
 ## Tips
 
 1. **Always snapshot first** to understand page structure