@heylemon/lemonade 0.3.9 → 0.3.11

package/dist/agents/system-prompt.js

@@ -348,6 +348,12 @@ export function buildAgentSystemPrompt(params) {
         "Dedicated `lemon-*` CLIs (the COMPLETE list): lemon-gmail, lemon-calendar, lemon-drive, lemon-docs, lemon-sheets, lemon-slides, lemon-notion, lemon-slack, lemon-youtube, lemon-twitter, lemon-composio.",
         "ANYTHING not in this list → use `lemon-composio search`.",
         "",
+        "### Connect-only requests",
+        'When the user says "connect to [service]", "link my [service]", "set up [service]", or similar — do NOT list capabilities. Immediately output the connect URL as plain text: lemon://connect?provider=SERVICE_ID',
+        "For site-based services (Jira, Trello, Asana, Confluence), ask for their workspace/subdomain or use the browser to discover it, then output: lemon://connect?provider=jira&subdomain=THEIR_SUBDOMAIN",
+        "Provider IDs: gmail, slack, googlecalendar, googledrive, notion, youtube, jira, github, linear, trello, asana, etc.",
+        "",
+        "### Task requests (do something WITH a service)",
         "When the user mentions ANY service not in the dedicated CLI list, follow this EXACT sequence:",
         '1. Run `lemon-composio search "<what the user wants>"` — this is your FIRST action. No web search. No `which`. No `--help`. No questions.',
         "2. If result shows `connected: true` → execute the tool immediately with `lemon-composio execute`.",
@@ -355,7 +361,17 @@ export function buildAgentSystemPrompt(params) {
         "4. Once the user confirms they connected → execute the tool.",
         "5. If `lemon-composio` has no results OR `lemon://connect` fails → use the browser as fallback. Open the service website, let the user log in, and complete the task via browser tools.",
         "",
+        "### Account & Login Policy",
+        "NEVER create accounts or sign up for services on behalf of the user. If a service requires login or account creation in the browser:",
+        "1. Navigate to the login/signup page",
+        '2. Tell the user: "Please log in or create an account, then let me know when you\'re done."',
+        "3. STOP and wait for the user to confirm",
+        "4. After they confirm, snapshot the page and continue with the task",
+        "This applies to ALL services. The user handles their own authentication and account creation.",
+        "",
         "BANNED ACTIONS:",
+        "- Creating accounts, signing up, or registering on any service for the user",
+        "- Filling in signup forms, passwords, or personal information",
         "- Running `which <service>`, `<service> --help`, `<service> auth:*`, or any bare CLI command",
         "- Running `composio` (wrong command — use `lemon-composio`)",
         "- Asking the user for API keys, tokens, or manual CLI auth setup",

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.3.9",
-  "commit": "5cac460cc26a2e2191cd99f547ec1a5ca39c165e",
-  "builtAt": "2026-02-24T07:20:06.640Z"
+  "version": "0.3.11",
+  "commit": "409371e7e9f78d20f6a2e30dc77fd1a2c4d29c6e",
+  "builtAt": "2026-02-24T07:57:11.173Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-1124e548468e873a3512344bc8743e972391d1ba82c1bb40ec9dc7e67b84065c
+0c3bc946fdb0413e8ad7d8982082fd023501bdc20084ea1371d19422e606eeaa

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heylemon/lemonade",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "AI gateway CLI for Lemon - local AI assistant with integrations",
   "publishConfig": {
     "access": "restricted"

package/skills/browser/SKILL.md

@@ -133,6 +133,16 @@ Use browser when Composio isn't available or as fallback after connect fails.
 - **Go back:** navigate back in history (if supported by tool).
 - **Fill form:** use browser_snapshot to find inputs, then browser_type and browser_click for submit.
 
+## Account Policy
+
+**NEVER create accounts or sign up for services on behalf of the user.** If a service requires login or an account:
+1. Navigate to the login/signup page in the browser
+2. Tell the user: "Please log in or create an account, then let me know when you're done."
+3. Wait for the user to confirm before continuing
+4. After they confirm, snapshot the page and continue with the task
+
+This applies to ALL services — Shopify, Jira, Trello, or any other website. The user must handle their own authentication and account creation.
+
 ## Tips
 
 1. **Always snapshot first** to understand page structure

package/skills/integrations/SKILL.md

@@ -17,6 +17,8 @@ when you connect services in Lemon Settings > Integrations.
 - lemon://connect?provider=googlecalendar
 - lemon://connect?provider=jira&subdomain=myteam
 
+**When the user asks to "connect", "link", or "set up" a service:** Do NOT list capabilities or describe what you can do. Immediately output the connect URL as plain text. For site-based services (Jira, Trello, Asana), ask for or discover the subdomain first.
+
 Provider IDs: gmail, slack, googlecalendar, googledrive, notion, youtube, jira, github, linear, trello, asana, etc.
 
 The generated skills are placed in `~/.lemonade/skills/` and include: