@lunora/agent 1.0.0-alpha.8 → 1.0.0-alpha.81

package/dist/sandbox.d.ts

@@ -1,4 +1,4 @@
-import { a as AgentToolContext, b as AgentToolDefinition } from "./packem_shared/types.d-boAM2Yi1.js";
+import { b as AgentToolContext, c as AgentToolDefinition } from "./packem_shared/types.d-DTKxPuh_.js";
 import '@lunora/mail/inbound';
 import 'ai';
 /**
@@ -25,8 +25,8 @@ type BrowserToolInput = {
 /**
  * The model-provided input to a {@link containerTool} call — a discriminated
  * union on `op`. `fetch` sends an HTTP request to the container; `exec` asks it
- * to run a command (routed as a POST to `/exec`, since the container surface
- * exposes no first-class exec RPC — the container app must serve that route).
+ * to run a command (delegated to `ctx.containers.<name>.exec`, the first-class
+ * exec contract in `@lunora/container`; the container app serves its route).
  * @experimental
  */
 type ContainerToolInput = {
@@ -112,12 +112,13 @@ interface ContainerToolOptions {
   description?: string;
   /**
    * Gate a call behind a human approval. Defaults to gating any command
-   * execution: an `exec`, AND a `fetch` whose path resolves to the privileged
-   * `/exec` route (both reach the same command-execution path in the container,
-   * so gating on the `op` name alone would let a `fetch` to `/exec` run a
-   * command unattended). A plain `fetch` to any other route runs unattended.
-   * Pass a boolean or your own predicate to change that. Evaluated from
-   * replay-stable input, so keep it deterministic.
+   * execution — an `exec` — plus any `fetch` using a non-idempotent method
+   * (POST/PUT/PATCH/DELETE), so a prompt-injected model cannot reach some
+   * other mutating route unattended. A read-only `fetch` runs unattended. The
+   * exec route itself needs no special case: `@lunora/container` reserves
+   * `/__lunora/*` and refuses a `fetch` into it. Pass a boolean or your own
+   * predicate to change that. Evaluated from replay-stable input, so keep it
+   * deterministic.
    */
   needsApproval?: ((input: ContainerToolInput) => boolean) | boolean;
 }
@@ -149,19 +150,19 @@ interface ContainerToolOptions {
 declare const browserTool: (options?: BrowserToolOptions) => AgentToolDefinition<BrowserToolInput, string>;
 /**
  * A batteries-included agent tool that talks to a declared Cloudflare
- * Container. `name` is the `ctx.containers.&lt;name>` key (the `lunora/containers.ts`
+ * Container. `name` is the `ctx.containers.<name>` key (the `lunora/containers.ts`
  * export). One tool exposes `fetch` (HTTP request) and `exec` (run a command);
  * the model picks via `op`. The call dispatches to the auto-registered
  * `sandbox:invoke` action, which carries `ctx.containers`.
  *
  * By default a read-only (GET/HEAD/OPTIONS, or method-omitted) `fetch` runs
  * unattended while everything else is gated behind a human approval — an
- * `exec`; a `fetch` whose path resolves to the privileged `/exec` route (both
+ * `exec`; a `fetch` whose path resolves to the privileged exec route (both
  * reach the same command-execution path in the container, so gating on the
- * `op` name alone would let a `fetch` to `/exec` run a command unattended);
+ * `op` name alone would let a `fetch` to it run a command unattended);
  * and a `fetch` using a non-idempotent method (POST/PUT/PATCH/DELETE) to ANY
  * route, since a prompt-injected model could otherwise mutate container state
- * through some other privileged route just by avoiding the literal `/exec`
+ * through some other privileged route just by avoiding the literal exec
  * path. A `fetch` can still reach any *other read* route unattended, so scope
  * the container's GET routes accordingly. Pass `opts.needsApproval` to widen
  * or disable the gate.

package/dist/sandbox.mjs

@@ -1,113 +1 @@
-import { LunoraError } from '@lunora/errors';
-import { jsonSchema } from 'ai';
-import { toFunctionReference, SANDBOX_INVOKE_PATH } from './packem_shared/AGENT_MODULE-Dnt_-AAT.mjs';
-
-const SANDBOX_REF = toFunctionReference(SANDBOX_INVOKE_PATH);
-const DEFAULT_BROWSER_DESCRIPTION = 'Drive a headless browser: screenshot a page, render it to PDF, read its HTML content, or scrape it. Set `op` to "screenshot" | "pdf" | "content" | "scrape" and pass the target `url`.';
-const DEFAULT_CONTAINER_DESCRIPTION = 'Talk to a sandboxed container: `fetch` an HTTP path on it, or `exec` a command inside it. Set `op` to "fetch" (with `path`) or "exec" (with `command`).';
-const DEFAULT_FS_DESCRIPTION = 'Read and write files in a persistent sandbox filesystem. Set `op` to "ls" (list a directory), "read", "write" (with `content`), "rm", or "stat", and pass `path`.';
-const defaultFsGate = (input) => input.op === "write" || input.op === "rm";
-const FS_TOOL_SCHEMA = jsonSchema({
-  properties: {
-    content: { description: "write: the file contents.", type: "string" },
-    op: { description: "The filesystem operation to run.", enum: ["ls", "read", "write", "rm", "stat"], type: "string" },
-    path: { description: "The file or directory path, relative to the sandbox root.", type: "string" }
-  },
-  required: ["op"],
-  type: "object"
-});
-const BROWSER_TOOL_SCHEMA = jsonSchema({
-  properties: {
-    fullPage: { description: "screenshot: capture the full scrollable page rather than just the viewport.", type: "boolean" },
-    op: { description: "The browser operation to run.", enum: ["screenshot", "scrape", "pdf", "content"], type: "string" },
-    selector: { description: "scrape: optional CSS selector hint to narrow the extraction.", type: "string" },
-    type: { description: "screenshot: image encoding (default png).", enum: ["png", "jpeg"], type: "string" },
-    url: { description: "The URL to operate on.", type: "string" }
-  },
-  required: ["op", "url"],
-  type: "object"
-});
-const CONTAINER_EXEC_ROUTE = "/exec";
-const CONTAINER_PATH_QUERY_SPLIT = /[?#]/u;
-const normalizeContainerPath = (path) => {
-  const [raw = ""] = (path ?? "").split(CONTAINER_PATH_QUERY_SPLIT);
-  const segments = [];
-  for (const segment of raw.split("/")) {
-    if (segment === "" || segment === ".") {
-      continue;
-    }
-    if (segment === "..") {
-      segments.pop();
-      continue;
-    }
-    segments.push(segment);
-  }
-  return `/${segments.join("/")}`;
-};
-const NON_IDEMPOTENT_METHODS = /* @__PURE__ */ new Set(["DELETE", "PATCH", "POST", "PUT"]);
-const defaultContainerGate = (input) => {
-  if (input.op === "exec") {
-    return true;
-  }
-  if (normalizeContainerPath(input.path) === CONTAINER_EXEC_ROUTE) {
-    return true;
-  }
-  return NON_IDEMPOTENT_METHODS.has((input.method ?? "GET").toUpperCase());
-};
-const CONTAINER_TOOL_SCHEMA = jsonSchema({
-  properties: {
-    args: { description: "exec: command arguments.", items: { type: "string" }, type: "array" },
-    body: { description: "fetch: request body.", type: "string" },
-    command: { description: "exec: the command to run.", type: "string" },
-    method: { description: "fetch: HTTP method (default GET).", type: "string" },
-    op: { description: "The container operation to run.", enum: ["fetch", "exec"], type: "string" },
-    path: { description: "fetch: request path on the container (e.g. /health).", type: "string" }
-  },
-  required: ["op"],
-  type: "object"
-});
-const browserTool = (options = {}) => {
-  return {
-    description: options.description ?? DEFAULT_BROWSER_DESCRIPTION,
-    // Pin `kind` LAST so out-of-schema model input can never override it.
-    execute: (input, context) => context.run(SANDBOX_REF, { ...input, kind: "browser" }),
-    inputSchema: BROWSER_TOOL_SCHEMA,
-    isLunoraAgentTool: true,
-    ...options.needsApproval === void 0 ? {} : { needsApproval: options.needsApproval }
-  };
-};
-const containerTool = (name, options = {}) => {
-  if (typeof name !== "string" || name.length === 0) {
-    throw new LunoraError("INTERNAL", "@lunora/agent: containerTool requires a container `name` (the ctx.containers.<name> key from lunora/containers.ts)");
-  }
-  const needsApproval = options.needsApproval ?? defaultContainerGate;
-  return {
-    description: options.description ?? DEFAULT_CONTAINER_DESCRIPTION,
-    // Pin `kind`/`name` LAST so out-of-schema model input can never override
-    // the authoritative container the author pinned.
-    execute: (input, context) => context.run(SANDBOX_REF, { ...input, kind: "container", name }),
-    inputSchema: CONTAINER_TOOL_SCHEMA,
-    isLunoraAgentTool: true,
-    needsApproval
-  };
-};
-const fsTool = (bucket, options = {}) => {
-  if (typeof bucket !== "string" || bucket.length === 0) {
-    throw new LunoraError("INTERNAL", "@lunora/agent: fsTool requires an R2 `bucket` binding name (the r2_bucket declared in wrangler.jsonc)");
-  }
-  return {
-    description: options.description ?? DEFAULT_FS_DESCRIPTION,
-    // Pin kind/bucket/root LAST so out-of-schema model input can never override
-    // the authoritative bucket + sandbox root the author pinned. `root` may be
-    // a function of the ctx (per-run/owner isolation), resolved here.
-    execute: (input, context) => {
-      const root = typeof options.root === "function" ? options.root(context) : options.root ?? "";
-      return context.run(SANDBOX_REF, { ...input, bucket, kind: "fs", root });
-    },
-    inputSchema: FS_TOOL_SCHEMA,
-    isLunoraAgentTool: true,
-    needsApproval: options.needsApproval ?? defaultFsGate
-  };
-};
-
-export { browserTool, containerTool, fsTool };
+import{LunoraError as a}from"@lunora/errors";import{jsonSchema as i}from"ai";import{toFunctionReference as p,SANDBOX_INVOKE_PATH as c}from"./packem_shared/AGENT_MODULE-M4D1EejI.mjs";const s=p(c),d='Drive a headless browser: screenshot a page, render it to PDF, read its HTML content, or scrape it. Set `op` to "screenshot" | "pdf" | "content" | "scrape" and pass the target `url`.',h='Talk to a sandboxed container: `fetch` an HTTP path on it, or `exec` a command inside it. Set `op` to "fetch" (with `path`) or "exec" (with `command`).',l='Read and write files in a persistent sandbox filesystem. Set `op` to "ls" (list a directory), "read", "write" (with `content`), "rm", or "stat", and pass `path`.',u=e=>e.op==="write"||e.op==="rm",T=i({properties:{content:{description:"write: the file contents.",type:"string"},op:{description:"The filesystem operation to run.",enum:["ls","read","write","rm","stat"],type:"string"},path:{description:"The file or directory path, relative to the sandbox root.",type:"string"}},required:["op"],type:"object"}),m=i({properties:{fullPage:{description:"screenshot: capture the full scrollable page rather than just the viewport.",type:"boolean"},op:{description:"The browser operation to run.",enum:["screenshot","scrape","pdf","content"],type:"string"},selector:{description:"scrape: optional CSS selector hint to narrow the extraction.",type:"string"},type:{description:"screenshot: image encoding (default png).",enum:["png","jpeg"],type:"string"},url:{description:"The URL to operate on.",type:"string"}},required:["op","url"],type:"object"}),g=new Set(["DELETE","PATCH","POST","PUT"]),f=e=>e.op==="exec"||g.has((e.method??"GET").toUpperCase()),y=i({properties:{args:{description:"exec: command arguments.",items:{type:"string"},type:"array"},body:{description:"fetch: request body.",type:"string"},command:{description:"exec: the command to run.",type:"string"},method:{description:"fetch: HTTP method (default GET).",type:"string"},op:{description:"The container operation to run.",enum:["fetch","exec"],type:"string"},path:{description:"fetch: request path on the container (e.g. /health).",type:"string"}},required:["op"],type:"object"}),w=(e={})=>({description:e.description??d,execute:(t,r)=>r.run(s,{...t,kind:"browser"}),inputSchema:m,isLunoraAgentTool:!0,...e.needsApproval===void 0?{}:{needsApproval:e.needsApproval}}),O=(e,t={})=>{if(typeof e!="string"||e.length===0)throw new a("INTERNAL","@lunora/agent: containerTool requires a container `name` (the ctx.containers.<name> key from lunora/containers.ts)");const r=t.needsApproval??f;return{description:t.description??h,execute:(o,n)=>n.run(s,{...o,kind:"container",name:e}),inputSchema:y,isLunoraAgentTool:!0,needsApproval:r}},_=(e,t={})=>{if(typeof e!="string"||e.length===0)throw new a("INTERNAL","@lunora/agent: fsTool requires an R2 `bucket` binding name (the r2_bucket declared in wrangler.jsonc)");return{description:t.description??l,execute:(r,o)=>{const n=typeof t.root=="function"?t.root(o):t.root??"";return o.run(s,{...r,bucket:e,kind:"fs",root:n})},inputSchema:T,isLunoraAgentTool:!0,needsApproval:t.needsApproval??u}};export{w as browserTool,O as containerTool,_ as fsTool};

package/dist/skill-markdown.d.mts

@@ -0,0 +1,36 @@
+import { S as SkillMarkdownExtras, d as SkillDefinition } from "./packem_shared/types.d-DTKxPuh_.mjs";
+import '@lunora/mail/inbound';
+import 'ai';
+/**
+ * Declare a skill whose prose lives in a markdown file.
+ *
+ * ```ts
+ * import triage from "./skills/triage/SKILL.md?raw";
+ * import { functionTool } from "@lunora/agent";
+ * import { skillFromMarkdown } from "@lunora/agent/skill-markdown";
+ *
+ * export const triageSkill = skillFromMarkdown(triage, {
+ *     tools: { searchCode: functionTool(api.code.search, { ... }) },
+ * });
+ * ```
+ *
+ * ```md
+ * ---
+ * name: triage
+ * ---
+ * Reproduce the report before proposing a cause. Cite the failing test.
+ * ```
+ *
+ * The split is the point: the instructions are the part a non-author reads,
+ * reviews and copies between projects, so they belong in a file that is legible
+ * on its own — and the `name` travels WITH that file, so a skill can move
+ * without a matching TypeScript wrapper. Tools and `knowledge` stay in code,
+ * because they are code.
+ *
+ * Getting the markdown here is the caller's job (`?raw` under Vite, a build-time
+ * import elsewhere) — a Worker has no filesystem to read it from at runtime, so
+ * this takes the string rather than a path.
+ * @experimental
+ */
+declare const skillFromMarkdown: (markdown: string, extras?: SkillMarkdownExtras) => SkillDefinition;
+export { type SkillMarkdownExtras, skillFromMarkdown };

package/dist/skill-markdown.d.ts

@@ -0,0 +1,36 @@
+import { S as SkillMarkdownExtras, d as SkillDefinition } from "./packem_shared/types.d-DTKxPuh_.js";
+import '@lunora/mail/inbound';
+import 'ai';
+/**
+ * Declare a skill whose prose lives in a markdown file.
+ *
+ * ```ts
+ * import triage from "./skills/triage/SKILL.md?raw";
+ * import { functionTool } from "@lunora/agent";
+ * import { skillFromMarkdown } from "@lunora/agent/skill-markdown";
+ *
+ * export const triageSkill = skillFromMarkdown(triage, {
+ *     tools: { searchCode: functionTool(api.code.search, { ... }) },
+ * });
+ * ```
+ *
+ * ```md
+ * ---
+ * name: triage
+ * ---
+ * Reproduce the report before proposing a cause. Cite the failing test.
+ * ```
+ *
+ * The split is the point: the instructions are the part a non-author reads,
+ * reviews and copies between projects, so they belong in a file that is legible
+ * on its own — and the `name` travels WITH that file, so a skill can move
+ * without a matching TypeScript wrapper. Tools and `knowledge` stay in code,
+ * because they are code.
+ *
+ * Getting the markdown here is the caller's job (`?raw` under Vite, a build-time
+ * import elsewhere) — a Worker has no filesystem to read it from at runtime, so
+ * this takes the string rather than a path.
+ * @experimental
+ */
+declare const skillFromMarkdown: (markdown: string, extras?: SkillMarkdownExtras) => SkillDefinition;
+export { type SkillMarkdownExtras, skillFromMarkdown };

package/dist/skill-markdown.mjs

@@ -0,0 +1 @@
+import{LunoraError as o}from"@lunora/errors";import{parse as s}from"yaml";import{defineSkill as l}from"./packem_shared/defineSkill-DGGvDWNq.mjs";const m=/^\uFEFF?[ \t]*---[ \t]*\r?\n/u,h=/^---[ \t]*$/mu,c=t=>{const r=m.exec(t);if(!r)return{body:t.trim(),data:{}};const n=t.slice(r[0].length),e=h.exec(n);if(!e)throw new o("INTERNAL","@lunora/agent: the skill markdown opens with `---` but never closes the frontmatter block. Add a closing `---` on its own line.");let a;try{a=s(n.slice(0,e.index))}catch(i){throw new o("INTERNAL",`@lunora/agent: the skill markdown has invalid YAML frontmatter — ${i instanceof Error?i.message:String(i)}`)}return{body:n.slice(e.index+e[0].length).trim(),data:typeof a=="object"&&a!==null?a:{}}},w=(t,r={})=>{if(typeof t!="string")throw new o("INTERNAL",`@lunora/agent: skillFromMarkdown expects the markdown SOURCE as a string, got ${typeof t}`);const{body:n,data:e}=c(t);if(e.name!==void 0&&typeof e.name!="string")throw new o("INTERNAL",`@lunora/agent: the skill markdown's \`name\` must be a string, got ${Array.isArray(e.name)?"array":typeof e.name}. Quote it if the value looks like a number or a boolean (\`name: "2fa"\`).`);if(typeof e.name!="string")throw new o("INTERNAL","@lunora/agent: skillFromMarkdown found no `name` in the markdown frontmatter. Open the file with a `---` line, put `name: <identifier>` on its own line, and close it with `---`. Other keys are parsed and ignored — only `name` is read here.");if(n==="")throw new o("INTERNAL",`@lunora/agent: the skill markdown for "${e.name}" has no body — the instructions below the closing \`---\` are what the skill contributes.`);return l({...r,instructions:n,name:e.name})};export{w as skillFromMarkdown};

package/dist/telemetry/index.d.mts

@@ -127,6 +127,15 @@ declare const consoleTelemetry: (options?: ConsoleTelemetryOptions) => Telemetry
  * @experimental
  */
 interface OtlpTelemetryOptions extends CommonOptions {
+  /**
+   * Conversation / session id to tag each generation span with, emitted as the
+   * `gen_ai.conversation.id` semantic-convention attribute so a multi-turn
+   * conversation's model turns group in the trace store. On a deployed agent the
+   * platform wiring passes the run's `threadKey` here automatically (one thread =
+   * one conversation). Omitted → the attribute is absent (backward-compatible),
+   * and each turn's span is ungrouped.
+   */
+  conversationId?: string;
   /**
    * The OTLP-over-HTTP collector base endpoint (e.g. the Lunora Cloud's `/v1`
    * base). Spans are POSTed to `${endpoint}/v1/traces`; a trailing slash is
@@ -242,4 +251,58 @@ interface SentryTelemetryOptions extends CommonOptions {
  * @experimental
  */
 declare const sentryTelemetry: (options: SentryTelemetryOptions) => Telemetry;
-export { type BraintrustLike, type BraintrustSpan, type BraintrustTelemetryOptions, type CommonOptions, type ConsoleLogLevel, type ConsoleLogger, type ConsoleTelemetryOptions, type OtlpTelemetryOptions, type SentryLike, type SentryTelemetryOptions, braintrustTelemetry, combineTelemetry, consoleTelemetry, otlpTelemetry, sentryTelemetry };
+export {
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustLike,
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustSpan,
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustTelemetryOptions, type CommonOptions, type ConsoleLogLevel, type ConsoleLogger, type ConsoleTelemetryOptions, type OtlpTelemetryOptions, type SentryLike, type SentryTelemetryOptions, braintrustTelemetry, combineTelemetry, consoleTelemetry, otlpTelemetry, sentryTelemetry };

package/dist/telemetry/index.d.ts

@@ -127,6 +127,15 @@ declare const consoleTelemetry: (options?: ConsoleTelemetryOptions) => Telemetry
  * @experimental
  */
 interface OtlpTelemetryOptions extends CommonOptions {
+  /**
+   * Conversation / session id to tag each generation span with, emitted as the
+   * `gen_ai.conversation.id` semantic-convention attribute so a multi-turn
+   * conversation's model turns group in the trace store. On a deployed agent the
+   * platform wiring passes the run's `threadKey` here automatically (one thread =
+   * one conversation). Omitted → the attribute is absent (backward-compatible),
+   * and each turn's span is ungrouped.
+   */
+  conversationId?: string;
   /**
    * The OTLP-over-HTTP collector base endpoint (e.g. the Lunora Cloud's `/v1`
    * base). Spans are POSTed to `${endpoint}/v1/traces`; a trailing slash is
@@ -242,4 +251,58 @@ interface SentryTelemetryOptions extends CommonOptions {
  * @experimental
  */
 declare const sentryTelemetry: (options: SentryTelemetryOptions) => Telemetry;
-export { type BraintrustLike, type BraintrustSpan, type BraintrustTelemetryOptions, type CommonOptions, type ConsoleLogLevel, type ConsoleLogger, type ConsoleTelemetryOptions, type OtlpTelemetryOptions, type SentryLike, type SentryTelemetryOptions, braintrustTelemetry, combineTelemetry, consoleTelemetry, otlpTelemetry, sentryTelemetry };
+export {
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustLike,
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustSpan,
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustTelemetryOptions, type CommonOptions, type ConsoleLogLevel, type ConsoleLogger, type ConsoleTelemetryOptions, type OtlpTelemetryOptions, type SentryLike, type SentryTelemetryOptions, braintrustTelemetry, combineTelemetry, consoleTelemetry, otlpTelemetry, sentryTelemetry };

package/dist/telemetry/index.mjs

@@ -1,5 +1 @@
-export { braintrustTelemetry } from '../packem_shared/braintrustTelemetry-wuGDErob.mjs';
-export { combineTelemetry } from '../packem_shared/combineTelemetry-DCyaaWAI.mjs';
-export { consoleTelemetry } from '../packem_shared/consoleTelemetry-z2MiP1jt.mjs';
-export { otlpTelemetry } from '../packem_shared/otlpTelemetry-9ypXork9.mjs';
-export { sentryTelemetry } from '../packem_shared/sentryTelemetry-CgqFJyLO.mjs';
+import{braintrustTelemetry as o}from"../packem_shared/braintrustTelemetry-CoYK-pq7.mjs";import{combineTelemetry as m}from"../packem_shared/combineTelemetry-DgE9W9G8.mjs";import{consoleTelemetry as p}from"../packem_shared/consoleTelemetry-BZY3Y-Ly.mjs";import{otlpTelemetry as f}from"../packem_shared/otlpTelemetry-CywiFp-X.mjs";import{sentryTelemetry as T}from"../packem_shared/sentryTelemetry-CPqEbFPA.mjs";export{o as braintrustTelemetry,m as combineTelemetry,p as consoleTelemetry,f as otlpTelemetry,T as sentryTelemetry};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/agent",
-  "version": "1.0.0-alpha.8",
+  "version": "1.0.0-alpha.81",
   "description": "Durable AI agents for Lunora: defineAgent compiles a replay-safe tool-loop onto Cloudflare Workflows, with DO SQLite threads and live message subscriptions",
   "keywords": [
     "agent",
@@ -62,6 +62,14 @@
       "types": "./dist/naming.d.ts",
       "import": "./dist/naming.mjs"
     },
+    "./skill-markdown": {
+      "types": "./dist/skill-markdown.d.ts",
+      "import": "./dist/skill-markdown.mjs"
+    },
+    "./reply": {
+      "types": "./dist/reply.d.ts",
+      "import": "./dist/reply.mjs"
+    },
     "./sandbox": {
       "types": "./dist/sandbox.d.ts",
       "import": "./dist/sandbox.mjs"
@@ -76,14 +84,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/ai": "1.0.0-alpha.19",
-    "@lunora/errors": "1.0.0-alpha.6",
-    "@lunora/mail": "1.0.0-alpha.16",
-    "@lunora/server": "1.0.0-alpha.29",
-    "@lunora/values": "1.0.0-alpha.9",
-    "@lunora/workflow": "1.0.0-alpha.11",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "ai": "7.0.31"
+    "@lunora/ai": "1.0.0-alpha.69",
+    "@lunora/errors": "1.0.0-alpha.29",
+    "@lunora/mail": "1.0.0-alpha.59",
+    "@lunora/server": "1.0.0-alpha.99",
+    "@lunora/values": "1.0.0-alpha.37",
+    "@lunora/workflow": "1.0.0-alpha.42",
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "ai": "7.0.59",
+    "yaml": "^2.9.0"
   },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"

package/dist/packem_shared/AGENT_MODULE-Dnt_-AAT.mjs

@@ -1,24 +0,0 @@
-const AGENT_MODULE = "agents";
-const SANDBOX_MODULE = "sandbox";
-const SANDBOX_INVOKE_PATH = `${SANDBOX_MODULE}:invoke`;
-const DEFAULT_AGENT_FUNCTION_PATHS = {
-  appendMessage: `${AGENT_MODULE}:agentAppendMessage`,
-  ensureThread: `${AGENT_MODULE}:agentEnsureThread`,
-  episodeRecall: `${AGENT_MODULE}:agentEpisodeRecall`,
-  episodeUpsert: `${AGENT_MODULE}:agentEpisodeUpsert`,
-  graphTraverse: `${AGENT_MODULE}:agentGraphTraverse`,
-  graphUpsert: `${AGENT_MODULE}:agentGraphUpsert`,
-  listMessages: `${AGENT_MODULE}:agentMessages`,
-  patchThread: `${AGENT_MODULE}:agentPatchThread`,
-  run: `${AGENT_MODULE}:agentRun`,
-  setState: `${AGENT_MODULE}:agentSetState`,
-  state: `${AGENT_MODULE}:agentState`
-};
-const toFunctionReference = (source) => {
-  if (typeof source === "string") {
-    return { __lunoraRef: source };
-  }
-  return source;
-};
-
-export { AGENT_MODULE, DEFAULT_AGENT_FUNCTION_PATHS, SANDBOX_INVOKE_PATH, SANDBOX_MODULE, toFunctionReference };