@zaflun/lumio-agent-skill 0.4.0 → 0.5.3

package/dist/bin/lumio-skills.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   installSkillFiles
-} from "../chunk-SSYJXSJX.js";
+} from "../chunk-TKNV5K6F.js";
 
 // src/bin/lumio-skills.ts
 import { resolve } from "path";

package/dist/{chunk-SSYJXSJX.js → chunk-TKNV5K6F.js}

@@ -14,8 +14,8 @@ Lumio Extensions are sandboxed React apps that run inside a 3-layer iframe sandb
 \`\`\`
 3-Layer Sandbox:
   Host (lumio.vision / browser source)
-    \u2514\u2500\u2500 Supervisor iframe (supervisor.extension.lumio.vision)
-          \u2514\u2500\u2500 Extension Runtime iframe (ext.lumio.vision)
+    \u2514\u2500\u2500 Supervisor iframe (supervisor.ext.lumio.vision)
+          \u2514\u2500\u2500 Extension Runtime iframe (<label>.runtime.ext.lumio.vision)
                 \u2514\u2500\u2500 Web Worker (server function execution)
 \`\`\`
 
@@ -30,7 +30,7 @@ Extension Project:
 \`\`\`
 
 **Runtime flow:**
-1. Extension Runtime iframe loads from \`ext.lumio.vision/ext/{slug}/layer?token=lm_ext_xxx&install_id=uuid\`
+1. Extension Runtime iframe loads on the extension's own origin \`<label>.runtime.ext.lumio.vision\` (\`<label>\` = extension UUID as 32 lowercase hex)
 2. \`Lumio.render(<Component />, { target: "layer" })\` must be called within 10 seconds
 3. The custom React reconciler serializes the tree to \`LumioComponentNode[]\` via postMessage to the Supervisor
 4. The Supervisor validates and forwards the node tree to the Host for rendering
@@ -76,8 +76,13 @@ All three surfaces share storage via \`useExtensionStorage()\` \u2014 changes in
   },
   "visibility": "public",
   "pricing": { "type": "free" },
+  "sounds": [
+    { "file": "alert.mp3", "name": "Alert" },
+    { "file": "chime.wav", "name": "Chime", "default_volume": 0.8 }
+  ],
   "config_schema": [
-    { "key": "title", "type": "string", "label": "Widget Title", "default_value": "My Widget", "required": true },
+    { "key": "title", "type": "string", "label": "Widget Title", "default_value": "My Widget", "required": true, "placeholder": "Enter title..." },
+    { "key": "fontSize", "type": "number", "label": "Font Size", "default_value": 16, "required": false, "min": 8, "max": 200, "unit": "px" },
     { "key": "showBorder", "type": "boolean", "label": "Show Border", "default_value": true, "required": false }
   ]
 }
@@ -94,6 +99,8 @@ All three surfaces share storage via \`useExtensionStorage()\` \u2014 changes in
 - \`"visibility": "unlisted"\` \u2014 accessible by direct link only
 - Private invite: grant \`free_access\` to specific accounts via dashboard
 
+**Bundled sounds:** Place audio files in \`dist/sounds/\` and declare them in the \`sounds\` array. Supported: MP3, WAV, OGG, WebM, M4A, AAC, FLAC. Default limits: 50 sounds per extension, 10 MB per file, 200 MB total storage (all admin-configurable). Developers can view limits at \`/account/developer/limits\` and request increases via a 4-step wizard. Requests are reviewed by admins in the admin app. Users cannot delete bundled sounds \u2014 uninstalling the extension removes them.
+
 **Revenue split:** Configurable per developer (default 70/30 developer/Lumio).
 
 **Feature gates:** The following Lumio plan features must be enabled for extension functionality:
@@ -136,11 +143,11 @@ lumio deploy
 
 ## Components
 
-15 SDK components (all accept \`style: VisionStyle\`):
+17 SDK components (all accept \`style: VisionStyle\`):
 
 **Layout:** \`Box\`, \`VStack\`, \`HStack\`, \`CompactView\`, \`List\`
-**Display:** \`Text\` (variant: heading/muted/default), \`Image\` (objectFit), \`Animated\`
-**Input:** \`Button\` (variant: default/destructive), \`Toggle\`, \`TextField\`, \`TextArea\`, \`NumberField\`, \`Dropdown\`, \`Slider\`
+**Display:** \`Text\` (variant: heading/muted/default), \`Image\` (objectFit), \`Animated\`, \`IconDisplay\`
+**Input:** \`Button\` (variant: default/destructive), \`Toggle\`, \`TextField\`, \`TextArea\`, \`NumberField\`, \`Dropdown\`, \`Slider\`, \`IconPicker\`
 
 **VisionStyle** is a typed CSS subset (allowed: flexbox, grid, \`position: relative\` / \`absolute\`, sizing, spacing, colors, border, typography, transitions; blocked: \`fixed\`, \`sticky\`, CSS expressions).
 
@@ -150,7 +157,7 @@ See \`components.md\` for full props and examples.
 
 ## Hooks
 
-11 SDK hooks:
+12 SDK hooks:
 
 | Hook | Returns | Purpose |
 |------|---------|---------|
@@ -165,6 +172,7 @@ See \`components.md\` for full props and examples.
 | \`useQuery(fn, params?)\` | \`{ data, isLoading, error, refetch }\` | Call server query |
 | \`useMutation(fn)\` | \`{ mutate, mutateAsync, data, isLoading, error }\` | Call server mutation/action |
 | \`useAnimation(preset, options?)\` | \`animationProps\` | SDK animation presets for \`Animated\` component |
+| \`useIconPicker(options?)\` | \`{ isOpen, selected, open, close, select, clear, sources }\` | Headless state for custom icon picker UIs |
 
 **Important:** \`setStorage\` must always spread: \`setStorage({ ...storage, key: value })\`
 
@@ -194,26 +202,17 @@ export const fetchScores = action({
 });
 \`\`\`
 
-**Extension Actions** via \`useLumioAction()\` (21 total, \`action\` is \`LumioActionType\`):
+**Extension Actions** via \`useLumioAction()\` (dispatched by the Lumio API; \`action\` is \`LumioActionType\`):
 \`\`\`tsx
 // Trigger platform actions (requires matching permission in lumio.config.json)
 const { execute: sendChat } = useLumioAction("chat:send");
-const { execute: banUser } = useLumioAction("chat:ban");
-const { execute: unbanUser } = useLumioAction("chat:unban");
-const { execute: timeoutUser } = useLumioAction("chat:timeout");
+const { execute: deleteChat } = useLumioAction("chat:delete");
 const { execute: setScene } = useLumioAction("obs:set_scene");
-const { execute: startRecording } = useLumioAction("obs:start_recording");
-const { execute: stopRecording } = useLumioAction("obs:stop_recording");
+const { execute: setSourceVisible } = useLumioAction("obs:set_source_visible");
+const { execute: startStream } = useLumioAction("obs:start_stream");
+const { execute: stopStream } = useLumioAction("obs:stop_stream");
 const { execute: emitEvent } = useLumioAction("events:emit");
 const { execute: updateLayer } = useLumioAction("overlay:update_layer");
-const { execute: spotifyPlay } = useLumioAction("spotify:play");
-const { execute: spotifyPause } = useLumioAction("spotify:pause");
-const { execute: spotifySkip } = useLumioAction("spotify:skip");
-const { execute: spotifySeek } = useLumioAction("spotify:seek");
-const { execute: spotifyVolume } = useLumioAction("spotify:volume");
-const { execute: spotifyShuffle } = useLumioAction("spotify:shuffle");
-const { execute: spotifyRepeat } = useLumioAction("spotify:repeat");
-const { execute: spotifyQueueAdd } = useLumioAction("spotify:queue_add");
 \`\`\`
 
 See \`server-functions.md\` for schema definition, storage scoping, and advanced patterns.
@@ -373,22 +372,26 @@ return <Text content={storage.text} />;
 
 ### Live events
 \`\`\`tsx
-// eventType is LumioEventType \u2014 autocomplete shows all 49 valid event strings
+// eventType is LumioEventType \u2014 autocomplete shows all 58 valid event strings
 const event = useLumioEvent("twitch:follower");
 // event updates automatically when a new follower event arrives
 \`\`\`
 
-**All 49 event types** (\`LumioEventType\`):
+**All 58 event types** (\`LumioEventType\`):
+
+Twitch (23): \`twitch:follower\`, \`twitch:subscribe\`, \`twitch:gift_sub\`, \`twitch:resub\`, \`twitch:cheer\`, \`twitch:raid\`, \`twitch:reward\`, \`twitch:hype_train\`, \`twitch:hype_train_end\`, \`twitch:poll\`, \`twitch:poll_end\`, \`twitch:prediction\`, \`twitch:prediction_lock\`, \`twitch:prediction_end\`, \`twitch:goal\`, \`twitch:goal_end\`, \`twitch:ad_break\`, \`twitch:ban\`, \`twitch:unban\`, \`twitch:stream_online\`, \`twitch:stream_offline\`, \`twitch:stream_update\`, \`twitch:chat\`
+
+YouTube (10): \`youtube:subscribe\`, \`youtube:member\`, \`youtube:superchat\`, \`youtube:supersticker\`, \`youtube:gift_membership\`, \`youtube:gift_membership_received\`, \`youtube:poll\`, \`youtube:stream_online\`, \`youtube:stream_offline\`, \`youtube:chat\`
 
-Twitch (22): \`twitch:follower\`, \`twitch:subscriber\`, \`twitch:subscribe\`, \`twitch:gift_sub\`, \`twitch:resub\`, \`twitch:cheer\`, \`twitch:raid\`, \`twitch:redemption\`, \`twitch:ban\`, \`twitch:unban\`, \`twitch:hype_train\`, \`twitch:poll\`, \`twitch:prediction\`, \`twitch:goal\`, \`twitch:ad_break\`, \`twitch:stream_update\`, \`twitch:chat\`
+Kick (11): \`kick:follower\`, \`kick:subscribe\`, \`kick:resub\`, \`kick:gift\`, \`kick:kicks\`, \`kick:reward\`, \`kick:reward_status\`, \`kick:stream_online\`, \`kick:stream_offline\`, \`kick:stream_update\`, \`kick:chat\`
 
-YouTube (7): \`youtube:subscriber\`, \`youtube:superchat\`, \`youtube:supersticker\`, \`youtube:gift_membership\`, \`youtube:gift_membership_received\`, \`youtube:poll\`, \`youtube:chat\`
+Spotify (12): \`spotify:track\`, \`spotify:play\`, \`spotify:pause\`, \`spotify:skip\`, \`spotify:volume\`, \`spotify:queue_add\`, \`spotify:device\`, \`spotify:playlist_add\`, \`spotify:playlist_remove\`, \`spotify:playlist_create\`, \`spotify:playlist_edit\`, \`spotify:playlist_delete\`
 
-Kick (6): \`kick:follower\`, \`kick:subscribe\`, \`kick:gift\`, \`kick:stream_online\`, \`kick:stream_offline\`, \`kick:chat\`
+StreamElements (1): \`streamelements:tip\`
 
-Trovo (3): \`trovo:subscribe\`, \`trovo:spell\`, \`trovo:chat\`
+Cross-platform chat (1, fires for every platform): \`chat:message\`
 
-Spotify (11): \`spotify:track\`, \`spotify:play\`, \`spotify:pause\`, \`spotify:skip\`, \`spotify:volume\`, \`spotify:queue_add\`, \`spotify:device\`, \`spotify:playlist_add\`, \`spotify:playlist_remove\`, \`spotify:playlist_create\`, \`spotify:playlist_delete\`
+Kick events carry canonical top-level fields (\`user_id\`, \`user_login\`, \`user_name\`, \`avatarUrl\`, \`is_anonymous\`) plus the original Kick payload. \`kick:kicks\` has \`kicks\` (amount, like Twitch \`bits\`) and \`message\`; \`kick:reward\` / \`kick:reward_status\` have \`status\`, \`user_input\` and \`reward { id, title, cost, prompt }\`; \`kick:resub\` has \`cumulative_months\`.
 
 ### Server queries
 \`\`\`tsx
@@ -419,7 +422,7 @@ const anim = useAnimation("slide-in", { duration: 300 });
 | \`EGRESS_BLOCKED\` | Fetch to undeclared host | Add host to \`egress.allowHosts\` in config |
 | \`STORAGE_QUOTA\` | Exceeded storage limit | Reduce data or request limit increase |
 | \`EDITOR_ONLY\` | Mutation called from layer/interactive | Remove \`editorOnly\` or restrict to editor |
-| \`SUPERVISOR_BLOCKED\` | Supervisor rejected a postMessage | Check message origin matches ext.lumio.vision |
+| \`SUPERVISOR_BLOCKED\` | Supervisor rejected a postMessage | Check message origin matches the extension's runtime origin (\`<label>.runtime.ext.lumio.vision\`) |
 | \`WORKER_CREATION_FAILED\` | Web Worker could not be created | Verify server functions bundle is valid JS |
 | \`STORAGE_DOM_EXCEPTION\` | localStorage/sessionStorage access | Use \`useExtensionStorage()\` instead (storage blocked) |
 
@@ -429,7 +432,59 @@ See \`troubleshooting.md\` for the full error reference.
 // src/content/components.ts
 var componentsContent = `# Lumio SDK Components
 
-All 15 components available in \`@zaflun/lumio-sdk\`. Every component accepts an optional \`style: VisionStyle\` prop.
+All 31 components available in \`@zaflun/lumio-sdk\`. Every component accepts an optional \`style: VisionStyle\` prop.
+
+## Editor Components
+
+14 components for building settings UIs in \`editor.tsx\` and \`designer.tsx\`. They serialize via the Reconciler and render as \`@lumio/ui\` components on the host \u2014 matching the dashboard design system.
+
+\`\`\`tsx
+import {
+  EditorInput, EditorTextarea, EditorSelect, EditorCheckbox,
+  EditorSlider, EditorColorPicker, EditorGroup, EditorLabel,
+  EditorDivider, EditorInfo, EditorFontRow, EditorButton,
+  EditorFontPicker, EditorChannelRow, useEditorAction,
+} from "@zaflun/lumio-sdk";
+
+// Text/number input with label, placeholder, min/max, unit
+<EditorInput label="Font Size" type="number" value="16" onChange={setSize} min={8} max={200} unit="px" />
+
+// Select dropdown
+<EditorSelect label="Theme" value={theme} onChange={setTheme} options={[{ value: "dark", label: "Dark" }]} />
+
+// Checkbox toggle
+<EditorCheckbox label="Show Badges" checked={show} onChange={setShow} />
+
+// Slider with range
+<EditorSlider label="Opacity" value={100} onChange={setOpacity} min={0} max={100} unit="%" />
+
+// Color picker (HSV canvas + hex input)
+<EditorColorPicker label="Background" value="#000000" onChange={setColor} />
+
+// Compact font row: [B] [size px] [color]
+<EditorFontRow bold={isBold} onBoldChange={setBold} fontSize={16} onFontSizeChange={setSize} fontColor="#fff" onFontColorChange={setColor} />
+
+// Full-width button (primary/default/destructive)
+<EditorButton label="Open Designer" variant="primary" onClick={openDesigner} />
+
+// Collapsible section
+<EditorGroup label="Advanced"><EditorCheckbox ... /></EditorGroup>
+
+// Font picker with weight dropdown (opens NavigationStack page)
+<EditorFontPicker label="Font Family" value="Lexend" onChange={setFont} weight="400" onWeightChange={setWeight} />
+
+// Channel row: platform + name + color + delete in one line
+<EditorChannelRow platform="twitch" onPlatformChange={setPlatform} channel="username" onChannelChange={setChannel} color="#9146FF" onColorChange={setColor} onRemove={remove} />
+
+// Dispatch UI actions (e.g. open designer)
+const { dispatch } = useEditorAction();
+<EditorButton label="Open Designer" variant="primary" onClick={() => dispatch("open-designer")} />
+
+// Section label, divider, info text
+<EditorLabel text="Settings" />
+<EditorDivider />
+<EditorInfo content="Configure your widget here." />
+\`\`\`
 
 > **Note:** There is no direct DOM access from extension code. The custom React reconciler serializes component trees to \`LumioComponentNode[]\` via postMessage \u2014 you must use SDK components exclusively.
 
@@ -750,6 +805,69 @@ const exitAnim = useAnimation("fade-out", { duration: 200 });
 - Keep animation durations short on the layer surface (< 500ms) to avoid frame drops
 - Avoid animating layout-affecting properties (\`width\`, \`height\`) on the layer; prefer \`opacity\` and \`transform\`
 
+## Picker Components
+
+### IconPicker
+
+Universal icon/emoji/emote picker with 4 tabs: Lucide icons (1960), Unicode emojis (1584), platform emotes (via API), and file upload. **Editor-only** \u2014 use \`IconDisplay\` to render the selected icon on the layer surface.
+
+\`\`\`tsx
+import { IconPicker, IconDisplay } from "@zaflun/lumio-sdk";
+import type { IconValue } from "@zaflun/lumio-sdk";
+
+// In editor.tsx \u2014 let the user pick an icon
+const [storage, setStorage] = useExtensionStorage();
+
+<IconPicker
+  value={storage.icon ?? null}
+  onChange={(icon) => setStorage({ ...storage, icon })}
+  sources={["lucide", "emoji", "emote", "upload"]}
+  size="md"
+  placeholder="Choose an icon..."
+/>
+
+// In layer.tsx \u2014 render the selected icon
+<IconDisplay icon={storage.icon ?? null} size={32} />
+\`\`\`
+
+**IconPickerProps:**
+- \`value: IconValue | null\` \u2014 currently selected icon
+- \`onChange: (icon: IconValue | null) => void\` \u2014 selection callback
+- \`sources?: IconSource[]\` \u2014 tabs to show (default: all four: \`["lucide", "emoji", "emote", "upload"]\`)
+- \`size?: "sm" | "md" | "lg"\` \u2014 picker trigger button size
+- \`placeholder?: string\` \u2014 placeholder text when no icon selected
+
+**IconDisplayProps:**
+- \`icon: IconValue | null\` \u2014 icon to render (null renders nothing)
+- \`size?: number\` \u2014 pixel size
+- \`className?: string\`
+
+**IconValue type:**
+\`\`\`typescript
+type IconSource = "lucide" | "emoji" | "emote" | "upload";
+
+interface IconValue {
+  type: IconSource;  // which tab/source the icon came from
+  value: string;     // icon name (lucide), Unicode char (emoji), CDN URL (emote), upload URL (upload)
+  label?: string;    // human-readable label
+  platform?: string; // platform identifier for emotes (e.g. "twitch", "7tv")
+}
+\`\`\`
+
+**\`useIconPicker()\` hook** \u2014 headless state management for custom picker UIs:
+\`\`\`tsx
+import { useIconPicker } from "@zaflun/lumio-sdk";
+
+const { isOpen, selected, open, close, select, clear, sources } = useIconPicker({
+  sources: ["lucide", "emoji"],
+  onSelect: (icon) => console.log("Selected:", icon),
+});
+\`\`\`
+
+Returns: \`{ isOpen, selected, open, close, select, clear, sources }\`
+
+**Upload tab** requires the extension to declare \`egress.allowHosts\` including the Lumio API. Uploaded files are stored per-extension with quota tracking via the \`extension_uploads\` table.
+
 ## VisionStyle
 
 Typed CSS subset accepted by all components. Sanitized by the host \u2014 only safe properties are allowed.
@@ -946,49 +1064,126 @@ import { useLumioAction } from "@zaflun/lumio-sdk";
 
 // Send a chat message on the connected platform
 const { execute: sendChat, isLoading, error } = useLumioAction("chat:send");
-sendChat({ message: "Hello from the extension!" });
+sendChat({
+  platform: "twitch",
+  channel_id: "primary",
+  message: "Hello from the extension!"
+});
 
 // Switch OBS scene (requires OBS WebSocket integration)
 const { execute: setScene } = useLumioAction("obs:set_scene");
-setScene({ sceneName: "Main Scene" });
+setScene({ scene_name: "Main Scene" });
 
 // Emit a custom event into the Lumio event bus
 const { execute: emitEvent } = useLumioAction("events:emit");
-emitEvent({ type: "extension:custom", payload: { score: 42 } });
+emitEvent({ event_type: "extension:custom", data: { score: 42 } });
 
 // Update a specific layer in the overlay
 const { execute: updateLayer } = useLumioAction("overlay:update_layer");
-updateLayer({ layerId: "uuid", visible: true });
+updateLayer({
+  overlay_id: "overlay-uuid",
+  layer_id: "layer-uuid",
+  config: { visible: true }
+});
 \`\`\`
 
-**Available actions (21 total, \`action\` is \`LumioActionType\`):**
+**Available dispatched actions (\`action\` is \`LumioActionType\`):**
 
 | Action | Permission required | Description |
 |--------|--------------------|----|
 | \`chat:send\` | \`chat:send\` | Send chat message on connected platform |
 | \`chat:delete\` | \`chat:delete\` | Delete a chat message |
-| \`chat:ban\` | \`chat:ban\` | Ban a user from chat |
-| \`chat:unban\` | \`chat:ban\` | Unban a user from chat |
-| \`chat:timeout\` | \`chat:ban\` | Timeout a user from chat |
-| \`obs:set_scene\` | \`obs:control\` | Switch OBS scene |
-| \`obs:set_source_visible\` | \`obs:control\` | Show or hide an OBS source |
-| \`obs:start_stream\` | \`obs:control\` | Start OBS streaming |
-| \`obs:stop_stream\` | \`obs:control\` | Stop OBS streaming |
-| \`obs:start_recording\` | \`obs:control\` | Start OBS recording |
-| \`obs:stop_recording\` | \`obs:control\` | Stop OBS recording |
-| \`events:emit\` | \`events:write\` | Emit event into Lumio event bus |
-| \`overlay:update_layer\` | \`overlays:edit\` | Update overlay layer properties |
-| \`spotify:play\` | \`spotify:control\` | Resume Spotify playback |
-| \`spotify:pause\` | \`spotify:control\` | Pause Spotify playback |
-| \`spotify:skip\` | \`spotify:control\` | Skip to next track |
-| \`spotify:seek\` | \`spotify:control\` | Seek to position in current track |
-| \`spotify:volume\` | \`spotify:control\` | Set Spotify volume |
-| \`spotify:shuffle\` | \`spotify:control\` | Toggle shuffle mode |
-| \`spotify:repeat\` | \`spotify:control\` | Set repeat mode |
-| \`spotify:queue_add\` | \`spotify:control\` | Add track to Spotify queue |
+| \`obs:set_scene\` | \`obs:set_scene\` | Switch OBS scene |
+| \`obs:set_source_visible\` | \`obs:set_source_visible\` | Show or hide an OBS source |
+| \`obs:start_stream\` | \`obs:start_stream\` | Start OBS streaming |
+| \`obs:stop_stream\` | \`obs:stop_stream\` | Stop OBS streaming |
+| \`events:emit\` | \`events:emit\` | Emit event into Lumio event bus |
+| \`overlay:update_layer\` | \`overlay:update_layer\` | Update overlay layer properties |
 
 Actions are proxied through the Lumio API \u2014 the extension never accesses OAuth tokens or platform credentials directly.
 
+## Automation Node Handlers
+
+Extensions with category \`automation_node\` export a single handler in \`server/handler.ts\`. The handler type depends on the \`node_type\` declared in \`lumio.config.json\`.
+
+### \`defineAutomationAction(handler)\`
+
+Action nodes execute when triggered by an upstream node in the automation workflow. They receive input data from the previous node and can perform side effects (HTTP calls, DB writes).
+
+\`\`\`typescript
+import { defineAutomationAction } from "@zaflun/lumio-sdk/server";
+
+export default defineAutomationAction({
+  handler: async (ctx) => {
+    const webhookUrl = ctx.nodeConfig.webhook_url;
+    const res = await ctx.fetch(webhookUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(ctx.inputData),
+    });
+    return { status: res.status, body: await res.json() };
+  },
+});
+\`\`\`
+
+### \`defineAutomationTrigger({ onWebhook?, onPoll? })\`
+
+Trigger nodes start automation workflows. They support two modes: webhook (receives external HTTP calls) and poll (periodic checks for new data).
+
+\`\`\`typescript
+import { defineAutomationTrigger } from "@zaflun/lumio-sdk/server";
+
+export default defineAutomationTrigger({
+  onWebhook: async (ctx, request) => {
+    const body = await request.json();
+    if (body.event === "order.created") {
+      return { trigger: true, outputData: { orderId: body.id, total: body.total } };
+    }
+    return { trigger: false };
+  },
+  onPoll: async (ctx) => {
+    const lastCheck = await ctx.cache.get("last_check") ?? "1970-01-01T00:00:00Z";
+    const res = await ctx.fetch(
+      \`https://api.example.com/events?since=\${lastCheck}\`,
+      { headers: { "Authorization": \`Bearer \${ctx.secrets.get("API_KEY")}\` } }
+    );
+    const events = await res.json();
+    await ctx.cache.set("last_check", new Date().toISOString());
+    return events.map((e: any) => ({ trigger: true, outputData: e }));
+  },
+});
+\`\`\`
+
+### \`defineAutomationLogic(handler)\`
+
+Logic nodes evaluate conditions and route the workflow to different branches. They return a branch key that determines which downstream path executes.
+
+\`\`\`typescript
+import { defineAutomationLogic } from "@zaflun/lumio-sdk/server";
+
+export default defineAutomationLogic({
+  handler: async (ctx) => {
+    const amount = ctx.inputData.total;
+    if (amount >= 100) return { branch: "high_value" };
+    if (amount >= 25) return { branch: "medium_value" };
+    return { branch: "low_value" };
+  },
+});
+\`\`\`
+
+### Automation Handler Context (\`ctx\`)
+
+| Property | Available in | Description |
+|----------|-------------|-------------|
+| \`ctx.nodeConfig\` | All | Node configuration from the user's config panel |
+| \`ctx.inputData\` | Action, Logic | Data from the upstream node |
+| \`ctx.fetch(url, options?)\` | All | HTTP request (egress allowlist enforced) |
+| \`ctx.cache.get(key)\` / \`ctx.cache.set(key, value, ttl?)\` | All | Per-installation KV cache (Redis, 1h default TTL) |
+| \`ctx.secrets.get(key)\` | All | Server-side secret |
+| \`ctx.db\` | All | Extension DB schema access |
+| \`ctx.auth\` | All | \`{ accountId }\` \u2014 account identity |
+| \`ctx.defer()\` | Action | Mark execution as async (returns 202, completes in background) |
+
 ## Bot Module Handlers
 
 Extensions with category \`bot_module\` export handler wrappers that register triggers. Each wrapper defines when the handler fires and what context it receives.
@@ -1087,6 +1282,37 @@ export const toxicFilter = moderate({
 });
 \`\`\`
 
+### \`defineModerate(handler)\`
+
+Convenience wrapper for system-style moderation handlers. The handler receives a unified context with the chat message and returns a moderation action.
+
+\`\`\`typescript
+import { defineModerate } from "@zaflun/lumio-sdk/server";
+
+export default defineModerate(async (ctx) => {
+  if (ctx.message.text.includes("spam")) {
+    return { action: "delete" };
+  }
+  return { action: "allow" };
+});
+\`\`\`
+
+### \`defineTimer(handler)\`
+
+Convenience wrapper for timer-based handlers (e.g., timed messages). Fires on a recurring interval configured in the extension's install config.
+
+\`\`\`typescript
+import { defineTimer } from "@zaflun/lumio-sdk/server";
+
+export default defineTimer(async (ctx) => {
+  const messages = (ctx.installConfig.messages as string || "").split("\\n").filter(Boolean);
+  if (messages.length === 0) return null;
+  const idx = parseInt(await ctx.cache.get("idx") || "0", 10);
+  await ctx.cache.set("idx", String((idx + 1) % messages.length));
+  return { reply: messages[idx] };
+});
+\`\`\`
+
 ### Handler Return Actions
 
 All bot module handlers return an action object:
@@ -1110,7 +1336,7 @@ The extension must declare the matching permission in \`lumio.config.json\`. For
 | \`chat:delete\` | Delete chat messages | Enhanced |
 | \`chat:ban\` | Ban, unban, and timeout users | Enhanced |
 | \`events:read\` | Subscribe to platform events | Standard |
-| \`events:write\` | Emit custom events | Standard |
+| \`events:emit\` | Emit custom events | Standard |
 `;
 
 // src/content/cli-workflows.ts
@@ -1170,15 +1396,14 @@ lumio init my-widget
 # ? Category: widget
 # ? Targets: editor, layer
 # ? Server functions: yes
-# ? Template: Widget (editor + layer + storage)
+# ? How should the editor UI be built? config_schema only / editor.tsx only / Both
 # ? Owner: My Stream (personal) / Awesome Team  <- team selection if applicable
 #
 # Creating extension on Lumio...
 # Extension-ID: 88b2478a-39c7-468e-bebd-14e52fd97ac0
 # Slug: k8f2x-my-widget
 #
-# Writing lumio.config.json...
-# Writing src/editor.tsx...
+# Writing lumio.config.json (with config_schema)...
 # Writing src/layer.tsx...
 # Writing server/schema.ts...
 # Writing server/functions.ts...
@@ -1186,6 +1411,32 @@ lumio init my-widget
 # Done! Run \`lumio dev\` to start developing.
 \`\`\`
 
+### Automation Node Example
+
+\`\`\`bash
+lumio init my-webhook-action
+
+# Interactive prompts:
+# ? Extension name: My Webhook Action
+# ? Description: Posts data to a webhook
+# ? Category: automation_node
+# ? Node type: action
+# ? Server functions: yes (required for automation nodes)
+# ? Owner: My Stream (personal) / Awesome Team
+#
+# Creating extension on Lumio...
+# Extension-ID: a1b2c3d4-...
+# Slug: x9k1z-my-webhook-action
+#
+# Writing lumio.config.json...
+# Writing src/editor.tsx...
+# Writing server/handler.ts...
+#
+# Done! Run \`lumio dev\` to start developing.
+\`\`\`
+
+Automation nodes always generate \`server/handler.ts\` (not \`server/functions.ts\`) and \`src/editor.tsx\` for the config panel. The \`node_type\` can be \`action\`, \`trigger\`, or \`logic\`.
+
 ### Templates
 
 | Template | Targets | Server | Description |
@@ -1195,6 +1446,9 @@ lumio init my-widget
 | Full-Stack | editor + layer | Yes | Complete extension with server functions |
 | Interactive Game | editor + layer + interactive | Yes | Viewer interaction game |
 | Bot Module | server-only | Yes | Chat command module |
+| Automation Action | server + editor | Yes | Automation workflow action node |
+| Automation Trigger | server + editor | Yes | Automation workflow trigger node |
+| Automation Logic | server + editor | Yes | Automation workflow logic/branching node |
 | Integration | server | Yes | External API integration |
 | Theme | editor | No | Style variables only |
 
@@ -1215,27 +1469,59 @@ lumio dev
 # Press 'q' to quit.
 \`\`\`
 
+### Automation Node Development
+
+For automation node extensions, the dev server auto-detects \`category: "automation_node"\` and launches the automation simulator:
+
+\`\`\`bash
+lumio dev
+# or explicitly:
+lumio dev --automation-node
+
+# Output:
+# Lumio Dev Server running at http://localhost:5173
+# Config Panel: http://localhost:5173/editor
+#
+# Automation Simulator ready. Commands:
+#   /execute [JSON]     \u2014 Run the action handler with input data
+#   /webhook [JSON]     \u2014 Simulate an incoming webhook (trigger nodes)
+#   /poll               \u2014 Trigger a poll cycle (trigger nodes)
+#   /config [JSON]      \u2014 Update node config
+#   /quit               \u2014 Stop the dev server
+\`\`\`
+
 Features:
 - Hot reload on file changes
 - Mock event system (simulated chat, follows, subs)
 - Sandbox environment matching production constraints
 - Server function execution with local DB
+- Automation simulator with /execute, /webhook, /poll, /config commands
 
 ## lumio build
 
-Bundle the extension as standalone HTML and create source archive.
+Bundle the extension and create source archive.
 
 \`\`\`bash
 lumio build
 
-# Output:
-# Building extension...
-# Bundling editor.tsx -> dist/editor.html (42 KB)
-# Bundling layer.tsx -> dist/layer.html (38 KB)
-# Creating source archive -> dist/source.tar.gz
-# Build complete!
+# Output for widgets:
+#   Built: dist/editor.js
+#   Built: dist/layer.js
+#   Compiled: dist/styles.css (if Tailwind detected)
+#   Archive: dist/source.tar.gz
+#
+# Output for bot modules (server: true):
+#   Bot module \u2014 no UI targets to bundle.
+#   Built: dist/server.js
+#   Archive: dist/source.tar.gz
 \`\`\`
 
+Build steps:
+1. UI targets (\`editor\`, \`layer\`, \`interactive\`, \`designer\`) \u2014 esbuild IIFE bundles
+2. Server handler (\`server: true\`) \u2014 compiles \`server/handler.ts\` to \`dist/server.js\` (ESM)
+3. CSS \u2014 Tailwind v4 auto-detected and compiled, or plain CSS copied
+4. Source archive \u2014 \`dist/source.tar.gz\`
+
 Warns if \`CHANGELOG.md\` is missing.
 
 ## lumio deploy
@@ -1259,6 +1545,11 @@ lumio deploy --breaking -v 2.0.0
 lumio deploy --draft
 \`\`\`
 
+Pre-flight checks before upload:
+- Sound files validated (format, existence in \`dist/sounds/\`, per-file size against limit)
+- Sound count, per-file size, and total storage checked against resolved limits from API
+- Manifest validated against schema
+
 After deploy:
 1. Version status = \`draft\`
 2. Submit for review via dashboard (\`/dashboard/extensions/{slug}/submit\`)
@@ -1427,7 +1718,7 @@ AuthContext::ExtensionToken {
 ### Token Lifecycle
 
 1. User opens extension in dashboard/overlay \u2014 Lumio server generates \`lm_ext_*\` token
-2. Token passed to Extension Runtime iframe: \`ext.lumio.vision/ext/{slug}/layer?token=lm_ext_xxx&install_id=uuid\` where \`slug\` includes the \`short_id\` prefix (e.g. \`k8f2x-my-extension\`); the store URL is \`/store/k8f2x-my-extension\`
+2. Token handed to the extension inside the sandbox; the Extension Runtime iframe runs on the extension's own origin \`<label>.runtime.ext.lumio.vision\` (\`<label>\` = extension UUID as 32 lowercase hex). The extension \`slug\` includes the \`short_id\` prefix (e.g. \`k8f2x-my-extension\`); the store URL is \`/store/k8f2x-my-extension\`
 3. SDK uses token for all API calls (server functions, storage, events)
 4. Token auto-refreshes via postMessage every 12 minutes (before 15-min expiry) \u2014 the Supervisor mediates the refresh
 5. On page reload, a new token is generated
@@ -1504,11 +1795,11 @@ Extensions run inside a 3-layer iframe sandbox. Understanding the layers is impo
 
 \`\`\`
 Host (lumio.vision / browser source)
-  \u2514\u2500\u2500 Supervisor iframe (supervisor.extension.lumio.vision)
+  \u2514\u2500\u2500 Supervisor iframe (supervisor.ext.lumio.vision)
         Purpose: validates postMessage traffic, enforces egress allowlist,
                  mediates token refresh, proxies LumioComponentNode[] to host
-        \u2514\u2500\u2500 Extension Runtime iframe (ext.lumio.vision)
-              Purpose: runs extension code on a separate origin
+        \u2514\u2500\u2500 Extension Runtime iframe (<label>.runtime.ext.lumio.vision)
+              Purpose: runs extension code on its own origin (one per extension)
               Storage: localStorage/sessionStorage BLOCKED (cross-origin isolation)
               \u2514\u2500\u2500 Web Worker
                     Purpose: V8 isolate for server function execution
@@ -1521,8 +1812,9 @@ Host (lumio.vision / browser source)
 - Mediates \`lm_ext_*\` token refresh (12 min interval, before 15 min expiry)
 - Forwards serialized \`LumioComponentNode[]\` to the Host renderer
 
-**Extension Runtime (ext.lumio.vision) origin isolation:**
+**Extension Runtime (<label>.runtime.ext.lumio.vision) origin isolation:**
 - Runs on a separate origin from the Host \u2014 this prevents direct DOM access and localStorage sharing
+- Every extension gets its own origin (\`<label>\` = extension UUID as 32 lowercase hex), so two extensions never share browser state
 - \`localStorage\` and \`sessionStorage\` throw \`DOMException: Access is denied\` \u2014 use \`useExtensionStorage()\` instead
 - \`document.cookie\` is unavailable
 - Cross-origin postMessage to the Host goes through the Supervisor
@@ -1697,22 +1989,46 @@ Lumio.render(<Overlay />, { target: "layer" });
 
 ## Config Schema
 
-Use \`config_schema\` in \`lumio.config.json\` for user-customizable settings. The Lumio dashboard renders these as a form in the Widget Gallery install flow \u2014 the user fills them in without needing to open the editor surface.
+Use \`config_schema\` in \`lumio.config.json\` for user-customizable settings. The widget editor auto-generates form fields from the schema \u2014 no custom \`editor.tsx\` needed for simple settings. For advanced UIs, use \`editor.tsx\` alongside (or instead of) config_schema.
+
+**Three valid combos:**
+- **config_schema only** \u2014 auto-generated editor form, \`targets: ["layer"]\`
+- **editor.tsx only** \u2014 fully custom React editor UI, \`targets: ["layer", "editor"]\`
+- **Both** \u2014 schema fields render first, editor.tsx renders below for advanced controls
+
+**Supported field types:** \`string\`, \`number\`, \`boolean\`, \`color\`, \`select\`, \`textarea\`, \`slider\`, \`font\`, \`icon\`, \`image\`, \`sound\`, \`multiselect\`, \`group\`, \`divider\`, \`info\`, \`channel\`, \`designer\`, \`presets\`
 
 \`\`\`json
 {
   "config_schema": [
-    { "key": "title", "type": "string", "label": "Widget Title", "default_value": "My Widget", "required": true },
-    { "key": "maxItems", "type": "number", "label": "Max Items", "default_value": 10, "required": false },
+    { "key": "title", "type": "string", "label": "Widget Title", "default_value": "My Widget", "required": true, "placeholder": "Enter title..." },
+    { "key": "fontSize", "type": "number", "label": "Font Size", "default_value": 16, "required": false, "min": 8, "max": 200, "unit": "px" },
+    { "key": "volume", "type": "slider", "label": "Volume", "default_value": 50, "required": false, "min": 0, "max": 100, "unit": "%" },
+    { "key": "theme", "type": "select", "label": "Color Theme", "options": ["dark", "light"], "default_value": "dark", "required": false },
+    { "key": "primaryColor", "type": "color", "label": "Primary Color", "default_value": "#43F7CD", "required": false },
     { "key": "showBorder", "type": "boolean", "label": "Show Border", "default_value": true, "required": false },
+    { "key": "targetDate", "type": "string", "label": "Target Date", "default_value": "", "required": false, "visible_when": { "key": "mode", "equals": "countdown" } },
     {
-      "key": "theme",
-      "type": "select",
-      "label": "Color Theme",
-      "options": ["dark", "light"],
-      "default_value": "dark",
-      "required": false
-    }
+      "key": "twitch_events", "type": "group", "label": "Twitch Events", "required": false, "collapsed": true,
+      "fields": [
+        { "key": "includeFollowers", "type": "boolean", "label": "Followers", "default_value": true, "required": false },
+        { "key": "includeSubs", "type": "boolean", "label": "Subscriptions", "default_value": true, "required": false }
+      ]
+    },
+    { "key": "separator", "type": "divider", "label": "", "required": false },
+    { "key": "help_text", "type": "info", "label": "", "required": false, "content": "Configure the events you want to display." }
+  ]
+}
+\`\`\`
+
+**Designer Schema:** Extensions can define a \`designer_schema\` alongside \`config_schema\` for a fullpage visual design editor. The designer opens as a fullpage overlay with the schema fields on the left and a live preview on the right. Designer values are stored under \`config.design\`.
+
+\`\`\`json
+{
+  "designer_schema": [
+    { "key": "bubbleColor", "type": "color", "label": "Chat Bubble Color", "default_value": "#9146FF", "required": false },
+    { "key": "nameFont", "type": "font", "label": "Username Font", "default_value": "Inter", "required": false },
+    { "key": "badgeSize", "type": "slider", "label": "Badge Size", "default_value": 18, "required": false, "min": 12, "max": 32, "unit": "px" }
   ]
 }
 \`\`\`
@@ -1722,7 +2038,7 @@ Read config values via \`useLumioConfig()\`:
 \`\`\`tsx
 const [config] = useLumioConfig();
 const title = config.title ?? "My Widget";
-const maxItems = config.maxItems ?? 10;
+const fontSize = config.fontSize ?? 16;
 \`\`\`
 
 **When to use config_schema vs storage:**
@@ -1770,7 +2086,7 @@ For beta testing before public launch:
 | Large inline images | Use URL-based images via \`Image\` component |
 | Missing \`Lumio.render()\` | Must be called within 10s of page load |
 | Hardcoded strings | Use \`config_schema\` fields for user-customizable text |
-| Using localStorage directly | Use \`useExtensionStorage()\` (localStorage blocked at ext.lumio.vision) |
+| Using localStorage directly | Use \`useExtensionStorage()\` (localStorage blocked on the Extension Runtime origin) |
 | Raw CSS \`@keyframes\` animations | Use \`useAnimation()\` + \`<Animated>\` SDK presets |
 
 ## Bot Module Security
@@ -1914,7 +2230,7 @@ var troubleshootingContent = `# Troubleshooting
 | \`BUNDLE_TOO_LARGE\` | Bundle exceeds size limit | Built bundle exceeds \`max_bundle_size_mb\` | Reduce bundle size or request limit increase |
 | \`SUPERVISOR_BLOCKED\` | Supervisor rejected postMessage | Message origin or schema invalid | Ensure you are in the correct iframe layer; do not post to Host directly |
 | \`WORKER_CREATION_FAILED\` | Web Worker could not start | Server functions bundle is invalid or too large | Check for syntax errors in server functions; run \`lumio build\` locally |
-| \`STORAGE_DOM_EXCEPTION\` | localStorage/sessionStorage access attempt | Extension Runtime (ext.lumio.vision) blocks storage APIs | Replace \`localStorage.setItem\` with \`useExtensionStorage()\` |
+| \`STORAGE_DOM_EXCEPTION\` | localStorage/sessionStorage access attempt | Extension Runtime (<label>.runtime.ext.lumio.vision) blocks storage APIs | Replace \`localStorage.setItem\` with \`useExtensionStorage()\` |
 | \`SLUG_FORMAT_INVALID\` | Slug does not match short-ID format | Manually edited slug in \`lumio.config.json\` | Use auto-generated slug (\`k8f2x-my-extension\` format) or run \`lumio init\` |
 
 ## Common Issues
@@ -1952,7 +2268,7 @@ The SDK auto-refreshes \`lm_ext_*\` tokens via postMessage. The Supervisor media
 ### Supervisor blocked messages (\`SUPERVISOR_BLOCKED\`)
 The Supervisor validates all postMessage traffic between Extension Runtime and Host. If you see this error:
 1. Do not post messages directly from extension code to \`window.parent.parent\` (Host) \u2014 always use SDK hooks
-2. Verify the extension iframe is loaded inside \`supervisor.extension.lumio.vision\`, not directly in the Host
+2. Verify the extension iframe is loaded inside \`supervisor.ext.lumio.vision\`, not directly in the Host
 3. Check that the message schema matches the \`@zaflun/lumio-protocol\` wire format (SDK handles this automatically)
 
 ### Worker creation failures (\`WORKER_CREATION_FAILED\`)
@@ -1962,7 +2278,7 @@ The V8 isolate Web Worker for server functions failed to start:
 3. Check \`lumio logs\` for the underlying JS error from the Worker initializer
 
 ### Storage DOMException errors (\`STORAGE_DOM_EXCEPTION\`)
-\`localStorage\` and \`sessionStorage\` are blocked on the Extension Runtime origin (\`ext.lumio.vision\`):
+\`localStorage\` and \`sessionStorage\` are blocked on the Extension Runtime origin (\`<label>.runtime.ext.lumio.vision\`):
 1. Replace all \`localStorage.setItem\` / \`localStorage.getItem\` calls with \`useExtensionStorage()\`
 2. Replace all \`sessionStorage\` usage with \`useVisionState()\` for transient values
 3. For server-side persistence, use \`ctx.db\` in server functions

package/dist/index.js

@@ -2,7 +2,7 @@ import {
   ROOT_FILES,
   SKILL_FILES,
   installSkillFiles
-} from "./chunk-SSYJXSJX.js";
+} from "./chunk-TKNV5K6F.js";
 export {
   ROOT_FILES,
   SKILL_FILES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaflun/lumio-agent-skill",
-  "version": "0.4.0",
+  "version": "0.5.3",
   "description": "AI agent skill files for building Lumio Extensions",
   "type": "module",
   "main": "dist/index.js",
@@ -27,10 +27,10 @@
   },
   "license": "MIT",
   "devDependencies": {
-    "@types/node": "^22.0.0",
+    "@types/node": "^26.1.2",
     "tsup": "^8.4.0",
-    "typescript": "^5.8.3",
-    "vitest": "^3.1.4"
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.10"
   },
   "repository": {
     "type": "git",