lua-cli 3.12.2 → 3.13.0

package/dist/utils/write-info.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Pure stdout writer (extracted so {@link ./hints.ts} stays importable in
+ * tests — `cli.ts` itself uses `import.meta.url` which ts-jest can't compile).
+ *
+ * Mirrors the existing `writeInfo` from `./cli.ts`: clears the current
+ * progress line via `\r\x1b[K` and writes `<message>\n`.
+ */
+export declare function writeInfo(message: string): void;
+//# sourceMappingURL=write-info.d.ts.map

package/dist/utils/write-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-info.d.ts","sourceRoot":"","sources":["../../src/utils/write-info.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE/C"}

package/dist/utils/write-info.js

@@ -0,0 +1,11 @@
+/**
+ * Pure stdout writer (extracted so {@link ./hints.ts} stays importable in
+ * tests — `cli.ts` itself uses `import.meta.url` which ts-jest can't compile).
+ *
+ * Mirrors the existing `writeInfo` from `./cli.ts`: clears the current
+ * progress line via `\r\x1b[K` and writes `<message>\n`.
+ */
+export function writeInfo(message) {
+    process.stdout.write('\r\x1b[K' + message + '\n');
+}
+//# sourceMappingURL=write-info.js.map

package/dist/utils/write-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-info.js","sourceRoot":"","sources":["../../src/utils/write-info.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;AACpD,CAAC"}

package/docs/README.md

@@ -1,6 +1,6 @@
 # Lua CLI - Complete API Documentation
 
-Welcome to the comprehensive API documentation for lua-cli v3.12.0. This guide covers every API, class, and function exported by the package.
+Welcome to the comprehensive API documentation for lua-cli v3.13.0. This guide covers every API, class, and function exported by the package.
 
 ## 📚 Documentation Index
 

package/node_modules/@lua/shared-types/dist/index.d.mts

@@ -5,7 +5,7 @@ import { FinishReason, LanguageModelUsage, ReasoningOutput, CallWarning, UserCon
  * Represents the communication channel through which a request originated.
  * Known channels are typed as string literals, unrecognized channels are unknown.
  */
-type Channel = 'web' | 'whatsapp' | 'facebook' | 'instagram' | 'slack' | 'teams' | 'messagebird' | 'front' | 'api' | 'dev' | 'email' | 'rcs' | 'sms' | 'mms' | 'device' | string;
+type Channel = 'web' | 'meeting' | 'whatsapp' | 'facebook' | 'instagram' | 'slack' | 'teams' | 'messagebird' | 'front' | 'api' | 'dev' | 'email' | 'rcs' | 'sms' | 'mms' | 'device' | string;
 
 /**
  * MIME types supported by Unstructured.io for document text extraction.
@@ -337,6 +337,50 @@ interface CachedDeviceTriggerDefinition {
     env: Record<string, string>;
 }
 
+/**
+ * Client-Injected Tools
+ *
+ * Lets a chat client (Lua Desktop, custom front-ends, future surfaces) declare
+ * tools that the agent can call but the *client* renders/handles. Mirrors the
+ * pattern used by Claude Code, OpenAI Apps SDK, and Anthropic's MCP — the
+ * surface the user sees gets to add capabilities to the agent without changing
+ * the agent itself.
+ *
+ * Tool calls flow through Mastra's existing `tool-call` stream chunks; the
+ * server registers the tool with a no-op `execute` (returns `{ ok: true,
+ * clientHandled: true }`) so the model sees a clean ack and can continue. The
+ * actual rendering / side-effect happens on the client when it sees the
+ * tool-call chunk.
+ *
+ * Tool names are namespaced server-side as `client__<name>` to avoid collisions
+ * with built-in tools (skills, MCP, devices, voice). Same pattern as device
+ * tools (`device__<name>__<command>`).
+ */
+interface ClientToolDef {
+    /** Unprefixed tool name as the client refers to it (e.g. "create_artifact"). Server prefixes with `client__`. */
+    name: string;
+    /** Human/LLM-readable description of when to call this tool. */
+    description: string;
+    /**
+     * JSON Schema for the tool's input. Hydrated server-side into a Zod schema
+     * via the shared `jsonSchemaToZod` util. Same subset supported as device
+     * tools — object with string/number/boolean/array properties, `required`,
+     * `default`, `description`, `enum`.
+     */
+    parameters: Record<string, unknown>;
+}
+/**
+ * Server-side prefix for client tool names. Keeps client tools from
+ * shadowing skills, MCP tools, devices (`device__`), or voice tools.
+ */
+declare const CLIENT_TOOL_PREFIX = "client__";
+/**
+ * Maximum number of client tools accepted per request. Keeps the model's
+ * tool list bounded — at this many tools the model starts losing precision
+ * picking the right one anyway.
+ */
+declare const CLIENT_TOOLS_MAX = 20;
+
 /**
  * Shared type definitions for the model registry.
  *
@@ -396,4 +440,22 @@ interface GovernanceConfig {
  */
 declare function buildDefaultPersona(agentName: string): string;
 
-export { type AgentInvocationInput, type AgentInvocationOutput, type AiGenerateInput, type AiGenerateOutput, type AiGenerateSource, type AiGenerateToolCall, type AiGenerateToolResult, type ApprovedModelDef, type BatchingConfig, type CachedDeviceCommand, type CachedDeviceDefinition, type CachedDeviceTrigger, type CachedDeviceTriggerDefinition, type Channel, type CommandHashData, type CommandState, type CommandStreamEntry, type DeviceCommandDefinition, type DeviceCommandMessage, type DeviceInfo, type DeviceResponseMessage, type DeviceStatus, type DeviceTriggerAckMessage, type DeviceTriggerMessage, type GovernanceConfig, REQUIRED_ENUMS, REQUIRED_NESTED_APIS, REQUIRED_PLATFORM_APIS, REQUIRED_PRIMITIVE_SHIMS, REQUIRED_UTILITIES, type ResponseStreamEntry, type TriggerStreamEntry, UNSTRUCTURED_SUPPORTED_MEDIA_TYPES, aiGenerateInputFromSimplified, buildDefaultPersona };
+declare const AGENT_LOG_SOURCES: readonly ["skill", "job", "webhook", "preprocessor", "postprocessor", "user_message", "agent_response", "agent_error", "runtime", "mcp", "rag", "device", "device-trigger"];
+type AgentLogSource = (typeof AGENT_LOG_SOURCES)[number];
+interface AgentLogMetadata {
+    userId?: string;
+    agentId?: string;
+    /** Agent runtime / conversation thread ID for distributed tracing */
+    runId?: string;
+    logSource?: AgentLogSource;
+    /** The ID of the source entity (skillId, jobId, webhookId, etc.) */
+    primitiveId?: string;
+    /** The display name of the source entity */
+    primitiveName?: string;
+    toolId?: string;
+    toolName?: string;
+    /** Messaging channel: 'whatsapp', 'slack', 'email', etc. */
+    channel?: string;
+}
+
+export { AGENT_LOG_SOURCES, type AgentInvocationInput, type AgentInvocationOutput, type AgentLogMetadata, type AgentLogSource, type AiGenerateInput, type AiGenerateOutput, type AiGenerateSource, type AiGenerateToolCall, type AiGenerateToolResult, type ApprovedModelDef, type BatchingConfig, CLIENT_TOOLS_MAX, CLIENT_TOOL_PREFIX, type CachedDeviceCommand, type CachedDeviceDefinition, type CachedDeviceTrigger, type CachedDeviceTriggerDefinition, type Channel, type ClientToolDef, type CommandHashData, type CommandState, type CommandStreamEntry, type DeviceCommandDefinition, type DeviceCommandMessage, type DeviceInfo, type DeviceResponseMessage, type DeviceStatus, type DeviceTriggerAckMessage, type DeviceTriggerMessage, type GovernanceConfig, REQUIRED_ENUMS, REQUIRED_NESTED_APIS, REQUIRED_PLATFORM_APIS, REQUIRED_PRIMITIVE_SHIMS, REQUIRED_UTILITIES, type ResponseStreamEntry, type TriggerStreamEntry, UNSTRUCTURED_SUPPORTED_MEDIA_TYPES, aiGenerateInputFromSimplified, buildDefaultPersona };

package/node_modules/@lua/shared-types/dist/index.d.ts

@@ -5,7 +5,7 @@ import { FinishReason, LanguageModelUsage, ReasoningOutput, CallWarning, UserCon
  * Represents the communication channel through which a request originated.
  * Known channels are typed as string literals, unrecognized channels are unknown.
  */
-type Channel = 'web' | 'whatsapp' | 'facebook' | 'instagram' | 'slack' | 'teams' | 'messagebird' | 'front' | 'api' | 'dev' | 'email' | 'rcs' | 'sms' | 'mms' | 'device' | string;
+type Channel = 'web' | 'meeting' | 'whatsapp' | 'facebook' | 'instagram' | 'slack' | 'teams' | 'messagebird' | 'front' | 'api' | 'dev' | 'email' | 'rcs' | 'sms' | 'mms' | 'device' | string;
 
 /**
  * MIME types supported by Unstructured.io for document text extraction.
@@ -337,6 +337,50 @@ interface CachedDeviceTriggerDefinition {
     env: Record<string, string>;
 }
 
+/**
+ * Client-Injected Tools
+ *
+ * Lets a chat client (Lua Desktop, custom front-ends, future surfaces) declare
+ * tools that the agent can call but the *client* renders/handles. Mirrors the
+ * pattern used by Claude Code, OpenAI Apps SDK, and Anthropic's MCP — the
+ * surface the user sees gets to add capabilities to the agent without changing
+ * the agent itself.
+ *
+ * Tool calls flow through Mastra's existing `tool-call` stream chunks; the
+ * server registers the tool with a no-op `execute` (returns `{ ok: true,
+ * clientHandled: true }`) so the model sees a clean ack and can continue. The
+ * actual rendering / side-effect happens on the client when it sees the
+ * tool-call chunk.
+ *
+ * Tool names are namespaced server-side as `client__<name>` to avoid collisions
+ * with built-in tools (skills, MCP, devices, voice). Same pattern as device
+ * tools (`device__<name>__<command>`).
+ */
+interface ClientToolDef {
+    /** Unprefixed tool name as the client refers to it (e.g. "create_artifact"). Server prefixes with `client__`. */
+    name: string;
+    /** Human/LLM-readable description of when to call this tool. */
+    description: string;
+    /**
+     * JSON Schema for the tool's input. Hydrated server-side into a Zod schema
+     * via the shared `jsonSchemaToZod` util. Same subset supported as device
+     * tools — object with string/number/boolean/array properties, `required`,
+     * `default`, `description`, `enum`.
+     */
+    parameters: Record<string, unknown>;
+}
+/**
+ * Server-side prefix for client tool names. Keeps client tools from
+ * shadowing skills, MCP tools, devices (`device__`), or voice tools.
+ */
+declare const CLIENT_TOOL_PREFIX = "client__";
+/**
+ * Maximum number of client tools accepted per request. Keeps the model's
+ * tool list bounded — at this many tools the model starts losing precision
+ * picking the right one anyway.
+ */
+declare const CLIENT_TOOLS_MAX = 20;
+
 /**
  * Shared type definitions for the model registry.
  *
@@ -396,4 +440,22 @@ interface GovernanceConfig {
  */
 declare function buildDefaultPersona(agentName: string): string;
 
-export { type AgentInvocationInput, type AgentInvocationOutput, type AiGenerateInput, type AiGenerateOutput, type AiGenerateSource, type AiGenerateToolCall, type AiGenerateToolResult, type ApprovedModelDef, type BatchingConfig, type CachedDeviceCommand, type CachedDeviceDefinition, type CachedDeviceTrigger, type CachedDeviceTriggerDefinition, type Channel, type CommandHashData, type CommandState, type CommandStreamEntry, type DeviceCommandDefinition, type DeviceCommandMessage, type DeviceInfo, type DeviceResponseMessage, type DeviceStatus, type DeviceTriggerAckMessage, type DeviceTriggerMessage, type GovernanceConfig, REQUIRED_ENUMS, REQUIRED_NESTED_APIS, REQUIRED_PLATFORM_APIS, REQUIRED_PRIMITIVE_SHIMS, REQUIRED_UTILITIES, type ResponseStreamEntry, type TriggerStreamEntry, UNSTRUCTURED_SUPPORTED_MEDIA_TYPES, aiGenerateInputFromSimplified, buildDefaultPersona };
+declare const AGENT_LOG_SOURCES: readonly ["skill", "job", "webhook", "preprocessor", "postprocessor", "user_message", "agent_response", "agent_error", "runtime", "mcp", "rag", "device", "device-trigger"];
+type AgentLogSource = (typeof AGENT_LOG_SOURCES)[number];
+interface AgentLogMetadata {
+    userId?: string;
+    agentId?: string;
+    /** Agent runtime / conversation thread ID for distributed tracing */
+    runId?: string;
+    logSource?: AgentLogSource;
+    /** The ID of the source entity (skillId, jobId, webhookId, etc.) */
+    primitiveId?: string;
+    /** The display name of the source entity */
+    primitiveName?: string;
+    toolId?: string;
+    toolName?: string;
+    /** Messaging channel: 'whatsapp', 'slack', 'email', etc. */
+    channel?: string;
+}
+
+export { AGENT_LOG_SOURCES, type AgentInvocationInput, type AgentInvocationOutput, type AgentLogMetadata, type AgentLogSource, type AiGenerateInput, type AiGenerateOutput, type AiGenerateSource, type AiGenerateToolCall, type AiGenerateToolResult, type ApprovedModelDef, type BatchingConfig, CLIENT_TOOLS_MAX, CLIENT_TOOL_PREFIX, type CachedDeviceCommand, type CachedDeviceDefinition, type CachedDeviceTrigger, type CachedDeviceTriggerDefinition, type Channel, type ClientToolDef, type CommandHashData, type CommandState, type CommandStreamEntry, type DeviceCommandDefinition, type DeviceCommandMessage, type DeviceInfo, type DeviceResponseMessage, type DeviceStatus, type DeviceTriggerAckMessage, type DeviceTriggerMessage, type GovernanceConfig, REQUIRED_ENUMS, REQUIRED_NESTED_APIS, REQUIRED_PLATFORM_APIS, REQUIRED_PRIMITIVE_SHIMS, REQUIRED_UTILITIES, type ResponseStreamEntry, type TriggerStreamEntry, UNSTRUCTURED_SUPPORTED_MEDIA_TYPES, aiGenerateInputFromSimplified, buildDefaultPersona };

package/node_modules/@lua/shared-types/dist/index.js

@@ -20,6 +20,9 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  AGENT_LOG_SOURCES: () => AGENT_LOG_SOURCES,
+  CLIENT_TOOLS_MAX: () => CLIENT_TOOLS_MAX,
+  CLIENT_TOOL_PREFIX: () => CLIENT_TOOL_PREFIX,
   REQUIRED_ENUMS: () => REQUIRED_ENUMS,
   REQUIRED_NESTED_APIS: () => REQUIRED_NESTED_APIS,
   REQUIRED_PLATFORM_APIS: () => REQUIRED_PLATFORM_APIS,
@@ -208,6 +211,10 @@ var REQUIRED_UTILITIES = [
   "env"
 ];
 
+// src/client-tools.types.ts
+var CLIENT_TOOL_PREFIX = "client__";
+var CLIENT_TOOLS_MAX = 20;
+
 // src/persona-defaults.ts
 var AGENT_NAME_TOKEN = "[Your Agent Name]";
 var DEFAULT_PERSONA_GUIDE = `# ${AGENT_NAME_TOKEN} - Persona
@@ -260,8 +267,28 @@ function buildDefaultPersona(agentName) {
   return DEFAULT_PERSONA_GUIDE.replace(AGENT_NAME_TOKEN, () => agentName || "My Agent");
 }
 __name(buildDefaultPersona, "buildDefaultPersona");
+
+// src/vm-execution-log.types.ts
+var AGENT_LOG_SOURCES = [
+  "skill",
+  "job",
+  "webhook",
+  "preprocessor",
+  "postprocessor",
+  "user_message",
+  "agent_response",
+  "agent_error",
+  "runtime",
+  "mcp",
+  "rag",
+  "device",
+  "device-trigger"
+];
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AGENT_LOG_SOURCES,
+  CLIENT_TOOLS_MAX,
+  CLIENT_TOOL_PREFIX,
   REQUIRED_ENUMS,
   REQUIRED_NESTED_APIS,
   REQUIRED_PLATFORM_APIS,

package/node_modules/@lua/shared-types/dist/index.mjs

@@ -178,6 +178,10 @@ var REQUIRED_UTILITIES = [
   "env"
 ];
 
+// src/client-tools.types.ts
+var CLIENT_TOOL_PREFIX = "client__";
+var CLIENT_TOOLS_MAX = 20;
+
 // src/persona-defaults.ts
 var AGENT_NAME_TOKEN = "[Your Agent Name]";
 var DEFAULT_PERSONA_GUIDE = `# ${AGENT_NAME_TOKEN} - Persona
@@ -230,7 +234,27 @@ function buildDefaultPersona(agentName) {
   return DEFAULT_PERSONA_GUIDE.replace(AGENT_NAME_TOKEN, () => agentName || "My Agent");
 }
 __name(buildDefaultPersona, "buildDefaultPersona");
+
+// src/vm-execution-log.types.ts
+var AGENT_LOG_SOURCES = [
+  "skill",
+  "job",
+  "webhook",
+  "preprocessor",
+  "postprocessor",
+  "user_message",
+  "agent_response",
+  "agent_error",
+  "runtime",
+  "mcp",
+  "rag",
+  "device",
+  "device-trigger"
+];
 export {
+  AGENT_LOG_SOURCES,
+  CLIENT_TOOLS_MAX,
+  CLIENT_TOOL_PREFIX,
   REQUIRED_ENUMS,
   REQUIRED_NESTED_APIS,
   REQUIRED_PLATFORM_APIS,

package/node_modules/@lua/shared-types/src/channel.type.ts

@@ -5,6 +5,7 @@
  */
 export type Channel =
   | 'web' // Chat widget on a website
+  | 'meeting' // Recall.ai-backed meeting transport
   | 'whatsapp' // WhatsApp integration
   | 'facebook' // Facebook Messenger integration
   | 'instagram' // Instagram integration

package/node_modules/@lua/shared-types/src/client-tools.types.ts

@@ -0,0 +1,47 @@
+/**
+ * Client-Injected Tools
+ *
+ * Lets a chat client (Lua Desktop, custom front-ends, future surfaces) declare
+ * tools that the agent can call but the *client* renders/handles. Mirrors the
+ * pattern used by Claude Code, OpenAI Apps SDK, and Anthropic's MCP — the
+ * surface the user sees gets to add capabilities to the agent without changing
+ * the agent itself.
+ *
+ * Tool calls flow through Mastra's existing `tool-call` stream chunks; the
+ * server registers the tool with a no-op `execute` (returns `{ ok: true,
+ * clientHandled: true }`) so the model sees a clean ack and can continue. The
+ * actual rendering / side-effect happens on the client when it sees the
+ * tool-call chunk.
+ *
+ * Tool names are namespaced server-side as `client__<name>` to avoid collisions
+ * with built-in tools (skills, MCP, devices, voice). Same pattern as device
+ * tools (`device__<name>__<command>`).
+ */
+export interface ClientToolDef {
+  /** Unprefixed tool name as the client refers to it (e.g. "create_artifact"). Server prefixes with `client__`. */
+  name: string;
+
+  /** Human/LLM-readable description of when to call this tool. */
+  description: string;
+
+  /**
+   * JSON Schema for the tool's input. Hydrated server-side into a Zod schema
+   * via the shared `jsonSchemaToZod` util. Same subset supported as device
+   * tools — object with string/number/boolean/array properties, `required`,
+   * `default`, `description`, `enum`.
+   */
+  parameters: Record<string, unknown>;
+}
+
+/**
+ * Server-side prefix for client tool names. Keeps client tools from
+ * shadowing skills, MCP tools, devices (`device__`), or voice tools.
+ */
+export const CLIENT_TOOL_PREFIX = 'client__';
+
+/**
+ * Maximum number of client tools accepted per request. Keeps the model's
+ * tool list bounded — at this many tools the model starts losing precision
+ * picking the right one anyway.
+ */
+export const CLIENT_TOOLS_MAX = 20;

package/node_modules/@lua/shared-types/src/index.ts

@@ -5,6 +5,8 @@ export * from './ai-generate.utils';
 export * from './agent-invocation.types';
 export * from './sandbox-contract';
 export * from './device.types';
+export * from './client-tools.types';
 export * from './model-registry';
 export * from './agent-config.types';
 export * from './persona-defaults';
+export * from './vm-execution-log.types';

package/node_modules/@lua/shared-types/src/vm-execution-log.types.ts

@@ -0,0 +1,41 @@
+// ─── Canonical log-source enum ────────────────────────────────────────────────
+// Single source of truth for all `logSource` values written to the
+// `vmExecutionLogs` collection. Every consumer (lua-core, lua-api, lua-cli,
+// lua-web) must import from here — never define the union inline elsewhere.
+//
+// NOTE: This lives in shared-types (not shared-schemas) so that lightweight
+// consumers such as lua-cli can import it without pulling in Mongoose schemas.
+
+export const AGENT_LOG_SOURCES = [
+  'skill',          // User-defined skill executions
+  'job',            // Scheduled job executions
+  'webhook',        // HTTP webhook endpoint executions
+  'preprocessor',   // Message preprocessor executions
+  'postprocessor',  // Response postprocessor executions
+  'user_message',   // Incoming user messages
+  'agent_response', // Outgoing agent responses
+  'agent_error',    // Chat pipeline errors (billing, validation, LLM failures)
+  'runtime',        // Agent runtime / LLM SDK / MCP transport / framework-level logs
+  'mcp',            // MCP tool executions
+  'rag',            // RAG knowledge-base search executions
+  'device',         // Device command executions
+  'device-trigger', // Device trigger handler executions
+] as const;
+
+export type AgentLogSource = (typeof AGENT_LOG_SOURCES)[number];
+
+export interface AgentLogMetadata {
+  userId?: string;
+  agentId?: string;
+  /** Agent runtime / conversation thread ID for distributed tracing */
+  runId?: string;
+  logSource?: AgentLogSource;
+  /** The ID of the source entity (skillId, jobId, webhookId, etc.) */
+  primitiveId?: string;
+  /** The display name of the source entity */
+  primitiveName?: string;
+  toolId?: string;
+  toolName?: string;
+  /** Messaging channel: 'whatsapp', 'slack', 'email', etc. */
+  channel?: string;
+}

package/package.json

@@ -1,18 +1,21 @@
 {
   "name": "lua-cli",
-  "version": "3.12.2",
+  "version": "3.13.0",
   "description": "Build, test, and deploy AI agents with custom tools, webhooks, and scheduled jobs. Features LuaAgent unified configuration, streaming chat, and batch deployment.",
   "readmeFilename": "README.md",
   "main": "dist/api-exports.js",
   "bin": {
-    "lua": "./dist/index.js"
+    "lua": "./dist/index.js",
+    "heylua": "./dist/index.js",
+    "lua-ai": "./dist/index.js"
   },
   "exports": {
     ".": "./dist/api-exports.js"
   },
   "scripts": {
     "clean": "rm -rf dist",
-    "build": "npm run clean && tsc && chmod +x dist/index.js",
+    "build": "npm run clean && tsc && npm run build:vendor && chmod +x dist/index.js",
+    "build:vendor": "node scripts/build-vendor.mjs",
     "prepack": "node scripts/resolve-workspace-deps.cjs",
     "postpack": "git checkout package.json",
     "prepublishOnly": "npm run build",
@@ -61,7 +64,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@lua/shared-types": "workspace:*",
+    "@lua/shared-types": "0.0.1",
     "@tailwindcss/postcss": "^4.1.14",
     "@tanstack/react-query": "^5.90.11",
     "@truestamp/canonify": "^2.1.0",
@@ -78,13 +81,15 @@
     "posthog-node": "^5.26.0",
     "ts-evaluator": "^2.0.0",
     "ts-morph": "^27.0.0",
-    "zod": "^3.24.1",
+    "zod": "^3.25.76",
     "zod-to-json-schema": "^3.24.6"
   },
   "bundledDependencies": [
     "@lua/shared-types"
   ],
   "devDependencies": {
+    "@swc/core": "^1.15.0",
+    "@swc/jest": "^0.2.39",
     "@types/diff": "^7.0.2",
     "@types/inquirer": "^9.0.9",
     "@types/jest": "^29.5.8",
@@ -96,7 +101,6 @@
     "lodash": "^4.17.21",
     "nock": "^14.0.11",
     "stripe": "^19.2.0",
-    "ts-jest": "^29.1.1",
     "ts-node": "^10.9.2",
     "typescript": "^5.9.2"
   }

package/scripts/build-vendor.mjs

@@ -0,0 +1,53 @@
+#!/usr/bin/env node
+/**
+ * Bundles `zod` and `zod-to-json-schema` into a single self-contained ESM
+ * file at `dist/compiler/utils/zod-runtime.mjs`.
+ *
+ * Why: `schema-converter.ts` previously did `await import('zod')` at runtime,
+ * which made the compiler depend on the user's `lua-cli/node_modules/zod`
+ * being intact. Real-world npm/pnpm installs are sometimes corrupted (empty
+ * package dirs, partial extracts, hoisting conflicts), causing the dynamic
+ * import to throw `ERR_MODULE_NOT_FOUND` and tools to ship with no
+ * `inputSchema` — a silent failure that breaks deployed agents.
+ *
+ * This script ships zod inside lua-cli's own dist folder so resolution is
+ * anchored to a path lua-cli fully controls (`import.meta.url`-relative).
+ */
+
+import { build } from 'esbuild';
+import { fileURLToPath } from 'node:url';
+import path from 'node:path';
+import fs from 'node:fs/promises';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const packageRoot = path.resolve(__dirname, '..');
+const entry = path.join(packageRoot, 'scripts', 'vendor-entry.mjs');
+const outdir = path.join(packageRoot, 'dist', 'compiler', 'utils');
+const outfile = path.join(outdir, 'zod-runtime.mjs');
+
+await fs.mkdir(outdir, { recursive: true });
+
+const result = await build({
+  entryPoints: [entry],
+  outfile,
+  bundle: true,
+  format: 'esm',
+  platform: 'node',
+  target: 'node18',
+  // Keep readable bundle so stack traces remain useful when something goes
+  // wrong in user-supplied zod schemas.
+  minify: false,
+  sourcemap: false,
+  legalComments: 'none',
+  metafile: true,
+});
+
+const stat = await fs.stat(outfile);
+const sizeKb = (stat.size / 1024).toFixed(1);
+
+const inputs = Object.keys(result.metafile.inputs).filter(
+  (p) => p.includes('node_modules/zod') || p.includes('node_modules/zod-to-json-schema'),
+);
+console.log(`✅ Vendored ${inputs.length} files into dist/compiler/utils/zod-runtime.mjs (${sizeKb} KB)`);

package/scripts/vendor-entry.mjs

@@ -0,0 +1,11 @@
+/**
+ * Vendor entry point for the schema converter runtime.
+ *
+ * Bundled by `scripts/build-vendor.mjs` into
+ * `dist/compiler/utils/zod-runtime.mjs` so the compiler does not depend on
+ * `node_modules/zod` resolution at runtime. See
+ * `src/compiler/utils/schema-converter.ts` for the consumer.
+ */
+
+export { z } from 'zod';
+export { zodToJsonSchema } from 'zod-to-json-schema';

package/template/examples/skills/tools/CustomDataTool.ts

@@ -77,11 +77,7 @@ export class UpdateMovieTool implements LuaTool {
     searchText: z.string().optional().describe("Updated search text for better discoverability")
   });
   async execute(input: z.infer<typeof this.inputSchema>) {
-    const updateData: any = { data: input.updates };
-    if (input.searchText) {
-      updateData.searchText = input.searchText;
-    }
-    return Data.update("movies", input.movieId, updateData);
+    return Data.update("movies", input.movieId, input.updates, input.searchText);
   }
 }
 

package/template/examples/skills/tools/PremiumFeatureTool.ts

@@ -27,7 +27,7 @@ export default class PremiumFeatureTool implements LuaTool {
             minPrice: z.number().optional().describe("Minimum price filter"),
             maxPrice: z.number().optional().describe("Maximum price filter"),
         }).optional().describe("Optional filters"),
-        sortBy: z.enum(["relevance", "price_asc", "price_desc", "newest"]).optional().describe("Sort order")
+        sortBy: z.enum(["relevance", "price_asc", "price_desc"]).optional().describe("Sort order")
     });
 
     /**
@@ -39,8 +39,9 @@ export default class PremiumFeatureTool implements LuaTool {
      * If condition throws an error, the tool is disabled (fail-closed behavior).
      */
     condition = async () => {
-        // Get the current user's data
+        // Get the current user's data (returns null when called outside a conversation)
         const user = await User.get();
+        if (!user) return false;
         
         // Check if user has premium subscription
         // The 'data' field contains custom user data stored via User.update()
@@ -58,33 +59,32 @@ export default class PremiumFeatureTool implements LuaTool {
         // This only runs if condition returned true
         const { query, filters, sortBy } = input;
         
-        // Example: Search products with advanced filters
-        const searchOptions: any = {
-            query,
-            limit: 20,
-        };
+        // Products.search(query) — returns ProductSearchInstance (iterable, has .products)
+        const searchResult = await Products.search(query);
+        const products = searchResult.products;
         
+        // Apply filters client-side
+        let filteredResults = products;
+
         if (filters?.category) {
-            searchOptions.category = filters.category;
-        }
-        
-        if (sortBy) {
-            searchOptions.sortBy = sortBy;
+            filteredResults = filteredResults.filter(p => p.category === filters.category);
         }
 
-        const searchResult = await Products.search(searchOptions);
-        const products = searchResult.products;
-        
-        // Apply price filters if provided
-        let filteredResults = products;
         if (filters?.minPrice !== undefined || filters?.maxPrice !== undefined) {
-            filteredResults = products.filter((product) => {
+            filteredResults = filteredResults.filter((product) => {
                 const price = product.price || 0;
                 if (filters.minPrice !== undefined && price < filters.minPrice) return false;
                 if (filters.maxPrice !== undefined && price > filters.maxPrice) return false;
                 return true;
             });
         }
+
+        // Sort client-side when requested
+        if (sortBy === "price_asc") {
+            filteredResults = [...filteredResults].sort((a, b) => (a.price || 0) - (b.price || 0));
+        } else if (sortBy === "price_desc") {
+            filteredResults = [...filteredResults].sort((a, b) => (b.price || 0) - (a.price || 0));
+        }
         
         return {
             query,

package/template/package.json

@@ -20,7 +20,7 @@
     "inquirer": "^12.9.6",
     "stripe": "^17.5.0",
     "js-yaml": "^4.1.0",
-    "lua-cli": "^3.12.2",
+    "lua-cli": "^3.13.0",
     "openai": "^5.23.0",
     "uuid": "^13.0.0",
     "zod": "^3.24.1"