lua-cli 3.17.4 → 3.18.0

package/dist/api-exports.js

@@ -9,403 +9,6 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// src/interfaces/baskets.ts
-var BasketStatus;
-var init_baskets = __esm({
-  "src/interfaces/baskets.ts"() {
-    "use strict";
-    BasketStatus = /* @__PURE__ */ (function(BasketStatus2) {
-      BasketStatus2["ACTIVE"] = "active";
-      BasketStatus2["CHECKED_OUT"] = "checked_out";
-      BasketStatus2["ABANDONED"] = "abandoned";
-      BasketStatus2["EXPIRED"] = "expired";
-      return BasketStatus2;
-    })({});
-  }
-});
-
-// src/config/constants.ts
-import { join } from "path";
-import { homedir } from "os";
-var CLI_CONFIG_DIR, VERSION_CHECK_FILE, TELEMETRY_FILE, CLI_CACHE_FILE, BASE_URLS, CREDENTIALS_FILE, SANDBOX_STORAGE_FILE, AUTH_STORAGE_FILE;
-var init_constants = __esm({
-  "src/config/constants.ts"() {
-    "use strict";
-    CLI_CONFIG_DIR = join(homedir(), ".lua-cli");
-    VERSION_CHECK_FILE = join(CLI_CONFIG_DIR, "version-check.json");
-    TELEMETRY_FILE = join(CLI_CONFIG_DIR, "telemetry.json");
-    CLI_CACHE_FILE = join(CLI_CONFIG_DIR, "cache.json");
-    BASE_URLS = {
-      API: process.env.LUA_API_URL || "https://api.heylua.ai",
-      AUTH: process.env.LUA_AUTH_URL || "https://auth.heylua.ai",
-      CHAT: process.env.LUA_API_URL || "https://api.heylua.ai",
-      WEBHOOK: "https://webhook.heylua.ai",
-      CDN: "https://cdn.heylua.ai"
-    };
-    CREDENTIALS_FILE = join(CLI_CONFIG_DIR, "credentials");
-    SANDBOX_STORAGE_FILE = join(CLI_CONFIG_DIR, "sandbox.json");
-    AUTH_STORAGE_FILE = join(CLI_CONFIG_DIR, "auth.json");
-  }
-});
-
-// src/errors/auth.error.ts
-var AuthenticationError;
-var init_auth_error = __esm({
-  "src/errors/auth.error.ts"() {
-    "use strict";
-    AuthenticationError = class _AuthenticationError extends Error {
-      static {
-        __name(this, "AuthenticationError");
-      }
-      statusCode = 401;
-      isAuthenticationError = true;
-      reason;
-      serverMessage;
-      /**
-      * If true, the error message already contains complete remediation steps
-      * and `withErrorHandling` should not append its own hint block. Use this
-      * when the throw site has more context about the right fix than the
-      * generic per-reason hints (e.g. `getToken()` listing all three ways to
-      * configure a key — keychain, env var, .env file).
-      */
-      suppressDefaultRemediation;
-      constructor(message = "Invalid API key", reason = "unknown", serverMessage, suppressDefaultRemediation = false) {
-        super(message);
-        this.name = "AuthenticationError";
-        this.reason = reason;
-        this.serverMessage = serverMessage;
-        this.suppressDefaultRemediation = suppressDefaultRemediation;
-        if (Error.captureStackTrace) {
-          Error.captureStackTrace(this, _AuthenticationError);
-        }
-      }
-      /**
-      * Checks if an error is an AuthenticationError
-      * @param error - The error to check
-      * @returns True if the error is an AuthenticationError
-      */
-      static isAuthenticationError(error) {
-        return error instanceof _AuthenticationError || error instanceof Error && "isAuthenticationError" in error && error.isAuthenticationError === true;
-      }
-    };
-  }
-});
-
-// src/api/http.client.ts
-import { randomUUID } from "crypto";
-var HttpClient;
-var init_http_client = __esm({
-  "src/api/http.client.ts"() {
-    "use strict";
-    init_auth_error();
-    HttpClient = class {
-      static {
-        __name(this, "HttpClient");
-      }
-      baseUrl;
-      /**
-      * Creates an instance of HttpClient
-      * @param baseUrl - The base URL for all API requests
-      */
-      constructor(baseUrl) {
-        this.baseUrl = baseUrl;
-      }
-      /**
-      * Makes an HTTP request with standardized error handling
-      * @param url - The full URL to request
-      * @param options - Fetch API request options
-      * @returns Promise resolving to an ApiResponse with typed data
-      * @private
-      */
-      async request(url, options = {}) {
-        const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), 3e4);
-        try {
-          const response = await fetch(url, {
-            ...options,
-            signal: controller.signal,
-            headers: {
-              "Content-Type": "application/json",
-              ...options.headers
-            }
-          });
-          clearTimeout(timeoutId);
-          if (!response.ok) {
-            let errorData;
-            try {
-              errorData = await response.json();
-            } catch (jsonError) {
-              errorData = {};
-            }
-            if (response.status === 401) {
-              const serverMessage = typeof errorData.message === "string" ? errorData.message : void 0;
-              if (serverMessage && /not an admin/i.test(serverMessage)) {
-                throw new AuthenticationError(`Access denied for this agent: ${serverMessage}`, "no_agent_access", serverMessage);
-              }
-              const isExplicitCredential = !!serverMessage && /(invalid|expired|missing|no)\s+(api[\s_-]?key|token|credential)/i.test(serverMessage);
-              const isBareAuthRejection = !serverMessage || /^unauthorized$/i.test(serverMessage);
-              if (isExplicitCredential || isBareAuthRejection) {
-                throw new AuthenticationError("Authentication failed. Your API key may be invalid or expired.", "invalid_credentials", serverMessage);
-              }
-              throw new AuthenticationError(`Authentication failed: ${serverMessage}`, "unknown", serverMessage);
-            }
-            if (response.status === 403) {
-              const detail = errorData.message || "You do not have permission to access this resource.";
-              throw new Error(`Access denied (403): ${detail}
-Check that your API key has access to this agent/organization.`);
-            }
-            return {
-              success: false,
-              error: {
-                message: errorData.message || `HTTP ${response.status}: ${response.statusText}`,
-                statusCode: response.status,
-                error: errorData.error,
-                ...errorData
-              }
-            };
-          }
-          let data;
-          try {
-            data = await response.json();
-          } catch (jsonError) {
-            data = {};
-          }
-          if (typeof data === "object" && data !== null && "success" in data) {
-            return data;
-          }
-          return {
-            success: true,
-            data
-          };
-        } catch (error) {
-          clearTimeout(timeoutId);
-          if (AuthenticationError.isAuthenticationError(error)) {
-            throw error;
-          }
-          if (error instanceof Error && error.message.startsWith("Access denied (403)")) {
-            throw error;
-          }
-          if (error instanceof DOMException && error.name === "AbortError") {
-            return {
-              success: false,
-              error: {
-                message: "Request timeout (30s)",
-                statusCode: 0
-              }
-            };
-          }
-          return {
-            success: false,
-            error: {
-              message: error instanceof Error ? error.message : "Network request failed",
-              statusCode: 0
-            }
-          };
-        }
-      }
-      /**
-      * Checks if an HTTP status code is retryable
-      * @param statusCode - The HTTP status code (0 for network errors)
-      * @returns True if the request should be retried
-      * @private
-      */
-      isRetryableStatus(statusCode) {
-        return statusCode === 0 || statusCode === 429 || statusCode >= 500 && statusCode <= 504;
-      }
-      /**
-      * Calculates exponential backoff with full jitter (AWS best practice)
-      * @param attempt - The retry attempt number (0-based)
-      * @param baseMs - Base delay in milliseconds
-      * @param maxMs - Maximum delay cap in milliseconds
-      * @returns Delay in milliseconds with random jitter
-      * @private
-      */
-      calculateBackoff(attempt, baseMs = 1e3, maxMs = 15e3) {
-        const exponential = Math.min(maxMs, baseMs * Math.pow(2, attempt));
-        return Math.max(100, Math.random() * exponential);
-      }
-      /**
-      * Wraps request with retry logic for transient failures
-      * @param url - The full URL to request
-      * @param options - Fetch API request options
-      * @param maxRetries - Maximum number of retry attempts (default 3)
-      * @returns Promise resolving to an ApiResponse with typed data
-      * @private
-      */
-      async retryableRequest(url, options = {}, maxRetries = 3) {
-        if (options.method === "POST") {
-          const headers = options.headers || {};
-          if (!headers["X-Idempotency-Key"]) {
-            headers["X-Idempotency-Key"] = randomUUID();
-            options = {
-              ...options,
-              headers: {
-                ...options.headers,
-                ...headers
-              }
-            };
-          }
-        }
-        let lastResult = null;
-        for (let attempt = 0; attempt <= maxRetries; attempt++) {
-          try {
-            const result = await this.request(url, options);
-            if (result.success || !result.error || !this.isRetryableStatus(result.error.statusCode || 0)) {
-              return result;
-            }
-            lastResult = result;
-          } catch (error) {
-            throw error;
-          }
-          if (attempt < maxRetries) {
-            const backoff = this.calculateBackoff(attempt);
-            await new Promise((resolve) => setTimeout(resolve, backoff));
-          }
-        }
-        return lastResult;
-      }
-      /**
-      * Performs an HTTP GET request
-      * @param url - The relative URL path to request (will be appended to baseUrl)
-      * @param headers - Optional HTTP headers to include in the request
-      * @returns Promise resolving to an ApiResponse with typed data
-      * @protected
-      */
-      async httpGet(url, headers) {
-        return this.retryableRequest(this.baseUrl + url, {
-          method: "GET",
-          headers
-        });
-      }
-      /**
-      * Performs an HTTP POST request
-      * @param url - The relative URL path to request (will be appended to baseUrl)
-      * @param data - Optional request body data (will be JSON stringified)
-      * @param headers - Optional HTTP headers to include in the request
-      * @returns Promise resolving to an ApiResponse with typed data
-      * @protected
-      */
-      async httpPost(url, data, headers) {
-        return this.retryableRequest(this.baseUrl + url, {
-          method: "POST",
-          body: data ? JSON.stringify(data) : void 0,
-          headers
-        });
-      }
-      /**
-      * Performs an HTTP PUT request
-      * @param url - The relative URL path to request (will be appended to baseUrl)
-      * @param data - Optional request body data (will be JSON stringified)
-      * @param headers - Optional HTTP headers to include in the request
-      * @returns Promise resolving to an ApiResponse with typed data
-      * @protected
-      */
-      async httpPut(url, data, headers) {
-        return this.retryableRequest(this.baseUrl + url, {
-          method: "PUT",
-          body: data ? JSON.stringify(data) : void 0,
-          headers
-        });
-      }
-      /**
-      * Performs an HTTP DELETE request
-      * @param url - The relative URL path to request (will be appended to baseUrl)
-      * @param headers - Optional HTTP headers to include in the request
-      * @returns Promise resolving to an ApiResponse with typed data
-      * @protected
-      */
-      async httpDelete(url, headers) {
-        return this.retryableRequest(this.baseUrl + url, {
-          method: "DELETE",
-          headers
-        });
-      }
-      /**
-      * Performs an HTTP PATCH request
-      * @param url - The relative URL path to request (will be appended to baseUrl)
-      * @param data - Optional request body data (will be JSON stringified)
-      * @param headers - Optional HTTP headers to include in the request
-      * @returns Promise resolving to an ApiResponse with typed data
-      * @protected
-      */
-      async httpPatch(url, data, headers) {
-        return this.retryableRequest(this.baseUrl + url, {
-          method: "PATCH",
-          body: data ? JSON.stringify(data) : void 0,
-          headers
-        });
-      }
-    };
-  }
-});
-
-// src/api/auth.api.service.ts
-var init_auth_api_service = __esm({
-  "src/api/auth.api.service.ts"() {
-    "use strict";
-    init_http_client();
-  }
-});
-
-// src/services/auth.ts
-import "dotenv/config";
-import { readFileSync, writeFileSync, mkdirSync, unlinkSync } from "fs";
-function getToken() {
-  if (process.env.LUA_API_KEY) {
-    return process.env.LUA_API_KEY;
-  }
-  try {
-    const token = readFileSync(CREDENTIALS_FILE, "utf8").trim();
-    if (token) return token;
-  } catch {
-  }
-  throw new AuthenticationError('No API key found.\n\n  Authenticate using one of these methods:\n\n    \u279C  lua auth configure\n    \u279C  export LUA_API_KEY="your-api-key-here"\n    \u279C  Add LUA_API_KEY=... to a .env file\n\n  \u{1F511} Get your API key at https://admin.heylua.ai', "invalid_credentials", void 0, true);
-}
-var init_auth = __esm({
-  "src/services/auth.ts"() {
-    "use strict";
-    init_auth_api_service();
-    init_constants();
-    init_auth_error();
-    __name(getToken, "getToken");
-  }
-});
-
-// src/config/compile.constants.ts
-var COMPILE_DIRS, COMPILE_FILES, SKILL_DEFAULTS, YAML_FORMAT;
-var init_compile_constants = __esm({
-  "src/config/compile.constants.ts"() {
-    "use strict";
-    COMPILE_DIRS = {
-      DIST: "dist",
-      DIST_V2: "dist-v2",
-      LUA: ".lua",
-      TOOLS: "tools"
-    };
-    COMPILE_FILES = {
-      DEPLOYMENT_JSON: "deployment.json",
-      DEPLOY_JSON: "deploy.json",
-      MANIFEST_JSON: "manifest.json",
-      INDEX_TS: "index.ts",
-      INDEX_JS: "index.js",
-      PACKAGE_JSON: "package.json",
-      TSCONFIG_JSON: "tsconfig.json",
-      LUA_SKILL_YAML: "lua.skill.yaml"
-    };
-    SKILL_DEFAULTS = {
-      NAME: "lua-skill",
-      VERSION: "1.0.0",
-      DESCRIPTION: "",
-      CONTEXT: ""
-    };
-    YAML_FORMAT = {
-      INDENT: 2,
-      LINE_WIDTH: -1,
-      NO_REFS: true
-    };
-  }
-});
-
 // ../shared-types/dist/index.mjs
 import { z } from "zod";
 function isPersonaTextObject(value) {
@@ -470,6 +73,14 @@ function aiGenerateInputFromSimplified(prompt, content) {
     ]
   };
 }
+function isInteractiveChannel(channel) {
+  if (!channel) return true;
+  return !NON_INTERACTIVE_CHANNELS.includes(channel);
+}
+function isInteractiveTurn(turn) {
+  if (typeof turn.interactive === "boolean") return turn.interactive;
+  return isInteractiveChannel(turn.channel);
+}
 function removeNavigateBlock(input) {
   return input.replace(/::: navigate[\s\S]*?:::/g, "").trim();
 }
@@ -537,7 +148,7 @@ function transformChatHistoryContentParts(parts) {
 function buildDefaultPersona(agentName) {
   return DEFAULT_PERSONA_GUIDE.replace(AGENT_NAME_TOKEN, () => agentName || "My Agent");
 }
-var __defProp2, __name2, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema;
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, NON_INTERACTIVE_CHANNELS, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -555,6 +166,23 @@ var init_dist = __esm({
     __name2(personaToLiteral, "personaToLiteral");
     __name(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
     __name2(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
+    CHANNEL_SEND_CHANNELS = [
+      "whatsapp",
+      "sms",
+      "email",
+      "webchat",
+      "teams",
+      "instagram",
+      "messenger"
+    ];
+    NON_INTERACTIVE_CHANNELS = [
+      "trigger",
+      "agent-invocation"
+    ];
+    __name(isInteractiveChannel, "isInteractiveChannel");
+    __name2(isInteractiveChannel, "isInteractiveChannel");
+    __name(isInteractiveTurn, "isInteractiveTurn");
+    __name2(isInteractiveTurn, "isInteractiveTurn");
     __name(removeNavigateBlock, "removeNavigateBlock");
     __name2(removeNavigateBlock, "removeNavigateBlock");
     __name(transformChatHistoryContentParts, "transformChatHistoryContentParts");
@@ -796,7 +424,15 @@ Feel free to add, remove, or rename sections. Your persona can be a single parag
       // to the LLM as a ToolError — fills the 2–3s gap before the LLM's own
       // recovery response. Persona-specific (keep it short and on-brand);
       // absent → no spoken fallback (the LLM's recovery is the only signal).
-      onToolFailureSay: z.string().min(1).max(200).optional()
+      onToolFailureSay: z.string().min(1).max(200).optional(),
+      // Tool names to withhold from this voice agent's session. Matches ANY
+      // resolved tool: the platform base tools (searchKnowledgeBase, searchWeb,
+      // geocoding, the send* structured-output family), MCP/device tools, and the
+      // agent's own skill tools compiled into the artifact. Typical use is dropping
+      // the on-screen send* tools (`sendPayment`, `sendListItems`, …) on a
+      // screenless phone agent where they have nowhere to render. Names that match
+      // nothing are ignored (warn, not error) so a typo can't fail the push.
+      excludeTools: z.array(z.string().min(1)).optional()
     });
     LuaVoiceConfigSchema = LuaVoiceConfigInnerSchema.superRefine((cfg, ctx) => {
       const isRealtime = cfg.llm.kind === "realtime";
@@ -839,11 +475,408 @@ Feel free to add, remove, or rename sections. Your persona can be a single parag
           });
         }
       }
-    });
-    LuaVoiceRefSchema = z.object({
-      voiceId: z.string().min(1),
-      version: z.string().optional()
-    });
+    });
+    LuaVoiceRefSchema = z.object({
+      voiceId: z.string().min(1),
+      version: z.string().optional()
+    });
+  }
+});
+
+// src/interfaces/baskets.ts
+var BasketStatus;
+var init_baskets = __esm({
+  "src/interfaces/baskets.ts"() {
+    "use strict";
+    BasketStatus = /* @__PURE__ */ (function(BasketStatus2) {
+      BasketStatus2["ACTIVE"] = "active";
+      BasketStatus2["CHECKED_OUT"] = "checked_out";
+      BasketStatus2["ABANDONED"] = "abandoned";
+      BasketStatus2["EXPIRED"] = "expired";
+      return BasketStatus2;
+    })({});
+  }
+});
+
+// src/config/constants.ts
+import { join } from "path";
+import { homedir } from "os";
+var CLI_CONFIG_DIR, VERSION_CHECK_FILE, TELEMETRY_FILE, CLI_CACHE_FILE, BASE_URLS, CREDENTIALS_FILE, SANDBOX_STORAGE_FILE, AUTH_STORAGE_FILE;
+var init_constants = __esm({
+  "src/config/constants.ts"() {
+    "use strict";
+    CLI_CONFIG_DIR = join(homedir(), ".lua-cli");
+    VERSION_CHECK_FILE = join(CLI_CONFIG_DIR, "version-check.json");
+    TELEMETRY_FILE = join(CLI_CONFIG_DIR, "telemetry.json");
+    CLI_CACHE_FILE = join(CLI_CONFIG_DIR, "cache.json");
+    BASE_URLS = {
+      API: process.env.LUA_API_URL || "https://api.heylua.ai",
+      AUTH: process.env.LUA_AUTH_URL || "https://auth.heylua.ai",
+      CHAT: process.env.LUA_API_URL || "https://api.heylua.ai",
+      WEBHOOK: process.env.LUA_WEBHOOK_URL || "https://webhook.heylua.ai",
+      CDN: "https://cdn.heylua.ai"
+    };
+    CREDENTIALS_FILE = join(CLI_CONFIG_DIR, "credentials");
+    SANDBOX_STORAGE_FILE = join(CLI_CONFIG_DIR, "sandbox.json");
+    AUTH_STORAGE_FILE = join(CLI_CONFIG_DIR, "auth.json");
+  }
+});
+
+// src/errors/auth.error.ts
+var AuthenticationError;
+var init_auth_error = __esm({
+  "src/errors/auth.error.ts"() {
+    "use strict";
+    AuthenticationError = class _AuthenticationError extends Error {
+      static {
+        __name(this, "AuthenticationError");
+      }
+      statusCode = 401;
+      isAuthenticationError = true;
+      reason;
+      serverMessage;
+      /**
+      * If true, the error message already contains complete remediation steps
+      * and `withErrorHandling` should not append its own hint block. Use this
+      * when the throw site has more context about the right fix than the
+      * generic per-reason hints (e.g. `getToken()` listing all three ways to
+      * configure a key — keychain, env var, .env file).
+      */
+      suppressDefaultRemediation;
+      constructor(message = "Invalid API key", reason = "unknown", serverMessage, suppressDefaultRemediation = false) {
+        super(message);
+        this.name = "AuthenticationError";
+        this.reason = reason;
+        this.serverMessage = serverMessage;
+        this.suppressDefaultRemediation = suppressDefaultRemediation;
+        if (Error.captureStackTrace) {
+          Error.captureStackTrace(this, _AuthenticationError);
+        }
+      }
+      /**
+      * Checks if an error is an AuthenticationError
+      * @param error - The error to check
+      * @returns True if the error is an AuthenticationError
+      */
+      static isAuthenticationError(error) {
+        return error instanceof _AuthenticationError || error instanceof Error && "isAuthenticationError" in error && error.isAuthenticationError === true;
+      }
+    };
+  }
+});
+
+// src/api/http.client.ts
+import { randomUUID } from "crypto";
+var HttpClient;
+var init_http_client = __esm({
+  "src/api/http.client.ts"() {
+    "use strict";
+    init_auth_error();
+    HttpClient = class {
+      static {
+        __name(this, "HttpClient");
+      }
+      baseUrl;
+      /**
+      * Creates an instance of HttpClient
+      * @param baseUrl - The base URL for all API requests
+      */
+      constructor(baseUrl) {
+        this.baseUrl = baseUrl;
+      }
+      /**
+      * Makes an HTTP request with standardized error handling
+      * @param url - The full URL to request
+      * @param options - Fetch API request options
+      * @returns Promise resolving to an ApiResponse with typed data
+      * @private
+      */
+      async request(url, options = {}) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), 3e4);
+        try {
+          const response = await fetch(url, {
+            ...options,
+            signal: controller.signal,
+            headers: {
+              "Content-Type": "application/json",
+              ...options.headers
+            }
+          });
+          clearTimeout(timeoutId);
+          if (!response.ok) {
+            let errorData;
+            try {
+              errorData = await response.json();
+            } catch (jsonError) {
+              errorData = {};
+            }
+            if (response.status === 401) {
+              const serverMessage = typeof errorData.message === "string" ? errorData.message : void 0;
+              if (serverMessage && /not an admin/i.test(serverMessage)) {
+                throw new AuthenticationError(`Access denied for this agent: ${serverMessage}`, "no_agent_access", serverMessage);
+              }
+              const isExplicitCredential = !!serverMessage && /(invalid|expired|missing|no)\s+(api[\s_-]?key|token|credential)/i.test(serverMessage);
+              const isBareAuthRejection = !serverMessage || /^unauthorized$/i.test(serverMessage);
+              if (isExplicitCredential || isBareAuthRejection) {
+                throw new AuthenticationError("Authentication failed. Your API key may be invalid or expired.", "invalid_credentials", serverMessage);
+              }
+              throw new AuthenticationError(`Authentication failed: ${serverMessage}`, "unknown", serverMessage);
+            }
+            if (response.status === 403) {
+              const detail = errorData.message || "You do not have permission to access this resource.";
+              throw new Error(`Access denied (403): ${detail}
+Check that your API key has access to this agent/organization.`);
+            }
+            return {
+              success: false,
+              error: {
+                message: errorData.message || `HTTP ${response.status}: ${response.statusText}`,
+                statusCode: response.status,
+                error: errorData.error,
+                ...errorData
+              }
+            };
+          }
+          let data;
+          try {
+            data = await response.json();
+          } catch (jsonError) {
+            data = {};
+          }
+          if (typeof data === "object" && data !== null && "success" in data) {
+            return data;
+          }
+          return {
+            success: true,
+            data
+          };
+        } catch (error) {
+          clearTimeout(timeoutId);
+          if (AuthenticationError.isAuthenticationError(error)) {
+            throw error;
+          }
+          if (error instanceof Error && error.message.startsWith("Access denied (403)")) {
+            throw error;
+          }
+          if (error instanceof DOMException && error.name === "AbortError") {
+            return {
+              success: false,
+              error: {
+                message: "Request timeout (30s)",
+                statusCode: 0
+              }
+            };
+          }
+          return {
+            success: false,
+            error: {
+              message: error instanceof Error ? error.message : "Network request failed",
+              statusCode: 0
+            }
+          };
+        }
+      }
+      /**
+      * Checks if an HTTP status code is retryable
+      * @param statusCode - The HTTP status code (0 for network errors)
+      * @returns True if the request should be retried
+      * @private
+      */
+      isRetryableStatus(statusCode) {
+        return statusCode === 0 || statusCode === 429 || statusCode >= 500 && statusCode <= 504;
+      }
+      /**
+      * Calculates exponential backoff with full jitter (AWS best practice)
+      * @param attempt - The retry attempt number (0-based)
+      * @param baseMs - Base delay in milliseconds
+      * @param maxMs - Maximum delay cap in milliseconds
+      * @returns Delay in milliseconds with random jitter
+      * @private
+      */
+      calculateBackoff(attempt, baseMs = 1e3, maxMs = 15e3) {
+        const exponential = Math.min(maxMs, baseMs * Math.pow(2, attempt));
+        return Math.max(100, Math.random() * exponential);
+      }
+      /**
+      * Wraps request with retry logic for transient failures
+      * @param url - The full URL to request
+      * @param options - Fetch API request options
+      * @param maxRetries - Maximum number of retry attempts (default 3)
+      * @returns Promise resolving to an ApiResponse with typed data
+      * @private
+      */
+      async retryableRequest(url, options = {}, maxRetries = 3) {
+        if (options.method === "POST") {
+          const headers = options.headers || {};
+          if (!headers["X-Idempotency-Key"]) {
+            headers["X-Idempotency-Key"] = randomUUID();
+            options = {
+              ...options,
+              headers: {
+                ...options.headers,
+                ...headers
+              }
+            };
+          }
+        }
+        let lastResult = null;
+        for (let attempt = 0; attempt <= maxRetries; attempt++) {
+          try {
+            const result = await this.request(url, options);
+            if (result.success || !result.error || !this.isRetryableStatus(result.error.statusCode || 0)) {
+              return result;
+            }
+            lastResult = result;
+          } catch (error) {
+            throw error;
+          }
+          if (attempt < maxRetries) {
+            const backoff = this.calculateBackoff(attempt);
+            await new Promise((resolve) => setTimeout(resolve, backoff));
+          }
+        }
+        return lastResult;
+      }
+      /**
+      * Performs an HTTP GET request
+      * @param url - The relative URL path to request (will be appended to baseUrl)
+      * @param headers - Optional HTTP headers to include in the request
+      * @returns Promise resolving to an ApiResponse with typed data
+      * @protected
+      */
+      async httpGet(url, headers) {
+        return this.retryableRequest(this.baseUrl + url, {
+          method: "GET",
+          headers
+        });
+      }
+      /**
+      * Performs an HTTP POST request
+      * @param url - The relative URL path to request (will be appended to baseUrl)
+      * @param data - Optional request body data (will be JSON stringified)
+      * @param headers - Optional HTTP headers to include in the request
+      * @returns Promise resolving to an ApiResponse with typed data
+      * @protected
+      */
+      async httpPost(url, data, headers) {
+        return this.retryableRequest(this.baseUrl + url, {
+          method: "POST",
+          body: data ? JSON.stringify(data) : void 0,
+          headers
+        });
+      }
+      /**
+      * Performs an HTTP PUT request
+      * @param url - The relative URL path to request (will be appended to baseUrl)
+      * @param data - Optional request body data (will be JSON stringified)
+      * @param headers - Optional HTTP headers to include in the request
+      * @returns Promise resolving to an ApiResponse with typed data
+      * @protected
+      */
+      async httpPut(url, data, headers) {
+        return this.retryableRequest(this.baseUrl + url, {
+          method: "PUT",
+          body: data ? JSON.stringify(data) : void 0,
+          headers
+        });
+      }
+      /**
+      * Performs an HTTP DELETE request
+      * @param url - The relative URL path to request (will be appended to baseUrl)
+      * @param headers - Optional HTTP headers to include in the request
+      * @returns Promise resolving to an ApiResponse with typed data
+      * @protected
+      */
+      async httpDelete(url, headers) {
+        return this.retryableRequest(this.baseUrl + url, {
+          method: "DELETE",
+          headers
+        });
+      }
+      /**
+      * Performs an HTTP PATCH request
+      * @param url - The relative URL path to request (will be appended to baseUrl)
+      * @param data - Optional request body data (will be JSON stringified)
+      * @param headers - Optional HTTP headers to include in the request
+      * @returns Promise resolving to an ApiResponse with typed data
+      * @protected
+      */
+      async httpPatch(url, data, headers) {
+        return this.retryableRequest(this.baseUrl + url, {
+          method: "PATCH",
+          body: data ? JSON.stringify(data) : void 0,
+          headers
+        });
+      }
+    };
+  }
+});
+
+// src/api/auth.api.service.ts
+var init_auth_api_service = __esm({
+  "src/api/auth.api.service.ts"() {
+    "use strict";
+    init_http_client();
+  }
+});
+
+// src/services/auth.ts
+import "dotenv/config";
+import { readFileSync, writeFileSync, mkdirSync, unlinkSync } from "fs";
+function getToken() {
+  if (process.env.LUA_API_KEY) {
+    return process.env.LUA_API_KEY;
+  }
+  try {
+    const token = readFileSync(CREDENTIALS_FILE, "utf8").trim();
+    if (token) return token;
+  } catch {
+  }
+  throw new AuthenticationError('No API key found.\n\n  Authenticate using one of these methods:\n\n    \u279C  lua auth configure\n    \u279C  export LUA_API_KEY="your-api-key-here"\n    \u279C  Add LUA_API_KEY=... to a .env file\n\n  \u{1F511} Get your API key at https://admin.heylua.ai', "invalid_credentials", void 0, true);
+}
+var init_auth = __esm({
+  "src/services/auth.ts"() {
+    "use strict";
+    init_auth_api_service();
+    init_constants();
+    init_auth_error();
+    __name(getToken, "getToken");
+  }
+});
+
+// src/config/compile.constants.ts
+var COMPILE_DIRS, COMPILE_FILES, SKILL_DEFAULTS, YAML_FORMAT;
+var init_compile_constants = __esm({
+  "src/config/compile.constants.ts"() {
+    "use strict";
+    COMPILE_DIRS = {
+      DIST: "dist",
+      DIST_V2: "dist-v2",
+      LUA: ".lua",
+      TOOLS: "tools"
+    };
+    COMPILE_FILES = {
+      DEPLOYMENT_JSON: "deployment.json",
+      DEPLOY_JSON: "deploy.json",
+      MANIFEST_JSON: "manifest.json",
+      INDEX_TS: "index.ts",
+      INDEX_JS: "index.js",
+      PACKAGE_JSON: "package.json",
+      TSCONFIG_JSON: "tsconfig.json",
+      LUA_SKILL_YAML: "lua.skill.yaml"
+    };
+    SKILL_DEFAULTS = {
+      NAME: "lua-skill",
+      VERSION: "1.0.0",
+      DESCRIPTION: "",
+      CONTEXT: ""
+    };
+    YAML_FORMAT = {
+      INDENT: 2,
+      LINE_WIDTH: -1,
+      NO_REFS: true
+    };
   }
 });
 
@@ -857,6 +890,7 @@ var init_types = __esm({
       PrimitiveKind2["SKILL"] = "skill";
       PrimitiveKind2["JOB"] = "job";
       PrimitiveKind2["WEBHOOK"] = "webhook";
+      PrimitiveKind2["TRIGGER"] = "trigger";
       PrimitiveKind2["PREPROCESSOR"] = "preprocessor";
       PrimitiveKind2["POSTPROCESSOR"] = "postprocessor";
       PrimitiveKind2["MCP_SERVER"] = "mcp-server";
@@ -4607,6 +4641,9 @@ var init_agents_api_service = __esm({
           } : {},
           ...body.threadId !== void 0 ? {
             threadId: body.threadId
+          } : {},
+          ...body.webhookPayload !== void 0 ? {
+            webhookPayload: body.webhookPayload
           } : {}
         };
       }
@@ -4989,6 +5026,30 @@ var init_voice_api_service = __esm({
         });
       }
       /**
+      * Create a voice room + client access token for a custom frontend
+      * (standard livekit-client). The session runs under a synthetic identity;
+      * pass `userId` to scope conversation memory + transcript to your own end
+      * user. Wraps `POST /developer/voice/:agentId/session`.
+      */
+      async createSession(input = {}) {
+        return this.httpPost(`/developer/voice/${this.agentId}/session`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /**
+      * Sandbox helper: throws on non-success and returns the unwrapped output.
+      */
+      async createSessionForSandbox(input = {}) {
+        const result = await this.createSession(input);
+        if (!result.success) {
+          throw new Error(result.error?.message || "Voice session creation failed");
+        }
+        if (!result.data) {
+          throw new Error("Voice session creation failed: empty response");
+        }
+        return result.data;
+      }
+      /**
       * Sandbox helper: throws on non-success and returns the unwrapped output.
       * Mirrors the shape `AgentsApiService.invokeForSandbox` exposes so the
       * `Voice` namespace in `api-exports.ts` stays a one-liner.
@@ -5007,6 +5068,79 @@ var init_voice_api_service = __esm({
   }
 });
 
+// src/api/channels-send.api.service.ts
+var ChannelsSendApiService;
+var init_channels_send_api_service = __esm({
+  "src/api/channels-send.api.service.ts"() {
+    "use strict";
+    init_http_client();
+    ChannelsSendApiService = class extends HttpClient {
+      static {
+        __name(this, "ChannelsSendApiService");
+      }
+      apiKey;
+      agentId;
+      constructor(baseUrl, apiKey, agentId) {
+        super(baseUrl), this.apiKey = apiKey, this.agentId = agentId;
+      }
+      /** POST /developer/agents/:agentId/channels/send */
+      async send(input) {
+        return this.httpPost(`/developer/agents/${this.agentId}/channels/send`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /** POST /developer/agents/:agentId/channels/whatsapp/template */
+      async sendWhatsAppTemplate(input) {
+        return this.httpPost(`/developer/agents/${this.agentId}/channels/whatsapp/template`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /** POST /developer/agents/:agentId/channels/email/send */
+      async sendEmail(input) {
+        return this.httpPost(`/developer/agents/${this.agentId}/channels/email/send`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /**
+      * Sandbox helper: throws on non-success, returns unwrapped output.
+      * A 200 with `persisted: false` is NOT an error — it passes through.
+      */
+      async sendForSandbox(input) {
+        const result = await this.send(input);
+        if (!result.success) {
+          throw new Error(result.error?.message || "Channel send failed");
+        }
+        if (!result.data) {
+          throw new Error("Channel send failed: empty response");
+        }
+        return result.data;
+      }
+      /** Sandbox helper for WhatsApp template sends. */
+      async sendWhatsAppTemplateForSandbox(input) {
+        const result = await this.sendWhatsAppTemplate(input);
+        if (!result.success) {
+          throw new Error(result.error?.message || "WhatsApp template send failed");
+        }
+        if (!result.data) {
+          throw new Error("WhatsApp template send failed: empty response");
+        }
+        return result.data;
+      }
+      /** Sandbox helper for email sends. */
+      async sendEmailForSandbox(input) {
+        const result = await this.sendEmail(input);
+        if (!result.success) {
+          throw new Error(result.error?.message || "Email send failed");
+        }
+        if (!result.data) {
+          throw new Error("Email send failed: empty response");
+        }
+        return result.data;
+      }
+    };
+  }
+});
+
 // src/api/device.api.service.ts
 var device_api_service_exports = {};
 __export(device_api_service_exports, {
@@ -5099,6 +5233,7 @@ __export(lazy_instances_exports, {
   getAiInstance: () => getAiInstance,
   getBasketsInstance: () => getBasketsInstance,
   getCdnInstance: () => getCdnInstance,
+  getChannelsSendInstance: () => getChannelsSendInstance,
   getDataInstance: () => getDataInstance,
   getDeveloperInstance: () => getDeveloperInstance,
   getDeviceInstance: () => getDeviceInstance,
@@ -5209,6 +5344,13 @@ async function getVoiceInstance() {
   }
   return _voiceInstance;
 }
+async function getChannelsSendInstance() {
+  if (!_channelsSendInstance) {
+    const creds = await getCredentials();
+    _channelsSendInstance = new ChannelsSendApiService(BASE_URLS.API, creds.apiKey, creds.agentId);
+  }
+  return _channelsSendInstance;
+}
 function clearAllInstances() {
   _userInstance = null;
   _dataInstance = null;
@@ -5223,8 +5365,9 @@ function clearAllInstances() {
   _cdnInstance = null;
   _developerInstance = null;
   _voiceInstance = null;
+  _channelsSendInstance = null;
 }
-var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _deviceInstance;
+var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _channelsSendInstance, _deviceInstance;
 var init_lazy_instances = __esm({
   "src/api/lazy-instances.ts"() {
     "use strict";
@@ -5243,6 +5386,7 @@ var init_lazy_instances = __esm({
     init_cdn_api_service();
     init_developer_api_service();
     init_voice_api_service();
+    init_channels_send_api_service();
     _userInstance = null;
     _dataInstance = null;
     _productsInstance = null;
@@ -5256,6 +5400,7 @@ var init_lazy_instances = __esm({
     _cdnInstance = null;
     _developerInstance = null;
     _voiceInstance = null;
+    _channelsSendInstance = null;
     __name(getUserInstance, "getUserInstance");
     __name(getDataInstance, "getDataInstance");
     __name(getProductsInstance, "getProductsInstance");
@@ -5271,6 +5416,7 @@ var init_lazy_instances = __esm({
     __name(getDeviceInstance, "getDeviceInstance");
     __name(getDeveloperInstance, "getDeveloperInstance");
     __name(getVoiceInstance, "getVoiceInstance");
+    __name(getChannelsSendInstance, "getChannelsSendInstance");
     __name(clearAllInstances, "clearAllInstances");
   }
 });
@@ -5557,6 +5703,39 @@ var LuaWebhook = class {
     return this.executeFunction(event);
   }
 };
+var LuaTrigger = class {
+  static {
+    __name(this, "LuaTrigger");
+  }
+  name;
+  description;
+  source;
+  inputSchema;
+  verify;
+  filter;
+  transform;
+  constructor(config) {
+    if (!config.name || !config.name.trim()) {
+      throw new Error("LuaTrigger requires a non-empty `name` (used as the server-side identifier).");
+    }
+    if (!config.verify && !config.filter && !config.transform) {
+      throw new Error("LuaTrigger requires at least one of verify, filter, or transform.");
+    }
+    this.name = config.name;
+    this.description = config.description;
+    this.source = config.source ?? "webhook";
+    this.inputSchema = config.inputSchema;
+    this.verify = config.verify;
+    this.filter = config.filter;
+    this.transform = config.transform;
+  }
+  getName() {
+    return this.name;
+  }
+  getDescription() {
+    return this.description;
+  }
+};
 var PreProcessor = class {
   static {
     __name(this, "PreProcessor");
@@ -5712,6 +5891,7 @@ var LuaAgent = class {
   modelSettings;
   skills;
   webhooks;
+  triggers;
   jobs;
   preProcessors;
   postProcessors;
@@ -5752,6 +5932,7 @@ var LuaAgent = class {
     }
     this.skills = config.skills || [];
     this.webhooks = config.webhooks || [];
+    this.triggers = config.triggers || [];
     this.jobs = config.jobs || [];
     this.preProcessors = config.preProcessors || [];
     this.postProcessors = config.postProcessors || [];
@@ -5780,6 +5961,9 @@ var LuaAgent = class {
   getWebhooks() {
     return this.webhooks;
   }
+  getTriggers() {
+    return this.triggers;
+  }
   getJobs() {
     return this.jobs;
   }
@@ -5879,6 +6063,7 @@ var LuaVoice = class {
   preemptiveGeneration;
   interruption;
   sttLanguage;
+  excludeTools;
   tools;
   onEnter;
   onUserTurnCompleted;
@@ -5901,6 +6086,7 @@ var LuaVoice = class {
     this.preemptiveGeneration = config.preemptiveGeneration;
     this.interruption = config.interruption;
     this.sttLanguage = config.sttLanguage;
+    this.excludeTools = config.excludeTools;
     this.tools = Object.freeze([
       ...config.tools ?? []
     ]);
@@ -5915,6 +6101,7 @@ function defineVoice(config) {
 __name(defineVoice, "defineVoice");
 
 // src/api-exports.ts
+init_dist();
 init_baskets();
 
 // src/interfaces/orders.ts
@@ -6398,6 +6585,32 @@ var Voice = {
     const { getVoiceInstance: getVoiceInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
     const voice = await getVoiceInstance2();
     return voice.dispatchForSandbox(input);
+  },
+  async createSession(input) {
+    const { getVoiceInstance: getVoiceInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+    const voice = await getVoiceInstance2();
+    return voice.createSessionForSandbox(input ?? {});
+  }
+};
+var Channels = {
+  async send(input) {
+    const { getChannelsSendInstance: getChannelsSendInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+    const channels = await getChannelsSendInstance2();
+    return channels.sendForSandbox(input);
+  },
+  whatsapp: {
+    async sendTemplate(input) {
+      const { getChannelsSendInstance: getChannelsSendInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+      const channels = await getChannelsSendInstance2();
+      return channels.sendWhatsAppTemplateForSandbox(input);
+    }
+  },
+  email: {
+    async send(input) {
+      const { getChannelsSendInstance: getChannelsSendInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+      const channels = await getChannelsSendInstance2();
+      return channels.sendEmailForSandbox(input);
+    }
   }
 };
 var Templates = {
@@ -6531,6 +6744,10 @@ function defineDeviceTrigger(config) {
   return new LuaDeviceTrigger(config);
 }
 __name(defineDeviceTrigger, "defineDeviceTrigger");
+function defineTrigger(config) {
+  return new LuaTrigger(config);
+}
+__name(defineTrigger, "defineTrigger");
 export {
   AI,
   Agents,
@@ -6538,6 +6755,8 @@ export {
   BasketStatus,
   Baskets,
   CDN,
+  CHANNEL_SEND_CHANNELS,
+  Channels,
   Data,
   DataEntryInstance,
   JobInstance,
@@ -6551,6 +6770,7 @@ export {
   PostProcessor as LuaPostprocessor,
   PreProcessor as LuaPreprocessor,
   LuaSkill,
+  LuaTrigger,
   LuaVoice,
   LuaVoiceTool,
   LuaWebhook,
@@ -6568,6 +6788,7 @@ export {
   Voice,
   defineDevice,
   defineDeviceTrigger,
+  defineTrigger,
   defineVoice,
   env
 };