lua-cli 3.17.6 → 3.18.0

package/dist/index.js

@@ -144,7 +144,7 @@ var init_constants = __esm({
       API: process.env.LUA_API_URL || "https://api.heylua.ai",
       AUTH: process.env.LUA_AUTH_URL || "https://auth.heylua.ai",
       CHAT: process.env.LUA_API_URL || "https://api.heylua.ai",
-      WEBHOOK: "https://webhook.heylua.ai",
+      WEBHOOK: process.env.LUA_WEBHOOK_URL || "https://webhook.heylua.ai",
       CDN: "https://cdn.heylua.ai"
     };
     CREDENTIALS_FILE = join(CLI_CONFIG_DIR, "credentials");
@@ -758,6 +758,7 @@ var init_compile_constants = __esm({
       LuaSkill: PassthroughPrimitive,
       LuaJob: PassthroughPrimitive,
       LuaWebhook: PassthroughPrimitive,
+      LuaTrigger: PassthroughPrimitive,
       PreProcessor: PassthroughPrimitive,
       LuaPreprocessor: PassthroughPrimitive,
       PostProcessor: PassthroughPrimitive,
@@ -768,6 +769,7 @@ var init_compile_constants = __esm({
       defineSkill: passthroughDefine,
       defineJob: passthroughDefine,
       defineWebhook: passthroughDefine,
+      defineTrigger: passthroughDefine,
       definePreProcessor: passthroughDefine,
       definePostProcessor: passthroughDefine,
       defineMCPServer: passthroughDefine
@@ -866,6 +868,14 @@ function aiGenerateInputFromSimplified(prompt, content) {
     ]
   };
 }
+function isInteractiveChannel(channel) {
+  if (!channel) return true;
+  return !NON_INTERACTIVE_CHANNELS.includes(channel);
+}
+function isInteractiveTurn(turn) {
+  if (typeof turn.interactive === "boolean") return turn.interactive;
+  return isInteractiveChannel(turn.channel);
+}
 function removeNavigateBlock(input) {
   return input.replace(/::: navigate[\s\S]*?:::/g, "").trim();
 }
@@ -933,7 +943,7 @@ function transformChatHistoryContentParts(parts) {
 function buildDefaultPersona(agentName) {
   return DEFAULT_PERSONA_GUIDE.replace(AGENT_NAME_TOKEN, () => agentName || "My Agent");
 }
-var __defProp2, __name2, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema;
+var __defProp2, __name2, NON_INTERACTIVE_CHANNELS, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -951,6 +961,14 @@ var init_dist = __esm({
     __name2(personaToLiteral, "personaToLiteral");
     __name(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
     __name2(aiGenerateInputFromSimplified, "aiGenerateInputFromSimplified");
+    NON_INTERACTIVE_CHANNELS = [
+      "trigger",
+      "agent-invocation"
+    ];
+    __name(isInteractiveChannel, "isInteractiveChannel");
+    __name2(isInteractiveChannel, "isInteractiveChannel");
+    __name(isInteractiveTurn, "isInteractiveTurn");
+    __name2(isInteractiveTurn, "isInteractiveTurn");
     __name(removeNavigateBlock, "removeNavigateBlock");
     __name2(removeNavigateBlock, "removeNavigateBlock");
     __name(transformChatHistoryContentParts, "transformChatHistoryContentParts");
@@ -1008,6 +1026,7 @@ Feel free to add, remove, or rename sections. Your persona can be a single parag
       "skill",
       "job",
       "webhook",
+      "trigger",
       "preprocessor",
       "postprocessor",
       "user_message",
@@ -1207,7 +1226,15 @@ Feel free to add, remove, or rename sections. Your persona can be a single parag
       // to the LLM as a ToolError — fills the 2–3s gap before the LLM's own
       // recovery response. Persona-specific (keep it short and on-brand);
       // absent → no spoken fallback (the LLM's recovery is the only signal).
-      onToolFailureSay: z.string().min(1).max(200).optional()
+      onToolFailureSay: z.string().min(1).max(200).optional(),
+      // Tool names to withhold from this voice agent's session. Matches ANY
+      // resolved tool: the platform base tools (searchKnowledgeBase, searchWeb,
+      // geocoding, the send* structured-output family), MCP/device tools, and the
+      // agent's own skill tools compiled into the artifact. Typical use is dropping
+      // the on-screen send* tools (`sendPayment`, `sendListItems`, …) on a
+      // screenless phone agent where they have nowhere to render. Names that match
+      // nothing are ignored (warn, not error) so a typo can't fail the push.
+      excludeTools: z.array(z.string().min(1)).optional()
     });
     LuaVoiceConfigSchema = LuaVoiceConfigInnerSchema.superRefine((cfg, ctx) => {
       const isRealtime = cfg.llm.kind === "realtime";
@@ -1270,6 +1297,7 @@ var init_types = __esm({
       PrimitiveKind2["SKILL"] = "skill";
       PrimitiveKind2["JOB"] = "job";
       PrimitiveKind2["WEBHOOK"] = "webhook";
+      PrimitiveKind2["TRIGGER"] = "trigger";
       PrimitiveKind2["PREPROCESSOR"] = "preprocessor";
       PrimitiveKind2["POSTPROCESSOR"] = "postprocessor";
       PrimitiveKind2["MCP_SERVER"] = "mcp-server";
@@ -3333,6 +3361,25 @@ function extractObjectProperty(obj, propertyName) {
   }
   return void 0;
 }
+function extractStringArrayProperty(obj, propertyName) {
+  const prop = obj.getProperty(propertyName);
+  if (!prop) return void 0;
+  let value;
+  if (Node.isShorthandPropertyAssignment(prop)) {
+    value = prop.getNameNode();
+  } else if (Node.isPropertyAssignment(prop)) {
+    value = prop.getInitializer();
+  } else {
+    return void 0;
+  }
+  if (!value) return void 0;
+  const resolved = Node.isIdentifier(value) ? resolveIdentifier(value) : value;
+  const evaluated = evaluateNode(resolved ?? value);
+  if (Array.isArray(evaluated)) {
+    return evaluated.filter((v) => typeof v === "string");
+  }
+  return void 0;
+}
 function extractFunctionProperty(obj, propertyName) {
   const prop = obj.getProperty(propertyName);
   if (!prop || !Node.isPropertyAssignment(prop)) return void 0;
@@ -3426,6 +3473,7 @@ var init_ast_helpers = __esm({
     __name(extractNestedProperty, "extractNestedProperty");
     __name(evaluateNodeAsObject, "evaluateNodeAsObject");
     __name(extractObjectProperty, "extractObjectProperty");
+    __name(extractStringArrayProperty, "extractStringArrayProperty");
     __name(extractFunctionProperty, "extractFunctionProperty");
     __name(extractPolymorphicProperty, "extractPolymorphicProperty");
     __name(hasProperty, "hasProperty");
@@ -4682,6 +4730,169 @@ var init_webhook_plugin = __esm({
   }
 });
 
+// src/compiler/plugins/trigger.plugin.ts
+import { Node as Node7 } from "ts-morph";
+var TriggerPlugin;
+var init_trigger_plugin = __esm({
+  "src/compiler/plugins/trigger.plugin.ts"() {
+    "use strict";
+    init_base();
+    init_ast_helpers();
+    init_class_hierarchy();
+    init_schema_converter();
+    TriggerPlugin = class extends BasePlugin {
+      static {
+        __name(this, "TriggerPlugin");
+      }
+      kind = "trigger";
+      displayName = "Trigger";
+      defineFunction = "defineTrigger";
+      legacyClassNames = [
+        "LuaTrigger"
+      ];
+      crossFileRewrite = {
+        copyAllFields: true
+      };
+      supportsClassDefinition = true;
+      /**
+      * Class-definition shape: read the slot presence off the inheritance chain
+      * (most-derived wins), mirroring extractFromConfig.
+      */
+      extractFromClassDefinition(classDecl, sourceFile) {
+        const className = classDecl.getName();
+        if (!className) return null;
+        const isDefaultExport = classDecl.isDefaultExport();
+        const exportName = isDefaultExport ? "default" : className;
+        const name = readStringMember(classDecl, "name") ?? deriveNameFromClassName(className);
+        const description = readStringMember(classDecl, "description") ?? "";
+        return {
+          kind: this.kind,
+          name,
+          description,
+          sourcePath: sourceFile.getFilePath(),
+          exportName,
+          isDefaultExport,
+          line: classDecl.getStartLineNumber(),
+          column: 1,
+          metadata: {
+            pattern: "class-definition",
+            hasVerify: findClassMember(classDecl, "verify", "either") !== void 0,
+            hasFilter: findClassMember(classDecl, "filter", "either") !== void 0,
+            hasTransform: findClassMember(classDecl, "transform", "either") !== void 0,
+            hasInputSchema: findClassMember(classDecl, "inputSchema", "property") !== void 0
+          }
+        };
+      }
+      /**
+      * Project the trigger class instance onto the standard primitive shape,
+      * binding the optional slot methods so subclass overrides win at runtime.
+      */
+      getClassDefinitionPrimitiveShape(metadata) {
+        return `{
+    kind: 'trigger',
+    name: __lua_instance__.name ?? ${JSON.stringify(metadata.name)},
+    description: __lua_instance__.description ?? ${JSON.stringify(metadata.description)},
+    verify: typeof __lua_instance__.verify === 'function' ? __lua_instance__.verify.bind(__lua_instance__) : undefined,
+    filter: typeof __lua_instance__.filter === 'function' ? __lua_instance__.filter.bind(__lua_instance__) : undefined,
+    transform: typeof __lua_instance__.transform === 'function' ? __lua_instance__.transform.bind(__lua_instance__) : undefined,
+  }`;
+      }
+      extractFromConfig(config, exportName, sourcePath, position, pattern) {
+        const common = this.extractCommonFields(config, exportName, sourcePath, position);
+        if (!common) return null;
+        return {
+          kind: this.kind,
+          ...common,
+          metadata: {
+            pattern,
+            hasVerify: config.getProperty("verify") !== void 0,
+            hasFilter: config.getProperty("filter") !== void 0,
+            hasTransform: config.getProperty("transform") !== void 0,
+            hasInputSchema: config.getProperty("inputSchema") !== void 0
+          }
+        };
+      }
+      validate(metadata) {
+        const { errors, warnings } = this.baseValidation(metadata);
+        const { hasVerify, hasFilter, hasTransform } = metadata.metadata;
+        if (!hasVerify && !hasFilter && !hasTransform) {
+          errors.push(validationError("Trigger must define at least one of verify, filter, or transform", {
+            line: metadata.line
+          }));
+        }
+        if (metadata.name && !/^[a-z][a-z0-9-]*$/.test(metadata.name)) {
+          warnings.push(validationWarning("Trigger name should be URL-safe (lowercase, hyphens only)", {
+            line: metadata.line
+          }));
+        }
+        return {
+          valid: errors.length === 0,
+          errors,
+          warnings
+        };
+      }
+      /**
+      * Runtime check: a published trigger bundle must expose at least one slot
+      * function. (No `execute` — that's the defining feature.)
+      */
+      getRuntimeValidation() {
+        return `
+  const __slots = primitive.primitive || {};
+  if (
+    typeof __slots.verify !== 'function' &&
+    typeof __slots.filter !== 'function' &&
+    typeof __slots.transform !== 'function'
+  ) {
+    throw new Error('[Lua] Invalid trigger artifact: no verify/filter/transform slot');
+  }`;
+      }
+      /** Extract the SDK `inputSchema` (typed body) → manifest `body` schema. */
+      async extractSchemas(metadata, project) {
+        if (!metadata.metadata.hasInputSchema) return void 0;
+        const sourceFile = project.getSourceFile(metadata.sourcePath);
+        if (!sourceFile) return void 0;
+        const schemas = {};
+        if (metadata.metadata.pattern === "class-definition") {
+          const classDecl = locateClassDefinition(sourceFile, metadata.exportName);
+          if (!classDecl) return void 0;
+          const hit = findClassMember(classDecl, "inputSchema", "property");
+          if (!hit || !Node7.isPropertyDeclaration(hit.node)) return void 0;
+          const schemaNode2 = hit.node.getInitializer();
+          if (!schemaNode2) return void 0;
+          try {
+            schemas.body = await zodToJsonSchema(schemaNode2);
+          } catch (error) {
+            console.warn(`Warning: Could not convert inputSchema for ${metadata.name}:`, error);
+          }
+          return Object.keys(schemas).length > 0 ? schemas : void 0;
+        }
+        const varDecl = sourceFile.getVariableDeclaration(metadata.exportName);
+        const initializer = varDecl?.getInitializer();
+        if (!initializer || !Node7.isCallExpression(initializer)) return void 0;
+        const args2 = initializer.getArguments();
+        if (args2.length === 0 || !Node7.isObjectLiteralExpression(args2[0])) return void 0;
+        const schemaNode = extractSchemaProperty(args2[0], "inputSchema");
+        if (schemaNode) {
+          try {
+            schemas.body = await zodToJsonSchema(schemaNode);
+          } catch (error) {
+            console.warn(`Warning: Could not convert inputSchema for ${metadata.name}:`, error);
+          }
+        }
+        return Object.keys(schemas).length > 0 ? schemas : void 0;
+      }
+      toManifestEntry(compiled, _allPrimitives) {
+        return {
+          ...this.baseManifestFields(compiled),
+          schemas: compiled.schemas ? {
+            body: compiled.schemas.body
+          } : void 0
+        };
+      }
+    };
+  }
+});
+
 // src/compiler/plugins/processor-base.ts
 var ProcessorPluginBase;
 var init_processor_base = __esm({
@@ -4717,7 +4928,7 @@ var init_processor_base = __esm({
 });
 
 // src/compiler/plugins/preprocessor.plugin.ts
-import { Node as Node7 } from "ts-morph";
+import { Node as Node8 } from "ts-morph";
 var PreProcessorPlugin;
 var init_preprocessor_plugin = __esm({
   "src/compiler/plugins/preprocessor.plugin.ts"() {
@@ -4752,9 +4963,9 @@ var init_preprocessor_plugin = __esm({
         const name = readStringMember(classDecl, "name") ?? deriveNameFromClassName(className);
         const description = readStringMember(classDecl, "description") ?? "";
         const asyncHit = findClassMember(classDecl, "async", "property");
-        const isAsync = asyncHit && Node7.isPropertyDeclaration(asyncHit.node) ? evaluateNodeAsBoolean(asyncHit.node.getInitializer()) ?? false : false;
+        const isAsync = asyncHit && Node8.isPropertyDeclaration(asyncHit.node) ? evaluateNodeAsBoolean(asyncHit.node.getInitializer()) ?? false : false;
         const priorityHit = findClassMember(classDecl, "priority", "property");
-        const priority = priorityHit && Node7.isPropertyDeclaration(priorityHit.node) ? evaluateNodeAsNumber(priorityHit.node.getInitializer()) : void 0;
+        const priority = priorityHit && Node8.isPropertyDeclaration(priorityHit.node) ? evaluateNodeAsNumber(priorityHit.node.getInitializer()) : void 0;
         return {
           kind: this.kind,
           name,
@@ -4803,7 +5014,7 @@ var init_preprocessor_plugin = __esm({
 });
 
 // src/compiler/plugins/postprocessor.plugin.ts
-import { Node as Node8 } from "ts-morph";
+import { Node as Node9 } from "ts-morph";
 var PostProcessorPlugin;
 var init_postprocessor_plugin = __esm({
   "src/compiler/plugins/postprocessor.plugin.ts"() {
@@ -4838,7 +5049,7 @@ var init_postprocessor_plugin = __esm({
         const name = readStringMember(classDecl, "name") ?? deriveNameFromClassName(className);
         const description = readStringMember(classDecl, "description") ?? "";
         const priorityHit = findClassMember(classDecl, "priority", "property");
-        const priority = priorityHit && Node8.isPropertyDeclaration(priorityHit.node) ? evaluateNodeAsNumber(priorityHit.node.getInitializer()) : void 0;
+        const priority = priorityHit && Node9.isPropertyDeclaration(priorityHit.node) ? evaluateNodeAsNumber(priorityHit.node.getInitializer()) : void 0;
         return {
           kind: this.kind,
           name,
@@ -4883,7 +5094,7 @@ var init_postprocessor_plugin = __esm({
 });
 
 // src/compiler/plugins/mcp-server.plugin.ts
-import { Node as Node9 } from "ts-morph";
+import { Node as Node10 } from "ts-morph";
 var MCPServerPlugin;
 var init_mcp_server_plugin = __esm({
   "src/compiler/plugins/mcp-server.plugin.ts"() {
@@ -4924,10 +5135,10 @@ var init_mcp_server_plugin = __esm({
         let hasUrlResolver = false;
         let urlResolverSource;
         if (urlHit) {
-          if (Node9.isMethodDeclaration(urlHit.node)) {
+          if (Node10.isMethodDeclaration(urlHit.node)) {
             hasUrlResolver = true;
             urlResolverSource = urlHit.node.getText();
-          } else if (Node9.isPropertyDeclaration(urlHit.node)) {
+          } else if (Node10.isPropertyDeclaration(urlHit.node)) {
             const init = urlHit.node.getInitializer();
             if (init && isFunction(init)) {
               hasUrlResolver = true;
@@ -4941,10 +5152,10 @@ var init_mcp_server_plugin = __esm({
         let hasHeadersResolver = false;
         let headersResolverSource;
         if (headersHit) {
-          if (Node9.isMethodDeclaration(headersHit.node)) {
+          if (Node10.isMethodDeclaration(headersHit.node)) {
             hasHeadersResolver = true;
             headersResolverSource = headersHit.node.getText();
-          } else if (Node9.isPropertyDeclaration(headersHit.node)) {
+          } else if (Node10.isPropertyDeclaration(headersHit.node)) {
             const init = headersHit.node.getInitializer();
             if (init && isFunction(init)) {
               hasHeadersResolver = true;
@@ -5075,10 +5286,10 @@ var init_mcp_server_plugin = __esm({
 // ../shared-source-sync/dist/index.mjs
 import { createHash } from "crypto";
 import { extname } from "path";
-import { readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2 } from "fs";
-import { join as join4, sep } from "path";
+import { readdirSync as readdirSync2, readFileSync as readFileSync7, statSync as statSync2 } from "fs";
+import { join as join5, sep } from "path";
 import { gunzipSync, gzipSync } from "zlib";
-import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync22, statSync as statSync22, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync22, statSync as statSync22, writeFileSync as writeFileSync6 } from "fs";
 import { dirname as dirname3, join as join22, resolve, sep as sep2 } from "path";
 import { mkdirSync as mkdirSync22, readdirSync as readdirSync22, readFileSync as readFileSync32, statSync as statSync3, writeFileSync as writeFileSync22 } from "fs";
 import { dirname as dirname22, join as join32, sep as sep3 } from "path";
@@ -5110,7 +5321,7 @@ function walkWorkspace(rootDir, opts = {}) {
   const contentByHash = /* @__PURE__ */ new Map();
   let totalSize = 0;
   const visit = /* @__PURE__ */ __name3((relPrefix) => {
-    const absDir = relPrefix ? join4(rootDir, relPrefix) : rootDir;
+    const absDir = relPrefix ? join5(rootDir, relPrefix) : rootDir;
     let entries;
     try {
       entries = readdirSync2(absDir, {
@@ -5129,7 +5340,7 @@ function walkWorkspace(rootDir, opts = {}) {
       if (!entry.isFile()) continue;
       if (shouldSkipFile(entry.name)) continue;
       const rel = (relPrefix ? `${relPrefix}${sep}${entry.name}` : entry.name).split(sep).join("/");
-      const abs = join4(rootDir, rel);
+      const abs = join5(rootDir, rel);
       let stats;
       try {
         stats = statSync2(abs);
@@ -5139,7 +5350,7 @@ function walkWorkspace(rootDir, opts = {}) {
       if (stats.size > maxBytes) continue;
       let content;
       try {
-        content = readFileSync6(abs);
+        content = readFileSync7(abs);
       } catch {
         continue;
       }
@@ -5245,7 +5456,7 @@ function restoreFromBlobs(manifest, blobs, targetDir, opts = {}) {
       throw new Error(`Blob not found for hash: ${file.hash} (${file.relativePath})`);
     }
     const targetPath = resolveBackupFileTarget(file, targetDir);
-    if (existsSync5(targetPath)) {
+    if (existsSync6(targetPath)) {
       const sameSize = statSync22(targetPath).size === content.length;
       if (sameSize && readFileSync22(targetPath).equals(content)) {
         filesUnchanged++;
@@ -5259,7 +5470,7 @@ function restoreFromBlobs(manifest, blobs, targetDir, opts = {}) {
     mkdirSync5(dirname3(targetPath), {
       recursive: true
     });
-    writeFileSync5(targetPath, content);
+    writeFileSync6(targetPath, content);
     filesWritten++;
   }
   return {
@@ -5678,7 +5889,7 @@ var init_path_resolver = __esm({
 });
 
 // src/compiler/utils/reference-resolver.ts
-import { Node as Node10 } from "ts-morph";
+import { Node as Node11 } from "ts-morph";
 function resolveArrayRefs(expression, ctx) {
   if (!expression) {
     return {
@@ -5726,10 +5937,10 @@ function reportDeopt(result, propertyName) {
   const sourceFile = deopt.getSourceFile();
   const filePath = sourceFile.getFilePath();
   const { line, column } = sourceFile.getLineAndColumnAtPos(deopt.getStart());
-  const snippet = truncate(deopt.getText(), 60);
+  const snippet2 = truncate(deopt.getText(), 60);
   return `[${result.ruleId}] ${filePath}:${line}:${column}
   could not statically resolve "${propertyName}": ${result.reason}
-  at: \`${snippet}\`
+  at: \`${snippet2}\`
   hint: inline the array, export the value as a plain array literal, or add a leading /* @lua-ignore-ref */ comment to silence`;
 }
 function formatSarifWarning(args2) {
@@ -5754,14 +5965,14 @@ function warnDroppedConstructorArgs(newExpr, className) {
   }));
 }
 function resolveArrayExpression(node, out, state) {
-  if (Node10.isArrayLiteralExpression(node)) {
+  if (Node11.isArrayLiteralExpression(node)) {
     for (const element of node.getElements()) {
       resolveArrayElement(element, out, state);
       if (state.deopt) return;
     }
     return;
   }
-  if (Node10.isIdentifier(node)) {
+  if (Node11.isIdentifier(node)) {
     const decl = followIdentifier(node, state);
     if (!decl) {
       const defaultExpr = followDefaultImportToExpression(node, state);
@@ -5775,7 +5986,7 @@ function resolveArrayExpression(node, out, state) {
       };
       return;
     }
-    if (!Node10.isVariableDeclaration(decl)) {
+    if (!Node11.isVariableDeclaration(decl)) {
       state.deopt = state.deopt ?? {
         node,
         reason: `identifier "${node.getText()}" resolves to a ${decl.getKindName()}, not an array`
@@ -5793,15 +6004,15 @@ function resolveArrayExpression(node, out, state) {
     resolveArrayExpression(init, out, state);
     return;
   }
-  if (Node10.isParenthesizedExpression(node)) {
+  if (Node11.isParenthesizedExpression(node)) {
     resolveArrayExpression(node.getExpression(), out, state);
     return;
   }
-  if (Node10.isAsExpression(node) || Node10.isTypeAssertion(node) || Node10.isSatisfiesExpression(node)) {
+  if (Node11.isAsExpression(node) || Node11.isTypeAssertion(node) || Node11.isSatisfiesExpression(node)) {
     resolveArrayExpression(node.getExpression(), out, state);
     return;
   }
-  if (Node10.isPropertyAccessExpression(node)) {
+  if (Node11.isPropertyAccessExpression(node)) {
     const value = resolvePropertyAccess(node, state);
     if (!value) {
       state.deopt = state.deopt ?? {
@@ -5813,7 +6024,7 @@ function resolveArrayExpression(node, out, state) {
     resolveArrayExpression(value, out, state);
     return;
   }
-  if (Node10.isCallExpression(node)) {
+  if (Node11.isCallExpression(node)) {
     state.deopt = state.deopt ?? {
       node,
       reason: `call expression "${truncate(node.getText(), 40)}" cannot be statically resolved to an array`
@@ -5827,19 +6038,19 @@ function resolveArrayExpression(node, out, state) {
 }
 function resolveArrayElement(element, out, state) {
   let node = element;
-  while (Node10.isParenthesizedExpression(node) || Node10.isAsExpression(node) || Node10.isTypeAssertion(node) || Node10.isSatisfiesExpression(node)) {
+  while (Node11.isParenthesizedExpression(node) || Node11.isAsExpression(node) || Node11.isTypeAssertion(node) || Node11.isSatisfiesExpression(node)) {
     node = node.getExpression();
   }
-  if (Node10.isSpreadElement(node)) {
+  if (Node11.isSpreadElement(node)) {
     resolveArrayExpression(node.getExpression(), out, state);
     return;
   }
-  if (Node10.isNewExpression(node)) {
+  if (Node11.isNewExpression(node)) {
     const classExpr = node.getExpression();
     const className = classExpr.getText();
-    if (Node10.isIdentifier(classExpr)) {
+    if (Node11.isIdentifier(classExpr)) {
       const decl = followIdentifier(classExpr, state);
-      if (decl && Node10.isClassDeclaration(decl)) {
+      if (decl && Node11.isClassDeclaration(decl)) {
         const declFile = decl.getSourceFile();
         const isProjectFile = !declFile.isDeclarationFile() && !declFile.isInNodeModules();
         if (isProjectFile) {
@@ -5862,7 +6073,7 @@ function resolveArrayElement(element, out, state) {
     });
     return;
   }
-  if (Node10.isIdentifier(node)) {
+  if (Node11.isIdentifier(node)) {
     const viaDefaultImport = isDefaultImportBinding(node);
     const decl = followIdentifier(node, state);
     if (!decl) {
@@ -5877,7 +6088,7 @@ function resolveArrayElement(element, out, state) {
       };
       return;
     }
-    if (Node10.isClassDeclaration(decl) || Node10.isFunctionDeclaration(decl)) {
+    if (Node11.isClassDeclaration(decl) || Node11.isFunctionDeclaration(decl)) {
       out.push({
         identifierName: node.getText(),
         sourceFile: decl.getSourceFile(),
@@ -5894,15 +6105,15 @@ function resolveArrayElement(element, out, state) {
       };
       return;
     }
-    if (Node10.isArrayLiteralExpression(init)) {
+    if (Node11.isArrayLiteralExpression(init)) {
       resolveArrayExpression(init, out, state);
       return;
     }
-    if (Node10.isIdentifier(init)) {
+    if (Node11.isIdentifier(init)) {
       resolveArrayElement(init, out, state);
       return;
     }
-    if (Node10.isNewExpression(init)) {
+    if (Node11.isNewExpression(init)) {
       out.push({
         identifierName: node.getText(),
         sourceFile: decl.getSourceFile(),
@@ -5912,7 +6123,7 @@ function resolveArrayElement(element, out, state) {
       });
       return;
     }
-    if (Node10.isCallExpression(init)) {
+    if (Node11.isCallExpression(init)) {
       out.push({
         identifierName: node.getText(),
         sourceFile: decl.getSourceFile(),
@@ -5929,7 +6140,7 @@ function resolveArrayElement(element, out, state) {
     });
     return;
   }
-  if (Node10.isPropertyAccessExpression(node)) {
+  if (Node11.isPropertyAccessExpression(node)) {
     const value = resolvePropertyAccess(node, state);
     if (!value) {
       state.deopt = state.deopt ?? {
@@ -6069,7 +6280,7 @@ function resolveDefaultInFile(sourceFile, state) {
   for (const assign of sourceFile.getExportAssignments()) {
     if (assign.isExportEquals()) continue;
     const expr = assign.getExpression();
-    if (Node10.isIdentifier(expr)) {
+    if (Node11.isIdentifier(expr)) {
       return resolveInFile(expr.getText(), sourceFile, state);
     }
     return void 0;
@@ -6109,7 +6320,7 @@ function followSymbol(node, state) {
     if (!symbol) return void 0;
     const aliased = symbol.isAlias() ? node.getSourceFile().getProject().getTypeChecker().getAliasedSymbol(symbol) ?? symbol : symbol;
     for (const decl of aliased.getDeclarations()) {
-      if (Node10.isVariableDeclaration(decl) || Node10.isClassDeclaration(decl) || Node10.isFunctionDeclaration(decl)) {
+      if (Node11.isVariableDeclaration(decl) || Node11.isClassDeclaration(decl) || Node11.isFunctionDeclaration(decl)) {
         return decl;
       }
     }
@@ -6125,7 +6336,7 @@ function followSymbolInFile(name, sourceFile, state) {
     const decls = exportedMap.get(name);
     if (!decls) return void 0;
     for (const decl of decls) {
-      if (Node10.isVariableDeclaration(decl) || Node10.isClassDeclaration(decl) || Node10.isFunctionDeclaration(decl)) {
+      if (Node11.isVariableDeclaration(decl) || Node11.isClassDeclaration(decl) || Node11.isFunctionDeclaration(decl)) {
         return decl;
       }
     }
@@ -6135,31 +6346,31 @@ function followSymbolInFile(name, sourceFile, state) {
   return void 0;
 }
 function resolvePropertyAccess(node, state) {
-  if (!Node10.isPropertyAccessExpression(node)) return void 0;
+  if (!Node11.isPropertyAccessExpression(node)) return void 0;
   const propertyName = node.getName();
   const objectExpr = node.getExpression();
-  if (Node10.isIdentifier(objectExpr)) {
+  if (Node11.isIdentifier(objectExpr)) {
     const namespaceTarget = followNamespaceImport(objectExpr, state);
     if (namespaceTarget) {
       const decl = resolveInFile(propertyName, namespaceTarget, state);
-      if (decl && Node10.isVariableDeclaration(decl)) {
+      if (decl && Node11.isVariableDeclaration(decl)) {
         return decl.getInitializer();
       }
       return void 0;
     }
   }
   let objectNode = objectExpr;
-  if (Node10.isIdentifier(objectExpr)) {
+  if (Node11.isIdentifier(objectExpr)) {
     const decl = followIdentifier(objectExpr, state);
-    objectNode = decl && Node10.isVariableDeclaration(decl) ? decl.getInitializer() : void 0;
-  } else if (Node10.isPropertyAccessExpression(objectExpr)) {
+    objectNode = decl && Node11.isVariableDeclaration(decl) ? decl.getInitializer() : void 0;
+  } else if (Node11.isPropertyAccessExpression(objectExpr)) {
     objectNode = resolvePropertyAccess(objectExpr, state);
   }
-  if (!objectNode || !Node10.isObjectLiteralExpression(objectNode)) {
+  if (!objectNode || !Node11.isObjectLiteralExpression(objectNode)) {
     return void 0;
   }
   const prop = objectNode.getProperty(propertyName);
-  if (!prop || !Node10.isPropertyAssignment(prop)) return void 0;
+  if (!prop || !Node11.isPropertyAssignment(prop)) return void 0;
   return prop.getInitializer();
 }
 function followNamespaceImport(identifier, state) {
@@ -6249,12 +6460,12 @@ var init_reference_resolver = __esm({
 
 // src/compiler/plugins/skill.plugin.ts
 import fs4 from "fs/promises";
-import { Node as Node11 } from "ts-morph";
+import { Node as Node12 } from "ts-morph";
 function findEnclosingVariableDeclaration(config) {
   let current = config.getParent();
   for (let depth = 0; depth < 5 && current; depth++) {
-    if (Node11.isVariableDeclaration(current)) return current;
-    if (Node11.isStatement(current) || Node11.isSourceFile(current)) return void 0;
+    if (Node12.isVariableDeclaration(current)) return current;
+    if (Node12.isStatement(current) || Node12.isSourceFile(current)) return void 0;
     current = current.getParent();
   }
   return void 0;
@@ -6262,14 +6473,14 @@ function findEnclosingVariableDeclaration(config) {
 function receiverResolvesToVarDecl(receiver, target, maxDepth = 10) {
   let current = receiver;
   for (let i = 0; i < maxDepth && current; i++) {
-    if (!Node11.isIdentifier(current)) return false;
+    if (!Node12.isIdentifier(current)) return false;
     const symbol = current.getSymbol();
     const decls = symbol?.getDeclarations() ?? [];
-    const varDecl = decls.find((d) => Node11.isVariableDeclaration(d));
+    const varDecl = decls.find((d) => Node12.isVariableDeclaration(d));
     if (!varDecl) return false;
     if (varDecl === target) return true;
     const init = varDecl.getInitializer();
-    if (init && Node11.isIdentifier(init)) {
+    if (init && Node12.isIdentifier(init)) {
       current = init;
       continue;
     }
@@ -6330,7 +6541,7 @@ var init_skill_plugin = __esm({
         const description = readStringMember(classDecl, "description") ?? "";
         const contextHit = findClassMember(classDecl, "context", "property");
         let context;
-        if (contextHit && Node11.isPropertyDeclaration(contextHit.node)) {
+        if (contextHit && Node12.isPropertyDeclaration(contextHit.node)) {
           const init = contextHit.node.getInitializer();
           const asString = evaluateNodeAsString(init);
           if (asString !== void 0) {
@@ -6341,7 +6552,7 @@ var init_skill_plugin = __esm({
           }
         }
         const toolsHit = findClassMember(classDecl, "tools", "property");
-        const toolRefsFromArray = toolsHit && Node11.isPropertyDeclaration(toolsHit.node) ? this.resolveToolRefsFromInitializer(toolsHit.node.getInitializer()) : [];
+        const toolRefsFromArray = toolsHit && Node12.isPropertyDeclaration(toolsHit.node) ? this.resolveToolRefsFromInitializer(toolsHit.node.getInitializer()) : [];
         const methodToolRefs = this.extractToolRefsFromMethodCalls(classDecl, {
           ownerClass: classDecl
         });
@@ -6447,7 +6658,7 @@ var init_skill_plugin = __esm({
       */
       extractToolRefs(config) {
         const toolsProp = config.getProperty("tools");
-        if (!toolsProp || !Node11.isPropertyAssignment(toolsProp)) return [];
+        if (!toolsProp || !Node12.isPropertyAssignment(toolsProp)) return [];
         const toolsValue = toolsProp.getInitializer();
         if (!toolsValue) return [];
         const project = config.getSourceFile().getProject();
@@ -6492,9 +6703,9 @@ var init_skill_plugin = __esm({
         const project = scope.getSourceFile().getProject();
         const ownerVar = "owner" in owner ? owner.owner : void 0;
         scope.forEachDescendant((node) => {
-          if (!Node11.isCallExpression(node)) return;
+          if (!Node12.isCallExpression(node)) return;
           const expression = node.getExpression();
-          if (!Node11.isPropertyAccessExpression(expression)) return;
+          if (!Node12.isPropertyAccessExpression(expression)) return;
           const property = expression.getName();
           if (property !== "addTools" && property !== "addTool") return;
           if (ownerVar && !receiverResolvesToVarDecl(expression.getExpression(), ownerVar)) return;
@@ -6516,13 +6727,13 @@ var init_skill_plugin = __esm({
             return;
           }
           const arg = args2[0];
-          if (Node11.isNewExpression(arg)) {
+          if (Node12.isNewExpression(arg)) {
             const className = arg.getExpression().getText();
             warnDroppedConstructorArgs(arg, className);
             refs.push({
               className
             });
-          } else if (Node11.isIdentifier(arg)) {
+          } else if (Node12.isIdentifier(arg)) {
             refs.push({
               className: arg.getText()
             });
@@ -6684,7 +6895,7 @@ var init_skill_plugin = __esm({
 });
 
 // src/compiler/plugins/agent.plugin.ts
-import { Node as Node12 } from "ts-morph";
+import { Node as Node13 } from "ts-morph";
 function shapeModelSettings(raw) {
   const KNOWN_KEYS = [
     "temperature",
@@ -6769,7 +6980,7 @@ var init_agent_plugin = __esm({
         const baseDescription = readStringMember(classDecl, "description") ?? "";
         const personaHit = findClassMember(classDecl, "persona", "property");
         let persona = "";
-        if (personaHit && Node12.isPropertyDeclaration(personaHit.node)) {
+        if (personaHit && Node13.isPropertyDeclaration(personaHit.node)) {
           const init = personaHit.node.getInitializer();
           const asString = evaluateNodeAsString(init);
           if (asString !== void 0) {
@@ -6783,9 +6994,9 @@ var init_agent_plugin = __esm({
         let hasModelResolver = false;
         const modelHit = findClassMember(classDecl, "model", "either");
         if (modelHit) {
-          if (Node12.isMethodDeclaration(modelHit.node)) {
+          if (Node13.isMethodDeclaration(modelHit.node)) {
             hasModelResolver = true;
-          } else if (Node12.isPropertyDeclaration(modelHit.node)) {
+          } else if (Node13.isPropertyDeclaration(modelHit.node)) {
             const init = modelHit.node.getInitializer();
             if (init && isFunction(init)) {
               hasModelResolver = true;
@@ -6795,13 +7006,13 @@ var init_agent_plugin = __esm({
           }
         }
         const batchingHit = findClassMember(classDecl, "batching", "property");
-        const batchingObj = batchingHit && Node12.isPropertyDeclaration(batchingHit.node) ? evaluateNodeAsObject(batchingHit.node.getInitializer()) : void 0;
+        const batchingObj = batchingHit && Node13.isPropertyDeclaration(batchingHit.node) ? evaluateNodeAsObject(batchingHit.node.getInitializer()) : void 0;
         const batching = batchingObj ? this.shapeBatching(batchingObj) : void 0;
         const governanceHit = findClassMember(classDecl, "governance", "property");
-        const governanceObj = governanceHit && Node12.isPropertyDeclaration(governanceHit.node) ? evaluateNodeAsObject(governanceHit.node.getInitializer()) : void 0;
+        const governanceObj = governanceHit && Node13.isPropertyDeclaration(governanceHit.node) ? evaluateNodeAsObject(governanceHit.node.getInitializer()) : void 0;
         const governance = governanceObj && typeof governanceObj.mode === "string" ? governanceObj : void 0;
         const modelSettingsHit = findClassMember(classDecl, "modelSettings", "property");
-        const modelSettingsObj = modelSettingsHit && Node12.isPropertyDeclaration(modelSettingsHit.node) ? evaluateNodeAsObject(modelSettingsHit.node.getInitializer()) : void 0;
+        const modelSettingsObj = modelSettingsHit && Node13.isPropertyDeclaration(modelSettingsHit.node) ? evaluateNodeAsObject(modelSettingsHit.node.getInitializer()) : void 0;
         const modelSettings = modelSettingsObj ? shapeModelSettings(modelSettingsObj) : void 0;
         return {
           kind: this.kind,
@@ -6890,9 +7101,9 @@ var init_agent_plugin = __esm({
       */
       extractVoiceRefs(config) {
         const prop = config.getProperty("voices");
-        if (!prop || !Node12.isPropertyAssignment(prop)) return {};
+        if (!prop || !Node13.isPropertyAssignment(prop)) return {};
         const value = prop.getInitializer();
-        if (!value || !Node12.isArrayLiteralExpression(value)) return {};
+        if (!value || !Node13.isArrayLiteralExpression(value)) return {};
         const project = config.getSourceFile().getProject();
         const result = resolveArrayRefs(value, {
           project
@@ -6997,14 +7208,14 @@ var init_agent_plugin = __esm({
         let result = null;
         sourceFile.forEachDescendant((node) => {
           if (result) return;
-          if (Node12.isNewExpression(node)) {
+          if (Node13.isNewExpression(node)) {
             const expr = node.getExpression();
             if (expr.getText() === "LuaAgent") {
               const args2 = node.getArguments();
-              if (args2.length > 0 && Node12.isObjectLiteralExpression(args2[0])) {
+              if (args2.length > 0 && Node13.isObjectLiteralExpression(args2[0])) {
                 const config = args2[0];
                 const parent = node.getParent();
-                const exportName = parent && Node12.isVariableDeclaration(parent) ? parent.getName() : "default";
+                const exportName = parent && Node13.isVariableDeclaration(parent) ? parent.getName() : "default";
                 const pos = sourceFile.getLineAndColumnAtPos(node.getStart());
                 const metadata = this.extractFromConfig(config, exportName, sourceFile.getFilePath(), pos, "class");
                 if (metadata) {
@@ -7217,7 +7428,7 @@ var init_device_plugin = __esm({
 });
 
 // src/compiler/plugins/device-trigger.plugin.ts
-import { Node as Node13 } from "ts-morph";
+import { Node as Node14 } from "ts-morph";
 var DeviceTriggerPlugin;
 var init_device_trigger_plugin = __esm({
   "src/compiler/plugins/device-trigger.plugin.ts"() {
@@ -7336,7 +7547,7 @@ var init_device_trigger_plugin = __esm({
           const classDecl = locateClassDefinition(sourceFile, metadata.exportName);
           if (!classDecl) return void 0;
           const hit = findClassMember(classDecl, "payloadSchema", "property");
-          if (!hit || !Node13.isPropertyDeclaration(hit.node)) return void 0;
+          if (!hit || !Node14.isPropertyDeclaration(hit.node)) return void 0;
           const schemaNode = hit.node.getInitializer();
           if (!schemaNode) return void 0;
           try {
@@ -7349,11 +7560,11 @@ var init_device_trigger_plugin = __esm({
         const varDecl = sourceFile.getVariableDeclaration(metadata.exportName);
         if (!varDecl) return void 0;
         const initializer = varDecl.getInitializer();
-        if (!initializer || !Node13.isCallExpression(initializer)) return void 0;
+        if (!initializer || !Node14.isCallExpression(initializer)) return void 0;
         const args2 = initializer.getArguments();
         if (args2.length === 0) return void 0;
         const config = args2[0];
-        if (!Node13.isObjectLiteralExpression(config)) return void 0;
+        if (!Node14.isObjectLiteralExpression(config)) return void 0;
         if (metadata.metadata.hasPayloadSchema) {
           const schemaNode = extractSchemaProperty(config, "payloadSchema");
           if (schemaNode) {
@@ -7380,10 +7591,10 @@ var init_device_trigger_plugin = __esm({
 });
 
 // src/compiler/utils/primitive-rewrite.ts
-import { readFileSync as readFileSync8 } from "fs";
-import { Node as Node14, Project, ts as ts3 } from "ts-morph";
+import { readFileSync as readFileSync9 } from "fs";
+import { Node as Node15, Project, ts as ts3 } from "ts-morph";
 function rewritePrimitiveSource(metadata, opts) {
-  const sourceCode = readFileSync8(metadata.sourcePath, "utf-8");
+  const sourceCode = readFileSync9(metadata.sourcePath, "utf-8");
   const localProject = new Project({
     useInMemoryFileSystem: true,
     compilerOptions: {
@@ -7394,13 +7605,13 @@ function rewritePrimitiveSource(metadata, opts) {
   });
   const sf = localProject.createSourceFile(`__rewrite_${metadata.kind}_${metadata.name}.ts`, sourceCode);
   const isPrimitiveCall = /* @__PURE__ */ __name((n) => {
-    if (Node14.isNewExpression(n)) {
+    if (Node15.isNewExpression(n)) {
       const callee = n.getExpression();
-      return Node14.isIdentifier(callee) && opts.constructorNames.includes(callee.getText());
+      return Node15.isIdentifier(callee) && opts.constructorNames.includes(callee.getText());
     }
-    if (Node14.isCallExpression(n)) {
+    if (Node15.isCallExpression(n)) {
       const callee = n.getExpression();
-      return Node14.isIdentifier(callee) && opts.defineFunctionName !== void 0 && callee.getText() === opts.defineFunctionName;
+      return Node15.isIdentifier(callee) && opts.defineFunctionName !== void 0 && callee.getText() === opts.defineFunctionName;
     }
     return false;
   }, "isPrimitiveCall");
@@ -7409,7 +7620,7 @@ function rewritePrimitiveSource(metadata, opts) {
     throw new Error(`Primitive call for export "${metadata.exportName}" (kind=${metadata.kind}) not found in ${metadata.sourcePath}`);
   }
   const arg = callNode.getArguments()[0];
-  if (!arg || !Node14.isObjectLiteralExpression(arg)) {
+  if (!arg || !Node15.isObjectLiteralExpression(arg)) {
     throw new Error(`Primitive config arg is not an object literal in ${metadata.sourcePath}`);
   }
   const synthesized = opts.buildLiteral(arg, {
@@ -7441,7 +7652,7 @@ function rewriteCrossFileCallsInSourceFile(sf, specs, sdkBaseClassNames) {
     const spec = callNode.spec;
     const node = callNode.node;
     const arg = node.getArguments()[0];
-    const objArg = arg && Node14.isObjectLiteralExpression(arg) ? arg : void 0;
+    const objArg = arg && Node15.isObjectLiteralExpression(arg) ? arg : void 0;
     node.replaceWithText(buildBareObjectLiteral(spec, objArg));
     progressed = true;
   }
@@ -7474,18 +7685,18 @@ function stripSdkExtendsClauses(sf, sdkBaseClassNames, aliasMap) {
     const ext = classDecl.getExtends();
     if (!ext) continue;
     const expr = ext.getExpression();
-    if (!Node14.isIdentifier(expr)) continue;
+    if (!Node15.isIdentifier(expr)) continue;
     if (matchesSdkClass(expr.getText())) {
       classDecl.removeExtends();
       stripSuperCallsInConstructors(classDecl);
     }
   }
   sf.forEachDescendant((n) => {
-    if (!Node14.isClassExpression(n)) return;
+    if (!Node15.isClassExpression(n)) return;
     const ext = n.getExtends();
     if (!ext) return;
     const expr = ext.getExpression();
-    if (!Node14.isIdentifier(expr)) return;
+    if (!Node15.isIdentifier(expr)) return;
     if (matchesSdkClass(expr.getText())) {
       n.removeExtends();
       stripSuperCallsInConstructors(n);
@@ -7495,12 +7706,12 @@ function stripSdkExtendsClauses(sf, sdkBaseClassNames, aliasMap) {
 function stripSuperCallsInConstructors(classNode) {
   for (const ctor of classNode.getConstructors()) {
     const body = ctor.getBody();
-    if (!body || !Node14.isBlock(body)) continue;
+    if (!body || !Node15.isBlock(body)) continue;
     const toRemove = [];
     for (const stmt of body.getStatements()) {
-      if (!Node14.isExpressionStatement(stmt)) continue;
+      if (!Node15.isExpressionStatement(stmt)) continue;
       const expr = stmt.getExpression();
-      if (!Node14.isCallExpression(expr)) continue;
+      if (!Node15.isCallExpression(expr)) continue;
       if (expr.getExpression().getKind() !== ts3.SyntaxKind.SuperKeyword) continue;
       toRemove.push(stmt);
     }
@@ -7513,7 +7724,7 @@ function warnRemainingSuperReferences(classNode) {
   classNode.forEachDescendant((n) => {
     if (n.getKind() !== ts3.SyntaxKind.SuperKeyword) return;
     const parent = n.getParent();
-    if (parent && Node14.isCallExpression(parent) && parent.getExpression() === n && Node14.isExpressionStatement(parent.getParent())) {
+    if (parent && Node15.isCallExpression(parent) && parent.getExpression() === n && Node15.isExpressionStatement(parent.getParent())) {
       return;
     }
     const pos = sf.getLineAndColumnAtPos(n.getStart());
@@ -7545,7 +7756,7 @@ function buildSdkAliasMap(sf, sdkIdentifiers) {
     progressed = false;
     for (const vd of sf.getVariableDeclarations()) {
       const init = vd.getInitializer();
-      if (!init || !Node14.isIdentifier(init)) continue;
+      if (!init || !Node15.isIdentifier(init)) continue;
       const name = vd.getName();
       if (map.has(name)) continue;
       const initText = init.getText();
@@ -7562,18 +7773,18 @@ function findFirstCrossFileSdkCall(sf, specs, aliasMap) {
   let found;
   sf.forEachDescendant((n) => {
     if (found) return;
-    if (Node14.isNewExpression(n)) {
+    if (Node15.isNewExpression(n)) {
       const callee = n.getExpression();
-      if (!Node14.isIdentifier(callee)) return;
+      if (!Node15.isIdentifier(callee)) return;
       const canonical = aliasMap.get(callee.getText()) ?? callee.getText();
       const spec = specs.find((s) => s.classNames.includes(canonical));
       if (spec) found = {
         node: n,
         spec
       };
-    } else if (Node14.isCallExpression(n)) {
+    } else if (Node15.isCallExpression(n)) {
       const callee = n.getExpression();
-      if (!Node14.isIdentifier(callee)) return;
+      if (!Node15.isIdentifier(callee)) return;
       const canonical = aliasMap.get(callee.getText()) ?? callee.getText();
       const spec = specs.find((s) => s.defineFunction !== void 0 && s.defineFunction === canonical);
       if (spec) found = {
@@ -7592,10 +7803,10 @@ function buildBareObjectLiteral(spec, arg) {
   const parts = [];
   for (const f of spec.fields) {
     const prop = arg.getProperty(f);
-    if (prop && Node14.isPropertyAssignment(prop)) {
+    if (prop && Node15.isPropertyAssignment(prop)) {
       const init = prop.getInitializer();
       if (init) parts.push(`${f}: ${init.getText()}`);
-    } else if (prop && Node14.isShorthandPropertyAssignment(prop)) {
+    } else if (prop && Node15.isShorthandPropertyAssignment(prop)) {
       parts.push(`${f}: ${prop.getName()}`);
     }
   }
@@ -7604,10 +7815,10 @@ function buildBareObjectLiteral(spec, arg) {
 function findCallByExportName(sf, metadata, isPrimitiveCall) {
   if (metadata.isDefaultExport) {
     for (const stmt of sf.getStatements()) {
-      if (!Node14.isExportAssignment(stmt)) continue;
+      if (!Node15.isExportAssignment(stmt)) continue;
       const expr = stmt.getExpression();
       if (isPrimitiveCall(expr)) return expr;
-      if (Node14.isIdentifier(expr)) {
+      if (Node15.isIdentifier(expr)) {
         const varDecl2 = sf.getVariableDeclaration(expr.getText());
         const init2 = varDecl2?.getInitializer();
         if (init2 && isPrimitiveCall(init2)) return init2;
@@ -7630,14 +7841,14 @@ function stripLuaCliImports(sf) {
 }
 function ensureDefaultExport(sf, metadata) {
   if (metadata.isDefaultExport) return;
-  const existingDefault = sf.getStatements().find(Node14.isExportAssignment);
+  const existingDefault = sf.getStatements().find(Node15.isExportAssignment);
   if (!existingDefault) {
     sf.addStatements(`
 export default ${metadata.exportName};`);
     return;
   }
   const expr = existingDefault.getExpression();
-  const alreadyCorrect = Node14.isIdentifier(expr) && expr.getText() === metadata.exportName;
+  const alreadyCorrect = Node15.isIdentifier(expr) && expr.getText() === metadata.exportName;
   if (!alreadyCorrect) {
     existingDefault.remove();
     sf.addStatements(`
@@ -7646,10 +7857,10 @@ export default ${metadata.exportName};`);
 }
 function getPropertyText(arg, name) {
   const prop = arg.getProperty(name);
-  if (prop && Node14.isPropertyAssignment(prop)) {
+  if (prop && Node15.isPropertyAssignment(prop)) {
     return prop.getInitializer()?.getText();
   }
-  if (prop && Node14.isShorthandPropertyAssignment(prop)) {
+  if (prop && Node15.isShorthandPropertyAssignment(prop)) {
     return prop.getName();
   }
   return void 0;
@@ -7723,11 +7934,11 @@ var init_cross_file_specs = __esm({
 
 // src/compiler/plugins/voice.plugin.ts
 import fs5 from "fs/promises";
-import { Node as Node15 } from "ts-morph";
+import { Node as Node16 } from "ts-morph";
 function astObjectToPlain(obj) {
   const result = {};
   for (const prop of obj.getProperties()) {
-    if (Node15.isSpreadAssignment(prop)) {
+    if (Node16.isSpreadAssignment(prop)) {
       const expr = prop.getExpression();
       const evaluated = astValueToPlain(expr);
       if (evaluated && typeof evaluated === "object" && !Array.isArray(evaluated)) {
@@ -7735,14 +7946,14 @@ function astObjectToPlain(obj) {
       }
       continue;
     }
-    if (Node15.isShorthandPropertyAssignment(prop)) {
+    if (Node16.isShorthandPropertyAssignment(prop)) {
       const key2 = prop.getName();
       if (!key2) continue;
       const v2 = astValueToPlain(prop.getNameNode());
       if (v2 !== void 0) result[key2] = v2;
       continue;
     }
-    if (!Node15.isPropertyAssignment(prop)) continue;
+    if (!Node16.isPropertyAssignment(prop)) continue;
     const key = prop.getName();
     if (!key) continue;
     const value = prop.getInitializer();
@@ -7753,16 +7964,16 @@ function astObjectToPlain(obj) {
   return result;
 }
 function astValueToPlain(value) {
-  if (Node15.isStringLiteral(value) || Node15.isNoSubstitutionTemplateLiteral(value)) {
+  if (Node16.isStringLiteral(value) || Node16.isNoSubstitutionTemplateLiteral(value)) {
     return value.getLiteralText();
   }
-  if (Node15.isNumericLiteral(value)) {
+  if (Node16.isNumericLiteral(value)) {
     return Number(value.getLiteralText());
   }
-  if (Node15.isTrueLiteral(value)) return true;
-  if (Node15.isFalseLiteral(value)) return false;
-  if (Node15.isObjectLiteralExpression(value)) return astObjectToPlain(value);
-  if (Node15.isArrayLiteralExpression(value)) {
+  if (Node16.isTrueLiteral(value)) return true;
+  if (Node16.isFalseLiteral(value)) return false;
+  if (Node16.isObjectLiteralExpression(value)) return astObjectToPlain(value);
+  if (Node16.isArrayLiteralExpression(value)) {
     return value.getElements().map((el) => astValueToPlain(el)).filter((x) => x !== void 0);
   }
   return void 0;
@@ -7821,10 +8032,10 @@ function stripKeys(obj, keys) {
 }
 function leftmostIdentifierName(node) {
   let current = node;
-  while (Node15.isPropertyAccessExpression(current)) {
+  while (Node16.isPropertyAccessExpression(current)) {
     current = current.getExpression();
   }
-  return Node15.isIdentifier(current) ? current.getText() : void 0;
+  return Node16.isIdentifier(current) ? current.getText() : void 0;
 }
 function resolveProviderAlias(node, localName) {
   const sourceFile = node.getSourceFile();
@@ -7850,7 +8061,7 @@ function resolveProviderAlias(node, localName) {
 function extractRealtimeFromNewExpression(newExpr, classExpr, field) {
   if (classExpr.getName() !== "RealtimeModel") return void 0;
   const realtimeNode = classExpr.getExpression();
-  if (!Node15.isPropertyAccessExpression(realtimeNode) || realtimeNode.getName() !== "realtime") {
+  if (!Node16.isPropertyAccessExpression(realtimeNode) || realtimeNode.getName() !== "realtime") {
     return void 0;
   }
   if (field !== "llm") {
@@ -7881,7 +8092,7 @@ function extractRealtimeFromNewExpression(newExpr, classExpr, field) {
   }
   const optsArg = newExpr.getArguments()[0];
   let options = {};
-  if (optsArg && Node15.isObjectLiteralExpression(optsArg)) {
+  if (optsArg && Node16.isObjectLiteralExpression(optsArg)) {
     options = astObjectToPlain(optsArg);
   }
   return {
@@ -7894,7 +8105,7 @@ function extractRealtimeFromNewExpression(newExpr, classExpr, field) {
 }
 function extractFromNewExpression(newExpr, field) {
   const expr = newExpr.getExpression();
-  if (!Node15.isPropertyAccessExpression(expr)) {
+  if (!Node16.isPropertyAccessExpression(expr)) {
     return {
       error: {
         field,
@@ -7924,7 +8135,7 @@ function extractFromNewExpression(newExpr, field) {
   }
   const optsArg = newExpr.getArguments()[0];
   let options = {};
-  if (optsArg && Node15.isObjectLiteralExpression(optsArg)) {
+  if (optsArg && Node16.isObjectLiteralExpression(optsArg)) {
     options = astObjectToPlain(optsArg);
   }
   if (moduleName === "inference") {
@@ -7972,7 +8183,7 @@ function extractFromNewExpression(newExpr, field) {
 }
 function unwrapType(node) {
   let current = node;
-  while (Node15.isAsExpression(current) || Node15.isSatisfiesExpression(current) || Node15.isParenthesizedExpression(current)) {
+  while (Node16.isAsExpression(current) || Node16.isSatisfiesExpression(current) || Node16.isParenthesizedExpression(current)) {
     const inner = current.getExpression?.();
     if (!inner) break;
     current = inner;
@@ -7981,11 +8192,11 @@ function unwrapType(node) {
 }
 function extractModelField(config, field) {
   const prop = config.getProperty(field);
-  if (!prop || !Node15.isPropertyAssignment(prop)) return {};
+  if (!prop || !Node16.isPropertyAssignment(prop)) return {};
   const initializer = prop.getInitializer();
   if (!initializer) return {};
   const value = unwrapType(initializer);
-  if (Node15.isStringLiteral(value) || Node15.isNoSubstitutionTemplateLiteral(value)) {
+  if (Node16.isStringLiteral(value) || Node16.isNoSubstitutionTemplateLiteral(value)) {
     const text = value.getLiteralText();
     if (!text) {
       return {
@@ -7997,7 +8208,7 @@ function extractModelField(config, field) {
     }
     return parseDescriptor(text, field);
   }
-  if (Node15.isObjectLiteralExpression(value)) {
+  if (Node16.isObjectLiteralExpression(value)) {
     if (field !== "tts") {
       return {
         error: {
@@ -8024,7 +8235,7 @@ function extractModelField(config, field) {
       model: out
     };
   }
-  if (Node15.isNewExpression(value)) {
+  if (Node16.isNewExpression(value)) {
     return extractFromNewExpression(value, field);
   }
   return {
@@ -8037,22 +8248,22 @@ function extractModelField(config, field) {
 function hasFunctionProperty(config, propertyName) {
   const prop = config.getProperty(propertyName);
   if (!prop) return false;
-  if (Node15.isMethodDeclaration(prop)) return true;
-  if (!Node15.isPropertyAssignment(prop)) return false;
+  if (Node16.isMethodDeclaration(prop)) return true;
+  if (!Node16.isPropertyAssignment(prop)) return false;
   const value = prop.getInitializer();
   if (!value) return false;
-  if (Node15.isArrowFunction(value) || Node15.isFunctionExpression(value)) return true;
-  if (Node15.isIdentifier(value)) return true;
+  if (Node16.isArrowFunction(value) || Node16.isFunctionExpression(value)) return true;
+  if (Node16.isIdentifier(value)) return true;
   return false;
 }
 function hasArrayProperty(config, propertyName) {
   const prop = config.getProperty(propertyName);
-  if (!prop || !Node15.isPropertyAssignment(prop)) return false;
+  if (!prop || !Node16.isPropertyAssignment(prop)) return false;
   const value = prop.getInitializer();
   if (!value) return false;
-  if (Node15.isArrayLiteralExpression(value)) return value.getElements().length > 0;
-  if (Node15.isNullLiteral(value)) return false;
-  if (Node15.isIdentifier(value) && value.getText() === "undefined") return false;
+  if (Node16.isArrayLiteralExpression(value)) return value.getElements().length > 0;
+  if (Node16.isNullLiteral(value)) return false;
+  if (Node16.isIdentifier(value) && value.getText() === "undefined") return false;
   return true;
 }
 function normalizePronunciations(raw) {
@@ -8155,6 +8366,7 @@ var init_voice_plugin = __esm({
         const persistTranscript = extractBooleanProperty(config, "persistTranscript");
         const onToolFailureSay = extractStringProperty(config, "onToolFailureSay");
         const volume = extractNumberProperty(config, "volume");
+        const excludeTools = extractStringArrayProperty(config, "excludeTools");
         const interruption = extractObjectProperty(config, "interruption");
         const pronunciationsRaw = extractObjectProperty(config, "pronunciations");
         const { map: pronunciations, droppedKeys: droppedPronunciationKeys } = normalizePronunciations(pronunciationsRaw);
@@ -8191,6 +8403,7 @@ var init_voice_plugin = __esm({
             krispEnabled,
             persistTranscript,
             onToolFailureSay,
+            excludeTools,
             volume,
             pronunciations,
             backgroundAudio,
@@ -8251,6 +8464,7 @@ var init_voice_plugin = __esm({
           if (fields.krispEnabled !== void 0) candidate.krispEnabled = fields.krispEnabled;
           if (fields.persistTranscript !== void 0) candidate.persistTranscript = fields.persistTranscript;
           if (fields.onToolFailureSay !== void 0) candidate.onToolFailureSay = fields.onToolFailureSay;
+          if (fields.excludeTools !== void 0) candidate.excludeTools = fields.excludeTools;
           if (fields.volume !== void 0) candidate.volume = fields.volume;
           if (fields.pronunciations !== void 0) candidate.pronunciations = fields.pronunciations;
           if (fields.backgroundAudio !== void 0) candidate.backgroundAudio = fields.backgroundAudio;
@@ -8406,6 +8620,7 @@ var init_voice_plugin = __esm({
           pronunciations: fields.pronunciations,
           persistTranscript: fields.persistTranscript,
           onToolFailureSay: fields.onToolFailureSay,
+          excludeTools: fields.excludeTools,
           interruption: fields.interruption
         };
         return entry;
@@ -8428,6 +8643,7 @@ var init_registry = __esm({
     init_tool_plugin();
     init_job_plugin();
     init_webhook_plugin();
+    init_trigger_plugin();
     init_preprocessor_plugin();
     init_postprocessor_plugin();
     init_mcp_server_plugin();
@@ -8445,6 +8661,7 @@ var init_registry = __esm({
         this.register(new ToolPlugin());
         this.register(new JobPlugin());
         this.register(new WebhookPlugin());
+        this.register(new TriggerPlugin());
         this.register(new PreProcessorPlugin());
         this.register(new PostProcessorPlugin());
         this.register(new MCPServerPlugin());
@@ -8727,7 +8944,7 @@ export { ${exportName} as __lua_target__ };
 });
 
 // src/compiler/agent-traverser.ts
-import { Project as Project2, Node as Node16 } from "ts-morph";
+import { Project as Project2, Node as Node17 } from "ts-morph";
 import path6 from "path";
 import fs7 from "fs";
 var PRIMITIVE_TYPES, AgentTraverser;
@@ -8749,6 +8966,10 @@ var init_agent_traverser = __esm({
         kind: "webhook",
         configProperty: "webhooks"
       },
+      {
+        kind: "trigger",
+        configProperty: "triggers"
+      },
       {
         kind: "job",
         configProperty: "jobs"
@@ -8950,7 +9171,7 @@ var init_agent_traverser = __esm({
       */
       extractArrayRefs(config, propName) {
         const prop = config.getProperty(propName);
-        if (!prop || !Node16.isPropertyAssignment(prop)) return [];
+        if (!prop || !Node17.isPropertyAssignment(prop)) return [];
         const value = prop.getInitializer();
         if (!value) return [];
         const ctx = {
@@ -9035,7 +9256,7 @@ var init_agent_traverser = __esm({
             for (const assign of file.getExportAssignments()) {
               if (assign.isExportEquals()) continue;
               const expr = assign.getExpression();
-              if (!Node16.isIdentifier(expr)) continue;
+              if (!Node17.isIdentifier(expr)) continue;
               const targetName = expr.getText();
               defaultMatch = detected.find((d) => d.exportName === targetName);
               if (defaultMatch) break;
@@ -9798,7 +10019,7 @@ var init_file_discovery = __esm({
 });
 
 // src/compiler/source-writer.ts
-import { Project as Project4, Node as Node17 } from "ts-morph";
+import { Project as Project4, Node as Node18 } from "ts-morph";
 import fs11 from "fs";
 import path10 from "path";
 function resolveEntryPath(options) {
@@ -9847,14 +10068,14 @@ function updateAgentConfig(updates, options) {
     const sourceFile = project.addSourceFileAtPath(indexPath);
     let updated = false;
     sourceFile.forEachDescendant((node) => {
-      if (Node17.isNewExpression(node) && node.getExpression().getText() === "LuaAgent") {
+      if (Node18.isNewExpression(node) && node.getExpression().getText() === "LuaAgent") {
         const args2 = node.getArguments();
-        if (args2.length > 0 && Node17.isObjectLiteralExpression(args2[0])) {
+        if (args2.length > 0 && Node18.isObjectLiteralExpression(args2[0])) {
           const configObj = args2[0];
           const replacedKeys = /* @__PURE__ */ new Set();
           let lastReplacedIndex = -1;
           configObj.getProperties().forEach((prop, index) => {
-            if (Node17.isPropertyAssignment(prop)) {
+            if (Node18.isPropertyAssignment(prop)) {
               const propName = prop.getName();
               if (Object.prototype.hasOwnProperty.call(filteredUpdates, propName)) {
                 const newValue = filteredUpdates[propName];
@@ -9917,14 +10138,14 @@ function removeAgentConfigProperty(propertyName, options) {
     let foundConstructor = false;
     let removed = false;
     sourceFile.forEachDescendant((node) => {
-      if (Node17.isNewExpression(node) && node.getExpression().getText() === "LuaAgent") {
+      if (Node18.isNewExpression(node) && node.getExpression().getText() === "LuaAgent") {
         const args2 = node.getArguments();
-        if (args2.length > 0 && Node17.isObjectLiteralExpression(args2[0])) {
+        if (args2.length > 0 && Node18.isObjectLiteralExpression(args2[0])) {
           foundConstructor = true;
           const configObj = args2[0];
           const props = configObj.getProperties();
           for (const prop of props) {
-            if (Node17.isPropertyAssignment(prop) && prop.getName() === propertyName) {
+            if (Node18.isPropertyAssignment(prop) && prop.getName() === propertyName) {
               prop.remove();
               removed = true;
               break;
@@ -12160,6 +12381,9 @@ var init_agents_api_service = __esm({
           } : {},
           ...body.threadId !== void 0 ? {
             threadId: body.threadId
+          } : {},
+          ...body.webhookPayload !== void 0 ? {
+            webhookPayload: body.webhookPayload
           } : {}
         };
       }
@@ -12542,6 +12766,30 @@ var init_voice_api_service = __esm({
         });
       }
       /**
+      * Create a voice room + client access token for a custom frontend
+      * (standard livekit-client). The session runs under a synthetic identity;
+      * pass `userId` to scope conversation memory + transcript to your own end
+      * user. Wraps `POST /developer/voice/:agentId/session`.
+      */
+      async createSession(input = {}) {
+        return this.httpPost(`/developer/voice/${this.agentId}/session`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /**
+      * Sandbox helper: throws on non-success and returns the unwrapped output.
+      */
+      async createSessionForSandbox(input = {}) {
+        const result = await this.createSession(input);
+        if (!result.success) {
+          throw new Error(result.error?.message || "Voice session creation failed");
+        }
+        if (!result.data) {
+          throw new Error("Voice session creation failed: empty response");
+        }
+        return result.data;
+      }
+      /**
       * Sandbox helper: throws on non-success and returns the unwrapped output.
       * Mirrors the shape `AgentsApiService.invokeForSandbox` exposes so the
       * `Voice` namespace in `api-exports.ts` stays a one-liner.
@@ -12560,6 +12808,79 @@ var init_voice_api_service = __esm({
   }
 });
 
+// src/api/channels-send.api.service.ts
+var ChannelsSendApiService;
+var init_channels_send_api_service = __esm({
+  "src/api/channels-send.api.service.ts"() {
+    "use strict";
+    init_http_client();
+    ChannelsSendApiService = class extends HttpClient {
+      static {
+        __name(this, "ChannelsSendApiService");
+      }
+      apiKey;
+      agentId;
+      constructor(baseUrl, apiKey, agentId) {
+        super(baseUrl), this.apiKey = apiKey, this.agentId = agentId;
+      }
+      /** POST /developer/agents/:agentId/channels/send */
+      async send(input) {
+        return this.httpPost(`/developer/agents/${this.agentId}/channels/send`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /** POST /developer/agents/:agentId/channels/whatsapp/template */
+      async sendWhatsAppTemplate(input) {
+        return this.httpPost(`/developer/agents/${this.agentId}/channels/whatsapp/template`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /** POST /developer/agents/:agentId/channels/email/send */
+      async sendEmail(input) {
+        return this.httpPost(`/developer/agents/${this.agentId}/channels/email/send`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /**
+      * Sandbox helper: throws on non-success, returns unwrapped output.
+      * A 200 with `persisted: false` is NOT an error — it passes through.
+      */
+      async sendForSandbox(input) {
+        const result = await this.send(input);
+        if (!result.success) {
+          throw new Error(result.error?.message || "Channel send failed");
+        }
+        if (!result.data) {
+          throw new Error("Channel send failed: empty response");
+        }
+        return result.data;
+      }
+      /** Sandbox helper for WhatsApp template sends. */
+      async sendWhatsAppTemplateForSandbox(input) {
+        const result = await this.sendWhatsAppTemplate(input);
+        if (!result.success) {
+          throw new Error(result.error?.message || "WhatsApp template send failed");
+        }
+        if (!result.data) {
+          throw new Error("WhatsApp template send failed: empty response");
+        }
+        return result.data;
+      }
+      /** Sandbox helper for email sends. */
+      async sendEmailForSandbox(input) {
+        const result = await this.sendEmail(input);
+        if (!result.success) {
+          throw new Error(result.error?.message || "Email send failed");
+        }
+        if (!result.data) {
+          throw new Error("Email send failed: empty response");
+        }
+        return result.data;
+      }
+    };
+  }
+});
+
 // src/api/device.api.service.ts
 var device_api_service_exports = {};
 __export(device_api_service_exports, {
@@ -12652,6 +12973,7 @@ __export(lazy_instances_exports, {
   getAiInstance: () => getAiInstance,
   getBasketsInstance: () => getBasketsInstance,
   getCdnInstance: () => getCdnInstance,
+  getChannelsSendInstance: () => getChannelsSendInstance,
   getDataInstance: () => getDataInstance,
   getDeveloperInstance: () => getDeveloperInstance,
   getDeviceInstance: () => getDeviceInstance,
@@ -12762,6 +13084,13 @@ async function getVoiceInstance() {
   }
   return _voiceInstance;
 }
+async function getChannelsSendInstance() {
+  if (!_channelsSendInstance) {
+    const creds = await getCredentials();
+    _channelsSendInstance = new ChannelsSendApiService(BASE_URLS.API, creds.apiKey, creds.agentId);
+  }
+  return _channelsSendInstance;
+}
 function clearAllInstances() {
   _userInstance = null;
   _dataInstance = null;
@@ -12776,8 +13105,9 @@ function clearAllInstances() {
   _cdnInstance = null;
   _developerInstance = null;
   _voiceInstance = null;
+  _channelsSendInstance = null;
 }
-var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _deviceInstance;
+var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _channelsSendInstance, _deviceInstance;
 var init_lazy_instances = __esm({
   "src/api/lazy-instances.ts"() {
     "use strict";
@@ -12796,6 +13126,7 @@ var init_lazy_instances = __esm({
     init_cdn_api_service();
     init_developer_api_service();
     init_voice_api_service();
+    init_channels_send_api_service();
     _userInstance = null;
     _dataInstance = null;
     _productsInstance = null;
@@ -12809,6 +13140,7 @@ var init_lazy_instances = __esm({
     _cdnInstance = null;
     _developerInstance = null;
     _voiceInstance = null;
+    _channelsSendInstance = null;
     __name(getUserInstance, "getUserInstance");
     __name(getDataInstance, "getDataInstance");
     __name(getProductsInstance, "getProductsInstance");
@@ -12824,6 +13156,7 @@ var init_lazy_instances = __esm({
     __name(getDeviceInstance, "getDeviceInstance");
     __name(getDeveloperInstance, "getDeveloperInstance");
     __name(getVoiceInstance, "getVoiceInstance");
+    __name(getChannelsSendInstance, "getChannelsSendInstance");
     __name(clearAllInstances, "clearAllInstances");
   }
 });
@@ -13858,13 +14191,164 @@ __name(configureCommand, "configureCommand");
 init_auth();
 init_command_utils();
 init_cli();
-import inquirer3 from "inquirer";
+import inquirer4 from "inquirer";
+import { writeFileSync as writeFileSync7, existsSync as existsSync8 } from "fs";
+import { join as join7 } from "path";
 
-// src/utils/init-prompts.ts
+// src/utils/prompt-handler.ts
+init_cli();
 import inquirer2 from "inquirer";
+async function safePrompt(questions) {
+  if (isCiModeEnabled()) {
+    throw new Error("Interactive prompt required but --ci flag is set. Provide all required flags or arguments.");
+  }
+  if (!process.stdin.isTTY && !isCiModeEnabled()) {
+    console.warn("\u26A0\uFE0F  Warning: stdin is not a TTY. Interactive prompts may not work correctly.");
+    console.warn("\u{1F4A1} Tip: Use --ci flag in CI/CD environments to fail loudly on missing required flags.");
+  }
+  try {
+    await new Promise((resolve6) => setTimeout(resolve6, 10));
+    const answers = await inquirer2.prompt(questions);
+    return answers;
+  } catch (error) {
+    if (error.name === "ExitPromptError" || error.message?.includes("SIGINT")) {
+      process.exit(0);
+    }
+    throw error;
+  }
+}
+__name(safePrompt, "safePrompt");
+async function confirmAction(message) {
+  const answer = await safePrompt([
+    {
+      type: "confirm",
+      name: "confirmed",
+      message,
+      default: false
+    }
+  ]);
+  return answer?.confirmed ?? false;
+}
+__name(confirmAction, "confirmAction");
+
+// src/utils/governance-scaffold.ts
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync5, existsSync as existsSync5 } from "fs";
+import { join as join4 } from "path";
+function generateGovernanceFile(setup) {
+  if (setup.mode === "api") {
+    return `/**
+ * Governance Policy (API mode)
+ * Enforcement is handled remotely via the Governance Cloud.
+ * Import this into your LuaAgent config.
+ *
+ * The API key is resolved on the platform at runtime from the
+ * GOVERNANCE_API_KEY env var. Never put the raw key in source.
+ */
+
+export const governance = {
+  mode: 'api' as const,
+  serverUrl: process.env.GOVERNANCE_API_URL ?? '${setup.serverUrl}',
+};
+`;
+  }
+  const ruleLines = [];
+  if (setup.blockTools && setup.blockTools.length > 0) {
+    const list = setup.blockTools.map((t) => `'${t}'`).join(", ");
+    ruleLines.push(`    blockTools: [${list}],`);
+  }
+  if (setup.requireApproval && setup.requireApproval.length > 0) {
+    const list = setup.requireApproval.map((t) => `'${t}'`).join(", ");
+    ruleLines.push(`    requireApproval: [${list}],`);
+  }
+  if (setup.tokenLimit && setup.tokenLimit > 0) {
+    ruleLines.push(`    tokenBudget: ${setup.tokenLimit},`);
+  }
+  return `/**
+ * Governance Policy (SDK mode)
+ * Policies are enforced locally at the platform level.
+ * Import this into your LuaAgent config.
+ */
+
+export const governance = {
+  mode: 'sdk' as const,
+  rules: {
+${ruleLines.join("\n")}
+  },
+};
+`;
+}
+__name(generateGovernanceFile, "generateGovernanceFile");
+function generateGovernanceFileFromConfig(config) {
+  if (config.mode === "api") {
+    return generateGovernanceFile({
+      mode: "api",
+      serverUrl: config.serverUrl ?? "https://api.heygovernance.ai"
+    });
+  }
+  const lines = [
+    `  mode: 'sdk' as const,`
+  ];
+  if (config.preset) lines.push(`  preset: ${JSON.stringify(config.preset)} as const,`);
+  if (config.injection) lines.push(`  injection: ${JSON.stringify(config.injection)},`);
+  if (config.rules && Object.keys(config.rules).length > 0) {
+    lines.push(`  rules: ${JSON.stringify(config.rules)},`);
+  }
+  return `/**
+ * Governance Policy (pulled from the server)
+ * Reflects the governance currently enforced for this agent \u2014 e.g. an org-set baseline.
+ * Edit and \`lua push\` to change it, or \`lua governance remove\` to clear it.
+ */
+
+export const governance = {
+${lines.join("\n")}
+};
+`;
+}
+__name(generateGovernanceFileFromConfig, "generateGovernanceFileFromConfig");
+function writeGovernanceFileFromConfig(config, projectRoot = process.cwd()) {
+  try {
+    const srcDir = join4(projectRoot, "src");
+    const targetDir = existsSync5(srcDir) ? srcDir : projectRoot;
+    writeFileSync5(join4(targetDir, "governance.ts"), generateGovernanceFileFromConfig(config), "utf-8");
+    injectGovernanceIntoAgent(join4(targetDir, "index.ts"));
+    return true;
+  } catch {
+    return false;
+  }
+}
+__name(writeGovernanceFileFromConfig, "writeGovernanceFileFromConfig");
+function injectGovernanceIntoAgent(agentSourcePath) {
+  if (!existsSync5(agentSourcePath)) return false;
+  let src = readFileSync6(agentSourcePath, "utf-8");
+  const hasImport = /from\s+['"]\.\/governance['"]/.test(src);
+  const hasField = /^\s*governance\s*[,:]/m.test(src);
+  if (hasImport && hasField) return true;
+  if (!hasImport) {
+    if (/import\s+\{[^}]*\}\s+from\s+['"]lua-cli['"];?/.test(src)) {
+      src = src.replace(/(import\s+\{[^}]*\}\s+from\s+['"]lua-cli['"];?)/, `$1
+import { governance } from './governance';`);
+    } else {
+      src = `import { governance } from './governance';
+${src}`;
+    }
+  }
+  if (!hasField) {
+    if (!/new\s+LuaAgent\s*\(\s*\{/.test(src)) {
+      return false;
+    }
+    src = src.replace(/(new\s+LuaAgent\s*\(\s*\{)/, `$1
+  governance,`);
+  }
+  writeFileSync5(agentSourcePath, src, "utf-8");
+  return true;
+}
+__name(injectGovernanceIntoAgent, "injectGovernanceIntoAgent");
+
+// src/utils/init-prompts.ts
+import inquirer3 from "inquirer";
 import chalk from "chalk";
 async function promptAgentChoice() {
-  const { agentChoice } = await inquirer2.prompt([
+  const { agentChoice } = await inquirer3.prompt([
     {
       type: "list",
       name: "agentChoice",
@@ -13893,7 +14377,7 @@ async function promptOrganizationSelection(orgs) {
     name: org.registeredName || org.name || "Unknown Organization",
     value: org
   }));
-  const { selectedOrg } = await inquirer2.prompt([
+  const { selectedOrg } = await inquirer3.prompt([
     {
       type: "list",
       name: "selectedOrg",
@@ -13912,7 +14396,7 @@ async function promptAgentSelection(org) {
     name: agent.name,
     value: agent
   }));
-  const { selectedAgent } = await inquirer2.prompt([
+  const { selectedAgent } = await inquirer3.prompt([
     {
       type: "list",
       name: "selectedAgent",
@@ -13926,7 +14410,7 @@ __name(promptAgentSelection, "promptAgentSelection");
 async function promptMetadataCollection(requiredFields) {
   const metadata = {};
   for (const field of requiredFields) {
-    const { [field]: value } = await inquirer2.prompt([
+    const { [field]: value } = await inquirer3.prompt([
       {
         type: "input",
         name: field,
@@ -13940,7 +14424,7 @@ async function promptMetadataCollection(requiredFields) {
 }
 __name(promptMetadataCollection, "promptMetadataCollection");
 async function promptAgentName() {
-  const { agentName } = await inquirer2.prompt([
+  const { agentName } = await inquirer3.prompt([
     {
       type: "input",
       name: "agentName",
@@ -13967,7 +14451,7 @@ async function promptModelSelection(models) {
   ];
   for (const provider of providers) {
     const providerModels = models.filter((m) => m.provider === provider);
-    choices.push(new inquirer2.Separator(`  \u2500\u2500 ${provider} \u2500\u2500`));
+    choices.push(new inquirer3.Separator(`  \u2500\u2500 ${provider} \u2500\u2500`));
     for (const m of providerModels) {
       choices.push({
         name: `${chalk.bold(m.code)}  ${chalk.gray(m.description)}`,
@@ -13976,7 +14460,7 @@ async function promptModelSelection(models) {
       });
     }
   }
-  const { selectedModel } = await inquirer2.prompt([
+  const { selectedModel } = await inquirer3.prompt([
     {
       type: "list",
       name: "selectedModel",
@@ -14009,7 +14493,7 @@ __name(displayPersonaInstructions, "displayPersonaInstructions");
 async function promptDuplicateOptions(sourceOrg, allOrgs, sourceAgentName) {
   let targetOrg = sourceOrg;
   if (allOrgs.length > 1) {
-    const { sameOrg } = await inquirer2.prompt([
+    const { sameOrg } = await inquirer3.prompt([
       {
         type: "list",
         name: "sameOrg",
@@ -14033,7 +14517,7 @@ async function promptDuplicateOptions(sourceOrg, allOrgs, sourceAgentName) {
     }
   }
   const defaultName = `${sourceAgentName} (Copy)`;
-  const { newName } = await inquirer2.prompt([
+  const { newName } = await inquirer3.prompt([
     {
       type: "input",
       name: "newName",
@@ -14042,7 +14526,7 @@ async function promptDuplicateOptions(sourceOrg, allOrgs, sourceAgentName) {
       validate: /* @__PURE__ */ __name((input) => input.trim().length > 0 || "Name is required", "validate")
     }
   ]);
-  const { includedBuckets } = await inquirer2.prompt([
+  const { includedBuckets } = await inquirer3.prompt([
     {
       type: "checkbox",
       name: "includedBuckets",
@@ -14086,7 +14570,7 @@ async function promptDuplicateOptions(sourceOrg, allOrgs, sourceAgentName) {
   console.log(chalk.white(`  Including:     ${includedBuckets.length > 0 ? includedBuckets.join(", ") : "core agent definition only"}`));
   console.log(chalk.cyan("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"));
   console.log("");
-  const { confirmed } = await inquirer2.prompt([
+  const { confirmed } = await inquirer3.prompt([
     {
       type: "confirm",
       name: "confirmed",
@@ -14135,9 +14619,13 @@ var AgentApi = class extends HttpClient {
   * @param provider - Optional provider filter
   * @returns Promise resolving to an ApiResponse containing an array of ApprovedModel objects
   */
-  async getApprovedModels(provider) {
-    const query = provider ? `?provider=${encodeURIComponent(provider)}` : "";
-    return this.httpGet(`/agents/self-serve/models${query}`, {
+  async getApprovedModels(provider, agentId, orgId) {
+    const params = new URLSearchParams();
+    if (provider) params.set("provider", provider);
+    if (agentId) params.set("agentId", agentId);
+    if (orgId) params.set("orgId", orgId);
+    const qs = params.toString();
+    return this.httpGet(`/agents/self-serve/models${qs ? `?${qs}` : ""}`, {
       Authorization: `Bearer ${this.apiKey}`
     });
   }
@@ -14272,8 +14760,8 @@ var AgentApi = class extends HttpClient {
   * });
   */
   async updateAgentFeature(agentId, featureData) {
-    if (featureData.active === void 0 && featureData.featureContext === void 0) {
-      throw new Error('At least one of "active" or "featureContext" must be provided');
+    if (featureData.active === void 0 && featureData.featureContext === void 0 && featureData.config === void 0) {
+      throw new Error('At least one of "active", "featureContext", or "config" must be provided');
     }
     return this.httpPut(`/admin/agents/${agentId}/features`, featureData, {
       Authorization: `Bearer ${this.apiKey}`
@@ -14408,20 +14896,24 @@ async function fetchExistingAgentDetails(apiKey, agentId) {
   return fetchAgentDetails(agentApi, agentId);
 }
 __name(fetchExistingAgentDetails, "fetchExistingAgentDetails");
-async function fetchApprovedModels(apiKey) {
+async function fetchApprovedModels(apiKey, agentId, orgId) {
   try {
     const agentApi = new AgentApi(BASE_URLS.API, apiKey);
-    const result = await agentApi.getApprovedModels();
-    return result.success && result.data ? result.data : [];
+    const result = await agentApi.getApprovedModels(void 0, agentId, orgId);
+    if (!result.success) return null;
+    return result.data ?? [];
   } catch {
-    return [];
+    return null;
   }
 }
 __name(fetchApprovedModels, "fetchApprovedModels");
 function validateModelCode(models, modelCode) {
-  if (models.length === 0) {
+  if (models === null) {
     return modelCode;
   }
+  if (models.length === 0) {
+    throw new Error("No models are currently available. If your organization restricts models, an admin may need to review its excluded-models list.");
+  }
   const match = models.find((m) => m.code === modelCode);
   if (!match) {
     const available = models.map((m) => `  ${m.code}  (${m.description})`).join("\n");
@@ -15872,6 +16364,14 @@ var AgentHandler = class {
   pullModel(serverModel) {
     return setAgentModel(serverModel);
   }
+  /**
+  * Pull a server-resolved governance config into a local `governance.ts` and wire the import.
+  * This is what lets an org-set baseline (or any server governance) show up as code — and it
+  * round-trips on the next push. Returns true if the file was written.
+  */
+  pullGovernance(serverGovernance) {
+    return writeGovernanceFileFromConfig(serverGovernance);
+  }
   // ===========================================================================
   // DRIFT DETECTION
   // ===========================================================================
@@ -16145,6 +16645,73 @@ async function duplicateAgentInteractive(apiKey, userData) {
   });
 }
 __name(duplicateAgentInteractive, "duplicateAgentInteractive");
+async function maybeScaffoldGovernanceForNewProject(projectDir) {
+  try {
+    const { wantGovernance } = await safePrompt([
+      {
+        type: "confirm",
+        name: "wantGovernance",
+        message: "Add governance (policy enforcement on tools & messages) to this agent?",
+        default: false
+      }
+    ]);
+    if (!wantGovernance) return;
+    const { mode: govMode } = await safePrompt([
+      {
+        type: "list",
+        name: "mode",
+        message: "Governance mode:",
+        choices: [
+          {
+            name: "SDK \u2014 local, in-memory policies (no server)",
+            value: "sdk"
+          },
+          {
+            name: "API \u2014 remote enforcement via Governance Cloud",
+            value: "api"
+          }
+        ]
+      }
+    ]);
+    let setup;
+    if (govMode === "api") {
+      const { serverUrl } = await safePrompt([
+        {
+          type: "input",
+          name: "serverUrl",
+          message: "Governance API URL:",
+          default: "https://api.heygovernance.ai"
+        }
+      ]);
+      setup = {
+        mode: "api",
+        serverUrl
+      };
+    } else {
+      setup = {
+        mode: "sdk",
+        blockTools: [],
+        requireApproval: [],
+        tokenLimit: 0
+      };
+    }
+    const srcDir = join7(projectDir, "src");
+    const targetDir = existsSync8(srcDir) ? srcDir : projectDir;
+    writeFileSync7(join7(targetDir, "governance.ts"), generateGovernanceFile(setup), "utf-8");
+    const wired = injectGovernanceIntoAgent(join7(targetDir, "index.ts"));
+    writeSuccess("\u2705 Governance scaffolded (src/governance.ts)");
+    if (!wired) {
+      writeInfo("\u26A0\uFE0F  Couldn't auto-wire governance \u2014 import { governance } from './governance' and add `governance,` to your LuaAgent.");
+    }
+    if (govMode === "api") {
+      writeInfo("   Set the key on the platform (never commit it): lua env set GOVERNANCE_API_KEY <key>");
+    }
+    writeInfo("   Refine policies after `lua compile` with `lua governance add`.");
+  } catch (err) {
+    writeInfo(`\u26A0\uFE0F  Skipped governance setup: ${err?.message ?? "unknown error"}. Add it later with \`lua governance add\`.`);
+  }
+}
+__name(maybeScaffoldGovernanceForNewProject, "maybeScaffoldGovernanceForNewProject");
 async function initCommand(options = {}) {
   const withExamples = options.withExamples ?? false;
   return withErrorHandling(async () => {
@@ -16177,7 +16744,7 @@ async function initCommand(options = {}) {
             writeError("\n\u26A0\uFE0F  You don't have access to the agent in this project");
             writeInfo(`   Agent ID: ${existingAgentId}
 `);
-            const { action } = await inquirer3.prompt([
+            const { action } = await inquirer4.prompt([
               {
                 type: "list",
                 name: "action",
@@ -16214,7 +16781,7 @@ async function initCommand(options = {}) {
             writeInfo("\n\u{1F4CB} Found existing project configuration");
             writeInfo(`   Current Agent ID: ${existingAgentId}
 `);
-            const { wantSwitch } = await inquirer3.prompt([
+            const { wantSwitch } = await inquirer4.prompt([
               {
                 type: "list",
                 name: "wantSwitch",
@@ -16250,7 +16817,8 @@ async function initCommand(options = {}) {
     let isNewAgent = false;
     let selectedModel;
     if (options.model) {
-      const models = await fetchApprovedModels(apiKey);
+      const agentHint = options.agentId ?? options.fromAgentId;
+      const models = await fetchApprovedModels(apiKey, agentHint, options.orgId);
       selectedModel = validateModelCode(models, options.model);
     }
     if (mode.type === "existing-agent") {
@@ -16332,7 +16900,7 @@ async function initCommand(options = {}) {
       if (serverModel) {
         selectedModel = serverModel;
       } else if (mode.type === "interactive") {
-        const models = await fetchApprovedModels(apiKey);
+        const models = await fetchApprovedModels(apiKey, void 0, selectedOrg.id) ?? [];
         if (models.length > 0) {
           selectedModel = await promptModelSelection(models);
         }
@@ -16366,6 +16934,9 @@ async function initCommand(options = {}) {
       writeSuccess("\u2705 LuaAgent configuration updated!");
     } else {
       const currentDir = initializeProject(selectedAgent.agentId, selectedOrg.id, persona, selectedAgent.name, withExamples, sourcesRestored, selectedModel);
+      if (!sourcesRestored && mode.type === "interactive") {
+        await maybeScaffoldGovernanceForNewProject(currentDir);
+      }
       await installDependencies(currentDir);
       if (sourcesRestored) {
         writeSuccess("\u2705 Project initialized with restored sources!");
@@ -16500,7 +17071,7 @@ __name(createNewAgentNonInteractive, "createNewAgentNonInteractive");
 async function createNewAgentFlow(apiKey, userData, promoCode) {
   const agentTypes = await fetchAgentTypes(apiKey);
   const selectedAgentType = selectBaseAgentType(agentTypes);
-  const { orgChoice } = await inquirer3.prompt([
+  const { orgChoice } = await inquirer4.prompt([
     {
       type: "list",
       name: "orgChoice",
@@ -16531,7 +17102,7 @@ async function createNewAgentFlow(apiKey, userData, promoCode) {
     }
   }
   if (!orgId) {
-    const { organizationName } = await inquirer3.prompt([
+    const { organizationName } = await inquirer4.prompt([
       {
         type: "input",
         name: "organizationName",
@@ -16556,7 +17127,7 @@ async function createNewAgentFlow(apiKey, userData, promoCode) {
   const agentName = await promptAgentName();
   linesToClear += 1;
   let selectedModel;
-  const models = await fetchApprovedModels(apiKey);
+  const models = await fetchApprovedModels(apiKey, void 0, orgId) ?? [];
   if (models.length > 0) {
     selectedModel = await promptModelSelection(models);
   }
@@ -16597,7 +17168,7 @@ async function handleAgentSwitch(userData, apiKey, existingYaml) {
     if (serverModel) {
       selectedModel = serverModel;
     } else {
-      const models = await fetchApprovedModels(apiKey);
+      const models = await fetchApprovedModels(apiKey, void 0, selectedOrg.id) ?? [];
       if (models.length > 0) {
         selectedModel = await promptModelSelection(models);
       }
@@ -16658,7 +17229,7 @@ async function promptPersonaReplacement(existingYaml, newPersona) {
   }
   writeInfo("\n\u{1F4DD} Persona Configuration:");
   writeInfo("   Existing persona found in project");
-  const { replacePersona } = await inquirer3.prompt([
+  const { replacePersona } = await inquirer4.prompt([
     {
       type: "confirm",
       name: "replacePersona",
@@ -16678,7 +17249,7 @@ async function checkAndRestoreBackup(apiKey, agentId, options) {
   }
   const conflicts = checkRestoreConflicts(manifest, targetDir);
   if (!options.autoRestore && conflicts.existingFiles.length > 0) {
-    const { confirm } = await inquirer3.prompt([
+    const { confirm } = await inquirer4.prompt([
       {
         type: "confirm",
         name: "confirm",
@@ -16727,7 +17298,7 @@ __name(checkAndRestoreBackup, "checkAndRestoreBackup");
 init_auth();
 init_cli();
 init_analytics();
-import inquirer4 from "inquirer";
+import inquirer5 from "inquirer";
 async function destroyCommand(options) {
   return withErrorHandling(async () => {
     let apiKey;
@@ -16755,7 +17326,7 @@ async function destroyCommand(options) {
       });
       return;
     }
-    const { confirm } = await inquirer4.prompt([
+    const { confirm } = await inquirer5.prompt([
       {
         type: "confirm",
         name: "confirm",
@@ -16789,7 +17360,7 @@ __name(destroyCommand, "destroyCommand");
 init_auth();
 init_cli();
 init_analytics();
-import inquirer5 from "inquirer";
+import inquirer6 from "inquirer";
 async function apiKeyCommand(options) {
   return withErrorHandling(async () => {
     let apiKey;
@@ -16811,7 +17382,7 @@ async function apiKeyCommand(options) {
       });
       return;
     }
-    const { confirm } = await inquirer5.prompt([
+    const { confirm } = await inquirer6.prompt([
       {
         type: "confirm",
         name: "confirm",
@@ -16845,44 +17416,6 @@ init_dist();
 init_cli();
 import fs13 from "fs";
 import path12 from "path";
-
-// src/utils/prompt-handler.ts
-init_cli();
-import inquirer6 from "inquirer";
-async function safePrompt(questions) {
-  if (isCiModeEnabled()) {
-    throw new Error("Interactive prompt required but --ci flag is set. Provide all required flags or arguments.");
-  }
-  if (!process.stdin.isTTY && !isCiModeEnabled()) {
-    console.warn("\u26A0\uFE0F  Warning: stdin is not a TTY. Interactive prompts may not work correctly.");
-    console.warn("\u{1F4A1} Tip: Use --ci flag in CI/CD environments to fail loudly on missing required flags.");
-  }
-  try {
-    await new Promise((resolve6) => setTimeout(resolve6, 10));
-    const answers = await inquirer6.prompt(questions);
-    return answers;
-  } catch (error) {
-    if (error.name === "ExitPromptError" || error.message?.includes("SIGINT")) {
-      process.exit(0);
-    }
-    throw error;
-  }
-}
-__name(safePrompt, "safePrompt");
-async function confirmAction(message) {
-  const answer = await safePrompt([
-    {
-      type: "confirm",
-      name: "confirmed",
-      message,
-      default: false
-    }
-  ]);
-  return answer?.confirmed ?? false;
-}
-__name(confirmAction, "confirmAction");
-
-// src/commands/sync.ts
 init_command_utils();
 
 // src/commands/log-tip.ts
@@ -17285,6 +17818,14 @@ async function executeAcceptMode(context, drift, primitiveDrift, force) {
       console.error("\u274C Failed to update model in code.");
     }
   }
+  if (drift.governance?.serverGovernance) {
+    writeProgress("\u{1F4DD} Syncing governance from server...");
+    if (agentHandler.pullGovernance(drift.governance.serverGovernance)) {
+      writeSuccess("\u2705 Governance synced from server (governance.ts)");
+    } else {
+      console.error("\u274C Failed to write governance.ts.");
+    }
+  }
   if (unresolvedCount > 0) {
     writeInfo(`
 \u26A0\uFE0F  Sync partially complete \u2014 ${unresolvedCount} primitive(s) unresolved. See above.`);
@@ -17372,12 +17913,16 @@ async function executePushMode(context, drift, primitiveDrift) {
       }
     }
     if (drift.governance) {
-      writeProgress("\u{1F4E4} Pushing governance config to server...");
-      if (await agentHandler.pushGovernance(context, drift.governance.localGovernance)) {
-        writeSuccess("\u2705 Governance config pushed to server");
+      if (!drift.governance.localGovernance) {
+        writeInfo("\u2139\uFE0F  Server has governance config not present locally \u2014 leaving it intact (run `lua governance remove` to clear it).");
       } else {
-        console.error("\u274C Failed to push governance config");
-        syncFullySucceeded = false;
+        writeProgress("\u{1F4E4} Pushing governance config to server...");
+        if (await agentHandler.pushGovernance(context, drift.governance.localGovernance)) {
+          writeSuccess("\u2705 Governance config pushed to server");
+        } else {
+          console.error("\u274C Failed to push governance config");
+          syncFullySucceeded = false;
+        }
       }
     }
   } catch (error) {
@@ -17704,21 +18249,25 @@ async function handlePrimitiveDriftInteractive(context, primitiveDrift) {
 __name(handlePrimitiveDriftInteractive, "handlePrimitiveDriftInteractive");
 async function handleGovernanceDriftInteractive(context, drift) {
   showGovernanceDiff(drift.serverGovernance, drift.localGovernance);
+  const choices = [];
+  if (drift.localGovernance) choices.push({
+    name: "\u{1F4E4} Push local to server",
+    value: "push"
+  });
+  if (drift.serverGovernance) choices.push({
+    name: "\u{1F4E5} Pull server to local (governance.ts)",
+    value: "pull"
+  });
+  choices.push({
+    name: "\u23ED\uFE0F  Skip",
+    value: "skip"
+  });
   const answer = await safePrompt([
     {
       type: "list",
       name: "action",
       message: "What would you like to do with governance config?",
-      choices: [
-        {
-          name: "\u{1F4E4} Push local to server",
-          value: "push"
-        },
-        {
-          name: "\u23ED\uFE0F  Skip",
-          value: "skip"
-        }
-      ]
+      choices
     }
   ]);
   if (!answer || answer.action === "skip") {
@@ -17736,6 +18285,13 @@ async function handleGovernanceDriftInteractive(context, drift) {
     } catch (error) {
       console.error("\u274C Failed to push governance config:", error.message);
     }
+  } else if (answer.action === "pull") {
+    writeProgress("\u{1F4E5} Pulling governance config to local...");
+    if (agentHandler.pullGovernance(drift.serverGovernance)) {
+      writeSuccess("\u2705 Governance config written to governance.ts");
+    } else {
+      console.error("\u274C Failed to write governance.ts");
+    }
   }
 }
 __name(handleGovernanceDriftInteractive, "handleGovernanceDriftInteractive");
@@ -17871,6 +18427,212 @@ var WebhookHandler = class extends BaseVersionedHandler {
 };
 var webhookHandler = new WebhookHandler();
 
+// src/primitives/trigger.handler.ts
+init_types();
+init_constants();
+
+// src/api/trigger.api.service.ts
+init_http_client();
+var TriggerApi = class extends HttpClient {
+  static {
+    __name(this, "TriggerApi");
+  }
+  apiKey;
+  agentId;
+  /**
+  * Creates an instance of TriggerApi
+  * @param baseUrl - The base URL for the API
+  * @param apiKey - The API key for authentication
+  * @param agentId - The unique identifier of the agent
+  */
+  constructor(baseUrl, apiKey, agentId) {
+    super(baseUrl);
+    this.apiKey = apiKey;
+    this.agentId = agentId;
+  }
+  /**
+  * Retrieves all triggers for the agent (including dispatch URLs)
+  */
+  async getTriggers() {
+    return this.httpGet(`/developer/triggers/${this.agentId}`, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Creates a new trigger and returns it, including its pasteable dispatch URL
+  */
+  async createTrigger(triggerData) {
+    return this.httpPost(`/developer/triggers/${this.agentId}`, triggerData, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Retrieves a single trigger including its dispatch URL
+  */
+  async getTrigger(triggerId) {
+    return this.httpGet(`/developer/triggers/${this.agentId}/${triggerId}`, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Updates trigger properties (name, description, instruction)
+  */
+  async updateTrigger(triggerId, data) {
+    return this.httpPatch(`/developer/triggers/${this.agentId}/${triggerId}`, data, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Activates a trigger (enables it to receive requests)
+  */
+  async activateTrigger(triggerId) {
+    return this.httpPost(`/developer/triggers/${this.agentId}/${triggerId}/activate`, {}, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Deactivates a trigger (stops it from receiving requests)
+  */
+  async deactivateTrigger(triggerId) {
+    return this.httpPost(`/developer/triggers/${this.agentId}/${triggerId}/deactivate`, {}, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Rotates the trigger token, invalidating the previous dispatch URL.
+  * Returns the trigger with its NEW url.
+  */
+  async rotateTriggerToken(triggerId) {
+    return this.httpPost(`/developer/triggers/${this.agentId}/${triggerId}/rotate-token`, {}, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Deletes a trigger. Execution history is retained until TTL expiry.
+  */
+  async deleteTrigger(triggerId) {
+    return this.httpDelete(`/developer/triggers/${this.agentId}/${triggerId}`, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Retrieves execution history for a trigger, newest first
+  * @param options.limit - Max executions to return (server default: 50, cap: 200)
+  * @param options.offset - Pagination offset (server default: 0)
+  */
+  async getTriggerExecutions(triggerId, options = {}) {
+    const queryParams = new URLSearchParams();
+    if (options.limit !== void 0) {
+      queryParams.append("limit", String(options.limit));
+    }
+    if (options.offset !== void 0) {
+      queryParams.append("offset", String(options.offset));
+    }
+    const query = queryParams.toString();
+    return this.httpGet(`/developer/triggers/${this.agentId}/${triggerId}/executions${query ? `?${query}` : ""}`, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /**
+  * Push a new SDK (defineTrigger) bundle version to the trigger (PRO-95).
+  * Used by the `lua push` flow via TriggerHandler.
+  */
+  async pushTrigger(triggerId, versionData) {
+    return this.httpPost(`/developer/triggers/${this.agentId}/${triggerId}/version`, versionData, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /** List the SDK versions of a trigger (newest first). */
+  async getTriggerVersions(triggerId) {
+    return this.httpGet(`/developer/triggers/${this.agentId}/${triggerId}/versions`, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+  /** Publish (promote to active) a trigger version. */
+  async publishTriggerVersion(triggerId, version) {
+    return this.httpPost(`/developer/triggers/${this.agentId}/${triggerId}/${version}/publish`, {}, {
+      Authorization: `Bearer ${this.apiKey}`
+    });
+  }
+};
+
+// src/primitives/trigger.handler.ts
+init_base_handler();
+var TriggerHandler = class extends BaseVersionedHandler {
+  static {
+    __name(this, "TriggerHandler");
+  }
+  kind = PrimitiveKind.TRIGGER;
+  displayName = "trigger";
+  displayNamePlural = "triggers";
+  deleteCommand = "lua triggers delete";
+  yamlConfig = {
+    yamlKey: "triggers",
+    idField: "triggerId"
+  };
+  getApi(apiKey, agentId) {
+    return new TriggerApi(BASE_URLS.API, apiKey, agentId);
+  }
+  async fetchFromServer(api) {
+    const response = await api.getTriggers();
+    if (!response.success || !response.data?.triggers) {
+      return null;
+    }
+    return response.data.triggers;
+  }
+  async createOnServer(api, primitive) {
+    const response = await api.createTrigger({
+      name: primitive.name,
+      description: primitive.description || `A Lua trigger for ${primitive.name}`
+    });
+    if (!response.success || !response.data?.id) return null;
+    return response.data.id;
+  }
+  isActive(serverItem) {
+    return serverItem.active !== false;
+  }
+  getActiveVersion(serverItem) {
+    if (serverItem.activeVersionId) {
+      return serverItem.versions?.find((v) => v.id === serverItem.activeVersionId)?.version ?? null;
+    }
+    return serverItem.versions?.find((v) => v.active === true)?.version ?? null;
+  }
+  async pushToServer(apiKey, agentId, entityId, pushData) {
+    const api = this.getApi(apiKey, agentId);
+    const response = await api.pushTrigger(entityId, {
+      ...pushData,
+      triggerId: entityId
+    });
+    return {
+      success: response.success,
+      error: response.error?.message
+    };
+  }
+  async publishVersion(apiKey, agentId, entityId, version) {
+    const api = this.getApi(apiKey, agentId);
+    const response = await api.publishTriggerVersion(entityId, version);
+    return {
+      success: response.success,
+      error: response.error?.message
+    };
+  }
+  /** Include the trigger's body schema (from the SDK inputSchema) in push data. */
+  buildPushData(primitive, compressedCode, codeS3Hash) {
+    const trigger = primitive;
+    return {
+      name: trigger.name,
+      description: trigger.description,
+      ...codeS3Hash ? {
+        codeS3Hash
+      } : {
+        code: compressedCode
+      },
+      bodySchema: trigger.schemas?.body || void 0
+    };
+  }
+};
+var triggerHandler = new TriggerHandler();
+
 // src/primitives/job.handler.ts
 init_types();
 init_constants();
@@ -18619,6 +19381,7 @@ var VoiceHandler = class extends BaseVersionedHandler {
     if (voice.volume !== void 0) body.volume = voice.volume;
     if (voice.pronunciations !== void 0) body.pronunciations = voice.pronunciations;
     if (voice.backgroundAudio !== void 0) body.backgroundAudio = voice.backgroundAudio;
+    if (voice.excludeTools !== void 0) body.excludeTools = voice.excludeTools;
     const hasCode = !!(voice.hasOnEnter || voice.hasOnUserTurnCompleted || voice.hasOnExit || voice.hasTools);
     if (hasCode) {
       const artifactCode = loadArtifact(voice);
@@ -18643,6 +19406,7 @@ init_mcp_server_handler();
 var primitiveHandlers = {
   [PrimitiveKind.SKILL]: skillHandler,
   [PrimitiveKind.WEBHOOK]: webhookHandler,
+  [PrimitiveKind.TRIGGER]: triggerHandler,
   [PrimitiveKind.JOB]: jobHandler,
   [PrimitiveKind.PREPROCESSOR]: preprocessorHandler,
   [PrimitiveKind.POSTPROCESSOR]: postprocessorHandler,
@@ -19951,6 +20715,30 @@ function createSandbox(options) {
         const voice = await getVoiceInstance2();
         return voice.dispatchForSandbox(input);
       }, "call")
+    },
+    // Outbound channel send (PRO-93). Proxied via the lua-cli developer
+    // endpoint (Bearer auth) — keeps lua test byte-equivalent to the lua-core
+    // production VM (which routes through /internal/agents/:agentId/channels/*).
+    Channels: {
+      send: /* @__PURE__ */ __name(async (input) => {
+        const { getChannelsSendInstance: getChannelsSendInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+        const channels = await getChannelsSendInstance2();
+        return channels.sendForSandbox(input);
+      }, "send"),
+      whatsapp: {
+        sendTemplate: /* @__PURE__ */ __name(async (input) => {
+          const { getChannelsSendInstance: getChannelsSendInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+          const channels = await getChannelsSendInstance2();
+          return channels.sendWhatsAppTemplateForSandbox(input);
+        }, "sendTemplate")
+      },
+      email: {
+        send: /* @__PURE__ */ __name(async (input) => {
+          const { getChannelsSendInstance: getChannelsSendInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+          const channels = await getChannelsSendInstance2();
+          return channels.sendEmailForSandbox(input);
+        }, "send")
+      }
     }
   };
   return createBaseSandboxContext({
@@ -20317,6 +21105,7 @@ var ALIAS_MAP = {
       "skill",
       "agent",
       "webhook",
+      "trigger",
       "job",
       "preprocessor",
       "postprocessor",
@@ -20337,6 +21126,7 @@ var ALIAS_MAP = {
       webhooks: "webhook",
       hook: "webhook",
       hooks: "webhook",
+      triggers: "trigger",
       jobs: "job",
       preprocessors: "preprocessor",
       pre: "preprocessor",
@@ -20430,6 +21220,7 @@ var ALIAS_MAP = {
     canonical: [
       "skill",
       "webhook",
+      "trigger",
       "job",
       "preprocessor",
       "postprocessor",
@@ -20440,6 +21231,7 @@ var ALIAS_MAP = {
       webhooks: "webhook",
       hook: "webhook",
       hooks: "webhook",
+      triggers: "trigger",
       jobs: "job",
       preprocessors: "preprocessor",
       pre: "preprocessor",
@@ -20644,7 +21436,8 @@ var ALIAS_MAP = {
       "list",
       "enable",
       "disable",
-      "view"
+      "view",
+      "configure"
     ],
     aliases: lowerKeys({
       ls: "list",
@@ -20655,7 +21448,9 @@ var ALIAS_MAP = {
       deactivate: "disable",
       show: "view",
       info: "view",
-      status: "view"
+      status: "view",
+      config: "configure",
+      set: "configure"
     })
   },
   "mcp.action": {
@@ -20708,7 +21503,8 @@ var ALIAS_MAP = {
       mcps: "mcp"
     })
   },
-  "triggers.action": {
+  // Integration-trigger subactions for `lua integrations webhooks` / `lua integrations triggers`
+  "integrations.webhooks.action": {
     canonical: [
       "list",
       "create",
@@ -20732,6 +21528,41 @@ var ALIAS_MAP = {
       "list-events": "events"
     })
   },
+  // Platform triggers (`lua triggers`, PRO-94)
+  "triggers.action": {
+    canonical: [
+      "list",
+      "create",
+      "logs",
+      "activate",
+      "deactivate",
+      "rotate-token",
+      "delete"
+    ],
+    aliases: lowerKeys({
+      view: "list",
+      show: "list",
+      ls: "list",
+      l: "list",
+      new: "create",
+      add: "create",
+      history: "logs",
+      executions: "logs",
+      runs: "logs",
+      log: "logs",
+      // NB: `on`/`off` are intentionally NOT platform aliases — they resolve to
+      // integration resume/pause and are redirected by triggers.ts's soft
+      // landing, so an `on→activate` mapping here would be unreachable.
+      enable: "activate",
+      disable: "deactivate",
+      rotate: "rotate-token",
+      rotate_token: "rotate-token",
+      rotatetoken: "rotate-token",
+      rm: "delete",
+      remove: "delete",
+      del: "delete"
+    })
+  },
   "marketplace.role": {
     canonical: [
       "create",
@@ -22111,11 +22942,11 @@ init_cli();
 
 // src/utils/git-auth-store.ts
 init_constants();
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync6 } from "fs";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync10, writeFileSync as writeFileSync8 } from "fs";
 import { dirname as dirname5 } from "path";
 function readStore() {
   try {
-    const raw = readFileSync9(AUTH_STORAGE_FILE, "utf8");
+    const raw = readFileSync10(AUTH_STORAGE_FILE, "utf8");
     const parsed = JSON.parse(raw);
     return {
       providers: parsed.providers ?? {}
@@ -22131,7 +22962,7 @@ function writeStore(store) {
   mkdirSync6(dirname5(AUTH_STORAGE_FILE), {
     recursive: true
   });
-  writeFileSync6(AUTH_STORAGE_FILE, JSON.stringify(store, null, 2), {
+  writeFileSync8(AUTH_STORAGE_FILE, JSON.stringify(store, null, 2), {
     mode: 384
   });
 }
@@ -22610,6 +23441,7 @@ function getDeployHint(type) {
   const deployableMap = {
     skill: "lua deploy skill",
     webhook: "lua deploy webhook",
+    trigger: "lua deploy trigger",
     job: "lua deploy job",
     preprocessor: "lua deploy preprocessor",
     postprocessor: "lua deploy postprocessor",
@@ -22934,6 +23766,8 @@ async function pushCommand(type, cmdObj) {
       versionedPushDeployResult = await pushVersionedPrimitive(skillHandler, options);
     } else if (selectedType === "webhook") {
       versionedPushDeployResult = await pushVersionedPrimitive(webhookHandler, options);
+    } else if (selectedType === "trigger") {
+      versionedPushDeployResult = await pushVersionedPrimitive(triggerHandler, options);
     } else if (selectedType === "job") {
       versionedPushDeployResult = await pushVersionedPrimitive(jobHandler, options);
     } else if (selectedType === "preprocessor") {
@@ -23335,6 +24169,7 @@ async function pushAllCommand(options) {
   const kindIcons = {
     skill: "\u{1F4E6}",
     webhook: "\u{1FA9D}",
+    trigger: "\u26A1",
     job: "\u23F0",
     preprocessor: "\u{1F4E5}",
     postprocessor: "\u{1F4E4}",
@@ -23344,6 +24179,7 @@ async function pushAllCommand(options) {
   const handlers = [
     skillHandler,
     webhookHandler,
+    triggerHandler,
     jobHandler,
     preprocessorHandler,
     postprocessorHandler,
@@ -23767,6 +24603,18 @@ var VERSIONED_DEPLOY_TYPES = [
       return (result.data?.versions || []).map(normalizeVersion);
     }, "getVersions")
   },
+  {
+    type: "trigger",
+    handler: triggerHandler,
+    label: "Trigger",
+    emoji: "\u26A1",
+    idField: "triggerId",
+    getVersions: /* @__PURE__ */ __name(async (apiKey, agentId, entityId) => {
+      const api = new TriggerApi(BASE_URLS.API, apiKey, agentId);
+      const result = await api.getTriggerVersions(entityId);
+      return (result.data?.versions || []).map(normalizeVersion);
+    }, "getVersions")
+  },
   {
     type: "job",
     handler: jobHandler,
@@ -24383,11 +25231,11 @@ init_cli();
 
 // src/utils/sandbox-storage.ts
 init_constants();
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7 } from "fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync9, mkdirSync as mkdirSync7 } from "fs";
 import { dirname as dirname6 } from "path";
 function readStore2() {
   try {
-    const raw = readFileSync10(SANDBOX_STORAGE_FILE, "utf8");
+    const raw = readFileSync11(SANDBOX_STORAGE_FILE, "utf8");
     const parsed = JSON.parse(raw);
     return {
       skills: parsed.skills ?? {},
@@ -24410,7 +25258,7 @@ function writeStore2(store) {
     mkdirSync7(dirname6(SANDBOX_STORAGE_FILE), {
       recursive: true
     });
-    writeFileSync7(SANDBOX_STORAGE_FILE, JSON.stringify(store, null, 2), "utf8");
+    writeFileSync9(SANDBOX_STORAGE_FILE, JSON.stringify(store, null, 2), "utf8");
   } catch {
   }
 }
@@ -30731,8 +31579,9 @@ init_auth();
 init_auth_api_service();
 init_files();
 init_artifact_loader();
-import { existsSync as existsSync7, readFileSync as readFileSync11 } from "fs";
-import { join as join6 } from "path";
+import chalk3 from "chalk";
+import { existsSync as existsSync9, readFileSync as readFileSync12 } from "fs";
+import { join as join8 } from "path";
 import { performance } from "perf_hooks";
 import * as os from "os";
 init_semver();
@@ -30899,7 +31748,7 @@ function gatherProject(config) {
     };
   }
   const rootDir = process.cwd();
-  const configPath = join6(rootDir, COMPILE_FILES.LUA_SKILL_YAML);
+  const configPath = join8(rootDir, COMPILE_FILES.LUA_SKILL_YAML);
   const agentId = config.agent?.agentId != null ? String(config.agent.agentId) : null;
   let agentName = null;
   let manifestFound = false;
@@ -31081,8 +31930,8 @@ function gatherTelemetry() {
     ].includes(envVal.toLowerCase());
   } else {
     try {
-      if (existsSync7(TELEMETRY_FILE)) {
-        const raw = readFileSync11(TELEMETRY_FILE, "utf8");
+      if (existsSync9(TELEMETRY_FILE)) {
+        const raw = readFileSync12(TELEMETRY_FILE, "utf8");
         const cfg = JSON.parse(raw);
         if (typeof cfg.enabled === "boolean") enabled = cfg.enabled;
       }
@@ -31109,12 +31958,12 @@ function deriveHints(report) {
       reason: "Authenticate for full server comparison"
     });
   }
-  for (const section of report.primitives) {
-    for (const orphan of section.orphans) {
+  for (const section2 of report.primitives) {
+    for (const orphan of section2.orphans) {
       if (!orphan.cleanupCommand) continue;
       hints.push({
         command: orphan.cleanupCommand,
-        reason: orphan.critical ? `Remove orphan ${section.displayName} "${orphan.name}" (causes errors)` : `Remove orphan ${section.displayName} "${orphan.name}"`
+        reason: orphan.critical ? `Remove orphan ${section2.displayName} "${orphan.name}" (causes errors)` : `Remove orphan ${section2.displayName} "${orphan.name}"`
       });
     }
   }
@@ -31137,129 +31986,170 @@ function pad(s, n) {
   return s.length >= n ? s : s + " ".repeat(n - s.length);
 }
 __name(pad, "pad");
+function truncate2(s, n) {
+  return s.length <= n ? s : s.slice(0, Math.max(0, n - 1)) + "\u2026";
+}
+__name(truncate2, "truncate");
 function printJson(report) {
   console.log(JSON.stringify(report));
 }
 __name(printJson, "printJson");
-function printHuman(report) {
-  const lines = [];
-  lines.push("");
-  lines.push("== lua status ==");
-  lines.push("");
+var TICK = chalk3.green("\u2713");
+var WARN = chalk3.yellow("!");
+var CROSS = chalk3.red("\u2717");
+var row = /* @__PURE__ */ __name((text, dim = false) => ({
+  text,
+  dim
+}), "row");
+function section(title, rows) {
+  const out = [
+    chalk3.bold(title)
+  ];
+  if (rows.length === 0) {
+    out.push(chalk3.dim("\u2514\u2500 (none)"));
+    return out;
+  }
+  rows.forEach((r, i) => {
+    const connector = chalk3.dim(i === rows.length - 1 ? "\u2514\u2500" : "\u251C\u2500");
+    const body = r.dim ? chalk3.dim(r.text) : r.text;
+    out.push(`${connector} ${body}`);
+  });
+  return out;
+}
+__name(section, "section");
+function renderHuman(report) {
+  const blocks = [];
   const env = report.environment;
-  lines.push("Environment");
-  lines.push(`  CLI version       ${env.cliVersion}  (channel: ${env.channel})`);
-  lines.push(`  Node              ${env.nodeVersion}`);
-  lines.push(`  OS                ${env.platform} ${env.osRelease} (${env.arch})`);
-  lines.push(`  Install method    ${env.installMethod}`);
-  lines.push(`  Exec path         ${env.execPath}`);
-  lines.push(`  Config dir        ${env.configDir}`);
-  lines.push(`  API base          ${env.apiBase}`);
-  lines.push(`  Auth base         ${env.authBase}`);
   const overrides = env.envOverrides;
-  const overridesStr = [
-    `LUA_API_URL: ${overrides.LUA_API_URL ?? "not set"}`,
-    `LUA_AUTH_URL: ${overrides.LUA_AUTH_URL ?? "not set"}`,
-    `LUA_API_KEY: ${overrides.LUA_API_KEY}`,
-    `LUA_TELEMETRY: ${overrides.LUA_TELEMETRY ?? "not set"}`,
-    `LUA_NO_HINTS: ${overrides.LUA_NO_HINTS ?? "not set"}`
-  ].join(", ");
-  lines.push(`  Env overrides     ${overridesStr}`);
-  lines.push("");
+  const setOverrides = [
+    overrides.LUA_API_URL !== null ? `LUA_API_URL=${overrides.LUA_API_URL}` : null,
+    overrides.LUA_AUTH_URL !== null ? `LUA_AUTH_URL=${overrides.LUA_AUTH_URL}` : null,
+    overrides.LUA_API_KEY === "set" ? `LUA_API_KEY=set` : null,
+    overrides.LUA_TELEMETRY !== null ? `LUA_TELEMETRY=${overrides.LUA_TELEMETRY}` : null,
+    overrides.LUA_NO_HINTS !== null ? `LUA_NO_HINTS=${overrides.LUA_NO_HINTS}` : null
+  ].filter((x) => x !== null);
+  blocks.push(section("Environment", [
+    row(`CLI version: ${env.cliVersion} (channel: ${env.channel})`),
+    row(`Node: ${env.nodeVersion}`),
+    row(`OS: ${env.platform} ${env.osRelease} (${env.arch})`),
+    row(`Install method: ${env.installMethod}`),
+    row(`API base: ${env.apiBase}`),
+    row(`Auth base: ${env.authBase}`),
+    row(`Config dir: ${env.configDir}`, true),
+    row(`Exec path: ${env.execPath}`, true),
+    ...setOverrides.map((o) => row(o, true))
+  ]));
   const u = report.updates;
-  lines.push("Updates");
-  lines.push(`  Current           ${u.current}`);
-  lines.push(`  Latest published  ${u.latest ?? "unknown"}`);
-  lines.push(`  Status            ${u.available ? "update available \u2014 run `lua update`" : "up to date"}`);
+  const updateRows = [
+    row(`Current: ${u.current}`),
+    row(`Latest: ${u.latest ?? "unknown"}`),
+    row(u.available ? `${WARN} update available \u2014 run \`lua update\`` : `${TICK} up to date`)
+  ];
   if (u.lastCheckedAt) {
-    lines.push(`  Last checked      ${u.lastCheckedAt}${u.fromCache ? " (cache)" : ""}`);
+    updateRows.push(row(`Last checked: ${u.lastCheckedAt}${u.fromCache ? " (cache)" : ""}`, true));
   }
-  lines.push("");
+  blocks.push(section("Updates", updateRows));
   const a = report.auth;
-  lines.push("Auth");
+  const authRows = [];
   if (a.source) {
-    lines.push(`  Key source        ${a.source}`);
     if (a.authenticated) {
-      lines.push(`  Email             ${a.email ?? "unknown"}`);
-      lines.push(`  User ID           ${a.userId ?? "unknown"}`);
+      authRows.push(row(`${TICK} authenticated${a.reachabilityMs !== null ? ` (${a.reachabilityMs}ms)` : ""}`));
+      authRows.push(row(`Key source: ${a.source}`));
+      authRows.push(row(`Email: ${a.email ?? "unknown"}`));
       if (a.organizations.length > 0) {
-        const orgNames = a.organizations.map((o) => o.name || o.id).filter(Boolean).join(", ");
-        lines.push(`  Organizations     ${a.organizations.length} (${orgNames})`);
+        const orgNames = a.organizations.map((o) => o.name || o.id).filter(Boolean);
+        const shown = orgNames.slice(0, 4).join(", ");
+        const more = orgNames.length > 4 ? `, ${chalk3.dim(`+${orgNames.length - 4} more`)}` : "";
+        authRows.push(row(`Organizations: ${a.organizations.length} (${shown}${more})`));
       } else {
-        lines.push(`  Organizations     0`);
+        authRows.push(row(`Organizations: 0`));
       }
-      lines.push(`  Status            authenticated${a.reachabilityMs !== null ? ` (${a.reachabilityMs}ms)` : ""}`);
+      authRows.push(row(`User ID: ${a.userId ?? "unknown"}`, true));
     } else if (a.serverReachable) {
-      lines.push(`  Status            key rejected by server${a.reachabilityMs !== null ? ` (${a.reachabilityMs}ms)` : ""}`);
+      authRows.push(row(`${CROSS} key rejected by server${a.reachabilityMs !== null ? ` (${a.reachabilityMs}ms)` : ""}`));
+      authRows.push(row(`Key source: ${a.source}`));
     } else {
-      lines.push(`  Status            key found, server unreachable`);
+      authRows.push(row(`${WARN} key found, server unreachable`));
+      authRows.push(row(`Key source: ${a.source}`));
     }
   } else {
-    lines.push(`  Status            no API key configured \u2014 run \`lua auth configure\``);
+    authRows.push(row(`${WARN} no API key \u2014 run \`lua auth configure\``));
     if (a.serverReachable !== null) {
-      lines.push(`  Server            ${a.serverReachable ? "reachable" : "unreachable"}${a.reachabilityMs !== null ? ` (${a.reachabilityMs}ms)` : ""}`);
+      const ms = a.reachabilityMs !== null ? ` (${a.reachabilityMs}ms)` : "";
+      authRows.push(row(`Server: ${a.serverReachable ? "reachable" : "unreachable"}${ms}`, true));
     }
   }
-  lines.push("");
+  blocks.push(section("Auth", authRows));
   const p = report.project;
-  lines.push("Project");
   if (p.inProject) {
-    lines.push(`  Path              ${p.rootDir}`);
-    lines.push(`  Config            ${p.configPath} (found)`);
-    lines.push(`  Agent             ${p.agentName ?? "unnamed"}${p.agentId ? ` (${p.agentId.substring(0, 8)})` : ""}`);
-    if (p.manifest.found) {
-      lines.push(`  Manifest          dist-v2/manifest.json (compiled, ${p.manifest.primitiveCount} primitives)`);
-    } else {
-      lines.push(`  Manifest          (never compiled)`);
-    }
+    blocks.push(section("Project", [
+      row(`Agent: ${p.agentName ?? "unnamed"}${p.agentId ? ` (${p.agentId.substring(0, 8)})` : ""}`),
+      row(p.manifest.found ? `${TICK} compiled (${p.manifest.primitiveCount} primitives)` : `${WARN} never compiled \u2014 run \`lua compile\``),
+      row(`Config: ${p.configPath}`, true),
+      row(`Path: ${p.rootDir}`, true)
+    ]));
   } else {
-    lines.push(`  (not in a lua project)`);
-  }
-  lines.push("");
-  for (const section of report.primitives) {
-    const label = section.displayName.charAt(0).toUpperCase() + section.displayName.slice(1);
-    const localCount = section.local.length;
-    const serverCount = section.server.length;
-    lines.push(`${pad(label, 22)}${localCount} local  ${serverCount} server`);
-    if (localCount === 0 && section.orphans.length === 0) {
-      lines.push("  (none)");
-      lines.push("");
-      continue;
-    }
-    lines.push(`  ${pad("name", 22)}${pad("local", 10)}${pad("server", 10)}status`);
-    lines.push("");
-    for (const diff of section.diffs) {
+    blocks.push(section("Project", [
+      row(chalk3.dim("not inside a lua project"))
+    ]));
+  }
+  const NAME_MAX = 32;
+  for (const sec of report.primitives) {
+    const label = sec.displayName.charAt(0).toUpperCase() + sec.displayName.slice(1);
+    const title2 = `${label} ${chalk3.dim(`(${sec.local.length} local \xB7 ${sec.server.length} server)`)}`;
+    const entries = [];
+    for (const diff of sec.diffs) {
       const sv = diff.serverVersion ?? "--";
-      lines.push(`  ${pad(diff.name, 22)}${pad(diff.localVersion, 10)}${pad(sv, 10)}${diff.status}`);
+      const badge = diff.status === "synced" ? `${TICK} synced` : diff.status === "ahead" ? `${WARN} ahead` : diff.status === "behind" ? `${WARN} behind` : `${WARN} not deployed`;
+      entries.push({
+        name: diff.name,
+        ver: `${diff.localVersion} \u2192 ${sv}`,
+        badge
+      });
     }
-    for (const orphan of section.orphans) {
-      const serverEntry = section.server.find((s) => s.name === orphan.name);
+    for (const orphan of sec.orphans) {
+      const serverEntry = sec.server.find((s) => s.name === orphan.name);
       const sv = serverEntry?.activeVersion ?? "--";
-      lines.push(`  ${pad(orphan.name, 22)}${pad("--", 10)}${pad(sv, 10)}server only${orphan.critical ? "  \u26A0 causes errors" : ""}`);
+      const note = orphan.critical ? `${CROSS} server only (causes errors)` : `${WARN} server only`;
+      entries.push({
+        name: orphan.name,
+        ver: `-- \u2192 ${sv}`,
+        badge: note
+      });
     }
-    lines.push("");
-  }
-  const personaLabel = report.persona.status === "synced" ? "[synced]" : report.persona.status === "drift" ? "[drift detected] Local differs from server" : "[unknown]";
-  lines.push(`Persona     ${personaLabel}`);
-  const backupLabel = report.backup.status === "synced" ? "[synced]" : report.backup.status === "out-of-sync" ? "[out of sync] Source files changed since last push" : report.backup.status === "never-compiled" ? "[never-compiled] Run `lua compile` first" : "[unknown]";
-  lines.push(`Backup      ${backupLabel}`);
-  lines.push(`Telemetry   ${report.telemetry.enabled ? "enabled" : "disabled"}${report.telemetry.envOverride ? " (LUA_TELEMETRY override)" : ""}`);
-  lines.push("");
+    const nameW = Math.min(NAME_MAX, entries.reduce((m, e) => Math.max(m, e.name.length), 0));
+    const verW = entries.reduce((m, e) => Math.max(m, e.ver.length), 0);
+    const rows = entries.map((e) => row(`${pad(truncate2(e.name, nameW), nameW)}  ${pad(e.ver, verW)}  ${e.badge}`));
+    blocks.push(section(title2, rows));
+  }
+  const personaRow = report.persona.status === "synced" ? row(`Persona: ${TICK} synced`) : report.persona.status === "drift" ? row(`Persona: ${WARN} drift \u2014 local differs from server`) : row(`Persona: ${chalk3.dim("unknown")}`);
+  const backupRow = report.backup.status === "synced" ? row(`Backup: ${TICK} synced`) : report.backup.status === "out-of-sync" ? row(`Backup: ${WARN} out of sync \u2014 source changed since last push`) : report.backup.status === "never-compiled" ? row(`Backup: ${WARN} never compiled \u2014 run \`lua compile\``) : row(`Backup: ${chalk3.dim("unknown")}`);
+  blocks.push(section("State", [
+    personaRow,
+    backupRow,
+    row(`Telemetry: ${report.telemetry.enabled ? "enabled" : "disabled"}${report.telemetry.envOverride ? " (LUA_TELEMETRY override)" : ""}`)
+  ]));
   if (report.warnings.length > 0) {
-    lines.push("Warnings");
-    for (const w of report.warnings) {
-      lines.push(`  - ${w}`);
-    }
-    lines.push("");
+    blocks.push(section(chalk3.yellow("Warnings"), report.warnings.map((w) => row(chalk3.yellow(w)))));
   }
   if (report.hints.length > 0) {
-    lines.push("Next steps");
-    for (const h of report.hints) {
-      lines.push(`  - ${h.reason}: \`${h.command}\``);
-    }
-    lines.push("");
+    blocks.push(section("Next steps", report.hints.map((h) => row(`${h.reason}: ${chalk3.cyan(h.command)}`))));
   }
-  console.log(lines.join("\n"));
+  const title = chalk3.bold("lua status");
+  return [
+    "",
+    title,
+    "",
+    ...blocks.flatMap((b) => [
+      ...b,
+      ""
+    ]),
+    ""
+  ].join("\n");
+}
+__name(renderHuman, "renderHuman");
+function printHuman(report) {
+  console.log(renderHuman(report));
 }
 __name(printHuman, "printHuman");
 async function statusCommand(options) {
@@ -32157,6 +33047,696 @@ async function deleteWebhookInteractive(context, config) {
 }
 __name(deleteWebhookInteractive, "deleteWebhookInteractive");
 
+// src/commands/triggers.ts
+init_cli();
+init_constants();
+init_command_utils();
+init_analytics();
+var ACCEPTED_TIMEOUT_MS = 12e4;
+var DEFAULT_LOGS_LIMIT = 20;
+function parseLimitOption(raw) {
+  if (raw === void 0 || raw === null || raw === "") return void 0;
+  const n = Number.parseInt(String(raw), 10);
+  return Number.isFinite(n) && n > 0 ? n : void 0;
+}
+__name(parseLimitOption, "parseLimitOption");
+function isLegacyIntegrationAction(action) {
+  if (!action) return false;
+  const normalized = normalizeArg("integrations.webhooks.action", action);
+  if (!normalized) return false;
+  return getCanonicalValues("integrations.webhooks.action").includes(normalized) && !getCanonicalValues("triggers.action").includes(normalized);
+}
+__name(isLegacyIntegrationAction, "isLegacyIntegrationAction");
+async function triggersCommand(action, cmdObj) {
+  return withErrorHandling(async () => {
+    const hasIntegrationFlags = !!(cmdObj?.webhookId || cmdObj?.connectionId || cmdObj?.connection);
+    if (isLegacyIntegrationAction(action) || hasIntegrationFlags) {
+      console.log("\u2139\uFE0F  Integration triggers now live at `lua integrations webhooks <action>` (also reachable as `lua integrations triggers <action>`).");
+      trackEvent("cli_triggers_integration_redirect", {
+        action: action || null,
+        has_integration_flags: hasIntegrationFlags
+      });
+      return;
+    }
+    const options = {
+      name: cmdObj?.name || void 0,
+      description: cmdObj?.description || void 0,
+      instruction: cmdObj?.instruction || void 0,
+      trigger: cmdObj?.trigger || void 0,
+      limit: parseLimitOption(cmdObj?.limit),
+      json: cmdObj?.json === true,
+      force: cmdObj?.force === true
+    };
+    const { agentId, apiKey } = await initializeCommand();
+    const context = {
+      agentId,
+      apiKey
+    };
+    if (action) {
+      await executeNonInteractive6(context, action, options);
+    } else {
+      await manageTriggersInteractive(context);
+    }
+  }, "triggers");
+}
+__name(triggersCommand, "triggersCommand");
+function triggerApiFor(context) {
+  return new TriggerApi(BASE_URLS.API, context.apiKey, context.agentId);
+}
+__name(triggerApiFor, "triggerApiFor");
+function triggerType(trigger) {
+  return trigger.activeVersionId ? "SDK" : "URL";
+}
+__name(triggerType, "triggerType");
+async function fetchTriggersCore(context) {
+  const triggerApi = triggerApiFor(context);
+  const response = await triggerApi.getTriggers();
+  if (!response.success || !response.data) {
+    console.error(`\u274C Failed to fetch triggers: ${response.error?.message || "Unknown error"}`);
+    return null;
+  }
+  return response.data.triggers || [];
+}
+__name(fetchTriggersCore, "fetchTriggersCore");
+function resolveTrigger(triggers, ref) {
+  const trigger = triggers.find((t) => t.id === ref || t.name === ref);
+  if (!trigger) {
+    console.error(`\u274C Trigger "${ref}" not found`);
+    console.log("\nAvailable triggers:");
+    triggers.forEach((t) => console.log(`  - ${t.name} (${t.id})`));
+    return null;
+  }
+  return trigger;
+}
+__name(resolveTrigger, "resolveTrigger");
+function displayTriggersCore(triggers, json) {
+  trackEvent("cli_triggers_list", {
+    triggers_count: triggers.length,
+    json_output: json
+  });
+  if (json) {
+    console.log(JSON.stringify(triggers.map((t) => ({
+      id: t.id,
+      name: t.name,
+      description: t.description,
+      instruction: t.instruction,
+      type: triggerType(t),
+      active: t.active,
+      url: t.url,
+      createdAt: t.createdAt
+    })), null, 2));
+    return;
+  }
+  console.log("\n" + "=".repeat(60));
+  console.log("\u26A1 Triggers");
+  console.log("=".repeat(60) + "\n");
+  if (triggers.length === 0) {
+    console.log("\u2139\uFE0F  No triggers found.");
+    console.log("\u{1F4A1} Create one with 'lua triggers create --name <name>'.\n");
+    console.log("=".repeat(60));
+    return;
+  }
+  for (const trigger of triggers) {
+    console.log(`\u26A1 ${trigger.name}`);
+    console.log(`   Trigger ID: ${trigger.id}`);
+    console.log(`   Type: ${triggerType(trigger)}`);
+    console.log(`   Status: ${trigger.active ? "\u2705 active" : "\u{1F6AB} inactive"}`);
+    if (trigger.instruction) {
+      console.log(`   Instruction: ${trigger.instruction}`);
+    }
+    console.log(`   URL: ${trigger.url}`);
+    console.log(`   Created: ${new Date(trigger.createdAt).toLocaleString()}`);
+    console.log();
+  }
+  console.log("=".repeat(60));
+}
+__name(displayTriggersCore, "displayTriggersCore");
+async function createTriggerCore(context, name, description, instruction) {
+  writeProgress(`\u{1F504} Creating trigger "${name}"...`);
+  const triggerApi = triggerApiFor(context);
+  const response = await triggerApi.createTrigger({
+    name,
+    description,
+    instruction
+  });
+  trackEvent("cli_triggers_create", {
+    trigger_name: name,
+    has_description: !!description,
+    has_instruction: !!instruction,
+    success: !!response.success
+  });
+  if (!response.success || !response.data) {
+    console.error(`\u274C Failed to create trigger: ${response.error?.message || "Unknown error"}`);
+    return false;
+  }
+  const trigger = response.data;
+  writeSuccess(`\u2705 Trigger "${trigger.name}" created`);
+  if (trigger.instruction) {
+    writeInfo(`\u{1F4DD} Instruction sent to the agent on each fire: ${trigger.instruction}`);
+  }
+  console.log("\n" + "=".repeat(60));
+  console.log("\u{1F517} Trigger URL (paste it anywhere):");
+  console.log(`
+   ${trigger.url}
+`);
+  console.log("=".repeat(60));
+  writeHintBlock({
+    headline: "Trigger is live. Fire it, then inspect executions:",
+    lines: [
+      {
+        label: "Fire:",
+        command: `curl -X POST ${trigger.url} -H 'Content-Type: application/json' -d '{"hello":"world"}'`
+      },
+      {
+        label: "Inspect:",
+        command: `lua triggers logs --trigger ${trigger.name}`
+      }
+    ],
+    when: "success"
+  });
+  writeInfo(`\u{1F4A1} If this URL leaks, run 'lua triggers rotate-token --trigger ${trigger.name}' to invalidate it and mint a new one.`);
+  return true;
+}
+__name(createTriggerCore, "createTriggerCore");
+function executionStatusDisplay(execution) {
+  switch (execution.status) {
+    case "completed":
+      return {
+        emoji: "\u2705",
+        label: "COMPLETED"
+      };
+    case "failed":
+      return {
+        emoji: "\u274C",
+        label: "FAILED"
+      };
+    case "skipped_inactive":
+      return {
+        emoji: "\u{1F6AB}",
+        label: "SKIPPED (trigger inactive)"
+      };
+    case "rejected_unverified":
+      return {
+        emoji: "\u26D4",
+        label: "REJECTED (verify failed \u2192 401)"
+      };
+    case "skipped_filtered":
+      return {
+        emoji: "\u{1F507}",
+        label: "SKIPPED (filtered out)"
+      };
+    case "accepted": {
+      const age = Date.now() - new Date(execution.receivedAt).getTime();
+      if (age > ACCEPTED_TIMEOUT_MS) {
+        return {
+          emoji: "\u23F3",
+          label: "TIMED OUT (no completion recorded)"
+        };
+      }
+      return {
+        emoji: "\u{1F504}",
+        label: "ACCEPTED (in flight)"
+      };
+    }
+    default:
+      return {
+        emoji: "\u2753",
+        label: String(execution.status).toUpperCase()
+      };
+  }
+}
+__name(executionStatusDisplay, "executionStatusDisplay");
+function snippet(value, maxLength = 100) {
+  const text = typeof value === "string" ? value : JSON.stringify(value);
+  if (text === void 0) return "";
+  return text.length > maxLength ? `${text.substring(0, maxLength)}...` : text;
+}
+__name(snippet, "snippet");
+async function fetchAndDisplayLogsCore(context, trigger, limit, json) {
+  const triggerApi = triggerApiFor(context);
+  const response = await triggerApi.getTriggerExecutions(trigger.id, {
+    limit
+  });
+  trackEvent("cli_triggers_logs", {
+    trigger_name: trigger.name,
+    limit,
+    json_output: json,
+    success: !!response.success
+  });
+  if (!response.success || !response.data) {
+    console.error(`\u274C Failed to fetch executions: ${response.error?.message || "Unknown error"}`);
+    return false;
+  }
+  const { executions = [], total } = response.data;
+  if (json) {
+    console.log(JSON.stringify(response.data, null, 2));
+    return true;
+  }
+  if (executions.length === 0) {
+    console.log(`\u2139\uFE0F  No executions found for ${trigger.name}.`);
+    console.log(`\u{1F4A1} Fire it: curl -X POST ${trigger.url} -H 'Content-Type: application/json' -d '{"hello":"world"}'`);
+    return true;
+  }
+  console.log("\n" + "=".repeat(60));
+  console.log(`\u{1F4CA} Executions for ${trigger.name}`);
+  if (trigger.instruction) {
+    console.log(`\u{1F4DD} Instruction: ${trigger.instruction}`);
+  }
+  console.log("=".repeat(60) + "\n");
+  executions.forEach((execution, index) => {
+    const { emoji, label } = executionStatusDisplay(execution);
+    console.log(`${index + 1}. ${emoji} ${label}`);
+    console.log(`   Execution ID: ${execution.id}`);
+    console.log(`   Received: ${new Date(execution.receivedAt).toLocaleString()}`);
+    if (execution.duration !== void 0) {
+      console.log(`   Duration: ${Math.round(execution.duration / 1e3)}s`);
+    }
+    if (execution.payload !== void 0) {
+      console.log(`   Payload: ${snippet(execution.payload)}`);
+    }
+    if (execution.responseText) {
+      console.log(`   Response: ${snippet(execution.responseText)}`);
+    }
+    if (execution.toolsUsed && execution.toolsUsed.length > 0) {
+      console.log(`   Tools: ${execution.toolsUsed.join(", ")}`);
+    }
+    if (execution.error) {
+      console.log(`   Error: ${execution.error}`);
+    }
+    console.log();
+  });
+  console.log("=".repeat(60));
+  console.log(`Showing ${executions.length} of ${total} executions`);
+  return true;
+}
+__name(fetchAndDisplayLogsCore, "fetchAndDisplayLogsCore");
+async function activateTriggerCore(context, trigger) {
+  writeProgress(`\u{1F504} Activating trigger "${trigger.name}"...`);
+  const triggerApi = triggerApiFor(context);
+  const response = await triggerApi.activateTrigger(trigger.id);
+  trackEvent("cli_triggers_activate", {
+    trigger_name: trigger.name,
+    success: !!response.success
+  });
+  if (response.success) {
+    writeSuccess(`\u2705 Trigger "${trigger.name}" activated successfully`);
+    writeInfo("\u{1F4A1} The trigger is now enabled and can receive requests.");
+    return true;
+  } else {
+    console.error(`\u274C Failed to activate trigger: ${response.error?.message || "Unknown error"}`);
+    return false;
+  }
+}
+__name(activateTriggerCore, "activateTriggerCore");
+async function deactivateTriggerCore(context, trigger) {
+  writeProgress(`\u{1F504} Deactivating trigger "${trigger.name}"...`);
+  const triggerApi = triggerApiFor(context);
+  const response = await triggerApi.deactivateTrigger(trigger.id);
+  trackEvent("cli_triggers_deactivate", {
+    trigger_name: trigger.name,
+    success: !!response.success
+  });
+  if (response.success) {
+    writeSuccess(`\u2705 Trigger "${trigger.name}" deactivated successfully`);
+    writeInfo("\u{1F4A1} Incoming requests will be recorded as skipped until you reactivate it.");
+    return true;
+  } else {
+    console.error(`\u274C Failed to deactivate trigger: ${response.error?.message || "Unknown error"}`);
+    return false;
+  }
+}
+__name(deactivateTriggerCore, "deactivateTriggerCore");
+async function rotateTriggerTokenCore(context, trigger) {
+  writeProgress(`\u{1F504} Rotating token for trigger "${trigger.name}"...`);
+  const triggerApi = triggerApiFor(context);
+  const response = await triggerApi.rotateTriggerToken(trigger.id);
+  trackEvent("cli_triggers_rotate_token", {
+    trigger_name: trigger.name,
+    success: !!response.success
+  });
+  if (!response.success || !response.data) {
+    console.error(`\u274C Failed to rotate token: ${response.error?.message || "Unknown error"}`);
+    return false;
+  }
+  writeSuccess(`\u2705 Token rotated for "${trigger.name}" \u2014 the old URL no longer works`);
+  console.log("\n" + "=".repeat(60));
+  console.log("\u{1F517} New trigger URL (update it everywhere it was pasted):");
+  console.log(`
+   ${response.data.url}
+`);
+  console.log("=".repeat(60));
+  return true;
+}
+__name(rotateTriggerTokenCore, "rotateTriggerTokenCore");
+async function deleteTriggerCore(context, trigger) {
+  writeProgress(`\u{1F5D1}\uFE0F  Deleting trigger "${trigger.name}"...`);
+  const triggerApi = triggerApiFor(context);
+  const response = await triggerApi.deleteTrigger(trigger.id);
+  trackEvent("cli_triggers_delete", {
+    trigger_name: trigger.name,
+    success: !!response.success
+  });
+  if (!response.success || !response.data) {
+    console.error(`\u274C Delete Error: ${response.error?.message || "Unknown error"}`);
+    return false;
+  }
+  if (response.data.deactivated) {
+    writeSuccess(`\u2705 Trigger "${trigger.name}" deactivated`);
+    writeInfo("\u{1F4A1} It has deployed versions, so it was deactivated instead of deleted. Its URL no longer fires.");
+    return true;
+  }
+  writeSuccess(`\u2705 Trigger "${trigger.name}" deleted successfully`);
+  writeInfo("\u{1F4A1} Its URL is dead. Execution history is retained until TTL expiry.");
+  return true;
+}
+__name(deleteTriggerCore, "deleteTriggerCore");
+async function promptTriggerSelection(triggers, message) {
+  const answer = await safePrompt([
+    {
+      type: "list",
+      name: "selectedTrigger",
+      message,
+      choices: triggers.map((trigger) => ({
+        name: `${trigger.name} (${trigger.id})${trigger.active ? "" : " [inactive]"}`,
+        value: trigger
+      }))
+    }
+  ]);
+  return answer?.selectedTrigger || null;
+}
+__name(promptTriggerSelection, "promptTriggerSelection");
+async function executeNonInteractive6(context, action, options) {
+  const normalizedAction = validateOrSuggest("triggers.action", action);
+  if (normalizedAction === "list") {
+    const triggers2 = await fetchTriggersCore(context);
+    if (!triggers2) throw new Error("Failed to fetch triggers");
+    displayTriggersCore(triggers2, options.json);
+    return;
+  }
+  if (normalizedAction === "create") {
+    if (!options.name) {
+      console.error("\u274C --name is required for create action");
+      console.log('\nUsage: lua triggers create --name order-created [--description "Fires on new orders"] [--instruction "Reply with the current date and time"]');
+      throw new Error("--name is required for create action");
+    }
+    const success2 = await createTriggerCore(context, options.name, options.description, options.instruction);
+    if (!success2) throw new Error("Failed to create trigger");
+    return;
+  }
+  if (!options.trigger) {
+    console.error(`\u274C --trigger is required for action "${normalizedAction}"`);
+    console.log(`
+Usage: lua triggers ${normalizedAction} --trigger <name|id>`);
+    throw new Error(`--trigger is required for action "${normalizedAction}"`);
+  }
+  const triggers = await fetchTriggersCore(context);
+  if (!triggers) throw new Error("Failed to fetch triggers");
+  const selectedTrigger = resolveTrigger(triggers, options.trigger);
+  if (!selectedTrigger) throw new Error(`Trigger "${options.trigger}" not found`);
+  switch (normalizedAction) {
+    case "logs": {
+      const success2 = await fetchAndDisplayLogsCore(context, selectedTrigger, options.limit ?? DEFAULT_LOGS_LIMIT, options.json);
+      if (!success2) throw new Error("Failed to fetch trigger executions");
+      break;
+    }
+    case "activate": {
+      const success2 = await activateTriggerCore(context, selectedTrigger);
+      if (!success2) throw new Error("Failed to activate trigger");
+      break;
+    }
+    case "deactivate": {
+      const success2 = await deactivateTriggerCore(context, selectedTrigger);
+      if (!success2) throw new Error("Failed to deactivate trigger");
+      break;
+    }
+    case "rotate-token": {
+      const success2 = await rotateTriggerTokenCore(context, selectedTrigger);
+      if (!success2) throw new Error("Failed to rotate trigger token");
+      break;
+    }
+    case "delete": {
+      if (!options.force) {
+        const confirmAnswer = await safePrompt([
+          {
+            type: "confirm",
+            name: "confirm",
+            message: `Are you sure you want to delete "${selectedTrigger.name}"? Its URL will stop working immediately.`,
+            default: false
+          }
+        ]);
+        if (!confirmAnswer || !confirmAnswer.confirm) {
+          console.log("\n\u274C Deletion cancelled.\n");
+          return;
+        }
+      }
+      const success2 = await deleteTriggerCore(context, selectedTrigger);
+      if (!success2) throw new Error("Failed to delete trigger");
+      break;
+    }
+  }
+}
+__name(executeNonInteractive6, "executeNonInteractive");
+async function manageTriggersInteractive(context) {
+  let continueManaging = true;
+  while (continueManaging) {
+    console.log("\n" + "=".repeat(60));
+    console.log("\u26A1 Triggers");
+    console.log("=".repeat(60) + "\n");
+    const actionAnswer = await safePrompt([
+      {
+        type: "list",
+        name: "action",
+        message: "What would you like to do?",
+        choices: [
+          {
+            name: "\u{1F441}\uFE0F  View triggers",
+            value: "list"
+          },
+          {
+            name: "\u2795 Create a trigger",
+            value: "create"
+          },
+          {
+            name: "\u{1F4CA} View execution logs",
+            value: "logs"
+          },
+          {
+            name: "\u2705 Activate a trigger",
+            value: "activate"
+          },
+          {
+            name: "\u{1F6AB} Deactivate a trigger",
+            value: "deactivate"
+          },
+          {
+            name: "\u{1F501} Rotate a trigger token",
+            value: "rotate-token"
+          },
+          {
+            name: "\u{1F5D1}\uFE0F  Delete a trigger",
+            value: "delete"
+          },
+          {
+            name: "\u274C Exit",
+            value: "exit"
+          }
+        ]
+      }
+    ]);
+    if (!actionAnswer) return;
+    const { action } = actionAnswer;
+    switch (action) {
+      case "list":
+        await viewTriggersInteractive(context);
+        break;
+      case "create":
+        await createTriggerInteractive(context);
+        break;
+      case "logs":
+        await viewLogsInteractive(context);
+        break;
+      case "activate":
+        await activateTriggerInteractive(context);
+        break;
+      case "deactivate":
+        await deactivateTriggerInteractive(context);
+        break;
+      case "rotate-token":
+        await rotateTriggerTokenInteractive(context);
+        break;
+      case "delete":
+        await deleteTriggerInteractive(context);
+        break;
+      case "exit":
+        continueManaging = false;
+        console.log("\n\u{1F44B} Goodbye!\n");
+        break;
+    }
+  }
+}
+__name(manageTriggersInteractive, "manageTriggersInteractive");
+async function viewTriggersInteractive(context) {
+  writeProgress("\u{1F504} Loading triggers...");
+  const triggers = await fetchTriggersCore(context);
+  if (triggers) {
+    displayTriggersCore(triggers, false);
+    console.log();
+  }
+  await safePrompt([
+    {
+      type: "input",
+      name: "continue",
+      message: "Press Enter to continue..."
+    }
+  ]);
+}
+__name(viewTriggersInteractive, "viewTriggersInteractive");
+async function createTriggerInteractive(context) {
+  const answers = await safePrompt([
+    {
+      type: "input",
+      name: "name",
+      message: "Trigger name:",
+      validate: /* @__PURE__ */ __name((input) => input.trim().length > 0 ? true : "Name is required", "validate")
+    },
+    {
+      type: "input",
+      name: "description",
+      message: "Description (optional):"
+    },
+    {
+      type: "input",
+      name: "instruction",
+      message: "Instruction sent to the agent on each fire (optional):"
+    }
+  ]);
+  if (!answers || !answers.name?.trim()) return;
+  await createTriggerCore(context, answers.name.trim(), answers.description?.trim() || void 0, answers.instruction?.trim() || void 0);
+  await safePrompt([
+    {
+      type: "input",
+      name: "continue",
+      message: "Press Enter to continue..."
+    }
+  ]);
+}
+__name(createTriggerInteractive, "createTriggerInteractive");
+async function viewLogsInteractive(context) {
+  const triggers = await fetchTriggersCore(context);
+  if (!triggers || triggers.length === 0) {
+    console.log("\n\u2139\uFE0F  No triggers found.\n");
+    return;
+  }
+  const selectedTrigger = await promptTriggerSelection(triggers, "Select a trigger to view executions:");
+  if (!selectedTrigger) return;
+  writeProgress(`\u{1F504} Loading executions for ${selectedTrigger.name}...`);
+  await fetchAndDisplayLogsCore(context, selectedTrigger, DEFAULT_LOGS_LIMIT, false);
+  await safePrompt([
+    {
+      type: "input",
+      name: "continue",
+      message: "Press Enter to continue..."
+    }
+  ]);
+}
+__name(viewLogsInteractive, "viewLogsInteractive");
+async function activateTriggerInteractive(context) {
+  const triggers = await fetchTriggersCore(context);
+  if (!triggers || triggers.length === 0) {
+    console.log("\n\u2139\uFE0F  No triggers found.\n");
+    return;
+  }
+  const selectedTrigger = await promptTriggerSelection(triggers, "Select a trigger to activate:");
+  if (!selectedTrigger) return;
+  await activateTriggerCore(context, selectedTrigger);
+}
+__name(activateTriggerInteractive, "activateTriggerInteractive");
+async function deactivateTriggerInteractive(context) {
+  const triggers = await fetchTriggersCore(context);
+  if (!triggers || triggers.length === 0) {
+    console.log("\n\u2139\uFE0F  No triggers found.\n");
+    return;
+  }
+  const selectedTrigger = await promptTriggerSelection(triggers, "Select a trigger to deactivate:");
+  if (!selectedTrigger) return;
+  const confirmAnswer = await safePrompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: `Are you sure you want to deactivate "${selectedTrigger.name}"? It will stop receiving requests.`,
+      default: false
+    }
+  ]);
+  if (!confirmAnswer || !confirmAnswer.confirm) {
+    console.log("\n\u274C Deactivation cancelled.\n");
+    return;
+  }
+  await deactivateTriggerCore(context, selectedTrigger);
+}
+__name(deactivateTriggerInteractive, "deactivateTriggerInteractive");
+async function rotateTriggerTokenInteractive(context) {
+  const triggers = await fetchTriggersCore(context);
+  if (!triggers || triggers.length === 0) {
+    console.log("\n\u2139\uFE0F  No triggers found.\n");
+    return;
+  }
+  const selectedTrigger = await promptTriggerSelection(triggers, "Select a trigger to rotate its token:");
+  if (!selectedTrigger) return;
+  const confirmAnswer = await safePrompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: `Rotate the token for "${selectedTrigger.name}"? The current URL will stop working immediately.`,
+      default: false
+    }
+  ]);
+  if (!confirmAnswer || !confirmAnswer.confirm) {
+    console.log("\n\u274C Rotation cancelled.\n");
+    return;
+  }
+  await rotateTriggerTokenCore(context, selectedTrigger);
+  await safePrompt([
+    {
+      type: "input",
+      name: "continue",
+      message: "Press Enter to continue..."
+    }
+  ]);
+}
+__name(rotateTriggerTokenInteractive, "rotateTriggerTokenInteractive");
+async function deleteTriggerInteractive(context) {
+  const triggers = await fetchTriggersCore(context);
+  if (!triggers || triggers.length === 0) {
+    console.log("\n\u2139\uFE0F  No triggers found.\n");
+    return;
+  }
+  const selectedTrigger = await promptTriggerSelection(triggers, "Select a trigger to delete:");
+  if (!selectedTrigger) return;
+  console.log("\n\u26A0\uFE0F  WARNING: You are about to delete a trigger!");
+  console.log("\u26A0\uFE0F  Its URL will stop working immediately.\n");
+  const confirmAnswer = await safePrompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: `Are you sure you want to delete "${selectedTrigger.name}"?`,
+      default: false
+    }
+  ]);
+  if (!confirmAnswer || !confirmAnswer.confirm) {
+    console.log("\n\u274C Deletion cancelled.\n");
+    return;
+  }
+  await deleteTriggerCore(context, selectedTrigger);
+  await safePrompt([
+    {
+      type: "input",
+      name: "continue",
+      message: "Press Enter to continue..."
+    }
+  ]);
+}
+__name(deleteTriggerInteractive, "deleteTriggerInteractive");
+
 // src/commands/devices.ts
 init_cli();
 init_constants();
@@ -32465,7 +34045,7 @@ async function jobsCommand(action, cmdObj) {
       hideVersions
     };
     if (action) {
-      await executeNonInteractive6(context, config, action, options);
+      await executeNonInteractive7(context, config, action, options);
     } else {
       await manageProductionJobs(context, config);
     }
@@ -32760,7 +34340,7 @@ async function promptVersionSelection4(versions, activeVersionId) {
   return versionAnswer?.selectedVersion || null;
 }
 __name(promptVersionSelection4, "promptVersionSelection");
-async function executeNonInteractive6(context, config, action, options) {
+async function executeNonInteractive7(context, config, action, options) {
   const normalizedAction = validateOrSuggest("jobs.action", action);
   const jobs = config.jobs || [];
   if (normalizedAction === "view") {
@@ -32861,7 +34441,7 @@ Usage: lua jobs ${normalizedAction} --job-name <name>`);
     }
   }
 }
-__name(executeNonInteractive6, "executeNonInteractive");
+__name(executeNonInteractive7, "executeNonInteractive");
 async function manageProductionJobs(context, config) {
   let continueManaging = true;
   while (continueManaging) {
@@ -33249,7 +34829,8 @@ init_analytics();
 async function featuresCommand(action, cmdObj) {
   return withErrorHandling(async () => {
     const options = {
-      featureName: cmdObj?.featureName || null
+      featureName: cmdObj?.featureName || null,
+      recipientScope: cmdObj?.recipientScope || void 0
     };
     const { agentId, apiKey } = await initializeCommand();
     const agentApi = new AgentApi(BASE_URLS.API, apiKey);
@@ -33259,7 +34840,7 @@ async function featuresCommand(action, cmdObj) {
       agentApi
     };
     if (action) {
-      await executeNonInteractive7(context, action, options);
+      await executeNonInteractive8(context, action, options);
     } else {
       await manageFeaturesInteractive(context);
     }
@@ -33312,6 +34893,13 @@ function viewFeatureCore(feature) {
   console.log("\nContext/Instructions:");
   console.log("\u2500".repeat(60));
   console.log(feature.context);
+  if (feature.config && Object.keys(feature.config).length > 0) {
+    console.log("\nConfig:");
+    console.log("\u2500".repeat(60));
+    for (const [key, value] of Object.entries(feature.config)) {
+      console.log(`  ${key}: ${JSON.stringify(value)}`);
+    }
+  }
   console.log("=".repeat(60));
 }
 __name(viewFeatureCore, "viewFeatureCore");
@@ -33353,6 +34941,33 @@ async function disableFeatureCore(context, feature) {
   }
 }
 __name(disableFeatureCore, "disableFeatureCore");
+async function configureFeatureCore(context, feature, options) {
+  const scope = options.recipientScope;
+  if (!scope) {
+    console.error("\u274C --recipient-scope is required for configure (current_user | anyone)");
+    return false;
+  }
+  if (scope !== "current_user" && scope !== "anyone") {
+    console.error(`\u274C Invalid --recipient-scope "${scope}". Use "current_user" or "anyone".`);
+    return false;
+  }
+  writeProgress(`\u{1F504} Configuring "${feature.title}"...`);
+  try {
+    await context.agentApi.updateAgentFeature(context.agentId, {
+      featureName: feature.name,
+      active: feature.active,
+      config: {
+        recipientScope: scope
+      }
+    });
+    writeSuccess(`\u2705 ${feature.title}: recipientScope = ${scope}`);
+    return true;
+  } catch (error) {
+    console.error(`\u274C Failed to configure feature: ${error}`);
+    return false;
+  }
+}
+__name(configureFeatureCore, "configureFeatureCore");
 function findFeature(features, featureId) {
   const normalizedId = featureId.toLowerCase();
   return features.find((f) => f.name.toLowerCase() === normalizedId || f.title.toLowerCase() === normalizedId) || null;
@@ -33373,7 +34988,7 @@ async function promptFeatureSelection(features, message) {
   return answer?.selectedFeature || null;
 }
 __name(promptFeatureSelection, "promptFeatureSelection");
-async function executeNonInteractive7(context, action, options) {
+async function executeNonInteractive8(context, action, options) {
   const normalizedAction = validateOrSuggest("features.action", action);
   writeProgress("\u{1F504} Loading features...");
   const features = await fetchFeaturesCore(context);
@@ -33413,9 +35028,14 @@ Usage: lua features ${normalizedAction} --feature-name <name>`);
       if (!success2) throw new Error("Operation failed");
       break;
     }
+    case "configure": {
+      const success2 = await configureFeatureCore(context, selectedFeature, options);
+      if (!success2) throw new Error("Operation failed");
+      break;
+    }
   }
 }
-__name(executeNonInteractive7, "executeNonInteractive");
+__name(executeNonInteractive8, "executeNonInteractive");
 async function manageFeaturesInteractive(context) {
   let continueManaging = true;
   while (continueManaging) {
@@ -33719,7 +35339,7 @@ async function preprocessorsCommand(action, cmdObj) {
       hideVersions
     };
     if (action) {
-      await executeNonInteractive8(context, config, action, options);
+      await executeNonInteractive9(context, config, action, options);
     } else {
       await managePreProcessorsInteractive(context, config);
     }
@@ -33921,7 +35541,7 @@ async function promptVersionSelection5(versions, activeVersionId) {
   return answer?.selectedVersion || null;
 }
 __name(promptVersionSelection5, "promptVersionSelection");
-async function executeNonInteractive8(context, config, action, options) {
+async function executeNonInteractive9(context, config, action, options) {
   const normalizedAction = validateOrSuggest("preprocessors.action", action);
   const preprocessors = config.preprocessors || [];
   if (normalizedAction === "view") {
@@ -34009,7 +35629,7 @@ Usage: lua preprocessors ${normalizedAction} --preprocessor-name <name>`);
     }
   }
 }
-__name(executeNonInteractive8, "executeNonInteractive");
+__name(executeNonInteractive9, "executeNonInteractive");
 async function managePreProcessorsInteractive(context, config) {
   let continueManaging = true;
   while (continueManaging) {
@@ -34306,7 +35926,7 @@ async function postprocessorsCommand(action, cmdObj) {
       hideVersions
     };
     if (action) {
-      await executeNonInteractive9(context, config, action, options);
+      await executeNonInteractive10(context, config, action, options);
     } else {
       await managePostProcessorsInteractive(context, config);
     }
@@ -34508,7 +36128,7 @@ async function promptVersionSelection6(versions, activeVersionId) {
   return answer?.selectedVersion || null;
 }
 __name(promptVersionSelection6, "promptVersionSelection");
-async function executeNonInteractive9(context, config, action, options) {
+async function executeNonInteractive10(context, config, action, options) {
   const normalizedAction = validateOrSuggest("postprocessors.action", action);
   const postprocessors = config.postprocessors || [];
   if (normalizedAction === "view") {
@@ -34596,7 +36216,7 @@ Usage: lua postprocessors ${normalizedAction} --postprocessor-name <name>`);
     }
   }
 }
-__name(executeNonInteractive9, "executeNonInteractive");
+__name(executeNonInteractive10, "executeNonInteractive");
 async function managePostProcessorsInteractive(context, config) {
   let continueManaging = true;
   while (continueManaging) {
@@ -37079,7 +38699,7 @@ async function mcpCommand(action, serverNamePositional, cmdObj) {
       developerApi
     };
     if (action) {
-      await executeNonInteractive10(context, action, options);
+      await executeNonInteractive11(context, action, options);
     } else {
       await interactiveMCPManagement(context);
     }
@@ -37240,7 +38860,7 @@ async function promptServerSelection(servers, message) {
   return answer?.server || null;
 }
 __name(promptServerSelection, "promptServerSelection");
-async function executeNonInteractive10(context, action, options) {
+async function executeNonInteractive11(context, action, options) {
   const resolvedAction = validateOrSuggest("mcp.action", action);
   writeProgress("\u{1F504} Loading MCP servers...");
   const servers = await fetchServersCore(context);
@@ -37286,7 +38906,7 @@ Usage: lua mcp ${resolvedAction} --server-name <name>`);
     }
   }
 }
-__name(executeNonInteractive10, "executeNonInteractive");
+__name(executeNonInteractive11, "executeNonInteractive");
 async function interactiveMCPManagement(context) {
   let continueManaging = true;
   while (continueManaging) {
@@ -37745,7 +39365,7 @@ async function integrationsCommand(action, subaction, cmdObj) {
           subaction
         ] : []
       };
-      await executeNonInteractive11(context, action, enhancedCmdObj);
+      await executeNonInteractive12(context, action, enhancedCmdObj);
     } else {
       await interactiveIntegrationsManagement(context);
     }
@@ -37758,7 +39378,7 @@ async function integrationsCommand(action, subaction, cmdObj) {
   }, "integrations");
 }
 __name(integrationsCommand, "integrationsCommand");
-async function executeNonInteractive11(context, action, cmdOptions) {
+async function executeNonInteractive12(context, action, cmdOptions) {
   const normalizedAction = validateOrSuggest("integrations.action", action);
   const options = {
     integration: cmdOptions?.integration,
@@ -37820,7 +39440,7 @@ async function executeNonInteractive11(context, action, cmdOptions) {
       throw new Error("Invalid action:");
   }
 }
-__name(executeNonInteractive11, "executeNonInteractive");
+__name(executeNonInteractive12, "executeNonInteractive");
 async function interactiveIntegrationsManagement(context) {
   let continueManaging = true;
   while (continueManaging) {
@@ -38926,7 +40546,7 @@ Available scopes for ${selectedIntegration.name}:`);
 __name(updateConnectionFlow, "updateConnectionFlow");
 async function webhooksSubcommand(context, cmdOptions) {
   const rawSubAction = cmdOptions?._?.[0] || "";
-  const subAction = rawSubAction ? validateOrSuggest("triggers.action", rawSubAction) : "";
+  const subAction = rawSubAction ? validateOrSuggest("integrations.webhooks.action", rawSubAction) : "";
   const options = {
     connectionId: cmdOptions?.connection || cmdOptions?.connectionId,
     webhookId: cmdOptions?.webhookId,
@@ -40293,8 +41913,8 @@ __name(telemetryCommand, "telemetryCommand");
 init_cli();
 init_command_utils();
 init_analytics();
-import { writeFileSync as writeFileSync8, existsSync as existsSync8, unlinkSync as unlinkSync2 } from "fs";
-import { resolve as resolve4, join as join7 } from "path";
+import { writeFileSync as writeFileSync10, existsSync as existsSync10, unlinkSync as unlinkSync2 } from "fs";
+import { resolve as resolve4, join as join9 } from "path";
 init_artifact_loader();
 init_types();
 function getProjectToolNames() {
@@ -40307,50 +41927,6 @@ function getProjectToolNames() {
   }
 }
 __name(getProjectToolNames, "getProjectToolNames");
-function generateFile(setup) {
-  if (setup.mode === "api") {
-    return `/**
- * Governance Policy (API mode)
- * Enforcement is handled remotely via the Governance Cloud.
- * Import this into your LuaAgent config.
- *
- * The API key is resolved on the platform at runtime from the
- * GOVERNANCE_API_KEY env var. Never put the raw key in source.
- */
-
-export const governance = {
-  mode: 'api' as const,
-  serverUrl: process.env.GOVERNANCE_API_URL ?? '${setup.serverUrl}',
-};
-`;
-  }
-  const ruleLines = [];
-  if (setup.blockTools && setup.blockTools.length > 0) {
-    const list = setup.blockTools.map((t) => `'${t}'`).join(", ");
-    ruleLines.push(`    blockTools: [${list}],`);
-  }
-  if (setup.requireApproval && setup.requireApproval.length > 0) {
-    const list = setup.requireApproval.map((t) => `'${t}'`).join(", ");
-    ruleLines.push(`    requireApproval: [${list}],`);
-  }
-  if (setup.tokenLimit && setup.tokenLimit > 0) {
-    ruleLines.push(`    tokenBudget: ${setup.tokenLimit},`);
-  }
-  return `/**
- * Governance Policy (SDK mode)
- * Policies are enforced locally at the platform level.
- * Import this into your LuaAgent config.
- */
-
-export const governance = {
-  mode: 'sdk' as const,
-  rules: {
-${ruleLines.join("\n")}
-  },
-};
-`;
-}
-__name(generateFile, "generateFile");
 async function governanceCommand(action) {
   return withErrorHandling(async () => {
     if (action) {
@@ -40361,9 +41937,9 @@ async function governanceCommand(action) {
       return;
     }
     const srcDir = resolve4(process.cwd(), "src");
-    const targetDir = existsSync8(srcDir) ? srcDir : process.cwd();
-    const filePath = join7(targetDir, "governance.ts");
-    if (existsSync8(filePath)) {
+    const targetDir = existsSync10(srcDir) ? srcDir : process.cwd();
+    const filePath = join9(targetDir, "governance.ts");
+    if (existsSync10(filePath)) {
       const { overwrite } = await safePrompt([
         {
           type: "confirm",
@@ -40453,8 +42029,8 @@ async function governanceCommand(action) {
         };
       }
     }
-    const content = generateFile(setup);
-    writeFileSync8(filePath, content, "utf-8");
+    const content = generateGovernanceFile(setup);
+    writeFileSync10(filePath, content, "utf-8");
     const relativePath = filePath.replace(process.cwd() + "/", "");
     writeSuccess(`Created ${relativePath}`);
     console.log("");
@@ -40492,9 +42068,9 @@ async function governanceCommand(action) {
 __name(governanceCommand, "governanceCommand");
 async function governanceRemove() {
   const srcDir = resolve4(process.cwd(), "src");
-  const targetDir = existsSync8(srcDir) ? srcDir : process.cwd();
-  const filePath = join7(targetDir, "governance.ts");
-  const hasLocal = existsSync8(filePath);
+  const targetDir = existsSync10(srcDir) ? srcDir : process.cwd();
+  const filePath = join9(targetDir, "governance.ts");
+  const hasLocal = existsSync10(filePath);
   const { confirm } = await safePrompt([
     {
       type: "confirm",
@@ -40550,7 +42126,7 @@ __name(governanceRemove, "governanceRemove");
 init_cli();
 init_auth();
 init_files();
-import chalk3 from "chalk";
+import chalk4 from "chalk";
 init_compiler2();
 init_artifact_loader();
 init_analytics();
@@ -40579,28 +42155,28 @@ async function listModels(models, currentModel, opts) {
   console.log("============================================================");
   console.log("");
   if (currentModel) {
-    console.log(`  Current model: ${chalk3.bold.cyan(currentModel)}`);
+    console.log(`  Current model: ${chalk4.bold.cyan(currentModel)}`);
   } else {
-    console.log(`  Current model: ${chalk3.gray("(platform default)")}`);
+    console.log(`  Current model: ${chalk4.gray("(platform default)")}`);
   }
   console.log("");
   for (const provider of providers) {
     const providerModels = models.filter((m) => m.provider === provider);
-    console.log(chalk3.yellow(`  \u2500\u2500 ${provider} \u2500\u2500`));
+    console.log(chalk4.yellow(`  \u2500\u2500 ${provider} \u2500\u2500`));
     for (const m of providerModels) {
       const isCurrent = m.code === currentModel;
-      const code = isCurrent ? chalk3.bold.cyan(m.code.padEnd(30)) : m.code.padEnd(30);
-      const desc = chalk3.gray(m.description);
-      const marker = isCurrent ? chalk3.bold.green(" \u2190 current") : "";
+      const code = isCurrent ? chalk4.bold.cyan(m.code.padEnd(30)) : m.code.padEnd(30);
+      const desc = chalk4.gray(m.description);
+      const marker = isCurrent ? chalk4.bold.green(" \u2190 current") : "";
       console.log(`    ${code}  ${desc}${marker}`);
     }
     console.log("");
   }
   console.log("============================================================");
   if (!currentModel) {
-    console.log(`  \u{1F4A1} Run ${chalk3.cyan("lua models set")} to choose a model for your agent`);
+    console.log(`  \u{1F4A1} Run ${chalk4.cyan("lua models set")} to choose a model for your agent`);
   } else {
-    console.log(`  \u{1F4A1} Run ${chalk3.cyan("lua models set")} to change your model`);
+    console.log(`  \u{1F4A1} Run ${chalk4.cyan("lua models set")} to change your model`);
   }
   console.log("============================================================");
   console.log("");
@@ -40614,12 +42190,21 @@ async function modelsCommand(action, opts) {
     const agentId = config?.agent?.agentId;
     if (resolvedAction === "list") {
       writeProgress("\u{1F504} Fetching available models...");
-      const models = await fetchApprovedModels(apiKey);
+      const models = await fetchApprovedModels(apiKey, agentId);
       writeProgress("");
-      if (models.length === 0) {
+      if (models === null) {
         writeError("\u274C Could not fetch models from the server. Check your connection and API key.");
         return;
       }
+      if (models.length === 0) {
+        writeInfo("\u2139\uFE0F  No models are currently available. If your organization restricts models, an admin may need to review its excluded-models list.");
+        trackEvent("cli_models_listed", {
+          models_count: 0,
+          has_current_model: false,
+          json_output: opts.json ?? false
+        });
+        return;
+      }
       const currentModel = agentId ? await resolveCurrentModel(apiKey, agentId) : null;
       await listModels(models, currentModel, opts);
       trackEvent("cli_models_listed", {
@@ -40635,11 +42220,14 @@ async function modelsCommand(action, opts) {
         process.exit(1);
       }
       writeProgress("\u{1F504} Fetching available models...");
-      const models = await fetchApprovedModels(apiKey);
+      const models = await fetchApprovedModels(apiKey, agentId);
       writeProgress("");
-      if (models.length === 0) {
+      if (models === null) {
         writeError("\u274C Could not fetch models from the server. Check your connection and API key.");
         process.exit(1);
+      } else if (models.length === 0) {
+        writeError("\u274C No models are currently available. If your organization restricts models, an admin may need to review its excluded-models list.");
+        process.exit(1);
       }
       let selectedModel;
       if (opts.model) {
@@ -40647,7 +42235,7 @@ async function modelsCommand(action, opts) {
       } else {
         const currentModel = await resolveCurrentModel(apiKey, agentId);
         if (!opts.json) {
-          writeInfo(`  Current model: ${currentModel ? chalk3.bold.cyan(currentModel) : chalk3.gray("(platform default)")}
+          writeInfo(`  Current model: ${currentModel ? chalk4.bold.cyan(currentModel) : chalk4.gray("(platform default)")}
 `);
         }
         selectedModel = await promptModelSelection(models);
@@ -40658,15 +42246,23 @@ async function modelsCommand(action, opts) {
       }
       const localWriteOk = setAgentModel(selectedModel);
       if (localWriteOk) {
-        writeSuccess(`\u2705 Model written to source: ${chalk3.bold(selectedModel)}`);
+        writeSuccess(`\u2705 Model written to source: ${chalk4.bold(selectedModel)}`);
       } else {
         writeInfo(`\u26A0\uFE0F  Could not write model to source file (no LuaAgent constructor found). You can set it manually in your code.`);
       }
       try {
         await updateAgentModel(apiKey, agentId, selectedModel);
-        writeSuccess(`\u2705 Model pushed to server: ${chalk3.bold(selectedModel)}`);
+        writeSuccess(`\u2705 Model pushed to server: ${chalk4.bold(selectedModel)}`);
       } catch (err) {
-        writeInfo(`\u26A0\uFE0F  Could not push model to server: ${err.message}. Run \`lua push agent\` to retry.`);
+        const msg = err?.message || "Unknown error";
+        const isPolicyRejection = /isn'?t available for your organization|not available for your organization|not approved/i.test(msg);
+        if (isPolicyRejection) {
+          writeError(`\u274C ${msg}`);
+          writeInfo(`   Run ${chalk4.cyan("lua models list")} to see the models allowed for your organization.`);
+          writeInfo(`   The model was written to your local source but NOT applied on the server \u2014 pick an allowed model to keep them in sync.`);
+        } else {
+          writeInfo(`\u26A0\uFE0F  Could not push model to server: ${msg}. Run \`lua push agent\` to retry.`);
+        }
       }
       trackEvent("cli_models_set", {
         model: selectedModel,
@@ -40685,7 +42281,7 @@ async function modelsCommand(action, opts) {
         writeInfo("\u2139\uFE0F  No model is currently set \u2014 the platform default is already in use.");
         return;
       }
-      writeInfo(`  Current model: ${chalk3.bold.cyan(currentModel)}`);
+      writeInfo(`  Current model: ${chalk4.bold.cyan(currentModel)}`);
       writeInfo(`  This will remove the model and let the Lua platform use its default.
 `);
       const localRemoveOk = removeAgentModel();
@@ -40719,8 +42315,8 @@ init_command_utils();
 init_artifact_loader();
 init_types();
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync9, readdirSync as readdirSync3, statSync as statSync4 } from "fs";
-import { join as join8, relative, resolve as resolve5 } from "path";
+import { existsSync as existsSync11, readdirSync as readdirSync3, statSync as statSync4 } from "fs";
+import { join as join10, relative, resolve as resolve5 } from "path";
 init_voice_api_service();
 init_constants();
 
@@ -41308,8 +42904,8 @@ function escapeRegex(s) {
 }
 __name(escapeRegex, "escapeRegex");
 function detectRunner(cwd) {
-  const pkgPath = join8(cwd, "package.json");
-  if (!existsSync9(pkgPath)) return null;
+  const pkgPath = join10(cwd, "package.json");
+  if (!existsSync11(pkgPath)) return null;
   try {
     const pkg2 = JSON.parse(__require("fs").readFileSync(pkgPath, "utf8"));
     const deps = {
@@ -41681,7 +43277,7 @@ function findVoiceTestFiles(root) {
       return;
     }
     for (const entry of entries) {
-      const full = join8(dir, entry);
+      const full = join10(dir, entry);
       let s;
       try {
         s = statSync4(full);
@@ -41994,6 +43590,7 @@ async function versionShowCommand(versionArg, options = {}) {
       console.log(`  Snapshot:`);
       console.log(`    Skills:         ${v.snapshot.skills.length}`);
       console.log(`    Webhooks:       ${v.snapshot.webhooks.length}`);
+      console.log(`    Triggers:       ${(v.snapshot.triggers ?? []).length}`);
       console.log(`    Jobs:           ${v.snapshot.jobs.length}`);
       console.log(`    Preprocessors:  ${v.snapshot.preprocessors.length}`);
       console.log(`    Postprocessors: ${v.snapshot.postprocessors.length}`);
@@ -42049,6 +43646,16 @@ async function versionDiffCommand(fromArg, toArg, options = {}) {
           name: "Postprocessors",
           entry: diff.postprocessors,
           key: "id"
+        },
+        // `?? {…}` — older servers (pre-PRO-95) omit triggers from the diff.
+        {
+          name: "Triggers",
+          entry: diff.triggers ?? {
+            added: [],
+            removed: [],
+            changed: []
+          },
+          key: "triggerId"
         }
       ];
       for (const { name, entry, key } of sections) {
@@ -42896,19 +44503,21 @@ Examples:
   $ lua jobs versions -i myJob                         View job versions
   $ lua jobs history -i myJob                          View execution history
 `).action(jobsCommand);
-  program2.command("features [action]").description("\u{1F3AF} Manage agent features (RAG, webSearch, inquiry)").option("--feature-name <name>", "Feature name").addHelpText("after", `
+  program2.command("features [action]").description("\u{1F3AF} Manage agent features (RAG, webSearch, inquiry, outboundChannels)").option("--feature-name <name>", "Feature name").option("--recipient-scope <scope>", "For configure: outboundChannels recipient scope (current_user | anyone)").addHelpText("after", `
 Arguments:
-  action                   Optional: 'list', 'enable', 'disable', 'view' (prompts if not provided)
+  action                   Optional: 'list', 'enable', 'disable', 'view', 'configure' (prompts if not provided)
 
 Options:
-  --feature-name <name>    Feature name (required for enable/disable/view actions)
+  --feature-name <name>       Feature name (required for enable/disable/view/configure actions)
+  --recipient-scope <scope>   For configure: outboundChannels recipient scope (current_user | anyone)
 
 Examples:
   $ lua features                                Interactive management
   $ lua features list                           List all features
-  $ lua features enable --feature-name rag  Enable a feature
+  $ lua features enable --feature-name rag      Enable a feature
   $ lua features disable --feature-name rag     Disable a feature
   $ lua features view --feature-name webSearch  View feature details
+  $ lua features configure --feature-name outboundChannels --recipient-scope anyone
 `).action(featuresCommand);
   program2.command("preprocessors [action]").description("\u{1F4E5} Manage message preprocessors").option("--preprocessor-name <name>", "PreProcessor name").option("--preprocessor-version <version>", "Version for deploy action (or 'latest')").addHelpText("after", `
 Arguments:
@@ -42964,9 +44573,10 @@ Examples:
 `).action(mcpCommand);
   program2.command("integrations [action] [subaction]").description("\u{1F517} Connect third-party integrations via Unified.to").option("--integration <type>", "Integration type (e.g., linear, googlecalendar)").option("--auth-method <method>", "Authentication method: 'oauth' or 'token'").option("--scopes <scopes>", "Comma-separated OAuth scopes (or 'all' for all scopes)").option("--hide-sensitive <bool>", "Hide sensitive data from MCP tools (default: true)").option("--connection-id <id>", "Connection ID to disconnect or pause/resume").option("--connection <id>", "Connection ID for trigger").option("--webhook-id <id>", "Trigger ID to delete/pause/resume").option("--object <type>", "Object type for webhook (e.g., task_task, calendar_event)").option("--event <type>", "Event type for webhook: created, updated, or deleted").option("--hook-url <url>", "Custom webhook URL (default: agent trigger)").option("--interval <minutes>", "Polling interval for virtual webhooks (60, 120, 240, 480, 720, 1440, 2880)").option("--triggers <events>", "Comma-separated triggers (e.g., task_task.created,task_task.updated)").option("--custom-webhook", "Use custom webhook URL instead of agent trigger").option("--json", "Output as JSON (for info and webhooks events commands)").option("--reason <text>", "Optional reason for pausing a trigger").addHelpText("after", `
 Arguments:
-  action                 Optional: 'connect', 'update', 'list', 'available', 'info', 'disconnect', 'webhooks', or 'mcp'
+  action                 Optional: 'connect', 'update', 'list', 'available', 'info', 'disconnect', 'webhooks'
+                         (alias: 'triggers'), or 'mcp'
   subaction              For info: <integration-type>
-                         For webhooks: 'list', 'events', 'create', or 'delete'
+                         For webhooks/triggers: 'list', 'events', 'create', 'delete', 'pause', or 'resume'
                          For mcp: 'list', 'activate', or 'deactivate'
 
 Options:
@@ -43002,8 +44612,9 @@ Examples:
   $ lua integrations info linear --json                 Output as JSON (for scripting)
   $ lua integrations disconnect --connection-id abc123  Disconnect an integration
 
-Webhook/Trigger Examples:
+Webhook/Trigger Examples ('triggers' is an alias for 'webhooks'):
   $ lua integrations webhooks list                      List all triggers
+  $ lua integrations triggers list                      Same, via the 'triggers' alias
   $ lua integrations webhooks events --integration linear  List available events
   $ lua integrations webhooks create                    Create trigger (interactive)
   $ lua integrations webhooks delete --webhook-id wh_xyz789
@@ -43017,27 +44628,37 @@ MCP Server Examples:
   $ lua integrations mcp activate --connection abc123   Activate MCP server for a connection
   $ lua integrations mcp deactivate --connection abc123 Deactivate MCP server for a connection
 `).action(integrationsCommand);
-  program2.command("triggers [action]").description("\u26A1 Manage integration triggers (alias for: lua integrations webhooks)").option("--connection-id <id>", "Connection ID to pause/resume all triggers").option("--connection <id>", "Connection ID for creating a trigger").option("--webhook-id <id>", "Trigger ID to delete/pause/resume").option("--object <type>", "Object type for webhook (e.g., task_task, calendar_event)").option("--event <type>", "Event type: created, updated, or deleted").option("--hook-url <url>", "Custom webhook URL (default: agent trigger)").option("--interval <minutes>", "Polling interval for virtual webhooks").option("--json", "Output as JSON").option("--reason <text>", "Optional reason for pausing").addHelpText("after", `
-This is a shortcut for: lua integrations webhooks <action>
+  program2.command("triggers [action]").description("\u26A1 Manage agent triggers (paste-anywhere URLs that invoke your agent)").option("--name <name>", "Trigger name (for create)").option("--description <text>", "Trigger description (for create)").option("--instruction <text>", "Instruction sent to the agent each time this trigger fires").option("--trigger <nameOrId>", "Trigger name or ID").option("--limit <n>", "Max executions to show for logs (default: 20, max: 200)").option("--json", "Output as JSON (for list and logs)").option("--force", "Skip confirmation prompts (for delete)").option("--webhook-id <id>", "(moved) integration trigger ID \u2014 use: lua integrations webhooks").option("--connection-id <id>", "(moved) integration connection ID \u2014 use: lua integrations webhooks").option("--connection <id>", "(moved) integration connection ID \u2014 use: lua integrations webhooks").addHelpText("after", `
+Arguments:
+  action                 Optional: 'list', 'create', 'logs', 'activate', 'deactivate',
+                         'rotate-token', 'delete' (prompts if not provided)
 
-Actions: list, create, delete, pause, resume, events
+Options:
+  --name <name>          Trigger name (required for create)
+  --description <text>   Trigger description (optional, for create)
+  --instruction <text>   Instruction sent to the agent each time this trigger fires (optional, for create)
+  --trigger <nameOrId>   Trigger name or ID (required for logs/activate/deactivate/rotate-token/delete)
+  --limit <n>            Max executions to show for logs (default: 20, max: 200)
+  --json                 Output as JSON (for list and logs)
+  --force                Skip confirmation prompts (for delete)
 
 Examples:
-  $ lua triggers                               Interactive trigger management
-  $ lua triggers list                          List all triggers
-  $ lua triggers list --json                   Output as JSON
-  $ lua triggers create                        Create trigger (interactive)
-  $ lua triggers pause --webhook-id <id>       Pause a trigger
-  $ lua triggers pause --connection-id <id>    Pause all triggers for a connection
-  $ lua triggers resume --webhook-id <id>      Resume a trigger
-  $ lua triggers resume --connection-id <id>   Resume all triggers for a connection
-  $ lua triggers delete --webhook-id <id>      Delete a trigger
-`).action((action, cmdOptions) => {
-    const opts = {
-      ...cmdOptions || {}
-    };
-    return integrationsCommand("webhooks", action || "", opts);
-  });
+  $ lua triggers                                          Interactive management
+  $ lua triggers list                                     List all triggers
+  $ lua triggers list --json                              Output as JSON
+  $ lua triggers create --name order-created              Create a trigger (prints the pasteable URL)
+  $ lua triggers create --name order-created --description "Fires on new orders"
+  $ lua triggers create --name daily-time --instruction "Reply with the current date and time"
+  $ lua triggers logs --trigger order-created             View execution history
+  $ lua triggers logs --trigger order-created --limit 5 --json
+  $ lua triggers activate --trigger order-created         Enable a trigger
+  $ lua triggers deactivate --trigger order-created       Disable a trigger
+  $ lua triggers rotate-token --trigger order-created     Invalidate the old URL, print the new one
+  $ lua triggers delete --trigger order-created --force   Delete without confirmation
+
+Looking for integration triggers (Linear, HubSpot, ...)? They moved:
+  $ lua integrations webhooks <action>    (also reachable as: lua integrations triggers <action>)
+`).action(triggersCommand);
   program2.command("completion [shell]").description("\u{1F3AF} Generate shell completion script").addHelpText("after", `
 Arguments:
   shell                  Optional: 'bash', 'zsh', or 'fish' (shows instructions if not provided)