lua-cli 3.23.0 → 3.23.1

package/dist/index.js

@@ -896,9 +896,13 @@ function isMcpDraftCreateTool(tool) {
   return tokens[0] === "draft" || tokens.some((t) => MCP_DRAFT_CREATE_VERBS.has(t));
 }
 function mcpSendSiblingForDraftTool(tool, availableToolIds) {
-  const sibling = `${tool.split("_")[0]}${REVIEWABLE_MCP_SEND_TOOL_SUFFIX}`;
-  for (const id of availableToolIds) if (id === sibling) return sibling;
-  return void 0;
+  const candidates = [
+    ...availableToolIds
+  ].filter((id) => id.endsWith(REVIEWABLE_MCP_SEND_TOOL_SUFFIX)).map((id) => ({
+    id,
+    serverName: id.slice(0, -REVIEWABLE_MCP_SEND_TOOL_SUFFIX.length)
+  })).filter(({ serverName }) => tool.startsWith(`${serverName}_`)).sort((a, b) => b.serverName.length - a.serverName.length);
+  return candidates[0]?.id;
 }
 function isReviewableExecuteTool(tool) {
   return isAllowedReviewableExecuteTool(tool) || isReviewableMcpSendTool(tool);
@@ -1136,6 +1140,20 @@ function foldRichPartsIntoMessages(messages, records, makeMessage, sameTurnGroup
   while (next < synthetic.length) combined.push(synthetic[next++].message);
   return mergeRichPartMirrorMessages(combined, sameTurnGroup);
 }
+function isDesktopFileCommandName(value) {
+  return typeof value === "string" && DESKTOP_FILE_COMMAND_SET.has(value);
+}
+function isDesktopFileSessionId(value) {
+  return typeof value === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
+}
+function resolveRequireToolApproval(rules) {
+  const raw = rules?.requireToolApproval ?? rules?.requireApproval;
+  if (raw === void 0 || raw === null) return void 0;
+  const list = Array.isArray(raw) ? raw : [
+    raw
+  ];
+  return list.filter((t) => typeof t === "string");
+}
 function buildDefaultPersona(agentName) {
   return DEFAULT_PERSONA_GUIDE.replace(AGENT_NAME_TOKEN, () => agentName || "My Agent");
 }
@@ -1155,7 +1173,7 @@ function normalizeLuaJobExecutionTimeoutSeconds(timeout) {
   }
   return Math.min(Math.max(timeout, LUA_JOB_MIN_TIMEOUT_SECONDS), LUA_JOB_MAX_TIMEOUT_SECONDS);
 }
-var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, REASONING_EFFORT_VALUES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
+var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1189,7 +1207,7 @@ var init_dist = __esm({
     REVIEWABLE_MCP_SEND_TOOL_SUFFIX = "_create_messaging_message";
     __name(isReviewableMcpSendTool, "isReviewableMcpSendTool");
     __name2(isReviewableMcpSendTool, "isReviewableMcpSendTool");
-    MCP_TOOL_READ_VERB_RE = /^(list|get|search|read|fetch|find|query|describe|count|retrieve|lookup|show|view)(_|[A-Z0-9]|$)/;
+    MCP_TOOL_READ_VERB_RE = /(?:^|_)(list|get|search|read|fetch|find|query|describe|count|retrieve|lookup|show|view)(_|[A-Z0-9]|$)/;
     __name(mcpActionTokens, "mcpActionTokens");
     __name2(mcpActionTokens, "mcpActionTokens");
     __name(isReviewableMcpDraftTool, "isReviewableMcpDraftTool");
@@ -1440,6 +1458,27 @@ var init_dist = __esm({
       }
     ];
     BROWSER_COMMAND_NAMES = BROWSER_COMMANDS.map((c) => c.name);
+    DESKTOP_FILE_COMMANDS = [
+      "files_roots",
+      "files_stat",
+      "files_list",
+      "files_read",
+      "files_search",
+      "files_write",
+      "files_mkdir",
+      "files_move",
+      "files_delete",
+      "files_undo",
+      "files_transfer_prepare",
+      "files_transfer_upload",
+      "files_watch_start",
+      "files_watch_cancel"
+    ];
+    DESKTOP_FILE_COMMAND_SET = new Set(DESKTOP_FILE_COMMANDS);
+    __name(isDesktopFileCommandName, "isDesktopFileCommandName");
+    __name2(isDesktopFileCommandName, "isDesktopFileCommandName");
+    __name(isDesktopFileSessionId, "isDesktopFileSessionId");
+    __name2(isDesktopFileSessionId, "isDesktopFileSessionId");
     REASONING_EFFORT_VALUES = [
       "off",
       "minimal",
@@ -1448,6 +1487,8 @@ var init_dist = __esm({
       "high",
       "max"
     ];
+    __name(resolveRequireToolApproval, "resolveRequireToolApproval");
+    __name2(resolveRequireToolApproval, "resolveRequireToolApproval");
     AGENT_NAME_TOKEN = "[Your Agent Name]";
     DEFAULT_PERSONA_GUIDE = `# ${AGENT_NAME_TOKEN} - Persona
 
@@ -15051,7 +15092,7 @@ export const governance = {
   }
   if (setup.requireApproval && setup.requireApproval.length > 0) {
     const list = setup.requireApproval.map((t) => `'${t}'`).join(", ");
-    ruleLines.push(`    requireApproval: [${list}],`);
+    ruleLines.push(`    requireToolApproval: [${list}],`);
   }
   if (setup.tokenLimit && setup.tokenLimit > 0) {
     ruleLines.push(`    tokenBudget: ${setup.tokenLimit},`);
@@ -19962,6 +20003,15 @@ var DeviceTriggerApi = class extends HttpClient {
 
 // src/primitives/device-trigger.handler.ts
 init_base_handler();
+
+// src/primitives/device-trigger.response.ts
+function parseDeviceTriggerList(data) {
+  const triggers = data?.triggers ?? data?.deviceTriggers;
+  return Array.isArray(triggers) ? triggers : null;
+}
+__name(parseDeviceTriggerList, "parseDeviceTriggerList");
+
+// src/primitives/device-trigger.handler.ts
 var DeviceTriggerHandler = class extends BaseVersionedHandler {
   static {
     __name(this, "DeviceTriggerHandler");
@@ -20001,10 +20051,10 @@ var DeviceTriggerHandler = class extends BaseVersionedHandler {
   }
   async fetchFromServer(api) {
     const response = await api.getDeviceTriggers();
-    if (!response.success || !response.data?.deviceTriggers) {
+    if (!response.success) {
       return null;
     }
-    return response.data.deviceTriggers;
+    return parseDeviceTriggerList(response.data);
   }
   async createOnServer(api, primitive) {
     const response = await api.createDeviceTrigger({
@@ -29787,13 +29837,47 @@ init_cli();
 init_command_utils();
 init_analytics();
 import open from "open";
+
+// src/utils/auth-handoff.ts
+init_constants();
+async function issueAdminHandoff(apiKey) {
+  const response = await fetch(`${BASE_URLS.AUTH}/auth/handoff`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${apiKey}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({
+      audience: "admin"
+    })
+  });
+  if (!response.ok) throw new Error("Could not create a secure dashboard sign-in handoff");
+  const body = await response.json();
+  if (typeof body.code !== "string" || !body.code) {
+    throw new Error("Lua Auth returned an invalid dashboard sign-in handoff");
+  }
+  return body.code;
+}
+__name(issueAdminHandoff, "issueAdminHandoff");
+function buildAdminHandoffUrl(code, agentId, orgId) {
+  const url = new URL("/auth-handoff", "https://admin.heylua.ai");
+  url.searchParams.set("code", code);
+  url.searchParams.set("redirect", "/admin/usage");
+  url.searchParams.set("agentId", agentId);
+  url.searchParams.set("orgId", orgId);
+  return url.toString();
+}
+__name(buildAdminHandoffUrl, "buildAdminHandoffUrl");
+
+// src/commands/admin.ts
 async function adminCommand() {
   return withErrorHandling(async () => {
     writeProgress("Opening Lua Admin Dashboard...");
     const { agentId, orgId, apiKey } = await initializeCommand({
       showProgress: false
     });
-    const adminUrl = `https://admin.heylua.ai/validate-token/${apiKey}?redirect=/admin/usage?&agentId=${agentId}&orgId=${orgId}`;
+    const handoffCode = await issueAdminHandoff(apiKey);
+    const adminUrl = buildAdminHandoffUrl(handoffCode, agentId, orgId);
     await open(adminUrl);
     writeSuccess("Lua Admin Dashboard opened in your browser");
     console.log(`
@@ -29848,10 +29932,10 @@ async function docsCommand() {
 __name(docsCommand, "docsCommand");
 
 // src/commands/channels.ts
-init_cli();
-init_command_utils();
 import inquirer12 from "inquirer";
 import open4 from "open";
+init_cli();
+init_command_utils();
 
 // src/api/channels.api.service.ts
 init_http_client();
@@ -30419,7 +30503,8 @@ async function openAdminDashboard(apiKey, config) {
   if (!orgId) {
     throw new Error("No orgId found in lua.skill.yaml. Please ensure your configuration is valid.");
   }
-  const adminUrl = `https://admin.heylua.ai/validate-token/${apiKey}?redirect=/admin/usage?&agentId=${agentId}&orgId=${orgId}`;
+  const handoffCode = await issueAdminHandoff(apiKey);
+  const adminUrl = buildAdminHandoffUrl(handoffCode, agentId, orgId);
   await open4(adminUrl);
   writeSuccess("\u2705 Lua Admin Dashboard opened in your browser");
   console.log(`
@@ -41158,6 +41243,7 @@ async function executeNonInteractive12(context, action, cmdOptions) {
     authMethod: cmdOptions?.authMethod,
     scopes: cmdOptions?.scopes,
     hideSensitive: cmdOptions?.hideSensitive === "true",
+    accountLabel: cmdOptions?.accountLabel,
     // Trigger options
     triggers: cmdOptions?.triggers,
     customWebhook: cmdOptions?.customWebhook === true,
@@ -41834,7 +41920,7 @@ Integration: ${selectedIntegration.name}`);
       triggers: selectedTriggers,
       webhookUrl,
       isCustomWebhook
-    });
+    }, options.accountLabel);
   } else {
     writeError(`
 \u274C Authorization failed: ${result.error || "Unknown error"}`);
@@ -41857,8 +41943,22 @@ async function finalizeConnection(context, integration, connectionId, scopes, hi
   triggers: [],
   webhookUrl: "",
   isCustomWebhook: false
-}) {
+}, requestedAccountLabel) {
   writeProgress(`\u{1F504} Setting up ${integration.name} connection...`);
+  let displayName = requestedAccountLabel?.trim();
+  if (!displayName) {
+    const labelAnswer = await safePrompt([
+      {
+        type: "input",
+        name: "displayName",
+        message: "Account label (used to distinguish this connection):",
+        default: integration.name,
+        validate: /* @__PURE__ */ __name((value) => value.trim().length > 0 || "Account label is required", "validate")
+      }
+    ]);
+    if (!labelAnswer) return;
+    displayName = labelAnswer.displayName.trim();
+  }
   const triggers = webhookConfig.triggers.map((t) => ({
     objectType: t.objectType,
     event: t.event,
@@ -41868,6 +41968,7 @@ async function finalizeConnection(context, integration, connectionId, scopes, hi
   const result = await context.unifiedToApi.finalizeConnection(context.agentId, {
     connectionId,
     integrationType: integration.value,
+    displayName,
     scopes: scopes.length > 0 ? scopes : void 0,
     hideSensitive,
     triggers: triggers.length > 0 ? triggers : void 0
@@ -42276,7 +42377,7 @@ Available scopes for ${selectedIntegration.name}:`);
       triggers: triggersToRestore,
       webhookUrl: AGENT_WEBHOOK_URL,
       isCustomWebhook: hasCustomWebhook
-    });
+    }, options.accountLabel);
     if (triggersToRestore.length > 0) {
       writeSuccess(`Restored ${triggersToRestore.length} trigger(s) from previous connection`);
     }
@@ -46539,7 +46640,7 @@ Examples:
   $ lua mcp deactivate --server-name api-server Deactivate a server
   $ lua mcp delete --server-name old-server     Delete a server
 `).action(mcpCommand);
-  program2.command("integrations [action] [subaction]").description("\u{1F517} Connect third-party integrations via Unified.to").option("--integration <type>", "Integration type (e.g., linear, googlecalendar)").option("--auth-method <method>", "Authentication method: 'oauth' or 'token'").option("--scopes <scopes>", "Comma-separated OAuth scopes (or 'all' for all scopes)").option("--hide-sensitive <bool>", "Hide sensitive data from MCP tools (default: true)").option("--connection-id <id>", "Connection ID to disconnect or pause/resume").option("--connection <id>", "Connection ID for trigger").option("--webhook-id <id>", "Trigger ID to delete/pause/resume").option("--object <type>", "Object type for webhook (e.g., task_task, calendar_event)").option("--event <type>", "Event type for webhook: created, updated, or deleted").option("--hook-url <url>", "Custom webhook URL (default: agent trigger)").option("--interval <minutes>", "Polling interval for virtual webhooks (60, 120, 240, 480, 720, 1440, 2880)").option("--triggers <events>", "Comma-separated triggers (e.g., task_task.created,task_task.updated)").option("--custom-webhook", "Use custom webhook URL instead of agent trigger").option("--json", "Output as JSON (for info and webhooks events commands)").option("--reason <text>", "Optional reason for pausing a trigger").addHelpText("after", `
+  program2.command("integrations [action] [subaction]").description("\u{1F517} Connect third-party integrations via Unified.to").option("--integration <type>", "Integration type (e.g., linear, googlecalendar)").option("--auth-method <method>", "Authentication method: 'oauth' or 'token'").option("--scopes <scopes>", "Comma-separated OAuth scopes (or 'all' for all scopes)").option("--hide-sensitive <bool>", "Hide sensitive data from MCP tools (default: true)").option("--account-label <label>", "Account label used to distinguish multiple connected accounts").option("--connection-id <id>", "Connection ID to disconnect or pause/resume").option("--connection <id>", "Connection ID for trigger").option("--webhook-id <id>", "Trigger ID to delete/pause/resume").option("--object <type>", "Object type for webhook (e.g., task_task, calendar_event)").option("--event <type>", "Event type for webhook: created, updated, or deleted").option("--hook-url <url>", "Custom webhook URL (default: agent trigger)").option("--interval <minutes>", "Polling interval for virtual webhooks (60, 120, 240, 480, 720, 1440, 2880)").option("--triggers <events>", "Comma-separated triggers (e.g., task_task.created,task_task.updated)").option("--custom-webhook", "Use custom webhook URL instead of agent trigger").option("--json", "Output as JSON (for info and webhooks events commands)").option("--reason <text>", "Optional reason for pausing a trigger").addHelpText("after", `
 Arguments:
   action                 Optional: 'connect', 'update', 'list', 'available', 'info', 'disconnect', 'webhooks'
                          (alias: 'triggers'), or 'mcp'