lua-cli 3.23.0 → 3.23.2

package/dist/api-exports.d.ts

@@ -7,6 +7,16 @@ import { UserContent } from 'ai';
 import { z } from 'zod';
 import { ZodType } from 'zod';
 
+/**
+ * Narrowed, wire-safe output for `Agents.invoke`. A slice of the internal
+ * `FullOutput` shape — raw Mastra steps / tripwire payloads are intentionally
+ * not exposed to skill code.
+ */
+declare interface AgentInvocationEffects {
+    reviewDraftsCreated: number;
+    storage: 'lua_inbox';
+}
+
 /**
  * Wire-format input for sandbox `Agents.invoke` / `POST /chat/generate/:agentId`
  * when triggered programmatically by another agent/skill/tool.
@@ -68,13 +78,17 @@ declare interface AgentInvocationInput {
     model?: string;
     /** Task 14 (tasks-redesign) — per-task connector + skill scoping. See `AgentToolScope`. */
     toolScope?: AgentToolScope;
+    /**
+     * PRO-979 (A3) — cooperative mid-run cancellation. Honored where the
+     * transport boundary supports it (the loopback HTTP call is aborted); the
+     * in-flight server-side turn is NOT hard-killed — callers that abort must
+     * treat still-landing side effects as possible and record them (the job
+     * runner's ledger does, via postFence). NOT serialized on the wire — this
+     * field exists only on in-process invocations.
+     */
+    signal?: AbortSignal;
 }
 
-/**
- * Narrowed, wire-safe output for `Agents.invoke`. A slice of the internal
- * `FullOutput` shape — raw Mastra steps / tripwire payloads are intentionally
- * not exposed to skill code.
- */
 declare interface AgentInvocationOutput {
     /** Final response text (post-processor-modified, if applicable). */
     text: string;
@@ -90,6 +104,10 @@ declare interface AgentInvocationOutput {
     };
     /** Names of tools invoked during generation. */
     toolsUsed?: string[];
+    /** Trusted effects emitted by Lua-owned tool wrappers. This is intentionally
+     *  a small aggregate, not raw tool output: unattended task receipts use it
+     *  to report what happened without trusting model-authored prose. */
+    effects?: AgentInvocationEffects;
     /**
      * Echoes back the `threadId` suffix the caller passed in (if any). When the
      * caller omitted `threadId`, this is undefined — the invocation ran in the
@@ -1087,7 +1105,7 @@ declare interface CustomDataAPI {
      * @param limit - Items per page
      * @returns Promise resolving to paginated entries
      */
-    get(collectionName: string, filter?: Record<string, any>, page?: number, limit?: number): Promise<GetCustomDataResponse>;
+    get(collectionName: string, filter?: LuaQuery, page?: number, limit?: number): Promise<GetCustomDataResponse>;
     /**
      * Gets a specific entry by ID.
      * @param collectionName - Collection name
@@ -1168,7 +1186,7 @@ export declare const Data: {
      * @param limit - Items per page (default: 10)
      * @returns Promise resolving to array of entries
      */
-    get(collectionName: string, filter?: any, page?: number, limit?: number): Promise<GetCustomDataResponse>;
+    get(collectionName: string, filter?: LuaQuery, page?: number, limit?: number): Promise<GetCustomDataResponse>;
     /**
      * Retrieves a specific entry by ID.
      *
@@ -1578,6 +1596,18 @@ declare interface GovernanceConfig {
     /** SDK mode — local in-memory policy rules layered on top of any `preset`. */
     rules?: {
         blockTools?: string[];
+        /**
+         * Tool names that require human approval before executing. Matched against
+         * the runtime tool name on each tool_call (the SDK's `requireToolApproval`
+         * preset). Canonical key — writers use this.
+         */
+        requireToolApproval?: string[];
+        /**
+         * @deprecated Legacy key for `requireToolApproval`. Historically fed into the
+         * SDK's `requireApproval(actions)` preset, which matches action CATEGORIES —
+         * so tool names stored here never matched at runtime (PRO-257). Read-compat
+         * only: accepted on read when `requireToolApproval` is absent; never written.
+         */
         requireApproval?: string[];
         tokenBudget?: number;
     };
@@ -1910,7 +1940,11 @@ declare interface JobExecution {
     retryCount?: number;
 }
 
-declare type JobExecutionStatus = 'pending' | 'running' | 'completed' | 'failed' | 'timeout';
+/** The complete persisted vocabulary (shared-schemas job.execution.schema.ts
+ *  is the source of truth): PRO-979 added the explicit cancellation/ownership
+ *  lifecycle; claimed/killed/cancelled predate it. Additive — existing
+ *  consumers narrowing on the old five values keep compiling. */
+declare type JobExecutionStatus = 'pending' | 'claimed' | 'running' | 'cancellation_requested' | 'completed' | 'failed' | 'timeout' | 'killed' | 'cancelled' | 'abandoned' | 'reaped';
 
 /**
  * Job Instance class.
@@ -2710,6 +2744,33 @@ export declare class LuaMCPServer {
  */
 export declare type LuaMCPServerConfig = MCPSSEServerConfig | MCPStreamableHttpServerConfig;
 
+/**
+ * The entity-independent, bounded Mongo-style filter accepted by Lua APIs.
+ * Root `$and`/`$or` branches and nested data fields share this recursive shape;
+ * the runtime compiler performs the stricter placement and resource checks.
+ */
+export declare interface LuaQuery {
+    [fieldOrLogicalOperator: string]: LuaQueryValue;
+}
+
+/** Field-level operators shared by every Lua platform Query surface. */
+export declare interface LuaQueryFieldOperators {
+    $eq?: LuaQueryScalar;
+    $ne?: LuaQueryScalar;
+    $gt?: LuaQueryScalar;
+    $gte?: LuaQueryScalar;
+    $lt?: LuaQueryScalar;
+    $lte?: LuaQueryScalar;
+    $in?: readonly LuaQueryScalar[];
+    $nin?: readonly LuaQueryScalar[];
+    $exists?: boolean;
+}
+
+/** JSON scalar accepted by the bounded Lua Query language. */
+export declare type LuaQueryScalar = string | number | boolean | null;
+
+declare type LuaQueryValue = LuaQueryScalar | readonly LuaQueryScalar[] | LuaQueryFieldOperators | LuaQuery | readonly LuaQuery[];
+
 /**
  * Lua request context.
  * Contains information about the current request.
@@ -4666,7 +4727,7 @@ declare interface ProductAPI {
     get(options?: {
         page?: number;
         limit?: number;
-        filter?: Record<string, any>;
+        filter?: LuaQuery;
     }): Promise<any>;
     /**
      * Creates a new product.
@@ -4719,7 +4780,7 @@ declare interface ProductAPI {
 declare interface ProductFilterOptions {
     page?: number;
     limit?: number;
-    filter?: Record<string, any>;
+    filter?: LuaQuery;
 }
 
 /**

package/dist/api-exports.js

@@ -101,9 +101,13 @@ function isMcpDraftCreateTool(tool) {
   return tokens[0] === "draft" || tokens.some((t) => MCP_DRAFT_CREATE_VERBS.has(t));
 }
 function mcpSendSiblingForDraftTool(tool, availableToolIds) {
-  const sibling = `${tool.split("_")[0]}${REVIEWABLE_MCP_SEND_TOOL_SUFFIX}`;
-  for (const id of availableToolIds) if (id === sibling) return sibling;
-  return void 0;
+  const candidates = [
+    ...availableToolIds
+  ].filter((id) => id.endsWith(REVIEWABLE_MCP_SEND_TOOL_SUFFIX)).map((id) => ({
+    id,
+    serverName: id.slice(0, -REVIEWABLE_MCP_SEND_TOOL_SUFFIX.length)
+  })).filter(({ serverName }) => tool.startsWith(`${serverName}_`)).sort((a, b) => b.serverName.length - a.serverName.length);
+  return candidates[0]?.id;
 }
 function isReviewableExecuteTool(tool) {
   return isAllowedReviewableExecuteTool(tool) || isReviewableMcpSendTool(tool);
@@ -341,6 +345,20 @@ function foldRichPartsIntoMessages(messages, records, makeMessage, sameTurnGroup
   while (next < synthetic.length) combined.push(synthetic[next++].message);
   return mergeRichPartMirrorMessages(combined, sameTurnGroup);
 }
+function isDesktopFileCommandName(value) {
+  return typeof value === "string" && DESKTOP_FILE_COMMAND_SET.has(value);
+}
+function isDesktopFileSessionId(value) {
+  return typeof value === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
+}
+function resolveRequireToolApproval(rules) {
+  const raw = rules?.requireToolApproval ?? rules?.requireApproval;
+  if (raw === void 0 || raw === null) return void 0;
+  const list = Array.isArray(raw) ? raw : [
+    raw
+  ];
+  return list.filter((t) => typeof t === "string");
+}
 function buildDefaultPersona(agentName) {
   return DEFAULT_PERSONA_GUIDE.replace(AGENT_NAME_TOKEN, () => agentName || "My Agent");
 }
@@ -360,7 +378,7 @@ function normalizeLuaJobExecutionTimeoutSeconds(timeout) {
   }
   return Math.min(Math.max(timeout, LUA_JOB_MIN_TIMEOUT_SECONDS), LUA_JOB_MAX_TIMEOUT_SECONDS);
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, REASONING_EFFORT_VALUES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -403,7 +421,7 @@ var init_dist = __esm({
     REVIEWABLE_MCP_SEND_TOOL_SUFFIX = "_create_messaging_message";
     __name(isReviewableMcpSendTool, "isReviewableMcpSendTool");
     __name2(isReviewableMcpSendTool, "isReviewableMcpSendTool");
-    MCP_TOOL_READ_VERB_RE = /^(list|get|search|read|fetch|find|query|describe|count|retrieve|lookup|show|view)(_|[A-Z0-9]|$)/;
+    MCP_TOOL_READ_VERB_RE = /(?:^|_)(list|get|search|read|fetch|find|query|describe|count|retrieve|lookup|show|view)(_|[A-Z0-9]|$)/;
     __name(mcpActionTokens, "mcpActionTokens");
     __name2(mcpActionTokens, "mcpActionTokens");
     __name(isReviewableMcpDraftTool, "isReviewableMcpDraftTool");
@@ -654,6 +672,27 @@ var init_dist = __esm({
       }
     ];
     BROWSER_COMMAND_NAMES = BROWSER_COMMANDS.map((c) => c.name);
+    DESKTOP_FILE_COMMANDS = [
+      "files_roots",
+      "files_stat",
+      "files_list",
+      "files_read",
+      "files_search",
+      "files_write",
+      "files_mkdir",
+      "files_move",
+      "files_delete",
+      "files_undo",
+      "files_transfer_prepare",
+      "files_transfer_upload",
+      "files_watch_start",
+      "files_watch_cancel"
+    ];
+    DESKTOP_FILE_COMMAND_SET = new Set(DESKTOP_FILE_COMMANDS);
+    __name(isDesktopFileCommandName, "isDesktopFileCommandName");
+    __name2(isDesktopFileCommandName, "isDesktopFileCommandName");
+    __name(isDesktopFileSessionId, "isDesktopFileSessionId");
+    __name2(isDesktopFileSessionId, "isDesktopFileSessionId");
     REASONING_EFFORT_VALUES = [
       "off",
       "minimal",
@@ -662,6 +701,8 @@ var init_dist = __esm({
       "high",
       "max"
     ];
+    __name(resolveRequireToolApproval, "resolveRequireToolApproval");
+    __name2(resolveRequireToolApproval, "resolveRequireToolApproval");
     AGENT_NAME_TOKEN = "[Your Agent Name]";
     DEFAULT_PERSONA_GUIDE = `# ${AGENT_NAME_TOKEN} - Persona