lua-cli 3.23.2 → 3.25.0

package/dist/index.js

@@ -1146,6 +1146,9 @@ function isDesktopFileCommandName(value) {
 function isDesktopFileSessionId(value) {
   return typeof value === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
 }
+function isImplicitModelSelectionSource(source) {
+  return source !== void 0 && IMPLICIT_MODEL_SELECTION_SOURCES.includes(source);
+}
 function resolveRequireToolApproval(rules) {
   const raw = rules?.requireToolApproval ?? rules?.requireApproval;
   if (raw === void 0 || raw === null) return void 0;
@@ -1173,7 +1176,7 @@ function normalizeLuaJobExecutionTimeoutSeconds(timeout) {
   }
   return Math.min(Math.max(timeout, LUA_JOB_MIN_TIMEOUT_SECONDS), LUA_JOB_MAX_TIMEOUT_SECONDS);
 }
-var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
+var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1487,6 +1490,12 @@ var init_dist = __esm({
       "high",
       "max"
     ];
+    IMPLICIT_MODEL_SELECTION_SOURCES = [
+      "workspace-default",
+      "platform-default"
+    ];
+    __name(isImplicitModelSelectionSource, "isImplicitModelSelectionSource");
+    __name2(isImplicitModelSelectionSource, "isImplicitModelSelectionSource");
     __name(resolveRequireToolApproval, "resolveRequireToolApproval");
     __name2(resolveRequireToolApproval, "resolveRequireToolApproval");
     AGENT_NAME_TOKEN = "[Your Agent Name]";
@@ -7588,7 +7597,8 @@ var init_agent_plugin = __esm({
         const isDefaultExport = classDecl.isDefaultExport();
         const exportName = isDefaultExport ? "default" : className;
         const name = readStringMember(classDecl, "name") ?? deriveNameFromClassName(className);
-        const baseDescription = readStringMember(classDecl, "description") ?? "";
+        const routingDescription = readStringMember(classDecl, "description");
+        const baseDescription = routingDescription ?? "";
         const personaHit = findClassMember(classDecl, "persona", "property");
         let persona = "";
         if (personaHit && Node13.isPropertyDeclaration(personaHit.node)) {
@@ -7639,6 +7649,7 @@ var init_agent_plugin = __esm({
           metadata: {
             pattern: "class-definition",
             persona,
+            routingDescription,
             model,
             hasModelResolver,
             modelSettings,
@@ -7671,6 +7682,7 @@ var init_agent_plugin = __esm({
           "voice",
           "text"
         ]) ?? "";
+        const routingDescription = extractStringProperty(config, "description");
         const { model, hasModelResolver } = this.extractModelInfo(config);
         const modelSettings = this.extractModelSettings(config);
         const batching = this.extractBatchingInfo(config);
@@ -7688,6 +7700,7 @@ var init_agent_plugin = __esm({
           metadata: {
             pattern,
             persona,
+            routingDescription,
             model,
             hasModelResolver,
             modelSettings,
@@ -7873,6 +7886,7 @@ var init_agent_plugin = __esm({
         return {
           ...this.baseManifestFields(compiled),
           persona: agentMeta.persona,
+          routingDescription: agentMeta.routingDescription,
           model: agentMeta.model,
           hasModelResolver: agentMeta.hasModelResolver || void 0,
           modelSettings: agentMeta.modelSettings,
@@ -12890,17 +12904,42 @@ var init_custom_data_api_service = __esm({
         this.agentId = agentId;
       }
       /**
+      * Lists the agent's data collections with entry counts, timestamps, and —
+      * when declared — managed index status (fields, pending/building/ready/
+      * failed/rejected, error reason). The place to diagnose index declarations.
+      * @returns Promise resolving to the collections listing
+      */
+      async collections() {
+        const response = await this.httpGet(`/developer/agents/${this.agentId}/custom-data`, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+        if (response.success && response.data) {
+          return response.data;
+        }
+        throw new Error(response.error?.message || "Failed to list custom data collections");
+      }
+      /**
       * Creates a new custom data entry in a specified collection
       * @param collectionName - The name of the collection to create the entry in
       * @param data - The data object to store in the entry
-      * @param searchText - Optional text to be used for semantic search indexing
+      * @param optionsOrSearchText - Either a searchText string (legacy form) or an
+      *   options object: `searchText` for semantic search indexing, and `index` to
+      *   declare data fields this agent filters on (e.g. `['business_id']` or
+      *   compounds like `[['country', 'business_id']]`). Declared fields get
+      *   agent-scoped database indexes maintained by the platform: created when
+      *   first declared, removed automatically ~14 days after the code stops
+      *   declaring them. Declaring on every write is the intended, idempotent use.
       * @returns Promise resolving to a DataEntryInstance representing the created entry
       * @throws Error if the entry creation fails or the API request is unsuccessful
       */
-      async create(collectionName, data, searchText) {
+      async create(collectionName, data, optionsOrSearchText) {
+        const options = typeof optionsOrSearchText === "string" ? {
+          searchText: optionsOrSearchText
+        } : optionsOrSearchText ?? {};
         const response = await this.httpPost(`/developer/agents/${this.agentId}/custom-data/${collectionName}`, {
           data,
-          searchText
+          searchText: options.searchText,
+          index: options.index
         }, {
           Authorization: `Bearer ${this.apiKey}`
         });
@@ -12953,14 +12992,19 @@ var init_custom_data_api_service = __esm({
       * @param collectionName - The name of the collection containing the entry
       * @param entryId - The unique identifier of the entry to update
       * @param data - The data object to update
-      * @param searchText - Optional text to be used for semantic search indexing
+      * @param optionsOrSearchText - searchText string (legacy) or { searchText?, index? };
+      *   `index` refreshes this agent's index declarations (same semantics as create)
       * @returns Promise resolving to an UpdateCustomDataResponse with the updated entry details
       * @throws Error if the entry is not found or the update fails
       */
-      async update(collectionName, entryId, data, searchText) {
+      async update(collectionName, entryId, data, optionsOrSearchText) {
+        const options = typeof optionsOrSearchText === "string" ? {
+          searchText: optionsOrSearchText
+        } : optionsOrSearchText ?? {};
         const response = await this.httpPut(`/developer/agents/${this.agentId}/custom-data/${collectionName}/${entryId}`, {
           data,
-          searchText
+          searchText: options.searchText,
+          index: options.index
         }, {
           Authorization: `Bearer ${this.apiKey}`
         });
@@ -13648,6 +13692,31 @@ var init_channels_send_api_service = __esm({
   }
 });
 
+// src/api/inbox-push.api.service.ts
+var InboxPushApiService;
+var init_inbox_push_api_service = __esm({
+  "src/api/inbox-push.api.service.ts"() {
+    "use strict";
+    init_http_client();
+    InboxPushApiService = class extends HttpClient {
+      static {
+        __name(this, "InboxPushApiService");
+      }
+      apiKey;
+      agentId;
+      constructor(baseUrl, apiKey, agentId) {
+        super(baseUrl), this.apiKey = apiKey, this.agentId = agentId;
+      }
+      /** POST /developer/agents/:agentId/inbox/push */
+      async push(input) {
+        return this.httpPost(`/developer/agents/${this.agentId}/inbox/push`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+    };
+  }
+});
+
 // src/api/directory.api.service.ts
 var DirectoryApiService;
 var init_directory_api_service = __esm({
@@ -13783,6 +13852,7 @@ __export(lazy_instances_exports, {
   getDeveloperInstance: () => getDeveloperInstance,
   getDeviceInstance: () => getDeviceInstance,
   getDirectoryInstance: () => getDirectoryInstance,
+  getInboxPushInstance: () => getInboxPushInstance,
   getJobInstance: () => getJobInstance,
   getOrderInstance: () => getOrderInstance,
   getProductsInstance: () => getProductsInstance,
@@ -13890,6 +13960,13 @@ async function getVoiceInstance() {
   }
   return _voiceInstance;
 }
+async function getInboxPushInstance() {
+  if (!_inboxPushInstance) {
+    const creds = await getCredentials();
+    _inboxPushInstance = new InboxPushApiService(BASE_URLS.API, creds.apiKey, creds.agentId);
+  }
+  return _inboxPushInstance;
+}
 async function getChannelsSendInstance() {
   if (!_channelsSendInstance) {
     const creds = await getCredentials();
@@ -13921,7 +13998,7 @@ function clearAllInstances() {
   _channelsSendInstance = null;
   _directoryInstance = null;
 }
-var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _channelsSendInstance, _directoryInstance, _deviceInstance;
+var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _channelsSendInstance, _directoryInstance, _deviceInstance, _inboxPushInstance;
 var init_lazy_instances = __esm({
   "src/api/lazy-instances.ts"() {
     "use strict";
@@ -13941,6 +14018,7 @@ var init_lazy_instances = __esm({
     init_developer_api_service();
     init_voice_api_service();
     init_channels_send_api_service();
+    init_inbox_push_api_service();
     init_directory_api_service();
     _userInstance = null;
     _dataInstance = null;
@@ -13972,6 +14050,8 @@ var init_lazy_instances = __esm({
     __name(getDeviceInstance, "getDeviceInstance");
     __name(getDeveloperInstance, "getDeveloperInstance");
     __name(getVoiceInstance, "getVoiceInstance");
+    _inboxPushInstance = null;
+    __name(getInboxPushInstance, "getInboxPushInstance");
     __name(getChannelsSendInstance, "getChannelsSendInstance");
     __name(getDirectoryInstance, "getDirectoryInstance");
     __name(clearAllInstances, "clearAllInstances");
@@ -16939,6 +17019,29 @@ var AgentHandler = class {
   async pushAgentConfig(apiKey, agentId, manifest) {
     const result = {};
     const agent = getPrimitivesByKind(manifest, PrimitiveKind.AGENT)[0];
+    if (agent?.routingDescription !== void 0) {
+      writeProgress("\n\u{1F9ED} Pushing routing description...");
+      try {
+        const success2 = await this.pushDescription({
+          apiKey,
+          agentId
+        }, agent.routingDescription);
+        result.description = {
+          success: success2
+        };
+        if (success2) {
+          writeSuccess(agent.routingDescription ? "  \u2705 Routing description pushed" : "  \u2705 Routing description cleared");
+        } else {
+          console.error("  \u274C Failed to push routing description");
+        }
+      } catch (error) {
+        if (AuthenticationError.isAuthenticationError(error)) throw error;
+        console.error(`  \u274C Failed to push routing description: ${error.message}`);
+        result.description = {
+          success: false
+        };
+      }
+    }
     const persona = agent?.persona;
     if (hasPersonaTextContent(persona)) {
       writeProgress("\n\u{1F319} Pushing persona...");
@@ -17163,6 +17266,13 @@ var AgentHandler = class {
     });
     return result.success;
   }
+  async pushDescription(ctx, description) {
+    const agentApi = new AgentApi(BASE_URLS.API, ctx.apiKey);
+    const result = await agentApi.updateAgent(ctx.agentId, {
+      description
+    });
+    return result.success;
+  }
   async pushPersona(ctx, persona) {
     const personaApi = new PersonaApi(BASE_URLS.API, ctx.apiKey, ctx.agentId);
     const result = await personaApi.createVersion(persona);
@@ -20723,6 +20833,14 @@ var DEFAULT_BLOCK_CIDRS = [
   "fe80::/10",
   "fc00::/7"
 ];
+var HOSTNAME_NON_OVERRIDABLE_CIDRS = [
+  "127.0.0.0/8",
+  "169.254.0.0/16",
+  "0.0.0.0/8",
+  "::1/128",
+  "fe80::/10",
+  "fd00:ec2::254/128"
+];
 function ipv4ToInt(ip) {
   const parts = ip.split(".").map(Number);
   if (parts.length !== 4 || parts.some((n) => Number.isNaN(n) || n < 0 || n > 255)) {
@@ -20824,24 +20942,50 @@ function ipInCidr(ip, cidrs) {
 }
 __name(ipInCidr, "ipInCidr");
 __name4(ipInCidr, "ipInCidr");
+function normalizeHostname(hostname) {
+  return stripBrackets(hostname.trim()).toLowerCase().replace(/\.$/, "");
+}
+__name(normalizeHostname, "normalizeHostname");
+__name4(normalizeHostname, "normalizeHostname");
+function parseAllowedHostname(value) {
+  const hostname = normalizeHostname(value);
+  if (!hostname || net.isIP(hostname) || /[\s*/:\\?#]/.test(hostname)) {
+    throw new Error(`Invalid sandbox egress hostname allowlist entry: ${JSON.stringify(value)}. Use an exact hostname without a wildcard, URL, port, or IP literal.`);
+  }
+  return hostname;
+}
+__name(parseAllowedHostname, "parseAllowedHostname");
+__name4(parseAllowedHostname, "parseAllowedHostname");
 function compile2(opts) {
   return {
     blockCidrs: DEFAULT_BLOCK_CIDRS.map(parseCidr),
     allowCidrs: (opts.extraAllowedCidrs ?? []).map(parseCidr),
+    allowHostnames: new Set((opts.extraAllowedHostnames ?? []).map(parseAllowedHostname)),
+    hostnameNonOverridableCidrs: HOSTNAME_NON_OVERRIDABLE_CIDRS.map(parseCidr),
     mode: opts.mode,
     onEvent: opts.onSecurityEvent
   };
 }
 __name(compile2, "compile");
 __name4(compile2, "compile");
-function checkAddress(address, guard) {
-  if (ipInCidr(address, guard.allowCidrs)) return null;
+function isAllowedHostname(hostname, guard) {
+  return !net.isIP(hostname) && guard.allowHostnames.has(normalizeHostname(hostname));
+}
+__name(isAllowedHostname, "isAllowedHostname");
+__name4(isAllowedHostname, "isAllowedHostname");
+function checkAddress(address, guard, allowedByHostname = false) {
+  const v4 = ipv4MappedFromIpv6(address);
+  if (ipInCidr(address, guard.allowCidrs) || v4 !== null && ipInCidr(v4, guard.allowCidrs)) return null;
+  if (allowedByHostname) {
+    if (ipInCidr(address, guard.hostnameNonOverridableCidrs) || v4 !== null && ipInCidr(v4, guard.hostnameNonOverridableCidrs)) {
+      return `address ${address} is protected from sandbox hostname allowances`;
+    }
+    return null;
+  }
   if (ipInCidr(address, guard.blockCidrs)) {
     return `address ${address} is in the sandbox egress block list`;
   }
-  const v4 = ipv4MappedFromIpv6(address);
   if (v4) {
-    if (ipInCidr(v4, guard.allowCidrs)) return null;
     if (ipInCidr(v4, guard.blockCidrs)) {
       return `address ${address} (IPv4-mapped: ${v4}) is in the sandbox egress block list`;
     }
@@ -20866,8 +21010,9 @@ async function resolveAndCheck(hostname, guard) {
   } catch {
     return null;
   }
+  const allowedByHostname = isAllowedHostname(hostname, guard);
   for (const { address } of addresses) {
-    const reason = checkAddress(address, guard);
+    const reason = checkAddress(address, guard, allowedByHostname);
     if (reason) return {
       reason,
       address
@@ -20978,8 +21123,9 @@ function buildBlockingLookup(guard, target) {
     }, (err, addresses) => {
       if (err) return cb(err);
       const list = addresses;
+      const allowedByHostname = isAllowedHostname(hostname, guard);
       for (const { address } of list) {
-        const reason = checkAddress(address, guard);
+        const reason = checkAddress(address, guard, allowedByHostname);
         if (reason) {
           emit(guard, target, reason, address);
           if (guard.mode === "enforce") {
@@ -21275,6 +21421,7 @@ function createBaseSandboxContext(opts) {
   const egressOpts = {
     mode: egressMode,
     extraAllowedCidrs: opts.egressExtraAllowedCidrs,
+    extraAllowedHostnames: opts.egressExtraAllowedHostnames,
     onSecurityEvent: onSecurityEvent ? (evt) => onSecurityEvent(evt) : void 0
   };
   const wrappedModuleCache = /* @__PURE__ */ new Map();
@@ -21338,6 +21485,13 @@ function resolveExtraAllowedCidrs() {
 }
 __name(resolveExtraAllowedCidrs, "resolveExtraAllowedCidrs");
 __name4(resolveExtraAllowedCidrs, "resolveExtraAllowedCidrs");
+function resolveExtraAllowedHostnames() {
+  const csv = process.env.LUA_ALLOWED_EGRESS_HOSTNAMES;
+  if (!csv) return [];
+  return csv.split(",").map((s) => s.trim()).filter(Boolean);
+}
+__name(resolveExtraAllowedHostnames, "resolveExtraAllowedHostnames");
+__name4(resolveExtraAllowedHostnames, "resolveExtraAllowedHostnames");
 function wrapBundleAsCjsModule(source) {
   return "(function(module, exports, require) {\n" + source + "\n})(module, module.exports, require);";
 }
@@ -21571,6 +21725,12 @@ function resolveExtraAllowedCidrs2() {
   return csv.split(",").map((s) => s.trim()).filter(Boolean);
 }
 __name(resolveExtraAllowedCidrs2, "resolveExtraAllowedCidrs");
+function resolveExtraAllowedHostnames2() {
+  const csv = process.env.LUA_ALLOWED_EGRESS_HOSTNAMES;
+  if (!csv) return [];
+  return csv.split(",").map((s) => s.trim()).filter(Boolean);
+}
+__name(resolveExtraAllowedHostnames2, "resolveExtraAllowedHostnames");
 function defaultSecurityEventLogger(evt) {
   console.warn("[sandbox]", JSON.stringify(evt));
 }
@@ -21759,6 +21919,7 @@ function createSandbox(options) {
     requireMode: resolveRequireMode(),
     egressMode: resolveEgressMode(),
     egressExtraAllowedCidrs: resolveExtraAllowedCidrs2(),
+    egressExtraAllowedHostnames: resolveExtraAllowedHostnames2(),
     onSecurityEvent: defaultSecurityEventLogger
   });
 }