lua-cli 3.24.0 → 3.26.0

package/dist/index.js

@@ -1146,6 +1146,9 @@ function isDesktopFileCommandName(value) {
 function isDesktopFileSessionId(value) {
   return typeof value === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
 }
+function isImplicitModelSelectionSource(source) {
+  return source !== void 0 && IMPLICIT_MODEL_SELECTION_SOURCES.includes(source);
+}
 function resolveRequireToolApproval(rules) {
   const raw = rules?.requireToolApproval ?? rules?.requireApproval;
   if (raw === void 0 || raw === null) return void 0;
@@ -1157,6 +1160,9 @@ function resolveRequireToolApproval(rules) {
 function buildDefaultPersona(agentName) {
   return DEFAULT_PERSONA_GUIDE.replace(AGENT_NAME_TOKEN, () => agentName || "My Agent");
 }
+function buildPersonalSpaceStartingPersona(agentName) {
+  return PERSONAL_SPACE_STARTING_PERSONA.replace(new RegExp(AGENT_NAME_TOKEN.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "g"), () => agentName || "Your assistant");
+}
 function resolveLuaJobTimeoutSeconds(timeout) {
   const resolved = timeout ?? LUA_JOB_DEFAULT_TIMEOUT_SECONDS;
   if (!Number.isInteger(resolved)) {
@@ -1173,7 +1179,7 @@ function normalizeLuaJobExecutionTimeoutSeconds(timeout) {
   }
   return Math.min(Math.max(timeout, LUA_JOB_MIN_TIMEOUT_SECONDS), LUA_JOB_MAX_TIMEOUT_SECONDS);
 }
-var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
+var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1487,6 +1493,12 @@ var init_dist = __esm({
       "high",
       "max"
     ];
+    IMPLICIT_MODEL_SELECTION_SOURCES = [
+      "workspace-default",
+      "platform-default"
+    ];
+    __name(isImplicitModelSelectionSource, "isImplicitModelSelectionSource");
+    __name2(isImplicitModelSelectionSource, "isImplicitModelSelectionSource");
     __name(resolveRequireToolApproval, "resolveRequireToolApproval");
     __name2(resolveRequireToolApproval, "resolveRequireToolApproval");
     AGENT_NAME_TOKEN = "[Your Agent Name]";
@@ -1538,6 +1550,40 @@ Feel free to add, remove, or rename sections. Your persona can be a single parag
 `;
     __name(buildDefaultPersona, "buildDefaultPersona");
     __name2(buildDefaultPersona, "buildDefaultPersona");
+    PERSONAL_SPACE_STARTING_PERSONA = `# ${AGENT_NAME_TOKEN}
+
+You are ${AGENT_NAME_TOKEN}, the assistant for whoever is chatting with you here. Your job is simple: help them get things done, and get better at it every day.
+
+## You're just getting started
+
+This workspace is new. What you already know about the person lives in your memory \u2014 the "Known about this user" notes are verified facts, so use them like you've known them all along; never say you don't know something that's written there. Beyond that, don't pretend. Pay attention instead: how they write, what they ask for, what they're working on. When something matters and you're not sure, ask. One good question beats a wrong guess.
+
+## You have real tools
+
+You can do a lot more than talk. Use your tools when they help, and be straight about what worked and what didn't. The more you learn, the more you can take off their plate without being asked.
+
+## How you sound
+
+Like a sharp, warm human who's on their side. Plain words. Short sentences when short works. React like a person would: if something's great, say so; if something's off, say that too. No corporate filler, no fake enthusiasm.
+
+## What you hold yourself to
+
+- Never make up facts about the person, and never claim you did something you didn't.
+- What you learn about them serves them. Nothing else.
+- If you can't do something, say so and offer what you can do.
+
+## Where you come from
+
+You live on Lua, the platform this workspace runs on. Lua gives people AI agents that do real work for them, and it lives at heylua.ai. It was founded by Lorcan (CEO) and Stefan (CTO).
+
+If someone asks about Lua itself, have fun with it. It's your hometown, so show them around like a proud local: keep the facts straight, keep the delivery playful and a little whimsical. For anything you don't know (pricing, plans, roadmap), point them to heylua.ai instead of guessing.
+
+## Keep this persona alive
+
+This text is who you are for this person. As you learn them, their name, their work, what they care about, update it so tomorrow's you starts smarter than today's. Keep it about who they are and who you are for them.
+`;
+    __name(buildPersonalSpaceStartingPersona, "buildPersonalSpaceStartingPersona");
+    __name2(buildPersonalSpaceStartingPersona, "buildPersonalSpaceStartingPersona");
     AGENT_LOG_SOURCES = [
       "skill",
       "job",
@@ -3289,6 +3335,7 @@ var init_files = __esm({
       "preprocessors",
       "postprocessors",
       "mcpServers",
+      "template",
       "skill"
     ];
     __name(yamlKeySorter, "yamlKeySorter");
@@ -7588,7 +7635,8 @@ var init_agent_plugin = __esm({
         const isDefaultExport = classDecl.isDefaultExport();
         const exportName = isDefaultExport ? "default" : className;
         const name = readStringMember(classDecl, "name") ?? deriveNameFromClassName(className);
-        const baseDescription = readStringMember(classDecl, "description") ?? "";
+        const routingDescription = readStringMember(classDecl, "description");
+        const baseDescription = routingDescription ?? "";
         const personaHit = findClassMember(classDecl, "persona", "property");
         let persona = "";
         if (personaHit && Node13.isPropertyDeclaration(personaHit.node)) {
@@ -7639,6 +7687,7 @@ var init_agent_plugin = __esm({
           metadata: {
             pattern: "class-definition",
             persona,
+            routingDescription,
             model,
             hasModelResolver,
             modelSettings,
@@ -7671,6 +7720,7 @@ var init_agent_plugin = __esm({
           "voice",
           "text"
         ]) ?? "";
+        const routingDescription = extractStringProperty(config, "description");
         const { model, hasModelResolver } = this.extractModelInfo(config);
         const modelSettings = this.extractModelSettings(config);
         const batching = this.extractBatchingInfo(config);
@@ -7688,6 +7738,7 @@ var init_agent_plugin = __esm({
           metadata: {
             pattern,
             persona,
+            routingDescription,
             model,
             hasModelResolver,
             modelSettings,
@@ -7873,6 +7924,7 @@ var init_agent_plugin = __esm({
         return {
           ...this.baseManifestFields(compiled),
           persona: agentMeta.persona,
+          routingDescription: agentMeta.routingDescription,
           model: agentMeta.model,
           hasModelResolver: agentMeta.hasModelResolver || void 0,
           modelSettings: agentMeta.modelSettings,
@@ -13093,6 +13145,43 @@ var init_ai_api_service = __esm({
   }
 });
 
+// src/api/integrations.api.service.ts
+var IntegrationsApiService;
+var init_integrations_api_service = __esm({
+  "src/api/integrations.api.service.ts"() {
+    "use strict";
+    init_http_client();
+    IntegrationsApiService = class extends HttpClient {
+      static {
+        __name(this, "IntegrationsApiService");
+      }
+      apiKey;
+      agentId;
+      constructor(baseUrl, apiKey, agentId) {
+        super(baseUrl), this.apiKey = apiKey, this.agentId = agentId;
+      }
+      async passthrough(integrationType, request2) {
+        return this.httpPost(`/developer/unifiedto/connections/${encodeURIComponent(this.agentId)}/passthrough/${encodeURIComponent(integrationType)}`, request2, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /**
+      * Sandbox-facing wrapper: returns the raw provider envelope
+      * `{ status, headers, data }` (provider error statuses relayed faithfully in
+      * `status`), and throws only on route-level failures (no connection,
+      * passthrough disabled, rate limited, transport error).
+      */
+      async passthroughForSandbox(integrationType, request2) {
+        const result = await this.passthrough(integrationType, request2);
+        if (!result.success || !result.data) {
+          throw new Error(result.error?.message || `Integration passthrough failed for '${integrationType}'`);
+        }
+        return result.data;
+      }
+    };
+  }
+});
+
 // src/api/agents.api.service.ts
 var AgentsApiService;
 var init_agents_api_service = __esm({
@@ -13678,6 +13767,31 @@ var init_channels_send_api_service = __esm({
   }
 });
 
+// src/api/inbox-push.api.service.ts
+var InboxPushApiService;
+var init_inbox_push_api_service = __esm({
+  "src/api/inbox-push.api.service.ts"() {
+    "use strict";
+    init_http_client();
+    InboxPushApiService = class extends HttpClient {
+      static {
+        __name(this, "InboxPushApiService");
+      }
+      apiKey;
+      agentId;
+      constructor(baseUrl, apiKey, agentId) {
+        super(baseUrl), this.apiKey = apiKey, this.agentId = agentId;
+      }
+      /** POST /developer/agents/:agentId/inbox/push */
+      async push(input) {
+        return this.httpPost(`/developer/agents/${this.agentId}/inbox/push`, input, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+    };
+  }
+});
+
 // src/api/directory.api.service.ts
 var DirectoryApiService;
 var init_directory_api_service = __esm({
@@ -13813,6 +13927,8 @@ __export(lazy_instances_exports, {
   getDeveloperInstance: () => getDeveloperInstance,
   getDeviceInstance: () => getDeviceInstance,
   getDirectoryInstance: () => getDirectoryInstance,
+  getInboxPushInstance: () => getInboxPushInstance,
+  getIntegrationsInstance: () => getIntegrationsInstance,
   getJobInstance: () => getJobInstance,
   getOrderInstance: () => getOrderInstance,
   getProductsInstance: () => getProductsInstance,
@@ -13877,6 +13993,13 @@ async function getAiInstance() {
   }
   return _aiInstance;
 }
+async function getIntegrationsInstance() {
+  if (!_integrationsInstance) {
+    const creds = await getCredentials();
+    _integrationsInstance = new IntegrationsApiService(BASE_URLS.API, creds.apiKey, creds.agentId);
+  }
+  return _integrationsInstance;
+}
 async function getAgentsInstance() {
   if (!_agentsInstance) {
     const creds = await getCredentials();
@@ -13920,6 +14043,13 @@ async function getVoiceInstance() {
   }
   return _voiceInstance;
 }
+async function getInboxPushInstance() {
+  if (!_inboxPushInstance) {
+    const creds = await getCredentials();
+    _inboxPushInstance = new InboxPushApiService(BASE_URLS.API, creds.apiKey, creds.agentId);
+  }
+  return _inboxPushInstance;
+}
 async function getChannelsSendInstance() {
   if (!_channelsSendInstance) {
     const creds = await getCredentials();
@@ -13951,7 +14081,7 @@ function clearAllInstances() {
   _channelsSendInstance = null;
   _directoryInstance = null;
 }
-var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _channelsSendInstance, _directoryInstance, _deviceInstance;
+var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _integrationsInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _channelsSendInstance, _directoryInstance, _deviceInstance, _inboxPushInstance;
 var init_lazy_instances = __esm({
   "src/api/lazy-instances.ts"() {
     "use strict";
@@ -13965,12 +14095,14 @@ var init_lazy_instances = __esm({
     init_webhook_api_service();
     init_job_api_service();
     init_ai_api_service();
+    init_integrations_api_service();
     init_agents_api_service();
     init_whatsapp_templates_api_service();
     init_cdn_api_service();
     init_developer_api_service();
     init_voice_api_service();
     init_channels_send_api_service();
+    init_inbox_push_api_service();
     init_directory_api_service();
     _userInstance = null;
     _dataInstance = null;
@@ -13980,6 +14112,7 @@ var init_lazy_instances = __esm({
     _webhookInstance = null;
     _jobInstance = null;
     _aiInstance = null;
+    _integrationsInstance = null;
     _agentsInstance = null;
     _whatsAppTemplatesInstance = null;
     _cdnInstance = null;
@@ -13995,6 +14128,7 @@ var init_lazy_instances = __esm({
     __name(getWebhookInstance, "getWebhookInstance");
     __name(getJobInstance, "getJobInstance");
     __name(getAiInstance, "getAiInstance");
+    __name(getIntegrationsInstance, "getIntegrationsInstance");
     __name(getAgentsInstance, "getAgentsInstance");
     __name(getWhatsAppTemplatesInstance, "getWhatsAppTemplatesInstance");
     __name(getCdnInstance, "getCdnInstance");
@@ -14002,6 +14136,8 @@ var init_lazy_instances = __esm({
     __name(getDeviceInstance, "getDeviceInstance");
     __name(getDeveloperInstance, "getDeveloperInstance");
     __name(getVoiceInstance, "getVoiceInstance");
+    _inboxPushInstance = null;
+    __name(getInboxPushInstance, "getInboxPushInstance");
     __name(getChannelsSendInstance, "getChannelsSendInstance");
     __name(getDirectoryInstance, "getDirectoryInstance");
     __name(clearAllInstances, "clearAllInstances");
@@ -16969,6 +17105,29 @@ var AgentHandler = class {
   async pushAgentConfig(apiKey, agentId, manifest) {
     const result = {};
     const agent = getPrimitivesByKind(manifest, PrimitiveKind.AGENT)[0];
+    if (agent?.routingDescription !== void 0) {
+      writeProgress("\n\u{1F9ED} Pushing routing description...");
+      try {
+        const success2 = await this.pushDescription({
+          apiKey,
+          agentId
+        }, agent.routingDescription);
+        result.description = {
+          success: success2
+        };
+        if (success2) {
+          writeSuccess(agent.routingDescription ? "  \u2705 Routing description pushed" : "  \u2705 Routing description cleared");
+        } else {
+          console.error("  \u274C Failed to push routing description");
+        }
+      } catch (error) {
+        if (AuthenticationError.isAuthenticationError(error)) throw error;
+        console.error(`  \u274C Failed to push routing description: ${error.message}`);
+        result.description = {
+          success: false
+        };
+      }
+    }
     const persona = agent?.persona;
     if (hasPersonaTextContent(persona)) {
       writeProgress("\n\u{1F319} Pushing persona...");
@@ -17193,6 +17352,13 @@ var AgentHandler = class {
     });
     return result.success;
   }
+  async pushDescription(ctx, description) {
+    const agentApi = new AgentApi(BASE_URLS.API, ctx.apiKey);
+    const result = await agentApi.updateAgent(ctx.agentId, {
+      description
+    });
+    return result.success;
+  }
   async pushPersona(ctx, persona) {
     const personaApi = new PersonaApi(BASE_URLS.API, ctx.apiKey, ctx.agentId);
     const result = await personaApi.createVersion(persona);
@@ -21770,6 +21936,16 @@ function createSandbox(options) {
         return agents.invokeForSandbox(targetAgentId, promptOrInput);
       }, "invoke")
     },
+    // Unified.to raw provider passthrough (PRO-209). Proxied via the same
+    // bearer-auth developer route the api-exports `Integrations` namespace
+    // uses, so `lua test` matches production behavior.
+    Integrations: {
+      passthrough: /* @__PURE__ */ __name(async (integrationType, request2) => {
+        const { getIntegrationsInstance: getIntegrationsInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+        const integrations = await getIntegrationsInstance2();
+        return integrations.passthroughForSandbox(integrationType, request2);
+      }, "passthrough")
+    },
     // Outbound voice dispatch (BAC-212). `lua test` proxies via the same
     // bearer-auth developer endpoint the lua-cli `Voice.call` namespace uses
     // — keeps the surface byte-equivalent to the lua-core production VM
@@ -22712,6 +22888,7 @@ var ALIAS_MAP = {
   "template.action": {
     canonical: [
       "create",
+      "draft",
       "publish",
       "view",
       "versions",
@@ -22723,6 +22900,7 @@ var ALIAS_MAP = {
     ],
     aliases: lowerKeys({
       new: "create",
+      compose: "draft",
       publish_version: "publish",
       submit: "publish",
       show: "view",
@@ -37855,6 +38033,13 @@ var TemplateApiService = class {
       body: JSON.stringify(data)
     });
   }
+  /** T11.3 — draft composer (the clean `/templates/*` route home). */
+  async composeDraft(templateId, data) {
+    return this._fetch(`/templates/${templateId}/versions/draft`, {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
   async listTemplates() {
     return this._fetch("/marketplace/templates");
   }
@@ -37911,12 +38096,14 @@ var TemplateApiService = class {
 // src/commands/template.ts
 init_command_utils();
 init_analytics();
+init_files();
 function showTemplateUsage() {
   console.log("\nUsage:");
   console.log("  lua marketplace template                       Interactive mode");
   console.log("  lua marketplace template <action> [options]    Non-interactive mode");
   console.log("\nActions:");
   console.log("  create     --name <n> --display-name <n> [--description <text>] [--visibility public|private]");
+  console.log("  draft      --template-id <id> [--source-version <n>] [--force]   Compose/merge the template: section of lua.skill.yaml");
   console.log("  publish    --template-id <id> [--source-version <n>] [--changelog <text>] [--env-contract KEY=desc,...]");
   console.log("  view       --template-id <id> [--version <n>] [--json]");
   console.log("  versions   --template-id <id> [--json]");
@@ -37944,6 +38131,10 @@ async function templateCommand(action, options = {}) {
             name: "Create a template from this agent",
             value: "create"
           },
+          {
+            name: "Draft the template: section from this agent",
+            value: "draft"
+          },
           {
             name: "Publish a new template version",
             value: "publish"
@@ -37993,8 +38184,11 @@ async function templateCommand(action, options = {}) {
     case "create":
       await templateCreateAction(templateApi, config, options);
       break;
+    case "draft":
+      await templateDraftAction(templateApi, options);
+      break;
     case "publish":
-      await templatePublishAction(templateApi, options);
+      await templatePublishAction(templateApi, config, options);
       break;
     case "view":
       await templateViewAction(templateApi, options);
@@ -38240,18 +38434,125 @@ async function templateCreateAction(templateApi, config, options) {
   });
 }
 __name(templateCreateAction, "templateCreateAction");
-async function templatePublishAction(templateApi, options) {
+async function templateDraftAction(templateApi, options) {
+  const config = readYamlConfig();
+  if (!config) throw new Error("No lua.skill.yaml found in this directory.");
+  const templateId = await resolveTemplateId(templateApi, options, "Which template would you like to draft for?");
+  const sourceAgentVersion = options.sourceVersion ? Number.parseInt(options.sourceVersion, 10) : void 0;
+  if (options.sourceVersion && (!Number.isFinite(sourceAgentVersion) || sourceAgentVersion <= 0)) {
+    throw new Error(`Invalid --source-version "${options.sourceVersion}": must be a positive integer.`);
+  }
+  writeProgress("\u{1F504} Composing template draft...");
+  const result = await templateApi.composeDraft(templateId, {
+    force: options.force === true,
+    sourceAgentVersion
+  });
+  config.template = {
+    connections: result.draft.connections,
+    ...result.draft.personaTemplate ? {
+      personaTemplate: result.draft.personaTemplate
+    } : {},
+    triggerPresets: result.draft.triggerPresets,
+    paramsMeta: result.draft.paramsMeta
+  };
+  writeYamlConfig(config);
+  if (options.json) {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  writeSuccess("\u2705 template: section written to lua.skill.yaml");
+  for (const [section2, diff] of Object.entries(result.diff)) {
+    const annotations = Object.entries(diff.annotations ?? {});
+    console.log(`  ${section2}: +${diff.added.length} added (${diff.added.join(", ") || "\u2014"}), ${diff.kept.length} kept`);
+    for (const [key, note] of annotations) {
+      console.log(`    \u26A0 ${key}: ${note}`);
+    }
+  }
+  writeHintBlock({
+    headline: "Review the drafted sections, then publish:",
+    lines: [
+      {
+        label: "Publish:",
+        command: `lua marketplace template publish --template-id ${templateId}`
+      }
+    ],
+    when: "success"
+  });
+}
+__name(templateDraftAction, "templateDraftAction");
+var TEMPLATE_SECTION_KEYS = [
+  "connections",
+  "personaTemplate",
+  "triggerPresets",
+  "paramsMeta"
+];
+function sectionKeys(section2, value) {
+  if (value === void 0 || value === null) return [];
+  if (section2 === "connections") return (value ?? []).map((entry) => entry.key);
+  if (section2 === "personaTemplate") {
+    const vars = value.vars ?? [];
+    return vars.map((v) => v.name);
+  }
+  return Object.keys(value);
+}
+__name(sectionKeys, "sectionKeys");
+async function confirmTemplateSectionConsequences(templateApi, templateId, local, force) {
+  const versions = await templateApi.getVersions(templateId).catch(() => []);
+  const latest = [
+    ...versions
+  ].sort((a, b) => b.version - a.version)[0];
+  if (!latest) return;
+  const consequences = [];
+  const consequenceCopy = {
+    connections: "installed agents keep their binding; new installs will not be prompted",
+    personaTemplate: "new installs get no persona template; installed personas are untouched",
+    triggerPresets: "new installs fall back to default arming recommendations",
+    paramsMeta: "the deploy form falls back to derived display names and string typing"
+  };
+  for (const section2 of TEMPLATE_SECTION_KEYS) {
+    const serverKeys = sectionKeys(section2, latest[section2]);
+    const localKeys = sectionKeys(section2, local[section2]);
+    const removed = serverKeys.filter((key) => !localKeys.includes(key));
+    if (!removed.length) continue;
+    const clearing = localKeys.length === 0;
+    consequences.push(`  ${section2}: ${clearing ? "CLEARING the section" : `removing ${removed.join(", ")}`} \u2014 ${consequenceCopy[section2]}`);
+  }
+  if (!consequences.length) return;
+  console.log("\n\u26A0 This publish clears or narrows authored template sections:");
+  for (const line of consequences) console.log(line);
+  const isTTY = Boolean(process.stdin.isTTY && process.stdout.isTTY);
+  if (force || isCiModeEnabled() || !isTTY) {
+    writeInfo("Proceeding headless (diff printed above).");
+    return;
+  }
+  const confirmed = await confirmAction("\nProceed with this publish?");
+  if (!confirmed) throw new Error("Publish aborted.");
+}
+__name(confirmTemplateSectionConsequences, "confirmTemplateSectionConsequences");
+async function templatePublishAction(templateApi, config, options) {
   const templateId = await resolveTemplateId(templateApi, options, "Which template would you like to publish a version for?");
   const sourceAgentVersion = options.sourceVersion ? Number.parseInt(options.sourceVersion, 10) : void 0;
   if (options.sourceVersion && (!Number.isFinite(sourceAgentVersion) || sourceAgentVersion <= 0)) {
     throw new Error(`Invalid --source-version "${options.sourceVersion}": must be a positive integer.`);
   }
   const envContract = parseEnvContract(options.envContract);
+  const templateSection = readYamlConfig()?.template ?? config.template;
+  let sectionBody = {};
+  if (templateSection !== void 0) {
+    await confirmTemplateSectionConsequences(templateApi, templateId, templateSection, options.force === true || options.yes === true);
+    sectionBody = {
+      connections: templateSection.connections ?? [],
+      triggerPresets: templateSection.triggerPresets ?? {},
+      personaTemplate: templateSection.personaTemplate ?? null,
+      paramsMeta: templateSection.paramsMeta ?? {}
+    };
+  }
   writeProgress("\u{1F504} Publishing template version...");
   const version = await templateApi.createVersion(templateId, {
     sourceAgentVersion,
     changelog: options.changelog || void 0,
-    envContract
+    envContract,
+    ...sectionBody
   });
   if (options.json) {
     console.log(JSON.stringify(version, null, 2));
@@ -38347,12 +38648,14 @@ async function templateInstallAction(templateApi, config, options) {
     console.error("\n\u274C Use --force to confirm installation");
     throw new Error("This action requires --force to confirm");
   }
+  if (options.skipEnvCheck) {
+    writeInfo("\u26A0\uFE0F  --skip-env-check is deprecated: the env-contract check is server-enforced; use `lua env` to satisfy the contract.");
+  }
   writeProgress("\u{1F504} Installing template...");
   const install = await templateApi.install(templateId, agentId, {
     version,
     envValues,
-    allowCreatorUpdates: options.allowCreatorUpdates,
-    skipEnvCheck: options.skipEnvCheck
+    allowCreatorUpdates: options.allowCreatorUpdates
   });
   if (options.json) {
     console.log(JSON.stringify(install, null, 2));
@@ -38459,6 +38762,9 @@ Apply v${versionObj.version} to ${targets.length} agent(s)?`);
       throw new Error("This action requires --force to confirm (non-interactive mode)");
     }
   }
+  if (options.skipEnvCheck) {
+    writeInfo("\u26A0\uFE0F  --skip-env-check is deprecated: the env-contract check is server-enforced; use `lua env` to satisfy the contract.");
+  }
   writeProgress("\u{1F504} Starting apply run...");
   const { runId } = await templateApi.apply(templateId, {
     version: versionObj.version,
@@ -46280,7 +46586,7 @@ function setupMarketplaceCommands(program2) {
   program2.command("marketplace [noun] [action]").description("\u{1F6CD}\uFE0F  Browse, install, and manage marketplace skills and agent templates").option("--skill-name <name>", "Skill name (for skill list/update/uninstall)").option("--marketplace-id <id>", "Marketplace skill ID").option("--version-id <id>", "Version ID (for skill publish/install)").option("--env-vars-json <json>", "JSON string with env var metadata (for skill publish)").option("--query <text>", "Search query (for skill search)").option("--page <n>", "Page number (for skill search)").option("--limit <n>", "Results per page (for skill search)").option("--name <name>", "Template name, an internal identifier (for template create)").option("--description <text>", "Description (for template create)").option("--template-id <id>", "Template ID").option("--source-version <n>", "Agent version to freeze into this template version (default: active) (for template publish)").option("--env-contract <pair>", "KEY=description env contract entry, repeatable; use KEY?=description for optional (for template publish)", (val, previous) => [
     ...previous,
     val
-  ], []).option("--version <n>", "Template version (for template view/install/apply)").option("--allow-creator-updates", "Allow the template creator to push future updates onto this install").option("--skip-env-check", "Skip env-contract validation (for template install/apply)").option("--agents <ids>", "Comma-separated target agent IDs (for template apply)").option("--file <path>", "Path to a file with one target agent ID per line (for template apply)").option("--all-installed", "Target every agent that already has this template installed (for template apply)").option("--no-wait", "Print the apply runId immediately instead of polling for completion (for template apply)").option("--display-name <name>", "Display name (for skill list/edit, template create)").option("--visibility <visibility>", "Who can see and install it: public or private (for skill list, template create)").option("--changelog <text>", "Changelog for this version (for skill/template publish)").option("--env-vars <pairs>", "Comma-separated key=value pairs (for skill/template install/update)").option("--json", "Output as JSON").option("--force", "Skip confirmation prompts").addHelpText("after", `
+  ], []).option("--version <n>", "Template version (for template view/install/apply)").option("--allow-creator-updates", "Allow the template creator to push future updates onto this install").option("--skip-env-check", "Skip env-contract validation (for template install/apply)").option("--agents <ids>", "Comma-separated target agent IDs (for template apply)").option("--file <path>", "Path to a file with one target agent ID per line (for template apply)").option("--all-installed", "Target every agent that already has this template installed (for template apply)").option("--no-wait", "Print the apply runId immediately instead of polling for completion (for template apply)").option("--display-name <name>", "Display name (for skill list/edit, template create)").option("--visibility <visibility>", "Who can see and install it: public or private (for skill list, template create)").option("--changelog <text>", "Changelog for this version (for skill/template publish)").option("--env-vars <pairs>", "Comma-separated key=value pairs (for skill/template install/update)").option("--json", "Output as JSON").option("--force", "Skip confirmation prompts").option("--yes", "Auto-confirm ONLY the template-publish consequence prompt (section clear/narrow); unlike --force it skips no other confirmation").addHelpText("after", `
 Arguments:
   noun                   Optional: 'skill' or 'template' (prompts if not provided)
   action                 Optional: specific action for non-interactive mode