lua-cli 3.25.0 → 3.27.0

package/dist/api-exports.d.ts

@@ -51,6 +51,18 @@ declare interface AgentInvocationInput {
     threadId?: string;
     /** Channel identifier, defaults to `'agent-invocation'`. */
     channel?: string;
+    /**
+     * T12.2.4 — retry-stable per-run identity for the `occurrence` outcome
+     * dedupe mode (jobExecution ledger's `occurrenceId ?? executionId`). Only
+     * honored server-side on internally-authenticated turns.
+     */
+    occurrenceId?: string;
+    /**
+     * T12.2.4 — retry-stable event identity for the `event` outcome dedupe mode
+     * (event execution ledger's stable eventId — runtime T5.5's stamp). Only
+     * honored server-side on internally-authenticated turns.
+     */
+    eventId?: string;
     /** Free-form request tag persisted on the stored Message record (e.g. a UUID
      *  or external trace id for correlation). Not a user identifier. Omitted
      *  by default. */
@@ -70,8 +82,23 @@ declare interface AgentInvocationInput {
      * the original BAC-107 spec; wired through as part of PRO-186.
      */
     webhookPayload?: unknown;
-    /** Per-call timeout in ms. Absent ⇒ the client default (120s). Set by scheduled agent jobs
-     *  to 180s so the cloud tier cuts off at the same point the desktop's local runner does. */
+    /**
+     * Per-call timeout in ms. Absent ⇒ the client default (120s).
+     *
+     * Honoured on both invocation paths: in-process it becomes the loopback
+     * axios timeout, and out-of-process the sandbox runner derives its own abort
+     * deadline from it plus a hop margin (BAC-413 — it previously used a flat
+     * 125s, silently capping anything larger).
+     *
+     * The effective upper bound is the calling site's own budget, not this
+     * field: VM-executed sites (tool / job / webhook / pre- and post-processor)
+     * are walled at 180s, and the runner clamps to the wall that remains minus
+     * recovery headroom — past that the pool's SIGTERM watchdog ends the whole
+     * execution, so a larger value buys nothing. Scheduled agent jobs
+     * invoke lua-core directly, never entering the VM, and pass
+     * `normalizeLuaJobExecutionTimeoutSeconds(timeout) * 1000` — 300s by
+     * default, 600s max (`job-timeout.constants.ts`).
+     */
     timeoutMs?: number;
     /** Per-request model override ("provider/model" code). Unknown codes fall back per
      *  approved-models policy server-side. */
@@ -824,6 +851,13 @@ export declare const Channels: ChannelsApi;
  *   subject: 'Your order',
  *   html: '<p>Thanks for your order!</p>',
  * });
+ *
+ * // Post into a Teams group chat the agent is already part of
+ * await Channels.send({
+ *   channel: 'teams',
+ *   to: { conversationId: '19:9495c339...@thread.v2' },
+ *   text: 'Sample LOT-4471 is missing origin and cupping score.',
+ * });
  * ```
  */
 export declare interface ChannelsApi {
@@ -831,6 +865,11 @@ export declare interface ChannelsApi {
      * Send a text message on any supported channel.
      * Returns `ChannelSendOutput` — check `persisted` if memory durability matters.
      *
+     * Address a person with `userId` (any channel), `phoneNumber` (whatsapp/sms)
+     * or `email`. Address a shared conversation with `conversationId` (teams
+     * only) — everyone in it receives the message, and because there is no single
+     * recipient the send returns `persisted: false`.
+     *
      * @example
      * ```typescript
      * const result = await Channels.send({
@@ -930,6 +969,8 @@ export declare interface ChannelSendOptions {
  */
 export declare interface ChannelSendOutput {
     delivered: boolean;
+    /** False for conversation-scoped sends: a shared conversation has no single
+     * user to attribute the message to, so nothing is written to agent memory. */
     persisted: boolean;
     /**
      * True when the send was deferred to the WhatsApp message-request queue
@@ -948,11 +989,15 @@ export declare interface ChannelSendOutput {
 
 /** Recipient — exactly one of the fields must be set. userId works on every
  * channel (resolved via the user's channel history); raw identifiers only on
- * cold-start-capable channels (whatsapp/sms → phoneNumber, email → email). */
+ * cold-start-capable channels (whatsapp/sms → phoneNumber, email → email).
+ * `conversationId` addresses a shared conversation rather than a person —
+ * everyone in it receives the message. Teams only, and warm-only: the agent
+ * must already be part of that conversation. */
 export declare interface ChannelSendTarget {
     userId?: string;
     phoneNumber?: string;
     email?: string;
+    conversationId?: string;
 }
 
 /**
@@ -1028,6 +1073,17 @@ export declare interface ChatHistoryMessage {
      * to render a "Voice call" divider in the thread.
      */
     source?: 'voice' | 'chat';
+    /** Concrete model that served this assistant turn, persisted in content metadata. */
+    model?: string;
+    /** True when the turn reached that model through the Auto selector. */
+    autoModelRequested?: boolean;
+    author?: {
+        userId: string;
+    };
+    agent?: {
+        agentId: string;
+        name?: string;
+    };
     /**
      * Permanent recording for a voice-note turn (Lua Desktop). Populated by the
      * admin threads history endpoint from the row's `content.metadata.audio` — a
@@ -1885,6 +1941,90 @@ declare interface InboxPushReceipt {
     reason?: string;
 }
 
+/** HTTP methods the passthrough relay accepts. */
+declare const INTEGRATION_PASSTHROUGH_METHODS: readonly ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD"];
+
+export declare type IntegrationPassthroughMethod = (typeof INTEGRATION_PASSTHROUGH_METHODS)[number];
+
+/**
+ * One raw provider API call, relative to the provider's API base URL
+ * (e.g. `repos/{owner}/{repo}/pulls/42/files` against GitHub).
+ */
+export declare interface IntegrationPassthroughRequest {
+    /** HTTP method of the provider call. */
+    method: IntegrationPassthroughMethod;
+    /** Provider path after the provider's base URL. A leading `/` is tolerated. */
+    path: string;
+    /** Query-string parameters (pagination etc.). */
+    query?: Record<string, string | number | boolean>;
+    /**
+     * Request body. Objects/arrays are sent as JSON; a string is sent verbatim
+     * (set a Content-Type header for non-JSON payloads).
+     */
+    data?: unknown;
+    /**
+     * Extra request headers forwarded to the provider (e.g.
+     * `{ Accept: 'application/vnd.github.diff' }`). `Authorization` is managed
+     * server-side and cannot be overridden.
+     */
+    headers?: Record<string, string>;
+}
+
+/**
+ * The raw provider response. Provider error statuses (401/403/404/…) are
+ * relayed faithfully in `status` with the provider's own body in `data` —
+ * they are NOT converted into thrown errors.
+ */
+export declare interface IntegrationPassthroughResponse {
+    /** Provider HTTP status code. */
+    status: number;
+    /** Provider response headers (lower-cased names). */
+    headers: Record<string, string>;
+    /**
+     * Provider response body: parsed JSON when the response is JSON, the raw
+     * string otherwise (e.g. a `text/plain` unified diff round-trips intact).
+     */
+    data: unknown;
+}
+
+export declare const Integrations: IntegrationsApi;
+
+/**
+ * Integrations API — raw provider API access through the agent's connected
+ * integrations (Unified.to passthrough). Proxied server-side: your code never
+ * sees provider credentials or the workspace Unified.to key.
+ */
+export declare interface IntegrationsApi {
+    /**
+     * Call the provider's raw API through the agent's own bound connection for
+     * `integrationType`. Request headers are forwarded (e.g.
+     * `Accept: application/vnd.github.diff`), query params are supported, and
+     * JSON bodies POST through. The response envelope relays the provider's
+     * status/headers faithfully — a provider 403 (missing OAuth scope) shows up
+     * in `status`, not as a thrown error. `data` is parsed JSON when the
+     * provider responded with JSON, the raw string otherwise (unified diffs
+     * round-trip intact).
+     *
+     * @example
+     * ```typescript
+     * // Read a PR diff (non-JSON response comes back as a string)
+     * const diff = await Integrations.passthrough('github', {
+     *   method: 'GET',
+     *   path: 'repos/acme/app/pulls/42',
+     *   headers: { Accept: 'application/vnd.github.diff' },
+     * });
+     *
+     * // Approve the PR (JSON body POST)
+     * await Integrations.passthrough('github', {
+     *   method: 'POST',
+     *   path: 'repos/acme/app/pulls/42/reviews',
+     *   data: { event: 'APPROVE' },
+     * });
+     * ```
+     */
+    passthrough(integrationType: string, request: IntegrationPassthroughRequest): Promise<IntegrationPassthroughResponse>;
+}
+
 /**
  * Job with versions array
  * Matches JobDto and job.schema.ts

package/dist/api-exports.js

@@ -365,6 +365,9 @@ function resolveRequireToolApproval(rules) {
 function buildDefaultPersona(agentName) {
   return DEFAULT_PERSONA_GUIDE.replace(AGENT_NAME_TOKEN, () => agentName || "My Agent");
 }
+function buildPersonalSpaceStartingPersona(agentName) {
+  return PERSONAL_SPACE_STARTING_PERSONA.replace(new RegExp(AGENT_NAME_TOKEN.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "g"), () => agentName || "Your assistant");
+}
 function resolveLuaJobTimeoutSeconds(timeout) {
   const resolved = timeout ?? LUA_JOB_DEFAULT_TIMEOUT_SECONDS;
   if (!Number.isInteger(resolved)) {
@@ -381,7 +384,7 @@ function normalizeLuaJobExecutionTimeoutSeconds(timeout) {
   }
   return Math.min(Math.max(timeout, LUA_JOB_MIN_TIMEOUT_SECONDS), LUA_JOB_MAX_TIMEOUT_SECONDS);
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -761,6 +764,40 @@ Feel free to add, remove, or rename sections. Your persona can be a single parag
 `;
     __name(buildDefaultPersona, "buildDefaultPersona");
     __name2(buildDefaultPersona, "buildDefaultPersona");
+    PERSONAL_SPACE_STARTING_PERSONA = `# ${AGENT_NAME_TOKEN}
+
+You are ${AGENT_NAME_TOKEN}, the assistant for whoever is chatting with you here. Your job is simple: help them get things done, and get better at it every day.
+
+## You're just getting started
+
+This workspace is new. What you already know about the person lives in your memory \u2014 the "Known about this user" notes are verified facts, so use them like you've known them all along; never say you don't know something that's written there. Beyond that, don't pretend. Pay attention instead: how they write, what they ask for, what they're working on. When something matters and you're not sure, ask. One good question beats a wrong guess.
+
+## You have real tools
+
+You can do a lot more than talk. Use your tools when they help, and be straight about what worked and what didn't. The more you learn, the more you can take off their plate without being asked.
+
+## How you sound
+
+Like a sharp, warm human who's on their side. Plain words. Short sentences when short works. React like a person would: if something's great, say so; if something's off, say that too. No corporate filler, no fake enthusiasm.
+
+## What you hold yourself to
+
+- Never make up facts about the person, and never claim you did something you didn't.
+- What you learn about them serves them. Nothing else.
+- If you can't do something, say so and offer what you can do.
+
+## Where you come from
+
+You live on Lua, the platform this workspace runs on. Lua gives people AI agents that do real work for them, and it lives at heylua.ai. It was founded by Lorcan (CEO) and Stefan (CTO).
+
+If someone asks about Lua itself, have fun with it. It's your hometown, so show them around like a proud local: keep the facts straight, keep the delivery playful and a little whimsical. For anything you don't know (pricing, plans, roadmap), point them to heylua.ai instead of guessing.
+
+## Keep this persona alive
+
+This text is who you are for this person. As you learn them, their name, their work, what they care about, update it so tomorrow's you starts smarter than today's. Keep it about who they are and who you are for them.
+`;
+    __name(buildPersonalSpaceStartingPersona, "buildPersonalSpaceStartingPersona");
+    __name2(buildPersonalSpaceStartingPersona, "buildPersonalSpaceStartingPersona");
     VoiceNameSchema = z.string().regex(/^[a-zA-Z0-9_-]+$/, "Voice name must contain only alphanumeric characters, underscores, or hyphens").min(1).max(64);
     PluginProviderSchema = z.enum([
       "deepgram",
@@ -2435,6 +2472,7 @@ var init_files = __esm({
       "preprocessors",
       "postprocessors",
       "mcpServers",
+      "template",
       "skill"
     ];
     __name(yamlKeySorter, "yamlKeySorter");
@@ -5246,6 +5284,43 @@ var init_ai_api_service = __esm({
   }
 });
 
+// src/api/integrations.api.service.ts
+var IntegrationsApiService;
+var init_integrations_api_service = __esm({
+  "src/api/integrations.api.service.ts"() {
+    "use strict";
+    init_http_client();
+    IntegrationsApiService = class extends HttpClient {
+      static {
+        __name(this, "IntegrationsApiService");
+      }
+      apiKey;
+      agentId;
+      constructor(baseUrl, apiKey, agentId) {
+        super(baseUrl), this.apiKey = apiKey, this.agentId = agentId;
+      }
+      async passthrough(integrationType, request) {
+        return this.httpPost(`/developer/unifiedto/connections/${encodeURIComponent(this.agentId)}/passthrough/${encodeURIComponent(integrationType)}`, request, {
+          Authorization: `Bearer ${this.apiKey}`
+        });
+      }
+      /**
+      * Sandbox-facing wrapper: returns the raw provider envelope
+      * `{ status, headers, data }` (provider error statuses relayed faithfully in
+      * `status`), and throws only on route-level failures (no connection,
+      * passthrough disabled, rate limited, transport error).
+      */
+      async passthroughForSandbox(integrationType, request) {
+        const result = await this.passthrough(integrationType, request);
+        if (!result.success || !result.data) {
+          throw new Error(result.error?.message || `Integration passthrough failed for '${integrationType}'`);
+        }
+        return result.data;
+      }
+    };
+  }
+});
+
 // src/api/agents.api.service.ts
 var AgentsApiService;
 var init_agents_api_service = __esm({
@@ -5992,6 +6067,7 @@ __export(lazy_instances_exports, {
   getDeviceInstance: () => getDeviceInstance,
   getDirectoryInstance: () => getDirectoryInstance,
   getInboxPushInstance: () => getInboxPushInstance,
+  getIntegrationsInstance: () => getIntegrationsInstance,
   getJobInstance: () => getJobInstance,
   getOrderInstance: () => getOrderInstance,
   getProductsInstance: () => getProductsInstance,
@@ -6056,6 +6132,13 @@ async function getAiInstance() {
   }
   return _aiInstance;
 }
+async function getIntegrationsInstance() {
+  if (!_integrationsInstance) {
+    const creds = await getCredentials();
+    _integrationsInstance = new IntegrationsApiService(BASE_URLS.API, creds.apiKey, creds.agentId);
+  }
+  return _integrationsInstance;
+}
 async function getAgentsInstance() {
   if (!_agentsInstance) {
     const creds = await getCredentials();
@@ -6137,7 +6220,7 @@ function clearAllInstances() {
   _channelsSendInstance = null;
   _directoryInstance = null;
 }
-var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _channelsSendInstance, _directoryInstance, _deviceInstance, _inboxPushInstance;
+var _userInstance, _dataInstance, _productsInstance, _basketsInstance, _orderInstance, _webhookInstance, _jobInstance, _aiInstance, _integrationsInstance, _agentsInstance, _whatsAppTemplatesInstance, _cdnInstance, _developerInstance, _voiceInstance, _channelsSendInstance, _directoryInstance, _deviceInstance, _inboxPushInstance;
 var init_lazy_instances = __esm({
   "src/api/lazy-instances.ts"() {
     "use strict";
@@ -6151,6 +6234,7 @@ var init_lazy_instances = __esm({
     init_webhook_api_service();
     init_job_api_service();
     init_ai_api_service();
+    init_integrations_api_service();
     init_agents_api_service();
     init_whatsapp_templates_api_service();
     init_cdn_api_service();
@@ -6167,6 +6251,7 @@ var init_lazy_instances = __esm({
     _webhookInstance = null;
     _jobInstance = null;
     _aiInstance = null;
+    _integrationsInstance = null;
     _agentsInstance = null;
     _whatsAppTemplatesInstance = null;
     _cdnInstance = null;
@@ -6182,6 +6267,7 @@ var init_lazy_instances = __esm({
     __name(getWebhookInstance, "getWebhookInstance");
     __name(getJobInstance, "getJobInstance");
     __name(getAiInstance, "getAiInstance");
+    __name(getIntegrationsInstance, "getIntegrationsInstance");
     __name(getAgentsInstance, "getAgentsInstance");
     __name(getWhatsAppTemplatesInstance, "getWhatsAppTemplatesInstance");
     __name(getCdnInstance, "getCdnInstance");
@@ -7445,6 +7531,13 @@ var AI = {
     return ai.generateForSandbox(promptOrOptions, content);
   }
 };
+var Integrations = {
+  async passthrough(integrationType, request) {
+    const { getIntegrationsInstance: getIntegrationsInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+    const integrations = await getIntegrationsInstance2();
+    return integrations.passthroughForSandbox(integrationType, request);
+  }
+};
 var Agents = {
   async invoke(targetAgentId, promptOrInput) {
     const { getAgentsInstance: getAgentsInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
@@ -7643,6 +7736,7 @@ export {
   Channels,
   Data,
   DataEntryInstance,
+  Integrations,
   JobInstance,
   Jobs,
   Lua,