lua-cli 3.29.0 → 3.29.1

package/dist/api-exports.d.ts

@@ -1840,6 +1840,7 @@ declare abstract class HttpClient {
      * cannot be recovered after an ambiguous network or server failure.
      */
     protected httpPostOnce<T>(url: string, data?: any, headers?: Record<string, string>): Promise<ApiResponse<T>>;
+    protected httpPostCoreDrainRetry<T>(url: string, data?: any, headers?: Record<string, string>): Promise<ApiResponse<T>>;
     /**
      * Performs an HTTP PUT request
      * @param url - The relative URL path to request (will be appended to baseUrl)

package/dist/api-exports.js

@@ -370,6 +370,64 @@ function buildDefaultPersona(agentName) {
 function buildPersonalSpaceStartingPersona(agentName) {
   return PERSONAL_SPACE_STARTING_PERSONA.replace(new RegExp(AGENT_NAME_TOKEN.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "g"), () => agentName || "Your assistant");
 }
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function isCoreDrainingErrorResponse(value) {
+  if (!isRecord(value) || !isRecord(value.error)) return false;
+  return value.error.code === CORE_DRAINING_CODE && typeof value.error.message === "string" && value.error.retryable === true;
+}
+function coreDrainingRetryDelayMs(retryAfter, nowMs = Date.now()) {
+  if (retryAfter === null) return CORE_DRAINING_DEFAULT_RETRY_MS;
+  const seconds = /^\d+$/.test(retryAfter.trim()) ? Number(retryAfter) : Number.NaN;
+  const delayMs = Number.isFinite(seconds) ? seconds * 1e3 : Date.parse(retryAfter) - nowMs;
+  if (!Number.isFinite(delayMs)) return CORE_DRAINING_DEFAULT_RETRY_MS;
+  return Math.min(Math.max(0, delayMs), CORE_DRAINING_MAX_RETRY_MS);
+}
+async function readCoreDrainingRetryDelayMs(response) {
+  if (response.status !== 503) return null;
+  try {
+    const payload = await response.clone().json();
+    if (!isCoreDrainingErrorResponse(payload)) return null;
+  } catch {
+    return null;
+  }
+  return coreDrainingRetryDelayMs(response.headers.get("Retry-After"));
+}
+function waitForCoreDrain(delayMs, signal) {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted) {
+      reject(signal.reason ?? new DOMException("Aborted", "AbortError"));
+      return;
+    }
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }, delayMs);
+    function onAbort() {
+      clearTimeout(timer);
+      reject(signal?.reason ?? new DOMException("Aborted", "AbortError"));
+    }
+    __name(onAbort, "onAbort");
+    __name2(onAbort, "onAbort");
+    signal?.addEventListener("abort", onAbort, {
+      once: true
+    });
+  });
+}
+async function fetchWithCoreDrainRetry(run, options = {}) {
+  const first = await run();
+  const delayMs = await readCoreDrainingRetryDelayMs(first);
+  if (delayMs === null) return first;
+  options.onRetry?.({
+    attempt: 1,
+    maxAttempts: 2,
+    delayMs
+  });
+  await first.body?.cancel();
+  await waitForCoreDrain(delayMs, options.signal);
+  return run();
+}
 function resolveLuaJobTimeoutSeconds(timeout) {
   const resolved = timeout ?? LUA_JOB_DEFAULT_TIMEOUT_SECONDS;
   if (!Number.isInteger(resolved)) {
@@ -478,7 +536,7 @@ function isKnownProfile(profiles, profileId) {
 function hasCapability(profiles, profileId, required) {
   return capabilitiesFor(profiles, profileId).includes(required);
 }
-var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema;
+var __defProp2, __name2, CHANNEL_SEND_CHANNELS, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, IdSchema, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -892,6 +950,21 @@ This text is who you are for this person. As you learn them, their name, their w
 `;
     __name(buildPersonalSpaceStartingPersona, "buildPersonalSpaceStartingPersona");
     __name2(buildPersonalSpaceStartingPersona, "buildPersonalSpaceStartingPersona");
+    CORE_DRAINING_CODE = "CORE_DRAINING";
+    CORE_DRAINING_DEFAULT_RETRY_MS = 1e3;
+    CORE_DRAINING_MAX_RETRY_MS = 5e3;
+    __name(isRecord, "isRecord");
+    __name2(isRecord, "isRecord");
+    __name(isCoreDrainingErrorResponse, "isCoreDrainingErrorResponse");
+    __name2(isCoreDrainingErrorResponse, "isCoreDrainingErrorResponse");
+    __name(coreDrainingRetryDelayMs, "coreDrainingRetryDelayMs");
+    __name2(coreDrainingRetryDelayMs, "coreDrainingRetryDelayMs");
+    __name(readCoreDrainingRetryDelayMs, "readCoreDrainingRetryDelayMs");
+    __name2(readCoreDrainingRetryDelayMs, "readCoreDrainingRetryDelayMs");
+    __name(waitForCoreDrain, "waitForCoreDrain");
+    __name2(waitForCoreDrain, "waitForCoreDrain");
+    __name(fetchWithCoreDrainRetry, "fetchWithCoreDrainRetry");
+    __name2(fetchWithCoreDrainRetry, "fetchWithCoreDrainRetry");
     VoiceNameSchema = z.string().regex(/^[a-zA-Z0-9_-]+$/, "Voice name must contain only alphanumeric characters, underscores, or hyphens").min(1).max(64);
     PluginProviderSchema = z.enum([
       "deepgram",
@@ -1617,20 +1690,40 @@ var init_lua_fetch = __esm({
 });
 
 // src/services/firebase-session.ts
+import { z as z4 } from "zod";
 function requireFirebaseWebApiKey() {
   if (!FIREBASE_WEB_API_KEY) {
     throw new Error("Firebase sign-in is not configured for this CLI build.");
   }
   return FIREBASE_WEB_API_KEY;
 }
+function uidFromFirebaseIdToken(idToken) {
+  const segments = idToken.split(".");
+  if (segments.length !== 3 || !segments[1]) throw new Error(INVALID_FIREBASE_SESSION);
+  let payload;
+  try {
+    payload = JSON.parse(Buffer.from(segments[1], "base64url").toString("utf8"));
+  } catch {
+    throw new Error(INVALID_FIREBASE_SESSION);
+  }
+  const parsed = firebaseIdTokenPayloadSchema.safeParse(payload);
+  if (parsed.success) return parsed.data.sub;
+  throw new Error(INVALID_FIREBASE_SESSION);
+}
 function parseFirebaseSession(json, now = Date.now()) {
-  const idToken = json.idToken ?? json.id_token;
-  const refreshToken = json.refreshToken ?? json.refresh_token;
-  const expiresIn = Number(json.expiresIn ?? json.expires_in);
-  const uid = json.localId ?? json.user_id;
-  if (typeof idToken !== "string" || idToken.length === 0 || typeof refreshToken !== "string" || refreshToken.length === 0 || typeof uid !== "string" || uid.length === 0 || !Number.isFinite(expiresIn) || expiresIn <= 0) {
-    throw new Error("Sign-in failed because Firebase returned an invalid session.");
+  const customTokenResponse = customTokenResponseSchema.safeParse(json);
+  if (customTokenResponse.success) {
+    const { idToken: idToken2, refreshToken: refreshToken2, expiresIn: expiresIn2, localId } = customTokenResponse.data;
+    return {
+      idToken: idToken2,
+      refreshToken: refreshToken2,
+      expiresAt: now + expiresIn2 * 1e3,
+      uid: localId ?? uidFromFirebaseIdToken(idToken2)
+    };
   }
+  const refreshResponse = refreshResponseSchema.safeParse(json);
+  if (!refreshResponse.success) throw new Error(INVALID_FIREBASE_SESSION);
+  const { id_token: idToken, refresh_token: refreshToken, expires_in: expiresIn, user_id: uid } = refreshResponse.data;
   return {
     idToken,
     refreshToken,
@@ -1687,14 +1780,31 @@ async function refreshFirebaseSession(session) {
   if (refreshed.uid !== session.uid) throw new Error("Firebase session refresh returned a different identity.");
   return refreshed;
 }
-var FIREBASE_REFRESH_URL, FIREBASE_REQUEST_TIMEOUT_MS;
+var FIREBASE_REFRESH_URL, FIREBASE_REQUEST_TIMEOUT_MS, INVALID_FIREBASE_SESSION, customTokenResponseSchema, refreshResponseSchema, firebaseIdTokenPayloadSchema;
 var init_firebase_session = __esm({
   "src/services/firebase-session.ts"() {
     "use strict";
     init_constants();
     FIREBASE_REFRESH_URL = "https://securetoken.googleapis.com/v1/token";
     FIREBASE_REQUEST_TIMEOUT_MS = 15e3;
+    INVALID_FIREBASE_SESSION = "Sign-in failed because Firebase returned an invalid session.";
+    customTokenResponseSchema = z4.object({
+      idToken: z4.string().min(1),
+      refreshToken: z4.string().min(1),
+      expiresIn: z4.coerce.number().positive().finite(),
+      localId: z4.string().min(1).optional()
+    });
+    refreshResponseSchema = z4.object({
+      id_token: z4.string().min(1),
+      refresh_token: z4.string().min(1),
+      expires_in: z4.coerce.number().positive().finite(),
+      user_id: z4.string().min(1)
+    });
+    firebaseIdTokenPayloadSchema = z4.object({
+      sub: z4.string().min(1)
+    });
     __name(requireFirebaseWebApiKey, "requireFirebaseWebApiKey");
+    __name(uidFromFirebaseIdToken, "uidFromFirebaseIdToken");
     __name(parseFirebaseSession, "parseFirebaseSession");
     __name(parseFirebaseError, "parseFirebaseError");
     __name(fetchFirebase, "fetchFirebase");
@@ -1706,7 +1816,7 @@ var init_firebase_session = __esm({
 import { createHash, randomUUID } from "crypto";
 import { mkdir, open, readFile, rename, unlink } from "fs/promises";
 import { join as join3 } from "path";
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 function environmentKey(environment) {
   return createHash("sha256").update(`${environment.apiUrl}
 ${environment.authUrl}
@@ -1720,15 +1830,15 @@ var init_firebase_session_store = __esm({
   "src/services/firebase-session-store.ts"() {
     "use strict";
     init_constants();
-    storedFirebaseSessionSchema = z4.object({
-      version: z4.literal(1),
-      kind: z4.literal("firebase-session"),
-      generation: z4.string().min(1),
-      refreshToken: z4.string().min(1),
-      firebaseUid: z4.string().min(1),
-      apiUrl: z4.string().url(),
-      authUrl: z4.string().url(),
-      firebaseWebApiKey: z4.string().min(1)
+    storedFirebaseSessionSchema = z5.object({
+      version: z5.literal(1),
+      kind: z5.literal("firebase-session"),
+      generation: z5.string().min(1),
+      refreshToken: z5.string().min(1),
+      firebaseUid: z5.string().min(1),
+      apiUrl: z5.string().url(),
+      authUrl: z5.string().url(),
+      firebaseWebApiKey: z5.string().min(1)
     });
     currentFirebaseSessionEnvironment = /* @__PURE__ */ __name(() => ({
       apiUrl: BASE_URLS.API,
@@ -1967,12 +2077,25 @@ import { randomUUID as randomUUID2 } from "crypto";
 function parseRetryAfter(raw) {
   if (!raw) return void 0;
   const seconds = Number.parseInt(raw, 10);
-  return Number.isFinite(seconds) && seconds > 0 ? seconds : void 0;
+  return Number.isFinite(seconds) && seconds >= 0 ? seconds : void 0;
+}
+function isCoreDrainApiError(error) {
+  if (!error || error.statusCode !== 503) return false;
+  return isCoreDrainingErrorResponse({
+    error: error.error
+  });
+}
+function coreDrainApiRetryDelayMs(error) {
+  const retryAfterSeconds = error?.retryAfterSeconds;
+  if (retryAfterSeconds === void 0) return CORE_DRAINING_DEFAULT_RETRY_MS;
+  const delayMs = retryAfterSeconds * 1e3;
+  return Math.min(Math.max(0, delayMs), CORE_DRAINING_MAX_RETRY_MS);
 }
 var HttpClient;
 var init_http_client = __esm({
   "src/api/http.client.ts"() {
     "use strict";
+    init_dist();
     init_auth_error();
     init_lua_fetch();
     init_request_credential();
@@ -2191,6 +2314,12 @@ Check that your Lua login has access to this agent or organization.`);
           headers
         }, 0);
       }
+      async httpPostCoreDrainRetry(url, data, headers) {
+        const first = await this.httpPostOnce(url, data, headers);
+        if (!isCoreDrainApiError(first.error)) return first;
+        await new Promise((resolve) => setTimeout(resolve, coreDrainApiRetryDelayMs(first.error)));
+        return this.httpPostOnce(url, data, headers);
+      }
       /**
       * Performs an HTTP PUT request
       * @param url - The relative URL path to request (will be appended to baseUrl)
@@ -2236,6 +2365,8 @@ Check that your Lua login has access to this agent or organization.`);
       }
     };
     __name(parseRetryAfter, "parseRetryAfter");
+    __name(isCoreDrainApiError, "isCoreDrainApiError");
+    __name(coreDrainApiRetryDelayMs, "coreDrainApiRetryDelayMs");
   }
 });
 
@@ -6010,7 +6141,7 @@ var init_agents_api_service = __esm({
         });
         if (body.identifier) query.set("identifier", body.identifier);
         const chatBody = this.toChatGenerateBody(body);
-        return this.httpPost(`/chat/generate/${targetAgentId}?${query.toString()}`, chatBody, {});
+        return this.httpPostCoreDrainRetry(`/chat/generate/${targetAgentId}?${query.toString()}`, chatBody, {});
       }
       /**
       * Sandbox overload: mirrors the `AI.generate` pattern where the simplified