lua-cli 3.29.0 → 3.30.0

package/dist/index.js

@@ -686,6 +686,64 @@ function buildDefaultPersona(agentName) {
 function buildPersonalSpaceStartingPersona(agentName) {
   return PERSONAL_SPACE_STARTING_PERSONA.replace(new RegExp(AGENT_NAME_TOKEN.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "g"), () => agentName || "Your assistant");
 }
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function isCoreDrainingErrorResponse(value) {
+  if (!isRecord(value) || !isRecord(value.error)) return false;
+  return value.error.code === CORE_DRAINING_CODE && typeof value.error.message === "string" && value.error.retryable === true;
+}
+function coreDrainingRetryDelayMs(retryAfter, nowMs = Date.now()) {
+  if (retryAfter === null) return CORE_DRAINING_DEFAULT_RETRY_MS;
+  const seconds = /^\d+$/.test(retryAfter.trim()) ? Number(retryAfter) : Number.NaN;
+  const delayMs = Number.isFinite(seconds) ? seconds * 1e3 : Date.parse(retryAfter) - nowMs;
+  if (!Number.isFinite(delayMs)) return CORE_DRAINING_DEFAULT_RETRY_MS;
+  return Math.min(Math.max(0, delayMs), CORE_DRAINING_MAX_RETRY_MS);
+}
+async function readCoreDrainingRetryDelayMs(response) {
+  if (response.status !== 503) return null;
+  try {
+    const payload = await response.clone().json();
+    if (!isCoreDrainingErrorResponse(payload)) return null;
+  } catch {
+    return null;
+  }
+  return coreDrainingRetryDelayMs(response.headers.get("Retry-After"));
+}
+function waitForCoreDrain(delayMs, signal) {
+  return new Promise((resolve7, reject) => {
+    if (signal?.aborted) {
+      reject(signal.reason ?? new DOMException("Aborted", "AbortError"));
+      return;
+    }
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve7();
+    }, delayMs);
+    function onAbort() {
+      clearTimeout(timer);
+      reject(signal?.reason ?? new DOMException("Aborted", "AbortError"));
+    }
+    __name(onAbort, "onAbort");
+    __name2(onAbort, "onAbort");
+    signal?.addEventListener("abort", onAbort, {
+      once: true
+    });
+  });
+}
+async function fetchWithCoreDrainRetry(run, options = {}) {
+  const first = await run();
+  const delayMs = await readCoreDrainingRetryDelayMs(first);
+  if (delayMs === null) return first;
+  options.onRetry?.({
+    attempt: 1,
+    maxAttempts: 2,
+    delayMs
+  });
+  await first.body?.cancel();
+  await waitForCoreDrain(delayMs, options.signal);
+  return run();
+}
 function resolveLuaJobTimeoutSeconds(timeout) {
   const resolved = timeout ?? LUA_JOB_DEFAULT_TIMEOUT_SECONDS;
   if (!Number.isInteger(resolved)) {
@@ -794,7 +852,7 @@ function isKnownProfile(profiles, profileId) {
 function hasCapability(profiles, profileId, required) {
   return capabilitiesFor(profiles, profileId).includes(required);
 }
-var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, TYPED_API_KEY, IdSchema, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema;
+var __defProp2, __name2, REVIEWABLE_ACTION_EXECUTE_TOOL_ALLOWLIST, REVIEWABLE_MCP_SEND_TOOL_SUFFIX, MCP_TOOL_READ_VERB_RE, MCP_DRAFT_CREATE_VERBS, NON_INTERACTIVE_CHANNELS, RICH_PARTS_MESSAGE_ID_PREFIX, SCREENSHOT_MESSAGE_ID_PREFIX, BROWSER_COMMANDS, BROWSER_COMMAND_NAMES, DESKTOP_FILE_COMMANDS, DESKTOP_FILE_COMMAND_SET, REASONING_EFFORT_VALUES, IMPLICIT_MODEL_SELECTION_SOURCES, AGENT_NAME_TOKEN, DEFAULT_PERSONA_GUIDE, PERSONAL_SPACE_STARTING_PERSONA, AGENT_LOG_SOURCES, CORE_DRAINING_CODE, CORE_DRAINING_DEFAULT_RETRY_MS, CORE_DRAINING_MAX_RETRY_MS, VoiceNameSchema, PluginProviderSchema, RealtimeProviderSchema, PluginClassSchema, ModelDescriptorSchema, InferenceModelSchema, PluginModelSchema, RealtimeModelSchema, LuaVoiceModelSchema, TurnDetectionSchema, InterruptionSchema, BuiltinAudioClipSchema, AudioConfigSchema, BackgroundAudioEntrySchema, BackgroundAudioSchema, LuaVoiceConfigInnerSchema, LuaVoiceConfigSchema, LuaVoiceRefSchema, EventType, LUA_JOB_DEFAULT_TIMEOUT_SECONDS, LUA_JOB_MIN_TIMEOUT_SECONDS, LUA_JOB_MAX_TIMEOUT_SECONDS, TEMPLATE_TRIGGER_URL_ENV_PREFIX, SUBJECT_TYPES, SubjectTypeSchema, CREDENTIAL_TYPES, CredentialTypeSchema, DEVICE_OPERATIONS, DeviceOperationSchema, DEVICE_SCOPE_BY_OPERATION, DeviceBindingSchema, TYPED_API_KEY, IdSchema, PrincipalDescriptorSchema, ActorDescriptorSchema, PrincipalOwnerSchema, CredentialLifecycleSchema, GeneralCredentialDescriptorSchema, DeviceCredentialDescriptorSchema, GeneralPrincipalContextSchema, DeviceCredentialPrincipalContextSchema, RawPrincipalContextSchema, PrincipalContextSchema, DeviceCredentialClaimSchema, LUA_CLIENT_HEADER, LUA_CLIENT_APPS, SEMVER_PATTERN, WEB_RELEASE_PATTERN, CLIENT_HEADER_PATTERN, AUTHZ_PROJECTION_VERSION, ProjectedScopeSchema, DisplayRoleSchema, AuthorizationPrincipalSchema, CredentialContextSchema, ProjectionAnomalySchema, ProjectedOrgSchema, ProjectedResourceSchema, CapabilityProfilesSchema, RoleCatalogSchema, EffectiveAuthorizationSchema, ResourcePageSchema;
 var init_dist = __esm({
   "../shared-types/dist/index.mjs"() {
     "use strict";
@@ -1216,6 +1274,21 @@ This text is who you are for this person. As you learn them, their name, their w
       "device-trigger",
       "model-resolver"
     ];
+    CORE_DRAINING_CODE = "CORE_DRAINING";
+    CORE_DRAINING_DEFAULT_RETRY_MS = 1e3;
+    CORE_DRAINING_MAX_RETRY_MS = 5e3;
+    __name(isRecord, "isRecord");
+    __name2(isRecord, "isRecord");
+    __name(isCoreDrainingErrorResponse, "isCoreDrainingErrorResponse");
+    __name2(isCoreDrainingErrorResponse, "isCoreDrainingErrorResponse");
+    __name(coreDrainingRetryDelayMs, "coreDrainingRetryDelayMs");
+    __name2(coreDrainingRetryDelayMs, "coreDrainingRetryDelayMs");
+    __name(readCoreDrainingRetryDelayMs, "readCoreDrainingRetryDelayMs");
+    __name2(readCoreDrainingRetryDelayMs, "readCoreDrainingRetryDelayMs");
+    __name(waitForCoreDrain, "waitForCoreDrain");
+    __name2(waitForCoreDrain, "waitForCoreDrain");
+    __name(fetchWithCoreDrainRetry, "fetchWithCoreDrainRetry");
+    __name2(fetchWithCoreDrainRetry, "fetchWithCoreDrainRetry");
     VoiceNameSchema = z.string().regex(/^[a-zA-Z0-9_-]+$/, "Voice name must contain only alphanumeric characters, underscores, or hyphens").min(1).max(64);
     PluginProviderSchema = z.enum([
       "deepgram",
@@ -1460,6 +1533,26 @@ This text is who you are for this person. As you learn them, their name, their w
       voiceId: z.string().min(1),
       version: z.string().optional()
     });
+    EventType = /* @__PURE__ */ (function(EventType2) {
+      EventType2["AGENT_CREATED"] = "agent.created";
+      EventType2["CHANNEL_ADDED"] = "channel.added";
+      EventType2["MESSAGE_RECEIVED"] = "message.received";
+      EventType2["INQUIRY_CREATED"] = "inquiry.created";
+      EventType2["USER_LOGIN"] = "user.login";
+      EventType2["CREDIT_UPDATED"] = "credit.updated";
+      EventType2["CREDIT_PURCHASED"] = "credit.purchased";
+      EventType2["CREDIT_THRESHOLD_50"] = "credit.threshold.50";
+      EventType2["CREDIT_THRESHOLD_20"] = "credit.threshold.20";
+      EventType2["CREDIT_THRESHOLD_0"] = "credit.threshold.0";
+      EventType2["USER_SIGNUP"] = "user.signup";
+      EventType2["ORG_CREATED"] = "org.created";
+      EventType2["MESSAGE_SENT"] = "message.sent";
+      EventType2["MESSAGE_DELIVERED"] = "message.delivered";
+      EventType2["MESSAGE_READ"] = "message.read";
+      EventType2["MESSAGE_FAILED"] = "message.failed";
+      EventType2["MESSAGE_PLAYED"] = "message.played";
+      return EventType2;
+    })({});
     LUA_JOB_DEFAULT_TIMEOUT_SECONDS = 300;
     LUA_JOB_MIN_TIMEOUT_SECONDS = 1;
     LUA_JOB_MAX_TIMEOUT_SECONDS = 600;
@@ -1809,20 +1902,40 @@ var init_lua_fetch = __esm({
 });
 
 // src/services/firebase-session.ts
+import { z as z4 } from "zod";
 function requireFirebaseWebApiKey() {
   if (!FIREBASE_WEB_API_KEY) {
     throw new Error("Firebase sign-in is not configured for this CLI build.");
   }
   return FIREBASE_WEB_API_KEY;
 }
+function uidFromFirebaseIdToken(idToken) {
+  const segments = idToken.split(".");
+  if (segments.length !== 3 || !segments[1]) throw new Error(INVALID_FIREBASE_SESSION);
+  let payload;
+  try {
+    payload = JSON.parse(Buffer.from(segments[1], "base64url").toString("utf8"));
+  } catch {
+    throw new Error(INVALID_FIREBASE_SESSION);
+  }
+  const parsed = firebaseIdTokenPayloadSchema.safeParse(payload);
+  if (parsed.success) return parsed.data.sub;
+  throw new Error(INVALID_FIREBASE_SESSION);
+}
 function parseFirebaseSession(json, now = Date.now()) {
-  const idToken = json.idToken ?? json.id_token;
-  const refreshToken = json.refreshToken ?? json.refresh_token;
-  const expiresIn = Number(json.expiresIn ?? json.expires_in);
-  const uid = json.localId ?? json.user_id;
-  if (typeof idToken !== "string" || idToken.length === 0 || typeof refreshToken !== "string" || refreshToken.length === 0 || typeof uid !== "string" || uid.length === 0 || !Number.isFinite(expiresIn) || expiresIn <= 0) {
-    throw new Error("Sign-in failed because Firebase returned an invalid session.");
+  const customTokenResponse = customTokenResponseSchema.safeParse(json);
+  if (customTokenResponse.success) {
+    const { idToken: idToken2, refreshToken: refreshToken2, expiresIn: expiresIn2, localId } = customTokenResponse.data;
+    return {
+      idToken: idToken2,
+      refreshToken: refreshToken2,
+      expiresAt: now + expiresIn2 * 1e3,
+      uid: localId ?? uidFromFirebaseIdToken(idToken2)
+    };
   }
+  const refreshResponse = refreshResponseSchema.safeParse(json);
+  if (!refreshResponse.success) throw new Error(INVALID_FIREBASE_SESSION);
+  const { id_token: idToken, refresh_token: refreshToken, expires_in: expiresIn, user_id: uid } = refreshResponse.data;
   return {
     idToken,
     refreshToken,
@@ -1896,7 +2009,7 @@ async function refreshFirebaseSession(session) {
   if (refreshed.uid !== session.uid) throw new Error("Firebase session refresh returned a different identity.");
   return refreshed;
 }
-var FIREBASE_CUSTOM_TOKEN_URL, FIREBASE_REFRESH_URL, FIREBASE_REQUEST_TIMEOUT_MS;
+var FIREBASE_CUSTOM_TOKEN_URL, FIREBASE_REFRESH_URL, FIREBASE_REQUEST_TIMEOUT_MS, INVALID_FIREBASE_SESSION, customTokenResponseSchema, refreshResponseSchema, firebaseIdTokenPayloadSchema;
 var init_firebase_session = __esm({
   "src/services/firebase-session.ts"() {
     "use strict";
@@ -1904,7 +2017,24 @@ var init_firebase_session = __esm({
     FIREBASE_CUSTOM_TOKEN_URL = "https://identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken";
     FIREBASE_REFRESH_URL = "https://securetoken.googleapis.com/v1/token";
     FIREBASE_REQUEST_TIMEOUT_MS = 15e3;
+    INVALID_FIREBASE_SESSION = "Sign-in failed because Firebase returned an invalid session.";
+    customTokenResponseSchema = z4.object({
+      idToken: z4.string().min(1),
+      refreshToken: z4.string().min(1),
+      expiresIn: z4.coerce.number().positive().finite(),
+      localId: z4.string().min(1).optional()
+    });
+    refreshResponseSchema = z4.object({
+      id_token: z4.string().min(1),
+      refresh_token: z4.string().min(1),
+      expires_in: z4.coerce.number().positive().finite(),
+      user_id: z4.string().min(1)
+    });
+    firebaseIdTokenPayloadSchema = z4.object({
+      sub: z4.string().min(1)
+    });
     __name(requireFirebaseWebApiKey, "requireFirebaseWebApiKey");
+    __name(uidFromFirebaseIdToken, "uidFromFirebaseIdToken");
     __name(parseFirebaseSession, "parseFirebaseSession");
     __name(parseFirebaseError, "parseFirebaseError");
     __name(fetchFirebase, "fetchFirebase");
@@ -1917,7 +2047,7 @@ var init_firebase_session = __esm({
 import { createHash, randomUUID } from "crypto";
 import { mkdir, open, readFile, rename, unlink } from "fs/promises";
 import { join as join3 } from "path";
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 function environmentKey(environment) {
   return createHash("sha256").update(`${environment.apiUrl}
 ${environment.authUrl}
@@ -1931,15 +2061,15 @@ var init_firebase_session_store = __esm({
   "src/services/firebase-session-store.ts"() {
     "use strict";
     init_constants();
-    storedFirebaseSessionSchema = z4.object({
-      version: z4.literal(1),
-      kind: z4.literal("firebase-session"),
-      generation: z4.string().min(1),
-      refreshToken: z4.string().min(1),
-      firebaseUid: z4.string().min(1),
-      apiUrl: z4.string().url(),
-      authUrl: z4.string().url(),
-      firebaseWebApiKey: z4.string().min(1)
+    storedFirebaseSessionSchema = z5.object({
+      version: z5.literal(1),
+      kind: z5.literal("firebase-session"),
+      generation: z5.string().min(1),
+      refreshToken: z5.string().min(1),
+      firebaseUid: z5.string().min(1),
+      apiUrl: z5.string().url(),
+      authUrl: z5.string().url(),
+      firebaseWebApiKey: z5.string().min(1)
     });
     currentFirebaseSessionEnvironment = /* @__PURE__ */ __name(() => ({
       apiUrl: BASE_URLS.API,
@@ -2329,12 +2459,25 @@ import { randomUUID as randomUUID3 } from "crypto";
 function parseRetryAfter(raw) {
   if (!raw) return void 0;
   const seconds = Number.parseInt(raw, 10);
-  return Number.isFinite(seconds) && seconds > 0 ? seconds : void 0;
+  return Number.isFinite(seconds) && seconds >= 0 ? seconds : void 0;
+}
+function isCoreDrainApiError(error) {
+  if (!error || error.statusCode !== 503) return false;
+  return isCoreDrainingErrorResponse({
+    error: error.error
+  });
+}
+function coreDrainApiRetryDelayMs(error) {
+  const retryAfterSeconds = error?.retryAfterSeconds;
+  if (retryAfterSeconds === void 0) return CORE_DRAINING_DEFAULT_RETRY_MS;
+  const delayMs = retryAfterSeconds * 1e3;
+  return Math.min(Math.max(0, delayMs), CORE_DRAINING_MAX_RETRY_MS);
 }
 var HttpClient;
 var init_http_client = __esm({
   "src/api/http.client.ts"() {
     "use strict";
+    init_dist();
     init_auth_error();
     init_lua_fetch();
     init_request_credential();
@@ -2553,6 +2696,12 @@ Check that your Lua login has access to this agent or organization.`);
           headers
         }, 0);
       }
+      async httpPostCoreDrainRetry(url, data, headers) {
+        const first = await this.httpPostOnce(url, data, headers);
+        if (!isCoreDrainApiError(first.error)) return first;
+        await new Promise((resolve7) => setTimeout(resolve7, coreDrainApiRetryDelayMs(first.error)));
+        return this.httpPostOnce(url, data, headers);
+      }
       /**
       * Performs an HTTP PUT request
       * @param url - The relative URL path to request (will be appended to baseUrl)
@@ -2598,6 +2747,8 @@ Check that your Lua login has access to this agent or organization.`);
       }
     };
     __name(parseRetryAfter, "parseRetryAfter");
+    __name(isCoreDrainApiError, "isCoreDrainApiError");
+    __name(coreDrainApiRetryDelayMs, "coreDrainApiRetryDelayMs");
   }
 });
 
@@ -5434,7 +5585,7 @@ async function ensureSchemaConverterReady() {
   await loadVendor();
 }
 async function zodToJsonSchema(schemaNode) {
-  const { z: z5, zodToJsonSchema: convertSchema } = await loadVendor();
+  const { z: z6, zodToJsonSchema: convertSchema } = await loadVendor();
   try {
     const sourceFile = schemaNode.getSourceFile();
     const project = sourceFile.getProject();
@@ -5447,7 +5598,7 @@ async function zodToJsonSchema(schemaNode) {
       environment: {
         preset: "NODE",
         extra: {
-          z: z5
+          z: z6
         }
       },
       policy: {
@@ -5495,10 +5646,10 @@ function cleanJsonSchema(schema) {
   return cleanSchema;
 }
 async function zodStringToJsonSchema(zodSchemaCode) {
-  const { z: z5, zodToJsonSchema: convertSchema } = await loadVendor();
+  const { z: z6, zodToJsonSchema: convertSchema } = await loadVendor();
   try {
     const evalFunction = new Function("z", `return ${zodSchemaCode}`);
-    const zodSchema = evalFunction(z5);
+    const zodSchema = evalFunction(z6);
     const jsonSchema = convertSchema(zodSchema, {
       target: "jsonSchema7"
     });
@@ -13988,7 +14139,7 @@ var init_agents_api_service = __esm({
         });
         if (body.identifier) query.set("identifier", body.identifier);
         const chatBody = this.toChatGenerateBody(body);
-        return this.httpPost(`/chat/generate/${targetAgentId}?${query.toString()}`, chatBody, {});
+        return this.httpPostCoreDrainRetry(`/chat/generate/${targetAgentId}?${query.toString()}`, chatBody, {});
       }
       /**
       * Sandbox overload: mirrors the `AI.generate` pattern where the simplified
@@ -14407,11 +14558,22 @@ var init_voice_api_service = __esm({
 });
 
 // src/api/channels-send.api.service.ts
+function deliveryQuery(filter) {
+  const params = new URLSearchParams();
+  if (filter?.userId) params.set("userId", filter.userId);
+  if (filter?.status) params.set("status", filter.status);
+  if (filter?.channel) params.set("channel", filter.channel);
+  if (filter?.since) params.set("since", new Date(filter.since).toISOString());
+  if (filter?.limit !== void 0) params.set("limit", String(filter.limit));
+  const query = params.toString();
+  return query ? `?${query}` : "";
+}
 var ChannelsSendApiService;
 var init_channels_send_api_service = __esm({
   "src/api/channels-send.api.service.ts"() {
     "use strict";
     init_http_client();
+    __name(deliveryQuery, "deliveryQuery");
     ChannelsSendApiService = class extends HttpClient {
       static {
         __name(this, "ChannelsSendApiService");
@@ -14483,6 +14645,33 @@ var init_channels_send_api_service = __esm({
         }
         return result.data;
       }
+      /** GET /developer/agents/:agentId/channels/deliveries/:deliveryId */
+      async getDeliveryStatus(deliveryId) {
+        return this.httpGet(`/developer/agents/${this.agentId}/channels/deliveries/${encodeURIComponent(deliveryId)}`);
+      }
+      /** GET /developer/agents/:agentId/channels/deliveries */
+      async listDeliveries(filter) {
+        return this.httpGet(`/developer/agents/${this.agentId}/channels/deliveries${deliveryQuery(filter)}`);
+      }
+      /** Sandbox helper for a single delivery read. */
+      async getDeliveryStatusForSandbox(deliveryId) {
+        const result = await this.getDeliveryStatus(deliveryId);
+        if (!result.success) {
+          throw new Error(result.error?.message || "Delivery status lookup failed");
+        }
+        if (!result.data) {
+          throw new Error("Delivery status lookup failed: empty response");
+        }
+        return result.data;
+      }
+      /** Sandbox helper for the delivery list read. */
+      async listDeliveriesForSandbox(filter) {
+        const result = await this.listDeliveries(filter);
+        if (!result.success) {
+          throw new Error(result.error?.message || "Delivery list failed");
+        }
+        return result.data ?? [];
+      }
     };
   }
 });
@@ -15699,6 +15888,7 @@ init_auth();
 init_request_credential();
 var MAX_TYPED_CREDENTIAL_ORGS = 100;
 var MAX_TYPED_CREDENTIAL_RESOURCE_PAGES = 500;
+var ORGANIZATION_REQUEST_CONCURRENCY = 10;
 function projectionError(message, reason = "invalid_credentials") {
   return new AuthenticationError(message, reason);
 }
@@ -15761,21 +15951,22 @@ function typedAgent(resource) {
 __name(typedAgent, "typedAgent");
 async function listTypedCredentialOrganizations(credential, authorization) {
   const apiKey = await bearerFor(credential);
-  if (authorization.orgs.length > MAX_TYPED_CREDENTIAL_ORGS) {
+  const firstPartySession = isRequestCredential(credential) && credential.descriptor.kind === "first-party-session";
+  if (!firstPartySession && authorization.orgs.length > MAX_TYPED_CREDENTIAL_ORGS) {
     throw new Error(`Lua CLI can request at most ${MAX_TYPED_CREDENTIAL_ORGS} organizations at once.`);
   }
   const api = new CliCredentialsApi(BASE_URLS.API);
   const organizations = [];
   let resourcePageCount = 0;
-  for (const org of authorization.orgs) {
+  const loadOrganization = /* @__PURE__ */ __name(async (org) => {
     const agents = /* @__PURE__ */ new Map();
     const cursors = /* @__PURE__ */ new Set();
     let cursor;
     do {
-      if (resourcePageCount >= MAX_TYPED_CREDENTIAL_RESOURCE_PAGES) {
+      resourcePageCount += 1;
+      if (resourcePageCount > MAX_TYPED_CREDENTIAL_RESOURCE_PAGES) {
         throw new Error(`Lua CLI can request at most ${MAX_TYPED_CREDENTIAL_RESOURCE_PAGES} resource pages at once.`);
       }
-      resourcePageCount += 1;
       const result = await api.getAuthorizationResourcePage(apiKey, {
         orgId: org.orgId,
         kind: "agent",
@@ -15795,7 +15986,9 @@ async function listTypedCredentialOrganizations(credential, authorization) {
         throw new Error("Lua returned an authorization resource page for the wrong organization.");
       }
       for (const resource of result.data.resources) {
-        if (resource.orgId !== org.orgId) {
+        const belongsToOrganization = resource.orgId === org.orgId;
+        const isOrgLessPlatformAgent = resource.orgId === null && resource.visibility === "platform" && resource.kind === "agent" && resource.discoveredVia === "platform-allowlist";
+        if (!belongsToOrganization && !isOrgLessPlatformAgent) {
           throw new Error("Lua returned an authorization resource for the wrong organization.");
         }
         if (!agents.has(resource.resourceId)) agents.set(resource.resourceId, typedAgent(resource));
@@ -15807,7 +16000,7 @@ async function listTypedCredentialOrganizations(credential, authorization) {
       if (nextCursor) cursors.add(nextCursor);
       cursor = nextCursor;
     } while (cursor);
-    organizations.push({
+    return {
       orgId: org.orgId,
       ...org.name ? {
         name: org.name
@@ -15817,7 +16010,11 @@ async function listTypedCredentialOrganizations(credential, authorization) {
       agents: [
         ...agents.values()
       ]
-    });
+    };
+  }, "loadOrganization");
+  for (let offset = 0; offset < authorization.orgs.length; offset += ORGANIZATION_REQUEST_CONCURRENCY) {
+    const batch = authorization.orgs.slice(offset, offset + ORGANIZATION_REQUEST_CONCURRENCY);
+    organizations.push(...await Promise.all(batch.map(loadOrganization)));
   }
   return organizations;
 }
@@ -22714,7 +22911,17 @@ function createSandbox(options) {
           const channels = await getChannelsSendInstance2();
           return channels.sendEmailForSandbox(input);
         }, "send")
-      }
+      },
+      getStatus: /* @__PURE__ */ __name(async (deliveryId) => {
+        const { getChannelsSendInstance: getChannelsSendInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+        const channels = await getChannelsSendInstance2();
+        return channels.getDeliveryStatusForSandbox(deliveryId);
+      }, "getStatus"),
+      listDeliveries: /* @__PURE__ */ __name(async (filter) => {
+        const { getChannelsSendInstance: getChannelsSendInstance2 } = await Promise.resolve().then(() => (init_lazy_instances(), lazy_instances_exports));
+        const channels = await getChannelsSendInstance2();
+        return channels.listDeliveriesForSandbox(filter);
+      }, "listDeliveries")
     },
     // Workspace directory. Resolve a teammate by name within the agent's org and
     // get the channel handles they opted to share — feed the result straight into
@@ -27161,6 +27368,7 @@ import inquirer9 from "inquirer";
 
 // src/api/chat.api.service.ts
 init_http_client();
+init_dist();
 init_lua_fetch();
 init_request_credential();
 var ChatApi = class extends HttpClient {
@@ -27185,7 +27393,7 @@ var ChatApi = class extends HttpClient {
   * @throws Error if the agent is not found or the chat request fails
   */
   async sendMessage(agentId, chatData) {
-    return this.httpPost(`/chat/generate/${agentId}?channel=dev`, chatData, {});
+    return this.httpPostCoreDrainRetry(`/chat/generate/${agentId}?channel=dev`, chatData, {});
   }
   /**
   * Streams a message to an agent and receives chunked responses
@@ -27198,16 +27406,22 @@ var ChatApi = class extends HttpClient {
   async sendMessageStream(agentId, chatData, onChunk, onPostprocessComplete, onPreprocessorBlocked, onBatchAbort, onBatchHandled) {
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), 5 * 60 * 1e3);
-    const response = await luaFetch(`${this.baseUrl}/chat/stream/${agentId}?channel=dev`, {
-      method: "POST",
-      signal: controller.signal,
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${await bearerFor(this.credential)}`
-      },
-      body: JSON.stringify(chatData)
-    });
-    clearTimeout(timeoutId);
+    let response;
+    try {
+      response = await fetchWithCoreDrainRetry(async () => luaFetch(`${this.baseUrl}/chat/stream/${agentId}?channel=dev`, {
+        method: "POST",
+        signal: controller.signal,
+        headers: {
+          Authorization: `Bearer ${await bearerFor(this.credential)}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(chatData)
+      }), {
+        signal: controller.signal
+      });
+    } finally {
+      clearTimeout(timeoutId);
+    }
     if (!response.ok) {
       throw new Error(`HTTP error! status: ${response.status}`);
     }
@@ -34409,13 +34623,8 @@ init_constants();
 init_command_utils();
 init_webhook_api_service();
 init_analytics();
-var AVAILABLE_EVENT_TYPES = [
-  "message.sent",
-  "message.delivered",
-  "message.read",
-  "message.failed",
-  "message.played"
-];
+init_dist();
+var AVAILABLE_EVENT_TYPES = Object.values(EventType).filter((event) => event.startsWith("message."));
 async function webhooksCommand(action, cmdObj) {
   return withErrorHandling(async () => {
     const options = {