lua-cli 3.39.3 → 3.40.0

package/dist/voice/test/index.d.ts

@@ -146,8 +146,8 @@ declare class LuaVoice {
     readonly name: string;
     readonly description?: string;
     readonly llm: LuaVoiceModelInput;
-    readonly stt: LuaVoiceModelInput;
-    readonly tts: LuaVoiceModelInput;
+    readonly stt?: LuaVoiceModelInput;
+    readonly tts?: LuaVoiceModelInput;
     readonly vad: LuaVoiceConfig['vad'];
     readonly vadOptions: LuaVoiceConfig['vadOptions'];
     readonly turnDetection: LuaVoiceConfig['turnDetection'];
@@ -176,11 +176,22 @@ declare type LuaVoiceConfig = z.infer<typeof LuaVoiceConfigSchema>;
  * pass either a string descriptor or a plugin class instance. The wire schema
  * (validated server-side) is the discriminated union in `@lua/shared-types`;
  * the compiler is what bridges the two.
+ *
+ * `stt`/`tts` are unconditionally optional here at the type level — a
+ * realtime `llm` legitimately omits both. The realtime-vs-cascaded
+ * requirement (cascaded needs both) is enforced by the compiler's zod
+ * `superRefine` in `@lua/shared-types`, not by this type. `name` is
+ * deliberately required here (unlike `@lua/shared-types`'s wire schema,
+ * which leaves it optional for its own unrelated server-side
+ * placeholder-name use case) since the `LuaVoice` constructor throws
+ * without it and a nameless voice is otherwise silently dropped from the
+ * compiled manifest.
  */
-declare interface LuaVoiceConfig_2 extends Omit<LuaVoiceConfig, 'llm' | 'stt' | 'tts'> {
+declare interface LuaVoiceConfig_2 extends Omit<LuaVoiceConfig, 'llm' | 'stt' | 'tts' | 'name'> {
+    name: string;
     llm: LuaVoiceModelInput;
-    stt: LuaVoiceModelInput;
-    tts: LuaVoiceModelInput;
+    stt?: LuaVoiceModelInput;
+    tts?: LuaVoiceModelInput;
     /** Optional human-readable description (surfaced in manifest + admin listings). */
     description?: string;
     /** Voice-only tools, in addition to skills attached to the owning agent. */

package/dist/workflow-builder.d.ts

@@ -48,6 +48,22 @@ export declare interface AgentStepOptions {
      */
     maxMessages?: number;
     maxInputTokens?: number;
+    /**
+     * Claude Code plugins a tier:'job' coding turn loads (EM-WS3). Platform allowlist only — today
+     * `'lua-agent-builder'` (the lua-cli playbooks). Needs the claude-code harness (an Anthropic model) and the `shell`
+     * job tool; the turn then reaches the Lua API through a platform proxy pinned to THIS workflow's agent that allows
+     * staging only (compile, push of skills/jobs/webhooks/triggers/processors/backup, `version create`, status, logs)
+     * and refuses every deploy, promote, publish, activate, env, chat and runtime call.
+     */
+    plugins?: WorkflowJobPluginId[];
+    /**
+     * EM-WS3: pin a plugin step's Lua-API proxy (and its key) to ANOTHER agent instead of this workflow's own. Legal only
+     * beside `plugins`. Refused at run time (`target_not_granted`) unless the platform's plugin-target switch is on AND
+     * this workflow's agent holds a `supervision:act` or `supervision:release` grant on the target.
+     */
+    target?: {
+        agentId: string;
+    };
     /**
      * What this step DOES: `classify` | `extract` | `transform` | `draft` | `research` | `reason` | `code` |
      * `judge`. On a PUSHED definition it must come with a `model` — a static `taskClass` with none is refused
@@ -321,7 +337,9 @@ export declare type LuaWorkflowBuildCode = 'duplicate-step-id' | 'unknown-step-r
 * verdict (deferred for an inherit child, 03 §3.1 table). Kept for one minor so a consumer switching on the union still
 * compiles; removed in the next.
 */
-| 'workspace-not-declared' | 'workspace-inherit-without-parent-workspace' | 'workspace-inherit-conflict' | 'harness-requires-job-tier' | 'max-turns-requires-job-tier' | 'max-turns-invalid' | 'cap-exceeded' | 'chunk-size-invalid' | 'rate-limit-invalid' | 'backoff-invalid' | 'loop-interval-out-of-range' | 'mapping-placement' | 'container-arm-empty'
+| 'workspace-not-declared' | 'workspace-inherit-without-parent-workspace' | 'workspace-inherit-conflict' | 'harness-requires-job-tier' | 'max-turns-requires-job-tier' | 'max-turns-invalid'
+/** EM-WS3: a step's `plugins` outside the allowlist, repeated, or off the Job tier. */
+| 'plugins-invalid' | 'cap-exceeded' | 'chunk-size-invalid' | 'rate-limit-invalid' | 'backoff-invalid' | 'loop-interval-out-of-range' | 'mapping-placement' | 'container-arm-empty'
 /**
 * @deprecated LUA-684 — the builder no longer throws it: an `approval` / `waitForSignal` IS a container arm
 * (`parallel(['approve', …])`). Where the engine cannot run one — a `loop` body, the step of a `[map, step]`
@@ -427,6 +445,18 @@ export declare interface LuaWorkflowConfig {
     backfillOnEnable?: {
         maxOccurrences?: number;
     };
+    /**
+     * Schedule health — a dead-man for this schedule, watched by the platform (no heartbeat service to wire up).
+     * The agent's owner (the schedule's creator, else the org admins) gets ONE notice per incident — inbox card plus
+     * `notify` ('app' push, 'email', or 'emailApp', the default) — when, while the schedule is active:
+     *  - `maxSilenceMinutes` (5..43200): no scheduled run has COMPLETED successfully for that long;
+     *  - `alertAfterConsecutiveFailures` (1..3): that many scheduled runs failed in a row (the platform turns a
+     *    schedule off after 3, which always alerts);
+     * and the notice resolves in place when the schedule is healthy again. Every transition is also an agent log
+     * line (`lua logs`), so a log drain routes it to Better Stack / Datadog. Needs `schedule`; silence needs a
+     * recurring one. See docs/workflows/schedule-health.md.
+     */
+    health?: ScheduleHealthConfig;
     /** Literal JSON passed as run input on every scheduled fire; must validate against `inputSchema` (P0-5e). */
     scheduleInput?: Record<string, unknown>;
     goal?: WorkflowGoalEnvelope;
@@ -512,6 +542,24 @@ export declare const rows: (s: LuaWorkflowStep<any, any, any> | string, path: st
     limit: number;
 }) => MapDescriptor;
 
+/** Where an incident notice goes beyond the inbox card (which always lands). */
+declare const SCHEDULE_HEALTH_NOTIFY_CHANNELS: readonly ["app", "email", "emailApp"];
+
+/** The declaration an author writes. At least one threshold is required. */
+declare interface ScheduleHealthConfig {
+    /** Alert when no scheduled run has completed successfully for this many minutes (5..43200). */
+    maxSilenceMinutes?: number;
+    /**
+     * Alert when this many scheduled runs in a row failed. Workflows and agent tasks are parked by the
+     * platform after 3 consecutive failures, so for them the value is 1..3; code jobs accept 1..50.
+     */
+    alertAfterConsecutiveFailures?: number;
+    /** Out-of-inbox routing for the notice: 'app' (push), 'email', or 'emailApp' (both). Default 'emailApp'. */
+    notify?: ScheduleHealthNotify;
+}
+
+declare type ScheduleHealthNotify = (typeof SCHEDULE_HEALTH_NOTIFY_CHANNELS)[number];
+
 export { SerializedWorkflowGraph }
 
 export declare interface SpecialistStepOptions {
@@ -784,6 +832,9 @@ export declare type WorkflowJobHarness = WorkflowJobHarness_2;
 
 declare type WorkflowJobHarness_2 = (typeof WORKFLOW_JOB_HARNESSES)[number];
 
+/** EM-WS3: the Job-tier plugin allowlist — a structural twin of the registry's id, parity-checked below. */
+declare type WorkflowJobPluginId = 'lua-agent-builder';
+
 declare type WorkflowJobResources = (typeof WORKFLOW_JOB_RESOURCES)[number];
 
 export declare type WorkflowJobToolId = 'shell' | 'read' | 'write' | 'edit' | 'glob' | 'grep' | 'git' | 'gh' | 'fetch' | 'ripwire';