@a3s-lab/code 3.6.2 → 4.1.0

package/README.md

@@ -320,6 +320,25 @@ console.log(await session.mcps())
 The positional `addMcpServer(...)` overload and longer
 `addMcpServerConfig(...)` alias remain for compatibility.
 
+## Filesystem-First Agents
+
+Define a durable agent as a **directory** — `instructions.md` (required) plus
+optional `agent.acl`, `skills/`, `schedules/` (cron), and `tools/` (`kind: mcp` or
+`kind: script` sandboxed QuickJS) — and serve its schedules. Each fire is a full
+harness turn (context, tool visibility, safety gate, verification). Returns a
+handle you must keep and stop explicitly.
+
+```js
+const handle = await agent.serveAgentDir('./my-agent', './workspace', {
+  // Optional: pass a sessionStore so each schedule resumes its accumulated
+  // context across daemon restarts.
+  sessionStore: new FileSessionStore('./sessions'),
+})
+// ... runs in the background until:
+await handle.stop()
+console.log(handle.isStopped()) // true
+```
+
 ## HITL Confirmations
 
 Use `permissionPolicy` to decide which tools ask, then `confirmationPolicy` to

package/generated.d.ts

@@ -413,6 +413,13 @@ export interface SessionOptions {
   builtinSkills?: boolean
   /** Extra directories to scan for skill files (.md with YAML frontmatter). */
   skillDirs?: Array<string>
+  /**
+   * Whether active skill allowed-tools restrict ordinary session tool calls.
+   *
+   * Defaults to false. Set true to restore the legacy global active-skill
+   * restriction before permission policy, hooks, HITL, or AHP run.
+   */
+  enforceActiveSkillToolRestrictions?: boolean
   /** Extra directories to scan for agent files. */
   agentDirs?: Array<string>
   /** Reproducible disposable workers to register for task delegation. */
@@ -1234,6 +1241,51 @@ export declare class Agent {
    * deployments.
    */
   disconnectIdleMcp(idleThresholdMs: number): Promise<Array<string>>
+  /**
+   * Serve a filesystem-first agent directory's cron schedules until stopped.
+   *
+   * Loads the directory by convention: `instructions.md` (required), optional
+   * `agent.acl`, `skills/`, `schedules/*.md` (cron jobs), and `tools/*.md`
+   * (`kind: mcp` servers or `kind: script` sandboxed QuickJS tools). It starts
+   * one durable session per enabled schedule (stable id `schedule:<name>`) with
+   * the agent dir's tools installed; each schedule fires as a FULL harness turn
+   * (context, tool visibility, safety gate, verification), never a raw model call.
+   *
+   * Returns immediately with a {@link ServeHandle}; the daemon runs in the
+   * background until `handle.stop()` is called. The handle MUST be kept and
+   * stopped explicitly — dropping it does NOT cancel the daemon.
+   *
+   * ```js
+   * const handle = await agent.serveAgentDir('./my-agent', '/my-project');
+   * // ... later ...
+   * await handle.stop();
+   * ```
+   *
+   * @param dir - Path to the agent directory (prompt/skills/schedules/tools)
+   * @param workspace - Workspace directory each scheduled turn operates in
+   * @param options - Optional session overrides merged into every schedule session
+   *   (model, llmClient, sessionStore, …); `promptSlots`/`sessionId` set here are
+   *   NOT overridden so a host can pin them per schedule
+   */
+  serveAgentDir(dir: string, workspace: string, options?: SessionOptions | undefined | null): Promise<ServeHandle>
+}
+/**
+ * Lifetime handle for a running serve daemon (see {@link Agent.serveAgentDir}).
+ *
+ * The daemon keeps running until `stop()` is called. Dropping the handle does
+ * NOT cancel the daemon — call `stop()` explicitly for graceful shutdown.
+ */
+export declare class ServeHandle {
+  /**
+   * Request graceful shutdown of the serve daemon.
+   *
+   * Signals every per-schedule job to stop after its current fire. Idempotent:
+   * calling `stop()` more than once is a no-op. Resolves once the cancellation
+   * has been signalled.
+   */
+  stop(): Promise<void>
+  /** Whether `stop()` has been called on this handle. */
+  isStopped(): boolean
 }
 /** Workspace-bound session. All LLM and tool operations happen here. */
 export declare class Session {

package/index.js

@@ -310,7 +310,7 @@ if (!nativeBinding) {
   throw new Error(`Failed to load native binding`)
 }
 
-const { formatVerificationSummary, EventStream, FileMemoryStore, FileSessionStore, MemorySessionStore, DefaultSecurityProvider, LocalWorkspaceBackend, S3WorkspaceBackend, StdioTransport, HttpTransport, WebSocketTransport, UnixSocketTransport, Agent, Session, builtinSkills, BrowserBackend } = nativeBinding
+const { formatVerificationSummary, EventStream, FileMemoryStore, FileSessionStore, MemorySessionStore, DefaultSecurityProvider, LocalWorkspaceBackend, S3WorkspaceBackend, StdioTransport, HttpTransport, WebSocketTransport, UnixSocketTransport, Agent, ServeHandle, Session, builtinSkills, BrowserBackend } = nativeBinding
 
 module.exports.formatVerificationSummary = formatVerificationSummary
 module.exports.EventStream = EventStream
@@ -325,6 +325,7 @@ module.exports.HttpTransport = HttpTransport
 module.exports.WebSocketTransport = WebSocketTransport
 module.exports.UnixSocketTransport = UnixSocketTransport
 module.exports.Agent = Agent
+module.exports.ServeHandle = ServeHandle
 module.exports.Session = Session
 module.exports.builtinSkills = builtinSkills
 module.exports.BrowserBackend = BrowserBackend

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@a3s-lab/code",
-  "version": "3.6.2",
+  "version": "4.1.0",
   "description": "A3S Code - Native Node.js bindings for the coding-agent runtime",
   "main": "index.js",
   "types": "index.d.ts",
@@ -38,16 +38,16 @@
     "build": "napi build --platform --release --js index.js --dts generated.d.ts",
     "build:debug": "napi build --platform --js index.js --dts generated.d.ts",
     "prepublishOnly": "napi prepublish -t npm",
-    "test": "node test.mjs",
+    "test": "node test.mjs && node test_serve.mjs",
     "test:types": "tsc --noEmit --module nodenext --moduleResolution nodenext --target es2022 --strict --skipLibCheck test-types.ts",
     "test:helpers": "node test-helpers.mjs"
   },
   "optionalDependencies": {
-    "@a3s-lab/code-darwin-arm64": "3.6.2",
-    "@a3s-lab/code-linux-x64-gnu": "3.6.2",
-    "@a3s-lab/code-linux-x64-musl": "3.6.2",
-    "@a3s-lab/code-linux-arm64-gnu": "3.6.2",
-    "@a3s-lab/code-linux-arm64-musl": "3.6.2",
-    "@a3s-lab/code-win32-x64-msvc": "3.6.2"
+    "@a3s-lab/code-darwin-arm64": "4.1.0",
+    "@a3s-lab/code-linux-x64-gnu": "4.1.0",
+    "@a3s-lab/code-linux-x64-musl": "4.1.0",
+    "@a3s-lab/code-linux-arm64-gnu": "4.1.0",
+    "@a3s-lab/code-linux-arm64-musl": "4.1.0",
+    "@a3s-lab/code-win32-x64-msvc": "4.1.0"
   }
 }