@agent-builder-lab/eve-kit 0.2.0 → 0.4.0-rc.1

package/dist/channel.d.ts

@@ -1,7 +1,7 @@
 import { AuthFn } from 'eve/channels/auth';
-import { EveChannelInput, EveChannel, EveMessageContext, EveMessageResult } from 'eve/channels/eve';
+import { EveChannelConfig, EveChannel, EveMessageContext, EveMessageResult } from 'eve/channels/eve';
 
-interface LabChannelOptions extends Omit<EveChannelInput, "auth"> {
+interface LabChannelOptions extends Omit<EveChannelConfig, "auth"> {
     /**
      * Autenticadores do próprio agente, verificados antes do acesso local do lab. O acesso local
      * (`localDev()` do eve) entra sempre por último.
@@ -28,6 +28,9 @@ interface LabChannelOptions extends Omit<EveChannelInput, "auth"> {
  *   para os atributos do auth do turno (`labAccount`), onde `labAuthorization()` confere cada
  *   tool call, e também sai do contexto que o modelo vê: a identidade vem do harness, nunca do
  *   texto.
+ * - Quando o pedido traz o modo do MCP da formação (`clientContext.labMcp`, o botão do lab), os
+ *   ataques vão para os atributos do auth do turno (`labMcp`) e saem do contexto do modelo:
+ *   `labMcpAtaquesOf(ctx)` (de `@agent-builder-lab/eve-kit/mcp`) lê na ferramenta.
  *
  * Em produção (`eve start`, Vercel) o acesso local não autentica nada e o canal se comporta como
  * o padrão com os autenticadores que você passar.

package/dist/channel.js

@@ -1,3 +1,8 @@
+import {
+  LAB_MCP_ATTRIBUTE,
+  LAB_MCP_CONTEXT_KEY,
+  labMcpAtaquesFromContext
+} from "./chunk-Z56XW2U4.js";
 import {
   LAB_ACCOUNT_ATTRIBUTE,
   LAB_ACCOUNT_CONTEXT_KEY,
@@ -8,7 +13,7 @@ import {
   LAB_FORK_CONTEXT_KEY,
   fetchForkPlan,
   forkIdFromContext
-} from "./chunk-3IQOFBSQ.js";
+} from "./chunk-I5XIFBNJ.js";
 
 // src/channel.ts
 import { localDev } from "eve/channels/auth";
@@ -31,11 +36,13 @@ function labOnMessage(options) {
     const context = ctx.eve.clientContext;
     const forkId = forkIdFromContext(context);
     const account = labAccountFromContext(context);
-    if (!forkId && !account && !hasLabKeys(context)) return base;
+    const mcpAtaques = labMcpAtaquesFromContext(context);
+    if (!forkId && !account && mcpAtaques === void 0 && !hasLabKeys(context)) return base;
     const plan = forkId ? await fetchForkPlan(forkId, options.connectorUrl) : void 0;
     const attributes = {
       ...forkId ? { [LAB_FORK_ATTRIBUTE]: forkId } : {},
-      ...account ? { [LAB_ACCOUNT_ATTRIBUTE]: JSON.stringify(account) } : {}
+      ...account ? { [LAB_ACCOUNT_ATTRIBUTE]: JSON.stringify(account) } : {},
+      ...mcpAtaques !== void 0 ? { [LAB_MCP_ATTRIBUTE]: JSON.stringify({ ataques: mcpAtaques }) } : {}
     };
     return {
       ...base,
@@ -68,7 +75,11 @@ function isLoopback(request) {
   const host = new URL(request.url).hostname.replace(/^\[|\]$/g, "");
   return host === "127.0.0.1" || host === "localhost" || host === "::1";
 }
-var LAB_KEYS = [LAB_FORK_CONTEXT_KEY, LAB_ACCOUNT_CONTEXT_KEY];
+var LAB_KEYS = [
+  LAB_FORK_CONTEXT_KEY,
+  LAB_ACCOUNT_CONTEXT_KEY,
+  LAB_MCP_CONTEXT_KEY
+];
 function hasLabKeys(context) {
   if (!context || typeof context !== "object" || Array.isArray(context)) return false;
   return LAB_KEYS.some((key) => key in context);

package/dist/{chunk-3IQOFBSQ.js → chunk-I5XIFBNJ.js}

@@ -37,7 +37,7 @@ async function load(forkId, base) {
     });
   } catch {
     throw new Error(
-      `Agent Builder Lab: o conector n\xE3o respondeu em ${base}. Ele est\xE1 rodando (agent-builder-lab connect)?`
+      `Agent Builder Lab: o conector n\xE3o respondeu em ${base}. Ele est\xE1 rodando (agent-builder-lab dev ou connect)?`
     );
   }
   const body = await response.json().catch(() => null);

package/dist/chunk-Z56XW2U4.js

@@ -0,0 +1,33 @@
+// src/lab-mcp.ts
+var LAB_MCP_CONTEXT_KEY = "labMcp";
+var LAB_MCP_ATTRIBUTE = "labMcp";
+var ATAQUES_VALIDOS = /^[a-z_@, ]{0,200}$/;
+function labMcpAtaquesFromContext(context) {
+  if (!context || typeof context !== "object" || Array.isArray(context)) return void 0;
+  const value = context[LAB_MCP_CONTEXT_KEY];
+  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+  const v = value;
+  if (v.v !== 1 || typeof v.ataques !== "string") return void 0;
+  return ATAQUES_VALIDOS.test(v.ataques) ? v.ataques : void 0;
+}
+function labMcpAtaquesFromAuth(auth) {
+  const raw = auth?.attributes?.[LAB_MCP_ATTRIBUTE];
+  if (typeof raw !== "string") return void 0;
+  try {
+    const ataques = JSON.parse(raw)?.ataques;
+    return typeof ataques === "string" && ATAQUES_VALIDOS.test(ataques) ? ataques : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function labMcpAtaquesOf(ctx) {
+  return labMcpAtaquesFromAuth(ctx.session.auth.current);
+}
+
+export {
+  LAB_MCP_CONTEXT_KEY,
+  LAB_MCP_ATTRIBUTE,
+  labMcpAtaquesFromContext,
+  labMcpAtaquesFromAuth,
+  labMcpAtaquesOf
+};

package/dist/index.js

@@ -95,6 +95,26 @@ function labInstrumentation(options = {}) {
       if (oldest !== void 0) sessions.delete(oldest);
     }
   }
+  const stepIndexes = /* @__PURE__ */ new Map();
+  function stepIndexOf(scope) {
+    const key = `${scope.sessionId}:${scope.turnId ?? ""}`;
+    let runs = stepIndexes.get(key);
+    if (!runs) {
+      runs = /* @__PURE__ */ new Map();
+      stepIndexes.delete(key);
+      stepIndexes.set(key, runs);
+      if (stepIndexes.size > MAX_SESSIONS) {
+        const oldest = stepIndexes.keys().next().value;
+        if (oldest !== void 0) stepIndexes.delete(oldest);
+      }
+    }
+    let index = runs.get(scope.runId);
+    if (index === void 0) {
+      index = runs.size;
+      runs.set(scope.runId, index);
+    }
+    return index;
+  }
   function base(idempotencyKey, scope) {
     const info = sessions.get(scope.sessionId);
     seq += 1;
@@ -105,9 +125,9 @@ function labInstrumentation(options = {}) {
       at: (/* @__PURE__ */ new Date()).toISOString(),
       sessionId: scope.sessionId,
       rootSessionId: scope.rootSessionId,
-      turnId: scope.turnId,
-      stepIndex: scope.stepIndex,
-      attemptIndex: scope.attemptIndex,
+      turnId: scope.turnId ?? "",
+      stepIndex: stepIndexOf(scope),
+      attemptIndex: scope.attempt,
       agentName: info?.agentName,
       parentLineage: info?.parentLineage
     };
@@ -142,7 +162,15 @@ function labInstrumentation(options = {}) {
           }
         });
       },
-      "model.call.completed": (event) => {
+      "model.call.settled": (event) => {
+        if (event.outcome !== "completed") {
+          send({
+            ...base(event.idempotencyKey, event.scope),
+            type: "model.call.failed",
+            error: error(event.error)
+          });
+          return;
+        }
         send({
           ...base(event.idempotencyKey, event.scope),
           type: "model.call.completed",
@@ -152,42 +180,35 @@ function labInstrumentation(options = {}) {
           content: event.content && [...event.content]
         });
       },
-      "model.call.failed": (event) => {
-        send({
-          ...base(event.idempotencyKey, event.scope),
-          type: "model.call.failed",
-          error: error(event.error)
-        });
-      },
-      "tool.call.started": (event, ctx) => {
+      "call.requested": (event, ctx) => {
         ctx.state.set({ callId: event.callId, toolName: event.toolName });
         send({
           ...base(event.idempotencyKey, event.scope),
           type: "tool.call.started",
           callId: event.callId,
           toolName: event.toolName,
-          kind: event.kind,
+          kind: toolKind(event.capability.kind),
           input: event.input,
           startedAtMs: event.startedAtMs
         });
       },
-      "tool.call.completed": (event, ctx) => {
-        const started = ctx.state.get();
-        send({
-          ...base(event.idempotencyKey, event.scope),
-          type: "tool.call.completed",
-          callId: started?.callId,
-          toolName: started?.toolName,
-          outcome: event.outcome,
-          // Prévias de imagem (data URLs) já chegam ao lab pelo stream do eve: aqui, só o tamanho.
-          output: withoutInlineMedia(event.output),
-          durationMs: event.durationMs,
-          completedAtMs: event.completedAtMs,
-          usage: event.usage && usage(event.usage)
-        });
-      },
-      "tool.call.failed": (event, ctx) => {
+      "call.settled": (event, ctx) => {
         const started = ctx.state.get();
+        if (event.outcome === "completed") {
+          send({
+            ...base(event.idempotencyKey, event.scope),
+            type: "tool.call.completed",
+            callId: started?.callId,
+            toolName: started?.toolName,
+            outcome: event.outcome,
+            // Prévias de imagem (data URLs) já chegam ao lab pelo stream do eve: aqui, só o tamanho.
+            output: { type: "result", output: withoutInlineMedia(event.output) },
+            durationMs: event.durationMs,
+            completedAtMs: event.completedAtMs,
+            usage: event.usage && usage(event.usage)
+          });
+          return;
+        }
         send({
           ...base(event.idempotencyKey, event.scope),
           type: "tool.call.failed",
@@ -204,6 +225,12 @@ function labInstrumentation(options = {}) {
     flush: () => sender.flush(2e3)
   });
 }
+function toolKind(kind) {
+  if (kind === "agent") return "subagent-call";
+  if (kind === "remote-agent") return "remote-agent-call";
+  if (kind === "skill") return "load-skill";
+  return "tool-call";
+}
 function lineage(value) {
   return {
     sessionId: value.sessionId,

package/dist/mcp.d.ts

@@ -1,5 +1,31 @@
 import { ApprovalPolicy } from 'eve/tools/approval';
 
+/** Chave do `clientContext` com o modo do MCP do turno. */
+declare const LAB_MCP_CONTEXT_KEY = "labMcp";
+/** Atributo do auth do turno com os ataques, em JSON (`{"ataques":"injecao"}`), para as ferramentas lerem. */
+declare const LAB_MCP_ATTRIBUTE = "labMcp";
+/**
+ * Os ataques que o lab mandou no `clientContext` do pedido: "" para o modo limpo, "injecao",
+ * "todos"… Undefined quando o pedido não traz o modo ou ele vem fora do formato.
+ */
+declare function labMcpAtaquesFromContext(context: unknown): string | undefined;
+type AuthLike = {
+    readonly attributes?: Readonly<Record<string, string | readonly string[]>>;
+};
+/** Os ataques guardados nos atributos de um auth (o `labChannel()` grava). */
+declare function labMcpAtaquesFromAuth(auth: AuthLike | null | undefined): string | undefined;
+/**
+ * Os ataques do MCP escolhidos no lab para este turno, para usar dentro de uma ferramenta:
+ * `labMcpAtaquesOf(ctx)`. "" é o modo limpo; undefined, sem escolha (vale a URL do agente).
+ */
+declare function labMcpAtaquesOf(ctx: {
+    readonly session: {
+        readonly auth: {
+            readonly current: AuthLike | null;
+        };
+    };
+}): string | undefined;
+
 interface ClienteMcp {
     chamar(nome: string, argumentos: Record<string, unknown>, signal?: AbortSignal): Promise<unknown>;
     listar(signal?: AbortSignal): Promise<Array<{
@@ -84,4 +110,4 @@ declare function aprovarEntradaExterna<TInput = Record<string, unknown>>(opcoes?
     readonly next?: ApprovalPolicy<TInput>;
 }): ApprovalPolicy<TInput>;
 
-export { type AchadoNoResultado, type ClienteMcp, type OpcoesDaFerramentaMcp, type OpcoesDeVarredura, type OpcoesDoCliente, type ResultadoDaVarredura, type ResultadoExterno, type SinalDeAtaque, aprovarEntradaExterna, chamarMcpVarrido, clienteMcpHttp, varrerResultado };
+export { type AchadoNoResultado, type ClienteMcp, LAB_MCP_ATTRIBUTE, LAB_MCP_CONTEXT_KEY, type OpcoesDaFerramentaMcp, type OpcoesDeVarredura, type OpcoesDoCliente, type ResultadoDaVarredura, type ResultadoExterno, type SinalDeAtaque, aprovarEntradaExterna, chamarMcpVarrido, clienteMcpHttp, labMcpAtaquesFromAuth, labMcpAtaquesFromContext, labMcpAtaquesOf, varrerResultado };

package/dist/mcp.js

@@ -1,3 +1,11 @@
+import {
+  LAB_MCP_ATTRIBUTE,
+  LAB_MCP_CONTEXT_KEY,
+  labMcpAtaquesFromAuth,
+  labMcpAtaquesFromContext,
+  labMcpAtaquesOf
+} from "./chunk-Z56XW2U4.js";
+
 // src/mcp-client.ts
 var PROTOCOLO = "2025-06-18";
 var ErroMcp = class extends Error {
@@ -270,8 +278,13 @@ function aprovarEntradaExterna(opcoes = {}) {
   };
 }
 export {
+  LAB_MCP_ATTRIBUTE,
+  LAB_MCP_CONTEXT_KEY,
   aprovarEntradaExterna,
   chamarMcpVarrido,
   clienteMcpHttp,
+  labMcpAtaquesFromAuth,
+  labMcpAtaquesFromContext,
+  labMcpAtaquesOf,
   varrerResultado
 };

package/dist/replay.d.ts

@@ -1,13 +1,14 @@
 import * as eve from 'eve';
-import { AgentStaticModelDefinition, DynamicResolveContext } from 'eve';
+import { AgentStaticModelDefinition, AgentReasoningDefinition, AgentModelOptionsDefinition, DynamicModelContext } from 'eve';
 
 /** O modelo de verdade: fixo ou escolhido a cada step, como num `defineDynamic`. */
 type LabModelChoice = AgentStaticModelDefinition | {
     model: AgentStaticModelDefinition;
     modelContextWindowTokens?: number;
-    reasoning?: "provider-default" | "none" | "minimal" | "low" | "medium" | "high" | "xhigh";
+    reasoning?: AgentReasoningDefinition;
+    modelOptions?: AgentModelOptionsDefinition;
 };
-type LabModelResolver = (event: unknown, ctx: DynamicResolveContext) => LabModelChoice | Promise<LabModelChoice>;
+type LabModelResolver = (ctx: DynamicModelContext) => LabModelChoice | Promise<LabModelChoice>;
 interface LabReplayOptions {
     /** Porta local do conector. Padrão: `LAB_CONNECTOR_URL` ou http://127.0.0.1:2100. */
     connectorUrl?: string;
@@ -25,12 +26,12 @@ interface LabReplayOptions {
  * export default defineAgent({ model: labReplayModel("anthropic/claude-sonnet-5.5") });
  * ```
  *
- * Fora de um fork do lab, devolve o seu modelo em todo step. Num fork (o canal do lab marca o
+ * Fora de um fork do lab, devolve o seu modelo em todo step (ou o que a função `model(ctx)` escolher). Num fork (o canal do lab marca o
  * turno com o id), repete os steps gravados antes da volta editada, inclusive ela, com um
  * `mockModel`: mesmo texto, mesmas tool calls e mesmos ids. Assim as voltas anteriores saem
  * iguais às originais e o modelo de verdade só entra depois do ponto editado. O `modelId` desses
  * steps é `lab-replay/<modelo original>`.
  */
-declare function labReplayModel(model: LabModelChoice | LabModelResolver, options?: LabReplayOptions): eve.DynamicSentinel<LabModelChoice>;
+declare function labReplayModel(model: LabModelChoice | LabModelResolver, options?: LabReplayOptions): eve.DynamicSentinel<LabModelChoice, DynamicModelContext>;
 
 export { type LabModelChoice, type LabModelResolver, type LabReplayOptions, labReplayModel };

package/dist/replay.js

@@ -2,33 +2,32 @@ import {
   LAB_FORK_ATTRIBUTE,
   REPLAY_PROVIDER,
   fetchForkPlan
-} from "./chunk-3IQOFBSQ.js";
+} from "./chunk-I5XIFBNJ.js";
 
 // src/replay.ts
-import { defineDynamic } from "eve";
+import {
+  defineDynamic
+} from "eve";
 import { mockModel } from "eve/evals";
+import { runs } from "eve/events";
 function labReplayModel(model, options = {}) {
-  const real = (event, ctx) => typeof model === "function" ? model(event, ctx) : model;
-  return defineDynamic({
-    events: {
-      "step.started": async (event, ctx) => {
-        const forkId = ctx.session.auth.current?.attributes[LAB_FORK_ATTRIBUTE];
-        if (typeof forkId !== "string") return real(event, ctx);
-        const plan = await fetchForkPlan(forkId, options.connectorUrl).catch(() => void 0);
-        const step = plan?.replay?.steps[stepIndexOf(event)];
-        if (!step) return real(event, ctx);
-        return {
-          model: replayStep(step, plan?.replay?.modelId),
-          modelContextWindowTokens: options.replayContextWindowTokens ?? 1e6
-        };
-      }
-    }
+  const real = (ctx) => typeof model === "function" ? model(ctx) : model;
+  return defineDynamic(async (ctx) => {
+    const forkId = ctx.session.auth.current?.attributes[LAB_FORK_ATTRIBUTE];
+    if (typeof forkId !== "string") return real(ctx);
+    const plan = await fetchForkPlan(forkId, options.connectorUrl).catch(() => void 0);
+    const step = plan?.replay?.steps[stepIndexOf(ctx)];
+    if (!step) return real(ctx);
+    return {
+      model: replayStep(step, plan?.replay?.modelId),
+      modelContextWindowTokens: options.replayContextWindowTokens ?? 1e6
+    };
   });
 }
-function stepIndexOf(event) {
-  const record = event ?? {};
-  const index = record.data?.stepIndex ?? record.stepIndex;
-  return typeof index === "number" ? index : -1;
+function stepIndexOf(ctx) {
+  const turnId = ctx.turn?.id;
+  if (!turnId) return -1;
+  return runs(ctx.view, { turnId }).filter((run) => run.status === "settled").length;
 }
 function replayStep(step, modelId = "modelo") {
   return mockModel({

package/package.json

@@ -1,7 +1,12 @@
 {
   "name": "@agent-builder-lab/eve-kit",
-  "version": "0.2.0",
+  "version": "0.4.0-rc.1",
   "description": "Liga um agente eve ao Agent Builder Lab: instrumentação da janela de contexto, canal com history e stubs, replay e autorização por conta de teste.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vinilana/agent-builder-lab.git",
+    "directory": "packages/eve-kit"
+  },
   "type": "module",
   "exports": {
     ".": {
@@ -39,11 +44,11 @@
     "access": "public"
   },
   "peerDependencies": {
-    "eve": ">=0.83.0 <0.84.0"
+    "eve": ">=1.0.0-rc.0 <2.0.0"
   },
   "devDependencies": {
     "@types/node": "24.19.2",
-    "eve": "0.83.2",
+    "eve": "1.0.0-rc.2",
     "tsup": "8.5.1",
     "typescript": "6.0.3",
     "vitest": "5.0.5",