@agentforge-io/core 2.0.21 → 2.0.23

package/dist/services/agent.service.d.ts

@@ -49,6 +49,21 @@ export interface AgentRecord {
      * Defaults to `"UTC"` when unset.
      */
     timezone?: string;
+    /**
+     * Access model surfaced by the host:
+     *
+     *   - `public`  — anyone with a chat token can open a conversation
+     *                 (embed flow). This is the historical behaviour and
+     *                 stays the default for callers that don't supply a
+     *                 value, so SDK consumers without a privacy model
+     *                 keep working unchanged.
+     *   - `private` — only authenticated callers (host-mediated) may
+     *                 talk to the agent. The SDK's public-chat surface
+     *                 refuses tokens bound to a private agent so the
+     *                 host's admin pages stay the single source of
+     *                 truth on who has access.
+     */
+    visibility?: 'private' | 'public';
 }
 /**
  * Host-supplied resolver for per-tenant agent configurations. The SDK never

package/dist/services/agent.service.js

@@ -499,6 +499,12 @@ function toAgentDefinition(record) {
         metadata: record.metadata,
         connectorOwnerUserId: record.connectorOwnerUserId,
         timezone: record.timezone,
+        // Surface `visibility` onto the runtime AgentDefinition so the
+        // public-chat controller can refuse tokens bound to private
+        // agents. Without this projection the field is dropped on its way
+        // from the host's resolver to the SDK and every agent reads as
+        // `undefined` (i.e. public).
+        visibility: record.visibility,
         ...(record.slug !== undefined ? { slug: record.slug } : {}),
         ...(extra.appearance !== undefined ? { appearance: extra.appearance } : {}),
     };

package/dist/types/config.types.d.ts

@@ -109,6 +109,15 @@ export interface AgentDefinition {
      * agent owner's locale instead of UTC. Defaults to `"UTC"` when unset.
      */
     timezone?: string;
+    /**
+     * Access model surfaced from the host. `'private'` agents are
+     * refused by the SDK's public-chat surface (token-only flow);
+     * authenticated entry points still go through the host's
+     * AgentAccessGate. Optional for backwards compatibility — older
+     * hosts that don't populate this field keep the historical
+     * "everyone with a token can chat" behaviour.
+     */
+    visibility?: 'private' | 'public';
 }
 /**
  * Configuration for an MCP server the runtime should connect to.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentforge-io/core",
-  "version": "2.0.21",
+  "version": "2.0.23",
   "description": "Framework-free AI runtime SDK. Owns: agent loop (Anthropic), conversations, tools, streaming, agent-job queue, SdkHooks. Identity, billing, infra (email/uploads/secrets) live in the host's modules — not here.",
   "license": "MIT",
   "main": "dist/index.js",