@agentforge-io/core 2.0.22 → 2.0.23

package/dist/services/agent.service.js

@@ -499,6 +499,12 @@ function toAgentDefinition(record) {
         metadata: record.metadata,
         connectorOwnerUserId: record.connectorOwnerUserId,
         timezone: record.timezone,
+        // Surface `visibility` onto the runtime AgentDefinition so the
+        // public-chat controller can refuse tokens bound to private
+        // agents. Without this projection the field is dropped on its way
+        // from the host's resolver to the SDK and every agent reads as
+        // `undefined` (i.e. public).
+        visibility: record.visibility,
         ...(record.slug !== undefined ? { slug: record.slug } : {}),
         ...(extra.appearance !== undefined ? { appearance: extra.appearance } : {}),
     };

package/dist/types/config.types.d.ts

@@ -109,6 +109,15 @@ export interface AgentDefinition {
      * agent owner's locale instead of UTC. Defaults to `"UTC"` when unset.
      */
     timezone?: string;
+    /**
+     * Access model surfaced from the host. `'private'` agents are
+     * refused by the SDK's public-chat surface (token-only flow);
+     * authenticated entry points still go through the host's
+     * AgentAccessGate. Optional for backwards compatibility — older
+     * hosts that don't populate this field keep the historical
+     * "everyone with a token can chat" behaviour.
+     */
+    visibility?: 'private' | 'public';
 }
 /**
  * Configuration for an MCP server the runtime should connect to.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentforge-io/core",
-  "version": "2.0.22",
+  "version": "2.0.23",
   "description": "Framework-free AI runtime SDK. Owns: agent loop (Anthropic), conversations, tools, streaming, agent-job queue, SdkHooks. Identity, billing, infra (email/uploads/secrets) live in the host's modules — not here.",
   "license": "MIT",
   "main": "dist/index.js",