@agents-fleet/shared 0.7.0-rc.1

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@agents-fleet/shared",
+  "module": "index.ts",
+  "type": "module",
+  "devDependencies": {
+    "@types/bun": "latest"
+  },
+  "version": "0.7.0-rc.1"
+}

package/settingsMerge.ts

@@ -0,0 +1,53 @@
+const MAX_MERGE_DEPTH = 50;
+
+const PERMISSION_ARRAY_KEYS = new Set(["allow", "ask", "deny"]);
+
+function isPlainObject(value: unknown): value is Record<string, unknown> {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+/** Safe parse of user-supplied settings JSON text; returns `{}` on empty/invalid/non-object input. */
+export function parseSettingsJson(text: string): Record<string, unknown> {
+    if (!text || !text.trim()) return {};
+
+    try {
+        const parsed: unknown = JSON.parse(text);
+        return isPlainObject(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+
+function mergeValue(baseValue: unknown, overrideValue: unknown, key: string, depth: number, inPermissions: boolean): unknown {
+    if (depth >= MAX_MERGE_DEPTH) return overrideValue;
+
+    if (inPermissions && PERMISSION_ARRAY_KEYS.has(key) && Array.isArray(baseValue) && Array.isArray(overrideValue)) {
+        return [...new Set([...baseValue, ...overrideValue])];
+    }
+
+    if (isPlainObject(baseValue) && isPlainObject(overrideValue)) {
+        return mergeObjects(baseValue, overrideValue, depth + 1, key === "permissions" || inPermissions);
+    }
+
+    return overrideValue;
+}
+
+function mergeObjects(base: Record<string, unknown>, override: Record<string, unknown>, depth: number, inPermissions: boolean): Record<string, unknown> {
+    const result: Record<string, unknown> = { ...base };
+
+    for (const key of Object.keys(override)) {
+        result[key] = key in base ? mergeValue(base[key], override[key], key, depth, inPermissions) : override[key];
+    }
+
+    return result;
+}
+
+/**
+ * Deep-merges `override` on top of `base`, up to `MAX_MERGE_DEPTH` levels. Plain-object values
+ * present on both sides are merged recursively; everything else (including arrays) is replaced
+ * by `override`'s value, except `permissions.allow/ask/deny`, which are unioned+deduped.
+ */
+export function mergeSettings(base: Record<string, unknown>, override: Record<string, unknown>): Record<string, unknown> {
+    return mergeObjects(base, override, 0, false);
+}

package/tsconfig.json

@@ -0,0 +1,30 @@
+{
+  "compilerOptions": {
+    // Environment setup & latest features
+    "lib": ["ESNext"],
+    "target": "ESNext",
+    "module": "Preserve",
+    "moduleDetection": "force",
+    "jsx": "react-jsx",
+    "allowJs": true,
+    "types": ["bun"],
+
+    // Bundler mode
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "noEmit": true,
+
+    // Best practices
+    "strict": true,
+    "skipLibCheck": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+
+    // Some stricter flags (disabled by default)
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noPropertyAccessFromIndexSignature": false
+  }
+}

package/utils/sanitizeFilePath.ts

@@ -0,0 +1,13 @@
+import { sep } from "path";
+
+/**
+ * Strips `.`/`..` segments (and empty segments from absolute paths or repeated
+ * slashes) from `relPath` so the result can never climb above the directory
+ * it's later joined to.
+ */
+export function sanitizeFilePath(relPath: string): string {
+    return relPath
+        .split(/[/\\]+/)
+        .filter(segment => segment !== "" && segment !== "." && segment !== "..")
+        .join(sep);
+}

package/wsTypes.ts

@@ -0,0 +1,242 @@
+export type ClientMessage = {
+    id: string;
+    originId: string;
+    sender: string;
+    /** Human-readable display name for `sender`, when the client can resolve one (e.g. Slack real/display name). */
+    senderName?: string;
+    message: string;
+    attachments?: IAttachment[];
+    /** Other messages the user linked to (e.g. a Slack message permalink), resolved for context. */
+    linkedMessages?: ClientMessage[];
+};
+
+export interface IAttachment {
+    id: string;
+    name: string;
+    mimetype: string;
+    /** Base64-encoded file bytes, or null if the download failed */
+    data: string | null;
+}
+
+export type UserQuestion = {
+    question: string;
+    header: string;
+    options: {
+        label: string;
+        description: string;
+        preview?: string;
+    }[];
+    multiSelect: boolean;
+};
+
+export type UserAnswers = {
+    questionId: string;
+    answers: Record<string, string | string[]>;
+};
+
+export type ISkillFile = {
+    /** Path relative to the skill's root inside the zip, e.g. "SKILL.md", "scripts/dosth.py" */
+    path: string;
+    type: "text" | "binary";
+    /** Plain text if type is "text", base64-encoded bytes if type is "binary" */
+    contents: string;
+};
+
+/** Short-lived credential the worker uses to authenticate `git` CLI operations directly against GitHub, separate from the `github` MCP server (which only exposes issues/PR tools) */
+export type GitCredentials = {
+    token: string;
+    expiresAt: string;
+};
+
+export type McpServerConfig = {
+    id: string;
+    name: string;
+} & (
+    | {
+        transport: "http";
+        url: string;
+        headers?: Record<string, string>;
+    }
+    | {
+        transport: "stdio";
+        command: string;
+        args?: string[];
+        env?: Record<string, string>;
+    }
+);
+
+export type WireGithubRepo = {
+    fullName: string;
+    /** Free-text context about the repo, set by users via manager-web, surfaced to the worker's system prompt */
+    description?: string;
+};
+
+export type TaskStatus = "pending" | "in_progress" | "completed" | "deleted";
+
+export type WorkerMessage = {
+    /** Unique ID for this message, used to match the "ack" reply */
+    id: string;
+    type: string;
+    payload: unknown;
+};
+
+export type FromWorkerMessage = FromWorker_MessageAck | FromWorker_NewAssistantMessage | FromWorker_AskUserQuestions | FromWorker_ToolCallRequest | FromWorker_UpdateMemory | FromWorker_TaskCreate | FromWorker_TaskUpdate | FromWorker_ClearContext | FromWorker_ExposePortRequest;
+
+/** Sent by the worker back to the manager to acknowledge receipt of a message */
+export type FromWorker_MessageAck = WorkerMessage & {
+    type: "ack-client-message";
+    payload: {
+        /** ID of the message being acknowledged */
+        id: string;
+    };
+};
+
+export type FromWorker_NewAssistantMessage = WorkerMessage & {
+    type: "new-assistant-message";
+    payload: {
+        message: string;
+    };
+};
+
+export type FromWorker_AskUserQuestions = WorkerMessage & {
+    type: "ask-user-questions";
+    payload: {
+        id: string;
+        questions: UserQuestion[];
+    };
+};
+
+export type FromWorker_ToolCallRequest = WorkerMessage & {
+    type: "tool-call-request";
+    payload: {
+        id: string;
+        toolName: string;
+        description: string;
+    };
+};
+
+export type FromWorker_UpdateMemory = WorkerMessage & {
+    type: "update-memory";
+    payload: {
+        prevMemory: string;
+        memory: string;
+    };
+};
+
+export type FromWorker_TaskCreate = WorkerMessage & {
+    type: "task-create";
+    payload: {
+        taskId: string;
+        subject: string;
+        description?: string;
+    };
+};
+
+export type FromWorker_TaskUpdate = WorkerMessage & {
+    type: "task-update";
+    payload: {
+        taskId: string;
+        status?: TaskStatus;
+        subject?: string;
+        description?: string;
+    };
+};
+
+/** Sent by the worker when its session is reset via `/clear`, so the manager forgets the last-read message cursor for this conversation and resends full context next time. */
+export type FromWorker_ClearContext = WorkerMessage & {
+    type: "clear-context";
+    payload: Record<string, never>;
+};
+
+/** Sent by the worker to ask the manager to reverse-proxy a public URL to a port the worker is listening on. */
+export type FromWorker_ExposePortRequest = WorkerMessage & {
+    type: "expose-port-request";
+    payload: {
+        id: string;
+        port: number;
+    };
+};
+
+export type ToWorkerMessage = ToWorker_NewClientMessage | ToWorker_AnswerQuestions | ToWorker_ToolCallReply | ToWorker_StartWorker | ToWorker_UpdateRuntimeConfigs | ToWorker_UpdateMemoryResult | ToWorker_ExposePortReply;
+
+export type ToWorker_NewClientMessage = WorkerMessage & {
+    type: "new-client-message";
+    payload: {
+        message: ClientMessage;
+        previousMessages?: ClientMessage[];
+    };
+};
+
+export type ToWorker_AnswerQuestions = WorkerMessage & {
+    type: "answer-questions";
+    payload: {
+        questionId: string;
+        questions: string[];
+        /** Question as the key and value as `string[]` if the question accepts multiple answers or `string` if the question accepts a single answer */
+        answers: Record<string, string | string[]>;
+    };
+};
+
+export type ToWorker_ToolCallReply = WorkerMessage & {
+    type: "tool-call-reply";
+    payload: {
+        id: string;
+        action: "allow" | "deny";
+        message?: string;
+    };
+};
+
+export type ToWorker_StartWorker = WorkerMessage & {
+    type: "start-worker";
+    payload: {
+        globalSystemPrompt: string;
+        channelSystemPrompt: string;
+        memory: string;
+        settingsJson: string;
+        mcpServers: McpServerConfig[];
+        git?: GitCredentials;
+        githubRepos: WireGithubRepo[];
+        githubReadOnly: boolean;
+        skills: Array<{
+            id: string;
+            name: string;
+            description: string | null;
+            updatedAt: string;
+            files: ISkillFile[];
+        }>;
+    };
+};
+
+/** Sent by the manager to push refreshed runtime config (MCP servers, e.g. renewed GitHub App tokens; settings) to a running worker without restarting it */
+export type ToWorker_UpdateRuntimeConfigs = WorkerMessage & {
+    type: "update-runtime-configs";
+    payload: {
+        mcpServers: McpServerConfig[];
+        git?: GitCredentials;
+        githubRepos: WireGithubRepo[];
+        githubReadOnly: boolean;
+        settingsJson: string;
+    };
+};
+
+/** Reply to a worker's `update-memory` message. `requestId` matches the `id` of the `update-memory` message being answered. */
+export type ToWorker_UpdateMemoryResult = WorkerMessage & {
+    type: "update-memory-result";
+    payload: {
+        requestId: string;
+        success: boolean;
+        /** Current memory as stored in the DB - the canonical value to use as `prevMemory` for the next update, whether this one succeeded or was rejected */
+        memory: string;
+    };
+};
+
+/** Reply to a worker's `expose-port-request` message. `requestId` matches the `id` of the `expose-port-request` message being answered. */
+export type ToWorker_ExposePortReply = WorkerMessage & {
+    type: "expose-port-reply";
+    payload: {
+        requestId: string;
+        success: boolean;
+        url?: string;
+        error?: string;
+    };
+};