@ai-ecoverse/slicc-agent 5.4.1 → 5.5.0

package/dist/types/guests/index.d.ts

@@ -2,7 +2,9 @@ import { type Context, type ReplicatedState } from '@earendil-works/chord';
 import { type Harness } from '@earendil-works/pi-durable';
 import type { Agents } from '../agents.ts';
 import type { Approvals } from '../approvals/index.ts';
+import type { ApprovalPolicies } from '../approvals/policy.ts';
 import type { GuestPrincipal } from '../serving.ts';
+import { type GuestPolicy } from './policy.ts';
 import { type GuestDraft, type GuestSeat, type SeatRecord } from './seats.ts';
 export type GuestOpened = {
     seat: GuestSeat;
@@ -41,12 +43,14 @@ export interface Guests {
     joined(id: string): () => void;
     onEnd(listener: (id: string) => void): () => void;
     propose(guest: GuestPrincipal, request: ProposeRequest, context: Context): Promise<Proposed>;
+    policy(): GuestPolicy;
     dispose(): void;
 }
 export interface GuestsOptions {
     harness: Pick<Harness, 'commit' | 'abortSubmission'>;
     agents: Pick<Agents, 'state' | 'conversation'>;
     approvals?: Pick<Approvals, 'state' | 'request' | 'withdrawSeat'>;
+    policy?: Pick<ApprovalPolicies, 'current'>;
     now?: () => number;
     context?: Context;
 }

package/dist/types/guests/policy.d.ts

@@ -0,0 +1,23 @@
+import type { ApprovalTier } from '../approvals/record.ts';
+export type GateKind = 'user' | 'agent' | 'scoop' | 'cone' | 'off';
+export type GuestPolicy = {
+    manageGuests: 'deny' | ApprovalTier;
+    allowedToolGates: GateKind[];
+    allowedMessageGates: GateKind[];
+    maxSeatDays: number;
+    always: {
+        messages: boolean;
+        tools: boolean;
+    };
+};
+export type GuestPolicyChange = Partial<GuestPolicy>;
+export declare const GATE_KINDS: readonly GateKind[];
+export declare const DEFAULT_GUEST_POLICY: GuestPolicy;
+export declare const MAX_SEAT_DAYS = 365;
+export declare const DAY_MS: number;
+export declare const GUESTS_MANAGE_DENIED = "The owner's guest policy doesn't let guests manage guests.";
+export declare const GUESTS_MANAGE_LATER = "Guests can't manage guests yet, whatever the policy says.";
+export declare const POLICY_MANAGE_DENY_ONLY = "manageGuests can only be deny: guests can't manage guests yet.";
+export declare const gateKind: (gate: string) => GateKind;
+export declare function gateRefusal(what: string, allowed: readonly GateKind[]): string;
+export declare function changedGuests(next: GuestPolicy, change: unknown): string | null;

package/dist/types/guests/seats.d.ts

@@ -1,4 +1,5 @@
 import type { ApprovalTier } from '../approvals/record.ts';
+import { type GuestPolicy } from './policy.ts';
 export type GuestGate = ApprovalTier | 'off';
 export type GuestGates = {
     messages: GuestGate;
@@ -35,5 +36,5 @@ export declare const MAX_SEAT_MS: number;
 export declare const MAX_LABEL = 64;
 export declare function cleanLabel(raw: unknown): string;
 export declare function isGate(value: unknown): value is GuestGate;
-export declare function checkDraft(draft: GuestDraft, now: number): string | null;
+export declare function checkDraft(draft: GuestDraft, now: number, policy?: GuestPolicy): string | null;
 export declare function liveSeat(seat: SeatRecord | undefined, now: number): boolean;

package/dist/types/host.d.ts

@@ -14,7 +14,7 @@ import { type Pages } from './remote/pages.ts';
 import type { SecretName } from './secrets/names.ts';
 import type { VaultState } from './secrets/vault.ts';
 import { AgentControl, type AgentGuest, AgentSettings, AgentTranscript } from './services.ts';
-import { type GuestPrincipal, type Seat } from './serving.ts';
+import { type GuestPrincipal } from './serving.ts';
 import type { SkillsRuntime } from './skills/index.ts';
 import type { SprinklesRuntime } from './sprinkles/index.ts';
 import { type Thumbnail } from './thumbs.ts';
@@ -84,7 +84,5 @@ export declare const CLOSED_TO_GUESTS = "a guest seat has only its transcript an
 export declare const openToGuests: <F extends object>(factory: F) => F;
 export declare function closedToGuests(host: Host): Host;
 export declare function lazily<T>(state: () => ReplicatedState<T>): Readable<T>;
-export declare const GUEST_MANAGERS: ReadonlySet<Seat>;
-export declare const OWNER_GUESTS = "only the owner can invite or revoke guests";
 export declare function serveAgent(serving: Served): Host;
 export {};

package/dist/types/index.d.ts

@@ -1,11 +1,13 @@
 export { ADOBE, ADOBE_PROXY, type AdobeConfig, type AdobeModelInfo, adobeClassifiers, adobeConfig, adobeIdentity, adobeModel, adobeProvider, adobeUsage, type Budget, SESSION_HEADER, VERSION_HEADER, withAdobeIdentity, } from './adobe.ts';
 export { type Agent, type AgentOptions, answerText, openAgent } from './agent.ts';
 export { APPROVAL_MS, type Approval, type ApprovalAnswer, type ApprovalDecided, type ApprovalDraft, type ApprovalJudge, type ApprovalKind, type ApprovalRequester, type ApprovalState, type Approvals, ApprovalsDoc, type ApprovalTier, type ApprovalVerdict, approvalJudge, attachApprovals, DEFAULT_POLICY, type DecidedBy, JUDGE_ALLOW, JUDGE_DENY, JUDGE_KIND, JUDGE_MODEL, JUDGE_QUESTIONS, type Judgement, judgeModelOf, judgeSpender, judgeState, type OwnerIntent, ownerIntent, POLICY_FILE, REASONS, seedPolicy, VERDICT_REASONS, verdictOf, verdictRecorder, } from './approvals/index.ts';
+export { type ApprovalPolicy, type ApprovalPolicyChange, type ApprovalPolicySet, DEFAULT_APPROVAL_POLICY, type SudoPolicy, } from './approvals/policy.ts';
 export { FILE_LIMIT, IMAGE_LIMIT, type SendAttachment, type ShownAttachment, splitUser, TOTAL_LIMIT, userParts, } from './attachments.ts';
 export { type AgentConnection, connectAgent } from './client.ts';
 export { createAgentControl } from './control.ts';
 export { connectGuest, GUEST_ONLY, type GuestConnection, SEAT_REFUSED, } from './guests/client.ts';
 export type { GuestOpened, Proposed, ProposeRequest } from './guests/index.ts';
+export type { GateKind, GuestPolicy } from './guests/policy.ts';
 export type { GuestDraft, GuestGate, GuestGates, GuestSeat } from './guests/seats.ts';
 export { type AgentHost, type ConnectOptions, hostAgent } from './host.ts';
 export type { KernelClient, KernelFs, KernelProcess, KernelStat, SpawnOptions, } from './kernel/client.ts';

package/dist/types/services.d.ts

@@ -1,6 +1,7 @@
 import type { Context, JsonValue, RemoteContract, ReplicatedState } from '@earendil-works/chord';
 import type { ConversationView } from '@earendil-works/pi-durable';
 import type { Approval, ApprovalAnswer, ApprovalDecided } from './approvals/index.ts';
+import type { ApprovalPolicy, ApprovalPolicyChange, ApprovalPolicySet } from './approvals/policy.ts';
 import type { SendAttachment, ShownAttachment } from './attachments.ts';
 import type { ChangesView } from './changes/git.ts';
 import type { FrozenCone } from './freezer/index.ts';
@@ -94,6 +95,7 @@ export interface AgentControl {
     guestRevoke(id: string, context: Context): Promise<{
         revoked: boolean;
     }>;
+    approvalPolicySet(change: ApprovalPolicyChange, context: Context): Promise<ApprovalPolicySet>;
     decide(id: string, decision: ApprovalAnswer, reason: string | null, context: Context): Promise<ApprovalDecided>;
 }
 export interface ImageRef {
@@ -239,7 +241,8 @@ export interface AgentSettingsChange {
     thinkingLevel: 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max' | null;
     agentId?: string | null;
 }
-export declare const CONTROL_METHODS: ("abort" | "agentCommands" | "changeAccept" | "changeRevert" | "changesOpen" | "compact" | "compactAgent" | "configure" | "createCone" | "createScoop" | "decide" | "discard" | "drop" | "freeze" | "guestOpen" | "guestRevoke" | "image" | "memoryRemove" | "memorySave" | "monitorClose" | "monitorOpen" | "newChat" | "reset" | "resolveAgentLick" | "resolveLick" | "rewind" | "rewindAgent" | "selectCone" | "send" | "sprinkleCall" | "sprinkleSend" | "stopAgent" | "thaw" | "toolLabel" | "unqueue" | "wait" | "webhook" | "withdraw")[];
+export declare const CONTROL_METHODS: ("abort" | "agentCommands" | "approvalPolicySet" | "changeAccept" | "changeRevert" | "changesOpen" | "compact" | "compactAgent" | "configure" | "createCone" | "createScoop" | "decide" | "discard" | "drop" | "freeze" | "guestOpen" | "guestRevoke" | "image" | "memoryRemove" | "memorySave" | "monitorClose" | "monitorOpen" | "newChat" | "reset" | "resolveAgentLick" | "resolveLick" | "rewind" | "rewindAgent" | "selectCone" | "send" | "sprinkleCall" | "sprinkleSend" | "stopAgent" | "thaw" | "toolLabel" | "unqueue" | "wait" | "webhook" | "withdraw")[];
+export declare const OWNER_DEVICE_METHODS: readonly (keyof AgentControl & string)[];
 export declare const CONTROL_READS: readonly (keyof AgentControl & string)[];
 export declare const AgentControl: RemoteContract;
 export type Delivered = 'run' | 'steer' | 'follow-up';
@@ -260,6 +263,7 @@ export interface AgentTranscript {
     readonly labels: ReplicatedState<Record<string, string>>;
     readonly guests: ReplicatedState<GuestSeat[]>;
     readonly approvals: ReplicatedState<Approval[]>;
+    readonly approvalPolicy: ReplicatedState<ApprovalPolicy>;
 }
 export interface PrivateRevision {
     revision: number;
@@ -269,7 +273,7 @@ export interface Command {
     description: string;
     kind: 'prompt' | 'skill' | 'action';
 }
-export declare const TRANSCRIPT_STATES: ("agents" | "approvals" | "changes" | "commands" | "deliveries" | "frozen" | "guests" | "labels" | "memories" | "memoryScopes" | "monitor" | "privateRevision" | "sprinkles" | "state" | "vault" | "views")[];
+export declare const TRANSCRIPT_STATES: ("agents" | "approvalPolicy" | "approvals" | "changes" | "commands" | "deliveries" | "frozen" | "guests" | "labels" | "memories" | "memoryScopes" | "monitor" | "privateRevision" | "sprinkles" | "state" | "vault" | "views")[];
 export declare const AgentTranscript: RemoteContract;
 export declare const REMOTE_METHODS: ("abort" | "close" | "next" | "prompt" | "watch")[];
 export declare const REMOTE_READS: readonly (keyof AgentRemote & string)[];
@@ -294,9 +298,13 @@ export interface AgentGuest {
     readonly seat: ReplicatedState<GuestShown>;
     readonly proposals: ReplicatedState<GuestProposal[]>;
     propose(request: ProposeRequest, context: Context): Promise<Proposed>;
+    guestOpen(draft: GuestDraft, context: Context): Promise<GuestOpened>;
+    guestRevoke(id: string, context: Context): Promise<{
+        revoked: boolean;
+    }>;
 }
 export declare const GUEST_STATES: readonly ['transcript', 'seat', 'proposals'];
-export declare const GUEST_METHODS: readonly ['propose'];
+export declare const GUEST_METHODS: readonly ['propose', 'guestOpen', 'guestRevoke'];
 export declare const AgentGuestService: RemoteContract;
 export declare const AgentRemoteService: RemoteContract;
 export declare const PAGE_METHODS: ("answer" | "close" | "next" | "open" | "report")[];

package/dist/types/spectrum/guest-port.d.ts

@@ -1,4 +1,4 @@
-import type { GuestDraft, GuestEvents, GuestPort, GuestSeat } from '@ai-ecoverse/slicc-spectrum/ui';
+import type { GuestDraft, GuestEvents, GuestGate, GuestPort, GuestSeat } from '@ai-ecoverse/slicc-spectrum/ui';
 import type { AgentConnection } from '../client.ts';
 import { Emitter } from './emitter.ts';
 export interface GuestHub {
@@ -11,12 +11,17 @@ export interface GuestHub {
     revoke(id: string): Promise<void>;
 }
 export declare const NO_HUB = "Inviting guests needs the tray hub.";
-export declare const NO_CONTROL = "Only a tab with Control can invite guests.";
-export declare const NO_OWNER = "Only the owner's tab can invite guests.";
+export declare const NOT_OWNER_DEVICE = "Only the owner's devices can invite guests.";
+export declare const NO_CONTROL = "Only the owner's devices can invite guests.";
+export declare const NO_OWNER = "Only the owner's devices can invite guests.";
 export declare class GuestAdapter extends Emitter<GuestEvents> implements GuestPort {
     #private;
     constructor(connection: AgentConnection, hub: GuestHub | null);
     list(): readonly GuestSeat[];
+    gates(): {
+        messages: GuestGate[];
+        tools: GuestGate[];
+    };
     unavailable(): string | null;
     mint(agentId: string, draft: GuestDraft): Promise<{
         seat: GuestSeat;

package/dist/types/spectrum/index.d.ts

@@ -15,7 +15,7 @@ import { TrayAdapter } from './tray-port.ts';
 export { AgentAdapter, CONE } from './agent-port.ts';
 export { ApprovalsAdapter, type HostApprovals, NOT_HERE, shown as shownApproval, } from './approvals-port.ts';
 export { ChangesAdapter, type ChangesEvents } from './changes-port.ts';
-export { GuestAdapter, type GuestHub, NO_CONTROL, NO_HUB, NO_OWNER, } from './guest-port.ts';
+export { GuestAdapter, type GuestHub, NO_CONTROL, NO_HUB, NO_OWNER, NOT_OWNER_DEVICE, } from './guest-port.ts';
 export { MemoryAdapter } from './memory-port.ts';
 export { assistant, errorAction, errorPart, isBusy, queued, textOf, toMessages, } from './messages.ts';
 export { MonitorAdapter, type MonitorAdapterOptions, type MonitorInput, monitorSnapshot, } from './monitor-port.ts';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-agent",
-  "version": "5.4.1",
+  "version": "5.5.0",
   "description": "SLICC's agent core on pi durable: an agent worker, session storage, remoting and pi extensions",
   "type": "module",
   "license": "Apache-2.0",
@@ -92,7 +92,7 @@
   },
   "peerDependencies": {
     "@ai-ecoverse/slicc-kernel": ">=1.90.0 <2",
-    "@ai-ecoverse/slicc-spectrum": "^1.79.0"
+    "@ai-ecoverse/slicc-spectrum": "^1.80.0"
   },
   "peerDependenciesMeta": {
     "@ai-ecoverse/slicc-spectrum": {