@creatornader/agent-bridge 0.3.1 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (90) hide show
  1. package/CHANGELOG.md +222 -1
  2. package/README.md +312 -12
  3. package/ROADMAP.md +88 -7
  4. package/SECURITY.md +78 -5
  5. package/SKILL.md +108 -1
  6. package/dist/archive.d.ts +2 -2
  7. package/dist/archive.js +2 -2
  8. package/dist/{bridge-service-hX1ZQp4W.d.ts → bridge-service-CNBKdYXh.d.ts} +2 -1
  9. package/dist/{bridge-store-DPVSCwfs.d.ts → bridge-store-ByJ6CaJk.d.ts} +3 -0
  10. package/dist/bridge.d.ts +25 -8
  11. package/dist/bridge.js +19 -9
  12. package/dist/{chunk-MBPZXTJA.js → chunk-7VJI2MXI.js} +285 -42
  13. package/dist/chunk-7VJI2MXI.js.map +1 -0
  14. package/dist/{chunk-4VB44KJU.js → chunk-AWE3DFZV.js} +3 -2
  15. package/dist/chunk-AWE3DFZV.js.map +1 -0
  16. package/dist/{chunk-GADH244D.js → chunk-E4OWHGUE.js} +16 -5
  17. package/dist/chunk-E4OWHGUE.js.map +1 -0
  18. package/dist/{chunk-NCO7RLBM.js → chunk-GTK4KOED.js} +108 -8
  19. package/dist/chunk-GTK4KOED.js.map +1 -0
  20. package/dist/{chunk-SPSMZOCJ.js → chunk-HUHG7XTB.js} +6 -5
  21. package/dist/chunk-HUHG7XTB.js.map +1 -0
  22. package/dist/{chunk-5GMB3A77.js → chunk-IVG4XWWS.js} +26 -14
  23. package/dist/chunk-IVG4XWWS.js.map +1 -0
  24. package/dist/{chunk-WAI2IYIQ.js → chunk-P635FAN4.js} +50 -7
  25. package/dist/chunk-P635FAN4.js.map +1 -0
  26. package/dist/{chunk-45BZGB77.js → chunk-QNXHDOJ5.js} +218 -24
  27. package/dist/chunk-QNXHDOJ5.js.map +1 -0
  28. package/dist/{chunk-UAHMP6GC.js → chunk-QPC6JHA3.js} +10 -7
  29. package/dist/chunk-QPC6JHA3.js.map +1 -0
  30. package/dist/{chunk-Q6PPMXJC.js → chunk-SN7PIVDF.js} +377 -21
  31. package/dist/chunk-SN7PIVDF.js.map +1 -0
  32. package/dist/{chunk-A6W4QALF.js → chunk-TC6A7GMF.js} +2 -2
  33. package/dist/{chunk-2DFNOLMO.js → chunk-XDNT6ZNZ.js} +9 -6
  34. package/dist/chunk-XDNT6ZNZ.js.map +1 -0
  35. package/dist/{chunk-CEXBMOI5.js → chunk-Z6JP6MYD.js} +2 -2
  36. package/dist/cli.js +5867 -438
  37. package/dist/cli.js.map +1 -1
  38. package/dist/client-runtime.d.ts +4 -2
  39. package/dist/client-runtime.js +7 -7
  40. package/dist/contracts/generate.js +1 -1
  41. package/dist/dr.d.ts +9 -2
  42. package/dist/dr.js +6 -4
  43. package/dist/{gateway-CggQ8vTC.d.ts → gateway-CW-61lvs.d.ts} +27 -3
  44. package/dist/gateway-main.js +71 -7
  45. package/dist/gateway-main.js.map +1 -1
  46. package/dist/gateway.d.ts +3 -3
  47. package/dist/gateway.js +3 -3
  48. package/dist/index.js +8 -8
  49. package/dist/{postgres-bridge-store-Bfd3hRId.d.ts → postgres-bridge-store-C9KG9Z69.d.ts} +1 -1
  50. package/dist/postgres-production-preflight.d.ts +32 -0
  51. package/dist/postgres-production-preflight.js +249 -0
  52. package/dist/postgres-production-preflight.js.map +1 -0
  53. package/dist/server.js +8 -8
  54. package/dist/sqlite-edge-store-CdMIOrho.d.ts +148 -0
  55. package/dist/sqlite.d.ts +19 -80
  56. package/dist/sqlite.js +11 -3
  57. package/docs/architecture-v2.md +292 -15
  58. package/docs/decisions/0004-client-lifecycle-and-endpoint-migration.md +204 -0
  59. package/docs/deployment.md +349 -0
  60. package/docs/troubleshooting.md +23 -0
  61. package/llms.txt +69 -1
  62. package/openapi/agent-bridge-v2.openapi.json +1151 -124
  63. package/package.json +10 -2
  64. package/schemas/agent-bridge-v2.capabilities.json +26 -1
  65. package/schemas/agent-bridge-v2.mcp.json +11 -1
  66. package/schemas/agent-bridge-v2.schema.json +167 -0
  67. package/sql/migrations/007_runtime_role.sql +8 -4
  68. package/sql/migrations/013_row_isolation.sql +71 -8
  69. package/sql/migrations/014_owner_control_plane.sql +124 -31
  70. package/sql/migrations/015_portable_archives.sql +143 -41
  71. package/sql/migrations/016_native_dr_fence.sql +102 -35
  72. package/sql/migrations/017_gateway_authority_binding.sql +99 -0
  73. package/sql/migrations/018_endpoint_migration_challenges.sql +1054 -0
  74. package/sql/migrations/019_endpoint_migration_same_successor.sql +348 -0
  75. package/sql/migrations/020_managed_authority_compat.sql +698 -0
  76. package/sql/migrations/021_native_backup_reader.sql +421 -0
  77. package/sql/setup.sql +1 -3
  78. package/dist/chunk-2DFNOLMO.js.map +0 -1
  79. package/dist/chunk-45BZGB77.js.map +0 -1
  80. package/dist/chunk-4VB44KJU.js.map +0 -1
  81. package/dist/chunk-5GMB3A77.js.map +0 -1
  82. package/dist/chunk-GADH244D.js.map +0 -1
  83. package/dist/chunk-MBPZXTJA.js.map +0 -1
  84. package/dist/chunk-NCO7RLBM.js.map +0 -1
  85. package/dist/chunk-Q6PPMXJC.js.map +0 -1
  86. package/dist/chunk-SPSMZOCJ.js.map +0 -1
  87. package/dist/chunk-UAHMP6GC.js.map +0 -1
  88. package/dist/chunk-WAI2IYIQ.js.map +0 -1
  89. /package/dist/{chunk-A6W4QALF.js.map → chunk-TC6A7GMF.js.map} +0 -0
  90. /package/dist/{chunk-CEXBMOI5.js.map → chunk-Z6JP6MYD.js.map} +0 -0
package/openapi/agent-bridge-v2.openapi.json CHANGED
@@ -349,6 +349,12 @@
349
349
  "legacy-supabase"
350
350
  ]
351
351
  },
352
+ "grantedScopes": {
353
+ "type": "array",
354
+ "items": {
355
+ "type": "string"
356
+ }
357
+ },
352
358
  "operations": {
353
359
  "type": "array",
354
360
  "items": {
@@ -379,7 +385,1097 @@
379
385
  }
380
386
  }
381
387
  },
382
- "additionalProperties": true
388
+ "additionalProperties": true
389
+ }
390
+ }
391
+ }
392
+ },
393
+ "400": {
394
+ "description": "The request does not match the operation contract.",
395
+ "headers": {
396
+ "x-agent-bridge-protocol-version": {
397
+ "description": "Selected Agent Bridge protocol version.",
398
+ "required": true,
399
+ "schema": {
400
+ "type": "string",
401
+ "enum": [
402
+ "2.0",
403
+ "2.1"
404
+ ]
405
+ }
406
+ },
407
+ "x-agent-bridge-supported-protocol-versions": {
408
+ "description": "Comma-separated protocol versions supported by this gateway.",
409
+ "required": true,
410
+ "schema": {
411
+ "type": "string"
412
+ }
413
+ }
414
+ },
415
+ "content": {
416
+ "application/json": {
417
+ "schema": {
418
+ "$ref": "#/components/schemas/ErrorEnvelope"
419
+ }
420
+ }
421
+ }
422
+ },
423
+ "401": {
424
+ "description": "The bearer credential is missing or invalid.",
425
+ "headers": {
426
+ "x-agent-bridge-protocol-version": {
427
+ "description": "Selected Agent Bridge protocol version.",
428
+ "required": true,
429
+ "schema": {
430
+ "type": "string",
431
+ "enum": [
432
+ "2.0",
433
+ "2.1"
434
+ ]
435
+ }
436
+ },
437
+ "x-agent-bridge-supported-protocol-versions": {
438
+ "description": "Comma-separated protocol versions supported by this gateway.",
439
+ "required": true,
440
+ "schema": {
441
+ "type": "string"
442
+ }
443
+ }
444
+ },
445
+ "content": {
446
+ "application/json": {
447
+ "schema": {
448
+ "$ref": "#/components/schemas/ErrorEnvelope"
449
+ }
450
+ }
451
+ }
452
+ },
453
+ "403": {
454
+ "description": "The credential cannot access the requested principal or origin.",
455
+ "headers": {
456
+ "x-agent-bridge-protocol-version": {
457
+ "description": "Selected Agent Bridge protocol version.",
458
+ "required": true,
459
+ "schema": {
460
+ "type": "string",
461
+ "enum": [
462
+ "2.0",
463
+ "2.1"
464
+ ]
465
+ }
466
+ },
467
+ "x-agent-bridge-supported-protocol-versions": {
468
+ "description": "Comma-separated protocol versions supported by this gateway.",
469
+ "required": true,
470
+ "schema": {
471
+ "type": "string"
472
+ }
473
+ }
474
+ },
475
+ "content": {
476
+ "application/json": {
477
+ "schema": {
478
+ "$ref": "#/components/schemas/ErrorEnvelope"
479
+ }
480
+ }
481
+ }
482
+ },
483
+ "404": {
484
+ "description": "The route or requested resource does not exist.",
485
+ "headers": {
486
+ "x-agent-bridge-protocol-version": {
487
+ "description": "Selected Agent Bridge protocol version.",
488
+ "required": true,
489
+ "schema": {
490
+ "type": "string",
491
+ "enum": [
492
+ "2.0",
493
+ "2.1"
494
+ ]
495
+ }
496
+ },
497
+ "x-agent-bridge-supported-protocol-versions": {
498
+ "description": "Comma-separated protocol versions supported by this gateway.",
499
+ "required": true,
500
+ "schema": {
501
+ "type": "string"
502
+ }
503
+ }
504
+ },
505
+ "content": {
506
+ "application/json": {
507
+ "schema": {
508
+ "$ref": "#/components/schemas/ErrorEnvelope"
509
+ }
510
+ }
511
+ }
512
+ },
513
+ "409": {
514
+ "description": "The request conflicts with current delivery or idempotency state.",
515
+ "headers": {
516
+ "x-agent-bridge-protocol-version": {
517
+ "description": "Selected Agent Bridge protocol version.",
518
+ "required": true,
519
+ "schema": {
520
+ "type": "string",
521
+ "enum": [
522
+ "2.0",
523
+ "2.1"
524
+ ]
525
+ }
526
+ },
527
+ "x-agent-bridge-supported-protocol-versions": {
528
+ "description": "Comma-separated protocol versions supported by this gateway.",
529
+ "required": true,
530
+ "schema": {
531
+ "type": "string"
532
+ }
533
+ }
534
+ },
535
+ "content": {
536
+ "application/json": {
537
+ "schema": {
538
+ "$ref": "#/components/schemas/ErrorEnvelope"
539
+ }
540
+ }
541
+ }
542
+ },
543
+ "413": {
544
+ "description": "The request body exceeds the configured limit.",
545
+ "headers": {
546
+ "x-agent-bridge-protocol-version": {
547
+ "description": "Selected Agent Bridge protocol version.",
548
+ "required": true,
549
+ "schema": {
550
+ "type": "string",
551
+ "enum": [
552
+ "2.0",
553
+ "2.1"
554
+ ]
555
+ }
556
+ },
557
+ "x-agent-bridge-supported-protocol-versions": {
558
+ "description": "Comma-separated protocol versions supported by this gateway.",
559
+ "required": true,
560
+ "schema": {
561
+ "type": "string"
562
+ }
563
+ }
564
+ },
565
+ "content": {
566
+ "application/json": {
567
+ "schema": {
568
+ "$ref": "#/components/schemas/ErrorEnvelope"
569
+ }
570
+ }
571
+ }
572
+ },
573
+ "415": {
574
+ "description": "The request content type is not application/json.",
575
+ "headers": {
576
+ "x-agent-bridge-protocol-version": {
577
+ "description": "Selected Agent Bridge protocol version.",
578
+ "required": true,
579
+ "schema": {
580
+ "type": "string",
581
+ "enum": [
582
+ "2.0",
583
+ "2.1"
584
+ ]
585
+ }
586
+ },
587
+ "x-agent-bridge-supported-protocol-versions": {
588
+ "description": "Comma-separated protocol versions supported by this gateway.",
589
+ "required": true,
590
+ "schema": {
591
+ "type": "string"
592
+ }
593
+ }
594
+ },
595
+ "content": {
596
+ "application/json": {
597
+ "schema": {
598
+ "$ref": "#/components/schemas/ErrorEnvelope"
599
+ }
600
+ }
601
+ }
602
+ },
603
+ "426": {
604
+ "description": "The requested protocol version is unsupported.",
605
+ "headers": {
606
+ "x-agent-bridge-protocol-version": {
607
+ "description": "Selected Agent Bridge protocol version.",
608
+ "required": true,
609
+ "schema": {
610
+ "type": "string",
611
+ "enum": [
612
+ "2.0",
613
+ "2.1"
614
+ ]
615
+ }
616
+ },
617
+ "x-agent-bridge-supported-protocol-versions": {
618
+ "description": "Comma-separated protocol versions supported by this gateway.",
619
+ "required": true,
620
+ "schema": {
621
+ "type": "string"
622
+ }
623
+ }
624
+ },
625
+ "content": {
626
+ "application/json": {
627
+ "schema": {
628
+ "$ref": "#/components/schemas/ErrorEnvelope"
629
+ }
630
+ }
631
+ }
632
+ },
633
+ "429": {
634
+ "description": "The gateway has rate-limited the request.",
635
+ "headers": {
636
+ "x-agent-bridge-protocol-version": {
637
+ "description": "Selected Agent Bridge protocol version.",
638
+ "required": true,
639
+ "schema": {
640
+ "type": "string",
641
+ "enum": [
642
+ "2.0",
643
+ "2.1"
644
+ ]
645
+ }
646
+ },
647
+ "x-agent-bridge-supported-protocol-versions": {
648
+ "description": "Comma-separated protocol versions supported by this gateway.",
649
+ "required": true,
650
+ "schema": {
651
+ "type": "string"
652
+ }
653
+ }
654
+ },
655
+ "content": {
656
+ "application/json": {
657
+ "schema": {
658
+ "$ref": "#/components/schemas/ErrorEnvelope"
659
+ }
660
+ }
661
+ }
662
+ },
663
+ "500": {
664
+ "description": "The gateway could not complete the request.",
665
+ "headers": {
666
+ "x-agent-bridge-protocol-version": {
667
+ "description": "Selected Agent Bridge protocol version.",
668
+ "required": true,
669
+ "schema": {
670
+ "type": "string",
671
+ "enum": [
672
+ "2.0",
673
+ "2.1"
674
+ ]
675
+ }
676
+ },
677
+ "x-agent-bridge-supported-protocol-versions": {
678
+ "description": "Comma-separated protocol versions supported by this gateway.",
679
+ "required": true,
680
+ "schema": {
681
+ "type": "string"
682
+ }
683
+ }
684
+ },
685
+ "content": {
686
+ "application/json": {
687
+ "schema": {
688
+ "$ref": "#/components/schemas/ErrorEnvelope"
689
+ }
690
+ }
691
+ }
692
+ },
693
+ "502": {
694
+ "description": "The upstream response does not match the selected protocol contract.",
695
+ "headers": {
696
+ "x-agent-bridge-protocol-version": {
697
+ "description": "Selected Agent Bridge protocol version.",
698
+ "required": true,
699
+ "schema": {
700
+ "type": "string",
701
+ "enum": [
702
+ "2.0",
703
+ "2.1"
704
+ ]
705
+ }
706
+ },
707
+ "x-agent-bridge-supported-protocol-versions": {
708
+ "description": "Comma-separated protocol versions supported by this gateway.",
709
+ "required": true,
710
+ "schema": {
711
+ "type": "string"
712
+ }
713
+ }
714
+ },
715
+ "content": {
716
+ "application/json": {
717
+ "schema": {
718
+ "$ref": "#/components/schemas/ErrorEnvelope"
719
+ }
720
+ }
721
+ }
722
+ },
723
+ "503": {
724
+ "description": "The backing service is unavailable.",
725
+ "headers": {
726
+ "x-agent-bridge-protocol-version": {
727
+ "description": "Selected Agent Bridge protocol version.",
728
+ "required": true,
729
+ "schema": {
730
+ "type": "string",
731
+ "enum": [
732
+ "2.0",
733
+ "2.1"
734
+ ]
735
+ }
736
+ },
737
+ "x-agent-bridge-supported-protocol-versions": {
738
+ "description": "Comma-separated protocol versions supported by this gateway.",
739
+ "required": true,
740
+ "schema": {
741
+ "type": "string"
742
+ }
743
+ }
744
+ },
745
+ "content": {
746
+ "application/json": {
747
+ "schema": {
748
+ "$ref": "#/components/schemas/ErrorEnvelope"
749
+ }
750
+ }
751
+ }
752
+ },
753
+ "504": {
754
+ "description": "The request exceeded the gateway deadline.",
755
+ "headers": {
756
+ "x-agent-bridge-protocol-version": {
757
+ "description": "Selected Agent Bridge protocol version.",
758
+ "required": true,
759
+ "schema": {
760
+ "type": "string",
761
+ "enum": [
762
+ "2.0",
763
+ "2.1"
764
+ ]
765
+ }
766
+ },
767
+ "x-agent-bridge-supported-protocol-versions": {
768
+ "description": "Comma-separated protocol versions supported by this gateway.",
769
+ "required": true,
770
+ "schema": {
771
+ "type": "string"
772
+ }
773
+ }
774
+ },
775
+ "content": {
776
+ "application/json": {
777
+ "schema": {
778
+ "$ref": "#/components/schemas/ErrorEnvelope"
779
+ }
780
+ }
781
+ }
782
+ }
783
+ }
784
+ }
785
+ },
786
+ "/v2/status": {
787
+ "get": {
788
+ "operationId": "status",
789
+ "summary": "Read gateway delivery diagnostics.",
790
+ "security": [
791
+ {
792
+ "bearerAuth": []
793
+ }
794
+ ],
795
+ "x-agent-bridge-required-scopes": [
796
+ "status:read"
797
+ ],
798
+ "x-agent-bridge-scope-enforcement": true,
799
+ "parameters": [
800
+ {
801
+ "name": "x-agent-bridge-protocol-version",
802
+ "in": "header",
803
+ "required": true,
804
+ "description": "This OpenAPI operation describes protocol 2.1. Headerless protocol 2.0 uses the separate schemas named by x-agent-bridge-protocol-2.0.",
805
+ "schema": {
806
+ "type": "string",
807
+ "enum": [
808
+ "2.1"
809
+ ]
810
+ }
811
+ }
812
+ ],
813
+ "responses": {
814
+ "200": {
815
+ "description": "Successful response.",
816
+ "headers": {
817
+ "x-agent-bridge-protocol-version": {
818
+ "description": "Selected Agent Bridge protocol version.",
819
+ "required": true,
820
+ "schema": {
821
+ "type": "string",
822
+ "enum": [
823
+ "2.0",
824
+ "2.1"
825
+ ]
826
+ }
827
+ },
828
+ "x-agent-bridge-supported-protocol-versions": {
829
+ "description": "Comma-separated protocol versions supported by this gateway.",
830
+ "required": true,
831
+ "schema": {
832
+ "type": "string"
833
+ }
834
+ }
835
+ },
836
+ "content": {
837
+ "application/json": {
838
+ "schema": {
839
+ "type": "object",
840
+ "required": [
841
+ "schemaVersion",
842
+ "deliverySupported",
843
+ "pending",
844
+ "claimed",
845
+ "retrying",
846
+ "dead"
847
+ ],
848
+ "properties": {
849
+ "schemaVersion": {
850
+ "enum": [
851
+ "local-v2",
852
+ "postgres-v2",
853
+ "legacy-v1"
854
+ ]
855
+ },
856
+ "deliverySupported": {
857
+ "type": "boolean"
858
+ },
859
+ "pending": {
860
+ "anyOf": [
861
+ {
862
+ "type": "number"
863
+ },
864
+ {
865
+ "type": "null"
866
+ }
867
+ ]
868
+ },
869
+ "claimed": {
870
+ "anyOf": [
871
+ {
872
+ "type": "number"
873
+ },
874
+ {
875
+ "type": "null"
876
+ }
877
+ ]
878
+ },
879
+ "retrying": {
880
+ "anyOf": [
881
+ {
882
+ "type": "number"
883
+ },
884
+ {
885
+ "type": "null"
886
+ }
887
+ ]
888
+ },
889
+ "dead": {
890
+ "anyOf": [
891
+ {
892
+ "type": "number"
893
+ },
894
+ {
895
+ "type": "null"
896
+ }
897
+ ]
898
+ },
899
+ "cancelled": {
900
+ "anyOf": [
901
+ {
902
+ "type": "number"
903
+ },
904
+ {
905
+ "type": "null"
906
+ }
907
+ ]
908
+ },
909
+ "oldestAvailableAt": {
910
+ "type": "string"
911
+ },
912
+ "due": {
913
+ "anyOf": [
914
+ {
915
+ "type": "number"
916
+ },
917
+ {
918
+ "type": "null"
919
+ }
920
+ ]
921
+ },
922
+ "scheduled": {
923
+ "anyOf": [
924
+ {
925
+ "type": "number"
926
+ },
927
+ {
928
+ "type": "null"
929
+ }
930
+ ]
931
+ },
932
+ "expiredLeases": {
933
+ "anyOf": [
934
+ {
935
+ "type": "number"
936
+ },
937
+ {
938
+ "type": "null"
939
+ }
940
+ ]
941
+ },
942
+ "oldestDueAt": {
943
+ "type": "string"
944
+ },
945
+ "queueLagMs": {
946
+ "anyOf": [
947
+ {
948
+ "type": "number"
949
+ },
950
+ {
951
+ "type": "null"
952
+ }
953
+ ]
954
+ },
955
+ "gatewayAuthorityId": {
956
+ "type": "string"
957
+ },
958
+ "credentialId": {
959
+ "type": "string"
960
+ },
961
+ "principal": {
962
+ "type": "object",
963
+ "required": [
964
+ "workspace",
965
+ "agent"
966
+ ],
967
+ "properties": {
968
+ "workspace": {
969
+ "type": "string"
970
+ },
971
+ "agent": {
972
+ "type": "string"
973
+ }
974
+ },
975
+ "additionalProperties": true
976
+ }
977
+ },
978
+ "additionalProperties": true
979
+ }
980
+ }
981
+ }
982
+ },
983
+ "400": {
984
+ "description": "The request does not match the operation contract.",
985
+ "headers": {
986
+ "x-agent-bridge-protocol-version": {
987
+ "description": "Selected Agent Bridge protocol version.",
988
+ "required": true,
989
+ "schema": {
990
+ "type": "string",
991
+ "enum": [
992
+ "2.0",
993
+ "2.1"
994
+ ]
995
+ }
996
+ },
997
+ "x-agent-bridge-supported-protocol-versions": {
998
+ "description": "Comma-separated protocol versions supported by this gateway.",
999
+ "required": true,
1000
+ "schema": {
1001
+ "type": "string"
1002
+ }
1003
+ }
1004
+ },
1005
+ "content": {
1006
+ "application/json": {
1007
+ "schema": {
1008
+ "$ref": "#/components/schemas/ErrorEnvelope"
1009
+ }
1010
+ }
1011
+ }
1012
+ },
1013
+ "401": {
1014
+ "description": "The bearer credential is missing or invalid.",
1015
+ "headers": {
1016
+ "x-agent-bridge-protocol-version": {
1017
+ "description": "Selected Agent Bridge protocol version.",
1018
+ "required": true,
1019
+ "schema": {
1020
+ "type": "string",
1021
+ "enum": [
1022
+ "2.0",
1023
+ "2.1"
1024
+ ]
1025
+ }
1026
+ },
1027
+ "x-agent-bridge-supported-protocol-versions": {
1028
+ "description": "Comma-separated protocol versions supported by this gateway.",
1029
+ "required": true,
1030
+ "schema": {
1031
+ "type": "string"
1032
+ }
1033
+ }
1034
+ },
1035
+ "content": {
1036
+ "application/json": {
1037
+ "schema": {
1038
+ "$ref": "#/components/schemas/ErrorEnvelope"
1039
+ }
1040
+ }
1041
+ }
1042
+ },
1043
+ "403": {
1044
+ "description": "The credential cannot access the requested principal or origin.",
1045
+ "headers": {
1046
+ "x-agent-bridge-protocol-version": {
1047
+ "description": "Selected Agent Bridge protocol version.",
1048
+ "required": true,
1049
+ "schema": {
1050
+ "type": "string",
1051
+ "enum": [
1052
+ "2.0",
1053
+ "2.1"
1054
+ ]
1055
+ }
1056
+ },
1057
+ "x-agent-bridge-supported-protocol-versions": {
1058
+ "description": "Comma-separated protocol versions supported by this gateway.",
1059
+ "required": true,
1060
+ "schema": {
1061
+ "type": "string"
1062
+ }
1063
+ }
1064
+ },
1065
+ "content": {
1066
+ "application/json": {
1067
+ "schema": {
1068
+ "$ref": "#/components/schemas/ErrorEnvelope"
1069
+ }
1070
+ }
1071
+ }
1072
+ },
1073
+ "404": {
1074
+ "description": "The route or requested resource does not exist.",
1075
+ "headers": {
1076
+ "x-agent-bridge-protocol-version": {
1077
+ "description": "Selected Agent Bridge protocol version.",
1078
+ "required": true,
1079
+ "schema": {
1080
+ "type": "string",
1081
+ "enum": [
1082
+ "2.0",
1083
+ "2.1"
1084
+ ]
1085
+ }
1086
+ },
1087
+ "x-agent-bridge-supported-protocol-versions": {
1088
+ "description": "Comma-separated protocol versions supported by this gateway.",
1089
+ "required": true,
1090
+ "schema": {
1091
+ "type": "string"
1092
+ }
1093
+ }
1094
+ },
1095
+ "content": {
1096
+ "application/json": {
1097
+ "schema": {
1098
+ "$ref": "#/components/schemas/ErrorEnvelope"
1099
+ }
1100
+ }
1101
+ }
1102
+ },
1103
+ "409": {
1104
+ "description": "The request conflicts with current delivery or idempotency state.",
1105
+ "headers": {
1106
+ "x-agent-bridge-protocol-version": {
1107
+ "description": "Selected Agent Bridge protocol version.",
1108
+ "required": true,
1109
+ "schema": {
1110
+ "type": "string",
1111
+ "enum": [
1112
+ "2.0",
1113
+ "2.1"
1114
+ ]
1115
+ }
1116
+ },
1117
+ "x-agent-bridge-supported-protocol-versions": {
1118
+ "description": "Comma-separated protocol versions supported by this gateway.",
1119
+ "required": true,
1120
+ "schema": {
1121
+ "type": "string"
1122
+ }
1123
+ }
1124
+ },
1125
+ "content": {
1126
+ "application/json": {
1127
+ "schema": {
1128
+ "$ref": "#/components/schemas/ErrorEnvelope"
1129
+ }
1130
+ }
1131
+ }
1132
+ },
1133
+ "413": {
1134
+ "description": "The request body exceeds the configured limit.",
1135
+ "headers": {
1136
+ "x-agent-bridge-protocol-version": {
1137
+ "description": "Selected Agent Bridge protocol version.",
1138
+ "required": true,
1139
+ "schema": {
1140
+ "type": "string",
1141
+ "enum": [
1142
+ "2.0",
1143
+ "2.1"
1144
+ ]
1145
+ }
1146
+ },
1147
+ "x-agent-bridge-supported-protocol-versions": {
1148
+ "description": "Comma-separated protocol versions supported by this gateway.",
1149
+ "required": true,
1150
+ "schema": {
1151
+ "type": "string"
1152
+ }
1153
+ }
1154
+ },
1155
+ "content": {
1156
+ "application/json": {
1157
+ "schema": {
1158
+ "$ref": "#/components/schemas/ErrorEnvelope"
1159
+ }
1160
+ }
1161
+ }
1162
+ },
1163
+ "415": {
1164
+ "description": "The request content type is not application/json.",
1165
+ "headers": {
1166
+ "x-agent-bridge-protocol-version": {
1167
+ "description": "Selected Agent Bridge protocol version.",
1168
+ "required": true,
1169
+ "schema": {
1170
+ "type": "string",
1171
+ "enum": [
1172
+ "2.0",
1173
+ "2.1"
1174
+ ]
1175
+ }
1176
+ },
1177
+ "x-agent-bridge-supported-protocol-versions": {
1178
+ "description": "Comma-separated protocol versions supported by this gateway.",
1179
+ "required": true,
1180
+ "schema": {
1181
+ "type": "string"
1182
+ }
1183
+ }
1184
+ },
1185
+ "content": {
1186
+ "application/json": {
1187
+ "schema": {
1188
+ "$ref": "#/components/schemas/ErrorEnvelope"
1189
+ }
1190
+ }
1191
+ }
1192
+ },
1193
+ "426": {
1194
+ "description": "The requested protocol version is unsupported.",
1195
+ "headers": {
1196
+ "x-agent-bridge-protocol-version": {
1197
+ "description": "Selected Agent Bridge protocol version.",
1198
+ "required": true,
1199
+ "schema": {
1200
+ "type": "string",
1201
+ "enum": [
1202
+ "2.0",
1203
+ "2.1"
1204
+ ]
1205
+ }
1206
+ },
1207
+ "x-agent-bridge-supported-protocol-versions": {
1208
+ "description": "Comma-separated protocol versions supported by this gateway.",
1209
+ "required": true,
1210
+ "schema": {
1211
+ "type": "string"
1212
+ }
1213
+ }
1214
+ },
1215
+ "content": {
1216
+ "application/json": {
1217
+ "schema": {
1218
+ "$ref": "#/components/schemas/ErrorEnvelope"
1219
+ }
1220
+ }
1221
+ }
1222
+ },
1223
+ "429": {
1224
+ "description": "The gateway has rate-limited the request.",
1225
+ "headers": {
1226
+ "x-agent-bridge-protocol-version": {
1227
+ "description": "Selected Agent Bridge protocol version.",
1228
+ "required": true,
1229
+ "schema": {
1230
+ "type": "string",
1231
+ "enum": [
1232
+ "2.0",
1233
+ "2.1"
1234
+ ]
1235
+ }
1236
+ },
1237
+ "x-agent-bridge-supported-protocol-versions": {
1238
+ "description": "Comma-separated protocol versions supported by this gateway.",
1239
+ "required": true,
1240
+ "schema": {
1241
+ "type": "string"
1242
+ }
1243
+ }
1244
+ },
1245
+ "content": {
1246
+ "application/json": {
1247
+ "schema": {
1248
+ "$ref": "#/components/schemas/ErrorEnvelope"
1249
+ }
1250
+ }
1251
+ }
1252
+ },
1253
+ "500": {
1254
+ "description": "The gateway could not complete the request.",
1255
+ "headers": {
1256
+ "x-agent-bridge-protocol-version": {
1257
+ "description": "Selected Agent Bridge protocol version.",
1258
+ "required": true,
1259
+ "schema": {
1260
+ "type": "string",
1261
+ "enum": [
1262
+ "2.0",
1263
+ "2.1"
1264
+ ]
1265
+ }
1266
+ },
1267
+ "x-agent-bridge-supported-protocol-versions": {
1268
+ "description": "Comma-separated protocol versions supported by this gateway.",
1269
+ "required": true,
1270
+ "schema": {
1271
+ "type": "string"
1272
+ }
1273
+ }
1274
+ },
1275
+ "content": {
1276
+ "application/json": {
1277
+ "schema": {
1278
+ "$ref": "#/components/schemas/ErrorEnvelope"
1279
+ }
1280
+ }
1281
+ }
1282
+ },
1283
+ "502": {
1284
+ "description": "The upstream response does not match the selected protocol contract.",
1285
+ "headers": {
1286
+ "x-agent-bridge-protocol-version": {
1287
+ "description": "Selected Agent Bridge protocol version.",
1288
+ "required": true,
1289
+ "schema": {
1290
+ "type": "string",
1291
+ "enum": [
1292
+ "2.0",
1293
+ "2.1"
1294
+ ]
1295
+ }
1296
+ },
1297
+ "x-agent-bridge-supported-protocol-versions": {
1298
+ "description": "Comma-separated protocol versions supported by this gateway.",
1299
+ "required": true,
1300
+ "schema": {
1301
+ "type": "string"
1302
+ }
1303
+ }
1304
+ },
1305
+ "content": {
1306
+ "application/json": {
1307
+ "schema": {
1308
+ "$ref": "#/components/schemas/ErrorEnvelope"
1309
+ }
1310
+ }
1311
+ }
1312
+ },
1313
+ "503": {
1314
+ "description": "The backing service is unavailable.",
1315
+ "headers": {
1316
+ "x-agent-bridge-protocol-version": {
1317
+ "description": "Selected Agent Bridge protocol version.",
1318
+ "required": true,
1319
+ "schema": {
1320
+ "type": "string",
1321
+ "enum": [
1322
+ "2.0",
1323
+ "2.1"
1324
+ ]
1325
+ }
1326
+ },
1327
+ "x-agent-bridge-supported-protocol-versions": {
1328
+ "description": "Comma-separated protocol versions supported by this gateway.",
1329
+ "required": true,
1330
+ "schema": {
1331
+ "type": "string"
1332
+ }
1333
+ }
1334
+ },
1335
+ "content": {
1336
+ "application/json": {
1337
+ "schema": {
1338
+ "$ref": "#/components/schemas/ErrorEnvelope"
1339
+ }
1340
+ }
1341
+ }
1342
+ },
1343
+ "504": {
1344
+ "description": "The request exceeded the gateway deadline.",
1345
+ "headers": {
1346
+ "x-agent-bridge-protocol-version": {
1347
+ "description": "Selected Agent Bridge protocol version.",
1348
+ "required": true,
1349
+ "schema": {
1350
+ "type": "string",
1351
+ "enum": [
1352
+ "2.0",
1353
+ "2.1"
1354
+ ]
1355
+ }
1356
+ },
1357
+ "x-agent-bridge-supported-protocol-versions": {
1358
+ "description": "Comma-separated protocol versions supported by this gateway.",
1359
+ "required": true,
1360
+ "schema": {
1361
+ "type": "string"
1362
+ }
1363
+ }
1364
+ },
1365
+ "content": {
1366
+ "application/json": {
1367
+ "schema": {
1368
+ "$ref": "#/components/schemas/ErrorEnvelope"
1369
+ }
1370
+ }
1371
+ }
1372
+ }
1373
+ }
1374
+ }
1375
+ },
1376
+ "/v2/endpoint-migration-challenges": {
1377
+ "post": {
1378
+ "operationId": "issue_endpoint_migration_challenge",
1379
+ "summary": "Issue a short-lived endpoint migration challenge commitment.",
1380
+ "security": [
1381
+ {
1382
+ "bearerAuth": []
1383
+ }
1384
+ ],
1385
+ "x-agent-bridge-required-scopes": [],
1386
+ "x-agent-bridge-scope-enforcement": true,
1387
+ "parameters": [
1388
+ {
1389
+ "name": "x-agent-bridge-protocol-version",
1390
+ "in": "header",
1391
+ "required": true,
1392
+ "description": "This OpenAPI operation describes protocol 2.1. Headerless protocol 2.0 uses the separate schemas named by x-agent-bridge-protocol-2.0.",
1393
+ "schema": {
1394
+ "type": "string",
1395
+ "enum": [
1396
+ "2.1"
1397
+ ]
1398
+ }
1399
+ }
1400
+ ],
1401
+ "requestBody": {
1402
+ "required": true,
1403
+ "content": {
1404
+ "application/json": {
1405
+ "schema": {
1406
+ "type": "object",
1407
+ "required": [
1408
+ "challenge",
1409
+ "expectedGatewayAuthorityId",
1410
+ "verifierCredentialId"
1411
+ ],
1412
+ "properties": {
1413
+ "challenge": {
1414
+ "type": "string",
1415
+ "pattern": "^[0-9a-f]{64}$"
1416
+ },
1417
+ "expectedGatewayAuthorityId": {
1418
+ "type": "string",
1419
+ "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
1420
+ },
1421
+ "verifierCredentialId": {
1422
+ "type": "string",
1423
+ "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
1424
+ }
1425
+ },
1426
+ "additionalProperties": false
1427
+ }
1428
+ }
1429
+ }
1430
+ },
1431
+ "responses": {
1432
+ "200": {
1433
+ "description": "Successful response.",
1434
+ "headers": {
1435
+ "x-agent-bridge-protocol-version": {
1436
+ "description": "Selected Agent Bridge protocol version.",
1437
+ "required": true,
1438
+ "schema": {
1439
+ "type": "string",
1440
+ "enum": [
1441
+ "2.0",
1442
+ "2.1"
1443
+ ]
1444
+ }
1445
+ },
1446
+ "x-agent-bridge-supported-protocol-versions": {
1447
+ "description": "Comma-separated protocol versions supported by this gateway.",
1448
+ "required": true,
1449
+ "schema": {
1450
+ "type": "string"
1451
+ }
1452
+ }
1453
+ },
1454
+ "content": {
1455
+ "application/json": {
1456
+ "schema": {
1457
+ "type": "object",
1458
+ "required": [
1459
+ "gatewayAuthorityId",
1460
+ "issuerCredentialId",
1461
+ "verifierCredentialId",
1462
+ "expiresAt"
1463
+ ],
1464
+ "properties": {
1465
+ "gatewayAuthorityId": {
1466
+ "type": "string"
1467
+ },
1468
+ "issuerCredentialId": {
1469
+ "type": "string"
1470
+ },
1471
+ "verifierCredentialId": {
1472
+ "type": "string"
1473
+ },
1474
+ "expiresAt": {
1475
+ "type": "string"
1476
+ }
1477
+ },
1478
+ "additionalProperties": false
383
1479
  }
384
1480
  }
385
1481
  }
@@ -777,18 +1873,16 @@
777
1873
  }
778
1874
  }
779
1875
  },
780
- "/v2/status": {
781
- "get": {
782
- "operationId": "status",
783
- "summary": "Read gateway delivery diagnostics.",
1876
+ "/v2/endpoint-migration-challenges/consume": {
1877
+ "post": {
1878
+ "operationId": "consume_endpoint_migration_challenge",
1879
+ "summary": "Consume a short-lived endpoint migration challenge commitment.",
784
1880
  "security": [
785
1881
  {
786
1882
  "bearerAuth": []
787
1883
  }
788
1884
  ],
789
- "x-agent-bridge-required-scopes": [
790
- "status:read"
791
- ],
1885
+ "x-agent-bridge-required-scopes": [],
792
1886
  "x-agent-bridge-scope-enforcement": true,
793
1887
  "parameters": [
794
1888
  {
@@ -804,6 +1898,36 @@
804
1898
  }
805
1899
  }
806
1900
  ],
1901
+ "requestBody": {
1902
+ "required": true,
1903
+ "content": {
1904
+ "application/json": {
1905
+ "schema": {
1906
+ "type": "object",
1907
+ "required": [
1908
+ "challenge",
1909
+ "expectedGatewayAuthorityId",
1910
+ "issuerCredentialId"
1911
+ ],
1912
+ "properties": {
1913
+ "challenge": {
1914
+ "type": "string",
1915
+ "pattern": "^[0-9a-f]{64}$"
1916
+ },
1917
+ "expectedGatewayAuthorityId": {
1918
+ "type": "string",
1919
+ "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
1920
+ },
1921
+ "issuerCredentialId": {
1922
+ "type": "string",
1923
+ "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
1924
+ }
1925
+ },
1926
+ "additionalProperties": false
1927
+ }
1928
+ }
1929
+ }
1930
+ },
807
1931
  "responses": {
808
1932
  "200": {
809
1933
  "description": "Successful response.",
@@ -832,138 +1956,37 @@
832
1956
  "schema": {
833
1957
  "type": "object",
834
1958
  "required": [
835
- "schemaVersion",
836
- "deliverySupported",
837
- "pending",
838
- "claimed",
839
- "retrying",
840
- "dead"
1959
+ "gatewayAuthorityId",
1960
+ "issuerCredentialId",
1961
+ "verifierCredentialId",
1962
+ "expiresAt",
1963
+ "consumed"
841
1964
  ],
842
1965
  "properties": {
843
- "schemaVersion": {
844
- "enum": [
845
- "local-v2",
846
- "postgres-v2",
847
- "legacy-v1"
848
- ]
849
- },
850
- "deliverySupported": {
851
- "type": "boolean"
852
- },
853
- "pending": {
854
- "anyOf": [
855
- {
856
- "type": "number"
857
- },
858
- {
859
- "type": "null"
860
- }
861
- ]
862
- },
863
- "claimed": {
864
- "anyOf": [
865
- {
866
- "type": "number"
867
- },
868
- {
869
- "type": "null"
870
- }
871
- ]
872
- },
873
- "retrying": {
874
- "anyOf": [
875
- {
876
- "type": "number"
877
- },
878
- {
879
- "type": "null"
880
- }
881
- ]
882
- },
883
- "dead": {
884
- "anyOf": [
885
- {
886
- "type": "number"
887
- },
888
- {
889
- "type": "null"
890
- }
891
- ]
892
- },
893
- "cancelled": {
894
- "anyOf": [
895
- {
896
- "type": "number"
897
- },
898
- {
899
- "type": "null"
900
- }
901
- ]
902
- },
903
- "oldestAvailableAt": {
1966
+ "gatewayAuthorityId": {
904
1967
  "type": "string"
905
1968
  },
906
- "due": {
907
- "anyOf": [
908
- {
909
- "type": "number"
910
- },
911
- {
912
- "type": "null"
913
- }
914
- ]
915
- },
916
- "scheduled": {
917
- "anyOf": [
918
- {
919
- "type": "number"
920
- },
921
- {
922
- "type": "null"
923
- }
924
- ]
925
- },
926
- "expiredLeases": {
927
- "anyOf": [
928
- {
929
- "type": "number"
930
- },
931
- {
932
- "type": "null"
933
- }
934
- ]
1969
+ "issuerCredentialId": {
1970
+ "type": "string"
935
1971
  },
936
- "oldestDueAt": {
1972
+ "verifierCredentialId": {
937
1973
  "type": "string"
938
1974
  },
939
- "queueLagMs": {
1975
+ "expiresAt": {
940
1976
  "anyOf": [
941
1977
  {
942
- "type": "number"
1978
+ "type": "string"
943
1979
  },
944
1980
  {
945
1981
  "type": "null"
946
1982
  }
947
1983
  ]
948
1984
  },
949
- "principal": {
950
- "type": "object",
951
- "required": [
952
- "workspace",
953
- "agent"
954
- ],
955
- "properties": {
956
- "workspace": {
957
- "type": "string"
958
- },
959
- "agent": {
960
- "type": "string"
961
- }
962
- },
963
- "additionalProperties": true
1985
+ "consumed": {
1986
+ "type": "boolean"
964
1987
  }
965
1988
  },
966
- "additionalProperties": true
1989
+ "additionalProperties": false
967
1990
  }
968
1991
  }
969
1992
  }
@@ -3753,7 +4776,7 @@
3753
4776
  "/v2/deliveries/claim": {
3754
4777
  "post": {
3755
4778
  "operationId": "claim_delivery",
3756
- "summary": "Atomically claim the next targeted delivery.",
4779
+ "summary": "Atomically claim the next targeted delivery, or one eligible message when requested.",
3757
4780
  "security": [
3758
4781
  {
3759
4782
  "bearerAuth": []
@@ -3787,6 +4810,10 @@
3787
4810
  "leaseMs": {
3788
4811
  "type": "number"
3789
4812
  },
4813
+ "messageId": {
4814
+ "type": "string",
4815
+ "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
4816
+ },
3790
4817
  "maxAttempts": {
3791
4818
  "type": "number"
3792
4819
  }