@creatornader/agent-bridge 0.5.2 → 0.6.1

package/schemas/agent-bridge-v2.schema.json

@@ -5,8 +5,7 @@
   "protocolVersion": "2.1",
   "scopeEnforcementByProvider": {
     "local": false,
-    "gateway": true,
-    "legacy-supabase": false
+    "gateway": true
   },
   "$defs": {
     "ErrorEnvelope": {
@@ -320,8 +319,7 @@
           "enum": [
             "scoped-credential",
             "credential-wide",
-            "process-identity",
-            "legacy-key"
+            "process-identity"
           ]
         },
         "surface": {
@@ -334,10 +332,16 @@
         "provider": {
           "enum": [
             "local",
-            "gateway",
-            "legacy-supabase"
+            "gateway"
           ]
         },
+        "implementationVersion": {
+          "type": "string"
+        },
+        "implementationRevision": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{7,40}$"
+        },
         "grantedScopes": {
           "type": "array",
           "items": {
@@ -420,8 +424,7 @@
           "enum": [
             "scoped-credential",
             "credential-wide",
-            "process-identity",
-            "legacy-key"
+            "process-identity"
           ]
         },
         "surface": {
@@ -434,10 +437,16 @@
         "provider": {
           "enum": [
             "local",
-            "gateway",
-            "legacy-supabase"
+            "gateway"
           ]
         },
+        "implementationVersion": {
+          "type": "string"
+        },
+        "implementationRevision": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{7,40}$"
+        },
         "grantedScopes": {
           "type": "array",
           "items": {
@@ -495,8 +504,7 @@
         "schemaVersion": {
           "enum": [
             "local-v2",
-            "postgres-v2",
-            "legacy-v1"
+            "postgres-v2"
           ]
         },
         "deliverySupported": {
@@ -780,8 +788,7 @@
         "provider": {
           "enum": [
             "local",
-            "gateway",
-            "legacy-supabase"
+            "gateway"
           ]
         },
         "workspace": {
@@ -803,8 +810,7 @@
         "schemaVersion": {
           "enum": [
             "local-v2",
-            "postgres-v2",
-            "legacy-v1"
+            "postgres-v2"
           ]
         },
         "endpoint": {
@@ -854,8 +860,7 @@
             "schemaVersion": {
               "enum": [
                 "local-v2",
-                "postgres-v2",
-                "legacy-v1"
+                "postgres-v2"
               ]
             },
             "deliverySupported": {
@@ -1161,8 +1166,7 @@
         "provider": {
           "enum": [
             "local",
-            "gateway",
-            "legacy-supabase"
+            "gateway"
           ]
         },
         "workspace": {
@@ -1184,8 +1188,7 @@
         "schemaVersion": {
           "enum": [
             "local-v2",
-            "postgres-v2",
-            "legacy-v1"
+            "postgres-v2"
           ]
         },
         "endpoint": {
@@ -1235,8 +1238,7 @@
             "schemaVersion": {
               "enum": [
                 "local-v2",
-                "postgres-v2",
-                "legacy-v1"
+                "postgres-v2"
               ]
             },
             "deliverySupported": {

package/scripts/gateway-release-check.mjs

@@ -0,0 +1,92 @@
+import { pathToFileURL } from "node:url";
+
+const COMMIT = /^[0-9a-f]{7,40}$/u;
+const VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u;
+
+function fail(message) {
+  throw new Error(message);
+}
+
+function argument(args, name) {
+  const index = args.indexOf(name);
+  if (index === -1 || index === args.length - 1 || args[index + 1].startsWith("--")) {
+    fail(`${name} is required`);
+  }
+  return args[index + 1];
+}
+
+export function normalizeExpectedRelease(version, revision) {
+  if (!VERSION.test(version)) fail("expected version is invalid");
+  if (!COMMIT.test(revision)) fail("expected revision is invalid");
+  return { version, revision };
+}
+
+export async function checkGatewayRelease({
+  gatewayOrigin,
+  token,
+  expectedVersion,
+  expectedRevision,
+  fetchImpl = fetch,
+}) {
+  const expected = normalizeExpectedRelease(expectedVersion, expectedRevision);
+  const origin = new URL(gatewayOrigin);
+  if (origin.protocol !== "https:" || origin.username || origin.password || origin.pathname !== "/" || origin.search || origin.hash) {
+    fail("AGENT_BRIDGE_URL must be an HTTPS origin without credentials, path, query, or fragment");
+  }
+  if (typeof token !== "string" || token.length === 0) fail("AGENT_BRIDGE_TOKEN is required");
+
+  const response = await fetchImpl(new URL("/v2/capabilities", origin), {
+    headers: {
+      authorization: `Bearer ${token}`,
+      "x-agent-bridge-protocol-version": "2.1",
+    },
+    signal: AbortSignal.timeout(10_000),
+  });
+  if (!response.ok) fail(`gateway capability probe returned HTTP ${response.status}`);
+  if (response.headers.get("x-agent-bridge-protocol-version") !== "2.1") {
+    fail("gateway did not select protocol 2.1");
+  }
+  const body = await response.json();
+  if (body.selectedProtocolVersion !== "2.1" || body.currentProtocolVersion !== "2.1") {
+    fail("gateway capability document does not report protocol 2.1");
+  }
+  if (body.requestAuthority !== true || body.rowIsolation !== true) {
+    fail("gateway request authority or row isolation is not ready");
+  }
+  if (body.implementationVersion !== expected.version) {
+    fail(`gateway version mismatch: expected ${expected.version}, received ${String(body.implementationVersion)}`);
+  }
+  if (body.implementationRevision !== expected.revision) {
+    fail(`gateway revision mismatch: expected ${expected.revision}, received ${String(body.implementationRevision)}`);
+  }
+  return {
+    gatewayOrigin: origin.origin,
+    implementationVersion: body.implementationVersion,
+    implementationRevision: body.implementationRevision,
+    protocolVersion: body.selectedProtocolVersion,
+    requestAuthority: true,
+    rowIsolation: true,
+  };
+}
+
+async function main() {
+  const args = process.argv.slice(2);
+  if (args.includes("--help") || args.includes("-h")) {
+    process.stdout.write("Usage: gateway-release-check --version <semver> --revision <git-sha>\n");
+    return;
+  }
+  const result = await checkGatewayRelease({
+    gatewayOrigin: process.env.AGENT_BRIDGE_URL,
+    token: process.env.AGENT_BRIDGE_TOKEN,
+    expectedVersion: argument(args, "--version"),
+    expectedRevision: argument(args, "--revision"),
+  });
+  process.stdout.write(`${JSON.stringify(result)}\n`);
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
+  void main().catch((error) => {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+    process.exitCode = 1;
+  });
+}

package/dist/chunk-2EVLG3YA.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client-config.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { createHash } from \"node:crypto\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { BridgePrincipal } from \"./bridge-domain.js\";\n\nexport type ClientProvider = \"local\" | \"gateway\" | \"legacy-supabase\";\n\nexport interface ClientEnvironment extends NodeJS.ProcessEnv {\n  AGENT_BRIDGE_PROVIDER?: string;\n  AGENT_BRIDGE_URL?: string;\n  AGENT_BRIDGE_KEY?: string;\n  AGENT_BRIDGE_TOKEN?: string;\n  AGENT_BRIDGE_AGENT?: string;\n  AGENT_BRIDGE_WORKSPACE?: string;\n  AGENT_BRIDGE_INSTANCE?: string;\n  AGENT_BRIDGE_DB?: string;\n  AGENT_BRIDGE_EDGE_DB?: string;\n  AGENT_BRIDGE_CONFIG?: string;\n  AGENT_BRIDGE_CURSOR?: string;\n}\n\nexport interface ClientConfig {\n  provider: ClientProvider;\n  principal: BridgePrincipal;\n  url?: string;\n  credential?: string;\n  databasePath: string;\n  edgeDatabasePath: string;\n  cursorPath: string;\n  configPath: string;\n}\n\nfunction pathComponent(value: string): string {\n  const readable = value.replace(/[^A-Za-z0-9._-]+/g, \"_\").slice(0, 48) || \"_\";\n  const suffix = createHash(\"sha256\").update(value).digest(\"hex\").slice(0, 12);\n  return `${readable}-${suffix}`;\n}\n\nfunction clean(value: string | undefined): string | undefined {\n  return value?.trim() || undefined;\n}\n\nfunction unquote(value: string): string {\n  const input = value.trim();\n  if (input.length > 1 && ((input[0] === '\"' && input[input.length - 1] === '\"') || (input[0] === \"'\" && input[input.length - 1] === \"'\"))) return input.slice(1, -1);\n  return input;\n}\n\nexport function readClientConfigFile(path: string): Record<string, string> {\n  if (!existsSync(path)) return {};\n  const result: Record<string, string> = {};\n  for (const raw of readFileSync(path, \"utf8\").split(/\\r?\\n/)) {\n    const line = raw.trim();\n    if (!line || line.startsWith(\"#\")) continue;\n    const separator = line.indexOf(\"=\");\n    if (separator > 0) result[line.slice(0, separator).trim()] = unquote(line.slice(separator + 1));\n  }\n  return result;\n}\n\nexport function resolveClientConfig(\n  env: ClientEnvironment = process.env,\n  explicitAgent?: string,\n): ClientConfig {\n  const home = clean(env.HOME) ?? homedir();\n  const configPath = clean(env.AGENT_BRIDGE_CONFIG) ?? join(home, \".agent-bridge\", \"config\");\n  const file = readClientConfigFile(configPath);\n  const value = (key: keyof ClientEnvironment) => clean(env[key]) ?? clean(file[key]);\n  const rawProvider = value(\"AGENT_BRIDGE_PROVIDER\") ?? (value(\"AGENT_BRIDGE_TOKEN\") ? \"gateway\" : value(\"AGENT_BRIDGE_URL\") ? \"legacy-supabase\" : \"local\");\n  const provider = rawProvider === \"legacy\" || rawProvider === \"supabase\" ? \"legacy-supabase\" : rawProvider;\n  if (!([\"local\", \"gateway\", \"legacy-supabase\"] as string[]).includes(provider)) throw new Error(`Unsupported AGENT_BRIDGE_PROVIDER: ${rawProvider}`);\n  // Identity belongs to the active client process. A shared config file must\n  // never make one runtime impersonate the client that initialized the bridge.\n  const configuredAgent = clean(env.AGENT_BRIDGE_AGENT);\n  const requestedAgent = clean(explicitAgent);\n  if (configuredAgent && requestedAgent && configuredAgent !== requestedAgent) {\n    throw new Error(`source must match AGENT_BRIDGE_AGENT (${configuredAgent}); got ${requestedAgent}`);\n  }\n  const agent = requestedAgent ?? configuredAgent;\n  if (!agent) throw new Error(\"AGENT_BRIDGE_AGENT is required\");\n  const url = value(\"AGENT_BRIDGE_URL\");\n  const credential = provider === \"gateway\" ? value(\"AGENT_BRIDGE_TOKEN\") : value(\"AGENT_BRIDGE_KEY\");\n  if (provider !== \"local\" && (!url || !credential)) throw new Error(`${provider} requires AGENT_BRIDGE_URL and ${provider === \"gateway\" ? \"AGENT_BRIDGE_TOKEN\" : \"AGENT_BRIDGE_KEY\"}`);\n  const workspace = provider === \"legacy-supabase\"\n    ? \"*\"\n    : value(\"AGENT_BRIDGE_WORKSPACE\") ?? \"default\";\n  const instance = clean(env.AGENT_BRIDGE_INSTANCE);\n  const databasePath = value(\"AGENT_BRIDGE_DB\") ?? join(home, \".agent-bridge\", \"bridge.sqlite3\");\n  const edgeDatabasePath = value(\"AGENT_BRIDGE_EDGE_DB\") ?? join(home, \".agent-bridge\", \"edge.sqlite3\");\n  const cursorScope = createHash(\"sha256\")\n    .update(`${provider}\\0${provider === \"local\" ? databasePath : url}`)\n    .digest(\"hex\")\n    .slice(0, 16);\n  return {\n    provider: provider as ClientProvider,\n    principal: { workspace, agent, instance },\n    url,\n    credential,\n    databasePath,\n    edgeDatabasePath,\n    cursorPath: value(\"AGENT_BRIDGE_CURSOR\") ?? join(\n      home,\n      \".agent-bridge\",\n      \"cursors\",\n      pathComponent(provider),\n      cursorScope,\n      pathComponent(workspace),\n      pathComponent(agent),\n      pathComponent(instance ?? \"default\"),\n    ),\n    configPath,\n  };\n}\n"],"mappings":";;;AAAA,SAAS,YAAY,oBAAoB;AACzC,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AA8BrB,SAAS,cAAc,OAAuB;AAC5C,QAAM,WAAW,MAAM,QAAQ,qBAAqB,GAAG,EAAE,MAAM,GAAG,EAAE,KAAK;AACzE,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC3E,SAAO,GAAG,QAAQ,IAAI,MAAM;AAC9B;AAEA,SAAS,MAAM,OAA+C;AAC5D,SAAO,OAAO,KAAK,KAAK;AAC1B;AAEA,SAAS,QAAQ,OAAuB;AACtC,QAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,MAAM,SAAS,MAAO,MAAM,CAAC,MAAM,OAAO,MAAM,MAAM,SAAS,CAAC,MAAM,OAAS,MAAM,CAAC,MAAM,OAAO,MAAM,MAAM,SAAS,CAAC,MAAM,KAAO,QAAO,MAAM,MAAM,GAAG,EAAE;AAClK,SAAO;AACT;AAEO,SAAS,qBAAqB,MAAsC;AACzE,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAM,SAAiC,CAAC;AACxC,aAAW,OAAO,aAAa,MAAM,MAAM,EAAE,MAAM,OAAO,GAAG;AAC3D,UAAM,OAAO,IAAI,KAAK;AACtB,QAAI,CAAC,QAAQ,KAAK,WAAW,GAAG,EAAG;AACnC,UAAM,YAAY,KAAK,QAAQ,GAAG;AAClC,QAAI,YAAY,EAAG,QAAO,KAAK,MAAM,GAAG,SAAS,EAAE,KAAK,CAAC,IAAI,QAAQ,KAAK,MAAM,YAAY,CAAC,CAAC;AAAA,EAChG;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MAAyB,QAAQ,KACjC,eACc;AACd,QAAM,OAAO,MAAM,IAAI,IAAI,KAAK,QAAQ;AACxC,QAAM,aAAa,MAAM,IAAI,mBAAmB,KAAK,KAAK,MAAM,iBAAiB,QAAQ;AACzF,QAAM,OAAO,qBAAqB,UAAU;AAC5C,QAAM,QAAQ,CAAC,QAAiC,MAAM,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,GAAG,CAAC;AAClF,QAAM,cAAc,MAAM,uBAAuB,MAAM,MAAM,oBAAoB,IAAI,YAAY,MAAM,kBAAkB,IAAI,oBAAoB;AACjJ,QAAM,WAAW,gBAAgB,YAAY,gBAAgB,aAAa,oBAAoB;AAC9F,MAAI,CAAE,CAAC,SAAS,WAAW,iBAAiB,EAAe,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,sCAAsC,WAAW,EAAE;AAGlJ,QAAM,kBAAkB,MAAM,IAAI,kBAAkB;AACpD,QAAM,iBAAiB,MAAM,aAAa;AAC1C,MAAI,mBAAmB,kBAAkB,oBAAoB,gBAAgB;AAC3E,UAAM,IAAI,MAAM,yCAAyC,eAAe,UAAU,cAAc,EAAE;AAAA,EACpG;AACA,QAAM,QAAQ,kBAAkB;AAChC,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,gCAAgC;AAC5D,QAAM,MAAM,MAAM,kBAAkB;AACpC,QAAM,aAAa,aAAa,YAAY,MAAM,oBAAoB,IAAI,MAAM,kBAAkB;AAClG,MAAI,aAAa,YAAY,CAAC,OAAO,CAAC,YAAa,OAAM,IAAI,MAAM,GAAG,QAAQ,kCAAkC,aAAa,YAAY,uBAAuB,kBAAkB,EAAE;AACpL,QAAM,YAAY,aAAa,oBAC3B,MACA,MAAM,wBAAwB,KAAK;AACvC,QAAM,WAAW,MAAM,IAAI,qBAAqB;AAChD,QAAM,eAAe,MAAM,iBAAiB,KAAK,KAAK,MAAM,iBAAiB,gBAAgB;AAC7F,QAAM,mBAAmB,MAAM,sBAAsB,KAAK,KAAK,MAAM,iBAAiB,cAAc;AACpG,QAAM,cAAc,WAAW,QAAQ,EACpC,OAAO,GAAG,QAAQ,KAAK,aAAa,UAAU,eAAe,GAAG,EAAE,EAClE,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AACd,SAAO;AAAA,IACL;AAAA,IACA,WAAW,EAAE,WAAW,OAAO,SAAS;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,MAAM,qBAAqB,KAAK;AAAA,MAC1C;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,QAAQ;AAAA,MACtB;AAAA,MACA,cAAc,SAAS;AAAA,MACvB,cAAc,KAAK;AAAA,MACnB,cAAc,YAAY,SAAS;AAAA,IACrC;AAAA,IACA;AAAA,EACF;AACF;","names":[]}