@cubos/agent-sdk 0.0.1148891 → 0.0.1150186

package/dist/admin/agents.d.ts

@@ -192,6 +192,16 @@ export declare function agentsApi(t: Transport, tenantSlug: string): {
     addTaskTemplate: (agentSlug: string, templateSlug: string) => Promise<void>;
     removeTaskTemplate: (agentSlug: string, templateSlug: string) => Promise<void>;
     replaceTaskTemplateRoles: (agentSlug: string, templateSlug: string, roleSlugs: string[]) => Promise<void>;
+    listKnowledgeBases: (agentSlug: string, signal?: AbortSignal) => Promise<{
+        created_at: string;
+        display_name: string;
+        id: string;
+        pending_count: number;
+        slug: string;
+        updated_at: string;
+    }[]>;
+    attachKnowledgeBase: (agentSlug: string, kbSlug: string) => Promise<void>;
+    detachKnowledgeBase: (agentSlug: string, kbSlug: string) => Promise<void>;
     listAutoCallTools: (agentSlug: string, signal?: AbortSignal) => Promise<{
         available: import("../generated/schema.js").components["schemas"]["AutoCallableTool"][];
         enabled_mcp_count: number;

package/dist/admin/global.d.ts

@@ -135,3 +135,42 @@ export declare function sharedProvidersApi(t: Transport): {
     }[]>;
     updateModel: (slug: string, modelId: string, input: Schemas["UpdateProviderModelInput"]) => Promise<void>;
 };
+/**
+ * The plugins this *instance* found on disk, and the switch that turns one on
+ * or off across every replica.
+ *
+ * Root-only, and global rather than per tenant: a plugin belongs to the
+ * deployment the way the container image does, so there is no `plugins:*` grant
+ * to scope it with. The list is an answer about one instance — during a partial
+ * deploy two replicas can legitimately report different sets.
+ */
+export declare function pluginsApi(t: Transport): {
+    list: (signal?: AbortSignal) => Promise<{
+        capabilities: import("../generated/schema.js").components["schemas"]["Capability"][];
+        description: string;
+        display_name: string;
+        enabled: boolean;
+        error: string | null;
+        restarts: number;
+        sandbox: string;
+        sandbox_detail: string | null;
+        sandbox_needs?: string[];
+        slug: string;
+        state: string;
+    }[]>;
+    /** Takes effect on every replica: the decision is a row, and a notification
+     * wakes each instance to start or stop its own copy. */
+    setEnabled: (slug: string, enabled: boolean) => Promise<{
+        capabilities: import("../generated/schema.js").components["schemas"]["Capability"][];
+        description: string;
+        display_name: string;
+        enabled: boolean;
+        error: string | null;
+        restarts: number;
+        sandbox: string;
+        sandbox_detail: string | null;
+        sandbox_needs?: string[];
+        slug: string;
+        state: string;
+    }>;
+};

package/dist/admin/index.d.ts

@@ -7,7 +7,7 @@ import { channelsApi } from "./channels.js";
 import { clientToolsApi } from "./client-tools.js";
 import { componentLibrariesApi } from "./component-libraries.js";
 import { conversationsAdminApi } from "./conversations.js";
-import { apiKeysApi, sharedProvidersApi, tenantsApi } from "./global.js";
+import { apiKeysApi, pluginsApi, sharedProvidersApi, tenantsApi } from "./global.js";
 import { knowledgeBasesApi } from "./knowledge-bases.js";
 import { mcpsApi } from "./mcps.js";
 import { skillsApi } from "./skills.js";
@@ -52,6 +52,7 @@ export interface AdminClient {
     tenants: ReturnType<typeof tenantsApi>;
     apiKeys: ReturnType<typeof apiKeysApi>;
     sharedProviders: ReturnType<typeof sharedProvidersApi>;
+    plugins: ReturnType<typeof pluginsApi>;
     tenant(slug: string): TenantScope;
     /** Escape hatch for a route the SDK hasn't wrapped yet. Paths are absolute
      * (`/api/v1/…`) and auth is applied for you. */

package/dist/generated/schema.d.ts

@@ -878,6 +878,120 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/plugins": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the plugins this instance loaded
+         * @description Every plugin found on disk by the instance serving this request, with what it is doing right now. Root only — a plugin belongs to the deployment, not to a tenant, so there is no grant for it.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Plugin"][];
+                    };
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Only the `root` caller can list plugins. */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/plugins/{slug}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Enable or disable a plugin
+         * @description Takes effect on every replica: the row is updated and a notification wakes each instance to start or stop its own copy. Disabling one retracts the file types it reads, so `read_file` reports them as having no reader until it is enabled again. Root only. Returns 404 for a slug this instance did not find on disk.
+         */
+        patch: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description Plugin slug. */
+                    slug: string;
+                };
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": components["schemas"]["UpdatePluginInput"];
+                };
+            };
+            responses: {
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Plugin"];
+                    };
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        trace?: never;
+    };
     "/api/v1/tenants": {
         parameters: {
             query?: never;
@@ -1354,6 +1468,173 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/tenants/{tenantSlug}/agents/{agentSlug}/knowledge-bases": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List an agent's knowledge bases
+         * @description Lists the knowledge bases attached to the agent. These reach every conversation the agent runs, read-only: conversation material is never filed into a base reached only through its agent.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description Agent slug. */
+                    agentSlug: string;
+                    /** @description Tenant slug. */
+                    tenantSlug: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["KnowledgeBaseListItem"][];
+                    };
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/tenants/{tenantSlug}/agents/{agentSlug}/knowledge-bases/{kbSlug}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Attach a knowledge base to an agent
+         * @description Attaches a knowledge base to the agent so every conversation it runs searches it. Read-only from those conversations: `memory_write` files into a base only when it is also attached to the conversation or its user. Idempotent; takes effect on each conversation's next turn.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description Agent slug. */
+                    agentSlug: string;
+                    /** @description Knowledge base slug. */
+                    kbSlug: string;
+                    /** @description Tenant slug. */
+                    tenantSlug: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                204: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        post?: never;
+        /**
+         * Detach a knowledge base from an agent
+         * @description Stops the agent's conversations from searching the knowledge base through the agent. Links to a conversation or a user are untouched.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description Agent slug. */
+                    agentSlug: string;
+                    /** @description Knowledge base slug. */
+                    kbSlug: string;
+                    /** @description Tenant slug. */
+                    tenantSlug: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                204: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/tenants/{tenantSlug}/agents/{agentSlug}/mcps": {
         parameters: {
             query?: never;
@@ -5632,7 +5913,7 @@ export interface paths {
         };
         /**
          * List a conversation's knowledge bases
-         * @description Lists the knowledge bases this conversation searches — those attached to the conversation directly plus those attached to its user. Deduplicated.
+         * @description Lists the knowledge bases this conversation searches — those attached to the conversation directly plus those attached to its user or to its agent. Deduplicated.
          */
         get: {
             parameters: {
@@ -6280,7 +6561,7 @@ export interface paths {
         put?: never;
         /**
          * Send a user message with images
-         * @description Appends one `user_message` carrying up to 10 image attachments. `multipart/form-data` with repeated `file` parts (png/jpeg/webp/gif), optional repeated `label` text parts (the i-th label names the i-th file — the model sees it next to that image and can refer to images by name), and an optional `caption` text part shared by the set. The harness shows the images to the model natively when the agent's chat model has vision, or describes them with the agent's fallback vision model. Same channel rule as the plain user-message route: channel-backed conversations return 409.
+         * @description Appends one `user_message` carrying up to 10 image attachments. `multipart/form-data` with repeated `file` parts (any `image/*` type), optional repeated `label` text parts (the i-th label names the i-th file — the model sees it next to that image and can refer to images by name), and an optional `caption` text part shared by the set. The harness shows the images to the model natively when the agent's chat model has vision, or describes them with the agent's fallback vision model — in both cases after the image plugin has normalized them (oriented, downscaled, re-encoded as PNG or JPEG); a type no plugin reads reaches the model as a placeholder. Same channel rule as the plain user-message route: channel-backed conversations return 409.
          */
         post: {
             parameters: {
@@ -11549,6 +11830,26 @@ export interface components {
              */
             tools: number;
         };
+        /**
+         * @description One kind of thing a plugin provides.
+         *
+         *     Tagged by `kind` so that a plugin bringing providers or channels is a new
+         *     variant here, not new top-level fields on every plugin that has none.
+         */
+        Capability: {
+            /**
+             * @description Claims another plugin already held, so this one does not serve them.
+             *
+             *     Reported because a dropped claim is otherwise silent: the plugin is
+             *     `ready` and healthy, and simply never receives the file it was
+             *     installed for. Resolve it by disabling one of the two.
+             */
+            conflicts?: components["schemas"]["Conflict"][];
+            /** @enum {string} */
+            kind: "file_formats";
+            /** @description MIME types it is answering for — what it *won*. */
+            mimes: string[];
+        };
         Channel: (components["schemas"]["TelegramChannel"] & {
             /** @enum {string} */
             type: "telegram";
@@ -11686,6 +11987,18 @@ export interface components {
             /** Format: date-time */
             updated_at: string;
         };
+        /** @description A claim this plugin lost to another. */
+        Conflict: {
+            /**
+             * @description The slug that holds it. First in alphabetical order wins, so the outcome
+             *     is the same on every replica.
+             */
+            held_by: string;
+            /** @description `mime`, `mime_prefix` or `extension`. */
+            kind: string;
+            /** @description The MIME type, prefix or extension that was claimed twice. */
+            value: string;
+        };
         Conversation: {
             agent: null | components["schemas"]["AgentRef"];
             /**
@@ -13072,6 +13385,57 @@ export interface components {
             /** Format: date-time */
             recorded_at: string;
         };
+        Plugin: {
+            /**
+             * @description What it is providing right now, one entry per kind. Empty unless
+             *     `ready`.
+             */
+            capabilities: components["schemas"]["Capability"][];
+            /**
+             * @description What the plugin says it does, in its own words — it ships from its own
+             *     repository, so the core has nothing of its own to say here. Empty until
+             *     its first handshake.
+             */
+            description: string;
+            /**
+             * @description Reported by the plugin at its handshake; empty until it has completed
+             *     one. Kept while it is disabled or failed, so the list never loses the
+             *     name of the thing an operator turned off.
+             */
+            display_name: string;
+            /**
+             * @description Whether it is *meant* to run. `false` means someone turned it off; it
+             *     says nothing about whether it is currently healthy — that is `state`.
+             */
+            enabled: boolean;
+            /** @description Why it is not running, when `failed`. */
+            error: string | null;
+            /**
+             * Format: int32
+             * @description How many times it has been restarted in a row without staying up.
+             */
+            restarts: number;
+            /**
+             * @description How contained this plugin's process is: `full`, `partial`, `none`, or
+             *     `unknown` before its first spawn.
+             *
+             *     Reported because it is a property of the *deployment*, not of the
+             *     plugin: the same binary is fully sandboxed on one kernel and partly on
+             *     another, and an operator reading the card is the only one who can act on
+             *     that. See `plugins/sandbox.rs`.
+             */
+            sandbox: string;
+            /** @description Why it is not `full`, when it is not. */
+            sandbox_detail: string | null;
+            /**
+             * @description What the plugin's manifest asked for beyond the default sandbox, in
+             *     words. Empty when it asked for nothing, which is the common case.
+             */
+            sandbox_needs?: string[];
+            slug: string;
+            /** @description `disabled` | `starting` | `ready` | `failed`. */
+            state: string;
+        };
         /**
          * @description Reduced provider reference embedded into other resources' responses (e.g. the provider that
          *     served a conversation event's LLM call) in place of a bare `provider_id`.
@@ -13779,6 +14143,9 @@ export interface components {
              */
             revision: number;
         };
+        UpdatePluginInput: {
+            enabled: boolean;
+        };
         UpdateProviderModelInput: {
             /**
              * Format: int32