@dynamicagents/plugins 0.14.0 → 0.16.0

package/dist/scratch/index.d.ts

@@ -29,7 +29,7 @@ import type { AgentPlugin } from "@dynamicagents/core";
  *
  * ## What the host owns
  *
- * The same split [`/repo`](../repo/) makes, and for the same reason — this plugin
+ * The same split [`/repo-github`](../repo-github/) makes, and for the same reason — this plugin
  * knows what a scratchpad *is*, the host knows how it addresses one:
  *
  * - {@link ScratchConfig.beforeOpen} selects the workspace, before anything runs.
@@ -145,14 +145,6 @@ export interface ScratchConfig {
      */
     afterOpen?: (scratch: Scratchpad) => Promise<ScratchReadiness | void>;
 }
-/**
- * Bound what reaches the model, keeping both ends.
- *
- * A copy rather than an import, for the reason {@link ScratchExec} is injected:
- * `verify:exports` fails any subpath that reaches a sibling's files, and `/repo`
- * carries the same copy for the same reason.
- */
-export declare function truncateOutput(text: string, max: number): string;
 /** The tool name, exported so a host restricting the plugin can name it. */
 export declare const SCRATCH_OPEN_TOOL = "scratch_open";
 export declare function scratch(config: ScratchConfig): AgentPlugin;

package/dist/scratch/index.js

@@ -1,6 +1,6 @@
 import { tool } from "ai";
 import { z } from "zod";
-import { definePlugin } from "@dynamicagents/core";
+import { definePlugin, truncateOutput } from "@dynamicagents/core";
 /**
  * `@dynamicagents/plugins/scratch` — a place to work that is not a repository.
  *
@@ -31,7 +31,7 @@ import { definePlugin } from "@dynamicagents/core";
  *
  * ## What the host owns
  *
- * The same split [`/repo`](../repo/) makes, and for the same reason — this plugin
+ * The same split [`/repo-github`](../repo-github/) makes, and for the same reason — this plugin
  * knows what a scratchpad *is*, the host knows how it addresses one:
  *
  * - {@link ScratchConfig.beforeOpen} selects the workspace, before anything runs.
@@ -52,22 +52,6 @@ const DEFAULT_AUTHOR = {
 const DEFAULT_MAX_OUTPUT_CHARS = 16_000;
 /** How many lines of a dirty tree are worth reciting back. */
 const STATUS_MAX_LINES = 20;
-/**
- * Bound what reaches the model, keeping both ends.
- *
- * A copy rather than an import, for the reason {@link ScratchExec} is injected:
- * `verify:exports` fails any subpath that reaches a sibling's files, and `/repo`
- * carries the same copy for the same reason.
- */
-export function truncateOutput(text, max) {
-    if (text.length <= max)
-        return text;
-    const marker = (dropped) => `\n\n… [${dropped} characters omitted from the middle] …\n\n`;
-    const half = Math.floor((max - marker(text.length).length) / 2);
-    if (half < 1)
-        return text.slice(0, Math.max(0, max));
-    return (text.slice(0, half) + marker(text.length - half * 2) + text.slice(-half));
-}
 /** The tool name, exported so a host restricting the plugin can name it. */
 export const SCRATCH_OPEN_TOOL = "scratch_open";
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@dynamicagents/plugins",
-  "version": "0.14.0",
-  "description": "Optional, composable capabilities for a Dynamic Agent: browser rendering, a Linux container, git and pull requests, a scratchpad, and Claude Code sessions. One subpath per plugin, so a bundle grows only with what it imports.",
+  "version": "0.16.0",
+  "description": "Optional, composable capabilities for a Dynamic Agent: browser rendering, a Linux container, git and pull requests on GitHub, a scratchpad, and Claude Code sessions. One subpath per plugin, so a bundle grows only with what it imports.",
   "keywords": [
     "ai-agents",
     "cloudflare-workers",
@@ -34,9 +34,9 @@
       "types": "./dist/browser/index.d.ts",
       "import": "./dist/browser/index.js"
     },
-    "./repo": {
-      "types": "./dist/repo/index.d.ts",
-      "import": "./dist/repo/index.js"
+    "./repo-github": {
+      "types": "./dist/repo-github/index.d.ts",
+      "import": "./dist/repo-github/index.js"
     },
     "./scratch": {
       "types": "./dist/scratch/index.d.ts",
@@ -46,14 +46,22 @@
       "types": "./dist/claude-code/index.d.ts",
       "import": "./dist/claude-code/index.js"
     },
-    "./workspace": {
-      "types": "./dist/workspace/index.d.ts",
-      "import": "./dist/workspace/index.js"
+    "./claude-code/daemon": {
+      "types": "./dist/claude-code/daemon/index.d.ts",
+      "import": "./dist/claude-code/daemon/index.js"
     },
     "./computer": {
       "types": "./dist/computer/index.d.ts",
       "import": "./dist/computer/index.js"
     },
+    "./sandbox": {
+      "types": "./dist/sandbox/index.d.ts",
+      "import": "./dist/sandbox/index.js"
+    },
+    "./sandbox/daemon": {
+      "types": "./dist/sandbox/daemon/index.d.ts",
+      "import": "./dist/sandbox/daemon/index.js"
+    },
     "./package.json": "./package.json"
   },
   "scripts": {
@@ -70,33 +78,29 @@
     "verify:references": "node scripts/verify-references.mjs",
     "verify:peer-ranges": "node scripts/verify-peer-ranges.mjs",
     "probe:claude-code": "npm run build && node scripts/probe-claude-code.mjs",
+    "probe:github-mcp": "node scripts/probe-github-mcp.mjs",
     "prepack": "npm run build && npm run verify:exports",
     "prepublishOnly": "npm run check && npm test",
     "prepare": "husky || true && npm run build"
   },
   "peerDependencies": {
-    "@cloudflare/computer": "^0.5.0",
+    "@cloudflare/sandbox": "^1.0.1",
     "@cloudflare/think": ">=0.20.2 <0.21.0",
-    "@dynamicagents/core": ">=0.14.0 <0.15.0",
-    "@platformatic/vfs": "^0.5.0",
+    "@dynamicagents/core": ">=0.16.0 <0.17.0",
     "agents": ">=0.28.0 <0.29.0",
     "ai": "^7.0.88",
     "zod": "^4.4.3"
   },
   "peerDependenciesMeta": {
-    "@cloudflare/computer": {
-      "optional": true
-    },
-    "@platformatic/vfs": {
+    "@cloudflare/sandbox": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@cloudflare/computer": "^0.5.0",
+    "@cloudflare/sandbox": "^1.0.1",
     "@cloudflare/think": "^0.20.2",
-    "@cloudflare/vitest-plugin": "^1.1.9",
-    "@dynamicagents/core": "^0.14.0",
-    "@platformatic/vfs": "^0.5.0",
+    "@cloudflare/vitest-plugin": "^1.4.4",
+    "@dynamicagents/core": "^0.16.0",
     "@types/node": "^26.5.1",
     "agents": "^0.28.0",
     "ai": "^7.0.101",
@@ -108,7 +112,7 @@
     "typescript-eslint": "^8.70.0",
     "vitest": "^4.1.11",
     "workers-ai-provider": "^4.0.0",
-    "wrangler": "^4.131.2",
+    "wrangler": "^4.151.1",
     "zod": "^4.6.5"
   },
   "engines": {

package/dist/claude-code/github.d.ts

@@ -1,39 +0,0 @@
-/**
- * GitHub access for a session, with the token on the Worker side.
- *
- * The session is launched with {@link GITHUB_TOKEN_PLACEHOLDER} as `GH_TOKEN`,
- * and git is given a credential helper that answers with it. The egress gateway swaps
- * the placeholder for the real token on {@link GITHUB_HOSTS} only, so a process
- * in the container can *use* GitHub as the deployment's account and can never
- * *read* the token — the same containment as the Anthropic credential.
- *
- * Keyed on the placeholder, unlike the Anthropic swap: a GitHub request that
- * did not ask for a credential stays anonymous, as it would be anywhere else.
- */
-/** The hosts the token is ever sent to: git over HTTPS, and the API. */
-export declare const GITHUB_HOSTS: ReadonlySet<string>;
-/**
- * What `GH_TOKEN` and git's credential helper hold. Shaped like a classic
- * token, so nothing that checks the shape refuses it before sending it.
- */
-export declare const GITHUB_TOKEN_PLACEHOLDER: string;
-/**
- * The session's GitHub environment. A credential helper for `https://github.com`
- * rather than a token in the remote URL, so the checkout's `.git/config` holds
- * nothing and every git the session starts presents the placeholder.
- */
-export declare function githubEnv(): Record<string, string>;
-/** The keys {@link githubEnv} owns, which a host's `env` may not set beside it. */
-export declare const GITHUB_ENV_KEYS: readonly string[];
-/** How an authorization header carried the placeholder, if it did. */
-type Presented = "bearer" | "basic";
-/**
- * Whether `value` presents the placeholder: `Bearer`/`token` as `gh` sends it,
- * or Basic `user:placeholder` as git does after a `401`.
- */
-export declare function presentsPlaceholder(value: string | null): Presented | undefined;
-/** The real credential, in the scheme the placeholder came in. */
-export declare function githubAuthorization(presented: Presented, token: string): string;
-/** A refusal in GitHub's error shape, which `gh` and git both print. */
-export declare function githubError(message: string, status: number): Response;
-export {};

package/dist/claude-code/github.js

@@ -1,82 +0,0 @@
-/**
- * GitHub access for a session, with the token on the Worker side.
- *
- * The session is launched with {@link GITHUB_TOKEN_PLACEHOLDER} as `GH_TOKEN`,
- * and git is given a credential helper that answers with it. The egress gateway swaps
- * the placeholder for the real token on {@link GITHUB_HOSTS} only, so a process
- * in the container can *use* GitHub as the deployment's account and can never
- * *read* the token — the same containment as the Anthropic credential.
- *
- * Keyed on the placeholder, unlike the Anthropic swap: a GitHub request that
- * did not ask for a credential stays anonymous, as it would be anywhere else.
- */
-/** The hosts the token is ever sent to: git over HTTPS, and the API. */
-export const GITHUB_HOSTS = new Set([
-    "github.com",
-    "api.github.com"
-]);
-/**
- * What `GH_TOKEN` and git's credential helper hold. Shaped like a classic
- * token, so nothing that checks the shape refuses it before sending it.
- */
-export const GITHUB_TOKEN_PLACEHOLDER = "ghp_" + "0".repeat(36);
-/** The username GitHub expects beside a token in git's Basic auth. */
-const GIT_USER = "x-access-token";
-/**
- * The session's GitHub environment. A credential helper for `https://github.com`
- * rather than a token in the remote URL, so the checkout's `.git/config` holds
- * nothing and every git the session starts presents the placeholder.
- */
-export function githubEnv() {
-    return {
-        GH_TOKEN: GITHUB_TOKEN_PLACEHOLDER,
-        GIT_CONFIG_COUNT: "1",
-        GIT_CONFIG_KEY_0: "credential.https://github.com.helper",
-        // Answers `get` only; `store` and `erase` are no-ops that still exit 0.
-        GIT_CONFIG_VALUE_0: `!f() { if test "$1" = get; then printf 'username=${GIT_USER}\\npassword=%s\\n' "$GH_TOKEN"; fi; }; f`
-    };
-}
-/** The keys {@link githubEnv} owns, which a host's `env` may not set beside it. */
-export const GITHUB_ENV_KEYS = Object.keys(githubEnv());
-/**
- * Whether `value` presents the placeholder: `Bearer`/`token` as `gh` sends it,
- * or Basic `user:placeholder` as git does after a `401`.
- */
-export function presentsPlaceholder(value) {
-    if (!value)
-        return undefined;
-    const [scheme = "", credential = ""] = value.trim().split(/\s+/, 2);
-    switch (scheme.toLowerCase()) {
-        case "bearer":
-        case "token":
-            return credential === GITHUB_TOKEN_PLACEHOLDER ? "bearer" : undefined;
-        case "basic": {
-            let decoded;
-            try {
-                decoded = atob(credential);
-            }
-            catch {
-                return undefined;
-            }
-            const password = decoded.slice(decoded.indexOf(":") + 1);
-            return decoded.includes(":") && password === GITHUB_TOKEN_PLACEHOLDER
-                ? "basic"
-                : undefined;
-        }
-        default:
-            return undefined;
-    }
-}
-/** The real credential, in the scheme the placeholder came in. */
-export function githubAuthorization(presented, token) {
-    return presented === "basic"
-        ? `Basic ${btoa(`${GIT_USER}:${token}`)}`
-        : `Bearer ${token}`;
-}
-/** A refusal in GitHub's error shape, which `gh` and git both print. */
-export function githubError(message, status) {
-    return new Response(JSON.stringify({ message }), {
-        status,
-        headers: { "content-type": "application/json" }
-    });
-}