@finalai/agent-definition 0.4.3 → 0.5.1

package/HOSTING.md

@@ -7,13 +7,13 @@ resolve against dev and production configuration without source edits.
 ## Selecting a deployment
 
 ```sh
-export FINAL_API_HOST=https://agent-session.primary-dev.final.ai/api
-export FINAL_API_KEY=<dev-organization-key>
+export FINAL_API_HOST=https://<dev-agents-api-host>/api
+export FINAL_API_KEY=<dev-api-key>
 pnpm exec final-agents build ./agent
 pnpm exec final-agents publish ./agent --agent my-agent
 ```
 
-Choose production by changing the host and organization key. `--host` overrides
+Choose production by changing the host and API key. `--host` overrides
 `FINAL_API_HOST`; without either, the existing production default remains. Build
 compiles locally and optionally checks installed-harness compatibility. Publish
 compiles again and sends source/release requests to the selected deployment.

package/dist/compiler-assets/{chunk-6MVG5NYI.ts → chunk-4T2XPIPH.ts}

@@ -8,13 +8,13 @@ import {
   lowerSkill,
   lowerTool,
   toJson
-} from "./chunk-ZICJVGG7.ts";
+} from "./chunk-GIRUQ7QF.ts";
 import {
   AUTHORED_SERVER_KEY
 } from "./chunk-NMYHO2QN.ts";
 import {
   hookHandlersFor
-} from "./chunk-BLF6KTBB.ts";
+} from "./chunk-KMBQVNAJ.ts";
 import {
   unopenedRequestOf
 } from "./chunk-KNFPKVUS.ts";
@@ -24,15 +24,15 @@ import {
 } from "./chunk-4ERFBLH7.ts";
 import {
   lowerApproval
-} from "./chunk-TFPXCL5W.ts";
+} from "./chunk-O2JWY454.ts";
 import {
   ConversationKind,
   ParticipantKind
-} from "./chunk-JFNLGXQM.ts";
+} from "./chunk-JRKGCYWA.ts";
 import {
   mcpServerBindingSchema,
   providerRefSchema
-} from "./chunk-GOIK7WNT.ts";
+} from "./chunk-EAEQQT33.ts";
 import {
   TranscriptRole
 } from "./chunk-RWUIMTBI.ts";

package/dist/compiler-assets/{chunk-JW4Y5OAP.ts → chunk-BMX2HP6G.ts}

@@ -1,6 +1,6 @@
 import {
   mcpAuthSchema
-} from "./chunk-GOIK7WNT.ts";
+} from "./chunk-EAEQQT33.ts";
 import {
   defineDynamic
 } from "./chunk-36MVFRMA.ts";

package/dist/compiler-assets/{chunk-GOIK7WNT.ts → chunk-EAEQQT33.ts}

@@ -182,6 +182,9 @@ var mcpServerBindingSchema = discriminatedUnion("kind", [
   workerMcpServerBindingSchema,
   httpMcpServerBindingSchema
 ]);
+var sandboxCredentialRefSchema = strictObject({
+  secretRef: string().min(1).max(256)
+});
 var sandboxBindingSchema = object({
   provider: providerRefSchema,
   // Provider-defined environment options (`computer`: a setup guide reference or
@@ -241,9 +244,8 @@ var agentManifestSchema = object({
   sandboxes: maybeDynamic(record(string(), sandboxBindingSchema)),
   tools: baseToolsSchema,
   toolPolicy: record(string(), nativeEnum(ToolApproval)),
-  // Organization secrets this agent may read, by name (`secrets.get`,
-  // MCP `secretKey`, `apiKey({ secret })`). Nothing else is readable;
-  // binding organization secrets requires an organization admin at publish.
+  // Secrets this agent may read, by name (`secrets.get`, MCP `secretKey`,
+  // `apiKey({ secret })`). Nothing else is readable.
   secrets: array(string().min(1)).default([]),
   channels: array(channelBindingSchema),
   channelSources: record(string(), object({ path: string(), source: string(), disabled: boolean() })).optional(),
@@ -318,6 +320,7 @@ export {
   workerMcpServerBindingSchema,
   httpMcpServerBindingSchema,
   mcpServerBindingSchema,
+  sandboxCredentialRefSchema,
   sandboxBindingSchema,
   baseToolsSchema,
   channelBindingSchema,

package/dist/compiler-assets/{chunk-ZICJVGG7.ts → chunk-GIRUQ7QF.ts}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-4ERFBLH7.ts";
 import {
   lowerApproval
-} from "./chunk-TFPXCL5W.ts";
+} from "./chunk-O2JWY454.ts";
 import {
   toolAnnotationSelectorSchema
-} from "./chunk-GOIK7WNT.ts";
+} from "./chunk-EAEQQT33.ts";
 import {
   jsonSchemaDeclarationError
 } from "./chunk-O3JKMLDP.ts";

package/dist/compiler-assets/{chunk-JFNLGXQM.ts → chunk-JRKGCYWA.ts}

@@ -58,19 +58,19 @@ var channelMessageInputSchema = object({
   quotedMessageIds: array(string().min(1)).default([]),
   mentionedParticipantIds: array(string().min(1)).default([])
 });
-var PendingKind = /* @__PURE__ */ ((PendingKind2) => {
-  PendingKind2["Permission"] = "permission";
-  PendingKind2["Elicitation"] = "elicitation";
-  return PendingKind2;
-})(PendingKind || {});
-var pendingCreatedDataSchema = object({
-  pendingRequestId: string().min(1),
-  kind: nativeEnum(PendingKind),
+var DecisionKind = /* @__PURE__ */ ((DecisionKind2) => {
+  DecisionKind2["Permission"] = "permission";
+  DecisionKind2["Elicitation"] = "elicitation";
+  return DecisionKind2;
+})(DecisionKind || {});
+var decisionCreatedDataSchema = object({
+  decisionId: string().min(1),
+  kind: nativeEnum(DecisionKind),
   audienceParticipantIds: array(string()),
   request: jsonValueSchema
 });
-var pendingResolvedDataSchema = object({
-  pendingRequestId: string().min(1),
+var decisionResolvedDataSchema = object({
+  decisionId: string().min(1),
   outcome: jsonValueSchema,
   respondedBy: channelAuthSchema.nullable().default(null)
 });

package/dist/compiler-assets/{chunk-BLF6KTBB.ts → chunk-KMBQVNAJ.ts}

@@ -22,8 +22,8 @@ var HookEvent = /* @__PURE__ */ ((HookEvent2) => {
   HookEvent2["ToolCallUpdate"] = "tool_call_update";
   HookEvent2["ToolCallContentChunk"] = "tool_call_content_chunk";
   HookEvent2["Plan"] = "plan";
-  HookEvent2["PendingCreated"] = "pending.created";
-  HookEvent2["PendingResolved"] = "pending.resolved";
+  HookEvent2["DecisionCreated"] = "decision.created";
+  HookEvent2["DecisionResolved"] = "decision.resolved";
   HookEvent2["StateUpdate"] = "state_update";
   HookEvent2["SessionFailed"] = "session.failed";
   HookEvent2["SessionClosed"] = "session.closed";

package/dist/compiler-assets/{chunk-YOE37BRR.ts → chunk-MBX6PIN7.ts}

@@ -13,14 +13,14 @@ import {
   note,
   sandboxProviderNameOf,
   toJson
-} from "./chunk-ZICJVGG7.ts";
+} from "./chunk-GIRUQ7QF.ts";
 import {
   AGENT_DYNAMIC_PREFIX,
   namedExportName
 } from "./chunk-NMYHO2QN.ts";
 import {
   agentAvatarSchema
-} from "./chunk-GOIK7WNT.ts";
+} from "./chunk-EAEQQT33.ts";
 import {
   hostedBindingRequirementSchema
 } from "./chunk-R4IHPPTB.ts";

package/dist/compiler-assets/{chunk-TFPXCL5W.ts → chunk-O2JWY454.ts}

@@ -1,6 +1,6 @@
 import {
   ToolApproval
-} from "./chunk-GOIK7WNT.ts";
+} from "./chunk-EAEQQT33.ts";
 import {
   authoredKindOf,
   stamp

package/dist/compiler-assets/{chunk-L7E6UQX3.ts → chunk-U3MFLFVF.ts}

@@ -1,9 +1,9 @@
 import {
   harnessDescriptionSchema
-} from "./chunk-V5E4RKG6.ts";
+} from "./chunk-YEKSPL76.ts";
 import {
   bundleRef
-} from "./chunk-GOIK7WNT.ts";
+} from "./chunk-EAEQQT33.ts";
 import {
   registerPending
 } from "./chunk-KTBNDKGJ.ts";

package/dist/compiler-assets/{chunk-2LYL3UFK.ts → chunk-VRW24MOJ.ts}

@@ -6,7 +6,7 @@ import {
   resolvedAgentManifestSchema,
   sandboxBindingSchema,
   skillBundleSchema
-} from "./chunk-GOIK7WNT.ts";
+} from "./chunk-EAEQQT33.ts";
 import {
   findDynamicSlots,
   isDynamicSlot

package/dist/compiler-assets/{chunk-V5E4RKG6.ts → chunk-YEKSPL76.ts}

@@ -1,7 +1,7 @@
 import {
   BaseCapability,
   providerRefSchema
-} from "./chunk-GOIK7WNT.ts";
+} from "./chunk-EAEQQT33.ts";
 import {
   CredentialDelivery,
   InferenceCredentialKind

package/dist/compiler-assets/src/authoring/approval.ts

@@ -3,8 +3,8 @@ import {
   lowerApproval,
   never,
   whenInput
-} from "../../chunk-TFPXCL5W.ts";
-import "../../chunk-GOIK7WNT.ts";
+} from "../../chunk-O2JWY454.ts";
+import "../../chunk-EAEQQT33.ts";
 import "../../chunk-R4IHPPTB.ts";
 import "../../chunk-FU5VHNO4.ts";
 import "../../chunk-KTBNDKGJ.ts";

package/dist/compiler-assets/src/authoring/channels.ts

@@ -9,7 +9,7 @@ import {
   defineProviderChannel,
   disableChannel
 } from "../../chunk-ISYIPH2T.ts";
-import "../../chunk-JFNLGXQM.ts";
+import "../../chunk-JRKGCYWA.ts";
 import "../../chunk-FU5VHNO4.ts";
 import "../../chunk-KTBNDKGJ.ts";
 import "../../chunk-OX46N5EP.ts";

package/dist/compiler-assets/src/authoring/connections.ts

@@ -1,9 +1,9 @@
 import {
   defineHostedConnection,
   defineMcpClientConnection
-} from "../../chunk-JW4Y5OAP.ts";
+} from "../../chunk-BMX2HP6G.ts";
 import "../../chunk-VI5WBWUX.ts";
-import "../../chunk-GOIK7WNT.ts";
+import "../../chunk-EAEQQT33.ts";
 import "../../chunk-36MVFRMA.ts";
 import "../../chunk-XJNO7EHQ.ts";
 import "../../chunk-O3JKMLDP.ts";

package/dist/compiler-assets/src/authoring/harness.ts

@@ -1,9 +1,9 @@
 import {
   completeHarnessDescription,
   defineHarness
-} from "../../chunk-L7E6UQX3.ts";
-import "../../chunk-V5E4RKG6.ts";
-import "../../chunk-GOIK7WNT.ts";
+} from "../../chunk-U3MFLFVF.ts";
+import "../../chunk-YEKSPL76.ts";
+import "../../chunk-EAEQQT33.ts";
 import "../../chunk-QVHDGZAN.ts";
 import "../../chunk-R4IHPPTB.ts";
 import "../../chunk-FU5VHNO4.ts";

package/dist/compiler-assets/src/authoring/hooks.ts

@@ -5,7 +5,7 @@ import {
   defineHook,
   hookHandlersFor,
   normalizeHookKey
-} from "../../chunk-BLF6KTBB.ts";
+} from "../../chunk-KMBQVNAJ.ts";
 import {
   toolResultFrom
 } from "../../chunk-4ERFBLH7.ts";

package/dist/compiler-assets/src/authoring/index.ts

@@ -2,11 +2,11 @@ import "../../chunk-RMIQJHSL.ts";
 import {
   completeHarnessDescription,
   defineHarness
-} from "../../chunk-L7E6UQX3.ts";
+} from "../../chunk-U3MFLFVF.ts";
 import {
   HookEvent,
   defineHook
-} from "../../chunk-BLF6KTBB.ts";
+} from "../../chunk-KMBQVNAJ.ts";
 import {
   defineInstructions
 } from "../../chunk-WJPAUIVM.ts";
@@ -15,11 +15,11 @@ import {
   defineSandbox,
   defineSandboxProvider,
   harnessHost
-} from "../../chunk-S5ON7OBR.ts";
+} from "../../chunk-LZSLGWS7.ts";
 import "../../chunk-KNFPKVUS.ts";
 import {
   SandboxWire
-} from "../../chunk-V5E4RKG6.ts";
+} from "../../chunk-YEKSPL76.ts";
 import {
   defineSchedule
 } from "../../chunk-7MDGEPFT.ts";
@@ -37,7 +37,7 @@ import {
   always,
   never,
   whenInput
-} from "../../chunk-TFPXCL5W.ts";
+} from "../../chunk-O2JWY454.ts";
 import {
   DELETE,
   GET,
@@ -48,13 +48,13 @@ import {
   defineProviderChannel,
   disableChannel
 } from "../../chunk-ISYIPH2T.ts";
-import "../../chunk-JFNLGXQM.ts";
+import "../../chunk-JRKGCYWA.ts";
 import {
   defineHostedConnection,
   defineMcpClientConnection
-} from "../../chunk-JW4Y5OAP.ts";
+} from "../../chunk-BMX2HP6G.ts";
 import "../../chunk-VI5WBWUX.ts";
-import "../../chunk-GOIK7WNT.ts";
+import "../../chunk-EAEQQT33.ts";
 import {
   TranscriptRole
 } from "../../chunk-RWUIMTBI.ts";

package/dist/compiler-assets/src/authoring/sandbox.ts

@@ -3,13 +3,13 @@ import {
   defineSandbox,
   defineSandboxProvider,
   harnessHost
-} from "../../chunk-S5ON7OBR.ts";
+} from "../../chunk-LZSLGWS7.ts";
 import "../../chunk-KNFPKVUS.ts";
 import {
   SandboxWire
-} from "../../chunk-V5E4RKG6.ts";
+} from "../../chunk-YEKSPL76.ts";
 import "../../chunk-VI5WBWUX.ts";
-import "../../chunk-GOIK7WNT.ts";
+import "../../chunk-EAEQQT33.ts";
 import "../../chunk-QVHDGZAN.ts";
 import "../../chunk-R4IHPPTB.ts";
 import "../../chunk-FU5VHNO4.ts";

package/dist/compiler-assets/src/compatibility.ts

@@ -3,11 +3,11 @@ import {
   SHARED_SCHEMAS,
   deliveredHarnessConfig,
   referencedSharedSchemas
-} from "../chunk-V5E4RKG6.ts";
+} from "../chunk-YEKSPL76.ts";
 import {
   BaseCapability,
   formatProviderRef
-} from "../chunk-GOIK7WNT.ts";
+} from "../chunk-EAEQQT33.ts";
 import {
   credentialPolicySchema,
   inferenceKindOfNode

package/dist/compiler-assets/src/index.ts

@@ -5,7 +5,7 @@ import {
   resolveManifestDetailed,
   slotKindOf,
   validateSlotValue
-} from "../chunk-2LYL3UFK.ts";
+} from "../chunk-VRW24MOJ.ts";
 import {
   AGENT_DYNAMIC_PREFIX,
   AUTHORED_SERVER_KEY,
@@ -15,11 +15,11 @@ import "../chunk-RMIQJHSL.ts";
 import {
   completeHarnessDescription,
   defineHarness
-} from "../chunk-L7E6UQX3.ts";
+} from "../chunk-U3MFLFVF.ts";
 import {
   HookEvent,
   defineHook
-} from "../chunk-BLF6KTBB.ts";
+} from "../chunk-KMBQVNAJ.ts";
 import {
   defineInstructions
 } from "../chunk-WJPAUIVM.ts";
@@ -28,11 +28,11 @@ import {
   defineSandbox,
   defineSandboxProvider,
   harnessHost
-} from "../chunk-S5ON7OBR.ts";
+} from "../chunk-LZSLGWS7.ts";
 import "../chunk-KNFPKVUS.ts";
 import {
   SandboxWire
-} from "../chunk-V5E4RKG6.ts";
+} from "../chunk-YEKSPL76.ts";
 import {
   defineSchedule
 } from "../chunk-7MDGEPFT.ts";
@@ -50,7 +50,7 @@ import {
   always,
   never,
   whenInput
-} from "../chunk-TFPXCL5W.ts";
+} from "../chunk-O2JWY454.ts";
 import {
   DELETE,
   GET,
@@ -61,11 +61,11 @@ import {
   defineProviderChannel,
   disableChannel
 } from "../chunk-ISYIPH2T.ts";
-import "../chunk-JFNLGXQM.ts";
+import "../chunk-JRKGCYWA.ts";
 import {
   defineHostedConnection,
   defineMcpClientConnection
-} from "../chunk-JW4Y5OAP.ts";
+} from "../chunk-BMX2HP6G.ts";
 import "../chunk-VI5WBWUX.ts";
 import {
   BaseCapability,
@@ -92,12 +92,13 @@ import {
   mcpServerBindingSchema,
   resolvedAgentManifestSchema,
   sandboxBindingSchema,
+  sandboxCredentialRefSchema,
   scheduleDefinitionSchema,
   skillBundleSchema,
   skillFileSchema,
   toolDescriptorSchema,
   workerMcpServerBindingSchema
-} from "../chunk-GOIK7WNT.ts";
+} from "../chunk-EAEQQT33.ts";
 import {
   TranscriptRole
 } from "../chunk-RWUIMTBI.ts";
@@ -195,6 +196,7 @@ export {
   resolveManifestDetailed,
   resolvedAgentManifestSchema,
   sandboxBindingSchema,
+  sandboxCredentialRefSchema,
   scheduleDefinitionSchema,
   skillBundleSchema,
   skillFileSchema,

package/dist/compiler-assets/src/manifest.ts

@@ -24,12 +24,13 @@ import {
   mcpServerBindingSchema,
   resolvedAgentManifestSchema,
   sandboxBindingSchema,
+  sandboxCredentialRefSchema,
   scheduleDefinitionSchema,
   skillBundleSchema,
   skillFileSchema,
   toolDescriptorSchema,
   workerMcpServerBindingSchema
-} from "../chunk-GOIK7WNT.ts";
+} from "../chunk-EAEQQT33.ts";
 import {
   DynamicEvent,
   dynamicSlotSchema,
@@ -68,6 +69,7 @@ export {
   mcpServerBindingSchema,
   resolvedAgentManifestSchema,
   sandboxBindingSchema,
+  sandboxCredentialRefSchema,
   scheduleDefinitionSchema,
   skillBundleSchema,
   skillFileSchema,

package/dist/compiler-assets/src/resolve.ts

@@ -4,8 +4,8 @@ import {
   resolveManifestDetailed,
   slotKindOf,
   validateSlotValue
-} from "../chunk-2LYL3UFK.ts";
-import "../chunk-GOIK7WNT.ts";
+} from "../chunk-VRW24MOJ.ts";
+import "../chunk-EAEQQT33.ts";
 import "../chunk-R4IHPPTB.ts";
 import "../chunk-FU5VHNO4.ts";
 import "../chunk-KTXTYIF4.ts";

package/dist/compiler-assets/src/runtime/bundle.ts

@@ -1,26 +1,26 @@
 import {
   combineMcpServers,
   createIsolateRuntime
-} from "../../chunk-6MVG5NYI.ts";
+} from "../../chunk-4T2XPIPH.ts";
 import {
   describeBundle,
   needsCombinedMcpServers,
   synthesizedExports
-} from "../../chunk-YOE37BRR.ts";
-import "../../chunk-ZICJVGG7.ts";
+} from "../../chunk-MBX6PIN7.ts";
+import "../../chunk-GIRUQ7QF.ts";
 import {
   COMBINED_MCP_SERVERS_EXPORT,
   namedExportName
 } from "../../chunk-NMYHO2QN.ts";
-import "../../chunk-BLF6KTBB.ts";
+import "../../chunk-KMBQVNAJ.ts";
 import "../../chunk-KNFPKVUS.ts";
 import {
   registerToolName
 } from "../../chunk-4ERFBLH7.ts";
-import "../../chunk-TFPXCL5W.ts";
-import "../../chunk-JFNLGXQM.ts";
+import "../../chunk-O2JWY454.ts";
+import "../../chunk-JRKGCYWA.ts";
 import "../../chunk-VI5WBWUX.ts";
-import "../../chunk-GOIK7WNT.ts";
+import "../../chunk-EAEQQT33.ts";
 import "../../chunk-RWUIMTBI.ts";
 import "../../chunk-36MVFRMA.ts";
 import "../../chunk-XJNO7EHQ.ts";

package/dist/compiler-assets/src/runtime/describe.ts

@@ -4,15 +4,15 @@ import {
   describeDynamic,
   needsCombinedMcpServers,
   synthesizedExports
-} from "../../chunk-YOE37BRR.ts";
-import "../../chunk-ZICJVGG7.ts";
+} from "../../chunk-MBX6PIN7.ts";
+import "../../chunk-GIRUQ7QF.ts";
 import {
   COMBINED_MCP_SERVERS_EXPORT
 } from "../../chunk-NMYHO2QN.ts";
 import "../../chunk-4ERFBLH7.ts";
-import "../../chunk-TFPXCL5W.ts";
+import "../../chunk-O2JWY454.ts";
 import "../../chunk-VI5WBWUX.ts";
-import "../../chunk-GOIK7WNT.ts";
+import "../../chunk-EAEQQT33.ts";
 import "../../chunk-36MVFRMA.ts";
 import "../../chunk-XJNO7EHQ.ts";
 import "../../chunk-O3JKMLDP.ts";

package/dist/compiler-assets/src/runtime/described.ts

@@ -1,15 +1,15 @@
 import {
   IssueSeverity
-} from "../../chunk-ZICJVGG7.ts";
+} from "../../chunk-GIRUQ7QF.ts";
 import {
   SlotKind
 } from "../../chunk-NMYHO2QN.ts";
 import "../../chunk-4ERFBLH7.ts";
-import "../../chunk-TFPXCL5W.ts";
+import "../../chunk-O2JWY454.ts";
 import "../../chunk-VI5WBWUX.ts";
 import {
   agentAvatarSchema
-} from "../../chunk-GOIK7WNT.ts";
+} from "../../chunk-EAEQQT33.ts";
 import "../../chunk-36MVFRMA.ts";
 import "../../chunk-XJNO7EHQ.ts";
 import "../../chunk-O3JKMLDP.ts";

package/dist/compiler-assets/src/runtime/isolate.ts

@@ -2,16 +2,16 @@ import {
   combineMcpServers,
   createIsolateRuntime,
   lowerResolvedValue
-} from "../../chunk-6MVG5NYI.ts";
-import "../../chunk-ZICJVGG7.ts";
+} from "../../chunk-4T2XPIPH.ts";
+import "../../chunk-GIRUQ7QF.ts";
 import "../../chunk-NMYHO2QN.ts";
-import "../../chunk-BLF6KTBB.ts";
+import "../../chunk-KMBQVNAJ.ts";
 import "../../chunk-KNFPKVUS.ts";
 import "../../chunk-4ERFBLH7.ts";
-import "../../chunk-TFPXCL5W.ts";
-import "../../chunk-JFNLGXQM.ts";
+import "../../chunk-O2JWY454.ts";
+import "../../chunk-JRKGCYWA.ts";
 import "../../chunk-VI5WBWUX.ts";
-import "../../chunk-GOIK7WNT.ts";
+import "../../chunk-EAEQQT33.ts";
 import "../../chunk-RWUIMTBI.ts";
 import "../../chunk-36MVFRMA.ts";
 import "../../chunk-XJNO7EHQ.ts";

package/dist/compiler-assets/src/runtime/lower.ts

@@ -17,11 +17,11 @@ import {
   toJson,
   toJsonSchema,
   warning
-} from "../../chunk-ZICJVGG7.ts";
+} from "../../chunk-GIRUQ7QF.ts";
 import "../../chunk-4ERFBLH7.ts";
-import "../../chunk-TFPXCL5W.ts";
+import "../../chunk-O2JWY454.ts";
 import "../../chunk-VI5WBWUX.ts";
-import "../../chunk-GOIK7WNT.ts";
+import "../../chunk-EAEQQT33.ts";
 import "../../chunk-36MVFRMA.ts";
 import "../../chunk-XJNO7EHQ.ts";
 import "../../chunk-O3JKMLDP.ts";

package/dist/modules/authoring/channels.d.mts

@@ -1,4 +1,4 @@
-import type { AcpUpdateKind, KnownAcpUpdateKind, ChannelAddressContextIface, ChannelDefinitionIface, ChannelEventHandler, ChannelReceiveContextIface, ChannelReceiveResult, ChannelSemanticDataByKindIface, HttpChannelRouteDefinitionIface, JsonObject, JsonValue, PendingEventKind, ProjectionContextIface, TurnPolicy, WebSocketChannelRouteDefinitionIface } from '@finalai/agent-provider';
+import type { AcpUpdateKind, KnownAcpUpdateKind, ChannelAddressContextIface, ChannelDefinitionIface, ChannelEventHandler, ChannelReceiveContextIface, ChannelReceiveResult, ChannelSemanticDataByKindIface, HttpChannelRouteDefinitionIface, JsonObject, JsonValue, DecisionEventKind, ProjectionContextIface, TurnPolicy, WebSocketChannelRouteDefinitionIface } from '@finalai/agent-provider';
 export { channelAccessors } from '@finalai/agent-provider';
 export type RouteHandler = HttpChannelRouteDefinitionIface['handler'];
 export type RouteHandlerArgsIface = Parameters<RouteHandler>[0];
@@ -24,7 +24,7 @@ export type AuthoredSemanticEventsIface = {
 };
 type AuthoredSemanticHandlerIface = NonNullable<AuthoredSemanticEventsIface[keyof AuthoredSemanticEventsIface]>;
 export type AuthoredChannelEventsIface = AuthoredSemanticEventsIface & {
-    [Kind in `${PendingEventKind}` | KnownAcpUpdateKind]?: ChannelEventHandler;
+    [Kind in `${DecisionEventKind}` | KnownAcpUpdateKind]?: ChannelEventHandler;
 } & {
     [kind: AcpUpdateKind]: ChannelEventHandler | AuthoredSemanticHandlerIface | undefined;
 };
@@ -55,8 +55,8 @@ export declare const defineChannel: <TChannel extends AuthoredChannelDefinitionI
         subagent_update?: ChannelEventHandler | undefined;
         session_message?: ChannelEventHandler | undefined;
         session_message_chunk?: ChannelEventHandler | undefined;
-        "pending.created"?: ChannelEventHandler | undefined;
-        "pending.resolved"?: ChannelEventHandler | undefined;
+        "decision.created"?: ChannelEventHandler | undefined;
+        "decision.resolved"?: ChannelEventHandler | undefined;
     };
 };
 export declare const disableChannel: () => Omit<{
@@ -88,8 +88,8 @@ export declare const disableChannel: () => Omit<{
         subagent_update?: ChannelEventHandler | undefined;
         session_message?: ChannelEventHandler | undefined;
         session_message_chunk?: ChannelEventHandler | undefined;
-        "pending.created"?: ChannelEventHandler | undefined;
-        "pending.resolved"?: ChannelEventHandler | undefined;
+        "decision.created"?: ChannelEventHandler | undefined;
+        "decision.resolved"?: ChannelEventHandler | undefined;
     };
 };
 export declare const GET: (path: string, handler: RouteHandler) => HttpChannelRouteDefinitionIface;

package/dist/modules/authoring/channels.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/authoring/channels.ts"],
-  "sourcesContent": ["import type {\n  AcpUpdateKind,\n  KnownAcpUpdateKind,\n  ChannelAddressContextIface,\n  ChannelDefinitionIface,\n  ChannelEventHandler,\n  ChannelReceiveContextIface,\n  ChannelReceiveResult,\n  ChannelSemanticDataByKindIface,\n  HttpChannelRouteDefinitionIface,\n  JsonObject,\n  JsonValue,\n  PendingEventKind,\n  ProjectionContextIface,\n  TurnPolicy,\n  WebSocketChannelRouteDefinitionIface,\n} from '@finalai/agent-provider';\nimport {\n  channelAccessors,\n  channelMessageCompletedSchema,\n  jsonObjectSchema,\n} from '@finalai/agent-provider';\n\n// Session handles over a projection context's platform (`attachSession(ctx.sessionId)`)\n// for raw event handlers (`pending.created`, ACP updates).\nexport { channelAccessors } from '@finalai/agent-provider';\nimport * as z from 'zod';\nimport { AuthoredKind, stamp } from \"./brand.mjs\";\n\n// A custom channel in channels/<stem>.ts. Its routes run\n// in the agent's Worker isolate and are mounted by the session service's\n// front door at /<org>/<agent>/<stem><path> (and /b/<bindingId><path>);\n// the members it authors (receive, route, project, events) run there too,\n// driven by the session service exactly like a built-in channel's. What it\n// leaves out is the platform default: receive takes `{ target, content }`,\n// route follows the default routing rules, and the conversation's own channel projects.\n//\n// A bundle channel sees wire ids everywhere (conversations `conv_\u2026`,\n// participants `cpart_\u2026`, messages `cnmsg_\u2026`, users `usr_\u2026`, its binding\n// `chbind_\u2026`, turns `atrn_\u2026`, pending requests `apnd_\u2026`), the same strings the\n// public API returns, and must pass wire ids back to `ctx.platform`, `receive`\n// results and route decisions; raw UUIDs are refused.\n\nexport type RouteHandler = HttpChannelRouteDefinitionIface['handler'];\nexport type RouteHandlerArgsIface = Parameters<RouteHandler>[0];\n\nexport type AuthoredChannelDefinitionIface = Partial<\n  Omit<ChannelDefinitionIface<JsonValue, JsonValue>, 'turnPolicy' | 'events' | 'receive'>\n> & {\n  receive?: (\n    input: JsonValue,\n    ctx: ChannelReceiveContextIface & ChannelAddressContextIface,\n  ) => Promise<ChannelReceiveResult>;\n  events?: AuthoredChannelEventsIface;\n  readonly turnPolicy?: TurnPolicy | `${TurnPolicy}`;\n  // Static binding config recorded in the manifest.\n  readonly config?: JsonObject;\n  readonly disabled?: boolean;\n};\n\nexport interface AuthoredChannelContextIface extends ChannelAddressContextIface {\n  platform: ProjectionContextIface['platform'];\n}\nexport interface AuthoredSessionContextIface {\n  sessionId: string | null;\n  turnId: string;\n  state: ProjectionContextIface['state'];\n  // The binding's config and the agent's secrets: what a channel needs to post\n  // its replies back to its own service.\n  config: JsonObject;\n  secrets: ProjectionContextIface['secrets'];\n}\nexport type AuthoredSemanticEventsIface = {\n  [Kind in keyof ChannelSemanticDataByKindIface]?: (\n    data: ChannelSemanticDataByKindIface[Kind],\n    channel: AuthoredChannelContextIface,\n    ctx: AuthoredSessionContextIface,\n  ) => void | Promise<void>;\n};\n\ntype AuthoredSemanticHandlerIface = NonNullable<\n  AuthoredSemanticEventsIface[keyof AuthoredSemanticEventsIface]\n>;\n\n// Semantic events (`message.delta`, \u2026) take `(data, channel, ctx)`; pending\n// events and ACP update kinds (`tool_call`, `plan`, \u2026) the raw `(event, ctx)`.\n// Named kinds keep a single handler type, so their parameters are typed from\n// context; ACP kinds the SDK does not name share the open index signature and\n// need annotated parameters.\nexport type AuthoredChannelEventsIface = AuthoredSemanticEventsIface & {\n  [Kind in `${PendingEventKind}` | KnownAcpUpdateKind]?: ChannelEventHandler;\n} & {\n  [kind: AcpUpdateKind]: ChannelEventHandler | AuthoredSemanticHandlerIface | undefined;\n};\n\nexport const defineChannel = <TChannel extends AuthoredChannelDefinitionIface>(\n  definition: TChannel,\n) => {\n  const {\n    'message.delta': delta,\n    'message.completed': completed,\n    'turn.started': started,\n    'turn.completed': ended,\n    ...raw\n  } = definition.events ?? {};\n  const events = { ...raw };\n  const wrap = <Data>(\n    schema: z.ZodType<Data>,\n    handler:\n      | ((\n          data: Data,\n          channel: AuthoredChannelContextIface,\n          ctx: AuthoredSessionContextIface,\n        ) => void | Promise<void>)\n      | undefined,\n  ): ChannelEventHandler | undefined =>\n    handler == null\n      ? undefined\n      : async (event, ctx) =>\n          handler(\n            schema.parse(event.data),\n            { ...channelAccessors(ctx.platform), platform: ctx.platform },\n            {\n              sessionId: ctx.sessionId ?? null,\n              turnId: ctx.turn.id,\n              state: ctx.state,\n              config: ctx.config,\n              secrets: ctx.secrets,\n            },\n          );\n  const semantic = {\n    'message.delta': wrap(z.object({ messageId: z.string(), delta: jsonObjectSchema }), delta),\n    'message.completed': wrap(channelMessageCompletedSchema, completed),\n    'turn.started': wrap(z.object({ turnId: z.string() }), started),\n    'turn.completed': wrap(\n      z.object({ turnId: z.string(), stopReason: z.string().nullable() }),\n      ended,\n    ),\n  };\n  for (const [kind, handler] of Object.entries(semantic))\n    if (handler != null) events[kind] = handler;\n  const { installed, configure, ...authored } = definition;\n  return stamp(\n    { ...authored, configure: installed == null ? configure : undefined, events },\n    AuthoredKind.Channel,\n  );\n};\n\nexport const disableChannel = () => defineChannel({ disabled: true });\n\nconst route =\n  (method: HttpChannelRouteDefinitionIface['method']) =>\n  (path: string, handler: RouteHandler): HttpChannelRouteDefinitionIface => ({\n    method,\n    path,\n    handler,\n  });\n\nexport const GET = route('GET');\nexport const POST = route('POST');\nexport const PUT = route('PUT');\nexport const DELETE = route('DELETE');\n\nexport const WS = (\n  path: string,\n  handler: WebSocketChannelRouteDefinitionIface['handler'],\n): WebSocketChannelRouteDefinitionIface => ({ method: 'WS', path, handler });\n\n// Provider factories already own their installed reference and runtime handlers.\nexport const defineProviderChannel = <T extends ChannelDefinitionIface<JsonValue, JsonValue>>(\n  definition: T,\n): T => stamp(definition, AuthoredKind.Channel);\n"],
+  "sourcesContent": ["import type {\n  AcpUpdateKind,\n  KnownAcpUpdateKind,\n  ChannelAddressContextIface,\n  ChannelDefinitionIface,\n  ChannelEventHandler,\n  ChannelReceiveContextIface,\n  ChannelReceiveResult,\n  ChannelSemanticDataByKindIface,\n  HttpChannelRouteDefinitionIface,\n  JsonObject,\n  JsonValue,\n  DecisionEventKind,\n  ProjectionContextIface,\n  TurnPolicy,\n  WebSocketChannelRouteDefinitionIface,\n} from '@finalai/agent-provider';\nimport {\n  channelAccessors,\n  channelMessageCompletedSchema,\n  jsonObjectSchema,\n} from '@finalai/agent-provider';\n\n// Session handles over a projection context's platform (`attachSession(ctx.sessionId)`)\n// for raw event handlers (`decision.created`, ACP updates).\nexport { channelAccessors } from '@finalai/agent-provider';\nimport * as z from 'zod';\nimport { AuthoredKind, stamp } from \"./brand.mjs\";\n\n// A custom channel in channels/<stem>.ts. Its routes run\n// in the agent's Worker isolate and are mounted by the session service's\n// front door at /<org>/<agent>/<stem><path> (and /b/<bindingId><path>);\n// the members it authors (receive, route, project, events) run there too,\n// driven by the session service exactly like a built-in channel's. What it\n// leaves out is the platform default: receive takes `{ target, content }`,\n// route follows the default routing rules, and the conversation's own channel projects.\n//\n// A bundle channel sees wire ids everywhere (conversations `conv_\u2026`,\n// participants `cpart_\u2026`, messages `cnmsg_\u2026`, users `usr_\u2026`, its binding\n// `chbind_\u2026`, turns `atrn_\u2026`, decisions `adec_\u2026`), the same strings the\n// public API returns, and must pass wire ids back to `ctx.platform`, `receive`\n// results and route decisions; raw UUIDs are refused.\n\nexport type RouteHandler = HttpChannelRouteDefinitionIface['handler'];\nexport type RouteHandlerArgsIface = Parameters<RouteHandler>[0];\n\nexport type AuthoredChannelDefinitionIface = Partial<\n  Omit<ChannelDefinitionIface<JsonValue, JsonValue>, 'turnPolicy' | 'events' | 'receive'>\n> & {\n  receive?: (\n    input: JsonValue,\n    ctx: ChannelReceiveContextIface & ChannelAddressContextIface,\n  ) => Promise<ChannelReceiveResult>;\n  events?: AuthoredChannelEventsIface;\n  readonly turnPolicy?: TurnPolicy | `${TurnPolicy}`;\n  // Static binding config recorded in the manifest.\n  readonly config?: JsonObject;\n  readonly disabled?: boolean;\n};\n\nexport interface AuthoredChannelContextIface extends ChannelAddressContextIface {\n  platform: ProjectionContextIface['platform'];\n}\nexport interface AuthoredSessionContextIface {\n  sessionId: string | null;\n  turnId: string;\n  state: ProjectionContextIface['state'];\n  // The binding's config and the agent's secrets: what a channel needs to post\n  // its replies back to its own service.\n  config: JsonObject;\n  secrets: ProjectionContextIface['secrets'];\n}\nexport type AuthoredSemanticEventsIface = {\n  [Kind in keyof ChannelSemanticDataByKindIface]?: (\n    data: ChannelSemanticDataByKindIface[Kind],\n    channel: AuthoredChannelContextIface,\n    ctx: AuthoredSessionContextIface,\n  ) => void | Promise<void>;\n};\n\ntype AuthoredSemanticHandlerIface = NonNullable<\n  AuthoredSemanticEventsIface[keyof AuthoredSemanticEventsIface]\n>;\n\n// Semantic events (`message.delta`, \u2026) take `(data, channel, ctx)`; decision\n// events and ACP update kinds (`tool_call`, `plan`, \u2026) the raw `(event, ctx)`.\n// Named kinds keep a single handler type, so their parameters are typed from\n// context; ACP kinds the SDK does not name share the open index signature and\n// need annotated parameters.\nexport type AuthoredChannelEventsIface = AuthoredSemanticEventsIface & {\n  [Kind in `${DecisionEventKind}` | KnownAcpUpdateKind]?: ChannelEventHandler;\n} & {\n  [kind: AcpUpdateKind]: ChannelEventHandler | AuthoredSemanticHandlerIface | undefined;\n};\n\nexport const defineChannel = <TChannel extends AuthoredChannelDefinitionIface>(\n  definition: TChannel,\n) => {\n  const {\n    'message.delta': delta,\n    'message.completed': completed,\n    'turn.started': started,\n    'turn.completed': ended,\n    ...raw\n  } = definition.events ?? {};\n  const events = { ...raw };\n  const wrap = <Data>(\n    schema: z.ZodType<Data>,\n    handler:\n      | ((\n          data: Data,\n          channel: AuthoredChannelContextIface,\n          ctx: AuthoredSessionContextIface,\n        ) => void | Promise<void>)\n      | undefined,\n  ): ChannelEventHandler | undefined =>\n    handler == null\n      ? undefined\n      : async (event, ctx) =>\n          handler(\n            schema.parse(event.data),\n            { ...channelAccessors(ctx.platform), platform: ctx.platform },\n            {\n              sessionId: ctx.sessionId ?? null,\n              turnId: ctx.turn.id,\n              state: ctx.state,\n              config: ctx.config,\n              secrets: ctx.secrets,\n            },\n          );\n  const semantic = {\n    'message.delta': wrap(z.object({ messageId: z.string(), delta: jsonObjectSchema }), delta),\n    'message.completed': wrap(channelMessageCompletedSchema, completed),\n    'turn.started': wrap(z.object({ turnId: z.string() }), started),\n    'turn.completed': wrap(\n      z.object({ turnId: z.string(), stopReason: z.string().nullable() }),\n      ended,\n    ),\n  };\n  for (const [kind, handler] of Object.entries(semantic))\n    if (handler != null) events[kind] = handler;\n  const { installed, configure, ...authored } = definition;\n  return stamp(\n    { ...authored, configure: installed == null ? configure : undefined, events },\n    AuthoredKind.Channel,\n  );\n};\n\nexport const disableChannel = () => defineChannel({ disabled: true });\n\nconst route =\n  (method: HttpChannelRouteDefinitionIface['method']) =>\n  (path: string, handler: RouteHandler): HttpChannelRouteDefinitionIface => ({\n    method,\n    path,\n    handler,\n  });\n\nexport const GET = route('GET');\nexport const POST = route('POST');\nexport const PUT = route('PUT');\nexport const DELETE = route('DELETE');\n\nexport const WS = (\n  path: string,\n  handler: WebSocketChannelRouteDefinitionIface['handler'],\n): WebSocketChannelRouteDefinitionIface => ({ method: 'WS', path, handler });\n\n// Provider factories already own their installed reference and runtime handlers.\nexport const defineProviderChannel = <T extends ChannelDefinitionIface<JsonValue, JsonValue>>(\n  definition: T,\n): T => stamp(definition, AuthoredKind.Channel);\n"],
   "mappings": "AAiBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,oBAAAA,yBAAwB;AACjC,YAAY,OAAO;AACnB,SAAS,cAAc,aAAa;AAoE7B,MAAM,gBAAgB,CAC3B,eACG;AACH,QAAM;AAAA,IACJ,iBAAiB;AAAA,IACjB,qBAAqB;AAAA,IACrB,gBAAgB;AAAA,IAChB,kBAAkB;AAAA,IAClB,GAAG;AAAA,EACL,IAAI,WAAW,UAAU,CAAC;AAC1B,QAAM,SAAS,EAAE,GAAG,IAAI;AACxB,QAAM,OAAO,CACX,QACA,YAQA,WAAW,OACP,SACA,OAAO,OAAO,QACZ;AAAA,IACE,OAAO,MAAM,MAAM,IAAI;AAAA,IACvB,EAAE,GAAG,iBAAiB,IAAI,QAAQ,GAAG,UAAU,IAAI,SAAS;AAAA,IAC5D;AAAA,MACE,WAAW,IAAI,aAAa;AAAA,MAC5B,QAAQ,IAAI,KAAK;AAAA,MACjB,OAAO,IAAI;AAAA,MACX,QAAQ,IAAI;AAAA,MACZ,SAAS,IAAI;AAAA,IACf;AAAA,EACF;AACR,QAAM,WAAW;AAAA,IACf,iBAAiB,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,GAAG,OAAO,iBAAiB,CAAC,GAAG,KAAK;AAAA,IACzF,qBAAqB,KAAK,+BAA+B,SAAS;AAAA,IAClE,gBAAgB,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO;AAAA,IAC9D,kBAAkB;AAAA,MAChB,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACA,aAAW,CAAC,MAAM,OAAO,KAAK,OAAO,QAAQ,QAAQ;AACnD,QAAI,WAAW,KAAM,QAAO,IAAI,IAAI;AACtC,QAAM,EAAE,WAAW,WAAW,GAAG,SAAS,IAAI;AAC9C,SAAO;AAAA,IACL,EAAE,GAAG,UAAU,WAAW,aAAa,OAAO,YAAY,QAAW,OAAO;AAAA,IAC5E,aAAa;AAAA,EACf;AACF;AAEO,MAAM,iBAAiB,MAAM,cAAc,EAAE,UAAU,KAAK,CAAC;AAEpE,MAAM,QACJ,CAAC,WACD,CAAC,MAAc,aAA4D;AAAA,EACzE;AAAA,EACA;AAAA,EACA;AACF;AAEK,MAAM,MAAM,MAAM,KAAK;AACvB,MAAM,OAAO,MAAM,MAAM;AACzB,MAAM,MAAM,MAAM,KAAK;AACvB,MAAM,SAAS,MAAM,QAAQ;AAE7B,MAAM,KAAK,CAChB,MACA,aAC0C,EAAE,QAAQ,MAAM,MAAM,QAAQ;AAGnE,MAAM,wBAAwB,CACnC,eACM,MAAM,YAAY,aAAa,OAAO;",
   "names": ["channelAccessors"]
 }

package/dist/modules/authoring/hooks.d.mts

@@ -15,8 +15,8 @@ export declare enum HookEvent {
     ToolCallUpdate = "tool_call_update",
     ToolCallContentChunk = "tool_call_content_chunk",
     Plan = "plan",
-    PendingCreated = "pending.created",
-    PendingResolved = "pending.resolved",
+    DecisionCreated = "decision.created",
+    DecisionResolved = "decision.resolved",
     StateUpdate = "state_update",
     SessionFailed = "session.failed",
     SessionClosed = "session.closed",
@@ -66,13 +66,13 @@ export interface HookEventDataMapIface {
     tool_call: ToolCallEventDataIface;
     tool_call_update: ToolCallEventDataIface;
     tool_call_content_chunk: ToolCallEventDataIface;
-    'pending.created': {
-        pendingId: string;
+    'decision.created': {
+        decisionId: string;
         kind: 'permission' | 'elicitation' | 'authorization';
         request: JsonValue;
     };
-    'pending.resolved': {
-        pendingId: string;
+    'decision.resolved': {
+        decisionId: string;
         outcome: JsonValue;
     };
     'session.failed': {

package/dist/modules/authoring/hooks.mjs

@@ -14,8 +14,8 @@ var HookEvent = /* @__PURE__ */ ((HookEvent2) => {
   HookEvent2["ToolCallUpdate"] = "tool_call_update";
   HookEvent2["ToolCallContentChunk"] = "tool_call_content_chunk";
   HookEvent2["Plan"] = "plan";
-  HookEvent2["PendingCreated"] = "pending.created";
-  HookEvent2["PendingResolved"] = "pending.resolved";
+  HookEvent2["DecisionCreated"] = "decision.created";
+  HookEvent2["DecisionResolved"] = "decision.resolved";
   HookEvent2["StateUpdate"] = "state_update";
   HookEvent2["SessionFailed"] = "session.failed";
   HookEvent2["SessionClosed"] = "session.closed";

package/dist/modules/authoring/hooks.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/authoring/hooks.ts"],
-  "sourcesContent": ["import type {\n  HostedBindingsIface,\n  JsonValue,\n  NetworkSandboxSessionIface,\n} from '@finalai/agent-provider';\nimport * as z from 'zod';\nimport { authoredRecordSchema, isCallable, type AuthoredValue } from \"../runtime/values.mjs\";\nimport { AuthoredKind, stamp } from \"./brand.mjs\";\nimport type {\n  AgentSessionInfoIface,\n  FinalPlatformClientIface,\n  SecretsIface,\n  TranscriptMessageIface,\n} from \"./context.mjs\";\nimport type { ToolCallEventDataIface } from \"./tools.mjs\";\n\nexport { toolResultFrom } from \"./tools.mjs\";\n\n// Observe-only subscribers to the session's ACP log. Event\n// names are ACP update kinds and request methods plus a few session-service\n// lifecycle events. Only these canonical names are accepted.\n\nexport enum HookEvent {\n  SessionOpened = 'session.opened',\n  TurnStarted = 'turn.started',\n  TurnEnded = 'turn.ended',\n  UserMessageChunk = 'user_message_chunk',\n  AgentMessageChunk = 'agent_message_chunk',\n  AgentMessage = 'agent_message',\n  AgentThoughtChunk = 'agent_thought_chunk',\n  ToolCall = 'tool_call',\n  ToolCallUpdate = 'tool_call_update',\n  ToolCallContentChunk = 'tool_call_content_chunk',\n  Plan = 'plan',\n  PendingCreated = 'pending.created',\n  PendingResolved = 'pending.resolved',\n  StateUpdate = 'state_update',\n  SessionFailed = 'session.failed',\n  SessionClosed = 'session.closed',\n  CompactionUpdate = 'compaction_update',\n  UsageUpdate = 'usage_update',\n  AvailableCommandsUpdate = 'available_commands_update',\n  CurrentModeUpdate = 'current_mode_update',\n  ConfigOptionUpdate = 'config_option_update',\n  SessionInfoUpdate = 'session_info_update',\n  Notice = 'notice',\n}\n\nexport const HOOK_WILDCARD = '*';\n\nconst CANONICAL_EVENTS: ReadonlySet<string> = new Set(Object.values(HookEvent));\n\nexport enum HookEventKeyKind {\n  Canonical = 'canonical',\n  Wildcard = 'wildcard',\n  Unknown = 'unknown',\n}\n\nexport interface NormalizedHookKeyIface {\n  key: string;\n  kind: HookEventKeyKind;\n  // Canonical event names this key subscribes to ('*' for the wildcard).\n  events: string[];\n}\n\nexport const normalizeHookKey = (key: string): NormalizedHookKeyIface => {\n  if (key === HOOK_WILDCARD)\n    return { key, kind: HookEventKeyKind.Wildcard, events: [HOOK_WILDCARD] };\n  if (CANONICAL_EVENTS.has(key) || key.startsWith('_final/')) {\n    return { key, kind: HookEventKeyKind.Canonical, events: [key] };\n  }\n  return { key, kind: HookEventKeyKind.Unknown, events: [] };\n};\n\nexport interface HookEventMetaIface {\n  // '<sessionId>:<seq>' with the session's wire id (`ases_\u2026:12`): sortable\n  // within a session and stable across redelivery.\n  id: string;\n  at: string;\n  seq: number;\n}\n\nexport interface HookEventIface<TType extends string = string, TData = AuthoredValue> {\n  type: TType;\n  data: TData;\n  meta: HookEventMetaIface;\n}\n\n// Lifecycle event data names platform objects by their wire ids, as the public\n// API does: sessions `ases_\u2026`, turns `atrn_\u2026`, participants `cpart_\u2026`, pending\n// requests `apnd_\u2026`. `promptMessageId` is the harness's ACP message id. ACP\n// update events (tool_call, agent_message_chunk, \u2026) carry the ACP payload as is.\nexport interface HookEventDataMapIface {\n  'session.opened': { sessionId: string };\n  'turn.started': {\n    turnId: string;\n    promptMessageId: string | null;\n    authorParticipantId: string | null;\n  };\n  'turn.ended': { turnId: string; stopReason: string | null };\n  tool_call: ToolCallEventDataIface;\n  tool_call_update: ToolCallEventDataIface;\n  tool_call_content_chunk: ToolCallEventDataIface;\n  'pending.created': {\n    pendingId: string;\n    kind: 'permission' | 'elicitation' | 'authorization';\n    request: JsonValue;\n  };\n  'pending.resolved': { pendingId: string; outcome: JsonValue };\n  'session.failed': { reason: string | null };\n  'session.closed': { reason: string | null };\n}\n\ntype CanonicalData<TKey extends string> = TKey extends keyof HookEventDataMapIface\n  ? HookEventDataMapIface[TKey]\n  : Record<string, JsonValue>;\n\nexport type HookEventKey = `${HookEvent}` | typeof HOOK_WILDCARD | `_final/${string}`;\n\nexport type HookEventFor<TKey extends string> = TKey extends typeof HOOK_WILDCARD\n  ? HookEventIface\n  : HookEventIface<TKey, CanonicalData<TKey>>;\n\nexport interface HookSessionInfoIface extends AgentSessionInfoIface {\n  readonly messages: readonly TranscriptMessageIface[];\n}\n\nexport interface HookContextIface {\n  readonly session: HookSessionInfoIface;\n  readonly agent: {\n    readonly definitionId: string;\n    readonly name: string;\n    readonly revisionId: string;\n  };\n  readonly channel: { readonly kind: string | null };\n  getSandbox(target?: string): Promise<NetworkSandboxSessionIface>;\n  // Sends session/cancel for the running turn.\n  cancel(): void;\n  readonly secrets: SecretsIface;\n  readonly bindings?: HostedBindingsIface;\n  readonly final: FinalPlatformClientIface;\n}\n\nexport type HookHandler<TKey extends string> = (\n  event: HookEventFor<TKey>,\n  ctx: HookContextIface,\n) => void | Promise<void>;\n\nexport type HookHandlersIface = { readonly [TKey in HookEventKey]?: HookHandler<TKey> };\n\nexport interface HookDefinitionIface {\n  readonly events?: HookHandlersIface;\n}\n\nexport const defineHook = (definition: HookDefinitionIface): HookDefinitionIface =>\n  stamp({ ...definition }, AuthoredKind.Hook);\n\nexport interface HookDispatchEventIface {\n  type: string;\n  data: AuthoredValue;\n  meta: HookEventMetaIface;\n}\n\nconst keyMatches = (key: string, event: HookDispatchEventIface): boolean =>\n  key === event.type && (CANONICAL_EVENTS.has(key) || key.startsWith('_final/'));\n\nexport type HookInvocable = (event: HookDispatchEventIface, ctx: HookContextIface) => AuthoredValue;\n\nconst hookEventsSchema = z.looseObject({ events: authoredRecordSchema });\n\n// Handlers for one event: typed handlers in declaration order, then the\n// wildcard.\nexport const hookHandlersFor = (\n  hook: AuthoredValue,\n  event: HookDispatchEventIface,\n): HookInvocable[] => {\n  const parsed = hookEventsSchema.safeParse(hook);\n  if (!parsed.success) return [];\n  const typed: HookInvocable[] = [];\n  let wildcard: HookInvocable | null = null;\n  for (const [key, handler] of Object.entries(parsed.data.events)) {\n    if (!isCallable(handler)) continue;\n    const invoke: HookInvocable = (dispatched, ctx) => handler(dispatched, ctx);\n    if (key === HOOK_WILDCARD) wildcard = invoke;\n    else if (keyMatches(key, event)) typed.push(invoke);\n  }\n  return wildcard == null ? typed : [...typed, wildcard];\n};\n"],
-  "mappings": "AAKA,YAAY,OAAO;AACnB,SAAS,sBAAsB,kBAAsC;AACrE,SAAS,cAAc,aAAa;AASpC,SAAS,sBAAsB;AAMxB,IAAK,YAAL,kBAAKA,eAAL;AACL,EAAAA,WAAA,mBAAgB;AAChB,EAAAA,WAAA,iBAAc;AACd,EAAAA,WAAA,eAAY;AACZ,EAAAA,WAAA,sBAAmB;AACnB,EAAAA,WAAA,uBAAoB;AACpB,EAAAA,WAAA,kBAAe;AACf,EAAAA,WAAA,uBAAoB;AACpB,EAAAA,WAAA,cAAW;AACX,EAAAA,WAAA,oBAAiB;AACjB,EAAAA,WAAA,0BAAuB;AACvB,EAAAA,WAAA,UAAO;AACP,EAAAA,WAAA,oBAAiB;AACjB,EAAAA,WAAA,qBAAkB;AAClB,EAAAA,WAAA,iBAAc;AACd,EAAAA,WAAA,mBAAgB;AAChB,EAAAA,WAAA,mBAAgB;AAChB,EAAAA,WAAA,sBAAmB;AACnB,EAAAA,WAAA,iBAAc;AACd,EAAAA,WAAA,6BAA0B;AAC1B,EAAAA,WAAA,uBAAoB;AACpB,EAAAA,WAAA,wBAAqB;AACrB,EAAAA,WAAA,uBAAoB;AACpB,EAAAA,WAAA,YAAS;AAvBC,SAAAA;AAAA,GAAA;AA0BL,MAAM,gBAAgB;AAE7B,MAAM,mBAAwC,IAAI,IAAI,OAAO,OAAO,SAAS,CAAC;AAEvE,IAAK,mBAAL,kBAAKC,sBAAL;AACL,EAAAA,kBAAA,eAAY;AACZ,EAAAA,kBAAA,cAAW;AACX,EAAAA,kBAAA,aAAU;AAHA,SAAAA;AAAA,GAAA;AAaL,MAAM,mBAAmB,CAAC,QAAwC;AACvE,MAAI,QAAQ;AACV,WAAO,EAAE,KAAK,MAAM,2BAA2B,QAAQ,CAAC,aAAa,EAAE;AACzE,MAAI,iBAAiB,IAAI,GAAG,KAAK,IAAI,WAAW,SAAS,GAAG;AAC1D,WAAO,EAAE,KAAK,MAAM,6BAA4B,QAAQ,CAAC,GAAG,EAAE;AAAA,EAChE;AACA,SAAO,EAAE,KAAK,MAAM,yBAA0B,QAAQ,CAAC,EAAE;AAC3D;AAkFO,MAAM,aAAa,CAAC,eACzB,MAAM,EAAE,GAAG,WAAW,GAAG,aAAa,IAAI;AAQ5C,MAAM,aAAa,CAAC,KAAa,UAC/B,QAAQ,MAAM,SAAS,iBAAiB,IAAI,GAAG,KAAK,IAAI,WAAW,SAAS;AAI9E,MAAM,mBAAmB,EAAE,YAAY,EAAE,QAAQ,qBAAqB,CAAC;AAIhE,MAAM,kBAAkB,CAC7B,MACA,UACoB;AACpB,QAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,MAAI,CAAC,OAAO,QAAS,QAAO,CAAC;AAC7B,QAAM,QAAyB,CAAC;AAChC,MAAI,WAAiC;AACrC,aAAW,CAAC,KAAK,OAAO,KAAK,OAAO,QAAQ,OAAO,KAAK,MAAM,GAAG;AAC/D,QAAI,CAAC,WAAW,OAAO,EAAG;AAC1B,UAAM,SAAwB,CAAC,YAAY,QAAQ,QAAQ,YAAY,GAAG;AAC1E,QAAI,QAAQ,cAAe,YAAW;AAAA,aAC7B,WAAW,KAAK,KAAK,EAAG,OAAM,KAAK,MAAM;AAAA,EACpD;AACA,SAAO,YAAY,OAAO,QAAQ,CAAC,GAAG,OAAO,QAAQ;AACvD;",
+  "sourcesContent": ["import type {\n  HostedBindingsIface,\n  JsonValue,\n  NetworkSandboxSessionIface,\n} from '@finalai/agent-provider';\nimport * as z from 'zod';\nimport { authoredRecordSchema, isCallable, type AuthoredValue } from \"../runtime/values.mjs\";\nimport { AuthoredKind, stamp } from \"./brand.mjs\";\nimport type {\n  AgentSessionInfoIface,\n  FinalPlatformClientIface,\n  SecretsIface,\n  TranscriptMessageIface,\n} from \"./context.mjs\";\nimport type { ToolCallEventDataIface } from \"./tools.mjs\";\n\nexport { toolResultFrom } from \"./tools.mjs\";\n\n// Observe-only subscribers to the session's ACP log. Event\n// names are ACP update kinds and request methods plus a few session-service\n// lifecycle events. Only these canonical names are accepted.\n\nexport enum HookEvent {\n  SessionOpened = 'session.opened',\n  TurnStarted = 'turn.started',\n  TurnEnded = 'turn.ended',\n  UserMessageChunk = 'user_message_chunk',\n  AgentMessageChunk = 'agent_message_chunk',\n  AgentMessage = 'agent_message',\n  AgentThoughtChunk = 'agent_thought_chunk',\n  ToolCall = 'tool_call',\n  ToolCallUpdate = 'tool_call_update',\n  ToolCallContentChunk = 'tool_call_content_chunk',\n  Plan = 'plan',\n  DecisionCreated = 'decision.created',\n  DecisionResolved = 'decision.resolved',\n  StateUpdate = 'state_update',\n  SessionFailed = 'session.failed',\n  SessionClosed = 'session.closed',\n  CompactionUpdate = 'compaction_update',\n  UsageUpdate = 'usage_update',\n  AvailableCommandsUpdate = 'available_commands_update',\n  CurrentModeUpdate = 'current_mode_update',\n  ConfigOptionUpdate = 'config_option_update',\n  SessionInfoUpdate = 'session_info_update',\n  Notice = 'notice',\n}\n\nexport const HOOK_WILDCARD = '*';\n\nconst CANONICAL_EVENTS: ReadonlySet<string> = new Set(Object.values(HookEvent));\n\nexport enum HookEventKeyKind {\n  Canonical = 'canonical',\n  Wildcard = 'wildcard',\n  Unknown = 'unknown',\n}\n\nexport interface NormalizedHookKeyIface {\n  key: string;\n  kind: HookEventKeyKind;\n  // Canonical event names this key subscribes to ('*' for the wildcard).\n  events: string[];\n}\n\nexport const normalizeHookKey = (key: string): NormalizedHookKeyIface => {\n  if (key === HOOK_WILDCARD)\n    return { key, kind: HookEventKeyKind.Wildcard, events: [HOOK_WILDCARD] };\n  if (CANONICAL_EVENTS.has(key) || key.startsWith('_final/')) {\n    return { key, kind: HookEventKeyKind.Canonical, events: [key] };\n  }\n  return { key, kind: HookEventKeyKind.Unknown, events: [] };\n};\n\nexport interface HookEventMetaIface {\n  // '<sessionId>:<seq>' with the session's wire id (`ases_\u2026:12`): sortable\n  // within a session and stable across redelivery.\n  id: string;\n  at: string;\n  seq: number;\n}\n\nexport interface HookEventIface<TType extends string = string, TData = AuthoredValue> {\n  type: TType;\n  data: TData;\n  meta: HookEventMetaIface;\n}\n\n// Lifecycle event data names platform objects by their wire ids, as the public\n// API does: sessions `ases_\u2026`, turns `atrn_\u2026`, participants `cpart_\u2026`,\n// decisions `adec_\u2026`. `promptMessageId` is the harness's ACP message id. ACP\n// update events (tool_call, agent_message_chunk, \u2026) carry the ACP payload as is.\nexport interface HookEventDataMapIface {\n  'session.opened': { sessionId: string };\n  'turn.started': {\n    turnId: string;\n    promptMessageId: string | null;\n    authorParticipantId: string | null;\n  };\n  'turn.ended': { turnId: string; stopReason: string | null };\n  tool_call: ToolCallEventDataIface;\n  tool_call_update: ToolCallEventDataIface;\n  tool_call_content_chunk: ToolCallEventDataIface;\n  'decision.created': {\n    decisionId: string;\n    kind: 'permission' | 'elicitation' | 'authorization';\n    request: JsonValue;\n  };\n  'decision.resolved': { decisionId: string; outcome: JsonValue };\n  'session.failed': { reason: string | null };\n  'session.closed': { reason: string | null };\n}\n\ntype CanonicalData<TKey extends string> = TKey extends keyof HookEventDataMapIface\n  ? HookEventDataMapIface[TKey]\n  : Record<string, JsonValue>;\n\nexport type HookEventKey = `${HookEvent}` | typeof HOOK_WILDCARD | `_final/${string}`;\n\nexport type HookEventFor<TKey extends string> = TKey extends typeof HOOK_WILDCARD\n  ? HookEventIface\n  : HookEventIface<TKey, CanonicalData<TKey>>;\n\nexport interface HookSessionInfoIface extends AgentSessionInfoIface {\n  readonly messages: readonly TranscriptMessageIface[];\n}\n\nexport interface HookContextIface {\n  readonly session: HookSessionInfoIface;\n  readonly agent: {\n    readonly definitionId: string;\n    readonly name: string;\n    readonly revisionId: string;\n  };\n  readonly channel: { readonly kind: string | null };\n  getSandbox(target?: string): Promise<NetworkSandboxSessionIface>;\n  // Sends session/cancel for the running turn.\n  cancel(): void;\n  readonly secrets: SecretsIface;\n  readonly bindings?: HostedBindingsIface;\n  readonly final: FinalPlatformClientIface;\n}\n\nexport type HookHandler<TKey extends string> = (\n  event: HookEventFor<TKey>,\n  ctx: HookContextIface,\n) => void | Promise<void>;\n\nexport type HookHandlersIface = { readonly [TKey in HookEventKey]?: HookHandler<TKey> };\n\nexport interface HookDefinitionIface {\n  readonly events?: HookHandlersIface;\n}\n\nexport const defineHook = (definition: HookDefinitionIface): HookDefinitionIface =>\n  stamp({ ...definition }, AuthoredKind.Hook);\n\nexport interface HookDispatchEventIface {\n  type: string;\n  data: AuthoredValue;\n  meta: HookEventMetaIface;\n}\n\nconst keyMatches = (key: string, event: HookDispatchEventIface): boolean =>\n  key === event.type && (CANONICAL_EVENTS.has(key) || key.startsWith('_final/'));\n\nexport type HookInvocable = (event: HookDispatchEventIface, ctx: HookContextIface) => AuthoredValue;\n\nconst hookEventsSchema = z.looseObject({ events: authoredRecordSchema });\n\n// Handlers for one event: typed handlers in declaration order, then the\n// wildcard.\nexport const hookHandlersFor = (\n  hook: AuthoredValue,\n  event: HookDispatchEventIface,\n): HookInvocable[] => {\n  const parsed = hookEventsSchema.safeParse(hook);\n  if (!parsed.success) return [];\n  const typed: HookInvocable[] = [];\n  let wildcard: HookInvocable | null = null;\n  for (const [key, handler] of Object.entries(parsed.data.events)) {\n    if (!isCallable(handler)) continue;\n    const invoke: HookInvocable = (dispatched, ctx) => handler(dispatched, ctx);\n    if (key === HOOK_WILDCARD) wildcard = invoke;\n    else if (keyMatches(key, event)) typed.push(invoke);\n  }\n  return wildcard == null ? typed : [...typed, wildcard];\n};\n"],
+  "mappings": "AAKA,YAAY,OAAO;AACnB,SAAS,sBAAsB,kBAAsC;AACrE,SAAS,cAAc,aAAa;AASpC,SAAS,sBAAsB;AAMxB,IAAK,YAAL,kBAAKA,eAAL;AACL,EAAAA,WAAA,mBAAgB;AAChB,EAAAA,WAAA,iBAAc;AACd,EAAAA,WAAA,eAAY;AACZ,EAAAA,WAAA,sBAAmB;AACnB,EAAAA,WAAA,uBAAoB;AACpB,EAAAA,WAAA,kBAAe;AACf,EAAAA,WAAA,uBAAoB;AACpB,EAAAA,WAAA,cAAW;AACX,EAAAA,WAAA,oBAAiB;AACjB,EAAAA,WAAA,0BAAuB;AACvB,EAAAA,WAAA,UAAO;AACP,EAAAA,WAAA,qBAAkB;AAClB,EAAAA,WAAA,sBAAmB;AACnB,EAAAA,WAAA,iBAAc;AACd,EAAAA,WAAA,mBAAgB;AAChB,EAAAA,WAAA,mBAAgB;AAChB,EAAAA,WAAA,sBAAmB;AACnB,EAAAA,WAAA,iBAAc;AACd,EAAAA,WAAA,6BAA0B;AAC1B,EAAAA,WAAA,uBAAoB;AACpB,EAAAA,WAAA,wBAAqB;AACrB,EAAAA,WAAA,uBAAoB;AACpB,EAAAA,WAAA,YAAS;AAvBC,SAAAA;AAAA,GAAA;AA0BL,MAAM,gBAAgB;AAE7B,MAAM,mBAAwC,IAAI,IAAI,OAAO,OAAO,SAAS,CAAC;AAEvE,IAAK,mBAAL,kBAAKC,sBAAL;AACL,EAAAA,kBAAA,eAAY;AACZ,EAAAA,kBAAA,cAAW;AACX,EAAAA,kBAAA,aAAU;AAHA,SAAAA;AAAA,GAAA;AAaL,MAAM,mBAAmB,CAAC,QAAwC;AACvE,MAAI,QAAQ;AACV,WAAO,EAAE,KAAK,MAAM,2BAA2B,QAAQ,CAAC,aAAa,EAAE;AACzE,MAAI,iBAAiB,IAAI,GAAG,KAAK,IAAI,WAAW,SAAS,GAAG;AAC1D,WAAO,EAAE,KAAK,MAAM,6BAA4B,QAAQ,CAAC,GAAG,EAAE;AAAA,EAChE;AACA,SAAO,EAAE,KAAK,MAAM,yBAA0B,QAAQ,CAAC,EAAE;AAC3D;AAkFO,MAAM,aAAa,CAAC,eACzB,MAAM,EAAE,GAAG,WAAW,GAAG,aAAa,IAAI;AAQ5C,MAAM,aAAa,CAAC,KAAa,UAC/B,QAAQ,MAAM,SAAS,iBAAiB,IAAI,GAAG,KAAK,IAAI,WAAW,SAAS;AAI9E,MAAM,mBAAmB,EAAE,YAAY,EAAE,QAAQ,qBAAqB,CAAC;AAIhE,MAAM,kBAAkB,CAC7B,MACA,UACoB;AACpB,QAAM,SAAS,iBAAiB,UAAU,IAAI;AAC9C,MAAI,CAAC,OAAO,QAAS,QAAO,CAAC;AAC7B,QAAM,QAAyB,CAAC;AAChC,MAAI,WAAiC;AACrC,aAAW,CAAC,KAAK,OAAO,KAAK,OAAO,QAAQ,OAAO,KAAK,MAAM,GAAG;AAC/D,QAAI,CAAC,WAAW,OAAO,EAAG;AAC1B,UAAM,SAAwB,CAAC,YAAY,QAAQ,QAAQ,YAAY,GAAG;AAC1E,QAAI,QAAQ,cAAe,YAAW;AAAA,aAC7B,WAAW,KAAK,KAAK,EAAG,OAAM,KAAK,MAAM;AAAA,EACpD;AACA,SAAO,YAAY,OAAO,QAAQ,CAAC,GAAG,OAAO,QAAQ;AACvD;",
   "names": ["HookEvent", "HookEventKeyKind"]
 }

package/dist/modules/manifest.d.mts

@@ -1,2 +1,2 @@
-export { BaseCapability, DynamicEvent, InstructionRole, MANIFEST_VERSION, McpServerBindingKind, SandboxAccess, SandboxAttach, ScheduleTarget, ToolApproval, agentAvatarSchema, avatarMediaSchema, agentManifestSchema, baseToolsSchema, bundleSchema, channelBindingSchema, dynamicSlotSchema, emptyManifest, findDynamicSlots, harnessBindingSchema, hookBindingSchema, httpMcpServerBindingSchema, identitySchema, instructionFragmentSchema, isDynamicSlot, mcpAuthSchema, mcpServerBindingSchema, resolvedAgentManifestSchema, sandboxBindingSchema, scheduleDefinitionSchema, skillBundleSchema, skillFileSchema, toolDescriptorSchema, workerMcpServerBindingSchema, } from '@finalai/agent-provider';
-export type { AgentAvatarIface, AvatarMedia, AvatarState, AgentManifestIface, BaseToolsIface, BundleIface, ChannelBindingIface, DynamicSlotIface, DynamicSlotLocationIface, HarnessBindingIface, HookBindingIface, HttpMcpServerBindingIface, IdentityIface, InstructionFragmentIface, McpAuth, McpServerBinding, ResolvedAgentManifestIface, ResolvedSandboxBindingIface, SandboxBindingIface, ScheduleDefinitionIface, SkillBundleIface, ToolDescriptorIface, WorkerMcpServerBindingIface, } from '@finalai/agent-provider';
+export { BaseCapability, DynamicEvent, InstructionRole, MANIFEST_VERSION, McpServerBindingKind, SandboxAccess, SandboxAttach, ScheduleTarget, ToolApproval, agentAvatarSchema, avatarMediaSchema, agentManifestSchema, baseToolsSchema, bundleSchema, channelBindingSchema, dynamicSlotSchema, emptyManifest, findDynamicSlots, harnessBindingSchema, hookBindingSchema, httpMcpServerBindingSchema, identitySchema, instructionFragmentSchema, isDynamicSlot, mcpAuthSchema, mcpServerBindingSchema, resolvedAgentManifestSchema, sandboxBindingSchema, sandboxCredentialRefSchema, scheduleDefinitionSchema, skillBundleSchema, skillFileSchema, toolDescriptorSchema, workerMcpServerBindingSchema, } from '@finalai/agent-provider';
+export type { AgentAvatarIface, AvatarMedia, AvatarState, AgentManifestIface, BaseToolsIface, BundleIface, ChannelBindingIface, DynamicSlotIface, DynamicSlotLocationIface, HarnessBindingIface, HookBindingIface, HttpMcpServerBindingIface, IdentityIface, InstructionFragmentIface, McpAuth, McpServerBinding, ResolvedAgentManifestIface, ResolvedSandboxBindingIface, SandboxBindingIface, SandboxCredentialRefIface, ScheduleDefinitionIface, SkillBundleIface, ToolDescriptorIface, WorkerMcpServerBindingIface, } from '@finalai/agent-provider';

package/dist/modules/manifest.mjs

@@ -27,6 +27,7 @@ import {
   mcpServerBindingSchema,
   resolvedAgentManifestSchema,
   sandboxBindingSchema,
+  sandboxCredentialRefSchema,
   scheduleDefinitionSchema,
   skillBundleSchema,
   skillFileSchema,
@@ -62,6 +63,7 @@ export {
   mcpServerBindingSchema,
   resolvedAgentManifestSchema,
   sandboxBindingSchema,
+  sandboxCredentialRefSchema,
   scheduleDefinitionSchema,
   skillBundleSchema,
   skillFileSchema,

package/dist/modules/manifest.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/manifest.ts"],
-  "sourcesContent": ["// The Agent Manifest lives in the provider contract (harnesses, sandboxes and\n// channels receive it); this package compiles directories into it.\nexport {\n  BaseCapability,\n  DynamicEvent,\n  InstructionRole,\n  MANIFEST_VERSION,\n  McpServerBindingKind,\n  SandboxAccess,\n  SandboxAttach,\n  ScheduleTarget,\n  ToolApproval,\n  agentAvatarSchema,\n  avatarMediaSchema,\n  agentManifestSchema,\n  baseToolsSchema,\n  bundleSchema,\n  channelBindingSchema,\n  dynamicSlotSchema,\n  emptyManifest,\n  findDynamicSlots,\n  harnessBindingSchema,\n  hookBindingSchema,\n  httpMcpServerBindingSchema,\n  identitySchema,\n  instructionFragmentSchema,\n  isDynamicSlot,\n  mcpAuthSchema,\n  mcpServerBindingSchema,\n  resolvedAgentManifestSchema,\n  sandboxBindingSchema,\n  scheduleDefinitionSchema,\n  skillBundleSchema,\n  skillFileSchema,\n  toolDescriptorSchema,\n  workerMcpServerBindingSchema,\n} from '@finalai/agent-provider';\nexport type {\n  AgentAvatarIface,\n  AvatarMedia,\n  AvatarState,\n  AgentManifestIface,\n  BaseToolsIface,\n  BundleIface,\n  ChannelBindingIface,\n  DynamicSlotIface,\n  DynamicSlotLocationIface,\n  HarnessBindingIface,\n  HookBindingIface,\n  HttpMcpServerBindingIface,\n  IdentityIface,\n  InstructionFragmentIface,\n  McpAuth,\n  McpServerBinding,\n  ResolvedAgentManifestIface,\n  ResolvedSandboxBindingIface,\n  SandboxBindingIface,\n  ScheduleDefinitionIface,\n  SkillBundleIface,\n  ToolDescriptorIface,\n  WorkerMcpServerBindingIface,\n} from '@finalai/agent-provider';\n"],
-  "mappings": "AAEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "sourcesContent": ["// The Agent Manifest lives in the provider contract (harnesses, sandboxes and\n// channels receive it); this package compiles directories into it.\nexport {\n  BaseCapability,\n  DynamicEvent,\n  InstructionRole,\n  MANIFEST_VERSION,\n  McpServerBindingKind,\n  SandboxAccess,\n  SandboxAttach,\n  ScheduleTarget,\n  ToolApproval,\n  agentAvatarSchema,\n  avatarMediaSchema,\n  agentManifestSchema,\n  baseToolsSchema,\n  bundleSchema,\n  channelBindingSchema,\n  dynamicSlotSchema,\n  emptyManifest,\n  findDynamicSlots,\n  harnessBindingSchema,\n  hookBindingSchema,\n  httpMcpServerBindingSchema,\n  identitySchema,\n  instructionFragmentSchema,\n  isDynamicSlot,\n  mcpAuthSchema,\n  mcpServerBindingSchema,\n  resolvedAgentManifestSchema,\n  sandboxBindingSchema,\n  sandboxCredentialRefSchema,\n  scheduleDefinitionSchema,\n  skillBundleSchema,\n  skillFileSchema,\n  toolDescriptorSchema,\n  workerMcpServerBindingSchema,\n} from '@finalai/agent-provider';\nexport type {\n  AgentAvatarIface,\n  AvatarMedia,\n  AvatarState,\n  AgentManifestIface,\n  BaseToolsIface,\n  BundleIface,\n  ChannelBindingIface,\n  DynamicSlotIface,\n  DynamicSlotLocationIface,\n  HarnessBindingIface,\n  HookBindingIface,\n  HttpMcpServerBindingIface,\n  IdentityIface,\n  InstructionFragmentIface,\n  McpAuth,\n  McpServerBinding,\n  ResolvedAgentManifestIface,\n  ResolvedSandboxBindingIface,\n  SandboxBindingIface,\n  SandboxCredentialRefIface,\n  ScheduleDefinitionIface,\n  SkillBundleIface,\n  ToolDescriptorIface,\n  WorkerMcpServerBindingIface,\n} from '@finalai/agent-provider';\n"],
+  "mappings": "AAEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finalai/agent-definition",
-  "version": "0.4.3",
+  "version": "0.5.1",
   "private": false,
   "description": "Provider-independent agent authoring, manifest schemas, directory compiler, and harness compatibility reports.",
   "license": "Apache-2.0",
@@ -75,8 +75,8 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@finalai/agent-protocol": "0.4.2",
-    "@finalai/agent-provider": "0.4.3",
+    "@finalai/agent-protocol": "0.6.0",
+    "@finalai/agent-provider": "0.5.1",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
     "croner": "^10.0.1",