@finalai/agents 0.13.0 → 0.15.0

package/dist/modules/agent-client/organization.mjs

@@ -0,0 +1,209 @@
+import {
+  addAllowedEndpointRequestSchema,
+  allowedEndpointSchema,
+  budgetListSchema,
+  budgetSchema,
+  chatGptSubscriptionChallengeSchema,
+  chatGptSubscriptionPollSchema,
+  connectApiKeyRequestSchema,
+  connectClaudeSubscriptionRequestSchema,
+  createBudgetRequestSchema,
+  createModelCredentialGrantRequestSchema,
+  listAllowedEndpointsResponseSchema,
+  modelCredentialGrantListSchema,
+  modelCredentialGrantSchema,
+  modelCredentialListSchema,
+  modelCredentialSchema,
+  okResponseSchema,
+  organizationAgentPolicySchema,
+  platformSpendingRestrictionsSchema,
+  pollChatGptSubscriptionRequestSchema,
+  startChatGptSubscriptionRequestSchema,
+  updateModelCredentialRequestSchema,
+  updateOrganizationAgentPolicyRequestSchema,
+  updatePlatformSpendingRestrictionsRequestSchema
+} from "@finalai/agent-protocol/agent-platform";
+import { encodePath } from "./context.mjs";
+import { HttpMethod } from "./http.mjs";
+const credentialPath = (credentialId, suffix = "") => `/v1/model-credentials/${encodePath(credentialId)}${suffix}`;
+const createModelCredentialsApi = ({ http }) => ({
+  list: async (options) => (await http.request({
+    method: HttpMethod.Get,
+    path: "/v1/model-credentials",
+    query: { projectId: options?.projectId },
+    response: modelCredentialListSchema,
+    signal: options?.signal
+  })).credentials,
+  connectApiKey: ({ signal, ...value }) => http.request({
+    method: HttpMethod.Post,
+    path: "/v1/model-credentials",
+    body: { schema: connectApiKeyRequestSchema, value },
+    response: modelCredentialSchema,
+    signal
+  }),
+  connectClaudeSubscription: ({ signal, ...value }) => http.request({
+    method: HttpMethod.Post,
+    path: "/v1/model-credentials/subscriptions/claude",
+    body: { schema: connectClaudeSubscriptionRequestSchema, value },
+    response: modelCredentialSchema,
+    signal
+  }),
+  startChatGptSubscription: ({ signal, ...value }) => http.request({
+    method: HttpMethod.Post,
+    path: "/v1/model-credentials/subscriptions/chatgpt/start",
+    body: { schema: startChatGptSubscriptionRequestSchema, value },
+    response: chatGptSubscriptionChallengeSchema,
+    signal
+  }),
+  pollChatGptSubscription: ({ signal, ...value }) => http.request({
+    method: HttpMethod.Post,
+    path: "/v1/model-credentials/subscriptions/chatgpt/poll",
+    body: { schema: pollChatGptSubscriptionRequestSchema, value },
+    response: chatGptSubscriptionPollSchema,
+    signal
+  }),
+  update: ({ credentialId, signal, ...value }) => http.request({
+    method: HttpMethod.Patch,
+    path: credentialPath(credentialId),
+    body: { schema: updateModelCredentialRequestSchema, value },
+    response: modelCredentialSchema,
+    signal
+  }),
+  resetUsage: ({ credentialId, signal }) => http.request({
+    method: HttpMethod.Patch,
+    path: credentialPath(credentialId),
+    body: { schema: updateModelCredentialRequestSchema, value: { resetUsage: true } },
+    response: modelCredentialSchema,
+    signal
+  }),
+  disconnect: async ({ credentialId, signal }) => {
+    await http.request({
+      method: HttpMethod.Delete,
+      path: credentialPath(credentialId),
+      response: okResponseSchema,
+      signal
+    });
+  },
+  grants: {
+    list: async ({ credentialId, signal }) => (await http.request({
+      method: HttpMethod.Get,
+      path: credentialPath(credentialId, "/grants"),
+      response: modelCredentialGrantListSchema,
+      signal
+    })).grants,
+    create: ({ credentialId, signal, ...value }) => http.request({
+      method: HttpMethod.Post,
+      path: credentialPath(credentialId, "/grants"),
+      body: { schema: createModelCredentialGrantRequestSchema, value },
+      response: modelCredentialGrantSchema,
+      signal
+    }),
+    revoke: async ({ credentialId, grantId, signal }) => {
+      await http.request({
+        method: HttpMethod.Delete,
+        path: credentialPath(credentialId, `/grants/${encodePath(grantId)}`),
+        response: okResponseSchema,
+        signal
+      });
+    }
+  }
+});
+const createBudgetsApi = ({ http }) => ({
+  list: async (options) => (await http.request({
+    method: HttpMethod.Get,
+    path: "/v1/budgets",
+    response: budgetListSchema,
+    signal: options?.signal
+  })).budgets,
+  create: ({ signal, ...value }) => http.request({
+    method: HttpMethod.Post,
+    path: "/v1/budgets",
+    body: { schema: createBudgetRequestSchema, value },
+    response: budgetSchema,
+    signal
+  }),
+  update: ({ budgetId, signal, ...value }) => http.request({
+    method: HttpMethod.Put,
+    path: `/v1/budgets/${encodePath(budgetId)}`,
+    body: { schema: createBudgetRequestSchema, value },
+    response: budgetSchema,
+    signal
+  }),
+  delete: async ({ budgetId, signal }) => {
+    await http.request({
+      method: HttpMethod.Delete,
+      path: `/v1/budgets/${encodePath(budgetId)}`,
+      response: okResponseSchema,
+      signal
+    });
+  }
+});
+const createOrganizationApi = (context) => {
+  const { http } = context;
+  return {
+    modelCredentials: createModelCredentialsApi(context),
+    budgets: createBudgetsApi(context),
+    policy: {
+      get: (options) => http.request({
+        method: HttpMethod.Get,
+        path: "/v1/organization-policy",
+        response: organizationAgentPolicySchema,
+        signal: options?.signal
+      }),
+      update: ({ signal, ...value }) => http.request({
+        method: HttpMethod.Put,
+        path: "/v1/organization-policy",
+        body: { schema: updateOrganizationAgentPolicyRequestSchema, value },
+        response: organizationAgentPolicySchema,
+        signal
+      })
+    },
+    spendingRestrictions: {
+      get: (options) => http.request({
+        method: HttpMethod.Get,
+        path: "/v1/platform-spending-restrictions",
+        response: platformSpendingRestrictionsSchema,
+        signal: options?.signal
+      }),
+      update: ({ signal, ...value }) => http.request({
+        method: HttpMethod.Put,
+        path: "/v1/platform-spending-restrictions",
+        body: { schema: updatePlatformSpendingRestrictionsRequestSchema, value },
+        response: platformSpendingRestrictionsSchema,
+        signal
+      })
+    }
+  };
+};
+const createAllowedEndpointsApi = (args) => {
+  const { http } = args.context;
+  const path = (suffix = "") => `/v1/projects/${encodePath(args.projectId)}/allowed-endpoints${suffix}`;
+  return {
+    list: async (options) => (await http.request({
+      method: HttpMethod.Get,
+      path: path(),
+      response: listAllowedEndpointsResponseSchema,
+      signal: options?.signal
+    })).endpoints,
+    add: ({ signal, ...value }) => http.request({
+      method: HttpMethod.Post,
+      path: path(),
+      body: { schema: addAllowedEndpointRequestSchema, value },
+      response: allowedEndpointSchema,
+      signal
+    }),
+    remove: async ({ endpointId, signal }) => {
+      await http.request({
+        method: HttpMethod.Delete,
+        path: path(`/${encodePath(endpointId)}`),
+        response: okResponseSchema,
+        signal
+      });
+    }
+  };
+};
+export {
+  createAllowedEndpointsApi,
+  createOrganizationApi
+};
+//# sourceMappingURL=organization.mjs.map

package/dist/modules/agent-client/organization.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/agent-client/organization.ts"],
+  "sourcesContent": ["import {\n  addAllowedEndpointRequestSchema,\n  allowedEndpointSchema,\n  budgetListSchema,\n  budgetSchema,\n  chatGptSubscriptionChallengeSchema,\n  chatGptSubscriptionPollSchema,\n  connectApiKeyRequestSchema,\n  connectClaudeSubscriptionRequestSchema,\n  createBudgetRequestSchema,\n  createModelCredentialGrantRequestSchema,\n  listAllowedEndpointsResponseSchema,\n  modelCredentialGrantListSchema,\n  modelCredentialGrantSchema,\n  modelCredentialListSchema,\n  modelCredentialSchema,\n  okResponseSchema,\n  organizationAgentPolicySchema,\n  platformSpendingRestrictionsSchema,\n  pollChatGptSubscriptionRequestSchema,\n  startChatGptSubscriptionRequestSchema,\n  updateModelCredentialRequestSchema,\n  updateOrganizationAgentPolicyRequestSchema,\n  updatePlatformSpendingRestrictionsRequestSchema,\n  type AddAllowedEndpointRequestIface,\n  type AllowedEndpointIface,\n  type BudgetIface,\n  type ChatGptSubscriptionChallengeIface,\n  type ChatGptSubscriptionPollIface,\n  type ConnectApiKeyRequestIface,\n  type ConnectClaudeSubscriptionRequestIface,\n  type CreateBudgetRequestIface,\n  type CreateModelCredentialGrantRequestIface,\n  type ModelCredentialGrantIface,\n  type ModelCredentialIface,\n  type OrganizationAgentPolicyIface,\n  type PlatformSpendingRestrictionsIface,\n  type StartChatGptSubscriptionRequestIface,\n  type UpdateModelCredentialRequestIface,\n  type UpdateOrganizationAgentPolicyRequestIface,\n  type UpdatePlatformSpendingRestrictionsRequestIface,\n} from '@finalai/agent-protocol/agent-platform';\nimport { encodePath, type ClientContextIface, type SignalOptionsIface } from \"./context.mjs\";\nimport { HttpMethod } from \"./http.mjs\";\n\nexport interface ModelCredentialGrantsApiIface {\n  list: (\n    args: { credentialId: string } & SignalOptionsIface,\n  ) => Promise<ModelCredentialGrantIface[]>;\n  /** Shares the credential with a project or a member; idempotent per grantee. */\n  create: (\n    args: { credentialId: string } & CreateModelCredentialGrantRequestIface & SignalOptionsIface,\n  ) => Promise<ModelCredentialGrantIface>;\n  revoke: (args: { credentialId: string; grantId: string } & SignalOptionsIface) => Promise<void>;\n}\n\n/** The subscriptions and API keys the caller's projects run models with. */\nexport interface ModelCredentialsApiIface {\n  /** The caller's credentials; with `projectId`, that project's and those it inherits. */\n  list: (options?: { projectId?: string } & SignalOptionsIface) => Promise<ModelCredentialIface[]>;\n  connectApiKey: (\n    args: ConnectApiKeyRequestIface & SignalOptionsIface,\n  ) => Promise<ModelCredentialIface>;\n  connectClaudeSubscription: (\n    args: ConnectClaudeSubscriptionRequestIface & SignalOptionsIface,\n  ) => Promise<ModelCredentialIface>;\n  /** Starts a device-code sign-in; poll it with the returned `state`. */\n  startChatGptSubscription: (\n    args: StartChatGptSubscriptionRequestIface & SignalOptionsIface,\n  ) => Promise<ChatGptSubscriptionChallengeIface>;\n  pollChatGptSubscription: (\n    args: { state: string } & SignalOptionsIface,\n  ) => Promise<ChatGptSubscriptionPollIface>;\n  /** The owner's settings (an editor of the credential's project). */\n  update: (\n    args: { credentialId: string } & UpdateModelCredentialRequestIface & SignalOptionsIface,\n  ) => Promise<ModelCredentialIface>;\n  /** Clears a subscription's remembered limit after the vendor reset it. */\n  resetUsage: (\n    args: { credentialId: string } & SignalOptionsIface,\n  ) => Promise<ModelCredentialIface>;\n  disconnect: (args: { credentialId: string } & SignalOptionsIface) => Promise<void>;\n  /** Who else may use a credential (its managers only). */\n  grants: ModelCredentialGrantsApiIface;\n}\n\n/** Spend limits; organization admins write them. */\nexport interface BudgetsApiIface {\n  list: (options?: SignalOptionsIface) => Promise<BudgetIface[]>;\n  create: (args: CreateBudgetRequestIface & SignalOptionsIface) => Promise<BudgetIface>;\n  update: (\n    args: { budgetId: string } & CreateBudgetRequestIface & SignalOptionsIface,\n  ) => Promise<BudgetIface>;\n  delete: (args: { budgetId: string } & SignalOptionsIface) => Promise<void>;\n}\n\n/** The organization's provider gates and turn limits; organization admins update it. */\nexport interface OrganizationPolicyApiIface {\n  get: (options?: SignalOptionsIface) => Promise<OrganizationAgentPolicyIface>;\n  update: (\n    args: UpdateOrganizationAgentPolicyRequestIface & SignalOptionsIface,\n  ) => Promise<OrganizationAgentPolicyIface>;\n}\n\n/** Who may spend the platform's own metered inference; organization admins update it. */\nexport interface SpendingRestrictionsApiIface {\n  get: (options?: SignalOptionsIface) => Promise<PlatformSpendingRestrictionsIface>;\n  update: (\n    args: UpdatePlatformSpendingRestrictionsRequestIface & SignalOptionsIface,\n  ) => Promise<PlatformSpendingRestrictionsIface>;\n}\n\n/** The caller's organization: model credentials, budgets and policies. */\nexport interface OrganizationApiIface {\n  modelCredentials: ModelCredentialsApiIface;\n  budgets: BudgetsApiIface;\n  policy: OrganizationPolicyApiIface;\n  spendingRestrictions: SpendingRestrictionsApiIface;\n}\n\n/** Where a project lets its secrets go beyond model vendors' own APIs; its admins change it. */\nexport interface AllowedEndpointsApiIface {\n  list: (options?: SignalOptionsIface) => Promise<AllowedEndpointIface[]>;\n  add: (args: AddAllowedEndpointRequestIface & SignalOptionsIface) => Promise<AllowedEndpointIface>;\n  remove: (args: { endpointId: string } & SignalOptionsIface) => Promise<void>;\n}\n\nconst credentialPath = (credentialId: string, suffix = ''): string =>\n  `/v1/model-credentials/${encodePath(credentialId)}${suffix}`;\n\nconst createModelCredentialsApi = ({ http }: ClientContextIface): ModelCredentialsApiIface => ({\n  list: async (options) =>\n    (\n      await http.request({\n        method: HttpMethod.Get,\n        path: '/v1/model-credentials',\n        query: { projectId: options?.projectId },\n        response: modelCredentialListSchema,\n        signal: options?.signal,\n      })\n    ).credentials,\n  connectApiKey: ({ signal, ...value }) =>\n    http.request({\n      method: HttpMethod.Post,\n      path: '/v1/model-credentials',\n      body: { schema: connectApiKeyRequestSchema, value },\n      response: modelCredentialSchema,\n      signal,\n    }),\n  connectClaudeSubscription: ({ signal, ...value }) =>\n    http.request({\n      method: HttpMethod.Post,\n      path: '/v1/model-credentials/subscriptions/claude',\n      body: { schema: connectClaudeSubscriptionRequestSchema, value },\n      response: modelCredentialSchema,\n      signal,\n    }),\n  startChatGptSubscription: ({ signal, ...value }) =>\n    http.request({\n      method: HttpMethod.Post,\n      path: '/v1/model-credentials/subscriptions/chatgpt/start',\n      body: { schema: startChatGptSubscriptionRequestSchema, value },\n      response: chatGptSubscriptionChallengeSchema,\n      signal,\n    }),\n  pollChatGptSubscription: ({ signal, ...value }) =>\n    http.request({\n      method: HttpMethod.Post,\n      path: '/v1/model-credentials/subscriptions/chatgpt/poll',\n      body: { schema: pollChatGptSubscriptionRequestSchema, value },\n      response: chatGptSubscriptionPollSchema,\n      signal,\n    }),\n  update: ({ credentialId, signal, ...value }) =>\n    http.request({\n      method: HttpMethod.Patch,\n      path: credentialPath(credentialId),\n      body: { schema: updateModelCredentialRequestSchema, value },\n      response: modelCredentialSchema,\n      signal,\n    }),\n  resetUsage: ({ credentialId, signal }) =>\n    http.request({\n      method: HttpMethod.Patch,\n      path: credentialPath(credentialId),\n      body: { schema: updateModelCredentialRequestSchema, value: { resetUsage: true } },\n      response: modelCredentialSchema,\n      signal,\n    }),\n  disconnect: async ({ credentialId, signal }) => {\n    await http.request({\n      method: HttpMethod.Delete,\n      path: credentialPath(credentialId),\n      response: okResponseSchema,\n      signal,\n    });\n  },\n  grants: {\n    list: async ({ credentialId, signal }) =>\n      (\n        await http.request({\n          method: HttpMethod.Get,\n          path: credentialPath(credentialId, '/grants'),\n          response: modelCredentialGrantListSchema,\n          signal,\n        })\n      ).grants,\n    create: ({ credentialId, signal, ...value }) =>\n      http.request({\n        method: HttpMethod.Post,\n        path: credentialPath(credentialId, '/grants'),\n        body: { schema: createModelCredentialGrantRequestSchema, value },\n        response: modelCredentialGrantSchema,\n        signal,\n      }),\n    revoke: async ({ credentialId, grantId, signal }) => {\n      await http.request({\n        method: HttpMethod.Delete,\n        path: credentialPath(credentialId, `/grants/${encodePath(grantId)}`),\n        response: okResponseSchema,\n        signal,\n      });\n    },\n  },\n});\n\nconst createBudgetsApi = ({ http }: ClientContextIface): BudgetsApiIface => ({\n  list: async (options) =>\n    (\n      await http.request({\n        method: HttpMethod.Get,\n        path: '/v1/budgets',\n        response: budgetListSchema,\n        signal: options?.signal,\n      })\n    ).budgets,\n  create: ({ signal, ...value }) =>\n    http.request({\n      method: HttpMethod.Post,\n      path: '/v1/budgets',\n      body: { schema: createBudgetRequestSchema, value },\n      response: budgetSchema,\n      signal,\n    }),\n  update: ({ budgetId, signal, ...value }) =>\n    http.request({\n      method: HttpMethod.Put,\n      path: `/v1/budgets/${encodePath(budgetId)}`,\n      body: { schema: createBudgetRequestSchema, value },\n      response: budgetSchema,\n      signal,\n    }),\n  delete: async ({ budgetId, signal }) => {\n    await http.request({\n      method: HttpMethod.Delete,\n      path: `/v1/budgets/${encodePath(budgetId)}`,\n      response: okResponseSchema,\n      signal,\n    });\n  },\n});\n\nexport const createOrganizationApi = (context: ClientContextIface): OrganizationApiIface => {\n  const { http } = context;\n  return {\n    modelCredentials: createModelCredentialsApi(context),\n    budgets: createBudgetsApi(context),\n    policy: {\n      get: (options) =>\n        http.request({\n          method: HttpMethod.Get,\n          path: '/v1/organization-policy',\n          response: organizationAgentPolicySchema,\n          signal: options?.signal,\n        }),\n      update: ({ signal, ...value }) =>\n        http.request({\n          method: HttpMethod.Put,\n          path: '/v1/organization-policy',\n          body: { schema: updateOrganizationAgentPolicyRequestSchema, value },\n          response: organizationAgentPolicySchema,\n          signal,\n        }),\n    },\n    spendingRestrictions: {\n      get: (options) =>\n        http.request({\n          method: HttpMethod.Get,\n          path: '/v1/platform-spending-restrictions',\n          response: platformSpendingRestrictionsSchema,\n          signal: options?.signal,\n        }),\n      update: ({ signal, ...value }) =>\n        http.request({\n          method: HttpMethod.Put,\n          path: '/v1/platform-spending-restrictions',\n          body: { schema: updatePlatformSpendingRestrictionsRequestSchema, value },\n          response: platformSpendingRestrictionsSchema,\n          signal,\n        }),\n    },\n  };\n};\n\nexport const createAllowedEndpointsApi = (args: {\n  context: ClientContextIface;\n  projectId: string;\n}): AllowedEndpointsApiIface => {\n  const { http } = args.context;\n  const path = (suffix = ''): string =>\n    `/v1/projects/${encodePath(args.projectId)}/allowed-endpoints${suffix}`;\n  return {\n    list: async (options) =>\n      (\n        await http.request({\n          method: HttpMethod.Get,\n          path: path(),\n          response: listAllowedEndpointsResponseSchema,\n          signal: options?.signal,\n        })\n      ).endpoints,\n    add: ({ signal, ...value }) =>\n      http.request({\n        method: HttpMethod.Post,\n        path: path(),\n        body: { schema: addAllowedEndpointRequestSchema, value },\n        response: allowedEndpointSchema,\n        signal,\n      }),\n    remove: async ({ endpointId, signal }) => {\n      await http.request({\n        method: HttpMethod.Delete,\n        path: path(`/${encodePath(endpointId)}`),\n        response: okResponseSchema,\n        signal,\n      });\n    },\n  };\n};\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAkBK;AACP,SAAS,kBAAoE;AAC7E,SAAS,kBAAkB;AAoF3B,MAAM,iBAAiB,CAAC,cAAsB,SAAS,OACrD,yBAAyB,WAAW,YAAY,CAAC,GAAG,MAAM;AAE5D,MAAM,4BAA4B,CAAC,EAAE,KAAK,OAAqD;AAAA,EAC7F,MAAM,OAAO,aAET,MAAM,KAAK,QAAQ;AAAA,IACjB,QAAQ,WAAW;AAAA,IACnB,MAAM;AAAA,IACN,OAAO,EAAE,WAAW,SAAS,UAAU;AAAA,IACvC,UAAU;AAAA,IACV,QAAQ,SAAS;AAAA,EACnB,CAAC,GACD;AAAA,EACJ,eAAe,CAAC,EAAE,QAAQ,GAAG,MAAM,MACjC,KAAK,QAAQ;AAAA,IACX,QAAQ,WAAW;AAAA,IACnB,MAAM;AAAA,IACN,MAAM,EAAE,QAAQ,4BAA4B,MAAM;AAAA,IAClD,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAAA,EACH,2BAA2B,CAAC,EAAE,QAAQ,GAAG,MAAM,MAC7C,KAAK,QAAQ;AAAA,IACX,QAAQ,WAAW;AAAA,IACnB,MAAM;AAAA,IACN,MAAM,EAAE,QAAQ,wCAAwC,MAAM;AAAA,IAC9D,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAAA,EACH,0BAA0B,CAAC,EAAE,QAAQ,GAAG,MAAM,MAC5C,KAAK,QAAQ;AAAA,IACX,QAAQ,WAAW;AAAA,IACnB,MAAM;AAAA,IACN,MAAM,EAAE,QAAQ,uCAAuC,MAAM;AAAA,IAC7D,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAAA,EACH,yBAAyB,CAAC,EAAE,QAAQ,GAAG,MAAM,MAC3C,KAAK,QAAQ;AAAA,IACX,QAAQ,WAAW;AAAA,IACnB,MAAM;AAAA,IACN,MAAM,EAAE,QAAQ,sCAAsC,MAAM;AAAA,IAC5D,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAAA,EACH,QAAQ,CAAC,EAAE,cAAc,QAAQ,GAAG,MAAM,MACxC,KAAK,QAAQ;AAAA,IACX,QAAQ,WAAW;AAAA,IACnB,MAAM,eAAe,YAAY;AAAA,IACjC,MAAM,EAAE,QAAQ,oCAAoC,MAAM;AAAA,IAC1D,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAAA,EACH,YAAY,CAAC,EAAE,cAAc,OAAO,MAClC,KAAK,QAAQ;AAAA,IACX,QAAQ,WAAW;AAAA,IACnB,MAAM,eAAe,YAAY;AAAA,IACjC,MAAM,EAAE,QAAQ,oCAAoC,OAAO,EAAE,YAAY,KAAK,EAAE;AAAA,IAChF,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAAA,EACH,YAAY,OAAO,EAAE,cAAc,OAAO,MAAM;AAC9C,UAAM,KAAK,QAAQ;AAAA,MACjB,QAAQ,WAAW;AAAA,MACnB,MAAM,eAAe,YAAY;AAAA,MACjC,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EACA,QAAQ;AAAA,IACN,MAAM,OAAO,EAAE,cAAc,OAAO,OAEhC,MAAM,KAAK,QAAQ;AAAA,MACjB,QAAQ,WAAW;AAAA,MACnB,MAAM,eAAe,cAAc,SAAS;AAAA,MAC5C,UAAU;AAAA,MACV;AAAA,IACF,CAAC,GACD;AAAA,IACJ,QAAQ,CAAC,EAAE,cAAc,QAAQ,GAAG,MAAM,MACxC,KAAK,QAAQ;AAAA,MACX,QAAQ,WAAW;AAAA,MACnB,MAAM,eAAe,cAAc,SAAS;AAAA,MAC5C,MAAM,EAAE,QAAQ,yCAAyC,MAAM;AAAA,MAC/D,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AAAA,IACH,QAAQ,OAAO,EAAE,cAAc,SAAS,OAAO,MAAM;AACnD,YAAM,KAAK,QAAQ;AAAA,QACjB,QAAQ,WAAW;AAAA,QACnB,MAAM,eAAe,cAAc,WAAW,WAAW,OAAO,CAAC,EAAE;AAAA,QACnE,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,MAAM,mBAAmB,CAAC,EAAE,KAAK,OAA4C;AAAA,EAC3E,MAAM,OAAO,aAET,MAAM,KAAK,QAAQ;AAAA,IACjB,QAAQ,WAAW;AAAA,IACnB,MAAM;AAAA,IACN,UAAU;AAAA,IACV,QAAQ,SAAS;AAAA,EACnB,CAAC,GACD;AAAA,EACJ,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,MAC1B,KAAK,QAAQ;AAAA,IACX,QAAQ,WAAW;AAAA,IACnB,MAAM;AAAA,IACN,MAAM,EAAE,QAAQ,2BAA2B,MAAM;AAAA,IACjD,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAAA,EACH,QAAQ,CAAC,EAAE,UAAU,QAAQ,GAAG,MAAM,MACpC,KAAK,QAAQ;AAAA,IACX,QAAQ,WAAW;AAAA,IACnB,MAAM,eAAe,WAAW,QAAQ,CAAC;AAAA,IACzC,MAAM,EAAE,QAAQ,2BAA2B,MAAM;AAAA,IACjD,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AAAA,EACH,QAAQ,OAAO,EAAE,UAAU,OAAO,MAAM;AACtC,UAAM,KAAK,QAAQ;AAAA,MACjB,QAAQ,WAAW;AAAA,MACnB,MAAM,eAAe,WAAW,QAAQ,CAAC;AAAA,MACzC,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEO,MAAM,wBAAwB,CAAC,YAAsD;AAC1F,QAAM,EAAE,KAAK,IAAI;AACjB,SAAO;AAAA,IACL,kBAAkB,0BAA0B,OAAO;AAAA,IACnD,SAAS,iBAAiB,OAAO;AAAA,IACjC,QAAQ;AAAA,MACN,KAAK,CAAC,YACJ,KAAK,QAAQ;AAAA,QACX,QAAQ,WAAW;AAAA,QACnB,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ,SAAS;AAAA,MACnB,CAAC;AAAA,MACH,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,MAC1B,KAAK,QAAQ;AAAA,QACX,QAAQ,WAAW;AAAA,QACnB,MAAM;AAAA,QACN,MAAM,EAAE,QAAQ,4CAA4C,MAAM;AAAA,QAClE,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACL;AAAA,IACA,sBAAsB;AAAA,MACpB,KAAK,CAAC,YACJ,KAAK,QAAQ;AAAA,QACX,QAAQ,WAAW;AAAA,QACnB,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ,SAAS;AAAA,MACnB,CAAC;AAAA,MACH,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,MAC1B,KAAK,QAAQ;AAAA,QACX,QAAQ,WAAW;AAAA,QACnB,MAAM;AAAA,QACN,MAAM,EAAE,QAAQ,iDAAiD,MAAM;AAAA,QACvE,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACL;AAAA,EACF;AACF;AAEO,MAAM,4BAA4B,CAAC,SAGV;AAC9B,QAAM,EAAE,KAAK,IAAI,KAAK;AACtB,QAAM,OAAO,CAAC,SAAS,OACrB,gBAAgB,WAAW,KAAK,SAAS,CAAC,qBAAqB,MAAM;AACvE,SAAO;AAAA,IACL,MAAM,OAAO,aAET,MAAM,KAAK,QAAQ;AAAA,MACjB,QAAQ,WAAW;AAAA,MACnB,MAAM,KAAK;AAAA,MACX,UAAU;AAAA,MACV,QAAQ,SAAS;AAAA,IACnB,CAAC,GACD;AAAA,IACJ,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,MACvB,KAAK,QAAQ;AAAA,MACX,QAAQ,WAAW;AAAA,MACnB,MAAM,KAAK;AAAA,MACX,MAAM,EAAE,QAAQ,iCAAiC,MAAM;AAAA,MACvD,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AAAA,IACH,QAAQ,OAAO,EAAE,YAAY,OAAO,MAAM;AACxC,YAAM,KAAK,QAAQ;AAAA,QACjB,QAAQ,WAAW;AAAA,QACnB,MAAM,KAAK,IAAI,WAAW,UAAU,CAAC,EAAE;AAAA,QACvC,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/agent-client/participant-configuration.d.mts

@@ -0,0 +1,21 @@
+import { type ChatChangeProposalIface, type ChatConfigurationViewIface, type ProposeChatChangeRequestIface } from '@finalai/agent-protocol/agent-platform';
+import { type ClientContextIface, type SignalOptionsIface } from "./context.mjs";
+/**
+ * An agent participant's settings in this conversation, changed through proposals: one waits
+ * for a manager's decision unless the proposer may apply it.
+ */
+export interface ParticipantConfigurationApiIface {
+    /** The participant's settings, what it is provided, and the open proposals. */
+    get: (participantId: string, options?: SignalOptionsIface) => Promise<ChatConfigurationViewIface>;
+    /** Proposes a change; proposing the same `requestKey` again returns the first proposal. */
+    propose: (participantId: string, request: ProposeChatChangeRequestIface, options?: SignalOptionsIface) => Promise<ChatChangeProposalIface>;
+    /** Accepts or declines a proposal (a manager of the conversation). */
+    decide: (participantId: string, args: {
+        proposalId: string;
+        accept: boolean;
+    }, options?: SignalOptionsIface) => Promise<ChatChangeProposalIface>;
+}
+export declare const createParticipantConfigurationApi: (args: {
+    context: ClientContextIface;
+    conversationId: string;
+}) => ParticipantConfigurationApiIface;

package/dist/modules/agent-client/participant-configuration.mjs

@@ -0,0 +1,38 @@
+import {
+  chatChangeProposalSchema,
+  chatConfigurationViewSchema,
+  decideChatChangeRequestSchema,
+  proposeChatChangeRequestSchema
+} from "@finalai/agent-protocol/agent-platform";
+import { encodePath } from "./context.mjs";
+import { HttpMethod } from "./http.mjs";
+const createParticipantConfigurationApi = (args) => {
+  const { http } = args.context;
+  const path = (participantId, suffix = "") => `/v1/conversations/${encodePath(args.conversationId)}/participants/${encodePath(participantId)}/configuration${suffix}`;
+  return {
+    get: (participantId, options) => http.request({
+      method: HttpMethod.Get,
+      path: path(participantId),
+      response: chatConfigurationViewSchema,
+      signal: options?.signal
+    }),
+    propose: (participantId, request, options) => http.request({
+      method: HttpMethod.Post,
+      path: path(participantId, "/proposals"),
+      body: { schema: proposeChatChangeRequestSchema, value: request },
+      response: chatChangeProposalSchema,
+      signal: options?.signal
+    }),
+    decide: (participantId, { proposalId, accept }, options) => http.request({
+      method: HttpMethod.Post,
+      path: path(participantId, `/proposals/${encodePath(proposalId)}/decision`),
+      body: { schema: decideChatChangeRequestSchema, value: { accept } },
+      response: chatChangeProposalSchema,
+      signal: options?.signal
+    })
+  };
+};
+export {
+  createParticipantConfigurationApi
+};
+//# sourceMappingURL=participant-configuration.mjs.map

package/dist/modules/agent-client/participant-configuration.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/agent-client/participant-configuration.ts"],
+  "sourcesContent": ["import {\n  chatChangeProposalSchema,\n  chatConfigurationViewSchema,\n  decideChatChangeRequestSchema,\n  proposeChatChangeRequestSchema,\n  type ChatChangeProposalIface,\n  type ChatConfigurationViewIface,\n  type ProposeChatChangeRequestIface,\n} from '@finalai/agent-protocol/agent-platform';\nimport { encodePath, type ClientContextIface, type SignalOptionsIface } from \"./context.mjs\";\nimport { HttpMethod } from \"./http.mjs\";\n\n/**\n * An agent participant's settings in this conversation, changed through proposals: one waits\n * for a manager's decision unless the proposer may apply it.\n */\nexport interface ParticipantConfigurationApiIface {\n  /** The participant's settings, what it is provided, and the open proposals. */\n  get: (participantId: string, options?: SignalOptionsIface) => Promise<ChatConfigurationViewIface>;\n  /** Proposes a change; proposing the same `requestKey` again returns the first proposal. */\n  propose: (\n    participantId: string,\n    request: ProposeChatChangeRequestIface,\n    options?: SignalOptionsIface,\n  ) => Promise<ChatChangeProposalIface>;\n  /** Accepts or declines a proposal (a manager of the conversation). */\n  decide: (\n    participantId: string,\n    args: { proposalId: string; accept: boolean },\n    options?: SignalOptionsIface,\n  ) => Promise<ChatChangeProposalIface>;\n}\n\nexport const createParticipantConfigurationApi = (args: {\n  context: ClientContextIface;\n  conversationId: string;\n}): ParticipantConfigurationApiIface => {\n  const { http } = args.context;\n  const path = (participantId: string, suffix = ''): string =>\n    `/v1/conversations/${encodePath(args.conversationId)}/participants/${encodePath(participantId)}/configuration${suffix}`;\n  return {\n    get: (participantId, options) =>\n      http.request({\n        method: HttpMethod.Get,\n        path: path(participantId),\n        response: chatConfigurationViewSchema,\n        signal: options?.signal,\n      }),\n    propose: (participantId, request, options) =>\n      http.request({\n        method: HttpMethod.Post,\n        path: path(participantId, '/proposals'),\n        body: { schema: proposeChatChangeRequestSchema, value: request },\n        response: chatChangeProposalSchema,\n        signal: options?.signal,\n      }),\n    decide: (participantId, { proposalId, accept }, options) =>\n      http.request({\n        method: HttpMethod.Post,\n        path: path(participantId, `/proposals/${encodePath(proposalId)}/decision`),\n        body: { schema: decideChatChangeRequestSchema, value: { accept } },\n        response: chatChangeProposalSchema,\n        signal: options?.signal,\n      }),\n  };\n};\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP,SAAS,kBAAoE;AAC7E,SAAS,kBAAkB;AAuBpB,MAAM,oCAAoC,CAAC,SAGV;AACtC,QAAM,EAAE,KAAK,IAAI,KAAK;AACtB,QAAM,OAAO,CAAC,eAAuB,SAAS,OAC5C,qBAAqB,WAAW,KAAK,cAAc,CAAC,iBAAiB,WAAW,aAAa,CAAC,iBAAiB,MAAM;AACvH,SAAO;AAAA,IACL,KAAK,CAAC,eAAe,YACnB,KAAK,QAAQ;AAAA,MACX,QAAQ,WAAW;AAAA,MACnB,MAAM,KAAK,aAAa;AAAA,MACxB,UAAU;AAAA,MACV,QAAQ,SAAS;AAAA,IACnB,CAAC;AAAA,IACH,SAAS,CAAC,eAAe,SAAS,YAChC,KAAK,QAAQ;AAAA,MACX,QAAQ,WAAW;AAAA,MACnB,MAAM,KAAK,eAAe,YAAY;AAAA,MACtC,MAAM,EAAE,QAAQ,gCAAgC,OAAO,QAAQ;AAAA,MAC/D,UAAU;AAAA,MACV,QAAQ,SAAS;AAAA,IACnB,CAAC;AAAA,IACH,QAAQ,CAAC,eAAe,EAAE,YAAY,OAAO,GAAG,YAC9C,KAAK,QAAQ;AAAA,MACX,QAAQ,WAAW;AAAA,MACnB,MAAM,KAAK,eAAe,cAAc,WAAW,UAAU,CAAC,WAAW;AAAA,MACzE,MAAM,EAAE,QAAQ,+BAA+B,OAAO,EAAE,OAAO,EAAE;AAAA,MACjE,UAAU;AAAA,MACV,QAAQ,SAAS;AAAA,IACnB,CAAC;AAAA,EACL;AACF;",
+  "names": []
+}

package/dist/modules/agent-client/portable.d.mts

@@ -0,0 +1,3 @@
+import { type AgentClientIface, type CreateClientOptionsIface } from "./client.mjs";
+export * from "./api.mjs";
+export declare const createClient: (options: CreateClientOptionsIface) => AgentClientIface;

package/dist/modules/agent-client/portable.mjs

@@ -0,0 +1,28 @@
+import { connectSandboxClient } from "@finalai/agent-provider/sandbox/client";
+import {
+  createClientFor
+} from "./client.mjs";
+import { clientError, ClientErrorCode } from "./errors.mjs";
+export * from "./api.mjs";
+const unavailable = (what) => clientError({
+  message: `${what} is not available in this runtime: pass createClient({ localHosts }) to serve it`,
+  status: 0,
+  code: ClientErrorCode.InvalidRequest
+});
+const portableRuntime = {
+  localCompute: false,
+  compute: () => ({
+    sandbox: () => Promise.reject(unavailable("A local sandbox")),
+    openSandbox: (endpoint) => connectSandboxClient({
+      url: endpoint.url,
+      token: endpoint.token,
+      expiresAt: endpoint.expiresAt
+    })
+  }),
+  dial: () => () => Promise.reject(unavailable("The local host socket"))
+};
+const createClient = (options) => createClientFor(portableRuntime, options);
+export {
+  createClient
+};
+//# sourceMappingURL=portable.mjs.map

package/dist/modules/agent-client/portable.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/agent-client/portable.ts"],
+  "sourcesContent": ["import { connectSandboxClient } from '@finalai/agent-provider/sandbox/client';\nimport {\n  createClientFor,\n  type AgentClientIface,\n  type ClientRuntimeIface,\n  type CreateClientOptionsIface,\n} from \"./client.mjs\";\nimport { clientError, ClientErrorCode } from \"./errors.mjs\";\n\n// `@finalai/agents/client` in browsers, React Native and Workers (the\n// `browser` and `react-native` export conditions): the same API as in Node,\n// with defaults that import nothing Node-only. This process serves no files\n// or shell unless the caller passes `localHosts.compute`, and dials no local\n// host socket unless it passes `localHosts.dial`, since a browser socket\n// cannot carry the client's auth headers.\n\nexport * from \"./api.mjs\";\n\nconst unavailable = (what: string) =>\n  clientError({\n    message: `${what} is not available in this runtime: pass createClient({ localHosts }) to serve it`,\n    status: 0,\n    code: ClientErrorCode.InvalidRequest,\n  });\n\nconst portableRuntime: ClientRuntimeIface = {\n  localCompute: false,\n  compute: () => ({\n    sandbox: () => Promise.reject(unavailable('A local sandbox')),\n    openSandbox: (endpoint) =>\n      connectSandboxClient({\n        url: endpoint.url,\n        token: endpoint.token,\n        expiresAt: endpoint.expiresAt,\n      }),\n  }),\n  dial: () => () => Promise.reject(unavailable('The local host socket')),\n};\n\nexport const createClient = (options: CreateClientOptionsIface): AgentClientIface =>\n  createClientFor(portableRuntime, options);\n"],
+  "mappings": "AAAA,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,aAAa,uBAAuB;AAS7C,cAAc;AAEd,MAAM,cAAc,CAAC,SACnB,YAAY;AAAA,EACV,SAAS,GAAG,IAAI;AAAA,EAChB,QAAQ;AAAA,EACR,MAAM,gBAAgB;AACxB,CAAC;AAEH,MAAM,kBAAsC;AAAA,EAC1C,cAAc;AAAA,EACd,SAAS,OAAO;AAAA,IACd,SAAS,MAAM,QAAQ,OAAO,YAAY,iBAAiB,CAAC;AAAA,IAC5D,aAAa,CAAC,aACZ,qBAAqB;AAAA,MACnB,KAAK,SAAS;AAAA,MACd,OAAO,SAAS;AAAA,MAChB,WAAW,SAAS;AAAA,IACtB,CAAC;AAAA,EACL;AAAA,EACA,MAAM,MAAM,MAAM,QAAQ,OAAO,YAAY,uBAAuB,CAAC;AACvE;AAEO,MAAM,eAAe,CAAC,YAC3B,gBAAgB,iBAAiB,OAAO;",
+  "names": []
+}

package/dist/modules/agent-client/project.d.mts

@@ -1,3 +1,4 @@
+import { type AllowedEndpointsApiIface } from "./organization.mjs";
 import { type ChannelAppsApiIface, type ChannelSourceOf, type ProjectChannelsApiIface } from "./channels.mjs";
 import { type ClientContextIface } from "./context.mjs";
 import { type ProjectConversationsApiIface } from "./conversations.mjs";
@@ -39,6 +40,8 @@ export interface ProjectClientIface extends ProjectResourceApiIface {
     publisher: ProjectPublisherApiIface;
     /** Which of the project's names resolve as `handle/name` from any organization. */
     publicNames: PublicNamesApiIface;
+    /** Where the project lets its secrets go beyond model vendors' own APIs. */
+    allowedEndpoints: AllowedEndpointsApiIface;
 }
 export declare const createProjectClient: (args: {
     context: ClientContextIface;

package/dist/modules/agent-client/project.mjs

@@ -1,3 +1,4 @@
+import { createAllowedEndpointsApi } from "./organization.mjs";
 import {
   createChannelAppsApi,
   createProjectChannelsApi
@@ -57,7 +58,8 @@ const createProjectClient = (args) => {
     oauthClients: createOAuthClientsApi({ context, projectId }),
     signInReturnOrigins: createSignInReturnOriginsApi({ context, projectId }),
     publisher: createProjectPublisherApi({ context, projectId }),
-    publicNames: createPublicNamesApi({ context, projectId })
+    publicNames: createPublicNamesApi({ context, projectId }),
+    allowedEndpoints: createAllowedEndpointsApi({ context, projectId })
   };
 };
 export {

package/dist/modules/agent-client/project.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/agent-client/project.ts"],
-  "sourcesContent": ["import type { AgentInput } from \"./agent-input.mjs\";\nimport {\n  createChannelAppsApi,\n  createProjectChannelsApi,\n  type ChannelAppsApiIface,\n  type ChannelSourceOf,\n  type ProjectChannelsApiIface,\n} from \"./channels.mjs\";\nimport { encodePath, type ClientContextIface } from \"./context.mjs\";\nimport { createProjectConversationsApi, type ProjectConversationsApiIface } from \"./conversations.mjs\";\nimport {\n  createEventsApi,\n  createEventSubscriptionsApi,\n  type EventsApiIface,\n  type EventSubscriptionsApiIface,\n} from \"./events.mjs\";\nimport {\n  createAcpAdaptersApi,\n  createHarnessesApi,\n  type AcpAdaptersApiIface,\n  type HarnessesApiIface,\n} from \"./harnesses.mjs\";\nimport { createIntegrationsApi, type IntegrationsApiIface } from \"./integrations.mjs\";\nimport {\n  createOAuthClientsApi,\n  createSignInReturnOriginsApi,\n  type OAuthClientsApiIface,\n  type SignInReturnOriginsApiIface,\n} from \"./oauth-clients.mjs\";\nimport { createProjectAgentsApi, type ProjectAgentsApiIface } from \"./project-agents.mjs\";\nimport { createProjectResourceApi, type ProjectResourceApiIface } from \"./projects.mjs\";\nimport {\n  createProjectPublisherApi,\n  createPublicNamesApi,\n  type ProjectPublisherApiIface,\n  type PublicNamesApiIface,\n} from \"./publishers.mjs\";\nimport { createSandboxProvidersApi, type SandboxProvidersApiIface } from \"./sandbox-providers.mjs\";\nimport { createProjectSchedulesApi, type ProjectSchedulesApiIface } from \"./schedules.mjs\";\nimport {\n  createSandboxesApi,\n  createSandboxSetupsApi,\n  type SandboxesApiIface,\n  type SandboxSetupsApiIface,\n} from \"./sandboxes.mjs\";\nimport { createProjectSessionsApi, type ProjectSessionsApiIface } from \"./sessions.mjs\";\nimport type { AgentStartDepsIface } from \"./start.mjs\";\n\n// One project: everything is created through it, and a session can only be\n// provided things from its own project.\n\nexport interface ProjectClientIface extends ProjectResourceApiIface {\n  readonly id: string;\n  sessions: ProjectSessionsApiIface;\n  conversations: ProjectConversationsApiIface;\n  agents: ProjectAgentsApiIface;\n  sandboxes: SandboxesApiIface;\n  sandboxSetups: SandboxSetupsApiIface;\n  integrations: IntegrationsApiIface;\n  harnesses: HarnessesApiIface;\n  acpAdapters: AcpAdaptersApiIface;\n  channels: ProjectChannelsApiIface;\n  /** Provider application credentials the project's channel installs use. */\n  channelApps: ChannelAppsApiIface;\n  /** The schedules of the project's conversations. */\n  schedules: ProjectSchedulesApiIface;\n  /** The event feed for this project and those below it. */\n  events: EventsApiIface;\n  /** Pushes this project's feed to a URL (`webhooks:write`, project admin). */\n  eventSubscriptions: EventSubscriptionsApiIface;\n  sandboxProviders: SandboxProvidersApiIface;\n  oauthClients: OAuthClientsApiIface;\n  signInReturnOrigins: SignInReturnOriginsApiIface;\n  /** The project's publisher handle. */\n  publisher: ProjectPublisherApiIface;\n  /** Which of the project's names resolve as `handle/name` from any organization. */\n  publicNames: PublicNamesApiIface;\n}\n\nexport const createProjectClient = (args: {\n  context: ClientContextIface;\n  start: AgentStartDepsIface;\n  channelSourceOf: ChannelSourceOf;\n  projectId: string;\n}): ProjectClientIface => {\n  const { context, projectId } = args;\n  const agents = createProjectAgentsApi({ context, projectId, codec: args.start.codec });\n  // The document must be stored before the platform can check a harness against it.\n  const store = async (agent: AgentInput, signal?: AbortSignal): Promise<string> =>\n    (await agents.store({ agent, signal })).hash;\n  return {\n    ...createProjectResourceApi({ context, projectId }),\n    id: projectId,\n    sessions: createProjectSessionsApi({ context, projectId, start: args.start }),\n    conversations: createProjectConversationsApi({ context, projectId, start: args.start }),\n    agents,\n    sandboxes: createSandboxesApi({ context, projectId }),\n    sandboxSetups: createSandboxSetupsApi({ context, projectId }),\n    integrations: createIntegrationsApi({ context, projectId }),\n    harnesses: createHarnessesApi({ context, projectId, store }),\n    acpAdapters: createAcpAdaptersApi({ context, projectId }),\n    channels: createProjectChannelsApi({ context, projectId, sourceOf: args.channelSourceOf }),\n    channelApps: createChannelAppsApi({ context, projectId }),\n    schedules: createProjectSchedulesApi({ context, projectId }),\n    events: createEventsApi({ context, projectId }),\n    eventSubscriptions: createEventSubscriptionsApi({\n      context,\n      basePath: `/v1/projects/${encodePath(projectId)}/event-subscriptions`,\n    }),\n    sandboxProviders: createSandboxProvidersApi({ context, projectId }),\n    oauthClients: createOAuthClientsApi({ context, projectId }),\n    signInReturnOrigins: createSignInReturnOriginsApi({ context, projectId }),\n    publisher: createProjectPublisherApi({ context, projectId }),\n    publicNames: createPublicNamesApi({ context, projectId }),\n  };\n};\n"],
-  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AACP,SAAS,kBAA2C;AACpD,SAAS,qCAAwE;AACjF;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,6BAAwD;AACjE;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,8BAA0D;AACnE,SAAS,gCAA8D;AACvE;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,iCAAgE;AACzE,SAAS,iCAAgE;AACzE;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,gCAA8D;AAkChE,MAAM,sBAAsB,CAAC,SAKV;AACxB,QAAM,EAAE,SAAS,UAAU,IAAI;AAC/B,QAAM,SAAS,uBAAuB,EAAE,SAAS,WAAW,OAAO,KAAK,MAAM,MAAM,CAAC;AAErF,QAAM,QAAQ,OAAO,OAAmB,YACrC,MAAM,OAAO,MAAM,EAAE,OAAO,OAAO,CAAC,GAAG;AAC1C,SAAO;AAAA,IACL,GAAG,yBAAyB,EAAE,SAAS,UAAU,CAAC;AAAA,IAClD,IAAI;AAAA,IACJ,UAAU,yBAAyB,EAAE,SAAS,WAAW,OAAO,KAAK,MAAM,CAAC;AAAA,IAC5E,eAAe,8BAA8B,EAAE,SAAS,WAAW,OAAO,KAAK,MAAM,CAAC;AAAA,IACtF;AAAA,IACA,WAAW,mBAAmB,EAAE,SAAS,UAAU,CAAC;AAAA,IACpD,eAAe,uBAAuB,EAAE,SAAS,UAAU,CAAC;AAAA,IAC5D,cAAc,sBAAsB,EAAE,SAAS,UAAU,CAAC;AAAA,IAC1D,WAAW,mBAAmB,EAAE,SAAS,WAAW,MAAM,CAAC;AAAA,IAC3D,aAAa,qBAAqB,EAAE,SAAS,UAAU,CAAC;AAAA,IACxD,UAAU,yBAAyB,EAAE,SAAS,WAAW,UAAU,KAAK,gBAAgB,CAAC;AAAA,IACzF,aAAa,qBAAqB,EAAE,SAAS,UAAU,CAAC;AAAA,IACxD,WAAW,0BAA0B,EAAE,SAAS,UAAU,CAAC;AAAA,IAC3D,QAAQ,gBAAgB,EAAE,SAAS,UAAU,CAAC;AAAA,IAC9C,oBAAoB,4BAA4B;AAAA,MAC9C;AAAA,MACA,UAAU,gBAAgB,WAAW,SAAS,CAAC;AAAA,IACjD,CAAC;AAAA,IACD,kBAAkB,0BAA0B,EAAE,SAAS,UAAU,CAAC;AAAA,IAClE,cAAc,sBAAsB,EAAE,SAAS,UAAU,CAAC;AAAA,IAC1D,qBAAqB,6BAA6B,EAAE,SAAS,UAAU,CAAC;AAAA,IACxE,WAAW,0BAA0B,EAAE,SAAS,UAAU,CAAC;AAAA,IAC3D,aAAa,qBAAqB,EAAE,SAAS,UAAU,CAAC;AAAA,EAC1D;AACF;",
+  "sourcesContent": ["import { createAllowedEndpointsApi, type AllowedEndpointsApiIface } from \"./organization.mjs\";\nimport type { AgentInput } from \"./agent-input.mjs\";\nimport {\n  createChannelAppsApi,\n  createProjectChannelsApi,\n  type ChannelAppsApiIface,\n  type ChannelSourceOf,\n  type ProjectChannelsApiIface,\n} from \"./channels.mjs\";\nimport { encodePath, type ClientContextIface } from \"./context.mjs\";\nimport { createProjectConversationsApi, type ProjectConversationsApiIface } from \"./conversations.mjs\";\nimport {\n  createEventsApi,\n  createEventSubscriptionsApi,\n  type EventsApiIface,\n  type EventSubscriptionsApiIface,\n} from \"./events.mjs\";\nimport {\n  createAcpAdaptersApi,\n  createHarnessesApi,\n  type AcpAdaptersApiIface,\n  type HarnessesApiIface,\n} from \"./harnesses.mjs\";\nimport { createIntegrationsApi, type IntegrationsApiIface } from \"./integrations.mjs\";\nimport {\n  createOAuthClientsApi,\n  createSignInReturnOriginsApi,\n  type OAuthClientsApiIface,\n  type SignInReturnOriginsApiIface,\n} from \"./oauth-clients.mjs\";\nimport { createProjectAgentsApi, type ProjectAgentsApiIface } from \"./project-agents.mjs\";\nimport { createProjectResourceApi, type ProjectResourceApiIface } from \"./projects.mjs\";\nimport {\n  createProjectPublisherApi,\n  createPublicNamesApi,\n  type ProjectPublisherApiIface,\n  type PublicNamesApiIface,\n} from \"./publishers.mjs\";\nimport { createSandboxProvidersApi, type SandboxProvidersApiIface } from \"./sandbox-providers.mjs\";\nimport { createProjectSchedulesApi, type ProjectSchedulesApiIface } from \"./schedules.mjs\";\nimport {\n  createSandboxesApi,\n  createSandboxSetupsApi,\n  type SandboxesApiIface,\n  type SandboxSetupsApiIface,\n} from \"./sandboxes.mjs\";\nimport { createProjectSessionsApi, type ProjectSessionsApiIface } from \"./sessions.mjs\";\nimport type { AgentStartDepsIface } from \"./start.mjs\";\n\n// One project: everything is created through it, and a session can only be\n// provided things from its own project.\n\nexport interface ProjectClientIface extends ProjectResourceApiIface {\n  readonly id: string;\n  sessions: ProjectSessionsApiIface;\n  conversations: ProjectConversationsApiIface;\n  agents: ProjectAgentsApiIface;\n  sandboxes: SandboxesApiIface;\n  sandboxSetups: SandboxSetupsApiIface;\n  integrations: IntegrationsApiIface;\n  harnesses: HarnessesApiIface;\n  acpAdapters: AcpAdaptersApiIface;\n  channels: ProjectChannelsApiIface;\n  /** Provider application credentials the project's channel installs use. */\n  channelApps: ChannelAppsApiIface;\n  /** The schedules of the project's conversations. */\n  schedules: ProjectSchedulesApiIface;\n  /** The event feed for this project and those below it. */\n  events: EventsApiIface;\n  /** Pushes this project's feed to a URL (`webhooks:write`, project admin). */\n  eventSubscriptions: EventSubscriptionsApiIface;\n  sandboxProviders: SandboxProvidersApiIface;\n  oauthClients: OAuthClientsApiIface;\n  signInReturnOrigins: SignInReturnOriginsApiIface;\n  /** The project's publisher handle. */\n  publisher: ProjectPublisherApiIface;\n  /** Which of the project's names resolve as `handle/name` from any organization. */\n  publicNames: PublicNamesApiIface;\n  /** Where the project lets its secrets go beyond model vendors' own APIs. */\n  allowedEndpoints: AllowedEndpointsApiIface;\n}\n\nexport const createProjectClient = (args: {\n  context: ClientContextIface;\n  start: AgentStartDepsIface;\n  channelSourceOf: ChannelSourceOf;\n  projectId: string;\n}): ProjectClientIface => {\n  const { context, projectId } = args;\n  const agents = createProjectAgentsApi({ context, projectId, codec: args.start.codec });\n  // The document must be stored before the platform can check a harness against it.\n  const store = async (agent: AgentInput, signal?: AbortSignal): Promise<string> =>\n    (await agents.store({ agent, signal })).hash;\n  return {\n    ...createProjectResourceApi({ context, projectId }),\n    id: projectId,\n    sessions: createProjectSessionsApi({ context, projectId, start: args.start }),\n    conversations: createProjectConversationsApi({ context, projectId, start: args.start }),\n    agents,\n    sandboxes: createSandboxesApi({ context, projectId }),\n    sandboxSetups: createSandboxSetupsApi({ context, projectId }),\n    integrations: createIntegrationsApi({ context, projectId }),\n    harnesses: createHarnessesApi({ context, projectId, store }),\n    acpAdapters: createAcpAdaptersApi({ context, projectId }),\n    channels: createProjectChannelsApi({ context, projectId, sourceOf: args.channelSourceOf }),\n    channelApps: createChannelAppsApi({ context, projectId }),\n    schedules: createProjectSchedulesApi({ context, projectId }),\n    events: createEventsApi({ context, projectId }),\n    eventSubscriptions: createEventSubscriptionsApi({\n      context,\n      basePath: `/v1/projects/${encodePath(projectId)}/event-subscriptions`,\n    }),\n    sandboxProviders: createSandboxProvidersApi({ context, projectId }),\n    oauthClients: createOAuthClientsApi({ context, projectId }),\n    signInReturnOrigins: createSignInReturnOriginsApi({ context, projectId }),\n    publisher: createProjectPublisherApi({ context, projectId }),\n    publicNames: createPublicNamesApi({ context, projectId }),\n    allowedEndpoints: createAllowedEndpointsApi({ context, projectId }),\n  };\n};\n"],
+  "mappings": "AAAA,SAAS,iCAAgE;AAEzE;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AACP,SAAS,kBAA2C;AACpD,SAAS,qCAAwE;AACjF;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,6BAAwD;AACjE;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,8BAA0D;AACnE,SAAS,gCAA8D;AACvE;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,iCAAgE;AACzE,SAAS,iCAAgE;AACzE;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,gCAA8D;AAoChE,MAAM,sBAAsB,CAAC,SAKV;AACxB,QAAM,EAAE,SAAS,UAAU,IAAI;AAC/B,QAAM,SAAS,uBAAuB,EAAE,SAAS,WAAW,OAAO,KAAK,MAAM,MAAM,CAAC;AAErF,QAAM,QAAQ,OAAO,OAAmB,YACrC,MAAM,OAAO,MAAM,EAAE,OAAO,OAAO,CAAC,GAAG;AAC1C,SAAO;AAAA,IACL,GAAG,yBAAyB,EAAE,SAAS,UAAU,CAAC;AAAA,IAClD,IAAI;AAAA,IACJ,UAAU,yBAAyB,EAAE,SAAS,WAAW,OAAO,KAAK,MAAM,CAAC;AAAA,IAC5E,eAAe,8BAA8B,EAAE,SAAS,WAAW,OAAO,KAAK,MAAM,CAAC;AAAA,IACtF;AAAA,IACA,WAAW,mBAAmB,EAAE,SAAS,UAAU,CAAC;AAAA,IACpD,eAAe,uBAAuB,EAAE,SAAS,UAAU,CAAC;AAAA,IAC5D,cAAc,sBAAsB,EAAE,SAAS,UAAU,CAAC;AAAA,IAC1D,WAAW,mBAAmB,EAAE,SAAS,WAAW,MAAM,CAAC;AAAA,IAC3D,aAAa,qBAAqB,EAAE,SAAS,UAAU,CAAC;AAAA,IACxD,UAAU,yBAAyB,EAAE,SAAS,WAAW,UAAU,KAAK,gBAAgB,CAAC;AAAA,IACzF,aAAa,qBAAqB,EAAE,SAAS,UAAU,CAAC;AAAA,IACxD,WAAW,0BAA0B,EAAE,SAAS,UAAU,CAAC;AAAA,IAC3D,QAAQ,gBAAgB,EAAE,SAAS,UAAU,CAAC;AAAA,IAC9C,oBAAoB,4BAA4B;AAAA,MAC9C;AAAA,MACA,UAAU,gBAAgB,WAAW,SAAS,CAAC;AAAA,IACjD,CAAC;AAAA,IACD,kBAAkB,0BAA0B,EAAE,SAAS,UAAU,CAAC;AAAA,IAClE,cAAc,sBAAsB,EAAE,SAAS,UAAU,CAAC;AAAA,IAC1D,qBAAqB,6BAA6B,EAAE,SAAS,UAAU,CAAC;AAAA,IACxE,WAAW,0BAA0B,EAAE,SAAS,UAAU,CAAC;AAAA,IAC3D,aAAa,qBAAqB,EAAE,SAAS,UAAU,CAAC;AAAA,IACxD,kBAAkB,0BAA0B,EAAE,SAAS,UAAU,CAAC;AAAA,EACpE;AACF;",
   "names": []
 }

package/dist/modules/agent-client/provide.d.mts

@@ -22,7 +22,6 @@ export interface ProvidePatchIface {
     harness?: HarnessSettingsIface;
     compute?: Partial<Record<Capability | `${Capability}`, ResourceRef | null>>;
     integrations?: Record<string, ResourceRef | null>;
-    instructions?: string | null;
     tools?: string[] | null;
     /** The settings revision you read; a stale one fails with `conflict`. */
     revision?: number;

package/dist/modules/agent-client/provide.mjs

@@ -39,7 +39,6 @@ const providePatchOf = (patch) => ({
   ...patch.harness == null ? {} : { harness: patch.harness },
   ...patch.compute == null ? {} : { compute: computePatchOf(patch.compute) },
   ...patch.integrations == null ? {} : { integrations: slotPatchOf(patch.integrations) },
-  ...patch.instructions === void 0 ? {} : { instructions: patch.instructions },
   ...patch.tools === void 0 ? {} : { tools: patch.tools },
   ...patch.revision == null ? {} : { revision: patch.revision }
 });

package/dist/modules/agent-client/provide.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/agent-client/provide.ts"],
-  "sourcesContent": ["import { CAPABILITIES, type Capability } from '@finalai/agent-protocol';\nimport {\n  harnessSettingsSchema,\n  type HarnessSettingsIface,\n  type HarnessSettingsViewIface,\n  type ProvideDocumentIface,\n  type ProvideDocumentViewIface,\n  type ProvideParticipantRequestIface,\n} from '@finalai/agent-protocol/agent-platform';\nimport { clientError, ClientErrorCode } from \"./errors.mjs\";\n\n// What a caller provides to meet an agent's requirements, as the SDK accepts\n// it: the wire document, except that a sandbox or an integration may be given\n// as the handle `project.sandboxes.create` or `project.integrations.create`\n// returned. Handles are sent as their ids.\n\n/** Anything with the id of a project resource: a handle, or a fetched record. */\nexport interface ResourceRefIface {\n  readonly id: string;\n}\n\nexport type ResourceRef = string | ResourceRefIface;\n\nexport interface ProvideIface {\n  /** Harness settings, inline: `serverlessPi({ model, inference })`. */\n  harness?: HarnessSettingsIface;\n  /**\n   * Capability \u2192 the sandbox that provides it. `files` and `shell` must name the\n   * same sandbox. A capability left out runs in this process unless the client\n   * was created with `localCompute: false`.\n   */\n  compute?: Partial<Record<Capability | `${Capability}`, ResourceRef>>;\n  /** Integration slot \u2192 the integration that fills it. */\n  integrations?: Record<string, ResourceRef>;\n}\n\n/** A change to one agent participant's settings; `null` removes a capability or slot. */\nexport interface ProvidePatchIface {\n  harness?: HarnessSettingsIface;\n  compute?: Partial<Record<Capability | `${Capability}`, ResourceRef | null>>;\n  integrations?: Record<string, ResourceRef | null>;\n  instructions?: string | null;\n  tools?: string[] | null;\n  /** The settings revision you read; a stale one fails with `conflict`. */\n  revision?: number;\n}\n\nexport const resourceIdOf = (ref: ResourceRef): string => (typeof ref === 'string' ? ref : ref.id);\n\nconst capabilityOf = (key: string): Capability => {\n  const capability = CAPABILITIES.find((candidate) => candidate === key);\n  if (capability == null)\n    throw clientError({\n      message: `Unknown compute capability ${key}: use ${CAPABILITIES.join(', ')}`,\n      status: 0,\n      code: ClientErrorCode.InvalidRequest,\n    });\n  return capability;\n};\n\nconst computeIdsOf = (\n  refs: Partial<Record<string, ResourceRef>>,\n): Partial<Record<Capability, string>> => {\n  const ids: Partial<Record<Capability, string>> = {};\n  for (const [key, ref] of Object.entries(refs))\n    if (ref != null) ids[capabilityOf(key)] = resourceIdOf(ref);\n  return ids;\n};\n\nconst computePatchOf = (\n  refs: Partial<Record<string, ResourceRef | null>>,\n): Partial<Record<Capability, string | null>> => {\n  const ids: Partial<Record<Capability, string | null>> = {};\n  for (const [key, ref] of Object.entries(refs))\n    if (ref !== undefined) ids[capabilityOf(key)] = ref == null ? null : resourceIdOf(ref);\n  return ids;\n};\n\nconst slotIdsOf = (refs: Record<string, ResourceRef>): Record<string, string> =>\n  Object.fromEntries(Object.entries(refs).map(([slot, ref]) => [slot, resourceIdOf(ref)]));\n\nconst slotPatchOf = (refs: Record<string, ResourceRef | null>): Record<string, string | null> =>\n  Object.fromEntries(\n    Object.entries(refs).map(([slot, ref]) => [slot, ref == null ? null : resourceIdOf(ref)]),\n  );\n\n/** The wire document for `provide`: handles become ids. */\nexport const provideDocumentOf = (provide: ProvideIface): ProvideDocumentIface => ({\n  ...(provide.harness == null ? {} : { harness: provide.harness }),\n  ...(provide.compute == null ? {} : { compute: computeIdsOf(provide.compute) }),\n  ...(provide.integrations == null ? {} : { integrations: slotIdsOf(provide.integrations) }),\n});\n\nexport const providePatchOf = (patch: ProvidePatchIface): ProvideParticipantRequestIface => ({\n  ...(patch.harness == null ? {} : { harness: patch.harness }),\n  ...(patch.compute == null ? {} : { compute: computePatchOf(patch.compute) }),\n  ...(patch.integrations == null ? {} : { integrations: slotPatchOf(patch.integrations) }),\n  ...(patch.instructions === undefined ? {} : { instructions: patch.instructions }),\n  ...(patch.tools === undefined ? {} : { tools: patch.tools }),\n  ...(patch.revision == null ? {} : { revision: patch.revision }),\n});\n\n// Settings the SDK cannot read back in full (a newer server's inference\n// source) still name the harness, which is what the local check needs.\nconst harnessOfView = (view: HarnessSettingsViewIface): HarnessSettingsIface => {\n  const environment =\n    view.environment == null\n      ? {}\n      : {\n          environment:\n            typeof view.environment === 'string'\n              ? view.environment\n              : {\n                  url: view.environment.url,\n                  ...(view.environment.hop == null ? {} : { hop: view.environment.hop }),\n                },\n        };\n  const parsed = harnessSettingsSchema.safeParse({\n    harness: view.harness,\n    ...(view.adapter == null ? {} : { adapter: view.adapter }),\n    configuration: view.configuration,\n    ...environment,\n  });\n  return parsed.success ? parsed.data : { harness: view.harness };\n};\n\n/** A provide document as the server returns it, back in the form calls send. */\nexport const provideDocumentOfView = (view: ProvideDocumentViewIface): ProvideDocumentIface => {\n  const compute: Partial<Record<Capability, string>> = {};\n  for (const [key, id] of Object.entries(view.compute)) {\n    const capability = CAPABILITIES.find((candidate) => candidate === key);\n    if (capability != null) compute[capability] = id;\n  }\n  return {\n    ...(view.harness == null ? {} : { harness: harnessOfView(view.harness) }),\n    ...(Object.keys(compute).length === 0 ? {} : { compute }),\n    ...(Object.keys(view.integrations).length === 0 ? {} : { integrations: view.integrations }),\n  };\n};\n\n/**\n * What an agent is provided, as the platform layers it: the nearest scope that\n * sets a top-level key wins it whole, so compute never mixes sandboxes from\n * two scopes.\n */\nexport const layerProvide = (\n  own: ProvideDocumentIface,\n  shared: ProvideDocumentIface | null,\n): ProvideDocumentIface => {\n  const harness = own.harness ?? shared?.harness;\n  const compute = own.compute ?? shared?.compute;\n  const integrations = own.integrations ?? shared?.integrations;\n  return {\n    ...(harness == null ? {} : { harness }),\n    ...(compute == null ? {} : { compute }),\n    ...(integrations == null ? {} : { integrations }),\n  };\n};\n"],
-  "mappings": "AAAA,SAAS,oBAAqC;AAC9C;AAAA,EACE;AAAA,OAMK;AACP,SAAS,aAAa,uBAAuB;AAsCtC,MAAM,eAAe,CAAC,QAA8B,OAAO,QAAQ,WAAW,MAAM,IAAI;AAE/F,MAAM,eAAe,CAAC,QAA4B;AAChD,QAAM,aAAa,aAAa,KAAK,CAAC,cAAc,cAAc,GAAG;AACrE,MAAI,cAAc;AAChB,UAAM,YAAY;AAAA,MAChB,SAAS,8BAA8B,GAAG,SAAS,aAAa,KAAK,IAAI,CAAC;AAAA,MAC1E,QAAQ;AAAA,MACR,MAAM,gBAAgB;AAAA,IACxB,CAAC;AACH,SAAO;AACT;AAEA,MAAM,eAAe,CACnB,SACwC;AACxC,QAAM,MAA2C,CAAC;AAClD,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,IAAI;AAC1C,QAAI,OAAO,KAAM,KAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG;AAC5D,SAAO;AACT;AAEA,MAAM,iBAAiB,CACrB,SAC+C;AAC/C,QAAM,MAAkD,CAAC;AACzD,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,IAAI;AAC1C,QAAI,QAAQ,OAAW,KAAI,aAAa,GAAG,CAAC,IAAI,OAAO,OAAO,OAAO,aAAa,GAAG;AACvF,SAAO;AACT;AAEA,MAAM,YAAY,CAAC,SACjB,OAAO,YAAY,OAAO,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC;AAEzF,MAAM,cAAc,CAAC,SACnB,OAAO;AAAA,EACL,OAAO,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,OAAO,OAAO,OAAO,aAAa,GAAG,CAAC,CAAC;AAC1F;AAGK,MAAM,oBAAoB,CAAC,aAAiD;AAAA,EACjF,GAAI,QAAQ,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;AAAA,EAC9D,GAAI,QAAQ,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,aAAa,QAAQ,OAAO,EAAE;AAAA,EAC5E,GAAI,QAAQ,gBAAgB,OAAO,CAAC,IAAI,EAAE,cAAc,UAAU,QAAQ,YAAY,EAAE;AAC1F;AAEO,MAAM,iBAAiB,CAAC,WAA8D;AAAA,EAC3F,GAAI,MAAM,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,EAC1D,GAAI,MAAM,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,eAAe,MAAM,OAAO,EAAE;AAAA,EAC1E,GAAI,MAAM,gBAAgB,OAAO,CAAC,IAAI,EAAE,cAAc,YAAY,MAAM,YAAY,EAAE;AAAA,EACtF,GAAI,MAAM,iBAAiB,SAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;AAAA,EAC/E,GAAI,MAAM,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;AAAA,EAC1D,GAAI,MAAM,YAAY,OAAO,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAC/D;AAIA,MAAM,gBAAgB,CAAC,SAAyD;AAC9E,QAAM,cACJ,KAAK,eAAe,OAChB,CAAC,IACD;AAAA,IACE,aACE,OAAO,KAAK,gBAAgB,WACxB,KAAK,cACL;AAAA,MACE,KAAK,KAAK,YAAY;AAAA,MACtB,GAAI,KAAK,YAAY,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,KAAK,YAAY,IAAI;AAAA,IACtE;AAAA,EACR;AACN,QAAM,SAAS,sBAAsB,UAAU;AAAA,IAC7C,SAAS,KAAK;AAAA,IACd,GAAI,KAAK,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ;AAAA,IACxD,eAAe,KAAK;AAAA,IACpB,GAAG;AAAA,EACL,CAAC;AACD,SAAO,OAAO,UAAU,OAAO,OAAO,EAAE,SAAS,KAAK,QAAQ;AAChE;AAGO,MAAM,wBAAwB,CAAC,SAAyD;AAC7F,QAAM,UAA+C,CAAC;AACtD,aAAW,CAAC,KAAK,EAAE,KAAK,OAAO,QAAQ,KAAK,OAAO,GAAG;AACpD,UAAM,aAAa,aAAa,KAAK,CAAC,cAAc,cAAc,GAAG;AACrE,QAAI,cAAc,KAAM,SAAQ,UAAU,IAAI;AAAA,EAChD;AACA,SAAO;AAAA,IACL,GAAI,KAAK,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,cAAc,KAAK,OAAO,EAAE;AAAA,IACvE,GAAI,OAAO,KAAK,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE,QAAQ;AAAA,IACvD,GAAI,OAAO,KAAK,KAAK,YAAY,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE,cAAc,KAAK,aAAa;AAAA,EAC3F;AACF;AAOO,MAAM,eAAe,CAC1B,KACA,WACyB;AACzB,QAAM,UAAU,IAAI,WAAW,QAAQ;AACvC,QAAM,UAAU,IAAI,WAAW,QAAQ;AACvC,QAAM,eAAe,IAAI,gBAAgB,QAAQ;AACjD,SAAO;AAAA,IACL,GAAI,WAAW,OAAO,CAAC,IAAI,EAAE,QAAQ;AAAA,IACrC,GAAI,WAAW,OAAO,CAAC,IAAI,EAAE,QAAQ;AAAA,IACrC,GAAI,gBAAgB,OAAO,CAAC,IAAI,EAAE,aAAa;AAAA,EACjD;AACF;",
+  "sourcesContent": ["import { CAPABILITIES, type Capability } from '@finalai/agent-protocol';\nimport {\n  harnessSettingsSchema,\n  type HarnessSettingsIface,\n  type HarnessSettingsViewIface,\n  type ProvideDocumentIface,\n  type ProvideDocumentViewIface,\n  type ProvideParticipantRequestIface,\n} from '@finalai/agent-protocol/agent-platform';\nimport { clientError, ClientErrorCode } from \"./errors.mjs\";\n\n// What a caller provides to meet an agent's requirements, as the SDK accepts\n// it: the wire document, except that a sandbox or an integration may be given\n// as the handle `project.sandboxes.create` or `project.integrations.create`\n// returned. Handles are sent as their ids.\n\n/** Anything with the id of a project resource: a handle, or a fetched record. */\nexport interface ResourceRefIface {\n  readonly id: string;\n}\n\nexport type ResourceRef = string | ResourceRefIface;\n\nexport interface ProvideIface {\n  /** Harness settings, inline: `serverlessPi({ model, inference })`. */\n  harness?: HarnessSettingsIface;\n  /**\n   * Capability \u2192 the sandbox that provides it. `files` and `shell` must name the\n   * same sandbox. A capability left out runs in this process unless the client\n   * was created with `localCompute: false`.\n   */\n  compute?: Partial<Record<Capability | `${Capability}`, ResourceRef>>;\n  /** Integration slot \u2192 the integration that fills it. */\n  integrations?: Record<string, ResourceRef>;\n}\n\n/** A change to one agent participant's settings; `null` removes a capability or slot. */\nexport interface ProvidePatchIface {\n  harness?: HarnessSettingsIface;\n  compute?: Partial<Record<Capability | `${Capability}`, ResourceRef | null>>;\n  integrations?: Record<string, ResourceRef | null>;\n  tools?: string[] | null;\n  /** The settings revision you read; a stale one fails with `conflict`. */\n  revision?: number;\n}\n\nexport const resourceIdOf = (ref: ResourceRef): string => (typeof ref === 'string' ? ref : ref.id);\n\nconst capabilityOf = (key: string): Capability => {\n  const capability = CAPABILITIES.find((candidate) => candidate === key);\n  if (capability == null)\n    throw clientError({\n      message: `Unknown compute capability ${key}: use ${CAPABILITIES.join(', ')}`,\n      status: 0,\n      code: ClientErrorCode.InvalidRequest,\n    });\n  return capability;\n};\n\nconst computeIdsOf = (\n  refs: Partial<Record<string, ResourceRef>>,\n): Partial<Record<Capability, string>> => {\n  const ids: Partial<Record<Capability, string>> = {};\n  for (const [key, ref] of Object.entries(refs))\n    if (ref != null) ids[capabilityOf(key)] = resourceIdOf(ref);\n  return ids;\n};\n\nconst computePatchOf = (\n  refs: Partial<Record<string, ResourceRef | null>>,\n): Partial<Record<Capability, string | null>> => {\n  const ids: Partial<Record<Capability, string | null>> = {};\n  for (const [key, ref] of Object.entries(refs))\n    if (ref !== undefined) ids[capabilityOf(key)] = ref == null ? null : resourceIdOf(ref);\n  return ids;\n};\n\nconst slotIdsOf = (refs: Record<string, ResourceRef>): Record<string, string> =>\n  Object.fromEntries(Object.entries(refs).map(([slot, ref]) => [slot, resourceIdOf(ref)]));\n\nconst slotPatchOf = (refs: Record<string, ResourceRef | null>): Record<string, string | null> =>\n  Object.fromEntries(\n    Object.entries(refs).map(([slot, ref]) => [slot, ref == null ? null : resourceIdOf(ref)]),\n  );\n\n/** The wire document for `provide`: handles become ids. */\nexport const provideDocumentOf = (provide: ProvideIface): ProvideDocumentIface => ({\n  ...(provide.harness == null ? {} : { harness: provide.harness }),\n  ...(provide.compute == null ? {} : { compute: computeIdsOf(provide.compute) }),\n  ...(provide.integrations == null ? {} : { integrations: slotIdsOf(provide.integrations) }),\n});\n\nexport const providePatchOf = (patch: ProvidePatchIface): ProvideParticipantRequestIface => ({\n  ...(patch.harness == null ? {} : { harness: patch.harness }),\n  ...(patch.compute == null ? {} : { compute: computePatchOf(patch.compute) }),\n  ...(patch.integrations == null ? {} : { integrations: slotPatchOf(patch.integrations) }),\n  ...(patch.tools === undefined ? {} : { tools: patch.tools }),\n  ...(patch.revision == null ? {} : { revision: patch.revision }),\n});\n\n// Settings the SDK cannot read back in full (a newer server's inference\n// source) still name the harness, which is what the local check needs.\nconst harnessOfView = (view: HarnessSettingsViewIface): HarnessSettingsIface => {\n  const environment =\n    view.environment == null\n      ? {}\n      : {\n          environment:\n            typeof view.environment === 'string'\n              ? view.environment\n              : {\n                  url: view.environment.url,\n                  ...(view.environment.hop == null ? {} : { hop: view.environment.hop }),\n                },\n        };\n  const parsed = harnessSettingsSchema.safeParse({\n    harness: view.harness,\n    ...(view.adapter == null ? {} : { adapter: view.adapter }),\n    configuration: view.configuration,\n    ...environment,\n  });\n  return parsed.success ? parsed.data : { harness: view.harness };\n};\n\n/** A provide document as the server returns it, back in the form calls send. */\nexport const provideDocumentOfView = (view: ProvideDocumentViewIface): ProvideDocumentIface => {\n  const compute: Partial<Record<Capability, string>> = {};\n  for (const [key, id] of Object.entries(view.compute)) {\n    const capability = CAPABILITIES.find((candidate) => candidate === key);\n    if (capability != null) compute[capability] = id;\n  }\n  return {\n    ...(view.harness == null ? {} : { harness: harnessOfView(view.harness) }),\n    ...(Object.keys(compute).length === 0 ? {} : { compute }),\n    ...(Object.keys(view.integrations).length === 0 ? {} : { integrations: view.integrations }),\n  };\n};\n\n/**\n * What an agent is provided, as the platform layers it: the nearest scope that\n * sets a top-level key wins it whole, so compute never mixes sandboxes from\n * two scopes.\n */\nexport const layerProvide = (\n  own: ProvideDocumentIface,\n  shared: ProvideDocumentIface | null,\n): ProvideDocumentIface => {\n  const harness = own.harness ?? shared?.harness;\n  const compute = own.compute ?? shared?.compute;\n  const integrations = own.integrations ?? shared?.integrations;\n  return {\n    ...(harness == null ? {} : { harness }),\n    ...(compute == null ? {} : { compute }),\n    ...(integrations == null ? {} : { integrations }),\n  };\n};\n"],
+  "mappings": "AAAA,SAAS,oBAAqC;AAC9C;AAAA,EACE;AAAA,OAMK;AACP,SAAS,aAAa,uBAAuB;AAqCtC,MAAM,eAAe,CAAC,QAA8B,OAAO,QAAQ,WAAW,MAAM,IAAI;AAE/F,MAAM,eAAe,CAAC,QAA4B;AAChD,QAAM,aAAa,aAAa,KAAK,CAAC,cAAc,cAAc,GAAG;AACrE,MAAI,cAAc;AAChB,UAAM,YAAY;AAAA,MAChB,SAAS,8BAA8B,GAAG,SAAS,aAAa,KAAK,IAAI,CAAC;AAAA,MAC1E,QAAQ;AAAA,MACR,MAAM,gBAAgB;AAAA,IACxB,CAAC;AACH,SAAO;AACT;AAEA,MAAM,eAAe,CACnB,SACwC;AACxC,QAAM,MAA2C,CAAC;AAClD,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,IAAI;AAC1C,QAAI,OAAO,KAAM,KAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG;AAC5D,SAAO;AACT;AAEA,MAAM,iBAAiB,CACrB,SAC+C;AAC/C,QAAM,MAAkD,CAAC;AACzD,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,IAAI;AAC1C,QAAI,QAAQ,OAAW,KAAI,aAAa,GAAG,CAAC,IAAI,OAAO,OAAO,OAAO,aAAa,GAAG;AACvF,SAAO;AACT;AAEA,MAAM,YAAY,CAAC,SACjB,OAAO,YAAY,OAAO,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC;AAEzF,MAAM,cAAc,CAAC,SACnB,OAAO;AAAA,EACL,OAAO,QAAQ,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,OAAO,OAAO,OAAO,aAAa,GAAG,CAAC,CAAC;AAC1F;AAGK,MAAM,oBAAoB,CAAC,aAAiD;AAAA,EACjF,GAAI,QAAQ,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;AAAA,EAC9D,GAAI,QAAQ,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,aAAa,QAAQ,OAAO,EAAE;AAAA,EAC5E,GAAI,QAAQ,gBAAgB,OAAO,CAAC,IAAI,EAAE,cAAc,UAAU,QAAQ,YAAY,EAAE;AAC1F;AAEO,MAAM,iBAAiB,CAAC,WAA8D;AAAA,EAC3F,GAAI,MAAM,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,EAC1D,GAAI,MAAM,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,eAAe,MAAM,OAAO,EAAE;AAAA,EAC1E,GAAI,MAAM,gBAAgB,OAAO,CAAC,IAAI,EAAE,cAAc,YAAY,MAAM,YAAY,EAAE;AAAA,EACtF,GAAI,MAAM,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;AAAA,EAC1D,GAAI,MAAM,YAAY,OAAO,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAC/D;AAIA,MAAM,gBAAgB,CAAC,SAAyD;AAC9E,QAAM,cACJ,KAAK,eAAe,OAChB,CAAC,IACD;AAAA,IACE,aACE,OAAO,KAAK,gBAAgB,WACxB,KAAK,cACL;AAAA,MACE,KAAK,KAAK,YAAY;AAAA,MACtB,GAAI,KAAK,YAAY,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,KAAK,YAAY,IAAI;AAAA,IACtE;AAAA,EACR;AACN,QAAM,SAAS,sBAAsB,UAAU;AAAA,IAC7C,SAAS,KAAK;AAAA,IACd,GAAI,KAAK,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ;AAAA,IACxD,eAAe,KAAK;AAAA,IACpB,GAAG;AAAA,EACL,CAAC;AACD,SAAO,OAAO,UAAU,OAAO,OAAO,EAAE,SAAS,KAAK,QAAQ;AAChE;AAGO,MAAM,wBAAwB,CAAC,SAAyD;AAC7F,QAAM,UAA+C,CAAC;AACtD,aAAW,CAAC,KAAK,EAAE,KAAK,OAAO,QAAQ,KAAK,OAAO,GAAG;AACpD,UAAM,aAAa,aAAa,KAAK,CAAC,cAAc,cAAc,GAAG;AACrE,QAAI,cAAc,KAAM,SAAQ,UAAU,IAAI;AAAA,EAChD;AACA,SAAO;AAAA,IACL,GAAI,KAAK,WAAW,OAAO,CAAC,IAAI,EAAE,SAAS,cAAc,KAAK,OAAO,EAAE;AAAA,IACvE,GAAI,OAAO,KAAK,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE,QAAQ;AAAA,IACvD,GAAI,OAAO,KAAK,KAAK,YAAY,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE,cAAc,KAAK,aAAa;AAAA,EAC3F;AACF;AAOO,MAAM,eAAe,CAC1B,KACA,WACyB;AACzB,QAAM,UAAU,IAAI,WAAW,QAAQ;AACvC,QAAM,UAAU,IAAI,WAAW,QAAQ;AACvC,QAAM,eAAe,IAAI,gBAAgB,QAAQ;AACjD,SAAO;AAAA,IACL,GAAI,WAAW,OAAO,CAAC,IAAI,EAAE,QAAQ;AAAA,IACrC,GAAI,WAAW,OAAO,CAAC,IAAI,EAAE,QAAQ;AAAA,IACrC,GAAI,gBAAgB,OAAO,CAAC,IAAI,EAAE,aAAa;AAAA,EACjD;AACF;",
   "names": []
 }

package/dist/modules/agent-client/sandboxes.d.mts

@@ -1,5 +1,5 @@
 import type { SandboxEnvironmentValueIface } from '@finalai/agent-provider/sandbox/types';
-import { type PublishSandboxSetupResponseIface, type RunSandboxCommandRequestIface, type RunSandboxCommandResponseIface, type SandboxDescriptionIface, type SandboxListIface, type SandboxProviderIface, type SandboxResourceIface, type SandboxSetupInputIface, type SandboxSetupRefInputIface, type SandboxSetupResourceIface } from '@finalai/agent-protocol/agent-platform';
+import { type PublishSandboxSetupResponseIface, type RunSandboxCommandRequestIface, type RunSandboxCommandResponseIface, type SandboxDescriptionIface, type SandboxExitConsentIface, type SandboxListIface, type SandboxProviderIface, type SandboxResourceIface, type SandboxSetupInputIface, type SandboxSetupRefInputIface, type SandboxSetupResourceIface } from '@finalai/agent-protocol/agent-platform';
 import { type ClientContextIface, type SignalOptionsIface } from "./context.mjs";
 export type { SandboxEnvironmentValueIface };
 /** A published sandbox setup at a version, or `latest` (resolved once, at creation). */
@@ -33,6 +33,13 @@ export interface SandboxHandleIface {
     setEgressExit: (args: {
         integration: string | null;
     } & SignalOptionsIface) => Promise<SandboxResourceIface>;
+    /**
+     * Proof for an integration's egress exit (`intg_...`) that you are the person the sandbox acts
+     * for now, to present with your consent to that exit. Refused for anyone else.
+     */
+    exitConsent: (args: {
+        integration: string;
+    } & SignalOptionsIface) => Promise<SandboxExitConsentIface>;
     delete: (options?: SignalOptionsIface) => Promise<void>;
 }
 export interface SandboxesApiIface {

package/dist/modules/agent-client/sandboxes.mjs

@@ -12,6 +12,8 @@ import {
   sandboxResourceSchema,
   sandboxSetupListSchema,
   sandboxSetupResourceSchema,
+  sandboxExitConsentRequestSchema,
+  sandboxExitConsentSchema,
   setSandboxEgressExitRequestSchema
 } from "@finalai/agent-protocol/agent-platform";
 import { encodePath } from "./context.mjs";
@@ -49,6 +51,13 @@ const createSandboxesApi = (args) => {
       response: sandboxResourceSchema,
       signal
     }),
+    exitConsent: ({ signal, ...value }) => http.request({
+      method: HttpMethod.Post,
+      path: sandboxPath(resource.id, "/exit-consent"),
+      body: { schema: sandboxExitConsentRequestSchema, value },
+      response: sandboxExitConsentSchema,
+      signal
+    }),
     delete: async (options) => {
       await http.request({
         method: HttpMethod.Delete,