@finalai/final-agent-provider 0.10.0 → 0.11.0

package/dist/modules/provider/general.mjs

@@ -0,0 +1,130 @@
+import {
+  ACP_V2_INTERFACE,
+  FinalExtension,
+  harnessStartFor,
+  HarnessEnvironmentKind,
+  runtimesOf
+} from "@finalai/agent-provider/harness-start";
+const REQUIRED_FINAL_EXTENSIONS = [
+  FinalExtension.Observe,
+  FinalExtension.AuthorMeta,
+  FinalExtension.ResumeReplay,
+  FinalExtension.AfterSeqReplay
+];
+const refused = (problems) => ({ unsuitable: problems });
+const listOf = (items) => items.length === 0 ? "nothing" : items.join(", ");
+const urlEndpoint = async (args) => {
+  if (args.adapter != null)
+    return refused([
+      `An ACP endpoint at a URL already speaks ACP and takes no adapter (${args.adapter})`
+    ]);
+  let protocol;
+  try {
+    protocol = new URL(args.url).protocol;
+  } catch {
+    return refused([`${args.url} is not a URL`]);
+  }
+  const transport = protocol === "wss:" || protocol === "ws:" ? "ws" : protocol === "https:" || protocol === "http:" ? "http" : null;
+  if (transport == null)
+    return refused([`${args.url}: an ACP endpoint answers over ws(s) or http(s)`]);
+  const headers = {};
+  if (args.hop != null) {
+    const token = await args.ctx.secrets.get(args.hop);
+    if (token == null || token.length === 0)
+      return refused([`The project has no secret ${args.hop} for ${args.url}`]);
+    headers["authorization"] = `Bearer ${token}`;
+  }
+  return {
+    ref: args.ref,
+    transport,
+    url: args.url,
+    headers,
+    extensions: [...REQUIRED_FINAL_EXTENSIONS]
+  };
+};
+const sandboxEndpoint = (args, ref, sandboxId) => {
+  const harness = args.harness;
+  const adapter = args.adapter;
+  const name = harness.name;
+  if (harness.definition.provider != null)
+    return refused([`${name} is reached by its own harness provider`]);
+  const problems = [];
+  if (adapter == null && harness.definition.interface !== ACP_V2_INTERFACE)
+    problems.push(`${name} speaks ${harness.definition.interface}, not ACP v2, and has no adapter`);
+  if (adapter != null) {
+    if (!adapter.definition.adapts.includes(harness.definition.interface))
+      problems.push(
+        `ACP adapter ${adapter.name} adapts ${listOf(adapter.definition.adapts)}, not ${harness.definition.interface}`
+      );
+    const missing = REQUIRED_FINAL_EXTENSIONS.filter(
+      (extension) => !adapter.definition.extensions.includes(extension)
+    );
+    if (missing.length > 0)
+      problems.push(
+        `ACP adapter ${adapter.name} does not implement Final's ACP extensions ${listOf(missing)}`
+      );
+  }
+  const runtime = args.runtime;
+  const harnessRuntimes = runtimesOf(harness.definition.run);
+  const adapterRuntimes = adapter == null ? null : runtimesOf(adapter.definition.run);
+  if (runtime == null) problems.push(`Sandbox ${sandboxId} runs nothing ${name} has an entry for`);
+  else {
+    if (!harnessRuntimes.includes(runtime))
+      problems.push(`${name} has no ${runtime} entry (it runs as ${listOf(harnessRuntimes)})`);
+    if (adapter != null && adapterRuntimes != null && !adapterRuntimes.includes(runtime))
+      problems.push(
+        `ACP adapter ${adapter.name} has no ${runtime} entry (it runs as ${listOf(adapterRuntimes)})`
+      );
+  }
+  if (problems.length > 0 || runtime == null) return refused(problems);
+  const started = harnessStartFor({
+    harness: harness.definition,
+    adapter: adapter?.definition ?? null,
+    runtime,
+    configuration: args.settings.configuration
+  });
+  if (!started.ok) return refused(started.problems);
+  const endpoint = {
+    ref,
+    transport: "sandbox",
+    sandboxId,
+    start: started.start,
+    extensions: [...REQUIRED_FINAL_EXTENSIONS]
+  };
+  return endpoint;
+};
+const endpointFor = (args, ref, ctx) => {
+  const environment = args.environment;
+  if (environment.kind === HarnessEnvironmentKind.Url)
+    return urlEndpoint({
+      ref,
+      url: environment.url,
+      hop: environment.hop,
+      adapter: args.adapter?.name ?? null,
+      ctx
+    });
+  return Promise.resolve(sandboxEndpoint(args, ref, environment.sandboxId));
+};
+const open = (args, ctx) => endpointFor(
+  args,
+  { harness: args.harness.name, harnessSessionRef: args.harnessSessionId, generation: 0 },
+  ctx
+);
+const resume = (args, ctx) => endpointFor(args, args.ref, ctx);
+const park = async (_args, _ctx) => {
+};
+const close = async (_args, _ctx) => {
+};
+const health = async (_args, _ctx) => ({
+  ok: true,
+  detail: "The session service watches the program it started"
+});
+export {
+  REQUIRED_FINAL_EXTENSIONS,
+  close,
+  health,
+  open,
+  park,
+  resume
+};
+//# sourceMappingURL=general.mjs.map

package/dist/modules/provider/general.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/provider/general.ts"],
+  "sourcesContent": ["import type { HarnessSessionRefIface } from '@finalai/agent-provider/harness';\nimport type { ComposedEnvironmentIface } from '@finalai/agent-provider/harness-definition';\nimport {\n  ACP_V2_INTERFACE,\n  FinalExtension,\n  harnessStartFor,\n  HarnessEnvironmentKind,\n  runtimesOf,\n} from '@finalai/agent-provider/harness-start';\nimport type {\n  HarnessProviderCloseArgsIface,\n  HarnessProviderContextIface,\n  HarnessProviderEndpointResultIface,\n  HarnessProviderOpenArgsIface,\n  HarnessProviderOpenResultIface,\n  HarnessProviderRefArgsIface,\n  HarnessProviderResumeArgsIface,\n} from '@finalai/agent-provider/harness-provider';\n\n// The general harness provider: it starts adapter(harness) in the harness's\n// environment from the two definitions' run entries and hands the session\n// service the ACP stream; for an environment at a URL it hands over the URL.\n// Built only on the public harness provider contract and bundled into one\n// self-contained module (./general.bundle.ts), like any third party's\n// provider. It imports values only from dependency-free modules, and writes\n// the contract's transports as the strings they are, to keep that small.\n//\n// The session service starts what a `sandbox` endpoint names over the\n// sandbox's process streams (startSandboxEndpoint) and keeps the program for\n// the session's life, so park, close and health have nothing of their own to\n// stop or watch.\n\n// What every ACP endpoint it hands over must implement and advertise in\n// `initialize`, beyond ACP v2.\nexport const REQUIRED_FINAL_EXTENSIONS: readonly FinalExtension[] = [\n  FinalExtension.Observe,\n  FinalExtension.AuthorMeta,\n  FinalExtension.ResumeReplay,\n  FinalExtension.AfterSeqReplay,\n];\n\nconst refused = (problems: string[]): HarnessProviderOpenResultIface => ({ unsuitable: problems });\n\nconst listOf = (items: readonly string[]): string =>\n  items.length === 0 ? 'nothing' : items.join(', ');\n\nconst urlEndpoint = async (args: {\n  ref: HarnessSessionRefIface;\n  url: string;\n  hop: string | null;\n  adapter: string | null;\n  ctx: HarnessProviderContextIface;\n}): Promise<HarnessProviderOpenResultIface> => {\n  if (args.adapter != null)\n    return refused([\n      `An ACP endpoint at a URL already speaks ACP and takes no adapter (${args.adapter})`,\n    ]);\n  let protocol: string;\n  try {\n    protocol = new URL(args.url).protocol;\n  } catch {\n    return refused([`${args.url} is not a URL`]);\n  }\n  const transport =\n    protocol === 'wss:' || protocol === 'ws:'\n      ? 'ws'\n      : protocol === 'https:' || protocol === 'http:'\n        ? 'http'\n        : null;\n  if (transport == null)\n    return refused([`${args.url}: an ACP endpoint answers over ws(s) or http(s)`]);\n  const headers: Record<string, string> = {};\n  if (args.hop != null) {\n    const token = await args.ctx.secrets.get(args.hop);\n    if (token == null || token.length === 0)\n      return refused([`The project has no secret ${args.hop} for ${args.url}`]);\n    headers['authorization'] = `Bearer ${token}`;\n  }\n  return {\n    ref: args.ref,\n    transport,\n    url: args.url,\n    headers,\n    extensions: [...REQUIRED_FINAL_EXTENSIONS],\n  };\n};\n\nconst sandboxEndpoint = (\n  args: HarnessProviderOpenArgsIface,\n  ref: HarnessSessionRefIface,\n  sandboxId: string,\n): HarnessProviderOpenResultIface => {\n  const harness = args.harness;\n  const adapter = args.adapter;\n  const name = harness.name;\n  if (harness.definition.provider != null)\n    return refused([`${name} is reached by its own harness provider`]);\n  const problems: string[] = [];\n  if (adapter == null && harness.definition.interface !== ACP_V2_INTERFACE)\n    problems.push(`${name} speaks ${harness.definition.interface}, not ACP v2, and has no adapter`);\n  if (adapter != null) {\n    if (!adapter.definition.adapts.includes(harness.definition.interface))\n      problems.push(\n        `ACP adapter ${adapter.name} adapts ${listOf(adapter.definition.adapts)}, not ${harness.definition.interface}`,\n      );\n    const missing = REQUIRED_FINAL_EXTENSIONS.filter(\n      (extension) => !adapter.definition.extensions.includes(extension),\n    );\n    if (missing.length > 0)\n      problems.push(\n        `ACP adapter ${adapter.name} does not implement Final's ACP extensions ${listOf(missing)}`,\n      );\n  }\n  const runtime = args.runtime;\n  const harnessRuntimes = runtimesOf(harness.definition.run);\n  const adapterRuntimes = adapter == null ? null : runtimesOf(adapter.definition.run);\n  if (runtime == null) problems.push(`Sandbox ${sandboxId} runs nothing ${name} has an entry for`);\n  else {\n    if (!harnessRuntimes.includes(runtime))\n      problems.push(`${name} has no ${runtime} entry (it runs as ${listOf(harnessRuntimes)})`);\n    if (adapter != null && adapterRuntimes != null && !adapterRuntimes.includes(runtime))\n      problems.push(\n        `ACP adapter ${adapter.name} has no ${runtime} entry (it runs as ${listOf(adapterRuntimes)})`,\n      );\n  }\n  if (problems.length > 0 || runtime == null) return refused(problems);\n\n  const started = harnessStartFor({\n    harness: harness.definition,\n    adapter: adapter?.definition ?? null,\n    runtime,\n    configuration: args.settings.configuration,\n  });\n  if (!started.ok) return refused(started.problems);\n  const endpoint: HarnessProviderEndpointResultIface = {\n    ref,\n    transport: 'sandbox',\n    sandboxId,\n    start: started.start,\n    extensions: [...REQUIRED_FINAL_EXTENSIONS],\n  };\n  return endpoint;\n};\n\nconst endpointFor = (\n  args: HarnessProviderOpenArgsIface,\n  ref: HarnessSessionRefIface,\n  ctx: HarnessProviderContextIface,\n): Promise<HarnessProviderOpenResultIface> => {\n  const environment: ComposedEnvironmentIface = args.environment;\n  if (environment.kind === HarnessEnvironmentKind.Url)\n    return urlEndpoint({\n      ref,\n      url: environment.url,\n      hop: environment.hop,\n      adapter: args.adapter?.name ?? null,\n      ctx,\n    });\n  return Promise.resolve(sandboxEndpoint(args, ref, environment.sandboxId));\n};\n\nexport const open = (\n  args: HarnessProviderOpenArgsIface,\n  ctx: HarnessProviderContextIface,\n): Promise<HarnessProviderOpenResultIface> =>\n  endpointFor(\n    args,\n    { harness: args.harness.name, harnessSessionRef: args.harnessSessionId, generation: 0 },\n    ctx,\n  );\n\n// The worker runtime finds a harness session's state again by its id; a\n// process starts afresh and the session service resumes it over ACP.\nexport const resume = (\n  args: HarnessProviderResumeArgsIface,\n  ctx: HarnessProviderContextIface,\n): Promise<HarnessProviderOpenResultIface> => endpointFor(args, args.ref, ctx);\n\nexport const park = async (\n  _args: HarnessProviderRefArgsIface,\n  _ctx: HarnessProviderContextIface,\n): Promise<void> => {};\n\nexport const close = async (\n  _args: HarnessProviderCloseArgsIface,\n  _ctx: HarnessProviderContextIface,\n): Promise<void> => {};\n\nexport const health = async (\n  _args: HarnessProviderRefArgsIface,\n  _ctx: HarnessProviderContextIface,\n): Promise<{ ok: boolean; detail?: string }> => ({\n  ok: true,\n  detail: 'The session service watches the program it started',\n});\n"],
+  "mappings": "AAEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA0BA,MAAM,4BAAuD;AAAA,EAClE,eAAe;AAAA,EACf,eAAe;AAAA,EACf,eAAe;AAAA,EACf,eAAe;AACjB;AAEA,MAAM,UAAU,CAAC,cAAwD,EAAE,YAAY,SAAS;AAEhG,MAAM,SAAS,CAAC,UACd,MAAM,WAAW,IAAI,YAAY,MAAM,KAAK,IAAI;AAElD,MAAM,cAAc,OAAO,SAMoB;AAC7C,MAAI,KAAK,WAAW;AAClB,WAAO,QAAQ;AAAA,MACb,qEAAqE,KAAK,OAAO;AAAA,IACnF,CAAC;AACH,MAAI;AACJ,MAAI;AACF,eAAW,IAAI,IAAI,KAAK,GAAG,EAAE;AAAA,EAC/B,QAAQ;AACN,WAAO,QAAQ,CAAC,GAAG,KAAK,GAAG,eAAe,CAAC;AAAA,EAC7C;AACA,QAAM,YACJ,aAAa,UAAU,aAAa,QAChC,OACA,aAAa,YAAY,aAAa,UACpC,SACA;AACR,MAAI,aAAa;AACf,WAAO,QAAQ,CAAC,GAAG,KAAK,GAAG,iDAAiD,CAAC;AAC/E,QAAM,UAAkC,CAAC;AACzC,MAAI,KAAK,OAAO,MAAM;AACpB,UAAM,QAAQ,MAAM,KAAK,IAAI,QAAQ,IAAI,KAAK,GAAG;AACjD,QAAI,SAAS,QAAQ,MAAM,WAAW;AACpC,aAAO,QAAQ,CAAC,6BAA6B,KAAK,GAAG,QAAQ,KAAK,GAAG,EAAE,CAAC;AAC1E,YAAQ,eAAe,IAAI,UAAU,KAAK;AAAA,EAC5C;AACA,SAAO;AAAA,IACL,KAAK,KAAK;AAAA,IACV;AAAA,IACA,KAAK,KAAK;AAAA,IACV;AAAA,IACA,YAAY,CAAC,GAAG,yBAAyB;AAAA,EAC3C;AACF;AAEA,MAAM,kBAAkB,CACtB,MACA,KACA,cACmC;AACnC,QAAM,UAAU,KAAK;AACrB,QAAM,UAAU,KAAK;AACrB,QAAM,OAAO,QAAQ;AACrB,MAAI,QAAQ,WAAW,YAAY;AACjC,WAAO,QAAQ,CAAC,GAAG,IAAI,yCAAyC,CAAC;AACnE,QAAM,WAAqB,CAAC;AAC5B,MAAI,WAAW,QAAQ,QAAQ,WAAW,cAAc;AACtD,aAAS,KAAK,GAAG,IAAI,WAAW,QAAQ,WAAW,SAAS,kCAAkC;AAChG,MAAI,WAAW,MAAM;AACnB,QAAI,CAAC,QAAQ,WAAW,OAAO,SAAS,QAAQ,WAAW,SAAS;AAClE,eAAS;AAAA,QACP,eAAe,QAAQ,IAAI,WAAW,OAAO,QAAQ,WAAW,MAAM,CAAC,SAAS,QAAQ,WAAW,SAAS;AAAA,MAC9G;AACF,UAAM,UAAU,0BAA0B;AAAA,MACxC,CAAC,cAAc,CAAC,QAAQ,WAAW,WAAW,SAAS,SAAS;AAAA,IAClE;AACA,QAAI,QAAQ,SAAS;AACnB,eAAS;AAAA,QACP,eAAe,QAAQ,IAAI,8CAA8C,OAAO,OAAO,CAAC;AAAA,MAC1F;AAAA,EACJ;AACA,QAAM,UAAU,KAAK;AACrB,QAAM,kBAAkB,WAAW,QAAQ,WAAW,GAAG;AACzD,QAAM,kBAAkB,WAAW,OAAO,OAAO,WAAW,QAAQ,WAAW,GAAG;AAClF,MAAI,WAAW,KAAM,UAAS,KAAK,WAAW,SAAS,iBAAiB,IAAI,mBAAmB;AAAA,OAC1F;AACH,QAAI,CAAC,gBAAgB,SAAS,OAAO;AACnC,eAAS,KAAK,GAAG,IAAI,WAAW,OAAO,sBAAsB,OAAO,eAAe,CAAC,GAAG;AACzF,QAAI,WAAW,QAAQ,mBAAmB,QAAQ,CAAC,gBAAgB,SAAS,OAAO;AACjF,eAAS;AAAA,QACP,eAAe,QAAQ,IAAI,WAAW,OAAO,sBAAsB,OAAO,eAAe,CAAC;AAAA,MAC5F;AAAA,EACJ;AACA,MAAI,SAAS,SAAS,KAAK,WAAW,KAAM,QAAO,QAAQ,QAAQ;AAEnE,QAAM,UAAU,gBAAgB;AAAA,IAC9B,SAAS,QAAQ;AAAA,IACjB,SAAS,SAAS,cAAc;AAAA,IAChC;AAAA,IACA,eAAe,KAAK,SAAS;AAAA,EAC/B,CAAC;AACD,MAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ,QAAQ,QAAQ;AAChD,QAAM,WAA+C;AAAA,IACnD;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,OAAO,QAAQ;AAAA,IACf,YAAY,CAAC,GAAG,yBAAyB;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,MAAM,cAAc,CAClB,MACA,KACA,QAC4C;AAC5C,QAAM,cAAwC,KAAK;AACnD,MAAI,YAAY,SAAS,uBAAuB;AAC9C,WAAO,YAAY;AAAA,MACjB;AAAA,MACA,KAAK,YAAY;AAAA,MACjB,KAAK,YAAY;AAAA,MACjB,SAAS,KAAK,SAAS,QAAQ;AAAA,MAC/B;AAAA,IACF,CAAC;AACH,SAAO,QAAQ,QAAQ,gBAAgB,MAAM,KAAK,YAAY,SAAS,CAAC;AAC1E;AAEO,MAAM,OAAO,CAClB,MACA,QAEA;AAAA,EACE;AAAA,EACA,EAAE,SAAS,KAAK,QAAQ,MAAM,mBAAmB,KAAK,kBAAkB,YAAY,EAAE;AAAA,EACtF;AACF;AAIK,MAAM,SAAS,CACpB,MACA,QAC4C,YAAY,MAAM,KAAK,KAAK,GAAG;AAEtE,MAAM,OAAO,OAClB,OACA,SACkB;AAAC;AAEd,MAAM,QAAQ,OACnB,OACA,SACkB;AAAC;AAEd,MAAM,SAAS,OACpB,OACA,UAC+C;AAAA,EAC/C,IAAI;AAAA,EACJ,QAAQ;AACV;",
+  "names": []
+}

package/dist/modules/provider/index.d.mts

@@ -0,0 +1,3 @@
+import { type DefinedHarnessProviderIface } from '@finalai/agent-definition/authoring';
+export { REQUIRED_FINAL_EXTENSIONS } from "./general.mjs";
+export declare const GENERAL_HARNESS_PROVIDER: DefinedHarnessProviderIface;

package/dist/modules/provider/index.mjs

@@ -0,0 +1,13 @@
+import {
+  defineHarnessProvider
+} from "@finalai/agent-definition/authoring";
+import { GENERAL_HARNESS_PROVIDER_SOURCE } from "./general.bundle.mjs";
+import { REQUIRED_FINAL_EXTENSIONS } from "./general.mjs";
+const GENERAL_HARNESS_PROVIDER = defineHarnessProvider({
+  source: GENERAL_HARNESS_PROVIDER_SOURCE
+});
+export {
+  GENERAL_HARNESS_PROVIDER,
+  REQUIRED_FINAL_EXTENSIONS
+};
+//# sourceMappingURL=index.mjs.map

package/dist/modules/provider/index.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/provider/index.ts"],
+  "sourcesContent": ["import {\n  defineHarnessProvider,\n  type DefinedHarnessProviderIface,\n} from '@finalai/agent-definition/authoring';\nimport { GENERAL_HARNESS_PROVIDER_SOURCE } from \"./general.bundle.mjs\";\n\nexport { REQUIRED_FINAL_EXTENSIONS } from \"./general.mjs\";\n\n// The general harness provider as one self-contained module, ready to run on\n// a serverless runtime like any other harness provider's code.\nexport const GENERAL_HARNESS_PROVIDER: DefinedHarnessProviderIface = defineHarnessProvider({\n  source: GENERAL_HARNESS_PROVIDER_SOURCE,\n});\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,OAEK;AACP,SAAS,uCAAuC;AAEhD,SAAS,iCAAiC;AAInC,MAAM,2BAAwD,sBAAsB;AAAA,EACzF,QAAQ;AACV,CAAC;",
+  "names": []
+}

package/dist/modules/sandboxes/access.d.mts

@@ -0,0 +1,34 @@
+export interface FinalPlatformAccessIface {
+    baseUrl: string;
+    token: string;
+}
+export type ComputersAccessIface = (args: {
+    organizationId: string;
+    projectId: string;
+    refresh: boolean;
+}) => Promise<FinalPlatformAccessIface | null>;
+export type DeviceAccessIface = (args: {
+    organizationId: string;
+    projectId: string | null;
+    actingUserId: string | null;
+    refresh: boolean;
+}) => Promise<FinalPlatformAccessIface | null>;
+export interface ComputersApiCredentialsIface {
+    computersAccess(args?: {
+        refresh?: boolean;
+    }): Promise<FinalPlatformAccessIface | null>;
+}
+export interface DeviceApiCredentialsIface {
+    deviceAccess(args?: {
+        actingUserId?: string | null;
+        refresh?: boolean;
+    }): Promise<FinalPlatformAccessIface | null>;
+}
+export declare const computersCredentialsFor: (access: ComputersAccessIface | undefined, scope: {
+    organizationId: string;
+    projectId: string;
+}) => ComputersApiCredentialsIface;
+export declare const deviceCredentialsFor: (access: DeviceAccessIface | undefined, scope: {
+    organizationId: string;
+    projectId: string | null;
+}) => DeviceApiCredentialsIface;

package/dist/modules/sandboxes/access.mjs

@@ -0,0 +1,15 @@
+const computersCredentialsFor = (access, scope) => ({
+  computersAccess: async (args) => access == null ? null : access({ ...scope, refresh: args?.refresh === true })
+});
+const deviceCredentialsFor = (access, scope) => ({
+  deviceAccess: async (args) => access == null ? null : access({
+    ...scope,
+    actingUserId: args?.actingUserId ?? null,
+    refresh: args?.refresh === true
+  })
+});
+export {
+  computersCredentialsFor,
+  deviceCredentialsFor
+};
+//# sourceMappingURL=access.mjs.map

package/dist/modules/sandboxes/access.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/sandboxes/access.ts"],
+  "sourcesContent": ["// Access to Final's Computers and Device APIs. It is configuration of the\n// `computer` and `device` providers (and of workspace Device egress), supplied\n// by whoever runs them, never part of the generic provider context.\n\nexport interface FinalPlatformAccessIface {\n  // The API origin; requests go to `<baseUrl>/v1/...`.\n  baseUrl: string;\n  token: string;\n}\n\n// Computers API access for one project's sandboxes. `refresh` asks for a new\n// token after the API rejected the last one. Null: none granted.\nexport type ComputersAccessIface = (args: {\n  organizationId: string;\n  projectId: string;\n  refresh: boolean;\n}) => Promise<FinalPlatformAccessIface | null>;\n\n// Device API access acting for `actingUserId` (null: service access for\n// workspace networking). Null: none granted.\nexport type DeviceAccessIface = (args: {\n  organizationId: string;\n  projectId: string | null;\n  actingUserId: string | null;\n  refresh: boolean;\n}) => Promise<FinalPlatformAccessIface | null>;\n\n// The per-call form the API clients ask before each request.\nexport interface ComputersApiCredentialsIface {\n  computersAccess(args?: { refresh?: boolean }): Promise<FinalPlatformAccessIface | null>;\n}\n\nexport interface DeviceApiCredentialsIface {\n  deviceAccess(args?: {\n    actingUserId?: string | null;\n    refresh?: boolean;\n  }): Promise<FinalPlatformAccessIface | null>;\n}\n\nexport const computersCredentialsFor = (\n  access: ComputersAccessIface | undefined,\n  scope: { organizationId: string; projectId: string },\n): ComputersApiCredentialsIface => ({\n  computersAccess: async (args) =>\n    access == null ? null : access({ ...scope, refresh: args?.refresh === true }),\n});\n\nexport const deviceCredentialsFor = (\n  access: DeviceAccessIface | undefined,\n  scope: { organizationId: string; projectId: string | null },\n): DeviceApiCredentialsIface => ({\n  deviceAccess: async (args) =>\n    access == null\n      ? null\n      : access({\n          ...scope,\n          actingUserId: args?.actingUserId ?? null,\n          refresh: args?.refresh === true,\n        }),\n});\n"],
+  "mappings": "AAuCO,MAAM,0BAA0B,CACrC,QACA,WACkC;AAAA,EAClC,iBAAiB,OAAO,SACtB,UAAU,OAAO,OAAO,OAAO,EAAE,GAAG,OAAO,SAAS,MAAM,YAAY,KAAK,CAAC;AAChF;AAEO,MAAM,uBAAuB,CAClC,QACA,WAC+B;AAAA,EAC/B,cAAc,OAAO,SACnB,UAAU,OACN,OACA,OAAO;AAAA,IACL,GAAG;AAAA,IACH,cAAc,MAAM,gBAAgB;AAAA,IACpC,SAAS,MAAM,YAAY;AAAA,EAC7B,CAAC;AACT;",
+  "names": []
+}

package/dist/modules/sandboxes/computer.d.mts

@@ -1,25 +1,17 @@
-import { SandboxAccess, type JsonValue } from '@finalai/agent-provider';
-import { type SandboxNetworkingExtensionIface, SandboxCapability, type NetworkSandboxSessionIface, type SandboxProviderIface } from '@finalai/agent-provider/sandbox';
+import { NetworkPolicy, type JsonValue } from '@finalai/agent-provider';
+import { SandboxCapability, type NetworkPolicyIface, type NetworkSandboxSessionIface, type SandboxNetworkingExtensionIface, type SandboxProviderIface, type SandboxSetupIface } from '@finalai/agent-provider/sandbox';
 import * as z from 'zod';
 import { type ComputersApiConfigIface } from "./computers-api.mjs";
-import { ComputerWorkspacePolicy } from "./environment.mjs";
-import { type GuideCommandIface } from "./workspace-setup.mjs";
-export declare const computerWorkspaceName: (options: {
-    bindingId: string;
-    conversationId: string | null;
-    target: string;
-    conversationWorkspace: boolean;
-}) => Promise<string>;
+import { type ComputerBuildIface } from "./environment.mjs";
 export type { ComputersApiConfigIface } from "./computers-api.mjs";
-export type { FinalPlatformAccessIface } from '@finalai/agent-provider/sandbox';
-export { COMPUTER_SANDBOX_SPECIFIER } from "./environment.mjs";
-export { computeComputerArtifactKey } from "./guide.mjs";
-export type { ComputerGuideVersionIface } from "./guide.mjs";
-export type { RepositoryCloneSourceIface } from "./workspace-setup.mjs";
+export type { FinalPlatformAccessIface } from "./access.mjs";
+export { COMPUTER_PROVIDER } from "./environment.mjs";
+export declare const WORKSPACE_ROOT = "/workspaces";
 export interface ComputerSandboxLogIface {
     (message: string, fields?: Record<string, string | number | boolean | null>): void;
 }
 export interface ComputerSandboxProviderConfigIface {
+    computersApiUrl: string;
     computersApi?: ComputersApiConfigIface;
     networking?: SandboxNetworkingExtensionIface;
     registryCredentialId?: string;
@@ -30,13 +22,10 @@ export interface ComputerSandboxProviderConfigIface {
         memoryMb?: number;
         diskGb?: number;
     };
-    idleTimeoutSeconds?: number;
     imageWaitMs?: number;
     imagePollMs?: number;
     buildWaitMs?: number;
     buildPollMs?: number;
-    shelveWaitMs?: number;
-    shelvePollMs?: number;
     runningWaitMs?: number;
     runningPollMs?: number;
     log?: ComputerSandboxLogIface;
@@ -64,47 +53,31 @@ declare const computerArtifactSchema: z.ZodObject<{
     }, z.core.$strip>], "kind">;
 }, z.core.$strip>;
 declare const computerStateSchema: z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    computerId: z.ZodString;
+    version: z.ZodLiteral<2>;
     computerName: z.ZodString;
-    workspace: z.ZodEnum<typeof ComputerWorkspacePolicy>;
-    access: z.ZodEnum<typeof SandboxAccess>;
-    guideVersionId: z.ZodNullable<z.ZodString>;
-    setupHash: z.ZodNullable<z.ZodString>;
-    setupPending: z.ZodDefault<z.ZodBoolean>;
-    workspaceId: z.ZodOptional<z.ZodString>;
-    networkPolicySaved: z.ZodOptional<z.ZodBoolean>;
+    computerId: z.ZodNullable<z.ZodString>;
+    network: z.ZodObject<{
+        mode: z.ZodEnum<typeof NetworkPolicy>;
+        allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    ports: z.ZodDefault<z.ZodArray<z.ZodNumber>>;
+    networkPolicySaved: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ComputerSandboxArtifact = z.infer<typeof computerArtifactSchema>;
 export type ComputerSandboxState = z.infer<typeof computerStateSchema>;
-export interface ComputerSandboxDescriptionIface {
-    provider: 'computer';
-    computerId: string;
-    computerName: string;
-    workspaceRoot: string;
-    transport: string;
-    guide: {
-        slug: string;
-        number: number;
-    } | null;
-    repositories: {
-        alias: string;
-        path: string;
-        repository: string;
-    }[];
-    services: {
-        name: string;
-        readyUrl: string | null;
-    }[];
-    commands: GuideCommandIface[];
-    capabilities: SandboxCapability[];
-}
 export interface ComputerSandboxSessionIface extends NetworkSandboxSessionIface {
-    describe(): ComputerSandboxDescriptionIface;
     readonly capabilities: readonly SandboxCapability[];
 }
-export type ComputerSandboxProviderIface = SandboxProviderIface<JsonValue, JsonValue, ComputerSandboxArtifact, ComputerSandboxState, ComputerSandboxSessionIface>;
+export type ComputerSandboxProviderIface = SandboxProviderIface<JsonValue, ComputerSandboxArtifact, ComputerSandboxState, ComputerSandboxSessionIface>;
 export interface ComputerSandboxErrorIface extends Error {
     code: 'artifact_unavailable' | 'computer_gone' | 'computer_not_running' | 'invalid_environment' | 'build_failed';
 }
+export declare const computerNetworkPolicyOf: (setup: SandboxSetupIface | null) => NetworkPolicyIface;
+export declare const computerNameFor: (sandboxId: string) => Promise<string>;
+export declare const computerNeedsBuild: (build: ComputerBuildIface | undefined) => boolean;
+export declare const computeComputerArtifactKey: (inputs: {
+    image: string;
+    build: ComputerBuildIface | undefined;
+    diskGb: number | null;
+}) => Promise<string>;
 export declare const createComputerSandboxProvider: (config: ComputerSandboxProviderConfigIface) => ComputerSandboxProviderIface;