@finalai/final-agent-provider 0.12.0 → 0.14.0

package/README.md

@@ -139,11 +139,5 @@ is enforced by the computer or Device itself.
   `stderrOffset` say where). A process whose output was read to the end after it exited
   may be retired, and then attaches to nothing.
 
-## Workspace Device egress
-
-`/sandboxes/egress` supplies provider-neutral Linux TCP/UDP/DNS routing through approved Final Devices. Hosts compose `createWorkspaceDeviceNetworking({ api, access, needed })` through the generic provider `networking` option. A sandbox's id is its workspace identity; hosts supply durable networking registration, the current actor, and the raw privileged sandbox session. Preserve the direct policy before boot fencing; restore it on Disable. Configure and Disable ask for consent by default.
-
-The [integration reference](WORKSPACE-EGRESS.md) specifies required hooks, boot/resume fallback, grant authority, teardown, MCP transports, failure behavior, prerequisites, and provider acceptance. Read it before enabling this capability. Final Computer and Daytona use their public APIs; custom providers can compose the same controller and manager.
-
 A passive attach serves a read-only viewer and never boots or changes the
 computer; use an ordinary attach for execution.

package/dist/modules/integrations.d.mts

@@ -1,5 +1,4 @@
 import { type CreateIntegrationRequestIface } from '@finalai/agent-protocol/agent-platform/integrations';
-export declare const FINAL_GATEWAY_URL = "final://mcp";
 export declare const FINAL_GATEWAY_SCOPES: Record<string, string[]>;
 export interface FinalGatewayInputIface {
     url: string;

package/dist/modules/integrations.mjs

@@ -2,7 +2,6 @@ import {
   createIntegrationRequestSchema,
   IntegrationAuthKind
 } from "@finalai/agent-protocol/agent-platform/integrations";
-const FINAL_GATEWAY_URL = "final://mcp";
 const FINAL_GATEWAY_SCOPES = {
   api: [
     "session:requirements",
@@ -23,7 +22,6 @@ const finalGateway = (input) => createIntegrationRequestSchema.parse({
 });
 export {
   FINAL_GATEWAY_SCOPES,
-  FINAL_GATEWAY_URL,
   finalGateway
 };
 //# sourceMappingURL=integrations.mjs.map

package/dist/modules/integrations.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/integrations.ts"],
-  "sourcesContent": ["import {\n  createIntegrationRequestSchema,\n  IntegrationAuthKind,\n  type CreateIntegrationRequestIface,\n} from '@finalai/agent-protocol/agent-platform/integrations';\n\n// Final's MCP gateway as an ordinary integration:\n// `project.integrations.create(finalGateway({ url }))` returns the id a caller\n// provides for an agent's slot. It authenticates with the platform's identity\n// assertion for the calling session, which any server can verify; nothing\n// about it is first-party only, and the platform resolves no special URL.\n\n// Deprecated: the platform resolves no placeholder; pass the gateway's URL.\nexport const FINAL_GATEWAY_URL = 'final://mcp';\n\n// What the gateway's assertion lets it do as the calling session on the\n// platform API (`api`): read the session's requirements and ask for an\n// optional one, read and run agents, and read and write conversations. `reach`\n// confines it to the session's own conversation and its linked children.\nexport const FINAL_GATEWAY_SCOPES: Record<string, string[]> = {\n  api: [\n    'session:requirements',\n    'agents:read',\n    'agents:execute',\n    'conversations:read',\n    'conversations:write',\n  ],\n  reach: ['session'],\n};\n\nexport interface FinalGatewayInputIface {\n  // The gateway's MCP endpoint (https).\n  url: string;\n  // The integration's name in the project; `final` by default.\n  name?: string;\n  scopes?: Record<string, string[]>;\n}\n\nexport const finalGateway = (input: FinalGatewayInputIface): CreateIntegrationRequestIface =>\n  createIntegrationRequestSchema.parse({\n    name: input.name ?? 'final',\n    mcp: { url: input.url },\n    auth: {\n      kind: IntegrationAuthKind.PlatformIdentity,\n      scopes: input.scopes ?? FINAL_GATEWAY_SCOPES,\n    },\n  });\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AASA,MAAM,oBAAoB;AAM1B,MAAM,uBAAiD;AAAA,EAC5D,KAAK;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,OAAO,CAAC,SAAS;AACnB;AAUO,MAAM,eAAe,CAAC,UAC3B,+BAA+B,MAAM;AAAA,EACnC,MAAM,MAAM,QAAQ;AAAA,EACpB,KAAK,EAAE,KAAK,MAAM,IAAI;AAAA,EACtB,MAAM;AAAA,IACJ,MAAM,oBAAoB;AAAA,IAC1B,QAAQ,MAAM,UAAU;AAAA,EAC1B;AACF,CAAC;",
+  "sourcesContent": ["import {\n  createIntegrationRequestSchema,\n  IntegrationAuthKind,\n  type CreateIntegrationRequestIface,\n} from '@finalai/agent-protocol/agent-platform/integrations';\n\n// Final's MCP gateway as an ordinary integration:\n// `project.integrations.create(finalGateway({ url }))` returns the id a caller\n// provides for an agent's slot. It authenticates with the platform's identity\n// assertion for the calling session, which any server can verify; nothing\n// about it is first-party only, and the platform resolves no special URL.\n\n// What the gateway's assertion lets it do as the calling session on the\n// platform API (`api`): read the session's requirements and ask for an\n// optional one, read and run agents, and read and write conversations. `reach`\n// confines it to the session's own conversation and its linked children.\nexport const FINAL_GATEWAY_SCOPES: Record<string, string[]> = {\n  api: [\n    'session:requirements',\n    'agents:read',\n    'agents:execute',\n    'conversations:read',\n    'conversations:write',\n  ],\n  reach: ['session'],\n};\n\nexport interface FinalGatewayInputIface {\n  // The gateway's MCP endpoint (https).\n  url: string;\n  // The integration's name in the project; `final` by default.\n  name?: string;\n  scopes?: Record<string, string[]>;\n}\n\nexport const finalGateway = (input: FinalGatewayInputIface): CreateIntegrationRequestIface =>\n  createIntegrationRequestSchema.parse({\n    name: input.name ?? 'final',\n    mcp: { url: input.url },\n    auth: {\n      kind: IntegrationAuthKind.PlatformIdentity,\n      scopes: input.scopes ?? FINAL_GATEWAY_SCOPES,\n    },\n  });\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAYA,MAAM,uBAAiD;AAAA,EAC5D,KAAK;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,OAAO,CAAC,SAAS;AACnB;AAUO,MAAM,eAAe,CAAC,UAC3B,+BAA+B,MAAM;AAAA,EACnC,MAAM,MAAM,QAAQ;AAAA,EACpB,KAAK,EAAE,KAAK,MAAM,IAAI;AAAA,EACtB,MAAM;AAAA,IACJ,MAAM,oBAAoB;AAAA,IAC1B,QAAQ,MAAM,UAAU;AAAA,EAC1B;AACF,CAAC;",
   "names": []
 }

package/dist/modules/sandboxes/computer.d.mts

@@ -1,10 +1,10 @@
 import { NetworkPolicy, type JsonValue } from '@finalai/agent-provider';
-import { SandboxCapability, type NetworkPolicyIface, type NetworkSandboxSessionIface, type SandboxNetworkingExtensionIface, type SandboxProviderIface, type SandboxSetupIface } from '@finalai/agent-provider/sandbox';
+import { SandboxCapability, type NetworkPolicyIface, type NetworkSandboxSessionIface, type SandboxProviderIface, type SandboxSetupIface } from '@finalai/agent-provider/sandbox';
 import * as z from 'zod';
 import { type ComputersApiConfigIface } from "./computers-api.mjs";
 import { type ComputerBuildIface } from "./environment.mjs";
 export type { ComputersApiConfigIface } from "./computers-api.mjs";
-export type { FinalPlatformAccessIface } from "./access.mjs";
+export type { FinalPlatformAccessIface } from "./environment.mjs";
 export { COMPUTER_PROVIDER } from "./environment.mjs";
 export declare const WORKSPACE_ROOT = "/workspaces";
 export interface ComputerSandboxLogIface {
@@ -13,7 +13,6 @@ export interface ComputerSandboxLogIface {
 export interface ComputerSandboxProviderConfigIface {
     computersApiUrl: string;
     computersApi?: ComputersApiConfigIface;
-    networking?: SandboxNetworkingExtensionIface;
     registryCredentialId?: string;
     defaultImage?: string;
     regionSlug?: string;
@@ -61,7 +60,6 @@ declare const computerStateSchema: z.ZodObject<{
         allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>;
     ports: z.ZodDefault<z.ZodArray<z.ZodNumber>>;
-    networkPolicySaved: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ComputerSandboxArtifact = z.infer<typeof computerArtifactSchema>;
 export type ComputerSandboxState = z.infer<typeof computerStateSchema>;