@finalai/final-agent-provider 0.5.0 → 0.6.1

package/HOSTING.md

@@ -7,13 +7,13 @@ resolve against dev and production configuration without source edits.
 ## Selecting a deployment
 
 ```sh
-export FINAL_API_HOST=https://agent-session.primary-dev.final.ai/api
-export FINAL_API_KEY=<dev-organization-key>
+export FINAL_API_HOST=https://<dev-agents-api-host>/api
+export FINAL_API_KEY=<dev-api-key>
 pnpm exec final-agents build ./agent
 pnpm exec final-agents publish ./agent --agent my-agent
 ```
 
-Choose production by changing the host and organization key. `--host` overrides
+Choose production by changing the host and API key. `--host` overrides
 `FINAL_API_HOST`; without either, the existing production default remains. Build
 compiles locally and optionally checks installed-harness compatibility. Publish
 compiles again and sends source/release requests to the selected deployment.

package/README.md

@@ -8,6 +8,10 @@ Optional Node ACP adapters are exposed under `/runtime/*`. Sandbox adapters use
 the public Computers and Device APIs; the Computers transport is shared with
 `@finalai/computers`. Runtime configuration and credentials are injected.
 
+The `computer` and `device` sandboxes authenticate with the context's
+`credentials.computersAccess()` and `credentials.deviceAccess()` (`{ baseUrl, token }`);
+without them they fail with `credential_missing`.
+
 Authoring helpers produce manifest bindings. Select the matching `/runtime/*`
 adapter when connecting your own CLI or ACP endpoint.
 

package/WORKSPACE-EGRESS.md

@@ -12,12 +12,12 @@ a public replacement-Device protocol. Compose it with a provider through the sam
 ```ts
 const networking = createWorkspaceDeviceNetworking({ api: deviceApi, needed });
 const computers = createComputerSandboxProvider({ computersApi, networking });
-const daytona = createDaytonaSandboxProvider({ credential: daytonaCredential, networking });
+const daytona = createDaytonaSandboxProvider({ networking });
 ```
 
 The factories are exported from `/sandboxes/egress`, `/sandboxes/computer`, and
 `@finalai/daytona-agent-provider/sandboxes/daytona`, respectively. Keep the trusted
-Device credential callback in host composition. A custom provider accepts
+Device access in the context's credentials. A custom provider accepts
 the same generic extension: call `enabled`, validate its workspace identity, call
 `prepare` before provider fencing, and use `attachSandboxNetworking` after
 obtaining its raw handle. Supply the saved policy, restore/fence callbacks,
@@ -25,19 +25,20 @@ namespace existence check and deferred setup. Physical teardown calls `suspend`
 even if another cleanup step fails. Providers needing earlier namespace setup can
 use `controller` and `withSandboxNetworking` directly, as Final Computer does.
 
-Device credential callbacks receive the organization and `actingUserId`. Device
+The context's `credentials.deviceAccess({ actingUserId })` returns the Device API
+origin and a token. Device
 operations use the current actor; background lease reconciliation may use the stored
 lease owner instead of a present turn author. Hosts must authorize both forms of work.
 Admission, policy persistence, and cleanup also make trusted service calls with
-`actingUserId: null`. Enabling workspace Device networking requires a credential
+`actingUserId: null`. Enabling workspace Device networking requires access
 accepted by those service endpoints for that case, separate from user-bound grants.
 Returning `null` refuses the call before HTTP; a user-token-only configuration cannot
 start or clean up networked workspaces. Its host must add service authentication
 before enabling this extension. The SDK never reuses a user's cached grant for a
-service call, another user, organization, or API origin.
+service call or another user: it asks the context's credentials on every call.
 
 The extension owns Device authorization, enrollment, helper installation, leases
-and failover. Providers need no Device or Headscale implementation. Its generic
+and failover. Providers need no Device networking implementation. Its generic
 controller also authorizes external editor access and reports its expiry limit;
 providers must bound editor grants by that deadline. The Device executable and
 hosted control services remain separate first-party implementations.

package/dist/modules/channels/projection.d.mts

@@ -3,13 +3,19 @@ import { TurnPolicy, type JsonValue, type ProjectionContextIface } from '@finala
 import * as z from 'zod';
 export declare const DEFAULT_PROJECTION_UPDATE_INTERVAL_MS = 300;
 export declare const projectionStateSchema: z.ZodObject<{
-    messageId: z.ZodNullable<z.ZodString>;
+    messageId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     messageSeq: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
-    fromSeq: z.ZodNullable<z.ZodNumber>;
-    lastSeq: z.ZodNullable<z.ZodNumber>;
-    lastFlushAt: z.ZodNumber;
-    dirty: z.ZodBoolean;
+    fromSeq: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    lastSeq: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    lastFlushAt: z.ZodDefault<z.ZodNumber>;
+    dirty: z.ZodDefault<z.ZodBoolean>;
     segments: z.ZodArray<z.ZodObject<{
+        messageId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        messageSeq: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        fromSeq: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        lastSeq: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        lastFlushAt: z.ZodDefault<z.ZodNumber>;
+        dirty: z.ZodDefault<z.ZodBoolean>;
         acpMessageId: z.ZodString;
         blocks: z.ZodArray<z.ZodType<import("@finalai/agent-provider").JsonObject, unknown, z.core.$ZodTypeInternals<import("@finalai/agent-provider").JsonObject, unknown>>>;
     }, z.core.$strip>>;
@@ -22,8 +28,8 @@ export interface ProjectorConfigIface {
 }
 export declare const emptyProjectionState: () => ProjectionStateIface;
 export declare const projectionStateOf: (state: JsonValue | null) => ProjectionStateIface;
-export declare const visibleContent: (state: ProjectionStateIface) => ContentBlock[];
-export declare const accumulateUpdate: (state: ProjectionStateIface, update: SessionUpdate) => boolean;
+export declare const visibleContent: (state: Pick<ProjectionStateIface, "segments">) => ContentBlock[];
+export declare const accumulateUpdate: (state: ProjectionStateIface, update: SessionUpdate) => ProjectionStateIface["segments"][number] | null;
 export interface ProjectorIface {
     project(update: SessionUpdate, ctx: ProjectionContextIface): Promise<void>;
 }

package/dist/modules/channels/projection.mjs

@@ -8,16 +8,21 @@ import {
 import * as z from "zod";
 import { contentBlockOf, jsonOfContentBlock } from "./content.mjs";
 const DEFAULT_PROJECTION_UPDATE_INTERVAL_MS = 300;
-const segmentSchema = z.object({ acpMessageId: z.string(), blocks: z.array(jsonObjectSchema) });
-const projectionStateSchema = z.object({
-  messageId: z.string().nullable(),
+const projectedMessageSchema = z.object({
+  messageId: z.string().nullable().default(null),
   // The reply's conversation seq, so the finished reply is read back by
   // position however many messages arrived meanwhile.
   messageSeq: z.number().nullable().default(null),
-  fromSeq: z.number().nullable(),
-  lastSeq: z.number().nullable(),
-  lastFlushAt: z.number(),
-  dirty: z.boolean(),
+  fromSeq: z.number().nullable().default(null),
+  lastSeq: z.number().nullable().default(null),
+  lastFlushAt: z.number().default(0),
+  dirty: z.boolean().default(false)
+});
+const segmentSchema = projectedMessageSchema.extend({
+  acpMessageId: z.string(),
+  blocks: z.array(jsonObjectSchema)
+});
+const projectionStateSchema = projectedMessageSchema.extend({
   segments: z.array(segmentSchema)
 });
 const agentChunkSchema = z.object({
@@ -79,7 +84,7 @@ const segmentFor = (state, acpMessageId) => {
   if (existing != null) {
     return existing;
   }
-  const segment = { acpMessageId, blocks: [] };
+  const segment = segmentSchema.parse({ acpMessageId, blocks: [] });
   state.segments.push(segment);
   return segment;
 };
@@ -88,35 +93,39 @@ const accumulateUpdate = (state, update) => {
   const chunk = agentChunkSchema.safeParse(json);
   if (chunk.success) {
     const block = contentBlockOf(chunk.data.content);
-    if (block == null) return false;
-    segmentFor(state, chunk.data.messageId).blocks.push(jsonOfContentBlock(block));
-    return true;
+    if (block == null) return null;
+    const segment = segmentFor(state, chunk.data.messageId);
+    segment.blocks.push(jsonOfContentBlock(block));
+    return segment;
   }
   const message = agentMessageSchema.safeParse(json);
   if (message.success) {
-    if (message.data.content === void 0) return false;
+    if (message.data.content === void 0) return null;
     const blocks = (message.data.content ?? []).flatMap((block) => {
       const parsed = contentBlockOf(block);
       return parsed == null ? [] : [jsonOfContentBlock(parsed)];
     });
-    segmentFor(state, message.data.messageId).blocks = blocks;
-    return true;
+    const segment = segmentFor(state, message.data.messageId);
+    segment.blocks = blocks;
+    return segment;
   }
-  return false;
+  return null;
 };
 const createProjector = (config = {}) => {
   const now = config.now ?? Date.now;
   const interval = config.updateIntervalMs ?? DEFAULT_PROJECTION_UPDATE_INTERVAL_MS;
   const fold = async (update, ctx) => {
     const state = projectionStateOf(ctx.state.get());
-    if (!accumulateUpdate(state, update)) return;
-    state.lastSeq = ctx.seq;
-    const content = visibleContent(state);
-    if (content.length === 0) {
+    const segment = accumulateUpdate(state, update);
+    if (segment == null) return;
+    const target = state.messageId == null ? segment : state;
+    target.lastSeq = ctx.seq;
+    const content = visibleContent({ segments: target === state ? state.segments : [segment] });
+    if (content.length === 0 && target.messageId == null) {
       ctx.state.set(state);
       return;
     }
-    if (state.messageId == null) {
+    if (target.messageId == null) {
       const message = await ctx.platform.conversations.postMessage({
         conversationId: ctx.conversation.conversationId,
         authorParticipantId: ctx.agentParticipant.id,
@@ -124,32 +133,41 @@ const createProjector = (config = {}) => {
         content,
         source: { turnId: ctx.turn.id, fromSeq: ctx.seq, toSeq: ctx.seq }
       });
-      state.messageId = message.messageId;
-      state.messageSeq = message.seq;
-      state.fromSeq = ctx.seq;
-      state.lastFlushAt = now();
-      state.dirty = false;
-    } else if (now() - state.lastFlushAt >= interval) {
+      target.messageId = message.messageId;
+      target.messageSeq = message.seq;
+      target.fromSeq = ctx.seq;
+      target.lastFlushAt = now();
+      target.dirty = false;
+    } else if (now() - target.lastFlushAt >= interval) {
       await ctx.platform.conversations.updateMessage({
-        messageId: state.messageId,
+        messageId: target.messageId,
         content,
         final: false
       });
-      state.lastFlushAt = now();
-      state.dirty = false;
+      target.lastFlushAt = now();
+      target.dirty = false;
     } else {
-      state.dirty = true;
+      target.dirty = true;
     }
     ctx.state.set(state);
   };
   const finish = async (ctx) => {
     const state = projectionStateOf(ctx.state.get());
+    if (state.messageId != null) {
+      await finishMessage(ctx, state, visibleContent(state));
+      return;
+    }
+    for (const segment of state.segments) {
+      await finishMessage(ctx, segment, visibleContent({ segments: [segment] }));
+    }
+  };
+  const finishMessage = async (ctx, state, content) => {
     if (state.messageId == null) {
       return;
     }
     await ctx.platform.conversations.updateMessage({
       messageId: state.messageId,
-      content: visibleContent(state),
+      content,
       final: true
     });
     const reply = state.messageSeq == null ? null : (await ctx.platform.conversations.recentMessages({

package/dist/modules/channels/projection.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/channels/projection.ts"],
-  "sourcesContent": ["import type { ContentBlock, SessionUpdate } from '@agentclientprotocol/sdk/experimental/v2';\nimport { textOfBlock } from '@finalai/acp-session';\nimport {\n  jsonObjectSchema,\n  MessageKind,\n  turnEndOf,\n  TurnPolicy,\n  type JsonValue,\n  type ProjectionContextIface,\n} from '@finalai/agent-provider';\nimport * as z from 'zod';\nimport { contentBlockOf, jsonOfContentBlock } from \"./content.mjs\";\n\n// agent_message_chunk accumulates into one visible message per turn\n// segment. The message is created on the first visible chunk (streaming),\n// updated at most every `updateIntervalMs`, and finalized at the idle\n// state_update that ends the turn. The fold lives in the turn state the\n// platform keeps (ctx.state). An empty turn projects nothing.\n\nexport const DEFAULT_PROJECTION_UPDATE_INTERVAL_MS = 300;\n\nconst segmentSchema = z.object({ acpMessageId: z.string(), blocks: z.array(jsonObjectSchema) });\n\nexport const projectionStateSchema = z.object({\n  messageId: z.string().nullable(),\n  // The reply's conversation seq, so the finished reply is read back by\n  // position however many messages arrived meanwhile.\n  messageSeq: z.number().nullable().default(null),\n  fromSeq: z.number().nullable(),\n  lastSeq: z.number().nullable(),\n  lastFlushAt: z.number(),\n  dirty: z.boolean(),\n  segments: z.array(segmentSchema),\n});\n\nexport type ProjectionStateIface = z.infer<typeof projectionStateSchema>;\n\nexport interface ProjectorConfigIface {\n  updateIntervalMs?: number;\n  now?: () => number;\n  // The channel's turnPolicy, for routing finished replies (default steer).\n  turnPolicy?: TurnPolicy;\n}\n\nconst agentChunkSchema = z.object({\n  sessionUpdate: z.literal('agent_message_chunk'),\n  messageId: z.string(),\n  content: jsonObjectSchema,\n});\n\nconst agentMessageSchema = z.object({\n  sessionUpdate: z.literal('agent_message'),\n  messageId: z.string(),\n  content: z.array(jsonObjectSchema).nullish(),\n});\n\nconst updateJson = (update: SessionUpdate): JsonValue => {\n  const parsed = jsonObjectSchema.safeParse(JSON.parse(JSON.stringify(update)));\n  return parsed.success ? parsed.data : null;\n};\n\nexport const emptyProjectionState = (): ProjectionStateIface => ({\n  messageId: null,\n  messageSeq: null,\n  fromSeq: null,\n  lastSeq: null,\n  lastFlushAt: 0,\n  dirty: false,\n  segments: [],\n});\n\nexport const projectionStateOf = (state: JsonValue | null): ProjectionStateIface => {\n  const parsed = projectionStateSchema.safeParse(state);\n  return parsed.success ? parsed.data : emptyProjectionState();\n};\n\n// Plain text (no `_meta`) of a block, the only kind consecutive chunks merge into.\nconst plainText = (block: ContentBlock | undefined): string | null =>\n  block == null || block._meta != null ? null : textOfBlock(block);\n\nconst appendBlock = (blocks: ContentBlock[], block: ContentBlock, separator: string): void => {\n  const lastText = plainText(blocks.at(-1));\n  const nextText = plainText(block);\n  if (lastText != null && nextText != null) {\n    blocks[blocks.length - 1] = { type: 'text', text: `${lastText}${separator}${nextText}` };\n  } else {\n    blocks.push(block);\n  }\n};\n\n// The visible content of the turn: segments in order of first appearance,\n// separated by a blank line between text runs.\nexport const visibleContent = (state: ProjectionStateIface): ContentBlock[] => {\n  const content: ContentBlock[] = [];\n  for (const segment of state.segments) {\n    const blocks: ContentBlock[] = [];\n    for (const block of segment.blocks) {\n      const parsed = contentBlockOf(block);\n      if (parsed != null) appendBlock(blocks, parsed, '');\n    }\n    for (const block of blocks) appendBlock(content, block, '\\n\\n');\n  }\n  return content.flatMap((block): ContentBlock[] => {\n    const text = textOfBlock(block);\n    if (text == null) return [block];\n    const trimmed = text.trim();\n    return trimmed.length === 0 ? [] : [{ ...block, type: 'text', text: trimmed }];\n  });\n};\n\nconst segmentFor = (\n  state: ProjectionStateIface,\n  acpMessageId: string,\n): ProjectionStateIface['segments'][number] => {\n  const existing = state.segments.find((segment) => segment.acpMessageId === acpMessageId);\n  if (existing != null) {\n    return existing;\n  }\n  const segment = { acpMessageId, blocks: [] };\n  state.segments.push(segment);\n  return segment;\n};\n\n// Folds one ACP update into the state. Returns false for updates that are not\n// visible output.\nexport const accumulateUpdate = (state: ProjectionStateIface, update: SessionUpdate): boolean => {\n  const json = updateJson(update);\n  const chunk = agentChunkSchema.safeParse(json);\n  if (chunk.success) {\n    const block = contentBlockOf(chunk.data.content);\n    if (block == null) return false;\n    segmentFor(state, chunk.data.messageId).blocks.push(jsonOfContentBlock(block));\n    return true;\n  }\n  const message = agentMessageSchema.safeParse(json);\n  if (message.success) {\n    // ACP v2 upsert: a concrete array replaces the message's content; omitted leaves it.\n    if (message.data.content === undefined) return false;\n    const blocks = (message.data.content ?? []).flatMap((block) => {\n      const parsed = contentBlockOf(block);\n      return parsed == null ? [] : [jsonOfContentBlock(parsed)];\n    });\n    segmentFor(state, message.data.messageId).blocks = blocks;\n    return true;\n  }\n  return false;\n};\n\ninterface ConversationProjectionContextIface extends ProjectionContextIface {\n  conversation: NonNullable<ProjectionContextIface['conversation']>;\n  agentParticipant: NonNullable<ProjectionContextIface['agentParticipant']>;\n}\n\nexport interface ProjectorIface {\n  // ChannelDefinitionIface['project'] for the messaging channels: folds visible\n  // output into the turn's message and, at the turn-ending idle state_update,\n  // finalizes and routes it.\n  project(update: SessionUpdate, ctx: ProjectionContextIface): Promise<void>;\n}\n\nexport const createProjector = (config: ProjectorConfigIface = {}): ProjectorIface => {\n  const now = config.now ?? Date.now;\n  const interval = config.updateIntervalMs ?? DEFAULT_PROJECTION_UPDATE_INTERVAL_MS;\n\n  const fold = async (\n    update: SessionUpdate,\n    ctx: ConversationProjectionContextIface,\n  ): Promise<void> => {\n    const state = projectionStateOf(ctx.state.get());\n    if (!accumulateUpdate(state, update)) return;\n    state.lastSeq = ctx.seq;\n    const content = visibleContent(state);\n    if (content.length === 0) {\n      ctx.state.set(state);\n      return;\n    }\n    if (state.messageId == null) {\n      const message = await ctx.platform.conversations.postMessage({\n        conversationId: ctx.conversation.conversationId,\n        authorParticipantId: ctx.agentParticipant.id,\n        kind: MessageKind.Message,\n        content,\n        source: { turnId: ctx.turn.id, fromSeq: ctx.seq, toSeq: ctx.seq },\n      });\n      state.messageId = message.messageId;\n      state.messageSeq = message.seq;\n      state.fromSeq = ctx.seq;\n      state.lastFlushAt = now();\n      state.dirty = false;\n    } else if (now() - state.lastFlushAt >= interval) {\n      await ctx.platform.conversations.updateMessage({\n        messageId: state.messageId,\n        content,\n        final: false,\n      });\n      state.lastFlushAt = now();\n      state.dirty = false;\n    } else {\n      state.dirty = true;\n    }\n    ctx.state.set(state);\n  };\n\n  const finish = async (ctx: ConversationProjectionContextIface): Promise<void> => {\n    const state = projectionStateOf(ctx.state.get());\n    if (state.messageId == null) {\n      return;\n    }\n    await ctx.platform.conversations.updateMessage({\n      messageId: state.messageId,\n      content: visibleContent(state),\n      final: true,\n    });\n    // The finished reply is routed like any message: other agents may observe\n    // it or, when mentioned within the hop limit, be prompted.\n    const reply =\n      state.messageSeq == null\n        ? null\n        : (\n            await ctx.platform.conversations.recentMessages({\n              conversationId: ctx.conversation.conversationId,\n              beforeSeq: state.messageSeq + 1,\n              limit: 1,\n            })\n          ).find((message) => message.messageId === state.messageId);\n    if (reply == null) {\n      ctx.platform.log('finished reply not found for routing', {\n        messageId: state.messageId,\n        seq: state.messageSeq,\n      });\n    }\n    if (reply != null) {\n      if (ctx.platform.conversations.dispatchMessage == null)\n        throw new Error('channel dispatch is unavailable');\n      await ctx.platform.conversations.dispatchMessage({\n        conversationId: reply.conversationId,\n        messageId: reply.messageId,\n      });\n    }\n  };\n\n  const project: ProjectorIface['project'] = async (update, ctx) => {\n    const { conversation, agentParticipant } = ctx;\n    if (conversation == null || agentParticipant == null)\n      throw new Error('Final rendering requires a Final conversation');\n    const context = { ...ctx, conversation, agentParticipant };\n    return turnEndOf(update) == null ? fold(update, context) : finish(context);\n  };\n\n  return { project };\n};\n"],
-  "mappings": "AACA,SAAS,mBAAmB;AAC5B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,YAAY,OAAO;AACnB,SAAS,gBAAgB,0BAA0B;AAQ5C,MAAM,wCAAwC;AAErD,MAAM,gBAAgB,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAG,QAAQ,EAAE,MAAM,gBAAgB,EAAE,CAAC;AAEvF,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAG/B,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,aAAa,EAAE,OAAO;AAAA,EACtB,OAAO,EAAE,QAAQ;AAAA,EACjB,UAAU,EAAE,MAAM,aAAa;AACjC,CAAC;AAWD,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,eAAe,EAAE,QAAQ,qBAAqB;AAAA,EAC9C,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS;AACX,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,eAAe,EAAE,QAAQ,eAAe;AAAA,EACxC,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS,EAAE,MAAM,gBAAgB,EAAE,QAAQ;AAC7C,CAAC;AAED,MAAM,aAAa,CAAC,WAAqC;AACvD,QAAM,SAAS,iBAAiB,UAAU,KAAK,MAAM,KAAK,UAAU,MAAM,CAAC,CAAC;AAC5E,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEO,MAAM,uBAAuB,OAA6B;AAAA,EAC/D,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,SAAS;AAAA,EACT,aAAa;AAAA,EACb,OAAO;AAAA,EACP,UAAU,CAAC;AACb;AAEO,MAAM,oBAAoB,CAAC,UAAkD;AAClF,QAAM,SAAS,sBAAsB,UAAU,KAAK;AACpD,SAAO,OAAO,UAAU,OAAO,OAAO,qBAAqB;AAC7D;AAGA,MAAM,YAAY,CAAC,UACjB,SAAS,QAAQ,MAAM,SAAS,OAAO,OAAO,YAAY,KAAK;AAEjE,MAAM,cAAc,CAAC,QAAwB,OAAqB,cAA4B;AAC5F,QAAM,WAAW,UAAU,OAAO,GAAG,EAAE,CAAC;AACxC,QAAM,WAAW,UAAU,KAAK;AAChC,MAAI,YAAY,QAAQ,YAAY,MAAM;AACxC,WAAO,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,QAAQ,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG;AAAA,EACzF,OAAO;AACL,WAAO,KAAK,KAAK;AAAA,EACnB;AACF;AAIO,MAAM,iBAAiB,CAAC,UAAgD;AAC7E,QAAM,UAA0B,CAAC;AACjC,aAAW,WAAW,MAAM,UAAU;AACpC,UAAM,SAAyB,CAAC;AAChC,eAAW,SAAS,QAAQ,QAAQ;AAClC,YAAM,SAAS,eAAe,KAAK;AACnC,UAAI,UAAU,KAAM,aAAY,QAAQ,QAAQ,EAAE;AAAA,IACpD;AACA,eAAW,SAAS,OAAQ,aAAY,SAAS,OAAO,MAAM;AAAA,EAChE;AACA,SAAO,QAAQ,QAAQ,CAAC,UAA0B;AAChD,UAAM,OAAO,YAAY,KAAK;AAC9B,QAAI,QAAQ,KAAM,QAAO,CAAC,KAAK;AAC/B,UAAM,UAAU,KAAK,KAAK;AAC1B,WAAO,QAAQ,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAAA,EAC/E,CAAC;AACH;AAEA,MAAM,aAAa,CACjB,OACA,iBAC6C;AAC7C,QAAM,WAAW,MAAM,SAAS,KAAK,CAACA,aAAYA,SAAQ,iBAAiB,YAAY;AACvF,MAAI,YAAY,MAAM;AACpB,WAAO;AAAA,EACT;AACA,QAAM,UAAU,EAAE,cAAc,QAAQ,CAAC,EAAE;AAC3C,QAAM,SAAS,KAAK,OAAO;AAC3B,SAAO;AACT;AAIO,MAAM,mBAAmB,CAAC,OAA6B,WAAmC;AAC/F,QAAM,OAAO,WAAW,MAAM;AAC9B,QAAM,QAAQ,iBAAiB,UAAU,IAAI;AAC7C,MAAI,MAAM,SAAS;AACjB,UAAM,QAAQ,eAAe,MAAM,KAAK,OAAO;AAC/C,QAAI,SAAS,KAAM,QAAO;AAC1B,eAAW,OAAO,MAAM,KAAK,SAAS,EAAE,OAAO,KAAK,mBAAmB,KAAK,CAAC;AAC7E,WAAO;AAAA,EACT;AACA,QAAM,UAAU,mBAAmB,UAAU,IAAI;AACjD,MAAI,QAAQ,SAAS;AAEnB,QAAI,QAAQ,KAAK,YAAY,OAAW,QAAO;AAC/C,UAAM,UAAU,QAAQ,KAAK,WAAW,CAAC,GAAG,QAAQ,CAAC,UAAU;AAC7D,YAAM,SAAS,eAAe,KAAK;AACnC,aAAO,UAAU,OAAO,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC;AAAA,IAC1D,CAAC;AACD,eAAW,OAAO,QAAQ,KAAK,SAAS,EAAE,SAAS;AACnD,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAcO,MAAM,kBAAkB,CAAC,SAA+B,CAAC,MAAsB;AACpF,QAAM,MAAM,OAAO,OAAO,KAAK;AAC/B,QAAM,WAAW,OAAO,oBAAoB;AAE5C,QAAM,OAAO,OACX,QACA,QACkB;AAClB,UAAM,QAAQ,kBAAkB,IAAI,MAAM,IAAI,CAAC;AAC/C,QAAI,CAAC,iBAAiB,OAAO,MAAM,EAAG;AACtC,UAAM,UAAU,IAAI;AACpB,UAAM,UAAU,eAAe,KAAK;AACpC,QAAI,QAAQ,WAAW,GAAG;AACxB,UAAI,MAAM,IAAI,KAAK;AACnB;AAAA,IACF;AACA,QAAI,MAAM,aAAa,MAAM;AAC3B,YAAM,UAAU,MAAM,IAAI,SAAS,cAAc,YAAY;AAAA,QAC3D,gBAAgB,IAAI,aAAa;AAAA,QACjC,qBAAqB,IAAI,iBAAiB;AAAA,QAC1C,MAAM,YAAY;AAAA,QAClB;AAAA,QACA,QAAQ,EAAE,QAAQ,IAAI,KAAK,IAAI,SAAS,IAAI,KAAK,OAAO,IAAI,IAAI;AAAA,MAClE,CAAC;AACD,YAAM,YAAY,QAAQ;AAC1B,YAAM,aAAa,QAAQ;AAC3B,YAAM,UAAU,IAAI;AACpB,YAAM,cAAc,IAAI;AACxB,YAAM,QAAQ;AAAA,IAChB,WAAW,IAAI,IAAI,MAAM,eAAe,UAAU;AAChD,YAAM,IAAI,SAAS,cAAc,cAAc;AAAA,QAC7C,WAAW,MAAM;AAAA,QACjB;AAAA,QACA,OAAO;AAAA,MACT,CAAC;AACD,YAAM,cAAc,IAAI;AACxB,YAAM,QAAQ;AAAA,IAChB,OAAO;AACL,YAAM,QAAQ;AAAA,IAChB;AACA,QAAI,MAAM,IAAI,KAAK;AAAA,EACrB;AAEA,QAAM,SAAS,OAAO,QAA2D;AAC/E,UAAM,QAAQ,kBAAkB,IAAI,MAAM,IAAI,CAAC;AAC/C,QAAI,MAAM,aAAa,MAAM;AAC3B;AAAA,IACF;AACA,UAAM,IAAI,SAAS,cAAc,cAAc;AAAA,MAC7C,WAAW,MAAM;AAAA,MACjB,SAAS,eAAe,KAAK;AAAA,MAC7B,OAAO;AAAA,IACT,CAAC;AAGD,UAAM,QACJ,MAAM,cAAc,OAChB,QAEE,MAAM,IAAI,SAAS,cAAc,eAAe;AAAA,MAC9C,gBAAgB,IAAI,aAAa;AAAA,MACjC,WAAW,MAAM,aAAa;AAAA,MAC9B,OAAO;AAAA,IACT,CAAC,GACD,KAAK,CAAC,YAAY,QAAQ,cAAc,MAAM,SAAS;AAC/D,QAAI,SAAS,MAAM;AACjB,UAAI,SAAS,IAAI,wCAAwC;AAAA,QACvD,WAAW,MAAM;AAAA,QACjB,KAAK,MAAM;AAAA,MACb,CAAC;AAAA,IACH;AACA,QAAI,SAAS,MAAM;AACjB,UAAI,IAAI,SAAS,cAAc,mBAAmB;AAChD,cAAM,IAAI,MAAM,iCAAiC;AACnD,YAAM,IAAI,SAAS,cAAc,gBAAgB;AAAA,QAC/C,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,MACnB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAqC,OAAO,QAAQ,QAAQ;AAChE,UAAM,EAAE,cAAc,iBAAiB,IAAI;AAC3C,QAAI,gBAAgB,QAAQ,oBAAoB;AAC9C,YAAM,IAAI,MAAM,+CAA+C;AACjE,UAAM,UAAU,EAAE,GAAG,KAAK,cAAc,iBAAiB;AACzD,WAAO,UAAU,MAAM,KAAK,OAAO,KAAK,QAAQ,OAAO,IAAI,OAAO,OAAO;AAAA,EAC3E;AAEA,SAAO,EAAE,QAAQ;AACnB;",
+  "sourcesContent": ["import type { ContentBlock, SessionUpdate } from '@agentclientprotocol/sdk/experimental/v2';\nimport { textOfBlock } from '@finalai/acp-session';\nimport {\n  jsonObjectSchema,\n  MessageKind,\n  turnEndOf,\n  TurnPolicy,\n  type JsonValue,\n  type ProjectionContextIface,\n} from '@finalai/agent-provider';\nimport * as z from 'zod';\nimport { contentBlockOf, jsonOfContentBlock } from \"./content.mjs\";\n\n// Each ACP message ID owns a visible conversation message. The message is\n// created on its first visible chunk (streaming),\n// updated at most every `updateIntervalMs`, and finalized at the idle\n// state_update that ends the turn. The fold lives in the turn state the\n// platform keeps (ctx.state). An empty turn projects nothing.\n\nexport const DEFAULT_PROJECTION_UPDATE_INTERVAL_MS = 300;\n\nconst projectedMessageSchema = z.object({\n  messageId: z.string().nullable().default(null),\n  // The reply's conversation seq, so the finished reply is read back by\n  // position however many messages arrived meanwhile.\n  messageSeq: z.number().nullable().default(null),\n  fromSeq: z.number().nullable().default(null),\n  lastSeq: z.number().nullable().default(null),\n  lastFlushAt: z.number().default(0),\n  dirty: z.boolean().default(false),\n});\n\nconst segmentSchema = projectedMessageSchema.extend({\n  acpMessageId: z.string(),\n  blocks: z.array(jsonObjectSchema),\n});\n\n// Root message fields are retained for turns created by the old projector.\n// Those turns finish in their existing combined row; new turns use segment rows.\nexport const projectionStateSchema = projectedMessageSchema.extend({\n  segments: z.array(segmentSchema),\n});\n\nexport type ProjectionStateIface = z.infer<typeof projectionStateSchema>;\n\nexport interface ProjectorConfigIface {\n  updateIntervalMs?: number;\n  now?: () => number;\n  // The channel's turnPolicy, for routing finished replies (default steer).\n  turnPolicy?: TurnPolicy;\n}\n\nconst agentChunkSchema = z.object({\n  sessionUpdate: z.literal('agent_message_chunk'),\n  messageId: z.string(),\n  content: jsonObjectSchema,\n});\n\nconst agentMessageSchema = z.object({\n  sessionUpdate: z.literal('agent_message'),\n  messageId: z.string(),\n  content: z.array(jsonObjectSchema).nullish(),\n});\n\nconst updateJson = (update: SessionUpdate): JsonValue => {\n  const parsed = jsonObjectSchema.safeParse(JSON.parse(JSON.stringify(update)));\n  return parsed.success ? parsed.data : null;\n};\n\nexport const emptyProjectionState = (): ProjectionStateIface => ({\n  messageId: null,\n  messageSeq: null,\n  fromSeq: null,\n  lastSeq: null,\n  lastFlushAt: 0,\n  dirty: false,\n  segments: [],\n});\n\nexport const projectionStateOf = (state: JsonValue | null): ProjectionStateIface => {\n  const parsed = projectionStateSchema.safeParse(state);\n  return parsed.success ? parsed.data : emptyProjectionState();\n};\n\n// Plain text (no `_meta`) of a block, the only kind consecutive chunks merge into.\nconst plainText = (block: ContentBlock | undefined): string | null =>\n  block == null || block._meta != null ? null : textOfBlock(block);\n\nconst appendBlock = (blocks: ContentBlock[], block: ContentBlock, separator: string): void => {\n  const lastText = plainText(blocks.at(-1));\n  const nextText = plainText(block);\n  if (lastText != null && nextText != null) {\n    blocks[blocks.length - 1] = { type: 'text', text: `${lastText}${separator}${nextText}` };\n  } else {\n    blocks.push(block);\n  }\n};\n\n// The visible content of the turn: segments in order of first appearance,\n// separated by a blank line between text runs.\nexport const visibleContent = (state: Pick<ProjectionStateIface, 'segments'>): ContentBlock[] => {\n  const content: ContentBlock[] = [];\n  for (const segment of state.segments) {\n    const blocks: ContentBlock[] = [];\n    for (const block of segment.blocks) {\n      const parsed = contentBlockOf(block);\n      if (parsed != null) appendBlock(blocks, parsed, '');\n    }\n    for (const block of blocks) appendBlock(content, block, '\\n\\n');\n  }\n  return content.flatMap((block): ContentBlock[] => {\n    const text = textOfBlock(block);\n    if (text == null) return [block];\n    const trimmed = text.trim();\n    return trimmed.length === 0 ? [] : [{ ...block, type: 'text', text: trimmed }];\n  });\n};\n\nconst segmentFor = (\n  state: ProjectionStateIface,\n  acpMessageId: string,\n): ProjectionStateIface['segments'][number] => {\n  const existing = state.segments.find((segment) => segment.acpMessageId === acpMessageId);\n  if (existing != null) {\n    return existing;\n  }\n  const segment = segmentSchema.parse({ acpMessageId, blocks: [] });\n  state.segments.push(segment);\n  return segment;\n};\n\n// Folds one ACP update into the state and returns the affected segment, or null\n// for updates that are not visible output.\nexport const accumulateUpdate = (\n  state: ProjectionStateIface,\n  update: SessionUpdate,\n): ProjectionStateIface['segments'][number] | null => {\n  const json = updateJson(update);\n  const chunk = agentChunkSchema.safeParse(json);\n  if (chunk.success) {\n    const block = contentBlockOf(chunk.data.content);\n    if (block == null) return null;\n    const segment = segmentFor(state, chunk.data.messageId);\n    segment.blocks.push(jsonOfContentBlock(block));\n    return segment;\n  }\n  const message = agentMessageSchema.safeParse(json);\n  if (message.success) {\n    // ACP v2 upsert: a concrete array replaces the message's content; omitted leaves it.\n    if (message.data.content === undefined) return null;\n    const blocks = (message.data.content ?? []).flatMap((block) => {\n      const parsed = contentBlockOf(block);\n      return parsed == null ? [] : [jsonOfContentBlock(parsed)];\n    });\n    const segment = segmentFor(state, message.data.messageId);\n    segment.blocks = blocks;\n    return segment;\n  }\n  return null;\n};\n\ninterface ConversationProjectionContextIface extends ProjectionContextIface {\n  conversation: NonNullable<ProjectionContextIface['conversation']>;\n  agentParticipant: NonNullable<ProjectionContextIface['agentParticipant']>;\n}\n\nexport interface ProjectorIface {\n  // ChannelDefinitionIface['project'] for the messaging channels: folds visible\n  // output into separate messages and, at the turn-ending idle state_update,\n  // finalizes and routes them in order of first appearance.\n  project(update: SessionUpdate, ctx: ProjectionContextIface): Promise<void>;\n}\n\nexport const createProjector = (config: ProjectorConfigIface = {}): ProjectorIface => {\n  const now = config.now ?? Date.now;\n  const interval = config.updateIntervalMs ?? DEFAULT_PROJECTION_UPDATE_INTERVAL_MS;\n\n  const fold = async (\n    update: SessionUpdate,\n    ctx: ConversationProjectionContextIface,\n  ): Promise<void> => {\n    const state = projectionStateOf(ctx.state.get());\n    const segment = accumulateUpdate(state, update);\n    if (segment == null) return;\n    const target = state.messageId == null ? segment : state;\n    target.lastSeq = ctx.seq;\n    const content = visibleContent({ segments: target === state ? state.segments : [segment] });\n    if (content.length === 0 && target.messageId == null) {\n      ctx.state.set(state);\n      return;\n    }\n    if (target.messageId == null) {\n      const message = await ctx.platform.conversations.postMessage({\n        conversationId: ctx.conversation.conversationId,\n        authorParticipantId: ctx.agentParticipant.id,\n        kind: MessageKind.Message,\n        content,\n        source: { turnId: ctx.turn.id, fromSeq: ctx.seq, toSeq: ctx.seq },\n      });\n      target.messageId = message.messageId;\n      target.messageSeq = message.seq;\n      target.fromSeq = ctx.seq;\n      target.lastFlushAt = now();\n      target.dirty = false;\n    } else if (now() - target.lastFlushAt >= interval) {\n      await ctx.platform.conversations.updateMessage({\n        messageId: target.messageId,\n        content,\n        final: false,\n      });\n      target.lastFlushAt = now();\n      target.dirty = false;\n    } else {\n      target.dirty = true;\n    }\n    ctx.state.set(state);\n  };\n\n  const finish = async (ctx: ConversationProjectionContextIface): Promise<void> => {\n    const state = projectionStateOf(ctx.state.get());\n    if (state.messageId != null) {\n      await finishMessage(ctx, state, visibleContent(state));\n      return;\n    }\n    for (const segment of state.segments) {\n      await finishMessage(ctx, segment, visibleContent({ segments: [segment] }));\n    }\n  };\n\n  const finishMessage = async (\n    ctx: ConversationProjectionContextIface,\n    state: z.infer<typeof projectedMessageSchema>,\n    content: ContentBlock[],\n  ): Promise<void> => {\n    if (state.messageId == null) {\n      return;\n    }\n    await ctx.platform.conversations.updateMessage({\n      messageId: state.messageId,\n      content,\n      final: true,\n    });\n    // The finished reply is routed like any message: other agents may observe\n    // it or, when mentioned within the hop limit, be prompted.\n    const reply =\n      state.messageSeq == null\n        ? null\n        : (\n            await ctx.platform.conversations.recentMessages({\n              conversationId: ctx.conversation.conversationId,\n              beforeSeq: state.messageSeq + 1,\n              limit: 1,\n            })\n          ).find((message) => message.messageId === state.messageId);\n    if (reply == null) {\n      ctx.platform.log('finished reply not found for routing', {\n        messageId: state.messageId,\n        seq: state.messageSeq,\n      });\n    }\n    if (reply != null) {\n      if (ctx.platform.conversations.dispatchMessage == null)\n        throw new Error('channel dispatch is unavailable');\n      await ctx.platform.conversations.dispatchMessage({\n        conversationId: reply.conversationId,\n        messageId: reply.messageId,\n      });\n    }\n  };\n\n  const project: ProjectorIface['project'] = async (update, ctx) => {\n    const { conversation, agentParticipant } = ctx;\n    if (conversation == null || agentParticipant == null)\n      throw new Error('Final rendering requires a Final conversation');\n    const context = { ...ctx, conversation, agentParticipant };\n    return turnEndOf(update) == null ? fold(update, context) : finish(context);\n  };\n\n  return { project };\n};\n"],
+  "mappings": "AACA,SAAS,mBAAmB;AAC5B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,YAAY,OAAO;AACnB,SAAS,gBAAgB,0BAA0B;AAQ5C,MAAM,wCAAwC;AAErD,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA;AAAA;AAAA,EAG7C,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC;AAAA,EACjC,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAClC,CAAC;AAED,MAAM,gBAAgB,uBAAuB,OAAO;AAAA,EAClD,cAAc,EAAE,OAAO;AAAA,EACvB,QAAQ,EAAE,MAAM,gBAAgB;AAClC,CAAC;AAIM,MAAM,wBAAwB,uBAAuB,OAAO;AAAA,EACjE,UAAU,EAAE,MAAM,aAAa;AACjC,CAAC;AAWD,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,eAAe,EAAE,QAAQ,qBAAqB;AAAA,EAC9C,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS;AACX,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,eAAe,EAAE,QAAQ,eAAe;AAAA,EACxC,WAAW,EAAE,OAAO;AAAA,EACpB,SAAS,EAAE,MAAM,gBAAgB,EAAE,QAAQ;AAC7C,CAAC;AAED,MAAM,aAAa,CAAC,WAAqC;AACvD,QAAM,SAAS,iBAAiB,UAAU,KAAK,MAAM,KAAK,UAAU,MAAM,CAAC,CAAC;AAC5E,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEO,MAAM,uBAAuB,OAA6B;AAAA,EAC/D,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,SAAS;AAAA,EACT,aAAa;AAAA,EACb,OAAO;AAAA,EACP,UAAU,CAAC;AACb;AAEO,MAAM,oBAAoB,CAAC,UAAkD;AAClF,QAAM,SAAS,sBAAsB,UAAU,KAAK;AACpD,SAAO,OAAO,UAAU,OAAO,OAAO,qBAAqB;AAC7D;AAGA,MAAM,YAAY,CAAC,UACjB,SAAS,QAAQ,MAAM,SAAS,OAAO,OAAO,YAAY,KAAK;AAEjE,MAAM,cAAc,CAAC,QAAwB,OAAqB,cAA4B;AAC5F,QAAM,WAAW,UAAU,OAAO,GAAG,EAAE,CAAC;AACxC,QAAM,WAAW,UAAU,KAAK;AAChC,MAAI,YAAY,QAAQ,YAAY,MAAM;AACxC,WAAO,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,QAAQ,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG;AAAA,EACzF,OAAO;AACL,WAAO,KAAK,KAAK;AAAA,EACnB;AACF;AAIO,MAAM,iBAAiB,CAAC,UAAkE;AAC/F,QAAM,UAA0B,CAAC;AACjC,aAAW,WAAW,MAAM,UAAU;AACpC,UAAM,SAAyB,CAAC;AAChC,eAAW,SAAS,QAAQ,QAAQ;AAClC,YAAM,SAAS,eAAe,KAAK;AACnC,UAAI,UAAU,KAAM,aAAY,QAAQ,QAAQ,EAAE;AAAA,IACpD;AACA,eAAW,SAAS,OAAQ,aAAY,SAAS,OAAO,MAAM;AAAA,EAChE;AACA,SAAO,QAAQ,QAAQ,CAAC,UAA0B;AAChD,UAAM,OAAO,YAAY,KAAK;AAC9B,QAAI,QAAQ,KAAM,QAAO,CAAC,KAAK;AAC/B,UAAM,UAAU,KAAK,KAAK;AAC1B,WAAO,QAAQ,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAAA,EAC/E,CAAC;AACH;AAEA,MAAM,aAAa,CACjB,OACA,iBAC6C;AAC7C,QAAM,WAAW,MAAM,SAAS,KAAK,CAACA,aAAYA,SAAQ,iBAAiB,YAAY;AACvF,MAAI,YAAY,MAAM;AACpB,WAAO;AAAA,EACT;AACA,QAAM,UAAU,cAAc,MAAM,EAAE,cAAc,QAAQ,CAAC,EAAE,CAAC;AAChE,QAAM,SAAS,KAAK,OAAO;AAC3B,SAAO;AACT;AAIO,MAAM,mBAAmB,CAC9B,OACA,WACoD;AACpD,QAAM,OAAO,WAAW,MAAM;AAC9B,QAAM,QAAQ,iBAAiB,UAAU,IAAI;AAC7C,MAAI,MAAM,SAAS;AACjB,UAAM,QAAQ,eAAe,MAAM,KAAK,OAAO;AAC/C,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,UAAU,WAAW,OAAO,MAAM,KAAK,SAAS;AACtD,YAAQ,OAAO,KAAK,mBAAmB,KAAK,CAAC;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,UAAU,mBAAmB,UAAU,IAAI;AACjD,MAAI,QAAQ,SAAS;AAEnB,QAAI,QAAQ,KAAK,YAAY,OAAW,QAAO;AAC/C,UAAM,UAAU,QAAQ,KAAK,WAAW,CAAC,GAAG,QAAQ,CAAC,UAAU;AAC7D,YAAM,SAAS,eAAe,KAAK;AACnC,aAAO,UAAU,OAAO,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC;AAAA,IAC1D,CAAC;AACD,UAAM,UAAU,WAAW,OAAO,QAAQ,KAAK,SAAS;AACxD,YAAQ,SAAS;AACjB,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAcO,MAAM,kBAAkB,CAAC,SAA+B,CAAC,MAAsB;AACpF,QAAM,MAAM,OAAO,OAAO,KAAK;AAC/B,QAAM,WAAW,OAAO,oBAAoB;AAE5C,QAAM,OAAO,OACX,QACA,QACkB;AAClB,UAAM,QAAQ,kBAAkB,IAAI,MAAM,IAAI,CAAC;AAC/C,UAAM,UAAU,iBAAiB,OAAO,MAAM;AAC9C,QAAI,WAAW,KAAM;AACrB,UAAM,SAAS,MAAM,aAAa,OAAO,UAAU;AACnD,WAAO,UAAU,IAAI;AACrB,UAAM,UAAU,eAAe,EAAE,UAAU,WAAW,QAAQ,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;AAC1F,QAAI,QAAQ,WAAW,KAAK,OAAO,aAAa,MAAM;AACpD,UAAI,MAAM,IAAI,KAAK;AACnB;AAAA,IACF;AACA,QAAI,OAAO,aAAa,MAAM;AAC5B,YAAM,UAAU,MAAM,IAAI,SAAS,cAAc,YAAY;AAAA,QAC3D,gBAAgB,IAAI,aAAa;AAAA,QACjC,qBAAqB,IAAI,iBAAiB;AAAA,QAC1C,MAAM,YAAY;AAAA,QAClB;AAAA,QACA,QAAQ,EAAE,QAAQ,IAAI,KAAK,IAAI,SAAS,IAAI,KAAK,OAAO,IAAI,IAAI;AAAA,MAClE,CAAC;AACD,aAAO,YAAY,QAAQ;AAC3B,aAAO,aAAa,QAAQ;AAC5B,aAAO,UAAU,IAAI;AACrB,aAAO,cAAc,IAAI;AACzB,aAAO,QAAQ;AAAA,IACjB,WAAW,IAAI,IAAI,OAAO,eAAe,UAAU;AACjD,YAAM,IAAI,SAAS,cAAc,cAAc;AAAA,QAC7C,WAAW,OAAO;AAAA,QAClB;AAAA,QACA,OAAO;AAAA,MACT,CAAC;AACD,aAAO,cAAc,IAAI;AACzB,aAAO,QAAQ;AAAA,IACjB,OAAO;AACL,aAAO,QAAQ;AAAA,IACjB;AACA,QAAI,MAAM,IAAI,KAAK;AAAA,EACrB;AAEA,QAAM,SAAS,OAAO,QAA2D;AAC/E,UAAM,QAAQ,kBAAkB,IAAI,MAAM,IAAI,CAAC;AAC/C,QAAI,MAAM,aAAa,MAAM;AAC3B,YAAM,cAAc,KAAK,OAAO,eAAe,KAAK,CAAC;AACrD;AAAA,IACF;AACA,eAAW,WAAW,MAAM,UAAU;AACpC,YAAM,cAAc,KAAK,SAAS,eAAe,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;AAAA,IAC3E;AAAA,EACF;AAEA,QAAM,gBAAgB,OACpB,KACA,OACA,YACkB;AAClB,QAAI,MAAM,aAAa,MAAM;AAC3B;AAAA,IACF;AACA,UAAM,IAAI,SAAS,cAAc,cAAc;AAAA,MAC7C,WAAW,MAAM;AAAA,MACjB;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAGD,UAAM,QACJ,MAAM,cAAc,OAChB,QAEE,MAAM,IAAI,SAAS,cAAc,eAAe;AAAA,MAC9C,gBAAgB,IAAI,aAAa;AAAA,MACjC,WAAW,MAAM,aAAa;AAAA,MAC9B,OAAO;AAAA,IACT,CAAC,GACD,KAAK,CAAC,YAAY,QAAQ,cAAc,MAAM,SAAS;AAC/D,QAAI,SAAS,MAAM;AACjB,UAAI,SAAS,IAAI,wCAAwC;AAAA,QACvD,WAAW,MAAM;AAAA,QACjB,KAAK,MAAM;AAAA,MACb,CAAC;AAAA,IACH;AACA,QAAI,SAAS,MAAM;AACjB,UAAI,IAAI,SAAS,cAAc,mBAAmB;AAChD,cAAM,IAAI,MAAM,iCAAiC;AACnD,YAAM,IAAI,SAAS,cAAc,gBAAgB;AAAA,QAC/C,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,MACnB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAqC,OAAO,QAAQ,QAAQ;AAChE,UAAM,EAAE,cAAc,iBAAiB,IAAI;AAC3C,QAAI,gBAAgB,QAAQ,oBAAoB;AAC9C,YAAM,IAAI,MAAM,+CAA+C;AACjE,UAAM,UAAU,EAAE,GAAG,KAAK,cAAc,iBAAiB;AACzD,WAAO,UAAU,MAAM,KAAK,OAAO,KAAK,QAAQ,OAAO,IAAI,OAAO,OAAO;AAAA,EAC3E;AAEA,SAAO,EAAE,QAAQ;AACnB;",
   "names": ["segment"]
 }

package/dist/modules/sandboxes/computer.d.mts

@@ -10,8 +10,9 @@ export declare const computerWorkspaceName: (options: {
     target: string;
     conversationWorkspace: boolean;
 }) => Promise<string>;
-export type { ComputersApiConfigIface, ComputersApiCredentialIface } from "./computers-api.mjs";
-export { COMPUTER_SANDBOX_SPECIFIER, COMPUTERS_API_KEY_SECRET, COMPUTERS_API_TEAM_SECRET, } from "./environment.mjs";
+export type { ComputersApiConfigIface } from "./computers-api.mjs";
+export type { FinalPlatformAccessIface } from '@finalai/agent-provider/sandbox';
+export { COMPUTER_SANDBOX_SPECIFIER } from "./environment.mjs";
 export { computeComputerArtifactKey } from "./guide.mjs";
 export type { ComputerGuideVersionIface } from "./guide.mjs";
 export type { RepositoryCloneSourceIface } from "./workspace-setup.mjs";
@@ -19,7 +20,7 @@ export interface ComputerSandboxLogIface {
     (message: string, fields?: Record<string, string | number | boolean | null>): void;
 }
 export interface ComputerSandboxProviderConfigIface {
-    computersApi: ComputersApiConfigIface;
+    computersApi?: ComputersApiConfigIface;
     networking?: SandboxNetworkingExtensionIface;
     registryCredentialId?: string;
     defaultImage?: string;

package/dist/modules/sandboxes/computer.mjs

@@ -46,7 +46,6 @@ import { computerEditor } from "./computer-editor.mjs";
 import { readComputerSnapshot } from "./computer-snapshots.mjs";
 import {
   createComputersApiClient,
-  createComputersApiCredentials,
   isComputersApiError,
   isComputersApiStatus
 } from "./computers-api.mjs";
@@ -75,11 +74,7 @@ import {
   WORKSPACE_ROOT
 } from "./workspace-setup.mjs";
 const computerWorkspaceName = async (options) => options.conversationWorkspace && options.conversationId != null ? `ac-${(await sha256Hex(`${options.conversationId}:${options.target}`)).slice(0, 24)}` : `ab-${compactId(options.bindingId)}`;
-import {
-  COMPUTER_SANDBOX_SPECIFIER as COMPUTER_SANDBOX_SPECIFIER2,
-  COMPUTERS_API_KEY_SECRET,
-  COMPUTERS_API_TEAM_SECRET
-} from "./environment.mjs";
+import { COMPUTER_SANDBOX_SPECIFIER as COMPUTER_SANDBOX_SPECIFIER2 } from "./environment.mjs";
 import { computeComputerArtifactKey as computeComputerArtifactKey2 } from "./guide.mjs";
 const computerArtifactSchema = sandboxSeedArtifactSchema.extend({
   version: z.literal(1),
@@ -180,9 +175,8 @@ const createComputerSandboxProvider = (config) => {
   const now = config.now ?? (() => Date.now());
   const sleep = config.sleep ?? defaultSleep;
   const defaultImage = config.defaultImage ?? DEFAULT_COMPUTER_IMAGE;
-  const credentials = createComputersApiCredentials(config.computersApi, now);
   const runningWaitMs = config.runningWaitMs ?? 5 * 6e4;
-  const clientFor = (organizationId) => createComputersApiClient({ config: config.computersApi, credentials, organizationId });
+  const clientFor = (credentials) => createComputersApiClient({ config: config.computersApi ?? {}, credentials });
   const registerImage = (client, reference) => client.registerImage(
     config.registryCredentialId == null ? { reference } : { reference, registryCredentialId: config.registryCredentialId }
   );
@@ -627,6 +621,7 @@ ${commandHelp}`}`,
         platformEgressHosts: args.ctx.platformEgressHosts,
         platformNetworkPolicy: args.ctx.platformNetworkPolicy,
         organizationId: args.ctx.session.organizationId,
+        credentials: args.ctx.credentials,
         actingUser: args.ctx.actingUser,
         bindings: args.ctx.bindings
       },
@@ -664,6 +659,7 @@ ${commandHelp}`}`,
         platformEgressHosts: args.ctx.platformEgressHosts,
         platformNetworkPolicy: args.ctx.platformNetworkPolicy,
         organizationId: args.ctx.session.organizationId,
+        credentials: args.ctx.credentials,
         actingUser: args.ctx.actingUser,
         bindings: args.ctx.bindings
       },
@@ -678,6 +674,7 @@ ${commandHelp}`}`,
       ctx: {
         platformEgressHosts: ctx.platformEgressHosts,
         organizationId: ctx.session.organizationId,
+        credentials: ctx.credentials,
         actingUser: ctx.actingUser,
         bindings: ctx.bindings
       },
@@ -715,7 +712,7 @@ ${commandHelp}`}`,
     const results = await Promise.allSettled([
       (async () => {
         if (managed && args.fence) {
-          const client = clientFor(args.ctx.session.organizationId);
+          const client = clientFor(args.ctx.credentials);
           let mayFence = args.policySaved || savedPolicyWorkspaces.has(args.ctx.session.organizationId + ":" + workspaceId);
           try {
             if (config.networking != null) {
@@ -762,6 +759,7 @@ ${commandHelp}`}`,
           await config.networking.suspend({
             ctx: {
               organizationId: args.ctx.session.organizationId,
+              credentials: args.ctx.credentials,
               actingUser: args.ctx.actingUser,
               bindings: args.ctx.bindings
             },
@@ -832,7 +830,7 @@ ${commandHelp}`}`,
     }
   };
   const build = async (ctx, spec, key) => {
-    const client = clientFor(ctx.organizationId);
+    const client = clientFor(ctx.credentials);
     const diskGb = config.machine?.diskGb ?? null;
     const imageVersionId = await readyImageVersion(client, {
       image: spec.image,
@@ -965,7 +963,7 @@ ${step.run}`,
       });
     };
     const awaitRunning = (ctx, rawState, options2) => awaitComputerRunning(
-      clientFor(ctx.session.organizationId),
+      clientFor(ctx.credentials),
       computerStateSchema.pick({ computerId: true }).parse(rawState).computerId,
       options2.timeoutMs
     );
@@ -974,10 +972,7 @@ ${step.run}`,
         const state = computerStateSchema.parse(rawState);
         if (request.operation === ProcessInspectionOperation.Stop && state.access === SandboxAccess.Read)
           throw new Error("stopping processes requires execute access");
-        const result = await clientFor(ctx.organizationId).inspectProcesses(
-          state.computerId,
-          request
-        );
+        const result = await clientFor(ctx.credentials).inspectProcesses(state.computerId, request);
         return request.operation === ProcessInspectionOperation.Available && "available" in result ? { ...result, canStop: state.access !== SandboxAccess.Read } : result;
       },
       editor: async (ctx, rawState, request) => {
@@ -986,7 +981,7 @@ ${step.run}`,
           if (request.operation === "available") return { available: false };
           throw new Error("editor requires write access");
         }
-        const client = clientFor(ctx.organizationId);
+        const client = clientFor(ctx.credentials);
         const open = (expiresAtMs) => computerEditor({
           client,
           computerId: state.computerId,
@@ -1050,7 +1045,7 @@ ${step.run}`,
       readSnapshot: async (ctx, rawState, request) => {
         const state = computerStateSchema.parse(rawState);
         return readComputerSnapshot({
-          client: clientFor(ctx.organizationId),
+          client: clientFor(ctx.credentials),
           computerId: state.computerId,
           request
         });
@@ -1073,13 +1068,10 @@ ${step.run}`,
           if (prepared?.key === baseKey && prepared.providerRef === formatProviderRef(packageRef(COMPUTER_SANDBOX_SPECIFIER))) {
             const cached2 = computerArtifactSchema.safeParse(prepared.artifact);
             if (cached2.success && cached2.data.key === baseKey && cached2.data.base.kind === "captured") {
-              const base = await clientFor(ctx.organizationId).getBase(cached2.data.base.baseId);
+              const base = await clientFor(ctx.credentials).getBase(cached2.data.base.baseId);
               if (base?.state === ComputerBaseState.Ready) {
                 if (!base.retained) {
-                  const retained = await clientFor(ctx.organizationId).setBaseRetention(
-                    base.id,
-                    true
-                  );
+                  const retained = await clientFor(ctx.credentials).setBaseRetention(base.id, true);
                   if (!retained.retained)
                     throw computerSandboxError(
                       "build_failed",
@@ -1092,13 +1084,10 @@ ${step.run}`,
           }
           const cached = computerArtifactSchema.safeParse(await ctx.artifacts?.get(baseKey));
           if (cached.success && cached.data.key === baseKey && cached.data.base.kind === "captured") {
-            const base = await clientFor(ctx.organizationId).getBase(cached.data.base.baseId);
+            const base = await clientFor(ctx.credentials).getBase(cached.data.base.baseId);
             if (base?.state === ComputerBaseState.Ready) {
               if (!base.retained) {
-                const retained = await clientFor(ctx.organizationId).setBaseRetention(
-                  base.id,
-                  true
-                );
+                const retained = await clientFor(ctx.credentials).setBaseRetention(base.id, true);
                 if (!retained.retained)
                   throw computerSandboxError(
                     "build_failed",
@@ -1112,7 +1101,7 @@ ${step.run}`,
           await ctx.artifacts?.put(baseKey, built);
           return { ...built, key, ...seedArtifact };
         }
-        const imageVersionId = spec.image.startsWith(LINEAGE_PREFIX) ? null : (await registerImage(clientFor(ctx.organizationId), spec.image)).id;
+        const imageVersionId = spec.image.startsWith(LINEAGE_PREFIX) ? null : (await registerImage(clientFor(ctx.credentials), spec.image)).id;
         ctx.log?.(`computer base ${key} is image ${spec.image}`);
         return {
           version: 1,
@@ -1146,7 +1135,7 @@ ${step.run}`,
           );
         }
         const env = platformProcessEnvironment(ctx, await loadVariables(ctx, spec));
-        const client = clientFor(ctx.session.organizationId);
+        const client = clientFor(ctx.credentials);
         const workspace = spec.parameters.workspace;
         const name = await computerWorkspaceName({
           ...ctx.session,
@@ -1366,7 +1355,7 @@ ${step.run}`,
           ctx = { ...ctx, session: { ...ctx.session, workspaceId: state.workspaceId } };
         if (state.networkPolicySaved === true && state.workspaceId != null && ctx.session.workspaceId !== state.workspaceId)
           throw new Error("Passive workspace identity does not match retained provider state");
-        const client = clientFor(ctx.session.organizationId);
+        const client = clientFor(ctx.credentials);
         const info = await client.getComputer(state.computerId);
         if (info == null || info.state !== ComputerState.Running)
           throw computerSandboxError(
@@ -1409,7 +1398,7 @@ ${step.run}`,
               })
             }
           };
-        const client = clientFor(ctx.session.organizationId);
+        const client = clientFor(ctx.credentials);
         const workspaceId = sandboxWorkspaceId({
           session: ctx.session,
           workspace: sandboxWorkspaceOf[state.workspace]
@@ -1579,7 +1568,7 @@ ${step.run}`,
               failures.push(cause);
             }
             try {
-              const client = clientFor(ctx.session.organizationId);
+              const client = clientFor(ctx.credentials);
               let current;
               try {
                 current = await client.getComputer(state.computerId);
@@ -1621,7 +1610,7 @@ ${step.run}`,
       },
       onSessionEnd: async (ctx, _artifact, rawState, { reason }) => {
         const state = computerStateSchema.parse(rawState);
-        const client = clientFor(ctx.session.organizationId);
+        const client = clientFor(ctx.credentials);
         const finish = async () => {
           const action = state.workspace === ComputerWorkspacePolicy.Conversation ? "stop" : "delete";
           log("computer_sandbox.session_end", { computerId: state.computerId, reason, action });
@@ -1657,8 +1646,6 @@ ${step.run}`,
   });
 };
 export {
-  COMPUTERS_API_KEY_SECRET,
-  COMPUTERS_API_TEAM_SECRET,
   COMPUTER_SANDBOX_SPECIFIER2 as COMPUTER_SANDBOX_SPECIFIER,
   computeComputerArtifactKey2 as computeComputerArtifactKey,
   computerWorkspaceName,