@flue/sdk 0.1.1 → 0.1.3

package/dist/index.mjs

@@ -1,5 +1,4 @@
-import { a as createTools, i as BUILTIN_TOOL_NAMES, s as parseFrontmatterFile, t as InMemorySessionStore } from "./session-0gnaB_aY.mjs";
-import { createFlueContext } from "./client.mjs";
+import { a as parseFrontmatterFile, n as createTools, t as BUILTIN_TOOL_NAMES } from "./agent-BYG0nVbQ.mjs";
 import * as esbuild from "esbuild";
 import * as fs from "node:fs";
 import * as path from "node:path";
@@ -9,43 +8,30 @@ import { packageUpSync } from "package-up";
 var CloudflarePlugin = class {
 	name = "cloudflare";
 	generateEntryPoint(ctx) {
-		const { agents, roles, resolveSDKImport } = ctx;
+		const { agents, roles } = ctx;
 		const rolesJson = JSON.stringify(roles);
 		const webhookAgents = agents.filter((a) => a.triggers.webhook);
-		const agentImports = agents.map((a) => {
-			return `import ${agentVarName$1(a.name)} from '${a.filePath.replace(/\\/g, "/")}';`;
-		}).join("\n");
-		const manifest = JSON.stringify({ agents: agents.map((a) => ({
-			name: a.name,
-			triggers: a.triggers
-		})) }, null, 2);
-		const agentClasses = webhookAgents.map((a) => {
-			const className = agentClassName(a.name);
-			const handlerVar = agentVarName$1(a.name);
-			return `export class ${className} extends Agent {
-  async onRequest(request) {
-    return handleAgentRequest(request, this, ${JSON.stringify(a.name)}, ${handlerVar});
-  }
-}`;
-		}).join("\n\n");
 		return `
 // Auto-generated by @flue/sdk build (cloudflare)
 import { Agent, routeAgentRequest } from 'agents';
 import { Bash, InMemoryFs } from 'just-bash';
 import { getModel } from '@mariozechner/pi-ai';
-import { createFlueContext } from '${resolveSDKImport("client")}';
-import { InMemorySessionStore } from '${resolveSDKImport("session")}';
-import { bashToSessionEnv } from '${resolveSDKImport("sandbox")}';
+import { createFlueContext, InMemorySessionStore, bashToSessionEnv } from '@flue/sdk/internal';
 import { setCloudflareContext, clearCloudflareContext, cfSandboxToSessionEnv } from '@flue/sdk/cloudflare';
 
-${agentImports}
+${agents.map((a) => {
+			return `import ${agentVarName$1(a.name)} from '${a.filePath.replace(/\\/g, "/")}';`;
+		}).join("\n")}
 
 // ─── Config ─────────────────────────────────────────────────────────────────
 
 const roles = ${rolesJson};
 const skills = {};
 const systemPrompt = '';
-const manifest = ${manifest};
+const manifest = ${JSON.stringify({ agents: agents.map((a) => ({
+			name: a.name,
+			triggers: a.triggers
+		})) }, null, 2)};
 
 // ─── Infrastructure ─────────────────────────────────────────────────────────
 
@@ -279,7 +265,15 @@ async function handleAgentRequest(request, doInstance, agentName, handler) {
 
 // ─── Per-Agent Durable Object Classes ──────────────────────────────────────
 
-${agentClasses}
+${webhookAgents.map((a) => {
+			const className = agentClassName(a.name);
+			const handlerVar = agentVarName$1(a.name);
+			return `export class ${className} extends Agent {
+  async onRequest(request) {
+    return handleAgentRequest(request, this, ${JSON.stringify(a.name)}, ${handlerVar});
+  }
+}`;
+		}).join("\n\n")}
 
 // Re-export Sandbox DO class for wrangler binding
 export { Sandbox } from '@cloudflare/sandbox';
@@ -384,18 +378,9 @@ function agentClassName(name) {
 var NodePlugin = class {
 	name = "node";
 	generateEntryPoint(ctx) {
-		const { agents, roles, resolveSDKImport } = ctx;
+		const { agents, roles } = ctx;
 		const rolesJson = JSON.stringify(roles);
 		const webhookAgents = agents.filter((a) => a.triggers.webhook);
-		const agentImports = agents.map((a) => {
-			return `import ${agentVarName(a.name)} from '${a.filePath.replace(/\\/g, "/")}';`;
-		}).join("\n");
-		const handlerMapEntries = agents.map((a) => `  ${JSON.stringify(a.name)}: ${agentVarName(a.name)},`).join("\n");
-		const webhookNames = JSON.stringify(webhookAgents.map((a) => a.name));
-		const manifest = JSON.stringify({ agents: agents.map((a) => ({
-			name: a.name,
-			triggers: a.triggers
-		})) }, null, 2);
 		return `
 // Auto-generated by @flue/sdk build (node)
 import { Hono } from 'hono';
@@ -403,12 +388,12 @@ import { streamSSE } from 'hono/streaming';
 import { serve } from '@hono/node-server';
 import { Bash, InMemoryFs, MountableFs, ReadWriteFs } from 'just-bash';
 import { getModel } from '@mariozechner/pi-ai';
-import { createFlueContext } from '${resolveSDKImport("client")}';
-import { InMemorySessionStore } from '${resolveSDKImport("session")}';
-import { bashToSessionEnv } from '${resolveSDKImport("sandbox")}';
+import { createFlueContext, InMemorySessionStore, bashToSessionEnv } from '@flue/sdk/internal';
 import { randomUUID } from 'node:crypto';
 
-${agentImports}
+${agents.map((a) => {
+			return `import ${agentVarName(a.name)} from '${a.filePath.replace(/\\/g, "/")}';`;
+		}).join("\n")}
 
 // ─── Config ─────────────────────────────────────────────────────────────────
 
@@ -417,12 +402,22 @@ const roles = ${rolesJson};
 const systemPrompt = '';
 
 const handlers = {
-${handlerMapEntries}
+${agents.map((a) => `  ${JSON.stringify(a.name)}: ${agentVarName(a.name)},`).join("\n")}
 };
 
-const webhookAgents = new Set(${webhookNames});
+const webhookAgents = new Set(${JSON.stringify(webhookAgents.map((a) => a.name))});
 
-const manifest = ${manifest};
+// When the CLI starts this server via \`flue run\`, it sets FLUE_MODE=local.
+// In local mode the HTTP route accepts any registered agent (including
+// trigger-less CI-only agents). In any other mode the route is restricted to
+// agents with \`webhook: true\`, preventing accidental public exposure of
+// agents that the user only intended to invoke from their CI pipeline.
+const isLocalMode = process.env.FLUE_MODE === 'local';
+
+const manifest = ${JSON.stringify({ agents: agents.map((a) => ({
+			name: a.name,
+			triggers: a.triggers
+		})) }, null, 2)};
 
 // ─── Infrastructure ─────────────────────────────────────────────────────────
 
@@ -521,7 +516,7 @@ app.post('/agents/:name/:sessionId', async (c) => {
   if (!handlers[name]) {
     return c.json({ error: 'Agent not found' }, 404);
   }
-  if (!webhookAgents.has(name)) {
+  if (!webhookAgents.has(name) && !isLocalMode) {
     return c.json({ error: 'Agent "' + name + '" is not web-accessible (no webhook trigger)' }, 404);
   }
 
@@ -600,7 +595,12 @@ const port = parseInt(process.env.PORT || '3000', 10);
 
 const server = serve({ fetch: app.fetch, port });
 console.log('[flue] Server listening on http://localhost:' + port);
-console.log('[flue] Available agents: ' + ${JSON.stringify(webhookAgents.map((a) => a.name).join(", "))});
+if (isLocalMode) {
+  console.log('[flue] Mode: local (all agents invokable, including trigger-less)');
+  console.log('[flue] Available agents: ' + ${JSON.stringify(agents.map((a) => a.name).join(", "))});
+} else {
+  console.log('[flue] Available agents: ' + ${JSON.stringify(webhookAgents.map((a) => a.name).join(", "))});
+}
 
 process.on('SIGINT', () => { server.close(); process.exit(0); });
 process.on('SIGTERM', () => { server.close(); process.exit(0); });
@@ -631,13 +631,14 @@ async function build(options) {
 	const roles = discoverRoles(agentDir);
 	const agents = discoverAgents(agentDir);
 	if (agents.length === 0) throw new Error(`No agents found in ${path.join(agentDir, ".flue/agents/")}`);
-	for (const agent of agents) if (!(agent.triggers.webhook || agent.triggers.cron)) throw new Error(`[flue] Agent "${agent.name}" has no triggers configured. Add a triggers export to your agent file:\n\n  export const triggers = { webhook: true };\n\nAvailable triggers: webhook (HTTP endpoint), cron (scheduled)`);
 	const webhookAgents = agents.filter((a) => a.triggers.webhook);
 	const cronAgents = agents.filter((a) => a.triggers.cron);
+	const triggerlessAgents = agents.filter((a) => !a.triggers.webhook && !a.triggers.cron);
 	console.log(`[flue] Found ${Object.keys(roles).length} role(s): ${Object.keys(roles).join(", ") || "(none)"}`);
 	console.log(`[flue] Found ${agents.length} agent(s): ${agents.map((a) => a.name).join(", ")}`);
 	if (webhookAgents.length > 0) console.log(`[flue] Webhook agents: ${webhookAgents.map((a) => a.name).join(", ")}`);
 	if (cronAgents.length > 0) console.log(`[flue] Cron agents (manifest only): ${cronAgents.map((a) => `${a.name} (${a.triggers.cron})`).join(", ")}`);
+	if (triggerlessAgents.length > 0) console.log(`[flue] CLI-only agents (no HTTP route in deployed build): ${triggerlessAgents.map((a) => a.name).join(", ")}`);
 	console.log(`[flue] AGENTS.md and .agents/skills/ will be discovered at runtime from session cwd`);
 	const distDir = path.join(agentDir, "dist");
 	fs.mkdirSync(distDir, { recursive: true });
@@ -652,8 +653,7 @@ async function build(options) {
 		agents,
 		roles,
 		agentDir,
-		options,
-		resolveSDKImport: resolveSDKImportFn
+		options
 	};
 	const serverCode = plugin.generateEntryPoint(ctx);
 	const entryPath = path.join(distDir, "_entry_server.ts");
@@ -786,18 +786,6 @@ function getSDKDir() {
 		return __dirname;
 	}
 }
-function getSDKSrcDir() {
-	const thisDir = getSDKDir();
-	if (thisDir.endsWith("/dist") || thisDir.endsWith("\\dist")) {
-		const srcDir = path.join(path.dirname(thisDir), "src");
-		if (fs.existsSync(srcDir)) return srcDir;
-	}
-	return thisDir;
-}
-function resolveSDKImportFn(module) {
-	const srcDir = getSDKSrcDir();
-	return path.join(srcDir, `${module}.ts`).replace(/\\/g, "/");
-}
 
 //#endregion
-export { BUILTIN_TOOL_NAMES, InMemorySessionStore, build, createFlueContext, createTools };
+export { BUILTIN_TOOL_NAMES, build, createTools };

package/dist/internal.d.mts

@@ -0,0 +1,15 @@
+import { S as SessionStore, y as SessionData } from "./types-BZPltYah.mjs";
+import { FlueContextConfig, FlueContextInternal, createFlueContext } from "./client.mjs";
+import { bashToSessionEnv } from "./sandbox.mjs";
+import "valibot";
+
+//#region src/session.d.ts
+/** In-memory session store. Sessions persist for the lifetime of the process. */
+declare class InMemorySessionStore implements SessionStore {
+  private store;
+  save(id: string, data: SessionData): Promise<void>;
+  load(id: string): Promise<SessionData | null>;
+  delete(id: string): Promise<void>;
+}
+//#endregion
+export { type FlueContextConfig, type FlueContextInternal, InMemorySessionStore, bashToSessionEnv, createFlueContext };

package/dist/internal.mjs

@@ -0,0 +1,6 @@
+import "./agent-BYG0nVbQ.mjs";
+import { t as InMemorySessionStore } from "./session-CiAMTsLZ.mjs";
+import { bashToSessionEnv } from "./sandbox.mjs";
+import { createFlueContext } from "./client.mjs";
+
+export { InMemorySessionStore, bashToSessionEnv, createFlueContext };

package/dist/node/index.d.mts

@@ -0,0 +1,14 @@
+import { s as Command } from "../types-BZPltYah.mjs";
+import { t as CommandExecutor } from "../command-helpers-BPcSV93o.mjs";
+import { execFile } from "node:child_process";
+
+//#region src/node/define-command.d.ts
+/**
+ * Options forwarded directly to Node's `child_process.execFile`. Full pass-through.
+ */
+type CommandOptions = NonNullable<Parameters<typeof execFile>[2]>;
+declare function defineCommand(name: string): Command;
+declare function defineCommand(name: string, options: CommandOptions): Command;
+declare function defineCommand(name: string, execute: CommandExecutor): Command;
+//#endregion
+export { type CommandOptions, defineCommand };

package/dist/node/index.mjs

@@ -0,0 +1,75 @@
+import { t as normalizeExecutor } from "../command-helpers-CxRhK1my.mjs";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+
+//#region src/node/define-command.ts
+/**
+* Node-specific `defineCommand`. Supports three forms:
+*
+* ```ts
+* defineCommand('agent-browser');
+* defineCommand('gh', { env: { GH_TOKEN: process.env.GH_TOKEN } });
+* defineCommand('gh', async (args) => ({ stdout: '...' }));
+* ```
+*
+* Forms A and B shell out via `child_process.execFile`. Form C lets the user
+* implement the command however they like. All three forms benefit from
+* return-shape normalization and throw-catching — no `try`/`catch` or
+* `return { stdout, stderr, exitCode: 0 }` boilerplate required.
+*/
+const execFileAsync = promisify(execFile);
+/**
+* Essential, non-sensitive environment variables automatically forwarded to
+* pass-through commands (forms A and B). Users can override any of these —
+* or add their own (e.g. `GH_TOKEN`) — via `options.env`. Anything not listed
+* here (API keys, tokens, secrets, etc.) stays on the host and is NEVER
+* exposed to the spawned process unless the caller opts in explicitly.
+*
+* If you need full control over the env, use the function form:
+* `defineCommand('gh', async (args) => { ... })`.
+*/
+const DEFAULT_ENV = {
+	PATH: process.env.PATH,
+	HOME: process.env.HOME,
+	USER: process.env.USER,
+	LOGNAME: process.env.LOGNAME,
+	HOSTNAME: process.env.HOSTNAME,
+	SHELL: process.env.SHELL,
+	LANG: process.env.LANG,
+	LC_ALL: process.env.LC_ALL,
+	LC_CTYPE: process.env.LC_CTYPE,
+	TZ: process.env.TZ,
+	TERM: process.env.TERM,
+	TMPDIR: process.env.TMPDIR,
+	TMP: process.env.TMP,
+	TEMP: process.env.TEMP
+};
+function defineCommand(name, arg) {
+	if (typeof arg === "function") return {
+		name,
+		execute: normalizeExecutor(arg)
+	};
+	const userOpts = arg ?? {};
+	const mergedOpts = {
+		maxBuffer: 50 * 1024 * 1024,
+		...userOpts,
+		env: {
+			...DEFAULT_ENV,
+			...userOpts.env ?? {}
+		}
+	};
+	const executor = async (args) => {
+		const { stdout, stderr } = await execFileAsync(name, args, mergedOpts);
+		return {
+			stdout: String(stdout ?? ""),
+			stderr: String(stderr ?? "")
+		};
+	};
+	return {
+		name,
+		execute: normalizeExecutor(executor)
+	};
+}
+
+//#endregion
+export { defineCommand };

package/dist/sandbox.d.mts

@@ -1,4 +1,4 @@
-import { b as SessionEnv, c as CommandDef, r as BashLike, u as FileStat, v as SandboxFactory, w as ShellResult } from "./types-C97_qJ21.mjs";
+import { b as SessionEnv, c as CommandDef, r as BashLike, u as FileStat, v as SandboxFactory, w as ShellResult } from "./types-BZPltYah.mjs";
 
 //#region src/sandbox.d.ts
 declare function bashToSessionEnv(bash: BashLike): SessionEnv;

package/dist/sandbox.mjs

@@ -1,4 +1,5 @@
-import { r as normalizePath } from "./session-0gnaB_aY.mjs";
+import "./agent-BYG0nVbQ.mjs";
+import { r as normalizePath } from "./session-CiAMTsLZ.mjs";
 
 //#region src/sandbox.ts
 function bashToSessionEnv(bash) {