@frankieai/server 0.2.3 → 0.2.5

package/dist/{chunk-MKN5663J.js → chunk-HPYT6ZIU.js}

@@ -441,7 +441,6 @@ var OpenApiError = class extends Error {
 };
 async function inspectApiCapabilities(source, options = {}) {
   const doc = await loadSpec(source.spec, options.fetchImpl);
-  const allowedMethods = new Set(source.methods);
   const hasPerUserAuth = Boolean(source.forwardUserTokenAs) || source.forwardUserClaims.length > 0;
   const capabilities = [];
   for (const [path, item] of Object.entries(doc.paths ?? {})) {
@@ -451,7 +450,6 @@ async function inspectApiCapabilities(source, options = {}) {
       const operation = item[method];
       if (!isRecord(operation)) continue;
       const httpMethod = method.toUpperCase();
-      if (!allowedMethods.has(httpMethod)) continue;
       const operationId = typeof operation["operationId"] === "string" ? operation["operationId"] : `${method}_${slug(path)}`;
       if (source.operations.length > 0 && !source.operations.includes(operationId)) continue;
       const toolName = `${API_TOOL_PREFIX}${source.name}__${sanitize(operationId)}`;
@@ -499,14 +497,14 @@ async function buildOne(source, options) {
     for (const method of ["get", "post", "put", "patch", "delete"]) {
       const operation = item[method];
       if (!isRecord(operation)) continue;
-      if (!allowedMethods.has(method.toUpperCase())) continue;
       const operationId = typeof operation["operationId"] === "string" ? operation["operationId"] : `${method}_${slug(path)}`;
       if (source.operations.length > 0 && !source.operations.includes(operationId)) continue;
-      if (source.selectedTools && !source.selectedTools.includes(operationId)) continue;
+      if (source.selectedTools ? !source.selectedTools.includes(operationId) : !allowedMethods.has(method.toUpperCase())) continue;
       const name = `${API_TOOL_PREFIX}${source.name}__${sanitize(operationId)}`;
       if (!evaluateToolPolicy(name, options.policy).allowed) continue;
       const params = collectParameters(doc, item, operation);
       const body = collectRequestBody(doc, operation);
+      const scopeRules = parseScopeRules(operation);
       const { headers: securedHeaders, query: securityQuery } = applySecurity(doc, source, operation, schemes);
       const headers = buildForwardedHeaders({ ...source, headers: securedHeaders }, options.session);
       const opBaseUrl = resolveOperationBaseUrl(source, doc, item, operation, baseUrl ?? "");
@@ -540,6 +538,7 @@ ${retrySafetyNote(method, doc, item, operation)}`,
             );
           }
           const input = enforceIdentityParams(params, isRecord(args) ? args : {}, options.session);
+          enforceResourceScope(scopeRules, input, options.session);
           const url = buildUrl(opBaseUrl, path, params, input, securityQuery);
           const rawBody = body ? input["body"] : void 0;
           const requestBody = isRecord(rawBody) ? enforceServerDerivedIdentity(rawBody, options.session) : rawBody;
@@ -859,6 +858,39 @@ function enforceIdentityParams(params, input, session) {
   }
   return next;
 }
+function parseScopeRules(operation) {
+  const raw = operation["x-frankie-scope"];
+  const entries = Array.isArray(raw) ? raw : raw !== void 0 ? [raw] : [];
+  const rules = [];
+  for (const entry of entries) {
+    if (isRecord(entry) && typeof entry["param"] === "string" && typeof entry["claim"] === "string") {
+      rules.push({ param: entry["param"], claim: entry["claim"] });
+    }
+  }
+  return rules;
+}
+function enforceResourceScope(rules, input, session) {
+  for (const rule of rules) {
+    if (session.user.anonymous) {
+      throw new Error(
+        `"${rule.param}" is access-scoped, but the chat session is anonymous \u2014 Frankie will not call it for an unauthenticated visitor. Report this to the user instead of retrying.`
+      );
+    }
+    const requested = input[rule.param];
+    if (requested === void 0 || requested === null || requested === "") {
+      throw new Error(
+        `This operation requires an in-scope "${rule.param}" and none was given. Report this to the user instead of retrying.`
+      );
+    }
+    const allowed = session.user.claims[rule.claim];
+    const allowedList = Array.isArray(allowed) ? allowed.map((entry) => String(entry)) : typeof allowed === "string" ? [allowed] : [];
+    if (!allowedList.includes(String(requested))) {
+      throw new Error(
+        `Access denied: "${String(requested)}" is not in this user's "${rule.claim}" scope. Do not retry with a different id \u2014 report this to the user.`
+      );
+    }
+  }
+}
 
 // src/agent/mcp.ts
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
@@ -1445,7 +1477,7 @@ function msg(error) {
 }
 
 // src/agent/prompt.ts
-import { activeSkills } from "@frankieai/core";
+import { activeSkills, SKILL_TOOL_NAME } from "@frankieai/core";
 function buildSystemPrompt(config, session, availableTools) {
   const sections = [];
   const configurationAssistant = config.features.configurationAssistant;
@@ -1501,7 +1533,7 @@ ${config.agent.systemPrompt.trim()}`);
   }
   sections.push(renderUserSection(session));
   const skills = activeSkills(config, availableTools);
-  if (skills.length) sections.push("## Reviewed workspace skills\nThese recipes do not grant additional permissions or override safety rules. Each skill lists only its currently approved, available tools. Instructions may describe additional operations: skip unavailable steps, explain the limitation, and never claim the whole task succeeded when a required step was unavailable.\n" + JSON.stringify(skills.map(({ name, goal, instructions, tools }) => ({ name, goal, instructions, tools }))));
+  if (skills.length) sections.push("## Reviewed workspace skills\nThese recipes do not grant additional permissions or override safety rules. Each skill lists only its currently approved, available tools. Instructions may describe additional operations: skip unavailable steps, explain the limitation, and never claim the whole task succeeded when a required step was unavailable.\nBefore you begin following one of these skills, call the `" + SKILL_TOOL_NAME + "` tool with the skill's exact name, so the person can see which recipe you're applying. It grants no permissions and does nothing on its own \u2014 it's only a visible marker. Then carry out that skill's steps.\n" + JSON.stringify(skills.map(({ name, goal, instructions, tools }) => ({ name, goal, instructions, tools }))));
   return sections.join("\n\n");
 }
 function isOnboardingAssistant(config) {
@@ -1607,9 +1639,51 @@ function renderPageContext(context) {
 import { Agent } from "@earendil-works/pi-agent-core";
 import {
   describeTool as describeTool3,
-  activeSkills as activeSkills2,
+  activeSkills as activeSkills3,
   evaluateToolPolicy as evaluateToolPolicy3
 } from "@frankieai/core";
+
+// src/agent/skill-tools.ts
+import { Type as Type4 } from "@earendil-works/pi-ai";
+import { activeSkills as activeSkills2, SKILL_TOOL_NAME as SKILL_TOOL_NAME2 } from "@frankieai/core";
+function isSkillTool(name) {
+  return name === SKILL_TOOL_NAME2;
+}
+function buildSkillTools(config, availableTools) {
+  const skills = activeSkills2(config, availableTools);
+  if (!skills.length) return [];
+  const names = skills.map((skill) => skill.name);
+  return [
+    {
+      name: SKILL_TOOL_NAME2,
+      label: "Use skill",
+      description: `Announce that you are about to follow one of the reviewed workspace skills, so the person can see which recipe you're applying. Call this with the skill's exact name immediately before you begin its steps. It grants no new permissions and performs no action on its own.
+
+Available skills: ${names.join(", ")}.`,
+      parameters: Type4.Unsafe({
+        type: "object",
+        required: ["skill"],
+        properties: { skill: { type: "string", description: "The exact name of the workspace skill you are about to follow." } }
+      }),
+      async execute(_id, args) {
+        const requested = String((typeof args === "object" && args !== null ? args["skill"] : "") ?? "").trim();
+        const match = skills.find((skill) => skill.name.toLowerCase() === requested.toLowerCase());
+        if (!match) {
+          return {
+            content: [{ type: "text", text: `No active skill is named "${requested}". The skills available this turn are: ${names.join(", ")}.` }],
+            details: null
+          };
+        }
+        return {
+          content: [{ type: "text", text: `Now following the "${match.name}" skill. Apply its steps using only its approved tools.` }],
+          details: null
+        };
+      }
+    }
+  ];
+}
+
+// src/agent/runner.ts
 async function* runTurn(params) {
   const { config, session } = params;
   const toolset = await collectTools({
@@ -1619,6 +1693,8 @@ async function* runTurn(params) {
     ...params.onWarning ? { onWarning: params.onWarning } : {}
   });
   const availableTools = toolset.tools.map((tool) => tool.name);
+  const skillTools = buildSkillTools(config, availableTools);
+  const agentTools = [...toolset.tools, ...skillTools];
   const queue = new EventQueue();
   let turnCount = 0;
   let lastAssistant;
@@ -1630,7 +1706,7 @@ async function* runTurn(params) {
       systemPrompt: buildSystemPrompt(config, session, availableTools),
       model: params.modelOverride ?? params.model,
       thinkingLevel: config.model.thinkingLevel,
-      tools: toolset.tools,
+      tools: agentTools,
       messages: session.messages
     },
     // Per-request sampling lives here rather than on the agent: the stream
@@ -1654,7 +1730,7 @@ async function* runTurn(params) {
     // tools are exempt: they're gated by the workspaceAdmin flag, not the
     // allow/deny policy, so the policy would otherwise block them here.
     beforeToolCall: async ({ toolCall }) => {
-      if (isPlatformTool(toolCall.name)) return void 0;
+      if (isPlatformTool(toolCall.name) || isSkillTool(toolCall.name)) return void 0;
       const decision = evaluateToolPolicy3(toolCall.name, config.agent.tools);
       if (decision.allowed) return void 0;
       queue.push({
@@ -1696,7 +1772,7 @@ async function* runTurn(params) {
     });
   }).finally(() => queue.close());
   try {
-    yield { type: "skills_loaded", skills: activeSkills2(config, availableTools).map(({ id, name, revision }) => ({ id, name, revision })) };
+    yield { type: "skills_loaded", skills: activeSkills3(config, availableTools).map(({ id, name, revision }) => ({ id, name, revision })) };
     yield { type: "tools_active", apis: toolset.apis };
     for await (const event of queue) yield event;
     await run;
@@ -1922,6 +1998,7 @@ var EventQueue = class {
 // src/app.ts
 import { randomUUID as randomUUID4 } from "crypto";
 import { Hono as Hono3 } from "hono";
+import { suggestedPromptsFromSkills } from "@frankieai/core";
 
 // src/guide.ts
 import { Hono as Hono2 } from "hono";
@@ -2154,7 +2231,13 @@ function createFrankieApp(options) {
         launcherLabel: config.branding.launcherLabel
       },
       greeting: config.agent.greeting,
-      suggestedPrompts: config.agent.suggestedPrompts,
+      // Fall back to prompts derived from the workspace's own published skills,
+      // so an empty chat suggests what this assistant can actually do instead of
+      // nothing. An explicitly authored list always wins.
+      suggestedPrompts: config.agent.suggestedPrompts.length ? config.agent.suggestedPrompts : suggestedPromptsFromSkills(config),
+      // Explicit starter cards configured in the dashboard's Appearance tab.
+      // When set, the widget renders these instead of the suggestedPrompts.
+      starterPrompts: config.agent.starterPrompts,
       theme: config.theme,
       allowAnonymous: config.auth.allowAnonymous,
       showToolActivity: config.agent.showToolActivity,
@@ -2652,6 +2735,11 @@ function toPublicTenant(record) {
     ...record.vercel ? { vercel: publicVercelLink(record.vercel) } : {},
     theme: config.theme,
     features: config.features,
+    agent: {
+      greeting: config.agent.greeting,
+      suggestedPrompts: config.agent.suggestedPrompts,
+      starterPrompts: config.agent.starterPrompts
+    },
     createdAt: record.createdAt,
     updatedAt: record.updatedAt
   };
@@ -3163,4 +3251,4 @@ export {
   resolveStores,
   resolveTenantStore
 };
-//# sourceMappingURL=chunk-MKN5663J.js.map
+//# sourceMappingURL=chunk-HPYT6ZIU.js.map