@hachej/boring-agent 0.1.110 → 0.2.0

package/dist/file-search-BUgMSKZE.d.ts

@@ -1,289 +0,0 @@
-import { o as InterruptReceipt, j as StopReceipt } from './piChatEvent-DpE0lIb9.js';
-import { p as AgentSendInput, j as AgentEvent } from './harness-qHlMJhZo.js';
-import { b as Workspace } from './sandbox-BMhut3kh.js';
-import { b as AgentSessionRef, d as AgentSendReceipt, A as AgentGateway, a as AuthorizedAgentScope } from './admin-DORVQfLn.js';
-
-/**
- * Opaque, in-process Core capability. The brand symbol and constructor are not
- * exported; Core records issued object identity in a private WeakMap.
- */
-declare const authorizedWorkspaceCredentialScopeBrand: unique symbol;
-interface AuthorizedWorkspaceCredentialScopeV1 {
-    readonly contractVersion: "boring.authorized-workspace-credential-scope.v1";
-    readonly [authorizedWorkspaceCredentialScopeBrand]: true;
-}
-type VerifiedWorkspaceCredentialPrincipalV1 = Readonly<{
-    kind: "user";
-    userId: string;
-    membershipRole: "owner" | "editor" | "viewer";
-}> | Readonly<{
-    kind: "system";
-    principalId: string;
-    workspaceGrantId: string;
-}>;
-interface VerifiedWorkspaceCredentialAuthorityV1 {
-    readonly workspaceId: string;
-    readonly appId: string;
-    readonly principal: VerifiedWorkspaceCredentialPrincipalV1;
-    readonly authorizationReceiptId: string;
-    readonly expiresAt: string;
-}
-/** Core-owned verifier; a TypeScript cast or copied object is never authority. */
-interface WorkspaceCredentialAuthorityVerifierV1 {
-    readonly contractVersion: "boring.workspace-credential-authority-verifier.v1";
-    verifyCurrent(scope: AuthorizedWorkspaceCredentialScopeV1): Promise<VerifiedWorkspaceCredentialAuthorityV1>;
-}
-
-type ProviderId = string & {
-    readonly __providerId: unique symbol;
-};
-type CredentialFieldId = string & {
-    readonly __credentialFieldId: unique symbol;
-};
-type CredentialConsumerBindingId = string & {
-    readonly __credentialConsumerBindingId: unique symbol;
-};
-type ProviderCategoryV1 = "llm" | "search" | "transcription" | "mcp" | "other";
-interface CredentialFieldDefinitionV1 {
-    readonly id: CredentialFieldId;
-    readonly label: string;
-    readonly required: boolean;
-    readonly sensitivity: "secret" | "public";
-    readonly minBytes?: number;
-    readonly maxBytes: number;
-}
-interface ExternalManagedAccountReferenceDefinitionV1 {
-    readonly label: string;
-    readonly maxBytes: number;
-    readonly persistence: "server-only-metadata";
-}
-type ProviderCredentialDefinitionV1 = Readonly<{
-    type: "api-key";
-    fields: readonly CredentialFieldDefinitionV1[];
-}> | Readonly<{
-    type: "oauth2-authorization-code";
-    tokenCustody: "local-vault";
-    clientRegistrationRef: string;
-    authorizationEndpoint: `https://${string}`;
-    tokenEndpoint: `https://${string}`;
-    revocationEndpoint?: `https://${string}`;
-    scopes: readonly string[];
-    usePkce: true;
-    refreshTokenField: CredentialFieldDefinitionV1;
-    resolvedAccessTokenField: CredentialFieldDefinitionV1;
-    accessTokenPersistence: "memory-only";
-}> | Readonly<{
-    type: "oauth2-authorization-code";
-    tokenCustody: "external-managed";
-    custodianAdapterId: string;
-    connectUrlOrigins: readonly `https://${string}`[];
-    scopes: readonly string[];
-    accountReference: ExternalManagedAccountReferenceDefinitionV1;
-    delivery: "host-session-adapter-only";
-}> | Readonly<{
-    type: "none";
-}>;
-interface ProviderDefinitionV1 {
-    readonly contractVersion: "boring.provider.v1";
-    readonly id: ProviderId;
-    readonly displayName: string;
-    readonly category: ProviderCategoryV1;
-    readonly credential: ProviderCredentialDefinitionV1;
-    readonly consumerBindingIds: readonly CredentialConsumerBindingId[];
-    readonly sandboxEgressOrigins: readonly `https://${string}`[];
-    readonly mcp?: Readonly<{
-        transport: "streamable-http";
-        endpoint?: `https://${string}`;
-        toolkitId?: string;
-        allowedTools: readonly string[];
-        deniedTools: readonly string[];
-    }>;
-}
-interface ProviderRegistryV1 {
-    readonly contractVersion: "boring.provider-registry.v1";
-    list(): readonly ProviderDefinitionV1[];
-    require(providerId: ProviderId): ProviderDefinitionV1;
-}
-declare function createProviderRegistryV1(defs: readonly ProviderDefinitionV1[]): ProviderRegistryV1;
-
-/**
- * Ratified `KmsBackend` abstraction (docs/issues/820/byok-secret-vault-plan.md,
- * "KmsBackend interface (pluggable KEK provider)", amendment A).
- *
- * This module is intentionally backend-agnostic: OVH KMS, Scaleway Key Manager,
- * Exoscale KMS, self-run Vault/OpenBao Transit and the local-KEK envelope are
- * all implementations of `WorkspaceKekProviderV1`. Only the KEK-holder call
- * differs; the per-workspace DEK and the AAD-bound AES-256-GCM field crypto are
- * identical across every backend.
- *
- * Shared code stays `Uint8Array`-only: no `node:*` import and no Node byte-array
- * type may appear here. Backend-specific crypto lives under `src/server/**`.
- */
-declare const WORKSPACE_KEK_PROVIDER_VERSION: "boring.workspace-kek-provider.v1";
-declare const CREDENTIAL_ENVELOPE_VERSION: "boring.credential-envelope.v1";
-/** Canonical AAD encoding version; changing it is a migration, not a tweak. */
-declare const CREDENTIAL_AAD_ENCODING_VERSION: "boring.credential-aad.v1";
-/** AES-256-GCM parameters. Fixed by the ratified design; never widened. */
-declare const CREDENTIAL_DEK_BYTE_LENGTH_V1 = 32;
-declare const CREDENTIAL_KEK_BYTE_LENGTH_V1 = 32;
-declare const CREDENTIAL_NONCE_BYTE_LENGTH_V1 = 12;
-declare const CREDENTIAL_AUTH_TAG_BYTE_LENGTH_V1 = 16;
-interface WorkspaceKekContextV1 {
-    readonly workspaceId: string;
-    readonly dekGeneration: number;
-    readonly requestId: string;
-}
-type WrappedWorkspaceDekPayloadV1 = Readonly<{
-    /** Reserved for a future self-run Vault/OpenBao Transit backend. */
-    format: "vault-transit-ciphertext.v1";
-    ciphertext: Uint8Array;
-}> | Readonly<{
-    format: "local-aes-256-gcm.v1";
-    ciphertext: Uint8Array;
-    nonce: Uint8Array;
-    authTag: Uint8Array;
-    aadContext: Uint8Array;
-}> | Readonly<{
-    /** Reserved. A future backend must define and conformance-test this. */
-    format: "external-kms-opaque.v1";
-    payloadFormatId: string;
-    opaqueAuthenticatedPayload: Uint8Array;
-}>;
-interface WrappedWorkspaceDekV1 {
-    readonly providerId: string;
-    readonly keyRef: string;
-    readonly keyVersion: number;
-    readonly payload: WrappedWorkspaceDekPayloadV1;
-}
-interface GeneratedWorkspaceDekV1 {
-    /** Transient plaintext; the caller overwrites and drops it in `finally`. */
-    readonly plaintextDek: Uint8Array;
-    readonly wrappedDek: WrappedWorkspaceDekV1;
-}
-interface WorkspaceKekProviderReadinessV1 {
-    readonly ready: boolean;
-    readonly reasonCode?: string;
-}
-/**
- * `readiness()` returning `ready: false`, or any backend/KEK error, denies the
- * credential operation (fail closed). An implementation never falls back to
- * another backend or to plaintext.
- */
-interface WorkspaceKekProviderV1 {
-    readonly contractVersion: typeof WORKSPACE_KEK_PROVIDER_VERSION;
-    readonly providerId: string;
-    generateDataKey(context: WorkspaceKekContextV1): Promise<GeneratedWorkspaceDekV1>;
-    unwrapDataKey(context: WorkspaceKekContextV1, wrapped: WrappedWorkspaceDekV1): Promise<Uint8Array>;
-    rewrapDataKey?(context: WorkspaceKekContextV1, wrapped: WrappedWorkspaceDekV1): Promise<WrappedWorkspaceDekV1>;
-    readiness(): Promise<WorkspaceKekProviderReadinessV1>;
-    close?(): Promise<void>;
-}
-/**
- * The identity a field envelope is cryptographically bound to. Every component
- * is part of the AAD, so moving a row between workspaces, providers, fields,
- * credential versions or DEK generations fails authentication.
- */
-interface CredentialFieldAadContextV1 {
-    readonly workspaceId: string;
-    readonly credentialId: string;
-    readonly providerId: string;
-    readonly fieldId: string;
-    readonly credentialVersion: number;
-    readonly dekGeneration: number;
-}
-/** Logical encrypted field envelope; the DB may normalize `wrappedDek` away. */
-interface CredentialEnvelopeV1 {
-    readonly envelopeVersion: typeof CREDENTIAL_ENVELOPE_VERSION;
-    readonly ciphertext: Uint8Array;
-    readonly nonce: Uint8Array;
-    readonly authTag: Uint8Array;
-    readonly aadContext: Uint8Array;
-}
-
-interface WorkspaceAgentDispatcherContext {
-    workspaceId: string;
-    userId: string;
-}
-type WorkspaceAgentDispatcherSendInput = Omit<AgentSendInput, 'ctx'>;
-interface WorkspaceAgentDispatcherDispatchInput extends WorkspaceAgentDispatcherSendInput {
-    /** Optional user-visible presentation when content carries hidden instructions. */
-    displayMessage?: string;
-    /** Optional title for a newly created addressed session. */
-    title?: string;
-    /** Durable caller-owned idempotency key. */
-    requestId: string;
-    /** Defaults to requestId. */
-    clientNonce?: string;
-    /** Defaults to prompt; follow-up requires a non-negative clientSeq. */
-    kind?: 'prompt' | 'followup';
-    /** Server-only atomic admission for durable background prompt delivery. */
-    requireIdle?: true;
-    clientSeq?: number;
-}
-interface WorkspaceAgentDispatch {
-    ref: AgentSessionRef;
-    receipt: AgentSendReceipt;
-    events: AsyncIterable<AgentEvent>;
-}
-/**
- * Callback-scoped direct Agent capability. The Workspace and operations are
- * lease guarded by the Host and must not be retained after the callback.
- */
-interface LeaseBoundWorkspaceAgent {
-    readonly workspace: Workspace;
-    readonly signal: AbortSignal;
-    dispatch(input: WorkspaceAgentDispatcherDispatchInput, onEvent: (event: AgentEvent) => void | Promise<void>, onAccepted?: (accepted: {
-        readonly ref: AgentSessionRef;
-        readonly receipt: AgentSendReceipt;
-    }) => void | Promise<void>): Promise<{
-        readonly ref: AgentSessionRef;
-        readonly receipt: AgentSendReceipt;
-    }>;
-    interrupt(sessionId: string, requestId: string): Promise<InterruptReceipt>;
-    stop(sessionId: string, requestId: string): Promise<StopReceipt>;
-}
-type AgentInvocationFundingPolicyV1 = 'personal-subscription' | 'api-key-only';
-interface WorkspaceAgentDirectRunInput {
-    readonly agentTypeId: string;
-    readonly context: WorkspaceAgentDispatcherContext;
-    readonly requestId: string;
-    /** Dispatcher invocations are unattended by contract and can never opt into personal OAuth. */
-    readonly fundingPolicy: 'api-key-only';
-}
-type WorkspaceAgentDirectRunCallback = (binding: LeaseBoundWorkspaceAgent) => Promise<void>;
-/** Addressed gateway binding minted by the trusted composition root. */
-interface WorkspaceAgentGatewayBinding {
-    gateway: AgentGateway;
-    scope: AuthorizedAgentScope;
-    agentTypeId: string;
-}
-/**
- * Compatibility-facing delegation surface. New durable callers use dispatch so
- * the addressed ref and accepted Gateway receipt can be persisted before they
- * consume events. send remains for callers that only need the legacy stream.
- */
-interface WorkspaceAgentDispatcher {
-    /** Optional only for source compatibility with pre-Gateway injected resolvers. */
-    dispatch?(input: WorkspaceAgentDispatcherDispatchInput): Promise<WorkspaceAgentDispatch>;
-    send(input: WorkspaceAgentDispatcherSendInput): AsyncIterable<AgentEvent>;
-    interrupt(sessionId: string): Promise<InterruptReceipt>;
-    stop(sessionId: string): Promise<StopReceipt>;
-}
-
-declare const AGENT_RESOURCES_FILESYSTEM_ID: "agent_resources";
-/**
- * Agent-scoped readonly filesystem carrying the knowledge/ folder shipped
- * inside an agent definition package (gh-1107 slice 2). Generic id only —
- * never tenant-named. The binding exists only for the owning agent.
- */
-declare const AGENT_KNOWLEDGE_FILESYSTEM_ID: "agent_knowledge";
-interface AgentSkillResource {
-    readonly filesystem: 'user' | typeof AGENT_RESOURCES_FILESYSTEM_ID | (string & {});
-    readonly path: string;
-}
-
-interface FileSearch {
-    search(glob: string, limit?: number): Promise<string[]>;
-}
-
-export { type AuthorizedWorkspaceCredentialScopeV1 as A, type WorkspaceCredentialAuthorityVerifierV1 as B, type CredentialConsumerBindingId as C, type WorkspaceKekContextV1 as D, type ExternalManagedAccountReferenceDefinitionV1 as E, type FileSearch as F, type GeneratedWorkspaceDekV1 as G, type WorkspaceKekProviderReadinessV1 as H, type WorkspaceKekProviderV1 as I, type WrappedWorkspaceDekPayloadV1 as J, type WrappedWorkspaceDekV1 as K, type LeaseBoundWorkspaceAgent as L, createProviderRegistryV1 as M, type AgentInvocationFundingPolicyV1 as N, type ProviderId as P, type VerifiedWorkspaceCredentialAuthorityV1 as V, WORKSPACE_KEK_PROVIDER_VERSION as W, type CredentialFieldId as a, type ProviderRegistryV1 as b, type ProviderDefinitionV1 as c, type CredentialFieldDefinitionV1 as d, AGENT_KNOWLEDGE_FILESYSTEM_ID as e, AGENT_RESOURCES_FILESYSTEM_ID as f, type AgentSkillResource as g, CREDENTIAL_AAD_ENCODING_VERSION as h, CREDENTIAL_AUTH_TAG_BYTE_LENGTH_V1 as i, CREDENTIAL_DEK_BYTE_LENGTH_V1 as j, CREDENTIAL_ENVELOPE_VERSION as k, CREDENTIAL_KEK_BYTE_LENGTH_V1 as l, CREDENTIAL_NONCE_BYTE_LENGTH_V1 as m, type CredentialEnvelopeV1 as n, type CredentialFieldAadContextV1 as o, type ProviderCategoryV1 as p, type ProviderCredentialDefinitionV1 as q, type VerifiedWorkspaceCredentialPrincipalV1 as r, type WorkspaceAgentDirectRunCallback as s, type WorkspaceAgentDirectRunInput as t, type WorkspaceAgentDispatch as u, type WorkspaceAgentDispatcher as v, type WorkspaceAgentDispatcherContext as w, type WorkspaceAgentDispatcherDispatchInput as x, type WorkspaceAgentDispatcherSendInput as y, type WorkspaceAgentGatewayBinding as z };

package/dist/front/artifacts.d.ts

@@ -1,34 +0,0 @@
-import * as react from 'react';
-import { ReactNode, HTMLAttributes, ComponentProps } from 'react';
-import { Button } from '@hachej/boring-ui-kit';
-import { LucideIcon } from 'lucide-react';
-
-interface OpenArtifactOptions {
-    filesystem?: string;
-}
-type OpenArtifactHandler = (path: string, options?: OpenArtifactOptions) => void;
-interface ArtifactOpenProviderProps {
-    onOpenArtifact?: OpenArtifactHandler;
-    children: ReactNode;
-}
-declare function ArtifactOpenProvider({ onOpenArtifact, children }: ArtifactOpenProviderProps): react.JSX.Element;
-declare function useOpenArtifact(): OpenArtifactHandler | null;
-
-type ArtifactProps = HTMLAttributes<HTMLDivElement>;
-declare const Artifact: ({ className, ...props }: ArtifactProps) => react.JSX.Element;
-type ArtifactHeaderProps = HTMLAttributes<HTMLDivElement>;
-declare const ArtifactHeader: ({ className, ...props }: ArtifactHeaderProps) => react.JSX.Element;
-type ArtifactTitleProps = HTMLAttributes<HTMLParagraphElement>;
-declare const ArtifactTitle: ({ className, ...props }: ArtifactTitleProps) => react.JSX.Element;
-type ArtifactDescriptionProps = HTMLAttributes<HTMLParagraphElement>;
-declare const ArtifactDescription: ({ className, ...props }: ArtifactDescriptionProps) => react.JSX.Element;
-type ArtifactActionsProps = HTMLAttributes<HTMLDivElement>;
-declare const ArtifactActions: ({ className, ...props }: ArtifactActionsProps) => react.JSX.Element;
-type ArtifactActionProps = ComponentProps<typeof Button> & {
-    tooltip?: string;
-    label?: string;
-    icon?: LucideIcon;
-};
-declare const ArtifactAction: ({ tooltip, label, icon: Icon, children, className, size, variant, ...props }: ArtifactActionProps) => react.JSX.Element;
-
-export { Artifact, ArtifactAction, ArtifactActions, ArtifactDescription, ArtifactHeader, ArtifactOpenProvider, ArtifactTitle, type OpenArtifactHandler, useOpenArtifact };

package/dist/front/artifacts.js

@@ -1,21 +0,0 @@
-import {
-  Artifact,
-  ArtifactAction,
-  ArtifactActions,
-  ArtifactDescription,
-  ArtifactHeader,
-  ArtifactOpenProvider,
-  ArtifactTitle,
-  useOpenArtifact
-} from "../chunk-N6THTH7P.js";
-import "../chunk-2BGLZZ7T.js";
-export {
-  Artifact,
-  ArtifactAction,
-  ArtifactActions,
-  ArtifactDescription,
-  ArtifactHeader,
-  ArtifactOpenProvider,
-  ArtifactTitle,
-  useOpenArtifact
-};