@hachej/boring-agent 0.1.111 → 0.2.0

package/dist/share-entry-CxS6UJ_L.d.ts

@@ -1,330 +0,0 @@
-import { C as CredentialConsumerBindingId, P as ProviderId, a as CredentialFieldId, b as ProviderRegistryV1, c as ProviderDefinitionV1, d as CredentialFieldDefinitionV1, A as AuthorizedWorkspaceCredentialScopeV1 } from './file-search-BUgMSKZE.js';
-import { z } from 'zod';
-import { A as AgentDefinitionErrorCode, p as AgentDeploymentErrorCode } from './piChatEvent-DpE0lIb9.js';
-import { b as Workspace } from './sandbox-BMhut3kh.js';
-
-type CredentialConsumerKindV1 = "model-provider" | "first-party-tool" | "plugin-server" | "mcp-server" | "tenant-custom-tool";
-type CredentialDeliveryV1 = "host-only" | "sandbox-pipe" | "sandbox-tmpfs";
-/** Immutable authority registered by the host beside the tool/provider catalog. */
-interface CredentialConsumerBindingV1 {
-    readonly contractVersion: "boring.credential-consumer-binding.v1";
-    readonly id: CredentialConsumerBindingId;
-    readonly providerId: ProviderId;
-    readonly consumer: Readonly<{
-        id: string;
-        kind: CredentialConsumerKindV1;
-        trust: "trusted" | "untrusted";
-    }>;
-    readonly purpose: string;
-    readonly allowedFieldIds: readonly CredentialFieldId[];
-    readonly delivery: CredentialDeliveryV1;
-    readonly sandbox?: Readonly<{
-        credentialChannel: "fd-3" | "tmpfs-v1";
-        egressOrigins: readonly `https://${string}`[];
-    }>;
-}
-interface CredentialConsumerBindingRegistryV1 {
-    readonly contractVersion: "boring.credential-consumer-bindings.v1";
-    require(bindingId: CredentialConsumerBindingId): CredentialConsumerBindingV1;
-}
-declare function providerCredentialFieldsV1(provider: ProviderDefinitionV1): readonly CredentialFieldDefinitionV1[];
-declare function createCredentialConsumerBindingRegistryV1(bindings: readonly CredentialConsumerBindingV1[], providerRegistry: ProviderRegistryV1): CredentialConsumerBindingRegistryV1;
-
-declare const PROVIDER_CREDENTIAL_REF_VERSION: "boring.provider-credential-ref.v1";
-/** Constructed by a trusted factory from a registered binding. */
-interface ProviderCredentialRefV1 {
-    readonly contractVersion: typeof PROVIDER_CREDENTIAL_REF_VERSION;
-    readonly providerId: ProviderId;
-    readonly executionId: string;
-    readonly bindingId: CredentialConsumerBindingId;
-}
-interface ProviderCredentialRefFactoryV1 {
-    readonly contractVersion: "boring.provider-credential-ref-factory.v1";
-    create(input: Readonly<{
-        providerId: ProviderId;
-        executionId: string;
-        bindingId: CredentialConsumerBindingId;
-    }>): ProviderCredentialRefV1;
-}
-declare function createProviderCredentialRefFactoryV1(bindingRegistry: CredentialConsumerBindingRegistryV1): ProviderCredentialRefFactoryV1;
-
-type ResolvedCredentialMaterialV1 = Readonly<{
-    kind: "field-set";
-    fields: ReadonlyMap<CredentialFieldId, Uint8Array>;
-}> | Readonly<{
-    kind: "external-managed-account";
-    custodianAdapterId: string;
-    opaqueAccountReference: Uint8Array;
-}> | Readonly<{
-    kind: "none";
-}>;
-interface ResolvedCredentialLeaseV1 {
-    readonly contractVersion: "boring.resolved-credential.v1";
-    readonly workspaceId: string;
-    readonly providerId: ProviderId;
-    readonly credentialVersion: number;
-    readonly executionId: string;
-    /** Server implementation may use a Node byte array; shared stays Uint8Array. */
-    readonly material: ResolvedCredentialMaterialV1;
-    readonly expiresAt: string;
-    /** Idempotent best-effort overwrite and reference release. */
-    dispose(): void;
-}
-interface WorkspaceCredentialResolverV1 {
-    readonly contractVersion: "boring.workspace-credential-resolver.v1";
-    resolve(workspace: AuthorizedWorkspaceCredentialScopeV1, ref: ProviderCredentialRefV1): Promise<ResolvedCredentialLeaseV1>;
-}
-
-interface SandboxHandleRecord {
-    workspaceId: string;
-    sandboxId: string;
-    snapshotId?: string;
-    createdAt: string;
-    lastUsedAt: string;
-}
-interface SandboxHandleStore {
-    get(workspaceId: string): Promise<SandboxHandleRecord | null>;
-    put(record: SandboxHandleRecord): Promise<void>;
-    delete(workspaceId: string): Promise<void>;
-    list(): Promise<SandboxHandleRecord[]>;
-}
-
-type Sha256Digest = `sha256:${string}`;
-
-interface AgentSchemaIssue<Code extends string> {
-    code: Code;
-    field: string;
-    message: string;
-}
-type AgentSchemaValidationResult<T, Code extends string> = {
-    valid: true;
-    value: T;
-} | {
-    valid: false;
-    issues: AgentSchemaIssue<Code>[];
-};
-declare abstract class SchemaValidationError<Code extends string> extends Error {
-    readonly code: "CONFIG_INVALID";
-    readonly field: string;
-    readonly validationCode: Code;
-    constructor(issue: AgentSchemaIssue<Code>);
-}
-
-interface AgentDefinition {
-    schemaVersion: 1;
-    definitionId: string;
-    version: string;
-    label?: string;
-    description?: string;
-    instructionsRef: string;
-}
-interface AgentDefinitionReference {
-    definitionId: string;
-    version: string;
-    digest: Sha256Digest;
-}
-interface AgentDeployment {
-    deploymentId: string;
-    version: string;
-    agentId: string;
-    definition: AgentDefinitionReference;
-}
-interface AgentDefinitionDigestAsset {
-    path: string;
-    digest: Sha256Digest;
-    content: string;
-}
-type CompiledAgentDefinition = {
-    readonly [Key in keyof AgentDefinition]: AgentDefinition[Key] extends readonly string[] | undefined ? readonly string[] | undefined : AgentDefinition[Key];
-};
-interface CompiledAgentBundle {
-    readonly definition: CompiledAgentDefinition;
-    readonly definitionDigest: Sha256Digest;
-    readonly assets: readonly Readonly<AgentDefinitionDigestAsset>[];
-    /**
-     * Host path of the package's optional `knowledge/` folder. Present only
-     * when the compiled package ships knowledge; the folder's file bytes are
-     * already folded into `definitionDigest` via `assets`.
-     */
-    readonly knowledgeDir?: string;
-}
-declare const OpaqueRefSchema: z.ZodEffects<z.ZodString, string, string>;
-declare const Sha256DigestSchema: z.ZodEffects<z.ZodString, `sha256:${string}`, string>;
-declare function validateAgentDefinition(raw: unknown): AgentSchemaValidationResult<AgentDefinition, AgentDefinitionErrorCode>;
-declare function validateAgentDeployment(raw: unknown): AgentSchemaValidationResult<AgentDeployment, AgentDeploymentErrorCode>;
-declare function createAgentAssetDigest(content: string): Promise<Sha256Digest>;
-declare class AgentDefinitionValidationError extends SchemaValidationError<AgentDefinitionErrorCode> {
-    constructor(issue: AgentSchemaIssue<AgentDefinitionErrorCode>);
-}
-declare class AgentDeploymentValidationError extends SchemaValidationError<AgentDeploymentErrorCode> {
-    constructor(issue: AgentSchemaIssue<AgentDeploymentErrorCode>);
-}
-declare function createAgentDefinitionDigest(input: {
-    definition: CompiledAgentDefinition;
-    assets: readonly AgentDefinitionDigestAsset[];
-}): Promise<Sha256Digest>;
-declare function createAgentDeploymentDigest(deployment: AgentDeployment): Promise<Sha256Digest>;
-
-declare const OpaqueShareLocatorIdSchema: z.ZodEffects<z.ZodString, string, string>;
-interface ShareEntryProvenance {
-    producerPrincipalRef: string;
-    createdAt: string;
-}
-declare const ShareEntryProvenanceSchema: z.ZodObject<{
-    producerPrincipalRef: z.ZodString;
-    createdAt: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    createdAt: string;
-    producerPrincipalRef: string;
-}, {
-    createdAt: string;
-    producerPrincipalRef: string;
-}>;
-/**
- * Lane W same-workspace share entry (AR1-001-SPEC.md §3.1): a live reference
- * to a file in the SAME workspace the consumer already belongs to. No blob
- * capture — nothing crosses a workspace boundary. `path` is SERVER-INTERNAL
- * and MUST NOT be emitted in any URL/API/audit surface a later bead builds.
- */
-interface ShareEntryV1 {
-    schemaVersion: 1;
-    id: string;
-    workspaceId: string;
-    /** SERVER-INTERNAL live path; never emitted in URL/API/audit. */
-    path: string;
-    provenance: ShareEntryProvenance;
-}
-declare const ShareEntryV1Schema: z.ZodObject<{
-    schemaVersion: z.ZodLiteral<1>;
-    id: z.ZodEffects<z.ZodString, string, string>;
-    workspaceId: z.ZodEffects<z.ZodString, string, string>;
-    path: z.ZodString;
-    provenance: z.ZodObject<{
-        producerPrincipalRef: z.ZodString;
-        createdAt: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        createdAt: string;
-        producerPrincipalRef: string;
-    }, {
-        createdAt: string;
-        producerPrincipalRef: string;
-    }>;
-}, "strict", z.ZodTypeAny, {
-    id: string;
-    path: string;
-    workspaceId: string;
-    schemaVersion: 1;
-    provenance: {
-        createdAt: string;
-        producerPrincipalRef: string;
-    };
-}, {
-    id: string;
-    path: string;
-    workspaceId: string;
-    schemaVersion: 1;
-    provenance: {
-        createdAt: string;
-        producerPrincipalRef: string;
-    };
-}>;
-/**
- * Refusal codes for Lane W share resolution (AR1-001-SPEC.md §3.3/§5).
- * Graduated into the public {@link ErrorCode}/`ERROR_CODES` registry (and
- * `docs/ERROR_CODES.md`) by AR1-003, the first runtime route
- * (`GET /a/:id`, `server/http/routes/deepLink.ts`) that surfaces these over
- * an API boundary — following the same registry precedent used for
- * `MCP_AGENT_ARTIFACT_*` (graduated when `managedAgentDelegate.ts` started
- * surfacing them). These are the ONLY two AR1-specific codes for Lane W:
- * "Access denial is the existing generic membership denial, not an AR1
- * code" (spec §3.3) — this module does not invent a third.
- */
-declare const ShareEntryErrorCode: z.ZodEnum<["AR1_SHARE_NOT_FOUND", "AR1_SHARE_TOMBSTONED"]>;
-type ShareEntryErrorCode = z.infer<typeof ShareEntryErrorCode>;
-/**
- * Input-validation failures for {@link ShareEntryStore.create}. Deliberately
- * NOT an `AR1_*` code (the spec's §5 table names exactly two Lane W codes for
- * resolution outcomes; this reuses the existing generic `CONFIG_INVALID`
- * taxonomy for malformed create-input, the same way `SchemaValidationError`
- * subclasses elsewhere in this package do).
- */
-declare const ShareEntryValidationCode: z.ZodEnum<["SHARE_ENTRY_INPUT_INVALID"]>;
-type ShareEntryValidationCode = z.infer<typeof ShareEntryValidationCode>;
-declare class ShareEntryValidationError extends Error {
-    readonly code: "CONFIG_INVALID";
-    readonly field: string;
-    constructor(issue: AgentSchemaIssue<ShareEntryValidationCode>);
-}
-interface CreateShareEntryInput {
-    workspaceId: string;
-    /** SERVER-INTERNAL live path. Never persist/return this in a public surface. */
-    path: string;
-    provenance: {
-        producerPrincipalRef: string;
-        /** Defaults to the store's creation time when omitted. */
-        createdAt?: string;
-    };
-}
-interface ShareEntryStore {
-    /** Validates `input`, mints a fresh opaque `id`, and persists the entry. */
-    create(input: CreateShareEntryInput): Promise<ShareEntryV1>;
-    get(id: string): Promise<ShareEntryV1 | null>;
-    delete(id: string): Promise<void>;
-    /** Lists entries scoped to one workspace (never leaks across workspaces). */
-    list(workspaceId: string): Promise<ShareEntryV1[]>;
-}
-/**
- * In-memory reference implementation. Lane W has no durability requirement
- * beyond "the repo's existing persistence seam" named by this bead (a simple
- * keyed-record store, mirroring `SandboxHandleStore`/`SessionStore` in this
- * same package) — a durable adapter is a swap-in behind the same interface
- * when a later bead needs one; this store does not invent a new store
- * technology.
- */
-declare class InMemoryShareEntryStore implements ShareEntryStore {
-    private readonly entries;
-    create(input: CreateShareEntryInput): Promise<ShareEntryV1>;
-    get(id: string): Promise<ShareEntryV1 | null>;
-    delete(id: string): Promise<void>;
-    list(workspaceId: string): Promise<ShareEntryV1[]>;
-}
-/** Redacted, path-free projection of a tombstoned entry (spec §3.3/§1: no path in any error surface). */
-interface ShareEntryTombstone {
-    id: string;
-    workspaceId: string;
-    provenance: ShareEntryProvenance;
-}
-type ShareEntryResolution = {
-    status: 'ok';
-    entry: ShareEntryV1;
-} | {
-    status: 'not_found';
-    code: typeof ShareEntryErrorCode.enum.AR1_SHARE_NOT_FOUND;
-} | {
-    status: 'tombstoned';
-    code: typeof ShareEntryErrorCode.enum.AR1_SHARE_TOMBSTONED;
-    tombstone: ShareEntryTombstone;
-};
-/**
- * Resolves a share entry against the CURRENT state of the workspace file
- * (live-reference semantics, spec §3.2 — deliberately not a snapshot). The
- * caller must already have resolved and authorized `workspace` for
- * `entry.workspaceId`; this function performs no membership check itself
- * (spec §3.3: "Access denial is the existing generic membership denial, not
- * an AR1 code").
- *
- * - No such entry -> `not_found` (`AR1_SHARE_NOT_FOUND`).
- * - Entry exists but the target file is gone -> `tombstoned`
- *   (`AR1_SHARE_TOMBSTONED`), carrying provenance + last-known metadata and
- *   NEVER the path (never a bare 404, never source state).
- * - Entry exists and the target file stats successfully -> `ok`, with the
- *   full (server-internal) entry for the caller to act on.
- *
- * Any `workspace.stat` rejection (not just a "does not exist" error) is
- * treated as "target gone" — the spec's fail-safe is to render a tombstone,
- * never a bare 404; a later bead may narrow this to distinguish stat
- * failure causes if that proves necessary.
- */
-declare function resolveShareEntry(store: ShareEntryStore, id: string, workspace: Workspace): Promise<ShareEntryResolution>;
-
-export { type AgentSchemaIssue as A, type ShareEntryTombstone as B, type CompiledAgentBundle as C, type ShareEntryV1 as D, ShareEntryV1Schema as E, ShareEntryValidationError as F, createAgentAssetDigest as G, createAgentDefinitionDigest as H, InMemoryShareEntryStore as I, createAgentDeploymentDigest as J, createCredentialConsumerBindingRegistryV1 as K, createProviderCredentialRefFactoryV1 as L, providerCredentialFieldsV1 as M, resolveShareEntry as N, OpaqueRefSchema as O, type ProviderCredentialRefV1 as P, validateAgentDefinition as Q, type ResolvedCredentialLeaseV1 as R, SchemaValidationError as S, validateAgentDeployment as T, type WorkspaceCredentialResolverV1 as W, type Sha256Digest as a, type AgentSchemaValidationResult as b, type AgentDefinition as c, type AgentDefinitionDigestAsset as d, type AgentDefinitionReference as e, AgentDefinitionValidationError as f, type AgentDeployment as g, AgentDeploymentValidationError as h, type CompiledAgentDefinition as i, type CreateShareEntryInput as j, type CredentialConsumerBindingRegistryV1 as k, type CredentialConsumerBindingV1 as l, type CredentialConsumerKindV1 as m, type CredentialDeliveryV1 as n, OpaqueShareLocatorIdSchema as o, PROVIDER_CREDENTIAL_REF_VERSION as p, type ProviderCredentialRefFactoryV1 as q, type ResolvedCredentialMaterialV1 as r, type SandboxHandleRecord as s, type SandboxHandleStore as t, Sha256DigestSchema as u, ShareEntryErrorCode as v, type ShareEntryProvenance as w, ShareEntryProvenanceSchema as x, type ShareEntryResolution as y, type ShareEntryStore as z };