@hachej/boring-agent 0.1.79 → 0.1.81

package/dist/shared/index.js

@@ -1,13 +1,15 @@
 import {
   AgentDefinitionValidationError,
   AgentDeploymentValidationError,
+  OpaqueRefSchema,
+  Sha256DigestSchema,
   createAgentAssetDigest,
   createAgentDefinitionDigest,
   createAgentDeploymentDigest,
   validateAgentDefinition,
   validateAgentDeployment,
   validateTool
-} from "../chunk-Q42DWR3T.js";
+} from "../chunk-S2HYQYJP.js";
 import {
   AGENT_NOT_IMPLEMENTED_UNTIL_T1,
   AgentNotImplementedError,
@@ -44,12 +46,13 @@ import {
   extractToolUiMetadata,
   isToolUiMetadata,
   sanitizeToolUiMetadata2 as sanitizeToolUiMetadata
-} from "../chunk-P23XFC4W.js";
+} from "../chunk-3RSYCAHO.js";
 import {
   noopTelemetry,
   safeCapture
 } from "../chunk-AQBXNPMD.js";
 import {
+  AgentConsumptionErrorCode,
   AgentDefinitionErrorCode,
   AgentDeploymentErrorCode,
   ApiErrorPayloadSchema,
@@ -57,7 +60,7 @@ import {
   ERROR_CODES,
   ErrorCode,
   ErrorLogFieldsSchema
-} from "../chunk-YVON2BHN.js";
+} from "../chunk-YV6D7GCQ.js";
 
 // src/shared/config-schema.ts
 import { z } from "zod";
@@ -122,15 +125,166 @@ var PI_AGENT_RUNTIME_CAPABILITIES = {
   nativeFollowUp: true,
   aiSdkOwnsHistory: false
 };
+
+// src/shared/agent-consumption.ts
+import { z as z2 } from "zod";
+var nonEmptyString = z2.string().min(1);
+var TASK_STATES = [
+  "submitted",
+  "working",
+  "input-required",
+  "completed",
+  "failed",
+  "canceled",
+  "rejected"
+];
+var TaskStateSchema = z2.enum(TASK_STATES);
+var TASK_TRANSITIONS = {
+  submitted: ["working", "rejected", "canceled"],
+  working: ["input-required", "completed", "failed", "canceled", "rejected"],
+  "input-required": ["working", "canceled"],
+  completed: [],
+  failed: [],
+  canceled: [],
+  rejected: []
+};
+function isValidTaskTransition(from, to) {
+  return TASK_TRANSITIONS[from].includes(to);
+}
+function assertValidTransition(from, to) {
+  if (!isValidTaskTransition(from, to)) {
+    throw new AgentConsumptionValidationError({
+      code: AgentConsumptionErrorCode.enum.AGENT_CONSUMPTION_INVALID_TRANSITION,
+      field: "state",
+      message: `invalid task state transition: '${from}' -> '${to}'`
+    });
+  }
+}
+var PrincipalRefSchema = z2.object({
+  userId: nonEmptyString,
+  workspaceId: nonEmptyString
+}).strict();
+var AgentRefSchema = z2.object({
+  agentId: nonEmptyString,
+  deploymentId: nonEmptyString.optional()
+}).strict();
+function agentRefEquals(a, b) {
+  return a.agentId === b.agentId && (a.deploymentId ?? null) === (b.deploymentId ?? null);
+}
+var ArtifactRefSchema = z2.object({
+  artifactId: nonEmptyString,
+  name: z2.string().optional(),
+  mimeType: nonEmptyString,
+  uri: nonEmptyString
+}).strict();
+var PartSchema = z2.discriminatedUnion("type", [
+  z2.object({ type: z2.literal("text"), text: z2.string() }).strict(),
+  z2.object({ type: z2.literal("file"), file: ArtifactRefSchema }).strict(),
+  z2.object({ type: z2.literal("data"), mimeType: nonEmptyString, data: z2.unknown() }).strict()
+]);
+var AgentMessageSchema = z2.object({
+  role: z2.enum(["consumer", "agent"]),
+  parts: z2.array(PartSchema),
+  ts: nonEmptyString
+}).strict();
+var AgentTaskSchema = z2.object({
+  id: nonEmptyString,
+  contextId: nonEmptyString,
+  state: TaskStateSchema,
+  messages: z2.array(AgentMessageSchema),
+  artifacts: z2.array(ArtifactRefSchema),
+  principal: PrincipalRefSchema,
+  actor: AgentRefSchema.optional(),
+  schemaVersion: z2.literal("1"),
+  createdAt: nonEmptyString,
+  updatedAt: nonEmptyString
+}).strict();
+function formatIssuePath(path) {
+  if (path.length === 0) return "<root>";
+  return path.reduce(
+    (result, part) => typeof part === "number" ? `${result}[${part}]` : result.length === 0 ? String(part) : `${result}.${String(part)}`,
+    ""
+  );
+}
+function schemaMismatchIssues(issues) {
+  return issues.map((issue) => {
+    const field = formatIssuePath(issue.path);
+    return {
+      code: AgentConsumptionErrorCode.enum.AGENT_CONSUMPTION_SCHEMA_MISMATCH,
+      field,
+      message: field === "<root>" ? issue.message : `${field} ${issue.message}`
+    };
+  });
+}
+function validateAgentTask(raw) {
+  const result = AgentTaskSchema.safeParse(raw);
+  if (!result.success) {
+    return { valid: false, issues: schemaMismatchIssues(result.error.issues) };
+  }
+  return { valid: true, value: result.data };
+}
+var AgentConsumptionValidationError = class extends Error {
+  code = ErrorCode.enum.CONFIG_INVALID;
+  field;
+  validationCode;
+  constructor(issue) {
+    super(issue.message);
+    this.name = "AgentConsumptionValidationError";
+    this.field = issue.field;
+    this.validationCode = issue.code;
+  }
+};
+var ConsumptionGuardsSchema = z2.object({
+  maxDepth: z2.number().int().positive(),
+  inputRequiredTimeoutMs: z2.number().int().positive()
+}).strict();
+function validateConsumptionGuards(raw) {
+  const result = ConsumptionGuardsSchema.safeParse(raw);
+  if (!result.success) {
+    return { valid: false, issues: schemaMismatchIssues(result.error.issues) };
+  }
+  return { valid: true, value: result.data };
+}
+function detectConsumptionCycle(chain, next) {
+  return chain.some((ref) => agentRefEquals(ref, next));
+}
+function assertNoConsumptionCycle(chain, next) {
+  if (detectConsumptionCycle(chain, next)) {
+    const label = next.deploymentId ? `${next.agentId}@${next.deploymentId}` : next.agentId;
+    throw new AgentConsumptionValidationError({
+      code: AgentConsumptionErrorCode.enum.AGENT_CONSUMPTION_CYCLE_DETECTED,
+      field: "actor",
+      message: `consumption cycle detected: agent '${label}' already present in the delegation chain`
+    });
+  }
+}
+function isWithinConsumptionDepth(chain, guards) {
+  return chain.length < guards.maxDepth;
+}
+function assertWithinConsumptionDepth(chain, guards) {
+  if (!isWithinConsumptionDepth(chain, guards)) {
+    throw new AgentConsumptionValidationError({
+      code: AgentConsumptionErrorCode.enum.AGENT_CONSUMPTION_DEPTH_EXCEEDED,
+      field: "depth",
+      message: `consumption depth exceeded: chain length ${chain.length} >= max depth ${guards.maxDepth}`
+    });
+  }
+}
 export {
   AGENT_NOT_IMPLEMENTED_UNTIL_T1,
+  AgentConsumptionErrorCode,
+  AgentConsumptionValidationError,
   AgentDefinitionErrorCode,
   AgentDefinitionValidationError,
   AgentDeploymentErrorCode,
   AgentDeploymentValidationError,
+  AgentMessageSchema,
   AgentNotImplementedError,
+  AgentRefSchema,
+  AgentTaskSchema,
   ApiErrorPayloadSchema,
   ApiErrorResponseSchema,
+  ArtifactRefSchema,
   BoringChatMessageSchema,
   BoringChatPartSchema,
   ChatAttachmentPayloadSchema,
@@ -138,6 +292,7 @@ export {
   ChatModelSelectionSchema,
   CommandReceiptSchema,
   ConfigSchema,
+  ConsumptionGuardsSchema,
   DEFAULT_AGENT_RUNTIME_CAPABILITIES,
   ERROR_CODES,
   EnvSchema,
@@ -146,35 +301,50 @@ export {
   FollowUpPayloadSchema,
   FollowUpReceiptSchema,
   InterruptPayloadSchema,
+  OpaqueRefSchema,
   PI_AGENT_RUNTIME_CAPABILITIES,
+  PartSchema,
   PiChatEventSchema,
   PiChatHeartbeatFrameSchema,
   PiChatSnapshotSchema,
   PiChatStatusSchema,
   PiChatStreamFrameSchema,
+  PrincipalRefSchema,
   PromptPayloadSchema,
   PromptReceiptSchema,
   QueueClearPayloadSchema,
   QueueClearReceiptSchema,
   QueuedUserMessageSchema,
   RuntimeModeSchema,
+  Sha256DigestSchema,
   StopPayloadSchema,
   StopReceiptSchema,
+  TASK_STATES,
+  TaskStateSchema,
   ThinkingLevelSchema,
   ToolUiMetadataSchema,
   WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT,
   WORKSPACE_COMMAND_NOTIFY_EVENT,
+  agentRefEquals,
+  assertNoConsumptionCycle,
+  assertValidTransition,
+  assertWithinConsumptionDepth,
   createAgentAssetDigest,
   createAgentDefinitionDigest,
   createAgentDeploymentDigest,
+  detectConsumptionCycle,
   extractToolUiMetadata,
   isToolUiMetadata,
+  isValidTaskTransition,
+  isWithinConsumptionDepth,
   noopTelemetry,
   safeCapture,
   sanitizeToolUiMetadata,
   sessionStreamPath,
   validateAgentDefinition,
   validateAgentDeployment,
+  validateAgentTask,
   validateConfig,
+  validateConsumptionGuards,
   validateTool
 };

package/dist/{workspaceAgentDispatcher-D3ZEBsH1.d.ts → workspaceAgentDispatcher-BbNd3y7u.d.ts}

@@ -1,5 +1,6 @@
-import { A as AgentDefinitionErrorCode, p as AgentDeploymentErrorCode, z as InterruptReceipt, i as StopReceipt } from './piChatEvent-D0yuLiJh.js';
-import { p as AgentSendInput, i as AgentEvent } from './harness-DD0zj704.js';
+import { z } from 'zod';
+import { p as AgentDefinitionErrorCode, q as AgentDeploymentErrorCode, D as InterruptReceipt, i as StopReceipt } from './piChatEvent-DtqYMcID.js';
+import { p as AgentSendInput, j as AgentEvent } from './harness-If4r1n-K.js';
 
 interface SandboxHandleRecord {
     workspaceId: string;
@@ -67,6 +68,8 @@ type AgentSchemaValidationResult<T, Code extends string> = {
     valid: false;
     issues: AgentSchemaIssue<Code>[];
 };
+declare const OpaqueRefSchema: z.ZodEffects<z.ZodString, string, string>;
+declare const Sha256DigestSchema: z.ZodEffects<z.ZodString, `sha256:${string}`, string>;
 declare function validateAgentDefinition(raw: unknown): AgentSchemaValidationResult<AgentDefinition, AgentDefinitionErrorCode>;
 declare function validateAgentDeployment(raw: unknown): AgentSchemaValidationResult<AgentDeployment, AgentDeploymentErrorCode>;
 declare function createAgentAssetDigest(content: string): Promise<Sha256Digest>;
@@ -143,4 +146,4 @@ interface WorkspaceAgentDispatcher {
     stop(sessionId: string): Promise<StopReceipt>;
 }
 
-export { type AgentDefinition as A, type CompiledAgentBundle as C, type FileSearch as F, type PluginRestartWarning as P, type SandboxHandleStore as S, type WorkspaceAgentDispatcherContext as W, type SandboxHandleRecord as a, type WorkspaceAgentDispatcher as b, type AgentDefinitionDigestAsset as c, type AgentDefinitionReference as d, AgentDefinitionValidationError as e, type AgentDeployment as f, AgentDeploymentValidationError as g, type AgentSchemaIssue as h, type AgentSchemaValidationResult as i, type CommandNotifyPayload as j, type CompiledAgentDefinition as k, type Sha256Digest as l, WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT as m, WORKSPACE_COMMAND_NOTIFY_EVENT as n, type WorkspaceAgentDispatcherSendInput as o, createAgentAssetDigest as p, createAgentDefinitionDigest as q, createAgentDeploymentDigest as r, validateAgentDeployment as s, validateAgentDefinition as v };
+export { type AgentDeployment as A, type CompiledAgentBundle as C, type FileSearch as F, OpaqueRefSchema as O, type PluginRestartWarning as P, type SandboxHandleStore as S, type WorkspaceAgentDispatcherContext as W, type SandboxHandleRecord as a, type Sha256Digest as b, type WorkspaceAgentDispatcher as c, type AgentSchemaIssue as d, type AgentSchemaValidationResult as e, type AgentDefinition as f, type AgentDefinitionDigestAsset as g, type AgentDefinitionReference as h, AgentDefinitionValidationError as i, AgentDeploymentValidationError as j, type CommandNotifyPayload as k, type CompiledAgentDefinition as l, Sha256DigestSchema as m, WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT as n, WORKSPACE_COMMAND_NOTIFY_EVENT as o, type WorkspaceAgentDispatcherSendInput as p, createAgentAssetDigest as q, createAgentDefinitionDigest as r, createAgentDeploymentDigest as s, validateAgentDeployment as t, validateAgentDefinition as v };

package/docs/ERROR_CODES.md

@@ -61,6 +61,9 @@ All API failures must use the response envelope:
 | `TOOL_NOT_FOUND` | Requested tool name not present in catalog | 404 | user-fix | warn | stable (public API) |
 | `TOOL_INVALID_INPUT` | Tool input fails schema validation | 400 | user-fix | warn | stable (public API) |
 | `TOOL_EXECUTION_ERROR` | Tool threw or returned execution failure | 500 | report-bug | error | stable (public API) |
+| `MCP_AGENT_ARTIFACT_INVALID` | Managed MCP delivery artifact is path-shaped, non-Markdown, binary, malformed UTF-8, or otherwise invalid | 400 | user-fix | warn | stable (public API) |
+| `MCP_AGENT_ARTIFACT_TOO_LARGE` | Managed MCP final text, inline Markdown artifact, or serialized result exceeds the delivery v0 byte cap | 413 | user-fix | warn | stable (public API) |
+| `MCP_AGENT_ARTIFACT_UNAVAILABLE` | Managed MCP artifact is missing, unreadable through the authorized workspace, or changed during read | 409 | retry | warn | stable (public API) |
 | `PLUGIN_LOAD_FAILED` | Plugin failed to load/register | 500 | report-bug | error | stable (public API) |
 | `PLUGIN_NAME_COLLISION` | Plugin name collides with existing tool/plugin | 409 | user-fix | warn | stable (public API) |
 | `PLUGIN_RUNTIME_REVISION_MISMATCH` | Browser requested a stale plugin runtime revision after reload | 409 | retry | warn | stable (public API) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-agent",
-  "version": "0.1.79",
+  "version": "0.1.81",
   "type": "module",
   "license": "MIT",
   "description": "Pane-embeddable coding agent. Ships direct/local/vercel-sandbox execution modes behind one interface.",
@@ -84,7 +84,7 @@
     "use-stick-to-bottom": "^1.1.6",
     "yaml": "^2.9.0",
     "zod": "^3.25.76",
-    "@hachej/boring-ui-kit": "0.1.79"
+    "@hachej/boring-ui-kit": "0.1.81"
   },
   "devDependencies": {
     "@antithesishq/bombadil": "0.6.1",