@hachej/boring-agent 0.1.89 → 0.1.91

package/dist/{workspaceAgentDispatcher-CKEeNPjW.d.ts → lease-2aXepSBL.d.ts}

@@ -1,7 +1,46 @@
+import { D as InterruptReceipt, j as StopReceipt, p as AgentDefinitionErrorCode, q as AgentDeploymentErrorCode } from './piChatEvent-DBO3M5lu.js';
+import { p as AgentSendInput, j as AgentEvent } from './harness-Bt_GMNYR.js';
+import { b as AgentSessionRef, n as AgentSendReceipt, A as AgentGateway, a as AuthorizedAgentScope } from './errors-BEmw9HMp.js';
 import { z } from 'zod';
-import { p as AgentDefinitionErrorCode, q as AgentDeploymentErrorCode, D as InterruptReceipt, j as StopReceipt } from './piChatEvent-nmOBSNU9.js';
-import { a as Workspace } from './sandbox-DthfJaOB.js';
-import { p as AgentSendInput, j as AgentEvent } from './harness-VvP0l5Mj.js';
+import { b as Workspace } from './sandbox-DAD8cWQR.js';
+
+interface WorkspaceAgentDispatcherContext {
+    workspaceId: string;
+    userId: string;
+}
+type WorkspaceAgentDispatcherSendInput = Omit<AgentSendInput, 'ctx'>;
+interface WorkspaceAgentDispatcherDispatchInput extends WorkspaceAgentDispatcherSendInput {
+    /** Durable caller-owned idempotency key. */
+    requestId: string;
+    /** Defaults to requestId. */
+    clientNonce?: string;
+    /** Defaults to prompt; follow-up requires a non-negative clientSeq. */
+    kind?: 'prompt' | 'followup';
+    clientSeq?: number;
+}
+interface WorkspaceAgentDispatch {
+    ref: AgentSessionRef;
+    receipt: AgentSendReceipt;
+    events: AsyncIterable<AgentEvent>;
+}
+/** Addressed gateway binding minted by the trusted composition root. */
+interface WorkspaceAgentGatewayBinding {
+    gateway: AgentGateway;
+    scope: AuthorizedAgentScope;
+    agentTypeId: string;
+}
+/**
+ * Compatibility-facing delegation surface. New durable callers use dispatch so
+ * the addressed ref and accepted Gateway receipt can be persisted before they
+ * consume events. send remains for callers that only need the legacy stream.
+ */
+interface WorkspaceAgentDispatcher {
+    /** Optional only for source compatibility with pre-Gateway injected resolvers. */
+    dispatch?(input: WorkspaceAgentDispatcherDispatchInput): Promise<WorkspaceAgentDispatch>;
+    send(input: WorkspaceAgentDispatcherSendInput): AsyncIterable<AgentEvent>;
+    interrupt(sessionId: string): Promise<InterruptReceipt>;
+    stop(sessionId: string): Promise<StopReceipt>;
+}
 
 interface SandboxHandleRecord {
     workspaceId: string;
@@ -17,10 +56,6 @@ interface SandboxHandleStore {
     list(): Promise<SandboxHandleRecord[]>;
 }
 
-interface FileSearch {
-    search(glob: string, limit?: number): Promise<string[]>;
-}
-
 type Sha256Digest = `sha256:${string}`;
 
 interface AgentSchemaIssue<Code extends string> {
@@ -47,11 +82,8 @@ interface AgentDefinition {
     definitionId: string;
     version: string;
     label?: string;
+    description?: string;
     instructionsRef: string;
-    capabilityRequirements?: string[];
-    toolRefs?: string[];
-    skillRefs?: string[];
-    mcpServerRefs?: string[];
 }
 interface AgentDefinitionReference {
     definitionId: string;
@@ -94,6 +126,50 @@ declare function createAgentDefinitionDigest(input: {
 }): Promise<Sha256Digest>;
 declare function createAgentDeploymentDigest(deployment: AgentDeployment): Promise<Sha256Digest>;
 
+/**
+ * Browser CustomEvent name dispatched on `window` after the workspace's
+ * agent-plugin hot reload subscriber commits a registry change (load,
+ * unload, or error).
+ *
+ * Declared in `@hachej/boring-agent` (not `@hachej/boring-workspace`)
+ * so the agent's ChatPanel — which listens for this event to refresh
+ * its slash-command palette / banner state — can import it without
+ * creating a workspace → agent → workspace cycle. Workspace's
+ * `useAgentPluginHotReload` imports the same constant.
+ */
+declare const WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT = "boring-ui:agent-plugins-reloaded";
+/**
+ * One per plugin that loaded successfully but whose server-side surfaces
+ * (Fastify routes / agent tools) still hold pre-reload code. Shared
+ * between the agent's /reload HTTP route + the ChatPanel banner so the
+ * agent layer has ONE declaration of this wire shape. Mirrors what the
+ * workspace's `collectRestartWarnings()` emits (workspace owns the
+ * canonical `PluginRestartWarning` type; we redeclare here only because
+ * the agent layer must not depend on workspace).
+ */
+interface PluginRestartWarning {
+    id: string;
+    surfaces: string[];
+    message: string;
+}
+/**
+ * Browser CustomEvent name dispatched on `window` when a `showNotification`
+ * UI command arrives from the server (e.g. from a plugin slash command that
+ * calls `notify()`). `PiChatPanel` listens for this to show the
+ * `CommandRunStatus` banner above the composer.
+ */
+declare const WORKSPACE_COMMAND_NOTIFY_EVENT = "boring-ui:command-notify";
+/**
+ * Payload carried by `WORKSPACE_COMMAND_NOTIFY_EVENT`. Maps directly to
+ * what `uiCommandDispatcher` extracts from the `showNotification` command.
+ */
+interface CommandNotifyPayload {
+    message: string;
+    tone: 'success' | 'error' | 'info' | 'warn';
+    /** Name of the command that triggered the notification (without leading slash). */
+    command?: string;
+}
+
 declare const OpaqueShareLocatorIdSchema: z.ZodEffects<z.ZodString, string, string>;
 interface ShareEntryProvenance {
     producerPrincipalRef: string;
@@ -257,58 +333,177 @@ type ShareEntryResolution = {
 declare function resolveShareEntry(store: ShareEntryStore, id: string, workspace: Workspace): Promise<ShareEntryResolution>;
 
 /**
- * Browser CustomEvent name dispatched on `window` after the workspace's
- * agent-plugin hot reload subscriber commits a registry change (load,
- * unload, or error).
- *
- * Declared in `@hachej/boring-agent` (not `@hachej/boring-workspace`)
- * so the agent's ChatPanel — which listens for this event to refresh
- * its slash-command palette / banner state — can import it without
- * creating a workspace → agent → workspace cycle. Workspace's
- * `useAgentPluginHotReload` imports the same constant.
+ * Opaque, in-process Core capability. The brand symbol and constructor are not
+ * exported; Core records issued object identity in a private WeakMap.
  */
-declare const WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT = "boring-ui:agent-plugins-reloaded";
-/**
- * One per plugin that loaded successfully but whose server-side surfaces
- * (Fastify routes / agent tools) still hold pre-reload code. Shared
- * between the agent's /reload HTTP route + the ChatPanel banner so the
- * agent layer has ONE declaration of this wire shape. Mirrors what the
- * workspace's `collectRestartWarnings()` emits (workspace owns the
- * canonical `PluginRestartWarning` type; we redeclare here only because
- * the agent layer must not depend on workspace).
- */
-interface PluginRestartWarning {
-    id: string;
-    surfaces: string[];
-    message: string;
+declare const authorizedWorkspaceCredentialScopeBrand: unique symbol;
+interface AuthorizedWorkspaceCredentialScopeV1 {
+    readonly contractVersion: "boring.authorized-workspace-credential-scope.v1";
+    readonly [authorizedWorkspaceCredentialScopeBrand]: true;
 }
-/**
- * Browser CustomEvent name dispatched on `window` when a `showNotification`
- * UI command arrives from the server (e.g. from a plugin slash command that
- * calls `notify()`). `PiChatPanel` listens for this to show the
- * `CommandRunStatus` banner above the composer.
- */
-declare const WORKSPACE_COMMAND_NOTIFY_EVENT = "boring-ui:command-notify";
-/**
- * Payload carried by `WORKSPACE_COMMAND_NOTIFY_EVENT`. Maps directly to
- * what `uiCommandDispatcher` extracts from the `showNotification` command.
- */
-interface CommandNotifyPayload {
-    message: string;
-    tone: 'success' | 'error' | 'info' | 'warn';
-    /** Name of the command that triggered the notification (without leading slash). */
-    command?: string;
+type VerifiedWorkspaceCredentialPrincipalV1 = Readonly<{
+    kind: "user";
+    userId: string;
+    membershipRole: "owner" | "editor" | "viewer";
+}> | Readonly<{
+    kind: "system";
+    principalId: string;
+    workspaceGrantId: string;
+}>;
+interface VerifiedWorkspaceCredentialAuthorityV1 {
+    readonly workspaceId: string;
+    readonly appId: string;
+    readonly principal: VerifiedWorkspaceCredentialPrincipalV1;
+    readonly authorizationReceiptId: string;
+    readonly expiresAt: string;
+}
+/** Core-owned verifier; a TypeScript cast or copied object is never authority. */
+interface WorkspaceCredentialAuthorityVerifierV1 {
+    readonly contractVersion: "boring.workspace-credential-authority-verifier.v1";
+    verifyCurrent(scope: AuthorizedWorkspaceCredentialScopeV1): Promise<VerifiedWorkspaceCredentialAuthorityV1>;
 }
 
-interface WorkspaceAgentDispatcherContext {
-    workspaceId: string;
-    userId: string;
+type ProviderId = string & {
+    readonly __providerId: unique symbol;
+};
+type CredentialFieldId = string & {
+    readonly __credentialFieldId: unique symbol;
+};
+type CredentialConsumerBindingId = string & {
+    readonly __credentialConsumerBindingId: unique symbol;
+};
+type ProviderCategoryV1 = "llm" | "search" | "transcription" | "mcp" | "other";
+interface CredentialFieldDefinitionV1 {
+    readonly id: CredentialFieldId;
+    readonly label: string;
+    readonly required: boolean;
+    readonly sensitivity: "secret" | "public";
+    readonly minBytes?: number;
+    readonly maxBytes: number;
 }
-type WorkspaceAgentDispatcherSendInput = Omit<AgentSendInput, 'ctx'>;
-interface WorkspaceAgentDispatcher {
-    send(input: WorkspaceAgentDispatcherSendInput): AsyncIterable<AgentEvent>;
-    interrupt(sessionId: string): Promise<InterruptReceipt>;
-    stop(sessionId: string): Promise<StopReceipt>;
+interface ExternalManagedAccountReferenceDefinitionV1 {
+    readonly label: string;
+    readonly maxBytes: number;
+    readonly persistence: "server-only-metadata";
+}
+type ProviderCredentialDefinitionV1 = Readonly<{
+    type: "api-key";
+    fields: readonly CredentialFieldDefinitionV1[];
+}> | Readonly<{
+    type: "oauth2-authorization-code";
+    tokenCustody: "local-vault";
+    clientRegistrationRef: string;
+    authorizationEndpoint: `https://${string}`;
+    tokenEndpoint: `https://${string}`;
+    revocationEndpoint?: `https://${string}`;
+    scopes: readonly string[];
+    usePkce: true;
+    refreshTokenField: CredentialFieldDefinitionV1;
+    resolvedAccessTokenField: CredentialFieldDefinitionV1;
+    accessTokenPersistence: "memory-only";
+}> | Readonly<{
+    type: "oauth2-authorization-code";
+    tokenCustody: "external-managed";
+    custodianAdapterId: string;
+    connectUrlOrigins: readonly `https://${string}`[];
+    scopes: readonly string[];
+    accountReference: ExternalManagedAccountReferenceDefinitionV1;
+    delivery: "host-session-adapter-only";
+}> | Readonly<{
+    type: "none";
+}>;
+interface ProviderDefinitionV1 {
+    readonly contractVersion: "boring.provider.v1";
+    readonly id: ProviderId;
+    readonly displayName: string;
+    readonly category: ProviderCategoryV1;
+    readonly credential: ProviderCredentialDefinitionV1;
+    readonly consumerBindingIds: readonly CredentialConsumerBindingId[];
+    readonly sandboxEgressOrigins: readonly `https://${string}`[];
+    readonly mcp?: Readonly<{
+        transport: "streamable-http";
+        endpoint?: `https://${string}`;
+        toolkitId?: string;
+        allowedTools: readonly string[];
+        deniedTools: readonly string[];
+    }>;
+}
+interface ProviderRegistryV1 {
+    readonly contractVersion: "boring.provider-registry.v1";
+    list(): readonly ProviderDefinitionV1[];
+    require(providerId: ProviderId): ProviderDefinitionV1;
+}
+declare function createProviderRegistryV1(defs: readonly ProviderDefinitionV1[]): ProviderRegistryV1;
+
+type CredentialConsumerKindV1 = "model-provider" | "first-party-tool" | "plugin-server" | "mcp-server" | "tenant-custom-tool";
+type CredentialDeliveryV1 = "host-only" | "sandbox-pipe" | "sandbox-tmpfs";
+/** Immutable authority registered by the host beside the tool/provider catalog. */
+interface CredentialConsumerBindingV1 {
+    readonly contractVersion: "boring.credential-consumer-binding.v1";
+    readonly id: CredentialConsumerBindingId;
+    readonly providerId: ProviderId;
+    readonly consumer: Readonly<{
+        id: string;
+        kind: CredentialConsumerKindV1;
+        trust: "trusted" | "untrusted";
+    }>;
+    readonly purpose: string;
+    readonly allowedFieldIds: readonly CredentialFieldId[];
+    readonly delivery: CredentialDeliveryV1;
+    readonly sandbox?: Readonly<{
+        credentialChannel: "fd-3" | "tmpfs-v1";
+        egressOrigins: readonly `https://${string}`[];
+    }>;
+}
+interface CredentialConsumerBindingRegistryV1 {
+    readonly contractVersion: "boring.credential-consumer-bindings.v1";
+    require(bindingId: CredentialConsumerBindingId): CredentialConsumerBindingV1;
+}
+declare function createCredentialConsumerBindingRegistryV1(bindings: readonly CredentialConsumerBindingV1[], providerRegistry: ProviderRegistryV1): CredentialConsumerBindingRegistryV1;
+
+declare const PROVIDER_CREDENTIAL_REF_VERSION: "boring.provider-credential-ref.v1";
+/** Constructed by a trusted factory from a registered binding. */
+interface ProviderCredentialRefV1 {
+    readonly contractVersion: typeof PROVIDER_CREDENTIAL_REF_VERSION;
+    readonly providerId: ProviderId;
+    readonly executionId: string;
+    readonly bindingId: CredentialConsumerBindingId;
+}
+interface ProviderCredentialRefFactoryV1 {
+    readonly contractVersion: "boring.provider-credential-ref-factory.v1";
+    create(input: Readonly<{
+        providerId: ProviderId;
+        executionId: string;
+        bindingId: CredentialConsumerBindingId;
+    }>): ProviderCredentialRefV1;
+}
+declare function createProviderCredentialRefFactoryV1(bindingRegistry: CredentialConsumerBindingRegistryV1): ProviderCredentialRefFactoryV1;
+
+type ResolvedCredentialMaterialV1 = Readonly<{
+    kind: "field-set";
+    fields: ReadonlyMap<CredentialFieldId, Uint8Array>;
+}> | Readonly<{
+    kind: "external-managed-account";
+    custodianAdapterId: string;
+    opaqueAccountReference: Uint8Array;
+}> | Readonly<{
+    kind: "none";
+}>;
+interface ResolvedCredentialLeaseV1 {
+    readonly contractVersion: "boring.resolved-credential.v1";
+    readonly workspaceId: string;
+    readonly providerId: ProviderId;
+    readonly credentialVersion: number;
+    readonly executionId: string;
+    /** Server implementation may use a Node byte array; shared stays Uint8Array. */
+    readonly material: ResolvedCredentialMaterialV1;
+    readonly expiresAt: string;
+    /** Idempotent best-effort overwrite and reference release. */
+    dispose(): void;
+}
+interface WorkspaceCredentialResolverV1 {
+    readonly contractVersion: "boring.workspace-credential-resolver.v1";
+    resolve(workspace: AuthorizedWorkspaceCredentialScopeV1, ref: ProviderCredentialRefV1): Promise<ResolvedCredentialLeaseV1>;
 }
 
-export { type AgentDeployment as A, WORKSPACE_COMMAND_NOTIFY_EVENT as B, type CompiledAgentBundle as C, type WorkspaceAgentDispatcherSendInput as D, createAgentAssetDigest as E, type FileSearch as F, createAgentDefinitionDigest as G, createAgentDeploymentDigest as H, InMemoryShareEntryStore as I, resolveShareEntry as J, validateAgentDefinition as K, validateAgentDeployment as L, OpaqueRefSchema as O, type PluginRestartWarning as P, type SandboxHandleStore as S, type WorkspaceAgentDispatcherContext as W, type SandboxHandleRecord as a, type Sha256Digest as b, type ShareEntryStore as c, type WorkspaceAgentDispatcher as d, SchemaValidationError as e, type AgentSchemaIssue as f, type AgentSchemaValidationResult as g, type AgentDefinition as h, type AgentDefinitionDigestAsset as i, type AgentDefinitionReference as j, AgentDefinitionValidationError as k, AgentDeploymentValidationError as l, type CommandNotifyPayload as m, type CompiledAgentDefinition as n, type CreateShareEntryInput as o, OpaqueShareLocatorIdSchema as p, Sha256DigestSchema as q, ShareEntryErrorCode as r, type ShareEntryProvenance as s, ShareEntryProvenanceSchema as t, type ShareEntryResolution as u, type ShareEntryTombstone as v, type ShareEntryV1 as w, ShareEntryV1Schema as x, ShareEntryValidationError as y, WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT as z };
+export { ShareEntryValidationError as $, type AgentDeployment as A, type CredentialDeliveryV1 as B, type CompiledAgentBundle as C, type CredentialFieldDefinitionV1 as D, type ExternalManagedAccountReferenceDefinitionV1 as E, OpaqueShareLocatorIdSchema as F, PROVIDER_CREDENTIAL_REF_VERSION as G, type ProviderCategoryV1 as H, InMemoryShareEntryStore as I, type ProviderCredentialDefinitionV1 as J, type ProviderCredentialRefFactoryV1 as K, type ProviderDefinitionV1 as L, type SandboxHandleRecord as M, Sha256DigestSchema as N, OpaqueRefSchema as O, type PluginRestartWarning as P, ShareEntryErrorCode as Q, type ResolvedCredentialMaterialV1 as R, type SandboxHandleStore as S, type ShareEntryProvenance as T, ShareEntryProvenanceSchema as U, type VerifiedWorkspaceCredentialAuthorityV1 as V, type WorkspaceAgentDispatcherContext as W, type ShareEntryResolution as X, type ShareEntryTombstone as Y, type ShareEntryV1 as Z, ShareEntryV1Schema as _, type Sha256Digest as a, type VerifiedWorkspaceCredentialPrincipalV1 as a0, WORKSPACE_AGENT_PLUGINS_RELOADED_EVENT as a1, WORKSPACE_COMMAND_NOTIFY_EVENT as a2, type WorkspaceAgentDispatch as a3, type WorkspaceAgentDispatcherDispatchInput as a4, type WorkspaceAgentDispatcherSendInput as a5, type WorkspaceAgentGatewayBinding as a6, createAgentAssetDigest as a7, createAgentDefinitionDigest as a8, createAgentDeploymentDigest as a9, createCredentialConsumerBindingRegistryV1 as aa, createProviderCredentialRefFactoryV1 as ab, createProviderRegistryV1 as ac, resolveShareEntry as ad, validateAgentDefinition as ae, validateAgentDeployment as af, type ShareEntryStore as b, type WorkspaceAgentDispatcher as c, type ProviderId as d, type CredentialFieldId as e, type AuthorizedWorkspaceCredentialScopeV1 as f, type WorkspaceCredentialAuthorityVerifierV1 as g, type CredentialConsumerBindingRegistryV1 as h, type ProviderRegistryV1 as i, type WorkspaceCredentialResolverV1 as j, type ProviderCredentialRefV1 as k, type ResolvedCredentialLeaseV1 as l, SchemaValidationError as m, type AgentSchemaIssue as n, type AgentSchemaValidationResult as o, type CredentialConsumerBindingId as p, type AgentDefinition as q, type AgentDefinitionDigestAsset as r, type AgentDefinitionReference as s, AgentDefinitionValidationError as t, AgentDeploymentValidationError as u, type CommandNotifyPayload as v, type CompiledAgentDefinition as w, type CreateShareEntryInput as x, type CredentialConsumerBindingV1 as y, type CredentialConsumerKindV1 as z };

package/dist/{protocol-B_OQKfbI.d.ts → middleware-CzW8n7B7.d.ts}

@@ -1,20 +1,5 @@
-import { W as WorkspaceRuntimeContext, S as Sandbox, d as Stat, e as Entry, b as ExecResult, c as WorkspaceChangeEvent } from './sandbox-DthfJaOB.js';
-
-interface BwrapResourceLimits {
-    cpuSeconds?: number;
-    fileSizeBlocks?: number;
-    maxProcesses?: number;
-    openFiles?: number;
-    virtualMemoryKb?: number;
-}
-interface CreateBwrapSandboxOptions {
-    hostWorkspaceRoot?: string;
-    runtimeContext?: WorkspaceRuntimeContext;
-    network?: 'shared' | 'isolated';
-    dropAllCapabilities?: boolean;
-    resourceLimits?: BwrapResourceLimits;
-}
-declare function createBwrapSandbox(opts?: CreateBwrapSandboxOptions): Sandbox;
+import { d as Stat, e as Entry, a as ExecResult, W as WorkspaceChangeEvent } from './sandbox-DAD8cWQR.js';
+import { FastifyRequest, FastifyReply } from 'fastify';
 
 declare const REMOTE_WORKER_RUNTIME_CWD = "/workspace";
 declare const REMOTE_WORKER_PROVIDER = "remote-worker";
@@ -101,4 +86,21 @@ interface RemoteWorkerFsEventEnvelope {
     event: WorkspaceChangeEvent;
 }
 
-export { type BwrapResourceLimits as B, type CreateBwrapSandboxOptions as C, type RemoteWorkerWorkspaceOp as R, WORKER_INTERNAL_TOKEN_HEADER as W, type RemoteWorkerWorkspaceResult as a, type RemoteWorkerExecRequest as b, REMOTE_WORKER_PROVIDER as c, REMOTE_WORKER_RUNTIME_CWD as d, type RemoteWorkerErrorPayload as e, type RemoteWorkerExecResponse as f, type RemoteWorkerFsEventEnvelope as g, WORKER_REQUEST_ID_HEADER as h, WORKER_WORKSPACE_ID_HEADER as i, createBwrapSandbox as j };
+interface WorkspaceContext {
+    workspaceId: string;
+    authenticated: boolean;
+}
+interface AuthMiddlewareOptions {
+    authToken?: string;
+    workspaceId?: string;
+    publicPaths?: string[];
+    onDevModeWarning?: (message: string) => void;
+}
+declare module 'fastify' {
+    interface FastifyRequest {
+        workspaceContext: WorkspaceContext;
+    }
+}
+declare function createAuthMiddleware(opts?: AuthMiddlewareOptions): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+
+export { type RemoteWorkerWorkspaceOp as R, WORKER_INTERNAL_TOKEN_HEADER as W, type RemoteWorkerWorkspaceResult as a, type RemoteWorkerExecRequest as b, REMOTE_WORKER_PROVIDER as c, REMOTE_WORKER_RUNTIME_CWD as d, type RemoteWorkerErrorPayload as e, type RemoteWorkerExecResponse as f, type RemoteWorkerFsEventEnvelope as g, WORKER_REQUEST_ID_HEADER as h, WORKER_WORKSPACE_ID_HEADER as i, createAuthMiddleware as j };