@immediately-run/preauth-core 0.1.0 → 0.1.2

package/dist/capabilities.d.ts

@@ -1,6 +1,6 @@
 export type CapabilityKind = 'read' | 'action';
 export type CapabilityTier = 'baseline' | 'elevated' | 'first-party-only';
-export type Capability = 'theme:read' | 'theme:set' | 'auth:status' | 'auth:identity' | 'route:read' | 'formFactor:read' | 'mounts:read' | 'spaces:app' | 'spaces:user' | 'spaces:admin' | 'settings:app' | 'settings:fork' | 'settings:all' | 'contribute:self' | 'contribute:any' | 'contribute:direct' | 'editor:read' | 'editor:open' | 'editor:write' | 'editor:document' | 'editor:requestEdit' | 'vcs:read' | 'vcs:reset' | 'dnd:source' | 'catalog:read' | 'commands:read' | 'commands:run' | 'ipc' | 'task:invoke' | 'net:fetch' | 'secrets:add' | 'secrets:list' | 'secrets:revoke' | 'agent:session';
+export type Capability = 'theme:read' | 'theme:set' | 'auth:status' | 'auth:identity' | 'route:read' | 'formFactor:read' | 'mounts:read' | 'spaces:app' | 'spaces:user' | 'spaces:admin' | 'settings:app' | 'settings:fork' | 'settings:all' | 'contribute:self' | 'contribute:any' | 'contribute:direct' | 'editor:read' | 'editor:open' | 'editor:write' | 'editor:document' | 'editor:requestEdit' | 'vcs:read' | 'vcs:reset' | 'dnd:source' | 'catalog:read' | 'commands:read' | 'commands:run' | 'ipc' | 'task:invoke' | 'net:fetch' | 'secrets:add' | 'secrets:list' | 'secrets:revoke' | 'agent:session' | 'diagnostics:read' | 'llm:chat';
 export interface CapabilityDef {
     kind: CapabilityKind;
     tier: CapabilityTier;
@@ -13,10 +13,10 @@ export interface CapabilityDef {
      *  elevated capability can be EARNED by a URL-loaded/previewed app via lazy
      *  first-use or manifest-`requests` consent and recorded as a per-`(user,
      *  appKey)` grant; non-app-scoped elevated caps are never earnable that way
-     *  (region binding only). The app-scoped set is `net:fetch`, `task:invoke`, and
+     *  (region binding only). The app-scoped set is `net:fetch`, `task:invoke`,
      *  `contribute:self` (decision #1 — its baseline→elevated reclassification landed
-     *  in R3-33d; the durable grant participates in the §8.15 90-day expiry like any
-     *  app-scoped grant). */
+     *  in R3-33d), and `diagnostics:read` (R3-74 / P3-72, D4); the durable grant
+     *  participates in the §8.15 90-day expiry like any app-scoped grant. */
     appScoped?: boolean;
     /** Render this capability's consent line with the platform's **maximally-
      *  explicit** (scariest) styling, never bundled into a combined prompt
@@ -27,10 +27,10 @@ export interface CapabilityDef {
     maximallyExplicit?: boolean;
 }
 export declare const CAPABILITIES: Record<Capability, CapabilityDef>;
-/** The current registry/vocabulary version (§5.11). Bumped to 1.2.0 with the
- *  per-user settings-space capabilities (`settings:app`/`settings:fork`/
- *  `settings:all`), mirroring capabilities.json. */
-export declare const REGISTRY_VERSION = "1.2.0";
+/** The current registry/vocabulary version (§5.11). Bumped to 1.3.0 with the
+ *  provider-agnostic `llm:chat` capability (the `llm.chat@1` slot), mirroring
+ *  capabilities.json. (1.2.0 added the per-user settings-space capabilities.) */
+export declare const REGISTRY_VERSION = "1.3.0";
 /** Is `cap` a known kernel capability? (Closed vocabulary — §5.12.) */
 export declare function isKnownCapability(cap: string): cap is Capability;
 export declare function tierOf(cap: Capability): CapabilityTier;

package/dist/capabilities.js

@@ -153,12 +153,37 @@ exports.CAPABILITIES = {
     'secrets:add': { kind: 'action', tier: 'elevated', since: '1.1.0' },
     'secrets:list': { kind: 'read', tier: 'elevated', since: '1.1.0' },
     'secrets:revoke': { kind: 'action', tier: 'elevated', since: '1.1.0' },
-    'agent:session': { kind: 'action', tier: 'elevated', since: '1.0.0' },
+    // R3-76 (P3-74, LLM_AND_AGENTS_SPEC §3.4/§4; LOCAL_DEV_AUTHED_SERVER_SPEC):
+    // open and drive a user-local Claude Code via the bridge — the in-browser host
+    // kernel connects OUT to the CLI's authenticated localhost server and runs each
+    // tool call through its §8.4-gated invoke(). Promoted from proposed/since:null
+    // to a defined, gated, elevated capability landing in the current 1.2.0
+    // registry — gated host-side by `protocol-agent` (site-main actionGate) and held
+    // by the Agent-panel system app. Elevated and NOT app-scoped: a URL-loaded app
+    // cannot earn it via lazy/manifest consent (region binding only) — driving the
+    // user's local machine is first-party-grade authority, never silently earnable.
+    'agent:session': { kind: 'action', tier: 'elevated', since: '1.2.0' },
+    // R3-74 (P3-72, LLM_AND_AGENTS_SPEC §3.3/§4, D4): a sibling agent app reading the
+    // PREVIEWED app's own build/transpile errors + captured console — the in-browser
+    // analogue of a local agent reading compiler output. App-scoped elevated so a
+    // URL-loaded agent can EARN it via lazy/manifest consent (a clean, withholdable
+    // consent line, D4); read-only and scoped to the paired previewed app's own
+    // diagnostics (no cross-app bleed — enforced host-side by the channel projection).
+    'diagnostics:read': { kind: 'action', tier: 'elevated', since: '1.2.0', appScoped: true },
+    // SERVICE_PROVIDERS_SPEC `llm.chat@1` / LLM_AND_AGENTS_SPEC D5: invoke the shared,
+    // provider-agnostic chat slot. The app calls ONE slot; the host resolves which
+    // vendor answers from the key the user holds (`SecretView.boundOrigin`) + their
+    // `preferredImplementation` choice, injects the key host-side (§6, look-at-nothing
+    // proxy), and streams normalized deltas back. The app never names a vendor, never
+    // sees the key, and needs NO `net:fetch`/`secrets` grant of its own — only this.
+    // Elevated + app-scoped: a fork/previewed app EARNS it via lazy/manifest consent
+    // (the fork-needs-more-caps story), recorded as a per-(user,appKey) §8.15 grant.
+    'llm:chat': { kind: 'action', tier: 'elevated', since: '1.3.0', appScoped: true },
 };
-/** The current registry/vocabulary version (§5.11). Bumped to 1.2.0 with the
- *  per-user settings-space capabilities (`settings:app`/`settings:fork`/
- *  `settings:all`), mirroring capabilities.json. */
-exports.REGISTRY_VERSION = '1.2.0';
+/** The current registry/vocabulary version (§5.11). Bumped to 1.3.0 with the
+ *  provider-agnostic `llm:chat` capability (the `llm.chat@1` slot), mirroring
+ *  capabilities.json. (1.2.0 added the per-user settings-space capabilities.) */
+exports.REGISTRY_VERSION = '1.3.0';
 /** Is `cap` a known kernel capability? (Closed vocabulary — §5.12.) */
 function isKnownCapability(cap) {
     return Object.prototype.hasOwnProperty.call(exports.CAPABILITIES, cap);

package/package.json

@@ -1,8 +1,12 @@
 {
   "name": "@immediately-run/preauth-core",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "The shared §8.9 pre-auth target check + the single grant-mint path (mintConsentedGrants) + the capability vocabulary + the byte-faithful grant/space/net-fetch document layout. Consumed by site-main (browser Firestore) and the backend (admin Firestore) so there is ONE gate, ONE mint path, ONE wire layout.",
   "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/immediately-run/immediately-run-preauth-core.git"
+  },
   "type": "commonjs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",