@intentic/sandbox-contract 1.240.0 → 1.242.0

package/dist/contracts/keys.contract.d.ts

@@ -0,0 +1,81 @@
+import { z } from "zod";
+export declare const keysContract: {
+    accounts: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        provider: z.ZodEnum<{
+            meta: "meta";
+            zai: "zai";
+        }>;
+    }, z.core.$strip>, z.ZodObject<{
+        accounts: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            email: z.ZodOptional<z.ZodString>;
+            organization: z.ZodOptional<z.ZodString>;
+            scope: z.ZodOptional<z.ZodString>;
+            connectedAt: z.ZodNumber;
+            needsReauth: z.ZodOptional<z.ZodBoolean>;
+            detail: z.ZodOptional<z.ZodString>;
+            usage: z.ZodOptional<z.ZodObject<{
+                windows: z.ZodArray<z.ZodObject<{
+                    kind: z.ZodString;
+                    label: z.ZodOptional<z.ZodString>;
+                    utilization: z.ZodNumber;
+                    resetsAt: z.ZodOptional<z.ZodNumber>;
+                    gates: z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"none">, z.ZodObject<{
+                        models: z.ZodArray<z.ZodString>;
+                    }, z.core.$strip>]>;
+                }, z.core.$strip>>;
+                measuredAt: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    connect: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        provider: z.ZodEnum<{
+            meta: "meta";
+            zai: "zai";
+        }>;
+        apiKey: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        email: z.ZodOptional<z.ZodString>;
+        organization: z.ZodOptional<z.ZodString>;
+        scope: z.ZodOptional<z.ZodString>;
+        connectedAt: z.ZodNumber;
+        needsReauth: z.ZodOptional<z.ZodBoolean>;
+        detail: z.ZodOptional<z.ZodString>;
+        usage: z.ZodOptional<z.ZodObject<{
+            windows: z.ZodArray<z.ZodObject<{
+                kind: z.ZodString;
+                label: z.ZodOptional<z.ZodString>;
+                utilization: z.ZodNumber;
+                resetsAt: z.ZodOptional<z.ZodNumber>;
+                gates: z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"none">, z.ZodObject<{
+                    models: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>]>;
+            }, z.core.$strip>>;
+            measuredAt: z.ZodNumber;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    rename: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        provider: z.ZodEnum<{
+            meta: "meta";
+            zai: "zai";
+        }>;
+        id: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    disconnect: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        provider: z.ZodEnum<{
+            meta: "meta";
+            zai: "zai";
+        }>;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+};
+//# sourceMappingURL=keys.contract.d.ts.map

package/dist/contracts/keys.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/keys.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8BxB,eAAO,MAAM,YAAY;IACrB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IASR,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmBP,MAAM;;;;;;;;;;IASN,UAAU;;;;;;;;;CASb,CAAC"}

package/dist/contracts/keys.contract.js

@@ -0,0 +1,51 @@
+import { oc } from "@orpc/contract";
+import { z } from "zod";
+import { KeyProviderParamSchema } from "../schemas/agent.js";
+import { AccountIdSchema, AccountRenameSchema, OauthAccountListSchema, OauthAccountSchema } from "../schemas/provider-oauth.js";
+import { OkSchema } from "../schemas/shared.js";
+export const keysContract = {
+    accounts: oc
+        .route({
+        method: "GET",
+        path: "/keys/{provider}/accounts",
+        summary: "Connected accounts for a key-based provider",
+        description: "Which keys are connected for this provider. The keys themselves never travel: being in this list is what connected means.",
+    })
+        .input(KeyProviderParamSchema)
+        .output(OauthAccountListSchema),
+    connect: oc
+        .route({
+        method: "POST",
+        path: "/keys/{provider}/connect",
+        summary: "Connect an API key",
+        description: "Stores an API key for this provider and answers with the account it became. A sandbox can hold several keys for one provider side by side.",
+    })
+        .input(KeyProviderParamSchema.extend({
+        apiKey: z.string().min(1).describe("The key, as the provider issued it. Stored in this sandbox and never sent back out."),
+        label: z
+            .string()
+            .max(80)
+            .optional()
+            .describe("What to call it. Blank falls back to the provider's own name, which is all a pasted key can say about itself."),
+    }))
+        .output(OauthAccountSchema),
+    rename: oc
+        .route({
+        method: "POST",
+        path: "/keys/{provider}/account/rename",
+        summary: "Rename one connected key",
+        description: "Nothing in a pasted key says whose it is, so naming it is the only way to tell two of them apart.",
+    })
+        .input(KeyProviderParamSchema.extend(AccountRenameSchema.shape))
+        .output(OkSchema),
+    disconnect: oc
+        .route({
+        method: "POST",
+        path: "/keys/{provider}/account/disconnect",
+        summary: "Disconnect one key",
+        description: "Removes a single stored key. Any others under the same provider stay connected.",
+    })
+        .input(KeyProviderParamSchema.extend(AccountIdSchema.shape))
+        .output(OkSchema),
+};
+//# sourceMappingURL=keys.contract.js.map

package/dist/contracts/keys.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.contract.js","sourceRoot":"","sources":["../../src/contracts/keys.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAChI,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AA2BhD,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,QAAQ,EAAE,EAAE;SACP,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,6CAA6C;QACtD,WAAW,EAAE,2HAA2H;KAC3I,CAAC;SACD,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CAAC,sBAAsB,CAAC;IACnC,OAAO,EAAE,EAAE;SACN,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EACP,4IAA4I;KACnJ,CAAC;SACD,KAAK,CACF,sBAAsB,CAAC,MAAM,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qFAAqF,CAAC;QACzH,KAAK,EAAE,CAAC;aACH,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,EAAE;aACV,QAAQ,CAAC,+GAA+G,CAAC;KACjI,CAAC,CACL;SACA,MAAM,CAAC,kBAAkB,CAAC;IAC/B,MAAM,EAAE,EAAE;SACL,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,mGAAmG;KACnH,CAAC;SACD,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;SAC/D,MAAM,CAAC,QAAQ,CAAC;IACrB,UAAU,EAAE,EAAE;SACT,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,iFAAiF;KACjG,CAAC;SACD,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;SAC3D,MAAM,CAAC,QAAQ,CAAC;CACxB,CAAC"}

package/dist/contracts/panels.contract.d.ts

@@ -4,6 +4,13 @@ export declare const panelsContract: {
             repo: import("zod").ZodString;
             hasPanel: import("zod").ZodBoolean;
             running: import("zod").ZodBoolean;
+            installed: import("zod").ZodBoolean;
+            launch: import("zod").ZodOptional<import("zod").ZodEnum<{
+                exited: "exited";
+                installing: "installing";
+                launching: "launching";
+                starting: "starting";
+            }>>;
             healthy: import("zod").ZodBoolean;
             port: import("zod").ZodOptional<import("zod").ZodNumber>;
             servers: import("zod").ZodArray<import("zod").ZodObject<{

package/dist/contracts/panels.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"panels.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/panels.contract.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc;IACvB,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQJ,KAAK;;;;;IASL,IAAI;;;;;CASP,CAAC"}
+{"version":3,"file":"panels.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/panels.contract.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc;IACvB,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQJ,KAAK;;;;;IASL,IAAI;;;;;CASP,CAAC"}

package/dist/contracts/prepush.contract.js

@@ -1,5 +1,5 @@
 import { oc } from "@orpc/contract";
-import { PrepushRunSchema } from "../schemas/ci.js";
+import { CommandRunSchema } from "../schemas/ci.js";
 import { OkSchema } from "../schemas/shared.js";
 export const prepushContract = {
     state: oc
@@ -9,7 +9,7 @@ export const prepushContract = {
         summary: "How the pre-push check is going",
         description: "The verdict, or the progress so far. Nothing is addressed by id here, because there is one working tree and so exactly one check.",
     })
-        .output(PrepushRunSchema),
+        .output(CommandRunSchema),
     run: oc
         .route({
         method: "POST",

package/dist/contracts/providers.contract.d.ts

@@ -7,6 +7,8 @@ export declare const providersContract: {
             gemini: "gemini";
             grok: "grok";
             kimi: "kimi";
+            meta: "meta";
+            zai: "zai";
         }>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         models: import("zod").ZodArray<import("zod").ZodObject<{

package/dist/contracts/providers.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/providers.contract.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,iBAAiB;IAG1B,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAUT,CAAC"}
+{"version":3,"file":"providers.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/providers.contract.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,iBAAiB;IAG1B,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;CAUT,CAAC"}

package/dist/contracts/runner.contract.d.ts

@@ -80,26 +80,6 @@ export declare const runnerContract: {
             plan?: boolean | undefined;
         } | undefined;
         kind: "question";
-    } | {
-        toolName: string;
-        title?: string | undefined;
-        displayName?: string | undefined;
-        description?: string | undefined;
-        reason?: string | undefined;
-        path?: string | undefined;
-        alwaysLabel?: string | undefined;
-        program?: {
-            text: string;
-            language: "bash" | "javascript";
-            truncated: boolean;
-            spans: {
-                start: number;
-                end: number;
-            }[];
-        } | undefined;
-        explain?: string | undefined;
-        requestId: string;
-        kind: "permission";
     } | {
         kind: "session";
         sessionId: string;
@@ -260,13 +240,6 @@ export declare const runnerContract: {
         cacheCreationTokens?: number | undefined;
         durationMs?: number | undefined;
         numTurns?: number | undefined;
-    } | {
-        status: "allowed" | "allowed_warning" | "rejected";
-        resetsAt?: number | undefined;
-        rateLimitType?: string | undefined;
-        utilization?: number | undefined;
-        kind: "rate_limit_info";
-        account?: string | undefined;
     } | {
         kind: "fast_mode";
         state: "cooldown" | "off" | "on";
@@ -293,11 +266,10 @@ export declare const runnerContract: {
             label?: string | undefined;
             utilization: number;
             resetsAt?: number | undefined;
+            gates: "all" | "none" | {
+                models: string[];
+            };
         }[];
-    } | {
-        tokens: number;
-        contextWindow: number;
-        kind: "context_usage";
     } | {
         kind: "compact";
         trigger: string;
@@ -342,12 +314,6 @@ export declare const runnerContract: {
             event: "result";
             data: unknown;
         };
-    } | {
-        outcome: "ok" | "refunded" | "refused";
-        credits: number;
-        remaining?: number | undefined;
-        kind: "service_receipt";
-        requestId: string;
     } | {
         requestId: string;
         offer: {
@@ -356,11 +322,6 @@ export declare const runnerContract: {
             why?: string | undefined;
         };
         kind: "capability_offer";
-    } | {
-        outcome: "connected" | "unfinished";
-        id?: string | undefined;
-        kind: "capability_outcome";
-        requestId: string;
     } | {
         requestId: string;
         offer: {
@@ -376,13 +337,6 @@ export declare const runnerContract: {
             why?: string | undefined;
         };
         kind: "payment_offer";
-    } | {
-        outcome: "failed" | "paid";
-        amountUsd: string;
-        transaction?: string | undefined;
-        network?: string | undefined;
-        kind: "payment_receipt";
-        requestId: string;
     } | {
         kind: "resolved";
         requestId: string;
@@ -424,10 +378,6 @@ export declare const runnerContract: {
             requestId: string;
             approve: boolean;
         } | undefined;
-    } | {
-        kind: "permission_note";
-        requestId: string;
-        explain: string;
     } | {
         kind: "mode";
         mode: "acceptEdits" | "bypassPermissions" | "default" | "plan";
@@ -452,6 +402,55 @@ export declare const runnerContract: {
         } | undefined;
     } | {
         kind: "done";
+    } | {
+        toolName: string;
+        title?: string | undefined;
+        displayName?: string | undefined;
+        description?: string | undefined;
+        reason?: string | undefined;
+        path?: string | undefined;
+        alwaysLabel?: string | undefined;
+        program?: {
+            text: string;
+            language: "bash" | "javascript";
+            truncated: boolean;
+            spans: {
+                start: number;
+                end: number;
+            }[];
+        } | undefined;
+        explain?: string | undefined;
+        requestId: string;
+        kind: "permission";
+    } | {
+        status: "allowed" | "allowed_warning" | "rejected";
+        resetsAt?: number | undefined;
+        rateLimitType?: string | undefined;
+        utilization?: number | undefined;
+        kind: "rate_limit_info";
+        account?: string | undefined;
+    } | {
+        tokens: number;
+        contextWindow: number;
+        kind: "context_usage";
+    } | {
+        outcome: "ok" | "refunded" | "refused";
+        credits: number;
+        remaining?: number | undefined;
+        kind: "service_receipt";
+        requestId: string;
+    } | {
+        outcome: "connected" | "unfinished";
+        id?: string | undefined;
+        kind: "capability_outcome";
+        requestId: string;
+    } | {
+        outcome: "failed" | "paid";
+        amountUsd: string;
+        transaction?: string | undefined;
+        network?: string | undefined;
+        kind: "payment_receipt";
+        requestId: string;
     }, unknown, void>, import("@orpc/contract").AsyncIteratorClass<{
         requestId: string;
         text: string;
@@ -663,13 +662,6 @@ export declare const runnerContract: {
         cacheCreationTokens?: number | undefined;
         durationMs?: number | undefined;
         numTurns?: number | undefined;
-    } | {
-        status: "allowed" | "allowed_warning" | "rejected";
-        resetsAt?: number | undefined;
-        rateLimitType?: string | undefined;
-        utilization?: number | undefined;
-        kind: "rate_limit_info";
-        account?: string | undefined;
     } | {
         kind: "fast_mode";
         state: "cooldown" | "off" | "on";
@@ -696,11 +688,10 @@ export declare const runnerContract: {
             label?: string | undefined;
             utilization: number;
             resetsAt?: number | undefined;
+            gates: "all" | "none" | {
+                models: string[];
+            };
         }[];
-    } | {
-        tokens: number;
-        contextWindow: number;
-        kind: "context_usage";
     } | {
         kind: "compact";
         trigger: string;
@@ -745,12 +736,6 @@ export declare const runnerContract: {
             event: "result";
             data: unknown;
         };
-    } | {
-        outcome: "ok" | "refunded" | "refused";
-        credits: number;
-        remaining?: number | undefined;
-        kind: "service_receipt";
-        requestId: string;
     } | {
         requestId: string;
         offer: {
@@ -759,11 +744,6 @@ export declare const runnerContract: {
             why?: string | undefined;
         };
         kind: "capability_offer";
-    } | {
-        outcome: "connected" | "unfinished";
-        id?: string | undefined;
-        kind: "capability_outcome";
-        requestId: string;
     } | {
         requestId: string;
         offer: {
@@ -779,13 +759,6 @@ export declare const runnerContract: {
             why?: string | undefined;
         };
         kind: "payment_offer";
-    } | {
-        outcome: "failed" | "paid";
-        amountUsd: string;
-        transaction?: string | undefined;
-        network?: string | undefined;
-        kind: "payment_receipt";
-        requestId: string;
     } | {
         kind: "resolved";
         requestId: string;
@@ -827,10 +800,6 @@ export declare const runnerContract: {
             requestId: string;
             approve: boolean;
         } | undefined;
-    } | {
-        kind: "permission_note";
-        requestId: string;
-        explain: string;
     } | {
         kind: "mode";
         mode: "acceptEdits" | "bypassPermissions" | "default" | "plan";
@@ -855,6 +824,35 @@ export declare const runnerContract: {
         } | undefined;
     } | {
         kind: "done";
+    } | {
+        status: "allowed" | "allowed_warning" | "rejected";
+        resetsAt?: number | undefined;
+        rateLimitType?: string | undefined;
+        utilization?: number | undefined;
+        kind: "rate_limit_info";
+        account?: string | undefined;
+    } | {
+        tokens: number;
+        contextWindow: number;
+        kind: "context_usage";
+    } | {
+        outcome: "ok" | "refunded" | "refused";
+        credits: number;
+        remaining?: number | undefined;
+        kind: "service_receipt";
+        requestId: string;
+    } | {
+        outcome: "connected" | "unfinished";
+        id?: string | undefined;
+        kind: "capability_outcome";
+        requestId: string;
+    } | {
+        outcome: "failed" | "paid";
+        amountUsd: string;
+        transaction?: string | undefined;
+        network?: string | undefined;
+        kind: "payment_receipt";
+        requestId: string;
     }, unknown, void>>, Record<never, never>, Record<never, never>>;
     reply: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"plan">;

package/dist/contracts/runner.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/runner.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,eAAO,MAAM,cAAc;IAIvB,QAAQ;;;;;;IAGR,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;IAGb,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IASP,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIL,KAAK;;;;;;;;;;;;;;IAgBL,eAAe;;;;;IAEf,SAAS;;;;;IAET,IAAI;;;CACP,CAAC"}
+{"version":3,"file":"runner.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/runner.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,eAAO,MAAM,cAAc;IAIvB,QAAQ;;;;;;IAGR,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;IAGb,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IASP,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIL,KAAK;;;;;;;;;;;;;;IAgBL,eAAe;;;;;IAEf,SAAS;;;;;IAET,IAAI;;;CACP,CAAC"}

package/dist/contracts/safety.contract.d.ts

@@ -0,0 +1,35 @@
+import { z } from "zod";
+export declare const safetyContract: {
+    policy: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+        text: z.ZodString;
+        custom: z.ZodBoolean;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    setPolicy: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        text: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    log: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodArray<z.ZodObject<{
+        at: z.ZodNumber;
+        program: z.ZodString;
+        classes: z.ZodArray<z.ZodString>;
+        decision: z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            refuse: "refuse";
+        }>;
+        sentence: z.ZodString;
+        outcome: z.ZodEnum<{
+            allowed: "allowed";
+            asked: "asked";
+            refused: "refused";
+        }>;
+        answer: z.ZodOptional<z.ZodEnum<{
+            allowed: "allowed";
+            declined: "declined";
+            unanswered: "unanswered";
+        }>>;
+        machine: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>, Record<never, never>, Record<never, never>>;
+};
+//# sourceMappingURL=safety.contract.d.ts.map

package/dist/contracts/safety.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/safety.contract.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,eAAO,MAAM,cAAc;IACvB,MAAM;;;;IASN,SAAS;;;;;IAaT,GAAG;;;;;;;;;;;;;;;;;;;;;;CASN,CAAC"}

package/dist/contracts/safety.contract.js

@@ -0,0 +1,32 @@
+import { oc } from "@orpc/contract";
+import { SafetyLogEntrySchema, SafetyPolicySchema } from "../safety-policy.js";
+import { OkSchema } from "../schemas/shared.js";
+import { z } from "zod";
+export const safetyContract = {
+    policy: oc
+        .route({
+        method: "GET",
+        path: "/safety/policy",
+        summary: "The safety policy this sandbox is judged against",
+        description: "The document that decides when an agent stops to ask you before running something. Prose, not settings: it is read by the model that judges each command. When nobody has written one, this is the text the product ships with, and it describes the behaviour a fresh sandbox already has.",
+    })
+        .output(SafetyPolicySchema),
+    setPolicy: oc
+        .route({
+        method: "POST",
+        path: "/safety/policy",
+        summary: "Rewrite the safety policy",
+        description: "Replaces the document whole. Nothing in it can widen what the sandbox is structurally allowed to do: it decides which of the things an agent may already do are worth interrupting you about.",
+    })
+        .input(z.object({ text: z.string().describe("The policy, as you want it written.") }))
+        .output(OkSchema),
+    log: oc
+        .route({
+        method: "GET",
+        path: "/safety/log",
+        summary: "Recent safety verdicts",
+        description: "What was judged lately, what the judge decided, and whether you were interrupted. Newest first. This is where you find out why you were not asked about something, which is the question a policy page otherwise cannot answer.",
+    })
+        .output(z.array(SafetyLogEntrySchema)),
+};
+//# sourceMappingURL=safety.contract.js.map

package/dist/contracts/safety.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.contract.js","sourceRoot":"","sources":["../../src/contracts/safety.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,MAAM,EAAE,EAAE;SACL,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACP,6RAA6R;KACpS,CAAC;SACD,MAAM,CAAC,kBAAkB,CAAC;IAC/B,SAAS,EAAE,EAAE;SACR,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACP,+LAA+L;KACtM,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;SACrF,MAAM,CAAC,QAAQ,CAAC;IAIrB,GAAG,EAAE,EAAE;SACF,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,wBAAwB;QACjC,WAAW,EACP,iOAAiO;KACxO,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;CAC7C,CAAC"}